peaks-loop 4.0.0-beta.7 → 4.0.0-beta.8

package/dist/src/services/skillhub/release-retain.js

@@ -1,94 +0,0 @@
-import { createHash } from "node:crypto";
-import { readFileSync, readdirSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
-import { join, relative } from "node:path";
-/** Compute the sha256 hash and byte length of a single file. */
-export function sha256OfFile(p) {
-    const buf = readFileSync(p);
-    return { sha: createHash("sha256").update(buf).digest("hex"), bytes: buf.length };
-}
-/** Copy a file into the content-addressed blob store under `blobsDir/<aa>/<sha>`
- *  if not already present, and return the relative blob_path used by `bee_file`. */
-export function ensureBlob(blobsDir, sha, srcPath) {
-    const dir = join(blobsDir, sha.slice(0, 2));
-    const dest = join(dir, sha);
-    if (!existsSync(dir))
-        mkdirSync(dir, { recursive: true });
-    if (!existsSync(dest))
-        writeFileSync(dest, readFileSync(srcPath));
-    return `blobs/${sha.slice(0, 2)}/${sha}`;
-}
-export function* walk(root, base = root) {
-    for (const ent of readdirSync(base, { withFileTypes: true })) {
-        const abs = join(base, ent.name);
-        if (ent.isDirectory())
-            yield* walk(root, abs);
-        else {
-            const relPosix = relative(root, abs).split(/[\\/]/).join("/");
-            yield { abs, rel: relPosix };
-        }
-    }
-}
-function warnOverflow(column, length) {
-    // Soft warning, no truncation: the spec does not mandate truncation,
-    // but a stale over-16KB row would silently break downstream readers
-    // that assume <16KB. Surface it for ops review.
-    // eslint-disable-next-line no-console
-    console.warn(`[release-retain] WARN: column ${column} overflowed 16KB guard (${length} bytes) — review and consider truncation`);
-}
-/**
- * Defensive 16KB check: if the value would exceed SQLite's
- * recommended 16KB single-column limit, log a warning. Not a hard
- * error — we let SQLite handle overflow. The columns covered are the
- * four TEXT columns previously unchecked: bee_manifest.segments_json,
- * bee_segment_ref.inputs_json, bee_segment_ref.outputs_json,
- * bee_segment_ref.side_effects.
- */
-function checkOverflow({ table, col }, value) {
-    const len = Buffer.byteLength(value, "utf-8");
-    if (len > 16 * 1024)
-        warnOverflow(`${table}.${col}`, len);
-}
-export function retainRelease({ db, blobsDir, scratchDir, manifest, version: explicitVersion, parentVersion, changelog, }) {
-    const version = explicitVersion ?? "0.1.0";
-    const tx = db.transaction(() => {
-        // M3 / spec §4.2: `shareable` and `desktop_visible` are written
-        // with their spec defaults (true). M7 will add a CLI flag to
-        // override on retain; M3 keeps the defaulting on the insert path
-        // so existing call sites stay source-compatible. The two new
-        // columns were added by migration 004-loop-bee-extension.sql.
-        const ins = db.prepare(`INSERT INTO bee_release (bee_name, version, source, archived_at, archived_by, user_intent_raw, description, parent_version, changelog, shareable, desktop_visible) VALUES (?, ?, 'user', ?, ?, ?, ?, ?, ?, 1, 1)`);
-        const info = ins.run(manifest.name, version, new Date().toISOString(), "llm", null, manifest.description, parentVersion ?? null, changelog ?? null);
-        const id = info.lastInsertRowid;
-        db.prepare(`INSERT OR REPLACE INTO bee_release_pointer (bee_name, latest_version, released_at) VALUES (?, ?, ?)`).run(manifest.name, version, new Date().toISOString());
-        for (const s of manifest.segments) {
-            const inputsJson = JSON.stringify(s.inputs);
-            const outputsJson = JSON.stringify(s.outputs);
-            const sideEffectsStr = s.sideEffects.join(",");
-            checkOverflow({ table: "bee_segment_ref", col: "inputs_json" }, inputsJson);
-            checkOverflow({ table: "bee_segment_ref", col: "outputs_json" }, outputsJson);
-            checkOverflow({ table: "bee_segment_ref", col: "side_effects" }, sideEffectsStr);
-            db.prepare(`INSERT INTO bee_segment_ref (release_id, segment_name, inputs_json, outputs_json, side_effects) VALUES (?, ?, ?, ?, ?)`).run(id, s.name, inputsJson, outputsJson, sideEffectsStr);
-        }
-        // Also guard the manifest-level JSON column that holds the segment
-        // name list (can exceed 16KB if a bee advertises thousands of
-        // segments).
-        const segmentsJson = JSON.stringify(manifest.segments.map((s) => s.name));
-        checkOverflow({ table: "bee_manifest", col: "segments_json" }, segmentsJson);
-        db.prepare(`INSERT INTO bee_manifest (release_id, schema_version, description, segments_json, entrypoint_preamble, promotion, min_cycles, requires_human, requires_smoke, retire_on_misses) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(id, manifest.schemaVersion, manifest.description, segmentsJson, manifest.entrypoint.preamble, manifest.promotion_status, manifest.promotion.minCycles, manifest.promotion.requiresHumanApproval ? 1 : 0, manifest.promotion.requiresSmokeTest ? 1 : 0, manifest.promotion.retireOnMissesInRow ?? null);
-        const insFile = db.prepare(`INSERT INTO bee_file (release_id, owner_kind, owner_name, path, kind, size_bytes, sha256, blob_path) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`);
-        for (const f of walk(scratchDir)) {
-            const { sha, bytes } = sha256OfFile(f.abs);
-            const blobPath = ensureBlob(blobsDir, sha, f.abs);
-            const kind = f.rel.endsWith(".md")
-                ? "markdown"
-                : f.rel.startsWith("scripts/")
-                    ? "script"
-                    : f.rel.startsWith("references/")
-                        ? "reference"
-                        : "other";
-            insFile.run(id, "bee", manifest.name, f.rel, kind, bytes, sha, blobPath);
-        }
-        return id;
-    });
-    return tx();
-}

package/dist/src/services/skillhub/sqlite-store.d.ts

@@ -1,22 +0,0 @@
-import Database from "better-sqlite3";
-/**
- * Open (or create) a SkillHub state database at the given path.
- *
- * Behavior:
- *   - Creates the parent directory if it does not exist.
- *   - Enables WAL journal mode and foreign-key enforcement.
- *   - Applies every `migrations/*.sql` file in lexicographic order.
- *     Migrations must be idempotent (CREATE TABLE IF NOT EXISTS, etc.).
- *
- * The migrations directory lives next to this source file at build time;
- * we resolve it via `import.meta.url` so the lookup survives vitest ESM
- * (where `__dirname` is undefined). Migration files are discovered by
- * globbing (`*.sql`) and sorted lexicographically so future
- * `002-…`, `003-…` additions are picked up automatically.
- */
-export declare function openStateDb(path: string): Database.Database;
-/**
- * Return the user-defined table names present in `db` (excluding SQLite
- * system tables such as `sqlite_sequence`).
- */
-export declare function listTables(db: Database.Database): string[];

package/dist/src/services/skillhub/sqlite-store.js

@@ -1,63 +0,0 @@
-import Database from "better-sqlite3";
-import { readFileSync, readdirSync, existsSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-/**
- * Open (or create) a SkillHub state database at the given path.
- *
- * Behavior:
- *   - Creates the parent directory if it does not exist.
- *   - Enables WAL journal mode and foreign-key enforcement.
- *   - Applies every `migrations/*.sql` file in lexicographic order.
- *     Migrations must be idempotent (CREATE TABLE IF NOT EXISTS, etc.).
- *
- * The migrations directory lives next to this source file at build time;
- * we resolve it via `import.meta.url` so the lookup survives vitest ESM
- * (where `__dirname` is undefined). Migration files are discovered by
- * globbing (`*.sql`) and sorted lexicographically so future
- * `002-…`, `003-…` additions are picked up automatically.
- */
-export function openStateDb(path) {
-    const parent = dirname(path);
-    if (!existsSync(parent))
-        mkdirSync(parent, { recursive: true });
-    const db = new Database(path);
-    db.pragma("journal_mode = WAL");
-    db.pragma("foreign_keys = ON");
-    const here = dirname(fileURLToPath(import.meta.url));
-    const migrationsDir = join(here, "migrations");
-    if (existsSync(migrationsDir)) {
-        const files = readdirSync(migrationsDir).filter((f) => f.endsWith(".sql")).sort();
-        for (const f of files) {
-            const sql = readFileSync(join(migrationsDir, f), "utf-8");
-            try {
-                db.exec(sql);
-            }
-            catch (err) {
-                // Tolerate idempotent re-runs of `ALTER TABLE ... ADD COLUMN`
-                // migrations (e.g. 004-loop-bee-extension). The migration
-                // files themselves are NOT idempotent (SQLite has no
-                // `ALTER TABLE ADD COLUMN IF NOT EXISTS`); the runner is
-                // made idempotent here so the same state.db can be opened
-                // by multiple CLI processes within one workflow.
-                const msg = err instanceof Error ? err.message : String(err);
-                if (msg.includes("duplicate column name") ||
-                    msg.includes("already exists")) {
-                    continue;
-                }
-                throw err;
-            }
-        }
-    }
-    return db;
-}
-/**
- * Return the user-defined table names present in `db` (excluding SQLite
- * system tables such as `sqlite_sequence`).
- */
-export function listTables(db) {
-    const rows = db
-        .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'")
-        .all();
-    return rows.map((r) => r.name);
-}

package/dist/src/services/skillhub/tar-runtime.d.ts

@@ -1,21 +0,0 @@
-/** Thrown when no usable tar binary can be located. */
-export declare class TAR_NOT_FOUND extends Error {
-    constructor(msg: string);
-}
-/**
- * Run `tar <args...>` in a cross-platform way.
- *
- * Args MUST be `["-czf", outPath, "-C", stageDir, "."]` style (no
- * shell quoting needed because we use execFileSync, not execSync).
- *
- * After the Critical #3 fix:
- *   - Honors PEAKS_TAR_BIN / TAR env vars.
- *   - On Windows, tries C:\Windows\System32\tar.exe first; falls back
- *     to PATH lookup if it's missing.
- *   - Accumulates tar's stderr and re-throws it on non-zero exit so
- *     operators can see WHY tar failed (path typo, permission, corrupt
- *     stage dir, etc.) instead of swallowing it.
- *
- * Throws `TAR_NOT_FOUND` when the binary cannot be located.
- */
-export declare function runTar(args: string[]): void;

package/dist/src/services/skillhub/tar-runtime.js

@@ -1,91 +0,0 @@
-import { execFileSync } from "node:child_process";
-import { existsSync } from "node:fs";
-/** Thrown when no usable tar binary can be located. */
-export class TAR_NOT_FOUND extends Error {
-    constructor(msg) {
-        super(`TAR_NOT_FOUND: ${msg}`);
-        this.name = "TAR_NOT_FOUND";
-    }
-}
-/**
- * Resolve a tar binary path, in priority order:
- *   1. process.env.PEAKS_TAR_BIN  (explicit override; honored unconditionally)
- *   2. process.env.TAR            (POSIX convention, honored if set)
- *   3. On Windows: C:\Windows\System32\tar.exe (bsdtar — accepts
- *      Windows-style paths verbatim, unlike git-bash GNU tar)
- *   4. PATH lookup: "tar" (delegates to the platform default)
- *
- * Throws `TAR_NOT_FOUND` when none of the candidates exist (Windows
- * file-system check) or no override is set (POSIX). On POSIX we
- * always trust PATH; tar is in base images 99.9% of the time. On
- * Windows we explicitly stat each candidate so a missing
- * C:\Windows\System32\tar.exe falls through to PATH instead of
- * throwing an opaque spawn-ENOENT.
- */
-function resolveTarBin() {
-    const envOverride = process.env.PEAKS_TAR_BIN;
-    if (envOverride && envOverride.length > 0)
-        return envOverride;
-    const envTar = process.env.TAR;
-    if (envTar && envTar.length > 0)
-        return envTar;
-    if (process.platform === "win32") {
-        const systemTar = "C:\\Windows\\System32\\tar.exe";
-        if (existsSync(systemTar))
-            return systemTar;
-        // Fall through to PATH lookup below — many dev setups install tar
-        // under Git for Windows or WindowsApps rather than System32.
-    }
-    // PATH lookup. We can't stat `tar` directly (it's a name, not a path),
-    // so we trust the resolution to execFileSync and surface a clean
-    // TAR_NOT_FOUND error from the caller if it fails.
-    return "tar";
-}
-/**
- * Run `tar <args...>` in a cross-platform way.
- *
- * Args MUST be `["-czf", outPath, "-C", stageDir, "."]` style (no
- * shell quoting needed because we use execFileSync, not execSync).
- *
- * After the Critical #3 fix:
- *   - Honors PEAKS_TAR_BIN / TAR env vars.
- *   - On Windows, tries C:\Windows\System32\tar.exe first; falls back
- *     to PATH lookup if it's missing.
- *   - Accumulates tar's stderr and re-throws it on non-zero exit so
- *     operators can see WHY tar failed (path typo, permission, corrupt
- *     stage dir, etc.) instead of swallowing it.
- *
- * Throws `TAR_NOT_FOUND` when the binary cannot be located.
- */
-export function runTar(args) {
-    const cmd = resolveTarBin();
-    try {
-        execFileSync(cmd, args, {
-            stdio: ["ignore", "ignore", "pipe"],
-            // Surface stderr text rather than dumping a Buffer at the caller.
-            // execFileSync with stdio: ["ignore","ignore","pipe"] captures the
-            // stderr stream into the Error's `.stderr` Buffer when the child
-            // exits non-zero.
-        });
-    }
-    catch (e) {
-        // Distinguish "binary not found" from "binary ran but failed".
-        if (e && typeof e === "object" && "code" in e) {
-            const code = e.code;
-            if (code === "ENOENT") {
-                throw new TAR_NOT_FOUND(`tar binary not found (cmd="${cmd}"). Set PEAKS_TAR_BIN to override, or install tar (Windows: bsdtar is bundled with Windows 10+).`);
-            }
-        }
-        // Non-zero exit from tar itself — re-throw with stderr text.
-        const stderr = e?.stderr;
-        const stderrText = stderr instanceof Buffer
-            ? stderr.toString("utf-8")
-            : typeof stderr === "string"
-                ? stderr
-                : "";
-        const baseMsg = e instanceof Error ? e.message : typeof e === "string" ? e : String(e);
-        const wrapped = new Error(`tar exited non-zero (cmd="${cmd}"): ${baseMsg}${stderrText ? `\ntar stderr:\n${stderrText.trimEnd()}` : ""}`);
-        wrapped.cause = e;
-        throw wrapped;
-    }
-}

package/dist/src/services/skillhub/types.d.ts

@@ -1,115 +0,0 @@
-export interface BeeReleaseRow {
-    id: number;
-    bee_name: string;
-    version: string;
-    source: "user";
-    archived_at: string;
-    archived_by: "user" | "llm";
-    user_intent_raw: string | null;
-    description: string | null;
-    parent_version: string | null;
-    changelog: string | null;
-    /**
-     * M3 / spec §4.2: `shareable` defaults to true (1 in SQLite).
-     * Enforced at the export CLI layer in M7; M3 only adds the column.
-     */
-    shareable: 0 | 1;
-    /**
-     * M3 / spec §4.2: `desktop_visible` defaults to true (1 in SQLite).
-     * Desktop visibility is a UI accelerator filter; M7 reads this.
-     */
-    desktop_visible: 0 | 1;
-}
-export interface BeeReleasePointerRow {
-    bee_name: string;
-    latest_version: string;
-    released_at: string;
-}
-export interface BeeManifestRow {
-    release_id: number;
-    schema_version: string;
-    description: string;
-    segments_json: string;
-    entrypoint_preamble: string | null;
-    promotion: string;
-    min_cycles: number | null;
-    requires_human: number;
-    requires_smoke: number;
-    retire_on_misses: number | null;
-}
-export interface BeeSegmentRefRow {
-    id: number;
-    release_id: number;
-    segment_name: string;
-    inputs_json: string | null;
-    outputs_json: string | null;
-    side_effects: string | null;
-}
-export interface BeeFileRow {
-    id: number;
-    release_id: number;
-    owner_kind: "bee" | "segment";
-    owner_name: string;
-    path: string;
-    kind: "markdown" | "script" | "reference" | "binary" | "other";
-    size_bytes: number;
-    sha256: string;
-    blob_path: string;
-}
-export interface BeeChangeRow {
-    id: number;
-    release_id: number;
-    change_kind: string;
-    target_kind: string;
-    target_name: string;
-    detail: string | null;
-}
-/**
- * Shape of `manifest.json` inside a release export tarball.
- *
- * Producer: `src/services/skillhub/release-export.ts` writes this file via
- *   `JSON.stringify({ bee_name, version, manifestRows, segRows, fileRows, changeRows })`.
- * Consumer: `src/services/skillhub/release-import.ts` parses it back with
- *   `JSON.parse(readFileSync(join(stageDir, "manifest.json"), "utf-8"))`.
- *
- * Defining it once here (rather than as an inline anonymous type at the
- * call-site) lets both sides share a structural contract. If a future
- * field is added — e.g. an exported schema-version stamp — it lands in
- * one place and TypeScript flags every consumer that needs updating.
- */
-export interface ExportPayload {
-    bee_name: string;
-    version: string;
-    manifestRows: Array<{
-        schema_version: string;
-        description: string;
-        segments_json: string;
-        entrypoint_preamble: string | null;
-        promotion: string;
-        min_cycles: number | null;
-        requires_human: number;
-        requires_smoke: number;
-        retire_on_misses: number | null;
-    }>;
-    segRows: Array<{
-        segment_name: string;
-        inputs_json: string | null;
-        outputs_json: string | null;
-        side_effects: string | null;
-    }>;
-    fileRows: Array<{
-        owner_kind: string;
-        owner_name: string;
-        path: string;
-        kind: string;
-        size_bytes: number;
-        sha256: string;
-        blob_path: string;
-    }>;
-    changeRows: Array<{
-        change_kind: string;
-        target_kind: string;
-        target_name: string;
-        detail: string | null;
-    }>;
-}

package/dist/src/services/skillhub/types.js

@@ -1 +0,0 @@
-export {};

package/dist/src/services/skills/hooks-settings-service.d.ts

@@ -1,137 +0,0 @@
-import type { IdeId } from '../ide/ide-types.js';
-import type { HookScope } from '../ide/shared/safe-path.js';
-/**
- * Install (and remove) the Peaks-managed hooks in an IDE's settings.json.
- *
- * The hook runs `peaks gate enforce` (Claude) or `peaks hook handle` (Trae /
- * other future adapters) before every relevant tool call; when a SOP guard's
- * gates fail it returns the adapter-specific deny shape, which blocks the
- * tool call BEFORE the IDE's permission checks — making the gate
- * un-bypassable by the agent.
- *
- * Slice #1 refactor: this service delegates to the `IdeAdapter` for
- * `claude-code`. Slice #2 added Trae. Adapter provides `dirName` /
- * `settingsFileName` / `envVar` / `hookEvent` / `toolMatcher`. The Claude
- * install path is byte-level-compat with slice #0 (AC-1).
- *
- * Slice #3 refactor (this commit): the service is now per-IDE aware via an
- * optional `options.ide` parameter. The CLI command is responsible for
- * resolving the IDE (env → stdin shape → cwd → fallback to 'claude-code')
- * via `detectIdeFromContext` and passing the result here. When `ide` is
- * omitted, the service defaults to `'claude-code'` so existing tests and
- * downstream callers continue to work without modification.
- *
- * Installation is an EXPLICIT user command (never postinstall): skills describe,
- * the CLI performs side effects. Writes preserve all other settings keys and
- * any other hooks, reject symlinked targets, and use an atomic rename so a
- * partial write can never corrupt the settings file. Our entry is merged into
- * (not replacing) the existing `hooks.<event>` array and is identified by a
- * sentinel substring in its command, so install is idempotent and uninstall
- * removes only our own entry.
- */
-export type { HookScope } from '../ide/shared/safe-path.js';
-export type HookInstallOptions = {
-    /**
-     * Which IDE's adapter to install for. Defaults to `'claude-code'` for
-     * backward compatibility. The CLI command should resolve this from
-     * `detectIdeFromContext({ env, cwd, parsedStdin })` and pass the result.
-     * Throws if the IDE is not registered in the adapter registry.
-     */
-    readonly ide?: IdeId;
-    /**
-     * Slice #013 (bugfix — peaks hooks install --no-progress): when `true`,
-     * skip emitting the progress-start PreToolUse hook entry while still
-     * installing the gate-enforce entry. The progress-start hook auto-spawns
-     * a new terminal running `peaks progress watch`; with dispatch +
-     * heartbeat (slice #009 + #010) that auto-spawn is dead weight. Default
-     * `false` preserves the pre-slice install shape (both entries). The
-     * sentinel-based install is idempotent: re-running with `skipProgress:
-     * true` over a settings.json that previously had the progress entry
-     * installed will remove that entry. `uninstall` honors the same flag
-     * so it can find and remove both entries when both are present and
-     * only the gate-enforce entry when only the gate-enforce is present.
-     *
-     * Slice #014 (refactor — full removal of legacy progress-start surface):
-     * the field is preserved for API stability, but the underlying
-     * install only ever emits the gate-enforce entry. The progress-start
-     * entry is no longer installed regardless of this flag's value. The
-     * legacy `peaks progress start|watch|close` CLI surface is gone
-     * (replaced by `peaks sub-agent dispatch|heartbeat|share`); the hook
-     * entry would have been pointing at a `peaks progress start` that no
-     * longer exists. The sentinel `peaks progress start` constant is still
-     * exported (some tests + back-compat reads rely on it) but no new
-     * hook entries use it.
-     */
-    readonly skipProgress?: boolean;
-};
-/** Sentinel substring identifying a Claude-Code gate-enforce hook entry. */
-export declare const HOOK_ENFORCE_SENTINEL = "peaks gate enforce";
-/** Default (claude-code) hook command — kept as a stable export for tests. */
-export declare const HOOK_ENFORCE_COMMAND = "peaks gate enforce --project \"${CLAUDE_PROJECT_DIR}\"";
-export type HookInstallPlan = {
-    scope: HookScope;
-    settingsPath: string;
-    exists: boolean;
-    alreadyInstalled: boolean;
-    desiredCommand: string;
-    sentinel: string;
-    matcher: string;
-};
-export type HookInstallResult = HookInstallPlan & {
-    applied: boolean;
-};
-export type HookRemoveResult = {
-    scope: HookScope;
-    settingsPath: string;
-    removed: boolean;
-};
-export type HookStatus = {
-    scope: HookScope;
-    settingsPath: string;
-    exists: boolean;
-    installed: boolean;
-};
-/**
- * Slice #014: read the *actually-installed* peaks-managed hook entries
- * from a settings object. Replaces the pre-#014 `listInstalledEntriesForIde`
- * helper in `hooks-commands.ts`, which returned the IDE-EXPECTED list
- * (a hardcoded 2-entry array per adapter) rather than what was on disk.
- * That bug surfaced when slice #013's local cleanup installed
- * `peaks hooks install --no-progress` (gate-enforce only), but the
- * status command still reported `entries: [Bash, Task]` because the
- * helper didn't read the file.
- *
- * The new helper:
- *   1. reads each `hooks.<event>` array,
- *   2. filters to entries that are peaks-managed for the given IDE
- *      (matches the legacy sentinel set: gate-enforce + the no-longer-
- *      installed progress-start),
- *   3. returns one `{ matcher, sentinel }` row per entry, taking the
- *      FIRST matching sentinel per entry (entries have a single command
- *      handler in practice, but the loop tolerates multi-handler
- *      entries by taking the first match).
- *
- * Pre-#014 settings.json files that have a stale progress-start entry
- * will see it surface in the result. This is intentional: the status
- * command is the user's tool for "what is on disk right now", and
- * surfacing a stale entry is the only way the user can know to run
- * `peaks hooks install` (which now strips it) or `peaks hooks
- * uninstall` (which removes it).
- */
-export declare function readInstalledEntriesFromSettings(settings: Record<string, unknown>, ide: IdeId): ReadonlyArray<{
-    matcher: string;
-    sentinel: string;
-}>;
-/** A typed descriptor for a single peaks-managed hook entry. */
-export type PeaksHookEntry = {
-    sentinel: string;
-    matcher: string;
-    command: string;
-    event: string;
-};
-/** Default (claude-code) peaks-managed hook entries — kept as a stable export for tests. Slice #014: only the gate-enforce entry. */
-export declare const PEAKS_HOOK_ENTRIES: ReadonlyArray<PeaksHookEntry>;
-export declare function planHookInstall(scope: HookScope, projectRoot?: string, options?: HookInstallOptions): HookInstallPlan;
-export declare function applyHookInstall(scope: HookScope, projectRoot?: string, options?: HookInstallOptions): HookInstallResult;
-export declare function removeHookInstall(scope: HookScope, projectRoot?: string, options?: HookInstallOptions): HookRemoveResult;
-export declare function readHookStatus(scope: HookScope, projectRoot?: string, options?: HookInstallOptions): HookStatus;