peaks-loop 4.0.0-beta.8 → 4.0.0-beta.9

package/dist/services/ide/ide-types.d.ts

@@ -0,0 +1,253 @@
+/**
+ * peaks 自有 hook 协议 + slim IDE adapter 接口。
+ *
+ * peaks-loop 不再适配 IDE 私有的 hook 协议;反之 peaks 定义自己的 canonical
+ * schema,每个 IDE 只需要填 4 字符串 + 1 settings 函数,新 IDE 适配变成"填表"。
+ *
+ * 不可消除的 per-IDE 字段(诚实交代,见 PRD R-1..R-4):
+ *   - settings.json 物理位置
+ *   - 项目根 env 变量名
+ *   - hook 事件名 + matcher 名
+ *
+ * 其他全部归一化到 peaks 内部模型(见 hook-protocol.ts)。
+ */
+import type { SubAgentDispatcher } from '../dispatch/sub-agent-dispatcher.js';
+export type IdeId = 'claude-code' | 'trae' | 'codex' | 'cursor' | 'qoder' | 'tongyi-lingma' | 'hermes' | 'openclaw' | 'zcode';
+export interface IdeCapabilities {
+    /** peaks gate enforce 是否适用该 IDE(必备) */
+    readonly gateEnforce: true;
+    /** peaks statusline 状态栏是否适用 */
+    readonly statusline: boolean;
+}
+export interface IdeSettingsLocation {
+    /** 项目根下的 settings 目录名,例如 '.claude' / '.trae' / '.cursor' */
+    readonly dirName: string;
+    /** settings 文件名(部分 IDE 叫 settings.json / mcp.json) */
+    readonly settingsFileName: string;
+    /** 解析出 settings.json 绝对路径 */
+    resolveSettingsFile(scope: 'project' | 'global', projectRoot: string | undefined): string;
+    /** 该 IDE 是否支持此 scope(用于清晰报错) */
+    supportsScope(scope: 'project' | 'global'): boolean;
+}
+/**
+ * Slim IDE adapter 描述。每 IDE 一个静态常量(无需 DI)。
+ * 字段故意保持少:让 adapter 的添加是"填表"而非"重写"。
+ */
+export interface IdeAdapter {
+    readonly id: IdeId;
+    /** 人类可读名,出现在 CLI help / 命令输出 */
+    readonly displayName: string;
+    readonly settings: IdeSettingsLocation;
+    /** IDE 注入的项目根 env 变量名;`peaks gate enforce` 等命令模板会引用此 env */
+    readonly envVar: string;
+    /** settings.json 里 hook 数组的 key,例如 'PreToolUse' / 'beforeToolCall' */
+    readonly hookEvent: string;
+    /** hook 数组元素的 matcher 字段(工具名匹配),例如 'Bash' / 'Task' / 'terminal' */
+    readonly toolMatcher: string;
+    /**
+     * Per-IDE sub-agent dispatcher. The `peaks sub-agent dispatch` CLI reads
+     * this field, calls `supportsRole` + `buildToolCall`, and returns the
+     * resulting tool-call descriptor in the JSON envelope. Encapsulates the per-IDE sub-agent dispatch surface (slice #009). The dispatcher's `buildToolCall` returns the IDE-native tool-call descriptor at runtime.
+     *
+     * Added in slice 2026-06-07-sub-agent-dispatch-decouple. See PRD #002
+     * G1 (AC-1, AC-2) + [[slim-ideadapter-shape-is-the-contract]].
+     */
+    readonly subAgentDispatcher: SubAgentDispatcher;
+    /**
+     * Per-IDE opt-in to the G9 prompt-size gate. When `true`, the
+     * `peaks hooks install` command registers the G9 PreToolUse hook
+     * (`peaks sub-agent-dispatch-guard`) for this IDE. When `false`,
+     * the hook is NOT installed (the IDE either doesn't support the
+     * PreToolUse event in a useful form, or the user has opted out).
+     *
+     * The CLI 兜底 layer in `peaks sub-agent dispatch` still enforces
+     * the threshold regardless of this field — `promptSizeAware` only
+     * controls the hook layer (R-15: G9 hook is LLM-platform-specific).
+     *
+     * Added in slice 2026-06-07-sub-agent-context-governance. See PRD
+     * #003 G9.2 + AC-56. Default `false` to preserve slice #009's
+     * `peaks hooks install` output byte-stability.
+     */
+    readonly promptSizeAware: boolean;
+    /** install / uninstall 后展示给用户的提示文本(各 IDE 不同,例如 Claude 提示重启窗口) */
+    readonly installHints: readonly string[];
+    /** 该 IDE 在 peaks 上可启用的能力(用于在不支持的 IDE 上软警告) */
+    readonly capabilities: IdeCapabilities;
+    /**
+     * Where this IDE reads its project-level agent instructions from.
+     * When undefined, the postinstall + `peaks standards init` codepath falls
+     * back to the legacy Claude Code path (CLAUDE.md + .claude/rules/**)
+     * AND emits a stderr warning. Adapters in slice 1.3.2 declare this
+     * value (Claude Code), are annotated UNVERIFIED for future slices
+     * (Trae, slice #012+), or omit it entirely (not-yet-registered IDEs).
+     *
+     * Added in slice 011-2026-06-07-ide-adapter-resource-profile.
+     */
+    readonly standardsProfile?: IdeStandardsProfile;
+    /**
+     * Where `scripts/install-skills.mjs` symlinks the bundled skills +
+     * output styles. When undefined, the postinstall falls back to
+     * `~/.claude/skills` + `~/.claude/output-styles` (legacy) AND emits
+     * a stderr warning. Adapters that opt into the dispatch layer fill
+     * this; adapters that don't (Trae in slice 1.3.2) leave it undefined
+     * and follow the legacy path with a warning.
+     *
+     * Added in slice 011-2026-06-07-ide-adapter-resource-profile.
+     */
+    readonly skillInstall?: IdeSkillInstall;
+    /**
+     * v2.13.0 auto-compact (AC-1 + AC-3): per-IDE compact-capability
+     * descriptor. When `undefined`, peaks-loop falls back to the
+     * `llm-self-compress` pathway (the LLM summarizes its own context).
+     * Adapters that fill this expose a 4-stage protocol so peaks-loop
+     * can drive compact autonomously:
+     *
+     *   1. `envVarForContextPercent` — env-var the IDE sets per turn
+     *      (e.g. `CLAUDE_CONTEXT_USAGE_PERCENT`). Read by AC-1.
+     *   2. `compactCommand` — slash command or shell-call the IDE
+     *      accepts to trigger compact (e.g. `/compact`). Dispatched
+     *      by AC-3.
+     *   3. `compactPathway` — `'shell-exec' | 'ide-native' |
+     *      'llm-self-compress' | 'noop'`. `shell-exec` means peaks-loop
+     *      spawns `compactCommand` via `child_process.spawn` (zero IDE
+     *      hook required). `ide-native` means the IDE exposes a hook
+     *      surface peaks-loop can write to. `llm-self-compress` is the
+     *      fallback when no compact capability is registered.
+     *   4. `postCompactDetectCommand` (optional) — command the LLM
+     *      runner can invoke after compact to confirm ratio dropped.
+     *
+     * Claude Code is the MVP implementation; trae / codex / cursor /
+     * qoder / tongyi-lingma / hermes / openclaw ship with
+     * `compactPathway: 'llm-self-compress'` until L2-dogfood verifies
+     * each IDE's actual compact surface.
+     *
+     * Added in slice 2026-06-27-auto-compact-protocol. See
+     * `.peaks/memory/2026-06-27-auto-compact-design.md`.
+     */
+    readonly compact?: IdeCompactProfile;
+    /**
+     * Optional runtime probe for the IDE's currently-active model id.
+     * When defined, `detectCurrentIdeModel()` in
+     * `src/services/ide/current-model-detector.ts` calls this to
+     * discover which model the IDE UI is currently configured for —
+     * e.g. so `peaks ide model --current` and the future
+     * `getStrongestModelIdAsync()` can use the same value without
+     * forcing the user to set `config.model` manually.
+     *
+     * Returning `undefined` (or the method being absent on this
+     * adapter) means "I don't know — fall back to the configured
+     * model / env var / back-compat default".
+     *
+     * Implementations may read local files (`fs.readFileSync`),
+     * env vars, or both. They MUST NOT throw on missing files — catch
+     * locally and return `undefined`. The orchestration layer also
+     * catches, but defense in depth.
+     *
+     * Added in slice 2026-07-09 add-zcode-adapter (Slice C); only the
+     * `zcode` adapter opts in this slice. Future slices can opt in
+     * other IDEs without changing this signature (optional method).
+     */
+    readonly detectCurrentModel?: () => Promise<string | undefined>;
+}
+/**
+ * Per-IDE auto-compact capability descriptor. See `IdeAdapter.compact`
+ * for the protocol contract. The `MvpCompactPathway` string union
+ * keeps the field exhaustive — adding a new pathway requires updating
+ * every adapter that opts in.
+ */
+export interface IdeCompactProfile {
+    /** Env-var name the IDE writes per turn to expose context-fill %. */
+    readonly envVarForContextPercent: string;
+    /**
+     * Slash command or shell-call to invoke compact. The orchestrator
+     * spawns this via `child_process.spawn` (shell-exec pathway) or
+     * writes it to an IDE hook file (ide-native pathway).
+     */
+    readonly compactCommand: string;
+    /**
+     * `shell-exec` — peaks-loop spawns the command via child_process
+     *                (works for any IDE that accepts a slash command
+     *                via a shell-spawnable entry point).
+     * `ide-native` — peaks-loop writes to an IDE-specific hook file;
+     *                used when the IDE requires a registered hook
+     *                rather than a runtime command.
+     * `llm-self-compress` — peaks-loop prompts the LLM to summarize
+     *                its own context (no IDE integration required;
+     *                least precise but always available).
+     * `noop` — peaks-loop records the intent but performs no action;
+     *          used by IDEs that explicitly opt out (e.g. legacy
+     *          adapters still on the v2.11.x model).
+     */
+    readonly compactPathway: 'shell-exec' | 'ide-native' | 'llm-self-compress' | 'noop';
+    /**
+     * Optional command the runner invokes post-compact to confirm
+     * ratio dropped (e.g. `peaks context now --json`). When omitted,
+     * the orchestrator polls `envVarForContextPercent` directly.
+     */
+    readonly postCompactDetectCommand?: string;
+}
+/**
+ * Per-IDE standards-file location + format profile. Used by the
+ * `peaks standards init` dispatch layer (slice 011) to write the
+ * project-level standards files at the IDE-specific path, not the
+ * Claude Code hardcoded one. Adapters that omit this field trigger
+ * the legacy Claude Code path with a stderr warning.
+ */
+export interface IdeStandardsProfile {
+    /** Filename for the project-root constitution (e.g. 'CLAUDE.md'), or null if the IDE has no equivalent. */
+    readonly rootFile: string | null;
+    /** Directory for module-level rules (e.g. '.claude/rules'), or null if the IDE has no equivalent. */
+    readonly rulesDir: string | null;
+    /** Glob under rulesDir to enumerate rule files. */
+    readonly rulesFileGlob: string;
+    /** True if the IDE auto-loads these files at session start. */
+    readonly autoLoaded: boolean;
+    /** Output format. markdown = plain text; markdown+frontmatter = adds YAML frontmatter to each rule file. */
+    readonly format: 'markdown' | 'markdown+frontmatter';
+    /** Human-readable hint surfaced in the fallback warning. */
+    readonly migrationHint?: string;
+}
+/**
+ * Per-IDE postinstall target roots. The `scripts/install-skills.mjs`
+ * script consumes this to symlink the bundled skills + output styles
+ * to the IDE-specific install location, with back-compat for the
+ * legacy `PEAKS_CLAUDE_SKILLS_DIR` / `PEAKS_CLAUDE_OUTPUT_STYLES_DIR`
+ * env vars (precedence: explicit option > env var > IDE profile > legacy default).
+ */
+export interface IdeSkillInstall {
+    /** Absolute path under which the postinstall script symlinks the bundled `skills/` directory. */
+    readonly skillsDir: string;
+    /** Absolute path under which the postinstall script writes the bundled `output-styles/`. Null if the IDE has no equivalent. */
+    readonly outputStylesDir: string | null;
+    /** Symlink strategy. */
+    readonly installStrategy: 'symlink' | 'copy';
+    /** Back-compat env var name (e.g. PEAKS_CLAUDE_SKILLS_DIR). Null if no env var is supported. */
+    readonly envVarOverride: string | null;
+}
+/** peaks canonical hook schema 版本标识 */
+export declare const PEAKS_HOOK_SCHEMA: "peaks-hook/v1";
+/** peaks canonical hook 形态 —— 单一协议,所有 IDE 经 hook-translator 归一化到此 */
+export interface PeaksCanonicalHook {
+    readonly schema: typeof PEAKS_HOOK_SCHEMA;
+    readonly event: 'pre-tool-use' | 'post-tool-use' | 'sub-agent-start';
+    readonly toolName: string;
+    readonly toolInput: Record<string, unknown>;
+    /** 解析自 env 变量或 --project 的项目根 */
+    readonly projectRoot: string;
+    /** 选输出格式 */
+    readonly rawIdeFormat: IdeId;
+    /** 原始 stdin,留作回退 */
+    readonly rawPayload: unknown;
+}
+/** peaks 决策发回形态枚举(按 IDE 期望的"发回"形式) */
+export type PeaksDecisionTransport = {
+    kind: 'stdout-json';
+    denyShape: Record<string, unknown>;
+} | {
+    kind: 'exit-code';
+    denyCode: number;
+} | {
+    kind: 'both';
+    denyShape: Record<string, unknown>;
+    denyCode: number;
+};

package/dist/services/ide/ide-types.js

@@ -0,0 +1,2 @@
+/** peaks canonical hook schema 版本标识 */
+export const PEAKS_HOOK_SCHEMA = 'peaks-hook/v1';

package/dist/services/ide/resource-profile.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Resource profile accessors for the per-IDE dispatch layer.
+ *
+ * Slice #011-2026-06-07-ide-adapter-resource-profile introduced two new
+ * optional fields on the `IdeAdapter` interface:
+ *
+ *   - `standardsProfile` — where the IDE reads its project-level
+ *     agent instructions (root file + rules directory + format).
+ *   - `skillInstall`     — where the postinstall script symlinks the
+ *     bundled skills + output styles.
+ *
+ * These accessors are the single chokepoint for "given an IdeId, where
+ * does the IDE read X from?". The two consumers that consume them:
+ *
+ *   1. `src/services/standards/ide-aware-standards-service.ts` —
+ *      wraps `peaks standards init/update` to dispatch on the detected
+ *      IDE rather than always writing CLAUDE.md + .claude/rules/**.
+ *   2. `scripts/install-skills.mjs` (loaded via dynamic import) — the
+ *      postinstall script dispatches on detected IDEs to install
+ *      skills at the IDE-specific target root.
+ *
+ * Future slices add Cursor / Codex / Qoder / Tongyi Lingma by filling
+ * the per-IDE values on the adapter; the accessors and the dispatch
+ * layer do not change.
+ */
+import type { IdeId, IdeSkillInstall, IdeStandardsProfile } from './ide-types.js';
+/** Result of `detectAllResourceTargets` — one entry per registered adapter. */
+export interface ResourceTarget {
+    readonly ideId: IdeId;
+    readonly standardsProfile: IdeStandardsProfile | null;
+    readonly skillInstall: IdeSkillInstall | null;
+}
+/**
+ * Look up the standards-file profile for a given IDE. Returns `null`
+ * if the adapter is registered but does not declare a standards profile
+ * (Trae in slice #011 — annotated `Standards: UNVERIFIED` for slice #012+).
+ * Throws if the IDE id is not registered at all.
+ */
+export declare function getStandardsProfile(ideId: IdeId): IdeStandardsProfile | null;
+/**
+ * Look up the skill-install profile for a given IDE. Returns `null`
+ * if the adapter does not declare one (Trae in slice #011). Throws
+ * if the IDE id is not registered.
+ */
+export declare function getSkillInstall(ideId: IdeId): IdeSkillInstall | null;
+/**
+ * Enumerate all registered adapters and return their resource profiles.
+ * Used by `install-skills.mjs` (and any future fan-out consumer) that
+ * needs to install across multiple IDEs at once. Returns the profiles
+ * in adapter insertion order.
+ */
+export declare function detectAllResourceTargets(): readonly ResourceTarget[];

package/dist/services/ide/resource-profile.js

@@ -0,0 +1,33 @@
+import { getAdapter, listAdapterIds } from './ide-registry.js';
+/**
+ * Look up the standards-file profile for a given IDE. Returns `null`
+ * if the adapter is registered but does not declare a standards profile
+ * (Trae in slice #011 — annotated `Standards: UNVERIFIED` for slice #012+).
+ * Throws if the IDE id is not registered at all.
+ */
+export function getStandardsProfile(ideId) {
+    const adapter = getAdapter(ideId);
+    return adapter.standardsProfile ?? null;
+}
+/**
+ * Look up the skill-install profile for a given IDE. Returns `null`
+ * if the adapter does not declare one (Trae in slice #011). Throws
+ * if the IDE id is not registered.
+ */
+export function getSkillInstall(ideId) {
+    const adapter = getAdapter(ideId);
+    return adapter.skillInstall ?? null;
+}
+/**
+ * Enumerate all registered adapters and return their resource profiles.
+ * Used by `install-skills.mjs` (and any future fan-out consumer) that
+ * needs to install across multiple IDEs at once. Returns the profiles
+ * in adapter insertion order.
+ */
+export function detectAllResourceTargets() {
+    return listAdapterIds().map((ideId) => ({
+        ideId,
+        standardsProfile: getStandardsProfile(ideId),
+        skillInstall: getSkillInstall(ideId),
+    }));
+}

package/dist/services/ide/shared/atomic-json.d.ts

@@ -0,0 +1,15 @@
+export declare const ATOMIC_JSON_FILE_MODE = 384;
+/**
+ * Read a JSON object file using a no-follow open. Returns an empty object when
+ * the file does not exist or is empty. Throws when the file exists but does not
+ * contain a JSON object (so callers can distinguish "no settings" from
+ * "malformed settings").
+ */
+export declare function readJsonObjectFile<T extends Record<string, unknown> = Record<string, unknown>>(filePath: string): T;
+/**
+ * Atomically write a JSON file: create a unique temp file in the same
+ * directory, fsync its contents via close, then `rename` over the target. A
+ * failure during rename removes the temp file (best effort). The target is
+ * created with 0o600 permissions.
+ */
+export declare function atomicWriteJson(filePath: string, value: unknown): void;

package/dist/services/ide/shared/atomic-json.js

@@ -0,0 +1,58 @@
+import { closeSync, constants, existsSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { dirname, join } from 'node:path';
+export const ATOMIC_JSON_FILE_MODE = 0o600;
+/**
+ * Read a JSON object file using a no-follow open. Returns an empty object when
+ * the file does not exist or is empty. Throws when the file exists but does not
+ * contain a JSON object (so callers can distinguish "no settings" from
+ * "malformed settings").
+ */
+export function readJsonObjectFile(filePath) {
+    if (!existsSync(filePath))
+        return {};
+    const fd = openSync(filePath, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const raw = readFileSync(fd, 'utf8').trim();
+        if (raw.length === 0)
+            return {};
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            throw new Error('settings file must contain a JSON object');
+        }
+        return parsed;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/**
+ * Atomically write a JSON file: create a unique temp file in the same
+ * directory, fsync its contents via close, then `rename` over the target. A
+ * failure during rename removes the temp file (best effort). The target is
+ * created with 0o600 permissions.
+ */
+export function atomicWriteJson(filePath, value) {
+    const dir = dirname(filePath);
+    mkdirSync(dir, { recursive: true });
+    const tempPath = join(dir, `.settings.${randomUUID()}.tmp`);
+    const fd = openSync(tempPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, ATOMIC_JSON_FILE_MODE);
+    try {
+        writeFileSync(fd, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        renameSync(tempPath, filePath);
+    }
+    catch (error) {
+        try {
+            unlinkSync(tempPath);
+        }
+        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+            // best effort cleanup
+        }
+        throw error;
+    }
+}

package/dist/services/ide/shared/safe-path.d.ts

@@ -0,0 +1,11 @@
+export type HookScope = 'project' | 'global';
+/** True iff `childPath` resolves to `parentPath` or any path nested inside it. */
+export declare function isInsidePath(childPath: string, parentPath: string): boolean;
+/**
+ * Reject settings targets that are symlinked or escape the configured root.
+ * Used by the hook / statusline / MCP install paths to keep the project root the
+ * sole owner of writable settings files.
+ */
+export declare function assertSafeSettingsFile(scope: HookScope, root: string, dirName: string, settingsFileName: string): {
+    settingsPath: string;
+};

package/dist/services/ide/shared/safe-path.js

@@ -0,0 +1,29 @@
+import { existsSync, lstatSync, realpathSync } from 'node:fs';
+import { isAbsolute, join, relative } from 'node:path';
+/** True iff `childPath` resolves to `parentPath` or any path nested inside it. */
+export function isInsidePath(childPath, parentPath) {
+    const rel = relative(parentPath, childPath);
+    return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
+}
+/**
+ * Reject settings targets that are symlinked or escape the configured root.
+ * Used by the hook / statusline / MCP install paths to keep the project root the
+ * sole owner of writable settings files.
+ */
+export function assertSafeSettingsFile(scope, root, dirName, settingsFileName) {
+    const settingsPath = join(root, dirName, settingsFileName);
+    const dirPath = join(root, dirName);
+    if (existsSync(dirPath) && lstatSync(dirPath).isSymbolicLink()) {
+        throw new Error(`${dirName} directory must not be a symlink`);
+    }
+    if (existsSync(settingsPath)) {
+        if (lstatSync(settingsPath).isSymbolicLink()) {
+            throw new Error(`${settingsFileName} must not be a symlink`);
+        }
+        const realRoot = realpathSync(root);
+        if (!isInsidePath(realpathSync(settingsPath), realRoot)) {
+            throw new Error(`${settingsFileName} must stay inside the ${scope} root`);
+        }
+    }
+    return { settingsPath };
+}

package/dist/services/impact/impact-scan-service.d.ts

@@ -0,0 +1,66 @@
+/**
+ * v2.15.0 follow-up — G13: impact scan service.
+ *
+ * Lightweight, file-glob-based impact analysis (no AST, no type
+ * checking). For a given set of changed files, predict:
+ *   - which other files are likely affected (by path convention)
+ *   - which business flows touch them (config-driven)
+ *   - the risk level (high / medium / low)
+ *   - the "must-check" list (concrete business scenarios the user
+ *     must verify before shipping)
+ *
+ * Pure functions. The CLI wraps this with a `peaks impact scan`
+ * command; `peaks impact must-check` returns the must-check list
+ * subset. Persistence is per-invocation (no state file).
+ */
+/** A single impacted file predicted from a changed file. */
+export interface ImpactedFile {
+    /** Absolute or relative path. */
+    readonly path: string;
+    /** Why this file is considered affected. */
+    readonly reason: string;
+    /** Risk: high if the file is in core business paths. */
+    readonly risk: 'high' | 'medium' | 'low';
+}
+/** A business flow that may be affected by the change. */
+export interface AffectedFlow {
+    /** Flow name (e.g. "用户登录", "Skill 权限校验"). */
+    readonly name: string;
+    /** Why this flow is affected. */
+    readonly reason: string;
+}
+/** A must-check scenario the user must verify before shipping. */
+export interface MustCheckItem {
+    readonly scenario: string;
+    readonly category: 'business' | 'ui' | 'integration' | 'data';
+    readonly priority: 'P0' | 'P1' | 'P2';
+}
+/** Full scan report. */
+export interface ImpactScanReport {
+    readonly changedFiles: readonly string[];
+    readonly impactedFiles: readonly ImpactedFile[];
+    readonly affectedFlows: readonly AffectedFlow[];
+    readonly mustCheck: readonly MustCheckItem[];
+    readonly overallRisk: 'high' | 'medium' | 'low';
+    readonly warnings: readonly string[];
+}
+export interface ImpactScanOptions {
+    readonly changedFiles: readonly string[];
+    /** Optional business flow map: flow name → list of file globs. */
+    readonly businessFlows?: ReadonlyMap<string, readonly string[]>;
+}
+/**
+ * Default business flow map (covers the most common B-end
+ * archetypes; users can override via --flows in the CLI).
+ */
+export declare const DEFAULT_BUSINESS_FLOWS: ReadonlyMap<string, readonly string[]>;
+/** Simple glob matcher supporting `**` and `*`. */
+export declare function matchGlob(pattern: string, path: string): boolean;
+/**
+ * Run an impact scan. Pure function — no I/O.
+ */
+export declare function runImpactScan(opts: ImpactScanOptions): ImpactScanReport;
+/**
+ * Extract just the must-check list from a scan report.
+ */
+export declare function mustCheckFromReport(report: ImpactScanReport): readonly MustCheckItem[];