peaks-loop 4.0.53 → 4.1.0

package/dist/services/audit/enforcers/lint-peaks-ui-sc-txt-runtime.js

@@ -7,9 +7,7 @@ const PERF_AUDIT_NON_PERF = /MUST NOT invoke this skill[\s\S]*?non-perf/i;
 export function lintPeaksUiSuperpowersChain(skill) {
     if (skill.name !== 'peaks-ui')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const hasRefusal = lines.some((l) => SUPERPOWERS_REFUSAL.test(l));
     const hasReference = lines.some((l) => SUPERPOWERS_REFERENCE.test(l));
     if (hasRefusal && hasReference)
@@ -19,37 +17,37 @@ export function lintPeaksUiSuperpowersChain(skill) {
         missing.push('MUST NOT follow the superpowers chain');
     if (!hasReference)
         missing.push('superpowers skills remain available as reference material');
-    return [{
+    return [
+        {
             catalogId: 'rl-peaks-ui-superpowers-chain-001',
             rule: 'peaks-ui SKILL.md must declare the superpowers chain refusal + reference-material contract',
             file: skill.path,
             line: 1,
             matchedText: `missing markers: ${missing.join(', ')}`
-        }];
+        }
+    ];
 }
 export function lintPeaksUiInvolvement(skill) {
     if (skill.name !== 'peaks-ui')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const hasInvolvement = lines.some((l) => UI_INVOLVEMENT.test(l));
     if (hasInvolvement)
         return [];
-    return [{
+    return [
+        {
             catalogId: 'rl-peaks-ui-involvement-001',
             rule: 'peaks-ui SKILL.md must declare the UI-involvement identification block',
             file: skill.path,
             line: 1,
             matchedText: 'missing "identify ui involvement" marker'
-        }];
+        }
+    ];
 }
 export function lintPeaksTxtUpstream(skill) {
     if (skill.name !== 'peaks-txt')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const hasInspect = lines.some((l) => TXT_INSPECT_UPSTREAM.test(l));
     const hasMemoryBlock = lines.some((l) => TXT_MEMORY_BLOCK.test(l));
     if (hasInspect && hasMemoryBlock)
@@ -59,28 +57,30 @@ export function lintPeaksTxtUpstream(skill) {
         missing.push('inspect upstream skill content before applying any method');
     if (!hasMemoryBlock)
         missing.push('memory block embedding rule');
-    return [{
+    return [
+        {
             catalogId: 'rl-peaks-txt-upstream-001',
             rule: 'peaks-txt SKILL.md must declare the upstream-inspection + memory-block contract',
             file: skill.path,
             line: 1,
             matchedText: `missing markers: ${missing.join(', ')}`
-        }];
+        }
+    ];
 }
 export function lintPeaksPerfAuditScope(skill) {
     if (skill.name !== 'peaks-perf-audit')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const hasNonPerf = lines.some((l) => PERF_AUDIT_NON_PERF.test(l));
     if (hasNonPerf)
         return [];
-    return [{
+    return [
+        {
             catalogId: 'rl-peaks-perf-audit-scope-001',
             rule: 'peaks-perf-audit SKILL.md must declare the non-perf MUST NOT invoke clause',
             file: skill.path,
             line: 1,
             matchedText: 'missing "MUST NOT invoke this skill for non-perf slices" marker'
-        }];
+        }
+    ];
 }

package/dist/services/audit/enforcers/lint-prd-artifact-handoff.js

@@ -18,9 +18,7 @@ function findPrdHandoffContract(lines) {
 export function lintPrdArtifactHandoff(skill) {
     if (skill.name !== 'peaks-prd')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const { preserved, handoffStep, transitionGates } = findPrdHandoffContract(lines);
     if (preserved && handoffStep && transitionGates)
         return [];
@@ -31,11 +29,13 @@ export function lintPrdArtifactHandoff(skill) {
         missing.push('step 5.5 (write the immutable handoff)');
     if (!transitionGates)
         missing.push('Transition verification gates');
-    return [{
+    return [
+        {
             catalogId: 'rl-prd-artifact-handoff-001',
             rule: 'peaks-prd SKILL.md must declare the artifact handoff contract (Preserved behavior + step 5.5 + Transition verification gates)',
             file: skill.path,
             line: 1,
             matchedText: `missing markers: ${missing.join(', ')}`
-        }];
+        }
+    ];
 }

package/dist/services/audit/enforcers/lint-prd-source-snapshot.d.ts

@@ -11,7 +11,7 @@
  *
  * The enforcer pattern-scans the peaks-prd SKILL.md for the
  * required guidance phrasing. Two hits (placement heading +
-  * prohibited-paths line) are both required for a clean
+ * prohibited-paths line) are both required for a clean
  * enforcer pass. A single missing item emits a synthetic hit
  * pointing at the line the user is most likely to look at
  * (the placement heading line, or line 1 if missing).

package/dist/services/audit/enforcers/lint-prd-source-snapshot.js

@@ -28,20 +28,20 @@ export function lintPrdSourceSnapshot(skill) {
     // source-snapshot contract.
     if (skill.name !== 'peaks-prd')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const { placementLine, hasProhibited, hasSubdir } = findPrdSourceSnapshotGuidance(lines);
     if (placementLine !== null && hasProhibited && hasSubdir)
         return [];
     const detail = placementLine === null
         ? 'missing `## Document snapshot placement` heading'
         : `placement heading at line ${placementLine} but guidance incomplete (prohibited=${hasProhibited}, subdir=${hasSubdir})`;
-    return [{
+    return [
+        {
             catalogId: 'rl-prd-source-snapshot-placement-001',
             rule: 'PRD source-snapshot placement (BLOCKING): external-document snapshots must land in .peaks/_runtime/<sessionId>/prd/source/, never project root',
             file: skill.path,
             line: placementLine ?? 1,
             matchedText: detail
-        }];
+        }
+    ];
 }

package/dist/services/audit/enforcers/lint-qa-gateguard-and-runtime.js

@@ -5,26 +5,24 @@ const OPENSPEC_INTEGRATION = /when the target repository has openspec\//i;
 export function lintQaGateguardPreflight(skill) {
     if (skill.name !== 'peaks-qa')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const hasGateguard = lines.some((l) => GATEGUARD_HEADING.test(l));
     if (hasGateguard)
         return [];
-    return [{
+    return [
+        {
             catalogId: 'rl-qa-gateguard-preflight-001',
             rule: 'peaks-qa SKILL.md must declare the `## Pre-flight: gateguard-fact-force conflict (BLOCKING)` section',
             file: skill.path,
             line: 1,
             matchedText: 'missing gateguard pre-flight heading'
-        }];
+        }
+    ];
 }
 export function lintQaRuntimeContract(skill) {
     if (skill.name !== 'peaks-qa')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const hasTransition = lines.some((l) => TRANSITION_GATES.test(l));
     const hasPlaywright = lines.some((l) => PLAYWRIGHT_MCP.test(l));
     const hasOpenSpec = lines.some((l) => OPENSPEC_INTEGRATION.test(l));
@@ -37,11 +35,13 @@ export function lintQaRuntimeContract(skill) {
         missing.push('Playwright MCP unavailability handling');
     if (!hasOpenSpec)
         missing.push('OpenSpec integration requirement');
-    return [{
+    return [
+        {
             catalogId: 'rl-qa-runtime-contract-001',
             rule: 'peaks-qa SKILL.md must declare the runtime contract (transition gates + Playwright MCP + OpenSpec integration)',
             file: skill.path,
             line: 1,
             matchedText: `missing markers: ${missing.join(', ')}`
-        }];
+        }
+    ];
 }

package/dist/services/audit/enforcers/lint-rd-handoff-coverage.js

@@ -107,20 +107,20 @@ export function lintRdHandoffContract(skill, projectRoot) {
     const artifactCount = countNonEmptyArtifacts(requestsDir);
     if (artifactCount > 0)
         return [];
-    return [{
+    return [
+        {
             catalogId: 'rl-rd-handoff-contract-001',
             rule: 'peaks-rd must not hand off to QA without a non-empty RD artifact under rd/requests/',
             file: requestsDir,
             line: 1,
-            matchedText: `no non-empty .md artifact under ${requestsDir} (${binding.reason})`,
-        }];
+            matchedText: `no non-empty .md artifact under ${requestsDir} (${binding.reason})`
+        }
+    ];
 }
 export function lintRdCoverageDiscipline(skill) {
     if (skill.name !== 'peaks-rd')
         return [];
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const { target, noPadding } = findCoverageContract(lines);
     if (target && noPadding)
         return [];
@@ -129,11 +129,13 @@ export function lintRdCoverageDiscipline(skill) {
         missing.push('100% coverage target (testable files) phrasing');
     if (!noPadding)
         missing.push('"must not write coverage-padding tests" rule');
-    return [{
+    return [
+        {
             catalogId: 'rl-rd-coverage-discipline-001',
             rule: 'peaks-rd SKILL.md must declare the coverage discipline (100% target + no-padding rule)',
             file: skill.path,
             line: 1,
             matchedText: `missing markers: ${missing.join(', ')}`
-        }];
+        }
+    ];
 }

package/dist/services/audit/enforcers/lint-reference-shape.js

@@ -63,17 +63,23 @@ function hit(catalogId, rule, file, line, matchedText) {
 export function lintH1TitleRequired(ref) {
     if (H1_TITLE_PATTERN.test(ref.body))
         return [];
-    return [hit('rl-ref-h1-title-required-001', 'every references/*.md starts with `# <title>`', ref.path, 1, '(missing `# <title>` first-line heading)')];
+    return [
+        hit('rl-ref-h1-title-required-001', 'every references/*.md starts with `# <title>`', ref.path, 1, '(missing `# <title>` first-line heading)')
+    ];
 }
 export function lintApplicableTaskLevels(ref) {
     if (TASK_LEVELS_PATTERN.test(ref.body))
         return [];
-    return [hit('rl-ref-applicable-task-levels-declared-001', 'every references/*.md declares applicableTaskLevels', ref.path, 1, '(missing applicableTaskLevels declaration)')];
+    return [
+        hit('rl-ref-applicable-task-levels-declared-001', 'every references/*.md declares applicableTaskLevels', ref.path, 1, '(missing applicableTaskLevels declaration)')
+    ];
 }
 export function lintSeeAlsoSection(ref) {
     if (SEE_ALSO_HEADING.test(ref.body))
         return [];
-    return [hit('rl-ref-see-also-section-001', 'every references/*.md has a `## See also` section', ref.path, 1, '(missing `## See also` (or `## Related` / `## References`) section)')];
+    return [
+        hit('rl-ref-see-also-section-001', 'every references/*.md has a `## See also` section', ref.path, 1, '(missing `## See also` (or `## Related` / `## References`) section)')
+    ];
 }
 // ==================== Theme I — cross-references ====================
 export function lintCrossRefResolves(ref, refsDir, siblings) {
@@ -88,7 +94,7 @@ export function lintCrossRefResolves(ref, refsDir, siblings) {
         const candidates = [
             join(refsDir, target),
             join(refsDir, '..', target),
-            join(refsDir, '..', '..', target),
+            join(refsDir, '..', '..', target)
         ];
         const exists = candidates.some((c) => existsSync(c)) || siblings.includes(target);
         if (!exists) {
@@ -105,7 +111,9 @@ export function lintNoSelfReference(ref) {
     if (!re.test(ref.body))
         return [];
     const line = findLine(ref.lines, re);
-    return [hit('rl-ref-no-self-reference-001', 'no reference file links to itself', ref.path, line === -1 ? 1 : line, `(self-link to ${basename})`)];
+    return [
+        hit('rl-ref-no-self-reference-001', 'no reference file links to itself', ref.path, line === -1 ? 1 : line, `(self-link to ${basename})`)
+    ];
 }
 export function lintNoOrphanLink(ref) {
     // Heuristic: a markdown link to a non-.md URL with no protocol
@@ -134,20 +142,26 @@ export function lintNoOrphanLink(ref) {
 export function lintLineCountLe800(ref) {
     if (ref.lines.length <= 800)
         return [];
-    return [hit('rl-ref-line-count-le-800-001', 'each reference ≤ 800 lines (Karpathy 4 原则 §2.3)', ref.path, 1, `(line count ${ref.lines.length} > 800)`)];
+    return [
+        hit('rl-ref-line-count-le-800-001', 'each reference ≤ 800 lines (Karpathy 4 原则 §2.3)', ref.path, 1, `(line count ${ref.lines.length} > 800)`)
+    ];
 }
 export function lintH2CountLe12(ref) {
     const matches = ref.body.match(H2_HEADING) ?? [];
     if (matches.length <= 12)
         return [];
-    return [hit('rl-ref-h2-count-le-12-001', 'at most 12 `## <heading>` per reference', ref.path, 1, `(h2 count ${matches.length} > 12)`)];
+    return [
+        hit('rl-ref-h2-count-le-12-001', 'at most 12 `## <heading>` per reference', ref.path, 1, `(h2 count ${matches.length} > 12)`)
+    ];
 }
 export function lintOverviewNearTop(ref) {
     if (ref.lines.length <= OVERVIEW_MIN_LINE_COUNT)
         return [];
     if (findLine(ref.lines.slice(0, OVERVIEW_TOP_SEARCH_LINES), OVERVIEW_HEADING) !== -1)
         return [];
-    return [hit('rl-ref-overview-section-near-top-001', 'long references (>200 lines) must have `## Overview` within the first 30 lines', ref.path, 1, '(missing `## Overview` near top of long reference)')];
+    return [
+        hit('rl-ref-overview-section-near-top-001', 'long references (>200 lines) must have `## Overview` within the first 30 lines', ref.path, 1, '(missing `## Overview` near top of long reference)')
+    ];
 }
 // ==================== Theme K — loadStrategy behavior ====================
 export function lintLoadStrategyOnDemandFallback(ref) {
@@ -155,7 +169,9 @@ export function lintLoadStrategyOnDemandFallback(ref) {
         return [];
     if (FALLBACK_PATTERN.test(ref.body))
         return [];
-    return [hit('rl-ref-loadstrategy-on-demand-fallback-001', 'loadStrategy: on-demand references must declare a fallback path', ref.path, 1, '(missing `> Fallback:` or `**Fallback**:` declaration)')];
+    return [
+        hit('rl-ref-loadstrategy-on-demand-fallback-001', 'loadStrategy: on-demand references must declare a fallback path', ref.path, 1, '(missing `> Fallback:` or `**Fallback**:` declaration)')
+    ];
 }
 export function lintLoadStrategyAlwaysCacheable(ref) {
     if (!/loadStrategy:\s*always/i.test(ref.body))
@@ -166,7 +182,9 @@ export function lintLoadStrategyAlwaysCacheable(ref) {
     const lines = ref.lines.slice(0, LOAD_STRATEGY_PROBE_LINES);
     for (const line of lines) {
         if (/^\s*(npm|pnpm|yarn|npx|git|curl|wget|docker)\s+/.test(line)) {
-            return [hit('rl-ref-loadstrategy-always-cacheable-001', 'loadStrategy: always references must not run I/O at top of file', ref.path, 1, `(I/O pattern at top of file: ${line.trim()})`)];
+            return [
+                hit('rl-ref-loadstrategy-always-cacheable-001', 'loadStrategy: always references must not run I/O at top of file', ref.path, 1, `(I/O pattern at top of file: ${line.trim()})`)
+            ];
         }
     }
     return [];
@@ -176,19 +194,25 @@ export function lintNoBashHeredoc(ref) {
     if (!HEREDOC_PATTERN.test(ref.body))
         return [];
     const line = findLine(ref.lines, HEREDOC_PATTERN);
-    return [hit('rl-ref-no-bash-heredoc-001', 'no `cat <<EOF` in inline shell snippets', ref.path, line === -1 ? 1 : line, '(bash heredoc pattern found)')];
+    return [
+        hit('rl-ref-no-bash-heredoc-001', 'no `cat <<EOF` in inline shell snippets', ref.path, line === -1 ? 1 : line, '(bash heredoc pattern found)')
+    ];
 }
 export function lintNoSudo(ref) {
     if (!TOP_LEVEL_SUDO.test(ref.body))
         return [];
     const line = findLine(ref.lines, TOP_LEVEL_SUDO);
-    return [hit('rl-ref-no-sudo-001', 'no `sudo` in inline shell snippets', ref.path, line === -1 ? 1 : line, '(sudo command found)')];
+    return [
+        hit('rl-ref-no-sudo-001', 'no `sudo` in inline shell snippets', ref.path, line === -1 ? 1 : line, '(sudo command found)')
+    ];
 }
 export function lintNoCurlPipeBash(ref) {
     if (!CURL_PIPE_BASH.test(ref.body))
         return [];
     const line = findLine(ref.lines, CURL_PIPE_BASH);
-    return [hit('rl-ref-no-curl-pipe-bash-001', 'no `curl ... | bash` in inline shell snippets', ref.path, line === -1 ? 1 : line, '(curl-pipe-bash pattern found)')];
+    return [
+        hit('rl-ref-no-curl-pipe-bash-001', 'no `curl ... | bash` in inline shell snippets', ref.path, line === -1 ? 1 : line, '(curl-pipe-bash pattern found)')
+    ];
 }
 // ==================== Theme N — code blocks ====================
 export function lintCodeBlockLanguage(ref) {
@@ -209,7 +233,9 @@ export function lintNoFakePrompt(ref) {
     if (!FAKE_PROMPT.test(ref.body))
         return [];
     const line = findLine(ref.lines, FAKE_PROMPT);
-    return [hit('rl-ref-no-fake-prompt-001', 'no `# fake prompt` / `$ fake` markers in code blocks', ref.path, line === -1 ? 1 : line, '(fake-prompt marker found)')];
+    return [
+        hit('rl-ref-no-fake-prompt-001', 'no `# fake prompt` / `$ fake` markers in code blocks', ref.path, line === -1 ? 1 : line, '(fake-prompt marker found)')
+    ];
 }
 export function lintNoAbsolutePaths(ref) {
     const hits = [];
@@ -228,7 +254,9 @@ export function lintNoChmod777(ref) {
     if (!CHMOD_777.test(ref.body))
         return [];
     const line = findLine(ref.lines, CHMOD_777);
-    return [hit('rl-ref-no-chmod-777-001', 'no `chmod 777` in inline shell', ref.path, line === -1 ? 1 : line, '(chmod 777 found — security red flag)')];
+    return [
+        hit('rl-ref-no-chmod-777-001', 'no `chmod 777` in inline shell', ref.path, line === -1 ? 1 : line, '(chmod 777 found — security red flag)')
+    ];
 }
 export function lintNoMagicNumbers(ref) {
     // Look at code blocks for unsigned integers ≥ 100. We don't
@@ -242,7 +270,7 @@ export function lintNoMagicNumbers(ref) {
         const numMatch = block.match(MAGIC_NUMBER);
         if (!numMatch)
             continue;
-        const offset = (m.index ?? 0) + (m[0].indexOf(numMatch[0] ?? ''));
+        const offset = (m.index ?? 0) + m[0].indexOf(numMatch[0] ?? '');
         const line = ref.body.slice(0, offset).split('\n').length;
         hits.push(hit('rl-ref-no-magic-numbers-001', 'no unsigned integer ≥ 100 that is not a named constant', ref.path, line, `(magic number ${numMatch[0]} in code block)`));
     }
@@ -259,7 +287,9 @@ export function lintSkillCitesEveryReference(ref, skill) {
     const citedInRef = ref.body.includes(`../SKILL.md`) || ref.body.includes(`SKILL.md#`);
     if (citedInSkill || citedInRef)
         return [];
-    return [hit('rl-ref-skill-cites-every-existing-reference-001', 'every reference IS cited in its parent SKILL.md (or links to it)', ref.path, 1, `(uncited reference ${refName} in skill ${skillName})`)];
+    return [
+        hit('rl-ref-skill-cites-every-existing-reference-001', 'every reference IS cited in its parent SKILL.md (or links to it)', ref.path, 1, `(uncited reference ${refName} in skill ${skillName})`)
+    ];
 }
 export function lintLoadStrategyMatchesSize(ref) {
     const sizeBytes = Buffer.byteLength(ref.body, 'utf8');
@@ -270,7 +300,9 @@ export function lintLoadStrategyMatchesSize(ref) {
     const strategy = LOAD_STRATEGY_PATTERN.exec(ref.body);
     if (strategy && strategy[1]?.toLowerCase() === 'on-demand')
         return [];
-    return [hit('rl-ref-loadstrategy-matches-size-001', 'loadStrategy: on-demand is required for files > 5KB', ref.path, 1, `(size ${sizeBytes} bytes; loadStrategy must be \`on-demand\`)`)];
+    return [
+        hit('rl-ref-loadstrategy-matches-size-001', 'loadStrategy: on-demand is required for files > 5KB', ref.path, 1, `(size ${sizeBytes} bytes; loadStrategy must be \`on-demand\`)`)
+    ];
 }
 export function readReferenceFiles(skillsRoot, skillName, refNames) {
     const refsDir = join(skillsRoot, skillName, 'references');

package/dist/services/audit/enforcers/lint-skill-presence-mandatory.js

@@ -34,20 +34,20 @@ export function lintSkillPresenceMandatory(skill) {
         return [];
     // Reconstruct lines from body (the SkillFile interface exposes body
     // and lines; for compatibility, prefer lines if non-empty).
-    const lines = skill.lines.length > 0
-        ? skill.lines
-        : skill.body.split(/\r?\n/);
+    const lines = skill.lines.length > 0 ? skill.lines : skill.body.split(/\r?\n/);
     const { heading, bodyOk, hasMarker } = findSkillPresenceSection(lines);
     if (heading !== null && bodyOk && hasMarker)
         return [];
     const detail = heading === null
         ? 'missing `## Skill presence (MANDATORY first action)` heading'
         : `heading present at line ${heading} but body/marker incomplete (body=${bodyOk}, marker=${hasMarker})`;
-    return [{
+    return [
+        {
             catalogId: 'rl-skill-presence-mandatory-001',
             rule: 'Skill presence (MANDATORY first action) — peaks-* bee SKILL.md must declare the section',
             file: skill.path,
             line: heading ?? 1,
             matchedText: detail
-        }];
+        }
+    ];
 }

package/dist/services/audit/enforcers/lint-style.js

@@ -60,6 +60,33 @@ function sectionBody(lines, headingLine) {
     }
     return body;
 }
+function buildShapeRules() {
+    const rules = [
+        {
+            id: 'rl-section-hard-contracts-001',
+            rule: 'Hard contracts for browser/IO surface',
+            pattern: SECTION_HARD_CONTRACTS_HEADING,
+            requiresBodyMarker: true
+        },
+        {
+            id: 'rl-section-mandatory-artifact-001',
+            rule: 'Mandatory per-request artifact',
+            pattern: SECTION_MANDATORY_HEADING
+        },
+        {
+            id: 'rl-section-default-runbook-001',
+            rule: 'Default runbook pointer',
+            pattern: SECTION_DEFAULT_RUNBOOK_HEADING
+        },
+        { id: 'rl-section-gate-index-001', rule: 'Gate index', pattern: SECTION_GATE_INDEX_HEADING },
+        {
+            id: 'rl-section-naming-axiom-001',
+            rule: 'Two-axis naming axiom',
+            pattern: SECTION_NAMING_AXIOM_HEADING
+        }
+    ];
+    return rules;
+}
 /** Theme A — section structure. Returns lint hits (positive = rule
  *  satisfied, so a missing heading fires the lint hit; downstream
  *  audit service decides whether to WARN or pass).
@@ -73,13 +100,7 @@ function sectionBody(lines, headingLine) {
  *  body, which is what makes a contract visible to the classifier. */
 export function lintSectionShape(skill) {
     const hits = [];
-    const rules = [
-        { id: 'rl-section-hard-contracts-001', rule: 'Hard contracts for browser/IO surface', pattern: SECTION_HARD_CONTRACTS_HEADING, requiresBodyMarker: true },
-        { id: 'rl-section-mandatory-artifact-001', rule: 'Mandatory per-request artifact', pattern: SECTION_MANDATORY_HEADING },
-        { id: 'rl-section-default-runbook-001', rule: 'Default runbook pointer', pattern: SECTION_DEFAULT_RUNBOOK_HEADING },
-        { id: 'rl-section-gate-index-001', rule: 'Gate index', pattern: SECTION_GATE_INDEX_HEADING },
-        { id: 'rl-section-naming-axiom-001', rule: 'Two-axis naming axiom', pattern: SECTION_NAMING_AXIOM_HEADING }
-    ];
+    const rules = buildShapeRules();
     for (const r of rules) {
         const line = findLine(skill.lines, r.pattern);
         if (line === -1) {
@@ -131,9 +152,21 @@ export function lintSectionShape(skill) {
 export function lintSectionOrder(skill) {
     const hits = [];
     const order = [
-        { id: 'rl-section-naming-axiom-001', rule: 'Two-axis naming axiom must precede Hard contracts', pattern: SECTION_NAMING_AXIOM_HEADING },
-        { id: 'rl-section-hard-contracts-001', rule: 'Hard contracts must precede Default runbook', pattern: SECTION_HARD_CONTRACTS_HEADING },
-        { id: 'rl-section-default-runbook-001', rule: 'Default runbook must precede Gate index', pattern: SECTION_DEFAULT_RUNBOOK_HEADING },
+        {
+            id: 'rl-section-naming-axiom-001',
+            rule: 'Two-axis naming axiom must precede Hard contracts',
+            pattern: SECTION_NAMING_AXIOM_HEADING
+        },
+        {
+            id: 'rl-section-hard-contracts-001',
+            rule: 'Hard contracts must precede Default runbook',
+            pattern: SECTION_HARD_CONTRACTS_HEADING
+        },
+        {
+            id: 'rl-section-default-runbook-001',
+            rule: 'Default runbook must precede Gate index',
+            pattern: SECTION_DEFAULT_RUNBOOK_HEADING
+        }
     ];
     let lastSeenLine = -1;
     let lastSeenRule = '';
@@ -147,7 +180,7 @@ export function lintSectionOrder(skill) {
                 rule: 'Section wireframe order: each section must appear in the canonical order',
                 file: skill.path,
                 line,
-                matchedText: `(section "${r.rule}" at line ${line} comes after "${lastSeenRule}" at line ${lastSeenLine})`,
+                matchedText: `(section "${r.rule}" at line ${line} comes after "${lastSeenRule}" at line ${lastSeenLine})`
             });
         }
         lastSeenLine = line;

package/dist/services/audit/enforcers/lint-workflow-shape.js

@@ -90,11 +90,13 @@ export function lintPeaksDoctorAcknowledged(skill) {
         return [];
     if (PEAKS_DOCTOR_PATTERN.test(skill.body))
         return [];
-    return [{
+    return [
+        {
             catalogId: 'rl-peaks-doctor-skill-acknowledged-001',
             rule: 'skill that writes a request artifact acknowledges peaks doctor',
             file: skill.path,
             line: 1,
             matchedText: '(no peaks doctor / peaks-doctor mention in skill body)'
-        }];
+        }
+    ];
 }

package/dist/services/audit/enforcers/login-gate.js

@@ -18,13 +18,9 @@ const DESTRUCTIVE_PATH_PATTERNS = [
     /force-push/i,
     /--force\b/,
     /--hard\b/,
-    /rm\s+-rf?\b/,
-];
-const PROTECTED_PATH_PATTERNS = [
-    /auth/i,
-    /login/i,
-    /session/i,
+    /rm\s+-rf?\b/
 ];
+const PROTECTED_PATH_PATTERNS = [/auth/i, /login/i, /session/i];
 export function checkLoginGate(input) {
     for (const pattern of DESTRUCTIVE_PATH_PATTERNS) {
         if (pattern.test(input.command)) {

package/dist/services/audit/enforcers/mock-placement.js

@@ -12,7 +12,7 @@
 const MOCK_PATTERNS = [
     /\bmockData\s*[:=]\s*\{/,
     /\bfixtures?\s*=\s*\{/,
-    /const\s+\w*[Mm]ock\w*\s*=\s*\{[\s\S]{20,}/,
+    /const\s+\w*[Mm]ock\w*\s*=\s*\{[\s\S]{20,}/
 ];
 export function hasInlineMock(content) {
     for (const pattern of MOCK_PATTERNS) {
@@ -21,7 +21,7 @@ export function hasInlineMock(content) {
             return {
                 filePath: '',
                 pattern: pattern.source,
-                snippet: match[0].slice(0, 80),
+                snippet: match[0].slice(0, 80)
             };
         }
     }

package/dist/services/audit/enforcers/no-root-pollution.js

@@ -11,21 +11,50 @@
 import { resolve } from 'node:path';
 const ROOT_FILE_ALLOWLIST = new Set([
     // Top-level docs
-    'README.md', 'README-en.md', 'LICENSE', 'LICENSE.md', 'NOTICE', 'CONTRIBUTING.md',
-    'CHANGELOG.md', 'AUTHORS', 'CONTRIBUTORS',
+    'README.md',
+    'README-en.md',
+    'LICENSE',
+    'LICENSE.md',
+    'NOTICE',
+    'CONTRIBUTING.md',
+    'CHANGELOG.md',
+    'AUTHORS',
+    'CONTRIBUTORS',
     // Build / package manifests
-    'package.json', 'pnpm-lock.yaml', 'pnpm-workspace.yaml', 'tsconfig.json',
-    'tsconfig.*.json', 'vitest.config.ts', 'vite.config.ts', '.npmrc', '.nvmrc',
+    'package.json',
+    'pnpm-lock.yaml',
+    'pnpm-workspace.yaml',
+    'tsconfig.json',
+    'tsconfig.*.json',
+    'vitest.config.ts',
+    'vite.config.ts',
+    '.npmrc',
+    '.nvmrc',
     // VCS / editor
-    '.gitignore', '.gitattributes', '.editorconfig', '.gitkeep',
+    '.gitignore',
+    '.gitattributes',
+    '.editorconfig',
+    '.gitkeep',
     // Project-local config dirs (peaks-loop convention)
-    'openspec', '.peaks', '.claude', '.peaksrc',
+    'openspec',
+    '.peaks',
+    '.claude',
+    '.peaksrc',
     // Source dirs (writes into them are normal)
-    'src', 'tests', 'bin', 'scripts', 'schemas', 'output-styles', 'docs',
+    'src',
+    'tests',
+    'bin',
+    'scripts',
+    'schemas',
+    'output-styles',
+    'docs',
     // Skills are allowed at root
     'skills',
     // Generated / ignored
-    'dist', 'node_modules', 'coverage', '.nyc_output',
+    'dist',
+    'node_modules',
+    'coverage',
+    '.nyc_output'
 ]);
 export function isRootWrite(input) {
     const projectRoot = resolve(input.projectRoot);
@@ -51,6 +80,6 @@ export function isRootWrite(input) {
         topSegment,
         denyReason: `no-root-pollution: file "${rel}" is not in the root allowlist. ` +
             `Move it under docs/, tests/, skills/, or another documented directory, ` +
-            `or add it to ROOT_FILE_ALLOWLIST in src/services/audit/enforcers/no-root-pollution.ts.`,
+            `or add it to ROOT_FILE_ALLOWLIST in src/services/audit/enforcers/no-root-pollution.ts.`
     };
 }