peaks-loop 4.0.0-beta.8 → 4.0.1

package/dist/cli/commands/audit-commands.js

@@ -0,0 +1,437 @@
+/**
+ * peaks audit * CLI surface — Slice L2.1 + L2.3 P2-a.
+ *
+ * Registers the new `peaks audit` top-level command with the
+ * `red-lines` (L2.1) and `static` (L2.3 P2-a) subcommands.
+ * Per `peaks-loop-when-adding-a-new-subcommand-check-for-existing-top-level-first.md`
+ * we verified that no `peaks audit` top-level exists; this is the only
+ * file that owns the registration.
+ */
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { runRedLinesAudit } from '../../services/audit/red-lines-service.js';
+import { runStaticAudit } from '../../services/audit/static-service.js';
+import { addJsonOption, getErrorMessage, printResult } from '../cli-helpers.js';
+import { fail, ok } from 'peaks-loop-shared/result';
+import { writeAuditDecision } from '../../services/audit/decision-writer.js';
+import { computeProseRatio } from '../../services/audit/prose-ratio-calculator.js';
+import { writeMachineOutput, writeNarrative, writePrompt, } from '../../services/audit/artifact-writer.js';
+const SUPPORTED_ARTIFACT_KINDS = [
+    'decision',
+    'prompt',
+    'machine-output',
+    'narrative',
+];
+function isSupportedArtifactKind(value) {
+    return SUPPORTED_ARTIFACT_KINDS.includes(value);
+}
+/** Whitelist of supported `--llm-provider` values for `peaks audit goal`. */
+const SUPPORTED_LLM_PROVIDERS = ['stub'];
+function isSupportedLlmProvider(value) {
+    return SUPPORTED_LLM_PROVIDERS.includes(value);
+}
+function validateProjectRoot(projectArg) {
+    const projectRoot = resolve(projectArg);
+    if (!existsSync(projectRoot)) {
+        return { ok: false, code: 'PROJECT_NOT_FOUND', message: `project path does not exist: ${projectArg}` };
+    }
+    let stat;
+    try {
+        stat = statSync(projectRoot);
+    }
+    catch (error) {
+        return { ok: false, code: 'INVALID_PROJECT', message: getErrorMessage(error) };
+    }
+    if (!stat.isDirectory()) {
+        return { ok: false, code: 'INVALID_PROJECT', message: `project path is not a directory: ${projectArg}` };
+    }
+    return { ok: true, projectRoot };
+}
+export function registerAuditCommands(program, io) {
+    const audit = program
+        .command('audit', { hidden: true })
+        .description('Audit a project for compliance with peaks-loop red lines (P0 / P1 / P2 tiers)');
+    addJsonOption(audit
+        .command('red-lines')
+        .description('Scan skills/, .claude/rules/, and openspec/changes/ for MANDATORY / BLOCKING / MUST NOT / RED LINE markers; classify each as cli-backed / partial / prose-only')
+        .requiredOption('--project <path>', 'target project root')).action(async (options) => {
+        const validation = validateProjectRoot(options.project);
+        if (!validation.ok) {
+            printResult(io, fail('audit.red-lines', validation.code, validation.message, { totalRedLines: 0, cliBacked: 0, partial: 0, proseOnly: 0, audit: [], enforcerFindings: [] }, ['Verify the project path exists and is a directory']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            const result = runRedLinesAudit({ projectRoot: validation.projectRoot });
+            const nextActions = [];
+            if (result.audit.proseOnly > 0) {
+                nextActions.push(`${result.audit.proseOnly} prose-only red lines remain. Plan P1/P2 enforcers in L2.2-L2.4.`);
+            }
+            if (result.audit.cliBacked > 0) {
+                nextActions.push(`${result.audit.cliBacked} red lines are now cli-backed. Re-run after each enforcer lands to track the prose-only ratio.`);
+            }
+            const envelope = ok('audit.red-lines', result.audit, result.warnings.map((w) => `${w.file}: ${w.message}`), nextActions);
+            printResult(io, envelope, options.json);
+        }
+        catch (error) {
+            printResult(io, fail('audit.red-lines', 'SCANNER_FAILED', getErrorMessage(error), { totalRedLines: 0, cliBacked: 0, partial: 0, proseOnly: 0, audit: [], enforcerFindings: [] }, ['Inspect scanner logs and re-run with the same --project path']), options.json);
+            process.exitCode = 1;
+        }
+    });
+    // Slice #6 L2.3 P2-a: peaks audit static — soft-optional ECC
+    // AgentShell integration. Reads `.peaks/preferences.json`'s
+    // `agentShieldEnabled` flag (default false). The CLI flags
+    // `--enable-agent-shield` / `--disable-agent-shield` override
+    // the preference for a single call.
+    //
+    // Slice K1 (2.8.0): `--record` persists the audit snapshot as a
+    // project-memory decision at `.peaks/memory/audit-decisions/<slug>.md`.
+    // `--rid <id>` is an optional disambiguator for multiple audits on
+    // the same day (slug becomes `audit-decision-<date>-<rid>`).
+    // Per `peaks-loop-when-adding-a-new-subcommand-check-for-existing-top-level-first`
+    // and the dev-preference red line "Default-no on new CLI commands",
+    // we extend the existing command rather than register a new subcommand.
+    addJsonOption(audit
+        .command('static')
+        .description('Run the static audit (peaks-loop lint + optional ECC AgentShield subprocess). Per spec §5.3.')
+        .requiredOption('--project <path>', 'target project root')
+        .option('--enable-agent-shield', 'force-enable ECC AgentShield subprocess for this call (overrides preference)')
+        .option('--disable-agent-shield', 'force-disable ECC AgentShield subprocess for this call (overrides preference)')
+        .option('--record', 'persist the audit snapshot to .peaks/memory/audit-decisions/ as a project-memory decision')
+        .option('--rid <rid>', 'disambiguator for the decision record slug (used with --record; pairs multiple audits on the same day)')).action(async (options) => {
+        const validation = validateProjectRoot(options.project);
+        if (!validation.ok) {
+            printResult(io, fail('audit.static', validation.code, validation.message, emptyStaticAuditData(), ['Verify the project path exists and is a directory']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        // Resolve the flag override. `--enable-agent-shield` and
+        // `--disable-agent-shield` are mutually exclusive; we surface
+        // a 422 if both are passed.
+        if (options.enableAgentShield && options.disableAgentShield) {
+            printResult(io, fail('audit.static', 'FLAGS_CONFLICT', '`--enable-agent-shield` and `--disable-agent-shield` are mutually exclusive', emptyStaticAuditData(), ['Pass at most one of the two flags']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        // Slice K1: `--rid` is meaningful only with `--record`. Surface a 422
+        // when the user passes `--rid` without `--record` so the CLI fails
+        // loudly rather than silently ignoring the request id.
+        if (options.rid && !options.record) {
+            printResult(io, fail('audit.static', 'FLAGS_CONFLICT', '`--rid` requires `--record` (decision slug disambiguator has no effect without persistence)', emptyStaticAuditData(), ['Pass `--record` together with `--rid <id>`, or omit `--rid`']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            const result = runStaticAudit({
+                projectRoot: validation.projectRoot,
+                ...(options.enableAgentShield
+                    ? { enableAgentShield: true }
+                    : options.disableAgentShield
+                        ? { enableAgentShield: false }
+                        : {}),
+            });
+            // Persist the decision record when `--record` is set. The writer is
+            // idempotent at the slug level (same date+rid → same file); repeated
+            // runs overwrite. Failures here are surfaced as warnings so the
+            // primary audit JSON still reaches the caller.
+            let decision;
+            let recordWarning;
+            if (options.record) {
+                try {
+                    decision = writeAuditDecision(result.audit, {
+                        projectRoot: validation.projectRoot,
+                        ...(options.rid ? { rid: options.rid } : {})
+                    });
+                }
+                catch (writeError) {
+                    recordWarning = `Failed to write decision record: ${getErrorMessage(writeError)}`;
+                }
+            }
+            const data = {
+                audit: result.audit,
+                agentShield: result.agentShield,
+                ...(decision ? { decision } : {})
+            };
+            const nextActions = [];
+            // Per spec §5.3 + §7.2: when ECC is not installed, surface
+            // the canonical 4-option user opt-in UX (a/b/c/d) via
+            // nextActions. The peaks-loop `peaks audit static` CLI is
+            // non-interactive (JSON envelope by default), so the 4
+            // options are surfaced as machine-readable action strings
+            // — same pattern as understand-commands.ts `INSTALL_HINT`.
+            if (!result.agentShield.installed) {
+                nextActions.push('ECC AgentShield not installed. Pick one of the four options below:');
+                nextActions.push('  a) Install: run `npx ecc-agentshield --help` to install, then re-run `peaks audit static`.');
+                nextActions.push('  b) Skip this run: pass `--disable-agent-shield` to suppress the subprocess for this call.');
+                nextActions.push('  c) Skip forever: run `peaks preferences set agentShieldEnabled false` (writes to `.peaks/preferences.json`).');
+                nextActions.push('  d) Learn more: see docs/superpowers/specs/2026-06-11-peaks-loop-l1-l2-l3-redesign.md §5.3 + §7.2.');
+            }
+            if (result.agentShield.spawned && result.agentShield.findings.length > 0) {
+                nextActions.push(`${result.agentShield.findings.length} ECC findings merged into the audit. Review with \`peaks audit static --json\`.`);
+            }
+            if (decision) {
+                nextActions.push(`Decision record written: ${decision.filePath}`);
+                nextActions.push(`Index synced: ${decision.indexSynced ? 'yes' : 'no'} (memory hot.decision[] now includes this audit)`);
+            }
+            const warnings = recordWarning ? [...result.warnings, recordWarning] : [...result.warnings];
+            const envelope = ok('audit.static', data, warnings, nextActions);
+            printResult(io, envelope, options.json);
+        }
+        catch (error) {
+            printResult(io, fail('audit.static', 'SCANNER_FAILED', getErrorMessage(error), emptyStaticAuditData(), ['Inspect scanner logs and re-run with the same --project path']), options.json);
+            process.exitCode = 1;
+        }
+    });
+    // v2.14.0 Slice C Group G3: `peaks audit prose-ratio` — CI gate.
+    // Calls `peaks audit static --json` internally, parses the prose-only
+    // ratio, exits 1 if the ratio exceeds the target (default 5%).
+    // Rationale: a single CLI primitive for the CI gate; the underlying
+    // ratio lives in static-service.ts (computed via prose-ratio-calculator).
+    addJsonOption(audit
+        .command('prose-ratio')
+        .description('Compute the prose-only ratio (informational entries excluded). Exits 1 if ratio > target (default 5%).')
+        .requiredOption('--project <path>', 'target project root')
+        .option('--target <n>', 'maximum prose-only ratio (0-1, default 0.05)', '0.05')).action(async (options) => {
+        const validation = validateProjectRoot(options.project);
+        if (!validation.ok) {
+            printResult(io, fail('audit.prose-ratio', validation.code, validation.message, emptyProseRatioResult(), ['Verify the project path exists and is a directory']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        const target = Number.parseFloat(options.target);
+        if (!Number.isFinite(target) || target < 0 || target > 1) {
+            printResult(io, fail('audit.prose-ratio', 'INVALID_TARGET', `--target must be a number between 0 and 1 (got "${options.target}")`, emptyProseRatioResult(), ['Pass --target 0.05 (default) or another number in [0, 1]']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            const result = runStaticAudit({ projectRoot: validation.projectRoot });
+            const ratio = computeProseRatio(result.audit.audit, { target });
+            const envelope = ok('audit.prose-ratio', ratio, [], [
+                ratio.exceeds
+                    ? `Prose-only ratio ${(ratio.ratio * 100).toFixed(2)}% exceeds target ${(ratio.target * 100).toFixed(2)}% (${ratio.proseOnly}/${ratio.totalRedLines})`
+                    : `Prose-only ratio ${(ratio.ratio * 100).toFixed(2)}% within target ${(ratio.target * 100).toFixed(2)}% (${ratio.proseOnly}/${ratio.totalRedLines})`
+            ]);
+            printResult(io, envelope, options.json);
+            if (ratio.exceeds) {
+                process.exitCode = 1;
+            }
+        }
+        catch (error) {
+            printResult(io, fail('audit.prose-ratio', 'SCANNER_FAILED', getErrorMessage(error), emptyProseRatioResult(), ['Inspect scanner logs and re-run with the same --project path']), options.json);
+            process.exitCode = 1;
+        }
+    });
+    // Fix M1 (W5) — `peaks audit goal` CLI wrapper around `auditGoal()`.
+    // The service is correctly implemented but is NOT yet wired to a real
+    // LLM provider; this CLI exposes the route with a `stub` provider that
+    // returns a scaffold envelope. A follow-up slice will bind a real
+    // provider. Until then, non-stub providers fail loudly with
+    // `LLM_PROVIDER_NOT_IMPLEMENTED` so callers cannot silently no-op.
+    addJsonOption(audit
+        .command('goal')
+        .description('Audit a human need across 6 dimensions and propose a goal (peaks-audit primitive)')
+        .requiredOption('--project <path>', 'target project root')
+        .requiredOption('--need <text>', 'the human need to audit (becomes input.need for auditGoal())')
+        .option('--llm-provider <name>', 'LLM provider name (default: stub)', 'stub')).action(async (options) => {
+        const validation = validateProjectRoot(options.project);
+        if (!validation.ok) {
+            printResult(io, fail('audit.goal', validation.code, validation.message, emptyAuditGoalData(options.need, options.project), ['Verify the project path exists and is a directory']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        const provider = options.llmProvider ?? 'stub';
+        if (!isSupportedLlmProvider(provider)) {
+            printResult(io, fail('audit.goal', 'LLM_PROVIDER_NOT_IMPLEMENTED', `LLM provider "${provider}" is not implemented. Supported providers: ${SUPPORTED_LLM_PROVIDERS.join(', ')}.`, emptyAuditGoalData(options.need, validation.projectRoot), [
+                'Re-run with `--llm-provider stub` (default) to exercise the wired route.',
+                'Real provider binding is tracked as a follow-up slice; see peaks-audit skill notes.'
+            ]), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        // Stub provider: surface a structured "scaffold ready" envelope so the
+        // CLI route is wired and a CI test can verify it without a real LLM.
+        const data = {
+            status: 'scaffold-only',
+            serviceWired: true,
+            providerBinding: 'pending-follow-up-slice',
+            need: options.need,
+            projectRoot: validation.projectRoot,
+        };
+        const envelope = ok('audit.goal', data, [], [
+            'auditGoal() service is wired and reachable. The stub provider returns a scaffold envelope so CI can verify the route without a real LLM.',
+            'A follow-up slice will bind a real LLM provider; until then, non-stub providers fail loudly with `LLM_PROVIDER_NOT_IMPLEMENTED`.'
+        ]);
+        printResult(io, envelope, options.json);
+    });
+    // ---------------------------------------------------------------------------
+    // peaks audit artifact write — Slice 2026-06-26-audit-artifact-writer-generalization
+    //
+    // First-class CLI surface for the 4 audit artifact types. Replaces the
+    // 2026-06-22 "hand `git add` into .peaks/memory/" anti-pattern that left
+    // 4 orphan files. Each kind routes to exactly one writer in
+    // artifact-writer.ts; the writer enforces canonical frontmatter, so the
+    // memory-shape guard never fires for new writes.
+    // ---------------------------------------------------------------------------
+    const artifact = audit
+        .command('artifact')
+        .description('Manage audit artifacts (decision / prompt / machine-output / narrative) under .peaks/memory/');
+    addJsonOption(artifact
+        .command('write')
+        .description('Persist a single audit artifact to .peaks/memory/ via the artifact-writer (canonical frontmatter)')
+        .requiredOption('--project <path>', 'target project root')
+        .requiredOption('--kind <kind>', `artifact kind (${SUPPORTED_ARTIFACT_KINDS.join(' | ')})`)
+        .requiredOption('--input <path>', 'path to source file (markdown for prompt/narrative; JSON for machine-output)')
+        .option('--name <name>', 'display name (H1 in body); defaults to file basename')
+        .option('--description <text>', 'description field for frontmatter; defaults to a generic placeholder')
+        .option('--rid <id>', 'optional request id to disambiguate multiple writes on the same day')
+        .option('--dry-run', 'render the markdown but do not write to disk', false)).action((options) => {
+        const validation = validateProjectRoot(options.project);
+        if (!validation.ok) {
+            printResult(io, fail('audit.artifact.write', validation.code, validation.message, {
+                kind: 'narrative',
+                slug: '',
+                title: '',
+                date: '',
+                filePath: '',
+                memoryDir: '',
+                indexPath: '',
+                indexSynced: false,
+            }, ['Verify the project path exists and is a directory']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        if (!isSupportedArtifactKind(options.kind)) {
+            printResult(io, fail('audit.artifact.write', 'INVALID_KIND', `Unknown --kind "${options.kind}". Supported: ${SUPPORTED_ARTIFACT_KINDS.join(', ')}.`, {
+                kind: 'narrative',
+                slug: '',
+                title: '',
+                date: '',
+                filePath: '',
+                memoryDir: '',
+                indexPath: '',
+                indexSynced: false,
+            }, [
+                `Re-run with --kind <one of ${SUPPORTED_ARTIFACT_KINDS.join(' | ')}>`,
+                'See .peaks/memory/audit-artifact-convention.md for the 4 artifact types.',
+            ]), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        const inputAbs = resolve(options.input);
+        if (!existsSync(inputAbs)) {
+            printResult(io, fail('audit.artifact.write', 'INPUT_NOT_FOUND', `--input file not found: ${options.input}`, {
+                kind: options.kind,
+                slug: '',
+                title: '',
+                date: '',
+                filePath: '',
+                memoryDir: '',
+                indexPath: '',
+                indexSynced: false,
+            }, ['Verify the --input path is correct (relative paths resolve against cwd)']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        const baseName = options.name ?? options.input.split(/[\\/]/).pop() ?? 'untitled';
+        const description = options.description ??
+            `Audit artifact (${options.kind}) archived via peaks audit artifact write on ${new Date().toISOString().slice(0, 10)}.`;
+        const writeOpts = {
+            projectRoot: validation.projectRoot,
+            dryRun: options.dryRun === true,
+            ...(options.rid ? { rid: options.rid } : {}),
+        };
+        let record;
+        try {
+            switch (options.kind) {
+                case 'prompt': {
+                    const body = readFileSync(inputAbs, 'utf8');
+                    record = writePrompt({ name: baseName, description, body }, writeOpts);
+                    break;
+                }
+                case 'machine-output': {
+                    const json = readFileSync(inputAbs, 'utf8');
+                    record = writeMachineOutput({ name: baseName, description, json }, writeOpts);
+                    break;
+                }
+                case 'narrative': {
+                    const body = readFileSync(inputAbs, 'utf8');
+                    record = writeNarrative({ name: baseName, description, body }, writeOpts);
+                    break;
+                }
+                case 'decision': {
+                    // --kind decision requires JSON of `RedLineAudit` shape; for now
+                    // surface a clear error so callers don't silently write junk.
+                    printResult(io, fail('audit.artifact.write', 'KIND_DECISION_USE_STATIC_RECORD', `--kind decision should use 'peaks audit static --record' which writes a RedLineAudit snapshot. 'peaks audit artifact write --kind decision' is reserved for future direct-snapshot writes (not implemented yet).`, {
+                        kind: 'decision',
+                        slug: '',
+                        title: '',
+                        date: '',
+                        filePath: '',
+                        memoryDir: '',
+                        indexPath: '',
+                        indexSynced: false,
+                    }, ["Re-run with 'peaks audit static --record --project <root>' for RedLineAudit snapshots."]), options.json);
+                    process.exitCode = 1;
+                    return;
+                }
+                default: {
+                    // Unreachable: isSupportedArtifactKind already filtered.
+                    throw new Error(`unreachable: kind=${options.kind}`);
+                }
+            }
+        }
+        catch (err) {
+            printResult(io, fail('audit.artifact.write', 'WRITE_FAILED', getErrorMessage(err), {
+                kind: options.kind,
+                slug: '',
+                title: '',
+                date: '',
+                filePath: '',
+                memoryDir: '',
+                indexPath: '',
+                indexSynced: false,
+            }, ['Inspect the error message; for --kind machine-output ensure --input is valid JSON']), options.json);
+            process.exitCode = 1;
+            return;
+        }
+        printResult(io, ok('audit.artifact.write', record, [], [
+            `Artifact written via ${record.kind} writer.`,
+            record.indexSynced
+                ? 'Memory index regenerated; entry will appear in `peaks project memories` on next read.'
+                : 'Memory index NOT regenerated; run `peaks project memories --project <root>` to refresh.',
+        ]), options.json);
+    });
+}
+function emptyStaticAuditData() {
+    return {
+        audit: { totalRedLines: 0, cliBacked: 0, partial: 0, proseOnly: 0, audit: [], enforcerFindings: [] },
+        agentShield: {
+            spawned: false,
+            installed: false,
+            reason: 'flag-disabled',
+            findings: [],
+        },
+    };
+}
+function emptyAuditGoalData(need, projectRoot) {
+    return {
+        status: 'scaffold-only',
+        serviceWired: true,
+        providerBinding: 'pending-follow-up-slice',
+        need,
+        projectRoot,
+    };
+}
+function emptyProseRatioResult() {
+    return {
+        totalRedLines: 0,
+        cliBacked: 0,
+        partial: 0,
+        proseOnly: 0,
+        informational: 0,
+        ratio: 0,
+        target: 0.05,
+        exceeds: false,
+    };
+}

package/dist/cli/commands/autonomous-swarm-commands.d.ts

@@ -0,0 +1,12 @@
+import { Command } from 'commander';
+import { type ProgramIO } from '../cli-helpers.js';
+export type AutonomousPlanOptions = {
+    mode: string;
+    changeId: string;
+    goal: string;
+    maxWorkers?: string;
+    dryRun?: boolean;
+    json?: boolean;
+};
+export declare function runAutonomousSwarmPlan(io: ProgramIO, options: AutonomousPlanOptions): void;
+export declare function registerAutonomousSwarmCommands(program: Command, io: ProgramIO): void;

package/dist/cli/commands/autonomous-swarm-commands.js

@@ -0,0 +1,120 @@
+import { fail, ok } from 'peaks-loop-shared/result';
+import { getWorkspaceConfigForPath } from '../../services/config/config-service.js';
+import { getLocalArtifactPath } from '../../services/artifacts/workspace-service.js';
+import { findProjectRoot } from '../../services/config/config-safety.js';
+import { planAutonomousRdSwarm, buildAutonomousGoalPackage, buildResumeInstructions, } from '../../services/autonomous-swarm/autonomous-swarm-service.js';
+import { addJsonOption, getErrorMessage, printResult } from '../cli-helpers.js';
+import { mapServiceError } from './_cli-error-envelope.js';
+const SUPPORTED_AUTONOMOUS_MODES = ['code', 'team'];
+function isAutonomousMode(value) {
+    return SUPPORTED_AUTONOMOUS_MODES.includes(value);
+}
+function projectContext() {
+    const projectRoot = findProjectRoot(process.cwd()) ?? process.cwd();
+    const workspace = getWorkspaceConfigForPath(projectRoot);
+    return {
+        workspaceRoot: workspace ? getLocalArtifactPath(workspace) : projectRoot,
+    };
+}
+function autonomousWorkspaceRoot() {
+    return projectContext().workspaceRoot;
+}
+export function runAutonomousSwarmPlan(io, options) {
+    if (options.dryRun === false) {
+        printResult(io, fail('workflow.autonomous', 'NON_DRY_RUN_UNSUPPORTED', 'Only dry-run planning is supported', {}, ['Rerun with --dry-run or omit --no-dry-run']), options.json);
+        process.exitCode = 1;
+        return;
+    }
+    if (!isAutonomousMode(options.mode)) {
+        printResult(io, fail('workflow.autonomous', 'UNSUPPORTED_AUTONOMOUS_MODE', `Unsupported autonomous mode ${options.mode}`, {}, ['Use --mode code or --mode team']), options.json);
+        process.exitCode = 1;
+        return;
+    }
+    const maxWorkers = Number(options.maxWorkers ?? '40');
+    if (!Number.isInteger(maxWorkers) || maxWorkers < 1) {
+        printResult(io, fail('workflow.autonomous', 'INVALID_MAX_WORKERS', 'max-workers must be a positive integer', {}, ['Use --max-workers with a positive integer value']), options.json);
+        process.exitCode = 1;
+        return;
+    }
+    const workspaceRoot = autonomousWorkspaceRoot();
+    try {
+        // Validate inputs that the service enforces as throws so we surface
+        // them as typed envelope codes rather than generic INTERNAL_ERROR.
+        if (!options.goal.trim()) {
+            throw new Error('Goal must be non-empty');
+        }
+        const goalPackage = buildAutonomousGoalPackage({
+            changeId: options.changeId,
+            goal: options.goal,
+            mode: options.mode,
+            maxWorkers,
+            dryRun: true,
+            workspaceRoot,
+        });
+        const plan = planAutonomousRdSwarm({
+            changeId: options.changeId,
+            goal: options.goal,
+            mode: options.mode,
+            maxWorkers,
+            dryRun: true,
+            workspaceRoot,
+            requiresTechApproval: false,
+        });
+        const resumeInstructions = buildResumeInstructions(plan);
+        printResult(io, ok('workflow.autonomous', {
+            goalPackage,
+            capabilityReuse: plan.capabilityReuse,
+            checkpoints: plan.checkpoints,
+            workerQueue: plan.workerQueue,
+            evidence: plan.evidence,
+            artifactRoot: plan.artifactRoot,
+            gateStatus: plan.gateStatus,
+            blockedReasons: plan.blockedReasons,
+            nextActions: plan.nextActions,
+            resumeInstructions,
+            autonomyMode: plan.autonomyMode,
+            available: plan.available,
+        }), options.json);
+    }
+    catch (error) {
+        const mapping = mapServiceError(error);
+        // Re-label change-id validation errors so the envelope code matches
+        // the typed `code` we want to surface to the user (rather than the
+        // generic INTERNAL_ERROR fallback).
+        if (error instanceof Error && /changeId|change-id/.test(error.message)) {
+            if (error.message.includes('empty')) {
+                printResult(io, fail('workflow.autonomous', 'change-id-empty', error.message, {}, ['Provide a change-id matching [A-Za-z0-9][A-Za-z0-9._-]*']), options.json);
+            }
+            else {
+                printResult(io, fail('workflow.autonomous', 'change-id-format', error.message, {}, ['Provide a change-id matching [A-Za-z0-9][A-Za-z0-9._-]*']), options.json);
+            }
+            process.exitCode = 1;
+            return;
+        }
+        printResult(io, fail('workflow.autonomous', mapping.code, getErrorMessage(error), {}, [...mapping.nextActions]), options.json);
+        process.exitCode = 1;
+    }
+}
+function addAutonomousPlanOptions(command) {
+    return addJsonOption(command
+        .description('Plan an autonomous RD swarm dry-run (slice rid-014).')
+        .requiredOption('--mode <mode>', 'autonomous mode: code or team')
+        .requiredOption('--change-id <id>', 'change id matching [A-Za-z0-9][A-Za-z0-9._-]*')
+        .requiredOption('--goal <goal>', 'planning goal')
+        .option('--max-workers <count>', 'maximum worker count', '40')
+        .option('--dry-run', 'preview without writing files', true)
+        .option('--no-dry-run', 'unsupported: do not execute autonomous planning from this CLI'));
+}
+export function registerAutonomousSwarmCommands(program, io) {
+    // Register the new rid-014 dry-run planner under
+    // `peaks workflow autonomous-swarm` (the existing `peaks workflow
+    // autonomous` registration owns the bare `autonomous` name and is
+    // untouched). The legacy `registerSwarmCommands` and
+    // `registerTechCommands` calls in `workflow-commands.ts` are
+    // byte-for-byte untouched.
+    const workflow = program.commands.find((candidate) => candidate.name() === 'workflow');
+    if (workflow) {
+        addAutonomousPlanOptions(workflow.command('autonomous-swarm')).action((options) => runAutonomousSwarmPlan(io, options));
+    }
+    addAutonomousPlanOptions(program.command('autonomous-swarm')).action((options) => runAutonomousSwarmPlan(io, options));
+}

package/dist/cli/commands/bee-commands.d.ts

@@ -0,0 +1,26 @@
+/**
+ * peaks bee * CLI — M7 (spec §7A.2 / §10 RL-9 / AC-24 / AC-25 / AC-26).
+ *
+ * Adds:
+ *   peaks bee export --bee <id> --out <path.tar.gz>
+ *   peaks bee import --in <path.tar.gz> [--as <bee-name>]
+ *
+ * The bee-side counterparts of the loop-side `peaks loop export /
+ * import`. Same hard rules:
+ *
+ *   - source `shareable=false` blocks export at the CLI layer.
+ *   - bundle lands as `candidate`; promotion to `stable` requires
+ *     an `evolution_evaluation` row with an independent
+ *     `evaluator_id` (see `peaks evolution evaluate`).
+ *
+ * The bee bundle captures the bee's inline manifest/segment/file/change
+ * rows so the receiver can re-materialize the full bee + any
+ * loop↔bee relations that referenced it + any evidence briefs that
+ * touched it.
+ *
+ * The `peaks skill sediment export / import` alias lives in
+ * `src/cli/commands/skill-sediment.ts` for one release cycle.
+ */
+import { Command } from 'commander';
+import { type ProgramIO } from '../cli-helpers.js';
+export declare function registerBeeCommands(program: Command, io: ProgramIO): void;