@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/daemon/services/intercept-rollback-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intercept-rollback-guard.js","sourceRoot":"","sources":["../../../src/daemon/services/intercept-rollback-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAElD,yDAAyD;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAC9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,qCAAqC,CAAC;AACnF,MAAM,CAAC,MAAM,kCAAkC,GAAG,0CAA0C,CAAC;AAgB7F;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAEvB;IACA;IACA;IACA;IAKA;IATV,YACU,OAAsB,EACtB,WAAwB,EACxB,WAAmB,kBAAkB,EACrC,YAAoB,uBAAuB;IACnD;;;OAGG;IACK,wBAAgC,gCAAgC;QARhE,YAAO,GAAP,OAAO,CAAe;QACtB,gBAAW,GAAX,WAAW,CAAa;QACxB,aAAQ,GAAR,QAAQ,CAA6B;QACrC,cAAS,GAAT,SAAS,CAAkC;QAK3C,0BAAqB,GAArB,qBAAqB,CAA2C;IACvE,CAAC;IAEJ;;;;;;;;;;;;;;OAcG;IACH,qBAAqB,CAAC,IAGrB;QACC,MAAM,KAAK,GAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QACxG,IAAI,CAAC;YACH,iEAAiE;YACjE,yEAAyE;YACzE,wEAAwE;YACxE,wCAAwC;YACxC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,iBAAiB,CAAC;gBAAE,OAAO,KAAK,CAAC;YAEjE,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBAC5C,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,CAAC;aACxC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;YAC9B,8EAA8E;YAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAEhE,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;YAC3E,CAAC;YAED,qEAAqE;YACrE,kEAAkE;YAClE,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAChD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;YAC3E,CAAC;YAED,+EAA+E;YAC/E,IAAI,CAAC;gBACH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;gBACjD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,kCAAkC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;YAC3E,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;YACpE,MAAM,CAAC,IAAI,CACT,kEAAkE,IAAI,CAAC,SAAS,GAAG;gBACnF,IAAI,SAAS,cAAc,aAAa,YAAY,OAAO,CAAC,MAAM,mBAAmB;gBACrF,SAAS,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC9B,CAAC;YACF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,0CAA0C,GAAG,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,SAAiB,EAAE,OAAiB,EAAE,aAAqB;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,OAAO;QACL,sCAAsC;QACtC,GAAG,aAAa,qBAAqB,SAAS,cAAc,OAAO,CAAC,MAAM,MAAM;YAC9E,WAAW,QAAQ,cAAc;QACnC,oDAAoD;QACpD,4CAA4C;KAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/daemon/services/intercept-timeout-sweeper.d.ts

@@ -0,0 +1,58 @@
+/**
+ * InterceptTimeoutSweeper — Karpathy #4 C4 hotfix (2026-05-26).
+ *
+ * Why this exists:
+ *   PostToolUseHandler.maybeMarkInterceptOutcome only fires when ANOTHER tool
+ *   call lands within 30s of an intercept; it classifies the prior deny /
+ *   dry_run row as `obeyed` (different tool) or `override` (same tool re-run).
+ *   When the main thread instead STOPS — stops to ask the user, switches
+ *   plans, or just sits idle — no PostToolUse ever fires, and the
+ *   `tool_intercepts.outcome` column stays NULL forever. Live triage on a 7d
+ *   window found 1088 such NULL rows (1083 dry_run + 5 deny), draining the
+ *   C4 numerator to 0.01.
+ *
+ * Semantic interpretation:
+ *   "Main thread saw the hint and chose not to run any further tool inside
+ *   the classification window" === passive obey. We backfill those rows as
+ *   `outcome='obeyed'` after a generous 1h grace beyond the 30s window so
+ *   the active classifier always wins on close-to-the-edge races.
+ *
+ * Eligibility:
+ *   • decision IN ('deny', 'dry_run')   — `warn` is not a real enforcement
+ *                                          signal; `bypass` was already a
+ *                                          user opt-out (treated as override
+ *                                          intent — but we don't touch it).
+ *   • outcome IS NULL                   — the classifier never ran.
+ *   • timestamp <= now - graceMs        — fully out of any active window.
+ *
+ * The sweep is idempotent (only NULL rows match), cheap (single UPDATE …
+ * WHERE … with an index hint on idx_tool_intercepts_ts), and safe to call
+ * from any maintenance interval.
+ */
+import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+/**
+ * Grace window past the 30s PostToolUse classification before a NULL row is
+ * considered abandoned. 1h is generous on purpose — a row sitting NULL for
+ * an hour means the main thread either crashed, switched session, or stopped
+ * to think and never came back to the same intercept.
+ */
+export declare const INTERCEPT_TIMEOUT_GRACE_MS: number;
+export interface InterceptTimeoutSweepOptions {
+    /** Override the grace window; mainly used by tests. */
+    graceMs?: number;
+}
+export interface InterceptTimeoutSweepResult {
+    /** Rows that matched the eligibility predicate before update. */
+    scanned: number;
+    /** Rows actually flipped to `outcome='obeyed'`. Equals `scanned` on success. */
+    swept: number;
+}
+/**
+ * Run one sweep. Safe to call from any setInterval / startup hook.
+ *
+ * Returns counters so callers can decide whether to emit a log line — the
+ * daemon's maintenance loop only logs when something actually moved, to keep
+ * steady-state output quiet.
+ */
+export declare function sweepInterceptTimeouts(storage: SQLiteStorage, options?: InterceptTimeoutSweepOptions): InterceptTimeoutSweepResult;
+//# sourceMappingURL=intercept-timeout-sweeper.d.ts.map

package/dist/daemon/services/intercept-timeout-sweeper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intercept-timeout-sweeper.d.ts","sourceRoot":"","sources":["../../../src/daemon/services/intercept-timeout-sweeper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGlE;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAEzD,MAAM,WAAW,4BAA4B;IAC3C,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,4BAAiC,GACzC,2BAA2B,CA0C7B"}

package/dist/daemon/services/intercept-timeout-sweeper.js

@@ -0,0 +1,83 @@
+/**
+ * InterceptTimeoutSweeper — Karpathy #4 C4 hotfix (2026-05-26).
+ *
+ * Why this exists:
+ *   PostToolUseHandler.maybeMarkInterceptOutcome only fires when ANOTHER tool
+ *   call lands within 30s of an intercept; it classifies the prior deny /
+ *   dry_run row as `obeyed` (different tool) or `override` (same tool re-run).
+ *   When the main thread instead STOPS — stops to ask the user, switches
+ *   plans, or just sits idle — no PostToolUse ever fires, and the
+ *   `tool_intercepts.outcome` column stays NULL forever. Live triage on a 7d
+ *   window found 1088 such NULL rows (1083 dry_run + 5 deny), draining the
+ *   C4 numerator to 0.01.
+ *
+ * Semantic interpretation:
+ *   "Main thread saw the hint and chose not to run any further tool inside
+ *   the classification window" === passive obey. We backfill those rows as
+ *   `outcome='obeyed'` after a generous 1h grace beyond the 30s window so
+ *   the active classifier always wins on close-to-the-edge races.
+ *
+ * Eligibility:
+ *   • decision IN ('deny', 'dry_run')   — `warn` is not a real enforcement
+ *                                          signal; `bypass` was already a
+ *                                          user opt-out (treated as override
+ *                                          intent — but we don't touch it).
+ *   • outcome IS NULL                   — the classifier never ran.
+ *   • timestamp <= now - graceMs        — fully out of any active window.
+ *
+ * The sweep is idempotent (only NULL rows match), cheap (single UPDATE …
+ * WHERE … with an index hint on idx_tool_intercepts_ts), and safe to call
+ * from any maintenance interval.
+ */
+import { logger } from '../../core/utils/logger.js';
+/**
+ * Grace window past the 30s PostToolUse classification before a NULL row is
+ * considered abandoned. 1h is generous on purpose — a row sitting NULL for
+ * an hour means the main thread either crashed, switched session, or stopped
+ * to think and never came back to the same intercept.
+ */
+export const INTERCEPT_TIMEOUT_GRACE_MS = 60 * 60 * 1000;
+/**
+ * Run one sweep. Safe to call from any setInterval / startup hook.
+ *
+ * Returns counters so callers can decide whether to emit a log line — the
+ * daemon's maintenance loop only logs when something actually moved, to keep
+ * steady-state output quiet.
+ */
+export function sweepInterceptTimeouts(storage, options = {}) {
+    const graceMs = options.graceMs ?? INTERCEPT_TIMEOUT_GRACE_MS;
+    const cutoffIso = new Date(Date.now() - graceMs).toISOString();
+    try {
+        // Single transaction: count + update atomically so the scanned figure
+        // matches what we actually flipped.
+        const db = storage.getDatabase();
+        const scanned = db
+            .prepare(`SELECT COUNT(*) AS n FROM tool_intercepts
+         WHERE outcome IS NULL
+           AND decision IN ('deny','dry_run')
+           AND timestamp <= ?`)
+            .get(cutoffIso)?.n ?? 0;
+        if (scanned === 0) {
+            return { scanned: 0, swept: 0 };
+        }
+        const info = db
+            .prepare(`UPDATE tool_intercepts
+            SET outcome = 'obeyed'
+          WHERE outcome IS NULL
+            AND decision IN ('deny','dry_run')
+            AND timestamp <= ?`)
+            .run(cutoffIso);
+        const swept = Number(info.changes ?? 0);
+        if (swept > 0) {
+            logger.debug(`[InterceptTimeoutSweeper] swept ${swept} NULL-outcome row(s) ` +
+                `older than ${graceMs / 60000}min → obeyed (passive obey by silence)`);
+        }
+        return { scanned, swept };
+    }
+    catch (err) {
+        // Sweeps are observability — never a request blocker.
+        logger.warn(`[InterceptTimeoutSweeper] sweep failed: ${err}`);
+        return { scanned: 0, swept: 0 };
+    }
+}
+//# sourceMappingURL=intercept-timeout-sweeper.js.map

package/dist/daemon/services/intercept-timeout-sweeper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intercept-timeout-sweeper.js","sourceRoot":"","sources":["../../../src/daemon/services/intercept-timeout-sweeper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAczD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAsB,EACtB,UAAwC,EAAE;IAE1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,CAAC;QACH,sEAAsE;QACtE,oCAAoC;QACpC,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,OAAO,GAAI,EAAE;aAChB,OAAO,CACN;;;8BAGsB,CACvB;aACA,GAAG,CAAC,SAAS,CAA+B,EAAE,CAAC,IAAI,CAAC,CAAC;QAExD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN;;;;+BAIuB,CACxB;aACA,GAAG,CAAC,SAAS,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CACV,mCAAmC,KAAK,uBAAuB;gBAC/D,cAAc,OAAO,GAAG,KAAK,wCAAwC,CACtE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sDAAsD;QACtD,MAAM,CAAC,IAAI,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/daemon/services/kb-injector.d.ts

@@ -0,0 +1,57 @@
+/**
+ * KbInjector — queries the project knowledge base for a prompt and renders
+ * the additionalContext block.
+ *
+ * Extracted from `UserPromptHandler` (D-3 step 3). Single responsibility:
+ *   1. Probe `.forge-knowledge/` presence (cheap).
+ *   2. Run `queryKnowledge` (augmented with optional intent keywords).
+ *   3. Apply score threshold + return `{ block, hits }`.
+ *
+ * Caching: per-(session_id, prompt[:200]) LRU+TTL to dedupe consecutive
+ * Enter re-fires within 5 minutes. Bounded by 500 entries.
+ *
+ * The cache key includes `session_id` so different sessions never collide,
+ * but `kbQueryCache` is intentionally NOT cleared at Stop time — D-1 in the
+ * refactor spec resolved this: the 5-min TTL + 500-entry LRU bound is
+ * sufficient (worst case ~500KB held briefly), and enumerating session-
+ * prefixed keys would require a second index map.
+ */
+import type { UserPromptSubmitEvent } from '../../core/types.js';
+import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+import type { QueryHit } from '../../knowledge/query.js';
+export declare class KbInjector {
+    private readonly storage;
+    static readonly KB_SCORE_THRESHOLD = 25;
+    /** Cap on KB pages injected per prompt to avoid context bloat. */
+    static readonly KB_MAX_RESULTS = 2;
+    /** Per-page content truncation (chars) — keeps the additionalContext modest. */
+    static readonly KB_CONTENT_TRUNCATE = 800;
+    /** LRU+TTL cache TTL for de-duping Enter re-fires of the same prompt. */
+    static readonly KB_CACHE_TTL_MS: number;
+    /** Cache capacity (entries). */
+    static readonly KB_CACHE_MAX = 500;
+    private kbQueryCache;
+    constructor(storage?: SQLiteStorage | null);
+    /**
+     * Query the KB and (if any qualifying hits) return a formatted block ready
+     * to push onto `additionalContext`. Always fail-silent — KB failures must
+     * not break the prompt path.
+     *
+     * Returns `null` block when there are zero qualifying hits.
+     */
+    inject(event: UserPromptSubmitEvent, prompt: string, extraKeywords?: string[]): Promise<{
+        block: string | null;
+        hits: QueryHit[];
+    }>;
+    /**
+     * Query the project knowledge base, returning only hits at or above the
+     * MVP1 score threshold. Always fail-silent — KB failures must not break
+     * the UserPrompt pipeline (resume / convention / skill remain unaffected).
+     *
+     * Cache key is `${session_id}:${sha1(prompt[:200])}` with a 5-minute TTL.
+     * This dedupes consecutive Enter re-fires of the same prompt without
+     * leaking memory across sessions.
+     */
+    private queryKbForPrompt;
+}
+//# sourceMappingURL=kb-injector.d.ts.map

package/dist/daemon/services/kb-injector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-injector.d.ts","sourceRoot":"","sources":["../../../src/daemon/services/kb-injector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAIlE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAOzD,qBAAa,UAAU;IA0BT,OAAO,CAAC,QAAQ,CAAC,OAAO;IAdpC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,MAAM;IACxC,kEAAkE;IAClE,MAAM,CAAC,QAAQ,CAAC,cAAc,KAAK;IACnC,gFAAgF;IAChF,MAAM,CAAC,QAAQ,CAAC,mBAAmB,OAAO;IAC1C,yEAAyE;IACzE,MAAM,CAAC,QAAQ,CAAC,eAAe,SAAiB;IAChD,gCAAgC;IAChC,MAAM,CAAC,QAAQ,CAAC,YAAY,OAAO;IAEnC,OAAO,CAAC,YAAY,CAElB;gBAE2B,OAAO,GAAE,aAAa,GAAG,IAAW;IAEjE;;;;;;OAMG;IACG,MAAM,CACV,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,EACd,aAAa,GAAE,MAAM,EAAO,GAC3B,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC;IAYtD;;;;;;;;OAQG;YACW,gBAAgB;CAgD/B"}

package/dist/daemon/services/kb-injector.js

@@ -0,0 +1,148 @@
+/**
+ * KbInjector — queries the project knowledge base for a prompt and renders
+ * the additionalContext block.
+ *
+ * Extracted from `UserPromptHandler` (D-3 step 3). Single responsibility:
+ *   1. Probe `.forge-knowledge/` presence (cheap).
+ *   2. Run `queryKnowledge` (augmented with optional intent keywords).
+ *   3. Apply score threshold + return `{ block, hits }`.
+ *
+ * Caching: per-(session_id, prompt[:200]) LRU+TTL to dedupe consecutive
+ * Enter re-fires within 5 minutes. Bounded by 500 entries.
+ *
+ * The cache key includes `session_id` so different sessions never collide,
+ * but `kbQueryCache` is intentionally NOT cleared at Stop time — D-1 in the
+ * refactor spec resolved this: the 5-min TTL + 500-entry LRU bound is
+ * sufficient (worst case ~500KB held briefly), and enumerating session-
+ * prefixed keys would require a second index map.
+ */
+// Namespace import (not named) so test code can `vi.spyOn(knowledgeQuery, ...)`
+// and have the service see the stub — named imports bind eagerly under ESM.
+import * as knowledgeQuery from '../../knowledge/query.js';
+import { LRUCache } from '../../core/utils/lru-cache.js';
+import { createHash } from 'node:crypto';
+import { logger } from '../../core/utils/logger.js';
+import { truncateString } from '../../core/utils/format.js';
+import { wrapInjectBlock } from '../utils/inject-block.js';
+export class KbInjector {
+    storage;
+    // ── KB injection (MVP1) ──────────────────────────────────────────────────
+    // Score threshold below which we don't inject. History:
+    //   spec §4.1 estimated 30 → too strict (ASCII prompts maxed at ~30)
+    //   2026-05-22 calibration → 10 (CJK still dead because tokenize 无分词)
+    //   2026-05-22 KPI fix → 5, after CJK n-gram tokenize landed
+    //     (n-gram tokens lower per-hit score; real CJK technical prompt
+    //      "如何修复 daemon socket bug" hits modules/daemon.md @ score 7).
+    //   2026-06-10 审计（decision 148f7a0a）→ 25 止血：threshold=5 时 28 天注入
+    //     277 条、注入后同会话主动 KB MCP 调用仅 3 次（采纳率 ≈0）。回调到 25
+    //     只留高置信命中，同时配套 injections.adopted_at 采纳 telemetry 攒 4 周
+    //     数据后再定去留。
+    static KB_SCORE_THRESHOLD = 25;
+    /** Cap on KB pages injected per prompt to avoid context bloat. */
+    static KB_MAX_RESULTS = 2;
+    /** Per-page content truncation (chars) — keeps the additionalContext modest. */
+    static KB_CONTENT_TRUNCATE = 800;
+    /** LRU+TTL cache TTL for de-duping Enter re-fires of the same prompt. */
+    static KB_CACHE_TTL_MS = 5 * 60 * 1000;
+    /** Cache capacity (entries). */
+    static KB_CACHE_MAX = 500;
+    kbQueryCache = new LRUCache(KbInjector.KB_CACHE_MAX);
+    constructor(storage = null) {
+        this.storage = storage;
+    }
+    /**
+     * Query the KB and (if any qualifying hits) return a formatted block ready
+     * to push onto `additionalContext`. Always fail-silent — KB failures must
+     * not break the prompt path.
+     *
+     * Returns `null` block when there are zero qualifying hits.
+     */
+    async inject(event, prompt, extraKeywords = []) {
+        const hits = await this.queryKbForPrompt(event.session_id, event.project_path, prompt, extraKeywords);
+        if (hits.length === 0)
+            return { block: null, hits: [] };
+        const block = formatKbBlock(hits, KbInjector.KB_CONTENT_TRUNCATE);
+        return { block, hits };
+    }
+    /**
+     * Query the project knowledge base, returning only hits at or above the
+     * MVP1 score threshold. Always fail-silent — KB failures must not break
+     * the UserPrompt pipeline (resume / convention / skill remain unaffected).
+     *
+     * Cache key is `${session_id}:${sha1(prompt[:200])}` with a 5-minute TTL.
+     * This dedupes consecutive Enter re-fires of the same prompt without
+     * leaking memory across sessions.
+     */
+    async queryKbForPrompt(sessionId, projectPath, prompt, extraKeywords) {
+        try {
+            if (!knowledgeQuery.isKnowledgeBuilt(projectPath))
+                return [];
+            const cacheKey = makeKbCacheKey(sessionId, prompt);
+            const now = Date.now();
+            const cached = this.kbQueryCache.get(cacheKey);
+            if (cached && cached.expiresAt > now) {
+                logger.debug(`[KbInjector] cache hit (${cached.hits.length} hits)`);
+                return cached.hits;
+            }
+            const augmentedQuery = extraKeywords.length > 0
+                ? `${prompt} ${extraKeywords.join(' ')}`
+                : prompt;
+            const result = await knowledgeQuery.queryKnowledge(augmentedQuery, {
+                projectRoot: projectPath,
+                maxResults: KbInjector.KB_MAX_RESULTS,
+                // Skip repo-map symbol hits in the inject path: pages already carry
+                // file:line refs and symbol noise would just lengthen the prompt.
+                includeRepoMap: false,
+                storage: this.storage ?? undefined,
+                // decision d24cd3a2 Task B: tag automatic per-prompt probes so they are
+                // distinguishable from deliberate `cf knowledge query --reason` pulls
+                // (source='cli'). agent_id = the session being probed.
+                source: 'daemon-probe',
+                agentId: sessionId,
+            });
+            const qualifying = result.pages.filter((h) => h.score >= KbInjector.KB_SCORE_THRESHOLD);
+            this.kbQueryCache.set(cacheKey, {
+                hits: qualifying,
+                expiresAt: now + KbInjector.KB_CACHE_TTL_MS,
+            });
+            return qualifying;
+        }
+        catch (err) {
+            logger.warn(`[KbInjector] KB query failed (silently skipped): ${err}`);
+            return [];
+        }
+    }
+}
+// ── Module-private helpers ──────────────────────────────────────────────────
+/**
+ * Build a stable cache key from `sessionId` + the first 200 chars of `prompt`
+ * (hashed to keep the key small and avoid logging concerns).
+ */
+function makeKbCacheKey(sessionId, prompt) {
+    const hash = createHash('sha1').update(prompt.slice(0, 200)).digest('hex');
+    return `${sessionId}:${hash}`;
+}
+/**
+ * Render KB query hits into the additionalContext block (spec §4.1).
+ * Layout mirrors CLAUDE.md:194-206 — banners, per-page header with score &
+ * matched keywords, truncated content, then a "关键文件" list of refs.
+ */
+function formatKbBlock(hits, contentTruncate) {
+    const sections = hits.map((hit) => {
+        const matched = hit.matched_keywords.slice(0, 5).join(', ');
+        const header = `### ${hit.page.name}（score ${hit.score}${matched ? `, matched: ${matched}` : ''}）`;
+        const body = truncateString(hit.page.content, contentTruncate);
+        const refLines = hit.page.refs.slice(0, 4).map((r) => {
+            const sym = r.symbol ? ` — ${r.symbol}` : '';
+            return `- ${r.file}:${r.lineStart}${sym}`;
+        });
+        const refs = refLines.length > 0 ? `\n关键文件：\n${refLines.join('\n')}` : '';
+        return `${header}\n\n${body}${refs}`;
+    });
+    return wrapInjectBlock({
+        openLine: '━━━ 项目背景（来自 .forge-knowledge/）━━━',
+        // Blank lines on both sides preserve the pre-refactor visual padding.
+        body: `\n${sections.join('\n\n')}\n`,
+    });
+}
+//# sourceMappingURL=kb-injector.js.map

package/dist/daemon/services/kb-injector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-injector.js","sourceRoot":"","sources":["../../../src/daemon/services/kb-injector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,gFAAgF;AAChF,4EAA4E;AAC5E,OAAO,KAAK,cAAc,MAAM,0BAA0B,CAAC;AAE3D,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,MAAM,OAAO,UAAU;IA0BQ;IAzB7B,4EAA4E;IAC5E,wDAAwD;IACxD,qEAAqE;IACrE,sEAAsE;IACtE,6DAA6D;IAC7D,oEAAoE;IACpE,mEAAmE;IACnE,iEAAiE;IACjE,mDAAmD;IACnD,4DAA4D;IAC5D,eAAe;IACf,MAAM,CAAU,kBAAkB,GAAG,EAAE,CAAC;IACxC,kEAAkE;IAClE,MAAM,CAAU,cAAc,GAAG,CAAC,CAAC;IACnC,gFAAgF;IAChF,MAAM,CAAU,mBAAmB,GAAG,GAAG,CAAC;IAC1C,yEAAyE;IACzE,MAAM,CAAU,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAChD,gCAAgC;IAChC,MAAM,CAAU,YAAY,GAAG,GAAG,CAAC;IAE3B,YAAY,GAAG,IAAI,QAAQ,CACjC,UAAU,CAAC,YAAY,CACxB,CAAC;IAEF,YAA6B,UAAgC,IAAI;QAApC,YAAO,GAAP,OAAO,CAA6B;IAAG,CAAC;IAErE;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,KAA4B,EAC5B,MAAc,EACd,gBAA0B,EAAE;QAE5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACtC,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,YAAY,EAClB,MAAM,EACN,aAAa,CACd,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB,CAC5B,SAAiB,EACjB,WAAmB,EACnB,MAAc,EACd,aAAuB;QAEvB,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,WAAW,CAAC;gBAAE,OAAO,EAAE,CAAC;YAE7D,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;gBACpE,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC7C,CAAC,CAAC,GAAG,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACxC,CAAC,CAAC,MAAM,CAAC;YAEX,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,cAAc,EAAE;gBACjE,WAAW,EAAE,WAAW;gBACxB,UAAU,EAAE,UAAU,CAAC,cAAc;gBACrC,oEAAoE;gBACpE,kEAAkE;gBAClE,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;gBAClC,wEAAwE;gBACxE,sEAAsE;gBACtE,uDAAuD;gBACvD,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,UAAU,CAAC,kBAAkB,CAChD,CAAC;YAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC9B,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,GAAG,GAAG,UAAU,CAAC,eAAe;aAC5C,CAAC,CAAC;YACH,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,oDAAoD,GAAG,EAAE,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;;AAGH,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,cAAc,CAAC,SAAiB,EAAE,MAAc;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,OAAO,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAgB,EAAE,eAAuB;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;QACnG,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,GAAG,MAAM,OAAO,IAAI,GAAG,IAAI,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,OAAO,eAAe,CAAC;QACrB,QAAQ,EAAE,mCAAmC;QAC7C,sEAAsE;QACtE,IAAI,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;KACrC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/services/kb-rebuild-scheduler.d.ts

@@ -0,0 +1,95 @@
+/**
+ * kb-rebuild-scheduler — daemon-side automatic KB index rebuild scheduling.
+ *
+ * Background (decision e888352d, full-link audit)
+ * -----------------------------------------------
+ * The full-link audit found the KB index can rot: `kb_build_log`'s last build
+ * was 20 days stale, and there was no auto-rebuild trigger — operators had to
+ * remember to run `cf knowledge build`. KB retrieval itself is healthy; the gap
+ * was a missing *schedule*.
+ *
+ * Design (minimal, reuse-first)
+ * -----------------------------
+ * Mirrors the established daemon maintenance pattern (event-ttl-sweep,
+ * codegraph-sync): a pure decision function consulted on a `setInterval`
+ * cadence under the shared maintenance mutex. No new cron, no fs.watch.
+ *
+ * Trigger strategy — staleness only (simplest correct signal):
+ *   - Read the last `kb_build_log` row for the project via `queryLastKbBuild`.
+ *   - If the last successful build is older than `kb.stale_threshold_days`
+ *     (default 7), a rebuild is due.
+ *   - If there is NO build log row at all, a rebuild is due (index never built).
+ *   - A build currently `running` (per kb_build_log) is NOT re-triggered.
+ *
+ * The actual build is delegated to the existing `BuildManager` (single-instance
+ * concurrency control + kb_build_log telemetry already lives there). The daemon
+ * passes `triggerBuild` / `isBuildBusy` callbacks so this service keeps ZERO
+ * static edges into `src/web/` (BuildManager lives under web/, lazy-loaded).
+ *
+ * Fail-silent: every storage / trigger error is caught + logged at warn level.
+ * A scheduler hiccup must NEVER crash the daemon or block the maintenance loop.
+ */
+import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+import type { KbBuildLogRow } from '../../core/storage/knowledge.js';
+import type { ConfigStore } from '../config-store.js';
+/** Config key: master on/off switch for auto-rebuild (default ON). */
+export declare const CFG_AUTO_REBUILD_ENABLED = "kb.auto_rebuild_enabled";
+/** Config key: staleness threshold in days before a rebuild is due. */
+export declare const CFG_STALE_THRESHOLD_DAYS = "kb.stale_threshold_days";
+/** Config key: how often the daemon checks for staleness (hours). */
+export declare const CFG_CHECK_INTERVAL_HOURS = "kb.rebuild_check_interval_hours";
+/** Built-in defaults. Conservative — 7d stale, checked every 6h. */
+export declare const DEFAULTS: {
+    /** Master switch. Default ON so freshness is automatic out of the box. */
+    readonly enabled: true;
+    /** Rebuild when the last build is older than this many days. */
+    readonly staleThresholdDays: 7;
+    /** Cadence at which the daemon evaluates staleness. */
+    readonly checkIntervalHours: 6;
+};
+export interface RebuildConfig {
+    enabled: boolean;
+    staleThresholdDays: number;
+    checkIntervalHours: number;
+}
+/**
+ * Resolve effective rebuild config from forge_config > defaults. Exported for
+ * tests + daemon wiring.
+ */
+export declare function resolveRebuildConfig(configStore: ConfigStore): RebuildConfig;
+export type RebuildDecision = {
+    due: true;
+    reason: 'never-built' | 'stale';
+} | {
+    due: false;
+    reason: 'disabled' | 'fresh' | 'in-progress';
+};
+/**
+ * Pure decision: should the KB index be rebuilt now?
+ *
+ * @param lastBuild  the most recent kb_build_log row for the project, or null.
+ * @param config     resolved rebuild config.
+ * @param now        current epoch ms (injectable for tests).
+ */
+export declare function decideRebuild(lastBuild: KbBuildLogRow | null, config: RebuildConfig, now?: number): RebuildDecision;
+/** Side-effect callbacks the daemon wires to the (web-layer) BuildManager. */
+export interface RebuildHooks {
+    /** True when a build is currently running (BuildManager.isBusy). */
+    isBuildBusy: () => boolean;
+    /** Kick off an apply-mode rebuild for `projectRoot`. May throw. */
+    triggerBuild: (projectRoot: string) => void;
+}
+export interface RebuildCheckResult {
+    decision: RebuildDecision;
+    /** True iff a build was actually kicked off this pass. */
+    triggered: boolean;
+}
+/**
+ * Run one staleness check pass for `projectRoot`. Idempotent + fail-silent.
+ *
+ * Looks up the last build, applies `decideRebuild`, and — when due and no build
+ * is already running — invokes `hooks.triggerBuild`. Any error is swallowed
+ * (logged) so the maintenance loop is never disrupted.
+ */
+export declare function runKbRebuildCheck(storage: SQLiteStorage, configStore: ConfigStore, projectRoot: string, hooks: RebuildHooks, now?: number): RebuildCheckResult;
+//# sourceMappingURL=kb-rebuild-scheduler.d.ts.map

package/dist/daemon/services/kb-rebuild-scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-rebuild-scheduler.d.ts","sourceRoot":"","sources":["../../../src/daemon/services/kb-rebuild-scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,sEAAsE;AACtE,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAClE,uEAAuE;AACvE,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAClE,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,oCAAoC,CAAC;AAE1E,oEAAoE;AACpE,eAAO,MAAM,QAAQ;IACnB,0EAA0E;;IAE1E,gEAAgE;;IAEhE,uDAAuD;;CAE/C,CAAC;AAIX,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAyBD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,CAc5E;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,GAAG,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAA;CAAE,GAC9C;IAAE,GAAG,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,aAAa,CAAA;CAAE,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,aAAa,GAAG,IAAI,EAC/B,MAAM,EAAE,aAAa,EACrB,GAAG,GAAE,MAAmB,GACvB,eAAe,CAejB;AAED,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,WAAW,EAAE,MAAM,OAAO,CAAC;IAC3B,mEAAmE;IACnE,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,eAAe,CAAC;IAC1B,0DAA0D;IAC1D,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,YAAY,EACnB,GAAG,GAAE,MAAmB,GACvB,kBAAkB,CAuCpB"}

package/dist/daemon/services/kb-rebuild-scheduler.js

@@ -0,0 +1,149 @@
+/**
+ * kb-rebuild-scheduler — daemon-side automatic KB index rebuild scheduling.
+ *
+ * Background (decision e888352d, full-link audit)
+ * -----------------------------------------------
+ * The full-link audit found the KB index can rot: `kb_build_log`'s last build
+ * was 20 days stale, and there was no auto-rebuild trigger — operators had to
+ * remember to run `cf knowledge build`. KB retrieval itself is healthy; the gap
+ * was a missing *schedule*.
+ *
+ * Design (minimal, reuse-first)
+ * -----------------------------
+ * Mirrors the established daemon maintenance pattern (event-ttl-sweep,
+ * codegraph-sync): a pure decision function consulted on a `setInterval`
+ * cadence under the shared maintenance mutex. No new cron, no fs.watch.
+ *
+ * Trigger strategy — staleness only (simplest correct signal):
+ *   - Read the last `kb_build_log` row for the project via `queryLastKbBuild`.
+ *   - If the last successful build is older than `kb.stale_threshold_days`
+ *     (default 7), a rebuild is due.
+ *   - If there is NO build log row at all, a rebuild is due (index never built).
+ *   - A build currently `running` (per kb_build_log) is NOT re-triggered.
+ *
+ * The actual build is delegated to the existing `BuildManager` (single-instance
+ * concurrency control + kb_build_log telemetry already lives there). The daemon
+ * passes `triggerBuild` / `isBuildBusy` callbacks so this service keeps ZERO
+ * static edges into `src/web/` (BuildManager lives under web/, lazy-loaded).
+ *
+ * Fail-silent: every storage / trigger error is caught + logged at warn level.
+ * A scheduler hiccup must NEVER crash the daemon or block the maintenance loop.
+ */
+import { logger } from '../../core/utils/logger.js';
+/** Config key: master on/off switch for auto-rebuild (default ON). */
+export const CFG_AUTO_REBUILD_ENABLED = 'kb.auto_rebuild_enabled';
+/** Config key: staleness threshold in days before a rebuild is due. */
+export const CFG_STALE_THRESHOLD_DAYS = 'kb.stale_threshold_days';
+/** Config key: how often the daemon checks for staleness (hours). */
+export const CFG_CHECK_INTERVAL_HOURS = 'kb.rebuild_check_interval_hours';
+/** Built-in defaults. Conservative — 7d stale, checked every 6h. */
+export const DEFAULTS = {
+    /** Master switch. Default ON so freshness is automatic out of the box. */
+    enabled: true,
+    /** Rebuild when the last build is older than this many days. */
+    staleThresholdDays: 7,
+    /** Cadence at which the daemon evaluates staleness. */
+    checkIntervalHours: 6,
+};
+const MS_PER_DAY = 86_400_000;
+/** Read a boolean from ConfigStore ('1'/'true'/'on' → true), else fallback. */
+function readBoolConfig(configStore, key, fallback) {
+    const raw = configStore.get(key);
+    if (raw === undefined)
+        return fallback;
+    const v = raw.trim().toLowerCase();
+    if (v === '1' || v === 'true' || v === 'on' || v === 'yes')
+        return true;
+    if (v === '0' || v === 'false' || v === 'off' || v === 'no')
+        return false;
+    return fallback;
+}
+/** Read a positive number from ConfigStore, falling back on bad / missing input. */
+function readPositiveNumberConfig(configStore, key, fallback) {
+    const raw = configStore.get(key);
+    if (raw === undefined)
+        return fallback;
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n <= 0)
+        return fallback;
+    return n;
+}
+/**
+ * Resolve effective rebuild config from forge_config > defaults. Exported for
+ * tests + daemon wiring.
+ */
+export function resolveRebuildConfig(configStore) {
+    return {
+        enabled: readBoolConfig(configStore, CFG_AUTO_REBUILD_ENABLED, DEFAULTS.enabled),
+        staleThresholdDays: readPositiveNumberConfig(configStore, CFG_STALE_THRESHOLD_DAYS, DEFAULTS.staleThresholdDays),
+        checkIntervalHours: readPositiveNumberConfig(configStore, CFG_CHECK_INTERVAL_HOURS, DEFAULTS.checkIntervalHours),
+    };
+}
+/**
+ * Pure decision: should the KB index be rebuilt now?
+ *
+ * @param lastBuild  the most recent kb_build_log row for the project, or null.
+ * @param config     resolved rebuild config.
+ * @param now        current epoch ms (injectable for tests).
+ */
+export function decideRebuild(lastBuild, config, now = Date.now()) {
+    if (!config.enabled)
+        return { due: false, reason: 'disabled' };
+    // Never built → always due (no index to drift from, but nothing to query either).
+    if (!lastBuild)
+        return { due: true, reason: 'never-built' };
+    // A build already in flight — don't pile on. The BuildManager also guards
+    // concurrency, but short-circuiting here avoids a redundant trigger attempt.
+    if (lastBuild.status === 'running')
+        return { due: false, reason: 'in-progress' };
+    const ageMs = now - lastBuild.ts;
+    const thresholdMs = config.staleThresholdDays * MS_PER_DAY;
+    if (ageMs >= thresholdMs)
+        return { due: true, reason: 'stale' };
+    return { due: false, reason: 'fresh' };
+}
+/**
+ * Run one staleness check pass for `projectRoot`. Idempotent + fail-silent.
+ *
+ * Looks up the last build, applies `decideRebuild`, and — when due and no build
+ * is already running — invokes `hooks.triggerBuild`. Any error is swallowed
+ * (logged) so the maintenance loop is never disrupted.
+ */
+export function runKbRebuildCheck(storage, configStore, projectRoot, hooks, now = Date.now()) {
+    const config = resolveRebuildConfig(configStore);
+    let lastBuild = null;
+    try {
+        lastBuild = storage.queryLastKbBuild(projectRoot);
+    }
+    catch (err) {
+        logger.warn(`[kb-rebuild] queryLastKbBuild failed: ${err}`);
+        return { decision: { due: false, reason: 'fresh' }, triggered: false };
+    }
+    const decision = decideRebuild(lastBuild, config, now);
+    if (!decision.due) {
+        return { decision, triggered: false };
+    }
+    // Double-guard against an in-flight build the kb_build_log row may not yet
+    // reflect (e.g. a manual `cf knowledge build` running this instant).
+    let busy = false;
+    try {
+        busy = hooks.isBuildBusy();
+    }
+    catch (err) {
+        logger.warn(`[kb-rebuild] isBuildBusy probe failed: ${err}`);
+    }
+    if (busy) {
+        return { decision, triggered: false };
+    }
+    try {
+        hooks.triggerBuild(projectRoot);
+        logger.info(`[kb-rebuild] triggered auto-rebuild for ${projectRoot} (reason: ${decision.reason})`);
+        return { decision, triggered: true };
+    }
+    catch (err) {
+        // fail-silent: a failed trigger must not crash the daemon.
+        logger.warn(`[kb-rebuild] triggerBuild failed for ${projectRoot}: ${err}`);
+        return { decision, triggered: false };
+    }
+}
+//# sourceMappingURL=kb-rebuild-scheduler.js.map

package/dist/daemon/services/kb-rebuild-scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-rebuild-scheduler.js","sourceRoot":"","sources":["../../../src/daemon/services/kb-rebuild-scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAKpD,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAClE,uEAAuE;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAClE,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,iCAAiC,CAAC;AAE1E,oEAAoE;AACpE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,0EAA0E;IAC1E,OAAO,EAAE,IAAI;IACb,gEAAgE;IAChE,kBAAkB,EAAE,CAAC;IACrB,uDAAuD;IACvD,kBAAkB,EAAE,CAAC;CACb,CAAC;AAEX,MAAM,UAAU,GAAG,UAAU,CAAC;AAQ9B,+EAA+E;AAC/E,SAAS,cAAc,CAAC,WAAwB,EAAE,GAAW,EAAE,QAAiB;IAC9E,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oFAAoF;AACpF,SAAS,wBAAwB,CAC/B,WAAwB,EACxB,GAAW,EACX,QAAgB;IAEhB,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAwB;IAC3D,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,WAAW,EAAE,wBAAwB,EAAE,QAAQ,CAAC,OAAO,CAAC;QAChF,kBAAkB,EAAE,wBAAwB,CAC1C,WAAW,EACX,wBAAwB,EACxB,QAAQ,CAAC,kBAAkB,CAC5B;QACD,kBAAkB,EAAE,wBAAwB,CAC1C,WAAW,EACX,wBAAwB,EACxB,QAAQ,CAAC,kBAAkB,CAC5B;KACF,CAAC;AACJ,CAAC;AAMD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,SAA+B,EAC/B,MAAqB,EACrB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAE/D,kFAAkF;IAClF,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAE5D,0EAA0E;IAC1E,6EAA6E;IAC7E,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAEjF,MAAM,KAAK,GAAG,GAAG,GAAG,SAAS,CAAC,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,MAAM,CAAC,kBAAkB,GAAG,UAAU,CAAC;IAC3D,IAAI,KAAK,IAAI,WAAW;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAEhE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsB,EACtB,WAAwB,EACxB,WAAmB,EACnB,KAAmB,EACnB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAEjD,IAAI,SAAS,GAAyB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,2EAA2E;IAC3E,qEAAqE;IACrE,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,0CAA0C,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,CAAC;QACH,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CACT,2CAA2C,WAAW,aAAa,QAAQ,CAAC,MAAM,GAAG,CACtF,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2DAA2D;QAC3D,MAAM,CAAC,IAAI,CAAC,wCAAwC,WAAW,KAAK,GAAG,EAAE,CAAC,CAAC;QAC3E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;AACH,CAAC"}