peaks-loop 4.0.53 → 4.1.0

package/dist/cli/cli-envelope.js

@@ -0,0 +1,85 @@
+/**
+ * The runtime shape of the JSON envelope `peaks … --json` writes to stdout.
+ *
+ * WHY THIS EXISTS (S12, 2026-09-20). The CLI envelope was the single largest
+ * cluster of unvalidated `JSON.parse` in the repo: 21 test files do
+ * `JSON.parse(<spawn result>.stdout)` and then read `out.ok` / `out.code` /
+ * `out.data.*`. Because `JSON.parse` returns `any`, none of those reads was
+ * checked against anything, and each one is a `no-unsafe-*` finding. Measured
+ * at the S12 census: ~196 of the ~448 findings in the R1 root.
+ *
+ * WHAT IS VALIDATED, AND WHAT IS NOT — stated plainly, because the difference
+ * is the whole point. The envelope HEAD is always validated: `ok` must be a
+ * boolean; `warnings` / `nextActions`, when present, arrays of strings; `code`
+ * / `message` / `errorId`, when present, strings. The PAYLOAD (`data`) is
+ * validated only as "a JSON object with string keys" — there is no single
+ * payload schema, because `data` is `T` in `ResultEnvelope<T>` and every
+ * command has its own shape. That is a measured finding of S12, not an
+ * oversight: R1 does not collapse onto one schema.
+ *
+ * A caller that reads `data.<field>` at depth >= 2 therefore names the payload
+ * shape itself, through the same validating primitive:
+ *
+ *     parseCliEnvelopeWith(raw, EvolutionStatusPayload)
+ *
+ * The alternative — one generic helper with a type parameter and no schema —
+ * is the `as T` costume S12 forbids. Here the type parameter is a SCHEMA, so
+ * the returned type is derived from a check that actually ran.
+ */
+import { z } from 'zod';
+import { parseJson } from '../shared/json-parse.js';
+const anyJsonObject = z.record(z.string(), z.unknown());
+/** The head of the envelope, with `data` checked by whichever schema is passed. */
+function envelopeWith(data) {
+    // `looseObject` keeps every key the schema does not name, matching
+    // `JSON.parse`'s old behaviour of handing back every key: validation is not
+    // licence to silently drop fields.
+    return z.looseObject({
+        ok: z.boolean(),
+        // `command` is the one head field that is genuinely optional: the
+        // `printCliEnvelope` shim (`src/cli/cli-helpers.ts`, used only by
+        // `sediment-commands.ts`) writes `{ ok, data }` / `{ ok, error }`, and
+        // `_super.ts` writes `{ ok, data, warnings, nextActions }`.
+        command: z.string().optional(),
+        data,
+        // `warnings` / `nextActions` are OPTIONAL, and that is a MEASURED fact,
+        // not a convenience. S12 first made them required on the theory that
+        // "every emitter writes them" — then the integration suite proved the
+        // theory false: `peaks workspace clean --json`
+        // (`src/cli/commands/workspace/clean-command.ts`) writes `{ ok, data }`
+        // and nothing else. So the premise this slice inherited — "the CLI stdout
+        // envelope has a fixed shape `{ ok, command, data, warnings, nextActions }`"
+        // — is wrong as stated; `ok` and `data` are the only universal members.
+        // A caller that needs `nextActions` must say so — `program.test.ts` names
+        // it in a schema rather than looping over a possibly-absent array.
+        warnings: z.array(z.string()).optional(),
+        nextActions: z.array(z.string()).optional(),
+        code: z.string().optional(),
+        message: z.string().optional(),
+        errorId: z.string().optional()
+    });
+}
+const baseEnvelopeSchema = envelopeWith(anyJsonObject);
+/**
+ * Build the envelope schema with a payload schema — for the callers that read
+ * `data.<field>` at depth >= 2 and can say what they expect there.
+ */
+export function cliEnvelopeSchema(payload) {
+    return envelopeWith(payload);
+}
+/**
+ * Parse a CLI stdout envelope, validating the head. Throws when the text is
+ * not JSON, or is JSON that is not an envelope — a caller that fed this
+ * something else wants to know, not to read `undefined.ok` further down.
+ */
+export function parseCliEnvelope(raw) {
+    return parseJson(raw, baseEnvelopeSchema);
+}
+/**
+ * Parse a CLI stdout envelope for a caller that reads `data.<field>` at depth
+ * >= 2, validating that field's own shape as well. The caller names the shape;
+ * nothing is asserted on its behalf.
+ */
+export function parseCliEnvelopeWith(raw, payload) {
+    return parseJson(raw, cliEnvelopeSchema(payload));
+}

package/dist/cli/cli-helpers.d.ts

@@ -1,4 +1,4 @@
-import { Command } from 'commander';
+import type { Command } from 'commander';
 import { getErrorMessage, ok, redactSensitiveErrorMessage, type ResultEnvelope } from 'peaks-loop-shared/result';
 import type { ArtifactProvider, GuidedArtifactSetup } from '../services/artifacts/artifact-service.js';
 import type { ConfigLayer } from '../services/config/config-service.js';

package/dist/cli/cli-helpers.js

@@ -44,7 +44,9 @@ export function addJsonOption(command) {
     return command.option('--json', 'print machine-readable JSON envelope');
 }
 export function failUnsupportedNonDryRun(io, command, asJson) {
-    printResult(io, fail(command, 'UNSUPPORTED_NON_DRY_RUN', 'Only dry-run planning is supported', {}, ['Rerun with --dry-run or omit --no-dry-run']), asJson);
+    printResult(io, fail(command, 'UNSUPPORTED_NON_DRY_RUN', 'Only dry-run planning is supported', {}, [
+        'Rerun with --dry-run or omit --no-dry-run'
+    ]), asJson);
     process.exitCode = 1;
 }
 export function printCliEnvelope(io, r) {
@@ -152,10 +154,10 @@ export function isArtifactProvider(value) {
     return value === 'github' || value === 'gitlab';
 }
 export function isArtifactSetupStep(value) {
-    return value === 'detect' || value === 'configure' || value === 'validate' || value === 'complete';
+    return (value === 'detect' || value === 'configure' || value === 'validate' || value === 'complete');
 }
 export function isArtifactRepoSegment(value) {
-    return /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value) && !value.includes('..') && !value.endsWith('.');
+    return (/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value) && !value.includes('..') && !value.endsWith('.'));
 }
 export function parseConfigLayer(value) {
     if (value === undefined) {
@@ -164,7 +166,9 @@ export function parseConfigLayer(value) {
     return value === 'user' || value === 'project' ? value : null;
 }
 export function printInvalidConfigLayer(io, command, asJson) {
-    printResult(io, fail(command, 'INVALID_CONFIG_LAYER', 'Config layer must be user or project', {}, ['Use --layer user or --layer project']), asJson);
+    printResult(io, fail(command, 'INVALID_CONFIG_LAYER', 'Config layer must be user or project', {}, [
+        'Use --layer user or --layer project'
+    ]), asJson);
     process.exitCode = 1;
 }
 export function multipleOption(value, previous) {

package/dist/cli/commands/_cli-error-envelope.js

@@ -40,7 +40,7 @@ export function mapServiceError(error) {
     if (error instanceof ProviderNotConfiguredError) {
         return {
             code: 'INVALID_PROVIDERS',
-            nextActions: ['Configure provider model: peaks config provider <id> set --model <id>'],
+            nextActions: ['Configure provider model: peaks config provider <id> set --model <id>']
         };
     }
     if (error instanceof Error && GOAL_VALIDATION_MESSAGE_RE.test(error.message)) {

package/dist/cli/commands/_register.js

@@ -33,6 +33,7 @@ import { registerHooksCommands } from './hooks-commands.js';
 import { registerIdeCommands } from './ide-commands.js';
 import { registerImpactCommands } from './impact-commands.js';
 import { registerJobCommands } from './job-commands.js';
+import { registerJobAddSliceCommand } from './job-add-slice-command.js';
 import { registerLegacyCommands } from './legacy-commands.js';
 import { registerLintCommands } from './lint-commands.js';
 import { registerLogCommands } from './log-commands.js';
@@ -87,64 +88,110 @@ import { registerWorkflowPlanCommands } from './workflow-plan-commands.js';
 import { registerWorktreeAuthCommand } from './worktree-auth-commands.js';
 import { registerWorkspaceCommands } from './workspace-commands.js';
 const NON_AUTO = new Set([
-    'core-artifact-commands', 'capability-worker-config-sc-commands',
-    'sub-agent-commands', 'workspace-commands', 'workflow-commands',
-    'sop-commands', 'skill-visibility',
+    'core-artifact-commands',
+    'capability-worker-config-sc-commands',
+    'sub-agent-commands',
+    'workspace-commands',
+    'workflow-commands',
+    'sop-commands',
+    'skill-visibility'
 ]);
 const REGISTRATIONS = [
     ['core-artifact-commands', registerCoreAndArtifactCommands],
     ['workflow-commands', registerWorkflowCommands],
     ['capability-worker-config-sc-commands', registerCapabilityWorkerConfigAndSCCommands],
-    ['codegraph-commands', registerCodegraphCommands], ['openspec-commands', registerOpenSpecCommands],
-    ['perf-commands', registerPerfCommands], ['preferences-commands', registerPreferencesCommands],
-    ['project-commands', registerProjectCommands], ['prd-commands', registerPrdCommands],
-    ['request-commands', registerRequestCommands], ['retrospective-commands', registerRetrospectiveCommands],
-    ['scan-commands', registerScanCommands], ['shadcn-commands', registerShadcnCommands],
+    ['codegraph-commands', registerCodegraphCommands],
+    ['openspec-commands', registerOpenSpecCommands],
+    ['perf-commands', registerPerfCommands],
+    ['preferences-commands', registerPreferencesCommands],
+    ['project-commands', registerProjectCommands],
+    ['prd-commands', registerPrdCommands],
+    ['request-commands', registerRequestCommands],
+    ['retrospective-commands', registerRetrospectiveCommands],
+    ['scan-commands', registerScanCommands],
+    ['shadcn-commands', registerShadcnCommands],
     // Registered after `scan-commands` on purpose: it attaches `scan api-diff`
     // to the existing parent instead of creating a second `scan` command.
     ['api-diff-commands', registerApiDiffCommands],
     ['slice-commands', registerSliceCommands],
-    ['sop-commands', registerSopCommands], ['feedback-commands', registerFeedbackCommands],
-    ['fork-commands', registerForkCommands], ['impact-commands', registerImpactCommands],
-    ['smoke-commands', registerSmokeCommands], ['release-commands', registerReleaseCommands],
+    ['sop-commands', registerSopCommands],
+    ['feedback-commands', registerFeedbackCommands],
+    ['fork-commands', registerForkCommands],
+    ['impact-commands', registerImpactCommands],
+    ['smoke-commands', registerSmokeCommands],
+    ['release-commands', registerReleaseCommands],
     ['changeset-commands', registerChangesetCommands],
-    ['prd-blocks-commands', registerPrdBlocksCommands], ['user-touchpoint-commands', registerUserTouchpointCommands],
-    ['slice-review-commands', registerSliceReviewCommands], ['qa-business-review-commands', registerQaBusinessReviewCommands],
-    ['slice-integrate-commands', registerSliceIntegrateCommands], ['doc-commands', registerDocCommands],
-    ['legacy-commands', registerLegacyCommands], ['lint-commands', registerLintCommands], ['role-commands', registerRoleCommands],
-    ['complexity-commands', registerComplexityCommands], ['sub-agent-commands', registerSubAgentCommands],
-    ['sub-agent-shutdown-commands', registerSubAgentShutdownCommands], ['e2e-verify', registerE2EVerifyCommand],
+    ['prd-blocks-commands', registerPrdBlocksCommands],
+    ['user-touchpoint-commands', registerUserTouchpointCommands],
+    ['slice-review-commands', registerSliceReviewCommands],
+    ['qa-business-review-commands', registerQaBusinessReviewCommands],
+    ['slice-integrate-commands', registerSliceIntegrateCommands],
+    ['doc-commands', registerDocCommands],
+    ['legacy-commands', registerLegacyCommands],
+    ['lint-commands', registerLintCommands],
+    ['role-commands', registerRoleCommands],
+    ['complexity-commands', registerComplexityCommands],
+    ['sub-agent-commands', registerSubAgentCommands],
+    ['sub-agent-shutdown-commands', registerSubAgentShutdownCommands],
+    ['e2e-verify', registerE2EVerifyCommand],
     ['governance-classify-contract-commands', registerContractCommands],
-    ['sub-agent-dispatch-guard', registerSubAgentDispatchGuard], ['gate-commands', registerGateCommands],
-    ['hook-handle', registerHookHandleCommand], ['hooks-commands', registerHooksCommands],
-    ['heartbeat-commands', registerHeartbeatCommands], ['statusline-commands', registerStatusLineCommands],
-    ['workspace-commands', registerWorkspaceCommands], ['workflow-plan-commands', registerWorkflowPlanCommands],
-    ['audit-commands', registerAuditCommands], ['final-review-commands', registerFinalReviewCommands],
-    ['governance-classify-contract-commands', registerClassifyCommands], ['context-commands', registerContextCommands],
+    ['sub-agent-dispatch-guard', registerSubAgentDispatchGuard],
+    ['gate-commands', registerGateCommands],
+    ['hook-handle', registerHookHandleCommand],
+    ['hooks-commands', registerHooksCommands],
+    ['heartbeat-commands', registerHeartbeatCommands],
+    ['statusline-commands', registerStatusLineCommands],
+    ['workspace-commands', registerWorkspaceCommands],
+    ['workflow-plan-commands', registerWorkflowPlanCommands],
+    ['audit-commands', registerAuditCommands],
+    ['final-review-commands', registerFinalReviewCommands],
+    ['governance-classify-contract-commands', registerClassifyCommands],
+    ['context-commands', registerContextCommands],
     ['skill-conformance-commands', registerSkillConformanceCommands],
     ['skill-loop-engineering-readiness-commands', registerSkillLoopEngineeringReadinessCommands],
-    ['loop-commands', registerLoopCommands], ['loop-eval-commands', registerWorkflowEvalCommands],
-    ['evolution-commands', registerEvolutionCommands], ['asset-commands', registerAssetCommands],
+    ['loop-commands', registerLoopCommands],
+    ['loop-eval-commands', registerWorkflowEvalCommands],
+    ['evolution-commands', registerEvolutionCommands],
+    ['asset-commands', registerAssetCommands],
     ['evidence-commands', registerEvidenceCommands],
     ['fresh-context-commands', registerFreshContextCommands],
-    ['bee-commands', registerBeeCommands], ['ecc-commands', registerEccCommands],
+    ['bee-commands', registerBeeCommands],
+    ['ecc-commands', registerEccCommands],
     ['baseline-commands', registerBaselineCommands],
-    ['upgrade-commands', registerUpgradeCommands], ['code-review-commands', registerCodeReviewCommands],
-    ['security-audit-commands', registerSecurityAuditCommands], ['perf-audit-commands', registerPerfAuditCommands],
-    ['verdict-aggregate-command', registerVerdictAggregateCommands], ['log-commands', registerLogCommands],
-    ['qa-commands', registerQaCommands], ['test-commands', registerTestCommands],
-    ['playwright-commands', registerPlaywrightCommands], ['code-commands', registerCodeCommands], ['code-gate-command', registerCodeGateCommand], ['dashboard-commands', registerDashboardCommands], ['best-practice-scan-command', registerBestPracticeScanCommand],
-    ['mut-commands', registerMutCommands], ['fixture-commands', registerFixtureCommands],
-    ['reviewer-commands', registerReviewerCommands], ['ide-commands', registerIdeCommands],
-    ['observability-commands', registerObservabilityCommands], ['compact-command', registerCompactCommands],
-    ['job-commands', registerJobCommands], ['sediment-commands', registerSedimentCommands],
-    ['adapter-commands', registerAdapterCommands], ['runtime-commands', registerRuntimeCommands],
-    ['adapter-commands-s2a', registerAdapterS2ACommands], ['polyrepo-commands', registerPolyrepoCommands],
+    ['upgrade-commands', registerUpgradeCommands],
+    ['code-review-commands', registerCodeReviewCommands],
+    ['security-audit-commands', registerSecurityAuditCommands],
+    ['perf-audit-commands', registerPerfAuditCommands],
+    ['verdict-aggregate-command', registerVerdictAggregateCommands],
+    ['log-commands', registerLogCommands],
+    ['qa-commands', registerQaCommands],
+    ['test-commands', registerTestCommands],
+    ['playwright-commands', registerPlaywrightCommands],
+    ['code-commands', registerCodeCommands],
+    ['code-gate-command', registerCodeGateCommand],
+    ['dashboard-commands', registerDashboardCommands],
+    ['best-practice-scan-command', registerBestPracticeScanCommand],
+    ['mut-commands', registerMutCommands],
+    ['fixture-commands', registerFixtureCommands],
+    ['reviewer-commands', registerReviewerCommands],
+    ['ide-commands', registerIdeCommands],
+    ['observability-commands', registerObservabilityCommands],
+    ['compact-command', registerCompactCommands],
+    ['job-commands', registerJobCommands],
+    // Registered right after `job-commands` on purpose: it attaches
+    // `job add-slice` to the existing `job` parent instead of creating a
+    // second `job` group (same rule as `api-diff-commands` above).
+    ['job-add-slice-command', registerJobAddSliceCommand],
+    ['sediment-commands', registerSedimentCommands],
+    ['adapter-commands', registerAdapterCommands],
+    ['runtime-commands', registerRuntimeCommands],
+    ['adapter-commands-s2a', registerAdapterS2ACommands],
+    ['polyrepo-commands', registerPolyrepoCommands],
     ['worktree-auth-commands', registerWorktreeAuthCommand],
     ['session-spill-demo', registerSpillDemoCommand],
     ['outer-cache-commands', registerOuterCacheCommands],
     ['vendor-detect', registerVendorDetectCommand],
-    ['web-commands', registerWebCommands],
+    ['web-commands', registerWebCommands]
 ];
 function dispatchRegister(register, program, io) {
     if (register.length <= 1) {

package/dist/cli/commands/_super.js

@@ -37,7 +37,9 @@ function route(command, input) {
             nextActions: ['LLM: dispatch peaks-solo with this goal']
         };
     }
-    const alternatives = candidates.filter((candidate) => candidate !== chosen).map((candidate) => candidate.skill);
+    const alternatives = candidates
+        .filter((candidate) => candidate !== chosen)
+        .map((candidate) => candidate.skill);
     const confidence = selected === undefined ? 0.25 : 0.92;
     const rationale = selected === undefined
         ? 'No route keyword matched; default candidate selected for LLM arbitration'
@@ -51,10 +53,21 @@ function route(command, input) {
     };
 }
 function registerRouted(program, io, name, argument) {
-    program.command(`${name} <${argument}>`).description(`Route a natural-language ${argument} to the appropriate Peaks skill`).action((value) => {
+    program
+        .command(`${name} <${argument}>`)
+        .description(`Route a natural-language ${argument} to the appropriate Peaks skill`)
+        .action((value) => {
         const input = value.trim();
         if (!input) {
-            io.stdout(JSON.stringify({ ok: false, command: `super.${name}`, code: 'MISSING_ARG', message: `${argument} must not be blank`, data: {}, warnings: [], nextActions: [] }));
+            io.stdout(JSON.stringify({
+                ok: false,
+                command: `super.${name}`,
+                code: 'MISSING_ARG',
+                message: `${argument} must not be blank`,
+                data: {},
+                warnings: [],
+                nextActions: []
+            }));
             process.exitCode = 1;
             return;
         }
@@ -63,7 +76,10 @@ function registerRouted(program, io, name, argument) {
     });
 }
 function registerFixed(program, io, name, skill, description) {
-    program.command(name).description(description).action(() => {
+    program
+        .command(name)
+        .description(description)
+        .action(() => {
         const data = {
             routedSkill: skill,
             confidence: 1,
@@ -75,14 +91,31 @@ function registerFixed(program, io, name, skill, description) {
     });
 }
 function registerAsk(program, io) {
-    program.command('ask <question>').description('Route a free-form question to the Peaks solo dispatcher').action((question) => {
+    program
+        .command('ask <question>')
+        .description('Route a free-form question to the Peaks solo dispatcher')
+        .action((question) => {
         const input = question.trim();
         if (!input) {
-            io.stdout(JSON.stringify({ ok: false, command: 'super.ask', code: 'MISSING_ARG', message: 'question must not be blank', data: {}, warnings: [], nextActions: [] }));
+            io.stdout(JSON.stringify({
+                ok: false,
+                command: 'super.ask',
+                code: 'MISSING_ARG',
+                message: 'question must not be blank',
+                data: {},
+                warnings: [],
+                nextActions: []
+            }));
             process.exitCode = 1;
             return;
         }
-        io.stdout(envelope('super.ask', { routedSkill: 'peaks-solo', confidence: 1, alternatives: [], rationale: 'Free-form question delegated to the Peaks solo dispatcher', nextActions: ['LLM: dispatch peaks-solo with this question'] }));
+        io.stdout(envelope('super.ask', {
+            routedSkill: 'peaks-solo',
+            confidence: 1,
+            alternatives: [],
+            rationale: 'Free-form question delegated to the Peaks solo dispatcher',
+            nextActions: ['LLM: dispatch peaks-solo with this question']
+        }));
     });
 }
 export function registerSuperCommands(program, io) {

package/dist/cli/commands/adapter-commands-s2a.js

@@ -64,10 +64,7 @@ export function registerAdapterS2ACommands(program, io) {
                 result = reg.register(record, { force: options.force === true });
             }
             catch (validationError) {
-                printResult(io, fail('adapter.register', 'INVALID_ADAPTER_RECORD', getErrorMessage(validationError), { id }, [
-                    'Use --id with /^[a-z0-9][a-z0-9._-]*$/, --binary as a binary name (no path separators).'
-                ]), options.json);
-                process.exitCode = 1;
+                printAdapterRegisterInvalidRecord(io, options, id, validationError);
                 return;
             }
             reg.persist(file);
@@ -80,9 +77,7 @@ export function registerAdapterS2ACommands(program, io) {
                 file,
                 adapter: result.record,
                 created: result.created
-            }, warnings, [
-                `Run \`peaks runtime compact --via ${id}\` to invoke it.`
-            ]), options.json);
+            }, warnings, [`Run \`peaks runtime compact --via ${id}\` to invoke it.`]), options.json);
         }
         catch (error) {
             printResult(io, fail('adapter.register', 'ADAPTER_REGISTER_FAILED', getErrorMessage(error), {}, []), options.json);
@@ -90,3 +85,9 @@ export function registerAdapterS2ACommands(program, io) {
         }
     });
 }
+function printAdapterRegisterInvalidRecord(io, options, id, validationError) {
+    printResult(io, fail('adapter.register', 'INVALID_ADAPTER_RECORD', getErrorMessage(validationError), { id }, [
+        'Use --id with /^[a-z0-9][a-z0-9._-]*$/, --binary as a binary name (no path separators).'
+    ]), options.json);
+    process.exitCode = 1;
+}

package/dist/cli/commands/adapter-commands.d.ts

@@ -9,8 +9,8 @@
  * Unknown verbs return an empty result so program.ts can render a
  * NOT_FOUND envelope without throwing.
  */
-import type { Command } from "commander";
-import type { ProgramIO } from "../cli-helpers.js";
+import type { Command } from 'commander';
+import type { ProgramIO } from '../cli-helpers.js';
 export interface AdapterResult {
     adapters?: string[];
     active?: string;

package/dist/cli/commands/adapter-commands.js

@@ -2,10 +2,10 @@
  *  with runSediment, but the in-scope verbs don't read from disk yet. */
 export async function runAdapter(argv, { home: _home }) {
     const verb = argv[0];
-    if (verb === "list") {
-        return { adapters: ["claude", "codex", "copilot"] };
+    if (verb === 'list') {
+        return { adapters: ['claude', 'codex', 'copilot'] };
     }
-    if (verb === "set-active") {
+    if (verb === 'set-active') {
         const name = argv[1];
         if (name === undefined)
             return {};
@@ -21,12 +21,11 @@ export async function runAdapter(argv, { home: _home }) {
  *  precedent.
  */
 export function registerAdapterCommands(program, io) {
-    const existingSkill = program.commands.find((c) => c.name() === "skill");
-    const skill = existingSkill ??
-        program.command("skill").description("Manage Peaks skills");
+    const existingSkill = program.commands.find((c) => c.name() === 'skill');
+    const skill = existingSkill ?? program.command('skill').description('Manage Peaks skills');
     skill
-        .command("adapter <args...>")
-        .description("Adapter selection and detection")
+        .command('adapter <args...>')
+        .description('Adapter selection and detection')
         .action(async (args) => {
         const home = process.env.HOME ?? process.env.USERPROFILE ?? process.cwd();
         const r = await runAdapter(args, { home });

package/dist/cli/commands/api-diff-commands.js

@@ -17,9 +17,8 @@ import { addJsonOption, printResult } from '../cli-helpers.js';
 export function registerApiDiffCommands(program, io) {
     // Reuse the existing `scan` parent — the add-a-new-subcommand-check-for-
     // existing-top-level-first rule (same guard as bee-commands / asset-commands).
-    const scan = program.commands.find((c) => c.name() === 'scan') ?? program
-        .command('scan')
-        .description('Read-only project scans for tech-doc and RD handoffs');
+    const scan = program.commands.find((c) => c.name() === 'scan') ??
+        program.command('scan').description('Read-only project scans for tech-doc and RD handoffs');
     addJsonOption(scan
         .command('api-diff')
         .description('Diff an OpenAPI 3.x document (.json/.yaml/.yml) against what this project already recorded — ' +
@@ -34,7 +33,9 @@ export function registerApiDiffCommands(program, io) {
         try {
             const report = diffApiDocument({ projectRoot, docPath: doc });
             const nextActions = report.notes.length > 0
-                ? ['Read the notes: at least one recorded source was missing, so the Exact section is partial by construction.']
+                ? [
+                    'Read the notes: at least one recorded source was missing, so the Exact section is partial by construction.'
+                ]
                 : [];
             if (asJson) {
                 printResult(io, ok('scan.api-diff', report, [], nextActions), true);

package/dist/cli/commands/asset-commands.d.ts

@@ -40,6 +40,6 @@
  * pre-run gate and the brief-section guard; the CLI only
  * translates flags into the service payload.
  */
-import { Command } from "commander";
-import { type ProgramIO } from "../cli-helpers.js";
+import type { Command } from 'commander';
+import { type ProgramIO } from '../cli-helpers.js';
 export declare function registerAssetCommands(program: Command, io: ProgramIO): void;