safeword 0.78.2 → 0.78.3

package/dist/{chunk-USPVNZ63.js → chunk-BZWO3BVD.js}

@@ -1,15 +1,15 @@
 import {
   WORKSPACE_ROOTS
-} from "./chunk-Q5KLE6ZF.js";
+} from "./chunk-OKPRQGFG.js";
 import {
   resolveConfiguredLaneDirectory,
   resolveTicketsDirectory,
   toRepoDirectory,
   toRepoPath
-} from "./chunk-GKR44BCH.js";
+} from "./chunk-RVDXBHUG.js";
 import {
   readFileSafe
-} from "./chunk-S2T356DA.js";
+} from "./chunk-HF3DXZEA.js";
 
 // src/utils/feature-source.ts
 import { existsSync, readdirSync } from "fs";
@@ -39,9 +39,12 @@ function slugForTicket(cwd, ticketFolder) {
   const dashIndex = ticketFolder.indexOf("-");
   return dashIndex === -1 ? ticketFolder : ticketFolder.slice(dashIndex + 1);
 }
-function findFeatureSourcePath(cwd, ticketFolder) {
-  const fileName = `${slugForTicket(cwd, ticketFolder)}.feature`;
-  return collectExecutableFeatureFiles(cwd, fileName)[0];
+function featureSourceFileName(cwd, ticketFolder) {
+  return `${slugForTicket(cwd, ticketFolder)}.feature`;
+}
+function findFeatureSourcePath(cwd, ticketFolder, featureFiles = collectExecutableFeatureFiles(cwd)) {
+  const fileName = featureSourceFileName(cwd, ticketFolder);
+  return featureFiles.find((path) => nodePath.basename(path) === fileName);
 }
 function createPhaseAnchorEnvironment(cwd, configuredFeatures) {
   const featureRoots = ["features"];
@@ -124,6 +127,7 @@ function isMatchingFeatureFile(entryName, fileName) {
 
 export {
   readFrontmatterScalar,
+  featureSourceFileName,
   findFeatureSourcePath,
   createPhaseAnchorEnvironment,
   createPhaseAnchorScope,
@@ -131,4 +135,4 @@ export {
   hasDefaultExecutableFeatureFiles,
   collectExecutableFeatureDirectories
 };
-//# sourceMappingURL=chunk-USPVNZ63.js.map
+//# sourceMappingURL=chunk-BZWO3BVD.js.map

package/dist/chunk-BZWO3BVD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/feature-source.ts","../src/utils/frontmatter.ts"],"sourcesContent":["import { existsSync, readdirSync } from 'node:fs';\nimport nodePath from 'node:path';\n\nimport type { PhaseAnchorScope } from '../../templates/hooks/lib/phase-provenance.js';\nimport { resolveConfiguredLaneDirectory, resolveTicketsDirectory } from './configured-paths.js';\nimport { readFrontmatterScalar } from './frontmatter.js';\nimport { readFileSafe } from './fs.js';\nimport { toRepoDirectory, toRepoPath } from './repo-path.js';\nimport { WORKSPACE_ROOTS } from './workspaces.js';\n\n/** Read the authoritative ticket slug, falling back for legacy folders. */\nfunction slugForTicket(cwd: string, ticketFolder: string): string {\n  const content = readFileSafe(\n    nodePath.join(resolveTicketsDirectory(cwd), ticketFolder, 'ticket.md'),\n  );\n  const slug = readFrontmatterScalar(content, 'slug');\n  if (slug !== undefined && slug !== '') return slug;\n\n  const dashIndex = ticketFolder.indexOf('-');\n  return dashIndex === -1 ? ticketFolder : ticketFolder.slice(dashIndex + 1);\n}\n\n/**\n * Find the executable `.feature` file for a ticket by slug. The search mirrors\n * the Cucumber lane: all feature files under root `features/`, then under each\n * direct workspace package's `features/` directory in stable order.\n */\nexport function featureSourceFileName(cwd: string, ticketFolder: string): string {\n  return `${slugForTicket(cwd, ticketFolder)}.feature`;\n}\n\nexport function findFeatureSourcePath(\n  cwd: string,\n  ticketFolder: string,\n  featureFiles: readonly string[] = collectExecutableFeatureFiles(cwd),\n): string | undefined {\n  const fileName = featureSourceFileName(cwd, ticketFolder);\n  return featureFiles.find(path => nodePath.basename(path) === fileName);\n}\n\n/** Build the ticket-invariant feature ownership policy once per tree/config. */\nexport function createPhaseAnchorEnvironment(\n  cwd: string,\n  configuredFeatures?: string,\n): Omit<PhaseAnchorScope, 'ticketPath'> {\n  const featureRoots = ['features'];\n  if (configuredFeatures !== undefined) {\n    const configuredRoot = toRepoDirectory(cwd, configuredFeatures);\n    if (configuredRoot !== undefined && !featureRoots.includes(configuredRoot)) {\n      featureRoots.push(configuredRoot);\n    }\n  }\n  return { featureRoots, workspaceRoots: [...WORKSPACE_ROOTS] };\n}\n\n/** Build feature ownership policy without consulting feature-file existence. */\nexport function createPhaseAnchorScope(\n  cwd: string,\n  ticketPath: string,\n  configuredFeatures?: string,\n): PhaseAnchorScope {\n  return {\n    ticketPath: toRepoPath(ticketPath),\n    ...createPhaseAnchorEnvironment(cwd, configuredFeatures),\n  };\n}\n\nexport function collectExecutableFeatureFiles(cwd: string, fileName?: string): string[] {\n  return collectExecutableFeatureDirectories(cwd).flatMap(directory =>\n    findFeatureFiles(directory, fileName),\n  );\n}\n\n/** Whether Safeword's built-in feature locations already contain a real suite. */\nexport function hasDefaultExecutableFeatureFiles(cwd: string): boolean {\n  return collectDefaultFeatureDirectories(cwd).some(directory => containsFeatureFile(directory));\n}\n\n/**\n * Return every directory that contributes executable feature files.\n *\n * Keep consumers that need feature-lane coverage (for example, audit checks)\n * on this shared enumeration rather than reconstructing workspace discovery.\n */\nexport function collectExecutableFeatureDirectories(cwd: string): string[] {\n  const directories = collectDefaultFeatureDirectories(cwd);\n\n  // paths.features AUGMENTS the defaults (ticket 56JCFZ) — relocated/host\n  // lanes become readable without abandoning root features/.\n  const configured = resolveConfiguredLaneDirectory(cwd, 'features');\n  if (configured !== undefined && !directories.includes(configured)) {\n    directories.push(configured);\n  }\n  return directories;\n}\n\nfunction collectDefaultFeatureDirectories(cwd: string): string[] {\n  return [\n    nodePath.join(cwd, 'features'),\n    ...WORKSPACE_ROOTS.flatMap(root =>\n      collectWorkspaceFeatureDirectories(nodePath.join(cwd, root)),\n    ),\n  ];\n}\n\nfunction collectWorkspaceFeatureDirectories(workspaceDirectory: string): string[] {\n  if (!existsSync(workspaceDirectory)) return [];\n  return readdirSync(workspaceDirectory, { withFileTypes: true })\n    .filter(entry => entry.isDirectory())\n    .map(entry => nodePath.join(workspaceDirectory, entry.name, 'features'));\n}\n\nfunction findFeatureFiles(directory: string, fileName?: string): string[] {\n  let entries;\n  try {\n    entries = readdirSync(directory, { withFileTypes: true });\n  } catch {\n    return [];\n  }\n\n  const matches: string[] = [];\n  for (const entry of entries) {\n    const absolute = nodePath.join(directory, entry.name);\n    if (entry.isDirectory()) {\n      matches.push(...findFeatureFiles(absolute, fileName));\n    } else if (entry.isFile() && isMatchingFeatureFile(entry.name, fileName)) {\n      matches.push(absolute);\n    }\n  }\n  return matches.toSorted((a, b) => a.localeCompare(b));\n}\n\nfunction containsFeatureFile(directory: string): boolean {\n  let entries;\n  try {\n    entries = readdirSync(directory, { withFileTypes: true });\n  } catch {\n    return false;\n  }\n  return entries.some(entry => {\n    const absolute = nodePath.join(directory, entry.name);\n    return entry.isDirectory()\n      ? containsFeatureFile(absolute)\n      : entry.isFile() && entry.name.endsWith('.feature');\n  });\n}\n\nfunction isMatchingFeatureFile(entryName: string, fileName: string | undefined): boolean {\n  if (!entryName.endsWith('.feature')) return false;\n  return fileName === undefined || entryName === fileName;\n}\n","/** Read one scalar field from a `---`-fenced YAML frontmatter block. */\nexport function readFrontmatterScalar(\n  content: string | undefined,\n  field: string,\n): string | undefined {\n  const lines = content?.split(/\\r?\\n/) ?? [];\n  if (lines[0] !== '---') return undefined;\n  const prefix = `${field}:`;\n  for (const line of lines.slice(1)) {\n    if (line === '---') return undefined;\n    if (!line.startsWith(prefix)) continue;\n    const value = line.slice(prefix.length).trim();\n    return value === '' ? undefined : value;\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,YAAY,mBAAmB;AACxC,OAAO,cAAc;;;ACAd,SAAS,sBACd,SACA,OACoB;AACpB,QAAM,QAAQ,SAAS,MAAM,OAAO,KAAK,CAAC;AAC1C,MAAI,MAAM,CAAC,MAAM,MAAO,QAAO;AAC/B,QAAM,SAAS,GAAG,KAAK;AACvB,aAAW,QAAQ,MAAM,MAAM,CAAC,GAAG;AACjC,QAAI,SAAS,MAAO,QAAO;AAC3B,QAAI,CAAC,KAAK,WAAW,MAAM,EAAG;AAC9B,UAAM,QAAQ,KAAK,MAAM,OAAO,MAAM,EAAE,KAAK;AAC7C,WAAO,UAAU,KAAK,SAAY;AAAA,EACpC;AACA,SAAO;AACT;;;ADJA,SAAS,cAAc,KAAa,cAA8B;AAChE,QAAM,UAAU;AAAA,IACd,SAAS,KAAK,wBAAwB,GAAG,GAAG,cAAc,WAAW;AAAA,EACvE;AACA,QAAM,OAAO,sBAAsB,SAAS,MAAM;AAClD,MAAI,SAAS,UAAa,SAAS,GAAI,QAAO;AAE9C,QAAM,YAAY,aAAa,QAAQ,GAAG;AAC1C,SAAO,cAAc,KAAK,eAAe,aAAa,MAAM,YAAY,CAAC;AAC3E;AAOO,SAAS,sBAAsB,KAAa,cAA8B;AAC/E,SAAO,GAAG,cAAc,KAAK,YAAY,CAAC;AAC5C;AAEO,SAAS,sBACd,KACA,cACA,eAAkC,8BAA8B,GAAG,GAC/C;AACpB,QAAM,WAAW,sBAAsB,KAAK,YAAY;AACxD,SAAO,aAAa,KAAK,UAAQ,SAAS,SAAS,IAAI,MAAM,QAAQ;AACvE;AAGO,SAAS,6BACd,KACA,oBACsC;AACtC,QAAM,eAAe,CAAC,UAAU;AAChC,MAAI,uBAAuB,QAAW;AACpC,UAAM,iBAAiB,gBAAgB,KAAK,kBAAkB;AAC9D,QAAI,mBAAmB,UAAa,CAAC,aAAa,SAAS,cAAc,GAAG;AAC1E,mBAAa,KAAK,cAAc;AAAA,IAClC;AAAA,EACF;AACA,SAAO,EAAE,cAAc,gBAAgB,CAAC,GAAG,eAAe,EAAE;AAC9D;AAGO,SAAS,uBACd,KACA,YACA,oBACkB;AAClB,SAAO;AAAA,IACL,YAAY,WAAW,UAAU;AAAA,IACjC,GAAG,6BAA6B,KAAK,kBAAkB;AAAA,EACzD;AACF;AAEO,SAAS,8BAA8B,KAAa,UAA6B;AACtF,SAAO,oCAAoC,GAAG,EAAE;AAAA,IAAQ,eACtD,iBAAiB,WAAW,QAAQ;AAAA,EACtC;AACF;AAGO,SAAS,iCAAiC,KAAsB;AACrE,SAAO,iCAAiC,GAAG,EAAE,KAAK,eAAa,oBAAoB,SAAS,CAAC;AAC/F;AAQO,SAAS,oCAAoC,KAAuB;AACzE,QAAM,cAAc,iCAAiC,GAAG;AAIxD,QAAM,aAAa,+BAA+B,KAAK,UAAU;AACjE,MAAI,eAAe,UAAa,CAAC,YAAY,SAAS,UAAU,GAAG;AACjE,gBAAY,KAAK,UAAU;AAAA,EAC7B;AACA,SAAO;AACT;AAEA,SAAS,iCAAiC,KAAuB;AAC/D,SAAO;AAAA,IACL,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,GAAG,gBAAgB;AAAA,MAAQ,UACzB,mCAAmC,SAAS,KAAK,KAAK,IAAI,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAEA,SAAS,mCAAmC,oBAAsC;AAChF,MAAI,CAAC,WAAW,kBAAkB,EAAG,QAAO,CAAC;AAC7C,SAAO,YAAY,oBAAoB,EAAE,eAAe,KAAK,CAAC,EAC3D,OAAO,WAAS,MAAM,YAAY,CAAC,EACnC,IAAI,WAAS,SAAS,KAAK,oBAAoB,MAAM,MAAM,UAAU,CAAC;AAC3E;AAEA,SAAS,iBAAiB,WAAmB,UAA6B;AACxE,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC;AAAA,EAC1D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,UAAoB,CAAC;AAC3B,aAAW,SAAS,SAAS;AAC3B,UAAM,WAAW,SAAS,KAAK,WAAW,MAAM,IAAI;AACpD,QAAI,MAAM,YAAY,GAAG;AACvB,cAAQ,KAAK,GAAG,iBAAiB,UAAU,QAAQ,CAAC;AAAA,IACtD,WAAW,MAAM,OAAO,KAAK,sBAAsB,MAAM,MAAM,QAAQ,GAAG;AACxE,cAAQ,KAAK,QAAQ;AAAA,IACvB;AAAA,EACF;AACA,SAAO,QAAQ,SAAS,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AACtD;AAEA,SAAS,oBAAoB,WAA4B;AACvD,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC;AAAA,EAC1D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,KAAK,WAAS;AAC3B,UAAM,WAAW,SAAS,KAAK,WAAW,MAAM,IAAI;AACpD,WAAO,MAAM,YAAY,IACrB,oBAAoB,QAAQ,IAC5B,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,UAAU;AAAA,EACtD,CAAC;AACH;AAEA,SAAS,sBAAsB,WAAmB,UAAuC;AACvF,MAAI,CAAC,UAAU,SAAS,UAAU,EAAG,QAAO;AAC5C,SAAO,aAAa,UAAa,cAAc;AACjD;","names":[]}

package/dist/{chunk-GZ36UZJG.js → chunk-CFME47IY.js}

@@ -2,10 +2,10 @@ import {
   assertSafeClaudeCleanupTarget,
   containedClaudeCleanupPath,
   observeClaudeLegacy
-} from "./chunk-4CKCRZDO.js";
+} from "./chunk-7ULZND56.js";
 import {
   canonicalClaudeProjectRoot
-} from "./chunk-34NCOTP5.js";
+} from "./chunk-7XELS325.js";
 import {
   CLAUDE_MIGRATION_SCHEMA,
   advisoryStateDigest,
@@ -14,19 +14,19 @@ import {
   readClaudePluginMode,
   writeClaudeMigrationAttention,
   writeClaudePluginMode
-} from "./chunk-FDHJ63FZ.js";
+} from "./chunk-WVA4Q6BX.js";
 import {
   cataloguedClaudeLegacyPaths,
   isAcceptedHistoricalFile,
   isAcceptedHistoricalHook
-} from "./chunk-NSZGI7HK.js";
+} from "./chunk-HNCUIXDY.js";
 import {
   writeDurableFile,
   writeDurableFileExclusive
 } from "./chunk-QOLHGAD5.js";
 import {
   createResult
-} from "./chunk-V63TSN3C.js";
+} from "./chunk-FOYGZ4MK.js";
 
 // src/claude-plugin/cleanup.ts
 import { createHash, randomUUID } from "crypto";
@@ -833,4 +833,4 @@ export {
   migrateClaudeLegacyAutomatically,
   recoverClaudeCleanup
 };
-//# sourceMappingURL=chunk-GZ36UZJG.js.map
+//# sourceMappingURL=chunk-CFME47IY.js.map

package/dist/{chunk-SME5SU3O.js → chunk-CNBZ3S5U.js}

@@ -1,7 +1,9 @@
 import {
-  SAFEWORD_SCHEMA,
+  SAFEWORD_SCHEMA
+} from "./chunk-IPTM5VE7.js";
+import {
   parse
-} from "./chunk-BSOUMHMQ.js";
+} from "./chunk-JSR3HXFT.js";
 import {
   CODEX_MIGRATION_SCHEMA
 } from "./chunk-AVAUUIDB.js";
@@ -120,10 +122,13 @@ import {
   constants as fsConstants,
   existsSync,
   fstatSync,
+  lstatSync as lstatSync2,
   openSync,
+  readdirSync,
   readFileSync as readFileSync2,
   readSync,
   realpathSync,
+  rmdirSync,
   rmSync
 } from "fs";
 import { homedir } from "os";
@@ -210,15 +215,17 @@ function observeCodexHostProcesses() {
   if (result.status !== 0) return { available: false, running: [], current: null };
   return codexHostsFromProcessTable(result.stdout, process.ppid);
 }
-function observeRunningCodexHosts() {
-  const observation = observeCodexHostProcesses();
-  return observation.available ? observation.running : null;
-}
 function sameCodexHost(left, right) {
   return left.pid === right.pid && left.started_at === right.started_at;
 }
 
 // src/codex-plugin/profile-proof.ts
+var SHA256_PATTERN = /^[a-f\d]{64}$/u;
+var NUMERIC_VERSION_PART_PATTERN = /^\d+$/u;
+var VERSION_IDENTIFIER_PATTERN = /^[\dA-Za-z-]+$/u;
+var MAX_PLUGIN_VERSION_LENGTH = 128;
+var MAX_RETAINED_SESSION_PROOFS_PER_PROJECT = 256;
+var MAX_RETAINED_SESSION_PROOF_PROJECTS = 64;
 var CODEX_PLUGIN_HOOK_EVENTS = [
   "session-start",
   "pre-tool-use",
@@ -227,7 +234,8 @@ var CODEX_PLUGIN_HOOK_EVENTS = [
   "stop"
 ];
 function codexProfileDirectory(environment = process.env) {
-  return environment.CODEX_HOME ?? nodePath2.join(homedir(), ".codex");
+  const configuredHome = environment.CODEX_HOME?.trim();
+  return configuredHome || nodePath2.join(homedir(), ".codex");
 }
 function codexProofPath(environment = process.env, event = "session-start") {
   return nodePath2.join(
@@ -267,7 +275,13 @@ function legacyCodexRestartMarkerPath(environment = process.env) {
   return nodePath2.join(codexProfileDirectory(environment), "safeword/restart-pending-v1.json");
 }
 function codexActivationIsPending(environment = process.env) {
-  const identity = currentCodexPluginIdentity();
+  try {
+    return activationIsPendingForIdentity(environment, currentCodexPluginIdentity());
+  } catch {
+    return true;
+  }
+}
+function activationIsPendingForIdentity(environment, identity) {
   return (
     // The canonical marker is written atomically. If it exists but cannot be
     // parsed or matched, fail closed instead of accepting unbound hook proof.
@@ -276,6 +290,23 @@ function codexActivationIsPending(environment = process.env) {
     )
   );
 }
+function codexActivationMarkerIssue(environment = process.env) {
+  const markerPath = codexActivationMarkerPath(environment);
+  if (!existsSync(markerPath)) return void 0;
+  let identity;
+  try {
+    identity = currentCodexPluginIdentity();
+  } catch {
+    return "package-unavailable";
+  }
+  try {
+    const marker = readTrustedHookProofJson(markerPath);
+    if (!isActivationMarkerV2(marker)) return "malformed";
+    return matchesCodexPluginIdentity(marker, identity) ? void 0 : "identity-mismatch";
+  } catch {
+    return "malformed";
+  }
+}
 function packagedHookManifestPath() {
   const candidates = [
     nodePath2.resolve(import.meta.dirname, "../codex-plugin/hooks.json"),
@@ -287,19 +318,25 @@ function packagedHookManifestPath() {
   }
   return manifest;
 }
-function currentCodexPluginIdentity() {
-  const manifest = readFileSync2(packagedHookManifestPath());
-  return {
-    plugin_version: SAFEWORD_SCHEMA.version,
-    manifest_sha256: createHash("sha256").update(manifest).digest("hex")
+var currentCodexPluginIdentity = /* @__PURE__ */ (() => {
+  let cachedIdentity;
+  return () => {
+    cachedIdentity ??= (() => {
+      const manifest = readFileSync2(packagedHookManifestPath());
+      return {
+        plugin_version: SAFEWORD_SCHEMA.version,
+        manifest_sha256: createHash("sha256").update(manifest).digest("hex")
+      };
+    })();
+    return cachedIdentity;
   };
-}
+})();
 function matchesCodexPluginIdentity(value, identity) {
   return value.plugin_version === identity.plugin_version && value.manifest_sha256 === identity.manifest_sha256;
 }
 function writeCodexActivationMarker(environment = process.env, now = /* @__PURE__ */ new Date(), options = {}) {
   const path = codexActivationMarkerPath(environment);
-  const activeHosts = options.activeHosts === void 0 ? observeRunningCodexHosts() : options.activeHosts;
+  const activeHosts = activeHostsForMarker(options);
   const marker = {
     schema_version: 2,
     ...currentCodexPluginIdentity(),
@@ -315,15 +352,24 @@ function writeCodexActivationMarker(environment = process.env, now = /* @__PURE_
     recursive: true,
     force: true
   });
-  rmSync(nodePath2.join(codexProfileDirectory(environment), "safeword/session-proof-v1"), {
-    recursive: true,
-    force: true
-  });
   rmSync(codexActivationReceiptPath(environment), { force: true });
   rmSync(legacyCodexActivationMarkerPath(environment), { force: true });
   rmSync(legacyCodexRestartMarkerPath(environment), { force: true });
   return marker;
 }
+function activeHostsForMarker(options) {
+  if (options.activeHosts !== void 0) {
+    return options.activeHosts === null || options.activeHosts.length === 0 ? null : options.activeHosts;
+  }
+  const observation = options.hostObservation ?? observeCodexHostProcesses();
+  if (!observation.available) return null;
+  const activeHosts = [...observation.running];
+  const currentHost = observation.current;
+  if (currentHost !== null && activeHosts.every((host) => !sameCodexHost(host, currentHost))) {
+    activeHosts.push(currentHost);
+  }
+  return activeHosts.length === 0 ? null : activeHosts;
+}
 function hostObservationForOverride(current = null) {
   return {
     available: true,
@@ -333,7 +379,7 @@ function hostObservationForOverride(current = null) {
 }
 function activationReceiptForRestart(marker, hostObservation, identity, now) {
   const currentHost = hostObservation.current;
-  if (!hostObservation.available || currentHost === null || marker.host_observation !== "observed" || now.getTime() < Date.parse(marker.installed_at) || marker.active_hosts.some(
+  if (!hostObservation.available || currentHost === null || marker.host_observation !== "observed" || marker.active_hosts.length === 0 || now.getTime() < Date.parse(marker.installed_at) || marker.active_hosts.some((installedHost) => sameCodexHost(installedHost, currentHost)) || marker.active_hosts.some(
     (installedHost) => hostObservation.running.some((runningHost) => sameCodexHost(installedHost, runningHost))
   )) {
     return null;
@@ -361,36 +407,174 @@ function recordCodexHookProof(event, environment = process.env, now = /* @__PURE
   }
   const projectDirectory = writeOptions.projectDirectory === void 0 ? void 0 : canonicalProjectDirectory(writeOptions.projectDirectory);
   const sessionId = writeOptions.sessionId?.trim();
-  const proof = {
-    schema_version: projectDirectory !== void 0 && sessionId ? 3 : 2,
+  const activationId = activeCodexActivationId(marker, receipt);
+  const recordedAt = now.toISOString();
+  const proof = projectDirectory !== void 0 && sessionId ? {
+    schema_version: 3,
+    event,
+    ...identity,
+    activation_id: activationId,
+    project_directory: projectDirectory,
+    session_id: sessionId,
+    recorded_at: recordedAt
+  } : {
+    schema_version: 2,
     event,
     ...identity,
-    activation_id: receipt?.activation_id ?? marker?.activation_id ?? null,
-    ...projectDirectory !== void 0 && sessionId && { project_directory: projectDirectory, session_id: sessionId },
-    recorded_at: now.toISOString()
+    activation_id: activationId,
+    recorded_at: recordedAt
   };
   writeAtomicJson(codexProofPath(environment, event), proof, writeOptions);
   if (event === "session-start" && projectDirectory !== void 0 && sessionId) {
     const sessionProof = {
-      schema_version: 1,
+      schema_version: 2,
       ...identity,
+      activation_id: activationId,
       project_directory: projectDirectory,
       session_id: sessionId,
-      recorded_at: now.toISOString()
+      recorded_at: recordedAt
     };
-    writeAtomicJson(codexSessionProofPath(projectDirectory, sessionId, environment), sessionProof);
+    const path = codexSessionProofPath(projectDirectory, sessionId, environment);
+    writeAtomicJson(path, sessionProof);
+    pruneCodexSessionProofs(path);
   }
   return proof;
 }
-function codexSessionProofIsCurrent(projectDirectory, sessionId, environment = process.env) {
+function validSessionProof(value, canonicalProject, sessionId) {
+  if (typeof value !== "object" || value === null) return false;
+  const proof = value;
+  return sessionProofBindingMatches(proof, canonicalProject, sessionId) && sessionProofIdentityIsWellFormed(proof) && sessionProofTimeIsWellFormed(proof);
+}
+function sessionProofBindingMatches(proof, canonicalProject, sessionId) {
+  return (proof.schema_version === 1 || proof.schema_version === 2) && proof.project_directory === canonicalProject && proof.session_id === sessionId && (proof.schema_version === 1 || typeof proof.activation_id === "string" || proof.activation_id === null);
+}
+function sessionProofIdentityIsWellFormed(proof) {
+  return pluginVersionIsWellFormed(proof.plugin_version) && typeof proof.manifest_sha256 === "string" && SHA256_PATTERN.test(proof.manifest_sha256);
+}
+function numericVersionPartIsWellFormed(part) {
+  return part.length > 0 && NUMERIC_VERSION_PART_PATTERN.test(part) && (part === "0" || !part.startsWith("0"));
+}
+function versionIdentifiersAreWellFormed(value) {
+  return value === void 0 || value.split(".").every(
+    (identifier) => identifier.length > 0 ? VERSION_IDENTIFIER_PATTERN.test(identifier) : false
+  );
+}
+function pluginVersionIsWellFormed(value) {
+  if (typeof value !== "string" || value.length > MAX_PLUGIN_VERSION_LENGTH) return false;
+  const buildSplit = value.split("+");
+  if (buildSplit.length > 2) return false;
+  const coreAndPrerelease = buildSplit[0] ?? "";
+  const prereleaseSeparator = coreAndPrerelease.indexOf("-");
+  const coreText = prereleaseSeparator === -1 ? coreAndPrerelease : coreAndPrerelease.slice(0, prereleaseSeparator);
+  const prerelease = prereleaseSeparator === -1 ? void 0 : coreAndPrerelease.slice(prereleaseSeparator + 1);
+  const core = coreText.split(".");
+  return core.length === 3 && core.every((part) => numericVersionPartIsWellFormed(part)) && versionIdentifiersAreWellFormed(prerelease) && versionIdentifiersAreWellFormed(buildSplit[1]);
+}
+function sessionProofTimeIsWellFormed(proof) {
+  return typeof proof.recorded_at === "string" && !Number.isNaN(Date.parse(proof.recorded_at));
+}
+function classifySessionProof(proof, identity, marker, receipt, activationPending) {
+  if (proof.schema_version === 1) return "prior-observed";
+  if (!matchesCodexPluginIdentity(proof, identity)) return "prior-observed";
+  if (marker !== null && Date.parse(proof.recorded_at) < Date.parse(marker.installed_at)) {
+    return "prior-observed";
+  }
+  if (activationPending) return "activation-pending";
+  if (receipt === null) return proof.activation_id === null ? "current" : "prior-observed";
+  return proof.activation_id === receipt.activation_id && Date.parse(proof.recorded_at) >= Date.parse(receipt.activated_at) ? "current" : "prior-observed";
+}
+function observeCodexSessionProof(projectDirectory, sessionId, environment = process.env) {
   const canonicalProject = canonicalProjectDirectory(projectDirectory);
+  const path = codexSessionProofPath(canonicalProject, sessionId, environment);
+  if (!existsSync(path)) {
+    return {
+      status: "missing",
+      plugin_version: null,
+      manifest_sha256: null,
+      recorded_at: null
+    };
+  }
   try {
-    const value = JSON.parse(
-      readFileSync2(codexSessionProofPath(canonicalProject, sessionId, environment), "utf8")
+    const value = readTrustedHookProofJson(path);
+    if (!validSessionProof(value, canonicalProject, sessionId)) throw new Error("Invalid proof.");
+    const identity = currentCodexPluginIdentity();
+    const marker = readActivationMarkerV2(environment, identity);
+    const receipt = readActivationReceipt(environment, identity);
+    const status = classifySessionProof(
+      value,
+      identity,
+      marker,
+      receipt,
+      activationIsPendingForIdentity(environment, identity)
     );
-    return value.schema_version === 1 && value.project_directory === canonicalProject && value.session_id === sessionId && typeof value.recorded_at === "string" && !Number.isNaN(Date.parse(value.recorded_at)) && matchesCodexPluginIdentity(value, currentCodexPluginIdentity());
+    return {
+      status,
+      plugin_version: value.plugin_version,
+      manifest_sha256: value.manifest_sha256,
+      recorded_at: value.recorded_at
+    };
   } catch {
-    return false;
+    return {
+      status: "untrusted",
+      plugin_version: null,
+      manifest_sha256: null,
+      recorded_at: null
+    };
+  }
+}
+function sessionProofProjectDirectories(root) {
+  try {
+    return readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.isSymbolicLink()).flatMap((projectEntry) => {
+      const path = nodePath2.join(root, projectEntry.name);
+      try {
+        if (sessionProofProjectFiles(path).length === 0) return [];
+        return [{ modifiedAt: lstatSync2(path).mtimeMs, path }];
+      } catch {
+        return [];
+      }
+    });
+  } catch {
+    return [];
+  }
+}
+function sessionProofProjectFiles(projectPath) {
+  try {
+    return readdirSync(projectPath, { withFileTypes: true }).flatMap((entry) => {
+      if (!entry.isFile() || entry.isSymbolicLink() || entry.name.startsWith(".") || !entry.name.endsWith(".json"))
+        return [];
+      const path = nodePath2.join(projectPath, entry.name);
+      try {
+        return [{ modifiedAt: lstatSync2(path).mtimeMs, path }];
+      } catch {
+        return [];
+      }
+    });
+  } catch {
+    return [];
+  }
+}
+function pruneCodexSessionProofs(retainedPath) {
+  const retainedProjectPath = nodePath2.dirname(retainedPath);
+  const files = sessionProofProjectFiles(retainedProjectPath).toSorted((left, right) => {
+    if (left.path === retainedPath) return -1;
+    if (right.path === retainedPath) return 1;
+    return right.modifiedAt - left.modifiedAt || left.path.localeCompare(right.path);
+  });
+  for (const stale of files.slice(MAX_RETAINED_SESSION_PROOFS_PER_PROJECT)) {
+    rmSync(stale.path, { force: true });
+  }
+  const root = nodePath2.dirname(retainedProjectPath);
+  const projects = sessionProofProjectDirectories(root).toSorted((left, right) => {
+    if (left.path === retainedProjectPath) return -1;
+    if (right.path === retainedProjectPath) return 1;
+    return right.modifiedAt - left.modifiedAt || left.path.localeCompare(right.path);
+  });
+  for (const stale of projects.slice(MAX_RETAINED_SESSION_PROOF_PROJECTS)) {
+    for (const proof of sessionProofProjectFiles(stale.path)) rmSync(proof.path, { force: true });
+    try {
+      rmdirSync(stale.path);
+    } catch {
+    }
   }
 }
 function writeAtomicJson(path, value, options = {}) {
@@ -423,10 +607,13 @@ function readActivationReceipt(environment, identity) {
     isActivationReceiptV1
   );
 }
+function activeCodexActivationId(marker, receipt) {
+  return receipt?.activation_id ?? marker?.activation_id ?? null;
+}
 function readIdentityBoundJson(path, identity, validator) {
   if (!existsSync(path)) return null;
   try {
-    const value = JSON.parse(readFileSync2(path, "utf8"));
+    const value = readTrustedHookProofJson(path);
     return validator(value) && matchesCodexPluginIdentity(value, identity) ? value : null;
   } catch {
     return null;
@@ -442,8 +629,8 @@ function readEventProof(path, expectedEvent) {
 }
 var MAX_CODEX_HOOK_PROOF_BYTES = 64 * 1024;
 function assertTrustedHookProofMetadata(metadata) {
-  const ownerMatches = process.getuid === void 0 || metadata.uid === process.getuid();
-  if (!metadata.isFile() || metadata.nlink !== 1 || !ownerMatches || (metadata.mode & 63) !== 0 || metadata.size > MAX_CODEX_HOOK_PROOF_BYTES) {
+  const posixPermissionsAreTrusted = process.getuid === void 0 || metadata.uid === process.getuid() && (metadata.mode & 63) === 0;
+  if (!metadata.isFile() || metadata.nlink !== 1 || !posixPermissionsAreTrusted || metadata.size > MAX_CODEX_HOOK_PROOF_BYTES) {
     throw new Error("Untrusted Codex hook proof file.");
   }
 }
@@ -496,15 +683,25 @@ function observeCodexHookProof(environment = process.env, binding) {
   const parsed = existing.map((item) => readEventProof(item.path, item.event));
   if (parsed.includes(null)) return malformedObservation();
   const validProofs = parsed.filter((proof) => proof !== null);
-  const identity = currentCodexPluginIdentity();
-  const activationId = readActivationMarkerV2(environment, identity)?.activation_id ?? readActivationReceipt(environment, identity)?.activation_id ?? null;
+  let identity;
+  try {
+    identity = currentCodexPluginIdentity();
+  } catch {
+    return malformedObservation();
+  }
+  const marker = readActivationMarkerV2(environment, identity);
+  const receipt = readActivationReceipt(environment, identity);
+  const activationId = activeCodexActivationId(marker, receipt);
+  if (activationIsPendingForIdentity(environment, identity)) {
+    return staleHookObservation(validProofs, activationId);
+  }
   const canonicalProject = binding === void 0 ? void 0 : canonicalProjectDirectory(binding.projectDirectory);
   const current = validProofs.filter(
-    (proof) => matchesCodexPluginIdentity(proof, identity) && (activationId === null || proof.schema_version !== 1 && proof.activation_id === activationId) && (binding === void 0 || proof.schema_version === 3 && proof.project_directory === canonicalProject && proof.session_id === binding.sessionId)
+    (proof) => matchesCodexPluginIdentity(proof, identity) && (activationId === null ? proof.activation_id === null : proof.activation_id === activationId) && (receipt === null || Date.parse(proof.recorded_at) >= Date.parse(receipt.activated_at)) && (binding === void 0 || proof.schema_version === 3 && proof.project_directory === canonicalProject && proof.session_id === binding.sessionId)
   );
   const events = current.map((proof) => proof.event);
   const missingEvents = CODEX_PLUGIN_HOOK_EVENTS.filter((event) => !events.includes(event));
-  const latest = current.toSorted((left, right) => right.recorded_at.localeCompare(left.recorded_at)).at(0);
+  const latest = current.toSorted((left, right) => Date.parse(right.recorded_at) - Date.parse(left.recorded_at)).at(0);
   let status = "stale";
   if (current.length === CODEX_PLUGIN_HOOK_EVENTS.length) status = "current";
   else if (current.length > 0) status = "partial";
@@ -518,6 +715,17 @@ function observeCodexHookProof(environment = process.env, binding) {
     missing_events: missingEvents
   };
 }
+function staleHookObservation(proofs, activationId) {
+  return {
+    status: "stale",
+    plugin_version: proofs[0]?.plugin_version ?? null,
+    manifest_sha256: proofs[0]?.manifest_sha256 ?? null,
+    recorded_at: null,
+    activation_id: activationId,
+    events: [],
+    missing_events: CODEX_PLUGIN_HOOK_EVENTS
+  };
+}
 function malformedObservation() {
   return {
     status: "malformed",
@@ -532,17 +740,17 @@ function malformedObservation() {
 function isCodexHookProof(value) {
   if (typeof value !== "object" || value === null) return false;
   const proof = value;
-  return [1, 2, 3].includes(proof.schema_version) && isCodexPluginHookEvent(proof.event) && typeof proof.plugin_version === "string" && typeof proof.manifest_sha256 === "string" && /^[\da-f]{64}$/u.test(proof.manifest_sha256) && (proof.schema_version === 1 || "activation_id" in proof && (typeof proof.activation_id === "string" || proof.activation_id === null)) && (proof.schema_version !== 3 || typeof proof.project_directory === "string" && typeof proof.session_id === "string" && proof.session_id.trim() !== "") && typeof proof.recorded_at === "string" && !Number.isNaN(Date.parse(proof.recorded_at));
+  return (proof.schema_version === 2 || proof.schema_version === 3) && isCodexPluginHookEvent(proof.event) && pluginVersionIsWellFormed(proof.plugin_version) && typeof proof.manifest_sha256 === "string" && SHA256_PATTERN.test(proof.manifest_sha256) && "activation_id" in proof && (typeof proof.activation_id === "string" || proof.activation_id === null) && (proof.schema_version !== 3 || typeof proof.project_directory === "string" && typeof proof.session_id === "string" && proof.session_id.trim() !== "") && typeof proof.recorded_at === "string" && !Number.isNaN(Date.parse(proof.recorded_at));
 }
 function isActivationMarkerV2(value) {
   if (typeof value !== "object" || value === null) return false;
   const marker = value;
-  return marker.schema_version === 2 && typeof marker.plugin_version === "string" && typeof marker.manifest_sha256 === "string" && /^[\da-f]{64}$/u.test(marker.manifest_sha256) && typeof marker.activation_id === "string" && typeof marker.installed_at === "string" && !Number.isNaN(Date.parse(marker.installed_at)) && (marker.host_observation === "observed" || marker.host_observation === "unavailable") && Array.isArray(marker.active_hosts) && marker.active_hosts.every(isCodexHostProcessIdentity);
+  return marker.schema_version === 2 && pluginVersionIsWellFormed(marker.plugin_version) && typeof marker.manifest_sha256 === "string" && SHA256_PATTERN.test(marker.manifest_sha256) && typeof marker.activation_id === "string" && typeof marker.installed_at === "string" && !Number.isNaN(Date.parse(marker.installed_at)) && (marker.host_observation === "observed" || marker.host_observation === "unavailable") && Array.isArray(marker.active_hosts) && marker.active_hosts.every(isCodexHostProcessIdentity) && (marker.host_observation === "observed" ? marker.active_hosts.length > 0 : marker.active_hosts.length === 0);
 }
 function isActivationReceiptV1(value) {
   if (typeof value !== "object" || value === null) return false;
   const receipt = value;
-  return receipt.schema_version === 1 && typeof receipt.plugin_version === "string" && typeof receipt.manifest_sha256 === "string" && /^[\da-f]{64}$/u.test(receipt.manifest_sha256) && typeof receipt.activation_id === "string" && typeof receipt.activated_at === "string" && !Number.isNaN(Date.parse(receipt.activated_at)) && isCodexHostProcessIdentity(receipt.host);
+  return receipt.schema_version === 1 && pluginVersionIsWellFormed(receipt.plugin_version) && typeof receipt.manifest_sha256 === "string" && SHA256_PATTERN.test(receipt.manifest_sha256) && typeof receipt.activation_id === "string" && typeof receipt.activated_at === "string" && !Number.isNaN(Date.parse(receipt.activated_at)) && isCodexHostProcessIdentity(receipt.host);
 }
 function isCodexHostProcessIdentity(value) {
   if (typeof value !== "object" || value === null) return false;
@@ -556,10 +764,12 @@ function isCodexPluginHookEvent(value) {
 export {
   legacyCommandIdentity,
   legacyCodexEventIsViable,
+  CODEX_PLUGIN_HOOK_EVENTS,
   codexActivationIsPending,
+  codexActivationMarkerIssue,
   writeCodexActivationMarker,
   recordCodexHookProof,
-  codexSessionProofIsCurrent,
+  observeCodexSessionProof,
   observeCodexHookProof
 };
-//# sourceMappingURL=chunk-SME5SU3O.js.map
+//# sourceMappingURL=chunk-CNBZ3S5U.js.map