@massu/core 1.12.2 → 1.13.0

package/CHANGELOG.md

@@ -4,6 +4,50 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.13.0] - 2026-05-20
+
+**v0.2 Interactive Rule-Approval (`plan-v0.2-interactive-rule-approval`)**. Closes the silent-self-attestation bug class in Massu's auto-learning system. v0.1 (`auto-learning.md:35-46`) was a protocol obligation the model self-enforces at `/massu-loop` end, audited post-hoc by `/massu-learning-audit`. v0.2 adds real-time correction detection (UserPromptSubmit hook, score-based threshold ≥60), side-channel rule-candidate funnel (`.massu/rule-candidates/<sha>.json`), explicit slash command `/massu-rule list|show|approve|dismiss|recurrence`, atomic write through `applyRuleCandidate()` helper with `audit_log` UNIQUE-INDEX idempotency, three-class rubric (`pattern-scanner | claude-md-cr | corrections-md`) + `autoLearning.customDestinations` config extension point. Three-layer structural enforcement: protocol gate (slash command + hook) + idempotency lock (`audit_log` UNIQUE INDEX) + drift-guard vitest (`rule-promotion-effectiveness.test.ts`). New canonical rule CR-53 codifies "auto-learned rules must be effective". Ships as `@massu/core@1.13.0` — new MCP-adjacent capability + new slash command + backwards-compatible `audit_log.event_type` CHECK extension (internal-process table, zero external schema consumers — minor justified per semver §7).
+
+### Added
+
+- **CR-53 / VR-INTERACTIVE-LEARNING** — every `audit_log` row with `event_type='rule_promoted'` older than 7 days MUST have `metadata.recurrence_count == 0`. Three-layer enforcement: protocol gate (`/massu-rule approve` inserts `recurrence_count: 0`) + increment hook (`post-tool-use.ts:incrementRecurrenceCountsForScannerFailures` via `lib/recurrence-incrementer.ts`) + drift-guard (`rule-promotion-effectiveness.test.ts` dual-channel: audit_log AND `.cr53-increment-failures.jsonl`). Allowlist via `MASSU_KNOWN_RULE_LIMITATIONS` env-var for documented exceptions (channel-a only; failure-log channel-b cannot be silenced).
+- **`packages/core/src/rule-candidate-detector.ts`** — `scoreCorrectionPrompt()` scoring model with 9 signals + threshold ≥60. Replaces the binary `correctionPatterns` regex from `prompt-analyzer.ts:59` which mis-fired on "no problem" / "no thanks". Calibration: precision=1.000, recall=0.844 on 32 labeled positives + 122 negatives.
+- **`.claude/commands/massu-rule.md`** + paired `website/content/docs/commands/massu-rule.mdx` — slash command with `list | show <id> | approve <id> | dismiss <id> | recurrence` subcommands. Show-before-approve enforced via `.shown-this-session.jsonl` (single-keystroke read-then-act; no `--force` flag — CR-46 #3).
+- **`packages/core/src/rule-candidate-applier.ts`** — atomic-write applier with snapshot-set rollback. Single authoring surface for all 4 destinations (pattern-scanner, claude-md-cr, corrections-md, custom-destination). UNIQUE INDEX `idx_audit_rule_promoted` on `(event_type, json_extract(metadata, '$.prompt_hash'))` is the §5 idempotency lock — second approve of same prompt_hash is `idempotent_noop`. `claude-md-cr` destination splices the Canonical Rules table row AND appends body section (CR-46 #3 — no piecemeal escape hatch).
+- **`packages/core/src/rule-classifier.ts`** — 4-rubric destination dispatch: (1) literal-grepable token → pattern-scanner, (2) process/protocol wording → claude-md-cr, (3) `custom-destination` from `autoLearning.customDestinations` config triggerKeywords, (4) corrections-md catchall.
+- **`packages/core/src/template-renderer.ts`** — RCE-safe template engine for custom-destination templates. Regex-substitution only, allowlist set `{date, slug, score, signals_csv, prompt_preview, destination_name}`. `${process.exit(1)}` fails identifier-shape; `${process}` fails allowlist. 10 explicit RCE-attempt test cases.
+- **`packages/core/src/rule-candidate-renderer.ts`** — six-section preview renderer for `/massu-rule show <id>` (detected correction + reacting-to + proposed rule + destination + enforcement + conflicts).
+- **`packages/core/src/rule-promotion-effectiveness.ts`** + `__tests__/rule-promotion-effectiveness.test.ts` — CR-53 dual-channel evaluator consumed by both the drift-guard vitest test and `/massu-learning-audit` Section 6.
+- **`packages/core/src/lib/recurrence-incrementer.ts`** — extracted from `hooks/post-tool-use.ts` (ARCH-04 fix; breaks test-infra ↔ esbuild-entry coupling). Tight 1-line FAIL scope per scanner violation (ARCH-05).
+- **SQLite schema additions** in `memory-db.ts`: `audit_log` CHECK constraint extended 6 → 9 event_type values (`rule_candidate_emitted`, `rule_promoted`, `rule_dismissed`) via canonical 12-step recreate procedure. `prompt_outcomes_signal_blacklist` table for dismissal-loop signal downweighting. UNIQUE INDEX `idx_audit_rule_promoted` (partial — only on `rule_promoted` rows). Migration helper `migrateAuditLogCheckExtension()` is idempotent via CHECK-clause-shape parse with full event_type set verification (ARCH-06).
+- **`AuditEntry.eventType` union** in `audit-trail.ts` extended 6 → 9 in lockstep with SQL CHECK.
+- **`scripts/massu-pattern-scanner.sh` Check 29** + `pattern-scanner-check-29.test.ts` drift-guard — auto-generated scanner additions must carry `# auto-generated by /massu-rule approve <hash> (slug=<slug>)` marker followed by `# Check N:` within 4 lines.
+- **`.claude/commands/massu-learning-audit.md` Section 6** — Interactive Rule-Candidate Funnel with 6 health metrics + source-tag split + VR-INTERACTIVE-LEARNING.
+- **15 new vitest test files** in `packages/core/src/__tests__/`: `rule-candidate-detector` (49 tests), `rule-candidate-detector-calibration` (5), `rule-candidate-renderer` (9), `rule-candidate-applier` (10), `rule-candidate-applier-extended` (9), `rule-candidate-applier-arch-fixes` (11), `rule-classifier` (22), `template-renderer` (21), `cr53-recurrence-increment` (7), `rule-promotion-effectiveness` (10), `audit-log-event-type-migration` (11), `pattern-scanner-check-29` (3), `auto-learning-source-tag` (3), `auto-learning-mirror-drift-guard` (4). 175 new tests total.
+- **`autoLearning.customDestinations`** schema in `packages/core/src/config.ts` + `massu.config.yaml` default block. Massu framework remains generalized — project-specific destinations are config-driven, NEVER framework-baked.
+- **v0.1 protocol amendment** in `.claude/commands/massu-loop/references/auto-learning.md` (+ byte-equivalent mirror at `packages/core/commands/...` enforced by `auto-learning-mirror-drift-guard.test.ts`): before writing to `corrections.md`, resolve MEMORY.md path via `encodeMemoryDirName(getProjectRoot())` and check for an existing `prompt_hash:` line — idempotent across v0.1 + v0.2 paths.
+- **Follow-up plan** `docs/plans/2026-05-20-loop-controller-mirror-drift-closure.md` filed to close the preexisting 78-line drift in `loop-controller.md` mirror (deliberately out of scope for v0.2 per CR-46 #4).
+
+### Changed
+
+- **`packages/core/src/hooks/user-prompt.ts:115`** — wires `scoreCorrectionPrompt()` into the UserPromptSubmit hook. On `emitCandidate=true`, writes `.massu/rule-candidates/<prompt_hash>.json` (sha-keyed → idempotent on retry). Stderr nudge fires when candidate count grows since last-surfaced. Detector-swallow writes `.detector-failures.jsonl` for parallel observability symmetry with the CR-53 increment hook (ARCH-07). Transcript path bound to `/.claude/projects/` prefix (SEC-05).
+- **`packages/core/src/hooks/post-tool-use.ts`** — calls `incrementRecurrenceCountsForScannerFailures` after `Bash(massu-pattern-scanner.sh)` invocations. Failure-surfaced try/catch writes to `.cr53-increment-failures.jsonl` so silent in-hook failures still surface in CI.
+- **`DEFAULT_ABANDON_PATTERNS`** in `prompt-analyzer.ts:22` — `export`ed so the detector can reference it (used as a comparison constant for the dedicated `CORRECTION_DISMISSAL_PATTERN` in the detector). The detector itself uses a TIGHTER regex (excludes "instead" and "different" which are routine CORRECTION tokens).
+- **`scripts/massu-pattern-scanner.sh`** — added Check 29 at the end (29 checks total, up from 28).
+- **`.claude/CLAUDE.md`** — CR-53 row in Canonical Rules table + body section + VR-INTERACTIVE-LEARNING row in Verification Requirements table.
+- **`packages/core/src/__tests__/codebase-introspector.test.ts`** — perf test now uses explicit 15s timeout + 2 retries to absorb parallel-suite measurement noise (pre-existing flake surfaced during this release's gate run; assertion stays strict at <2000ms).
+- **`website/src/__tests__/changelog-parse.test.ts:EXPECTED_COUNT`** bumped 41 → 42.
+
+### Fixed
+
+Phase 1.5 multi-perspective review surfaced 5 security + 7 architecture findings; all fixed within the same plan (CR-45 zero-tolerance).
+
+- **SEC-01 path traversal** — `CANDIDATE_ID_PATTERN = /^[a-f0-9]{16}$/` validates candidateId at every I/O boundary in `applyRuleCandidate`, `readCandidate`, `dismissRuleCandidate`. Closes the `<id>` like `../../../tmp/foo` arbitrary-file-deletion class.
+- **SEC-02 symlink bypass** — `realpathSync` containment check on `customDestination.path` rejects symlinks that point outside `projectRoot` even when the lexical path is contained.
+- **SEC-03 slug shell injection** — `deriveSlug` is always called regardless of caller-supplied source; `SLUG_ALLOWED` regex re-validates the result. Caller `opts.slug` is a hint, never authority.
+- **SEC-04 candidate payload tampering** — `validateCandidatePayload` runtime checks `prompt_hash` shape, `score` finite-range, `signals` array structure, required string fields. Planted/corrupted sidecars throw `CandidatePayloadValidationError` before any audit_log write.
+- **ARCH-02 dismiss path** — `dismissRuleCandidate()` writes the prompt_outcomes_signal_blacklist UPSERT + audit_log row + `.dismissed.jsonl` + deletes the candidate sidecar in one SQLite transaction. Closes the "documented end-to-end but the write path was unimplemented" structural drift class.
+
 ## [1.12.2] - 2026-05-18
 
 **Security MEDIUM sweep (`plan-2026-05-18-security-medium-sweep`)**. Closes the 5 MEDIUM findings from the post-1.12.0 `massu-security-reviewer` audit-loop with structural drift-guards for each. M-1 IP_HASH_PEPPER consistency (silent-fallback vs throw class), M-2 webhook POST schema symmetry, M-3 Lemon Squeezy webhook idempotency parity with Stripe, M-4 v1 audit UUID echo redaction, M-5 SSO IdP host allowlist (precondition for SSO re-enable). New CR-51 + VR-PEPPER-GUARD + pattern-scanner Check 27.

package/commands/massu-loop/references/auto-learning.md

@@ -43,7 +43,7 @@ After Loop Completes (Zero Gaps):
 - **Update pattern scanner**: Add new grep-able bad patterns to `scripts/pattern-scanner.sh`
 - **Codebase-wide search**: Verify no other instances of same bad pattern (CR-9)
 - **Consider new CR rule**: If a class of bug was found (not one-off), propose for CLAUDE.md
-- **Record user corrections**: If the user corrected any behavior during this loop, add structured entry to `memory/corrections.md` with date, wrong behavior, correction, and prevention rule
+- **Record user corrections**: If the user corrected any behavior during this loop, add structured entry to `memory/corrections.md` with date, wrong behavior, correction, and prevention rule. Before writing, resolve the MEMORY.md path via `encodeMemoryDirName(getProjectRoot())` (see `packages/core/src/lib/memory-path.ts:37`) and check that file for an existing `prompt_hash:` line matching this correction; if present, the entry was captured interactively (v0.2 — plan `plan-v0.2-interactive-rule-approval`) and this step is a no-op (CR-53 effectiveness invariant — see `.claude/CLAUDE.md`).
 
 **A loop that fixes 5 bugs but records 0 learnings is 80% wasted. The fixes are temporary; the learnings are permanent.**
 **A reflection that isn't persisted to memory is a learning that will be lost. Text output is not persistence.**

package/dist/cli.js

@@ -377,7 +377,17 @@ var init_config = __esm({
         requireIncidentReport: z.boolean().default(true),
         requirePreventionRule: z.boolean().default(true),
         requireEnforcement: z.boolean().default(true)
-      }).default({})
+      }).default({}),
+      // plan-v0.2-interactive-rule-approval P-D-008 / P-D-009: project-configured
+      // custom destinations for the rule-candidate funnel. The classifier matches
+      // a candidate to one of these entries when none of the framework
+      // destinations (pattern-scanner / claude-md-cr / corrections-md) apply.
+      customDestinations: z.array(z.object({
+        name: z.string(),
+        path: z.string(),
+        triggerKeywords: z.array(z.string()).default([]),
+        template: z.string()
+      })).default([])
     }).optional();
     CloudConfigSchema = z.object({
       enabled: z.boolean().default(false),
@@ -631,6 +641,7 @@ __export(memory_db_exports, {
   incrementRetryCount: () => incrementRetryCount,
   initMemorySchema: () => initMemorySchema,
   linkSessionToTask: () => linkSessionToTask,
+  migrateAuditLogCheckExtension: () => migrateAuditLogCheckExtension,
   pruneOldConversationTurns: () => pruneOldConversationTurns,
   pruneOldObservations: () => pruneOldObservations,
   pruneToolCostEvents: () => pruneToolCostEvents,
@@ -668,6 +679,66 @@ function pruneToolCostEvents(db) {
   ).run(TOOL_COST_EVENTS_RETENTION_DAYS);
   return result.changes;
 }
+function migrateAuditLogCheckExtension(db) {
+  const row = db.prepare("SELECT sql FROM sqlite_master WHERE type='table' AND name='audit_log'").get();
+  if (!row) return;
+  const expected = [
+    "code_change",
+    "rule_enforced",
+    "approval",
+    "review",
+    "commit",
+    "compaction",
+    "rule_candidate_emitted",
+    "rule_promoted",
+    "rule_dismissed"
+  ];
+  const checkClauseMatch = row.sql.match(/event_type\s+TEXT\s+NOT\s+NULL\s+CHECK\s*\(\s*event_type\s+IN\s*\(([\s\S]*?)\)\s*\)/i);
+  if (checkClauseMatch) {
+    const values = (checkClauseMatch[1].match(/'([^']+)'/g) ?? []).map((s) => s.slice(1, -1));
+    if (expected.every((v3) => values.includes(v3))) return;
+  }
+  db.pragma("foreign_keys = OFF");
+  try {
+    db.exec("BEGIN TRANSACTION");
+    db.exec(`
+      CREATE TABLE audit_log_new (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        session_id TEXT NOT NULL,
+        timestamp TEXT DEFAULT (datetime('now')),
+        event_type TEXT NOT NULL CHECK(event_type IN (
+          'code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction',
+          'rule_candidate_emitted', 'rule_promoted', 'rule_dismissed'
+        )),
+        actor TEXT NOT NULL DEFAULT 'ai' CHECK(actor IN ('ai', 'human', 'hook', 'agent')),
+        model_id TEXT,
+        file_path TEXT,
+        change_type TEXT CHECK(change_type IN ('create', 'edit', 'delete')),
+        rules_in_effect TEXT,
+        approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
+        evidence TEXT,
+        metadata TEXT,
+        FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
+      );
+      INSERT INTO audit_log_new SELECT * FROM audit_log;
+      DROP TABLE audit_log;
+      ALTER TABLE audit_log_new RENAME TO audit_log;
+      CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
+      CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
+      CREATE INDEX IF NOT EXISTS idx_al_event ON audit_log(event_type);
+      CREATE INDEX IF NOT EXISTS idx_al_timestamp ON audit_log(timestamp DESC);
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_rule_promoted
+        ON audit_log (event_type, json_extract(metadata, '$.prompt_hash'))
+        WHERE event_type = 'rule_promoted';
+    `);
+    db.exec("COMMIT");
+  } catch (err) {
+    db.exec("ROLLBACK");
+    throw err;
+  } finally {
+    db.pragma("foreign_keys = ON");
+  }
+}
 function initMemorySchema(db) {
   db.exec(`
     -- Sessions table (linked to Claude Code session IDs)
@@ -957,7 +1028,10 @@ function initMemorySchema(db) {
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       session_id TEXT NOT NULL,
       timestamp TEXT DEFAULT (datetime('now')),
-      event_type TEXT NOT NULL CHECK(event_type IN ('code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction')),
+      event_type TEXT NOT NULL CHECK(event_type IN (
+        'code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction',
+        'rule_candidate_emitted', 'rule_promoted', 'rule_dismissed'
+      )),
       actor TEXT NOT NULL DEFAULT 'ai' CHECK(actor IN ('ai', 'human', 'hook', 'agent')),
       model_id TEXT,
       file_path TEXT,
@@ -972,7 +1046,21 @@ function initMemorySchema(db) {
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
     CREATE INDEX IF NOT EXISTS idx_al_event ON audit_log(event_type);
     CREATE INDEX IF NOT EXISTS idx_al_timestamp ON audit_log(timestamp DESC);
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_rule_promoted
+      ON audit_log (event_type, json_extract(metadata, '$.prompt_hash'))
+      WHERE event_type = 'rule_promoted';
+  `);
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS prompt_outcomes_signal_blacklist (
+      signal TEXT PRIMARY KEY,
+      dismissal_count INTEGER NOT NULL DEFAULT 0,
+      first_dismissed_at TEXT DEFAULT (datetime('now')),
+      last_dismissed_at TEXT DEFAULT (datetime('now'))
+    );
+    CREATE INDEX IF NOT EXISTS idx_psb_count
+      ON prompt_outcomes_signal_blacklist(dismissal_count DESC);
   `);
+  migrateAuditLogCheckExtension(db);
   db.exec(`
     CREATE TABLE IF NOT EXISTS validation_results (
       id INTEGER PRIMARY KEY AUTOINCREMENT,

package/dist/hooks/auto-learning-pipeline.js

@@ -168,7 +168,17 @@ var AutoLearningConfigSchema = z.object({
     requireIncidentReport: z.boolean().default(true),
     requirePreventionRule: z.boolean().default(true),
     requireEnforcement: z.boolean().default(true)
-  }).default({})
+  }).default({}),
+  // plan-v0.2-interactive-rule-approval P-D-008 / P-D-009: project-configured
+  // custom destinations for the rule-candidate funnel. The classifier matches
+  // a candidate to one of these entries when none of the framework
+  // destinations (pattern-scanner / claude-md-cr / corrections-md) apply.
+  customDestinations: z.array(z.object({
+    name: z.string(),
+    path: z.string(),
+    triggerKeywords: z.array(z.string()).default([]),
+    template: z.string()
+  })).default([])
 }).optional();
 var CloudConfigSchema = z.object({
   enabled: z.boolean().default(false),

package/dist/hooks/classify-failure.js

@@ -175,7 +175,17 @@ var AutoLearningConfigSchema = z.object({
     requireIncidentReport: z.boolean().default(true),
     requirePreventionRule: z.boolean().default(true),
     requireEnforcement: z.boolean().default(true)
-  }).default({})
+  }).default({}),
+  // plan-v0.2-interactive-rule-approval P-D-008 / P-D-009: project-configured
+  // custom destinations for the rule-candidate funnel. The classifier matches
+  // a candidate to one of these entries when none of the framework
+  // destinations (pattern-scanner / claude-md-cr / corrections-md) apply.
+  customDestinations: z.array(z.object({
+    name: z.string(),
+    path: z.string(),
+    triggerKeywords: z.array(z.string()).default([]),
+    template: z.string()
+  })).default([])
 }).optional();
 var CloudConfigSchema = z.object({
   enabled: z.boolean().default(false),
@@ -565,6 +575,66 @@ function getMemoryDb() {
   initMemorySchema(db);
   return db;
 }
+function migrateAuditLogCheckExtension(db) {
+  const row = db.prepare("SELECT sql FROM sqlite_master WHERE type='table' AND name='audit_log'").get();
+  if (!row) return;
+  const expected = [
+    "code_change",
+    "rule_enforced",
+    "approval",
+    "review",
+    "commit",
+    "compaction",
+    "rule_candidate_emitted",
+    "rule_promoted",
+    "rule_dismissed"
+  ];
+  const checkClauseMatch = row.sql.match(/event_type\s+TEXT\s+NOT\s+NULL\s+CHECK\s*\(\s*event_type\s+IN\s*\(([\s\S]*?)\)\s*\)/i);
+  if (checkClauseMatch) {
+    const values = (checkClauseMatch[1].match(/'([^']+)'/g) ?? []).map((s) => s.slice(1, -1));
+    if (expected.every((v) => values.includes(v))) return;
+  }
+  db.pragma("foreign_keys = OFF");
+  try {
+    db.exec("BEGIN TRANSACTION");
+    db.exec(`
+      CREATE TABLE audit_log_new (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        session_id TEXT NOT NULL,
+        timestamp TEXT DEFAULT (datetime('now')),
+        event_type TEXT NOT NULL CHECK(event_type IN (
+          'code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction',
+          'rule_candidate_emitted', 'rule_promoted', 'rule_dismissed'
+        )),
+        actor TEXT NOT NULL DEFAULT 'ai' CHECK(actor IN ('ai', 'human', 'hook', 'agent')),
+        model_id TEXT,
+        file_path TEXT,
+        change_type TEXT CHECK(change_type IN ('create', 'edit', 'delete')),
+        rules_in_effect TEXT,
+        approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
+        evidence TEXT,
+        metadata TEXT,
+        FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
+      );
+      INSERT INTO audit_log_new SELECT * FROM audit_log;
+      DROP TABLE audit_log;
+      ALTER TABLE audit_log_new RENAME TO audit_log;
+      CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
+      CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
+      CREATE INDEX IF NOT EXISTS idx_al_event ON audit_log(event_type);
+      CREATE INDEX IF NOT EXISTS idx_al_timestamp ON audit_log(timestamp DESC);
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_rule_promoted
+        ON audit_log (event_type, json_extract(metadata, '$.prompt_hash'))
+        WHERE event_type = 'rule_promoted';
+    `);
+    db.exec("COMMIT");
+  } catch (err) {
+    db.exec("ROLLBACK");
+    throw err;
+  } finally {
+    db.pragma("foreign_keys = ON");
+  }
+}
 function initMemorySchema(db) {
   db.exec(`
     -- Sessions table (linked to Claude Code session IDs)
@@ -854,7 +924,10 @@ function initMemorySchema(db) {
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       session_id TEXT NOT NULL,
       timestamp TEXT DEFAULT (datetime('now')),
-      event_type TEXT NOT NULL CHECK(event_type IN ('code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction')),
+      event_type TEXT NOT NULL CHECK(event_type IN (
+        'code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction',
+        'rule_candidate_emitted', 'rule_promoted', 'rule_dismissed'
+      )),
       actor TEXT NOT NULL DEFAULT 'ai' CHECK(actor IN ('ai', 'human', 'hook', 'agent')),
       model_id TEXT,
       file_path TEXT,
@@ -869,7 +942,21 @@ function initMemorySchema(db) {
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
     CREATE INDEX IF NOT EXISTS idx_al_event ON audit_log(event_type);
     CREATE INDEX IF NOT EXISTS idx_al_timestamp ON audit_log(timestamp DESC);
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_rule_promoted
+      ON audit_log (event_type, json_extract(metadata, '$.prompt_hash'))
+      WHERE event_type = 'rule_promoted';
+  `);
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS prompt_outcomes_signal_blacklist (
+      signal TEXT PRIMARY KEY,
+      dismissal_count INTEGER NOT NULL DEFAULT 0,
+      first_dismissed_at TEXT DEFAULT (datetime('now')),
+      last_dismissed_at TEXT DEFAULT (datetime('now'))
+    );
+    CREATE INDEX IF NOT EXISTS idx_psb_count
+      ON prompt_outcomes_signal_blacklist(dismissal_count DESC);
   `);
+  migrateAuditLogCheckExtension(db);
   db.exec(`
     CREATE TABLE IF NOT EXISTS validation_results (
       id INTEGER PRIMARY KEY AUTOINCREMENT,

package/dist/hooks/cost-tracker.js

@@ -175,7 +175,17 @@ var AutoLearningConfigSchema = z.object({
     requireIncidentReport: z.boolean().default(true),
     requirePreventionRule: z.boolean().default(true),
     requireEnforcement: z.boolean().default(true)
-  }).default({})
+  }).default({}),
+  // plan-v0.2-interactive-rule-approval P-D-008 / P-D-009: project-configured
+  // custom destinations for the rule-candidate funnel. The classifier matches
+  // a candidate to one of these entries when none of the framework
+  // destinations (pattern-scanner / claude-md-cr / corrections-md) apply.
+  customDestinations: z.array(z.object({
+    name: z.string(),
+    path: z.string(),
+    triggerKeywords: z.array(z.string()).default([]),
+    template: z.string()
+  })).default([])
 }).optional();
 var CloudConfigSchema = z.object({
   enabled: z.boolean().default(false),
@@ -562,6 +572,66 @@ function getMemoryDb() {
   initMemorySchema(db);
   return db;
 }
+function migrateAuditLogCheckExtension(db) {
+  const row = db.prepare("SELECT sql FROM sqlite_master WHERE type='table' AND name='audit_log'").get();
+  if (!row) return;
+  const expected = [
+    "code_change",
+    "rule_enforced",
+    "approval",
+    "review",
+    "commit",
+    "compaction",
+    "rule_candidate_emitted",
+    "rule_promoted",
+    "rule_dismissed"
+  ];
+  const checkClauseMatch = row.sql.match(/event_type\s+TEXT\s+NOT\s+NULL\s+CHECK\s*\(\s*event_type\s+IN\s*\(([\s\S]*?)\)\s*\)/i);
+  if (checkClauseMatch) {
+    const values = (checkClauseMatch[1].match(/'([^']+)'/g) ?? []).map((s) => s.slice(1, -1));
+    if (expected.every((v) => values.includes(v))) return;
+  }
+  db.pragma("foreign_keys = OFF");
+  try {
+    db.exec("BEGIN TRANSACTION");
+    db.exec(`
+      CREATE TABLE audit_log_new (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        session_id TEXT NOT NULL,
+        timestamp TEXT DEFAULT (datetime('now')),
+        event_type TEXT NOT NULL CHECK(event_type IN (
+          'code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction',
+          'rule_candidate_emitted', 'rule_promoted', 'rule_dismissed'
+        )),
+        actor TEXT NOT NULL DEFAULT 'ai' CHECK(actor IN ('ai', 'human', 'hook', 'agent')),
+        model_id TEXT,
+        file_path TEXT,
+        change_type TEXT CHECK(change_type IN ('create', 'edit', 'delete')),
+        rules_in_effect TEXT,
+        approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
+        evidence TEXT,
+        metadata TEXT,
+        FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
+      );
+      INSERT INTO audit_log_new SELECT * FROM audit_log;
+      DROP TABLE audit_log;
+      ALTER TABLE audit_log_new RENAME TO audit_log;
+      CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
+      CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
+      CREATE INDEX IF NOT EXISTS idx_al_event ON audit_log(event_type);
+      CREATE INDEX IF NOT EXISTS idx_al_timestamp ON audit_log(timestamp DESC);
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_rule_promoted
+        ON audit_log (event_type, json_extract(metadata, '$.prompt_hash'))
+        WHERE event_type = 'rule_promoted';
+    `);
+    db.exec("COMMIT");
+  } catch (err) {
+    db.exec("ROLLBACK");
+    throw err;
+  } finally {
+    db.pragma("foreign_keys = ON");
+  }
+}
 function initMemorySchema(db) {
   db.exec(`
     -- Sessions table (linked to Claude Code session IDs)
@@ -851,7 +921,10 @@ function initMemorySchema(db) {
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       session_id TEXT NOT NULL,
       timestamp TEXT DEFAULT (datetime('now')),
-      event_type TEXT NOT NULL CHECK(event_type IN ('code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction')),
+      event_type TEXT NOT NULL CHECK(event_type IN (
+        'code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction',
+        'rule_candidate_emitted', 'rule_promoted', 'rule_dismissed'
+      )),
       actor TEXT NOT NULL DEFAULT 'ai' CHECK(actor IN ('ai', 'human', 'hook', 'agent')),
       model_id TEXT,
       file_path TEXT,
@@ -866,7 +939,21 @@ function initMemorySchema(db) {
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
     CREATE INDEX IF NOT EXISTS idx_al_event ON audit_log(event_type);
     CREATE INDEX IF NOT EXISTS idx_al_timestamp ON audit_log(timestamp DESC);
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_rule_promoted
+      ON audit_log (event_type, json_extract(metadata, '$.prompt_hash'))
+      WHERE event_type = 'rule_promoted';
+  `);
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS prompt_outcomes_signal_blacklist (
+      signal TEXT PRIMARY KEY,
+      dismissal_count INTEGER NOT NULL DEFAULT 0,
+      first_dismissed_at TEXT DEFAULT (datetime('now')),
+      last_dismissed_at TEXT DEFAULT (datetime('now'))
+    );
+    CREATE INDEX IF NOT EXISTS idx_psb_count
+      ON prompt_outcomes_signal_blacklist(dismissal_count DESC);
   `);
+  migrateAuditLogCheckExtension(db);
   db.exec(`
     CREATE TABLE IF NOT EXISTS validation_results (
       id INTEGER PRIMARY KEY AUTOINCREMENT,

package/dist/hooks/fix-detector.js

@@ -174,7 +174,17 @@ var AutoLearningConfigSchema = z.object({
     requireIncidentReport: z.boolean().default(true),
     requirePreventionRule: z.boolean().default(true),
     requireEnforcement: z.boolean().default(true)
-  }).default({})
+  }).default({}),
+  // plan-v0.2-interactive-rule-approval P-D-008 / P-D-009: project-configured
+  // custom destinations for the rule-candidate funnel. The classifier matches
+  // a candidate to one of these entries when none of the framework
+  // destinations (pattern-scanner / claude-md-cr / corrections-md) apply.
+  customDestinations: z.array(z.object({
+    name: z.string(),
+    path: z.string(),
+    triggerKeywords: z.array(z.string()).default([]),
+    template: z.string()
+  })).default([])
 }).optional();
 var CloudConfigSchema = z.object({
   enabled: z.boolean().default(false),

package/dist/hooks/incident-pipeline.js

@@ -174,7 +174,17 @@ var AutoLearningConfigSchema = z.object({
     requireIncidentReport: z.boolean().default(true),
     requirePreventionRule: z.boolean().default(true),
     requireEnforcement: z.boolean().default(true)
-  }).default({})
+  }).default({}),
+  // plan-v0.2-interactive-rule-approval P-D-008 / P-D-009: project-configured
+  // custom destinations for the rule-candidate funnel. The classifier matches
+  // a candidate to one of these entries when none of the framework
+  // destinations (pattern-scanner / claude-md-cr / corrections-md) apply.
+  customDestinations: z.array(z.object({
+    name: z.string(),
+    path: z.string(),
+    triggerKeywords: z.array(z.string()).default([]),
+    template: z.string()
+  })).default([])
 }).optional();
 var CloudConfigSchema = z.object({
   enabled: z.boolean().default(false),
@@ -564,6 +574,66 @@ function getMemoryDb() {
   initMemorySchema(db);
   return db;
 }
+function migrateAuditLogCheckExtension(db) {
+  const row = db.prepare("SELECT sql FROM sqlite_master WHERE type='table' AND name='audit_log'").get();
+  if (!row) return;
+  const expected = [
+    "code_change",
+    "rule_enforced",
+    "approval",
+    "review",
+    "commit",
+    "compaction",
+    "rule_candidate_emitted",
+    "rule_promoted",
+    "rule_dismissed"
+  ];
+  const checkClauseMatch = row.sql.match(/event_type\s+TEXT\s+NOT\s+NULL\s+CHECK\s*\(\s*event_type\s+IN\s*\(([\s\S]*?)\)\s*\)/i);
+  if (checkClauseMatch) {
+    const values = (checkClauseMatch[1].match(/'([^']+)'/g) ?? []).map((s) => s.slice(1, -1));
+    if (expected.every((v) => values.includes(v))) return;
+  }
+  db.pragma("foreign_keys = OFF");
+  try {
+    db.exec("BEGIN TRANSACTION");
+    db.exec(`
+      CREATE TABLE audit_log_new (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        session_id TEXT NOT NULL,
+        timestamp TEXT DEFAULT (datetime('now')),
+        event_type TEXT NOT NULL CHECK(event_type IN (
+          'code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction',
+          'rule_candidate_emitted', 'rule_promoted', 'rule_dismissed'
+        )),
+        actor TEXT NOT NULL DEFAULT 'ai' CHECK(actor IN ('ai', 'human', 'hook', 'agent')),
+        model_id TEXT,
+        file_path TEXT,
+        change_type TEXT CHECK(change_type IN ('create', 'edit', 'delete')),
+        rules_in_effect TEXT,
+        approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
+        evidence TEXT,
+        metadata TEXT,
+        FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
+      );
+      INSERT INTO audit_log_new SELECT * FROM audit_log;
+      DROP TABLE audit_log;
+      ALTER TABLE audit_log_new RENAME TO audit_log;
+      CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
+      CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
+      CREATE INDEX IF NOT EXISTS idx_al_event ON audit_log(event_type);
+      CREATE INDEX IF NOT EXISTS idx_al_timestamp ON audit_log(timestamp DESC);
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_rule_promoted
+        ON audit_log (event_type, json_extract(metadata, '$.prompt_hash'))
+        WHERE event_type = 'rule_promoted';
+    `);
+    db.exec("COMMIT");
+  } catch (err) {
+    db.exec("ROLLBACK");
+    throw err;
+  } finally {
+    db.pragma("foreign_keys = ON");
+  }
+}
 function initMemorySchema(db) {
   db.exec(`
     -- Sessions table (linked to Claude Code session IDs)
@@ -853,7 +923,10 @@ function initMemorySchema(db) {
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       session_id TEXT NOT NULL,
       timestamp TEXT DEFAULT (datetime('now')),
-      event_type TEXT NOT NULL CHECK(event_type IN ('code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction')),
+      event_type TEXT NOT NULL CHECK(event_type IN (
+        'code_change', 'rule_enforced', 'approval', 'review', 'commit', 'compaction',
+        'rule_candidate_emitted', 'rule_promoted', 'rule_dismissed'
+      )),
       actor TEXT NOT NULL DEFAULT 'ai' CHECK(actor IN ('ai', 'human', 'hook', 'agent')),
       model_id TEXT,
       file_path TEXT,
@@ -868,7 +941,21 @@ function initMemorySchema(db) {
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
     CREATE INDEX IF NOT EXISTS idx_al_event ON audit_log(event_type);
     CREATE INDEX IF NOT EXISTS idx_al_timestamp ON audit_log(timestamp DESC);
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_rule_promoted
+      ON audit_log (event_type, json_extract(metadata, '$.prompt_hash'))
+      WHERE event_type = 'rule_promoted';
+  `);
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS prompt_outcomes_signal_blacklist (
+      signal TEXT PRIMARY KEY,
+      dismissal_count INTEGER NOT NULL DEFAULT 0,
+      first_dismissed_at TEXT DEFAULT (datetime('now')),
+      last_dismissed_at TEXT DEFAULT (datetime('now'))
+    );
+    CREATE INDEX IF NOT EXISTS idx_psb_count
+      ON prompt_outcomes_signal_blacklist(dismissal_count DESC);
   `);
+  migrateAuditLogCheckExtension(db);
   db.exec(`
     CREATE TABLE IF NOT EXISTS validation_results (
       id INTEGER PRIMARY KEY AUTOINCREMENT,

package/dist/hooks/post-edit-context.js

@@ -173,7 +173,17 @@ var AutoLearningConfigSchema = z.object({
     requireIncidentReport: z.boolean().default(true),
     requirePreventionRule: z.boolean().default(true),
     requireEnforcement: z.boolean().default(true)
-  }).default({})
+  }).default({}),
+  // plan-v0.2-interactive-rule-approval P-D-008 / P-D-009: project-configured
+  // custom destinations for the rule-candidate funnel. The classifier matches
+  // a candidate to one of these entries when none of the framework
+  // destinations (pattern-scanner / claude-md-cr / corrections-md) apply.
+  customDestinations: z.array(z.object({
+    name: z.string(),
+    path: z.string(),
+    triggerKeywords: z.array(z.string()).default([]),
+    template: z.string()
+  })).default([])
 }).optional();
 var CloudConfigSchema = z.object({
   enabled: z.boolean().default(false),