Function loadToolCallWindows

internal/intent/materialize.go:287–321

loadToolCallWindows loads each agent hook tool_call's real [start,end] window. Windows are only usable once hook events carry real timestamps (launch's hook-log stamps them); tool_calls left at the synthetic epoch are ignored so a bogus 2026-01-01 window can never bracket a real effect.

(db *sql.DB, runID string)

// hook-log stamps them); tool_calls left at the synthetic epoch are ignored so a
// bogus 2026-01-01 window can never bracket a real effect.
func loadToolCallWindows(db *sql.DB, runID string) toolCallWindows {
	rows, err := db.Query(`SELECT id, agent_id, command, started_at, ended_at FROM tool_calls
		WHERE run_id = ? AND agent_id != '' AND started_at != ''`, runID)
	if err != nil {
		return nil
	}
	defer rows.Close()
	var out toolCallWindows
	for rows.Next() {
		var id, agent, command, startedAt, endedAt string
		if err := rows.Scan(&id, &agent, &command, &startedAt, &endedAt); err != nil {
			return out
		}
		start, err := time.Parse(time.RFC3339Nano, startedAt)
		if err != nil || start.Year() < 2020 {
			continue // synthetic-epoch or unparseable -> not a real window
		}
		end, err := time.Parse(time.RFC3339Nano, endedAt)
		if err != nil {
			end = start
		}
		// Grace: PostToolUse can fire a few seconds before the tool's subprocess
		// actually performs its syscalls (observed ~3s on the lab VM), so a tight
		// window misses the real effect. But it must stay SMALL: a truly async
		// effect (e.g. an install that triggers a background exfil ~35s later) must
		// NOT be pinned to a same-program tool call that merely ran nearby -- that
		// is a wrong-tool attribution. Effects outside this grace fall to an honest
		// coverage_gap; tying them back needs command-match, not a wider window.
		out = append(out, toolCallWindow{
			agent: agent, toolCall: id, program: programName(command),
			start: start.Add(-grace), end: end.Add(grace),
		})
	}
	return out
}

// containing returns the most specific (latest-starting) window that both
// brackets ts AND whose program matches the effect's process comm. The comm gate