safeword 0.78.7 → 0.78.8

package/codex-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "safeword",
-  "version": "0.78.7",
+  "version": "0.78.8",
   "description": "Safeword workflow guidance and gates for Codex.",
   "author": {
     "name": "Arcade AI"

package/codex-plugin/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.7 hook codex session-start --plugin-hook",
+            "command": "bunx --bun safeword@0.78.8 hook codex session-start --plugin-hook",
             "timeout": 120,
             "statusMessage": "Loading Safeword standing instructions"
           }
@@ -19,7 +19,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.7 hook codex pre-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.78.8 hook codex pre-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking Safeword edit gates"
           }
@@ -32,7 +32,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.7 hook codex post-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.78.8 hook codex post-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Surfacing Safeword post-tool context"
           }
@@ -45,7 +45,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.7 hook codex user-prompt-submit --plugin-hook",
+            "command": "bunx --bun safeword@0.78.8 hook codex user-prompt-submit --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking queued Safeword prompt context"
           }
@@ -58,7 +58,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.78.7 hook codex stop --plugin-hook",
+            "command": "bunx --bun safeword@0.78.8 hook codex stop --plugin-hook",
             "timeout": 600,
             "statusMessage": "Checking Safeword stop continuation"
           }

package/codex-plugin/skills/audit/SKILL.md

@@ -557,7 +557,7 @@ Changed project learnings in the resolved namespace root's `learnings/*.md` must
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2> /dev/null || pwd)}"
 source "$PROJECT_DIR/.safeword/hooks/lib/audit-scope.sh"
 audit_scope_initialize "$PROJECT_DIR"
-NS_ROOT="$(bunx --bun safeword@0.78.7 project namespace-root --cwd "$PROJECT_DIR")"
+NS_ROOT="$(bunx --bun safeword@0.78.8 project namespace-root --cwd "$PROJECT_DIR")"
 
 learning_is_in_audit_scope() {
   [ "$AUDIT_SCOPE_MODE" = "repository" ] && return 0
@@ -717,13 +717,13 @@ audit_scope_initialize "$PROJECT_DIR"
 
 # Resolve the namespace root (honors config paths.projectRoot in real runs).
 # Fall back on directory existence — robust when the resolver hook is absent.
-NS_ROOT="$(bunx --bun safeword@0.78.7 project namespace-root --cwd "$PROJECT_DIR" 2> /dev/null)"
+NS_ROOT="$(bunx --bun safeword@0.78.8 project namespace-root --cwd "$PROJECT_DIR" 2> /dev/null)"
 [ -d "$NS_ROOT" ] || {
   if [ -d "$PROJECT_DIR/.project" ]; then NS_ROOT="$PROJECT_DIR/.project"; else NS_ROOT="$PROJECT_DIR/.safeword-project"; fi
 }
-PERSONAS_FILE="$(bunx --bun safeword@0.78.7 project namespace-root --cwd "$PROJECT_DIR" --key personas 2> /dev/null)"
-SURFACES_FILE="$(bunx --bun safeword@0.78.7 project namespace-root --cwd "$PROJECT_DIR" --key surfaces 2> /dev/null)"
-GLOSSARY_FILE="$(bunx --bun safeword@0.78.7 project namespace-root --cwd "$PROJECT_DIR" --key glossary 2> /dev/null)"
+PERSONAS_FILE="$(bunx --bun safeword@0.78.8 project namespace-root --cwd "$PROJECT_DIR" --key personas 2> /dev/null)"
+SURFACES_FILE="$(bunx --bun safeword@0.78.8 project namespace-root --cwd "$PROJECT_DIR" --key surfaces 2> /dev/null)"
+GLOSSARY_FILE="$(bunx --bun safeword@0.78.8 project namespace-root --cwd "$PROJECT_DIR" --key glossary 2> /dev/null)"
 [ -n "$PERSONAS_FILE" ] || PERSONAS_FILE="$NS_ROOT/personas.md"
 [ -n "$SURFACES_FILE" ] || SURFACES_FILE="$NS_ROOT/surfaces.md"
 [ -n "$GLOSSARY_FILE" ] || GLOSSARY_FILE="$NS_ROOT/glossary.md"

package/codex-plugin/skills/bdd/SKILL.md

@@ -53,7 +53,7 @@ and ticket scope; its typed verdict decides. Resolve a review-capable Safeword
 CLI first; source checkouts do not guarantee a bare `safeword` on `PATH`:
 
 ```bash
-SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.7 review run scenario-gate feature-file ticket-spec [legacy-test-definitions] --agent-handoff --json
+SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.8 review run scenario-gate feature-file ticket-spec [legacy-test-definitions] --agent-handoff --json
 ```
 
 The coordinator prefers the opposite headless agent and labels a permitted

package/codex-plugin/skills/bdd/references/PLAN_IMPLEMENTATION.md

@@ -82,10 +82,10 @@ Scaffold from `.safeword/templates/impl-plan-template.md` (sibling to `ticket.md
 
 ## Exit: review, then (optionally) the user
 
-1. **Independent review first.** At review time, run `bunx --bun safeword@0.78.7 project review-knowledge --json`. Resolve a review-capable Safeword CLI, then invoke the coordinator with the current files identified by the resolver:
+1. **Independent review first.** At review time, run `bunx --bun safeword@0.78.8 project review-knowledge --json`. Resolve a review-capable Safeword CLI, then invoke the coordinator with the current files identified by the resolver:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.7 review run plan-implementation impl-plan.md spec.md ticket.md feature-file principles-file personas-file surfaces-file --agent-handoff --json
+   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.8 review run plan-implementation impl-plan.md spec.md ticket.md feature-file principles-file personas-file surfaces-file --agent-handoff --json
    ```
 
    The shared coordinator sends that bounded packet to the opposite headless agent when available; its typed verdict, failure classification, and independence level are authoritative. Only when that typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` immediately with the original result and the same accepted targets; return every other result unchanged and do not substitute another private subagent. Give the reviewer the current `spec.md`, configured principles file, configured personas file, and configured surfaces file in that packet. The reviewer refutes the plan: challenge whether it selected the actually applicable principles, whether each concrete consequence follows from its principle, whether the proposed proof can prove that consequence, whether conflicts belong in Known deviations, whether the design fulfills each persona's JTBD, and whether any affected surface was omitted or lacks credible proof. Also check wrong-direction design, missed scenarios, and editorial padding via the deletion test. Fix findings, re-resolve the sources, re-review, then stamp the exit with the returned agent provenance (`write-review-stamp.ts --author-agent "author-agent" --reviewer-agent "actual-reviewer" --independence "independence" --phase plan-implementation`, where the review gate is enabled). Add `--model` only when the executed reviewer reports a verifiable model identifier; the coordinator never invents one. Human handoff happens **only after** this review passes — raw planning output is never presented for approval. Exception, any time: information only the user has (intent, priorities, constraints not in code or docs) routes to the user the moment the gap appears — `$safeword:elicit`.

package/codex-plugin/skills/bdd/references/TDD.md

@@ -196,7 +196,7 @@ Off by default. When `.safeword/config.json` sets `architectureReviewGate: true`
 2. **A fresh-context review.** Resolve a review-capable Safeword CLI, then run the shared coordinator with only the bounded design evidence:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.7 review run plan-implementation impl-plan.md ticket-spec feature-file --agent-handoff --json
+   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.8 review run plan-implementation impl-plan.md ticket-spec feature-file --agent-handoff --json
    ```
 
    The shared coordinator prefers the opposite headless agent. Only when its typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` with the original result and the same accepted targets; return every other result unchanged. Degraded findings cannot satisfy a required independent-review gate. On an independent pass, stamp it:

package/codex-plugin/skills/explain/SKILL.md

@@ -39,7 +39,7 @@ Gather the durable trail safeword already keeps, then narrate it. Run:
 
 ```bash
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2> /dev/null || pwd)}"
-NS_ROOT="$(bunx --bun safeword@0.78.7 project namespace-root --cwd "$PROJECT_DIR")"
+NS_ROOT="$(bunx --bun safeword@0.78.8 project namespace-root --cwd "$PROJECT_DIR")"
 # What you're on now: the last re-entry line names the current ticket + Next
 tail -3 "$NS_ROOT/re-entry.md" 2> /dev/null
 # Fallback when re-entry is empty: in_progress tickets (not epics)

package/codex-plugin/skills/quality-review/SKILL.md

@@ -50,7 +50,7 @@ If in a BDD workflow, read the current ticket from `<namespace-root>/tickets/` a
 
 ### Project-principle challenge
 
-For a BDD ticket, run `bunx --bun safeword@0.78.7 project review-knowledge --json` at the
+For a BDD ticket, run `bunx --bun safeword@0.78.8 project review-knowledge --json` at the
 start of each pass and read the current `principles`, `personas`, and `surfaces`
 paths and content it returns (including overrides such as `paths.principles`).
 Do not substitute labels or intake-era content.
@@ -175,7 +175,7 @@ Each pass:
    CLI first; source checkouts do not guarantee a bare `safeword` on `PATH`:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.7 review run quality-review changed-file [more-changed-files...] --agent-handoff --json
+   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.8 review run quality-review changed-file [more-changed-files...] --agent-handoff --json
    ```
 
    A healthy deep review may return `REVIEW_PENDING` after its foreground

package/codex-plugin/skills/retro-filer/SKILL.md

@@ -17,7 +17,7 @@ a caller-nominated path. The spool contains sanitized safeword findings for
 ## Procedure
 
 1. Before reading or making any tracker call, run
-   `bunx --bun safeword@0.78.7 project retro-drain "<spool-path>" --validated-jsonl`.
+   `bunx --bun safeword@0.78.8 project retro-drain "<spool-path>" --validated-jsonl`.
    Use only its JSONL stdout as the filing input. A nonzero exit means validation
    failed: make no search, comment, or create call, leave the spool unchanged,
    and report `retro-filer: cannot file - draft validation failed`. If its output
@@ -60,7 +60,7 @@ a caller-nominated path. The spool contains sanitized safeword findings for
    the draft only when the append succeeded and the exact ack is visible. If the
    append or verification fails, leave the draft in place.
 5. Create at most five new issues per run. Drain only by running
-   `bunx --bun safeword@0.78.7 project retro-drain "<spool-path>"`; never rewrite or
+   `bunx --bun safeword@0.78.8 project retro-drain "<spool-path>"`; never rewrite or
    delete the spool directly. The helper removes only drafts whose valid ack is
    reader-visible, so unfiled or unacknowledged drafts remain. If tracker write
    access is unavailable, leave the spool unchanged and report

package/codex-plugin/skills/review-spec/SKILL.md

@@ -16,7 +16,7 @@ Adversarially review a ticket's scenarios: treat them as if you're trying to bre
 - **Manual re-run** — invoke `$safeword:review-spec` anytime after `define-behavior` (e.g., scenarios changed during implement and you want to re-validate). Allowed on a closed ticket too — a post-hoc audit is still readable.
 
 Read the active ticket's `.feature` source first. At review time, run
-`bunx --bun safeword@0.78.7 project review-knowledge --json` and read the current
+`bunx --bun safeword@0.78.8 project review-knowledge --json` and read the current
 `principles`, `personas`, and `surfaces` source paths and content it returns, so
 the review is grounded in project knowledge rather than labels or stale intake
 context. The resolver honors `paths.principles`, `paths.personas`, and
@@ -35,7 +35,7 @@ Resolve a review-capable Safeword CLI first; source checkouts do not guarantee
 a bare `safeword` on `PATH`:
 
 ```bash
-SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.7 review run scenario-gate feature-file ticket-spec [legacy-test-definitions] --agent-handoff --json
+SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.78.8 review run scenario-gate feature-file ticket-spec [legacy-test-definitions] --agent-handoff --json
 ```
 
 The coordinator's assigned/actual reviewer, failure classification, and

package/codex-plugin/skills/self-review/SKILL.md

@@ -45,7 +45,7 @@ installed helper — report it to the user and resolve before retrying.
 ## Review the spec (do this now, with the stamp written)
 
 The stamp records that a review was invoked; the actual scrutiny is yours. At
-review time, run `bunx --bun safeword@0.78.7 project review-knowledge --json` and use its
+review time, run `bunx --bun safeword@0.78.8 project review-knowledge --json` and use its
 current `principles`, `personas`, and `surfaces` source paths and content—not
 labels remembered from intake. These resolve from `paths.principles`,
 `paths.personas`, and `paths.surfaces` when configured. Read those sources with the active ticket's

package/dist/{architecture-HZWCT732.js → architecture-LBHZZFHR.js}

@@ -25,7 +25,7 @@ import {
   readJson,
   writeJson
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-EUINNZUT.js";
+import "./chunk-UUONZXZA.js";
 
 // src/commands/architecture.ts
 import { execFileSync } from "child_process";
@@ -650,4 +650,4 @@ export {
   architectureStage,
   architectureStaged
 };
-//# sourceMappingURL=architecture-HZWCT732.js.map
+//# sourceMappingURL=architecture-LBHZZFHR.js.map

package/dist/{architecture-document-F4UUBRLN.js → architecture-document-3AAG5IT3.js}

@@ -11,7 +11,7 @@ import {
 import "./chunk-MVNK7U5P.js";
 import "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-EUINNZUT.js";
+import "./chunk-UUONZXZA.js";
 export {
   isSafewordOwned,
   isWouldChangeAction,
@@ -22,4 +22,4 @@ export {
   selfHealProject,
   selfHealProjectPreservingProse
 };
-//# sourceMappingURL=architecture-document-F4UUBRLN.js.map
+//# sourceMappingURL=architecture-document-3AAG5IT3.js.map

package/dist/{architecture-monorepo-JTKQ334X.js → architecture-monorepo-PTYRKDIM.js}

@@ -5,11 +5,11 @@ import {
   monorepoFingerprintOf
 } from "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-EUINNZUT.js";
+import "./chunk-UUONZXZA.js";
 export {
   discoverUnreadableWorkspaces,
   discoverWorkspaces,
   extractMonorepoArchitectureSnapshot,
   monorepoFingerprintOf
 };
-//# sourceMappingURL=architecture-monorepo-JTKQ334X.js.map
+//# sourceMappingURL=architecture-monorepo-PTYRKDIM.js.map

package/dist/{boundary-D3EGHD5C.js → boundary-FBI7Z5NM.js}

@@ -26,7 +26,7 @@ import {
 import {
   readFileSafe
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-EUINNZUT.js";
+import "./chunk-UUONZXZA.js";
 
 // src/commands/boundary.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -627,4 +627,4 @@ function boundary(options) {
 export {
   boundary
 };
-//# sourceMappingURL=boundary-D3EGHD5C.js.map
+//# sourceMappingURL=boundary-FBI7Z5NM.js.map

package/dist/{chunk-OXEAZ2SO.js → chunk-MD3PENSY.js}

@@ -78,11 +78,11 @@ async function observeLifecycleSurfaces(cwd, agents, environment = process.env)
   const project = await observeStatus(cwd, agents, environment);
   const surfaces = [{ name: "project", result: project }];
   if (agents.includes("claude")) {
-    const { observeClaudeStatus } = await import("./status-EOULVBDE.js");
+    const { observeClaudeStatus } = await import("./status-2TYLHW7I.js");
     surfaces.push({ name: "claude", result: observeClaudeStatus(cwd) });
   }
   if (agents.includes("codex")) {
-    const { observeCodexMigration } = await import("./operations-YSOXEY2L.js");
+    const { observeCodexMigration } = await import("./operations-425HLFUS.js");
     surfaces.push({ name: "codex", result: observeCodexMigration(cwd, environment) });
   }
   if (agents.includes("cursor")) {
@@ -238,4 +238,4 @@ export {
   summarizeLifecycleStatus,
   observeLifecycleStatus
 };
-//# sourceMappingURL=chunk-OXEAZ2SO.js.map
+//# sourceMappingURL=chunk-MD3PENSY.js.map

package/dist/{chunk-EUINNZUT.js → chunk-UUONZXZA.js}

@@ -1,7 +1,7 @@
 // <define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>
-var define_SAFEWORD_RELAY_BUILD_ATTESTATION_default = { ancestorPairs: [], artifacts: {}, buildCommit: "79a0ab3f9d52eabbf38a2a831f12681d87cda45d", enabled: false, manifestBase64: "ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K", manifestSha256: "946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262" };
+var define_SAFEWORD_RELAY_BUILD_ATTESTATION_default = { ancestorPairs: [], artifacts: {}, buildCommit: "640758c5fd7ccf676458aac4c85442c37f6ab323", enabled: false, manifestBase64: "ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K", manifestSha256: "946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262" };
 
 export {
   define_SAFEWORD_RELAY_BUILD_ATTESTATION_default
 };
-//# sourceMappingURL=chunk-EUINNZUT.js.map
+//# sourceMappingURL=chunk-UUONZXZA.js.map

package/dist/{chunk-EUINNZUT.js.map → chunk-UUONZXZA.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["<define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>"],"sourcesContent":["{\"ancestorPairs\":[],\"artifacts\":{},\"buildCommit\":\"79a0ab3f9d52eabbf38a2a831f12681d87cda45d\",\"enabled\":false,\"manifestBase64\":\"ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K\",\"manifestSha256\":\"946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262\"}"],"mappings":";AAAA,wDAAC,eAAgB,CAAC,GAAE,WAAY,CAAC,GAAE,aAAc,4CAA2C,SAAU,OAAM,gBAAiB,wDAAuD,gBAAiB,mEAAkE;","names":[]}
+{"version":3,"sources":["<define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>"],"sourcesContent":["{\"ancestorPairs\":[],\"artifacts\":{},\"buildCommit\":\"640758c5fd7ccf676458aac4c85442c37f6ab323\",\"enabled\":false,\"manifestBase64\":\"ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K\",\"manifestSha256\":\"946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262\"}"],"mappings":";AAAA,wDAAC,eAAgB,CAAC,GAAE,WAAY,CAAC,GAAE,aAAc,4CAA2C,SAAU,OAAM,gBAAiB,wDAAuD,gBAAiB,mEAAkE;","names":[]}

package/dist/{cleanup-NFU4TLOW.js → cleanup-BL2ETSUX.js}

@@ -11,11 +11,11 @@ import "./chunk-QOLHGAD5.js";
 import "./chunk-HNCUIXDY.js";
 import "./chunk-FOYGZ4MK.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-EUINNZUT.js";
+import "./chunk-UUONZXZA.js";
 export {
   claudeCleanupPreconditionDigest,
   claudeLegacyMutations,
   migrateClaudeLegacyAutomatically,
   recoverClaudeCleanup
 };
-//# sourceMappingURL=cleanup-NFU4TLOW.js.map
+//# sourceMappingURL=cleanup-BL2ETSUX.js.map

package/dist/{cleanup-command-T2AP5AYU.js → cleanup-command-DTYP4Q3C.js}

@@ -30,7 +30,7 @@ import {
   VERSION
 } from "./chunk-UAFM77KW.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-EUINNZUT.js";
+import "./chunk-UUONZXZA.js";
 
 // src/claude-plugin/cleanup-command.ts
 function statusClassification(result) {
@@ -132,4 +132,4 @@ function cleanupClaudeLegacy(cwd, options) {
 export {
   cleanupClaudeLegacy
 };
-//# sourceMappingURL=cleanup-command-T2AP5AYU.js.map
+//# sourceMappingURL=cleanup-command-DTYP4Q3C.js.map