riskrails 3.2.2 → 4.1.0

package/bin/riskrails.js

@@ -37,6 +37,12 @@
 //          variables CLAUDE_DIR and CODEX_DIR mean the same). Naming exactly one of them under
 //          --target auto installs that runtime alone.
 // --dry-run prints everything that would be written, per runtime, and writes nothing.
+// On a terminal each choice no flag names is an arrow-key menu, in this order: runtime (only
+//          without --target, --home and --codex-home), plan, fable (max, max20, team-max),
+//          context, statusline, codex plan. The proposal above is highlighted and Enter
+//          confirms it (an undetected plan proposes pro); ↑/↓ or k/j, Home/End and 1-9 move;
+//          Esc, q or Ctrl-C stop with nothing written (exit 130). RISKRAILS_MENU=off or 0, or
+//          TERM=dumb: the typed plan question instead. --yes or no terminal: no question.
 //
 // This is the port of the install.sh that shipped up to 2.0.2: the same tree, the same
 // messages, the same backups (backups/<date>/<path> under the runtime's home). JSON merges
@@ -65,6 +71,8 @@ const HOME = env.HOME || os.homedir();
 let PLAN = '', FABLE = 'auto', DRY = false, TARGET = 'auto', PLAN_GIVEN = false;
 let CODEX_PLAN = '', CODEX_PLAN_GIVEN = false, YES = false;
 let CONTEXT = 'default', STATUSLINE_CONTEXT = 'yes', STATUSLINE = 'riskrails', STATUSLINE_GIVEN = false;
+// A flag that names a choice skips its menu on a terminal (bin/menu.js).
+let TARGET_GIVEN = false, FABLE_GIVEN = false, CONTEXT_GIVEN = false;
 
 function version() {
   try { return JSON.parse(fs.readFileSync(path.join(SRC, 'package.json'), 'utf8')).version || 'unknown'; }
@@ -90,11 +98,11 @@ function usage() {
       return v;
     };
     switch (a) {
-      case '--target': TARGET = take(); break;
+      case '--target': TARGET = take(); TARGET_GIVEN = true; break;
       case '--plan': PLAN = take(); PLAN_GIVEN = true; break;
-      case '--fable': FABLE = take(); PLAN_GIVEN = true; break;
+      case '--fable': FABLE = take(); PLAN_GIVEN = true; FABLE_GIVEN = true; break;
       case '--codex-plan': CODEX_PLAN = take(); CODEX_PLAN_GIVEN = true; break;
-      case '--context': CONTEXT = take(); break;
+      case '--context': CONTEXT = take(); CONTEXT_GIVEN = true; break;
       case '--statusline-context': STATUSLINE_CONTEXT = take(); break;
       case '--statusline': STATUSLINE = take(); STATUSLINE_GIVEN = true; break;
       case '--home': CLAUDE_DIR = path.resolve(take()); CLAUDE_DIR_GIVEN = true; break;
@@ -152,7 +160,6 @@ const exists = (p) => fs.existsSync(p);                       // follows symlink
 const isDir = (p) => { try { return fs.statSync(p).isDirectory(); } catch (e) { return false; } };
 const isFile = (p) => { try { return fs.statSync(p).isFile(); } catch (e) { return false; } };
 const isLink = (p) => { try { return fs.lstatSync(p).isSymbolicLink(); } catch (e) { return false; } };
-const lexists = (p) => { try { fs.lstatSync(p); return true; } catch (e) { return false; } };
 const read = (p) => fs.readFileSync(p, 'utf8');
 const readJSON = (p) => JSON.parse(read(p));
 const pretty = (v) => JSON.stringify(v, null, 2);
@@ -261,6 +268,51 @@ function ask(prompt) {
 }
 const interactive = () => !YES && process.stdin.isTTY === true;
 
+// A choice on a terminal, as an arrow-key menu: bin/menu.js runs as a child that owns the
+// terminal (raw mode, the menu on stderr) and writes the picked value to stdout. null means
+// no menu — not a terminal, RISKRAILS_MENU=off|0, TERM=dumb, or the child could not take the
+// terminal (exit 3) — and the caller asks as before. An abort exits 130 here, before anything
+// is written: every menu runs in claudeRender/codexRender, ahead of the apply steps.
+const menuOff = () => !interactive() || ['off', '0'].includes(env.RISKRAILS_MENU) || env.TERM === 'dumb';
+function choose(title, items, initial, why) {
+  if (menuOff() || initial < 0) return null;
+  const spec = JSON.stringify({ title, why: why || '', items, initial });
+  const r = spawnSync(process.execPath, [path.join(__dirname, 'menu.js')],
+    { stdio: ['inherit', 'pipe', 'inherit'], env: { ...env, RISKRAILS_MENU_SPEC: spec }, encoding: 'utf8' });
+  if (r.status === 0 && items.some((it) => it.value === r.stdout)) return r.stdout;
+  if (r.status === 130 || r.signal) {
+    if (r.signal) err(`riskrails: the menu was stopped by ${r.signal}; run \`stty sane\` if the terminal misbehaves`);
+    die('riskrails: aborted — nothing was written', 130);
+  }
+  return null;
+}
+const pick = (values, notes) => values.map((v, i) => ({ value: v, label: v, note: notes[i] || '' }));
+
+// --context on a terminal, asked once: by the Claude branch, else before the Codex plan.
+let CONTEXT_ASKED = false;
+function askContext() {
+  if (CONTEXT_GIVEN || CONTEXT_ASKED) return;
+  CONTEXT_ASKED = true;
+  const c = choose('context', pick(['default', 'economy'], ["each runtime's own context window and compaction",
+    "the plan's autoCompactWindow; context-guard also holds a prompt back past 120% of it"]), 0);
+  if (c) CONTEXT = c;
+}
+// --statusline on a terminal: the mode riskrails/statusline.json records is the proposal, read as
+// statuslineGate reads it. Only a different pick counts as given, so Enter keeps today's run.
+function askStatusline() {
+  if (STATUSLINE_GIVEN) return;
+  let mode = '';
+  try {
+    const r = readJSON(path.join(CLAUDE_DIR, 'riskrails', 'statusline.json'));
+    if (isObj(r) && ['riskrails', 'own'].includes(r.mode)) mode = r.mode;
+  } catch (e) { /* none yet */ }
+  const MODES = ['riskrails', 'own'];
+  const v = choose('statusline', pick(MODES, ["the plugin's statusline over your own command (kept, --statusline own brings it back)",
+    'your own statusline command, behind the quota check']), MODES.indexOf(mode || 'riskrails'),
+  mode ? 'recorded by the previous install' : '');
+  if (v && v !== (mode || 'riskrails')) { STATUSLINE = v; STATUSLINE_GIVEN = true; }
+}
+
 // ------------------------------------------------------------------ runtime detection
 let DO_CLAUDE = false, DO_CODEX = false;
 const skippedRuntime = (rt, dir) => err(`${rt}: ${dir} found but no ${rt} on PATH — skipped (--target ${rt} for it alone, --target both for both)`);
@@ -288,7 +340,16 @@ Code or Codex first, or name the runtime yourself:
   npx riskrails --target both        # both, whether or not they are detected`);
   process.exit(1);
 }
-if (TARGET === 'auto') out('detected runtime:' + (DO_CLAUDE ? ' claude' : '') + (DO_CODEX ? ' codex' : ''));
+// On a terminal, with nothing naming the runtime, the detected set is the menu's first proposal.
+let RUNTIME_PICKED = false;
+if (TARGET === 'auto' && !TARGET_GIVEN && !CLAUDE_DIR_GIVEN && !CODEX_DIR_GIVEN) {
+  const RUNTIMES = ['claude', 'codex', 'both'];
+  const detected = DO_CLAUDE && DO_CODEX ? 'both' : DO_CLAUDE ? 'claude' : 'codex';
+  const rt = choose('runtime', pick(RUNTIMES, ['Claude Code', 'Codex', 'Claude Code and Codex']),
+    RUNTIMES.indexOf(detected), `detected: ${detected}`);
+  if (rt && rt !== detected) { DO_CLAUDE = rt !== 'codex'; DO_CODEX = rt !== 'claude'; RUNTIME_PICKED = true; }
+}
+if (TARGET === 'auto' && !RUNTIME_PICKED) out('detected runtime:' + (DO_CLAUDE ? ' claude' : '') + (DO_CODEX ? ' codex' : ''));
 
 const TMP = fs.mkdtempSync(path.join(os.tmpdir(), 'riskrails-'));
 process.on('exit', () => rmrf(TMP));
@@ -311,7 +372,7 @@ function renderStub(scope, runtime, dst, vars, kind = 'block') {
 // block_size — what the always-loaded block costs, and how much of the file is the user's own.
 function blockSize(file, budget) {
   const text = read(file);
-  const m = text.match(/<!-- (riskrails|claude-agentic|[Cc]odex-agentic):start -->[\s\S]*?<!-- \1:end -->/);
+  const m = text.match(/<!-- riskrails:start -->[\s\S]*?<!-- riskrails:end -->/);
   const block = m ? Buffer.byteLength(m[0]) : 0;
   out(`${path.basename(file)}: managed block ${spaced(block)} B (budget ${spaced(budget)}), file ${spaced(Buffer.byteLength(text))} B — the rest is yours`);
 }
@@ -358,12 +419,10 @@ function writeProfile(home, profile) {
 }
 
 function prevPlan(home) {
-  for (const name of ['riskrails', 'claude-agentic']) {   // before 3.4b it lived under claude-agentic/ (R35)
-    try {
-      const plan = readJSON(path.join(home, name, 'profile.json')).plan;
-      return plan === null || plan === undefined || plan === false ? '' : String(plan);
-    } catch (e) { /* next */ }
-  }
+  try {
+    const plan = readJSON(path.join(home, 'riskrails', 'profile.json')).plan;
+    return plan === null || plan === undefined || plan === false ? '' : String(plan);
+  } catch (e) { /* none */ }
   return '';
 }
 
@@ -392,21 +451,37 @@ function detectPlan(runtime) {
   return {};
 }
 
+// The plan question on a terminal: the plan the previous install recorded, else the detected
+// one, is proposed and Enter confirms it; a Team seat, or a plan nothing detected, is typed.
+// On a terminal with the menu on, the six plans are a menu instead: the proposal is the same,
+// and without one it is team-pro for a Team org, else pro (Enter installs it rather than exiting).
+const CLAUDE_PLANS = ['pro', 'team-pro', 'team-max', 'max', 'max20', 'balanced-max'];
+const CLAUDE_PLAN_NOTES = ['Pro', 'Team Standard seat', 'Team Premium seat', 'Max',
+  "Max 20x: max's settings, larger budgets", 'Max account, only the session runs Opus 5.5 (200k window)'];
+function pickClaudePlan(prev, detected, from, org) {
+  const proposed = prev || detected;
+  const first = proposed || (from === 'team' ? 'team-pro' : 'pro');
+  const menuWhy = prev ? 'recorded by the previous install' : detected ? `detected from ${from}`
+    : from === 'team' ? `Team org ${org}, seat unknown` : `could not detect the plan, organizationType='${org}'`;
+  const picked = choose('plan', pick(CLAUDE_PLANS, CLAUDE_PLAN_NOTES), CLAUDE_PLANS.indexOf(first), menuWhy);
+  if (picked !== null) return picked;
+  if (proposed) {
+    const why = prev ? 'recorded by the previous install' : `detected from ${from}`;
+    return ask(`plan: ${proposed} (${why}) — Enter to confirm, or type pro/team-pro/team-max/max/max20/balanced-max: `) || proposed;
+  } else if (from === 'team') {
+    return ask(`Team org detected (${org}) but not the seat. Enter plan [team-pro/team-max]: `);
+  } else {
+    return ask(`Could not detect plan (organizationType='${org}'). Enter plan [pro/team-pro/team-max/max/max20]: `);
+  }
+}
+
 function claudeRender() {
   const PREV_PLAN = prevPlan(CLAUDE_DIR);
   if (!PLAN) {
     const live = detectPlan('claude');
     const org = live.org || '', detected = live.plan || '', from = live.from || '';
     if (interactive()) {
-      const proposed = PREV_PLAN || detected;
-      if (proposed) {
-        const why = PREV_PLAN ? 'recorded by the previous install' : `detected from ${from}`;
-        PLAN = ask(`plan: ${proposed} (${why}) — Enter to confirm, or type pro/team-pro/team-max/max/max20/balanced-max: `) || proposed;
-      } else if (from === 'team') {
-        PLAN = ask(`Team org detected (${org}) but not the seat. Enter plan [team-pro/team-max]: `);
-      } else {
-        PLAN = ask(`Could not detect plan (organizationType='${org}'). Enter plan [pro/team-pro/team-max/max/max20]: `);
-      }
+      PLAN = pickClaudePlan(PREV_PLAN, detected, from, org);
     } else if (detected) {
       PLAN = detected; err(`detected plan: ${PLAN} (${from})`);
     } else if (from === 'team') {
@@ -428,6 +503,14 @@ function claudeRender() {
   if (['balanced_max', 'balancedmax'].includes(PLAN)) PLAN = 'balanced-max';
   if (!plans[PLAN]) die(`--plan must be pro, team-pro, team-max, max, max20 or balanced-max (got '${PLAN}')`, 2);
   const [TIER, PROFILE_NAME, PLAN_LABEL] = plans[PLAN];
+  // The option menus on a terminal, each skipped by its own flag: fable, context, statusline.
+  if (!FABLE_GIVEN && TIER === 'max' && PLAN !== 'balanced-max') {
+    const f = choose('fable', pick(['yes', 'no'], ['Fable 5.1 pinned on architect, the runtime gate on',
+      'no Fable anywhere in this install']), 0, `auto on ${PLAN}`);
+    if (f === 'no') FABLE = 'no';
+  }
+  askContext();
+  askStatusline();
   if (FABLE === 'auto') FABLE = TIER === 'max' && PLAN !== 'balanced-max' ? 'yes' : 'no';
   else if (!['yes', 'no'].includes(FABLE)) die('--fable must be auto|yes|no', 2);
   if ((TIER === 'pro' || PLAN === 'balanced-max') && FABLE === 'yes') {
@@ -748,15 +831,13 @@ function claudeDryRun() {
   if (C.TIER === 'max') out(`   bin:     claude-1m (opus[1m]${FABLE === 'yes' ? ' / fable[1m]' : ''}, pins the model at launch; compacts near ${C.ONE_M_AT})`);
   const plugin = claudePlugin(CLAUDE_DIR);
   skillsLine(plugin);
-  out('   retire:  skills/status (now skills/rr-status), into backups/<date>/ if present');
+  out('   retire:  skills/{status,ai-status,sdlc-intent,sdlc-plan,sdlc-spec}, into backups/<date>/ if present');
   shimLine('settings.json');
   pluginLine(plugin, true);
-  homeLine(CLAUDE_DIR);
   sharedLine();
   out('   config:  ai-git-guard.json (only if absent)');
   out('   routing: riskrails/routing.md');
   out('   profile: riskrails/profile.json');
-  out('== would migrate: the claude-routing managed block, if present, into this one');
 }
 
 // Every backup goes to one dated directory, <root>/backups/<date>/<path>: a backup beside
@@ -780,18 +861,6 @@ function retire(root, rel) {                       // move what nothing installs
   out(`retired: ${rel} -> backups/${BACKUP_DATE}/${rel}`);
 }
 
-// move_home — R35: the install home was <root>/claude-agentic/ before 3.4b. It moves to
-// <root>/riskrails/ and the old path becomes a symlink to it for one version. A real old
-// home beside an existing new one (or a link there, dangling or not) is retired.
-function moveHome(root) {
-  const old = path.join(root, 'claude-agentic'), nw = path.join(root, 'riskrails');
-  if (!isDir(old) || isLink(old)) return;
-  if (lexists(nw)) retire(root, 'claude-agentic');
-  else { fs.renameSync(old, nw); out('moved: claude-agentic/ -> riskrails/'); }
-  fs.symlinkSync('riskrails', old);
-  out('linked: claude-agentic -> riskrails (for one version)');
-}
-
 // sweep_bak — every *.bak an older installer left beside a live file moves into
 // backups/<date>/, keeping its path. Only the directories and root files this installer writes.
 function sweepBak(root, ...names) {
@@ -808,6 +877,8 @@ function sweepBak(root, ...names) {
   }
 }
 
+const RETIRED_SKILLS = ['status', 'ai-status', 'sdlc-intent', 'sdlc-plan', 'sdlc-spec'];
+
 // The seven agents the 2026-09-02 install shipped, and the nine redesign 2.4 removed (with
 // the Codex -strong/-balanced twins). Moved, not deleted: one mv out of backups/ restores one.
 const STALE_AGENTS = ['code-implementer', 'qa-runner', 'qa-fixer', 'db-migrator', 'doc-lookup', 'log-inspector',
@@ -831,8 +902,8 @@ function installFile(src, dst, root = CLAUDE_DIR) {  // back up on a real change
 // their scripts (state.py, ai-path, ...) through $AI_HOME/skills/ as on the npx route.
 function installSkills(root, plugin) {
   const backups = path.join(root, 'backups', BACKUP_DATE, 'skills');
-  // /status became /rr-status (redesign 2.3); a leftover would load as a second status command.
-  retire(root, 'skills/status');
+  // /status became /rr-status (2.3) and the ai-status and sdlc-* aliases ended in 4.0: a leftover would load as a second command.
+  for (const n of RETIRED_SKILLS) retire(root, `skills/${n}`);
   for (const name of ls(path.join(SRC, 'skills')).filter((n) => isDir(path.join(SRC, 'skills', n)))) {
     const d = path.join(SRC, 'skills', name), dst = path.join(root, 'skills', name);
     // A developer who ran the scripts in place leaves __pycache__ behind; it is not copied.
@@ -879,43 +950,15 @@ function installShared(root) {
   installFile(path.join(SRC, 'scripts/resolve-profile.py'), path.join(home, 'scripts/resolve-profile.py'), root);
 }
 
-function homeLine(root) {
-  const old = path.join(root, 'claude-agentic');
-  if (isDir(old) && !isLink(old)) out('   home:    claude-agentic/ -> riskrails/, the old path a symlink for one version');
-}
 const sharedLine = () => out(`   shared:  riskrails/ai (${countFiles(path.join(SRC, 'ai'))} files), riskrails/ai-path`);
 
-// managed_block — replace the one managed block, or append it; migrates the predecessor
-// plugin's block and an unmarked legacy section on the way. Backs up a non-empty target first.
+// managed_block — replace the one managed block, or append it. Backs up a non-empty target first.
 function managedBlock(target, blockFile, label) {
   if (!exists(target)) fs.writeFileSync(target, '');
   if (fs.statSync(target).size > 0) backupFile(target, path.dirname(target));
   const block = read(blockFile).replace(/^\n+|\n+$/g, '');
   let text = read(target);
   const start = '<!-- riskrails:start -->', end = '<!-- riskrails:end -->';
-  const notes = [];
-  const routing = text.match(/<!-- claude-routing:start -->[\s\S]*?<!-- claude-routing:end -->\n?/);
-  if (routing) {
-    text = text.slice(0, routing.index) + text.slice(routing.index + routing[0].length);
-    notes.push('migrated the claude-routing block');
-  }
-  const legacy = text.match(/^# Model allocation by task and scope[\s\S]*?(?=^# |(?![\s\S]))/m);
-  if (legacy && !text.slice(0, legacy.index).includes(start)) {
-    text = text.slice(0, legacy.index) + text.slice(legacy.index + legacy[0].length);
-    notes.push("migrated an unmarked 'Model allocation' section");
-  }
-  // A legacy claude-agentic (before 3.4b) or Codex-agentic pair is the managed block under its
-  // old name: rename it, never append beside it.
-  if (!text.includes(start) && !text.includes(end)) {
-    const pair = text.match(/<!-- (claude-agentic|[Cc]odex-agentic):start -->[\s\S]*?<!-- \1:end -->/);
-    if (pair) {
-      const name = pair[1];
-      text = text.slice(0, pair.index)
-        + pair[0].replace(`<!-- ${name}:start -->`, start).replace(`<!-- ${name}:end -->`, end)
-        + text.slice(pair.index + pair[0].length);
-      notes.push(`renamed the legacy ${name} markers`);
-    }
-  }
   let nw, action;
   if (text.includes(start) && text.includes(end)) {
     const esc = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
@@ -928,7 +971,7 @@ function managedBlock(target, blockFile, label) {
   }
   nw = nw.replace(/\n{4,}/g, '\n\n\n');
   fs.writeFileSync(target, nw);
-  out(`${label}: ${action}${notes.length ? ' + ' + notes.join(' + ') : ''}`);
+  out(`${label}: ${action}`);
 }
 
 // The three shell guards 3.5 retired: ai-guard.py runs all of them in one process. Their
@@ -1114,7 +1157,6 @@ const loadJSONFile = (file) => JSON.parse(read(file));
 const writeJSONFile = (file, doc) => { fs.writeFileSync(file + '.tmp', pretty(doc) + '\n'); fs.renameSync(file + '.tmp', file); };
 
 function claudeApply() {
-  moveHome(CLAUDE_DIR);
   for (const d of ['agents', 'hooks/lib', 'hooks/guard', 'skills']) mkdirp(path.join(CLAUDE_DIR, d));
   sweepBak(CLAUDE_DIR, 'settings.json', 'CLAUDE.md');
 
@@ -1308,22 +1350,35 @@ function claudeSummary() {
 // ~/.codex/auth.json carries chatgpt_plan_type.
 const X = {};   // the Codex branch's rendered values
 
+// The Codex plan question on a terminal: the previous install's plan, else the detected one,
+// is proposed and Enter confirms it; without either the plan is typed.
+const CODEX_PLANS = ['plus', 'pro', 'balanced-max'];
+const CODEX_PLAN_NOTES = ['ChatGPT Plus', 'ChatGPT Pro', 'only the session runs the strong model'];
+function pickCodexPlan(prev, det, why, detected) {
+  const proposed = prev || det;
+  const menuWhy = prev ? 'recorded by the previous install' : det ? `detected from ${why}`
+    : `could not detect the ChatGPT plan, chatgpt_plan_type='${detected}'`;
+  const picked = choose('codex plan', pick(CODEX_PLANS, CODEX_PLAN_NOTES), CODEX_PLANS.indexOf(proposed || 'pro'), menuWhy);
+  if (picked !== null) return picked;
+  if (proposed) {
+    const w = prev ? 'recorded by the previous install' : `detected from ${why}`;
+    return ask(`codex plan: ${proposed} (${w}) — Enter to confirm, or type plus/pro/balanced-max: `) || proposed;
+  } else {
+    return ask(`Could not detect the ChatGPT plan (chatgpt_plan_type='${detected}'). Enter plan [plus/pro]: `);
+  }
+}
+
 function codexRender() {
   const prev = prevPlan(CODEX_DIR);
   // BalancedMax is one routing idea on both runtimes: --plan balanced-max selects the Codex
   // balanced-max profile too, unless --codex-plan says otherwise.
   if (!CODEX_PLAN && PLAN === 'balanced-max') CODEX_PLAN = 'balanced-max';
+  askContext();
   if (!CODEX_PLAN) {
     const live = detectPlan('codex');
     const detected = live.raw || '', det = live.plan || '', why = live.from || '';
     if (interactive()) {
-      const proposed = prev || det;
-      if (proposed) {
-        const w = prev ? 'recorded by the previous install' : `detected from ${why}`;
-        CODEX_PLAN = ask(`codex plan: ${proposed} (${w}) — Enter to confirm, or type plus/pro/balanced-max: `) || proposed;
-      } else {
-        CODEX_PLAN = ask(`Could not detect the ChatGPT plan (chatgpt_plan_type='${detected}'). Enter plan [plus/pro]: `);
-      }
+      CODEX_PLAN = pickCodexPlan(prev, det, why, detected);
     } else if (det) {
       CODEX_PLAN = det; err(`detected codex plan: ${CODEX_PLAN} (${why})`);
     } else if (prev) {
@@ -1390,10 +1445,9 @@ function codexDryRun() {
   out(`   hooks:   ${codexHookFiles().map((f) => path.basename(f)).join(',')}`);
   const plugin = codexPlugin(CODEX_DIR);
   skillsLine(plugin);
-  out('   retire:  skills/status (now skills/rr-status), into backups/<date>/ if present');
+  out('   retire:  skills/{status,ai-status,sdlc-intent,sdlc-plan,sdlc-spec}, into backups/<date>/ if present');
   shimLine('hooks.json');
   pluginLine(plugin, true);
-  homeLine(CODEX_DIR);
   sharedLine();
   out('   config:  ai-git-guard.json (only if absent)');
   out('   routing: riskrails/routing.md');
@@ -1404,7 +1458,6 @@ function codexDryRun() {
 }
 
 function codexApply() {
-  moveHome(CODEX_DIR);
   for (const d of ['agents', 'hooks/lib', 'hooks/guard', 'skills']) mkdirp(path.join(CODEX_DIR, d));
   sweepBak(CODEX_DIR, 'hooks.json', 'config.toml', 'AGENTS.md');
 

package/hooks/ai-path-guard-defaults.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "Shipped defaults for ai-path-guard. Do not edit this file; a project overrides it in .ai/policies/path-guard.json (patterns are unioned, allow wins over every other list). Patterns are POSIX extended regular expressions matched against the absolute path. deny_patterns are secrets: refused for read and write. protected_config_patterns are always on and refuse writes: the task's state and journal, task.md, the compact record (.ai/memory/, .ai/local/memory/), and the guards' own configuration, engine and state.py under .claude/ or .codex/, in a project or in the user's home, and the riskrails plugin's cache folder, which carries the same code on the plugin route. Also the installer's statusline record (.claude/riskrails/statusline.json), which keeps the statusline command it replaced. A project's dependency_instruction_patterns, from before 3.4, are read as deny_patterns. task_protected_patterns are on only while a task is in flight (.ai/state/state.json, or else current.json, exists and has not reached \"done\"): the runtime's settings, Claude's record of installed plugins and the pipeline's policies, so a run cannot change the rules it is being judged by. Reading anything but a secret is allowed.",
+  "_comment": "Shipped defaults for ai-path-guard. Do not edit this file; a project overrides it in .ai/policies/path-guard.json (patterns are unioned, allow wins over every other list). Patterns are POSIX extended regular expressions matched against the absolute path. deny_patterns are secrets: refused for read and write. protected_config_patterns are always on and refuse writes: the task's state and journal, task.md, the compact record (.ai/memory/, .ai/local/memory/), and the guards' own configuration, engine and state.py under .claude/ or .codex/, in a project or in the user's home, and the riskrails plugin's cache folder, which carries the same code on the plugin route. Also the installer's statusline record (.claude/riskrails/statusline.json), which keeps the statusline command it replaced. task_protected_patterns are on only while a task is in flight (.ai/state/state.json, or else current.json, exists and has not reached \"done\"): the runtime's settings, Claude's record of installed plugins and the pipeline's policies, so a run cannot change the rules it is being judged by. Reading anything but a secret is allowed.",
   "deny_patterns": [
     "(^|/)\\.env$",
     "(^|/)\\.env\\.(local|prod|production|staging|live)$",

package/hooks/context-guard.py

@@ -284,7 +284,7 @@ def prompt_text(message):
     text = REMINDER.sub("", content).strip()
     # only a wrapper at the very start is a slash command: a prompt may quote these tags
     command = COMMAND.search(text) if text.startswith(("<command-name>", "<command-message>")) else None
-    if command:                     # "/ai-task fix the export" is an instruction; a bare "/model" is not
+    if command:                     # "/rr-build fix the export" is an instruction; a bare "/model" is not
         name, args = command.group(1).strip(), (COMMAND_ARGS.search(text) or [None, ""])[1].strip()
         return f"{name} {args}" if args else None
     # local command output, caveats, interruptions
@@ -360,7 +360,7 @@ def ai_root(cwd):
     """The project the session is in, or None.
 
     The walk stops at the repository it starts in, and never leaves $HOME. An
-    unbounded walk would let one `/ai-init` in a home directory adopt every
+    unbounded walk would let one `/rr-setup` in a home directory adopt every
     session on the machine: a nested, unrelated checkout would have its prompts
     recorded into the ancestor's session.json and be handed the ancestor's
     handoff at startup. cwd falls back to the process's own, which is where the
@@ -390,8 +390,6 @@ def task_in_flight(root):
     if not root:
         return False
     state = os.path.join(root, ".ai", "state", "state.json")
-    if not os.path.isfile(state):
-        state = os.path.join(root, ".ai", "state", "current.json")  # R34: legacy name, one version
     try:
         with open(state, encoding="utf-8") as fh:
             return (json.load(fh) or {}).get("current_stage") != "done"

package/hooks/guard/dialog.py

@@ -216,12 +216,16 @@ def validate_label(label):
         return None
     if state_label_ok(tokens):
         return None
-    return "a label starts with git commit, git push, a human-only state.py command or npx riskrails@<v>"
+    return ("a label starts with git commit, git push, a human-only state.py command (approve, reject, "
+            "profile set, verify/review/start --by, memory enable) or npx riskrails@<v>")
 
 
 def state_label_ok(tokens):
     """python3 [-I|-S…] <…/state.py> approve|reject|profile set|verify --by|
-    review --by|start --mode … --by."""
+    review --by|start --mode … --by|memory enable [--author S] [--period month|quarter|year]
+    [--index none|sqlite]: each option at most once, as two words, in any order, and no other
+    memory verb. rr_state/labels.py keeps the same rule; tests/test_dialog_contract.py pins the
+    two equal."""
     if not tokens or not INTERPRETER_RE.match(tokens[0]):
         return False
     i = 1
@@ -236,6 +240,14 @@ def state_label_ok(tokens):
         return True
     if rest[:1] in (["verify"], ["review"]):
         return "--by" in rest
+    if rest[:2] == ["memory", "enable"]:
+        # The pick is the exact command the human read: no `--opt=value`, no abbreviation argparse would
+        # take, no positional, an option once, a value of its own kind (an author never starts with '-').
+        names, values = rest[2::2], rest[3::2]
+        kinds = {"--author": None, "--period": ("month", "quarter", "year"), "--index": ("none", "sqlite")}
+        return (len(names) == len(values) == len(set(names)) and set(names) <= set(kinds)
+                and all((v[:1] not in ("", "-")) if kinds[n] is None else v in kinds[n]
+                        for n, v in zip(names, values)))
     return rest[:1] == ["start"] and "--mode" in rest and "--by" in rest
 
 

package/hooks/guard/paths.py

@@ -672,9 +672,8 @@ class PathGuard:                            # pylint: disable=too-many-instance-
     # -------------------------------------------------------------- the task
 
     def _state_file(self):
-        """R34: state.json, or the legacy current.json for one version."""
-        new = self.root + "/.ai/state/state.json"
-        return new if is_file(new) else self.root + "/.ai/state/current.json"
+        """The task's state file."""
+        return self.root + "/.ai/state/state.json"
 
     def _task_line(self):
         loaded = load_json_file(self._state_file())
@@ -720,9 +719,7 @@ class PathGuard:                            # pylint: disable=too-many-instance-
                 if doc is not None and not isinstance(doc, dict):
                     continue
                 for tag, key in (("d", "deny_patterns"), ("a", "allow_patterns"),
-                                 ("p", "protected_config_patterns"), ("k", "task_protected_patterns"),
-                                 # A project's list from before 3.4 keeps its read and write deny.
-                                 ("d", "dependency_instruction_patterns")):
+                                 ("p", "protected_config_patterns"), ("k", "task_protected_patterns")):
                     v = doc.get(key) if doc else None
                     for item in jq_iter(v if v is not None and v is not False else []):
                         if is_jq_string(item) and item != "":

package/hooks/guard/scope.py

@@ -3,7 +3,7 @@ MultiEdit, NotebookEdit and Codex's apply_patch.
 
 During the implementation stage the approved plan names the files a step may
 touch; an edit outside them is refused with SCOPE_CHANGE_REQUIRED. Inert unless
-.ai/state/state.json (or, for one version, the legacy current.json) exists and
+.ai/state/state.json exists and
 its stage is "implementation".
 
 Bash semantics kept: a plan glob is matched as `[[ $rel == $pattern ]]` — "*"
@@ -334,8 +334,6 @@ def check(ctx):
     if root is None:
         return
     state = root + "/.ai/state/state.json"
-    if not is_file(state):
-        state = root + "/.ai/state/current.json"
     if not is_file(state):
         return
     step_id, task_id, allowed, forbidden, reason = read_state(state)