opencode-swarm 7.138.3 → 7.139.0

package/dist/cli/{index-gda7cwqz.js → index-6q240xgm.js}

@@ -1,25 +1,25 @@
 // @bun
 import {
-  DC_SAFE_TARGETS,
   HUMAN_ONLY_SWARM_COMMANDS,
   dcCheckJunctionCreation,
+  dcEvaluateRecursiveDeleteTargets,
   dcExtractPowerShellTargets,
+  dcExtractRecursiveRmTargets,
   dcExtractWindowsCmdTargets,
   dcNormalizeCommand,
   dcSplitSegments,
   dcUnwrapWrappers,
-  dcValidateTargets,
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-99af5gvd.js";
+} from "./index-r3pth9a7.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-31vfewmn.js";
+} from "./index-5bkpyvdf.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";
@@ -90,98 +90,60 @@ function evaluateDestructiveDecision(rawCommand, cwd, declaredScope) {
         firingRule: "destructive_block: junction creation"
       };
     }
-    const rmShortMatch = seg.match(/^rm\s+(-[rRfF]+(?:\s+-[rRfF]+)*|-r\s+-f|-f\s+-r)\s+(.+)$/);
-    const rmLongMatch = seg.match(/^rm\s+(?:--(?:recursive|force)\s+){1,2}(.+)$/);
-    const rmAnyMatch = rmShortMatch ?? rmLongMatch;
-    if (rmAnyMatch) {
-      const targetPart = rmAnyMatch[rmShortMatch ? 2 : 1].trim();
-      const targets = targetPart.split(/\s+/);
-      const validateBlock = dcValidateTargets(targets, cwd);
-      if (validateBlock) {
+    const targets = dcExtractRecursiveRmTargets(seg);
+    if (targets) {
+      const targetDecision = dcEvaluateRecursiveDeleteTargets({ targets, cwd });
+      if (!targetDecision.allowed) {
         return {
           decision: "block",
-          firingRule: `destructive_block: rm with unsafe target: ${redactPath(targetPart)}`
+          firingRule: `${targetDecision.code}: ${targetDecision.reason}`
         };
       }
-      const allSafe = targets.every((t) => DC_SAFE_TARGETS.has(t.replace(/^["']|["']$/g, "").trim()));
-      if (!allSafe) {
-        const scopeExempt = declaredScope != null && declaredScope.length > 0 && targets.every((t) => isInDeclaredScope(t.replace(/^["']|["']$/g, "").trim(), declaredScope, cwd));
-        if (!scopeExempt) {
-          return {
-            decision: "block",
-            firingRule: `destructive_block: rm recursive/force on unsafe path: ${redactPath(targetPart)}`
-          };
-        }
-      }
     }
     if (/^(?:rmdir|rd)(?:\.exe)?\s+.*\/[sS]/i.test(seg)) {
-      const targets = dcExtractWindowsCmdTargets(seg);
-      if (targets.length === 0) {
+      const targets2 = dcExtractWindowsCmdTargets(seg);
+      if (targets2.length === 0) {
         return {
           decision: "block",
           firingRule: "destructive_block: Windows recursive directory delete (rmdir /s)"
         };
       }
-      const validateBlock = dcValidateTargets(targets, cwd);
-      if (validateBlock) {
+      const targetDecision = dcEvaluateRecursiveDeleteTargets({ targets: targets2, cwd });
+      if (!targetDecision.allowed) {
         return {
           decision: "block",
-          firingRule: `destructive_block: rmdir /s unsafe: ${redactPath(targets.join(", "))}`
+          firingRule: `${targetDecision.code}: ${targetDecision.reason}`
         };
       }
-      const allSafe = targets.every((t) => DC_SAFE_TARGETS.has(t.trim()));
-      if (!allSafe) {
-        const scopeExempt = declaredScope != null && declaredScope.length > 0 && targets.every((t) => isInDeclaredScope(t.trim(), declaredScope, cwd));
-        if (!scopeExempt) {
-          return {
-            decision: "block",
-            firingRule: `destructive_block: rmdir /s on unsafe path: ${redactPath(targets.join(", "))}`
-          };
-        }
-      }
     }
     if (/^del(?:\.exe)?\s+.*\/[sS]/i.test(seg)) {
-      const targets = dcExtractWindowsCmdTargets(seg);
-      if (targets.length > 0) {
-        const validateBlock = dcValidateTargets(targets, cwd);
-        if (validateBlock) {
+      const targets2 = dcExtractWindowsCmdTargets(seg);
+      if (targets2.length > 0) {
+        const targetDecision = dcEvaluateRecursiveDeleteTargets({
+          targets: targets2,
+          cwd
+        });
+        if (!targetDecision.allowed) {
           return {
             decision: "block",
-            firingRule: `destructive_block: del /s unsafe: ${redactPath(targets.join(", "))}`
+            firingRule: `${targetDecision.code}: ${targetDecision.reason}`
           };
         }
-        const allSafe = targets.every((t) => DC_SAFE_TARGETS.has(t.trim()));
-        if (!allSafe) {
-          const scopeExempt = declaredScope != null && declaredScope.length > 0 && targets.every((t) => isInDeclaredScope(t.trim(), declaredScope, cwd));
-          if (!scopeExempt) {
-            return {
-              decision: "block",
-              firingRule: `destructive_block: del /s on unsafe path: ${redactPath(targets.join(", "))}`
-            };
-          }
-        }
       }
     }
     if (/^(?:Remove-Item|ri|rm|rmdir|del|erase|rd)\b.*-[Rr]ecurse\b/i.test(seg) || /^(?:Remove-Item|ri|rm|rmdir|del|erase|rd)\b.*-[Rr]\b/i.test(seg)) {
-      const targets = dcExtractPowerShellTargets(seg);
-      if (targets.length > 0) {
-        const validateBlock = dcValidateTargets(targets, cwd);
-        if (validateBlock) {
+      const targets2 = dcExtractPowerShellTargets(seg);
+      if (targets2.length > 0) {
+        const targetDecision = dcEvaluateRecursiveDeleteTargets({
+          targets: targets2,
+          cwd
+        });
+        if (!targetDecision.allowed) {
           return {
             decision: "block",
-            firingRule: `destructive_block: PowerShell recursive delete unsafe: ${redactPath(targets.join(", "))}`
+            firingRule: `${targetDecision.code}: ${targetDecision.reason}`
           };
         }
-        const allSafe = targets.every((t) => DC_SAFE_TARGETS.has(t.trim()));
-        if (!allSafe) {
-          const scopeExempt = declaredScope != null && declaredScope.length > 0 && targets.every((t) => isInDeclaredScope(t.trim(), declaredScope, cwd));
-          if (!scopeExempt) {
-            return {
-              decision: "block",
-              firingRule: `destructive_block: PowerShell recursive delete on unsafe path: ${redactPath(targets.join(", "))}`
-            };
-          }
-        }
       } else {
         return {
           decision: "block",

package/dist/cli/{index-adde7nm2.js → index-84s6x604.js}

@@ -6,13 +6,13 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-1djv5684.js";
+} from "./index-t31cc7kv.js";
 import {
   countEntryContradictionsInWindow,
   countEntryViolationsInWindow,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-93ky909v.js";
+} from "./index-kv36s0x0.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -190,11 +190,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-e5fqy9h4.js");
+    const { quarantineEntry } = await import("./knowledge-validator-v2eevvdg.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-xg5f11md.js");
-      const { loadPluginConfigWithMeta } = await import("./index-1v89yst3.js");
+      const { KnowledgeConfigSchema } = await import("./schema-xhfwr6b2.js");
+      const { loadPluginConfigWithMeta } = await import("./index-gytyqv1d.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-j0xx9wpj.js → index-85hstja2.js}

@@ -86,7 +86,7 @@ var _internals = {
     symlinkSync: fs.symlinkSync
   },
   writeScopeToDisk: async (directory, taskId, files) => {
-    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-n1bryhzf.js");
+    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-nsa6ra9s.js");
     return realWrite(directory, taskId, files);
   },
   writeLaneProfileToDisk: async (_worktreePath, _laneIndex, _envOverrides) => {

package/dist/cli/{index-xybtaph7.js → index-a614s16f.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-7g4c7s5r.js";
 import {
   emit
-} from "./index-10mz5js6.js";
+} from "./index-chvqee1j.js";
 import {
   __toESM
 } from "./index-a76rekgs.js";

package/dist/cli/{index-10mz5js6.js → index-chvqee1j.js}

@@ -532,7 +532,7 @@ var CATALOG_SOURCE = [
       category: "plan",
       severity: "notice",
       privacyClass: "operational",
-      producer: "src/plan/manager.ts:329",
+      producer: "src/plan/manager.ts:332",
       consumers: NO_CONSUMERS,
       futureOwnerIssue: ISSUE_SINK,
       retentionOwnerIssue: ISSUE_PLAN_EVIDENCE_RETENTION,
@@ -545,7 +545,7 @@ var CATALOG_SOURCE = [
       category: "plan",
       severity: "warning",
       privacyClass: "sensitive",
-      producer: "src/plan/manager.ts:1696",
+      producer: "src/plan/manager.ts:1699",
       consumers: NO_CONSUMERS,
       futureOwnerIssue: ISSUE_SINK,
       retentionOwnerIssue: ISSUE_PLAN_EVIDENCE_RETENTION,

package/dist/cli/{index-rrxcfxrd.js → index-ddmnhv4h.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-ngqxzkqm.js";
+} from "./index-z1tkxzq4.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,

package/dist/cli/{index-1v89yst3.js → index-gytyqv1d.js}

@@ -7,7 +7,7 @@ import {
   loadPluginConfigWithMeta,
   loadPluginConfigWithMetaAsync,
   resolveWorktreeIsolationConfig
-} from "./index-y6dvs5tt.js";
+} from "./index-q3qtgtd0.js";
 import {
   ApprovalEvidenceSchema,
   BaseEvidenceSchema,
@@ -54,7 +54,7 @@ import {
   TurboConfigSchema,
   WorktreeIsolationConfigSchema,
   resolveAutoReviewConfig
-} from "./index-ab57h0yq.js";
+} from "./index-rtetrxxq.js";
 import"./index-bk5tah7q.js";
 import {
   MigrationStatusSchema,

package/dist/cli/{index-93ky909v.js → index-kv36s0x0.js}

@@ -4,10 +4,10 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-en4fb04r.js";
+} from "./index-tyh0p5e8.js";
 import {
   atomicWriteFile
-} from "./index-tqshdzaw.js";
+} from "./index-nc544sfw.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -625,7 +625,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
       deltas.push({ id, delta });
     }
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-d99k0z2d.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-99gd42jy.js");
       await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-z7jgvm9b.js → index-nbgw5dxa.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-4qzeef9h.js";
 import {
   withEvidenceLock
-} from "./index-xybtaph7.js";
+} from "./index-a614s16f.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-tqshdzaw.js → index-nc544sfw.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-fsrp8wp3.js";
 import {
   withEvidenceLock
-} from "./index-xybtaph7.js";
+} from "./index-a614s16f.js";
 import {
   bunWrite
 } from "./index-y111zefa.js";

package/dist/cli/{index-js7th5my.js → index-nsnfvckc.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-31vfewmn.js";
+} from "./index-5bkpyvdf.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/{index-4fmztnrq.js → index-p2dz85tv.js}

@@ -6,10 +6,10 @@ import {
 } from "./index-1kz6da87.js";
 import {
   withEvidenceLock
-} from "./index-xybtaph7.js";
+} from "./index-a614s16f.js";
 import {
   emit
-} from "./index-10mz5js6.js";
+} from "./index-chvqee1j.js";
 import {
   criticalWarn,
   init_logger,

package/dist/cli/{index-y6dvs5tt.js → index-q3qtgtd0.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-ab57h0yq.js";
+} from "./index-rtetrxxq.js";
 import {
   advisoryWarn,
   init_warning_buffer