peaks-loop 4.0.54 → 4.1.0

package/dist/services/web/snapshot-pruner.d.ts

@@ -1,26 +1,5 @@
-/**
- * A node of the `ariaSnapshotJSON()` tree. Fields follow the documented format
- * (`role` is `"text"` for static text fragments; state flags and element
- * attributes are optional).
- */
-export interface AriaNode {
-    readonly role: string;
-    readonly name?: string;
-    readonly text?: string;
-    readonly children?: readonly AriaNode[];
-    readonly checked?: boolean | 'mixed';
-    readonly disabled?: boolean;
-    readonly expanded?: boolean;
-    readonly active?: boolean;
-    readonly invalid?: boolean | 'mixed';
-    readonly level?: number;
-    readonly pressed?: boolean | 'mixed';
-    readonly selected?: boolean;
-    readonly url?: string;
-    readonly placeholder?: string;
-    readonly ref?: string;
-    readonly cursor?: string;
-}
+import type { AriaNode } from './aria-node.js';
+export type { AriaNode };
 /**
  * Roles that carry no information on their own. A node of one of these roles
  * is removed and its children are hoisted into its parent when it also has no

package/dist/services/web/snapshot-pruner.js

@@ -48,7 +48,10 @@ export function pruneAriaSnapshot(nodes) {
     });
     const nodeCapped = droppedByNodeCap > 0;
     const pruned = nodeCapped
-        ? [...cappedNodes, { role: 'text', text: `${TRUNCATION_TEXT} [${droppedByNodeCap} more nodes]` }]
+        ? [
+            ...cappedNodes,
+            { role: 'text', text: `${TRUNCATION_TEXT} [${droppedByNodeCap} more nodes]` }
+        ]
         : cappedNodes;
     return {
         nodes: pruned,
@@ -91,7 +94,7 @@ function isDroppable(node) {
 function dropAndHoist(list, counter) {
     const root = [];
     const stack = [
-        { source: list, index: 0, out: root },
+        { source: list, index: 0, out: root }
     ];
     while (stack.length > 0) {
         const frame = stack[stack.length - 1];
@@ -148,7 +151,9 @@ function applyNodeCap(list, maxNodes, state, onDrop) {
         }
         state.emitted += 1;
         const children = node.children ?? [];
-        out.push(children.length > 0 ? { ...node, children: applyNodeCap(children, maxNodes, state, onDrop) } : node);
+        out.push(children.length > 0
+            ? { ...node, children: applyNodeCap(children, maxNodes, state, onDrop) }
+            : node);
     }
     return out;
 }

package/dist/services/web/web-daemon-service.js

@@ -124,9 +124,7 @@ export async function startWebDaemon(config) {
             return shutdown;
         }
         shutdown = (async () => {
-            const closed = manager === null
-                ? { closedContexts: 0, stateWriteFailures: [] }
-                : await manager.closeAll();
+            const closed = manager === null ? { closedContexts: 0, stateWriteFailures: [] } : await manager.closeAll();
             if (browser !== null) {
                 // Closing the browser ends the chromium process. Without this the
                 // daemon could record a clean stop while the browser outlived it —

package/dist/services/web/web-install-service.d.ts

@@ -1,3 +1,6 @@
+import { type InstallOutcome } from './web-install-types.js';
+export { probeBrowserInstalled } from './browser-cache-probe.js';
+export type { BrowserProbe, InstallOutcome } from './web-install-types.js';
 /**
  * R2: the size of the one-time download, named so it is never a surprise.
  *
@@ -8,44 +11,12 @@
  * each pin bump adds another ~700 MiB beside the old one (1.4 GiB held here).
  */
 export declare const INSTALL_SIZE_WARNING = "downloading chromium (~700 MB on disk, one time)";
-/** What the cache says, without downloading anything (tech-doc §5.3). */
-export interface BrowserProbe {
-    readonly installed: boolean;
-    /** The resolved Playwright PACKAGE version, or `null` when the package is absent. */
-    readonly version: string | null;
-    readonly executablePath: string | null;
-}
-export interface InstallOutcome {
-    readonly ok: boolean;
-    /** `''` on success, otherwise `WEB_INSTALL_BUSY` | `WEB_INSTALL_FAILED` | `WEB_INSTALL_TIMEOUT`. */
-    readonly code: string;
-    readonly message: string;
-    /** The size warning whenever this call actually ran the installer. */
-    readonly warnings: readonly string[];
-}
 /**
  * `PEAKS_WEB_DISABLED=1`, and nothing else. `'0'`, `'true'`, `''` and `'1 '`
  * are all "not disabled" — the flag is an explicit opt-out, so a typo must fail
  * towards the local browser rather than silently skipping it.
  */
 export declare function isWebDisabled(env: NodeJS.ProcessEnv): boolean;
-/**
- * Is the pinned browser on disk? Never throws, never spawns, never downloads.
- *
- * **It answers about the artifact `launch()` starts** (R6). `executablePath()`
- * names the `chromium` build, but `chromium.launch()` with no options and
- * `headless` defaulting true resolves `chromium-headless-shell`
- * (`registry.getExecutableName`) — a SEPARATE ~271 MiB download. Probing the
- * full chromium therefore answered "installed" for a machine on which no op
- * could launch: `launch()` failed, S1's net downloaded, the probe kept saying
- * installed, and `peaks web install` short-circuited to a no-op success. See
- * `headlessShellDir` for how the right path is obtained.
- *
- * `version` is reported even when the executable is missing, because "the
- * package is cached but its browser is not" is a different diagnosis from
- * "nothing is installed" — the first is one `peaks web install` away.
- */
-export declare function probeBrowserInstalled(): Promise<BrowserProbe>;
 /**
  * The exact argv of the one-time download (tech-doc §3.3):
  * `npx --yes --package playwright@<pin> -- playwright install chromium`, with

package/dist/services/web/web-install-service.js

@@ -21,14 +21,21 @@
  *     the `install.lock` around the spawn so two callers cannot download 700 MB
  *     each (R6). The lock is released on every path, including a thrown spawn.
  */
-import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
-import { dirname, join, sep } from 'node:path';
+import { mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { getErrorMessage } from 'peaks-loop-shared/result';
 import { resolveNpxInvocation } from '../lint/npx-resolver.js';
 import { isProcessAlive } from './daemon-registry.js';
-import { loadPlaywright, PLAYWRIGHT_VERSION_PIN, playwrightVersion } from './playwright-loader.js';
+import { PLAYWRIGHT_VERSION_PIN } from './playwright-loader.js';
 import { webInstallLockPath } from './web-artifact-paths.js';
+// The probe and the path derivations it reads live in `browser-cache-probe.ts`,
+// and the three record shapes in `web-install-types.ts` (wave-3 file-size cap
+// split; declarations moved verbatim). `probeBrowserInstalled`, `BrowserProbe`
+// and `InstallOutcome` are re-exported here so importers keep resolving them
+// from `web-install-service.js` unchanged; `InstallLockBody` was module-private
+// and is imported for use only.
+export { probeBrowserInstalled } from './browser-cache-probe.js';
 /**
  * R2: the size of the one-time download, named so it is never a surprise.
  *
@@ -64,100 +71,6 @@ const LOCK_FILE_MODE = 0o600;
 export function isWebDisabled(env) {
     return env['PEAKS_WEB_DISABLED'] === '1';
 }
-/**
- * Is the pinned browser on disk? Never throws, never spawns, never downloads.
- *
- * **It answers about the artifact `launch()` starts** (R6). `executablePath()`
- * names the `chromium` build, but `chromium.launch()` with no options and
- * `headless` defaulting true resolves `chromium-headless-shell`
- * (`registry.getExecutableName`) — a SEPARATE ~271 MiB download. Probing the
- * full chromium therefore answered "installed" for a machine on which no op
- * could launch: `launch()` failed, S1's net downloaded, the probe kept saying
- * installed, and `peaks web install` short-circuited to a no-op success. See
- * `headlessShellDir` for how the right path is obtained.
- *
- * `version` is reported even when the executable is missing, because "the
- * package is cached but its browser is not" is a different diagnosis from
- * "nothing is installed" — the first is one `peaks web install` away.
- */
-export async function probeBrowserInstalled() {
-    const version = await playwrightVersion();
-    if (version === null) {
-        return { installed: false, version: null, executablePath: null };
-    }
-    try {
-        const chromiumPath = (await loadPlaywright()).chromium.executablePath();
-        const shellDir = headlessShellDir(chromiumPath);
-        if (shellDir === null) {
-            // Not a registry shape we recognise: answer about the path Playwright
-            // handed us, exactly as this probe did before R6, rather than about a
-            // directory we invented.
-            return { installed: existsSync(chromiumPath), version, executablePath: chromiumPath };
-        }
-        // Absent is the answer, and the whole point: `null` here is what steers
-        // `peaks web install` to download and `acquireChromium` to refuse.
-        const executablePath = headlessShellExecutable(shellDir);
-        return { installed: executablePath !== null, version, executablePath };
-    }
-    catch {
-        // The package resolved but would not load — a broken cache, not a download.
-        return { installed: false, version, executablePath: null };
-    }
-}
-/**
- * The `chromium_headless_shell-<rev>` directory that sits beside
- * `chromiumExecutablePath`'s own revision directory, or `null` when the path is
- * not shaped like Playwright's registry.
- *
- * Playwright's public API cannot name the shell — `BrowserType.executablePath()`
- * takes no options and always answers with the `chromium` build — so it is
- * derived from the one path Playwright does hand out. One naming rule is
- * assumed, and it is the one the cache itself shows: `<rev>` directories are
- * named after the browser, `chromium-1243` beside `chromium_headless_shell-1243`.
- */
-function headlessShellDir(chromiumExecutablePath) {
-    const segments = chromiumExecutablePath.split(/[\\/]/);
-    let revision = -1;
-    for (let i = segments.length - 1; i > 0; i -= 1) {
-        if (/^chromium-\d+$/.test(segments[i] ?? '')) {
-            revision = i;
-            break;
-        }
-    }
-    const revisionDir = segments[revision];
-    if (revision <= 0 || revisionDir === undefined) {
-        return null;
-    }
-    return join(segments.slice(0, revision).join(sep), revisionDir.replace('chromium-', 'chromium_headless_shell-'));
-}
-/**
- * The shell executable inside `shellDir`, or `null`.
- *
- * The shell's own platform directory is deliberately NOT assumed — it is
- * `chrome-headless-shell-<platform>` where chromium's is `chrome-<platform>` —
- * so the file is looked for rather than named from a copy of Playwright's
- * per-platform path table.
- */
-function headlessShellExecutable(shellDir) {
-    for (const entry of safeReaddir(shellDir)) {
-        const platformDir = join(shellDir, entry);
-        for (const file of safeReaddir(platformDir)) {
-            if (/^chrome-headless-shell(\.exe)?$/.test(file)) {
-                return join(platformDir, file);
-            }
-        }
-    }
-    return null;
-}
-function safeReaddir(dir) {
-    try {
-        return readdirSync(dir);
-    }
-    catch {
-        // Absent is the normal case on a machine that never installed the shell.
-        return [];
-    }
-}
 /**
  * The exact argv of the one-time download (tech-doc §3.3):
  * `npx --yes --package playwright@<pin> -- playwright install chromium`, with
@@ -253,7 +166,9 @@ export function releaseInstallLock() {
 }
 /** Is this body a lock we must not touch — an owner that is alive and in date? */
 function isLiveInstallLock(body) {
-    return (body !== null && isProcessAlive(body.pid) && Date.now() - Date.parse(body.startedAt) <= INSTALL_LOCK_STALE_MS);
+    return (body !== null &&
+        isProcessAlive(body.pid) &&
+        Date.now() - Date.parse(body.startedAt) <= INSTALL_LOCK_STALE_MS);
 }
 /** Does the file at `target` still name this process? */
 function ownsInstallLock(target) {
@@ -314,7 +229,9 @@ export async function installChromium(options = {}) {
     }
 }
 function spawnFailure(error) {
-    const code = error.code === 'ETIMEDOUT' ? 'WEB_INSTALL_TIMEOUT' : 'WEB_INSTALL_FAILED';
+    const code = error.code === 'ETIMEDOUT'
+        ? 'WEB_INSTALL_TIMEOUT'
+        : 'WEB_INSTALL_FAILED';
     return failure(code, `\`playwright install chromium\` did not complete: ${error.message}`);
 }
 function failure(code, message) {
@@ -323,7 +240,11 @@ function failure(code, message) {
 function tryCreateInstallLock(target) {
     const body = { pid: process.pid, startedAt: new Date().toISOString() };
     try {
-        writeFileSync(target, JSON.stringify(body), { flag: 'wx', encoding: 'utf8', mode: LOCK_FILE_MODE });
+        writeFileSync(target, JSON.stringify(body), {
+            flag: 'wx',
+            encoding: 'utf8',
+            mode: LOCK_FILE_MODE
+        });
         return true;
     }
     catch {

package/dist/services/web/web-install-types.d.ts

@@ -0,0 +1,31 @@
+/**
+ * `src/services/web/web-install-types.ts`
+ *
+ * The record shapes of browser acquisition (`web-install-service.ts`): what
+ * the cache probe answers, what an install run reports, and the body of the
+ * install lock on disk. Extracted verbatim (wave 3, file-size cap campaign) so
+ * the install module stays under the 300 raw-line cap. Types only — no probe,
+ * lock or spawn behaviour lives here. `web-install-service.ts` imports them and
+ * re-exports the two that were public, so importers keep resolving
+ * `BrowserProbe` / `InstallOutcome` from `web-install-service.js` unchanged;
+ * `InstallLockBody` was module-private and stays unexported there.
+ */
+/** What the cache says, without downloading anything (tech-doc §5.3). */
+export interface BrowserProbe {
+    readonly installed: boolean;
+    /** The resolved Playwright PACKAGE version, or `null` when the package is absent. */
+    readonly version: string | null;
+    readonly executablePath: string | null;
+}
+export interface InstallOutcome {
+    readonly ok: boolean;
+    /** `''` on success, otherwise `WEB_INSTALL_BUSY` | `WEB_INSTALL_FAILED` | `WEB_INSTALL_TIMEOUT`. */
+    readonly code: string;
+    readonly message: string;
+    /** The size warning whenever this call actually ran the installer. */
+    readonly warnings: readonly string[];
+}
+export interface InstallLockBody {
+    readonly pid: number;
+    readonly startedAt: string;
+}

package/dist/services/web/web-install-types.js

@@ -0,0 +1,13 @@
+/**
+ * `src/services/web/web-install-types.ts`
+ *
+ * The record shapes of browser acquisition (`web-install-service.ts`): what
+ * the cache probe answers, what an install run reports, and the body of the
+ * install lock on disk. Extracted verbatim (wave 3, file-size cap campaign) so
+ * the install module stays under the 300 raw-line cap. Types only — no probe,
+ * lock or spawn behaviour lives here. `web-install-service.ts` imports them and
+ * re-exports the two that were public, so importers keep resolving
+ * `BrowserProbe` / `InstallOutcome` from `web-install-service.js` unchanged;
+ * `InstallLockBody` was module-private and stays unexported there.
+ */
+export {};

package/dist/services/web/web-login-profile.js

@@ -413,10 +413,7 @@ function isEmptyCapture(snapshot) {
     }
     const cookies = snapshot.cookies;
     const origins = snapshot.origins;
-    return (Array.isArray(cookies) &&
-        cookies.length === 0 &&
-        Array.isArray(origins) &&
-        origins.length === 0);
+    return (Array.isArray(cookies) && cookies.length === 0 && Array.isArray(origins) && origins.length === 0);
 }
 /**
  * Watch for the user closing the window (UD-4), from the moment the browser is
@@ -498,7 +495,12 @@ async function readSession(context) {
     }
     catch (error) {
         const raw = getErrorMessage(error);
-        return { ok: false, state: null, error: cappedEcho(raw), closedTarget: isClosedTargetError(raw) };
+        return {
+            ok: false,
+            state: null,
+            error: cappedEcho(raw),
+            closedTarget: isClosedTargetError(raw)
+        };
     }
 }
 /**

package/dist/services/web/web-protocol.js

@@ -41,7 +41,9 @@ export function parseDaemonInfo(raw) {
     if (!isNonEmptyString(token) || !isNonEmptyString(version)) {
         return null;
     }
-    if (!isNonEmptyString(projectRoot) || !isNonEmptyString(sessionId) || !isNonEmptyString(startedAt)) {
+    if (!isNonEmptyString(projectRoot) ||
+        !isNonEmptyString(sessionId) ||
+        !isNonEmptyString(startedAt)) {
         return null;
     }
     return { protocolVersion, pid, port, token, version, projectRoot, sessionId, startedAt };

package/dist/services/workflow/pipeline-verify-gate-support.js

@@ -25,7 +25,11 @@ export function extractState(markdown) {
  * `.peaks/_runtime/<sessionId>/<role>/requests/`.
  */
 export async function findRequestFile(projectRoot, role, rid) {
-    const artifact = await showRequestArtifact({ projectRoot, role: role, requestId: rid });
+    const artifact = await showRequestArtifact({
+        projectRoot,
+        role: role,
+        requestId: rid
+    });
     if (artifact === null)
         return null;
     // Slice 2026-06-28-code-mode-bypass-fix (defect #3) used to strip a
@@ -112,7 +116,12 @@ function contractBodyViolations(role, state, requestType, probeName, absolutePat
 }
 export function rdGatesForType(requestType) {
     const gates = [
-        { name: 'rd-request-exists', description: 'RD request artifact created', passed: false, detail: '' }
+        {
+            name: 'rd-request-exists',
+            description: 'RD request artifact created',
+            passed: false,
+            detail: ''
+        }
     ];
     // This slot used to pin a `tech-doc` gate to `rd/tech-doc.md`, an artifact
     // v2.11.0 Group A retired and the table no longer carries — so the gate
@@ -123,16 +132,39 @@ export function rdGatesForType(requestType) {
     // budget and the resume detector. Neither is served by failing a compliant
     // slice.)
     if (contractEvidencePaths('rd', 'qa-handoff', requestType, 'prd/handoff.md') !== null) {
-        gates.push({ name: 'prd-handoff', description: 'PRD handoff capsule (approved scope + non-goals)', passed: false, detail: '' });
+        gates.push({
+            name: 'prd-handoff',
+            description: 'PRD handoff capsule (approved scope + non-goals)',
+            passed: false,
+            detail: ''
+        });
     }
     if (requestType === 'bugfix') {
-        gates.push({ name: 'bug-analysis', description: 'Bug root-cause analysis', passed: false, detail: '' });
+        gates.push({
+            name: 'bug-analysis',
+            description: 'Bug root-cause analysis',
+            passed: false,
+            detail: ''
+        });
     }
     if (requestType !== 'docs' && requestType !== 'chore' && requestType !== 'config') {
-        gates.push({ name: 'code-review', description: 'Code review evidence', passed: false, detail: '' });
+        gates.push({
+            name: 'code-review',
+            description: 'Code review evidence',
+            passed: false,
+            detail: ''
+        });
     }
-    if (requestType === 'feature' || requestType === 'refactor' || requestType === 'bugfix' || requestType === 'config') {
-        gates.push({ name: 'security-review', description: 'Security review evidence', passed: false, detail: '' });
+    if (requestType === 'feature' ||
+        requestType === 'refactor' ||
+        requestType === 'bugfix' ||
+        requestType === 'config') {
+        gates.push({
+            name: 'security-review',
+            description: 'Security review evidence',
+            passed: false,
+            detail: ''
+        });
     }
     // The perf evidence the contract requires at `rd:qa-handoff` is `AUDIT_PERF`
     // — `audit/perf-<rid>.md`, with `audit/perf.md` and `rd/perf-baseline.md` as
@@ -143,17 +175,32 @@ export function rdGatesForType(requestType) {
     // deleting it) is what keeps AC3's control meaningful: perf evidence that is
     // genuinely absent must still fail.
     if (contractEvidencePaths('rd', 'qa-handoff', requestType, 'rd/perf-baseline.md') !== null) {
-        gates.push({ name: 'perf-baseline', description: 'Performance audit evidence', passed: false, detail: '' });
+        gates.push({
+            name: 'perf-baseline',
+            description: 'Performance audit evidence',
+            passed: false,
+            detail: ''
+        });
     }
     return gates;
 }
 export function qaGatesForType(requestType) {
     const gates = [
-        { name: 'qa-request-exists', description: 'QA request artifact created', passed: false, detail: '' }
+        {
+            name: 'qa-request-exists',
+            description: 'QA request artifact created',
+            passed: false,
+            detail: ''
+        }
     ];
     if (requestType === 'feature' || requestType === 'refactor' || requestType === 'bugfix') {
         gates.push({ name: 'test-cases', description: 'QA test cases', passed: false, detail: '' });
-        gates.push({ name: 'test-report', description: 'QA test report with execution results', passed: false, detail: '' });
+        gates.push({
+            name: 'test-report',
+            description: 'QA test report with execution results',
+            passed: false,
+            detail: ''
+        });
     }
     // The `security-findings` / `performance-findings` gates were removed here
     // (rid 2026-09-14-verify-pipeline-contract-drift). peaks-qa does not own
@@ -189,8 +236,7 @@ export function resolveRdEvidencePaths(gates, rdEvidenceDir, projectRoot, rid, r
     let allResolvedPathsCanonical = tracker.allResolvedPathsCanonical;
     for (const gate of gates.slice(1)) {
         const probeName = RD_EVIDENCE_PROBE[gate.name];
-        const relativePaths = (contractEvidencePaths('rd', 'qa-handoff', requestType, probeName) ?? [probeName])
-            .map((relative) => relative.replace('<rid>', rid));
+        const relativePaths = (contractEvidencePaths('rd', 'qa-handoff', requestType, probeName) ?? [probeName]).map((relative) => relative.replace('<rid>', rid));
         const primaryRelativePath = relativePaths[0];
         const canonicalPath = join(projectRoot, '.peaks', '_runtime', rdEvidenceDir, primaryRelativePath);
         // Two independent axes, kept apart because they mean different things:
@@ -229,9 +275,10 @@ export function resolveRdEvidencePaths(gates, rdEvidenceDir, projectRoot, rid, r
             }
             else {
                 gate.passed = true;
-                gate.detail = hit.path
-                    + (hit.legacyRoot ? ' [DEPRECATION_LEGACY_PATH_USED]' : '')
-                    + (hit.legacyForm ? ' [LEGACY_EVIDENCE_PATH]' : '');
+                gate.detail =
+                    hit.path +
+                        (hit.legacyRoot ? ' [DEPRECATION_LEGACY_PATH_USED]' : '') +
+                        (hit.legacyForm ? ' [LEGACY_EVIDENCE_PATH]' : '');
             }
             if (hit.legacyRoot) {
                 violations.push(`DEPRECATION_LEGACY_PATH_USED: ${hit.path} — move the file into .peaks/_runtime/${rdEvidenceDir}/${primaryRelativePath} (the canonical location) so subsequent runs resolve on the canonical path. The legacy \`peaks workspace migrate-change-scope\` helper was removed in v2.19.0; use \`peaks workspace migrate\` to relocate misplaced content.`);
@@ -264,8 +311,7 @@ export function resolveQaEvidencePaths(gates, projectRoot, rdEvidenceDir, reques
     let allResolvedPathsCanonical = tracker.allResolvedPathsCanonical;
     for (const gate of gates.slice(1)) {
         const probeName = QA_EVIDENCE_PROBE[gate.name];
-        const relativePaths = (contractEvidencePaths('qa', 'verdict-issued', requestType, probeName) ?? [probeName])
-            .map((relative) => relative.replace('<rid>', rid));
+        const relativePaths = (contractEvidencePaths('qa', 'verdict-issued', requestType, probeName) ?? [probeName]).map((relative) => relative.replace('<rid>', rid));
         const primaryRelativePath = relativePaths[0];
         const canonicalQaPath = join(projectRoot, '.peaks', '_runtime', rdEvidenceDir, primaryRelativePath);
         const candidates = [];

package/dist/services/workflow/pipeline-verify-service.js

@@ -19,7 +19,9 @@ import { getSessionIdCanonical } from '../session/session-manager.js';
 import { listPromotionExempt, listUnpromotedFeedback } from '../feedback/feedback-promotion-service.js';
 import { QA_COMPLETE_STATES, RD_QA_HANDOFF_STATES, extractState, findRequestFile, qaGatesForType, rdGatesForType, resolveQaEvidencePaths, resolveRdEvidencePaths } from './pipeline-verify-gate-support.js';
 export async function verifyPipeline(options) {
-    const requestType = isRequestType(options.requestType ?? '') ? options.requestType : 'feature';
+    const requestType = isRequestType(options.requestType ?? '')
+        ? options.requestType
+        : 'feature';
     const violations = [];
     const nextActions = [];
     const rdGates = rdGatesForType(requestType);
@@ -95,7 +97,10 @@ export async function verifyPipeline(options) {
     // binding-store is the preferred filesystem scope; falling through
     // to `options.rid` would make every missing-evidence path look like
     // a per-rid scope dir.
-    const rdEvidenceDir = resolvedChangeId || options.sessionId || getSessionIdCanonical(options.projectRoot) || options.rid;
+    const rdEvidenceDir = resolvedChangeId ||
+        options.sessionId ||
+        getSessionIdCanonical(options.projectRoot) ||
+        options.rid;
     const rdTracker = resolveRdEvidencePaths(rdGates, rdEvidenceDir, options.projectRoot, options.rid, requestType, violations, nextActions, { anyEvidenceResolved: false, allResolvedPathsCanonical: true });
     // Check if RD reached qa-handoff
     if (rdInvoked && !RD_QA_HANDOFF_STATES.has(rdState)) {
@@ -225,13 +230,19 @@ export async function verifyPipeline(options) {
         // failures (e.g. permission denied). Treat as "no feedback" —
         // fail-open on gate infrastructure rather than blocking ship.
         feedbackGates[0].passed = true;
-        feedbackGates[0].detail = 'feedback-promotion scan skipped (memory dir unreadable; treating as no feedback)';
+        feedbackGates[0].detail =
+            'feedback-promotion scan skipped (memory dir unreadable; treating as no feedback)';
     }
     const allFeedbackGatesPassed = feedbackGates.every((g) => g.passed);
     const allRdGatesPassed = rdGates.every((g) => g.passed);
     const allQaGatesPassed = qaGates.every((g) => g.passed);
-    const complete = rdInvoked && qaInvoked && allRdGatesPassed && allQaGatesPassed && allFeedbackGatesPassed
-        && RD_QA_HANDOFF_STATES.has(rdState) && QA_COMPLETE_STATES.has(qaState);
+    const complete = rdInvoked &&
+        qaInvoked &&
+        allRdGatesPassed &&
+        allQaGatesPassed &&
+        allFeedbackGatesPassed &&
+        RD_QA_HANDOFF_STATES.has(rdState) &&
+        QA_COMPLETE_STATES.has(qaState);
     // Slice 025 — derive the `acceptedForm` and `gateC` verdict. The form is
     // 'suffixed' when the contract's current path served the file and 'legacy'
     // when the deprecated fallback did; 'none' if neither gate passed.
@@ -250,7 +261,7 @@ export async function verifyPipeline(options) {
     const perfForm = formOf(perfGate);
     const acceptedForm = !secGate?.passed && !perfGate?.passed
         ? 'none'
-        : (secForm === 'legacy' || perfForm === 'legacy')
+        : secForm === 'legacy' || perfForm === 'legacy'
             ? 'legacy'
             : 'suffixed';
     const gateC = allQaGatesPassed ? 'pass' : 'fail';

package/dist/services/workflow/plan-reader.js

@@ -126,7 +126,11 @@ export function readPlan(args) {
             source: 'missing'
         });
     }
-    const canonical = canonicalPath({ projectRoot: args.project, sessionId: args.sessionId, type: args.type });
+    const canonical = canonicalPath({
+        projectRoot: args.project,
+        sessionId: args.sessionId,
+        type: args.type
+    });
     if (existsSync(canonical)) {
         const guard = assertContained({
             expectedBase: getSessionDir(args.project, args.sessionId),

package/dist/services/workflow/plan-refresher.js

@@ -26,7 +26,8 @@ function readPackageJson(projectRoot) {
     try {
         return JSON.parse(readFileSync(path, 'utf8'));
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -55,7 +56,9 @@ function listAuthTsFiles(projectRoot) {
                 if (entry.isDirectory()) {
                     stack.push(full);
                 }
-                else if (entry.isFile() && /auth.*\.ts$|\.ts$/i.test(entry.name) && /auth/i.test(entry.name)) {
+                else if (entry.isFile() &&
+                    /auth.*\.ts$|\.ts$/i.test(entry.name) &&
+                    /auth/i.test(entry.name)) {
                     out.push(full);
                 }
             }
@@ -197,12 +200,18 @@ function nowIso() {
     return new Date().toISOString();
 }
 export function refreshPlan(args) {
-    const target = planPath({ projectRoot: args.project, sessionId: args.sessionId, type: args.type });
+    const target = planPath({
+        projectRoot: args.project,
+        sessionId: args.sessionId,
+        type: args.type
+    });
     // The body is a *function* of the project (sorted inputs + normalized
     // output). To make the hash independent of the current wall clock, we
     // always emit the same `Generated:` timestamp; the real `refreshedAt`
     // is reported separately as the envelope field.
-    const rawBody = args.type === 'security' ? buildSecurityPlanBody(args.project) : buildPerfPlanBody(args.project);
+    const rawBody = args.type === 'security'
+        ? buildSecurityPlanBody(args.project)
+        : buildPerfPlanBody(args.project);
     const hash = hashNormalizedBody(rawBody);
     const wouldWrite = [target];
     const refreshedAt = nowIso();
@@ -260,7 +269,10 @@ export function refreshPlan(args) {
     let cursor = parent;
     // Bound the walk: stop at the project root (inclusive). If the
     // project root itself does not exist, that's an error.
-    while (cursor !== projectRoot && cursor !== join(projectRoot, '..') && cursor !== '' && cursor !== sep) {
+    while (cursor !== projectRoot &&
+        cursor !== join(projectRoot, '..') &&
+        cursor !== '' &&
+        cursor !== sep) {
         if (existsSync(cursor)) {
             existingParent = cursor;
             break;
@@ -345,7 +357,9 @@ export function refreshPlan(args) {
 export { normalizePlanBody };
 // Helper for the CLI to use the same body builder.
 export function renderPlanBody(args) {
-    return args.type === 'security' ? buildSecurityPlanBody(args.project) : buildPerfPlanBody(args.project);
+    return args.type === 'security'
+        ? buildSecurityPlanBody(args.project)
+        : buildPerfPlanBody(args.project);
 }
 // hash helper for tests that want to assert a body against a fixture.
 export function hashBody(body) {