safeword 0.78.3 → 0.78.5

package/codex-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "safeword",
-  "version": "0.78.3",
+  "version": "0.78.5",
   "description": "Safeword workflow guidance and gates for Codex.",
   "author": {
     "name": "Arcade AI"

package/codex-plugin/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex session-start --plugin-hook",
+            "command": "bunx --bun safeword@0.78.5 hook codex session-start --plugin-hook",
             "timeout": 120,
             "statusMessage": "Loading Safeword standing instructions"
           }
@@ -19,7 +19,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex pre-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.78.5 hook codex pre-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking Safeword edit gates"
           }
@@ -32,7 +32,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex post-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.78.5 hook codex post-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Surfacing Safeword post-tool context"
           }
@@ -45,7 +45,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex user-prompt-submit --plugin-hook",
+            "command": "bunx --bun safeword@0.78.5 hook codex user-prompt-submit --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking queued Safeword prompt context"
           }
@@ -58,7 +58,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.3 hook codex stop --plugin-hook",
+            "command": "bunx --bun safeword@0.78.5 hook codex stop --plugin-hook",
             "timeout": 600,
             "statusMessage": "Checking Safeword stop continuation"
           }

package/dist/{architecture-RQ377ZER.js → architecture-DUETRLYE.js}

@@ -9,11 +9,7 @@ import {
   planSelfHealProject,
   selfHealProject,
   selfHealProjectPreservingProse
-} from "./chunk-LH2FAQTI.js";
-import {
-  discoverUnreadableWorkspaces,
-  extractMonorepoArchitectureSnapshot
-} from "./chunk-VZ5B2SIO.js";
+} from "./chunk-VJUPD7JI.js";
 import {
   GENERATED_ARCHITECTURE_FILENAME,
   isArchitectureDocumentEnforcementEnabled,
@@ -21,11 +17,15 @@ import {
   resolveGeneratedArchitecturePath,
   toRepoDirectory
 } from "./chunk-RVDXBHUG.js";
+import {
+  discoverUnreadableWorkspaces,
+  extractMonorepoArchitectureSnapshot
+} from "./chunk-VZ5B2SIO.js";
 import {
   readJson,
   writeJson
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-QLOUSTQE.js";
+import "./chunk-OWNUJWUX.js";
 
 // src/commands/architecture.ts
 import { execFileSync } from "child_process";
@@ -650,4 +650,4 @@ export {
   architectureStage,
   architectureStaged
 };
-//# sourceMappingURL=architecture-RQ377ZER.js.map
+//# sourceMappingURL=architecture-DUETRLYE.js.map

package/dist/{architecture-document-KS3CLSYN.js → architecture-document-5ZKHSXEK.js}

@@ -7,11 +7,11 @@ import {
   selfHeal,
   selfHealProject,
   selfHealProjectPreservingProse
-} from "./chunk-LH2FAQTI.js";
-import "./chunk-VZ5B2SIO.js";
+} from "./chunk-VJUPD7JI.js";
 import "./chunk-RVDXBHUG.js";
+import "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-QLOUSTQE.js";
+import "./chunk-OWNUJWUX.js";
 export {
   isSafewordOwned,
   isWouldChangeAction,
@@ -22,4 +22,4 @@ export {
   selfHealProject,
   selfHealProjectPreservingProse
 };
-//# sourceMappingURL=architecture-document-KS3CLSYN.js.map
+//# sourceMappingURL=architecture-document-5ZKHSXEK.js.map

package/dist/{architecture-monorepo-NJWWU65G.js → architecture-monorepo-W5S7OHPU.js}

@@ -5,11 +5,11 @@ import {
   monorepoFingerprintOf
 } from "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-QLOUSTQE.js";
+import "./chunk-OWNUJWUX.js";
 export {
   discoverUnreadableWorkspaces,
   discoverWorkspaces,
   extractMonorepoArchitectureSnapshot,
   monorepoFingerprintOf
 };
-//# sourceMappingURL=architecture-monorepo-NJWWU65G.js.map
+//# sourceMappingURL=architecture-monorepo-W5S7OHPU.js.map

package/dist/{boundary-OPTC2RVJ.js → boundary-3KVA2ENZ.js}

@@ -25,7 +25,7 @@ import {
 import {
   readFileSafe
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-QLOUSTQE.js";
+import "./chunk-OWNUJWUX.js";
 
 // src/commands/boundary.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -630,4 +630,4 @@ function boundary(options) {
 export {
   boundary
 };
-//# sourceMappingURL=boundary-OPTC2RVJ.js.map
+//# sourceMappingURL=boundary-3KVA2ENZ.js.map

package/dist/{chunk-CFME47IY.js → chunk-73TABQRT.js}

@@ -15,15 +15,15 @@ import {
   writeClaudeMigrationAttention,
   writeClaudePluginMode
 } from "./chunk-WVA4Q6BX.js";
+import {
+  writeDurableFile,
+  writeDurableFileExclusive
+} from "./chunk-QOLHGAD5.js";
 import {
   cataloguedClaudeLegacyPaths,
   isAcceptedHistoricalFile,
   isAcceptedHistoricalHook
 } from "./chunk-HNCUIXDY.js";
-import {
-  writeDurableFile,
-  writeDurableFileExclusive
-} from "./chunk-QOLHGAD5.js";
 import {
   createResult
 } from "./chunk-FOYGZ4MK.js";
@@ -833,4 +833,4 @@ export {
   migrateClaudeLegacyAutomatically,
   recoverClaudeCleanup
 };
-//# sourceMappingURL=chunk-CFME47IY.js.map
+//# sourceMappingURL=chunk-73TABQRT.js.map

package/dist/{chunk-CNBZ3S5U.js → chunk-DBXX5K74.js}

@@ -1,3 +1,6 @@
+import {
+  writeDurableFile
+} from "./chunk-QOLHGAD5.js";
 import {
   SAFEWORD_SCHEMA
 } from "./chunk-IPTM5VE7.js";
@@ -7,9 +10,6 @@ import {
 import {
   CODEX_MIGRATION_SCHEMA
 } from "./chunk-AVAUUIDB.js";
-import {
-  writeDurableFile
-} from "./chunk-QOLHGAD5.js";
 
 // src/codex-plugin/legacy-authority.ts
 import { accessSync, constants, lstatSync, readFileSync } from "fs";
@@ -772,4 +772,4 @@ export {
   observeCodexSessionProof,
   observeCodexHookProof
 };
-//# sourceMappingURL=chunk-CNBZ3S5U.js.map
+//# sourceMappingURL=chunk-DBXX5K74.js.map

package/dist/{chunk-AXAGJLMP.js → chunk-G757F3EU.js}

@@ -1,6 +1,3 @@
-import {
-  CODEX_MIGRATION_SCHEMA
-} from "./chunk-AVAUUIDB.js";
 import {
   durableRename,
   writeDurableFile
@@ -8,6 +5,9 @@ import {
 import {
   CodexMigrationError
 } from "./chunk-CDWNLTHY.js";
+import {
+  CODEX_MIGRATION_SCHEMA
+} from "./chunk-AVAUUIDB.js";
 
 // src/codex-plugin/finalization.ts
 import { createHash, randomUUID } from "crypto";
@@ -492,4 +492,4 @@ export {
   observeCodexRecoveryPlan,
   applyCodexFinalization
 };
-//# sourceMappingURL=chunk-AXAGJLMP.js.map
+//# sourceMappingURL=chunk-G757F3EU.js.map

package/dist/{chunk-IDRLACDS.js → chunk-GFDINP7M.js}

@@ -39,6 +39,16 @@ import {
   hasLegacyClaudePluginMode,
   readClaudePluginMode
 } from "./chunk-WVA4Q6BX.js";
+import {
+  codexFinalizationIsComplete
+} from "./chunk-G757F3EU.js";
+import {
+  findDanglingDependencies,
+  findTicketsInCycles,
+  formatTicketReference,
+  inspectTicketIndexConflicts,
+  readTickets
+} from "./chunk-MVFHTUQ3.js";
 import {
   BDD_LANE_FILE_PATHS,
   BDD_LANE_SCRIPT,
@@ -51,16 +61,6 @@ import {
 import {
   getPythonToolDependencyGaps
 } from "./chunk-JSR3HXFT.js";
-import {
-  codexFinalizationIsComplete
-} from "./chunk-AXAGJLMP.js";
-import {
-  findDanglingDependencies,
-  findTicketsInCycles,
-  formatTicketReference,
-  inspectTicketIndexConflicts,
-  readTickets
-} from "./chunk-MVFHTUQ3.js";
 import {
   createResult
 } from "./chunk-FOYGZ4MK.js";
@@ -1088,4 +1088,4 @@ export {
   observeCursorProject,
   unselectedCursorFinding
 };
-//# sourceMappingURL=chunk-IDRLACDS.js.map
+//# sourceMappingURL=chunk-GFDINP7M.js.map

package/dist/{chunk-CRGPYC35.js → chunk-OGMP5ANP.js}

@@ -4,13 +4,7 @@ import {
   legacyCommandIdentity,
   observeCodexHookProof,
   writeCodexActivationMarker
-} from "./chunk-CNBZ3S5U.js";
-import {
-  SAFEWORD_SCHEMA
-} from "./chunk-IPTM5VE7.js";
-import {
-  parse
-} from "./chunk-JSR3HXFT.js";
+} from "./chunk-DBXX5K74.js";
 import {
   legacyGlobalGuidanceDiagnostic,
   observeLegacyGlobalGuidance
@@ -22,10 +16,7 @@ import {
   recoverCodexFinalization,
   resolveCodexFinalizationConfirmation,
   validateCodexFinalizationPaths
-} from "./chunk-AXAGJLMP.js";
-import {
-  CODEX_MIGRATION_SCHEMA
-} from "./chunk-AVAUUIDB.js";
+} from "./chunk-G757F3EU.js";
 import {
   compareVersions,
   isSafePackageVersion
@@ -33,9 +24,26 @@ import {
 import {
   writeDurableFile
 } from "./chunk-QOLHGAD5.js";
+import {
+  CODEX_RESTART_CONTEXT,
+  CODEX_REVIEW_THEN_RESTART_ACTION,
+  codexMigrationExitCode,
+  codexPluginVersionMatchesPackage,
+  deriveCodexMigrationResult,
+  renderCodexMigrationHuman
+} from "./chunk-SOO72SJT.js";
+import {
+  SAFEWORD_SCHEMA
+} from "./chunk-IPTM5VE7.js";
+import {
+  parse
+} from "./chunk-JSR3HXFT.js";
 import {
   CodexMigrationError
 } from "./chunk-CDWNLTHY.js";
+import {
+  CODEX_MIGRATION_SCHEMA
+} from "./chunk-AVAUUIDB.js";
 import {
   createResult
 } from "./chunk-FOYGZ4MK.js";
@@ -343,124 +351,6 @@ function observeLegacyEvents(cwd) {
   }
 }
 
-// src/codex-plugin/migration.ts
-function codexInstallRequiresMutation(observation) {
-  return observation.plugin.enabled !== true || observation.state === "plugin_update_required";
-}
-var CODEX_RESTART_INSTRUCTION = "Restart Codex, start a new task, then review the installed hooks with /hooks.";
-var CODEX_RESTART_CONTEXT = "This Codex app may keep its loaded Safeword catalogue.";
-function codexPluginVersionMatchesPackage(plugin) {
-  return plugin.version === null || plugin.version === SAFEWORD_SCHEMA.version;
-}
-function pluginProtectionIsCurrent(facts) {
-  return !facts.activationPending && facts.plugin.enabled === true && codexPluginVersionMatchesPackage(facts.plugin) && facts.proof.status === "current" && (facts.plugin.version === null || facts.proof.plugin_version === facts.plugin.version);
-}
-function deriveCodexMigrationResult(facts) {
-  const hasLegacy = facts.legacyAssets.length > 0 || facts.legacyEvents.length > 0;
-  const protectedStatus = legacyProtection(facts, hasLegacy);
-  const state = migrationState(facts, hasLegacy);
-  const next = nextAction(state);
-  return {
-    schema_version: "2",
-    ok: state === "plugin",
-    state,
-    protected: facts.recoveryRequired ? "uncertain" : protectedStatus,
-    changed: false,
-    plugin: facts.plugin,
-    proof: facts.proof,
-    legacy: {
-      events: facts.legacyEvents,
-      viable_events: facts.viableLegacyEvents,
-      assets: facts.legacyAssets
-    },
-    effects: { files: [] },
-    errors: [],
-    next_actions: next === void 0 ? [] : [next]
-  };
-}
-var MIGRATION_STATE_RULES = [
-  { state: "recovery_required", matches: (facts) => facts.recoveryRequired },
-  {
-    state: "plugin_setup_required",
-    matches: (facts) => facts.finalized && facts.plugin.enabled !== true
-  },
-  {
-    state: "plugin_disabled",
-    matches: (facts) => facts.plugin.installed && facts.plugin.enabled === false
-  },
-  {
-    state: "plugin_update_required",
-    matches: (facts) => facts.plugin.enabled === true && !codexPluginVersionMatchesPackage(facts.plugin)
-  },
-  {
-    state: "plugin_installed_app_restart_required",
-    matches: (facts) => facts.activationPending && facts.plugin.enabled === true
-  },
-  {
-    state: "plugin_enabled_hook_unproven",
-    matches: (facts) => facts.plugin.enabled === true && !pluginProtectionIsCurrent(facts)
-  },
-  {
-    state: "compatibility",
-    matches: (facts, hasLegacy) => pluginProtectionIsCurrent(facts) && hasLegacy
-  },
-  {
-    state: "plugin",
-    matches: (facts) => pluginProtectionIsCurrent(facts)
-  },
-  { state: "legacy", matches: (_facts, hasLegacy) => hasLegacy }
-];
-function migrationState(facts, hasLegacy) {
-  return MIGRATION_STATE_RULES.find((rule) => rule.matches(facts, hasLegacy))?.state ?? "not_configured";
-}
-function legacyProtection(facts, hasLegacy) {
-  if (pluginProtectionIsCurrent(facts)) return "protected";
-  if (!hasLegacy || facts.viableLegacyEvents.length === 0) return "unprotected";
-  return facts.viableLegacyEvents.length === facts.legacyEvents.length ? "protected" : "partial";
-}
-var NEXT_COMMANDS = {
-  recovery_required: "safeword codex recover",
-  compatibility: "safeword codex migrate --finalize",
-  plugin: void 0,
-  plugin_installed_app_restart_required: void 0,
-  plugin_enabled_hook_unproven: void 0,
-  plugin_setup_required: "safeword codex migrate",
-  plugin_disabled: "safeword codex migrate",
-  plugin_update_required: "safeword codex migrate",
-  legacy: "safeword codex migrate",
-  not_configured: "safeword codex migrate"
-};
-function nextAction(state) {
-  if (state === "plugin_installed_app_restart_required" || state === "plugin_enabled_hook_unproven") {
-    return {
-      kind: "human",
-      instruction: CODEX_RESTART_INSTRUCTION,
-      mutates: false,
-      requires_human: true
-    };
-  }
-  const command = NEXT_COMMANDS[state];
-  return command === void 0 ? void 0 : { command, mutates: true, requires_human: true };
-}
-function renderCodexMigrationHuman(result) {
-  const lines = [`Codex migration: ${result.state}`, `Protection: ${result.protected}`];
-  if (result.state === "plugin_setup_required") {
-    lines.push(`Setup: ${CODEX_MIGRATION_SCHEMA.paths.bootstrapSkill}`);
-  } else if (result.state === "plugin_installed_app_restart_required" || result.state === "plugin_enabled_hook_unproven") {
-    lines.push(CODEX_RESTART_CONTEXT);
-  }
-  const next = result.next_actions[0];
-  if (next !== void 0) {
-    lines.push(`Next: ${"command" in next ? next.command : next.instruction}`);
-  }
-  return `${lines.join("\n")}
-`;
-}
-function codexMigrationExitCode(result) {
-  if (result.errors.length > 0) return 1;
-  return result.ok ? 0 : 2;
-}
-
 // src/codex-plugin/profile-lock.ts
 import { randomUUID } from "crypto";
 import { mkdirSync, readFileSync as readFileSync2, rmSync, statSync, writeFileSync } from "fs";
@@ -1044,7 +934,7 @@ function installCodexPlugin(options = {}) {
   if (options.json !== true) {
     success("Safeword Codex plugin is enabled for this profile.");
     info(
-      "This Codex app may keep its loaded Safeword catalogue. Restart Codex, start a new task, then review the installed skills and hooks with /hooks. If this project uses Safeword legacy hooks, run `safeword codex migrate --remove-legacy-hooks` to remove only those hooks."
+      `This Codex app may keep its loaded Safeword catalogue. ${CODEX_REVIEW_THEN_RESTART_ACTION}. If this project uses Safeword legacy hooks, run \`safeword codex migrate --remove-legacy-hooks\` to remove only those hooks.`
     );
   }
   if (options.reportMigrationState === true) {
@@ -1088,7 +978,13 @@ function buildCodexFinalizationMutations(cwd, preparedLegacyHookRemoval) {
     },
     {
       path: CODEX_MIGRATION_SCHEMA.paths.bootstrapSkill,
-      content: "---\nname: safeword-plugin-setup\ndescription: Restore the Safeword Codex profile plugin for this project.\n---\n\nRun `safeword codex migrate` to install or re-enable the profile plugin. Restart Codex after installation, start a new Codex task, then review its hooks with `/hooks`. Run `safeword codex status` to verify this project is protected.\n"
+      content: `---
+name: safeword-plugin-setup
+description: Restore the Safeword Codex profile plugin for this project.
+---
+
+Run \`safeword codex migrate\` to install or re-enable the profile plugin. ${CODEX_REVIEW_THEN_RESTART_ACTION}. Run \`safeword codex status\` to verify this project is protected.
+`
     }
   );
   return mutations;
@@ -1329,8 +1225,6 @@ function recoverCodexMigration(cwd = process.cwd(), options = {}) {
 }
 
 export {
-  codexInstallRequiresMutation,
-  codexPluginVersionMatchesPackage,
   preparedCodexProjectBootstrap,
   installCodexProjectBootstrap,
   observeCodexMigrationResult,
@@ -1344,4 +1238,4 @@ export {
   migrateCodexPlugin,
   recoverCodexMigration
 };
-//# sourceMappingURL=chunk-CRGPYC35.js.map
+//# sourceMappingURL=chunk-OGMP5ANP.js.map