@winspan/claude-forge 8.54.4 → 9.2.0

package/dist/daemon/config-store.js

@@ -0,0 +1,137 @@
+/**
+ * ConfigStore — runtime feature-flag KV (v9.x Phase 0)
+ *
+ * Wraps the `forge_config` SQLite table so handlers / services can probe a
+ * flag without recompilation. Used by Phases 1-9 of the master roadmap
+ * (PreToolUse interception / feedback loop / workflow recommender / agent
+ * writeback ...). Each phase ships behind its own flag, default OFF.
+ *
+ * MVP1 (KB injection) is already shipped, so `kb_inject.enabled` defaults to
+ * `'true'`. All other Phase-N flags default `'false'` and are flipped to
+ * `'true'` by whoever rolls out that phase (CLI `cf config set ...` or
+ * Web tuning UI in Phase 8).
+ *
+ * Seeded values are inserted only if the key is absent — user edits are
+ * preserved across daemon restarts.
+ */
+/**
+ * Default feature flags seeded on daemon startup.
+ *
+ * Add new flags here as later phases land; never delete existing keys
+ * (downstream tooling may probe them and would silently get the default-false
+ * behaviour, which is the wrong silent contract).
+ */
+export const DEFAULT_FLAGS = Object.freeze({
+    // MVP1 shipped (commit 4a13e869) — default on.
+    'kb_inject.enabled': 'true',
+    // Phase 1: PreToolUseHandler + rules registry + tool_intercepts table.
+    // Phase 2c: default flipped 'false' → 'true' once the 4 safety nets landed
+    // (whitelist / bypass file / rollback / observation_until). Existing user
+    // installs keep whatever they had via seedDefaults' if-missing semantics;
+    // only fresh installs see the strict default. To opt out:
+    //   cf config set pre_tool_intercept.enabled false
+    'pre_tool_intercept.enabled': 'true',
+    // 8-in-1 Phase D (2026-05-27): per-project intercept disable. Comma-
+    // separated list of absolute project path prefixes; any project whose path
+    // starts with one of these strings has `PreToolUseHandler` early-exit
+    // BEFORE the whitelist check (= zero rule writes, zero intercepts).
+    //
+    // Default empty. Users opt-in per project via:
+    //   cf config set pre_tool_intercept.disabled_project_prefixes /Users/me/docs-only-repo
+    // Multi-project:
+    //   cf config set pre_tool_intercept.disabled_project_prefixes /Users/me/a,/Users/me/b
+    //
+    // Use case: docs-only / tutorial / scratch repos where intercept noise
+    // outweighs benefit. See spec docs/design/2026-05-27/1006-intercept-
+    // enforcement-fix-spec.md §D P1-5.
+    'pre_tool_intercept.disabled_project_prefixes': '',
+    // Phase 2/8: rule-tuning feedback aggregator.
+    'feedback_loop.enabled': 'false',
+    // Phase 5: workflow recommender (BMAD/Harness in daemon).
+    'workflow_recommender.enabled': 'false',
+    // Phase 6: agent-experience KB writeback (bidirectional flow).
+    'agent_writeback.enabled': 'false',
+    // Phase 2a (v9.x): LLM intent classifier + 6-layer fallback stack.
+    // ON by default — the fallback stack is safe even without an API key,
+    // and dashboards / Sub-2 spec generation depend on `IntentClassification`
+    // rows being present in the `injections` table.
+    'intent_engine.enabled': 'true',
+    // Phase 2a L5 — minimum number of prior intents required to vote.
+    'intent_fallback.l5_history_threshold': '3',
+    // Phase 2b (v9.x): auto-spec generation. DISABLED 2026-05-27 (Spec 2 § A).
+    // Acceptance rate 0.9% (1/109 over 7d); LLM-cost / disk-clutter outweighs
+    // benefit. Code (SpecGate.tryAutoGenerate / SpecGenerator / SpecApproval)
+    // is preserved for future product-form revival. Reversible via:
+    //   cf config set auto_spec_generation.enabled true
+    // Existing installs whose `forge_config` row already holds `'true'` are
+    // NOT auto-mutated (seedDefaults is if-missing); see Spec 2 § A changelog.
+    'auto_spec_generation.enabled': 'false',
+    // Phase 2 (v9.x, 2026-05-26): user-question default BMAD gate (hard deny
+    // layer). Default OFF — 7-day dry_run window starts 2026-05-26 with only
+    // the soft recommend rule (`bmad-question-default` in workflow-defaults)
+    // populating `workflow_recommendations`. Flip via:
+    //   cf config set question_default_bmad.enforce true
+    // Reassess at 2026-06-02 (target: ≥80% would-have-benefited true-positive
+    // labelling on 20-row sample). Spec:
+    //   docs/design/2026-05-26/1707-user-question-default-bmad-spec.md
+    'question_default_bmad.enforce': 'false',
+    // db-size optimization (2026-05-26): two-tier TTL for `events`.
+    //   - events.warm_ttl_days  → after N days, `tool_input` set to NULL
+    //   - events.cold_ttl_days  → after M days, whole row DELETEd
+    //   - events.sweep_interval_hours → cadence of the maintenance interval
+    // See src/daemon/services/event-ttl-sweep.ts for semantics. Values are
+    // integer strings (callers coerce via Number()).
+    'events.warm_ttl_days': '7',
+    'events.cold_ttl_days': '30',
+    'events.sweep_interval_hours': '6',
+});
+export class ConfigStore {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Returns `true` only when the stored value is the literal string `'true'`.
+     * Missing keys → `false` (fail-safe default). Any other value → `false`.
+     *
+     * Callers that need richer semantics should use `get()` directly.
+     */
+    isEnabled(key) {
+        return this.storage.readConfig(key) === 'true';
+    }
+    /** Raw read. `undefined` when the key is absent. */
+    get(key) {
+        return this.storage.readConfig(key);
+    }
+    /** Upsert. Values are stored verbatim — coerce to string at the call site. */
+    set(key, value) {
+        this.storage.writeConfig(key, value);
+    }
+    /**
+     * Delete a key. Used by Phase D `reviveInterceptIfStale` to clean up the
+     * auto-disabled audit keys after the hysteresis window expires. Idempotent.
+     */
+    delete(key) {
+        return this.storage.deleteConfig(key);
+    }
+    /** Snapshot of every row, sorted by key for deterministic CLI output. */
+    list() {
+        return this.storage.listConfig();
+    }
+    /**
+     * Seed `DEFAULT_FLAGS` (or a caller-supplied set) into the table, skipping
+     * keys that already have a value. Safe to call on every daemon start.
+     *
+     * Returns the count of newly inserted keys (0 on subsequent restarts).
+     */
+    seedDefaults(defaults = DEFAULT_FLAGS) {
+        let inserted = 0;
+        for (const [key, value] of Object.entries(defaults)) {
+            if (this.storage.writeConfigIfMissing(key, value)) {
+                inserted += 1;
+            }
+        }
+        return inserted;
+    }
+}
+//# sourceMappingURL=config-store.js.map

package/dist/daemon/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../src/daemon/config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC3E,+CAA+C;IAC/C,mBAAmB,EAAE,MAAM;IAE3B,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,0DAA0D;IAC1D,mDAAmD;IACnD,4BAA4B,EAAE,MAAM;IAEpC,qEAAqE;IACrE,2EAA2E;IAC3E,sEAAsE;IACtE,oEAAoE;IACpE,EAAE;IACF,+CAA+C;IAC/C,wFAAwF;IACxF,iBAAiB;IACjB,uFAAuF;IACvF,EAAE;IACF,uEAAuE;IACvE,qEAAqE;IACrE,mCAAmC;IACnC,8CAA8C,EAAE,EAAE;IAElD,8CAA8C;IAC9C,uBAAuB,EAAE,OAAO;IAEhC,0DAA0D;IAC1D,8BAA8B,EAAE,OAAO;IAEvC,+DAA+D;IAC/D,yBAAyB,EAAE,OAAO;IAElC,mEAAmE;IACnE,sEAAsE;IACtE,0EAA0E;IAC1E,gDAAgD;IAChD,uBAAuB,EAAE,MAAM;IAC/B,kEAAkE;IAClE,sCAAsC,EAAE,GAAG;IAE3C,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,gEAAgE;IAChE,oDAAoD;IACpD,wEAAwE;IACxE,2EAA2E;IAC3E,8BAA8B,EAAE,OAAO;IAEvC,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,mDAAmD;IACnD,qDAAqD;IACrD,0EAA0E;IAC1E,qCAAqC;IACrC,mEAAmE;IACnE,+BAA+B,EAAE,OAAO;IAExC,gEAAgE;IAChE,qEAAqE;IACrE,8DAA8D;IAC9D,wEAAwE;IACxE,uEAAuE;IACvE,iDAAiD;IACjD,sBAAsB,EAAE,GAAG;IAC3B,sBAAsB,EAAE,IAAI;IAC5B,6BAA6B,EAAE,GAAG;CACnC,CAAC,CAAC;AAEH,MAAM,OAAO,WAAW;IACF;IAApB,YAAoB,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAE9C;;;;;OAKG;IACH,SAAS,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC;IACjD,CAAC;IAED,oDAAoD;IACpD,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,8EAA8E;IAC9E,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,yEAAyE;IACzE,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,WAA6C,aAAa;QACrE,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBAClD,QAAQ,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/daemon/event-parser.d.ts

@@ -1,4 +1,26 @@
 import type { ForgeEvent } from '../core/types.js';
+/**
+ * Daemon-boundary input limits (audit F-medium #2, 2026-05-26).
+ *
+ * These caps protect the daemon against malicious / buggy hook payloads. They
+ * sit BELOW the socket-level `MAX_BUFFER_SIZE` (512 KB in server.ts) so that
+ * the parser rejects oversized payloads before any downstream consumer
+ * (storage / handlers / rules) has to defend itself.
+ *
+ *   • `MAX_RAW_BYTES`         — hard ceiling on the whole JSON envelope.
+ *   • `MAX_SESSION_ID_LEN`    — UUIDs are 36; Claude Code in practice emits
+ *                               36-char IDs but we leave generous headroom.
+ *   • `MAX_TOOL_INPUT_BYTES`  — applies to the JSON-stringified tool_input.
+ *                               Large Edit/Write payloads are legitimate but
+ *                               a single hook payload over 256 KB indicates
+ *                               either a bug or abuse.
+ *   • `MAX_PROMPT_CHARS`      — caps `prompt` / `command` strings inside
+ *                               tool_input. Real prompts are well below this.
+ */
+export declare const MAX_RAW_BYTES: number;
+export declare const MAX_SESSION_ID_LEN = 128;
+export declare const MAX_TOOL_INPUT_BYTES: number;
+export declare const MAX_PROMPT_CHARS: number;
 export declare class EventParser {
     parse(raw: string): ForgeEvent;
 }

package/dist/daemon/event-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-parser.d.ts","sourceRoot":"","sources":["../../src/daemon/event-parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,kBAAkB,CAAC;AAgBpE,qBAAa,WAAW;IACtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;CAiB/B"}
+{"version":3,"file":"event-parser.d.ts","sourceRoot":"","sources":["../../src/daemon/event-parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,kBAAkB,CAAC;AAGpE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,QAAa,CAAC;AACxC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,oBAAoB,QAAa,CAAC;AAC/C,eAAO,MAAM,gBAAgB,QAAa,CAAC;AAiB3C,qBAAa,WAAW;IACtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;CA+C/B"}

package/dist/daemon/event-parser.js

@@ -1,10 +1,34 @@
 import { z } from 'zod';
 import { randomUUID } from 'crypto';
+/**
+ * Daemon-boundary input limits (audit F-medium #2, 2026-05-26).
+ *
+ * These caps protect the daemon against malicious / buggy hook payloads. They
+ * sit BELOW the socket-level `MAX_BUFFER_SIZE` (512 KB in server.ts) so that
+ * the parser rejects oversized payloads before any downstream consumer
+ * (storage / handlers / rules) has to defend itself.
+ *
+ *   • `MAX_RAW_BYTES`         — hard ceiling on the whole JSON envelope.
+ *   • `MAX_SESSION_ID_LEN`    — UUIDs are 36; Claude Code in practice emits
+ *                               36-char IDs but we leave generous headroom.
+ *   • `MAX_TOOL_INPUT_BYTES`  — applies to the JSON-stringified tool_input.
+ *                               Large Edit/Write payloads are legitimate but
+ *                               a single hook payload over 256 KB indicates
+ *                               either a bug or abuse.
+ *   • `MAX_PROMPT_CHARS`      — caps `prompt` / `command` strings inside
+ *                               tool_input. Real prompts are well below this.
+ */
+export const MAX_RAW_BYTES = 256 * 1024; // 256 KB envelope (vs 512 KB socket buffer)
+export const MAX_SESSION_ID_LEN = 128;
+export const MAX_TOOL_INPUT_BYTES = 256 * 1024; // 256 KB serialized tool_input
+export const MAX_PROMPT_CHARS = 100 * 1024; // 100 K chars for command/prompt strings
 const RawHookEventSchema = z.object({
     hook_type: z.enum(['PreToolUse', 'PostToolUse', 'Notification', 'Stop', 'UserPromptSubmit']),
-    timestamp: z.string(),
-    session_id: z.string(),
-    project_path: z.string(),
+    // ISO 8601 (with optional fractional seconds + Z/offset). Hook scripts emit
+    // `date -u +"%Y-%m-%dT%H:%M:%S.000Z"` which matches.
+    timestamp: z.string().datetime({ offset: true }),
+    session_id: z.string().min(1).max(MAX_SESSION_ID_LEN),
+    project_path: z.string().min(1),
     tool_name: z.string().optional(),
     tool_input: z.record(z.string(), z.unknown()).optional(),
     tool_output: z.record(z.string(), z.unknown()).optional(),
@@ -14,8 +38,30 @@ const RawHookEventSchema = z.object({
 });
 export class EventParser {
     parse(raw) {
+        // F-medium #2: cap envelope size BEFORE JSON.parse so a malicious 500 KB
+        // payload doesn't allocate megabytes of intermediate strings.
+        if (Buffer.byteLength(raw, 'utf8') > MAX_RAW_BYTES) {
+            throw new Error(`Event payload exceeds ${MAX_RAW_BYTES} byte cap (received ${Buffer.byteLength(raw, 'utf8')} bytes)`);
+        }
         const json = JSON.parse(raw);
         const validated = RawHookEventSchema.parse(json);
+        // F-medium #2: size-cap tool_input AFTER schema parse — cheaper to fail
+        // here than to forward a 1 MB blob into storage.
+        if (validated.tool_input !== undefined) {
+            const serialized = JSON.stringify(validated.tool_input);
+            if (serialized.length > MAX_TOOL_INPUT_BYTES) {
+                throw new Error(`tool_input exceeds ${MAX_TOOL_INPUT_BYTES} byte cap (received ${serialized.length} bytes)`);
+            }
+            // Cap individual string fields that downstream services scan/store.
+            // We reject (not silently truncate) so the daemon doesn't accept
+            // corrupted-looking data — caller's hook script should fix the source.
+            for (const key of ['command', 'prompt', 'new_string', 'old_string', 'content']) {
+                const v = validated.tool_input[key];
+                if (typeof v === 'string' && v.length > MAX_PROMPT_CHARS) {
+                    throw new Error(`tool_input.${key} exceeds ${MAX_PROMPT_CHARS} char cap (received ${v.length})`);
+                }
+            }
+        }
         return {
             event_id: validated.event_id ?? randomUUID(),
             session_id: validated.session_id,

package/dist/daemon/event-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-parser.js","sourceRoot":"","sources":["../../src/daemon/event-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,GAAW;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjD,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,UAAU,EAAE;YAC5C,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAyC;YAC/D,WAAW,EAAE,SAAS,CAAC,WAAkD;YACzE,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"event-parser.js","sourceRoot":"","sources":["../../src/daemon/event-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,CAAY,4CAA4C;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAK,+BAA+B;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAS,yCAAyC;AAE7F,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC5F,4EAA4E;IAC5E,qDAAqD;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,GAAW;QACf,yEAAyE;QACzE,8DAA8D;QAC9D,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,aAAa,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,yBAAyB,aAAa,uBAAuB,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CACrG,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjD,wEAAwE;QACxE,iDAAiD;QACjD,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,UAAU,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACb,sBAAsB,oBAAoB,uBAAuB,UAAU,CAAC,MAAM,SAAS,CAC5F,CAAC;YACJ,CAAC;YACD,oEAAoE;YACpE,iEAAiE;YACjE,uEAAuE;YACvE,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,CAAU,EAAE,CAAC;gBACxF,MAAM,CAAC,GAAI,SAAS,CAAC,UAAsC,CAAC,GAAG,CAAC,CAAC;gBACjE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBACzD,MAAM,IAAI,KAAK,CACb,cAAc,GAAG,YAAY,gBAAgB,uBAAuB,CAAC,CAAC,MAAM,GAAG,CAChF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,UAAU,EAAE;YAC5C,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAyC;YAC/D,WAAW,EAAE,SAAS,CAAC,WAAkD;YACzE,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;CACF"}

package/dist/daemon/handlers/history-exporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"history-exporter.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/history-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAKlE,qBAAa,eAAe;IACd,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAEpC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAgC9C,OAAO,CAAC,aAAa;CAkEtB"}
+{"version":3,"file":"history-exporter.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/history-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAKlE,qBAAa,eAAe;IACd,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAEpC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA+B9C,OAAO,CAAC,aAAa;CAoEtB"}

package/dist/daemon/handlers/history-exporter.js

@@ -8,7 +8,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { logger } from '../../core/utils/logger.js';
 import { truncateSessionId } from '../../core/utils/session.js';
-import { normalizeTimestamp } from '../../core/utils/time.js';
+import { formatLocalDisplay, formatLocalDateForFilename } from '../../core/utils/time.js';
 export class HistoryExporter {
     storage;
     constructor(storage) {
@@ -29,8 +29,7 @@ export class HistoryExporter {
             });
             if (events.length === 0)
                 return;
-            const now = new Date();
-            const dateStr = now.toISOString().slice(0, 10);
+            const dateStr = formatLocalDateForFilename(event.timestamp);
             const shortSession = truncateSessionId(session_id);
             const filePath = path.join(historyDir, `${dateStr}-${shortSession}.md`);
             const content = this.buildMarkdown(events, session_id, project_path);
@@ -43,8 +42,10 @@ export class HistoryExporter {
     }
     buildMarkdown(events, sessionId, projectPath) {
         const lines = [];
-        const startTime = normalizeTimestamp(events[0]?.timestamp ?? new Date().toISOString());
-        const endTime = normalizeTimestamp(events[events.length - 1]?.timestamp ?? startTime);
+        const startRaw = events[0]?.timestamp ?? new Date().toISOString();
+        const endRaw = events[events.length - 1]?.timestamp ?? startRaw;
+        const startTime = formatLocalDisplay(startRaw, { tzSuffix: 'CST' });
+        const endTime = formatLocalDisplay(endRaw, { tzSuffix: 'CST' });
         lines.push(`# 会话记录 ${truncateSessionId(sessionId)}`);
         lines.push('');
         lines.push(`- **时间**: ${startTime} → ${endTime}`);
@@ -57,7 +58,7 @@ export class HistoryExporter {
             lines.push('## 用户指令');
             lines.push('');
             for (const p of prompts) {
-                const time = new Date(p.timestamp).toLocaleTimeString();
+                const time = formatLocalDisplay(p.timestamp, { tzSuffix: '' });
                 const text = p.user_prompt.slice(0, 200);
                 lines.push(`- **${time}**: ${text}`);
             }
@@ -79,7 +80,7 @@ export class HistoryExporter {
             lines.push('### 时间线');
             lines.push('');
             for (const t of toolCalls.slice(-30)) {
-                const time = new Date(t.timestamp).toLocaleTimeString();
+                const time = formatLocalDisplay(t.timestamp, { tzSuffix: '' });
                 const input = t.tool_input;
                 const filePath = input?.file_path ?? input?.command ?? '';
                 const summary = typeof filePath === 'string' ? filePath.slice(0, 80) : '';
@@ -88,7 +89,7 @@ export class HistoryExporter {
             lines.push('');
         }
         lines.push('---');
-        lines.push(`_生成时间: ${new Date().toISOString()}_`);
+        lines.push(`_生成时间: ${formatLocalDisplay(Date.now())}_`);
         lines.push('');
         return lines.join('\n');
     }

package/dist/daemon/handlers/history-exporter.js.map

@@ -1 +1 @@
-{"version":3,"file":"history-exporter.js","sourceRoot":"","sources":["../../../src/daemon/handlers/history-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,MAAM,CAAC,KAAiB;QAC5B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;QAC3C,IAAI,CAAC,YAAY;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,UAAU;gBACV,YAAY;aACb,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEhC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,UAAU,EACV,GAAG,OAAO,IAAI,YAAY,KAAK,CAChC,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACrE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,MAAoB,EACpB,SAAiB,EACjB,WAAmB;QAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,IAAI,SAAS,CAAC,CAAC;QAEtF,KAAK,CAAC,IAAI,CAAC,UAAU,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,IAAI,CAAC,CAAC,WAAW,CAC3D,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAI,CAAC,CAAC,WAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,qBAAqB;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,IAAI,CAAC,CAAC,SAAS,CACpD,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC;gBAC3B,MAAM,QAAQ,GAAG,KAAK,EAAE,SAAS,IAAI,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;gBAC1D,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"history-exporter.js","sourceRoot":"","sources":["../../../src/daemon/handlers/history-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE1F,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,MAAM,CAAC,KAAiB;QAC5B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;QAC3C,IAAI,CAAC,YAAY;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,UAAU;gBACV,YAAY;aACb,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEhC,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,UAAU,EACV,GAAG,OAAO,IAAI,YAAY,KAAK,CAChC,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACrE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,MAAoB,EACpB,SAAiB,EACjB,WAAmB;QAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,IAAI,QAAQ,CAAC;QAChE,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhE,KAAK,CAAC,IAAI,CAAC,UAAU,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,IAAI,CAAC,CAAC,WAAW,CAC3D,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAI,CAAC,CAAC,WAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,qBAAqB;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,IAAI,CAAC,CAAC,SAAS,CACpD,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC/D,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC;gBAC3B,MAAM,QAAQ,GAAG,KAAK,EAAE,SAAS,IAAI,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;gBAC1D,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/daemon/handlers/post-tool-use.d.ts

@@ -1,15 +1,69 @@
 /**
  * PostToolUseHandler — handles PostToolUse hook
  *
- * Simplified: only tracks token usage if available.
- * Also observes Agent tool calls to update routing_events.
+ * Observes Agent tool calls to update routing_events.
  */
 import type { PostToolUseEvent, HookResult } from '../../core/types.js';
 import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+import type { ConfigStore } from '../config-store.js';
+/** Phase 6 feature flag — default OFF. */
+export declare const AGENT_WRITEBACK_FLAG = "agent_writeback.enabled";
 export declare class PostToolUseHandler {
     private storage;
-    private tokenTracker;
-    constructor(storage?: SQLiteStorage | null);
+    private configStore;
+    constructor(storage?: SQLiteStorage | null, configStore?: ConfigStore | null);
     handle(event: PostToolUseEvent): Promise<HookResult>;
+    /**
+     * audit F4 back-fill (KPI relax: dry_run also back-filled). Pipeline:
+     *   1. Query last 30s of `deny` + `dry_run` intercepts for this session.
+     *      dry_run rows are the "would-have-been-denied" rehearsal that fires
+     *      when `pre_tool_intercept.enabled=false`. Including them lets C4
+     *      compute a meaningful obeyed-ratio BEFORE the flag is flipped on —
+     *      otherwise C4 stays 0 forever in dry_run mode.
+     *   2. If any candidate matches `event.tool_name` → the main loop re-invoked
+     *      the SAME tool despite the deny/dry_run hint → mark 'override'.
+     *   3. Else, the main loop switched tools (most commonly Bash deny → Read /
+     *      Grep / Agent) → mark all candidates 'obeyed'.
+     *
+     * For dry_run rows specifically the verdict is a *pseudo-outcome* — the
+     * rule didn't actually enforce anything, but the main loop's reaction in
+     * the same 30s window still proxies "would they have obeyed?". UI surfaces
+     * this distinction in the C4 tooltip; the SQL aggregation treats both the
+     * same.
+     *
+     * Silently swallows errors — back-fill is observability, never a blocker.
+     * Multiple candidates within the window all get the same verdict; that's
+     * acceptable because the AI's reaction is a single response either way.
+     */
+    private maybeMarkInterceptOutcome;
+    /**
+     * Phase 6 writeback. Pipeline:
+     *   1. Flag gate (`agent_writeback.enabled`). Default OFF → silent skip.
+     *   2. Path filter — only changelog paths under `docs/implementation/`
+     *      (matches both the legacy `*-changelog-*.md` and the post-2026-05-26
+     *      datedir layout `YYYY-MM-DD/HHMM-*-changelog.md`).
+     *   3. Run `extractExperience` on the resolved absolute path.
+     *   4. Append each extracted entry to `<projectRoot>/.forge-knowledge/
+     *      agents-experience/<topic>.md`.
+     *
+     * All errors are swallowed (warn-level log) — writeback is best-effort.
+     */
+    private maybeWriteExperience;
+    /**
+     * Phase 5 outcome marking. Pipeline:
+     *   1. Find the most recent PENDING workflow_recommendations row for the
+     *      session within the 5 min window. Return early if none.
+     *   2. Extract bypass token from Task description / prompt.
+     *      Token present → mark 'bypassed'.
+     *   3. Else compare subagent_type vs recommended_agent_type.
+     *      Match → 'accepted'. Mismatch → leave pending (PreToolUseHandler
+     *      should already have denied unless the user supplied bypass; we
+     *      don't want to mark mismatched-without-bypass as anything other
+     *      than ignored/Stop-handler's job).
+     *
+     * Silently swallows storage errors — outcome marking is observability,
+     * not a request-blocker.
+     */
+    private markWorkflowRecOutcome;
 }
 //# sourceMappingURL=post-tool-use.d.ts.map

package/dist/daemon/handlers/post-tool-use.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"post-tool-use.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/post-tool-use.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAKlE,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,OAAO;IAHjB,OAAO,CAAC,YAAY,CAA6B;gBAGvC,OAAO,GAAE,aAAa,GAAG,IAAW;IAOxC,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;CA6B3D"}
+{"version":3,"file":"post-tool-use.d.ts","sourceRoot":"","sources":["../../../src/daemon/handlers/post-tool-use.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAyCtD,0CAA0C;AAC1C,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAa9D,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;gBADX,OAAO,GAAE,aAAa,GAAG,IAAW,EACpC,WAAW,GAAE,WAAW,GAAG,IAAW;IAG1C,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAgD1D;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,yBAAyB;IA4BjC;;;;;;;;;;;OAWG;YACW,oBAAoB;IAoClC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,sBAAsB;CAyD/B"}