safeword 0.72.0 → 0.73.0

package/codex-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "safeword",
-  "version": "0.72.0",
+  "version": "0.73.0",
   "description": "Safe Word workflow guidance and gates for Codex.",
   "author": {
     "name": "Arcade AI"

package/codex-plugin/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.72.0 hook codex session-start --plugin-hook",
+            "command": "bunx --bun safeword@0.73.0 hook codex session-start --plugin-hook",
             "timeout": 120,
             "statusMessage": "Loading Safe Word standing instructions"
           }
@@ -19,7 +19,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.72.0 hook codex pre-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.73.0 hook codex pre-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking Safe Word edit gates"
           }
@@ -32,7 +32,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.72.0 hook codex post-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.73.0 hook codex post-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Surfacing Safe Word post-tool context"
           }
@@ -45,7 +45,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.72.0 hook codex user-prompt-submit --plugin-hook",
+            "command": "bunx --bun safeword@0.73.0 hook codex user-prompt-submit --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking queued Safe Word prompt context"
           }
@@ -58,7 +58,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.72.0 hook codex stop --plugin-hook",
+            "command": "bunx --bun safeword@0.73.0 hook codex stop --plugin-hook",
             "timeout": 600,
             "statusMessage": "Checking Safe Word stop continuation"
           }

package/codex-plugin/skills/bdd/references/SCENARIOS.md

@@ -18,9 +18,9 @@
 
 Save the dimension table to `dimensions.md` in the ticket folder before writing test-definitions.md (the pre-tool hook enforces this for features). For tiny features with one obvious behavioral dimension and no partitioning to enumerate, dimensions.md may instead be a single line `skip: <non-empty reason>`.
 
-### Scenario saturation
+### Are the scenarios complete?
 
-Each propose-and-converge turn either surfaces new scenarios or doesn't. When a turn produces no new scenarios → proceed to scenario-gate.
+Ask the user: **Do these scenarios fully describe the intended behavior and important boundaries, or is anything missing?** If their feedback adds scenarios, revise the set and ask again. When they confirm nothing is missing, proceed to scenario-gate.
 
 ### Concrete example
 
@@ -55,7 +55,7 @@ Each propose-and-converge turn either surfaces new scenarios or doesn't. When a
 
 **User:** "Looks good, proceed."
 
-**Result:** No new scenarios → scenario saturation → proceed to scenario-gate.
+**Result:** The user confirms the intended behavior and important boundaries are fully described → proceed to scenario-gate.
 
 ### Two formats: discovery vs saved
 
@@ -198,11 +198,11 @@ delivery retries on exponential backoff`). IDs are 1-indexed per job and
 
 **Entry:** Agent enters `scenario-gate` phase.
 
-Run the **`$safeword:review-spec`** skill — it is the gate procedure (vacuous-pass, AODI, determinism risks, adversarial pass + negative-case, cross-cutting checks, and the findings format). It reads the active ticket's `.feature` source when present, using `test-definitions.md` only as the R/G/R ledger, reports findings, and is re-invokable standalone after scenario edits. Apply its findings, then complete the saturation check and exit below.
+Run the **`$safeword:review-spec`** skill — it is the gate procedure (vacuous-pass, AODI, determinism risks, adversarial pass + negative-case, cross-cutting checks, and the findings format). It reads the active ticket's `.feature` source when present, using `test-definitions.md` only as the R/G/R ledger, reports findings, and is re-invokable standalone after scenario edits. Apply its findings, then complete the plain-language completeness check and exit below.
 
-### Coverage saturation
+### Are the reviewed scenarios complete?
 
-If the adversarial pass + user feedback produced new scenarios → loop back to define-behavior. If nothing new surfaced → done.
+Ask the user: **Do these scenarios now fully cover the intended behavior and important boundaries, or is anything still missing?** If the adversarial pass or user feedback produced new scenarios, loop back to define-behavior. When nothing is missing, the quality gate is complete.
 
 ### Scenario Gate Exit
 

package/codex-plugin/skills/closeout/SKILL.md

@@ -27,6 +27,9 @@ Collect and report every blocker. Missing, stale, failing, pending, unknown, or
 ambiguous evidence means **no merge or cleanup**. A merge command's exit status
 never proves that the pull request is merged.
 
+Dependency audit is part of this delivery-time verification boundary. Resolve
+its failures before merge while the pull request head can still be changed.
+
 ## 2. Respect merge authority
 
 Invocation alone grants no merge authority. Read authority only from the current user request;
@@ -63,13 +66,20 @@ complete only after proving it was the exact planned target. If the pull request
 is merged, its retrospective is complete, and its exact branch and worktree are
 already absent, report that the session is already closed.
 
+The guard records a private, atomic verification receipt in Git's shared common
+directory only after every verification lane passes on a clean exact PR head.
+For 24 hours, that receipt can prove the immutable head when an interrupted
+cleanup must resume from a surviving worktree after the topic worktree is gone.
+A missing, stale, malformed, dirty-state, or wrong-head receipt blocks cleanup.
+
 ## 4. Complete the current session's retrospective
 
 After merge is independently confirmed, invoke the cleanup guard in preview
 mode. Its host hook supplies a short-lived, single-consumer binding to this exact
-session (and Cursor transcript). A missing or expired binding fails closed;
-there is no newest-session fallback and callers cannot nominate another receipt,
-session, transcript, or spool.
+session (and Cursor transcript). Codex Desktop may instead supply its authenticated
+current `CODEX_THREAD_ID`, consistent with SafeWord's other Codex identity bridges.
+A missing or expired binding or identity fails closed; there is no newest-session
+fallback and callers cannot nominate another receipt, session, transcript, or spool.
 
 The guard runs `safeword retro run --json` itself and accepts only a
 successful result whose `data.agent_filing_needed` is `false` and whose derived
@@ -89,10 +99,13 @@ Run the guard from the delivery worktree; preview is the default:
 bun .safeword/scripts/closeout-cleanup.ts --pr PR_NUMBER
 ```
 
-The preview reruns the project's verification, build, typecheck, BDD, and
-dependency plans and binds the resulting repository state and exact PR identity
-to `PLAN_DIGEST`. Report the complete operation list and all blockers. Do not
-apply a blocked plan.
+At the exact delivery head, the post-merge preview reruns the project's
+verification, build, typecheck, and BDD plans. It does not rerun dependency audit:
+that changing intelligence is enforced at the delivery-time, pre-merge boundary
+and cannot repair an immutable merged head. After that worktree is gone, preview
+requires its fresh clean-head receipt instead. It binds the resulting repository
+state and exact PR identity to `PLAN_DIGEST`. Report the complete operation list
+and all blockers. Do not apply a blocked plan.
 
 With the user's cleanup intent already established by invoking closeout, apply
 only the unchanged preview:

package/dist/{chunk-PGUVVBIN.js → chunk-7BLT7HXQ.js}

@@ -11,4 +11,4 @@ var CodexMigrationError = class extends Error {
 export {
   CodexMigrationError
 };
-//# sourceMappingURL=chunk-PGUVVBIN.js.map
+//# sourceMappingURL=chunk-7BLT7HXQ.js.map

package/dist/chunk-7BLT7HXQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/codex-plugin/migration-error.ts"],"sourcesContent":["export type CodexMigrationErrorCode =\n  | 'PLUGIN_ENABLEMENT_UNKNOWN'\n  | 'PLUGIN_ENABLEMENT_FAILED'\n  | 'PLUGIN_MARKETPLACE_FAILED'\n  | 'PLUGIN_PROFILE_BUSY'\n  | 'PLUGIN_NEWER_PIN_PRESERVED'\n  | 'AMBIGUOUS_LEGACY_CONFIG'\n  | 'UNSAFE_MIGRATION_PATH'\n  | 'BACKUP_EXISTS'\n  | 'ROLLBACK_FAILED'\n  | 'RECOVERY_CONFLICT'\n  | 'PLAN_STALE'\n  | 'FINALIZATION_PROOF_REQUIRED';\n\nexport class CodexMigrationError extends Error {\n  readonly code: CodexMigrationErrorCode;\n\n  constructor(code: CodexMigrationErrorCode, message: string, options?: ErrorOptions) {\n    super(message, options);\n    this.name = 'CodexMigrationError';\n    this.code = code;\n  }\n}\n"],"mappings":";AAcO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EACpC;AAAA,EAET,YAAY,MAA+B,SAAiB,SAAwB;AAClF,UAAM,SAAS,OAAO;AACtB,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;","names":[]}

package/dist/{chunk-7NZ26QJP.js → chunk-7D2H4IZ5.js}

@@ -1,10 +1,10 @@
 import {
   createProjectContext,
   reconcile
-} from "./chunk-KWBGQ2YZ.js";
+} from "./chunk-HKFPZSXT.js";
 import {
   SAFEWORD_SCHEMA
-} from "./chunk-F4CA33GP.js";
+} from "./chunk-IWU7G6G7.js";
 import {
   createPlan
 } from "./chunk-RLH5PLSD.js";
@@ -99,4 +99,4 @@ export {
   createReconciliationPlan,
   applyReconciliation
 };
-//# sourceMappingURL=chunk-7NZ26QJP.js.map
+//# sourceMappingURL=chunk-7D2H4IZ5.js.map

package/dist/chunk-FTCNAEAL.js

@@ -0,0 +1,117 @@
+// src/utils/version.ts
+function onlyAsciiDigits(value) {
+  if (value.length === 0) return false;
+  for (const character of value) {
+    if (character < "0" || character > "9") return false;
+  }
+  return true;
+}
+function validSemverIdentifier(value) {
+  if (value.length === 0) return false;
+  for (const character of value) {
+    const valid = character >= "0" && character <= "9" || character >= "A" && character <= "Z" || character >= "a" && character <= "z" || character === "-";
+    if (!valid) return false;
+  }
+  return true;
+}
+function validSemverIdentifiers(value) {
+  return value.split(".").every((identifier) => validSemverIdentifier(identifier));
+}
+function hasForbiddenLeadingZero(value) {
+  return value.length > 1 && value.startsWith("0");
+}
+function parseCore(value) {
+  const parts = value.split(".");
+  if (parts.length !== 3 || parts.some((part) => !onlyAsciiDigits(part) || hasForbiddenLeadingZero(part))) {
+    return void 0;
+  }
+  return parts;
+}
+function parseIdentifiers(value, forbidNumericLeadingZeros) {
+  if (!validSemverIdentifiers(value)) return void 0;
+  const identifiers = value.split(".");
+  if (forbidNumericLeadingZeros && identifiers.some(
+    (identifier) => onlyAsciiDigits(identifier) && hasForbiddenLeadingZero(identifier)
+  )) {
+    return void 0;
+  }
+  return identifiers;
+}
+function parseSemver(version) {
+  const buildParts = version.split("+");
+  if (buildParts.length > 2) return void 0;
+  const withoutBuild = buildParts[0] ?? "";
+  const build = buildParts[1];
+  if (build !== void 0 && parseIdentifiers(build, false) === void 0) return void 0;
+  const prereleaseSeparator = withoutBuild.indexOf("-");
+  const coreText = prereleaseSeparator === -1 ? withoutBuild : withoutBuild.slice(0, prereleaseSeparator);
+  const prereleaseText = prereleaseSeparator === -1 ? void 0 : withoutBuild.slice(prereleaseSeparator + 1);
+  const core = parseCore(coreText);
+  if (core === void 0) return void 0;
+  const prerelease = prereleaseText === void 0 ? [] : parseIdentifiers(prereleaseText, true);
+  return prerelease === void 0 ? void 0 : { core, prerelease };
+}
+function compareNumeric(left, right) {
+  const leftValue = BigInt(left);
+  const rightValue = BigInt(right);
+  if (leftValue < rightValue) return -1;
+  if (leftValue > rightValue) return 1;
+  return 0;
+}
+function comparePrereleaseIdentifier(left, right) {
+  if (left === right) return 0;
+  const leftNumeric = onlyAsciiDigits(left);
+  const rightNumeric = onlyAsciiDigits(right);
+  if (leftNumeric && rightNumeric) return compareNumeric(left, right);
+  if (leftNumeric) return -1;
+  if (rightNumeric) return 1;
+  return left < right ? -1 : 1;
+}
+function comparePrerelease(left, right) {
+  if (left.length === 0 && right.length === 0) return 0;
+  if (left.length === 0) return 1;
+  if (right.length === 0) return -1;
+  for (let index = 0; index < Math.max(left.length, right.length); index++) {
+    const leftIdentifier = left[index];
+    if (leftIdentifier === void 0) return -1;
+    const rightIdentifier = right[index];
+    if (rightIdentifier === void 0) return 1;
+    const comparison = comparePrereleaseIdentifier(leftIdentifier, rightIdentifier);
+    if (comparison !== 0) return comparison;
+  }
+  return 0;
+}
+function compareCore(left, right) {
+  for (let index = 0; index < 3; index++) {
+    const comparison = compareNumeric(left[index] ?? "0", right[index] ?? "0");
+    if (comparison !== 0) return comparison;
+  }
+  return 0;
+}
+function compareLegacyVersions(left, right) {
+  const leftParts = left.split(".").map(Number);
+  const rightParts = right.split(".").map(Number);
+  for (let index = 0; index < 3; index++) {
+    const leftValue = leftParts[index] ?? 0;
+    const rightValue = rightParts[index] ?? 0;
+    if (leftValue < rightValue) return -1;
+    if (leftValue > rightValue) return 1;
+  }
+  return 0;
+}
+function compareVersions(a, b) {
+  const parsedA = parseSemver(a);
+  const parsedB = parseSemver(b);
+  if (parsedA === void 0 || parsedB === void 0) return compareLegacyVersions(a, b);
+  const coreComparison = compareCore(parsedA.core, parsedB.core);
+  return coreComparison === 0 ? comparePrerelease(parsedA.prerelease, parsedB.prerelease) : coreComparison;
+}
+function isSafePackageVersion(version) {
+  return parseSemver(version) !== void 0;
+}
+
+export {
+  compareVersions,
+  isSafePackageVersion
+};
+//# sourceMappingURL=chunk-FTCNAEAL.js.map

package/dist/chunk-FTCNAEAL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/version.ts"],"sourcesContent":["/**\n * Version comparison utilities\n */\n\nfunction onlyAsciiDigits(value: string): boolean {\n  if (value.length === 0) return false;\n  for (const character of value) {\n    if (character < '0' || character > '9') return false;\n  }\n  return true;\n}\n\nfunction validSemverIdentifier(value: string): boolean {\n  if (value.length === 0) return false;\n  for (const character of value) {\n    const valid =\n      (character >= '0' && character <= '9') ||\n      (character >= 'A' && character <= 'Z') ||\n      (character >= 'a' && character <= 'z') ||\n      character === '-';\n    if (!valid) return false;\n  }\n  return true;\n}\n\nfunction validSemverIdentifiers(value: string): boolean {\n  return value.split('.').every(identifier => validSemverIdentifier(identifier));\n}\n\ninterface ParsedSemver {\n  readonly core: readonly [string, string, string];\n  readonly prerelease: readonly string[];\n}\n\ntype Comparison = -1 | 0 | 1;\n\nfunction hasForbiddenLeadingZero(value: string): boolean {\n  return value.length > 1 && value.startsWith('0');\n}\n\nfunction parseCore(value: string): ParsedSemver['core'] | undefined {\n  const parts = value.split('.');\n  if (\n    parts.length !== 3 ||\n    parts.some(part => !onlyAsciiDigits(part) || hasForbiddenLeadingZero(part))\n  ) {\n    return undefined;\n  }\n  return parts as [string, string, string];\n}\n\nfunction parseIdentifiers(\n  value: string,\n  forbidNumericLeadingZeros: boolean,\n): readonly string[] | undefined {\n  if (!validSemverIdentifiers(value)) return undefined;\n  const identifiers = value.split('.');\n  if (\n    forbidNumericLeadingZeros &&\n    identifiers.some(\n      identifier => onlyAsciiDigits(identifier) && hasForbiddenLeadingZero(identifier),\n    )\n  ) {\n    return undefined;\n  }\n  return identifiers;\n}\n\nfunction parseSemver(version: string): ParsedSemver | undefined {\n  const buildParts = version.split('+');\n  if (buildParts.length > 2) return undefined;\n  const withoutBuild = buildParts[0] ?? '';\n  const build = buildParts[1];\n  if (build !== undefined && parseIdentifiers(build, false) === undefined) return undefined;\n\n  const prereleaseSeparator = withoutBuild.indexOf('-');\n  const coreText =\n    prereleaseSeparator === -1 ? withoutBuild : withoutBuild.slice(0, prereleaseSeparator);\n  const prereleaseText =\n    prereleaseSeparator === -1 ? undefined : withoutBuild.slice(prereleaseSeparator + 1);\n  const core = parseCore(coreText);\n  if (core === undefined) return undefined;\n  const prerelease = prereleaseText === undefined ? [] : parseIdentifiers(prereleaseText, true);\n  return prerelease === undefined ? undefined : { core, prerelease };\n}\n\nfunction compareNumeric(left: string, right: string): Comparison {\n  const leftValue = BigInt(left);\n  const rightValue = BigInt(right);\n  if (leftValue < rightValue) return -1;\n  if (leftValue > rightValue) return 1;\n  return 0;\n}\n\nfunction comparePrereleaseIdentifier(left: string, right: string): Comparison {\n  if (left === right) return 0;\n  const leftNumeric = onlyAsciiDigits(left);\n  const rightNumeric = onlyAsciiDigits(right);\n  if (leftNumeric && rightNumeric) return compareNumeric(left, right);\n  if (leftNumeric) return -1;\n  if (rightNumeric) return 1;\n  return left < right ? -1 : 1;\n}\n\nfunction comparePrerelease(left: readonly string[], right: readonly string[]): Comparison {\n  if (left.length === 0 && right.length === 0) return 0;\n  if (left.length === 0) return 1;\n  if (right.length === 0) return -1;\n\n  for (let index = 0; index < Math.max(left.length, right.length); index++) {\n    const leftIdentifier = left[index];\n    if (leftIdentifier === undefined) return -1;\n    const rightIdentifier = right[index];\n    if (rightIdentifier === undefined) return 1;\n    const comparison = comparePrereleaseIdentifier(leftIdentifier, rightIdentifier);\n    if (comparison !== 0) return comparison;\n  }\n  return 0;\n}\n\nfunction compareCore(left: ParsedSemver['core'], right: ParsedSemver['core']): Comparison {\n  for (let index = 0; index < 3; index++) {\n    const comparison = compareNumeric(left[index] ?? '0', right[index] ?? '0');\n    if (comparison !== 0) return comparison;\n  }\n  return 0;\n}\n\nfunction compareLegacyVersions(left: string, right: string): Comparison {\n  const leftParts = left.split('.').map(Number);\n  const rightParts = right.split('.').map(Number);\n  for (let index = 0; index < 3; index++) {\n    const leftValue = leftParts[index] ?? 0;\n    const rightValue = rightParts[index] ?? 0;\n    if (leftValue < rightValue) return -1;\n    if (leftValue > rightValue) return 1;\n  }\n  return 0;\n}\n\n/**\n * Compare SemVer versions. Legacy non-SemVer inputs retain numeric-core comparison\n * so downgrade protection remains conservative for older project markers.\n *\n * Safety gates must validate both inputs with `isSafePackageVersion` before calling\n * this function: the compatibility fallback cannot distinguish equal numeric cores\n * from wholly unparseable input.\n * @param a\n * @param b\n * @returns -1 if a < b, 0 if a == b, 1 if a > b\n */\nexport function compareVersions(a: string, b: string): Comparison {\n  const parsedA = parseSemver(a);\n  const parsedB = parseSemver(b);\n  if (parsedA === undefined || parsedB === undefined) return compareLegacyVersions(a, b);\n  const coreComparison = compareCore(parsedA.core, parsedB.core);\n  return coreComparison === 0\n    ? comparePrerelease(parsedA.prerelease, parsedB.prerelease)\n    : coreComparison;\n}\n\n/** Accept a SemVer-shaped package version before interpolating it into a shell command. */\nexport function isSafePackageVersion(version: string): boolean {\n  return parseSemver(version) !== undefined;\n}\n"],"mappings":";AAIA,SAAS,gBAAgB,OAAwB;AAC/C,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,aAAW,aAAa,OAAO;AAC7B,QAAI,YAAY,OAAO,YAAY,IAAK,QAAO;AAAA,EACjD;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,OAAwB;AACrD,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,aAAW,aAAa,OAAO;AAC7B,UAAM,QACH,aAAa,OAAO,aAAa,OACjC,aAAa,OAAO,aAAa,OACjC,aAAa,OAAO,aAAa,OAClC,cAAc;AAChB,QAAI,CAAC,MAAO,QAAO;AAAA,EACrB;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,OAAwB;AACtD,SAAO,MAAM,MAAM,GAAG,EAAE,MAAM,gBAAc,sBAAsB,UAAU,CAAC;AAC/E;AASA,SAAS,wBAAwB,OAAwB;AACvD,SAAO,MAAM,SAAS,KAAK,MAAM,WAAW,GAAG;AACjD;AAEA,SAAS,UAAU,OAAiD;AAClE,QAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,MACE,MAAM,WAAW,KACjB,MAAM,KAAK,UAAQ,CAAC,gBAAgB,IAAI,KAAK,wBAAwB,IAAI,CAAC,GAC1E;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,iBACP,OACA,2BAC+B;AAC/B,MAAI,CAAC,uBAAuB,KAAK,EAAG,QAAO;AAC3C,QAAM,cAAc,MAAM,MAAM,GAAG;AACnC,MACE,6BACA,YAAY;AAAA,IACV,gBAAc,gBAAgB,UAAU,KAAK,wBAAwB,UAAU;AAAA,EACjF,GACA;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,YAAY,SAA2C;AAC9D,QAAM,aAAa,QAAQ,MAAM,GAAG;AACpC,MAAI,WAAW,SAAS,EAAG,QAAO;AAClC,QAAM,eAAe,WAAW,CAAC,KAAK;AACtC,QAAM,QAAQ,WAAW,CAAC;AAC1B,MAAI,UAAU,UAAa,iBAAiB,OAAO,KAAK,MAAM,OAAW,QAAO;AAEhF,QAAM,sBAAsB,aAAa,QAAQ,GAAG;AACpD,QAAM,WACJ,wBAAwB,KAAK,eAAe,aAAa,MAAM,GAAG,mBAAmB;AACvF,QAAM,iBACJ,wBAAwB,KAAK,SAAY,aAAa,MAAM,sBAAsB,CAAC;AACrF,QAAM,OAAO,UAAU,QAAQ;AAC/B,MAAI,SAAS,OAAW,QAAO;AAC/B,QAAM,aAAa,mBAAmB,SAAY,CAAC,IAAI,iBAAiB,gBAAgB,IAAI;AAC5F,SAAO,eAAe,SAAY,SAAY,EAAE,MAAM,WAAW;AACnE;AAEA,SAAS,eAAe,MAAc,OAA2B;AAC/D,QAAM,YAAY,OAAO,IAAI;AAC7B,QAAM,aAAa,OAAO,KAAK;AAC/B,MAAI,YAAY,WAAY,QAAO;AACnC,MAAI,YAAY,WAAY,QAAO;AACnC,SAAO;AACT;AAEA,SAAS,4BAA4B,MAAc,OAA2B;AAC5E,MAAI,SAAS,MAAO,QAAO;AAC3B,QAAM,cAAc,gBAAgB,IAAI;AACxC,QAAM,eAAe,gBAAgB,KAAK;AAC1C,MAAI,eAAe,aAAc,QAAO,eAAe,MAAM,KAAK;AAClE,MAAI,YAAa,QAAO;AACxB,MAAI,aAAc,QAAO;AACzB,SAAO,OAAO,QAAQ,KAAK;AAC7B;AAEA,SAAS,kBAAkB,MAAyB,OAAsC;AACxF,MAAI,KAAK,WAAW,KAAK,MAAM,WAAW,EAAG,QAAO;AACpD,MAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,WAAS,QAAQ,GAAG,QAAQ,KAAK,IAAI,KAAK,QAAQ,MAAM,MAAM,GAAG,SAAS;AACxE,UAAM,iBAAiB,KAAK,KAAK;AACjC,QAAI,mBAAmB,OAAW,QAAO;AACzC,UAAM,kBAAkB,MAAM,KAAK;AACnC,QAAI,oBAAoB,OAAW,QAAO;AAC1C,UAAM,aAAa,4BAA4B,gBAAgB,eAAe;AAC9E,QAAI,eAAe,EAAG,QAAO;AAAA,EAC/B;AACA,SAAO;AACT;AAEA,SAAS,YAAY,MAA4B,OAAyC;AACxF,WAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS;AACtC,UAAM,aAAa,eAAe,KAAK,KAAK,KAAK,KAAK,MAAM,KAAK,KAAK,GAAG;AACzE,QAAI,eAAe,EAAG,QAAO;AAAA,EAC/B;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,MAAc,OAA2B;AACtE,QAAM,YAAY,KAAK,MAAM,GAAG,EAAE,IAAI,MAAM;AAC5C,QAAM,aAAa,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM;AAC9C,WAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS;AACtC,UAAM,YAAY,UAAU,KAAK,KAAK;AACtC,UAAM,aAAa,WAAW,KAAK,KAAK;AACxC,QAAI,YAAY,WAAY,QAAO;AACnC,QAAI,YAAY,WAAY,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAaO,SAAS,gBAAgB,GAAW,GAAuB;AAChE,QAAM,UAAU,YAAY,CAAC;AAC7B,QAAM,UAAU,YAAY,CAAC;AAC7B,MAAI,YAAY,UAAa,YAAY,OAAW,QAAO,sBAAsB,GAAG,CAAC;AACrF,QAAM,iBAAiB,YAAY,QAAQ,MAAM,QAAQ,IAAI;AAC7D,SAAO,mBAAmB,IACtB,kBAAkB,QAAQ,YAAY,QAAQ,UAAU,IACxD;AACN;AAGO,SAAS,qBAAqB,SAA0B;AAC7D,SAAO,YAAY,OAAO,MAAM;AAClC;","names":[]}

package/dist/{chunk-KWBGQ2YZ.js → chunk-HKFPZSXT.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-ZESGPJCY.js";
 import {
   setupPythonTooling
-} from "./chunk-F4CA33GP.js";
+} from "./chunk-IWU7G6G7.js";
 import {
   SAFEWORD_PRIMARY_LINT_SCRIPT,
   detect
@@ -1544,4 +1544,4 @@ export {
   LEFTHOOK_CONFIGS,
   createProjectContext
 };
-//# sourceMappingURL=chunk-KWBGQ2YZ.js.map
+//# sourceMappingURL=chunk-HKFPZSXT.js.map

package/dist/{chunk-F4CA33GP.js → chunk-IWU7G6G7.js}

@@ -1,9 +1,9 @@
-import {
-  CODEX_MIGRATION_SCHEMA
-} from "./chunk-O5JEWG3M.js";
 import {
   MCP_SERVERS
 } from "./chunk-GUIZH3NI.js";
+import {
+  CODEX_MIGRATION_SCHEMA
+} from "./chunk-O5JEWG3M.js";
 import {
   warn
 } from "./chunk-DAFOEHJA.js";
@@ -1454,12 +1454,12 @@ var SETTINGS_HOOKS = {
     hook(`bun ${HOOKS_DIR}/session-dependency-readiness.ts`),
     asyncRewakeHook(`bun ${HOOKS_DIR}/session-auto-upgrade.ts`),
     hook(`bun ${HOOKS_DIR}/session-safeword-context.ts --agent=claude`),
+    hook(`bun ${HOOKS_DIR}/session-reply-format.ts --agent=claude`),
     hook(`bun ${HOOKS_DIR}/session-version.ts`),
     hook(`bun ${HOOKS_DIR}/session-lint-check.ts`),
     hook(`bun ${HOOKS_DIR}/session-architecture-heal.ts`),
     hook(`bun ${HOOKS_DIR}/session-author-model.ts`),
     hook(`bun ${HOOKS_DIR}/session-start-reentry.ts`),
-    matchedHook("compact", `bun ${HOOKS_DIR}/session-safeword-context.ts --agent=claude`),
     matchedHook("compact", `bun ${HOOKS_DIR}/session-compact-context.ts`)
   ],
   UserPromptSubmit: [
@@ -2606,8 +2606,14 @@ var SAFEWORD_SCHEMA = {
     ".safeword/hooks/session-safeword-context.ts": {
       template: "hooks/session-safeword-context.ts"
     },
+    ".safeword/hooks/session-reply-format.ts": {
+      template: "hooks/session-reply-format.ts"
+    },
     ".safeword/hooks/session-codex-start.ts": {
-      template: "hooks/session-codex-start.ts"
+      template: "hooks/session-codex-start.ts",
+      // Packaged by the CLI for native Codex dispatch, but no longer copied
+      // into projects. Existing copies are legacy migration inputs.
+      generator: () => void 0
     },
     ".safeword/hooks/session-cursor-auto-upgrade.ts": {
       template: "hooks/session-cursor-auto-upgrade.ts"
@@ -3166,11 +3172,9 @@ ${managedPrettierPaths(ctx).join("\n")}
       requires: SHARED_FILING_INVARIANTS
     },
     "packages/cli/templates/hooks/lib/quality.ts": {
-      // Cursor's stop hook imports QUALITY_REVIEW_MESSAGE. The export must exist
-      // or Cursor users get a broken hook. The four marker strings (CONFIDENT,
-      // BLOCKED, Tried:, Need:) define the binary-terminal shape from ticket 143.
-      // Removing any of them would silently regress the prompt back to legacy
-      // free-form review.
+      // Cursor's stop hook imports QUALITY_REVIEW_MESSAGE. The grammar, renderer,
+      // and evaluator exports keep proactive wording and Stop validation coupled;
+      // requiring individual labels here would create a second grammar source.
       requires: [
         "QUALITY_REVIEW_MESSAGE",
         // prompt-questions.ts imports all three pre-response pointers; the Stop
@@ -3179,10 +3183,9 @@ ${managedPrettierPaths(ctx).join("\n")}
         "REPLY_FORMAT_LEAD_RULE",
         "REPLY_FORMAT_LEAD",
         "REPLY_FORMAT_REMINDER",
-        "CONFIDENT",
-        "BLOCKED",
-        "Tried:",
-        "Need:"
+        "DECISION_BRIEF_GRAMMAR",
+        "renderDecisionBriefContract",
+        "evaluateDecisionBriefCompliance"
       ]
     },
     "packages/cli/templates/doc-templates/test-definitions-feature.md": {
@@ -3227,6 +3230,7 @@ export {
   setupPythonTooling,
   hasImportLinterScaffoldTarget,
   generateOwnedPathsModule,
+  SETTINGS_HOOKS,
   typescriptPackages,
   filterOutSafewordHooks,
   BDD_LANE_FILE_PATHS,
@@ -3234,4 +3238,4 @@ export {
   boundaryShimCommand,
   SAFEWORD_SCHEMA
 };
-//# sourceMappingURL=chunk-F4CA33GP.js.map
+//# sourceMappingURL=chunk-IWU7G6G7.js.map