opencode-swarm 7.116.0 → 7.116.1

package/dist/cli/{index-me46ffm2.js → index-7kcpkm4y.js}

@@ -93,7 +93,7 @@ import {
   saveTaskSetSnapshot,
   transientBackoff,
   validateProjectRoot
-} from "./index-cnrhj56z.js";
+} from "./index-xdsd2hma.js";
 import {
   buildOpenSpecProjectionSync,
   detectSpeckit,
@@ -111,7 +111,7 @@ import {
   listActive,
   subscribe,
   unsubscribe
-} from "./index-a6f8b0vn.js";
+} from "./index-5bcrp3bc.js";
 import {
   BUNDLED_PROJECT_SKILL_ROOT,
   DEFAULT_SKILL_MIN_CONFIDENCE,
@@ -133,7 +133,7 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-s385axt1.js";
+} from "./index-wxkf3089.js";
 import {
   appendUnactionable,
   quarantineEntry,
@@ -143,10 +143,10 @@ import {
   validateActionability,
   validateActionableFields,
   validateLesson
-} from "./index-jyetmzcn.js";
+} from "./index-t5f01hnz.js";
 import {
   readRecentEscalations
-} from "./index-8bvh0qfa.js";
+} from "./index-wegc6xwr.js";
 import {
   effectiveRetrievalOutcomes,
   readKnowledgeCounterRollups,
@@ -154,7 +154,7 @@ import {
   recordHiveKnowledgeEvent,
   recordKnowledgeEvent,
   resolveKnowledgeEventsPath
-} from "./index-3yh67t1h.js";
+} from "./index-g4p13g8t.js";
 import {
   appendKnowledge,
   appendRejectedLesson,
@@ -178,7 +178,7 @@ import {
   rewriteKnowledge,
   transactFile,
   transactKnowledge
-} from "./index-k5ey429j.js";
+} from "./index-5h7d37nf.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -192,7 +192,7 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-qgeeyy75.js";
+} from "./index-34g1mv3c.js";
 import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
@@ -209,7 +209,7 @@ import {
   readSwarmFileAsync,
   safeHook,
   validateSwarmPath
-} from "./index-wh8949ef.js";
+} from "./index-kzj3fp7c.js";
 import {
   deepMerge
 } from "./index-p0arc26j.js";
@@ -221,7 +221,7 @@ import {
 } from "./index-zgwm4ryv.js";
 import {
   atomicWriteFile
-} from "./index-bbsaxnj5.js";
+} from "./index-0pfqcjp6.js";
 import {
   exports_external
 } from "./index-293f68mj.js";
@@ -246,8 +246,8 @@ import {
 } from "./index-a76rekgs.js";
 
 // src/state.ts
-import * as fs40 from "fs/promises";
-import * as path78 from "path";
+import * as fs41 from "fs/promises";
+import * as path79 from "path";
 
 // src/db/qa-gate-profile.ts
 import { createHash } from "crypto";
@@ -9985,7 +9985,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-mz267btk.js");
+        const skillModule = await import("./skill-generator-22nk6c6a.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -10266,7 +10266,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-0bq62d34.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-tthw6c9q.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -11227,11 +11227,11 @@ var _internals14 = {
     return KnowledgeConfigSchema2.parse({});
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-7s5yw6hw.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-yxmtp8py.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig);
   },
   checkHivePromotions: async (entries, knowledgeConfig) => {
-    const { checkHivePromotions } = await import("./hive-promoter-rkkx40qv.js");
+    const { checkHivePromotions } = await import("./hive-promoter-ykqc60w1.js");
     return checkHivePromotions(entries, knowledgeConfig);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -11240,7 +11240,7 @@ var _internals14 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-mz267btk.js");
+    } = await import("./skill-generator-22nk6c6a.js");
     const result = {
       approved: [],
       rejected: [],
@@ -11282,7 +11282,7 @@ var _internals14 = {
     return result;
   },
   readPriorDriftReports: async (directory) => {
-    const { readPriorDriftReports } = await import("./curator-drift-c0by7063.js");
+    const { readPriorDriftReports } = await import("./curator-drift-7p2ky1th.js");
     return readPriorDriftReports(directory);
   },
   readSwarmKnowledge: (directory) => readKnowledge(resolveSwarmKnowledgePath(directory))
@@ -15968,8 +15968,6 @@ var ARCHIVE_ARTIFACTS = [
   "dark-matter.md",
   "telemetry.jsonl",
   "swarm.db",
-  "swarm.db-shm",
-  "swarm.db-wal",
   "close-summary.md",
   "session-reflection.md",
   "spec.md",
@@ -15994,9 +15992,7 @@ var ACTIVE_STATE_TO_CLEAN = [
   "spec.md",
   "spec-staleness.json",
   "spec-snapshot.md",
-  "swarm.db",
-  "swarm.db-shm",
-  "swarm.db-wal"
+  "swarm.db"
 ];
 var TERMINAL_STATE_FILES = [
   "plan.json",
@@ -16381,15 +16377,11 @@ async function runArchiveStage(ctx) {
   ctx.archiveDir = path31.join(ctx.swarmDir, "archive", `swarm-${ctx.timestamp}-${ctx.archiveSuffix}`);
   try {
     await fs12.mkdir(ctx.archiveDir, { recursive: true });
-    const WAL_SIDECAR_FILES = new Set(["swarm.db-shm", "swarm.db-wal"]);
     const linkedKnowledgeShared = isLinked(ctx.directory);
     if (linkedKnowledgeShared) {
       ctx.warnings.push("Worktree is linked: shared knowledge (knowledge.jsonl, knowledge-rejected.jsonl) lives in the link store and is not archived or cleaned by /swarm close. Manage it via the link.");
     }
     for (const artifact of ARCHIVE_ARTIFACTS) {
-      if (WAL_SIDECAR_FILES.has(artifact)) {
-        continue;
-      }
       if (linkedKnowledgeShared && KNOWLEDGE_FAMILY_ARTIFACTS.has(artifact)) {
         continue;
       }
@@ -16732,6 +16724,56 @@ async function runAlignStage(ctx) {
   }
   return { gitAlignResult, prunedBranches };
 }
+async function runFinalizeDryRun(directory, swarmDir, planData, planExists) {
+  const existsInSwarm = (name) => fsSync.existsSync(path31.join(swarmDir, name));
+  const phases = planData.phases ?? [];
+  const nonTerminalPhases = phases.filter((p) => p.status !== "complete" && p.status !== "completed" && p.status !== "blocked" && p.status !== "closed");
+  const planAlreadyDone = planExists && phases.length > 0 && nonTerminalPhases.length === 0;
+  const wouldArchive = ARCHIVE_ARTIFACTS.filter(existsInSwarm);
+  const dynamicArchive = (await fs12.readdir(swarmDir).catch(() => [])).filter((name) => /^post-mortem-[^/\\]+\.md$/.test(name) || /^drift-report-phase-\d+\.json$/.test(name));
+  const wouldArchiveDirs = ACTIVE_STATE_DIRS_TO_CLEAN.filter(existsInSwarm);
+  const wouldRemoveTerminal = TERMINAL_STATE_FILES.filter(existsInSwarm);
+  const wouldCleanFiles = ACTIVE_STATE_TO_CLEAN.filter((f) => existsInSwarm(f) && !TERMINAL_STATE_FILES.includes(f));
+  const gitStatus = _internals22.getGitRepositoryStatus(directory);
+  const gitNote = gitStatus.isRepo ? "would align the working tree to main/remote (git reset), pruning merged branches only with --prune-branches" : "would skip git alignment (not a git repository / git unavailable)";
+  const lines = [
+    "## /swarm finalize \u2014 DRY RUN (no changes made)",
+    "",
+    "No lock is taken, no files are archived or deleted, no git command runs.",
+    "",
+    "### Plan",
+    planExists ? planAlreadyDone ? "- Plan is already terminal \u2014 no phases/tasks would be force-closed." : nonTerminalPhases.length > 0 ? `- Would mark ${nonTerminalPhases.length} non-terminal phase(s) as closed: ${nonTerminalPhases.map((p) => `#${p.id} ${p.name}`).join(", ")}` : "- No phases present; nothing to close." : "- No plan.json \u2014 plan-free session; cleanup-only.",
+    "",
+    "### Would archive",
+    wouldArchive.length > 0 || dynamicArchive.length > 0 || wouldArchiveDirs.length > 0 ? [
+      ...wouldArchive.map((f) => `- ${f}`),
+      ...dynamicArchive.map((f) => `- ${f}`),
+      ...wouldArchiveDirs.map((d) => `- ${d}/`)
+    ].join(`
+`) : "- (nothing present to archive)",
+    "",
+    "### Would clean (removed after successful archive)",
+    wouldCleanFiles.length > 0 || wouldArchiveDirs.length > 0 ? [
+      ...wouldCleanFiles.map((f) => `- ${f}`),
+      ...wouldArchiveDirs.map((d) => `- ${d}/`)
+    ].join(`
+`) : "- (nothing present to clean)",
+    ...wouldRemoveTerminal.length > 0 ? [
+      "",
+      "### Would remove unconditionally (terminal plan-state)",
+      ...wouldRemoveTerminal.map((f) => `- ${f}`)
+    ] : [],
+    "",
+    "### Git",
+    `- ${gitNote}`,
+    "",
+    "_Note: swarm.db-shm / swarm.db-wal are transient SQLite sidecars \u2014 they are never archived or cleaned. The clean list is an approximation of the archive-first guard._",
+    "",
+    "Run `/swarm finalize` (without `--dry-run`) to apply."
+  ];
+  return lines.join(`
+`);
+}
 async function handleCloseCommand(directory, args, options = {}) {
   const swarmDir = path31.join(directory, ".swarm");
   try {
@@ -16763,6 +16805,9 @@ async function handleCloseCommand(directory, args, options = {}) {
       return `\u274C No .swarm/ directory found in ${directory}. Run /swarm close from the project root, or run /swarm plan first.`;
     }
   }
+  if (args.includes("--dry-run")) {
+    return _internals22.runFinalizeDryRun(directory, swarmDir, planData, planExists);
+  }
   let finalizeLock = {
     acquired: false
   };
@@ -16920,11 +16965,17 @@ This project was already finalized in a previous /swarm close run. The plan has
       ctx.warnings.push(`Failed to write close-summary.md: ${msg}`);
       console.warn("[close-command] Failed to write close-summary.md:", error2);
     }
-    const sessionIdsToEnd = [...swarmState.agentSessions.keys()];
-    for (const sessionId of sessionIdsToEnd) {
-      _internals22.endAgentSession(sessionId);
+    try {
+      const sessionIdsToEnd = [...swarmState.agentSessions.keys()];
+      for (const sessionId of sessionIdsToEnd) {
+        _internals22.endAgentSession(sessionId);
+      }
+      _internals22.resetSwarmStatePreservingSingletons();
+    } catch (teardownError) {
+      const msg = teardownError instanceof Error ? teardownError.message : String(teardownError);
+      ctx.warnings.push(`Session teardown encountered an error after finalization completed (state may not be fully reset): ${msg}`);
+      console.warn("[close-command] teardown error:", teardownError);
     }
-    _internals22.resetSwarmStatePreservingSingletons();
     const retroWarnings = ctx.warnings.filter((w) => w.includes("Retrospective write") || w.includes("retrospective write") || w.includes("Session retrospective"));
     const otherWarnings = ctx.warnings.filter((w) => !w.includes("Retrospective write") && !w.includes("retrospective write") && !w.includes("Session retrospective"));
     let warningMsg = "";
@@ -17016,6 +17067,7 @@ var _internals22 = {
   runArchiveEvidenceRetention,
   runCleanStage,
   runAlignStage,
+  runFinalizeDryRun,
   archiveEvidence,
   closePlanTerminalState,
   endAgentSession,
@@ -18373,8 +18425,8 @@ var _internals26 = {
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
       import("./schema-bqn7g3ez.js"),
-      import("./curator-7s5yw6hw.js"),
-      import("./curator-llm-factory-x96dr0zf.js")
+      import("./curator-yxmtp8py.js"),
+      import("./curator-llm-factory-9qn52fnv.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -18870,7 +18922,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "opencode-swarm",
-  version: "7.116.0",
+  version: "7.116.1",
   description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -21153,7 +21205,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-ef6kgtev.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-bwt6drb3.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -34482,8 +34534,8 @@ async function handleQaGatesCommand(directory, args, sessionID) {
 }
 
 // src/commands/reset.ts
-import * as fs33 from "fs";
-import * as path66 from "path";
+import * as fs34 from "fs";
+import * as path67 from "path";
 
 // src/background/circuit-breaker.ts
 class CircuitBreaker {
@@ -35175,7 +35227,85 @@ function resetAutomationManager() {
   }
 }
 
+// src/commands/reset-backup.ts
+import * as fs33 from "fs";
+import * as path66 from "path";
+var RESET_BACKUP_RETENTION = 5;
+function backupSwarmStateBeforeReset(directory, kind, relEntries) {
+  const warnings = [];
+  const copied = [];
+  const swarmDir = path66.join(directory, ".swarm");
+  try {
+    const stat4 = fs33.lstatSync(swarmDir);
+    if (stat4.isSymbolicLink() || !stat4.isDirectory()) {
+      return { backupDir: null, copied, warnings };
+    }
+  } catch {
+    return { backupDir: null, copied, warnings };
+  }
+  const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
+  const backupsRoot = path66.join(swarmDir, "reset-backups");
+  const backupDir = path66.join(backupsRoot, `${kind}-${timestamp}`);
+  let backupDirCreated = false;
+  const ensureBackupDir = () => {
+    if (!backupDirCreated) {
+      fs33.mkdirSync(backupDir, { recursive: true });
+      backupDirCreated = true;
+    }
+  };
+  for (const rel of relEntries) {
+    let src;
+    try {
+      src = validateSwarmPath(directory, rel);
+    } catch {
+      warnings.push(`skipped backup of ${rel} (path validation failed)`);
+      continue;
+    }
+    if (!fs33.existsSync(src))
+      continue;
+    try {
+      ensureBackupDir();
+      const dest = path66.join(backupDir, rel);
+      fs33.mkdirSync(path66.dirname(dest), { recursive: true });
+      fs33.cpSync(src, dest, { recursive: true });
+      copied.push(rel);
+    } catch (err) {
+      warnings.push(`failed to back up ${rel}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  if (copied.length === 0) {
+    if (backupDirCreated) {
+      try {
+        fs33.rmSync(backupDir, { recursive: true, force: true });
+      } catch {}
+    }
+    return { backupDir: null, copied, warnings };
+  }
+  pruneOldResetBackups(backupsRoot, warnings);
+  return { backupDir, copied, warnings };
+}
+function pruneOldResetBackups(backupsRoot, warnings) {
+  try {
+    const entries = fs33.readdirSync(backupsRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort().reverse();
+    for (const stale of entries.slice(RESET_BACKUP_RETENTION)) {
+      try {
+        fs33.rmSync(path66.join(backupsRoot, stale), {
+          recursive: true,
+          force: true
+        });
+      } catch (err) {
+        warnings.push(`failed to prune old backup ${stale}: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+  } catch (err) {
+    warnings.push(`failed to prune old reset backups: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+
 // src/commands/reset.ts
+var _internals52 = {
+  backupSwarmStateBeforeReset
+};
 async function handleResetCommand(directory, args) {
   const hasConfirm = args.includes("--confirm");
   if (!hasConfirm) {
@@ -35184,7 +35314,7 @@ async function handleResetCommand(directory, args) {
       "",
       "\u26A0\uFE0F This will delete all swarm state from .swarm/ (plan, context, checkpoints, SWARM_PLAN artifacts including .swarm/plan-export/)",
       "",
-      "**Tip**: Run `/swarm export` first to backup your state.",
+      "A timestamped backup of the deleted state is saved to `.swarm/reset-backups/` automatically (restore by copying files back). Run `/swarm export` first if you also want a portable JSON snapshot.",
       "",
       "To confirm, run: `/swarm reset --confirm`"
     ].join(`
@@ -35206,11 +35336,26 @@ async function handleResetCommand(directory, args) {
     "events.jsonl"
   ];
   const results = [];
+  try {
+    const backup = _internals52.backupSwarmStateBeforeReset(directory, "reset", [
+      ...filesToReset,
+      "summaries"
+    ]);
+    if (backup.backupDir && backup.copied.length > 0) {
+      const rel = path67.relative(directory, backup.backupDir);
+      results.push(`- \uD83D\uDCE6 Backed up ${backup.copied.length} item(s) to ${rel}/ (restore by copying files back into .swarm/)`);
+    }
+    for (const w of backup.warnings) {
+      results.push(`- \u26A0\uFE0F Backup warning: ${w}`);
+    }
+  } catch (err) {
+    results.push(`- \u26A0\uFE0F Auto-backup failed (continuing with reset): ${err instanceof Error ? err.message : String(err)}`);
+  }
   for (const filename of filesToReset) {
     try {
       const resolvedPath = validateSwarmPath(directory, filename);
-      if (fs33.existsSync(resolvedPath)) {
-        fs33.unlinkSync(resolvedPath);
+      if (fs34.existsSync(resolvedPath)) {
+        fs34.unlinkSync(resolvedPath);
         results.push(`- \u2705 Deleted ${filename}`);
       } else {
         results.push(`- \u23ED\uFE0F ${filename} not found (skipped)`);
@@ -35221,9 +35366,9 @@ async function handleResetCommand(directory, args) {
   }
   for (const filename of ["SWARM_PLAN.md", "SWARM_PLAN.json"]) {
     try {
-      const rootPath = path66.join(directory, filename);
-      if (fs33.existsSync(rootPath)) {
-        fs33.unlinkSync(rootPath);
+      const rootPath = path67.join(directory, filename);
+      if (fs34.existsSync(rootPath)) {
+        fs34.unlinkSync(rootPath);
         results.push(`- \u2705 Deleted ${filename} (root)`);
       }
     } catch (err) {
@@ -35238,8 +35383,8 @@ async function handleResetCommand(directory, args) {
   }
   try {
     const summariesPath = validateSwarmPath(directory, "summaries");
-    if (fs33.existsSync(summariesPath)) {
-      fs33.rmSync(summariesPath, { recursive: true, force: true });
+    if (fs34.existsSync(summariesPath)) {
+      fs34.rmSync(summariesPath, { recursive: true, force: true });
       results.push("- \u2705 Deleted summaries/ directory");
     } else {
       results.push("- \u23ED\uFE0F summaries/ not found (skipped)");
@@ -35258,16 +35403,16 @@ async function handleResetCommand(directory, args) {
 }
 
 // src/commands/reset-session.ts
-import * as fs36 from "fs";
-import * as path69 from "path";
+import * as fs37 from "fs";
+import * as path70 from "path";
 
 // src/prm/trajectory-store.ts
-import * as fs34 from "fs/promises";
-import * as path67 from "path";
+import * as fs35 from "fs/promises";
+import * as path68 from "path";
 init_logger();
 var MAX_TRACKED_TRAJECTORY_SESSIONS = 500;
 function getTrajectoryPath(sessionId, directory) {
-  const relativePath2 = path67.join("trajectories", `${sessionId}.jsonl`);
+  const relativePath2 = path68.join("trajectories", `${sessionId}.jsonl`);
   return validateSwarmPath(directory, relativePath2);
 }
 var _inMemoryTrajectoryCache = new Map;
@@ -35297,7 +35442,7 @@ function clearTrajectoryCache(sessionId) {
 async function readTrajectory(sessionId, directory) {
   try {
     const trajectoryPath = getTrajectoryPath(sessionId, directory);
-    const content = await fs34.readFile(trajectoryPath, "utf-8");
+    const content = await fs35.readFile(trajectoryPath, "utf-8");
     const lines = content.split(`
 `).filter((line) => line.trim().length > 0);
     const entries = [];
@@ -35322,15 +35467,15 @@ async function cleanupOldTrajectoryFiles(directory, maxAgeDays = 7) {
   for (const subdir of ["trajectories", "replays"]) {
     try {
       const dirPath = validateSwarmPath(directory, subdir);
-      const entries = await fs34.readdir(dirPath, { withFileTypes: true });
+      const entries = await fs35.readdir(dirPath, { withFileTypes: true });
       for (const entry of entries) {
         if (!entry.isFile())
           continue;
-        const filePath = path67.join(dirPath, entry.name);
+        const filePath = path68.join(dirPath, entry.name);
         try {
-          const stat5 = await fs34.stat(filePath);
+          const stat5 = await fs35.stat(filePath);
           if (now - stat5.mtimeMs > cutoffMs) {
-            await fs34.unlink(filePath);
+            await fs35.unlink(filePath);
           }
         } catch {}
       }
@@ -35755,18 +35900,18 @@ function detectPatterns(trajectory, config, lastProcessedStep = 0) {
 init_logger();
 
 // src/prm/replay.ts
-import { promises as fs35 } from "fs";
-import path68 from "path";
+import { promises as fs36 } from "fs";
+import path69 from "path";
 init_logger();
 function isPathSafe(targetPath, basePath) {
-  const resolvedTarget = path68.resolve(targetPath);
-  const resolvedBase = path68.resolve(basePath);
-  const rel = path68.relative(resolvedBase, resolvedTarget);
-  return !rel.startsWith("..") && !path68.isAbsolute(rel);
+  const resolvedTarget = path69.resolve(targetPath);
+  const resolvedBase = path69.resolve(basePath);
+  const rel = path69.relative(resolvedBase, resolvedTarget);
+  return !rel.startsWith("..") && !path69.isAbsolute(rel);
 }
 function isWithinReplaysDir(targetPath) {
-  const resolved = path68.resolve(targetPath);
-  const parts = resolved.split(path68.sep);
+  const resolved = path69.resolve(targetPath);
+  const parts = resolved.split(path69.sep);
   for (let i = 0;i < parts.length - 1; i++) {
     if (parts[i] === ".swarm" && parts[i + 1] === "replays") {
       return true;
@@ -35779,15 +35924,15 @@ function sanitizeFilename(input) {
 }
 async function startReplayRecording(sessionID, directory) {
   try {
-    const replayDir = path68.join(directory, ".swarm", "replays");
+    const replayDir = path69.join(directory, ".swarm", "replays");
     const safeSessionID = sanitizeFilename(sessionID);
     const filename = `${safeSessionID}-${Date.now()}.jsonl`;
-    const filepath = path68.join(replayDir, filename);
+    const filepath = path69.join(replayDir, filename);
     if (!isPathSafe(filepath, replayDir)) {
       advisoryWarn(`[replay] Invalid path detected - path traversal attempt blocked for session ${sessionID}`);
       return null;
     }
-    await fs35.mkdir(replayDir, { recursive: true });
+    await fs36.mkdir(replayDir, { recursive: true });
     return filepath;
   } catch (err) {
     log(`[replay] Failed to start recording for session ${sessionID}: ${err}`);
@@ -35807,14 +35952,14 @@ async function recordReplayEntry(artifactPath, sessionID, entry) {
     };
     const line = `${JSON.stringify(fullEntry)}
 `;
-    await fs35.appendFile(artifactPath, line, "utf-8");
+    await fs36.appendFile(artifactPath, line, "utf-8");
   } catch (err) {
     log(`[replay] Failed to record entry: ${err}`);
   }
 }
 
 // src/prm/index.ts
-var _internals52 = {
+var _internals53 = {
   getAgentSession,
   readTrajectory,
   getInMemoryTrajectory,
@@ -35837,13 +35982,14 @@ function resetPrmSessionState(session, sessionId) {
   session.prmTrajectoryStep = 0;
   session.replayArtifactPath = null;
   if (sessionId) {
-    _internals52.clearTrajectoryCache(sessionId);
+    _internals53.clearTrajectoryCache(sessionId);
   }
 }
 
 // src/commands/reset-session.ts
-var _internals53 = {
-  cleanupOrphanedBranches
+var _internals54 = {
+  cleanupOrphanedBranches,
+  backupSwarmStateBeforeReset
 };
 function errorMessage(err) {
   if (err instanceof Error)
@@ -35852,11 +35998,23 @@ function errorMessage(err) {
 }
 async function handleResetSessionCommand(directory, _args) {
   const results = [];
+  try {
+    const backup = _internals54.backupSwarmStateBeforeReset(directory, "reset-session", ["session"]);
+    if (backup.backupDir && backup.copied.length > 0) {
+      const rel = path70.relative(directory, backup.backupDir);
+      results.push(`\uD83D\uDCE6 Backed up session state to ${rel}/ (restore by copying files back into .swarm/session/)`);
+    }
+    for (const w of backup.warnings) {
+      results.push(`\u26A0\uFE0F Backup warning: ${w}`);
+    }
+  } catch (err) {
+    results.push(`\u26A0\uFE0F Auto-backup failed (continuing with reset): ${err instanceof Error ? err.message : String(err)}`);
+  }
   let statePath;
   try {
     statePath = validateSwarmPath(directory, "session/state.json");
-    if (fs36.existsSync(statePath)) {
-      fs36.unlinkSync(statePath);
+    if (fs37.existsSync(statePath)) {
+      fs37.unlinkSync(statePath);
       results.push("\u2705 Deleted .swarm/session/state.json");
     } else {
       results.push("\u23ED\uFE0F state.json not found (already clean)");
@@ -35864,11 +36022,11 @@ async function handleResetSessionCommand(directory, _args) {
   } catch {
     results.push("\u274C Failed to delete state.json");
   }
-  const sessionDir = statePath ? path69.dirname(statePath) : undefined;
+  const sessionDir = statePath ? path70.dirname(statePath) : undefined;
   let sessionFiles = [];
-  if (sessionDir && fs36.existsSync(sessionDir)) {
+  if (sessionDir && fs37.existsSync(sessionDir)) {
     try {
-      sessionFiles = fs36.readdirSync(sessionDir);
+      sessionFiles = fs37.readdirSync(sessionDir);
     } catch (err) {
       results.push(`\u274C Failed to read session directory: ${errorMessage(err)}`);
     }
@@ -35876,13 +36034,13 @@ async function handleResetSessionCommand(directory, _args) {
   for (const file of sessionFiles) {
     if (file === "state.json")
       continue;
-    const filePath = path69.join(sessionDir, file);
+    const filePath = path70.join(sessionDir, file);
     try {
-      if (!fs36.existsSync(filePath))
+      if (!fs37.existsSync(filePath))
         continue;
-      if (!fs36.lstatSync(filePath).isFile())
+      if (!fs37.lstatSync(filePath).isFile())
         continue;
-      fs36.unlinkSync(filePath);
+      fs37.unlinkSync(filePath);
       results.push(`\u2713 Deleted ${file}`);
     } catch (err) {
       results.push(`\u274C Failed to delete ${file}: ${errorMessage(err)}`);
@@ -35898,17 +36056,17 @@ async function handleResetSessionCommand(directory, _args) {
   const chainCount = swarmState.delegationChains.size;
   swarmState.delegationChains.clear();
   results.push(`\u2705 Cleared ${chainCount} delegation chain(s)`);
-  const worktreesDir = path69.resolve(path69.dirname(directory), ".swarm-worktrees");
+  const worktreesDir = path70.resolve(path70.dirname(directory), ".swarm-worktrees");
   try {
-    if (fs36.existsSync(worktreesDir)) {
-      fs36.rmSync(worktreesDir, { recursive: true, force: true });
+    if (fs37.existsSync(worktreesDir)) {
+      fs37.rmSync(worktreesDir, { recursive: true, force: true });
       results.push("\u2705 Removed .swarm-worktrees/ directory");
     }
   } catch (err) {
     results.push(`\u26A0\uFE0F Failed to remove .swarm-worktrees/: ${errorMessage(err)}`);
   }
   try {
-    const branchResult = await _internals53.cleanupOrphanedBranches(directory, []);
+    const branchResult = await _internals54.cleanupOrphanedBranches(directory, []);
     if (branchResult.removed.length > 0) {
       results.push(`\u2705 Removed ${branchResult.removed.length} orphan swarm-lane branch(es)`);
     }
@@ -35931,7 +36089,7 @@ async function handleResetSessionCommand(directory, _args) {
 }
 
 // src/summaries/manager.ts
-import * as path70 from "path";
+import * as path71 from "path";
 var SUMMARY_ID_REGEX = /^S\d+$/;
 function sanitizeSummaryId(id) {
   if (!id || id.length === 0) {
@@ -35955,7 +36113,7 @@ function sanitizeSummaryId(id) {
 }
 async function loadFullOutput(directory, id) {
   const sanitizedId = sanitizeSummaryId(id);
-  const relativePath2 = path70.join("summaries", `${sanitizedId}.json`);
+  const relativePath2 = path71.join("summaries", `${sanitizedId}.json`);
   validateSwarmPath(directory, relativePath2);
   const content = await readSwarmFileAsync(directory, relativePath2);
   if (content === null) {
@@ -36007,8 +36165,8 @@ ${error2 instanceof Error ? error2.message : String(error2)}`;
 }
 
 // src/commands/rollback.ts
-import * as fs37 from "fs";
-import * as path71 from "path";
+import * as fs38 from "fs";
+import * as path72 from "path";
 function safeParseToolJson(result) {
   try {
     const jsonStr = typeof result === "string" ? result : result.output;
@@ -36071,7 +36229,7 @@ async function restoreGitCheckpoint(directory, selected) {
     source: "checkpoints.json"
   };
   try {
-    fs37.appendFileSync(eventsPath, `${JSON.stringify(rollbackEvent)}
+    fs38.appendFileSync(eventsPath, `${JSON.stringify(rollbackEvent)}
 `);
   } catch (error2) {
     console.error("Failed to write rollback event:", error2 instanceof Error ? error2.message : String(error2));
@@ -36082,7 +36240,7 @@ async function handleRollbackCommand(directory, args) {
   const phaseArg = args[0];
   if (!phaseArg) {
     const manifestPath2 = validateSwarmPath(directory, "checkpoints/manifest.json");
-    if (!fs37.existsSync(manifestPath2)) {
+    if (!fs38.existsSync(manifestPath2)) {
       const gitCheckpoints = await listGitCheckpoints(directory);
       if (gitCheckpoints) {
         return formatGitCheckpointList(gitCheckpoints);
@@ -36091,7 +36249,7 @@ async function handleRollbackCommand(directory, args) {
     }
     let manifest2;
     try {
-      manifest2 = JSON.parse(fs37.readFileSync(manifestPath2, "utf-8"));
+      manifest2 = JSON.parse(fs38.readFileSync(manifestPath2, "utf-8"));
     } catch {
       return "Error: Checkpoint manifest is corrupted. Delete .swarm/checkpoints/manifest.json and re-checkpoint.";
     }
@@ -36121,7 +36279,7 @@ async function handleRollbackCommand(directory, args) {
     return restoreGitCheckpoint(directory, selected);
   }
   const manifestPath = validateSwarmPath(directory, "checkpoints/manifest.json");
-  if (!fs37.existsSync(manifestPath)) {
+  if (!fs38.existsSync(manifestPath)) {
     const gitCheckpoints = await listGitCheckpoints(directory);
     if (!gitCheckpoints) {
       return `Error: No checkpoints found. Cannot rollback to phase ${targetPhase}.`;
@@ -36134,7 +36292,7 @@ async function handleRollbackCommand(directory, args) {
   }
   let manifest;
   try {
-    manifest = JSON.parse(fs37.readFileSync(manifestPath, "utf-8"));
+    manifest = JSON.parse(fs38.readFileSync(manifestPath, "utf-8"));
   } catch {
     return `Error: Checkpoint manifest is corrupted. Delete .swarm/checkpoints/manifest.json and re-checkpoint.`;
   }
@@ -36144,10 +36302,10 @@ async function handleRollbackCommand(directory, args) {
     return `Error: Checkpoint for phase ${targetPhase} not found. Available phases: ${available}`;
   }
   const checkpointDir = validateSwarmPath(directory, `checkpoints/phase-${targetPhase}`);
-  if (!fs37.existsSync(checkpointDir)) {
+  if (!fs38.existsSync(checkpointDir)) {
     return `Error: Checkpoint directory for phase ${targetPhase} does not exist.`;
   }
-  const checkpointFiles = fs37.readdirSync(checkpointDir);
+  const checkpointFiles = fs38.readdirSync(checkpointDir);
   if (checkpointFiles.length === 0) {
     return `Error: Checkpoint for phase ${targetPhase} is empty. Cannot rollback.`;
   }
@@ -36163,10 +36321,10 @@ async function handleRollbackCommand(directory, args) {
     if (EXCLUDE_FILES.has(file) || file.startsWith("plan-ledger.archived-")) {
       continue;
     }
-    const src = path71.join(checkpointDir, file);
-    const dest = path71.join(swarmDir, file);
+    const src = path72.join(checkpointDir, file);
+    const dest = path72.join(swarmDir, file);
     try {
-      fs37.cpSync(src, dest, { recursive: true, force: true });
+      fs38.cpSync(src, dest, { recursive: true, force: true });
       successes.push(file);
     } catch (error2) {
       failures.push({ file, error: error2.message });
@@ -36183,11 +36341,11 @@ async function handleRollbackCommand(directory, args) {
     ].join(`
 `);
   }
-  const existingLedgerPath = path71.join(swarmDir, "plan-ledger.jsonl");
+  const existingLedgerPath = path72.join(swarmDir, "plan-ledger.jsonl");
   let ledgerDeletionFailed = false;
-  if (fs37.existsSync(existingLedgerPath)) {
+  if (fs38.existsSync(existingLedgerPath)) {
     try {
-      fs37.unlinkSync(existingLedgerPath);
+      fs38.unlinkSync(existingLedgerPath);
     } catch (err) {
       ledgerDeletionFailed = true;
       const errMsg = err instanceof Error ? err.message : String(err);
@@ -36196,9 +36354,9 @@ async function handleRollbackCommand(directory, args) {
   }
   if (!ledgerDeletionFailed) {
     try {
-      const planJsonPath = path71.join(swarmDir, "plan.json");
-      if (fs37.existsSync(planJsonPath)) {
-        const planRaw = fs37.readFileSync(planJsonPath, "utf-8");
+      const planJsonPath = path72.join(swarmDir, "plan.json");
+      if (fs38.existsSync(planJsonPath)) {
+        const planRaw = fs38.readFileSync(planJsonPath, "utf-8");
         const plan = PlanSchema.parse(JSON.parse(planRaw));
         const planId = derivePlanId(plan);
         const planHash = computePlanHash(plan);
@@ -36226,7 +36384,7 @@ async function handleRollbackCommand(directory, args) {
     timestamp: new Date().toISOString()
   };
   try {
-    fs37.appendFileSync(eventsPath, `${JSON.stringify(rollbackEvent)}
+    fs38.appendFileSync(eventsPath, `${JSON.stringify(rollbackEvent)}
 `);
   } catch (error2) {
     console.error("Failed to write rollback event:", error2 instanceof Error ? error2.message : String(error2));
@@ -36243,12 +36401,12 @@ async function handleRollbackCommand(directory, args) {
 }
 
 // src/commands/sdd.ts
-import * as fs38 from "fs";
-import * as path72 from "path";
-var _internals54 = {
+import * as fs39 from "fs";
+import * as path73 from "path";
+var _internals55 = {
   writeProjectedSpecSync
 };
-var SWARM_SPEC_REL = path72.join(".swarm", "spec.md");
+var SWARM_SPEC_REL = path73.join(".swarm", "spec.md");
 var USAGE10 = `Usage:
   /swarm sdd status [--json] [--source <provider>]
   /swarm sdd validate [--json] [--change <id>] [--source <provider>] [--feature <id>]
@@ -36370,7 +36528,7 @@ ${USAGE10}`;
   }
   const speckitDetection = detectSpeckit(directory);
   const speckitPresent = speckitDetection.features.length > 0;
-  const nativeSpecExists = fs38.existsSync(path72.join(directory, SWARM_SPEC_REL));
+  const nativeSpecExists = fs39.existsSync(path73.join(directory, SWARM_SPEC_REL));
   if (speckitPresent && !parsed.source && !nativeSpecExists) {
     const openspecProjection = buildOpenSpecProjectionSync(directory);
     if (openspecProjection !== null) {
@@ -36440,7 +36598,7 @@ ${USAGE10}`;
 ${USAGE10}`;
   }
   let useSpeckit = false;
-  const nativeSpecExists = fs38.existsSync(path72.join(directory, SWARM_SPEC_REL));
+  const nativeSpecExists = fs39.existsSync(path73.join(directory, SWARM_SPEC_REL));
   if (parsed.source === "speckit") {
     useSpeckit = true;
   } else if (!parsed.source && !nativeSpecExists) {
@@ -36594,8 +36752,8 @@ ${USAGE10}`;
 ${USAGE10}`;
   }
   if (!parsed.dryRun) {
-    const nativeSpecPath = path72.join(directory, SWARM_SPEC_REL);
-    if (fs38.existsSync(nativeSpecPath)) {
+    const nativeSpecPath = path73.join(directory, SWARM_SPEC_REL);
+    if (fs39.existsSync(nativeSpecPath)) {
       if (!parsed.overwrite) {
         return [
           "Error: .swarm/spec.md already exists.",
@@ -36641,7 +36799,7 @@ ${USAGE10}`;
 
 ${USAGE10}`;
     }
-    const result2 = _internals54.writeProjectedSpecSync(directory, {
+    const result2 = _internals55.writeProjectedSpecSync(directory, {
       source: "speckit",
       feature: resolution.feature,
       dryRun: parsed.dryRun,
@@ -36699,7 +36857,7 @@ ${formatList(result2.projection.warnings)}` : ""
     ].join(`
 `);
   }
-  const result = _internals54.writeProjectedSpecSync(directory, {
+  const result = _internals55.writeProjectedSpecSync(directory, {
     changeId: parsed.changeId,
     dryRun: parsed.dryRun,
     overwrite: parsed.overwrite
@@ -36809,13 +36967,13 @@ Ensure this is a git repository with commit history.`;
   const report = reportLines.filter(Boolean).join(`
 `);
   try {
-    const fs39 = await import("fs/promises");
-    const path73 = await import("path");
-    const reportPath = path73.join(directory, ".swarm", "simulate-report.md");
-    await fs39.mkdir(path73.dirname(reportPath), { recursive: true });
-    const reportTempPath = path73.join(path73.dirname(reportPath), `${path73.basename(reportPath)}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`);
+    const fs40 = await import("fs/promises");
+    const path74 = await import("path");
+    const reportPath = path74.join(directory, ".swarm", "simulate-report.md");
+    await fs40.mkdir(path74.dirname(reportPath), { recursive: true });
+    const reportTempPath = path74.join(path74.dirname(reportPath), `${path74.basename(reportPath)}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`);
     try {
-      await fs39.writeFile(reportTempPath, report, "utf-8");
+      await fs40.writeFile(reportTempPath, report, "utf-8");
       renameSync11(reportTempPath, reportPath);
     } catch (err) {
       try {
@@ -36842,7 +37000,7 @@ async function handleSpecifyCommand(_directory, args) {
 // src/services/status-service.ts
 import * as fsSync2 from "fs";
 import { readFile as readFile17 } from "fs/promises";
-import * as path74 from "path";
+import * as path75 from "path";
 
 // src/hooks/extractors.ts
 function extractCurrentPhase(planContent) {
@@ -36886,16 +37044,16 @@ function extractCurrentPhaseFromPlan2(plan) {
 
 // src/turbo/lean/state.ts
 init_logger();
-import * as fs39 from "fs";
-import * as path73 from "path";
+import * as fs40 from "fs";
+import * as path74 from "path";
 var STATE_FILE3 = "turbo-state.json";
 function nowISO3() {
   return new Date().toISOString();
 }
 function ensureSwarmDir2(directory) {
-  const swarmDir = path73.resolve(directory, ".swarm");
-  if (!fs39.existsSync(swarmDir)) {
-    fs39.mkdirSync(swarmDir, { recursive: true });
+  const swarmDir = path74.resolve(directory, ".swarm");
+  if (!fs40.existsSync(swarmDir)) {
+    fs40.mkdirSync(swarmDir, { recursive: true });
   }
   return swarmDir;
 }
@@ -36938,17 +37096,17 @@ function markStateUnreadable2(directory, reason) {
 }
 function readPersisted2(directory) {
   try {
-    const filePath = path73.join(directory, ".swarm", STATE_FILE3);
-    if (!fs39.existsSync(filePath)) {
+    const filePath = path74.join(directory, ".swarm", STATE_FILE3);
+    if (!fs40.existsSync(filePath)) {
       const seed = emptyPersisted2();
       try {
         ensureSwarmDir2(directory);
-        fs39.writeFileSync(filePath, `${JSON.stringify(seed, null, 2)}
+        fs40.writeFileSync(filePath, `${JSON.stringify(seed, null, 2)}
 `, "utf-8");
       } catch {}
       return seed;
     }
-    const raw = fs39.readFileSync(filePath, "utf-8");
+    const raw = fs40.readFileSync(filePath, "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed) || parsed.version !== 1 || !parsed.sessions || typeof parsed.sessions !== "object" || Array.isArray(parsed.sessions)) {
       markStateUnreadable2(directory, `malformed shape (version=${parsed?.version}, sessions type=${Array.isArray(parsed?.sessions) ? "array" : typeof parsed?.sessions})`);
@@ -36974,7 +37132,7 @@ function writePersisted2(directory, persisted) {
   let payload;
   try {
     ensureSwarmDir2(directory);
-    filePath = path73.join(directory, ".swarm", STATE_FILE3);
+    filePath = path74.join(directory, ".swarm", STATE_FILE3);
     tmpPath = `${filePath}.tmp.${Date.now()}`;
     persisted.updatedAt = nowISO3();
     payload = `${JSON.stringify(persisted, null, 2)}
@@ -36985,14 +37143,14 @@ function writePersisted2(directory, persisted) {
     throw new Error(`Lean Turbo state persistence prepare failed: ${msg}`);
   }
   try {
-    fs39.writeFileSync(tmpPath, payload, "utf-8");
-    fs39.renameSync(tmpPath, filePath);
+    fs40.writeFileSync(tmpPath, payload, "utf-8");
+    fs40.renameSync(tmpPath, filePath);
   } catch (error2) {
     const msg = error2 instanceof Error ? error2.message : String(error2);
     error(`[turbo/lean/state] Failed to persist ${STATE_FILE3} atomically: ${msg}`);
     try {
-      if (fs39.existsSync(tmpPath)) {
-        fs39.unlinkSync(tmpPath);
+      if (fs40.existsSync(tmpPath)) {
+        fs40.unlinkSync(tmpPath);
       }
     } catch {}
     throw new Error(`Lean Turbo state persistence failed: ${msg}`);
@@ -37086,7 +37244,7 @@ var DEFAULT_CONTEXT_BUDGET_CONFIG = {
 };
 
 // src/services/status-service.ts
-var _internals55 = {
+var _internals56 = {
   loadLeanTurboRunState,
   hasActiveLeanTurbo,
   hasActiveFullAuto,
@@ -37095,7 +37253,7 @@ var _internals55 = {
 };
 function readSpecStalenessSnapshot(directory) {
   try {
-    const p = path74.join(directory, ".swarm", "spec-staleness.json");
+    const p = path75.join(directory, ".swarm", "spec-staleness.json");
     if (!fsSync2.existsSync(p))
       return { stale: false };
     const raw = fsSync2.readFileSync(p, "utf-8");
@@ -37189,11 +37347,11 @@ async function getStatusData(directory, agents) {
   status.pendingProposals = await countProposals(directory);
   status.unactionableQueueDepth = await safeLineCount(resolveUnactionablePath(directory));
   status.insightCandidatesPending = await safeLineCount(validateSwarmPath(directory, "insight-candidates.jsonl"));
-  status.fullAutoActive = _internals55.hasActiveFullAuto();
+  status.fullAutoActive = _internals56.hasActiveFullAuto();
   if (status.fullAutoActive) {
-    const sid = _internals55.getActiveFullAutoSessionID();
+    const sid = _internals56.getActiveFullAutoSessionID();
     if (sid) {
-      const runState = _internals55.loadFullAutoRunState(directory, sid);
+      const runState = _internals56.loadFullAutoRunState(directory, sid);
       if (runState?.lastEscalation) {
         status.fullAutoEscalation = {
           reason: runState.lastEscalation.reason,
@@ -37208,7 +37366,7 @@ async function getStatusData(directory, agents) {
 }
 function enrichWithLeanTurbo(status, directory) {
   const turboMode = hasActiveTurboMode();
-  const leanActive = _internals55.hasActiveLeanTurbo();
+  const leanActive = _internals56.hasActiveLeanTurbo();
   let turboStrategy = "off";
   if (leanActive) {
     turboStrategy = "lean";
@@ -37227,7 +37385,7 @@ function enrichWithLeanTurbo(status, directory) {
     }
   }
   if (leanSessionID) {
-    const runState = _internals55.loadLeanTurboRunState(directory, leanSessionID);
+    const runState = _internals56.loadLeanTurboRunState(directory, leanSessionID);
     if (runState) {
       status.leanTurboPhase = runState.phase;
       status.leanMaxParallelCoders = runState.maxParallelCoders;
@@ -37418,7 +37576,7 @@ No active swarm plan found. Nothing to sync.`;
 
 // src/commands/turbo.ts
 init_logger();
-var _internals56 = {
+var _internals57 = {
   loadPluginConfigWithMeta
 };
 async function handleTurboCommand(directory, args, sessionID) {
@@ -37478,7 +37636,7 @@ async function handleTurboCommand(directory, args, sessionID) {
   if (arg0 === "on") {
     let strategy = "standard";
     try {
-      const { config } = _internals56.loadPluginConfigWithMeta(directory);
+      const { config } = _internals57.loadPluginConfigWithMeta(directory);
       if (config.turbo?.strategy === "lean") {
         strategy = "lean";
       }
@@ -37575,7 +37733,7 @@ function enableLeanTurbo(session, directory, sessionID) {
   let maxParallelCoders = 4;
   let conflictPolicy = "serialize";
   try {
-    const { config } = _internals56.loadPluginConfigWithMeta(directory);
+    const { config } = _internals57.loadPluginConfigWithMeta(directory);
     const leanConfig = config.turbo?.lean;
     if (leanConfig) {
       maxParallelCoders = leanConfig.max_parallel_coders ?? 4;
@@ -37647,13 +37805,13 @@ function buildStatusMessage2(session, directory, sessionID) {
 }
 
 // src/commands/unlink.ts
-import { existsSync as existsSync45 } from "fs";
-import * as path75 from "path";
+import { existsSync as existsSync46 } from "fs";
+import * as path76 from "path";
 var DEDUP_THRESHOLD2 = 0.6;
 async function copySharedKnowledgeToLocal(linkDir, localSwarmDir) {
-  const sharedPath = path75.join(linkDir, "knowledge.jsonl");
-  const localPath = path75.join(localSwarmDir, "knowledge.jsonl");
-  if (!existsSync45(sharedPath))
+  const sharedPath = path76.join(linkDir, "knowledge.jsonl");
+  const localPath = path76.join(localSwarmDir, "knowledge.jsonl");
+  if (!existsSync46(sharedPath))
     return 0;
   const sharedEntries = await readKnowledge(sharedPath);
   if (sharedEntries.length === 0)
@@ -37687,7 +37845,7 @@ async function handleUnlinkCommand(directory, args) {
   let copied = 0;
   if (copyBack) {
     try {
-      copied = await copySharedKnowledgeToLocal(linkDir, path75.join(directory, ".swarm"));
+      copied = await copySharedKnowledgeToLocal(linkDir, path76.join(directory, ".swarm"));
     } catch (error2) {
       return `\u274C Failed to copy shared knowledge back to local: ${error2 instanceof Error ? error2.message : String(error2)}`;
     }
@@ -37791,7 +37949,7 @@ function findSimilarCommands(query) {
   }
   const scored = VALID_COMMANDS.map((cmd) => {
     const cmdLower = cmd.toLowerCase();
-    const fullScore = _internals57.levenshteinDistance(q, cmdLower);
+    const fullScore = _internals58.levenshteinDistance(q, cmdLower);
     let tokenScore = Infinity;
     if (cmd.includes(" ") || cmd.includes("-")) {
       const qTokens = q.split(/[\s-]+/);
@@ -37804,7 +37962,7 @@ function findSimilarCommands(query) {
         for (const ct of cmdTokens) {
           if (ct.length === 0)
             continue;
-          const dist = _internals57.levenshteinDistance(qt, ct);
+          const dist = _internals58.levenshteinDistance(qt, ct);
           if (dist < minDist)
             minDist = dist;
         }
@@ -37814,7 +37972,7 @@ function findSimilarCommands(query) {
     }
     const dashStrippedQ = q.replace(/-/g, "");
     const dashStrippedCmd = cmdLower.replace(/-/g, "");
-    const dashScore = _internals57.levenshteinDistance(dashStrippedQ, dashStrippedCmd);
+    const dashScore = _internals58.levenshteinDistance(dashStrippedQ, dashStrippedCmd);
     const score = Math.min(fullScore, tokenScore, dashScore);
     return { cmd, score };
   });
@@ -37849,16 +38007,16 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-3b8n3dbd.js");
+    const { buildHelpText } = await import("./index-p9jf8gt8.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
-  const resolved = _internals57.resolveCommand(tokens);
+  const resolved = _internals58.resolveCommand(tokens);
   if (resolved) {
-    return _internals57.buildDetailedHelp(resolved.key, resolved.entry);
+    return _internals58.buildDetailedHelp(resolved.key, resolved.entry);
   }
-  const similar = _internals57.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-3b8n3dbd.js");
+  const similar = _internals58.findSimilarCommands(targetCommand);
+  const { buildHelpText: fullHelp } = await import("./index-p9jf8gt8.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -37922,7 +38080,7 @@ var COMMAND_REGISTRY = {
     toolNoArgs: true
   },
   help: {
-    handler: (ctx) => _internals57.handleHelpCommand(ctx),
+    handler: (ctx) => _internals58.handleHelpCommand(ctx),
     description: "Show help for swarm commands",
     category: "core",
     args: "[command]",
@@ -37991,7 +38149,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-kwqfkwch.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-xvyz2eag.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -38001,7 +38159,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-kwqfkwch.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-xvyz2eag.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -38218,8 +38376,8 @@ var COMMAND_REGISTRY = {
       sessionID: ctx.sessionID
     }),
     description: "Use /swarm finalize to finalize the swarm project and archive evidence",
-    details: "Idempotent 4-stage terminal finalization: (1) finalize writes retrospectives for in-progress phases, (2) archive creates timestamped bundle of swarm artifacts and evidence, (3) clean removes active-state files for a clean slate, (4) align performs aggressive git reset --hard to the default remote branch, discarding uncommitted changes and gitignored build artifacts (user-created untracked files are preserved); falls back to a cautious reset that preserves uncommitted changes when the aggressive path cannot proceed. WARNING: alignment discards local changes and gitignored files. Resets agent sessions and delegation chains. Reads .swarm/close-lessons.md for explicit lessons and runs curation. Use --skill-review to run the quota-bounded skill_improver in proposal mode.",
-    args: "--prune-branches, --skill-review",
+    details: "Idempotent 4-stage terminal finalization: (1) finalize writes retrospectives for in-progress phases, (2) archive creates timestamped bundle of swarm artifacts and evidence, (3) clean removes active-state files for a clean slate, (4) align performs aggressive git reset --hard to the default remote branch, discarding uncommitted changes and gitignored build artifacts (user-created untracked files are preserved); falls back to a cautious reset that preserves uncommitted changes when the aggressive path cannot proceed. WARNING: alignment discards local changes and gitignored files. Resets agent sessions and delegation chains. Reads .swarm/close-lessons.md for explicit lessons and runs curation. Use --skill-review to run the quota-bounded skill_improver in proposal mode. Use --dry-run to preview what finalize would archive, clean, and align without taking the lock or changing anything.",
+    args: "--prune-branches, --skill-review, --dry-run",
     category: "core",
     toolPolicy: "none"
   },
@@ -38228,8 +38386,8 @@ var COMMAND_REGISTRY = {
       sessionID: ctx.sessionID
     }),
     description: "Use /swarm close (deprecated alias) to finalize and archive swarm state",
-    details: "Deprecated alias for /swarm finalize. Preserved for backward compatibility.",
-    args: "--prune-branches, --skill-review",
+    details: "Deprecated alias for /swarm finalize. Preserved for backward compatibility. Supports the same flags, including --dry-run.",
+    args: "--prune-branches, --skill-review, --dry-run",
     category: "core",
     aliasOf: "finalize",
     deprecated: true
@@ -38549,7 +38707,7 @@ Subcommands:
   reset: {
     handler: (ctx) => handleResetCommand(ctx.directory, ctx.args),
     description: "Clear swarm state files [--confirm]",
-    details: "DELETES plan.md, context.md, and summaries/ directory from .swarm/. Stops background automation and clears in-memory queues. SAFETY: requires --confirm flag \u2014 without it, displays a warning and tips to export first.",
+    details: "DELETES plan.md, context.md, and summaries/ directory from .swarm/. Stops background automation and clears in-memory queues. SAFETY: requires --confirm flag \u2014 without it, displays a warning and tips to export first. Before deleting, auto-backs up the state it removes to .swarm/reset-backups/<timestamp>/ (newest 5 kept) so it can be restored by copying the files back.",
     args: "--confirm (required)",
     category: "utility",
     clashesWithNativeCcCommand: "/reset",
@@ -38558,7 +38716,7 @@ Subcommands:
   "reset-session": {
     handler: (ctx) => handleResetSessionCommand(ctx.directory, ctx.args),
     description: "Clear session state while preserving plan, evidence, and knowledge",
-    details: "Deletes only .swarm/session/state.json and any other session files. Clears in-memory agent sessions and delegation chains. Preserves plan, evidence, and knowledge for cross-session continuity.",
+    details: "Deletes only .swarm/session/state.json and any other session files. Clears in-memory agent sessions and delegation chains. Preserves plan, evidence, and knowledge for cross-session continuity. Before deleting, auto-backs up the session files it removes to .swarm/reset-backups/<timestamp>/ (newest 5 kept).",
     args: "",
     category: "utility",
     toolPolicy: "restricted"
@@ -38826,24 +38984,24 @@ function validateAliases() {
         continue;
       }
       const visited = new Set;
-      const path76 = [];
+      const path77 = [];
       let current = target;
       while (current) {
         const currentEntry = COMMAND_REGISTRY[current];
         if (!currentEntry)
           break;
         if (visited.has(current)) {
-          const cycleStart = path76.indexOf(current);
+          const cycleStart = path77.indexOf(current);
           const fullChain = [
             name,
-            ...path76.slice(0, cycleStart > 0 ? cycleStart : path76.length),
+            ...path77.slice(0, cycleStart > 0 ? cycleStart : path77.length),
             current
           ].join(" \u2192 ");
           errors.push(`Circular alias detected: ${fullChain}`);
           break;
         }
         visited.add(current);
-        path76.push(current);
+        path77.push(current);
         current = currentEntry.aliasOf || "";
       }
     }
@@ -38862,7 +39020,7 @@ function validateToolPolicy() {
   }
   return { valid: warnings.length === 0, warnings };
 }
-var _internals57 = {
+var _internals58 = {
   handleHelpCommand,
   validateAliases,
   validateToolPolicy,
@@ -38872,16 +39030,16 @@ var _internals57 = {
   findSimilarCommands,
   buildDetailedHelp
 };
-var validation = _internals57.validateAliases();
+var validation = _internals58.validateAliases();
 if (!validation.valid) {
   throw new Error(`COMMAND_REGISTRY alias validation failed:
 ${validation.errors.join(`
 `)}`);
 }
-_internals57.emitValidationWarnings("COMMAND_REGISTRY alias warnings", validation.warnings);
+_internals58.emitValidationWarnings("COMMAND_REGISTRY alias warnings", validation.warnings);
 try {
-  const toolPolicyValidation = _internals57.validateToolPolicy();
-  _internals57.emitValidationWarnings("COMMAND_REGISTRY toolPolicy warnings", toolPolicyValidation.warnings);
+  const toolPolicyValidation = _internals58.validateToolPolicy();
+  _internals58.emitValidationWarnings("COMMAND_REGISTRY toolPolicy warnings", toolPolicyValidation.warnings);
 } catch (e) {
   warn(`COMMAND_REGISTRY toolPolicy validation failed (non-fatal): ${e.message}`);
 }
@@ -41215,7 +41373,7 @@ init_logger();
 
 // src/hooks/guardrails/destructive-command.ts
 import * as fsSync3 from "fs";
-import * as path76 from "path";
+import * as path77 from "path";
 var DC_MAX_UNWRAP_DEPTH = 5;
 var DC_SAFE_TARGETS = new Set([
   "node_modules",
@@ -41391,16 +41549,16 @@ function dcIsRemotePath(p) {
   return DC_REMOTE_PREFIXES.some((pfx) => p.startsWith(pfx));
 }
 function dcLstatAncestorWalk(targetPath, cwd) {
-  const normalizedTarget = path76.resolve(cwd, targetPath);
-  const normalizedCwd = path76.resolve(cwd);
+  const normalizedTarget = path77.resolve(cwd, targetPath);
+  const normalizedCwd = path77.resolve(cwd);
   const ancestors = [];
   let current = normalizedTarget;
   while (true) {
     ancestors.push(current);
-    const parent = path76.dirname(current);
+    const parent = path77.dirname(current);
     if (parent === current)
       break;
-    const rel = path76.relative(normalizedCwd, current);
+    const rel = path77.relative(normalizedCwd, current);
     if (rel === "" || rel.startsWith(".."))
       break;
     current = parent;
@@ -41439,14 +41597,14 @@ function dcValidateTargets(targets, cwd) {
     const lstatBlock = dcLstatAncestorWalk(t, cwd);
     if (lstatBlock)
       return lstatBlock;
-    const basename15 = path76.basename(t);
+    const basename15 = path77.basename(t);
     if (t === basename15 && DC_SAFE_TARGETS.has(t)) {
       continue;
     }
     if (DC_FS_ROOTS.has(t) || DC_FS_ROOTS.has(t.replace(/\//g, "\\"))) {
       return `BLOCKED: Destructive command targets filesystem root "${t}"`;
     }
-    if (path76.isAbsolute(t) || /^[A-Za-z]:/.test(t)) {
+    if (path77.isAbsolute(t) || /^[A-Za-z]:/.test(t)) {
       for (const blocked of DC_BLOCKED_ABSOLUTE_PREFIXES) {
         if (t.startsWith(blocked)) {
           return `BLOCKED: Destructive command targets system path "${t}" which is under protected prefix "${blocked}"`;
@@ -41461,9 +41619,9 @@ function dcCheckJunctionCreation(segment, cwd) {
   if (mklinkMatch) {
     const target = mklinkMatch[2].trim();
     if (!dcHasUnresolvableVars(target)) {
-      const resolved = path76.resolve(cwd, target);
-      const rel = path76.relative(cwd, resolved);
-      if (rel.startsWith("..") || path76.isAbsolute(rel)) {
+      const resolved = path77.resolve(cwd, target);
+      const rel = path77.relative(cwd, resolved);
+      if (rel.startsWith("..") || path77.isAbsolute(rel)) {
         return `BLOCKED: Junction/symlink creation targeting path outside working directory: mklink target "${target}" resolves to "${resolved}" which is outside "${cwd}". Creating junctions to external paths and then deleting them recursively can destroy data.`;
       }
     }
@@ -41475,9 +41633,9 @@ function dcCheckJunctionCreation(segment, cwd) {
   if (newItemMatch) {
     const target = newItemMatch[1].trim();
     if (!dcHasUnresolvableVars(target)) {
-      const resolved = path76.resolve(cwd, target);
-      const rel = path76.relative(cwd, resolved);
-      if (rel.startsWith("..") || path76.isAbsolute(rel)) {
+      const resolved = path77.resolve(cwd, target);
+      const rel = path77.relative(cwd, resolved);
+      if (rel.startsWith("..") || path77.isAbsolute(rel)) {
         return `BLOCKED: Junction/symlink creation targeting path outside working directory: New-Item target "${target}" resolves to "${resolved}" which is outside "${cwd}". This pattern caused the K2.6 data-loss incident.`;
       }
     }
@@ -41487,9 +41645,9 @@ function dcCheckJunctionCreation(segment, cwd) {
   if (lnMatch) {
     const target = lnMatch[1].trim();
     if (!dcHasUnresolvableVars(target)) {
-      const resolved = path76.resolve(cwd, target);
-      const rel = path76.relative(cwd, resolved);
-      if (rel.startsWith("..") || path76.isAbsolute(rel)) {
+      const resolved = path77.resolve(cwd, target);
+      const rel = path77.relative(cwd, resolved);
+      if (rel.startsWith("..") || path77.isAbsolute(rel)) {
         return `BLOCKED: Symlink creation targeting path outside working directory: ln -s target "${target}" resolves to "${resolved}" which is outside "${cwd}". Symlinks to external paths combined with recursive deletion can destroy data.`;
       }
     }
@@ -41581,7 +41739,7 @@ function formatCommandNotFound(tokens) {
   const attemptedCommand = tokens[0] || "";
   const MAX_DISPLAY = 100;
   const displayCommand = attemptedCommand.length > MAX_DISPLAY ? `${attemptedCommand.slice(0, MAX_DISPLAY)}...` : attemptedCommand;
-  const similar = _internals57.findSimilarCommands(attemptedCommand);
+  const similar = _internals58.findSimilarCommands(attemptedCommand);
   const header = `Command \`/swarm ${displayCommand}\` not found.`;
   const suggestions = similar.length > 0 ? `Did you mean:
 ${similar.map((cmd) => `  - /swarm ${cmd}`).join(`
@@ -41904,10 +42062,10 @@ function classifySwarmCommandChatFallbackUse(resolved) {
 init_executor();
 
 // src/hooks/shell-write-detect.ts
-import * as path77 from "path";
+import * as path78 from "path";
 import parse from "bash-parser";
-function buildDedupeKey(category, operator, path78) {
-  return `${category}|${operator}|${path78 ?? "null"}`;
+function buildDedupeKey(category, operator, path79) {
+  return `${category}|${operator}|${path79 ?? "null"}`;
 }
 var REDIRECT_WRITE_TOKENS = new Set([
   "GREAT",
@@ -41967,16 +42125,16 @@ function detectProcessSubstitutionWrites(command) {
         results.push(builtinResult);
       const appendMatch = stage.match(/^\s*(.*?)\s*>>(\s*)(\S+)\s*$/);
       if (appendMatch) {
-        const path78 = appendMatch[3];
-        if (path78 && !isNullDevice(path78)) {
-          results.push({ category: "redirect", operator: ">>", path: path78 });
+        const path79 = appendMatch[3];
+        if (path79 && !isNullDevice(path79)) {
+          results.push({ category: "redirect", operator: ">>", path: path79 });
         }
       } else {
         const writeMatch = stage.match(/^\s*(.*?)\s*>(?!>)(\s*)(\S+)\s*$/);
         if (writeMatch) {
-          const path78 = writeMatch[3];
-          if (path78 && !isNullDevice(path78)) {
-            results.push({ category: "redirect", operator: ">", path: path78 });
+          const path79 = writeMatch[3];
+          if (path79 && !isNullDevice(path79)) {
+            results.push({ category: "redirect", operator: ">", path: path79 });
           }
         }
       }
@@ -42150,8 +42308,8 @@ function extractRedirectPath(fileNode) {
     return null;
   return text;
 }
-function isNullDevice(path78) {
-  return path78 === "/dev/null" || path78 === "/dev/zero" || path78 === "/dev/urandom";
+function isNullDevice(path79) {
+  return path79 === "/dev/null" || path79 === "/dev/zero" || path79 === "/dev/urandom";
 }
 function isNumeric(s) {
   return /^\d+$/.test(s);
@@ -42171,12 +42329,12 @@ function detectRedirects(cmd) {
     if (!opType || !REDIRECT_ALL_WRITE_TOKENS.has(opType))
       continue;
     const fileNode = r.file;
-    const path78 = extractRedirectPath(fileNode);
+    const path79 = extractRedirectPath(fileNode);
     const opLabel = operatorLabel(opNode);
     if (REDIRECT_WRITE_TOKENS.has(opType)) {
-      results.push({ category: "redirect", operator: opLabel, path: path78 });
+      results.push({ category: "redirect", operator: opLabel, path: path79 });
     } else if (REDIRECT_HERE_TOKENS.has(opType)) {
-      results.push({ category: "here_doc", operator: opLabel, path: path78 });
+      results.push({ category: "here_doc", operator: opLabel, path: path79 });
     }
   }
   return results;
@@ -42219,9 +42377,9 @@ function detectBuiltinWrites(cmd) {
     const suffixWords2 = getSuffixWords(cmd);
     for (const word of suffixWords2) {
       if (word.startsWith("of=")) {
-        const path78 = word.slice(3);
-        if (path78 && !isNullDevice(path78)) {
-          results.push({ category: "builtin_write", operator: "dd of=", path: path78 });
+        const path79 = word.slice(3);
+        if (path79 && !isNullDevice(path79)) {
+          results.push({ category: "builtin_write", operator: "dd of=", path: path79 });
         }
       }
     }
@@ -42340,12 +42498,12 @@ function detectNetworkDownloaders(cmd) {
     for (let i = 0;i < suffixWords.length; i++) {
       const word = suffixWords[i];
       if (word === "-o" && i + 1 < suffixWords.length) {
-        const path78 = suffixWords[i + 1];
-        if (!path78.startsWith("-")) {
+        const path79 = suffixWords[i + 1];
+        if (!path79.startsWith("-")) {
           results.push({
             category: "network_download",
             operator: "curl -o",
-            path: path78
+            path: path79
           });
         }
       } else if (word.startsWith("-o") && word.length > 2) {
@@ -42360,12 +42518,12 @@ function detectNetworkDownloaders(cmd) {
     for (let i = 0;i < suffixWords.length; i++) {
       const word = suffixWords[i];
       if (word === "-O" && i + 1 < suffixWords.length) {
-        const path78 = suffixWords[i + 1];
-        if (!path78.startsWith("-")) {
+        const path79 = suffixWords[i + 1];
+        if (!path79.startsWith("-")) {
           results.push({
             category: "network_download",
             operator: "wget -O",
-            path: path78
+            path: path79
           });
         }
       } else if (word.startsWith("-O") && word.length > 2) {
@@ -42474,9 +42632,9 @@ function detectGitDestructive(cmd) {
   if (first === "checkout") {
     const dashDashIdx = suffixWords.indexOf("--");
     if (dashDashIdx !== -1 && dashDashIdx + 1 < suffixWords.length) {
-      const path78 = suffixWords[dashDashIdx + 1];
-      const op = path78 === "." ? "git checkout -- ." : "git checkout --";
-      results.push({ category: "git_destructive", operator: op, path: path78 });
+      const path79 = suffixWords[dashDashIdx + 1];
+      const op = path79 === "." ? "git checkout -- ." : "git checkout --";
+      results.push({ category: "git_destructive", operator: op, path: path79 });
     }
   } else if (first === "restore") {
     const hasHard = suffixWords.some((w) => w === "--hard" || w === "-H" || w.startsWith("-") && w.includes("H"));
@@ -42596,10 +42754,10 @@ function detectPowerShellWrites(command) {
   if (redirectMatch) {
     const beforeRedirect = redirectMatch[1];
     const op = redirectMatch[2];
-    const path78 = redirectMatch[3];
+    const path79 = redirectMatch[3];
     const fdRedirectPattern = /\d>\s*$|\s\d>&$/;
     if (!fdRedirectPattern.test(`${beforeRedirect} ${op}`)) {
-      results.push({ category: "redirect", operator: op, path: path78 });
+      results.push({ category: "redirect", operator: op, path: path79 });
     }
   }
   const leadingRedirect = innerCommand.match(/^((?:>){1,2})\s+(\S+)$/);
@@ -42612,12 +42770,12 @@ function detectPowerShellWrites(command) {
   }
   const iwrMatch = trimmed.match(/^(?:Invoke-WebRequest|curl)\s.*?(?:-OutFile\s+(\S+)|-o\s+(\S+))/i);
   if (iwrMatch) {
-    const path78 = iwrMatch[1] || iwrMatch[2];
-    if (path78) {
+    const path79 = iwrMatch[1] || iwrMatch[2];
+    if (path79) {
       results.push({
         category: "network_download",
         operator: "Invoke-WebRequest -OutFile",
-        path: path78
+        path: path79
       });
     }
   }
@@ -42629,15 +42787,15 @@ function detectPowerShellWrites(command) {
     const rest = cmd.slice(cmdletMatch[0].length).trim();
     const pathFlagMatch = rest.match(/(?:-Path|-FilePath|-LiteralPath)\s+("([^"]+)"|'([^']+)'|(\S+))/i);
     if (pathFlagMatch) {
-      const path78 = pathFlagMatch[2] ?? pathFlagMatch[3] ?? pathFlagMatch[4] ?? "";
-      return { category: "redirect", operator: cmdletName, path: path78 };
+      const path79 = pathFlagMatch[2] ?? pathFlagMatch[3] ?? pathFlagMatch[4] ?? "";
+      return { category: "redirect", operator: cmdletName, path: path79 };
     }
     const tokens = rest.match(/(?:[^\s"-]+|"[^"]*"|'[^']*'|-[^\s]+)/g) ?? [];
     for (const token of tokens) {
       if (token.startsWith("-"))
         continue;
-      const path78 = token.replace(/^["']|["']$/g, "");
-      return { category: "redirect", operator: cmdletName, path: path78 };
+      const path79 = token.replace(/^["']|["']$/g, "");
+      return { category: "redirect", operator: cmdletName, path: path79 };
     }
     return null;
   }
@@ -42653,9 +42811,9 @@ function detectPowerShellWrites(command) {
     for (const token of tokens) {
       if (token.startsWith("-"))
         continue;
-      const path78 = token.replace(/^["']|["']$/g, "");
-      if (path78) {
-        results.push({ category: "redirect", operator: cmdletName, path: path78 });
+      const path79 = token.replace(/^["']|["']$/g, "");
+      if (path79) {
+        results.push({ category: "redirect", operator: cmdletName, path: path79 });
         break;
       }
     }
@@ -42668,8 +42826,8 @@ function detectPowerShellWrites(command) {
     const rest = cmd.slice(opMatch[0].length).trim();
     const destFlagMatch = rest.match(/-Destination\s+(\S+|"[^"]+"|'[^']+')/i);
     if (destFlagMatch) {
-      const path78 = destFlagMatch[1].replace(/^["']|["']$/g, "");
-      return { category: "builtin_write", operator: cmdletName, path: path78 };
+      const path79 = destFlagMatch[1].replace(/^["']|["']$/g, "");
+      return { category: "builtin_write", operator: cmdletName, path: path79 };
     }
     const tokens = [];
     const flagTakingValue = new Set([
@@ -42708,11 +42866,11 @@ function detectPowerShellWrites(command) {
       }
     }
     if (tokens.length >= 2) {
-      const path78 = tokens[tokens.length - 1].replace(/^["']|["']$/g, "");
-      return { category: "builtin_write", operator: cmdletName, path: path78 };
+      const path79 = tokens[tokens.length - 1].replace(/^["']|["']$/g, "");
+      return { category: "builtin_write", operator: cmdletName, path: path79 };
     } else if (tokens.length === 1) {
-      const path78 = tokens[0].replace(/^["']|["']$/g, "");
-      return { category: "builtin_write", operator: cmdletName, path: path78 };
+      const path79 = tokens[0].replace(/^["']|["']$/g, "");
+      return { category: "builtin_write", operator: cmdletName, path: path79 };
     }
     return null;
   }
@@ -42726,14 +42884,14 @@ function detectPowerShellWrites(command) {
     const afterCmdlet = pipeFileOpMatch[2].trim();
     const destFlagMatch = afterCmdlet.match(/-Destination\s+(\S+|"[^"]+"|'[^']+')/i);
     if (destFlagMatch) {
-      const path78 = destFlagMatch[1].replace(/^["']|["']$/g, "");
-      results.push({ category: "builtin_write", operator: cmdletName, path: path78 });
+      const path79 = destFlagMatch[1].replace(/^["']|["']$/g, "");
+      results.push({ category: "builtin_write", operator: cmdletName, path: path79 });
     } else {
       const tokens = afterCmdlet.match(/(?:[^\s"-]+|"[^"]*"|'[^']*'|-[^\s]+)/g) ?? [];
       const nonFlagTokens = tokens.filter((t) => !t.startsWith("-") && t.length > 0);
       if (nonFlagTokens.length > 0) {
-        const path78 = nonFlagTokens[nonFlagTokens.length - 1].replace(/^["']|["']$/g, "");
-        results.push({ category: "builtin_write", operator: cmdletName, path: path78 });
+        const path79 = nonFlagTokens[nonFlagTokens.length - 1].replace(/^["']|["']$/g, "");
+        results.push({ category: "builtin_write", operator: cmdletName, path: path79 });
       }
     }
   }
@@ -42786,10 +42944,10 @@ function detectCmdWrites(command) {
   if (redirectMatch) {
     const beforeRedirect = redirectMatch[1];
     const op = redirectMatch[2];
-    const path78 = redirectMatch[3];
+    const path79 = redirectMatch[3];
     const fdRedirectPattern = /\d>&?$/;
     if (!fdRedirectPattern.test(beforeRedirect)) {
-      results.push({ category: "redirect", operator: op, path: path78 });
+      results.push({ category: "redirect", operator: op, path: path79 });
     }
   }
   const leadingRedirect = innerCommand.match(/^((?:>){1,2})\s+(\S+)$/);
@@ -42847,8 +43005,8 @@ function detectCmdWrites(command) {
     const rawTokens = rest.match(/(\/?[^\s]+|"[^"]*"|'[^']*')/g) ?? [];
     const tokens = rawTokens.filter((t) => !t.startsWith("/"));
     if (tokens.length > 0) {
-      const path78 = tokens[0].replace(/^["']|["']$/g, "");
-      return { category: "builtin_write", operator: "del", path: path78 };
+      const path79 = tokens[0].replace(/^["']|["']$/g, "");
+      return { category: "builtin_write", operator: "del", path: path79 };
     }
     return null;
   }
@@ -42858,16 +43016,16 @@ function detectCmdWrites(command) {
   }
   const rdMatch = innerCommand.match(/^rd\s+(?:\/s\s+|\/q\s+)*(\S+)/i);
   if (rdMatch) {
-    const path78 = rdMatch[1].replace(/^["']|["']$/g, "");
-    if (!path78.startsWith("/")) {
-      results.push({ category: "builtin_write", operator: "rd", path: path78 });
+    const path79 = rdMatch[1].replace(/^["']|["']$/g, "");
+    if (!path79.startsWith("/")) {
+      results.push({ category: "builtin_write", operator: "rd", path: path79 });
     }
   }
   const mdMatch = trimmed.match(/^md\s+(\S+)/i);
   if (mdMatch) {
-    const path78 = mdMatch[1].replace(/^["']|["']$/g, "");
-    if (!path78.startsWith("/")) {
-      results.push({ category: "builtin_write", operator: "md", path: path78 });
+    const path79 = mdMatch[1].replace(/^["']|["']$/g, "");
+    if (!path79.startsWith("/")) {
+      results.push({ category: "builtin_write", operator: "md", path: path79 });
     }
   }
   const echoMatch = trimmed.match(/^echo\s+(\S+.*?)\s+((?:>){1,2})\s*(\S+)$/i);
@@ -42983,10 +43141,10 @@ function resolvePath(pathText, cwd) {
     return null;
   const isWindowsPath = /^[a-zA-Z]:[\\\\/]/.test(cwd) || cwd.includes("\\");
   if (isWindowsPath) {
-    return path77.win32.resolve(cwd, pathText);
+    return path78.win32.resolve(cwd, pathText);
   }
-  const normalizedRelativeWindowsPath = !path77.posix.isAbsolute(pathText) && !/^[a-zA-Z]:[\\/]/.test(pathText) ? pathText.replace(/\\/g, "/") : pathText;
-  return path77.posix.resolve(cwd, normalizedRelativeWindowsPath);
+  const normalizedRelativeWindowsPath = !path78.posix.isAbsolute(pathText) && !/^[a-zA-Z]:[\\/]/.test(pathText) ? pathText.replace(/\\/g, "/") : pathText;
+  return path78.posix.resolve(cwd, normalizedRelativeWindowsPath);
 }
 function getCdTarget(cmd) {
   if (!cmd || typeof cmd !== "object")
@@ -43053,7 +43211,7 @@ function collectWritesWithNodes(node, out, cwdStack) {
         for (const cmd of node.commands) {
           const cdTarget = getCdTarget(cmd);
           if (cdTarget) {
-            currentStack[0] = path77.posix.resolve(currentStack[0] ?? "/", cdTarget);
+            currentStack[0] = path78.posix.resolve(currentStack[0] ?? "/", cdTarget);
             collectWritesWithNodes(cmd, out, currentStack);
           } else {
             collectWritesWithNodes(cmd, out, currentStack);
@@ -43099,7 +43257,7 @@ function collectWritesWithNodes(node, out, cwdStack) {
       const effectiveCwd = cwdStack[0] ?? "/";
       const cdTarget = getCdTarget(node);
       if (cdTarget) {
-        cwdStack[0] = path77.posix.resolve(cwdStack[0] ?? "/", cdTarget);
+        cwdStack[0] = path78.posix.resolve(cwdStack[0] ?? "/", cdTarget);
         return;
       }
       const writesFromRedirs = getWritesFromCommandRedirs(node, effectiveCwd);
@@ -43145,12 +43303,12 @@ function getWritesFromRedirectNode(redirect, _context) {
   if (!opType || !REDIRECT_ALL_WRITE_TOKENS.has(opType))
     return [];
   const fileNode = r.file;
-  const path78 = extractRedirectPath(fileNode);
+  const path79 = extractRedirectPath(fileNode);
   const opLabel = operatorLabel(opNode);
   if (REDIRECT_WRITE_TOKENS.has(opType)) {
-    return [{ category: "redirect", operator: opLabel, path: path78 }];
+    return [{ category: "redirect", operator: opLabel, path: path79 }];
   } else if (REDIRECT_HERE_TOKENS.has(opType)) {
-    return [{ category: "here_doc", operator: opLabel, path: path78 }];
+    return [{ category: "here_doc", operator: opLabel, path: path79 }];
   }
   return [];
 }
@@ -43541,10 +43699,10 @@ function startAgentSession(sessionId, agentName, staleDurationMs = STALE_SESSION
   }
   telemetry.sessionStarted(sessionId, agentName);
   swarmState.activeAgent.set(sessionId, agentName);
-  _internals60.applyRehydrationCache(sessionState);
+  _internals61.applyRehydrationCache(sessionState);
   if (directory) {
     let rehydrationPromise;
-    rehydrationPromise = _internals60.rehydrateSessionFromDisk(directory, sessionState).then(async () => {
+    rehydrationPromise = _internals61.rehydrateSessionFromDisk(directory, sessionState).then(async () => {
       try {
         sessionState.prSubscriptions = await rehydratePrSubscriptions(sessionId, directory);
       } catch (err) {
@@ -43725,7 +43883,7 @@ function ensureAgentSession(sessionId, agentName, directory) {
     maybeSweepStaleSessions();
     return session;
   }
-  _internals60.startAgentSession(sessionId, agentName ?? "unknown", 7200000, directory);
+  _internals61.startAgentSession(sessionId, agentName ?? "unknown", 7200000, directory);
   session = swarmState.agentSessions.get(sessionId);
   if (!session) {
     throw new Error(`Failed to create guardrail session for ${sessionId}`);
@@ -43903,8 +44061,8 @@ function evidenceToWorkflowState(evidence) {
 }
 async function readPlanFromDisk(directory) {
   try {
-    const planPath = path78.join(directory, ".swarm", "plan.json");
-    const content = await fs40.readFile(planPath, "utf-8");
+    const planPath = path79.join(directory, ".swarm", "plan.json");
+    const content = await fs41.readFile(planPath, "utf-8");
     const parsed = JSON.parse(content);
     return PlanSchema.parse(parsed);
   } catch {
@@ -43914,8 +44072,8 @@ async function readPlanFromDisk(directory) {
 async function readGateEvidenceFromDisk(directory) {
   const evidenceMap = new Map;
   try {
-    const evidenceDir = path78.join(directory, ".swarm", "evidence");
-    const entries = await fs40.readdir(evidenceDir, { withFileTypes: true });
+    const evidenceDir = path79.join(directory, ".swarm", "evidence");
+    const entries = await fs41.readdir(evidenceDir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isFile() || !entry.name.endsWith(".json")) {
         continue;
@@ -43925,8 +44083,8 @@ async function readGateEvidenceFromDisk(directory) {
         continue;
       }
       try {
-        const filePath = path78.join(evidenceDir, entry.name);
-        const content = await fs40.readFile(filePath, "utf-8");
+        const filePath = path79.join(evidenceDir, entry.name);
+        const content = await fs41.readFile(filePath, "utf-8");
         const parsed = JSON.parse(content);
         if (parsed && typeof parsed.taskId === "string" && Array.isArray(parsed.required_gates)) {
           evidenceMap.set(taskId, parsed);
@@ -44013,8 +44171,8 @@ function applyRehydrationCache(session) {
   }
 }
 async function rehydrateSessionFromDisk(directory, session) {
-  await _internals60.buildRehydrationCache(directory);
-  _internals60.applyRehydrationCache(session);
+  await _internals61.buildRehydrationCache(directory);
+  _internals61.applyRehydrationCache(session);
 }
 function hasActiveTurboMode(sessionID) {
   if (sessionID) {
@@ -44081,7 +44239,7 @@ function hasActiveEpicMode(sessionID) {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-cny2jz2d.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-8a6jwek2.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)
@@ -44102,7 +44260,7 @@ async function rehydratePrSubscriptions(sessionID, directory) {
   }
   return map;
 }
-var _internals60 = {
+var _internals61 = {
   swarmState,
   resetSwarmState,
   ensureAgentSession,
@@ -44241,4 +44399,4 @@ function createCuratorLLMDelegate(directory, mode = "init", sessionId) {
   };
 }
 
-export { package_default, handleAcknowledgeSpecDriftCommand, handleAgentsCommand, handleAnalyzeCommand, handleArchiveCommand, DC_SAFE_TARGETS, dcNormalizeCommand, dcUnwrapWrappers, dcSplitSegments, dcValidateTargets, dcCheckJunctionCreation, dcExtractWindowsCmdTargets, dcExtractPowerShellTargets, normalizeSwarmCommandInput, canonicalCommandKey, formatCommandNotFound, executeSwarmCommand, SWARM_COMMAND_TOOL_COMMANDS, SWARM_COMMAND_TOOL_ALLOWLIST, HUMAN_ONLY_SWARM_COMMANDS, classifySwarmCommandToolUse, classifySwarmCommandChatFallbackUse, detectPosixWrites, detectWindowsWrites, resolveWriteTargets, handleAutoProceedCommand, handleBenchmarkCommand, handleBrainstormCommand, handleCheckpointCommand, handleCiSimulateCommand, handleClarifyCommand, createCuratorLLMDelegate, _internals13 as _internals, normalizeRecommendationEntryIdToken, parseKnowledgeRecommendations, parseKnowledgeRecommendationsWithDiagnostics, parseStructuredCuratorBlocks, readCuratorSummary, writeCuratorSummary, appendCuratorRecommendation, mergeCuratorPhaseSummary, filterPhaseEvents, checkPhaseCompliance, runCuratorInit, runCuratorPhase, applyCuratorKnowledgeUpdates, isHiveEligible, checkHivePromotions, _internals15 as _internals1, createHivePromoterHook, promoteToHive, promoteFromSwarm, handleCloseCommand, handleCodebaseReviewCommand, handleConcurrencyCommand, handleConfigCommand, handleConsolidateCommand, handleCostsCommand, handleCouncilCommand, handleCurateCommand, handleDarkMatterCommand, handleDeepDiveCommand, handleDeepResearchCommand, getPluginConfigDir, getPluginCachePaths, getPluginLockFilePaths, handleDiagnoseCommand, handleDoctorCommand, handleEvidenceCommand, handleEvidenceSummaryCommand, handleExportCommand, handleFullAutoCommand, handleGateAuditCommand, handleGateStatsCommand, handleHandoffCommand, handleHistoryCommand, handleKnowledgeQuarantineCommand, handleKnowledgeRestoreCommand, handleKnowledgeMigrateCommand, handleKnowledgeListCommand, handleKnowledgeUnactionableCommand, handleKnowledgeRetryHardeningCommand, handleLearningCommand, handleLinkCommand, handleMemoryCommand, handleMemoryStatusCommand, handleMemoryValueLogCommand, handleMemoryMigrateCommand, handleMemoryImportCommand, handleMemoryExportCommand, handlePlanCommand, handlePreflightCommand, handlePromoteCommand, handleQaGatesCommand, handleResetCommand, handleResetSessionCommand, handleRetrieveCommand, handleRollbackCommand, handleSddStatusCommand, handleSddValidateCommand, handleSddProjectCommand, handleSddCommand, handleSimulateCommand, handleSpecifyCommand, handleStatusCommand, handleSyncPlanCommand, handleTurboCommand, handleUnlinkCommand, handleWriteRetroCommand, handleHelpCommand, COMMAND_REGISTRY, VALID_COMMANDS, _internals57 as _internals2, resolveCommand };
+export { package_default, handleAcknowledgeSpecDriftCommand, handleAgentsCommand, handleAnalyzeCommand, handleArchiveCommand, DC_SAFE_TARGETS, dcNormalizeCommand, dcUnwrapWrappers, dcSplitSegments, dcValidateTargets, dcCheckJunctionCreation, dcExtractWindowsCmdTargets, dcExtractPowerShellTargets, normalizeSwarmCommandInput, canonicalCommandKey, formatCommandNotFound, executeSwarmCommand, SWARM_COMMAND_TOOL_COMMANDS, SWARM_COMMAND_TOOL_ALLOWLIST, HUMAN_ONLY_SWARM_COMMANDS, classifySwarmCommandToolUse, classifySwarmCommandChatFallbackUse, detectPosixWrites, detectWindowsWrites, resolveWriteTargets, handleAutoProceedCommand, handleBenchmarkCommand, handleBrainstormCommand, handleCheckpointCommand, handleCiSimulateCommand, handleClarifyCommand, createCuratorLLMDelegate, _internals13 as _internals, normalizeRecommendationEntryIdToken, parseKnowledgeRecommendations, parseKnowledgeRecommendationsWithDiagnostics, parseStructuredCuratorBlocks, readCuratorSummary, writeCuratorSummary, appendCuratorRecommendation, mergeCuratorPhaseSummary, filterPhaseEvents, checkPhaseCompliance, runCuratorInit, runCuratorPhase, applyCuratorKnowledgeUpdates, isHiveEligible, checkHivePromotions, _internals15 as _internals1, createHivePromoterHook, promoteToHive, promoteFromSwarm, handleCloseCommand, handleCodebaseReviewCommand, handleConcurrencyCommand, handleConfigCommand, handleConsolidateCommand, handleCostsCommand, handleCouncilCommand, handleCurateCommand, handleDarkMatterCommand, handleDeepDiveCommand, handleDeepResearchCommand, getPluginConfigDir, getPluginCachePaths, getPluginLockFilePaths, handleDiagnoseCommand, handleDoctorCommand, handleEvidenceCommand, handleEvidenceSummaryCommand, handleExportCommand, handleFullAutoCommand, handleGateAuditCommand, handleGateStatsCommand, handleHandoffCommand, handleHistoryCommand, handleKnowledgeQuarantineCommand, handleKnowledgeRestoreCommand, handleKnowledgeMigrateCommand, handleKnowledgeListCommand, handleKnowledgeUnactionableCommand, handleKnowledgeRetryHardeningCommand, handleLearningCommand, handleLinkCommand, handleMemoryCommand, handleMemoryStatusCommand, handleMemoryValueLogCommand, handleMemoryMigrateCommand, handleMemoryImportCommand, handleMemoryExportCommand, handlePlanCommand, handlePreflightCommand, handlePromoteCommand, handleQaGatesCommand, handleResetCommand, handleResetSessionCommand, handleRetrieveCommand, handleRollbackCommand, handleSddStatusCommand, handleSddValidateCommand, handleSddProjectCommand, handleSddCommand, handleSimulateCommand, handleSpecifyCommand, handleStatusCommand, handleSyncPlanCommand, handleTurboCommand, handleUnlinkCommand, handleWriteRetroCommand, handleHelpCommand, COMMAND_REGISTRY, VALID_COMMANDS, _internals58 as _internals2, resolveCommand };