peaks-loop 4.0.0-beta.7 → 4.0.0-beta.8

package/dist/src/services/audit/decision-writer.js

@@ -1,217 +0,0 @@
-/**
- * Audit decision writer — Slice K1.
- *
- * Persists a `RedLineAudit` snapshot to `.peaks/memory/audit-decisions/<slug>.md`
- * so the audit is searchable / indexable by the existing project-memory
- * machinery (`peaks memory search`, `peaks project memories`).
- *
- * Locked decisions (K1 design, user-approved):
- *
- * 1. **No `context` field** in the persisted record. `RedLineSource.context`
- *    is the ±2 lines of raw markdown used only by `backing-detector.ts`
- *    (`detectPartial(entry.source.context)`) to classify the entry as
- *    partial / cli-backed / prose-only. It is an *intermediate artifact* —
- *    once the audit runs, the classification result is captured by
- *    `RedLineEntry.backing` and the raw context has no consumer. We
- *    intentionally do not write `context` to the decision record (no
- *    caller reads it; persisting it would just bloat the file).
- *
- * 2. **Path is `.peaks/memory/audit-decisions/`, NOT `_runtime/`** — the
- *    decision is git-tracked source-of-truth (project memory), not session
- *    ephemeral state. The subdir is named for human discoverability; the
- *    memory service's recursive scan picks it up automatically.
- *
- * 3. **No new CLI subcommand.** Per `peaks-loop-when-adding-a-new-subcommand-…`
- *    we extend the existing `peaks audit static` with a `--record` flag
- *    instead of adding `peaks audit record` (which would be a new
- *    top-level shape and conflict with the dev-preference red line
- *    "Default-no on new CLI commands").
- *
- * 4. **Memory index auto-regen.** Writing the file does not directly
- *    manipulate `.peaks/memory/index.json`. The `peaks project memories`
- *    reader uses mtime-based regeneration; the new file's mtime being
- *    newer than `index.json` triggers regeneration on next read.
- *    `readMemoryIndex()` is called eagerly here so the caller sees a
- *    `hot.decision[]` update synchronously with the write.
- */
-import { mkdirSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { readMemoryIndex } from '../memory/project-memory-service.js';
-const SLUG_PREFIX = 'audit-decision';
-const SUBDIR = 'audit-decisions';
-function defaultDate() {
-    return new Date().toISOString().slice(0, 10);
-}
-/** Defense-in-depth (R6 audit): validate YYYY-MM-DD format before the date
- *  is embedded in a filename, title, or description. Throws on bad input
- *  so callers fail loudly rather than silently writing unsafe files. */
-function sanitizeDate(date) {
-    if (date === undefined)
-        return defaultDate();
-    if (!/^\d{4}-\d{2}-\d{2}$/.test(date)) {
-        throw new Error(`Invalid date "${date}": must be YYYY-MM-DD format`);
-    }
-    return date;
-}
-/** Strip everything outside `[A-Za-z0-9-]` and cap length so the slug
- *  stays filename-safe regardless of the user's `--rid` input. */
-function sanitizeRid(rid) {
-    if (!rid)
-        return '';
-    const cleaned = rid.replace(/[^A-Za-z0-9-]/g, '');
-    return cleaned.length > 0 ? cleaned.slice(0, 64) : '';
-}
-function buildSlug(date, rid) {
-    const safe = sanitizeRid(rid);
-    return safe ? `${SLUG_PREFIX}-${date}-${safe}` : `${SLUG_PREFIX}-${date}`;
-}
-function buildTitle(date, rid) {
-    return rid ? `Audit Decision ${date} (${rid})` : `Audit Decision ${date}`;
-}
-function buildDescription(date, audit, rid) {
-    const prefix = rid ? `Audit Decision ${date} (${rid})` : `Audit Decision ${date}`;
-    const failures = audit.enforcerFindings.filter((f) => f.severity === 'fail').length;
-    return `${prefix} — Red-line audit: ${audit.totalRedLines} total / ${audit.cliBacked} cli-backed / ${audit.partial} partial / ${audit.proseOnly} prose-only; ${failures} enforcer failures.`;
-}
-function severityCounts(findings) {
-    let fail = 0;
-    let warn = 0;
-    let pass = 0;
-    for (const finding of findings) {
-        if (finding.severity === 'fail')
-            fail += 1;
-        else if (finding.severity === 'warn')
-            warn += 1;
-        else
-            pass += 1;
-    }
-    return { fail, warn, pass };
-}
-/**
- * Pure: render the decision markdown body. No I/O. Used by both the
- * writer and the test suite for byte-exact assertions.
- */
-export function renderDecisionMarkdown(audit, options) {
-    const { rid } = options;
-    const date = sanitizeDate(options.date);
-    const slug = buildSlug(date, rid);
-    const title = buildTitle(date, rid);
-    const description = buildDescription(date, audit, rid);
-    const sev = severityCounts(audit.enforcerFindings);
-    const frontmatter = [
-        '---',
-        `name: ${slug}`,
-        `description: ${description}`,
-        'metadata:',
-        '  type: decision',
-        '  auditType: red-lines',
-        `  totalRedLines: ${audit.totalRedLines}`,
-        `  cliBacked: ${audit.cliBacked}`,
-        `  partial: ${audit.partial}`,
-        `  proseOnly: ${audit.proseOnly}`,
-        `  enforcerFailures: ${sev.fail}`,
-        `  enforcerWarnings: ${sev.warn}`,
-        `  enforcerPasses: ${sev.pass}`,
-        `  sourceArtifact: peaks audit static --record`,
-        `  createdAt: ${date}`,
-        '---'
-    ].join('\n');
-    const summaryTable = [
-        '| Metric | Count |',
-        '| --- | --- |',
-        `| Total red lines | ${audit.totalRedLines} |`,
-        `| CLI-backed | ${audit.cliBacked} |`,
-        `| Partial | ${audit.partial} |`,
-        `| Prose-only | ${audit.proseOnly} |`,
-        `| Enforcer findings (pass / warn / fail) | ${sev.pass} / ${sev.warn} / ${sev.fail} |`
-    ].join('\n');
-    const ruleSection = renderPerRuleSection(audit);
-    const enforcerSection = renderEnforcerSection(audit.enforcerFindings);
-    const body = [
-        `# ${title}`,
-        '',
-        `Audit run: \`peaks audit static --record\` on **${date}**${rid ? ` (rid: \`${rid}\`)` : ''}.`,
-        '',
-        '## Summary',
-        '',
-        summaryTable,
-        '',
-        '## Per-Rule Decisions',
-        '',
-        ruleSection,
-        '## Enforcer Findings',
-        '',
-        enforcerSection
-    ].join('\n');
-    return `${frontmatter}\n\n${body}\n`;
-}
-function renderPerRuleSection(audit) {
-    if (audit.audit.length === 0) {
-        return '_No red lines discovered._\n';
-    }
-    const header = '| ID | Rule | Backing | File | Line | Marker | Enforcer |';
-    const sep = '| --- | --- | --- | --- | ---: | --- | --- |';
-    const rows = audit.audit.map((entry) => {
-        const enforcer = entry.enforcerRef ?? '_(none)_';
-        return `| \`${entry.id}\` | ${entry.rule} | ${entry.backing} | \`${entry.source.file}\` | ${entry.source.line} | ${entry.source.marker} | \`${enforcer}\` |`;
-    });
-    return [header, sep, ...rows].join('\n') + '\n';
-}
-function renderEnforcerSection(findings) {
-    if (findings.length === 0) {
-        return '_No enforcer findings._\n';
-    }
-    const header = '| Enforcer | Rule | Severity | File | Detail |';
-    const sep = '| --- | --- | --- | --- | --- |';
-    const rows = findings.map((finding) => {
-        const detail = finding.detail.replace(/\|/g, '\\|').replace(/\n/g, ' ');
-        return `| \`${finding.enforcerId}\` | ${finding.rule} | **${finding.severity}** | \`${finding.file}\` | ${detail} |`;
-    });
-    return [header, sep, ...rows].join('\n') + '\n';
-}
-/**
- * Persist the audit as a project-memory decision. Idempotent only at the
- * file level — repeated calls with the same `(date, rid)` pair will overwrite
- * the previous decision markdown (the slug collides, the older file is
- * replaced). This matches the "one audit run = one decision record" model.
- */
-export function writeAuditDecision(audit, options) {
-    const date = sanitizeDate(options.date);
-    const slug = buildSlug(date, options.rid);
-    const memoryDir = join(options.projectRoot, '.peaks', 'memory');
-    const decisionDir = join(memoryDir, SUBDIR);
-    const filePath = join(decisionDir, `${slug}.md`);
-    const markdown = renderDecisionMarkdown(audit, options.rid ? { date, rid: options.rid } : { date });
-    mkdirSync(decisionDir, { recursive: true });
-    writeFileSync(filePath, markdown, { mode: 0o644 });
-    // Eagerly trigger index regeneration. The reader's mtime check will see
-    // filePath.mtime > index.json.mtime and call generateMemoryIndexFile();
-    // the new decision then lands in `hot.decision[]` and is searchable via
-    // `peaks memory search` / `peaks project memories`.
-    const index = readMemoryIndex(options.projectRoot);
-    const indexPath = join(memoryDir, 'index.json');
-    const sev = severityCounts(audit.enforcerFindings);
-    return {
-        name: slug,
-        title: buildTitle(date, options.rid),
-        date,
-        filePath,
-        memoryDir,
-        indexPath,
-        totalRedLines: audit.totalRedLines,
-        cliBacked: audit.cliBacked,
-        partial: audit.partial,
-        proseOnly: audit.proseOnly,
-        enforcerFailures: sev.fail,
-        enforcerWarnings: sev.warn,
-        enforcerPasses: sev.pass,
-        indexSynced: index !== null
-    };
-}
-// ---------------------------------------------------------------------------
-// Back-compat re-export — Slice 2026-06-26-audit-artifact-writer-generalization.
-//
-// `writeAuditDecision` is preserved above (no caller signature change).
-// New callers should use `writeDecision` from `artifact-writer.ts` directly.
-// ---------------------------------------------------------------------------
-export { writeDecision } from './artifact-writer.js';

package/dist/src/services/audit/enforcers/active-skill-resolver.d.ts

@@ -1,29 +0,0 @@
-/**
- * active-skill-resolver — utility for hook enforcers.
- *
- * Resolves the active peak skill name for the current session, so hook
- * enforcers (e.g. code-ban) can decide whether to fire.
- *
- * Per `src/services/session/caller-id-types.ts`: the active-skill file is
- * at `.peaks/_runtime/<peakSessionId>/active-skill-<callerId>.json`.
- *
- * Resolution order (graceful degradation — never throws):
- *   1. PEAKS_ACTIVE_SKILL env var (explicit override, used by tests)
- *   2. .peaks/_runtime/<sid>/active-skill-<callerId>.json for each caller
- *      bound to the current peak session
- *   3. null (caller did not set a skill; enforcers can decide to skip)
- */
-export interface ActiveSkillResolution {
-    readonly skill: string | null;
-    readonly callerId: string | null;
-    readonly sessionId: string | null;
-    readonly source: 'env' | 'file' | 'none';
-}
-/**
- * Resolve the active peak skill for the current hook invocation.
- *
- * Reads PEAKS_ACTIVE_SKILL first (test override), then walks
- * `.peaks/_runtime/<sid>/` for any `active-skill-*.json` file. Returns
- * the first match.
- */
-export declare function resolveActiveSkillForCaller(projectRoot: string): ActiveSkillResolution;

package/dist/src/services/audit/enforcers/active-skill-resolver.js

@@ -1,71 +0,0 @@
-/**
- * active-skill-resolver — utility for hook enforcers.
- *
- * Resolves the active peak skill name for the current session, so hook
- * enforcers (e.g. code-ban) can decide whether to fire.
- *
- * Per `src/services/session/caller-id-types.ts`: the active-skill file is
- * at `.peaks/_runtime/<peakSessionId>/active-skill-<callerId>.json`.
- *
- * Resolution order (graceful degradation — never throws):
- *   1. PEAKS_ACTIVE_SKILL env var (explicit override, used by tests)
- *   2. .peaks/_runtime/<sid>/active-skill-<callerId>.json for each caller
- *      bound to the current peak session
- *   3. null (caller did not set a skill; enforcers can decide to skip)
- */
-import { existsSync, readdirSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { getSessionIdCanonical } from '../../session/session-manager.js';
-import { getSessionDir } from '../../session/getSessionDir.js';
-const ACTIVE_SKILL_PREFIX = 'active-skill-';
-/**
- * Resolve the active peak skill for the current hook invocation.
- *
- * Reads PEAKS_ACTIVE_SKILL first (test override), then walks
- * `.peaks/_runtime/<sid>/` for any `active-skill-*.json` file. Returns
- * the first match.
- */
-export function resolveActiveSkillForCaller(projectRoot) {
-    const envOverride = process.env.PEAKS_ACTIVE_SKILL;
-    if (typeof envOverride === 'string' && envOverride.length > 0) {
-        return { skill: envOverride, callerId: null, sessionId: null, source: 'env' };
-    }
-    let sessionId = null;
-    try {
-        sessionId = getSessionIdCanonical(projectRoot);
-    }
-    catch {
-        return { skill: null, callerId: null, sessionId: null, source: 'none' };
-    }
-    if (sessionId === null) {
-        return { skill: null, callerId: null, sessionId: null, source: 'none' };
-    }
-    const sessionDir = getSessionDir(projectRoot, sessionId);
-    if (!existsSync(sessionDir)) {
-        return { skill: null, callerId: null, sessionId: sessionId, source: 'none' };
-    }
-    let entries;
-    try {
-        entries = readdirSync(sessionDir);
-    }
-    catch {
-        return { skill: null, callerId: null, sessionId: sessionId, source: 'none' };
-    }
-    for (const entry of entries) {
-        if (!entry.startsWith(ACTIVE_SKILL_PREFIX) || !entry.endsWith('.json'))
-            continue;
-        const callerId = entry.slice(ACTIVE_SKILL_PREFIX.length, -'.json'.length);
-        const filePath = join(sessionDir, entry);
-        try {
-            const raw = readFileSync(filePath, 'utf8');
-            const parsed = JSON.parse(raw);
-            if (typeof parsed.skill === 'string' && parsed.skill.length > 0) {
-                return { skill: parsed.skill, callerId, sessionId, source: 'file' };
-            }
-        }
-        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-            // skip malformed file
-        }
-    }
-    return { skill: null, callerId: null, sessionId, source: 'none' };
-}

package/dist/src/services/audit/enforcers/code-ban.d.ts

@@ -1,23 +0,0 @@
-/**
- * Code-commit-ban enforcer — PreToolUse Bash guard.
- *
- * Per L2 redesign §5.4. Deny `git commit` or `git apply` invocations from
- * a peaks-* skill. The Code Commit Ban Red Line says peaks-code / peaks-rd
- * are orchestrators, not implementers; the actual `git commit` step must
- * go through `peaks request transition`, which itself enforces spec-locked
- * + tech-doc-presence.
- *
- * Trust red line (per `gate-enforcement-hook.md`): if the registry or
- * manifest read fails, the hook must fail-OPEN (warn + allow). The LLM is
- * never bricked by a peaks bug.
- */
-export interface CodeBanInput {
-    readonly skill: string;
-    readonly command: string;
-}
-export interface CodeBanResult {
-    readonly denied: boolean;
-    readonly reason: string;
-}
-export declare function isCodeCommit(skill: string, command: string): boolean;
-export declare function evaluateCodeBan(input: CodeBanInput): CodeBanResult;

package/dist/src/services/audit/enforcers/code-ban.js

@@ -1,27 +0,0 @@
-/**
- * Code-commit-ban enforcer — PreToolUse Bash guard.
- *
- * Per L2 redesign §5.4. Deny `git commit` or `git apply` invocations from
- * a peaks-* skill. The Code Commit Ban Red Line says peaks-code / peaks-rd
- * are orchestrators, not implementers; the actual `git commit` step must
- * go through `peaks request transition`, which itself enforces spec-locked
- * + tech-doc-presence.
- *
- * Trust red line (per `gate-enforcement-hook.md`): if the registry or
- * manifest read fails, the hook must fail-OPEN (warn + allow). The LLM is
- * never bricked by a peaks bug.
- */
-const COMMIT_APPLY_PATTERN = /^\s*git\s+(commit|apply)\b/;
-const DENY_REASON = 'Code Commit Ban Red Line: peaks-* skills must go through peaks-code / peaks-rd. ' +
-    'Use `peaks request transition` instead of `git commit` / `git apply` directly.';
-export function isCodeCommit(skill, command) {
-    if (!skill.startsWith('peaks-'))
-        return false;
-    return COMMIT_APPLY_PATTERN.test(command);
-}
-export function evaluateCodeBan(input) {
-    if (isCodeCommit(input.skill, input.command)) {
-        return { denied: true, reason: DENY_REASON };
-    }
-    return { denied: false, reason: '' };
-}

package/dist/src/services/audit/enforcers/design-draft-confirm.d.ts

@@ -1,24 +0,0 @@
-/**
- * design-draft-confirm enforcer (L2.2 P1) — verifies a design draft exists
- * and has been confirmed before the rd implementation phase begins.
- *
- * Two red lines:
- *   - rl-design-draft-confirm-001: design-draft.md must exist before spec-locked
- *   - rl-design-draft-confirm-002: design-draft must have a 'confirmed' marker
- *
- * The state-machine check is wired into peaks request transition (the
- * spec-locked transition requires both files to exist + design to be
- * confirmed). The catalog flags the entry as cli-backed when the
- * enforcer file exists.
- */
-export interface DesignDraftConfirmInput {
-    readonly projectRoot: string;
-    readonly sessionId: string;
-}
-export interface DesignDraftConfirmResult {
-    readonly draftExists: boolean;
-    readonly draftPath: string;
-    readonly confirmed: boolean;
-    readonly confirmationPath: string;
-}
-export declare function checkDesignDraftConfirmation(input: DesignDraftConfirmInput): DesignDraftConfirmResult;

package/dist/src/services/audit/enforcers/design-draft-confirm.js

@@ -1,58 +0,0 @@
-/**
- * design-draft-confirm enforcer (L2.2 P1) — verifies a design draft exists
- * and has been confirmed before the rd implementation phase begins.
- *
- * Two red lines:
- *   - rl-design-draft-confirm-001: design-draft.md must exist before spec-locked
- *   - rl-design-draft-confirm-002: design-draft must have a 'confirmed' marker
- *
- * The state-machine check is wired into peaks request transition (the
- * spec-locked transition requires both files to exist + design to be
- * confirmed). The catalog flags the entry as cli-backed when the
- * enforcer file exists.
- */
-import { existsSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-const CONFIRMATION_MARKERS = [
-    /\bconfirmed\b\s*[:=]\s*true/i,
-    /\bstatus:\s*confirmed-by-user/i,
-    /^#\s*confirmed\b/im,
-];
-export function checkDesignDraftConfirmation(input) {
-    // Back-compat read: 2.8.0-era `peaks workspace init` wrote design drafts
-    // at `.peaks/_runtime/<sessionId>/ui/design-draft.md`. The 2.8.3+ canonical path
-    // is `.peaks/_runtime/change/<sessionId>/ui/design-draft.md`, but the
-    // audit gate must continue to read the legacy sibling dir if it exists.
-    // Design drafts live at .peaks/_runtime/<sessionId>/ui/design-draft.md (UI role) or
-    // .peaks/_runtime/<sessionId>/prd/requests/<rid>.md (PRD). For L2.2 the canonical
-    // location is the UI design-draft.
-    const draftPath = join(input.projectRoot, '.peaks', input.sessionId, 'ui/design-draft.md');
-    const draftExists = existsSync(draftPath);
-    if (!draftExists) {
-        return {
-            draftExists: false,
-            draftPath,
-            confirmed: false,
-            confirmationPath: '',
-        };
-    }
-    let content;
-    try {
-        content = readFileSync(draftPath, 'utf8');
-    }
-    catch {
-        return {
-            draftExists: true,
-            draftPath,
-            confirmed: false,
-            confirmationPath: draftPath,
-        };
-    }
-    const confirmed = CONFIRMATION_MARKERS.some((p) => p.test(content));
-    return {
-        draftExists: true,
-        draftPath,
-        confirmed,
-        confirmationPath: draftPath,
-    };
-}

package/dist/src/services/audit/enforcers/lint-audit-regression.d.ts

@@ -1,21 +0,0 @@
-import type { LintHit } from './lint-style.js';
-export declare const CATALOG_STABILITY_GROWTH_CAP = 0.2;
-export declare const CATALOG_STABILITY_WINDOW_DAYS = 90;
-export declare const RUNTIME_BUDGET_MS = 2000;
-export interface CatalogStabilityInput {
-    /** Current catalog size (entries.length). */
-    readonly currentSize: number;
-    /** Catalog size 90 days ago, or null if no history available. */
-    readonly sizeNinetyDaysAgo: number | null;
-}
-export declare function lintCatalogStability(input: CatalogStabilityInput): readonly LintHit[];
-export declare function lintNoOrphanEnforcer(projectRoot: string): readonly LintHit[];
-export declare function lintNoOrphanCatalog(): readonly LintHit[];
-export declare function lintRuntimeBudget(projectRoot: string, observedMs: number): readonly LintHit[];
-/**
- * Read the catalog-stability history file (if it exists). The
- * file is a small JSON document maintained by the release
- * pipeline; absent → null. We do not invent the historical
- * data; absent data means "soft pass".
- */
-export declare function readCatalogHistory(projectRoot: string): number | null;

package/dist/src/services/audit/enforcers/lint-audit-regression.js

@@ -1,86 +0,0 @@
-/**
- * P2-b Theme L — Audit regression enforcers.
- *
- * Slice #7 L2.4. These four enforcers run during the audit
- * and check the audit framework's own integrity. They are
- * the "gating" layer that `peaks slice check`'s new
- * audit-regression stage asserts.
- *
- * Four checks:
- *   1. catalog-stability       — catalog size has not grown >20% in 90 days
- *   2. no-orphan-enforcer      — every enforcerRef points to a real file
- *   3. no-orphan-catalog       — every catalog entry has a non-null enforcerRef
- *   4. runtime-budget          — audit completes in < 2s on a 100-reference project
- */
-import { existsSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { RED_LINE_CATALOG } from '../red-line-catalog.js';
-export const CATALOG_STABILITY_GROWTH_CAP = 0.20;
-export const CATALOG_STABILITY_WINDOW_DAYS = 90;
-export const RUNTIME_BUDGET_MS = 2000;
-const fakeCatalogPath = 'src/services/audit/red-line-catalog.ts';
-function syntheticHit(catalogId, rule, detail) {
-    return {
-        catalogId,
-        rule,
-        file: fakeCatalogPath,
-        line: 1,
-        matchedText: detail,
-    };
-}
-export function lintCatalogStability(input) {
-    if (input.sizeNinetyDaysAgo === null || input.sizeNinetyDaysAgo === 0) {
-        // No historical data — can't check stability. Treat as a
-        // soft pass (the catalog-stability enforcer is
-        // non-blocking when the data is missing).
-        return [];
-    }
-    const growth = (input.currentSize - input.sizeNinetyDaysAgo) / input.sizeNinetyDaysAgo;
-    if (growth <= CATALOG_STABILITY_GROWTH_CAP)
-        return [];
-    return [syntheticHit('rl-audit-catalog-stability-001', 'catalog size has not grown > 20% in the last 90 days', `(growth ${(growth * 100).toFixed(1)}% over 90 days; currentSize=${input.currentSize}, priorSize=${input.sizeNinetyDaysAgo})`)];
-}
-export function lintNoOrphanEnforcer(projectRoot) {
-    const hits = [];
-    for (const entry of RED_LINE_CATALOG) {
-        if (!entry.enforcerRef)
-            continue;
-        const absPath = join(projectRoot, entry.enforcerRef);
-        if (!existsSync(absPath)) {
-            hits.push(syntheticHit('rl-audit-no-orphan-enforcer-001', 'every enforcerRef points to a real file', `(enforcerRef "${entry.enforcerRef}" for ${entry.id} does not exist on disk)`));
-        }
-    }
-    return hits;
-}
-export function lintNoOrphanCatalog() {
-    const hits = [];
-    for (const entry of RED_LINE_CATALOG) {
-        if (entry.enforcerRef === null) {
-            hits.push(syntheticHit('rl-audit-no-orphan-catalog-001', 'every catalog entry has a non-null enforcerRef (or a documented reason)', `(catalog entry ${entry.id} has enforcerRef: null)`));
-        }
-    }
-    return hits;
-}
-export function lintRuntimeBudget(projectRoot, observedMs) {
-    if (observedMs <= RUNTIME_BUDGET_MS)
-        return [];
-    return [syntheticHit('rl-audit-runtime-budget-001', `peaks audit red-lines completes in < ${RUNTIME_BUDGET_MS}ms on a 100-reference project`, `(observed ${observedMs}ms > budget ${RUNTIME_BUDGET_MS}ms)`)];
-}
-/**
- * Read the catalog-stability history file (if it exists). The
- * file is a small JSON document maintained by the release
- * pipeline; absent → null. We do not invent the historical
- * data; absent data means "soft pass".
- */
-export function readCatalogHistory(projectRoot) {
-    const path = join(projectRoot, '.peaks', 'audit-catalog-history.json');
-    if (!existsSync(path))
-        return null;
-    try {
-        const raw = JSON.parse(readFileSync(path, 'utf8'));
-        return typeof raw.sizeNinetyDaysAgo === 'number' ? raw.sizeNinetyDaysAgo : null;
-    }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-        return null;
-    }
-}

package/dist/src/services/audit/enforcers/lint-catalog-governance.d.ts

@@ -1,32 +0,0 @@
-/**
- * P2-a Theme G — catalog governance.
- *
- * Two enforcers: catalog size must grow to ≥ 40 (the P2-a target),
- * and the prose-only ratio must stay ≤ 7% (per spec §10.2 L2
- * acceptance; tightened from the pre-v2.12.1 5% target to reflect
- * the catalog governance reform — see `.peaks/memory/2026-06-27-
- * prose-only-catalog-followup.md` for the full rationale and the
- * per-entry backlog triage). Both fire on the catalog's static
- * state — no file scan, just the catalog itself.
- */
-import type { LintHit } from './lint-style.js';
-export declare const CATALOG_SIZE_TARGET = 40;
-export declare const PROSE_ONLY_RATIO_TARGET = 0.07;
-export interface CatalogSize {
-    readonly size: number;
-    readonly target: number;
-}
-export interface CatalogProseOnlyRatio {
-    readonly ratio: number;
-    readonly target: number;
-}
-export declare function lintCatalogSize(actualSize: number): readonly LintHit[];
-/**
- * Prose-only ratio: count catalog entries whose `enforcerRef` is
- * null (i.e. not backed by a CLI surface) divided by the total
- * catalog size. Per spec §10.2, the L2 acceptance is ≤ 10% at
- * P2-a; v2.12.1 catalog governance tightened the gate to ≤ 7%
- * after the discovered-prose-only reform (see
- * `.peaks/memory/2026-06-27-prose-only-catalog-followup.md`).
- */
-export declare function lintCatalogProseOnlyRatio(catalogSize: number, proseOnlyCount: number): readonly LintHit[];

package/dist/src/services/audit/enforcers/lint-catalog-governance.js

@@ -1,48 +0,0 @@
-export const CATALOG_SIZE_TARGET = 40;
-// v2.12.1 catalog governance: 5% was unreachable without demoting the
-// 80 discovered prose-only entries (which are advisory SKILL.md
-// phrases, not actionable red lines). After the v2.12.1 reform the
-// ratio dropped from 60.1% (89/148) to 6.1% (9/148); the remaining
-// 9 entries are the real backlog (5 unique catalog ids: prototype-
-// fidelity-001/002, mock-placement-001, resume-detection-001,
-// pre-rd-scan-001, design-draft-confirm-001). Bumping the target to
-// 7% acknowledges the reform while keeping the gate active.
-export const PROSE_ONLY_RATIO_TARGET = 0.07;
-function syntheticHit(catalogId, rule, matched) {
-    // No specific file to point at — return a synthetic hit against
-    // the catalog source file so the audit report can render a row.
-    const fake = {
-        name: 'catalog',
-        path: 'src/services/audit/red-line-catalog.ts',
-        body: '',
-        lines: [],
-    };
-    return {
-        catalogId,
-        rule,
-        file: fake.path,
-        line: 1,
-        matchedText: matched,
-    };
-}
-export function lintCatalogSize(actualSize) {
-    if (actualSize >= CATALOG_SIZE_TARGET)
-        return [];
-    return [syntheticHit('rl-catalog-total-001', 'Catalog governance: catalog size must grow to ≥ 40 (L2.3 P2-a target)', `(catalog size ${actualSize} < target ${CATALOG_SIZE_TARGET})`)];
-}
-/**
- * Prose-only ratio: count catalog entries whose `enforcerRef` is
- * null (i.e. not backed by a CLI surface) divided by the total
- * catalog size. Per spec §10.2, the L2 acceptance is ≤ 10% at
- * P2-a; v2.12.1 catalog governance tightened the gate to ≤ 7%
- * after the discovered-prose-only reform (see
- * `.peaks/memory/2026-06-27-prose-only-catalog-followup.md`).
- */
-export function lintCatalogProseOnlyRatio(catalogSize, proseOnlyCount) {
-    if (catalogSize === 0)
-        return [];
-    const ratio = proseOnlyCount / catalogSize;
-    if (ratio <= PROSE_ONLY_RATIO_TARGET)
-        return [];
-    return [syntheticHit('rl-catalog-prose-only-ratio-001', 'Catalog governance: prose-only ratio must stay ≤ 7% (v2.12.1 catalog governance; §10.2 L2 acceptance)', `(prose-only ratio ${(ratio * 100).toFixed(1)}% > target ${PROSE_ONLY_RATIO_TARGET * 100}%; ${proseOnlyCount}/${catalogSize})`)];
-}

package/dist/src/services/audit/enforcers/lint-cli-back.d.ts

@@ -1,16 +0,0 @@
-/**
- * P2-a Theme D — CLI-back gaps enforcers.
- *
- * A red line that says "BLOCKING" / "MANDATORY" / "MUST NOT" / "MUST"
- * / "REQUIRED" must point at a `peaks *` enforcer in the
- * surrounding ±2 lines, or it stays as `prose-only` (per §5.2).
- *
- * The enforcer walks each skill body, locates every
- * `MANDATORY` / `BLOCKING` / `MUST NOT` marker, and reports an
- * orphan-hit when the surrounding text does NOT name a peaks CLI
- * command.
- */
-import type { LintHit, SkillFile } from './lint-style.js';
-export declare function lintCliBackMandatorText(skill: SkillFile): readonly LintHit[];
-export declare function lintCliBackNoOrphanBlocking(skill: SkillFile): readonly LintHit[];
-export declare function lintCliBackNoOrphanMustNot(skill: SkillFile): readonly LintHit[];