opencode-swarm 7.113.2 → 7.113.3

package/dist/cli/{index-54dgk0bv.js → index-dh87tpc5.js}

@@ -7,7 +7,7 @@ import {
   readDoctorArtifact,
   removeStraySwarmDir,
   runConfigDoctor
-} from "./index-0gf6de8b.js";
+} from "./index-2148358e.js";
 import {
   AGENT_TOOL_MAP,
   ALL_SUBAGENT_NAMES,
@@ -23,7 +23,7 @@ import {
   getCanonicalAgentRole,
   resolveExternalSkillsConfig,
   stripKnownSwarmPrefix
-} from "./index-1ey3dxq7.js";
+} from "./index-147ja18h.js";
 import {
   MAX_TRANSIENT_RETRIES,
   PlanSchema,
@@ -68,7 +68,7 @@ import {
   savePlan,
   transientBackoff,
   validateProjectRoot
-} from "./index-afgh75zg.js";
+} from "./index-f6y341yk.js";
 import {
   buildOpenSpecProjectionSync,
   detectSpeckit,
@@ -83,13 +83,13 @@ import {
   _internals1 as _internals2,
   isCommandAvailable,
   tool
-} from "./index-9fxs0rm1.js";
+} from "./index-ga4ta3cr.js";
 import {
   buildCorrelationId,
   listActive,
   subscribe,
   unsubscribe
-} from "./index-q1jaeynn.js";
+} from "./index-80jkseqw.js";
 import {
   BUNDLED_PROJECT_SKILL_ROOT,
   DEFAULT_SKILL_MIN_CONFIDENCE,
@@ -111,7 +111,7 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-h389ed8y.js";
+} from "./index-mr4whary.js";
 import {
   appendUnactionable,
   quarantineEntry,
@@ -121,10 +121,10 @@ import {
   validateActionability,
   validateActionableFields,
   validateLesson
-} from "./index-30ejh1tx.js";
+} from "./index-43khae15.js";
 import {
   readRecentEscalations
-} from "./index-t6wfwdm1.js";
+} from "./index-h7q1bvzm.js";
 import {
   effectiveRetrievalOutcomes,
   readKnowledgeCounterRollups,
@@ -132,7 +132,7 @@ import {
   recordHiveKnowledgeEvent,
   recordKnowledgeEvent,
   resolveKnowledgeEventsPath
-} from "./index-hpp2r0sd.js";
+} from "./index-qzqx2qky.js";
 import {
   appendKnowledge,
   appendRejectedLesson,
@@ -156,7 +156,7 @@ import {
   rewriteKnowledge,
   transactFile,
   transactKnowledge
-} from "./index-32bx4kch.js";
+} from "./index-0q7rrh59.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -170,7 +170,7 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-db1fh1fv.js";
+} from "./index-g40r5d08.js";
 import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
@@ -179,15 +179,15 @@ import {
 import {
   SandboxCapabilityProbe,
   init_capability_probe
-} from "./index-wvrj16f0.js";
+} from "./index-8fwhhayc.js";
 import {
   clearAllScopes
-} from "./index-g55nzpwn.js";
+} from "./index-n6fa2hhk.js";
 import {
   readSwarmFileAsync,
   safeHook,
   validateSwarmPath
-} from "./index-1rga1vvb.js";
+} from "./index-wh8949ef.js";
 import {
   deepMerge
 } from "./index-p0arc26j.js";
@@ -199,16 +199,16 @@ import {
 } from "./index-zgwm4ryv.js";
 import {
   atomicWriteFile
-} from "./index-0dab9w37.js";
+} from "./index-0p660a87.js";
 import {
   exports_external
 } from "./index-293f68mj.js";
 import {
   tryAcquireLock
-} from "./index-5mkc2f9z.js";
+} from "./index-4sckv7y6.js";
 import {
   telemetry
-} from "./index-vn263hqt.js";
+} from "./index-pa6t33pt.js";
 import {
   require_proper_lockfile
 } from "./index-vvk2g744.js";
@@ -216,7 +216,7 @@ import {
   bunSpawn,
   bunWrite,
   mergeEnvForChild
-} from "./index-h91bv3hy.js";
+} from "./index-qe3v54nb.js";
 import {
   __require,
   __toESM
@@ -4397,6 +4397,7 @@ var head = null;
 var tail = null;
 var entriesByKey = new Map;
 var deferredEntries = new Set;
+var resolvedKeyCache = new Map;
 function markAsPooled(provider) {
   const originalClose = provider.close;
   provider.close = () => {
@@ -4524,10 +4525,19 @@ function unlinkEntry(entry) {
     tail = entry.prev;
 }
 function resolvePoolKey(directory) {
+  const rawKey = path6.resolve(directory);
   try {
-    return realpathSync(directory);
+    const canonical = realpathSync(directory);
+    resolvedKeyCache.delete(rawKey);
+    resolvedKeyCache.set(rawKey, canonical);
+    if (resolvedKeyCache.size > MAX_POOL_SIZE) {
+      const oldest = resolvedKeyCache.keys().next().value;
+      if (oldest !== undefined)
+        resolvedKeyCache.delete(oldest);
+    }
+    return canonical;
   } catch {
-    return path6.resolve(directory);
+    return resolvedKeyCache.get(rawKey) ?? rawKey;
   }
 }
 function evictAndClose(directory) {
@@ -4923,6 +4933,73 @@ function sanitizeGatesConfig(raw) {
 function sanitizeSectionConfigs(raw) {
   return sanitizeGatesConfig(sanitizeExternalSkillsConfig(raw));
 }
+function stripUnrecognizedKeys(raw, error2) {
+  const removed = [];
+  const cleaned = structuredClone(raw);
+  for (const issue of error2.issues) {
+    if (issue.code !== "unrecognized_keys")
+      continue;
+    const keys = issue.keys ?? [];
+    let node = cleaned;
+    for (const seg of issue.path) {
+      if (node && typeof node === "object") {
+        node = node[seg];
+      } else {
+        node = undefined;
+        break;
+      }
+    }
+    if (!node || typeof node !== "object")
+      continue;
+    for (const key of keys) {
+      if (key in node) {
+        delete node[key];
+        const dotted = [...issue.path.map(String), key].join(".");
+        removed.push(dotted);
+      }
+    }
+  }
+  return { cleaned, removed };
+}
+function parseConfigWithFallback(mergedRaw, rawUserConfig, failedResult, loadedFromFile, configHadErrors) {
+  const result = failedResult;
+  const secure = (config) => loadedFromFile && configHadErrors ? PluginConfigSchema.parse({
+    ...config,
+    guardrails: { enabled: true }
+  }) : config;
+  const { cleaned, removed } = stripUnrecognizedKeys(mergedRaw, result.error);
+  if (removed.length > 0) {
+    const recovered = PluginConfigSchema.safeParse(cleaned);
+    if (recovered.success) {
+      advisoryWarn(`[opencode-swarm] Ignored ${removed.length} unrecognized config key(s): ${removed.join(", ")}. The rest of your configuration was preserved. Fix or remove these keys.`);
+      return secure(recovered.data);
+    }
+  }
+  if (rawUserConfig) {
+    const userSanitized = sanitizeSectionConfigs(rawUserConfig ?? {});
+    const userParseResult = PluginConfigSchema.safeParse(userSanitized);
+    if (userParseResult.success) {
+      advisoryWarn("[opencode-swarm] Project config ignored due to validation errors. Using user config.");
+      return secure(userParseResult.data);
+    }
+    const userStripped = stripUnrecognizedKeys(userSanitized, userParseResult.error);
+    if (userStripped.removed.length > 0) {
+      const userRecovered = PluginConfigSchema.safeParse(userStripped.cleaned);
+      if (userRecovered.success) {
+        advisoryWarn(`[opencode-swarm] Project config ignored; also ignored ${userStripped.removed.length} unrecognized user-config key(s): ${userStripped.removed.join(", ")}.`);
+        return secure(userRecovered.data);
+      }
+    }
+  }
+  const offending = stripUnrecognizedKeys(mergedRaw, result.error).removed;
+  if (offending.length > 0) {
+    advisoryWarn(`[opencode-swarm] Merged config validation failed. Unrecognized key(s): ${offending.join(", ")}.`);
+  } else {
+    advisoryWarn("[opencode-swarm] Merged config validation failed:", result.error.format());
+  }
+  advisoryWarn("[opencode-swarm] \u26A0\uFE0F SECURITY: Falling back to conservative defaults with guardrails ENABLED. Fix the config file to restore custom configuration.");
+  return PluginConfigSchema.parse({ guardrails: { enabled: true } });
+}
 function rawFullAutoLocked(raw) {
   if (!raw || typeof raw !== "object")
     return false;
@@ -4955,27 +5032,16 @@ function loadPluginConfig(directory) {
   mergedRaw = migratePresetsConfig(mergedRaw);
   mergedRaw = sanitizeSectionConfigs(mergedRaw);
   const result = PluginConfigSchema.safeParse(mergedRaw);
-  if (!result.success) {
-    if (rawUserConfig) {
-      const userParseResult = PluginConfigSchema.safeParse(sanitizeSectionConfigs(rawUserConfig ?? {}));
-      if (userParseResult.success) {
-        advisoryWarn("[opencode-swarm] Project config ignored due to validation errors. Using user config.");
-        return userParseResult.data;
-      }
+  if (result.success) {
+    if (loadedFromFile && configHadErrors) {
+      return PluginConfigSchema.parse({
+        ...mergedRaw,
+        guardrails: { enabled: true }
+      });
     }
-    advisoryWarn("[opencode-swarm] Merged config validation failed:", result.error.format());
-    advisoryWarn("[opencode-swarm] \u26A0\uFE0F SECURITY: Falling back to conservative defaults with guardrails ENABLED. Fix the config file to restore custom configuration.");
-    return PluginConfigSchema.parse({
-      guardrails: { enabled: true }
-    });
+    return result.data;
   }
-  if (loadedFromFile && configHadErrors) {
-    return PluginConfigSchema.parse({
-      ...mergedRaw,
-      guardrails: { enabled: true }
-    });
-  }
-  return result.data;
+  return parseConfigWithFallback(mergedRaw, rawUserConfig, result, loadedFromFile, configHadErrors);
 }
 function loadPluginConfigWithMeta(directory) {
   const userConfigPath = path7.join(getUserConfigDir(), "opencode", CONFIG_FILENAME);
@@ -8976,7 +9042,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-nnwn4sq0.js");
+        const skillModule = await import("./skill-generator-z01sjppf.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -9257,7 +9323,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-4gbz527n.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-0q1p6br7.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -10214,15 +10280,15 @@ var _internals12 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async () => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-qb313fyy.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-e5kd993s.js");
     return KnowledgeConfigSchema2.parse({});
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-9s04amtf.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-ckzb8ww4.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig);
   },
   checkHivePromotions: async (entries, knowledgeConfig) => {
-    const { checkHivePromotions } = await import("./hive-promoter-0y4pnft4.js");
+    const { checkHivePromotions } = await import("./hive-promoter-h21wzpsr.js");
     return checkHivePromotions(entries, knowledgeConfig);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -10231,7 +10297,7 @@ var _internals12 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-nnwn4sq0.js");
+    } = await import("./skill-generator-z01sjppf.js");
     const result = {
       approved: [],
       rejected: [],
@@ -10273,7 +10339,7 @@ var _internals12 = {
     return result;
   },
   readPriorDriftReports: async (directory) => {
-    const { readPriorDriftReports } = await import("./curator-drift-jvs1v6em.js");
+    const { readPriorDriftReports } = await import("./curator-drift-c0by7063.js");
     return readPriorDriftReports(directory);
   },
   readSwarmKnowledge: (directory) => readKnowledge(resolveSwarmKnowledgePath(directory))
@@ -15166,7 +15232,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-qb313fyy.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-e5kd993s.js");
     const { config: pmLoadedConfig } = _internals19.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -17279,9 +17345,9 @@ var _internals23 = {
   readSwarmFileAsync,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
-      import("./schema-qb313fyy.js"),
-      import("./curator-9s04amtf.js"),
-      import("./curator-llm-factory-dwvk7rh0.js")
+      import("./schema-e5kd993s.js"),
+      import("./curator-ckzb8ww4.js"),
+      import("./curator-llm-factory-mhjcpy1s.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -17777,7 +17843,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "opencode-swarm",
-  version: "7.113.2",
+  version: "7.113.3",
   description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -17817,6 +17883,7 @@ var package_default = {
   files: [
     "dist",
     "dist/lang/grammars",
+    "binaries",
     ".opencode/skills/brainstorm",
     ".opencode/skills/specify",
     ".opencode/skills/clarify-spec",
@@ -18818,10 +18885,19 @@ async function getSandboxStatus() {
     const executor = await _internals24.getSandboxExecutor();
     const hasExecutor = executor !== null;
     if (hasExecutor) {
+      const executorStrength = executor?.strength;
+      const strength = executorStrength === "weak" || executorStrength === "advisory" ? "advisory" : capability.strength ?? executorStrength ?? "strong";
+      if (strength === "advisory") {
+        return {
+          name: "Sandbox",
+          status: "\u26A0\uFE0F",
+          detail: `Mechanism: ${mechanism.toLowerCase()} | Available: advisory only | Strength: ADVISORY (env-scrub, NOT kernel-enforced) | Commands are NOT strongly sandboxed`
+        };
+      }
       return {
         name: "Sandbox",
         status: "\u2705",
-        detail: `Mechanism: ${mechanism.toLowerCase()} | Available: yes | Sandboxing commands: yes`
+        detail: `Mechanism: ${mechanism.toLowerCase()} | Available: yes | Strength: strong (kernel-enforced) | Sandboxing commands: yes`
       };
     }
     if (mechanism !== "none") {
@@ -19237,7 +19313,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-az11cwf5.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-xbdfrbwt.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true);
     output = formatDoctorMarkdown(fixResult.result);
   } else {
@@ -20050,7 +20126,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-w1er1ea2.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-8g594znj.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -26848,7 +26924,7 @@ var DISPATCH_FRAMEWORK_MAP = {
 };
 async function detectTestFrameworkViaDispatch(cwd) {
   try {
-    const { pickBackend } = await import("./dispatch-wst7bypk.js");
+    const { pickBackend } = await import("./dispatch-mczsxy5s.js");
     const backend = await pickBackend(cwd);
     if (!backend?.selectTestFramework)
       return "none";
@@ -26864,7 +26940,7 @@ async function buildTestCommandViaDispatch(framework, scope, files, coverage, ba
   if (framework === "none")
     return null;
   try {
-    const { pickBackend } = await import("./dispatch-wst7bypk.js");
+    const { pickBackend } = await import("./dispatch-mczsxy5s.js");
     const backend = await pickBackend(baseDir);
     if (backend?.buildTestCommand) {
       const cmd = backend.buildTestCommand(framework, files, baseDir, {
@@ -26884,7 +26960,7 @@ async function parseTestOutputViaDispatch(framework, output, baseDir) {
   if (framework === "none")
     return null;
   try {
-    const { pickBackend } = await import("./dispatch-wst7bypk.js");
+    const { pickBackend } = await import("./dispatch-mczsxy5s.js");
     const backend = await pickBackend(baseDir);
     if (!backend?.parseTestOutput)
       return null;
@@ -29517,12 +29593,14 @@ class AutomationQueue {
   defaultBackoffMs;
   maxBackoffMs;
   eventBus;
+  overflowStrategy;
   itemCounter = 0;
   constructor(config) {
     this.maxSize = config?.maxSize ?? 1000;
     this.defaultMaxRetries = config?.defaultMaxRetries ?? 3;
     this.defaultBackoffMs = config?.defaultBackoffMs ?? 1000;
     this.maxBackoffMs = config?.maxBackoffMs ?? 60000;
+    this.overflowStrategy = config?.overflowStrategy ?? "throw";
     this.eventBus = getGlobalEventBus();
   }
   generateId() {
@@ -29530,7 +29608,20 @@ class AutomationQueue {
   }
   enqueue(payload, priority = "normal", metadata) {
     if (this.items.length >= this.maxSize) {
-      throw new Error(`Queue is full (max ${this.maxSize} items)`);
+      if (this.overflowStrategy === "evict-oldest") {
+        let oldestIdx = 0;
+        for (let i = 1;i < this.items.length; i++) {
+          if (this.items[i].createdAt < this.items[oldestIdx].createdAt) {
+            oldestIdx = i;
+          }
+        }
+        const [evicted] = this.items.splice(oldestIdx, 1);
+        if (evicted) {
+          this.eventBus.publish("queue.item.evicted", { itemId: evicted.id });
+        }
+      } else {
+        throw new Error(`Queue is full (max ${this.maxSize} items)`);
+      }
     }
     const item = {
       id: this.generateId(),
@@ -32618,7 +32709,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-w51xz4dr.js");
+    const { buildHelpText } = await import("./index-hw4tcxs9.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -32627,7 +32718,7 @@ async function handleHelpCommand(ctx) {
     return _internals48.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals48.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-w51xz4dr.js");
+  const { buildHelpText: fullHelp } = await import("./index-hw4tcxs9.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -32760,7 +32851,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-2k271yh4.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-kabd97j8.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -32768,9 +32859,19 @@ var COMMAND_REGISTRY = {
     toolPolicy: "agent",
     toolNoArgs: false
   },
+  "guardrail-explain": {
+    handler: async (ctx) => {
+      const { handleGuardrailExplain } = await import("./guardrail-explain-kabd97j8.js");
+      return handleGuardrailExplain(ctx.directory, ctx.args);
+    },
+    description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
+    category: "diagnostics",
+    aliasOf: "guardrail explain",
+    deprecated: true
+  },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-hysxdwg9.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-qfc2j0tb.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -36019,6 +36120,9 @@ function dcStripOneWrapper(cmd) {
   const shellMatch = /^(?:bash|sh|zsh|dash|fish)(?:\.exe)?\s+-c\s+"?(.*?)"?\s*$/is.exec(t);
   if (shellMatch)
     return shellMatch[1].trim();
+  const evalMatch = /^eval\s+(.+)$/is.exec(t);
+  if (evalMatch)
+    return evalMatch[1].replace(/^["']|["']$/g, "").trim();
   const prefixMatch = /^(?:sudo|time|nohup)\s+(.+)$/is.exec(t) ?? /^env(?:\s+[A-Za-z_][A-Za-z0-9_]*=[^\s]*)*\s+(.+)$/is.exec(t) ?? /^nice\s+(?:-n\s+\d+\s+)?(.+)$/is.exec(t);
   if (prefixMatch)
     return prefixMatch[1].trim();
@@ -36080,6 +36184,15 @@ function dcSplitSegments(cmd) {
         current = "";
         continue;
       }
+      if (ch === "&" && next !== "&") {
+        const prev = cmd[i - 1];
+        const isFdRedirect = prev === ">" || next === ">";
+        if (!isFdRedirect) {
+          segments.push(current.trim());
+          current = "";
+          continue;
+        }
+      }
     }
     current += ch;
   }
@@ -38727,7 +38840,7 @@ function hasActiveEpicMode(sessionID) {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-p8g2rzxd.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-vwv7zm2p.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)

package/dist/cli/{index-afgh75zg.js → index-f6y341yk.js}

@@ -12,7 +12,7 @@ import {
 import {
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-1rga1vvb.js";
+} from "./index-wh8949ef.js";
 import {
   readCachedParsedFile
 } from "./index-jtqkh8jf.js";
@@ -27,22 +27,22 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-x5g7et24.js";
+} from "./index-4h2ea8h5.js";
 import {
   ZodError,
   exports_external
 } from "./index-293f68mj.js";
 import {
   withEvidenceLock
-} from "./index-5mkc2f9z.js";
+} from "./index-4sckv7y6.js";
 import {
   emit
-} from "./index-vn263hqt.js";
+} from "./index-pa6t33pt.js";
 import {
   bunHash,
   bunWrite,
   mergeEnvForChild
-} from "./index-h91bv3hy.js";
+} from "./index-qe3v54nb.js";
 import {
   __esm,
   __export,
@@ -265,10 +265,10 @@ function buildSandboxProfile(scopePaths, tempDir, envOverrides) {
 (allow file-read* (subpath "/sbin"))
 (allow file-read* (subpath "/lib"))
 (allow file-read* (subpath "/lib64"))
+(deny file-write*)
 ${rwAllowLines}
 ${envLines.join(`
-`)}
-(deny file-write*)`;
+`)}`;
   return profile;
 }
 
@@ -351,7 +351,8 @@ var init_sandbox_exec_executor = __esm(() => {
   init_executor();
   SANDBOX_UNAVAILABLE_CODES = new Set(["ENOENT", "EACCES", "ENOSPC"]);
   _internals3 = {
-    probeSandboxExec
+    probeSandboxExec,
+    buildSandboxProfile
   };
 });
 
@@ -792,7 +793,7 @@ async function _createExecutor() {
   return null;
 }
 async function _createLinuxExecutor() {
-  const { SandboxCapabilityProbe, isBubblewrapAvailable } = await import("./capability-probe-sh9bwh39.js");
+  const { SandboxCapabilityProbe, isBubblewrapAvailable } = await import("./capability-probe-f1paszww.js");
   await new SandboxCapabilityProbe().detect();
   if (!isBubblewrapAvailable()) {
     return null;
@@ -805,7 +806,7 @@ async function _createLinuxExecutor() {
   }
 }
 async function _createMacOSExecutor() {
-  const { SandboxCapabilityProbe, isSandboxExecAvailable } = await import("./capability-probe-sh9bwh39.js");
+  const { SandboxCapabilityProbe, isSandboxExecAvailable } = await import("./capability-probe-f1paszww.js");
   await new SandboxCapabilityProbe().detect();
   if (!isSandboxExecAvailable()) {
     return null;
@@ -818,7 +819,7 @@ async function _createMacOSExecutor() {
   }
 }
 async function _createWindowsExecutor() {
-  const { SandboxCapabilityProbe, isWindowsSandboxAvailable } = await import("./capability-probe-sh9bwh39.js");
+  const { SandboxCapabilityProbe, isWindowsSandboxAvailable } = await import("./capability-probe-f1paszww.js");
   await new SandboxCapabilityProbe().detect();
   if (!isWindowsSandboxAvailable()) {
     return null;
@@ -1543,6 +1544,8 @@ function loadDurableStatus(statusPath) {
   }
 }
 function initDurableStatusPath(projectDir) {
+  if (typeof projectDir !== "string" || projectDir.length === 0)
+    return;
   const nextPath = path5.join(projectDir, ".swarm", "worktree-merge-status.json");
   if (durableStatusPath === nextPath && hasLoaded)
     return;

package/dist/cli/{index-db1fh1fv.js → index-g40r5d08.js}

@@ -5,7 +5,7 @@ import {
 } from "./index-zgwm4ryv.js";
 import {
   atomicWriteFile
-} from "./index-0dab9w37.js";
+} from "./index-0p660a87.js";
 
 // src/hooks/knowledge-link.ts
 import {

package/dist/cli/{index-8f256d7t.js → index-g6va6n3t.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   stripKnownSwarmPrefix
-} from "./index-1ey3dxq7.js";
+} from "./index-147ja18h.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-9fxs0rm1.js → index-ga4ta3cr.js}

@@ -7,7 +7,7 @@ import {
 } from "./index-zgwm4ryv.js";
 import {
   bunSpawnSync
-} from "./index-h91bv3hy.js";
+} from "./index-qe3v54nb.js";
 import {
   __export
 } from "./index-a76rekgs.js";