peaks-loop 4.0.54 → 4.1.1

package/dist/services/comments/citation-rules.js

@@ -0,0 +1,241 @@
+/**
+ * What makes a backtick span a claim about this repository's file tree.
+ *
+ * These are the candidate rules, shared by the two readers of the same judgement:
+ * the comment classifier (`comment-hygiene.ts`) and, by literal, the repository's
+ * citation guard (`tests/unit/standards/repo-citation-integrity.test.ts`).
+ * `tests/unit/comments/citation-parity.test.ts` pins that the two spellings agree —
+ * a shape rule restated in a second place and then drifting is the defect this
+ * repository keeps documenting for itself.
+ *
+ * The rules are exclusions, and every one of them exists because of a measured
+ * false positive rather than a taste for tidiness. See `isCitationCandidate`.
+ */
+/** Backtick span that has at least one `/` — a path citation, not a mention. */
+export const PATH_SHAPED = /^[A-Za-z0-9_.@-]+(?:\/[A-Za-z0-9_.@-]+)+$/;
+/** First segments that make a span repo-relative rather than document-relative. */
+export const REPO_ANCHORS = /^(\.peaks|\.claude|\.github|src|tests|docs|scripts|skills|packages|bin|openspec|contracts)\//;
+/** `path.ts:14-17` — strip before judging; the FILE must exist, the line may move. */
+export const LINE_SUFFIX = /:\d+(?:-\d+)?$/;
+/**
+ * Session-runtime dirs. A path starting with one of these is a runtime artifact
+ * written under `.peaks/_runtime/<sessionId>/` and abbreviated in prose; it is
+ * not a repo file, and reporting it as missing is how a guard starts being
+ * ignored. Same exemption list the citation guard carries.
+ */
+export const SESSION_WORKSPACE_DIRS = new Set([
+    'prd',
+    'rd',
+    'qa',
+    'sc',
+    'txt',
+    'audit',
+    'ui',
+    'session',
+    'system'
+]);
+/** `<placeholder>`, an ellipsis, a glob segment — illustrative, not asserted. */
+export const SYNTHETIC_SEGMENT = /[<>*…]|etc\.$/;
+/**
+ * A segment that is exactly an ASCII ellipsis names a path *family*
+ * (`src/...`, `openspec/changes/...`), not a file. `SYNTHETIC_SEGMENT` above
+ * catches the Unicode `…` and the glob `*`; this catches `...`, which its
+ * character class admits.
+ */
+export const ELLIPSIS_SEGMENT = /(?:^|\/)\.\.\.(?:$|\/)/;
+/**
+ * The bare-`*.test.ts`-filename shape, written once. A filename carries no slash,
+ * so `PATH_SHAPED` cannot see it; this is the second shape a candidate claim can
+ * take, and the guard reads the same character classes.
+ */
+const BARE_FILENAME_NAME = String.raw `[A-Za-z0-9_][A-Za-z0-9_.-]*-[A-Za-z0-9_.-]*\.test\.ts`;
+export const BARE_TEST_FILENAME_SHAPE = new RegExp(`^${BARE_FILENAME_NAME}$`);
+/**
+ * Runtime state the CLI writes into a project. In a checkout of THIS repository
+ * these are absent by design — they are produced in the consuming project at run
+ * time — so a comment naming them makes no claim about this tree.
+ */
+export const RUNTIME_STATE_PREFIXES = [
+    '.peaks/_runtime/',
+    '.peaks/cron/',
+    '.peaks/cache/',
+    // Both are gitignored at the repository root and written per run: `_dogfood/` by
+    // the dogfood harness, `_sub_agents/` by `peaks sub-agent dispatch`.
+    '.peaks/_dogfood/',
+    '.peaks/_sub_agents/'
+];
+/**
+ * A file sitting flat in a project's `.peaks/` root is state the CLI writes there
+ * at run time — `.peaks/fork-state.json`, `.peaks/polyrepo.json`,
+ * `.peaks/role-registry.json`, `.peaks/.gitignore`, `.peaks/smoke-paths.json`.
+ *
+ * What this repository's own `.peaks/` commits is directories (`standards/`,
+ * `docs/`, `lint/`, `memory/`) plus four flat files, every one of which is
+ * present, so a citation to a tracked flat file resolves and this rule never fires
+ * for it. The shape is trusted over an entry list because an entry list has to
+ * grow with every runtime file the CLI adds — and the cost is stated: a future flat
+ * `.peaks/<file>` that is committed and later deleted would be hidden here.
+ * Repository convention is that top-level `.peaks/` entries are session or decision
+ * state, and a citation of that shape describes the consuming project.
+ */
+export const RUNTIME_STATE_ROOT_FILE = /^\.peaks\/[^/]+$/;
+/** Stems that name a shape rather than a file (`src/services/x/y.ts`, `foo.ts`). */
+export const SYNTHETIC_STEMS = new Set([
+    'x',
+    'y',
+    'z',
+    'foo',
+    'bar',
+    'baz',
+    'qux',
+    'example',
+    'sample',
+    'dummy',
+    'placeholder'
+]);
+/**
+ * Text that introduces a path as a shape to copy into the consumer's own
+ * repository, rather than a claim that this tree contains it.
+ */
+export const ILLUSTRATION_CUE = /(?:e\.g\.|i\.e\.|for example|such as|reference shape|Example:)\s*\(?\s*$/i;
+/**
+ * A sentence that reasons about what a path *would* do, rather than reporting
+ * that a file is there.
+ *
+ * Two measured shapes, both read from the whole line because the cue sits on
+ * either side of the span:
+ *
+ *   - a matching rule illustrated with made-up operands —
+ *     `E.g. \`src/services/login\` should match \`src/services/login/handler.ts\``.
+ *     Neither path is in any repository; the line is about the glob semantics.
+ *     The `ILLUSTRATION_CUE` above cannot reach the second operand, because the
+ *     cue must sit immediately before the span to fire, and here it does not.
+ *   - a deliberate counterexample — `Written into \`.peaks/.gitignore\` they
+ *     resolved to \`…\` and \`…\` — matching nothing, in every project`. The comment
+ *     names two paths precisely because they match nothing; reporting them as
+ *     missing files asks the reader to fix a bug the text is describing.
+ *
+ * The list is modal phrases only, and the boundary is load-bearing: the real
+ * finding at `src/services/workspace/claude-settings-template.ts:90` asserts that a
+ * handler "invokes the shipped script" by path, uses no modal, and stays reported —
+ * the script is not in the tree. Bare `resolves to` was tried and dropped from the
+ * list for the opposite reason: it also appears in live assertions about files that
+ * DO exist, and a cue that clears those is a cue that hides debt.
+ *
+ * (This rule's own header was reported by the scan it documents — the sentence
+ * above quoted the missing script's path verbatim, and quoting a dead path in prose
+ * about a dead path is still a dead path. Cited by file and line now.)
+ */
+export const HYPOTHETICAL_CUE = /\b(?:should match|would (?:match|resolve|be|land|fail)|matching nothing|matched nothing|resolved to|do(?:es)? not match|never matched|hypothetical|counterexample|in that case)\b/i;
+/**
+ * Documented runtime paths that are legitimately absent from a checkout. Each
+ * entry needs a reason; an allowlist without one is how a guard dies.
+ */
+export const OPTIONAL_RUNTIME_PATHS = new Set([
+    // Legacy fallback location of the active-skill marker; the canonical path is
+    // `.peaks/_runtime/active-skill.json`, so this dotfile is absent by design.
+    '.peaks/.active-skill.json',
+    // Legacy back-compat location of the session binding file, read by
+    // `peaks session` when the canonical `.peaks/_runtime/session.json` is gone.
+    '.peaks/.session.json'
+]);
+/**
+ * The second resolution origin, made explicit: an unanchored span is a SIBLING
+ * reference, so its parent directory must exist next to the citing file — and only
+ * there.
+ *
+ * The repo root is deliberately not an origin for an unanchored span: writing a
+ * repo-root path is exactly what the anchors are for. The walk is narrower than the
+ * citation guard's every-ancestor version, and the reason is measured: with every
+ * ancestor tried, `hooks/hooks.json` cited from
+ * `src/services/doctor/doctor-service/checks/` was adopted by `src/services/hooks/`
+ * four levels up, and `memory/index.json` by `src/services/memory/` — 16 findings
+ * of paths inside installed packages and under
+ * `.peaks/_runtime/<sessionId>/`, reported as missing repository files. A
+ * sibling-only reading loses nothing real: a deleted file cited by the directory it
+ * lived in still has that parent dir, and is still reported.
+ */
+export function isFileRelative(citation, ctx) {
+    const parent = citation.slice(0, citation.lastIndexOf('/'));
+    const cut = ctx.file.lastIndexOf('/');
+    if (cut === -1)
+        return false;
+    return ctx.dirExists(`${ctx.file.slice(0, cut)}/${parent}`);
+}
+/**
+ * Spans that name something outside this repository: a package, a GitHub Action,
+ * runtime state the CLI writes in the consuming project, a path *family*, or the
+ * `./` form a document uses for a project it is installed into.
+ */
+function namesSomethingElse(span) {
+    if (span.includes('@'))
+        return true; // npm package / GitHub-Action refs
+    if (RUNTIME_STATE_PREFIXES.some((prefix) => span.startsWith(prefix)))
+        return true;
+    if (RUNTIME_STATE_ROOT_FILE.test(span))
+        return true;
+    if (OPTIONAL_RUNTIME_PATHS.has(span))
+        return true;
+    if (ELLIPSIS_SEGMENT.test(span))
+        return true;
+    // A repo path in this tree is written from the repo root; `./x` is where the
+    // CONSUMING project must not put a file.
+    return span.startsWith('./');
+}
+/**
+ * Spans that are template text or an illustration rather than an assertion: wrapped
+ * in a `<…>` fill-in, introduced by an example cue, or built from stems that exist
+ * only to show a shape.
+ */
+function illustratesRatherThanAsserts(citation, line, span) {
+    const before = line.slice(0, citation.from);
+    const after = line.slice(citation.to);
+    // Inside a `<…>` fill-in the span is template text meant to be replaced.
+    if (before.lastIndexOf('<') > before.lastIndexOf('>') && after.includes('>'))
+        return true;
+    if (ILLUSTRATION_CUE.test(before))
+        return true;
+    const basename = span.slice(span.lastIndexOf('/') + 1);
+    const dot = basename.indexOf('.');
+    return SYNTHETIC_STEMS.has(dot === -1 ? basename : basename.slice(0, dot));
+}
+/**
+ * Is this span a claim about the working tree at all?
+ *
+ * These are the candidate exclusions the repository's citation guard applies to
+ * markdown and to `scripts/` comments, transplanted to source comments —
+ * deliberately the SAME rules, not a second definition of "citation". Porting them
+ * was the answer to a measurement: 188 findings for roughly 20 real dead
+ * references, because a comment that gives a shape as an example (`a/b`,
+ * `pages/api`), names a path inside an installed package (`hooks/hooks.json`), or
+ * documents runtime state the CLI writes in the user's project
+ * (`.peaks/cron/schedule.json`) all read as "missing file" to a probe that only
+ * knows `exists`.
+ *
+ * The direction to preserve is the guard's stated invariant: these must never hide
+ * an ANCHORED citation. A path beginning `src/`, `tests/`, `docs/`, `skills/`,
+ * `scripts/`, `packages/` or `.peaks/` claims a location in this repository, and
+ * nothing below lets it through unread.
+ *
+ * `namesNoDirectory` is set only by the bare-`*.test.ts`-filename reading, whose own
+ * pattern has already established the filename shape: a filename names no
+ * directory, so it cannot satisfy `PATH_SHAPED`, and it has no parent directory to
+ * read as a sibling.
+ */
+export function isCitationCandidate(citation, line, ctx, namesNoDirectory = false) {
+    const span = citation.span;
+    if (!(namesNoDirectory ? BARE_TEST_FILENAME_SHAPE.test(span) : PATH_SHAPED.test(span)))
+        return false;
+    if (namesSomethingElse(span))
+        return false;
+    if (illustratesRatherThanAsserts(citation, line, span))
+        return false;
+    // The line reasons about what a path would do; it does not claim one is there.
+    if (HYPOTHETICAL_CUE.test(line))
+        return false;
+    if (REPO_ANCHORS.test(span))
+        return true;
+    if (namesNoDirectory)
+        return true;
+    return isFileRelative(span, ctx);
+}

package/dist/services/comments/comment-audit.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Project-wide comment scan: what the classifier finds across the enforced scope.
+ *
+ * Scope follows the repository's existing lint boundary — `src` plus each
+ * workspace package's `src`, as `.husky/lint-scope.mjs` defines it — rather than
+ * a second definition of "product code" written here. Two names for one rule is
+ * the failure the parity test in `tests/unit/comments/citation-parity.test.ts`
+ * exists to prevent.
+ *
+ * This is the read side only. Nothing here writes a file: the counts it produces
+ * are the numbers a ratchet would start from, and a ratchet seeded from a scan
+ * nobody has spot-checked is a gate that will be trained away the first time it
+ * refuses a legitimate change.
+ */
+import { type CommentFileSummary, type CommentFinding, type CommentFindingKind } from './comment-hygiene.js';
+/** Product-code directories, in report order. */
+export declare const COMMENT_SCAN_SCOPE: string[];
+/**
+ * Every source file under one scope dir, repo-relative, sorted.
+ *
+ * The relative form is not cosmetic: `citationResolves` tries a citation with no
+ * repo anchor against the citing file's own directory and its ancestors, so an
+ * absolute path here turns every sibling reference into a false "missing file".
+ * `relative()` + separator normalisation is what keeps that resolution honest on
+ * a Windows host.
+ */
+export declare function scopeFiles(projectRoot: string, scopeDir: string): string[];
+export type CommentAuditResult = {
+    readonly scannedFiles: number;
+    /** Files the caller named. Equal to `scannedFiles` unless one was unreadable. */
+    readonly askedFiles: number;
+    readonly commentLines: number;
+    readonly deadReferences: number;
+    readonly narrative: number;
+    readonly files: readonly CommentFileSummary[];
+    readonly findings: readonly CommentFinding[];
+};
+export type CommentAuditOptions = {
+    readonly projectRoot: string;
+    /** Narrow to one category, the way the prune will be able to. */
+    readonly kind?: CommentFindingKind;
+    /** Cap the finding list; totals are never capped. */
+    readonly limit?: number;
+    /**
+     * Scan EXACTLY these repo-relative files instead of walking the scope dirs.
+     *
+     * A ratchet row must be measured over the population its callers agree to, and a
+     * walk is not a scope: the walk sees untracked files the index never heard of and
+     * misses tracked files the disk dropped, so a row measured over a walk can move
+     * while nobody edits source. `git ls-files` filtered by the published scope rule is
+     * that population — the same list the eslint, prettier and silent-warning legs
+     * share (rid `2026-10-03-silent-warning-scope`).
+     */
+    readonly files?: readonly string[];
+};
+/** Scan the enforced scope. Synchronous by design: it is a CLI read path. */
+export declare function auditComments(options: CommentAuditOptions): CommentAuditResult;

package/dist/services/comments/comment-audit.js

@@ -0,0 +1,100 @@
+/**
+ * Project-wide comment scan: what the classifier finds across the enforced scope.
+ *
+ * Scope follows the repository's existing lint boundary — `src` plus each
+ * workspace package's `src`, as `.husky/lint-scope.mjs` defines it — rather than
+ * a second definition of "product code" written here. Two names for one rule is
+ * the failure the parity test in `tests/unit/comments/citation-parity.test.ts`
+ * exists to prevent.
+ *
+ * This is the read side only. Nothing here writes a file: the counts it produces
+ * are the numbers a ratchet would start from, and a ratchet seeded from a scan
+ * nobody has spot-checked is a gate that will be trained away the first time it
+ * refuses a legitimate change.
+ */
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join, relative, resolve } from 'node:path';
+import { scanComments, summarize } from './comment-hygiene.js';
+import { createFsProbe, createRepoProbe } from './repo-path-probe.js';
+/** Product-code directories, in report order. */
+export const COMMENT_SCAN_SCOPE = ['src', join('packages', 'peaks-loop-mut', 'src')];
+const SOURCE_SUFFIXES = ['.ts', '.tsx', '.mts', '.cts'];
+function isSourceFile(name) {
+    return SOURCE_SUFFIXES.some((suffix) => name.endsWith(suffix));
+}
+/**
+ * Every source file under one scope dir, repo-relative, sorted.
+ *
+ * The relative form is not cosmetic: `citationResolves` tries a citation with no
+ * repo anchor against the citing file's own directory and its ancestors, so an
+ * absolute path here turns every sibling reference into a false "missing file".
+ * `relative()` + separator normalisation is what keeps that resolution honest on
+ * a Windows host.
+ */
+export function scopeFiles(projectRoot, scopeDir) {
+    const root = resolve(projectRoot, scopeDir);
+    const base = resolve(projectRoot);
+    if (!existsSync(root))
+        return [];
+    const out = [];
+    const walk = (absDir) => {
+        for (const entry of readdirSync(absDir, { withFileTypes: true })) {
+            const abs = join(absDir, entry.name);
+            if (entry.isDirectory()) {
+                walk(abs);
+            }
+            else if (isSourceFile(entry.name)) {
+                out.push(relative(base, abs).replace(/\\/g, '/'));
+            }
+        }
+    };
+    walk(root);
+    return out.sort();
+}
+function totalOf(files, key) {
+    return files.reduce((sum, file) => sum + file[key], 0);
+}
+/** Scan the enforced scope. Synchronous by design: it is a CLI read path. */
+export function auditComments(options) {
+    const { projectRoot } = options;
+    const exists = createRepoProbe(projectRoot);
+    const installed = createFsProbe(projectRoot);
+    const kinds = options.kind === undefined ? undefined : [options.kind];
+    const population = options.files ?? scopePopulation(projectRoot);
+    const findings = [];
+    const summaries = [];
+    // Files actually READ, not files handed in. A tracked path the disk no longer
+    // carries has to show up as `scanned < asked`, which is how a leg refuses instead
+    // of printing a count measured over a population nobody agreed to.
+    let scanned = 0;
+    for (const file of population) {
+        if (!existsSync(resolve(projectRoot, file)))
+            continue;
+        scanned += 1;
+        const source = readFileSync(resolve(projectRoot, file), 'utf8');
+        const input = { file, source };
+        const found = scanComments(input, {
+            exists,
+            installed,
+            ...(kinds === undefined ? {} : { kinds })
+        });
+        if (found.length === 0)
+            continue;
+        summaries.push(summarize(input, found));
+        findings.push(...found);
+    }
+    const capped = options.limit === undefined ? findings : findings.slice(0, options.limit);
+    return {
+        scannedFiles: scanned,
+        askedFiles: population.length,
+        commentLines: summaries.reduce((n, file) => n + file.commentLines, 0),
+        deadReferences: totalOf(summaries, 'deadReferences'),
+        narrative: totalOf(summaries, 'narrative'),
+        files: summaries.sort((a, b) => b.deadReferences + b.narrative - (a.deadReferences + a.narrative)),
+        findings: capped
+    };
+}
+/** The walked population, used only when a caller did not hand an explicit list. */
+function scopePopulation(projectRoot) {
+    return COMMENT_SCAN_SCOPE.flatMap((scopeDir) => scopeFiles(projectRoot, scopeDir));
+}

package/dist/services/comments/comment-citations.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Comment-only views of a source file, and whether a citation it makes holds.
+ *
+ * The shape and candidate rules live in `citation-rules.ts`, shared with the
+ * repository's citation guard; this module holds the two things that rule needs in
+ * order to be applied: the comment lines of a file, and the probes that answer
+ * "does this path resolve here".
+ *
+ * Deliberately NOT `ts.getLeadingCommentRanges`:
+ * `src/services/qa/bdd-test-style-verifier.ts` records that the API returns zero
+ * ranges for comment-only blocks, which would silently read a header comment as no
+ * comment at all. Line scanning preserves both order and line numbers, which the
+ * worklist and the prune both need.
+ */
+import { type Citation } from './citation-rules.js';
+/** One source line, with its 1-based number, as the classifier sees it. */
+export type CommentLine = {
+    readonly line: number;
+    readonly text: string;
+};
+/**
+ * The comment lines of a file: full-line comments, plus the trailing comment of a
+ * code line. Non-comment lines are omitted but their numbers survive, so a report
+ * can point at the code a comment is attached to.
+ */
+export declare function commentLines(source: string): CommentLine[];
+/**
+ * The path-shaped backtick spans in a line, in order, with their bounds kept.
+ *
+ * The bounds are not decoration: two of the candidate rules read the text OUTSIDE
+ * the span — an illustration cue sits immediately before it, a `<…>` fill-in wraps
+ * it — so a caller that discards positions cannot apply them.
+ */
+export declare function citations(text: string): Citation[];
+/** Every path-shaped span in a line, without its bounds. */
+export declare function citedPaths(text: string): string[];
+/**
+ * The workspace package a citing file belongs to, or null at the repository root.
+ *
+ * In a pnpm workspace, `src/x.ts` written inside `packages/<name>/src/` names that
+ * package's own file, not a repository-root one: three comments in this repository cite
+ * `packages/peaks-loop-internal-runtime/src/status-protocol.ts` and
+ * `packages/peaks-loop-shared-channel/src/index.ts` by their package-relative spelling,
+ * and both files exist. Treating those as dead references would seed a ratchet with
+ * findings that refuse the next honest package-internal citation, so the package root is
+ * an origin — for a citing file that is itself inside a package, and never for a
+ * top-level one.
+ */
+export declare function packageRootOf(citingFileRel: string): string | null;
+/**
+ * Does this path-shaped citation resolve anywhere it is allowed to resolve?
+ *
+ * `installed` must be a filesystem-only probe, not the ignore-widened one:
+ * `node_modules` is itself in `.gitignore`, so an ignore-aware answer here is
+ * "yes, installed" for every first segment, and the whole dead-reference count
+ * collapses to zero while looking perfectly healthy. Measured, not theorised.
+ */
+export declare function citationResolves(citation: string, citingFileRel: string, exists: (relPath: string) => boolean, installed?: (relPath: string) => boolean): boolean;
+/** The default existence probe, against a real working tree. */
+export declare function treeExists(repoRoot: string): (relPath: string) => boolean;

package/dist/services/comments/comment-citations.js

@@ -0,0 +1,186 @@
+/**
+ * Comment-only views of a source file, and whether a citation it makes holds.
+ *
+ * The shape and candidate rules live in `citation-rules.ts`, shared with the
+ * repository's citation guard; this module holds the two things that rule needs in
+ * order to be applied: the comment lines of a file, and the probes that answer
+ * "does this path resolve here".
+ *
+ * Deliberately NOT `ts.getLeadingCommentRanges`:
+ * `src/services/qa/bdd-test-style-verifier.ts` records that the API returns zero
+ * ranges for comment-only blocks, which would silently read a header comment as no
+ * comment at all. Line scanning preserves both order and line numbers, which the
+ * worklist and the prune both need.
+ */
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { LINE_SUFFIX, PATH_SHAPED, REPO_ANCHORS, SESSION_WORKSPACE_DIRS, SYNTHETIC_SEGMENT } from './citation-rules.js';
+/** Repo-relative paths are POSIX even on a Windows host, or every lookup below
+ *  compares a `src\a.ts` against the forward-slash keys and the answer is always "no". */
+function toPosix(path) {
+    return path.replace(/\\/g, '/');
+}
+/**
+ * A `//` in a line of code is a trailing comment unless the text before it is
+ * inside a string literal or a URL scheme. The second clause matters because
+ * `"https://…"` is a line every repository writes, and reading it as a comment
+ * invents a line the author never meant.
+ */
+function trailingComment(raw) {
+    const at = raw.indexOf('//');
+    if (at <= 0)
+        return '';
+    const before = raw.slice(0, at);
+    if (before.endsWith(':'))
+        return '';
+    if ((before.match(/["']/g) ?? []).length % 2 !== 0)
+        return '';
+    return raw.slice(at);
+}
+/**
+ * The comment lines of a file: full-line comments, plus the trailing comment of a
+ * code line. Non-comment lines are omitted but their numbers survive, so a report
+ * can point at the code a comment is attached to.
+ */
+export function commentLines(source) {
+    const out = [];
+    source.split(/\r?\n/).forEach((raw, index) => {
+        const line = index + 1;
+        const trimmed = raw.trim();
+        if (trimmed.startsWith('//') ||
+            trimmed.startsWith('/*') ||
+            trimmed.startsWith('/**') ||
+            trimmed.startsWith('*')) {
+            out.push({ line, text: raw });
+            return;
+        }
+        const comment = trailingComment(raw);
+        if (comment.length > 0) {
+            out.push({ line, text: comment });
+        }
+    });
+    return out;
+}
+/**
+ * The path-shaped backtick spans in a line, in order, with their bounds kept.
+ *
+ * The bounds are not decoration: two of the candidate rules read the text OUTSIDE
+ * the span — an illustration cue sits immediately before it, a `<…>` fill-in wraps
+ * it — so a caller that discards positions cannot apply them.
+ */
+export function citations(text) {
+    const found = [];
+    for (const match of text.matchAll(/`([^`\s]+)`/g)) {
+        const span = match[1] ?? '';
+        const from = match.index ?? 0;
+        if (PATH_SHAPED.test(span)) {
+            found.push({ span, from, to: from + span.length + 2 });
+        }
+    }
+    return found;
+}
+/** Every path-shaped span in a line, without its bounds. */
+export function citedPaths(text) {
+    return citations(text).map((citation) => citation.span);
+}
+/**
+ * Is this span a module specifier rather than a repo path? `peaks-loop-shared/result`
+ * in prose names an import, and no rule about files applies to it. Decided through
+ * the dependency tree instead of an allowlist: the first segment is checked against
+ * installed packages, so a new dependency needs no edit here. An allowlist of
+ * today's package names would turn every future one into a false finding — and a
+ * rule that is wrong the moment the repository grows is a rule that gets widened
+ * until it stops meaning anything.
+ */
+function isInstalledPackageName(head, second, installed) {
+    const name = head.startsWith('@') && second !== undefined ? `${head}/${second}` : head;
+    return installed(`node_modules/${name}`);
+}
+/**
+ * The two shapes a citation may clear without touching the tree: an installed
+ * package's module specifier, and a session-runtime dir abbreviated in prose.
+ */
+function resolvesOutsideTheTree(stripped, exists, installed) {
+    const [head, second] = stripped.split('/');
+    if (head === undefined)
+        return false;
+    if (isInstalledPackageName(head, second, installed))
+        return true;
+    return SESSION_WORKSPACE_DIRS.has(head) && !REPO_ANCHORS.test(stripped);
+}
+/**
+ * The workspace package a citing file belongs to, or null at the repository root.
+ *
+ * In a pnpm workspace, `src/x.ts` written inside `packages/<name>/src/` names that
+ * package's own file, not a repository-root one: three comments in this repository cite
+ * `packages/peaks-loop-internal-runtime/src/status-protocol.ts` and
+ * `packages/peaks-loop-shared-channel/src/index.ts` by their package-relative spelling,
+ * and both files exist. Treating those as dead references would seed a ratchet with
+ * findings that refuse the next honest package-internal citation, so the package root is
+ * an origin — for a citing file that is itself inside a package, and never for a
+ * top-level one.
+ */
+export function packageRootOf(citingFileRel) {
+    const segments = citingFileRel.split('/');
+    if (segments[0] !== 'packages' || segments[1] === undefined)
+        return null;
+    return `packages/${segments[1]}`;
+}
+/**
+ * Does the citation point at a file inside the citing file's OWN workspace package?
+ *
+ * `join` is POSIX-normalised on the way through, because a `packages\alpha/src/x.ts`
+ * key matches nothing on the host this repository is developed on.
+ */
+function resolvesInOwnPackage(stripped, citingFileRel, exists) {
+    const pkg = packageRootOf(citingFileRel);
+    return pkg !== null && exists(toPosix(join(pkg, stripped)));
+}
+/**
+ * The two origins a repo-anchored citation may be satisfied at: the repository root,
+ * or the workspace package the citing file itself lives in.
+ *
+ * Extracted because `citationResolves` is at the complexity ceiling the shipped rule
+ * sets, and an inlined `||` there would have been the second branch this file cannot
+ * afford — a limit that forces a helper out is the limit working, not the limit being
+ * in the way.
+ */
+function resolvesAtARootOrigin(stripped, citingFileRel, exists) {
+    return exists(stripped) || resolvesInOwnPackage(stripped, citingFileRel, exists);
+}
+/**
+ * Does this path-shaped citation resolve anywhere it is allowed to resolve?
+ *
+ * `installed` must be a filesystem-only probe, not the ignore-widened one:
+ * `node_modules` is itself in `.gitignore`, so an ignore-aware answer here is
+ * "yes, installed" for every first segment, and the whole dead-reference count
+ * collapses to zero while looking perfectly healthy. Measured, not theorised.
+ */
+export function citationResolves(citation, citingFileRel, exists, installed = exists) {
+    const stripped = citation.replace(LINE_SUFFIX, '');
+    if (stripped.length === 0 || SYNTHETIC_SEGMENT.test(stripped))
+        return true;
+    if (resolvesOutsideTheTree(stripped, exists, installed))
+        return true;
+    if (resolvesAtARootOrigin(stripped, citingFileRel, exists))
+        return true;
+    // An anchored citation claims the repo root and nowhere else; anything that did
+    // not resolve above is dead.
+    if (REPO_ANCHORS.test(stripped))
+        return false;
+    // No repo anchor: read from the citing file's own directory and each ancestor
+    // below the repo root, which is where a sibling reference (a subdirectory path
+    // written by the file sitting next to it) actually points.
+    for (let dir = dirname(citingFileRel); dir.length > 0 && dir !== dirname(dir);) {
+        if (exists(toPosix(join(dir, stripped))))
+            return true;
+        dir = dirname(dir);
+        if (dir === '.')
+            return false;
+    }
+    return false;
+}
+/** The default existence probe, against a real working tree. */
+export function treeExists(repoRoot) {
+    return (relPath) => existsSync(join(repoRoot, relPath));
+}