peaks-loop 4.0.54 → 4.1.0

package/dist/services/session/resolve-caller-id.js

@@ -33,7 +33,7 @@
  * See `.peaks/_runtime/2026-08-03-session-bee258/rd/requests/001-2026-08-03-presence-lease-graph-design.md`
  * for the slice 4.0.8 contract.
  */
-import { CALLER_ID_REGEX, CallerIdError, } from './caller-id-types.js';
+import { CALLER_ID_REGEX, CallerIdError } from './caller-id-types.js';
 import { getAdapter } from '../ide/ide-registry.js';
 import { detectInstalledIde } from '../ide/ide-detector.js';
 // Re-export for CLI consumers (avoids a second import line).
@@ -76,7 +76,9 @@ export function resolveCallerId(opts = {}) {
         return validateCallerId(opts.flagValue, 'flag');
     }
     // Priority level 2: env var (vendor-neutral override).
-    const envValue = isNonEmpty(opts.envOverride) ? opts.envOverride : opts.env?.PEAKS_CALLER_ID ?? process.env.PEAKS_CALLER_ID;
+    const envValue = isNonEmpty(opts.envOverride)
+        ? opts.envOverride
+        : (opts.env?.PEAKS_CALLER_ID ?? process.env.PEAKS_CALLER_ID);
     if (isNonEmpty(envValue)) {
         return validateCallerId(envValue, 'env');
     }
@@ -122,7 +124,7 @@ export function resolveCallerProjection(opts = {}) {
             callerId: validated,
             workflowId: null,
             graphRef: null,
-            source: 'env-flag',
+            source: 'env-flag'
         };
     }
     // 2. Env-flag — PEAKS_CALLER_ID override.
@@ -134,7 +136,7 @@ export function resolveCallerProjection(opts = {}) {
             callerId: validated,
             workflowId: null,
             graphRef: null,
-            source: 'env-flag',
+            source: 'env-flag'
         };
     }
     // 3. Adapter — the active IDE owns its priority rules.
@@ -146,7 +148,7 @@ export function resolveCallerProjection(opts = {}) {
             callerId,
             workflowId: null,
             graphRef: null,
-            source: 'adapter',
+            source: 'adapter'
         };
     }
     catch (err) {

package/dist/services/session/session-binding-bridge.js

@@ -23,7 +23,9 @@ import { dirname, join } from 'node:path';
 import { randomBytes } from 'node:crypto';
 import { initWorkspace } from '../workspace/workspace-service.js';
 import { projectRootsMatch, stableRealPath } from '../../shared/path-utils.js';
-import { resolveCallerBinding, setCallerBinding, } from './caller-binding-service.js';
+import { tryParseJson } from '../../shared/json-parse.js';
+import { SessionBindingSchema, SessionFileSchema } from './session-file-schema.js';
+import { resolveCallerBinding, setCallerBinding } from './caller-binding-service.js';
 import { resolveCallerProjection } from './resolve-caller-id.js';
 import { getSessionId, getSessionIdCanonical, getSessionMeta, rotateSessionBinding, setSessionMeta } from './session-manager.js';
 // --- Lower-level helpers the bridge needs (moved verbatim) ---
@@ -59,15 +61,14 @@ function readSessionFile(projectRoot) {
     if (!existsSync(pathToRead))
         return null;
     try {
-        const data = JSON.parse(readFileSync(pathToRead, 'utf8'));
-        if (data.sessionId &&
-            typeof data.projectRoot === 'string' &&
-            projectRootsMatch(data.projectRoot, projectRoot)) {
-            return data;
+        const parsed = tryParseJson(readFileSync(pathToRead, 'utf8'), SessionBindingSchema);
+        if (parsed.ok && projectRootsMatch(parsed.value.projectRoot, projectRoot)) {
+            return parsed.value;
         }
         return null;
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -78,15 +79,14 @@ function readSessionFileCanonical(projectRoot) {
     if (!existsSync(pathToRead))
         return null;
     try {
-        const data = JSON.parse(readFileSync(pathToRead, 'utf8'));
-        if (data.sessionId &&
-            typeof data.projectRoot === 'string' &&
-            projectRootsMatch(data.projectRoot, projectRoot)) {
-            return data;
+        const parsed = tryParseJson(readFileSync(pathToRead, 'utf8'), SessionBindingSchema);
+        if (parsed.ok && projectRootsMatch(parsed.value.projectRoot, projectRoot)) {
+            return parsed.value;
         }
         return null;
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -114,14 +114,11 @@ function readSessionMeta(projectRoot, sessionId) {
     if (!existsSync(metaPath))
         return null;
     try {
-        const raw = readFileSync(metaPath, 'utf8');
-        const parsed = JSON.parse(raw);
-        if (typeof parsed?.sessionId !== 'string' || parsed.sessionId.length === 0) {
-            return null;
-        }
-        return parsed;
+        const parsed = tryParseJson(readFileSync(metaPath, 'utf8'), SessionFileSchema);
+        return parsed.ok ? parsed.value : null;
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -171,11 +168,12 @@ function getCurrentOuterSessionId(projectRoot) {
                         if (parsed !== null &&
                             typeof parsed === 'object' &&
                             typeof parsed.outerSessionId === 'string' &&
-                            (parsed.outerSessionId).length > 0) {
+                            parsed.outerSessionId.length > 0) {
                             resolved = parsed.outerSessionId;
                         }
                     }
-                    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+                    catch {
+                        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
                         // fall through — file missing / malformed JSON / IO error → undefined
                     }
                 }
@@ -217,7 +215,8 @@ function resolveCallerBindingForEnsure(projectRoot) {
     try {
         projection = resolveCallerProjection({ projectRoot, env: process.env });
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
     try {
@@ -230,7 +229,8 @@ function resolveCallerBindingForEnsure(projectRoot) {
             callerId: projection.callerId
         };
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -337,7 +337,8 @@ export async function ensureSession(projectRoot) {
         try {
             setCallerBinding(projectRoot, newCallerId, payload);
         }
-        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+        catch {
+            // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
             // best effort; session.json write below is the legacy fallback
         }
     }

package/dist/services/session/session-checkpoint-service.js

@@ -142,7 +142,7 @@ export function listCheckpointPaths(projectRoot, sessionId) {
 }
 export function latestCheckpointPath(projectRoot, sessionId) {
     const paths = listCheckpointPaths(projectRoot, sessionId);
-    return paths.length > 0 ? paths[0] ?? null : null;
+    return paths.length > 0 ? (paths[0] ?? null) : null;
 }
 export const CHECKPOINT_CONSTANTS = {
     CHECKPOINTS_DIR,

package/dist/services/session/session-file-schema.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Runtime schemas for the on-disk session files.
+ *
+ * WHY THIS EXISTS (S12, 2026-09-20). Six readers across `session-manager.ts`
+ * and `session-binding-bridge.ts` did `JSON.parse(readFileSync(path, 'utf8'))`
+ * and then hand-rolled `typeof data.sessionId === 'string'` checks before
+ * asserting the result with `as SessionInfo` / `as SessionMeta`. Because
+ * `JSON.parse` returns `any`, the hand-rolled check could only ever cover the
+ * one or two fields it happened to name, and the assertion claimed the rest —
+ * an unchecked cast sitting on top of a partial check. Those sites are part of
+ * the R1 root at the S12 census.
+ *
+ * The schemas below are the same checks, made total: every field the return
+ * type promises is now checked, so the callers return the parsed value
+ * directly and the `as` casts are gone. The check is STRICTER than it was —
+ * that is the point, and it is stated here rather than discovered later. A
+ * file that lacks `createdAt` or `projectRoot` used to be handed back typed as
+ * `SessionInfo`; it now reads as `null`, which is what the readers do with
+ * every other unusable file.
+ *
+ * THREE schemas, layered, because three different readers check three
+ * different things. Each one validates EXACTLY the fields its reader relies
+ * on and nothing more — a schema that demanded more than the code checks
+ * would be a new requirement smuggled in under a type, and it would show up
+ * as passing tests having to be rewritten. It did, during S12: requiring
+ * `createdAt` in the project-level binding schema broke five statusline tests
+ * that seed `{ sessionId, projectRoot }`, and no consumer reads `createdAt`
+ * from that reader. That finding is why this file has three schemas.
+ */
+import { z } from 'zod';
+/**
+ * The minimum a reader needs to LOCATE a session: a non-empty id. Equivalent
+ * to the `typeof data.sessionId === 'string' && data.sessionId.length > 0`
+ * check it replaces.
+ */
+export declare const SessionIdentitySchema: z.ZodObject<{
+    sessionId: z.ZodString;
+}, z.core.$loose>;
+/**
+ * What the project-level binding readers (`readSessionFile` /
+ * `readSessionFileCanonical`, in both `session-manager.ts` and
+ * `session-binding-bridge.ts`) actually use: the id, and the `projectRoot`
+ * they compare against the caller. Equivalent to the
+ * `data.sessionId && typeof data.projectRoot === 'string'` check it replaces.
+ */
+export declare const SessionBindingSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    projectRoot: z.ZodString;
+}, z.core.$loose>;
+/**
+ * The full session record, as written by `writeSessionFile` (`.peaks/_runtime/
+ * session.json`) and `setSessionMeta` (`.peaks/_runtime/<sid>/session.json`).
+ * This is the shape the META readers promise a caller (`SessionMeta` requires
+ * `createdAt` and `projectRoot`); the optional fields are `SessionMeta`'s own.
+ * `looseObject` preserves any further key the file carries, so a reader still
+ * sees everything on disk.
+ */
+export declare const SessionFileSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    createdAt: z.ZodString;
+    projectRoot: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    skill: z.ZodOptional<z.ZodString>;
+    mode: z.ZodOptional<z.ZodString>;
+    gate: z.ZodOptional<z.ZodString>;
+    lastActivity: z.ZodOptional<z.ZodString>;
+    outerSessionId: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+/** What the project-level binding readers hand back: validated, and nothing more. */
+export type SessionBinding = z.infer<typeof SessionBindingSchema>;

package/dist/services/session/session-file-schema.js

@@ -0,0 +1,68 @@
+/**
+ * Runtime schemas for the on-disk session files.
+ *
+ * WHY THIS EXISTS (S12, 2026-09-20). Six readers across `session-manager.ts`
+ * and `session-binding-bridge.ts` did `JSON.parse(readFileSync(path, 'utf8'))`
+ * and then hand-rolled `typeof data.sessionId === 'string'` checks before
+ * asserting the result with `as SessionInfo` / `as SessionMeta`. Because
+ * `JSON.parse` returns `any`, the hand-rolled check could only ever cover the
+ * one or two fields it happened to name, and the assertion claimed the rest —
+ * an unchecked cast sitting on top of a partial check. Those sites are part of
+ * the R1 root at the S12 census.
+ *
+ * The schemas below are the same checks, made total: every field the return
+ * type promises is now checked, so the callers return the parsed value
+ * directly and the `as` casts are gone. The check is STRICTER than it was —
+ * that is the point, and it is stated here rather than discovered later. A
+ * file that lacks `createdAt` or `projectRoot` used to be handed back typed as
+ * `SessionInfo`; it now reads as `null`, which is what the readers do with
+ * every other unusable file.
+ *
+ * THREE schemas, layered, because three different readers check three
+ * different things. Each one validates EXACTLY the fields its reader relies
+ * on and nothing more — a schema that demanded more than the code checks
+ * would be a new requirement smuggled in under a type, and it would show up
+ * as passing tests having to be rewritten. It did, during S12: requiring
+ * `createdAt` in the project-level binding schema broke five statusline tests
+ * that seed `{ sessionId, projectRoot }`, and no consumer reads `createdAt`
+ * from that reader. That finding is why this file has three schemas.
+ */
+import { z } from 'zod';
+/**
+ * The minimum a reader needs to LOCATE a session: a non-empty id. Equivalent
+ * to the `typeof data.sessionId === 'string' && data.sessionId.length > 0`
+ * check it replaces.
+ */
+export const SessionIdentitySchema = z.looseObject({
+    sessionId: z.string().min(1)
+});
+/**
+ * What the project-level binding readers (`readSessionFile` /
+ * `readSessionFileCanonical`, in both `session-manager.ts` and
+ * `session-binding-bridge.ts`) actually use: the id, and the `projectRoot`
+ * they compare against the caller. Equivalent to the
+ * `data.sessionId && typeof data.projectRoot === 'string'` check it replaces.
+ */
+export const SessionBindingSchema = z.looseObject({
+    sessionId: z.string().min(1),
+    projectRoot: z.string()
+});
+/**
+ * The full session record, as written by `writeSessionFile` (`.peaks/_runtime/
+ * session.json`) and `setSessionMeta` (`.peaks/_runtime/<sid>/session.json`).
+ * This is the shape the META readers promise a caller (`SessionMeta` requires
+ * `createdAt` and `projectRoot`); the optional fields are `SessionMeta`'s own.
+ * `looseObject` preserves any further key the file carries, so a reader still
+ * sees everything on disk.
+ */
+export const SessionFileSchema = z.looseObject({
+    sessionId: z.string().min(1),
+    createdAt: z.string(),
+    projectRoot: z.string(),
+    title: z.string().optional(),
+    skill: z.string().optional(),
+    mode: z.string().optional(),
+    gate: z.string().optional(),
+    lastActivity: z.string().optional(),
+    outerSessionId: z.string().optional()
+});

package/dist/services/session/session-manager.d.ts

@@ -12,12 +12,12 @@ export type SessionInfo = {
 };
 export type SessionMeta = {
     sessionId: string;
-    title?: string;
-    skill?: string;
-    mode?: string;
-    gate?: string;
+    title?: string | undefined;
+    skill?: string | undefined;
+    mode?: string | undefined;
+    gate?: string | undefined;
     createdAt: string;
-    lastActivity?: string;
+    lastActivity?: string | undefined;
     projectRoot: string;
     /**
      * The outer (harness / IDE / plugin) session id that
@@ -30,7 +30,7 @@ export type SessionMeta = {
      * have it undefined; presence-mismatch detection skips those
      * (no false positives on legacy data).
      */
-    outerSessionId?: string;
+    outerSessionId?: string | undefined;
 };
 /**
  * Drop the project-level session binding at the canonical

package/dist/services/session/session-manager.js

@@ -10,6 +10,8 @@ import { mkdir as mkdirAsync } from 'node:fs/promises';
 import { dirname, join, resolve } from 'node:path';
 import { randomBytes } from 'node:crypto';
 import { projectRootsMatch, stableRealPath } from '../../shared/path-utils.js';
+import { tryParseJson } from '../../shared/json-parse.js';
+import { SessionBindingSchema, SessionFileSchema } from './session-file-schema.js';
 import { ensureSession } from './session-binding-bridge.js';
 import { getCallerBinding, getCallerBindingFile, resolveCallerBinding } from './caller-binding-service.js';
 import { resolveCallerProjection } from './resolve-caller-id.js';
@@ -119,13 +121,14 @@ function readSessionFile(projectRoot) {
     if (!existsSync(pathToRead))
         return null;
     try {
-        const data = JSON.parse(readFileSync(pathToRead, 'utf8'));
-        if (data.sessionId && typeof data.projectRoot === 'string' && projectRootsMatch(data.projectRoot, projectRoot)) {
-            return data;
+        const parsed = tryParseJson(readFileSync(pathToRead, 'utf8'), SessionBindingSchema);
+        if (parsed.ok && projectRootsMatch(parsed.value.projectRoot, projectRoot)) {
+            return parsed.value;
         }
         return null;
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -147,16 +150,16 @@ function readSessionFileCanonical(projectRoot) {
     if (!existsSync(pathToRead))
         return null;
     try {
-        const data = JSON.parse(readFileSync(pathToRead, 'utf8'));
-        const storedRaw = typeof data.projectRoot === 'string' ? data.projectRoot : null;
-        if (data.sessionId &&
-            storedRaw !== null &&
-            resolveStoredAgainstCaller(storedRaw, projectRoot) === resolveStoredAgainstCaller(projectRoot, projectRoot)) {
-            return data;
+        const parsed = tryParseJson(readFileSync(pathToRead, 'utf8'), SessionBindingSchema);
+        if (parsed.ok &&
+            resolveStoredAgainstCaller(parsed.value.projectRoot, projectRoot) ===
+                resolveStoredAgainstCaller(projectRoot, projectRoot)) {
+            return parsed.value;
         }
         return null;
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -230,7 +233,8 @@ export function rotateSessionBinding(projectRoot) {
         try {
             unlinkSync(legacyFile);
         }
-        catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+        catch {
+            // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
             // best-effort: a stale legacy binding is not blocking
         }
     }
@@ -261,7 +265,8 @@ function clearRotatedCallerBinding(projectRoot, rotatedOutSessionId) {
     try {
         callerId = resolveCallerProjection({ projectRoot, env: process.env }).callerId;
     }
-    catch { // PEAKS_CALLER_NOT_RESOLVED → no per-caller binding exists
+    catch {
+        // PEAKS_CALLER_NOT_RESOLVED → no per-caller binding exists
         return;
     }
     const binding = getCallerBinding(projectRoot, callerId);
@@ -271,7 +276,8 @@ function clearRotatedCallerBinding(projectRoot, rotatedOutSessionId) {
     try {
         unlinkSync(getCallerBindingFile(projectRoot, callerId));
     }
-    catch { // TODO(g2): best-effort unlink — rotation must not fail on a cleanup
+    catch {
+        // TODO(g2): best-effort unlink — rotation must not fail on a cleanup
         // error (Windows EPERM). On failure the binding survives; it is stale
         // for as long as its session directory is gone, and the next rotation
         // or rebind retries the clear.
@@ -311,14 +317,11 @@ function readSessionMeta(projectRoot, sessionId) {
     if (!existsSync(metaPath))
         return null;
     try {
-        const raw = readFileSync(metaPath, 'utf8');
-        const parsed = JSON.parse(raw);
-        if (typeof parsed?.sessionId !== 'string' || parsed.sessionId.length === 0) {
-            return null;
-        }
-        return parsed;
+        const parsed = tryParseJson(readFileSync(metaPath, 'utf8'), SessionFileSchema);
+        return parsed.ok ? parsed.value : null;
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -418,14 +421,11 @@ function readSessionMetaCompat(peaksRoot, sessionId) {
     if (!existsSync(metaPath))
         return null;
     try {
-        const raw = readFileSync(metaPath, 'utf8');
-        const parsed = JSON.parse(raw);
-        if (typeof parsed?.sessionId !== 'string' || parsed.sessionId.length === 0) {
-            return null;
-        }
-        return parsed;
+        const parsed = tryParseJson(readFileSync(metaPath, 'utf8'), SessionFileSchema);
+        return parsed.ok ? parsed.value : null;
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return null;
     }
 }
@@ -524,7 +524,8 @@ export function resolveCallerBoundSession(projectRoot) {
         }
         return { sessionId: null, staleSessionId: null };
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         return { sessionId: null, staleSessionId: null };
     }
 }

package/dist/services/session/session-resume-service.js

@@ -64,7 +64,8 @@ export function buildResumeContext(options) {
             relativeAgeLabel = formatRelativeAge(ageMs);
         }
     }
-    catch { // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
+    catch {
+        // TODO(g2): legacy silent catch — grace: 1 minor release (v2.14.0)
         // leave defaults
     }
     const lines = [];

package/dist/services/share/bundle-format-constants.d.ts

@@ -0,0 +1,85 @@
+/**
+ * peaks.bundle/1 — format constants and schema-version literals (wave-5 hoist).
+ *
+ * The declaration cluster that used to open `bundle-types.ts` — the format
+ * constant, the major/minor version consts, the per-asset schema-version
+ * literals, the two small mapping schemas built on them and the bundle-kind
+ * enumeration — moved here VERBATIM so `bundle-types.ts` stays under the
+ * 300-line cap. The manifest contract, and every hard rule enforced on the
+ * on-the-wire shape, stay in `bundle-types.ts`.
+ *
+ * This module imports only `zod`. It MUST NOT import `bundle-types.js`: the
+ * manifest schema there evaluates `z.literal(PEAKS_BUNDLE_FORMAT_CONSTANT)`
+ * while its module body runs, so a back-import would be a TDZ crash, not a
+ * lint warning. `bundle-types.ts` re-exports every name below, so the public
+ * import path does not move.
+ */
+import { z } from 'zod';
+/**
+ * The on-the-wire format constant, pinned to the literal
+ * `"peaks.bundle/1"`. The CLI is the only writer — see `bundle-writer.ts`.
+ * A future format change requires a major-version bump + a new writer.
+ */
+export declare const PEAKS_BUNDLE_FORMAT_CONSTANT: "peaks.bundle/1";
+/**
+ * The required `format_version_major` for any current receiver.
+ * Bumped only on a breaking schema change. The reader throws when
+ * the manifest declares any value other than `1`.
+ */
+export declare const PEAKS_BUNDLE_FORMAT_VERSION_MAJOR: 1;
+/**
+ * Default `format_version_minor`. Major-compatible minor bumps emit
+ * a soft warning at read time; they never block.
+ */
+export declare const PEAKS_BUNDLE_DEFAULT_MINOR_VERSION: 0;
+/**
+ * The cross-cutting schema literals a bundle is allowed to declare.
+ * Each value must match the canonical Zod `literal(...)` literal in
+ * the corresponding type module. Used for the
+ * `SchemaVersionsMapping` enumeration below.
+ */
+export declare const PEAKS_BUNDLE_SCHEMA_VERSIONS: {
+    readonly loop: "peaks.loop/1";
+    readonly bee: "peaks.bee/1";
+    readonly loop_bee_relation: "peaks.loop-bee-relation/1";
+    readonly crystallization: "peaks.crystallization/1";
+};
+export type PeaksBundleSchemaVersionKey = keyof typeof PEAKS_BUNDLE_SCHEMA_VERSIONS;
+/**
+ * Schema-versions mapping. The writer writes the canonical literal
+ * for each asset kind it includes; the reader checks every key for
+ * presence (and that the value matches the canonical literal).
+ *
+ * `.strict()` refuses unknown keys; `.refine(...)` enforces that
+ * each value matches its canonical literal.
+ */
+export declare const SchemaVersionsMappingSchema: z.ZodObject<{
+    loop: z.ZodLiteral<"peaks.loop/1">;
+    bee: z.ZodLiteral<"peaks.bee/1">;
+    loop_bee_relation: z.ZodLiteral<"peaks.loop-bee-relation/1">;
+    crystallization: z.ZodLiteral<"peaks.crystallization/1">;
+}, z.core.$strict>;
+export type SchemaVersionsMapping = z.infer<typeof SchemaVersionsMappingSchema>;
+/**
+ * The bundle explicitly excludes private run-state, the user's
+ * personal memory directory, and raw `state.db` rows. The
+ * `ExclusionManifestSchema` is what the writer stamps into the
+ * manifest; the reader uses it as a self-declaration (the writer is
+ * the only place that can leak those payloads, but the read-time
+ * stamp lets the receiver confirm the source understood the
+ * exclusion rules).
+ */
+export declare const ExclusionManifestSchema: z.ZodObject<{
+    private_run_state: z.ZodLiteral<"excluded">;
+    personal_memory: z.ZodLiteral<"excluded">;
+    state_db_rows: z.ZodLiteral<"excluded">;
+}, z.core.$strict>;
+export type ExclusionManifest = z.infer<typeof ExclusionManifestSchema>;
+/**
+ * Bundle kind. A bundle is anchored on exactly one asset: either a
+ * `loop_release` (and its main bee + supporting bees) or a single
+ * `bee_release` (loop-scoped relations may follow but are not
+ * required).
+ */
+export declare const PEAKS_BUNDLE_KINDS: readonly ["loop", "bee"];
+export type PeaksBundleKind = (typeof PEAKS_BUNDLE_KINDS)[number];

package/dist/services/share/bundle-format-constants.js

@@ -0,0 +1,100 @@
+/**
+ * peaks.bundle/1 — format constants and schema-version literals (wave-5 hoist).
+ *
+ * The declaration cluster that used to open `bundle-types.ts` — the format
+ * constant, the major/minor version consts, the per-asset schema-version
+ * literals, the two small mapping schemas built on them and the bundle-kind
+ * enumeration — moved here VERBATIM so `bundle-types.ts` stays under the
+ * 300-line cap. The manifest contract, and every hard rule enforced on the
+ * on-the-wire shape, stay in `bundle-types.ts`.
+ *
+ * This module imports only `zod`. It MUST NOT import `bundle-types.js`: the
+ * manifest schema there evaluates `z.literal(PEAKS_BUNDLE_FORMAT_CONSTANT)`
+ * while its module body runs, so a back-import would be a TDZ crash, not a
+ * lint warning. `bundle-types.ts` re-exports every name below, so the public
+ * import path does not move.
+ */
+import { z } from 'zod';
+/* ---------------------------------------------------------------------- */
+/* Format constant + version                                                */
+/* ---------------------------------------------------------------------- */
+/**
+ * The on-the-wire format constant, pinned to the literal
+ * `"peaks.bundle/1"`. The CLI is the only writer — see `bundle-writer.ts`.
+ * A future format change requires a major-version bump + a new writer.
+ */
+export const PEAKS_BUNDLE_FORMAT_CONSTANT = 'peaks.bundle/1';
+/**
+ * The required `format_version_major` for any current receiver.
+ * Bumped only on a breaking schema change. The reader throws when
+ * the manifest declares any value other than `1`.
+ */
+export const PEAKS_BUNDLE_FORMAT_VERSION_MAJOR = 1;
+/**
+ * Default `format_version_minor`. Major-compatible minor bumps emit
+ * a soft warning at read time; they never block.
+ */
+export const PEAKS_BUNDLE_DEFAULT_MINOR_VERSION = 0;
+/* ---------------------------------------------------------------------- */
+/* Schema-version cross-reference (per asset table)                         */
+/* ---------------------------------------------------------------------- */
+/**
+ * The cross-cutting schema literals a bundle is allowed to declare.
+ * Each value must match the canonical Zod `literal(...)` literal in
+ * the corresponding type module. Used for the
+ * `SchemaVersionsMapping` enumeration below.
+ */
+export const PEAKS_BUNDLE_SCHEMA_VERSIONS = {
+    loop: 'peaks.loop/1',
+    bee: 'peaks.bee/1',
+    loop_bee_relation: 'peaks.loop-bee-relation/1',
+    crystallization: 'peaks.crystallization/1'
+};
+/* ---------------------------------------------------------------------- */
+/* Schema-versions mapping — spec §7A.2                                     */
+/* ---------------------------------------------------------------------- */
+/**
+ * Schema-versions mapping. The writer writes the canonical literal
+ * for each asset kind it includes; the reader checks every key for
+ * presence (and that the value matches the canonical literal).
+ *
+ * `.strict()` refuses unknown keys; `.refine(...)` enforces that
+ * each value matches its canonical literal.
+ */
+export const SchemaVersionsMappingSchema = z
+    .object({
+    loop: z.literal(PEAKS_BUNDLE_SCHEMA_VERSIONS.loop),
+    bee: z.literal(PEAKS_BUNDLE_SCHEMA_VERSIONS.bee),
+    loop_bee_relation: z.literal(PEAKS_BUNDLE_SCHEMA_VERSIONS.loop_bee_relation),
+    crystallization: z.literal(PEAKS_BUNDLE_SCHEMA_VERSIONS.crystallization)
+})
+    .strict();
+/* ---------------------------------------------------------------------- */
+/* Exclusion manifest — the explicit excludes per spec §7A.2               */
+/* ---------------------------------------------------------------------- */
+/**
+ * The bundle explicitly excludes private run-state, the user's
+ * personal memory directory, and raw `state.db` rows. The
+ * `ExclusionManifestSchema` is what the writer stamps into the
+ * manifest; the reader uses it as a self-declaration (the writer is
+ * the only place that can leak those payloads, but the read-time
+ * stamp lets the receiver confirm the source understood the
+ * exclusion rules).
+ */
+export const ExclusionManifestSchema = z
+    .object({
+    private_run_state: z.literal('excluded'),
+    personal_memory: z.literal('excluded'),
+    state_db_rows: z.literal('excluded')
+})
+    .strict();
+/* ---------------------------------------------------------------------- */
+/* Bundle kind — which asset the bundle is anchored on                     */
+/* ---------------------------------------------------------------------- */
+/**
+ * Bundle kind. A bundle is anchored on exactly one asset: either a
+ * `loop_release` (and its main bee + supporting bees) or a single
+ * `bee_release` (loop-scoped relations may follow but are not
+ * required).
+ */
+export const PEAKS_BUNDLE_KINDS = ['loop', 'bee'];