safeword 0.48.0 → 0.51.0

package/dist/{check-OFMUQD3Q.js → check-LDCKFJ2Y.js}

@@ -4,15 +4,16 @@ import {
 import {
   checkHealth,
   reportHealthSummary
-} from "./chunk-42IGUF5V.js";
+} from "./chunk-AY7IBNF3.js";
 import {
   syncTickets
-} from "./chunk-2HB6H4G5.js";
+} from "./chunk-JLFYAVLP.js";
 import "./chunk-NHXVS5FL.js";
 import "./chunk-IGULTNHR.js";
 import "./chunk-QLXFPFIC.js";
-import "./chunk-4J3GYDJF.js";
-import "./chunk-54KAYQTY.js";
+import "./chunk-LBAC7N4Y.js";
+import "./chunk-2WUL76K5.js";
+import "./chunk-WE7ZQLCT.js";
 import "./chunk-LODQOJEK.js";
 import "./chunk-HSC7TELY.js";
 import {
@@ -21,7 +22,7 @@ import {
   keyValue,
   success,
   warn
-} from "./chunk-445LAX4Y.js";
+} from "./chunk-MPYFFJBF.js";
 
 // src/commands/check.ts
 import process from "process";
@@ -109,4 +110,4 @@ async function check(options) {
 export {
   check
 };
-//# sourceMappingURL=check-OFMUQD3Q.js.map
+//# sourceMappingURL=check-LDCKFJ2Y.js.map

package/dist/{check-OFMUQD3Q.js.map → check-LDCKFJ2Y.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/commands/check.ts"],"sourcesContent":["/**\n * Check command - Verify project health and configuration\n *\n * The config-health core lives in ../health.ts (shared with the setup/upgrade\n * self-verify, ticket 3293WH). This command adds the standalone-only\n * surfaces: npm update-check, version display, and ticket-index refresh.\n */\n\nimport process from 'node:process';\n\nimport { checkHealth, type HealthStatus, reportHealthSummary } from '../health.js';\nimport { syncTickets } from '../ticket-sync/index.js';\nimport { header, info, keyValue, success, warn } from '../utils/output.js';\nimport { isNewerVersion } from '../utils/version.js';\n\ninterface CheckOptions {\n  offline?: boolean;\n}\n\n/**\n * Check for latest version from npm (with timeout)\n * @param timeout\n */\nasync function checkLatestVersion(timeout = 3000): Promise<string | undefined> {\n  try {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => {\n      controller.abort();\n    }, timeout);\n\n    const response = await fetch('https://registry.npmjs.org/safeword/latest', {\n      signal: controller.signal,\n    });\n\n    clearTimeout(timeoutId);\n\n    if (!response.ok) return undefined;\n\n    const data = (await response.json()) as { version?: string };\n    return data.version ?? undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Check for CLI updates and report status\n * @param health\n */\nasync function reportUpdateStatus(health: HealthStatus): Promise<void> {\n  info('\\nChecking for updates...');\n  const latestVersion = await checkLatestVersion();\n\n  if (!latestVersion) {\n    warn(\"Couldn't check for updates (offline?)\");\n    return;\n  }\n\n  health.latestVersion = latestVersion;\n  health.updateAvailable = isNewerVersion(health.cliVersion, latestVersion);\n\n  if (health.updateAvailable) {\n    warn(`Update available: v${latestVersion}`);\n    info('Run `bunx safeword@latest upgrade` to upgrade');\n  } else {\n    success('CLI is up to date');\n  }\n}\n\n/**\n * Compare project version vs CLI version and report\n * @param health\n */\nfunction reportVersionMismatch(health: HealthStatus): void {\n  if (!health.projectVersion) return;\n\n  if (isNewerVersion(health.cliVersion, health.projectVersion)) {\n    warn(`Project config (v${health.projectVersion}) is newer than CLI (v${health.cliVersion})`);\n    info('Consider upgrading the CLI');\n  } else if (isNewerVersion(health.projectVersion, health.cliVersion)) {\n    info(`\\nUpgrade available for project config`);\n    info(\n      `Run \\`safeword upgrade\\` to update from v${health.projectVersion} to v${health.cliVersion}`,\n    );\n  }\n}\n\n/**\n * Regenerate the ticket discovery index, swallowing any error — index\n * freshness must never block or fail a health check. Reports only when it\n * actually rewrote a file.\n * @param cwd\n */\nfunction regenerateTicketIndex(cwd: string): void {\n  try {\n    const result = syncTickets(cwd);\n    if (result.wrote) {\n      info('Regenerated ticket index (INDEX.md / INDEX-completed.md)');\n    }\n  } catch (error: unknown) {\n    // Best-effort: index freshness must never fail the health check. Surface\n    // under DEBUG, then return — the deliberate swallow point.\n    if (process.env.DEBUG) {\n      console.error('[check] ticket index regen failed:', error);\n    }\n    return;\n  }\n}\n\n/**\n *\n * @param options\n */\nexport async function check(options: CheckOptions): Promise<void> {\n  const cwd = process.cwd();\n\n  header('Safeword Health Check');\n\n  const health = await checkHealth(cwd);\n\n  // Not configured\n  if (!health.configured) {\n    info('Not configured. Run `safeword setup` to initialize.');\n    return;\n  }\n\n  // Keep the ticket discovery index fresh at this checkpoint (best-effort —\n  // never fail the health check on index regen). Ticket 1GGD28.\n  regenerateTicketIndex(cwd);\n\n  // Show versions\n  keyValue('Safeword CLI', `v${health.cliVersion}`);\n  keyValue('Project config', health.projectVersion ? `v${health.projectVersion}` : 'unknown');\n\n  // Check for updates (unless offline)\n  if (options.offline) {\n    info('\\nSkipped update check (offline mode)');\n  } else {\n    await reportUpdateStatus(health);\n  }\n\n  reportVersionMismatch(health);\n  const hasIssues = reportHealthSummary(health);\n\n  if (hasIssues) {\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,OAAO,aAAa;AAepB,eAAe,mBAAmB,UAAU,KAAmC;AAC7E,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM;AACjC,iBAAW,MAAM;AAAA,IACnB,GAAG,OAAO;AAEV,UAAM,WAAW,MAAM,MAAM,8CAA8C;AAAA,MACzE,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,iBAAa,SAAS;AAEtB,QAAI,CAAC,SAAS,GAAI,QAAO;AAEzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,KAAK,WAAW;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAe,mBAAmB,QAAqC;AACrE,OAAK,2BAA2B;AAChC,QAAM,gBAAgB,MAAM,mBAAmB;AAE/C,MAAI,CAAC,eAAe;AAClB,SAAK,uCAAuC;AAC5C;AAAA,EACF;AAEA,SAAO,gBAAgB;AACvB,SAAO,kBAAkB,eAAe,OAAO,YAAY,aAAa;AAExE,MAAI,OAAO,iBAAiB;AAC1B,SAAK,sBAAsB,aAAa,EAAE;AAC1C,SAAK,+CAA+C;AAAA,EACtD,OAAO;AACL,YAAQ,mBAAmB;AAAA,EAC7B;AACF;AAMA,SAAS,sBAAsB,QAA4B;AACzD,MAAI,CAAC,OAAO,eAAgB;AAE5B,MAAI,eAAe,OAAO,YAAY,OAAO,cAAc,GAAG;AAC5D,SAAK,oBAAoB,OAAO,cAAc,yBAAyB,OAAO,UAAU,GAAG;AAC3F,SAAK,4BAA4B;AAAA,EACnC,WAAW,eAAe,OAAO,gBAAgB,OAAO,UAAU,GAAG;AACnE,SAAK;AAAA,qCAAwC;AAC7C;AAAA,MACE,4CAA4C,OAAO,cAAc,QAAQ,OAAO,UAAU;AAAA,IAC5F;AAAA,EACF;AACF;AAQA,SAAS,sBAAsB,KAAmB;AAChD,MAAI;AACF,UAAM,SAAS,YAAY,GAAG;AAC9B,QAAI,OAAO,OAAO;AAChB,WAAK,0DAA0D;AAAA,IACjE;AAAA,EACF,SAAS,OAAgB;AAGvB,QAAI,QAAQ,IAAI,OAAO;AACrB,cAAQ,MAAM,sCAAsC,KAAK;AAAA,IAC3D;AACA;AAAA,EACF;AACF;AAMA,eAAsB,MAAM,SAAsC;AAChE,QAAM,MAAM,QAAQ,IAAI;AAExB,SAAO,uBAAuB;AAE9B,QAAM,SAAS,MAAM,YAAY,GAAG;AAGpC,MAAI,CAAC,OAAO,YAAY;AACtB,SAAK,qDAAqD;AAC1D;AAAA,EACF;AAIA,wBAAsB,GAAG;AAGzB,WAAS,gBAAgB,IAAI,OAAO,UAAU,EAAE;AAChD,WAAS,kBAAkB,OAAO,iBAAiB,IAAI,OAAO,cAAc,KAAK,SAAS;AAG1F,MAAI,QAAQ,SAAS;AACnB,SAAK,uCAAuC;AAAA,EAC9C,OAAO;AACL,UAAM,mBAAmB,MAAM;AAAA,EACjC;AAEA,wBAAsB,MAAM;AAC5B,QAAM,YAAY,oBAAoB,MAAM;AAE5C,MAAI,WAAW;AACb,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}
+{"version":3,"sources":["../src/commands/check.ts"],"sourcesContent":["/**\n * Check command - Verify project health and configuration\n *\n * The config-health core lives in ../health.ts (shared with the setup/upgrade\n * self-verify, ticket 3293WH). This command adds the standalone-only\n * surfaces: npm update-check, version display, and ticket-index refresh.\n */\n\nimport process from 'node:process';\n\nimport { checkHealth, type HealthStatus, reportHealthSummary } from '../health.js';\nimport { syncTickets } from '../ticket-sync/index.js';\nimport { header, info, keyValue, success, warn } from '../utils/output.js';\nimport { isNewerVersion } from '../utils/version.js';\n\ninterface CheckOptions {\n  offline?: boolean;\n}\n\n/**\n * Check for latest version from npm (with timeout)\n * @param timeout\n */\nasync function checkLatestVersion(timeout = 3000): Promise<string | undefined> {\n  try {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => {\n      controller.abort();\n    }, timeout);\n\n    const response = await fetch('https://registry.npmjs.org/safeword/latest', {\n      signal: controller.signal,\n    });\n\n    clearTimeout(timeoutId);\n\n    if (!response.ok) return undefined;\n\n    const data = (await response.json()) as { version?: string };\n    return data.version ?? undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Check for CLI updates and report status\n * @param health\n */\nasync function reportUpdateStatus(health: HealthStatus): Promise<void> {\n  info('\\nChecking for updates...');\n  const latestVersion = await checkLatestVersion();\n\n  if (!latestVersion) {\n    warn(\"Couldn't check for updates (offline?)\");\n    return;\n  }\n\n  health.latestVersion = latestVersion;\n  health.updateAvailable = isNewerVersion(health.cliVersion, latestVersion);\n\n  if (health.updateAvailable) {\n    warn(`Update available: v${latestVersion}`);\n    info('Run `bunx safeword@latest upgrade` to upgrade');\n  } else {\n    success('CLI is up to date');\n  }\n}\n\n/**\n * Compare project version vs CLI version and report\n * @param health\n */\nfunction reportVersionMismatch(health: HealthStatus): void {\n  if (!health.projectVersion) return;\n\n  if (isNewerVersion(health.cliVersion, health.projectVersion)) {\n    warn(`Project config (v${health.projectVersion}) is newer than CLI (v${health.cliVersion})`);\n    info('Consider upgrading the CLI');\n  } else if (isNewerVersion(health.projectVersion, health.cliVersion)) {\n    info(`\\nUpgrade available for project config`);\n    info(\n      `Run \\`safeword upgrade\\` to update from v${health.projectVersion} to v${health.cliVersion}`,\n    );\n  }\n}\n\n/**\n * Regenerate the ticket discovery index, swallowing any error — index\n * freshness must never block or fail a health check. Reports only when it\n * actually rewrote a file.\n * @param cwd\n */\nfunction regenerateTicketIndex(cwd: string): void {\n  try {\n    const result = syncTickets(cwd);\n    if (result.wrote) {\n      info('Regenerated ticket index (INDEX.md / INDEX-completed.md)');\n    }\n  } catch (error: unknown) {\n    // Best-effort: index freshness must never fail the health check. Surface\n    // under DEBUG, then return — the deliberate swallow point.\n    if (process.env.DEBUG) {\n      console.error('[check] ticket index regen failed:', error);\n    }\n    return;\n  }\n}\n\n/**\n *\n * @param options\n */\nexport async function check(options: CheckOptions): Promise<void> {\n  const cwd = process.cwd();\n\n  header('Safeword Health Check');\n\n  const health = await checkHealth(cwd);\n\n  // Not configured\n  if (!health.configured) {\n    info('Not configured. Run `safeword setup` to initialize.');\n    return;\n  }\n\n  // Keep the ticket discovery index fresh at this checkpoint (best-effort —\n  // never fail the health check on index regen). Ticket 1GGD28.\n  regenerateTicketIndex(cwd);\n\n  // Show versions\n  keyValue('Safeword CLI', `v${health.cliVersion}`);\n  keyValue('Project config', health.projectVersion ? `v${health.projectVersion}` : 'unknown');\n\n  // Check for updates (unless offline)\n  if (options.offline) {\n    info('\\nSkipped update check (offline mode)');\n  } else {\n    await reportUpdateStatus(health);\n  }\n\n  reportVersionMismatch(health);\n  const hasIssues = reportHealthSummary(health);\n\n  if (hasIssues) {\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,OAAO,aAAa;AAepB,eAAe,mBAAmB,UAAU,KAAmC;AAC7E,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM;AACjC,iBAAW,MAAM;AAAA,IACnB,GAAG,OAAO;AAEV,UAAM,WAAW,MAAM,MAAM,8CAA8C;AAAA,MACzE,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,iBAAa,SAAS;AAEtB,QAAI,CAAC,SAAS,GAAI,QAAO;AAEzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,KAAK,WAAW;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAe,mBAAmB,QAAqC;AACrE,OAAK,2BAA2B;AAChC,QAAM,gBAAgB,MAAM,mBAAmB;AAE/C,MAAI,CAAC,eAAe;AAClB,SAAK,uCAAuC;AAC5C;AAAA,EACF;AAEA,SAAO,gBAAgB;AACvB,SAAO,kBAAkB,eAAe,OAAO,YAAY,aAAa;AAExE,MAAI,OAAO,iBAAiB;AAC1B,SAAK,sBAAsB,aAAa,EAAE;AAC1C,SAAK,+CAA+C;AAAA,EACtD,OAAO;AACL,YAAQ,mBAAmB;AAAA,EAC7B;AACF;AAMA,SAAS,sBAAsB,QAA4B;AACzD,MAAI,CAAC,OAAO,eAAgB;AAE5B,MAAI,eAAe,OAAO,YAAY,OAAO,cAAc,GAAG;AAC5D,SAAK,oBAAoB,OAAO,cAAc,yBAAyB,OAAO,UAAU,GAAG;AAC3F,SAAK,4BAA4B;AAAA,EACnC,WAAW,eAAe,OAAO,gBAAgB,OAAO,UAAU,GAAG;AACnE,SAAK;AAAA,qCAAwC;AAC7C;AAAA,MACE,4CAA4C,OAAO,cAAc,QAAQ,OAAO,UAAU;AAAA,IAC5F;AAAA,EACF;AACF;AAQA,SAAS,sBAAsB,KAAmB;AAChD,MAAI;AACF,UAAM,SAAS,YAAY,GAAG;AAC9B,QAAI,OAAO,OAAO;AAChB,WAAK,0DAA0D;AAAA,IACjE;AAAA,EACF,SAAS,OAAgB;AAGvB,QAAI,QAAQ,IAAI,OAAO;AACrB,cAAQ,MAAM,sCAAsC,KAAK;AAAA,IAC3D;AACA;AAAA,EACF;AACF;AAMA,eAAsB,MAAM,SAAsC;AAChE,QAAM,MAAM,QAAQ,IAAI;AAExB,SAAO,uBAAuB;AAE9B,QAAM,SAAS,MAAM,YAAY,GAAG;AAGpC,MAAI,CAAC,OAAO,YAAY;AACtB,SAAK,qDAAqD;AAC1D;AAAA,EACF;AAIA,wBAAsB,GAAG;AAGzB,WAAS,gBAAgB,IAAI,OAAO,UAAU,EAAE;AAChD,WAAS,kBAAkB,OAAO,iBAAiB,IAAI,OAAO,cAAc,KAAK,SAAS;AAG1F,MAAI,QAAQ,SAAS;AACnB,SAAK,uCAAuC;AAAA,EAC9C,OAAO;AACL,UAAM,mBAAmB,MAAM;AAAA,EACjC;AAEA,wBAAsB,MAAM;AAC5B,QAAM,YAAY,oBAAoB,MAAM;AAE5C,MAAI,WAAW;AACb,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}

package/dist/{chunk-54KAYQTY.js → chunk-2WUL76K5.js}

@@ -1,7 +1,7 @@
 import {
   isDirectory,
   readFileSafe
-} from "./chunk-445LAX4Y.js";
+} from "./chunk-MPYFFJBF.js";
 
 // src/utils/configured-paths.ts
 import nodePath from "path";
@@ -117,4 +117,4 @@ export {
   defaultConfiguredPath,
   resolveConfiguredPath
 };
-//# sourceMappingURL=chunk-54KAYQTY.js.map
+//# sourceMappingURL=chunk-2WUL76K5.js.map

package/dist/{chunk-42IGUF5V.js → chunk-AY7IBNF3.js}

@@ -2,7 +2,7 @@ import {
   findDanglingDependencies,
   findTicketsInCycles,
   readTickets
-} from "./chunk-2HB6H4G5.js";
+} from "./chunk-JLFYAVLP.js";
 import {
   formatTicketReference
 } from "./chunk-NHXVS5FL.js";
@@ -22,14 +22,14 @@ import {
   createProjectContext,
   getMissingPacks,
   reconcile
-} from "./chunk-4J3GYDJF.js";
+} from "./chunk-LBAC7N4Y.js";
 import {
   defaultConfiguredPath,
   readConfiguredDocumentationSources,
   readConfiguredPath,
   resolveConfiguredPath,
   resolveTicketsDirectory
-} from "./chunk-54KAYQTY.js";
+} from "./chunk-2WUL76K5.js";
 import {
   VERSION
 } from "./chunk-HSC7TELY.js";
@@ -42,7 +42,7 @@ import {
   readFileSafe,
   success,
   warn
-} from "./chunk-445LAX4Y.js";
+} from "./chunk-MPYFFJBF.js";
 
 // src/health.ts
 import { readdirSync as readdirSync2 } from "fs";
@@ -698,4 +698,4 @@ export {
   checkHealth,
   reportHealthSummary
 };
-//# sourceMappingURL=chunk-42IGUF5V.js.map
+//# sourceMappingURL=chunk-AY7IBNF3.js.map

package/dist/{chunk-UMPMYZ4F.js → chunk-GX7OYXXG.js}

@@ -3,7 +3,7 @@ import {
   addInstalledPack,
   isGitRepo,
   isPackInstalled
-} from "./chunk-4J3GYDJF.js";
+} from "./chunk-LBAC7N4Y.js";
 import {
   SAFEWORD_PEER_DEPENDENCIES
 } from "./chunk-HSC7TELY.js";
@@ -13,7 +13,7 @@ import {
   listItem,
   readJson,
   warn
-} from "./chunk-445LAX4Y.js";
+} from "./chunk-MPYFFJBF.js";
 
 // src/packs/install.ts
 function installPack(packId, cwd) {
@@ -390,4 +390,4 @@ export {
   getEslintPeerMismatchWarning,
   maybeAutoPatchOrNudge
 };
-//# sourceMappingURL=chunk-UMPMYZ4F.js.map
+//# sourceMappingURL=chunk-GX7OYXXG.js.map

package/dist/{chunk-2HB6H4G5.js → chunk-JLFYAVLP.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-NHXVS5FL.js";
 import {
   resolveTicketsDirectory
-} from "./chunk-54KAYQTY.js";
+} from "./chunk-2WUL76K5.js";
 
 // src/ticket-sync/index.ts
 import { existsSync, readdirSync, readFileSync, writeFileSync } from "fs";
@@ -244,4 +244,4 @@ export {
   readTickets,
   syncTickets
 };
-//# sourceMappingURL=chunk-2HB6H4G5.js.map
+//# sourceMappingURL=chunk-JLFYAVLP.js.map

package/dist/{chunk-4J3GYDJF.js → chunk-LBAC7N4Y.js}

@@ -2,7 +2,10 @@ import {
   NAMESPACE_ROOT_LEGACY,
   readConfiguredPath,
   resolveNamespaceRoot
-} from "./chunk-54KAYQTY.js";
+} from "./chunk-2WUL76K5.js";
+import {
+  MCP_SERVERS
+} from "./chunk-WE7ZQLCT.js";
 import {
   detect
 } from "./chunk-LODQOJEK.js";
@@ -15,19 +18,15 @@ import {
   existsInTree,
   findInTree,
   getTemplatesDirectory,
-  info,
-  listItem,
   makeScriptsExecutable,
   readFile,
   readFileSafe,
   readJson,
   remove,
   removeIfEmpty,
-  success,
-  warn,
   writeFile,
   writeJson
-} from "./chunk-445LAX4Y.js";
+} from "./chunk-MPYFFJBF.js";
 
 // src/packs/config.ts
 import nodePath from "path";
@@ -496,8 +495,8 @@ function getConditionalPackages(conditionalPackages, projectType) {
   }
   return packages;
 }
-function shouldSkipForNonGit(path2, isGitRepo2) {
-  return path2.startsWith(HUSKY_DIR) && !isGitRepo2;
+function shouldSkipForNonGit(path, isGitRepo2) {
+  return path.startsWith(HUSKY_DIR) && !isGitRepo2;
 }
 function planMissingDirectories(directories, cwd, isGitRepo2) {
   const actions = [];
@@ -607,19 +606,19 @@ function withResolvedNamespaceRoot(schema, ctx) {
   const root = ctx.namespaceRoot ?? resolveNamespaceRoot(ctx.cwd);
   const label = nodePath7.relative(ctx.cwd, root) || ".";
   if (label === NAMESPACE_ROOT_LEGACY) return schema;
-  const translate = (path2) => {
-    if (path2 !== NAMESPACE_ROOT_LEGACY && !path2.startsWith(`${NAMESPACE_ROOT_LEGACY}/`)) {
-      return path2;
+  const translate = (path) => {
+    if (path !== NAMESPACE_ROOT_LEGACY && !path.startsWith(`${NAMESPACE_ROOT_LEGACY}/`)) {
+      return path;
     }
-    const subpath = path2.slice(NAMESPACE_ROOT_LEGACY.length).replace(/^\//, "");
+    const subpath = path.slice(NAMESPACE_ROOT_LEGACY.length).replace(/^\//, "");
     return label === "." ? subpath || "." : nodePath7.join(label, subpath);
   };
   return {
     ...schema,
-    preservedDirs: schema.preservedDirs.map((path2) => translate(path2)),
+    preservedDirs: schema.preservedDirs.map((path) => translate(path)),
     managedFiles: Object.fromEntries(
-      Object.entries(schema.managedFiles).map(([path2, definition]) => [
-        translate(path2),
+      Object.entries(schema.managedFiles).map(([path, definition]) => [
+        translate(path),
         definition
       ])
     )
@@ -849,13 +848,13 @@ function executePlan(plan, ctx) {
   return result;
 }
 function executeChmod(cwd, paths) {
-  for (const path2 of paths) {
-    const fullPath = nodePath7.join(cwd, path2);
+  for (const path of paths) {
+    const fullPath = nodePath7.join(cwd, path);
     if (exists(fullPath)) makeScriptsExecutable(fullPath);
   }
 }
-function executeRmdir(cwd, path2, result) {
-  if (removeIfEmpty(nodePath7.join(cwd, path2))) result.removed.push(path2);
+function executeRmdir(cwd, path, result) {
+  if (removeIfEmpty(nodePath7.join(cwd, path))) result.removed.push(path);
 }
 function executeAction(action, ctx, result) {
   switch (action.type) {
@@ -899,11 +898,11 @@ function executeAction(action, ctx, result) {
     }
   }
 }
-function executeWrite(cwd, path2, content, result) {
-  const fullPath = nodePath7.join(cwd, path2);
+function executeWrite(cwd, path, content, result) {
+  const fullPath = nodePath7.join(cwd, path);
   const existed = exists(fullPath);
   writeFile(fullPath, content);
-  (existed ? result.updated : result.created).push(path2);
+  (existed ? result.updated : result.created).push(path);
 }
 function resolveFileContent(definition, ctx) {
   if (definition.template) {
@@ -945,8 +944,8 @@ function stripVersionSpecifier(pkg) {
   const atIndex = pkg.startsWith("@") ? pkg.indexOf("@", 1) : pkg.indexOf("@");
   return atIndex === -1 ? pkg : pkg.slice(0, atIndex);
 }
-function executeJsonMerge(cwd, path2, definition, ctx) {
-  const fullPath = nodePath7.join(cwd, path2);
+function executeJsonMerge(cwd, path, definition, ctx) {
+  const fullPath = nodePath7.join(cwd, path);
   const rawExisting = readJson(fullPath);
   if (!rawExisting && definition.skipIfMissing) return;
   const existing = rawExisting ?? {};
@@ -954,8 +953,8 @@ function executeJsonMerge(cwd, path2, definition, ctx) {
   if (JSON.stringify(existing) === JSON.stringify(merged)) return;
   writeJson(fullPath, merged);
 }
-function executeJsonUnmerge(cwd, path2, definition, ctx) {
-  const fullPath = nodePath7.join(cwd, path2);
+function executeJsonUnmerge(cwd, path, definition, ctx) {
+  const fullPath = nodePath7.join(cwd, path);
   if (!exists(fullPath)) return;
   const existing = readJson(fullPath);
   if (!existing) return;
@@ -969,8 +968,8 @@ function executeJsonUnmerge(cwd, path2, definition, ctx) {
   }
   writeJson(fullPath, unmerged);
 }
-function executeTextPatch(cwd, path2, definition) {
-  const fullPath = nodePath7.join(cwd, path2);
+function executeTextPatch(cwd, path, definition) {
+  const fullPath = nodePath7.join(cwd, path);
   let content = readFileSafe(fullPath) ?? "";
   if (content.includes(definition.marker)) {
     if (content.includes("\n\n---#")) {
@@ -982,8 +981,8 @@ function executeTextPatch(cwd, path2, definition) {
   content = definition.operation === "prepend" ? definition.content + content : content + definition.content;
   writeFile(fullPath, content);
 }
-function executeTextUnpatch(cwd, path2, definition) {
-  const fullPath = nodePath7.join(cwd, path2);
+function executeTextUnpatch(cwd, path, definition) {
+  const fullPath = nodePath7.join(cwd, path);
   const content = readFileSafe(fullPath);
   if (!content) return;
   let unpatched = removeExactTextPatchContent(content, definition);
@@ -1022,58 +1021,6 @@ function shouldRemoveTextPatchTarget(content, definition) {
   return definition.removeFileIfContentEquals?.some((candidate) => trimmed === candidate.trim()) ?? false;
 }
 
-// src/utils/install.ts
-import { execFileSync } from "child_process";
-import { existsSync as existsSync3 } from "fs";
-import path from "path";
-var DEV_FLAG = "-D";
-var PM_COMMANDS = {
-  npm: { install: "install", uninstall: "uninstall" },
-  yarn: { install: "add", uninstall: "remove" },
-  pnpm: { install: "add", uninstall: "remove" },
-  bun: { install: "add", uninstall: "remove" }
-};
-function detectPackageManager(cwd) {
-  if (existsSync3(path.join(cwd, "bun.lockb")) || existsSync3(path.join(cwd, "bun.lock")))
-    return "bun";
-  if (existsSync3(path.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync3(path.join(cwd, "yarn.lock"))) return "yarn";
-  if (existsSync3(path.join(cwd, "package-lock.json"))) return "npm";
-  if (process.versions.bun) return "bun";
-  return "npm";
-}
-function getUninstallCommand(pm, packages) {
-  const { uninstall } = PM_COMMANDS[pm];
-  return `${pm} ${uninstall} ${packages.join(" ")}`;
-}
-function installDependencies(cwd, packages, label = "packages") {
-  if (packages.length === 0) return;
-  if (process.env.SAFEWORD_SKIP_INSTALL) return;
-  const pm = detectPackageManager(cwd);
-  const { install } = PM_COMMANDS[pm];
-  const displayCommand = `${pm} ${install} ${DEV_FLAG} ${packages.join(" ")}`;
-  info(`
-Installing ${label}...`);
-  info(`Running: ${displayCommand}`);
-  try {
-    execFileSync(pm, [install, DEV_FLAG, ...packages], { cwd, stdio: "pipe", timeout: 12e4 });
-    success(`Installed ${label}`);
-  } catch {
-    warn(`Failed to install ${label}. Run manually:`);
-    listItem(displayCommand);
-  }
-}
-var MCP_SERVERS = {
-  context7: {
-    command: "bunx",
-    args: ["@upstash/context7-mcp@latest"]
-  },
-  playwright: {
-    command: "bunx",
-    args: ["@playwright/mcp@latest"]
-  }
-};
-
 // src/packs/golang/files.ts
 import { readFileSync as readFileSync2 } from "fs";
 import nodePath8 from "path";
@@ -1281,11 +1228,11 @@ var golangManagedFiles = {
 };
 
 // src/packs/python/files.ts
-import { existsSync as existsSync4, readFileSync as readFileSync3 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
 import nodePath9 from "path";
 function hasLegacyCustomerRuffExtend(cwd) {
   const ruffPath = nodePath9.join(cwd, "ruff.toml");
-  if (!existsSync4(ruffPath)) return false;
+  if (!existsSync3(ruffPath)) return false;
   try {
     const content = readFileSync3(ruffPath, "utf8");
     return content.includes('extend = ".safeword/ruff.toml"');
@@ -1446,7 +1393,7 @@ var pythonManagedFiles = {
 };
 
 // src/packs/rust/files.ts
-import { existsSync as existsSync5, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
 import nodePath10 from "path";
 var SAFEWORD_CLIPPY_THRESHOLDS = {
   "cognitive-complexity-threshold": 10,
@@ -1471,7 +1418,7 @@ ${generateClippyThresholds()}
 `;
   }
   const configPath = nodePath10.join(cwd, existingConfig);
-  if (!existsSync5(configPath)) {
+  if (!existsSync4(configPath)) {
     return `# Safeword clippy config - standalone (no project config to merge)
 # Used by hooks for LLM enforcement.
 
@@ -1546,7 +1493,7 @@ var rustManagedFiles = {
 };
 
 // src/packs/sql/dialect.ts
-import { existsSync as existsSync6, readFileSync as readFileSync5 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync5 } from "fs";
 import nodePath11 from "path";
 import process3 from "process";
 import YAML2 from "yaml";
@@ -1619,7 +1566,7 @@ function detectSqlDialect(cwd) {
   return detectFromProfiles(cwd) ?? detectFromPythonDeps(cwd) ?? detectFromSqlcConfig(cwd) ?? detectFromPrismaSchema(cwd) ?? detectFromDrizzleConfig(cwd) ?? detectFromDatabaseUrl(cwd);
 }
 function resolveProfileType(profilesPath, profileName) {
-  if (!existsSync6(profilesPath)) return void 0;
+  if (!existsSync5(profilesPath)) return void 0;
   const content = readFileSync5(profilesPath, "utf8");
   const profiles = YAML2.parse(content, { schema: "failsafe" });
   const profile = profiles[profileName];
@@ -1662,9 +1609,9 @@ function detectFromPythonDeps(cwd) {
   const pyprojectPath = nodePath11.join(directory, "pyproject.toml");
   try {
     let content;
-    if (existsSync6(requirementsPath)) {
+    if (existsSync5(requirementsPath)) {
       content = readFileSync5(requirementsPath, "utf8");
-    } else if (existsSync6(pyprojectPath)) {
+    } else if (existsSync5(pyprojectPath)) {
       content = readFileSync5(pyprojectPath, "utf8");
     }
     if (!content) return void 0;
@@ -1694,7 +1641,7 @@ function detectFromSqlcConfig(cwd) {
 }
 function detectFromPrismaSchema(cwd) {
   const schemaPath = nodePath11.join(cwd, "prisma", "schema.prisma");
-  if (!existsSync6(schemaPath)) return void 0;
+  if (!existsSync5(schemaPath)) return void 0;
   try {
     const content = readFileSync5(schemaPath, "utf8");
     const match = /provider\s*=\s*"(\w+)"/.exec(content);
@@ -1707,7 +1654,7 @@ function detectFromPrismaSchema(cwd) {
 function detectFromDrizzleConfig(cwd) {
   for (const filename of ["drizzle.config.ts", "drizzle.config.js", "drizzle.config.mjs"]) {
     const filePath = nodePath11.join(cwd, filename);
-    if (!existsSync6(filePath)) continue;
+    if (!existsSync5(filePath)) continue;
     try {
       const content = readFileSync5(filePath, "utf8");
       const match = /dialect\s*:\s*["'](\w+)["']/.exec(content);
@@ -1720,7 +1667,7 @@ function detectFromDrizzleConfig(cwd) {
 }
 function detectFromDatabaseUrl(cwd) {
   const envPath = nodePath11.join(cwd, ".env");
-  if (!existsSync6(envPath)) return void 0;
+  if (!existsSync5(envPath)) return void 0;
   try {
     const content = readFileSync5(envPath, "utf8");
     const match = /DATABASE_URL\s*=\s*["']?(\w+):/.exec(content);
@@ -2229,7 +2176,7 @@ var typescriptManagedFiles = {
   // Knip config for dead code detection (used by /audit)
   // Plugins auto-enable based on deps, we just configure ignore patterns
   "knip.json": {
-    generator: (ctx) => ctx.languages?.javascript ? JSON.stringify(getKnipConfig(ctx), void 0, 2) : void 0
+    generator: (ctx) => ctx.projectType?.hasJsSource ? JSON.stringify(getKnipConfig(ctx), void 0, 2) : void 0
   },
   // Project-level Prettier config (created only if no existing formatter)
   ".prettierrc": {
@@ -2266,7 +2213,6 @@ var typescriptJsonMerges = {
       "scripts.lint:gherkin",
       "scripts.format",
       "scripts.format:check",
-      "scripts.knip",
       "scripts.test:bdd"
     ],
     skipIfMissing: true,
@@ -2275,14 +2221,16 @@ var typescriptJsonMerges = {
       existingLinter: ["scripts.lint:eslint"],
       // Projects with existing linter get separate ESLint script
       publishableLibrary: ["scripts.publint"],
-      shell: ["scripts.lint:sh"]
+      shell: ["scripts.lint:sh"],
+      hasJsSource: ["scripts.knip"]
+      // knip script only added for repos with real JS source (BE7C7B)
     },
     merge: (existing, ctx) => {
       const scripts = { ...existing.scripts };
       const result = { ...existing };
       mergeLintScripts(scripts, ctx.projectType);
       mergeFormatScripts(scripts, ctx.projectType);
-      addScriptIfMissing(scripts, "knip", "knip");
+      if (ctx.projectType.hasJsSource) addScriptIfMissing(scripts, "knip", "knip");
       addScriptIfMissing(scripts, "test:bdd", "cucumber-js");
       if (ctx.projectType.publishableLibrary) {
         addScriptIfMissing(scripts, "publint", "publint");
@@ -2364,13 +2312,10 @@ var typescriptJsonMerges = {
 var ESLINT_PACKAGE = "eslint@^9.22.0";
 var typescriptPackages = {
   base: [
-    // Core tools (always needed for JS/TS)
+    // Core tools (always needed for JS/TS — eslint/prettier also lint the BDD lane's .ts step files)
     ESLINT_PACKAGE,
     // Safeword (bundles eslint-config-prettier + all ESLint plugins)
     "safeword",
-    // Architecture and dead code tools (used by /audit)
-    "dependency-cruiser",
-    "knip",
     // BDD acceptance lane (ticket 102b) — cucumber-js runs the scaffolded
     // .feature files; tsx transpiles the TypeScript step definitions, and
     // @types/node lets the scaffolded steps (node: imports) pass typechecks.
@@ -2391,7 +2336,11 @@ var typescriptPackages = {
     shellcheck: ["shellcheck"],
     // Renamed from shell to avoid conflict with prettier-plugin-sh
     // Legacy ESLint config compat (needed when extending .eslintrc.* configs)
-    legacyEslint: ["@eslint/eslintrc"]
+    legacyEslint: ["@eslint/eslintrc"],
+    // Architecture + dead-code tools (used by /audit) — these scan JS APPLICATION
+    // code/deps, so only for repos with real JS source, not a non-JS repo carrying
+    // just the TS BDD lane (BE7C7B).
+    hasJsSource: ["dependency-cruiser", "knip"]
   }
 };
 
@@ -2404,9 +2353,9 @@ function computeSafewordPathPrefixes(schema) {
     ...Object.keys(schema.textPatches)
   ];
   const prefixes = /* @__PURE__ */ new Set();
-  for (const path2 of allPaths) {
-    const slashIndex = path2.indexOf("/");
-    prefixes.add(slashIndex === -1 ? path2 : path2.slice(0, slashIndex + 1));
+  for (const path of allPaths) {
+    const slashIndex = path.indexOf("/");
+    prefixes.add(slashIndex === -1 ? path : path.slice(0, slashIndex + 1));
   }
   return [...prefixes].toSorted((a, b) => a.localeCompare(b));
 }
@@ -3333,7 +3282,7 @@ ${SAFEWORD_TRANSIENT_PATHS.join("\n")}
 };
 
 // src/utils/git.ts
-import { execFileSync as execFileSync2 } from "child_process";
+import { execFileSync } from "child_process";
 import nodePath12 from "path";
 function isGitRepo(cwd) {
   return exists(nodePath12.join(cwd, ".git"));
@@ -3342,7 +3291,7 @@ function untrackIgnoredFiles(cwd, paths) {
   if (!isGitRepo(cwd)) return;
   for (const pattern of paths) {
     try {
-      execFileSync2("git", ["rm", "--cached", "--ignore-unmatch", "--", pattern], {
+      execFileSync("git", ["rm", "--cached", "--ignore-unmatch", "--", pattern], {
         cwd,
         stdio: "pipe"
       });
@@ -3355,7 +3304,7 @@ function untrackIgnoredFiles(cwd, paths) {
 import nodePath14 from "path";
 
 // src/utils/project-detector.ts
-import { existsSync as existsSync7, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync6, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "fs";
 import nodePath13 from "path";
 var {
   TAILWIND_PACKAGES,
@@ -3416,15 +3365,15 @@ function hasShellScripts(cwd, maxDepth = 4) {
   return scan(cwd, 0);
 }
 function findFirstExisting(cwd, candidates) {
-  return candidates.find((file) => existsSync7(nodePath13.join(cwd, file)));
+  return candidates.find((file) => existsSync6(nodePath13.join(cwd, file)));
 }
 function findExistingEslintConfig(cwd) {
   return findFirstExisting(cwd, ESLINT_CONFIG_FILES);
 }
 function findExistingRuffConfig(cwd) {
-  if (existsSync7(nodePath13.join(cwd, "ruff.toml"))) return "ruff.toml";
+  if (existsSync6(nodePath13.join(cwd, "ruff.toml"))) return "ruff.toml";
   const pyprojectPath = nodePath13.join(cwd, PYPROJECT_TOML);
-  if (!existsSync7(pyprojectPath)) return void 0;
+  if (!existsSync6(pyprojectPath)) return void 0;
   try {
     const content = readFileSync6(pyprojectPath, "utf8");
     return content.includes("[tool.ruff]") ? "pyproject.toml" : void 0;
@@ -3433,10 +3382,10 @@ function findExistingRuffConfig(cwd) {
   }
 }
 function hasExistingMypyConfig(cwd) {
-  if (existsSync7(nodePath13.join(cwd, "mypy.ini"))) return true;
-  if (existsSync7(nodePath13.join(cwd, ".mypy.ini"))) return true;
+  if (existsSync6(nodePath13.join(cwd, "mypy.ini"))) return true;
+  if (existsSync6(nodePath13.join(cwd, ".mypy.ini"))) return true;
   const pyprojectPath = nodePath13.join(cwd, PYPROJECT_TOML);
-  if (!existsSync7(pyprojectPath)) return false;
+  if (!existsSync6(pyprojectPath)) return false;
   try {
     const content = readFileSync6(pyprojectPath, "utf8");
     return content.includes("[tool.mypy]");
@@ -3445,9 +3394,9 @@ function hasExistingMypyConfig(cwd) {
   }
 }
 function hasExistingImportLinterConfig(cwd) {
-  if (existsSync7(nodePath13.join(cwd, ".importlinter"))) return true;
+  if (existsSync6(nodePath13.join(cwd, ".importlinter"))) return true;
   const pyprojectPath = nodePath13.join(cwd, PYPROJECT_TOML);
-  if (!existsSync7(pyprojectPath)) return false;
+  if (!existsSync6(pyprojectPath)) return false;
   try {
     const content = readFileSync6(pyprojectPath, "utf8");
     return content.includes("[tool.importlinter]");
@@ -3500,6 +3449,57 @@ function detectExistingTooling(cwd, scripts) {
     ...detectSystemsTooling(cwd)
   };
 }
+var JS_SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".ts",
+  ".tsx",
+  ".js",
+  ".jsx",
+  ".mjs",
+  ".cjs",
+  ".mts",
+  ".cts"
+]);
+var JS_SOURCE_DIR_EXCLUDE = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  ".safeword",
+  "dist",
+  "build",
+  "target",
+  "coverage",
+  "vendor"
+]);
+var LANE_DIRS = /* @__PURE__ */ new Set(["steps", "features"]);
+var LANE_FILES = /* @__PURE__ */ new Set(["cucumber.mjs", "eslint.config.mjs", ".prettierrc"]);
+function isExcludedSourceDirectory(name, depth) {
+  if (name.startsWith(".") || JS_SOURCE_DIR_EXCLUDE.has(name)) return true;
+  return depth === 0 && LANE_DIRS.has(name);
+}
+function isJsSourceFile(name, depth) {
+  if (depth === 0 && LANE_FILES.has(name)) return false;
+  return JS_SOURCE_EXTENSIONS.has(nodePath13.extname(name));
+}
+function scanForJsSource(directory, depth, maxDepth) {
+  let entries;
+  try {
+    entries = readdirSync4(directory, { withFileTypes: true });
+  } catch {
+    return false;
+  }
+  for (const entry of entries) {
+    if (entry.isFile()) {
+      if (isJsSourceFile(entry.name, depth)) return true;
+      continue;
+    }
+    if (!entry.isDirectory() || depth >= maxDepth || isExcludedSourceDirectory(entry.name, depth))
+      continue;
+    if (scanForJsSource(nodePath13.join(directory, entry.name), depth + 1, maxDepth)) return true;
+  }
+  return false;
+}
+function hasJsSource(cwd, maxDepth = 6) {
+  return scanForJsSource(cwd, 0, maxDepth);
+}
 function detectProjectType(packageJson, cwd) {
   const deps = packageJson.dependencies ?? {};
   const developmentDeps = packageJson.devDependencies ?? {};
@@ -3509,6 +3509,7 @@ function detectProjectType(packageJson, cwd) {
     ...detectFrameworks(deps, developmentDeps, allDeps),
     publishableLibrary: detectPublishable(packageJson),
     shell: cwd ? hasShellScripts(cwd) : false,
+    hasJsSource: cwd ? hasJsSource(cwd) : false,
     ...detectExistingTooling(cwd, scripts)
   };
 }
@@ -3542,13 +3543,10 @@ export {
   getMissingPacks,
   getWorkspacePatterns,
   reconcile,
-  detectPackageManager,
-  getUninstallCommand,
-  installDependencies,
   SAFEWORD_TRANSIENT_PATHS,
   SAFEWORD_SCHEMA,
   isGitRepo,
   untrackIgnoredFiles,
   createProjectContext
 };
-//# sourceMappingURL=chunk-4J3GYDJF.js.map
+//# sourceMappingURL=chunk-LBAC7N4Y.js.map