@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/core/utils/time.js

@@ -3,6 +3,39 @@
  *
  * 统一处理 ISO 8601 时间戳的 Z 后缀问题，确保所有时间戳都带 Z。
  */
+// ─── Duration constants (R5, decision 1544) ────────────────────────────────
+// 统一替换全仓手写的时间窗口算术（`N * 24 * 60 * 60 * 1000` / `N * 86400_000`
+// 等 4 种拼法）。值与手写拼法严格相等，纯行为保持。
+/** 一分钟的毫秒数 = 60 * 1000 = 60_000 */
+export const MINUTE_MS = 60_000;
+/** 一小时的毫秒数 = 60 * 60 * 1000 = 3_600_000 */
+export const HOUR_MS = 3_600_000;
+/** 一天的毫秒数 = 24 * 60 * 60 * 1000 = 86_400_000 */
+export const DAY_MS = 86_400_000;
+/**
+ * `now - n 天` 的 Unix 毫秒数（epoch ms）。
+ *
+ * 等价于手写的 `Date.now() - n * 24 * 60 * 60 * 1000`。用于 INTEGER ms 时间戳
+ * 列（routing_events.ts / skill_invocations）的窗口下界，**保持 number 类型**。
+ *
+ * 注意：调用方若需要可注入的 "now"（如 `opts.now_ms ?? Date.now()`），不要用本
+ * 函数（它内部固定调 Date.now()），改用 `nowMs - n * DAY_MS`。
+ */
+export function daysAgoMs(n) {
+    return Date.now() - n * DAY_MS;
+}
+/**
+ * `now - n 天` 的 ISO 8601 字符串（带 Z，由 Date.prototype.toISOString 产出）。
+ *
+ * 等价于手写的 `new Date(Date.now() - n * 24 * 60 * 60 * 1000).toISOString()`。
+ * 用于 ISO TEXT 时间戳列（events.timestamp 等）的窗口下界，**保持 string 类型**。
+ *
+ * 注意：调用方若需要可注入的 "now"，改用
+ * `new Date(nowMs - n * DAY_MS).toISOString()`。
+ */
+export function daysAgoIso(n) {
+    return new Date(daysAgoMs(n)).toISOString();
+}
 /**
  * 归一化时间戳，确保带 Z 后缀
  */
@@ -35,4 +68,118 @@ export function formatDuration(ms) {
         return `${(ms / 60000).toFixed(1)}m`;
     return `${(ms / 3600000).toFixed(1)}h`;
 }
+// ─── New display helpers (timezone-overhaul, spec 1635) ────────────────────
+/**
+ * 将"可能 naive 的 UTC ISO 串"安全转换为 Date 实例。
+ * string 入参走 normalizeTimestamp 补 Z；number 入参直通 new Date(n)（毫秒值）。
+ * 非法输入返回 epoch（不抛错）。
+ *
+ * 例：'2026-05-27T08:24:13.123' (naive UTC) → Date 表示 16:24 local (UTC+8)
+ */
+export function parseTimestamp(ts) {
+    if (typeof ts === 'number') {
+        return new Date(ts);
+    }
+    try {
+        return new Date(normalizeTimestamp(ts));
+    }
+    catch {
+        return new Date(0);
+    }
+}
+function pad2(n) {
+    return n < 10 ? `0${n}` : `${n}`;
+}
+/**
+ * 格式化为本地时区显示，默认 `2026-05-27 16:24 CST`。
+ * opts.includeSeconds: 输出 `2026-05-27 16:24:13 CST`
+ * opts.dateOnly: 输出 `2026-05-27`
+ * opts.tzSuffix: 默认 'CST'；传 '' 跳过后缀
+ * 非法输入返回 '—'。
+ */
+export function formatLocalDisplay(ts, opts) {
+    try {
+        const d = parseTimestamp(ts);
+        if (isNaN(d.getTime()))
+            return '—';
+        const yyyy = d.getFullYear();
+        const mm = pad2(d.getMonth() + 1);
+        const dd = pad2(d.getDate());
+        if (opts?.dateOnly)
+            return `${yyyy}-${mm}-${dd}`;
+        const hh = pad2(d.getHours());
+        const min = pad2(d.getMinutes());
+        const base = `${yyyy}-${mm}-${dd} ${hh}:${min}`;
+        const withSec = opts?.includeSeconds ? `:${pad2(d.getSeconds())}` : '';
+        const suffix = opts?.tzSuffix !== undefined ? opts.tzSuffix : 'CST';
+        return suffix ? `${base}${withSec} ${suffix}` : `${base}${withSec}`;
+    }
+    catch {
+        return '—';
+    }
+}
+/**
+ * 格式化为 UTC 显示，`2026-05-27 08:24 UTC`。
+ * opts.includeSeconds: 加 `:13`
+ * opts.dateOnly: 仅 `2026-05-27`（UTC 日期）
+ * 非法输入返回 '—'。
+ */
+export function formatUTCDisplay(ts, opts) {
+    try {
+        const d = parseTimestamp(ts);
+        if (isNaN(d.getTime()))
+            return '—';
+        const yyyy = d.getUTCFullYear();
+        const mm = pad2(d.getUTCMonth() + 1);
+        const dd = pad2(d.getUTCDate());
+        if (opts?.dateOnly)
+            return `${yyyy}-${mm}-${dd}`;
+        const hh = pad2(d.getUTCHours());
+        const min = pad2(d.getUTCMinutes());
+        const base = `${yyyy}-${mm}-${dd} ${hh}:${min}`;
+        const withSec = opts?.includeSeconds ? `:${pad2(d.getUTCSeconds())}` : '';
+        return `${base}${withSec} UTC`;
+    }
+    catch {
+        return '—';
+    }
+}
+/**
+ * 相对时间：`刚刚` / `5 分钟前` / `2 小时前` / `3 天前`。
+ * 提取自 resume-manager.ts:formatRelativeTime。
+ * 非法或未来时间返回 '刚刚'。
+ */
+export function formatRelative(ts) {
+    try {
+        const d = parseTimestamp(ts);
+        if (isNaN(d.getTime()))
+            return '—';
+        const diff = Date.now() - d.getTime();
+        const mins = Math.floor(diff / 60000);
+        if (mins < 1)
+            return '刚刚';
+        if (mins < 60)
+            return `${mins} 分钟前`;
+        const hours = Math.floor(mins / 60);
+        if (hours < 24)
+            return `${hours} 小时前`;
+        return `${Math.floor(hours / 24)} 天前`;
+    }
+    catch {
+        return '—';
+    }
+}
+/**
+ * 本地日期串（用于文件名），`2026-05-27`（本地时区）。
+ * 省略参数时使用 Date.now()。
+ */
+export function formatLocalDateForFilename(ts) {
+    const d = ts !== undefined ? parseTimestamp(ts) : new Date();
+    if (isNaN(d.getTime()))
+        return formatLocalDateForFilename();
+    const yyyy = d.getFullYear();
+    const mm = pad2(d.getMonth() + 1);
+    const dd = pad2(d.getDate());
+    return `${yyyy}-${mm}-${dd}`;
+}
 //# sourceMappingURL=time.js.map

package/dist/core/utils/time.js.map

@@ -1 +1 @@
-{"version":3,"file":"time.js","sourceRoot":"","sources":["../../../src/core/utils/time.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,GAAW;IACjD,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,EAAE,IAAI,CAAC;IAChC,IAAI,EAAE,GAAG,KAAK;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,IAAI,EAAE,GAAG,OAAO;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACvD,OAAO,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AACzC,CAAC"}
+{"version":3,"file":"time.js","sourceRoot":"","sources":["../../../src/core/utils/time.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,8EAA8E;AAC9E,8DAA8D;AAC9D,6BAA6B;AAE7B,mCAAmC;AACnC,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC;AAChC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC;AACjC,gDAAgD;AAChD,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,GAAW;IACjD,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,EAAE,IAAI,CAAC;IAChC,IAAI,EAAE,GAAG,KAAK;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,IAAI,EAAE,GAAG,OAAO;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACvD,OAAO,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,EAAmB;IAChD,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAmB,EACnB,IAA0E;IAE1E,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,GAAG,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7B,IAAI,IAAI,EAAE,QAAQ;YAAE,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACpE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,OAAO,EAAE,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAmB,EACnB,IAAuD;IAEvD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,GAAG,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAChC,IAAI,IAAI,EAAE,QAAQ;YAAE,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,GAAG,IAAI,GAAG,OAAO,MAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,EAAmB;IAChD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,GAAG,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QACtC,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,IAAI,GAAG,EAAE;YAAE,OAAO,GAAG,IAAI,MAAM,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpC,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,GAAG,KAAK,MAAM,CAAC;QACtC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,EAAoB;IAC7D,MAAM,CAAC,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7D,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,0BAA0B,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7B,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC/B,CAAC"}

package/dist/daemon/agent-sync.d.ts

@@ -0,0 +1,24 @@
+export interface AgentSyncResult {
+    copied: number;
+    checked: number;
+    /** Files present in target but not in source list — preserved as-is. */
+    skipped_userOwned: number;
+}
+/**
+ * Sync built-in project-specific agent prompts from
+ * dist/daemon/templates/agents to ~/.claude/agents/.
+ *
+ * Strategy (identical to syncSkills):
+ * - Only files present in the source dir are candidates for write.
+ * - sha256 identical → skip; different → overwrite.
+ * - User-only agent files (not in source list) are never touched.
+ * - Target dir is created if absent (first install).
+ *
+ * Failures are logged as warnings and never thrown — daemon startup must
+ * not be blocked by sync failure.
+ */
+export declare function syncAgents(opts?: {
+    sourceDir?: string;
+    targetDir?: string;
+}): AgentSyncResult;
+//# sourceMappingURL=agent-sync.d.ts.map

package/dist/daemon/agent-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sync.d.ts","sourceRoot":"","sources":["../../src/daemon/agent-sync.ts"],"names":[],"mappings":"AA4CA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,CAgE7F"}

package/dist/daemon/agent-sync.js

@@ -0,0 +1,114 @@
+import { existsSync, readFileSync, copyFileSync, mkdirSync, readdirSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { homedir } from 'node:os';
+import { logger } from '../core/utils/logger.js';
+/**
+ * Sync project-specific agent prompts from packaged templates to
+ * `~/.claude/agents/`.
+ *
+ * Spec: docs/design/2026-05-27/1505-agent-template-sync-spec.md (Option B).
+ * Structurally a mirror of `src/daemon/skill-sync.ts` — same SHA-256 diff,
+ * same "user files outside the source list are untouched" policy.
+ *
+ * Why both `.claude/agents/` (tracked in the repo) AND
+ * `dist/daemon/templates/agents/`?
+ *   - The in-repo copy is what main thread / sub-agents actually load when
+ *     Claude Code is run from the forge checkout (Anthropic CLI reads
+ *     `<cwd>/.claude/agents/`).
+ *   - The template copy is what gets shipped via npm install — when a user
+ *     runs `claude-forge` in any other project, their `~/.claude/agents/`
+ *     needs the 8 project-specific agents bootstrapped, otherwise
+ *     `validateAgentEnum` throws on daemon startup. That's what this sync
+ *     covers.
+ *
+ * Files named `my-*.md` (or anything not in the source list) are preserved.
+ */
+const USER_AGENTS_DIR = join(homedir(), '.claude', 'agents');
+function sha256(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+// NOTE: delete semantics deliberately NOT applied here yet.
+// See docs/design/2026-05-29/1641-skill-sync-delete-semantics-spec.md
+// Open Q1 — promote to agent-sync only after skill-sync soaks.
+function getSourceAgentsDir() {
+    // Compiled: dist/daemon/agent-sync.js → dist/daemon/templates/agents
+    // Dev (vitest): src/daemon/agent-sync.ts → src/daemon/templates/agents
+    return join(dirname(fileURLToPath(import.meta.url)), 'templates', 'agents');
+}
+/**
+ * Sync built-in project-specific agent prompts from
+ * dist/daemon/templates/agents to ~/.claude/agents/.
+ *
+ * Strategy (identical to syncSkills):
+ * - Only files present in the source dir are candidates for write.
+ * - sha256 identical → skip; different → overwrite.
+ * - User-only agent files (not in source list) are never touched.
+ * - Target dir is created if absent (first install).
+ *
+ * Failures are logged as warnings and never thrown — daemon startup must
+ * not be blocked by sync failure.
+ */
+export function syncAgents(opts) {
+    const result = { copied: 0, checked: 0, skipped_userOwned: 0 };
+    const sourceDir = opts?.sourceDir ?? getSourceAgentsDir();
+    const targetDir = opts?.targetDir ?? USER_AGENTS_DIR;
+    if (!existsSync(sourceDir)) {
+        logger.warn(`[AgentSync] source dir not found at ${sourceDir}, skipping`);
+        return result;
+    }
+    // Ensure target dir exists (first install may not have ~/.claude/agents/)
+    try {
+        mkdirSync(targetDir, { recursive: true });
+    }
+    catch {
+        /* ignore — if it already exists mkdirSync is a no-op */
+    }
+    let sourceFiles;
+    try {
+        sourceFiles = readdirSync(sourceDir).filter((f) => f.endsWith('.md'));
+    }
+    catch (err) {
+        logger.warn(`[AgentSync] failed to list ${sourceDir}: ${err}`);
+        return result;
+    }
+    const sourceSet = new Set(sourceFiles);
+    for (const file of sourceFiles) {
+        result.checked++;
+        const src = join(sourceDir, file);
+        const dest = join(targetDir, file);
+        try {
+            const srcContent = readFileSync(src);
+            if (existsSync(dest)) {
+                const destContent = readFileSync(dest);
+                if (sha256(srcContent) === sha256(destContent)) {
+                    continue; // identical — no copy needed
+                }
+            }
+            copyFileSync(src, dest);
+            result.copied++;
+            logger.info(`[AgentSync] updated ${file}`);
+        }
+        catch (err) {
+            logger.warn(`[AgentSync] failed to sync ${file}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    // Count user-owned files that don't shadow a managed file. These are kept
+    // as-is (e.g. user's `my-planner.md` overrides / supplements).
+    try {
+        const targetFiles = readdirSync(targetDir).filter((f) => f.endsWith('.md'));
+        for (const f of targetFiles) {
+            if (!sourceSet.has(f))
+                result.skipped_userOwned++;
+        }
+    }
+    catch {
+        /* target dir creation may have failed silently above; ignore */
+    }
+    if (result.copied > 0) {
+        logger.info(`[AgentSync] synced ${result.copied}/${result.checked} agent files (skipped_userOwned=${result.skipped_userOwned})`);
+    }
+    return result;
+}
+//# sourceMappingURL=agent-sync.js.map

package/dist/daemon/agent-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sync.js","sourceRoot":"","sources":["../../src/daemon/agent-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAE7D,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,4DAA4D;AAC5D,sEAAsE;AACtE,+DAA+D;AAC/D,SAAS,kBAAkB;IACzB,qEAAqE;IACrE,uEAAuE;IACvE,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAC9E,CAAC;AASD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CAAC,IAAiD;IAC1E,MAAM,MAAM,GAAoB,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,kBAAkB,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,eAAe,CAAC;IAErD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,uCAAuC,SAAS,YAAY,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,IAAI,CAAC;QACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IAED,IAAI,WAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,8BAA8B,SAAS,KAAK,GAAG,EAAE,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/C,SAAS,CAAC,6BAA6B;gBACzC,CAAC;YACH,CAAC;YAED,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxB,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,+DAA+D;IAC/D,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,mCAAmC,MAAM,CAAC,iBAAiB,GAAG,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/daemon/config-store.d.ts

@@ -0,0 +1,55 @@
+/**
+ * ConfigStore — runtime feature-flag KV (v9.x Phase 0)
+ *
+ * Wraps the `forge_config` SQLite table so handlers / services can probe a
+ * flag without recompilation. Used by Phases 1-9 of the master roadmap
+ * (PreToolUse interception / feedback loop / workflow recommender / agent
+ * writeback ...). Each phase ships behind its own flag, default OFF.
+ *
+ * MVP1 (KB injection) is already shipped, so `kb_inject.enabled` defaults to
+ * `'true'`. All other Phase-N flags default `'false'` and are flipped to
+ * `'true'` by whoever rolls out that phase (CLI `cf config set ...` or
+ * Web tuning UI in Phase 8).
+ *
+ * Seeded values are inserted only if the key is absent — user edits are
+ * preserved across daemon restarts.
+ */
+import type { SQLiteStorage, ForgeConfigRow } from '../core/storage/sqlite.js';
+/**
+ * Default feature flags seeded on daemon startup.
+ *
+ * Add new flags here as later phases land; never delete existing keys
+ * (downstream tooling may probe them and would silently get the default-false
+ * behaviour, which is the wrong silent contract).
+ */
+export declare const DEFAULT_FLAGS: Readonly<Record<string, string>>;
+export declare class ConfigStore {
+    private storage;
+    constructor(storage: SQLiteStorage);
+    /**
+     * Returns `true` only when the stored value is the literal string `'true'`.
+     * Missing keys → `false` (fail-safe default). Any other value → `false`.
+     *
+     * Callers that need richer semantics should use `get()` directly.
+     */
+    isEnabled(key: string): boolean;
+    /** Raw read. `undefined` when the key is absent. */
+    get(key: string): string | undefined;
+    /** Upsert. Values are stored verbatim — coerce to string at the call site. */
+    set(key: string, value: string): void;
+    /**
+     * Delete a key. Used by Phase D `reviveInterceptIfStale` to clean up the
+     * auto-disabled audit keys after the hysteresis window expires. Idempotent.
+     */
+    delete(key: string): boolean;
+    /** Snapshot of every row, sorted by key for deterministic CLI output. */
+    list(): ForgeConfigRow[];
+    /**
+     * Seed `DEFAULT_FLAGS` (or a caller-supplied set) into the table, skipping
+     * keys that already have a value. Safe to call on every daemon start.
+     *
+     * Returns the count of newly inserted keys (0 on subsequent restarts).
+     */
+    seedDefaults(defaults?: Readonly<Record<string, string>>): number;
+}
+//# sourceMappingURL=config-store.d.ts.map

package/dist/daemon/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/daemon/config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE/E;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkFzD,CAAC;AAEH,qBAAa,WAAW;IACV,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAE1C;;;;;OAKG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI/B,oDAAoD;IACpD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIpC,8EAA8E;IAC9E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIrC;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B,yEAAyE;IACzE,IAAI,IAAI,cAAc,EAAE;IAIxB;;;;;OAKG;IACH,YAAY,CAAC,QAAQ,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAiB,GAAG,MAAM;CASjF"}

package/dist/daemon/config-store.js

@@ -0,0 +1,146 @@
+/**
+ * ConfigStore — runtime feature-flag KV (v9.x Phase 0)
+ *
+ * Wraps the `forge_config` SQLite table so handlers / services can probe a
+ * flag without recompilation. Used by Phases 1-9 of the master roadmap
+ * (PreToolUse interception / feedback loop / workflow recommender / agent
+ * writeback ...). Each phase ships behind its own flag, default OFF.
+ *
+ * MVP1 (KB injection) is already shipped, so `kb_inject.enabled` defaults to
+ * `'true'`. All other Phase-N flags default `'false'` and are flipped to
+ * `'true'` by whoever rolls out that phase (CLI `cf config set ...` or
+ * Web tuning UI in Phase 8).
+ *
+ * Seeded values are inserted only if the key is absent — user edits are
+ * preserved across daemon restarts.
+ */
+/**
+ * Default feature flags seeded on daemon startup.
+ *
+ * Add new flags here as later phases land; never delete existing keys
+ * (downstream tooling may probe them and would silently get the default-false
+ * behaviour, which is the wrong silent contract).
+ */
+export const DEFAULT_FLAGS = Object.freeze({
+    // MVP1 shipped (commit 4a13e869) — default on.
+    'kb_inject.enabled': 'true',
+    // Phase 1: PreToolUseHandler + rules registry + tool_intercepts table.
+    // Phase 2c: default flipped 'false' → 'true' once the 4 safety nets landed
+    // (whitelist / bypass file / rollback / observation_until). Existing user
+    // installs keep whatever they had via seedDefaults' if-missing semantics;
+    // only fresh installs see the strict default. To opt out:
+    //   cf config set pre_tool_intercept.enabled false
+    'pre_tool_intercept.enabled': 'true',
+    // 8-in-1 Phase D (2026-05-27): per-project intercept disable. Comma-
+    // separated list of absolute project path prefixes; any project whose path
+    // starts with one of these strings has `PreToolUseHandler` early-exit
+    // BEFORE the whitelist check (= zero rule writes, zero intercepts).
+    //
+    // Default empty. Users opt-in per project via:
+    //   cf config set pre_tool_intercept.disabled_project_prefixes /Users/me/docs-only-repo
+    // Multi-project:
+    //   cf config set pre_tool_intercept.disabled_project_prefixes /Users/me/a,/Users/me/b
+    //
+    // Use case: docs-only / tutorial / scratch repos where intercept noise
+    // outweighs benefit. See spec docs/design/2026-05-27/1006-intercept-
+    // enforcement-fix-spec.md §D P1-5.
+    'pre_tool_intercept.disabled_project_prefixes': '',
+    // Phase 2/8: rule-tuning feedback aggregator.
+    'feedback_loop.enabled': 'false',
+    // Phase 6: agent-experience KB writeback (bidirectional flow).
+    'agent_writeback.enabled': 'false',
+    // Phase 2a (v9.x): LLM intent classifier + 6-layer fallback stack.
+    // ON by default — the fallback stack is safe even without an API key,
+    // and dashboards / Sub-2 spec generation depend on `IntentClassification`
+    // rows being present in the `injections` table.
+    'intent_engine.enabled': 'true',
+    // Phase 2a L5 — minimum number of prior intents required to vote.
+    'intent_fallback.l5_history_threshold': '3',
+    // Phase 2b (v9.x): auto-spec generation. DISABLED 2026-05-27 (Spec 2 § A).
+    // Acceptance rate 0.9% (1/109 over 7d); LLM-cost / disk-clutter outweighs
+    // benefit. Code (SpecGate.tryAutoGenerate / SpecGenerator / SpecApproval)
+    // is preserved for future product-form revival. Reversible via:
+    //   cf config set auto_spec_generation.enabled true
+    // Existing installs whose `forge_config` row already holds `'true'` are
+    // NOT auto-mutated (seedDefaults is if-missing); see Spec 2 § A changelog.
+    'auto_spec_generation.enabled': 'false',
+    // Phase 2 (v9.x, 2026-05-26): user-question default BMAD gate (hard deny
+    // layer). Default OFF — flip via:
+    //   cf config set question_default_bmad.enforce true
+    // Reassess at 2026-06-02 (target: ≥80% would-have-benefited true-positive
+    // labelling on 20-row sample). Spec:
+    //   docs/design/2026-05-26/1707-user-question-default-bmad-spec.md
+    'question_default_bmad.enforce': 'false',
+    // db-size optimization (2026-05-26): two-tier TTL for `events`.
+    //   - events.warm_ttl_days  → after N days, `tool_input` set to NULL
+    //   - events.cold_ttl_days  → after M days, whole row DELETEd
+    //   - events.sweep_interval_hours → cadence of the maintenance interval
+    // See src/daemon/services/event-ttl-sweep.ts for semantics. Values are
+    // integer strings (callers coerce via Number()).
+    'events.warm_ttl_days': '7',
+    'events.cold_ttl_days': '30',
+    'events.sweep_interval_hours': '6',
+    // codegraph Phase 3 (decision 95df9d97): cadence (minutes) of the daemon's
+    // incremental call-graph sync. See src/daemon/services/codegraph-sync.ts.
+    // Integer string; coerced via Number(). 0/invalid → default (15m).
+    'codegraph.sync_interval_minutes': '15',
+    // f47c2c90 (2026-06-17): inline single-file no-spawn violation 口径补强
+    // (warn-level, default OFF, gray-rollout to observe recall). The
+    // `inline-edit-no-spawn` / `inline-write-no-spawn` rules cover the blind spot
+    // where the main thread edits exactly 1 file without spawning an agent (the
+    // ==1 segment, mutually exclusive with the ==2 no-agent / ≥3 hard rules).
+    // flip via: cf config set inline_edit_no_spawn.enabled true
+    // ONLY widens detection 口径 — NEVER deny (CLAUDE.md mechanical-block layer
+    // removed; daemon only records, never hard-blocks the main thread).
+    'inline_edit_no_spawn.enabled': 'false',
+});
+export class ConfigStore {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Returns `true` only when the stored value is the literal string `'true'`.
+     * Missing keys → `false` (fail-safe default). Any other value → `false`.
+     *
+     * Callers that need richer semantics should use `get()` directly.
+     */
+    isEnabled(key) {
+        return this.storage.readConfig(key) === 'true';
+    }
+    /** Raw read. `undefined` when the key is absent. */
+    get(key) {
+        return this.storage.readConfig(key);
+    }
+    /** Upsert. Values are stored verbatim — coerce to string at the call site. */
+    set(key, value) {
+        this.storage.writeConfig(key, value);
+    }
+    /**
+     * Delete a key. Used by Phase D `reviveInterceptIfStale` to clean up the
+     * auto-disabled audit keys after the hysteresis window expires. Idempotent.
+     */
+    delete(key) {
+        return this.storage.deleteConfig(key);
+    }
+    /** Snapshot of every row, sorted by key for deterministic CLI output. */
+    list() {
+        return this.storage.listConfig();
+    }
+    /**
+     * Seed `DEFAULT_FLAGS` (or a caller-supplied set) into the table, skipping
+     * keys that already have a value. Safe to call on every daemon start.
+     *
+     * Returns the count of newly inserted keys (0 on subsequent restarts).
+     */
+    seedDefaults(defaults = DEFAULT_FLAGS) {
+        let inserted = 0;
+        for (const [key, value] of Object.entries(defaults)) {
+            if (this.storage.writeConfigIfMissing(key, value)) {
+                inserted += 1;
+            }
+        }
+        return inserted;
+    }
+}
+//# sourceMappingURL=config-store.js.map

package/dist/daemon/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../src/daemon/config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC3E,+CAA+C;IAC/C,mBAAmB,EAAE,MAAM;IAE3B,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,0DAA0D;IAC1D,mDAAmD;IACnD,4BAA4B,EAAE,MAAM;IAEpC,qEAAqE;IACrE,2EAA2E;IAC3E,sEAAsE;IACtE,oEAAoE;IACpE,EAAE;IACF,+CAA+C;IAC/C,wFAAwF;IACxF,iBAAiB;IACjB,uFAAuF;IACvF,EAAE;IACF,uEAAuE;IACvE,qEAAqE;IACrE,mCAAmC;IACnC,8CAA8C,EAAE,EAAE;IAElD,8CAA8C;IAC9C,uBAAuB,EAAE,OAAO;IAEhC,+DAA+D;IAC/D,yBAAyB,EAAE,OAAO;IAElC,mEAAmE;IACnE,sEAAsE;IACtE,0EAA0E;IAC1E,gDAAgD;IAChD,uBAAuB,EAAE,MAAM;IAC/B,kEAAkE;IAClE,sCAAsC,EAAE,GAAG;IAE3C,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,gEAAgE;IAChE,oDAAoD;IACpD,wEAAwE;IACxE,2EAA2E;IAC3E,8BAA8B,EAAE,OAAO;IAEvC,yEAAyE;IACzE,kCAAkC;IAClC,qDAAqD;IACrD,0EAA0E;IAC1E,qCAAqC;IACrC,mEAAmE;IACnE,+BAA+B,EAAE,OAAO;IAExC,gEAAgE;IAChE,qEAAqE;IACrE,8DAA8D;IAC9D,wEAAwE;IACxE,uEAAuE;IACvE,iDAAiD;IACjD,sBAAsB,EAAE,GAAG;IAC3B,sBAAsB,EAAE,IAAI;IAC5B,6BAA6B,EAAE,GAAG;IAElC,2EAA2E;IAC3E,0EAA0E;IAC1E,mEAAmE;IACnE,iCAAiC,EAAE,IAAI;IAEvC,oEAAoE;IACpE,iEAAiE;IACjE,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,4DAA4D;IAC5D,0EAA0E;IAC1E,oEAAoE;IACpE,8BAA8B,EAAE,OAAO;CACxC,CAAC,CAAC;AAEH,MAAM,OAAO,WAAW;IACF;IAApB,YAAoB,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAE9C;;;;;OAKG;IACH,SAAS,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC;IACjD,CAAC;IAED,oDAAoD;IACpD,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,8EAA8E;IAC9E,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,yEAAyE;IACzE,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,WAA6C,aAAa;QACrE,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBAClD,QAAQ,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/daemon/event-parser.d.ts

@@ -1,4 +1,26 @@
 import type { ForgeEvent } from '../core/types.js';
+/**
+ * Daemon-boundary input limits (audit F-medium #2, 2026-05-26).
+ *
+ * These caps protect the daemon against malicious / buggy hook payloads. They
+ * sit BELOW the socket-level `MAX_BUFFER_SIZE` (512 KB in server.ts) so that
+ * the parser rejects oversized payloads before any downstream consumer
+ * (storage / handlers / rules) has to defend itself.
+ *
+ *   • `MAX_RAW_BYTES`         — hard ceiling on the whole JSON envelope.
+ *   • `MAX_SESSION_ID_LEN`    — UUIDs are 36; Claude Code in practice emits
+ *                               36-char IDs but we leave generous headroom.
+ *   • `MAX_TOOL_INPUT_BYTES`  — applies to the JSON-stringified tool_input.
+ *                               Large Edit/Write payloads are legitimate but
+ *                               a single hook payload over 256 KB indicates
+ *                               either a bug or abuse.
+ *   • `MAX_PROMPT_CHARS`      — caps `prompt` / `command` strings inside
+ *                               tool_input. Real prompts are well below this.
+ */
+export declare const MAX_RAW_BYTES: number;
+export declare const MAX_SESSION_ID_LEN = 128;
+export declare const MAX_TOOL_INPUT_BYTES: number;
+export declare const MAX_PROMPT_CHARS: number;
 export declare class EventParser {
     parse(raw: string): ForgeEvent;
 }

package/dist/daemon/event-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-parser.d.ts","sourceRoot":"","sources":["../../src/daemon/event-parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,kBAAkB,CAAC;AAgBpE,qBAAa,WAAW;IACtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;CAiB/B"}
+{"version":3,"file":"event-parser.d.ts","sourceRoot":"","sources":["../../src/daemon/event-parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,kBAAkB,CAAC;AAGpE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,QAAa,CAAC;AACxC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,oBAAoB,QAAa,CAAC;AAC/C,eAAO,MAAM,gBAAgB,QAAa,CAAC;AAqB3C,qBAAa,WAAW;IACtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;CAgD/B"}

package/dist/daemon/event-parser.js

@@ -1,21 +1,71 @@
 import { z } from 'zod';
 import { randomUUID } from 'crypto';
+/**
+ * Daemon-boundary input limits (audit F-medium #2, 2026-05-26).
+ *
+ * These caps protect the daemon against malicious / buggy hook payloads. They
+ * sit BELOW the socket-level `MAX_BUFFER_SIZE` (512 KB in server.ts) so that
+ * the parser rejects oversized payloads before any downstream consumer
+ * (storage / handlers / rules) has to defend itself.
+ *
+ *   • `MAX_RAW_BYTES`         — hard ceiling on the whole JSON envelope.
+ *   • `MAX_SESSION_ID_LEN`    — UUIDs are 36; Claude Code in practice emits
+ *                               36-char IDs but we leave generous headroom.
+ *   • `MAX_TOOL_INPUT_BYTES`  — applies to the JSON-stringified tool_input.
+ *                               Large Edit/Write payloads are legitimate but
+ *                               a single hook payload over 256 KB indicates
+ *                               either a bug or abuse.
+ *   • `MAX_PROMPT_CHARS`      — caps `prompt` / `command` strings inside
+ *                               tool_input. Real prompts are well below this.
+ */
+export const MAX_RAW_BYTES = 256 * 1024; // 256 KB envelope (vs 512 KB socket buffer)
+export const MAX_SESSION_ID_LEN = 128;
+export const MAX_TOOL_INPUT_BYTES = 256 * 1024; // 256 KB serialized tool_input
+export const MAX_PROMPT_CHARS = 100 * 1024; // 100 K chars for command/prompt strings
 const RawHookEventSchema = z.object({
     hook_type: z.enum(['PreToolUse', 'PostToolUse', 'Notification', 'Stop', 'UserPromptSubmit']),
-    timestamp: z.string(),
-    session_id: z.string(),
-    project_path: z.string(),
+    // ISO 8601 (with optional fractional seconds + Z/offset). Hook scripts emit
+    // `date -u +"%Y-%m-%dT%H:%M:%S.000Z"` which matches.
+    timestamp: z.string().datetime({ offset: true }),
+    session_id: z.string().min(1).max(MAX_SESSION_ID_LEN),
+    project_path: z.string().min(1),
     tool_name: z.string().optional(),
     tool_input: z.record(z.string(), z.unknown()).optional(),
     tool_output: z.record(z.string(), z.unknown()).optional(),
     user_prompt: z.string().optional(),
     ai_response: z.string().optional(),
     event_id: z.string().uuid().optional(),
+    // In-flight only (spec 1446): Stop hook passes the session transcript path so
+    // the daemon can backfill ai_response for violation windows. NOT persisted to
+    // the events table — forwarded on the in-memory event object only.
+    transcript_path: z.string().optional(),
 });
 export class EventParser {
     parse(raw) {
+        // F-medium #2: cap envelope size BEFORE JSON.parse so a malicious 500 KB
+        // payload doesn't allocate megabytes of intermediate strings.
+        if (Buffer.byteLength(raw, 'utf8') > MAX_RAW_BYTES) {
+            throw new Error(`Event payload exceeds ${MAX_RAW_BYTES} byte cap (received ${Buffer.byteLength(raw, 'utf8')} bytes)`);
+        }
         const json = JSON.parse(raw);
         const validated = RawHookEventSchema.parse(json);
+        // F-medium #2: size-cap tool_input AFTER schema parse — cheaper to fail
+        // here than to forward a 1 MB blob into storage.
+        if (validated.tool_input !== undefined) {
+            const serialized = JSON.stringify(validated.tool_input);
+            if (serialized.length > MAX_TOOL_INPUT_BYTES) {
+                throw new Error(`tool_input exceeds ${MAX_TOOL_INPUT_BYTES} byte cap (received ${serialized.length} bytes)`);
+            }
+            // Cap individual string fields that downstream services scan/store.
+            // We reject (not silently truncate) so the daemon doesn't accept
+            // corrupted-looking data — caller's hook script should fix the source.
+            for (const key of ['command', 'prompt', 'new_string', 'old_string', 'content']) {
+                const v = validated.tool_input[key];
+                if (typeof v === 'string' && v.length > MAX_PROMPT_CHARS) {
+                    throw new Error(`tool_input.${key} exceeds ${MAX_PROMPT_CHARS} char cap (received ${v.length})`);
+                }
+            }
+        }
         return {
             event_id: validated.event_id ?? randomUUID(),
             session_id: validated.session_id,
@@ -27,6 +77,7 @@ export class EventParser {
             tool_output: validated.tool_output,
             user_prompt: validated.user_prompt,
             ai_response: validated.ai_response,
+            transcript_path: validated.transcript_path,
         };
     }
 }