peaks-loop 4.0.0-beta.3 → 4.0.0-beta.31

package/dist/src/cli/commands/preferences-commands.js

@@ -1,197 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
-import { dirname } from 'node:path';
-import { loadPreferences, migratePreferences, preferencesPath, savePreferences, } from '../../services/preferences/preferences-service.js';
-const ALLOWED_KEYS = new Set([
-    'economyMode',
-    'swarmMode',
-    'uaPrompt',
-    'agentShieldPrompt',
-    'classifyConservatism',
-    'classifyRules',
-    'headroom',
-    'swarmSpeculative',
-    'loopAutonomousEnabled',
-]);
-export function registerPreferencesCommands(program) {
-    const prefs = program
-        .command('preferences')
-        .description('Manage project-local preferences (`.peaks/preferences.json`)');
-    prefs
-        .command('get')
-        .description('Get a preference value (from override or default)')
-        .requiredOption('--key <key>', 'preference key')
-        .option('--project <path>', 'project root', process.cwd())
-        .option('--json', 'JSON envelope output')
-        .action((opts) => {
-        try {
-            if (!ALLOWED_KEYS.has(opts.key)) {
-                throw new Error(`PREFERENCES_KEY_UNKNOWN: ${opts.key}`);
-            }
-            const all = loadPreferences(opts.project);
-            const value = all[opts.key];
-            const filePath = preferencesPath(opts.project);
-            // Spec bug fix: use the top-level existsSync import (the spec's
-            // `await import('node:fs')` would not compile inside a non-async action).
-            // Source is 'override' only when the key is explicitly present in
-            // the on-disk file (not merely when the file exists, since reset()
-            // may leave the file with other keys still overridden).
-            let source = 'default';
-            if (existsSync(filePath)) {
-                try {
-                    const raw = JSON.parse(readFileSync(filePath, 'utf8'));
-                    if (Object.prototype.hasOwnProperty.call(raw, opts.key)) {
-                        source = 'override';
-                    }
-                }
-                catch {
-                    // Corrupt file: report the merged value but fall back to 'default'
-                    // source to avoid claiming an override that cannot be parsed.
-                    source = 'default';
-                }
-            }
-            // Stable ordering: source is computed, value reflects merged state.
-            const envelope = {
-                ok: true,
-                data: { key: opts.key, value, source },
-            };
-            process.stdout.write(JSON.stringify(envelope, null, 2) + '\n');
-        }
-        catch (err) {
-            process.stderr.write(err.message + '\n');
-            process.exit(1);
-        }
-    });
-    prefs
-        .command('set')
-        .description('Override a preference value (writes to .peaks/preferences.json)')
-        .requiredOption('--key <key>', 'preference key')
-        .requiredOption('--value <value>', 'value (parsed as JSON, or string if not JSON)')
-        .option('--project <path>', 'project root', process.cwd())
-        .option('--json', 'JSON envelope output')
-        .action((opts) => {
-        try {
-            if (!ALLOWED_KEYS.has(opts.key)) {
-                throw new Error(`PREFERENCES_KEY_UNKNOWN: ${opts.key}`);
-            }
-            let parsed = opts.value;
-            try {
-                parsed = JSON.parse(opts.value);
-            }
-            catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-                // Not valid JSON — keep the raw string.
-            }
-            const merged = savePreferences(opts.project, {
-                [opts.key]: parsed,
-            });
-            const envelope = {
-                ok: true,
-                data: {
-                    key: opts.key,
-                    value: merged[opts.key],
-                },
-            };
-            process.stdout.write(JSON.stringify(envelope, null, 2) + '\n');
-        }
-        catch (err) {
-            process.stderr.write(err.message + '\n');
-            process.exit(1);
-        }
-    });
-    prefs
-        .command('reset')
-        .description('Remove the override for a key (falls back to default)')
-        .requiredOption('--key <key>', 'preference key')
-        .option('--project <path>', 'project root', process.cwd())
-        .option('--json', 'JSON envelope output')
-        .action((opts) => {
-        try {
-            if (!ALLOWED_KEYS.has(opts.key)) {
-                throw new Error(`PREFERENCES_KEY_UNKNOWN: ${opts.key}`);
-            }
-            const filePath = preferencesPath(opts.project);
-            // Read raw on-disk state (not the merged view) so removing a key
-            // truly removes the override, instead of savePreferences re-inserting
-            // the default value. If no file exists, there is nothing to reset.
-            if (!existsSync(filePath)) {
-                const envelope = {
-                    ok: true,
-                    data: { key: opts.key, removed: false, reason: 'no-override-file' },
-                };
-                process.stdout.write(JSON.stringify(envelope) + '\n');
-                return;
-            }
-            let raw;
-            try {
-                raw = JSON.parse(readFileSync(filePath, 'utf8'));
-            }
-            catch (err) {
-                throw new Error(`PREFERENCES_JSON_INVALID: failed to parse ${filePath}: ${err.message}`);
-            }
-            const hadKey = Object.prototype.hasOwnProperty.call(raw, opts.key);
-            if (hadKey) {
-                delete raw[opts.key];
-                // Slice 2026-06-23-audit-4th #A2: write atomically (tmp+rename)
-                // so a crash mid-write cannot leave a half-written file. Same
-                // pattern as preferences-service.savePreferences (post-fix) and
-                // dispatch-record-writer.writeAtomic. renameSync is imported
-                // statically at the top of this file (see node:fs import).
-                mkdirSync(dirname(filePath), { recursive: true });
-                const tmp = `${filePath}.tmp-${process.pid}-${Date.now()}`;
-                writeFileSync(tmp, JSON.stringify(raw, null, 2) + '\n', 'utf8');
-                renameSync(tmp, filePath);
-            }
-            const envelope = {
-                ok: true,
-                data: { key: opts.key, removed: hadKey },
-            };
-            process.stdout.write(JSON.stringify(envelope) + '\n');
-        }
-        catch (err) {
-            process.stderr.write(err.message + '\n');
-            process.exit(1);
-        }
-    });
-    // Slice 2026-06-23-audit-4th #C1: peaks preferences migrate — apply
-    // the v1 → v2 (and future) schema migration. Default is dry-run
-    // (preview the change list + migrated JSON without writing); pass
-    // --apply to write. Without this CLI, an old preferences.json
-    // makes loadPreferences throw PREFERENCES_SCHEMA_MISMATCH and the
-    // LLM is stuck with no recovery path.
-    prefs
-        .command('migrate')
-        .description('Migrate a legacy preferences.json to the current schema_version (v1 → v2; dry-run by default)')
-        .option('--project <path>', 'project root', process.cwd())
-        .option('--apply', 'write the migrated JSON to .peaks/preferences.json (default: dry-run preview)')
-        .option('--json', 'JSON envelope output')
-        .action((opts) => {
-        try {
-            const result = migratePreferences(opts.project, { write: opts.apply === true });
-            if (result === null) {
-                const envelope = {
-                    ok: true,
-                    data: { migrated: false, reason: 'no-preferences-file' }
-                };
-                process.stdout.write(JSON.stringify(envelope, null, 2) + '\n');
-                return;
-            }
-            const envelope = {
-                ok: true,
-                data: {
-                    fromVersion: result.fromVersion,
-                    toVersion: result.toVersion,
-                    changes: result.changes,
-                    written: result.written,
-                    migrated: result.migrated
-                },
-                warnings: result.written ? [] : [
-                    'Dry-run only — re-run with --apply to write the migrated file.'
-                ]
-            };
-            process.stdout.write(JSON.stringify(envelope, null, 2) + '\n');
-        }
-        catch (err) {
-            process.stderr.write(err.message + '\n');
-            process.exit(1);
-        }
-    });
-}

package/dist/src/cli/commands/project-commands.js

@@ -1,248 +0,0 @@
-import { loadProjectDashboard } from '../../services/dashboard/project-dashboard-service.js';
-import { generateProjectContext, readProjectContext } from '../../services/memory/project-context-service.js';
-import { extractSessionMemories, readMemoryIndex, readProjectMemories, readProjectMemoryBody } from '../../services/memory/project-memory-service.js';
-import { readBusinessKnowledge } from '../../services/prd/project-scan-reader.js';
-import { applyStalePolicy, DEFAULT_STALE_DAYS } from '../../shared/stale-policy.js';
-import { formatMdCompact } from '../../shared/format-md-compact.js';
-import { fail, ok } from '../../shared/result.js';
-import { addJsonOption, getErrorMessage, printResult } from '../cli-helpers.js';
-export function registerProjectCommands(program, io) {
-    const project = program.command('project').description('Aggregate Peaks state for a target project (read-only)');
-    addJsonOption(project
-        .command('dashboard')
-        .description('One-call snapshot of doctor / MCP / OpenSpec / requests / Understand Anything / capabilities for a project')
-        .requiredOption('--project <path>', 'target project root')
-        .option('--strict', 'ok follows the doctor aggregate (legacy semantics). Default: workspace-only (ok tracks the runbook health)', false)).action(async (options) => {
-        try {
-            const dashboard = await loadProjectDashboard({
-                projectRoot: options.project,
-                okPolicy: options.strict === true ? 'strict' : 'workspace-only'
-            });
-            if (!dashboard.runbookHealth.ok) {
-                const suggestions = [
-                    dashboard.runbookHealth.missingRunbook.length > 0
-                        ? `Add a ## Default runbook section to: ${dashboard.runbookHealth.missingRunbook.join(', ')}`
-                        : null,
-                    dashboard.runbookHealth.applyNoteFailed.length > 0
-                        ? `Add authorization/--dry-run notes next to destructive --apply lines in: ${dashboard.runbookHealth.applyNoteFailed.join(', ')}`
-                        : null
-                ].filter((line) => line !== null);
-                printResult(io, fail('project.dashboard', 'PROJECT_DASHBOARD_RUNBOOK_UNHEALTHY', `Skill runbook health failing: ${dashboard.runbookHealth.healthy}/${dashboard.runbookHealth.required} healthy`, dashboard, suggestions), options.json);
-                process.exitCode = 1;
-                return;
-            }
-            if (dashboard.skillPresence.active && !dashboard.skillPresence.fresh) {
-                printResult(io, fail('project.dashboard', 'PROJECT_DASHBOARD_STALE_SKILL_PRESENCE', `Active Peaks skill presence ${dashboard.skillPresence.skill ?? '<unknown>'} is stale (set ${dashboard.skillPresence.setAt ?? '<unknown>'})`, dashboard, ['Run `peaks skill presence:clear` if the role has ended, or `peaks skill presence:set <skill>` to refresh it']), options.json);
-                process.exitCode = 1;
-                return;
-            }
-            if (!dashboard.doctor.ok && options.strict === true) {
-                printResult(io, fail('project.dashboard', 'PROJECT_DASHBOARD_DOCTOR_STRICT_FAIL', `Doctor reports ${dashboard.doctor.failed} failed check(s) (${dashboard.doctor.passed} passed) — --strict mode requires the doctor aggregate to pass`, dashboard, ['Run `peaks doctor --json` and resolve the failing checks, or drop --strict to use the workspace-only policy']), options.json);
-                process.exitCode = 1;
-                return;
-            }
-            printResult(io, ok('project.dashboard', dashboard), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('project.dashboard', 'PROJECT_DASHBOARD_FAILED', getErrorMessage(error), { projectRoot: options.project }, ['Check the project path before retrying']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    addJsonOption(project
-        .command('context')
-        .description('Generate or read persistent project context for cross-session Peaks understanding')
-        .requiredOption('--project <path>', 'target project root')
-        .option('--read', 'read existing PROJECT.md without regenerating')).action((options) => {
-        try {
-            if (options.read) {
-                const content = readProjectContext(options.project);
-                if (content === null) {
-                    printResult(io, ok('project.context', { exists: false, path: `${options.project}/.peaks/PROJECT.md` }), options.json);
-                    return;
-                }
-                printResult(io, ok('project.context', { exists: true, path: `${options.project}/.peaks/PROJECT.md`, content }), options.json);
-                return;
-            }
-            const result = generateProjectContext(options.project);
-            printResult(io, ok('project.context', {
-                path: result.path,
-                sessionCount: result.sessionCount,
-                content: result.content
-            }), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('project.context', 'PROJECT_CONTEXT_FAILED', getErrorMessage(error), { projectRoot: options.project }, ['Check the project path and .peaks directory']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // --- Extract memories from a session's artifacts into .peaks/memory ---
-    addJsonOption(project
-        .command('memories:extract')
-        .description('Scan a session artifact directory and extract <!-- peaks-memory:start --> blocks into .peaks/memory/')
-        .requiredOption('--session-id <id>', 'session id (e.g. 2026-05-29-session-89ff35)')
-        .requiredOption('--project <path>', 'target project root')
-        // Slice #015: drop the `--dry-run true` default. With the default
-        // set to true, `options.dryRun === true && options.apply === true`
-        // fired on every `--apply` call (because dryRun was true by
-        // default), permanently breaking `--apply`. `--dry-run` is now
-        // opt-in; the mutual-exclusion check below is correct without a
-        // special-case.
-        .option('--dry-run', 'preview writes without changing files')
-        .option('--apply', 'write extracted memories into .peaks/memory/')).action((options) => {
-        if (options.dryRun === true && options.apply === true) {
-            printResult(io, fail('project.memories:extract', 'INVALID_MEMORY_EXTRACT_FLAGS', 'Use either --dry-run or --apply, not both', { sessionId: options.sessionId, projectRoot: options.project }, ['Run without --apply to preview writes, or pass --apply to write memories']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        try {
-            const result = extractSessionMemories({
-                projectRoot: options.project,
-                sessionId: options.sessionId,
-                apply: options.apply === true
-            });
-            printResult(io, ok('project.memories:extract', {
-                scannedFiles: result.scannedFiles,
-                extractedCount: result.extractedCount,
-                writtenFiles: result.writtenFiles,
-                memoryDir: result.primaryMemoryDir,
-                indexUpdated: result.updatedIndex
-            }), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('project.memories:extract', 'MEMORY_EXTRACT_FAILED', getErrorMessage(error), { sessionId: options.sessionId, projectRoot: options.project }, ['Check the session-id and project path']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // --- Read memory index (lightweight, always-safe to load) ---
-    addJsonOption(project
-        .command('memory-index')
-        .description('Read the memory index — lightweight hot/warm分层 view of all project memories')
-        .requiredOption('--project <path>', 'target project root')).action((options) => {
-        try {
-            const index = readMemoryIndex(options.project);
-            if (!index) {
-                printResult(io, ok('project.memory-index', { exists: false, message: 'No memory index found. Run `peaks project memories:extract` first.' }), options.json);
-                return;
-            }
-            printResult(io, ok('project.memory-index', { exists: true, index }), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('project.memory-index', 'MEMORY_INDEX_FAILED', getErrorMessage(error), { projectRoot: options.project }, ['Check the project path and .peaks/memory directory']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // --- Structured project memory (durable, LLM-authored, stored under .peaks/memory) ---
-    addJsonOption(project
-        .command('memories')
-        .description('Read durable project memories (decisions, conventions, modules, rules) from .peaks/memory for LLM consumption')
-        .requiredOption('--project <path>', 'target project root')
-        .option('--kind <kind>', 'filter by kind: project, rule, decision, reference, feedback, convention, module, lesson')).action((options) => {
-        try {
-            const result = readProjectMemories(options.project);
-            if (options.kind) {
-                const memories = result.memories.filter((memory) => memory.kind === options.kind);
-                printResult(io, ok('project.memories', {
-                    memoryDir: result.memoryDir,
-                    kind: options.kind,
-                    total: memories.length,
-                    memories
-                }), options.json);
-                return;
-            }
-            printResult(io, ok('project.memories', {
-                memoryDir: result.memoryDir,
-                total: result.total,
-                byKind: result.byKind,
-                memories: result.memories
-            }), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('project.memories', 'PROJECT_MEMORIES_FAILED', getErrorMessage(error), { projectRoot: options.project }, ['Check the project path and .peaks/memory directory']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // --- Show one project memory's body (R3: default = compact) ---
-    addJsonOption(project
-        .command('memories:show <name>')
-        .description('Show one project memory body by name. Default format is `compact` (LLM-primary); pass --pretty for the disk verbatim. Stale entries (default ≥30 days) are excluded; pass --include-stale or --stale-days <N> to override.')
-        .requiredOption('--project <path>', 'target project root')
-        .option('--pretty', 'return the on-disk body verbatim; overrides the compact default')
-        .option('--include-stale', 'include stale entries (the default excludes them)')
-        .option('--stale-days <n>', 'override the 30-day stale threshold (must be > 0)', (value) => Number(value))).action((name, options) => {
-        try {
-            const memory = readProjectMemoryBody(options.project, name);
-            if (memory === null) {
-                printResult(io, fail('project.memories:show', 'MEMORY_NOT_FOUND', `memory ${name} not found in .peaks/memory`, { name, projectRoot: options.project }, ['Run `peaks project memories --json` to see available names']), options.json);
-                process.exitCode = 1;
-                return;
-            }
-            // Compute the stale decision. R4: stale is computed at CLI load time
-            // only; the source `.md` file is never modified.
-            const updatedAt = memory.updatedAt;
-            const thresholdDays = options.staleDays !== undefined && Number.isFinite(options.staleDays) && options.staleDays > 0
-                ? options.staleDays
-                : DEFAULT_STALE_DAYS;
-            const policy = applyStalePolicy([{ name: memory.name, updatedAt }], {
-                thresholdDays,
-                includeStale: options.includeStale === true
-            });
-            if (policy.entries.length === 0) {
-                const ageDays = policy.entries.length === 0 && policy.droppedCount > 0
-                    ? applyStalePolicy([{ name: memory.name, updatedAt }], { thresholdDays, includeStale: true }).entries[0]?.ageDays ?? 0
-                    : 0;
-                printResult(io, fail('project.memories:show', 'MEMORY_STALE', `memory ${name} is stale (age ${ageDays} days > ${thresholdDays} day threshold); pass --include-stale to override`, { name, ageDays, thresholdDays }, ['Pass --include-stale to load stale memories; pass --stale-days <N> to override the threshold']), options.json);
-                process.exitCode = 1;
-                return;
-            }
-            const ageDays = policy.entries[0]?.ageDays ?? 0;
-            const isStale = policy.entries[0]?.stale ?? false;
-            const format = options.pretty === true ? 'pretty' : 'compact';
-            const body = format === 'pretty' ? memory.body : formatMdCompact(memory.body);
-            printResult(io, ok('project.memories:show', {
-                name: memory.name,
-                title: memory.title,
-                kind: memory.kind,
-                sourcePath: memory.filePath,
-                updatedAt,
-                ageDays,
-                stale: isStale,
-                body,
-                format,
-                bodyBytes: Buffer.byteLength(body, 'utf8')
-            }), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('project.memories:show', 'PROJECT_MEMORY_SHOW_FAILED', getErrorMessage(error), { name, projectRoot: options.project }, ['Check the project path and .peaks/memory directory']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // --- Read business-knowledge sediment (v2.11.0 Group B — D3) ---
-    addJsonOption(project
-        .command('knowledge')
-        .description('Read .peaks/project-scan/business-knowledge.md (the schema-sedimented concept table). LLM-consumable; use --filter for a concept substring.')
-        .requiredOption('--project <path>', 'target project root')
-        .option('--filter <glob>', 'substring filter on the concept name (case-insensitive)')).action(async (options) => {
-        try {
-            const knowledge = await readBusinessKnowledge(options.project);
-            if (knowledge === null) {
-                printResult(io, ok('project.knowledge', { exists: false, projectRoot: options.project, path: `${options.project}/.peaks/project-scan/business-knowledge.md` }), options.json);
-                return;
-            }
-            const concepts = options.filter
-                ? knowledge.concepts.filter((c) => c.concept.toLowerCase().includes(options.filter.toLowerCase()))
-                : knowledge.concepts;
-            printResult(io, ok('project.knowledge', {
-                exists: true,
-                schemaVersion: knowledge.schemaVersion,
-                total: knowledge.concepts.length,
-                matched: concepts.length,
-                filter: options.filter ?? null,
-                concepts
-            }), options.json);
-        }
-        catch (error) {
-            printResult(io, fail('project.knowledge', 'PROJECT_KNOWLEDGE_FAILED', getErrorMessage(error), { projectRoot: options.project }, ['Check the project path and .peaks/project-scan directory']), options.json);
-            process.exitCode = 1;
-        }
-    });
-}

package/dist/src/cli/commands/qa-business-review-commands.js

@@ -1,148 +0,0 @@
-/**
- * v2.15.0 follow-up — G5: QA business-perspective review CLI.
- *
- *   - `peaks qa business-review <request-id>`        — show the 6-item
- *                                                    business checklist
- *   - `peaks qa business-score <rid> --item --score` — record a single
- *                                                    item score (1-5)
- *   - `peaks qa business-accept <rid>`              — mark accepted
- *   - `peaks qa business-reject <rid> --reason`     — mark rejected
- *
- * The 12 Gaps positioning memory: QA business layer (user reviews
- * 6 product items) is decoupled from QA technical layer (AI
- * auto-decides coverage / P99 / security).
- */
-import { findProjectRoot } from '../../services/config/config-safety.js';
-import { getCurrentSessionId } from '../../services/skills/skill-presence-service.js';
-import { acceptQaReview, buildEmptyQaReview, deriveQaDecision, QA_BUSINESS_ITEMS, readQaReview, rejectQaReview, scoreQaItem, writeQaReview } from '../../services/qa/qa-business-review-state.js';
-import { fail, ok } from '../../shared/result.js';
-import { addJsonOption, printResult } from '../cli-helpers.js';
-export function registerQaBusinessReviewCommands(program, io) {
-    // G5 commands registered as TOP-LEVEL commands prefixed with `qa-business-`
-    // to avoid colliding with the existing `peaks qa` role commands
-    // (registered by qa-commands.ts, used for qa subcommands on qa artifacts).
-    // See similar approach in user-touchpoint-commands.ts.
-    // 1. business-review
-    addJsonOption(program
-        .command('qa-business-review <request-id>')
-        .description('Show the 6-item business checklist for a request (the 12 Gaps ' +
-        'QA perspective). If no review exists, a new one is created ' +
-        '(pending state).')
-        .option('--session-id <sid>', 'session id (default: read from .peaks/_runtime/session.json)')
-        .option('--project <path>', 'project root (default: cwd)')).action((requestId, opts) => {
-        const projectRoot = opts.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        const sessionId = opts.sessionId ?? getCurrentSessionId(projectRoot) ?? 'unknown-sid';
-        let review = readQaReview(projectRoot, sessionId, requestId);
-        if (review === null) {
-            review = buildEmptyQaReview(requestId, sessionId);
-            writeQaReview(projectRoot, review);
-        }
-        const scoredCount = review.items.filter((it) => it.score !== null).length;
-        const avg = review.items.filter((it) => it.score !== null).length === 0
-            ? null
-            : review.items.reduce((s, it) => s + (it.score ?? 0), 0) / scoredCount;
-        printResult(io, ok('qa.business-review', {
-            sessionId,
-            requestId,
-            decision: review.decision,
-            derivedDecision: deriveQaDecision(review),
-            items: review.items,
-            scoredCount,
-            averageScore: avg
-        }, review.decision === 'pending' ? [
-            `Score each item with: peaks qa business-score <rid> --item <id> --score <1-5>`,
-            'When all items are scored, run: peaks qa business-accept <rid>'
-        ] : [], review.decision === 'rejected' ? [
-            `Rejected: ${review.rejectionReason ?? '(no reason)'}`
-        ] : []), opts.json ?? false);
-    });
-    // 2. business-score
-    addJsonOption(program
-        .command('qa-business-score <request-id>')
-        .description('Record a single business item score (1-5). Threshold: avg >= 3 ' +
-        'AND no item <= 2 → accepted; otherwise rejected.')
-        .requiredOption('--item <id>', `item id (${QA_BUSINESS_ITEMS.map((i) => i.id).join(' | ')})`)
-        .requiredOption('--score <1-5>', 'score (1-5)')
-        .option('--note <text>', 'optional note')
-        .option('--session-id <sid>', 'session id')
-        .option('--project <path>', 'project root')).action((requestId, opts) => {
-        const projectRoot = opts.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        const sessionId = opts.sessionId ?? getCurrentSessionId(projectRoot) ?? 'unknown-sid';
-        const score = Number.parseInt(opts.score, 10);
-        if (Number.isNaN(score) || score < 1 || score > 5) {
-            printResult(io, fail('qa.business-score', 'INVALID_SCORE', `--score must be 1-5 (got "${opts.score}")`, { projectRoot }, []), opts.json ?? false);
-            process.exitCode = 1;
-            return;
-        }
-        let review = readQaReview(projectRoot, sessionId, requestId);
-        if (review === null) {
-            review = buildEmptyQaReview(requestId, sessionId);
-        }
-        const validIds = QA_BUSINESS_ITEMS.map((i) => i.id);
-        if (!validIds.includes(opts.item)) {
-            printResult(io, fail('qa.business-score', 'UNKNOWN_ITEM', `unknown item "${opts.item}" (valid: ${validIds.join(', ')})`, { projectRoot }, []), opts.json ?? false);
-            process.exitCode = 1;
-            return;
-        }
-        const next = scoreQaItem(review, opts.item, score, opts.note);
-        writeQaReview(projectRoot, next);
-        printResult(io, ok('qa.business-score', {
-            sessionId,
-            requestId,
-            item: opts.item,
-            score,
-            derivedDecision: deriveQaDecision(next)
-        }, [], [
-            deriveQaDecision(next) === 'accepted'
-                ? 'All items now average >= 3. Run `peaks qa business-accept` to confirm.'
-                : 'Score recorded. Continue scoring other items.'
-        ]), opts.json ?? false);
-    });
-    // 3. business-accept
-    addJsonOption(program
-        .command('qa-business-accept <request-id>')
-        .description('Mark the QA business review as accepted (derived decision must be "accepted").')
-        .option('--session-id <sid>', 'session id')
-        .option('--project <path>', 'project root')).action((requestId, opts) => {
-        const projectRoot = opts.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        const sessionId = opts.sessionId ?? getCurrentSessionId(projectRoot) ?? 'unknown-sid';
-        const review = readQaReview(projectRoot, sessionId, requestId);
-        if (review === null) {
-            printResult(io, fail('qa.business-accept', 'NO_REVIEW', `no review found for request "${requestId}"`, { projectRoot }, []), opts.json ?? false);
-            process.exitCode = 1;
-            return;
-        }
-        const derived = deriveQaDecision(review);
-        if (derived !== 'accepted') {
-            printResult(io, fail('qa.business-accept', 'CANNOT_ACCEPT', `derived decision is "${derived}" — cannot accept`, { projectRoot, review }, []), opts.json ?? false);
-            process.exitCode = 1;
-            return;
-        }
-        const next = acceptQaReview(review);
-        writeQaReview(projectRoot, next);
-        printResult(io, ok('qa.business-accept', { sessionId, requestId, decision: 'accepted', updatedAt: next.updatedAt }, [], [
-            'QA business layer accepted. Proceed to final review.'
-        ]), opts.json ?? false);
-    });
-    // 4. business-reject
-    addJsonOption(program
-        .command('qa-business-reject <request-id>')
-        .description('Mark the QA business review as rejected with a reason. Back to RD repair-loop.')
-        .requiredOption('--reason <text>', 'rejection reason (required)')
-        .option('--session-id <sid>', 'session id')
-        .option('--project <path>', 'project root')).action((requestId, opts) => {
-        const projectRoot = opts.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        const sessionId = opts.sessionId ?? getCurrentSessionId(projectRoot) ?? 'unknown-sid';
-        const review = readQaReview(projectRoot, sessionId, requestId);
-        if (review === null) {
-            printResult(io, fail('qa.business-reject', 'NO_REVIEW', `no review found for request "${requestId}"`, { projectRoot }, []), opts.json ?? false);
-            process.exitCode = 1;
-            return;
-        }
-        const next = rejectQaReview(review, opts.reason);
-        writeQaReview(projectRoot, next);
-        printResult(io, ok('qa.business-reject', { sessionId, requestId, decision: 'rejected', reason: opts.reason, updatedAt: next.updatedAt }, [], [
-            'QA business layer rejected. Hand back to RD repair-loop.'
-        ]), opts.json ?? false);
-    });
-}