opencode-swarm 7.109.2 → 7.109.4

package/.opencode/skills/ci-failure-batching/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: ci-failure-batching
+description: Batch collection and fix protocol for CI failures. Triggered when any CI check fails on a PR. Prevents serial diagnose-fix-push cycles by collecting all failures before fixing.
+---
+
+# CI Failure Batching
+
+## Trigger
+When ANY CI check fails on the PR (pr-monitor surfaces `pr.ci.failed`).
+
+## Protocol
+1. **DO NOT immediately fix the first failure.** Check if other jobs are still running:
+   ```
+   gh pr checks <PR> --repo <repo>
+   ```
+2. **If jobs are still running:** Note the failure, WAIT for the run to complete
+3. **Once the run completes, collect ALL failures:**
+   - Identify every check with `fail` status
+   - For each: `gh run view <run-id> --log-failed`
+   - Build a complete failure ledger
+4. **Fix ALL failures in one changeset:** Cluster by root cause, fix each cluster, verify locally
+5. **Push the fixes in one cycle.** Amend the commit and push. NOTE: `git push --force` / `--force-with-lease` is deny-pattern-blocked by the guardrail in guarded sessions (no orchestrator exemption). If force-push is blocked, push a normal new fix commit instead — the batching goal is ONE push cycle (collect all → fix all → push once), not literally one commit. A single new commit containing all batched fixes satisfies the goal.
+6. **Only re-push if NEW failures surface** that were not in the original batch.
+
+## Why this matters
+Without batching, N failures produce N push cycles. With batching, N failures produce 1 push cycle.
+
+Example from session #1685:
+- Without batching: 6 pushes (format → stale-assertion-1 → stale-assertion-2 → integration → merge-group → clean)
+- With batching: 2 pushes (collect all → fix all → push once → clean)
+
+## Pr-monitor workaround
+The pr-monitor fires `pr.ci.failed` per-check. When the first event arrives:
+1. Check `gh pr checks` — are other jobs still running?
+2. If yes: WAIT for completion
+3. If no: the single failure IS the only failure — proceed normally
+
+## Root cause
+The pr-monitor should batch-fire after the CI run completes (issue #1746 item 7). This playbook is the manual protocol.

package/.opencode/skills/gate-attribution/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: gate-attribution
+description: Per-task gate dispatch protocol. Documents the single-taskId attribution rule and parallel-lane optimization for reviewer/test_engineer gates.
+---
+
+# Gate Attribution
+
+## The rule
+The gate tracker attributes reviewer/test_engineer dispatches PER TASK (single taskId in the prompt). Set-dispatches covering multiple tasks do NOT count per-task, even with per-task verdicts.
+
+## Protocol
+1. **For each task requiring a gate:** Dispatch a separate reviewer and/or test_engineer with exactly ONE taskId
+2. **Minimize overhead via parallel dispatch:**
+   ```
+   dispatch_lanes_async with:
+   - common_prompt: shared verification context
+   - lanes: one lane per task, each with a single taskId
+   - max_concurrent: up to 3
+   ```
+3. **Collect + attribute:** Each lane result auto-attributes to its taskId
+4. **Do NOT batch:** Even for identical reviews, dispatch separately
+
+## Optimization for trivial tasks
+For pure ceremony gates (1-line doc fix):
+```
+TASK: Verify task X.Y. Run skill-mirrors.test.ts. PASS/FAIL.
+taskId: X.Y
+```
+
+## Why this exists
+The gate tracker (`src/hooks/delegation-gate.ts`) keys delegation chains by `sessionID`, and task attribution resolves exactly ONE taskId per dispatch (`args.task_id ?? args.taskId`). Ambiguous multi-task prompts fail closed (resolve to null) rather than attributing to any task — so a set-dispatch covering multiple tasks does not count per-task even with per-task verdicts. Tracked in issue #1746 item 6.

package/.opencode/skills/merge-queue-readiness/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: merge-queue-readiness
+description: Pre-queue merge-group CI simulation. Triggered before adding a PR to a GitHub merge queue. Prevents merge-queue kick-outs from integration test failures.
+---
+
+# Merge Queue Readiness
+
+## Trigger
+Before adding the PR to the merge queue (or before the final push if the repo uses a merge queue).
+
+## Protocol
+1. **Fetch latest main:** `git fetch origin main`
+2. **Create a temporary simulation worktree (do NOT mutate the PR branch).** Use a project-relative path UNDER the swarm worktree base so the path is portable across OSes and its later removal is permitted by the worktree guardrail (paths outside `.swarm-worktrees/` are blocked). Do NOT hardcode `/tmp` — it does not exist on Windows.
+   ```
+   git worktree add .swarm-worktrees/merge-sim origin/main
+   cd .swarm-worktrees/merge-sim
+   git merge <pr-branch> --no-edit
+   ```
+3. **Run integration + unit tests against the merged result:**
+   ```
+   bun test tests/integration --timeout 120000
+   bun test tests/unit --timeout 120000
+   ```
+   (Use per-file loops for hot modules per AGENTS.md invariant 6)
+4. **If failures:** Fix on the PR branch, re-push, re-simulate. Always run the cleanup step (5) before re-simulating or on any exit path — do not leave the simulation worktree behind.
+5. **Cleanup (run on EVERY exit path, including failure):** `git worktree remove --force .swarm-worktrees/merge-sim`. If the remove is guardrail-blocked or fails, delete the directory directly and run `git worktree prune`.
+6. **Only after simulation passes,** add PR to the merge queue.
+
+## Why this matters
+PR-branch CI and merge-group CI test DIFFERENT things:
+- PR-branch: tests the PR head commit in isolation
+- Merge-group: tests a temporary merge of PR head + latest main
+
+Integration tests that pass on the PR branch may fail in merge-group context due to test interactions exposed by the merged result.
+
+## Root cause
+A `swarm ci-simulate` command would automate this (issue #1746 item 5). This playbook is the manual protocol.

package/.opencode/skills/skill-edit-validation/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: skill-edit-validation
+description: Content-assertion sweep after editing SKILL.md files. Triggered when a task changes skill or prompt content that tests assert against. Prevents stale-assertion CI failures.
+---
+
+# Skill Edit Validation
+
+## Trigger
+After editing ANY `.md` file under `.opencode/skills/`, `.claude/skills/`, or `.agents/skills/` that changes content wording (not just whitespace/formatting).
+
+## Protocol
+1. **Extract changed phrases:** Identify old wording vs new wording (e.g., "spec.md does NOT exist" changed to "NO effective spec exists")
+2. **Targeted sweep:** For each OLD phrase, grep test files:
+   ```
+   rg "<old-phrase>" tests/ src/ --type ts -l
+   ```
+   Focus on: `*-audit*`, `*-security*`, `*-spec-gate*`, `*skill-mirror*`, `*soft-spec*`, `*prompt*`, `*workflow*`
+3. **For each match:** Read the assertion context (surrounding 10 lines). Verify:
+   - Does the assertion still hold against the new content?
+   - Is it checking a substring containing the old phrase?
+   - Is it checking for the ABSENCE of a word the new wording introduces? (e.g., `not.toContain('skip')` catches "this check is skipped")
+4. **Update stale assertions in the same changeset.** Do NOT defer to CI.
+5. **Preserve behavioral intent:** When updating, preserve what the assertion TESTS (e.g., "the plan skill has a spec-absent branch"), not just the string match.
+
+## Constraint
+Do NOT rubber-stamp brittle assertions. If an assertion tests implementation detail rather than behavioral intent, flag it for refactoring to a semantic check.
+
+## Root cause
+A skill-content test registry would auto-adjust (issue #1746 item 3). This playbook is the manual safety net.

package/.opencode/skills/worktree-retry-cleanup/SKILL.md

@@ -0,0 +1,24 @@
+---
+name: worktree-retry-cleanup
+description: Protocol for cleaning parallel-coder worktree lanes before retry. Triggered before re-dispatching any task that already has a lane (completed, denied, cancelled, or failed).
+---
+
+# Worktree Retry Cleanup
+
+## Trigger
+Before re-dispatching a coder for a task that already has a lane (any prior dispatch status).
+
+## Protocol
+1. **Ownership check — do this FIRST, before any deletion.** Confirm the lane is not owned by another ACTIVE session: read `.swarm/session/state.json` and verify no other session's `delegationChains` reference `<session>/<task>`. If another active session owns it, STOP — surface the conflict and do not delete.
+2. **Check for existing lane branch:** `git branch --list "swarm/lane/<session>/<task>"`
+3. **If branch exists:**
+   - Verify 0-commits-ahead: `git log --oneline HEAD..swarm/lane/<session>/<task>` — empty = safe
+   - Delete: `git branch -d swarm/lane/<session>/<task>` (use `-D` only if `-d` fails AND the commits are confirmed unneeded)
+   - Under full-auto, `-D` is deny-pattern-blocked — use `-d`
+4. **Remove the per-lane worktree directory.** Target the SPECIFIC lane `.swarm-worktrees/<session>/<task>`, NOT the session parent (the parent holds sibling lanes). Prefer `git worktree remove .swarm-worktrees/<session>/<task>` — this is permitted because the path is under the `.swarm-worktrees/` base. A bare `rm -rf` / `Remove-Item -Recurse -Force` on `.swarm-worktrees/` is deny-pattern-blocked by the guardrail, so do not use it here.
+5. **Prune:** `git worktree prune`
+6. **Verify:** `git branch --list "swarm/lane/<session>/<task>"` returns empty
+7. Only after cleanup, proceed to `declare_scope` + coder dispatch
+
+## Root cause
+The provisioning code should auto-clean after coder completion/denial/cancellation (tracked in issue #1746 item 1). This playbook is the temporary protocol.

package/dist/cli/{config-doctor-q354tb2w.js → config-doctor-9vjyj9m3.js}

@@ -12,8 +12,8 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-fm7xz1ne.js";
-import"./index-h4c4rrwx.js";
+} from "./index-zjh648z4.js";
+import"./index-18690p15.js";
 import"./index-bfwt3abw.js";
 import"./index-5e4e2hvv.js";
 import"./index-p0arc26j.js";

package/dist/cli/{curator-llm-factory-wqbm9mwr.js → curator-llm-factory-3hf9xpnd.js}

@@ -1,21 +1,21 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-cqbqynzp.js";
-import"./index-wj4jeavn.js";
-import"./index-5gnp8fyw.js";
+} from "./index-y3nx3ss0.js";
+import"./index-d3txrx5q.js";
+import"./index-mtzjbaaa.js";
 import"./index-c8s9a3zh.js";
-import"./index-fm7xz1ne.js";
+import"./index-zjh648z4.js";
 import"./index-j2v3w1ds.js";
 import"./index-scww5b77.js";
 import"./index-yw8qpf51.js";
 import"./index-85bacexr.js";
 import"./index-09xpycan.js";
-import"./index-h4c4rrwx.js";
-import"./index-9qxntjtx.js";
-import"./index-mmny81g1.js";
-import"./index-fz1jgbvw.js";
-import"./index-wg0665ft.js";
+import"./index-18690p15.js";
+import"./index-b15qbvph.js";
+import"./index-y5z2qdvk.js";
+import"./index-41fgssqr.js";
+import"./index-8f10r7ay.js";
 import"./index-2nt4mq9n.js";
 import"./index-bfwt3abw.js";
 import"./index-wvrj16f0.js";

package/dist/cli/{curator-6p9tpprq.js → curator-zn1kmwmz.js}

@@ -11,21 +11,21 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-cqbqynzp.js";
-import"./index-wj4jeavn.js";
-import"./index-5gnp8fyw.js";
+} from "./index-y3nx3ss0.js";
+import"./index-d3txrx5q.js";
+import"./index-mtzjbaaa.js";
 import"./index-c8s9a3zh.js";
-import"./index-fm7xz1ne.js";
+import"./index-zjh648z4.js";
 import"./index-j2v3w1ds.js";
 import"./index-scww5b77.js";
 import"./index-yw8qpf51.js";
 import"./index-85bacexr.js";
 import"./index-09xpycan.js";
-import"./index-h4c4rrwx.js";
-import"./index-9qxntjtx.js";
-import"./index-mmny81g1.js";
-import"./index-fz1jgbvw.js";
-import"./index-wg0665ft.js";
+import"./index-18690p15.js";
+import"./index-b15qbvph.js";
+import"./index-y5z2qdvk.js";
+import"./index-41fgssqr.js";
+import"./index-8f10r7ay.js";
 import"./index-2nt4mq9n.js";
 import"./index-bfwt3abw.js";
 import"./index-wvrj16f0.js";

package/dist/cli/{guardrail-explain-ynge4ww3.js → guardrail-explain-hjz1k6w0.js}

@@ -1,22 +1,22 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-8a8b5wjf.js";
-import"./index-cqbqynzp.js";
-import"./index-wj4jeavn.js";
-import"./index-5gnp8fyw.js";
+} from "./index-zh3qh6m7.js";
+import"./index-y3nx3ss0.js";
+import"./index-d3txrx5q.js";
+import"./index-mtzjbaaa.js";
 import"./index-c8s9a3zh.js";
-import"./index-fm7xz1ne.js";
+import"./index-zjh648z4.js";
 import"./index-j2v3w1ds.js";
 import"./index-scww5b77.js";
 import"./index-yw8qpf51.js";
 import"./index-85bacexr.js";
 import"./index-09xpycan.js";
-import"./index-h4c4rrwx.js";
-import"./index-9qxntjtx.js";
-import"./index-mmny81g1.js";
-import"./index-fz1jgbvw.js";
-import"./index-wg0665ft.js";
+import"./index-18690p15.js";
+import"./index-b15qbvph.js";
+import"./index-y5z2qdvk.js";
+import"./index-41fgssqr.js";
+import"./index-8f10r7ay.js";
 import"./index-2nt4mq9n.js";
 import"./index-bfwt3abw.js";
 import"./index-wvrj16f0.js";

package/dist/cli/{guardrail-log-8mqqsssq.js → guardrail-log-5240bawg.js}

@@ -1,9 +1,9 @@
 // @bun
 import {
   handleGuardrailLog
-} from "./index-vx76tcxe.js";
-import"./index-wj4jeavn.js";
-import"./index-h4c4rrwx.js";
+} from "./index-p5vm9gy9.js";
+import"./index-d3txrx5q.js";
+import"./index-18690p15.js";
 import"./index-bfwt3abw.js";
 import"./index-5e4e2hvv.js";
 import"./index-p0arc26j.js";

package/dist/cli/{hive-promoter-qh2rh8x2.js → hive-promoter-j81yj97d.js}

@@ -5,21 +5,21 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-cqbqynzp.js";
-import"./index-wj4jeavn.js";
-import"./index-5gnp8fyw.js";
+} from "./index-y3nx3ss0.js";
+import"./index-d3txrx5q.js";
+import"./index-mtzjbaaa.js";
 import"./index-c8s9a3zh.js";
-import"./index-fm7xz1ne.js";
+import"./index-zjh648z4.js";
 import"./index-j2v3w1ds.js";
 import"./index-scww5b77.js";
 import"./index-yw8qpf51.js";
 import"./index-85bacexr.js";
 import"./index-09xpycan.js";
-import"./index-h4c4rrwx.js";
-import"./index-9qxntjtx.js";
-import"./index-mmny81g1.js";
-import"./index-fz1jgbvw.js";
-import"./index-wg0665ft.js";
+import"./index-18690p15.js";
+import"./index-b15qbvph.js";
+import"./index-y5z2qdvk.js";
+import"./index-41fgssqr.js";
+import"./index-8f10r7ay.js";
 import"./index-2nt4mq9n.js";
 import"./index-bfwt3abw.js";
 import"./index-wvrj16f0.js";

package/dist/cli/{index-h4c4rrwx.js → index-18690p15.js}

@@ -1126,6 +1126,27 @@ var QualityBudgetConfigSchema = GateFeatureSchema.extend({
   enforce_on_globs: exports_external.array(exports_external.string()).default(["src/**"]),
   exclude_globs: exports_external.array(exports_external.string()).default(["docs/**", "tests/**", "**/*.test.*"])
 });
+var GATE_CONFIG_KNOWN_SECTION_KEYS = {
+  syntax_check: ["enabled"],
+  placeholder_scan: [
+    "enabled",
+    "deny_patterns",
+    "allow_globs",
+    "max_allowed_findings"
+  ],
+  sast_scan: ["enabled"],
+  sbom_generate: ["enabled"],
+  build_check: ["enabled"],
+  quality_budget: [
+    "enabled",
+    "max_complexity_delta",
+    "max_public_api_delta",
+    "max_duplication_ratio",
+    "min_test_to_code_ratio",
+    "enforce_on_globs",
+    "exclude_globs"
+  ]
+};
 var GateConfigSchema = exports_external.object({
   syntax_check: GateFeatureSchema.default({ enabled: true }),
   placeholder_scan: PlaceholderScanConfigSchema.default({
@@ -1154,7 +1175,7 @@ var GateConfigSchema = exports_external.object({
   sast_scan: GateFeatureSchema.default({ enabled: true }),
   sbom_generate: GateFeatureSchema.default({ enabled: true }),
   build_check: GateFeatureSchema.default({ enabled: true }),
-  quality_budget: QualityBudgetConfigSchema
+  quality_budget: QualityBudgetConfigSchema.default(() => QualityBudgetConfigSchema.parse({}))
 });
 var PipelineConfigSchema = exports_external.object({
   parallel_precheck: exports_external.boolean().default(true)
@@ -2362,4 +2383,4 @@ var PluginConfigSchema = exports_external.object({
   skills: SkillsConfigSchema.optional()
 });
 
-export { ORCHESTRATOR_NAME, ALL_SUBAGENT_NAMES, ALL_AGENT_NAMES, TOOL_NAMES, TOOL_NAME_SET, AGENT_TOOL_MAP, DEFAULT_AGENT_CONFIGS, _internals, isKnownCanonicalRole, getCanonicalAgentRole, resolveGeneratedAgentRole, stripKnownSwarmPrefix, AgentReasoningConfigSchema, AgentThinkingConfigSchema, AgentOverrideConfigSchema, SwarmConfigSchema, ModelPricingConfigSchema, PricingConfigSchema, HooksConfigSchema, ScoringWeightsSchema, DecisionDecaySchema, TokenRatiosSchema, ScoringConfigSchema, ContextBudgetConfigSchema, EvidenceConfigSchema, GateFeatureSchema, PlaceholderScanConfigSchema, QualityBudgetConfigSchema, GateConfigSchema, PipelineConfigSchema, PhaseCompleteConfigSchema, SummaryConfigSchema, ReviewPassesConfigSchema, AutoReviewConfigSchema, AdversarialDetectionConfigSchema, AdversarialTestingConfigSchema, IntegrationAnalysisConfigSchema, DocsConfigSchema, DesignDocsConfigSchema, UIReviewConfigSchema, CompactionAdvisoryConfigSchema, LintConfigSchema, SecretscanConfigSchema, GuardrailsProfileSchema, DEFAULT_AGENT_PROFILES, DEFAULT_ARCHITECT_PROFILE, GuardrailsConfigSchema, WatchdogConfigSchema, SelfReviewConfigSchema, resolveGuardrailsConfig, ToolFilterConfigSchema, PlanCursorConfigSchema, ContextMapConfigSchema, RepoGraphConfigSchema, CheckpointConfigSchema, AutomationModeSchema, AutomationCapabilitiesSchema, AutomationConfigSchema, KnowledgeConfigSchema, MemoryConfigSchema, CuratorConfigSchema, ArchitecturalSupervisionConfigSchema, KnowledgeApplicationConfigSchema, SkillPropagationConfigSchema, SkillImproverConfigSchema, SkillsConfigSchema, SpecWriterConfigSchema, SlopDetectorConfigSchema, IncrementalVerifyConfigSchema, CompactionConfigSchema, PrmConfigSchema, AgentAuthorityRuleSchema, AuthorityConfigSchema, GeneralCouncilConfigSchema, CouncilConfigSchema, PrMonitorConfigSchema, ParallelizationConfigSchema, WorktreeIsolationConfigSchema, LeanTurboConfigSchema, EpicConfigSchema, StandardTurboConfigSchema, LeanTurboStrategyConfigSchema, TurboConfigSchema, ExternalSkillCandidateSourceTypeSchema, ExternalSkillCandidateEvaluationVerdictSchema, DiscoverySourceSchema, ExternalSkillCandidateSchema, ExternalSkillsConfigSchema, DEFAULT_EXTERNAL_SKILLS_CONFIG, DEFAULT_SKILLS_CONFIG, resolveExternalSkillsConfig, PluginConfigSchema };
+export { ORCHESTRATOR_NAME, ALL_SUBAGENT_NAMES, ALL_AGENT_NAMES, TOOL_NAMES, TOOL_NAME_SET, AGENT_TOOL_MAP, DEFAULT_AGENT_CONFIGS, _internals, isKnownCanonicalRole, getCanonicalAgentRole, resolveGeneratedAgentRole, stripKnownSwarmPrefix, AgentReasoningConfigSchema, AgentThinkingConfigSchema, AgentOverrideConfigSchema, SwarmConfigSchema, ModelPricingConfigSchema, PricingConfigSchema, HooksConfigSchema, ScoringWeightsSchema, DecisionDecaySchema, TokenRatiosSchema, ScoringConfigSchema, ContextBudgetConfigSchema, EvidenceConfigSchema, GateFeatureSchema, PlaceholderScanConfigSchema, QualityBudgetConfigSchema, GATE_CONFIG_KNOWN_SECTION_KEYS, GateConfigSchema, PipelineConfigSchema, PhaseCompleteConfigSchema, SummaryConfigSchema, ReviewPassesConfigSchema, AutoReviewConfigSchema, AdversarialDetectionConfigSchema, AdversarialTestingConfigSchema, IntegrationAnalysisConfigSchema, DocsConfigSchema, DesignDocsConfigSchema, UIReviewConfigSchema, CompactionAdvisoryConfigSchema, LintConfigSchema, SecretscanConfigSchema, GuardrailsProfileSchema, DEFAULT_AGENT_PROFILES, DEFAULT_ARCHITECT_PROFILE, GuardrailsConfigSchema, WatchdogConfigSchema, SelfReviewConfigSchema, resolveGuardrailsConfig, ToolFilterConfigSchema, PlanCursorConfigSchema, ContextMapConfigSchema, RepoGraphConfigSchema, CheckpointConfigSchema, AutomationModeSchema, AutomationCapabilitiesSchema, AutomationConfigSchema, KnowledgeConfigSchema, MemoryConfigSchema, CuratorConfigSchema, ArchitecturalSupervisionConfigSchema, KnowledgeApplicationConfigSchema, SkillPropagationConfigSchema, SkillImproverConfigSchema, SkillsConfigSchema, SpecWriterConfigSchema, SlopDetectorConfigSchema, IncrementalVerifyConfigSchema, CompactionConfigSchema, PrmConfigSchema, AgentAuthorityRuleSchema, AuthorityConfigSchema, GeneralCouncilConfigSchema, CouncilConfigSchema, PrMonitorConfigSchema, ParallelizationConfigSchema, WorktreeIsolationConfigSchema, LeanTurboConfigSchema, EpicConfigSchema, StandardTurboConfigSchema, LeanTurboStrategyConfigSchema, TurboConfigSchema, ExternalSkillCandidateSourceTypeSchema, ExternalSkillCandidateEvaluationVerdictSchema, DiscoverySourceSchema, ExternalSkillCandidateSchema, ExternalSkillsConfigSchema, DEFAULT_EXTERNAL_SKILLS_CONFIG, DEFAULT_SKILLS_CONFIG, resolveExternalSkillsConfig, PluginConfigSchema };

package/dist/cli/{index-fz1jgbvw.js → index-41fgssqr.js}

@@ -6,7 +6,7 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-wg0665ft.js";
+} from "./index-8f10r7ay.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-2nt4mq9n.js";
@@ -341,6 +341,7 @@ function validateLesson(candidate, existingLessons, meta) {
 }
 var ACTIONABLE_STRING_MAX = 200;
 var ACTIONABLE_LIST_MAX = 20;
+var RETIRED_SKILL_HISTORY_MAX = 50;
 var NAME_PATTERN = /^[a-z][a-z0-9_]{0,63}$/;
 var SOURCE_REF_FORBIDDEN = /(\.\.\/|\.\.\\|\0|[\x00-\x1f\x7f])/;
 var ALLOWED_SKILL_PATH_PREFIXES = [
@@ -473,6 +474,25 @@ function validateActionableFields(fields) {
   if (fields.generated_skill_path !== undefined && !validateSkillPath(fields.generated_skill_path)) {
     errors.push("generated_skill_path must be repo-local under allowed prefix");
   }
+  if (fields.draft_generated_skill_slug !== undefined) {
+    if (typeof fields.draft_generated_skill_slug !== "string" || !/^[a-z0-9][a-z0-9-]{0,63}$/.test(fields.draft_generated_skill_slug)) {
+      errors.push("draft_generated_skill_slug must be a kebab-case slug");
+    }
+  }
+  if (fields.draft_generated_skill_path !== undefined && !validateSkillPath(fields.draft_generated_skill_path)) {
+    errors.push("draft_generated_skill_path must be repo-local under allowed prefix");
+  }
+  if (fields.retired_skill_history !== undefined) {
+    if (!Array.isArray(fields.retired_skill_history)) {
+      errors.push("retired_skill_history must be an array of slugs");
+    } else {
+      if (fields.retired_skill_history.length > RETIRED_SKILL_HISTORY_MAX) {
+        errors.push(`retired_skill_history exceeds ${RETIRED_SKILL_HISTORY_MAX} items`);
+      } else if (!fields.retired_skill_history.every((s) => typeof s === "string" && /^[a-z0-9][a-z0-9-]{0,63}$/.test(s))) {
+        errors.push("retired_skill_history entries must be kebab-case slugs");
+      }
+    }
+  }
   return { valid: errors.length === 0, errors };
 }
 function hasNonEmptyList(v) {
@@ -738,4 +758,4 @@ var _internals = {
   hasSignificantOverlap
 };
 
-export { DANGEROUS_COMMAND_ERROR_PATTERNS, DANGEROUS_COMMAND_WARNING_PATTERNS, DANGEROUS_COMMAND_PATTERNS, SECURITY_DEGRADING_PATTERNS, INVISIBLE_FORMAT_CHARS, INJECTION_PATTERNS, validateLesson, ACTIONABLE_STRING_MAX, ACTIONABLE_LIST_MAX, ALLOWED_SKILL_PATH_PREFIXES, validateSkillPath, validateSkillCandidatePath, validateActionableFields, validateActionability, resolveUnactionablePath, appendUnactionable, auditEntryHealth, quarantineEntry, restoreEntry, unarchiveEntry, _internals };
+export { DANGEROUS_COMMAND_ERROR_PATTERNS, DANGEROUS_COMMAND_WARNING_PATTERNS, DANGEROUS_COMMAND_PATTERNS, SECURITY_DEGRADING_PATTERNS, INVISIBLE_FORMAT_CHARS, INJECTION_PATTERNS, validateLesson, ACTIONABLE_STRING_MAX, ACTIONABLE_LIST_MAX, RETIRED_SKILL_HISTORY_MAX, ALLOWED_SKILL_PATH_PREFIXES, validateSkillPath, validateSkillCandidatePath, validateActionableFields, validateActionability, resolveUnactionablePath, appendUnactionable, auditEntryHealth, quarantineEntry, restoreEntry, unarchiveEntry, _internals };

package/dist/cli/{index-wg0665ft.js → index-8f10r7ay.js}

@@ -525,7 +525,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const recovered = touched.filter((e) => e.confidence > CONFIDENCE_FLOOR + FLOOR_EPSILON && e.confidence_floor_demoted);
   if (atFloor.length === 0 && recovered.length === 0)
     return;
-  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-6n3x3he2.js");
+  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-ymysgtrr.js");
   const rollups = await readKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -592,7 +592,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-exymfcb9.js");
+    const { quarantineEntry } = await import("./knowledge-validator-b9nvmzjc.js");
     for (const { id } of toQuarantine) {
       await quarantineEntry(directory, id, "confidence_floor_negative_outcome", "auto").catch((err) => {
         console.warn("[knowledge-store] confidence-floor quarantine failed (best-effort):", err instanceof Error ? err.message : String(err));