peaks-loop 4.1.1 → 4.1.3

package/dist/services/session/session-binding-bridge.js

@@ -32,7 +32,6 @@ import { getSessionId, getSessionIdCanonical, getSessionMeta, rotateSessionBindi
 const SESSION_FILE = join('_runtime', 'session.json');
 const LEGACY_SESSION_FILE = '.session.json';
 const META_FILE = 'session.json';
-// Slice 2026-08-06-session-outer-cache: per-project file cache for the
 // outer (Claude Code / Trae / IDE) session id. Written by the
 // SessionStart hook via `peaks outer-cache write` so that peaks CLI
 // sub-processes (which do NOT inherit CLAUDE_CODE_SESSION_ID) can still
@@ -130,7 +129,6 @@ function writeSessionMeta(projectRoot, sessionId, meta) {
     }
     writeFileSync(metaPath, JSON.stringify(meta, null, 2), 'utf8');
 }
-// Slice 2026-08-06-session-cacde8-A.3: module-scoped state populated on
 // every non-throw `getCurrentOuterSessionId` call. The 4th rotation
 // guard in `ensureSessionWithRotation` short-circuits when both
 // `currentOuterSessionId` and `boundOuter` equal the last-resolved
@@ -151,7 +149,6 @@ function getCurrentOuterSessionId(projectRoot) {
             resolved = claude;
         }
         else {
-            // Slice 2026-08-06-session-outer-cache (G1): when the peaks CLI runs
             // as a sub-process of Claude Code (or any IDE that does not export
             // CLAUDE_CODE_SESSION_ID into the child env), the env vars above are
             // undefined. Fall back to the per-project file cache written by the
@@ -195,7 +192,6 @@ export function _resetLastResolvedOuterForTest() {
     lastResolvedOuter = null;
 }
 /**
- * Slice 2026-08-06-session-cacde8-A.5a: resolve the current callerId
  * (if any) and look up the per-caller binding. Returns the bound
  * sessionId + creation timestamp, or `null` when caller-id
  * resolution fails (`PEAKS_CALLER_NOT_RESOLVED`) or no per-caller
@@ -204,7 +200,6 @@ export function _resetLastResolvedOuterForTest() {
  * written by a previous call from the same caller is preferred over
  * a stale `session.json` (the legacy single-file binding).
  *
- * Slice 2026-09-12 (rid=caller-binding-staleness): the binding is only
  * usable when its bound session directory still exists
  * (`resolveCallerBinding`). A binding pointing at a deleted session
  * directory is treated as absent, so `ensureSession` falls through and
@@ -235,7 +230,6 @@ function resolveCallerBindingForEnsure(projectRoot) {
     }
 }
 export async function ensureSession(projectRoot) {
-    // Slice 2026-08-06-session-cacde8-A.5a: 3-tier read order —
     // (1) per-caller binding (caller-keyed, primary), (2) legacy
     // `session.json`, (3) fresh-generate. The per-caller lookup is
     // preferred when `resolveCallerProjection` succeeds AND the
@@ -251,7 +245,6 @@ export async function ensureSession(projectRoot) {
         if (outerSessionId !== undefined) {
             setSessionMeta(projectRoot, callerBinding.sessionId, { outerSessionId });
         }
-        // Slice 2026-08-06-session-cacde8-A.5a: dual-write — also write
         // the legacy `session.json` (denormalized cache) when missing,
         // so legacy consumers (e.g. `getSessionId` callers without a
         // resolved callerId) still find the binding. The per-caller
@@ -268,7 +261,6 @@ export async function ensureSession(projectRoot) {
     }
     const existing = readSessionFile(projectRoot);
     if (existing) {
-        // Slice 2026-08-06-session-outer-cache (G3 / AC8-AC11): on every
         // already-bound invocation, stamp the current outer-session-id
         // onto the bound session's meta so the on-disk
         // `.peaks/_runtime/<sid>/session.json` always reflects the latest
@@ -284,7 +276,6 @@ export async function ensureSession(projectRoot) {
         }
         return existing.sessionId;
     }
-    // Slice 007 — sub-agent session sharing. When the strict-equality
     // read returns null (e.g. the binding was written with the relative
     // form "." from inside the project dir, but the caller passes the
     // absolute realpath), fall through to the canonical-fallback read.
@@ -309,7 +300,6 @@ export async function ensureSession(projectRoot) {
         createdAt: now,
         projectRoot
     };
-    // Slice 2026-08-06-session-cacde8-A.5a: dual-write on fresh-generate.
     // The per-caller file is the 4.0.8 source of truth; the legacy
     // `session.json` is a denormalized cache for consumers that have
     // not migrated to `getCallerBinding`. Per-caller file is written
@@ -345,7 +335,6 @@ export async function ensureSession(projectRoot) {
     writeSessionFile(projectRoot, info);
     await initWorkspace({ projectRoot, sessionId });
     // Initialize session metadata inside the session directory.
-    // Slice 2026-08-06-session-outer-cache (G1): pass `projectRoot` so
     // the env → file-cache → undefined resolution chain also reads the
     // SessionStart-written cache on first bind.
     const outerSessionId = getCurrentOuterSessionId(projectRoot);
@@ -360,7 +349,6 @@ export async function ensureSession(projectRoot) {
 /**
  * Outer-session-aware wrapper around `ensureSession`.
  *
- * Slice 018 (auto-roll on outer-mismatch). When the current outer
  * session id (sourced from `PEAKS_OUTER_SESSION_ID` with
  * `CLAUDE_CODE_SESSION_ID` as the Claude-Code fallback) differs from
  * the outer session id recorded on the *bound* peaks session's
@@ -381,7 +369,6 @@ export async function ensureSession(projectRoot) {
  *   3. The bound session's recorded outer session id matches the
  *      current one (reconnect within the same Claude session) — this
  *      is the common case, not a swap.
- *   4. Slice 2026-08-06-session-cacde8-A.3: same-process re-resolve —
  *      `lastResolvedOuter.value` was already set to `currentOuterSessionId`
  *      in this process and `boundOuter` equals that same value. Long-
  *      running presence-lease writers that re-resolve within a single
@@ -403,7 +390,6 @@ export async function ensureSession(projectRoot) {
  */
 export async function ensureSessionWithRotation(projectRoot, options) {
     const skipRotate = options?.skipRotateOnOuterMismatch === true;
-    // Slice 2026-08-06-session-outer-cache (G1): pass `projectRoot` so
     // the rotation-decision comparison sees the SessionStart cache
     // when the env vars are unset (sub-process / nested invocation).
     const currentOuterSessionId = getCurrentOuterSessionId(projectRoot);
@@ -419,7 +405,6 @@ export async function ensureSessionWithRotation(projectRoot, options) {
     if (boundSessionId !== null && currentOuterSessionId !== undefined) {
         const boundMeta = getSessionMeta(projectRoot, boundSessionId);
         const boundOuter = boundMeta?.outerSessionId;
-        // Slice 2026-08-06-session-cacde8-A.3: 4th guard — same-process
         // re-resolve. When `lastResolvedOuter` was already set to the
         // current outer AND the bound session's recorded outer equals
         // the same value, the rotation decision was already evaluated

package/dist/services/session/session-checkpoint-service.d.ts

@@ -1,5 +1,4 @@
 /**
- * `peaks session checkpoint` — slice 011.
  *
  * Writes a JSON snapshot of the current session's state to
  * `_runtime/<sessionId>/checkpoints/<iso-timestamp>.json`. Idempotent —

package/dist/services/session/session-checkpoint-service.js

@@ -1,5 +1,4 @@
 /**
- * `peaks session checkpoint` — slice 011.
  *
  * Writes a JSON snapshot of the current session's state to
  * `_runtime/<sessionId>/checkpoints/<iso-timestamp>.json`. Idempotent —

package/dist/services/session/session-manager.d.ts

@@ -41,7 +41,6 @@ export type SessionMeta = {
  * `.peaks/.session.json` if present so a stale read from another
  * tool cannot re-bind the project after rotation. Also drops the
  * ROTATING caller's per-caller binding when it points at the rotated-out
- * session (slice 2026-09-12, rid=caller-binding-staleness) — see
  * `clearRotatedCallerBinding`.
  *
  * Returns the id of the session that was unbound, or `null` if
@@ -49,7 +48,6 @@ export type SessionMeta = {
  * with that — at minimum surface it in the CLI response so the
  * user can find the directory again if they need to.
  *
- * Slice 008 (F22 fix): the read uses the canonicalize-on-read
  * variant so a binding written with `projectRoot: "."` (relative
  * form, anchored from inside the project dir) is still found when
  * the caller passes the absolute realpath. Pre-F22 the
@@ -86,7 +84,6 @@ export declare function setSessionTitle(projectRoot: string, sessionId: string,
  * List all session directories under .peaks with their metadata.
  * Returns sessions sorted by sessionId descending (most recent first).
  *
- * As of slice 2026-06-06-session-layout-canonicalize the session
  * dirs live at the canonical runtime home `.peaks/_runtime/<sid>/`.
  * The legacy top-level layout is read for back-compat (one minor
  * release) but is not authoritative.
@@ -133,7 +130,6 @@ export declare function getSessionIdCanonical(projectRoot: string): string | nul
  * Outcome of the caller-binding half of session resolution.
  *
  * `staleSessionId` is the id of a per-caller binding that was SKIPPED
- * because its session directory no longer exists — `null` for the
  * ordinary "no binding" case. It exists so the fall-through is
  * observable: a caller can tell "this caller has no binding" apart from
  * "this caller's binding pointed at a session tree that is gone", and
@@ -144,7 +140,6 @@ export type CallerBoundSession = {
     staleSessionId: string | null;
 };
 /**
- * Resolve the caller-binding primary source (slice 2026-09-12,
  * rid=caller-binding-staleness).
  *
  * The caller-first precedence is unchanged: this caller's binding still
@@ -162,19 +157,16 @@ export declare function resolveCallerBoundSession(projectRoot: string): CallerBo
  * Get the absolute path to the current session directory.
  * Creates the session if it doesn't exist.
  *
- * As of slice 2026-06-06-session-layout-canonicalize the canonical
  * home is `.peaks/_runtime/<sid>/`. The legacy top-level layout
  * `.peaks/_runtime/<sid>/` is the back-compat read fallback only.
  *
  * @param projectRoot - Root directory of the project
- * @returns Absolute path to session directory (e.g., "/path/to/project/.peaks/_runtime/2026-05-26-session-a3f8b1")
  */
 export declare function getCurrentSessionDir(projectRoot: string): Promise<string>;
 /**
  * List all session directories in the .peaks folder.
  * Returns session IDs (directory names) sorted by date.
  *
- * As of slice 2026-06-06-session-layout-canonicalize the canonical
  * home is `.peaks/_runtime/<sid>/`. The legacy top-level layout
  * `.peaks/_runtime/<sid>/` is read for back-compat (one minor release) so
  * pre-migration trees keep working.

package/dist/services/session/session-manager.js

@@ -15,7 +15,6 @@ import { SessionBindingSchema, SessionFileSchema } from './session-file-schema.j
 import { ensureSession } from './session-binding-bridge.js';
 import { getCallerBinding, getCallerBindingFile, resolveCallerBinding } from './caller-binding-service.js';
 import { resolveCallerProjection } from './resolve-caller-id.js';
-// As of slice 2026-06-05-peaks-runtime-layer the project-level session
 // binding lives under `.peaks/_runtime/session.json`. The legacy
 // `.peaks/.session.json` path is preserved as a read-only fallback for one
 // minor release so older CLI versions (or trees that have not been migrated
@@ -71,7 +70,6 @@ function resolveStoredAgainstCaller(stored, caller) {
 /**
  * Generate a new session ID.
  * Format: YYYY-MM-DD-session-<6位hex>
- * Example: 2026-05-26-session-a3f8b1
  */
 function generateSessionId() {
     const now = new Date();
@@ -96,7 +94,6 @@ function getSessionFilePath(projectRoot) {
  *
  * The `projectRoot` comparison is canonicalized (separator, symlink,
  * and — on Windows only — case) via `projectRootsMatch`. Before
- * slice `2026-08-04-rid-001-path-canonicalize` this was a strict
  * `===`, which returned null whenever the stored form differed
  * cosmetically from the caller-passed form. On Windows Git Bash that
  * is the common case: `peaks workspace init` stores
@@ -204,7 +201,6 @@ function writeSessionFile(projectRoot, info) {
  * `.peaks/.session.json` if present so a stale read from another
  * tool cannot re-bind the project after rotation. Also drops the
  * ROTATING caller's per-caller binding when it points at the rotated-out
- * session (slice 2026-09-12, rid=caller-binding-staleness) — see
  * `clearRotatedCallerBinding`.
  *
  * Returns the id of the session that was unbound, or `null` if
@@ -212,7 +208,6 @@ function writeSessionFile(projectRoot, info) {
  * with that — at minimum surface it in the CLI response so the
  * user can find the directory again if they need to.
  *
- * Slice 008 (F22 fix): the read uses the canonicalize-on-read
  * variant so a binding written with `projectRoot: "."` (relative
  * form, anchored from inside the project dir) is still found when
  * the caller passes the absolute realpath. Pre-F22 the
@@ -238,7 +233,6 @@ export function rotateSessionBinding(projectRoot) {
             // best-effort: a stale legacy binding is not blocking
         }
     }
-    // Slice 2026-09-12 (rid=caller-binding-staleness): the per-caller
     // binding is the FIRST thing `getSessionId` reads, so unlinking only
     // the project-global files left the rotating caller still resolving
     // the session it just rotated out of — `peaks job init` re-created
@@ -303,7 +297,6 @@ export function setCurrentSessionBinding(projectRoot, sessionId) {
     return info;
 }
 function getMetaFilePath(projectRoot, sessionId) {
-    // As of slice 2026-06-06-session-layout-canonicalize, the per-session
     // `session.json` (the file written by `setSessionMeta`) lives at the
     // canonical runtime home `.peaks/_runtime/<sid>/session.json`, NOT
     // at the top-level `.peaks/_runtime/<sid>/session.json` (which would imply
@@ -327,7 +320,6 @@ function readSessionMeta(projectRoot, sessionId) {
 }
 function writeSessionMeta(projectRoot, sessionId, meta) {
     const metaPath = getMetaFilePath(projectRoot, sessionId);
-    // As of slice 003, the meta file lives at `.peaks/_runtime/<sid>/session.json`.
     // The parent dir of that file is the canonical runtime session dir.
     const metaDir = dirname(metaPath);
     if (!existsSync(metaDir)) {
@@ -371,7 +363,6 @@ export function setSessionTitle(projectRoot, sessionId, title) {
  * List all session directories under .peaks with their metadata.
  * Returns sessions sorted by sessionId descending (most recent first).
  *
- * As of slice 2026-06-06-session-layout-canonicalize the session
  * dirs live at the canonical runtime home `.peaks/_runtime/<sid>/`.
  * The legacy top-level layout is read for back-compat (one minor
  * release) but is not authoritative.
@@ -413,7 +404,6 @@ export function listSessionMetas(projectRoot) {
 }
 /**
  * Back-compat read for the legacy top-level meta file (the one that
- * pre-slice 003 trees still have at `.peaks/_runtime/<sid>/session.json`).
  * Kept as a separate helper so the canonical reader is the default.
  */
 function readSessionMetaCompat(peaksRoot, sessionId) {
@@ -444,11 +434,9 @@ export { ensureSession, ensureSessionWithRotation } from './session-binding-brid
  * @returns Session ID or null
  */
 export function getSessionId(projectRoot) {
-    // Slice 2026-08-06-session-cacde8-A.5a: caller-binding becomes
     // primary source. Read order is (1) the per-caller binding if
     // `resolveCallerProjection` succeeds — and only when that binding is
     // still usable (`resolveCallerBoundSession` drops one whose session
-    // directory is gone, slice 2026-09-12 rid=caller-binding-staleness),
     // (2) `readSessionFile` (the legacy session.json), (3) null (no
     // binding). The legacy session.json is preserved as a fallback so a
     // project without a caller-id resolution still resolves its binding
@@ -489,7 +477,6 @@ export function getSessionId(projectRoot) {
  * so this variant is opt-in.
  */
 export function getSessionIdCanonical(projectRoot) {
-    // Slice 2026-08-06-session-cacde8-A.5a: same caller-binding primary
     // lookup as `getSessionId`; fall back to the canonical-fallback
     // `readSessionFileCanonical` if caller-binding is absent / unresolved.
     const { sessionId } = resolveCallerBoundSession(projectRoot);
@@ -499,7 +486,6 @@ export function getSessionIdCanonical(projectRoot) {
     return info?.sessionId ?? null;
 }
 /**
- * Resolve the caller-binding primary source (slice 2026-09-12,
  * rid=caller-binding-staleness).
  *
  * The caller-first precedence is unchanged: this caller's binding still
@@ -533,12 +519,10 @@ export function resolveCallerBoundSession(projectRoot) {
  * Get the absolute path to the current session directory.
  * Creates the session if it doesn't exist.
  *
- * As of slice 2026-06-06-session-layout-canonicalize the canonical
  * home is `.peaks/_runtime/<sid>/`. The legacy top-level layout
  * `.peaks/_runtime/<sid>/` is the back-compat read fallback only.
  *
  * @param projectRoot - Root directory of the project
- * @returns Absolute path to session directory (e.g., "/path/to/project/.peaks/_runtime/2026-05-26-session-a3f8b1")
  */
 export async function getCurrentSessionDir(projectRoot) {
     const sessionId = await ensureSession(projectRoot);
@@ -548,7 +532,6 @@ export async function getCurrentSessionDir(projectRoot) {
  * List all session directories in the .peaks folder.
  * Returns session IDs (directory names) sorted by date.
  *
- * As of slice 2026-06-06-session-layout-canonicalize the canonical
  * home is `.peaks/_runtime/<sid>/`. The legacy top-level layout
  * `.peaks/_runtime/<sid>/` is read for back-compat (one minor release) so
  * pre-migration trees keep working.
@@ -597,7 +580,6 @@ export function listSessions(projectRoot) {
  */
 export async function getProjectScanPath(projectRoot) {
     const sessionId = await ensureSession(projectRoot);
-    // As of slice 2026-06-05-change-id-as-unit-of-work the session dir
     // is at the canonical runtime location (gitignored). The scan is a
     // session-local artifact; it lives alongside the rest of the
     // ephemeral state under `_runtime/`. The parent `rd/` subdir is
@@ -617,7 +599,6 @@ export function hasProjectScan(projectRoot) {
     const info = readSessionFile(projectRoot);
     if (!info)
         return false;
-    // Canonical runtime location of the session dir (slice 2026-06-05).
     const scanPath = join(projectRoot, '.peaks', '_runtime', info.sessionId, 'rd', 'project-scan.md');
     return existsSync(scanPath);
 }

package/dist/services/session/session-resume-service.d.ts

@@ -1,5 +1,4 @@
 /**
- * `peaks session resume` — slice 011.
  *
  * Reads a checkpoint JSON (written by `peaks session checkpoint`) and
  * emits a structured markdown "resume context" block the skill can

package/dist/services/session/session-resume-service.js

@@ -1,5 +1,4 @@
 /**
- * `peaks session resume` — slice 011.
  *
  * Reads a checkpoint JSON (written by `peaks session checkpoint`) and
  * emits a structured markdown "resume context" block the skill can

package/dist/services/share/bundle-reader.d.ts

@@ -1,7 +1,6 @@
 /**
  * bundle-reader.ts — readBundle(inPath) (spec §7A.2).
  *
- * M7 / spec §7A.2 / §10 RL-9 / acceptance AC-25 / AC-26.
  *
  * Reads a `peaks.bundle/1` tar.gz and lands the contained release
  * on the local SkillHub. The reader is the symmetrical counterpart
@@ -18,7 +17,6 @@
  *   3. The imported release ALWAYS lands as `candidate`. The
  *      reader refuses to write any other status; the receiver
  *      MUST run an independent evaluation before promoting the
- *      imported release to `stable` (AC-26 — peaks loop promote
  *      reads evolution_evaluation rows).
  *
  * Slice 4 (PRD-002b): split the four high-cohort functions
@@ -28,7 +26,7 @@
  * (readBundle, ReadBundleArgs, ReadBundleResult, the four error
  * classes) is preserved verbatim.
  */
-import type Database from 'better-sqlite3';
+import { type SqliteDatabase } from '../sqlite/sqlite-driver.js';
 import { SHARE_BUNDLE_ERROR_CODES, type PeaksBundleKind } from './bundle-types.js';
 /**
  * Thrown when `format_version_major !== 1`. This is the explicit
@@ -66,7 +64,7 @@ export declare class BundleMalformedError extends Error {
     constructor(message: string);
 }
 export type ReadBundleArgs = {
-    db: Database.Database;
+    db: SqliteDatabase;
     /** Blobs root for content-addressed file write-back. */
     blobsDir: string;
     /** Input `.tar.gz` bundle path. */
@@ -81,7 +79,6 @@ export type ReadBundleArgs = {
 /**
  * Successful read result. The reader lands the bundle as a
  * `candidate` regardless of any other lifecycle status on the
- * source — this is the hard import rule per spec §7A.2 / AC-25.
  */
 export type ReadBundleResult = {
     /** Anchor asset id actually written. */

package/dist/services/share/bundle-reader.js

@@ -1,7 +1,6 @@
 /**
  * bundle-reader.ts — readBundle(inPath) (spec §7A.2).
  *
- * M7 / spec §7A.2 / §10 RL-9 / acceptance AC-25 / AC-26.
  *
  * Reads a `peaks.bundle/1` tar.gz and lands the contained release
  * on the local SkillHub. The reader is the symmetrical counterpart
@@ -18,7 +17,6 @@
  *   3. The imported release ALWAYS lands as `candidate`. The
  *      reader refuses to write any other status; the receiver
  *      MUST run an independent evaluation before promoting the
- *      imported release to `stable` (AC-26 — peaks loop promote
  *      reads evolution_evaluation rows).
  *
  * Slice 4 (PRD-002b): split the four high-cohort functions
@@ -31,6 +29,7 @@
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync, rmSync } from 'node:fs';
 import { join } from 'node:path';
 import { ZodError } from 'zod';
+import { transaction } from '../sqlite/sqlite-driver.js';
 import { runTar } from '../skillhub/tar-runtime.js';
 import { PEAKS_BUNDLE_FORMAT_VERSION_MAJOR, PEAKS_BUNDLE_SCHEMA_VERSIONS, SHARE_BUNDLE_ERROR_CODES, BundleManifestSchema } from './bundle-types.js';
 /* ---------------------------------------------------------------------- */
@@ -99,7 +98,6 @@ function readSourceLifecycle(release) {
     return typeof release.lifecycle_status === 'string' ? release.lifecycle_status : 'candidate';
 }
 /**
- * Enforce the AC-25 hard rule: bundles always land as `candidate`;
  * any other source status is refused. Layered at every import site
  * for defense in depth.
  */
@@ -296,7 +294,7 @@ function importLoopBundle(db, manifest, asName) {
     // relations before the bee rows land would FK-constraint fail
     // on the receiver.
     const beeIdMap = materialiseRelatedBees(db, manifest.related_bee_releases);
-    const tx = db.transaction(() => {
+    const tx = transaction(db, () => {
         insertLoopReleaseRow(db, loopRow);
         insertLoopBeeRelations(db, manifest, beeIdMap, targetId);
     });
@@ -430,7 +428,7 @@ function insertNewRelatedBee(db, release, manifest) {
          bee_name, version, source, archived_at, archived_by, user_intent_raw,
          description, parent_version, changelog, shareable, desktop_visible
        ) VALUES (?, ?, 'user', ?, 'user', ?, ?, ?, ?, ?, ?)`)
-        .run(String(release.bee_name ?? ''), String(release.version ?? '0.0.0'), nowIso(), release.user_intent_raw ?? null, release.description ?? null, release.parent_version ?? null, release.changelog ?? null, release.shareable === false ? 0 : 1, release.desktop_visible === false ? 0 : 1);
+        .run(String(release.bee_name ?? ''), String(release.version ?? '0.0.0'), nowIso(), strOrNull(release.user_intent_raw), strOrNull(release.description), strOrNull(release.parent_version), strOrNull(release.changelog), release.shareable === false ? 0 : 1, release.desktop_visible === false ? 0 : 1);
     const newId = Number(info.lastInsertRowid);
     if (manifest)
         insertBeeManifestRow(db, newId, manifest);
@@ -451,7 +449,7 @@ function importBeeBundle(db, manifest, _blobsDir, asName) {
     // Same hard rule: any non-candidate import is refused. The reader
     // does not honor --as-stable switches.
     enforceImportAsCandidate(readSourceLifecycle(release));
-    const tx = db.transaction(() => {
+    const tx = transaction(db, () => {
         const newId = insertAnchorBeeRelease(db, release, newBeeName);
         if (beeObj.manifest)
             insertBeeManifestRow(db, newId, beeObj.manifest);
@@ -469,7 +467,7 @@ function insertAnchorBeeRelease(db, release, beeName) {
          bee_name, version, source, archived_at, archived_by, user_intent_raw,
          description, parent_version, changelog, shareable, desktop_visible
        ) VALUES (?, ?, 'user', ?, 'user', ?, ?, ?, ?, ?, ?)`)
-        .run(beeName, String(release.version ?? '0.0.0'), nowIso(), release.user_intent_raw ?? null, release.description ?? null, release.parent_version ?? null, release.changelog ?? null, release.shareable === false ? 0 : 1, release.desktop_visible === false ? 0 : 1);
+        .run(beeName, String(release.version ?? '0.0.0'), nowIso(), strOrNull(release.user_intent_raw), strOrNull(release.description), strOrNull(release.parent_version), strOrNull(release.changelog), release.shareable === false ? 0 : 1, release.desktop_visible === false ? 0 : 1);
     return Number(info.lastInsertRowid);
 }
 /** Insert one bee_manifest row. */
@@ -478,7 +476,7 @@ function insertBeeManifestRow(db, releaseId, manifest) {
        release_id, schema_version, description, segments_json,
        entrypoint_preamble, promotion, min_cycles,
        requires_human, requires_smoke, retire_on_misses
-     ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(releaseId, String(manifest.schema_version ?? 'peaks.bee/1'), String(manifest.description ?? ''), JSON.stringify(manifest.segments_json ?? []), strOrNull(manifest.entrypoint_preamble), String(manifest.promotion ?? 'manual'), manifest.min_cycles ?? null, manifest.requires_human === undefined ? 1 : Number(manifest.requires_human), manifest.requires_smoke === undefined ? 1 : Number(manifest.requires_smoke), manifest.retire_on_misses ?? null);
+     ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(releaseId, String(manifest.schema_version ?? 'peaks.bee/1'), String(manifest.description ?? ''), JSON.stringify(manifest.segments_json ?? []), strOrNull(manifest.entrypoint_preamble), String(manifest.promotion ?? 'manual'), manifest.min_cycles === undefined ? null : Number(manifest.min_cycles), manifest.requires_human === undefined ? 1 : Number(manifest.requires_human), manifest.requires_smoke === undefined ? 1 : Number(manifest.requires_smoke), manifest.retire_on_misses === undefined ? null : Number(manifest.retire_on_misses));
 }
 /** Insert bee_segment_ref rows. */
 function insertBeeSegmentRows(db, releaseId, segments) {

package/dist/services/share/bundle-writer.d.ts

@@ -38,7 +38,7 @@
  * extract via `runTar(['-xzf', inPath, '-C', stageDir])` with no
  * extra plumbing.
  */
-import type Database from 'better-sqlite3';
+import type { SqliteDatabase } from '../sqlite/sqlite-driver.js';
 import { SHARE_BUNDLE_ERROR_CODES, type PeaksBundleKind } from './bundle-types.js';
 /**
  * Inputs to `writeBundle`. `kind` decides which asset table the
@@ -46,7 +46,7 @@ import { SHARE_BUNDLE_ERROR_CODES, type PeaksBundleKind } from './bundle-types.j
  * on `shareable=false` sources.
  */
 export type WriteBundleArgs = {
-    db: Database.Database;
+    db: SqliteDatabase;
     /** Blobs root for content-addressed file lookup. */
     blobsDir: string;
     /** Bundle kind — `loop` or `bee`. */

package/dist/services/skill/resume-detector.js

@@ -25,7 +25,6 @@
  *
  * Legacy path fallback: prefers the canonical
  * `.peaks/_runtime/<sid>/` layout introduced in slice
- * `2026-06-05-peaks-runtime-layer`; falls back to the pre-migration
  * `.peaks/_runtime/<sid>/` for one minor release so older trees do not show as
  * false "fresh". The `usedLegacyPath` field reports which path was
  * read.
@@ -193,8 +192,6 @@ function classifyTerminalGates(sessionDir, ctx) {
     // RD qa-handoff → deepest gate is C. If the review artifacts are
     // missing the state is inconsistent; fall back to rd-review-fanout.
     if (ctx.primaryRd !== null && ctx.primaryRd.state === 'qa-handoff') {
-        // Slice `2026-09-14-audit-artifact-rid-scoping`: the fan-out evidence
-        // filenames carry the rid. Probe the canonical rid-scoped name first and
         // the pre-rid names behind it — the same order the transition gate
         // resolves in, so an inconsistent-looking slice here means the fan-out
         // never ran, not that it wrote to a name this reader does not know.

package/dist/services/skill/skill-scheduler.d.ts

@@ -1,7 +1,6 @@
 /**
  * G6 — skill-level heartbeat scheduler config.
  *
- * Slice 2026-06-07-sub-agent-dispatch-decouple (G6): the SKILL.md front
  * matter for a Dispatcher (peaks-code / peaks-rd / peaks-qa) can opt
  * into a non-default heartbeat interval by including a line like:
  *

package/dist/services/skill/skill-scheduler.js

@@ -1,7 +1,6 @@
 /**
  * G6 — skill-level heartbeat scheduler config.
  *
- * Slice 2026-06-07-sub-agent-dispatch-decouple (G6): the SKILL.md front
  * matter for a Dispatcher (peaks-code / peaks-rd / peaks-qa) can opt
  * into a non-default heartbeat interval by including a line like:
  *

package/dist/services/skill/skill-search-service.d.ts

@@ -2,8 +2,6 @@
  * peaks skill search — service-layer primitive for S0 of the
  * 4.0.0-beta.5 peaks-solo dispatcher release.
  *
- * Spec: docs/superpowers/specs/2026-07-08-peaks-solo-dispatcher-design.md §3.2
- * Plan: docs/superpowers/plans/2026-07-08-peaks-solo-dispatcher/s0-skill-search-cli.md
  *
  * This service is the single source of truth for skill pool retrieval
  * and is reused by the `peaks skill search` CLI. It is intentionally

package/dist/services/skill/skill-search-service.js

@@ -2,8 +2,6 @@
  * peaks skill search — service-layer primitive for S0 of the
  * 4.0.0-beta.5 peaks-solo dispatcher release.
  *
- * Spec: docs/superpowers/specs/2026-07-08-peaks-solo-dispatcher-design.md §3.2
- * Plan: docs/superpowers/plans/2026-07-08-peaks-solo-dispatcher/s0-skill-search-cli.md
  *
  * This service is the single source of truth for skill pool retrieval
  * and is reused by the `peaks skill search` CLI. It is intentionally

package/dist/services/skillhub/release-diff.d.ts

@@ -1,4 +1,4 @@
-import type Database from 'better-sqlite3';
+import type { SqliteDatabase } from '../sqlite/sqlite-driver.js';
 export interface ReleaseDiff {
     added: string[];
     removed: string[];
@@ -11,7 +11,7 @@ export interface ReleaseDiff {
  * Throws `VERSION_NOT_FOUND` if either (bee_name, version) tuple is missing.
  */
 export declare function releaseDiff({ db, beeName, fromVersion, toVersion }: {
-    db: Database.Database;
+    db: SqliteDatabase;
     beeName: string;
     fromVersion: string;
     toVersion: string;

package/dist/services/skillhub/release-export.d.ts

@@ -1,6 +1,6 @@
-import type Database from 'better-sqlite3';
+import type { SqliteDatabase } from '../sqlite/sqlite-driver.js';
 export declare function exportRelease({ db, blobsDir, beeName, version, outPath }: {
-    db: Database.Database;
+    db: SqliteDatabase;
     blobsDir: string;
     beeName: string;
     version: string;

package/dist/services/skillhub/release-gc-blobs.d.ts

@@ -1,4 +1,4 @@
-import type Database from 'better-sqlite3';
+import type { SqliteDatabase } from '../sqlite/sqlite-driver.js';
 /**
  * Garbage-collect content-addressed blobs under `blobsDir/<aa>/<sha>` that
  * no `bee_file` row currently references.
@@ -7,7 +7,7 @@ import type Database from 'better-sqlite3';
  * @returns the list of removed SHA names.
  */
 export declare function gcBlobs({ db, blobsDir, dryRun }: {
-    db: Database.Database;
+    db: SqliteDatabase;
     blobsDir: string;
     dryRun: boolean;
 }): string[];

package/dist/services/skillhub/release-import.d.ts

@@ -1,6 +1,6 @@
-import type Database from 'better-sqlite3';
+import { type SqliteDatabase } from '../sqlite/sqlite-driver.js';
 export declare function importRelease({ db, blobsDir, inPath, asName }: {
-    db: Database.Database;
+    db: SqliteDatabase;
     blobsDir: string;
     inPath: string;
     asName?: string;

package/dist/services/skillhub/release-import.js

@@ -1,5 +1,6 @@
 import { readFileSync, mkdirSync, writeFileSync, existsSync, rmSync } from 'node:fs';
 import { join } from 'node:path';
+import { transaction } from '../sqlite/sqlite-driver.js';
 import { assertNotSystemPath } from '../sediment/pool-paths.js';
 import { runTar } from './tar-runtime.js';
 export function importRelease({ db, blobsDir, inPath, asName }) {
@@ -42,7 +43,7 @@ export function importRelease({ db, blobsDir, inPath, asName }) {
     // payloads may carry these explicitly (M7 bundle format); until
     // then M3 keeps defaulting on the insert path so existing call
     // sites stay source-compatible.
-    const tx = db.transaction(() => {
+    const tx = transaction(db, () => {
         const ins = db.prepare(`INSERT INTO bee_release (bee_name, version, source, archived_at, archived_by, user_intent_raw, description, parent_version, changelog, shareable, desktop_visible) VALUES (?, ?, 'user', ?, 'user', ?, ?, ?, ?, 1, 1)`);
         const id = ins.run(beeName, payload.version, new Date().toISOString(), null, null, null, null)
             .lastInsertRowid;

package/dist/services/skillhub/release-retain.d.ts

@@ -1,4 +1,4 @@
-import type Database from 'better-sqlite3';
+import { type SqliteDatabase } from '../sqlite/sqlite-driver.js';
 import type { BeeManifest } from '../sediment/types.js';
 /** Compute the sha256 hash and byte length of a single file. */
 export declare function sha256OfFile(p: string): {
@@ -13,7 +13,7 @@ export declare function walk(root: string, base?: string): Generator<{
     rel: string;
 }>;
 export declare function retainRelease({ db, blobsDir, scratchDir, manifest, version: explicitVersion, parentVersion, changelog }: {
-    db: Database.Database;
+    db: SqliteDatabase;
     blobsDir: string;
     scratchDir: string;
     manifest: BeeManifest;

package/dist/services/skillhub/release-retain.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
 import { readFileSync, readdirSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
 import { join, relative } from 'node:path';
+import { transaction } from '../sqlite/sqlite-driver.js';
 /** Compute the sha256 hash and byte length of a single file. */
 export function sha256OfFile(p) {
     const buf = readFileSync(p);
@@ -50,7 +51,7 @@ function checkOverflow({ table, col }, value) {
 }
 export function retainRelease({ db, blobsDir, scratchDir, manifest, version: explicitVersion, parentVersion, changelog }) {
     const version = explicitVersion ?? '0.1.0';
-    const tx = db.transaction(() => {
+    const tx = transaction(db, () => {
         // M3 / spec §4.2: `shareable` and `desktop_visible` are written
         // with their spec defaults (true). M7 will add a CLI flag to
         // override on retain; M3 keeps the defaulting on the insert path