peaks-loop 4.0.49 → 4.0.51

package/dist/services/config/config-safety.js

@@ -173,15 +173,17 @@ export function resolveCanonicalProjectRootStrict(startPath) {
     catch {
         throw new InvalidProjectRootError('non-existent', startPath);
     }
-    if (realStart !== start) {
-        // User passed a path through a symlink; reject as non-canonical
-        // for trust-boundary entry points.
-        throw new InvalidProjectRootError('non-canonical', startPath);
-    }
-    // Delegate to the existing canonicalization (git root → heuristic)
-    // AFTER the strict pre-checks pass.
-    const canonical = resolveCanonicalProjectRoot(startPath);
-    if (canonical === startPath || canonical === realStart) {
+    // Use the realpath form as the canonical input. macOS exposes
+    // `/var/folders/...` as a symlink to `/private/var/folders/...`, so any
+    // path returned by `os.tmpdir()` (and therefore any `mkdtempSync(...)`
+    // result) has `realStart !== start`. Rejecting that case as
+    // "non-canonical" would block the legitimate SessionStart hook path
+    // and the test fixtures under `tests/unit/hooks/`. The security
+    // property is preserved: `realpathSync` collapses any attacker-
+    // controlled symlink chain, so `realStart` IS the canonical form
+    // regardless of which prefix the caller used.
+    const canonical = resolveCanonicalProjectRoot(realStart);
+    if (canonical === realStart) {
         return canonical;
     }
     // Canonicalization moved the path (e.g. to a git root) — accept it

package/dist/services/dispatch/sub-agent-dispatcher.d.ts

@@ -139,22 +139,13 @@ export declare const claudeCodeSubAgentDispatcher: SubAgentDispatcher;
  * stays the same; only the per-IDE wiring breaks (intentionally).
  */
 export declare const traeSubAgentDispatcher: SubAgentDispatcher;
-/**
- * Trae-CN dispatcher. Mirrors Trae's shape with a separate label so
- * the CLI's IDE detection can distinguish a Trae install region
- * (Trae-CN differs in skill install path / log location only;
- * dispatch surface is identical per slice #011 framework rule).
- *
- * Slice 1.3: real `awaitBatch` — same polling core as Trae.
- */
-export declare const traeCnSubAgentDispatcher: SubAgentDispatcher;
 /**
  * Codex (OpenAI CLI IDE) dispatcher.
  *
  * Slice #13 noted Codex's sub-agent tool name is TBD; per slice #009
  * rationale, the dispatcher mirrors Claude Code's shape so the
- * adapter contract stays uniform. Slice 1.3 promotes Codex from
- * `awaitByLlmFallback` to a real `awaitBatch` (file-based polling,
+ * adapter contract stays uniform. Slice 1.3 promotes Codex from the
+ * 1.2 marker to a real `awaitBatch` (file-based polling,
  * Codex default 45s — Codex's documented heartbeat is slightly
  * slower per slice #13 R-3).
  */
@@ -201,36 +192,26 @@ export declare class SubAgentNotSupportedError extends Error {
  */
 export declare function awaitClaudeCodeBatch(input: SubAgentAwaitBatchInput): Promise<readonly SubAgentBatchResult[]>;
 /**
- * Slice 1.3 — shared per-IDE polling core for trae / trae-cn / codex /
- * cursor. Same polling loop shape as `awaitClaudeCodeBatch`, with
- * per-IDE default timeout + note prefix. The 4 IDEs differ only in
- * (a) `defaultTimeoutMs` (Trae / Trae-CN / Cursor = 30s, Codex = 45s
- * per slice #13 R-3) and (b) the `note` label surfaced when an IDE
- * times out (so 1.4 dogfood can attribute a timeout to the right
- * IDE).
+ * Slice 1.3 — shared per-IDE polling core for trae / codex / cursor.
+ * Same polling loop shape as `awaitClaudeCodeBatch`, with per-IDE
+ * default timeout + note prefix. The 3 IDEs differ only in
+ * (a) `defaultTimeoutMs` (Trae / Cursor = 30s, Codex = 45s per slice
+ * #13 R-3) and (b) the `note` label surfaced when an IDE times out
+ * (so 1.4 dogfood can attribute a timeout to the right IDE).
  *
- * MVP rationale (per Karpathy §2 Simplicity First): the 4 IDEs
+ * MVP rationale (per Karpathy §2 Simplicity First): the 3 IDEs
  * currently share the same file-based polling transport. The only
  * per-IDE distinction is the timeout + label. Future per-IDE
  * divergence (real IPC / shell hooks) is a 1.4 dogfood concern —
  * here we keep the dispatcher interface uniform while each IDE's
- * `awaitBatch` is now a real implementation rather than the 1.2
- * `awaitByLlmFallback` marker.
+ * `awaitBatch` is a real implementation.
  */
 export interface PollDispatchRecordsOptions {
-    readonly ide: 'trae' | 'trae-cn' | 'codex' | 'cursor';
+    readonly ide: 'trae' | 'codex' | 'cursor';
     readonly defaultTimeoutMs: number;
     readonly notePrefix: string;
 }
 export declare function pollDispatchRecords(input: SubAgentAwaitBatchInput, opts: PollDispatchRecordsOptions): Promise<readonly SubAgentBatchResult[]>;
-/**
- * 1.2 fallback for trae / trae-cn / codex / cursor. Deprecated by
- * slice 1.3 — kept exported for legacy callers + back-compat tests
- * (the 1.2 marker is still a valid envelope shape; the 1.4 dogfood
- * tests can compare the marker note vs the 1.3 real note to verify
- * per-IDE attribution).
- */
-export declare function awaitByLlmFallback(input: SubAgentAwaitBatchInput, ide: string): Promise<readonly SubAgentBatchResult[]>;
 /**
  * In-process awaiter registration hook (used by `peaks sub-agent dispatch`
  * to attach a resolver; not part of the dispatcher public surface).

package/dist/services/dispatch/sub-agent-dispatcher.js

@@ -106,38 +106,13 @@ export const traeSubAgentDispatcher = {
         notePrefix: 'trae 1.3 real awaitBatch'
     })
 };
-/**
- * Trae-CN dispatcher. Mirrors Trae's shape with a separate label so
- * the CLI's IDE detection can distinguish a Trae install region
- * (Trae-CN differs in skill install path / log location only;
- * dispatch surface is identical per slice #011 framework rule).
- *
- * Slice 1.3: real `awaitBatch` — same polling core as Trae.
- */
-export const traeCnSubAgentDispatcher = {
-    label: 'trae-cn',
-    supportsRole: (role) => role.length > 0,
-    buildToolCall: ({ role, prompt, requestId }) => ({
-        name: 'Task',
-        args: {
-            subagent_type: 'general-purpose',
-            description: `${role} for rid=${requestId}`,
-            prompt,
-        },
-    }),
-    awaitBatch: async (input) => pollDispatchRecords(input, {
-        ide: 'trae-cn',
-        defaultTimeoutMs: 30_000,
-        notePrefix: 'trae-cn 1.3 real awaitBatch'
-    })
-};
 /**
  * Codex (OpenAI CLI IDE) dispatcher.
  *
  * Slice #13 noted Codex's sub-agent tool name is TBD; per slice #009
  * rationale, the dispatcher mirrors Claude Code's shape so the
- * adapter contract stays uniform. Slice 1.3 promotes Codex from
- * `awaitByLlmFallback` to a real `awaitBatch` (file-based polling,
+ * adapter contract stays uniform. Slice 1.3 promotes Codex from the
+ * 1.2 marker to a real `awaitBatch` (file-based polling,
  * Codex default 45s — Codex's documented heartbeat is slightly
  * slower per slice #13 R-3).
  */
@@ -245,14 +220,14 @@ export async function awaitClaudeCodeBatch(input) {
     // service. The back-compat envelope shape is preserved (one
     // `SubAgentBatchResult` per record path) so the S3 characterization
     // test stays green; the underlying loop is identical to the trae /
-    // trae-cn / codex / cursor wrappers below. The new typed outcome
+    // codex / cursor wrappers below. The new typed outcome
     // lives on the unified service; the S4 fail-fast test pins it.
     //
     // Slice 2026-07-30-nightshift: claude-code does NOT use a
     // per-IDE note prefix. The 1.4 dogfood contract says the done
     // note is `null` (raw outcome) and the failed note is the raw
-    // `outcome` string with no prefix. The 4 non-Claude IDEs
-    // (trae / trae-cn / codex / cursor) prefix the note with their
+    // `outcome` string with no prefix. The 3 non-Claude IDEs
+    // (trae / codex / cursor) prefix the note with their
     // per-IDE label so cross-IDE attribution is visible to the LLM.
     // Passing no `notePrefix` here keeps the legacy contract.
     const unified = await awaitBatchUnified(input.dispatchCount, input.recordPaths, input.timeoutMs, { defaultTimeoutMs: 60_000 });
@@ -299,24 +274,6 @@ export async function pollDispatchRecords(input, opts) {
     });
     return unified.results;
 }
-/**
- * 1.2 fallback for trae / trae-cn / codex / cursor. Deprecated by
- * slice 1.3 — kept exported for legacy callers + back-compat tests
- * (the 1.2 marker is still a valid envelope shape; the 1.4 dogfood
- * tests can compare the marker note vs the 1.3 real note to verify
- * per-IDE attribution).
- */
-export async function awaitByLlmFallback(input, ide) {
-    const startedAt = Date.now();
-    return input.recordPaths.map((p, i) => ({
-        dispatchIndex: i,
-        recordPath: p,
-        status: 'timeout',
-        durationMs: 0,
-        note: `awaitByLlm: ${ide} 1.2 fallback (real impl in 1.3)`
-    }));
-    void startedAt;
-}
 /**
  * In-process awaiter registration hook (used by `peaks sub-agent dispatch`
  * to attach a resolver; not part of the dispatcher public surface).

package/dist/services/final-review/pre-post-diff.js

@@ -123,13 +123,21 @@ function isSourcePath(path) {
  * read as two deleted cases; a class that is half-counted is worse than a class
  * that is not counted at all.
  *
+ * Word-boundary simulation, not `\b`. The JS regex could spell this as `\b`
+ * directly, but the POSIX ERE side of the count has to run on macOS too —
+ * where `git grep -E` is BSD grep, and BSD grep's POSIX ERE has no `\b`
+ * (it is a literal `b`). The two expressions therefore both spell the boundary
+ * as `(^|[^A-Za-z0-9_])`: start of line OR a non-word character. The two
+ * sides MUST agree, and `git grep -c` counts matched lines (not occurrences)
+ * so the extra prefix group does not shift the count.
+ *
  * What is deliberately NOT modelled: an occurrence inside a comment or a string
  * literal still matches. That is symmetric — the same expression is evaluated on
  * both sides — so it cancels out of the DELTA, which is the only thing a removal
  * is ever derived from.
  */
-const TEST_CASE_LINE_RE = /\b(it|test)(\.[A-Za-z]+)*\(/;
-const TEST_CASE_ERE = '\\b(it|test)(\\.[A-Za-z]+)*\\(';
+const TEST_CASE_LINE_RE = /(?:^|[^A-Za-z0-9_])(it|test)(\.[A-Za-z]+)*\(/;
+const TEST_CASE_ERE = '(^|[^A-Za-z0-9_])(it|test)(\\.[A-Za-z]+)*\\(';
 /**
  * Column-0 `export` — an export STATEMENT, not a type-checked symbol.
  *

package/dist/services/ide/adapters/claude-code-adapter.js

@@ -591,7 +591,6 @@ export const CLAUDE_CODE_ADAPTER = {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.claude', 'settings.json');
         },
-        supportsScope: () => true,
     },
     envVar: 'CLAUDE_PROJECT_DIR',
     hookEvent: 'PreToolUse',

package/dist/services/ide/adapters/codex-adapter.js

@@ -54,8 +54,7 @@ export const CODEX_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.codex', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'CODEX_PROJECT_DIR', // UNVERIFIED — see slice #13 PRD R-3; fallback path still works
     hookEvent: 'pre_tool_use', // UNVERIFIED — Codex lowercase snake_case pattern; re-verify against Codex docs

package/dist/services/ide/adapters/cursor-adapter.js

@@ -44,8 +44,7 @@ export const CURSOR_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.cursor', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'CURSOR_PROJECT_DIR', // UNVERIFIED — see slice #12 PRD R-2; fallback path still works
     hookEvent: 'beforeShellExecution', // UNVERIFIED — see slice #12 PRD R-1; re-verify against Cursor's published hook schema

package/dist/services/ide/adapters/hermes-adapter.js

@@ -29,8 +29,7 @@ export const HERMES_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.hermes', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'HERMES_PROJECT_DIR', // UNVERIFIED
     hookEvent: 'PreToolUse', // UNVERIFIED

package/dist/services/ide/adapters/openclaw-adapter.js

@@ -22,8 +22,7 @@ export const OPENCLAW_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.openclaw', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'OPENCLAW_PROJECT_DIR', // UNVERIFIED
     hookEvent: 'PreToolUse', // UNVERIFIED

package/dist/services/ide/adapters/qoder-adapter.js

@@ -33,8 +33,7 @@ export const QODER_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.qoder', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'QODER_PROJECT_DIR', // UNVERIFIED
     hookEvent: 'PreToolUse', // UNVERIFIED

package/dist/services/ide/adapters/tongyi-lingma-adapter.js

@@ -24,8 +24,7 @@ export const TONGYI_LINGMA_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.lingma', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'TONGYI_LINGMA_PROJECT_DIR', // UNVERIFIED
     hookEvent: 'PreToolUse', // UNVERIFIED

package/dist/services/ide/adapters/trae-adapter.js

@@ -50,8 +50,7 @@ export const TRAE_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.trae', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'TRAE_PROJECT_DIR',
     hookEvent: 'beforeToolCall', // VERIFIED against Trae 1.x fixture — slice 009-009-2026-06-07-trae-dogfood (2026-06-07); fixture at tests/fixtures/trae/trae-1x-payload.json

package/dist/services/ide/adapters/zcode-adapter.js

@@ -159,7 +159,6 @@ export const ZCODE_ADAPTER = {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.zcode', 'settings.json');
         },
-        supportsScope: (scope) => scope === 'project' || scope === 'global',
     },
     // UNVERIFIED — z-code 桌面应用未公开 `ZCODE_PROJECT_DIR` env var,这里
     // 用占位符,RD 阶段假设 z-code 借用了 Anthropic-compatible 协议并可能

package/dist/services/ide/ide-types.d.ts

@@ -41,8 +41,6 @@ export interface IdeSettingsLocation {
     readonly localSettingsFileName?: string;
     /** 解析出 settings.json 绝对路径 */
     resolveSettingsFile(scope: 'project' | 'global', projectRoot: string | undefined): string;
-    /** 该 IDE 是否支持此 scope(用于清晰报错) */
-    supportsScope(scope: 'project' | 'global'): boolean;
 }
 /**
  * Slim IDE adapter 描述。每 IDE 一个静态常量(无需 DI)。

package/dist/services/observability/observability-service.d.ts

@@ -29,8 +29,8 @@ export declare const ObservabilityEventSchema: z.ZodObject<{
     ts: z.ZodString;
     sessionId: z.ZodString;
     category: z.ZodEnum<{
-        dispatch: "dispatch";
         "slice-transition": "slice-transition";
+        dispatch: "dispatch";
         checkpoint: "checkpoint";
         "mode-gate": "mode-gate";
         "context-trigger": "context-trigger";

package/dist/services/scan/api-diff-types.js

@@ -8,7 +8,25 @@
  * is not merely annotated. `confidence: 'exact'` is reserved for lines where
  * both sides were parsed AND the recorded interface was fully readable.
  */
+import { realpathSync } from 'node:fs';
 import { resolve, sep } from 'node:path';
+/**
+ * Canonicalize through symlinks so two paths that name the same directory through
+ * different prefixes (the macOS `/var` <-> `/private/var` quirk the brief calls
+ * out) line up as the same literal on both sides of the prefix test below.
+ * Falls back to `resolve()` when the path does not exist yet — `realpathSync`
+ * throws on missing paths, and several callers in the suite inspect not-yet-
+ * created paths (e.g. the "string prefix of a sibling" guard at
+ * api-diff-service.test.ts:462).
+ */
+function safeRealpath(p) {
+    try {
+        return realpathSync(p);
+    }
+    catch {
+        return resolve(p);
+    }
+}
 /** The honest boundary of the feature. Printed in the output, not just documented. */
 export const NOT_DETECTABLE = [
     'a field whose type is unchanged but whose meaning changed',
@@ -38,8 +56,8 @@ export function isRecord(value) {
  * the misleading `archive/docs/api.json`.
  */
 export function toDisplayPath(projectRoot, file) {
-    const rootParts = resolve(projectRoot).split(sep);
-    const fileParts = resolve(file).split(sep);
+    const rootParts = safeRealpath(projectRoot).split(sep);
+    const fileParts = safeRealpath(file).split(sep);
     const inside = fileParts.length > rootParts.length
         && rootParts.every((part, index) => part === fileParts[index]);
     return (inside ? fileParts.slice(rootParts.length) : fileParts).join('/');

package/dist/services/security/safe-settings-path.js

@@ -71,12 +71,30 @@ export function assertSafeDispatchRecordPath(recordPath, projectRoot) {
         // to create it). Fall back to lexical comparison against the
         // canonical projectRoot — the write will then create the file,
         // and any symlink in the parent will be caught on the next read.
+        //
+        // macOS note: the project's own realpath may still resolve the
+        // `/var -> /private/var` symlink even when the sub-agent dir does
+        // not exist yet, so the caller can compare on a stable prefix
+        // instead of having one side of the comparison on `/var/...` and
+        // the other on `/private/var/...`. We still validate that the
+        // canonical record path lives under the canonical projectRoot.
         const fallback = resolve(projectRoot, '.peaks', SUB_AGENTS_DIR);
         const rel2 = relative(fallback, recordPath);
         if (rel2.startsWith('..') || isAbsolute(rel2)) {
             throw invalidPathError(recordPath, 'must be under .peaks/_sub_agents/');
         }
-        return recordPath;
+        try {
+            realRoot = realpathSync(projectRoot);
+            const canonicalRecord = resolve(realRoot, '.peaks', SUB_AGENTS_DIR, recordPath.slice(fallback.length + 1));
+            const realRel = relative(realRoot, canonicalRecord);
+            if (realRel.startsWith('..' + sep) || realRel === '..' || isAbsolute(realRel)) {
+                throw invalidPathError(recordPath, 'escapes project root via symlink');
+            }
+            return canonicalRecord;
+        }
+        catch {
+            return recordPath;
+        }
     }
     const realRel = relative(realRoot, realRecord);
     if (realRel.startsWith('..' + sep) || realRel === '..' || isAbsolute(realRel)) {

package/dist/services/skill/skill-search-service.d.ts

@@ -32,14 +32,14 @@ export declare const SkillSearchInputSchema: z.ZodObject<{
         status: "status";
         resume: "resume";
         audit: "audit";
-        ide: "ide";
+        "final-review": "final-review";
         content: "content";
+        ide: "ide";
         test: "test";
-        research: "research";
         doctor: "doctor";
+        research: "research";
         triage: "triage";
         sop: "sop";
-        "final-review": "final-review";
         "slice-decompose": "slice-decompose";
         "issue-fix-orchestrator": "issue-fix-orchestrator";
         "perf-audit": "perf-audit";

package/dist/services/standards/loop-engineering-lint.d.ts

@@ -18,7 +18,7 @@
  * `peaks standards lint --category loop-engineering` (registered in M0's
  * plan) will read this file from disk and call this function.
  */
-export declare const EXPECTED_RED_LINE_IDS: readonly ["RL-0", "RL-1", "RL-2", "RL-3", "RL-4", "RL-5", "RL-6", "RL-7", "RL-8", "RL-9"];
+export declare const EXPECTED_RED_LINE_IDS: readonly ["RL-0", "RL-1", "RL-2", "RL-3", "RL-4", "RL-5", "RL-6", "RL-7", "RL-8", "RL-9", "RL-10"];
 export type RedLineId = (typeof EXPECTED_RED_LINE_IDS)[number];
 export declare const REQUIRED_SECTIONS: readonly ["Failure modes", "Rewrite", "Self-check", "Out-of-scope"];
 export type RedLineSection = (typeof REQUIRED_SECTIONS)[number];

package/dist/services/standards/loop-engineering-lint.js

@@ -29,6 +29,12 @@ export const EXPECTED_RED_LINE_IDS = [
     'RL-7',
     'RL-8',
     'RL-9',
+    // RL-10 was written into the guideline file (its 4 sections included) but
+    // never added here, so the lint could not see it: the closed set stopped one
+    // short of the file it was supposed to police. The file's own footer said
+    // "Total red lines: 9 (RL-0..RL-9)" while RL-10 sat below it — the two
+    // statements contradicted each other and only the file was ever read.
+    'RL-10',
 ];
 export const REQUIRED_SECTIONS = [
     'Failure modes',

package/dist/services/web/daemon-registry.js

@@ -5,10 +5,29 @@
  * WRITE goes through `assertUnder` first — the slice-wide guard against an
  * artifact escaping `<root>/.peaks/_runtime/<sid>/web/` (AC1).
  */
-import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, realpathSync, unlinkSync, writeFileSync } from 'node:fs';
 import { dirname } from 'node:path';
 import { assertUnder, webDaemonDir, webDaemonInfoPath, webSpawnLockPath } from './web-artifact-paths.js';
 import { parseDaemonInfo } from './web-protocol.js';
+/**
+ * Canonicalize through symlinks so two paths that name the same directory through
+ * different prefixes compare equal — the macOS `/var` <-> `/private/var` quirk
+ * makes `mkdtempSync(...)` return `/var/folders/...` while `process.cwd()` after
+ * `chdir` returns `/private/var/folders/...`. They are the same directory on
+ * disk; without `realpathSync` the ownership check below silently rejects a
+ * legitimate record and the CLI cold-starts a real daemon instead of reusing
+ * the stub. Falls back to `resolve()` when the path is absent: a planted
+ * record naming a directory that does not exist still has to fail the
+ * containment test, and a `realpathSync` on it would throw.
+ */
+function safeRealpath(p) {
+    try {
+        return realpathSync(p);
+    }
+    catch {
+        return p;
+    }
+}
 /** A spawn lock older than this is reclaimed even if its owner pid is alive. */
 const SPAWN_LOCK_STALE_MS = 120_000;
 /**
@@ -46,7 +65,13 @@ export function readDaemonInfo(projectRoot, sessionId) {
     }
     try {
         const info = parseDaemonInfo(readFileSync(target, 'utf8'));
-        if (info === null || info.projectRoot !== projectRoot || info.sessionId !== sessionId) {
+        if (info === null || info.sessionId !== sessionId) {
+            return null;
+        }
+        // Canonicalize both sides — a record written from one prefix (say
+        // `/var/folders/...`) and read from the canonical one (`/private/var/...`)
+        // describes the same project on macOS.
+        if (safeRealpath(info.projectRoot) !== safeRealpath(projectRoot)) {
             return null;
         }
         return info;

package/dist/services/workspace/claude-settings-template.d.ts

@@ -2,24 +2,31 @@
  * Slice 2.0.1-bug3-fact-forcing-bypass — pure-data template for the
  * consumer-project `.claude/settings.local.json` file.
  *
- * The template is a PreToolUse hook allow-list that bypasses the
- * Claude Code [Fact-Forcing Gate] for tool calls whose paths target
- * the peaks-managed `.peaks/` workspace. Without this bypass,
- * `peaks workspace init` (Step 0 of every peaks-code session) is
- * unrunnable in a consumer project because the gate blocks the very
- * first Write.
+ * The template exempts the peaks-managed `.peaks/` workspace from the
+ * Claude Code [Fact-Forcing Gate], so `peaks workspace init` (Step 0 of
+ * every peaks-code session) is runnable in a consumer project — without
+ * the exemption the gate blocks the very first Write.
+ *
+ * The exemption is declared in the `env` block
+ * (`EXTERNAL_GATE_EXEMPT_ENV`), which is what the gate actually reads.
+ * TEMPLATE_VERSION 1.7.0 moved it there; before that it was declared by a
+ * `Write|Edit|MultiEdit` handler that exited non-zero for non-`.peaks/`
+ * paths and was documented as "fall through to the gate". That concept does
+ * not exist in the Claude Code hook protocol (only exit 2 blocks; any other
+ * non-zero exit is a NON-BLOCKING ERROR reported once per edit), so the
+ * handler was corrected to abstain on every path — and an abstaining handler
+ * that is still INSTALLED is a no-op carrying a machine-specific absolute
+ * script path. TEMPLATE_VERSION 1.8.0 removed it rather than re-point it:
+ * it decided nothing, and the exemption it was written for lives in `env`.
  *
  * The template is a pure-data function (no filesystem, no clock) so
  * it can be unit-tested in isolation and so the on-disk file matches
  * the in-memory template byte-for-byte.
  *
- * One matcher is emitted:
- *   1. `Write|Edit|MultiEdit` — a `node <script>` handler that runs the
- *      path gate shipped at `src/services/hooks/write-gate.js`. Exits 0
- *      (allow) for the paths the gate skips, exit 1 (deny → fall through to
- *      gate) for everything else. TEMPLATE_VERSION 1.6.0 moved the decision
- *      out of an inlined `node -e "<js>"` one-liner, whose escaping was
- *      bash-specific and therefore could not take a platform `shell` pin.
+ * Two `Bash` matchers are emitted (the Step 0.8 mechanical gate and the
+ * SOP gate-enforce handler). No `Write|Edit|MultiEdit` entry is emitted:
+ * that matcher's gate is `peaks code-gate --json`, installed into the
+ * committed `.claude/settings.json` by `peaks hooks install`.
  *
  * The previous `Bash` matcher (which whitelisted a fixed `peaks
  * <subcommand>` prefix) was removed in TEMPLATE_VERSION 1.2.0. The
@@ -80,8 +87,20 @@ export declare const CLAUDE_SETTINGS_LOCAL_FILENAME = ".claude/settings.local.js
  *           (`EXTERNAL_GATE_EXEMPT_ENV`). The comparator now requires the
  *           on-disk file to declare those exemptions too, so a project
  *           installed by an earlier release refreshes once and converges.
+ *   1.8.0 — REMOVED the `Write|Edit|MultiEdit` handler and the shipped
+ *           script it invoked (`src/services/hooks/write-gate.js`, also
+ *           deleted). The handler abstained on every path by design (see
+ *           that file's header for the rationale — it is the reason this
+ *           is a deletion and not a repair), so the only things it still
+ *           contributed were a `node "<abs path>"` command pinned to the
+ *           Node version directory that happened to be on `$PATH` at
+ *           install time, and a `shell: powershell` pin. The exemption it
+ *           was written to provide is declared by the `env` block above.
+ *           `mergeTemplateOwnedHooks` drops the retired entry from
+ *           existing on-disk files, so an earlier install converges
+ *           instead of keeping a no-op with a stale absolute path.
  */
-export declare const TEMPLATE_VERSION = "1.7.0";
+export declare const TEMPLATE_VERSION = "1.8.0";
 /**
  * Compare two serialized template strings: does the on-disk file already
  * declare every entry the generated tree declares?
@@ -108,10 +127,11 @@ export declare const TEMPLATE_VERSION = "1.7.0";
  * detail).
  *
  * Returns `true` iff both strings parse to objects whose `hooks.PreToolUse`
- * arrays satisfy that containment AND the on-disk `env` already carries every
- * exemption the template declares (extra on-disk keys and extra globs are
- * allowed — a user may exempt other trees, and a requirement the file already
- * exceeds must not re-trigger a write).
+ * arrays satisfy that containment, the on-disk file carries NO entry this
+ * template has retired (`isRetiredTemplateEntry`), AND the on-disk `env`
+ * already carries every exemption the template declares (extra on-disk keys
+ * and extra globs are allowed — a user may exempt other trees, and a
+ * requirement the file already exceeds must not re-trigger a write).
  *
  * Returns `false` on any `JSON.parse` error, shape mismatch, or
  * missing `hooks.PreToolUse`. Whitespace and key order do NOT affect
@@ -147,23 +167,18 @@ export declare function templateContentMatches(generated: string, onDisk: string
  * Non-conforming entries (no string `matcher`, no `hooks` array) are preserved
  * rather than dropped: guessing at their shape is how a user's entry gets
  * deleted.
+ *
+ * ONE exception to "preserve what I do not declare": an entry this template
+ * used to declare and RETIRED (TEMPLATE_VERSION 1.8.0's `Write|Edit|MultiEdit`
+ * gate — see `isRetiredTemplateEntry`) is dropped rather than preserved.
+ * Declaring less cannot retire an entry on its own, because preserving
+ * undeclared entries is exactly what this function does; without the drop, a
+ * pre-1.8.0 install would keep the no-op handler and its version-pinned script
+ * path forever. The predicate is narrow enough that only the exact command
+ * this template emitted matches.
  */
 export declare function mergeTemplateOwnedHooks(onDisk: ReadonlyArray<unknown>, template: ReadonlyArray<unknown>): unknown[];
-/**
- * Absolute path of the shipped Write|Edit|MultiEdit gate script.
- *
- * `write-gate.js` is a plain `.js` (not a compiled `.ts`) precisely so this
- * single relative filename resolves in BOTH trees: `src/services/hooks/` for
- * `tsx` / vitest, `dist/services/hooks/` for an installed consumer (copied by
- * `scripts/copy-templates.mjs`; the `dist/**` `*.js` glob in
- * `package.json#files` already ships it).
- *
- * Separators are normalized to `/` so the emitted command contains no
- * backslash at all. That is what makes the handler shell-agnostic: bash
- * reduces `\X` inside `"..."` and PowerShell escapes with a backtick, so any
- * backslash in the string is one dialect's problem waiting to happen.
- */
-export declare function writeGateScriptPath(): string;
+export declare function isRetiredTemplateEntry(entry: unknown): boolean;
 type ClaudeHookCommand = {
     type: 'command';
     command: string;
@@ -192,10 +207,11 @@ type ClaudeSettingsLocal = {
  * forcing gate is a core feature that PreToolUse hooks can short-
  * circuit but that the `permissions` block cannot.
  *
- * As of TEMPLATE_VERSION 1.2.0, only the `Write|Edit|MultiEdit`
- * matcher is emitted. Bash command enforcement is the responsibility
- * of `peaks gate enforce`, which `peaks hooks install` injects into
- * `.claude/settings.json` (not `.claude/settings.local.json`).
+ * As of TEMPLATE_VERSION 1.8.0 the template emits the two `Bash` matchers
+ * only. The `Write|Edit|MultiEdit` fact-forcing bypass is no longer a hook:
+ * it is the `env` exemption above, and that matcher's gate
+ * (`peaks code-gate --json`) is installed into the committed
+ * `.claude/settings.json` by `peaks hooks install`.
  */
 export declare function buildClaudeSettingsLocalJson(): ClaudeSettingsLocal;
 export {};