@useorgx/wizard 0.1.62 → 0.1.64

package/README.md

@@ -34,8 +34,8 @@ The wizard modifies local tool configuration only. Depending on the command, it
 - `work-graph runtime-event --source codex|claude --summary "..."` lets an agent write public-safe runtime evidence that the next AQ profile can collect.
 - `hooks install [--targets codex,claude-code]` installs bounded local capture hooks. Terminal events write compact session summaries to a durable queue, then request a detached single-flight delivery worker. The hook does not read credentials or perform network I/O. Set `ORGX_SESSION_SUMMARY_AUTO_FLUSH=off` for local-only capture and manual delivery. The legacy transcript-derived execution-graph emit remains off unless `ORGX_EMIT_EXECUTION_GRAPH=1` is set.
 - `ORGX_SESSION_WORK_CONTEXT` can carry one explicit, bounded JSON annotation for intent, authority, cost, artifact references, and evidence references. The Wizard does not infer this context from prompts; invalid or oversized annotations are omitted, and unknown fields are removed before cloud delivery.
-- `hooks flush [--limit 100]` is the manual delivery and recovery path. It uses the same queue lease as automatic delivery and removes each file only after a successful server acknowledgement. Failed or malformed captures stay on disk for inspection and retry.
-- `hooks doctor` shows hook wiring, automatic-delivery configuration, the capture-queue count, and the legacy spool count without changing local configuration.
+- `hooks flush [--limit 100]` is the manual delivery and recovery path. It uses the same queue lease as automatic delivery and removes each valid file only after a successful server acknowledgement. Failed captures stay queued for retry; malformed captures move to the owner-only `session-summary-captures/quarantine/` directory and make a manual flush fail visibly without being deleted.
+- `hooks doctor` shows hook wiring, automatic-delivery configuration, active and quarantined capture counts, and the legacy spool count without changing local configuration.
 - `hooks backfill` previews compact summaries distilled from the legacy spool. It does not upload or archive anything unless you add `--post --yes`; `--truncate` also requires both flags and archives the original spool only after every upload succeeds.
 - `map [query...] --deep-search` runs the v1 Operating Map discovery flow over connected company signals and cited deep research, prints source health and low-confidence ProcessCards, and keeps ownership/timing/"done" confirmation human-gated. Add `--candidate <id-or-number> --yes` to explicitly propose one card as an OperatingProcess; the wizard never auto-confirms or activates inferred workflow ownership.
 - `surface list` shows supported surfaces and current status.

package/dist/cli.js

@@ -2,7 +2,7 @@
 
 // src/cli.ts
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="132d0d75-ee1b-5262-9ce6-1091765e2527")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cf979138-322b-5229-81f2-931f9cdf95d2")}catch(e){}}();
 import * as clack from "@clack/prompts";
 import { spawnSync as spawnSync5 } from "child_process";
 import { readFileSync as readFileSync10 } from "fs";
@@ -3736,8 +3736,8 @@ function encodeRepoPath2(value) {
   return value.split("/").filter((segment) => segment.length > 0).map((segment) => encodeURIComponent(segment)).join("/");
 }
 function isLikelyRepoFilePath(path) {
-  const basename6 = path.split("/").pop() ?? path;
-  return basename6.includes(".") && !/^\.[^./]+$/.test(basename6);
+  const basename7 = path.split("/").pop() ?? path;
+  return basename7.includes(".") && !/^\.[^./]+$/.test(basename7);
 }
 function buildContentsUrl2(spec, path) {
   const encodedPath = encodeRepoPath2(path);
@@ -6354,7 +6354,7 @@ function initializeWizardSentry() {
   Sentry.init({
     dsn,
     environment: process.env.ORGX_SENTRY_ENVIRONMENT || "production",
-    release: "useorgx-wizard@0.1.62",
+    release: "useorgx-wizard@0.1.64",
     tracesSampleRate: sampleRate(process.env.ORGX_SENTRY_TRACES_SAMPLE_RATE),
     enableLogs: true,
     sendDefaultPii: false,
@@ -14546,6 +14546,15 @@ function countSessionSummaryCaptures(path) {
     return 0;
   }
 }
+function countSessionSummaryQuarantinedCaptures(path) {
+  try {
+    return readdirSync6(join8(path, "quarantine")).filter(
+      (name) => name.includes(".malformed")
+    ).length;
+  } catch {
+    return 0;
+  }
+}
 function backupPath(path, now) {
   const timestamp = now.toISOString().replace(/[:.]/g, "-");
   return `${path}.bak.${timestamp}`;
@@ -14560,7 +14569,7 @@ function hasOrgxHook(raw) {
   return Boolean(raw?.includes(HOOK_MARKER));
 }
 function codexHooksEnabled(raw) {
-  return Boolean(raw && /^\s*codex_hooks\s*=\s*true\s*$/m.test(raw));
+  return Boolean(raw && /^\s*hooks\s*=\s*true\s*$/m.test(raw));
 }
 function codexHasNotify(raw) {
   return Boolean(raw && /^\s*notify\s*=/m.test(raw));
@@ -15019,26 +15028,40 @@ function mergeClaudeHooks(raw, paths) {
 }
 function ensureCodexHooksFeature(raw) {
   const current = raw ?? "";
-  if (codexHooksEnabled(current)) {
-    return { changed: false, value: current };
+  const withoutDeprecatedFlag = current.replace(
+    /^\s*codex_hooks\s*=\s*(?:true|false)\s*(?:\r?\n|$)/gm,
+    ""
+  );
+  const removedDeprecatedFlag = withoutDeprecatedFlag !== current;
+  if (codexHooksEnabled(withoutDeprecatedFlag)) {
+    return {
+      changed: removedDeprecatedFlag,
+      value: withoutDeprecatedFlag
+    };
   }
-  if (/^\s*codex_hooks\s*=\s*false\s*$/m.test(current)) {
+  if (/^\s*hooks\s*=\s*false\s*$/m.test(withoutDeprecatedFlag)) {
     return {
       changed: true,
-      value: current.replace(/^\s*codex_hooks\s*=\s*false\s*$/m, "codex_hooks = true")
+      value: withoutDeprecatedFlag.replace(
+        /^\s*hooks\s*=\s*false\s*$/m,
+        "hooks = true"
+      )
     };
   }
-  if (/^\s*\[features\]\s*$/m.test(current)) {
+  if (/^\s*\[features\]\s*$/m.test(withoutDeprecatedFlag)) {
     return {
       changed: true,
-      value: current.replace(/^(\s*\[features\]\s*)$/m, "$1\ncodex_hooks = true")
+      value: withoutDeprecatedFlag.replace(
+        /^(\s*\[features\]\s*)$/m,
+        "$1\nhooks = true"
+      )
     };
   }
-  const suffix = current.trimEnd().length > 0 ? "\n\n" : "";
+  const suffix = withoutDeprecatedFlag.trimEnd().length > 0 ? "\n\n" : "";
   return {
     changed: true,
-    value: `${current.trimEnd()}${suffix}[features]
-codex_hooks = true
+    value: `${withoutDeprecatedFlag.trimEnd()}${suffix}[features]
+hooks = true
 `
   };
 }
@@ -15067,7 +15090,10 @@ function inspectRuntimeHooks(options = {}) {
       notifyPreserved: !codexHasNotify(codexConfigRaw) || !hasOrgxHook(codexConfigRaw)
     },
     outboxEvents: countJsonlLines(paths.outboxPath),
-    sessionSummaryCaptures: countSessionSummaryCaptures(paths.sessionSummaryQueueDir)
+    sessionSummaryCaptures: countSessionSummaryCaptures(paths.sessionSummaryQueueDir),
+    sessionSummaryQuarantinedCaptures: countSessionSummaryQuarantinedCaptures(
+      paths.sessionSummaryQueueDir
+    )
   };
 }
 function installRuntimeHooks(targets, options = {}) {
@@ -15158,8 +15184,16 @@ function parseRuntimeHookTargets(value) {
 }
 
 // src/lib/session-summary-queue.ts
-import { existsSync as existsSync10, readdirSync as readdirSync7, readFileSync as readFileSync8, unlinkSync as unlinkSync2 } from "fs";
-import { join as join9 } from "path";
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync10,
+  mkdirSync as mkdirSync5,
+  readdirSync as readdirSync7,
+  readFileSync as readFileSync8,
+  renameSync as renameSync3,
+  unlinkSync as unlinkSync2
+} from "fs";
+import { basename as basename6, join as join9 } from "path";
 
 // src/lib/session-summary-backfill.ts
 import { createReadStream, renameSync as renameSync2, statSync as statSync5, writeFileSync as writeFileSync4 } from "fs";
@@ -15546,6 +15580,8 @@ function truncateSpool(spoolPath, post, options = {}) {
 var SESSION_SUMMARY_CAPTURE_VERSION = "orgx-session-summary-capture/v1";
 var SESSION_SUMMARY_CAPTURE_FILE_SUFFIX = ".capture.json";
 var SESSION_SUMMARY_CAPTURE_MAX_BYTES = 16 * 1024;
+var SESSION_SUMMARY_QUARANTINE_DIR_NAME = "quarantine";
+var SESSION_SUMMARY_QUARANTINE_FILE_SUFFIX = ".malformed";
 function sessionSummaryCaptureFiles(queueDir) {
   if (!existsSync10(queueDir)) return [];
   try {
@@ -15554,6 +15590,33 @@ function sessionSummaryCaptureFiles(queueDir) {
     return [];
   }
 }
+function sessionSummaryQuarantineDir(queueDir) {
+  return join9(queueDir, SESSION_SUMMARY_QUARANTINE_DIR_NAME);
+}
+function quarantineMalformedCapture(path, queueDir) {
+  const quarantineDir = sessionSummaryQuarantineDir(queueDir);
+  try {
+    mkdirSync5(quarantineDir, { recursive: true, mode: 448 });
+    const baseTarget = join9(
+      quarantineDir,
+      `${basename6(path)}${SESSION_SUMMARY_QUARANTINE_FILE_SUFFIX}`
+    );
+    let target = baseTarget;
+    let collision = 0;
+    while (existsSync10(target)) {
+      collision += 1;
+      target = `${baseTarget}.${collision}`;
+    }
+    renameSync3(path, target);
+    try {
+      chmodSync2(target, 384);
+    } catch {
+    }
+    return target;
+  } catch {
+    return null;
+  }
+}
 function isRecord4(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -15666,14 +15729,20 @@ async function flushSessionSummaryCaptures(options) {
     acknowledged: 0,
     retained: 0,
     malformed: 0,
+    quarantined: 0,
     fallbackAcknowledged: 0
   };
   for (const path of selected) {
     const capture = readSessionSummaryCapture(path);
     if (!capture) {
       result.malformed += 1;
-      result.retained += 1;
-      result.firstError ??= `Malformed capture retained: ${path}`;
+      const quarantinedPath = quarantineMalformedCapture(path, options.queueDir);
+      if (quarantinedPath) {
+        result.quarantined += 1;
+      } else {
+        result.retained += 1;
+        result.firstError ??= `Malformed capture could not be quarantined: ${path}`;
+      }
       continue;
     }
     result.attempted += 1;
@@ -15711,10 +15780,10 @@ import { randomUUID as randomUUID3 } from "crypto";
 import {
   closeSync as closeSync2,
   fsyncSync,
-  mkdirSync as mkdirSync5,
+  mkdirSync as mkdirSync6,
   openSync as openSync2,
   readFileSync as readFileSync9,
-  renameSync as renameSync3,
+  renameSync as renameSync4,
   statSync as statSync6,
   unlinkSync as unlinkSync3,
   writeSync
@@ -15791,7 +15860,7 @@ function claimSessionSummaryFlushLease(queueDir, options = {}) {
   const path = join10(queueDir, SESSION_SUMMARY_FLUSH_LOCK_NAME);
   const record = { token, pid, claimed_at: now.toISOString() };
   try {
-    mkdirSync5(queueDir, { recursive: true, mode: 448 });
+    mkdirSync6(queueDir, { recursive: true, mode: 448 });
   } catch {
     return { acquired: false, reason: "unavailable" };
   }
@@ -15811,7 +15880,7 @@ function claimSessionSummaryFlushLease(queueDir, options = {}) {
   }
   const stalePath = `${path}.stale-${token}`;
   try {
-    renameSync3(path, stalePath);
+    renameSync4(path, stalePath);
     unlinkSync3(stalePath);
   } catch {
     return { acquired: false, reason: "busy" };
@@ -16573,6 +16642,7 @@ function printRuntimeHookInspection(report) {
   console.log(`  ${report.installed.summaryHookScript ? ICON.ok : ICON.warn}  ${pc3.bold("summary hook")} ${report.installed.summaryHookScript ? pc3.green("installed") : pc3.yellow("missing")}  ${pc3.dim(report.paths.summaryHookScriptPath)}`);
   console.log(`  ${report.installed.automaticDelivery ? ICON.ok : ICON.warn}  ${pc3.bold("auto delivery")} ${report.installed.automaticDelivery ? pc3.green("configured") : pc3.yellow("not configured")}  ${pc3.dim("detached, ACK-gated worker")}`);
   console.log(`  ${ICON.skip}  ${pc3.bold("capture queue")} ${pc3.dim(`${report.sessionSummaryCaptures} capture${report.sessionSummaryCaptures === 1 ? "" : "s"} at ${report.paths.sessionSummaryQueueDir}`)}`);
+  console.log(`  ${report.sessionSummaryQuarantinedCaptures === 0 ? ICON.skip : ICON.warn}  ${pc3.bold("quarantine   ")} ${pc3.dim(`${report.sessionSummaryQuarantinedCaptures} malformed capture${report.sessionSummaryQuarantinedCaptures === 1 ? "" : "s"}, recoverable on disk`)}`);
   console.log(`  ${ICON.skip}  ${pc3.bold("outbox      ")} ${pc3.dim(`${report.outboxEvents} event${report.outboxEvents === 1 ? "" : "s"} at ${report.paths.outboxPath}`)}`);
 }
 function printSessionSummaryFlush(result) {
@@ -16581,7 +16651,7 @@ function printSessionSummaryFlush(result) {
     return;
   }
   const delivered = `${result.acknowledged}/${result.attempted} acknowledged`;
-  console.log(`  ${result.retained === 0 ? ICON.ok : ICON.warn}  ${pc3.bold("captures    ")} ${pc3.dim(`${delivered}, ${result.retained} retained, ${result.malformed} malformed`)}`);
+  console.log(`  ${result.retained === 0 && result.malformed === 0 ? ICON.ok : ICON.warn}  ${pc3.bold("captures    ")} ${pc3.dim(`${delivered}, ${result.retained} retained, ${result.quarantined} quarantined, ${result.malformed} malformed`)}`);
   if (result.fallbackAcknowledged > 0) {
     console.log(`  ${ICON.warn}  ${pc3.bold("fallback    ")} ${pc3.dim(`${result.fallbackAcknowledged} capture(s) delivered through the legacy Work Graph endpoint`)}`);
   }
@@ -16598,6 +16668,7 @@ async function runSessionSummaryFlushCommand(options) {
       acknowledged: 0,
       retained: 0,
       malformed: 0,
+      quarantined: 0,
       fallbackAcknowledged: 0,
       skipped: "empty_queue"
     };
@@ -16614,6 +16685,7 @@ async function runSessionSummaryFlushCommand(options) {
         acknowledged: 0,
         retained: 0,
         malformed: 0,
+        quarantined: 0,
         fallbackAcknowledged: 0,
         skipped: "already_running"
       };
@@ -16656,11 +16728,12 @@ async function runSessionSummaryFlushCommand(options) {
     command: "hooks flush",
     attempted: String(result.attempted),
     acknowledged: String(result.acknowledged),
-    retained: String(result.retained)
+    retained: String(result.retained),
+    quarantined: String(result.quarantined)
   });
-  if (result.retained > 0) process.exitCode = 1;
+  if (result.retained > 0 || result.malformed > 0) process.exitCode = 1;
   if (options.json) {
-    console.log(JSON.stringify({ ok: result.retained === 0, queueDir, ...result }, null, 2));
+    console.log(JSON.stringify({ ok: result.retained === 0 && result.malformed === 0, queueDir, ...result }, null, 2));
     return;
   }
   printSessionSummaryFlush(result);
@@ -18434,7 +18507,7 @@ async function main() {
   initializeWizardSentry();
   const program = new Command();
   program.name("orgx-wizard").description("Add OrgX MCP configs, skills/rules, and companion plugins to your local AI tools.").showHelpAfterError();
-  const pkgVersion = true ? "0.1.62" : void 0;
+  const pkgVersion = true ? "0.1.64" : void 0;
   program.version(pkgVersion ?? "unknown", "-V, --version");
   program.hook("preAction", (_thisCommand, actionCommand) => {
     if (Boolean(actionCommand.optsWithGlobals().json)) return;
@@ -19478,4 +19551,4 @@ main().catch(async (error) => {
   process.exitCode = 1;
 });
 //# sourceMappingURL=cli.js.map
-//# debugId=132d0d75-ee1b-5262-9ce6-1091765e2527
+//# debugId=cf979138-322b-5229-81f2-931f9cdf95d2