peaks-loop 4.0.0-beta.7 → 4.0.0-beta.8

package/dist/src/cli/commands/heartbeat-commands.js

@@ -1,135 +0,0 @@
-/**
- * `peaks sub-agent heartbeat` — G6: append a heartbeat to a dispatch record.
- *
- * Pulled out of `sub-agent-commands.ts` (slice 2026-06-23-audit-p0-split)
- * to honor the 800-line file cap. The heartbeat is fire-and-forget; the
- * parent Dispatcher polls the record during the batch-sync wait and
- * renders a status line. Sub-agents should call this at least every
- * 30s (configurable via SKILL.md heartbeatIntervalSec).
- *
- * R-2 path guard: `assertSafeDispatchRecordPath` ensures the record
- * lives under `.peaks/_sub_agents/` so a malicious `--record` arg can't
- * point at a sensitive file outside the runtime tree.
- */
-import { existsSync } from 'node:fs';
-import { fail, getErrorMessage, ok } from '../../shared/result.js';
-import { addJsonOption, printResult } from '../cli-helpers.js';
-import { appendHeartbeat } from '../../services/dispatch/dispatch-record-writer.js';
-import { assertSafeDispatchRecordPath } from '../../services/security/safe-settings-path.js';
-import { writeLogEntry } from '../../services/log/logger.js';
-import { HEARTBEAT_STATUSES } from './sub-agent-shared.js';
-export function registerHeartbeatCommand(parent, io) {
-    addJsonOption(parent
-        .command('heartbeat')
-        .description('Append a heartbeat entry to a dispatch record. Fire-and-forget: ' +
-        'the parent Dispatcher polls this record during the batch-sync ' +
-        'wait and renders a status line. Sub-agents should call this at ' +
-        'least every 30s (configurable via SKILL.md heartbeatIntervalSec).')
-        .requiredOption('--record <path>', 'absolute path to a dispatch record JSON')
-        .requiredOption('--status <state>', 'queued | running | finalizing | done | failed | stale')
-        .requiredOption('--progress <pct>', 'integer 0-100')
-        .option('--note <text>', 'free-form progress note (≤ 200 chars)')
-        .option('--project <path>', 'trusted project root (defaults to cwd); used for the R-2 path guard so a malicious --record cannot point at another project\'s dispatch record')).action((options) => {
-        const asJson = options.json === true;
-        if (!options.record || !existsSync(options.record)) {
-            printResult(io, fail('sub-agent.heartbeat', 'INVALID_RECORD_PATH', `record not found: ${options.record ?? '(empty)'}`, { recordPath: options.record ?? null, truncated: false }, [
-                'Pass the absolute path from the `peaks sub-agent dispatch` envelope.'
-            ]), asJson);
-            process.exitCode = 1;
-            return;
-        }
-        if (!HEARTBEAT_STATUSES.includes(options.status)) {
-            printResult(io, fail('sub-agent.heartbeat', 'INVALID_STATUS', `--status must be one of ${HEARTBEAT_STATUSES.join(' | ')} (got ${options.status})`, { recordPath: options.record, truncated: false }, [
-                'Use one of the documented statuses; poller compares lastBeatAt against now() - 5min to set `stale`.'
-            ]), asJson);
-            process.exitCode = 1;
-            return;
-        }
-        const progress = Number.parseInt(options.progress ?? 'NaN', 10);
-        if (!Number.isInteger(progress) || progress < 0 || progress > 100) {
-            printResult(io, fail('sub-agent.heartbeat', 'INVALID_PROGRESS', `--progress must be integer 0-100 (got ${options.progress})`, { recordPath: options.record, truncated: false }, [
-                'Use 0..100 inclusive.'
-            ]), asJson);
-            process.exitCode = 1;
-            return;
-        }
-        if (options.note !== undefined && options.note.length > 200) {
-            printResult(io, fail('sub-agent.heartbeat', 'NOTE_TOO_LONG', `--note must be ≤ 200 chars (got ${options.note.length})`, { recordPath: options.record, truncated: false }, [
-                'Shorten the note; the record file is not a log file.'
-            ]), asJson);
-            process.exitCode = 1;
-            return;
-        }
-        try {
-            // R-2 guard (slice 2026-06-23-audit-3rd): trust --project or process.cwd(),
-            // NOT the --record path. deriveProjectRoot(recordPath) walked the path
-            // itself, which let an attacker point --record at any other project's
-            // .peaks/_sub_agents/ tree and slip past the guard. The relative()
-            // backstop still applies — the record must live under the trusted
-            // root's .peaks/_sub_agents/ subdir.
-            const trustedRoot = options.project ?? process.cwd();
-            assertSafeDispatchRecordPath(options.record, trustedRoot);
-            const result = appendHeartbeat({
-                recordPath: options.record,
-                status: options.status,
-                progress,
-                ...(options.note !== undefined ? { note: options.note } : {})
-            });
-            printResult(io, ok('sub-agent.heartbeat', {
-                // Slice 2026-06-23-audit-4th #E1: envelopeVersion marker
-                envelopeVersion: '2.1.0',
-                recordPath: options.record,
-                heartbeatCount: result.record.heartbeats.length,
-                lastBeatAt: result.record.lastBeatAt,
-                status: result.record.status,
-                truncated: result.truncated
-            }, [], ['Continue business logic; heartbeat is fire-and-forget.']), asJson);
-            // Slice 2026-06-23-audit-4th #B1: structured log on success.
-            try {
-                writeLogEntry({
-                    ts: new Date().toISOString(),
-                    level: 'info',
-                    command: 'sub-agent.heartbeat',
-                    msg: 'heartbeat',
-                    batchId: result.record.batchId,
-                    data: {
-                        recordPath: options.record,
-                        status: result.record.status,
-                        heartbeatCount: result.record.heartbeats.length,
-                        truncated: result.truncated
-                    }
-                });
-            }
-            catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-                /* best-effort */
-            }
-        }
-        catch (error) {
-            const code = error.code ?? 'HEARTBEAT_ERROR';
-            printResult(io, fail('sub-agent.heartbeat', code, getErrorMessage(error), { recordPath: options.record ?? null, truncated: false }, [
-                heartbeatErrorNextActions(code)
-            ]), asJson);
-            process.exitCode = 1;
-        }
-    });
-}
-/**
- * Slice 2026-06-23-audit-3rd #9: branch nextActions on `error.code` so
- * the LLM-side runner gets a specific hint instead of the generic
- * "see error message" fallback.
- */
-function heartbeatErrorNextActions(code) {
-    if (code === 'LOCK_TIMEOUT') {
-        return 'A concurrent writer (markCompleted or another heartbeat) holds the record lock for >5s; retry, or check for a crashed holder (the .lock file is reaped after 30s).';
-    }
-    if (code === 'RECORD_NOT_FOUND') {
-        return 'The dispatch record does not exist on disk. Re-run `peaks sub-agent dispatch <role>` to materialize a fresh record path; the previous batch may have been garbage-collected.';
-    }
-    if (code === 'INVALID_RECORD_JSON') {
-        return 'The record file is corrupted (truncated mid-write or hand-edited). Delete it and re-run `peaks sub-agent dispatch`; the parent Dispatcher will treat this as a fresh dispatch.';
-    }
-    if (code === 'INVALID_PROGRESS' || code === 'NOTE_TOO_LONG') {
-        return 'Pass --progress as integer 0..100 and --note as ≤ 200 chars. Both are validated by the CLI before reaching the writer.';
-    }
-    return 'See error message; if the record file is missing or corrupted, the parent Dispatcher will mark the sub-agent as stale after 5 minutes.';
-}

package/dist/src/cli/commands/hook-handle.d.ts

@@ -1,17 +0,0 @@
-import { Command } from 'commander';
-import { type ProgramIO } from '../cli-helpers.js';
-/**
- * `peaks hook handle` —— peaks 自有 hook 协议的单一入口。
- *
- * 该命令是 peaks-loop 拥有的 hook 处理总入口。它:
- *   1. 读 stdin
- *   2. auto-detect 来源 IDE(env / stdin shape / cwd)
- *   3. 归一化到 peaks canonical schema
- *   4. dispatch 到内部 peaks 逻辑(目前:gate enforce)
- *   5. 用 IDE 期望的格式发回决策
- *
- * Slice #1 阶段:peaks hook handle 与 peaks gate enforce
- * 并存(后者内部走 hook-translator)。Slice #2 把 IDE settings 改成调用
- * peaks hook handle 即可。Slice #3 删除旧命令。
- */
-export declare function registerHookHandleCommand(program: Command, io: ProgramIO): void;

package/dist/src/cli/commands/hook-handle.js

@@ -1,157 +0,0 @@
-import { addJsonOption, printResult } from '../cli-helpers.js';
-import { detectIdeFromContext, parseAdapterStdin, parseClaudeShapeStdin, pluckObject, pluckString } from '../../services/ide/hook-translator.js';
-import { buildCanonicalHook, formatDecisionResponse } from '../../services/ide/hook-protocol.js';
-import { getAdapter } from '../../services/ide/ide-registry.js';
-import { evaluateCodeBan } from '../../services/audit/enforcers/code-ban.js';
-import { isRootWrite } from '../../services/audit/enforcers/no-root-pollution.js';
-import { checkLoginGate } from '../../services/audit/enforcers/login-gate.js';
-import { resolveActiveSkillForCaller } from '../../services/audit/enforcers/active-skill-resolver.js';
-import { fail, ok } from '../../shared/result.js';
-import { emitDecision, emitHint } from '../../services/hooks/output.js';
-/**
- * Read the hook payload. `PEAKS_HOOK_STDIN` is a test seam (same convention as
- * `gate-commands.ts`); production reads stdin. The TTY short-circuit means an
- * interactive shell invocation is treated as an empty payload (allow).
- */
-async function readStdin() {
-    const override = process.env.PEAKS_HOOK_STDIN;
-    if (override !== undefined) {
-        return override;
-    }
-    if (process.stdin.isTTY)
-        return '';
-    return new Promise((resolveStdin) => {
-        let data = '';
-        process.stdin.setEncoding('utf8');
-        process.stdin.on('data', (chunk) => { data += chunk; });
-        process.stdin.on('end', () => resolveStdin(data));
-        process.stdin.on('error', () => resolveStdin(data));
-    });
-}
-/**
- * `peaks hook handle` —— peaks 自有 hook 协议的单一入口。
- *
- * 该命令是 peaks-loop 拥有的 hook 处理总入口。它:
- *   1. 读 stdin
- *   2. auto-detect 来源 IDE(env / stdin shape / cwd)
- *   3. 归一化到 peaks canonical schema
- *   4. dispatch 到内部 peaks 逻辑(目前:gate enforce)
- *   5. 用 IDE 期望的格式发回决策
- *
- * Slice #1 阶段:peaks hook handle 与 peaks gate enforce
- * 并存(后者内部走 hook-translator)。Slice #2 把 IDE settings 改成调用
- * peaks hook handle 即可。Slice #3 删除旧命令。
- */
-export function registerHookHandleCommand(program, io) {
-    const hook = program.command('hook').description('Peaks 自有 hook 协议单一入口（slice #1 新增；后续 slice 将逐步替代 gate enforce）');
-    addJsonOption(hook
-        .command('handle')
-        .description('Read stdin hook payload, auto-detect IDE, dispatch to peaks gate-enforce logic, output IDE-formatted decision')
-        .option('--project <path>', 'project the gates evaluate against (default: current directory)', '.')).action(async (options) => {
-        try {
-            const raw = await readStdin();
-            let parsed = null;
-            if (raw.trim().length > 0) {
-                try {
-                    parsed = JSON.parse(raw);
-                }
-                catch {
-                    // Malformed JSON — treat as empty payload (fail-open)
-                    parsed = null;
-                }
-            }
-            const ide = detectIdeFromContext({ env: process.env, cwd: process.cwd(), parsedStdin: parsed });
-            const adapter = getAdapter(ide);
-            // Slice #3: per-adapter stdin parser dispatch. The detected IDE
-            // determines which parser runs; unknown IDEs fall back to the Claude
-            // shape (preserves slice #1's "fail-open to Claude" semantics).
-            const { toolName, command } = parseAdapterStdin(ide, parsed);
-            // Also try the Claude parser as a secondary fallback so a Trae user who
-            // accidentally pipes a Claude-shaped payload still gets the right fields.
-            const claudeShape = parseClaudeShapeStdin(parsed);
-            const fallbackToolName = toolName ?? claudeShape.toolName ?? pluckString(parsed, ['toolName']);
-            const fallbackCommand = command ?? claudeShape.command ?? pluckString(parsed, ['toolInput', 'command']);
-            const projectRoot = process.env[adapter.envVar] ?? options.project;
-            const hook = buildCanonicalHook({
-                toolName: fallbackToolName ?? '',
-                toolInput: pluckObject(parsed, ['tool_input']) ?? pluckObject(parsed, ['toolInput']) ?? {},
-                projectRoot,
-                rawIdeFormat: ide,
-                rawPayload: parsed
-            });
-            // Dispatch by toolName. For slice #1+, we only handle Bash. Task tool sub-agent dispatch goes through `peaks sub-agent dispatch` (slice #009) and does not need a hook entry.
-            // Other tools: allow (no-op; future events will be added here).
-            if (hook.toolName === 'Bash' && typeof fallbackCommand === 'string' && fallbackCommand.trim().length > 0) {
-                // L2.1 P0 #1: code-commit-ban. Deny `git commit` / `git apply` from peaks-* skills
-                // BEFORE the SOP gate runs. The active skill is read from the per-caller
-                // active-skill file (see active-skill-resolver.ts).
-                const activeSkill = resolveActiveSkillForCaller(projectRoot);
-                if (activeSkill.skill !== null) {
-                    const codeDecision = evaluateCodeBan({ skill: activeSkill.skill, command: fallbackCommand });
-                    if (codeDecision.denied) {
-                        const formatted = formatDecisionResponse(ide, 'deny', codeDecision.reason);
-                        emitDecision(io, formatted.stdout);
-                        if (options.json === true) {
-                            emitHint(io, JSON.stringify(ok('hook.handle', { ide, tool: hook.toolName, decision: 'deny', reason: codeDecision.reason, enforcer: 'code-ban' })));
-                        }
-                        return;
-                    }
-                }
-                // Lazy import to avoid circular: peaks gate enforce logic
-                const { enforceBashCommand } = await import('../../services/sop/gate-enforce-service.js');
-                const decision = await enforceBashCommand(projectRoot, fallbackCommand);
-                if (decision.decision === 'deny') {
-                    const formatted = formatDecisionResponse(ide, 'deny', decision.reason);
-                    emitDecision(io, formatted.stdout);
-                    if (options.json === true) {
-                        emitHint(io, JSON.stringify(ok('hook.handle', { ide, tool: hook.toolName, decision: 'deny', reason: decision.reason })));
-                    }
-                    return;
-                }
-            }
-            // L2.2 P1 #1: login-gate. After code-commit-ban + gate-enforce pass,
-            // flag destructive patterns (uninstall, force-push, --force, --hard,
-            // rm -rf) so the LLM gets a soft warning (still allow). The user
-            // gets the warning via the warn channel; the command proceeds.
-            if (hook.toolName === 'Bash' && typeof fallbackCommand === 'string') {
-                const gate = checkLoginGate({ command: fallbackCommand });
-                if (gate.destructive) {
-                    emitHint(io, `warning: login-gate: destructive command detected (pattern: ${gate.matchedPattern}). Confirm with the user before proceeding.`);
-                }
-            }
-            // L2.1 P0 #2: no-root-pollution. Deny Write/Edit to files outside the
-            // root allowlist. file_path is read from toolInput.file_path (Claude
-            // and most IDEs use the same shape). When the field is missing or the
-            // path is not at depth 1, the enforcer allows (no-op).
-            if (hook.toolName === 'Write' || hook.toolName === 'Edit' || hook.toolName === 'MultiEdit' || hook.toolName === 'Create') {
-                const filePath = pluckString(parsed, ['tool_input', 'file_path'])
-                    ?? pluckString(parsed, ['toolInput', 'file_path'])
-                    ?? pluckString(parsed, ['tool_input', 'path'])
-                    ?? pluckString(parsed, ['toolInput', 'path']);
-                if (typeof filePath === 'string' && filePath.trim().length > 0) {
-                    const rootCheck = isRootWrite({ projectRoot, filePath });
-                    if (!rootCheck.allowed) {
-                        const formatted = formatDecisionResponse(ide, 'deny', rootCheck.denyReason);
-                        emitDecision(io, formatted.stdout);
-                        if (options.json === true) {
-                            emitHint(io, JSON.stringify(ok('hook.handle', { ide, tool: hook.toolName, decision: 'deny', reason: rootCheck.denyReason, enforcer: 'no-root-pollution' })));
-                        }
-                        return;
-                    }
-                }
-            }
-            const allow = formatDecisionResponse(ide, 'allow');
-            emitDecision(io, allow.stdout);
-            if (options.json === true) {
-                printResult(io, ok('hook.handle', { ide, tool: hook.toolName, decision: 'allow' }), true);
-            }
-        }
-        catch (error) {
-            // Fail-open: a bug in hook.handle must not brick Claude Code.
-            emitHint(io, `hook handle: internal error, allowing command (${error instanceof Error ? error.message : String(error)})`);
-            if (options.json === true) {
-                printResult(io, fail('hook.handle', 'HOOK_HANDLE_FAILED', error instanceof Error ? error.message : 'unknown', {}), true);
-            }
-        }
-    });
-}

package/dist/src/cli/commands/hooks-commands.d.ts

@@ -1,3 +0,0 @@
-import { Command } from 'commander';
-import { type ProgramIO } from '../cli-helpers.js';
-export declare function registerHooksCommands(program: Command, io: ProgramIO): void;

package/dist/src/cli/commands/hooks-commands.js

@@ -1,156 +0,0 @@
-import { existsSync } from 'node:fs';
-import { fail, ok } from '../../shared/result.js';
-import { addJsonOption, printResult, getErrorMessage } from '../cli-helpers.js';
-import { findProjectRoot } from '../../services/config/config-safety.js';
-import { applyHookInstall, planHookInstall, readHookStatus, readInstalledEntriesFromSettings, removeHookInstall } from '../../services/skills/hooks-settings-service.js';
-import { readJsonObjectFile } from '../../services/ide/shared/atomic-json.js';
-import { detectIdeFromContext } from '../../services/ide/hook-translator.js';
-import { getAdapter } from '../../services/ide/ide-registry.js';
-function resolveScope(options) {
-    return options.global ? 'global' : 'project';
-}
-function resolveProjectRoot(scope, project) {
-    return scope === 'project' ? (project ?? findProjectRoot(process.cwd()) ?? process.cwd()) : undefined;
-}
-/**
- * Resolve the IDE the install should target. The CLI user can override with
- * `--ide <id>`. Otherwise we delegate to `detectIdeFromContext` which checks
- * `process.env[adapter.envVar]` → stdin shape → cwd `.trae`/`.claude` →
- * fallback `'claude-code'`. Pass `parsedStdin: null` since `peaks hooks
- * install` is not invoked from inside an IDE hook — there's no stdin payload.
- */
-function resolveIdeForCommand(options, projectRoot) {
-    if (options.ide !== undefined && options.ide.length > 0) {
-        return options.ide;
-    }
-    return detectIdeFromContext({ env: process.env, cwd: projectRoot ?? process.cwd(), parsedStdin: null });
-}
-/**
- * Slice #014: compute the per-IDE peaks hook entries for the install /
- * dry-run RESPONSE SUMMARY. This is the *desired* shape (what the install
- * WOULD write), not what is on disk. The status command uses a different
- * helper (`readInstalledEntriesFromSettings`) that reads the actual
- * settings.json.
- *
- * After slice #014 only the gate-enforce entry is ever installed
- * (the legacy progress-start surface is gone). The summary mirrors
- * the install shape so the JSON envelope doesn't claim a hook the
- * service did not write.
- */
-function listExpectedEntriesForIde(ide, _skipProgress = false) {
-    const adapter = getAdapter(ide);
-    if (ide === 'trae') {
-        return [{ matcher: adapter.toolMatcher, sentinel: 'peaks hook handle' }];
-    }
-    return [{ matcher: adapter.toolMatcher, sentinel: 'peaks gate enforce' }];
-}
-export function registerHooksCommands(program, io) {
-    const hooks = program
-        .command('hooks')
-        .description("Manage the Peaks-managed hook entry in the adapter's settings.json (default: .claude/settings.json for Claude, .trae/settings.json for Trae). Slice #014: the only installed entry is the gate-enforce hook (SOP gate). The legacy progress-start hook (auto-spawn sub-agent progress terminal) is no longer installed — sub-agent progress is now surfaced via the dispatch + heartbeat flow (`peaks sub-agent dispatch` / `peaks sub-agent heartbeat`). The IDE is auto-detected from env / cwd; override with --ide <id>.");
-    addJsonOption(hooks
-        .command('install')
-        .description(`Install the peaks-managed gate-enforce hook entry into the adapter's settings.json. Slice #014: only the gate-enforce entry is installed; the legacy progress-start entry is no longer installed. Idempotent: re-runs are no-ops. Project scope by default.`)
-        .option('--global', 'install into the user-level ~/.claude/settings.json instead of the project')
-        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')
-        .option('--ide <id>', "target adapter id (claude-code | trae); default: auto-detect from env/cwd")
-        .option('--dry-run', 'show what would change without writing')
-        .option('--no-progress', 'skip the progress-start PreToolUse hook entry; install ONLY the gate-enforce entry')).action((options) => {
-        const scope = resolveScope(options);
-        const projectRoot = resolveProjectRoot(scope, options.project);
-        const ide = resolveIdeForCommand(options, projectRoot);
-        const skipProgress = options.progress === false;
-        try {
-            if (options.dryRun === true) {
-                const plan = planHookInstall(scope, projectRoot, { ide, skipProgress });
-                const dryRunEntries = listExpectedEntriesForIde(ide, skipProgress);
-                printResult(io, ok('hooks.install', {
-                    ...plan,
-                    ide,
-                    applied: false,
-                    dryRun: true,
-                    skipProgress,
-                    entries: dryRunEntries
-                }, [], [`would install ${dryRunEntries.length} peaks-managed hook entries`]), options.json);
-                return;
-            }
-            const result = applyHookInstall(scope, projectRoot, { ide, skipProgress });
-            // Slice #3: build the per-IDE entries summary from the actual installed
-            // entries, not the slice #1 PEAKS_HOOK_ENTRIES constant (which is the
-            // claude-code default). The user's JSON envelope must reflect the IDE
-            // they targeted. Slice #014: the install only emits the gate-enforce
-            // entry; the summary mirrors the install shape, NOT a hardcoded
-            // expected list.
-            const installedEntries = listExpectedEntriesForIde(ide, skipProgress);
-            const nextActions = result.applied
-                ? [
-                    'Restart the IDE (or reload the workspace) so the hook entries take effect',
-                    `Installed: ${installedEntries.map((e) => `${e.matcher}→${e.sentinel}`).join(', ')}`
-                ]
-                : [];
-            printResult(io, ok('hooks.install', {
-                ...result,
-                ide,
-                dryRun: false,
-                skipProgress,
-                entries: installedEntries.map((e) => ({ matcher: e.matcher, sentinel: e.sentinel }))
-            }, [], nextActions), options.json);
-        }
-        catch (error) {
-            const message = getErrorMessage(error);
-            printResult(io, fail('hooks.install', 'HOOKS_INSTALL_FAILED', message, { scope, ide, applied: false, skipProgress }, [message]), options.json);
-            process.exitCode = 1;
-        }
-    });
-    addJsonOption(hooks
-        .command('uninstall')
-        .description("Remove the peaks-managed gate-enforce hook entry from the target settings.json. Any legacy progress-start entry that a pre-#014 install left behind is also removed (sentinel-based scan). Third-party hooks are preserved.")
-        .option('--global', 'remove from the user-level ~/.claude/settings.json instead of the project')
-        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')
-        .option('--ide <id>', 'target adapter id (claude-code | trae); default: auto-detect from env/cwd')).action((options) => {
-        const scope = resolveScope(options);
-        const projectRoot = resolveProjectRoot(scope, options.project);
-        const ide = resolveIdeForCommand(options, projectRoot);
-        try {
-            const result = removeHookInstall(scope, projectRoot, { ide });
-            printResult(io, ok('hooks.uninstall', { ...result, ide }), options.json);
-        }
-        catch (error) {
-            const message = getErrorMessage(error);
-            printResult(io, fail('hooks.uninstall', 'HOOKS_UNINSTALL_FAILED', message, { scope, ide, removed: false }, [message]), options.json);
-            process.exitCode = 1;
-        }
-    });
-    addJsonOption(hooks
-        .command('status')
-        .description('Report which peaks-managed hook entries are installed.')
-        .option('--global', 'inspect the user-level ~/.claude/settings.json instead of the project')
-        .option('--project <path>', 'project root path (auto-detected from cwd when omitted)')
-        .option('--ide <id>', 'target adapter id (claude-code | trae); default: auto-detect from env/cwd')).action((options) => {
-        const scope = resolveScope(options);
-        const projectRoot = resolveProjectRoot(scope, options.project);
-        const ide = resolveIdeForCommand(options, projectRoot);
-        try {
-            const status = readHookStatus(scope, projectRoot, { ide });
-            // Slice #014: read the ACTUAL on-disk entries (post-install shape),
-            // not the IDE-EXPECTED list. Pre-#014 `listInstalledEntriesForIde`
-            // returned the expected list and reported `entries: [Bash, Task]`
-            // even when the file only had `Bash`. The new helper reads the
-            // file and reports whatever peaks-managed entries are present,
-            // including any legacy progress-start entry that a pre-#014
-            // install left behind.
-            const settingsPath = status.settingsPath;
-            const settings = existsSync(settingsPath) ? readJsonObjectFile(settingsPath) : {};
-            printResult(io, ok('hooks.status', {
-                ...status,
-                ide,
-                entries: readInstalledEntriesFromSettings(settings, ide)
-            }), options.json);
-        }
-        catch (error) {
-            const message = getErrorMessage(error);
-            printResult(io, fail('hooks.status', 'HOOKS_STATUS_FAILED', message, { scope, ide }, [message]), options.json);
-            process.exitCode = 1;
-        }
-    });
-}

package/dist/src/cli/commands/ide-commands.d.ts

@@ -1,25 +0,0 @@
-/**
- * peaks ide * CLI (Slice 2026-07-09 add-zcode-adapter, Slice C).
- *
- * Slice C adds ONE verb:
- *
- *   peaks ide model --current
- *
- * Outputs the currently-active model id detected from the host
- * environment (so far: only the `zcode` adapter opts in via
- * `IdeAdapter.detectCurrentModel?`). The CLI is the read-only
- * debugging surface for runtime model probing. It does NOT set any
- * state — `peaks config set model` remains the canonical write path.
- *
- * Future slices will extend this surface with `peaks ide list`,
- * `peaks ide detect`, etc. — this slice keeps the surface minimal
- * (per Karpathy guideline #2 — Simplicity First).
- *
- * Vendor-neutrality: this file delegates to
- * `src/services/ide/current-model-detector.ts` which walks every
- * registered adapter. This file does NOT import any specific
- * adapter.
- */
-import { Command } from 'commander';
-import { type ProgramIO } from '../cli-helpers.js';
-export declare function registerIdeCommands(program: Command, io: ProgramIO): void;

package/dist/src/cli/commands/ide-commands.js

@@ -1,42 +0,0 @@
-import { detectCurrentIdeModel } from '../../services/ide/current-model-detector.js';
-import { addJsonOption, printResult } from '../cli-helpers.js';
-import { fail, ok } from '../../shared/result.js';
-import { listAdapterIds } from '../../services/ide/ide-registry.js';
-export function registerIdeCommands(program, io) {
-    const ide = program.command('ide').description('Read-only introspection helpers for the registered IDE adapter layer (slice 2026-07-09 add-zcode-adapter, Slice C)');
-    addJsonOption(ide
-        .command('model')
-        .description('Inspect the IDE adapter model surface. Slice C supports `--current` only.')
-        .option('--current', 'Print the model id the active IDE adapter reports as currently configured')
-        .action(async (options) => {
-        if (options.current) {
-            await runIdeModelCurrent(io, options);
-            return;
-        }
-        // No verb supplied — Commander would normally show help; we
-        // emit a structured error instead so the JSON envelope stays
-        // consistent for LLM callers.
-        printResult(io, fail('ide.model', 'MISSING_VERB', 'Specify a verb: --current. Future slices may add --configured / --default.', { registeredAdapters: listAdapterIds() }, ['Rerun with --current to read the runtime-detected model id.']), options.json);
-    }));
-}
-async function runIdeModelCurrent(io, options) {
-    try {
-        const modelId = await detectCurrentIdeModel();
-        if (modelId === undefined) {
-            printResult(io, ok('ide.model.current', {
-                modelId: null,
-                detected: false,
-                registeredAdapters: listAdapterIds(),
-            }), options.json);
-            return;
-        }
-        printResult(io, ok('ide.model.current', {
-            modelId,
-            detected: true,
-            registeredAdapters: listAdapterIds(),
-        }), options.json);
-    }
-    catch (error) {
-        printResult(io, fail('ide.model.current', 'DETECTION_FAILED', 'Runtime model detection failed; falling back to configured model. See logs.', { error: error instanceof Error ? error.message : String(error) }, ['Check `PEAKS_LOG_LEVEL=debug peaks ide model --current` for the underlying error.']), options.json);
-    }
-}

package/dist/src/cli/commands/impact-commands.d.ts

@@ -1,15 +0,0 @@
-/**
- * v2.15.0 follow-up — G13: impact scan CLI.
- *
- *   - `peaks impact scan`        — full impact report (changed files +
- *                                  affected flows + must-check list)
- *   - `peaks impact must-check`  — return just the must-check list
- *                                  (for piping into smoke / release)
- *
- * Lightweight glob-based implementation (no AST, no type checking).
- * Suitable for the "we don't have UT, give me a quick risk list"
- * use case from the 12 Gaps memory.
- */
-import type { Command } from 'commander';
-import { type ProgramIO } from '../cli-helpers.js';
-export declare function registerImpactCommands(program: Command, io: ProgramIO): void;

package/dist/src/cli/commands/impact-commands.js

@@ -1,62 +0,0 @@
-/**
- * v2.15.0 follow-up — G13: impact scan CLI.
- *
- *   - `peaks impact scan`        — full impact report (changed files +
- *                                  affected flows + must-check list)
- *   - `peaks impact must-check`  — return just the must-check list
- *                                  (for piping into smoke / release)
- *
- * Lightweight glob-based implementation (no AST, no type checking).
- * Suitable for the "we don't have UT, give me a quick risk list"
- * use case from the 12 Gaps memory.
- */
-import { findProjectRoot } from '../../services/config/config-safety.js';
-import { mustCheckFromReport, runImpactScan } from '../../services/impact/impact-scan-service.js';
-import { fail, ok } from '../../shared/result.js';
-import { addJsonOption, printResult } from '../cli-helpers.js';
-export function registerImpactCommands(program, io) {
-    const impact = program
-        .command('impact')
-        .description('v2.15.0 follow-up G13: lightweight impact scan (no AST, glob-based) for存量老项目无 UT 兜底.');
-    addJsonOption(impact
-        .command('scan')
-        .description('Scan the given changed files for impact: impacted files (siblings of changed), ' +
-        'affected business flows (configurable), and the must-check list (concrete ' +
-        'scenarios the user must verify before shipping). Pure local computation, no I/O.')
-        .requiredOption('--files <list>', 'comma-separated list of changed file paths (relative to project root)')
-        .option('--project <path>', 'project root (default: cwd)')).action((opts) => {
-        const projectRoot = opts.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        const files = opts.files.split(',').map((s) => s.trim()).filter((s) => s.length > 0);
-        if (files.length === 0) {
-            printResult(io, fail('impact.scan', 'INVALID_INPUT', 'no files provided (--files)', { projectRoot }, [
-                'Pass --files with at least one file path.'
-            ]), opts.json ?? false);
-            return;
-        }
-        const report = runImpactScan({ changedFiles: files });
-        printResult(io, ok('impact.scan', { projectRoot, report }, [], [...report.warnings]), opts.json ?? false);
-    });
-    addJsonOption(impact
-        .command('must-check')
-        .description('Return just the must-check list for a set of changed files. ' +
-        'Useful for piping into smoke / release verification flows. ' +
-        'Accepts the same --files flag as `peaks impact scan`.')
-        .requiredOption('--files <list>', 'comma-separated list of changed file paths')
-        .option('--project <path>', 'project root (default: cwd)')).action((opts) => {
-        const projectRoot = opts.project ?? findProjectRoot(process.cwd()) ?? process.cwd();
-        const files = opts.files.split(',').map((s) => s.trim()).filter((s) => s.length > 0);
-        if (files.length === 0) {
-            printResult(io, fail('impact.must-check', 'INVALID_INPUT', 'no files provided (--files)', { projectRoot }, [
-                'Pass --files with at least one file path.'
-            ]), opts.json ?? false);
-            return;
-        }
-        const report = runImpactScan({ changedFiles: files });
-        const items = mustCheckFromReport(report);
-        printResult(io, ok('impact.must-check', { projectRoot, count: items.length, items }, [], [
-            items.length === 0
-                ? 'No must-check items generated for the given changes.'
-                : 'Pipe into `peaks smoke add-path` to register these as regression paths.'
-        ]), opts.json ?? false);
-    });
-}

package/dist/src/cli/commands/job-commands.d.ts

@@ -1,3 +0,0 @@
-import { Command } from 'commander';
-import { type ProgramIO } from '../cli-helpers.js';
-export declare function registerJobCommands(program: Command, io?: ProgramIO): void;