yaaw-se 0.3.3 → 0.3.4

package/dist/payload/yaaw-core/system/tools/repository-identity.mjs

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+import { createHash } from "node:crypto";
+import { lstatSync, readFileSync, readlinkSync } from "node:fs";
+import { resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+
+const ALGORITHM = "yaaw-worktree-v2";
+const CONTROL_OUTPUT_EXCLUDES = [
+  ".yaaw-core/runtime/**",
+  ".yaaw-core/project/state.json",
+  ".yaaw-core/project/evidence/**",
+  ".yaaw-core/project/reviews/**"
+];
+const EXCLUDE_PATHSPECS = CONTROL_OUTPUT_EXCLUDES.map(path => `:(exclude)${path}`);
+const hash = value => createHash("sha256").update(value).digest("hex");
+function stable(value) {
+  if (Array.isArray(value)) return value.map(stable);
+  if (value && typeof value === "object") return Object.fromEntries(Object.keys(value).sort().map(k => [k, stable(value[k])]));
+  return value;
+}
+const canonicalJson = value => JSON.stringify(stable(value));
+function fail(status, message) {
+  process.stdout.write(JSON.stringify({
+    schema:"yaaw.repository-identity/v2", algorithm:null, status, workspace_scope:".",
+    git_root_relation:status==="UNVERSIONED"?"none":"unknown", head_commit:null, dirty:null,
+    worktree_digest:null, components:null, changed_paths:[], error:message
+  })+"\n");
+  process.exitCode=2;
+}
+function git(workspace,args) {
+  const r=spawnSync("git",["-C",workspace,...args],{encoding:null,windowsHide:true,maxBuffer:64*1024*1024});
+  if(r.error) throw r.error;
+  if(r.status!==0) throw new Error((r.stderr??Buffer.alloc(0)).toString("utf8").trim()||`git ${args.join(" ")} exited ${r.status}`);
+  return r.stdout??Buffer.alloc(0);
+}
+const nulPaths=buf=>buf.toString("utf8").split("\0").filter(Boolean).map(p=>p.replaceAll("\\","/")).sort();
+function untrackedRecord(workspace,path) {
+  const absolute=resolve(workspace,path);
+  const stat=lstatSync(absolute);
+  if(stat.isSymbolicLink()) return {path,kind:"symlink",sha256:hash(Buffer.from(readlinkSync(absolute),"utf8"))};
+  if(stat.isFile()) return {path,kind:"file",sha256:hash(readFileSync(absolute))};
+  throw new Error(`unsupported untracked filesystem object: ${path}`);
+}
+
+const args=process.argv.slice(2);
+let workspaceArg=".";
+for(let i=0;i<args.length;i+=1){
+  if(args[i]==="--workspace" && args[i+1]) {workspaceArg=args[i+1]; i+=1;}
+  else {process.stderr.write("usage: repository-identity.mjs [--workspace <path>]\n"); process.exit(2);}
+}
+const workspace=resolve(workspaceArg);
+let workspacePrefix;
+try {
+  const inside=git(workspace,["rev-parse","--is-inside-work-tree"]).toString("utf8").trim();
+  if(inside!=="true") throw new Error("workspace is not inside a Git work tree");
+  workspacePrefix=git(workspace,["rev-parse","--show-prefix"]).toString("utf8").trim().replaceAll("\\","/");
+}
+catch(error){ fail("UNVERSIONED",error instanceof Error?error.message:String(error)); }
+
+if(workspacePrefix !== undefined){
+  try {
+      const head=git(workspace,["rev-parse","HEAD"]).toString("utf8").trim();
+      const scoped=[".",...EXCLUDE_PATHSPECS];
+      const status=git(workspace,["status","--porcelain=v1","-z","--untracked-files=all","--",...scoped]);
+      const unstaged=git(workspace,["diff","--binary","--no-ext-diff","--no-textconv","HEAD","--",...scoped]);
+      const staged=git(workspace,["diff","--cached","--binary","--no-ext-diff","--no-textconv","HEAD","--",...scoped]);
+      const untracked=nulPaths(git(workspace,["ls-files","--others","--exclude-standard","-z","--",...scoped])).map(p=>untrackedRecord(workspace,p));
+      const tracked=new Set([
+        ...nulPaths(git(workspace,["diff","--name-only","-z","HEAD","--",...scoped])),
+        ...nulPaths(git(workspace,["diff","--cached","--name-only","-z","HEAD","--",...scoped]))
+      ]);
+      const components={
+        status_sha256:hash(status),
+        unstaged_diff_sha256:hash(unstaged),
+        staged_diff_sha256:hash(staged),
+        untracked_manifest_sha256:hash(Buffer.from(canonicalJson(untracked),"utf8"))
+      };
+      const payload={algorithm:ALGORITHM,workspace_scope:".",head_commit:head,excluded:CONTROL_OUTPUT_EXCLUDES,...components,untracked};
+      const changed_paths=[
+        ...[...tracked].sort().map(path=>({path,kind:"tracked"})),
+        ...untracked.map(x=>({path:x.path,kind:"untracked",sha256:x.sha256}))
+      ].sort((a,b)=>a.path.localeCompare(b.path));
+      process.stdout.write(JSON.stringify({
+        schema:"yaaw.repository-identity/v2",algorithm:ALGORITHM,status:"READY",workspace_scope:".",
+        git_root_relation:workspacePrefix?"ancestor":"same",head_commit:head,dirty:status.length>0,
+        worktree_digest:"sha256:"+hash(Buffer.from(canonicalJson(payload),"utf8")),
+        components,changed_paths,error:null
+      })+"\n");
+  } catch(error) {
+    if(process.exitCode!==2) fail("IDENTITY_FAILED",error instanceof Error?error.message:String(error));
+  }
+}

package/dist/payload/yaaw-core/system/workflows/implementation/implement-ticket.md

@@ -20,3 +20,7 @@ Repository status is `READY`. One ticket must be admitted as `READY`, dependenci
 
 ## Output
 Reviewable implementation plus evidence, or explicit replan/blocker state.
+
+## Evidence identity
+
+Use the canonical repository identity utility for implementation evidence. Do not implement a private worktree digest. Changeability requirements remain in force.

package/dist/payload/yaaw-core/system/workflows/implementation/repair-ticket.md

@@ -16,3 +16,7 @@ Ticket is `REPAIR_REQUIRED` and latest review result is `REPAIR` against the sam
 
 ## Output
 Repaired reviewable implementation or replan/blocker result.
+
+## Repair identity
+
+After bounded repair and verification, bind evidence to the canonical repository identity and return `REVIEW_REQUIRED`. Changeability requirements remain in force.

package/dist/payload/yaaw-core/system/workflows/implementation/verify-ticket.md

@@ -15,3 +15,6 @@ Ticket requirements/tests, changed surface, project tooling/rules, current repos
 
 ## Output
 Evidence record(s). Verification never transitions a ticket to PASS; only Reviewer can accept.
+
+## Verification identity
+After verification commands finish, invoke `.yaaw-core/system/tools/repository-identity.mjs` and record that exact output in `yaaw.evidence/v2`. Do not reserialize it through a second digest implementation. Replaceable `.yaaw-core/runtime/**` coordination files are excluded by canonical `yaaw-worktree-v2`; all semantic/project/application changes remain in the basis. Changeability requirements remain in force.

package/dist/payload/yaaw-core/system/workflows/orchestration/determine-next-action.md

@@ -1,24 +1,24 @@
 # Determine next action
 
 ## Purpose
-Turn reconciled observed reality into one explicit, fresh dispatch contract.
-
-## Inputs
-Current observed-state snapshot, reconciled state, `.yaaw-core/system/core/routing.md`, workflow/execution/artifact/role-I/O/expertise registries, and optional current intent.
+Expose the deterministic route/handoff preparation contract without duplicating routing logic in the Orchestrator model.
 
 ## Procedure
-1. Require the current observed framework integrity status to be `HEALTHY`. Otherwise return the typed framework stop and write no executable handoff.
-2. Choose exactly one next canonical workflow or terminal state using explicit routing precedence. Do not load candidate workflow bodies while choosing.
-3. Resolve its repository requirement from `.yaaw-core/system/registries/execution-policy.json`.
-4. If requirement is `IDENTITY` and repository status is not `READY`, return `PRECONDITION_UNSATISFIED:REPOSITORY_IDENTITY_UNAVAILABLE` or `BLOCKED` as appropriate; do not dispatch.
-5. Resolve exact read/write/forbidden-write artifact classes from `.yaaw-core/system/registries/role-io.json` and exact current artifact references.
-6. Select only YAAW expertise relevant to the selected workflow/artifact. Host expertise is admitted only through `.yaaw-core/system/rules/research-admission.md`.
-7. Write `.yaaw-core/runtime/handoff.json` conforming to handoff v2 with desired intent, role, workflow ID, exact references/revisions, read/write sets, expertise, expected output/result vocabulary, repository requirement/basis, and transition sequence.
-8. If the result is human-input, BLOCKED, or COMPLETE, write no executable handoff and return the stop result.
+Normal orchestration satisfies this workflow by executing:
+
+```text
+node .yaaw-core/system/tools/orchestration-runtime.mjs --workspace <WORKSPACE_ROOT>
+```
+
+The runtime reads the machine routing/execution/role-I/O/handoff policies, current durable metadata, framework basis, and canonical repository identity; it then returns exactly one typed result and, only for a dispatchable non-Orchestrator semantic workflow, persists one `yaaw.handoff/v2`.
+
+- `DISPATCH_READY`: consume the persisted handoff; do not rebuild it.
+- `RECONCILE_REQUIRED`: execute only `orchestration.reconcile-state` before preparing again.
+- `ROOT_ACTION`: execute only the selected Orchestrator recovery workflow.
+- `TERMINAL`/`BLOCKED`/`FRAMEWORK_STOP`: write no executable handoff.
 
 ## Boundary
-Do not perform target role semantic work here.
+Do not perform target-role semantic work here. Do not hand-serialize a handoff or select expertise outside the deterministic handoff policy.
 
 ## Framework write guard
-
-Before persisting a handoff, verify that its write set is a subset of the selected role's canonical artifact writes and contains no installer-managed artifact or `.yaaw-core/system/**` path. A framework defect is a stop condition, never a target workflow.
+The runtime verifies selected reads/writes against `role-io.json`; an unauthorized artifact class or missing machine contract is `FRAMEWORK_CONTRACT_INCONSISTENCY`, never a semantic reroute.

package/dist/payload/yaaw-core/system/workflows/orchestration/dispatch.md

@@ -4,26 +4,32 @@
 Execute exactly one already-selected canonical workflow. This file is not the orchestration loop.
 
 ## Inputs
-`.yaaw-core/runtime/handoff.json` created by `orchestration.determine-next-action`.
+`.yaaw-core/runtime/handoff.json` produced by the deterministic orchestration runtime.
 
 ## Procedure
-1. Re-run the framework integrity gate and require `HEALTHY`; compare its manifest basis with the handoff framework basis. If package integrity changed, discard the handoff and return the typed framework stop before loading target semantics.
-2. Validate handoff schema, workflow registry entry, execution policy, role I/O, source artifact revisions, transition-sequence basis, and repository basis.
-3. Enforce repository requirement: `NONE` needs no Git prerequisite; `INSPECT` may proceed with a represented `UNVERSIONED` workspace; `IDENTITY` requires repository status `READY`.
-4. If any basis is stale or unsatisfied, discard the handoff and return a typed stale/prerequisite result to `orchestration.route`; do not execute it.
-5. Resolve the handoff's execution-context policy from `execution-policy.json` and `.yaaw-core/system/core/dispatch-execution.md`.
-6. If the target is an Orchestrator workflow or policy is `ROOT_ONLY`, execute in the current root context.
-7. Otherwise request the active host adapter's isolated-worker mechanism. When isolation is available, execute this one handoff in a fresh worker with minimal bootstrap context and without relying on inherited parent conversation.
-8. If isolation is unavailable or a named worker cannot be selected before child creation, follow the configured host fallback policy. If a child was already created and then failed, do **not** blindly retry; return to reality inspection first.
-9. For Implementer or Reviewer, consult `.yaaw-core/runtime/dispatch-failures.json` after inspection. If the unchanged handoff basis has reached the host-configured execution-failure threshold, request the host capability-fallback worker/profile for this attempt. The semantic role/workflow and handoff remain unchanged. If the fallback itself already failed with no progress on this basis, return `BLOCKED:AUTHORITY_EXECUTION_FAILED`.
-10. The executing context loads only the target role contract, selected workflow contract, exact handoff reads, selected expertise, and minimal relevant repository context.
-11. Execute the target workflow once. A worker may not route or spawn another YAAW authority role.
-12. Require the expected durable output/state/evidence or an explicit legal typed stop/prerequisite result.
-13. Treat any child response only as an execution signal; do not accept it as project truth without re-inspection.
-14. Mark/remove the consumed runtime handoff and return control to `orchestration.route`.
+1. Immediately before loading target semantics, execute:
+
+```text
+node .yaaw-core/system/tools/orchestration-runtime.mjs --workspace <WORKSPACE_ROOT> --check-handoff
+```
+
+2. Require `HANDOFF_FRESH`. `FRAMEWORK_STOP`, `RECONCILE_REQUIRED`, `ROOT_ACTION`, `TERMINAL`, `BLOCKED`, or `HANDOFF_STALE` returns control to `orchestration.route`; do not execute the stale target. This single freshness check reuses the same framework, repository-identity, artifact, routing, and handoff serialization implementation that created the handoff.
+3. Resolve the handoff's execution-context policy from `execution-policy.json` and `.yaaw-core/system/core/dispatch-execution.md`.
+4. If the target is an Orchestrator workflow or policy is `ROOT_ONLY`, execute in the current root context.
+5. Otherwise ask the active host adapter to resolve the selected authority's required effective execution profile. This is host execution metadata; do not write provider model/reasoning identifiers into the canonical handoff.
+6. Prefer the adapter's exact named authority worker when available. If named selection is unavailable before child creation, the adapter may choose a generic isolated mechanism only after proving profile equivalence or authoritatively correcting every mismatched profile dimension.
+7. If an isolated mechanism exists but cannot guarantee the required profile, return `BLOCKED:HOST_EXECUTION_PROFILE_UNAVAILABLE`. If strict isolation is required and no isolated mechanism exists at all, return `BLOCKED:HOST_ISOLATION_UNAVAILABLE`.
+8. In an adapter `auto` mode, inline fallback is legal only when the adapter proves the inline/root execution profile equivalent to the required authority profile. A deliberately selected adapter `inline` mode is an explicit opt-out from per-role model isolation.
+9. If a child was already created and then failed, do **not** switch mechanisms or retry blindly; return to deterministic reality preparation first.
+10. For Implementer or Reviewer, consult `.yaaw-core/runtime/dispatch-failures.json` only after inspection. If the unchanged handoff basis has reached the host-configured execution-failure threshold, request the configured host capability-fallback profile for this attempt. Resolve and preserve that fallback profile using the same fidelity rules. If the fallback itself already failed with no progress on this basis, return `BLOCKED:AUTHORITY_EXECUTION_FAILED`.
+11. A pre-execution `HOST_EXECUTION_PROFILE_UNAVAILABLE` or `HOST_ISOLATION_UNAVAILABLE` stop does not increment the execution-failure ledger because no authority child executed.
+12. The executing context loads only the target role contract, selected workflow contract, exact handoff reads, selected expertise, and minimal relevant repository context.
+13. Execute the target workflow once. A worker may not route or spawn another YAAW authority role.
+14. Require the expected durable output/state/evidence or an explicit legal typed stop/prerequisite result.
+15. Treat any child response only as an execution signal; do not accept it as project truth without re-inspection.
+16. Mark/remove the consumed runtime handoff and return control to `orchestration.route`.
 
 Never recursively dispatch `orchestration.dispatch` as its own target. A target role never dispatches a peer.
 
 ## Package boundary
-
 Dispatch rejects any handoff whose writes include installer-managed artifacts or `.yaaw-core/system/**`. An admitted application-file write never authorizes package framework mutation.

package/dist/payload/yaaw-core/system/workflows/orchestration/inspect-state.md

@@ -1,22 +1,19 @@
 # Inspect state
 
 ## Purpose
-Create a non-mutating observed-reality snapshot that separates claims from evidence and classifies repository capability safely.
-
-## Inputs
-Resolved workspace root, installation manifest/framework-integrity result, `.yaaw-core/project/state.json`, product/engineering/research/spec/ticket/review/evidence/runtime files, project rules, and available repository/application reality.
+Create a non-mutating observed-reality snapshot using the same deterministic runtime implementation used by normal orchestration.
 
 ## Procedure
-1. Resolve `WORKSPACE_ROOT` using `.yaaw-core/system/core/execution-context.md`; never trust ambient CWD.
-2. Execute `.yaaw-core/system/tools/framework-integrity.mjs --workspace <WORKSPACE_ROOT>` and record its status plus current manifest basis. If status is not `HEALTHY`, record the framework failure, invalidate any executable handoff candidate, write only the replaceable observation when safe, and stop inspection before semantic project reconciliation.
-3. Probe Git only with root-anchored commands such as `git -C <WORKSPACE_ROOT> rev-parse --show-toplevel`.
-4. Classify repository status using `.yaaw-core/system/rules/repository-identity.md`. A failed `rev-parse` becomes `UNVERSIONED` or another explicit status; do not leak a raw Git fatal error as successful identity.
-5. When status is `READY`, compute workspace-scoped repository identity. If Git root is an ancestor, scope status/diff/untracked hashing to the workspace.
-6. Read machine-readable artifact metadata and active durable artifacts.
-7. Compare state claims with artifact/repository/review evidence without repairing yet.
-8. Reconcile the replaceable dispatch-failure ledger. For Implementer/Reviewer worker execution failures, compare the prior failure basis with the current role, workflow, active artifact, revisions, transition sequence, and repository basis. Increment only when the prior attempt made no durable progress and the basis is unchanged. Reset/remove the ledger after legal workflow completion, durable progress, a basis change, or when routing leaves that work item.
-9. List inconsistencies, stale artifacts/handoffs, blockers, and candidate next states.
-10. Write replaceable `.yaaw-core/runtime/observed-state.json` conforming to observed-state v2.
+1. Resolve `WORKSPACE_ROOT` using `.yaaw-core/system/core/execution-context.md`.
+2. Execute:
+
+```text
+node .yaaw-core/system/tools/orchestration-runtime.mjs --workspace <WORKSPACE_ROOT> --inspect-only
+```
+
+3. Consume `.yaaw-core/runtime/observed-state.json` and the typed `INSPECTED`/framework-stop result.
+4. The runtime compares current product/engineering/spec/ticket revisions and, for accepted work, current review/verification presence and repository identity so stale acceptance becomes a reconciliation input rather than a direct terminal route.
+5. Do not independently invoke Git, calculate `worktree_digest`, discover artifact locations, or serialize a second observation.
 
 ## Output
-Observed-state snapshot only; no semantic or ticket-state mutation.
+Observed-state snapshot only; no semantic/ticket-state mutation and no executable handoff construction in `--inspect-only` mode.

package/dist/payload/yaaw-core/system/workflows/orchestration/recover-interruption.md

@@ -15,3 +15,7 @@ Active/recent artifact, state claims, runtime caches, repository identity/histor
 6. Return control to `orchestration.route` for normal next-action selection.
 
 Never repeat destructive work merely because a context ended.
+
+## Acceptance recovery
+
+A source-current stale `PASS` is recovered through `REVIEW_REQUIRED`. Do not dispatch Planner unless contract invalidation is independently proven.

package/dist/payload/yaaw-core/system/workflows/orchestration/route.md

@@ -3,24 +3,32 @@
 ## Purpose
 Continuously restore project reality and execute one safe canonical workflow at a time until a true stop condition.
 
-## Progressive routing
-Selection is metadata-first. Do not preload candidate target workflow bodies, templates, or expertise before `orchestration.determine-next-action` chooses exactly one workflow.
+## Deterministic preparation
+Normal routing uses one command per basis:
+
+```text
+node .yaaw-core/system/tools/orchestration-runtime.mjs --workspace <WORKSPACE_ROOT>
+```
+
+This command performs framework integrity, canonical repository identity, durable metadata inspection, route selection, and handoff construction together. Do not separately reconstruct those stages in shell/Python/model reasoning.
 
 ## Procedure
 Repeat:
-1. execute `orchestration.inspect-state`;
-2. if framework integrity is not `HEALTHY`, invalidate executable handoffs and stop with the typed framework failure; do not reconcile project lifecycle state;
-3. execute `orchestration.reconcile-state` when project inconsistencies exist;
-4. execute `orchestration.determine-next-action`;
-5. if terminal/blocked/human-input/framework stop condition is returned, stop;
-6. execute `orchestration.dispatch` for the one persisted handoff;
+1. run deterministic preparation once;
+2. on `FRAMEWORK_STOP`, invalidate executable handoffs and stop with the typed framework failure;
+3. on `RECONCILE_REQUIRED`, execute `orchestration.reconcile-state` only, then return to step 1;
+4. on `ROOT_ACTION`, execute the returned Orchestrator workflow only, then return to step 1;
+5. on `TERMINAL` or `BLOCKED`, stop;
+6. on `DISPATCH_READY`, execute `orchestration.dispatch` for the persisted handoff;
 7. require the dispatched execution to persist its authorized durable output or legal typed prerequisite/stop result;
-8. whether dispatch reports success, failure, interruption, or no response, discard/validate the consumed handoff as appropriate and return to step 1 before loading another target workflow.
+8. whether dispatch reports success, failure, interruption, or no response, return to step 1 before another semantic workflow.
+
+`orchestration.inspect-state` and `orchestration.determine-next-action` remain canonical compatibility/debug workflows, but the normal loop does not execute them as separate model-driven reconstruction passes.
 
 There is no direct `worker A result -> worker B` authority chain. Reality reconstruction always sits between authority-role dispatches.
 
 ## Loop safety
-If the same repository capability/identity, state, handoff, and expected output repeat without any durable mutation/evidence change, stop as `BLOCKED` with `no_progress` rather than spinning.
+If the same repository basis, lifecycle state, route, and expected output repeat without durable mutation/evidence change, stop as `BLOCKED` with `no_progress` rather than spinning.
 
 ## Stop conditions
-Framework integrity unavailable/unhealthy; framework contract inconsistency; Human product/engineering answer required; evidence/permission unavailable; target workflow requires repository `IDENTITY` but status is not `READY`; active host/runtime policy blocks required isolation; host requires approval for consequential action; or accepted scope is terminal `COMPLETE`.
+Framework integrity unavailable/unhealthy; framework contract inconsistency; Human product/engineering answer required; evidence/permission unavailable; target workflow requires repository `IDENTITY` but status is not `READY`; active host/runtime policy blocks required isolation/profile fidelity; host requires approval for consequential action; or accepted scope is terminal `COMPLETE`.

package/dist/payload/yaaw-core/system/workflows/planning/replan.md

@@ -16,3 +16,7 @@ Repository evidence, product revision, review finding, or invalidation has made
 
 ## Output
 Current engineering contract plus updated downstream admission state.
+
+## Admission guard
+
+Repository identity change alone is not sufficient reason to replan. Require stale source/contract revisions or Reviewer `REPLAN` evidence.

package/dist/payload/yaaw-core/system/workflows/review/inspect-change.md

@@ -9,9 +9,12 @@ Current ticket/spec/product/engineering revisions, repository status `READY` plu
 ## Procedure
 1. If repository status is not `READY`, return `BLOCKED`/`PRECONDITION_UNSATISFIED:REPOSITORY_IDENTITY_UNAVAILABLE`; do not review against ambiguous identity.
 2. Revalidate source revisions and reject stale review inputs.
-3. Compute/record repository identity using `rules/repository-identity.md`.
+3. Compute/record repository identity using `rules/repository-identity.md` and the canonical utility.
 4. Inspect actual diff/files/tests/evidence; ignore implementation summaries when they conflict with observed work.
 5. Identify acceptance criteria, failure paths, regressions, and domain-specific requirements that must be checked.
 
 ## Output
 Review inspection tied to exact repository and contract identity.
+
+## Repository basis
+Obtain repository identity from `.yaaw-core/system/tools/repository-identity.mjs`. Do not whitelist `.codex`, `.agents`, provider directories, or project/application files merely by path ownership. Only replaceable `.yaaw-core/runtime/**` coordination caches are excluded by the canonical identity algorithm so orchestration cannot invalidate its own handoff basis.

package/dist/tui/configuration-updates.js

@@ -1,9 +1,20 @@
 import * as p from "@clack/prompts";
+const CODEX_FAILURE_FALLBACK_CHANGE = "codex-authority-failure-fallback";
+function preservationNotice(update) {
+    const lines = [
+        "  Quick Update installed support for these capabilities without changing your existing provider setup.",
+        "  Your current configuration and selected profile were preserved."
+    ];
+    if (update.integrationId === "codex" && update.changes.some(change => change.id === CODEX_FAILURE_FALLBACK_CHANGE)) {
+        lines.push("  Astra fallback is available, but Quick Update did not enable it or replace your current Codex settings.", "  To enable it: run `yaaw config codex` and choose Recommended, or choose Custom and configure Failure fallback.");
+    }
+    return lines;
+}
 export function formatConfigurationUpdates(updates) {
     return updates.flatMap(update => [
         update.displayName,
         ...update.changes.map(change => `  ${change.title}: ${change.summary}`),
-        "  Current configuration was preserved.",
+        ...preservationNotice(update),
         `  Review: ${update.command}`,
         ""
     ]).join("\n").trim();

package/dist/tui/configuration-updates.js.map

@@ -1 +1 @@
-{"version":3,"file":"configuration-updates.js","sourceRoot":"","sources":["../../src/tui/configuration-updates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AAIpC,MAAM,UAAU,0BAA0B,CAAC,OAA8B;IACvE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,WAAW;QAClB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QACvE,wCAAwC;QACxC,aAAa,MAAM,CAAC,OAAO,EAAE;QAC7B,EAAE;KACH,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAA8B;IAC7E,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC/B,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,0BAA0B,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACzK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;YAC5B,OAAO,EAAE,aAAa,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,OAAO;YACnD,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,6BAA6B;QACtC,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;KACjG,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC;QACnC,OAAO,EAAE,0CAA0C;QACnD,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;KAC7F,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAA2B,CAAC;AACjE,CAAC"}
+{"version":3,"file":"configuration-updates.js","sourceRoot":"","sources":["../../src/tui/configuration-updates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AAIpC,MAAM,6BAA6B,GAAG,kCAAkC,CAAC;AAEzE,SAAS,kBAAkB,CAAC,MAA2B;IACrD,MAAM,KAAK,GAAG;QACZ,wGAAwG;QACxG,mEAAmE;KACpE,CAAC;IAEF,IAAI,MAAM,CAAC,aAAa,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,6BAA6B,CAAC,EAAE,CAAC;QACnH,KAAK,CAAC,IAAI,CACR,2GAA2G,EAC3G,kHAAkH,CACnH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAA8B;IACvE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,WAAW;QAClB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QACvE,GAAG,kBAAkB,CAAC,MAAM,CAAC;QAC7B,aAAa,MAAM,CAAC,OAAO,EAAE;QAC7B,EAAE;KACH,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAA8B;IAC7E,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC/B,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,0BAA0B,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACzK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;YAC5B,OAAO,EAAE,aAAa,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,OAAO;YACnD,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,6BAA6B;QACtC,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;KACjG,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC;QACnC,OAAO,EAAE,0CAA0C;QACnD,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;KAC7F,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAA2B,CAAC;AACjE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "yaaw-se",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "Artifact-first autonomous software engineering workflow installer.",
   "type": "module",
   "bin": {