peaks-loop 3.1.2 → 4.0.0-beta.10

package/dist/src/cli/commands/contract-commands.js

@@ -1,114 +0,0 @@
-import { fail, ok, getErrorMessage } from '../../shared/result.js';
-import { addJsonOption, printResult } from '../cli-helpers.js';
-import { writeContract } from '../../services/dispatch/contract-store.js';
-import { getCurrentSessionId } from '../../services/skills/skill-presence-service.js';
-const INPUT_LIMIT_BYTES = 256 * 1024;
-/** Split a comma-separated flag value into a trimmed string array. */
-function splitCsv(value) {
-    if (value === undefined)
-        return [];
-    return value
-        .split(',')
-        .map((s) => s.trim())
-        .filter((s) => s.length > 0);
-}
-export function registerContractCommands(program, io) {
-    const contract = program
-        .command('contract')
-        .description('Slice contract store (skill-first / CLI-auxiliary). These commands ' +
-        'are primitives that peaks-solo / peaks-rd SKILL.md compose. The LLM-side ' +
-        'runner (the IDE-resident sub-agent that finished a slice) calls ' +
-        '`peaks contract write` to persist the slice\'s public surface; the ' +
-        'orchestrator picks it up on the next dispatch run via listContracts() ' +
-        'and splices it into downstream prompts via formatContractInjection().');
-    // ─────────────────────────────────────────────────────────────────
-    // peaks contract write --project <root> --session-id <sid>
-    //   --slice-id <id> --exports <a,b> --types <x,y> --signatures <s1,s2>
-    //   [--broadcast-to <b1,b2>] [--completed-at <iso>]
-    // ─────────────────────────────────────────────────────────────────
-    addJsonOption(contract
-        .command('write')
-        .description('2.7.0 slice-dag-dispatcher MVP: persist a finished slice\'s public ' +
-        'surface (exports / types / publicSignatures) to disk at ' +
-        '.peaks/_runtime/<sessionId>/dispatch/contracts/<slice-id>.json. ' +
-        'The orchestrator picks it up on the next dispatch run. Idempotent: ' +
-        're-running with the same inputs overwrites in place; the SHA-256 ' +
-        'contractHash is content-derived so a contract write from a different ' +
-        'runner (re-execution) is detected as a content change.')
-        .option('--project <path>', 'target project root (defaults to cwd)')
-        .option('--session-id <sid>', 'session id (default: resolve from .peaks/_runtime/session.json; falls back to PEAKS_SESSION_ID env var; final fallback "unknown-sid")')
-        .requiredOption('--slice-id <id>', 'slice id; must be non-empty; used as the contract filename basename')
-        .option('--exports <list>', 'comma-separated public export names (e.g. "validateDag,topologicalLevels")')
-        .option('--types <list>', 'comma-separated public type names (e.g. "SliceDag,SliceNode")')
-        .option('--signatures <list>', 'comma-separated public function/method signatures (e.g. "validateDag(dag: SliceDag): void")')
-        .option('--broadcast-to <list>', 'comma-separated downstream slice ids that should auto-inherit this contract (e.g. "B,C,D")')
-        .option('--completed-at <iso>', 'ISO 8601 timestamp; defaults to now()')).action((options) => {
-        const asJson = options.json === true;
-        const projectRoot = options.project ?? process.cwd();
-        // Slice 2026-06-26-unknown-sid-fallback-fix: see dispatch-commands.ts.
-        const sid = options.sessionId
-            ?? process.env.PEAKS_SESSION_ID
-            ?? getCurrentSessionId(projectRoot)
-            ?? 'unknown-sid';
-        const sliceId = options.sliceId;
-        if (sliceId === undefined || sliceId.length === 0) {
-            printResult(io, fail('contract.write', 'MISSING_SLICE_ID', '--slice-id is required', { path: null, contract: null }, [
-                'Re-run with --slice-id <id> (must be non-empty; used as the contract filename basename).'
-            ]), asJson);
-            process.exitCode = 1;
-            return;
-        }
-        const exports = splitCsv(options.exports);
-        const types = splitCsv(options.types);
-        const signatures = splitCsv(options.signatures);
-        const broadcastTo = splitCsv(options.broadcastTo);
-        // Cap the combined input to protect the file IO from runaway values
-        // (e.g. a 10MB comma-separated --signatures flag).
-        const inputSize = sliceId.length +
-            sid.length +
-            exports.join(',').length +
-            types.join(',').length +
-            signatures.join(',').length +
-            broadcastTo.join(',').length +
-            (options.completedAt?.length ?? 0);
-        if (inputSize > INPUT_LIMIT_BYTES) {
-            printResult(io, fail('contract.write', 'INPUT_TOO_LARGE', `combined input size ${inputSize} bytes exceeds ${INPUT_LIMIT_BYTES} (likely oversized --exports/--types/--signatures lists)`, { path: null, contract: null }, [
-                'Split the slice into smaller surfaces or omit optional fields.'
-            ]), asJson);
-            process.exitCode = 1;
-            return;
-        }
-        try {
-            const input = {
-                sliceId,
-                sessionId: sid,
-                exports,
-                types,
-                publicSignatures: signatures,
-                ...(broadcastTo.length > 0 ? { broadcastTo } : {}),
-                ...(options.completedAt !== undefined ? { completedAt: options.completedAt } : {})
-            };
-            const result = writeContract(projectRoot, sid, input);
-            printResult(io, ok('contract.write', {
-                path: result.path,
-                contractHash: result.contract.contractHash,
-                sliceId: result.contract.sliceId,
-                sessionId: result.contract.sessionId,
-                completedAt: result.contract.completedAt,
-                exportCount: result.contract.exports.length,
-                typeCount: result.contract.types.length,
-                signatureCount: result.contract.publicSignatures.length,
-                broadcastTo: result.contract.broadcastTo ?? []
-            }, [], [
-                `Contract written; orchestrator will pick it up on the next \`peaks sub-agent dispatch --from-dag\` run.`,
-                `Re-running with the same inputs is idempotent (overwrites in place).`
-            ]), asJson);
-        }
-        catch (err) {
-            printResult(io, fail('contract.write', 'WRITE_ERROR', getErrorMessage(err), { path: null, contract: null }, [
-                'See error message; check that --project is a writable directory and --slice-id is a valid filename basename (no path separators).'
-            ]), asJson);
-            process.exitCode = 1;
-        }
-    });
-}

package/dist/src/cli/commands/core/session-command.js

@@ -1,229 +0,0 @@
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { getSessionMeta, rotateSessionBinding, setSessionTitle, listSessionMetas } from '../../../services/session/session-manager.js';
-import { resolveCanonicalProjectRoot } from '../../../services/config/config-service.js';
-import { findProjectRoot } from '../../../services/config/config-safety.js';
-import { fail, ok } from '../../../shared/result.js';
-import { addJsonOption, getErrorMessage, printResult } from '../../cli-helpers.js';
-// Slice 2026-07-01-strategic-compact-cli fix: register the
-// `peaks session checkpoint` and `peaks session resume` subcommands
-// EAGERLY so they appear in `peaks session --help` output. The
-// previous lazy import ran AFTER commander had already produced
-// the help text, so an LLM calling `peaks <TAB>`-discovery never
-// saw them — they were effectively hidden.
-import { registerSessionCheckpointCommand } from '../session-checkpoint-command.js';
-import { registerSessionResumeCommand } from '../session-resume-command.js';
-import { registerSessionAutoCompactHookCommand } from '../session-auto-compact-hook-command.js';
-export function registerSessionCommand(program, io) {
-    const session = program.command('session').description('Manage Peaks session directories');
-    addJsonOption(session
-        .command('list')
-        .description('List all session directories with titles and metadata')).action((options) => {
-        const projectRoot = findProjectRoot(process.cwd()) ?? process.cwd();
-        const metas = listSessionMetas(projectRoot);
-        printResult(io, ok('session.list', { sessions: metas, total: metas.length }), options.json);
-    });
-    addJsonOption(session
-        .command('info [sessionId]')
-        .description('Show full metadata for a session directory. Pass --active to resolve the canonical binding from .peaks/_runtime/session.json (the "one command a sub-agent runs to find the parent\'s sid" primitive). Slice 021: --active is the SOLE authoritative way to look up the active session id; the on-disk file path is internal and must NOT be `cat`-ed directly.')
-        .option('--active', 'resolve the canonical session id from .peaks/_runtime/session.json (ignores [sessionId] when set)')
-        .option('--project <path>', 'target project root (defaults to git root or cwd). Slice 021: lets sub-agents skip the cwd heuristic and look up the binding for a specific repo.')
-        // Slice 020 — caller-keyed session binding. The --caller-id flag
-        // overrides the per-process PEAKS_CALLER_ID env var and the
-        // PLATFORM_FALLBACKS table (D4 priority). The resolved callerId is
-        // surfaced in the JSON envelope so callers can confirm what was
-        // resolved without re-deriving it.
-        .option('--caller-id <id>', 'Override the caller id for this invocation (D4 priority: flag beats env beats platform fallback). When set, the response envelope includes the resolved callerId.')).action(async (sessionId, options) => {
-        // Slice 021: --project wins; otherwise the git-root / cwd fallback
-        // (matches the pre-021 behaviour so the existing slice-020 / slice-007
-        // sub-agent flow keeps working unchanged).
-        const projectRoot = options.project !== undefined
-            ? resolveCanonicalProjectRoot(options.project)
-            : (findProjectRoot(process.cwd()) ?? process.cwd());
-        // Slice 020 — resolve the callerId up front when the flag was passed.
-        // We use `resolveCallerId` for D1/D5 validation; an invalid flag
-        // throws CallerIdError (D5 → exit 65). A missing flag and no env
-        // and no fallback also throws (D2 → exit 64). The resolved id is
-        // surfaced in the envelope so the caller can audit.
-        if (options.callerId !== undefined) {
-            const { resolveCallerId, CallerIdError } = await import('../../../services/session/resolve-caller-id.js');
-            let callerId;
-            try {
-                callerId = resolveCallerId({ flagValue: options.callerId });
-            }
-            catch (error) {
-                if (error instanceof CallerIdError) {
-                    const code = error.code === 'EX_USAGE' ? 64 : 65;
-                    printResult(io, fail('session.info', 'CALLER_ID_INVALID', error.message, { source: error.source }, [`Set --caller-id to a value matching ^[a-zA-Z0-9._-]{1,200}$`, 'Or set PEAKS_CALLER_ID env var (or CLAUDE_CODE_SESSION_ID for Claude Code)']), options.json);
-                    process.exitCode = code;
-                    return;
-                }
-                throw error;
-            }
-            // Surface the resolved id in the envelope. When --active is also
-            // passed, look up the binding for this callerId; otherwise
-            // just emit the resolved id so the caller knows what was used.
-            if (options.active === true) {
-                const { getSessionIdCanonical } = await import('../../../services/session/session-manager.js');
-                const { getCallerBinding } = await import('../../../services/session/caller-binding-service.js');
-                const activeSid = getSessionIdCanonical(projectRoot);
-                const callerBinding = getCallerBinding(projectRoot, callerId);
-                // Slice 021: source is the enum that the unified --active primitive
-                // reports. Callers / migration tooling can detect pre-migration trees
-                // by inspecting `source === 'legacy'`.
-                const bindingSource = existsSync(join(projectRoot, '.peaks', '_runtime', 'session.json'))
-                    ? 'canonical'
-                    : 'legacy';
-                printResult(io, ok('session.info', {
-                    active: true,
-                    sessionId: activeSid,
-                    callerId,
-                    callerBindingPeakSessionId: callerBinding?.peakSessionId ?? null,
-                    source: bindingSource
-                }), options.json);
-                return;
-            }
-            printResult(io, ok('session.info', { callerId, note: '--caller-id resolved; pass --active to also look up the bound peak session' }), options.json);
-            return;
-        }
-        // Slice 007 + slice 021 — sub-agent session sharing. A sub-agent that
-        // does not know the parent's sid reads it from the binding via
-        // `peaks session info --active`. Slice 021 turned this into the
-        // SOLE authoritative discovery primitive: it composes on
-        // getSessionIdCanonical (canonicalize-on-read; handles the stored
-        // "projectRoot: '.'" vs caller-passed absolute realpath mismatch
-        // that the F22 fix addressed) AND falls through to getSessionId
-        // (strict-equality) for callers on the original contract. NEITHER
-        // path may call ensureSession() — that would side-effect-create a
-        // fresh binding on miss, erasing the "no active session" signal
-        // sub-agents rely on.
-        if (options.active === true) {
-            // Import lazily to avoid a cycle with workspace-commands.
-            const { getSessionIdCanonical, getSessionId } = await import('../../../services/session/session-manager.js');
-            // 1. Canonicalize-on-read first.
-            let activeSid = getSessionIdCanonical(projectRoot);
-            // 2. Fall through to the strict-equality reader if the canonical
-            //    miss is a projectRoot-form mismatch (e.g. the binding was
-            //    written with the absolute realpath but the caller's form
-            //    normalizes differently). The 2-read fan-out mirrors the
-            //    fallback ensureSession() uses.
-            if (activeSid === null) {
-                activeSid = getSessionId(projectRoot);
-            }
-            if (activeSid === null) {
-                // 3. No binding at all — fail loudly, NO crash, NO side-effect,
-                //    exit 1, message must point at `peaks workspace init`
-                //    (the canonical "first action" command, not the legacy
-                //    "or `peaks skill presence:set`" hedge that the pre-021
-                //    wording used — presence:set would also need a binding to
-                //    resolve the parent sid, so it's not actually a bootstrap
-                //    path).
-                printResult(io, fail('session.info', 'NO_ACTIVE_SESSION', 'No session bound. Run `peaks workspace init --project <repo> --json` to bind one.', { projectRoot }, [`peaks workspace init --project ${projectRoot} --json`]), options.json);
-                process.exitCode = 1;
-                return;
-            }
-            // 4. Determine the on-disk source so callers (and future
-            //    migration tooling) can detect pre-migration trees. The
-            //    canonical file is preferred when both exist (slice 005
-            //    contract).
-            const bindingSource = existsSync(join(projectRoot, '.peaks', '_runtime', 'session.json'))
-                ? 'canonical'
-                : 'legacy';
-            // Slice 021: when only the legacy back-compat path is present,
-            // surface a warning so callers (and humans tailing the JSON)
-            // see "this tree has not been reconciled to the canonical
-            // home yet". The warning is informational; the binding is
-            // still valid for one minor release (slice 005 / 006
-            // contract). `warnings` is a top-level envelope field, not a
-            // data field, so it goes through ok()'s 3rd positional arg.
-            const legacyWarnings = bindingSource === 'legacy'
-                ? ['Read from legacy back-compat path .peaks/.session.json. Run `peaks workspace reconcile --apply` to migrate to the canonical home (.peaks/_runtime/session.json).']
-                : [];
-            printResult(io, ok('session.info', {
-                active: true,
-                sessionId: activeSid,
-                bindingPath: bindingSource === 'canonical'
-                    ? join(projectRoot, '.peaks', '_runtime', 'session.json')
-                    : join(projectRoot, '.peaks', '.session.json'),
-                projectRoot,
-                source: bindingSource
-            }, legacyWarnings), options.json);
-            return;
-        }
-        if (sessionId === undefined) {
-            printResult(io, fail('session.info', 'SESSION_ID_REQUIRED', 'session.info requires a <sessionId> or --active', {}, ['Pass a <sessionId> argument, or use --active to resolve the canonical binding']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        const meta = getSessionMeta(projectRoot, sessionId);
-        if (meta === null) {
-            printResult(io, fail('session.info', 'SESSION_NOT_FOUND', `Session "${sessionId}" not found or has no metadata`, { sessionId }, ['Use `peaks session list` to see available sessions']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        printResult(io, ok('session.info', meta), options.json);
-    });
-    addJsonOption(session
-        .command('title <sessionId> <title>')
-        .description('Set a human-readable title for a session directory')).action((sessionId, title, options) => {
-        const projectRoot = findProjectRoot(process.cwd()) ?? process.cwd();
-        try {
-            const meta = setSessionTitle(projectRoot, sessionId, title);
-            printResult(io, ok('session.title', meta), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('session.title', 'SESSION_TITLE_FAILED', getErrorMessage(error), { sessionId }, ['Verify the sessionId exists under .peaks/']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // Slice 011: `peaks session checkpoint` and `peaks session resume`.
-    // Skill-level primitives — the LLM is the decision-maker; CLI is the muscle.
-    // Slice 2026-07-01-strategic-compact-cli fix: register EAGERLY (not
-    // via `void (async () => …)`) so commander walks the subcommand
-    // tree synchronously and `peaks session --help` includes both
-    // `checkpoint` and `resume`. The previous async-IIFE registered
-    // them on a microtask tick AFTER the program-level help builder
-    // had already serialised its output, so they were hidden from
-    // `<TAB>`-discovery and the LLM never saw them.
-    registerSessionCheckpointCommand(session, io);
-    registerSessionResumeCommand(session, io);
-    // Slice 2026-07-02-auto-compact-zero-pause: the Bash command the
-    // PreToolUse hook in `.claude/settings.local.json` fires. Keeping
-    // it eager (same fix as checkpoint + resume) so `peaks session --help`
-    // lists it for LLM `<TAB>`-discovery.
-    registerSessionAutoCompactHookCommand(session);
-    addJsonOption(session
-        .command('rotate')
-        .description('Drop the project-level session binding so the next peaks call auto-generates a fresh session id. The on-disk session directory is left intact — only .peaks/.session.json is removed.')
-        .option('--project <path>', 'target project root (defaults to git root or cwd)')
-        .option('--reason <text>', 'human-readable reason for the rotation, recorded in the response data')).action(async (options) => {
-        try {
-            // Canonicalise the project root before touching the binding.
-            // `peaks workspace init` writes the binding with the
-            // realpath-resolved projectRoot; if the caller passes a path
-            // through a symlink (notably /tmp on macOS, which is a
-            // symlink to /private/tmp) without canonicalising here,
-            // readSessionFile's strict projectRoot equality check fails
-            // and the rotate call reports "no prior binding" even
-            // though one exists. The same fix as `workspace init`
-            // (b193714): promote the path to the git root, falling back
-            // to the heuristic, falling back to cwd verbatim.
-            const projectRoot = options.project !== undefined
-                ? options.project
-                : (findProjectRoot(process.cwd()) ?? process.cwd());
-            const canonical = resolveCanonicalProjectRoot(projectRoot);
-            const previousSessionId = rotateSessionBinding(canonical);
-            printResult(io, ok('session.rotate', {
-                previousSessionId,
-                ...(options.reason !== undefined ? { reason: options.reason } : {}),
-                note: previousSessionId === null
-                    ? 'No prior binding was present; the project is already unbound.'
-                    : 'Next ensureSession() call will auto-generate a fresh id. The previous session directory is still on disk at .peaks/_runtime/<previousSessionId>/.'
-            }), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('session.rotate', 'SESSION_ROTATE_FAILED', getErrorMessage(error), { projectRoot: options.project }, ['Verify the project path exists and is writable']), options.json);
-            process.exitCode = 1;
-        }
-    });
-}

package/dist/src/cli/commands/core/skill-command.js

@@ -1,275 +0,0 @@
-import { runDoctor } from '../../../services/doctor/doctor-service.js';
-import { listSkills } from '../../../services/skills/skill-registry.js';
-import { runSkillSync, SYNC_PLATFORMS } from '../../../services/skills/sync-service.js';
-import { inspectSkillRunbook } from '../../../services/skills/skill-runbook-service.js';
-import { setSkillPresence, clearSkillPresence, getSkillPresence, isSkillPresenceMode, touchSkillHeartbeat, checkStalePresence } from '../../../services/skills/skill-presence-service.js';
-import { detectPresenceMarker } from '../../../services/hooks/presence-marker-detector.js';
-import { findProjectRoot } from '../../../services/config/config-safety.js';
-import { generateProjectContext } from '../../../services/memory/project-context-service.js';
-import { getSessionId, setSessionMeta } from '../../../services/session/session-manager.js';
-import { fail, ok } from '../../../shared/result.js';
-import { addJsonOption, getErrorMessage, printResult } from '../../cli-helpers.js';
-export function registerSkillCommand(program, io) {
-    const skill = program.command('skill').description('Manage Peaks skills');
-    addJsonOption(skill.command('list').description('List skills derived from skills/*/SKILL.md')).action(async (options) => {
-        const skills = await listSkills();
-        if (options.json === true) {
-            printResult(io, ok('skill.list', { skills }), true);
-        }
-        else {
-            const sorted = [...skills].sort((a, b) => {
-                if (a.name === 'peaks-sop')
-                    return -1;
-                if (b.name === 'peaks-sop')
-                    return 1;
-                if (a.name === 'peaks-solo')
-                    return -1;
-                if (b.name === 'peaks-solo')
-                    return 1;
-                return a.name.localeCompare(b.name);
-            });
-            for (const skill of sorted) {
-                io.stdout(`  ${skill.name.padEnd(14)}${skill.description}`);
-            }
-            io.stdout(`\n  Invoke any skill by typing its name in conversation (e.g. \`peaks-sop\`).`);
-        }
-    });
-    addJsonOption(skill.command('doctor').description('Run skill-related doctor checks')).action(async (options) => {
-        const report = await runDoctor();
-        const skillChecks = report.checks.filter((check) => check.id.startsWith('skill'));
-        const failed = skillChecks.filter((check) => !check.ok).length;
-        if (options.json === true) {
-            printResult(io, ok('skill.doctor', { checks: skillChecks, ok: failed === 0 }), true);
-        }
-        else {
-            for (const check of skillChecks) {
-                const icon = check.ok ? '+' : '×';
-                io.stdout(`  ${icon}  ${check.message}`);
-            }
-            io.stdout(`\n  ${skillChecks.length - failed} passed, ${failed} failed`);
-            if (failed > 0) {
-                io.stderr('\nOne or more skill checks failed.');
-            }
-        }
-        if (failed > 0) {
-            process.exitCode = 1;
-        }
-    });
-    // Slice #12 final piece (per spec §9 line 1105):
-    // `peaks skills sync 8 平台分发`. Idempotent: re-running is a
-    // no-op when the symlinks are already correct.
-    addJsonOption(skill
-        .command('sync')
-        .description(`Sync the peaks-* skill family to one or all of the 8 supported LLM-CLI platforms (${SYNC_PLATFORMS.join(', ')}). Idempotent.`)
-        .option('--platform <id>', `sync only one platform (default: --all). Valid: ${SYNC_PLATFORMS.join(', ')}`)
-        .option('--all', 'sync all 8 platforms (default if --platform is omitted)')
-        .option('--dry-run', 'do not write; emit the same shape with applied=false')
-        .option('--project <path>', 'project root (default: cwd)')).action(async (options) => {
-        try {
-            const projectRoot = options.project ?? process.cwd();
-            const platforms = options.platform !== undefined ? [options.platform] : undefined;
-            const result = await runSkillSync({
-                projectRoot,
-                ...(platforms !== undefined ? { platforms } : {}),
-                ...(options.dryRun === true ? { dryRun: true } : {}),
-            });
-            const envelope = ok('skill.sync', result, [], [
-                `syncedCount: ${result.syncedCount}/${result.perPlatform.length} platforms`,
-                `totalInstalled: ${result.totalInstalled} skill symlinks`,
-                result.failedCount > 0
-                    ? `failedCount: ${result.failedCount} (run \`peaks skill status\` for details)`
-                    : 'no failures',
-            ]);
-            printResult(io, envelope, options.json);
-            if (result.failedCount > 0) {
-                process.exitCode = 1;
-            }
-        }
-        catch (error) {
-            const message = getErrorMessage(error);
-            printResult(io, fail('skill.sync', 'SKILL_SYNC_FAILED', message, { applied: false }, [message]), options.json);
-            process.exitCode = 1;
-        }
-    });
-    addJsonOption(skill
-        .command('runbook <name>')
-        .description('Inspect a skill Default runbook section and its --apply authorization-note status')).action(async (name, options) => {
-        try {
-            const inspection = await inspectSkillRunbook(name);
-            const result = inspection.ok
-                ? ok('skill.runbook', inspection)
-                : fail('skill.runbook', inspection.hasRunbook ? 'SKILL_RUNBOOK_APPLY_UNGATED' : 'SKILL_RUNBOOK_MISSING', inspection.hasRunbook
-                    ? `Skill ${inspection.name} has ${inspection.destructiveApplyLines.length} destructive --apply command(s) without an authorization/dry-run note`
-                    : `Skill ${inspection.name} is missing a ## Default runbook section`, inspection, inspection.hasRunbook
-                    ? ['Add an authorization or --dry-run note next to destructive --apply lines in the runbook section']
-                    : ['Add a `## Default runbook` section to the skill SKILL.md']);
-            printResult(io, result, options.json);
-            if (!inspection.ok) {
-                process.exitCode = 1;
-            }
-        }
-        catch (error) {
-            printResult(io, fail('skill.runbook', 'SKILL_NOT_FOUND', getErrorMessage(error), { name }), options.json);
-            process.exitCode = 1;
-        }
-    });
-    addJsonOption(skill
-        .command('presence')
-        .description('Show the currently active Peaks skill (alias: presence:get)')
-        .option('--check-stale', 'slice 002 (v2.15.0): also report whether the recorded outer session id still matches the current one. Default false (back-compat).')
-        .option('--project <path>', 'project root (default: cwd)')).action((options) => {
-        const presence = getSkillPresence(options.project);
-        if (presence === null) {
-            printResult(io, ok('skill.presence', { active: false }), options.json);
-            return;
-        }
-        if (options.checkStale === true) {
-            // Slice 002 (v2.15.0) AC-1: pair the read with a staleness
-            // check so callers (peaks-solo Step 1, statusline) get both
-            // pieces of info from a single CLI invocation. The presence
-            // is returned UNCHANGED — `--check-stale` is a read-only flag,
-            // not a clear.
-            const staleness = checkStalePresence({ projectRootOverride: options.project });
-            printResult(io, ok('skill.presence', {
-                active: true,
-                ...presence,
-                stale: staleness.stale,
-                staleReason: staleness.reason,
-                currentOuterSessionId: staleness.currentOuterSessionId,
-                recordedOuterSessionId: staleness.recordedOuterSessionId
-            }), options.json);
-            return;
-        }
-        printResult(io, ok('skill.presence', { active: true, ...presence }), options.json);
-    });
-    addJsonOption(skill
-        .command('presence:set <name>')
-        .description('Set the currently active Peaks skill for session-wide visibility')
-        .option('--mode <mode>', 'execution mode')
-        .option('--gate <gate>', 'current gate')
-        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')).action((name, options) => {
-        const projectRoot = options.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        if (options.mode !== undefined && !isSkillPresenceMode(options.mode)) {
-            printResult(io, fail('skill.presence:set', 'INVALID_MODE', `Invalid mode: ${options.mode} (expected one of: full-auto, assisted, swarm, strict)`, { name, mode: options.mode }, ['Use a valid mode: full-auto, assisted, swarm, or strict']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        const presence = setSkillPresence(name, options.mode, options.gate, options.project);
-        // As of slice 003-2026-06-06-session-layout-canonicalize we do NOT
-        // call `ensureSession` here. The CLI wrapper previously spawned a
-        // new session on every presence call, which made the canonical
-        // session binding drift (the LLM saw the session id change every
-        // turn). The presence now reuses the session bound at
-        // `.peaks/_runtime/session.json` (or the legacy `.peaks/.session.json`
-        // during the back-compat window). If no session is bound, the
-        // presence still writes the active-skill marker — downstream code
-        // can `peaks workspace init` separately to create the session.
-        //
-        // Session metadata is updated when a session is bound (read-only
-        // path: `getSessionId`). We do not auto-spawn a session.
-        const boundSessionId = getSessionId(projectRoot);
-        if (boundSessionId !== null) {
-            setSessionMeta(projectRoot, boundSessionId, {
-                skill: name,
-                ...(options.mode ? { mode: options.mode } : {}),
-                ...(options.gate ? { gate: options.gate } : {})
-            });
-        }
-        printResult(io, ok('skill.presence:set', { active: true, ...presence }), options.json);
-    });
-    addJsonOption(skill
-        .command('presence:clear')
-        .description('Clear the active Peaks skill presence indicator and update project context')
-        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')).action((options) => {
-        const projectRoot = options.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        const removed = clearSkillPresence(options.project);
-        // Auto-update project context so future sessions have up-to-date history
-        try {
-            generateProjectContext(projectRoot);
-        }
-        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-            // non-fatal: context update failure should not block presence clear
-        }
-        printResult(io, ok('skill.presence:clear', { active: false, removed, projectContextUpdated: true }), options.json);
-    });
-    // Slice 002 (v2.15.0) — AC-1: presence staleness detector.
-    // peaks-solo Step 1 (and `peaks solo should-pause --step
-    // step-1-mode-select`) calls this to decide whether the recorded
-    // `mode` field can be trusted or whether the LLM must AskUserQuestion.
-    addJsonOption(skill
-        .command('presence:check-stale')
-        .description('Slice 002 (v2.15.0) AC-1: report whether the recorded presence outer session id still matches the current outer session id. ' +
-        'Returns { stale: boolean, reason: "outer-session-mismatch" | "no-presence" | null }. ' +
-        'Pure read-only — does NOT clear the presence (use `peaks skill presence:clear` for that).')
-        .option('--project <path>', 'project root (default: cwd)')
-        .option('--current-outer <id>', 'override the current outer session id (test seam; default: read from PEAKS_OUTER_SESSION_ID / CLAUDE_CODE_SESSION_ID)')).action((options) => {
-        // v2.15.0 slice 002 repair: do NOT pass `currentOuter: undefined`
-        // when the user omits the flag. The service-layer branch
-        // `'currentOuter' in opts` returns true for an explicit
-        // `undefined` (the key exists on the spread object literal),
-        // which would skip the env-var fallback and pin `current =
-        // undefined` — always reading the presence as stale. Build a
-        // sparse opts object so the service can fall back to
-        // `getCurrentOuterSessionId()` (reads PEAKS_OUTER_SESSION_ID /
-        // CLAUDE_CODE_SESSION_ID).
-        const checkOpts = options.project !== undefined ? { projectRootOverride: options.project } : {};
-        if (options.currentOuter !== undefined) {
-            checkOpts.currentOuter = options.currentOuter;
-        }
-        const result = checkStalePresence(checkOpts);
-        // Always emit `currentOuterSessionId` in the JSON envelope (even
-        // when undefined → ''), per slice 002 AC-1 contract: downstream
-        // tooling (statusline, sub-agent dispatch) reads the field by
-        // name, never by `data.currentOuterSessionId ?? ''`. JSON.stringify
-        // drops `undefined` properties, so we coerce to '' before
-        // wrapping in the envelope.
-        const data = {
-            stale: result.stale,
-            reason: result.reason,
-            presence: result.presence,
-            currentOuterSessionId: result.currentOuterSessionId ?? '',
-            recordedOuterSessionId: result.recordedOuterSessionId ?? ''
-        };
-        printResult(io, ok('skill.presence:check-stale', data), options.json);
-    });
-    addJsonOption(skill
-        .command('heartbeat')
-        .description('Show the heartbeat status of the active Peaks skill')).action((options) => {
-        const presence = getSkillPresence();
-        if (presence === null) {
-            printResult(io, ok('skill.heartbeat', { active: false, heartbeat: 'none' }), options.json);
-            return;
-        }
-        printResult(io, ok('skill.heartbeat', {
-            active: true,
-            skill: presence.skill,
-            gate: presence.gate ?? null,
-            lastHeartbeat: presence.lastHeartbeat ?? presence.setAt,
-            setAt: presence.setAt
-        }), options.json);
-    });
-    addJsonOption(skill
-        .command('heartbeat:touch')
-        .description('Update the heartbeat timestamp (called by the LLM each turn to confirm peaks skill context is alive)')).action((options) => {
-        const updated = touchSkillHeartbeat();
-        if (updated === null) {
-            printResult(io, ok('skill.heartbeat:touch', { active: false, heartbeat: 'none' }), options.json);
-            return;
-        }
-        printResult(io, ok('skill.heartbeat:touch', {
-            active: true,
-            skill: updated.skill,
-            lastHeartbeat: updated.lastHeartbeat
-        }), options.json);
-    });
-    addJsonOption(skill
-        .command('detect-marker-loss')
-        .description('Detect whether the latest assistant message lost the Peaks-Loop status header while a peaks skill is still active (slice 028 detection primitive).')
-        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')
-        .option('--message <text>', 'latest assistant message text to scan (defaults to reading the most recent LLM response from the stdin pipe, or empty string when no pipe is attached)')).action((options) => {
-        const projectRoot = options.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        const message = options.message ?? '';
-        const result = detectPresenceMarker({ project: projectRoot, latestAssistantMessage: message });
-        printResult(io, ok('skill.detect-marker-loss', result), options.json);
-    });
-}