@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/web/routes/config.d.ts

@@ -0,0 +1,56 @@
+/**
+ * /api/config — 可写运行时配置端点（Arco Phase 4a, decision 29688066）
+ *
+ * 唯一硬后端缺口：设置页要可写。读全量供回显（GET），白名单 + 范围/类型校验
+ * 后写单个 forge_config 行（POST）。校验模式镜像 `insights.ts` 的 tuning/apply：
+ *   - 硬性白名单 CONFIG_WRITE_WHITELIST（只允许预定义的可写 key）
+ *   - 每个 key 自带类型（bool|int）+ 数值范围 + 治理标记
+ *   - 命中走 storage.writeConfig(key, value)（INSERT OR REPLACE + updated_at）
+ *
+ * 鉴权：server.ts 已对所有 `/api` 非 GET → requireAuth（Bearer），POST 天然受保护。
+ *
+ * 治理类 key（needsRestart=true）写入后返回 `needsRestart: true` + 提示，
+ * 前端据此显示「需 restart daemon 生效」（Q2，用户拍板）。
+ *
+ * 安全（Risk R5）：严禁开放任意 key 写入——白名单是硬约束，未命中直接 400
+ * INVALID_KEY，绝不写 storage。schema 相关 / 运行时常量类 key（KB 注入 threshold
+ * 是 knowledge 常量、非 forge_config，TASK_SWITCH_MINUTES 同理）不暴露为可写。
+ */
+import type { Application } from 'express';
+import type { RouteContext } from './types.js';
+/** 可写 key 的类型 + 校验规约。 */
+interface ConfigSpec {
+    /** 'bool' → 只接受 'true'|'false'；'int' → 整数字符串 + [min,max] 区间。 */
+    type: 'bool' | 'int';
+    /** int 类型的闭区间下界（含）。 */
+    min?: number;
+    /** int 类型的闭区间上界（含）。 */
+    max?: number;
+    /**
+     * 治理类 key —— 写入 forge_config 后 daemon 需重启才会重新 seed/读取生效。
+     * 命中则响应 needsRestart=true（镜像 tuning/apply 的 enable_cmd 提示语义）。
+     */
+    governance: boolean;
+    /** UI 标签（设置页表单回显用）。 */
+    label: string;
+    /** UI 说明（设置页表单回显用）。 */
+    description: string;
+    /** 分组（设置页分组卡）。 */
+    group: 'threshold' | 'governance' | 'retention';
+}
+/**
+ * 硬性白名单：设置页唯一可写的 key 集合。每个 key 必须真实存在于
+ * forge_config（由 daemon `DEFAULT_FLAGS` seed），绝不编造不存在的 key。
+ *
+ * 故意排除：
+ *   - KB 注入 threshold（25）—— 是 `src/knowledge/constants.ts` 常量，不是
+ *     forge_config 行，写了 daemon 也不读。
+ *   - TASK_SWITCH_MINUTES / MAX_BUFFER_SIZE —— 同为编译期常量（task-segmenter.ts /
+ *     server.ts），无 config 回路，不暴露为可写（防误导用户改一个不生效的值）。
+ *   - `pre_tool_intercept.disabled_project_prefixes` —— 自由文本路径列表，
+ *     范围校验难、误改风险高，本轮不开放。
+ */
+export declare const CONFIG_WRITE_WHITELIST: Readonly<Record<string, ConfigSpec>>;
+export declare function registerConfigRoutes(app: Application, ctx: RouteContext): void;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/web/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/web/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM/C,yBAAyB;AACzB,UAAU,UAAU;IAClB,gEAAgE;IAChE,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,uBAAuB;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,KAAK,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;CACjD;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAgEtE,CAAC;AAuCH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAmH9E"}

package/dist/web/routes/config.js

@@ -0,0 +1,243 @@
+/**
+ * /api/config — 可写运行时配置端点（Arco Phase 4a, decision 29688066）
+ *
+ * 唯一硬后端缺口：设置页要可写。读全量供回显（GET），白名单 + 范围/类型校验
+ * 后写单个 forge_config 行（POST）。校验模式镜像 `insights.ts` 的 tuning/apply：
+ *   - 硬性白名单 CONFIG_WRITE_WHITELIST（只允许预定义的可写 key）
+ *   - 每个 key 自带类型（bool|int）+ 数值范围 + 治理标记
+ *   - 命中走 storage.writeConfig(key, value)（INSERT OR REPLACE + updated_at）
+ *
+ * 鉴权：server.ts 已对所有 `/api` 非 GET → requireAuth（Bearer），POST 天然受保护。
+ *
+ * 治理类 key（needsRestart=true）写入后返回 `needsRestart: true` + 提示，
+ * 前端据此显示「需 restart daemon 生效」（Q2，用户拍板）。
+ *
+ * 安全（Risk R5）：严禁开放任意 key 写入——白名单是硬约束，未命中直接 400
+ * INVALID_KEY，绝不写 storage。schema 相关 / 运行时常量类 key（KB 注入 threshold
+ * 是 knowledge 常量、非 forge_config，TASK_SWITCH_MINUTES 同理）不暴露为可写。
+ */
+import { logger } from '../../core/utils/logger.js';
+/** key 命名正则：与 insights.ts buildConfigKey 同口径，防 path-traversal / SQL 注入。 */
+const CONFIG_KEY_RE = /^[A-Za-z0-9_./-]+$/;
+/**
+ * 硬性白名单：设置页唯一可写的 key 集合。每个 key 必须真实存在于
+ * forge_config（由 daemon `DEFAULT_FLAGS` seed），绝不编造不存在的 key。
+ *
+ * 故意排除：
+ *   - KB 注入 threshold（25）—— 是 `src/knowledge/constants.ts` 常量，不是
+ *     forge_config 行，写了 daemon 也不读。
+ *   - TASK_SWITCH_MINUTES / MAX_BUFFER_SIZE —— 同为编译期常量（task-segmenter.ts /
+ *     server.ts），无 config 回路，不暴露为可写（防误导用户改一个不生效的值）。
+ *   - `pre_tool_intercept.disabled_project_prefixes` —— 自由文本路径列表，
+ *     范围校验难、误改风险高，本轮不开放。
+ */
+export const CONFIG_WRITE_WHITELIST = Object.freeze({
+    // ── ① 阈值配置（events TTL / intent / codegraph，均为 DEFAULT_FLAGS 整数 key）──
+    'events.warm_ttl_days': {
+        type: 'int', min: 1, max: 365, governance: false, group: 'retention',
+        label: 'events 暖数据保留（天）',
+        description: '超期后将 tool_input 置 NULL（保留行）。',
+    },
+    'events.cold_ttl_days': {
+        type: 'int', min: 1, max: 730, governance: false, group: 'retention',
+        label: 'events 冷数据保留（天）',
+        description: '超期后整行 DELETE。须 ≥ 暖数据窗口。',
+    },
+    'events.sweep_interval_hours': {
+        type: 'int', min: 1, max: 168, governance: false, group: 'retention',
+        label: 'events 清理间隔（小时）',
+        description: 'TTL sweep 维护任务的执行节奏。',
+    },
+    'intent_fallback.l5_history_threshold': {
+        type: 'int', min: 1, max: 50, governance: false, group: 'threshold',
+        label: 'intent L5 历史阈值',
+        description: 'L5 历史投票所需的最少先前 intent 数。',
+    },
+    'codegraph.sync_interval_minutes': {
+        type: 'int', min: 1, max: 1440, governance: false, group: 'threshold',
+        label: 'codegraph 同步间隔（分钟）',
+        description: '增量 call-graph 同步节奏。',
+    },
+    // ── ② 治理开关（布尔 flag，写后需 restart daemon 重新 seed/读取）──────────
+    'kb_inject.enabled': {
+        type: 'bool', governance: true, group: 'governance',
+        label: 'KB 注入',
+        description: 'UserPromptSubmit 时注入命中的 KB 页（MVP1）。',
+    },
+    'pre_tool_intercept.enabled': {
+        type: 'bool', governance: true, group: 'governance',
+        label: 'PreToolUse 拦截',
+        description: '规则注册表 + tool_intercepts（edit/write-multi-file 守护等）。',
+    },
+    'feedback_loop.enabled': {
+        type: 'bool', governance: true, group: 'governance',
+        label: '反馈调优环',
+        description: '规则/skill/KB tuning 聚合（/api/insights/tuning 门控）。',
+    },
+    'agent_writeback.enabled': {
+        type: 'bool', governance: true, group: 'governance',
+        label: 'Agent 经验回写',
+        description: 'agent-experience KB 双向回写。',
+    },
+    'intent_engine.enabled': {
+        type: 'bool', governance: true, group: 'governance',
+        label: 'Intent 引擎',
+        description: 'LLM intent 分类 + 6 层 fallback 栈。',
+    },
+    'auto_spec_generation.enabled': {
+        type: 'bool', governance: true, group: 'governance',
+        label: '自动 spec 生成',
+        description: '采纳率低已默认关闭，谨慎开启。',
+    },
+    'question_default_bmad.enforce': {
+        type: 'bool', governance: true, group: 'governance',
+        label: '用户提问默认 BMAD 门',
+        description: '硬 deny 层，默认关。',
+    },
+});
+/**
+ * 写入后回读该行的 updated_at（forge_config 用 datetime('now') 写入）。无
+ * 专用单行 getter，故从 listConfig() 命中——表行数极少（DEFAULT_FLAGS 量级），
+ * O(n) 可忽略。缺失则退回当前 ISO 时间。
+ */
+function readUpdatedAt(storage, key) {
+    try {
+        const row = storage.listConfig().find((r) => r.key === key);
+        return row?.updated_at ?? new Date().toISOString();
+    }
+    catch {
+        return new Date().toISOString();
+    }
+}
+/** 校验失败原因（供 400 响应 message 用）。null = 通过。 */
+function validateValue(spec, value) {
+    if (spec.type === 'bool') {
+        if (value !== 'true' && value !== 'false') {
+            return `value must be 'true' or 'false' for boolean key`;
+        }
+        return null;
+    }
+    // int
+    if (!/^-?\d+$/.test(value)) {
+        return `value must be an integer string`;
+    }
+    const n = Number(value);
+    if (!Number.isInteger(n))
+        return `value must be an integer`;
+    if (spec.min !== undefined && n < spec.min) {
+        return `value ${n} below minimum ${spec.min}`;
+    }
+    if (spec.max !== undefined && n > spec.max) {
+        return `value ${n} above maximum ${spec.max}`;
+    }
+    return null;
+}
+export function registerConfigRoutes(app, ctx) {
+    const { storage } = ctx;
+    /**
+     * GET /api/config — 读全量 forge_config + 白名单 schema（供设置页回显）。
+     *
+     * items: 所有 forge_config 行（key/value/updated_at）；
+     * writable: 白名单 schema（type/range/governance/label/group），前端据此
+     *   决定哪些 key 渲染为可编辑表单项 + 渲染控件类型。
+     */
+    app.get('/api/config', (_req, res) => {
+        try {
+            const items = storage.listConfig();
+            res.json({
+                generated_at: new Date().toISOString(),
+                items,
+                writable: CONFIG_WRITE_WHITELIST,
+            });
+        }
+        catch (err) {
+            logger.warn(`[Config] list failed: ${err}`);
+            res.status(500).json({ error: 'CONFIG_LIST_FAILED', message: String(err) });
+        }
+    });
+    /**
+     * POST /api/config — 写单个或批量配置（白名单 + 校验）。需 Bearer（server.ts）。
+     *
+     * body: { key, value }  单个
+     *    或 { items: [{key,value}, ...] }  批量
+     *
+     * 返回 200 { applied: [...], needsRestart }；任一 key 不合法整体 400（不部分写）。
+     */
+    app.post('/api/config', (req, res) => {
+        const body = (req.body ?? {});
+        // 归一成 pairs[]，单个/批量同一条校验路径。
+        const pairs = Array.isArray(body.items)
+            ? body.items.map((it) => ({ key: it?.key, value: it?.value }))
+            : [{ key: body.key, value: body.value }];
+        if (pairs.length === 0) {
+            res.status(400).json({ error: 'INVALID_KEY', message: 'key or items[] required' });
+            return;
+        }
+        // 先全量校验（不部分写）：任一失败立即 400，避免写一半。
+        const validated = [];
+        for (const p of pairs) {
+            const key = typeof p.key === 'string' ? p.key.trim() : '';
+            const value = typeof p.value === 'string'
+                ? p.value.trim()
+                : typeof p.value === 'boolean' || typeof p.value === 'number'
+                    ? String(p.value)
+                    : '';
+            if (!key) {
+                res.status(400).json({ error: 'INVALID_KEY', message: 'key is required' });
+                return;
+            }
+            if (!CONFIG_KEY_RE.test(key) || key.includes('..')) {
+                res.status(400).json({
+                    error: 'INVALID_KEY',
+                    message: `key '${key}' failed format validation (must match [A-Za-z0-9_./-]+)`,
+                });
+                return;
+            }
+            // own-property 守卫（安全 R5）：bracket lookup 会走原型链，未做此守卫时
+            // `__proto__` / `constructor` / `toString` / `valueOf` / `hasOwnProperty`
+            // 等 key 会解析到 Object.prototype 的继承真值成员，绕过下面的 `!spec`
+            // 默认拒绝守卫并写进 forge_config。先做 hasOwnProperty 检查，确保原型链
+            // key 一律走 400 INVALID_KEY（与非白名单拒绝同路径/同错误码）。
+            if (!Object.prototype.hasOwnProperty.call(CONFIG_WRITE_WHITELIST, key)) {
+                res.status(400).json({
+                    error: 'INVALID_KEY',
+                    message: `key '${key}' is not in the writable whitelist`,
+                    allowed: Object.keys(CONFIG_WRITE_WHITELIST),
+                });
+                return;
+            }
+            const spec = CONFIG_WRITE_WHITELIST[key];
+            const valErr = validateValue(spec, value);
+            if (valErr) {
+                res.status(400).json({ error: 'INVALID_VALUE', message: `${key}: ${valErr}` });
+                return;
+            }
+            validated.push({ key, value, spec });
+        }
+        // 全部通过 → 落库。
+        try {
+            const applied = [];
+            let needsRestart = false;
+            for (const v of validated) {
+                storage.writeConfig(v.key, v.value);
+                if (v.spec.governance)
+                    needsRestart = true;
+                const updated_at = readUpdatedAt(storage, v.key);
+                applied.push({ key: v.key, value: v.value, updated_at, governance: v.spec.governance });
+                logger.info(`[Config] wrote ${v.key}=${v.value} (governance=${v.spec.governance})`);
+            }
+            res.json({
+                ok: true,
+                applied,
+                needsRestart,
+                // 治理类改动后 daemon 需重启才生效（镜像 tuning/apply 的 enable_cmd 提示）。
+                restart_hint: needsRestart ? 'cf daemon restart' : null,
+            });
+        }
+        catch (err) {
+            logger.warn(`[Config] write failed: ${err}`);
+            res.status(500).json({ error: 'CONFIG_WRITE_FAILED', message: String(err) });
+        }
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/web/routes/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/web/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD,2EAA2E;AAC3E,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAuB3C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyC,MAAM,CAAC,MAAM,CAAC;IACxF,uEAAuE;IACvE,sBAAsB,EAAE;QACtB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW;QACpE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,8BAA8B;KAC5C;IACD,sBAAsB,EAAE;QACtB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW;QACpE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,yBAAyB;KACvC;IACD,6BAA6B,EAAE;QAC7B,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW;QACpE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,sBAAsB;KACpC;IACD,sCAAsC,EAAE;QACtC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW;QACnE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,0BAA0B;KACxC;IACD,iCAAiC,EAAE;QACjC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW;QACrE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,qBAAqB;KACnC;IAED,6DAA6D;IAC7D,mBAAmB,EAAE;QACnB,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY;QACnD,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,qCAAqC;KACnD;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY;QACnD,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,qDAAqD;KACnE;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY;QACnD,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,iDAAiD;KAC/D;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY;QACnD,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,2BAA2B;KACzC;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY;QACnD,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,iCAAiC;KAC/C;IACD,8BAA8B,EAAE;QAC9B,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY;QACnD,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,iBAAiB;KAC/B;IACD,+BAA+B,EAAE;QAC/B,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY;QACnD,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,eAAe;KAC7B;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAgC,EAAE,GAAW;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5D,OAAO,GAAG,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,SAAS,aAAa,CAAC,IAAgB,EAAE,KAAa;IACpD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAC1C,OAAO,iDAAiD,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM;IACN,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC5D,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAgB,EAAE,GAAiB;IACtE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC;gBACP,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtC,KAAK;gBACL,QAAQ,EAAE,sBAAsB;aACjC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;;;;OAOG;IACH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3B,CAAC;QAEF,4BAA4B;QAC5B,MAAM,KAAK,GAA4C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9E,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAE3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,gCAAgC;QAChC,MAAM,SAAS,GAA4D,EAAE,CAAC;QAC9E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,KAAK,GACT,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;gBACzB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;gBAChB,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;oBAC3D,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;oBACjB,CAAC,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,aAAa;oBACpB,OAAO,EAAE,QAAQ,GAAG,0DAA0D;iBAC/E,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,qDAAqD;YACrD,0EAA0E;YAC1E,oDAAoD;YACpD,oDAAoD;YACpD,4CAA4C;YAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,aAAa;oBACpB,OAAO,EAAE,QAAQ,GAAG,oCAAoC;oBACxD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC;iBAC7C,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,aAAa;QACb,IAAI,CAAC;YACH,MAAM,OAAO,GAAmF,EAAE,CAAC;YACnG,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU;oBAAE,YAAY,GAAG,IAAI,CAAC;gBAC3C,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxF,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACtF,CAAC;YACD,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,OAAO;gBACP,YAAY;gBACZ,yDAAyD;gBACzD,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI;aACxD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web/routes/decisions.d.ts

@@ -0,0 +1,15 @@
+/**
+ * /api/decisions — decision lifecycle API (decision-flow-overhaul 2026-05-28)
+ *
+ * Routes:
+ *   GET /api/decisions          — list decisions (filter: ?status=&session_id=&limit=)
+ *   GET /api/decisions/:id      — single decision with related routing_events
+ *   POST /api/decisions/:id/approve — approve a decision (status → resolved)
+ *
+ * Spec § 5.4: "new route GET /api/decisions?session_id=&status=&limit= → 列表"
+ *             "new route GET /api/decisions/:id → 含 decisions 行 + 关联 routing_events"
+ */
+import type { Application } from 'express';
+import type { RouteContext } from './types.js';
+export declare function registerDecisionsRoutes(app: Application, ctx: RouteContext): void;
+//# sourceMappingURL=decisions.d.ts.map

package/dist/web/routes/decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.d.ts","sourceRoot":"","sources":["../../../src/web/routes/decisions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAqB,MAAM,SAAS,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA4E/C,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAwGjF"}

package/dist/web/routes/decisions.js

@@ -0,0 +1,181 @@
+/**
+ * /api/decisions — decision lifecycle API (decision-flow-overhaul 2026-05-28)
+ *
+ * Routes:
+ *   GET /api/decisions          — list decisions (filter: ?status=&session_id=&limit=)
+ *   GET /api/decisions/:id      — single decision with related routing_events
+ *   POST /api/decisions/:id/approve — approve a decision (status → resolved)
+ *
+ * Spec § 5.4: "new route GET /api/decisions?session_id=&status=&limit= → 列表"
+ *             "new route GET /api/decisions/:id → 含 decisions 行 + 关联 routing_events"
+ */
+import { readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+const VALID_STATUSES = new Set(['advisory', 'pending', 'resolved', 'bypassed', 'expired']);
+const DEFAULT_LIMIT = 50;
+const MAX_LIMIT = 200;
+/**
+ * Does the changelog text explicitly declare a `Decision: <id>` association?
+ * Looks at a structured header/frontmatter marker rather than an arbitrary
+ * substring, so a changelog that intentionally links a decision is reliably
+ * matched (the old full-text `includes` missed most changelogs because their
+ * body rarely embeds the raw id). Recognised forms (case-insensitive on the
+ * `decision` keyword), scanned only in the file's leading region:
+ *   > Decision: <id>            (markdown blockquote header)
+ *   Decision: <id>              (plain header line)
+ *   decision: <id>              (YAML frontmatter key)
+ */
+function hasDecisionHeader(text, id) {
+    // Bound the scan to the header region (frontmatter + opening lines) so we
+    // don't pay for full-file regex on large changelogs.
+    const head = text.slice(0, 2000);
+    // Optional leading "> " blockquote / list marker, then `decision:` (any case),
+    // optional whitespace, then the id as a whole token.
+    const re = new RegExp(`^\\s*>?\\s*decision\\s*:\\s*${id}(?![0-9a-zA-Z_-])`, 'im');
+    return re.test(head);
+}
+/**
+ * Find implementation changelogs that reference this decision id. Fail-silent +
+ * bounded (docs/implementation/<date>/*.md, two levels). Returns repo-relative
+ * paths. Used by GET /api/decisions/:id so the detail drawer's "related
+ * changelogs" section has data instead of crashing on undefined.
+ *
+ * Matching strategy (T2 changelog-surfacing, decision 75344363):
+ *   1. PRIMARY — a structured `Decision: <id>` header/frontmatter marker
+ *      (see hasDecisionHeader). This is the reliable path that standardized
+ *      agent changelogs now emit.
+ *   2. FALLBACK — legacy full-text substring `includes(id)`, so older
+ *      changelogs that embed the raw id anywhere still surface.
+ * Header matches are listed first (higher confidence), fallback matches after.
+ */
+function findRelatedChangelogs(projectPath, id) {
+    if (!projectPath || !id)
+        return [];
+    const headerMatches = [];
+    const fallbackMatches = [];
+    try {
+        const implRoot = join(projectPath, 'docs', 'implementation');
+        for (const dateDir of readdirSync(implRoot, { withFileTypes: true })) {
+            if (!dateDir.isDirectory())
+                continue;
+            const dirPath = join(implRoot, dateDir.name);
+            for (const f of readdirSync(dirPath, { withFileTypes: true })) {
+                if (!f.isFile() || !f.name.endsWith('.md'))
+                    continue;
+                const full = join(dirPath, f.name);
+                try {
+                    const text = readFileSync(full, 'utf8');
+                    const rel = `docs/implementation/${dateDir.name}/${f.name}`;
+                    if (hasDecisionHeader(text, id)) {
+                        headerMatches.push(rel);
+                    }
+                    else if (text.includes(id)) {
+                        fallbackMatches.push(rel);
+                    }
+                }
+                catch {
+                    /* skip unreadable file */
+                }
+            }
+        }
+    }
+    catch {
+        /* impl dir missing / unreadable — fail-silent, return what we have */
+    }
+    return [...headerMatches, ...fallbackMatches];
+}
+export function registerDecisionsRoutes(app, ctx) {
+    const { storage } = ctx;
+    // ── GET /api/decisions ─────────────────────────────────────────────────
+    app.get('/api/decisions', (req, res) => {
+        try {
+            const status = typeof req.query.status === 'string' ? req.query.status : undefined;
+            const session_id = typeof req.query.session_id === 'string' ? req.query.session_id : undefined;
+            const limitRaw = typeof req.query.limit === 'string' ? req.query.limit : undefined;
+            if (status && !VALID_STATUSES.has(status)) {
+                res.status(400).json({ error: 'invalid_status', valid: Array.from(VALID_STATUSES) });
+                return;
+            }
+            const limit = limitRaw
+                ? Math.min(Math.max(parseInt(limitRaw, 10) || DEFAULT_LIMIT, 1), MAX_LIMIT)
+                : DEFAULT_LIMIT;
+            const rows = storage.listDecisions({
+                status: status,
+                session_id,
+                limit,
+            });
+            res.json(rows);
+        }
+        catch (err) {
+            res.status(500).json({ error: 'internal_error', detail: String(err) });
+        }
+    });
+    // ── GET /api/decisions/:id ─────────────────────────────────────────────
+    app.get('/api/decisions/:id', (req, res) => {
+        try {
+            const { id } = req.params;
+            if (!id || typeof id !== 'string' || id.length !== 8) {
+                res.status(400).json({ error: 'invalid_id' });
+                return;
+            }
+            const decision = storage.getDecision(id);
+            if (!decision) {
+                res.status(404).json({ error: 'not_found', id });
+                return;
+            }
+            // Fetch related routing_events that have this decision_id
+            // (populated when main thread spawns agents with <!-- decision-id: X -->)
+            let relatedSpawns = [];
+            try {
+                const routingRows = storage.queryRoutingEvents({ session_id: decision.session_id, limit: 200 });
+                relatedSpawns = routingRows
+                    .filter(r => r['decision_id'] === id)
+                    .map(r => ({
+                    id: r.id,
+                    routed_to_name: r.routed_to_name ?? null,
+                    ts: r.ts,
+                    obeyed: r.obeyed ?? null,
+                }));
+            }
+            catch {
+                // Fail-silent — related spawn data is supplemental
+            }
+            const relatedChangelogs = findRelatedChangelogs(decision.project_path, id);
+            res.json({
+                ...decision,
+                related_spawns: relatedSpawns,
+                spawn_count: relatedSpawns.length,
+                related_changelogs: relatedChangelogs,
+            });
+        }
+        catch (err) {
+            res.status(500).json({ error: 'internal_error', detail: String(err) });
+        }
+    });
+    // ── POST /api/decisions/:id/approve ───────────────────────────────────
+    app.post('/api/decisions/:id/approve', (req, res) => {
+        try {
+            const { id } = req.params;
+            if (!id || typeof id !== 'string') {
+                res.status(400).json({ error: 'invalid_id' });
+                return;
+            }
+            const decision = storage.getDecision(id);
+            if (!decision) {
+                res.status(404).json({ error: 'not_found', id });
+                return;
+            }
+            if (decision.status === 'resolved') {
+                res.json({ ok: true, already_approved: true, id });
+                return;
+            }
+            storage.approveDecision(id, 'user');
+            const updated = storage.getDecision(id);
+            res.json({ ok: true, id, status: updated?.status ?? 'resolved', approved_at: updated?.approved_at });
+        }
+        catch (err) {
+            res.status(500).json({ error: 'internal_error', detail: String(err) });
+        }
+    });
+}
+//# sourceMappingURL=decisions.js.map

package/dist/web/routes/decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.js","sourceRoot":"","sources":["../../../src/web/routes/decisions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAKjC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AACnG,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,EAAU;IACjD,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjC,+EAA+E;IAC/E,qDAAqD;IACrD,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,+BAA+B,EAAE,mBAAmB,EACpD,IAAI,CACL,CAAC;IACF,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,qBAAqB,CAAC,WAAmB,EAAE,EAAU;IAC5D,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC7D,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBAAE,SAAS;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACrD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBACxC,MAAM,GAAG,GAAG,uBAAuB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC5D,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;wBAChC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC1B,CAAC;yBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC7B,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,0BAA0B;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO,CAAC,GAAG,aAAa,EAAE,GAAG,eAAe,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAgB,EAAE,GAAiB;IACzE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,UAAU,GACd,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAEnF,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ;gBACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC;gBAC3E,CAAC,CAAC,aAAa,CAAC;YAElB,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;gBACjC,MAAM,EAAE,MAAoC;gBAC5C,UAAU;gBACV,KAAK;aACN,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,0DAA0D;YAC1D,0EAA0E;YAC1E,IAAI,aAAa,GAA4F,EAAE,CAAC;YAChH,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChG,aAAa,GAAG,WAAW;qBACxB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAE,CAAwC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;qBAC5E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACT,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;oBACxC,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;iBACzB,CAAC,CAAC,CAAC;YACR,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;YAED,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAE3E,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,QAAQ;gBACX,cAAc,EAAE,aAAa;gBAC7B,WAAW,EAAE,aAAa,CAAC,MAAM;gBACjC,kBAAkB,EAAE,iBAAiB;aACtC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrE,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACnC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACvG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web/routes/diagnostics.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Diagnostics API — `GET /api/diagnostics` + `POST /api/diagnostics/fix`.
+ *
+ * GET returns the latest doctor report (30s in-memory cache to avoid running
+ * SQLite integrity_check on every poll). POST spawns `cf fix --apply --yes`
+ * after verifying `confirm: true` body field (idempotent client-side guard
+ * + 5 second rate limit).
+ *
+ * spec 1a41b43a (2026-06-01): original CLI Web surface.
+ * spec e5b845c4 (2026-06-01): project-context aware:
+ *   - GET picks "most recent project" from sessions.last_event_time and
+ *     surfaces it in `meta.current_project_path`. When no project is known
+ *     (fresh install), checks 5/6 emit `skip` instead of FAIL.
+ *   - POST `/fix` spawns `cf fix` with explicit `cwd = current_project_path`
+ *     to prevent the daemon's cwd from being polluted with project files.
+ *     **P0 safety**: fix is refused when no project is known.
+ */
+import type { Application } from 'express';
+import type { RouteContext } from './types.js';
+import { type DoctorReport } from '../../core/diagnostics/checks.js';
+import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+export declare function _resetDiagnosticsCache(): void;
+/** Picks the most-recently-active project from sessions (spec e5b845c4 OQ#1). */
+export declare function pickCurrentProject(storage: Pick<SQLiteStorage, 'queryLastEventAtPerProject'>): {
+    path: string | null;
+    source: 'recent-event' | 'none';
+};
+export interface DiagnosticsMeta {
+    current_project_path: string | null;
+    project_source: 'recent-event' | 'none';
+}
+export interface DiagnosticsResponseBody extends DoctorReport {
+    meta: DiagnosticsMeta;
+}
+export declare function _resetFixRateLimit(): void;
+export interface SpawnResult {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}
+export interface SpawnOptions {
+    /** spec e5b845c4: explicit working dir for `cf fix` so project init commands
+     *  (`cf project init`, `cf knowledge init`) materialize in the right project. */
+    cwd?: string;
+}
+export type Spawner = (cmd: string, args: string[], opts?: SpawnOptions) => Promise<SpawnResult>;
+export interface DiagnosticsRouteOptions {
+    /** Override subprocess spawner (tests). */
+    spawn?: Spawner;
+    /** Override report generator (tests). */
+    buildReport?: (forceRefresh?: boolean) => Promise<DiagnosticsResponseBody>;
+    /** Override `cf` binary name (tests / dev). */
+    cfBin?: string;
+    /** Override current-project picker (tests). Defaults to {@link pickCurrentProject}. */
+    pickProject?: () => {
+        path: string | null;
+        source: 'recent-event' | 'none';
+    };
+}
+export declare function registerDiagnosticsRoutes(app: Application, ctx: RouteContext, opts?: DiagnosticsRouteOptions): void;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/web/routes/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../src/web/routes/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAYlE,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,4BAA4B,CAAC,GACzD;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAAA;CAAE,CAmB1D;AAED,MAAM,WAAW,eAAe;IAC9B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,EAAE,cAAc,GAAG,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,uBAAwB,SAAQ,YAAY;IAC3D,IAAI,EAAE,eAAe,CAAC;CACvB;AAgCD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAID,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B;qFACiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE,YAAY,KAChB,OAAO,CAAC,WAAW,CAAC,CAAC;AAqD1B,MAAM,WAAW,uBAAuB;IACtC,2CAA2C;IAC3C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,yCAAyC;IACzC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC3E,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAAA;KAAE,CAAC;CAC9E;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,WAAW,EAChB,GAAG,EAAE,YAAY,EACjB,IAAI,GAAE,uBAA4B,GACjC,IAAI,CAiFN"}