peaks-loop 4.0.32 → 4.0.34

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # Changelog
 
+## 4.0.34 — 2026-09-09 (mode 模型收敛 + auto-compact 死命令 + 上下文窗口覆盖 + 确认门去 TTY)
+
+**Highlights**:
+
+1. **mode 模型收敛（用户设计）** — 此前 `SkillPresenceMode` 与 24h 状态机是两个互不相识的自主性开关。
+
+   - `SkillPresenceMode = full-auto | assisted | strict | 24h`（四选一，并列）。
+   - `swarm` 从"模式"降级为**所有 mode 的默认执行策略**（与"fan-out 强制、不可退回串行"一致）。
+   - 24h 的 6 状态机保留为 **24h mode 的内部状态**；24h 是**唯一可自动开启**的 mode（T1–T5），其余 mode 仍需用户选。
+   - 新增 `peaks code mode status`：一条命令输出 presence mode / 24h 状态 / job mode / auto-compact profile。
+   - **顺带修好一个严重 bug**：`getSkillPresence()` 一直在丢掉 `mode` 字段，导致所有读 `presence.mode` 的守卫（mode-enforcement、assisted/strict 边界、post-compact-detector）**全是死代码**——用户选的 mode 从未真正生效。
+
+2. **auto-compact 契约指向不存在的命令（根因）** — `peaks compact auto --execute` 在 `skills/` + `src/` 出现 **49 次**（含 CLI 自己返回的 `next`），实际执行是 `COMMAND_NOT_FOUND`。真命令是 `peaks code auto-compact`。LLM 按契约执行 → 撞死命令 → 只能回头让用户手动 compact。全部引用已改指真命令，并加守卫测试防回归。
+
+3. **上下文窗口不再对未知模型默认 20w** — 新增 `PEAKS_CONTEXT_WINDOW_TOKENS`（env）与 `context.windowTokens`（config）覆盖，优先级 env > config > 启发式 > 默认；`peaks code context-now` 新增 `capacitySource` 字段，一眼看出窗口值来自哪。
+
+4. **assisted/strict 确认门不再阻塞在 TTY** — `requireUserConfirmation` 此前会开 `readline` 的 `(y/N)` 提示；LLM 会话里 stdin 非 TTY → 直接挂死，且违反 Human-NL-Choice-Only。现改为立即抛出带 `transitionKey` + `mode` + 可执行 nextActions 的错误，由 LLM 用 `AskUserQuestion` 承接、用户同意后重跑 `--confirm`。bypass 语义（`--confirm` / `--force-confirm` / `PEAKS_AUTO_CONFIRM`）完全不变。
+
+**验证**：build clean、tsc clean、全量 126 files / 1102 passed（1 skipped）；实测 `capacitySource` 默认 `model-heuristic`、`PEAKS_CONTEXT_WINDOW_TOKENS=400000` → `env-override`。
+
+## 4.0.33 — 2026-09-09 (ECC 去插件化 + 动态获取修复 + 移除 understand-anything)
+
+**Highlights**:
+
+1. **ECC 去插件化** — 此前 ECC code-review 依赖用户手动安装 Claude Code 插件，新开发机缺失即静默降级为 inline review。
+
+   - **物化到 `~/.peaks/agents/ecc/`**（peaks 自有目录，**永不写 `~/.claude/`**）。
+   - **缓存后备路径**：插件缺失时自动确保缓存 → 把物化指令注入通用子代理 → 经同一 bridge 渲染，新增 `detectEcc` 状态 `ready-via-cache`。
+   - **按真实名解析**：新增 `resolveMaterializedAgentName()`（候选名 + 确定性回退），修正物化文件名 `code-review.md` → 上游实际 `code-reviewer.md`。
+   - **修正原生插件 id**：`everything-claude-code:code-review` → **`ecc:code-reviewer`**（插件实名 `ecc`、agent 实名 `code-reviewer`；旧名是退役的仓库名）。
+
+2. **修复 `peaks ecc install` 下载链（此前从未真正跑通）** — 三条 D-010 路径全挂：`ecc.tar.gz` 资产已不存在（404）、`tarball_url` 请求发 `accept: application/octet-stream` 被 GitHub 拒（415）、无 `.tgz` 资产可回退。现改为 `tarball_url → 资产 → PRD url` + 正确 accept 头；tar 根目录剥离改为按形状（codeload 与 api 前缀不同）。实测 `peaks ecc install` exit 0，物化 68 个 agent。
+
+3. **死代码 / 坏引用修复** — `getInstalledCapabilityIds` 从写死 `[]` 改为真实只读检测；`peaks shadcn init`（skill 引用但命令不存在）实现为 `npx --package shadcn@4.21.0` 动态包装；清除 AgentShield 的 3 处误导残留（死 flag / 每次必印的假提示 / 过期注释）。
+
+4. **移除 understand-anything 集成** — 命令 + 服务 + 能力目录 + skill/docs/README/宣传片引用全部删除，切片拆解与分析统一走 codegraph。
+
+**验证**：全量 124 files / 1057 passed（原 119 / 1014）；tsc clean；实测 `~/.claude/` 零写入。
+
 ## 4.0.32 — 2026-09-08 (CI 首次全绿 — 工作流修复 + Linux-only 测试修复)
 
 **Highlights**:

package/README-en.md

@@ -174,11 +174,10 @@ Every lane opens with **one slash command**.
 | Role | Project | One-liner |
 | --- | --- | --- |
 | **Sediment + gates** | [**peaks-loop**](https://github.com/SquabbyZ/peaks-loop) ← you are here | loop-engineering crystallization system; install → PRD/RD/QA/UI/SC/TXT as one chain + sediment |
-| **Tactical handbook** | [affaan-m/ECC](https://github.com/affaan-m/ECC) | everything-claude-code: the best tactics, skills, and SOPs you can put on top of Claude Code |
-| **Code understanding** | [Egonex-AI/Understand-Anything](https://github.com/Egonex-AI/Understand-Anything) | any repo, one sentence to grok it — let the LLM actually *understand* the project, not guess |
+| **Tactical handbook** | [affaan-m/ECC](https://github.com/affaan-m/ECC) | the best tactics, skills, and SOPs you can put on top of Claude Code |
 | **Process & discipline** | [obra/superpowers](https://github.com/obra/superpowers) | brainstorming / TDD / debugging / code-review as flow disciplines, every one with a hard exit |
 
-**One sentence to use them all**: clone the three repos above, install peaks-loop, hand the rest to your LLM — it pulls what it needs, holds the gates, lands the tactics, sediments the flow.
+**One sentence to use them all**: clone the two repos above, install peaks-loop, hand the rest to your LLM — it pulls what it needs, holds the gates, lands the tactics, sediments the flow.
 
 ### Tribute
 
@@ -312,7 +311,7 @@ Three common pitfalls:
 - Changelog → [`CHANGELOG.md`](./CHANGELOG.md)
 - Questions → [GitHub Issues](https://github.com/SquabbyZ/peaks-loop/issues)
 - Tribute: [multica-ai/andrej-karpathy-skills](https://github.com/multica-ai/andrej-karpathy-skills) · [alchaincyf/darwin-skill](https://github.com/alchaincyf/darwin-skill)
-- Recommended combo: [affaan-m/ECC](https://github.com/affaan-m/ECC) · [Egonex-AI/Understand-Anything](https://github.com/Egonex-AI/Understand-Anything) · [obra/superpowers](https://github.com/obra/superpowers)
+- Recommended combo: [affaan-m/ECC](https://github.com/affaan-m/ECC) · [obra/superpowers](https://github.com/obra/superpowers)
 
 ---
 

package/README.md

@@ -9,7 +9,7 @@
 [![ci](https://img.shields.io/github/actions/workflow/status/SquabbyZ/peaks-loop/ci.yml?style=for-the-badge&logo=githubactions&logoColor=white&label=ci)](https://github.com/SquabbyZ/peaks-loop/actions/workflows/ci.yml)
 [![license](https://img.shields.io/badge/license-MIT-blue?style=for-the-badge)](./LICENSE)
 [![node](https://img.shields.io/badge/node-%E2%89%A520-339933?style=for-the-badge&logo=node.js&logoColor=white)](https://www.npmjs.com/package/peaks-loop)
-[![tests](https://img.shields.io/badge/tests-285%2B%20cases%20%C3%97%204%20pkgs-22c55e?style=for-the-badge&logo=vitest&logoColor=white)](#status)
+[![tests](https://img.shields.io/badge/tests-1096%20cases%20%C3%97%204%20pkgs-22c55e?style=for-the-badge&logo=vitest&logoColor=white)](#status)
 [![stars](https://img.shields.io/github/stars/SquabbyZ/peaks-loop?style=for-the-badge&logo=github&github=github&logoColor=white)](https://github.com/SquabbyZ/peaks-loop/stargazers)
 
 [English](./README-en.md) · **简体中文**
@@ -128,7 +128,7 @@ npm i -g peaks-loop
 
 ---
 
-## 当前状态 · 4.0.17
+## 当前状态 · 4.0.32
 
 <p align="center">
   <img src="./assets/readme/pulse.svg" alt="peaks-loop live metrics — 4 tiles + sparkline + pipeline progress" width="92%"/>
@@ -140,40 +140,33 @@ npm i -g peaks-loop
 
 | | |
 | --- | --- |
-| **最新版本** | [![npm](https://img.shields.io/npm/v/peaks-loop?style=for-the-badge&logo=npm&logoColor=white&color=cb3837)](https://www.npmjs.com/package/peaks-loop) — 4.0.17(2026-08-07) |
+| **最新版本** | [![npm](https://img.shields.io/npm/v/peaks-loop?style=for-the-badge&logo=npm&logoColor=white&color=cb3837)](https://www.npmjs.com/package/peaks-loop) — 4.0.32(2026-09-08) |
 | **覆盖域** | 代码(`peaks-code`) · 内容(`peaks-content`) · 项目健康(`peaks-doctor`) · 批量修 issue(`peaks-issue-fix-orchestrator`) · 自定义 SOP(`peaks-sop`) · 通用原语(`peaks-solo` 分诊 / `peaks-resume` 续 / `peaks-status` 看 / `peaks-test` 测 / `peaks-slice-decompose` 切片) |
 | **沉淀池** | `~/.peaks/` 本地池 · 跑两次自动晋升成 bee · 跑翻车让你重定义 · bee 跟着你的口味长 |
-| **测试套件** | 285+ cases · 4 packages (peaks-loop / peaks-loop-mut / peaks-loop-shared-channel / peaks-loop-shared) · 0 timeouts · 14 BDD caller-binding coverage |
+| **测试套件** | 1096 cases · 4 packages (peaks-loop 1015 / runtime 39 / mut 22 / shared-channel 20) · **CI 首次全绿**(ubuntu + windows) · 14 BDD caller-binding coverage |
 | **适配 IDE** | ✅ Claude Code · ✅ Z Code · 🚧 Codex / Cursor / Trae / Tongyi Lingma / Hermes / OpenClaw / Qoder(适配中,欢迎共建) |
 | **依赖运行时** | Node ≥ 20 |
 | **License** | MIT |
 
-### 4.0.17 这一波实打实修了什么(2026-08-07)
+### 近期演进(4.0.18 → 4.0.32)
 
-| Epic | 解决的事 | 怎么验 |
+| 版本 | 解决的事 | 怎么验 |
 | --- | --- | --- |
-| **Vitest worker cap(根因修)** | 完整套件 17 个 timeout 卡 30s;根因不是 bug,是 `pool:'forks'+fileParallelism:true` 没设 `maxWorkers`,16 核机器起 15 个 fork + 2 文件真实 `node` spawn = 8.8× 过载。`testTimeout` 算 wall clock,被 descheduled 的测试烧 30s 啥都不干。修 = `maxWorkers = floor(cpus/2)` + `PEAKS_VITEST_MAX_WORKERS` env override + 6-case drift guard。**17 timeout → 0,wall 383.67s → 360.40s,3/3 AC-1 runs 全 0 timeout。** | commit `ace1a03d` + guard test `tests/unit/vitest-concurrency-guard.test.ts` |
-| **PRD-002b ESLint 严格化(no-magic-numbers)** | 切片 2 关闭 917 → 192 violations(-725);20 source files 把 140+ inline magic numbers 抽出成 named consts;`no-magic-numbers` 配置加 `ignore: [-1,0,1,2,100,1000]` + `ignoreArrayIndexes/ignoreDefaultValues`;7 BDD tests,31/31 lint tests PASS。Severity 保持 `warn` 不变(D5 no-touch-stockcode)。 | commits `d5ef17c1` + `0c3187c4` + 7 BDD tests |
-| **Statusline `--now` 注入 + 24 spawns amortization** | 切片 1 根因 = test 用 `new Date().toISOString()` 写 lifecycle `updatedAt`,full-suite 并发下 subprocess 被 deschedule 几秒后才执行,10s 窗口过期 → C1 baseline fallback → 期望 `[████████]` 失败。修 = CLI 加 `--now <ms>`,test 共享 `TEST_NOW_MS` 锚定。**切片 7** 进一步把 24 个真实 `node dist/cli/index.js` spawn 换成 1 个 `beforeAll` IPC server,wall 216s → 29s(7.5× 加速),24/24 PASS。 | commit `3d6e4bc9` (含切片 1) + `44c42424` (切片 7) |
-| **Complexity refactor(切片 3 A+B+C+D + 切片 4 bundle-reader rewrite)** | 切片 3 四阶段 refactor 关闭 357 → 330 complexity violations(goal ≤90,本波覆盖 ~7% 的高 cohort):spec-service parser 走 table-dispatch、slice-decompose FSM、project-context detectComponentLibrary 11 探测 dispatch;**切片 4** = bundle-reader full rewrite,5 violations → 1,public API preserved verbatim。 | commits `72ef798c` + `31160051` + `1ac6e56d` + `923be824` + `0603754d` + `6b27eb94` |
-| **Type narrowing + max-lines 试点(切片 5+6)** | 切片 5 关 670 violations:667 phantom `no-explicit-any` config swap(ruleId 修复,类似 no-duplicate-imports 老坑)+ 3 real narrowing(`catch (error: any)` → `unknown` + `instanceof Error`)。切片 6 切 dispatch-record-writer.ts 4 个超长函数,4 → 0 in target file。两 slice 都证明 rule essentially exhausted 真比 memory 标注小一个数量级。 | commits `fbb43e9e` + `3d6e4bc9` (含) |
-| **Mac auto-compact ESM 防 fake-green 5/5 验证** | 切片 8 audit-only:5 个 defenses (`readClaudeTranscriptFallback` / `readClaudeStatuslinePercent` / `presence-marker-detector` / `post-compact-detector` / `step-08-gate`) 全部 in-place,ESM `require()` 0 hits,legacy silent-catch blocks 已 explicit re-throw `ReferenceError` / `SyntaxError`。 | sediment `.peaks/memory/2026-08-07-mac-esm-defense-audit.md` |
-| **Caller-binding 覆盖扩展(切片 9)** | 14 BDD tests 覆盖 5 gap categories:multi-tenant 隔离 / rotation 后 recovery / TTL freshness / rotation hygiene / primary-wins contract。`tests/unit/session/*` 从 51 → 65 tests。 | commit `823be8c4` + new file `tests/unit/session/caller-binding-slice-9-edge-cases.test.ts` |
-| **Pre-publish 验证全过** | gate-cli-version ALIGNED(root 4.0.17 == shared CLI_VERSION 4.0.17),build-integrity OK,0 Co-Authored-By trailers。 | per `peaks-loop-publishing-critical-hard-rules` recipe |
-
-| Epic | 解决的事 | 怎么验 |
-| --- | --- | --- |
-| **测试体系从零重建** | 旧 559 文件单测卡 3 小时跑不完;现 11 test files / 161 cases 单测已上线,加上子包测试与新增切片,全量 4 packages 285+ cases 全绿,`pnpm test:full` ~80s。删旧断言、写生产合约、4 维分拆(render/behavior/integration/a11y)。 | commit `f17aa377` → `1d6233bc` · `.peaks/memory/2026-07-30-test-rebuild-epic-sediment.md` |
-| **Karpathy 评估成本自审** | LLM 在 1-2 个 slice 后不再"今天差不多了明天继续"——`karpathy-reviewer` 报 `costRatio`,>10 时 `peaks job karpathy-cost-check` 自动降级 `block`→`warn`。24h-mode 仍是 override。 | `peaks job karpathy-cost-check --review-file <path>` · 21 cases 单测 |
-| **Compact 显性可见** | `peaks compact history` 给 LLM 看本次会话所有 compact 事件;`peaks statusline compact` 单行指示给 IDE 状态栏( `--` / `compact pending (0.85)` / `REDLINE 0.95` / `just compacted (0.92→?)`)。 | `auto-compact-orchestrator` append 到 `compact-history.jsonl` · 19 cases 单测 |
-| **子包独立单测 + `pnpm test:full` 覆盖全 workspace** | `peaks-loop-mut` / `peaks-loop-shared-channel` 各自 4 维单测;`peaks-loop-shared` 0 file (passWithNoTests);root 镜像冗余删除。 | commit `593ffcdf` → `08e92d8f` · `pnpm test:full` 一次跑完 4 packages |
-| **CLI surface 收敛(73 → 5 super-commands)** | 5 个 super-command(`peaks code / audit / doctor / openspec / release / release-pack`)替换 73 个 leaf command,byte-identical 契约保留,改动对外透明。 | rid-009 · 26 routing test |
+| **4.0.32** | **CI 首次全绿** —— ci.yml 此前死在第一个门(`pnpm/action-setup@v4` 在 Node 24 runner 上 self-installer 必挂),后面所有步骤从未被验证。修 5 层:corepack 替 pnpm action、删 pre-Build 的 `tsc`(结构性过不了:subpath 指向未生成的 dist)、移除 node 20 矩阵、CI 固定 `PEAKS_CALLER_ID`、3 类 Linux-only 测试 bug(`setImmediate` 闭包竞态 / 平台写死断言 / 墙钟 flake)。 | CI run 全 3 job success;双平台独立复跑 119 files / 0 failed |
+| **4.0.31** | **codegraph 自动刷新失效修复** —— `.peaks-loop-marker` 被下游误判为"已初始化",悬空 `.codegraph/` 永远建不出 `codegraph.db`。改为按 `codegraph.db` 判真实初始化 + 源头真 `init` + 悬空态自愈。 | 现场从悬空态成功建出 24.71 MB 索引 |
+| **4.0.30** | **搜索优先 preflight**(编排层"先搜再答":Context7/WebSearch → ≤5 条绑定指令注入 RD 派发)+ **9 个超行文件拆分**(`src/` 全量 ≤800 行)+ CLI 漂移修复。 | scoped + full suite |
+| **4.0.29** | **codegraph 生命周期闭环** —— RD 规划前 pre-dispatch preflight 自动 init/index 并注入结构;slice 完成边界自动 refresh(CLI-internal,不可绕过)。 | 29 单测 |
+| **4.0.28** | **codegraph 数据目录回根** + **env-first 1M 窗口识别**(修 1M 模型被误判 200K 导致 false soft-warn)。 | `context-now` 修复前 200K/0.884 → 修复后 1M/0.187 |
+| **4.0.24** | zod v4 + Context7 接入 + **Step 2.5 best-practice scan**(业务感知的最佳实践扫描)。 | — |
+| **4.0.21** | vendor-detect recovery + codegraph 集成 + anti-fake-green gate。 | — |
+| **4.0.19 / 4.0.20** | **detached sub-agent**(真 OS 进程 + G8 无限上下文自压缩);`peaks-loop-internal-runtime` 作为公开 lockstep 包发布。 | — |
+| **4.0.18** | statusline 24h overlay。 | — |
 
 ---
 
-## 强烈推荐 · 四个项目组合起来用
+## 强烈推荐 · 三个项目组合起来用
 
-> **0 学习成本。** 这是组合起来用最大的好处 —— 不只是效果俱佳,更是因为这四个项目的**接口对齐到了"自然语言"**,你只需要说一句话,谁替你跑命令、按什么闸门、按什么战术手册,完全不用你记。
+> **0 学习成本。** 这是组合起来用最大的好处 —— 不只是效果俱佳,更是因为这几个项目的**接口对齐到了"自然语言"**,你只需要说一句话,谁替你跑命令、按什么闸门、按什么战术手册,完全不用你记。
 
 <p align="center">
   <img src="./assets/readme/footer.svg" alt="peaks-loop 推荐组合" width="92%"/>
@@ -182,11 +175,10 @@ npm i -g peaks-loop
 | 角色 | 项目 | 一句话 |
 | --- | --- | --- |
 | **结晶与门禁** | [**peaks-loop**](https://github.com/SquabbyZ/peaks-loop) ← 你在这里 | loop engineering 结晶系统,装上就有 PRD/RD/QA/UI/SC/TXT 一整条工程链 + 沉淀 |
-| **战术手册** | [affaan-m/ECC](https://github.com/affaan-m/ECC) | everything-claude-code:Claude Code 上能拿到的最好用的战术、技能、SOP 集合 |
-| **代码理解** | [Egonex-AI/Understand-Anything](https://github.com/Egonex-AI/Understand-Anything) | 任意仓库,一句话读懂 —— 让 LLM 真正"理解"项目,而不是猜 |
+| **战术手册** | [affaan-m/ECC](https://github.com/affaan-m/ECC) | Claude Code 上能拿到的最好用的战术、技能、SOP 集合 |
 | **流程与纪律** | [obra/superpowers](https://github.com/obra/superpowers) | brainstorming / TDD / debugging / code-review 等流程纪律,每条都自带硬退出条件 |
 
-**用起来就一句话**:把上面三个仓库都 clone 到本地,peaks-loop 装上,剩下的交给 LLM —— 它会按需取用、按纪律守门、按战术落地、按需求沉淀。
+**用起来就一句话**:把上面两个仓库都 clone 到本地,peaks-loop 装上,剩下的交给 LLM —— 它会按需取用、按纪律守门、按战术落地、按需求沉淀。
 
 ### 致敬
 
@@ -319,7 +311,7 @@ npx peaks doctor --project .
 - 更新日志 → [`CHANGELOG.md`](./CHANGELOG.md)
 - 提问 → [GitHub Issues](https://github.com/SquabbyZ/peaks-loop/issues)
 - 致敬: [multica-ai/andrej-karpathy-skills](https://github.com/multica-ai/andrej-karpathy-skills) · [alchaincyf/darwin-skill](https://github.com/alchaincyf/darwin-skill)
-- 组合推荐: [affaan-m/ECC](https://github.com/affaan-m/ECC) · [Egonex-AI/Understand-Anything](https://github.com/Egonex-AI/Understand-Anything) · [obra/superpowers](https://github.com/obra/superpowers)
+- 组合推荐: [affaan-m/ECC](https://github.com/affaan-m/ECC) · [obra/superpowers](https://github.com/obra/superpowers)
 
 ---
 

package/dist/cli/commands/_register.js

@@ -60,6 +60,7 @@ import { registerReviewerCommands } from './reviewer-commands.js';
 import { registerRoleCommands } from './role-commands.js';
 import { registerRuntimeCommands } from './runtime-commands.js';
 import { registerScanCommands } from './scan-commands.js';
+import { registerShadcnCommands } from './shadcn-commands.js';
 import { registerSecurityAuditCommands } from './security-audit-commands.js';
 import { registerSedimentCommands } from './sediment-commands.js';
 import { registerSkillConformanceCommands } from './skill-conformance-commands.js';
@@ -75,7 +76,6 @@ import { registerSubAgentCommands } from './sub-agent-commands.js';
 import { registerSubAgentShutdownCommands } from './sub-agent-shutdown-commands.js';
 import { registerSubAgentDispatchGuard } from './sub-agent-dispatch-guard.js';
 import { registerTestCommands } from './test-commands.js';
-import { registerUnderstandCommands } from './understand-commands.js';
 import { registerVendorDetectCommand } from './vendor-detect.js';
 import { registerUpgradeCommands } from './upgrade-commands.js';
 import { registerUserTouchpointCommands } from './user-touchpoint-commands.js';
@@ -97,7 +97,8 @@ const REGISTRATIONS = [
     ['perf-commands', registerPerfCommands], ['preferences-commands', registerPreferencesCommands],
     ['project-commands', registerProjectCommands], ['prd-commands', registerPrdCommands],
     ['request-commands', registerRequestCommands], ['retrospective-commands', registerRetrospectiveCommands],
-    ['scan-commands', registerScanCommands], ['slice-commands', registerSliceCommands],
+    ['scan-commands', registerScanCommands], ['shadcn-commands', registerShadcnCommands],
+    ['slice-commands', registerSliceCommands],
     ['sop-commands', registerSopCommands], ['feedback-commands', registerFeedbackCommands],
     ['fork-commands', registerForkCommands], ['impact-commands', registerImpactCommands],
     ['smoke-commands', registerSmokeCommands], ['release-commands', registerReleaseCommands],
@@ -111,7 +112,7 @@ const REGISTRATIONS = [
     ['governance-classify-contract-commands', registerContractCommands],
     ['sub-agent-dispatch-guard', registerSubAgentDispatchGuard], ['gate-commands', registerGateCommands],
     ['hook-handle', registerHookHandleCommand], ['hooks-commands', registerHooksCommands],
-    ['heartbeat-commands', registerHeartbeatCommands], ['statusline-commands', registerStatusLineCommands], ['understand-commands', registerUnderstandCommands],
+    ['heartbeat-commands', registerHeartbeatCommands], ['statusline-commands', registerStatusLineCommands],
     ['workspace-commands', registerWorkspaceCommands], ['workflow-plan-commands', registerWorkflowPlanCommands],
     ['audit-commands', registerAuditCommands], ['final-review-commands', registerFinalReviewCommands],
     ['governance-classify-contract-commands', registerClassifyCommands], ['context-commands', registerContextCommands],

package/dist/cli/commands/audit-commands.js

@@ -78,12 +78,6 @@ export function registerAuditCommands(program, io) {
             process.exitCode = 1;
         }
     });
-    // Slice #6 L2.3 P2-a: peaks audit static — soft-optional ECC
-    // AgentShell integration. Reads `.peaks/preferences.json`'s
-    // `agentShieldEnabled` flag (default false). The CLI flags
-    // `--enable-agent-shield` / `--disable-agent-shield` override
-    // the preference for a single call.
-    //
     // Slice K1 (2.8.0): `--record` persists the audit snapshot as a
     // project-memory decision at `.peaks/memory/audit-decisions/<slug>.md`.
     // `--rid <id>` is an optional disambiguator for multiple audits on
@@ -91,12 +85,16 @@ export function registerAuditCommands(program, io) {
     // Per `peaks-loop-when-adding-a-new-subcommand-check-for-existing-top-level-first`
     // and the dev-preference red line "Default-no on new CLI commands",
     // we extend the existing command rather than register a new subcommand.
+    //
+    // 2026-09-09-ecc-dynamic-and-cleanup B3: the dead
+    // `--enable-agent-shield` / `--disable-agent-shield` flags were removed.
+    // `runStaticAudit`'s agentShield state is a frozen "always disabled" stub
+    // (Slice 3 of 4.0.0-beta.11 removed the subprocess), so the flags had no
+    // effect and the ECC opt-in prose misled users on every run.
     addJsonOption(audit
         .command('static')
-        .description('Run the static audit (peaks-loop lint + optional ECC AgentShield subprocess). Per spec §5.3.')
+        .description('Run the static audit (peaks-loop lint only; the ECC AgentShield subprocess was removed in 4.0.0-beta.11). Per spec §5.3.')
         .requiredOption('--project <path>', 'target project root')
-        .option('--enable-agent-shield', 'force-enable ECC AgentShield subprocess for this call (overrides preference)')
-        .option('--disable-agent-shield', 'force-disable ECC AgentShield subprocess for this call (overrides preference)')
         .option('--record', 'persist the audit snapshot to .peaks/memory/audit-decisions/ as a project-memory decision')
         .option('--rid <rid>', 'disambiguator for the decision record slug (used with --record; pairs multiple audits on the same day)')).action(async (options) => {
         const validation = validateProjectRoot(options.project);
@@ -105,14 +103,6 @@ export function registerAuditCommands(program, io) {
             process.exitCode = 1;
             return;
         }
-        // Resolve the flag override. `--enable-agent-shield` and
-        // `--disable-agent-shield` are mutually exclusive; we surface
-        // a 422 if both are passed.
-        if (options.enableAgentShield && options.disableAgentShield) {
-            printResult(io, fail('audit.static', 'FLAGS_CONFLICT', '`--enable-agent-shield` and `--disable-agent-shield` are mutually exclusive', emptyStaticAuditData(), ['Pass at most one of the two flags']), options.json);
-            process.exitCode = 1;
-            return;
-        }
         // Slice K1: `--rid` is meaningful only with `--record`. Surface a 422
         // when the user passes `--rid` without `--record` so the CLI fails
         // loudly rather than silently ignoring the request id.
@@ -123,12 +113,7 @@ export function registerAuditCommands(program, io) {
         }
         try {
             const result = runStaticAudit({
-                projectRoot: validation.projectRoot,
-                ...(options.enableAgentShield
-                    ? { enableAgentShield: true }
-                    : options.disableAgentShield
-                        ? { enableAgentShield: false }
-                        : {}),
+                projectRoot: validation.projectRoot
             });
             // Persist the decision record when `--record` is set. The writer is
             // idempotent at the slug level (same date+rid → same file); repeated
@@ -153,22 +138,10 @@ export function registerAuditCommands(program, io) {
                 ...(decision ? { decision } : {})
             };
             const nextActions = [];
-            // Per spec §5.3 + §7.2: when ECC is not installed, surface
-            // the canonical 4-option user opt-in UX (a/b/c/d) via
-            // nextActions. The peaks-loop `peaks audit static` CLI is
-            // non-interactive (JSON envelope by default), so the 4
-            // options are surfaced as machine-readable action strings
-            // — same pattern as understand-commands.ts `INSTALL_HINT`.
-            if (!result.agentShield.installed) {
-                nextActions.push('ECC AgentShield not installed. Pick one of the four options below:');
-                nextActions.push('  a) Install: run `npx ecc-agentshield --help` to install, then re-run `peaks audit static`.');
-                nextActions.push('  b) Skip this run: pass `--disable-agent-shield` to suppress the subprocess for this call.');
-                nextActions.push('  c) Skip forever: run `peaks preferences set agentShieldEnabled false` (writes to `.peaks/preferences.json`).');
-                nextActions.push('  d) Learn more: see docs/superpowers/specs/2026-06-11-peaks-loop-l1-l2-l3-redesign.md §5.3 + §7.2.');
-            }
-            if (result.agentShield.spawned && result.agentShield.findings.length > 0) {
-                nextActions.push(`${result.agentShield.findings.length} ECC findings merged into the audit. Review with \`peaks audit static --json\`.`);
-            }
+            // 2026-09-09-ecc-dynamic-and-cleanup B3: the ECC AgentShield opt-in
+            // nextActions block was removed. `agentShield.installed` is a frozen
+            // `false`, so the block printed on every run and pointed users at a
+            // removed subprocess, removed flags, and a dead preference.
             if (decision) {
                 nextActions.push(`Decision record written: ${decision.filePath}`);
                 nextActions.push(`Index synced: ${decision.indexSynced ? 'yes' : 'no'} (memory hot.decision[] now includes this audit)`);

package/dist/cli/commands/capability-commands.d.ts

@@ -11,6 +11,12 @@ export declare function runCapabilityStatus(io: ProgramIO, options: {
     json?: boolean;
 }): void;
 export declare function runCapabilityMap(io: ProgramIO, options: CapabilityMapOptions): void;
+/**
+ * Read-only detection of already-satisfied capabilities. Delegates to
+ * `detectInstalledCapabilityIds` (no install side effect, fail-soft).
+ * `_config` is retained for signature back-compat — the probe needs the
+ * project root, which comes from the process cwd.
+ */
 export declare function getInstalledCapabilityIds(_config: PeaksConfig): string[];
 export declare function parseCapabilityMapSource(source: string): CapabilityMapSourceFilter | null;
 export {};

package/dist/cli/commands/capability-commands.js

@@ -1,5 +1,7 @@
 import { readConfig } from '../../services/config/config-service.js';
+import { findProjectRoot } from '../../services/config/config-safety.js';
 import { resolveCapabilityAvailability } from '../../services/recommendations/capability-availability.js';
+import { detectInstalledCapabilityIds } from '../../services/recommendations/installed-capability-detector.js';
 import { createCapabilityMapPlan } from '../../services/recommendations/capability-map-service.js';
 import { seedCapabilityItems, seedCapabilitySources } from '../../services/recommendations/seed-capability-catalog.js';
 import { fail, ok } from 'peaks-loop-shared/result';
@@ -12,7 +14,9 @@ export function registerCapabilityCommands(program, io) {
     addCapabilityMapOptions(program.command('capabilities').description('Show dry-run external capability landing map')).action((options) => runCapabilityMap(io, options));
 }
 export function runCapabilityStatus(io, options) {
-    const availability = resolveCapabilityAvailability(seedCapabilityItems);
+    const availability = resolveCapabilityAvailability(seedCapabilityItems, {
+        installedCapabilityIds: getInstalledCapabilityIds(readConfig())
+    });
     printResult(io, ok("capability.status", { sources: seedCapabilitySources, items: seedCapabilityItems, availability }), options.json);
 }
 function addCapabilityMapOptions(command) {
@@ -34,8 +38,22 @@ export function runCapabilityMap(io, options) {
         ...(httpProxy === undefined ? {} : { httpProxy })
     })), options.json);
 }
+/**
+ * Read-only detection of already-satisfied capabilities. Delegates to
+ * `detectInstalledCapabilityIds` (no install side effect, fail-soft).
+ * `_config` is retained for signature back-compat — the probe needs the
+ * project root, which comes from the process cwd.
+ */
 export function getInstalledCapabilityIds(_config) {
-    return [];
+    return detectInstalledCapabilityIds({ projectRoot: resolveProbeRoot() });
+}
+function resolveProbeRoot() {
+    try {
+        return findProjectRoot(process.cwd()) ?? process.cwd();
+    }
+    catch {
+        return process.cwd();
+    }
 }
 export function parseCapabilityMapSource(source) {
     if (CAPABILITY_SOURCE_FILTERS.has(source)) {

package/dist/cli/commands/code-commands.js

@@ -23,6 +23,7 @@
  * registerCodeCommands (now a thin orchestrator).
  */
 import { registerCodeRunCommand } from './code-run-command.js';
+import { registerCodeModeStatusCommand } from './code-mode-status-command.js';
 import { registerCodeModeGateCommands } from './code-mode-gate-commands.js';
 import { registerCodeJobShapeCommands } from './code-job-shape-commands.js';
 import { registerCodeRuntimeCommands } from './code-runtime-commands.js';
@@ -113,6 +114,7 @@ export function registerCodeCommands(program, io) {
         .command('code', { hidden: true })
         .description('peaks-code LLM-side workflow planner (slice 2 fast mode)');
     registerCodeModeGateCommands(code, io);
+    registerCodeModeStatusCommand(code, io);
     registerCodeJobShapeCommands(code, io);
     registerCodeRuntimeCommands(code, io);
     registerCodeOrchestratorCanDoCommand(code, io);

package/dist/cli/commands/code-mode-gate-commands.js

@@ -35,7 +35,7 @@ export function registerCodeModeGateCommands(code, io) {
     addJsonOption(code
         .command('should-pause')
         .description('v2.11.0 D5: ask the mode-gate whether the LLM should pause for an AskUserQuestion at a given step. ' +
-        'full-auto / swarm auto-proceed (recommended = chosen); assisted / strict pause. ' +
+        'full-auto / 24h auto-proceed (recommended = chosen); assisted / strict pause. ' +
         'The 3 hard-floor categories always pause regardless of mode. ' +
         'v2.15.0 slice 002 AC-2: when --step step-1-mode-select AND the recorded skill presence is stale ' +
         '(outer-session-mismatch / no-presence), the gate returns shouldPause: true with reason "stale-presence" ' +
@@ -50,7 +50,7 @@ export function registerCodeModeGateCommands(code, io) {
         // pause on `step-1-mode-select` (mode-selection-itself) will
         // pause regardless, and the LLM-side caller can present
         // AskUserQuestion without first knowing the mode.
-        .option('--mode <mode>', 'one of: full-auto, assisted, swarm, strict. Defaults to full-auto when omitted (Step 1 chicken-and-egg fix).')
+        .option('--mode <mode>', 'one of: full-auto, assisted, strict, 24h. Defaults to full-auto when omitted (Step 1 chicken-and-egg fix).')
         .option('--hard-floor <category>', 'optional hard-floor override (irreversible-external-side-effect | authentication-credential | multi-day-investment | commit-boundary-side-effect)')
         .option('--recommended <option>', 'recommended option label to log when auto-proceeding', 'recommended-option')
         .option('--project <path>', 'v2.15.0 slice 002 AC-2: project root for presence:check-stale. Default: cwd. Pass only when step=step-1-mode-select.')
@@ -64,7 +64,7 @@ export function registerCodeModeGateCommands(code, io) {
             // step-1-mode-select will still pause regardless.
             const mode = opts.mode ?? 'full-auto';
             if (!isCodeMode(mode)) {
-                printResult(io, fail('code.should-pause', 'INVALID_MODE', `mode must be one of full-auto, assisted, swarm, strict (got "${mode}")`, { provided: mode }, ['Pass --mode full-auto | assisted | swarm | strict']), opts.json);
+                printResult(io, fail('code.should-pause', 'INVALID_MODE', `mode must be one of full-auto, assisted, strict, 24h (got "${mode}")`, { provided: mode }, ['Pass --mode full-auto | assisted | strict | 24h']), opts.json);
                 process.exitCode = 1;
                 return;
             }

package/dist/cli/commands/code-mode-status-command.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Slice 2026-09-09-mode-consolidation (Slice D) — `peaks code mode status`.
+ *
+ * One read for the whole stacked autonomy picture:
+ *   - presence MODE (`full-auto | assisted | strict | 24h`),
+ *   - the 24h internal state machine (only when the mode is `24h`),
+ *   - Job mode,
+ *   - the resolved auto-compact profile (`standard | partial`).
+ *
+ * Read-only and fail-soft: the service degrades every unreadable
+ * artifact to `null` / `false`; this command only wraps the call in an
+ * envelope. Nested under the existing `peaks code` verb (no new
+ * top-level verb — peaks-loop is enhancement, not a new CLI surface).
+ */
+import type { Command } from 'commander';
+import { type ProgramIO } from '../cli-helpers.js';
+export declare function registerCodeModeStatusCommand(code: Command, io: ProgramIO): void;

package/dist/cli/commands/code-mode-status-command.js

@@ -0,0 +1,51 @@
+/**
+ * Slice 2026-09-09-mode-consolidation (Slice D) — `peaks code mode status`.
+ *
+ * One read for the whole stacked autonomy picture:
+ *   - presence MODE (`full-auto | assisted | strict | 24h`),
+ *   - the 24h internal state machine (only when the mode is `24h`),
+ *   - Job mode,
+ *   - the resolved auto-compact profile (`standard | partial`).
+ *
+ * Read-only and fail-soft: the service degrades every unreadable
+ * artifact to `null` / `false`; this command only wraps the call in an
+ * envelope. Nested under the existing `peaks code` verb (no new
+ * top-level verb — peaks-loop is enhancement, not a new CLI surface).
+ */
+import { addJsonOption, getErrorMessage, printResult } from '../cli-helpers.js';
+import { fail, ok } from 'peaks-loop-shared/result';
+import { resolveCanonicalProjectRoot } from '../../services/config/config-service.js';
+import { resolveModeStatus } from '../../services/mode/mode-status-service.js';
+export function registerCodeModeStatusCommand(code, io) {
+    // Explicit two-step nesting (NOT `.command('mode status')` — that form
+    // creates a positional `<status>` argument, not a subcommand).
+    const mode = code
+        .command('mode')
+        .description('Mode introspection (read-only). Sub-actions: status.');
+    addJsonOption(mode
+        .command('status')
+        .description('v4.0.34 (slice 2026-09-09-mode-consolidation): one read for the whole stacked ' +
+        'autonomy picture — presence mode, the 24h internal state (when mode=24h), Job mode, ' +
+        'and the resolved auto-compact profile. Read-only + fail-soft.')
+        .option('--project <path>', 'project root (defaults to current directory)')
+        .option('--session-id <sessionId>', 'explicit session id (defaults to the canonical binding)')).action((options) => {
+        try {
+            const projectRoot = resolveCanonicalProjectRoot(options.project ?? process.cwd());
+            const status = resolveModeStatus({
+                projectRoot,
+                sessionId: options.sessionId ?? null
+            });
+            printResult(io, ok('code.mode.status', { projectRoot, ...status }, [], [
+                status.mode === null
+                    ? 'No presence mode recorded — Step 1 mode selection has not run for this session.'
+                    : `mode=${status.mode} (${status.modeSource}) → auto-compact profile=${status.autoCompactProfile}`
+            ]), options.json);
+        }
+        catch (error) {
+            printResult(io, fail('code.mode.status', 'MODE_STATUS_FAILED', getErrorMessage(error), null, [
+                'Verify the project path and try again'
+            ]), options.json);
+            process.exitCode = 1;
+        }
+    });
+}

package/dist/cli/commands/code-run-command.js

@@ -1,5 +1,6 @@
 import { resolveCanonicalProjectRoot } from '../../services/config/config-service.js';
 import { read24hState, write24hState } from '../../services/24h-mode/index.js';
+import { applyAutoEngagePresenceMode } from '../../services/24h-mode/auto-engage.js';
 import { getErrorMessage } from '../cli-helpers.js';
 function emit(io, payload, json) {
     io.stdout((json === true ? JSON.stringify(payload) : JSON.stringify(payload, null, 2)) + '\n');
@@ -54,9 +55,15 @@ export function registerCodeRunCommand(code, io) {
                 enteredFrom: current.state,
                 exitCondition: null
             });
+            // Slice 2026-09-09-mode-consolidation (Slice B): auto-engage is the
+            // ONLY path allowed to set a mode without a user pick, and `24h` is
+            // the only mode it may set. Stamp it onto the in-flight presence
+            // lease so the mode gate / statusline / `peaks code mode status`
+            // see the same autonomy level the 24h state machine is running.
+            const presenceMode = applyAutoEngagePresenceMode({ projectRoot, sessionId: sid });
             emit(io, {
                 ok: true,
-                data: { changeId: changeId ?? null, mode: '24H_ACTIVE', state: nextState, autoEngaged: true, trigger: options.trigger ?? options.tier, sessionId: sid, path: next.path },
+                data: { changeId: changeId ?? null, mode: '24H_ACTIVE', state: nextState, autoEngaged: true, trigger: options.trigger ?? options.tier, sessionId: sid, path: next.path, presenceMode },
                 next: 'Continue the existing 24H_ACTIVE flow; no brainstorming gate is required for T3/T4.'
             }, options.json);
         }

package/dist/cli/commands/code-runtime-commands.js

@@ -140,7 +140,11 @@ export function registerCodeRuntimeCommands(code, io) {
         'hermes / openclaw register their own env-var via IdeAdapter.compact. ' +
         'v3.1.2: when --enforce-job-mode is set OR job-shape.json says isJob=true, ' +
         '≥0.85 emits action=auto-compact-now (MANDATORY, not advisory) and ' +
-        '≥0.95 emits action=red-line (forced hook fires next turn).')
+        '≥0.95 emits action=red-line (forced hook fires next turn). ' +
+        'Context-window override: set env PEAKS_CONTEXT_WINDOW_TOKENS=<positive int> ' +
+        'or `peaks config set --key context.windowTokens --value <positive int>`; ' +
+        'the JSON envelope reports the winning layer as capacitySource ' +
+        '(env-override | config | model-heuristic | default).')
         .requiredOption('--project <path>', 'target project root')
         .option('--session-id <sid>', 'override session id (default: read from active presence)')
         .option('--enforce-job-mode', 'v3.1.2: treat ≥0.85 as MANDATORY auto-compact (not advisory). Auto-enabled when job-shape.json says isJob=true.')
@@ -190,12 +194,12 @@ export function registerCodeRuntimeCommands(code, io) {
             let next = null;
             if (probe.ratio >= 0.95) {
                 action = isJobMode ? 'red-line' : 'red-line';
-                next = 'peaks compact auto --execute';
+                next = 'peaks code auto-compact';
             }
             else if (probe.ratio >= 0.85) {
                 if (isJobMode) {
                     action = 'auto-compact-now';
-                    next = 'peaks compact auto --execute';
+                    next = 'peaks code auto-compact';
                 }
                 else {
                     action = 'soft-warn';
@@ -224,6 +228,10 @@ export function registerCodeRuntimeCommands(code, io) {
                 rawBytes: probe.rawBytes ?? null,
                 rawTokens: probe.rawTokens ?? null,
                 capacityTokens: probe.capacityTokens ?? null,
+                // Slice 2026-09-09-context-window-override: which layer produced
+                // capacityTokens (env-override | config | model-heuristic |
+                // default) — null for byte/percent sources, which have no window.
+                capacitySource: probe.capacitySource ?? null,
                 bytesPrompt: promptSizeBytes ?? null,
                 capturedAt: probe.capturedAt
             }, [], [
@@ -233,8 +241,8 @@ export function registerCodeRuntimeCommands(code, io) {
                         ? `Job-mode MANDATORY auto-compact. Code MUST call \`${next}\` WITHOUT confirmation.`
                         : action === 'soft-warn'
                             ? isJobMode
-                                ? `Job mode soft-warn (50–85%). Continue working; the next \`peaks compact auto\` will re-check.`
-                                : `Soft warn (50–85%). Continue working; the next \`peaks compact auto\` will re-check.`
+                                ? `Job mode soft-warn (50–85%). Continue working; the next \`peaks code auto-compact\` will re-check.`
+                                : `Soft warn (50–85%). Continue working; the next \`peaks code auto-compact\` will re-check.`
                             : `Below 50%. No action required.`,
                 jobModeNotice
             ]), true);

package/dist/cli/commands/core/skill-command.js

@@ -202,7 +202,7 @@ export function registerSkillCommand(program, io) {
         const projectOption = canonicalizeProjectOption(options.project);
         const projectRoot = projectOption ?? findProjectRoot(process.cwd()) ?? process.cwd();
         if (options.mode !== undefined && !isSkillPresenceMode(options.mode)) {
-            printResult(io, fail('skill.presence:set', 'INVALID_MODE', `Invalid mode: ${options.mode} (expected one of: full-auto, assisted, swarm, strict)`, { name, mode: options.mode }, ['Use a valid mode: full-auto, assisted, swarm, or strict']), options.json);
+            printResult(io, fail('skill.presence:set', 'INVALID_MODE', `Invalid mode: ${options.mode} (expected one of: full-auto, assisted, strict, 24h)`, { name, mode: options.mode }, ['Use a valid mode: full-auto, assisted, strict, or 24h']), options.json);
             process.exitCode = 1;
             return;
         }

package/dist/cli/commands/ecc-commands.js

@@ -4,7 +4,7 @@ import { fail, ok } from 'peaks-loop-shared/result';
 export function registerEccCommands(program, io) {
     const ecc = program
         .command('ecc')
-        .description('affaan-m/everything-claude-code cache: download + read-only access for the LLM (no subprocess; no peaks agent run).');
+        .description('affaan-m/ECC cache: download + read-only access for the LLM (no subprocess; no peaks agent run).');
     addJsonOption(ecc
         .command('install')
         .description('Download affaan-m/ECC to ~/.peaks/cache/ecc-<sha>/ (selective extract: agents/ subtree only).')
@@ -14,6 +14,7 @@ export function registerEccCommands(program, io) {
             const result = await downloadToCache(options.ref !== undefined && options.ref.length > 0 ? { ref: options.ref } : {});
             const envelope = ok('ecc.install', result, [], [
                 `Cache landed at ~/.peaks/cache/ecc-${result.sha}/agents/`,
+                `Plugin-free copy materialized at ~/.peaks/agents/ecc/ (read it directly when the ECC plugin is absent)`,
                 `Inspect with: peaks ecc ls`,
                 `Consume one agent with: peaks ecc show <name>`,
             ]);
@@ -23,7 +24,7 @@ export function registerEccCommands(program, io) {
             const message = getErrorMessage(error);
             printResult(io, fail('ecc.install', 'FETCH_FAILED', message, { ref: options.ref ?? 'latest' }, [
                 'Network failure during ECC download. Manual fallback:',
-                '  git clone https://github.com/affaan-m/everything-claude-code.git',
+                '  git clone https://github.com/affaan-m/ECC.git',
                 '  Copy <repo>/agents/*.md into ~/.peaks/cache/ecc-<sha>/agents/.',
                 '  Drop a minimal ecc-installed.json manifest into ~/.peaks/cache/.',
             ]), asJson);

package/dist/cli/commands/project-commands.js

@@ -10,7 +10,7 @@ export function registerProjectCommands(program, io) {
     const project = program.command('project').description('Aggregate Peaks state for a target project (read-only)');
     addJsonOption(project
         .command('dashboard')
-        .description('One-call snapshot of doctor / MCP / OpenSpec / requests / Understand Anything / capabilities for a project')
+        .description('One-call snapshot of doctor / MCP / OpenSpec / requests / capabilities for a project')
         .requiredOption('--project <path>', 'target project root')
         .option('--strict', 'ok follows the doctor aggregate (legacy semantics). Default: workspace-only (ok tracks the runbook health)', false)).action(async (options) => {
         try {