peaks-loop 4.0.45 → 4.0.47

package/dist/services/skills/skill-presence-service.js

@@ -604,6 +604,15 @@ export function clearSkillPresence(projectRootOverride) {
     // shim; the LLM runner calls `peaks workflow terminalize` or
     // `terminalizePresenceLease` directly).
     //
+    // That rule is the surrounding DESIGN, not a description of this
+    // function: nothing below routes anywhere. This shim has no session
+    // lock, no lease argument and no workflow id, so it cannot route —
+    // it cleans up deprecated files and returns whether it removed any.
+    // The truthful report of what remains is the caller's job
+    // (`skill-command.ts` re-reads the live projection and emits
+    // `cleared` / `reason`). Do not read the paragraph above as a
+    // promise about this function.
+    //
     // The shim still removes the legacy `active-skill.json` /
     // `.peaks/.active-skill.json` so a stale marker from a prior CLI
     // version cannot resurrect after a fresh `clear`. The canonical

package/dist/services/skills/skill-statusline-renderer.js

@@ -1,4 +1,5 @@
 import { basename } from 'node:path';
+import { AUTO_COMPACT_RED_LINE_RATIO } from '../context/auto-compact-types.js';
 import { computeRootSuffix as computeRootSuffixImpl, } from './skill-statusline-sid-suffix.js';
 // Re-export so existing test imports
 // (`import { formatShortSid, computeRootSuffix } from '.../skill-statusline-renderer'`)
@@ -181,6 +182,10 @@ function formatRatio(value) {
  *
  *   <stage-glyph> <bar> <label>[ · <before>%][ → <after>%]
  *
+ * `armed` is the one exception: it renders WITHOUT the bar
+ * (`<glyph> armed · <before>% · fires at <redLine>%`) because a bar is
+ * a progress claim and a registered-but-unfired trigger has no progress.
+ *
  * Failed states additionally suffix the stage at which the compact failed.
  * Stalled states keep the active-stage cell count and render a plain
  * "stalled" label. Invalid states surface the read-reason verbatim as a
@@ -202,6 +207,16 @@ function renderCompact(state, palette) {
             return `${palette.compact.compacting} ${renderCompactBar(4, palette)} compacting${typeof state.triggerRatio === 'number'
                 ? `${palette.inlineSeparator}${formatRatio(state.triggerRatio)}`
                 : ''}`;
+        case 'armed': {
+            // Slice 2026-09-12-compact-band-policy: NO bar. A bar is a
+            // progress claim, and a registered-but-unfired trigger has no
+            // progress to report — it is waiting for the ratio to reach the
+            // red line on its own. Say exactly that instead.
+            const now = typeof state.triggerRatio === 'number'
+                ? `${palette.inlineSeparator}${formatRatio(state.triggerRatio)}`
+                : '';
+            return `${palette.compact.armed} armed${now}${palette.inlineSeparator}fires at ${formatRatio(AUTO_COMPACT_RED_LINE_RATIO)}`;
+        }
         case 'verifying':
             return `${palette.compact.verifying} ${renderCompactBar(6, palette)} verifying`;
         case 'completed':
@@ -518,7 +533,14 @@ export function renderStatusLine(model, options, env) {
     const compactSegment = renderCompact(model.compact, palette);
     let line;
     const hasCompact = compactSegment.length > 0;
-    if (hasCompact) {
+    // Slice 2026-09-12-compact-band-policy: `armed` is a RESTING state, not
+    // an in-flight compact. It can hold for the whole band between the
+    // auto-fire ratio and the red line, so it is appended to the normal
+    // line instead of REPLACING the skill token — hiding which skill is
+    // active for many turns would be a regression the user never asked
+    // for. Every other (genuinely in-flight) stage keeps replacing it.
+    const armedOnly = model.compact.kind === 'armed';
+    if (hasCompact && !armedOnly) {
         // Compact state replaces the active / stale / idle skill content.
         // `invalid-presence` still surfaces its own diagnostic when compact
         // is also `invalid` (the compact diagnostic wins, since it's the
@@ -526,21 +548,24 @@ export function renderStatusLine(model, options, env) {
         line = `${brand} ${compactSegment}${rootSuffix}`;
     }
     else {
+        let base;
         switch (model.state) {
             case 'active':
-                line = `${brand} ${renderActive(model.presence, palette, nowMs, capability, noColor, model.activeLeaf, model.twentyFourHourState)}${rootSuffix}`;
+                base = renderActive(model.presence, palette, nowMs, capability, noColor, model.activeLeaf, model.twentyFourHourState);
                 break;
             case 'stale':
-                line = `${brand} ${renderStale(model.presence, model.ageMs, palette, capability, noColor)}${rootSuffix}`;
+                base = renderStale(model.presence, model.ageMs, palette, capability, noColor);
                 break;
             case 'invalid-presence':
-                line = `${brand} ${renderInvalid(palette)}${rootSuffix}`;
+                base = renderInvalid(palette);
                 break;
             case 'idle':
             default:
-                line = `${brand} ${renderIdle(palette)}${rootSuffix}`;
+                base = renderIdle(palette);
                 break;
         }
+        const armedSuffix = armedOnly ? `${palette.inlineSeparator}${compactSegment}` : '';
+        line = `${brand} ${base}${armedSuffix}${rootSuffix}`;
     }
     // Marquee is OFF for idle (and only idle). Compact states always
     // carry the band because the compact bar IS the headline. NO_COLOR

package/dist/services/skills/statusline-palette.d.ts

@@ -35,6 +35,12 @@ interface CompactPalette {
     readonly queued: string;
     readonly preparing: string;
     readonly compacting: string;
+    /**
+     * Slice 2026-09-12-compact-band-policy: a trigger is registered but no
+     * compaction is running. Rendered WITHOUT a bar — see
+     * `renderCompact` in skill-statusline-renderer.ts.
+     */
+    readonly armed: string;
     readonly verifying: string;
     readonly completed: string;
     readonly failed: string;

package/dist/services/skills/statusline-palette.js

@@ -117,7 +117,7 @@ function buildPalette(capability, noColor) {
             idleLabel: 'empty',
             invalidMessage: 'presence unreadable',
             compact: {
-                queued: '[', preparing: '+', compacting: '+', verifying: '+',
+                queued: '[', preparing: '+', compacting: '+', armed: '~', verifying: '+',
                 completed: '*', failed,
             },
             barFilled: '#',
@@ -142,6 +142,9 @@ function buildPalette(capability, noColor) {
             queued: brandGlyph('◐'),
             preparing: brandGlyph('◑'),
             compacting: brandGlyph('◒'),
+            // Distinct from `compacting` on purpose: "waiting for the trigger"
+            // must not wear the same face as "a compact is in flight".
+            armed: brandGlyph('◔'),
             verifying: brandGlyph('◓'),
             completed: brandGlyph('✓'),
             failed,

package/dist/services/slice/slice-check-service.js

@@ -96,7 +96,8 @@ function runCommand(command, args, cwd, timeoutMs) {
             cwd,
             stdio: ['ignore', 'pipe', 'pipe'],
             timeout: timeoutMs,
-            maxBuffer: EXEC_MAX_BUFFER_BYTES
+            maxBuffer: EXEC_MAX_BUFFER_BYTES,
+            windowsHide: true
         }).toString('utf8');
         return {
             status: 'pass',

package/dist/services/slice/slice-decompose-runners.js

@@ -98,7 +98,8 @@ function runCodegraph(args, projectRoot) {
         cwd: projectRoot,
         stdio: ['ignore', 'pipe', 'pipe'],
         timeout: 60_000,
-        maxBuffer: 32 * 1024 * 1024
+        maxBuffer: 32 * 1024 * 1024,
+        windowsHide: true
     };
     // Use `peaks codegraph` (the peaks wrapper), which adds --project support.
     // 2026-09-10: no shell. `peaks` on Windows is a `.cmd` shim, which Node >= 20

package/dist/services/upgrade/upgrade-service.js

@@ -47,6 +47,7 @@ export const defaultSubstepExecutor = (command, args, timeoutMs) => {
             encoding: 'utf8',
             stdio: ['ignore', 'pipe', 'pipe'],
             timeout: timeoutMs,
+            windowsHide: true,
         });
         return {
             status: result.status,

package/dist/services/workflow/workflow-skip-service.js

@@ -186,7 +186,8 @@ function resolveSkipAppliedBy() {
         const { execFileSync } = require('node:child_process');
         const out = execFileSync('git', ['config', '--global', 'user.name'], {
             encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'ignore']
+            stdio: ['ignore', 'pipe', 'ignore'],
+            windowsHide: true
         });
         const trimmed = out.trim();
         if (trimmed.length > 0) {

package/dist/services/workspace/migrate-service.js

@@ -426,7 +426,7 @@ async function gitMv(from, to, projectRoot) {
         // command must be run from inside the project so it can locate
         // .git/ (the migrate target may be a temp dir created by tests).
         try {
-            execFileSync('git', ['mv', from, to], { cwd: projectRoot, stdio: 'pipe' });
+            execFileSync('git', ['mv', from, to], { cwd: projectRoot, stdio: 'pipe', windowsHide: true });
         }
         catch {
             throw error;

package/dist/services/workspace/workspace-claude-settings-materializer.js

@@ -24,22 +24,56 @@ function readTextIfPresent(filePath) {
     }
 }
 /**
- * The `env` object of a serialized settings file, or `undefined` when the file
- * is malformed or has no `env` object. Tolerant on purpose: a bad on-disk file
- * must not stop the materialization.
+ * The parsed top-level object of a serialized settings file, or `undefined`
+ * when the file is malformed or is not a JSON object. Tolerant on purpose: a
+ * bad on-disk file must not stop the materialization.
  */
-function readEnvObject(serialized) {
+function readSettingsObject(serialized) {
     try {
         const parsed = JSON.parse(serialized);
         if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
             return undefined;
-        const env = parsed.env;
-        return typeof env === 'object' && env !== null && !Array.isArray(env) ? env : undefined;
+        return parsed;
     }
     catch {
         return undefined;
     }
 }
+/** The `env` object of a serialized settings file, or `undefined`. */
+function readEnvObject(serialized) {
+    const env = readSettingsObject(serialized)?.env;
+    return typeof env === 'object' && env !== null && !Array.isArray(env) ? env : undefined;
+}
+/**
+ * The top-level keys this function's template is allowed to DECIDE. Every other
+ * key on disk belongs to whoever put it there and is carried across verbatim.
+ *
+ *  - `hooks` — the tree this function exists to keep in sync. `peaks workspace
+ *    init` is the writer that converges a consumer's file on the current
+ *    release's handler set, and `templateContentMatches` (the drift detector
+ *    that decides whether to rewrite at all) compares exactly this tree. Letting
+ *    the disk win here would make the rewrite a no-op that reports `refreshed`
+ *    forever.
+ *  - `env` — jointly owned with `peaks hooks install`, which unions the user's
+ *    exemption globs into it. Handled as a union below, not by either side
+ *    winning outright.
+ *
+ * This is deliberately an owned-key LIST and not a preserved-key whitelist: the
+ * direction matters. A whitelist drops every key it was not told about — which
+ * is how `permissions` was lost — whereas anything absent from this list is
+ * preserved by default, including keys no release of peaks-loop knows about.
+ */
+const TEMPLATE_OWNED_KEYS = new Set(['hooks', 'env']);
+/** `template`'s own keys, then every on-disk key the template does not own. */
+function carryUserOwnedKeys(onDisk, template) {
+    const merged = { ...template };
+    for (const [key, value] of Object.entries(onDisk)) {
+        if (TEMPLATE_OWNED_KEYS.has(key))
+            continue;
+        merged[key] = value;
+    }
+    return merged;
+}
 /**
  * The peaks-managed snippet appended to the consumer project's
  * `.peaks/.gitignore` so the local-only settings file never lands
@@ -102,8 +136,18 @@ export async function materializeClaudeSettingsLocal(projectRoot, noClaudeHooks)
     // the rewrite this function is about to do, or a refresh would silently
     // drop someone else's exemptions. The template's own row is added on top, so
     // the result is a union either way.
+    //
+    // The same argument applies to every OTHER top-level key on disk, which the
+    // rewrite used to drop wholesale: `{ ...template }` emitted only the keys the
+    // template declares, so a user's `permissions.allow`, `statusLine`, `model`,
+    // … were deleted by an init that had no opinion about them. The user's
+    // permission rules are not this function's to remove, and the removal was
+    // silent — the envelope reported only `refreshed`. See `carryUserOwnedKeys`
+    // for which keys the template still decides.
+    const onDisk = existing === undefined ? undefined : readSettingsObject(existing);
     const onDiskEnv = existing === undefined ? undefined : readEnvObject(existing);
-    const serialized = JSON.stringify(withExternalGateExemptions(onDiskEnv === undefined ? template : { ...template, env: onDiskEnv }), null, 2) + '\n';
+    const merged = onDisk === undefined ? template : carryUserOwnedKeys(onDisk, template);
+    const serialized = JSON.stringify(withExternalGateExemptions(onDiskEnv === undefined ? merged : { ...merged, env: onDiskEnv }), null, 2) + '\n';
     // Always drop (or self-heal) a copy of the template under .peaks/
     // so the --no-claude-hooks recovery flow has a known source-of-truth
     // on disk. The file is gitignored by the snippet below.

package/dist/services/workspace/workspace-service.js

@@ -6,6 +6,7 @@ import { getSessionIdCanonical, setCurrentSessionBinding, setSessionMeta } from
 import { updateCallerBindingSessionId } from '../session/caller-binding-service.js';
 import { resolveCallerProjection } from '../session/resolve-caller-id.js';
 import { normalizePath } from '../../shared/path-utils.js';
+import { assertWritableProjectRoot } from '../config/config-safety.js';
 /**
  * Slice 2026-09-10 (rid=rebind-must-update-caller-binding): repoint the
  * calling process's own per-caller binding at the session id this init just
@@ -180,6 +181,13 @@ export function validateSessionId(sessionId) {
 }
 export async function initWorkspace(options) {
     validateSessionId(options.sessionId);
+    // Before anything is created: a project tree must never be materialized into
+    // the user's home directory. `--project .` from a fresh terminal (whose cwd
+    // is `$HOME`) resolved to `$HOME` and did exactly that — `.peaks/`,
+    // `.gitignore`, `.claude/settings.local.json` and a codegraph index, all in
+    // the user's home. Enforced here as well as at the CLI so a non-CLI caller
+    // (`peaks upgrade`) cannot reach the same write by another door.
+    assertWritableProjectRoot(options.projectRoot);
     // Phase 6 refactor (slice 2026-06-05-change-id-as-unit-of-work) +
     // slice 006 (2026-06-06-change-folder-simplify-and-lazy-role-subdirs) +
     // slice 2026-06-22-top-level-change-id-cleanup (2.8.3):

package/dist/services/worktree/host-worktree-reconciler.js

@@ -11,6 +11,7 @@ export function reconcileHostWorktrees(input) {
             cwd: input.projectRoot,
             encoding: 'utf8',
             stdio: ['ignore', 'pipe', 'pipe'],
+            windowsHide: true,
         });
         records = parseGitWorktreePorcelain(raw);
     }

package/dist/services/worktree/long-path-cleanup.js

@@ -14,8 +14,9 @@ export function removeRegisteredWorktree(input) {
         execFileSync('git', ['worktree', 'remove', '--force', input.worktreePath], {
             cwd: input.projectRoot,
             stdio: ['ignore', 'pipe', 'pipe'],
+            windowsHide: true,
         });
-        execFileSync('git', ['worktree', 'prune'], { cwd: input.projectRoot, stdio: 'ignore' });
+        execFileSync('git', ['worktree', 'prune'], { cwd: input.projectRoot, stdio: 'ignore', windowsHide: true });
         return { removed: !existsSync(input.worktreePath), strategy: 'git' };
     }
     catch (error) {
@@ -24,7 +25,7 @@ export function removeRegisteredWorktree(input) {
         }
         try {
             rmSync(windowsLongPath(input.worktreePath), { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
-            execFileSync('git', ['worktree', 'prune'], { cwd: input.projectRoot, stdio: 'ignore' });
+            execFileSync('git', ['worktree', 'prune'], { cwd: input.projectRoot, stdio: 'ignore', windowsHide: true });
             return { removed: !existsSync(input.worktreePath), strategy: 'windows-long-path' };
         }
         catch (fallbackError) {

package/dist/shared/process.js

@@ -1,7 +1,7 @@
 import { execFile } from 'node:child_process';
 export async function execCommand(command, args, options) {
     return new Promise((resolve, reject) => {
-        execFile(command, args, { cwd: options?.cwd, env: options?.env }, (error, stdout) => {
+        execFile(command, args, { cwd: options?.cwd, env: options?.env, windowsHide: true }, (error, stdout) => {
             if (error) {
                 reject(error);
                 return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "peaks-loop",
-  "version": "4.0.45",
+  "version": "4.0.47",
   "description": "Loop Engineering CLI — workflow primitive / loop guards / evaluators / slice orchestration",
   "author": "SquabbyZ",
   "keywords": [
@@ -102,10 +102,10 @@
     "picomatch": "4.0.4",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "peaks-loop-mut": "0.1.43",
-    "peaks-loop-shared-channel": "0.0.47",
-    "peaks-loop-internal-runtime": "0.0.30",
-    "peaks-loop-shared": "0.0.79"
+    "peaks-loop-internal-runtime": "0.0.32",
+    "peaks-loop-shared": "0.0.81",
+    "peaks-loop-mut": "0.1.45",
+    "peaks-loop-shared-channel": "0.0.49"
   },
   "devDependencies": {
     "@changesets/cli": "2.31.1",

package/scripts/install-skills.mjs

@@ -1273,6 +1273,7 @@ export async function autoUpgrade1xProjectIfPresent(options = {}) {
       encoding: 'utf8',
       stdio: ['ignore', 'pipe', 'pipe'],
       timeout: 120_000,
+      windowsHide: true,
     });
     return {
       ran: true,

package/scripts/watch.mjs

@@ -30,7 +30,9 @@ export function runCommand(command, args, options = {}) {
     let child;
 
     try {
-      child = spawn(command, args, { stdio: 'inherit', ...options });
+      // `windowsHide` is a default, not a lock: a caller that passes its own
+      // value in `options` still wins, because the spread comes after it.
+      child = spawn(command, args, { stdio: 'inherit', windowsHide: true, ...options });
     } catch (error) {
       rejectPromise(error);
       return;

package/skills/bee/peaks-perf-audit/SKILL.md

@@ -12,7 +12,7 @@ metadata:
     - schema: .peaks/project-scan/audit-output-schema.md
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-prd/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-qa/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 
@@ -298,4 +298,4 @@ QA contracts to assert on the L2 surface (a minimal acceptance test set):
 
 ## Sub-role detached mode (Phase C, slice 2026-08-10)
 
-QA sub-roles (`qa-business`, `qa-perf`, `qa-security`, `qa-business-api`, `qa-business-frontend`, `qa-business-regression`) accept `--mode detached --vendor <vendor>` for parallel test-case execution. Detached mode spawns a real OS process via `peaks sub-agent dispatch --mode detached`, isolated from the orchestrator session. Use detached mode when the test-case writer's expected runtime exceeds 60s OR it processes ≥ 20 source files. The default remains `in-process` (backward compat; existing 106+ dispatch tests untouched). When `--mode detached` is used, the child QA agent receives the G8 infinite-context auto-compact marker (0.85 / 0.95 thresholds; unlimited spend authorized). See `peaks-code/references/sub-agent-dispatch.md` §"Detached Mode" for the full contract.
+QA sub-roles (`qa-business`, `qa-perf`, `qa-security`, `qa-business-api`, `qa-business-frontend`, `qa-business-regression`) accept `--mode detached --vendor <vendor>` for parallel test-case execution. Detached mode spawns a real OS process via `peaks sub-agent dispatch --mode detached`, isolated from the orchestrator session. Use detached mode when the test-case writer's expected runtime exceeds 60s OR it processes ≥ 20 source files. The default remains `in-process` (backward compat; existing 106+ dispatch tests untouched). When `--mode detached` is used, the child QA agent receives the `<peaks-auto-compact>` marker (corrected 2026-09-13, rid `2026-09-13-defects-e`): it asks the child to persist durable state to `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json` before its own harness compacts the session — the child cannot compact itself, and nothing is spliced back into its prompt. See `peaks-code/references/sub-agent-dispatch.md` §"Detached Mode" for the full contract.

package/skills/bee/peaks-rd/SKILL.md

@@ -9,7 +9,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 
@@ -187,7 +187,7 @@ Full dispatch contract (when-to-fan-out rules, dispatch template, prereq gates)
 
 ## Reviewer fan-out detached mode (Phase C, slice 2026-08-10)
 
-Reviewer fan-out may run in detached mode for any of the 3-way fan-out roles (`code-reviewer`, `qa-test-cases-writer`, `karpathy-reviewer`). Detached mode spawns a real OS process via `peaks sub-agent dispatch --mode detached --vendor <vendor>`, isolated from the orchestrator session. Use detached mode when the reviewer's expected runtime exceeds 60s OR processes ≥ 20 source files. Pass `--mode detached` explicitly per reviewer role; the default remains `in-process` (backward compat). The karpathy-reviewer's G8 infinite-context marker (auto-compact at 0.85/0.95, unlimited spend) is honored automatically when `--mode detached` is used. See `peaks-code/references/sub-agent-dispatch.md` §"Detached Mode" for the full contract.
+Reviewer fan-out may run in detached mode for any of the 3-way fan-out roles (`code-reviewer`, `qa-test-cases-writer`, `karpathy-reviewer`). Detached mode spawns a real OS process via `peaks sub-agent dispatch --mode detached --vendor <vendor>`, isolated from the orchestrator session. Use detached mode when the reviewer's expected runtime exceeds 60s OR processes ≥ 20 source files. Pass `--mode detached` explicitly per reviewer role; the default remains `in-process` (backward compat). The karpathy-reviewer's `<peaks-auto-compact>` marker is honored automatically when `--mode detached` is used. Note what that marker does and does not do (corrected 2026-09-13, rid `2026-09-13-defects-e`): it asks the child to persist durable state to `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json` before its own harness compacts the session — the child cannot compact itself, and nothing is spliced back into its prompt. See `peaks-code/references/sub-agent-dispatch.md` §"Detached Mode" for the full contract.
 
 ## Refactor hard gates
 

package/skills/bee/peaks-reviewer/SKILL.md

@@ -4,7 +4,7 @@ visibility: internal
 description: Third-party independent code-review skill for Peaks. Use as a parallel reviewer to karpathy-reviewer when a workflow needs an out-of-band (non-RD-model) review pass to mitigate single-LLM self-dogfood blind spots. Emits a schema-validated ReviewerEnvelope (no free-form LLM JSON). v2.14.0 G4.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-sc/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-security-audit/SKILL.md

@@ -12,7 +12,7 @@ metadata:
     - schema: .peaks/project-scan/audit-output-schema.md
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-txt/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-ui/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-audit/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-audit
 description: Gate autonomous LLM work on a 6-dimension audit + user-accepted goal. Use IMMEDIATELY after a need is expressed, BEFORE any PRD/RD/QA work starts.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-code/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-code
 description: Code-domain loop engineering orchestrator for the Peaks-Loop skill family. Use when the user asks Peaks-Loop to handle a code-repo workflow end-to-end (端到端/全流程/需求开发), especially from a product document (PRD/飞书文档/Feishu doc) through implementation and validation. Coordinates peaks-prd, peaks-rd, peaks-qa, peaks-ui, peaks-sc, and peaks-txt while preserving user confirmation gates. Triggers on `/peaks-code`, "peaks code", "全流程开发", "端到端迭代". General primitives (peaks-resume / peaks-status / peaks-test) are sibling skills, not children.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 
@@ -37,7 +37,7 @@ of ~30 minutes clears the gate's "already passed" list, so a file you cleared ea
 denied again after a long pause. That is the gate resetting, not you regressing.
 <!-- /peaks:loop-hygiene -->
 
-> **Detached sub-agent mode (Phase A, slice 2026-08-10).** When the orchestrator requires true parallelism with isolated context windows and survives orchestrator session exit, dispatch sub-agents with `--mode detached --vendor <claude|codex|copilot>`. The CLI spawns a real OS process via `ProcessSupervisor` (Windows `DETACHED_PROCESS` + `CREATE_NEW_PROCESS_GROUP`, POSIX `setsid` + `nohup`); the child vendor LLM receives a 5–8KB minimum prompt slice (no orchestrator session history) and self-compacts at 0.85 / 0.95 against the vendor window via the `<peaks-auto-compact>` marker (G8 — unlimited spend authorized). Orchestrator MUST emit one line of prose before every detached dispatch: `⏳ Spawning detached sub-agent via <vendor>: rid=<rid> (ETA ~60s)`. Status is read from `.peaks/_runtime/<sid>/detached/<rid>/status.json`; `LifecycleOwner` enforces 100% cleanup of `pid` / `log.txt` / `status.json` / `owner-session` on every exit path. `--no-throttle --max-concurrent <N>` bypasses `ResourceBudgetGuard` (user accepts risk; default max=8). See `references/sub-agent-dispatch.md` §"Detached Mode" for the full contract. Default mode remains `in-process` for backward compat (existing 106+ dispatch tests untouched).
+> **Detached sub-agent mode (Phase A, slice 2026-08-10).** When the orchestrator requires true parallelism with isolated context windows and survives orchestrator session exit, dispatch sub-agents with `--mode detached --vendor <claude|codex|copilot>`. The CLI spawns a real OS process via `ProcessSupervisor` (Windows `DETACHED_PROCESS` + `CREATE_NEW_PROCESS_GROUP`, POSIX `setsid` + `nohup`); the child vendor LLM receives a 5–8KB minimum prompt slice (no orchestrator session history) and, via the `<peaks-auto-compact>` marker, is told to persist durable state to `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json` before its own harness compacts the session (G8, corrected 2026-09-13 rid `2026-09-13-defects-e`: the child cannot compact itself and nothing is spliced back into its prompt; peaks runtime simply has no token-cost throttle, which is not the same as a granted budget). Orchestrator MUST emit one line of prose before every detached dispatch: `⏳ Spawning detached sub-agent via <vendor>: rid=<rid> (ETA ~60s)`. Status is read from `.peaks/_runtime/<sid>/detached/<rid>/status.json`; `LifecycleOwner` enforces 100% cleanup of `pid` / `log.txt` / `status.json` / `owner-session` on every exit path. `--no-throttle --max-concurrent <N>` bypasses `ResourceBudgetGuard` (user accepts risk; default max=8). See `references/sub-agent-dispatch.md` §"Detached Mode" for the full contract. Default mode remains `in-process` for backward compat (existing 106+ dispatch tests untouched).
 ---
 
 ## Scope (RL-8 — red line, locked 2026-07-08)
@@ -185,7 +185,7 @@ Before the first planning action, run `peaks fresh-context preflight --prompt "<
 1. **PreToolUse hook — `peaks code gate-step-08`.** Installed by `peaks workspace init` on the `Bash` matcher; checks `job-shape.json` presence + fail-closed backup regex. If `job-shape.json` AND `progress.json` exist, surfaces `Next: slice #N of M (<currentSlice>)` so the LLM cannot wake up cold.
 2. **Size-fear ban — `peaks code emit-handoff`.** Refuses to emit a final handoff while `remaining > 0` under Job mode. Pass `--force-under-job` only with explicit user approval.
 3. **On-disk slice progress — `peaks job progress`.** `peaks job checkpoint --state done` writes `progress.json`. `peaks job progress --job-id <jid> [--allow-missing]` is the canonical reader.
-4. **Forced auto-compact — `--enforce-job-mode`.** `peaks code context-now --enforce-job-mode` returns `action: 'auto-compact-now'` at ≥ 0.85. **Job mode at ≥ 0.85 is MANDATORY auto-compact** — Code MUST call `peaks code auto-compact` without confirmation.
+4. **Forced auto-compact — `peaks code context-now`.** It returns `action: 'auto-compact-now'` at ≥ 0.85. **≥ 0.85 is MANDATORY auto-compact in every mode (single-rid included)** — Code MUST call `peaks code auto-compact` without confirmation. `--enforce-job-mode` (v3.1.2) only labels the run `jobMode=true`; the ≥ 0.85 downgrade that used to apply to single-rid sessions was removed 2026-09-12.
 
 **Step 0.7 resume rule (read-FIRST):** on resume, `peaks code gate-step-08` reads `progress.json` first and surfaces `Next: slice #N of M (<currentSlice>)` so the orchestrator picks up at the right slice without re-reading the artifact tree.
 
@@ -209,7 +209,7 @@ Before the first planning action, run `peaks fresh-context preflight --prompt "<
 
 **Enforcement layers (defense in depth):**
 1. `src/services/code/auto-compact-orchestrator.ts` — `evaluateAutoCompactDecision` default-returns `shouldCompact: true` for both `pre-compact` and `red-line`. Only deferral is `inFlightBatch.hasInFlightBatch` (D6.e); no LLM/human approval branch.
-2. `--enforce-job-mode` (v3.1.2) — Job mode elevates ≥0.85 to MANDATORY regardless of in-flight batch.
+2. `peaks code context-now` — ≥ 0.85 is MANDATORY (`auto-compact-now`) in every mode; `--enforce-job-mode` no longer gates that (2026-09-12). Only an in-flight sub-agent batch defers it.
 3. `peaks code gate-step-08` (PreToolUse hook) — surfaces `auto-compact-now` on every Bash call when ratio is in the zone, so the LLM cannot wake up cold and forget.
 4. Karpathy §4 exception: `peaks code auto-compact` is fired *by the orchestrator*, not by the user. If you find yourself about to write "ask the user to compact" / "prompt the user to run `/compact`", STOP — that is the regression.
 

package/skills/peaks-code/references/sub-agent-dispatch.md

@@ -449,7 +449,7 @@ peaks skill presence:set peaks-code --project <repo> --mode <mode> --gate swarm-
 
 - **Cross-platform spawn**: Windows uses `DETACHED_PROCESS` + `CREATE_NEW_PROCESS_GROUP`; POSIX uses `setsid` + `nohup`. Implementation: `packages/peaks-loop-internal-runtime/src/process-supervisor.ts`.
 - **Minimum-context prompt**: `PromptBuilder` emits a 5–8KB slice `{rid, role, vendor, files, refs}` plus the verbatim `<peaks-auto-compact>` marker. The forbidden marker `@@@ORCHESTRATOR_SESSION_HISTORY_BOUNDARY@@@` MUST NOT appear in any prompt (unit-tested; regression fails vitest).
-- **G8 infinite context**: the child LLM self-monitors context; on ≥0.85 it compacts and writes `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json`; on ≥0.95 it writes `status.json` note `'compact-emergency'`. peaks runtime does NOT throttle on token cost — user authorized unlimited spend for G8 (recorded as `tokenUsage` on the dispatch record for audit visibility only).
+- **G8 infinite context (corrected 2026-09-13, rid `2026-09-13-defects-e`)**: the child does **not** and **cannot** compact its own session. `/compact` is not model-invokable, hooks may only observe or veto, there is no `--compact` flag, and no external process can reach a running session's memory — compaction is the child's own harness acting on its own window. What the `<peaks-auto-compact>` marker actually asks for is the reachable half: write the durable state (summary / task state / decisions kept / options discarded) to `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json` and heartbeat to `status.json`, so nothing load-bearing lives only in a conversation that will be summarised. Nothing flows back into the child's context — its prompt is the `-p` argv string fixed at spawn. Token cost: peaks runtime has no token-cost throttle to relax (the only guard, `ResourceBudgetGuard`, throttles RSS / CPU / fan-out, never spend), so there is no cost cap — but that is an absence of throttling, not a granted permission with a flag behind it.
 - **Lifecycle closure invariant**: `pid` / `log.txt` / `status.json` / `owner-session` 100% cleaned on every exit path (success / crash / OOM / SIGTERM). `peaks sub-agent cleanup --orphan` is the only orphan-killing path (RL-15: user-only decision; default is "do nothing").
 - **Resource budget guard**: `ResourceBudgetGuard` enforces `runtime RSS ≤ 200MB / idle CPU ≤ 5% / fan-out ≤ 8 (default)`. `--no-throttle` bypasses (user accepts risk; adds warning to envelope). `--max-concurrent <N>` overrides the 8 default.
 - **Vendor-neutral**: `VendorAdapterRegistry` registers `ClaudeAdapter` (Phase A) / `CodexAdapter` + `CopilotAdapter` (Phase B). Missing vendor CLI → fallback to default with `dispatchRecord.warning = 'vendor fallback: <id>→claude'`.

package/skills/peaks-content/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-content
 description: Non-code orchestrator for content workflows (draft / edit / publish / archive). Use when a user wants to drive an end-to-end content-production loop (blog post, newsletter, marketing copy, social thread, doc page) where the LLM must coordinate draft / edit / tone / publish / archive stages with explicit gates between them, and where the user only wants to speak natural language and pick options. NOT for free-form chatting; NOT for code review. Reuses the peaks-loop Loop Engineering primitives (Loop Engineering Asset, Bee Asset, Workflow Trace, Evolution Evaluation) but does NOT import peaks-code internals. Triggers on `/peaks-content`, "peaks content", "content workflow", "publish this to <channel>", "edit the draft", "archive the previous version".
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-doctor/SKILL.md

@@ -4,7 +4,7 @@ description: Orchestrate peaks-loop's L3 doctor (peaks audit + peaks doctor + pe
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-final-review/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-final-review
 description: Final-review skill for Peaks. Use when a workflow needs to assemble 4-dimension business-review evidence (functional-completeness, problem-resolution, no-new-bugs, existing-functionality-intact) for human acceptance at the end of an autonomous slice. Triggers on "/peaks-final-review", "prepare final review", "4-dim review", or peaks-code end-of-workflow handoff.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-ide/SKILL.md

@@ -4,7 +4,7 @@ description: Orchestrate peaks-loop's IDE-aware behavior (hooks + statusline + h
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-issue-fix-orchestrator/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-issue-fix-orchestrator
 description: 'End-to-end orchestrator that surveys open issues in a target repo, classifies them by difficulty, mines reference merged-PRs, fixes each issue with real commits (with Repository + AI-modified declaration), writes normalized PR description files, and emits a one-line submit script. Use when the user wants to drive a "fix N open issues and prepare PRs" run on an upstream repo (any language; primarily Python + TypeScript). Reuses Loop Engineering primitives: 4-layer asset model, Darwin ratchet, karpathy-engineered red lines, Human-NL-Choice-Only. Triggers on `/peaks-issue-fix-orchestrator`, "fix 30 issues", "dogfood on <repo>", "open-issue sweep on <repo>".'
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)