peaks-loop 3.1.2 → 4.0.0-beta.10

package/dist/src/services/upgrade/1x-detector-service.js

@@ -1,94 +0,0 @@
-/**
- * 1.x → 2.0 detection service — TypeScript mirror of
- * `scripts/install-skills.mjs:detect1xProjectState`.
- *
- * Slice: 2026-06-12-solo-step-0-55-1x-detection.
- *
- * The canonical implementation lives in the .mjs postinstall
- * (because the postinstall runs before any TS compile step).
- * This TS mirror exists so the peaks-solo skill can call
- * `peaks upgrade --detect-1x --project <root> --json` and
- * read a structured JSON envelope to gate the
- * AskUserQuestion that prompts the 1.x → 2.0 upgrade.
- *
- * The two implementations MUST stay in parity. The
- * `tests/integration/upgrade/1x-detector-parity.test.ts`
- * test exercises both on the same fixture and asserts
- * their outputs match.
- */
-import { existsSync, readFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
-const MAX_WALK_UP = 8;
-export function detect1xProjectState(cwd = process.cwd()) {
-    const home = homedir();
-    const signals = [];
-    let projectRoot = null;
-    let configPath = null;
-    // Walk up from cwd looking for .peaks/_runtime (signals
-    // we're inside a peaks project).
-    let dir = cwd;
-    for (let i = 0; i < MAX_WALK_UP; i += 1) {
-        const peaksRuntime = join(dir, '.peaks', '_runtime');
-        if (existsSync(peaksRuntime)) {
-            projectRoot = dir;
-            break;
-        }
-        const parent = dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    // Signal 1: ~/.peaks/config.json with 1.x version
-    const globalConfig = join(home, '.peaks', 'config.json');
-    if (existsSync(globalConfig)) {
-        try {
-            const raw = JSON.parse(readFileSync(globalConfig, 'utf8'));
-            if (typeof raw['version'] === 'string' && /^1\./.test(raw['version'])) {
-                signals.push(`global config at ${globalConfig} is 1.x (${raw['version']})`);
-                if (configPath === null)
-                    configPath = globalConfig;
-            }
-        }
-        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-            // ignore parse error — the 1.x detection is best-effort
-        }
-    }
-    // Signal 2: .claude/rules/common/dev-preference.md with peaks progress
-    if (projectRoot !== null) {
-        const devPref = join(projectRoot, '.claude', 'rules', 'common', 'dev-preference.md');
-        if (existsSync(devPref)) {
-            try {
-                const body = readFileSync(devPref, 'utf8');
-                if (/peaks progress/i.test(body)) {
-                    signals.push(`${devPref} references "peaks progress" (1.x CLI surface, removed in slice #014)`);
-                }
-            }
-            catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-                // ignore
-            }
-        }
-        // Signal 3: project preferences.json missing or 1.x
-        const prefs = join(projectRoot, '.peaks', 'preferences.json');
-        if (!existsSync(prefs)) {
-            signals.push(`${prefs} does not exist (1.x project never migrated)`);
-        }
-        else {
-            try {
-                const raw = JSON.parse(readFileSync(prefs, 'utf8'));
-                if (raw['schema_version'] !== '2.0.0') {
-                    signals.push(`${prefs} has schema_version ${JSON.stringify(raw['schema_version'])}, expected '2.0.0'`);
-                }
-            }
-            catch {
-                signals.push(`${prefs} exists but is not valid JSON`);
-            }
-        }
-    }
-    return {
-        isOneX: signals.length > 0,
-        signals,
-        projectRoot,
-        configPath,
-    };
-}

package/dist/src/services/upgrade/upgrade-service.d.ts

@@ -1,47 +0,0 @@
-export interface UpgradeInput {
-    readonly projectRoot: string;
-    /**
-     * When true, the umbrella is being invoked from the
-     * `npm i -g peaks-loop` postinstall. Suppresses the
-     * interactive prompts and accepts soft-fail on any
-     * sub-step.
-     */
-    readonly auto?: boolean;
-    /**
-     * When omitted, the sub-commands are inferred from PATH
-     * (the postinstall puts the binary there). The umbrella
-     * never blocks on a missing binary — it surfaces the
-     * install hint in `nextActions` instead.
-     */
-    readonly peaksBin?: string;
-}
-export interface SubStepResult {
-    readonly name: string;
-    readonly status: 'pass' | 'fail' | 'skipped';
-    readonly exitCode: number | null;
-    readonly stdout: string;
-    readonly stderr: string;
-    readonly durationMs: number;
-}
-export interface UpgradeResult {
-    readonly applied: boolean;
-    readonly fromVersion: string | null;
-    readonly toVersion: string;
-    readonly projectRoot: string;
-    readonly steps: readonly SubStepResult[];
-    readonly passedCount: number;
-    readonly failedCount: number;
-    readonly skippedCount: number;
-    readonly auditBefore: {
-        totalRedLines: number;
-        cliBacked: number;
-    } | null;
-    readonly auditAfter: {
-        totalRedLines: number;
-        cliBacked: number;
-    } | null;
-    readonly upgradeRecordPath: string | null;
-    readonly nextActions: readonly string[];
-    readonly warnings: readonly string[];
-}
-export declare function runUpgrade(input: UpgradeInput): UpgradeResult;

package/dist/src/services/upgrade/upgrade-service.js

@@ -1,381 +0,0 @@
-/**
- * peaks upgrade --to 2.0 — umbrella service for the 1.x → 2.0
- * migration.
- *
- * Per the "one-key completion" + "minimal-user-operation" tenets
- * (2026-06-11), the typical upgrade path is:
- *
- *   $ npm i -g peaks-loop@2.0   # postinstall does everything
- *
- * OR (postinstall skipped / manual fallback):
- *
- *   $ peaks upgrade --to 2.0
- *
- * The umbrella orchestrates 7 sub-commands:
- *   1. config migrate       (already ships as `peaks config migrate`)
- *   2. standards migrate    (`peaks standards migrate --from-claude-rules`)
- *   3. memory extract       (already ships as `peaks memory extract`)
- *   4. hooks install        (already ships as `peaks hooks install`)
- *   5. skill sync           (this session, `peaks skill sync --all`)
- *   6. audit verify         (already ships as `peaks audit red-lines`)
- *   7. write upgrade record (in-process, .peaks/memory/upgrade-2.0-*.md)
- *
- * Each sub-step is a thin shell-out to the existing CLI; the
- * umbrella's only in-process work is the audit and the upgrade
- * record write. Sub-step failures are SOFT (logged + nextActions
- * populated) so the umbrella never blocks a successful partial
- * upgrade.
- */
-import { spawnSync } from 'node:child_process';
-import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
-import { join, dirname, relative, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { runRedLinesAudit } from '../audit/red-lines-service.js';
-import { savePreferences } from '../preferences/preferences-service.js';
-import { migrateGitignoreFile } from './gitignore-migrate-service.js';
-const STEPS = [
-    { name: 'config-migrate', args: (p) => ['config', 'migrate', '--project', p, '--apply', '--json'] },
-    { name: 'standards-migrate', args: (p) => ['standards', 'migrate', '--from-claude-rules', '--project', p, '--apply', '--json'] },
-    // memory extract is special: its --artifact takes literal file
-    // paths (memory-service rejects glob patterns via realpathSync).
-    // The umbrella expands the three documented patterns
-    // (skills/**/SKILL.md, CLAUDE.md, .claude/rules/**/*.md) on disk
-    // and passes the resulting literal list. See runUpgrade's special
-    // case below for the args resolution; the args function here is
-    // a placeholder so the STEPS table stays uniform.
-    { name: 'memory-extract', args: (p) => ['memory', 'extract', '--project', p, '--json'] },
-    { name: 'hooks-install', args: (p) => ['hooks', 'install', '--project', p, '--json'] },
-    { name: 'skill-sync', args: (p) => ['skill', 'sync', '--all', '--project', p, '--json'] },
-    { name: 'audit-verify', args: (p) => ['audit', 'red-lines', '--project', p, '--json'] },
-];
-/**
- * Walk `<root>` recursively and collect every file whose basename
- * matches `predicate`. Returns absolute paths.
- *
- * Mirrors `readMarkdownFilesRecursive` in
- * src/services/standards/migrate-claude-rules-service.ts so the
- * umbrella does not pull a new glob dependency (Node 20+ engine
- * constraint — `fs.globSync` requires Node 22+).
- */
-function collectFilesRecursive(root, predicate) {
-    if (!existsSync(root))
-        return [];
-    const stat = statSync(root);
-    if (stat.isFile()) {
-        return predicate(root.split(/[\\/]/).pop() ?? '') ? [root] : [];
-    }
-    if (!stat.isDirectory())
-        return [];
-    const out = [];
-    for (const entry of readdirSync(root)) {
-        const child = join(root, entry);
-        let childStat;
-        try {
-            childStat = statSync(child);
-        }
-        catch {
-            continue;
-        }
-        if (childStat.isFile()) {
-            if (predicate(entry))
-                out.push(child);
-        }
-        else if (childStat.isDirectory()) {
-            out.push(...collectFilesRecursive(child, predicate));
-        }
-    }
-    return out;
-}
-/**
- * Resolve the three documented memory-extract artifact patterns
- * against a real project tree. Returns project-relative paths
- * (memory-service joins them with --project root) so the
- * realpathSync inside memory-service's assertInsideProject
- * succeeds.
- *
- * Patterns:
- *   - skills/[asterisk][asterisk]/SKILL.md       (project-root convention)
- *   - .claude/skills/[asterisk][asterisk]/SKILL.md (Claude-Code consumer convention; ice-cola)
- *   - CLAUDE.md
- *   - .claude/rules/[asterisk][asterisk]/[asterisk].md
- *
- * Returns an empty list when none of the roots exist. The
- * caller marks the step skipped in that case.
- */
-function expandMemoryArtifacts(projectRoot) {
-    const out = [];
-    // skills/**/SKILL.md (peaks-loop repo convention)
-    const skillFiles = collectFilesRecursive(join(projectRoot, 'skills'), (name) => name === 'SKILL.md');
-    for (const abs of skillFiles) {
-        out.push(relative(projectRoot, abs));
-    }
-    // .claude/skills/**/SKILL.md (Claude-Code consumer convention;
-    // surfaced by ice-cola dogfood 2026-06-12 — the 1.x install
-    // landed skills under .claude/skills/, not <root>/skills/)
-    const claudeSkillFiles = collectFilesRecursive(join(projectRoot, '.claude', 'skills'), (name) => name === 'SKILL.md');
-    for (const abs of claudeSkillFiles) {
-        out.push(relative(projectRoot, abs));
-    }
-    // CLAUDE.md (literal)
-    const claudeMd = join(projectRoot, 'CLAUDE.md');
-    if (existsSync(claudeMd) && statSync(claudeMd).isFile()) {
-        out.push('CLAUDE.md');
-    }
-    // .claude/rules/**/*.md
-    const claudeRules = collectFilesRecursive(join(projectRoot, '.claude', 'rules'), (name) => name.endsWith('.md'));
-    for (const abs of claudeRules) {
-        out.push(relative(projectRoot, abs));
-    }
-    return out;
-}
-function read1xVersion(cwd) {
-    const home = process.env['HOME'] ?? process.env['USERPROFILE'] ?? '';
-    if (home.length === 0)
-        return null;
-    const global = join(home, '.peaks', 'config.json');
-    if (!existsSync(global))
-        return null;
-    try {
-        const raw = JSON.parse(readFileSync(global, 'utf8'));
-        if (typeof raw.version === 'string')
-            return raw.version;
-    }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-        // ignore
-    }
-    return null;
-}
-function runStep(peaksBin, name, args, timeoutMs = 60_000) {
-    const start = Date.now();
-    // The global `peaks` shim is a `/bin/sh` symlink script (the
-    // npm install postinstall creates `peaks` → `peaks.sh` on
-    // Windows). cmd.exe (the default Windows shell) cannot run
-    // `.sh` scripts directly, so the shim fails with "unknown
-    // command 'migrate'" etc. The fix: prefer the local node
-    // binary + the peaks.js script path. The umbrella resolves
-    // the script path at startup; only falls back to `peaks` if
-    // no script path is available (Unix-only).
-    let command;
-    let spawnArgs;
-    if (peaksBin.includes('\\') || peaksBin.includes('/')) {
-        // peaksBin is a real path (e.g. /c/.../bin/peaks.js);
-        // invoke directly via node.
-        command = process.execPath;
-        spawnArgs = [peaksBin, ...args];
-    }
-    else {
-        // peaksBin is just "peaks" — best-effort shell exec.
-        command = peaksBin;
-        spawnArgs = args;
-    }
-    try {
-        const result = spawnSync(command, spawnArgs, {
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'pipe'],
-            timeout: timeoutMs,
-        });
-        return {
-            name,
-            status: result.status === 0 ? 'pass' : 'fail',
-            exitCode: result.status,
-            stdout: result.stdout ?? '',
-            stderr: result.stderr ?? '',
-            durationMs: Date.now() - start,
-        };
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return {
-            name,
-            status: 'fail',
-            exitCode: null,
-            stdout: '',
-            stderr: message,
-            durationMs: Date.now() - start,
-        };
-    }
-}
-function writeUpgradeRecord(projectRoot, result) {
-    try {
-        const memoryDir = join(projectRoot, '.peaks', 'memory');
-        mkdirSync(memoryDir, { recursive: true });
-        const date = new Date().toISOString().slice(0, 10);
-        const file = join(memoryDir, `upgrade-2.0-${date}.md`);
-        const lines = [];
-        lines.push(`# Upgrade to peaks-loop 2.0 — ${date}`);
-        lines.push('');
-        lines.push(`> Auto-generated by \`peaks upgrade --to 2.0${result.applied ? ' --auto' : ''}\`.`);
-        lines.push(`> Per the "one-key completion" + "minimal-user-operation" tenets.`);
-        lines.push('');
-        if (result.fromVersion !== null) {
-            lines.push(`**From version**: ${result.fromVersion}`);
-        }
-        lines.push(`**To version**: 2.0.0`);
-        lines.push(`**Project root**: \`${result.projectRoot}\``);
-        lines.push('');
-        lines.push('## Sub-step results');
-        lines.push('');
-        lines.push('| step | status | exitCode | durationMs |');
-        lines.push('|------|--------|----------|------------|');
-        for (const step of result.steps) {
-            lines.push(`| ${step.name} | ${step.status} | ${step.exitCode ?? 'n/a'} | ${step.durationMs} |`);
-        }
-        lines.push('');
-        if (result.auditBefore !== null || result.auditAfter !== null) {
-            lines.push('## Audit snapshot');
-            lines.push('');
-            if (result.auditBefore !== null) {
-                lines.push(`- Before: totalRedLines=${result.auditBefore.totalRedLines}, cliBacked=${result.auditBefore.cliBacked}`);
-            }
-            if (result.auditAfter !== null) {
-                lines.push(`- After:  totalRedLines=${result.auditAfter.totalRedLines}, cliBacked=${result.auditAfter.cliBacked}`);
-            }
-            lines.push('');
-        }
-        lines.push('## Next actions');
-        lines.push('');
-        for (const a of result.nextActions) {
-            lines.push(`- ${a}`);
-        }
-        writeFileSync(file, lines.join('\n') + '\n', 'utf8');
-        return file;
-    }
-    catch (err) {
-        process.stderr.write(`peaks upgrade: failed to write upgrade record: ${err instanceof Error ? err.message : String(err)}\n`);
-        return null;
-    }
-}
-export function runUpgrade(input) {
-    // Resolve the peaks binary. Default: the peaks.js script
-    // co-located with this compiled module (the user just installed
-    // peaks-loop globally, but the global `peaks` shim is a .sh
-    // script that cmd.exe can't run on Windows). Falling back
-    // to just "peaks" lets the umbrella work when invoked from
-    // a Unix-style environment that can run the shim directly.
-    const here = dirname(fileURLToPath(import.meta.url));
-    // Walk up from the compiled location to find bin/peaks.js.
-    // The compiled service lives at dist/src/services/upgrade/upgrade-service.js;
-    // bin/peaks.js is at the peaks-loop root.
-    const peaksBin = input.peaksBin ??
-        resolve(here, '..', '..', '..', '..', 'bin', 'peaks.js');
-    const fallbackPeaks = 'peaks';
-    const resolvedPeaksBin = existsSync(peaksBin) ? peaksBin : fallbackPeaks;
-    const fromVersion = read1xVersion(input.projectRoot);
-    const steps = [];
-    const warnings = [];
-    const nextActions = [];
-    // Ensure .peaks/preferences.json exists. This is the file the
-    // 1.x detector keys off — without it, `peaks upgrade --detect-1x`
-    // keeps returning isOneX=true after a successful upgrade and the
-    // user gets stuck in a re-prompt loop. savePreferences with an
-    // empty override merges with DEFAULT_PREFERENCES and writes; if
-    // the file already exists the user's values are preserved.
-    // Real bug surfaced by ice-cola dogfood 2026-06-12.
-    try {
-        savePreferences(input.projectRoot, {});
-    }
-    catch (err) {
-        warnings.push(`ensure-preferences failed: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    // Migrate .gitignore so 2.0 tracked artifacts
-    // (.peaks/standards/, .peaks/memory/*.md durable memories,
-    // .peaks/PROJECT.md) aren't silently hidden by a 1.x wholesale
-    // `/.peaks/` ignore rule. Real bug surfaced by ice-cola dogfood
-    // 2026-06-12: every consumer artifact was being dropped from git
-    // status. Service is idempotent + creates a timestamped backup
-    // before any write.
-    try {
-        const giResult = migrateGitignoreFile({ projectRoot: input.projectRoot, apply: true });
-        if (giResult.changed && giResult.appliedWrite && giResult.backupPath !== null) {
-            nextActions.push(`Updated .gitignore — removed stale wholesale .peaks rule(s): ${giResult.removedRules.join(', ')}. Backup at ${giResult.backupPath}.`);
-        }
-        else if (giResult.missing) {
-            warnings.push('gitignore-migrate skipped: project has no .gitignore');
-        }
-    }
-    catch (err) {
-        warnings.push(`gitignore-migrate failed: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    // Audit BEFORE the upgrade (baseline)
-    let auditBefore = null;
-    try {
-        const r = runRedLinesAudit({ projectRoot: input.projectRoot });
-        auditBefore = { totalRedLines: r.audit.totalRedLines, cliBacked: r.audit.cliBacked };
-    }
-    catch (err) {
-        warnings.push(`audit-before failed: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    // Run the 6 sub-steps
-    for (const step of STEPS) {
-        if (step.name === 'memory-extract') {
-            // Special case: expand the three glob patterns to literal
-            // paths before spawning. memory-service rejects literal
-            // '**' in artifact paths (assertInsideProject's realpathSync
-            // throws ENOENT) and refuses to run without --artifact.
-            const artifacts = expandMemoryArtifacts(input.projectRoot);
-            if (artifacts.length === 0) {
-                steps.push({
-                    name: 'memory-extract',
-                    status: 'skipped',
-                    exitCode: null,
-                    stdout: '',
-                    stderr: 'no skills/, CLAUDE.md, or .claude/rules/ artifacts found in the project',
-                    durationMs: 0,
-                });
-                continue;
-            }
-            const args = ['memory', 'extract', '--project', input.projectRoot, '--artifact', ...artifacts, '--apply', '--json'];
-            const r = runStep(resolvedPeaksBin, 'memory-extract', args);
-            steps.push(r);
-            if (r.status === 'fail') {
-                warnings.push(`memory-extract failed: ${r.stderr.slice(0, 200)}`);
-            }
-            continue;
-        }
-        const args = step.args(input.projectRoot);
-        const r = runStep(resolvedPeaksBin, step.name, args);
-        steps.push(r);
-        if (r.status === 'fail') {
-            warnings.push(`${step.name} failed: ${r.stderr.slice(0, 200)}`);
-        }
-    }
-    // Audit AFTER the upgrade (verify)
-    let auditAfter = null;
-    try {
-        const r = runRedLinesAudit({ projectRoot: input.projectRoot });
-        auditAfter = { totalRedLines: r.audit.totalRedLines, cliBacked: r.audit.cliBacked };
-    }
-    catch (err) {
-        warnings.push(`audit-after failed: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    const passedCount = steps.filter((s) => s.status === 'pass').length;
-    const failedCount = steps.filter((s) => s.status === 'fail').length;
-    const skippedCount = steps.filter((s) => s.status === 'skipped').length;
-    const applied = failedCount === 0;
-    if (failedCount > 0) {
-        nextActions.push(`${failedCount} sub-step(s) failed. Run \`peaks upgrade --to 2.0\` again to retry the failed steps.`);
-    }
-    if (input.auto !== true) {
-        nextActions.push('Run `peaks audit red-lines --project .` to verify the L2 catalog is healthy.');
-    }
-    nextActions.push('See `docs/UPGRADING-2.0.md` for the manual fallback if this auto-upgrade fails.');
-    // Write the upgrade record (always, even on partial failure —
-    // the user gets a forensic artifact either way)
-    const partial = {
-        applied,
-        fromVersion,
-        toVersion: '2.0.0',
-        projectRoot: input.projectRoot,
-        steps,
-        passedCount,
-        failedCount,
-        skippedCount,
-        auditBefore,
-        auditAfter,
-        upgradeRecordPath: null,
-        nextActions,
-        warnings,
-    };
-    const upgradeRecordPath = writeUpgradeRecord(input.projectRoot, partial);
-    return { ...partial, upgradeRecordPath };
-}

package/dist/src/services/verdict/verdict-aggregator.d.ts

@@ -1,94 +0,0 @@
-/**
- * peaks-solo multi-signal verdict aggregator (v2.13.1 Group A).
- *
- * Implements the 4 aggregation rules documented in
- * `.peaks/project-scan/audit-output-schema.md:66-78` plus 3rd-party
- * inputs (karpathy / peaks-mut / peaks-qa). The 5 envelopes are
- * heterogeneous on purpose — v2.13.1 ships precedence, NOT a schema
- * unification (that's v2.14).
- *
- * 4 aggregation rules (verbatim from audit-output-schema.md):
- *   1. Verdict precedence — `block` > `warn` > `pass`. Top-level
- *      verdict is the highest input verdict.
- *   2. CRITICAL count — sum of CRITICAL markers across inputs.
- *   3. Required fix deduplication — identical `(file, line, hint)`
- *      tuples from different audits are merged.
- *   4. Handoff hash consistency — handled by the audit skills
- *      upstream; the aggregator consumes already-verified envelopes.
- *
- * Top-level precedence: `block` > `return-to-rd` > `warn` > `pass`.
- *
- * The aggregator is intentionally pure (no I/O, no clock, no
- * filesystem). v2.13.1 wires the result into micro-cycle.md as the
- * "re-run reason" payload; v2.14 will wire it into a CLI subcommand.
- *
- * Karpathy §1 — Simplicity First:
- *   - single file, no new imports beyond the existing
- *     SecurityAuditEnvelope / PerfAuditEnvelope type re-exports.
- *   - hard precedence; no scoring, no weighting, no RFC voting.
- */
-import type { SecurityAuditEnvelope } from '../audit-independent/security-audit-service.js';
-import type { PerfAuditEnvelope } from '../audit-independent/perf-audit-service.js';
-import type { ThresholdViolation } from '../mut/thresholds.js';
-export interface KarpathyViolation {
-    readonly guideline: 'think-before-coding' | 'simplicity-first' | 'surgical-changes' | 'goal-driven-execution';
-    readonly severity: 'CRITICAL' | 'HIGH' | 'MED' | 'LOW';
-    readonly file: string;
-    readonly line: number;
-    readonly hint: string;
-}
-export interface KarpathyEnvelope {
-    readonly passed: boolean;
-    readonly violations: ReadonlyArray<KarpathyViolation>;
-    readonly gateAction: 'pass' | 'warn' | 'block';
-}
-export interface MutEnvelope {
-    readonly passed: boolean;
-    readonly killRate: number;
-    readonly weakRate: number;
-    readonly violations: ReadonlyArray<ThresholdViolation>;
-}
-export interface QaEnvelope {
-    readonly verdict: 'pass' | 'return-to-rd' | 'blocked';
-    readonly reportPath?: string;
-}
-export interface AggregatorInput {
-    readonly security?: SecurityAuditEnvelope;
-    readonly perf?: PerfAuditEnvelope;
-    readonly karpathy?: KarpathyEnvelope;
-    readonly mut?: MutEnvelope;
-    readonly qa?: QaEnvelope;
-}
-export type AggregatorVerdict = 'pass' | 'warn' | 'block' | 'return-to-rd';
-export type VerdictSource = 'security-audit' | 'perf-audit' | 'karpathy-reviewer' | 'peaks-mut' | 'peaks-qa';
-export interface VerdictReason {
-    /**
-     * Primary source — kept for the single-source case. When multiple
-     * sources report the same (file,line,hint) tuple, `sources` carries
-     * the full list and `source` is the first source that triggered the
-     * reason entry (deterministic: security → perf → karpathy order).
-     */
-    readonly source: VerdictSource;
-    /**
-     * v2.13.2 — multi-source carrier. Always non-empty when the reason
-     * was deduped across sources; equals `[source]` for single-source
-     * entries. The dedup key uses (file,line,hint) only — not `source` —
-     * per `.peaks/project-scan/audit-output-schema.md:73`.
-     */
-    readonly sources: ReadonlyArray<VerdictSource>;
-    readonly signal: AggregatorVerdict | 'blocked';
-    readonly severity?: 'CRITICAL' | 'HIGH' | 'MED' | 'LOW';
-    readonly file?: string;
-    readonly line?: number;
-    readonly hint?: string;
-    readonly kind?: string;
-    readonly actual?: number;
-    readonly threshold?: number;
-    readonly reportPath?: string;
-}
-export interface AggregatorResult {
-    readonly verdict: AggregatorVerdict;
-    readonly reasons: ReadonlyArray<VerdictReason>;
-}
-export declare const VERDICT_PRECEDENCE: ReadonlyArray<AggregatorVerdict>;
-export declare function aggregateVerdict(input: AggregatorInput): AggregatorResult;