opencode-swarm 7.126.3 → 7.126.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (38) hide show
  1. package/.opencode/skills/issue-tracer/scripts/trace-init.sh +20 -0
  2. package/dist/cli/{config-doctor-mfx27331.js → config-doctor-2admdwc2.js} +2 -2
  3. package/dist/cli/{curation-policy-n944aq62.js → curation-policy-82czah39.js} +2 -2
  4. package/dist/cli/{curator-jm9ehfkg.js → curator-5crbtfm1.js} +12 -12
  5. package/dist/cli/{curator-llm-factory-3cy0h9yw.js → curator-llm-factory-y24xw3j4.js} +12 -12
  6. package/dist/cli/{guardrail-explain-va0kj05m.js → guardrail-explain-3r26pm2s.js} +13 -13
  7. package/dist/cli/{guardrail-log-61gya05m.js → guardrail-log-7cychbgs.js} +3 -3
  8. package/dist/cli/{hive-promoter-h9c4kyv0.js → hive-promoter-9d2g1xf3.js} +12 -12
  9. package/dist/cli/{index-b16153py.js → index-0543dz3t.js} +14 -14
  10. package/dist/cli/{index-6t5sa6v0.js → index-0y19k18q.js} +2 -2
  11. package/dist/cli/{index-nqp13m5a.js → index-1mwdhq2p.js} +1 -1
  12. package/dist/cli/{index-gwss5btk.js → index-3ntrn97w.js} +1 -1
  13. package/dist/cli/{index-pb8ag9vg.js → index-72envp1b.js} +4 -4
  14. package/dist/cli/{index-vcqwhe9d.js → index-7ttstfv6.js} +25 -3
  15. package/dist/cli/{index-bf76q8q7.js → index-8etcyr9r.js} +1 -1
  16. package/dist/cli/{index-7bxw3v5w.js → index-c4mcheyz.js} +3 -3
  17. package/dist/cli/{index-3xd9a2g7.js → index-cpssctv1.js} +1 -1
  18. package/dist/cli/{index-c48dvb6j.js → index-edv27z4p.js} +2 -2
  19. package/dist/cli/{index-f97dm6tz.js → index-ff3j65em.js} +5 -5
  20. package/dist/cli/{index-pf3xae4s.js → index-gn62e04k.js} +1 -1
  21. package/dist/cli/{index-5n868tw8.js → index-hczdkknj.js} +136 -124
  22. package/dist/cli/{index-gf9cxvp0.js → index-hv2p03f3.js} +7 -19
  23. package/dist/cli/{index-88dt7c9z.js → index-ns62nv6t.js} +2 -2
  24. package/dist/cli/{index-gxw20m1d.js → index-v4n224r1.js} +1 -1
  25. package/dist/cli/index.js +12 -12
  26. package/dist/cli/{knowledge-escalator-nna0zec3.js → knowledge-escalator-b3k4b8pk.js} +3 -3
  27. package/dist/cli/{knowledge-events-7k82xk36.js → knowledge-events-4z5rkefv.js} +1 -1
  28. package/dist/cli/{knowledge-store-efvtng9t.js → knowledge-store-c0t16yr4.js} +1 -1
  29. package/dist/cli/{knowledge-validator-jh93eagj.js → knowledge-validator-cs33ws57.js} +4 -4
  30. package/dist/cli/{scan-cursor-cydz8d9q.js → scan-cursor-rgnarf67.js} +2 -2
  31. package/dist/cli/{schema-fa033pqw.js → schema-2x7wsb0n.js} +1 -1
  32. package/dist/cli/{skill-generator-8v463kj7.js → skill-generator-e8c2r816.js} +5 -5
  33. package/dist/config/loader.d.ts +1 -3
  34. package/dist/config/schema.d.ts +4 -4
  35. package/dist/index.js +252 -252
  36. package/dist/tools/test-runner.d.ts +12 -2
  37. package/dist/utils/path-security.d.ts +2 -0
  38. package/package.json +1 -1
@@ -15,6 +15,22 @@ set -eu
15
15
  # strict ASCII-only ranges regardless of the invoking environment.
16
16
  export LC_ALL=C
17
17
 
18
+ # Native Git for Windows prints drive-qualified paths (C:/...) even when it is
19
+ # invoked from MSYS/Git Bash. Coreutils do not consistently interpret that form
20
+ # as absolute in restricted/non-login shells, so normalize Git-reported paths
21
+ # before passing them to cd, mkdir, or redirection. POSIX hosts are unchanged.
22
+ to_shell_path() {
23
+ case "$(uname -s 2>/dev/null || true)" in
24
+ MINGW* | MSYS* | CYGWIN*)
25
+ if command -v cygpath >/dev/null 2>&1; then
26
+ cygpath -u "$1"
27
+ return
28
+ fi
29
+ ;;
30
+ esac
31
+ printf '%s\n' "$1"
32
+ }
33
+
18
34
  slug="${1:-}"
19
35
  if [ -z "$slug" ]; then
20
36
  echo "usage: trace-init.sh <issue-slug>" >&2
@@ -37,6 +53,7 @@ root="$(git rev-parse --show-toplevel 2>/dev/null)" || {
37
53
  echo "trace-init: not inside a git work tree — run this from within the target repository" >&2
38
54
  exit 2
39
55
  }
56
+ root="$(to_shell_path "$root")"
40
57
  root_real="$(cd "$root" && pwd -P)"
41
58
  trace_dir="$root/.agents/issue-traces/$slug"
42
59
 
@@ -88,10 +105,13 @@ if [ -z "$git_dir" ]; then
88
105
  echo "trace-init: could not resolve the git directory" >&2
89
106
  exit 2
90
107
  }
108
+ git_dir="$(to_shell_path "$git_dir")"
91
109
  case "$git_dir" in
92
110
  /*) ;; # already absolute
93
111
  *) git_dir="$(pwd)/$git_dir" ;;
94
112
  esac
113
+ else
114
+ git_dir="$(to_shell_path "$git_dir")"
95
115
  fi
96
116
  exclude_file="$git_dir/info/exclude"
97
117
  entry='.agents/issue-traces/'
@@ -12,8 +12,8 @@ import {
12
12
  shouldRunOnStartup,
13
13
  writeBackupArtifact,
14
14
  writeDoctorArtifact
15
- } from "./index-3xd9a2g7.js";
16
- import"./index-vcqwhe9d.js";
15
+ } from "./index-cpssctv1.js";
16
+ import"./index-7ttstfv6.js";
17
17
  import"./index-bk5tah7q.js";
18
18
  import"./index-z6xqpmqg.js";
19
19
  import"./index-zjygnfay.js";
@@ -4,9 +4,9 @@ import {
4
4
  authorizeCuration,
5
5
  buildConfigFingerprintInput,
6
6
  readCohortConfigFingerprint
7
- } from "./index-gwss5btk.js";
7
+ } from "./index-3ntrn97w.js";
8
8
  import"./index-rtry5xyf.js";
9
- import"./index-nqp13m5a.js";
9
+ import"./index-1mwdhq2p.js";
10
10
  import"./index-ae75rja9.js";
11
11
  import"./index-q27bajqb.js";
12
12
  import"./index-zgwm4ryv.js";
@@ -14,31 +14,31 @@ import {
14
14
  runCuratorInit,
15
15
  runCuratorPhase,
16
16
  writeCuratorSummary
17
- } from "./index-5n868tw8.js";
18
- import"./index-gxw20m1d.js";
19
- import"./index-3xd9a2g7.js";
17
+ } from "./index-hczdkknj.js";
18
+ import"./index-v4n224r1.js";
19
+ import"./index-cpssctv1.js";
20
20
  import"./index-kk1scggc.js";
21
21
  import"./index-4905hd2m.js";
22
22
  import"./index-134d35c1.js";
23
23
  import"./index-6n2jpz7x.js";
24
- import"./index-7bxw3v5w.js";
25
- import"./index-f97dm6tz.js";
26
- import"./index-pf3xae4s.js";
24
+ import"./index-c4mcheyz.js";
25
+ import"./index-ff3j65em.js";
26
+ import"./index-gn62e04k.js";
27
27
  import"./index-vxv732ex.js";
28
28
  import"./index-c8s9a3zh.js";
29
29
  import"./index-9ss2m4rs.js";
30
30
  import"./index-23zsx7dm.js";
31
- import"./index-88dt7c9z.js";
32
- import"./index-gwss5btk.js";
31
+ import"./index-ns62nv6t.js";
32
+ import"./index-3ntrn97w.js";
33
33
  import"./index-rtry5xyf.js";
34
- import"./index-pb8ag9vg.js";
35
- import"./index-nqp13m5a.js";
34
+ import"./index-72envp1b.js";
35
+ import"./index-1mwdhq2p.js";
36
36
  import"./index-ae75rja9.js";
37
37
  import"./index-q27bajqb.js";
38
- import"./index-gf9cxvp0.js";
38
+ import"./index-hv2p03f3.js";
39
39
  import"./index-k5jrywpr.js";
40
40
  import"./index-n832052r.js";
41
- import"./index-vcqwhe9d.js";
41
+ import"./index-7ttstfv6.js";
42
42
  import"./index-bk5tah7q.js";
43
43
  import"./index-8fwhhayc.js";
44
44
  import"./index-q1exe2b3.js";
@@ -1,31 +1,31 @@
1
1
  // @bun
2
2
  import {
3
3
  createCuratorLLMDelegate
4
- } from "./index-5n868tw8.js";
5
- import"./index-gxw20m1d.js";
6
- import"./index-3xd9a2g7.js";
4
+ } from "./index-hczdkknj.js";
5
+ import"./index-v4n224r1.js";
6
+ import"./index-cpssctv1.js";
7
7
  import"./index-kk1scggc.js";
8
8
  import"./index-4905hd2m.js";
9
9
  import"./index-134d35c1.js";
10
10
  import"./index-6n2jpz7x.js";
11
- import"./index-7bxw3v5w.js";
12
- import"./index-f97dm6tz.js";
13
- import"./index-pf3xae4s.js";
11
+ import"./index-c4mcheyz.js";
12
+ import"./index-ff3j65em.js";
13
+ import"./index-gn62e04k.js";
14
14
  import"./index-vxv732ex.js";
15
15
  import"./index-c8s9a3zh.js";
16
16
  import"./index-9ss2m4rs.js";
17
17
  import"./index-23zsx7dm.js";
18
- import"./index-88dt7c9z.js";
19
- import"./index-gwss5btk.js";
18
+ import"./index-ns62nv6t.js";
19
+ import"./index-3ntrn97w.js";
20
20
  import"./index-rtry5xyf.js";
21
- import"./index-pb8ag9vg.js";
22
- import"./index-nqp13m5a.js";
21
+ import"./index-72envp1b.js";
22
+ import"./index-1mwdhq2p.js";
23
23
  import"./index-ae75rja9.js";
24
24
  import"./index-q27bajqb.js";
25
- import"./index-gf9cxvp0.js";
25
+ import"./index-hv2p03f3.js";
26
26
  import"./index-k5jrywpr.js";
27
27
  import"./index-n832052r.js";
28
- import"./index-vcqwhe9d.js";
28
+ import"./index-7ttstfv6.js";
29
29
  import"./index-bk5tah7q.js";
30
30
  import"./index-8fwhhayc.js";
31
31
  import"./index-q1exe2b3.js";
@@ -1,32 +1,32 @@
1
1
  // @bun
2
2
  import {
3
3
  handleGuardrailExplain
4
- } from "./index-6t5sa6v0.js";
5
- import"./index-5n868tw8.js";
6
- import"./index-gxw20m1d.js";
7
- import"./index-3xd9a2g7.js";
4
+ } from "./index-0y19k18q.js";
5
+ import"./index-hczdkknj.js";
6
+ import"./index-v4n224r1.js";
7
+ import"./index-cpssctv1.js";
8
8
  import"./index-kk1scggc.js";
9
9
  import"./index-4905hd2m.js";
10
10
  import"./index-134d35c1.js";
11
11
  import"./index-6n2jpz7x.js";
12
- import"./index-7bxw3v5w.js";
13
- import"./index-f97dm6tz.js";
14
- import"./index-pf3xae4s.js";
12
+ import"./index-c4mcheyz.js";
13
+ import"./index-ff3j65em.js";
14
+ import"./index-gn62e04k.js";
15
15
  import"./index-vxv732ex.js";
16
16
  import"./index-c8s9a3zh.js";
17
17
  import"./index-9ss2m4rs.js";
18
18
  import"./index-23zsx7dm.js";
19
- import"./index-88dt7c9z.js";
20
- import"./index-gwss5btk.js";
19
+ import"./index-ns62nv6t.js";
20
+ import"./index-3ntrn97w.js";
21
21
  import"./index-rtry5xyf.js";
22
- import"./index-pb8ag9vg.js";
23
- import"./index-nqp13m5a.js";
22
+ import"./index-72envp1b.js";
23
+ import"./index-1mwdhq2p.js";
24
24
  import"./index-ae75rja9.js";
25
25
  import"./index-q27bajqb.js";
26
- import"./index-gf9cxvp0.js";
26
+ import"./index-hv2p03f3.js";
27
27
  import"./index-k5jrywpr.js";
28
28
  import"./index-n832052r.js";
29
- import"./index-vcqwhe9d.js";
29
+ import"./index-7ttstfv6.js";
30
30
  import"./index-bk5tah7q.js";
31
31
  import"./index-8fwhhayc.js";
32
32
  import"./index-q1exe2b3.js";
@@ -1,9 +1,9 @@
1
1
  // @bun
2
2
  import {
3
3
  handleGuardrailLog
4
- } from "./index-bf76q8q7.js";
5
- import"./index-gxw20m1d.js";
6
- import"./index-vcqwhe9d.js";
4
+ } from "./index-8etcyr9r.js";
5
+ import"./index-v4n224r1.js";
6
+ import"./index-7ttstfv6.js";
7
7
  import"./index-bk5tah7q.js";
8
8
  import"./index-z6xqpmqg.js";
9
9
  import"./index-zjygnfay.js";
@@ -7,33 +7,33 @@ import {
7
7
  isHiveEligible,
8
8
  promoteFromSwarm,
9
9
  promoteToHive
10
- } from "./index-5n868tw8.js";
11
- import"./index-gxw20m1d.js";
12
- import"./index-3xd9a2g7.js";
10
+ } from "./index-hczdkknj.js";
11
+ import"./index-v4n224r1.js";
12
+ import"./index-cpssctv1.js";
13
13
  import"./index-kk1scggc.js";
14
14
  import"./index-4905hd2m.js";
15
15
  import"./index-134d35c1.js";
16
16
  import"./index-6n2jpz7x.js";
17
- import"./index-7bxw3v5w.js";
18
- import"./index-f97dm6tz.js";
19
- import"./index-pf3xae4s.js";
17
+ import"./index-c4mcheyz.js";
18
+ import"./index-ff3j65em.js";
19
+ import"./index-gn62e04k.js";
20
20
  import"./index-vxv732ex.js";
21
21
  import"./index-c8s9a3zh.js";
22
22
  import"./index-9ss2m4rs.js";
23
23
  import"./index-23zsx7dm.js";
24
- import"./index-88dt7c9z.js";
25
- import"./index-gwss5btk.js";
24
+ import"./index-ns62nv6t.js";
25
+ import"./index-3ntrn97w.js";
26
26
  import"./index-rtry5xyf.js";
27
27
  import {
28
28
  resolveHiveKnowledgePath
29
- } from "./index-pb8ag9vg.js";
30
- import"./index-nqp13m5a.js";
29
+ } from "./index-72envp1b.js";
30
+ import"./index-1mwdhq2p.js";
31
31
  import"./index-ae75rja9.js";
32
32
  import"./index-q27bajqb.js";
33
- import"./index-gf9cxvp0.js";
33
+ import"./index-hv2p03f3.js";
34
34
  import"./index-k5jrywpr.js";
35
35
  import"./index-n832052r.js";
36
- import"./index-vcqwhe9d.js";
36
+ import"./index-7ttstfv6.js";
37
37
  import"./index-bk5tah7q.js";
38
38
  import"./index-8fwhhayc.js";
39
39
  import"./index-q1exe2b3.js";
@@ -1,10 +1,10 @@
1
1
  // @bun
2
2
  import {
3
3
  handleGuardrailExplain
4
- } from "./index-6t5sa6v0.js";
4
+ } from "./index-0y19k18q.js";
5
5
  import {
6
6
  handleGuardrailLog
7
- } from "./index-bf76q8q7.js";
7
+ } from "./index-8etcyr9r.js";
8
8
  import {
9
9
  COMMAND_REGISTRY,
10
10
  SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -83,28 +83,28 @@ import {
83
83
  handleWriteRetroCommand,
84
84
  normalizeSwarmCommandInput,
85
85
  resolveCommand
86
- } from "./index-5n868tw8.js";
87
- import"./index-gxw20m1d.js";
88
- import"./index-3xd9a2g7.js";
86
+ } from "./index-hczdkknj.js";
87
+ import"./index-v4n224r1.js";
88
+ import"./index-cpssctv1.js";
89
89
  import"./index-kk1scggc.js";
90
90
  import"./index-4905hd2m.js";
91
91
  import"./index-134d35c1.js";
92
92
  import"./index-6n2jpz7x.js";
93
- import"./index-7bxw3v5w.js";
94
- import"./index-f97dm6tz.js";
95
- import"./index-pf3xae4s.js";
93
+ import"./index-c4mcheyz.js";
94
+ import"./index-ff3j65em.js";
95
+ import"./index-gn62e04k.js";
96
96
  import"./index-vxv732ex.js";
97
97
  import"./index-c8s9a3zh.js";
98
98
  import"./index-9ss2m4rs.js";
99
99
  import"./index-23zsx7dm.js";
100
- import"./index-88dt7c9z.js";
101
- import"./index-gwss5btk.js";
100
+ import"./index-ns62nv6t.js";
101
+ import"./index-3ntrn97w.js";
102
102
  import"./index-rtry5xyf.js";
103
- import"./index-pb8ag9vg.js";
104
- import"./index-nqp13m5a.js";
103
+ import"./index-72envp1b.js";
104
+ import"./index-1mwdhq2p.js";
105
105
  import"./index-ae75rja9.js";
106
106
  import"./index-q27bajqb.js";
107
- import"./index-gf9cxvp0.js";
107
+ import"./index-hv2p03f3.js";
108
108
  import"./index-k5jrywpr.js";
109
109
  import"./index-n832052r.js";
110
110
  import {
@@ -113,7 +113,7 @@ import {
113
113
  init_constants,
114
114
  init_schema,
115
115
  stripKnownSwarmPrefix
116
- } from "./index-vcqwhe9d.js";
116
+ } from "./index-7ttstfv6.js";
117
117
  import"./index-bk5tah7q.js";
118
118
  import"./index-8fwhhayc.js";
119
119
  import"./index-q1exe2b3.js";
@@ -12,14 +12,14 @@ import {
12
12
  detectPosixWrites,
13
13
  detectWindowsWrites,
14
14
  resolveWriteTargets
15
- } from "./index-5n868tw8.js";
15
+ } from "./index-hczdkknj.js";
16
16
  import {
17
17
  checkFileAuthority,
18
18
  classifyFile,
19
19
  isInDeclaredScope,
20
20
  redactPath,
21
21
  redactShellCommand
22
- } from "./index-gxw20m1d.js";
22
+ } from "./index-v4n224r1.js";
23
23
 
24
24
  // src/services/guardrail-explain-service.ts
25
25
  import path from "path";
@@ -608,7 +608,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
608
608
  deltas.push({ id, delta });
609
609
  }
610
610
  if (deltas.length > 0) {
611
- const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-efvtng9t.js");
611
+ const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-c0t16yr4.js");
612
612
  await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
613
613
  }
614
614
  return {
@@ -4,7 +4,7 @@ import {
4
4
  } from "./index-rtry5xyf.js";
5
5
  import {
6
6
  readKnowledgeEvents
7
- } from "./index-nqp13m5a.js";
7
+ } from "./index-1mwdhq2p.js";
8
8
  import {
9
9
  isLinked,
10
10
  readLinkPointer,
@@ -650,7 +650,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
650
650
  const recovered = touched.filter((e) => e.confidence > CONFIDENCE_FLOOR + FLOOR_EPSILON && e.confidence_floor_demoted);
651
651
  if (atFloor.length === 0 && recovered.length === 0)
652
652
  return;
653
- const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-7k82xk36.js");
653
+ const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-4z5rkefv.js");
654
654
  const rollups = await readKnowledgeCounterRollups(directory);
655
655
  const flagIds = new Set;
656
656
  for (const e of atFloor) {
@@ -717,11 +717,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
717
717
  });
718
718
  }
719
719
  if (action === "quarantine" && toQuarantine.length > 0) {
720
- const { quarantineEntry } = await import("./knowledge-validator-jh93eagj.js");
721
- const { KnowledgeConfigSchema } = await import("./schema-fa033pqw.js");
720
+ const { quarantineEntry } = await import("./knowledge-validator-cs33ws57.js");
721
+ const { KnowledgeConfigSchema } = await import("./schema-2x7wsb0n.js");
722
722
  let config;
723
723
  try {
724
- const { loadPluginConfigWithMeta } = await import("./index-c48dvb6j.js");
724
+ const { loadPluginConfigWithMeta } = await import("./index-edv27z4p.js");
725
725
  const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
726
726
  config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
727
727
  } catch {
@@ -1199,6 +1199,23 @@ function resolveGuardrailsConfig(config, agentName) {
1199
1199
  };
1200
1200
  return resolved;
1201
1201
  }
1202
+ function rejectCheckpointPrototypePollution(raw) {
1203
+ if (!raw || typeof raw !== "object" || Array.isArray(raw))
1204
+ return raw;
1205
+ try {
1206
+ if (Object.getPrototypeOf(raw) !== Object.prototype) {
1207
+ return { [INVALID_CHECKPOINT_PROTO_FIELD]: true };
1208
+ }
1209
+ for (const key of Reflect.ownKeys(raw)) {
1210
+ if (typeof key === "string" && FORBIDDEN_CHECKPOINT_CONFIG_KEYS.has(key)) {
1211
+ return { [INVALID_CHECKPOINT_PROTO_FIELD]: true };
1212
+ }
1213
+ }
1214
+ } catch {
1215
+ return { [INVALID_CHECKPOINT_PROTO_FIELD]: true };
1216
+ }
1217
+ return raw;
1218
+ }
1202
1219
  function resolveExternalSkillsConfig(input) {
1203
1220
  if (input === undefined || input === null || typeof input !== "object" || Array.isArray(input)) {
1204
1221
  return { ...DEFAULT_EXTERNAL_SKILLS_CONFIG };
@@ -1218,7 +1235,7 @@ function resolveExternalSkillsConfig(input) {
1218
1235
  };
1219
1236
  return merged;
1220
1237
  }
1221
- var _internals, SEPARATORS, CANONICAL_ROLES_LONGEST_FIRST, CANONICAL_ROLES_SET, AgentReasoningConfigSchema, AgentThinkingConfigSchema, FALLBACK_MODELS_MAX = 3, AgentOverrideConfigSchema, SwarmConfigSchema, ModelPricingConfigSchema, PricingConfigSchema, HooksConfigSchema, ScoringWeightsSchema, DecisionDecaySchema, TokenRatiosSchema, ScoringConfigSchema, ContextBudgetConfigSchema, EvidenceConfigSchema, GateFeatureSchema, PlaceholderScanConfigSchema, QualityBudgetConfigSchema, GATE_CONFIG_KNOWN_SECTION_KEYS, GateConfigSchema, PipelineConfigSchema, PhaseCompleteConfigSchema, SummaryConfigSchema, ReviewPassesConfigSchema, AutoReviewConfigSchema, AdversarialDetectionConfigSchema, AdversarialTestingConfigSchemaBase, AdversarialTestingConfigSchema, IntegrationAnalysisConfigSchema, DocsConfigSchema, DesignDocsConfigSchema, UIReviewConfigSchema, CompactionAdvisoryConfigSchema, LintConfigSchema, SecretscanConfigSchema, GuardrailsProfileSchema, DEFAULT_AGENT_PROFILES, DEFAULT_ARCHITECT_PROFILE, GuardrailsConfigSchema, WatchdogConfigSchema, SelfReviewConfigSchema, ToolFilterConfigSchema, PlanCursorConfigSchema, ContextMapConfigSchema, RepoGraphConfigSchema, CheckpointConfigSchema, ApplyPatchConfigSchema, AutomationModeSchema, AutomationCapabilitiesSchema, AutomationConfigSchemaBase, AutomationConfigSchema, KnowledgeConfigSchema, MemoryConfigSchema, CuratorConfigSchema, ArchitecturalSupervisionConfigSchema, KnowledgeApplicationConfigSchema, SkillPropagationAudienceSchema, SkillPropagationConfigSchema, SkillImproverConfigSchema, SkillsConfigSchema, SpecWriterConfigSchema, SlopDetectorConfigSchema, IncrementalVerifyConfigSchema, CompactionConfigSchema, PrmConfigSchema, AgentAuthorityRuleSchema, AuthorityConfigSchema, GeneralCouncilMemberConfigSchema, GeneralCouncilConfigSchema, CouncilConfigSchema, PrMonitorConfigSchema, ParallelizationConfigSchema, WorktreeIsolationConfigSchema, LeanTurboConfigSchema, EpicConfigSchema, StandardTurboConfigSchema, LeanTurboStrategyConfigSchema, TurboConfigSchema, ExternalSkillCandidateSourceTypeSchema, ExternalSkillCandidateEvaluationVerdictSchema, DiscoverySourceSchema, ExternalSkillCandidateSchema, ExternalSkillsConfigSchema, DEFAULT_EXTERNAL_SKILLS_CONFIG, DEFAULT_SKILLS_CONFIG, PluginConfigSchema;
1238
+ var _internals, SEPARATORS, CANONICAL_ROLES_LONGEST_FIRST, CANONICAL_ROLES_SET, AgentReasoningConfigSchema, AgentThinkingConfigSchema, FALLBACK_MODELS_MAX = 3, AgentOverrideConfigSchema, SwarmConfigSchema, ModelPricingConfigSchema, PricingConfigSchema, HooksConfigSchema, ScoringWeightsSchema, DecisionDecaySchema, TokenRatiosSchema, ScoringConfigSchema, ContextBudgetConfigSchema, EvidenceConfigSchema, GateFeatureSchema, PlaceholderScanConfigSchema, QualityBudgetConfigSchema, GATE_CONFIG_KNOWN_SECTION_KEYS, GateConfigSchema, PipelineConfigSchema, PhaseCompleteConfigSchema, SummaryConfigSchema, ReviewPassesConfigSchema, AutoReviewConfigSchema, AdversarialDetectionConfigSchema, AdversarialTestingConfigSchemaBase, AdversarialTestingConfigSchema, IntegrationAnalysisConfigSchema, DocsConfigSchema, DesignDocsConfigSchema, UIReviewConfigSchema, CompactionAdvisoryConfigSchema, LintConfigSchema, SecretscanConfigSchema, GuardrailsProfileSchema, DEFAULT_AGENT_PROFILES, DEFAULT_ARCHITECT_PROFILE, GuardrailsConfigSchema, WatchdogConfigSchema, SelfReviewConfigSchema, ToolFilterConfigSchema, PlanCursorConfigSchema, ContextMapConfigSchema, RepoGraphConfigSchema, INVALID_CHECKPOINT_PROTO_FIELD = "__swarm_invalid_checkpoint_proto__", FORBIDDEN_CHECKPOINT_CONFIG_KEYS, CheckpointConfigSchema, ApplyPatchConfigSchema, AutomationModeSchema, AutomationCapabilitiesSchema, AutomationConfigSchemaBase, AutomationConfigSchema, KnowledgeConfigSchema, MemoryConfigSchema, CuratorConfigSchema, ArchitecturalSupervisionConfigSchema, KnowledgeApplicationConfigSchema, SkillPropagationAudienceSchema, SkillPropagationConfigSchema, SkillImproverConfigSchema, SkillsConfigSchema, SpecWriterConfigSchema, SlopDetectorConfigSchema, IncrementalVerifyConfigSchema, CompactionConfigSchema, PrmConfigSchema, AgentAuthorityRuleSchema, AuthorityConfigSchema, GeneralCouncilMemberConfigSchema, GeneralCouncilConfigSchema, CouncilConfigSchema, PrMonitorConfigSchema, ParallelizationConfigSchema, WorktreeIsolationConfigSchema, LeanTurboConfigSchema, EpicConfigSchema, StandardTurboConfigSchema, LeanTurboStrategyConfigSchema, TurboConfigSchema, ExternalSkillCandidateSourceTypeSchema, ExternalSkillCandidateEvaluationVerdictSchema, DiscoverySourceSchema, ExternalSkillCandidateSchema, ExternalSkillsConfigSchema, DEFAULT_EXTERNAL_SKILLS_CONFIG, DEFAULT_SKILLS_CONFIG, PluginConfigSchema;
1222
1239
  var init_schema = __esm(() => {
1223
1240
  init_zod();
1224
1241
  init_knowledge_types();
@@ -1689,11 +1706,16 @@ var init_schema = __esm(() => {
1689
1706
  RepoGraphConfigSchema = exports_external.object({
1690
1707
  exclude_dirs: exports_external.array(exports_external.string().trim().min(1)).default([])
1691
1708
  });
1692
- CheckpointConfigSchema = exports_external.object({
1709
+ FORBIDDEN_CHECKPOINT_CONFIG_KEYS = new Set([
1710
+ "__proto__",
1711
+ "prototype",
1712
+ "constructor"
1713
+ ]);
1714
+ CheckpointConfigSchema = exports_external.preprocess(rejectCheckpointPrototypePollution, exports_external.object({
1693
1715
  enabled: exports_external.boolean().default(true),
1694
1716
  auto_checkpoint_threshold: exports_external.number().int().min(1).max(20).default(3),
1695
1717
  allow_empty_commits: exports_external.boolean().default(false)
1696
- }).strict();
1718
+ }).strict());
1697
1719
  ApplyPatchConfigSchema = exports_external.object({
1698
1720
  fuzzy_match: exports_external.boolean().default(false),
1699
1721
  fuzzy_match_context_aware: exports_external.boolean().default(false)
@@ -2,7 +2,7 @@
2
2
  import {
3
3
  redactPath,
4
4
  redactShellCommand
5
- } from "./index-gxw20m1d.js";
5
+ } from "./index-v4n224r1.js";
6
6
 
7
7
  // src/services/guardrail-log-service.ts
8
8
  import * as fs from "fs/promises";
@@ -2,18 +2,18 @@
2
2
  import {
3
3
  ALLOWED_SKILL_PATH_PREFIXES,
4
4
  validateSkillPath
5
- } from "./index-88dt7c9z.js";
5
+ } from "./index-ns62nv6t.js";
6
6
  import {
7
7
  computeOutcomeSignal,
8
8
  readKnowledge,
9
9
  resolveHiveKnowledgePath,
10
10
  resolveSwarmKnowledgePath,
11
11
  transactKnowledge
12
- } from "./index-pb8ag9vg.js";
12
+ } from "./index-72envp1b.js";
13
13
  import {
14
14
  effectiveRetrievalOutcomes,
15
15
  readKnowledgeCounterRollups
16
- } from "./index-nqp13m5a.js";
16
+ } from "./index-1mwdhq2p.js";
17
17
  import {
18
18
  init_knowledge_types,
19
19
  isActiveStatus
@@ -8,7 +8,7 @@ import {
8
8
  init_constants,
9
9
  init_schema,
10
10
  stripKnownSwarmPrefix
11
- } from "./index-vcqwhe9d.js";
11
+ } from "./index-7ttstfv6.js";
12
12
  import {
13
13
  log
14
14
  } from "./index-zgwm4ryv.js";
@@ -6,7 +6,7 @@ import {
6
6
  loadPluginConfigWithMeta,
7
7
  loadPluginConfigWithMetaAsync,
8
8
  resolveWorktreeIsolationConfig
9
- } from "./index-gf9cxvp0.js";
9
+ } from "./index-hv2p03f3.js";
10
10
  import {
11
11
  ApprovalEvidenceSchema,
12
12
  BaseEvidenceSchema,
@@ -58,7 +58,7 @@ import {
58
58
  WorktreeIsolationConfigSchema,
59
59
  isQAAgent,
60
60
  isSubagent
61
- } from "./index-vcqwhe9d.js";
61
+ } from "./index-7ttstfv6.js";
62
62
  import"./index-bk5tah7q.js";
63
63
  import {
64
64
  MigrationStatusSchema,
@@ -6,13 +6,13 @@ import {
6
6
  resolveSwarmKnowledgePath,
7
7
  transactKnowledge,
8
8
  wordBigrams
9
- } from "./index-pb8ag9vg.js";
9
+ } from "./index-72envp1b.js";
10
10
  import {
11
11
  countEntryContradictionsInWindow,
12
12
  countEntryViolationsInWindow,
13
13
  readKnowledgeEvents,
14
14
  recordKnowledgeEvent
15
- } from "./index-nqp13m5a.js";
15
+ } from "./index-1mwdhq2p.js";
16
16
  import {
17
17
  init_knowledge_types,
18
18
  isActiveStatus
@@ -190,11 +190,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
190
190
  alreadyInactive: true
191
191
  };
192
192
  }
193
- const { quarantineEntry } = await import("./knowledge-validator-jh93eagj.js");
193
+ const { quarantineEntry } = await import("./knowledge-validator-cs33ws57.js");
194
194
  let policyConfig;
195
195
  try {
196
- const { KnowledgeConfigSchema } = await import("./schema-fa033pqw.js");
197
- const { loadPluginConfigWithMeta } = await import("./index-c48dvb6j.js");
196
+ const { KnowledgeConfigSchema } = await import("./schema-2x7wsb0n.js");
197
+ const { loadPluginConfigWithMeta } = await import("./index-edv27z4p.js");
198
198
  const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
199
199
  policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
200
200
  } catch {
@@ -2,7 +2,7 @@
2
2
  import {
3
3
  readKnowledge,
4
4
  transactKnowledge
5
- } from "./index-pb8ag9vg.js";
5
+ } from "./index-72envp1b.js";
6
6
  import {
7
7
  resolveKnowledgeStoreDir
8
8
  } from "./index-q27bajqb.js";