@winspan/claude-forge 8.54.4 → 9.2.0

package/dist/daemon/services/spec-approval.d.ts

@@ -0,0 +1,127 @@
+/**
+ * SpecApproval — v9.x Phase 2b approve-token verifier.
+ *
+ * Companion service to `SpecGenerator`. Called by `UserPromptHandler.step 2.7`
+ * when the user types `approve <token>` exactly. The handler:
+ *   1. Detects the 'approve <8-hex>' pattern
+ *   2. Asks `SpecApproval.verify(token, session_id)` for the outcome
+ *   3. Surfaces a systemMessage based on the outcome
+ *   4. Short-circuits if outcome === 'ok' (skips KB / Skill / workflow rec)
+ *
+ * Why a separate service: keeps the handler thin and makes the verifier
+ * trivially testable without spinning up the whole UserPromptHandler graph.
+ *
+ * P0 safety (doc-reviewer Sub-2 report): verify() MUST filter by session_id.
+ * A token leaked across sessions must NOT be approve-able. The underlying
+ * facade method `findSpecByTokenAndSession` enforces this.
+ *
+ * No 'modify' code path is implemented in Phase 2b (spec § 3.4 mentions it
+ * in the systemMessage hint but § 3.5 leaves it un-implemented). The
+ * handler-side messages have been adjusted to advertise only `approve` and
+ * `skip`. See changelog "modify path simplification" decision.
+ */
+import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+import type { SpecLikeRow } from '../../core/storage/decisions.js';
+import type { SpecApprovalOutcome, SpecApprovalResult, SpecApprovalRowLike } from '../../core/types.js';
+/**
+ * Regex matching exactly `approve <8-hex>` with no surrounding text.
+ *
+ * Kept for backward compatibility — `extractToken` still uses it for the
+ * pure-token path. Bug 1 (2026-05-27 spec § 3.1) extends approval semantics
+ * to CJK / token-less variants via {@link APPROVAL_KEYWORD_REGEX} + the new
+ * {@link SpecApproval.extractApprovalIntent} method.
+ */
+export declare const APPROVE_REGEX: RegExp;
+/**
+ * Regex matching the WHOLE prompt as a bare approval keyword
+ * (Chinese / English) OPTIONALLY followed by an 8-hex token. Used by
+ * {@link SpecApproval.extractApprovalIntent} so any of the following short-
+ * circuit into spec-approval pipeline (Bug 1 spec § 3.1):
+ *
+ *   '批准'              → hasIntent=true, token=undefined → fallback search
+ *   '同意'              → ditto (Chinese formal)
+ *   'approve'           → ditto (English bare; legacy regex required token)
+ *   '批准 a1b2c3d4'     → hasIntent=true, token='a1b2c3d4'
+ *   '批准  A1B2C3D4  '  → tolerates whitespace + case
+ *
+ * Strict anchoring (`^…$`) prevents '我同意，但是...' from matching — a
+ * complex sentence containing the keyword is NOT an approval signal.
+ */
+export declare const APPROVAL_KEYWORD_REGEX: RegExp;
+/**
+ * Result of {@link SpecApproval.extractApprovalIntent}. `hasIntent` is the
+ * caller's short-circuit gate; `token` is set ONLY when the prompt carried
+ * an explicit 8-hex (otherwise the caller must fallback to listSessionPending).
+ */
+export interface ApprovalIntent {
+    hasIntent: boolean;
+    token?: string;
+}
+export declare class SpecApproval {
+    private readonly storage;
+    constructor(storage: SQLiteStorage);
+    /**
+     * Try to extract a token from a raw user prompt. Returns the 8-hex string
+     * (lowercase) when the WHOLE prompt is exactly `approve <token>`. Returns
+     * null otherwise — that's the signal for the handler to NOT short-circuit.
+     *
+     * Strict-format requirement (spec § 3.5 risk note): if the user mixes
+     * 'approve abc12345' with additional text, we let the prompt proceed
+     * through the normal pipeline to avoid losing their new request.
+     */
+    extractToken(prompt: string): string | null;
+    /**
+     * Bug 1 fix (2026-05-27 spec § 3.1) — generalised approval detector.
+     * Returns:
+     *   - `{ hasIntent: false }`               when prompt is NOT an approval signal
+     *   - `{ hasIntent: true, token }`         when prompt is e.g. '批准 a1b2c3d4'
+     *   - `{ hasIntent: true }` (no token)     when prompt is bare '批准' / 'approve'
+     *
+     * Caller (`SpecGate.handleApproval`) uses `hasIntent` as the short-circuit
+     * gate and `token` to decide whether to call `verify` directly or fall back
+     * to `listSessionPending` to pick the latest pending row.
+     *
+     * Strict-format anchoring prevents complex sentences like '我同意，但是…'
+     * from triggering approval — the keyword must be the WHOLE prompt.
+     */
+    extractApprovalIntent(prompt: string): ApprovalIntent;
+    /**
+     * Verify a token. C1 (spec 0854): look up the decisions table (kind='spec'),
+     * scoped by session_id (P0 safety — a leaked cross-session token must never
+     * approve someone else's spec). The legacy pending_specs table is gone.
+     *
+     * Outcomes (see SpecApprovalResult in src/core/types.ts):
+     *   • 'ok'                — found, status='generated', flipped to 'approved'
+     *   • 'not_found'         — token unknown OR session mismatch (P0 safety)
+     *   • 'expired'           — found but status='expired'
+     *   • 'already_approved'  — found but status='approved'
+     *
+     * The function COMMITS the status flip when outcome === 'ok' via
+     * markSpecApproved (decisions). Idempotent.
+     */
+    verify(token: string, sessionId: string, nowIso?: string): SpecApprovalResult;
+    /**
+     * List still-pending specs for a session (for the "unknown token" hint).
+     *
+     * C1 (spec 0854): reads decisions kind='spec' pending rows only. Returns the
+     * SpecLikeRow shape consumed by spec-gate / formatApprovalMessage.
+     */
+    listSessionPending(sessionId: string, limit?: number): SpecLikeRow[];
+    private classifyAndCommit;
+}
+/**
+ * Render the systemMessage shown to the main thread for each outcome.
+ *
+ * Centralized here so SpecGenerator / SpecApproval / the handler all agree
+ * on the wording. Format is intentionally short to keep the system message
+ * cheap (KB inject + intent + KB block already accumulate).
+ */
+export declare function formatApprovalMessage(outcome: SpecApprovalOutcome, args: {
+    token: string;
+    row?: SpecApprovalRowLike;
+    pendingList?: Array<{
+        token: string;
+        spec_path: string;
+    }>;
+}): string;
+//# sourceMappingURL=spec-approval.d.ts.map

package/dist/daemon/services/spec-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-approval.d.ts","sourceRoot":"","sources":["../../../src/daemon/services/spec-approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAG7B;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,QAAqC,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,QACc,CAAC;AAElD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAEnD;;;;;;;;OAQG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAM3C;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;IAQrD;;;;;;;;;;;;;OAaG;IACH,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,kBAAkB;IAcrB;;;;;OAKG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,WAAW,EAAE;IAS/D,OAAO,CAAC,iBAAiB;CAkC1B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE;IACJ,KAAK,EAAE,MAAM,CAAC;IAId,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3D,GACA,MAAM,CAmCR"}

package/dist/daemon/services/spec-approval.js

@@ -0,0 +1,216 @@
+/**
+ * SpecApproval — v9.x Phase 2b approve-token verifier.
+ *
+ * Companion service to `SpecGenerator`. Called by `UserPromptHandler.step 2.7`
+ * when the user types `approve <token>` exactly. The handler:
+ *   1. Detects the 'approve <8-hex>' pattern
+ *   2. Asks `SpecApproval.verify(token, session_id)` for the outcome
+ *   3. Surfaces a systemMessage based on the outcome
+ *   4. Short-circuits if outcome === 'ok' (skips KB / Skill / workflow rec)
+ *
+ * Why a separate service: keeps the handler thin and makes the verifier
+ * trivially testable without spinning up the whole UserPromptHandler graph.
+ *
+ * P0 safety (doc-reviewer Sub-2 report): verify() MUST filter by session_id.
+ * A token leaked across sessions must NOT be approve-able. The underlying
+ * facade method `findSpecByTokenAndSession` enforces this.
+ *
+ * No 'modify' code path is implemented in Phase 2b (spec § 3.4 mentions it
+ * in the systemMessage hint but § 3.5 leaves it un-implemented). The
+ * handler-side messages have been adjusted to advertise only `approve` and
+ * `skip`. See changelog "modify path simplification" decision.
+ */
+import { toSpecLikeRow } from '../../core/storage/decisions.js';
+import { logger } from '../../core/utils/logger.js';
+/**
+ * Regex matching exactly `approve <8-hex>` with no surrounding text.
+ *
+ * Kept for backward compatibility — `extractToken` still uses it for the
+ * pure-token path. Bug 1 (2026-05-27 spec § 3.1) extends approval semantics
+ * to CJK / token-less variants via {@link APPROVAL_KEYWORD_REGEX} + the new
+ * {@link SpecApproval.extractApprovalIntent} method.
+ */
+export const APPROVE_REGEX = /^\s*approve\s+([a-f0-9]{8})\s*$/i;
+/**
+ * Regex matching the WHOLE prompt as a bare approval keyword
+ * (Chinese / English) OPTIONALLY followed by an 8-hex token. Used by
+ * {@link SpecApproval.extractApprovalIntent} so any of the following short-
+ * circuit into spec-approval pipeline (Bug 1 spec § 3.1):
+ *
+ *   '批准'              → hasIntent=true, token=undefined → fallback search
+ *   '同意'              → ditto (Chinese formal)
+ *   'approve'           → ditto (English bare; legacy regex required token)
+ *   '批准 a1b2c3d4'     → hasIntent=true, token='a1b2c3d4'
+ *   '批准  A1B2C3D4  '  → tolerates whitespace + case
+ *
+ * Strict anchoring (`^…$`) prevents '我同意，但是...' from matching — a
+ * complex sentence containing the keyword is NOT an approval signal.
+ */
+export const APPROVAL_KEYWORD_REGEX = /^\s*(批准|同意|approve)(?:\s+([a-f0-9]{8}))?\s*$/i;
+export class SpecApproval {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /**
+     * Try to extract a token from a raw user prompt. Returns the 8-hex string
+     * (lowercase) when the WHOLE prompt is exactly `approve <token>`. Returns
+     * null otherwise — that's the signal for the handler to NOT short-circuit.
+     *
+     * Strict-format requirement (spec § 3.5 risk note): if the user mixes
+     * 'approve abc12345' with additional text, we let the prompt proceed
+     * through the normal pipeline to avoid losing their new request.
+     */
+    extractToken(prompt) {
+        if (!prompt)
+            return null;
+        const m = prompt.match(APPROVE_REGEX);
+        return m ? m[1].toLowerCase() : null;
+    }
+    /**
+     * Bug 1 fix (2026-05-27 spec § 3.1) — generalised approval detector.
+     * Returns:
+     *   - `{ hasIntent: false }`               when prompt is NOT an approval signal
+     *   - `{ hasIntent: true, token }`         when prompt is e.g. '批准 a1b2c3d4'
+     *   - `{ hasIntent: true }` (no token)     when prompt is bare '批准' / 'approve'
+     *
+     * Caller (`SpecGate.handleApproval`) uses `hasIntent` as the short-circuit
+     * gate and `token` to decide whether to call `verify` directly or fall back
+     * to `listSessionPending` to pick the latest pending row.
+     *
+     * Strict-format anchoring prevents complex sentences like '我同意，但是…'
+     * from triggering approval — the keyword must be the WHOLE prompt.
+     */
+    extractApprovalIntent(prompt) {
+        if (!prompt)
+            return { hasIntent: false };
+        const m = prompt.match(APPROVAL_KEYWORD_REGEX);
+        if (!m)
+            return { hasIntent: false };
+        const token = m[2] ? m[2].toLowerCase() : undefined;
+        return { hasIntent: true, token };
+    }
+    /**
+     * Verify a token. C1 (spec 0854): look up the decisions table (kind='spec'),
+     * scoped by session_id (P0 safety — a leaked cross-session token must never
+     * approve someone else's spec). The legacy pending_specs table is gone.
+     *
+     * Outcomes (see SpecApprovalResult in src/core/types.ts):
+     *   • 'ok'                — found, status='generated', flipped to 'approved'
+     *   • 'not_found'         — token unknown OR session mismatch (P0 safety)
+     *   • 'expired'           — found but status='expired'
+     *   • 'already_approved'  — found but status='approved'
+     *
+     * The function COMMITS the status flip when outcome === 'ok' via
+     * markSpecApproved (decisions). Idempotent.
+     */
+    verify(token, sessionId, nowIso) {
+        if (!token || !sessionId) {
+            return { outcome: 'not_found' };
+        }
+        const tok = token.toLowerCase();
+        const decisionRow = this.storage.findSpecByTokenAndSession(tok, sessionId);
+        if (decisionRow) {
+            return this.classifyAndCommit(toSpecLikeRow(decisionRow), decisionRow.id, nowIso);
+        }
+        return { outcome: 'not_found' };
+    }
+    /**
+     * List still-pending specs for a session (for the "unknown token" hint).
+     *
+     * C1 (spec 0854): reads decisions kind='spec' pending rows only. Returns the
+     * SpecLikeRow shape consumed by spec-gate / formatApprovalMessage.
+     */
+    listSessionPending(sessionId, limit = 5) {
+        return this.storage
+            .listSpecsBySessionPending(sessionId, limit)
+            .map((d) => toSpecLikeRow(d))
+            .slice(0, limit);
+    }
+    // ── Internals ─────────────────────────────────────────────────────────
+    classifyAndCommit(row, rowId, nowIso) {
+        switch (row.status) {
+            case 'expired':
+                return { outcome: 'expired', row };
+            case 'approved':
+                return { outcome: 'already_approved', row };
+            case 'skipped':
+            case 'modified':
+                // Treat anything non-'generated' that isn't expired/approved as
+                // already-approved for UX simplicity. Surface row so the caller
+                // can format a useful systemMessage.
+                return { outcome: 'already_approved', row };
+            case 'generated':
+                try {
+                    this.storage.markSpecApproved(rowId, nowIso);
+                }
+                catch (err) {
+                    logger.warn(`[SpecApproval] markApproved failed for id=${rowId}: ${err}`);
+                }
+                return {
+                    outcome: 'ok',
+                    row: {
+                        ...row,
+                        status: 'approved',
+                        approved_at: nowIso ?? new Date().toISOString(),
+                    },
+                };
+            default:
+                return { outcome: 'not_found', row };
+        }
+    }
+}
+/**
+ * Render the systemMessage shown to the main thread for each outcome.
+ *
+ * Centralized here so SpecGenerator / SpecApproval / the handler all agree
+ * on the wording. Format is intentionally short to keep the system message
+ * cheap (KB inject + intent + KB block already accumulate).
+ */
+export function formatApprovalMessage(outcome, args) {
+    const { token, row, pendingList } = args;
+    switch (outcome) {
+        case 'ok': {
+            const spec = row?.spec_path ?? '(unknown spec)';
+            const intent = safeParseIntent(row?.intent_json);
+            const agent = intent?.suggested_agent ?? 'planner';
+            return [
+                '[AUTO-SPEC APPROVED]',
+                '',
+                `Spec 已批准: ${spec}`,
+                `推荐 agent: ${agent}`,
+                '',
+                `主线程请用 Task tool spawn subagent_type='${agent}'`,
+                `Task prompt 必须以 "Read ${spec} 然后..." 开头。`,
+            ].join('\n');
+        }
+        case 'not_found': {
+            const hint = pendingList && pendingList.length > 0
+                ? '\n当前 pending tokens:\n' +
+                    pendingList
+                        .map((r) => `  • ${r.token} → ${r.spec_path}`)
+                        .join('\n')
+                : '\n本 session 没有 pending spec。';
+            return `[AUTO-SPEC] 未找到 token "${token}"。可能已过期，或不属于本 session。${hint}`;
+        }
+        case 'expired':
+            return `[AUTO-SPEC] token "${token}" 已过期。请重新发起原 prompt 让 daemon 生成新 spec。`;
+        case 'already_approved':
+            return `[AUTO-SPEC] token "${token}" 已被 approve 过。请按 spec 执行；无需再次回复 approve。`;
+        case 'wrong_session':
+            return `[AUTO-SPEC] token "${token}" 不属于本 session。`;
+        default:
+            return `[AUTO-SPEC] 未识别的状态。`;
+    }
+}
+function safeParseIntent(json) {
+    if (!json)
+        return null;
+    try {
+        return JSON.parse(json);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=spec-approval.js.map

package/dist/daemon/services/spec-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-approval.js","sourceRoot":"","sources":["../../../src/daemon/services/spec-approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAOhE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,kCAAkC,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,+CAA+C,CAAC;AAYlD,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAEvD;;;;;;;;OAQG;IACH,YAAY,CAAC,MAAc;QACzB,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CAAC,MAAc;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CACJ,KAAa,EACb,SAAiB,EACjB,MAAe;QAEf,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAEhC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,SAAiB,EAAE,KAAK,GAAG,CAAC;QAC7C,OAAO,IAAI,CAAC,OAAO;aAChB,yBAAyB,CAAC,SAAS,EAAE,KAAK,CAAC;aAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aAC5B,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,yEAAyE;IAEjE,iBAAiB,CACvB,GAAgB,EAChB,KAAa,EACb,MAAe;QAEf,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,SAAS;gBACZ,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YACrC,KAAK,UAAU;gBACb,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC;YAC9C,KAAK,SAAS,CAAC;YACf,KAAK,UAAU;gBACb,gEAAgE;gBAChE,gEAAgE;gBAChE,qCAAqC;gBACrC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC;YAC9C,KAAK,WAAW;gBACd,IAAI,CAAC;oBACH,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,6CAA6C,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,GAAG,EAAE;wBACH,GAAG,GAAG;wBACN,MAAM,EAAE,UAAU;wBAClB,WAAW,EAAE,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBAChD;iBACF,CAAC;YACJ;gBACE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA4B,EAC5B,IAOC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACzC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,IAAI,GAAG,GAAG,EAAE,SAAS,IAAI,gBAAgB,CAAC;YAChD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,EAAE,eAAe,IAAI,SAAS,CAAC;YACnD,OAAO;gBACL,sBAAsB;gBACtB,EAAE;gBACF,aAAa,IAAI,EAAE;gBACnB,aAAa,KAAK,EAAE;gBACpB,EAAE;gBACF,wCAAwC,KAAK,GAAG;gBAChD,yBAAyB,IAAI,aAAa;aAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;gBAChD,CAAC,CAAC,wBAAwB;oBACxB,WAAW;yBACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;yBAC7C,IAAI,CAAC,IAAI,CAAC;gBACf,CAAC,CAAC,8BAA8B,CAAC;YACnC,OAAO,0BAA0B,KAAK,yBAAyB,IAAI,EAAE,CAAC;QACxE,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,sBAAsB,KAAK,wCAAwC,CAAC;QAC7E,KAAK,kBAAkB;YACrB,OAAO,sBAAsB,KAAK,2CAA2C,CAAC;QAChF,KAAK,eAAe;YAClB,OAAO,sBAAsB,KAAK,iBAAiB,CAAC;QACtD;YACE,OAAO,qBAAqB,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAwB;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/daemon/services/spec-gate.d.ts

@@ -0,0 +1,54 @@
+/**
+ * SpecGate — orchestrates the approve-token short-circuit (step 0) inside
+ * `UserPromptHandler`.
+ *
+ * Extracted from `UserPromptHandler` (D-3 step 0). Stateless wrapper around
+ * `SpecApproval` so the handler can stay thin.
+ *
+ * The method is fail-silent unless documented otherwise — the prompt pipeline
+ * must keep running even if persistence hiccups.
+ *
+ * 2026-05-27 Spec 1702: `tryAutoGenerate` + `SpecGenerator` integration
+ * removed entirely (0% real-world acceptance rate → dead code).
+ * `SpecApproval` + `handleApproval` + `handleApproveToken` are preserved for
+ * the hand-written spec register path (planner agent calls `cf spec register`
+ * then user replies "批准").
+ */
+import type { UserPromptSubmitEvent } from '../../core/types.js';
+import type { SpecApproval } from './spec-approval.js';
+export declare class SpecGate {
+    private readonly specApproval;
+    constructor(specApproval?: SpecApproval | null);
+    /**
+     * Step 0 short-circuit: if the prompt is exactly `approve <8-hex>`,
+     * verify the token and return a system message. Returns `null` when the
+     * prompt is not an approve command (caller continues the regular pipeline).
+     *
+     * @deprecated Bug 1 (2026-05-27 spec § 3.1) — use {@link handleApproval}
+     *   instead, which also handles bare CJK keywords ('批准' / '同意') and
+     *   falls back to the latest pending row when no token is supplied. Kept
+     *   for backwards compatibility / unit tests that already cover the
+     *   token-only path.
+     */
+    handleApproveToken(event: UserPromptSubmitEvent, prompt: string): string | null;
+    /**
+     * Bug 1 fix (2026-05-27 spec § 3.1) — generalised approval handler.
+     *
+     * Recognises:
+     *   - 'approve <8-hex>'              → verify token directly
+     *   - '批准 <8-hex>' / '同意 <8-hex>' → verify token directly
+     *   - bare '批准' / '同意' / 'approve' → fallback to latest pending row in
+     *                                       the session, verify its token
+     *
+     * Returns:
+     *   - systemMessage string → caller short-circuits (skip KB / Skill / wf rec)
+     *   - null                  → not an approval signal; caller runs normal pipe
+     *
+     * Per spec Q6 (user-approved): even when fallback finds NO pending row,
+     * we STILL short-circuit with a [AUTO-SPEC] '本 session 没有 pending spec'
+     * systemMessage. Letting bare '批准' fall through to normal pipeline would
+     * eat the prompt as a no-op task title (Bug 1 root cause).
+     */
+    handleApproval(event: UserPromptSubmitEvent, prompt: string): string | null;
+}
+//# sourceMappingURL=spec-gate.d.ts.map

package/dist/daemon/services/spec-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-gate.d.ts","sourceRoot":"","sources":["../../../src/daemon/services/spec-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIvD,qBAAa,QAAQ;IAEjB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,GAAE,YAAY,GAAG,IAAW;IAG3D;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAkB/E;;;;;;;;;;;;;;;;;OAiBG;IACH,cAAc,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAkD5E"}

package/dist/daemon/services/spec-gate.js

@@ -0,0 +1,113 @@
+/**
+ * SpecGate — orchestrates the approve-token short-circuit (step 0) inside
+ * `UserPromptHandler`.
+ *
+ * Extracted from `UserPromptHandler` (D-3 step 0). Stateless wrapper around
+ * `SpecApproval` so the handler can stay thin.
+ *
+ * The method is fail-silent unless documented otherwise — the prompt pipeline
+ * must keep running even if persistence hiccups.
+ *
+ * 2026-05-27 Spec 1702: `tryAutoGenerate` + `SpecGenerator` integration
+ * removed entirely (0% real-world acceptance rate → dead code).
+ * `SpecApproval` + `handleApproval` + `handleApproveToken` are preserved for
+ * the hand-written spec register path (planner agent calls `cf spec register`
+ * then user replies "批准").
+ */
+import { formatApprovalMessage } from './spec-approval.js';
+import { logger } from '../../core/utils/logger.js';
+export class SpecGate {
+    specApproval;
+    constructor(specApproval = null) {
+        this.specApproval = specApproval;
+    }
+    /**
+     * Step 0 short-circuit: if the prompt is exactly `approve <8-hex>`,
+     * verify the token and return a system message. Returns `null` when the
+     * prompt is not an approve command (caller continues the regular pipeline).
+     *
+     * @deprecated Bug 1 (2026-05-27 spec § 3.1) — use {@link handleApproval}
+     *   instead, which also handles bare CJK keywords ('批准' / '同意') and
+     *   falls back to the latest pending row when no token is supplied. Kept
+     *   for backwards compatibility / unit tests that already cover the
+     *   token-only path.
+     */
+    handleApproveToken(event, prompt) {
+        if (!this.specApproval)
+            return null;
+        const token = this.specApproval.extractToken(prompt);
+        if (!token)
+            return null;
+        const result = this.specApproval.verify(token, event.session_id, event.timestamp);
+        const pendingList = result.outcome === 'not_found'
+            ? this.specApproval.listSessionPending(event.session_id)
+            : undefined;
+        const msg = formatApprovalMessage(result.outcome, {
+            token,
+            row: result.row,
+            pendingList,
+        });
+        logger.info(`[SpecGate] Approve short-circuit: ${result.outcome} token=${token}`);
+        return msg;
+    }
+    /**
+     * Bug 1 fix (2026-05-27 spec § 3.1) — generalised approval handler.
+     *
+     * Recognises:
+     *   - 'approve <8-hex>'              → verify token directly
+     *   - '批准 <8-hex>' / '同意 <8-hex>' → verify token directly
+     *   - bare '批准' / '同意' / 'approve' → fallback to latest pending row in
+     *                                       the session, verify its token
+     *
+     * Returns:
+     *   - systemMessage string → caller short-circuits (skip KB / Skill / wf rec)
+     *   - null                  → not an approval signal; caller runs normal pipe
+     *
+     * Per spec Q6 (user-approved): even when fallback finds NO pending row,
+     * we STILL short-circuit with a [AUTO-SPEC] '本 session 没有 pending spec'
+     * systemMessage. Letting bare '批准' fall through to normal pipeline would
+     * eat the prompt as a no-op task title (Bug 1 root cause).
+     */
+    handleApproval(event, prompt) {
+        if (!this.specApproval)
+            return null;
+        const intent = this.specApproval.extractApprovalIntent(prompt);
+        if (!intent.hasIntent)
+            return null;
+        // Path A: caller supplied explicit token → direct verify (legacy behavior).
+        if (intent.token) {
+            const result = this.specApproval.verify(intent.token, event.session_id, event.timestamp);
+            const pendingList = result.outcome === 'not_found'
+                ? this.specApproval.listSessionPending(event.session_id)
+                : undefined;
+            const msg = formatApprovalMessage(result.outcome, {
+                token: intent.token,
+                row: result.row,
+                pendingList,
+            });
+            logger.info(`[SpecGate] Approval short-circuit (with-token): ${result.outcome} token=${intent.token}`);
+            return msg;
+        }
+        // Path B: bare keyword → fallback to the latest pending row for this
+        // session. listSessionPending already filters status='generated' DESC by
+        // created_at, so LIMIT 1 gives us the most recent unapproved spec.
+        const recent = this.specApproval.listSessionPending(event.session_id, 1);
+        if (recent.length === 0) {
+            // Spec Q6: no pending → return systemMessage saying so (DON'T fallthrough).
+            logger.info('[SpecGate] Approval short-circuit (no-token): no pending spec found');
+            return formatApprovalMessage('not_found', {
+                token: '(无 token)',
+                pendingList: [],
+            });
+        }
+        const candidate = recent[0];
+        const result = this.specApproval.verify(candidate.token, event.session_id, event.timestamp);
+        logger.info(`[SpecGate] Approval short-circuit (no-token fallback): ${result.outcome} ` +
+            `token=${candidate.token} spec=${candidate.spec_path}`);
+        return formatApprovalMessage(result.outcome, {
+            token: candidate.token,
+            row: result.row ?? candidate,
+        });
+    }
+}
+//# sourceMappingURL=spec-gate.js.map

package/dist/daemon/services/spec-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-gate.js","sourceRoot":"","sources":["../../../src/daemon/services/spec-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD,MAAM,OAAO,QAAQ;IAEA;IADnB,YACmB,eAAoC,IAAI;QAAxC,iBAAY,GAAZ,YAAY,CAA4B;IACxD,CAAC;IAEJ;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,KAA4B,EAAE,MAAc;QAC7D,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,KAAK,WAAW;YAChD,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC;YACxD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE;YAChD,KAAK;YACL,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,qCAAqC,MAAM,CAAC,OAAO,UAAU,KAAK,EAAE,CAAC,CAAC;QAClF,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,cAAc,CAAC,KAA4B,EAAE,MAAc;QACzD,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAEnC,4EAA4E;QAC5E,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,WAAW,GACf,MAAM,CAAC,OAAO,KAAK,WAAW;gBAC5B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC;gBACxD,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE;gBAChD,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CACT,mDAAmD,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,KAAK,EAAE,CAC1F,CAAC;YACF,OAAO,GAAG,CAAC;QACb,CAAC;QAED,qEAAqE;QACrE,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,4EAA4E;YAC5E,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;YACnF,OAAO,qBAAqB,CAAC,WAAW,EAAE;gBACxC,KAAK,EAAE,WAAW;gBAClB,WAAW,EAAE,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CACrC,SAAS,CAAC,KAAK,EACf,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,SAAS,CAChB,CAAC;QACF,MAAM,CAAC,IAAI,CACT,0DAA0D,MAAM,CAAC,OAAO,GAAG;YACzE,SAAS,SAAS,CAAC,KAAK,SAAS,SAAS,CAAC,SAAS,EAAE,CACzD,CAAC;QACF,OAAO,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE;YAC3C,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/daemon/services/task-boundary-classifier.d.ts

@@ -0,0 +1,78 @@
+/**
+ * TaskBoundaryClassifier — async LLM "new task vs continuation" re-attribution.
+ *
+ * decision 265f59d5 (Option A, 2026-06-08). Solves the residual case the
+ * synchronous lexical segmenter cannot: a SHORT, ambiguous follow-up prompt
+ * that is neither a clear ack ("继续"/"好的") nor carries a NEW_TASK_KEYWORD,
+ * e.g. "现在全链路是不是都顺了" vs "文件也看下" — lexically indistinguishable,
+ * yet one is a new task and the other a continuation.
+ *
+ * ── Hot-path contract (NEVER block UserPromptSubmit) ──────────────────────
+ * The synchronous segmenter ALWAYS runs first and gives the prompt a
+ * best-effort task (zero latency). THIS service runs entirely in the
+ * background, fire-and-forget. It spawns `claude` (haiku) only for the ~30%
+ * of prompts the segmenter flagged ambiguous, then LAZILY re-attributes:
+ *   • LLM says NEW_TASK  → move the prompt's event onto a brand-new task row
+ *     (only `task_events.task_id` FK is touched — no event delete, no content
+ *     mutation). See SQLiteStorage.reattributePromptToNewTask.
+ *   • LLM says CONTINUATION → leave the sync best-effort merge untouched, just
+ *     stamp `llm_classified_at` so a replay never re-spawns.
+ *
+ * Failure mode: ANY spawn / timeout / parse error → give up, keep the sync
+ * result, never throw. Mirrors OutcomeClassificationService's fire-and-forget
+ * discipline.
+ */
+import type { SQLiteStorage } from '../../core/storage/sqlite.js';
+/** Verdict the agent must return (exactly one of these tokens). */
+export type BoundaryVerdict = 'NEW_TASK' | 'CONTINUATION';
+/**
+ * Pluggable spawn function — production binds {@link spawnClaudeCli}; tests
+ * inject a stub that returns a canned verdict WITHOUT touching claude.
+ */
+export type BoundarySpawnFn = (prompt: string) => Promise<string>;
+/** A unit of work enqueued by the segmenter for the ambiguous prompt. */
+export interface BoundaryClassifyJob {
+    sessionId: string;
+    /** The task the sync path best-effort merged this prompt into. */
+    mergedTaskId: string;
+    /** The UserPromptSubmit event that should move if the verdict is NEW_TASK. */
+    eventId: string;
+    /** The ambiguous prompt text itself. */
+    prompt: string;
+    /** Event timestamp (ISO) — used as the new task's start_time. */
+    timestamp: string;
+}
+export declare class TaskBoundaryClassifier {
+    private readonly spawnFn;
+    /**
+     * @param spawnFn  optional spawn override (tests). Default spawns the
+     *                 `task-boundary-classifier` agent via claude haiku.
+     */
+    constructor(opts?: {
+        spawnFn?: BoundarySpawnFn;
+        timeoutMs?: number;
+        claudeBin?: string;
+    });
+    /**
+     * Classify one ambiguous prompt and, if NEW_TASK, re-attribute it.
+     * Fire-and-forget: never throws. Returns the new task id when it split,
+     * else null (CONTINUATION, idempotent skip, or any failure).
+     */
+    classify(job: BoundaryClassifyJob, storage: SQLiteStorage): Promise<string | null>;
+    private safePriorPrompts;
+}
+/**
+ * Build the bare classification prompt handed to the agent. The agent body
+ * (.claude/agents/task-boundary-classifier.md) instructs it to answer with a
+ * single token; we still keep the contract inline so a bare-prompt spawn
+ * (no agent template synced yet) also works.
+ */
+export declare function buildBoundaryPrompt(priorPrompts: string[], current: string): string;
+/**
+ * Extract the agent's single-token verdict from raw stdout. Tolerant: the
+ * model may wrap the token in punctuation / markdown / a sentence. We scan for
+ * the first NEW_TASK / CONTINUATION occurrence (case-insensitive). Returns null
+ * when neither token is present (caller keeps the sync merge).
+ */
+export declare function parseVerdict(raw: string): BoundaryVerdict | null;
+//# sourceMappingURL=task-boundary-classifier.d.ts.map

package/dist/daemon/services/task-boundary-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-boundary-classifier.d.ts","sourceRoot":"","sources":["../../../src/daemon/services/task-boundary-classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAOlE,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,cAAc,CAAC;AAE1D;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAElE,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;CACnB;AAcD,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAE1C;;;OAGG;gBACS,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,eAAe,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAe5F;;;;OAIG;IACG,QAAQ,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAgGxF,OAAO,CAAC,gBAAgB;CAQzB;AAID;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAcnF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAUhE"}