peaks-cli 1.3.2 → 1.3.4

package/dist/src/services/security/safe-settings-path.js

@@ -0,0 +1,104 @@
+/**
+ * R-2 path-safety guard for sub-agent state files.
+ *
+ * Slice 2026-06-07-sub-agent-dispatch-decouple (G4) — reuses the same
+ * R-2 symlink/junction guard as `assertSafeSettingsFile` for
+ * `.peaks/_sub_agents/<sid>/dispatch-<rid>-<ts>.json` paths.
+ *
+ * Why a separate helper:
+ *   - The settings-file guard is a per-IDE 8th field (settings.json path);
+ *     this one is for runtime sub-agent trace records.
+ *   - Both reject paths that resolve outside the project root after
+ *     symlink resolution, and both reject `..` segments before
+ *     resolution (defense in depth).
+ *
+ * The guard is intentionally small and pure (no IO beyond `realpathSync`)
+ * so it can be called from CLI handlers and from service helpers alike.
+ */
+import { realpathSync } from 'node:fs';
+import { dirname, isAbsolute, relative, resolve, sep } from 'node:path';
+const SUB_AGENTS_DIR = '_sub_agents';
+/** Build the canonical record path for a given session/rid/timestamp. */
+export function dispatchRecordPath(projectRoot, sid, rid, ts = new Date()) {
+    const safeSid = sanitizeSegment(sid, 'sessionId');
+    const safeRid = sanitizeSegment(rid, 'requestId');
+    const tsCompact = ts.toISOString().replace(/[:.]/g, '-');
+    return resolve(projectRoot, '.peaks', SUB_AGENTS_DIR, safeSid, `dispatch-${safeRid}-${tsCompact}.json`);
+}
+/** The directory under which dispatch records live. */
+export function dispatchRecordsDir(projectRoot, sid) {
+    const safeSid = sanitizeSegment(sid, 'sessionId');
+    return resolve(projectRoot, '.peaks', SUB_AGENTS_DIR, safeSid);
+}
+/**
+ * Assert that `recordPath` lives under `projectRoot/.peaks/_sub_agents/<sid>/`.
+ * Rejects symlink/junction escapes and `..` segments.
+ *
+ * Throws an Error with `.code = 'INVALID_RECORD_PATH'` on rejection so
+ * the CLI can map to `{ok: false, code: "INVALID_RECORD_PATH"}`.
+ */
+export function assertSafeDispatchRecordPath(recordPath, projectRoot) {
+    if (!isAbsolute(recordPath)) {
+        throw invalidPathError(recordPath, 'must be absolute');
+    }
+    // Reject lexical `..` segments in the raw path BEFORE the OS-level resolver
+    // collapses them. POSIX `path.normalize` will turn `/a/b/../c` into `/a/c`,
+    // silently dropping the `..` — and that is exactly the symlink/junction
+    // escape we are guarding against. Test the raw string form.
+    const rawSegments = recordPath.split(/[\\/]/);
+    if (rawSegments.includes('..')) {
+        throw invalidPathError(recordPath, 'must not contain .. segments');
+    }
+    const expected = resolve(projectRoot, '.peaks', SUB_AGENTS_DIR);
+    const rel = relative(expected, recordPath);
+    if (rel.startsWith('..') || isAbsolute(rel)) {
+        throw invalidPathError(recordPath, 'must be under .peaks/_sub_agents/');
+    }
+    let realRecord;
+    let realRoot;
+    try {
+        // For existing files, realpathSync resolves symlinks/junctions.
+        // For new files (the common case for `dispatch` CLI writing the
+        // record for the first time), we realpath the parent + check the
+        // leaf's basename shape.
+        const parent = dirname(recordPath);
+        const realParent = realpathSync(parent);
+        realRecord = resolve(realParent, recordPath.slice(parent.length + 1));
+        realRoot = realpathSync(projectRoot);
+    }
+    catch (error) {
+        // Realpath can fail if the parent does not exist yet (CLI is about
+        // to create it). Fall back to lexical comparison against the
+        // canonical projectRoot — the write will then create the file,
+        // and any symlink in the parent will be caught on the next read.
+        const fallback = resolve(projectRoot, '.peaks', SUB_AGENTS_DIR);
+        const rel2 = relative(fallback, recordPath);
+        if (rel2.startsWith('..') || isAbsolute(rel2)) {
+            throw invalidPathError(recordPath, 'must be under .peaks/_sub_agents/');
+        }
+        return recordPath;
+    }
+    const realRel = relative(realRoot, realRecord);
+    if (realRel.startsWith('..' + sep) || realRel === '..' || isAbsolute(realRel)) {
+        throw invalidPathError(recordPath, 'escapes project root via symlink');
+    }
+    return realRecord;
+}
+function sanitizeSegment(segment, label) {
+    if (typeof segment !== 'string' || segment.length === 0) {
+        throw new Error(`Invalid ${label}: empty`);
+    }
+    if (!/^[A-Za-z0-9._-]+$/.test(segment)) {
+        throw new Error(`Invalid ${label}: must match [A-Za-z0-9._-]+ (got ${JSON.stringify(segment)})`);
+    }
+    if (segment.includes('..')) {
+        throw new Error(`Invalid ${label}: must not contain ..`);
+    }
+    return segment;
+}
+function invalidPathError(path, reason) {
+    const err = new Error(`Unsafe dispatch record path (${reason}): ${path}`);
+    err.code = 'INVALID_RECORD_PATH';
+    err.path = path;
+    return err;
+}

package/dist/src/services/session/getSessionDir.d.ts

@@ -0,0 +1 @@
+export declare function getSessionDir(projectRoot: string, sessionId: string): string;

package/dist/src/services/session/getSessionDir.js

@@ -0,0 +1,27 @@
+/**
+ * Canonical session-directory resolver.
+ *
+ * As of slice 2026-06-05-peaks-runtime-layer the per-session workspace
+ * lives at `<root>/.peaks/_runtime/<sessionId>/` (NOT at the legacy
+ * `<root>/.peaks/<sessionId>/` location). All **write** paths MUST route
+ * through this helper. The legacy top-level path is preserved as a
+ * back-compat **read** fallback only (see
+ * `src/services/artifacts/request-artifact-service.ts:662` etc.).
+ *
+ * The corresponding test in
+ * `tests/unit/services/session/session-dir-canonical.test.ts` enforces
+ * two invariants:
+ *
+ *   (a) `getSessionDir(root, sid)` returns `<root>/.peaks/_runtime/<sid>`.
+ *   (b) A static scan of `src/` flags any direct join of `.peaks` +
+ *       `sessionId` that does NOT route through this resolver. The
+ *       back-compat **read** sites are excluded by explicit allow-list.
+ *
+ * @param projectRoot - Absolute path to the project root.
+ * @param sessionId - The session identifier (e.g. `2026-06-06-session-5b1095`).
+ * @returns Absolute path to the canonical session directory.
+ */
+import { join } from 'node:path';
+export function getSessionDir(projectRoot, sessionId) {
+    return join(projectRoot, '.peaks', '_runtime', sessionId);
+}

package/dist/src/services/session/index.d.ts

@@ -1 +1,2 @@
 export { ensureSession, getSessionId, getCurrentSessionDir, listSessions, getSessionMeta, setSessionMeta, setSessionTitle, listSessionMetas, getProjectScanPath, hasProjectScan, setCurrentSessionBinding, rotateSessionBinding, type SessionInfo, type SessionMeta } from './session-manager.js';
+export { getSessionDir } from './getSessionDir.js';

package/dist/src/services/session/index.js

@@ -1 +1,2 @@
 export { ensureSession, getSessionId, getCurrentSessionDir, listSessions, getSessionMeta, setSessionMeta, setSessionTitle, listSessionMetas, getProjectScanPath, hasProjectScan, setCurrentSessionBinding, rotateSessionBinding } from './session-manager.js';
+export { getSessionDir } from './getSessionDir.js';

package/dist/src/services/signal/cancel-handler.d.ts

@@ -0,0 +1,14 @@
+export interface CancelResult {
+    readonly cancelled: number;
+    readonly scanned: number;
+    readonly paths: readonly string[];
+}
+/**
+ * Walk `.peaks/_sub_agents/<sid>/`, mark every in-flight record as
+ * `cancelled + disposed`, write back atomically (tmp + rename), and
+ * return the count. Records that already have `completedAt` set are
+ * skipped (they were already finished by the time cancel fired).
+ */
+export declare function cancelInFlightDispatches(projectRoot: string, sessionId: string, options?: {
+    now?: () => Date;
+}): CancelResult;

package/dist/src/services/signal/cancel-handler.js

@@ -0,0 +1,76 @@
+/**
+ * Slice #009 / G5 RL-9 — user cancel must dispose in-flight dispatch records.
+ *
+ * When Solo's main loop receives SIGINT (Ctrl-C) or the user runs
+ * `peaks workflow cancel --rid <rid>`, the loop MUST mark in-flight
+ * dispatch records as `outcome: "cancelled"` + `disposed: true` +
+ * `disposedAt: now()` BEFORE exiting.
+ *
+ * "In-flight" = a record with `createdAt` populated AND
+ * `completedAt: null`. Those are the ones that the LLM got a toolCall
+ * for but did not (yet) confirm completion.
+ *
+ * This module is the helper Solo calls. The wiring (signal listener,
+ * cancel command side-effect) is the Solo main loop's responsibility;
+ * this module is the pure data operation.
+ */
+import { existsSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+const CANCELLED_OUTCOME = 'cancelled';
+const CANCELLED_STATUS = 'cancelled';
+/**
+ * Walk `.peaks/_sub_agents/<sid>/`, mark every in-flight record as
+ * `cancelled + disposed`, write back atomically (tmp + rename), and
+ * return the count. Records that already have `completedAt` set are
+ * skipped (they were already finished by the time cancel fired).
+ */
+export function cancelInFlightDispatches(projectRoot, sessionId, options = {}) {
+    const now = options.now ?? (() => new Date());
+    const dir = join(projectRoot, '.peaks', '_sub_agents', sessionId);
+    if (!existsSync(dir)) {
+        return { cancelled: 0, scanned: 0, paths: [] };
+    }
+    let scanned = 0;
+    const cancelledPaths = [];
+    for (const entry of readdirSync(dir)) {
+        if (!entry.startsWith('dispatch-') || !entry.endsWith('.json'))
+            continue;
+        const fullPath = join(dir, entry);
+        scanned += 1;
+        const record = readRecordOrNull(fullPath);
+        if (record === null)
+            continue;
+        if (record.completedAt !== null)
+            continue; // already finished
+        const cancelled = {
+            ...record,
+            completedAt: now().toISOString(),
+            outcome: CANCELLED_OUTCOME,
+            status: CANCELLED_STATUS,
+            disposed: true,
+            disposedAt: now().toISOString()
+        };
+        writeFileSync(fullPath, JSON.stringify(cancelled, null, 2) + '\n', 'utf8');
+        cancelledPaths.push(fullPath);
+    }
+    return { cancelled: cancelledPaths.length, scanned, paths: cancelledPaths };
+}
+function readRecordOrNull(path) {
+    try {
+        const raw = readFileSync(path, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (typeof parsed !== 'object' || parsed === null)
+            return null;
+        const obj = parsed;
+        if (typeof obj.createdAt !== 'string')
+            return null;
+        if (typeof obj.completedAt !== 'string' && obj.completedAt !== null)
+            return null;
+        if (typeof obj.role !== 'string')
+            return null;
+        return obj;
+    }
+    catch {
+        return null;
+    }
+}

package/dist/src/services/skill/resume-detector.d.ts

@@ -0,0 +1,54 @@
+export type ResumeKind = 'fresh' | 'complete' | 'resume' | 'in-flight';
+/**
+ * Step at which the slice should resume. The values are stable strings
+ * (not raw step numbers) so log output is greppable and a future
+ * workflow reshuffle can keep the names but remap the steps.
+ */
+export type ResumePoint = 'rd-planning' | 'rd-review-fanout' | 'rd-perf-baseline' | 'qa-test-cases' | 'qa-execution' | 'qa-validation' | 'txt-handoff';
+/**
+ * Mid-implementation RD/QA states. The skill body treats these as
+ * "ask the user to confirm the in-flight gate" — there is no safe
+ * auto-resume for a slice the LLM is currently driving.
+ */
+export type InFlightState = 'spec-locked' | 'implemented' | 'running' | 'blocked';
+export type ResumeClassification = {
+    kind: ResumeKind;
+    /** Set when `kind === 'resume'`; the step that should be re-entered. */
+    point: ResumePoint | null;
+    /** Set when `kind === 'in-flight'`; the current non-terminal state. */
+    state: InFlightState | null;
+    /**
+     * Files that the SKILL.md spec says should already exist for the
+     * current gate but were not found. Informational — the LLM uses this
+     * to decide what to produce next. Includes legacy-missing files when
+     * the legacy path was read.
+     */
+    missingArtifacts: string[];
+    /**
+     * Inconsistencies between state and file presence (e.g. RD is
+     * `state: qa-handoff` but `rd/code-review.md` is absent). The
+     * classifier still emits a `resume:` verdict, but the warning is the
+     * audit trail.
+     */
+    warnings: string[];
+    /** Number of RD/QA requests filtered as `user-requested-abandon`. */
+    abandonedRequestCount: number;
+    /**
+     * True when the canonical `.peaks/_runtime/<sid>/` path was absent
+     * and the classifier fell back to `.peaks/<sid>/`. Lets the SKILL.md
+     * surface a one-time migration reminder to the user.
+     */
+    usedLegacyPath: boolean;
+};
+/**
+ * Classify a session's resume state. Pure function — does not write
+ * files, does not call any peaks CLI.
+ *
+ * @param sid        The session id (e.g. `2026-06-06-session-22f08c`).
+ * @param peaksRoot  The canonical peaks runtime root, i.e. the
+ *                   directory containing `<sid>/` subdirs. For the
+ *                   v1.3.2 layout this is `<repo>/.peaks/_runtime`.
+ *                   The legacy `<repo>/.peaks` layout is also accepted
+ *                   for one minor release (see `usedLegacyPath`).
+ */
+export declare function classifyResume(sid: string, peaksRoot: string): ResumeClassification;

package/dist/src/services/skill/resume-detector.js

@@ -0,0 +1,334 @@
+/**
+ * Peaks-Cli Solo Step 0.7 — Resume-mode detector.
+ *
+ * Mirrors the classification table in
+ * `skills/peaks-solo/SKILL.md` "Peaks-Cli Step 0.7: Detect unfinished work
+ * and offer resume". The function is a pure read of session artifacts;
+ * it performs no side effects and is safe to call from hooks, scripts,
+ * and skills.
+ *
+ * Two classification sources are merged:
+ *   1. State-based (PRD / RD / QA request artifact `state:` field) →
+ *      determines the *deepest completed gate*.
+ *   2. File-presence ("Other resume triggers" table) → if a required
+ *      artifact is missing for a gate that state says is complete, the
+ *      classifier emits a `resume:<earlier-point>` verdict AND a
+ *      `warnings[]` entry flagging the inconsistency.
+ *
+ * Primary vs. abandoned filter: when multiple RD/QA request artifacts
+ * exist for the same session (the 8-slice governance pass leaves
+ * `deferred`/`abandoned` artifacts alongside the active one), the
+ * classifier filters out files whose `state: blocked` field is paired
+ * with a `user-requested-abandon` transition note. The remaining
+ * artifacts are sorted by filename (alphabetical) and the first is the
+ * primary.
+ *
+ * Legacy path fallback: prefers the canonical
+ * `.peaks/_runtime/<sid>/` layout introduced in slice
+ * `2026-06-05-peaks-runtime-layer`; falls back to the pre-migration
+ * `.peaks/<sid>/` for one minor release so older trees do not show as
+ * false "fresh". The `usedLegacyPath` field reports which path was
+ * read.
+ */
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+const MID_IMPL_RD_STATES = new Set([
+    'spec-locked',
+    'implemented',
+    'running',
+    'blocked'
+]);
+/**
+ * Classify a session's resume state. Pure function — does not write
+ * files, does not call any peaks CLI.
+ *
+ * @param sid        The session id (e.g. `2026-06-06-session-22f08c`).
+ * @param peaksRoot  The canonical peaks runtime root, i.e. the
+ *                   directory containing `<sid>/` subdirs. For the
+ *                   v1.3.2 layout this is `<repo>/.peaks/_runtime`.
+ *                   The legacy `<repo>/.peaks` layout is also accepted
+ *                   for one minor release (see `usedLegacyPath`).
+ */
+export function classifyResume(sid, peaksRoot) {
+    const resolved = resolveSessionDir(sid, peaksRoot);
+    if (resolved === null) {
+        return {
+            kind: 'fresh',
+            point: null,
+            state: null,
+            missingArtifacts: [],
+            warnings: [],
+            abandonedRequestCount: 0,
+            usedLegacyPath: false
+        };
+    }
+    const { sessionDir, usedLegacyPath } = resolved;
+    const prdStates = readRequestStates(sessionDir, 'prd');
+    const rdStatesRaw = readRequestStates(sessionDir, 'rd');
+    const qaStatesRaw = readRequestStates(sessionDir, 'qa');
+    // Filter abandoned (state=blocked + user-requested-abandon note).
+    const abandonedRd = rdStatesRaw.filter((s) => s.abandoned);
+    const abandonedQa = qaStatesRaw.filter((s) => s.abandoned);
+    const abandonedCount = abandonedRd.length + abandonedQa.length;
+    // Primary selection filter: when there are MULTIPLE RD/QA requests,
+    // the abandoned ones are excluded from the candidate set so the
+    // classifier surfaces the active slice, not the audit-only trail.
+    // When there is only ONE request, the abandoned flag is informational
+    // only — a single blocked RD with an abandoned note is still the
+    // primary, because the user might want to unblock and continue.
+    const rdStates = rdStatesRaw.length > 1 ? rdStatesRaw.filter((s) => !s.abandoned) : rdStatesRaw;
+    const qaStates = qaStatesRaw.length > 1 ? qaStatesRaw.filter((s) => !s.abandoned) : qaStatesRaw;
+    const primaryPrd = pickPrimary(prdStates);
+    const primaryRd = pickPrimary(rdStates);
+    const primaryQa = pickPrimary(qaStates);
+    // Phase 1: TXT handoff present → workflow complete. Always wins.
+    if (existsSync(join(sessionDir, 'txt', 'handoff.md'))) {
+        return {
+            kind: 'complete',
+            point: null,
+            state: null,
+            missingArtifacts: [],
+            warnings: [],
+            abandonedRequestCount: abandonedCount,
+            usedLegacyPath
+        };
+    }
+    // Phase 2: every RD/QA request is abandoned (filtered out) AND
+    // there were multiple to begin with. The slice is effectively
+    // dead — return fresh so the user can start over without
+    // re-attaching to the abandoned work.
+    if (primaryRd === null &&
+        primaryQa === null &&
+        abandonedCount > 0 &&
+        (rdStatesRaw.length > 1 || qaStatesRaw.length > 1)) {
+        return {
+            kind: 'fresh',
+            point: null,
+            state: null,
+            missingArtifacts: [],
+            warnings: [],
+            abandonedRequestCount: abandonedCount,
+            usedLegacyPath
+        };
+    }
+    // Phase 3: mid-implementation RD states (spec-locked / implemented /
+    // running / blocked). Wins over the PRD-handed-off branch because
+    // the slice IS in flight — the LLM should not be told to "re-run
+    // the swarm" when an RD artifact is already mid-edit.
+    if (primaryRd !== null && MID_IMPL_RD_STATES.has(primaryRd.state)) {
+        return {
+            kind: 'in-flight',
+            point: null,
+            state: primaryRd.state,
+            missingArtifacts: [],
+            warnings: [],
+            abandonedRequestCount: abandonedCount,
+            usedLegacyPath
+        };
+    }
+    // Phase 4: terminal gates (QA verdict-issued / RD qa-handoff / PRD
+    // handed-off, with file-presence overrides).
+    const terminal = classifyTerminalGates(sessionDir, {
+        primaryPrd,
+        primaryRd,
+        primaryQa,
+        usedLegacyPath,
+        abandonedCount
+    });
+    if (terminal !== null)
+        return terminal;
+    // Phase 5: PRD exists with a non-handed-off state — treat as
+    // in-flight:spec-locked placeholder. The user can confirm whether
+    // they want to advance the PRD or start fresh.
+    if (primaryPrd !== null && primaryPrd.state.length > 0) {
+        return {
+            kind: 'in-flight',
+            point: null,
+            state: 'spec-locked',
+            missingArtifacts: [],
+            warnings: [],
+            abandonedRequestCount: abandonedCount,
+            usedLegacyPath
+        };
+    }
+    return {
+        kind: 'fresh',
+        point: null,
+        state: null,
+        missingArtifacts: [],
+        warnings: [],
+        abandonedRequestCount: abandonedCount,
+        usedLegacyPath
+    };
+}
+function classifyTerminalGates(sessionDir, ctx) {
+    // QA verdict-issued → deepest gate is D. If the test-report is
+    // missing the state is inconsistent; fall back to qa-execution.
+    if (ctx.primaryQa !== null && ctx.primaryQa.state === 'verdict-issued') {
+        const reportPath = join(sessionDir, 'qa', 'test-reports', ctx.primaryQa.filename);
+        if (!existsSync(reportPath)) {
+            return {
+                kind: 'resume',
+                point: 'qa-execution',
+                state: null,
+                missingArtifacts: [`qa/test-reports/${ctx.primaryQa.filename}`],
+                warnings: [
+                    'inconsistent: qa verdict-issued but no qa/test-reports/<rid>.md; CLI gate should have blocked the transition'
+                ],
+                abandonedRequestCount: ctx.abandonedCount,
+                usedLegacyPath: ctx.usedLegacyPath
+            };
+        }
+        return {
+            kind: 'resume',
+            point: 'txt-handoff',
+            state: null,
+            missingArtifacts: ['txt/handoff.md'],
+            warnings: [],
+            abandonedRequestCount: ctx.abandonedCount,
+            usedLegacyPath: ctx.usedLegacyPath
+        };
+    }
+    // RD qa-handoff → deepest gate is C. If the review artifacts are
+    // missing the state is inconsistent; fall back to rd-review-fanout.
+    if (ctx.primaryRd !== null && ctx.primaryRd.state === 'qa-handoff') {
+        const codeReviewPath = join(sessionDir, 'rd', 'code-review.md');
+        const securityReviewPath = join(sessionDir, 'rd', 'security-review.md');
+        const missing = [];
+        if (!existsSync(codeReviewPath))
+            missing.push('rd/code-review.md');
+        if (!existsSync(securityReviewPath))
+            missing.push('rd/security-review.md');
+        if (missing.length > 0) {
+            return {
+                kind: 'resume',
+                point: 'rd-review-fanout',
+                state: null,
+                missingArtifacts: missing,
+                warnings: [
+                    'inconsistent: rd qa-handoff but review artifacts missing; CLI gate should have blocked the transition'
+                ],
+                abandonedRequestCount: ctx.abandonedCount,
+                usedLegacyPath: ctx.usedLegacyPath
+            };
+        }
+        return {
+            kind: 'resume',
+            point: 'qa-validation',
+            state: null,
+            missingArtifacts: ctx.primaryQa === null
+                ? [`qa/test-cases/${ctx.primaryRd.filename}`]
+                : [],
+            warnings: [],
+            abandonedRequestCount: ctx.abandonedCount,
+            usedLegacyPath: ctx.usedLegacyPath
+        };
+    }
+    // PRD handed-off → deepest gate is B. Walk "Other resume triggers"
+    // in priority order: tech-doc > qa/test-cases > in-flight (swarm
+    // converged, RD impl not yet started).
+    if (ctx.primaryPrd !== null && ctx.primaryPrd.state === 'handed-off') {
+        const missing = [];
+        if (!existsSync(join(sessionDir, 'rd', 'tech-doc.md'))) {
+            missing.push('rd/tech-doc.md');
+        }
+        // QA test-cases path: use the RD rid if present, else fall back
+        // to the PRD rid. The rid is shared across roles.
+        const qaCasesRid = ctx.primaryRd !== null
+            ? ctx.primaryRd.filename
+            : ctx.primaryPrd !== null
+                ? ctx.primaryPrd.filename
+                : null;
+        if (qaCasesRid !== null) {
+            const qaCasesPath = join(sessionDir, 'qa', 'test-cases', qaCasesRid);
+            if (!existsSync(qaCasesPath)) {
+                missing.push(`qa/test-cases/${qaCasesRid}`);
+            }
+        }
+        if (missing.includes('rd/tech-doc.md')) {
+            return {
+                kind: 'resume',
+                point: 'rd-planning',
+                state: null,
+                missingArtifacts: missing,
+                warnings: [],
+                abandonedRequestCount: ctx.abandonedCount,
+                usedLegacyPath: ctx.usedLegacyPath
+            };
+        }
+        if (missing.some((m) => m.startsWith('qa/test-cases/'))) {
+            return {
+                kind: 'resume',
+                point: 'qa-test-cases',
+                state: null,
+                missingArtifacts: missing,
+                warnings: [],
+                abandonedRequestCount: ctx.abandonedCount,
+                usedLegacyPath: ctx.usedLegacyPath
+            };
+        }
+        // All post-PRD artifacts present. Either the RD is mid-impl
+        // (handled upstream in Phase 3) or the swarm converged but the
+        // implementation has not yet started. Report the latter as
+        // in-flight:spec-locked so the user can confirm.
+        return {
+            kind: 'in-flight',
+            point: null,
+            state: 'spec-locked',
+            missingArtifacts: [],
+            warnings: [],
+            abandonedRequestCount: ctx.abandonedCount,
+            usedLegacyPath: ctx.usedLegacyPath
+        };
+    }
+    return null;
+}
+/**
+ * Resolve the session directory. Prefers the canonical
+ * `.peaks/_runtime/<sid>/`; falls back to the legacy
+ * `.peaks/<sid>/` (one level up from the runtime root) for one
+ * minor release. Returns `null` when neither path exists.
+ */
+function resolveSessionDir(sid, peaksRoot) {
+    const canonical = join(peaksRoot, sid);
+    if (existsSync(canonical)) {
+        return { sessionDir: canonical, usedLegacyPath: false };
+    }
+    const legacy = join(peaksRoot, '..', sid);
+    if (existsSync(legacy)) {
+        return { sessionDir: legacy, usedLegacyPath: true };
+    }
+    return null;
+}
+function readRequestStates(sessionDir, role) {
+    const dir = join(sessionDir, role, 'requests');
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir)
+        .filter((f) => typeof f === 'string' && f.endsWith('.md'))
+        .sort()
+        .map((filename) => {
+        const full = join(dir, filename);
+        const content = readFileSync(full, 'utf8');
+        return {
+            filename,
+            state: extractState(content),
+            abandoned: hasAbandonedTransitionNote(content)
+        };
+    });
+}
+function extractState(content) {
+    const match = /^-\s*state:\s*(\S+)|^state:\s*(\S+)/m.exec(content);
+    if (match === null)
+        return '';
+    const captured = match[1] ?? match[2] ?? '';
+    return captured.trim();
+}
+function hasAbandonedTransitionNote(content) {
+    return /user-requested-abandon/.test(content);
+}
+function pickPrimary(states) {
+    if (states.length === 0)
+        return null;
+    return states[0] ?? null;
+}

package/dist/src/services/skill/skill-scheduler.d.ts

@@ -0,0 +1,40 @@
+/**
+ * G6 — skill-level heartbeat scheduler config.
+ *
+ * Slice 2026-06-07-sub-agent-dispatch-decouple (G6): the SKILL.md front
+ * matter for a Dispatcher (peaks-solo / peaks-rd / peaks-qa) can opt
+ * into a non-default heartbeat interval by including a line like:
+ *
+ *   heartbeatIntervalSec: 15
+ *
+ * The default is 30 s (RL-13 empirical sweet spot). The poller
+ * cadence is fixed at 10 s (sub-agent 30 s / poller 10 s is the
+ * jitter-resistant offset).
+ *
+ * This module is a pure-key parser — it takes a SKILL.md body and
+ * returns the effective config. The Dispatcher's prompt template
+ * for sub-agents is then responsible for inlining the chosen value
+ * into the sub-agent prompt so that the LLM knows how often to
+ * call `peaks sub-agent heartbeat`.
+ *
+ * Note: the heartbeat *cadence* the LLM uses is enforced socially
+ * (via the prompt), not via any hook. R-1 / R-8 boundary — LLM
+ * behaviour is not observable. The user has been explicit about
+ * this: "心跳是 sub-agent 主动写, peaks CLI 不观测 LLM 行为".
+ */
+export declare const DEFAULT_HEARTBEAT_INTERVAL_SEC = 30;
+export declare const MIN_HEARTBEAT_INTERVAL_SEC = 5;
+export declare const MAX_HEARTBEAT_INTERVAL_SEC = 600;
+export type SkillHeartbeatConfig = {
+    readonly intervalSec: number;
+    /** Source of the chosen value (useful for debugging). */
+    readonly source: 'default' | 'skill-frontmatter';
+};
+/** Parse a SKILL.md body for a `heartbeatIntervalSec: <N>` line. */
+export declare function parseHeartbeatConfig(skillBody: string): SkillHeartbeatConfig;
+/**
+ * Build the heartbeat-instruction paragraph to inline in a sub-agent
+ * prompt. The LLM reads this and adjusts its `peaks sub-agent
+ * heartbeat` cadence accordingly.
+ */
+export declare function heartbeatInstructionParagraph(config: SkillHeartbeatConfig): string;