peaks-loop 4.1.2 → 4.1.4

package/dist/cli/commands/audit-commands.js

@@ -1,504 +1,95 @@
 /**
  * peaks audit * CLI surface — Slice L2.1 + L2.3 P2-a.
  *
- * Registers the new `peaks audit` top-level command with the
- * `red-lines` (L2.1) and `static` (L2.3 P2-a) subcommands.
+ * Registers the `peaks audit` top-level command with the `red-lines` (L2.1),
+ * `static` (L2.3 P2-a), `prose-ratio`, `goal` and `artifact` subcommands.
  * Per `peaks-loop-when-adding-a-new-subcommand-check-for-existing-top-level-first.md`
  * we verified that no `peaks audit` top-level exists; this is the only
  * file that owns the registration.
+ *
+ * The action bodies live in `audit-<responsibility>-runners.ts` siblings; this
+ * file only wires the commands and delegates. Each delegate preserves the
+ * original callback's declared arity.
  */
-import { existsSync, readFileSync, statSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { runRedLinesAudit } from '../../services/audit/red-lines-service.js';
-import { runStaticAudit } from '../../services/audit/static-service.js';
-import { auditGoal, IncompleteAuditError } from '../../services/audit/audit-goal-service.js';
-import { createAnthropicRunner, LlmBindingError, LlmRequestError, resolveAnthropicConfig } from '../../services/llm/anthropic-runner.js';
-import { createStubRunner } from '../../services/llm/stub-runner.js';
-import { addJsonOption, getErrorMessage, printResult } from '../cli-helpers.js';
-import { fail, ok } from 'peaks-loop-shared/result';
-import { writeAuditDecision } from '../../services/audit/decision-writer.js';
-import { computeProseRatio } from '../../services/audit/prose-ratio-calculator.js';
-import { writeMachineOutput, writeNarrative, writePrompt, writeDecision } from '../../services/audit/artifact-writer.js';
-import { parseRedLineAuditInput, RedLineAuditInputError } from '../../services/audit/red-line-audit-input.js';
-const SUPPORTED_ARTIFACT_KINDS = [
-    'decision',
-    'prompt',
-    'machine-output',
-    'narrative'
-];
-function isSupportedArtifactKind(value) {
-    return SUPPORTED_ARTIFACT_KINDS.includes(value);
-}
-/** Whitelist of supported `--llm-provider` values for `peaks audit goal`. */
-const SUPPORTED_LLM_PROVIDERS = ['anthropic', 'stub'];
-/**
- * The real provider is the default: `peaks audit goal` is the entry gate for
- * every peaks-* workflow, so it must audit by default and only scaffold when
- * a caller explicitly asks for `stub`.
- */
-const DEFAULT_LLM_PROVIDER = 'anthropic';
-function isSupportedLlmProvider(value) {
-    return SUPPORTED_LLM_PROVIDERS.includes(value);
-}
-function validateProjectRoot(projectArg) {
-    const projectRoot = resolve(projectArg);
-    if (!existsSync(projectRoot)) {
-        return {
-            ok: false,
-            code: 'PROJECT_NOT_FOUND',
-            message: `project path does not exist: ${projectArg}`
-        };
-    }
-    let stat;
-    try {
-        stat = statSync(projectRoot);
-    }
-    catch (error) {
-        return { ok: false, code: 'INVALID_PROJECT', message: getErrorMessage(error) };
-    }
-    if (!stat.isDirectory()) {
-        return {
-            ok: false,
-            code: 'INVALID_PROJECT',
-            message: `project path is not a directory: ${projectArg}`
-        };
-    }
-    return { ok: true, projectRoot };
-}
-export function registerAuditCommands(program, io) {
-    const audit = program
-        .command('audit', { hidden: true })
-        .description('Audit a project for compliance with peaks-loop red lines (P0 / P1 / P2 tiers)');
+import { addJsonOption } from '../cli-helpers.js';
+import { DEFAULT_LLM_PROVIDER, SUPPORTED_ARTIFACT_KINDS, SUPPORTED_LLM_PROVIDERS } from './audit-command-shared.js';
+import { RED_LINES_DESCRIPTION, runRedLines } from './audit-red-lines-runners.js';
+import { PROSE_RATIO_DESCRIPTION, STATIC_AUDIT_DESCRIPTION, runProseRatio, runStaticAuditCommand } from './audit-static-runners.js';
+import { AUDIT_GOAL_DESCRIPTION, runAuditGoal } from './audit-goal-runners.js';
+import { ARTIFACT_GROUP_DESCRIPTION, ARTIFACT_WRITE_DESCRIPTION, runArtifactWrite } from './audit-artifact-runners.js';
+const AUDIT_DESCRIPTION = 'Audit a project for compliance with peaks-loop red lines (P0 / P1 / P2 tiers)';
+function registerRedLinesCommand(audit, io) {
     addJsonOption(audit
         .command('red-lines')
-        .description('Scan skills/, .claude/rules/, and openspec/changes/ for MANDATORY / BLOCKING / MUST NOT / RED LINE markers; classify each as cli-backed / partial / prose-only')
-        .requiredOption('--project <path>', 'target project root')).action((options) => {
-        const validation = validateProjectRoot(options.project);
-        if (!validation.ok) {
-            printResult(io, fail('audit.red-lines', validation.code, validation.message, {
-                totalRedLines: 0,
-                cliBacked: 0,
-                partial: 0,
-                proseOnly: 0,
-                audit: [],
-                enforcerFindings: []
-            }, ['Verify the project path exists and is a directory']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        try {
-            const result = runRedLinesAudit({ projectRoot: validation.projectRoot });
-            const nextActions = [];
-            if (result.audit.proseOnly > 0) {
-                nextActions.push(`${result.audit.proseOnly} prose-only red lines remain. Plan P1/P2 enforcers in L2.2-L2.4.`);
-            }
-            if (result.audit.cliBacked > 0) {
-                nextActions.push(`${result.audit.cliBacked} red lines are now cli-backed. Re-run after each enforcer lands to track the prose-only ratio.`);
-            }
-            const envelope = ok('audit.red-lines', result.audit, result.warnings.map((w) => `${w.file}: ${w.message}`), nextActions);
-            printResult(io, envelope, options.json);
-        }
-        catch (error) {
-            printResult(io, fail('audit.red-lines', 'SCANNER_FAILED', getErrorMessage(error), {
-                totalRedLines: 0,
-                cliBacked: 0,
-                partial: 0,
-                proseOnly: 0,
-                audit: [],
-                enforcerFindings: []
-            }, ['Inspect scanner logs and re-run with the same --project path']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // Slice K1 (2.8.0): `--record` persists the audit snapshot as a
-    // project-memory decision at `.peaks/memory/audit-decisions/<slug>.md`.
-    // `--rid <id>` is an optional disambiguator for multiple audits on
-    // the same day (slug becomes `audit-decision-<date>-<rid>`).
-    // Per `peaks-loop-when-adding-a-new-subcommand-check-for-existing-top-level-first`
-    // and the dev-preference red line "Default-no on new CLI commands",
-    // we extend the existing command rather than register a new subcommand.
-    //
-    // `--enable-agent-shield` / `--disable-agent-shield` flags were removed.
-    // `runStaticAudit`'s agentShield state is a frozen "always disabled" stub
-    // (Slice 3 of 4.0.0-beta.11 removed the subprocess), so the flags had no
-    // effect and the ECC opt-in prose misled users on every run.
+        .description(RED_LINES_DESCRIPTION)
+        .requiredOption('--project <path>', 'target project root')).action((options) => runRedLines(options, io));
+}
+// Slice K1 (2.8.0): `--record` persists the audit snapshot as a
+// project-memory decision at `.peaks/memory/audit-decisions/<slug>.md`.
+// `--rid <id>` is an optional disambiguator for multiple audits on
+// the same day (slug becomes `audit-decision-<date>-<rid>`).
+// Per `peaks-loop-when-adding-a-new-subcommand-check-for-existing-top-level-first`
+// and the dev-preference red line "Default-no on new CLI commands",
+// we extend the existing command rather than register a new subcommand.
+//
+// `--enable-agent-shield` / `--disable-agent-shield` flags were removed.
+// `runStaticAudit`'s agentShield state is a frozen "always disabled" stub
+// (Slice 3 of 4.0.0-beta.11 removed the subprocess), so the flags had no
+// effect and the ECC opt-in prose misled users on every run.
+function registerStaticCommand(audit, io) {
     addJsonOption(audit
         .command('static')
-        .description('Run the static audit (peaks-loop lint only; the ECC AgentShield subprocess was removed in 4.0.0-beta.11). Per spec §5.3.')
+        .description(STATIC_AUDIT_DESCRIPTION)
         .requiredOption('--project <path>', 'target project root')
         .option('--record', 'persist the audit snapshot to .peaks/memory/audit-decisions/ as a project-memory decision')
-        .option('--rid <rid>', 'disambiguator for the decision record slug (used with --record; pairs multiple audits on the same day)')).action((options) => {
-        const validation = validateProjectRoot(options.project);
-        if (!validation.ok) {
-            printResult(io, fail('audit.static', validation.code, validation.message, emptyStaticAuditData(), ['Verify the project path exists and is a directory']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        // Slice K1: `--rid` is meaningful only with `--record`. Surface a 422
-        // when the user passes `--rid` without `--record` so the CLI fails
-        // loudly rather than silently ignoring the request id.
-        if (options.rid && !options.record) {
-            printResult(io, fail('audit.static', 'FLAGS_CONFLICT', '`--rid` requires `--record` (decision slug disambiguator has no effect without persistence)', emptyStaticAuditData(), ['Pass `--record` together with `--rid <id>`, or omit `--rid`']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        try {
-            const result = runStaticAudit({
-                projectRoot: validation.projectRoot
-            });
-            // Persist the decision record when `--record` is set. The writer is
-            // idempotent at the slug level (same date+rid → same file); repeated
-            // runs overwrite. Failures here are surfaced as warnings so the
-            // primary audit JSON still reaches the caller.
-            let decision;
-            let recordWarning;
-            if (options.record) {
-                try {
-                    decision = writeAuditDecision(result.audit, {
-                        projectRoot: validation.projectRoot,
-                        ...(options.rid ? { rid: options.rid } : {})
-                    });
-                }
-                catch (writeError) {
-                    recordWarning = `Failed to write decision record: ${getErrorMessage(writeError)}`;
-                }
-            }
-            const data = {
-                audit: result.audit,
-                agentShield: result.agentShield,
-                ...(decision ? { decision } : {})
-            };
-            const nextActions = [];
-            // nextActions block was removed. `agentShield.installed` is a frozen
-            // `false`, so the block printed on every run and pointed users at a
-            // removed subprocess, removed flags, and a dead preference.
-            if (decision) {
-                nextActions.push(`Decision record written: ${decision.filePath}`);
-                nextActions.push(`Index synced: ${decision.indexSynced ? 'yes' : 'no'} (memory hot.decision[] now includes this audit)`);
-            }
-            const warnings = recordWarning ? [...result.warnings, recordWarning] : [...result.warnings];
-            const envelope = ok('audit.static', data, warnings, nextActions);
-            printResult(io, envelope, options.json);
-        }
-        catch (error) {
-            printResult(io, fail('audit.static', 'SCANNER_FAILED', getErrorMessage(error), emptyStaticAuditData(), ['Inspect scanner logs and re-run with the same --project path']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // v2.14.0 Slice C Group G3: `peaks audit prose-ratio` — CI gate.
-    // Calls `peaks audit static --json` internally, parses the prose-only
-    // ratio, exits 1 if the ratio exceeds the target (default 5%).
-    // Rationale: a single CLI primitive for the CI gate; the underlying
-    // ratio lives in static-service.ts (computed via prose-ratio-calculator).
+        .option('--rid <rid>', 'disambiguator for the decision record slug (used with --record; pairs multiple audits on the same day)')).action((options) => runStaticAuditCommand(options, io));
+}
+// v2.14.0 Slice C Group G3: `peaks audit prose-ratio` — CI gate.
+// Calls `peaks audit static --json` internally, parses the prose-only
+// ratio, exits 1 if the ratio exceeds the target (default 5%).
+// Rationale: a single CLI primitive for the CI gate; the underlying
+// ratio lives in static-service.ts (computed via prose-ratio-calculator).
+function registerProseRatioCommand(audit, io) {
     addJsonOption(audit
         .command('prose-ratio')
-        .description('Compute the prose-only ratio (informational entries excluded). Exits 1 if ratio > target (default 5%).')
+        .description(PROSE_RATIO_DESCRIPTION)
         .requiredOption('--project <path>', 'target project root')
-        .option('--target <n>', 'maximum prose-only ratio (0-1, default 0.05)', '0.05')).action((options) => {
-        const validation = validateProjectRoot(options.project);
-        if (!validation.ok) {
-            printResult(io, fail('audit.prose-ratio', validation.code, validation.message, emptyProseRatioResult(), ['Verify the project path exists and is a directory']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        const target = Number.parseFloat(options.target);
-        if (!Number.isFinite(target) || target < 0 || target > 1) {
-            printResult(io, fail('audit.prose-ratio', 'INVALID_TARGET', `--target must be a number between 0 and 1 (got "${options.target}")`, emptyProseRatioResult(), ['Pass --target 0.05 (default) or another number in [0, 1]']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        try {
-            const result = runStaticAudit({ projectRoot: validation.projectRoot });
-            const ratio = computeProseRatio(result.audit.audit, { target });
-            const envelope = ok('audit.prose-ratio', ratio, [], [
-                ratio.exceeds
-                    ? `Prose-only ratio ${(ratio.ratio * 100).toFixed(2)}% exceeds target ${(ratio.target * 100).toFixed(2)}% (${ratio.proseOnly}/${ratio.totalRedLines})`
-                    : `Prose-only ratio ${(ratio.ratio * 100).toFixed(2)}% within target ${(ratio.target * 100).toFixed(2)}% (${ratio.proseOnly}/${ratio.totalRedLines})`
-            ]);
-            printResult(io, envelope, options.json);
-            if (ratio.exceeds) {
-                process.exitCode = 1;
-            }
-        }
-        catch (error) {
-            printResult(io, fail('audit.prose-ratio', 'SCANNER_FAILED', getErrorMessage(error), emptyProseRatioResult(), ['Inspect scanner logs and re-run with the same --project path']), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // gate it advertises. `auditGoal()` was already correct (one `LlmRunner`
-    // call, 6-dimension validation, `IncompleteAuditError` on a partial audit);
-    // what was missing was a provider binding, so the command answered with a
-    // fixed `scaffold-only` envelope no matter what it was asked.
-    //
-    // `anthropic` is now the default and reads the session's own environment
-    // (see `resolveAnthropicConfig`). `stub` stays for CI/tests but is
-    // reported as a scaffold, and a missing credential fails loudly — a silent
-    // fall back to the scaffold envelope would leave the gate exactly as fake
-    // as it was before this slice.
+        .option('--target <n>', 'maximum prose-only ratio (0-1, default 0.05)', '0.05')).action((options) => runProseRatio(options, io));
+}
+// `anthropic` is now the default and reads the session's own environment
+// (see `resolveAnthropicConfig`). `stub` stays for CI/tests but is
+// reported as a scaffold, and a missing credential fails loudly — a silent
+// fall back to the scaffold envelope would leave the gate exactly as fake
+// as it was before this slice.
+function registerGoalCommand(audit, io) {
     addJsonOption(audit
         .command('goal')
-        .description('Audit a human need across 6 dimensions and propose a goal (peaks-audit primitive)')
+        .description(AUDIT_GOAL_DESCRIPTION)
         .requiredOption('--project <path>', 'target project root')
         .requiredOption('--need <text>', 'the human need to audit (becomes input.need for auditGoal())')
-        .option('--llm-provider <name>', `LLM provider (${SUPPORTED_LLM_PROVIDERS.join(' | ')}); stub performs no audit`, DEFAULT_LLM_PROVIDER)).action(async (options) => {
-        const validation = validateProjectRoot(options.project);
-        if (!validation.ok) {
-            printResult(io, fail('audit.goal', validation.code, validation.message, auditGoalFailureData(options.need, options.project), ['Verify the project path exists and is a directory']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        const provider = options.llmProvider ?? DEFAULT_LLM_PROVIDER;
-        if (!isSupportedLlmProvider(provider)) {
-            printResult(io, fail('audit.goal', 'LLM_PROVIDER_NOT_IMPLEMENTED', `LLM provider "${provider}" is not implemented. Supported providers: ${SUPPORTED_LLM_PROVIDERS.join(', ')}.`, auditGoalFailureData(options.need, validation.projectRoot), [
-                `Re-run with \`--llm-provider ${DEFAULT_LLM_PROVIDER}\` for a real audit, or \`--llm-provider stub\` for an offline scaffold.`
-            ]), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        const isStub = provider === 'stub';
-        const providerBinding = isStub
-            ? 'stub'
-            : 'anthropic-messages-api';
-        try {
-            let model;
-            let llmRunner;
-            if (isStub) {
-                llmRunner = createStubRunner();
-            }
-            else {
-                const config = resolveAnthropicConfig();
-                model = config.model;
-                llmRunner = createAnthropicRunner(config);
-            }
-            const result = await auditGoal({ need: options.need }, llmRunner);
-            const data = {
-                status: isStub ? 'scaffold-only' : 'audit-complete',
-                providerBinding,
-                need: options.need,
-                projectRoot: validation.projectRoot,
-                result,
-                ...(model === undefined ? {} : { model })
-            };
-            const envelope = ok('audit.goal', data, [], isStub
-                ? [
-                    `Stub provider: the 6 dimensions below are placeholders, not findings. Re-run with \`--llm-provider ${DEFAULT_LLM_PROVIDER}\` for a real audit.`
-                ]
-                : [
-                    `Audit produced by ${providerBinding}${model === undefined ? '' : ` (model: ${model})`}.`
-                ]);
-            printResult(io, envelope, options.json);
-        }
-        catch (error) {
-            const code = auditGoalErrorCode(error);
-            printResult(io, fail('audit.goal', code, getErrorMessage(error), auditGoalFailureData(options.need, validation.projectRoot, providerBinding, error instanceof LlmBindingError ? error.missingEnv : undefined), auditGoalNextActions(code)), options.json);
-            process.exitCode = 1;
-        }
-    });
-    // ---------------------------------------------------------------------------
-    //
-    // First-class CLI surface for the 4 audit artifact types. Replaces the
-    // 2026-06-22 "hand `git add` into .peaks/memory/" anti-pattern that left
-    // 4 orphan files. Each kind routes to exactly one writer in
-    // artifact-writer.ts; the writer enforces canonical frontmatter, so the
-    // memory-shape guard never fires for new writes.
-    // ---------------------------------------------------------------------------
-    const artifact = audit
-        .command('artifact')
-        .description('Manage audit artifacts (decision / prompt / machine-output / narrative) under .peaks/memory/');
+        .option('--llm-provider <name>', `LLM provider (${SUPPORTED_LLM_PROVIDERS.join(' | ')}); stub performs no audit`, DEFAULT_LLM_PROVIDER)).action((options) => runAuditGoal(options, io));
+}
+function registerArtifactWriteCommand(artifact, io) {
     addJsonOption(artifact
         .command('write')
-        .description('Persist a single audit artifact to .peaks/memory/ via the artifact-writer (canonical frontmatter)')
+        .description(ARTIFACT_WRITE_DESCRIPTION)
         .requiredOption('--project <path>', 'target project root')
         .requiredOption('--kind <kind>', `artifact kind (${SUPPORTED_ARTIFACT_KINDS.join(' | ')})`)
         .requiredOption('--input <path>', 'path to source file (markdown for prompt/narrative; JSON for machine-output and decision)')
         .option('--name <name>', 'display name (H1 in body); defaults to file basename')
         .option('--description <text>', 'description field for frontmatter; defaults to a generic placeholder')
         .option('--rid <id>', 'optional request id to disambiguate multiple writes on the same day')
-        .option('--dry-run', 'render the markdown but do not write to disk', false)).action((options) => {
-        const validation = validateProjectRoot(options.project);
-        if (!validation.ok) {
-            printResult(io, fail('audit.artifact.write', validation.code, validation.message, {
-                kind: 'narrative',
-                slug: '',
-                title: '',
-                date: '',
-                filePath: '',
-                memoryDir: '',
-                indexPath: '',
-                indexSynced: false
-            }, ['Verify the project path exists and is a directory']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        if (!isSupportedArtifactKind(options.kind)) {
-            printResult(io, fail('audit.artifact.write', 'INVALID_KIND', `Unknown --kind "${options.kind}". Supported: ${SUPPORTED_ARTIFACT_KINDS.join(', ')}.`, {
-                kind: 'narrative',
-                slug: '',
-                title: '',
-                date: '',
-                filePath: '',
-                memoryDir: '',
-                indexPath: '',
-                indexSynced: false
-            }, [
-                `Re-run with --kind <one of ${SUPPORTED_ARTIFACT_KINDS.join(' | ')}>`,
-                'See .peaks/memory/audit-artifact-convention.md for the 4 artifact types.'
-            ]), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        const inputAbs = resolve(options.input);
-        if (!existsSync(inputAbs)) {
-            printResult(io, fail('audit.artifact.write', 'INPUT_NOT_FOUND', `--input file not found: ${options.input}`, {
-                kind: options.kind,
-                slug: '',
-                title: '',
-                date: '',
-                filePath: '',
-                memoryDir: '',
-                indexPath: '',
-                indexSynced: false
-            }, ['Verify the --input path is correct (relative paths resolve against cwd)']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        const baseName = options.name ?? options.input.split(/[\\/]/).pop() ?? 'untitled';
-        const description = options.description ??
-            `Audit artifact (${options.kind}) archived via peaks audit artifact write on ${new Date().toISOString().slice(0, 10)}.`;
-        const writeOpts = {
-            projectRoot: validation.projectRoot,
-            dryRun: options.dryRun === true,
-            ...(options.rid ? { rid: options.rid } : {})
-        };
-        let record;
-        try {
-            switch (options.kind) {
-                case 'prompt': {
-                    const body = readFileSync(inputAbs, 'utf8');
-                    record = writePrompt({ name: baseName, description, body }, writeOpts);
-                    break;
-                }
-                case 'machine-output': {
-                    const json = readFileSync(inputAbs, 'utf8');
-                    record = writeMachineOutput({ name: baseName, description, json }, writeOpts);
-                    break;
-                }
-                case 'narrative': {
-                    const body = readFileSync(inputAbs, 'utf8');
-                    record = writeNarrative({ name: baseName, description, body }, writeOpts);
-                    break;
-                }
-                case 'decision': {
-                    // `--input` is a RedLineAudit JSON document — typically
-                    // an archived `peaks audit static` result — validated field by field
-                    // before it reaches the writer, because the writer renders whatever
-                    // it is given into a memory record with no further checks.
-                    // `--name` and `--description` do not apply: the decision slug and
-                    // title come from the scan date (and `--rid`), exactly as
-                    // `peaks audit static --record` derives them.
-                    const audit = parseRedLineAuditInput(readFileSync(inputAbs, 'utf8'));
-                    record = writeDecision(audit, writeOpts);
-                    break;
-                }
-                default: {
-                    // Unreachable: isSupportedArtifactKind already filtered.
-                    throw new Error(`unreachable: kind=${options.kind}`);
-                }
-            }
-        }
-        catch (err) {
-            // A malformed decision input is the caller's document, not a write
-            // failure: name it as input so the remedy reads as "fix the JSON field".
-            printResult(io, fail('audit.artifact.write', err instanceof RedLineAuditInputError ? 'AUDIT_ARTIFACT_INPUT_INVALID' : 'WRITE_FAILED', getErrorMessage(err), {
-                kind: options.kind,
-                slug: '',
-                title: '',
-                date: '',
-                filePath: '',
-                memoryDir: '',
-                indexPath: '',
-                indexSynced: false
-            }, err instanceof RedLineAuditInputError
-                ? [
-                    'Inspect the named field; --kind decision takes the JSON shape `peaks audit static --json` prints.'
-                ]
-                : ['Inspect the error message; for --kind machine-output ensure --input is valid JSON']), options.json);
-            process.exitCode = 1;
-            return;
-        }
-        printResult(io, ok('audit.artifact.write', record, [], [
-            `Artifact written via ${record.kind} writer.`,
-            record.indexSynced
-                ? 'Memory index regenerated; entry will appear in `peaks project memories` on next read.'
-                : 'Memory index NOT regenerated; run `peaks project memories --project <root>` to refresh.'
-        ]), options.json);
-    });
-}
-function emptyStaticAuditData() {
-    return {
-        audit: {
-            totalRedLines: 0,
-            cliBacked: 0,
-            partial: 0,
-            proseOnly: 0,
-            audit: [],
-            enforcerFindings: []
-        },
-        agentShield: {
-            spawned: false,
-            installed: false,
-            reason: 'flag-disabled',
-            findings: []
-        }
-    };
+        .option('--dry-run', 'render the markdown but do not write to disk', false)).action((options) => runArtifactWrite(options, io));
 }
-function auditGoalFailureData(need, projectRoot, providerBinding = 'unresolved', missingEnv) {
-    return {
-        status: 'audit-failed',
-        providerBinding,
-        need,
-        projectRoot,
-        ...(missingEnv === undefined ? {} : { missingEnv })
-    };
+function registerArtifactCommands(audit, io) {
+    const artifact = audit.command('artifact').description(ARTIFACT_GROUP_DESCRIPTION);
+    registerArtifactWriteCommand(artifact, io);
 }
-/** The slice-owned error codes are carried verbatim so callers can gate on them. */
-function auditGoalErrorCode(error) {
-    if (error instanceof IncompleteAuditError ||
-        error instanceof LlmBindingError ||
-        error instanceof LlmRequestError) {
-        return error.code;
-    }
-    return 'AUDIT_GOAL_FAILED';
-}
-function auditGoalNextActions(code) {
-    switch (code) {
-        case 'LLM_CREDENTIAL_MISSING':
-            return [
-                'Export ANTHROPIC_AUTH_TOKEN (or ANTHROPIC_API_KEY) in the environment that launches peaks, then re-run.',
-                'For an offline scaffold instead of an audit, re-run with `--llm-provider stub` — it performs NO audit.'
-            ];
-        case 'LLM_MODEL_MISSING':
-            return [
-                'Export ANTHROPIC_MODEL (or CLAUDE_CODE_SUBAGENT_MODEL) in the environment that launches peaks, then re-run.'
-            ];
-        case 'INCOMPLETE_AUDIT':
-            return [
-                'The LLM reply omitted a required dimension; re-run so autonomous work never proceeds on a partial audit.'
-            ];
-        default:
-            return ['Inspect the failure above, then re-run with the same --need.'];
-    }
-}
-function emptyProseRatioResult() {
-    return {
-        totalRedLines: 0,
-        cliBacked: 0,
-        partial: 0,
-        proseOnly: 0,
-        discoveredProseOnly: 0,
-        informational: 0,
-        ratio: 0,
-        target: 0.05,
-        exceeds: false
-    };
+export function registerAuditCommands(program, io) {
+    const audit = program.command('audit', { hidden: true }).description(AUDIT_DESCRIPTION);
+    registerRedLinesCommand(audit, io);
+    registerStaticCommand(audit, io);
+    registerProseRatioCommand(audit, io);
+    registerGoalCommand(audit, io);
+    registerArtifactCommands(audit, io);
 }

package/dist/cli/commands/audit-goal-runners.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `peaks audit goal` runner — the peaks-audit entry gate.
+ *
+ * The action body moved out of `audit-commands.ts` verbatim; the registrar now
+ * only wires the command and delegates. This is the one action whose delegate
+ * returns a promise, so the runner stays `async` (it awaits `auditGoal()`).
+ *
+ * `anthropic` is the default and reads the session's own environment
+ * (see `resolveAnthropicConfig`). `stub` stays for CI/tests but is
+ * reported as a scaffold, and a missing credential fails loudly — a silent
+ * fall back to the scaffold envelope would leave the gate exactly as fake
+ * as it was before this slice.
+ */
+import { type ProgramIO } from '../cli-helpers.js';
+import { type AuditGoalOptions } from './audit-command-shared.js';
+export declare const AUDIT_GOAL_DESCRIPTION = "Audit a human need across 6 dimensions and propose a goal (peaks-audit primitive)";
+export declare function runAuditGoal(options: AuditGoalOptions, io: ProgramIO): Promise<void>;