peaks-loop 3.0.0

package/dist/src/cli/commands/core/session-command.js

@@ -0,0 +1,213 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { getSessionMeta, rotateSessionBinding, setSessionTitle, listSessionMetas } from '../../../services/session/session-manager.js';
+import { resolveCanonicalProjectRoot } from '../../../services/config/config-service.js';
+import { findProjectRoot } from '../../../services/config/config-safety.js';
+import { fail, ok } from '../../../shared/result.js';
+import { addJsonOption, getErrorMessage, printResult } from '../../cli-helpers.js';
+export function registerSessionCommand(program, io) {
+    const session = program.command('session').description('Manage Peaks session directories');
+    addJsonOption(session
+        .command('list')
+        .description('List all session directories with titles and metadata')).action((options) => {
+        const projectRoot = findProjectRoot(process.cwd()) ?? process.cwd();
+        const metas = listSessionMetas(projectRoot);
+        printResult(io, ok('session.list', { sessions: metas, total: metas.length }), options.json);
+    });
+    addJsonOption(session
+        .command('info [sessionId]')
+        .description('Show full metadata for a session directory. Pass --active to resolve the canonical binding from .peaks/_runtime/session.json (the "one command a sub-agent runs to find the parent\'s sid" primitive). Slice 021: --active is the SOLE authoritative way to look up the active session id; the on-disk file path is internal and must NOT be `cat`-ed directly.')
+        .option('--active', 'resolve the canonical session id from .peaks/_runtime/session.json (ignores [sessionId] when set)')
+        .option('--project <path>', 'target project root (defaults to git root or cwd). Slice 021: lets sub-agents skip the cwd heuristic and look up the binding for a specific repo.')
+        // Slice 020 — caller-keyed session binding. The --caller-id flag
+        // overrides the per-process PEAKS_CALLER_ID env var and the
+        // PLATFORM_FALLBACKS table (D4 priority). The resolved callerId is
+        // surfaced in the JSON envelope so callers can confirm what was
+        // resolved without re-deriving it.
+        .option('--caller-id <id>', 'Override the caller id for this invocation (D4 priority: flag beats env beats platform fallback). When set, the response envelope includes the resolved callerId.')).action(async (sessionId, options) => {
+        // Slice 021: --project wins; otherwise the git-root / cwd fallback
+        // (matches the pre-021 behaviour so the existing slice-020 / slice-007
+        // sub-agent flow keeps working unchanged).
+        const projectRoot = options.project !== undefined
+            ? resolveCanonicalProjectRoot(options.project)
+            : (findProjectRoot(process.cwd()) ?? process.cwd());
+        // Slice 020 — resolve the callerId up front when the flag was passed.
+        // We use `resolveCallerId` for D1/D5 validation; an invalid flag
+        // throws CallerIdError (D5 → exit 65). A missing flag and no env
+        // and no fallback also throws (D2 → exit 64). The resolved id is
+        // surfaced in the envelope so the caller can audit.
+        if (options.callerId !== undefined) {
+            const { resolveCallerId, CallerIdError } = await import('../../../services/session/resolve-caller-id.js');
+            let callerId;
+            try {
+                callerId = resolveCallerId({ flagValue: options.callerId });
+            }
+            catch (error) {
+                if (error instanceof CallerIdError) {
+                    const code = error.code === 'EX_USAGE' ? 64 : 65;
+                    printResult(io, fail('session.info', 'CALLER_ID_INVALID', error.message, { source: error.source }, [`Set --caller-id to a value matching ^[a-zA-Z0-9._-]{1,200}$`, 'Or set PEAKS_CALLER_ID env var (or CLAUDE_CODE_SESSION_ID for Claude Code)']), options.json);
+                    process.exitCode = code;
+                    return;
+                }
+                throw error;
+            }
+            // Surface the resolved id in the envelope. When --active is also
+            // passed, look up the binding for this callerId; otherwise
+            // just emit the resolved id so the caller knows what was used.
+            if (options.active === true) {
+                const { getSessionIdCanonical } = await import('../../../services/session/session-manager.js');
+                const { getCallerBinding } = await import('../../../services/session/caller-binding-service.js');
+                const activeSid = getSessionIdCanonical(projectRoot);
+                const callerBinding = getCallerBinding(projectRoot, callerId);
+                // Slice 021: source is the enum that the unified --active primitive
+                // reports. Callers / migration tooling can detect pre-migration trees
+                // by inspecting `source === 'legacy'`.
+                const bindingSource = existsSync(join(projectRoot, '.peaks', '_runtime', 'session.json'))
+                    ? 'canonical'
+                    : 'legacy';
+                printResult(io, ok('session.info', {
+                    active: true,
+                    sessionId: activeSid,
+                    callerId,
+                    callerBindingPeakSessionId: callerBinding?.peakSessionId ?? null,
+                    source: bindingSource
+                }), options.json);
+                return;
+            }
+            printResult(io, ok('session.info', { callerId, note: '--caller-id resolved; pass --active to also look up the bound peak session' }), options.json);
+            return;
+        }
+        // Slice 007 + slice 021 — sub-agent session sharing. A sub-agent that
+        // does not know the parent's sid reads it from the binding via
+        // `peaks session info --active`. Slice 021 turned this into the
+        // SOLE authoritative discovery primitive: it composes on
+        // getSessionIdCanonical (canonicalize-on-read; handles the stored
+        // "projectRoot: '.'" vs caller-passed absolute realpath mismatch
+        // that the F22 fix addressed) AND falls through to getSessionId
+        // (strict-equality) for callers on the original contract. NEITHER
+        // path may call ensureSession() — that would side-effect-create a
+        // fresh binding on miss, erasing the "no active session" signal
+        // sub-agents rely on.
+        if (options.active === true) {
+            // Import lazily to avoid a cycle with workspace-commands.
+            const { getSessionIdCanonical, getSessionId } = await import('../../../services/session/session-manager.js');
+            // 1. Canonicalize-on-read first.
+            let activeSid = getSessionIdCanonical(projectRoot);
+            // 2. Fall through to the strict-equality reader if the canonical
+            //    miss is a projectRoot-form mismatch (e.g. the binding was
+            //    written with the absolute realpath but the caller's form
+            //    normalizes differently). The 2-read fan-out mirrors the
+            //    fallback ensureSession() uses.
+            if (activeSid === null) {
+                activeSid = getSessionId(projectRoot);
+            }
+            if (activeSid === null) {
+                // 3. No binding at all — fail loudly, NO crash, NO side-effect,
+                //    exit 1, message must point at `peaks workspace init`
+                //    (the canonical "first action" command, not the legacy
+                //    "or `peaks skill presence:set`" hedge that the pre-021
+                //    wording used — presence:set would also need a binding to
+                //    resolve the parent sid, so it's not actually a bootstrap
+                //    path).
+                printResult(io, fail('session.info', 'NO_ACTIVE_SESSION', 'No session bound. Run `peaks workspace init --project <repo> --json` to bind one.', { projectRoot }, [`peaks workspace init --project ${projectRoot} --json`]), options.json);
+                process.exitCode = 1;
+                return;
+            }
+            // 4. Determine the on-disk source so callers (and future
+            //    migration tooling) can detect pre-migration trees. The
+            //    canonical file is preferred when both exist (slice 005
+            //    contract).
+            const bindingSource = existsSync(join(projectRoot, '.peaks', '_runtime', 'session.json'))
+                ? 'canonical'
+                : 'legacy';
+            // Slice 021: when only the legacy back-compat path is present,
+            // surface a warning so callers (and humans tailing the JSON)
+            // see "this tree has not been reconciled to the canonical
+            // home yet". The warning is informational; the binding is
+            // still valid for one minor release (slice 005 / 006
+            // contract). `warnings` is a top-level envelope field, not a
+            // data field, so it goes through ok()'s 3rd positional arg.
+            const legacyWarnings = bindingSource === 'legacy'
+                ? ['Read from legacy back-compat path .peaks/.session.json. Run `peaks workspace reconcile --apply` to migrate to the canonical home (.peaks/_runtime/session.json).']
+                : [];
+            printResult(io, ok('session.info', {
+                active: true,
+                sessionId: activeSid,
+                bindingPath: bindingSource === 'canonical'
+                    ? join(projectRoot, '.peaks', '_runtime', 'session.json')
+                    : join(projectRoot, '.peaks', '.session.json'),
+                projectRoot,
+                source: bindingSource
+            }, legacyWarnings), options.json);
+            return;
+        }
+        if (sessionId === undefined) {
+            printResult(io, fail('session.info', 'SESSION_ID_REQUIRED', 'session.info requires a <sessionId> or --active', {}, ['Pass a <sessionId> argument, or use --active to resolve the canonical binding']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        const meta = getSessionMeta(projectRoot, sessionId);
+        if (meta === null) {
+            printResult(io, fail('session.info', 'SESSION_NOT_FOUND', `Session "${sessionId}" not found or has no metadata`, { sessionId }, ['Use `peaks session list` to see available sessions']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        printResult(io, ok('session.info', meta), options.json);
+    });
+    addJsonOption(session
+        .command('title <sessionId> <title>')
+        .description('Set a human-readable title for a session directory')).action((sessionId, title, options) => {
+        const projectRoot = findProjectRoot(process.cwd()) ?? process.cwd();
+        try {
+            const meta = setSessionTitle(projectRoot, sessionId, title);
+            printResult(io, ok('session.title', meta), options.json);
+        }
+        catch (error) {
+            printResult(io, fail('session.title', 'SESSION_TITLE_FAILED', getErrorMessage(error), { sessionId }, ['Verify the sessionId exists under .peaks/']), options.json);
+            process.exitCode = 1;
+        }
+    });
+    // Slice 011: `peaks session checkpoint` and `peaks session resume`.
+    // Skill-level primitives — the LLM is the decision-maker; CLI is the muscle.
+    // Lazy-import to avoid circular resolution with the session-manager.
+    void (async () => {
+        const { registerSessionCheckpointCommand } = await import('../session-checkpoint-command.js');
+        const { registerSessionResumeCommand } = await import('../session-resume-command.js');
+        registerSessionCheckpointCommand(session, io);
+        registerSessionResumeCommand(session, io);
+    })();
+    addJsonOption(session
+        .command('rotate')
+        .description('Drop the project-level session binding so the next peaks call auto-generates a fresh session id. The on-disk session directory is left intact — only .peaks/.session.json is removed.')
+        .option('--project <path>', 'target project root (defaults to git root or cwd)')
+        .option('--reason <text>', 'human-readable reason for the rotation, recorded in the response data')).action(async (options) => {
+        try {
+            // Canonicalise the project root before touching the binding.
+            // `peaks workspace init` writes the binding with the
+            // realpath-resolved projectRoot; if the caller passes a path
+            // through a symlink (notably /tmp on macOS, which is a
+            // symlink to /private/tmp) without canonicalising here,
+            // readSessionFile's strict projectRoot equality check fails
+            // and the rotate call reports "no prior binding" even
+            // though one exists. The same fix as `workspace init`
+            // (b193714): promote the path to the git root, falling back
+            // to the heuristic, falling back to cwd verbatim.
+            const projectRoot = options.project !== undefined
+                ? options.project
+                : (findProjectRoot(process.cwd()) ?? process.cwd());
+            const canonical = resolveCanonicalProjectRoot(projectRoot);
+            const previousSessionId = rotateSessionBinding(canonical);
+            printResult(io, ok('session.rotate', {
+                previousSessionId,
+                ...(options.reason !== undefined ? { reason: options.reason } : {}),
+                note: previousSessionId === null
+                    ? 'No prior binding was present; the project is already unbound.'
+                    : 'Next ensureSession() call will auto-generate a fresh id. The previous session directory is still on disk at .peaks/_runtime/<previousSessionId>/.'
+            }), options.json);
+        }
+        catch (error) {
+            printResult(io, fail('session.rotate', 'SESSION_ROTATE_FAILED', getErrorMessage(error), { projectRoot: options.project }, ['Verify the project path exists and is writable']), options.json);
+            process.exitCode = 1;
+        }
+    });
+}

package/dist/src/cli/commands/core/skill-command.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+import { type ProgramIO } from '../../cli-helpers.js';
+export declare function registerSkillCommand(program: Command, io: ProgramIO): void;

package/dist/src/cli/commands/core/skill-command.js

@@ -0,0 +1,275 @@
+import { runDoctor } from '../../../services/doctor/doctor-service.js';
+import { listSkills } from '../../../services/skills/skill-registry.js';
+import { runSkillSync, SYNC_PLATFORMS } from '../../../services/skills/sync-service.js';
+import { inspectSkillRunbook } from '../../../services/skills/skill-runbook-service.js';
+import { setSkillPresence, clearSkillPresence, getSkillPresence, isSkillPresenceMode, touchSkillHeartbeat, checkStalePresence } from '../../../services/skills/skill-presence-service.js';
+import { detectPresenceMarker } from '../../../services/hooks/presence-marker-detector.js';
+import { findProjectRoot } from '../../../services/config/config-safety.js';
+import { generateProjectContext } from '../../../services/memory/project-context-service.js';
+import { getSessionId, setSessionMeta } from '../../../services/session/session-manager.js';
+import { fail, ok } from '../../../shared/result.js';
+import { addJsonOption, getErrorMessage, printResult } from '../../cli-helpers.js';
+export function registerSkillCommand(program, io) {
+    const skill = program.command('skill').description('Manage Peaks skills');
+    addJsonOption(skill.command('list').description('List skills derived from skills/*/SKILL.md')).action(async (options) => {
+        const skills = await listSkills();
+        if (options.json === true) {
+            printResult(io, ok('skill.list', { skills }), true);
+        }
+        else {
+            const sorted = [...skills].sort((a, b) => {
+                if (a.name === 'peaks-sop')
+                    return -1;
+                if (b.name === 'peaks-sop')
+                    return 1;
+                if (a.name === 'peaks-solo')
+                    return -1;
+                if (b.name === 'peaks-solo')
+                    return 1;
+                return a.name.localeCompare(b.name);
+            });
+            for (const skill of sorted) {
+                io.stdout(`  ${skill.name.padEnd(14)}${skill.description}`);
+            }
+            io.stdout(`\n  Invoke any skill by typing its name in conversation (e.g. \`peaks-sop\`).`);
+        }
+    });
+    addJsonOption(skill.command('doctor').description('Run skill-related doctor checks')).action(async (options) => {
+        const report = await runDoctor();
+        const skillChecks = report.checks.filter((check) => check.id.startsWith('skill'));
+        const failed = skillChecks.filter((check) => !check.ok).length;
+        if (options.json === true) {
+            printResult(io, ok('skill.doctor', { checks: skillChecks, ok: failed === 0 }), true);
+        }
+        else {
+            for (const check of skillChecks) {
+                const icon = check.ok ? '+' : '×';
+                io.stdout(`  ${icon}  ${check.message}`);
+            }
+            io.stdout(`\n  ${skillChecks.length - failed} passed, ${failed} failed`);
+            if (failed > 0) {
+                io.stderr('\nOne or more skill checks failed.');
+            }
+        }
+        if (failed > 0) {
+            process.exitCode = 1;
+        }
+    });
+    // Slice #12 final piece (per spec §9 line 1105):
+    // `peaks skills sync 8 平台分发`. Idempotent: re-running is a
+    // no-op when the symlinks are already correct.
+    addJsonOption(skill
+        .command('sync')
+        .description(`Sync the peaks-* skill family to one or all of the 8 supported LLM-CLI platforms (${SYNC_PLATFORMS.join(', ')}). Idempotent.`)
+        .option('--platform <id>', `sync only one platform (default: --all). Valid: ${SYNC_PLATFORMS.join(', ')}`)
+        .option('--all', 'sync all 8 platforms (default if --platform is omitted)')
+        .option('--dry-run', 'do not write; emit the same shape with applied=false')
+        .option('--project <path>', 'project root (default: cwd)')).action(async (options) => {
+        try {
+            const projectRoot = options.project ?? process.cwd();
+            const platforms = options.platform !== undefined ? [options.platform] : undefined;
+            const result = await runSkillSync({
+                projectRoot,
+                ...(platforms !== undefined ? { platforms } : {}),
+                ...(options.dryRun === true ? { dryRun: true } : {}),
+            });
+            const envelope = ok('skill.sync', result, [], [
+                `syncedCount: ${result.syncedCount}/${result.perPlatform.length} platforms`,
+                `totalInstalled: ${result.totalInstalled} skill symlinks`,
+                result.failedCount > 0
+                    ? `failedCount: ${result.failedCount} (run \`peaks skill status\` for details)`
+                    : 'no failures',
+            ]);
+            printResult(io, envelope, options.json);
+            if (result.failedCount > 0) {
+                process.exitCode = 1;
+            }
+        }
+        catch (error) {
+            const message = getErrorMessage(error);
+            printResult(io, fail('skill.sync', 'SKILL_SYNC_FAILED', message, { applied: false }, [message]), options.json);
+            process.exitCode = 1;
+        }
+    });
+    addJsonOption(skill
+        .command('runbook <name>')
+        .description('Inspect a skill Default runbook section and its --apply authorization-note status')).action(async (name, options) => {
+        try {
+            const inspection = await inspectSkillRunbook(name);
+            const result = inspection.ok
+                ? ok('skill.runbook', inspection)
+                : fail('skill.runbook', inspection.hasRunbook ? 'SKILL_RUNBOOK_APPLY_UNGATED' : 'SKILL_RUNBOOK_MISSING', inspection.hasRunbook
+                    ? `Skill ${inspection.name} has ${inspection.destructiveApplyLines.length} destructive --apply command(s) without an authorization/dry-run note`
+                    : `Skill ${inspection.name} is missing a ## Default runbook section`, inspection, inspection.hasRunbook
+                    ? ['Add an authorization or --dry-run note next to destructive --apply lines in the runbook section']
+                    : ['Add a `## Default runbook` section to the skill SKILL.md']);
+            printResult(io, result, options.json);
+            if (!inspection.ok) {
+                process.exitCode = 1;
+            }
+        }
+        catch (error) {
+            printResult(io, fail('skill.runbook', 'SKILL_NOT_FOUND', getErrorMessage(error), { name }), options.json);
+            process.exitCode = 1;
+        }
+    });
+    addJsonOption(skill
+        .command('presence')
+        .description('Show the currently active Peaks skill (alias: presence:get)')
+        .option('--check-stale', 'slice 002 (v2.15.0): also report whether the recorded outer session id still matches the current one. Default false (back-compat).')
+        .option('--project <path>', 'project root (default: cwd)')).action((options) => {
+        const presence = getSkillPresence(options.project);
+        if (presence === null) {
+            printResult(io, ok('skill.presence', { active: false }), options.json);
+            return;
+        }
+        if (options.checkStale === true) {
+            // Slice 002 (v2.15.0) AC-1: pair the read with a staleness
+            // check so callers (peaks-solo Step 1, statusline) get both
+            // pieces of info from a single CLI invocation. The presence
+            // is returned UNCHANGED — `--check-stale` is a read-only flag,
+            // not a clear.
+            const staleness = checkStalePresence({ projectRootOverride: options.project });
+            printResult(io, ok('skill.presence', {
+                active: true,
+                ...presence,
+                stale: staleness.stale,
+                staleReason: staleness.reason,
+                currentOuterSessionId: staleness.currentOuterSessionId,
+                recordedOuterSessionId: staleness.recordedOuterSessionId
+            }), options.json);
+            return;
+        }
+        printResult(io, ok('skill.presence', { active: true, ...presence }), options.json);
+    });
+    addJsonOption(skill
+        .command('presence:set <name>')
+        .description('Set the currently active Peaks skill for session-wide visibility')
+        .option('--mode <mode>', 'execution mode')
+        .option('--gate <gate>', 'current gate')
+        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')).action((name, options) => {
+        const projectRoot = options.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
+        if (options.mode !== undefined && !isSkillPresenceMode(options.mode)) {
+            printResult(io, fail('skill.presence:set', 'INVALID_MODE', `Invalid mode: ${options.mode} (expected one of: full-auto, assisted, swarm, strict)`, { name, mode: options.mode }, ['Use a valid mode: full-auto, assisted, swarm, or strict']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        const presence = setSkillPresence(name, options.mode, options.gate, options.project);
+        // As of slice 003-2026-06-06-session-layout-canonicalize we do NOT
+        // call `ensureSession` here. The CLI wrapper previously spawned a
+        // new session on every presence call, which made the canonical
+        // session binding drift (the LLM saw the session id change every
+        // turn). The presence now reuses the session bound at
+        // `.peaks/_runtime/session.json` (or the legacy `.peaks/.session.json`
+        // during the back-compat window). If no session is bound, the
+        // presence still writes the active-skill marker — downstream code
+        // can `peaks workspace init` separately to create the session.
+        //
+        // Session metadata is updated when a session is bound (read-only
+        // path: `getSessionId`). We do not auto-spawn a session.
+        const boundSessionId = getSessionId(projectRoot);
+        if (boundSessionId !== null) {
+            setSessionMeta(projectRoot, boundSessionId, {
+                skill: name,
+                ...(options.mode ? { mode: options.mode } : {}),
+                ...(options.gate ? { gate: options.gate } : {})
+            });
+        }
+        printResult(io, ok('skill.presence:set', { active: true, ...presence }), options.json);
+    });
+    addJsonOption(skill
+        .command('presence:clear')
+        .description('Clear the active Peaks skill presence indicator and update project context')
+        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')).action((options) => {
+        const projectRoot = options.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
+        const removed = clearSkillPresence(options.project);
+        // Auto-update project context so future sessions have up-to-date history
+        try {
+            generateProjectContext(projectRoot);
+        }
+        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+            // non-fatal: context update failure should not block presence clear
+        }
+        printResult(io, ok('skill.presence:clear', { active: false, removed, projectContextUpdated: true }), options.json);
+    });
+    // Slice 002 (v2.15.0) — AC-1: presence staleness detector.
+    // peaks-solo Step 1 (and `peaks solo should-pause --step
+    // step-1-mode-select`) calls this to decide whether the recorded
+    // `mode` field can be trusted or whether the LLM must AskUserQuestion.
+    addJsonOption(skill
+        .command('presence:check-stale')
+        .description('Slice 002 (v2.15.0) AC-1: report whether the recorded presence outer session id still matches the current outer session id. ' +
+        'Returns { stale: boolean, reason: "outer-session-mismatch" | "no-presence" | null }. ' +
+        'Pure read-only — does NOT clear the presence (use `peaks skill presence:clear` for that).')
+        .option('--project <path>', 'project root (default: cwd)')
+        .option('--current-outer <id>', 'override the current outer session id (test seam; default: read from PEAKS_OUTER_SESSION_ID / CLAUDE_CODE_SESSION_ID)')).action((options) => {
+        // v2.15.0 slice 002 repair: do NOT pass `currentOuter: undefined`
+        // when the user omits the flag. The service-layer branch
+        // `'currentOuter' in opts` returns true for an explicit
+        // `undefined` (the key exists on the spread object literal),
+        // which would skip the env-var fallback and pin `current =
+        // undefined` — always reading the presence as stale. Build a
+        // sparse opts object so the service can fall back to
+        // `getCurrentOuterSessionId()` (reads PEAKS_OUTER_SESSION_ID /
+        // CLAUDE_CODE_SESSION_ID).
+        const checkOpts = options.project !== undefined ? { projectRootOverride: options.project } : {};
+        if (options.currentOuter !== undefined) {
+            checkOpts.currentOuter = options.currentOuter;
+        }
+        const result = checkStalePresence(checkOpts);
+        // Always emit `currentOuterSessionId` in the JSON envelope (even
+        // when undefined → ''), per slice 002 AC-1 contract: downstream
+        // tooling (statusline, sub-agent dispatch) reads the field by
+        // name, never by `data.currentOuterSessionId ?? ''`. JSON.stringify
+        // drops `undefined` properties, so we coerce to '' before
+        // wrapping in the envelope.
+        const data = {
+            stale: result.stale,
+            reason: result.reason,
+            presence: result.presence,
+            currentOuterSessionId: result.currentOuterSessionId ?? '',
+            recordedOuterSessionId: result.recordedOuterSessionId ?? ''
+        };
+        printResult(io, ok('skill.presence:check-stale', data), options.json);
+    });
+    addJsonOption(skill
+        .command('heartbeat')
+        .description('Show the heartbeat status of the active Peaks skill')).action((options) => {
+        const presence = getSkillPresence();
+        if (presence === null) {
+            printResult(io, ok('skill.heartbeat', { active: false, heartbeat: 'none' }), options.json);
+            return;
+        }
+        printResult(io, ok('skill.heartbeat', {
+            active: true,
+            skill: presence.skill,
+            gate: presence.gate ?? null,
+            lastHeartbeat: presence.lastHeartbeat ?? presence.setAt,
+            setAt: presence.setAt
+        }), options.json);
+    });
+    addJsonOption(skill
+        .command('heartbeat:touch')
+        .description('Update the heartbeat timestamp (called by the LLM each turn to confirm peaks skill context is alive)')).action((options) => {
+        const updated = touchSkillHeartbeat();
+        if (updated === null) {
+            printResult(io, ok('skill.heartbeat:touch', { active: false, heartbeat: 'none' }), options.json);
+            return;
+        }
+        printResult(io, ok('skill.heartbeat:touch', {
+            active: true,
+            skill: updated.skill,
+            lastHeartbeat: updated.lastHeartbeat
+        }), options.json);
+    });
+    addJsonOption(skill
+        .command('detect-marker-loss')
+        .description('Detect whether the latest assistant message lost the Peaks-Cli status header while a peaks skill is still active (slice 028 detection primitive).')
+        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')
+        .option('--message <text>', 'latest assistant message text to scan (defaults to reading the most recent LLM response from the stdin pipe, or empty string when no pipe is attached)')).action((options) => {
+        const projectRoot = options.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
+        const message = options.message ?? '';
+        const result = detectPresenceMarker({ project: projectRoot, latestAssistantMessage: message });
+        printResult(io, ok('skill.detect-marker-loss', result), options.json);
+    });
+}

package/dist/src/cli/commands/core/standards-command.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+import { type ProgramIO } from '../../cli-helpers.js';
+export declare function registerStandardsCommand(program: Command, io: ProgramIO): void;

package/dist/src/cli/commands/core/standards-command.js

@@ -0,0 +1,95 @@
+import { summarizeProjectStandardsInitResult, summarizeProjectStandardsUpdateResult } from '../../../services/standards/project-standards-service.js';
+import { executeProjectStandardsInitIdeAware, executeProjectStandardsUpdateIdeAware } from '../../../services/standards/ide-aware-standards-service.js';
+import { migrateStandards } from '../../../services/standards/migrate-service.js';
+import { migrateClaudeRules } from '../../../services/standards/migrate-claude-rules-service.js';
+import { fail, ok } from '../../../shared/result.js';
+import { addJsonOption, getErrorMessage, printResult } from '../../cli-helpers.js';
+export function registerStandardsCommand(program, io) {
+    const standards = program.command('standards').description('Manage project-local coding standards');
+    addJsonOption(standards
+        .command('init')
+        .description('Initialize project-local coding standards for Peaks skill preflight')
+        .requiredOption('--project <path>', 'target project root')
+        .option('--language <language>', 'standards language pack')
+        .option('--ide <id>', 'override IDE detection (e.g. claude-code, trae)')
+        .option('--dry-run', 'preview writes without changing files')
+        .option('--apply', 'write missing standards into the target project')).action((options) => {
+        if (options.dryRun === true && options.apply === true) {
+            printResult(io, fail('standards.init', 'INVALID_STANDARDS_INIT_FLAGS', 'Use either --dry-run or --apply, not both', {}, ['Run without --apply to preview writes, or omit --dry-run when applying standards']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            const result = executeProjectStandardsInitIdeAware({ projectRoot: options.project, ...(options.language !== undefined ? { language: options.language } : {}), ...(options.ide !== undefined ? { ideId: options.ide } : {}), apply: options.apply === true });
+            printResult(io, ok('standards.init', summarizeProjectStandardsInitResult(result)), options.json);
+        }
+        catch (error) {
+            printResult(io, fail('standards.init', 'STANDARDS_INIT_FAILED', getErrorMessage(error), {}, ['Check the project path and existing .claude/rules directory before retrying']), options.json);
+            process.exitCode = 1;
+        }
+    });
+    addJsonOption(standards
+        .command('update')
+        .description('Append managed standards metadata to an existing CLAUDE.md without rewriting the body')
+        .requiredOption('--project <path>', 'target project root')
+        .option('--language <language>', 'standards language pack')
+        .option('--ide <id>', 'override IDE detection (e.g. claude-code, trae)')
+        .option('--dry-run', 'preview writes without changing files')
+        .option('--apply', 'append managed metadata to the target project')).action((options) => {
+        if (options.dryRun === true && options.apply === true) {
+            printResult(io, fail('standards.update', 'INVALID_STANDARDS_UPDATE_FLAGS', 'Use either --dry-run or --apply, not both', {}, ['Run without --apply to preview writes, or omit --dry-run when applying standards updates']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            const result = executeProjectStandardsUpdateIdeAware({ projectRoot: options.project, ...(options.language !== undefined ? { language: options.language } : {}), ...(options.ide !== undefined ? { ideId: options.ide } : {}), apply: options.apply === true });
+            const summary = summarizeProjectStandardsUpdateResult(result);
+            const response = summary.reviewSuggestions.length > 0
+                ? fail('standards.update', 'STANDARDS_UPDATE_REVIEW_REQUIRED', 'Standards update requires manual review', summary, summary.reviewSuggestions)
+                : ok('standards.update', summary);
+            printResult(io, response, options.json);
+            if (summary.reviewSuggestions.length > 0) {
+                process.exitCode = 1;
+            }
+        }
+        catch (error) {
+            printResult(io, fail('standards.update', 'STANDARDS_UPDATE_FAILED', getErrorMessage(error), {}, ['Check the project path, CLAUDE.md contents, and existing .claude/rules directory before retrying']), options.json);
+            process.exitCode = 1;
+        }
+    });
+    addJsonOption(standards
+        .command('migrate')
+        .description('Rewrite a consumer project CLAUDE.md to drop the legacy heartbeat block (slice 028). Dry-run by default; pass --apply to write. With --from-claude-rules, thins the 1.x .claude/rules/ tree to 2-line pointers and scaffolds .peaks/standards/ (slice 2026-06-12-standards-migrate-claude-rules).')
+        .option('--project <path>', 'target project root')
+        .option('--apply', 'rewrite the legacy block in place; default is dry-run')
+        .option('--from-claude-rules', 'thin .claude/rules/ to pointers and scaffold .peaks/standards/ (used by `peaks upgrade --to 2.0`)')).action((options) => {
+        const projectRoot = options.project ?? process.cwd();
+        if (options.fromClaudeRules === true) {
+            try {
+                const result = migrateClaudeRules({ projectRoot, apply: options.apply === true });
+                printResult(io, ok('standards.migrate', result.data, [], [...result.data.nextActions]), options.json);
+            }
+            catch (error) {
+                printResult(io, fail('standards.migrate', 'STANDARDS_MIGRATE_FAILED', getErrorMessage(error), {
+                    backupPath: null,
+                    thinnedFiles: [],
+                    scaffoldedFiles: [],
+                    preservedFiles: [],
+                    wouldChange: false,
+                    applied: false,
+                    nextActions: [],
+                }, [getErrorMessage(error)]), options.json);
+                process.exitCode = 1;
+            }
+            return;
+        }
+        try {
+            const result = migrateStandards({ project: projectRoot, apply: options.apply === true });
+            printResult(io, ok('standards.migrate', result.data, [], result.data.nextActions), options.json);
+        }
+        catch (error) {
+            printResult(io, fail('standards.migrate', 'STANDARDS_MIGRATE_FAILED', getErrorMessage(error), { file: null, foundOldBlock: false, wouldChange: false, applied: false, before: null, after: null, nextActions: [] }, [getErrorMessage(error)]), options.json);
+            process.exitCode = 1;
+        }
+    });
+}

package/dist/src/cli/commands/core-artifact-commands.d.ts

@@ -0,0 +1,15 @@
+import type { Command } from 'commander';
+import type { ProgramIO } from '../cli-helpers.js';
+export type { DoctorLogsSection, BindingSource } from './core/doctor-command.js';
+/**
+ * Top-level CLI command registrar for the "core + artifact" surface.
+ *
+ * Slice 2026-06-24-handoff-path-canonicalization split this orchestrator
+ * out of a single 889-line file so each subcommand group lives in its
+ * own module under `src/cli/commands/core/`. The orchestrator stays
+ * thin (~this file) and forwards to the per-group registrars; the
+ * public `registerCoreAndArtifactCommands(program, io)` signature is
+ * preserved verbatim so `src/cli/program.ts` and the cli-command-branches
+ * unit tests keep importing it from the same path.
+ */
+export declare function registerCoreAndArtifactCommands(program: Command, io: ProgramIO): void;

package/dist/src/cli/commands/core-artifact-commands.js

@@ -0,0 +1,31 @@
+import { registerArtifactsCommand } from './core/artifacts-command.js';
+import { registerBindingCommands } from './core/binding-commands.js';
+import { registerDoctorCommand } from './core/doctor-command.js';
+import { registerMemoryCommand } from './core/memory-command.js';
+import { registerProfileCommand } from './core/profile-command.js';
+import { registerProxyCommand } from './core/proxy-command.js';
+import { registerSessionCommand } from './core/session-command.js';
+import { registerSkillCommand } from './core/skill-command.js';
+import { registerStandardsCommand } from './core/standards-command.js';
+/**
+ * Top-level CLI command registrar for the "core + artifact" surface.
+ *
+ * Slice 2026-06-24-handoff-path-canonicalization split this orchestrator
+ * out of a single 889-line file so each subcommand group lives in its
+ * own module under `src/cli/commands/core/`. The orchestrator stays
+ * thin (~this file) and forwards to the per-group registrars; the
+ * public `registerCoreAndArtifactCommands(program, io)` signature is
+ * preserved verbatim so `src/cli/program.ts` and the cli-command-branches
+ * unit tests keep importing it from the same path.
+ */
+export function registerCoreAndArtifactCommands(program, io) {
+    registerDoctorCommand(program, io);
+    registerBindingCommands(program, io);
+    registerSkillCommand(program, io);
+    registerSessionCommand(program, io);
+    registerProfileCommand(program, io);
+    registerStandardsCommand(program, io);
+    registerMemoryCommand(program, io);
+    registerProxyCommand(program, io);
+    registerArtifactsCommand(program, io);
+}