peaks-loop 4.0.46 → 4.0.47

package/dist/services/skills/skill-presence-service.js

@@ -604,6 +604,15 @@ export function clearSkillPresence(projectRootOverride) {
     // shim; the LLM runner calls `peaks workflow terminalize` or
     // `terminalizePresenceLease` directly).
     //
+    // That rule is the surrounding DESIGN, not a description of this
+    // function: nothing below routes anywhere. This shim has no session
+    // lock, no lease argument and no workflow id, so it cannot route —
+    // it cleans up deprecated files and returns whether it removed any.
+    // The truthful report of what remains is the caller's job
+    // (`skill-command.ts` re-reads the live projection and emits
+    // `cleared` / `reason`). Do not read the paragraph above as a
+    // promise about this function.
+    //
     // The shim still removes the legacy `active-skill.json` /
     // `.peaks/.active-skill.json` so a stale marker from a prior CLI
     // version cannot resurrect after a fresh `clear`. The canonical

package/dist/services/slice/slice-check-service.js

@@ -96,7 +96,8 @@ function runCommand(command, args, cwd, timeoutMs) {
             cwd,
             stdio: ['ignore', 'pipe', 'pipe'],
             timeout: timeoutMs,
-            maxBuffer: EXEC_MAX_BUFFER_BYTES
+            maxBuffer: EXEC_MAX_BUFFER_BYTES,
+            windowsHide: true
         }).toString('utf8');
         return {
             status: 'pass',

package/dist/services/slice/slice-decompose-runners.js

@@ -98,7 +98,8 @@ function runCodegraph(args, projectRoot) {
         cwd: projectRoot,
         stdio: ['ignore', 'pipe', 'pipe'],
         timeout: 60_000,
-        maxBuffer: 32 * 1024 * 1024
+        maxBuffer: 32 * 1024 * 1024,
+        windowsHide: true
     };
     // Use `peaks codegraph` (the peaks wrapper), which adds --project support.
     // 2026-09-10: no shell. `peaks` on Windows is a `.cmd` shim, which Node >= 20

package/dist/services/upgrade/upgrade-service.js

@@ -47,6 +47,7 @@ export const defaultSubstepExecutor = (command, args, timeoutMs) => {
             encoding: 'utf8',
             stdio: ['ignore', 'pipe', 'pipe'],
             timeout: timeoutMs,
+            windowsHide: true,
         });
         return {
             status: result.status,

package/dist/services/workflow/workflow-skip-service.js

@@ -186,7 +186,8 @@ function resolveSkipAppliedBy() {
         const { execFileSync } = require('node:child_process');
         const out = execFileSync('git', ['config', '--global', 'user.name'], {
             encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'ignore']
+            stdio: ['ignore', 'pipe', 'ignore'],
+            windowsHide: true
         });
         const trimmed = out.trim();
         if (trimmed.length > 0) {

package/dist/services/workspace/migrate-service.js

@@ -426,7 +426,7 @@ async function gitMv(from, to, projectRoot) {
         // command must be run from inside the project so it can locate
         // .git/ (the migrate target may be a temp dir created by tests).
         try {
-            execFileSync('git', ['mv', from, to], { cwd: projectRoot, stdio: 'pipe' });
+            execFileSync('git', ['mv', from, to], { cwd: projectRoot, stdio: 'pipe', windowsHide: true });
         }
         catch {
             throw error;

package/dist/services/workspace/workspace-claude-settings-materializer.js

@@ -24,22 +24,56 @@ function readTextIfPresent(filePath) {
     }
 }
 /**
- * The `env` object of a serialized settings file, or `undefined` when the file
- * is malformed or has no `env` object. Tolerant on purpose: a bad on-disk file
- * must not stop the materialization.
+ * The parsed top-level object of a serialized settings file, or `undefined`
+ * when the file is malformed or is not a JSON object. Tolerant on purpose: a
+ * bad on-disk file must not stop the materialization.
  */
-function readEnvObject(serialized) {
+function readSettingsObject(serialized) {
     try {
         const parsed = JSON.parse(serialized);
         if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
             return undefined;
-        const env = parsed.env;
-        return typeof env === 'object' && env !== null && !Array.isArray(env) ? env : undefined;
+        return parsed;
     }
     catch {
         return undefined;
     }
 }
+/** The `env` object of a serialized settings file, or `undefined`. */
+function readEnvObject(serialized) {
+    const env = readSettingsObject(serialized)?.env;
+    return typeof env === 'object' && env !== null && !Array.isArray(env) ? env : undefined;
+}
+/**
+ * The top-level keys this function's template is allowed to DECIDE. Every other
+ * key on disk belongs to whoever put it there and is carried across verbatim.
+ *
+ *  - `hooks` — the tree this function exists to keep in sync. `peaks workspace
+ *    init` is the writer that converges a consumer's file on the current
+ *    release's handler set, and `templateContentMatches` (the drift detector
+ *    that decides whether to rewrite at all) compares exactly this tree. Letting
+ *    the disk win here would make the rewrite a no-op that reports `refreshed`
+ *    forever.
+ *  - `env` — jointly owned with `peaks hooks install`, which unions the user's
+ *    exemption globs into it. Handled as a union below, not by either side
+ *    winning outright.
+ *
+ * This is deliberately an owned-key LIST and not a preserved-key whitelist: the
+ * direction matters. A whitelist drops every key it was not told about — which
+ * is how `permissions` was lost — whereas anything absent from this list is
+ * preserved by default, including keys no release of peaks-loop knows about.
+ */
+const TEMPLATE_OWNED_KEYS = new Set(['hooks', 'env']);
+/** `template`'s own keys, then every on-disk key the template does not own. */
+function carryUserOwnedKeys(onDisk, template) {
+    const merged = { ...template };
+    for (const [key, value] of Object.entries(onDisk)) {
+        if (TEMPLATE_OWNED_KEYS.has(key))
+            continue;
+        merged[key] = value;
+    }
+    return merged;
+}
 /**
  * The peaks-managed snippet appended to the consumer project's
  * `.peaks/.gitignore` so the local-only settings file never lands
@@ -102,8 +136,18 @@ export async function materializeClaudeSettingsLocal(projectRoot, noClaudeHooks)
     // the rewrite this function is about to do, or a refresh would silently
     // drop someone else's exemptions. The template's own row is added on top, so
     // the result is a union either way.
+    //
+    // The same argument applies to every OTHER top-level key on disk, which the
+    // rewrite used to drop wholesale: `{ ...template }` emitted only the keys the
+    // template declares, so a user's `permissions.allow`, `statusLine`, `model`,
+    // … were deleted by an init that had no opinion about them. The user's
+    // permission rules are not this function's to remove, and the removal was
+    // silent — the envelope reported only `refreshed`. See `carryUserOwnedKeys`
+    // for which keys the template still decides.
+    const onDisk = existing === undefined ? undefined : readSettingsObject(existing);
     const onDiskEnv = existing === undefined ? undefined : readEnvObject(existing);
-    const serialized = JSON.stringify(withExternalGateExemptions(onDiskEnv === undefined ? template : { ...template, env: onDiskEnv }), null, 2) + '\n';
+    const merged = onDisk === undefined ? template : carryUserOwnedKeys(onDisk, template);
+    const serialized = JSON.stringify(withExternalGateExemptions(onDiskEnv === undefined ? merged : { ...merged, env: onDiskEnv }), null, 2) + '\n';
     // Always drop (or self-heal) a copy of the template under .peaks/
     // so the --no-claude-hooks recovery flow has a known source-of-truth
     // on disk. The file is gitignored by the snippet below.

package/dist/services/workspace/workspace-service.js

@@ -6,6 +6,7 @@ import { getSessionIdCanonical, setCurrentSessionBinding, setSessionMeta } from
 import { updateCallerBindingSessionId } from '../session/caller-binding-service.js';
 import { resolveCallerProjection } from '../session/resolve-caller-id.js';
 import { normalizePath } from '../../shared/path-utils.js';
+import { assertWritableProjectRoot } from '../config/config-safety.js';
 /**
  * Slice 2026-09-10 (rid=rebind-must-update-caller-binding): repoint the
  * calling process's own per-caller binding at the session id this init just
@@ -180,6 +181,13 @@ export function validateSessionId(sessionId) {
 }
 export async function initWorkspace(options) {
     validateSessionId(options.sessionId);
+    // Before anything is created: a project tree must never be materialized into
+    // the user's home directory. `--project .` from a fresh terminal (whose cwd
+    // is `$HOME`) resolved to `$HOME` and did exactly that — `.peaks/`,
+    // `.gitignore`, `.claude/settings.local.json` and a codegraph index, all in
+    // the user's home. Enforced here as well as at the CLI so a non-CLI caller
+    // (`peaks upgrade`) cannot reach the same write by another door.
+    assertWritableProjectRoot(options.projectRoot);
     // Phase 6 refactor (slice 2026-06-05-change-id-as-unit-of-work) +
     // slice 006 (2026-06-06-change-folder-simplify-and-lazy-role-subdirs) +
     // slice 2026-06-22-top-level-change-id-cleanup (2.8.3):

package/dist/services/worktree/host-worktree-reconciler.js

@@ -11,6 +11,7 @@ export function reconcileHostWorktrees(input) {
             cwd: input.projectRoot,
             encoding: 'utf8',
             stdio: ['ignore', 'pipe', 'pipe'],
+            windowsHide: true,
         });
         records = parseGitWorktreePorcelain(raw);
     }

package/dist/services/worktree/long-path-cleanup.js

@@ -14,8 +14,9 @@ export function removeRegisteredWorktree(input) {
         execFileSync('git', ['worktree', 'remove', '--force', input.worktreePath], {
             cwd: input.projectRoot,
             stdio: ['ignore', 'pipe', 'pipe'],
+            windowsHide: true,
         });
-        execFileSync('git', ['worktree', 'prune'], { cwd: input.projectRoot, stdio: 'ignore' });
+        execFileSync('git', ['worktree', 'prune'], { cwd: input.projectRoot, stdio: 'ignore', windowsHide: true });
         return { removed: !existsSync(input.worktreePath), strategy: 'git' };
     }
     catch (error) {
@@ -24,7 +25,7 @@ export function removeRegisteredWorktree(input) {
         }
         try {
             rmSync(windowsLongPath(input.worktreePath), { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
-            execFileSync('git', ['worktree', 'prune'], { cwd: input.projectRoot, stdio: 'ignore' });
+            execFileSync('git', ['worktree', 'prune'], { cwd: input.projectRoot, stdio: 'ignore', windowsHide: true });
             return { removed: !existsSync(input.worktreePath), strategy: 'windows-long-path' };
         }
         catch (fallbackError) {

package/dist/shared/process.js

@@ -1,7 +1,7 @@
 import { execFile } from 'node:child_process';
 export async function execCommand(command, args, options) {
     return new Promise((resolve, reject) => {
-        execFile(command, args, { cwd: options?.cwd, env: options?.env }, (error, stdout) => {
+        execFile(command, args, { cwd: options?.cwd, env: options?.env, windowsHide: true }, (error, stdout) => {
             if (error) {
                 reject(error);
                 return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "peaks-loop",
-  "version": "4.0.46",
+  "version": "4.0.47",
   "description": "Loop Engineering CLI — workflow primitive / loop guards / evaluators / slice orchestration",
   "author": "SquabbyZ",
   "keywords": [
@@ -102,10 +102,10 @@
     "picomatch": "4.0.4",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "peaks-loop-internal-runtime": "0.0.31",
-    "peaks-loop-shared": "0.0.80",
-    "peaks-loop-shared-channel": "0.0.48",
-    "peaks-loop-mut": "0.1.44"
+    "peaks-loop-internal-runtime": "0.0.32",
+    "peaks-loop-shared": "0.0.81",
+    "peaks-loop-mut": "0.1.45",
+    "peaks-loop-shared-channel": "0.0.49"
   },
   "devDependencies": {
     "@changesets/cli": "2.31.1",

package/scripts/install-skills.mjs

@@ -1273,6 +1273,7 @@ export async function autoUpgrade1xProjectIfPresent(options = {}) {
       encoding: 'utf8',
       stdio: ['ignore', 'pipe', 'pipe'],
       timeout: 120_000,
+      windowsHide: true,
     });
     return {
       ran: true,

package/scripts/watch.mjs

@@ -30,7 +30,9 @@ export function runCommand(command, args, options = {}) {
     let child;
 
     try {
-      child = spawn(command, args, { stdio: 'inherit', ...options });
+      // `windowsHide` is a default, not a lock: a caller that passes its own
+      // value in `options` still wins, because the spread comes after it.
+      child = spawn(command, args, { stdio: 'inherit', windowsHide: true, ...options });
     } catch (error) {
       rejectPromise(error);
       return;

package/skills/bee/peaks-perf-audit/SKILL.md

@@ -12,7 +12,7 @@ metadata:
     - schema: .peaks/project-scan/audit-output-schema.md
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-prd/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-qa/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 
@@ -298,4 +298,4 @@ QA contracts to assert on the L2 surface (a minimal acceptance test set):
 
 ## Sub-role detached mode (Phase C, slice 2026-08-10)
 
-QA sub-roles (`qa-business`, `qa-perf`, `qa-security`, `qa-business-api`, `qa-business-frontend`, `qa-business-regression`) accept `--mode detached --vendor <vendor>` for parallel test-case execution. Detached mode spawns a real OS process via `peaks sub-agent dispatch --mode detached`, isolated from the orchestrator session. Use detached mode when the test-case writer's expected runtime exceeds 60s OR it processes ≥ 20 source files. The default remains `in-process` (backward compat; existing 106+ dispatch tests untouched). When `--mode detached` is used, the child QA agent receives the G8 infinite-context auto-compact marker (0.85 / 0.95 thresholds; unlimited spend authorized). See `peaks-code/references/sub-agent-dispatch.md` §"Detached Mode" for the full contract.
+QA sub-roles (`qa-business`, `qa-perf`, `qa-security`, `qa-business-api`, `qa-business-frontend`, `qa-business-regression`) accept `--mode detached --vendor <vendor>` for parallel test-case execution. Detached mode spawns a real OS process via `peaks sub-agent dispatch --mode detached`, isolated from the orchestrator session. Use detached mode when the test-case writer's expected runtime exceeds 60s OR it processes ≥ 20 source files. The default remains `in-process` (backward compat; existing 106+ dispatch tests untouched). When `--mode detached` is used, the child QA agent receives the `<peaks-auto-compact>` marker (corrected 2026-09-13, rid `2026-09-13-defects-e`): it asks the child to persist durable state to `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json` before its own harness compacts the session — the child cannot compact itself, and nothing is spliced back into its prompt. See `peaks-code/references/sub-agent-dispatch.md` §"Detached Mode" for the full contract.

package/skills/bee/peaks-rd/SKILL.md

@@ -9,7 +9,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 
@@ -187,7 +187,7 @@ Full dispatch contract (when-to-fan-out rules, dispatch template, prereq gates)
 
 ## Reviewer fan-out detached mode (Phase C, slice 2026-08-10)
 
-Reviewer fan-out may run in detached mode for any of the 3-way fan-out roles (`code-reviewer`, `qa-test-cases-writer`, `karpathy-reviewer`). Detached mode spawns a real OS process via `peaks sub-agent dispatch --mode detached --vendor <vendor>`, isolated from the orchestrator session. Use detached mode when the reviewer's expected runtime exceeds 60s OR processes ≥ 20 source files. Pass `--mode detached` explicitly per reviewer role; the default remains `in-process` (backward compat). The karpathy-reviewer's G8 infinite-context marker (auto-compact at 0.85/0.95, unlimited spend) is honored automatically when `--mode detached` is used. See `peaks-code/references/sub-agent-dispatch.md` §"Detached Mode" for the full contract.
+Reviewer fan-out may run in detached mode for any of the 3-way fan-out roles (`code-reviewer`, `qa-test-cases-writer`, `karpathy-reviewer`). Detached mode spawns a real OS process via `peaks sub-agent dispatch --mode detached --vendor <vendor>`, isolated from the orchestrator session. Use detached mode when the reviewer's expected runtime exceeds 60s OR processes ≥ 20 source files. Pass `--mode detached` explicitly per reviewer role; the default remains `in-process` (backward compat). The karpathy-reviewer's `<peaks-auto-compact>` marker is honored automatically when `--mode detached` is used. Note what that marker does and does not do (corrected 2026-09-13, rid `2026-09-13-defects-e`): it asks the child to persist durable state to `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json` before its own harness compacts the session — the child cannot compact itself, and nothing is spliced back into its prompt. See `peaks-code/references/sub-agent-dispatch.md` §"Detached Mode" for the full contract.
 
 ## Refactor hard gates
 

package/skills/bee/peaks-reviewer/SKILL.md

@@ -4,7 +4,7 @@ visibility: internal
 description: Third-party independent code-review skill for Peaks. Use as a parallel reviewer to karpathy-reviewer when a workflow needs an out-of-band (non-RD-model) review pass to mitigate single-LLM self-dogfood blind spots. Emits a schema-validated ReviewerEnvelope (no free-form LLM JSON). v2.14.0 G4.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-sc/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-security-audit/SKILL.md

@@ -12,7 +12,7 @@ metadata:
     - schema: .peaks/project-scan/audit-output-schema.md
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-txt/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/bee/peaks-ui/SKILL.md

@@ -8,7 +8,7 @@ description: |
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-audit/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-audit
 description: Gate autonomous LLM work on a 6-dimension audit + user-accepted goal. Use IMMEDIATELY after a need is expressed, BEFORE any PRD/RD/QA work starts.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-code/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-code
 description: Code-domain loop engineering orchestrator for the Peaks-Loop skill family. Use when the user asks Peaks-Loop to handle a code-repo workflow end-to-end (端到端/全流程/需求开发), especially from a product document (PRD/飞书文档/Feishu doc) through implementation and validation. Coordinates peaks-prd, peaks-rd, peaks-qa, peaks-ui, peaks-sc, and peaks-txt while preserving user confirmation gates. Triggers on `/peaks-code`, "peaks code", "全流程开发", "端到端迭代". General primitives (peaks-resume / peaks-status / peaks-test) are sibling skills, not children.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 
@@ -37,7 +37,7 @@ of ~30 minutes clears the gate's "already passed" list, so a file you cleared ea
 denied again after a long pause. That is the gate resetting, not you regressing.
 <!-- /peaks:loop-hygiene -->
 
-> **Detached sub-agent mode (Phase A, slice 2026-08-10).** When the orchestrator requires true parallelism with isolated context windows and survives orchestrator session exit, dispatch sub-agents with `--mode detached --vendor <claude|codex|copilot>`. The CLI spawns a real OS process via `ProcessSupervisor` (Windows `DETACHED_PROCESS` + `CREATE_NEW_PROCESS_GROUP`, POSIX `setsid` + `nohup`); the child vendor LLM receives a 5–8KB minimum prompt slice (no orchestrator session history) and self-compacts at 0.85 / 0.95 against the vendor window via the `<peaks-auto-compact>` marker (G8 — unlimited spend authorized). Orchestrator MUST emit one line of prose before every detached dispatch: `⏳ Spawning detached sub-agent via <vendor>: rid=<rid> (ETA ~60s)`. Status is read from `.peaks/_runtime/<sid>/detached/<rid>/status.json`; `LifecycleOwner` enforces 100% cleanup of `pid` / `log.txt` / `status.json` / `owner-session` on every exit path. `--no-throttle --max-concurrent <N>` bypasses `ResourceBudgetGuard` (user accepts risk; default max=8). See `references/sub-agent-dispatch.md` §"Detached Mode" for the full contract. Default mode remains `in-process` for backward compat (existing 106+ dispatch tests untouched).
+> **Detached sub-agent mode (Phase A, slice 2026-08-10).** When the orchestrator requires true parallelism with isolated context windows and survives orchestrator session exit, dispatch sub-agents with `--mode detached --vendor <claude|codex|copilot>`. The CLI spawns a real OS process via `ProcessSupervisor` (Windows `DETACHED_PROCESS` + `CREATE_NEW_PROCESS_GROUP`, POSIX `setsid` + `nohup`); the child vendor LLM receives a 5–8KB minimum prompt slice (no orchestrator session history) and, via the `<peaks-auto-compact>` marker, is told to persist durable state to `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json` before its own harness compacts the session (G8, corrected 2026-09-13 rid `2026-09-13-defects-e`: the child cannot compact itself and nothing is spliced back into its prompt; peaks runtime simply has no token-cost throttle, which is not the same as a granted budget). Orchestrator MUST emit one line of prose before every detached dispatch: `⏳ Spawning detached sub-agent via <vendor>: rid=<rid> (ETA ~60s)`. Status is read from `.peaks/_runtime/<sid>/detached/<rid>/status.json`; `LifecycleOwner` enforces 100% cleanup of `pid` / `log.txt` / `status.json` / `owner-session` on every exit path. `--no-throttle --max-concurrent <N>` bypasses `ResourceBudgetGuard` (user accepts risk; default max=8). See `references/sub-agent-dispatch.md` §"Detached Mode" for the full contract. Default mode remains `in-process` for backward compat (existing 106+ dispatch tests untouched).
 ---
 
 ## Scope (RL-8 — red line, locked 2026-07-08)

package/skills/peaks-code/references/sub-agent-dispatch.md

@@ -449,7 +449,7 @@ peaks skill presence:set peaks-code --project <repo> --mode <mode> --gate swarm-
 
 - **Cross-platform spawn**: Windows uses `DETACHED_PROCESS` + `CREATE_NEW_PROCESS_GROUP`; POSIX uses `setsid` + `nohup`. Implementation: `packages/peaks-loop-internal-runtime/src/process-supervisor.ts`.
 - **Minimum-context prompt**: `PromptBuilder` emits a 5–8KB slice `{rid, role, vendor, files, refs}` plus the verbatim `<peaks-auto-compact>` marker. The forbidden marker `@@@ORCHESTRATOR_SESSION_HISTORY_BOUNDARY@@@` MUST NOT appear in any prompt (unit-tested; regression fails vitest).
-- **G8 infinite context**: the child LLM self-monitors context; on ≥0.85 it compacts and writes `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json`; on ≥0.95 it writes `status.json` note `'compact-emergency'`. peaks runtime does NOT throttle on token cost — user authorized unlimited spend for G8 (recorded as `tokenUsage` on the dispatch record for audit visibility only).
+- **G8 infinite context (corrected 2026-09-13, rid `2026-09-13-defects-e`)**: the child does **not** and **cannot** compact its own session. `/compact` is not model-invokable, hooks may only observe or veto, there is no `--compact` flag, and no external process can reach a running session's memory — compaction is the child's own harness acting on its own window. What the `<peaks-auto-compact>` marker actually asks for is the reachable half: write the durable state (summary / task state / decisions kept / options discarded) to `.peaks/_runtime/<sid>/detached/<rid>/compact/<n>.json` and heartbeat to `status.json`, so nothing load-bearing lives only in a conversation that will be summarised. Nothing flows back into the child's context — its prompt is the `-p` argv string fixed at spawn. Token cost: peaks runtime has no token-cost throttle to relax (the only guard, `ResourceBudgetGuard`, throttles RSS / CPU / fan-out, never spend), so there is no cost cap — but that is an absence of throttling, not a granted permission with a flag behind it.
 - **Lifecycle closure invariant**: `pid` / `log.txt` / `status.json` / `owner-session` 100% cleaned on every exit path (success / crash / OOM / SIGTERM). `peaks sub-agent cleanup --orphan` is the only orphan-killing path (RL-15: user-only decision; default is "do nothing").
 - **Resource budget guard**: `ResourceBudgetGuard` enforces `runtime RSS ≤ 200MB / idle CPU ≤ 5% / fan-out ≤ 8 (default)`. `--no-throttle` bypasses (user accepts risk; adds warning to envelope). `--max-concurrent <N>` overrides the 8 default.
 - **Vendor-neutral**: `VendorAdapterRegistry` registers `ClaudeAdapter` (Phase A) / `CodexAdapter` + `CopilotAdapter` (Phase B). Missing vendor CLI → fallback to default with `dispatchRecord.warning = 'vendor fallback: <id>→claude'`.

package/skills/peaks-content/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-content
 description: Non-code orchestrator for content workflows (draft / edit / publish / archive). Use when a user wants to drive an end-to-end content-production loop (blog post, newsletter, marketing copy, social thread, doc page) where the LLM must coordinate draft / edit / tone / publish / archive stages with explicit gates between them, and where the user only wants to speak natural language and pick options. NOT for free-form chatting; NOT for code review. Reuses the peaks-loop Loop Engineering primitives (Loop Engineering Asset, Bee Asset, Workflow Trace, Evolution Evaluation) but does NOT import peaks-code internals. Triggers on `/peaks-content`, "peaks content", "content workflow", "publish this to <channel>", "edit the draft", "archive the previous version".
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-doctor/SKILL.md

@@ -4,7 +4,7 @@ description: Orchestrate peaks-loop's L3 doctor (peaks audit + peaks doctor + pe
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-final-review/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-final-review
 description: Final-review skill for Peaks. Use when a workflow needs to assemble 4-dimension business-review evidence (functional-completeness, problem-resolution, no-new-bugs, existing-functionality-intact) for human acceptance at the end of an autonomous slice. Triggers on "/peaks-final-review", "prepare final review", "4-dim review", or peaks-code end-of-workflow handoff.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-ide/SKILL.md

@@ -4,7 +4,7 @@ description: Orchestrate peaks-loop's IDE-aware behavior (hooks + statusline + h
 visibility: internal
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-issue-fix-orchestrator/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-issue-fix-orchestrator
 description: 'End-to-end orchestrator that surveys open issues in a target repo, classifies them by difficulty, mines reference merged-PRs, fixes each issue with real commits (with Repository + AI-modified declaration), writes normalized PR description files, and emits a one-line submit script. Use when the user wants to drive a "fix N open issues and prepare PRs" run on an upstream repo (any language; primarily Python + TypeScript). Reuses Loop Engineering primitives: 4-layer asset model, Darwin ratchet, karpathy-engineered red lines, Human-NL-Choice-Only. Triggers on `/peaks-issue-fix-orchestrator`, "fix 30 issues", "dogfood on <repo>", "open-issue sweep on <repo>".'
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-resume/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-resume
 description: Universal resume primitive for any in-flight Peaks-Loop workflow (orchestrator-agnostic). Detects the current session's deepest completed gate and surfaces a resume option via AskUserQuestion. Use when ANY bee (peaks-code, future peaks-research, future peaks-content, …) needs to recover from /compact or session interruption. Triggers on "/peaks-resume", "continue the unfinished work", "继续完成", "把刚才没做完的收尾". (Replaces peaks-resume as a top-level primitive.)
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-slice-decompose/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-slice-decompose
 description: Run multi-pass slice decomposition on a PRD-ready request and emit a v2 envelope with passes, cross-pass edges, and an LLM-arbitration trace. Use when a PRD is ready and the caller needs service-level and/or file-level cuts in one artifact.
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-solo/SKILL.md

@@ -14,7 +14,7 @@ metadata:
   red_lines: [RL-1, RL-8, HC-7, HC-8, HC-9, HC-10, HC-11]
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-sop/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-sop
 description: 'Authoring skill for user-defined SOPs (standard operating procedures) in Peaks. Use when a user wants to create, edit, debug, or register their own gated workflow — ordered phases plus gates that block advancement until conditions are met — by describing it in natural language instead of hand-writing JSON or memorizing CLI commands. DOMAIN-AGNOSTIC: not just software/release flows — equally for content publishing, compliance and approval checklists, data pipelines, onboarding, ops runbooks, or any personal repeatable procedure, wherever "don''t enter the next stage until X is true" applies and X is checkable via a file, file content, or a command.'
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-status/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-status
 description: Universal status primitive for any in-flight Peaks-Loop workflow (orchestrator-agnostic). Reads the existing CLI primitives (peaks skill presence, peaks session list, peaks project dashboard, peaks request show) and renders a 1-screen status table. Use when the user asks "where are we", "现在到哪了", "what's the current state" for ANY bee (peaks-code, future peaks-research, …). Triggers on "/peaks-status", "现在到哪了", "what is the current state", "show me the dashboard". (Replaces peaks-status as a top-level primitive.)
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)
 

package/skills/peaks-test/SKILL.md

@@ -3,7 +3,7 @@ name: peaks-test
 description: Universal test-runner primitive for any in-flight Peaks-Loop workflow (orchestrator-agnostic). Runs the project's test suite on the current repo and reports results. Use when the user asks "run the tests", "跑一下 test", "跑测试" for ANY bee (peaks-code, future peaks-research, …). Triggers on "/peaks-test", "跑一下 test", "跑测试", "run the tests", "test now". (Replaces peaks-test as a top-level primitive.)
 ---
 
-<!-- peaks:loop-hygiene — generated block; keep byte-identical in every SKILL.md -->
+<!-- peaks:loop-hygiene — HAND-MAINTAINED block, NOT generated; byte-identical in every SKILL.md, enforced by tests/unit/skills/loop-hygiene-block.test.ts. Edit one, edit all 22. -->
 
 ## Loop hygiene (every turn — MANDATORY)