@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/daemon/services/decision-hint.js

@@ -0,0 +1,562 @@
+/**
+ * DecisionHint — formats the [DECISION HINT] systemMessage that daemon emits
+ * when a prompt is long enough and passes noise/bypass guards.
+ *
+ * 2026-05-27 Spec 1702: replaces the deleted `SpecGate.tryAutoGenerate` at
+ * step 4.5. Instead of silently generating a spec (0% real-world acceptance),
+ * the daemon now emits an explicit hint telling the main thread to spawn the
+ * `decision-maker` agent.
+ *
+ * 2026-05-28 decision-flow-overhaul (spec §5.1):
+ *   - Added `isSystemGeneratedPrompt()` guard (G9 fix): skip noise prompts
+ *     injected by daemon itself (<task-notification>, <forge-resume-body>, etc.)
+ *   - Added `isSkipDecisionKeyword()`: bypass token check for "skip decision"
+ *   - `emitDecisionHint()` now accepts optional SQLiteStorage + event context
+ *     and writes a `decisions` table row, returning `{ message, decision_id }`
+ *     instead of a bare string so UserPromptHandler can embed the id in the hint
+ *
+ * 2026-05-28 Spec 1200 (daemon decision-layer simplification):
+ *   - Removed intent dependency — trigger is now pure length check:
+ *     `prompt.length >= TRIGGER_LEN && !isNoise(prompt) && !hasBypass(prompt)`
+ *   - TRIGGER_LEN configurable via `forge_config.decision_trigger_len` (default 50)
+ *
+ * Fail-safe: all errors are caught and return `null`; the pipeline keeps running.
+ */
+import { randomBytes } from 'node:crypto';
+import { logger } from '../../core/utils/logger.js';
+/**
+ * Default minimum prompt length to trigger a decision hint.
+ *
+ * Set to 0 per 用户诉求 "必须要走" — every non-noise / non-bypass prompt routes
+ * to decision-maker. Users wanting to cap short prompts can override via
+ * `forge_config.decision_trigger_len`.
+ */
+export const DEFAULT_TRIGGER_LEN = 0;
+/** forge_config key for overriding trigger length (spec Q7). */
+export const TRIGGER_LEN_CONFIG_KEY = 'decision_trigger_len';
+/**
+ * decision 7aa0ec63 (2026-06-01 Option C) — cooldown configuration.
+ *
+ * forge_config key for overriding the per-session decision-maker spawn cooldown
+ * (in seconds). When the daemon emitted a hint that the main thread satisfied
+ * by actually spawning `decision-maker` (visible as a PreToolUse Task event),
+ * we suppress further hints for this many seconds. The same session can still
+ * spawn a fresh maker by adding "skip decision" or by waiting out the window.
+ *
+ * Default: 60 s (covers a typical "read decision doc → approve" loop).
+ * Sane range: 0 < value <= 3600. Values outside that range fall back to the
+ * default; daemon startup logs a warning so users notice typos.
+ */
+export const DECISION_MAKER_COOLDOWN_CONFIG_KEY = 'decision_maker_cooldown_seconds';
+/** Default cooldown when forge_config has no override or holds a bad value. */
+export const DEFAULT_DECISION_MAKER_COOLDOWN_SECONDS = 60;
+/** Hard upper bound for the cooldown override (1 hour). */
+export const MAX_DECISION_MAKER_COOLDOWN_SECONDS = 3600;
+/** Max chars to include in the hint intent summary. */
+const HINT_SUMMARY_MAX = 150;
+/**
+ * Tool names that represent a sub-agent spawn in the `events` table.
+ *
+ * Bug P1 (decision e888352d, 2026-06-10): current Claude Code emits agent
+ * spawns with `tool_name='Agent'` (live DB: 982 'Agent' rows vs 0 'Task'),
+ * while older CC builds used `tool_name='Task'`. Any decision-flow lookup that
+ * keys off "was decision-maker spawned" MUST accept both, or it becomes a dud
+ * that silently never fires. Centralised here so the cooldown gate
+ * (isWithinDecisionMakerCoolDown) and the CLI approve-trace lookup
+ * (findRecentDecisionMakerSpawn) stay in lock-step.
+ */
+export const AGENT_SPAWN_TOOL_NAMES = ['Agent', 'Task'];
+/** True when `tool_name` denotes a sub-agent spawn (Agent | Task). */
+export function isAgentSpawnToolName(tool_name) {
+    return AGENT_SPAWN_TOOL_NAMES.includes(tool_name ?? '');
+}
+/**
+ * Pattern for system-generated prompt prefixes (G9 fix).
+ *
+ * Daemon injects several envelope types into the conversation:
+ *   - <task-notification>  — when a sub-agent starts/finishes
+ *   - <task-id>            — task tracking metadata
+ *   - <forge-resume-body>  — session resume context
+ *   - <system-reminder>    — periodic rule reminder
+ *   - <local-command-stdout> / <command-message> — shell output
+ *   - <!-- forge:…         — forge magic markers
+ *
+ * When any of these appear at the start of the prompt, it is daemon-generated
+ * and should NOT trigger a decision hint.
+ */
+const SYSTEM_PROMPT_PATTERNS = [
+    /^<task-notification>/i,
+    /^<task-id>/i,
+    /^<forge-resume-body>/i,
+    /^<system-reminder>/i,
+    /^<local-command-stdout>/i,
+    /^<command-message>/i,
+    /^<command-name>/i,
+    /^<!--\s*forge:/i,
+    // Guard against prompts that are ONLY daemon-injected tags (e.g. multi-tag blocks)
+    /^\s*<[a-z-]+>\s*$/i,
+];
+/**
+ * Returns true when the prompt appears to be daemon-injected content
+ * rather than a genuine user message. Guards against G9 false positives
+ * where daemon-inserted task-notification blobs triggered [DECISION HINT].
+ */
+export function isSystemGeneratedPrompt(prompt) {
+    const trimmed = prompt.trim();
+    return SYSTEM_PROMPT_PATTERNS.some(re => re.test(trimmed));
+}
+/**
+ * Returns true when the user has included the "skip decision" bypass keyword.
+ * This is the OQ3 answer: natural-language bypass (same pattern as
+ * bmad-question-default's "直接修" / "skip" escapes).
+ */
+export function isSkipDecisionKeyword(prompt) {
+    return /skip\s+decision/i.test(prompt);
+}
+/**
+ * Bare inspection / listing command words (decision f61b8a0c, audit #6).
+ *
+ * A prompt consisting of ONLY one of these words (optionally with trailing
+ * punctuation) carries zero decision content — it is a pure listing/status
+ * inspection the main thread answers directly. These slip past
+ * `isLikelyTrivial` (whose keyword set targets approvals/continuations, not
+ * inspection verbs), so they minted advisory rows that never advanced.
+ *
+ * Kept intentionally narrow: only EXACT single-word matches, so substantive
+ * short prompts that merely start with one of these (e.g. `list the failing
+ * tests and fix them`) still mint. Existing must-mint fixtures (`rebase`,
+ * `fix lint`, `cd ..`, `short`) are not in this set.
+ */
+const BARE_INSPECTION_COMMAND_RE = /^(list|ls|pwd|dir|status|help|cat|tree|env|ps|top|clear|cls|history)[\s.!?。！？]*$/i;
+/**
+ * Returns true when the prompt is a trivial mint trigger that should NOT
+ * produce a [DECISION HINT] / advisory decision row (decision f61b8a0c,
+ * audit #6 — "收紧 mint 启发式，治 advisory 空转").
+ *
+ * The UserPromptSubmit mint heuristic was too loose: with
+ * `DEFAULT_TRIGGER_LEN=0` every non-noise prompt minted an advisory row, so
+ * pure-image (no-text) prompts, lone punctuation, and bare inspection commands
+ * (`list`, `?`, `...`) produced advisory rows that never advanced — pure
+ *空转. This guard filters those before the row is written.
+ *
+ * Conservative by design — it only fires for prompts with no real decision
+ * content:
+ *   1. Empty / whitespace-only (pure image with no accompanying text).
+ *   2. No alphanumeric/CJK content at all (lone punctuation/symbols: `?`,
+ *      `...`, `???`).
+ *   3. A bare inspection/listing command word (see BARE_INSPECTION_COMMAND_RE).
+ *
+ * It deliberately does NOT fire on short-but-actionable prompts (`rebase`,
+ * `fix lint`, `cd ..`) — those still mint. The existing `isLikelyTrivial`
+ * guard (approvals/continuations) remains and is complementary.
+ */
+export function isTrivialTrigger(prompt) {
+    const trimmed = (prompt ?? '').trim();
+    // 1. Empty / whitespace-only → pure image or no-text prompt.
+    if (trimmed.length === 0)
+        return true;
+    // 2. No word-content at all (only punctuation / symbols / emoji).
+    //    \p{L} = any letter (covers CJK), \p{N} = any number.
+    if (!/[\p{L}\p{N}]/u.test(trimmed))
+        return true;
+    // 3. Bare inspection/listing command word (no decision content).
+    if (BARE_INSPECTION_COMMAND_RE.test(trimmed))
+        return true;
+    return false;
+}
+/**
+ * Resolve the effective TRIGGER_LEN from forge_config or use the default.
+ * Used by UserPromptHandler (Step 4.5) to pass into emitDecisionHintSimple.
+ */
+export function resolveTriggerLen(storage) {
+    if (!storage)
+        return DEFAULT_TRIGGER_LEN;
+    try {
+        const raw = storage.readConfig(TRIGGER_LEN_CONFIG_KEY);
+        if (raw !== undefined && raw !== null) {
+            const n = Number(raw);
+            if (Number.isFinite(n) && n >= 0)
+                return n;
+        }
+    }
+    catch {
+        // fail-silent
+    }
+    return DEFAULT_TRIGGER_LEN;
+}
+/**
+ * decision 7aa0ec63 (Option C, Q1 + Q6) — resolve the per-session
+ * decision-maker spawn cooldown from forge_config, with default fallback.
+ *
+ * Read from `forge_config.decision_maker_cooldown_seconds`. Values outside
+ * `(0, MAX_DECISION_MAKER_COOLDOWN_SECONDS]` are treated as invalid and
+ * the default is returned. Caller is expected to log a warn separately when
+ * an invalid value is rejected (daemon startup does this once at boot).
+ */
+export function resolveDecisionMakerCooldownSeconds(storage) {
+    if (!storage)
+        return DEFAULT_DECISION_MAKER_COOLDOWN_SECONDS;
+    try {
+        const raw = storage.readConfig(DECISION_MAKER_COOLDOWN_CONFIG_KEY);
+        if (raw === undefined || raw === null) {
+            return DEFAULT_DECISION_MAKER_COOLDOWN_SECONDS;
+        }
+        const n = Number(raw);
+        if (!Number.isFinite(n))
+            return DEFAULT_DECISION_MAKER_COOLDOWN_SECONDS;
+        if (n <= 0)
+            return DEFAULT_DECISION_MAKER_COOLDOWN_SECONDS;
+        if (n > MAX_DECISION_MAKER_COOLDOWN_SECONDS) {
+            return DEFAULT_DECISION_MAKER_COOLDOWN_SECONDS;
+        }
+        return n;
+    }
+    catch {
+        return DEFAULT_DECISION_MAKER_COOLDOWN_SECONDS;
+    }
+}
+/**
+ * decision 7aa0ec63 (Option C, Q2 + Q6) — session-scoped cooldown check.
+ *
+ * Returns true when this session spawned `decision-maker` (PreToolUse Task
+ * event with `tool_input.subagent_type === 'decision-maker'`) within the last
+ * `windowSeconds` seconds. The main thread is currently working through a
+ * recent maker output; emitting a fresh hint would just stack pending rows.
+ *
+ * Source-of-truth = `events` table (per Q6): persistent across daemon restart,
+ * trivially injectable in unit tests, and same fixture pattern reused from
+ * `findRecentDecisionMakerSpawn` (src/cli/commands/decisions.ts §B). The
+ * narrower 60 s window (vs 5 min in approve-governance) targets the actual
+ * "back-to-back batch nudge" symptom this gate exists for.
+ *
+ * Fail-silent — if storage.queryEvents throws, returns false so the regular
+ * emit path still runs (better to over-emit than swallow a real decision).
+ */
+export function isWithinDecisionMakerCoolDown(storage, session_id, windowSeconds, nowMs = Date.now()) {
+    if (!session_id)
+        return false;
+    if (!Number.isFinite(windowSeconds) || windowSeconds <= 0)
+        return false;
+    const sinceIso = new Date(nowMs - windowSeconds * 1000).toISOString();
+    try {
+        const rows = storage.queryEvents({
+            session_id,
+            hook_type: 'PreToolUse',
+            since: sinceIso,
+            limit: 200,
+        });
+        for (const ev of rows) {
+            // Bug P1 (decision e888352d, 2026-06-10) — agent-spawn events now arrive
+            // as tool_name='Agent' under current Claude Code (DB live: 982 'Agent'
+            // vs 0 'Task'); older CC used 'Task'. Accept BOTH so the cooldown gate
+            // is not a dud (previously it was silently never triggering, masked only
+            // by the 1h active-pending window). See isAgentSpawnToolName.
+            if (!isAgentSpawnToolName(ev.tool_name))
+                continue;
+            const input = (ev.tool_input ?? {});
+            const sub = typeof input['subagent_type'] === 'string' ? input['subagent_type'] : '';
+            if (sub === 'decision-maker')
+                return true;
+        }
+    }
+    catch {
+        // Fail-silent — degrade to "no cooldown" so we still emit. Safer than
+        // accidentally suppressing a real decision.
+    }
+    return false;
+}
+/**
+ * Main entry point — pure length-based trigger (spec 1200 simplification).
+ *
+ * Guards (in order):
+ *   1. skip-decision bypass keyword
+ *   2. prompt.length < TRIGGER_LEN
+ *   3. system-generated prompt (G9 fix)
+ *
+ * When all guards pass:
+ *   1. Writes a `decisions` row (status='advisory' — decision 93e8fff1) to the
+ *      DB (fail-silent). Advisory is pure bookkeeping in the post-interceptor
+ *      model (decision 7c924678): it blocks nothing and the Web page renders it
+ *      without a 批准 button. The status default lives in writeDecision.
+ *   2. Returns `{ message, decision_id }` — UserPromptHandler splices
+ *      `decision_id: <id>` into the systemMessage
+ *
+ * Returns `null` when any guard fires (no DB write, no systemMessage).
+ *
+ * @param prompt - The raw user prompt text.
+ * @param triggerLen - Minimum prompt length (default DEFAULT_TRIGGER_LEN=50).
+ * @param storage - Optional SQLiteStorage for persisting the decision row.
+ * @param eventContext - Optional event fields for the DB row.
+ */
+export function emitDecisionHintSimple(prompt, triggerLen = DEFAULT_TRIGGER_LEN, storage, eventContext) {
+    // Guard: bypass keyword → respect user's wish.
+    if (isSkipDecisionKeyword(prompt))
+        return null;
+    // decision f61b8a0c (audit #6) — trivial-trigger filter. Drop pure-image /
+    // no-text prompts, lone punctuation, and bare inspection commands (`list`,
+    // `?`, `...`) BEFORE any DB write so they don't mint空转 advisory rows.
+    // Conservative: short-but-actionable prompts (`rebase`, `fix lint`) still
+    // pass. This runs ahead of the cooldown/active-pending lookups so trivial
+    // triggers never even touch storage.
+    if (isTrivialTrigger(prompt)) {
+        logger.debug(`[DecisionHint] gate=trivial-trigger (len=${prompt.trim().length})`);
+        return null;
+    }
+    // Guard: short prompts (only enforced if triggerLen > 0; default 0 = always emit).
+    if (triggerLen > 0 && prompt.length < triggerLen)
+        return null;
+    // G9 fix: skip system-generated prompts (daemon-injected envelopes).
+    if (isSystemGeneratedPrompt(prompt))
+        return null;
+    // decision 7aa0ec63 (Option C) — per-session decision-maker spawn cooldown.
+    // If the main thread already spawned decision-maker for THIS session within
+    // the cooldown window, suppress new hints. The deny gate
+    // (decision-hint-pending rule) keeps enforcing the existing pending row;
+    // we just stop stacking duplicates while the main thread is mid-flight.
+    if (storage && eventContext?.session_id) {
+        try {
+            const cooldownSeconds = resolveDecisionMakerCooldownSeconds(storage);
+            if (isWithinDecisionMakerCoolDown(storage, eventContext.session_id, cooldownSeconds)) {
+                logger.debug(`[DecisionHint] gate=cooldown (session=${eventContext.session_id}, ` +
+                    `window=${cooldownSeconds}s)`);
+                return null;
+            }
+        }
+        catch (err) {
+            logger.debug(`[DecisionHint] cooldown lookup failed (proceeding): ${err}`);
+        }
+    }
+    // Spec 1944 §8 (trivial filter): drop very short trivial replies (`批准`/
+    // `ok`/`继续` …). `&&` with length<TRIVIAL_MAX_LEN avoids killing
+    // meaningful short prompts like `rebase`/`fix lint` (not in the keyword
+    // regex) or `批准 abc12345` (length ≥ 10).
+    if (isLikelyTrivial(prompt) && prompt.length < TRIVIAL_MAX_LEN) {
+        logger.debug(`[DecisionHint] gate=trivial keywords-match (len=${prompt.length})`);
+        return null;
+    }
+    // Option B (decision b95e0956, 2026-05-29 — Q1+Q2): continuation skip.
+    // When the session has ≥3 resolved decisions and the most recent is within
+    // 30 min AND the prompt contains a continuation keyword, suppress the new
+    // hint. The post-tool-use rule keeps enforcing any still-pending row from
+    // earlier, so we don't lose enforcement here — we just stop spamming new
+    // decisions for delivery follow-ups like "提交并推送".
+    if (storage && eventContext) {
+        try {
+            const recent = storage.listRecentResolvedDecisions(eventContext.session_id, CONTINUATION_MIN_RESOLVED);
+            if (isContinuation(prompt, recent)) {
+                logger.debug(`[DecisionHint] gate=continuation (resolved=${recent.length}, prompt len=${prompt.length})`);
+                return null;
+            }
+        }
+        catch (err) {
+            logger.debug(`[DecisionHint] continuation lookup failed (proceeding): ${err}`);
+        }
+    }
+    // Spec 1944 §1.5 goal 3 — active pending skip + dedup:
+    //   • active-skip: if an unresolved pending decision still exists for this
+    //     session within the active window, suppress the new hint. The deny
+    //     gate (decision-hint-pending rule) will keep enforcing the existing
+    //     decision; we just don't pile up duplicate rows.
+    //   • dedup: same trimmed prompt in the dedup window is a special case of
+    //     active-skip (it surfaces the diagnostic differently in logs).
+    if (storage && eventContext) {
+        try {
+            const existing = storage.getMostRecentPendingDecision(eventContext.session_id, ACTIVE_PENDING_WINDOW_SECONDS, 
+            // global-governance Phase 1 (decision 7fa0f2ab): scope active-skip by
+            // project so a pending decision in another project on the same session
+            // doesn't suppress a legitimately new hint here.
+            eventContext.project_path);
+            if (existing) {
+                const sameTrigger = typeof existing.trigger_prompt === 'string' &&
+                    normalizePrompt(existing.trigger_prompt) === normalizePrompt(prompt);
+                logger.debug(`[DecisionHint] skipped (active pending exists, sameTrigger=${sameTrigger}) id=${existing.id}`);
+                return null;
+            }
+        }
+        catch (err) {
+            // Fail-silent — fall through to the normal emit path.
+            logger.debug(`[DecisionHint] active-skip lookup failed (proceeding): ${err}`);
+        }
+    }
+    const decision_id = randomBytes(4).toString('hex'); // 8-char hex
+    const summary = truncateSummary(prompt);
+    // Write decisions row (fail-silent — never block the pipeline).
+    if (storage && eventContext) {
+        try {
+            storage.writeDecision({
+                id: decision_id,
+                session_id: eventContext.session_id,
+                project_path: eventContext.project_path,
+                trigger_event_id: eventContext.event_id ?? null,
+                trigger_prompt: prompt,
+                suggested_agent: 'decision-maker',
+            });
+            logger.debug(`[DecisionHint] wrote decision row id=${decision_id}`);
+        }
+        catch (err) {
+            logger.warn(`[DecisionHint] failed to write decision row (skipped): ${err}`);
+        }
+    }
+    // formatHintMessage's first arg (workflowType) is display-only; the row
+    // itself is minted 'advisory' by writeDecision (decision 93e8fff1).
+    const message = formatHintMessage('advisory', 'decision-maker', summary, decision_id);
+    return { message, decision_id };
+}
+/**
+ * Spec 1944 §8 — trivial filter max length. trim() < TRIVIAL_MAX_LEN AND
+ * isLikelyTrivial() → guard fires.
+ *
+ * decision 7aa0ec63 (Option C, Q4): raised 10 → 15. Covers real-world batch
+ * controls like `启动 Batch 3 第一项` (15 chars) and `执行第二项` (5 chars) that
+ * previously slipped past the length cap. `批准 abc12345` (12 chars) is now
+ * also classified trivial, which is the desired behaviour — the matching
+ * pending decision row would already be approved by the parallel `cf decisions
+ * approve` flow, so no information is lost.
+ */
+const TRIVIAL_MAX_LEN = 15;
+/**
+ * Spec 1944 §1.5 — active pending skip window. While any unresolved pending
+ * decision row exists within this many seconds for the session, new hints are
+ * suppressed (avoids stacking dozens of pending rows). 1h matches the rule
+ * gate's own pending-lookup window (`getMostRecentPendingDecision`).
+ */
+const ACTIVE_PENDING_WINDOW_SECONDS = 3600;
+function normalizePrompt(text) {
+    return text.replace(/\s+/g, ' ').trim();
+}
+/**
+ * Returns true when the prompt is likely trivial (a simple approval or
+ * one-word command) and can skip the full decision-maker workflow.
+ *
+ * Two conditions — BOTH must be true to avoid false positives:
+ *   1. prompt length < 50 chars (short enough to be trivial)
+ *   2. Starts with or consists of a trivial keyword
+ *
+ * Used by formatHintMessage to suggest model=haiku for trivial prompts.
+ * The decision-maker template Step 0 uses a tighter threshold (< 30 chars)
+ * for its own fast-exit — this function uses 50 for the daemon-side hint
+ * to bias toward haiku earlier in the pipeline.
+ *
+ * Option B (decision b95e0956, 2026-05-29 — Q1): keyword set expanded to
+ * cover the real-world "continuation" short prompts that previously slipped
+ * through and forced a [DECISION HINT] emit for trivial follow-ups:
+ *   added: 提交 / 推送 / push / commit / 那就 / 修复吧 / 启动吧 / 开始 /
+ *          搞 / 做 / 开干 / 接着做 / 继续做
+ * Original list (好/对/是/继续/批准/approve/yes/ok/skip/确认/确定/go/
+ * proceed/done/完成/可以) preserved — additive expansion.
+ *
+ * @param s - The intent summary or raw prompt.
+ */
+export function isLikelyTrivial(s) {
+    if (s.length >= 50)
+        return false;
+    const trimmed = s.trim();
+    if (!trimmed)
+        return false;
+    // decision 7aa0ec63 (Option C, Q3) — greeting/informational extension.
+    // Greetings ("hi" / "hello" / "say hi" / "say hello" / "你好") are trivial
+    // regardless of exact wording, and short prompts ending in `?` / `？` are
+    // informational queries that the main thread should answer directly without
+    // going through decision-maker. Note: ASCII greetings require an end or
+    // non-word boundary (avoid matching `hint…` / `hire …`); CJK `你好` is
+    // checked separately because JS `\b` is ASCII-only.
+    if (/^你好/.test(trimmed))
+        return true;
+    if (/^(say\s+hi|say\s+hello)\b/i.test(trimmed))
+        return true;
+    if (/^(hi|hello)(\b|$)/i.test(trimmed))
+        return true;
+    if (trimmed.length < 30 && /[?？]\s*$/.test(trimmed))
+        return true;
+    // decision 7aa0ec63 (Option C, Q3) — batch-control verbs commonly used as
+    // continuation triggers (`启动 Batch 3`, `执行第二项`, `查看 KB`, `批准 X`).
+    // Kept additive to the prior keyword set (b95e0956); nothing is removed.
+    return /^(好|对|是|继续|批准|approve|yes|ok|skip|确认|确定|go|proceed|done|完成|可以|提交|推送|push|commit|那就|修复吧|启动吧|开始|搞|做|开干|接着做|继续做|启动|执行|查看|看看)/i.test(trimmed);
+}
+/**
+ * Option B (decision b95e0956, 2026-05-29 — Q1+Q2) — "continuation" prompt
+ * detection.
+ *
+ * Returns true when the current prompt is plausibly a continuation of recent
+ * decided work and should NOT trigger a fresh [DECISION HINT].
+ *
+ * Q2 contract: **both** conditions must hold (AND, not OR):
+ *   1. There are at least `CONTINUATION_MIN_RESOLVED` (=3) resolved decisions
+ *      for this session AND
+ *   2. The most recent resolved one is within `CONTINUATION_WINDOW_MS`
+ *      (=30 min)
+ *
+ * AND the current prompt itself must look continuation-flavoured — i.e.
+ * contain one of the Q1 recommended keywords. This avoids classifying a
+ * genuinely fresh long task as a continuation just because the session has
+ * been busy.
+ *
+ * @param prompt - The raw user prompt text.
+ * @param recentResolved - Output of `listRecentResolvedDecisions` for this
+ *                         session (any length; newest first).
+ * @param nowMs - Override clock for tests (defaults to Date.now()).
+ */
+export const CONTINUATION_WINDOW_MS = 30 * 60 * 1000; // 30 minutes
+export const CONTINUATION_MIN_RESOLVED = 3;
+/** Q1 keyword set used by isContinuation (subset of isLikelyTrivial). */
+const CONTINUATION_KEYWORDS_RE = /(提交|推送|push|commit|那就|修复吧|启动吧|开始|搞|做|开干|继续|接着做|ok|好)/i;
+export function isContinuation(prompt, recentResolved, nowMs = Date.now()) {
+    if (!prompt)
+        return false;
+    if (!Array.isArray(recentResolved))
+        return false;
+    // Q2 (count condition)
+    if (recentResolved.length < CONTINUATION_MIN_RESOLVED)
+        return false;
+    // Q2 (time-window condition)
+    const newest = recentResolved[0];
+    if (!newest)
+        return false;
+    const ts = newest.resolved_at ?? newest.created_at;
+    if (!ts)
+        return false;
+    const tsMs = Date.parse(ts);
+    if (!Number.isFinite(tsMs))
+        return false;
+    if (nowMs - tsMs > CONTINUATION_WINDOW_MS)
+        return false;
+    // Keyword condition — must look continuation-flavoured to count.
+    return CONTINUATION_KEYWORDS_RE.test(prompt.trim());
+}
+/**
+ * Formats the hint message body. Kept separate for unit-test readability.
+ *
+ * Compressed template (decision ed98c8e8, 2026-06-10): the old 38-line
+ * version re-taught the decision-maker 5-step workflow on EVERY hint —
+ * pure duplication of the CLAUDE.md "DECISION HINT 协议契约" section
+ * (the single authoritative text). Kept: `[DECISION HINT]` marker,
+ * copy-paste Task command, model suggestion, `<!-- decision-id -->`
+ * magic comment, one-line bypass.
+ */
+export function formatHintMessage(workflowType, suggestedAgent, intentSummary, decision_id) {
+    const suggestedModel = isLikelyTrivial(intentSummary) ? 'haiku' : 'sonnet';
+    const lines = [
+        '[DECISION HINT]',
+        '',
+        `daemon 判定本 prompt 值得决策。主线程第一动作：spawn \`decision-maker\``,
+        `（完整链路见 CLAUDE.md「DECISION HINT 协议契约」节）：`,
+        '',
+        `Task tool subagent_type='decision-maker' with prompt: "${intentSummary}"`,
+        '',
+        `建议 model：\`${suggestedModel}\`（trivial 用 haiku，complex 用 sonnet）；原推荐 agent: \`${suggestedAgent}\``,
+        `如果已经知道要做什么，直接告知并忽略本提示即可。`,
+    ];
+    if (decision_id) {
+        lines.push('');
+        lines.push(`<!-- decision-id: ${decision_id} -->`);
+        lines.push(`bypass: 在 prompt 中加 "skip decision" 跳过决策流程。`);
+    }
+    return lines.join('\n');
+}
+function truncateSummary(text) {
+    const oneLine = text.replace(/\s+/g, ' ').trim();
+    if (oneLine.length <= HINT_SUMMARY_MAX)
+        return oneLine;
+    return oneLine.slice(0, HINT_SUMMARY_MAX - 1) + '…';
+}
+//# sourceMappingURL=decision-hint.js.map

package/dist/daemon/services/decision-hint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-hint.js","sourceRoot":"","sources":["../../../src/daemon/services/decision-hint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,gEAAgE;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,iCAAiC,CAAC;AAEpF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,uCAAuC,GAAG,EAAE,CAAC;AAE1D,2DAA2D;AAC3D,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAC;AAExD,uDAAuD;AACvD,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,OAAO,EAAE,MAAM,CAAU,CAAC;AAEpF,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAAC,SAAoC;IACvE,OAAO,sBAAsB,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,sBAAsB,GAAa;IACvC,uBAAuB;IACvB,aAAa;IACb,uBAAuB;IACvB,qBAAqB;IACrB,0BAA0B;IAC1B,qBAAqB;IACrB,kBAAkB;IAClB,iBAAiB;IACjB,mFAAmF;IACnF,oBAAoB;CACrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,0BAA0B,GAC9B,mFAAmF,CAAC;AAEtF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,6DAA6D;IAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,kEAAkE;IAClE,0DAA0D;IAC1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,iEAAiE;IACjE,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA8B;IAC9D,IAAI,CAAC,OAAO;QAAE,OAAO,mBAAmB,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mCAAmC,CACjD,OAA8B;IAE9B,IAAI,CAAC,OAAO;QAAE,OAAO,uCAAuC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC;QACnE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,OAAO,uCAAuC,CAAC;QACjD,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,uCAAuC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,uCAAuC,CAAC;QAC3D,IAAI,CAAC,GAAG,mCAAmC,EAAE,CAAC;YAC5C,OAAO,uCAAuC,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uCAAuC,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAsB,EACtB,UAAqC,EACrC,aAAqB,EACrB,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,aAAa,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;YAC/B,UAAU;YACV,SAAS,EAAE,YAAY;YACvB,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,yEAAyE;YACzE,8DAA8D;YAC9D,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,SAAS,CAAC;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,UAAU,IAAI,EAAE,CAA4B,CAAC;YAC/D,MAAM,GAAG,GACP,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,GAAG,KAAK,gBAAgB;gBAAE,OAAO,IAAI,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,4CAA4C;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,aAAqB,mBAAmB,EACxC,OAA8B,EAC9B,YAIQ;IAER,+CAA+C;IAC/C,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/C,2EAA2E;IAC3E,2EAA2E;IAC3E,sEAAsE;IACtE,0EAA0E;IAC1E,0EAA0E;IAC1E,qCAAqC;IACrC,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,KAAK,CACV,4CAA4C,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CACpE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mFAAmF;IACnF,IAAI,UAAU,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;QAAE,OAAO,IAAI,CAAC;IAE9D,qEAAqE;IACrE,IAAI,uBAAuB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjD,4EAA4E;IAC5E,4EAA4E;IAC5E,yDAAyD;IACzD,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,OAAO,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;YACrE,IACE,6BAA6B,CAC3B,OAAO,EACP,YAAY,CAAC,UAAU,EACvB,eAAe,CAChB,EACD,CAAC;gBACD,MAAM,CAAC,KAAK,CACV,yCAAyC,YAAY,CAAC,UAAU,IAAI;oBAClE,UAAU,eAAe,IAAI,CAChC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,gEAAgE;IAChE,wEAAwE;IACxE,yCAAyC;IACzC,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAC/D,MAAM,CAAC,KAAK,CACV,mDAAmD,MAAM,CAAC,MAAM,GAAG,CACpE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,kDAAkD;IAClD,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAChD,YAAY,CAAC,UAAU,EACvB,yBAAyB,CAC1B,CAAC;YACF,IAAI,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,KAAK,CACV,8CAA8C,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,MAAM,GAAG,CAC5F,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,2DAA2D,GAAG,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,2EAA2E;IAC3E,wEAAwE;IACxE,yEAAyE;IACzE,sDAAsD;IACtD,0EAA0E;IAC1E,oEAAoE;IACpE,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,4BAA4B,CACnD,YAAY,CAAC,UAAU,EACvB,6BAA6B;YAC7B,sEAAsE;YACtE,uEAAuE;YACvE,iDAAiD;YACjD,YAAY,CAAC,YAAY,CAC1B,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;oBAC3C,eAAe,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC;gBACvE,MAAM,CAAC,KAAK,CACV,8DAA8D,WAAW,QAAQ,QAAQ,CAAC,EAAE,EAAE,CAC/F,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sDAAsD;YACtD,MAAM,CAAC,KAAK,CAAC,0DAA0D,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa;IACjE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAExC,gEAAgE;IAChE,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,CAAC,aAAa,CAAC;gBACpB,EAAE,EAAE,WAAW;gBACf,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,gBAAgB,EAAE,YAAY,CAAC,QAAQ,IAAI,IAAI;gBAC/C,cAAc,EAAE,MAAM;gBACtB,eAAe,EAAE,gBAAgB;aAClC,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,wCAAwC,WAAW,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,0DAA0D,GAAG,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACtF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAE3C,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,qEAAqE;IACrE,oDAAoD;IACpD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,0EAA0E;IAC1E,kEAAkE;IAClE,yEAAyE;IACzE,OAAO,4HAA4H,CAAC,IAAI,CACtI,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,yEAAyE;AACzE,MAAM,wBAAwB,GAC5B,uDAAuD,CAAC;AAE1D,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,cAAqF,EACrF,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,uBAAuB;IACvB,IAAI,cAAc,CAAC,MAAM,GAAG,yBAAyB;QAAE,OAAO,KAAK,CAAC;IACpE,6BAA6B;IAC7B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC;IACnD,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,KAAK,GAAG,IAAI,GAAG,sBAAsB;QAAE,OAAO,KAAK,CAAC;IACxD,iEAAiE;IACjE,OAAO,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,cAAsB,EACtB,aAAqB,EACrB,WAA0B;IAE1B,MAAM,cAAc,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE3E,MAAM,KAAK,GAAG;QACZ,iBAAiB;QACjB,EAAE;QACF,yDAAyD;QACzD,yCAAyC;QACzC,EAAE;QACF,0DAA0D,aAAa,GAAG;QAC1E,EAAE;QACF,cAAc,cAAc,qDAAqD,cAAc,IAAI;QACnG,0BAA0B;KAC3B,CAAC;IAEF,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,WAAW,MAAM,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CACR,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,IAAI,gBAAgB;QAAE,OAAO,OAAO,CAAC;IACvD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACtD,CAAC"}

package/dist/daemon/services/event-ttl-sweep.d.ts

@@ -0,0 +1,86 @@
+/**
+ * event-ttl-sweep — two-tier TTL maintenance for `events` (db-size optimization).
+ *
+ * Background
+ * ----------
+ * The live DB (~274 MB, 240 MB in `events`) was unbounded growth: ~17 MB/day,
+ * ~6 GB/yr at the current rate. After Batch F redaction the
+ * `tool_input_summary` (on `tool_intercepts`) carries the user-actionable bits
+ * of every intercepted tool call; raw `events.tool_input` is mostly dead
+ * weight after a week.
+ *
+ * Policy (configurable via forge_config):
+ *   - warm TTL (default 7d): rows older than this get `tool_input = NULL`.
+ *     Other event fields stay so analytics / dashboards still render.
+ *   - cold TTL (default 30d): rows older than this DELETEd entirely
+ *     (plus orphan task_events rows pruned).
+ *
+ * Run cadence: `events.sweep_interval_hours` (default 6h), scheduled by the
+ * daemon alongside the existing maintenance intervals. Capped at SWEEP_MAX_ROWS
+ * per pass to keep the SQLite writer lock short; if a pass hits the cap the
+ * next tick picks up the rest.
+ *
+ * Design notes
+ * ------------
+ * - Cold sweep runs FIRST (DELETEs free pages before warm UPDATE could touch
+ *   the same rows — saves one pass).
+ * - Both ops live in EventOperations to honor the "no db.prepare outside
+ *   Operations" rule (base.ts:402).
+ * - `tool_input_summary` is on `tool_intercepts`, not `events` — left
+ *   untouched here, surviving as the post-TTL fallback for rule audits.
+ */
+import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+import type { ConfigStore } from '../config-store.js';
+export interface SweepConfig {
+    /** Defaults to `events.warm_ttl_days` config (default 7). */
+    warmTtlDays?: number;
+    /** Defaults to `events.cold_ttl_days` config (default 30). */
+    coldTtlDays?: number;
+    /** Maximum rows touched per pass (per operation). Defaults to SWEEP_MAX_ROWS. */
+    maxRowsPerPass?: number;
+}
+export interface SweepResult {
+    /** Number of rows whose `tool_input` was NULLed in this pass. */
+    warmedNull: number;
+    /** Number of events rows DELETEd in this pass. */
+    coldDeleted: number;
+    /** Number of task_events orphan rows pruned during the cold DELETE. */
+    taskEventsPruned: number;
+    /** Number of free pages reclaimed by incremental_vacuum at end of sweep. */
+    pagesReclaimed: number;
+    /** True if either op hit `maxRowsPerPass` — caller should re-run sooner. */
+    morePending: boolean;
+}
+/** Default rows-per-pass cap. Tuned to ~few-seconds writer-lock budget. */
+export declare const SWEEP_MAX_ROWS = 10000;
+/** Config keys this service consults. */
+export declare const CFG_WARM_TTL = "events.warm_ttl_days";
+export declare const CFG_COLD_TTL = "events.cold_ttl_days";
+export declare const CFG_SWEEP_INTERVAL = "events.sweep_interval_hours";
+/** Default values seeded into forge_config on daemon startup. */
+export declare const DEFAULTS: {
+    readonly warmTtlDays: 7;
+    readonly coldTtlDays: 30;
+    readonly sweepIntervalHours: 6;
+};
+/**
+ * Resolve effective TTL params from explicit opts > forge_config > defaults.
+ * Exported for tests.
+ */
+export declare function resolveSweepConfig(configStore: ConfigStore, opts?: SweepConfig): {
+    warmTtlDays: number;
+    coldTtlDays: number;
+    maxRowsPerPass: number;
+};
+/**
+ * Run one TTL sweep pass. Idempotent; safe to call repeatedly.
+ *
+ * Order:
+ *   1) cold DELETE (rows >= coldTtlDays) — frees pages first
+ *   2) warm UPDATE  (rows >= warmTtlDays AND tool_input IS NOT NULL)
+ *
+ * Returns counters + a `morePending` hint so the caller knows when to skip
+ * waiting a full interval for the next pass.
+ */
+export declare function sweepEventTtl(storage: SQLiteStorage, configStore: ConfigStore, opts?: SweepConfig): SweepResult;
+//# sourceMappingURL=event-ttl-sweep.d.ts.map

package/dist/daemon/services/event-ttl-sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-ttl-sweep.d.ts","sourceRoot":"","sources":["../../../src/daemon/services/event-ttl-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,cAAc,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,2EAA2E;AAC3E,eAAO,MAAM,cAAc,QAAS,CAAC;AAErC,yCAAyC;AACzC,eAAO,MAAM,YAAY,yBAAyB,CAAC;AACnD,eAAO,MAAM,YAAY,yBAAyB,CAAC;AACnD,eAAO,MAAM,kBAAkB,gCAAgC,CAAC;AAEhE,iEAAiE;AACjE,eAAO,MAAM,QAAQ;;;;CAIX,CAAC;AAWX;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,GAAE,WAAgB,GAAG;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB,CAeA;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,WAAW,EACxB,IAAI,GAAE,WAAgB,GACrB,WAAW,CAwCb"}