peaks-loop 4.0.0-beta.8 → 4.0.0-beta.9

package/dist/services/code/post-compact-detector.js

@@ -0,0 +1,240 @@
+/**
+ * v2.11.0 Group F (Tier 9) — D7: post-compact auto-resume detector.
+ *
+ * Per `.peaks/memory/2026-06-26-v2-11-post-compact-resume.md` §D7.a,
+ * post-compact auto-resume triggers when ALL of the following hold:
+ *
+ *   1. `.peaks/_runtime/<sessionId>/` is bound
+ *   2. Latest checkpoint mtime is from today (UTC date)
+ *   3. Latest checkpoint has a parseable `mode` field
+ *   4. The peak-code skill is the active skill
+ *   5. Exactly one session has a today's checkpoint (no ambiguity)
+ *
+ * On a hit, the LLM MUST auto-resume (D7.b override of "never silently
+ * auto-resume") and emit a one-line log entry. On any miss, fall
+ * through to the normal Step 0.7 flow.
+ *
+ * Karpathy §3: the detector is the only place that decides "is this
+ * a post-compact resume?" — no inline `isPostCompact()` checks
+ * scattered across SKILL.md or other services.
+ *
+ * IO: readdir + readFile on `.peaks/_runtime/<sid>/checkpoints/`.
+ * No writes (caller logs the decision via the auto-decisions channel).
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { getSkillPresence } from '../skills/skill-presence-service.js';
+import { emitObservabilityEvent } from '../observability/observability-service.js';
+import { isCodeMode } from './mode-gate.js';
+export const POST_COMPACT_RESUME_REASONS = [
+    'post-compact-match',
+    'sid-unbound',
+    'runtime-dir-missing',
+    'no-checkpoint-today',
+    'no-mode-field',
+    'stale-checkpoint',
+    'multiple-checkpoints-ambiguous',
+    'active-skill-mismatch',
+    'checkpoint-read-failed'
+];
+const CHECKPOINTS_DIR = 'checkpoints';
+const CHECKPOINT_EXT = '.json';
+function isToday(d, now) {
+    return (d.getUTCFullYear() === now.getUTCFullYear() &&
+        d.getUTCMonth() === now.getUTCMonth() &&
+        d.getUTCDate() === now.getUTCDate());
+}
+function safeReadCheckpoint(absPath) {
+    try {
+        const stat = statSync(absPath);
+        const raw = readFileSync(absPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        const mutable = {};
+        if (typeof parsed['currentPlan'] === 'string') {
+            mutable.currentPlan = parsed['currentPlan'];
+        }
+        if (Array.isArray(parsed['openQuestions'])) {
+            mutable.openQuestions = parsed['openQuestions'].filter((q) => typeof q === 'string');
+        }
+        if (Array.isArray(parsed['recentDecisions'])) {
+            mutable.recentDecisions = parsed['recentDecisions'].filter((d) => typeof d === 'string');
+        }
+        if (typeof parsed['mode'] === 'string') {
+            mutable.mode = parsed['mode'];
+        }
+        const content = mutable;
+        return { path: absPath, mtime: stat.mtime, content };
+    }
+    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+        return null;
+    }
+}
+function readLatestTodayCheckpoint(runtimeDir, now) {
+    const dir = join(runtimeDir, CHECKPOINTS_DIR);
+    if (!existsSync(dir)) {
+        return { found: 'none' };
+    }
+    const todayFiles = [];
+    for (const entry of readdirSync(dir)) {
+        if (!entry.endsWith(CHECKPOINT_EXT))
+            continue;
+        const abs = join(dir, entry);
+        const file = safeReadCheckpoint(abs);
+        if (file === null)
+            continue;
+        if (isToday(file.mtime, now)) {
+            todayFiles.push(file);
+        }
+    }
+    if (todayFiles.length === 0) {
+        return { found: 'none' };
+    }
+    if (todayFiles.length > 1) {
+        todayFiles.sort((a, b) => b.mtime.getTime() - a.mtime.getTime());
+        const newest = todayFiles[0];
+        if (newest === undefined) {
+            return { found: 'none' };
+        }
+        const tieCount = todayFiles.filter((f) => f.mtime.getTime() === newest.mtime.getTime()).length;
+        if (tieCount > 1) {
+            return { found: 'multiple', files: todayFiles };
+        }
+        return { found: 'today', file: newest };
+    }
+    const only = todayFiles[0];
+    if (only === undefined) {
+        return { found: 'none' };
+    }
+    return { found: 'today', file: only };
+}
+/**
+ * Detect whether the current invocation is a same-day post-compact
+ * resume. The LLM-side caller invokes this in Step 0.7 / Step 0.75
+ * after anchoring. Pure-ish: only filesystem reads of the checkpoint
+ * dir; no LLM calls.
+ */
+export async function detectPostCompactResume(opts) {
+    const now = opts.now ?? (() => new Date());
+    const warnings = [];
+    if (!opts.sessionId || opts.sessionId.trim().length === 0) {
+        return { shouldAutoResume: false, reason: 'sid-unbound', warnings };
+    }
+    const runtimeDir = join(opts.projectRoot, '.peaks', '_runtime', opts.sessionId);
+    if (!existsSync(runtimeDir)) {
+        return { shouldAutoResume: false, reason: 'runtime-dir-missing', warnings };
+    }
+    const probe = readLatestTodayCheckpoint(runtimeDir, now());
+    if (probe.found === 'multiple') {
+        return {
+            shouldAutoResume: false,
+            reason: 'multiple-checkpoints-ambiguous',
+            warnings: [`${probe.files.length} sessions have today's checkpoint; ambiguous`]
+        };
+    }
+    if (probe.found === 'none') {
+        return { shouldAutoResume: false, reason: 'no-checkpoint-today', warnings };
+    }
+    const file = probe.file;
+    const checkpointMode = file.content.mode;
+    if (checkpointMode === undefined) {
+        return {
+            shouldAutoResume: false,
+            reason: 'no-mode-field',
+            checkpointPath: file.path,
+            checkpointMtime: file.mtime.toISOString(),
+            warnings
+        };
+    }
+    // Active skill check (D7.a.4). Defaults to reading from skill presence.
+    const expectedActiveSkill = 'peaks-code';
+    const observedActiveSkill = opts.activeSkill ?? readActiveSkillName(opts.projectRoot);
+    if (observedActiveSkill !== expectedActiveSkill) {
+        return {
+            shouldAutoResume: false,
+            reason: 'active-skill-mismatch',
+            checkpointPath: file.path,
+            checkpointMtime: file.mtime.toISOString(),
+            warnings: [`active skill "${observedActiveSkill ?? 'unset'}" is not peaks-code`]
+        };
+    }
+    // Mode: prefer the checkpoint's mode; fall back to the presence override
+    // (test seam) or to a fresh skill-presence read.
+    let mode;
+    if (isCodeMode(checkpointMode)) {
+        mode = checkpointMode;
+    }
+    else if (opts.presenceModeOverride !== undefined) {
+        mode = opts.presenceModeOverride;
+    }
+    else {
+        try {
+            const presence = getSkillPresence(opts.projectRoot);
+            const presenceMode = presence?.mode;
+            if (presenceMode !== undefined && isCodeMode(presenceMode)) {
+                mode = presenceMode;
+            }
+        }
+        catch (err) {
+            warnings.push(`presence read failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    if (mode === undefined) {
+        return {
+            shouldAutoResume: false,
+            reason: 'no-mode-field',
+            checkpointPath: file.path,
+            checkpointMtime: file.mtime.toISOString(),
+            warnings
+        };
+    }
+    const successProbe = {
+        shouldAutoResume: true,
+        reason: 'post-compact-match',
+        mode,
+        checkpointPath: file.path,
+        checkpointMtime: file.mtime.toISOString(),
+        ...(file.content.currentPlan !== undefined ? { task: file.content.currentPlan } : {}),
+        ...(file.content.openQuestions !== undefined ? { openQuestions: file.content.openQuestions } : {}),
+        ...(file.content.recentDecisions !== undefined ? { recentDecisions: file.content.recentDecisions } : {}),
+        warnings
+    };
+    emitPostCompactEvent({ projectRoot: opts.projectRoot, sessionId: opts.sessionId, probe: successProbe });
+    return successProbe;
+}
+// Slice C of v2.11.1 — observability hook #6/7. Fire-and-forget per
+// PRD Q4. The synchronous emit never throws and never blocks the
+// detector return value.
+function emitPostCompactEvent(opts) {
+    emitObservabilityEvent({
+        schemaVersion: 1,
+        ts: new Date().toISOString(),
+        sessionId: opts.sessionId,
+        category: 'post-compact',
+        detail: {
+            shouldAutoResume: opts.probe.shouldAutoResume,
+            reason: opts.probe.reason,
+            ...(opts.probe.mode !== undefined ? { mode: opts.probe.mode } : {}),
+            ...(opts.probe.checkpointPath !== undefined ? { checkpointPath: opts.probe.checkpointPath } : {})
+        }
+    }, { projectRoot: opts.projectRoot });
+}
+function readActiveSkillName(projectRoot) {
+    try {
+        const presence = getSkillPresence(projectRoot);
+        return presence?.skill;
+    }
+    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+        return undefined;
+    }
+}
+/**
+ * One-line auto-decisions log entry. Pure formatter; no IO. The LLM
+ * appends to `.peaks/_runtime/<sessionId>/txt/auto-decisions.md` so
+ * the existing audit channel picks it up (D7.e).
+ */
+export function formatPostCompactResumeLogLine(probe) {
+    if (!probe.shouldAutoResume) {
+        return `post-compact skip: reason=${probe.reason}`;
+    }
+    return `post-compact resume: ${probe.task ?? 'unspecified'} mode=${probe.mode ?? 'unknown'} checkpoint=${probe.checkpointPath ?? 'unknown'}`;
+}

package/dist/services/code/status-line-renderer.d.ts

@@ -0,0 +1,34 @@
+/**
+ * G6.5 — status line renderer for the peaks-code batch-sync wait period.
+ *
+ * Single line, 80-120 chars, status-line-friendly. The shape is
+ * documented in PRD §G6.5:
+ *
+ *   [peaks-code] swarm 3/3 running | rd-planning 45% (12s ago) | qa-test-cases 30% (5s ago) | ui-design 20% (2s ago)
+ *   [peaks-code] swarm 3/3 running | rd-planning 70% (8s ago) | qa-test-cases 50% (3s ago) | ui-design 30% (6s ago)
+ *   ...
+ *   [peaks-code] swarm 3/3 done in 47.3s
+ *
+ * Pure helper; the poller calls it once per tick. No IO.
+ */
+import type { DispatchRecord } from '../dispatch/dispatch-record-writer.js';
+export type SubAgentLiveView = {
+    readonly role: string;
+    readonly status: string;
+    readonly progress: number | null;
+    readonly lastBeatAgoSec: number | null;
+    readonly isStale: boolean;
+};
+export type SwarmSummary = {
+    readonly total: number;
+    readonly running: number;
+    readonly done: number;
+    readonly failed: number;
+    readonly stale: number;
+};
+/** Build a per-sub-agent view of the current state of one record. */
+export declare function viewSubAgent(record: DispatchRecord, now?: () => Date): SubAgentLiveView;
+/** Aggregate swarm summary. */
+export declare function summarize(records: readonly DispatchRecord[]): SwarmSummary;
+/** Render a single status line. */
+export declare function renderStatusLine(prefix: string, records: readonly DispatchRecord[], now?: () => Date): string;

package/dist/services/code/status-line-renderer.js

@@ -0,0 +1,55 @@
+const STALE_THRESHOLD_SEC = 5 * 60;
+/** Build a per-sub-agent view of the current state of one record. */
+export function viewSubAgent(record, now = () => new Date()) {
+    const latest = record.heartbeats[record.heartbeats.length - 1];
+    const lastBeatAgo = record.lastBeatAt
+        ? Math.max(0, Math.floor((now().getTime() - new Date(record.lastBeatAt).getTime()) / 1000))
+        : null;
+    const isStale = lastBeatAgo !== null && lastBeatAgo > STALE_THRESHOLD_SEC;
+    return {
+        role: record.role,
+        status: record.status,
+        progress: latest ? latest.progress : null,
+        lastBeatAgoSec: lastBeatAgo,
+        isStale
+    };
+}
+/** Aggregate swarm summary. */
+export function summarize(records) {
+    let running = 0;
+    let done = 0;
+    let failed = 0;
+    let stale = 0;
+    for (const r of records) {
+        const v = viewSubAgent(r);
+        if (v.isStale)
+            stale += 1;
+        if (r.status === 'done')
+            done += 1;
+        else if (r.status === 'failed' || r.status === 'cancelled')
+            failed += 1;
+        else
+            running += 1;
+    }
+    return { total: records.length, running, done, failed, stale };
+}
+/** Render a single status line. */
+export function renderStatusLine(prefix, records, now = () => new Date()) {
+    if (records.length === 0) {
+        return `${prefix} swarm 0/0 idle`;
+    }
+    const summary = summarize(records);
+    const allDone = summary.done === summary.total;
+    if (allDone) {
+        return `${prefix} swarm ${summary.done}/${summary.total} done`;
+    }
+    const parts = records.map((r) => renderOne(r, now));
+    return `${prefix} swarm ${summary.running}/${summary.total} running | ${parts.join(' | ')}`;
+}
+function renderOne(record, now) {
+    const view = viewSubAgent(record, now);
+    const pct = view.progress !== null ? `${view.progress}%` : '?%';
+    const ago = view.lastBeatAgoSec !== null ? `${view.lastBeatAgoSec}s ago` : 'no beat';
+    const stale = view.isStale ? ' ⚠ stale' : '';
+    return `${view.role} ${pct} (${ago})${stale}`;
+}

package/dist/services/code/step-08-gate.d.ts

@@ -0,0 +1,90 @@
+/**
+ * v3.1.2 Step 0.8 — Mechanical PreToolUse gate.
+ *
+ * Wire-installed by `peaks workspace init` (extends the existing hook
+ * installer; does NOT replace the Write|Edit|MultiEdit fact-forcing
+ * bypass). The hook runs `peaks code gate-step-08 --project .` before
+ * every Bash tool call. Exit code is the load-bearing contract:
+ *
+ *   exit 0 → allow (with structured stdout describing the decision)
+ *   exit 2 → block (stderr contains the BLOCKED: ... reason)
+ *
+ * Three decision paths:
+ *
+ *   1. `job-shape.json` exists with `decision.isJob === true`.
+ *      → allow, print `{ ok, allow, mode: 'job', decision }`. When a
+ *        matching `job/<jid>/progress.json` exists, also print
+ *        `Next: slice #<N+1> of <M> (<currentSlice>)` so the LLM sees
+ *        its resume context BEFORE any Bash call lands.
+ *   2. `job-shape.json` exists with `decision.isJob === false`.
+ *      → allow, print `{ ok, allow, mode: 'single' }`.
+ *   3. `job-shape.json` is MISSING — fail-closed guard. The LLM is the
+ *      source of truth, but if it never recorded a decision we run a
+ *      lightweight backup regex against the user's prompt:
+ *        /until|全部|until all done|disavow cost|不用考虑费用|all of them/i
+ *      match → block (exit 2) with the BLOCKED: stderr message.
+ *      no match → allow (exit 0) — most prompts are not Job-shaped.
+ *
+ * Karpathy §2 (Simplicity First): ~120 lines, no LLM call inside. The
+ * regex is the FIRST time peaks-loop accepts hardcoded keywords —
+ * explicitly scoped as a *fail-closed backup* (case 3), NOT a primary
+ * judgement. The LLM still owns the semantic call via
+ * `peaks code detect-job`. The regex is a safety net for the v3.1.1
+ * incident class (LLM under load never records the decision at all).
+ */
+export declare const STEP_08_GATE_FILE_NAME: "job-shape.json";
+export declare const STEP_08_PROGRESS_FILE_NAME: "progress.json";
+/**
+ * Fail-closed backup regex — see module docstring case 3 for why this
+ * exists. Kept short and explicit; if the prompt mentions any of these
+ * triggers and `job-shape.json` is missing, the LLM is treated as
+ * having skipped `peaks code detect-job` and the gate blocks.
+ *
+ * The list mirrors the v3.1.0 / v3.1.1 incident triggers verbatim:
+ *   继续执行下个 slice (until next slice) → until / 直到
+ *   全部添加完 / all of them            → 全部 / all of them
+ *   不用考虑费用                        → 不用考虑费用 / disavow cost
+ *   until all done                      → until all done
+ */
+export declare const STEP_08_BACKUP_REGEX: RegExp;
+export interface Step08Progress {
+    readonly jobId: string;
+    readonly done: number;
+    readonly total: number;
+    readonly currentSlice: string;
+    readonly lastCommitSha: string | null;
+    readonly updatedAt: string;
+}
+export type Step08Verdict = {
+    readonly kind: 'allow-job';
+    readonly decision: import('./job-shape-decision.js').JobShapeDecision;
+    readonly progress: Step08Progress | null;
+} | {
+    readonly kind: 'allow-single';
+} | {
+    readonly kind: 'block-missing-decision';
+    readonly promptHit: boolean;
+    readonly promptSource: 'flag' | 'last-prompt-file' | 'stdin-empty';
+};
+export declare function runtimeSessionDir(projectRoot: string, sessionId: string): string;
+export interface EvaluateStep08Input {
+    readonly projectRoot: string;
+    readonly sessionId: string;
+    /**
+     * Explicit prompt text. When omitted, falls back to
+     * `.peaks/_runtime/<sid>/txt/last-prompt.txt`, then to stdin (the
+     * caller passes stdin verbatim — usually empty in tests).
+     */
+    readonly prompt?: string;
+}
+export interface EvaluateStep08Result {
+    readonly allow: boolean;
+    readonly verdict: Step08Verdict;
+    readonly nextSliceLine: string | null;
+}
+/**
+ * Pure evaluator — does NOT write, does NOT exit. CLI wrapper in
+ * `src/cli/commands/code-commands.ts` reads `allow` to set the process
+ * exit code (0 allow / 2 block) and prints the structured envelope.
+ */
+export declare function evaluateStep08(input: EvaluateStep08Input): EvaluateStep08Result;

package/dist/services/code/step-08-gate.js

@@ -0,0 +1,136 @@
+/**
+ * v3.1.2 Step 0.8 — Mechanical PreToolUse gate.
+ *
+ * Wire-installed by `peaks workspace init` (extends the existing hook
+ * installer; does NOT replace the Write|Edit|MultiEdit fact-forcing
+ * bypass). The hook runs `peaks code gate-step-08 --project .` before
+ * every Bash tool call. Exit code is the load-bearing contract:
+ *
+ *   exit 0 → allow (with structured stdout describing the decision)
+ *   exit 2 → block (stderr contains the BLOCKED: ... reason)
+ *
+ * Three decision paths:
+ *
+ *   1. `job-shape.json` exists with `decision.isJob === true`.
+ *      → allow, print `{ ok, allow, mode: 'job', decision }`. When a
+ *        matching `job/<jid>/progress.json` exists, also print
+ *        `Next: slice #<N+1> of <M> (<currentSlice>)` so the LLM sees
+ *        its resume context BEFORE any Bash call lands.
+ *   2. `job-shape.json` exists with `decision.isJob === false`.
+ *      → allow, print `{ ok, allow, mode: 'single' }`.
+ *   3. `job-shape.json` is MISSING — fail-closed guard. The LLM is the
+ *      source of truth, but if it never recorded a decision we run a
+ *      lightweight backup regex against the user's prompt:
+ *        /until|全部|until all done|disavow cost|不用考虑费用|all of them/i
+ *      match → block (exit 2) with the BLOCKED: stderr message.
+ *      no match → allow (exit 0) — most prompts are not Job-shaped.
+ *
+ * Karpathy §2 (Simplicity First): ~120 lines, no LLM call inside. The
+ * regex is the FIRST time peaks-loop accepts hardcoded keywords —
+ * explicitly scoped as a *fail-closed backup* (case 3), NOT a primary
+ * judgement. The LLM still owns the semantic call via
+ * `peaks code detect-job`. The regex is a safety net for the v3.1.1
+ * incident class (LLM under load never records the decision at all).
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { readJobShapeDecision, JobShapeDecisionError, JOB_SHAPE_NOT_DECIDED } from './job-shape-decision.js';
+export const STEP_08_GATE_FILE_NAME = 'job-shape.json';
+export const STEP_08_PROGRESS_FILE_NAME = 'progress.json';
+/**
+ * Fail-closed backup regex — see module docstring case 3 for why this
+ * exists. Kept short and explicit; if the prompt mentions any of these
+ * triggers and `job-shape.json` is missing, the LLM is treated as
+ * having skipped `peaks code detect-job` and the gate blocks.
+ *
+ * The list mirrors the v3.1.0 / v3.1.1 incident triggers verbatim:
+ *   继续执行下个 slice (until next slice) → until / 直到
+ *   全部添加完 / all of them            → 全部 / all of them
+ *   不用考虑费用                        → 不用考虑费用 / disavow cost
+ *   until all done                      → until all done
+ */
+export const STEP_08_BACKUP_REGEX = /直到|全部|until all done|disavow cost|不用考虑费用|all of them/i;
+export function runtimeSessionDir(projectRoot, sessionId) {
+    return join(projectRoot, '.peaks', '_runtime', sessionId);
+}
+function progressPath(projectRoot, sessionId, jid) {
+    // The progress file lives under job/<jid>/progress.json. The jid
+    // comes from job-shape.json (decision.suggestedJobId) — there is
+    // exactly one canonical jid per session under Job mode, so we read
+    // the matching path directly rather than enumerating the job/ dir.
+    // (Rotating mode spawns new jids but only one is "active" at a time;
+    // the active jid is the latest write to job-shape.json.)
+    return join(runtimeSessionDir(projectRoot, sessionId), 'job', jid, STEP_08_PROGRESS_FILE_NAME);
+}
+function readProgressIfAny(projectRoot, sessionId, jid) {
+    const path = progressPath(projectRoot, sessionId, jid);
+    if (!existsSync(path))
+        return null;
+    try {
+        const raw = readFileSync(path, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.jobId === 'string' &&
+            typeof parsed.done === 'number' &&
+            typeof parsed.total === 'number' &&
+            typeof parsed.currentSlice === 'string' &&
+            typeof parsed.updatedAt === 'string') {
+            return {
+                jobId: parsed.jobId,
+                done: parsed.done,
+                total: parsed.total,
+                currentSlice: parsed.currentSlice,
+                lastCommitSha: typeof parsed.lastCommitSha === 'string' ? parsed.lastCommitSha : null,
+                updatedAt: parsed.updatedAt
+            };
+        }
+        return null;
+    }
+    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+        return null;
+    }
+}
+function readPromptFromLastPromptFile(projectRoot, sessionId) {
+    const path = join(runtimeSessionDir(projectRoot, sessionId), 'txt', 'last-prompt.txt');
+    if (!existsSync(path))
+        return '';
+    try {
+        return readFileSync(path, 'utf8');
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * Pure evaluator — does NOT write, does NOT exit. CLI wrapper in
+ * `src/cli/commands/code-commands.ts` reads `allow` to set the process
+ * exit code (0 allow / 2 block) and prints the structured envelope.
+ */
+export function evaluateStep08(input) {
+    try {
+        const record = readJobShapeDecision(input.projectRoot, input.sessionId);
+        if (record.decision.isJob) {
+            const progress = readProgressIfAny(input.projectRoot, input.sessionId, record.decision.suggestedJobId);
+            const nextSliceLine = progress !== null
+                ? `Next: slice #${progress.done + 1} of ${progress.total} (${progress.currentSlice})`
+                : null;
+            return {
+                allow: true,
+                verdict: { kind: 'allow-job', decision: record.decision, progress },
+                nextSliceLine
+            };
+        }
+        return { allow: true, verdict: { kind: 'allow-single' }, nextSliceLine: null };
+    }
+    catch (err) {
+        if (err instanceof JobShapeDecisionError && err.code === JOB_SHAPE_NOT_DECIDED) {
+            const promptText = input.prompt ?? readPromptFromLastPromptFile(input.projectRoot, input.sessionId);
+            const hit = promptText.length > 0 && STEP_08_BACKUP_REGEX.test(promptText);
+            const source = input.prompt !== undefined ? 'flag' : promptText.length > 0 ? 'last-prompt-file' : 'stdin-empty';
+            if (hit) {
+                return { allow: false, verdict: { kind: 'block-missing-decision', promptHit: true, promptSource: source }, nextSliceLine: null };
+            }
+            return { allow: true, verdict: { kind: 'block-missing-decision', promptHit: false, promptSource: source }, nextSliceLine: null };
+        }
+        throw err;
+    }
+}

package/dist/services/code/user-touchpoint-classifier.d.ts

@@ -0,0 +1,44 @@
+/**
+ * v2.15.0 follow-up — G4: user touchpoint classifier.
+ *
+ * 12 Gaps positioning memory: "user 介入 = 业务/产品审阅,不是技术决策".
+ * This service classifies every Code gate by the kind of decision it
+ * represents, so the CLI / status line can show user which gates
+ * actually need their attention vs which are technical defaults
+ * (AI auto-decides in full-auto).
+ *
+ *   - `business`         — user MUST be present (business / product decisions)
+ *   - `tech`             — AI auto-decides in full-auto (tech choices)
+ *   - `mode-selection`   — the gate IS the mode / context selection
+ *                          itself (always prompts the user, even in
+ *                          full-auto)
+ *   - `commit-boundary`  — hard-floor: push / tag / publish / global
+ *                          install (always prompts, even in full-auto)
+ *   - `commit-floor`     — other hard-floor categories
+ *                          (irreversible-external / auth / multi-day
+ *                          investment)
+ *
+ * Pure functions. No I/O.
+ */
+export type GateKind = 'business' | 'tech' | 'mode-selection' | 'commit-boundary' | 'commit-floor';
+export interface GateClassification {
+    readonly step: string;
+    readonly kind: GateKind;
+    /** Short description of what the user / AI is deciding. */
+    readonly description: string;
+    /** Whether full-auto can auto-proceed this gate. */
+    readonly fullAutoCanProceed: boolean;
+    /** When user should pay attention (always / business-only / never). */
+    readonly userShouldReview: 'always' | 'business-only' | 'never';
+}
+export declare function classifyAllGates(): readonly GateClassification[];
+/** Look up a single gate's classification. Returns null when the step is not in the table. */
+export declare function classifyGate(step: string): GateClassification | null;
+/** List all gates the user must review (per the 12 Gaps positioning). */
+export declare function userMustReviewGates(): readonly GateClassification[];
+/** List all gates AI auto-decides in full-auto. */
+export declare function aiAutoDecidesGates(): readonly GateClassification[];
+export declare const COMMIT_BOUNDARY_ACTIONS_LIST: readonly {
+    id: string;
+    description: string;
+}[];