opencode-swarm 7.136.2 → 7.136.4

package/dist/cli/{index-sr2cynyw.js → index-t1s4b5ha.js}

@@ -12,16 +12,16 @@ import {
   resolveExecutableFromPath,
   runEvaluation,
   runExternalTool
-} from "./index-wjm896ey.js";
+} from "./index-nfm9f10v.js";
 import {
   stableCanonicalStringify
-} from "./index-m5fw4mer.js";
+} from "./index-89fpahtg.js";
 import {
   detectStraySwarmDirs,
   readDoctorArtifact,
   removeStraySwarmDir,
   runConfigDoctor
-} from "./index-7ayaq27q.js";
+} from "./index-gjs5g97v.js";
 import {
   MAX_TRANSIENT_RETRIES,
   archiveEvidence,
@@ -58,7 +58,7 @@ import {
   savePlan,
   transientBackoff,
   validateProjectRoot
-} from "./index-kwwxevne.js";
+} from "./index-45y0y3xh.js";
 import {
   EvaluationTaskV1Schema,
   GateAuditManifestV1Schema,
@@ -75,7 +75,7 @@ import {
   saveGateAuditResult,
   savePromotionDecision,
   saveTaskSetSnapshot
-} from "./index-z1tm47nj.js";
+} from "./index-ne28wyyc.js";
 import {
   canonicalHash,
   canonicalJson,
@@ -113,15 +113,15 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-ad6j0m7k.js";
+} from "./index-4cv991ra.js";
 import {
   readRecentEscalations
-} from "./index-21115szq.js";
+} from "./index-wy2f83j5.js";
 import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-1kn24ja0.js";
+} from "./index-fhnbzz75.js";
 import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
@@ -174,11 +174,11 @@ import {
   validateActionableFields,
   validateLesson,
   validateSkillPath
-} from "./index-s0rbdp61.js";
+} from "./index-fkdxfdbx.js";
 import {
   authorizeCuration,
   buildConfigFingerprintInput
-} from "./index-rw3f73aq.js";
+} from "./index-94pvh7hc.js";
 import {
   cohortConfigFingerprint
 } from "./index-rtry5xyf.js";
@@ -211,7 +211,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-0755132s.js";
+} from "./index-bb3ks0v3.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals,
@@ -221,7 +221,7 @@ import {
   recordHiveKnowledgeEvent,
   recordKnowledgeEvent,
   resolveKnowledgeEventsPath
-} from "./index-84nz7bhe.js";
+} from "./index-06htxvzq.js";
 import {
   resolveHiveDataDir,
   resolveHiveEventsPath,
@@ -237,16 +237,16 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-dzyjb33e.js";
+} from "./index-zzhyws9g.js";
 import {
   atomicWriteFile
-} from "./index-ey29aap6.js";
+} from "./index-b3jfcptk.js";
 import {
   exports_loader,
   init_loader,
   loadPluginConfig,
   loadPluginConfigWithMeta
-} from "./index-s0vahtdm.js";
+} from "./index-1hef020t.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-k5jrywpr.js";
@@ -262,7 +262,7 @@ import {
   package_default,
   resolveAutoReviewConfig,
   stripKnownSwarmPrefix
-} from "./index-y0xaq4f3.js";
+} from "./index-pq8ge6fe.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -278,13 +278,13 @@ import {
   listActive,
   subscribe,
   unsubscribe
-} from "./index-tcn457d5.js";
+} from "./index-kym0cctr.js";
 import {
   MAX_PENDING_SCOPE_BINDINGS,
   clearAllScopes,
   clearScopeBindingFromDisk,
   clearScopeBindings
-} from "./index-vg3yx648.js";
+} from "./index-w6j1n5az.js";
 import {
   appendLedgerEvent,
   computePlanHash,
@@ -292,7 +292,7 @@ import {
   derivePlanId,
   initLedger,
   takeSnapshotEvent
-} from "./index-wxyxf0bd.js";
+} from "./index-d61h3f3h.js";
 import {
   PlanSchema
 } from "./index-1kz6da87.js";
@@ -319,7 +319,7 @@ import {
 import {
   findByBatchId,
   readDelegations
-} from "./index-45t7w06b.js";
+} from "./index-7t3vjw5e.js";
 import {
   readSwarmFileAsync,
   safeHook,
@@ -328,7 +328,7 @@ import {
 import {
   tryAcquireLock,
   withEvidenceLock
-} from "./index-09b9zncg.js";
+} from "./index-tncy55bp.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -340,7 +340,7 @@ import {
   emit,
   getLastHeartbeat,
   telemetry
-} from "./index-7a2hm51h.js";
+} from "./index-cze4bq1x.js";
 import {
   bunSpawn,
   bunWrite,
@@ -5452,7 +5452,9 @@ function startAgentSession(sessionId, agentName, staleDurationMs = STALE_SESSION
     prmLastPatternDetected: null,
     prmTrajectoryStep: 0,
     prmHardStopPending: false,
+    prmHardStopInjectPending: false,
     prmInjectedAdvisoryKeys: new Set,
+    executionEpisodeArmed: false,
     prSubscriptions: new Map
   };
   swarmState.agentSessions.set(sessionId, sessionState);
@@ -5684,9 +5686,15 @@ function ensureAgentSession(sessionId, agentName, directory) {
     if (session.prmHardStopPending === undefined) {
       session.prmHardStopPending = false;
     }
+    if (session.prmHardStopInjectPending === undefined) {
+      session.prmHardStopInjectPending = false;
+    }
     if (!session.prmInjectedAdvisoryKeys) {
       session.prmInjectedAdvisoryKeys = new Set;
     }
+    if (session.executionEpisodeArmed === undefined) {
+      session.executionEpisodeArmed = false;
+    }
     if (!session.prSubscriptions) {
       session.prSubscriptions = new Map;
     }
@@ -6098,7 +6106,7 @@ function hasActiveEpicMode(sessionID) {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-qhr41epq.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-jn0h047q.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)
@@ -11356,6 +11364,25 @@ function dcExtractPowerShellTargets(segment) {
   return targets;
 }
 
+// src/hooks/guardrails/execution-stall.ts
+init_constants();
+init_schema();
+var MUTATING_DELEGATION_ROLES = new Set([
+  "coder",
+  "reviewer",
+  "test_engineer",
+  "security_reviewer"
+]);
+var EXECUTION_STALL_DENIED_TOOLS = new Set([
+  "read",
+  "glob",
+  "grep",
+  "bash",
+  "shell"
+]);
+var stallStates = new Map;
+var pendingDispatchRoles = new Map;
+
 // src/hooks/guardrails/messages-transform.ts
 init_constants();
 init_schema();
@@ -14064,6 +14091,16 @@ function containsControlChars(str) {
 
 // src/tools/file-extractor-planner.ts
 var cachedPlans = new WeakMap;
+
+// src/hooks/guardrails/internals-guard.ts
+var GUARDED_TOOLS = new Set([
+  "read",
+  "glob",
+  "grep",
+  "bash",
+  "shell"
+]);
+var selfDevelopmentWorkspaces = new Map;
 // src/hooks/guardrails/index.ts
 var SPEC_DRIFT_BLOCKED_TOOLS = new Set([
   "save_plan",
@@ -14074,6 +14111,7 @@ var SPEC_DRIFT_BLOCKED_TOOLS = new Set([
 ]);
 var toolCallsSinceLastWrite = new Map;
 var noOpWarningIssued = new Set;
+var noOpStrongWarningIssued = new Set;
 // src/hooks/delegation-gate.ts
 var EvidenceTaskIdPlanSchema = exports_external.object({
   phases: exports_external.array(exports_external.object({
@@ -18075,7 +18113,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-wnz282j3.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-rkp6jvc3.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -19668,7 +19706,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-4p10ktw1.js");
+        const skillModule = await import("./skill-generator-8zhprasg.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -20128,7 +20166,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-ta3xjrdj.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-e815bveb.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -20947,7 +20985,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-48gwzh9c.js");
+      const { getScanStatus } = await import("./scan-cursor-129fwf7e.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -21119,9 +21157,9 @@ var _internals23 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-f937b9cs.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-3xdza5gg.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-wnz282j3.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-rkp6jvc3.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -21129,11 +21167,11 @@ var _internals23 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-nrmj8bds.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-763smew7.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-cy21rhnd.js");
+    const { checkHivePromotions } = await import("./hive-promoter-en786ja4.js");
     return checkHivePromotions(entries, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -21142,7 +21180,7 @@ var _internals23 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-4p10ktw1.js");
+    } = await import("./skill-generator-8zhprasg.js");
     const result = {
       approved: [],
       rejected: [],
@@ -23769,9 +23807,9 @@ function hashContent(content) {
   return createHash9("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-f937b9cs.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-3xdza5gg.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-wnz282j3.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-rkp6jvc3.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -27116,7 +27154,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-f937b9cs.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-3xdza5gg.js");
     const { config: pmLoadedConfig } = _internals33.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -29346,9 +29384,9 @@ var _internals38 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
-      import("./schema-f937b9cs.js"),
-      import("./curator-nrmj8bds.js"),
-      import("./curator-llm-factory-x7kvry9x.js")
+      import("./schema-3xdza5gg.js"),
+      import("./curator-763smew7.js"),
+      import("./curator-llm-factory-dg8mmzy7.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -30250,7 +30288,7 @@ async function computeCurationDiagnostics(directory, entries) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-48gwzh9c.js");
+    const { getScanStatus } = await import("./scan-cursor-129fwf7e.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -30258,19 +30296,19 @@ async function computeCurationDiagnostics(directory, entries) {
   } catch {}
   let configMatch = null;
   try {
-    const { isLinked: isLinked2 } = await import("./knowledge-link-mm1w967j.js");
+    const { isLinked: isLinked2 } = await import("./knowledge-link-zr40rnwr.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-f937b9cs.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-3xdza5gg.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-wnz282j3.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-rkp6jvc3.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
         config = KnowledgeConfigSchema2.parse({});
       }
       const { cohortConfigFingerprint: cohortConfigFingerprint2 } = await import("./config-fingerprint-v22xh5a2.js");
-      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-kvzhfaj1.js");
+      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-8tsbaa4q.js");
       const currentFp = cohortConfigFingerprint2(buildConfigFingerprintInput2(config));
       const cohortFp = await readCohortConfigFingerprint(directory);
       configMatch = cohortFp === null ? null : currentFp === cohortFp;
@@ -31481,7 +31519,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-b67nb84b.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-qwp5y9dk.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -32318,7 +32356,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-cf8sz2bq.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-nse06dqr.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -47423,6 +47461,19 @@ init_constants();
 import * as fs40 from "fs";
 import * as path85 from "path";
 
+// src/hooks/gate-denial-tracker.ts
+init_schema();
+var GATE_DENIAL_TTL_MS = 30 * 60000;
+var UNCLASSIFIED_GATE_DENIAL_CODE = "UNCLASSIFIED";
+var denialStreaks = new Map;
+var NOT_COUNTED = Object.freeze({
+  code: UNCLASSIFIED_GATE_DENIAL_CODE,
+  count: 0,
+  warned: false,
+  stopped: false,
+  decorated: false
+});
+
 // src/hooks/trajectory-logger.ts
 var callStartTimes = new Map;
 var SENSITIVE_FIELDS = new Set([
@@ -47443,6 +47494,8 @@ var SENSITIVE_FIELDS = new Set([
   "session_id",
   "cookie"
 ]);
+var DENIED_CALL_TTL_MS = 5 * 60000;
+var deniedCallMarkers = new Map;
 function clearTrajectoryStep(sessionId) {
   clearTrajectoryStepCounters(sessionId);
 }
@@ -47913,6 +47966,7 @@ function resetPrmSessionState(session, sessionId) {
   session.prmEscalationLevel = 0;
   session.prmLastPatternDetected = null;
   session.prmHardStopPending = false;
+  session.prmHardStopInjectPending = false;
   session.prmTrajectoryStep = 0;
   session.prmInjectedAdvisoryKeys = new Set;
   session.replayArtifactPath = null;
@@ -52575,7 +52629,7 @@ async function runValidationWithTransientRetry(input, candidateContent, baseline
       if (!input.dispatcher) {
         throw new Error("no evaluation dispatcher available (cannot run validation)");
       }
-      const { createModelEvaluationExecutor } = await import("./runner-2v413r74.js");
+      const { createModelEvaluationExecutor } = await import("./runner-deeswadt.js");
       const executor = createModelEvaluationExecutor(input.dispatcher, input.sessionId);
       const result = await _internals80.evaluateCandidateV1({
         projectRoot: input.directory,
@@ -54400,7 +54454,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-ckybsn6p.js");
+    const { buildHelpText } = await import("./index-et8b70c8.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -54409,7 +54463,7 @@ async function handleHelpCommand(ctx) {
     return _internals13.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals13.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-ckybsn6p.js");
+  const { buildHelpText: fullHelp } = await import("./index-et8b70c8.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -54586,7 +54640,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-5kd44rcj.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-6jc012g3.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -54596,7 +54650,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-5kd44rcj.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-6jc012g3.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -54606,7 +54660,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-aksrzqdx.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-86aw7fne.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -56115,6 +56169,8 @@ Continue handling small touch-ups (typos, cross-references) via the spec_writer
 Commands above are documented with args and behavioral details. Run commands via /swarm <command> [args].
 Outside OpenCode, invoke any plugin command via: \`bunx opencode-swarm run <command> [args]\` (e.g. \`bunx opencode-swarm run knowledge migrate\`). Do not use \`bun -e\` or look for \`src/commands/\` \u2014 those paths are internal to the plugin source and do not exist in user project directories. EXCEPTION \u2014 human-only commands (including but not limited to \`acknowledge-spec-drift\`, \`reset\`, \`reset-session\`, \`rollback\`, \`checkpoint\`, and any command that releases a runtime safety gate or destroys plan state): you MUST present these to the user and ask them to run the command themselves. Never invoke a human-only command via Bash, swarm_command, or chat fallback. The runtime guardrail will block such attempts; if a Bash call returns \`BLOCKED\` with a "human-only" message, do not retry under a different shell form \u2014 present the situation to the user instead.
 
+GATE/GUARDRAIL ERRORS ARE NEVER A SPELUNKING INVITATION: when a tool call is denied with a gate or guardrail code \u2014 \`ACCEPTANCE_*\`, \`SCOPE_*\`, \`PLAN_CRITIC_*\`, \`BLOCKED\`, \`CIRCUIT BREAKER\`, \`PRM HARD STOP\`, \`FULL_AUTO_*\`, \`SWARM_INTERNALS_OFF_LIMITS\` \u2014 the fix is ALWAYS to correct the dispatch or state the error names (re-declare scope, rewrite ACCEPTANCE text, resolve the named conflict) or to surface the blocker to the user in plain language. It is NEVER to go read the installed plugin package (\`node_modules/opencode-swarm\`, \`~/.cache/opencode/\u2026\`, its \`dist/\`) or to hunt for plugin \`src/\` paths \u2014 those paths are internal to the plugin's own development repo and do not exist in installed deployments; reading them wastes turns and produces no remediation. If you retry the same dispatch against the same error code twice without success, STOP retrying \u2014 present the blocker to the user verbatim, including the exact error code and message, rather than attempting a third self-recovery.
+
 SMEs advise only. Reviewer and critic review only. None of them write code.
 
 Available Tools: {{AVAILABLE_TOOLS}}
@@ -57848,6 +57904,7 @@ SKILL_COMPLIANCE: <verdict> \u2014 <details>
 - Only flag real issues, not theoretical
 - Don't reject for style if functionally correct
 - No code modifications
+- GATE/GUARDRAIL ERRORS: if any tool call you make is denied with a gate or guardrail code (\`ACCEPTANCE_*\`, \`SCOPE_*\`, \`PLAN_CRITIC_*\`, \`BLOCKED\`, \`CIRCUIT BREAKER\`, \`PRM HARD STOP\`, \`FULL_AUTO_*\`, \`SWARM_INTERNALS_OFF_LIMITS\`), the fix is to correct whatever the error names or to surface the blocker to the architect \u2014 never to go read the installed plugin package (\`node_modules/opencode-swarm\`, \`~/.cache/opencode/\u2026\`, its \`dist/\`) or hunt for plugin \`src/\` paths, which do not exist in installed deployments. After two failed retries against the same error code, stop retrying and report the blocker verbatim instead of attempting a third time.
 
 ## SEVERITY CALIBRATION
 Use these definitions precisely \u2014 do not inflate severity:

package/dist/cli/{index-09b9zncg.js → index-tncy55bp.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-7g4c7s5r.js";
 import {
   emit
-} from "./index-7a2hm51h.js";
+} from "./index-cze4bq1x.js";
 import {
   __toESM
 } from "./index-a76rekgs.js";

package/dist/cli/{index-vg3yx648.js → index-w6j1n5az.js}

@@ -2,7 +2,7 @@
 import {
   computePlanStructureHash,
   derivePlanId
-} from "./index-wxyxf0bd.js";
+} from "./index-d61h3f3h.js";
 import {
   PlanSchema
 } from "./index-1kz6da87.js";

package/dist/cli/{index-21115szq.js → index-wy2f83j5.js}

@@ -6,13 +6,13 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-0755132s.js";
+} from "./index-bb3ks0v3.js";
 import {
   countEntryContradictionsInWindow,
   countEntryViolationsInWindow,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-84nz7bhe.js";
+} from "./index-06htxvzq.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -190,11 +190,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-jsz1dxkr.js");
+    const { quarantineEntry } = await import("./knowledge-validator-xsetvy4v.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-f937b9cs.js");
-      const { loadPluginConfigWithMeta } = await import("./index-wnz282j3.js");
+      const { KnowledgeConfigSchema } = await import("./schema-3xdza5gg.js");
+      const { loadPluginConfigWithMeta } = await import("./index-rkp6jvc3.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-dzyjb33e.js → index-zzhyws9g.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   atomicWriteFile
-} from "./index-ey29aap6.js";
+} from "./index-b3jfcptk.js";
 import {
   init_logger,
   warn

package/dist/cli/index.js

@@ -6,61 +6,61 @@ import {
   getPluginConfigDir,
   getPluginLockFilePaths,
   resolveCommand
-} from "./index-sr2cynyw.js";
+} from "./index-t1s4b5ha.js";
 import"./index-vm4xw9z3.js";
-import"./index-wjm896ey.js";
-import"./index-m5fw4mer.js";
-import"./index-7ayaq27q.js";
-import"./index-kwwxevne.js";
-import"./index-z1tm47nj.js";
+import"./index-nfm9f10v.js";
+import"./index-89fpahtg.js";
+import"./index-gjs5g97v.js";
+import"./index-45y0y3xh.js";
+import"./index-ne28wyyc.js";
 import"./index-y8552snf.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-ad6j0m7k.js";
-import"./index-21115szq.js";
-import"./index-1kn24ja0.js";
+import"./index-4cv991ra.js";
+import"./index-wy2f83j5.js";
+import"./index-fhnbzz75.js";
 import"./index-6mjf4vr1.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-wsdnttf4.js";
-import"./index-mrtms113.js";
-import"./index-s0rbdp61.js";
-import"./index-rw3f73aq.js";
+import"./index-d2sf9an1.js";
+import"./index-fkdxfdbx.js";
+import"./index-94pvh7hc.js";
 import"./index-rtry5xyf.js";
-import"./index-0755132s.js";
-import"./index-84nz7bhe.js";
+import"./index-bb3ks0v3.js";
+import"./index-06htxvzq.js";
 import"./index-ae75rja9.js";
-import"./index-dzyjb33e.js";
-import"./index-ey29aap6.js";
-import"./index-s0vahtdm.js";
+import"./index-zzhyws9g.js";
+import"./index-b3jfcptk.js";
+import"./index-1hef020t.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
   init_package,
   package_default
-} from "./index-y0xaq4f3.js";
+} from "./index-pq8ge6fe.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-tcn457d5.js";
-import"./index-vg3yx648.js";
-import"./index-wxyxf0bd.js";
+import"./index-kym0cctr.js";
+import"./index-w6j1n5az.js";
+import"./index-d61h3f3h.js";
 import"./index-1kz6da87.js";
 import"./index-x20cgr2q.js";
 import"./index-b8zgtz81.js";
-import"./index-c9ddxv4k.js";
+import"./index-hh34tyv7.js";
 import"./index-4rhhvd1a.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants
 } from "./index-3jcyn8g6.js";
-import"./index-45t7w06b.js";
+import"./index-7t3vjw5e.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
-import"./index-09b9zncg.js";
+import"./index-tncy55bp.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
-import"./index-7a2hm51h.js";
+import"./index-cze4bq1x.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-y111zefa.js";