tabby-agentdeck 1.2.0 → 1.2.2

package/dist/notify.service.d.ts

@@ -90,6 +90,17 @@ export declare class WorkNotifyService {
     private platform;
     private root;
     private dir;
+    private mailboxRoot;
+    private mailbox;
+    private mailboxOwners;
+    private navigationContext;
+    private navigationRefresh;
+    setNavigationRefresh(refresh: () => void): void;
+    mailboxConnectionState(tab: BaseTabComponent): string;
+    publishNavigationContext(context: string): void;
+    sessionIdOf(tab: BaseTabComponent): string | null;
+    sessionIdsOf(tab: BaseTabComponent): string[];
+    private registerMailbox;
     /** statusLine 래퍼(`hooks/agentdeck-statusline.mjs`)가 모델·계정·한도를 남기는 곳 */
     private metaDir;
     /** 훅이 접속할 포트를 알려주는 파일 */
@@ -204,6 +215,7 @@ export declare class WorkNotifyService {
      * "다시 묻지 않기" 를 고르면 그 뒤로는 조용하고, 설정 창의 설치 버튼은 언제든 그대로 쓸 수 있다.
      */
     private promptHooksOnce;
+    configureStorageRoots(): void;
     init(): void;
     /** 진단 한 줄 — deck.service 와 같은 파일(`~/.agentdeck-diag.log`)에 남긴다 */
     private diag;
@@ -259,6 +271,7 @@ export declare class WorkNotifyService {
      * 같은 id 가 두 루트에 있으면(복제 뒤 셸이 이미 뜬 경우) 어느 쪽인지 알 수 없으니 둘 다 표에서 빼고 계보 폴백에 맡긴다.
      */
     private refreshTabIds;
+    private retireMissingMailboxPanes;
     /** 진단용 */
     get debugDir(): string;
     /** 진단용 — 듣고 있는 포트 (0 = TCP 채널이 안 떴다) */
@@ -276,6 +289,7 @@ export declare class WorkNotifyService {
      */
     private listen;
     /** TCP 로 들어온 JSON 한 줄 */
+    private acceptMailbox;
     private accept;
     private poll;
     /**
@@ -350,6 +364,8 @@ export declare class WorkNotifyService {
      * 여기서 값을 꾸미지 않는다 — 화면 문구는 부르는 쪽(deck.service)이 만든다.
      * 이 서비스는 "누가 무엇을 보고했나" 만 들고 있는다.
      */
+    private accountHomes;
+    setAccountHome(tab: BaseTabComponent, provider: string, home: string, email: string): void;
     metaOf(tab: BaseTabComponent | null | undefined): AgentMeta | null;
     /**
      * statusLine 래퍼가 남긴 스냅샷을 읽는다 (`%LOCALAPPDATA%\tabby-agentdeck\meta`).

package/dist/performance.d.ts

@@ -0,0 +1,13 @@
+export declare const perfNow: () => number;
+/** Infrequent lifecycle operations only; never log terminal contents or recovery tokens. */
+export declare class PerformanceTrace {
+    private operation;
+    private readonly id;
+    private readonly started;
+    private previous;
+    constructor(operation: string);
+    mark(stage: string, detail?: string): void;
+    step<T>(stage: string, action: () => T): T;
+}
+/** One timer per renderer; report stalls at most once every five seconds. */
+export declare function monitorEventLoop(): void;

package/dist/profile.service.d.ts

@@ -12,5 +12,7 @@ export declare class AgentDeckProfileService {
     private config;
     constructor(app: AppService, config: ConfigService);
     init(): void;
+    /** Settings UI explicitly changed our profile; preserve unrelated shell options. */
+    applySettings(): void;
     private ensureProfile;
 }

package/dist/runtimeMigration.d.ts

@@ -0,0 +1,3 @@
+/** Copy once, never overwrite newer data or follow links. Keep the originals for rollback. */
+export declare function copyRuntimeData(source: string, target: string): void;
+export declare function migrateRuntimeData(): void;

package/dist/sessionLedger.service.d.ts

@@ -1,4 +1,5 @@
 import { ConfigService } from 'tabby-core';
+import { HistorySource } from './sessionSearch';
 import { SessionRecord } from './sessionLedger';
 /**
  * 지난 세션 원장의 **파일 담당** — 읽고, 쓰고, 기록 폴더를 훑는다.
@@ -10,10 +11,10 @@ import { SessionRecord } from './sessionLedger';
  */
 export declare class SessionLedgerService {
     private config;
-    private root;
-    private file;
+    private get root();
+    private get file();
     /** Claude Code 대화기록이 사는 곳 (`notify.service` 와 같은 자리) */
-    private projectsDir;
+    private get projectsDir();
     /** 세션 id -> 원장 한 줄. 사람이 친 라벨이 여기 남는다 */
     private ledger;
     /** 디스크 스캔 결과 (기록 파일에서 읽은 것) */
@@ -28,6 +29,7 @@ export declare class SessionLedgerService {
     private saveTimer;
     private scanning;
     private lastScan;
+    private historyFiles;
     /** 목록이 바뀌었을 때 호출부(사이드바)가 다시 그리도록 */
     onChange: (() => void) | null;
     constructor(config: ConfigService);
@@ -65,6 +67,7 @@ export declare class SessionLedgerService {
     private readHeadOf;
     /** 원장 + 디스크를 합친 전체 목록. 렌더 중에 불러도 막히지 않는다(캐시만 본다) */
     records(): SessionRecord[];
+    historySources(): Promise<HistorySource[]>;
     /** 진단용 — `__agentdeck.sessions()` 가 보여준다 */
     snapshot(): {
         ledger: number;

package/dist/sessionMailbox.d.ts

@@ -0,0 +1,31 @@
+export interface MailSession {
+    sessionId: string;
+    name: string;
+    cwd: string;
+    active: boolean;
+}
+export interface MailMessage {
+    id: string;
+    fromSessionId: string;
+    toSessionId: string;
+    body: string;
+    requestKey: string;
+    replyTo?: string;
+    createdAt: number;
+    readAt?: number;
+    completedAt?: number;
+}
+/** A single owner (the Tabby hook receiver) serializes durable mailbox writes. */
+export declare class SessionMailbox {
+    private file;
+    private data;
+    private committed;
+    constructor(file: string);
+    private save;
+    register(sessionId: string, name: string, cwd: string): {
+        sessionId: string;
+        token: string;
+    };
+    close(sessionId: string): void;
+    call(sessionId: string, token: string, method: string, args?: any): unknown;
+}

package/dist/sessionSearch.d.ts

@@ -0,0 +1,41 @@
+import { SessionRecord } from './sessionLedger';
+export interface HistorySource {
+    file: string;
+    sessionId: string;
+    agent: 'claude' | 'codex';
+}
+export interface HistoryMessage {
+    role: 'user' | 'assistant';
+    text: string;
+    line: number;
+}
+export interface HistoryHit {
+    source: HistorySource;
+    record: SessionRecord;
+    snippet: string;
+    count: number;
+    line: number;
+}
+export interface HistorySearchResult {
+    hits: HistoryHit[];
+    checked: number;
+    unreadable: number;
+    malformed: number;
+}
+export declare class SessionSearch {
+    private cacheDir;
+    private subprocess;
+    private worker;
+    private cancelPending;
+    constructor(cacheDir: string, subprocess?: boolean);
+    private stop;
+    cancel(): void;
+    private run;
+    search(sources: HistorySource[], query: string, progress?: (done: number, total: number) => void): Promise<HistorySearchResult>;
+    preview(source: HistorySource, line: number): Promise<{
+        messages: HistoryMessage[];
+        total: number;
+        previous: number | null;
+        next: number | null;
+    }>;
+}

package/dist/sessionSearchPanel.d.ts

@@ -0,0 +1,36 @@
+import { HistorySource } from './sessionSearch';
+import { ResumeRow } from './sessionLedger';
+interface HistoryHost {
+    sources(): Promise<HistorySource[]>;
+    resume(row: ResumeRow): void;
+    changed(): void;
+    korean(): boolean;
+    searchLabel(): string;
+}
+/** Local history UI. It has no dependency on the session messaging/MCP service. */
+export declare class SessionSearchPanel {
+    private host;
+    readonly element: HTMLDivElement;
+    private input;
+    private status;
+    private results;
+    private engine;
+    private previewEngine;
+    private generation;
+    private timer;
+    private hits;
+    private visible;
+    private dialog;
+    private previewGeneration;
+    private errors;
+    private tr;
+    constructor(host: HistoryHost);
+    get active(): boolean;
+    update(expanded: boolean): void;
+    private search;
+    private highlight;
+    private renderResults;
+    private openPreview;
+    dispose(): void;
+}
+export {};

package/dist/sessionSlots.d.ts

@@ -0,0 +1,9 @@
+/** Human navigation only. Never pass a slot to a messaging transport. */
+export declare class SessionSlots<T> {
+    private slots;
+    reconcile(sessions: readonly T[], preferred?: (session: T) => number | null): void;
+    numberOf(session: T): number | null;
+    get(number: number): T | null;
+    get full(): boolean;
+    get occupied(): number;
+}

package/dist/settings.component.d.ts

@@ -4,6 +4,9 @@ import { KeyItem, BindingPlan } from './keybind';
 import { AgentDeckRecoveryService } from './recovery.service';
 import { AgentDeckUpdateService } from './update.service';
 import { AgentDeckDevReloadService } from './devReload.service';
+import { StoragePaths } from './storagePaths';
+import { StorageSettings } from './storageSettings';
+import { AgentDeckProfileService } from './profile.service';
 /**
  * 설정 > AgentDeck 탭.
  *
@@ -49,6 +52,10 @@ export declare class AgentDeckSettingsTabComponent implements AfterViewInit, OnD
     private locale;
     private hotkeys;
     private zone;
+    private rootProfiles;
+    storageKeys: readonly ["accountStorageDir", "claudeStorageDir", "codexStorageDir"];
+    storageDefault: StoragePaths;
+    storageModel: StorageSettings;
     /** 이 환경에서 훅을 걸 수 있나 (통보 스크립트가 PowerShell 이라 Windows 전용) */
     hooksSupported: boolean;
     /** 지금 걸려 있나 — 파일을 매번 읽지 않도록 화면용으로 들고 있는다 */
@@ -119,7 +126,8 @@ export declare class AgentDeckSettingsTabComponent implements AfterViewInit, OnD
     /** 지금 그릴 언어 — Tabby 의 `설정 > 응용 프로그램 > 언어` 를 따라간다 */
     private lang;
     private localeSub;
-    constructor(config: ConfigService, recovery: AgentDeckRecoveryService, update: AgentDeckUpdateService, platform: PlatformService, devReload: AgentDeckDevReloadService, host: ElementRef<HTMLElement>, locale: LocaleService | null, hotkeys: HotkeysService | null, zone: NgZone);
+    private hooksRefreshTimer;
+    constructor(config: ConfigService, recovery: AgentDeckRecoveryService, update: AgentDeckUpdateService, platform: PlatformService, devReload: AgentDeckDevReloadService, host: ElementRef<HTMLElement>, locale: LocaleService | null, hotkeys: HotkeysService | null, zone: NgZone, rootProfiles: AgentDeckProfileService);
     /**
      * 문구 하나. 표는 `i18n.ts` 에 있고 여기서는 언어만 얹는다.
      *
@@ -233,4 +241,9 @@ export declare class AgentDeckSettingsTabComponent implements AfterViewInit, OnD
      */
     expandGroups(): void;
     pickCwd(): Promise<void>;
+    saveRootProfile(): void;
+    storageLabel(key: string): string;
+    pickStorage(key: keyof StoragePaths): Promise<void>;
+    resetStorage(): void;
+    saveStorage(): Promise<void>;
 }

package/dist/sidebarI18n.d.ts

@@ -0,0 +1,9 @@
+import { Lang } from './i18n';
+export declare const SIDEBAR_KEYS: string[];
+export declare function sidebarText(key: string, lang: Lang, params?: Record<string, string | number>): string;
+/** Only fixed markup authored by this plugin; user content is inserted separately via textContent. */
+export declare function sidebarMarkup(html: string, lang: Lang): string;
+/** Translate only the known forms emitted by reason.ts; preserve unrecognized hook content. */
+export declare function sidebarReason(reason: string, lang: Lang): string;
+export declare function sidebarReset(text: string, lang: Lang): string;
+export declare const RESET_COPY: Record<string, string[]>;

package/dist/sidebarLocales.d.ts

@@ -0,0 +1 @@
+export declare const SIDEBAR_LOCALES: Record<string, Record<string, string>>;

package/dist/storageEnvironment.d.ts

@@ -0,0 +1,6 @@
+import { StoragePaths } from './storagePaths';
+type Values = Record<string, string | null>;
+export declare function writeUserStorageEnvironment(values: Values): Promise<Values>;
+/** Persist user defaults; return a compensating action if the settings file cannot be saved. */
+export declare function syncStorageEnvironment(paths: StoragePaths): Promise<() => Promise<void>>;
+export {};

package/dist/storageI18n.d.ts

@@ -0,0 +1 @@
+export declare function storageText(key: string, lang: string): string;

package/dist/storagePaths.d.ts

@@ -0,0 +1,19 @@
+export interface StoragePaths {
+    accountStorageDir: string;
+    claudeStorageDir: string;
+    codexStorageDir: string;
+}
+export declare const STORAGE_KEYS: readonly ["accountStorageDir", "claudeStorageDir", "codexStorageDir"];
+/** Snapshot at startup: saving settings must not redirect a running login or token refresh. */
+export declare function configureStoragePaths(settings: Partial<StoragePaths>): void;
+export declare function storageDefaults(): StoragePaths;
+export declare function accountsFile(): string;
+/** Runtime data belongs to the account storage setting, with separate writers per Tabby profile. */
+export declare function runtimeRoot(): string;
+export declare function runtimeEnvironment(): Record<string, string>;
+export declare function agentHome(provider: 'claude' | 'codex'): string;
+export declare function hasConfiguredAgentHome(provider: 'claude' | 'codex'): boolean;
+/** Explicit per-account environments still win over the shared CLI home. */
+export declare function storageEnvironment(env?: Record<string, string>): Record<string, string>;
+/** Validate the complete draft before saving anything. Never create or move user data here. */
+export declare function validateStoragePaths(draft: StoragePaths): StoragePaths;

package/dist/storageSettings.d.ts

@@ -0,0 +1,28 @@
+import { StoragePaths } from './storagePaths';
+import { syncStorageEnvironment } from './storageEnvironment';
+interface StorageConfig {
+    store: {
+        agentDeck: Partial<StoragePaths>;
+    };
+    save: () => void | Promise<void>;
+}
+/** Shared for the lifetime of the settings service, including navigation away from the tab. */
+export declare class StorageSettings {
+    private config;
+    private syncEnvironment;
+    draft: StoragePaths;
+    message: string;
+    error: boolean;
+    busy: boolean;
+    private revision;
+    private queuedRevision;
+    private pending;
+    private queue;
+    constructor(config: StorageConfig, syncEnvironment?: typeof syncStorageEnvironment);
+    private savedPaths;
+    change(key: keyof StoragePaths, value: string): void;
+    save(): Promise<void>;
+    flush(): void;
+}
+export declare function storageSettingsFor(config: StorageConfig): StorageSettings;
+export {};

package/dist/viewer.d.ts

@@ -30,6 +30,8 @@ export declare function stripAnsi(data: string): string;
  * 걸러내는 것: 확장자를 모르는 것 / 잘려서 `…` 이 들어간 것 / URL / 버전 번호처럼 보이는 것.
  */
 export declare function extractPaths(data: string): string[];
+/** Agent instructions are background context, not artifacts merely because a read prints their path. */
+export declare function isInstructionFile(file: string): boolean;
 /**
  * 이 파일을 **스스로 띄워도 되는가** (`false` = 칩에만 쌓고 화면은 그대로 둔다).
  */

package/hooks/agentdeck-codex-notify.ps1

@@ -1,28 +1,69 @@
-# Codex lifecycle -> existing AgentDeck file/TCP transport. Never emit model context.
-$ErrorActionPreference = 'Stop'
-try {
-    $reader = New-Object System.IO.StreamReader([Console]::OpenStandardInput(), (New-Object System.Text.UTF8Encoding($false)))
-    $raw = $reader.ReadToEnd()
-    $reader.Dispose()
-    $hook = $raw | ConvertFrom-Json
-    if (-not $hook.session_id) { exit 0 }
-    $statusByEvent = @{
-        UserPromptSubmit = 'running'; PreToolUse = 'running'
-        PermissionRequest = 'waiting'; PostToolUse = 'running'
-        Stop = 'done'; Interrupt = 'idle'; SessionEnd = 'idle'
-    }
-    $status = $statusByEvent[[string]$hook.hook_event_name]
-    if (-not $status) { exit 0 }
-    # The shared transport's Notification filter is Claude-specific. An explicit
-    # Codex PermissionRequest must be accepted even after the previous turn ended.
-    if ($status -eq 'waiting') {
-        $hook | Add-Member -NotePropertyName message -NotePropertyValue ('Approval: ' + [string]$hook.tool_name) -Force
-    }
-    # JSON is passed as -HookJson, not piped: a script that accepts pipeline input makes the host pre-read
-    # stdin in the console codepage (CP949), which corrupts non-ASCII text for external callers.
-    $json = $hook | ConvertTo-Json -Depth 30 -Compress
-    & (Join-Path $PSScriptRoot 'agentdeck-notify.ps1') -Status $status -Agent codex -HookJson $json
-} catch {
-    # Status reporting must not block the agent if Tabby is unavailable.
-    exit 0
-}
+# Codex lifecycle -> existing AgentDeck file/TCP transport. Never emit model context.
+$ErrorActionPreference = 'Stop'
+# Step timing diagnostics. Codex kills a hook at its timeout (3s) and only prints "hook timed out",
+# so every step appends a line immediately: the last line of a run shows where it was killed.
+# Log: <accountRoot>\runtime\hook-diag\hook-YYYYMMDD.log  (+ms = since powershell.exe process start)
+$env:AGENTDECK_HOOK_RUN = "$PID-" + [DateTime]::Now.ToString('HHmmssfff')
+function Write-HookDiag ([string]$Step) {
+    try {
+        if (-not $script:hookDiagFile) {
+            $acct = if ($env:AGENTDECK_ACCOUNTS_FILE) { Split-Path -Parent $env:AGENTDECK_ACCOUNTS_FILE } else { Join-Path $env:USERPROFILE '.agentdeck' }
+            $diagDir = Join-Path $acct 'runtime\hook-diag'
+            if (-not (Test-Path $diagDir)) { New-Item -ItemType Directory -Force -Path $diagDir | Out-Null }
+            $script:hookDiagFile = Join-Path $diagDir ('hook-' + [DateTime]::Now.ToString('yyyyMMdd') + '.log')
+            $script:hookDiagStart = [System.Diagnostics.Process]::GetCurrentProcess().StartTime
+        }
+        $ms = [int]([DateTime]::Now - $script:hookDiagStart).TotalMilliseconds
+        $line = '{0} run={1} codex-wrap +{2}ms {3}' -f [DateTime]::Now.ToString('HH:mm:ss.fff'), $env:AGENTDECK_HOOK_RUN, $ms, $Step
+        [System.IO.File]::AppendAllText($script:hookDiagFile, $line + "`r`n", (New-Object System.Text.UTF8Encoding($false)))
+    } catch { }
+}
+Write-HookDiag 'start'
+try { . (Join-Path $PSScriptRoot 'agentdeck-hook-trace.ps1') } catch { }
+# Keep status reporting operational even if the optional diagnostic helper cannot load.
+if (-not (Get-Command Write-AgentDeckHookTrace -ErrorAction SilentlyContinue)) {
+    function Write-AgentDeckHookTrace { param($Stage, $Fields, $Failure) }
+    function Set-AgentDeckHookTraceIdentity { param($Hook) }
+}
+Write-AgentDeckHookTrace 'wrapper_enter'
+try {
+    Write-AgentDeckHookTrace 'stdin_begin'
+    $reader = New-Object System.IO.StreamReader([Console]::OpenStandardInput(), (New-Object System.Text.UTF8Encoding($false)))
+    $raw = $reader.ReadToEnd()
+    $reader.Dispose()
+    Write-HookDiag "stdin-read bytes=$($raw.Length)"
+    Write-AgentDeckHookTrace 'stdin_end'
+    Write-AgentDeckHookTrace 'parse_begin'
+    $hook = $raw | ConvertFrom-Json
+    Set-AgentDeckHookTraceIdentity $hook
+    Write-AgentDeckHookTrace 'parse_end'
+    Write-HookDiag "json-parsed event=$($hook.hook_event_name) tool=$($hook.tool_name) session=$($hook.session_id)"
+    if (-not $hook.session_id) { Write-HookDiag 'exit no-session'; Write-AgentDeckHookTrace 'skip' @{ reason = 'missing_session' }; exit 0 }
+    $statusByEvent = @{
+        UserPromptSubmit = 'running'; PreToolUse = 'running'
+        PermissionRequest = 'waiting'; PostToolUse = 'running'
+        Stop = 'done'; Interrupt = 'idle'; SessionEnd = 'idle'
+    }
+    $status = $statusByEvent[[string]$hook.hook_event_name]
+    if (-not $status) { Write-HookDiag 'exit unknown-event'; Write-AgentDeckHookTrace 'skip' @{ reason = 'unsupported_event' }; exit 0 }
+    # The shared transport's Notification filter is Claude-specific. An explicit
+    # Codex PermissionRequest must be accepted even after the previous turn ended.
+    if ($status -eq 'waiting') {
+        $hook | Add-Member -NotePropertyName message -NotePropertyValue ('Approval: ' + [string]$hook.tool_name) -Force
+    }
+    # JSON is passed as -HookJson, not piped: a script that accepts pipeline input makes the host pre-read
+    # stdin in the console codepage (CP949), which corrupts non-ASCII text for external callers.
+    $json = $hook | ConvertTo-Json -Depth 30 -Compress
+    Write-HookDiag "json-reserialized bytes=$($json.Length)"
+    Write-AgentDeckHookTrace 'transport_begin'
+    & (Join-Path $PSScriptRoot 'agentdeck-notify.ps1') -Status $status -Agent codex -HookJson $json
+    Write-AgentDeckHookTrace 'transport_end' @{ exit_code = $LASTEXITCODE }
+    Write-HookDiag 'end'
+} catch {
+    Write-HookDiag "exit error_type=$($_.Exception.GetType().FullName)"
+    Write-AgentDeckHookTrace 'wrapper_error' @{} $_
+    # Status reporting must not block the agent if Tabby is unavailable.
+    exit 0
+} finally {
+    Write-AgentDeckHookTrace 'wrapper_end'
+}

package/hooks/agentdeck-hook-trace.ps1

@@ -0,0 +1,57 @@
+# Process-local diagnostics. Never serialize hook input, exception messages or credentials.
+$global:AgentDeckHookTrace = $null
+try {
+    $traceRoot = $env:AGENTDECK_RUNTIME_ROOT
+    if (-not $traceRoot) {
+        $accountRoot = if ($env:AGENTDECK_ACCOUNTS_FILE) { Split-Path -Parent $env:AGENTDECK_ACCOUNTS_FILE } else { Join-Path $env:USERPROFILE '.agentdeck' }
+        $traceRoot = Join-Path $accountRoot 'runtime'
+        if ($env:TABBY_CONFIG_DIRECTORY) {
+            $sha = [System.Security.Cryptography.SHA256]::Create()
+            # Match Node path.resolve without expanding Windows 8.3 aliases.
+            try { $hash = $sha.ComputeHash([Text.Encoding]::UTF8.GetBytes($ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath($env:TABBY_CONFIG_DIRECTORY).TrimEnd('\').ToLowerInvariant())) }
+            finally { $sha.Dispose() }
+            $traceRoot = Join-Path $traceRoot (([BitConverter]::ToString($hash)).Replace('-', '').ToLowerInvariant().Substring(0,16))
+        }
+    }
+    $traceDir = Join-Path (Join-Path $traceRoot 'hook-timing') ([DateTime]::UtcNow.ToString('yyyy-MM-dd'))
+    [void][IO.Directory]::CreateDirectory($traceDir)
+    $global:AgentDeckHookTrace = @{
+        path = Join-Path $traceDir (('{0}-{1}-{2}.jsonl' -f [DateTime]::UtcNow.ToString('HHmmssfff'), $PID, [Guid]::NewGuid().ToString('N')))
+        clock = [Diagnostics.Stopwatch]::StartNew()
+        event = ''; session = ''
+    }
+} catch { }
+
+function global:Set-AgentDeckHookTraceIdentity($Hook) {
+    if (-not $global:AgentDeckHookTrace) { return }
+    $knownEvents = @('UserPromptSubmit', 'PreToolUse', 'PostToolUse', 'PostToolUseFailure', 'PermissionRequest', 'PermissionDenied', 'Notification', 'Stop', 'StopFailure', 'Interrupt', 'SessionStart', 'SessionEnd', 'SubagentStart', 'SubagentStop')
+    if ($Hook -and $knownEvents -contains [string]$Hook.hook_event_name) {
+        $global:AgentDeckHookTrace.event = [string]$Hook.hook_event_name
+    }
+    if ($Hook -and [string]$Hook.session_id -match '^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$') {
+        $global:AgentDeckHookTrace.session = [string]$Hook.session_id
+    }
+}
+
+function global:Write-AgentDeckHookTrace([string]$Stage, [hashtable]$Fields = @{}, $Failure = $null) {
+    if (-not $global:AgentDeckHookTrace) { return }
+    try {
+        $row = [ordered]@{
+            at = [DateTime]::UtcNow.ToString('o'); pid = $PID
+            stage = $Stage; elapsed_ms = $global:AgentDeckHookTrace.clock.ElapsedMilliseconds
+            event = $global:AgentDeckHookTrace.event; session = $global:AgentDeckHookTrace.session
+        }
+        # Callers pass only fixed status strings, numbers and booleans.
+        foreach ($key in $Fields.Keys) { $row[$key] = $Fields[$key] }
+        if ($Failure) {
+            $row.error_type = $Failure.Exception.GetType().FullName
+            $row.hresult = $Failure.Exception.HResult
+            $row.category = [string]$Failure.CategoryInfo.Category
+            $row.line = $Failure.InvocationInfo.ScriptLineNumber
+        }
+        $line = ($row | ConvertTo-Json -Compress -Depth 3) + "`n"
+        [IO.File]::AppendAllText($global:AgentDeckHookTrace.path, $line, (New-Object Text.UTF8Encoding($false)))
+    } catch {
+        # A diagnostic write must never change hook output or the exit status.
+    }
+}

package/hooks/agentdeck-label.js

@@ -1,53 +1,53 @@
-#!/usr/bin/env node
-/**
- * 작업 라벨만 바꾼다 (상태는 건드리지 않는다).
- *
- *   node agentdeck-label.js <sessionId> "결제 모듈 버그 수정"
- *   AGENTDECK_SESSION=<id> node agentdeck-label.js "빌드 중"
- *
- * 에이전트가 단계(분석→구현→빌드→검증)를 넘어갈 때마다 부르는 용도다.
- * PowerShell 훅(agentdeck-notify.ps1)은 프로세스 기동만 100ms 대라 자주 부르기엔 무겁고,
- * 그쪽은 status 파일을 읽어 직전 값과 합치는 read-modify-write 를 한다. 여기서는
- * 아는 것(라벨)만 보내고 병합은 플러그인이 한다 (notify.service.ts apply 주석 참고).
- *
- * TCP(127.0.0.1:47500)로 한 줄 밀어넣고, Tabby 가 안 떠 있으면 status 파일로 폴백한다.
- * 파일도 부분 갱신을 이해하므로 status 를 지어내지 않는다.
- */
-const net = require('net')
-const fs = require('fs')
-const path = require('path')
-
-const args = process.argv.slice(2)
-const sessionId = args.length > 1 ? args[0] : process.env.AGENTDECK_SESSION
-const label = (args.length > 1 ? args[1] : args[0] || '').trim()
-const port = Number(process.env.AGENTDECK_PORT || 47500)
-
-if (!sessionId || !label) {
-    console.error('usage: agentdeck-label.js <sessionId> "<label>"  (or AGENTDECK_SESSION env)')
-    process.exit(2)
-}
-
-const payload = JSON.stringify({ sessionId, label, ts: Date.now() }) + '\n'
-
-const fallback = () => {
-    const dir = path.join(process.env.LOCALAPPDATA || process.env.HOME, 'tabby-agentdeck', 'status')
-    try {
-        fs.mkdirSync(dir, { recursive: true })
-        // 직전 status 를 읽어 합치지 않는다 — 플러그인이 없는 필드를 지금 값으로 채운다
-        fs.writeFileSync(path.join(dir, sessionId + '.json'), payload.trim(), 'utf8')
-        console.log('label -> file')
-    } catch (e) {
-        console.error('label failed: ' + e.message)
-        process.exit(1)
-    }
-}
-
-const sock = net.connect({ port, host: '127.0.0.1' }, () => {
-    sock.end(payload, () => {
-        console.log('label -> tcp:' + port)
-        process.exit(0)
-    })
-})
-sock.setTimeout(700)
-sock.on('timeout', () => { sock.destroy(); fallback() })
-sock.on('error', () => fallback())
+#!/usr/bin/env node
+/**
+ * 작업 라벨만 바꾼다 (상태는 건드리지 않는다).
+ *
+ *   node agentdeck-label.js <sessionId> "결제 모듈 버그 수정"
+ *   AGENTDECK_SESSION=<id> node agentdeck-label.js "빌드 중"
+ *
+ * 에이전트가 단계(분석→구현→빌드→검증)를 넘어갈 때마다 부르는 용도다.
+ * PowerShell 훅(agentdeck-notify.ps1)은 프로세스 기동만 100ms 대라 자주 부르기엔 무겁고,
+ * 그쪽은 status 파일을 읽어 직전 값과 합치는 read-modify-write 를 한다. 여기서는
+ * 아는 것(라벨)만 보내고 병합은 플러그인이 한다 (notify.service.ts apply 주석 참고).
+ *
+ * TCP(127.0.0.1:47500)로 한 줄 밀어넣고, Tabby 가 안 떠 있으면 status 파일로 폴백한다.
+ * 파일도 부분 갱신을 이해하므로 status 를 지어내지 않는다.
+ */
+const net = require('net')
+const fs = require('fs')
+const path = require('path')
+
+const args = process.argv.slice(2)
+const sessionId = args.length > 1 ? args[0] : process.env.AGENTDECK_SESSION
+const label = (args.length > 1 ? args[1] : args[0] || '').trim()
+const port = Number(process.env.AGENTDECK_PORT || 47500)
+
+if (!sessionId || !label) {
+    console.error('usage: agentdeck-label.js <sessionId> "<label>"  (or AGENTDECK_SESSION env)')
+    process.exit(2)
+}
+
+const payload = JSON.stringify({ sessionId, label, ts: Date.now() }) + '\n'
+
+const fallback = () => {
+    const dir = path.join(require('./agentdeck-runtime.cjs').runtimeRoot(), 'status')
+    try {
+        fs.mkdirSync(dir, { recursive: true })
+        // 직전 status 를 읽어 합치지 않는다 — 플러그인이 없는 필드를 지금 값으로 채운다
+        fs.writeFileSync(path.join(dir, sessionId + '.json'), payload.trim(), 'utf8')
+        console.log('label -> file')
+    } catch (e) {
+        console.error('label failed: ' + e.message)
+        process.exit(1)
+    }
+}
+
+const sock = net.connect({ port, host: '127.0.0.1' }, () => {
+    sock.end(payload, () => {
+        console.log('label -> tcp:' + port)
+        process.exit(0)
+    })
+})
+sock.setTimeout(700)
+sock.on('timeout', () => { sock.destroy(); fallback() })
+sock.on('error', () => fallback())