@winspan/claude-forge 8.54.3 → 9.2.0

package/dist/claudemd/violations-manager.js

@@ -0,0 +1,106 @@
+/**
+ * Violations Manager — handles the `forge:violations` block in CLAUDE.md
+ *
+ * Mirrors ResumeManager's surface (inject / clear / load) but uses an
+ * independent block envelope (`<!-- forge:violations-begin:UUID -->` ...
+ * `<!-- forge:violations-end:UUID -->`) so the two blocks coexist without
+ * stepping on each other's regex.
+ *
+ * Local helpers (envelope build / strip / extract) are intentionally NOT
+ * shared with forge-resume-block.ts — that file has very fragile parsing
+ * semantics covering legacy bodies, and Phase C should not perturb it.
+ */
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { formatLocalDisplay } from '../core/utils/time.js';
+const UUID_RE = '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}';
+function scopedViolationsBlockRe() {
+    return new RegExp(`\\n*<!-- forge:violations-begin:(${UUID_RE}) -->[\\s\\S]*?<!-- forge:violations-end:\\1 -->\\s*`, 'gi');
+}
+/** Build the envelope around a markdown body. Same shape as resume but new tags. */
+export function buildForgeViolationsEnvelope(innerMarkdown) {
+    const id = randomUUID();
+    const stamp = formatLocalDisplay(Date.now());
+    const body = innerMarkdown.trim();
+    return [
+        `<!-- forge:violations-begin:${id} -->`,
+        '```forge-violations-body',
+        body,
+        '```',
+        '',
+        `_生成时间: ${stamp}_`,
+        `<!-- forge:violations-end:${id} -->`,
+    ].join('\n');
+}
+export function hasForgeViolationsBlock(content) {
+    return new RegExp(`<!-- forge:violations-begin:${UUID_RE} -->`).test(content);
+}
+export function stripForgeViolationsBlocks(content) {
+    let s = content.replace(scopedViolationsBlockRe(), '\n');
+    s = s.replace(/\n{4,}/g, '\n\n\n');
+    return s.trimEnd();
+}
+export function decodeForgeViolationsInnerFromClaudeMd(content) {
+    const fenced = content.match(/```forge-violations-body\n([\s\S]*?)\n```/);
+    if (fenced)
+        return fenced[1].trim();
+    return '';
+}
+export class ViolationsManager {
+    /**
+     * Inject (or replace) the violations block into the project's CLAUDE.md.
+     * Empty / whitespace-only body is a no-op (caller should not write the
+     * block when there are no violations).
+     *
+     * Block placement: appended at the end of the file, after stripping any
+     * previous violations block. CLAUDE.md content is read at session start
+     * regardless of position, so we don't fight the resume block for the top
+     * slot.
+     */
+    inject(claudeMdPath, body) {
+        if (!body || !body.trim())
+            return;
+        let existing = '';
+        if (existsSync(claudeMdPath)) {
+            existing = readFileSync(claudeMdPath, 'utf-8');
+            existing = stripForgeViolationsBlocks(existing);
+        }
+        const envelope = buildForgeViolationsEnvelope(body);
+        const updated = existing.trimEnd() + '\n\n' + envelope + '\n';
+        writeFileSync(claudeMdPath, updated, 'utf-8');
+    }
+    /** Convenience: inject by project root rather than direct CLAUDE.md path. */
+    injectForProject(projectPath, body) {
+        this.inject(join(projectPath, 'CLAUDE.md'), body);
+    }
+    /** Remove every violations block from CLAUDE.md. No-op if file missing. */
+    clear(claudeMdPath) {
+        if (!existsSync(claudeMdPath))
+            return;
+        const content = readFileSync(claudeMdPath, 'utf-8');
+        if (!hasForgeViolationsBlock(content))
+            return;
+        const cleaned = stripForgeViolationsBlocks(content);
+        // Preserve a trailing newline for cleanliness.
+        writeFileSync(claudeMdPath, cleaned + '\n', 'utf-8');
+    }
+    /** Convenience: clear by project root. */
+    clearForProject(projectPath) {
+        this.clear(join(projectPath, 'CLAUDE.md'));
+    }
+    /** Read the current block body, or null if absent. */
+    load(claudeMdPath) {
+        if (!existsSync(claudeMdPath))
+            return null;
+        const content = readFileSync(claudeMdPath, 'utf-8');
+        if (!hasForgeViolationsBlock(content))
+            return null;
+        const inner = decodeForgeViolationsInnerFromClaudeMd(content);
+        return inner || null;
+    }
+    loadForProject(projectPath) {
+        return this.load(join(projectPath, 'CLAUDE.md'));
+    }
+}
+//# sourceMappingURL=violations-manager.js.map

package/dist/claudemd/violations-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"violations-manager.js","sourceRoot":"","sources":["../../src/claudemd/violations-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,OAAO,GAAG,8DAA8D,CAAC;AAE/E,SAAS,uBAAuB;IAC9B,OAAO,IAAI,MAAM,CACf,oCAAoC,OAAO,sDAAsD,EACjG,IAAI,CACL,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,4BAA4B,CAAC,aAAqB;IAChE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO;QACL,+BAA+B,EAAE,MAAM;QACvC,0BAA0B;QAC1B,IAAI;QACJ,KAAK;QACL,EAAE;QACF,UAAU,KAAK,GAAG;QAClB,6BAA6B,EAAE,MAAM;KACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,IAAI,MAAM,CAAC,+BAA+B,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,OAAe;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1E,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B;;;;;;;;;OASG;IACH,MAAM,CAAC,YAAoB,EAAE,IAAY;QACvC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QAElC,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC/C,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;QAC9D,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,gBAAgB,CAAC,WAAmB,EAAE,IAAY;QAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,YAAoB;QACxB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO;QACtC,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAAE,OAAO;QAC9C,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACpD,+CAA+C;QAC/C,aAAa,CAAC,YAAY,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,0CAA0C;IAC1C,eAAe,CAAC,WAAmB;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,YAAoB;QACvB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,KAAK,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAED,cAAc,CAAC,WAAmB;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/cli/commands/admin.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `cf admin` — administrative commands for claude-forge data management.
+ *
+ * Subcommands:
+ *   backfill-orphans --dry-run    Preview which orphan events would be attached
+ *   backfill-orphans --apply      Execute backfill (auto-backup required)
+ *   backfill-orphans --apply --no-backup  Skip backup (user took one manually)
+ *   backfill-orphans --revert <backup>    Roll back backfill using a backup file
+ *   backfill-orphans --status             Show current orphan rate
+ *
+ * spec: docs/design/2026-05-27/1551-task-tracking-deep-fix-spec.md §6.D
+ */
+import type { Command } from 'commander';
+export declare function registerAdminCommand(program: Command): void;
+//# sourceMappingURL=admin.d.ts.map

package/dist/cli/commands/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4BzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuJ3D"}

package/dist/cli/commands/admin.js

@@ -0,0 +1,177 @@
+/**
+ * `cf admin` — administrative commands for claude-forge data management.
+ *
+ * Subcommands:
+ *   backfill-orphans --dry-run    Preview which orphan events would be attached
+ *   backfill-orphans --apply      Execute backfill (auto-backup required)
+ *   backfill-orphans --apply --no-backup  Skip backup (user took one manually)
+ *   backfill-orphans --revert <backup>    Roll back backfill using a backup file
+ *   backfill-orphans --status             Show current orphan rate
+ *
+ * spec: docs/design/2026-05-27/1551-task-tracking-deep-fix-spec.md §6.D
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { homedir } from 'node:os';
+import { execSync } from 'node:child_process';
+import { FORGE_PATHS, FORGE_HOME } from '../../core/constants.js';
+import { ConfigManager } from '../../core/config.js';
+import { SQLiteStorage } from '../../core/storage/sqlite.js';
+function resolveDbPath() {
+    try {
+        const cfg = new ConfigManager().get();
+        const raw = cfg.storage?.path ?? FORGE_PATHS.database();
+        return raw.startsWith('~') ? path.join(homedir(), raw.slice(1)) : raw;
+    }
+    catch {
+        return FORGE_PATHS.database();
+    }
+}
+function getBackupsDir() {
+    return path.join(FORGE_HOME, 'backups');
+}
+function formatTs() {
+    const now = new Date();
+    const pad = (n, d = 2) => String(n).padStart(d, '0');
+    return (`${now.getFullYear()}${pad(now.getMonth() + 1)}${pad(now.getDate())}-` +
+        `${pad(now.getHours())}${pad(now.getMinutes())}${pad(now.getSeconds())}`);
+}
+export function registerAdminCommand(program) {
+    const admin = program
+        .command('admin')
+        .description('Administrative commands for claude-forge data management');
+    // ── backfill-orphans ──────────────────────────────────────────────────────
+    admin
+        .command('backfill-orphans')
+        .description('Attach orphan events to tasks via smart-window algorithm (spec 1551 §6.D)')
+        .option('--dry-run', 'Preview orphan stats without writing (default if no flag)')
+        .option('--apply', 'Execute backfill (creates backup first unless --no-backup)')
+        .option('--no-backup', 'Skip auto-backup before --apply (user already has one)')
+        .option('--revert <backup>', 'Roll back backfill rows using a backup DB path')
+        .option('--status', 'Show current orphan rate and last backfill info')
+        .action((opts) => {
+        const dbPath = resolveDbPath();
+        // ── --revert ──────────────────────────────────────────────────────────
+        if (opts.revert) {
+            const backupPath = opts.revert.startsWith('~')
+                ? path.join(homedir(), opts.revert.slice(1))
+                : opts.revert;
+            if (!fs.existsSync(backupPath)) {
+                console.error(`[backfill-orphans] Backup not found: ${backupPath}`);
+                process.exit(1);
+            }
+            // Revert: delete rows that are in task_events now but not in backup
+            console.log(`[backfill-orphans] Reverting using backup: ${backupPath}`);
+            try {
+                // Use sqlite3 ATTACH to compute diff and delete
+                const revertSql = `
+ATTACH '${backupPath.replace(/'/g, "''")}' AS bak;
+DELETE FROM task_events
+ WHERE (task_id, event_id) NOT IN (
+   SELECT task_id, event_id FROM bak.task_events
+ );
+UPDATE tasks
+   SET event_count = (SELECT COUNT(*) FROM task_events WHERE task_id = tasks.id);
+DETACH bak;
+          `.trim();
+                execSync(`sqlite3 '${dbPath.replace(/'/g, "''")}' "${revertSql.replace(/"/g, '\\"').replace(/\n/g, ' ')}"`, {
+                    stdio: 'inherit',
+                });
+                console.log('[backfill-orphans] Revert completed.');
+            }
+            catch (err) {
+                console.error('[backfill-orphans] Revert failed:', err instanceof Error ? err.message : err);
+                process.exit(1);
+            }
+            return;
+        }
+        // Open storage for read/write operations
+        let storage;
+        try {
+            storage = new SQLiteStorage(dbPath);
+        }
+        catch (err) {
+            console.error(`[backfill-orphans] Cannot open database at ${dbPath}:`, err instanceof Error ? err.message : err);
+            process.exit(1);
+            return;
+        }
+        try {
+            // ── --status ──────────────────────────────────────────────────────────
+            if (opts.status) {
+                const stats = storage.queryOrphanStats();
+                console.log(`[status] DB path      : ${dbPath}`);
+                console.log(`[status] Total orphans : ${stats.total_orphans}`);
+                console.log(`[status] Attachable    : ${stats.attachable} (${stats.pct})`);
+                console.log(`[status] Unattachable  : ${stats.unattachable}`);
+                return;
+            }
+            // ── --apply ───────────────────────────────────────────────────────────
+            if (opts.apply) {
+                // Backup step (required unless --no-backup)
+                const shouldBackup = opts.backup !== false && opts.backup !== 'false';
+                let backupPath = null;
+                if (shouldBackup) {
+                    const backupsDir = getBackupsDir();
+                    if (!fs.existsSync(backupsDir)) {
+                        fs.mkdirSync(backupsDir, { recursive: true });
+                    }
+                    backupPath = path.join(backupsDir, `data-${formatTs()}-pre-backfill.db`);
+                    console.log(`[backfill-orphans] Creating backup: ${backupPath}`);
+                    try {
+                        // Use VACUUM INTO for atomic snapshot safe with daemon running
+                        storage.getDatabase().prepare(`VACUUM INTO '${backupPath.replace(/'/g, "''")}'`).run();
+                        const backupStat = fs.statSync(backupPath);
+                        console.log(`[backfill-orphans] Backup created: ${backupPath} (${(backupStat.size / 1024 / 1024).toFixed(1)} MB)`);
+                    }
+                    catch (err) {
+                        console.error('[backfill-orphans] Backup failed. Aborting.');
+                        console.error(err instanceof Error ? err.message : err);
+                        process.exit(1);
+                    }
+                }
+                else {
+                    console.log('[backfill-orphans] --no-backup: skipping auto-backup.');
+                }
+                // Dry-run preview before apply
+                const statsBefore = storage.queryOrphanStats();
+                console.log(`[backfill-orphans] Before: ${statsBefore.total_orphans} orphans, ${statsBefore.attachable} attachable (${statsBefore.pct})`);
+                // Execute backfill
+                console.log('[backfill-orphans] Applying backfill...');
+                const inserted = storage.backfillOrphans();
+                console.log(`[backfill-orphans] Inserted ${inserted} task_events rows.`);
+                const statsAfter = storage.queryOrphanStats();
+                console.log(`[backfill-orphans] After : ${statsAfter.total_orphans} orphans (${((statsAfter.total_orphans / Math.max(1, statsBefore.total_orphans + inserted)) * 100).toFixed(1)}% orphan rate)`);
+                if (backupPath) {
+                    console.log(`[backfill-orphans] To revert: cf admin backfill-orphans --revert '${backupPath}'`);
+                }
+                return;
+            }
+            // ── --dry-run (default) ───────────────────────────────────────────────
+            const stats = storage.queryOrphanStats();
+            console.log(`[dry-run] Total orphan events      : ${stats.total_orphans}`);
+            console.log(`[dry-run] Attachable (smart-window): ${stats.attachable} (${stats.pct})`);
+            console.log(`[dry-run] Unattachable             : ${stats.unattachable}`);
+            if (stats.attachable > 0) {
+                const samples = storage.sampleAttachablePairs(5);
+                if (samples.length > 0) {
+                    console.log('\nSample 5 attachable pairs:');
+                    for (const s of samples) {
+                        const taskTitle = s.task_title.slice(0, 40);
+                        console.log(`  evt ${s.event_id.slice(0, 8)}… → task ${s.task_id.slice(0, 8)}… "${taskTitle}" (gap ${s.gap_min}min)`);
+                    }
+                }
+                console.log(`\nTo apply: cf admin backfill-orphans --apply`);
+            }
+            else {
+                console.log('[dry-run] No attachable orphans found.');
+            }
+        }
+        finally {
+            try {
+                storage.close();
+            }
+            catch { /* ignore */ }
+        }
+    });
+}
+//# sourceMappingURL=admin.js.map

package/dist/cli/commands/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/cli/commands/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,aAAa,EAAE,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACxD,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,CACL,GAAG,GAAG,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG;QACtE,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,0DAA0D,CAAC,CAAC;IAE3E,6EAA6E;IAC7E,KAAK;SACF,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,2EAA2E,CAAC;SACxF,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;SAChF,MAAM,CAAC,SAAS,EAAE,4DAA4D,CAAC;SAC/E,MAAM,CAAC,aAAa,EAAE,wDAAwD,CAAC;SAC/E,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,CAAC;SAC7E,MAAM,CAAC,UAAU,EAAE,iDAAiD,CAAC;SACrE,MAAM,CAAC,CAAC,IAMR,EAAE,EAAE;QACH,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAE/B,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC5C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAEhB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,KAAK,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,oEAAoE;YACpE,OAAO,CAAC,GAAG,CAAC,8CAA8C,UAAU,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,gDAAgD;gBAChD,MAAM,SAAS,GAAG;UAClB,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;;;;;;;;WAQ7B,CAAC,IAAI,EAAE,CAAC;gBAET,QAAQ,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE;oBAC1G,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO;QACT,CAAC;QAED,yCAAyC;QACzC,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,8CAA8C,MAAM,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,yEAAyE;YACzE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC3E,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,yEAAyE;YACzE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,4CAA4C;gBAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC;gBACtE,IAAI,UAAU,GAAkB,IAAI,CAAC;gBAErC,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;oBACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAChD,CAAC;oBACD,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,QAAQ,EAAE,kBAAkB,CAAC,CAAC;oBACzE,OAAO,CAAC,GAAG,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;oBAEjE,IAAI,CAAC;wBACH,+DAA+D;wBAC/D,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;wBACvF,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;wBAC3C,OAAO,CAAC,GAAG,CAAC,sCAAsC,UAAU,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBACrH,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;wBAC7D,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;wBACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;gBACvE,CAAC;gBAED,+BAA+B;gBAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,8BAA8B,WAAW,CAAC,aAAa,aAAa,WAAW,CAAC,UAAU,gBAAgB,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC;gBAE1I,mBAAmB;gBACnB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,oBAAoB,CAAC,CAAC;gBAEzE,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,8BAA8B,UAAU,CAAC,aAAa,aAAa,CAAC,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;gBAElM,IAAI,UAAU,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,qEAAqE,UAAU,GAAG,CAAC,CAAC;gBAClG,CAAC;gBACD,OAAO;YACT,CAAC;YAED,yEAAyE;YACzE,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,wCAAwC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,wCAAwC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,wCAAwC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAE1E,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;gBACjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;oBAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;wBACxB,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC5C,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,SAAS,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC;oBACxH,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;AAEP,CAAC"}

package/dist/cli/commands/agents.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `cf agents` — manage project-specific agent prompt templates.
+ *
+ * Spec: docs/design/2026-05-27/1505-agent-template-sync-spec.md.
+ *
+ * Subcommands:
+ *   cf agents sync   — force-sync templates to ~/.claude/agents/.
+ *                      (Daemon also runs syncAgents at startup; this is the
+ *                      manual escape hatch when the user has e.g. nuked the
+ *                      target dir and doesn't want to wait for a daemon
+ *                      restart.)
+ *   cf agents list   — show source templates + target files side-by-side
+ *                      with a quick drift marker so user can preview what
+ *                      `cf agents sync` would do.
+ */
+import type { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=agents.d.ts.map

package/dist/cli/commands/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuBzC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAoB/C"}

package/dist/cli/commands/agents.js

@@ -0,0 +1,160 @@
+/**
+ * `cf agents` — manage project-specific agent prompt templates.
+ *
+ * Spec: docs/design/2026-05-27/1505-agent-template-sync-spec.md.
+ *
+ * Subcommands:
+ *   cf agents sync   — force-sync templates to ~/.claude/agents/.
+ *                      (Daemon also runs syncAgents at startup; this is the
+ *                      manual escape hatch when the user has e.g. nuked the
+ *                      target dir and doesn't want to wait for a daemon
+ *                      restart.)
+ *   cf agents list   — show source templates + target files side-by-side
+ *                      with a quick drift marker so user can preview what
+ *                      `cf agents sync` would do.
+ */
+import { readdirSync, readFileSync, existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createHash } from 'node:crypto';
+import { syncAgents } from '../../daemon/agent-sync.js';
+const USER_AGENTS_DIR = join(homedir(), '.claude', 'agents');
+function getSourceAgentsDir() {
+    // Compiled: dist/cli/commands/agents.js → dist/daemon/templates/agents
+    // Dev (vitest): src/cli/commands/agents.ts → src/daemon/templates/agents
+    return join(dirname(fileURLToPath(import.meta.url)), '..', '..', 'daemon', 'templates', 'agents');
+}
+function sha256(buf) {
+    return createHash('sha256').update(buf).digest('hex');
+}
+export function register(program) {
+    const cmd = program
+        .command('agents')
+        .description('Manage project-specific agent prompt templates (~/.claude/agents/)');
+    cmd
+        .command('sync')
+        .description('Sync packaged agent templates to ~/.claude/agents/ (idempotent, SHA-256 diff)')
+        .option('--json', 'Output JSON instead of human-readable text')
+        .action((opts) => {
+        runSync(opts);
+    });
+    cmd
+        .command('list')
+        .description('Show source templates + target files with drift status')
+        .option('--json', 'Output JSON instead of human-readable text')
+        .action((opts) => {
+        runList(opts);
+    });
+}
+/**
+ * Exported for tests. Returns the exit code instead of calling process.exit
+ * so callers can assert.
+ */
+function runSync(opts, io = {}) {
+    const log = io.log ?? ((m) => console.log(m));
+    const errOut = io.error ?? ((m) => console.error(m));
+    try {
+        const result = syncAgents();
+        if (opts.json) {
+            log(JSON.stringify({ ok: true, ...result }));
+        }
+        else {
+            log(`✓ agent sync done — copied=${result.copied} checked=${result.checked} ` +
+                `skipped_userOwned=${result.skipped_userOwned}`);
+            log(`  target: ${USER_AGENTS_DIR}`);
+        }
+        return 0;
+    }
+    catch (err) {
+        errOut(`Error: agent sync failed — ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+}
+/**
+ * Returns an exit code.
+ */
+function runList(opts, io = {}) {
+    const log = io.log ?? ((m) => console.log(m));
+    const errOut = io.error ?? ((m) => console.error(m));
+    const sourceDir = getSourceAgentsDir();
+    const targetDir = USER_AGENTS_DIR;
+    let sourceFiles = [];
+    if (existsSync(sourceDir)) {
+        try {
+            sourceFiles = readdirSync(sourceDir).filter((f) => f.endsWith('.md'));
+        }
+        catch (err) {
+            errOut(`Error: cannot read source dir ${sourceDir} — ${err}`);
+            return 1;
+        }
+    }
+    let targetFiles = [];
+    if (existsSync(targetDir)) {
+        try {
+            targetFiles = readdirSync(targetDir).filter((f) => f.endsWith('.md'));
+        }
+        catch (err) {
+            errOut(`Error: cannot read target dir ${targetDir} — ${err}`);
+            return 1;
+        }
+    }
+    const sourceSet = new Set(sourceFiles);
+    const targetSet = new Set(targetFiles);
+    const all = new Set([...sourceFiles, ...targetFiles]);
+    const entries = [];
+    for (const f of [...all].sort()) {
+        const in_source = sourceSet.has(f);
+        const in_target = targetSet.has(f);
+        let status;
+        if (in_source && !in_target) {
+            status = 'missing';
+        }
+        else if (!in_source && in_target) {
+            status = 'extra';
+        }
+        else if (in_source && in_target) {
+            try {
+                const srcSha = sha256(readFileSync(join(sourceDir, f)));
+                const dstSha = sha256(readFileSync(join(targetDir, f)));
+                status = srcSha === dstSha ? 'identical' : 'drift';
+            }
+            catch {
+                status = 'drift';
+            }
+        }
+        else {
+            // unreachable — set covers union
+            continue;
+        }
+        entries.push({
+            file: f,
+            source: in_source ? 'managed' : 'user-owned',
+            in_source,
+            in_target,
+            status,
+        });
+    }
+    if (opts.json) {
+        log(JSON.stringify({
+            source_dir: sourceDir,
+            target_dir: targetDir,
+            entries,
+        }));
+        return 0;
+    }
+    log(`source: ${sourceDir}`);
+    log(`target: ${targetDir}`);
+    log('');
+    if (entries.length === 0) {
+        log('(no agent files in either dir)');
+        return 0;
+    }
+    log('STATUS     SOURCE       FILE');
+    log('---------- ------------ -----------------------------');
+    for (const e of entries) {
+        log(`${e.status.padEnd(10)} ${e.source.padEnd(12)} ${e.file}`);
+    }
+    return 0;
+}
+//# sourceMappingURL=agents.js.map

package/dist/cli/commands/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../../src/cli/commands/agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAE7D,SAAS,kBAAkB;IACzB,uEAAuE;IACvE,yEAAyE;IACzE,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAUD,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oEAAoE,CAAC,CAAC;IAErF,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+EAA+E,CAAC;SAC5F,MAAM,CAAC,QAAQ,EAAE,4CAA4C,CAAC;SAC9D,MAAM,CAAC,CAAC,IAAiB,EAAE,EAAE;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,4CAA4C,CAAC;SAC9D,MAAM,CAAC,CAAC,IAAiB,EAAE,EAAE;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CACd,IAAiB,EACjB,KAGI,EAAE;IAEN,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,GAAG,CACD,8BAA8B,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,OAAO,GAAG;gBACtE,qBAAqB,MAAM,CAAC,iBAAiB,EAAE,CAClD,CAAC;YACF,GAAG,CAAC,aAAa,eAAe,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAkBD;;GAEG;AACH,SAAS,OAAO,CACd,IAAiB,EACjB,KAGI,EAAE;IAEN,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,eAAe,CAAC;IAElC,IAAI,WAAW,GAAa,EAAE,CAAC;IAC/B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,iCAAiC,SAAS,MAAM,GAAG,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,WAAW,GAAa,EAAE,CAAC;IAC/B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,iCAAiC,SAAS,MAAM,GAAG,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,WAAW,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,MAA2B,CAAC;QAChC,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;aAAM,IAAI,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;YACnC,MAAM,GAAG,OAAO,CAAC;QACnB,CAAC;aAAM,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,iCAAiC;YACjC,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;YAC5C,SAAS;YACT,SAAS;YACT,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,GAAG,CACD,IAAI,CAAC,SAAS,CAAC;YACb,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,OAAO;SACR,CAAC,CACH,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,GAAG,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;IAC5B,GAAG,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,gCAAgC,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACpC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/commands/bypass.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `cf bypass` — write / inspect / revoke the enforcement bypass token file.
+ *
+ * Phase 2c safety-net #2 CLI. The token lives at `~/.claude-forge/bypass.token`
+ * (mode 0600). When present and not expired, PreToolUseHandler converts the
+ * next deny into a `bypass` row + allow=true.
+ *
+ * Usage:
+ *   cf bypass --ttl 5m [--reason "<text>"]   # write token (default 5m)
+ *   cf bypass --status                       # print current token + remaining
+ *   cf bypass --revoke                       # delete the file
+ *
+ * Note: a single `cf bypass` invocation rewrites (not appends) the file. The
+ * latest write wins.
+ */
+import type { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=bypass.d.ts.map

package/dist/cli/commands/bypass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bypass.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/bypass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBzC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyD/C"}

package/dist/cli/commands/bypass.js

@@ -0,0 +1,87 @@
+/**
+ * `cf bypass` — write / inspect / revoke the enforcement bypass token file.
+ *
+ * Phase 2c safety-net #2 CLI. The token lives at `~/.claude-forge/bypass.token`
+ * (mode 0600). When present and not expired, PreToolUseHandler converts the
+ * next deny into a `bypass` row + allow=true.
+ *
+ * Usage:
+ *   cf bypass --ttl 5m [--reason "<text>"]   # write token (default 5m)
+ *   cf bypass --status                       # print current token + remaining
+ *   cf bypass --revoke                       # delete the file
+ *
+ * Note: a single `cf bypass` invocation rewrites (not appends) the file. The
+ * latest write wins.
+ */
+import { parseTtl, readBypassFile, revokeBypassFile, writeBypassFile, } from '../../core/utils/bypass-token.js';
+import { FORGE_PATHS } from '../../core/constants.js';
+export function register(program) {
+    program
+        .command('bypass')
+        .description('Write / inspect / revoke the enforcement bypass token (~/.claude-forge/bypass.token)')
+        .option('--ttl <duration>', 'Time-to-live (e.g. 30s, 5m, 1h). Default: 5m', '5m')
+        .option('--reason <text>', 'Free-form reason recorded in the token', 'manual review')
+        .option('--status', 'Show current token status (path, expires_at, remaining)')
+        .option('--revoke', 'Delete the token file')
+        .action((opts) => {
+        const path = FORGE_PATHS.bypassToken();
+        if (opts.revoke) {
+            const removed = revokeBypassFile(path);
+            if (removed) {
+                console.log(`✓ Removed bypass token: ${path}`);
+            }
+            else {
+                console.log(`(no token file at ${path})`);
+            }
+            return;
+        }
+        if (opts.status) {
+            const payload = readBypassFile(path);
+            if (!payload) {
+                console.log(`No active bypass token. (path: ${path})`);
+                process.exit(1);
+            }
+            const remainMs = Date.parse(payload.expires_at) - Date.now();
+            const remain = formatRemaining(remainMs);
+            console.log(`Active bypass token:`);
+            console.log(`  path:       ${path}`);
+            console.log(`  token:      ${payload.token}`);
+            console.log(`  reason:     ${payload.reason}`);
+            console.log(`  issued_at:  ${payload.issued_at}`);
+            console.log(`  expires_at: ${payload.expires_at}`);
+            console.log(`  remaining:  ${remain}`);
+            return;
+        }
+        // Default action: write a new token.
+        const ttl = opts.ttl ?? '5m';
+        let ttlMs;
+        try {
+            ttlMs = parseTtl(ttl);
+        }
+        catch (err) {
+            console.error(`Invalid --ttl: ${err instanceof Error ? err.message : err}`);
+            process.exit(1);
+            return; // unreachable but keeps TS happy
+        }
+        const reason = (opts.reason ?? 'manual review').slice(0, 200);
+        const { path: written, payload } = writeBypassFile({ ttlMs, reason });
+        console.log(`✓ Bypass token written: ${written}`);
+        console.log(`  expires_at: ${payload.expires_at} (TTL=${ttl})`);
+        console.log(`  reason:     ${payload.reason}`);
+        console.log(`  token:      ${payload.token}`);
+        console.log(`  Hint: next denied tool call in any session becomes a bypass row.`);
+    });
+}
+function formatRemaining(ms) {
+    if (ms <= 0)
+        return 'expired';
+    const sec = Math.floor(ms / 1000);
+    if (sec < 60)
+        return `${sec}s`;
+    const min = Math.floor(sec / 60);
+    if (min < 60)
+        return `${min}m ${sec % 60}s`;
+    const hr = Math.floor(min / 60);
+    return `${hr}h ${min % 60}m`;
+}
+//# sourceMappingURL=bypass.js.map

package/dist/cli/commands/bypass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bypass.js","sourceRoot":"","sources":["../../../src/cli/commands/bypass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EACL,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAStD,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sFAAsF,CAAC;SACnG,MAAM,CAAC,kBAAkB,EAAE,8CAA8C,EAAE,IAAI,CAAC;SAChF,MAAM,CAAC,iBAAiB,EAAE,wCAAwC,EAAE,eAAe,CAAC;SACpF,MAAM,CAAC,UAAU,EAAE,yDAAyD,CAAC;SAC7E,MAAM,CAAC,UAAU,EAAE,uBAAuB,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAmB,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAEvC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QAED,qCAAqC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC;QAC7B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,CAAC,iCAAiC;QAC3C,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,UAAU,SAAS,GAAG,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,GAAG,GAAG,GAAG,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IACjC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,GAAG,GAAG,KAAK,GAAG,GAAG,EAAE,GAAG,CAAC;IAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IAChC,OAAO,GAAG,EAAE,KAAK,GAAG,GAAG,EAAE,GAAG,CAAC;AAC/B,CAAC"}