safeword 0.82.4 → 0.82.5

package/codex-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "safeword",
-  "version": "0.82.4",
+  "version": "0.82.5",
   "description": "Safeword workflow guidance and gates for Codex.",
   "author": {
     "name": "Arcade AI"

package/codex-plugin/package.json

@@ -1,5 +1,5 @@
 {
   "name": "safeword-codex-plugin",
-  "version": "0.82.4",
+  "version": "0.82.5",
   "type": "module"
 }

package/codex-plugin/runtime/cli.js

@@ -14114,7 +14114,7 @@ function deriveCodexMigrationResult(facts) {
   const hasLegacy = facts.legacyAssets.length > 0 || facts.legacyEvents.length > 0;
   const protectedStatus = legacyProtection(facts, hasLegacy);
   const state = migrationState(facts, hasLegacy);
-  const next = nextAction(state);
+  const next = nextAction(state, facts);
   return {
     schema_version: "2",
     ok: state === "plugin",
@@ -14143,7 +14143,23 @@ function legacyProtection(facts, hasLegacy) {
     return "unprotected";
   return facts.viableLegacyEvents.length === facts.legacyEvents.length ? "protected" : "partial";
 }
-function nextAction(state) {
+function nextAction(state, facts) {
+  if (state === "plugin_installed_hook_activation_failed") {
+    return {
+      kind: "human",
+      instruction: CODEX_HOOK_ACTIVATION_FAILED_ACTION,
+      mutates: false,
+      requires_human: true
+    };
+  }
+  if (state === "plugin_enabled_hook_unproven" && facts.activationRestartProven && facts.proof.status === "partial") {
+    return {
+      kind: "human",
+      instruction: CODEX_PARTIAL_ACTIVATION_ACTION,
+      mutates: false,
+      requires_human: true
+    };
+  }
   if (state === "plugin_installed_app_restart_required" || state === "plugin_enabled_hook_unproven") {
     return {
       kind: "human",
@@ -14157,11 +14173,9 @@ function nextAction(state) {
 }
 function renderCodexMigrationHuman(result) {
   const lines = [`Codex migration: ${result.state}`, `Protection: ${result.protected}`];
-  if (result.state === "plugin_setup_required") {
-    lines.push(`Setup: ${CODEX_MIGRATION_SCHEMA.paths.bootstrapSkill}`);
-  } else if (result.state === "plugin_installed_app_restart_required" || result.state === "plugin_enabled_hook_unproven") {
-    lines.push(CODEX_RESTART_CONTEXT);
-  }
+  const context = codexMigrationContext(result);
+  if (context !== undefined)
+    lines.push(context);
   const next = result.next_actions[0];
   if (next !== undefined) {
     lines.push(`Next: ${"command" in next ? next.command : next.instruction}`);
@@ -14170,12 +14184,19 @@ function renderCodexMigrationHuman(result) {
 `)}
 `;
 }
+function codexMigrationContext(result) {
+  const next = result.next_actions[0];
+  if (result.state === "plugin_enabled_hook_unproven" && next !== undefined && "instruction" in next && next.instruction === CODEX_PARTIAL_ACTIVATION_ACTION) {
+    return CODEX_PARTIAL_ACTIVATION_CONTEXT;
+  }
+  return CODEX_MIGRATION_CONTEXT[result.state];
+}
 function codexMigrationExitCode(result) {
   if (result.errors.length > 0)
     return 1;
   return result.ok ? 0 : 2;
 }
-var CODEX_RESTART_ACTION = "Fully restart Codex, then resume this task", CODEX_REVIEW_THEN_RESTART_ACTION = "Review the installed hooks in Codex Desktop under Settings > Hooks (or with /hooks in the terminal TUI). Fully restart Codex, then resume this task", CODEX_RESTART_INSTRUCTION, CODEX_RESTART_CONTEXT = "This Codex app may keep its loaded Safeword catalogue.", MIGRATION_STATE_RULES, NEXT_COMMANDS;
+var CODEX_RESTART_ACTION = "Fully restart Codex, then resume this task", CODEX_REVIEW_THEN_RESTART_ACTION = "Review the installed hooks in Codex Desktop under Settings > Hooks (or with /hooks in the terminal TUI). Fully restart Codex, then resume this task", CODEX_RESTART_INSTRUCTION, CODEX_RESTART_CONTEXT = "This Codex app may keep its loaded Safeword catalogue.", CODEX_HOOK_ACTIVATION_FAILED_CONTEXT = "Codex restarted, but Safeword received no current lifecycle hook proof.", CODEX_HOOK_ACTIVATION_FAILED_ACTION = "Review the installed hooks in Codex Desktop under Settings > Hooks (or with /hooks in the terminal TUI). If they are enabled and trusted, use a Codex surface that dispatches lifecycle hooks before relying on Safeword protection.", CODEX_PARTIAL_ACTIVATION_CONTEXT = "Codex restarted and Safeword has partial current lifecycle hook proof.", CODEX_PARTIAL_ACTIVATION_ACTION = "Continue in this Codex session. Safeword will confirm protection after the remaining lifecycle hooks run.", MIGRATION_STATE_RULES, NEXT_COMMANDS, CODEX_MIGRATION_CONTEXT;
 var init_migration = __esm(() => {
   init_schema();
   init_inventory();
@@ -14194,6 +14215,10 @@ var init_migration = __esm(() => {
       state: "plugin_update_required",
       matches: (facts) => facts.plugin.enabled === true && !codexPluginVersionMatchesPackage(facts.plugin)
     },
+    {
+      state: "plugin_installed_hook_activation_failed",
+      matches: (facts) => facts.plugin.enabled === true && !pluginProtectionIsCurrent(facts) && facts.activationPending && facts.activationRestartObserved
+    },
     {
       state: "plugin_installed_app_restart_required",
       matches: (facts) => facts.activationPending && facts.plugin.enabled === true
@@ -14217,6 +14242,7 @@ var init_migration = __esm(() => {
     compatibility: "safeword codex migrate --finalize",
     plugin: undefined,
     plugin_installed_app_restart_required: undefined,
+    plugin_installed_hook_activation_failed: undefined,
     plugin_enabled_hook_unproven: undefined,
     plugin_setup_required: "safeword codex migrate",
     plugin_disabled: "safeword codex migrate",
@@ -14224,6 +14250,19 @@ var init_migration = __esm(() => {
     legacy: "safeword codex migrate",
     not_configured: "safeword codex migrate"
   };
+  CODEX_MIGRATION_CONTEXT = {
+    recovery_required: undefined,
+    plugin_setup_required: `Setup: ${CODEX_MIGRATION_SCHEMA.paths.bootstrapSkill}`,
+    plugin_disabled: undefined,
+    plugin_update_required: undefined,
+    legacy: undefined,
+    plugin_installed_app_restart_required: CODEX_RESTART_CONTEXT,
+    plugin_installed_hook_activation_failed: CODEX_HOOK_ACTIVATION_FAILED_CONTEXT,
+    plugin_enabled_hook_unproven: CODEX_RESTART_CONTEXT,
+    compatibility: undefined,
+    plugin: undefined,
+    not_configured: undefined
+  };
 });
 
 // src/codex-plugin/migration-error.ts
@@ -36201,6 +36240,24 @@ function codexActivationIsPending(environment = process.env) {
     return true;
   }
 }
+function codexActivationRestartWasObserved(environment = process.env, now = new Date, options = {}) {
+  try {
+    const identity = currentCodexPluginIdentity();
+    const marker = readActivationMarkerV2(environment, identity);
+    if (marker === null)
+      return false;
+    return activationReceiptForRestart(marker, options.hostObservation ?? observeCodexHostProcesses(), identity, now) !== null;
+  } catch {
+    return false;
+  }
+}
+function codexActivationRestartIsProven(environment = process.env) {
+  try {
+    return readActivationReceipt(environment, currentCodexPluginIdentity()) !== null;
+  } catch {
+    return false;
+  }
+}
 function activationIsPendingForIdentity(environment, identity) {
   return existsSync31(codexActivationMarkerPath(environment)) || [legacyCodexActivationMarkerPath(environment), legacyCodexRestartMarkerPath(environment)].some((path4) => legacyActivationMarkerMatches(path4, identity));
 }
@@ -36262,7 +36319,7 @@ function writeCodexActivationMarker(environment = process.env, now = new Date, o
 }
 function activeHostsForMarker(options) {
   if (options.activeHosts !== undefined) {
-    return options.activeHosts === null || options.activeHosts.length === 0 ? null : options.activeHosts;
+    return options.activeHosts;
   }
   const observation = options.hostObservation ?? observeCodexHostProcesses();
   if (!observation.available)
@@ -36272,7 +36329,7 @@ function activeHostsForMarker(options) {
   if (currentHost !== null && activeHosts.every((host) => !sameCodexHost(host, currentHost))) {
     activeHosts.push(currentHost);
   }
-  return activeHosts.length === 0 ? null : activeHosts;
+  return activeHosts;
 }
 function hostObservationForOverride(current = null) {
   return {
@@ -36283,7 +36340,8 @@ function hostObservationForOverride(current = null) {
 }
 function activationReceiptForRestart(marker, hostObservation, identity, now) {
   const currentHost = hostObservation.current;
-  if (!hostObservation.available || currentHost === null || marker.host_observation !== "observed" || marker.active_hosts.length === 0 || now.getTime() < Date.parse(marker.installed_at) || marker.active_hosts.some((installedHost) => sameCodexHost(installedHost, currentHost)) || marker.active_hosts.some((installedHost) => hostObservation.running.some((runningHost) => sameCodexHost(installedHost, runningHost)))) {
+  const installedAt = Date.parse(marker.installed_at);
+  if (!hostObservation.available || currentHost === null || marker.host_observation !== "observed" || now.getTime() < installedAt || Date.parse(currentHost.started_at) < installedAt || marker.active_hosts.some((installedHost) => sameCodexHost(installedHost, currentHost)) || marker.active_hosts.some((installedHost) => hostObservation.running.some((runningHost) => sameCodexHost(installedHost, runningHost)))) {
     return null;
   }
   return {
@@ -36649,7 +36707,7 @@ function isActivationMarkerV2(value) {
   if (typeof value !== "object" || value === null)
     return false;
   const marker = value;
-  return marker.schema_version === 2 && pluginVersionIsWellFormed(marker.plugin_version) && typeof marker.manifest_sha256 === "string" && SHA256_PATTERN.test(marker.manifest_sha256) && typeof marker.activation_id === "string" && typeof marker.installed_at === "string" && !Number.isNaN(Date.parse(marker.installed_at)) && (marker.host_observation === "observed" || marker.host_observation === "unavailable") && Array.isArray(marker.active_hosts) && marker.active_hosts.every(isCodexHostProcessIdentity) && (marker.host_observation === "observed" ? marker.active_hosts.length > 0 : marker.active_hosts.length === 0);
+  return marker.schema_version === 2 && pluginVersionIsWellFormed(marker.plugin_version) && typeof marker.manifest_sha256 === "string" && SHA256_PATTERN.test(marker.manifest_sha256) && typeof marker.activation_id === "string" && typeof marker.installed_at === "string" && !Number.isNaN(Date.parse(marker.installed_at)) && (marker.host_observation === "observed" || marker.host_observation === "unavailable") && Array.isArray(marker.active_hosts) && marker.active_hosts.every(isCodexHostProcessIdentity) && (marker.host_observation === "observed" || marker.active_hosts.length === 0);
 }
 function isActivationReceiptV1(value) {
   if (typeof value !== "object" || value === null)
@@ -37035,7 +37093,9 @@ function observeCodexMigrationResult(cwd = process.cwd(), environment = process.
     viableLegacyEvents: observeViableLegacyEvents(cwd, legacyEvents, environment),
     finalized: codexFinalizationIsComplete(cwd),
     recoveryRequired,
-    activationPending: codexActivationIsPending(environment)
+    activationPending: codexActivationIsPending(environment),
+    activationRestartObserved: codexActivationRestartWasObserved(environment),
+    activationRestartProven: codexActivationRestartIsProven(environment)
   });
   if (pluginObservationError !== undefined) {
     result.errors.push({
@@ -37053,10 +37113,19 @@ function observeCodexMigrationResult(cwd = process.cwd(), environment = process.
   }
   return result;
 }
-function codexMigrationMessage(state, proof) {
-  if (state === "plugin_enabled_hook_unproven" && proof !== undefined) {
+function codexMigrationMessage(result) {
+  const { proof, state } = result;
+  const next = result.next_actions[0];
+  if (state === "plugin_enabled_hook_unproven" && proof.status === "partial" && next !== undefined && "instruction" in next) {
+    return `Codex restarted and Safeword has partial current lifecycle hook proof. Missing proof: ${proof.missing_events.join(", ")}. ${next.instruction}`;
+  }
+  if (state === "plugin_enabled_hook_unproven") {
     return `Codex migration state: plugin_enabled_hook_unproven. In the restarted Codex app, review /hooks and exercise these missing hooks: ${proof.missing_events.join(", ")}. Then run safeword codex migrate --finalize.`;
   }
+  if (state === "plugin_installed_hook_activation_failed") {
+    const protection = result.protected === "unprotected" ? "Safeword protection is unavailable in this Codex surface." : `Current plugin protection is unavailable; ${result.protected} legacy protection remains configured.`;
+    return `Codex restarted, but Safeword received no current lifecycle hook proof. Missing proof: ${proof.missing_events.join(", ")}. ${protection}`;
+  }
   return CODEX_MIGRATION_MESSAGES[state] ?? `Codex migration state: ${state}.`;
 }
 function legacyCodexMigrationState(state) {
@@ -37076,7 +37145,7 @@ function observeCodexMigration(cwd = process.cwd(), environment = process.env) {
     findings: result.errors.length > 0 ? [] : [
       {
         code: `CODEX_${legacyState.toUpperCase()}`,
-        message: codexMigrationMessage(result.state, result.proof),
+        message: codexMigrationMessage(result),
         severity: result.ok ? "info" : "warning",
         metadata: {
           migration_schema_version: result.schema_version,
@@ -37438,6 +37507,7 @@ var init_operations = __esm(() => {
   CODEX_CONFIG_PATH2 = CODEX_MIGRATION_SCHEMA.paths.config;
   CODEX_MIGRATION_MESSAGES = {
     plugin_installed_app_restart_required: CODEX_RESTART_CONTEXT,
+    plugin_installed_hook_activation_failed: CODEX_HOOK_ACTIVATION_FAILED_CONTEXT,
     compatibility: "Codex is protected by the current profile plugin; verified legacy protection remains until explicit finalization.",
     plugin_enabled_hook_unproven: "Codex migration state: plugin_enabled_hook_unproven. Review /hooks in the restarted Codex app; when protection is confirmed, run safeword codex migrate --finalize.",
     recovery_required: "Codex migration state: recovery_required. Recovery is required before migration can continue."

package/codex-plugin/skills/audit/SKILL.md

@@ -561,7 +561,7 @@ Changed project learnings in the resolved namespace root's `learnings/*.md` must
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2> /dev/null || pwd)}"
 source "$PROJECT_DIR/.safeword/hooks/lib/audit-scope.sh"
 audit_scope_initialize "$PROJECT_DIR" || exit $?
-NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR")"
+NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR")"
 
 learning_is_in_audit_scope() {
   [ "$AUDIT_SCOPE_MODE" = "repository" ] && return 0
@@ -721,13 +721,13 @@ audit_scope_initialize "$PROJECT_DIR" || exit $?
 
 # Resolve the namespace root (honors config paths.projectRoot in real runs).
 # Fall back on directory existence — robust when the resolver hook is absent.
-NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" 2> /dev/null)"
+NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" 2> /dev/null)"
 [ -d "$NS_ROOT" ] || {
   if [ -d "$PROJECT_DIR/.project" ]; then NS_ROOT="$PROJECT_DIR/.project"; else NS_ROOT="$PROJECT_DIR/.safeword-project"; fi
 }
-PERSONAS_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key personas 2> /dev/null)"
-SURFACES_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key surfaces 2> /dev/null)"
-GLOSSARY_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key glossary 2> /dev/null)"
+PERSONAS_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key personas 2> /dev/null)"
+SURFACES_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key surfaces 2> /dev/null)"
+GLOSSARY_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key glossary 2> /dev/null)"
 [ -n "$PERSONAS_FILE" ] || PERSONAS_FILE="$NS_ROOT/personas.md"
 [ -n "$SURFACES_FILE" ] || SURFACES_FILE="$NS_ROOT/surfaces.md"
 [ -n "$GLOSSARY_FILE" ] || GLOSSARY_FILE="$NS_ROOT/glossary.md"

package/codex-plugin/skills/bdd/references/PLAN_IMPLEMENTATION.md

@@ -159,10 +159,10 @@ findings remain. Return findings through the typed reviewer result contract.
 
 ## Exit: review, then (optionally) the user
 
-1. **Independent review first.** At review time, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project review-knowledge --json`. Resolve a review-capable Safeword CLI, then invoke the coordinator with the current files identified by the resolver:
+1. **Independent review first.** At review time, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project review-knowledge --json`. Resolve a review-capable Safeword CLI, then invoke the coordinator with the current files identified by the resolver:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" review run plan-implementation --agent-handoff --json --context spec.md ticket.md feature-file principles-file personas-file surfaces-file architecture-records -- impl-plan.md
+   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" review run plan-implementation --agent-handoff --json --context spec.md ticket.md feature-file principles-file personas-file surfaces-file architecture-records -- impl-plan.md
    ```
 
    The shared coordinator sends that bounded packet to the opposite headless agent when available; its typed verdict, failure classification, and independence level are authoritative. `impl-plan.md` is the work under review; all resolved feature and project artifacts are bounded context. Only when that typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` immediately with the original result and the same accepted targets; return every other result unchanged and do not substitute another private subagent. Fix findings, re-resolve the sources, re-review, then stamp the exit with the returned agent provenance (`write-review-stamp.ts --author-agent "author-agent" --reviewer-agent "actual-reviewer" --independence "independence" --phase plan-implementation`, where the review gate is enabled). Add `--model` only when the executed reviewer reports a verifiable model identifier; the coordinator never invents one. Human handoff happens **only after** this review passes — raw planning output is never presented for approval. Exception, any time: information only the user has (intent, priorities, constraints not in code or docs) routes to the user the moment the gap appears — `$safeword:elicit`.

package/codex-plugin/skills/bdd/references/TDD.md

@@ -196,7 +196,7 @@ Off by default. When `.safeword/config.json` sets `architectureReviewGate: true`
 2. **A fresh-context review.** Resolve a review-capable Safeword CLI, then run the shared coordinator with only the bounded design evidence:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" review run plan-implementation impl-plan.md ticket-spec feature-file --agent-handoff --json
+   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" review run plan-implementation impl-plan.md ticket-spec feature-file --agent-handoff --json
    ```
 
    The shared coordinator prefers the opposite headless agent. Only when its typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` with the original result and the same accepted targets; return every other result unchanged. Degraded findings cannot satisfy a required independent-review gate. On an independent pass, stamp it:

package/codex-plugin/skills/explain/SKILL.md

@@ -39,7 +39,7 @@ Gather the durable trail safeword already keeps, then narrate it. Run:
 
 ```bash
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2> /dev/null || pwd)}"
-NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR")"
+NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR")"
 # What you're on now: the last re-entry line names the current ticket + Next
 tail -3 "$NS_ROOT/re-entry.md" 2> /dev/null
 # Fallback when re-entry is empty: in_progress tickets (not epics)

package/codex-plugin/skills/quality-review/SKILL.md

@@ -50,7 +50,7 @@ If in a BDD workflow, read the current ticket from `<namespace-root>/tickets/` a
 
 ### Project-principle challenge
 
-For a BDD ticket, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project review-knowledge --json` at the
+For a BDD ticket, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project review-knowledge --json` at the
 start of each pass and read the current `principles`, `personas`, and `surfaces`
 paths and content it returns (including overrides such as `paths.principles`).
 Do not substitute labels or intake-era content.
@@ -212,7 +212,7 @@ Each pass:
    guarantee a bare `safeword` on `PATH`:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" review run quality-review [--context path/to/evidence] --agent-handoff --json -- changed-file [more-changed-files...]
+   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" review run quality-review [--context path/to/evidence] --agent-handoff --json -- changed-file [more-changed-files...]
    ```
 
    A healthy deep review may return `REVIEW_PENDING` after its foreground

package/codex-plugin/skills/retro-filer/SKILL.md

@@ -17,7 +17,7 @@ a caller-nominated path. The spool contains sanitized safeword findings for
 ## Procedure
 
 1. Before reading or making any tracker call, run
-   `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project retro-drain "<spool-path>" --validated-jsonl`.
+   `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project retro-drain "<spool-path>" --validated-jsonl`.
    Use only its JSONL stdout as the filing input. A nonzero exit means validation
    failed: make no search, comment, or create call, leave the spool unchanged,
    and report `retro-filer: cannot file - draft validation failed`. If its output
@@ -60,7 +60,7 @@ a caller-nominated path. The spool contains sanitized safeword findings for
    the draft only when the append succeeded and the exact ack is visible. If the
    append or verification fails, leave the draft in place.
 5. Create at most five new issues per run. Drain only by running
-   `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project retro-drain "<spool-path>"`; never rewrite or
+   `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project retro-drain "<spool-path>"`; never rewrite or
    delete the spool directly. The helper removes only drafts whose valid ack is
    reader-visible, so unfiled or unacknowledged drafts remain. If tracker write
    access is unavailable, leave the spool unchanged and report

package/codex-plugin/skills/review-spec/SKILL.md

@@ -35,7 +35,7 @@ Adversarially review a ticket's scenarios: treat them as if you're trying to bre
 - **Manual re-run** — invoke `$safeword:review-spec` anytime after `define-behavior` (e.g., scenarios changed during implement and you want to re-validate). Allowed on a closed ticket too — a post-hoc audit is still readable.
 
 Read the active ticket's `.feature` source first. At review time, run
-`bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project review-knowledge --json` and read the current
+`bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project review-knowledge --json` and read the current
 `principles`, `personas`, and `surfaces` source paths and content it returns, so
 the review is grounded in project knowledge rather than labels or stale intake
 context. The resolver honors `paths.principles`, `paths.personas`, and
@@ -58,7 +58,7 @@ Resolve a review-capable Safeword CLI first; source checkouts do not guarantee
 a bare `safeword` on `PATH`:
 
 ```bash
-SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" review run scenario-gate feature-file [legacy-test-definitions] --context ticket-spec [dimensions-file] principles-file personas-file surfaces-file --agent-handoff --json
+SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" review run scenario-gate feature-file [legacy-test-definitions] --context ticket-spec [dimensions-file] principles-file personas-file surfaces-file --agent-handoff --json
 ```
 
 The coordinator's assigned/actual reviewer, failure classification, and

package/codex-plugin/skills/self-review/SKILL.md

@@ -45,7 +45,7 @@ installed helper — report it to the user and resolve before retrying.
 ## Review the spec (do this now, with the stamp written)
 
 The stamp records that a review was invoked; the actual scrutiny is yours. At
-review time, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.4/runtime/cli.js" project review-knowledge --json` and use its
+review time, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.82.5/runtime/cli.js" project review-knowledge --json` and use its
 current `principles`, `personas`, and `surfaces` source paths and content—not
 labels remembered from intake. These resolve from `paths.principles`,
 `paths.personas`, and `paths.surfaces` when configured. Read those sources with the active ticket's

package/dist/{architecture-V6XNVK7J.js → architecture-IQQKQBML.js}

@@ -25,7 +25,7 @@ import {
   readJson,
   writeJson
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-TVNJO2EN.js";
+import "./chunk-7PKXJO6S.js";
 
 // src/commands/architecture.ts
 import { execFileSync } from "child_process";
@@ -650,4 +650,4 @@ export {
   architectureStage,
   architectureStaged
 };
-//# sourceMappingURL=architecture-V6XNVK7J.js.map
+//# sourceMappingURL=architecture-IQQKQBML.js.map

package/dist/{architecture-document-AMBH2C22.js → architecture-document-FG5EGABT.js}

@@ -11,7 +11,7 @@ import {
 import "./chunk-NEOV7ZY3.js";
 import "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-TVNJO2EN.js";
+import "./chunk-7PKXJO6S.js";
 export {
   isSafewordOwned,
   isWouldChangeAction,
@@ -22,4 +22,4 @@ export {
   selfHealProject,
   selfHealProjectPreservingProse
 };
-//# sourceMappingURL=architecture-document-AMBH2C22.js.map
+//# sourceMappingURL=architecture-document-FG5EGABT.js.map

package/dist/{architecture-monorepo-S3GETI3W.js → architecture-monorepo-QFGGDRJQ.js}

@@ -5,11 +5,11 @@ import {
   monorepoFingerprintOf
 } from "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-TVNJO2EN.js";
+import "./chunk-7PKXJO6S.js";
 export {
   discoverUnreadableWorkspaces,
   discoverWorkspaces,
   extractMonorepoArchitectureSnapshot,
   monorepoFingerprintOf
 };
-//# sourceMappingURL=architecture-monorepo-S3GETI3W.js.map
+//# sourceMappingURL=architecture-monorepo-QFGGDRJQ.js.map

package/dist/{boundary-PRWLTQXI.js → boundary-3QXNYN2S.js}

@@ -26,7 +26,7 @@ import {
 import {
   readFileSafe
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-TVNJO2EN.js";
+import "./chunk-7PKXJO6S.js";
 
 // src/commands/boundary.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -650,4 +650,4 @@ function boundary(options) {
 export {
   boundary
 };
-//# sourceMappingURL=boundary-PRWLTQXI.js.map
+//# sourceMappingURL=boundary-3QXNYN2S.js.map

package/dist/{chunk-TVNJO2EN.js → chunk-7PKXJO6S.js}

@@ -1,7 +1,7 @@
 // <define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>
-var define_SAFEWORD_RELAY_BUILD_ATTESTATION_default = { ancestorPairs: [], artifacts: {}, buildCommit: "a304e9ae9330c0c563b508de7a5ed93d8b617c57", enabled: false, manifestBase64: "ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K", manifestSha256: "946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262" };
+var define_SAFEWORD_RELAY_BUILD_ATTESTATION_default = { ancestorPairs: [], artifacts: {}, buildCommit: "1d1037472a421c19b08f1a789c3f8a5e24bbad3e", enabled: false, manifestBase64: "ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K", manifestSha256: "946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262" };
 
 export {
   define_SAFEWORD_RELAY_BUILD_ATTESTATION_default
 };
-//# sourceMappingURL=chunk-TVNJO2EN.js.map
+//# sourceMappingURL=chunk-7PKXJO6S.js.map

package/dist/{chunk-TVNJO2EN.js.map → chunk-7PKXJO6S.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["<define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>"],"sourcesContent":["{\"ancestorPairs\":[],\"artifacts\":{},\"buildCommit\":\"a304e9ae9330c0c563b508de7a5ed93d8b617c57\",\"enabled\":false,\"manifestBase64\":\"ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K\",\"manifestSha256\":\"946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262\"}"],"mappings":";AAAA,wDAAC,eAAgB,CAAC,GAAE,WAAY,CAAC,GAAE,aAAc,4CAA2C,SAAU,OAAM,gBAAiB,wDAAuD,gBAAiB,mEAAkE;","names":[]}
+{"version":3,"sources":["<define:__SAFEWORD_RELAY_BUILD_ATTESTATION__>"],"sourcesContent":["{\"ancestorPairs\":[],\"artifacts\":{},\"buildCommit\":\"1d1037472a421c19b08f1a789c3f8a5e24bbad3e\",\"enabled\":false,\"manifestBase64\":\"ewogICJlbmFibGVkIjogZmFsc2UsCiAgInZlcnNpb24iOiAxCn0K\",\"manifestSha256\":\"946401206ee213e84b672a7f2a400cfa7da911c2f5d6da1c051e63940ed27262\"}"],"mappings":";AAAA,wDAAC,eAAgB,CAAC,GAAE,WAAY,CAAC,GAAE,aAAc,4CAA2C,SAAU,OAAM,gBAAiB,wDAAuD,gBAAiB,mEAAkE;","names":[]}

package/dist/{chunk-LTSHW45K.js → chunk-CGYJJM2Y.js}

@@ -5,7 +5,7 @@ import {
   CODEX_PLUGIN_HOOK_EVENTS,
   legacyCodexEventIsViable,
   recordCodexHookProof
-} from "./chunk-DKC24YSC.js";
+} from "./chunk-SMJMHOZA.js";
 import {
   SAFEWORD_SCHEMA,
   generateOwnedPathsModule
@@ -606,4 +606,4 @@ export {
   packagedNamespaceRootLabel,
   codexHook
 };
-//# sourceMappingURL=chunk-LTSHW45K.js.map
+//# sourceMappingURL=chunk-CGYJJM2Y.js.map

package/dist/{chunk-BSBKSP54.js → chunk-JIUDHG7G.js}

@@ -2,7 +2,7 @@ import {
   PRODUCTION_INTEGRATIONS,
   checkHealth,
   coordinateSelectedIntegrations
-} from "./chunk-F56GGOF4.js";
+} from "./chunk-WXAJFT4H.js";
 import {
   compareVersions,
   isSafePackageVersion
@@ -266,4 +266,4 @@ export {
   summarizeLifecycleStatus,
   observeLifecycleStatus
 };
-//# sourceMappingURL=chunk-BSBKSP54.js.map
+//# sourceMappingURL=chunk-JIUDHG7G.js.map

package/dist/{chunk-DKC24YSC.js → chunk-SMJMHOZA.js}

@@ -281,6 +281,28 @@ function codexActivationIsPending(environment = process.env) {
     return true;
   }
 }
+function codexActivationRestartWasObserved(environment = process.env, now = /* @__PURE__ */ new Date(), options = {}) {
+  try {
+    const identity = currentCodexPluginIdentity();
+    const marker = readActivationMarkerV2(environment, identity);
+    if (marker === null) return false;
+    return activationReceiptForRestart(
+      marker,
+      options.hostObservation ?? observeCodexHostProcesses(),
+      identity,
+      now
+    ) !== null;
+  } catch {
+    return false;
+  }
+}
+function codexActivationRestartIsProven(environment = process.env) {
+  try {
+    return readActivationReceipt(environment, currentCodexPluginIdentity()) !== null;
+  } catch {
+    return false;
+  }
+}
 function activationIsPendingForIdentity(environment, identity) {
   return (
     // The canonical marker is written atomically. If it exists but cannot be
@@ -359,7 +381,7 @@ function writeCodexActivationMarker(environment = process.env, now = /* @__PURE_
 }
 function activeHostsForMarker(options) {
   if (options.activeHosts !== void 0) {
-    return options.activeHosts === null || options.activeHosts.length === 0 ? null : options.activeHosts;
+    return options.activeHosts;
   }
   const observation = options.hostObservation ?? observeCodexHostProcesses();
   if (!observation.available) return null;
@@ -368,7 +390,7 @@ function activeHostsForMarker(options) {
   if (currentHost !== null && activeHosts.every((host) => !sameCodexHost(host, currentHost))) {
     activeHosts.push(currentHost);
   }
-  return activeHosts.length === 0 ? null : activeHosts;
+  return activeHosts;
 }
 function hostObservationForOverride(current = null) {
   return {
@@ -379,7 +401,8 @@ function hostObservationForOverride(current = null) {
 }
 function activationReceiptForRestart(marker, hostObservation, identity, now) {
   const currentHost = hostObservation.current;
-  if (!hostObservation.available || currentHost === null || marker.host_observation !== "observed" || marker.active_hosts.length === 0 || now.getTime() < Date.parse(marker.installed_at) || marker.active_hosts.some((installedHost) => sameCodexHost(installedHost, currentHost)) || marker.active_hosts.some(
+  const installedAt = Date.parse(marker.installed_at);
+  if (!hostObservation.available || currentHost === null || marker.host_observation !== "observed" || now.getTime() < installedAt || Date.parse(currentHost.started_at) < installedAt || marker.active_hosts.some((installedHost) => sameCodexHost(installedHost, currentHost)) || marker.active_hosts.some(
     (installedHost) => hostObservation.running.some((runningHost) => sameCodexHost(installedHost, runningHost))
   )) {
     return null;
@@ -745,7 +768,7 @@ function isCodexHookProof(value) {
 function isActivationMarkerV2(value) {
   if (typeof value !== "object" || value === null) return false;
   const marker = value;
-  return marker.schema_version === 2 && pluginVersionIsWellFormed(marker.plugin_version) && typeof marker.manifest_sha256 === "string" && SHA256_PATTERN.test(marker.manifest_sha256) && typeof marker.activation_id === "string" && typeof marker.installed_at === "string" && !Number.isNaN(Date.parse(marker.installed_at)) && (marker.host_observation === "observed" || marker.host_observation === "unavailable") && Array.isArray(marker.active_hosts) && marker.active_hosts.every(isCodexHostProcessIdentity) && (marker.host_observation === "observed" ? marker.active_hosts.length > 0 : marker.active_hosts.length === 0);
+  return marker.schema_version === 2 && pluginVersionIsWellFormed(marker.plugin_version) && typeof marker.manifest_sha256 === "string" && SHA256_PATTERN.test(marker.manifest_sha256) && typeof marker.activation_id === "string" && typeof marker.installed_at === "string" && !Number.isNaN(Date.parse(marker.installed_at)) && (marker.host_observation === "observed" || marker.host_observation === "unavailable") && Array.isArray(marker.active_hosts) && marker.active_hosts.every(isCodexHostProcessIdentity) && (marker.host_observation === "observed" || marker.active_hosts.length === 0);
 }
 function isActivationReceiptV1(value) {
   if (typeof value !== "object" || value === null) return false;
@@ -766,10 +789,12 @@ export {
   legacyCodexEventIsViable,
   CODEX_PLUGIN_HOOK_EVENTS,
   codexActivationIsPending,
+  codexActivationRestartWasObserved,
+  codexActivationRestartIsProven,
   codexActivationMarkerIssue,
   writeCodexActivationMarker,
   recordCodexHookProof,
   observeCodexSessionProof,
   observeCodexHookProof
 };
-//# sourceMappingURL=chunk-DKC24YSC.js.map
+//# sourceMappingURL=chunk-SMJMHOZA.js.map