opencode-swarm 7.128.0 → 7.129.1

package/dist/cli/{index-1mwdhq2p.js → index-kj86tyrs.js}

@@ -608,7 +608,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
       deltas.push({ id, delta });
     }
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-c0t16yr4.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-yeybvcqw.js");
       await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-edv27z4p.js → index-kxw2sx1d.js}

@@ -1,12 +1,13 @@
 // @bun
 import {
   _internals,
+  getSafeDefaultConfigLoadResult,
   loadAgentPrompt,
   loadPluginConfig,
   loadPluginConfigWithMeta,
   loadPluginConfigWithMetaAsync,
   resolveWorktreeIsolationConfig
-} from "./index-hv2p03f3.js";
+} from "./index-6w02qz7t.js";
 import {
   ApprovalEvidenceSchema,
   BaseEvidenceSchema,
@@ -83,6 +84,7 @@ export {
   loadAgentPrompt,
   isSubagent,
   isQAAgent,
+  getSafeDefaultConfigLoadResult,
   _internals,
   WorktreeIsolationConfigSchema,
   TurboConfigSchema,

package/dist/cli/{index-kk1scggc.js → index-kzvwb2se.js}

@@ -36,7 +36,7 @@ import {
 import {
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-2445sx3d.js";
+} from "./index-s80bsjkj.js";
 import {
   criticalWarn,
   error,

package/dist/cli/{index-ff3j65em.js → index-m8vrw3pt.js}

@@ -6,13 +6,13 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-72envp1b.js";
+} from "./index-w2kp2zvf.js";
 import {
   countEntryContradictionsInWindow,
   countEntryViolationsInWindow,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-1mwdhq2p.js";
+} from "./index-kj86tyrs.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -190,11 +190,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-cs33ws57.js");
+    const { quarantineEntry } = await import("./knowledge-validator-g2c4mbwa.js");
     let policyConfig;
     try {
       const { KnowledgeConfigSchema } = await import("./schema-2x7wsb0n.js");
-      const { loadPluginConfigWithMeta } = await import("./index-edv27z4p.js");
+      const { loadPluginConfigWithMeta } = await import("./index-kxw2sx1d.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-3ntrn97w.js → index-pgyp3tta.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-rtry5xyf.js";
 import {
   readKnowledgeEvents
-} from "./index-1mwdhq2p.js";
+} from "./index-kj86tyrs.js";
 import {
   isLinked,
   readLinkPointer,

package/dist/cli/{index-2445sx3d.js → index-s80bsjkj.js}

@@ -140,8 +140,9 @@ async function readSwarmFileAsync(directory, filename, cache) {
     cache.set(key, promise);
     return promise;
   }
-  const maxAttempts = 5;
-  const retryDelayMs = 10;
+  const ENOENT_MAX_ATTEMPTS = 5;
+  const ENOENT_RETRY_DELAY_MS = 10;
+  const maxAttempts = 6;
   for (let attempt = 0;attempt < maxAttempts; attempt++) {
     try {
       const resolvedPath = _internals.validateSwarmPath(directory, filename);
@@ -150,10 +151,18 @@ async function readSwarmFileAsync(directory, filename, cache) {
         return await file.text();
       });
     } catch (err) {
-      const isNotFound = err?.code === "ENOENT";
-      if (!isNotFound || attempt === maxAttempts - 1) {
+      const code = err?.code;
+      if (code === "ENOENT") {
+        if (attempt >= ENOENT_MAX_ATTEMPTS - 1)
+          return null;
+        await new Promise((resolve2) => setTimeout(resolve2, ENOENT_RETRY_DELAY_MS));
+        continue;
+      }
+      const isAvRetryable = code === "EBUSY" || code === "EPERM" || code === "EACCES";
+      if (!isAvRetryable || attempt === maxAttempts - 1) {
         return null;
       }
+      const retryDelayMs = 10 * 2 ** attempt;
       await new Promise((resolve2) => setTimeout(resolve2, retryDelayMs));
     }
   }

package/dist/cli/{index-rczj39pc.js → index-ty0xttaz.js}

@@ -12,7 +12,7 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-npycj2tr.js";
+} from "./index-gczs3jy7.js";
 import {
   checkFileAuthority,
   classifyFile,

package/dist/cli/{index-72envp1b.js → index-w2kp2zvf.js}

@@ -650,7 +650,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const recovered = touched.filter((e) => e.confidence > CONFIDENCE_FLOOR + FLOOR_EPSILON && e.confidence_floor_demoted);
   if (atFloor.length === 0 && recovered.length === 0)
     return;
-  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-4z5rkefv.js");
+  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-qnyfrsfv.js");
   const rollups = await readKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -717,11 +717,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-cs33ws57.js");
+    const { quarantineEntry } = await import("./knowledge-validator-g2c4mbwa.js");
     const { KnowledgeConfigSchema } = await import("./schema-2x7wsb0n.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-edv27z4p.js");
+      const { loadPluginConfigWithMeta } = await import("./index-kxw2sx1d.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-ns62nv6t.js → index-waqvy9a5.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-3ntrn97w.js";
+} from "./index-pgyp3tta.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,7 +9,7 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-72envp1b.js";
+} from "./index-w2kp2zvf.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-q27bajqb.js";

package/dist/cli/{index-c4mcheyz.js → index-wy5jy3m9.js}

@@ -2,18 +2,18 @@
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-ns62nv6t.js";
+} from "./index-waqvy9a5.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-72envp1b.js";
+} from "./index-w2kp2zvf.js";
 import {
   effectiveRetrievalOutcomes,
   readKnowledgeCounterRollups
-} from "./index-1mwdhq2p.js";
+} from "./index-kj86tyrs.js";
 import {
   init_knowledge_types,
   isActiveStatus

package/dist/cli/{index-ecxwhwz7.js → index-y2pfmd0z.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-2445sx3d.js";
+} from "./index-s80bsjkj.js";
 import {
   init_logger,
   warn

package/dist/cli/index.js

@@ -7,28 +7,28 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-npycj2tr.js";
+} from "./index-gczs3jy7.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
-import"./index-kk1scggc.js";
+import"./index-kzvwb2se.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-c4mcheyz.js";
-import"./index-ff3j65em.js";
-import"./index-gn62e04k.js";
+import"./index-wy5jy3m9.js";
+import"./index-m8vrw3pt.js";
+import"./index-5fnc76da.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-23zsx7dm.js";
-import"./index-ns62nv6t.js";
-import"./index-3ntrn97w.js";
+import"./index-g4mnf3p5.js";
+import"./index-waqvy9a5.js";
+import"./index-pgyp3tta.js";
 import"./index-rtry5xyf.js";
-import"./index-72envp1b.js";
-import"./index-1mwdhq2p.js";
+import"./index-w2kp2zvf.js";
+import"./index-kj86tyrs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-hv2p03f3.js";
+import"./index-6w02qz7t.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
@@ -43,8 +43,8 @@ import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
 import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
-import"./index-ecxwhwz7.js";
-import"./index-2445sx3d.js";
+import"./index-y2pfmd0z.js";
+import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-escalator-b3k4b8pk.js → knowledge-escalator-5ytt2y9n.js}

@@ -8,9 +8,9 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-ff3j65em.js";
-import"./index-72envp1b.js";
-import"./index-1mwdhq2p.js";
+} from "./index-m8vrw3pt.js";
+import"./index-w2kp2zvf.js";
+import"./index-kj86tyrs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{knowledge-events-4z5rkefv.js → knowledge-events-qnyfrsfv.js}

@@ -26,7 +26,7 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-1mwdhq2p.js";
+} from "./index-kj86tyrs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-store-c0t16yr4.js → knowledge-store-yeybvcqw.js}

@@ -40,7 +40,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-72envp1b.js";
+} from "./index-w2kp2zvf.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-cs33ws57.js → knowledge-validator-g2c4mbwa.js}

@@ -23,11 +23,11 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-ns62nv6t.js";
-import"./index-3ntrn97w.js";
+} from "./index-waqvy9a5.js";
+import"./index-pgyp3tta.js";
 import"./index-rtry5xyf.js";
-import"./index-72envp1b.js";
-import"./index-1mwdhq2p.js";
+import"./index-w2kp2zvf.js";
+import"./index-kj86tyrs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{pending-delegations-a1bbpp8b.js → pending-delegations-37t4xecr.js}

@@ -9,8 +9,8 @@ import {
   readDelegations,
   recordPendingDelegation,
   sweepStaleDelegations
-} from "./index-ecxwhwz7.js";
-import"./index-2445sx3d.js";
+} from "./index-y2pfmd0z.js";
+import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{pr-subscriptions-bxpqde8w.js → pr-subscriptions-zqbmctwz.js}

@@ -9,8 +9,8 @@ import {
   sweepStale,
   unsubscribe,
   updateSnapshot
-} from "./index-23zsx7dm.js";
-import"./index-2445sx3d.js";
+} from "./index-g4mnf3p5.js";
+import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{scan-cursor-rgnarf67.js → scan-cursor-c5mcce5r.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-gn62e04k.js";
-import"./index-72envp1b.js";
+} from "./index-5fnc76da.js";
+import"./index-w2kp2zvf.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{skill-generator-e8c2r816.js → skill-generator-c77e0y98.js}

@@ -33,12 +33,12 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-c4mcheyz.js";
-import"./index-ns62nv6t.js";
-import"./index-3ntrn97w.js";
+} from "./index-wy5jy3m9.js";
+import"./index-waqvy9a5.js";
+import"./index-pgyp3tta.js";
 import"./index-rtry5xyf.js";
-import"./index-72envp1b.js";
-import"./index-1mwdhq2p.js";
+import"./index-w2kp2zvf.js";
+import"./index-kj86tyrs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/config/index.d.ts

@@ -3,7 +3,7 @@ export { ALL_AGENT_NAMES, ALL_SUBAGENT_NAMES, DEFAULT_MODELS, isQAAgent, isSubag
 export type { ApprovalEvidence, BaseEvidence, DiffEvidence, Evidence, EvidenceBundle, EvidenceType, EvidenceVerdict, NoteEvidence, ReviewEvidence, TestEvidence, } from './evidence-schema';
 export { ApprovalEvidenceSchema, BaseEvidenceSchema, DiffEvidenceSchema, EVIDENCE_MAX_JSON_BYTES, EVIDENCE_MAX_PATCH_BYTES, EVIDENCE_MAX_TASK_BYTES, EvidenceBundleSchema, EvidenceSchema, EvidenceTypeSchema, EvidenceVerdictSchema, NoteEvidenceSchema, ReviewEvidenceSchema, TestEvidenceSchema, } from './evidence-schema';
 export type { ConfigBuildResult, ConfigLoadResult, ConfigRecovery, } from './loader';
-export { loadAgentPrompt, loadPluginConfig, loadPluginConfigWithMeta, loadPluginConfigWithMetaAsync, } from './loader';
+export { getSafeDefaultConfigLoadResult, loadAgentPrompt, loadPluginConfig, loadPluginConfigWithMeta, loadPluginConfigWithMetaAsync, } from './loader';
 import { loadPluginConfigWithMeta } from './loader';
 /**
  * Test-only dependency-injection seam — see `gitignore-warning.ts:_internals`

package/dist/config/loader-recovery.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Config loader recovery persistence module.
+ *
+ * Persists recovery metadata emitted by the config loader so that:
+ *   - `/swarm config doctor` can surface stale recovery artifacts
+ *     (left by a prior process that crashed before cleanup).
+ *   - Post-init flush (via `flushPendingLoaderRecovery`) can record
+ *     recovery warnings without blocking plugin init.
+ *   - Stale artifacts from older loads are cleaned up atomically
+ *     when a newer load completes successfully (SC-002.3).
+ *
+ * Conflict resolution: every completed load writes a recovery artifact
+ * tagged with the tuple `{loadStartedAt, pid, inProcessCounter}`. When
+ * an artifact already exists, the new load wins iff its tuple is
+ * numerically greater than the existing one (component-wise comparison).
+ * This prevents a slower or earlier process from overwriting a newer
+ * recovery result.
+ *
+ * Artifact format (JSON):
+ * ```json
+ * {
+ *   "loadStartedAt": number,
+ *   "pid": number,
+ *   "inProcessCounter": number,
+ *   "sources": string[],
+ *   "fingerprint": string,
+ *   "warnings": RecoveryWarning[]
+ * }
+ * ```
+ *
+ * Lives under `src/config/` alongside `loader.ts` so the loader can
+ * import it without cross-module dependency violations.
+ */
+import * as fsPromises from 'node:fs/promises';
+import { bunWrite } from '../utils/bun-compat.js';
+import type { RecoveryWarning } from './sanitize-malformed-values.js';
+/** Shape of the on-disk recovery artifact. */
+export interface LoaderRecoveryArtifact {
+    /** Date.now() when the config load started. */
+    loadStartedAt: number;
+    /** process.pid of the loading process. */
+    pid: number;
+    /** Monotonic per-process counter for same-process disambiguation. */
+    inProcessCounter: number;
+    /** Sorted source paths that contributed to the config merge. */
+    sources: string[];
+    /** SHA-256 fingerprint of the merged raw config. */
+    fingerprint: string;
+    /** Recovery warnings from the load (empty for clean loads). */
+    warnings: RecoveryWarning[];
+}
+/**
+ * Input shape accepted by the public API.
+ * Matches `LoadPluginConfigWithRecoveryResult.pendingPersistence`
+ * from `loader.ts`.
+ */
+export type PendingLoaderRecoveryData = Omit<LoaderRecoveryArtifact, 'warnings'> & {
+    warnings: RecoveryWarning[];
+};
+/**
+ * Test-only dependency-injection seam — replaces `fsPromises.readFile`
+ * and `bunWrite` so tests can exercise failure paths without
+ * `mock.module` leakage (AGENTS.md §7).
+ */
+export declare const _internals: {
+    readFile: typeof fsPromises.readFile;
+    write: typeof bunWrite;
+};
+/**
+ * Persist loader recovery data to `<directory>/.swarm/advisories/loader-recovery.json`.
+ *
+ * Every completed load atomically writes the artifact under deterministic
+ * conflict resolution: the new load wins iff its `{loadStartedAt, pid,
+ * inProcessCounter}` tuple is numerically greater than the existing artifact's.
+ * Clean loads (no recovery warnings) write `warnings: []`, which serves as
+ * the SC-002.3 stale-artifact cleanup signal.
+ *
+ * Failures (filesystem errors, permission issues) are logged via
+ * `advisoryWarn` and never thrown — this is best-effort persistence.
+ *
+ * @param directory - Project root directory (the `.swarm/` parent).
+ * @param data - Recovery data from the loader's `pendingPersistence`.
+ */
+export declare function persistLoaderRecovery(directory: string, data: PendingLoaderRecoveryData): Promise<void>;
+/**
+ * Synchronous wrapper that defers `persistLoaderRecovery` via `queueMicrotask`.
+ *
+ * This is designed for the post-init flush path (task 1.5) where the caller
+ * must not await the write — the write is fire-and-forget, with errors
+ * routed to `advisoryWarn` inside `persistLoaderRecovery`.
+ *
+ * @param directory - Project root directory (the `.swarm/` parent).
+ * @param pendingData - Recovery data from the loader's `pendingPersistence`.
+ */
+export declare function flushPendingLoaderRecovery(directory: string, pendingData: PendingLoaderRecoveryData): void;

package/dist/config/loader.d.ts

@@ -24,10 +24,14 @@ export declare function formatZodIssues(error: z.ZodError): string;
  *                          the remaining configuration was preserved.
  *   'user_only'          – project config was discarded (failed validation and
  *                          targeted recovery); user config alone was used.
+ *   'sanitized_values'   – merged and user configs both failed, but recursive
+ *                          malformed-value recovery (step 7b, issue #1690)
+ *                          dropped the smallest invalid leaves/sections so the
+ *                          remaining valid configuration could load.
  *   'guardrails_defaults'– neither merged nor user config was recoverable;
  *                          fell back to fail-secure guardrails-only defaults.
  */
-export type ConfigRecovery = 'none' | 'stripped_keys' | 'user_only' | 'guardrails_defaults';
+export type ConfigRecovery = 'none' | 'stripped_keys' | 'user_only' | 'sanitized_values' | 'guardrails_defaults';
 /** Full result from the shared config-build core. */
 export type ConfigBuildResult = {
     config: PluginConfig;
@@ -71,6 +75,27 @@ export declare function loadPluginConfig(directory: string): PluginConfig;
  * exactly once, no double-read.
  */
 export declare function loadPluginConfigWithMeta(directory: string): ConfigLoadResult;
+/**
+ * Safe-default `ConfigLoadResult` for init-path timeout / error fallback.
+ *
+ * Produces the same shape `loadPluginConfigWithMeta[Async]` returns when no
+ * config file exists on disk: empty config + guardrails enabled + no recovery.
+ * Used by `src/index.ts` when the parallelized config read times out or fails
+ * (Invariant 1 — init must remain bounded). A parity test in
+ * `tests/unit/config/loader-safe-default.test.ts` asserts this matches the
+ * classification fields the loader returns for a missing config file.
+ *
+ * Classification fields:
+ *   - `loadedFromFile: false` — on timeout we cannot know whether a file
+ *     existed (the `stat` itself may have stalled); `false` is the safe
+ *     choice that avoids the guardrails-disabled warning gated by this
+ *     flag at `src/index.ts` (the only init-path consumer).
+ *   - `configHadErrors: false` — we did not observe a corrupt/oversized
+ *     config, only a slow one; fail-closed consumers (e.g. the Full-Auto
+ *     `locked` activation guard) treat this as "config defaults", which
+ *     matches the runtime behavior of the safe-default `PluginConfig`.
+ */
+export declare function getSafeDefaultConfigLoadResult(): ConfigLoadResult;
 /**
  * Async variant of `loadPluginConfigWithMeta`. Used by the plugin entry
  * (issue #704) so initialization does not perform synchronous fs reads.

package/dist/config/sanitize-malformed-values.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Fixed-point recovery helper for malformed config values.
+ *
+ * Given a Zod schema and a raw config object, this module iteratively
+ * removes malformed fields/sections until the config validates cleanly.
+ * It uses ONLY `safeParse` + `issue.path`/`issue.code`/`issue.keys` as
+ * signals — no schema introspection (`_def`, `.shape`, `instanceof` along
+ * paths), making it robust across Zod versions (v3 and v4+).
+ *
+ * Algorithm (SME-designed fixed-point):
+ *   1. Fast path: if `safeParse` succeeds, return the original reference
+ *      (no clone cost on the happy path).
+ *   2. Deep-clone the input exactly once.
+ *   3. Loop: parse → build leaf drop-set from issue paths → remove deepest
+ *      leaves first → re-parse.  If no new leaves found but fresh issues
+ *      remain, escalate to nearest non-removed ancestor.  If still stuck,
+ *      drop entire implicated top-level sections.
+ *   4. Terminate when parse succeeds or fuel is exhausted.
+ *   5. Emit ancestor-suppressed, deterministically-ordered warnings.
+ *
+ * This is a PURE function — no side effects, no I/O, no logging.
+ */
+import type { z } from 'zod';
+/** Dotted path identifying the dropped unit, e.g. "council.enabled" or "pr_monitor". */
+export interface RecoveryWarning {
+    section: string;
+    /** Currently always 'warn'; reserved for future severity levels. */
+    severity: 'warn';
+    /** Human-readable description of what was dropped and why. */
+    message: string;
+    /** Full Zod error path if available (for debugging / downstream use). */
+    path?: string;
+}
+export interface SanitizeResult {
+    /** The recovered config object. Keys omitted here will be filled by Zod defaults
+     *  at parse time — callers should re-parse this through the schema. */
+    config: Record<string, unknown>;
+    /** Warnings for every field or section that was dropped during recovery. */
+    recoveryWarnings: RecoveryWarning[];
+}
+/**
+ * Attempt to recover a malformed config by iteratively dropping invalid
+ * values until the config validates.  This is a generic helper that works
+ * with any Zod schema and avoids all schema introspection.
+ *
+ * The returned `config` is the cleaned raw config — callers should pass it
+ * through `schema.parse()` to get fully typed output with defaults applied.
+ *
+ * @param schema - The Zod schema to validate against.
+ * @param rawConfig - The raw parsed-config object (not yet Zod-validated).
+ * @returns The cleaned config plus any warnings emitted during recovery.
+ */
+export declare function sanitizeMalformedValues(schema: z.ZodTypeAny, rawConfig: Record<string, unknown>): SanitizeResult;

package/dist/index.d.ts

@@ -1,5 +1,8 @@
 import type { Plugin } from '@opencode-ai/plugin';
+import { loadPluginConfigWithMetaAsync } from './config';
 import { createRepoGraphBuilderHook } from './hooks';
+import { loadSnapshot } from './session/snapshot-reader.js';
+import { ensureSwarmGitExcluded } from './utils/gitignore-warning';
 /**
  * FIFO-cap a session-keyed Map to at most `max` entries, evicting oldest first.
  * Values tracked by these maps are plain data (timestamps/usage snapshots), never
@@ -18,6 +21,9 @@ declare function schedulePostResolutionTasks(tasks: readonly PostResolutionTask[
 export declare function overrideIndexInternalsForTest(overrides: {
     createRepoGraphBuilderHook?: typeof createRepoGraphBuilderHook;
     schedulePostResolutionTasks?: typeof schedulePostResolutionTasks;
+    loadPluginConfigWithMetaAsync?: typeof loadPluginConfigWithMetaAsync;
+    loadSnapshot?: typeof loadSnapshot;
+    ensureSwarmGitExcluded?: typeof ensureSwarmGitExcluded;
 }): () => void;
 export declare function schedulePostResolutionTasksForTest(tasks: readonly PostResolutionTask[]): void;
 declare const _default: {