@useorgx/wizard 0.1.63 → 0.1.65

package/README.md

@@ -33,9 +33,9 @@ The wizard modifies local tool configuration only. Depending on the command, it
 - `work-graph preview --from all` shows the same profile story locally without publishing.
 - `work-graph runtime-event --source codex|claude --summary "..."` lets an agent write public-safe runtime evidence that the next AQ profile can collect.
 - `hooks install [--targets codex,claude-code]` installs bounded local capture hooks. Terminal events write compact session summaries to a durable queue, then request a detached single-flight delivery worker. The hook does not read credentials or perform network I/O. Set `ORGX_SESSION_SUMMARY_AUTO_FLUSH=off` for local-only capture and manual delivery. The legacy transcript-derived execution-graph emit remains off unless `ORGX_EMIT_EXECUTION_GRAPH=1` is set.
-- `ORGX_SESSION_WORK_CONTEXT` can carry one explicit, bounded JSON annotation for intent, authority, cost, artifact references, and evidence references. The Wizard does not infer this context from prompts; invalid or oversized annotations are omitted, and unknown fields are removed before cloud delivery.
-- `hooks flush [--limit 100]` is the manual delivery and recovery path. It uses the same queue lease as automatic delivery and removes each file only after a successful server acknowledgement. Failed or malformed captures stay on disk for inspection and retry.
-- `hooks doctor` shows hook wiring, automatic-delivery configuration, the capture-queue count, and the legacy spool count without changing local configuration.
+- `ORGX_SESSION_WORK_CONTEXT` can carry one explicit, bounded JSON annotation for intent, authority, cost, artifact and evidence references, plus exact Context Capsule, decision, constraint, expectation, applied-learning, and prior-receipt references. Capsule delivery requires both the capsule reference and delivery timestamp. The Wizard does not infer this context from prompts; invalid or oversized annotations are omitted, and unknown fields are removed before cloud delivery.
+- `hooks flush [--limit 100]` is the manual delivery and recovery path. It uses the same queue lease as automatic delivery and removes each valid file only after a successful server acknowledgement. Failed captures stay queued for retry; malformed captures move to the owner-only `session-summary-captures/quarantine/` directory and make a manual flush fail visibly without being deleted.
+- `hooks doctor` shows hook wiring, automatic-delivery configuration, active and quarantined capture counts, and the legacy spool count without changing local configuration.
 - `hooks backfill` previews compact summaries distilled from the legacy spool. It does not upload or archive anything unless you add `--post --yes`; `--truncate` also requires both flags and archives the original spool only after every upload succeeds.
 - `map [query...] --deep-search` runs the v1 Operating Map discovery flow over connected company signals and cited deep research, prints source health and low-confidence ProcessCards, and keeps ownership/timing/"done" confirmation human-gated. Add `--candidate <id-or-number> --yes` to explicitly propose one card as an OperatingProcess; the wizard never auto-confirms or activates inferred workflow ownership.
 - `surface list` shows supported surfaces and current status.

package/dist/cli.js

@@ -2,7 +2,7 @@
 
 // src/cli.ts
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d41747ca-7c63-5e0b-83ef-90af38ff9921")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="af54c3d7-9ef3-5d66-90dc-45a9ecb71d96")}catch(e){}}();
 import * as clack from "@clack/prompts";
 import { spawnSync as spawnSync5 } from "child_process";
 import { readFileSync as readFileSync10 } from "fs";
@@ -3736,8 +3736,8 @@ function encodeRepoPath2(value) {
   return value.split("/").filter((segment) => segment.length > 0).map((segment) => encodeURIComponent(segment)).join("/");
 }
 function isLikelyRepoFilePath(path) {
-  const basename6 = path.split("/").pop() ?? path;
-  return basename6.includes(".") && !/^\.[^./]+$/.test(basename6);
+  const basename7 = path.split("/").pop() ?? path;
+  return basename7.includes(".") && !/^\.[^./]+$/.test(basename7);
 }
 function buildContentsUrl2(spec, path) {
   const encodedPath = encodeRepoPath2(path);
@@ -6354,7 +6354,7 @@ function initializeWizardSentry() {
   Sentry.init({
     dsn,
     environment: process.env.ORGX_SENTRY_ENVIRONMENT || "production",
-    release: "useorgx-wizard@0.1.63",
+    release: "useorgx-wizard@0.1.65",
     tracesSampleRate: sampleRate(process.env.ORGX_SENTRY_TRACES_SAMPLE_RATE),
     enableLogs: true,
     sendDefaultPii: false,
@@ -14281,7 +14281,7 @@ function workRefs(value) {
 
 function workIso(value) {
   var text = workString(value, 100);
-  return text && /^d{4}-d{2}-d{2}Td{2}:d{2}:d{2}(?:.d+)?(?:Z|[+-]d{2}:d{2})$/.test(text) && !Number.isNaN(Date.parse(text))
+  return text && /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})$/.test(text) && !Number.isNaN(Date.parse(text))
     ? text
     : null;
 }
@@ -14316,6 +14316,18 @@ export function parseExplicitWorkContext(value) {
   var validUntil = authority.valid_until === undefined ? undefined : workIso(authority.valid_until);
   var artifactRefs = workRefs(parsed.artifact_refs);
   var evidenceRefs = workRefs(parsed.evidence_refs);
+  var semantic = parsed.semantic_refs === undefined ? undefined : workObject(parsed.semantic_refs);
+  var contextCapsuleRef = !semantic || semantic.context_capsule_ref === undefined
+    ? undefined
+    : workRef(semantic.context_capsule_ref);
+  var contextDeliveredAt = !semantic || semantic.context_delivered_at === undefined
+    ? undefined
+    : workIso(semantic.context_delivered_at);
+  var decisionRefs = !semantic ? [] : workRefs(semantic.decision_refs);
+  var constraintRefs = !semantic ? [] : workRefs(semantic.constraint_refs);
+  var expectationRefs = !semantic ? [] : workRefs(semantic.expectation_refs);
+  var learningRefs = !semantic ? [] : workRefs(semantic.learning_refs);
+  var priorReceiptRefs = !semantic ? [] : workRefs(semantic.prior_receipt_refs);
   var currency = workString(cost.currency, 12);
   var source = cost.source === undefined ? undefined : workString(cost.source, 120);
   if (!summary || objective === null || acceptance === null || intentConstraints === null || requestRef === null) return null;
@@ -14326,6 +14338,11 @@ export function parseExplicitWorkContext(value) {
   if (!currency || !/^[A-Z][A-Z0-9_-]{1,11}$/.test(currency) || typeof cost.total !== "number" || !Number.isFinite(cost.total) || cost.total < 0 || cost.total > 100000 || source === null) return null;
   if (cost.estimated !== undefined && typeof cost.estimated !== "boolean") return null;
   if (artifactRefs === null || evidenceRefs === null) return null;
+  if (parsed.semantic_refs !== undefined && !semantic) return null;
+  if (contextCapsuleRef === null || contextDeliveredAt === null || decisionRefs === null || constraintRefs === null || expectationRefs === null || learningRefs === null || priorReceiptRefs === null) return null;
+  if (Boolean(contextCapsuleRef) !== Boolean(contextDeliveredAt)) return null;
+  var semanticRefCount = decisionRefs.length + constraintRefs.length + expectationRefs.length + learningRefs.length + priorReceiptRefs.length + (contextCapsuleRef ? 1 : 0);
+  if (semantic !== undefined && (semanticRefCount === 0 || semanticRefCount > 20)) return null;
   var normalizedIntent = { summary: summary, acceptance_criteria: acceptance, constraints: intentConstraints };
   if (objective) normalizedIntent.objective = objective;
   if (requestRef) normalizedIntent.request_ref = requestRef;
@@ -14341,6 +14358,20 @@ export function parseExplicitWorkContext(value) {
   if (validUntil) normalizedAuthority.valid_until = validUntil;
   var normalizedCost = { currency: currency, total: cost.total, estimated: cost.estimated !== false };
   if (source) normalizedCost.source = source;
+  var normalizedSemantic;
+  if (semantic !== undefined) {
+    normalizedSemantic = {
+      decision_refs: decisionRefs,
+      constraint_refs: constraintRefs,
+      expectation_refs: expectationRefs,
+      learning_refs: learningRefs,
+      prior_receipt_refs: priorReceiptRefs,
+    };
+    if (contextCapsuleRef) {
+      normalizedSemantic.context_capsule_ref = contextCapsuleRef;
+      normalizedSemantic.context_delivered_at = contextDeliveredAt;
+    }
+  }
   return {
     schema_version: "orgx-session-work-context/v1",
     provenance: "producer_asserted",
@@ -14349,6 +14380,7 @@ export function parseExplicitWorkContext(value) {
     cost: normalizedCost,
     artifact_refs: artifactRefs,
     evidence_refs: evidenceRefs,
+    ...(normalizedSemantic ? { semantic_refs: normalizedSemantic } : {}),
   };
 }
 
@@ -14546,6 +14578,15 @@ function countSessionSummaryCaptures(path) {
     return 0;
   }
 }
+function countSessionSummaryQuarantinedCaptures(path) {
+  try {
+    return readdirSync6(join8(path, "quarantine")).filter(
+      (name) => name.includes(".malformed")
+    ).length;
+  } catch {
+    return 0;
+  }
+}
 function backupPath(path, now) {
   const timestamp = now.toISOString().replace(/[:.]/g, "-");
   return `${path}.bak.${timestamp}`;
@@ -15081,7 +15122,10 @@ function inspectRuntimeHooks(options = {}) {
       notifyPreserved: !codexHasNotify(codexConfigRaw) || !hasOrgxHook(codexConfigRaw)
     },
     outboxEvents: countJsonlLines(paths.outboxPath),
-    sessionSummaryCaptures: countSessionSummaryCaptures(paths.sessionSummaryQueueDir)
+    sessionSummaryCaptures: countSessionSummaryCaptures(paths.sessionSummaryQueueDir),
+    sessionSummaryQuarantinedCaptures: countSessionSummaryQuarantinedCaptures(
+      paths.sessionSummaryQueueDir
+    )
   };
 }
 function installRuntimeHooks(targets, options = {}) {
@@ -15172,8 +15216,16 @@ function parseRuntimeHookTargets(value) {
 }
 
 // src/lib/session-summary-queue.ts
-import { existsSync as existsSync10, readdirSync as readdirSync7, readFileSync as readFileSync8, unlinkSync as unlinkSync2 } from "fs";
-import { join as join9 } from "path";
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync10,
+  mkdirSync as mkdirSync5,
+  readdirSync as readdirSync7,
+  readFileSync as readFileSync8,
+  renameSync as renameSync3,
+  unlinkSync as unlinkSync2
+} from "fs";
+import { basename as basename6, join as join9 } from "path";
 
 // src/lib/session-summary-backfill.ts
 import { createReadStream, renameSync as renameSync2, statSync as statSync5, writeFileSync as writeFileSync4 } from "fs";
@@ -15207,6 +15259,29 @@ var referenceList = z.array(externalReferenceSchema).max(20).default([]).transfo
     return a < b ? -1 : a > b ? 1 : 0;
   });
 });
+var semanticReferencesSchema = z.object({
+  context_capsule_ref: externalReferenceSchema.optional(),
+  context_delivered_at: z.string().datetime({ offset: true }).optional(),
+  decision_refs: referenceList,
+  constraint_refs: referenceList,
+  expectation_refs: referenceList,
+  learning_refs: referenceList,
+  prior_receipt_refs: referenceList
+}).superRefine((value, context) => {
+  if (Boolean(value.context_capsule_ref) !== Boolean(value.context_delivered_at)) {
+    context.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: "context_capsule_ref and context_delivered_at must be supplied together"
+    });
+  }
+  const totalRefs = value.decision_refs.length + value.constraint_refs.length + value.expectation_refs.length + value.learning_refs.length + value.prior_receipt_refs.length + (value.context_capsule_ref ? 1 : 0);
+  if (totalRefs === 0 || totalRefs > 20) {
+    context.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: "semantic_refs must contain between 1 and 20 references"
+    });
+  }
+});
 var authoritySchema = z.object({
   mode: z.enum([
     "explicit",
@@ -15251,7 +15326,8 @@ var sessionWorkContextInputSchema = z.object({
     source: boundedText(120).optional()
   }),
   artifact_refs: referenceList,
-  evidence_refs: referenceList
+  evidence_refs: referenceList,
+  semantic_refs: semanticReferencesSchema.optional()
 });
 function normalizeSessionWorkContext(value) {
   const parsed = sessionWorkContextInputSchema.safeParse(value);
@@ -15560,6 +15636,8 @@ function truncateSpool(spoolPath, post, options = {}) {
 var SESSION_SUMMARY_CAPTURE_VERSION = "orgx-session-summary-capture/v1";
 var SESSION_SUMMARY_CAPTURE_FILE_SUFFIX = ".capture.json";
 var SESSION_SUMMARY_CAPTURE_MAX_BYTES = 16 * 1024;
+var SESSION_SUMMARY_QUARANTINE_DIR_NAME = "quarantine";
+var SESSION_SUMMARY_QUARANTINE_FILE_SUFFIX = ".malformed";
 function sessionSummaryCaptureFiles(queueDir) {
   if (!existsSync10(queueDir)) return [];
   try {
@@ -15568,6 +15646,33 @@ function sessionSummaryCaptureFiles(queueDir) {
     return [];
   }
 }
+function sessionSummaryQuarantineDir(queueDir) {
+  return join9(queueDir, SESSION_SUMMARY_QUARANTINE_DIR_NAME);
+}
+function quarantineMalformedCapture(path, queueDir) {
+  const quarantineDir = sessionSummaryQuarantineDir(queueDir);
+  try {
+    mkdirSync5(quarantineDir, { recursive: true, mode: 448 });
+    const baseTarget = join9(
+      quarantineDir,
+      `${basename6(path)}${SESSION_SUMMARY_QUARANTINE_FILE_SUFFIX}`
+    );
+    let target = baseTarget;
+    let collision = 0;
+    while (existsSync10(target)) {
+      collision += 1;
+      target = `${baseTarget}.${collision}`;
+    }
+    renameSync3(path, target);
+    try {
+      chmodSync2(target, 384);
+    } catch {
+    }
+    return target;
+  } catch {
+    return null;
+  }
+}
 function isRecord4(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -15680,14 +15785,20 @@ async function flushSessionSummaryCaptures(options) {
     acknowledged: 0,
     retained: 0,
     malformed: 0,
+    quarantined: 0,
     fallbackAcknowledged: 0
   };
   for (const path of selected) {
     const capture = readSessionSummaryCapture(path);
     if (!capture) {
       result.malformed += 1;
-      result.retained += 1;
-      result.firstError ??= `Malformed capture retained: ${path}`;
+      const quarantinedPath = quarantineMalformedCapture(path, options.queueDir);
+      if (quarantinedPath) {
+        result.quarantined += 1;
+      } else {
+        result.retained += 1;
+        result.firstError ??= `Malformed capture could not be quarantined: ${path}`;
+      }
       continue;
     }
     result.attempted += 1;
@@ -15725,10 +15836,10 @@ import { randomUUID as randomUUID3 } from "crypto";
 import {
   closeSync as closeSync2,
   fsyncSync,
-  mkdirSync as mkdirSync5,
+  mkdirSync as mkdirSync6,
   openSync as openSync2,
   readFileSync as readFileSync9,
-  renameSync as renameSync3,
+  renameSync as renameSync4,
   statSync as statSync6,
   unlinkSync as unlinkSync3,
   writeSync
@@ -15805,7 +15916,7 @@ function claimSessionSummaryFlushLease(queueDir, options = {}) {
   const path = join10(queueDir, SESSION_SUMMARY_FLUSH_LOCK_NAME);
   const record = { token, pid, claimed_at: now.toISOString() };
   try {
-    mkdirSync5(queueDir, { recursive: true, mode: 448 });
+    mkdirSync6(queueDir, { recursive: true, mode: 448 });
   } catch {
     return { acquired: false, reason: "unavailable" };
   }
@@ -15825,7 +15936,7 @@ function claimSessionSummaryFlushLease(queueDir, options = {}) {
   }
   const stalePath = `${path}.stale-${token}`;
   try {
-    renameSync3(path, stalePath);
+    renameSync4(path, stalePath);
     unlinkSync3(stalePath);
   } catch {
     return { acquired: false, reason: "busy" };
@@ -16587,6 +16698,7 @@ function printRuntimeHookInspection(report) {
   console.log(`  ${report.installed.summaryHookScript ? ICON.ok : ICON.warn}  ${pc3.bold("summary hook")} ${report.installed.summaryHookScript ? pc3.green("installed") : pc3.yellow("missing")}  ${pc3.dim(report.paths.summaryHookScriptPath)}`);
   console.log(`  ${report.installed.automaticDelivery ? ICON.ok : ICON.warn}  ${pc3.bold("auto delivery")} ${report.installed.automaticDelivery ? pc3.green("configured") : pc3.yellow("not configured")}  ${pc3.dim("detached, ACK-gated worker")}`);
   console.log(`  ${ICON.skip}  ${pc3.bold("capture queue")} ${pc3.dim(`${report.sessionSummaryCaptures} capture${report.sessionSummaryCaptures === 1 ? "" : "s"} at ${report.paths.sessionSummaryQueueDir}`)}`);
+  console.log(`  ${report.sessionSummaryQuarantinedCaptures === 0 ? ICON.skip : ICON.warn}  ${pc3.bold("quarantine   ")} ${pc3.dim(`${report.sessionSummaryQuarantinedCaptures} malformed capture${report.sessionSummaryQuarantinedCaptures === 1 ? "" : "s"}, recoverable on disk`)}`);
   console.log(`  ${ICON.skip}  ${pc3.bold("outbox      ")} ${pc3.dim(`${report.outboxEvents} event${report.outboxEvents === 1 ? "" : "s"} at ${report.paths.outboxPath}`)}`);
 }
 function printSessionSummaryFlush(result) {
@@ -16595,7 +16707,7 @@ function printSessionSummaryFlush(result) {
     return;
   }
   const delivered = `${result.acknowledged}/${result.attempted} acknowledged`;
-  console.log(`  ${result.retained === 0 ? ICON.ok : ICON.warn}  ${pc3.bold("captures    ")} ${pc3.dim(`${delivered}, ${result.retained} retained, ${result.malformed} malformed`)}`);
+  console.log(`  ${result.retained === 0 && result.malformed === 0 ? ICON.ok : ICON.warn}  ${pc3.bold("captures    ")} ${pc3.dim(`${delivered}, ${result.retained} retained, ${result.quarantined} quarantined, ${result.malformed} malformed`)}`);
   if (result.fallbackAcknowledged > 0) {
     console.log(`  ${ICON.warn}  ${pc3.bold("fallback    ")} ${pc3.dim(`${result.fallbackAcknowledged} capture(s) delivered through the legacy Work Graph endpoint`)}`);
   }
@@ -16612,6 +16724,7 @@ async function runSessionSummaryFlushCommand(options) {
       acknowledged: 0,
       retained: 0,
       malformed: 0,
+      quarantined: 0,
       fallbackAcknowledged: 0,
       skipped: "empty_queue"
     };
@@ -16628,6 +16741,7 @@ async function runSessionSummaryFlushCommand(options) {
         acknowledged: 0,
         retained: 0,
         malformed: 0,
+        quarantined: 0,
         fallbackAcknowledged: 0,
         skipped: "already_running"
       };
@@ -16670,11 +16784,12 @@ async function runSessionSummaryFlushCommand(options) {
     command: "hooks flush",
     attempted: String(result.attempted),
     acknowledged: String(result.acknowledged),
-    retained: String(result.retained)
+    retained: String(result.retained),
+    quarantined: String(result.quarantined)
   });
-  if (result.retained > 0) process.exitCode = 1;
+  if (result.retained > 0 || result.malformed > 0) process.exitCode = 1;
   if (options.json) {
-    console.log(JSON.stringify({ ok: result.retained === 0, queueDir, ...result }, null, 2));
+    console.log(JSON.stringify({ ok: result.retained === 0 && result.malformed === 0, queueDir, ...result }, null, 2));
     return;
   }
   printSessionSummaryFlush(result);
@@ -18448,7 +18563,7 @@ async function main() {
   initializeWizardSentry();
   const program = new Command();
   program.name("orgx-wizard").description("Add OrgX MCP configs, skills/rules, and companion plugins to your local AI tools.").showHelpAfterError();
-  const pkgVersion = true ? "0.1.63" : void 0;
+  const pkgVersion = true ? "0.1.65" : void 0;
   program.version(pkgVersion ?? "unknown", "-V, --version");
   program.hook("preAction", (_thisCommand, actionCommand) => {
     if (Boolean(actionCommand.optsWithGlobals().json)) return;
@@ -19492,4 +19607,4 @@ main().catch(async (error) => {
   process.exitCode = 1;
 });
 //# sourceMappingURL=cli.js.map
-//# debugId=d41747ca-7c63-5e0b-83ef-90af38ff9921
+//# debugId=af54c3d7-9ef3-5d66-90dc-45a9ecb71d96