@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/web/routes/violations.js

@@ -0,0 +1,112 @@
+/**
+ * /api/violations — recent main-thread violations API
+ *
+ * Reads from the same two signal sources as the Stop-hook violation reporter:
+ *   1. routing_events.obeyed = 0 (rolling window)
+ *   2. UserPromptSubmit user_prompt matching violation keywords
+ *
+ * No new schema — wraps `collectViolations()` (which is already covered by
+ * unit tests in tests/unit/core/insights/violation-reporter.test.ts).
+ */
+import { collectViolations, countViolationsBySignal, formatRelative, } from '../../core/insights/violation-reporter.js';
+function toApi(v) {
+    return {
+        timestamp: v.timestamp,
+        summary: v.user_prompt_summary,
+        signal: v.signal,
+        detectedKeyword: v.detected_keyword ?? null,
+        expectedAgent: v.expected_agent ?? null,
+        relativeTime: formatRelative(v.timestamp),
+        mainThreadContent: v.main_thread_content ?? null,
+    };
+}
+export function registerViolationsRoutes(app, ctx) {
+    const { storage } = ctx;
+    app.get('/api/violations', (req, res) => {
+        // days: default 7, clamp [1, 30]
+        const daysRaw = req.query.days;
+        const days = parseInt(typeof daysRaw === 'string' ? daysRaw : '7', 10);
+        if (Number.isNaN(days) || days < 1 || days > 30) {
+            res.status(400).json({ error: 'invalid_days' });
+            return;
+        }
+        // limit: default 5, clamp [1, 100]
+        // 2026-05-26: widened ceiling from 20 → 100 to support the ViolationsPage
+        // pagination control (page sizes 20/40/80). Old default + lower-bound clamp
+        // unchanged for backward compat with existing /violations consumers.
+        const limitRaw = req.query.limit;
+        const limit = parseInt(typeof limitRaw === 'string' ? limitRaw : '5', 10);
+        if (Number.isNaN(limit) || limit < 1 || limit > 100) {
+            res.status(400).json({ error: 'invalid_limit' });
+            return;
+        }
+        // offset: default 0, must be >= 0 (added 2026-05-26 for paginator support)
+        const offsetRaw = req.query.offset;
+        const offset = parseInt(typeof offsetRaw === 'string' ? offsetRaw : '0', 10);
+        if (Number.isNaN(offset) || offset < 0) {
+            res.status(400).json({ error: 'invalid_offset' });
+            return;
+        }
+        const projectPath = typeof req.query.project === 'string' && req.query.project.length > 0
+            ? req.query.project
+            : undefined;
+        try {
+            // 2026-05-26: server-side pagination via offset. We pull a high cap
+            // through collectViolations and slice [offset, offset+limit] ourselves
+            // so dedupe + sort logic stays inside one place. MAX_SCAN inside the
+            // collect helper bounds the per-source scan; the deduped set caps at
+            // ~3 * MAX_SCAN = 600 rows, so a synthetic 1000 ceiling here will never
+            // truncate before our own slice.
+            const PAGINATION_CEILING = 1000;
+            const rawAll = collectViolations(storage, {
+                days,
+                limit: PAGINATION_CEILING,
+                projectPath,
+            });
+            const paged = rawAll.slice(offset, offset + limit);
+            const violations = paged.map(toApi);
+            // Unbounded counts for the Web KPI "近 7d 共 N 条 violation" and the
+            // InterceptsTab "tool intercept (7d)" stat. Frontend used to bind to
+            // `count` (= violations.length AFTER slice(0, limit)) which capped the
+            // KPI at limit (≤20). total_in_window is the deduped true count;
+            // total_by_signal_in_window splits it by source so the InterceptsTab
+            // can show the unbounded tool-intercept count without re-fetching with
+            // a higher limit. Added 2026-05-26 — see changelog.
+            //
+            // Pagination note: total_in_window MUST stay invariant across offset
+            // values so the paginator can compute total pages = ceil(total/pageSize).
+            let totalInWindow = rawAll.length;
+            let totalBySignal = {
+                routing_disobeyed: 0,
+                user_keyword: 0,
+                tool_intercept: 0,
+            };
+            try {
+                const counts = countViolationsBySignal(storage, { days, projectPath });
+                totalInWindow = counts.total;
+                totalBySignal = counts.by_signal;
+            }
+            catch {
+                // Best-effort: fall back to capped count so the page still renders
+                // even if the count helper hits a storage hiccup.
+            }
+            res.json({
+                generatedAt: new Date().toISOString(),
+                windowDays: days,
+                limit,
+                offset,
+                count: violations.length,
+                total_in_window: totalInWindow,
+                total_by_signal_in_window: totalBySignal,
+                violations,
+            });
+        }
+        catch (err) {
+            res.status(500).json({
+                error: 'internal',
+                detail: err instanceof Error ? err.message : String(err),
+            });
+        }
+    });
+}
+//# sourceMappingURL=violations.js.map

package/dist/web/routes/violations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"violations.js","sourceRoot":"","sources":["../../../src/web/routes/violations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,GAEf,MAAM,2CAA2C,CAAC;AAiBnD,SAAS,KAAK,CAAC,CAAY;IACzB,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,mBAAmB;QAC9B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;QAC3C,aAAa,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;QACvC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QACzC,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,IAAI,IAAI;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAgB,EAAE,GAAiB;IAC1E,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,iCAAiC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,0EAA0E;QAC1E,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,2EAA2E;QAC3E,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO;YACnB,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,CAAC;YACH,oEAAoE;YACpE,uEAAuE;YACvE,qEAAqE;YACrE,qEAAqE;YACrE,wEAAwE;YACxE,iCAAiC;YACjC,MAAM,kBAAkB,GAAG,IAAI,CAAC;YAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE;gBACxC,IAAI;gBACJ,KAAK,EAAE,kBAAkB;gBACzB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpC,kEAAkE;YAClE,qEAAqE;YACrE,uEAAuE;YACvE,iEAAiE;YACjE,qEAAqE;YACrE,uEAAuE;YACvE,oDAAoD;YACpD,EAAE;YACF,qEAAqE;YACrE,0EAA0E;YAC1E,IAAI,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;YAClC,IAAI,aAAa,GAAG;gBAClB,iBAAiB,EAAE,CAAC;gBACpB,YAAY,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC;aAClB,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBACvE,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC7B,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,kDAAkD;YACpD,CAAC;YACD,GAAG,CAAC,IAAI,CAAC;gBACP,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,UAAU,EAAE,IAAI;gBAChB,KAAK;gBACL,MAAM;gBACN,KAAK,EAAE,UAAU,CAAC,MAAM;gBACxB,eAAe,EAAE,aAAa;gBAC9B,yBAAyB,EAAE,aAAa;gBACxC,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AA0BrE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,SAAS;IAIR,OAAO,CAAC,OAAO;IAH3B,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,MAAM,CAA0D;gBAEpD,OAAO,EAAE,gBAAgB;IAU7C,OAAO,CAAC,WAAW;IAqDb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AA2DrE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,SAAS;IAIR,OAAO,CAAC,OAAO;IAH3B,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,MAAM,CAA0D;gBAEpD,OAAO,EAAE,gBAAgB;IA4B7C,OAAO,CAAC,WAAW;IAsFb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5B"}

package/dist/web/server.js

@@ -5,28 +5,62 @@
  * modules under src/web/routes/, and owns lifecycle (start/stop).
  */
 import express from 'express';
+import compression from 'compression';
 import { logger } from '../core/utils/logger.js';
 import { ErrorHandler } from '../core/utils/error-handler.js';
 import { requireAuth } from './auth-middleware.js';
 import { mountMcpServer } from '../mcp/server.js';
+import { CodeGraphStore } from '../core/storage/codegraph.js';
+import { FORGE_PATHS } from '../core/constants.js';
 import { errorHandler, notFoundHandler } from './routes/error-handler.js';
 import { registerAuthRoutes } from './routes/auth.js';
 import { registerStaticAssets, registerStaticFallback } from './routes/static.js';
 import { registerStatusRoutes } from './routes/status.js';
-import { registerEventsRoutes } from './routes/events.js';
 import { registerSessionsRoutes } from './routes/sessions.js';
-import { registerTokenUsageRoutes } from './routes/token-usage.js';
-import { registerAIRoutes } from './routes/ai.js';
-import { registerPatchRoutes } from './routes/patch.js';
-import { registerSkillsRoutes } from './routes/skills.js';
+// AI routes removed by sub-spec D R-C (spec 0902 / decision f5a5b030):
+// `/api/ai/*` + `/api/config/ai` 端点全部下线，AI 流程改走 `claude` CLI 子进程
+// (sub-spec A/B/C)。SettingsPage 的 AI 配置面与 CLI menu 的 model picker
+// 一同删除；前端不再有任何 `/api/ai/*` 消费者。R-D 阶段会进一步删
+// ConfigManager.ai.* schema。
 import { registerTasksRoutes } from './routes/tasks.js';
-import { registerStatsRoutes } from './routes/stats.js';
-import { registerSkillStatsRoutes } from './routes/skill-stats.js';
+import { registerTaskTimelineRoutes } from './routes/task-timeline.js'; // v6 Batch 2 spec 1750
 import { registerRulesRoutes } from './routes/rules.js';
 import { registerDriftRoutes } from './routes/drift.js';
-import { registerTraceRoutes } from './routes/trace.js';
-import { registerReportsRoutes } from './routes/reports.js';
 import { registerInsightsRoutes } from './routes/insights.js';
+import { registerViolationsRoutes } from './routes/violations.js';
+// spec 3 partial revert (2026-05-27): originally 12 route modules were
+// disabled (Option B = FE 隐藏 + 后端 register 注释), but user feedback
+// restored 4 FE pages (/context, /context/skill, /context/agent, /settings)
+// so 6 of the 12 route modules are re-enabled to back those pages.
+//
+// Re-enabled (6 / FE deps):
+//   - knowledge       (ContextInsightsPage 知识库 tab)
+//   - skills          (ContextInsightsPage skills tab)
+//   - skill-stats     (ContextInsightsPage skills tab 详情)
+//   - skill-content   (SkillContentPage)
+//   - agent-content   (AgentContentPage)
+//   - skills-distill  (ContextInsightsPage skills tab)
+//
+// Still disabled (6 / no FE consumer): events, patch, stats, trace, reports,
+// pipeline. Revert recipe (any single one): uncomment its import below + its
+// register*Routes(app, ctx) call in setupRoutes() and rebuild.
+import { registerKnowledgeRoutes } from './routes/knowledge.js';
+import { registerSkillsRoutes } from './routes/skills.js';
+import { registerSkillStatsRoutes } from './routes/skill-stats.js';
+import { registerSkillContentRoutes } from './routes/skill-content.js';
+import { registerAgentContentRoutes } from './routes/agent-content.js';
+import { registerSkillsDistillRoutes } from './routes/skills-distill.js';
+import { registerAgentDistillRoutes } from './routes/agent-distill.js'; // Q1 (decision 568a8c53): Agent 进化 UI 闭环 (preview/run SSE/adopt/rollback)
+import { registerHealthRoutes } from './routes/health.js';
+import { registerDecisionsRoutes } from './routes/decisions.js';
+import { registerPatchRoutes } from './routes/patch.js'; // sub-spec C R-B: shell-out to patch-applier agent
+import { registerDiagnosticsRoutes } from './routes/diagnostics.js'; // spec 1a41b43a: cf doctor + cf fix Web surface
+import { registerEventsRoutes } from './routes/events.js'; // re-enabled 2026-06-02: TasksHubPage SSE realtime (/api/events/stream) consumer restored
+// import { registerStatsRoutes } from './routes/stats.js';
+// import { registerTraceRoutes } from './routes/trace.js';
+// import { registerReportsRoutes } from './routes/reports.js';
+import { registerPipelineRoutes } from './routes/pipeline.js'; // re-enabled 2026-06-08 (decision 5266724a): DetailDrawer ?prompt= → /api/insights/pipeline?event_id= was 404 because this route was never mounted
+import { registerConfigRoutes } from './routes/config.js'; // Arco Phase 4a (decision 29688066): GET/POST /api/config — 可写设置页后端（唯一硬后端缺口）
 export class WebServer {
     options;
     app;
@@ -34,6 +68,22 @@ export class WebServer {
     constructor(options) {
         this.options = options;
         this.app = express();
+        // perf P1.4 (2026-05-25): gzip middleware. Default threshold 1KB; cuts
+        // first-load wire size ~3x for the SPA bundle (1.8MB → ~600KB) and most
+        // JSON APIs (insights/agent-board especially benefits). Already-compressed
+        // assets (images, woff2) are skipped automatically.
+        // SSE (text/event-stream) MUST be excluded: compression buffers the stream
+        // and never flushes per-event, so /api/events/stream would hang (client gets
+        // 200 headers but zero body). Skip compression for SSE; compress everything
+        // else via the package's default heuristic.
+        this.app.use(compression({
+            filter: (req, res) => {
+                const ct = String(res.getHeader('Content-Type') ?? '');
+                if (ct.includes('text/event-stream'))
+                    return false;
+                return compression.filter(req, res);
+            },
+        }));
         // Security: limit request body size to prevent DoS attacks
         this.app.use(express.json({ limit: '10mb' }));
         this.app.use(express.urlencoded({ extended: true, limit: '10mb' }));
@@ -53,28 +103,58 @@ export class WebServer {
         registerAuthRoutes(this.app, ctx);
         // 2. Static assets (serves UI; fallback registered last)
         registerStaticAssets(this.app, ctx);
-        // 3. API routes
+        // 3. API routes — spec 3 partial revert (2026-05-27): 6 register* lines
+        //    re-enabled to back restored FE pages (/context, /context/skill/:id,
+        //    /context/agent/:name, /settings). 6 still disabled (no FE consumer).
+        //
+        //    sub-spec D R-C (2026-05-29, spec 0902): registerAIRoutes 永久删除 ——
+        //    `/api/ai/*` 与 `/api/config/ai` 全部下线，CLI menu 的 model picker /
+        //    SettingsPage 的 AI 配置面同步删除。
         registerStatusRoutes(this.app, ctx);
-        registerEventsRoutes(this.app, ctx);
         registerSessionsRoutes(this.app, ctx);
-        registerTokenUsageRoutes(this.app, ctx);
-        registerAIRoutes(this.app, ctx);
-        registerPatchRoutes(this.app, ctx);
-        registerSkillsRoutes(this.app, ctx);
         registerTasksRoutes(this.app, ctx);
-        registerStatsRoutes(this.app, ctx);
-        registerSkillStatsRoutes(this.app, ctx);
+        registerTaskTimelineRoutes(this.app, ctx); // v6 Batch 2 spec 1750: GET /api/tasks/:id/timeline
         registerRulesRoutes(this.app, ctx);
         registerDriftRoutes(this.app, ctx);
-        registerTraceRoutes(this.app, ctx);
-        registerReportsRoutes(this.app, ctx);
         registerInsightsRoutes(this.app, ctx);
+        registerViolationsRoutes(this.app, ctx);
+        registerKnowledgeRoutes(this.app, ctx); // restored: ContextInsightsPage KB tab
+        registerSkillsRoutes(this.app, ctx); // restored: ContextInsightsPage skills tab
+        registerSkillStatsRoutes(this.app, ctx); // restored: ContextInsightsPage skills tab 详情
+        registerSkillContentRoutes(this.app, ctx); // restored: SkillContentPage
+        registerAgentContentRoutes(this.app, ctx); // restored: AgentContentPage
+        registerSkillsDistillRoutes(this.app, ctx); // restored: ContextInsightsPage skills tab
+        registerAgentDistillRoutes(this.app, ctx); // Q1 (decision 568a8c53): human-triggered agent evolution (preview/run SSE/adopt/rollback)
+        registerHealthRoutes(this.app, ctx); // watchdog spec 0843: /api/health for daemon badge
+        registerDecisionsRoutes(this.app, ctx); // decision-flow-overhaul 2026-05-28: /api/decisions
+        registerPatchRoutes(this.app, ctx); // sub-spec C R-B (2026-05-29): patch web 接通 claude CLI shell-out
+        registerDiagnosticsRoutes(this.app, ctx); // spec 1a41b43a (2026-06-01): /api/diagnostics + /api/diagnostics/fix
+        registerEventsRoutes(this.app, ctx); // re-enabled 2026-06-02: /api/events/stream SSE feeds TasksHubPage realtime
+        // registerStatsRoutes(this.app, ctx);           // disabled by spec 3
+        // registerTraceRoutes(this.app, ctx);           // disabled by spec 3
+        // registerReportsRoutes(this.app, ctx);         // disabled by spec 3 (CLI `forge report` uses weekly-report.ts directly, not HTTP)
+        registerPipelineRoutes(this.app, ctx); // re-enabled 2026-06-08 (decision 5266724a): backs DetailDrawer ?prompt= 5-step view via /api/insights/pipeline?event_id=
+        registerConfigRoutes(this.app, ctx); // Arco Phase 4a (decision 29688066): GET/POST /api/config — 可写设置页（白名单 + 校验 + needsRestart）
         // 4. MCP server — mounted on /mcp (Streamable HTTP)
         if (this.options.skillRegistry) {
+            // Codegraph store (Phase 2, decision 95df9d97): open the independent
+            // graph DB so the code_graph_explore / code_impact / code_search tools
+            // can pull the call graph. The constructor creates an empty DB if it
+            // doesn't exist yet (graph not built) — tools then report "not found"
+            // rather than crashing. Best-effort: a graph-open failure must not block
+            // the rest of the MCP / web server from mounting.
+            let codeGraphStore;
+            try {
+                codeGraphStore = new CodeGraphStore(FORGE_PATHS.codegraphDb());
+            }
+            catch (err) {
+                logger.warn(`[MCP] codegraph store unavailable, code_* tools disabled: ${err instanceof Error ? err.message : String(err)}`);
+            }
             mountMcpServer(this.app, {
                 skillRegistry: this.options.skillRegistry,
                 storage: this.options.storage,
                 guard: this.options.invocationGuard,
+                codeGraphStore,
             });
         }
         else {

package/dist/web/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAI9B,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAS9D,MAAM,OAAO,SAAS;IAIA;IAHZ,GAAG,CAAsB;IACzB,MAAM,GAAqD,IAAI,CAAC;IAExE,YAAoB,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;QAErB,2DAA2D;QAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAEpE,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YACxC,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAiB;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;SAC1C,CAAC;QAEF,oBAAoB;QACpB,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAElC,yDAAyD;QACzD,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEpC,gBAAgB;QAChB,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,oDAAoD;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;gBACzC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;aACpC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;QAED,kCAAkC;QAClC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,+CAA+C;QAC/C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,qDAAqD;YACrD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACjE,MAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC;gBACtF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;gBACxD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;gBAC3C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,WAAW,MAAM,aAAa,CAAC;AAItC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,uEAAuE;AACvE,iEAAiE;AACjE,kEAAkE;AAClE,2CAA2C;AAC3C,6BAA6B;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC,CAAG,uBAAuB;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,uEAAuE;AACvE,kEAAkE;AAClE,4EAA4E;AAC5E,mEAAmE;AACnE,EAAE;AACF,4BAA4B;AAC5B,oDAAoD;AACpD,uDAAuD;AACvD,0DAA0D;AAC1D,yCAAyC;AACzC,yCAAyC;AACzC,uDAAuD;AACvD,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,+DAA+D;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC,CAAE,0EAA0E;AACnJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC,CAAM,mDAAmD;AACjH,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC,CAAE,gDAAgD;AACtH,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC,CAAE,0FAA0F;AACtJ,2DAA2D;AAC3D,2DAA2D;AAC3D,+DAA+D;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC,CAAE,mJAAmJ;AACnN,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC,CAAG,6EAA6E;AAS1I,MAAM,OAAO,SAAS;IAIA;IAHZ,GAAG,CAAsB;IACzB,MAAM,GAAqD,IAAI,CAAC;IAExE,YAAoB,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;QAErB,uEAAuE;QACvE,wEAAwE;QACxE,2EAA2E;QAC3E,oDAAoD;QACpD,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,4CAA4C;QAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,CACV,WAAW,CAAC;YACV,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACnB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvD,IAAI,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACnD,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtC,CAAC;SACF,CAAC,CACH,CAAC;QAEF,2DAA2D;QAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAEpE,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YACxC,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAiB;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;SAC1C,CAAC;QAEF,oBAAoB;QACpB,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAElC,yDAAyD;QACzD,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEpC,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,EAAE;QACF,sEAAsE;QACtE,mEAAmE;QACnE,gCAAgC;QAChC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,0BAA0B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAG,oDAAoD;QACjG,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAM,uCAAuC;QACpF,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAS,2CAA2C;QACxF,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAK,8CAA8C;QAC3F,0BAA0B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAG,6BAA6B;QAC1E,0BAA0B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAG,6BAA6B;QAC1E,2BAA2B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAE,2CAA2C;QACxF,0BAA0B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAG,2FAA2F;QACxI,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAS,mDAAmD;QAChG,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAM,oDAAoD;QACjG,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAU,iEAAiE;QAC9G,yBAAyB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAI,sEAAsE;QACnH,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAU,4EAA4E;QAC1H,sEAAsE;QACtE,sEAAsE;QACtE,oIAAoI;QACpI,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW,0HAA0H;QAC3K,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAa,2FAA2F;QAE5I,oDAAoD;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC/B,qEAAqE;YACrE,uEAAuE;YACvE,qEAAqE;YACrE,sEAAsE;YACtE,yEAAyE;YACzE,kDAAkD;YAClD,IAAI,cAA0C,CAAC;YAC/C,IAAI,CAAC;gBACH,cAAc,GAAG,IAAI,cAAc,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CACT,6DACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;gBACzC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACnC,cAAc;aACf,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;QAED,kCAAkC;QAClC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,+CAA+C;QAC/C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,qDAAqD;YACrD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACjE,MAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC;gBACtF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;gBACxD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;gBAC3C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/web/services/agent-distill-manager.d.ts

@@ -0,0 +1,122 @@
+/**
+ * AgentDistillManager — per-agent retro-distill job manager for the web
+ * `POST /api/agent/distill/run` path (decision 568a8c53).
+ *
+ * Structurally MIRRORS `distill-manager.ts` (session map / SSE event broadcast /
+ * TTL GC / AbortController cancel) but is a SEPARATE class so the proven skill
+ * distill path is never touched (Option B — blast-radius isolation). The two
+ * differ in lock semantics:
+ *   - skill distill: ONE global job at a time.
+ *   - agent distill: per-agent mutex (different agents may run in parallel; the
+ *     SAME agent's second run → AgentDistillConflictError / 409), plus a global
+ *     concurrency cap (MAX_CONCURRENT_AGENT_DISTILL) to avoid an LLM storm.
+ *
+ * 红线 (decision 568a8c53 / core-belief #2): the ONLY caller of `start()` is the
+ * human-triggered `POST /api/agent/distill/run` route. This module must NEVER be
+ * imported by daemon startup / loop / scheduler code (import-graph guard test).
+ *
+ * Cost safety: real spawns burn LLM. Tests inject a fake `spawn` returning a
+ * pre-baked envelope string — the real `spawnAgentRetroDistiller` is NEVER
+ * exercised by automated tests.
+ */
+import { SQLiteStorage } from '../../core/storage/sqlite.js';
+/**
+ * Global cap on concurrently-running agent distills (independent of the per-agent
+ * mutex). Guards against an LLM-spawn storm (vitest IO-storm教训 / decision
+ * 8a51b15d analogue): even with N distinct agents, never spawn more than this at
+ * once.
+ */
+export declare const MAX_CONCURRENT_AGENT_DISTILL = 2;
+export type AgentDistillEventType = 'connected' | 'start' | 'phase-changed' | 'distiller-spawned' | 'draft-written' | 'anchor-rejected' | 'done' | 'cancelled' | 'error';
+export interface AgentAnchorViolationLite {
+    region: string;
+    line: string;
+    patchLine: number;
+}
+export interface AgentDistillEvent {
+    type: AgentDistillEventType;
+    at: string;
+    agent?: string;
+    message?: string;
+    /** runId echoed for downstream filtering. */
+    runId?: string;
+    /** Populated on draft-written. */
+    draftPath?: string;
+    targetVersion?: number;
+    currentVersion?: number;
+    maturity?: string;
+    /** Populated on anchor-rejected. */
+    violations?: AgentAnchorViolationLite[];
+    /** Populated on error. */
+    errorMessage?: string;
+}
+export interface AgentDistillSession {
+    runId: string;
+    agent: string;
+    startedAt: number;
+    doneAt: number | null;
+    events: AgentDistillEvent[];
+    cancelRequested: boolean;
+    draftPath: string | null;
+    lastError: string | null;
+}
+export interface AgentDistillStartOptions {
+    agent: string;
+    days?: number;
+    maxFailures?: number;
+    /** Test/override: draft output base dir (default repo `docs/design`). */
+    outBaseDir?: string;
+    /** Test/override: templates dir. */
+    templatesDir?: string;
+    /** Test/override: storage (else opens FORGE_PATHS.database()). */
+    storage?: SQLiteStorage;
+    /** Test injection: fake spawn returning a pre-baked envelope (NO real LLM). */
+    spawn?: (prompt: string, cancelSignal?: AbortSignal) => Promise<string>;
+}
+export declare class AgentDistillConflictError extends Error {
+    agent: string;
+    status: number;
+    constructor(agent: string);
+}
+export declare class AgentDistillCapacityError extends Error {
+    status: number;
+    constructor();
+}
+export declare class AgentDistillManager {
+    /** Per-agent mutex: agent → its in-flight session. */
+    private running;
+    private sessions;
+    private listeners;
+    private lastFinished;
+    /** True iff the given agent has an in-flight distill. */
+    isBusy(agent: string): boolean;
+    /** Count of in-flight distills across all agents. */
+    runningCount(): number;
+    /** Agent name of any single in-flight distill (UI convenience). */
+    getBusyAgent(): string | null;
+    getSession(id: string): AgentDistillSession | null;
+    getLastFinished(): AgentDistillSession | null;
+    /**
+     * Kick off a per-agent distill run. Throws AgentDistillConflictError (same
+     * agent already running) or AgentDistillCapacityError (global cap reached).
+     * Returns immediately; the spawn runs in the background. Subscribers get
+     * events via subscribe().
+     */
+    start(options: AgentDistillStartOptions): {
+        runId: string;
+    };
+    subscribe(runId: string, listener: (e: AgentDistillEvent) => void): () => void;
+    cancel(runId: string): boolean;
+    private pushEvent;
+    /**
+     * Assemble read-only context → gate → spawn distiller → parse envelope →
+     * anchor-guard → write draft. Terminates with one of: done | cancelled |
+     * error. NEVER writes the template itself (that is the adopt path).
+     */
+    private runWithChildProcess;
+    /** Test-only: reset internal state. @internal */
+    _reset(): void;
+}
+/** Module-level singleton (one manager per daemon; per-agent locks inside). */
+export declare const agentDistillManager: AgentDistillManager;
+//# sourceMappingURL=agent-distill-manager.d.ts.map

package/dist/web/services/agent-distill-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-distill-manager.d.ts","sourceRoot":"","sources":["../../../src/web/services/agent-distill-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAe7D;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,MAAM,MAAM,qBAAqB,GAC7B,WAAW,GACX,OAAO,GACP,eAAe,GACf,mBAAmB,GACnB,eAAe,GACf,iBAAiB,GACjB,MAAM,GACN,WAAW,GACX,OAAO,CAAC;AAEZ,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,UAAU,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACxC,0BAA0B;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACzE;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAE/B,KAAK,EAAE,MAAM;IADhC,MAAM,SAAO;gBACM,KAAK,EAAE,MAAM;CAIjC;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,MAAM,SAAO;;CAKd;AAED,qBAAa,mBAAmB;IAC9B,sDAAsD;IACtD,OAAO,CAAC,OAAO,CAA0C;IACzD,OAAO,CAAC,QAAQ,CAA0C;IAC1D,OAAO,CAAC,SAAS,CAA0D;IAC3E,OAAO,CAAC,YAAY,CAAoC;IAExD,yDAAyD;IACzD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAK9B,qDAAqD;IACrD,YAAY,IAAI,MAAM;IAMtB,mEAAmE;IACnE,YAAY,IAAI,MAAM,GAAG,IAAI;IAK7B,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAIlD,eAAe,IAAI,mBAAmB,GAAG,IAAI;IAI7C;;;;;OAKG;IACH,KAAK,CAAC,OAAO,EAAE,wBAAwB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IA6C3D,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI;IAa9E,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAO9B,OAAO,CAAC,SAAS;IAgBjB;;;;OAIG;YACW,mBAAmB;IA8NjC,iDAAiD;IACjD,MAAM,IAAI,IAAI;CAMf;AAED,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,qBAA4B,CAAC"}