@fenglimg/fabric-cli 2.2.0-rc.9 → 2.2.0

package/dist/{chunk-YM4XATJF.js → chunk-722JU5BP.js}

@@ -97,6 +97,8 @@ async function runPlanContextHint(opts) {
     () => ({
       by_type: {},
       by_layer: { team: 0, personal: 0, project: 0 },
+      broad_by_type: {},
+      narrow_total: 0,
       dropped_other_project: 0,
       total: 0
     })

package/dist/{context-7NUKXDB6.js → context-UJCGYOT6.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runPlanContextHint
-} from "./chunk-YM4XATJF.js";
+} from "./chunk-722JU5BP.js";
 import "./chunk-WA3DYGSY.js";
 
 // src/commands/context.ts

package/dist/index.js

@@ -23,7 +23,7 @@ import { defineCommand, renderUsage, runCommand, runMain } from "citty";
 // src/commands/index.ts
 var allCommands = {
   // v2.2.0-rc.5: pipeline-based install with TUI renderer (EPIC-005/006/007/008)
-  install: () => import("./install-v2-I6PJ6IFT.js").then((module) => module.installCommand),
+  install: () => import("./install-v2-3KJX3YRO.js").then((module) => module.installCommand),
   // v2.1.0-rc.1 P3: multi-store lifecycle command group (list/add/remove/explain).
   store: () => import("./store-HOCORVL3.js").then((module) => module.default),
   // v2.1.0-rc.1 P3 (S9/S17/S37): multi-store pull --rebase + push, conflict resume.
@@ -38,7 +38,7 @@ var allCommands = {
   doctor: () => import("./doctor-MDTZWKBK.js").then((module) => module.default),
   uninstall: () => import("./uninstall-IFN2KYBK.js").then((module) => module.default),
   config: () => import("./config-A3LTECAY.js").then((module) => module.default),
-  "plan-context-hint": () => import("./plan-context-hint-G75R4P4J.js").then((module) => module.default),
+  "plan-context-hint": () => import("./plan-context-hint-5TNGH3R4.js").then((module) => module.default),
   // v2.0.0-rc.23 TASK-014 (F8c): S5 onboard-slot coverage. Used by the
   // fabric-archive Skill's first-run phase to detect unclaimed slots.
   "onboard-coverage": () => import("./onboard-coverage-XSG77LL3.js").then((module) => module.default),
@@ -46,7 +46,7 @@ var allCommands = {
   metrics: () => import("./metrics-HMFH4YHK.js").then((module) => module.default),
   // Block 5 (Option X): show what SessionStart injects (shared renderer with the
   // hook → byte-identical). --explain for per-entry provenance.
-  context: () => import("./context-7NUKXDB6.js").then((module) => module.default)
+  context: () => import("./context-UJCGYOT6.js").then((module) => module.default)
 };
 
 // src/lib/error-render.ts
@@ -153,7 +153,7 @@ async function customShowUsageGrouped(cmd, parent, version) {
 var main = defineCommand({
   meta: {
     name: "fabric",
-    version: "2.2.0-rc.9",
+    version: "2.2.0",
     description: t("cli.main.description")
   },
   subCommands: allCommands
@@ -165,7 +165,7 @@ async function customShowUsage(cmd, parent) {
     return;
   }
   if (cmdMeta?.name === "fabric" && parent === void 0) {
-    await customShowUsageGrouped(cmd, parent, "2.2.0-rc.9");
+    await customShowUsageGrouped(cmd, parent, "2.2.0");
     return;
   }
   console.log(await renderUsage(cmd, parent) + "\n");

package/dist/{install-v2-I6PJ6IFT.js → install-v2-3KJX3YRO.js}

@@ -1738,7 +1738,7 @@ function readProjectName(target) {
   return basename(target);
 }
 function getCliVersion() {
-  return true ? "2.2.0-rc.9" : "unknown";
+  return true ? "2.2.0" : "unknown";
 }
 function sortRecord(record) {
   return Object.fromEntries(Object.entries(record).sort(([left], [right]) => left.localeCompare(right)));

package/dist/{plan-context-hint-G75R4P4J.js → plan-context-hint-5TNGH3R4.js}

@@ -3,7 +3,7 @@ import {
   planContextHintCommand,
   plan_context_hint_default,
   runPlanContextHint
-} from "./chunk-YM4XATJF.js";
+} from "./chunk-722JU5BP.js";
 import "./chunk-WA3DYGSY.js";
 export {
   plan_context_hint_default as default,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fenglimg/fabric-cli",
-  "version": "2.2.0-rc.9",
+  "version": "2.2.0",
   "description": "Fabric CLI — installs the MCP server + skills + hooks for Claude Code and Codex CLI; runs doctor / knowledge maintenance.",
   "license": "MIT",
   "author": "wangzhichao <fenglimg90@gmail.com>",
@@ -46,8 +46,8 @@
     "tree-sitter-javascript": "^0.25.0",
     "tree-sitter-typescript": "^0.23.2",
     "web-tree-sitter": "^0.26.8",
-    "@fenglimg/fabric-server": "2.2.0-rc.9",
-    "@fenglimg/fabric-shared": "2.2.0-rc.9"
+    "@fenglimg/fabric-server": "2.2.0",
+    "@fenglimg/fabric-shared": "2.2.0"
   },
   "devDependencies": {
     "@types/node": "^22.15.0",

package/templates/hooks/fabric-hint.cjs

@@ -248,12 +248,18 @@ const ARCHIVE_NORMATIVE_KEYWORDS = [
 // (D6): a workspace that crossed the edit threshold but produced no high-value
 // signal stays quiet. watermarkTs null (never archived) → treat all events as
 // past-watermark (a never-archived repo with any edit signal is worth nudging).
-function hasHighValueArchiveSignal(events, watermarkTs) {
+// crack 1: optional `sessionId` scopes the probe to ONE session's events so a
+// neighbour window's high-value work (past the same global watermark) cannot
+// keep THIS session's archive nudge alive (or, in the backlog scan, attribute a
+// neighbour's signal to a dead session). Omitted → workspace-wide (legacy).
+function hasHighValueArchiveSignal(events, watermarkTs, sessionId) {
   if (!Array.isArray(events)) return false;
   const wm = typeof watermarkTs === "number" ? watermarkTs : 0;
+  const scoped = typeof sessionId === "string" && sessionId.length > 0;
   let latestTurn = null;
   for (const e of events) {
     if (!e || typeof e.ts !== "number" || e.ts <= wm) continue;
+    if (scoped && e.session_id !== sessionId) continue;
     if (typeof e.event_type === "string" && ARCHIVE_HIGH_VALUE_EVENT_TYPES.has(e.event_type)) {
       return true;
     }
@@ -505,6 +511,138 @@ function countEditsSince(projectRoot, anchorTs) {
   return count;
 }
 
+// ---------------------------------------------------------------------------
+// Two-lane archive strategy (crack 1 + 2).
+//
+// In-session lane (crack 1): the archive nudge's edit trigger counts ONLY the
+// current session's `file_mutated` events since the current session's OWN
+// archive watermark — a neighbour window archiving (which moves the GLOBAL
+// `knowledge_proposed` anchor) must never zero THIS window's unarchived work.
+// We read the event ledger (file_mutated carries session_id, written by
+// post-tooluse-mutation.cjs; session_archive_attempted carries
+// covered_through_ts), NOT the session-blind `.fabric/.cache/edit-counter`
+// sidecar — that stays for the activity-overview DISPLAY line only.
+//
+// Cross-session lane (crack 2): `countBacklogSessions` is the safety net that
+// replaces the old global-24h timer (which any neighbour's archive reset, so a
+// low-signal "dead" session was orphaned forever). It reads events.jsonl
+// directly — never the resolved-bindings snapshot (KT-PIT-0017/0019 stale
+// projection class).
+// ---------------------------------------------------------------------------
+
+// rc cross-session backlog constants. ANTI_LOOP mirrors archive-scan.ts.
+const ARCHIVE_BACKLOG_ANTI_LOOP_HOURS = 12;
+const DEFAULT_ARCHIVE_BACKLOG_SESSION_COUNT = 2;
+const DEFAULT_ARCHIVE_BACKLOG_IDLE_HOURS = 24;
+
+// Latest session_archive_attempted.covered_through_ts for this session, else null.
+function sessionArchiveWatermark(events, sessionId) {
+  if (!Array.isArray(events) || typeof sessionId !== "string" || sessionId.length === 0) {
+    return null;
+  }
+  let wm = null;
+  for (const ev of events) {
+    if (!ev || ev.session_id !== sessionId) continue;
+    if (ev.event_type !== "session_archive_attempted") continue;
+    if (typeof ev.covered_through_ts !== "number") continue;
+    if (wm === null || ev.covered_through_ts > wm) wm = ev.covered_through_ts;
+  }
+  return wm;
+}
+
+// Earliest event ts carrying this session_id, else null.
+function sessionFirstActivityTs(events, sessionId) {
+  if (!Array.isArray(events) || typeof sessionId !== "string" || sessionId.length === 0) {
+    return null;
+  }
+  let first = null;
+  for (const ev of events) {
+    if (!ev || ev.session_id !== sessionId || typeof ev.ts !== "number") continue;
+    if (first === null || ev.ts < first) first = ev.ts;
+  }
+  return first;
+}
+
+// Per-session archive anchor: this session's own last archive watermark, else
+// its first activity ts. null only when the session has zero ledger presence.
+function sessionAnchorTs(events, sessionId) {
+  const wm = sessionArchiveWatermark(events, sessionId);
+  if (wm !== null) return wm;
+  return sessionFirstActivityTs(events, sessionId);
+}
+
+// Count this session's `file_mutated` events strictly after the anchor (anchor
+// null → count all of the session's mutations). Replaces the session-blind
+// countEditsSince(edit-counter) for the archive TRIGGER (crack 1).
+function countSessionMutationsSince(events, sessionId, anchorTs) {
+  if (!Array.isArray(events) || typeof sessionId !== "string" || sessionId.length === 0) {
+    return 0;
+  }
+  let count = 0;
+  for (const ev of events) {
+    if (!ev || ev.session_id !== sessionId) continue;
+    if (ev.event_type !== "file_mutated" || typeof ev.ts !== "number") continue;
+    if (anchorTs === null || ev.ts > anchorTs) count += 1;
+  }
+  return count;
+}
+
+// Cross-session safety net (crack 2). Counts DEAD sessions (carry a
+// `session_ended` marker OR have been idle beyond idleHours) — OTHER than the
+// current one — that hold unarchived high-value work and are NOT
+// `user_dismissed` / inside the 12h anti-loop cooldown. This is the per-session
+// replacement for the global-24h archive timer: it is NOT reset by any
+// neighbour's archive, so a low-signal session that simply ended is no longer
+// orphaned. Mirrors archive-scan.ts's outcome-filter semantics.
+function countBacklogSessions(events, nowMs, currentSessionId, idleHours) {
+  if (!Array.isArray(events)) return 0;
+  const idleMs =
+    (typeof idleHours === "number" && idleHours > 0 ? idleHours : DEFAULT_ARCHIVE_BACKLOG_IDLE_HOURS) *
+    MS_PER_HOUR;
+  const lastActivity = new Map(); // sid -> max ts
+  const ended = new Set(); // sid with a session_ended marker
+  const lastAttempt = new Map(); // sid -> latest session_archive_attempted event
+  const sessions = new Set();
+  for (const ev of events) {
+    if (!ev || typeof ev.session_id !== "string" || ev.session_id.length === 0) continue;
+    const sid = ev.session_id;
+    sessions.add(sid);
+    if (typeof ev.ts === "number") {
+      const prev = lastActivity.get(sid);
+      if (prev === undefined || ev.ts > prev) lastActivity.set(sid, ev.ts);
+    }
+    if (ev.event_type === "session_ended") ended.add(sid);
+    if (ev.event_type === "session_archive_attempted" && typeof ev.ts === "number") {
+      const prior = lastAttempt.get(sid);
+      if (!prior || (typeof prior.ts === "number" && ev.ts > prior.ts)) lastAttempt.set(sid, ev);
+    }
+  }
+  let count = 0;
+  for (const sid of sessions) {
+    if (sid === currentSessionId) continue; // live lane handles the current session
+    const last = lastActivity.get(sid);
+    const isDead = ended.has(sid) || (typeof last === "number" && nowMs - last >= idleMs);
+    if (!isDead) continue;
+    const attempt = lastAttempt.get(sid);
+    if (attempt && attempt.outcome === "user_dismissed") continue; // respect dismissal
+    if (
+      attempt &&
+      typeof attempt.ts === "number" &&
+      nowMs - attempt.ts < ARCHIVE_BACKLOG_ANTI_LOOP_HOURS * MS_PER_HOUR
+    ) {
+      continue; // inside anti-loop cooldown
+    }
+    // Probe high-value work since the session's OWN archive watermark — null
+    // (never archived) means probe the whole session (wm→0), so a high-value
+    // signal that was the session's first event still counts. Using the
+    // first-activity anchor here would wrongly exclude it (strict `> anchor`).
+    const wm = sessionArchiveWatermark(events, sid);
+    if (!hasHighValueArchiveSignal(events, wm, sid)) continue; // no unarchived high-value work
+    count += 1;
+  }
+  return count;
+}
+
 // ---------------------------------------------------------------------------
 // Observability grill (a + Q4): session-activity status breadcrumb.
 //
@@ -830,14 +968,17 @@ function readArchiveEditThreshold(projectRoot) {
  * Review wins over import because pending overflow is a sharper backlog signal
  * than a sparse corpus.
  *
- * The `editCounterStats` parameter is the parsed edit-counter view used by
- * the new Signal A edit branch:
- *   { editsSinceLastProposed: number, threshold: number }
- * Defaults to { editsSinceLastProposed: 0, threshold: DEFAULT_ARCHIVE_EDIT_THRESHOLD }
- * when omitted — preserves existing tests that don't populate it.
+ * The `editCounterStats` parameter is the per-session edit view (crack 1)
+ * computed in main() from file_mutated events:
+ *   { editsSinceArchive: number, threshold: number, anchorPresent: boolean }
+ * The `backlogStats` parameter (crack 2) is the cross-session view:
+ *   { deadSessionCount: number, threshold: number }
+ * Both default to a no-trigger shape when omitted (back-compat for callers
+ * pre-dating the two-lane split).
  *
  * Returns one of:
  *   - { decision: 'block', reason, signal: 'archive', recommended_skill: 'fabric-archive' }
+ *   - { decision: 'block', reason, signal: 'archive_backlog', recommended_skill: 'fabric-archive' }
  *   - { decision: 'block', reason, signal: 'review', recommended_skill: 'fabric-review' }
  *   - { decision: 'block', reason, signal: 'import', recommended_skill: 'fabric-import' }
  *   - null on no trigger
@@ -847,21 +988,31 @@ function readArchiveEditThreshold(projectRoot) {
 // without touching the filesystem. Omitting the arg falls back to documented
 // defaults so existing in-process callers (tests that pre-date T7) still
 // pass without modification — they implicitly exercise the default path.
-function decide(events, now, pendingStats, underseedStats, editCounterStats, thresholds, banner, importInFlight) {
+function decide(events, now, pendingStats, underseedStats, editCounterStats, thresholds, banner, importInFlight, backlogStats) {
   const nowMs = now instanceof Date ? now.getTime() : Number(now) || Date.now();
   const stats = pendingStats || { count: 0, oldestAgeMs: null };
   const underseed =
     underseedStats || { nodeCount: 0, threshold: DEFAULT_UNDERSEED_NODE_THRESHOLD };
+  // crack 1: per-session edit view. `editsSinceArchive` = current session's
+  // file_mutated count since its own archive anchor; `anchorPresent` = the
+  // session has any ledger activity (the trigger gate, replacing the old
+  // "global knowledge_proposed exists" gate).
   const editStats =
     editCounterStats || {
-      editsSinceLastProposed: 0,
+      editsSinceArchive: 0,
       threshold: DEFAULT_ARCHIVE_EDIT_THRESHOLD,
+      anchorPresent: false,
+    };
+  // crack 2: cross-session backlog view (dead sessions with unarchived work).
+  const backlog =
+    backlogStats || {
+      deadSessionCount: 0,
+      threshold: DEFAULT_ARCHIVE_BACKLOG_SESSION_COUNT,
     };
   const cfg = thresholds || {};
-  const archiveHintHours =
-    typeof cfg.archiveHintHours === "number" && cfg.archiveHintHours > 0
-      ? cfg.archiveHintHours
-      : DEFAULT_ARCHIVE_HINT_HOURS;
+  // crack 2: the global archive_hint_hours timer is retired (the cross-session
+  // case is now the archive_backlog signal). cfg.archiveHintHours is still
+  // accepted on the thresholds bag for back-compat but no longer drives Signal A.
   const reviewHintPendingCount =
     typeof cfg.reviewHintPendingCount === "number" && cfg.reviewHintPendingCount > 0
       ? cfg.reviewHintPendingCount
@@ -875,10 +1026,18 @@ function decide(events, now, pendingStats, underseedStats, editCounterStats, thr
   // byte-identical Chinese output. main() always supplies the resolved variant.
   const variant = typeof cfg.variant === "string" ? cfg.variant : "zh-CN";
 
-  // ---- Archive signal (rc.6 TASK-022 — Signal A, 24h-OR-N-edits) -----------
-  // Locate the most-recent knowledge_proposed event. If none exists, Signal A
-  // stays silent — a never-archived workspace is the import signal's domain.
-  // Edit count without an anchor is meaningless and intentionally ignored.
+  // ---- Archive signal (crack 1 — per-session edit count) -------------------
+  // In-session lane: nudge when THIS session has accumulated >= threshold file
+  // mutations since its OWN archive anchor (computed per-session in main() from
+  // file_mutated events — `editStats.editsSinceArchive`). The old global
+  // 24h-OR-N-edits trigger is retired: the hours branch became the
+  // archive_backlog signal below (crack 2), and the edit count is now
+  // session-scoped so a neighbour window's archive can't zero this window's
+  // work. `anchorPresent` gates the trigger (a session with zero ledger
+  // activity has nothing to count).
+  //
+  // `lastProposedTs` / `hoursElapsed` are still derived here for the IMPORT
+  // signal's "no knowledge_proposed in last 24h" guard further down.
   let lastProposedTs = null;
   for (let i = events.length - 1; i >= 0; i -= 1) {
     const ev = events[i];
@@ -887,63 +1046,27 @@ function decide(events, now, pendingStats, underseedStats, editCounterStats, thr
       break;
     }
   }
-
   const hoursElapsed =
     lastProposedTs === null ? null : (nowMs - lastProposedTs) / MS_PER_HOUR;
 
-  const triggerByHours =
-    hoursElapsed !== null && hoursElapsed >= archiveHintHours;
   const triggerByEdits =
-    lastProposedTs !== null &&
-    editStats.editsSinceLastProposed >= editStats.threshold;
-
-  // PRECEDENCE: archive wins when Signal A fires, regardless of review/import
-  // state. The user gets the archive reminder first; other reminders wait
-  // until after archive happens.
-  if (triggerByHours || triggerByEdits) {
-    // rc.7 T4: 人-first banner — the first reader is the human user in the
-    // AI client UI, Agent reads incidentally (Q-13). We DROP the prior
-    // Agent-jussive imperative ("建议调用 fabric-archive skill ...") in
-    // favour of a polite question framing and an honest activity overview
-    // from the edit-counter sidecar (Q-6: the hook has zero content
-    // awareness, only file-fire awareness — no fabricated "N candidates
-    // detected" framing).
-    //
-    // The activity overview is injected by the caller (main() supplies it
-    // via the `banner` arg) so decide() stays pure / filesystem-free for
-    // tests. When omitted (legacy callers / tests pre-T4) the overview
-    // line is skipped — the banner remains valid 3-or-2 lines depending
-    // on data availability.
-    //
-    // Substring contract preserved for existing tests:
-    //   - "<hoursElapsed.toFixed(1)>h" (e.g. "25.0h")
-    //   - "<editCount> 次编辑"
-    //   - "阈值 <N>"
-    //   - "fabric-archive"
-    // v2.0.0-rc.27 TASK-005 (audit §2.17): parts now assembled per-variant
-    // via banner-i18n's archivePartsHours / archivePartsEdits so en mode
-    // gets fully-English fragments instead of mixed-language output. zh-CN
-    // / zh-CN-hybrid still render the original substring contract verbatim.
-    const parts = [];
-    if (triggerByHours) {
-      parts.push(
-        renderBanner("archivePartsHours", variant, {
-          hoursFixed: hoursElapsed.toFixed(1),
-          threshold: archiveHintHours,
-        }),
-      );
-    }
-    if (triggerByEdits) {
-      parts.push(
-        renderBanner("archivePartsEdits", variant, {
-          count: editStats.editsSinceLastProposed,
-          threshold: editStats.threshold,
-        }),
-      );
-    }
-    // rc.16 TASK-002: 5-banner i18n via lib/banner-i18n.cjs. Substring
-    // contracts ('25.0h', '阈值 N', 'fabric-archive') preserved by the lib's
-    // zh-CN templates — see lib header for the full contract.
+    editStats.anchorPresent === true &&
+    typeof editStats.editsSinceArchive === "number" &&
+    editStats.editsSinceArchive >= editStats.threshold;
+
+  // PRECEDENCE: in-session archive wins over backlog/review/import — recent
+  // local work is the most actionable reminder.
+  if (triggerByEdits) {
+    // 人-first banner: edit-count fragment only (the hours fragment retired with
+    // the global timer). Substring contracts ('次编辑', '阈值 N', 'fabric-archive')
+    // preserved by banner-i18n's zh-CN templates. The activity overview line is
+    // injected by main() via `banner` so decide() stays pure / filesystem-free.
+    const parts = [
+      renderBanner("archivePartsEdits", variant, {
+        count: editStats.editsSinceArchive,
+        threshold: editStats.threshold,
+      }),
+    ];
     const line1 = renderBanner("archiveLine1", variant, { parts: parts.join(" / ") });
     const activity = banner && typeof banner.activityOverview === "string"
       ? banner.activityOverview
@@ -959,10 +1082,30 @@ function decide(events, now, pendingStats, underseedStats, editCounterStats, thr
       signal: "archive",
       recommended_skill: "fabric-archive",
       // v2.1 NEW-N-3: surface the firing sub-signal's numbers for the
-      // hook_signal_emitted ledger row main() writes. Dual trigger (24h OR
-      // N-edits): report the hours pair when it fired, else the edit-count pair.
-      threshold: triggerByHours ? archiveHintHours : editStats.threshold,
-      actual_value: triggerByHours ? hoursElapsed : editStats.editsSinceLastProposed,
+      // hook_signal_emitted ledger row main() writes.
+      threshold: editStats.threshold,
+      actual_value: editStats.editsSinceArchive,
+    };
+  }
+
+  // ---- Archive backlog signal (crack 2 — cross-session safety net) ---------
+  // Fires when N+ DEAD sessions (session_ended / idle) carry unarchived
+  // high-value work — the per-session replacement for the old global-24h timer
+  // (which any neighbour's archive reset, orphaning low-signal ended sessions).
+  // KT-DEC-0007: a soft reminder, never a gate. Ranked AFTER in-session archive
+  // but BEFORE review/import: losing knowledge from an ended session is a
+  // sharper signal than a review/import backlog.
+  if (backlog.threshold > 0 && backlog.deadSessionCount >= backlog.threshold) {
+    const line1 = renderBanner("backlogLine1", variant, { count: backlog.deadSessionCount });
+    const line2 = renderBanner("backlogCta", variant, {});
+    const reason = `${line1}\n${line2}`;
+    return {
+      decision: "block",
+      reason,
+      signal: "archive_backlog",
+      recommended_skill: "fabric-archive",
+      threshold: backlog.threshold,
+      actual_value: backlog.deadSessionCount,
     };
   }
 
@@ -1121,6 +1264,23 @@ function readMaintenanceHintCooldownDays(projectRoot) {
   );
 }
 
+// crack 2: cross-session backlog signal thresholds.
+function readArchiveBacklogSessionCount(projectRoot) {
+  return _readConfigNumber(
+    projectRoot,
+    "archive_backlog_session_count",
+    DEFAULT_ARCHIVE_BACKLOG_SESSION_COUNT,
+  );
+}
+
+function readArchiveBacklogIdleHours(projectRoot) {
+  return _readConfigNumber(
+    projectRoot,
+    "archive_backlog_idle_hours",
+    DEFAULT_ARCHIVE_BACKLOG_IDLE_HOURS,
+  );
+}
+
 /**
  * Resolve the cooldown setting from .fabric/fabric-config.json
  * (archive_hint_cooldown_hours), falling back to DEFAULT_COOLDOWN_HOURS.
@@ -1231,7 +1391,7 @@ function writeShownCache(projectRoot, cache, sessionId) {
 // precedence model — KT-DEC-0007 anti-nag spirit).
 // -----------------------------------------------------------------------------
 
-const DISMISSABLE_SIGNALS = ["archive", "review", "import", "maintenance"];
+const DISMISSABLE_SIGNALS = ["archive", "archive_backlog", "review", "import", "maintenance"];
 
 function sessionDismissFileName(sessionId) {
   const safe = String(sessionId || "anonymous").replace(/[^A-Za-z0-9_.-]/g, "-");
@@ -2123,24 +2283,41 @@ function main(env, stdio) {
     // ts to anchor the count; rather than rescanning events here, we mirror
     // decide()'s scan locally to keep the helper pure. The threshold comes
     // from fabric-config.json (archive_edit_threshold, default 20).
+    // crack 1: per-session edit view. anchor = THIS session's own last archive
+    // watermark (session_archive_attempted.covered_through_ts) else its first
+    // ledger activity; count = THIS session's file_mutated events since anchor.
+    // Reads the event ledger, NOT the session-blind edit-counter sidecar.
     let editCounterStats;
     try {
-      let anchorTs = null;
-      for (let i = events.length - 1; i >= 0; i -= 1) {
-        const ev = events[i];
-        if (ev && ev.event_type === EVENT_TYPE_PROPOSED && typeof ev.ts === "number") {
-          anchorTs = ev.ts;
-          break;
-        }
-      }
+      const sid = resolveHookSessionId(stdinPayload);
+      const anchorTs = sessionAnchorTs(events, sid);
       editCounterStats = {
-        editsSinceLastProposed: countEditsSince(cwd, anchorTs),
+        editsSinceArchive: countSessionMutationsSince(events, sid, anchorTs),
         threshold: readArchiveEditThreshold(cwd),
+        anchorPresent: anchorTs !== null,
       };
     } catch {
       editCounterStats = {
-        editsSinceLastProposed: 0,
+        editsSinceArchive: 0,
         threshold: DEFAULT_ARCHIVE_EDIT_THRESHOLD,
+        anchorPresent: false,
+      };
+    }
+
+    // crack 2: cross-session backlog view — count DEAD sessions (other than the
+    // current one) carrying unarchived high-value work. Drives the
+    // archive_backlog signal that replaces the retired global-24h timer.
+    let backlogStats;
+    try {
+      const sid = resolveHookSessionId(stdinPayload);
+      backlogStats = {
+        deadSessionCount: countBacklogSessions(events, nowMs, sid, readArchiveBacklogIdleHours(cwd)),
+        threshold: readArchiveBacklogSessionCount(cwd),
+      };
+    } catch {
+      backlogStats = {
+        deadSessionCount: 0,
+        threshold: DEFAULT_ARCHIVE_BACKLOG_SESSION_COUNT,
       };
     }
 
@@ -2223,6 +2400,7 @@ function main(env, stdio) {
       thresholds,
       { activityOverview },
       importInFlight,
+      backlogStats,
     );
 
     // v2.0.0-rc.7 T10: Signal D — maintenance hint. Evaluated AFTER A/B/C
@@ -2259,22 +2437,18 @@ function main(env, stdio) {
       return;
     }
 
-    // v2.2 dual-sink (Goal A / D6): VALUE-GATE the archive nudge. Signal A's
-    // edit/hours trigger is the CHECK cadence; the nudge only fires when a
-    // deterministic high-value signal accrued since the last archive (decouples
-    // check frequency from disturb frequency). Boundary-correct: replicates
-    // archive-scan's ledger probe (no semantic judgement). Other signals
-    // (review/import/maintenance) are unaffected.
+    // v2.2 dual-sink (Goal A / D6): VALUE-GATE the in-session archive nudge. The
+    // edit trigger is the CHECK cadence; the nudge only fires when a high-value
+    // signal accrued since the last archive (decouples check from disturb).
+    // crack 1: re-anchored PER SESSION (watermark = this session's own anchor,
+    // probe scoped to this session) so a neighbour window's high-value work past
+    // the same global watermark can't keep — or suppress — THIS window's nudge.
+    // archive_backlog already incorporates high-value in its count, so it is not
+    // re-gated here. Other signals (review/import/maintenance) are unaffected.
     if (result.signal === "archive") {
-      let watermarkTs = null;
-      for (let i = events.length - 1; i >= 0; i -= 1) {
-        const ev = events[i];
-        if (ev && ev.event_type === EVENT_TYPE_PROPOSED && typeof ev.ts === "number") {
-          watermarkTs = ev.ts;
-          break;
-        }
-      }
-      if (!hasHighValueArchiveSignal(events, watermarkTs)) {
+      const sid = resolveHookSessionId(stdinPayload);
+      const watermarkTs = sessionAnchorTs(events, sid);
+      if (!hasHighValueArchiveSignal(events, watermarkTs, sid)) {
         return; // no high-value candidate → stay quiet (D6 value-gate)
       }
     }
@@ -2385,6 +2559,14 @@ module.exports = {
   // for unit testing of the truth table).
   isImportInFlight,
   decide,
+  // crack 1 + 2: two-lane archive strategy helpers (exported for unit testing).
+  sessionArchiveWatermark,
+  sessionFirstActivityTs,
+  sessionAnchorTs,
+  countSessionMutationsSince,
+  countBacklogSessions,
+  readArchiveBacklogSessionCount,
+  readArchiveBacklogIdleHours,
   readCooldownHours,
   readUnderseedThreshold,
   readArchiveEditThreshold,

package/templates/hooks/knowledge-hint-broad.cjs

@@ -16,11 +16,11 @@
  *
  *   AI sink (additionalContext) — the dynamically generated "MEMORY.md":
  *     [fabric:SessionStart] <store>
- *     ALWAYS-ACTIVE RULES (no recall needed):    # guideline/model — INDEX line only
- *       [guideline] team:KT-GLD-0001 · <summary> # KT-DEC-0036: no eager body
- *     REFERENCE (read on demand / fab_recall):   # decision/pitfall/process — title + hook
+ *     ALWAYS-ACTIVE RULES (unconditional · act on the line): # guideline/model, BROAD only
+ *       [guideline] team:KT-GLD-0001 · <summary> # INDEX line; body on demand (KT-DEC-0036)
+ *     REFERENCE (situational · Read when must_read_if fires): # decision/pitfall/process, BROAD
  *       [decision] team:KT-DEC-0001 — <must_read_if>
- *       … N more folded (broad index > backstop 50; run fabric-audit)
+ *       … N more folded (broad index > backstop 50; prune via fabric-audit)
  *     Load full content: fab_recall(paths), or Read <store>/knowledge/<type>/<id>--*.md
  *
  *   Human sink (systemMessage) — broad-only census breadcrumb; SessionStart is
@@ -348,12 +348,22 @@ function isImportTouched(projectRoot) {
  *
  * Best-effort: any unexpected error → return false (do not nag on faults).
  */
-function shouldRecommendImport(projectRoot) {
+function shouldRecommendImport(projectRoot, liveTotal) {
   try {
     if (readWorkspaceBindingId(projectRoot) === null) return false;
 
     const threshold = readUnderseedThreshold(projectRoot);
-    const nodeCount = countCanonicalNodes(projectRoot);
+    // P0 (Goal H3 / KT-PIT-0017 + KT-PIT-0019): prefer the LIVE census total the
+    // HUD displays as the single count source. The census walks the read-set
+    // fresh every fire (never a frozen snapshot projection), so feeding it here
+    // makes the import nudge and the HUD agree by construction — killing the
+    // "HUD shows 61 entries but the nudge claims the KB is sparse" contradiction
+    // the stale-snapshot count produced. Fall back to the snapshot-derived count
+    // only when no live total is supplied (e.g. direct unit-test calls).
+    const nodeCount =
+      typeof liveTotal === "number" && Number.isFinite(liveTotal)
+        ? liveTotal
+        : countCanonicalNodes(projectRoot);
     // #3: undeterminable count (old snapshot predating knowledge_store_dirs) →
     // skip. `null < threshold` coerces to true in JS, so an explicit guard is
     // required — otherwise the stale-snapshot case would still false-fire.
@@ -383,6 +393,12 @@ function shouldRecommendImport(projectRoot) {
 // truncation summary lines) consume it as a single source of truth.
 const TRUNCATION_THRESHOLD = 12;
 
+// Goal H4 action ladder — review rung: surface a single `/fabric-review` line when
+// the LIVE pending backlog exceeds this. Mirrors fabric-hint.cjs's
+// DEFAULT_REVIEW_HINT_PENDING_COUNT (the Stop hook's review threshold) so the two
+// surfaces agree on "how much pending is too much". Strictly `> threshold`.
+const REVIEW_PENDING_THRESHOLD = 10;
+
 // `fabric plan-context-hint` is a thin wrapper over planContext(); on a
 // well-seeded repo it returns in ~100ms. Two-second cap is defensive — any
 // pathological hang must not stall session start.
@@ -767,57 +783,126 @@ function toPluralType(type) {
 // count the (possibly sliced) entries by knowledge_type so the human banner still
 // has something to group. Production payloads always carry the unsliced census.
 function deriveCensusFromEntries(entries) {
-  const census = { by_type: {}, by_layer: { team: 0, personal: 0, project: 0 }, dropped_other_project: 0, total: 0 };
+  const census = {
+    by_type: {},
+    by_layer: { team: 0, personal: 0, project: 0 },
+    broad_by_type: {},
+    narrow_total: 0,
+    dropped_other_project: 0,
+    total: 0,
+  };
   if (!Array.isArray(entries)) return census;
   for (const e of entries) {
     const type = e && typeof e.type === "string" ? toPluralType(e.type) : null;
     if (type === null) continue;
+    const isNarrow = e.relevance_scope === "narrow";
     census.by_type[type] = (census.by_type[type] || 0) + 1;
+    if (isNarrow) census.narrow_total += 1;
+    else census.broad_by_type[type] = (census.broad_by_type[type] || 0) + 1;
     census.total += 1;
   }
   return census;
 }
 
-// Render the human-facing grouped census (§3). `lang` is "zh-CN" | other (en).
-// Returns an array of lines (may be empty when the census is empty).
+// Render the human-facing scope-primary status HUD (Goal H2). `lang` is
+// "zh-CN" | other (en). Returns an array of lines (empty when census is empty).
+//
+// Shape (KT-DEC-0029 — SessionStart is scope-primary; broad is the spine that's
+// injected this session, narrow surfaces contextually via the PreToolUse hint):
+//   ▸ [fabric] 共 N 条 · 团队X · 项目Y · 个人Z
+//     broad B · 本会话注入
+//       ├ 常驻规则 G+M  guideline G · model M     (KT-DEC-0027 resident tier)
+//       └ 情境参考 D+P+Pr  decision D · pitfall P · process Pr  (reference tier)
+//     narrow M · 编辑对应文件时浮现                (合计 only, no per-type)
+// Self-consistency invariant: broad (= 常驻 + 参考) + narrow == total.
 function renderHumanCensus(census, opts) {
   const { lang } = opts || {};
   const c = census || {};
-  const byType = c.by_type || {};
   const total = typeof c.total === "number" ? c.total : 0;
   if (total === 0 && (c.dropped_other_project || 0) === 0) return [];
   const zh = lang === "zh-CN";
 
-  const typeCounts = (types) =>
-    types
-      .filter((t) => (byType[t] || 0) > 0)
-      .map((t) => `${TYPE_SINGULAR[t] || t} ${byType[t]}`)
-      .join(" · ");
+  const broadByType = c.broad_by_type || {};
+  const narrowTotal = typeof c.narrow_total === "number" ? c.narrow_total : 0;
+  // Per-tier broad counts. `broad_by_type` keys on the plural enum.
+  const g = broadByType.guidelines || 0;
+  const m = broadByType.models || 0;
+  const d = broadByType.decisions || 0;
+  const p = broadByType.pitfalls || 0;
+  const pr = broadByType.processes || 0;
+  const residentN = g + m; // 常驻规则 (always-active: guideline + model)
+  const referenceN = d + p + pr; // 情境参考 (decision + pitfall + process)
+  const broadN = residentN + referenceN;
 
-  const lines = [];
-  // `total` is the read-set ENTRY COUNT (not bytes) — label it as 条/entries.
-  lines.push(`▸ [fabric] SessionStart (${total} ${zh ? "条" : total === 1 ? "entry" : "entries"})`);
-  // W2-2/W2-3 (KT-DEC-0027/0029): the human breadcrumb shows only the
-  // always-loaded (guideline/model) census. The on-demand (decision/pitfall/
-  // process) count line and the dropped-other-project line are retired — the
-  // decision/pitfall/process REFERENCE lives in the AI sink (title + must_read_if),
-  // and SessionStart stays silent about narrow-scoped knowledge.
-  const alwaysCounts = typeCounts(ALWAYS_TYPES);
-  lines.push(zh ? "  ─ always-loaded(AI 也收到正文)─" : "  ─ always-loaded (AI also gets bodies) ─");
-  lines.push(`   ${alwaysCounts.length > 0 ? alwaysCounts : zh ? "(无)" : "(none)"}`);
   const layer = c.by_layer || {};
   const teamCount = layer.team || 0;
   const personalCount = layer.personal || 0;
   const projectCount = layer.project || 0;
-  if (teamCount > 0 || personalCount > 0 || projectCount > 0) {
-    const segs = [`[team] ${teamCount}`];
-    if (projectCount > 0) segs.push(`[project] ${projectCount}`);
-    segs.push(`[personal] ${personalCount}`);
-    lines.push(`  ${segs.join(" · ")}`);
-  }
+
+  const lines = [];
+  // Header: total entry count + semantic_scope breakdown (KT-MOD-0001 三轴).
+  const scopeSegs = [zh ? `团队 ${teamCount}` : `team ${teamCount}`];
+  if (projectCount > 0) scopeSegs.push(zh ? `项目 ${projectCount}` : `project ${projectCount}`);
+  scopeSegs.push(zh ? `个人 ${personalCount}` : `personal ${personalCount}`);
+  const totalLabel = zh ? `共 ${total} 条` : `${total} ${total === 1 ? "entry" : "entries"}`;
+  lines.push(`▸ [fabric] ${totalLabel} · ${scopeSegs.join(" · ")}`);
+
+  // broad spine — injected this session.
+  lines.push(zh ? `  broad ${broadN} · 本会话注入` : `  broad ${broadN} · injected this session`);
+  const residentDetail = [];
+  if (g > 0) residentDetail.push(`guideline ${g}`);
+  if (m > 0) residentDetail.push(`model ${m}`);
+  const refDetail = [];
+  if (d > 0) refDetail.push(`decision ${d}`);
+  if (p > 0) refDetail.push(`pitfall ${p}`);
+  if (pr > 0) refDetail.push(`process ${pr}`);
+  const dash = zh ? "—" : "—";
+  lines.push(
+    zh
+      ? `    ├ 常驻规则 ${residentN}  ${residentDetail.join(" · ") || dash}`
+      : `    ├ resident ${residentN}  ${residentDetail.join(" · ") || dash}`,
+  );
+  lines.push(
+    zh
+      ? `    └ 情境参考 ${referenceN}  ${refDetail.join(" · ") || dash}`
+      : `    └ reference ${referenceN}  ${refDetail.join(" · ") || dash}`,
+  );
+
+  // narrow remainder — 合计 only (no per-type; it's file-specific, surfaces on edit).
+  lines.push(
+    zh
+      ? `  narrow ${narrowTotal} · 编辑对应文件时浮现`
+      : `  narrow ${narrowTotal} · surfaces when you edit matching files`,
+  );
   return lines;
 }
 
+// Goal H2: the SessionStart store label, scope-primary wording — `写入 X · 只读 Y`
+// (write target receives new knowledge; the rest are read-only sources). Replaces
+// the legacy `read-set stores: a (write), b (ro)` jargon line inline (kept local
+// to this hook so the shared lib formatStoreLabels — used by other hooks — is
+// untouched). Empty string when there is nothing to show.
+function renderScopeStoreLabel(snapshot, lang) {
+  if (!snapshot || !snapshot.read_set || !Array.isArray(snapshot.read_set.stores)) return "";
+  const stores = snapshot.read_set.stores;
+  if (stores.length === 0) return "";
+  const zh = lang === "zh-CN";
+  const writeAlias = snapshot.write_target && snapshot.write_target.alias;
+  const writeStores = [];
+  const readonlyStores = [];
+  for (const s of stores) {
+    const alias = s && typeof s.alias === "string" ? s.alias : null;
+    if (alias === null) continue;
+    if (alias === writeAlias) writeStores.push(alias);
+    else readonlyStores.push(alias);
+  }
+  const segs = [];
+  if (writeStores.length > 0) segs.push((zh ? "写入 " : "write ") + writeStores.join(", "));
+  if (readonlyStores.length > 0) segs.push((zh ? "只读 " : "readonly ") + readonlyStores.join(", "));
+  if (segs.length === 0) return "";
+  return "  " + segs.join(" · ");
+}
+
 // W2 (KT-DEC-0027/0028/0029): render the AI-facing sink — the dynamically
 // generated "MEMORY.md" spine injected into the SessionStart context. Two
 // type-tiered sections over the BROAD knowledge (narrow stays silent — D0029):
@@ -857,7 +942,11 @@ function renderAiSink(opts) {
   lines.push(`[fabric:SessionStart] ${storeLabel || "store"}`);
 
   // ALWAYS-ACTIVE RULES — index-only (title + summary), never the eager body.
-  lines.push(zh ? "ALWAYS-ACTIVE RULES (无需再 recall):" : "ALWAYS-ACTIVE RULES (no recall needed):");
+  lines.push(
+    zh
+      ? "ALWAYS-ACTIVE RULES (无条件适用 · 照此行遵循,正文按需取):"
+      : "ALWAYS-ACTIVE RULES (unconditional · act on the line; body on demand):",
+  );
   if (bodies.length === 0) {
     lines.push(zh ? "  (无 always-active 条目)" : "  (none)");
   } else {
@@ -875,7 +964,11 @@ function renderAiSink(opts) {
 
   // REFERENCE — broad decision/pitfall/process: title + must_read_if hook.
   if (referenceEntries.length > 0) {
-    lines.push(zh ? "REFERENCE (按需 Read / fab_recall):" : "REFERENCE (read on demand / fab_recall):");
+    lines.push(
+      zh
+        ? "REFERENCE (情境触发 · 命中 must_read_if 时 Read / fab_recall):"
+        : "REFERENCE (situational · Read when must_read_if fires / fab_recall):",
+    );
     let folded = 0;
     for (const e of referenceEntries) {
       if (backstop > 0 && indexCount >= backstop) {
@@ -897,8 +990,8 @@ function renderAiSink(opts) {
     if (folded > 0) {
       lines.push(
         zh
-          ? `  … 另 ${folded} 条 broad 条目折叠 (broad index > backstop ${backstop}; 跑 fabric-audit)`
-          : `  … ${folded} more broad entr${folded === 1 ? "y" : "ies"} folded (broad index > backstop ${backstop}; run fabric-audit)`,
+          ? `  … 另 ${folded} 条 broad 条目折叠 (broad index > backstop ${backstop})。先跑 fabric-audit 瘦身;确需全展示再调 .fabric/fabric-config.json#broad_index_backstop (20..500)`
+          : `  … ${folded} more broad entr${folded === 1 ? "y" : "ies"} folded (broad index > backstop ${backstop}). Run fabric-audit to prune first; raise .fabric/fabric-config.json#broad_index_backstop (20..500) only if you truly need them all`,
       );
     }
   }
@@ -909,6 +1002,15 @@ function renderAiSink(opts) {
       ? "取正文: fab_recall(paths), 或 Read <store>/knowledge/<type>/<id>--*.md"
       : "Load full content: fab_recall(paths), or Read <store>/knowledge/<type>/<id>--*.md",
   );
+  // H6 scope discipline: this sink carries ONLY broad (always-relevant) knowledge;
+  // narrow (file-specific) entries surface contextually via the PreToolUse hint
+  // when you edit a matching file (KT-DEC-0029). Stops the agent from assuming
+  // SessionStart is the whole KB.
+  lines.push(
+    zh
+      ? "范围: 此处仅 broad(始终相关);narrow(文件专属)在你编辑对应文件时由 PreToolUse 浮现"
+      : "Scope: broad only (always relevant) here; narrow (file-specific) surfaces via the PreToolUse hint when you edit a matching file",
+  );
   return lines.join("\n");
 }
 
@@ -939,7 +1041,6 @@ function buildSessionStartSinks(cwd, payload, env) {
   // review-time cold-eval audit pass.
   const resolvedPayload = payload;
 
-  const recommendImport = shouldRecommendImport(cwd);
   const summaryMaxLen = readSummaryMaxLen(cwd);
   const fabricLanguageForEmit = readFabricLanguage(cwd);
 
@@ -956,6 +1057,24 @@ function buildSessionStartSinks(cwd, payload, env) {
         ? payload.always_bodies
         : [];
 
+  // H3: the LIVE census total is the single count source for the import gate —
+  // computed AFTER census so the nudge and the HUD agree by construction.
+  const censusTotal = census && typeof census.total === "number" ? census.total : undefined;
+  const recommendImport = shouldRecommendImport(cwd, censusTotal);
+
+  // Read the resolved-bindings snapshot ONCE — reused for the scope store label
+  // (写入/只读) and the H4 review-rung pending count. Best-effort/decorative: any
+  // failure leaves snapshot null and the dependent lines simply don't render.
+  let snapshot = null;
+  if (bindingsSnapshotReader !== null) {
+    try {
+      const bindingId = readWorkspaceBindingId(cwd);
+      if (bindingId) snapshot = bindingsSnapshotReader.readBindingsSnapshot(bindingId);
+    } catch {
+      snapshot = null;
+    }
+  }
+
   const humanGate =
     nudgePolicy !== null
       ? nudgePolicy.resolveHumanSink(cwd, "session_start", {})
@@ -967,33 +1086,46 @@ function buildSessionStartSinks(cwd, payload, env) {
     const detail = renderSummary(resolvedPayload, summaryMaxLen);
     humanLines.push(...detail);
   }
-  if (bindingsSnapshotReader !== null && humanLines.length > 0) {
-    try {
-      const bindingId = readWorkspaceBindingId(cwd);
-      if (bindingId) {
-        const label = bindingsSnapshotReader.formatStoreLabels(
-          bindingsSnapshotReader.readBindingsSnapshot(bindingId),
+  // H2: scope store label — `写入 X · 只读 Y` (replaces the legacy read-set jargon).
+  if (humanLines.length > 0 && snapshot !== null) {
+    const storeLabel = renderScopeStoreLabel(snapshot, fabricLanguageForEmit);
+    if (storeLabel) humanLines.push(storeLabel);
+  }
+
+  // H4 action ladder (KT-DEC-0007: nudge, never a gate). AT MOST ONE line, the
+  // highest-priority rung wins, and steady state is fully silent:
+  //   1. import  — KB is sparse (recommendImport, off the live census total)
+  //   2. review  — pending backlog exceeds REVIEW_PENDING_THRESHOLD (live count)
+  //   3. (silent)
+  if (humanLines.length > 0 && fabricLanguageForEmit !== null) {
+    if (recommendImport) {
+      humanLines.push(renderBanner("broadImportBanner", fabricLanguageForEmit, {}));
+    } else if (snapshot !== null && bindingsSnapshotReader !== null) {
+      let pendingCount = 0;
+      try {
+        const live = bindingsSnapshotReader.liveKnowledgeStats(snapshot);
+        if (live && Number.isFinite(live.pendingCount)) pendingCount = Math.floor(live.pendingCount);
+      } catch {
+        pendingCount = 0;
+      }
+      if (pendingCount > REVIEW_PENDING_THRESHOLD) {
+        humanLines.push(
+          fabricLanguageForEmit === "zh-CN"
+            ? `  📋 Fabric: ${pendingCount} 条 pending 待审,是否调 /fabric-review?`
+            : `  📋 Fabric: ${pendingCount} pending entries — run /fabric-review?`,
         );
-        if (label) humanLines.push(label);
       }
-    } catch {
-      // store labels are decorative provenance — never crash the hook
     }
   }
-  if (recommendImport && humanLines.length > 0 && fabricLanguageForEmit !== null) {
-    humanLines.push(renderBanner("broadImportBanner", fabricLanguageForEmit, {}));
-  }
+
+  // H5: the `下一步: …fab_recall…` AI-plumbing line is retired from the human sink
+  // (the AI gets it from its own footer + the MCP server directive). Keep only the
+  // pointer to the byte-identical inspector for this injection.
   if (humanLines.length > 0) {
     humanLines.push(
       fabricLanguageForEmit === "zh-CN"
-        ? "下一步: 改相关文件前调 fab_recall(paths) 拿 KB 条目的描述+读路径;按需 Read 路径取正文。"
-        : "Next: before editing related files, call fab_recall(paths) for the KB entries' descriptions + read paths; Read a path on demand for the body.",
-    );
-    // Block 5 (Option X): point to the byte-identical inspector for this injection.
-    humanLines.push(
-      fabricLanguageForEmit === "zh-CN"
-        ? "看具体注入: fabric context (--explain 看每条来源)"
-        : "Inspect this injection: fabric context (--explain for per-entry provenance)",
+        ? "  看具体注入: fabric context (--explain 看每条来源)"
+        : "  Inspect this injection: fabric context (--explain for per-entry provenance)",
     );
   }
 

package/templates/hooks/lib/banner-i18n.cjs

@@ -28,8 +28,9 @@
  *
  *   - STRINGS — exported for test introspection only (read-only by convention).
  *
- * Banner keys (11 total):
+ * Banner keys:
  *   Signal A (archive):     archiveLine1, archiveActivity, archiveCta
+ *   Archive backlog:        backlogLine1, backlogCta
  *   Signal B (review):      reviewLine1, reviewCta
  *   Signal C (import):      importLine1, importCta
  *   Signal D (maintenance): maintenanceLine1Never, maintenanceLine1Aged, maintenanceLine2
@@ -165,6 +166,23 @@ const STRINGS = {
     "zh-CN-hybrid": () => "   是否调 /fabric-archive 检查值得归档的决策/踩坑/复用?",
   },
 
+  // ---- Archive backlog (cross-session safety net, crack 2) ------------------
+  // Replaces the old global-24h archive timer: counts DEAD sessions (session
+  // ended / idle) carrying unarchived high-value work. Substring "${count}" is
+  // addressable for tests. params: { count: number }
+  backlogLine1: {
+    "zh-CN": (p) => `📋 Fabric: ${p.count} 个已结束的会话有未归档的高价值改动。`,
+    en: (p) => `📋 Fabric: ${p.count} ended session(s) carry unarchived high-value work.`,
+    "zh-CN-hybrid": (p) => `📋 Fabric: ${p.count} 个已结束的会话有未归档的高价值改动。`,
+  },
+
+  // params: {} — protected token /fabric-archive verbatim across all variants.
+  backlogCta: {
+    "zh-CN": () => "   是否调 /fabric-archive 跨会话补归档这些遗漏?",
+    en: () => "   Run /fabric-archive to sweep these missed sessions across the backlog?",
+    "zh-CN-hybrid": () => "   是否调 /fabric-archive 跨会话补归档这些遗漏?",
+  },
+
   // ---- Signal B: review -----------------------------------------------------
   // Source (zh-CN): fabric-hint.cjs:651  `📋 Fabric: 已积累 ${stats.count} 条待审核知识${ageSuffix}。`
   // params: { count, ageSuffix } — ageSuffix is " / 最早一条 N.N 天前" or "" (zh-CN only)

package/templates/skills/fabric-archive/SKILL.md

@@ -65,6 +65,18 @@ The deterministic ledger scan now runs **server-side** — call `fab_archive_sca
 
 Then (LLM side, Boundary B): for each returned `session_id`, load `.fabric/.cache/session-digests/<session_id>.md`, concatenate into a `### Cross-session digest` block, and populate `source_sessions[]` + `session_context` for Phase 4. Cap at `archive_digest_max_sessions`. Missing digest files degrade silently.
 
+**Coverage transparency (crack 3 — cheap recall backstop).** BEFORE collecting candidates, surface the scan's watermark + drops to the user so a human can act as the recall detector and manually override (`--range <session_id>` to force a dropped session back in). This is the affordable substitute for the (deferred) periodic cold-eval miss-rate audit — show, don't hide, what the deterministic filter skipped:
+
+```
+📋 归档覆盖到 <covered_through_ts 转人类可读时间>。
+   纳入会话: <session_ids.length> 个。
+   跳过 <dropped.length> 个: <每个 {session_id 短码} (reason)>
+     reason 含义: user_dismissed=用户曾拒绝 / cooldown=12h 防抖内 / no_new_signal=自上次归档无新高价值活
+   若某个被跳过的会话其实有该归档的内容,显式 `fabric-archive --range <session_id>` 强制纳入。
+```
+
+Render `dropped` only when non-empty; render the watermark line always. en variant mirrors the same fields. Keep it ONE compact block — this is a backstop affordance, not a report.
+
 `Read ref/phase-1-cross-session.md` for the filter state machine + digest-stitch + graceful-degradation notes. The hand-rolled `tail -n 200` scan is retired — `fab_archive_scan` is the source of truth.
 
 Graceful degradation: missing digest cache → single-session fallback. Missing `session_archive_attempted` events (pre-rc.25) → legacy "scan everything since anchor" behaviour.
@@ -93,6 +105,8 @@ Pre-PASS HARD gate (rc.37 NEW-4): per candidate, run `fab_review action="search"
 
 For each candidate, propose **type** ∈ {model, decision, guideline, pitfall, process}, **layer** ∈ {team, personal} via the verbatim heuristic below, **slug** (kebab-case 2-5 words, 20-40 chars, unique within type+layer bucket), **summary** (1-2 sentences).
 
+> **Self-sufficiency standard — guideline / model summaries (KT-GLD-0001/0006).** These two types land in the SessionStart **ALWAYS-ACTIVE** sink as a single INDEX line with NO body injected — so the summary IS the operative rule the agent acts on. Author it as a self-contained imperative that states the thesis (the *what* + the operative *so-what*), e.g. `改源码前先读 bootstrap+compiler config;scripts 为 init 主执行边界`. A topic label that only points at the body (`Code style guidelines`, `Scope model`) is NOT acceptable here — the reader can't act on it without a fetch, breaking the always-active contract. decision/pitfall/process summaries are exempt (they surface as `must_read_if` triggers, deliberately pointers). Do NOT self-judge sufficiency in this phase (curse-of-knowledge rubber-stamps — KT-GLD-0006); authoring to the standard is the write-time floor, the zero-context cold-eval at review time is the real gate.
+
 #### Layer Classification Heuristic (verbatim, contract-locked)
 
 > - **强 team**: 引用本项目代码、团队共识用语（"we decided"）、fabric-import 路径产物、业务领域、绑定本项目代码的 pitfall

package/templates/skills/fabric-review/SKILL.md

@@ -119,6 +119,15 @@ DO NOT AskUserQuestion "is this a duplicate?" — LLM already judged. User only
 
 `Read ref/semantic-check.md` for full procedure + 三类判断的细化定义.
 
+## Summary Self-Sufficiency Gate (guideline / model only — KT-GLD-0006)
+
+Guideline/model entries surface in the SessionStart **ALWAYS-ACTIVE** sink as a body-less INDEX line, so an opaque summary (`Code style guidelines`) leaks in as an unactionable "rule". Before approving/promoting a **guideline or model** (only these two types — decision/pitfall/process surface as `must_read_if` triggers and are exempt), run the summary through the **zero-context cold-eval judge**, never your own judgment:
+
+- The reviewing agent self-judging sufficiency is curse-of-knowledge — it back-fills from context it already has and rubber-stamps pointers (KT-GLD-0006). The withheld-body cold eval is the whole point.
+- Build the batch with `summary-cold-eval.ts#buildColdEvalBatch` (rubric = `COLD_EVAL_RUBRIC`, candidates = the guideline/model summaries) and hand it to an **offline** judge via `maestro delegate` (zero-context, batched — NOT on the hot path). The judge returns `ColdEvalVerdict[]`.
+- For each `self_sufficient=false` verdict: surface `⚠ Summary not act-on-able (cold-eval); suggested: <suggested_summary>` and route to `modify-content` (summary rewrite, stable_id preserved) — do NOT approve as-is. `self_sufficient=true` → no action.
+- This is a nudge, not a hard block (KT-DEC-0007): the user may still approve over a failed verdict, but the flag must be shown.
+
 ## Narrowing Imported Entries & Modify Sub-Flow
 
 `modify` is the only action that mutates frontmatter or stable_id. Two paths: