git-vibe-setup 5.0.0 → 5.1.1

package/dist/install.js

@@ -93,7 +93,8 @@ export function pinWorkflowReleaseRefs(content, releaseTag) {
 export function migrateGitVibeConfigContent(content) {
     const migratedComments = migrateLegacyEventDeliveryComments(content);
     const migratedAuth = migrateGithubAuthConfig(migratedComments);
-    return ensureTrailingNewline(migrateLegacyAiProfiles(migratedAuth));
+    const migratedSafety = migratePromptInjectionSafetyConfig(migratedAuth);
+    return ensureTrailingNewline(migrateLegacyAiProfiles(migratedSafety));
 }
 function isManagedWorkflowTarget(file) {
     return isManagedWorkflowFile(file.targetPath, basename(file.targetPath));
@@ -262,6 +263,16 @@ function migrateGithubAuthConfig(content) {
     }
     return `${content.trimEnd()}\n\n${githubAppAuth}`;
 }
+function migratePromptInjectionSafetyConfig(content) {
+    const document = parseDocument(content);
+    if (document.errors.length > 0) {
+        throw new Error(`git-vibe-setup could not migrate .github/git-vibe.yml because it is not valid YAML: ${document.errors[0]?.message}`);
+    }
+    const root = document.contents;
+    if (!isMap(root) || root.has("safety"))
+        return content;
+    return `${content.trimEnd()}\n\nsafety:\n  prompt_injection_gate: true\n`;
+}
 function migrateLegacyAiProfiles(content) {
     const document = parseDocument(content);
     if (document.errors.length > 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-vibe-setup",
-  "version": "5.0.0",
+  "version": "5.1.1",
   "private": false,
   "type": "module",
   "bin": {