safeword 0.60.0 → 0.61.0

package/dist/{architecture-32CAOL4P.js → architecture-WFRA4ITA.js}

@@ -3,17 +3,17 @@ import {
   isArchitectureDocumentEnforcementEnabled,
   resolveGeneratedArchitecturePath
 } from "./chunk-HI7ANNQI.js";
-import {
-  error,
-  success,
-  warn
-} from "./chunk-NWCBLTIE.js";
 import {
   exists,
   isDirectory,
   readFileSafe,
   readJson
 } from "./chunk-2KELQTLE.js";
+import {
+  error,
+  success,
+  warn
+} from "./chunk-O2ULQPXW.js";
 
 // src/commands/architecture.ts
 import { execFileSync } from "child_process";
@@ -976,4 +976,4 @@ function architectureCheck(cwd) {
 export {
   architecture
 };
-//# sourceMappingURL=architecture-32CAOL4P.js.map
+//# sourceMappingURL=architecture-WFRA4ITA.js.map

package/dist/{check-PO4TEYZQ.js → check-KHWH36AK.js}

@@ -1,20 +1,20 @@
 import {
   buildIndexConflictListMessage
 } from "./chunk-ZESHX2BU.js";
-import {
-  fetchRegistryLatestVersion,
-  isNewerVersion
-} from "./chunk-LRYWFRPD.js";
 import {
   checkHealth,
   reportHealthSummary
-} from "./chunk-MV7VNFO6.js";
+} from "./chunk-XTGWCHWI.js";
 import "./chunk-HWOJR33A.js";
 import "./chunk-XTLCJKGE.js";
-import "./chunk-UIRPUAPO.js";
+import {
+  fetchRegistryLatestVersion,
+  isNewerVersion
+} from "./chunk-LRYWFRPD.js";
+import "./chunk-GEC7AHRF.js";
 import {
   detectPackageManager
-} from "./chunk-GS3TBFXU.js";
+} from "./chunk-OY7F4YNQ.js";
 import {
   syncTickets
 } from "./chunk-D4UGNHLW.js";
@@ -22,14 +22,14 @@ import "./chunk-NHXVS5FL.js";
 import "./chunk-HI7ANNQI.js";
 import "./chunk-CXGL65PS.js";
 import "./chunk-HSC7TELY.js";
+import "./chunk-2KELQTLE.js";
 import {
   header,
   info,
   keyValue,
   success,
   warn
-} from "./chunk-NWCBLTIE.js";
-import "./chunk-2KELQTLE.js";
+} from "./chunk-O2ULQPXW.js";
 
 // src/commands/check.ts
 import process from "process";
@@ -125,4 +125,4 @@ async function check(options) {
 export {
   check
 };
-//# sourceMappingURL=check-PO4TEYZQ.js.map
+//# sourceMappingURL=check-KHWH36AK.js.map

package/dist/chunk-B6KVKEZA.js

@@ -0,0 +1,65 @@
+// templates/hooks/lib/jsonl-spool.ts
+import { appendFileSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
+import nodePath from "path";
+function* iterateJsonlEntries(text) {
+  for (const line of text.split("\n")) {
+    if (line.trim().length === 0) continue;
+    let value;
+    try {
+      value = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    yield value;
+  }
+}
+function countJsonlRecords(filePath) {
+  try {
+    return readFileSync(filePath, "utf8").split("\n").filter((line) => line.trim().length > 0).length;
+  } catch {
+    return 0;
+  }
+}
+function readJsonlRecords(filePath, parse) {
+  let raw;
+  try {
+    raw = readFileSync(filePath, "utf8");
+  } catch {
+    return [];
+  }
+  const records = [];
+  for (const value of iterateJsonlEntries(raw)) {
+    try {
+      const record = parse(value);
+      if (record !== void 0) records.push(record);
+    } catch {
+    }
+  }
+  return records;
+}
+function appendJsonlRecords(filePath, lines, cap) {
+  try {
+    const room = cap - countJsonlRecords(filePath);
+    if (room <= 0) return;
+    const toWrite = lines.slice(0, room);
+    if (toWrite.length === 0) return;
+    mkdirSync(nodePath.dirname(filePath), { recursive: true });
+    appendFileSync(filePath, `${toWrite.join("\n")}
+`);
+  } catch {
+  }
+}
+function atomicWriteFile(file, contents) {
+  const temporary = `${file}.${process.pid}.tmp`;
+  mkdirSync(nodePath.dirname(file), { recursive: true });
+  writeFileSync(temporary, contents);
+  renameSync(temporary, file);
+}
+
+export {
+  iterateJsonlEntries,
+  readJsonlRecords,
+  appendJsonlRecords,
+  atomicWriteFile
+};
+//# sourceMappingURL=chunk-B6KVKEZA.js.map

package/dist/chunk-B6KVKEZA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../templates/hooks/lib/jsonl-spool.ts"],"sourcesContent":["// Per-session JSONL spool I/O — the shared machinery under the self-report spool\n// (lib/self-report.ts) and the retro draft spool (lib/retro-draft-spool.ts).\n//\n// Both persist sanitized, per-session records to `.safeword/<dir>/<session>.jsonl`\n// and had their own copy of: count non-blank lines, read-and-skip-torn-lines,\n// cap-aware append, and atomic (temp+rename) rewrite. That machinery is\n// correctness-sensitive (torn-tolerance, fail-open, whole-or-nothing writes), so it\n// lives here ONCE. Callers keep what genuinely differs — the subdir, the filename\n// sanitizer, the record schema (parse/serialize), and the cap value — and pass a\n// resolved file path in.\n//\n// Self-contained (node:* only) so the CLI's src/ and the customer-repo hooks can\n// both run it, like the two spools it backs.\n\nimport { appendFileSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';\nimport nodePath from 'node:path';\n\n/**\n * Yield the JSON-parsed value of each non-blank JSONL line in `text`, skipping any\n * blank or torn (unparseable) line — never throws. The single home for the\n * split / skip-blank / parse-or-skip skeleton shared by the spool reader here and\n * the transcript scanners (retro-trigger's counters, retro-extract's digest);\n * callers supply only their per-entry handling.\n */\nexport function* iterateJsonlEntries(text: string): Generator<unknown> {\n  for (const line of text.split('\\n')) {\n    if (line.trim().length === 0) continue;\n    let value: unknown;\n    try {\n      value = JSON.parse(line);\n    } catch {\n      continue; // skip a torn/malformed JSONL line\n    }\n    yield value;\n  }\n}\n\n/** Count non-blank JSONL records in a spool file (0 when absent/unreadable). */\nexport function countJsonlRecords(filePath: string): number {\n  try {\n    return readFileSync(filePath, 'utf8')\n      .split('\\n')\n      .filter(line => line.trim().length > 0).length;\n  } catch {\n    return 0;\n  }\n}\n\n/**\n * Read every JSONL line, JSON.parse it, and map it through `parse` — skipping any\n * blank, torn (unparseable), or rejected (`parse` → undefined) line. Fail-open: a\n * missing or unreadable file yields `[]`, never a throw, so a filing/read path never\n * crashes on a bad spool.\n */\nexport function readJsonlRecords<T>(\n  filePath: string,\n  parse: (value: unknown) => T | undefined,\n): T[] {\n  let raw: string;\n  try {\n    raw = readFileSync(filePath, 'utf8');\n  } catch {\n    return [];\n  }\n  const records: T[] = [];\n  for (const value of iterateJsonlEntries(raw)) {\n    try {\n      const record = parse(value);\n      if (record !== undefined) records.push(record);\n    } catch {\n      // a parse callback that rejects a malformed record is skipped, not fatal\n    }\n  }\n  return records;\n}\n\n/**\n * Append pre-serialized JSONL lines, capped: once the file already holds `cap`\n * records, drop the overflow rather than growing unbounded (bounds a crash-looping\n * or runaway session). BEST-EFFORT — never throws, so a spool-write failure can't\n * break the host path that called it.\n */\nexport function appendJsonlRecords(filePath: string, lines: readonly string[], cap: number): void {\n  try {\n    const room = cap - countJsonlRecords(filePath);\n    if (room <= 0) return;\n    const toWrite = lines.slice(0, room);\n    if (toWrite.length === 0) return;\n    mkdirSync(nodePath.dirname(filePath), { recursive: true });\n    appendFileSync(filePath, `${toWrite.join('\\n')}\\n`);\n  } catch {\n    // Self-observation must never break the host. Swallow.\n  }\n}\n\n/**\n * Write `contents` to `file` atomically: write a pid-unique temp sibling, then\n * rename onto the target, so a concurrent reader sees the whole old or whole new\n * file — never a half-written one. Creates the parent dir. Throws on I/O error;\n * callers that must stay fail-open wrap it in their own try/catch.\n */\nexport function atomicWriteFile(file: string, contents: string): void {\n  const temporary = `${file}.${process.pid}.tmp`;\n  mkdirSync(nodePath.dirname(file), { recursive: true });\n  writeFileSync(temporary, contents);\n  renameSync(temporary, file);\n}\n"],"mappings":";AAcA,SAAS,gBAAgB,WAAW,cAAc,YAAY,qBAAqB;AACnF,OAAO,cAAc;AASd,UAAU,oBAAoB,MAAkC;AACrE,aAAW,QAAQ,KAAK,MAAM,IAAI,GAAG;AACnC,QAAI,KAAK,KAAK,EAAE,WAAW,EAAG;AAC9B,QAAI;AACJ,QAAI;AACF,cAAQ,KAAK,MAAM,IAAI;AAAA,IACzB,QAAQ;AACN;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAGO,SAAS,kBAAkB,UAA0B;AAC1D,MAAI;AACF,WAAO,aAAa,UAAU,MAAM,EACjC,MAAM,IAAI,EACV,OAAO,UAAQ,KAAK,KAAK,EAAE,SAAS,CAAC,EAAE;AAAA,EAC5C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQO,SAAS,iBACd,UACA,OACK;AACL,MAAI;AACJ,MAAI;AACF,UAAM,aAAa,UAAU,MAAM;AAAA,EACrC,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,UAAe,CAAC;AACtB,aAAW,SAAS,oBAAoB,GAAG,GAAG;AAC5C,QAAI;AACF,YAAM,SAAS,MAAM,KAAK;AAC1B,UAAI,WAAW,OAAW,SAAQ,KAAK,MAAM;AAAA,IAC/C,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,mBAAmB,UAAkB,OAA0B,KAAmB;AAChG,MAAI;AACF,UAAM,OAAO,MAAM,kBAAkB,QAAQ;AAC7C,QAAI,QAAQ,EAAG;AACf,UAAM,UAAU,MAAM,MAAM,GAAG,IAAI;AACnC,QAAI,QAAQ,WAAW,EAAG;AAC1B,cAAU,SAAS,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACzD,mBAAe,UAAU,GAAG,QAAQ,KAAK,IAAI,CAAC;AAAA,CAAI;AAAA,EACpD,QAAQ;AAAA,EAER;AACF;AAQO,SAAS,gBAAgB,MAAc,UAAwB;AACpE,QAAM,YAAY,GAAG,IAAI,IAAI,QAAQ,GAAG;AACxC,YAAU,SAAS,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACrD,gBAAc,WAAW,QAAQ;AACjC,aAAW,WAAW,IAAI;AAC5B;","names":[]}

package/dist/{chunk-K7QZ6W2K.js → chunk-C4LNUGHF.js}

@@ -4,20 +4,20 @@ import {
   detectLanguages,
   isGitRepo,
   isPackInstalled
-} from "./chunk-UIRPUAPO.js";
+} from "./chunk-GEC7AHRF.js";
 import {
   SAFEWORD_PEER_DEPENDENCIES
 } from "./chunk-HSC7TELY.js";
+import {
+  exists,
+  readJson
+} from "./chunk-2KELQTLE.js";
 import {
   info,
   listItem,
   success,
   warn
-} from "./chunk-NWCBLTIE.js";
-import {
-  exists,
-  readJson
-} from "./chunk-2KELQTLE.js";
+} from "./chunk-O2ULQPXW.js";
 
 // src/packs/install.ts
 function installPack(packId, cwd) {
@@ -546,4 +546,4 @@ export {
   getEslintPeerMismatchWarning,
   maybeAutoPatchOrNudge
 };
-//# sourceMappingURL=chunk-K7QZ6W2K.js.map
+//# sourceMappingURL=chunk-C4LNUGHF.js.map

package/dist/{chunk-UIRPUAPO.js → chunk-GEC7AHRF.js}

@@ -1,6 +1,6 @@
 import {
   MCP_SERVERS
-} from "./chunk-GS3TBFXU.js";
+} from "./chunk-OY7F4YNQ.js";
 import {
   NAMESPACE_ROOT_LEGACY,
   readConfiguredPath,
@@ -2226,6 +2226,9 @@ function hook(command) {
 function asyncRewakeHook(command) {
   return { hooks: [{ type: "command", command, asyncRewake: true }] };
 }
+function asyncHook(command) {
+  return { hooks: [{ type: "command", command, async: true }] };
+}
 function matchedHook(matcher, command) {
   return { matcher, hooks: [{ type: "command", command }] };
 }
@@ -2252,12 +2255,18 @@ var SETTINGS_HOOKS = {
   ],
   UserPromptSubmit: [
     hook(`bun ${HOOKS_DIR}/prompt-timestamp.ts`),
-    hook(`bun ${HOOKS_DIR}/prompt-questions.ts`)
+    hook(`bun ${HOOKS_DIR}/prompt-questions.ts`),
+    // Cloud-retro filing nudge (BNGK9W): when the async Stop hook spooled unfiled
+    // drafts (REST 401 in cloud), surface one factual line so the agent files them.
+    hook(`bun ${HOOKS_DIR}/prompt-retro-nudge.ts`)
   ],
   Stop: [
     hook(`bun ${HOOKS_DIR}/stop-quality.ts`),
     hook(`bun ${HOOKS_DIR}/stop-reentry.ts`),
-    hook(`bun ${HOOKS_DIR}/stop-self-report.ts`)
+    hook(`bun ${HOOKS_DIR}/stop-self-report.ts`),
+    // Invisible retro (ZFGWS1): async so repeated delta fires never block Stop and
+    // run fully in the background; the inner spawnSync stays sync within that tree.
+    asyncHook(`bun ${HOOKS_DIR}/stop-retro.ts`)
   ],
   PreToolUse: [
     matchedHook("Bash", `bun ${HOOKS_DIR}/pre-tool-dependency-readiness.ts`),
@@ -2934,6 +2943,15 @@ command = 'bun "$(git rev-parse --show-toplevel)/.safeword/hooks/codex/pre-tool-
 timeout = 30
 statusMessage = "Checking safeword PreToolUse gates"
 `;
+var CODEX_STOP_HOOK_PATCH = `
+[[hooks.Stop]]
+
+[[hooks.Stop.hooks]]
+type = "command"
+command = 'bun "$(git rev-parse --show-toplevel)/.safeword/hooks/codex/stop.ts"'
+timeout = 30
+statusMessage = "Checking safeword Stop nudges"
+`;
 var CODEX_POST_TOOL_SKILL_NUDGE_HOOK_PATCH = `
 [[hooks.PostToolUse]]
 matcher = "^(apply_patch|Edit|Write|MultiEdit|NotebookEdit)$"
@@ -3077,6 +3095,9 @@ var SAFEWORD_SCHEMA = {
   preservedDirs: [
     ".safeword-project/learnings",
     ".safeword/logs",
+    // Runtime cloud-filing spool (BNGK9W) — per-session drafts + nudge markers the
+    // retro writes at runtime; user/runtime data the schema does not own.
+    ".safeword/retro-drafts",
     ".safeword-project/tickets",
     ".safeword-project/tickets/completed",
     ".safeword-project/tmp"
@@ -3258,7 +3279,12 @@ var SAFEWORD_SCHEMA = {
       template: "hooks/lib/dependency-readiness.ts"
     },
     ".safeword/hooks/lib/done-gate.ts": { template: "hooks/lib/done-gate.ts" },
+    ".safeword/hooks/lib/jsonl-spool.ts": { template: "hooks/lib/jsonl-spool.ts" },
     ".safeword/hooks/lib/namespace-root.ts": { template: "hooks/lib/namespace-root.ts" },
+    ".safeword/hooks/lib/retro-draft-spool.ts": { template: "hooks/lib/retro-draft-spool.ts" },
+    ".safeword/hooks/lib/retro-extract.ts": { template: "hooks/lib/retro-extract.ts" },
+    ".safeword/hooks/lib/retro-nudge.ts": { template: "hooks/lib/retro-nudge.ts" },
+    ".safeword/hooks/lib/retro-trigger.ts": { template: "hooks/lib/retro-trigger.ts" },
     ".safeword/hooks/lib/self-report.ts": { template: "hooks/lib/self-report.ts" },
     ".safeword/hooks/lib/skill-invocation-log.ts": {
       template: "hooks/lib/skill-invocation-log.ts"
@@ -3329,6 +3355,9 @@ var SAFEWORD_SCHEMA = {
     ".safeword/hooks/prompt-questions.ts": {
       template: "hooks/prompt-questions.ts"
     },
+    ".safeword/hooks/prompt-retro-nudge.ts": {
+      template: "hooks/prompt-retro-nudge.ts"
+    },
     ".safeword/hooks/post-tool-lint.ts": {
       template: "hooks/post-tool-lint.ts"
     },
@@ -3356,6 +3385,9 @@ var SAFEWORD_SCHEMA = {
     ".safeword/hooks/codex/pre-tool-quality-helpers.ts": {
       template: "hooks/codex/pre-tool-quality-helpers.ts"
     },
+    ".safeword/hooks/codex/stop.ts": {
+      template: "hooks/codex/stop.ts"
+    },
     ".safeword/hooks/codex/post-tool-skill-nudge.ts": {
       template: "hooks/codex/post-tool-skill-nudge.ts"
     },
@@ -3382,6 +3414,7 @@ var SAFEWORD_SCHEMA = {
     },
     ".safeword/hooks/stop-quality.ts": { template: "hooks/stop-quality.ts" },
     ".safeword/hooks/stop-reentry.ts": { template: "hooks/stop-reentry.ts" },
+    ".safeword/hooks/stop-retro.ts": { template: "hooks/stop-retro.ts" },
     ".safeword/hooks/stop-self-report.ts": { template: "hooks/stop-self-report.ts" },
     ".safeword/hooks/session-start-reentry.ts": {
       template: "hooks/session-start-reentry.ts"
@@ -3399,6 +3432,9 @@ var SAFEWORD_SCHEMA = {
     ".safeword/guides/self-report-filing.md": {
       template: "guides/self-report-filing.md"
     },
+    ".safeword/guides/retro.md": {
+      template: "guides/retro.md"
+    },
     ".safeword/guides/cold-start-check.md": {
       template: "guides/cold-start-check.md"
     },
@@ -3778,10 +3814,23 @@ ${managedPrettierPaths(ctx).join("\n")}
         unpatchContent: [
           CODEX_SESSION_START_HOOK_PATCH,
           CODEX_LEGACY_CONTEXT_SESSION_START_HOOK_PATCH,
-          CODEX_PRE_TOOL_QUALITY_HOOK_PATCH
+          CODEX_PRE_TOOL_QUALITY_HOOK_PATCH,
+          CODEX_STOP_HOOK_PATCH
         ],
         removeFileIfContentEquals: [CODEX_CONFIG_SCAFFOLD_WITHOUT_HOOKS]
       },
+      // Codex Stop hook retrofit (53DQJZ): add-if-missing, guarded to safeword
+      // scaffolds. Marker is the adapter path so an existing entry suppresses the
+      // append. Uninstall cleanup is owned by the primary patch's unpatchContent.
+      {
+        operation: "append",
+        content: CODEX_STOP_HOOK_PATCH,
+        marker: ".safeword/hooks/codex/stop.ts",
+        applyWhenContentIncludes: [
+          "# Safeword Codex project configuration.",
+          ".safeword/hooks/codex/pre-tool-quality.ts"
+        ]
+      },
       // Migrate existing installs (auto-upgrade-codex follow-up to #433): swap the
       // legacy context-only SessionStart hook for the auto-upgrade dispatcher.
       // Codex runs same-event hooks concurrently with no ordering, so this must
@@ -4166,4 +4215,4 @@ export {
   untrackIgnoredFiles,
   createProjectContext
 };
-//# sourceMappingURL=chunk-UIRPUAPO.js.map
+//# sourceMappingURL=chunk-GEC7AHRF.js.map