safeword 0.13.0 → 0.14.0

package/dist/{chunk-3R26BJXN.js → chunk-TJOHD7CV.js}

@@ -130,26 +130,77 @@ function generateDepCruiseConfigFile(arch) {
   const hasMonorepoRules = monorepoRules.length > 0;
   return String.raw`module.exports = {
   forbidden: [
+    // =========================================================================
     // ERROR RULES (block on violations)
+    // =========================================================================
     {
       name: 'no-circular',
+      comment: 'Circular dependencies cause runtime issues and make code hard to reason about',
       severity: 'error',
       from: {},
       to: { circular: true },
+    },
+    {
+      name: 'no-deprecated-deps',
+      comment: 'Deprecated npm packages should be replaced - they may have security issues or be unmaintained',
+      severity: 'error',
+      from: {},
+      to: { dependencyTypes: ['deprecated'] },
     },${hasMonorepoRules ? `
 ${monorepoRules},` : ""}
-    // INFO RULES (reported in /audit, not errors)
+
+    // =========================================================================
+    // WARNING RULES (flag issues but don't block)
+    // =========================================================================
+    {
+      name: 'no-dev-deps-in-src',
+      comment: 'Production code should not import devDependencies - may cause runtime failures',
+      severity: 'warn',
+      from: {
+        path: '^(packages/[^/]+/)?src',
+        pathNot: '\\.test\\.[tj]sx?$',
+      },
+      to: { dependencyTypes: ['npm-dev'] },
+    },
     {
       name: 'no-orphans',
-      severity: 'info',
-      from: { orphan: true, pathNot: ['\\.test\\.', 'index\\.ts$', 'main\\.ts$'] },
+      comment: 'Orphan modules are not imported anywhere - may be dead code',
+      severity: 'warn',
+      from: {
+        orphan: true,
+        pathNot: [
+          // Entry points
+          '(^|/)index\\.[tj]sx?$',
+          '(^|/)main\\.[tj]sx?$',
+          '(^|/)cli\\.[tj]s$',
+          '\\.config\\.[tj]s$',
+          '\\.config\\.mjs$',
+          // Test files
+          '\\.test\\.[tj]sx?$',
+          '\\.spec\\.[tj]sx?$',
+          '/tests/',
+          '/__tests__/',
+          // Astro/Next.js pages and content
+          '/src/content/',
+          '/src/pages/',
+          '/app/',
+        ],
+      },
       to: {},
     },
   ],
   options: {
     doNotFollow: { path: ['node_modules', '.safeword'] },
+    exclude: {
+      path: ['node_modules', 'dist', 'build', 'coverage', '\\.d\\.ts$'],
+    },
+    tsPreCompilationDeps: true,
     tsConfig: { fileName: 'tsconfig.json' },
-    enhancedResolveOptions: { extensions: ['.ts', '.tsx', '.js', '.jsx'] },
+    enhancedResolveOptions: {
+      extensions: ['.ts', '.tsx', '.js', '.jsx'],
+      exportsFields: ['exports'],
+      conditionNames: ['import', 'require', 'node', 'default'],
+    },
   },
 };
 `;
@@ -226,4 +277,4 @@ export {
   hasArchitectureDetected,
   syncConfig
 };
-//# sourceMappingURL=chunk-3R26BJXN.js.map
+//# sourceMappingURL=chunk-TJOHD7CV.js.map

package/dist/{chunk-3R26BJXN.js.map → chunk-TJOHD7CV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/commands/sync-config.ts","../src/utils/boundaries.ts","../src/utils/depcruise-config.ts"],"sourcesContent":["/**\n * Sync Config command - Regenerate depcruise config from current project structure\n *\n * Used by `/audit` slash command to refresh config before running checks.\n */\n\nimport { writeFileSync } from 'node:fs';\nimport nodePath from 'node:path';\n\nimport { detectArchitecture } from '../utils/boundaries.js';\nimport {\n  type DepCruiseArchitecture,\n  detectWorkspaces,\n  generateDepCruiseConfigFile,\n  generateDepCruiseMainConfig,\n} from '../utils/depcruise-config.js';\nimport { exists } from '../utils/fs.js';\nimport { error, info, success } from '../utils/output.js';\n\nexport interface SyncConfigResult {\n  generatedConfig: boolean;\n  createdMainConfig: boolean;\n}\n\n/**\n * Core sync logic - writes depcruise configs to disk\n * Can be called from setup or as standalone command\n */\nexport function syncConfigCore(cwd: string, arch: DepCruiseArchitecture): SyncConfigResult {\n  const safewordDirectory = nodePath.join(cwd, '.safeword');\n  const result: SyncConfigResult = { generatedConfig: false, createdMainConfig: false };\n\n  // Generate and write .safeword/depcruise-config.js\n  const generatedConfigPath = nodePath.join(safewordDirectory, 'depcruise-config.js');\n  const generatedConfig = generateDepCruiseConfigFile(arch);\n  writeFileSync(generatedConfigPath, generatedConfig);\n  result.generatedConfig = true;\n\n  // Create main config if not exists (self-healing)\n  const mainConfigPath = nodePath.join(cwd, '.dependency-cruiser.js');\n  if (!exists(mainConfigPath)) {\n    const mainConfig = generateDepCruiseMainConfig();\n    writeFileSync(mainConfigPath, mainConfig);\n    result.createdMainConfig = true;\n  }\n\n  return result;\n}\n\n/**\n * Build full architecture info by combining detected layers with workspaces\n */\nexport function buildArchitecture(cwd: string): DepCruiseArchitecture {\n  const arch = detectArchitecture(cwd);\n  const workspaces = detectWorkspaces(cwd);\n  return { ...arch, workspaces };\n}\n\n/**\n * Check if architecture was detected (layers, monorepo structure, or workspaces)\n */\nexport function hasArchitectureDetected(arch: DepCruiseArchitecture): boolean {\n  return arch.elements.length > 0 || arch.isMonorepo || (arch.workspaces?.length ?? 0) > 0;\n}\n\n/**\n * CLI command: Sync depcruise config with current project structure\n */\nexport async function syncConfig(): Promise<void> {\n  const cwd = process.cwd();\n  const safewordDirectory = nodePath.join(cwd, '.safeword');\n\n  // Check if .safeword exists\n  if (!exists(safewordDirectory)) {\n    error('Not configured. Run `safeword setup` first.');\n    process.exit(1);\n  }\n\n  // Detect current architecture and workspaces\n  const arch = buildArchitecture(cwd);\n  const result = syncConfigCore(cwd, arch);\n\n  if (result.generatedConfig) {\n    info('Generated .safeword/depcruise-config.js');\n  }\n  if (result.createdMainConfig) {\n    info('Created .dependency-cruiser.js');\n  }\n\n  success('Config synced');\n}\n","/**\n * Architecture boundaries detection and config generation\n *\n * Auto-detects common architecture directories and generates\n * eslint-plugin-boundaries config with sensible hierarchy rules.\n *\n * Supports:\n * - Standard projects (src/utils, utils/)\n * - Monorepos (packages/*, apps/*)\n * - Various naming conventions (helpers, shared, core, etc.)\n */\n\nimport { readdirSync } from 'node:fs';\nimport nodePath from 'node:path';\n\nimport { exists } from './fs.js';\n\n/**\n * Architecture layer definitions with alternative names.\n * Each layer maps to equivalent directory names.\n * Order defines hierarchy: earlier = lower layer.\n */\nconst ARCHITECTURE_LAYERS = [\n  // Layer 0: Pure types (no imports)\n  { layer: 'types', dirs: ['types', 'interfaces', 'schemas'] },\n  // Layer 1: Utilities (only types)\n  { layer: 'utils', dirs: ['utils', 'helpers', 'shared', 'common', 'core'] },\n  // Layer 2: Libraries (types, utils)\n  { layer: 'lib', dirs: ['lib', 'libraries'] },\n  // Layer 3: State & logic (types, utils, lib)\n  { layer: 'hooks', dirs: ['hooks', 'composables'] },\n  { layer: 'services', dirs: ['services', 'api', 'stores', 'state'] },\n  // Layer 4: UI components (all above)\n  { layer: 'components', dirs: ['components', 'ui'] },\n  // Layer 5: Features (all above)\n  { layer: 'features', dirs: ['features', 'modules', 'domains'] },\n  // Layer 6: Entry points (can import everything)\n  { layer: 'app', dirs: ['app', 'pages', 'views', 'routes', 'commands'] },\n] as const;\n\ntype Layer = (typeof ARCHITECTURE_LAYERS)[number]['layer'];\n\n/**\n * Hierarchy rules: what each layer can import\n * Lower layers have fewer import permissions\n */\nconst HIERARCHY: Record<Layer, Layer[]> = {\n  types: [],\n  utils: ['types'],\n  lib: ['utils', 'types'],\n  hooks: ['lib', 'utils', 'types'],\n  services: ['lib', 'utils', 'types'],\n  components: ['hooks', 'services', 'lib', 'utils', 'types'],\n  features: ['components', 'hooks', 'services', 'lib', 'utils', 'types'],\n  app: ['features', 'components', 'hooks', 'services', 'lib', 'utils', 'types'],\n};\n\nexport interface DetectedElement {\n  layer: Layer;\n  pattern: string; // glob pattern for boundaries config\n  location: string; // human-readable location\n}\n\nexport interface DetectedArchitecture {\n  elements: DetectedElement[];\n  isMonorepo: boolean;\n}\n\n/**\n * Find monorepo package directories\n * @param projectDirectory\n */\nfunction findMonorepoPackages(projectDirectory: string): string[] {\n  const packages: string[] = [];\n\n  // Check common monorepo patterns\n  const monorepoRoots = ['packages', 'apps', 'libs', 'modules'];\n\n  for (const root of monorepoRoots) {\n    const rootPath = nodePath.join(projectDirectory, root);\n    if (!exists(rootPath)) continue;\n\n    try {\n      const entries = readdirSync(rootPath, { withFileTypes: true });\n      for (const entry of entries) {\n        if (entry.isDirectory() && !entry.name.startsWith('.')) {\n          packages.push(nodePath.join(root, entry.name));\n        }\n      }\n    } catch {\n      // Directory not readable, skip\n    }\n  }\n\n  return packages;\n}\n\n/**\n * Check if a layer already exists for this path prefix\n * @param elements\n * @param layer\n * @param pathPrefix\n */\nfunction hasLayerForPrefix(elements: DetectedElement[], layer: Layer, pathPrefix: string): boolean {\n  return elements.some(\n    element => element.layer === layer && element.pattern.startsWith(pathPrefix),\n  );\n}\n\n/**\n * Scan a single search path for architecture layers\n * @param projectDirectory\n * @param searchPath\n * @param pathPrefix\n * @param elements\n */\nfunction scanSearchPath(\n  projectDirectory: string,\n  searchPath: string,\n  pathPrefix: string,\n  elements: DetectedElement[],\n): void {\n  for (const layerDefinition of ARCHITECTURE_LAYERS) {\n    for (const dirName of layerDefinition.dirs) {\n      const fullPath = nodePath.join(projectDirectory, searchPath, dirName);\n      if (exists(fullPath) && !hasLayerForPrefix(elements, layerDefinition.layer, pathPrefix)) {\n        elements.push({\n          layer: layerDefinition.layer,\n          pattern: `${pathPrefix}${dirName}/**`,\n          location: `${pathPrefix}${dirName}`,\n        });\n      }\n    }\n  }\n}\n\n/**\n * Scan a directory for architecture layers\n * @param projectDirectory\n * @param basePath\n */\nfunction scanForLayers(projectDirectory: string, basePath: string): DetectedElement[] {\n  const elements: DetectedElement[] = [];\n  const prefix = basePath ? `${basePath}/` : '';\n\n  // Check src/ and root level\n  scanSearchPath(projectDirectory, nodePath.join(basePath, 'src'), `${prefix}src/`, elements);\n  scanSearchPath(projectDirectory, basePath, prefix, elements);\n\n  return elements;\n}\n\n/**\n * Detects architecture directories in the project\n * Handles both standard projects and monorepos\n * @param projectDirectory\n */\nexport function detectArchitecture(projectDirectory: string): DetectedArchitecture {\n  const elements: DetectedElement[] = [];\n\n  // First, check for monorepo packages\n  const packages = findMonorepoPackages(projectDirectory);\n  const isMonorepo = packages.length > 0;\n\n  if (isMonorepo) {\n    // Scan each package\n    for (const pkg of packages) {\n      elements.push(...scanForLayers(projectDirectory, pkg));\n    }\n  }\n\n  // Also scan root level (works for both monorepo root and standard projects)\n  elements.push(...scanForLayers(projectDirectory, ''));\n\n  // Deduplicate by pattern\n  const seen = new Set<string>();\n  const uniqueElements = elements.filter(element => {\n    if (seen.has(element.pattern)) return false;\n    seen.add(element.pattern);\n    return true;\n  });\n\n  return { elements: uniqueElements, isMonorepo };\n}\n\n/**\n * Format a single element for the config\n * @param el\n */\nfunction formatElement(element: DetectedElement): string {\n  return `      { type: '${element.layer}', pattern: '${element.pattern}', mode: 'full' }`;\n}\n\n/**\n * Format allowed imports for a rule\n * @param allowed\n */\nfunction formatAllowedImports(allowed: Layer[]): string {\n  return allowed.map(d => `'${d}'`).join(', ');\n}\n\n/**\n * Generate a single rule for what a layer can import\n * @param layer\n * @param detectedLayers\n */\nfunction generateRule(layer: Layer, detectedLayers: Set<Layer>): string | undefined {\n  const allowedLayers = HIERARCHY[layer];\n  if (allowedLayers.length === 0) return undefined;\n\n  const allowed = allowedLayers.filter(dep => detectedLayers.has(dep));\n  if (allowed.length === 0) return undefined;\n\n  return `        { from: ['${layer}'], allow: [${formatAllowedImports(allowed)}] }`;\n}\n\n/**\n * Build description of what was detected\n * @param arch\n */\nfunction buildDetectedInfo(arch: DetectedArchitecture): string {\n  if (arch.elements.length === 0) {\n    return 'No architecture directories detected yet - add types/, utils/, components/, etc.';\n  }\n  const locations = arch.elements.map(element => element.location).join(', ');\n  const monorepoNote = arch.isMonorepo ? ' (monorepo)' : '';\n  return `Detected: ${locations}${monorepoNote}`;\n}\n\n/**\n *\n * @param arch\n */\nexport function generateBoundariesConfig(arch: DetectedArchitecture): string {\n  const hasElements = arch.elements.length > 0;\n\n  // Generate element definitions\n  const elementsContent = arch.elements.map(element => formatElement(element)).join(',\\n');\n\n  // Generate rules (what each layer can import)\n  const detectedLayers = new Set(arch.elements.map(element => element.layer));\n  const rules = [...detectedLayers]\n    .map(layer => generateRule(layer, detectedLayers))\n    .filter((rule): rule is string => rule !== undefined);\n  const rulesContent = rules.join(',\\n');\n\n  const detectedInfo = buildDetectedInfo(arch);\n\n  return `/**\n * Architecture Boundaries Configuration (AUTO-GENERATED)\n *\n * ${detectedInfo}\n *\n * This enforces import boundaries between architectural layers:\n * - Lower layers (types, utils) cannot import from higher layers (components, features)\n * - Uses 'error' severity - LLMs ignore warnings, errors force compliance\n *\n * Recognized directories (in hierarchy order):\n *   types → utils → lib → hooks/services → components → features/modules → app\n *\n * To customize, override in your eslint.config.mjs:\n *   rules: { 'boundaries/element-types': ['error', { ... }] }\n */\n\nimport boundaries from 'eslint-plugin-boundaries';\n\nexport default {\n  plugins: { boundaries },\n  settings: {\n    'boundaries/elements': [\n${elementsContent}\n    ],\n  },\n  rules: {${\n    hasElements\n      ? `\n    'boundaries/element-types': ['error', {\n      default: 'disallow',\n      rules: [\n${rulesContent}\n      ],\n    }],`\n      : ''\n  }\n    'boundaries/no-unknown': 'off', // Allow files outside defined elements\n    'boundaries/no-unknown-files': 'off', // Allow non-matching files\n  },\n};\n`;\n}\n","/**\n * Dependency-cruiser config generator\n *\n * Generates dependency-cruiser configuration from detected architecture.\n * Used by `safeword sync-config` command and `/audit` slash command.\n */\n\nimport nodePath from 'node:path';\n\nimport type { DetectedArchitecture } from './boundaries.js';\nimport { readJson } from './fs.js';\n\nexport interface DepCruiseArchitecture extends DetectedArchitecture {\n  workspaces?: string[];\n}\n\ninterface PackageJson {\n  workspaces?: string[] | { packages?: string[] };\n}\n\n/**\n * Detect workspaces from package.json\n * Supports both array format and object format (yarn workspaces)\n */\nexport function detectWorkspaces(cwd: string): string[] | undefined {\n  const packageJsonPath = nodePath.join(cwd, 'package.json');\n  const packageJson = readJson(packageJsonPath) as PackageJson | undefined;\n\n  if (!packageJson?.workspaces) return undefined;\n\n  // Handle both formats: string[] or { packages: string[] }\n  const workspaces = Array.isArray(packageJson.workspaces)\n    ? packageJson.workspaces\n    : packageJson.workspaces.packages;\n\n  return workspaces && workspaces.length > 0 ? workspaces : undefined;\n}\n\n/**\n * Generate monorepo hierarchy rules based on workspace patterns\n */\nfunction generateMonorepoRules(workspaces: string[]): string {\n  const rules: string[] = [];\n\n  const hasLibs = workspaces.some(w => w.startsWith('libs'));\n  const hasPackages = workspaces.some(w => w.startsWith('packages'));\n  const hasApps = workspaces.some(w => w.startsWith('apps'));\n\n  // libs cannot import packages or apps\n  if (hasLibs && (hasPackages || hasApps)) {\n    rules.push(`    {\n      name: 'libs-cannot-import-packages-or-apps',\n      severity: 'error',\n      from: { path: '^libs/' },\n      to: { path: '^(packages|apps)/' },\n    }`);\n  }\n\n  // packages cannot import apps\n  if (hasPackages && hasApps) {\n    rules.push(`    {\n      name: 'packages-cannot-import-apps',\n      severity: 'error',\n      from: { path: '^packages/' },\n      to: { path: '^apps/' },\n    }`);\n  }\n\n  return rules.join(',\\n');\n}\n\n/**\n * Generate .safeword/depcruise-config.js content (forbidden rules + options)\n */\nexport function generateDepCruiseConfigFile(arch: DepCruiseArchitecture): string {\n  const monorepoRules = arch.workspaces ? generateMonorepoRules(arch.workspaces) : '';\n  const hasMonorepoRules = monorepoRules.length > 0;\n\n  return String.raw`module.exports = {\n  forbidden: [\n    // ERROR RULES (block on violations)\n    {\n      name: 'no-circular',\n      severity: 'error',\n      from: {},\n      to: { circular: true },\n    },${hasMonorepoRules ? `\\n${monorepoRules},` : ''}\n    // INFO RULES (reported in /audit, not errors)\n    {\n      name: 'no-orphans',\n      severity: 'info',\n      from: { orphan: true, pathNot: ['\\\\.test\\\\.', 'index\\\\.ts$', 'main\\\\.ts$'] },\n      to: {},\n    },\n  ],\n  options: {\n    doNotFollow: { path: ['node_modules', '.safeword'] },\n    tsConfig: { fileName: 'tsconfig.json' },\n    enhancedResolveOptions: { extensions: ['.ts', '.tsx', '.js', '.jsx'] },\n  },\n};\n`;\n}\n\n/**\n * Generate .dependency-cruiser.js (main config that imports generated)\n */\nexport function generateDepCruiseMainConfig(): string {\n  return `/**\n * Dependency Cruiser Configuration\n *\n * Imports auto-generated rules from .safeword/depcruise-config.js\n * ADD YOUR CUSTOM RULES BELOW the spread operator.\n */\n\nconst generated = require('./.safeword/depcruise-config.js');\n\nmodule.exports = {\n  forbidden: [\n    ...generated.forbidden,\n    // ADD YOUR CUSTOM RULES BELOW:\n    // { name: 'no-legacy', from: { path: 'legacy/' }, to: { path: 'new/' } },\n  ],\n  options: {\n    ...generated.options,\n    // Your overrides here\n  },\n};\n`;\n}\n"],"mappings":";;;;;;;;;AAMA,SAAS,qBAAqB;AAC9B,OAAOA,eAAc;;;ACKrB,SAAS,mBAAmB;AAC5B,OAAO,cAAc;AASrB,IAAM,sBAAsB;AAAA;AAAA,EAE1B,EAAE,OAAO,SAAS,MAAM,CAAC,SAAS,cAAc,SAAS,EAAE;AAAA;AAAA,EAE3D,EAAE,OAAO,SAAS,MAAM,CAAC,SAAS,WAAW,UAAU,UAAU,MAAM,EAAE;AAAA;AAAA,EAEzE,EAAE,OAAO,OAAO,MAAM,CAAC,OAAO,WAAW,EAAE;AAAA;AAAA,EAE3C,EAAE,OAAO,SAAS,MAAM,CAAC,SAAS,aAAa,EAAE;AAAA,EACjD,EAAE,OAAO,YAAY,MAAM,CAAC,YAAY,OAAO,UAAU,OAAO,EAAE;AAAA;AAAA,EAElE,EAAE,OAAO,cAAc,MAAM,CAAC,cAAc,IAAI,EAAE;AAAA;AAAA,EAElD,EAAE,OAAO,YAAY,MAAM,CAAC,YAAY,WAAW,SAAS,EAAE;AAAA;AAAA,EAE9D,EAAE,OAAO,OAAO,MAAM,CAAC,OAAO,SAAS,SAAS,UAAU,UAAU,EAAE;AACxE;AAkCA,SAAS,qBAAqB,kBAAoC;AAChE,QAAM,WAAqB,CAAC;AAG5B,QAAM,gBAAgB,CAAC,YAAY,QAAQ,QAAQ,SAAS;AAE5D,aAAW,QAAQ,eAAe;AAChC,UAAM,WAAW,SAAS,KAAK,kBAAkB,IAAI;AACrD,QAAI,CAAC,OAAO,QAAQ,EAAG;AAEvB,QAAI;AACF,YAAM,UAAU,YAAY,UAAU,EAAE,eAAe,KAAK,CAAC;AAC7D,iBAAW,SAAS,SAAS;AAC3B,YAAI,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,WAAW,GAAG,GAAG;AACtD,mBAAS,KAAK,SAAS,KAAK,MAAM,MAAM,IAAI,CAAC;AAAA,QAC/C;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAQA,SAAS,kBAAkB,UAA6B,OAAc,YAA6B;AACjG,SAAO,SAAS;AAAA,IACd,aAAW,QAAQ,UAAU,SAAS,QAAQ,QAAQ,WAAW,UAAU;AAAA,EAC7E;AACF;AASA,SAAS,eACP,kBACA,YACA,YACA,UACM;AACN,aAAW,mBAAmB,qBAAqB;AACjD,eAAW,WAAW,gBAAgB,MAAM;AAC1C,YAAM,WAAW,SAAS,KAAK,kBAAkB,YAAY,OAAO;AACpE,UAAI,OAAO,QAAQ,KAAK,CAAC,kBAAkB,UAAU,gBAAgB,OAAO,UAAU,GAAG;AACvF,iBAAS,KAAK;AAAA,UACZ,OAAO,gBAAgB;AAAA,UACvB,SAAS,GAAG,UAAU,GAAG,OAAO;AAAA,UAChC,UAAU,GAAG,UAAU,GAAG,OAAO;AAAA,QACnC,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;AAOA,SAAS,cAAc,kBAA0B,UAAqC;AACpF,QAAM,WAA8B,CAAC;AACrC,QAAM,SAAS,WAAW,GAAG,QAAQ,MAAM;AAG3C,iBAAe,kBAAkB,SAAS,KAAK,UAAU,KAAK,GAAG,GAAG,MAAM,QAAQ,QAAQ;AAC1F,iBAAe,kBAAkB,UAAU,QAAQ,QAAQ;AAE3D,SAAO;AACT;AAOO,SAAS,mBAAmB,kBAAgD;AACjF,QAAM,WAA8B,CAAC;AAGrC,QAAM,WAAW,qBAAqB,gBAAgB;AACtD,QAAM,aAAa,SAAS,SAAS;AAErC,MAAI,YAAY;AAEd,eAAW,OAAO,UAAU;AAC1B,eAAS,KAAK,GAAG,cAAc,kBAAkB,GAAG,CAAC;AAAA,IACvD;AAAA,EACF;AAGA,WAAS,KAAK,GAAG,cAAc,kBAAkB,EAAE,CAAC;AAGpD,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,iBAAiB,SAAS,OAAO,aAAW;AAChD,QAAI,KAAK,IAAI,QAAQ,OAAO,EAAG,QAAO;AACtC,SAAK,IAAI,QAAQ,OAAO;AACxB,WAAO;AAAA,EACT,CAAC;AAED,SAAO,EAAE,UAAU,gBAAgB,WAAW;AAChD;;;AChLA,OAAOC,eAAc;AAiBd,SAAS,iBAAiB,KAAmC;AAClE,QAAM,kBAAkBC,UAAS,KAAK,KAAK,cAAc;AACzD,QAAM,cAAc,SAAS,eAAe;AAE5C,MAAI,CAAC,aAAa,WAAY,QAAO;AAGrC,QAAM,aAAa,MAAM,QAAQ,YAAY,UAAU,IACnD,YAAY,aACZ,YAAY,WAAW;AAE3B,SAAO,cAAc,WAAW,SAAS,IAAI,aAAa;AAC5D;AAKA,SAAS,sBAAsB,YAA8B;AAC3D,QAAM,QAAkB,CAAC;AAEzB,QAAM,UAAU,WAAW,KAAK,OAAK,EAAE,WAAW,MAAM,CAAC;AACzD,QAAM,cAAc,WAAW,KAAK,OAAK,EAAE,WAAW,UAAU,CAAC;AACjE,QAAM,UAAU,WAAW,KAAK,OAAK,EAAE,WAAW,MAAM,CAAC;AAGzD,MAAI,YAAY,eAAe,UAAU;AACvC,UAAM,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,MAKT;AAAA,EACJ;AAGA,MAAI,eAAe,SAAS;AAC1B,UAAM,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,MAKT;AAAA,EACJ;AAEA,SAAO,MAAM,KAAK,KAAK;AACzB;AAKO,SAAS,4BAA4B,MAAqC;AAC/E,QAAM,gBAAgB,KAAK,aAAa,sBAAsB,KAAK,UAAU,IAAI;AACjF,QAAM,mBAAmB,cAAc,SAAS;AAEhD,SAAO,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQR,mBAAmB;AAAA,EAAK,aAAa,MAAM,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBrD;AAKO,SAAS,8BAAsC;AACpD,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAqBT;;;AFrGO,SAAS,eAAe,KAAa,MAA+C;AACzF,QAAM,oBAAoBC,UAAS,KAAK,KAAK,WAAW;AACxD,QAAM,SAA2B,EAAE,iBAAiB,OAAO,mBAAmB,MAAM;AAGpF,QAAM,sBAAsBA,UAAS,KAAK,mBAAmB,qBAAqB;AAClF,QAAM,kBAAkB,4BAA4B,IAAI;AACxD,gBAAc,qBAAqB,eAAe;AAClD,SAAO,kBAAkB;AAGzB,QAAM,iBAAiBA,UAAS,KAAK,KAAK,wBAAwB;AAClE,MAAI,CAAC,OAAO,cAAc,GAAG;AAC3B,UAAM,aAAa,4BAA4B;AAC/C,kBAAc,gBAAgB,UAAU;AACxC,WAAO,oBAAoB;AAAA,EAC7B;AAEA,SAAO;AACT;AAKO,SAAS,kBAAkB,KAAoC;AACpE,QAAM,OAAO,mBAAmB,GAAG;AACnC,QAAM,aAAa,iBAAiB,GAAG;AACvC,SAAO,EAAE,GAAG,MAAM,WAAW;AAC/B;AAKO,SAAS,wBAAwB,MAAsC;AAC5E,SAAO,KAAK,SAAS,SAAS,KAAK,KAAK,eAAe,KAAK,YAAY,UAAU,KAAK;AACzF;AAKA,eAAsB,aAA4B;AAChD,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,oBAAoBA,UAAS,KAAK,KAAK,WAAW;AAGxD,MAAI,CAAC,OAAO,iBAAiB,GAAG;AAC9B,UAAM,6CAA6C;AACnD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,OAAO,kBAAkB,GAAG;AAClC,QAAM,SAAS,eAAe,KAAK,IAAI;AAEvC,MAAI,OAAO,iBAAiB;AAC1B,SAAK,yCAAyC;AAAA,EAChD;AACA,MAAI,OAAO,mBAAmB;AAC5B,SAAK,gCAAgC;AAAA,EACvC;AAEA,UAAQ,eAAe;AACzB;","names":["nodePath","nodePath","nodePath","nodePath"]}
+{"version":3,"sources":["../src/commands/sync-config.ts","../src/utils/boundaries.ts","../src/utils/depcruise-config.ts"],"sourcesContent":["/**\n * Sync Config command - Regenerate depcruise config from current project structure\n *\n * Used by `/audit` slash command to refresh config before running checks.\n */\n\nimport { writeFileSync } from 'node:fs';\nimport nodePath from 'node:path';\n\nimport { detectArchitecture } from '../utils/boundaries.js';\nimport {\n  type DepCruiseArchitecture,\n  detectWorkspaces,\n  generateDepCruiseConfigFile,\n  generateDepCruiseMainConfig,\n} from '../utils/depcruise-config.js';\nimport { exists } from '../utils/fs.js';\nimport { error, info, success } from '../utils/output.js';\n\nexport interface SyncConfigResult {\n  generatedConfig: boolean;\n  createdMainConfig: boolean;\n}\n\n/**\n * Core sync logic - writes depcruise configs to disk\n * Can be called from setup or as standalone command\n */\nexport function syncConfigCore(cwd: string, arch: DepCruiseArchitecture): SyncConfigResult {\n  const safewordDirectory = nodePath.join(cwd, '.safeword');\n  const result: SyncConfigResult = { generatedConfig: false, createdMainConfig: false };\n\n  // Generate and write .safeword/depcruise-config.js\n  const generatedConfigPath = nodePath.join(safewordDirectory, 'depcruise-config.js');\n  const generatedConfig = generateDepCruiseConfigFile(arch);\n  writeFileSync(generatedConfigPath, generatedConfig);\n  result.generatedConfig = true;\n\n  // Create main config if not exists (self-healing)\n  const mainConfigPath = nodePath.join(cwd, '.dependency-cruiser.js');\n  if (!exists(mainConfigPath)) {\n    const mainConfig = generateDepCruiseMainConfig();\n    writeFileSync(mainConfigPath, mainConfig);\n    result.createdMainConfig = true;\n  }\n\n  return result;\n}\n\n/**\n * Build full architecture info by combining detected layers with workspaces\n */\nexport function buildArchitecture(cwd: string): DepCruiseArchitecture {\n  const arch = detectArchitecture(cwd);\n  const workspaces = detectWorkspaces(cwd);\n  return { ...arch, workspaces };\n}\n\n/**\n * Check if architecture was detected (layers, monorepo structure, or workspaces)\n */\nexport function hasArchitectureDetected(arch: DepCruiseArchitecture): boolean {\n  return arch.elements.length > 0 || arch.isMonorepo || (arch.workspaces?.length ?? 0) > 0;\n}\n\n/**\n * CLI command: Sync depcruise config with current project structure\n */\nexport async function syncConfig(): Promise<void> {\n  const cwd = process.cwd();\n  const safewordDirectory = nodePath.join(cwd, '.safeword');\n\n  // Check if .safeword exists\n  if (!exists(safewordDirectory)) {\n    error('Not configured. Run `safeword setup` first.');\n    process.exit(1);\n  }\n\n  // Detect current architecture and workspaces\n  const arch = buildArchitecture(cwd);\n  const result = syncConfigCore(cwd, arch);\n\n  if (result.generatedConfig) {\n    info('Generated .safeword/depcruise-config.js');\n  }\n  if (result.createdMainConfig) {\n    info('Created .dependency-cruiser.js');\n  }\n\n  success('Config synced');\n}\n","/**\n * Architecture boundaries detection and config generation\n *\n * Auto-detects common architecture directories and generates\n * eslint-plugin-boundaries config with sensible hierarchy rules.\n *\n * Supports:\n * - Standard projects (src/utils, utils/)\n * - Monorepos (packages/*, apps/*)\n * - Various naming conventions (helpers, shared, core, etc.)\n */\n\nimport { readdirSync } from 'node:fs';\nimport nodePath from 'node:path';\n\nimport { exists } from './fs.js';\n\n/**\n * Architecture layer definitions with alternative names.\n * Each layer maps to equivalent directory names.\n * Order defines hierarchy: earlier = lower layer.\n */\nconst ARCHITECTURE_LAYERS = [\n  // Layer 0: Pure types (no imports)\n  { layer: 'types', dirs: ['types', 'interfaces', 'schemas'] },\n  // Layer 1: Utilities (only types)\n  { layer: 'utils', dirs: ['utils', 'helpers', 'shared', 'common', 'core'] },\n  // Layer 2: Libraries (types, utils)\n  { layer: 'lib', dirs: ['lib', 'libraries'] },\n  // Layer 3: State & logic (types, utils, lib)\n  { layer: 'hooks', dirs: ['hooks', 'composables'] },\n  { layer: 'services', dirs: ['services', 'api', 'stores', 'state'] },\n  // Layer 4: UI components (all above)\n  { layer: 'components', dirs: ['components', 'ui'] },\n  // Layer 5: Features (all above)\n  { layer: 'features', dirs: ['features', 'modules', 'domains'] },\n  // Layer 6: Entry points (can import everything)\n  { layer: 'app', dirs: ['app', 'pages', 'views', 'routes', 'commands'] },\n] as const;\n\ntype Layer = (typeof ARCHITECTURE_LAYERS)[number]['layer'];\n\n/**\n * Hierarchy rules: what each layer can import\n * Lower layers have fewer import permissions\n */\nconst HIERARCHY: Record<Layer, Layer[]> = {\n  types: [],\n  utils: ['types'],\n  lib: ['utils', 'types'],\n  hooks: ['lib', 'utils', 'types'],\n  services: ['lib', 'utils', 'types'],\n  components: ['hooks', 'services', 'lib', 'utils', 'types'],\n  features: ['components', 'hooks', 'services', 'lib', 'utils', 'types'],\n  app: ['features', 'components', 'hooks', 'services', 'lib', 'utils', 'types'],\n};\n\nexport interface DetectedElement {\n  layer: Layer;\n  pattern: string; // glob pattern for boundaries config\n  location: string; // human-readable location\n}\n\nexport interface DetectedArchitecture {\n  elements: DetectedElement[];\n  isMonorepo: boolean;\n}\n\n/**\n * Find monorepo package directories\n * @param projectDirectory\n */\nfunction findMonorepoPackages(projectDirectory: string): string[] {\n  const packages: string[] = [];\n\n  // Check common monorepo patterns\n  const monorepoRoots = ['packages', 'apps', 'libs', 'modules'];\n\n  for (const root of monorepoRoots) {\n    const rootPath = nodePath.join(projectDirectory, root);\n    if (!exists(rootPath)) continue;\n\n    try {\n      const entries = readdirSync(rootPath, { withFileTypes: true });\n      for (const entry of entries) {\n        if (entry.isDirectory() && !entry.name.startsWith('.')) {\n          packages.push(nodePath.join(root, entry.name));\n        }\n      }\n    } catch {\n      // Directory not readable, skip\n    }\n  }\n\n  return packages;\n}\n\n/**\n * Check if a layer already exists for this path prefix\n * @param elements\n * @param layer\n * @param pathPrefix\n */\nfunction hasLayerForPrefix(elements: DetectedElement[], layer: Layer, pathPrefix: string): boolean {\n  return elements.some(\n    element => element.layer === layer && element.pattern.startsWith(pathPrefix),\n  );\n}\n\n/**\n * Scan a single search path for architecture layers\n * @param projectDirectory\n * @param searchPath\n * @param pathPrefix\n * @param elements\n */\nfunction scanSearchPath(\n  projectDirectory: string,\n  searchPath: string,\n  pathPrefix: string,\n  elements: DetectedElement[],\n): void {\n  for (const layerDefinition of ARCHITECTURE_LAYERS) {\n    for (const dirName of layerDefinition.dirs) {\n      const fullPath = nodePath.join(projectDirectory, searchPath, dirName);\n      if (exists(fullPath) && !hasLayerForPrefix(elements, layerDefinition.layer, pathPrefix)) {\n        elements.push({\n          layer: layerDefinition.layer,\n          pattern: `${pathPrefix}${dirName}/**`,\n          location: `${pathPrefix}${dirName}`,\n        });\n      }\n    }\n  }\n}\n\n/**\n * Scan a directory for architecture layers\n * @param projectDirectory\n * @param basePath\n */\nfunction scanForLayers(projectDirectory: string, basePath: string): DetectedElement[] {\n  const elements: DetectedElement[] = [];\n  const prefix = basePath ? `${basePath}/` : '';\n\n  // Check src/ and root level\n  scanSearchPath(projectDirectory, nodePath.join(basePath, 'src'), `${prefix}src/`, elements);\n  scanSearchPath(projectDirectory, basePath, prefix, elements);\n\n  return elements;\n}\n\n/**\n * Detects architecture directories in the project\n * Handles both standard projects and monorepos\n * @param projectDirectory\n */\nexport function detectArchitecture(projectDirectory: string): DetectedArchitecture {\n  const elements: DetectedElement[] = [];\n\n  // First, check for monorepo packages\n  const packages = findMonorepoPackages(projectDirectory);\n  const isMonorepo = packages.length > 0;\n\n  if (isMonorepo) {\n    // Scan each package\n    for (const pkg of packages) {\n      elements.push(...scanForLayers(projectDirectory, pkg));\n    }\n  }\n\n  // Also scan root level (works for both monorepo root and standard projects)\n  elements.push(...scanForLayers(projectDirectory, ''));\n\n  // Deduplicate by pattern\n  const seen = new Set<string>();\n  const uniqueElements = elements.filter(element => {\n    if (seen.has(element.pattern)) return false;\n    seen.add(element.pattern);\n    return true;\n  });\n\n  return { elements: uniqueElements, isMonorepo };\n}\n\n/**\n * Format a single element for the config\n * @param el\n */\nfunction formatElement(element: DetectedElement): string {\n  return `      { type: '${element.layer}', pattern: '${element.pattern}', mode: 'full' }`;\n}\n\n/**\n * Format allowed imports for a rule\n * @param allowed\n */\nfunction formatAllowedImports(allowed: Layer[]): string {\n  return allowed.map(d => `'${d}'`).join(', ');\n}\n\n/**\n * Generate a single rule for what a layer can import\n * @param layer\n * @param detectedLayers\n */\nfunction generateRule(layer: Layer, detectedLayers: Set<Layer>): string | undefined {\n  const allowedLayers = HIERARCHY[layer];\n  if (allowedLayers.length === 0) return undefined;\n\n  const allowed = allowedLayers.filter(dep => detectedLayers.has(dep));\n  if (allowed.length === 0) return undefined;\n\n  return `        { from: ['${layer}'], allow: [${formatAllowedImports(allowed)}] }`;\n}\n\n/**\n * Build description of what was detected\n * @param arch\n */\nfunction buildDetectedInfo(arch: DetectedArchitecture): string {\n  if (arch.elements.length === 0) {\n    return 'No architecture directories detected yet - add types/, utils/, components/, etc.';\n  }\n  const locations = arch.elements.map(element => element.location).join(', ');\n  const monorepoNote = arch.isMonorepo ? ' (monorepo)' : '';\n  return `Detected: ${locations}${monorepoNote}`;\n}\n\n/**\n *\n * @param arch\n */\nexport function generateBoundariesConfig(arch: DetectedArchitecture): string {\n  const hasElements = arch.elements.length > 0;\n\n  // Generate element definitions\n  const elementsContent = arch.elements.map(element => formatElement(element)).join(',\\n');\n\n  // Generate rules (what each layer can import)\n  const detectedLayers = new Set(arch.elements.map(element => element.layer));\n  const rules = [...detectedLayers]\n    .map(layer => generateRule(layer, detectedLayers))\n    .filter((rule): rule is string => rule !== undefined);\n  const rulesContent = rules.join(',\\n');\n\n  const detectedInfo = buildDetectedInfo(arch);\n\n  return `/**\n * Architecture Boundaries Configuration (AUTO-GENERATED)\n *\n * ${detectedInfo}\n *\n * This enforces import boundaries between architectural layers:\n * - Lower layers (types, utils) cannot import from higher layers (components, features)\n * - Uses 'error' severity - LLMs ignore warnings, errors force compliance\n *\n * Recognized directories (in hierarchy order):\n *   types → utils → lib → hooks/services → components → features/modules → app\n *\n * To customize, override in your eslint.config.mjs:\n *   rules: { 'boundaries/element-types': ['error', { ... }] }\n */\n\nimport boundaries from 'eslint-plugin-boundaries';\n\nexport default {\n  plugins: { boundaries },\n  settings: {\n    'boundaries/elements': [\n${elementsContent}\n    ],\n  },\n  rules: {${\n    hasElements\n      ? `\n    'boundaries/element-types': ['error', {\n      default: 'disallow',\n      rules: [\n${rulesContent}\n      ],\n    }],`\n      : ''\n  }\n    'boundaries/no-unknown': 'off', // Allow files outside defined elements\n    'boundaries/no-unknown-files': 'off', // Allow non-matching files\n  },\n};\n`;\n}\n","/**\n * Dependency-cruiser config generator\n *\n * Generates dependency-cruiser configuration from detected architecture.\n * Used by `safeword sync-config` command and `/audit` slash command.\n */\n\nimport nodePath from 'node:path';\n\nimport type { DetectedArchitecture } from './boundaries.js';\nimport { readJson } from './fs.js';\n\nexport interface DepCruiseArchitecture extends DetectedArchitecture {\n  workspaces?: string[];\n}\n\ninterface PackageJson {\n  workspaces?: string[] | { packages?: string[] };\n}\n\n/**\n * Detect workspaces from package.json\n * Supports both array format and object format (yarn workspaces)\n */\nexport function detectWorkspaces(cwd: string): string[] | undefined {\n  const packageJsonPath = nodePath.join(cwd, 'package.json');\n  const packageJson = readJson(packageJsonPath) as PackageJson | undefined;\n\n  if (!packageJson?.workspaces) return undefined;\n\n  // Handle both formats: string[] or { packages: string[] }\n  const workspaces = Array.isArray(packageJson.workspaces)\n    ? packageJson.workspaces\n    : packageJson.workspaces.packages;\n\n  return workspaces && workspaces.length > 0 ? workspaces : undefined;\n}\n\n/**\n * Generate monorepo hierarchy rules based on workspace patterns\n */\nfunction generateMonorepoRules(workspaces: string[]): string {\n  const rules: string[] = [];\n\n  const hasLibs = workspaces.some(w => w.startsWith('libs'));\n  const hasPackages = workspaces.some(w => w.startsWith('packages'));\n  const hasApps = workspaces.some(w => w.startsWith('apps'));\n\n  // libs cannot import packages or apps\n  if (hasLibs && (hasPackages || hasApps)) {\n    rules.push(`    {\n      name: 'libs-cannot-import-packages-or-apps',\n      severity: 'error',\n      from: { path: '^libs/' },\n      to: { path: '^(packages|apps)/' },\n    }`);\n  }\n\n  // packages cannot import apps\n  if (hasPackages && hasApps) {\n    rules.push(`    {\n      name: 'packages-cannot-import-apps',\n      severity: 'error',\n      from: { path: '^packages/' },\n      to: { path: '^apps/' },\n    }`);\n  }\n\n  return rules.join(',\\n');\n}\n\n/**\n * Generate .safeword/depcruise-config.js content (forbidden rules + options)\n */\nexport function generateDepCruiseConfigFile(arch: DepCruiseArchitecture): string {\n  const monorepoRules = arch.workspaces ? generateMonorepoRules(arch.workspaces) : '';\n  const hasMonorepoRules = monorepoRules.length > 0;\n\n  return String.raw`module.exports = {\n  forbidden: [\n    // =========================================================================\n    // ERROR RULES (block on violations)\n    // =========================================================================\n    {\n      name: 'no-circular',\n      comment: 'Circular dependencies cause runtime issues and make code hard to reason about',\n      severity: 'error',\n      from: {},\n      to: { circular: true },\n    },\n    {\n      name: 'no-deprecated-deps',\n      comment: 'Deprecated npm packages should be replaced - they may have security issues or be unmaintained',\n      severity: 'error',\n      from: {},\n      to: { dependencyTypes: ['deprecated'] },\n    },${hasMonorepoRules ? `\\n${monorepoRules},` : ''}\n\n    // =========================================================================\n    // WARNING RULES (flag issues but don't block)\n    // =========================================================================\n    {\n      name: 'no-dev-deps-in-src',\n      comment: 'Production code should not import devDependencies - may cause runtime failures',\n      severity: 'warn',\n      from: {\n        path: '^(packages/[^/]+/)?src',\n        pathNot: '\\\\.test\\\\.[tj]sx?$',\n      },\n      to: { dependencyTypes: ['npm-dev'] },\n    },\n    {\n      name: 'no-orphans',\n      comment: 'Orphan modules are not imported anywhere - may be dead code',\n      severity: 'warn',\n      from: {\n        orphan: true,\n        pathNot: [\n          // Entry points\n          '(^|/)index\\\\.[tj]sx?$',\n          '(^|/)main\\\\.[tj]sx?$',\n          '(^|/)cli\\\\.[tj]s$',\n          '\\\\.config\\\\.[tj]s$',\n          '\\\\.config\\\\.mjs$',\n          // Test files\n          '\\\\.test\\\\.[tj]sx?$',\n          '\\\\.spec\\\\.[tj]sx?$',\n          '/tests/',\n          '/__tests__/',\n          // Astro/Next.js pages and content\n          '/src/content/',\n          '/src/pages/',\n          '/app/',\n        ],\n      },\n      to: {},\n    },\n  ],\n  options: {\n    doNotFollow: { path: ['node_modules', '.safeword'] },\n    exclude: {\n      path: ['node_modules', 'dist', 'build', 'coverage', '\\\\.d\\\\.ts$'],\n    },\n    tsPreCompilationDeps: true,\n    tsConfig: { fileName: 'tsconfig.json' },\n    enhancedResolveOptions: {\n      extensions: ['.ts', '.tsx', '.js', '.jsx'],\n      exportsFields: ['exports'],\n      conditionNames: ['import', 'require', 'node', 'default'],\n    },\n  },\n};\n`;\n}\n\n/**\n * Generate .dependency-cruiser.js (main config that imports generated)\n */\nexport function generateDepCruiseMainConfig(): string {\n  return `/**\n * Dependency Cruiser Configuration\n *\n * Imports auto-generated rules from .safeword/depcruise-config.js\n * ADD YOUR CUSTOM RULES BELOW the spread operator.\n */\n\nconst generated = require('./.safeword/depcruise-config.js');\n\nmodule.exports = {\n  forbidden: [\n    ...generated.forbidden,\n    // ADD YOUR CUSTOM RULES BELOW:\n    // { name: 'no-legacy', from: { path: 'legacy/' }, to: { path: 'new/' } },\n  ],\n  options: {\n    ...generated.options,\n    // Your overrides here\n  },\n};\n`;\n}\n"],"mappings":";;;;;;;;;AAMA,SAAS,qBAAqB;AAC9B,OAAOA,eAAc;;;ACKrB,SAAS,mBAAmB;AAC5B,OAAO,cAAc;AASrB,IAAM,sBAAsB;AAAA;AAAA,EAE1B,EAAE,OAAO,SAAS,MAAM,CAAC,SAAS,cAAc,SAAS,EAAE;AAAA;AAAA,EAE3D,EAAE,OAAO,SAAS,MAAM,CAAC,SAAS,WAAW,UAAU,UAAU,MAAM,EAAE;AAAA;AAAA,EAEzE,EAAE,OAAO,OAAO,MAAM,CAAC,OAAO,WAAW,EAAE;AAAA;AAAA,EAE3C,EAAE,OAAO,SAAS,MAAM,CAAC,SAAS,aAAa,EAAE;AAAA,EACjD,EAAE,OAAO,YAAY,MAAM,CAAC,YAAY,OAAO,UAAU,OAAO,EAAE;AAAA;AAAA,EAElE,EAAE,OAAO,cAAc,MAAM,CAAC,cAAc,IAAI,EAAE;AAAA;AAAA,EAElD,EAAE,OAAO,YAAY,MAAM,CAAC,YAAY,WAAW,SAAS,EAAE;AAAA;AAAA,EAE9D,EAAE,OAAO,OAAO,MAAM,CAAC,OAAO,SAAS,SAAS,UAAU,UAAU,EAAE;AACxE;AAkCA,SAAS,qBAAqB,kBAAoC;AAChE,QAAM,WAAqB,CAAC;AAG5B,QAAM,gBAAgB,CAAC,YAAY,QAAQ,QAAQ,SAAS;AAE5D,aAAW,QAAQ,eAAe;AAChC,UAAM,WAAW,SAAS,KAAK,kBAAkB,IAAI;AACrD,QAAI,CAAC,OAAO,QAAQ,EAAG;AAEvB,QAAI;AACF,YAAM,UAAU,YAAY,UAAU,EAAE,eAAe,KAAK,CAAC;AAC7D,iBAAW,SAAS,SAAS;AAC3B,YAAI,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,WAAW,GAAG,GAAG;AACtD,mBAAS,KAAK,SAAS,KAAK,MAAM,MAAM,IAAI,CAAC;AAAA,QAC/C;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAQA,SAAS,kBAAkB,UAA6B,OAAc,YAA6B;AACjG,SAAO,SAAS;AAAA,IACd,aAAW,QAAQ,UAAU,SAAS,QAAQ,QAAQ,WAAW,UAAU;AAAA,EAC7E;AACF;AASA,SAAS,eACP,kBACA,YACA,YACA,UACM;AACN,aAAW,mBAAmB,qBAAqB;AACjD,eAAW,WAAW,gBAAgB,MAAM;AAC1C,YAAM,WAAW,SAAS,KAAK,kBAAkB,YAAY,OAAO;AACpE,UAAI,OAAO,QAAQ,KAAK,CAAC,kBAAkB,UAAU,gBAAgB,OAAO,UAAU,GAAG;AACvF,iBAAS,KAAK;AAAA,UACZ,OAAO,gBAAgB;AAAA,UACvB,SAAS,GAAG,UAAU,GAAG,OAAO;AAAA,UAChC,UAAU,GAAG,UAAU,GAAG,OAAO;AAAA,QACnC,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;AAOA,SAAS,cAAc,kBAA0B,UAAqC;AACpF,QAAM,WAA8B,CAAC;AACrC,QAAM,SAAS,WAAW,GAAG,QAAQ,MAAM;AAG3C,iBAAe,kBAAkB,SAAS,KAAK,UAAU,KAAK,GAAG,GAAG,MAAM,QAAQ,QAAQ;AAC1F,iBAAe,kBAAkB,UAAU,QAAQ,QAAQ;AAE3D,SAAO;AACT;AAOO,SAAS,mBAAmB,kBAAgD;AACjF,QAAM,WAA8B,CAAC;AAGrC,QAAM,WAAW,qBAAqB,gBAAgB;AACtD,QAAM,aAAa,SAAS,SAAS;AAErC,MAAI,YAAY;AAEd,eAAW,OAAO,UAAU;AAC1B,eAAS,KAAK,GAAG,cAAc,kBAAkB,GAAG,CAAC;AAAA,IACvD;AAAA,EACF;AAGA,WAAS,KAAK,GAAG,cAAc,kBAAkB,EAAE,CAAC;AAGpD,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,iBAAiB,SAAS,OAAO,aAAW;AAChD,QAAI,KAAK,IAAI,QAAQ,OAAO,EAAG,QAAO;AACtC,SAAK,IAAI,QAAQ,OAAO;AACxB,WAAO;AAAA,EACT,CAAC;AAED,SAAO,EAAE,UAAU,gBAAgB,WAAW;AAChD;;;AChLA,OAAOC,eAAc;AAiBd,SAAS,iBAAiB,KAAmC;AAClE,QAAM,kBAAkBC,UAAS,KAAK,KAAK,cAAc;AACzD,QAAM,cAAc,SAAS,eAAe;AAE5C,MAAI,CAAC,aAAa,WAAY,QAAO;AAGrC,QAAM,aAAa,MAAM,QAAQ,YAAY,UAAU,IACnD,YAAY,aACZ,YAAY,WAAW;AAE3B,SAAO,cAAc,WAAW,SAAS,IAAI,aAAa;AAC5D;AAKA,SAAS,sBAAsB,YAA8B;AAC3D,QAAM,QAAkB,CAAC;AAEzB,QAAM,UAAU,WAAW,KAAK,OAAK,EAAE,WAAW,MAAM,CAAC;AACzD,QAAM,cAAc,WAAW,KAAK,OAAK,EAAE,WAAW,UAAU,CAAC;AACjE,QAAM,UAAU,WAAW,KAAK,OAAK,EAAE,WAAW,MAAM,CAAC;AAGzD,MAAI,YAAY,eAAe,UAAU;AACvC,UAAM,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,MAKT;AAAA,EACJ;AAGA,MAAI,eAAe,SAAS;AAC1B,UAAM,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,MAKT;AAAA,EACJ;AAEA,SAAO,MAAM,KAAK,KAAK;AACzB;AAKO,SAAS,4BAA4B,MAAqC;AAC/E,QAAM,gBAAgB,KAAK,aAAa,sBAAsB,KAAK,UAAU,IAAI;AACjF,QAAM,mBAAmB,cAAc,SAAS;AAEhD,SAAO,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAkBR,mBAAmB;AAAA,EAAK,aAAa,MAAM,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyDrD;AAKO,SAAS,8BAAsC;AACpD,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAqBT;;;AFxJO,SAAS,eAAe,KAAa,MAA+C;AACzF,QAAM,oBAAoBC,UAAS,KAAK,KAAK,WAAW;AACxD,QAAM,SAA2B,EAAE,iBAAiB,OAAO,mBAAmB,MAAM;AAGpF,QAAM,sBAAsBA,UAAS,KAAK,mBAAmB,qBAAqB;AAClF,QAAM,kBAAkB,4BAA4B,IAAI;AACxD,gBAAc,qBAAqB,eAAe;AAClD,SAAO,kBAAkB;AAGzB,QAAM,iBAAiBA,UAAS,KAAK,KAAK,wBAAwB;AAClE,MAAI,CAAC,OAAO,cAAc,GAAG;AAC3B,UAAM,aAAa,4BAA4B;AAC/C,kBAAc,gBAAgB,UAAU;AACxC,WAAO,oBAAoB;AAAA,EAC7B;AAEA,SAAO;AACT;AAKO,SAAS,kBAAkB,KAAoC;AACpE,QAAM,OAAO,mBAAmB,GAAG;AACnC,QAAM,aAAa,iBAAiB,GAAG;AACvC,SAAO,EAAE,GAAG,MAAM,WAAW;AAC/B;AAKO,SAAS,wBAAwB,MAAsC;AAC5E,SAAO,KAAK,SAAS,SAAS,KAAK,KAAK,eAAe,KAAK,YAAY,UAAU,KAAK;AACzF;AAKA,eAAsB,aAA4B;AAChD,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,oBAAoBA,UAAS,KAAK,KAAK,WAAW;AAGxD,MAAI,CAAC,OAAO,iBAAiB,GAAG;AAC9B,UAAM,6CAA6C;AACnD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,OAAO,kBAAkB,GAAG;AAClC,QAAM,SAAS,eAAe,KAAK,IAAI;AAEvC,MAAI,OAAO,iBAAiB;AAC1B,SAAK,yCAAyC;AAAA,EAChD;AACA,MAAI,OAAO,mBAAmB;AAC5B,SAAK,gCAAgC;AAAA,EACvC;AAEA,UAAQ,eAAe;AACzB;","names":["nodePath","nodePath","nodePath","nodePath"]}

package/dist/cli.js

@@ -8,7 +8,7 @@ import { Command } from "commander";
 var program = new Command();
 program.name("safeword").description("CLI for setting up and managing safeword development environments").version(VERSION);
 program.command("setup").description("Set up safeword in the current project").option("-y, --yes", "Accept all defaults (non-interactive mode)").action(async (options) => {
-  const { setup } = await import("./setup-4PQV6EV2.js");
+  const { setup } = await import("./setup-C6MJRBGY.js");
   await setup(options);
 });
 program.command("check").description("Check project health and versions").option("--offline", "Skip remote version check").action(async (options) => {
@@ -28,7 +28,7 @@ program.command("reset").description("Remove safeword configuration from project
   await reset(options);
 });
 program.command("sync-config").description("Regenerate depcruise config from current project structure").action(async () => {
-  const { syncConfig } = await import("./sync-config-PPTR3JPA.js");
+  const { syncConfig } = await import("./sync-config-KZE4R47T.js");
   await syncConfig();
 });
 if (process.argv.length === 2) {

package/dist/{setup-4PQV6EV2.js → setup-C6MJRBGY.js}

@@ -2,7 +2,7 @@ import {
   buildArchitecture,
   hasArchitectureDetected,
   syncConfigCore
-} from "./chunk-3R26BJXN.js";
+} from "./chunk-TJOHD7CV.js";
 import {
   SAFEWORD_SCHEMA,
   createProjectContext,
@@ -103,4 +103,4 @@ Architecture detected: ${detected.join("; ")}`);
 export {
   setup
 };
-//# sourceMappingURL=setup-4PQV6EV2.js.map
+//# sourceMappingURL=setup-C6MJRBGY.js.map

package/dist/{sync-config-PPTR3JPA.js → sync-config-KZE4R47T.js}

@@ -3,7 +3,7 @@ import {
   hasArchitectureDetected,
   syncConfig,
   syncConfigCore
-} from "./chunk-3R26BJXN.js";
+} from "./chunk-TJOHD7CV.js";
 import "./chunk-DYLHQBW3.js";
 export {
   buildArchitecture,
@@ -11,4 +11,4 @@ export {
   syncConfig,
   syncConfigCore
 };
-//# sourceMappingURL=sync-config-PPTR3JPA.js.map
+//# sourceMappingURL=sync-config-KZE4R47T.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safeword",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "CLI for setting up and managing safeword development environments",
   "type": "module",
   "bin": {

package/templates/hooks/lib/quality.ts

@@ -13,18 +13,6 @@ Assume you've never seen it before.
 - Is it correct?
 - Is it elegant?
 - Does it follow latest docs/best practices?
-- Ask me any non-obvious questions.
+- If questions remain: research first, then ask targeted questions.
 - Avoid bloat.
 - If you asked a question above that's still relevant after review, re-ask it.`;
-
-export const QUESTION_RESEARCH_MESSAGE = `SAFEWORD Research Prompt:
-
-Before asking this question, do your research and investigate.
-Explore and debate the options.
-
-- What's most correct?
-- What's most elegant?
-- What's most in line with latest docs and best practices?
-- Think hard and avoid bloat.
-
-Then re-ask your question with the context you've gathered.`;

package/templates/hooks/prompt-questions.ts

@@ -12,21 +12,6 @@ if (!existsSync(safewordDir)) {
   process.exit(0);
 }
 
-// Read the user prompt from stdin
-let input: string;
-try {
-  input = await Bun.stdin.text();
-} catch (error) {
-  if (process.env.DEBUG) console.error('[prompt-questions] stdin read error:', error);
-  process.exit(0);
-}
-
-// Only trigger on substantial prompts (more than 20 chars)
-if (input.length < 20) {
-  process.exit(0);
-}
-
-console.log(`SAFEWORD Question Protocol: For ambiguous or complex requests, ask 1-5 clarifying questions before proceeding. Focus on:
-- Scope boundaries (what's included/excluded)
-- Technical constraints (frameworks, patterns, compatibility)
-- Success criteria (how will we know it's done)`);
+console.log(
+  `SAFEWORD: Research before asking. Debate options (correct? elegant? latest practices?), then ask 1-5 targeted questions about scope, constraints, or success criteria.`
+);

package/templates/hooks/stop-quality.ts

@@ -1,11 +1,11 @@
 #!/usr/bin/env bun
 // Safeword: Auto Quality Review Stop Hook
 // Triggers quality review when changes are proposed or made
-// Looks for {"proposedChanges": ..., "madeChanges": ..., "askedQuestion": ...} JSON blob
+// Looks for {"proposedChanges": ..., "madeChanges": ...} JSON blob
 
 import { existsSync } from 'node:fs';
 
-import { QUALITY_REVIEW_MESSAGE, QUESTION_RESEARCH_MESSAGE } from './lib/quality.ts';
+import { QUALITY_REVIEW_MESSAGE } from './lib/quality.ts';
 
 interface HookInput {
   transcript_path?: string;
@@ -21,7 +21,6 @@ interface TranscriptMessage {
 interface ResponseSummary {
   proposedChanges: boolean;
   madeChanges: boolean;
-  askedQuestion: boolean;
 }
 
 const projectDir = process.env.CLAUDE_PROJECT_DIR ?? process.cwd();
@@ -134,8 +133,7 @@ function isValidSummary(object: unknown): object is ResponseSummary {
     typeof object === 'object' &&
     object !== null &&
     typeof (object as ResponseSummary).proposedChanges === 'boolean' &&
-    typeof (object as ResponseSummary).madeChanges === 'boolean' &&
-    typeof (object as ResponseSummary).askedQuestion === 'boolean'
+    typeof (object as ResponseSummary).madeChanges === 'boolean'
   );
 }
 
@@ -152,20 +150,19 @@ for (const candidate of candidates) {
 }
 
 if (!summary) {
-  // No valid JSON blob found - remind about required format
-  console.error('SAFEWORD: Response missing required JSON summary. Add to end of response:');
-  console.error('{"proposedChanges": boolean, "madeChanges": boolean, "askedQuestion": boolean}');
-  process.exit(2);
+  // No valid JSON blob found - remind about required format (JSON stdout + exit 0 per Claude Code docs)
+  console.log(
+    JSON.stringify({
+      decision: 'block',
+      reason:
+        'SAFEWORD: Response missing required JSON summary. Add to end of response:\n{"proposedChanges": boolean, "madeChanges": boolean}',
+    })
+  );
+  process.exit(0);
 }
 
-// If either proposed or made changes, trigger quality review
+// If either proposed or made changes, trigger quality review (JSON stdout + exit 0 per Claude Code docs)
 if (summary.proposedChanges || summary.madeChanges) {
-  console.error(QUALITY_REVIEW_MESSAGE);
-  process.exit(2);
-}
-
-// If only asked a question (no changes), trigger research prompt
-if (summary.askedQuestion) {
-  console.error(QUESTION_RESEARCH_MESSAGE);
-  process.exit(2);
+  console.log(JSON.stringify({ decision: 'block', reason: QUALITY_REVIEW_MESSAGE }));
+  process.exit(0);
 }