eminiar 0.13.0 → 0.13.2

package/dist/{hook-async-4MIP3VHX.js → hook-async-3TLK23ZY.js}

@@ -4,12 +4,12 @@ import {
   parseJob,
   runAsyncJob,
   spawnAsyncJob
-} from "./hook-chunk-77I6QQ43.js";
-import "./hook-chunk-IYHVLMJ4.js";
+} from "./hook-chunk-MVSMFCKL.js";
+import "./hook-chunk-ETYHCPPH.js";
 export {
   ASYNC_JOB_MAX_MS,
   parseJob,
   runAsyncJob,
   spawnAsyncJob
 };
-//# sourceMappingURL=hook-async-4MIP3VHX.js.map
+//# sourceMappingURL=hook-async-3TLK23ZY.js.map

package/dist/{hook-chunk-IYHVLMJ4.js → hook-chunk-ETYHCPPH.js}

@@ -19929,6 +19929,12 @@ import { join } from "path";
 function eminiarHome() {
   return process.env.EMINIAR_HOME || join(homedir(), ".eminiar");
 }
+function claudeConfigDir(env = process.env, home = homedir()) {
+  return env.CLAUDE_CONFIG_DIR?.trim() || join(home, ".claude");
+}
+function claudePluginsDir(env = process.env, home = homedir()) {
+  return env.CLAUDE_CODE_PLUGIN_CACHE_DIR?.trim() || join(claudeConfigDir(env, home), "plugins");
+}
 function paths() {
   const home = eminiarHome();
   return {
@@ -20032,9 +20038,9 @@ var buildAdjudicatorObject = () => external_exports.object({
   }).prefault({}),
   minPromptChars: external_exports.number().int().min(0).default(12),
   /**
-   * Ordered ladder, smallest first; "fable" may be inserted by the user. Every provider request
-   * carries the whole ladder and a committed project file may set it, so it is bounded: each
-   * tier at most once (task #56).
+   * Ordered ladder, smallest first; "fable" may be inserted by the user. Personal config only
+   * (a committed project file cannot set it). Every provider request carries the whole ladder,
+   * so it is bounded: each tier at most once (task #56).
    */
   tiers: external_exports.array(external_exports.enum(TIERS)).min(1).max(TIERS.length).refine((t) => new Set(t).size === t.length, "adjudicator.tiers must not repeat a tier").meta({ uniqueItems: true }).default(["haiku", "sonnet", "opus"]),
   weights: external_exports.object({
@@ -20211,8 +20217,11 @@ var BaseConfigSchema = external_exports.object({
     backend: external_exports.enum(["tree-sitter"]).default("tree-sitter")
   }).prefault({}),
   memories: external_exports.object({
-    /** Project-relative directory of markdown memory files (`<topic>/<name>.md`); commit it. */
-    dir: external_exports.string().default(".eminiar/memories")
+    /**
+     * Project-relative directory of markdown memory files (`<topic>/<name>.md`); commit it.
+     * Absolute paths and `..` segments are refused: reconcile repairs the headers of files there.
+     */
+    dir: external_exports.string().regex(PROJECT_RELATIVE_PATH_RE, "must be a path inside the project (no leading / or ..)").default(".eminiar/memories")
   }).prefault({}),
   recall: external_exports.object({
     /** Inject the memories and doc pages that match each prompt (UserPromptSubmit). */
@@ -20384,22 +20393,22 @@ function envOverrides() {
 }
 var PROJECT_ADJUDICATOR_KEYS = [
   "enabled",
-  "mode",
   "surfaces",
   "promptMode",
   "minPromptChars",
-  "tiers",
   "weights",
-  "apply",
   "advice",
   "embedding",
   "learning",
   "cache"
 ];
+function projectKeeps(adj, k) {
+  return PROJECT_ADJUDICATOR_KEYS.includes(k) || k === "mode" && adj.mode === "advise";
+}
 function droppedProjectAdjudicatorKeys(raw) {
   const adj = raw.adjudicator;
   if (!isPlainObject2(adj)) return [];
-  return Object.keys(adj).filter((k) => !PROJECT_ADJUDICATOR_KEYS.includes(k)).sort();
+  return Object.keys(adj).filter((k) => !projectKeeps(adj, k)).sort();
 }
 var CASE_INSENSITIVE_FS = process.platform === "darwin" || process.platform === "win32";
 function realPath(p) {
@@ -20516,32 +20525,40 @@ function projectLayer(raw) {
   if (!isPlainObject2(adj)) return raw;
   if (findSecretFields(adj).length) return raw;
   const kept = {};
-  for (const k of PROJECT_ADJUDICATOR_KEYS) if (Object.hasOwn(adj, k)) kept[k] = adj[k];
+  for (const k of Object.keys(adj)) if (projectKeeps(adj, k)) kept[k] = adj[k];
   return { ...ownJson(raw), adjudicator: kept };
 }
-function withoutUnsafeDocsManifest(raw, source) {
-  const docs = raw.docs;
-  if (!isPlainObject2(docs) || !Object.hasOwn(docs, "manifest")) return raw;
-  const m = docs.manifest;
-  if (typeof m === "string" && PROJECT_RELATIVE_PATH_RE.test(m)) return raw;
-  process.stderr.write(
-    `eminiar: ignoring docs.manifest ${JSON.stringify(m)} in ${source}: it must be a path inside the project
+var PROJECT_PATH_KEYS = [
+  ["docs", "manifest"],
+  ["memories", "dir"]
+];
+function withoutUnsafePaths(raw, source) {
+  let out = raw;
+  for (const [section, key] of PROJECT_PATH_KEYS) {
+    const sec = out[section];
+    if (!isPlainObject2(sec) || !Object.hasOwn(sec, key)) continue;
+    const v = sec[key];
+    if (typeof v === "string" && PROJECT_RELATIVE_PATH_RE.test(v)) continue;
+    process.stderr.write(
+      `eminiar: ignoring ${section}.${key} ${JSON.stringify(v)} in ${source}: it must be a path inside the project
 `
-  );
-  const { manifest: _dropped, ...rest } = ownJson(docs);
-  return { ...ownJson(raw), docs: rest };
+    );
+    const { [key]: _dropped, ...rest } = ownJson(sec);
+    out = { ...ownJson(out), [section]: rest };
+  }
+  return out;
 }
 function personalLayer(projectRoot) {
   const file2 = paths().configFile;
   const raw = readJson(file2);
   const layer = !droppedProjectAdjudicatorKeys(raw).length || personalConfigTrusted(projectRoot, file2) ? raw : projectLayer(raw);
-  return withoutUnsafeDocsManifest(layer, file2);
+  return withoutUnsafePaths(layer, file2);
 }
 function loadConfig(projectRoot) {
   const merged = deepMerge(
     deepMerge(
       personalLayer(projectRoot),
-      withoutUnsafeDocsManifest(
+      withoutUnsafePaths(
         projectLayer(readJson(join2(projectRoot, "eminiar.config.json"))),
         "eminiar.config.json"
       )
@@ -22603,7 +22620,7 @@ function usageWhere(f, opts = {}) {
 var SqliteAdapter = class _SqliteAdapter {
   constructor(path2, opts = {}) {
     this.path = path2;
-    this.db = new Database(path2, { timeout: 2e3 });
+    this.db = new Database(path2, { timeout: opts.busyTimeoutMs ?? 2e3 });
     this.swarm = new SqliteSwarmStore(this.db);
     this.adjudicator = new SqliteAdjudicatorStore(this.db);
     this.db.pragma("journal_mode = WAL");
@@ -23817,13 +23834,18 @@ var SqliteAdapter = class _SqliteAdapter {
 
 // src/storage/index.ts
 var open2 = /* @__PURE__ */ new Map();
+var busyTimeoutMs;
+function setStorageBusyTimeout(ms) {
+  busyTimeoutMs = ms;
+}
 function getStorage(ctx, opts = {}) {
   const key = `${ctx.dbPath}|${opts.vectors === false ? "novec" : "vec"}`;
   let adapter = open2.get(key);
   if (!adapter) {
     adapter = new SqliteAdapter(ctx.dbPath, {
       dims: ctx.config.embeddings.dims,
-      vectors: opts.vectors ?? true
+      vectors: opts.vectors ?? true,
+      ...busyTimeoutMs === void 0 ? {} : { busyTimeoutMs }
     });
     open2.set(key, adapter);
   }
@@ -24077,16 +24099,21 @@ export {
   AGENT_EFFORT_SINCE,
   TOOL_IDS,
   DEFAULT_ROLES,
+  claudeConfigDir,
+  claudePluginsDir,
   paths,
   ensureDirs,
   projectDir,
+  PROJECT_RELATIVE_PATH_RE,
   AdjudicatorConfigSchema,
   loadConfig,
   findProjectRoot,
+  resolveProjectRoot,
   getContext,
   tierOf,
   KEPT_MODEL_FLAG,
   keptModel,
+  setStorageBusyTimeout,
   getStorage,
   GUIDE_ORDER,
   ev,
@@ -24096,4 +24123,4 @@ export {
   classifyToolCall,
   classifyAssistant
 };
-//# sourceMappingURL=hook-chunk-IYHVLMJ4.js.map
+//# sourceMappingURL=hook-chunk-ETYHCPPH.js.map

package/dist/{hook-chunk-77I6QQ43.js → hook-chunk-MVSMFCKL.js}

@@ -13,7 +13,7 @@ import {
   init_esm_shims,
   loadConfig,
   paths
-} from "./hook-chunk-IYHVLMJ4.js";
+} from "./hook-chunk-ETYHCPPH.js";
 
 // src/adjudicator/async.ts
 init_esm_shims();
@@ -3777,4 +3777,4 @@ export {
   parseJob,
   runAsyncJob
 };
-//# sourceMappingURL=hook-chunk-77I6QQ43.js.map
+//# sourceMappingURL=hook-chunk-MVSMFCKL.js.map

package/dist/{hook-chunk-MVOBVFQL.js → hook-chunk-ZLRLOPLR.js}

@@ -1,5 +1,6 @@
 import { createRequire as __emCreateRequire } from "node:module"; const require = __emCreateRequire(import.meta.url);
 import {
+  PROJECT_RELATIVE_PATH_RE,
   TIERS,
   __commonJS,
   __require,
@@ -11,8 +12,9 @@ import {
   getStorage,
   init_esm_shims,
   paths,
+  resolveProjectRoot,
   tierOf
-} from "./hook-chunk-IYHVLMJ4.js";
+} from "./hook-chunk-ETYHCPPH.js";
 
 // node_modules/fast-glob/out/utils/array.js
 var require_array = __commonJS({
@@ -5883,9 +5885,10 @@ function empty() {
   return { version: 1, sources: [] };
 }
 function normalize(raw) {
-  if (!raw || typeof raw !== "object") return { manifest: empty(), dropped: 0 };
+  if (!raw || typeof raw !== "object") return { manifest: empty(), dropped: 0, outside: [] };
   const sources = Array.isArray(raw.sources) ? raw.sources : [];
   const out = [];
+  const outside = [];
   const seen = /* @__PURE__ */ new Set();
   for (const s of sources) {
     if (!s || typeof s !== "object" || typeof s.name !== "string") continue;
@@ -5893,22 +5896,37 @@ function normalize(raw) {
     if (s.kind !== "url" && s.kind !== "path") continue;
     if (s.kind === "url" && !(Array.isArray(s.urls) && s.urls.length)) continue;
     if (s.kind === "path" && typeof s.path !== "string") continue;
+    if (s.kind === "path" && !PROJECT_RELATIVE_PATH_RE.test(s.path)) {
+      process.stderr.write(
+        `eminiar: ignoring docs source ${JSON.stringify(s.name)}: its path ${JSON.stringify(s.path)} must be inside the project
+`
+      );
+      outside.push(s.name);
+      continue;
+    }
     seen.add(s.name);
     out.push({
       ...s,
       addedAt: typeof s.addedAt === "string" ? s.addedAt : (/* @__PURE__ */ new Date(0)).toISOString()
     });
   }
-  return { manifest: { version: 1, sources: out }, dropped: sources.length - out.length };
+  return {
+    manifest: { version: 1, sources: out },
+    dropped: sources.length - out.length,
+    outside
+  };
 }
-function lossyReason(raw, dropped) {
+function lossyReason(raw, dropped, outside, removing) {
   if (raw.version !== 1)
     return raw.version === void 0 ? "it has no version (this eminiar writes version 1)" : `it has version ${JSON.stringify(raw.version)}, and this eminiar only writes version 1`;
   const extra = Object.keys(raw).filter((k) => k !== "version" && k !== "sources");
   if (extra.length) return `it has keys this eminiar does not know (${extra.sort().join(", ")})`;
   if (Object.hasOwn(raw, "sources") && !Array.isArray(raw.sources))
     return "its sources is not an array";
-  if (dropped) return `${dropped} of its sources ${dropped === 1 ? "is" : "are"} not valid entries`;
+  const rest = outside.filter((n) => n !== removing);
+  const lost = dropped - (outside.length - rest.length);
+  if (lost)
+    return `${lost} of its sources ${lost === 1 ? "is" : "are"} not valid entries${rest.length ? ` (${rest.join(", ")}: path outside the project)` : ""}`;
   return void 0;
 }
 var MANIFEST_MAX_BYTES = 1024 * 1024;
@@ -5985,12 +6003,12 @@ function probeManifestAt(file, opts = {}) {
     }
     if (!raw || typeof raw !== "object" || Array.isArray(raw))
       return { state: "refused", reason: "it is not a JSON object" };
-    const { manifest, dropped } = normalize(raw);
+    const { manifest, dropped, outside } = normalize(raw);
     if (opts.write) {
-      const lossy = lossyReason(raw, dropped);
+      const lossy = lossyReason(raw, dropped, outside, opts.removing);
       if (lossy) return { state: "refused", reason: lossy };
     }
-    return { state: "ok", manifest };
+    return { state: "ok", manifest, ...outside.length ? { outside } : {} };
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") return { state: "missing" };
@@ -6018,7 +6036,7 @@ function readManifest(ctx) {
 // src/swarm/hooks.ts
 init_esm_shims();
 import { execFileSync } from "child_process";
-import { readFileSync as readFileSync7, realpathSync as realpathSync3, statSync as statSync5 } from "fs";
+import { readFileSync as readFileSync7, realpathSync as realpathSync5, statSync as statSync5 } from "fs";
 import { basename as basename2, dirname as dirname3, join as join8, resolve as resolve3 } from "path";
 
 // src/swarm/agents.ts
@@ -6065,6 +6083,14 @@ function yaml() {
   yamlLib ??= createRequire(import.meta.url)("yaml");
   return yamlLib;
 }
+var EXEC_TOOLS = /* @__PURE__ */ new Set([
+  "em_execute",
+  "em_execute_file",
+  "em_batch_execute"
+]);
+function roleHasShell(role) {
+  return (role.tools?.includes("Bash") ?? true) && !role.disallowedTools?.includes("Bash");
+}
 var EM_MCP_PREFIXES = ["mcp__plugin_eminiar_eminiar__", "mcp__eminiar__"];
 var AGENTS_REL = ".claude/agents";
 function agentsDir(root) {
@@ -6078,21 +6104,26 @@ var TOPOLOGY_RULE = {
   mesh: "peers share one task board. Claim any open task (your role's first), and read the blackboard for what the other workers found.",
   pipeline: "work moves in stages. You can claim a task only once every task of the earlier stages is done."
 };
-function workerTools(tools) {
+function workerTools(tools, shell = tools.includes("Bash")) {
   const out = tools.includes("ToolSearch") ? [...tools] : [...tools, "ToolSearch"];
   for (const prefix of EM_MCP_PREFIXES)
-    for (const t of WORKER_EM_TOOLS) if (!out.includes(prefix + t)) out.push(prefix + t);
+    for (const t of WORKER_EM_TOOLS)
+      if ((shell || !EXEC_TOOLS.has(t)) && !out.includes(prefix + t)) out.push(prefix + t);
   return out;
 }
+var execToolNames = () => EM_MCP_PREFIXES.flatMap((prefix) => [...EXEC_TOOLS].map((t) => prefix + t));
 function frontmatter(swarm, role) {
   const fm = {
     name: role.agentType,
     description: `Worker "${role.role}" of the eminiar swarm "${swarm.name}": ${role.description} Spawn it for a task of this swarm and name the task as "task #N" in the prompt; the em-swarm skill coordinates runs.`
   };
   if (role.model) fm.model = role.model;
-  if (role.tools) fm.tools = workerTools(role.tools).join(", ");
+  if (role.tools) fm.tools = workerTools(role.tools, roleHasShell(role)).join(", ");
   const spawns = role.tools?.some((t) => t === "Agent" || t === "Task");
-  const disallowed = [.../* @__PURE__ */ new Set([...role.disallowedTools ?? [], ...spawns ? [] : ["Agent"]])];
+  const noShell = role.disallowedTools?.includes("Bash") ? execToolNames() : [];
+  const disallowed = [
+    .../* @__PURE__ */ new Set([...role.disallowedTools ?? [], ...spawns ? [] : ["Agent"], ...noShell])
+  ];
   if (disallowed.length) fm.disallowedTools = disallowed.join(", ");
   if (role.skills.length) fm.skills = role.skills;
   if (role.hooks) {
@@ -6111,6 +6142,7 @@ var hashOf = (fm, rest, range) => createHash("sha1").update(range ? `range=${ran
 ${fm}
 ${rest}` : `${fm}
 ${rest}`).digest("hex").slice(0, 12);
+var SHARED_TREE_RULE = "Other workers may be editing this working tree at the same time, and their changes are not committed. Never run `git stash`, `git checkout`, `git switch`, `git reset`, `git restore` or `git clean`, not even on one path: they hide or wipe another worker's work. If you commit, add only the files you changed: `git add -A` or `git commit -a` takes their unfinished work with yours. To test without your change (a mutation check), copy the files into a scratch directory outside the tree and run the tests there.";
 function renderAgentFile(config, swarm, role) {
   const fm = yaml().stringify(frontmatter(swarm, role), { lineWidth: 0 }).trimEnd();
   if (fm.includes("---"))
@@ -6124,12 +6156,15 @@ function renderAgentFile(config, swarm, role) {
     ...role.prompt ? [role.prompt, ""] : [],
     "## Swarm protocol",
     "",
-    '1. eminiar starts you with a swarm brief: the run goal, the open tasks, the shared notes and what the project knows (memories, history, structure). First claim the task your prompt names with `em_swarm {action:"claim", task:N}` (or the next open one with `em_swarm {action:"claim"}`); if the brief says you already hold a task, continue it.',
-    '2. Ask eminiar before acting: `em_recall {query}` for decisions and constraints, `em_history {action:"file", path}` before editing a file, `em_graph_impact {node}` before changing a symbol, `em_symbols` / `em_search` instead of grepping.',
-    '3. Share what other workers need with `em_swarm {action:"post", key, value}` and read theirs with `em_swarm {action:"read"}`.',
-    '4. Close every task with `em_swarm {action:"update", task, status, result}`: status `done`, `failed` or `blocked`; the result says what changed and how you verified it.',
-    "5. Record durable decisions with `em_remember` so later sessions know them.",
-    "6. Your final message goes back to the coordinator: lead with the outcome, then the files you changed and anything left open.",
+    ...[
+      'eminiar starts you with a swarm brief: the run goal, the open tasks, the shared notes and what the project knows (memories, history, structure). First claim the task your prompt names with `em_swarm {action:"claim", task:N}` (or the next open one with `em_swarm {action:"claim"}`); if the brief says you already hold a task, continue it.',
+      'Ask eminiar before acting: `em_recall {query}` for decisions and constraints, `em_history {action:"file", path}` before editing a file, `em_graph_impact {node}` before changing a symbol, `em_symbols` / `em_search` instead of grepping.',
+      ...!role.isolation && roleHasShell(role) ? [SHARED_TREE_RULE] : [],
+      'Share what other workers need with `em_swarm {action:"post", key, value}` and read theirs with `em_swarm {action:"read"}`.',
+      'Close every task with `em_swarm {action:"update", task, status, result}`: status `done`, `failed` or `blocked`; the result says what changed and how you verified it.',
+      "Record durable decisions with `em_remember` so later sessions know them.",
+      "Your final message goes back to the coordinator: lead with the outcome, then the files you changed and anything left open."
+    ].map((step, i) => `${i + 1}. ${step}`),
     ""
   ].join("\n");
   const range = role.range ? modelRangeText(role.range) : void 0;
@@ -6336,7 +6371,7 @@ init_esm_shims();
 // src/index/indexer.ts
 init_esm_shims();
 var import_fast_glob = __toESM(require_out4(), 1);
-import { readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { existsSync, readFileSync as readFileSync2, realpathSync as realpathSync3, statSync as statSync2 } from "fs";
 import { relative as relative3, resolve } from "path";
 
 // src/chunker/index.ts
@@ -6717,7 +6752,7 @@ function readFileRisk(db) {
 
 // src/session/brief.ts
 init_esm_shims();
-import { existsSync as existsSync2, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
 import { join as join4 } from "path";
 
 // src/memory/frontmatter.ts
@@ -6752,9 +6787,12 @@ function parseMemoryFile(text) {
 init_esm_shims();
 var import_fast_glob2 = __toESM(require_out4(), 1);
 import {
-  existsSync,
+  existsSync as existsSync2,
+  lstatSync as lstatSync3,
   mkdirSync as mkdirSync3,
+  readdirSync as readdirSync2,
   readFileSync as readFileSync3,
+  realpathSync as realpathSync4,
   renameSync as renameSync3,
   statSync as statSync3,
   unlinkSync as unlinkSync2,
@@ -6830,7 +6868,7 @@ function historyLine(db) {
 }
 function overviewParagraph(ctx) {
   const file = join4(memoriesDir(ctx), "onboarding", "overview.md");
-  if (!existsSync2(file)) return void 0;
+  if (!existsSync3(file)) return void 0;
   try {
     const body = parseMemoryFile(readFileSync4(file, "utf8")).body.trim();
     const para = body.split(/\n\s*\n/).map(
@@ -7704,13 +7742,13 @@ init_esm_shims();
 // src/swarm/runtime.ts
 init_esm_shims();
 import { randomBytes as randomBytes2 } from "crypto";
-import { existsSync as existsSync4, statSync as statSync4 } from "fs";
+import { existsSync as existsSync5, statSync as statSync4 } from "fs";
 import { isAbsolute as isAbsolute2, join as join6, relative as relative5 } from "path";
 
 // src/swarm/config.ts
 init_esm_shims();
 import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync3, readFileSync as readFileSync5 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "fs";
 import { createRequire as createRequire2 } from "module";
 import { join as join5 } from "path";
 
@@ -8088,7 +8126,7 @@ function roleRange(defaults, a, at, issue) {
 function swarmFile(root) {
   for (const rel of SWARM_FILES) {
     const file = join5(root, rel);
-    if (existsSync3(file)) return { file, rel, exists: true };
+    if (existsSync4(file)) return { file, rel, exists: true };
   }
   return { file: join5(root, SWARM_FILES[0]), rel: SWARM_FILES[0], exists: false };
 }
@@ -9082,7 +9120,7 @@ function coordinationRoot(root) {
     } catch {
       return root;
     }
-    if (basename2(common) === ".git") return realpathSync3(dirname3(common));
+    if (basename2(common) === ".git") return realpathSync5(dirname3(common));
     const out = execFileSync("git", ["worktree", "list", "--porcelain"], {
       cwd: root,
       encoding: "utf8",
@@ -9091,8 +9129,8 @@ function coordinationRoot(root) {
     });
     const first = /^worktree (.+)$/m.exec(out)?.[1];
     if (!first || /^bare$/m.test(out.split("\n\n")[0] ?? "")) return root;
-    const main = realpathSync3(first);
-    return main !== realpathSync3(common) && statSync5(join8(main, ".git"), { throwIfNoEntry: false }) ? main : root;
+    const main = realpathSync5(first);
+    return main !== realpathSync5(common) && statSync5(join8(main, ".git"), { throwIfNoEntry: false }) ? main : root;
   } catch {
     return root;
   }
@@ -9109,7 +9147,7 @@ function sessionRoot() {
     process.env.CLAUDE_PROJECT_DIR || process.env.EMINIAR_PROJECT_ROOT || process.cwd()
   );
   try {
-    return realpathSync3(root);
+    return realpathSync5(root);
   } catch {
     return root;
   }
@@ -9123,6 +9161,18 @@ function orderedRoots(hookRoot) {
   if (hookRoot && !out.includes(hookRoot)) out.push(hookRoot);
   return out;
 }
+function swarmRoots(input) {
+  let hook;
+  try {
+    hook = resolveProjectRoot(input.cwd || void 0);
+  } catch {
+  }
+  const out = [];
+  for (const r of orderedRoots(hook)) {
+    for (const d of [r, coordinationRoot(r)]) if (!out.includes(d)) out.push(d);
+  }
+  return out;
+}
 function enforcementRoots() {
   try {
     const r = sessionRoot();
@@ -9383,6 +9433,19 @@ function swarmTouch(ctx, input) {
     fail("touch", err);
   }
 }
+function workerLacksTool(input, agentType, tool) {
+  if (!EXEC_TOOLS.has(tool) || !isSwarmAgentType(agentType)) return false;
+  try {
+    for (const dir of swarmRoots(input)) {
+      const config = activeSwarmConfig(dir);
+      const found = config && findRole(config, agentType);
+      if (found) return !roleHasShell(found.role);
+    }
+  } catch (err) {
+    fail("shell", err);
+  }
+  return false;
+}
 function allowWith(updatedInput) {
   return {
     hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow", updatedInput }
@@ -9757,12 +9820,12 @@ var FALLBACK_MODEL = "claude-sonnet-5-5";
 export {
   hookLog,
   agentFileRange,
-  indexContent,
-  git,
   DOCS_PREFIX,
   manifestPath,
   readManifestAt,
   readManifest,
+  indexContent,
+  git,
   memoriesDir,
   renderProjectBrief,
   recordShown,
@@ -9773,12 +9836,14 @@ export {
   commitContext,
   recallForError,
   isSwarmTool,
+  spawnType,
   coordinationRoot,
   swarmPreAgent,
   failedText,
   rawEnforced,
   swarmGate,
   swarmTouch,
+  workerLacksTool,
   swarmStampCaller,
   swarmAgentReturned,
   swarmSessionEnd,
@@ -9840,4 +9905,4 @@ queue-microtask/index.js:
 run-parallel/index.js:
   (*! run-parallel. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> *)
 */
-//# sourceMappingURL=hook-chunk-MVOBVFQL.js.map
+//# sourceMappingURL=hook-chunk-ZLRLOPLR.js.map

package/dist/{hook-hooks-U6GDOQSY.js → hook-hooks-5U2AI6W7.js}

@@ -8,7 +8,7 @@ import {
   manifestPath,
   readManifestAt,
   resolvePrice
-} from "./hook-chunk-MVOBVFQL.js";
+} from "./hook-chunk-ZLRLOPLR.js";
 import {
   adjudicateOne,
   briefUnitsOf,
@@ -18,17 +18,19 @@ import {
   resolveAdjudicator,
   spawnAsyncJob,
   topIntent
-} from "./hook-chunk-77I6QQ43.js";
+} from "./hook-chunk-MVSMFCKL.js";
 import {
   AGENT_EFFORT_SINCE,
   KEPT_MODEL_FLAG,
   TIERS,
+  claudeConfigDir,
+  claudePluginsDir,
   getContext,
   getStorage,
   init_esm_shims,
   keptModel,
   tierOf
-} from "./hook-chunk-IYHVLMJ4.js";
+} from "./hook-chunk-ETYHCPPH.js";
 
 // src/adjudicator/hooks.ts
 init_esm_shims();
@@ -349,7 +351,7 @@ function projectDirs(root, cwd) {
 }
 function pluginDirs(plugin, env, home) {
   const out = /* @__PURE__ */ new Set();
-  const pluginsRoot = env.CLAUDE_CODE_PLUGIN_CACHE_DIR?.trim() || join(home, ".claude", "plugins");
+  const pluginsRoot = claudePluginsDir(env, home);
   try {
     const j = JSON.parse(readFileSync(join(pluginsRoot, "installed_plugins.json"), "utf8"));
     for (const [key, val] of Object.entries(j?.plugins ?? {})) {
@@ -450,7 +452,7 @@ function resolveAgentPin(agentType, q) {
     const scopes = [];
     if (managed) scopes.push(["managed", join(managed, ".claude", "agents")]);
     for (const d of projectDirs(q.root, q.cwd)) scopes.push(["project", d]);
-    scopes.push(["user", join(home, ".claude", "agents")]);
+    scopes.push(["user", join(claudeConfigDir(env, home), "agents")]);
     let truncated = false;
     for (const [source, dir] of scopes) {
       const found = byName(dir, agentType);
@@ -1824,4 +1826,4 @@ export {
   withModel,
   withNote
 };
-//# sourceMappingURL=hook-hooks-U6GDOQSY.js.map
+//# sourceMappingURL=hook-hooks-5U2AI6W7.js.map