peaks-loop 4.0.54 → 4.1.0

package/dist/services/audit/red-line-catalog.js

@@ -12,47 +12,29 @@ export const RED_LINE_CATALOG = [
         id: 'rl-code-ban-001',
         rule: 'Code Commit Ban',
         markers: ['BLOCKING', 'MANDATORY'],
-        phrases: [
-            'peaks-code',
-            'orchestrator, NOT an implementer',
-            'code',
-        ],
-        enforcerRef: 'src/services/audit/enforcers/code-ban.ts',
+        phrases: ['peaks-code', 'orchestrator, NOT an implementer', 'code'],
+        enforcerRef: 'src/services/audit/enforcers/code-ban.ts'
     },
     {
         id: 'rl-no-root-pollution-001',
         rule: 'No Root Pollution',
         markers: ['MANDATORY', 'MUST NOT', 'RED LINE'],
-        phrases: [
-            'root pollution',
-            'must not write to the project root',
-            'no root',
-        ],
-        enforcerRef: 'src/services/audit/enforcers/no-root-pollution.ts',
+        phrases: ['root pollution', 'must not write to the project root', 'no root'],
+        enforcerRef: 'src/services/audit/enforcers/no-root-pollution.ts'
     },
     {
         id: 'rl-sub-agent-sid-001',
         rule: 'Sub-Agent SID Isolation',
         markers: ['MANDATORY', 'BLOCKING'],
-        phrases: [
-            'sub-agent',
-            'session id',
-            'sub-agent session sharing',
-            'one conversation = one sid',
-        ],
-        enforcerRef: 'src/services/audit/enforcers/sub-agent-sid.ts',
+        phrases: ['sub-agent', 'session id', 'sub-agent session sharing', 'one conversation = one sid'],
+        enforcerRef: 'src/services/audit/enforcers/sub-agent-sid.ts'
     },
     {
         id: 'rl-mock-placement-001',
         rule: 'Mock Data Placement',
         markers: ['MUST NOT', 'MANDATORY'],
-        phrases: [
-            'mock data',
-            'mock placement',
-            'inline mock',
-            'fixture placement',
-        ],
-        enforcerRef: 'src/services/audit/enforcers/mock-placement.ts',
+        phrases: ['mock data', 'mock placement', 'inline mock', 'fixture placement'],
+        enforcerRef: 'src/services/audit/enforcers/mock-placement.ts'
     },
     // === Slice L2.2 P1 — 10 P1 red lines across 5 categories ===
     // Each catalog entry has a phrase that distinguishes it from P0; the
@@ -62,70 +44,76 @@ export const RED_LINE_CATALOG = [
         rule: 'Resume Detection: Session Binding',
         markers: ['MANDATORY', 'BLOCKING'],
         phrases: ['resume detection', 'session binding', 'resume session', 'resume from'],
-        enforcerRef: 'src/services/audit/enforcers/resume-detection.ts',
+        enforcerRef: 'src/services/audit/enforcers/resume-detection.ts'
     },
     {
         id: 'rl-resume-detection-002',
         rule: 'Resume Detection: Request State',
         markers: ['MANDATORY', 'BLOCKING'],
         phrases: ['request state', 'resumable state', 'spec-locked', 'implemented', 'qa-handoff'],
-        enforcerRef: 'src/services/audit/enforcers/resume-detection.ts',
+        enforcerRef: 'src/services/audit/enforcers/resume-detection.ts'
     },
     {
         id: 'rl-prototype-fidelity-001',
         rule: 'Prototype Fidelity: No Stub Markers',
         markers: ['MUST NOT', 'MANDATORY'],
         phrases: ['prototype fidelity', 'no stub', 'no TODO', 'no FIXME', 'no placeholder'],
-        enforcerRef: 'src/services/audit/enforcers/prototype-fidelity.ts',
+        enforcerRef: 'src/services/audit/enforcers/prototype-fidelity.ts'
     },
     {
         id: 'rl-prototype-fidelity-002',
         rule: 'Prototype Fidelity: Test Coverage',
         markers: ['MANDATORY', 'RED LINE'],
         phrases: ['prototype test', 'must have tests', 'test coverage', 'fidelity test'],
-        enforcerRef: 'src/services/audit/enforcers/prototype-fidelity.ts',
+        enforcerRef: 'src/services/audit/enforcers/prototype-fidelity.ts'
     },
     {
         id: 'rl-design-draft-confirm-001',
         rule: 'Design-Draft Confirm: Existence',
         markers: ['MANDATORY', 'BLOCKING'],
         phrases: ['design-draft', 'design draft', 'design-draft.md', 'design draft exists'],
-        enforcerRef: 'src/services/audit/enforcers/design-draft-confirm.ts',
+        enforcerRef: 'src/services/audit/enforcers/design-draft-confirm.ts'
     },
     {
         id: 'rl-design-draft-confirm-002',
         rule: 'Design-Draft Confirm: Confirmed State',
         markers: ['MANDATORY', 'BLOCKING'],
         phrases: ['design confirmed', 'design-draft confirmed', 'confirmed-by-user', 'user confirmed'],
-        enforcerRef: 'src/services/audit/enforcers/design-draft-confirm.ts',
+        enforcerRef: 'src/services/audit/enforcers/design-draft-confirm.ts'
     },
     {
         id: 'rl-pre-rd-scan-001',
         rule: 'Pre-RD Scan: Archetype Detected',
         markers: ['MANDATORY', 'BLOCKING'],
         phrases: ['pre-rd scan', 'project-scan', 'archetype detected', 'scan archetype'],
-        enforcerRef: 'src/services/audit/enforcers/pre-rd-scan.ts',
+        enforcerRef: 'src/services/audit/enforcers/pre-rd-scan.ts'
     },
     {
         id: 'rl-pre-rd-scan-002',
         rule: 'Pre-RD Scan: Standards Preflight',
         markers: ['MANDATORY', 'BLOCKING'],
         phrases: ['standards preflight', 'pre-rd standards', 'standards init', 'standards update'],
-        enforcerRef: 'src/services/audit/enforcers/pre-rd-scan.ts',
+        enforcerRef: 'src/services/audit/enforcers/pre-rd-scan.ts'
     },
     {
         id: 'rl-login-gate-001',
         rule: 'Login Gate: Destructive Path Confirmation',
         markers: ['MANDATORY', 'BLOCKING', 'RED LINE'],
-        phrases: ['login gate', 'destructive path', 'uninstall', 'force-push', 'user confirmation required'],
-        enforcerRef: 'src/services/audit/enforcers/login-gate.ts',
+        phrases: [
+            'login gate',
+            'destructive path',
+            'uninstall',
+            'force-push',
+            'user confirmation required'
+        ],
+        enforcerRef: 'src/services/audit/enforcers/login-gate.ts'
     },
     {
         id: 'rl-login-gate-002',
         rule: 'Login Gate: Protected Path Auth',
         markers: ['MANDATORY', 'BLOCKING'],
         phrases: ['protected path', 'auth required', 'auth header', 'login required', 'session check'],
-        enforcerRef: 'src/services/audit/enforcers/login-gate.ts',
+        enforcerRef: 'src/services/audit/enforcers/login-gate.ts'
     },
     // Slice #6 L2.3 P2-a: 24 lint-style red-lines (Theme A: section
     // structure, B: frontmatter shape, C: output style, D: CLI-back
@@ -136,7 +124,7 @@ export const RED_LINE_CATALOG = [
     // Slice #7 L2.4 P2-b: 25 lint-style red-lines for references/*.md
     // (Themes H-P) + 4 audit-regression enforcers (Theme L). Spread
     // from the P2-b module so future P2-b edits are localized.
-    ...RED_LINE_CATALOG_P2_B,
+    ...RED_LINE_CATALOG_P2_B
 ];
 /**
  * Catalog entries for enforcers whose source code is shipped in this slice

package/dist/services/audit/red-lines-service.js

@@ -26,17 +26,17 @@ import { findInvalidSubAgentSids, findInvalidRuntimeSids } from './enforcers/sub
 import { findStubMarkers } from './enforcers/prototype-fidelity.js';
 import { checkDesignDraftConfirmation } from './enforcers/design-draft-confirm.js';
 import { checkPreRdScan } from './enforcers/pre-rd-scan.js';
-import { readSkillFiles, lintSectionShape, lintSectionOrder, lintFrontmatterShape, lintReferenceLoadStrategy, } from './enforcers/lint-style.js';
-import { lintRefPathResolves, lintNoBrokenMkdir, lintNoPwdSymlinkJumps, lintNoRelativeArchivePaths, } from './enforcers/lint-reference-integrity.js';
-import { lintCliBackMandatorText, lintCliBackNoOrphanBlocking, lintCliBackNoOrphanMustNot, } from './enforcers/lint-cli-back.js';
-import { lintNoFluff, lintNoClosingPrompt, lintStatusHeader, } from './enforcers/lint-output-style.js';
-import { lintRdHandoffContract, lintRdCoverageDiscipline, } from './enforcers/lint-rd-handoff-coverage.js';
+import { readSkillFiles, lintSectionShape, lintSectionOrder, lintFrontmatterShape, lintReferenceLoadStrategy } from './enforcers/lint-style.js';
+import { lintRefPathResolves, lintNoBrokenMkdir, lintNoPwdSymlinkJumps, lintNoRelativeArchivePaths } from './enforcers/lint-reference-integrity.js';
+import { lintCliBackMandatorText, lintCliBackNoOrphanBlocking, lintCliBackNoOrphanMustNot } from './enforcers/lint-cli-back.js';
+import { lintNoFluff, lintNoClosingPrompt, lintStatusHeader } from './enforcers/lint-output-style.js';
+import { lintRdHandoffContract, lintRdCoverageDiscipline } from './enforcers/lint-rd-handoff-coverage.js';
 import { lintOpenSpecAcceptanceBullets, lintOpenSpecSpecReference, 
 // (Removed in v2.11.0 Group A: `lintTechDocPresenceShape`)
-lintPeaksDoctorAcknowledged, } from './enforcers/lint-workflow-shape.js';
-import { lintCatalogSize, lintCatalogProseOnlyRatio, } from './enforcers/lint-catalog-governance.js';
-import { lintH1TitleRequired, lintApplicableTaskLevels, lintSeeAlsoSection, lintCrossRefResolves, lintNoSelfReference, lintNoOrphanLink, lintLineCountLe800, lintH2CountLe12, lintOverviewNearTop, lintLoadStrategyOnDemandFallback, lintLoadStrategyAlwaysCacheable, lintNoBashHeredoc, lintNoSudo, lintNoCurlPipeBash, lintCodeBlockLanguage, lintNoFakePrompt, lintNoAbsolutePaths, lintNoChmod777, lintNoMagicNumbers, lintSkillCitesEveryReference, lintLoadStrategyMatchesSize, readReferenceFiles, } from './enforcers/lint-reference-shape.js';
-import { lintCatalogStability, lintNoOrphanEnforcer, lintNoOrphanCatalog, lintRuntimeBudget, readCatalogHistory, } from './enforcers/lint-audit-regression.js';
+lintPeaksDoctorAcknowledged } from './enforcers/lint-workflow-shape.js';
+import { lintCatalogSize, lintCatalogProseOnlyRatio } from './enforcers/lint-catalog-governance.js';
+import { lintH1TitleRequired, lintApplicableTaskLevels, lintSeeAlsoSection, lintCrossRefResolves, lintNoSelfReference, lintNoOrphanLink, lintLineCountLe800, lintH2CountLe12, lintOverviewNearTop, lintLoadStrategyOnDemandFallback, lintLoadStrategyAlwaysCacheable, lintNoBashHeredoc, lintNoSudo, lintNoCurlPipeBash, lintCodeBlockLanguage, lintNoFakePrompt, lintNoAbsolutePaths, lintNoChmod777, lintNoMagicNumbers, lintSkillCitesEveryReference, lintLoadStrategyMatchesSize, readReferenceFiles } from './enforcers/lint-reference-shape.js';
+import { lintCatalogStability, lintNoOrphanEnforcer, lintNoOrphanCatalog, lintRuntimeBudget, readCatalogHistory } from './enforcers/lint-audit-regression.js';
 function buildFileInputs(skills, rules, openspec) {
     const grouped = new Map();
     for (const line of [...skills.lines, ...rules.lines, ...openspec.lines]) {
@@ -78,7 +78,7 @@ function tally(entries) {
         totalRedLines: entries.length,
         cliBacked,
         partial,
-        proseOnly,
+        proseOnly
     };
 }
 export function runRedLinesAudit(input) {
@@ -106,27 +106,27 @@ export function runRedLinesAudit(input) {
         ...openspec.warnings,
         ...classified.warnings.map((message) => ({ file: '(classifier)', message })),
         ...backed.warnings.map((message) => ({ file: '(backing-detector)', message })),
-        ...liveness.warnings.map((message) => ({ file: '(enforcer-liveness)', message })),
+        ...liveness.warnings.map((message) => ({ file: '(enforcer-liveness)', message }))
     ];
     // A9: name every enforcer that was downgraded, so the drop in
     // `cliBacked` is attributable rather than mysterious.
     if (liveness.unknown) {
         warnings.push({
             file: '(enforcer-liveness)',
-            message: 'no src/ tree under the project root; enforcer liveness is undecidable, so `cli-backed` falls back to the pre-A9 "the enforcer file exists" rule',
+            message: 'no src/ tree under the project root; enforcer liveness is undecidable, so `cli-backed` falls back to the pre-A9 "the enforcer file exists" rule'
         });
     }
     for (const ref of backed.deadEnforcers) {
         warnings.push({
             file: ref,
-            message: 'enforcer file exists but nothing outside src/services/audit/enforcers/ imports it; red lines backed by it are counted as prose-only',
+            message: 'enforcer file exists but nothing outside src/services/audit/enforcers/ imports it; red lines backed by it are counted as prose-only'
         });
     }
     if (subAgentSids.scanned && subAgentSids.invalid.length > 0) {
         for (const sid of subAgentSids.invalid) {
             warnings.push({
                 file: '.peaks/_sub_agents/' + sid,
-                message: `invalid sub-agent sid: "${sid}" (does not match isValidSessionId)`,
+                message: `invalid sub-agent sid: "${sid}" (does not match isValidSessionId)`
             });
         }
     }
@@ -134,7 +134,7 @@ export function runRedLinesAudit(input) {
         for (const sid of runtimeSids.invalid) {
             warnings.push({
                 file: '.peaks/_runtime/' + sid,
-                message: `invalid runtime sid: "${sid}" (does not match isValidSessionId)`,
+                message: `invalid runtime sid: "${sid}" (does not match isValidSessionId)`
             });
         }
     }
@@ -153,7 +153,7 @@ export function runRedLinesAudit(input) {
                 rule: 'Sub-Agent SID Isolation',
                 severity: 'fail',
                 file: `.peaks/_sub_agents/${sid}`,
-                detail: `invalid sub-agent sid: "${sid}" (does not match isValidSessionId)`,
+                detail: `invalid sub-agent sid: "${sid}" (does not match isValidSessionId)`
             });
         }
     }
@@ -164,7 +164,7 @@ export function runRedLinesAudit(input) {
                 rule: 'Sub-Agent SID Isolation',
                 severity: 'fail',
                 file: `.peaks/_runtime/${sid}`,
-                detail: `invalid runtime sid: "${sid}" (does not match isValidSessionId)`,
+                detail: `invalid runtime sid: "${sid}" (does not match isValidSessionId)`
             });
         }
     }
@@ -178,16 +178,19 @@ export function runRedLinesAudit(input) {
     //    for the current session.
     if (existsSync(sessionJsonPath)) {
         try {
-            const sessionData = JSON.parse(require('node:fs').readFileSync(sessionJsonPath, 'utf8'));
+            const sessionData = JSON.parse(readFileSync(sessionJsonPath, 'utf8'));
             if (typeof sessionData.peakSessionId === 'string' && sessionData.peakSessionId.length > 0) {
-                const preRd = checkPreRdScan({ projectRoot: input.projectRoot, sessionId: sessionData.peakSessionId });
+                const preRd = checkPreRdScan({
+                    projectRoot: input.projectRoot,
+                    sessionId: sessionData.peakSessionId
+                });
                 if (!preRd.archetypeScanned) {
                     enforcerFindings.push({
                         enforcerId: 'rl-pre-rd-scan-001',
                         rule: 'Pre-RD Scan: Archetype Detected',
                         severity: 'warn',
                         file: preRd.archetypeReportPath,
-                        detail: 'project-scan.md not produced; rd work has no archetype context',
+                        detail: 'project-scan.md not produced; rd work has no archetype context'
                     });
                 }
                 if (!preRd.standardsPreflightDone) {
@@ -196,12 +199,13 @@ export function runRedLinesAudit(input) {
                         rule: 'Pre-RD Scan: Standards Preflight',
                         severity: 'warn',
                         file: preRd.standardsReportPath,
-                        detail: 'standards-preflight.json not produced; rd work has no project standards context',
+                        detail: 'standards-preflight.json not produced; rd work has no project standards context'
                     });
                 }
             }
         }
-        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+        catch {
+            // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
             // skip
         }
     }
@@ -211,13 +215,13 @@ export function runRedLinesAudit(input) {
     const peaksDir = `${input.projectRoot}/.peaks`;
     if (existsSync(peaksDir)) {
         try {
-            const entries = require('node:fs').readdirSync(peaksDir);
+            const entries = readdirSync(peaksDir);
             for (const entry of entries) {
                 if (entry === '_runtime' || entry === '_sub_agents' || entry.startsWith('.'))
                     continue;
                 const designCheck = checkDesignDraftConfirmation({
                     projectRoot: input.projectRoot,
-                    sessionId: entry,
+                    sessionId: entry
                 });
                 if (designCheck.draftExists && !designCheck.confirmed) {
                     enforcerFindings.push({
@@ -225,12 +229,13 @@ export function runRedLinesAudit(input) {
                         rule: 'Design-Draft Confirm: Confirmed State',
                         severity: 'warn',
                         file: designCheck.draftPath,
-                        detail: 'design-draft.md exists but is not confirmed (no "confirmed" marker)',
+                        detail: 'design-draft.md exists but is not confirmed (no "confirmed" marker)'
                     });
                 }
             }
         }
-        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+        catch {
+            // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
             // skip
         }
     }
@@ -242,7 +247,7 @@ export function runRedLinesAudit(input) {
         if (existsSync(srcDir)) {
             const allFiles = [];
             const walk = (dir) => {
-                const ents = require('node:fs').readdirSync(dir, { withFileTypes: true });
+                const ents = readdirSync(dir, { withFileTypes: true });
                 for (const e of ents) {
                     const full = `${dir}/${e.name}`;
                     if (e.isDirectory()) {
@@ -251,7 +256,10 @@ export function runRedLinesAudit(input) {
                         walk(full);
                     }
                     else if (e.isFile() && /\.(ts|tsx|js|mjs)$/.test(e.name)) {
-                        const rel = full.slice(input.projectRoot.length + 1).split('\\').join('/');
+                        const rel = full
+                            .slice(input.projectRoot.length + 1)
+                            .split('\\')
+                            .join('/');
                         allFiles.push(rel);
                     }
                 }
@@ -265,12 +273,13 @@ export function runRedLinesAudit(input) {
                     rule: 'Prototype Fidelity: No Stub Markers',
                     severity: 'warn',
                     file: hit.filePath,
-                    detail: `stub marker "${hit.pattern}" at line containing: ${hit.snippet.slice(0, 50)}`,
+                    detail: `stub marker "${hit.pattern}" at line containing: ${hit.snippet.slice(0, 50)}`
                 });
             }
         }
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         // skip
     }
     // 6. P2-a enforcers (Slice #6 L2.3) — 18 lint-style enforcers
@@ -307,7 +316,7 @@ export function runRedLinesAudit(input) {
             for (const root of skippedRoots) {
                 warnings.push({
                     file: `skills/${root}`,
-                    message: 'no top-level SKILL.md — this directory and every skill nested under it are skipped by all lint-style enforcers (including rl-section-hard-contracts-001); their red-line rows are unverified',
+                    message: 'no top-level SKILL.md — this directory and every skill nested under it are skipped by all lint-style enforcers (including rl-section-hard-contracts-001); their red-line rows are unverified'
                 });
             }
             const skillFiles = readSkillFiles(skillsRoot, skillNames);
@@ -334,7 +343,7 @@ export function runRedLinesAudit(input) {
                     // A10: the RD handoff gate reads the artifact, not the SKILL.md
                     // sentence that promises one. See lint-rd-handoff-coverage.ts.
                     ...lintRdHandoffContract(skill, input.projectRoot),
-                    ...lintRdCoverageDiscipline(skill),
+                    ...lintRdCoverageDiscipline(skill)
                 ];
                 for (const hit of lintHits) {
                     enforcerFindings.push({
@@ -342,7 +351,7 @@ export function runRedLinesAudit(input) {
                         rule: hit.rule,
                         severity: 'warn',
                         file: hit.file,
-                        detail: `line ${hit.line}: ${hit.matchedText}`,
+                        detail: `line ${hit.line}: ${hit.matchedText}`
                     });
                 }
                 // 7. P2-b enforcers (Slice #7 L2.4) — references/*.md
@@ -373,7 +382,7 @@ export function runRedLinesAudit(input) {
                             ...lintNoChmod777(ref),
                             ...lintNoMagicNumbers(ref),
                             ...lintSkillCitesEveryReference(ref, skill),
-                            ...lintLoadStrategyMatchesSize(ref),
+                            ...lintLoadStrategyMatchesSize(ref)
                         ];
                         for (const hit of refHits) {
                             enforcerFindings.push({
@@ -381,18 +390,20 @@ export function runRedLinesAudit(input) {
                                 rule: hit.rule,
                                 severity: 'warn',
                                 file: hit.file,
-                                detail: `line ${hit.line}: ${hit.matchedText}`,
+                                detail: `line ${hit.line}: ${hit.matchedText}`
                             });
                         }
                     }
                 }
-                catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+                catch {
+                    // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
                     // skip — P2-b enforcers are best-effort per reference file
                 }
             }
         }
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         // skip — P2-a enforcers are best-effort; a failure here must
         // not break the audit pipeline
     }
@@ -408,11 +419,11 @@ export function runRedLinesAudit(input) {
         const auditRegressionHits = [
             ...lintCatalogStability({
                 currentSize: catalogSize,
-                sizeNinetyDaysAgo: readCatalogHistory(input.projectRoot),
+                sizeNinetyDaysAgo: readCatalogHistory(input.projectRoot)
             }),
             ...lintNoOrphanEnforcer(input.projectRoot),
             ...lintNoOrphanCatalog(),
-            ...lintRuntimeBudget(input.projectRoot, observedMs),
+            ...lintRuntimeBudget(input.projectRoot, observedMs)
         ];
         for (const hit of auditRegressionHits) {
             enforcerFindings.push({
@@ -420,18 +431,19 @@ export function runRedLinesAudit(input) {
                 rule: hit.rule,
                 severity: 'warn',
                 file: hit.file,
-                detail: `line ${hit.line}: ${hit.matchedText}`,
+                detail: `line ${hit.line}: ${hit.matchedText}`
             });
         }
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         // skip — audit-regression enforcers are best-effort
     }
     // P2-a Theme F (project-level): openspec proposals.
     try {
         const openspecHits = [
             ...lintOpenSpecAcceptanceBullets(input.projectRoot),
-            ...lintOpenSpecSpecReference(input.projectRoot),
+            ...lintOpenSpecSpecReference(input.projectRoot)
             // (Removed in v2.11.0 Group A: lintTechDocPresenceShape)
         ];
         for (const hit of openspecHits) {
@@ -440,11 +452,12 @@ export function runRedLinesAudit(input) {
                 rule: hit.rule,
                 severity: 'warn',
                 file: hit.file,
-                detail: `line ${hit.line}: ${hit.matchedText}`,
+                detail: `line ${hit.line}: ${hit.matchedText}`
             });
         }
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         // skip
     }
     // P2-a Theme C (session log): status header presence. Reads
@@ -467,12 +480,13 @@ export function runRedLinesAudit(input) {
                     rule: hit.rule,
                     severity: 'warn',
                     file: hit.file,
-                    detail: `line ${hit.line}: ${hit.matchedText}`,
+                    detail: `line ${hit.line}: ${hit.matchedText}`
                 });
             }
         }
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         // skip
     }
     // P2-a Theme G: catalog governance. Two checks: catalog size and
@@ -489,11 +503,12 @@ export function runRedLinesAudit(input) {
                 rule: hit.rule,
                 severity: 'warn',
                 file: hit.file,
-                detail: `line ${hit.line}: ${hit.matchedText}`,
+                detail: `line ${hit.line}: ${hit.matchedText}`
             });
         }
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         // skip
     }
     const audit = {
@@ -502,7 +517,7 @@ export function runRedLinesAudit(input) {
         partial: counts.partial,
         proseOnly: counts.proseOnly,
         audit: backed.entries,
-        enforcerFindings,
+        enforcerFindings
     };
     return { audit, warnings };
 }

package/dist/services/audit/scanners/openspec-scanner.js

@@ -15,7 +15,7 @@ function walkOpenSpecDir(projectRoot, dir, out) {
     catch (error) {
         out.warnings.push({
             file: relative(projectRoot, dir).split('\\').join('/'),
-            message: `readdir failed: ${error instanceof Error ? error.message : String(error)}`,
+            message: `readdir failed: ${error instanceof Error ? error.message : String(error)}`
         });
         return;
     }
@@ -32,7 +32,7 @@ function walkOpenSpecDir(projectRoot, dir, out) {
             catch (error) {
                 out.warnings.push({
                     file: relative(projectRoot, full).split('\\').join('/'),
-                    message: `read failed: ${error instanceof Error ? error.message : String(error)}`,
+                    message: `read failed: ${error instanceof Error ? error.message : String(error)}`
                 });
                 continue;
             }

package/dist/services/audit/scanners/rules-tree-scanner.js

@@ -16,7 +16,7 @@ function walkRulesDir(projectRoot, dir, out) {
     catch (error) {
         out.warnings.push({
             file: relative(projectRoot, dir).split('\\').join('/'),
-            message: `readdir failed: ${error instanceof Error ? error.message : String(error)}`,
+            message: `readdir failed: ${error instanceof Error ? error.message : String(error)}`
         });
         return;
     }
@@ -33,7 +33,7 @@ function walkRulesDir(projectRoot, dir, out) {
             catch (error) {
                 out.warnings.push({
                     file: relative(projectRoot, full).split('\\').join('/'),
-                    message: `read failed: ${error instanceof Error ? error.message : String(error)}`,
+                    message: `read failed: ${error instanceof Error ? error.message : String(error)}`
                 });
                 continue;
             }

package/dist/services/audit/scanners/skills-tree-scanner.js

@@ -32,7 +32,7 @@ export function scanSkillsTree(input) {
     catch (error) {
         warnings.push({
             file: SKILLS_DIR,
-            message: `readdir failed: ${error instanceof Error ? error.message : String(error)}`,
+            message: `readdir failed: ${error instanceof Error ? error.message : String(error)}`
         });
         return { lines, warnings };
     }
@@ -49,7 +49,7 @@ export function scanSkillsTree(input) {
             catch (error) {
                 warnings.push({
                     file: 'skills/bee',
-                    message: `readdir failed: ${error instanceof Error ? error.message : String(error)}`,
+                    message: `readdir failed: ${error instanceof Error ? error.message : String(error)}`
                 });
                 continue;
             }

package/dist/services/audit/static-service.js

@@ -33,19 +33,19 @@ export function runStaticAudit(input) {
     const peaksResult = runRedLinesAudit({ projectRoot: input.projectRoot });
     const mergedAudit = {
         ...peaksResult.audit,
-        enforcerFindings: [...peaksResult.audit.enforcerFindings],
+        enforcerFindings: [...peaksResult.audit.enforcerFindings]
     };
     const state = {
         spawned: false,
         installed: false,
         reason: 'disabled-and-ecc-missing',
-        findings: [],
+        findings: []
     };
     const proseRatio = computeProseRatio(mergedAudit.audit);
     return {
         audit: mergedAudit,
         agentShield: state,
         warnings: [],
-        proseRatio,
+        proseRatio
     };
 }

package/dist/services/audit-independent/index.d.ts

@@ -1,2 +1,2 @@
-export { runSecurityAudit, isSecurityAuditEnvelope, detectSecurityAudit, readSecurityTemplate, renderSecurityAuditArtifact, type SecurityAuditEnvelope, type SecurityAuditViolation, type SecurityAuditVerdict, type SecurityAuditDetectState, type SecurityAuditDetectResult, type HandoffFrontmatter, readAndVerifyHandoff, } from './security-audit-service.js';
-export { runPerfAudit, isPerfAuditEnvelope, detectPerfAudit, readPerfTemplate, renderPerfAuditArtifact, type PerfAuditEnvelope, type PerfAuditViolation, type PerfAuditVerdict, type PerfAuditDetectState, type PerfAuditDetectResult, } from './perf-audit-service.js';
+export { runSecurityAudit, isSecurityAuditEnvelope, detectSecurityAudit, readSecurityTemplate, renderSecurityAuditArtifact, type SecurityAuditEnvelope, type SecurityAuditViolation, type SecurityAuditVerdict, type SecurityAuditDetectState, type SecurityAuditDetectResult, type HandoffFrontmatter, readAndVerifyHandoff } from './security-audit-service.js';
+export { runPerfAudit, isPerfAuditEnvelope, detectPerfAudit, readPerfTemplate, renderPerfAuditArtifact, type PerfAuditEnvelope, type PerfAuditViolation, type PerfAuditVerdict, type PerfAuditDetectState, type PerfAuditDetectResult } from './perf-audit-service.js';

package/dist/services/audit-independent/index.js

@@ -1,2 +1,2 @@
-export { runSecurityAudit, isSecurityAuditEnvelope, detectSecurityAudit, readSecurityTemplate, renderSecurityAuditArtifact, readAndVerifyHandoff, } from './security-audit-service.js';
-export { runPerfAudit, isPerfAuditEnvelope, detectPerfAudit, readPerfTemplate, renderPerfAuditArtifact, } from './perf-audit-service.js';
+export { runSecurityAudit, isSecurityAuditEnvelope, detectSecurityAudit, readSecurityTemplate, renderSecurityAuditArtifact, readAndVerifyHandoff } from './security-audit-service.js';
+export { runPerfAudit, isPerfAuditEnvelope, detectPerfAudit, readPerfTemplate, renderPerfAuditArtifact } from './perf-audit-service.js';