opencode-swarm 7.126.0 → 7.126.2

package/.opencode/skills/swarm-pr-feedback/SKILL.md

@@ -139,8 +139,11 @@ tree:
   supersedes your planned fixes, and prefer the parallel work if it's more
   comprehensive (more tests, better edge coverage, clearer error handling).
   Abort your rebase, take the remote state, then add minor improvements on top.
-- Verify the working tree is clean first (`git status --porcelain`). If uncommitted
-  changes exist, stash them or abort to prevent data loss.
+- Verify the working tree is clean first (`git status --porcelain`). If tracked
+  changes exist, call `prepare_pr_workflow_checkout` with every explicit dirty
+  tracked path. It creates an auditable, path-scoped stash and returns its
+  recovery command. Do not issue `git stash` through shell. The controller never
+  stashes untracked files; move or remove those manually, or abort the checkout.
 - **Check out the head branch locally.** Feedback verification reads the working-tree
   filesystem (`Read`/`Glob`/`Grep`), and fixes must land on the PR branch — without a
   checkout you would verify and patch the base branch's code instead. Record the
@@ -203,20 +206,25 @@ for the Fix Planning step.
 
 ## Pre-flight: Scope Discipline
 
-The following `save_plan` / `declare_scope` mechanics apply only when those
-plugin tools are available. In other repositories or runtimes, use the native
-scope controller; if none exists, put exact allowed files and non-goals in the
-delegation and verify the resulting diff mechanically. Never bypass an
-available scope controller merely to reduce ceremony.
-
-`declare_scope({ taskId, files })` enforces that the delegated coder agent may only modify the declared files. The enforcement requires an active `.swarm/plan.json` — calling `declare_scope` in a feedback-closure run (which does not go through `save_plan`) rejects with "No plan found."
-
-**When to use `declare_scope` (preferred):** any feedback round that touches 2+ files, OR any feedback round where the file scope is not 100% obvious from the prompt. Before delegating, save a minimal plan via `save_plan` with a single phase containing the feedback-closure tasks, then call `declare_scope` per task with the exact file list.
-
-**Carve-out for direct Task delegation:** 1-file, single-function changes where the file path appears verbatim in the coder's prompt may use direct `Task(subagent_type="<coder>", ...)` delegation without `declare_scope`, where `<coder>` is the active swarm's coder agent (e.g. `coder`, or `paid_coder` when the swarm id is `paid`). This is a narrow exception; the orchestrator is responsible for verifying the scope is unambiguous.
-→ REQUIRED: even under this carve-out, the direct Task dispatch MUST contain a literal `ACCEPTANCE:` line — resolve per ACCEPTANCE FIELD RESOLUTION in your system prompt (one-line task-derived DONE restatement for the feedback fix, since feedback-closure runs typically have no fr_refs). A missing line is BLOCKED by ACCEPTANCE_FIELD_REQUIRED.
-
-**Anti-pattern:** do not use `Task` delegation for multi-file feedback fixes just to skip `save_plan` — the loss of scope discipline is not worth the saved ceremony.
+When the plugin's mechanical controller is available, every coder Task must be
+preceded by `prepare_pr_feedback_scope({ task_id, files })`. The controller is
+available only after the immutable feedback-verification lanes have settled and
+binds the exact file set to the current feedback revision, parent session, and
+next matching Task call. The coder prompt must use the same numeric `task_id`,
+contain matching `FILE:` directives, and include a literal `ACCEPTANCE:` line.
+Once a Task consumes that scope, its `task_id` is immutable for the current
+feedback revision. Any retry must prepare and dispatch a fresh nested numeric
+task identity (for example `1.1.1`), never re-declare the consumed ID.
+
+Do not create a synthetic `save_plan` merely to authorize feedback work, and do
+not use `declare_scope`; those tools belong to the normal implementation-plan
+lifecycle. There is no one-file or single-function carve-out from the dedicated
+PR-feedback scope controller.
+
+In runtimes without this controller, use the native scope mechanism. If none
+exists, put exact allowed files and non-goals in the delegation and verify the
+resulting diff mechanically. Never bypass an available scope controller merely
+to reduce ceremony.
 
 ## Intake Surfaces
 

package/.opencode/skills/swarm-pr-review/SKILL.md

@@ -24,11 +24,11 @@ without running a fresh broad review.
 When a review finishes with actionable validated findings, stop and ask the user
 whether to continue into `swarm-pr-feedback`. Do not auto-dispatch fix work from
 `PR_REVIEW`. Instead, write a handoff artifact under
-`.swarm/pr-review/<run_id>/feedback-handoff.md` (or `.json`) and include the
-exact continuation prompt:
+`.swarm/pr-review/<run_id>/feedback-handoff.json` with `write_pr_review_artifact`
+and include the exact continuation prompt:
 
 ```text
-/swarm pr-feedback <PR_URL> continue from .swarm/pr-review/<run_id>/feedback-handoff.md
+/swarm pr-feedback <PR_URL> continue from .swarm/pr-review/<run_id>/feedback-handoff.json
 ```
 
 `<run_id>` is a stable identifier for this review run, such as
@@ -136,7 +136,7 @@ If scope cannot be determined, review the narrowest safe scope available and sta
 
 Before launching explorers (Phase 3), confirm the PR branch refs are available:
 - If `head_ref` is a remote branch that is not checked out locally, fetch it via `git fetch origin <head_ref>`
-- **Check out the head branch locally.** Explorer agents read files from the working tree, not from git history — passing the commit range in the delegation prompt is not sufficient because `Read` / `Glob` / `Grep` tools operate on the filesystem. Without a checkout, explorers silently read the base branch's version of changed files and produce invalid candidates. **Before checking out, verify the working tree is clean (`git status --porcelain`). If uncommitted changes exist, stash them or abort the checkout to prevent data loss.**
+- **Check out the head branch locally.** Explorer agents read files from the working tree, not from git history — passing the commit range in the delegation prompt is not sufficient because `Read` / `Glob` / `Grep` tools operate on the filesystem. Without a checkout, explorers silently read the base branch's version of changed files and produce invalid candidates. **Before checking out, verify the working tree is clean (`git status --porcelain`). If tracked changes exist, call `prepare_pr_workflow_checkout` with every explicit dirty tracked path. It creates an auditable, path-scoped stash and returns its recovery command. Do not issue `git stash` through shell. The controller never stashes untracked files; move or remove those manually, or abort the checkout.**
 - Explicitly pass the verified merge-base range (`base_sha...pr_head_sha`) in every explorer delegation so explorers inspect exactly the controller-bound PR diff. Include `base_ref` only as the live ref used to recompute `base_sha`; do not substitute a two-dot branch-tip range.
 
 If refs cannot be fetched or checked out, state the limitation in the context pack.
@@ -459,10 +459,10 @@ The context pack must include, when available:
 
 ## Review Finding Persistence
 
-Do not rely on conversation context to preserve review findings. Create a run
-artifact under `.swarm/pr-review/<run_id>/findings.jsonl` when file writes are
-allowed, or under `.swarm/evidence/pr-review-<run_id>-findings.jsonl` when the
-review already uses the evidence tree.
+Do not rely on conversation context to preserve review findings. Use
+`write_pr_review_artifact` with `kind: "findings"`; the controller creates and
+appends `.swarm/pr-review/<run_id>/findings.jsonl` without granting generic
+write authority over `.swarm/`.
 
 Each persisted finding record must include at least:
 
@@ -484,11 +484,14 @@ Minimum field contract:
 Persist after every major validation boundary:
 
 1. **Post-explorer:** after Phase 3/4 candidate parsing and before reviewer
-   dispatch, write all candidates as `PENDING` with their lane provenance.
-2. **Post-reviewer:** after Phase 6 reviewer validation, update each reviewed
+   dispatch, call `write_pr_review_artifact` with `boundary: "post_explorer"`
+   and all candidates as `PENDING` with their lane provenance.
+2. **Post-reviewer:** after Phase 6 reviewer validation, call the controller
+   with `boundary: "post_reviewer"` and update each reviewed
    record to `CONFIRMED`, `DISPROVED`, `PRE_EXISTING`, or keep `PENDING` with a
    concrete `next_action` if more evidence is required.
-3. **Post-critic:** after Phase 8 critic challenge, update final status,
+3. **Post-critic:** after Phase 8 critic challenge, call the controller with
+   `boundary: "post_critic"` and update final status,
    severity/action notes in `evidence`, and final reporting or handoff action.
 
 Resume/reload procedure:
@@ -1376,7 +1379,9 @@ Explain the recommendation in one short paragraph and list required actions befo
 ## Feedback handoff
 
 When the review produced actionable validated findings or operational blockers,
-include:
+call `write_pr_review_artifact` with `kind: "handoff"`. The controller writes
+`.swarm/pr-review/<run_id>/feedback-handoff.json` only when its finding IDs
+exactly match the latest confirmed `handoff_to_feedback` records. Include:
 
 - the handoff artifact path,
 - the preserved finding IDs and provenance that `swarm-pr-feedback` must carry
@@ -1387,7 +1392,7 @@ include:
 Use this exact continuation prompt format:
 
 ```text
-/swarm pr-feedback <PR_URL> continue from .swarm/pr-review/<run_id>/feedback-handoff.md
+/swarm pr-feedback <PR_URL> continue from .swarm/pr-review/<run_id>/feedback-handoff.json
 ```
 
 ---
@@ -1435,4 +1440,3 @@ unproductive wakes, and the only exits are:
 Abort is a recovery tool, not a coverage shortcut. Use it only when the
 bind/checkout path is genuinely unreachable; never use it to skip a
 coverage obligation that is merely expensive or inconvenient.
-

package/dist/cli/{config-doctor-akxywx0c.js → config-doctor-mfx27331.js}

@@ -12,8 +12,8 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-jt7hnr7q.js";
-import"./index-r1gdkn2d.js";
+} from "./index-3xd9a2g7.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{core-v1kp7anb.js → core-wg3re04e.js}

@@ -14,7 +14,7 @@ import {
   resolveWorktreeBaseDir,
   shortenWorktreePath,
   writeLaneProfileToDiskReal
-} from "./index-g4ef4v3m.js";
+} from "./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{curation-policy-dptr1rfe.js → curation-policy-n944aq62.js}

@@ -4,9 +4,9 @@ import {
   authorizeCuration,
   buildConfigFingerprintInput,
   readCohortConfigFingerprint
-} from "./index-mgrsx5hn.js";
+} from "./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-2bnfwmk3.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{curator-llm-factory-r648jn8e.js → curator-llm-factory-0rf29gfq.js}

@@ -1,38 +1,38 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-0ff5cm9j.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-d88y17ht.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-yfzn5r9s.js";
-import"./index-bcgfhxzv.js";
-import"./index-cdx337js.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+import"./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-a1c9az5e.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-r1gdkn2d.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{curator-23hynz78.js → curator-qfh9xty4.js}

@@ -14,38 +14,38 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-0ff5cm9j.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-d88y17ht.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-yfzn5r9s.js";
-import"./index-bcgfhxzv.js";
-import"./index-cdx337js.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+import"./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-a1c9az5e.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-r1gdkn2d.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{guardrail-explain-6atsd4vr.js → guardrail-explain-jsrjqps1.js}

@@ -1,39 +1,39 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-y4ry07h8.js";
-import"./index-0ff5cm9j.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-z8ftpav0.js";
+import"./index-d88y17ht.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-yfzn5r9s.js";
-import"./index-bcgfhxzv.js";
-import"./index-cdx337js.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+import"./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-a1c9az5e.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-r1gdkn2d.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{guardrail-log-222xyxfp.js → guardrail-log-61gya05m.js}

@@ -1,9 +1,9 @@
 // @bun
 import {
   handleGuardrailLog
-} from "./index-qzkcy22e.js";
-import"./index-dezgmvtw.js";
-import"./index-r1gdkn2d.js";
+} from "./index-bf76q8q7.js";
+import"./index-gxw20m1d.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{hive-promoter-bnkhzd46.js → hive-promoter-ktt17fyf.js}

@@ -7,40 +7,40 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-0ff5cm9j.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-d88y17ht.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-yfzn5r9s.js";
-import"./index-bcgfhxzv.js";
-import"./index-cdx337js.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+} from "./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-a1c9az5e.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-r1gdkn2d.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{index-jt7hnr7q.js → index-3xd9a2g7.js}

@@ -8,7 +8,7 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-r1gdkn2d.js";
+} from "./index-vcqwhe9d.js";
 import {
   log
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-gnvg72y1.js → index-4ff0x4cg.js}

@@ -136,6 +136,7 @@ var SCOPES_DIR = ".swarm/scopes";
 var MAX_FILES_PER_SCOPE = 1e4;
 var MAX_PLAN_BYTES = 10 * 1024 * 1024;
 var MAX_SCOPE_BYTES = 2 * 1024 * 1024;
+var MAX_BINDING_FILES_TO_SCAN = 1e4;
 var WINDOWS_RESERVED = new Set([
   "CON",
   "PRN",
@@ -432,6 +433,83 @@ function resolveAuthorizedScopeBindingForSession(input) {
   }
   return matches[0] ?? null;
 }
+function readPrFeedbackBindingFile(directory, filePath, activeSessionId, taskId) {
+  try {
+    const leaf = fs2.lstatSync(filePath);
+    if (!leaf.isFile() || leaf.isSymbolicLink())
+      return null;
+    if (normalizePathForComparison(fs2.realpathSync(filePath)) !== normalizePathForComparison(filePath))
+      return null;
+  } catch {
+    return null;
+  }
+  const nofollow = fs2.constants.O_NOFOLLOW ?? 0;
+  let fd;
+  try {
+    fd = fs2.openSync(filePath, fs2.constants.O_RDONLY | nofollow);
+  } catch {
+    return null;
+  }
+  let raw = "";
+  try {
+    const stat = fs2.fstatSync(fd);
+    if (!stat.isFile() || stat.size > MAX_SCOPE_BYTES)
+      return null;
+    const buffer = Buffer.alloc(stat.size);
+    fs2.readSync(fd, buffer, 0, stat.size, 0);
+    raw = buffer.toString("utf8");
+  } catch {
+    return null;
+  } finally {
+    try {
+      fs2.closeSync(fd);
+    } catch {}
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  const workspaceIdentity = canonicalWorkspaceIdentity(directory);
+  const files = Array.isArray(parsed.files) ? normalizeScopeFiles(parsed.files.filter((file) => typeof file === "string")) : null;
+  const now = Date.now();
+  if (parsed.version !== 2 || parsed.source !== "pr_feedback" || !workspaceIdentity || parsed.workspaceIdentity !== workspaceIdentity || !isSafeTaskId(parsed.taskId ?? "") || taskId !== undefined && parsed.taskId !== taskId || parsed.ownerSessionId !== activeSessionId || parsed.activation !== "active" || typeof parsed.dispatchCallId !== "string" || !parsed.dispatchCallId || parsed.ownerMessageId !== parsed.dispatchCallId || typeof parsed.parentOwnerSessionId !== "string" || !parsed.parentOwnerSessionId || parsed.ownerSessionId === parsed.parentOwnerSessionId || parsed.parentCallId !== parsed.dispatchCallId || parsed.workflowSessionId !== parsed.parentOwnerSessionId || typeof parsed.workflowRevisionDigest !== "string" || !parsed.workflowRevisionDigest || parsed.planId !== `pr-feedback:${parsed.workflowSessionId}` || parsed.planStructureHash !== parsed.workflowRevisionDigest || typeof parsed.declaredAt !== "number" || parsed.declaredAt > now || typeof parsed.expiresAt !== "number" || parsed.expiresAt <= now || !files)
+    return null;
+  const expectedPath = getBindingFilePath(directory, parsed.taskId, activeSessionId);
+  if (normalizePathForComparison(expectedPath) !== normalizePathForComparison(filePath))
+    return null;
+  return { ...parsed, files };
+}
+function resolveAuthorizedPrFeedbackScopeBindingFromDisk(input) {
+  if (!input.activeSessionId.trim())
+    return null;
+  const scopesDir = getScopesDir(input.directory);
+  if (!isScopesDirSafe(input.directory, scopesDir))
+    return null;
+  let candidates;
+  if (input.taskId) {
+    if (!isSafeTaskId(input.taskId))
+      return null;
+    candidates = [
+      getBindingFilePath(input.directory, input.taskId, input.activeSessionId)
+    ];
+  } else {
+    try {
+      const names = fs2.readdirSync(scopesDir);
+      if (names.length > MAX_BINDING_FILES_TO_SCAN)
+        return null;
+      candidates = names.filter((name) => name.startsWith("binding-") && name.endsWith(".json")).map((name) => path2.join(scopesDir, name));
+    } catch {
+      return null;
+    }
+  }
+  const matches = candidates.map((candidate) => readPrFeedbackBindingFile(input.directory, candidate, input.activeSessionId, input.taskId)).filter((binding) => binding !== null);
+  if (matches.length !== 1)
+    return null;
+  registerScopeBinding(matches[0]);
+  return matches[0];
+}
 async function atomicWrite(targetPath, content) {
   const tempPath = `${targetPath}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`;
   try {
@@ -561,4 +639,4 @@ function resolveScopeWithFallbacks(input) {
   return null;
 }
 
-export { MAX_PENDING_SCOPE_BINDINGS, clearScopeBindings, writeScopeToDisk, writeScopeBindingToDisk, readScopeBindingFromDisk, clearScopeBindingFromDisk, resolveAuthorizedScopeBinding, resolveAuthorizedScopeBindingForSession, readScopeFromDisk, readPlanScope, clearScopeForTask, clearAllScopes, resolveScopeWithFallbacks };
+export { MAX_PENDING_SCOPE_BINDINGS, clearScopeBindings, writeScopeToDisk, writeScopeBindingToDisk, readScopeBindingFromDisk, clearScopeBindingFromDisk, resolveAuthorizedScopeBinding, resolveAuthorizedScopeBindingForSession, resolveAuthorizedPrFeedbackScopeBindingFromDisk, readScopeFromDisk, readPlanScope, clearScopeForTask, clearAllScopes, resolveScopeWithFallbacks };

package/dist/cli/{index-68fpa7ff.js → index-5nq8dp63.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-y4ry07h8.js";
+} from "./index-z8ftpav0.js";
 import {
   handleGuardrailLog
-} from "./index-qzkcy22e.js";
+} from "./index-bf76q8q7.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -83,28 +83,28 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-0ff5cm9j.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-d88y17ht.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-yfzn5r9s.js";
-import"./index-bcgfhxzv.js";
-import"./index-cdx337js.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+import"./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-a1c9az5e.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
@@ -113,14 +113,14 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-r1gdkn2d.js";
+} from "./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{index-yfzn5r9s.js → index-7bxw3v5w.js}

@@ -2,18 +2,18 @@
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-kwnsatzq.js";
+} from "./index-88dt7c9z.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-2yd75hms.js";
+} from "./index-pb8ag9vg.js";
 import {
   effectiveRetrievalOutcomes,
   readKnowledgeCounterRollups
-} from "./index-2bnfwmk3.js";
+} from "./index-nqp13m5a.js";
 import {
   init_knowledge_types,
   isActiveStatus

package/dist/cli/{index-kwnsatzq.js → index-88dt7c9z.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-mgrsx5hn.js";
+} from "./index-gwss5btk.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,7 +9,7 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-2yd75hms.js";
+} from "./index-pb8ag9vg.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-q27bajqb.js";

package/dist/cli/{index-qzkcy22e.js → index-bf76q8q7.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-dezgmvtw.js";
+} from "./index-gxw20m1d.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";