peaks-loop 4.0.54 → 4.1.0

package/dist/services/capability-baseline/validator.js

@@ -2,18 +2,48 @@
 import { P0_JOURNEY_IDS } from './types.js';
 export function validateRowShape(row) {
     if (row.intent.trim().length === 0)
-        return { ok: false, error: { code: 'BASELINE_ROW_SHAPE_INVALID', message: `row ${row.journeyId} has empty intent` } };
+        return {
+            ok: false,
+            error: {
+                code: 'BASELINE_ROW_SHAPE_INVALID',
+                message: `row ${row.journeyId} has empty intent`
+            }
+        };
     if (row.invariants.length === 0)
-        return { ok: false, error: { code: 'BASELINE_ROW_SHAPE_INVALID', message: `row ${row.journeyId} has no invariants` } };
+        return {
+            ok: false,
+            error: {
+                code: 'BASELINE_ROW_SHAPE_INVALID',
+                message: `row ${row.journeyId} has no invariants`
+            }
+        };
     if (row.forbiddenChanges.length === 0)
-        return { ok: false, error: { code: 'BASELINE_ROW_SHAPE_INVALID', message: `row ${row.journeyId} has no forbiddenChanges` } };
+        return {
+            ok: false,
+            error: {
+                code: 'BASELINE_ROW_SHAPE_INVALID',
+                message: `row ${row.journeyId} has no forbiddenChanges`
+            }
+        };
     if (row.sourceFiles.length === 0)
-        return { ok: false, error: { code: 'BASELINE_ROW_SHAPE_INVALID', message: `row ${row.journeyId} has no sourceFiles` } };
+        return {
+            ok: false,
+            error: {
+                code: 'BASELINE_ROW_SHAPE_INVALID',
+                message: `row ${row.journeyId} has no sourceFiles`
+            }
+        };
     return { ok: true };
 }
 export function validateBaselineFile(file) {
     if (file.schemaVersion !== '2026-08-03') {
-        return { ok: false, error: { code: 'BASELINE_ROW_SHAPE_INVALID', message: `unsupported schemaVersion ${file.schemaVersion}` } };
+        return {
+            ok: false,
+            error: {
+                code: 'BASELINE_ROW_SHAPE_INVALID',
+                message: `unsupported schemaVersion ${file.schemaVersion}`
+            }
+        };
     }
     const signed = assertSignedBySquabbyZ(file);
     if (!signed.ok)
@@ -26,13 +56,19 @@ export function validateBaselineFile(file) {
     const present = new Set(file.rows.map((r) => r.journeyId));
     const missing = P0_JOURNEY_IDS.filter((j) => !present.has(j));
     if (missing.length > 0) {
-        return { ok: false, error: { code: 'BASELINE_INCOMPLETE', message: `missing journeys: ${missing.join(',')}` } };
+        return {
+            ok: false,
+            error: { code: 'BASELINE_INCOMPLETE', message: `missing journeys: ${missing.join(',')}` }
+        };
     }
     return { ok: true };
 }
 export function assertSignedBySquabbyZ(file) {
     if (file.signedBy !== 'SquabbyZ') {
-        return { ok: false, error: { code: 'BASELINE_NOT_SIGNED', message: 'baseline not signed by SquabbyZ' } };
+        return {
+            ok: false,
+            error: { code: 'BASELINE_NOT_SIGNED', message: 'baseline not signed by SquabbyZ' }
+        };
     }
     return { ok: true };
 }

package/dist/services/capability-guard-runner/contracts/J02.js

@@ -45,10 +45,14 @@ export async function runJ02Contract(ctx) {
             const err = e;
             const stderr = typeof err.stderr === 'string'
                 ? err.stderr
-                : Buffer.isBuffer(err.stderr) ? err.stderr.toString('utf8') : '';
+                : Buffer.isBuffer(err.stderr)
+                    ? err.stderr.toString('utf8')
+                    : '';
             const stdout = typeof err.stdout === 'string'
                 ? err.stdout
-                : Buffer.isBuffer(err.stdout) ? err.stdout.toString('utf8') : '';
+                : Buffer.isBuffer(err.stdout)
+                    ? err.stdout.toString('utf8')
+                    : '';
             // Preserve the original error type/message but attach stderr so the
             // outer try-catch's `e.message.slice(0, 160)` sees something useful.
             // Truncate stdout aggressively to keep the audit envelope bounded, but
@@ -68,16 +72,42 @@ export async function runJ02Contract(ctx) {
         const ws = run(['workspace', 'init', '--project', tmp, '--json']);
         const { data: { sessionId } } = JSON.parse(ws.stdout);
         const rid = '2026-08-03-j02-fixture';
-        const initOut = run(['request', 'init', '--role', 'rd', '--id', rid, '--project', tmp, '--session-id', sessionId, '--apply', '--json']);
+        const initOut = run([
+            'request',
+            'init',
+            '--role',
+            'rd',
+            '--id',
+            rid,
+            '--project',
+            tmp,
+            '--session-id',
+            sessionId,
+            '--apply',
+            '--json'
+        ]);
         const initEnv = JSON.parse(initOut.stdout);
         // `request init` writes the file as `NNN-<id-slug>.md`. The transition CLI accepts
         // the file's basename (without .md) as the requestId. Derive it from data.path.
         const baseName = initEnv.data.path.split(/[\\/]/).pop() ?? '';
         const requestId = baseName.replace(/\.md$/i, '');
         const transition = (state, extra) => run([
-            'request', 'transition', requestId, '--role', 'rd', '--state', state,
-            '--project', tmp, '--session-id', sessionId, '--confirm',
-            '--reason', 'J02 contract fixture', ...extra, '--json'
+            'request',
+            'transition',
+            requestId,
+            '--role',
+            'rd',
+            '--state',
+            state,
+            '--project',
+            tmp,
+            '--session-id',
+            sessionId,
+            '--confirm',
+            '--reason',
+            'J02 contract fixture',
+            ...extra,
+            '--json'
         ]).stdout;
         // Hard-gate probe, run FIRST: from the freshly initialised state, jumping
         // straight to the terminal state skips every intermediate gate and must not

package/dist/services/capability-guard-runner/contracts/J03.js

@@ -26,6 +26,20 @@ function parseCounts(stdout) {
     }
     return counts;
 }
+/** Compare parsed detector counts against the frozen `CEILING` ratchet. */
+function collectRatchetDrift(counts) {
+    const grew = [];
+    const missingRules = [];
+    if (counts !== null) {
+        for (const rule of Object.keys(CEILING)) {
+            if (counts[rule] === undefined)
+                missingRules.push(rule);
+            else if (counts[rule] > CEILING[rule])
+                grew.push(`${rule}: ${String(counts[rule])} > ${String(CEILING[rule])}`);
+        }
+    }
+    return { grew, missingRules };
+}
 /**
  * Behavioural probe of the "no silent-catch / fake-green reintroduced"
  * invariant.
@@ -45,21 +59,16 @@ export async function runJ03Contract(ctx) {
     const detectorPath = join(ctx.projectRoot, ...DETECTOR);
     const detectorPresent = existsSync(detectorPath);
     const run = detectorPresent
-        ? spawnSync('node', [detectorPath], { cwd: ctx.projectRoot, encoding: 'utf8', windowsHide: true })
+        ? spawnSync('node', [detectorPath], {
+            cwd: ctx.projectRoot,
+            encoding: 'utf8',
+            windowsHide: true
+        })
         : null;
     const stdout = run?.stdout ?? '';
     const counts = parseCounts(stdout);
     const scanned = /scanned (\d+) files/.exec(stdout);
-    const grew = [];
-    const missingRules = [];
-    if (counts !== null) {
-        for (const rule of Object.keys(CEILING)) {
-            if (counts[rule] === undefined)
-                missingRules.push(rule);
-            else if (counts[rule] > CEILING[rule])
-                grew.push(`${rule}: ${String(counts[rule])} > ${String(CEILING[rule])}`);
-        }
-    }
+    const { grew, missingRules } = collectRatchetDrift(counts);
     const result = combineProbes([
         probe(missing.length === 0, `baseline sourceFiles present (${row.sourceFiles.length})`),
         probe(detectorPresent, `the repository AST guard is present (${detectorPath})`),

package/dist/services/capability-guard-runner/contracts/J04.js

@@ -2,7 +2,12 @@ import { auditGoal, IncompleteAuditError } from '../../audit/audit-goal-service.
 import { combineProbes, fail, missingSourceFiles, pass, probe, requireBaselineRow } from './_shared.js';
 /** The six dimensions the frozen baseline names, in the baseline's own order. */
 const SIX_DIMENSIONS = [
-    'correctness', 'completeness', 'scope', 'risks', 'alternatives', 'constraints'
+    'correctness',
+    'completeness',
+    'scope',
+    'risks',
+    'alternatives',
+    'constraints'
 ];
 function runnerReturning(output) {
     return { call: async () => ({ output, tokens: { input: 1, output: 1 } }) };
@@ -18,6 +23,23 @@ function envelope(dimensions, severity = 'info') {
         rationale: 'r'
     });
 }
+async function probeEachDimensionDrop() {
+    // Any one dimension dropped must be refused — not just the last one.
+    let eachDropRejected = true;
+    const accepted = new Set();
+    for (const dropped of SIX_DIMENSIONS) {
+        const dims = SIX_DIMENSIONS.filter((d) => d !== dropped);
+        try {
+            await auditGoal({ need: 'n' }, runnerReturning(envelope(dims)));
+            eachDropRejected = false;
+            accepted.add(dropped);
+        }
+        catch {
+            /* expected */
+        }
+    }
+    return { eachDropRejected, accepted };
+}
 /**
  * Behavioural probe: drive `auditGoal()` with a complete and an incomplete
  * payload and assert it accepts exactly one of them. Counting `dimension`
@@ -46,20 +68,7 @@ export async function runJ04Contract(ctx) {
         fiveRejected = true;
         rejectName = e.name;
     }
-    // Any one dimension dropped must be refused — not just the last one.
-    let eachDropRejected = true;
-    const accepted = new Set();
-    for (const dropped of SIX_DIMENSIONS) {
-        const dims = SIX_DIMENSIONS.filter((d) => d !== dropped);
-        try {
-            await auditGoal({ need: 'n' }, runnerReturning(envelope(dims)));
-            eachDropRejected = false;
-            accepted.add(dropped);
-        }
-        catch {
-            /* expected */
-        }
-    }
+    const { eachDropRejected, accepted } = await probeEachDimensionDrop();
     const result = combineProbes([
         probe(missing.length === 0, `baseline sourceFiles present (${row.sourceFiles.length})`),
         probe(completeAccepted, 'six-dimension audit is accepted'),

package/dist/services/capability-guard-runner/contracts/J05.js

@@ -5,7 +5,10 @@ import { IncompleteFinalReviewError, MAX_EVIDENCE_BYTES_PER_FILE, outputBudgetFo
 import { combineProbes, fail, missingSourceFiles, pass, probe, requireBaselineRow } from './_shared.js';
 /** The four dimensions the frozen baseline names. The 5th is NOT one of them. */
 const FOUR_DIMENSIONS = [
-    'functional-completeness', 'problem-resolution', 'no-new-bugs', 'existing-functionality-intact'
+    'functional-completeness',
+    'problem-resolution',
+    'no-new-bugs',
+    'existing-functionality-intact'
 ];
 const FIFTH_DIMENSION = 'capability-consistency';
 /**
@@ -65,7 +68,10 @@ async function probePrepareFinalReview() {
         let rejected = false;
         let rejectName = 'none';
         try {
-            await prepareFinalReview('J05-fixture', { ...opts, llmRunner: runnerReturning(reviewJson(FOUR_DIMENSIONS.slice(0, 3))) });
+            await prepareFinalReview('J05-fixture', {
+                ...opts,
+                llmRunner: runnerReturning(reviewJson(FOUR_DIMENSIONS.slice(0, 3)))
+            });
         }
         catch (e) {
             rejected = e.name === IncompleteFinalReviewError.name;
@@ -74,7 +80,10 @@ async function probePrepareFinalReview() {
         let accepted = false;
         let acceptError = '';
         try {
-            const out = await prepareFinalReview('J05-fixture', { ...opts, llmRunner: runnerReturning(reviewJson(FOUR_DIMENSIONS)) });
+            const out = await prepareFinalReview('J05-fixture', {
+                ...opts,
+                llmRunner: runnerReturning(reviewJson(FOUR_DIMENSIONS))
+            });
             accepted = out.dimensions.length === 4;
         }
         catch (e) {
@@ -90,13 +99,8 @@ async function probePrepareFinalReview() {
         rmSync(root, { recursive: true, force: true });
     }
 }
-export async function runJ05Contract(ctx) {
-    const row = requireBaselineRow(ctx);
-    const missing = missingSourceFiles(ctx, row);
-    const prepared = await probePrepareFinalReview();
-    const oversized = FOUR_DIMENSIONS.map((d) => undeliverableSource(d, MAX_EVIDENCE_BYTES_PER_FILE + 1000));
-    const reported = undeliverableDimensions(oversized).map((r) => r.dimension);
-    const fifthOnly = undeliverableDimensions([undeliverableSource(FIFTH_DIMENSION, MAX_EVIDENCE_BYTES_PER_FILE + 1000)]);
+/** Measure the output-budget clamp and the refusal of a bad override. */
+function probeOutputBudget() {
     const floor = outputBudgetForEvidence(0);
     const ceiling = outputBudgetForEvidence(Number.MAX_SAFE_INTEGER);
     let badOverrideThrows = false;
@@ -106,6 +110,18 @@ export async function runJ05Contract(ctx) {
     catch {
         badOverrideThrows = true;
     }
+    return { floor, ceiling, badOverrideThrows };
+}
+export async function runJ05Contract(ctx) {
+    const row = requireBaselineRow(ctx);
+    const missing = missingSourceFiles(ctx, row);
+    const prepared = await probePrepareFinalReview();
+    const oversized = FOUR_DIMENSIONS.map((d) => undeliverableSource(d, MAX_EVIDENCE_BYTES_PER_FILE + 1000));
+    const reported = undeliverableDimensions(oversized).map((r) => r.dimension);
+    const fifthOnly = undeliverableDimensions([
+        undeliverableSource(FIFTH_DIMENSION, MAX_EVIDENCE_BYTES_PER_FILE + 1000)
+    ]);
+    const { floor, ceiling, badOverrideThrows } = probeOutputBudget();
     const result = combineProbes([
         probe(missing.length === 0, `baseline sourceFiles present (${row.sourceFiles.length})`),
         probe(prepared.rejected, `a three-dimension review is refused (${prepared.detail})`),

package/dist/services/capability-guard-runner/contracts/J07.js

@@ -50,7 +50,11 @@ export async function runJ07Contract(ctx) {
         writeTestCache(root, { ...cached, fileMtime: mtimeOfFile(file) });
         const afterSilentEdit = isCacheable(root, file, TEST_NAME);
         // Gate 2, isolated: the sha is up-to-date but the recorded mtime is stale.
-        writeTestCache(root, { ...cached, fileSha256: sha256OfFile(file), fileMtime: cached.fileMtime - 5_000 });
+        writeTestCache(root, {
+            ...cached,
+            fileSha256: sha256OfFile(file),
+            fileMtime: cached.fileMtime - 5_000
+        });
         const afterTouch = isCacheable(root, file, TEST_NAME);
         // A non-passing status must never be served as a hit.
         recordTestResult(root, file, 'vitest', {
@@ -69,7 +73,9 @@ export async function runJ07Contract(ctx) {
             probe(!afterTouch.hit && afterTouch.reason === 'mtime-changed', `a touched file is NOT a hit (hit=${String(afterTouch.hit)} reason=${String(afterTouch.reason)})`),
             probe(!skipped.hit && skipped.reason === 'previous-skipped', `a previously skipped test is NOT a hit (hit=${String(skipped.hit)} reason=${String(skipped.reason)})`),
             probe(!unknown.hit && unknown.reason === 'no-cache', `an unrecorded test is NOT a hit (reason=${String(unknown.reason)})`),
-            probe(testCacheDir(ctx.projectRoot).replace(/\\/g, '/').endsWith(`.peaks/_runtime/${TEST_CACHE_DIR}`), `the cache writes under .peaks/_runtime/${TEST_CACHE_DIR} (got ${testCacheDir(ctx.projectRoot)})`),
+            probe(testCacheDir(ctx.projectRoot)
+                .replace(/\\/g, '/')
+                .endsWith(`.peaks/_runtime/${TEST_CACHE_DIR}`), `the cache writes under .peaks/_runtime/${TEST_CACHE_DIR} (got ${testCacheDir(ctx.projectRoot)})`),
             probe(major !== null && major <= MAX_VITEST_MAJOR, `vitest major is <= ${String(MAX_VITEST_MAJOR)} (saw ${String(major)})`)
         ]);
         const artifact = row.sourceFiles[1] ?? 'src/services/test-cache/test-cache-service.ts';

package/dist/services/capability-guard-runner/contracts/J08.js

@@ -6,7 +6,10 @@ function probeService() {
     const noop = () => undefined;
     const opts = {
         loopReleaseSchema: { parse: (input) => input },
-        loopBeeRelationSchema: { parse: (input) => input, omit: () => ({ parse: (input) => input }) },
+        loopBeeRelationSchema: {
+            parse: (input) => input,
+            omit: () => ({ parse: (input) => input })
+        },
         insertLoopRelease: noop,
         insertLoopBeeRelation: noop
     };
@@ -26,11 +29,25 @@ function probeService() {
 export async function runJ08Contract(ctx) {
     const row = requireBaselineRow(ctx);
     const missing = missingSourceFiles(ctx, row);
-    const ready = { task_id: 'guard-J08', task_status: 'completed', gates_passed: true, evidence_collected: true };
+    const ready = {
+        task_id: 'guard-J08',
+        task_status: 'completed',
+        gates_passed: true,
+        evidence_collected: true
+    };
     const schemaAcceptsReady = CrystallizationTaskStateSchema.safeParse(ready).success;
-    const schemaRejectsGatesFalse = !CrystallizationTaskStateSchema.safeParse({ ...ready, gates_passed: false }).success;
-    const schemaRejectsNotCompleted = !CrystallizationTaskStateSchema.safeParse({ ...ready, task_status: 'in_progress' }).success;
-    const schemaRejectsNoEvidence = !CrystallizationTaskStateSchema.safeParse({ ...ready, evidence_collected: false }).success;
+    const schemaRejectsGatesFalse = !CrystallizationTaskStateSchema.safeParse({
+        ...ready,
+        gates_passed: false
+    }).success;
+    const schemaRejectsNotCompleted = !CrystallizationTaskStateSchema.safeParse({
+        ...ready,
+        task_status: 'in_progress'
+    }).success;
+    const schemaRejectsNoEvidence = !CrystallizationTaskStateSchema.safeParse({
+        ...ready,
+        evidence_collected: false
+    }).success;
     const svc = probeService();
     let serviceAcceptsReady = false;
     try {

package/dist/services/capability-guard-runner/contracts/J10.js

@@ -41,8 +41,12 @@ export async function runJ10Contract(ctx) {
         const freshProjectNotInstalled = plan.exists === false && plan.alreadyInstalled === false;
         // Each managed hook entry is identified by its own sentinel; every one of
         // them must land exactly once and stay at one across a re-apply.
-        const sentinels = plan.entryTargets.filter((t) => t.settingsPath === settingsPath).map((t) => t.sentinel);
-        const countsNow = () => existsSync(settingsPath) ? sentinels.map((s) => countOccurrences(readFileSync(settingsPath, 'utf8'), s)) : [];
+        const sentinels = plan.entryTargets
+            .filter((t) => t.settingsPath === settingsPath)
+            .map((t) => t.sentinel);
+        const countsNow = () => existsSync(settingsPath)
+            ? sentinels.map((s) => countOccurrences(readFileSync(settingsPath, 'utf8'), s))
+            : [];
         const first = applyHookInstall('project', root);
         const fileWritten = existsSync(settingsPath);
         const installedCounts = countsNow();

package/dist/services/capability-guard-runner/contracts/J11.d.ts

@@ -6,5 +6,10 @@ import type { GuardContext, GuardRunResult } from '../types.js';
  * The previous version listed doctor/audit/openspec files and passed if any of
  * them mentioned "doctor", "audit", "openspec" or "health" — `doctor-service.ts`
  * satisfies that from its own filename.
+ *
+ * The `checks/` directory is counted, not merely read: it must contain ONLY
+ * check modules, because `PLUGINS.length === <its file count>` is the
+ * invariant — a helper placed there reads as a check with no registered
+ * plugin, which is how a pure hoist silently broke this gate.
  */
 export declare function runJ11Contract(ctx: GuardContext): Promise<GuardRunResult>;

package/dist/services/capability-guard-runner/contracts/J11.js

@@ -36,12 +36,19 @@ const FORBIDDEN_SHIM_PATTERNS = [
  * The previous version listed doctor/audit/openspec files and passed if any of
  * them mentioned "doctor", "audit", "openspec" or "health" — `doctor-service.ts`
  * satisfies that from its own filename.
+ *
+ * The `checks/` directory is counted, not merely read: it must contain ONLY
+ * check modules, because `PLUGINS.length === <its file count>` is the
+ * invariant — a helper placed there reads as a check with no registered
+ * plugin, which is how a pure hoist silently broke this gate.
  */
 export async function runJ11Contract(ctx) {
     const row = requireBaselineRow(ctx);
     const missing = missingSourceFiles(ctx, row);
     const checksDirAbs = join(ctx.projectRoot, ...CHECKS_DIR);
-    const checkFiles = existsSync(checksDirAbs) ? readdirSync(checksDirAbs).filter((f) => f.endsWith('.ts')) : [];
+    const checkFiles = existsSync(checksDirAbs)
+        ? readdirSync(checksDirAbs).filter((f) => f.endsWith('.ts'))
+        : [];
     const pluginIds = PLUGINS.map((p) => p.name);
     const uniquePluginIds = new Set(pluginIds);
     const shimAbs = join(ctx.projectRoot, ...LEGACY_SHIM);
@@ -52,7 +59,12 @@ export async function runJ11Contract(ctx) {
     const shimIsReexportOnly = shimLines.length > 0 && shimLogic.length === 0 && shimReexports;
     const root = mkdtempSync(join(tmpdir(), 'cbl-J11-'));
     try {
-        const finding = { id: 'L3:l3-memory-health', rule: 'r', detail: 'd', severity: 'fail' };
+        const finding = {
+            id: 'L3:l3-memory-health',
+            rule: 'r',
+            detail: 'd',
+            severity: 'fail'
+        };
         const first = proposeFromDoctor({ projectRoot: root, finding, clock: FROZEN_CLOCK });
         const second = proposeFromDoctor({ projectRoot: root, finding, clock: FROZEN_CLOCK });
         const proposalMentionsFinding = existsSync(first.proposalPath)

package/dist/services/capability-guard-runner/contracts/J12.js

@@ -38,10 +38,18 @@ export async function runJ12Contract(ctx) {
     const root = mkdtempSync(join(tmpdir(), 'cbl-J12-'));
     try {
         const storeDir = leaseStoreDir(root);
-        const missingStore = listLeasesSync(storeDir, { readdir: readdirSync, readFile: (p) => readFileSync(p, 'utf8'), existsSync });
+        const missingStore = listLeasesSync(storeDir, {
+            readdir: readdirSync,
+            readFile: (p) => readFileSync(p, 'utf8'),
+            existsSync
+        });
         mkdirSync(storeDir, { recursive: true });
         writeFileSync(leaseFilePath(root, lease.leaseId), serializeLease(lease));
-        const listed = listLeasesSync(storeDir, { readdir: readdirSync, readFile: (p) => readFileSync(p, 'utf8'), existsSync });
+        const listed = listLeasesSync(storeDir, {
+            readdir: readdirSync,
+            readFile: (p) => readFileSync(p, 'utf8'),
+            existsSync
+        });
         const result = combineProbes([
             probe(missing.length === 0, `baseline sourceFiles present (${row.sourceFiles.length})`),
             probe(lease.status === 'active' && lease.consumedBySubAgents.length === 0, 'a fresh lease is active with no consumers'),
@@ -51,7 +59,8 @@ export async function runJ12Contract(ctx) {
             probe(JSON.stringify(deserializeLease(serializeLease(lease))) === JSON.stringify(lease), 'serialize/deserialize round-trips the lease'),
             probe(onceReleased.status === 'released', 'release moves the lease to released'),
             probe(JSON.stringify(twiceReleased) === JSON.stringify(onceReleased), 'a duplicate release is a no-op'),
-            probe(JSON.stringify(consumedTwice) === JSON.stringify(consumed) && consumed.consumedBySubAgents.length === 1, 'a duplicate consumption is not appended twice'),
+            probe(JSON.stringify(consumedTwice) === JSON.stringify(consumed) &&
+                consumed.consumedBySubAgents.length === 1, 'a duplicate consumption is not appended twice'),
             probe(renewed.status === 'active' && renewed.expiresAt === NOW + 120_000, 'renew extends expiry and returns the lease to active'),
             probe(isLeaseActive(lease, NOW), 'an unexpired active lease is in flight'),
             probe(!isLeaseGcEligible(lease, NOW), 'gc is NOT eligible for an in-flight lease'),

package/dist/services/capability-guard-runner/diff.js

@@ -1,7 +1,3 @@
 export function formatHumanReadableDiff(diff) {
-    return [
-        `reason: ${diff.reason}`,
-        `- ${diff.before}`,
-        `+ ${diff.after}`
-    ].join('\n');
+    return [`reason: ${diff.reason}`, `- ${diff.before}`, `+ ${diff.after}`].join('\n');
 }

package/dist/services/changeset/changeset-check-service.js

@@ -32,9 +32,7 @@ export function runChangesetHardGate(projectRoot) {
         // Unexpected I/O — fail closed (do NOT silently report clean).
         throw err;
     }
-    const staged = files
-        .filter((f) => f.endsWith('.md') && f !== 'README.md')
-        .sort();
+    const staged = files.filter((f) => f.endsWith('.md') && f !== 'README.md').sort();
     const ok = staged.length === 0;
     const state = ok ? 'staged-empty' : 'staged-present';
     return {

package/dist/services/classify/classify-service.js

@@ -26,28 +26,40 @@
  *     to the audit log; cannot be downgraded (per spec: downgrade
  *     is always refused)
  */
-import { TASK_LEVELS, TASK_LEVEL_GATE_SETS, TASK_LEVEL_ORDER, } from './classify-types.js';
+import { TASK_LEVELS, TASK_LEVEL_GATE_SETS, TASK_LEVEL_ORDER } from './classify-types.js';
 const FEATURE_KEYWORDS = ['fix', 'bug', 'broken', 'crash', 'regression'];
-const MIGRATION_KEYWORDS = ['migrate', 'migration', 'codemod', 'backfill', 'schema', 'bump'];
+const MIGRATION_KEYWORDS = [
+    'migrate',
+    'migration',
+    'codemod',
+    'backfill',
+    'schema',
+    'bump'
+];
 const REFACTOR_KEYWORDS = ['refactor', 'rename', 'extract', 'inline', 'cleanup'];
 function detectLevel(signals, featureThresholdFiles, featureThresholdLines) {
     // 1. Migration takes priority.
     if (signals.touchesMigrationScripts)
         return 'migration';
     const lower = signals.keywords.map((k) => k.toLowerCase());
-    if (signals.touchesDependencies && lower.some((k) => MIGRATION_KEYWORDS.includes(k))) {
+    if (signals.touchesDependencies &&
+        lower.some((k) => MIGRATION_KEYWORDS.includes(k))) {
         return 'migration';
     }
     if (signals.touchesDependencies)
         return 'migration';
-    if (signals.touchesDependencies === false && signals.isPureRefactor && signals.linesChanged > 50) {
+    if (signals.touchesDependencies === false &&
+        signals.isPureRefactor &&
+        signals.linesChanged > 50) {
         return 'refactor';
     }
-    if (lower.some((k) => REFACTOR_KEYWORDS.includes(k)) && signals.isPureRefactor) {
+    if (lower.some((k) => REFACTOR_KEYWORDS.includes(k)) &&
+        signals.isPureRefactor) {
         return 'refactor';
     }
     // 2. Feature threshold.
-    if (signals.filesChanged >= featureThresholdFiles || signals.linesChanged >= featureThresholdLines) {
+    if (signals.filesChanged >= featureThresholdFiles ||
+        signals.linesChanged >= featureThresholdLines) {
         return 'feature';
     }
     // 3. Bug-fix keywords.
@@ -110,13 +122,13 @@ export function classifyTask(input, featureThresholdFiles = 10, featureThreshold
         output: finalLevel,
         conservatism: input.conservatism,
         overrideApplied,
-        reason: input.override?.reason ?? rationale,
+        reason: input.override?.reason ?? rationale
     };
     return {
         level: finalLevel,
         signals: input.signals,
         rationale,
         gateSet,
-        audit,
+        audit
     };
 }

package/dist/services/classify/classify-types.js

@@ -17,14 +17,20 @@
  *   - 'strict'  — always upgrade to next level
  *   - 'lax'     — always downgrade to previous level
  */
-export const TASK_LEVELS = ['typo', 'bug', 'feature', 'refactor', 'migration'];
+export const TASK_LEVELS = [
+    'typo',
+    'bug',
+    'feature',
+    'refactor',
+    'migration'
+];
 /** Numeric ordering for "next level" / "previous level" promotion. */
 export const TASK_LEVEL_ORDER = {
     typo: 0,
     bug: 1,
     feature: 2,
     refactor: 3,
-    migration: 4,
+    migration: 4
 };
 export const TASK_LEVEL_GATE_SETS = {
     typo: {
@@ -37,7 +43,7 @@ export const TASK_LEVEL_GATE_SETS = {
         requiresSecurityReview: false,
         requiresPerfBaseline: false,
         requiresQaHandoff: false,
-        requiresDestructiveConfirmation: false,
+        requiresDestructiveConfirmation: false
     },
     bug: {
         level: 'bug',
@@ -49,7 +55,7 @@ export const TASK_LEVEL_GATE_SETS = {
         requiresSecurityReview: false,
         requiresPerfBaseline: false,
         requiresQaHandoff: false,
-        requiresDestructiveConfirmation: false,
+        requiresDestructiveConfirmation: false
     },
     feature: {
         level: 'feature',
@@ -61,7 +67,7 @@ export const TASK_LEVEL_GATE_SETS = {
         requiresSecurityReview: true,
         requiresPerfBaseline: true,
         requiresQaHandoff: true,
-        requiresDestructiveConfirmation: true,
+        requiresDestructiveConfirmation: true
     },
     refactor: {
         level: 'refactor',
@@ -73,18 +79,25 @@ export const TASK_LEVEL_GATE_SETS = {
         requiresSecurityReview: true,
         requiresPerfBaseline: false,
         requiresQaHandoff: true,
-        requiresDestructiveConfirmation: false,
+        requiresDestructiveConfirmation: false
     },
     migration: {
         level: 'migration',
         description: 'Migration: codemod, schema change, data backfill, dependency upgrade.',
-        stages: ['typecheck', 'unit-tests', 'lint', 'review-fanout', 'gate-verify-pipeline', 'backward-compat'],
+        stages: [
+            'typecheck',
+            'unit-tests',
+            'lint',
+            'review-fanout',
+            'gate-verify-pipeline',
+            'backward-compat'
+        ],
         requiresPrd: true,
         requiresTechDoc: true,
         requiresCodeReview: true,
         requiresSecurityReview: true,
         requiresPerfBaseline: true,
         requiresQaHandoff: true,
-        requiresDestructiveConfirmation: true,
-    },
+        requiresDestructiveConfirmation: true
+    }
 };