@winspan/claude-forge 8.38.0 → 8.41.0

package/dist/agents/methodologies/agent-builder.js

@@ -59,6 +59,22 @@ export function buildMethodologyAgent(preset) {
         content,
     };
 }
+function generateExamples(phases, slugPlaceholder) {
+    // 只为实际包含的 phase 生成示例，最多取前 2 个有 skillId 的 phase
+    const examplePhases = phases
+        .filter((p) => p.template.skillId !== null)
+        .slice(0, 2);
+    if (examplePhases.length === 0) {
+        return `- Example: \`skill_invoke(skill_id: "official-skill", reason: "workflow/phase${slugPlaceholder}")\``;
+    }
+    const exampleSlug = slugPlaceholder.replace(/[<>]/g, '').replace('-slug', '');
+    return examplePhases
+        .map((p) => {
+        const exampleValue = exampleSlug === 'feature' ? 'user-auth' : 'login-crash';
+        return `- ${p.template.workflow.toUpperCase()} ${p.template.id} phase: \`skill_invoke(skill_id: "${p.template.skillId}", reason: "${p.template.workflow}/${p.template.id}:${exampleValue}")\``;
+    })
+        .join('\n');
+}
 function buildPromptContent(preset, phases) {
     const workflowSet = new Set(phases.map((p) => p.template.workflow));
     const workflowName = workflowSet.size === 1 ? [...workflowSet][0] : 'mixed';
@@ -66,13 +82,9 @@ function buildPromptContent(preset, phases) {
     const tagsLine = preset.tags && preset.tags.length > 0
         ? `\n## 标签\n${preset.tags.map((t) => `\`${t}\``).join(' ')}\n`
         : '';
-    // 根据 workflow 选择 slug 占位符名，跟 phase body 内的约定保持一致：
-    // - bmad 系列 phase body 用 <feature-slug>
-    // - harness 系列 phase body 用 <bug-slug>
-    // 跨方法论（未来）或未知场景 fallback 到通用 <slug>
-    const slugPlaceholder = workflowName === 'harness' ? '<bug-slug>'
-        : workflowName === 'bmad' ? '<feature-slug>'
-            : '<slug>';
+    // 从 phase template 读取 slugPlaceholder，优先使用第一个 phase 的定义
+    // 如果未定义则 fallback 到通用 <slug>
+    const slugPlaceholder = phases[0]?.template.slugPlaceholder ?? '<slug>';
     return `# ${preset.name}
 
 ${preset.description}
@@ -86,6 +98,41 @@ ${tagsLine}
 
 **软性建议**：根据任务实际复杂度灵活调整，可跳过明显不需要的 phase。但每次调用 \`skill_invoke\` 请在 reason 字段带 \`${workflowName}/<phase>[:${slugPlaceholder}]\` 格式，方便进度追踪。
 
+## 执行流程（必须遵守）
+
+在开始执行每个 phase 之前，**必须**调用 \`skill_invoke\` 工具记录进度：
+
+\`\`\`
+skill_invoke(
+  skill_id: "<phase 对应的 skill>",
+  reason: "${workflowName}/<phase-id>[:${slugPlaceholder}]"
+)
+\`\`\`
+
+**示例**：
+${generateExamples(phases, slugPlaceholder)}
+
+**重要**：
+1. reason 参数格式必须严格遵守 \`${workflowName}/<phase>[:${slugPlaceholder}]\`，这样系统才能正确追踪工作流进度
+2. 每个 phase 开始前都要调用，不能跳过
+3. skill_id 必须与 phase 定义中的 skillId 字段一致
+4. ${slugPlaceholder} 建议使用英文、数字和连字符（如 \`user-auth\`、\`login-crash\`），虽然系统支持中文但英文更利于跨团队协作
+
+### 如果 skill_invoke 调用失败
+
+1. **检查 skill_id 是否正确**：
+   - 使用 \`skill_list\` 工具查询可用的 Skill
+   - 确认 skill_id 与 phase 匹配
+
+2. **如果 Skill 不存在**：
+   - 使用通用方法论继续执行该 phase
+   - 在最终报告中说明该 phase 未使用 Skill 指导
+
+3. **如果防护检查失败**：
+   - 检查 reason 参数格式是否正确
+   - 确认 workflow/phase/slug 符合规范
+   - 记录失败原因并继续执行
+
 ---
 
 ${phases.map((p) => p.template.promptBody.trim()).join('\n\n---\n\n')}

package/dist/agents/methodologies/agent-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-builder.js","sourceRoot":"","sources":["../../../src/agents/methodologies/agent-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,aAAa,MAAM,2BAA2B,CAAC;AAE3D,yDAAyD;AACzD,MAAM,UAAU,GAAkC;IAChD,cAAc,EAAE,UAAU,CAAC,YAAY;IACvC,aAAa,EAAE,UAAU,CAAC,WAAW;IACrC,gBAAgB,EAAE,UAAU,CAAC,cAAc;IAC3C,WAAW,EAAE,UAAU,CAAC,SAAS;IACjC,aAAa,EAAE,UAAU,CAAC,WAAW;IACrC,mBAAmB,EAAE,aAAa,CAAC,iBAAiB;IACpD,oBAAoB,EAAE,aAAa,CAAC,kBAAkB;IACtD,oBAAoB,EAAE,aAAa,CAAC,kBAAkB;IACtD,aAAa,EAAE,aAAa,CAAC,WAAW;IACxC,gBAAgB,EAAE,aAAa,CAAC,cAAc;CAC/C,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA8B;IAClE,MAAM,QAAQ,GAAoB,MAAM,CAAC,MAAM;SAC5C,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAA0B,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAE7D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CACvB,IAAI,GAAG,CACL,QAAQ;SACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAC1C,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAkB,YAAY,CAAC;IAE7C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,EAAE;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA8B,EAC9B,MAAuB;IAEvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5E,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEjE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACpD,CAAC,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;QAC9D,CAAC,CAAC,EAAE,CAAC;IAEP,kDAAkD;IAClD,wCAAwC;IACxC,uCAAuC;IACvC,oCAAoC;IACpC,MAAM,eAAe,GACnB,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY;QACzC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB;YAC5C,CAAC,CAAC,QAAQ,CAAC;IAEb,OAAO,KAAK,MAAM,CAAC,IAAI;;EAEvB,MAAM,CAAC,WAAW;;;EAGlB,MAAM,CAAC,QAAQ;EACf,QAAQ;SACD,YAAY,CAAC,WAAW,EAAE;;QAE3B,MAAM,CAAC,MAAM,mBAAmB,WAAW;;gFAE6B,YAAY,aAAa,eAAe;;;;EAItH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;;;;;;;;;CASpE,CAAC;AACF,CAAC"}
+{"version":3,"file":"agent-builder.js","sourceRoot":"","sources":["../../../src/agents/methodologies/agent-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,aAAa,MAAM,2BAA2B,CAAC;AAE3D,yDAAyD;AACzD,MAAM,UAAU,GAAkC;IAChD,cAAc,EAAE,UAAU,CAAC,YAAY;IACvC,aAAa,EAAE,UAAU,CAAC,WAAW;IACrC,gBAAgB,EAAE,UAAU,CAAC,cAAc;IAC3C,WAAW,EAAE,UAAU,CAAC,SAAS;IACjC,aAAa,EAAE,UAAU,CAAC,WAAW;IACrC,mBAAmB,EAAE,aAAa,CAAC,iBAAiB;IACpD,oBAAoB,EAAE,aAAa,CAAC,kBAAkB;IACtD,oBAAoB,EAAE,aAAa,CAAC,kBAAkB;IACtD,aAAa,EAAE,aAAa,CAAC,WAAW;IACxC,gBAAgB,EAAE,aAAa,CAAC,cAAc;CAC/C,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA8B;IAClE,MAAM,QAAQ,GAAoB,MAAM,CAAC,MAAM;SAC5C,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAA0B,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAE7D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CACvB,IAAI,GAAG,CACL,QAAQ;SACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAC1C,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAkB,YAAY,CAAC;IAE7C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,EAAE;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAuB,EAAE,eAAuB;IACxE,+CAA+C;IAC/C,MAAM,aAAa,GAAG,MAAM;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC;SAC1C,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEf,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,gFAAgF,eAAe,MAAM,CAAC;IAC/G,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,aAAa;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,YAAY,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;QAC7E,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,qCAAqC,CAAC,CAAC,QAAQ,CAAC,OAAO,eAAe,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,YAAY,MAAM,CAAC;IACjM,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA8B,EAC9B,MAAuB;IAEvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5E,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEjE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACpD,CAAC,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;QAC9D,CAAC,CAAC,EAAE,CAAC;IAEP,wDAAwD;IACxD,6BAA6B;IAC7B,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,eAAe,IAAI,QAAQ,CAAC;IAExE,OAAO,KAAK,MAAM,CAAC,IAAI;;EAEvB,MAAM,CAAC,WAAW;;;EAGlB,MAAM,CAAC,QAAQ;EACf,QAAQ;SACD,YAAY,CAAC,WAAW,EAAE;;QAE3B,MAAM,CAAC,MAAM,mBAAmB,WAAW;;gFAE6B,YAAY,aAAa,eAAe;;;;;;;;;aAS3G,YAAY,gBAAgB,eAAe;;;;;EAKtD,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC;;;yBAGlB,YAAY,aAAa,eAAe;;;KAG5D,eAAe;;;;;;;;;;;;;;;;;;;EAmBlB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;;;;;;;;;CASpE,CAAC;AACF,CAAC"}

package/dist/agents/methodologies/phases/bmad/analyze.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyze.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/analyze.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,YAAY,EAAE,aAgB1B,CAAC"}
+{"version":3,"file":"analyze.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/analyze.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,YAAY,EAAE,aAiB1B,CAAC"}

package/dist/agents/methodologies/phases/bmad/analyze.js

@@ -5,6 +5,7 @@ export const BMAD_ANALYZE = {
     description: '拆解需求边界，识别成功标准与约束，产出《需求规格》',
     skillId: 'official-spec-driven-design',
     artifactHint: 'docs/specs/<feature-slug>.md',
+    slugPlaceholder: '<feature-slug>',
     promptBody: `### Phase: analyze（需求分析）
 
 1. 调用 \`skill_invoke({skill_id: "official-spec-driven-design", reason: "bmad/analyze:<feature-slug>"})\`

package/dist/agents/methodologies/phases/bmad/analyze.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyze.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/analyze.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,EAAE,EAAE,SAAS;IACb,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,2BAA2B;IACxC,OAAO,EAAE,6BAA6B;IACtC,YAAY,EAAE,8BAA8B;IAC5C,UAAU,EAAE;;;;;;;;CAQb;CACA,CAAC"}
+{"version":3,"file":"analyze.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/analyze.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,EAAE,EAAE,SAAS;IACb,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,2BAA2B;IACxC,OAAO,EAAE,6BAA6B;IACtC,YAAY,EAAE,8BAA8B;IAC5C,eAAe,EAAE,gBAAgB;IACjC,UAAU,EAAE;;;;;;;;CAQb;CACA,CAAC"}

package/dist/agents/methodologies/phases/bmad/design.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"design.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/design.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,WAAW,EAAE,aAezB,CAAC"}
+{"version":3,"file":"design.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/design.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,WAAW,EAAE,aAgBzB,CAAC"}

package/dist/agents/methodologies/phases/bmad/design.js

@@ -5,6 +5,7 @@ export const BMAD_DESIGN = {
     description: '产出设计文档，包括数据模型 / API 契约 / 关键决策',
     skillId: 'official-architecture-decision',
     artifactHint: 'docs/design/<feature-slug>.md',
+    slugPlaceholder: '<feature-slug>',
     promptBody: `### Phase: design（架构设计）
 
 1. 调用 \`skill_invoke({skill_id: "official-architecture-decision", reason: "bmad/design:<feature-slug>"})\`

package/dist/agents/methodologies/phases/bmad/design.js.map

@@ -1 +1 @@
-{"version":3,"file":"design.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/design.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,+BAA+B;IAC5C,OAAO,EAAE,gCAAgC;IACzC,YAAY,EAAE,+BAA+B;IAC7C,UAAU,EAAE;;;;;;;CAOb;CACA,CAAC"}
+{"version":3,"file":"design.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/design.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,+BAA+B;IAC5C,OAAO,EAAE,gCAAgC;IACzC,YAAY,EAAE,+BAA+B;IAC7C,eAAe,EAAE,gBAAgB;IACjC,UAAU,EAAE;;;;;;;CAOb;CACA,CAAC"}

package/dist/agents/methodologies/phases/bmad/implement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implement.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/implement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,cAAc,EAAE,aAc5B,CAAC"}
+{"version":3,"file":"implement.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/implement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,cAAc,EAAE,aAe5B,CAAC"}

package/dist/agents/methodologies/phases/bmad/implement.js

@@ -5,6 +5,7 @@ export const BMAD_IMPLEMENT = {
     description: '按 TDD 流程编写代码 + 测试',
     skillId: 'official-tdd',
     artifactHint: 'src/...（源代码）+ tests/...（测试）',
+    slugPlaceholder: '<feature-slug>',
     promptBody: `### Phase: implement（实现编码）
 
 1. 调用 \`skill_invoke({skill_id: "official-tdd", reason: "bmad/implement:<feature-slug>"})\`

package/dist/agents/methodologies/phases/bmad/implement.js.map

@@ -1 +1 @@
-{"version":3,"file":"implement.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/implement.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,EAAE,EAAE,WAAW;IACf,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,mBAAmB;IAChC,OAAO,EAAE,cAAc;IACvB,YAAY,EAAE,6BAA6B;IAC3C,UAAU,EAAE;;;;;;CAMb;CACA,CAAC"}
+{"version":3,"file":"implement.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/implement.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,EAAE,EAAE,WAAW;IACf,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,mBAAmB;IAChC,OAAO,EAAE,cAAc;IACvB,YAAY,EAAE,6BAA6B;IAC3C,eAAe,EAAE,gBAAgB;IACjC,UAAU,EAAE;;;;;;CAMb;CACA,CAAC"}

package/dist/agents/methodologies/phases/bmad/review.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/review.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,WAAW,EAAE,aAczB,CAAC"}
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/review.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,WAAW,EAAE,aAezB,CAAC"}

package/dist/agents/methodologies/phases/bmad/review.js

@@ -5,6 +5,7 @@ export const BMAD_REVIEW = {
     description: '自审代码 + 检查 git diff，产出审查清单',
     skillId: 'official-pr-review',
     artifactHint: 'docs/reviews/<feature-slug>.md',
+    slugPlaceholder: '<feature-slug>',
     promptBody: `### Phase: review（代码审核）
 
 1. 调用 \`skill_invoke({skill_id: "official-pr-review", reason: "bmad/review:<feature-slug>"})\`

package/dist/agents/methodologies/phases/bmad/review.js.map

@@ -1 +1 @@
-{"version":3,"file":"review.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/review.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,2BAA2B;IACxC,OAAO,EAAE,oBAAoB;IAC7B,YAAY,EAAE,gCAAgC;IAC9C,UAAU,EAAE;;;;;;CAMb;CACA,CAAC"}
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/review.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,2BAA2B;IACxC,OAAO,EAAE,oBAAoB;IAC7B,YAAY,EAAE,gCAAgC;IAC9C,eAAe,EAAE,gBAAgB;IACjC,UAAU,EAAE;;;;;;CAMb;CACA,CAAC"}

package/dist/agents/methodologies/phases/bmad/test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,SAAS,EAAE,aAkBvB,CAAC"}
+{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,SAAS,EAAE,aAmBvB,CAAC"}

package/dist/agents/methodologies/phases/bmad/test.js

@@ -5,6 +5,7 @@ export const BMAD_TEST = {
     description: '运行测试套件并产出测试报告，失败则回到 implement 修正',
     skillId: null,
     artifactHint: 'docs/test-reports/<feature-slug>.md',
+    slugPlaceholder: '<feature-slug>',
     promptBody: `### Phase: test（测试验证）
 
 1. 运行测试套件（\`npm test\` 或项目对应命令）

package/dist/agents/methodologies/phases/bmad/test.js.map

@@ -1 +1 @@
-{"version":3,"file":"test.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/test.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,SAAS,GAAkB;IACtC,EAAE,EAAE,MAAM;IACV,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,kCAAkC;IAC/C,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,qCAAqC;IACnD,UAAU,EAAE;;;;;;;;;;CAUb;CACA,CAAC"}
+{"version":3,"file":"test.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/bmad/test.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,SAAS,GAAkB;IACtC,EAAE,EAAE,MAAM;IACV,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,kCAAkC;IAC/C,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,qCAAqC;IACnD,eAAe,EAAE,gBAAgB;IACjC,UAAU,EAAE;;;;;;;;;;CAUb;CACA,CAAC"}

package/dist/agents/methodologies/phases/harness/fix.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fix.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/fix.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,WAAW,EAAE,aAczB,CAAC"}
+{"version":3,"file":"fix.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/fix.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,WAAW,EAAE,aAezB,CAAC"}

package/dist/agents/methodologies/phases/harness/fix.js

@@ -5,6 +5,7 @@ export const HARNESS_FIX = {
     description: '在测试覆盖下修改代码，确保所有相关测试通过',
     skillId: 'official-tdd',
     artifactHint: 'src/...（修复代码）',
+    slugPlaceholder: '<bug-slug>',
     promptBody: `### Phase: fix（修复）
 
 1. 调用 \`skill_invoke({skill_id: "official-tdd", reason: "harness/fix:<bug-slug>"})\`

package/dist/agents/methodologies/phases/harness/fix.js.map

@@ -1 +1 @@
-{"version":3,"file":"fix.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/fix.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,EAAE,EAAE,KAAK;IACT,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,IAAI;IACX,WAAW,EAAE,uBAAuB;IACpC,OAAO,EAAE,cAAc;IACvB,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE;;;;;;CAMb;CACA,CAAC"}
+{"version":3,"file":"fix.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/fix.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,EAAE,EAAE,KAAK;IACT,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,IAAI;IACX,WAAW,EAAE,uBAAuB;IACpC,OAAO,EAAE,cAAc;IACvB,YAAY,EAAE,eAAe;IAC7B,eAAe,EAAE,YAAY;IAC7B,UAAU,EAAE;;;;;;CAMb;CACA,CAAC"}

package/dist/agents/methodologies/phases/harness/reproduce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reproduce.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/reproduce.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,iBAAiB,EAAE,aAiB/B,CAAC"}
+{"version":3,"file":"reproduce.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/reproduce.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,iBAAiB,EAAE,aAkB/B,CAAC"}

package/dist/agents/methodologies/phases/harness/reproduce.js

@@ -5,6 +5,7 @@ export const HARNESS_REPRODUCE = {
     description: '编写最小复现脚本，明确 bug 触发路径',
     skillId: 'official-debug',
     artifactHint: 'docs/investigations/<bug-slug>.md',
+    slugPlaceholder: '<bug-slug>',
     promptBody: `### Phase: reproduce（现象复现）
 
 1. 调用 \`skill_invoke({skill_id: "official-debug", reason: "harness/reproduce:<bug-slug>"})\`

package/dist/agents/methodologies/phases/harness/reproduce.js.map

@@ -1 +1 @@
-{"version":3,"file":"reproduce.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/reproduce.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iBAAiB,GAAkB;IAC9C,EAAE,EAAE,WAAW;IACf,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,sBAAsB;IACnC,OAAO,EAAE,gBAAgB;IACzB,YAAY,EAAE,mCAAmC;IACjD,UAAU,EAAE;;;;;;;;;CASb;CACA,CAAC"}
+{"version":3,"file":"reproduce.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/reproduce.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iBAAiB,GAAkB;IAC9C,EAAE,EAAE,WAAW;IACf,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,sBAAsB;IACnC,OAAO,EAAE,gBAAgB;IACzB,YAAY,EAAE,mCAAmC;IACjD,eAAe,EAAE,YAAY;IAC7B,UAAU,EAAE;;;;;;;;;CASb;CACA,CAAC"}

package/dist/agents/methodologies/phases/harness/root-cause.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root-cause.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/root-cause.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,kBAAkB,EAAE,aAkBhC,CAAC"}
+{"version":3,"file":"root-cause.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/root-cause.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,kBAAkB,EAAE,aAmBhC,CAAC"}

package/dist/agents/methodologies/phases/harness/root-cause.js

@@ -4,7 +4,8 @@ export const HARNESS_ROOT_CAUSE = {
     title: '根因定位',
     description: '通过测试和 git blame/log 定位真因，追加到诊断文档',
     skillId: null,
-    artifactHint: 'docs/investigations/<bug-slug>.md（追加“根因”段落）',
+    artifactHint: 'docs/investigations/<bug-slug>.md（追加”根因”段落）',
+    slugPlaceholder: '<bug-slug>',
     promptBody: `### Phase: root-cause（根因定位）
 
 1. 通过测试和 \`git blame\` / \`git log\` 定位真因

package/dist/agents/methodologies/phases/harness/root-cause.js.map

@@ -1 +1 @@
-{"version":3,"file":"root-cause.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/root-cause.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAkB;IAC/C,EAAE,EAAE,YAAY;IAChB,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,kCAAkC;IAC/C,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,6CAA6C;IAC3D,UAAU,EAAE;;;;;;;;;;CAUb;CACA,CAAC"}
+{"version":3,"file":"root-cause.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/root-cause.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAkB;IAC/C,EAAE,EAAE,YAAY;IAChB,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,kCAAkC;IAC/C,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,6CAA6C;IAC3D,eAAe,EAAE,YAAY;IAC7B,UAAU,EAAE;;;;;;;;;;CAUb;CACA,CAAC"}

package/dist/agents/methodologies/phases/harness/safety-net.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safety-net.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/safety-net.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,kBAAkB,EAAE,aAchC,CAAC"}
+{"version":3,"file":"safety-net.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/safety-net.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,kBAAkB,EAAE,aAehC,CAAC"}

package/dist/agents/methodologies/phases/harness/safety-net.js

@@ -5,6 +5,7 @@ export const HARNESS_SAFETY_NET = {
     description: '为受影响模块补特性测试（characterization test），锁定现有行为',
     skillId: 'official-harness-engineering',
     artifactHint: 'tests/...（新增特性测试）',
+    slugPlaceholder: '<bug-slug>',
     promptBody: `### Phase: safety-net（防护网构建）
 
 1. 调用 \`skill_invoke({skill_id: "official-harness-engineering", reason: "harness/safety-net:<bug-slug>"})\`

package/dist/agents/methodologies/phases/harness/safety-net.js.map

@@ -1 +1 @@
-{"version":3,"file":"safety-net.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/safety-net.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAkB;IAC/C,EAAE,EAAE,YAAY;IAChB,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,2CAA2C;IACxD,OAAO,EAAE,8BAA8B;IACvC,YAAY,EAAE,mBAAmB;IACjC,UAAU,EAAE;;;;;;CAMb;CACA,CAAC"}
+{"version":3,"file":"safety-net.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/safety-net.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAkB;IAC/C,EAAE,EAAE,YAAY;IAChB,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,2CAA2C;IACxD,OAAO,EAAE,8BAA8B;IACvC,YAAY,EAAE,mBAAmB;IACjC,eAAe,EAAE,YAAY;IAC7B,UAAU,EAAE;;;;;;CAMb;CACA,CAAC"}

package/dist/agents/methodologies/phases/harness/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,cAAc,EAAE,aAmB5B,CAAC"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,cAAc,EAAE,aAoB5B,CAAC"}

package/dist/agents/methodologies/phases/harness/verify.js

@@ -5,6 +5,7 @@ export const HARNESS_VERIFY = {
     description: '完整跑测试套件并产出修复报告',
     skillId: null,
     artifactHint: 'docs/reviews/<bug-slug>.md',
+    slugPlaceholder: '<bug-slug>',
     promptBody: `### Phase: verify（验证报告）
 
 1. 完整跑测试套件（\`npm test\` 或项目对应命令）

package/dist/agents/methodologies/phases/harness/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/verify.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,4BAA4B;IAC1C,UAAU,EAAE;;;;;;;;;;;CAWb;CACA,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../../src/agents/methodologies/phases/harness/verify.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,4BAA4B;IAC1C,eAAe,EAAE,YAAY;IAC7B,UAAU,EAAE;;;;;;;;;;;CAWb;CACA,CAAC"}

package/dist/agents/methodologies/types.d.ts

@@ -21,6 +21,8 @@ export interface PhaseTemplate {
     artifactHint: string | null;
     /** Detailed phase instructions (markdown) */
     promptBody: string;
+    /** Slug placeholder name used in this phase, e.g. '<feature-slug>' or '<bug-slug>' */
+    slugPlaceholder?: string;
 }
 export interface MethodologyAgentPreset {
     /** Agent slug (subagent_type) */

package/dist/agents/methodologies/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/agents/methodologies/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iEAAiE;IACjE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/agents/methodologies/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iEAAiE;IACjE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,sFAAsF;IACtF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB"}

package/dist/core/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAqB9C;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,CAAC,EAAE,MAAM;IAI/B;;OAEG;IACH,GAAG,IAAI,WAAW;IA+BlB;;OAEG;IACH,IAAI,IAAI,IAAI;CASb"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA2B9C;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,CAAC,EAAE,MAAM;IAI/B;;OAEG;IACH,GAAG,IAAI,WAAW;IAgClB;;OAEG;IACH,IAAI,IAAI,IAAI;CASb"}

package/dist/core/config.js

@@ -16,6 +16,12 @@ function defaultConfig() {
             enabled: false,
             port: DEFAULTS.WEB_PORT,
         },
+        security: {
+            destructiveOps: true,
+            secretsCheck: true,
+            diffSizeCheck: true,
+            diffSizeThreshold: 300,
+        },
     };
 }
 /**
@@ -49,6 +55,7 @@ export class ConfigManager {
                 distill: { ...defaults.distill, ...parsed.distill },
                 storage: { ...defaults.storage, ...parsed.storage },
                 web: { ...defaults.web, ...parsed.web },
+                security: { ...defaults.security, ...parsed.security },
             };
             return this.config;
         }

package/dist/core/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,IAAI,MAAM,SAAS,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEvD,SAAS,aAAa;IACpB,OAAO;QACL,OAAO,EAAE;YACP,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,QAAQ,CAAC,aAAa;YAC7B,QAAQ,EAAE,QAAQ,CAAC,gBAAgB;SACpC;QACD,OAAO,EAAE;YACP,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;YAC5B,WAAW,EAAE,QAAQ,CAAC,mBAAmB;SAC1C;QACD,GAAG,EAAE;YACH,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,QAAQ,CAAC,QAAQ;SACxB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,GAAuB,IAAI,CAAC;IACzB,UAAU,CAAS;IAEpC,YAAY,UAAmB;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,GAAG;QACD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;YACvB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAgC,CAAC;YAE7D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACvB,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;YAED,IAAI,CAAC,MAAM,GAAG;gBACZ,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;gBACnD,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;gBACnD,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE;aACxC,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;YACvB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI;QACF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;CACF"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,IAAI,MAAM,SAAS,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEvD,SAAS,aAAa;IACpB,OAAO;QACL,OAAO,EAAE;YACP,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,QAAQ,CAAC,aAAa;YAC7B,QAAQ,EAAE,QAAQ,CAAC,gBAAgB;SACpC;QACD,OAAO,EAAE;YACP,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;YAC5B,WAAW,EAAE,QAAQ,CAAC,mBAAmB;SAC1C;QACD,GAAG,EAAE;YACH,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,QAAQ,CAAC,QAAQ;SACxB;QACD,QAAQ,EAAE;YACR,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,GAAG;SACvB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,GAAuB,IAAI,CAAC;IACzB,UAAU,CAAS;IAEpC,YAAY,UAAmB;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,GAAG;QACD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;YACvB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAgC,CAAC;YAE7D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACvB,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;YAED,IAAI,CAAC,MAAM,GAAG;gBACZ,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;gBACnD,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;gBACnD,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE;gBACvC,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAS,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE;aACxD,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;YACvB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI;QACF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/core/types.d.ts

@@ -23,6 +23,15 @@ export interface HookResult {
     systemMessage?: string;
     additionalContext?: string;
 }
+/**
+ * Security configuration
+ */
+export interface SecurityConfig {
+    destructiveOps: boolean;
+    secretsCheck: boolean;
+    diffSizeCheck: boolean;
+    diffSizeThreshold: number;
+}
 /**
  * Configuration structure
  */
@@ -46,5 +55,6 @@ export interface ForgeConfig {
     skill_matching?: {
         api_key?: string;
     };
+    security?: SecurityConfig;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,YAAY,GAAG,aAAa,GAAG,kBAAkB,GAAG,cAAc,GAAG,MAAM,CAAC;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,GAAG,EAAE;QACH,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,YAAY,GAAG,aAAa,GAAG,kBAAkB,GAAG,cAAc,GAAG,MAAM,CAAC;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,GAAG,EAAE;QACH,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B"}

package/dist/daemon/handlers/pre-tool-use.d.ts

@@ -10,17 +10,26 @@ import type { ForgeEvent, HookResult } from '../../core/types.js';
 import type { RuleEngine } from '../../engine/rule-engine.js';
 import type { GovernanceDecision } from '../../engine/dsl/types.js';
 import type { ContextBuilder } from '../../engine/context-builder.js';
+import type { SecurityConfig } from '../../core/types.js';
 export declare class PreToolUseHandler {
     private ruleEngine;
     private contextBuilder;
     private sessionStartTime;
-    constructor(ruleEngine: RuleEngine, contextBuilder: ContextBuilder);
+    private securityGates;
+    constructor(ruleEngine: RuleEngine, contextBuilder: ContextBuilder, securityConfig?: SecurityConfig);
     handle(event: ForgeEvent): Promise<HookResult>;
     /**
-     * Enforce routing decisions: if session was routed to an agent,
-     * block direct tool calls that bypass the agent.
+     * Track routing compliance without blocking (inspired by ruflo's design).
+     *
+     * Ruflo's approach: routing is a SUGGESTION enforced by CLAUDE.md instructions,
+     * not a hard block in the hook layer. This prevents the deadlock where:
+     * 1. UserPrompt injects [ROUTE_TO: agent]
+     * 2. PreToolUse blocks all tools
+     * 3. Claude can't call Agent tool because it's blocked
+     *
+     * New approach: Let CLAUDE.md guide behavior, track compliance for metrics.
      */
-    private checkRoutingEnforcement;
+    private trackRoutingCompliance;
     handleWithDecision(event: ForgeEvent): Promise<{
         result: HookResult;
         decision: GovernanceDecision;

package/dist/daemon/handlers/pre-tool-use.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pre-tool-use.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/pre-tool-use.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAe,MAAM,2BAA2B,CAAC;AACjF,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,iCAAiC,CAAC;AAmB7F,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,cAAc;IAJxB,OAAO,CAAC,gBAAgB,CAAc;gBAG5B,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,cAAc;IAGlC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAYpD;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAwEzB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAyD1G,OAAO,CAAC,gBAAgB;CASzB"}
+{"version":3,"file":"pre-tool-use.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/pre-tool-use.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAe,MAAM,2BAA2B,CAAC;AACjF,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,iCAAiC,CAAC;AAI7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAiB1D,qBAAa,iBAAiB;IAK1B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,cAAc;IALxB,OAAO,CAAC,gBAAgB,CAAc;IACtC,OAAO,CAAC,aAAa,CAA8B;gBAGzC,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,cAAc,EACtC,cAAc,CAAC,EAAE,cAAc;IAO3B,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IA+BpD;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IA6BxB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAyD1G,OAAO,CAAC,gBAAgB;CASzB"}

package/dist/daemon/handlers/pre-tool-use.js

@@ -8,6 +8,7 @@
  */
 import { logger } from '../../core/utils/logger.js';
 import { routingState } from '../routing-state.js';
+import { SecurityGates } from '../../engine/security-gates.js';
 // Tools that are allowed even when routing is active (investigation phase)
 const ROUTING_WHITELIST = new Set([
     'Read', 'Grep', 'Glob', // Code exploration
@@ -25,87 +26,79 @@ export class PreToolUseHandler {
     ruleEngine;
     contextBuilder;
     sessionStartTime = Date.now();
-    constructor(ruleEngine, contextBuilder) {
+    securityGates = null;
+    constructor(ruleEngine, contextBuilder, securityConfig) {
         this.ruleEngine = ruleEngine;
         this.contextBuilder = contextBuilder;
+        if (securityConfig) {
+            this.securityGates = new SecurityGates(securityConfig);
+        }
     }
     async handle(event) {
-        // 1. Check routing enforcement FIRST (before governance rules)
-        const routingCheck = this.checkRoutingEnforcement(event);
-        if (!routingCheck.allow) {
-            return routingCheck;
+        // Security checks run first (highest priority)
+        if (this.securityGates) {
+            const securityResult = this.securityGates.evaluate(event);
+            if (securityResult) {
+                if (securityResult.level === 'block') {
+                    logger.info(`[PreToolUse] BLOCKED by security gate: ${securityResult.checkName}`);
+                    return { allow: false, reason: securityResult.reason };
+                }
+                if (securityResult.level === 'warn') {
+                    logger.info(`[PreToolUse] WARNED by security gate: ${securityResult.checkName}`);
+                    // Continue to governance rules but include security warning
+                    const { result } = await this.handleWithDecision(event);
+                    if (result.additionalContext) {
+                        result.additionalContext = `${securityResult.reason}\n\n${result.additionalContext}`;
+                    }
+                    else {
+                        result.additionalContext = securityResult.reason;
+                    }
+                    return result;
+                }
+            }
         }
-        // 2. Then run governance rules
+        // Track routing compliance but don't block (inspired by ruflo's design)
+        this.trackRoutingCompliance(event);
+        // Run governance rules
         const { result } = await this.handleWithDecision(event);
         return result;
     }
     /**
-     * Enforce routing decisions: if session was routed to an agent,
-     * block direct tool calls that bypass the agent.
+     * Track routing compliance without blocking (inspired by ruflo's design).
+     *
+     * Ruflo's approach: routing is a SUGGESTION enforced by CLAUDE.md instructions,
+     * not a hard block in the hook layer. This prevents the deadlock where:
+     * 1. UserPrompt injects [ROUTE_TO: agent]
+     * 2. PreToolUse blocks all tools
+     * 3. Claude can't call Agent tool because it's blocked
+     *
+     * New approach: Let CLAUDE.md guide behavior, track compliance for metrics.
      */
-    checkRoutingEnforcement(event) {
+    trackRoutingCompliance(event) {
         const routing = routingState.getRouting(event.session_id);
-        logger.warn(`[PreToolUse] checkRoutingEnforcement: session=${event.session_id}, tool=${event.tool_name}, routing=${routing ? routing.agentName : 'null'}`);
         if (!routing) {
-            logger.warn(`[PreToolUse] No routing state found, allowing`);
-            return { allow: true }; // No active routing, allow everything
+            return; // No active routing
         }
         const toolName = event.tool_name;
         if (!toolName) {
-            return { allow: true };
+            return;
         }
-        // Allow whitelisted tools (investigation phase)
-        if (ROUTING_WHITELIST.has(toolName)) {
-            logger.info(`[PreToolUse] Tool ${toolName} is whitelisted, allowing`);
-            return { allow: true };
-        }
-        // Check if this is the correct Agent/Task call
+        // Track Agent tool invocations
         if (toolName === 'Agent' || toolName === 'Task') {
             const subagentType = event.tool_input?.subagent_type;
             if (subagentType === routing.agentName) {
-                // Correct agent invoked - clear routing state and allow
+                // Correct agent invoked - clear routing state
                 routingState.clearRouting(event.session_id);
-                logger.info(`[PreToolUse] Routing enforced: ${routing.agentName} invoked correctly`);
-                return { allow: true };
+                logger.info(`[PreToolUse] ✅ Routing complied: ${routing.agentName} invoked correctly`);
+            }
+            else {
+                logger.warn(`[PreToolUse] ⚠️ Routing mismatch: expected ${routing.agentName}, got ${subagentType}`);
             }
-            // Wrong agent - block
-            logger.warn(`[PreToolUse] Routing violation: expected ${routing.agentName}, got ${subagentType}`);
-            return {
-                allow: false,
-                reason: [
-                    `⚠️ 路由冲突：当前任务已被路由到 ${routing.agentName} agent。`,
-                    ``,
-                    `你尝试调用的是 ${subagentType}，这与路由决策不符。`,
-                    ``,
-                    `请使用正确的 agent：`,
-                    `  Tool: Agent`,
-                    `  subagent_type: "${routing.agentName}"`,
-                    `  prompt: <用户原始 prompt>`,
-                ].join('\n'),
-            };
         }
-        // Enforcement tools (Edit/Write/Bash) - block and force Agent call
-        if (ROUTING_ENFORCEMENT_TOOLS.has(toolName)) {
-            logger.warn(`[PreToolUse] Routing enforcement: blocked ${toolName}, must use ${routing.agentName}`);
-            return {
-                allow: false,
-                reason: [
-                    `⚠️ 路由强制执行：当前任务必须通过 ${routing.agentName} agent 处理。`,
-                    ``,
-                    `你尝试直接调用 ${toolName} 工具，这违反了路由决策。`,
-                    ``,
-                    `正确做法：使用 Agent 工具调用专业 agent`,
-                    `  Tool: Agent`,
-                    `  subagent_type: "${routing.agentName}"`,
-                    `  description: "执行用户请求的任务"`,
-                    `  prompt: <将用户的完整 prompt 传入>`,
-                    ``,
-                    `Agent 职责：${routing.agentDescription}`,
-                ].join('\n'),
-            };
+        // Log potential routing bypasses (for metrics, not blocking)
+        if (ROUTING_ENFORCEMENT_TOOLS.has(toolName) && toolName !== 'Agent' && toolName !== 'Task') {
+            logger.info(`[PreToolUse] ℹ️ Direct tool usage while routing active: ${toolName} (routed to ${routing.agentName})`);
         }
-        // Other tools - allow (e.g., AskUserQuestion for clarification)
-        return { allow: true };
     }
     async handleWithDecision(event) {
         try {