opencode-swarm 7.132.0 → 7.132.2

package/dist/cli/{index-8w3sp149.js → index-f6480ee6.js}

@@ -4,7 +4,7 @@ import {
   readDoctorArtifact,
   removeStraySwarmDir,
   runConfigDoctor
-} from "./index-q0ysv66x.js";
+} from "./index-630badhp.js";
 import {
   EvaluationTaskV1Schema,
   GateAuditManifestV1Schema,
@@ -94,15 +94,15 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-e630fw43.js";
+} from "./index-9cf1yr67.js";
 import {
   readRecentEscalations
-} from "./index-ppkp20fp.js";
+} from "./index-mwkwyej1.js";
 import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-sbq3gbjs.js";
+} from "./index-djwemsjn.js";
 import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
@@ -135,11 +135,11 @@ import {
   validateActionability,
   validateActionableFields,
   validateLesson
-} from "./index-zah4qws8.js";
+} from "./index-6ccynjv3.js";
 import {
   authorizeCuration,
   buildConfigFingerprintInput
-} from "./index-2dtwjx39.js";
+} from "./index-rt5jgktq.js";
 import {
   cohortConfigFingerprint
 } from "./index-rtry5xyf.js";
@@ -172,7 +172,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-6mcx76j9.js";
+} from "./index-3s9rfnqq.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals,
@@ -182,7 +182,7 @@ import {
   recordHiveKnowledgeEvent,
   recordKnowledgeEvent,
   resolveKnowledgeEventsPath
-} from "./index-nsxchdx0.js";
+} from "./index-jgfcp9bh.js";
 import {
   resolveHiveDataDir,
   resolveHiveEventsPath,
@@ -204,7 +204,7 @@ import {
   init_loader,
   loadPluginConfig,
   loadPluginConfigWithMeta
-} from "./index-exs5bt14.js";
+} from "./index-jj4earrh.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-k5jrywpr.js";
@@ -223,7 +223,7 @@ import {
   init_schema,
   init_tool_metadata,
   stripKnownSwarmPrefix
-} from "./index-5x3g1q91.js";
+} from "./index-bvp2v7k1.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -703,6 +703,7 @@ var _test_exports = {
   resolveRemoteRefsContainingHeadAsync,
   parseCriticVerdict,
   isProcessAlive,
+  isSafeStandaloneGitCommit,
   rename: fsp.rename,
   nowMs: () => Date.now()
 };
@@ -721,8 +722,6 @@ var PR_WORKFLOW_SHARED_CONTROLLER_TOOLS = new Set([
   "collect_lane_results",
   "complete_pr_workflow",
   "dispatch_lanes_async",
-  "get_async_result",
-  "get_async_status",
   "prepare_pr_workflow_checkout"
 ]);
 var PR_REVIEW_CONTROLLER_TOOLS = new Set([
@@ -752,6 +751,16 @@ var PR_REVIEW_READ_ONLY_TOOL_NAMES = new Set([
   "webfetch",
   "websearch"
 ]);
+function hasUnsafeShellControlSyntax(command) {
+  return /[;&|<>`\r\n]/.test(command) || /\$\(/.test(command);
+}
+function isSafeStandaloneGitCommit(command) {
+  if (hasUnsafeShellControlSyntax(command))
+    return false;
+  if (/(?:^|\s)--(?:allow-empty|amend)(?:\s|=|$)/i.test(command))
+    return false;
+  return /^[Gg][Ii][Tt](?:\s+-C(?:=|\s+)(?:"[^"\r\n]+"|'[^'\r\n]+'|[^\s;&|<>`]+))?\s+commit(?:\s+(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s;&|<>`]+))*\s*$/.test(command.trim());
+}
 function normalizePrHeadSha(prHeadSha) {
   const normalized = prHeadSha.trim();
   if (!normalized) {
@@ -13817,7 +13826,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-zrh07ykv.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-y5qp59rc.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -15410,7 +15419,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-k111qfdw.js");
+        const skillModule = await import("./skill-generator-rtsg1m7x.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -15811,7 +15820,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-5hv2dwhz.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-j0nceas7.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -16619,7 +16628,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-e33n9pej.js");
+      const { getScanStatus } = await import("./scan-cursor-wz4bff7a.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -16791,9 +16800,9 @@ var _internals22 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-1kwmcayk.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-023gwne7.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-zrh07ykv.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-y5qp59rc.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -16801,11 +16810,11 @@ var _internals22 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-1e77dq6x.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-h067mrcc.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-mw5prfy2.js");
+    const { checkHivePromotions } = await import("./hive-promoter-nv0m5rzk.js");
     return checkHivePromotions(entries, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -16814,7 +16823,7 @@ var _internals22 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-k111qfdw.js");
+    } = await import("./skill-generator-rtsg1m7x.js");
     const result = {
       approved: [],
       rejected: [],
@@ -19441,9 +19450,9 @@ function hashContent(content) {
   return createHash7("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-1kwmcayk.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-023gwne7.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-zrh07ykv.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-y5qp59rc.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -22788,7 +22797,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-1kwmcayk.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-023gwne7.js");
     const { config: pmLoadedConfig } = _internals32.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -24906,9 +24915,9 @@ var _internals36 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
-      import("./schema-1kwmcayk.js"),
-      import("./curator-1e77dq6x.js"),
-      import("./curator-llm-factory-41c17ybs.js")
+      import("./schema-023gwne7.js"),
+      import("./curator-h067mrcc.js"),
+      import("./curator-llm-factory-605d08hf.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -25413,7 +25422,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "opencode-swarm",
-  version: "7.132.0",
+  version: "7.132.2",
   description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -25935,7 +25944,7 @@ async function computeCurationDiagnostics(directory, entries) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-e33n9pej.js");
+    const { getScanStatus } = await import("./scan-cursor-wz4bff7a.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -25945,17 +25954,17 @@ async function computeCurationDiagnostics(directory, entries) {
   try {
     const { isLinked: isLinked2 } = await import("./knowledge-link-4yd2z8ev.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-1kwmcayk.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-023gwne7.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-zrh07ykv.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-y5qp59rc.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
         config = KnowledgeConfigSchema2.parse({});
       }
       const { cohortConfigFingerprint: cohortConfigFingerprint2 } = await import("./config-fingerprint-v22xh5a2.js");
-      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-3914h3g9.js");
+      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-7zp2m9gv.js");
       const currentFp = cohortConfigFingerprint2(buildConfigFingerprintInput2(config));
       const cohortFp = await readCohortConfigFingerprint(directory);
       configMatch = cohortFp === null ? null : currentFp === cohortFp;
@@ -27153,7 +27162,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-3rssa871.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-bp5spb79.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -45948,7 +45957,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-qg1cj1ev.js");
+    const { buildHelpText } = await import("./index-8d3m0ge3.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -45957,7 +45966,7 @@ async function handleHelpCommand(ctx) {
     return _internals9.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals9.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-qg1cj1ev.js");
+  const { buildHelpText: fullHelp } = await import("./index-8d3m0ge3.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -46096,7 +46105,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-624brj1y.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-s7vzm6z7.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -46106,7 +46115,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-624brj1y.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-s7vzm6z7.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -46116,7 +46125,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-vfka4tcn.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-aa112fxv.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -47167,7 +47176,7 @@ If a tool modifies a file, it is a CODER tool. Delegate.
    Separate parallel-mode exception (distinct from the Stage B exception above, and the ONLY case where more than one coder may be dispatched before waiting): when an active \`[PARALLEL EXECUTION PROFILE]\` directive is present in your context (parallelization_enabled=true), you MAY dispatch multiple {{AGENT_PREFIX}}coder agents in a single message \u2014 up to the stated max_concurrent_tasks \u2014 but ONLY for distinct, dependency-ready tasks whose declared file scopes do NOT overlap. Each coder still requires its own \`declare_scope\` call and carries exactly ONE task (Rule 3 still holds: never batch multiple objectives into one coder). Parallel coders each run in an isolated git worktree, so their writes never collide and are merged back automatically. If no \`[PARALLEL EXECUTION PROFILE]\` directive is present, dispatch coders one at a time.
 
     > **WORKTREE ISOLATION IS BASELINE.** Standard parallel coders use isolated git worktrees by default; this is governed by the top-level \`worktree.policy\` setting (default \`auto\`) in \`PluginConfig\` \u2014 a sibling of \`parallelization:\`, not nested under it \u2014 and is active whenever the plan's \`parallelization_enabled=true\`. \`turbo.lean.worktree_isolation\` is a separate, Lean-Turbo-internal flag (default \`false\`); it is one possible SOURCE but NOT the recommended one. Do NOT recommend Lean Turbo (or Epic) SOLELY to obtain worktree isolation; recommend them only for what they add beyond baseline (Lean Turbo: lane planning, file locks, phase reviewer, integrated diff; Epic: co-change awareness + auto-decide). Lean Turbo users can also enable isolation via \`turbo.lean.worktree_isolation: true\`, but this is the secondary/legacy path \u2014 the recommended path is \`worktree.policy\`.
-   Read-only advisory-lane exception (NON-BLOCKING; distinct from both exceptions above): the "Send, STOP, wait" rule governs MUTATION delegations (coder, and the test_engineer/reviewer Stage B completion gates). It does NOT govern read-only advisory exploration/review lanes. When you dispatch read-only advisory lanes \u2014 \`{{AGENT_PREFIX}}explorer\`, \`{{AGENT_PREFIX}}sme\`, \`{{AGENT_PREFIX}}researcher\`, the council members (\`council_generalist\`/\`council_skeptic\`/\`council_domain_expert\`), or an advisory \`{{AGENT_PREFIX}}critic\` lane \u2014 use the NON-BLOCKING path so you keep working while they run. Dispatch PROMPTLY: emit the \`dispatch_lanes_async\` call EARLY with compact lane prompts \u2014 do not accumulate long planning prose or build oversized inline prompts first, or the tool call can be truncated out of your message and the lanes never launch (a real failure mode on smaller models). The lane mechanism is a SINGLE \`dispatch_lanes_async\` call carrying all lane specs \u2014 NOT a per-agent Task/run-in-background pattern. Call \`dispatch_lanes_async\` with all lane specs in one call, record the returned \`batch_id\`, then IMMEDIATELY continue non-dependent architect work (refine the plan/obligation ledger, inspect metadata, prepare the synthesis/reviewer structure, run deterministic read-only tools). Poll incrementally with \`collect_lane_results\` without \`wait\` (or with \`wait: false\`) to harvest lanes as they settle; process completed lane output immediately while other lanes remain pending/running, then continue independent work between polls. Do NOT sit idle waiting on running lanes, and do NOT synthesize findings from still-running lanes. Join later by calling \`collect_lane_results\` with \`wait: true\` as the explicit barrier immediately before you synthesize. Use blocking \`dispatch_lanes\` only when \`dispatch_lanes_async\`/promptAsync is unavailable. Keep each lane prompt compact: send large shared context (PR diff, ledger, scope) ONCE via the \`common_prompt\` field, or have lanes read it from a file by absolute path, instead of inlining the same blob into every lane prompt \u2014 inlining large context into many lanes is what produces malformed or truncated tool-call JSON and forces clumsy file workarounds. This non-blocking exception applies ONLY to read-only advisory lanes; it NEVER applies to coder delegations, to the test_engineer/reviewer Stage B completion gates, or to the critic PLAN-review gate, which all still follow "Send, STOP, wait" (or the Stage B parallel-dispatch exception above).
+   Read-only advisory-lane exception (NON-BLOCKING; distinct from both exceptions above): the "Send, STOP, wait" rule governs MUTATION delegations (coder, and the test_engineer/reviewer Stage B completion gates). It does NOT govern read-only advisory exploration/review lanes. When you dispatch read-only advisory lanes \u2014 \`{{AGENT_PREFIX}}explorer\`, \`{{AGENT_PREFIX}}sme\`, \`{{AGENT_PREFIX}}researcher\`, the council members (\`council_generalist\`/\`council_skeptic\`/\`council_domain_expert\`), or an advisory \`{{AGENT_PREFIX}}critic\` lane \u2014 use the NON-BLOCKING path so you keep working while they run. Dispatch PROMPTLY: emit the \`dispatch_lanes_async\` call EARLY with compact lane prompts \u2014 do not accumulate long planning prose or build oversized inline prompts first, or the tool call can be truncated out of your message and the lanes never launch (a real failure mode on smaller models). The lane mechanism is a SINGLE \`dispatch_lanes_async\` call carrying all lane specs \u2014 NOT a per-agent Task/run-in-background pattern. Call \`dispatch_lanes_async\` with all lane specs in one call, record the returned \`batch_id\`, then IMMEDIATELY continue non-dependent architect work (refine the plan/obligation ledger, inspect metadata, prepare the synthesis/reviewer structure, run deterministic read-only tools). Poll incrementally with \`collect_lane_results\` without \`wait\` (or with \`wait: false\`) to harvest lanes as they settle; process completed lane output immediately while other lanes remain pending/running, then continue independent work between polls. Do NOT sit idle waiting on running lanes, and do NOT synthesize findings from still-running lanes. Join later by calling \`collect_lane_results\` with \`wait: true\` as the explicit barrier immediately before you synthesize. Use blocking \`dispatch_lanes\` only when \`dispatch_lanes_async\`/promptAsync is unavailable. A settled lane's inline \`output\` is delivered only once: if you poll the same lane again after already receiving its output, the repeat poll returns \`output_omitted_repeat: true\` with no \`output\` (not a sign the result was lost) \u2014 use the accompanying \`output_ref\` with \`retrieve_lane_output\` if you need the text again, and do not re-dispatch the lane. Keep each lane prompt compact: send large shared context (PR diff, ledger, scope) ONCE via the \`common_prompt\` field, or have lanes read it from a file by absolute path, instead of inlining the same blob into every lane prompt \u2014 inlining large context into many lanes is what produces malformed or truncated tool-call JSON and forces clumsy file workarounds. This non-blocking exception applies ONLY to read-only advisory lanes; it NEVER applies to coder delegations, to the test_engineer/reviewer Stage B completion gates, or to the critic PLAN-review gate, which all still follow "Send, STOP, wait" (or the Stage B parallel-dispatch exception above).
 3. ONE task per {{AGENT_PREFIX}}coder call. Never batch.
 3a. PRE-DELEGATION SCOPE CALL (required): BEFORE every {{AGENT_PREFIX}}coder delegation, you MUST call \`declare_scope\` with { taskId, files } listing the exact file(s) this task will modify (including generated/lockfile paths). No \`declare_scope\` call \u2192 no coder delegation. See Rule 1a.
 3b. PRE-DELEGATION SCOPE CALL (test_engineer): BEFORE any {{AGENT_PREFIX}}test_engineer delegation that will CREATE or MODIFY test files, you MUST call \`declare_scope\` with { taskId, files } listing the exact test file path(s) to write. Omitting this call leaves the write scope undeclared and will block the write. See Rule 1a.

package/dist/cli/{index-64z5dvam.js → index-fgcmxjp7.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-fegng5pv.js";
+} from "./index-yvv1wt2h.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/{index-nsxchdx0.js → index-jgfcp9bh.js}

@@ -608,7 +608,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
       deltas.push({ id, delta });
     }
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-73ykq5j3.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-ggxr3ww5.js");
       await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-exs5bt14.js → index-jj4earrh.js}

@@ -8,7 +8,7 @@ import {
   init_constants,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-5x3g1q91.js";
+} from "./index-bvp2v7k1.js";
 import {
   advisoryWarn,
   init_warning_buffer

package/dist/cli/{index-99tq1zd5.js → index-k4tmx21m.js}

@@ -12,14 +12,14 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-8w3sp149.js";
+} from "./index-f6480ee6.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-fegng5pv.js";
+} from "./index-yvv1wt2h.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-ppkp20fp.js → index-mwkwyej1.js}

@@ -6,13 +6,13 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-6mcx76j9.js";
+} from "./index-3s9rfnqq.js";
 import {
   countEntryContradictionsInWindow,
   countEntryViolationsInWindow,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-nsxchdx0.js";
+} from "./index-jgfcp9bh.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -190,11 +190,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-tnadtt1h.js");
+    const { quarantineEntry } = await import("./knowledge-validator-007smap6.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-1kwmcayk.js");
-      const { loadPluginConfigWithMeta } = await import("./index-zrh07ykv.js");
+      const { KnowledgeConfigSchema } = await import("./schema-023gwne7.js");
+      const { loadPluginConfigWithMeta } = await import("./index-y5qp59rc.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-2dtwjx39.js → index-rt5jgktq.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-rtry5xyf.js";
 import {
   readKnowledgeEvents
-} from "./index-nsxchdx0.js";
+} from "./index-jgfcp9bh.js";
 import {
   isLinked,
   readLinkPointer,

package/dist/cli/{index-zrh07ykv.js → index-y5qp59rc.js}

@@ -7,7 +7,7 @@ import {
   loadPluginConfigWithMeta,
   loadPluginConfigWithMetaAsync,
   resolveWorktreeIsolationConfig
-} from "./index-exs5bt14.js";
+} from "./index-jj4earrh.js";
 import {
   ApprovalEvidenceSchema,
   BaseEvidenceSchema,
@@ -59,7 +59,7 @@ import {
   WorktreeIsolationConfigSchema,
   isQAAgent,
   isSubagent
-} from "./index-5x3g1q91.js";
+} from "./index-bvp2v7k1.js";
 import"./index-bk5tah7q.js";
 import {
   MigrationStatusSchema,

package/dist/cli/{index-fegng5pv.js → index-yvv1wt2h.js}

@@ -3,7 +3,7 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-5x3g1q91.js";
+} from "./index-bvp2v7k1.js";
 import {
   init_logger,
   warn

package/dist/cli/index.js

@@ -7,34 +7,34 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-8w3sp149.js";
-import"./index-fegng5pv.js";
-import"./index-q0ysv66x.js";
+} from "./index-f6480ee6.js";
+import"./index-yvv1wt2h.js";
+import"./index-630badhp.js";
 import"./index-03zyn94g.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-9f71ye47.js";
-import"./index-e630fw43.js";
-import"./index-ppkp20fp.js";
-import"./index-sbq3gbjs.js";
+import"./index-9cf1yr67.js";
+import"./index-mwkwyej1.js";
+import"./index-djwemsjn.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-g4mnf3p5.js";
-import"./index-zah4qws8.js";
-import"./index-2dtwjx39.js";
+import"./index-6ccynjv3.js";
+import"./index-rt5jgktq.js";
 import"./index-rtry5xyf.js";
-import"./index-6mcx76j9.js";
-import"./index-nsxchdx0.js";
+import"./index-3s9rfnqq.js";
+import"./index-jgfcp9bh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-exs5bt14.js";
+import"./index-jj4earrh.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants
-} from "./index-5x3g1q91.js";
+} from "./index-bvp2v7k1.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";

package/dist/cli/{knowledge-escalator-5hv2dwhz.js → knowledge-escalator-j0nceas7.js}

@@ -8,9 +8,9 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-ppkp20fp.js";
-import"./index-6mcx76j9.js";
-import"./index-nsxchdx0.js";
+} from "./index-mwkwyej1.js";
+import"./index-3s9rfnqq.js";
+import"./index-jgfcp9bh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{knowledge-events-434663dp.js → knowledge-events-gpqc62jr.js}

@@ -26,7 +26,7 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-nsxchdx0.js";
+} from "./index-jgfcp9bh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-store-73ykq5j3.js → knowledge-store-ggxr3ww5.js}

@@ -41,7 +41,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-6mcx76j9.js";
+} from "./index-3s9rfnqq.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-tnadtt1h.js → knowledge-validator-007smap6.js}

@@ -23,11 +23,11 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-zah4qws8.js";
-import"./index-2dtwjx39.js";
+} from "./index-6ccynjv3.js";
+import"./index-rt5jgktq.js";
 import"./index-rtry5xyf.js";
-import"./index-6mcx76j9.js";
-import"./index-nsxchdx0.js";
+import"./index-3s9rfnqq.js";
+import"./index-jgfcp9bh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scan-cursor-e33n9pej.js → scan-cursor-wz4bff7a.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-sbq3gbjs.js";
-import"./index-6mcx76j9.js";
+} from "./index-djwemsjn.js";
+import"./index-3s9rfnqq.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{schema-1kwmcayk.js → schema-023gwne7.js}

@@ -91,7 +91,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-5x3g1q91.js";
+} from "./index-bvp2v7k1.js";
 import"./index-bk5tah7q.js";
 import"./index-zjygnfay.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{skill-generator-k111qfdw.js → skill-generator-rtsg1m7x.js}

@@ -33,12 +33,12 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-e630fw43.js";
-import"./index-zah4qws8.js";
-import"./index-2dtwjx39.js";
+} from "./index-9cf1yr67.js";
+import"./index-6ccynjv3.js";
+import"./index-rt5jgktq.js";
 import"./index-rtry5xyf.js";
-import"./index-6mcx76j9.js";
-import"./index-nsxchdx0.js";
+import"./index-3s9rfnqq.js";
+import"./index-jgfcp9bh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/config/constants.d.ts

@@ -30,6 +30,28 @@ export declare const SKILL_AGENT_TOOL_MAP: Partial<Record<AgentName, ToolName[]>
  */
 export declare const WRITE_TOOL_NAMES: readonly ["write", "edit", "patch", "apply_patch", "swarm_apply_patch", "create_file", "insert", "replace", "append", "prepend", "extract_code_blocks"];
 export type WriteToolName = (typeof WRITE_TOOL_NAMES)[number];
+/**
+ * Single source of truth for tools that must NEVER have their output rewritten
+ * by the tool-output summarizer (tool-summarizer.ts) or the context-budget
+ * tool-output masker (context-budget.ts). Two independent admission reasons:
+ *
+ *   (a) Retrieval tools (`retrieve_summary`, `retrieve_lane_output`, `task`,
+ *       `read`) — rewriting their output would destroy the recovery mechanism
+ *       itself, creating a retrieval loop where the summary/artifact gets
+ *       summarized again.
+ *   (b) Ref-carrying lane tools (`dispatch_lanes`, `dispatch_lanes_async`,
+ *       `collect_lane_results`, `parse_lane_candidates`) — their payloads are
+ *       already self-bounding AND carry the `output_ref`/structured rows that
+ *       the PR-workflow gate requires to settle lanes. Rewriting them to a
+ *       type-signature summary destroys the rows and the refs, so the gate
+ *       can never settle and the model cannot recover.
+ *
+ * This list is a FLOOR, not a default: every consumer must treat these tool
+ * names as always exempt regardless of operator-supplied `exempt_tools`
+ * config — an operator narrowing `exempt_tools` must never be able to strip
+ * this floor.
+ */
+export declare const SUMMARIZER_EXEMPT_TOOL_NAMES: readonly ["retrieve_summary", "retrieve_lane_output", "task", "read", "dispatch_lanes", "dispatch_lanes_async", "collect_lane_results", "parse_lane_candidates"];
 export declare const DEFAULT_MODELS: Record<string, string>;
 export declare const DEFAULT_AGENT_CONFIGS: Record<string, {
     model: string;