@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/daemon/event-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-parser.js","sourceRoot":"","sources":["../../src/daemon/event-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,GAAW;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjD,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,UAAU,EAAE;YAC5C,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAyC;YAC/D,WAAW,EAAE,SAAS,CAAC,WAAkD;YACzE,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"event-parser.js","sourceRoot":"","sources":["../../src/daemon/event-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,CAAY,4CAA4C;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAK,+BAA+B;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAS,yCAAyC;AAE7F,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC5F,4EAA4E;IAC5E,qDAAqD;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACtC,8EAA8E;IAC9E,8EAA8E;IAC9E,mEAAmE;IACnE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,GAAW;QACf,yEAAyE;QACzE,8DAA8D;QAC9D,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,aAAa,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,yBAAyB,aAAa,uBAAuB,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CACrG,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjD,wEAAwE;QACxE,iDAAiD;QACjD,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,UAAU,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACb,sBAAsB,oBAAoB,uBAAuB,UAAU,CAAC,MAAM,SAAS,CAC5F,CAAC;YACJ,CAAC;YACD,oEAAoE;YACpE,iEAAiE;YACjE,uEAAuE;YACvE,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,CAAU,EAAE,CAAC;gBACxF,MAAM,CAAC,GAAI,SAAS,CAAC,UAAsC,CAAC,GAAG,CAAC,CAAC;gBACjE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBACzD,MAAM,IAAI,KAAK,CACb,cAAc,GAAG,YAAY,gBAAgB,uBAAuB,CAAC,CAAC,MAAM,GAAG,CAChF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,UAAU,EAAE;YAC5C,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAyC;YAC/D,WAAW,EAAE,SAAS,CAAC,WAAkD;YACzE,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C,CAAC;IACJ,CAAC;CACF"}

package/dist/daemon/handlers/history-exporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"history-exporter.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/history-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAKlE,qBAAa,eAAe;IACd,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAEpC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAgC9C,OAAO,CAAC,aAAa;CAkEtB"}
+{"version":3,"file":"history-exporter.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/history-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAKlE,qBAAa,eAAe;IACd,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAEpC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA+B9C,OAAO,CAAC,aAAa;CAoEtB"}

package/dist/daemon/handlers/history-exporter.js

@@ -8,7 +8,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { logger } from '../../core/utils/logger.js';
 import { truncateSessionId } from '../../core/utils/session.js';
-import { normalizeTimestamp } from '../../core/utils/time.js';
+import { formatLocalDisplay, formatLocalDateForFilename } from '../../core/utils/time.js';
 export class HistoryExporter {
     storage;
     constructor(storage) {
@@ -29,8 +29,7 @@ export class HistoryExporter {
             });
             if (events.length === 0)
                 return;
-            const now = new Date();
-            const dateStr = now.toISOString().slice(0, 10);
+            const dateStr = formatLocalDateForFilename(event.timestamp);
             const shortSession = truncateSessionId(session_id);
             const filePath = path.join(historyDir, `${dateStr}-${shortSession}.md`);
             const content = this.buildMarkdown(events, session_id, project_path);
@@ -43,8 +42,10 @@ export class HistoryExporter {
     }
     buildMarkdown(events, sessionId, projectPath) {
         const lines = [];
-        const startTime = normalizeTimestamp(events[0]?.timestamp ?? new Date().toISOString());
-        const endTime = normalizeTimestamp(events[events.length - 1]?.timestamp ?? startTime);
+        const startRaw = events[0]?.timestamp ?? new Date().toISOString();
+        const endRaw = events[events.length - 1]?.timestamp ?? startRaw;
+        const startTime = formatLocalDisplay(startRaw, { tzSuffix: 'CST' });
+        const endTime = formatLocalDisplay(endRaw, { tzSuffix: 'CST' });
         lines.push(`# 会话记录 ${truncateSessionId(sessionId)}`);
         lines.push('');
         lines.push(`- **时间**: ${startTime} → ${endTime}`);
@@ -57,7 +58,7 @@ export class HistoryExporter {
             lines.push('## 用户指令');
             lines.push('');
             for (const p of prompts) {
-                const time = new Date(p.timestamp).toLocaleTimeString();
+                const time = formatLocalDisplay(p.timestamp, { tzSuffix: '' });
                 const text = p.user_prompt.slice(0, 200);
                 lines.push(`- **${time}**: ${text}`);
             }
@@ -79,7 +80,7 @@ export class HistoryExporter {
             lines.push('### 时间线');
             lines.push('');
             for (const t of toolCalls.slice(-30)) {
-                const time = new Date(t.timestamp).toLocaleTimeString();
+                const time = formatLocalDisplay(t.timestamp, { tzSuffix: '' });
                 const input = t.tool_input;
                 const filePath = input?.file_path ?? input?.command ?? '';
                 const summary = typeof filePath === 'string' ? filePath.slice(0, 80) : '';
@@ -88,7 +89,7 @@ export class HistoryExporter {
             lines.push('');
         }
         lines.push('---');
-        lines.push(`_生成时间: ${new Date().toISOString()}_`);
+        lines.push(`_生成时间: ${formatLocalDisplay(Date.now())}_`);
         lines.push('');
         return lines.join('\n');
     }

package/dist/daemon/handlers/history-exporter.js.map

@@ -1 +1 @@
-{"version":3,"file":"history-exporter.js","sourceRoot":"","sources":["../../../src/daemon/handlers/history-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,MAAM,CAAC,KAAiB;QAC5B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;QAC3C,IAAI,CAAC,YAAY;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,UAAU;gBACV,YAAY;aACb,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEhC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,UAAU,EACV,GAAG,OAAO,IAAI,YAAY,KAAK,CAChC,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACrE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,MAAoB,EACpB,SAAiB,EACjB,WAAmB;QAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,IAAI,SAAS,CAAC,CAAC;QAEtF,KAAK,CAAC,IAAI,CAAC,UAAU,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,IAAI,CAAC,CAAC,WAAW,CAC3D,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAI,CAAC,CAAC,WAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,qBAAqB;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,IAAI,CAAC,CAAC,SAAS,CACpD,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC;gBAC3B,MAAM,QAAQ,GAAG,KAAK,EAAE,SAAS,IAAI,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;gBAC1D,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"history-exporter.js","sourceRoot":"","sources":["../../../src/daemon/handlers/history-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE1F,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,MAAM,CAAC,KAAiB;QAC5B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;QAC3C,IAAI,CAAC,YAAY;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,UAAU;gBACV,YAAY;aACb,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEhC,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,UAAU,EACV,GAAG,OAAO,IAAI,YAAY,KAAK,CAChC,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACrE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,MAAoB,EACpB,SAAiB,EACjB,WAAmB;QAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,IAAI,QAAQ,CAAC;QAChE,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhE,KAAK,CAAC,IAAI,CAAC,UAAU,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,IAAI,CAAC,CAAC,WAAW,CAC3D,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAI,CAAC,CAAC,WAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,qBAAqB;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,IAAI,CAAC,CAAC,SAAS,CACpD,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC/D,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC;gBAC3B,MAAM,QAAQ,GAAG,KAAK,EAAE,SAAS,IAAI,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;gBAC1D,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/daemon/handlers/post-tool-use.d.ts

@@ -1,15 +1,77 @@
 /**
  * PostToolUseHandler — handles PostToolUse hook
  *
- * Simplified: only tracks token usage if available.
- * Also observes Agent tool calls to update routing_events.
+ * Observes Agent tool calls to update routing_events.
  */
 import type { PostToolUseEvent, HookResult } from '../../core/types.js';
 import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+import type { ConfigStore } from '../config-store.js';
+/** Phase 6 feature flag — default OFF. */
+export declare const AGENT_WRITEBACK_FLAG = "agent_writeback.enabled";
 export declare class PostToolUseHandler {
     private storage;
-    private tokenTracker;
-    constructor(storage?: SQLiteStorage | null);
+    private configStore;
+    constructor(storage?: SQLiteStorage | null, configStore?: ConfigStore | null);
     handle(event: PostToolUseEvent): Promise<HookResult>;
+    /**
+     * LOOP HINT adoption back-fill (decision e7d13697, Option C). When the main
+     * thread (or an agent) actually runs `cf loop run` in this session, stamp
+     * every not-yet-stamped `[LOOP HINT]` injection row of the session with
+     * `adopted_at = now`. This is the write side of the "建议的 loop 被采纳没"
+     * telemetry — the OQ5 hard requirement that lets us later judge
+     * keep-vs-remove. Read side is a single SQL (countLoopHintAdoption).
+     *
+     * The daemon is ONLY observing here — it never launches `cf loop run` itself
+     * (advisory-only invariant). Silently swallows errors — observability,
+     * never a blocker.
+     */
+    private maybeMarkLoopHintAdoption;
+    /**
+     * KB adoption back-fill (decision 148f7a0a). When the main thread (or an
+     * agent in the same session) actively calls a KB MCP tool
+     * (`mcp__claude-forge__knowledge*`), stamp every not-yet-stamped KB
+     * injection row of this session with `adopted_at = now`. This is the
+     * write side of the "注入的 KB 被用了没" telemetry — read side is a single
+     * SQL over injections (adopted/total, source_handler LIKE '%:kb').
+     *
+     * Silently swallows errors — telemetry is observability, never a blocker.
+     */
+    private maybeMarkKbAdoption;
+    /**
+     * audit F4 back-fill (KPI relax: dry_run also back-filled). Pipeline:
+     *   1. Query last 30s of `deny` + `dry_run` intercepts for this session.
+     *      dry_run rows are the "would-have-been-denied" rehearsal that fires
+     *      when `pre_tool_intercept.enabled=false`. Including them lets C4
+     *      compute a meaningful obeyed-ratio BEFORE the flag is flipped on —
+     *      otherwise C4 stays 0 forever in dry_run mode.
+     *   2. If any candidate matches `event.tool_name` → the main loop re-invoked
+     *      the SAME tool despite the deny/dry_run hint → mark 'override'.
+     *   3. Else, the main loop switched tools (most commonly Bash deny → Read /
+     *      Grep / Agent) → mark all candidates 'obeyed'.
+     *
+     * For dry_run rows specifically the verdict is a *pseudo-outcome* — the
+     * rule didn't actually enforce anything, but the main loop's reaction in
+     * the same 30s window still proxies "would they have obeyed?". UI surfaces
+     * this distinction in the C4 tooltip; the SQL aggregation treats both the
+     * same.
+     *
+     * Silently swallows errors — back-fill is observability, never a blocker.
+     * Multiple candidates within the window all get the same verdict; that's
+     * acceptable because the AI's reaction is a single response either way.
+     */
+    private maybeMarkInterceptOutcome;
+    /**
+     * Phase 6 writeback. Pipeline:
+     *   1. Flag gate (`agent_writeback.enabled`). Default OFF → silent skip.
+     *   2. Path filter — only changelog paths under `docs/implementation/`
+     *      (matches both the legacy `*-changelog-*.md` and the post-2026-05-26
+     *      datedir layout `YYYY-MM-DD/HHMM-*-changelog.md`).
+     *   3. Run `extractExperience` on the resolved absolute path.
+     *   4. Append each extracted entry to `<projectRoot>/.forge-knowledge/
+     *      agents-experience/<topic>.md`.
+     *
+     * All errors are swallowed (warn-level log) — writeback is best-effort.
+     */
+    private maybeWriteExperience;
 }
 //# sourceMappingURL=post-tool-use.d.ts.map

package/dist/daemon/handlers/post-tool-use.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"post-tool-use.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/post-tool-use.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAKlE,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,OAAO;IAHjB,OAAO,CAAC,YAAY,CAA6B;gBAGvC,OAAO,GAAE,aAAa,GAAG,IAAW;IAOxC,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;CA6B3D"}
+{"version":3,"file":"post-tool-use.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/post-tool-use.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA4BtD,0CAA0C;AAC1C,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAa9D,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;gBADX,OAAO,GAAE,aAAa,GAAG,IAAW,EACpC,WAAW,GAAE,WAAW,GAAG,IAAW;IAG1C,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAqD1D;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,yBAAyB;IAmBjC;;;;;;;;;OASG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,yBAAyB;IA4BjC;;;;;;;;;;;OAWG;YACW,oBAAoB;CAoCnC"}

package/dist/daemon/handlers/post-tool-use.js

@@ -1,20 +1,51 @@
 /**
  * PostToolUseHandler — handles PostToolUse hook
  *
- * Simplified: only tracks token usage if available.
- * Also observes Agent tool calls to update routing_events.
+ * Observes Agent tool calls to update routing_events.
  */
+import path from 'node:path';
 import { logger } from '../../core/utils/logger.js';
-import { TokenTracker } from '../../core/utils/token-tracker.js';
 import { getSubagentType } from '../../core/event-fields.js';
+import { appendToExperienceFile, extractExperience, } from '../../core/insights/experience-extractor.js';
+/**
+ * audit F4: window (ms) within which a PostToolUse may back-fill the outcome
+ * of a prior PreToolUse `deny`. 30s matches a typical "agent retries with the
+ * hinted approach" reaction time without overlapping into the next prompt.
+ */
+const INTERCEPT_OUTCOME_WINDOW_MS = 30 * 1000;
+/**
+ * KB 采纳 telemetry（decision 148f7a0a）：以该前缀开头的 tool_name 视为
+ * 「主动 KB 调用」，触发同会话 KB 注入行的 adopted_at 盖章。覆盖
+ * mcp__claude-forge__knowledge_query / knowledge_fetch 等全部 KB MCP 工具。
+ */
+const KB_MCP_TOOL_PREFIX = 'mcp__claude-forge__knowledge';
+/**
+ * LOOP HINT 采纳 telemetry（decision e7d13697, Option C）：本会话实际运行
+ * `cf loop run` = 主线程采纳了先前 mint 的 `[LOOP HINT]` 建议。观察 Bash 工具
+ * 调用、命令含 `loop run` 时盖章同会话的 loop-hint 注入行（镜像 KB 采纳）。
+ * `cf loop run` / `loop run --interactive` / 自定义 cf 别名都命中（不强求 `cf`
+ * 前缀，避免漏判）。
+ */
+const LOOP_RUN_COMMAND_RE = /\bloop\s+run\b/;
+/** Phase 6 feature flag — default OFF. */
+export const AGENT_WRITEBACK_FLAG = 'agent_writeback.enabled';
+/**
+ * Match any changelog path under `docs/implementation/`.
+ *
+ * Two layouts supported (the 2026-05-26 naming refactor introduced the second):
+ *   • legacy flat:   docs/implementation/<stem>-changelog-<ts>.md
+ *   • new datedir:   docs/implementation/YYYY-MM-DD/HHMM-<stem>-changelog.md
+ *
+ * The `.*changelog.*` middle portion is intentionally loose (any path under
+ * `docs/implementation/` that has the word `changelog` in the basename).
+ */
+const CHANGELOG_PATH_PATTERN = /docs\/implementation\/.*changelog[^/]*\.md$/;
 export class PostToolUseHandler {
     storage;
-    tokenTracker = null;
-    constructor(storage = null) {
+    configStore;
+    constructor(storage = null, configStore = null) {
         this.storage = storage;
-        if (storage) {
-            this.tokenTracker = new TokenTracker(storage);
-        }
+        this.configStore = configStore;
     }
     async handle(event) {
         // Observe Agent tool calls and update routing_events
@@ -42,7 +73,189 @@ export class PostToolUseHandler {
                 logger.debug(`[PostToolUse] Failed to update routing_event: ${err}`);
             }
         }
+        // Phase 6: agent-experience writeback on changelog Write/Edit.
+        // Fire-and-forget — writeback is observability, never a request-blocker.
+        if (event.tool_name === 'Write' || event.tool_name === 'Edit') {
+            void this.maybeWriteExperience(event);
+        }
+        // audit F4: back-fill outcome on any prior 'deny' intercept for this tool.
+        if (this.storage) {
+            this.maybeMarkInterceptOutcome(event);
+        }
+        // KB 采纳 telemetry（decision 148f7a0a）：主动 KB MCP 调用 = 本会话先前
+        // 注入的 KB 被「采纳」的代理信号。盖章同会话所有未标记的 ':kb' 注入行。
+        if (this.storage && event.tool_name.startsWith(KB_MCP_TOOL_PREFIX)) {
+            this.maybeMarkKbAdoption(event);
+        }
+        // LOOP HINT 采纳 telemetry（decision e7d13697）：本会话实际 `cf loop run`
+        // = 采纳了先前 mint 的 `[LOOP HINT]` 建议。盖章同会话未标记的 loop-hint 行。
+        if (this.storage && event.tool_name === 'Bash') {
+            this.maybeMarkLoopHintAdoption(event);
+        }
         return { allow: true };
     }
+    /**
+     * LOOP HINT adoption back-fill (decision e7d13697, Option C). When the main
+     * thread (or an agent) actually runs `cf loop run` in this session, stamp
+     * every not-yet-stamped `[LOOP HINT]` injection row of the session with
+     * `adopted_at = now`. This is the write side of the "建议的 loop 被采纳没"
+     * telemetry — the OQ5 hard requirement that lets us later judge
+     * keep-vs-remove. Read side is a single SQL (countLoopHintAdoption).
+     *
+     * The daemon is ONLY observing here — it never launches `cf loop run` itself
+     * (advisory-only invariant). Silently swallows errors — observability,
+     * never a blocker.
+     */
+    maybeMarkLoopHintAdoption(event) {
+        if (!this.storage)
+            return;
+        try {
+            const cmd = event.tool_input?.command;
+            if (typeof cmd !== 'string' || !LOOP_RUN_COMMAND_RE.test(cmd))
+                return;
+            const stamped = this.storage.writeLoopHintAdoption(event.session_id, Date.now());
+            if (stamped > 0) {
+                logger.debug(`[PostToolUse] loop-hint adoption: stamped ${stamped} injection row(s) for session ${event.session_id}`);
+            }
+        }
+        catch (err) {
+            logger.debug(`[PostToolUse] maybeMarkLoopHintAdoption failed: ${err}`);
+        }
+    }
+    /**
+     * KB adoption back-fill (decision 148f7a0a). When the main thread (or an
+     * agent in the same session) actively calls a KB MCP tool
+     * (`mcp__claude-forge__knowledge*`), stamp every not-yet-stamped KB
+     * injection row of this session with `adopted_at = now`. This is the
+     * write side of the "注入的 KB 被用了没" telemetry — read side is a single
+     * SQL over injections (adopted/total, source_handler LIKE '%:kb').
+     *
+     * Silently swallows errors — telemetry is observability, never a blocker.
+     */
+    maybeMarkKbAdoption(event) {
+        if (!this.storage)
+            return;
+        try {
+            const stamped = this.storage.writeKbInjectionAdoption(event.session_id, Date.now());
+            if (stamped > 0) {
+                logger.debug(`[PostToolUse] KB adoption: stamped ${stamped} injection row(s) for session ${event.session_id} (tool=${event.tool_name})`);
+            }
+        }
+        catch (err) {
+            logger.debug(`[PostToolUse] maybeMarkKbAdoption failed: ${err}`);
+        }
+    }
+    /**
+     * audit F4 back-fill (KPI relax: dry_run also back-filled). Pipeline:
+     *   1. Query last 30s of `deny` + `dry_run` intercepts for this session.
+     *      dry_run rows are the "would-have-been-denied" rehearsal that fires
+     *      when `pre_tool_intercept.enabled=false`. Including them lets C4
+     *      compute a meaningful obeyed-ratio BEFORE the flag is flipped on —
+     *      otherwise C4 stays 0 forever in dry_run mode.
+     *   2. If any candidate matches `event.tool_name` → the main loop re-invoked
+     *      the SAME tool despite the deny/dry_run hint → mark 'override'.
+     *   3. Else, the main loop switched tools (most commonly Bash deny → Read /
+     *      Grep / Agent) → mark all candidates 'obeyed'.
+     *
+     * For dry_run rows specifically the verdict is a *pseudo-outcome* — the
+     * rule didn't actually enforce anything, but the main loop's reaction in
+     * the same 30s window still proxies "would they have obeyed?". UI surfaces
+     * this distinction in the C4 tooltip; the SQL aggregation treats both the
+     * same.
+     *
+     * Silently swallows errors — back-fill is observability, never a blocker.
+     * Multiple candidates within the window all get the same verdict; that's
+     * acceptable because the AI's reaction is a single response either way.
+     */
+    maybeMarkInterceptOutcome(event) {
+        if (!this.storage)
+            return;
+        try {
+            const sinceIso = new Date(Date.now() - INTERCEPT_OUTCOME_WINDOW_MS).toISOString();
+            const candidates = this.storage.queryToolIntercepts({
+                session_id: event.session_id,
+                decisions: ['deny', 'dry_run'],
+                since: sinceIso,
+                limit: 10,
+            });
+            const pending = candidates.filter((c) => c.outcome === null);
+            if (pending.length === 0)
+                return;
+            for (const row of pending) {
+                const verdict = row.tool_name === event.tool_name ? 'override' : 'obeyed';
+                this.storage.updateToolInterceptOutcome(row.id, verdict);
+                logger.debug(`[PostToolUse] intercept ${row.id} (rule=${row.rule_id} tool=${row.tool_name}) → ${verdict} (now ran ${event.tool_name})`);
+            }
+        }
+        catch (err) {
+            logger.debug(`[PostToolUse] maybeMarkInterceptOutcome failed: ${err}`);
+        }
+    }
+    /**
+     * Phase 6 writeback. Pipeline:
+     *   1. Flag gate (`agent_writeback.enabled`). Default OFF → silent skip.
+     *   2. Path filter — only changelog paths under `docs/implementation/`
+     *      (matches both the legacy `*-changelog-*.md` and the post-2026-05-26
+     *      datedir layout `YYYY-MM-DD/HHMM-*-changelog.md`).
+     *   3. Run `extractExperience` on the resolved absolute path.
+     *   4. Append each extracted entry to `<projectRoot>/.forge-knowledge/
+     *      agents-experience/<topic>.md`.
+     *
+     * All errors are swallowed (warn-level log) — writeback is best-effort.
+     */
+    async maybeWriteExperience(event) {
+        if (!this.configStore)
+            return;
+        let flagEnabled = false;
+        try {
+            flagEnabled = this.configStore.isEnabled(AGENT_WRITEBACK_FLAG);
+        }
+        catch {
+            return;
+        }
+        if (!flagEnabled)
+            return;
+        const rawPath = pickFilePath(event.tool_input);
+        if (!rawPath)
+            return;
+        if (!CHANGELOG_PATH_PATTERN.test(rawPath))
+            return;
+        const absPath = path.isAbsolute(rawPath)
+            ? rawPath
+            : path.join(event.project_path, rawPath);
+        try {
+            const experiences = await extractExperience(absPath);
+            if (experiences.length === 0)
+                return;
+            let written = 0;
+            for (const exp of experiences) {
+                const ok = await appendToExperienceFile(event.project_path, exp);
+                if (ok)
+                    written++;
+            }
+            if (written > 0) {
+                logger.info(`[PostToolUse] writeback: ${written}/${experiences.length} entries from ${path.basename(absPath)}`);
+            }
+        }
+        catch (err) {
+            logger.warn(`[PostToolUse] experience writeback failed: ${err}`);
+        }
+    }
+}
+/**
+ * Resolve the target file path of a Write/Edit tool invocation.
+ *
+ * Claude Code's Write/Edit payloads use `file_path`; legacy CLIs occasionally
+ * package it as `path`. Both shapes are accepted; anything else returns null.
+ */
+function pickFilePath(input) {
+    if (!input)
+        return null;
+    const candidates = [input.file_path, input.path];
+    for (const c of candidates) {
+        if (typeof c === 'string' && c.length > 0)
+            return c;
+    }
+    return null;
 }
 //# sourceMappingURL=post-tool-use.js.map

package/dist/daemon/handlers/post-tool-use.js.map

@@ -1 +1 @@
-{"version":3,"file":"post-tool-use.js","sourceRoot":"","sources":["../../../src/daemon/handlers/post-tool-use.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,MAAM,OAAO,kBAAkB;IAInB;IAHF,YAAY,GAAwB,IAAI,CAAC;IAEjD,YACU,UAAgC,IAAI;QAApC,YAAO,GAAP,OAAO,CAA6B;QAE5C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,qDAAqD;QACrD,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,4EAA4E;gBAC5E,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC;gBAE9D,8DAA8D;gBAC9D,oEAAoE;gBACpE,sEAAsE;gBACtE,oEAAoE;gBACpE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAChF,IAAI,WAAW,EAAE,CAAC;oBAChB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE;wBAC9C,cAAc,EAAE,OAAO;wBACvB,cAAc,EAAE,SAAS;wBACzB,MAAM,EAAE,CAAC;wBACT,eAAe,EAAE,OAAO;wBACxB,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;qBAC1B,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,uCAAuC,WAAW,CAAC,EAAE,gBAAgB,SAAS,EAAE,CAAC,CAAC;gBACjG,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"post-tool-use.js","sourceRoot":"","sources":["../../../src/daemon/handlers/post-tool-use.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EACL,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,6CAA6C,CAAC;AAErD;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAC1D;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAC7C,0CAA0C;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAC9D;;;;;;;;;GASG;AACH,MAAM,sBAAsB,GAAG,6CAA6C,CAAC;AAE7E,MAAM,OAAO,kBAAkB;IAEnB;IACA;IAFV,YACU,UAAgC,IAAI,EACpC,cAAkC,IAAI;QADtC,YAAO,GAAP,OAAO,CAA6B;QACpC,gBAAW,GAAX,WAAW,CAA2B;IAC7C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,qDAAqD;QACrD,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,4EAA4E;gBAC5E,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC;gBAE9D,8DAA8D;gBAC9D,oEAAoE;gBACpE,sEAAsE;gBACtE,oEAAoE;gBACpE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAChF,IAAI,WAAW,EAAE,CAAC;oBAChB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE;wBAC9C,cAAc,EAAE,OAAO;wBACvB,cAAc,EAAE,SAAS;wBACzB,MAAM,EAAE,CAAC;wBACT,eAAe,EAAE,OAAO;wBACxB,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;qBAC1B,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,uCAAuC,WAAW,CAAC,EAAE,gBAAgB,SAAS,EAAE,CAAC,CAAC;gBACjG,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC9D,KAAK,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,2EAA2E;QAC3E,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,0DAA0D;QAC1D,2CAA2C;QAC3C,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,gEAAgE;QAChE,yDAAyD;QACzD,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC/C,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;OAWG;IACK,yBAAyB,CAAC,KAAuB;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;YACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO;YACtE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAChD,KAAK,CAAC,UAAU,EAChB,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;YACF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CACV,6CAA6C,OAAO,iCAAiC,KAAK,CAAC,UAAU,EAAE,CACxG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,mDAAmD,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACK,mBAAmB,CAAC,KAAuB;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CACnD,KAAK,CAAC,UAAU,EAChB,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;YACF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CACV,sCAAsC,OAAO,iCAAiC,KAAK,CAAC,UAAU,UAAU,KAAK,CAAC,SAAS,GAAG,CAC3H,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACK,yBAAyB,CAAC,KAAuB;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,IAAI,CACvB,IAAI,CAAC,GAAG,EAAE,GAAG,2BAA2B,CACzC,CAAC,WAAW,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBAClD,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;gBAC9B,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,EAAE;aACV,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;YAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEjC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GACX,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC5D,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM,CAAC,KAAK,CACV,2BAA2B,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,OAAO,SAAS,GAAG,CAAC,SAAS,OAAO,OAAO,aAAa,KAAK,CAAC,SAAS,GAAG,CAC1H,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,mDAAmD,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,oBAAoB,CAAC,KAAuB;QACxD,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAC9B,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO;QAElD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACtC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAE3C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACrC,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,MAAM,EAAE,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBACjE,IAAI,EAAE;oBAAE,OAAO,EAAE,CAAC;YACpB,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CACT,4BAA4B,OAAO,IAAI,WAAW,CAAC,MAAM,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CACnG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;CAEF;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAA0C;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/daemon/handlers/pre-tool-use.d.ts

@@ -0,0 +1,181 @@
+/**
+ * PreToolUseHandler — Phase 1 strict-mode rule engine + dry_run shim.
+ *
+ * Pipeline per event:
+ *   1. Build RuleContext (recent_agent_spawn, active_agent_depth, edited_files,
+ *      recent_prompt).
+ *   2. Detect explicit bypass marker (`forge:bypass=<reason>`) in tool input.
+ *   3. Find the first matching ToolInterceptRule from RuleRegistry.
+ *   4. Decide & persist:
+ *      - Flag OFF (default): row written with decision='dry_run'; allow=true.
+ *      - Flag ON  + bypass : decision='bypass'; allow=true.
+ *      - Flag ON  + deny   : decision='deny';   allow=false + hookSpecificOutput.
+ *      - Flag ON  + warn   : decision='warn';   allow=true + additionalContext.
+ *
+ * Storage / config failures must never propagate — `tool_intercepts` is a
+ * fact table; missing rows are acceptable, breaking the tool pipeline is not.
+ *
+ * Session-state computed lazily (per-event) instead of cached, to keep the
+ * handler stateless across daemon restarts. Phase 2 will fold this into
+ * sessions.intercept_count etc. so the lazy scan can be replaced.
+ */
+import type { PreToolUseEvent } from '../../core/types.js';
+import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+import type { ConfigStore } from '../config-store.js';
+import type { HookResponse } from '../server.js';
+import { RuleRegistry } from '../rules/registry.js';
+import { InterceptRollbackGuard } from '../services/intercept-rollback-guard.js';
+export declare class PreToolUseHandler {
+    private storage;
+    private configStore;
+    private registry;
+    /**
+     * Session → edited-files incremental cache (F7).
+     * Cleared per-session on Stop via `clearSession()`.
+     */
+    private readonly editedFilesCache;
+    private readonly rollbackGuard;
+    constructor(storage: SQLiteStorage, configStore: ConfigStore, registry?: RuleRegistry, rollbackGuard?: InterceptRollbackGuard);
+    /**
+     * Drop cached edited-files state for a session. Called from StopHandler so
+     * long-running daemons don't leak per-session Sets forever.
+     */
+    clearSession(sessionId: string): void;
+    handle(event: PreToolUseEvent): Promise<HookResponse>;
+    private isFlagEnabled;
+    private buildContext;
+    /**
+     * f47c2c90 (2026-06-17): probe `inline_edit_no_spawn.enabled`. Default false
+     * (gray-rollout OFF). Storage / config failures degrade to `false` (fail-safe
+     * — keep the rule dormant; warn-only rule never blocks anyway).
+     */
+    private probeInlineEditNoSpawn;
+    /**
+     * v9.x Phase 2 (2026-05-26): probe `question_default_bmad.enforce`. Default
+     * false during the 7-day dry_run window starting 2026-05-26. Storage /
+     * config failures degrade to `false` (fail-safe — keep dry_run behaviour).
+     */
+    private probeQuestionDefaultBmadEnforce;
+    /**
+     * Distinct file_paths edited in PostToolUse Edit/Write events for the session.
+     *
+     * F7 fix: incremental cache keyed by session_id. First call scans up to
+     * `EDIT_HISTORY_SCAN_LIMIT` events; subsequent calls fetch only events with
+     * `timestamp >= maxTs` (Set dedup absorbs the boundary). A session with N
+     * PreToolUse events now amortizes to O(N) total scan work instead of O(N·200).
+     *
+     * Returns a fresh copy of the Set so rule matchers can't mutate cached state.
+     */
+    private computeEditedFiles;
+    /**
+     * P0-1 fix (2026-05-27): same as `computeEditedFiles` but additionally
+     * surfaces per-file last-edit ISO timestamp so the HARD multi-file rule can
+     * drop pre-spawn entries. The Set is preserved as the legacy `files`
+     * companion for callers (rule matchers, hint factories) that don't need
+     * timing.
+     *
+     * Cache shape was upgraded (added `fileTs: Map<string,string>`) but the
+     * incremental-scan invariant is unchanged: we only fetch events newer than
+     * the cached `maxTs` and merge into the existing fileTs map (`Map.set`
+     * naturally overwrites with the newest ts since queryEvents returns DESC).
+     */
+    private computeEditedFilesWithTs;
+    /**
+     * P0-1 fix (2026-05-27): timestamp of the most recent PreToolUse Task/Agent
+     * event within the F6 5-min window. Returns null when no spawn was observed.
+     * Uses the same query shape as `detectRecentAgentSpawn` so callers don't pay
+     * twice (storage layer prepared-stmt cache absorbs the duplicate).
+     */
+    private getLastSpawnTs;
+    /**
+     * Did the session spawn an agent (Task / Agent tool) within the recent
+     * observation window?
+     *
+     * F6 fix (2026-05-27): query `PreToolUse` (spawn-initiated) instead of
+     * `PostToolUse` (spawn-completed). PostToolUse Task events only arrive
+     * 30s–5min+ after spawn (when the sub-agent finishes), so the previous
+     * 30s window was permanently false during the actual post-spawn
+     * coordination period the rule was designed to relax. PreToolUse Task
+     * fires at the spawn instant; combined with the 5-min window (aligned
+     * with Phase 5 `PHASE5_WINDOW_MS`), the main thread now correctly sees
+     * `recent_agent_spawn=true` during BMAD coordination.
+     *
+     * `limit` bumped from 40 → 100 because a 5-min window can hold many more
+     * spawn events than the prior 30s window.
+     */
+    private detectRecentAgentSpawn;
+    /**
+     * Audit #4 fix (2026-06-09): compute the number of sub-agents currently
+     * IN-FLIGHT for the session (agent-depth).
+     *
+     * Claude Code sub-agents SHARE the main thread's `session_id`, so a spawned
+     * `coder` editing 3+ files (its authorized job) trips the session-level
+     * multi-file HARD threshold even though the main thread never edited a file.
+     * The 6 audited deny rows were all this false-positive class.
+     *
+     * Pure daemon-side signal — NO hook (.sh) change required, because the daemon
+     * already receives both ends of the Task lifecycle:
+     *   • PreToolUse  tool_name='Task'/'Agent'  → a sub-agent was SPAWNED (+1)
+     *   • PostToolUse tool_name='Task'/'Agent'  → that sub-agent COMPLETED (-1)
+     *
+     * depth = max(0, #spawns − #completions). `depth >= 1` means at least one
+     * authorized sub-agent is running right now → the multi-file HARD rule
+     * exempts the session (the edits are the agent's legitimate work).
+     *
+     * Scanning is capped + degrades to 0 on any failure (fail-OPEN toward the
+     * legacy threshold behaviour, never breaks the tool pipeline).
+     *
+     * NOTE: this intentionally does NOT use a tight time window. A long-running
+     * `coder` can run well past the 5-min `recent_agent_spawn` window; as long as
+     * its PostToolUse completion has not yet arrived, depth stays ≥1 and its
+     * edits remain exempt. The PostToolUse decrement is what closes the window.
+     */
+    private computeActiveAgentDepth;
+    /** Most-recent UserPromptSubmit prompt text (best-effort, used for intent relaxation). */
+    private fetchRecentPrompt;
+    private persistIntercept;
+}
+/**
+ * Shape-based secret redaction patterns (audit F-medium #5, 2026-05-26).
+ *
+ * Applied to the `tool_input_summary` string we persist into `tool_intercepts`
+ * for auditing. The raw `tool_input` JSON is NEVER redacted at the rule-engine
+ * level (rules legitimately need to inspect verbatim arguments); we only
+ * scrub the *summary* that gets written to durable storage and surfaced in
+ * the Web UI / weekly report.
+ *
+ * Order matters: longer / more specific patterns first so they're not
+ * partially eaten by a more general regex on the same span.
+ *
+ * Patterns covered:
+ *   1. CLI-flag style: --token=…, --api-key=…, password=…, secret=…
+ *   2. JWT shape:       eyJ<base64>.<base64>.<base64>
+ *   3. Anthropic / OpenAI keys: sk-… (40+ chars)
+ *   4. Slack bot tokens: xoxb-… (40+ chars)
+ *   5. AWS access key IDs: AKIA + 16 alnum uppercase
+ *   6. Long hex strings (>= 32 chars) — catches hex API keys / session tokens
+ *
+ * Exported (under-test) for unit tests in pre-tool-use.test.ts so we can lock
+ * down each shape with a focused assertion.
+ */
+/**
+ * Shared redaction pattern table. Each entry is either:
+ *   • `prefixed: true`  — the regex has a single capture group that names the
+ *                          key (e.g. `--token=`); replacement preserves the
+ *                          prefix and substitutes `<redacted>` for the value.
+ *   • `prefixed: false` — the regex matches the entire secret literal; the
+ *                          whole match is replaced with `<redacted>`.
+ *
+ * Exported so tests can lock down each shape individually.
+ */
+export declare const SECRET_REDACTION_PATTERNS: Array<{
+    name: string;
+    re: RegExp;
+    prefixed: boolean;
+}>;
+/**
+ * Apply all `SECRET_REDACTION_PATTERNS` to a string. Exported for unit tests;
+ * production callers should go through `buildToolInputSummary`.
+ */
+export declare function redactSecrets(s: string): string;
+//# sourceMappingURL=pre-tool-use.d.ts.map

package/dist/daemon/handlers/pre-tool-use.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-tool-use.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/pre-tool-use.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAoDjF,qBAAa,iBAAiB;IAU1B,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ;IAXlB;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiD;IAElF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;gBAG7C,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,WAAW,EACxB,QAAQ,GAAE,YAAiC,EACnD,aAAa,CAAC,EAAE,sBAAsB;IAKxC;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAI/B,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;IA2I3D,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,YAAY;IAwBpB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAS9B;;;;OAIG;IACH,OAAO,CAAC,+BAA+B;IASvC;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,wBAAwB;IA4ChC;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAoBtB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,sBAAsB;IAoB9B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,uBAAuB;IAqB/B,0FAA0F;IAC1F,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,gBAAgB;CAyBzB;AA2BD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;CACnB,CAwBA,CAAC;AAEF;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ/C"}