safeword 0.30.2 → 0.31.0

package/dist/{check-KU5QI4TK.js → check-ASCK2RGI.js}

@@ -6,7 +6,7 @@ import {
   createProjectContext,
   getMissingPacks,
   reconcile
-} from "./chunk-VKYVBKM6.js";
+} from "./chunk-S6T3OR74.js";
 import "./chunk-YVZL7WO5.js";
 import {
   VERSION
@@ -189,4 +189,4 @@ async function check(options) {
 export {
   check
 };
-//# sourceMappingURL=check-KU5QI4TK.js.map
+//# sourceMappingURL=check-ASCK2RGI.js.map

package/dist/{chunk-VKYVBKM6.js → chunk-S6T3OR74.js}

@@ -33,6 +33,7 @@ function setupGoTooling() {
 
 // src/packs/config.ts
 import nodePath from "path";
+import process2 from "process";
 var CONFIG_PATH = ".safeword/config.json";
 function readConfig(cwd) {
   const configPath = nodePath.join(cwd, CONFIG_PATH);
@@ -507,14 +508,11 @@ function planMissingDirectories(directories, cwd, isGitRepo2) {
   }
   return { actions, created };
 }
-function planTextPatches(patches, cwd, isGitRepo2) {
+function planTextPatches(patches, isGitRepo2) {
   const actions = [];
   for (const [filePath, definition] of Object.entries(patches)) {
     if (shouldSkipForNonGit(filePath, isGitRepo2)) continue;
-    const content = readFileSafe(nodePath7.join(cwd, filePath)) ?? "";
-    if (!content.includes(definition.marker)) {
-      actions.push({ type: "text-patch", path: filePath, definition });
-    }
+    actions.push({ type: "text-patch", path: filePath, definition });
   }
   return actions;
 }
@@ -536,18 +534,6 @@ function planOwnedFileWrites(files, ctx) {
 function planManagedFileWrites(files, ctx) {
   return planFileWrites(files, ctx, (filePath, c) => exists(nodePath7.join(c.cwd, filePath)));
 }
-function planTextPatchesWithCreation(patches, ctx) {
-  const actions = [];
-  const created = [];
-  for (const [filePath, definition] of Object.entries(patches)) {
-    if (shouldSkipForNonGit(filePath, ctx.isGitRepo)) continue;
-    actions.push({ type: "text-patch", path: filePath, definition });
-    if (definition.createIfMissing && !exists(nodePath7.join(ctx.cwd, filePath))) {
-      created.push(filePath);
-    }
-  }
-  return { actions, created };
-}
 function planExistingDirectoriesRemoval(directories, cwd) {
   const actions = [];
   const removed = [];
@@ -642,9 +628,13 @@ function computeInstallPlan(schema, ctx) {
   for (const [filePath, definition] of Object.entries(schema.jsonMerges)) {
     actions.push({ type: "json-merge", path: filePath, definition });
   }
-  const patches = planTextPatchesWithCreation(schema.textPatches, ctx);
-  actions.push(...patches.actions);
-  wouldCreate.push(...patches.created);
+  const textPatchActions = planTextPatches(schema.textPatches, ctx.isGitRepo);
+  actions.push(...textPatchActions);
+  for (const action of textPatchActions) {
+    if (action.type === "text-patch" && !exists(nodePath7.join(ctx.cwd, action.path))) {
+      wouldCreate.push(action.path);
+    }
+  }
   const packagesToInstall = computePackagesToInstall(
     schema,
     ctx.projectType,
@@ -717,7 +707,7 @@ function computeUpgradePlan(schema, ctx) {
   for (const [filePath, definition] of Object.entries(schema.jsonMerges)) {
     actions.push({ type: "json-merge", path: filePath, definition });
   }
-  actions.push(...planTextPatches(schema.textPatches, ctx.cwd, ctx.isGitRepo));
+  actions.push(...planTextPatches(schema.textPatches, ctx.isGitRepo));
   const packagesToInstall = computePackagesToInstall(
     schema,
     ctx.projectType,
@@ -1464,7 +1454,7 @@ var rustManagedFiles = {
 // src/packs/sql/dialect.ts
 import { existsSync as existsSync6, readFileSync as readFileSync5 } from "fs";
 import nodePath11 from "path";
-import process2 from "process";
+import process3 from "process";
 import YAML2 from "yaml";
 var ADAPTER_TO_DIALECT = {
   postgres: "postgres",
@@ -1560,7 +1550,7 @@ function detectFromProfiles(cwd) {
     const candidates = [
       nodePath11.join(dbtProjectDirectory, "profiles.yml"),
       nodePath11.join(dbtProjectDirectory, "dbt", "profiles.yml"),
-      nodePath11.join(process2.env.HOME ?? "", ".dbt", "profiles.yml")
+      nodePath11.join(process3.env.HOME ?? "", ".dbt", "profiles.yml")
     ];
     for (const profilesPath of candidates) {
       const adapterType = resolveProfileType(profilesPath, profileName);
@@ -1931,6 +1921,9 @@ var HOOKS_DIR = '"$CLAUDE_PROJECT_DIR"/.safeword/hooks';
 function hook(command) {
   return { hooks: [{ type: "command", command }] };
 }
+function asyncHook(command) {
+  return { hooks: [{ type: "command", command, async: true }] };
+}
 function matchedHook(matcher, command) {
   return { matcher, hooks: [{ type: "command", command }] };
 }
@@ -1938,10 +1931,12 @@ var EDIT_TOOLS = "Edit|Write|MultiEdit|NotebookEdit";
 var SETTINGS_HOOKS = {
   SessionStart: [
     hook(`bash ${HOOKS_DIR}/session-bun-check.sh`),
+    hook(`bun ${HOOKS_DIR}/session-auto-upgrade.ts`),
     hook(`bun ${HOOKS_DIR}/session-verify-agents.ts`),
     hook(`bun ${HOOKS_DIR}/session-version.ts`),
     hook(`bun ${HOOKS_DIR}/session-lint-check.ts`),
-    matchedHook("compact", `bun ${HOOKS_DIR}/session-compact-context.ts`)
+    matchedHook("compact", `bun ${HOOKS_DIR}/session-compact-context.ts`),
+    asyncHook(`bun ${HOOKS_DIR}/session-update-check.ts`)
   ],
   UserPromptSubmit: [
     hook(`bun ${HOOKS_DIR}/prompt-timestamp.ts`),
@@ -2497,8 +2492,13 @@ var SAFEWORD_SCHEMA = {
     ".safeword/hooks/lib/lint.ts": { template: "hooks/lib/lint.ts" },
     ".safeword/hooks/lib/quality.ts": { template: "hooks/lib/quality.ts" },
     ".safeword/hooks/lib/quality-state.ts": { template: "hooks/lib/quality-state.ts" },
+    ".safeword/hooks/lib/skill-invocation-log.ts": {
+      template: "hooks/lib/skill-invocation-log.ts"
+    },
     ".safeword/hooks/lib/scenario-format.ts": { template: "hooks/lib/scenario-format.ts" },
     ".safeword/hooks/lib/test-runner.ts": { template: "hooks/lib/test-runner.ts" },
+    ".safeword/hooks/lib/update-cache.ts": { template: "hooks/lib/update-cache.ts" },
+    ".safeword/hooks/lib/version.ts": { template: "hooks/lib/version.ts" },
     // Hooks - TypeScript with Bun runtime
     ".safeword/hooks/session-verify-agents.ts": {
       template: "hooks/session-verify-agents.ts"
@@ -2533,6 +2533,12 @@ var SAFEWORD_SCHEMA = {
     ".safeword/hooks/pre-tool-config-guard.ts": {
       template: "hooks/pre-tool-config-guard.ts"
     },
+    ".safeword/hooks/session-auto-upgrade.ts": {
+      template: "hooks/session-auto-upgrade.ts"
+    },
+    ".safeword/hooks/session-update-check.ts": {
+      template: "hooks/session-update-check.ts"
+    },
     ".safeword/hooks/session-cleanup-quality.ts": {
       template: "hooks/session-cleanup-quality.ts"
     },
@@ -2804,8 +2810,7 @@ var SAFEWORD_SCHEMA = {
     "AGENTS.md": {
       operation: "prepend",
       content: AGENTS_MD_LINK,
-      marker: ".safeword/SAFEWORD.md",
-      createIfMissing: true
+      marker: ".safeword/SAFEWORD.md"
     },
     "CLAUDE.md": {
       operation: "prepend",
@@ -2818,9 +2823,27 @@ var SAFEWORD_SCHEMA = {
       // backticks) still trigger prepending the new `@` import block on top.
       // Existing prose lingers harmlessly — agents skim it; only the import
       // is functionally load-bearing.
-      marker: "@./.safeword/SAFEWORD.md",
-      createIfMissing: false
-      // Only patch if exists, don't create (AGENTS.md is primary)
+      marker: "@./.safeword/SAFEWORD.md"
+    },
+    ".gitignore": {
+      operation: "append",
+      content: "\n# Safeword - Local cache and transient state\n.safeword/.update-cache.json\n.safeword-project/quality-state*.json\n",
+      marker: ".safeword/.update-cache.json"
+    }
+  },
+  // Content predicate parity — files that must contain specific strings.
+  // Different from ownedFiles (which requires byte equality between two files):
+  // contracts assert one-way "this file must include these tokens" invariants.
+  // Used by runParity() in src/parity.ts for both release tests and pre-commit
+  // (see ticket 144). Path key = file relative to repo root.
+  contracts: {
+    "packages/cli/templates/hooks/lib/quality.ts": {
+      // Cursor's stop hook imports QUALITY_REVIEW_MESSAGE. The export must exist
+      // or Cursor users get a broken hook. The four marker strings (CONFIDENT,
+      // BLOCKED, Tried:, Need:) define the binary-terminal shape from ticket 143.
+      // Removing any of them would silently regress the prompt back to legacy
+      // free-form review.
+      requires: ["QUALITY_REVIEW_MESSAGE", "CONFIDENT", "BLOCKED", "Tried:", "Need:"]
     }
   },
   // NPM packages to install (JS/TS specific packages from typescript pack)
@@ -3022,4 +3045,4 @@ export {
   detectLanguages2,
   createProjectContext
 };
-//# sourceMappingURL=chunk-VKYVBKM6.js.map
+//# sourceMappingURL=chunk-S6T3OR74.js.map