safeword 0.79.6 → 0.80.0

package/codex-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "safeword",
-  "version": "0.79.6",
+  "version": "0.80.0",
   "description": "Safeword workflow guidance and gates for Codex.",
   "author": {
     "name": "Arcade AI"

package/codex-plugin/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.79.6 hook codex session-start --plugin-hook",
+            "command": "bunx --bun safeword@0.80.0 hook codex session-start --plugin-hook",
             "timeout": 120,
             "statusMessage": "Loading Safeword standing instructions"
           }
@@ -19,7 +19,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.79.6 hook codex pre-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.80.0 hook codex pre-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking Safeword edit gates"
           }
@@ -32,7 +32,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.79.6 hook codex post-tool-use --plugin-hook",
+            "command": "bunx --bun safeword@0.80.0 hook codex post-tool-use --plugin-hook",
             "timeout": 30,
             "statusMessage": "Surfacing Safeword post-tool context"
           }
@@ -45,7 +45,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.79.6 hook codex user-prompt-submit --plugin-hook",
+            "command": "bunx --bun safeword@0.80.0 hook codex user-prompt-submit --plugin-hook",
             "timeout": 30,
             "statusMessage": "Checking queued Safeword prompt context"
           }
@@ -58,7 +58,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bunx --bun safeword@0.79.6 hook codex stop --plugin-hook",
+            "command": "bunx --bun safeword@0.80.0 hook codex stop --plugin-hook",
             "timeout": 600,
             "statusMessage": "Checking Safeword stop continuation"
           }

package/codex-plugin/skills/audit/SKILL.md

@@ -557,7 +557,7 @@ Changed project learnings in the resolved namespace root's `learnings/*.md` must
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2> /dev/null || pwd)}"
 source "$PROJECT_DIR/.safeword/hooks/lib/audit-scope.sh"
 audit_scope_initialize "$PROJECT_DIR"
-NS_ROOT="$(bunx --bun safeword@0.79.6 project namespace-root --cwd "$PROJECT_DIR")"
+NS_ROOT="$(bunx --bun safeword@0.80.0 project namespace-root --cwd "$PROJECT_DIR")"
 
 learning_is_in_audit_scope() {
   [ "$AUDIT_SCOPE_MODE" = "repository" ] && return 0
@@ -717,13 +717,13 @@ audit_scope_initialize "$PROJECT_DIR"
 
 # Resolve the namespace root (honors config paths.projectRoot in real runs).
 # Fall back on directory existence — robust when the resolver hook is absent.
-NS_ROOT="$(bunx --bun safeword@0.79.6 project namespace-root --cwd "$PROJECT_DIR" 2> /dev/null)"
+NS_ROOT="$(bunx --bun safeword@0.80.0 project namespace-root --cwd "$PROJECT_DIR" 2> /dev/null)"
 [ -d "$NS_ROOT" ] || {
   if [ -d "$PROJECT_DIR/.project" ]; then NS_ROOT="$PROJECT_DIR/.project"; else NS_ROOT="$PROJECT_DIR/.safeword-project"; fi
 }
-PERSONAS_FILE="$(bunx --bun safeword@0.79.6 project namespace-root --cwd "$PROJECT_DIR" --key personas 2> /dev/null)"
-SURFACES_FILE="$(bunx --bun safeword@0.79.6 project namespace-root --cwd "$PROJECT_DIR" --key surfaces 2> /dev/null)"
-GLOSSARY_FILE="$(bunx --bun safeword@0.79.6 project namespace-root --cwd "$PROJECT_DIR" --key glossary 2> /dev/null)"
+PERSONAS_FILE="$(bunx --bun safeword@0.80.0 project namespace-root --cwd "$PROJECT_DIR" --key personas 2> /dev/null)"
+SURFACES_FILE="$(bunx --bun safeword@0.80.0 project namespace-root --cwd "$PROJECT_DIR" --key surfaces 2> /dev/null)"
+GLOSSARY_FILE="$(bunx --bun safeword@0.80.0 project namespace-root --cwd "$PROJECT_DIR" --key glossary 2> /dev/null)"
 [ -n "$PERSONAS_FILE" ] || PERSONAS_FILE="$NS_ROOT/personas.md"
 [ -n "$SURFACES_FILE" ] || SURFACES_FILE="$NS_ROOT/surfaces.md"
 [ -n "$GLOSSARY_FILE" ] || GLOSSARY_FILE="$NS_ROOT/glossary.md"

package/codex-plugin/skills/bdd/SKILL.md

@@ -53,7 +53,7 @@ and ticket scope; its typed verdict decides. Resolve a review-capable Safeword
 CLI first; source checkouts do not guarantee a bare `safeword` on `PATH`:
 
 ```bash
-SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.79.6 review run scenario-gate feature-file ticket-spec [legacy-test-definitions] --agent-handoff --json
+SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.80.0 review run scenario-gate feature-file ticket-spec [legacy-test-definitions] --agent-handoff --json
 ```
 
 The coordinator prefers the opposite headless agent and labels a permitted

package/codex-plugin/skills/bdd/references/PLAN_IMPLEMENTATION.md

@@ -82,10 +82,10 @@ Scaffold from `.safeword/templates/impl-plan-template.md` (sibling to `ticket.md
 
 ## Exit: review, then (optionally) the user
 
-1. **Independent review first.** At review time, run `bunx --bun safeword@0.79.6 project review-knowledge --json`. Resolve a review-capable Safeword CLI, then invoke the coordinator with the current files identified by the resolver:
+1. **Independent review first.** At review time, run `bunx --bun safeword@0.80.0 project review-knowledge --json`. Resolve a review-capable Safeword CLI, then invoke the coordinator with the current files identified by the resolver:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.79.6 review run plan-implementation impl-plan.md spec.md ticket.md feature-file principles-file personas-file surfaces-file --agent-handoff --json
+   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.80.0 review run plan-implementation impl-plan.md spec.md ticket.md feature-file principles-file personas-file surfaces-file --agent-handoff --json
    ```
 
    The shared coordinator sends that bounded packet to the opposite headless agent when available; its typed verdict, failure classification, and independence level are authoritative. Only when that typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` immediately with the original result and the same accepted targets; return every other result unchanged and do not substitute another private subagent. Give the reviewer the current `spec.md`, configured principles file, configured personas file, and configured surfaces file in that packet. The reviewer refutes the plan: challenge whether it selected the actually applicable principles, whether each concrete consequence follows from its principle, whether the proposed proof can prove that consequence, whether conflicts belong in Known deviations, whether the design fulfills each persona's JTBD, and whether any affected surface was omitted or lacks credible proof. Also check wrong-direction design, missed scenarios, and editorial padding via the deletion test. Fix findings, re-resolve the sources, re-review, then stamp the exit with the returned agent provenance (`write-review-stamp.ts --author-agent "author-agent" --reviewer-agent "actual-reviewer" --independence "independence" --phase plan-implementation`, where the review gate is enabled). Add `--model` only when the executed reviewer reports a verifiable model identifier; the coordinator never invents one. Human handoff happens **only after** this review passes — raw planning output is never presented for approval. Exception, any time: information only the user has (intent, priorities, constraints not in code or docs) routes to the user the moment the gap appears — `$safeword:elicit`.

package/codex-plugin/skills/bdd/references/TDD.md

@@ -196,7 +196,7 @@ Off by default. When `.safeword/config.json` sets `architectureReviewGate: true`
 2. **A fresh-context review.** Resolve a review-capable Safeword CLI, then run the shared coordinator with only the bounded design evidence:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.79.6 review run plan-implementation impl-plan.md ticket-spec feature-file --agent-handoff --json
+   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.80.0 review run plan-implementation impl-plan.md ticket-spec feature-file --agent-handoff --json
    ```
 
    The shared coordinator prefers the opposite headless agent. Only when its typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` with the original result and the same accepted targets; return every other result unchanged. Degraded findings cannot satisfy a required independent-review gate. On an independent pass, stamp it:

package/codex-plugin/skills/explain/SKILL.md

@@ -39,7 +39,7 @@ Gather the durable trail safeword already keeps, then narrate it. Run:
 
 ```bash
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2> /dev/null || pwd)}"
-NS_ROOT="$(bunx --bun safeword@0.79.6 project namespace-root --cwd "$PROJECT_DIR")"
+NS_ROOT="$(bunx --bun safeword@0.80.0 project namespace-root --cwd "$PROJECT_DIR")"
 # What you're on now: the last re-entry line names the current ticket + Next
 tail -3 "$NS_ROOT/re-entry.md" 2> /dev/null
 # Fallback when re-entry is empty: in_progress tickets (not epics)

package/codex-plugin/skills/quality-review/SKILL.md

@@ -50,7 +50,7 @@ If in a BDD workflow, read the current ticket from `<namespace-root>/tickets/` a
 
 ### Project-principle challenge
 
-For a BDD ticket, run `bunx --bun safeword@0.79.6 project review-knowledge --json` at the
+For a BDD ticket, run `bunx --bun safeword@0.80.0 project review-knowledge --json` at the
 start of each pass and read the current `principles`, `personas`, and `surfaces`
 paths and content it returns (including overrides such as `paths.principles`).
 Do not substitute labels or intake-era content.
@@ -175,7 +175,7 @@ Each pass:
    CLI first; source checkouts do not guarantee a bare `safeword` on `PATH`:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.79.6 review run quality-review changed-file [more-changed-files...] --agent-handoff --json
+   SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.80.0 review run quality-review changed-file [more-changed-files...] --agent-handoff --json
    ```
 
    A healthy deep review may return `REVIEW_PENDING` after its foreground

package/codex-plugin/skills/retro-filer/SKILL.md

@@ -17,7 +17,7 @@ a caller-nominated path. The spool contains sanitized safeword findings for
 ## Procedure
 
 1. Before reading or making any tracker call, run
-   `bunx --bun safeword@0.79.6 project retro-drain "<spool-path>" --validated-jsonl`.
+   `bunx --bun safeword@0.80.0 project retro-drain "<spool-path>" --validated-jsonl`.
    Use only its JSONL stdout as the filing input. A nonzero exit means validation
    failed: make no search, comment, or create call, leave the spool unchanged,
    and report `retro-filer: cannot file - draft validation failed`. If its output
@@ -60,7 +60,7 @@ a caller-nominated path. The spool contains sanitized safeword findings for
    the draft only when the append succeeded and the exact ack is visible. If the
    append or verification fails, leave the draft in place.
 5. Create at most five new issues per run. Drain only by running
-   `bunx --bun safeword@0.79.6 project retro-drain "<spool-path>"`; never rewrite or
+   `bunx --bun safeword@0.80.0 project retro-drain "<spool-path>"`; never rewrite or
    delete the spool directly. The helper removes only drafts whose valid ack is
    reader-visible, so unfiled or unacknowledged drafts remain. If tracker write
    access is unavailable, leave the spool unchanged and report

package/codex-plugin/skills/review-spec/SKILL.md

@@ -16,7 +16,7 @@ Adversarially review a ticket's scenarios: treat them as if you're trying to bre
 - **Manual re-run** — invoke `$safeword:review-spec` anytime after `define-behavior` (e.g., scenarios changed during implement and you want to re-validate). Allowed on a closed ticket too — a post-hoc audit is still readable.
 
 Read the active ticket's `.feature` source first. At review time, run
-`bunx --bun safeword@0.79.6 project review-knowledge --json` and read the current
+`bunx --bun safeword@0.80.0 project review-knowledge --json` and read the current
 `principles`, `personas`, and `surfaces` source paths and content it returns, so
 the review is grounded in project knowledge rather than labels or stale intake
 context. The resolver honors `paths.principles`, `paths.personas`, and
@@ -35,7 +35,7 @@ Resolve a review-capable Safeword CLI first; source checkouts do not guarantee
 a bare `safeword` on `PATH`:
 
 ```bash
-SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.79.6 review run scenario-gate feature-file ticket-spec [legacy-test-definitions] --agent-handoff --json
+SAFEWORD_REVIEW_PROGRESS=1 bunx --bun safeword@0.80.0 review run scenario-gate feature-file ticket-spec [legacy-test-definitions] --agent-handoff --json
 ```
 
 The coordinator's assigned/actual reviewer, failure classification, and

package/codex-plugin/skills/self-review/SKILL.md

@@ -45,7 +45,7 @@ installed helper — report it to the user and resolve before retrying.
 ## Review the spec (do this now, with the stamp written)
 
 The stamp records that a review was invoked; the actual scrutiny is yours. At
-review time, run `bunx --bun safeword@0.79.6 project review-knowledge --json` and use its
+review time, run `bunx --bun safeword@0.80.0 project review-knowledge --json` and use its
 current `principles`, `personas`, and `surfaces` source paths and content—not
 labels remembered from intake. These resolve from `paths.principles`,
 `paths.personas`, and `paths.surfaces` when configured. Read those sources with the active ticket's

package/dist/{architecture-PKFEYKF5.js → architecture-MQGZ5IMW.js}

@@ -1,8 +1,3 @@
-import {
-  error,
-  success,
-  warn
-} from "./chunk-QSLVO4XF.js";
 import {
   isSafewordOwned,
   isWouldChangeAction,
@@ -10,6 +5,11 @@ import {
   selfHealProject,
   selfHealProjectPreservingProse
 } from "./chunk-XJIFKUKN.js";
+import {
+  error,
+  success,
+  warn
+} from "./chunk-QSLVO4XF.js";
 import {
   GENERATED_ARCHITECTURE_FILENAME,
   isArchitectureDocumentEnforcementEnabled,
@@ -25,7 +25,7 @@ import {
   readJson,
   writeJson
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-WPHE4CVS.js";
+import "./chunk-VBJXIMMS.js";
 
 // src/commands/architecture.ts
 import { execFileSync } from "child_process";
@@ -650,4 +650,4 @@ export {
   architectureStage,
   architectureStaged
 };
-//# sourceMappingURL=architecture-PKFEYKF5.js.map
+//# sourceMappingURL=architecture-MQGZ5IMW.js.map

package/dist/{architecture-document-TJCHWOJK.js → architecture-document-VZ4DSQFG.js}

@@ -11,7 +11,7 @@ import {
 import "./chunk-NEOV7ZY3.js";
 import "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-WPHE4CVS.js";
+import "./chunk-VBJXIMMS.js";
 export {
   isSafewordOwned,
   isWouldChangeAction,
@@ -22,4 +22,4 @@ export {
   selfHealProject,
   selfHealProjectPreservingProse
 };
-//# sourceMappingURL=architecture-document-TJCHWOJK.js.map
+//# sourceMappingURL=architecture-document-VZ4DSQFG.js.map

package/dist/{architecture-monorepo-AO32KPUV.js → architecture-monorepo-R4XJEUFG.js}

@@ -5,11 +5,11 @@ import {
   monorepoFingerprintOf
 } from "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-WPHE4CVS.js";
+import "./chunk-VBJXIMMS.js";
 export {
   discoverUnreadableWorkspaces,
   discoverWorkspaces,
   extractMonorepoArchitectureSnapshot,
   monorepoFingerprintOf
 };
-//# sourceMappingURL=architecture-monorepo-AO32KPUV.js.map
+//# sourceMappingURL=architecture-monorepo-R4XJEUFG.js.map

package/dist/{boundary-N5KK4A6Z.js → boundary-E5NPK5DT.js}

@@ -26,7 +26,7 @@ import {
 import {
   readFileSafe
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-WPHE4CVS.js";
+import "./chunk-VBJXIMMS.js";
 
 // src/commands/boundary.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -627,4 +627,4 @@ function boundary(options) {
 export {
   boundary
 };
-//# sourceMappingURL=boundary-N5KK4A6Z.js.map
+//# sourceMappingURL=boundary-E5NPK5DT.js.map

package/dist/{chunk-23BNG6FE.js → chunk-4L4NYOC3.js}

@@ -1,5 +1,5 @@
 // src/cli-protocol/agent-selection.ts
-var SUPPORTED_AGENT_INTEGRATIONS = ["claude", "codex", "cursor"];
+var SUPPORTED_AGENT_INTEGRATIONS = ["claude", "codex", "opencode", "cursor"];
 var DEFAULT_AGENT_INTEGRATIONS = Object.freeze([
   "claude",
   "codex"
@@ -17,7 +17,7 @@ function parseAgentSelection(value) {
       ok: false,
       error: {
         code: "AGENT_SELECTION_INVALID",
-        message: "`none` must be used alone; supported values are claude, codex, cursor, or none."
+        message: `\`none\` must be used alone; supported values are ${AGENT_SELECTION_DESCRIPTION}.`
       }
     };
   }
@@ -34,7 +34,7 @@ function invalidSelection() {
     ok: false,
     error: {
       code: "AGENT_SELECTION_INVALID",
-      message: "Supported agent values are claude, codex, cursor, or none."
+      message: `Supported agent values are ${AGENT_SELECTION_DESCRIPTION}.`
     }
   };
 }
@@ -44,4 +44,4 @@ export {
   AGENT_SELECTION_DESCRIPTION,
   parseAgentSelection
 };
-//# sourceMappingURL=chunk-23BNG6FE.js.map
+//# sourceMappingURL=chunk-4L4NYOC3.js.map

package/dist/chunk-4L4NYOC3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-protocol/agent-selection.ts"],"sourcesContent":["export type AgentIntegration = 'claude' | 'codex' | 'cursor' | 'opencode';\n\n/** Project configuration is always in scope; `agents` names the integrations. */\ninterface AgentSelection {\n  readonly agents: readonly AgentIntegration[];\n}\n\nexport interface AgentSelectionError {\n  readonly code: 'AGENT_SELECTION_INVALID';\n  readonly message: string;\n}\n\nexport type AgentSelectionResult =\n  | { readonly ok: true; readonly selection: AgentSelection }\n  | { readonly ok: false; readonly error: AgentSelectionError };\n\nconst SUPPORTED_AGENT_INTEGRATIONS = ['claude', 'codex', 'opencode', 'cursor'] as const;\nexport const DEFAULT_AGENT_INTEGRATIONS: readonly AgentIntegration[] = Object.freeze([\n  'claude',\n  'codex',\n]);\nexport const AGENT_SELECTION_DESCRIPTION = `${SUPPORTED_AGENT_INTEGRATIONS.join(', ')}, or none`;\n\nexport function parseAgentSelection(value: unknown): AgentSelectionResult {\n  if (value === undefined) {\n    return { ok: true, selection: { agents: DEFAULT_AGENT_INTEGRATIONS } };\n  }\n  if (typeof value !== 'string') return invalidSelection();\n\n  const values = value\n    .split(',')\n    .map(agent => agent.trim().toLowerCase())\n    .filter(agent => agent !== '');\n  if (values.length === 0) return invalidSelection();\n  if (values.includes('none')) {\n    return values.length === 1\n      ? { ok: true, selection: { agents: [] } }\n      : {\n          ok: false,\n          error: {\n            code: 'AGENT_SELECTION_INVALID',\n            message: `\\`none\\` must be used alone; supported values are ${AGENT_SELECTION_DESCRIPTION}.`,\n          },\n        };\n  }\n  if (values.some(agent => !SUPPORTED_AGENT_INTEGRATIONS.includes(agent as AgentIntegration))) {\n    return invalidSelection();\n  }\n  return {\n    ok: true,\n    selection: { agents: [...new Set(values as AgentIntegration[])] },\n  };\n}\n\nfunction invalidSelection(): AgentSelectionResult {\n  return {\n    ok: false,\n    error: {\n      code: 'AGENT_SELECTION_INVALID',\n      message: `Supported agent values are ${AGENT_SELECTION_DESCRIPTION}.`,\n    },\n  };\n}\n"],"mappings":";AAgBA,IAAM,+BAA+B,CAAC,UAAU,SAAS,YAAY,QAAQ;AACtE,IAAM,6BAA0D,OAAO,OAAO;AAAA,EACnF;AAAA,EACA;AACF,CAAC;AACM,IAAM,8BAA8B,GAAG,6BAA6B,KAAK,IAAI,CAAC;AAE9E,SAAS,oBAAoB,OAAsC;AACxE,MAAI,UAAU,QAAW;AACvB,WAAO,EAAE,IAAI,MAAM,WAAW,EAAE,QAAQ,2BAA2B,EAAE;AAAA,EACvE;AACA,MAAI,OAAO,UAAU,SAAU,QAAO,iBAAiB;AAEvD,QAAM,SAAS,MACZ,MAAM,GAAG,EACT,IAAI,WAAS,MAAM,KAAK,EAAE,YAAY,CAAC,EACvC,OAAO,WAAS,UAAU,EAAE;AAC/B,MAAI,OAAO,WAAW,EAAG,QAAO,iBAAiB;AACjD,MAAI,OAAO,SAAS,MAAM,GAAG;AAC3B,WAAO,OAAO,WAAW,IACrB,EAAE,IAAI,MAAM,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,IACtC;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,qDAAqD,2BAA2B;AAAA,MAC3F;AAAA,IACF;AAAA,EACN;AACA,MAAI,OAAO,KAAK,WAAS,CAAC,6BAA6B,SAAS,KAAyB,CAAC,GAAG;AAC3F,WAAO,iBAAiB;AAAA,EAC1B;AACA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,WAAW,EAAE,QAAQ,CAAC,GAAG,IAAI,IAAI,MAA4B,CAAC,EAAE;AAAA,EAClE;AACF;AAEA,SAAS,mBAAyC;AAChD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS,8BAA8B,2BAA2B;AAAA,IACpE;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-4VORK37W.js

@@ -0,0 +1,12 @@
+// src/version.ts
+import { createRequire } from "module";
+var require2 = createRequire(import.meta.url);
+var builtVersion = typeof __SAFEWORD_VERSION__ === "string" ? __SAFEWORD_VERSION__ : void 0;
+var pkg = builtVersion === void 0 ? require2("../package.json") : { version: builtVersion };
+var VERSION = pkg.version;
+var SAFEWORD_PEER_DEPENDENCIES = pkg.peerDependencies ?? {};
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-4VORK37W.js.map

package/dist/chunk-4VORK37W.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["import { createRequire } from 'node:module';\n\ndeclare const __SAFEWORD_VERSION__: string | undefined;\n\nconst require = createRequire(import.meta.url);\n// The relative path is intentional and must stay at one `..` — version.ts is at\n// src/ (depth 1 from packages/cli/), and tsup bundles it to dist/ (also depth 1),\n// so `../package.json` resolves correctly in both contexts. Helpers nested under\n// src/utils/ cannot read package.json directly without breaking once bundled —\n// they should import the metadata from here instead.\nconst builtVersion = typeof __SAFEWORD_VERSION__ === 'string' ? __SAFEWORD_VERSION__ : undefined;\nconst pkg =\n  builtVersion === undefined\n    ? (require('../package.json') as {\n        version: string;\n        peerDependencies?: Record<string, string>;\n      })\n    : { version: builtVersion };\n\nexport const VERSION = pkg.version;\nexport const SAFEWORD_PEER_DEPENDENCIES = pkg.peerDependencies ?? {};\n"],"mappings":";AAAA,SAAS,qBAAqB;AAI9B,IAAMA,WAAU,cAAc,YAAY,GAAG;AAM7C,IAAM,eAAe,OAAO,yBAAyB,WAAW,uBAAuB;AACvF,IAAM,MACJ,iBAAiB,SACZA,SAAQ,iBAAiB,IAI1B,EAAE,SAAS,aAAa;AAEvB,IAAM,UAAU,IAAI;AACpB,IAAM,6BAA6B,IAAI,oBAAoB,CAAC;","names":["require"]}

package/dist/chunk-556WOVCD.js

@@ -0,0 +1,72 @@
+import {
+  projectLifecycleSchema
+} from "./chunk-BUJI55OX.js";
+import {
+  createResult
+} from "./chunk-FOYGZ4MK.js";
+import {
+  isCursorProjectPath
+} from "./chunk-YM24LWXW.js";
+
+// src/lifecycle/cursor.ts
+import { existsSync } from "fs";
+import nodePath from "path";
+function cursorOwnedFiles(schema) {
+  return [...Object.keys(schema.ownedFiles), ...Object.keys(schema.managedFiles)].filter(
+    (path) => isCursorProjectPath(path)
+  );
+}
+function hasCursorProjectAssets(cwd, schema) {
+  return cursorOwnedFiles(schema).some((path) => existsSync(nodePath.join(cwd, path)));
+}
+function observeCursorProject(cwd, schema) {
+  const owned = cursorOwnedFiles(schema);
+  const missing = owned.filter((path) => !existsSync(nodePath.join(cwd, path)));
+  if (missing.length === 0) {
+    return createResult({
+      state: "healthy",
+      data: {
+        command: "cursor status",
+        coverage: "project-owned Cursor assets",
+        owned_files: owned.length
+      }
+    });
+  }
+  return createResult({
+    state: "action_required",
+    findings: [
+      {
+        code: "CURSOR_ASSETS_MISSING",
+        message: `${missing.length} Safeword-owned Cursor file(s) are missing; run \`safeword install --agents=cursor\`.`,
+        severity: "warning"
+      }
+    ],
+    nextActions: [
+      { command: "safeword install --agents=cursor", mutates: true, requiresHuman: false }
+    ],
+    data: {
+      command: "cursor status",
+      coverage: "project-owned Cursor assets",
+      owned_files: owned.length,
+      missing_files: missing.length
+    }
+  });
+}
+function unselectedCursorFinding(cwd, agents) {
+  if (agents.includes("cursor")) return [];
+  if (!hasCursorProjectAssets(cwd, projectLifecycleSchema(cwd, ["cursor"]))) return [];
+  return [
+    {
+      code: "CURSOR_NOT_SELECTED",
+      message: "This project has Safeword-owned Cursor assets that the current selection excludes; include `--agents=cursor` to keep them current.",
+      severity: "info"
+    }
+  ];
+}
+
+export {
+  hasCursorProjectAssets,
+  observeCursorProject,
+  unselectedCursorFinding
+};
+//# sourceMappingURL=chunk-556WOVCD.js.map

package/dist/chunk-556WOVCD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lifecycle/cursor.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport nodePath from 'node:path';\n\nimport { type CliResult, createResult } from '../cli-protocol/result.js';\nimport { isCursorProjectPath, type SafewordSchema } from '../schema.js';\nimport { projectLifecycleSchema } from './schema.js';\n\n/**\n * Safeword-owned Cursor files declared by the schema. Cursor has no host\n * process to interrogate, so its project-local assets are the only surface\n * evidence available.\n */\nfunction cursorOwnedFiles(schema: SafewordSchema): readonly string[] {\n  return [...Object.keys(schema.ownedFiles), ...Object.keys(schema.managedFiles)].filter(path =>\n    isCursorProjectPath(path),\n  );\n}\n\n/** True when this project already carries Safeword-owned Cursor assets. */\nexport function hasCursorProjectAssets(cwd: string, schema: SafewordSchema): boolean {\n  return cursorOwnedFiles(schema).some(path => existsSync(nodePath.join(cwd, path)));\n}\n\n/**\n * Observe the Cursor surface from its own assets rather than mirroring the\n * project result, so a Cursor-only gap cannot be reported as healthy.\n */\nexport function observeCursorProject(cwd: string, schema: SafewordSchema): CliResult {\n  const owned = cursorOwnedFiles(schema);\n  const missing = owned.filter(path => !existsSync(nodePath.join(cwd, path)));\n  if (missing.length === 0) {\n    return createResult({\n      state: 'healthy',\n      data: {\n        command: 'cursor status',\n        coverage: 'project-owned Cursor assets',\n        owned_files: owned.length,\n      },\n    });\n  }\n  return createResult({\n    state: 'action_required',\n    findings: [\n      {\n        code: 'CURSOR_ASSETS_MISSING',\n        message: `${missing.length} Safeword-owned Cursor file(s) are missing; run \\`safeword install --agents=cursor\\`.`,\n        severity: 'warning',\n      },\n    ],\n    nextActions: [\n      { command: 'safeword install --agents=cursor', mutates: true, requiresHuman: false },\n    ],\n    data: {\n      command: 'cursor status',\n      coverage: 'project-owned Cursor assets',\n      owned_files: owned.length,\n      missing_files: missing.length,\n    },\n  });\n}\n\n/**\n * Advise when a project carries Cursor assets that the current selection\n * excludes, so an upgrade cannot silently leave them at an older release.\n * Resolves the Cursor-inclusive schema itself — the selection's own schema has\n * every Cursor path filtered out and could never detect them.\n */\nexport function unselectedCursorFinding(\n  cwd: string,\n  agents: readonly string[],\n): CliResult['findings'] {\n  if (agents.includes('cursor')) return [];\n  if (!hasCursorProjectAssets(cwd, projectLifecycleSchema(cwd, ['cursor']))) return [];\n  return [\n    {\n      code: 'CURSOR_NOT_SELECTED',\n      message:\n        'This project has Safeword-owned Cursor assets that the current selection excludes; include `--agents=cursor` to keep them current.',\n      severity: 'info',\n    },\n  ];\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,OAAO,cAAc;AAWrB,SAAS,iBAAiB,QAA2C;AACnE,SAAO,CAAC,GAAG,OAAO,KAAK,OAAO,UAAU,GAAG,GAAG,OAAO,KAAK,OAAO,YAAY,CAAC,EAAE;AAAA,IAAO,UACrF,oBAAoB,IAAI;AAAA,EAC1B;AACF;AAGO,SAAS,uBAAuB,KAAa,QAAiC;AACnF,SAAO,iBAAiB,MAAM,EAAE,KAAK,UAAQ,WAAW,SAAS,KAAK,KAAK,IAAI,CAAC,CAAC;AACnF;AAMO,SAAS,qBAAqB,KAAa,QAAmC;AACnF,QAAM,QAAQ,iBAAiB,MAAM;AACrC,QAAM,UAAU,MAAM,OAAO,UAAQ,CAAC,WAAW,SAAS,KAAK,KAAK,IAAI,CAAC,CAAC;AAC1E,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,aAAa;AAAA,MAClB,OAAO;AAAA,MACP,MAAM;AAAA,QACJ,SAAS;AAAA,QACT,UAAU;AAAA,QACV,aAAa,MAAM;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,aAAa;AAAA,IAClB,OAAO;AAAA,IACP,UAAU;AAAA,MACR;AAAA,QACE,MAAM;AAAA,QACN,SAAS,GAAG,QAAQ,MAAM;AAAA,QAC1B,UAAU;AAAA,MACZ;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,EAAE,SAAS,oCAAoC,SAAS,MAAM,eAAe,MAAM;AAAA,IACrF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa,MAAM;AAAA,MACnB,eAAe,QAAQ;AAAA,IACzB;AAAA,EACF,CAAC;AACH;AAQO,SAAS,wBACd,KACA,QACuB;AACvB,MAAI,OAAO,SAAS,QAAQ,EAAG,QAAO,CAAC;AACvC,MAAI,CAAC,uBAAuB,KAAK,uBAAuB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAG,QAAO,CAAC;AACnF,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-RKQDXUWG.js → chunk-56ZUJOIZ.js}

@@ -1,26 +1,26 @@
-import {
-  legacyObservationIsEmpty,
-  observeClaudeLegacy
-} from "./chunk-IEO5TIRE.js";
 import {
   observeApplicableClaudePlugins
-} from "./chunk-C5CLFFHY.js";
+} from "./chunk-JEFU3MAX.js";
 import {
   canonicalClaudeProjectRoot
 } from "./chunk-7XELS325.js";
+import {
+  legacyObservationIsEmpty,
+  observeClaudeLegacy
+} from "./chunk-IEO5TIRE.js";
 import {
   CLAUDE_MIGRATION_SCHEMA,
   claudeConfigDirectory
 } from "./chunk-WVA4Q6BX.js";
-import {
-  SETTINGS_HOOKS
-} from "./chunk-W32GLIFH.js";
 import {
   createResult
 } from "./chunk-FOYGZ4MK.js";
+import {
+  SETTINGS_HOOKS
+} from "./chunk-W32GLIFH.js";
 import {
   VERSION
-} from "./chunk-UAFM77KW.js";
+} from "./chunk-4VORK37W.js";
 
 // src/claude-plugin/status.ts
 import { createHash as createHash2 } from "crypto";
@@ -306,4 +306,4 @@ export {
   equivalentClaudeInstallations,
   observeClaudeStatus
 };
-//# sourceMappingURL=chunk-RKQDXUWG.js.map
+//# sourceMappingURL=chunk-56ZUJOIZ.js.map

package/dist/{chunk-2TM5WZQC.js → chunk-6Z2DOROQ.js}

@@ -1,11 +1,11 @@
+import {
+  canonicalClaudeProjectRoot
+} from "./chunk-7XELS325.js";
 import {
   assertSafeClaudeCleanupTarget,
   containedClaudeCleanupPath,
   observeClaudeLegacy
 } from "./chunk-IEO5TIRE.js";
-import {
-  canonicalClaudeProjectRoot
-} from "./chunk-7XELS325.js";
 import {
   CLAUDE_MIGRATION_SCHEMA,
   advisoryStateDigest,
@@ -15,6 +15,9 @@ import {
   writeClaudeMigrationAttention,
   writeClaudePluginMode
 } from "./chunk-WVA4Q6BX.js";
+import {
+  createResult
+} from "./chunk-FOYGZ4MK.js";
 import {
   writeDurableFile,
   writeDurableFileExclusive
@@ -24,9 +27,6 @@ import {
   isAcceptedHistoricalFile,
   isAcceptedHistoricalHook
 } from "./chunk-XICREN7F.js";
-import {
-  createResult
-} from "./chunk-FOYGZ4MK.js";
 
 // src/claude-plugin/cleanup.ts
 import { createHash, randomUUID } from "crypto";
@@ -833,4 +833,4 @@ export {
   migrateClaudeLegacyAutomatically,
   recoverClaudeCleanup
 };
-//# sourceMappingURL=chunk-2TM5WZQC.js.map
+//# sourceMappingURL=chunk-6Z2DOROQ.js.map

package/dist/chunk-A3QLTTGK.js

@@ -0,0 +1,69 @@
+// src/utils/profile-lock.ts
+import { randomUUID } from "crypto";
+import { mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from "fs";
+import nodePath from "path";
+var DEFAULT_MAX_AGE_MS = 10 * 60 * 1e3;
+function readRecord(path) {
+  try {
+    const value = JSON.parse(
+      readFileSync(nodePath.join(path, "owner.json"), "utf8")
+    );
+    return typeof value.owner === "string" && typeof value.acquired_at === "number" ? { owner: value.owner, acquired_at: value.acquired_at } : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function lockAge(path, now) {
+  const record = readRecord(path);
+  if (record !== void 0) return now - record.acquired_at;
+  try {
+    return now - statSync(path).mtimeMs;
+  } catch {
+    return 0;
+  }
+}
+function createLock(path, owner, now) {
+  try {
+    mkdirSync(path);
+    writeFileSync(
+      nodePath.join(path, "owner.json"),
+      `${JSON.stringify({ owner, acquired_at: now })}
+`,
+      { encoding: "utf8", flag: "wx", mode: 384 }
+    );
+    return { path, owner };
+  } catch {
+    return void 0;
+  }
+}
+function acquireProfileLock(path, options = {}) {
+  const owner = options.owner ?? randomUUID();
+  const now = (options.now ?? Date.now)();
+  mkdirSync(nodePath.dirname(path), { recursive: true });
+  const gate = `${path}.acquire`;
+  try {
+    mkdirSync(gate);
+  } catch {
+    return void 0;
+  }
+  try {
+    const acquired = createLock(path, owner, now);
+    if (acquired !== void 0) return acquired;
+    if (lockAge(path, now) <= (options.maxAgeMs ?? DEFAULT_MAX_AGE_MS)) return void 0;
+    rmSync(path, { recursive: true, force: true });
+    return createLock(path, owner, now);
+  } finally {
+    rmSync(gate, { recursive: true, force: true });
+  }
+}
+function releaseProfileLock(lock) {
+  if (readRecord(lock.path)?.owner !== lock.owner) return false;
+  rmSync(lock.path, { recursive: true, force: true });
+  return true;
+}
+
+export {
+  acquireProfileLock,
+  releaseProfileLock
+};
+//# sourceMappingURL=chunk-A3QLTTGK.js.map

package/dist/chunk-A3QLTTGK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/profile-lock.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';\nimport nodePath from 'node:path';\n\nconst DEFAULT_MAX_AGE_MS = 10 * 60 * 1000;\n\ninterface LockRecord {\n  readonly owner: string;\n  readonly acquired_at: number;\n}\n\nexport interface ProfileLock {\n  readonly path: string;\n  readonly owner: string;\n}\n\nexport interface ProfileLockOptions {\n  readonly owner?: string;\n  readonly now?: () => number;\n  readonly maxAgeMs?: number;\n}\n\nfunction readRecord(path: string): LockRecord | undefined {\n  try {\n    const value = JSON.parse(\n      readFileSync(nodePath.join(path, 'owner.json'), 'utf8'),\n    ) as Partial<LockRecord>;\n    return typeof value.owner === 'string' && typeof value.acquired_at === 'number'\n      ? { owner: value.owner, acquired_at: value.acquired_at }\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction lockAge(path: string, now: number): number {\n  const record = readRecord(path);\n  if (record !== undefined) return now - record.acquired_at;\n  try {\n    return now - statSync(path).mtimeMs;\n  } catch {\n    return 0;\n  }\n}\n\nfunction createLock(path: string, owner: string, now: number): ProfileLock | undefined {\n  try {\n    mkdirSync(path);\n    writeFileSync(\n      nodePath.join(path, 'owner.json'),\n      `${JSON.stringify({ owner, acquired_at: now })}\\n`,\n      { encoding: 'utf8', flag: 'wx', mode: 0o600 },\n    );\n    return { path, owner };\n  } catch {\n    return undefined;\n  }\n}\n\nexport function acquireProfileLock(\n  path: string,\n  options: ProfileLockOptions = {},\n): ProfileLock | undefined {\n  const owner = options.owner ?? randomUUID();\n  const now = (options.now ?? Date.now)();\n  mkdirSync(nodePath.dirname(path), { recursive: true });\n  const gate = `${path}.acquire`;\n  try {\n    mkdirSync(gate);\n  } catch {\n    return undefined;\n  }\n  try {\n    const acquired = createLock(path, owner, now);\n    if (acquired !== undefined) return acquired;\n    if (lockAge(path, now) <= (options.maxAgeMs ?? DEFAULT_MAX_AGE_MS)) return undefined;\n    rmSync(path, { recursive: true, force: true });\n    return createLock(path, owner, now);\n  } finally {\n    rmSync(gate, { recursive: true, force: true });\n  }\n}\n\nexport function releaseProfileLock(lock: ProfileLock): boolean {\n  if (readRecord(lock.path)?.owner !== lock.owner) return false;\n  rmSync(lock.path, { recursive: true, force: true });\n  return true;\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,WAAW,cAAc,QAAQ,UAAU,qBAAqB;AACzE,OAAO,cAAc;AAErB,IAAM,qBAAqB,KAAK,KAAK;AAkBrC,SAAS,WAAW,MAAsC;AACxD,MAAI;AACF,UAAM,QAAQ,KAAK;AAAA,MACjB,aAAa,SAAS,KAAK,MAAM,YAAY,GAAG,MAAM;AAAA,IACxD;AACA,WAAO,OAAO,MAAM,UAAU,YAAY,OAAO,MAAM,gBAAgB,WACnE,EAAE,OAAO,MAAM,OAAO,aAAa,MAAM,YAAY,IACrD;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,QAAQ,MAAc,KAAqB;AAClD,QAAM,SAAS,WAAW,IAAI;AAC9B,MAAI,WAAW,OAAW,QAAO,MAAM,OAAO;AAC9C,MAAI;AACF,WAAO,MAAM,SAAS,IAAI,EAAE;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,MAAc,OAAe,KAAsC;AACrF,MAAI;AACF,cAAU,IAAI;AACd;AAAA,MACE,SAAS,KAAK,MAAM,YAAY;AAAA,MAChC,GAAG,KAAK,UAAU,EAAE,OAAO,aAAa,IAAI,CAAC,CAAC;AAAA;AAAA,MAC9C,EAAE,UAAU,QAAQ,MAAM,MAAM,MAAM,IAAM;AAAA,IAC9C;AACA,WAAO,EAAE,MAAM,MAAM;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBACd,MACA,UAA8B,CAAC,GACN;AACzB,QAAM,QAAQ,QAAQ,SAAS,WAAW;AAC1C,QAAM,OAAO,QAAQ,OAAO,KAAK,KAAK;AACtC,YAAU,SAAS,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACrD,QAAM,OAAO,GAAG,IAAI;AACpB,MAAI;AACF,cAAU,IAAI;AAAA,EAChB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,WAAW,WAAW,MAAM,OAAO,GAAG;AAC5C,QAAI,aAAa,OAAW,QAAO;AACnC,QAAI,QAAQ,MAAM,GAAG,MAAM,QAAQ,YAAY,oBAAqB,QAAO;AAC3E,WAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC7C,WAAO,WAAW,MAAM,OAAO,GAAG;AAAA,EACpC,UAAE;AACA,WAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC/C;AACF;AAEO,SAAS,mBAAmB,MAA4B;AAC7D,MAAI,WAAW,KAAK,IAAI,GAAG,UAAU,KAAK,MAAO,QAAO;AACxD,SAAO,KAAK,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,SAAO;AACT;","names":[]}