qualia-framework 6.2.9 → 6.3.0

package/bin/install.js

@@ -4,6 +4,9 @@ const { createInterface } = require("readline");
 const path = require("path");
 const fs = require("fs");
 const ui = require("./qualia-ui.js");
+const { RUNTIME_BIN_SCRIPTS, binFiles } = require("./runtime-manifest.js");
+const { ACTIVE_SKILLS, RETIRED_SKILLS } = require("./command-surface.js");
+const { renderText } = require("./host-adapters.js");
 
 // ─── Colors (kept for legacy log lines; new sections route through qualia-ui) ─
 const TEAL = "\x1b[38;2;0;206;209m";
@@ -24,12 +27,30 @@ const TARGET_CLAUDE_ONLY = "1";
 const TARGET_CODEX_ONLY = "2";
 const TARGET_BOTH = "3";
 
+const CODEX_STATUS_LINE = [
+  "model-with-reasoning",
+  "task-progress",
+  "current-dir",
+  "git-branch",
+  "context-used",
+  "five-hour-limit",
+  "weekly-limit",
+];
+
+const CODEX_STATUS_LINE_BLOCK = [
+  "# Added by qualia-framework — Codex native bottom status line.",
+  "[tui]",
+  `status_line = ${JSON.stringify(CODEX_STATUS_LINE)}`,
+  "status_line_use_colors = true",
+  "",
+].join("\n");
+
 // Total install timer — set in main(), read by the final summary card.
 const installStart = Date.now();
 
 // ─── Team codes ──────────────────────────────────────────
 const DEFAULT_TEAM = {
-  "QS-FAWZI-01": {
+  "QS-FAWZI-11": {
     name: "Fawzi Goussous",
     role: "OWNER",
     description: "Company owner. Full access. Can push to main, approve deploys, edit secrets.",
@@ -125,14 +146,8 @@ function copyTree(src, dest) {
   }
 }
 
-function codexText(content) {
-  return String(content)
-    .replaceAll("~/.claude/", "~/.codex/")
-    .replaceAll("$HOME/.claude/", "$HOME/.codex/")
-    .replaceAll("${HOME}/.claude/", "${HOME}/.codex/")
-    .replaceAll("@~/.claude/", "@~/.codex/")
-    .replaceAll(".claude/", ".codex/");
-}
+const claudeText = (content) => renderText(content, "claude");
+const codexText = (content) => renderText(content, "codex");
 
 function copyTextTransform(src, dest, transform) {
   const destDir = path.dirname(dest);
@@ -156,6 +171,45 @@ function copyTreeTransform(src, dest, transform) {
   }
 }
 
+function ensureCodexStatusLineConfig(existing) {
+  const statusLine = `status_line = ${JSON.stringify(CODEX_STATUS_LINE)}`;
+  const colors = "status_line_use_colors = true";
+  if (!existing || !existing.trim()) {
+    return [
+      "# Created by qualia-framework install.",
+      "# User settings can be added normally; Qualia runtime lives in AGENTS.md, hooks.json, agents/, and bin/.",
+      "",
+      "[features]",
+      "hooks = true",
+      "plugin_hooks = true",
+      "",
+      "# Codex's native status line is rendered at the bottom of the TUI.",
+      "# It supports a fixed list of built-in segment names. Custom command-backed",
+      "# status lines are not supported in Codex 0.133, so Qualia phase/project",
+      "# context is rendered by the SessionStart banner while the native bottom",
+      "# line keeps model, task, directory, git, context, and limit state visible.",
+      CODEX_STATUS_LINE_BLOCK,
+    ].join("\n");
+  }
+
+  let next = existing;
+  if (!/^\[tui\]\s*$/m.test(next)) {
+    return `${next.replace(/\s*$/, "\n\n")}${CODEX_STATUS_LINE_BLOCK}`;
+  }
+
+  const tuiMatch = next.match(/^\[tui\]\s*$(?:\n(?!\[)[^\n]*)*/m);
+  if (!tuiMatch) return `${next.replace(/\s*$/, "\n\n")}${CODEX_STATUS_LINE_BLOCK}`;
+
+  let tuiBlock = tuiMatch[0];
+  if (!/^\s*status_line\s*=/m.test(tuiBlock)) {
+    tuiBlock = tuiBlock.replace(/^\[tui\]\s*$/m, `[tui]\n${statusLine}`);
+  }
+  if (!/^\s*status_line_use_colors\s*=/m.test(tuiBlock)) {
+    tuiBlock = `${tuiBlock.replace(/\s*$/, "")}\n${colors}`;
+  }
+  return `${next.slice(0, tuiMatch.index)}${tuiBlock}${next.slice(tuiMatch.index + tuiMatch[0].length)}`;
+}
+
 function backupIfDifferent(dest, nextContent, label) {
   if (!fs.existsSync(dest)) return false;
   try {
@@ -207,9 +261,7 @@ function parseAgentMarkdown(content) {
 
 function renderCodexAgentToml(markdown, filenameFallback) {
   const parsed = parseAgentMarkdown(markdown);
-  const body = parsed.body
-    .replaceAll("~/.claude/", "~/.codex/")
-    .replaceAll("@~/.claude/", "@~/.codex/");
+  const body = codexText(parsed.body);
   const name = (parsed.name || filenameFallback || "").replace(/^qualia-/, "");
   const description = parsed.description || "Qualia Framework specialist agent.";
   return [
@@ -224,11 +276,7 @@ function renderCodexAgentToml(markdown, filenameFallback) {
 // Pruned from BOTH ~/.claude/skills/ and ~/.codex/skills/ on every install run
 // so the active surface matches what the framework currently ships.
 const DEPRECATED_SKILLS = [
-  "qualia-task",         // v5.7.0 — folded into qualia-feature
-  "qualia-quick",        // v5.7.0 — folded into qualia-feature
-  "qualia-polish-loop",  // v5.8.0 — folded into qualia-polish --loop
-  "qualia-design",       // v4 wave 2 — folded into scope-adaptive qualia-polish
-  "qualia-prd",          // v5.8.0 — surface cleanup
+  ...RETIRED_SKILLS,
 ];
 
 function pruneDeprecatedSkills(baseDir) {
@@ -440,8 +488,8 @@ function targetLabel(t) {
 }
 
 // ─── Resolve team code (tolerates case + O/0 typo in suffix) ─
-// Accepts "qs-fawzi-01", "QS-FAWZI-01", "QS-FAWZI-O1" (letter O in the
-// numeric suffix), and returns the canonical key if found, else null.
+// Accepts lowercase codes and common letter-O typos in numeric suffixes,
+// then returns the canonical key if found, else null.
 // Only normalizes O→0 in the segment AFTER the last dash — "QS-MOAYAD-03"
 // contains a real "O" in the name and must not be mangled.
 function resolveTeamCode(input) {
@@ -470,7 +518,7 @@ async function main() {
   if (!member) {
     console.log("");
     log(`${RED}✗${RESET} Invalid code: "${rawCode}". Get your install code from Fawzi.`);
-    log(`${DIM}  Tip: codes use digit zero, not letter O. Format: QS-NAME-01${RESET}`);
+    log(`${DIM}  Tip: codes use digit zero, not letter O. Format: QS-NAME-##${RESET}`);
     console.log("");
     process.exit(1);
   }
@@ -498,23 +546,22 @@ async function main() {
 
   // ─── Skills ──────────────────────────────────────────
   const skillsDir = path.join(FRAMEWORK_DIR, "skills");
-  const skills = fs
-    .readdirSync(skillsDir)
-    .filter((d) => fs.statSync(path.join(skillsDir, d)).isDirectory());
+  const skills = ACTIVE_SKILLS.filter((d) => fs.existsSync(path.join(skillsDir, d, "SKILL.md")));
 
   printSection("Skills");
   const claudePruned = pruneDeprecatedSkills(CLAUDE_DIR);
   for (const name of claudePruned) ok(`pruned deprecated: ${name}`);
   for (const skill of skills) {
     try {
-      copy(
+      copyTextTransform(
         path.join(skillsDir, skill, "SKILL.md"),
-        path.join(CLAUDE_DIR, "skills", skill, "SKILL.md")
+        path.join(CLAUDE_DIR, "skills", skill, "SKILL.md"),
+        claudeText
       );
       // Copy REFERENCE.md if the skill has one (progressive-disclosure pattern)
       const refSrc = path.join(skillsDir, skill, "REFERENCE.md");
       if (fs.existsSync(refSrc)) {
-        copy(refSrc, path.join(CLAUDE_DIR, "skills", skill, "REFERENCE.md"));
+        copyTextTransform(refSrc, path.join(CLAUDE_DIR, "skills", skill, "REFERENCE.md"), claudeText);
       }
       // v5.1: Copy scripts/ subfolder if present (e.g. qualia-polish ships
       // playwright-capture.mjs, loop.mjs, score.mjs that the --loop mode
@@ -537,7 +584,7 @@ async function main() {
   const agentsDir = path.join(FRAMEWORK_DIR, "agents");
   for (const file of fs.readdirSync(agentsDir)) {
     try {
-      copy(path.join(agentsDir, file), path.join(CLAUDE_DIR, "agents", file));
+      copyTextTransform(path.join(agentsDir, file), path.join(CLAUDE_DIR, "agents", file), claudeText);
       ok(file);
     } catch (e) {
       warn(`${file} — ${e.message}`);
@@ -549,7 +596,7 @@ async function main() {
   const rulesDir = path.join(FRAMEWORK_DIR, "rules");
   for (const file of fs.readdirSync(rulesDir)) {
     try {
-      copy(path.join(rulesDir, file), path.join(CLAUDE_DIR, "rules", file));
+      copyTextTransform(path.join(rulesDir, file), path.join(CLAUDE_DIR, "rules", file), claudeText);
       ok(file);
     } catch (e) {
       warn(`${file} — ${e.message}`);
@@ -590,7 +637,7 @@ async function main() {
   if (fs.existsSync(designDir)) {
     for (const file of fs.readdirSync(designDir)) {
       try {
-        copy(path.join(designDir, file), path.join(designDest, file));
+        copyTextTransform(path.join(designDir, file), path.join(designDest, file), claudeText);
         ok(file);
       } catch (e) {
         warn(`${file} — ${e.message}`);
@@ -651,10 +698,10 @@ async function main() {
     const destPath = path.join(tmplDest, entry.name);
     try {
       if (entry.isDirectory()) {
-        copyTree(srcPath, destPath);
+        copyTreeTransform(srcPath, destPath, claudeText);
         ok(`${entry.name}/ (directory)`);
       } else {
-        copy(srcPath, destPath);
+        copyTextTransform(srcPath, destPath, claudeText);
         ok(entry.name);
       }
     } catch (e) {
@@ -685,7 +732,7 @@ async function main() {
         if (fs.existsSync(dest)) {
           log(`${DIM}${file} (kept — user has customized)${RESET}`);
         } else {
-          copy(src, dest);
+          copyTextTransform(src, dest, claudeText);
           ok(`${file} (initialized)`);
         }
       } catch (e) {
@@ -702,7 +749,7 @@ async function main() {
     if (!fs.existsSync(refDest)) fs.mkdirSync(refDest, { recursive: true });
     for (const file of fs.readdirSync(refDir)) {
       try {
-        copy(path.join(refDir, file), path.join(refDest, file));
+        copyTextTransform(path.join(refDir, file), path.join(refDest, file), claudeText);
         ok(file);
       } catch (e) {
         warn(`${file} — ${e.message}`);
@@ -741,7 +788,7 @@ async function main() {
         try { fs.copyFileSync(claudeDest, bak); ok(`Backed up existing CLAUDE.md → ${path.basename(bak)}`); } catch {}
       }
     }
-    fs.writeFileSync(claudeDest, claudeMd, "utf8");
+    fs.writeFileSync(claudeDest, claudeText(claudeMd), "utf8");
     ok(`Configured as ${member.role}`);
   } catch (e) {
     warn(`CLAUDE.md — ${e.message}`);
@@ -752,84 +799,23 @@ async function main() {
   try {
     const binDest = path.join(CLAUDE_DIR, "bin");
     if (!fs.existsSync(binDest)) fs.mkdirSync(binDest, { recursive: true });
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "state.js"),
-      path.join(binDest, "state.js")
-    );
-    ok("state.js (state machine)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "qualia-ui.js"),
-      path.join(binDest, "qualia-ui.js")
-    );
-    fs.chmodSync(path.join(binDest, "qualia-ui.js"), 0o755);
-    ok("qualia-ui.js (cosmetics library)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "statusline.js"),
-      path.join(binDest, "statusline.js")
-    );
-    ok("statusline.js (status bar renderer)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "knowledge.js"),
-      path.join(binDest, "knowledge.js")
-    );
-    fs.chmodSync(path.join(binDest, "knowledge.js"), 0o755);
-    ok("knowledge.js (memory-layer loader)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "knowledge-flush.js"),
-      path.join(binDest, "knowledge-flush.js")
-    );
-    fs.chmodSync(path.join(binDest, "knowledge-flush.js"), 0o755);
-    ok("knowledge-flush.js (cron-runnable flush)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "plan-contract.js"),
-      path.join(binDest, "plan-contract.js")
-    );
-    ok("plan-contract.js (plan JSON validator)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "agent-runs.js"),
-      path.join(binDest, "agent-runs.js")
-    );
-    ok("agent-runs.js (agent telemetry writer)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "slop-detect.mjs"),
-      path.join(binDest, "slop-detect.mjs")
-    );
-    fs.chmodSync(path.join(binDest, "slop-detect.mjs"), 0o755);
-    ok("slop-detect.mjs (anti-pattern scanner — runs pre-commit on frontend builds)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "erp-retry.js"),
-      path.join(binDest, "erp-retry.js")
-    );
-    fs.chmodSync(path.join(binDest, "erp-retry.js"), 0o755);
-    ok("erp-retry.js (ERP report retry queue — drained by session-start hook and erp-flush CLI)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "report-payload.js"),
-      path.join(binDest, "report-payload.js")
-    );
-    fs.chmodSync(path.join(binDest, "report-payload.js"), 0o755);
-    ok("report-payload.js (Framework -> ERP report payload builder)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "project-snapshot.js"),
-      path.join(binDest, "project-snapshot.js")
-    );
-    fs.chmodSync(path.join(binDest, "project-snapshot.js"), 0o755);
-    ok("project-snapshot.js (ERP/admin project progress snapshot)");
-    copy(
-      path.join(FRAMEWORK_DIR, "bin", "codex-goal.js"),
-      path.join(binDest, "codex-goal.js")
-    );
-    fs.chmodSync(path.join(binDest, "codex-goal.js"), 0o755);
-    ok("codex-goal.js (Codex /goal objective + token-budget suggester)");
+    for (const script of RUNTIME_BIN_SCRIPTS) {
+      const out = path.join(binDest, script.file);
+      copy(path.join(FRAMEWORK_DIR, "bin", script.file), out);
+      try { fs.chmodSync(out, 0o755); } catch {}
+      ok(script.label);
+    }
   } catch (e) {
     warn(`scripts — ${e.message}`);
   }
 
   // ─── Guide ─────────────────────────────────────────────
   try {
-    copy(
-      path.join(FRAMEWORK_DIR, "guide.md"),
-      path.join(CLAUDE_DIR, "qualia-guide.md")
-    );
+      copyTextTransform(
+        path.join(FRAMEWORK_DIR, "guide.md"),
+        path.join(CLAUDE_DIR, "qualia-guide.md"),
+        claudeText
+      );
     ok("guide.md");
   } catch (e) {
     warn(`guide.md — ${e.message}`);
@@ -877,7 +863,7 @@ Recurring issues and their solutions.
 ## Install code "Invalid" — user typed letter O instead of digit 0
 **Symptom:** \`npx qualia-framework install\` rejects \`QS-NAME-O1\` (letter O in suffix).
 **Cause:** Team codes use digit zero (\`-01\`, \`-02\`, etc.), not letter O.
-**Fix:** Since v2.8.1, install.js auto-normalizes: \`QS-FAWZI-O1\` → \`QS-FAWZI-01\`. The normalization only touches the segment after the last dash, so \`QS-MOAYAD-03\` (real O in name) is preserved.
+**Fix:** Since v2.8.1, install.js auto-normalizes: \`QS-HASAN-O2\` → \`QS-HASAN-02\`. The normalization only touches the segment after the last dash, so \`QS-MOAYAD-03\` (real O in name) is preserved.
 **Framework version:** Fixed in v2.8.1.
 
 ---
@@ -1048,6 +1034,7 @@ Client-specific preferences, design choices, and requirements. Loaded by \`/qual
     excludeDefault: true,
     tips: [
       "⬢ Lost? Type /qualia for the next step",
+      "⬢ Broken behavior? Use /qualia-fix for root cause, patch, verify",
       "⬢ Single feature? Use /qualia-feature, it auto-scopes",
       "⬢ End of day? /qualia-report submits your shift before clock-out",
       "⬢ Context isolation: every task gets a fresh AI brain",
@@ -1069,6 +1056,7 @@ Client-specific preferences, design choices, and requirements. Loaded by \`/qual
     "session-start.js", "auto-update.js", "branch-guard.js", "pre-push.js",
     "pre-deploy-gate.js", "migration-guard.js", "pre-compact.js",
     "git-guardrails.js", "stop-session-log.js",
+    "fawzi-approval-guard.js",
     // v5.0 — insights-driven destructive-op + wrong-account guards
     "vercel-account-guard.js", "env-empty-guard.js", "supabase-destructive-guard.js",
   ]);
@@ -1094,6 +1082,7 @@ Client-specific preferences, design choices, and requirements. Loaded by \`/qual
         hooks: [
           { type: "command", command: nodeCmd("auto-update.js"), timeout: 5 },
           { type: "command", command: nodeCmd("git-guardrails.js"), timeout: 5, statusMessage: "⬢ Checking git safety..." },
+          { type: "command", command: nodeCmd("fawzi-approval-guard.js"), timeout: 5 },
           { type: "command", if: "Bash(git push*)", command: nodeCmd("branch-guard.js"), timeout: 5, statusMessage: "⬢ Checking branch permissions..." },
           { type: "command", if: "Bash(git push*)", command: nodeCmd("pre-push.js"), timeout: 15, statusMessage: "⬢ Syncing tracking..." },
           { type: "command", if: "Bash(vercel --prod*)", command: nodeCmd("pre-deploy-gate.js"), timeout: 180, statusMessage: "⬢ Running quality gates..." },
@@ -1106,6 +1095,7 @@ Client-specific preferences, design choices, and requirements. Loaded by \`/qual
       {
         matcher: "Edit|Write",
         hooks: [
+          { type: "command", command: nodeCmd("fawzi-approval-guard.js"), timeout: 5 },
           { type: "command", if: "Edit(*migration*)|Write(*migration*)|Edit(*.sql)|Write(*.sql)", command: nodeCmd("migration-guard.js"), timeout: 10, statusMessage: "⬢ Checking migration safety..." },
         ],
       },
@@ -1179,7 +1169,7 @@ Client-specific preferences, design choices, and requirements. Loaded by \`/qual
   fs.writeFileSync(settingsTmp, JSON.stringify(settings, null, 2));
   fs.renameSync(settingsTmp, settingsPath);
 
-  ok("Hooks: session-start, auto-update, branch-guard, pre-push, migration-guard, deploy-gate, git-guardrails, stop-session-log, vercel-account-guard, env-empty-guard, supabase-destructive-guard");
+  ok("Hooks: session-start, auto-update, branch-guard, pre-push, migration-guard, deploy-gate, git-guardrails, stop-session-log, fawzi-approval-guard, vercel-account-guard, env-empty-guard, supabase-destructive-guard");
   ok("Status line + spinner configured");
   ok("Environment variables + permissions");
 
@@ -1216,10 +1206,7 @@ function printSummary({ member, target, claudeInstalled }) {
     const hooksSource = path.join(FRAMEWORK_DIR, "hooks");
     const rulesDir = path.join(FRAMEWORK_DIR, "rules");
     const tmplDir = path.join(FRAMEWORK_DIR, "templates");
-    const skillsDir = path.join(FRAMEWORK_DIR, "skills");
-    const skillCount = fs
-      .readdirSync(skillsDir)
-      .filter((d) => fs.statSync(path.join(skillsDir, d)).isDirectory()).length;
+    const skillCount = ACTIVE_SKILLS.length;
     const agentCount = fs.readdirSync(agentsDir).filter((f) => f.endsWith(".md")).length;
     const hookCount = fs.readdirSync(hooksSource).length;
     const ruleCount = fs.readdirSync(rulesDir).length;
@@ -1264,6 +1251,7 @@ function printSummary({ member, target, claudeInstalled }) {
   }
   console.log("");
   console.log(`  ${DIM}New project?${RESET}    ${TEAL}/qualia-new${RESET}`);
+  console.log(`  ${DIM}Broken thing?${RESET}  ${TEAL}/qualia-fix${RESET}`);
   console.log(`  ${DIM}Single feature?${RESET} ${TEAL}/qualia-feature${RESET}`);
   console.log(`  ${DIM}End of day?${RESET}     ${TEAL}/qualia-report${RESET} ${DIM}(shift submission)${RESET}`);
   console.log(`  ${DIM}Stuck?${RESET}          ${TEAL}/qualia${RESET}`);
@@ -1341,53 +1329,20 @@ async function installCodex(member, target) {
   }
 
   // Codex treats config.toml as optional, but doctor reports a warning when it
-  // is absent. Create a minimal, parseable file on fresh Codex-only homes and
-  // leave existing user config untouched.
+  // is absent. Keep user settings intact while guaranteeing the native bottom
+  // status line is present.
   try {
     const configToml = path.join(CODEX_DIR, "config.toml");
+    const existing = fs.existsSync(configToml) ? fs.readFileSync(configToml, "utf8") : "";
+    const next = ensureCodexStatusLineConfig(existing);
     if (!fs.existsSync(configToml)) {
-      atomicWrite(configToml, [
-        "# Created by qualia-framework install.",
-        "# User settings can be added normally; Qualia runtime lives in AGENTS.md, hooks.json, agents/, and bin/.",
-        "",
-        "[features]",
-        "hooks = true",
-        "plugin_hooks = true",
-        "",
-        "# Codex's built-in status line is rendered at the bottom of the TUI.",
-        "# It takes an ARRAY of pre-defined segment names; Codex does NOT support",
-        "# custom-command status lines (unlike Claude's settings.json statusLine),",
-        "# so the Qualia phase/state info is rendered via the SessionStart banner",
-        "# at the top of the session instead. The segment list below mirrors the",
-        "# Codex default rich layout.",
-        "[tui]",
-        'status_line = ["model-with-reasoning", "task-progress", "current-dir", "git-branch", "context-used", "five-hour-limit", "weekly-limit"]',
-        "status_line_use_colors = true",
-        "",
-      ].join("\n"));
+      atomicWrite(configToml, next);
       ok("config.toml (minimal Codex config)");
+    } else if (next !== existing) {
+      atomicWrite(configToml, next);
+      ok("config.toml (Codex bottom status line)");
     } else {
-      // Existing user config — append [tui] block only if absent. Leaves
-      // every other user setting untouched.
-      try {
-        const existing = fs.readFileSync(configToml, "utf8");
-        if (!/^\[tui\]/m.test(existing) && !/^status_line\s*=/m.test(existing)) {
-          const append = [
-            "",
-            "# Added by qualia-framework — Codex bottom status line.",
-            "[tui]",
-            'status_line = ["model-with-reasoning", "task-progress", "current-dir", "git-branch", "context-used", "five-hour-limit", "weekly-limit"]',
-            "status_line_use_colors = true",
-            "",
-          ].join("\n");
-          fs.appendFileSync(configToml, append);
-          ok("config.toml (appended [tui] status line block)");
-        } else {
-          log(`${DIM}config.toml (kept — user has customized)${RESET}`);
-        }
-      } catch {
-        log(`${DIM}config.toml (kept — user has customized)${RESET}`);
-      }
+      log(`${DIM}config.toml (kept — Codex status line already wired)${RESET}`);
     }
   } catch (e) {
     warn(`Codex config.toml — ${e.message}`);
@@ -1436,20 +1391,7 @@ async function installCodex(member, target) {
   try {
     const binDest = path.join(CODEX_DIR, "bin");
     if (!fs.existsSync(binDest)) fs.mkdirSync(binDest, { recursive: true });
-    const scripts = [
-      "state.js",
-      "qualia-ui.js",
-      "statusline.js",
-      "knowledge.js",
-      "knowledge-flush.js",
-      "plan-contract.js",
-      "agent-runs.js",
-      "slop-detect.mjs",
-      "erp-retry.js",
-      "report-payload.js",
-      "project-snapshot.js",
-      "codex-goal.js",
-    ];
+    const scripts = binFiles();
     for (const script of scripts) {
       const src = path.join(FRAMEWORK_DIR, "bin", script);
       const out = path.join(binDest, script);
@@ -1487,9 +1429,9 @@ async function installCodex(member, target) {
     const rulesDest = path.join(CODEX_DIR, "rules");
     if (!fs.existsSync(rulesDest)) fs.mkdirSync(rulesDest, { recursive: true });
     for (const file of fs.readdirSync(rulesDir)) {
-      copy(path.join(rulesDir, file), path.join(rulesDest, file));
+      copyTextTransform(path.join(rulesDir, file), path.join(rulesDest, file), codexText);
     }
-    copyTree(path.join(FRAMEWORK_DIR, "qualia-design"), path.join(CODEX_DIR, "qualia-design"));
+    copyTreeTransform(path.join(FRAMEWORK_DIR, "qualia-design"), path.join(CODEX_DIR, "qualia-design"), codexText);
     ok("rules/ + qualia-design/");
   } catch (e) {
     warn(`Codex rules/design — ${e.message}`);
@@ -1503,9 +1445,9 @@ async function installCodex(member, target) {
     const skillsDest = path.join(CODEX_DIR, "skills");
     const codexPruned = pruneDeprecatedSkills(CODEX_DIR);
     for (const name of codexPruned) ok(`pruned deprecated: ${name}`);
-    for (const skill of fs.readdirSync(skillsSrc)) {
+    for (const skill of ACTIVE_SKILLS) {
       const src = path.join(skillsSrc, skill);
-      if (!fs.statSync(src).isDirectory()) continue;
+      if (!fs.existsSync(src) || !fs.statSync(src).isDirectory()) continue;
       copyTreeTransform(src, path.join(skillsDest, skill), codexText);
     }
     ok("skills/");
@@ -1582,6 +1524,7 @@ async function installCodex(member, target) {
             hooks: [
               { type: "command", command: nodeCmd("auto-update.js"), timeout: 5, statusMessage: "Qualia update check..." },
               { type: "command", command: nodeCmd("git-guardrails.js"), timeout: 5, statusMessage: "Qualia git safety..." },
+              { type: "command", command: nodeCmd("fawzi-approval-guard.js"), timeout: 5 },
               { type: "command", command: nodeCmd("branch-guard.js"), timeout: 5 },
               { type: "command", command: nodeCmd("pre-push.js"), timeout: 15 },
               { type: "command", command: nodeCmd("pre-deploy-gate.js"), timeout: 180 },
@@ -1593,6 +1536,7 @@ async function installCodex(member, target) {
           {
             matcher: "Edit|Write",
             hooks: [
+              { type: "command", command: nodeCmd("fawzi-approval-guard.js"), timeout: 5 },
               { type: "command", command: nodeCmd("migration-guard.js"), timeout: 10 },
             ],
           },

package/bin/knowledge-flush.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 // ~/.claude/bin/knowledge-flush.js — non-interactive memory-layer flush.
 //
-// Wraps `/qualia-flush` so it can run from cron (or systemd timer, or any
-// CI/scheduled job) without an interactive Claude Code session. Closes the
+// Runs the Qualia memory flush prompt from cron (or systemd timer, or any
+// CI/scheduled job) without installing a separate slash command. Closes the
 // memory loop end-to-end:
 //
 //   Stop hook (auto, every turn) → <install-home>/knowledge/daily-log/{date}.md
 //   THIS SCRIPT (weekly cron)    → spawns the installed agent CLI
-//   /qualia-flush                 → promotes raw → curated tier
+//   flush prompt                 → promotes raw → curated tier
 //   bin/knowledge.js (every spawn) → reads index.md → reaches the right file
 //
 // Usage:
@@ -86,10 +86,9 @@ function which(cmd) {
   return null;
 }
 
-// Pass-through args (so `--days 14`, `--dry-run`, `--project X` all reach the
-// skill). We don't parse them ourselves — the skill is the source of truth
-// for argument semantics. We only use `--days` locally to short-circuit when
-// the daily-log is genuinely empty.
+// Pass-through args (so `--days 14`, `--dry-run`, `--project X` are visible to
+// the agent prompt). We only parse `--days` locally to short-circuit when the
+// daily-log is genuinely empty.
 const argv = process.argv.slice(2);
 const flagIdx = argv.indexOf("--days");
 const days = flagIdx >= 0 ? parseInt(argv[flagIdx + 1], 10) || 7 : 7;
@@ -128,9 +127,21 @@ if (!dailyLogHasRecentEntries(days)) {
 
 // ── Run ──────────────────────────────────────────────────
 // `claude -p "<prompt>"` and `codex exec "<prompt>"` run a single
-// non-interactive turn. The skill body invocation matches what the user would
-// type at the prompt.
-const prompt = `/qualia-flush ${argv.join(" ")}`.trim();
+// non-interactive turn. Keep the prompt self-contained so no separate flush
+// slash command needs to be installed.
+const argsText = argv.join(" ").trim() || "(none)";
+const prompt = [
+  "Run the Qualia memory flush.",
+  "",
+  `Arguments: ${argsText}`,
+  `Install home: ${QUALIA_HOME}`,
+  "",
+  "Read recent markdown files from knowledge/daily-log under the install home.",
+  "Promote recurring patterns, decisions, fixes, and client preferences into the curated knowledge tier using bin/knowledge.js append.",
+  "Do not promote one-off noise. If --dry-run is present, report planned promotions without writing.",
+  "If --project NAME is present, limit promotions to that project.",
+  "Finish with one line starting exactly: ⬢ Flushed daily-log",
+].join("\n");
 
 const cliArgs = IS_CODEX_INSTALL ? ["exec", prompt] : ["-p", prompt];
 const result = spawnSync(agentBin, cliArgs, {

package/bin/knowledge.js

@@ -79,7 +79,7 @@ function readSafe(p) {
 //   3. Path with "/" → treat as relative to knowledge dir (concepts/foo)
 //   4. Bare name → look in top-level first; if missing, search known
 //      subdirectories (concepts/, daily-log/) for an exact match. This
-//      means /qualia-flush can write to concepts/voice-agent-call-state.md
+//      means the memory flush can write to concepts/voice-agent-call-state.md
 //      and skills can later run `knowledge.js load voice-agent-call-state`
 //      without knowing it lives in a subdirectory.
 function resolveFile(name) {