safeword 0.78.3 → 0.78.4

package/codex-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "safeword",
-  "version": "0.78.3",
+  "version": "0.78.4",
   "description": "Safeword workflow guidance and gates for Codex.",
   "author": {
     "name": "Arcade AI"

package/codex-plugin/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex session-start --plugin-hook",
+            "command": "bunx --bun safeword@0.78.4 hook codex session-start --plugin-hook",
             "timeout": 120,
             "statusMessage": "Loading Safeword standing instructions"
           }
@@ -19,7 +19,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex pre-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.78.4 hook codex pre-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking Safeword edit gates"
           }
@@ -32,7 +32,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex post-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.78.4 hook codex post-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Surfacing Safeword post-tool context"
           }
@@ -45,7 +45,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex user-prompt-submit --plugin-hook",
+            "command": "bunx --bun safeword@0.78.4 hook codex user-prompt-submit --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking queued Safeword prompt context"
           }
@@ -58,7 +58,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex stop --plugin-hook",
+            "command": "bunx --bun safeword@0.78.4 hook codex stop --plugin-hook",
             "timeout": 600,
             "statusMessage": "Checking Safeword stop continuation"
           }

package/dist/{architecture-RQ377ZER.js → architecture-TCSDEFKH.js}

@@ -9,11 +9,7 @@ import {
   planSelfHealProject,
   selfHealProject,
   selfHealProjectPreservingProse
-} from "./chunk-LH2FAQTI.js";
-import {
-  discoverUnreadableWorkspaces,
-  extractMonorepoArchitectureSnapshot
-} from "./chunk-VZ5B2SIO.js";
+} from "./chunk-VJUPD7JI.js";
 import {
   GENERATED_ARCHITECTURE_FILENAME,
   isArchitectureDocumentEnforcementEnabled,
@@ -21,11 +17,15 @@ import {
   resolveGeneratedArchitecturePath,
   toRepoDirectory
 } from "./chunk-RVDXBHUG.js";
+import {
+  discoverUnreadableWorkspaces,
+  extractMonorepoArchitectureSnapshot
+} from "./chunk-VZ5B2SIO.js";
 import {
   readJson,
   writeJson
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-QLOUSTQE.js";
+import "./chunk-LUNHU6Z3.js";
 
 // src/commands/architecture.ts
 import { execFileSync } from "child_process";
@@ -650,4 +650,4 @@ export {
   architectureStage,
   architectureStaged
 };
-//# sourceMappingURL=architecture-RQ377ZER.js.map
+//# sourceMappingURL=architecture-TCSDEFKH.js.map

package/dist/{architecture-document-KS3CLSYN.js → architecture-document-L2ADWVMV.js}

@@ -7,11 +7,11 @@ import {
   selfHeal,
   selfHealProject,
   selfHealProjectPreservingProse
-} from "./chunk-LH2FAQTI.js";
-import "./chunk-VZ5B2SIO.js";
+} from "./chunk-VJUPD7JI.js";
 import "./chunk-RVDXBHUG.js";
+import "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-QLOUSTQE.js";
+import "./chunk-LUNHU6Z3.js";
 export {
   isSafewordOwned,
   isWouldChangeAction,
@@ -22,4 +22,4 @@ export {
   selfHealProject,
   selfHealProjectPreservingProse
 };
-//# sourceMappingURL=architecture-document-KS3CLSYN.js.map
+//# sourceMappingURL=architecture-document-L2ADWVMV.js.map

package/dist/{architecture-monorepo-NJWWU65G.js → architecture-monorepo-NKOQZBEY.js}

@@ -5,11 +5,11 @@ import {
   monorepoFingerprintOf
 } from "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-QLOUSTQE.js";
+import "./chunk-LUNHU6Z3.js";
 export {
   discoverUnreadableWorkspaces,
   discoverWorkspaces,
   extractMonorepoArchitectureSnapshot,
   monorepoFingerprintOf
 };
-//# sourceMappingURL=architecture-monorepo-NJWWU65G.js.map
+//# sourceMappingURL=architecture-monorepo-NKOQZBEY.js.map

package/dist/{boundary-OPTC2RVJ.js → boundary-QP2H7C46.js}

@@ -25,7 +25,7 @@ import {
 import {
   readFileSafe
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-QLOUSTQE.js";
+import "./chunk-LUNHU6Z3.js";
 
 // src/commands/boundary.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -630,4 +630,4 @@ function boundary(options) {
 export {
   boundary
 };
-//# sourceMappingURL=boundary-OPTC2RVJ.js.map
+//# sourceMappingURL=boundary-QP2H7C46.js.map

package/dist/{chunk-CFME47IY.js → chunk-73TABQRT.js}

@@ -15,15 +15,15 @@ import {
   writeClaudeMigrationAttention,
   writeClaudePluginMode
 } from "./chunk-WVA4Q6BX.js";
+import {
+  writeDurableFile,
+  writeDurableFileExclusive
+} from "./chunk-QOLHGAD5.js";
 import {
   cataloguedClaudeLegacyPaths,
   isAcceptedHistoricalFile,
   isAcceptedHistoricalHook
 } from "./chunk-HNCUIXDY.js";
-import {
-  writeDurableFile,
-  writeDurableFileExclusive
-} from "./chunk-QOLHGAD5.js";
 import {
   createResult
 } from "./chunk-FOYGZ4MK.js";
@@ -833,4 +833,4 @@ export {
   migrateClaudeLegacyAutomatically,
   recoverClaudeCleanup
 };
-//# sourceMappingURL=chunk-CFME47IY.js.map
+//# sourceMappingURL=chunk-73TABQRT.js.map

package/dist/{chunk-CNBZ3S5U.js → chunk-DBXX5K74.js}

@@ -1,3 +1,6 @@
+import {
+  writeDurableFile
+} from "./chunk-QOLHGAD5.js";
 import {
   SAFEWORD_SCHEMA
 } from "./chunk-IPTM5VE7.js";
@@ -7,9 +10,6 @@ import {
 import {
   CODEX_MIGRATION_SCHEMA
 } from "./chunk-AVAUUIDB.js";
-import {
-  writeDurableFile
-} from "./chunk-QOLHGAD5.js";
 
 // src/codex-plugin/legacy-authority.ts
 import { accessSync, constants, lstatSync, readFileSync } from "fs";
@@ -772,4 +772,4 @@ export {
   observeCodexSessionProof,
   observeCodexHookProof
 };
-//# sourceMappingURL=chunk-CNBZ3S5U.js.map
+//# sourceMappingURL=chunk-DBXX5K74.js.map

package/dist/{chunk-AXAGJLMP.js → chunk-G757F3EU.js}

@@ -1,6 +1,3 @@
-import {
-  CODEX_MIGRATION_SCHEMA
-} from "./chunk-AVAUUIDB.js";
 import {
   durableRename,
   writeDurableFile
@@ -8,6 +5,9 @@ import {
 import {
   CodexMigrationError
 } from "./chunk-CDWNLTHY.js";
+import {
+  CODEX_MIGRATION_SCHEMA
+} from "./chunk-AVAUUIDB.js";
 
 // src/codex-plugin/finalization.ts
 import { createHash, randomUUID } from "crypto";
@@ -492,4 +492,4 @@ export {
   observeCodexRecoveryPlan,
   applyCodexFinalization
 };
-//# sourceMappingURL=chunk-AXAGJLMP.js.map
+//# sourceMappingURL=chunk-G757F3EU.js.map

package/dist/{chunk-IDRLACDS.js → chunk-GFDINP7M.js}

@@ -39,6 +39,16 @@ import {
   hasLegacyClaudePluginMode,
   readClaudePluginMode
 } from "./chunk-WVA4Q6BX.js";
+import {
+  codexFinalizationIsComplete
+} from "./chunk-G757F3EU.js";
+import {
+  findDanglingDependencies,
+  findTicketsInCycles,
+  formatTicketReference,
+  inspectTicketIndexConflicts,
+  readTickets
+} from "./chunk-MVFHTUQ3.js";
 import {
   BDD_LANE_FILE_PATHS,
   BDD_LANE_SCRIPT,
@@ -51,16 +61,6 @@ import {
 import {
   getPythonToolDependencyGaps
 } from "./chunk-JSR3HXFT.js";
-import {
-  codexFinalizationIsComplete
-} from "./chunk-AXAGJLMP.js";
-import {
-  findDanglingDependencies,
-  findTicketsInCycles,
-  formatTicketReference,
-  inspectTicketIndexConflicts,
-  readTickets
-} from "./chunk-MVFHTUQ3.js";
 import {
   createResult
 } from "./chunk-FOYGZ4MK.js";
@@ -1088,4 +1088,4 @@ export {
   observeCursorProject,
   unselectedCursorFinding
 };
-//# sourceMappingURL=chunk-IDRLACDS.js.map
+//# sourceMappingURL=chunk-GFDINP7M.js.map

package/dist/{chunk-MZKTOX6X.js → chunk-KS2ESRQL.js}

@@ -3,10 +3,7 @@ import {
   observeCursorProject,
   projectLifecycleSchema,
   unselectedCursorFinding
-} from "./chunk-IDRLACDS.js";
-import {
-  detectPackageManager
-} from "./chunk-JSR3HXFT.js";
+} from "./chunk-GFDINP7M.js";
 import {
   legacyGlobalGuidanceDiagnostic,
   observeLegacyGlobalGuidance
@@ -18,6 +15,9 @@ import {
 import {
   DEFAULT_AGENT_INTEGRATIONS
 } from "./chunk-23BNG6FE.js";
+import {
+  detectPackageManager
+} from "./chunk-JSR3HXFT.js";
 import {
   combineEffects,
   combinedResultState,
@@ -78,11 +78,11 @@ async function observeLifecycleSurfaces(cwd, agents, environment = process.env)
   const project = await observeStatus(cwd, agents, environment);
   const surfaces = [{ name: "project", result: project }];
   if (agents.includes("claude")) {
-    const { observeClaudeStatus } = await import("./status-F5TFEIZ6.js");
+    const { observeClaudeStatus } = await import("./status-ATFG6Q3K.js");
     surfaces.push({ name: "claude", result: observeClaudeStatus(cwd) });
   }
   if (agents.includes("codex")) {
-    const { observeCodexMigration } = await import("./operations-OZKEQCS4.js");
+    const { observeCodexMigration } = await import("./operations-ODOA5CDG.js");
     surfaces.push({ name: "codex", result: observeCodexMigration(cwd, environment) });
   }
   if (agents.includes("cursor")) {
@@ -238,4 +238,4 @@ export {
   summarizeLifecycleStatus,
   observeLifecycleStatus
 };
-//# sourceMappingURL=chunk-MZKTOX6X.js.map
+//# sourceMappingURL=chunk-KS2ESRQL.js.map

package/dist/chunk-LFC6CMMX.js

@@ -0,0 +1,136 @@
+import {
+  SAFEWORD_SCHEMA
+} from "./chunk-IPTM5VE7.js";
+import {
+  CODEX_MIGRATION_SCHEMA
+} from "./chunk-AVAUUIDB.js";
+
+// src/codex-plugin/migration.ts
+function codexInstallRequiresMutation(observation) {
+  return observation.plugin.enabled !== true || observation.state === "plugin_update_required";
+}
+var CODEX_RESTART_ACTION = "Fully restart Codex, then resume this task";
+var CODEX_RESTART_INSTRUCTION = `${CODEX_RESTART_ACTION} and review the installed hooks with /hooks.`;
+var CODEX_RESTART_CONTEXT = "This Codex app may keep its loaded Safeword catalogue.";
+function codexPluginVersionMatchesPackage(plugin) {
+  return plugin.version === null || plugin.version === SAFEWORD_SCHEMA.version;
+}
+function pluginProtectionIsCurrent(facts) {
+  return !facts.activationPending && facts.plugin.enabled === true && codexPluginVersionMatchesPackage(facts.plugin) && facts.proof.status === "current" && (facts.plugin.version === null || facts.proof.plugin_version === facts.plugin.version);
+}
+function deriveCodexMigrationResult(facts) {
+  const hasLegacy = facts.legacyAssets.length > 0 || facts.legacyEvents.length > 0;
+  const protectedStatus = legacyProtection(facts, hasLegacy);
+  const state = migrationState(facts, hasLegacy);
+  const next = nextAction(state);
+  return {
+    schema_version: "2",
+    ok: state === "plugin",
+    state,
+    protected: facts.recoveryRequired ? "uncertain" : protectedStatus,
+    changed: false,
+    plugin: facts.plugin,
+    proof: facts.proof,
+    legacy: {
+      events: facts.legacyEvents,
+      viable_events: facts.viableLegacyEvents,
+      assets: facts.legacyAssets
+    },
+    effects: { files: [] },
+    errors: [],
+    next_actions: next === void 0 ? [] : [next]
+  };
+}
+var MIGRATION_STATE_RULES = [
+  { state: "recovery_required", matches: (facts) => facts.recoveryRequired },
+  {
+    state: "plugin_setup_required",
+    matches: (facts) => facts.finalized && facts.plugin.enabled !== true
+  },
+  {
+    state: "plugin_disabled",
+    matches: (facts) => facts.plugin.installed && facts.plugin.enabled === false
+  },
+  {
+    state: "plugin_update_required",
+    matches: (facts) => facts.plugin.enabled === true && !codexPluginVersionMatchesPackage(facts.plugin)
+  },
+  {
+    state: "plugin_installed_app_restart_required",
+    matches: (facts) => facts.activationPending && facts.plugin.enabled === true
+  },
+  {
+    state: "plugin_enabled_hook_unproven",
+    matches: (facts) => facts.plugin.enabled === true && !pluginProtectionIsCurrent(facts)
+  },
+  {
+    state: "compatibility",
+    matches: (facts, hasLegacy) => pluginProtectionIsCurrent(facts) && hasLegacy
+  },
+  {
+    state: "plugin",
+    matches: (facts) => pluginProtectionIsCurrent(facts)
+  },
+  { state: "legacy", matches: (_facts, hasLegacy) => hasLegacy }
+];
+function migrationState(facts, hasLegacy) {
+  return MIGRATION_STATE_RULES.find((rule) => rule.matches(facts, hasLegacy))?.state ?? "not_configured";
+}
+function legacyProtection(facts, hasLegacy) {
+  if (pluginProtectionIsCurrent(facts)) return "protected";
+  if (!hasLegacy || facts.viableLegacyEvents.length === 0) return "unprotected";
+  return facts.viableLegacyEvents.length === facts.legacyEvents.length ? "protected" : "partial";
+}
+var NEXT_COMMANDS = {
+  recovery_required: "safeword codex recover",
+  compatibility: "safeword codex migrate --finalize",
+  plugin: void 0,
+  plugin_installed_app_restart_required: void 0,
+  plugin_enabled_hook_unproven: void 0,
+  plugin_setup_required: "safeword codex migrate",
+  plugin_disabled: "safeword codex migrate",
+  plugin_update_required: "safeword codex migrate",
+  legacy: "safeword codex migrate",
+  not_configured: "safeword codex migrate"
+};
+function nextAction(state) {
+  if (state === "plugin_installed_app_restart_required" || state === "plugin_enabled_hook_unproven") {
+    return {
+      kind: "human",
+      instruction: CODEX_RESTART_INSTRUCTION,
+      mutates: false,
+      requires_human: true
+    };
+  }
+  const command = NEXT_COMMANDS[state];
+  return command === void 0 ? void 0 : { command, mutates: true, requires_human: true };
+}
+function renderCodexMigrationHuman(result) {
+  const lines = [`Codex migration: ${result.state}`, `Protection: ${result.protected}`];
+  if (result.state === "plugin_setup_required") {
+    lines.push(`Setup: ${CODEX_MIGRATION_SCHEMA.paths.bootstrapSkill}`);
+  } else if (result.state === "plugin_installed_app_restart_required" || result.state === "plugin_enabled_hook_unproven") {
+    lines.push(CODEX_RESTART_CONTEXT);
+  }
+  const next = result.next_actions[0];
+  if (next !== void 0) {
+    lines.push(`Next: ${"command" in next ? next.command : next.instruction}`);
+  }
+  return `${lines.join("\n")}
+`;
+}
+function codexMigrationExitCode(result) {
+  if (result.errors.length > 0) return 1;
+  return result.ok ? 0 : 2;
+}
+
+export {
+  codexInstallRequiresMutation,
+  CODEX_RESTART_ACTION,
+  CODEX_RESTART_CONTEXT,
+  codexPluginVersionMatchesPackage,
+  deriveCodexMigrationResult,
+  renderCodexMigrationHuman,
+  codexMigrationExitCode
+};
+//# sourceMappingURL=chunk-LFC6CMMX.js.map

package/dist/chunk-LFC6CMMX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/codex-plugin/migration.ts"],"sourcesContent":["import { SAFEWORD_SCHEMA } from '../schema.js';\nimport { CODEX_MIGRATION_SCHEMA } from './inventory.js';\nimport type { CodexHookProofObservation } from './profile-proof.js';\n\ntype CodexMigrationState =\n  | 'recovery_required'\n  | 'plugin_setup_required'\n  | 'plugin_disabled'\n  | 'plugin_update_required'\n  | 'legacy'\n  | 'plugin_installed_app_restart_required'\n  | 'plugin_enabled_hook_unproven'\n  | 'compatibility'\n  | 'plugin'\n  | 'not_configured';\n\nexport interface CodexPluginObservation {\n  installed: boolean;\n  enabled: boolean | null;\n  version: string | null;\n  observation: 'observed' | 'unknown';\n}\n\nexport interface CodexMigrationResultV2 {\n  schema_version: '2';\n  ok: boolean;\n  state: CodexMigrationState;\n  /** Protection availability; interpret with `state` to identify its provider or absence. */\n  protected: 'protected' | 'partial' | 'unprotected' | 'uncertain';\n  changed: boolean;\n  plugin: CodexPluginObservation;\n  proof: CodexHookProofObservation;\n  legacy: { events: string[]; viable_events: string[]; assets: string[] };\n  effects: { files: { path: string; action: 'create' | 'update' | 'remove' | 'restore' }[] };\n  errors: { code: string; message: string; retryable: boolean }[];\n  next_actions: (\n    | { command: string; mutates: boolean; requires_human: boolean }\n    | {\n        kind: 'human';\n        instruction: string;\n        mutates: false;\n        requires_human: true;\n      }\n  )[];\n}\n\nexport interface CodexMigrationFacts {\n  plugin: CodexPluginObservation;\n  proof: CodexHookProofObservation;\n  legacyAssets: string[];\n  legacyEvents: string[];\n  viableLegacyEvents: string[];\n  finalized: boolean;\n  recoveryRequired: boolean;\n  activationPending: boolean;\n}\n\nexport function codexInstallRequiresMutation(observation: CodexMigrationResultV2): boolean {\n  return observation.plugin.enabled !== true || observation.state === 'plugin_update_required';\n}\n\nexport const CODEX_RESTART_ACTION = 'Fully restart Codex, then resume this task';\nconst CODEX_RESTART_INSTRUCTION = `${CODEX_RESTART_ACTION} and review the installed hooks with /hooks.`;\n\n/**\n * Why the app may still be stale. The instruction that resolves it travels as a\n * typed human next action, so renderers must not repeat it here — a message and\n * a `Next:` line carrying the same sentence reads as a stutter, not as emphasis.\n */\nexport const CODEX_RESTART_CONTEXT = 'This Codex app may keep its loaded Safeword catalogue.';\n\nexport function codexPluginVersionMatchesPackage(plugin: CodexPluginObservation): boolean {\n  // Older Codex clients may omit nullable catalog version metadata. In that\n  // case, current execution proof still binds protection to both the exact\n  // packaged plugin version and hook-manifest digest.\n  return plugin.version === null || plugin.version === SAFEWORD_SCHEMA.version;\n}\n\nfunction pluginProtectionIsCurrent(facts: CodexMigrationFacts): boolean {\n  return (\n    !facts.activationPending &&\n    facts.plugin.enabled === true &&\n    codexPluginVersionMatchesPackage(facts.plugin) &&\n    facts.proof.status === 'current' &&\n    (facts.plugin.version === null || facts.proof.plugin_version === facts.plugin.version)\n  );\n}\n\nexport function deriveCodexMigrationResult(facts: CodexMigrationFacts): CodexMigrationResultV2 {\n  const hasLegacy = facts.legacyAssets.length > 0 || facts.legacyEvents.length > 0;\n  const protectedStatus = legacyProtection(facts, hasLegacy);\n  const state = migrationState(facts, hasLegacy);\n  const next = nextAction(state);\n\n  return {\n    schema_version: '2',\n    ok: state === 'plugin',\n    state,\n    protected: facts.recoveryRequired ? 'uncertain' : protectedStatus,\n    changed: false,\n    plugin: facts.plugin,\n    proof: facts.proof,\n    legacy: {\n      events: facts.legacyEvents,\n      viable_events: facts.viableLegacyEvents,\n      assets: facts.legacyAssets,\n    },\n    effects: { files: [] },\n    errors: [],\n    next_actions: next === undefined ? [] : [next],\n  };\n}\n\nconst MIGRATION_STATE_RULES: readonly {\n  state: CodexMigrationState;\n  matches: (facts: CodexMigrationFacts, hasLegacy: boolean) => boolean;\n}[] = [\n  { state: 'recovery_required', matches: facts => facts.recoveryRequired },\n  {\n    state: 'plugin_setup_required',\n    matches: facts => facts.finalized && facts.plugin.enabled !== true,\n  },\n  {\n    state: 'plugin_disabled',\n    matches: facts => facts.plugin.installed && facts.plugin.enabled === false,\n  },\n  {\n    state: 'plugin_update_required',\n    matches: facts =>\n      facts.plugin.enabled === true && !codexPluginVersionMatchesPackage(facts.plugin),\n  },\n  {\n    state: 'plugin_installed_app_restart_required',\n    matches: facts => facts.activationPending && facts.plugin.enabled === true,\n  },\n  {\n    state: 'plugin_enabled_hook_unproven',\n    matches: facts => facts.plugin.enabled === true && !pluginProtectionIsCurrent(facts),\n  },\n  {\n    state: 'compatibility',\n    matches: (facts, hasLegacy) => pluginProtectionIsCurrent(facts) && hasLegacy,\n  },\n  {\n    state: 'plugin',\n    matches: facts => pluginProtectionIsCurrent(facts),\n  },\n  { state: 'legacy', matches: (_facts, hasLegacy) => hasLegacy },\n];\n\nfunction migrationState(facts: CodexMigrationFacts, hasLegacy: boolean): CodexMigrationState {\n  return (\n    MIGRATION_STATE_RULES.find(rule => rule.matches(facts, hasLegacy))?.state ?? 'not_configured'\n  );\n}\n\nfunction legacyProtection(\n  facts: CodexMigrationFacts,\n  hasLegacy: boolean,\n): CodexMigrationResultV2['protected'] {\n  if (pluginProtectionIsCurrent(facts)) return 'protected';\n  if (!hasLegacy || facts.viableLegacyEvents.length === 0) return 'unprotected';\n  return facts.viableLegacyEvents.length === facts.legacyEvents.length ? 'protected' : 'partial';\n}\n\nconst NEXT_COMMANDS = {\n  recovery_required: 'safeword codex recover',\n  compatibility: 'safeword codex migrate --finalize',\n  plugin: undefined,\n  plugin_installed_app_restart_required: undefined,\n  plugin_enabled_hook_unproven: undefined,\n  plugin_setup_required: 'safeword codex migrate',\n  plugin_disabled: 'safeword codex migrate',\n  plugin_update_required: 'safeword codex migrate',\n  legacy: 'safeword codex migrate',\n  not_configured: 'safeword codex migrate',\n} as const satisfies Readonly<Record<CodexMigrationState, string | undefined>>;\n\nfunction nextAction(\n  state: CodexMigrationState,\n): CodexMigrationResultV2['next_actions'][number] | undefined {\n  if (\n    state === 'plugin_installed_app_restart_required' ||\n    state === 'plugin_enabled_hook_unproven'\n  ) {\n    return {\n      kind: 'human',\n      instruction: CODEX_RESTART_INSTRUCTION,\n      mutates: false,\n      requires_human: true,\n    };\n  }\n  const command = NEXT_COMMANDS[state];\n  return command === undefined ? undefined : { command, mutates: true, requires_human: true };\n}\n\nexport function renderCodexMigrationHuman(result: CodexMigrationResultV2): string {\n  const lines = [`Codex migration: ${result.state}`, `Protection: ${result.protected}`];\n  if (result.state === 'plugin_setup_required') {\n    lines.push(`Setup: ${CODEX_MIGRATION_SCHEMA.paths.bootstrapSkill}`);\n  } else if (\n    result.state === 'plugin_installed_app_restart_required' ||\n    result.state === 'plugin_enabled_hook_unproven'\n  ) {\n    lines.push(CODEX_RESTART_CONTEXT);\n  }\n  const next = result.next_actions[0];\n  if (next !== undefined) {\n    lines.push(`Next: ${'command' in next ? next.command : next.instruction}`);\n  }\n  return `${lines.join('\\n')}\\n`;\n}\n\nexport function codexMigrationExitCode(result: CodexMigrationResultV2): 0 | 1 | 2 {\n  if (result.errors.length > 0) return 1;\n  return result.ok ? 0 : 2;\n}\n"],"mappings":";;;;;;;;AAyDO,SAAS,6BAA6B,aAA8C;AACzF,SAAO,YAAY,OAAO,YAAY,QAAQ,YAAY,UAAU;AACtE;AAEO,IAAM,uBAAuB;AACpC,IAAM,4BAA4B,GAAG,oBAAoB;AAOlD,IAAM,wBAAwB;AAE9B,SAAS,iCAAiC,QAAyC;AAIxF,SAAO,OAAO,YAAY,QAAQ,OAAO,YAAY,gBAAgB;AACvE;AAEA,SAAS,0BAA0B,OAAqC;AACtE,SACE,CAAC,MAAM,qBACP,MAAM,OAAO,YAAY,QACzB,iCAAiC,MAAM,MAAM,KAC7C,MAAM,MAAM,WAAW,cACtB,MAAM,OAAO,YAAY,QAAQ,MAAM,MAAM,mBAAmB,MAAM,OAAO;AAElF;AAEO,SAAS,2BAA2B,OAAoD;AAC7F,QAAM,YAAY,MAAM,aAAa,SAAS,KAAK,MAAM,aAAa,SAAS;AAC/E,QAAM,kBAAkB,iBAAiB,OAAO,SAAS;AACzD,QAAM,QAAQ,eAAe,OAAO,SAAS;AAC7C,QAAM,OAAO,WAAW,KAAK;AAE7B,SAAO;AAAA,IACL,gBAAgB;AAAA,IAChB,IAAI,UAAU;AAAA,IACd;AAAA,IACA,WAAW,MAAM,mBAAmB,cAAc;AAAA,IAClD,SAAS;AAAA,IACT,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,QAAQ;AAAA,MACN,QAAQ,MAAM;AAAA,MACd,eAAe,MAAM;AAAA,MACrB,QAAQ,MAAM;AAAA,IAChB;AAAA,IACA,SAAS,EAAE,OAAO,CAAC,EAAE;AAAA,IACrB,QAAQ,CAAC;AAAA,IACT,cAAc,SAAS,SAAY,CAAC,IAAI,CAAC,IAAI;AAAA,EAC/C;AACF;AAEA,IAAM,wBAGA;AAAA,EACJ,EAAE,OAAO,qBAAqB,SAAS,WAAS,MAAM,iBAAiB;AAAA,EACvE;AAAA,IACE,OAAO;AAAA,IACP,SAAS,WAAS,MAAM,aAAa,MAAM,OAAO,YAAY;AAAA,EAChE;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,SAAS,WAAS,MAAM,OAAO,aAAa,MAAM,OAAO,YAAY;AAAA,EACvE;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,SAAS,WACP,MAAM,OAAO,YAAY,QAAQ,CAAC,iCAAiC,MAAM,MAAM;AAAA,EACnF;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,SAAS,WAAS,MAAM,qBAAqB,MAAM,OAAO,YAAY;AAAA,EACxE;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,SAAS,WAAS,MAAM,OAAO,YAAY,QAAQ,CAAC,0BAA0B,KAAK;AAAA,EACrF;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,SAAS,CAAC,OAAO,cAAc,0BAA0B,KAAK,KAAK;AAAA,EACrE;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,SAAS,WAAS,0BAA0B,KAAK;AAAA,EACnD;AAAA,EACA,EAAE,OAAO,UAAU,SAAS,CAAC,QAAQ,cAAc,UAAU;AAC/D;AAEA,SAAS,eAAe,OAA4B,WAAyC;AAC3F,SACE,sBAAsB,KAAK,UAAQ,KAAK,QAAQ,OAAO,SAAS,CAAC,GAAG,SAAS;AAEjF;AAEA,SAAS,iBACP,OACA,WACqC;AACrC,MAAI,0BAA0B,KAAK,EAAG,QAAO;AAC7C,MAAI,CAAC,aAAa,MAAM,mBAAmB,WAAW,EAAG,QAAO;AAChE,SAAO,MAAM,mBAAmB,WAAW,MAAM,aAAa,SAAS,cAAc;AACvF;AAEA,IAAM,gBAAgB;AAAA,EACpB,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,uCAAuC;AAAA,EACvC,8BAA8B;AAAA,EAC9B,uBAAuB;AAAA,EACvB,iBAAiB;AAAA,EACjB,wBAAwB;AAAA,EACxB,QAAQ;AAAA,EACR,gBAAgB;AAClB;AAEA,SAAS,WACP,OAC4D;AAC5D,MACE,UAAU,2CACV,UAAU,gCACV;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,MACb,SAAS;AAAA,MACT,gBAAgB;AAAA,IAClB;AAAA,EACF;AACA,QAAM,UAAU,cAAc,KAAK;AACnC,SAAO,YAAY,SAAY,SAAY,EAAE,SAAS,SAAS,MAAM,gBAAgB,KAAK;AAC5F;AAEO,SAAS,0BAA0B,QAAwC;AAChF,QAAM,QAAQ,CAAC,oBAAoB,OAAO,KAAK,IAAI,eAAe,OAAO,SAAS,EAAE;AACpF,MAAI,OAAO,UAAU,yBAAyB;AAC5C,UAAM,KAAK,UAAU,uBAAuB,MAAM,cAAc,EAAE;AAAA,EACpE,WACE,OAAO,UAAU,2CACjB,OAAO,UAAU,gCACjB;AACA,UAAM,KAAK,qBAAqB;AAAA,EAClC;AACA,QAAM,OAAO,OAAO,aAAa,CAAC;AAClC,MAAI,SAAS,QAAW;AACtB,UAAM,KAAK,SAAS,aAAa,OAAO,KAAK,UAAU,KAAK,WAAW,EAAE;AAAA,EAC3E;AACA,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC5B;AAEO,SAAS,uBAAuB,QAA2C;AAChF,MAAI,OAAO,OAAO,SAAS,EAAG,QAAO;AACrC,SAAO,OAAO,KAAK,IAAI;AACzB;","names":[]}

package/dist/{chunk-QLOUSTQE.js → chunk-LUNHU6Z3.js}

@@ -1,7 +1,7 @@
 // <define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>
-var define_SAFEWORD_RELAY_BUILD_ATTESTATION_default = { ancestorPairs: [], artifacts: {}, buildCommit: "340c251a38b0e452074e97c17673f3932a4ad8d5", enabled: false, manifestBase64: "ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K", manifestSha256: "946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262" };
+var define_SAFEWORD_RELAY_BUILD_ATTESTATION_default = { ancestorPairs: [], artifacts: {}, buildCommit: "f1d216fe0dcd256c63531665295f8f3247be1ce7", enabled: false, manifestBase64: "ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K", manifestSha256: "946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262" };
 
 export {
   define_SAFEWORD_RELAY_BUILD_ATTESTATION_default
 };
-//# sourceMappingURL=chunk-QLOUSTQE.js.map
+//# sourceMappingURL=chunk-LUNHU6Z3.js.map

package/dist/{chunk-QLOUSTQE.js.map → chunk-LUNHU6Z3.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["<define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>"],"sourcesContent":["{\"ancestorPairs\":[],\"artifacts\":{},\"buildCommit\":\"340c251a38b0e452074e97c17673f3932a4ad8d5\",\"enabled\":false,\"manifestBase64\":\"ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K\",\"manifestSha256\":\"946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262\"}"],"mappings":";AAAA,wDAAC,eAAgB,CAAC,GAAE,WAAY,CAAC,GAAE,aAAc,4CAA2C,SAAU,OAAM,gBAAiB,wDAAuD,gBAAiB,mEAAkE;","names":[]}
+{"version":3,"sources":["<define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>"],"sourcesContent":["{\"ancestorPairs\":[],\"artifacts\":{},\"buildCommit\":\"f1d216fe0dcd256c63531665295f8f3247be1ce7\",\"enabled\":false,\"manifestBase64\":\"ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K\",\"manifestSha256\":\"946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262\"}"],"mappings":";AAAA,wDAAC,eAAgB,CAAC,GAAE,WAAY,CAAC,GAAE,aAAc,4CAA2C,SAAU,OAAM,gBAAiB,wDAAuD,gBAAiB,mEAAkE;","names":[]}

package/dist/{chunk-76XHADUG.js → chunk-RQ7RZYNB.js}

@@ -3,15 +3,15 @@ import {
   createProjectContext,
   reconcile
 } from "./chunk-2XR7J5WL.js";
+import {
+  onlineRequired
+} from "./chunk-QAHJSG53.js";
 import {
   SAFEWORD_SCHEMA
 } from "./chunk-IPTM5VE7.js";
 import {
   uninstallDependencies
 } from "./chunk-JSR3HXFT.js";
-import {
-  onlineRequired
-} from "./chunk-QAHJSG53.js";
 import {
   createPlan,
   isPlanIdentity,
@@ -363,4 +363,4 @@ export {
   diffFileSnapshots,
   removeProject
 };
-//# sourceMappingURL=chunk-76XHADUG.js.map
+//# sourceMappingURL=chunk-RQ7RZYNB.js.map

package/dist/{chunk-LH2FAQTI.js → chunk-VJUPD7JI.js}

@@ -1,3 +1,7 @@
+import {
+  GENERATED_ARCHITECTURE_FILENAME,
+  resolveGeneratedArchitecturePath
+} from "./chunk-RVDXBHUG.js";
 import {
   PURPOSE_PLACEHOLDER,
   dependencySectionNames,
@@ -9,10 +13,6 @@ import {
   readDelimitedBlock,
   readPyprojectDependencies
 } from "./chunk-VZ5B2SIO.js";
-import {
-  GENERATED_ARCHITECTURE_FILENAME,
-  resolveGeneratedArchitecturePath
-} from "./chunk-RVDXBHUG.js";
 import {
   readJson
 } from "./chunk-HF3DXZEA.js";
@@ -543,4 +543,4 @@ export {
   selfHealProjectPreservingProse,
   planSelfHealProject
 };
-//# sourceMappingURL=chunk-LH2FAQTI.js.map
+//# sourceMappingURL=chunk-VJUPD7JI.js.map