@phren/cli 0.0.10 → 0.0.12

package/mcp/dist/cli-config.js

@@ -1,17 +1,132 @@
 import { getPhrenPath, readRootManifest } from "./shared.js";
 import { installPreferencesFile } from "./phren-paths.js";
-import { getIndexPolicy, updateIndexPolicy, getRetentionPolicy, updateRetentionPolicy, getWorkflowPolicy, updateWorkflowPolicy, } from "./shared-governance.js";
-import { listMachines as listMachinesStore, listProfiles as listProfilesStore } from "./data-access.js";
+import { getIndexPolicy, updateIndexPolicy, getRetentionPolicy, updateRetentionPolicy, getWorkflowPolicy, updateWorkflowPolicy, mergeConfig, VALID_TASK_MODES, VALID_FINDING_SENSITIVITY, } from "./shared-governance.js";
+import { listMachines as listMachinesStore, listProfiles as listProfilesStore, listProfiles } from "./data-access.js";
 import { setTelemetryEnabled, getTelemetrySummary, resetTelemetry } from "./telemetry.js";
 import { governanceInstallPreferencesFile, readInstallPreferences, readGovernanceInstallPreferences, writeInstallPreferences, writeGovernanceInstallPreferences, } from "./init-preferences.js";
 import { PROACTIVITY_LEVELS, getProactivityLevel, getProactivityLevelForTask, getProactivityLevelForFindings, } from "./proactivity.js";
-import { PROJECT_OWNERSHIP_MODES, getProjectOwnershipDefault, parseProjectOwnershipMode, } from "./project-config.js";
+import { PROJECT_OWNERSHIP_MODES, getProjectOwnershipDefault, parseProjectOwnershipMode, updateProjectConfigOverrides, } from "./project-config.js";
 import { isValidProjectName, learnedSynonymsPath, learnSynonym, loadLearnedSynonyms, removeLearnedSynonym, } from "./utils.js";
+// ── Shared helpers ────────────────────────────────────────────────────────────
+export function parseProjectArg(args) {
+    const project = args.find((a) => a.startsWith("--project="))?.slice("--project=".length)
+        ?? (args.indexOf("--project") !== -1 ? args[args.indexOf("--project") + 1] : undefined);
+    const rest = args.filter((a, i) => a !== "--project" && !a.startsWith("--project=") && args[i - 1] !== "--project");
+    return { project, rest };
+}
+export function checkProjectInProfile(phrenPath, project) {
+    const profiles = listProfiles(phrenPath);
+    if (profiles.ok) {
+        const registered = profiles.data.some((entry) => entry.projects.includes(project));
+        if (!registered) {
+            return `Warning: Project '${project}' not found in active profile. Run 'phren add /path/to/${project}' first.\n  Config was written to ${phrenPath}/${project}/phren.project.yaml but won't be used until the project is registered.`;
+        }
+    }
+    return null;
+}
+function warnIfUnregistered(phrenPath, project) {
+    const warning = checkProjectInProfile(phrenPath, project);
+    if (warning)
+        console.error(warning);
+}
+export function buildProactivitySnapshot(phrenPath) {
+    const prefs = readGovernanceInstallPreferences(phrenPath);
+    return {
+        path: governanceInstallPreferencesFile(phrenPath),
+        configured: {
+            proactivity: prefs.proactivity ?? null,
+            proactivityFindings: prefs.proactivityFindings ?? null,
+            proactivityTask: prefs.proactivityTask ?? null,
+        },
+        effective: {
+            proactivity: getProactivityLevel(phrenPath),
+            proactivityFindings: getProactivityLevelForFindings(phrenPath),
+            proactivityTask: getProactivityLevelForTask(phrenPath),
+        },
+    };
+}
+// ── Config show ───────────────────────────────────────────────────────────────
+function formatConfigAsTable(label, rows) {
+    const maxKey = Math.max(...rows.map(([k]) => k.length));
+    console.log(`\n${label}`);
+    for (const [k, v] of rows) {
+        console.log(`  ${k.padEnd(maxKey)}  ${v}`);
+    }
+}
+export function handleConfigShow(args) {
+    const phrenPath = getPhrenPath();
+    const { project: projectArg } = parseProjectArg(args);
+    if (projectArg) {
+        if (!isValidProjectName(projectArg)) {
+            console.error(`Invalid project name: "${projectArg}"`);
+            process.exit(1);
+        }
+        const resolved = mergeConfig(phrenPath, projectArg);
+        const inProfile = checkProjectInProfile(phrenPath, projectArg);
+        console.log(`\nConfig for project: ${projectArg}${inProfile ? "" : "  (not in active profile)"}`);
+        formatConfigAsTable("Finding capture", [
+            ["sensitivity", resolved.findingSensitivity],
+            ["proactivity", resolved.proactivity.base ?? "(global)"],
+            ["proactivity.findings", resolved.proactivity.findings ?? "(global)"],
+            ["proactivity.tasks", resolved.proactivity.tasks ?? "(global)"],
+        ]);
+        formatConfigAsTable("Task automation", [
+            ["taskMode", resolved.taskMode],
+        ]);
+        formatConfigAsTable("Retention policy", [
+            ["ttlDays", String(resolved.retentionPolicy.ttlDays)],
+            ["retentionDays", String(resolved.retentionPolicy.retentionDays)],
+            ["autoAcceptThreshold", String(resolved.retentionPolicy.autoAcceptThreshold)],
+            ["minInjectConfidence", String(resolved.retentionPolicy.minInjectConfidence)],
+            ["decay.d30", String(resolved.retentionPolicy.decay.d30)],
+            ["decay.d60", String(resolved.retentionPolicy.decay.d60)],
+            ["decay.d90", String(resolved.retentionPolicy.decay.d90)],
+            ["decay.d120", String(resolved.retentionPolicy.decay.d120)],
+        ]);
+        formatConfigAsTable("Workflow policy", [
+            ["lowConfidenceThreshold", String(resolved.workflowPolicy.lowConfidenceThreshold)],
+            ["riskySections", resolved.workflowPolicy.riskySections.join(", ")],
+        ]);
+        if (!inProfile) {
+            console.error(`\nRun 'phren add /path/to/${projectArg}' to register this project.`);
+        }
+        console.log("");
+        return;
+    }
+    // Global config — no project
+    const retention = getRetentionPolicy(phrenPath);
+    const workflow = getWorkflowPolicy(phrenPath);
+    console.log("\nGlobal config (applies to all projects unless overridden)");
+    formatConfigAsTable("Finding capture", [
+        ["findingSensitivity", workflow.findingSensitivity],
+    ]);
+    formatConfigAsTable("Task automation", [
+        ["taskMode", workflow.taskMode],
+    ]);
+    formatConfigAsTable("Retention policy", [
+        ["ttlDays", String(retention.ttlDays)],
+        ["retentionDays", String(retention.retentionDays)],
+        ["autoAcceptThreshold", String(retention.autoAcceptThreshold)],
+        ["minInjectConfidence", String(retention.minInjectConfidence)],
+        ["decay.d30", String(retention.decay.d30)],
+        ["decay.d60", String(retention.decay.d60)],
+        ["decay.d90", String(retention.decay.d90)],
+        ["decay.d120", String(retention.decay.d120)],
+    ]);
+    formatConfigAsTable("Workflow policy", [
+        ["lowConfidenceThreshold", String(workflow.lowConfidenceThreshold)],
+        ["riskySections", workflow.riskySections.join(", ")],
+    ]);
+    console.log(`\nUse '--project <name>' to see merged config for a specific project.`);
+    console.log("");
+}
 // ── Config router ────────────────────────────────────────────────────────────
 export async function handleConfig(args) {
     const sub = args[0];
     const rest = args.slice(1);
     switch (sub) {
+        case "show":
+            return handleConfigShow(rest);
         case "policy":
             return handleRetentionPolicy(rest);
         case "workflow":
@@ -42,6 +157,7 @@ export async function handleConfig(args) {
             console.log(`phren config - manage settings and policies
 
 Subcommands:
+  phren config show [--project <name>]  Full merged config summary (what's actually active)
   phren config policy [get|set ...]     Memory retention, TTL, confidence, decay
   phren config workflow [get|set ...]   Risky-memory thresholds, task automation mode
   phren config index [get|set ...]      Indexer include/exclude globs
@@ -137,30 +253,29 @@ function handleConfigSynonyms(args) {
     printSynonymsUsage();
     process.exit(1);
 }
-function proactivityConfigSnapshot(phrenPath) {
-    const prefs = readGovernanceInstallPreferences(phrenPath);
-    return {
-        path: governanceInstallPreferencesFile(phrenPath),
-        configured: {
-            proactivity: prefs.proactivity ?? null,
-            proactivityFindings: prefs.proactivityFindings ?? null,
-            proactivityTask: prefs.proactivityTask ?? null,
-        },
-        effective: {
-            proactivity: getProactivityLevel(phrenPath),
-            proactivityFindings: getProactivityLevelForFindings(phrenPath),
-            proactivityTask: getProactivityLevelForTask(phrenPath),
-        },
-    };
-}
 function handleConfigProactivity(subcommand, args) {
     const phrenPath = getPhrenPath();
-    const value = args[0];
+    const { project: projectArg, rest: filteredArgs } = parseProjectArg(args);
+    const value = filteredArgs[0];
     if (value === undefined) {
-        console.log(JSON.stringify(proactivityConfigSnapshot(phrenPath), null, 2));
+        if (projectArg) {
+            if (!isValidProjectName(projectArg)) {
+                console.error(`Invalid project name: "${projectArg}"`);
+                process.exit(1);
+            }
+            const resolved = mergeConfig(phrenPath, projectArg);
+            console.log(JSON.stringify({
+                _project: projectArg,
+                base: resolved.proactivity.base ?? null,
+                findings: resolved.proactivity.findings ?? null,
+                tasks: resolved.proactivity.tasks ?? null,
+            }, null, 2));
+            return;
+        }
+        console.log(JSON.stringify(buildProactivitySnapshot(phrenPath), null, 2));
         return;
     }
-    if (args.length !== 1) {
+    if (filteredArgs.length !== 1) {
         printProactivityUsage(subcommand);
         process.exit(1);
     }
@@ -169,6 +284,25 @@ function handleConfigProactivity(subcommand, args) {
         printProactivityUsage(subcommand);
         process.exit(1);
     }
+    if (projectArg) {
+        if (!isValidProjectName(projectArg)) {
+            console.error(`Invalid project name: "${projectArg}"`);
+            process.exit(1);
+        }
+        warnIfUnregistered(phrenPath, projectArg);
+        const key = subcommand === "proactivity" ? "proactivity"
+            : subcommand === "proactivity.findings" ? "proactivityFindings"
+                : "proactivityTask";
+        updateProjectConfigOverrides(phrenPath, projectArg, (current) => ({ ...current, [key]: level }));
+        const resolved = mergeConfig(phrenPath, projectArg);
+        console.log(JSON.stringify({
+            _project: projectArg,
+            base: resolved.proactivity.base ?? null,
+            findings: resolved.proactivity.findings ?? null,
+            tasks: resolved.proactivity.tasks ?? null,
+        }, null, 2));
+        return;
+    }
     switch (subcommand) {
         case "proactivity":
             writeGovernanceInstallPreferences(phrenPath, { proactivity: level });
@@ -180,7 +314,7 @@ function handleConfigProactivity(subcommand, args) {
             writeGovernanceInstallPreferences(phrenPath, { proactivityTask: level });
             break;
     }
-    console.log(JSON.stringify(proactivityConfigSnapshot(phrenPath), null, 2));
+    console.log(JSON.stringify(buildProactivitySnapshot(phrenPath), null, 2));
 }
 function projectOwnershipConfigSnapshot(phrenPath) {
     const prefs = readInstallPreferences(phrenPath);
@@ -213,61 +347,7 @@ function handleConfigProjectOwnership(args) {
     writeInstallPreferences(phrenPath, { projectOwnershipDefault: ownership });
     console.log(JSON.stringify(projectOwnershipConfigSnapshot(phrenPath), null, 2));
 }
-// ── Task mode ─────────────────────────────────────────────────────────────────
-const TASK_MODES = ["off", "manual", "suggest", "auto"];
-function normalizeTaskMode(raw) {
-    if (!raw)
-        return undefined;
-    const normalized = raw.trim().toLowerCase();
-    return TASK_MODES.includes(normalized) ? normalized : undefined;
-}
-function taskModeConfigSnapshot(phrenPath) {
-    const policy = getWorkflowPolicy(phrenPath);
-    return {
-        taskMode: policy.taskMode,
-    };
-}
-function handleConfigTaskMode(args) {
-    const phrenPath = getPhrenPath();
-    const action = args[0];
-    if (!action || action === "get") {
-        console.log(JSON.stringify(taskModeConfigSnapshot(phrenPath), null, 2));
-        return;
-    }
-    if (action === "set") {
-        const mode = normalizeTaskMode(args[1]);
-        if (!mode) {
-            console.error(`Usage: phren config task-mode set [${TASK_MODES.join("|")}]`);
-            process.exit(1);
-        }
-        const result = updateWorkflowPolicy(phrenPath, { taskMode: mode });
-        if (!result.ok) {
-            console.error(result.error);
-            if (result.code === "PERMISSION_DENIED")
-                process.exit(1);
-            return;
-        }
-        console.log(JSON.stringify(taskModeConfigSnapshot(phrenPath), null, 2));
-        return;
-    }
-    // Bare value: phren config task-mode auto
-    const mode = normalizeTaskMode(action);
-    if (mode) {
-        const result = updateWorkflowPolicy(phrenPath, { taskMode: mode });
-        if (!result.ok) {
-            console.error(result.error);
-            if (result.code === "PERMISSION_DENIED")
-                process.exit(1);
-            return;
-        }
-        console.log(JSON.stringify(taskModeConfigSnapshot(phrenPath), null, 2));
-        return;
-    }
-    console.error(`Usage: phren config task-mode [get|set <mode>|<mode>]  — modes: ${TASK_MODES.join("|")}`);
-    process.exit(1);
-}
-// ── Finding sensitivity ───────────────────────────────────────────────────────
-const FINDING_SENSITIVITY_LEVELS = ["minimal", "conservative", "balanced", "aggressive"];
+// ── Finding sensitivity config ────────────────────────────────────────────────
 export const FINDING_SENSITIVITY_CONFIG = {
     minimal: {
         sessionCap: 0,
@@ -290,59 +370,94 @@ export const FINDING_SENSITIVITY_CONFIG = {
         agentInstruction: "Save everything worth remembering — err on the side of capturing.",
     },
 };
-function normalizeFindingSensitivity(v) {
-    if (!v)
-        return null;
-    const lower = v.toLowerCase();
-    if (FINDING_SENSITIVITY_LEVELS.includes(lower))
-        return lower;
-    return null;
-}
-function findingSensitivityConfigSnapshot(phrenPath) {
-    const policy = getWorkflowPolicy(phrenPath);
-    const level = policy.findingSensitivity;
-    const config = FINDING_SENSITIVITY_CONFIG[level];
-    return { level, ...config };
-}
-function handleConfigFindingSensitivity(args) {
+function handleWorkflowField(args, opts) {
     const phrenPath = getPhrenPath();
-    const action = args[0];
+    const { project: projectArg, rest: filteredArgs } = parseProjectArg(args);
+    const action = filteredArgs[0];
     if (!action || action === "get") {
-        console.log(JSON.stringify(findingSensitivityConfigSnapshot(phrenPath), null, 2));
-        return;
-    }
-    if (action === "set") {
-        const level = normalizeFindingSensitivity(args[1]);
-        if (!level) {
-            console.error(`Usage: phren config finding-sensitivity set [${FINDING_SENSITIVITY_LEVELS.join("|")}]`);
-            process.exit(1);
-        }
-        const result = updateWorkflowPolicy(phrenPath, { findingSensitivity: level });
-        if (!result.ok) {
-            console.error(result.error);
-            if (result.code === "PERMISSION_DENIED")
+        if (projectArg) {
+            if (!isValidProjectName(projectArg)) {
+                console.error(`Invalid project name: "${projectArg}"`);
                 process.exit(1);
+            }
+            const resolved = mergeConfig(phrenPath, projectArg);
+            const value = opts.getProjectValue(resolved);
+            console.log(JSON.stringify(opts.formatProjectOutput(projectArg, value), null, 2));
             return;
         }
-        console.log(JSON.stringify(findingSensitivityConfigSnapshot(phrenPath), null, 2));
+        console.log(JSON.stringify(opts.getSnapshot(phrenPath), null, 2));
         return;
     }
-    // Bare value: phren config finding-sensitivity balanced
-    const level = normalizeFindingSensitivity(action);
-    if (level) {
-        const result = updateWorkflowPolicy(phrenPath, { findingSensitivity: level });
+    const applyValue = (value) => {
+        if (projectArg) {
+            if (!isValidProjectName(projectArg)) {
+                console.error(`Invalid project name: "${projectArg}"`);
+                process.exit(1);
+            }
+            warnIfUnregistered(phrenPath, projectArg);
+            updateProjectConfigOverrides(phrenPath, projectArg, (current) => ({ ...current, [opts.projectOverrideKey]: value }));
+            const resolved = mergeConfig(phrenPath, projectArg);
+            const eff = opts.getProjectValue(resolved);
+            console.log(JSON.stringify(opts.formatProjectOutput(projectArg, eff), null, 2));
+            return;
+        }
+        const result = updateWorkflowPolicy(phrenPath, { [opts.workflowPatchKey]: value });
         if (!result.ok) {
             console.error(result.error);
             if (result.code === "PERMISSION_DENIED")
                 process.exit(1);
             return;
         }
-        console.log(JSON.stringify(findingSensitivityConfigSnapshot(phrenPath), null, 2));
-        return;
+        console.log(JSON.stringify(opts.getSnapshot(phrenPath), null, 2));
+    };
+    if (action === "set") {
+        const value = opts.normalize(filteredArgs[1]);
+        if (!value) {
+            console.error(`Usage: phren config ${opts.fieldName} set [${opts.validValues.join("|")}]`);
+            process.exit(1);
+        }
+        return applyValue(value);
     }
-    console.error(`Usage: phren config finding-sensitivity [get|set <level>|<level>]  — levels: ${FINDING_SENSITIVITY_LEVELS.join("|")}`);
+    const value = opts.normalize(action);
+    if (value)
+        return applyValue(value);
+    console.error(`Usage: phren config ${opts.fieldName} [--project <name>] [get|set <value>|<value>]  — values: ${opts.validValues.join("|")}`);
     process.exit(1);
 }
+function normalizeFromList(raw, validValues) {
+    if (!raw)
+        return null;
+    const lower = raw.trim().toLowerCase();
+    return validValues.includes(lower) ? lower : null;
+}
+function handleConfigTaskMode(args) {
+    handleWorkflowField(args, {
+        fieldName: "task-mode",
+        validValues: VALID_TASK_MODES,
+        normalize: (raw) => normalizeFromList(raw, VALID_TASK_MODES),
+        getSnapshot: (phrenPath) => ({ taskMode: getWorkflowPolicy(phrenPath).taskMode }),
+        getProjectValue: (resolved) => resolved.taskMode,
+        formatProjectOutput: (proj, value) => ({ _project: proj, taskMode: value }),
+        workflowPatchKey: "taskMode",
+        projectOverrideKey: "taskMode",
+    });
+}
+function handleConfigFindingSensitivity(args) {
+    handleWorkflowField(args, {
+        fieldName: "finding-sensitivity",
+        validValues: VALID_FINDING_SENSITIVITY,
+        normalize: (raw) => normalizeFromList(raw, VALID_FINDING_SENSITIVITY),
+        getSnapshot: (phrenPath) => {
+            const policy = getWorkflowPolicy(phrenPath);
+            const level = policy.findingSensitivity;
+            return { level, ...FINDING_SENSITIVITY_CONFIG[level] };
+        },
+        getProjectValue: (resolved) => resolved.findingSensitivity,
+        formatProjectOutput: (proj, value) => ({ _project: proj, level: value, ...FINDING_SENSITIVITY_CONFIG[value] }),
+        workflowPatchKey: "findingSensitivity",
+        projectOverrideKey: "findingSensitivity",
+    });
+}
 // ── LLM config ───────────────────────────────────────────────────────────────
 const EXPENSIVE_MODEL_RE = /opus|sonnet|gpt-4(?!o-mini)/i;
 const DEFAULT_LLM_MODEL = "gpt-4o-mini / claude-haiku-4-5-20251001";
@@ -429,7 +544,7 @@ export async function handleIndexPolicy(args) {
         }
         const result = updateIndexPolicy(getPhrenPath(), patch);
         if (!result.ok) {
-            console.log(result.error);
+            console.error(result.error);
             if (result.code === "PERMISSION_DENIED")
                 process.exit(1);
             return;
@@ -442,10 +557,20 @@ export async function handleIndexPolicy(args) {
 }
 // ── Memory policy ────────────────────────────────────────────────────────────
 export async function handleRetentionPolicy(args) {
-    if (!args.length || args[0] === "get") {
-        console.log(JSON.stringify(getRetentionPolicy(getPhrenPath()), null, 2));
-        const dedupOn = (process.env.PHREN_FEATURE_SEMANTIC_DEDUP ?? (process.env.PHREN_FEATURE_SEMANTIC_DEDUP || process.env.PHREN_FEATURE_SEMANTIC_DEDUP)) === "1";
-        const conflictOn = (process.env.PHREN_FEATURE_SEMANTIC_CONFLICT ?? (process.env.PHREN_FEATURE_SEMANTIC_CONFLICT || process.env.PHREN_FEATURE_SEMANTIC_CONFLICT)) === "1";
+    const phrenPath = getPhrenPath();
+    const { project: projectArg, rest: filteredArgs } = parseProjectArg(args);
+    if (!filteredArgs.length || filteredArgs[0] === "get") {
+        if (projectArg) {
+            if (!isValidProjectName(projectArg)) {
+                console.error(`Invalid project name: "${projectArg}"`);
+                process.exit(1);
+            }
+            const resolved = mergeConfig(phrenPath, projectArg);
+            console.log(JSON.stringify({ _project: projectArg, ...resolved.retentionPolicy }, null, 2));
+            return;
+        }
+        console.log(JSON.stringify(getRetentionPolicy(phrenPath), null, 2));
+        const conflictOn = process.env.PHREN_FEATURE_SEMANTIC_CONFLICT === "1";
         process.stderr.write(`\nDedup: free Jaccard similarity scan on every add_finding (no API key needed).\n`);
         process.stderr.write(`  Near-matches (30–55% overlap) are returned in the response for the agent to decide.\n`);
         if (conflictOn) {
@@ -458,9 +583,40 @@ export async function handleRetentionPolicy(args) {
         }
         return;
     }
-    if (args[0] === "set") {
+    if (filteredArgs[0] === "set") {
+        if (projectArg) {
+            if (!isValidProjectName(projectArg)) {
+                console.error(`Invalid project name: "${projectArg}"`);
+                process.exit(1);
+            }
+            warnIfUnregistered(phrenPath, projectArg);
+            updateProjectConfigOverrides(phrenPath, projectArg, (current) => {
+                const existingRetention = current.retentionPolicy ?? {};
+                const retentionPatch = { ...existingRetention };
+                for (const arg of filteredArgs.slice(1)) {
+                    if (!arg.startsWith("--"))
+                        continue;
+                    const [k, v] = arg.slice(2).split("=");
+                    if (!k || v === undefined)
+                        continue;
+                    const num = Number(v);
+                    const value = Number.isNaN(num) ? v : num;
+                    if (k.startsWith("decay.")) {
+                        retentionPatch.decay = { ...(retentionPatch.decay ?? {}) };
+                        retentionPatch.decay[k.slice("decay.".length)] = value;
+                    }
+                    else {
+                        retentionPatch[k] = value;
+                    }
+                }
+                return { ...current, retentionPolicy: retentionPatch };
+            });
+            const resolved = mergeConfig(phrenPath, projectArg);
+            console.log(JSON.stringify({ _project: projectArg, ...resolved.retentionPolicy }, null, 2));
+            return;
+        }
         const patch = {};
-        for (const arg of args.slice(1)) {
+        for (const arg of filteredArgs.slice(1)) {
             if (!arg.startsWith("--"))
                 continue;
             const [k, v] = arg.slice(2).split("=");
@@ -476,9 +632,9 @@ export async function handleRetentionPolicy(args) {
                 patch[k] = value;
             }
         }
-        const result = updateRetentionPolicy(getPhrenPath(), patch);
+        const result = updateRetentionPolicy(phrenPath, patch);
         if (!result.ok) {
-            console.log(result.error);
+            console.error(result.error);
             if (result.code === "PERMISSION_DENIED")
                 process.exit(1);
             return;
@@ -486,18 +642,68 @@ export async function handleRetentionPolicy(args) {
         console.log(JSON.stringify(result.data, null, 2));
         return;
     }
-    console.error("Usage: phren config policy [get|set --ttlDays=120 --retentionDays=365 --autoAcceptThreshold=0.75 --minInjectConfidence=0.35 --decay.d30=1 --decay.d60=0.85 --decay.d90=0.65 --decay.d120=0.45]");
+    console.error("Usage: phren config policy [--project <name>] [get|set --ttlDays=120 --retentionDays=365 --autoAcceptThreshold=0.75 --minInjectConfidence=0.35 --decay.d30=1 --decay.d60=0.85 --decay.d90=0.65 --decay.d120=0.45]");
     process.exit(1);
 }
 // ── Memory workflow ──────────────────────────────────────────────────────────
 export async function handleWorkflowPolicy(args) {
-    if (!args.length || args[0] === "get") {
-        console.log(JSON.stringify(getWorkflowPolicy(getPhrenPath()), null, 2));
+    const phrenPath = getPhrenPath();
+    const { project: projectArg, rest: filteredArgs } = parseProjectArg(args);
+    if (!filteredArgs.length || filteredArgs[0] === "get") {
+        if (projectArg) {
+            if (!isValidProjectName(projectArg)) {
+                console.error(`Invalid project name: "${projectArg}"`);
+                process.exit(1);
+            }
+            const resolved = mergeConfig(phrenPath, projectArg);
+            console.log(JSON.stringify({ _project: projectArg, ...resolved.workflowPolicy }, null, 2));
+            return;
+        }
+        console.log(JSON.stringify(getWorkflowPolicy(phrenPath), null, 2));
         return;
     }
-    if (args[0] === "set") {
+    if (filteredArgs[0] === "set") {
+        if (projectArg) {
+            if (!isValidProjectName(projectArg)) {
+                console.error(`Invalid project name: "${projectArg}"`);
+                process.exit(1);
+            }
+            warnIfUnregistered(phrenPath, projectArg);
+            updateProjectConfigOverrides(phrenPath, projectArg, (current) => {
+                const nextConfig = { ...current };
+                const existingWorkflow = current.workflowPolicy ?? {};
+                const workflowPatch = { ...existingWorkflow };
+                for (const arg of filteredArgs.slice(1)) {
+                    if (!arg.startsWith("--"))
+                        continue;
+                    const [k, v] = arg.slice(2).split("=");
+                    if (!k || v === undefined)
+                        continue;
+                    if (k === "riskySections") {
+                        workflowPatch.riskySections = v.split(",").map((s) => s.trim()).filter(Boolean);
+                    }
+                    else if (k === "taskMode") {
+                        nextConfig.taskMode = v;
+                    }
+                    else if (k === "findingSensitivity") {
+                        nextConfig.findingSensitivity = v;
+                    }
+                    else {
+                        const num = Number(v);
+                        workflowPatch[k] = Number.isNaN(num) ? v : num;
+                    }
+                }
+                if (Object.keys(workflowPatch).length > 0 || existingWorkflow !== current.workflowPolicy) {
+                    nextConfig.workflowPolicy = workflowPatch;
+                }
+                return nextConfig;
+            });
+            const resolved = mergeConfig(phrenPath, projectArg);
+            console.log(JSON.stringify({ _project: projectArg, ...resolved.workflowPolicy }, null, 2));
+            return;
+        }
         const patch = {};
-        for (const arg of args.slice(1)) {
+        for (const arg of filteredArgs.slice(1)) {
             if (!arg.startsWith("--"))
                 continue;
             const [k, v] = arg.slice(2).split("=");
@@ -511,7 +717,7 @@ export async function handleWorkflowPolicy(args) {
                 patch[k] = Number.isNaN(num) ? v : num;
             }
         }
-        const result = updateWorkflowPolicy(getPhrenPath(), patch);
+        const result = updateWorkflowPolicy(phrenPath, patch);
         if (!result.ok) {
             console.log(result.error);
             if (result.code === "PERMISSION_DENIED")
@@ -521,7 +727,7 @@ export async function handleWorkflowPolicy(args) {
         console.log(JSON.stringify(result.data, null, 2));
         return;
     }
-    console.error("Usage: phren config workflow [get|set --lowConfidenceThreshold=0.7 --riskySections=Stale,Conflicts --taskMode=manual]");
+    console.error("Usage: phren config workflow [--project <name>] [get|set --lowConfidenceThreshold=0.7 --riskySections=Stale,Conflicts --taskMode=manual]");
     process.exit(1);
 }
 // ── Machines and profiles ────────────────────────────────────────────────────

package/mcp/dist/cli-extract.js

@@ -240,9 +240,10 @@ export async function handleExtractMemories(projectArg, cwdArg, silent = false,
             console.log(`Skipped memory extraction for ${project}: findings proactivity is low.`);
         return;
     }
-    const days = Number.parseInt((process.env.PHREN_MEMORY_EXTRACT_WINDOW_DAYS) || "30", 10);
+    const rawDays = Number.parseInt((process.env.PHREN_MEMORY_EXTRACT_WINDOW_DAYS) || "30", 10);
+    const days = Number.isNaN(rawDays) ? 30 : Math.max(1, rawDays);
     const threshold = Number.parseFloat((process.env.PHREN_MEMORY_AUTO_ACCEPT) || String(getRetentionPolicy(getPhrenPath()).autoAcceptThreshold));
-    const records = parseGitLogRecords(repoRoot, Number.isNaN(days) ? 30 : days);
+    const records = parseGitLogRecords(repoRoot, days);
     const ghCandidates = isFeatureEnabled("PHREN_FEATURE_GH_MINING", false)
         ? await mineGithubCandidates(repoRoot)
         : [];