peaks-loop 4.0.0-beta.9 → 4.0.3

package/dist/services/context/dispatch-context-guard.js

@@ -1,192 +0,0 @@
-/**
- * G7.4 path safety + G8 path safety — R-2 symlink/junction guard for
- * sub-agent artifact + shared channel paths.
- *
- * Slice #009's `assertSafeDispatchRecordPath` covers the dispatch record
- * path. This module covers two adjacent paths under the same canonical
- * root (`.peaks/_sub_agents/<sid>/`):
- *
- *   - `artifacts/<rid>-<role>-<idx>.<ext>`   (G7 write-artifact)
- *   - `shared/<batchId>.json`                (G8 share / shared-read)
- *
- * Both reuse the same R-2 logic: reject `..` segments BEFORE the OS
- * resolver collapses them (POSIX normalize silently drops `..`), reject
- * absolute paths that escape the canonical root, resolve symlinks via
- * `realpathSync` and re-check the resolved path.
- *
- * The canonical-root pattern is intentionally identical to the slice #009
- * helper, so future audits can reuse one mental model: "all sub-agent
- * state files must live under `.peaks/_sub_agents/<sid>/` and pass the
- * same R-2 guard."
- */
-import { realpathSync } from 'node:fs';
-import { dirname, isAbsolute, relative, resolve } from 'node:path';
-const SUB_AGENTS_DIR = '_sub_agents';
-const ARTIFACTS_SUBDIR = 'artifacts';
-const SHARED_SUBDIR = 'shared';
-const ARTIFACT_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*\.[A-Za-z0-9]+$/;
-const BATCH_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-/** Build the canonical artifact path for a given session/rid/role/idx/ext. */
-export function artifactPath(projectRoot, sid, rid, role, idx, ext = 'md') {
-    if (typeof role !== 'string' || role.length === 0) {
-        throw new Error('artifactPath: role must be non-empty');
-    }
-    if (!Number.isInteger(idx) || idx < 1) {
-        throw new Error(`artifactPath: idx must be positive integer (got ${idx})`);
-    }
-    const safeSid = sanitizeSegment(sid, 'sessionId');
-    const safeRid = sanitizeSegment(rid, 'requestId');
-    const safeRole = sanitizeSegment(role, 'role');
-    const safeExt = ext.replace(/[^A-Za-z0-9]/g, '');
-    if (safeExt.length === 0) {
-        throw new Error(`artifactPath: ext must be alphanumeric (got "${ext}")`);
-    }
-    return resolve(projectRoot, '.peaks', SUB_AGENTS_DIR, safeSid, ARTIFACTS_SUBDIR, `${safeRid}-${safeRole}-${String(idx).padStart(3, '0')}.${safeExt}`);
-}
-/** Build the canonical shared channel path. */
-export function sharedChannelPath(projectRoot, sid, rid, batchId) {
-    if (typeof batchId !== 'string' || batchId.length === 0) {
-        throw new Error('sharedChannelPath: batchId must be non-empty');
-    }
-    const safeSid = sanitizeSegment(sid, 'sessionId');
-    const safeRid = sanitizeSegment(rid, 'requestId');
-    if (!BATCH_ID_PATTERN.test(batchId)) {
-        throw new Error(`sharedChannelPath: batchId must match ${BATCH_ID_PATTERN} (got "${batchId}")`);
-    }
-    return resolve(projectRoot, '.peaks', SUB_AGENTS_DIR, safeSid, SHARED_SUBDIR, `${safeRid}-${batchId}.json`);
-}
-/**
- * Assert that `artifactPath` lives under
- * `projectRoot/.peaks/_sub_agents/<sid>/artifacts/`. Rejects
- * symlink/junction escapes and `..` segments.
- *
- * Throws an Error with `.code = 'INVALID_ARTIFACT_PATH'` on rejection.
- */
-export function assertSafeArtifactPath(artifactPathInput, projectRoot) {
-    if (!isAbsolute(artifactPathInput)) {
-        throw invalidPathError(artifactPathInput, 'must be absolute');
-    }
-    const rawSegments = artifactPathInput.split(/[\\/]/);
-    if (rawSegments.includes('..')) {
-        throw invalidPathError(artifactPathInput, 'must not contain .. segments');
-    }
-    const expected = resolve(projectRoot, '.peaks', SUB_AGENTS_DIR);
-    const rel = relative(expected, artifactPathInput);
-    if (rel.startsWith('..') || isAbsolute(rel)) {
-        throw invalidPathError(artifactPathInput, 'must be under .peaks/_sub_agents/');
-    }
-    let realArtifact;
-    let realRoot;
-    try {
-        const parent = dirname(artifactPathInput);
-        const realParent = realpathSync(parent);
-        realArtifact = resolve(realParent, artifactPathInput.slice(parent.length + 1));
-        realRoot = realpathSync(projectRoot);
-    }
-    catch {
-        const fallback = resolve(projectRoot, '.peaks', SUB_AGENTS_DIR);
-        const rel2 = relative(fallback, artifactPathInput);
-        if (rel2.startsWith('..') || isAbsolute(rel2)) {
-            throw invalidPathError(artifactPathInput, 'must be under .peaks/_sub_agents/');
-        }
-        return artifactPathInput;
-    }
-    const realRel = relative(realRoot, realArtifact);
-    if (realRel.startsWith('..') || isAbsolute(realRel)) {
-        throw invalidPathError(artifactPathInput, 'symlink/junction escapes project root');
-    }
-    const realExpected = resolve(realRoot, '.peaks', SUB_AGENTS_DIR);
-    const realRelExpected = relative(realExpected, realArtifact);
-    if (realRelExpected.startsWith('..') || isAbsolute(realRelExpected)) {
-        throw invalidPathError(artifactPathInput, 'must be under .peaks/_sub_agents/');
-    }
-    return realArtifact;
-}
-/**
- * Assert that `channelPath` lives under
- * `projectRoot/.peaks/_sub_agents/<sid>/shared/`. Same R-2 logic as
- * `assertSafeArtifactPath` but with a different canonical subdir.
- *
- * Throws an Error with `.code = 'INVALID_SHARED_CHANNEL_PATH'` on rejection.
- */
-export function assertSafeSharedChannelPath(channelPathInput, projectRoot) {
-    if (!isAbsolute(channelPathInput)) {
-        throw invalidPathErrorShared(channelPathInput, 'must be absolute');
-    }
-    const rawSegments = channelPathInput.split(/[\\/]/);
-    if (rawSegments.includes('..')) {
-        throw invalidPathErrorShared(channelPathInput, 'must not contain .. segments');
-    }
-    const expected = resolve(projectRoot, '.peaks', SUB_AGENTS_DIR);
-    const rel = relative(expected, channelPathInput);
-    if (rel.startsWith('..') || isAbsolute(rel)) {
-        throw invalidPathErrorShared(channelPathInput, 'must be under .peaks/_sub_agents/shared/');
-    }
-    let realChannel;
-    let realRoot;
-    try {
-        const parent = dirname(channelPathInput);
-        const realParent = realpathSync(parent);
-        realChannel = resolve(realParent, channelPathInput.slice(parent.length + 1));
-        realRoot = realpathSync(projectRoot);
-    }
-    catch {
-        const fallback = resolve(projectRoot, '.peaks', SUB_AGENTS_DIR);
-        const rel2 = relative(fallback, channelPathInput);
-        if (rel2.startsWith('..') || isAbsolute(rel2)) {
-            throw invalidPathErrorShared(channelPathInput, 'must be under .peaks/_sub_agents/shared/');
-        }
-        return channelPathInput;
-    }
-    const realRel = relative(realRoot, realChannel);
-    if (realRel.startsWith('..') || isAbsolute(realRel)) {
-        throw invalidPathErrorShared(channelPathInput, 'symlink/junction escapes project root');
-    }
-    const realExpected = resolve(realRoot, '.peaks', SUB_AGENTS_DIR);
-    const realRelExpected = relative(realExpected, realChannel);
-    if (realRelExpected.startsWith('..') || isAbsolute(realRelExpected)) {
-        throw invalidPathErrorShared(channelPathInput, 'must be under .peaks/_sub_agents/shared/');
-    }
-    return realChannel;
-}
-/**
- * Soft-warn check on the artifact file name pattern. Returns null if
- * the name matches `<rid>-<role>-<idx>.<ext>`, otherwise returns a
- * warning string. Does NOT reject (the path is still in the canonical
- * dir; the warning is for human/audit readability per G7.4.c).
- */
-export function checkArtifactNameConvention(artifactPathInput) {
-    const base = artifactPathInput.split(/[\\/]/).pop() ?? '';
-    if (ARTIFACT_NAME_PATTERN.test(base)) {
-        return null;
-    }
-    return `Artifact file name does not match <rid>-<role>-<idx>.<ext> convention: ${base}`;
-}
-function sanitizeSegment(value, field) {
-    if (typeof value !== 'string' || value.length === 0) {
-        throw new Error(`${field} must be non-empty`);
-    }
-    if (value.length > 256) {
-        throw new Error(`${field} must be ≤ 256 chars (got ${value.length})`);
-    }
-    for (let i = 0; i < value.length; i += 1) {
-        const code = value.charCodeAt(i);
-        if (code <= 0x20 || code === 0x7F) {
-            throw new Error(`${field} must not contain whitespace or control characters`);
-        }
-    }
-    if (value.includes('..') || value.includes('/') || value.includes('\\')) {
-        throw new Error(`${field} must not contain '..' or path separators`);
-    }
-    return value;
-}
-function invalidPathError(path, reason) {
-    const e = new Error(`Invalid artifact path: ${reason} (path: ${path})`);
-    e.code = 'INVALID_ARTIFACT_PATH';
-    return e;
-}
-function invalidPathErrorShared(path, reason) {
-    const e = new Error(`Invalid shared channel path: ${reason} (path: ${path})`);
-    e.code = 'INVALID_SHARED_CHANNEL_PATH';
-    return e;
-}

package/dist/services/context/shared-channel.d.ts

@@ -1,93 +0,0 @@
-export interface SharedChannelEntry {
-    readonly version: 1;
-    readonly at: string;
-    readonly from: string;
-    readonly key: string;
-    readonly value: Readonly<Record<string, unknown>>;
-    readonly valueSize: number;
-}
-export interface SharedChannel {
-    readonly batchId: string;
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    readonly entries: Readonly<Record<string, SharedChannelEntry>>;
-}
-export declare const SHARED_CHANNEL_MAX_VALUE_BYTES: number;
-export declare const SHARED_CHANNEL_SOFT_VALUE_WARN = 1024;
-export declare const SHARED_CHANNEL_MAX_FILE_BYTES: number;
-export declare const SHARED_CHANNEL_TTL_DAYS = 30;
-export type WriteSharedEntryResult = {
-    readonly ok: true;
-    readonly entry: SharedChannelEntry;
-    readonly channelSize: number;
-    readonly lastWriteWins: boolean;
-    readonly softWarning: boolean;
-} | {
-    readonly ok: false;
-    readonly code: 'VALUE_TOO_LARGE' | 'INVALID_BATCH_ID' | 'WRITE_ERROR';
-    readonly message: string;
-};
-/**
- * Write a shared entry to the per-batch channel file. Atomic-write
- * (tmp + rename). Returns the new entry + channel size + last-write-wins
- * flag (true if the key already existed; the new value overwrites).
- *
- * RL-25 size limit: `value ≥ 64KB` is hard-rejected with `VALUE_TOO_LARGE`.
- * `value > 1KB and < 64KB` is a soft warning (returned in the result).
- */
-export declare function writeSharedEntry(opts: {
-    projectRoot: string;
-    sid: string;
-    rid: string;
-    batchId: string;
-    key: string;
-    from: string;
-    value: Record<string, unknown>;
-}): WriteSharedEntryResult;
-/**
- * Read the shared channel for a batch. Returns the channel with all
- * matching entries. Filters: `--since` (ISO8601) and `--key` (glob
- * pattern; simple `*` wildcard, no regex).
- *
- * If the channel file does not exist, returns an empty channel
- * (this is the dispatcher's "fresh batch" view).
- */
-export declare function readSharedChannel(opts: {
-    projectRoot: string;
-    sid: string;
-    rid: string;
-    batchId: string;
-    since?: string;
-    keyPattern?: string;
-}): SharedChannel;
-/**
- * Garbage-collect a single channel. Returns true if the file was
- * deleted, false if it did not exist.
- */
-export declare function gcChannel(opts: {
-    projectRoot: string;
-    sid: string;
-    rid: string;
-    batchId: string;
-}): boolean;
-/**
- * Check if a channel file is older than `SHARED_CHANNEL_TTL_DAYS` days
- * and should be GC'd as an orphan. Returns true if file is missing
- * (already GC'd) or older than TTL.
- */
-export declare function isOrphanChannel(opts: {
-    projectRoot: string;
-    sid: string;
-    rid: string;
-    batchId: string;
-    now?: Date;
-}): boolean;
-/**
- * Compile a simple key pattern with `*` wildcards to a matcher. Only
- * `*` is special; everything else is a literal. `*` matches zero or
- * more characters. Examples:
- *   "rd.*"       matches "rd.completed", "rd.found-blocker"
- *   "*.completed" matches "rd.completed", "qa.completed"
- *   "*"           matches everything
- */
-export declare function compileKeyPattern(pattern: string): (key: string) => boolean;

package/dist/services/context/shared-channel.js

@@ -1,308 +0,0 @@
-/**
- * G8 — cross sub-agent shared channel (RL-23..RL-26, AC-47..AC-49).
- *
- * Dispatcher-mediated indirect signal: sub-agent A writes a shared entry,
- * the dispatcher stores it in a per-batch JSON file, sub-agent B (still
- * in flight) reads it. A and B never directly talk. This is the
- * pseudo-swarm property 3 upgrade; it is NOT peer-to-peer messaging.
- *
- * Path convention (G8.3):
- *   `.peaks/_sub_agents/<sid>/shared/<rid>-<batchId>.json`
- *
- * The file is atomic-write (tmp + rename). Last-write-wins by key. Value
- * size limit: ≤ 1KB soft warn, ≥ 64KB hard reject. File size cap: 1MB
- * with LRU eviction.
- *
- * See: `.peaks/memory/sub-agent-shared-channel-cross-completion.md` for
- * the full G8 rule.
- */
-import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from 'node:fs';
-import { dirname } from 'node:path';
-import { assertSafeSharedChannelPath, sharedChannelPath } from './dispatch-context-guard.js';
-import { withFileLockSync } from '../filesystem/file-lock.js';
-export const SHARED_CHANNEL_MAX_VALUE_BYTES = 64 * 1024; // 64KB hard reject
-export const SHARED_CHANNEL_SOFT_VALUE_WARN = 1024; // 1KB soft warning
-export const SHARED_CHANNEL_MAX_FILE_BYTES = 1024 * 1024; // 1MB LRU cap
-export const SHARED_CHANNEL_TTL_DAYS = 30; // 30-day TTL on orphan channels
-/**
- * Write a shared entry to the per-batch channel file. Atomic-write
- * (tmp + rename). Returns the new entry + channel size + last-write-wins
- * flag (true if the key already existed; the new value overwrites).
- *
- * RL-25 size limit: `value ≥ 64KB` is hard-rejected with `VALUE_TOO_LARGE`.
- * `value > 1KB and < 64KB` is a soft warning (returned in the result).
- */
-export function writeSharedEntry(opts) {
-    if (typeof opts.key !== 'string' || opts.key.length === 0) {
-        return { ok: false, code: 'INVALID_BATCH_ID', message: 'key must be non-empty' };
-    }
-    if (typeof opts.from !== 'string' || opts.from.length === 0) {
-        return { ok: false, code: 'INVALID_BATCH_ID', message: 'from must be non-empty' };
-    }
-    if (opts.value === null || typeof opts.value !== 'object' || Array.isArray(opts.value)) {
-        return {
-            ok: false,
-            code: 'INVALID_BATCH_ID',
-            message: 'value must be a JSON object (not array, not primitive)'
-        };
-    }
-    const valueSize = Buffer.byteLength(JSON.stringify(opts.value), 'utf8');
-    if (valueSize >= SHARED_CHANNEL_MAX_VALUE_BYTES) {
-        return {
-            ok: false,
-            code: 'VALUE_TOO_LARGE',
-            message: `value size ${valueSize} bytes exceeds limit ${SHARED_CHANNEL_MAX_VALUE_BYTES} bytes (RL-25)`
-        };
-    }
-    const softWarning = valueSize > SHARED_CHANNEL_SOFT_VALUE_WARN;
-    const channelFile = sharedChannelPath(opts.projectRoot, opts.sid, opts.rid, opts.batchId);
-    assertSafeSharedChannelPath(channelFile, opts.projectRoot);
-    // Slice 2026-06-23-audit-3rd #2: the read-modify-write sequence below
-    // is wrapped in withFileLockSync to prevent lost updates from two
-    // concurrent `peaks sub-agent share` calls landing on the same batch.
-    // Without the lock, the second writer's read sees a stale channel,
-    // and its renameSync silently overwrites the first writer's entry.
-    return withFileLockSync(channelFile, () => {
-        let channel;
-        try {
-            channel = readChannelOrEmpty(channelFile, opts.batchId);
-        }
-        catch (err) {
-            return {
-                ok: false,
-                code: 'WRITE_ERROR',
-                message: `failed to read existing channel: ${err.message}`
-            };
-        }
-        const lastWriteWins = Object.prototype.hasOwnProperty.call(channel.entries, opts.key);
-        // LRU eviction: if writing would push the file over the 1MB cap,
-        // evict oldest entries until the new write fits.
-        const entry = {
-            version: 1,
-            at: new Date().toISOString(),
-            from: opts.from,
-            key: opts.key,
-            value: Object.freeze({ ...opts.value }),
-            valueSize
-        };
-        const projectedChannel = {
-            ...channel,
-            updatedAt: entry.at,
-            entries: { ...channel.entries, [opts.key]: entry }
-        };
-        const projectedSize = JSON.stringify(projectedChannel).length;
-        let lruEvicted = 0;
-        if (projectedSize > SHARED_CHANNEL_MAX_FILE_BYTES) {
-            const sortedKeys = Object.keys(projectedChannel.entries).sort((a, b) => {
-                const ea = projectedChannel.entries[a];
-                const eb = projectedChannel.entries[b];
-                if (!ea || !eb)
-                    return 0;
-                return ea.at.localeCompare(eb.at);
-            });
-            let working = projectedChannel;
-            while (JSON.stringify(working).length > SHARED_CHANNEL_MAX_FILE_BYTES &&
-                sortedKeys.length > 0) {
-                const oldestKey = sortedKeys.shift();
-                if (oldestKey === opts.key) {
-                    // Don't evict the entry we just wrote.
-                    break;
-                }
-                const nextEntries = {};
-                for (const [k, v] of Object.entries(working.entries)) {
-                    if (k !== oldestKey) {
-                        nextEntries[k] = v;
-                    }
-                }
-                working = { ...working, entries: nextEntries };
-                lruEvicted += 1;
-            }
-            try {
-                writeAtomic(channelFile, working);
-            }
-            catch (err) {
-                return {
-                    ok: false,
-                    code: 'WRITE_ERROR',
-                    message: `failed to write channel after LRU eviction: ${err.message}`
-                };
-            }
-            return {
-                ok: true,
-                entry,
-                channelSize: JSON.stringify(working).length,
-                lastWriteWins,
-                softWarning
-            };
-        }
-        try {
-            writeAtomic(channelFile, projectedChannel);
-        }
-        catch (err) {
-            return {
-                ok: false,
-                code: 'WRITE_ERROR',
-                message: `failed to write channel: ${err.message}`
-            };
-        }
-        // lruEvicted is 0 here; expose the count through the size of the
-        // returned channel for caller diagnostics.
-        void lruEvicted;
-        return {
-            ok: true,
-            entry,
-            channelSize: projectedSize,
-            lastWriteWins,
-            softWarning
-        };
-    });
-}
-/**
- * Read the shared channel for a batch. Returns the channel with all
- * matching entries. Filters: `--since` (ISO8601) and `--key` (glob
- * pattern; simple `*` wildcard, no regex).
- *
- * If the channel file does not exist, returns an empty channel
- * (this is the dispatcher's "fresh batch" view).
- */
-export function readSharedChannel(opts) {
-    const channelFile = sharedChannelPath(opts.projectRoot, opts.sid, opts.rid, opts.batchId);
-    assertSafeSharedChannelPath(channelFile, opts.projectRoot);
-    const channel = readChannelOrEmpty(channelFile, opts.batchId);
-    const since = opts.since;
-    const pattern = opts.keyPattern;
-    if (!since && !pattern) {
-        return channel;
-    }
-    const filteredEntries = {};
-    const matcher = pattern ? compileKeyPattern(pattern) : null;
-    for (const [k, v] of Object.entries(channel.entries)) {
-        if (since && v.at < since)
-            continue;
-        if (matcher && !matcher(k))
-            continue;
-        filteredEntries[k] = v;
-    }
-    return { ...channel, entries: filteredEntries };
-}
-/**
- * Garbage-collect a single channel. Returns true if the file was
- * deleted, false if it did not exist.
- */
-export function gcChannel(opts) {
-    const channelFile = sharedChannelPath(opts.projectRoot, opts.sid, opts.rid, opts.batchId);
-    if (!existsSync(channelFile)) {
-        return false;
-    }
-    // Best-effort delete; R-2 guard not strictly needed (we built the path)
-    // but kept for safety.
-    assertSafeSharedChannelPath(channelFile, opts.projectRoot);
-    try {
-        unlinkSync(channelFile);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Check if a channel file is older than `SHARED_CHANNEL_TTL_DAYS` days
- * and should be GC'd as an orphan. Returns true if file is missing
- * (already GC'd) or older than TTL.
- */
-export function isOrphanChannel(opts) {
-    const channelFile = sharedChannelPath(opts.projectRoot, opts.sid, opts.rid, opts.batchId);
-    if (!existsSync(channelFile)) {
-        return true;
-    }
-    const s = statSync(channelFile);
-    const now = opts.now ?? new Date();
-    const ageMs = now.getTime() - s.mtimeMs;
-    const ttlMs = SHARED_CHANNEL_TTL_DAYS * 24 * 60 * 60 * 1000;
-    return ageMs > ttlMs;
-}
-// ─── internals ───────────────────────────────────────────────────────
-function readChannelOrEmpty(channelFile, batchId) {
-    if (!existsSync(channelFile)) {
-        const now = new Date().toISOString();
-        return { batchId, createdAt: now, updatedAt: now, entries: {} };
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(readFileSync(channelFile, 'utf8'));
-    }
-    catch {
-        const now = new Date().toISOString();
-        return { batchId, createdAt: now, updatedAt: now, entries: {} };
-    }
-    if (!isObject(parsed)) {
-        const now = new Date().toISOString();
-        return { batchId, createdAt: now, updatedAt: now, entries: {} };
-    }
-    const obj = parsed;
-    const batchIdField = typeof obj.batchId === 'string' ? obj.batchId : batchId;
-    const createdAt = typeof obj.createdAt === 'string' ? obj.createdAt : new Date().toISOString();
-    const updatedAt = typeof obj.updatedAt === 'string' ? obj.updatedAt : createdAt;
-    const entriesField = isObject(obj.entries) ? obj.entries : {};
-    const entries = {};
-    for (const [k, v] of Object.entries(entriesField)) {
-        if (isValidEntry(v)) {
-            entries[k] = v;
-        }
-    }
-    return { batchId: batchIdField, createdAt, updatedAt, entries };
-}
-function isValidEntry(v) {
-    if (!isObject(v))
-        return false;
-    // Slice 2026-06-23-audit-4th #E2: pre-versioning records (no
-    // `version` field) are still accepted on read for backward compat.
-    // The writer stamps `version: 1` going forward; readers default
-    // missing/legacy entries to version 1 in memory.
-    if (!('version' in v) || v.version === 1) {
-        return (typeof v.at === 'string' &&
-            typeof v.from === 'string' &&
-            typeof v.key === 'string' &&
-            isObject(v.value) &&
-            typeof v.valueSize === 'number');
-    }
-    // Future versions: read-side handler can branch on `v.version` once
-    // v2 lands. For now, anything other than 1 is rejected.
-    return false;
-}
-function isObject(v) {
-    return typeof v === 'object' && v !== null && !Array.isArray(v);
-}
-function writeAtomic(path, channel) {
-    const dir = dirname(path);
-    // Slice 2026-06-23-audit-3rd #11: skip mkdirSync when the dir already
-    // exists. The `recursive: true` mkdir is a syscall (~50µs on macOS,
-    // ~10ms on cold Windows cache); the `existsSync` short-circuit saves
-    // it on the hot path (every `peaks sub-agent share` + every
-    // `peaks sub-agent heartbeat`).
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
-    const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
-    writeFileSync(tmp, JSON.stringify(channel, null, 2) + '\n', 'utf8');
-    renameSync(tmp, path);
-}
-/**
- * Compile a simple key pattern with `*` wildcards to a matcher. Only
- * `*` is special; everything else is a literal. `*` matches zero or
- * more characters. Examples:
- *   "rd.*"       matches "rd.completed", "rd.found-blocker"
- *   "*.completed" matches "rd.completed", "qa.completed"
- *   "*"           matches everything
- */
-export function compileKeyPattern(pattern) {
-    if (pattern === '*') {
-        return () => true;
-    }
-    const escaped = pattern
-        .split('*')
-        .map((part) => part.replace(/[.+?^${}()|[\]\\]/g, '\\$&'))
-        .join('.*');
-    const re = new RegExp(`^${escaped}$`);
-    return (key) => re.test(key);
-}

package/dist/services/filesystem/file-lock.d.ts

@@ -1,11 +0,0 @@
-export declare class LockTimeoutError extends Error {
-    readonly code = "LOCK_TIMEOUT";
-    readonly lockPath: string;
-    constructor(lockPath: string, attempts: number);
-}
-/**
- * Run `fn` while holding an exclusive lock on a sidecar file at
- * `<filePath>.lock`. The lock is released in `finally` (close fd +
- * unlink lock file). Throws LockTimeoutError after MAX_LOCK_RETRIES.
- */
-export declare function withFileLockSync<T>(filePath: string, fn: () => T): T;