safeword 0.83.0 → 0.83.1

package/codex-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "safeword",
-  "version": "0.83.0",
+  "version": "0.83.1",
   "description": "Safeword workflow guidance and gates for Codex.",
   "author": {
     "name": "Arcade AI"

package/codex-plugin/package.json

@@ -1,5 +1,5 @@
 {
   "name": "safeword-codex-plugin",
-  "version": "0.83.0",
+  "version": "0.83.1",
   "type": "module"
 }

package/codex-plugin/runtime/cli.js

@@ -581,11 +581,11 @@ var init_historical_catalogue_generated = __esm(() => {
         ".claude/skills/audit/SKILL.md": "64afc92c419a8354c015f18ffe0cc581cfce48cb3fee3db8e3c39d75844fb2d3",
         ".claude/skills/bdd/DISCOVERY.md": "ac8f221691aeffaa16ca6a15a7930a462bdf64aeaf2fe9600903a9dbb417f992",
         ".claude/skills/bdd/DONE.md": "e9f22430341cf225eaf58ef6335720c5033cb8f6779425d5740adc0ff80a5f60",
-        ".claude/skills/bdd/PLAN_IMPLEMENTATION.md": "bf7610ab88b4b89a55a233b408ef848b2e4bd413bb65a3b7a7a780a8c02f5d49",
+        ".claude/skills/bdd/PLAN_IMPLEMENTATION.md": "0d1c9103c9e6c00b4fb43d3c90a5118f90b9feb964b15daf12340a06d53e4f9a",
         ".claude/skills/bdd/SCENARIOS.md": "a79590a8dcd8c6377f92e2ec0c26d5479f28e16e53291348f86f59b73381a19e",
         ".claude/skills/bdd/SKILL.md": "970d5af3af22e599126b5a15f75ec9c9478fd0ca810b31ec33d2dbd94ec83516",
         ".claude/skills/bdd/SPLITTING.md": "e232a37a4d76f0dfc51e65965c1e1b7f1572e0dedce0fb8c031e75bd6544a708",
-        ".claude/skills/bdd/TDD.md": "2865c9efa57682eb211cc101f9db15f529bd605c3a2bebb57131e2a6d3aec79d",
+        ".claude/skills/bdd/TDD.md": "ed311cb035ab485577319ed21866b40a8406e3551989e4e5ae8b414cbb165eb9",
         ".claude/skills/bdd/VERIFY.md": "85abadfe756a3f391779fe500cd5c66597a33e0cab7fcef55f6b633b30818f31",
         ".claude/skills/brainstorm/SKILL.md": "fe99638bd1621cbd5fe3780a8d39023d4b175e3be2aef2e60d0ebe7558848f2e",
         ".claude/skills/cleanup-zombies/SKILL.md": "e0af9635774767cf36eb69726e11c642ec1dad42839c11407ea8ef60f89fc289",
@@ -599,11 +599,11 @@ var init_historical_catalogue_generated = __esm(() => {
         ".claude/skills/finish-review/SKILL.md": "fdb8800d140467f1747f7b0ee067137386026003126ff17c00758940766dd07a",
         ".claude/skills/lint/SKILL.md": "f8bc868fb10a06ca46a22236309b9f0c3ffbd70eecc024d3c79de8ef0e42fd14",
         ".claude/skills/pr-readiness/SKILL.md": "b23b1bb565f0a4551defa0641b52254133807b1c79495641d82bba9102fd19ff",
-        ".claude/skills/quality-review/SKILL.md": "6c356d37a4894d9456639236b9d305e2b9a42491119e55cb437a246e0096500d",
+        ".claude/skills/quality-review/SKILL.md": "9c7b0a5065d184fed0fd19e449c7a304eee35e376d052409163c3a83501ece27",
         ".claude/skills/refactor/SKILL.md": "a51a858fb13b50cbc86789edbde8a39e364b5cdd7d5d3b025d555d90b221760e",
         ".claude/skills/retro-filer/SKILL.md": "ea126f3805a2befefb4db2011439f075ebfd6eca31b78bd5f284ac11d667b4f0",
         ".claude/skills/retro/SKILL.md": "d01abb281a1c941024f304709c8727769383eb76d0ccc7da53f73776c4a0122d",
-        ".claude/skills/review-spec/SKILL.md": "d8c5d225ea2fdb723ad9b54bbc17f8f9b566373d04504ee1a466eed50784c7d8",
+        ".claude/skills/review-spec/SKILL.md": "1003829012f8134a805f26635782b1e14a5165caa28d6747e7cb9cabfc78bec0",
         ".claude/skills/self-review/SKILL.md": "e5ff994ec84573e6f129127bad89617f0a67b67c5cf792cedac558b6e419ac3b",
         ".claude/skills/spike/SKILL.md": "905aab56037ad5a258bafa91cb2ebf05cff1acffbc9e1fd6f7a1f27230672f37",
         ".claude/skills/tdd-review/SKILL.md": "4b945f122a90d23462845d7bdbbd0b736aa69d423a2d7e99ebf646bf118faa4f",
@@ -48995,6 +48995,9 @@ function independentReviewResult(input) {
       actual_reviewer: input.output.reviewer_agent,
       ...input.model !== undefined && { reviewer_model: input.model },
       ...input.preferredModel !== undefined && { preferred_model: input.preferredModel },
+      ...input.preferredModelFailure !== undefined && {
+        preferred_model_failure: input.preferredModelFailure
+      },
       ...input.preferredFailure !== undefined && { preferred_failure: input.preferredFailure },
       independence: "cross-agent",
       reviewer_output: input.output
@@ -49044,7 +49047,7 @@ async function executeReview(reviewer, prepared, model, runDeadline) {
     prepared.cleanup();
   }
 }
-function assessFallback(outcome, reviewer, dispatchId) {
+function assessReviewOutcome(outcome, reviewer, dispatchId) {
   if (outcome.kind === "failed")
     return outcome;
   const provenance = verifyProvenance(outcome.output, reviewer, dispatchId);
@@ -49053,6 +49056,9 @@ function assessFallback(outcome, reviewer, dispatchId) {
 function agentName(agent) {
   return agent === "codex" ? "Codex" : "Claude";
 }
+function reviewerLoginCommand(agent) {
+  return agent === "codex" ? "codex login" : "claude auth login";
+}
 function causePhrase(failure) {
   return FAILURE_CAUSES[failure] ?? "could not be run";
 }
@@ -49063,6 +49069,31 @@ function exhaustedExplanation(routes) {
   });
   return [...sentences, "No independent check was recorded."].join(" ");
 }
+function primaryFailureRoutes(input) {
+  if (input.preferredModelFailure === undefined) {
+    return [
+      {
+        agent: input.assignedReviewer,
+        role: "independent reviewer",
+        model: input.preferredModel,
+        failure: input.preferredFailure
+      }
+    ];
+  }
+  return [
+    {
+      agent: input.assignedReviewer,
+      role: "independent reviewer on its configured model",
+      model: input.preferredModel,
+      failure: input.preferredModelFailure
+    },
+    {
+      agent: input.assignedReviewer,
+      role: "independent reviewer on its default model",
+      failure: input.preferredFailure
+    }
+  ];
+}
 function nextStepFor(reviewer, failure) {
   const name = agentName(reviewer);
   if (failure === "not_installed")
@@ -49075,8 +49106,6 @@ function nextStepFor(reviewer, failure) {
     return `Run ${name} --help to diagnose it, then retry review.`;
   if (failure === "launch_failed")
     return `Run ${name} --help and fix its launch failure, then retry review.`;
-  if (failure === "not_authenticated")
-    return `Sign in to ${name}, then run the review again.`;
   return "Run the review again.";
 }
 function degradedDescription(assignedReviewer, actualReviewer, failure) {
@@ -49174,6 +49203,9 @@ function changedReviewResult(input) {
 function routeFailureData(input) {
   return {
     ...input.preferredModel !== undefined && { preferred_model: input.preferredModel },
+    ...input.preferredModelFailure !== undefined && {
+      preferred_model_failure: input.preferredModelFailure
+    },
     preferred_failure: input.preferredFailure,
     ...input.alternateFailure !== undefined && {
       alternate_model_failure: input.alternateFailure,
@@ -49181,6 +49213,41 @@ function routeFailureData(input) {
     }
   };
 }
+function authenticationRequiredResult(input) {
+  const reviewer = agentName(input.assignedReviewer);
+  return createResult({
+    state: "action_required",
+    findings: [
+      {
+        code: "REVIEW_AUTHENTICATION_REQUIRED",
+        message: `The independent ${reviewer} review needs authentication. Reauthenticate ${reviewer}, then retry the same review; no fallback or review evidence was recorded.`,
+        severity: "warning"
+      }
+    ],
+    effects: {
+      network: [
+        ...networkEffectsForFailure(input.assignedReviewer, input.preferredFailure),
+        ...networkEffectsForFailure(input.assignedReviewer, input.alternateFailure)
+      ]
+    },
+    recovery: [
+      {
+        command: reviewerLoginCommand(input.assignedReviewer),
+        description: `Reauthenticate ${reviewer}, then retry the original independent review.`,
+        requiresHuman: true
+      }
+    ],
+    data: {
+      command: "review run",
+      status: "blocked",
+      author_agent: input.author,
+      assigned_reviewer: input.assignedReviewer,
+      ...routeFailureData(input),
+      review_policy: input.policy,
+      independence: "none"
+    }
+  });
+}
 function reviewRequest(reviewer) {
   return { kind: "review", target: reviewer, operation: "request" };
 }
@@ -49206,7 +49273,11 @@ async function executePrimaryReview(input, reviewer, primaryModel, runDeadline)
   let execution = await executeReview(reviewer, prepared, primaryModel, runDeadline);
   let model = primaryModel;
   let dispatchId = prepared.packet.dispatch_id;
+  let rejectedModel;
+  let rejectedModelFailure;
   if (primaryModel !== undefined && execution.outcome.kind === "failed" && execution.outcome.failure === "unsupported" && !execution.outcome.terminal && canFundRoute(runDeadline)) {
+    rejectedModel = primaryModel;
+    rejectedModelFailure = execution.outcome.failure;
     const defaultPrepared = preparePrimaryReview(input, reviewer);
     const retried = await executeReview(reviewer, defaultPrepared, undefined, runDeadline);
     execution = {
@@ -49217,7 +49288,13 @@ async function executePrimaryReview(input, reviewer, primaryModel, runDeadline)
     model = undefined;
     dispatchId = defaultPrepared.packet.dispatch_id;
   }
-  return { ...execution, model, dispatchId };
+  return {
+    ...execution,
+    model,
+    dispatchId,
+    preferredModel: rejectedModel,
+    preferredModelFailure: rejectedModelFailure
+  };
 }
 function prepareFallbackReview(input, assignedReviewer, author) {
   const fallbackName = agentName(author);
@@ -49249,7 +49326,7 @@ async function runDegradedFallback(input) {
   });
   if (changedResult !== undefined)
     return changedResult;
-  const assessment = assessFallback(outcome, input.author, prepared.packet.dispatch_id);
+  const assessment = assessReviewOutcome(outcome, input.author, prepared.packet.dispatch_id);
   if (assessment.kind === "failed") {
     return createResult({
       state: "action_required",
@@ -49257,12 +49334,7 @@ async function runDegradedFallback(input) {
         {
           code: "REVIEW_ROUTES_EXHAUSTED",
           message: exhaustedExplanation([
-            {
-              agent: input.assignedReviewer,
-              role: "independent reviewer",
-              model: input.preferredModel,
-              failure: input.preferredFailure
-            },
+            ...primaryFailureRoutes(input),
             ...input.alternateFailure === undefined ? [] : [
               {
                 agent: input.assignedReviewer,
@@ -49288,7 +49360,7 @@ async function runDegradedFallback(input) {
       recovery: [
         {
           command: retryCommand(input.kind, input.targets, input.context),
-          description: nextStepFor(input.assignedReviewer, input.preferredFailure),
+          description: nextStepFor(input.assignedReviewer, input.preferredModelFailure ?? input.preferredFailure),
           requiresHuman: true
         }
       ],
@@ -49400,11 +49472,9 @@ async function runAlternateModelRoute(input) {
   });
   if (changedResult !== undefined)
     return { kind: "completed", result: changedResult };
-  const assessment = assessFallback(outcome, input.reviewer, prepared.packet.dispatch_id);
+  const assessment = assessReviewOutcome(outcome, input.reviewer, prepared.packet.dispatch_id);
   if (assessment.kind === "failed") {
-    if (ALTERNATE_MODEL_SKIP_FAILURES.has(assessment.failure))
-      return { kind: "skipped" };
-    return { ...assessment, model };
+    return resolveAlternateModelFailure(input, model, assessment);
   }
   const output = assessment.output;
   const result = independentReviewResult({
@@ -49413,10 +49483,30 @@ async function runAlternateModelRoute(input) {
     output,
     model,
     preferredModel: input.preferredModel,
+    preferredModelFailure: input.preferredModelFailure,
     preferredFailure: input.preferredFailure
   });
   return { kind: "completed", result };
 }
+function resolveAlternateModelFailure(input, model, assessment) {
+  if (ALTERNATE_MODEL_SKIP_FAILURES.has(assessment.failure))
+    return { kind: "skipped" };
+  if (assessment.failure !== "not_authenticated")
+    return { ...assessment, model };
+  return {
+    kind: "completed",
+    result: authenticationRequiredResult({
+      author: input.author,
+      assignedReviewer: input.reviewer,
+      preferredModel: input.preferredModel,
+      preferredModelFailure: input.preferredModelFailure,
+      preferredFailure: input.preferredFailure,
+      alternateModel: model,
+      alternateFailure: assessment.failure,
+      policy: input.policy
+    })
+  };
+}
 async function runRemainingRoutes(input) {
   const alternate = await runAlternateModelRoute({
     cwd: input.cwd,
@@ -49427,6 +49517,7 @@ async function runRemainingRoutes(input) {
     author: input.author,
     reviewer: input.assignedReviewer,
     preferredModel: input.preferredModel,
+    preferredModelFailure: input.preferredModelFailure,
     preferredFailure: input.preferredFailure,
     policy: input.policy,
     runDeadline: input.runDeadline
@@ -49450,12 +49541,7 @@ function exhaustedRunResult(input) {
       {
         code: "REVIEW_ROUTES_EXHAUSTED",
         message: exhaustedExplanation([
-          {
-            agent: input.assignedReviewer,
-            role: "independent reviewer",
-            model: input.preferredModel,
-            failure: input.preferredFailure
-          },
+          ...primaryFailureRoutes(input),
           ...input.alternateFailure === undefined ? [] : [
             {
               agent: input.assignedReviewer,
@@ -49477,7 +49563,7 @@ function exhaustedRunResult(input) {
     recovery: [
       {
         command: retryCommand(input.kind, input.targets, input.context),
-        description: nextStepFor(input.assignedReviewer, input.preferredFailure),
+        description: nextStepFor(input.assignedReviewer, input.preferredModelFailure ?? input.preferredFailure),
         requiresHuman: true
       }
     ],
@@ -49532,8 +49618,11 @@ async function runReview(input) {
     sourceChanged,
     snapshotChanged,
     model: completedModel,
-    dispatchId
+    dispatchId,
+    preferredModel,
+    preferredModelFailure
   } = await executePrimaryReview(input, reviewer, primaryModel, runDeadline);
+  const reportedPreferredModel = preferredModel ?? completedModel;
   const changedResult = changedReviewResult({
     author: pair.author,
     reviewer,
@@ -49548,12 +49637,23 @@ async function runReview(input) {
   if (changedResult !== undefined)
     return changedResult;
   if (outcome.kind === "failed") {
+    if (outcome.failure === "not_authenticated") {
+      return authenticationRequiredResult({
+        author: pair.author,
+        assignedReviewer: reviewer,
+        preferredModel: reportedPreferredModel,
+        preferredModelFailure,
+        preferredFailure: outcome.failure,
+        policy
+      });
+    }
     if (outcome.terminal) {
       return exhaustedRunResult({
         ...input,
         author: pair.author,
         assignedReviewer: reviewer,
-        preferredModel: completedModel,
+        preferredModel: reportedPreferredModel,
+        preferredModelFailure,
         preferredFailure: outcome.failure,
         policy
       });
@@ -49562,7 +49662,8 @@ async function runReview(input) {
       ...input,
       author: pair.author,
       assignedReviewer: reviewer,
-      preferredModel: completedModel,
+      preferredModel: reportedPreferredModel,
+      preferredModelFailure,
       preferredFailure: outcome.failure,
       policy,
       runDeadline
@@ -49574,14 +49675,22 @@ async function runReview(input) {
       ...input,
       author: pair.author,
       assignedReviewer: reviewer,
-      preferredModel: completedModel,
+      preferredModel: reportedPreferredModel,
+      preferredModelFailure,
       preferredFailure: provenance.code,
       policy,
       runDeadline
     });
   }
   const output = provenance.output;
-  return independentReviewResult({ author: pair.author, reviewer, output, model: completedModel });
+  return independentReviewResult({
+    author: pair.author,
+    reviewer,
+    output,
+    model: completedModel,
+    preferredModel,
+    preferredModelFailure
+  });
 }
 var MAX_TERMINAL_REVIEWER_TEXT_LENGTH = 2000, FAILURE_CAUSES, NON_ATTEMPT_FAILURES, ALTERNATE_MODEL_SKIP_FAILURES;
 var init_coordinator = __esm(() => {

package/codex-plugin/skills/audit/SKILL.md

@@ -561,7 +561,7 @@ Changed project learnings in the resolved namespace root's `learnings/*.md` must
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2> /dev/null || pwd)}"
 source "$PROJECT_DIR/.safeword/hooks/lib/audit-scope.sh"
 audit_scope_initialize "$PROJECT_DIR" || exit $?
-NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR")"
+NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR")"
 
 learning_is_in_audit_scope() {
   [ "$AUDIT_SCOPE_MODE" = "repository" ] && return 0
@@ -721,13 +721,13 @@ audit_scope_initialize "$PROJECT_DIR" || exit $?
 
 # Resolve the namespace root (honors config paths.projectRoot in real runs).
 # Fall back on directory existence — robust when the resolver hook is absent.
-NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" 2> /dev/null)"
+NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" 2> /dev/null)"
 [ -d "$NS_ROOT" ] || {
   if [ -d "$PROJECT_DIR/.project" ]; then NS_ROOT="$PROJECT_DIR/.project"; else NS_ROOT="$PROJECT_DIR/.safeword-project"; fi
 }
-PERSONAS_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key personas 2> /dev/null)"
-SURFACES_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key surfaces 2> /dev/null)"
-GLOSSARY_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key glossary 2> /dev/null)"
+PERSONAS_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key personas 2> /dev/null)"
+SURFACES_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key surfaces 2> /dev/null)"
+GLOSSARY_FILE="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR" --key glossary 2> /dev/null)"
 [ -n "$PERSONAS_FILE" ] || PERSONAS_FILE="$NS_ROOT/personas.md"
 [ -n "$SURFACES_FILE" ] || SURFACES_FILE="$NS_ROOT/surfaces.md"
 [ -n "$GLOSSARY_FILE" ] || GLOSSARY_FILE="$NS_ROOT/glossary.md"

package/codex-plugin/skills/bdd/references/PLAN_IMPLEMENTATION.md

@@ -159,13 +159,13 @@ findings remain. Return findings through the typed reviewer result contract.
 
 ## Exit: review, then (optionally) the user
 
-1. **Independent review first.** At review time, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project review-knowledge --json`. Resolve a review-capable Safeword CLI, then invoke the coordinator with the current files identified by the resolver:
+1. **Independent review first.** At review time, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project review-knowledge --json`. Resolve a review-capable Safeword CLI, then invoke the coordinator with the current files identified by the resolver:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" review run plan-implementation --agent-handoff --json --context spec.md ticket.md feature-file principles-file personas-file surfaces-file architecture-records -- impl-plan.md
+   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" review run plan-implementation --agent-handoff --json --context spec.md ticket.md feature-file principles-file personas-file surfaces-file architecture-records -- impl-plan.md
    ```
 
-   The shared coordinator sends that bounded packet to the opposite headless agent when available; its typed verdict, failure classification, and independence level are authoritative. `impl-plan.md` is the work under review; all resolved feature and project artifacts are bounded context. Only when that typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` immediately with the original result and the same accepted targets; return every other result unchanged and do not substitute another private subagent. Fix findings, re-resolve the sources, re-review, then stamp the exit with the returned agent provenance (`write-review-stamp.ts --author-agent "author-agent" --reviewer-agent "actual-reviewer" --independence "independence" --phase plan-implementation`, where the review gate is enabled). Add `--model` only when the executed reviewer reports a verifiable model identifier; the coordinator never invents one. Human handoff happens **only after** this review passes — raw planning output is never presented for approval. Exception, any time: information only the user has (intent, priorities, constraints not in code or docs) routes to the user the moment the gap appears — `$safeword:elicit`.
+   The shared coordinator sends that bounded packet to the opposite headless agent when available; its typed verdict, failure classification, and independence level are authoritative. `impl-plan.md` is the work under review; all resolved feature and project artifacts are bounded context. If the typed result is `REVIEW_AUTHENTICATION_REQUIRED`, execute its exact recovery command; the user's browser or device flow may need to complete. After successful authentication, rerun the same coordinator command once. Do not invoke `$safeword:finish-review`, accept degraded coverage, or loop on another auth denial; report an unsuccessful reauthentication as the blocker. Only when that typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` immediately with the original result and the same accepted targets; return every other result unchanged and do not substitute another private subagent. Fix findings, re-resolve the sources, re-review, then stamp the exit with the returned agent provenance (`write-review-stamp.ts --author-agent "author-agent" --reviewer-agent "actual-reviewer" --independence "independence" --phase plan-implementation`, where the review gate is enabled). Add `--model` only when the executed reviewer reports a verifiable model identifier; the coordinator never invents one. Human handoff happens **only after** this review passes — raw planning output is never presented for approval. Exception, any time: information only the user has (intent, priorities, constraints not in code or docs) routes to the user the moment the gap appears — `$safeword:elicit`.
 
 2. **`designApprovalGate`** (in `.safeword/config.json`): **absent or off** — the reviewed plan advances autonomously; do not ask. **Enabled** — present the reviewed plan (riskiest assumption, build order, decisions) and wait for user approval before `implement`.
 3. **Sessions without an interactive user** (cloud/headless — Claude Code on the Web, Codex Cloud, Cursor Cloud Agents): an enabled approval gate must not stall the container. Record the auto-decision as pending approval in the ticket work log and surface the reviewed plan in the session's reviewable output (PR description / session summary) — approval lands at PR review. Note: Cursor Cloud Agents run `preToolUse` hooks but not stop hooks, so enforcement rides the transition gate there, not stop-time nudges.

package/codex-plugin/skills/bdd/references/TDD.md

@@ -196,10 +196,10 @@ Off by default. When `.safeword/config.json` sets `architectureReviewGate: true`
 2. **A fresh-context review.** Resolve a review-capable Safeword CLI, then run the shared coordinator with only the bounded design evidence:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" review run plan-implementation impl-plan.md ticket-spec feature-file --agent-handoff --json
+   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" review run plan-implementation --agent-handoff --json --context spec.md ticket.md feature-file principles-file personas-file surfaces-file architecture-records -- impl-plan.md
    ```
 
-   The shared coordinator prefers the opposite headless agent. Only when its typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` with the original result and the same accepted targets; return every other result unchanged. Degraded findings cannot satisfy a required independent-review gate. On an independent pass, stamp it:
+   The shared coordinator prefers the opposite headless agent. If the typed result is `REVIEW_AUTHENTICATION_REQUIRED`, execute its exact recovery command; the user's browser or device flow may need to complete. After successful authentication, rerun the same coordinator command once. Do not invoke `$safeword:finish-review`, accept degraded coverage, or loop on another auth denial; report an unsuccessful reauthentication as the blocker. Only when its typed result is `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` with the original result and the same accepted targets; return every other result unchanged. Degraded findings cannot satisfy a required independent-review gate. On an independent pass, stamp it:
 
    ```bash
    bun .safeword/hooks/write-review-stamp.ts --author-agent "author-agent" --reviewer-agent "actual-reviewer" --independence "independence" impl-plan

package/codex-plugin/skills/explain/SKILL.md

@@ -39,7 +39,7 @@ Gather the durable trail safeword already keeps, then narrate it. Run:
 
 ```bash
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2> /dev/null || pwd)}"
-NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR")"
+NS_ROOT="$(bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project namespace-root --cwd "$PROJECT_DIR")"
 # What you're on now: the last re-entry line names the current ticket + Next
 tail -3 "$NS_ROOT/re-entry.md" 2> /dev/null
 # Fallback when re-entry is empty: in_progress tickets (not epics)

package/codex-plugin/skills/quality-review/SKILL.md

@@ -59,7 +59,7 @@ If in a BDD workflow, read the current ticket from `<namespace-root>/tickets/` a
 
 ### Project-principle challenge
 
-For a BDD ticket, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project review-knowledge --json` at the
+For a BDD ticket, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project review-knowledge --json` at the
 start of each pass and read the current `principles`, `personas`, and `surfaces`
 paths and content it returns (including overrides such as `paths.principles`).
 Do not substitute labels or intake-era content.
@@ -221,7 +221,7 @@ Each pass:
    guarantee a bare `safeword` on `PATH`:
 
    ```bash
-   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" review run quality-review [--context path/to/evidence] --agent-handoff --json -- changed-file [more-changed-files...]
+   SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" review run quality-review [--context path/to/evidence] --agent-handoff --json -- changed-file [more-changed-files...]
    ```
 
    A healthy deep review may return `REVIEW_PENDING` after its foreground
@@ -236,7 +236,12 @@ Each pass:
    headless Claude. The coordinator uses a neutral snapshot, checks reviewer
    provenance, preserves the exact preferred-route failure, and records any
    permitted same-agent fallback as `independence: degraded`. Treat its typed
-   result as the review verdict. Only when the typed result is
+   result as the review verdict. If the typed result is
+   `REVIEW_AUTHENTICATION_REQUIRED`, execute its exact recovery command; the
+   user's browser or device flow may need to complete. After successful
+   authentication, rerun the same coordinator command once. Do not invoke
+   `$safeword:finish-review`, accept degraded coverage, or loop on another auth denial;
+   report an unsuccessful reauthentication as the blocker. Only when the typed result is
    `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` immediately with the
    original result and the same accepted targets. For every other result,
    return it unchanged. The canonical fallback may use one host-native

package/codex-plugin/skills/retro-filer/SKILL.md

@@ -17,7 +17,7 @@ a caller-nominated path. The spool contains sanitized safeword findings for
 ## Procedure
 
 1. Before reading or making any tracker call, run
-   `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project retro-drain "<spool-path>" --validated-jsonl`.
+   `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project retro-drain "<spool-path>" --validated-jsonl`.
    Use only its JSONL stdout as the filing input. A nonzero exit means validation
    failed: make no search, comment, or create call, leave the spool unchanged,
    and report `retro-filer: cannot file - draft validation failed`. If its output
@@ -60,7 +60,7 @@ a caller-nominated path. The spool contains sanitized safeword findings for
    the draft only when the append succeeded and the exact ack is visible. If the
    append or verification fails, leave the draft in place.
 5. Create at most five new issues per run. Drain only by running
-   `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project retro-drain "<spool-path>"`; never rewrite or
+   `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project retro-drain "<spool-path>"`; never rewrite or
    delete the spool directly. The helper removes only drafts whose valid ack is
    reader-visible, so unfiled or unacknowledged drafts remain. If tracker write
    access is unavailable, leave the spool unchanged and report

package/codex-plugin/skills/review-spec/SKILL.md

@@ -35,7 +35,7 @@ Adversarially review a ticket's scenarios: treat them as if you're trying to bre
 - **Manual re-run** — invoke `$safeword:review-spec` anytime after `define-behavior` (e.g., scenarios changed during implement and you want to re-validate). Allowed on a closed ticket too — a post-hoc audit is still readable.
 
 Read the active ticket's `.feature` source first. At review time, run
-`bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project review-knowledge --json` and read the current
+`bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project review-knowledge --json` and read the current
 `principles`, `personas`, and `surfaces` source paths and content it returns, so
 the review is grounded in project knowledge rather than labels or stale intake
 context. The resolver honors `paths.principles`, `paths.personas`, and
@@ -58,11 +58,16 @@ Resolve a review-capable Safeword CLI first; source checkouts do not guarantee
 a bare `safeword` on `PATH`:
 
 ```bash
-SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" review run scenario-gate feature-file [legacy-test-definitions] --context ticket-spec [dimensions-file] principles-file personas-file surfaces-file --agent-handoff --json
+SAFEWORD_REVIEW_PROGRESS=1 bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" review run scenario-gate feature-file [legacy-test-definitions] --context ticket-spec [dimensions-file] principles-file personas-file surfaces-file --agent-handoff --json
 ```
 
 The coordinator's assigned/actual reviewer, failure classification, and
-independence level are authoritative. Only when the typed result is
+independence level are authoritative. If the typed result is
+`REVIEW_AUTHENTICATION_REQUIRED`, execute its exact recovery command; the
+user's browser or device flow may need to complete. After successful
+authentication, rerun the same coordinator command once. Do not invoke
+`$safeword:finish-review`, accept degraded coverage, or loop on another auth denial;
+report an unsuccessful reauthentication as the blocker. Only when the typed result is
 `REVIEW_ROUTES_EXHAUSTED`, invoke `$safeword:finish-review` immediately with the original
 result and the same accepted targets. For every other result, return it
 unchanged. Never substitute another surface-private reviewer or hand-written

package/codex-plugin/skills/self-review/SKILL.md

@@ -45,7 +45,7 @@ installed helper — report it to the user and resolve before retrying.
 ## Review the spec (do this now, with the stamp written)
 
 The stamp records that a review was invoked; the actual scrutiny is yours. At
-review time, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.0/runtime/cli.js" project review-knowledge --json` and use its
+review time, run `bun "${CODEX_HOME:-$HOME/.codex}/plugins/cache/safeword/safeword/0.83.1/runtime/cli.js" project review-knowledge --json` and use its
 current `principles`, `personas`, and `surfaces` source paths and content—not
 labels remembered from intake. These resolve from `paths.principles`,
 `paths.personas`, and `paths.surfaces` when configured. Read those sources with the active ticket's

package/dist/{architecture-LWLD7J73.js → architecture-W2Y3OIZE.js}

@@ -25,7 +25,7 @@ import {
   readJson,
   writeJson
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-4TF354OI.js";
+import "./chunk-GTQAYQZI.js";
 
 // src/commands/architecture.ts
 import { execFileSync } from "child_process";
@@ -650,4 +650,4 @@ export {
   architectureStage,
   architectureStaged
 };
-//# sourceMappingURL=architecture-LWLD7J73.js.map
+//# sourceMappingURL=architecture-W2Y3OIZE.js.map

package/dist/{architecture-document-PQIEEEJP.js → architecture-document-5JE4A5YC.js}

@@ -11,7 +11,7 @@ import {
 import "./chunk-NEOV7ZY3.js";
 import "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-4TF354OI.js";
+import "./chunk-GTQAYQZI.js";
 export {
   isSafewordOwned,
   isWouldChangeAction,
@@ -22,4 +22,4 @@ export {
   selfHealProject,
   selfHealProjectPreservingProse
 };
-//# sourceMappingURL=architecture-document-PQIEEEJP.js.map
+//# sourceMappingURL=architecture-document-5JE4A5YC.js.map

package/dist/{architecture-monorepo-A7P46EKD.js → architecture-monorepo-MVN2ZNPY.js}

@@ -5,11 +5,11 @@ import {
   monorepoFingerprintOf
 } from "./chunk-VZ5B2SIO.js";
 import "./chunk-HF3DXZEA.js";
-import "./chunk-4TF354OI.js";
+import "./chunk-GTQAYQZI.js";
 export {
   discoverUnreadableWorkspaces,
   discoverWorkspaces,
   extractMonorepoArchitectureSnapshot,
   monorepoFingerprintOf
 };
-//# sourceMappingURL=architecture-monorepo-A7P46EKD.js.map
+//# sourceMappingURL=architecture-monorepo-MVN2ZNPY.js.map

package/dist/{boundary-JRZJEXKI.js → boundary-64E3GDJN.js}

@@ -27,7 +27,7 @@ import {
 import {
   readFileSafe
 } from "./chunk-HF3DXZEA.js";
-import "./chunk-4TF354OI.js";
+import "./chunk-GTQAYQZI.js";
 
 // src/commands/boundary.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -651,4 +651,4 @@ function boundary(options) {
 export {
   boundary
 };
-//# sourceMappingURL=boundary-JRZJEXKI.js.map
+//# sourceMappingURL=boundary-64E3GDJN.js.map

package/dist/{chunk-NZ3Z44QO.js → chunk-2VCJDG7J.js}

@@ -17,7 +17,7 @@ import {
 } from "./chunk-FOYGZ4MK.js";
 import {
   SAFEWORD_SCHEMA
-} from "./chunk-ORX6RO7S.js";
+} from "./chunk-AAMACAOP.js";
 import {
   uninstallDependencies
 } from "./chunk-DQVGWAEO.js";
@@ -363,4 +363,4 @@ export {
   diffFileSnapshots,
   removeProject
 };
-//# sourceMappingURL=chunk-NZ3Z44QO.js.map
+//# sourceMappingURL=chunk-2VCJDG7J.js.map

package/dist/{chunk-HLK7ETBK.js → chunk-3ZP5CZZM.js}

@@ -2,10 +2,10 @@ import {
   PRODUCTION_INTEGRATIONS,
   checkHealth,
   coordinateSelectedIntegrations
-} from "./chunk-KG43DUOS.js";
+} from "./chunk-LPHKC4DN.js";
 import {
   unselectedCursorFinding
-} from "./chunk-BYAVCH3S.js";
+} from "./chunk-DDIU6BJ6.js";
 import {
   compareVersions,
   isSafePackageVersion
@@ -16,7 +16,7 @@ import {
 } from "./chunk-D5ENZR6N.js";
 import {
   projectLifecycleSchema
-} from "./chunk-OZOLJOAT.js";
+} from "./chunk-WZUQB6VZ.js";
 import {
   DEFAULT_AGENT_INTEGRATIONS
 } from "./chunk-4L4NYOC3.js";
@@ -266,4 +266,4 @@ export {
   summarizeLifecycleStatus,
   observeLifecycleStatus
 };
-//# sourceMappingURL=chunk-HLK7ETBK.js.map
+//# sourceMappingURL=chunk-3ZP5CZZM.js.map