peaks-loop 4.0.0-beta → 4.0.0-beta.10

package/dist/src/cli/program.js

@@ -1,368 +0,0 @@
-import { readdirSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { Command } from 'commander';
-import { skillsDir, repoRoot } from '../shared/paths.js';
-import { CLI_VERSION } from '../shared/version.js';
-import { registerCoreAndArtifactCommands } from './commands/core-artifact-commands.js';
-import { registerWorkflowCommands } from './commands/workflow-commands.js';
-import { registerCapabilityWorkerConfigAndSCCommands } from './commands/capability-worker-config-sc-commands.js';
-import { registerCodegraphCommands } from './commands/codegraph-commands.js';
-import { registerOpenSpecCommands } from './commands/openspec-commands.js';
-import { registerPerfCommands } from './commands/perf-commands.js';
-import { registerPreferencesCommands } from './commands/preferences-commands.js';
-// Slice #014: peaks progress * CLI surface deleted (replaced by sub-agent
-// dispatch + heartbeat, slice #009 + #010). Sub-agent progress is
-// surfaced via `peaks sub-agent dispatch|heartbeat|share`.
-import { registerProjectCommands } from './commands/project-commands.js';
-import { registerPrdCommands } from './commands/prd-commands.js';
-import { registerRequestCommands } from './commands/request-commands.js';
-import { registerRetrospectiveCommands } from './commands/retrospective-commands.js';
-import { registerScanCommands } from './commands/scan-commands.js';
-import { registerSliceCommands } from './commands/slice-commands.js';
-import { registerSopCommands } from './commands/sop-commands.js';
-// v2.15.0 slice 002 AC-3: feedback-promotion CLI (`peaks feedback promote`
-// + `peaks feedback check-unpromoted`). See
-// `sops/feedback-promotion-sop.md`.
-import { registerFeedbackCommands } from './commands/feedback-commands.js';
-import { registerForkCommands } from './commands/fork-commands.js';
-import { registerImpactCommands } from './commands/impact-commands.js';
-import { registerSmokeCommands } from './commands/smoke-commands.js';
-import { registerReleaseCommands } from './commands/release-commands.js';
-import { registerPrdBlocksCommands } from './commands/prd-blocks-commands.js';
-import { registerUserTouchpointCommands } from './commands/user-touchpoint-commands.js';
-import { registerSliceReviewCommands } from './commands/slice-review-commands.js';
-import { registerQaBusinessReviewCommands } from './commands/qa-business-review-commands.js';
-import { registerSliceIntegrateCommands } from './commands/slice-integrate-commands.js';
-import { registerDocCommands } from './commands/doc-commands.js';
-import { registerLegacyCommands } from './commands/legacy-commands.js';
-import { registerRoleCommands } from './commands/role-commands.js';
-import { registerComplexityCommands } from './commands/complexity-commands.js';
-import { registerSubAgentCommands } from './commands/sub-agent-commands.js';
-import { registerSubAgentDispatchGuard } from './commands/sub-agent-dispatch-guard.js';
-import { registerGateCommands } from './commands/gate-commands.js';
-import { registerHookHandleCommand } from './commands/hook-handle.js';
-import { registerHooksCommands } from './commands/hooks-commands.js';
-import { registerStatusLineCommands } from './commands/statusline-commands.js';
-import { registerUnderstandCommands } from './commands/understand-commands.js';
-import { registerWorkspaceCommands } from './commands/workspace-commands.js';
-import { registerWorkflowPlanCommands } from './commands/workflow-plan-commands.js';
-import { registerAuditCommands } from './commands/audit-commands.js';
-import { registerFinalReviewCommands } from './commands/final-review-commands.js';
-import { registerClassifyCommands } from './commands/classify-classify-commands.js';
-import { registerContextCommands } from './commands/context-commands.js';
-import { registerContractCommands } from './commands/contract-commands.js';
-import { registerSkillConformanceCommands } from './commands/skill-conformance-commands.js';
-import { registerLoopCommands } from './commands/loop-commands.js';
-import { registerWorkflowEvalCommands } from './commands/loop-eval-commands.js';
-import { registerAgentCommands } from './commands/agent-commands.js';
-import { registerUpgradeCommands } from './commands/upgrade-commands.js';
-import { registerCodeReviewCommands } from './commands/code-review-commands.js';
-import { registerSecurityAuditCommands } from './commands/security-audit-commands.js';
-import { registerPerfAuditCommands } from './commands/perf-audit-commands.js';
-import { registerVerdictAggregateCommands } from './commands/verdict-aggregate-command.js';
-import { registerLogCommands } from './commands/log-commands.js';
-import { registerQaCommands } from './commands/qa-commands.js';
-import { registerTestCommands } from './commands/test-commands.js';
-import { registerPlaywrightCommands } from './commands/playwright-commands.js';
-import { registerSoloCommands } from './commands/solo-commands.js';
-import { registerMutCommands } from './commands/mut-commands.js';
-import { registerFixtureCommands } from './commands/fixture-commands.js';
-import { registerReviewerCommands } from './commands/reviewer-commands.js';
-import { registerObservabilityCommands } from './commands/observability-commands.js';
-// Slice 2026-07-01-strategic-compact-cli: peaks compact
-// (suggest | recommend | survival | dry-run | force) — strategic-compact
-// CLI primitives. See src/services/compact/ and
-// src/cli/commands/compact-command.ts.
-import { registerCompactCommands } from './commands/compact-command.js';
-// Slice 2026-07-01-job-m3.1: `peaks job init|status|...` — Job orchestration CLI surface.
-import { registerJobCommands } from './commands/job-commands.js';
-// Slice 2026-07-04-cli-15a: `peaks skill sediment <verb>` + `peaks skill adapter <verb>`
-// — Task 15a 4-verb subset (add-segment / add-bee / list / rebuild-index).
-// 15b / 15c / 15d will extend sediment-commands.ts with the remaining 14 verbs.
-import { registerSedimentCommands } from './commands/sediment-commands.js';
-import { registerAdapterCommands } from './commands/adapter-commands.js';
-import { registerSkillVisibilityCommand } from './commands/skill-visibility.js';
-import { applyRetention } from '../services/log/retention.js';
-import { writeLogEntry, maybeWriteStderr } from '../services/log/logger.js';
-export { printResult } from './cli-helpers.js';
-/**
- * Slice 2026-06-16-cli-logging (G1, G2, G3, G7). One structured
- * `peaks-loop start` entry per CLI invocation, plus a 7-day
- * retention sweep. Wired into the global program so EVERY
- * peaks-loop command — even a bare `peaks` quickstart — writes
- * a log line.
- *
- * The logger NEVER writes to stdout; it touches only the log
- * file (always) and stderr (when `verbose` is true or
- * `PEAKS_LOG_LEVEL=debug`). JSON envelopes stay parseable.
- */
-function bootstrapLogger(verbose) {
-    try {
-        applyRetention({ retentionDays: 7 });
-    }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-        /* best-effort retention sweep; never block the CLI */
-    }
-    const dateOverride = process.env.PEAKS_LOG_DATE_OVERRIDE;
-    const entry = {
-        ts: new Date().toISOString(),
-        level: 'info',
-        command: 'main',
-        msg: 'peaks-loop start',
-        version: CLI_VERSION
-    };
-    try {
-        writeLogEntry(entry, dateOverride !== undefined ? { dateOverride } : {});
-    }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-        /* best-effort */
-    }
-    if (verbose || process.env.PEAKS_LOG_LEVEL === 'debug') {
-        maybeWriteStderr(entry, { verbose: true });
-    }
-}
-// Slice 2026-06-16-cli-logging (AC1 regression fix, repair cycle 1):
-// Process-scoped guard so the bootstrap log line is written AT MOST
-// once per process, regardless of whether it fires from the
-// `preAction` hook (subcommand path) or from the version action
-// (`-v` / `--version` / `-V` path). Reset between test invocations
-// via `__resetBootstrapForTests`.
-let bootstrapRan = false;
-export function __resetBootstrapForTests() {
-    bootstrapRan = false;
-}
-export function createProgram(io = { stdout: (text) => console.log(text), stderr: (text) => console.error(text) }) {
-    const program = new Command();
-    program
-        .name('peaks')
-        .description(`Peaks Loop ${CLI_VERSION} — loop engineering CLI: workflow primitive / loop guards / evaluators / slice orchestration
-
-Run peaks (no arguments) for a quickstart. You likely want one of:
- peaks doctor check your environment
- peaks skill list or manage skills
- peaks slice boundary check (tsc + vitest +3-way + verify-pipeline)
- peaks workflow plan workflow routing dry-run graphs
- peaks sop author your own workflow gates
- peaks hooks install the un-bypassable gate-enforcement hook
- peaks gate enforce/bypass SOP gates on Bash commands`)
-        .configureOutput({
-        writeOut: (text) => io.stdout(text.trimEnd()),
-        writeErr: (text) => io.stderr(text.trimEnd())
-    })
-        // Slice 2026-06-16-cli-logging (AC1 regression fix, repair cycle 1):
-        // We DO NOT use Commander's built-in `.version()` here. Commander's
-        // built-in version handler short-circuits the program BEFORE the
-        // `preAction` hook fires, which means a bare `peaks --version`
-        // invocation skips the JSONL bootstrap. Per PRD AC1 the log file
-        // MUST be created on every CLI invocation, including `--version`.
-        //
-        // Instead we register `-V` and `-v, --version` as regular options
-        // and handle them in the program-level action: run the log
-        // bootstrap, print the version, and exit. The `preAction` hook
-        // below still fires for subcommands; we deduplicate via a
-        // `bootstrapRan` guard so the start line is written at most once
-        // per process.
-        .option('-v, --version', 'output the version number')
-        .option('-V', 'output the version number')
-        // Slice 2026-06-16-cli-logging (G3): global verbose flag. Mirrors
-        // the PEAKS_LOG_LEVEL=debug env var; with this set, the logger
-        // mirrors every entry to stderr IN ADDITION to the file.
-        // Long-only: `-v` is already bound to `--version` by the
-        // `.option()` call above, so we accept the env-var form
-        // (PEAKS_LOG_LEVEL=debug) as the short-form equivalent.
-        .option('--verbose', 'mirror log lines to stderr (also: PEAKS_LOG_LEVEL=debug)')
-        .hook('preAction', () => {
-        const opts = program.opts();
-        // Slice 2026-06-16-cli-logging (repair cycle 2): gate the bootstrap on
-        // the same `bootstrapRan` guard the version action uses, so a single
-        // process that invokes the program twice (vitest, programmatic) does
-        // not emit duplicate `peaks-loop start` JSONL entries.
-        if (!bootstrapRan) {
-            bootstrapLogger(opts.verbose === true);
-            bootstrapRan = true;
-        }
-    })
-        .action(() => {
-        const opts = program.opts();
-        if (opts.V || opts.version) {
-            // AC1: write the peaks-loop start log line BEFORE printing the
-            // version, so even a bare `--version` invocation creates the log
-            // file. `bootstrapRan` dedupes when `preAction` already ran.
-            if (!bootstrapRan) {
-                bootstrapLogger(opts.verbose === true);
-                bootstrapRan = true;
-            }
-            io.stdout(CLI_VERSION);
-            return;
-        }
-        // Count bundled skills by reading the skills dir directly (synchronous so
-        // the quickstart renders instantly — no import/async overhead on startup).
-        let skillCount = 0;
-        const skillsPath = skillsDir;
-        try {
-            if (existsSync(skillsPath)) {
-                skillCount = readdirSync(skillsPath, { withFileTypes: true })
-                    .filter((entry) => entry.isDirectory() && !entry.name.startsWith('.'))
-                    .filter((entry) => existsSync(join(skillsPath, entry.name, 'SKILL.md')))
-                    .length;
-            }
-        }
-        catch { /* disk read is best-effort; zero skills is still truthful */ } // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-        io.stdout(`Peaks Loop ${CLI_VERSION} · ${skillCount} skills ready
-
- Peaks is a loop-engineering CLI + skill family for Claude Code.
- It turns "don't skip steps" into hard enforcement — gates that block
- advancement in-conversation, un-bypassably.
-
- Before diving into a project, two things worth doing now:
-
- peaks doctor check your environment in one glance
- peaks-sop <<< ask this skill to author your first SOP
-
- Or jump straight in:
- peaks sop init --id my-flow --apply && peaks hooks install
-`);
-    })
-        .exitOverride();
-    registerCoreAndArtifactCommands(program, io);
-    registerWorkflowCommands(program, io);
-    registerCapabilityWorkerConfigAndSCCommands(program, io);
-    registerCodegraphCommands(program, io);
-    registerOpenSpecCommands(program, io);
-    registerPerfCommands(program, io);
-    registerPreferencesCommands(program);
-    registerProjectCommands(program, io);
-    registerPrdCommands(program, io);
-    registerRequestCommands(program, io);
-    registerRetrospectiveCommands(program, io);
-    registerScanCommands(program, io);
-    registerSliceCommands(program, io);
-    registerSopCommands(program, io);
-    // v2.15.0 slice 002 AC-3: feedback promotion CLI.
-    registerFeedbackCommands(program, io);
-    // v2.15.0 follow-up G11: fork sync CLI (status / upstream-check / sync-plan / sync / sync-verify).
-    registerForkCommands(program, io);
-    // v2.15.0 follow-up G13: impact scan CLI (scan / must-check).
-    registerImpactCommands(program, io);
-    // v2.15.0 follow-up G14: smoke regression CLI (define / run / run-and-repair / add-path).
-    registerSmokeCommands(program, io);
-    // v2.15.0 follow-up G15: release / hotfix CLI (plan / canary / promote / watch / done / rollback / hotfix).
-    registerReleaseCommands(program, io);
-    // v2.15.0 follow-up G3: prd 4 必填块 CLI (check-blocks).
-    registerPrdBlocksCommands(program, io);
-    // v2.15.0 follow-up G4: user touchpoint CLI (gate-classify / user-touchpoints / commit-boundary-actions).
-    registerUserTouchpointCommands(program, io);
-    // v2.15.0 follow-up G1: slice business review CLI (review / score / accept / reject).
-    registerSliceReviewCommands(program, io);
-    // v2.15.0 follow-up G5: QA business review CLI (business-review / score / accept / reject).
-    registerQaBusinessReviewCommands(program, io);
-    // v2.15.0 follow-up G6: slice cross-integration verifier (slice-integrate).
-    registerSliceIntegrateCommands(program, io);
-    // v2.15.0 follow-up G7: doc auto-generation (generate-skill / changelog-suggest).
-    registerDocCommands(program, io);
-    // v2.15.0 follow-up G8: legacy code smell detector (legacy-detect).
-    registerLegacyCommands(program, io);
-    // v2.15.0 follow-up G9: lightweight role registry (role list/add/grant/check).
-    registerRoleCommands(program, io);
-    // v2.15.0 follow-up G10: complexity estimator (complexity-estimate).
-    registerComplexityCommands(program, io);
-    registerSubAgentCommands(program, io);
-    registerContractCommands(program, io);
-    // Slice #010 G9.5: register the hook-only internal atom. Hidden from
-    // `peaks --help` (no description text); used by `peaks hooks install`
-    // to wire the PreToolUse hook chain.
-    registerSubAgentDispatchGuard(program);
-    registerGateCommands(program, io);
-    registerHookHandleCommand(program, io);
-    registerHooksCommands(program, io);
-    registerStatusLineCommands(program, io);
-    registerUnderstandCommands(program, io);
-    registerWorkspaceCommands(program, io);
-    registerWorkflowPlanCommands(program, io);
-    // Slice L2.1: peaks audit * — red-line audit framework.
-    registerAuditCommands(program, io);
-    // Slice 2026-06-25-slice-topology-multipass (Fix M2): peaks prepare-final-review CLI wrapper.
-    registerFinalReviewCommands(program, io);
-    // Slice #2: peaks classify * — L1a task classification + L1b per-level gate sets.
-    registerClassifyCommands(program, io);
-    // Slice #3: peaks context * — L1c context 4-layer loader.
-    registerContextCommands(program, io);
-    // Slice #12: peaks skills:audit-conformance — skill family alignment pass.
-    registerSkillConformanceCommands(program, io);
-    // Slice #13: peaks swarm * — additional subcommands (pipeline /
-    // dispatch / verify / loop) are added inline in workflow-commands.ts
-    // alongside the existing swarm.plan. This avoids the duplicate top-level
-    // command conflict (peaks-loop-when-adding-a-new-subcommand-check-for-existing-top-level-first).
-    // Slice #14: peaks loop * + peaks goal compose — L4 Agent Loop sub-features.
-    registerLoopCommands(program, io);
-    // Slice v3.0.0 loop-eng-native-solo-a-b: peaks workflow run|plan|lint
-    // + peaks loop eval. Wraps the existing workflow + loop groups so the
-    // add-a-new-subcommand-check-for-existing-top-level-first rule is honoured.
-    registerWorkflowEvalCommands(program, io);
-    // Slice: ECC 64 agents soft-optional (per spec §7.2 line 818).
-    registerAgentCommands(program, io);
-    // Slice: 1.x → 2.0 umbrella (per "one-key completion" + "minimal-user-operation" tenets).
-    registerUpgradeCommands(program, io);
-    // Slice: ocr soft-optional integration (peaks-rd Gate B3 augmentation).
-    registerCodeReviewCommands(program, io);
-    // Slice v2.12.0 Group A Tier 2: `peaks security-audit` (independent security audit skill driver).
-    registerSecurityAuditCommands(program, io);
-    // Slice v2.12.0 Group A Tier 3: `peaks perf-audit` (independent perf audit skill driver).
-    registerPerfAuditCommands(program, io);
-    // Slice v2.13.2 AC-2: `peaks verdict aggregate` (cross-source verdict aggregator CLI surface).
-    registerVerdictAggregateCommands(program, io);
-    // Slice 2026-06-16-cli-logging (G4): `peaks log tail` / `peaks log ls`.
-    registerLogCommands(program, io);
-    // Slice 2026-06-16-playwright-restart-loop (G5 + AC4): `peaks qa run`.
-    registerQaCommands(program, io);
-    // Slice 2026-06-17-2.5.0-sub-fix-B: `peaks test` (user-invoked, smart
-    // fingerprint-cache wrapper around jest/vitest/mocha).
-    registerTestCommands(program, io);
-    // Slice 2026-06-17-2.5.0-sub-fix-C: `peaks playwright start|ls|stop`
-    // (multi-terminal Playwright MCP lifecycle).
-    registerPlaywrightCommands(program, io);
-    // Slice 2 (peaks-code fast mode): `peaks solo plan [--fast] <change-id>`
-    // v2.11.0 Group F (D5 + D7): also registers `peaks solo should-pause` and
-    // `peaks solo post-compact-detect` for runtime-friction probes.
-    registerSoloCommands(program, io);
-    // Plan 2 / Task 6: `peaks mut run|mutants|asserts|report` — mutation
-    // testing + assertion validity scan (spec §4.2 / §7). The
-    // production Stryker invoker is wired here; tests use the
-    // `createMutCommands({ invokeStryker })` factory directly with a
-    // mock to keep @stryker-mutator/core out of the unit-test path.
-    registerMutCommands(program, io);
-    // Slice v2.14.0 G1 AC-1.4: `peaks fixture capture` — fixture-replay
-    // anti-fake-green test suite producer. Sanitizes + checksums the
-    // captured envelope and writes a co-located fixture.meta.json.
-    registerFixtureCommands(program, io);
-    // Slice v2.14.0 G4 AC-4.1: `peaks reviewer run|status` — third-party
-    // reviewer CLI. The reviewer modelFamily MUST differ from the
-    // karpathy-reviewer modelFamily (AC-4.4); see
-    // src/services/reviewer/model-family.ts. The THIRD_PARTY_REVIEW prereq
-    // is wired into src/services/artifacts/artifact-prerequisites.ts.
-    registerReviewerCommands(program, io);
-    // Slice B of v2.11.1: `peaks observability status|slices|fanout|repair-cycles`
-    // (read-only queries over the JSONL metrics emitted from the
-    // peaks request transition hook in Slice A).
-    registerObservabilityCommands(program, io);
-    // Slice 2026-07-01-strategic-compact-cli: `peaks compact
-    // suggest|recommend|survival|dry-run|force` — strategic-compact CLI
-    // primitives. See src/cli/commands/compact-command.ts.
-    registerCompactCommands(program, io);
-    // Slice 2026-07-01-job-m3.1: `peaks job init|status|...` — Job
-    // orchestration CLI surface. M3.1 wires init + status + 2 stubs;
-    // the remaining 5 subcommands land in M3.2.
-    registerJobCommands(program, io);
-    // Slice 2026-07-04-cli-15a: `peaks skill sediment <verb>` — Task 15a
-    // 4-verb subset. Dispatches to runSediment; remaining verbs land in 15b/15c/15d.
-    registerSedimentCommands(program, io);
-    // Slice 2026-07-04-cli-15a: `peaks skill adapter <verb>` — adapter list / set-active.
-    registerAdapterCommands(program, io);
-    // Slice 2026-07-05-peaks-code-to-peaks-code (Task 1): `peaks skill:visibility --list --json`
-    // — read .claude-plugin/marketplace.json and report each skill's
-    // visibility (public vs internal). Used to surface which skills are
-    // user-invocable vs LLM-only internal role skills. See
-    // src/cli/commands/skill-visibility.ts.
-    registerSkillVisibilityCommand(program, repoRoot);
-    return program;
-}

package/dist/src/services/artifacts/repair-cycle-service.js

@@ -1,52 +0,0 @@
-import { showRequestArtifact } from './request-artifact-service.js';
-const DEFAULT_MAX_CYCLES = 3;
-// Matches transition notes Solo writes during repair routing.
-// Format example:
-//   - transition note (2026-05-25T08:00:00.000Z): QA return-to-rd cycle 1: failing acceptance items A, B
-//   - transition note (2026-05-25T09:00:00.000Z): QA cycle 2: regression in module X
-const REPAIR_NOTE_PATTERN = /-\s*transition note\s*\(([^)]+)\)\s*:\s*(?:QA(?:\s+return-to-rd)?\s+cycle\s+(\d+))\s*:?\s*(.*?)$/i;
-export async function getRepairCycleStatus(options) {
-    const showOptions = {
-        projectRoot: options.projectRoot,
-        role: 'rd',
-        requestId: options.requestId
-    };
-    if (options.sessionId !== undefined) {
-        showOptions.sessionId = options.sessionId;
-    }
-    const artifact = await showRequestArtifact(showOptions);
-    if (artifact === null) {
-        return null;
-    }
-    const maxCycles = options.maxCycles ?? DEFAULT_MAX_CYCLES;
-    const lines = artifact.content.split(/\r?\n/);
-    const entries = [];
-    for (const rawLine of lines) {
-        const match = REPAIR_NOTE_PATTERN.exec(rawLine);
-        if (match === null)
-            continue;
-        const [, timestamp, cycleStr, reason] = match;
-        if (timestamp === undefined || cycleStr === undefined)
-            continue;
-        const cycle = Number(cycleStr);
-        if (!Number.isFinite(cycle) || cycle < 1)
-            continue;
-        entries.push({ cycle, timestamp, reason: (reason ?? '').trim() });
-    }
-    // Distinct cycle numbers — repair loop may write the same cycle note multiple times.
-    const distinct = new Set(entries.map((entry) => entry.cycle));
-    const cycleCount = distinct.size;
-    const remaining = Math.max(0, maxCycles - cycleCount);
-    const atCap = cycleCount >= maxCycles;
-    return {
-        requestId: options.requestId,
-        sessionId: artifact.sessionId,
-        path: artifact.path,
-        cycleCount,
-        maxCycles,
-        remaining,
-        atCap,
-        blocked: atCap,
-        entries
-    };
-}

package/dist/src/services/audit/enforcers/active-skill-resolver.d.ts

@@ -1,29 +0,0 @@
-/**
- * active-skill-resolver — utility for hook enforcers.
- *
- * Resolves the active peak skill name for the current session, so hook
- * enforcers (e.g. solo-code-ban) can decide whether to fire.
- *
- * Per `src/services/session/caller-id-types.ts`: the active-skill file is
- * at `.peaks/_runtime/<peakSessionId>/active-skill-<callerId>.json`.
- *
- * Resolution order (graceful degradation — never throws):
- *   1. PEAKS_ACTIVE_SKILL env var (explicit override, used by tests)
- *   2. .peaks/_runtime/<sid>/active-skill-<callerId>.json for each caller
- *      bound to the current peak session
- *   3. null (caller did not set a skill; enforcers can decide to skip)
- */
-export interface ActiveSkillResolution {
-    readonly skill: string | null;
-    readonly callerId: string | null;
-    readonly sessionId: string | null;
-    readonly source: 'env' | 'file' | 'none';
-}
-/**
- * Resolve the active peak skill for the current hook invocation.
- *
- * Reads PEAKS_ACTIVE_SKILL first (test override), then walks
- * `.peaks/_runtime/<sid>/` for any `active-skill-*.json` file. Returns
- * the first match.
- */
-export declare function resolveActiveSkillForCaller(projectRoot: string): ActiveSkillResolution;

package/dist/src/services/audit/enforcers/active-skill-resolver.js

@@ -1,71 +0,0 @@
-/**
- * active-skill-resolver — utility for hook enforcers.
- *
- * Resolves the active peak skill name for the current session, so hook
- * enforcers (e.g. solo-code-ban) can decide whether to fire.
- *
- * Per `src/services/session/caller-id-types.ts`: the active-skill file is
- * at `.peaks/_runtime/<peakSessionId>/active-skill-<callerId>.json`.
- *
- * Resolution order (graceful degradation — never throws):
- *   1. PEAKS_ACTIVE_SKILL env var (explicit override, used by tests)
- *   2. .peaks/_runtime/<sid>/active-skill-<callerId>.json for each caller
- *      bound to the current peak session
- *   3. null (caller did not set a skill; enforcers can decide to skip)
- */
-import { existsSync, readdirSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { getSessionIdCanonical } from '../../session/session-manager.js';
-import { getSessionDir } from '../../session/getSessionDir.js';
-const ACTIVE_SKILL_PREFIX = 'active-skill-';
-/**
- * Resolve the active peak skill for the current hook invocation.
- *
- * Reads PEAKS_ACTIVE_SKILL first (test override), then walks
- * `.peaks/_runtime/<sid>/` for any `active-skill-*.json` file. Returns
- * the first match.
- */
-export function resolveActiveSkillForCaller(projectRoot) {
-    const envOverride = process.env.PEAKS_ACTIVE_SKILL;
-    if (typeof envOverride === 'string' && envOverride.length > 0) {
-        return { skill: envOverride, callerId: null, sessionId: null, source: 'env' };
-    }
-    let sessionId = null;
-    try {
-        sessionId = getSessionIdCanonical(projectRoot);
-    }
-    catch {
-        return { skill: null, callerId: null, sessionId: null, source: 'none' };
-    }
-    if (sessionId === null) {
-        return { skill: null, callerId: null, sessionId: null, source: 'none' };
-    }
-    const sessionDir = getSessionDir(projectRoot, sessionId);
-    if (!existsSync(sessionDir)) {
-        return { skill: null, callerId: null, sessionId: sessionId, source: 'none' };
-    }
-    let entries;
-    try {
-        entries = readdirSync(sessionDir);
-    }
-    catch {
-        return { skill: null, callerId: null, sessionId: sessionId, source: 'none' };
-    }
-    for (const entry of entries) {
-        if (!entry.startsWith(ACTIVE_SKILL_PREFIX) || !entry.endsWith('.json'))
-            continue;
-        const callerId = entry.slice(ACTIVE_SKILL_PREFIX.length, -'.json'.length);
-        const filePath = join(sessionDir, entry);
-        try {
-            const raw = readFileSync(filePath, 'utf8');
-            const parsed = JSON.parse(raw);
-            if (typeof parsed.skill === 'string' && parsed.skill.length > 0) {
-                return { skill: parsed.skill, callerId, sessionId, source: 'file' };
-            }
-        }
-        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
-            // skip malformed file
-        }
-    }
-    return { skill: null, callerId: null, sessionId, source: 'none' };
-}

package/dist/src/services/audit/enforcers/solo-code-ban.d.ts

@@ -1,23 +0,0 @@
-/**
- * Solo-code-ban enforcer — PreToolUse Bash guard.
- *
- * Per L2 redesign §5.4. Deny `git commit` or `git apply` invocations from
- * a peaks-* skill. The Solo Code-Change Red Line says peaks-code / peaks-rd
- * are orchestrators, not implementers; the actual `git commit` step must
- * go through `peaks request transition`, which itself enforces spec-locked
- * + tech-doc-presence.
- *
- * Trust red line (per `gate-enforcement-hook.md`): if the registry or
- * manifest read fails, the hook must fail-OPEN (warn + allow). The LLM is
- * never bricked by a peaks bug.
- */
-export interface SoloCodeBanInput {
-    readonly skill: string;
-    readonly command: string;
-}
-export interface SoloCodeBanResult {
-    readonly denied: boolean;
-    readonly reason: string;
-}
-export declare function isSoloCodeCommit(skill: string, command: string): boolean;
-export declare function evaluateSoloCodeBan(input: SoloCodeBanInput): SoloCodeBanResult;

package/dist/src/services/audit/enforcers/solo-code-ban.js

@@ -1,27 +0,0 @@
-/**
- * Solo-code-ban enforcer — PreToolUse Bash guard.
- *
- * Per L2 redesign §5.4. Deny `git commit` or `git apply` invocations from
- * a peaks-* skill. The Solo Code-Change Red Line says peaks-code / peaks-rd
- * are orchestrators, not implementers; the actual `git commit` step must
- * go through `peaks request transition`, which itself enforces spec-locked
- * + tech-doc-presence.
- *
- * Trust red line (per `gate-enforcement-hook.md`): if the registry or
- * manifest read fails, the hook must fail-OPEN (warn + allow). The LLM is
- * never bricked by a peaks bug.
- */
-const COMMIT_APPLY_PATTERN = /^\s*git\s+(commit|apply)\b/;
-const DENY_REASON = 'Solo Code-Change Red Line: peaks-* skills must go through peaks-code / peaks-rd. ' +
-    'Use `peaks request transition` instead of `git commit` / `git apply` directly.';
-export function isSoloCodeCommit(skill, command) {
-    if (!skill.startsWith('peaks-'))
-        return false;
-    return COMMIT_APPLY_PATTERN.test(command);
-}
-export function evaluateSoloCodeBan(input) {
-    if (isSoloCodeCommit(input.skill, input.command)) {
-        return { denied: true, reason: DENY_REASON };
-    }
-    return { denied: false, reason: '' };
-}

package/dist/src/services/audit/red-line-catalog.d.ts

@@ -1,51 +0,0 @@
-/**
- * Red-line catalog — the 5 P0 red lines shipped in L2.1, plus the marker
- * patterns that the classifier uses to discover them in markdown.
- *
- * The catalog is hand-maintained. New enforcers (L2.2/2.3/2.4) add entries
- * here and the backing-detector picks them up automatically.
- */
-import type { RedLineMarker } from './types.js';
-export interface RedLineCatalogEntry {
-    /** Stable id, e.g. "rl-solo-code-ban-001". */
-    readonly id: string;
-    readonly rule: string;
-    /** Markers that, if found near the rule's text, identify this red line. */
-    readonly markers: readonly RedLineMarker[];
-    /** Substring(s) that must appear in the surrounding ±2 lines. */
-    readonly phrases: readonly string[];
-    /** Relative path to the enforcement file (or null when prose-only). */
-    readonly enforcerRef: string | null;
-}
-export declare const RED_LINE_CATALOG: readonly RedLineCatalogEntry[];
-/**
- * Catalog entries for enforcers whose source code is shipped in this slice
- * but whose integration is deferred to subsequent slices (L2.1.1 or later).
- *
- * The backing-detector downgrades these to `prose-only` at runtime because
- * the integration seam is missing. When the integration lands, the entry
- * is removed from this set in a single-line follow-up commit.
- *
- * L2.1 final state: Tasks 5 (solo-code-ban) + 6 (no-root-pollution) are
- * wired into peaks hook handle (Tasks 1-4: framework + 3 enforcers also
- * integrated). Tasks 3 (tech-doc-presence) and 4 (mock-placement) are
- * deferred — their request-transition / slice-check integrations are
- * tracked separately.
- */
-export declare const DEFERRED_ENFORCERS: ReadonlySet<string>;
-/**
- * A red line's catalog id is the join key. If a discovered red line in a
- * markdown file matches no catalog entry, it stays as `prose-only`.
- *
- * Match policy: phrase-only for identity. Markers (MANDATORY / BLOCKING /
- * MUST NOT / RED LINE) are too generic to disambiguate — every catalog
- * entry shares the same marker set, so a marker-only match would always
- * return the first catalog entry regardless of the rule.
- *
- * Deferred enforcers (Tasks 4-6 integration pending) are matched by
- * phrase but tagged with enforcerRef=null so the backing-detector
- * downgrades them to prose-only at runtime. They are NOT removed from
- * the catalog so future integration commits can re-tag them with a
- * single source-of-truth change.
- */
-export declare function findCatalogEntry(rule: string, _markers: readonly RedLineMarker[]): RedLineCatalogEntry | null;