opencode-swarm 7.138.3 → 7.139.0

package/dist/cli/{index-ngqxzkqm.js → index-z1tkxzq4.js}

@@ -9,10 +9,10 @@ import {
 } from "./index-y8552snf.js";
 import {
   atomicWriteFile
-} from "./index-tqshdzaw.js";
+} from "./index-nc544sfw.js";
 import {
   withEvidenceLock
-} from "./index-xybtaph7.js";
+} from "./index-a614s16f.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-btx8j39p.js → index-zd15ya1w.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-ab57h0yq.js";
+} from "./index-rtetrxxq.js";
 import {
   ALL_AGENT_NAMES,
   init_constants

package/dist/cli/index.js

@@ -6,60 +6,61 @@ import {
   getPluginConfigDir,
   getPluginLockFilePaths,
   resolveCommand
-} from "./index-99af5gvd.js";
+} from "./index-r3pth9a7.js";
 import"./index-vm4xw9z3.js";
-import"./index-rrxcfxrd.js";
-import"./index-31vfewmn.js";
-import"./index-btx8j39p.js";
-import"./index-y06a43sk.js";
-import"./index-ngqxzkqm.js";
+import"./index-ddmnhv4h.js";
+import"./index-5bkpyvdf.js";
+import"./index-zd15ya1w.js";
+import"./index-4ft523nb.js";
+import"./index-z1tkxzq4.js";
 import"./index-y8552snf.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-jhb8kjc5.js";
-import"./index-adde7nm2.js";
-import"./index-rjratees.js";
+import"./index-3nr2sn32.js";
+import"./index-84s6x604.js";
+import"./index-s428dmy6.js";
 import"./index-6mjf4vr1.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-wsdnttf4.js";
-import"./index-39k6y018.js";
-import"./index-tc61fybd.js";
-import"./index-wqg74mwj.js";
+import"./index-tcdcj1g2.js";
+import"./index-0tsetsxs.js";
+import"./index-67yqywan.js";
 import"./index-rtry5xyf.js";
-import"./index-1djv5684.js";
-import"./index-93ky909v.js";
+import"./index-t31cc7kv.js";
+import"./index-kv36s0x0.js";
 import"./index-ae75rja9.js";
-import"./index-en4fb04r.js";
-import"./index-tqshdzaw.js";
-import"./index-y6dvs5tt.js";
+import"./index-tyh0p5e8.js";
+import"./index-nc544sfw.js";
+import"./index-q3qtgtd0.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import {
   init_package,
   package_default
-} from "./index-ab57h0yq.js";
+} from "./index-rtetrxxq.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-z7jgvm9b.js";
-import"./index-2y4jy0de.js";
-import"./index-4fmztnrq.js";
+import"./index-nbgw5dxa.js";
+import"./index-ymszzvnr.js";
+import"./index-556ja8an.js";
+import"./index-p2dz85tv.js";
 import"./index-1kz6da87.js";
 import"./index-x20cgr2q.js";
 import"./index-b8zgtz81.js";
-import"./index-j0xx9wpj.js";
+import"./index-85hstja2.js";
 import"./index-4rhhvd1a.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants
 } from "./index-3jcyn8g6.js";
-import"./index-q344kj84.js";
+import"./index-t26nfmcs.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{knowledge-escalator-7n384ys1.js → knowledge-escalator-6473ey4c.js}

@@ -8,17 +8,17 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-adde7nm2.js";
-import"./index-1djv5684.js";
-import"./index-93ky909v.js";
+} from "./index-84s6x604.js";
+import"./index-t31cc7kv.js";
+import"./index-kv36s0x0.js";
 import"./index-ae75rja9.js";
-import"./index-en4fb04r.js";
-import"./index-tqshdzaw.js";
+import"./index-tyh0p5e8.js";
+import"./index-nc544sfw.js";
 import"./index-bk5tah7q.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-events-yaj0yjd6.js → knowledge-events-wwzpz8m4.js}

@@ -28,14 +28,14 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-93ky909v.js";
+} from "./index-kv36s0x0.js";
 import"./index-ae75rja9.js";
-import"./index-en4fb04r.js";
-import"./index-tqshdzaw.js";
+import"./index-tyh0p5e8.js";
+import"./index-nc544sfw.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-link-xc6yhxmz.js → knowledge-link-trfydkzm.js}

@@ -12,12 +12,12 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-en4fb04r.js";
-import"./index-tqshdzaw.js";
+} from "./index-tyh0p5e8.js";
+import"./index-nc544sfw.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-store-d99k0z2d.js → knowledge-store-99gd42jy.js}

@@ -41,17 +41,17 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-1djv5684.js";
+} from "./index-t31cc7kv.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";
-import"./index-en4fb04r.js";
-import"./index-tqshdzaw.js";
+import"./index-tyh0p5e8.js";
+import"./index-nc544sfw.js";
 import"./index-bk5tah7q.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-validator-e5fqy9h4.js → knowledge-validator-v2eevvdg.js}

@@ -23,19 +23,19 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-tc61fybd.js";
-import"./index-wqg74mwj.js";
+} from "./index-0tsetsxs.js";
+import"./index-67yqywan.js";
 import"./index-rtry5xyf.js";
-import"./index-1djv5684.js";
-import"./index-93ky909v.js";
+import"./index-t31cc7kv.js";
+import"./index-kv36s0x0.js";
 import"./index-ae75rja9.js";
-import"./index-en4fb04r.js";
-import"./index-tqshdzaw.js";
+import"./index-tyh0p5e8.js";
+import"./index-nc544sfw.js";
 import"./index-bk5tah7q.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{pending-delegations-7dbc0j2a.js → pending-delegations-p6n83x67.js}

@@ -41,12 +41,12 @@ import {
   sweepStaleDelegations,
   updateCoderSettlement,
   writeDelegationFallback
-} from "./index-q344kj84.js";
+} from "./index-t26nfmcs.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{pr-subscriptions-m943zn6g.js → pr-subscriptions-xbrfr51c.js}

@@ -9,12 +9,12 @@ import {
   sweepStale,
   unsubscribe,
   updateSnapshot
-} from "./index-z7jgvm9b.js";
+} from "./index-nbgw5dxa.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{runner-x1hy047y.js → runner-9an52tmz.js}

@@ -3,14 +3,14 @@ import {
   _internals,
   createModelEvaluationExecutor,
   runEvaluation
-} from "./index-rrxcfxrd.js";
-import"./index-ngqxzkqm.js";
+} from "./index-ddmnhv4h.js";
+import"./index-z1tkxzq4.js";
 import"./index-y8552snf.js";
-import"./index-tqshdzaw.js";
+import"./index-nc544sfw.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-a76rekgs.js";

package/dist/cli/{scan-cursor-9y9msabt.js → scan-cursor-39zxpw34.js}

@@ -4,16 +4,16 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-rjratees.js";
-import"./index-1djv5684.js";
+} from "./index-s428dmy6.js";
+import"./index-t31cc7kv.js";
 import"./index-ae75rja9.js";
-import"./index-en4fb04r.js";
-import"./index-tqshdzaw.js";
+import"./index-tyh0p5e8.js";
+import"./index-nc544sfw.js";
 import"./index-bk5tah7q.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{schema-xg5f11md.js → schema-xhfwr6b2.js}

@@ -95,7 +95,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-ab57h0yq.js";
+} from "./index-rtetrxxq.js";
 import"./index-bk5tah7q.js";
 import"./index-3jcyn8g6.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/scope-persistence-nsa6ra9s.js

@@ -0,0 +1,61 @@
+// @bun
+import {
+  _scopePersistenceInternals,
+  claimScopeBindingForChildDurably,
+  clearAllScopes,
+  clearScopeBindingFromDisk,
+  clearScopeForTask,
+  flushScopeBindingMaintenance,
+  persistAndRegisterScopeBinding,
+  pruneScopeBindingTombstones,
+  readPlanScope,
+  readScopeBindingFromDisk,
+  readScopeFromDisk,
+  refreshScopeBindingLease,
+  replaceExistingScopeDeclaration,
+  resolveAuthorizedPrFeedbackScopeBindingFromDisk,
+  resolveAuthorizedScopeBinding,
+  resolveAuthorizedScopeBindingDetailed,
+  resolveAuthorizedScopeBindingForSession,
+  resolveAuthorizedScopeBindingForSessionDetailed,
+  resolveScopeBindingFromDisk,
+  resolveScopeWithFallbacks,
+  tombstoneScopeBinding,
+  writeScopeBindingToDisk,
+  writeScopeToDisk
+} from "./index-ymszzvnr.js";
+import"./index-556ja8an.js";
+import"./index-p2dz85tv.js";
+import"./index-1kz6da87.js";
+import"./index-a614s16f.js";
+import"./index-7g4c7s5r.js";
+import"./index-chvqee1j.js";
+import"./index-bpmtbmy9.js";
+import"./index-y111zefa.js";
+import"./index-zgwm4ryv.js";
+import"./index-a76rekgs.js";
+export {
+  writeScopeToDisk,
+  writeScopeBindingToDisk,
+  tombstoneScopeBinding,
+  resolveScopeWithFallbacks,
+  resolveScopeBindingFromDisk,
+  resolveAuthorizedScopeBindingForSessionDetailed,
+  resolveAuthorizedScopeBindingForSession,
+  resolveAuthorizedScopeBindingDetailed,
+  resolveAuthorizedScopeBinding,
+  resolveAuthorizedPrFeedbackScopeBindingFromDisk,
+  replaceExistingScopeDeclaration,
+  refreshScopeBindingLease,
+  readScopeFromDisk,
+  readScopeBindingFromDisk,
+  readPlanScope,
+  pruneScopeBindingTombstones,
+  persistAndRegisterScopeBinding,
+  flushScopeBindingMaintenance,
+  clearScopeForTask,
+  clearScopeBindingFromDisk,
+  clearAllScopes,
+  claimScopeBindingForChildDurably,
+  _scopePersistenceInternals
+};

package/dist/cli/{skill-generator-arvwfdfh.js → skill-generator-5px81476.js}

@@ -33,21 +33,21 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-jhb8kjc5.js";
-import"./index-tc61fybd.js";
-import"./index-wqg74mwj.js";
+} from "./index-3nr2sn32.js";
+import"./index-0tsetsxs.js";
+import"./index-67yqywan.js";
 import"./index-rtry5xyf.js";
-import"./index-1djv5684.js";
-import"./index-93ky909v.js";
+import"./index-t31cc7kv.js";
+import"./index-kv36s0x0.js";
 import"./index-ae75rja9.js";
-import"./index-en4fb04r.js";
-import"./index-tqshdzaw.js";
+import"./index-tyh0p5e8.js";
+import"./index-nc544sfw.js";
 import"./index-bk5tah7q.js";
 import"./index-4rhhvd1a.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{telemetry-0yqed3jv.js → telemetry-7nt7zhyp.js}

@@ -13,7 +13,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-10mz5js6.js";
+} from "./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{worktree-collision-ownership-hjrt5hx2.js → worktree-collision-ownership-9x4s4890.js}

@@ -8,12 +8,12 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-q344kj84.js";
+} from "./index-t26nfmcs.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
-import"./index-xybtaph7.js";
+import"./index-a614s16f.js";
 import"./index-7g4c7s5r.js";
-import"./index-10mz5js6.js";
+import"./index-chvqee1j.js";
 import"./index-bpmtbmy9.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/hooks/guardrails/destructive-command.d.ts

@@ -58,6 +58,13 @@ export declare function dcUnwrapWrappers(cmd: string): string;
  * Returns array of trimmed non-empty segments.
  */
 export declare function dcSplitSegments(cmd: string): string[];
+/**
+ * Extract targets from an `rm` command whose leading option set requests
+ * recursive or forced deletion. Accepts stacked short flags and long flags in
+ * any leading order. Quoted targets remain one token. Returns null when the
+ * segment is not a destructive rm form.
+ */
+export declare function dcExtractRecursiveRmTargets(segment: string): string[] | null;
 /**
  * Returns true if a path string contains unexpanded environment variable
  * references that we cannot resolve at check time.
@@ -87,6 +94,34 @@ export declare function dcLstatAncestorWalk(targetPath: string, cwd: string): st
  * Returns a block reason string or null if targets are acceptable.
  */
 export declare function dcValidateTargets(targets: string[], cwd: string): string | null;
+export interface DcVerifiedScope {
+    bindingId: string;
+    generationId: string;
+    files: string[];
+}
+export type DcRecursiveDeleteDecision = {
+    allowed: true;
+    kind: 'bare-safe-artifact' | 'scoped-nested-safe-artifact';
+    targets: string[];
+} | {
+    allowed: false;
+    code: 'DESTRUCTIVE_TARGET_INVALID' | 'DESTRUCTIVE_TARGET_PROTECTED' | 'DESTRUCTIVE_TARGET_OUTSIDE_WORKSPACE' | 'DESTRUCTIVE_TARGET_NOT_SAFE_ARTIFACT' | 'DESTRUCTIVE_TARGET_SCOPE_REQUIRED' | 'DESTRUCTIVE_TARGET_OUT_OF_SCOPE';
+    reason: string;
+};
+/**
+ * Evaluate recursive-delete targets as one atomic set.
+ *
+ * Bare safe artifact names remain statically allowable after common target
+ * validation. Nested targets require an allowlisted final component and a
+ * resolver-produced active binding identity covering the target. Arbitrary
+ * in-scope directories are never exempt, and `.git`/`.swarm` are protected at
+ * every depth.
+ */
+export declare function dcEvaluateRecursiveDeleteTargets(input: {
+    targets: string[];
+    cwd: string;
+    verifiedScope?: DcVerifiedScope;
+}): DcRecursiveDeleteDecision;
 /**
  * Detect Windows junction or symlink CREATION commands.
  * Junction creation followed by recursive deletion of the junction is the

package/dist/hooks/guardrails/file-authority.d.ts

@@ -11,6 +11,7 @@
 import * as path from 'node:path';
 import { type AuthorityConfig } from '../../config/schema';
 import { type FileZone } from '../../context/zone-classifier';
+import { type PathFlavor } from '../../scope/path-identity';
 /**
  * Hashes tool arguments for repetition detection.
  *
@@ -106,6 +107,39 @@ export type AgentRule = {
     allowedGlobs?: string[];
     allowedCaseSensitiveGlobs?: string[];
 };
+export type AuthorityRoleCapability = 'native' | 'direct-write' | 'read-only' | 'dedicated-tool-only';
+/**
+ * Exhaustive classification for every swarm role. Dedicated-tool roles may
+ * mutate state only through their purpose-built tools, never raw file writes.
+ */
+export declare const AUTHORITY_ROLE_CAPABILITIES: {
+    readonly architect: "direct-write";
+    readonly coder: "direct-write";
+    readonly reviewer: "direct-write";
+    readonly critic: "direct-write";
+    readonly critic_oversight: "dedicated-tool-only";
+    readonly critic_finding_validator: "dedicated-tool-only";
+    readonly explorer: "read-only";
+    readonly sme: "read-only";
+    readonly researcher: "read-only";
+    readonly test_engineer: "direct-write";
+    readonly docs: "direct-write";
+    readonly docs_design: "direct-write";
+    readonly designer: "direct-write";
+    readonly critic_sounding_board: "read-only";
+    readonly critic_drift_verifier: "read-only";
+    readonly critic_hallucination_verifier: "read-only";
+    readonly critic_architecture_supervisor: "read-only";
+    readonly curator_init: "dedicated-tool-only";
+    readonly curator_phase: "dedicated-tool-only";
+    readonly curator_postmortem: "dedicated-tool-only";
+    readonly curator_consolidation: "dedicated-tool-only";
+    readonly council_generalist: "read-only";
+    readonly council_skeptic: "read-only";
+    readonly council_domain_expert: "read-only";
+    readonly skill_improver: "dedicated-tool-only";
+    readonly spec_writer: "dedicated-tool-only";
+};
 export declare const DEFAULT_AGENT_AUTHORITY_RULES: Record<string, AgentRule>;
 /**
  * Checks whether a write target path (or any ancestor strictly inside cwd)
@@ -126,6 +160,13 @@ export declare const DEFAULT_AGENT_AUTHORITY_RULES: Record<string, AgentRule>;
  * @returns A block reason string if a symlink is detected, null if all clear.
  */
 export declare function checkWriteTargetForSymlink(targetPath: string, cwd: string): string | null;
+/**
+ * Match configured authority prefixes using normalized lexical-prefix
+ * semantics. Thus `.env` covers `.env.local`; resolving both operands against
+ * one workspace root prevents sibling-workspace string collisions. Windows
+ * comparisons case-fold while POSIX comparisons remain case-sensitive.
+ */
+export declare function matchesAuthorityDenyPrefix(candidate: string, prefix: string, cwd: string, flavor?: PathFlavor): boolean;
 /**
  * Builds the effective rules map by merging user-configured rules with defaults.
  * User overrides take precedence for each field.
@@ -144,38 +185,42 @@ export declare function buildEffectiveRules(authorityConfig?: AuthorityConfig):
  * pass `path.win32` / `path.posix` directly.
  */
 export declare function isOnDifferentFilesystemRoot(targetAbsolute: string, cwdAbsolute: string, pathLib?: Pick<typeof path, 'parse'>): boolean;
-/**
- * Checks file path authority against a pre-computed rules map.
- * Implements DENY-first evaluation order:
- * 1. readOnly - blocks all writes
- * 2. blockedExact - exact path matches (fast path)
- * 3. blockedGlobs - glob pattern matches
- * 4. allowedExact - explicit allow for exact paths
- * 5. blockedZones - zone-based blocking (runs before allowedGlobs so that generated
- *    output dirs like dist/ and build/ cannot be bypassed by a glob pattern match)
- * 6. allowedGlobs - explicit allow for glob patterns (overrides blockedPrefix/allowedPrefix
- *    but NOT blockedZones, which is already decided in Step 5)
- * 7. blockedPrefix - prefix-based blocking (takes priority over allowedPrefix)
- * 8. allowedPrefix - prefix-based allow (whitelist)
- */
-export declare function checkFileAuthorityWithRules(agentName: string, filePath: string, cwd: string, effectiveRules: Record<string, AgentRule>, options?: {
-    declaredScope?: string[] | null;
-}): {
+export declare const BUILT_IN_VERIFIER_CONFIG_GLOBS: readonly ["**/oxlintrc*", "**/.oxlintrc*", "**/.eslintrc*", "**/eslint.config.*", "**/.prettierrc*", "**/prettier.config.*", "**/biome.json", "**/biome.jsonc", "**/tsconfig*.json", "**/.secretscanignore", "**/.golangci*"];
+export type AuthorityDecisionCode = 'AUTHORITY_INVALID_PATH' | 'AUTHORITY_ROOT_ESCAPE' | 'AUTHORITY_UNIVERSAL_DENY' | 'AUTHORITY_PROTECTED_PATH' | 'AUTHORITY_VERIFIER_CONFIG' | 'AUTHORITY_ROLE_READ_ONLY' | 'AUTHORITY_UNKNOWN_AGENT' | 'AUTHORITY_POLICY_DENY';
+export type AuthorityDecisionLayer = 'path-validation' | 'containment' | 'universal-deny' | 'protected-path' | 'role-capability' | 'declared-scope' | 'role-policy';
+export type AuthorityRecoveryAction = 'declare_scope' | 'save_plan';
+export type AuthorityDecision = {
     allowed: true;
+    layer: AuthorityDecisionLayer;
+    path: string;
+    agent: string;
 } | {
     allowed: false;
+    code: AuthorityDecisionCode;
+    layer: AuthorityDecisionLayer;
+    rule: string;
+    path: string;
+    agent: string;
     reason: string;
+    recovery?: AuthorityRecoveryAction;
     zone?: FileZone;
 };
+export interface AuthorityEvaluationOptions {
+    declaredScope?: string[] | null;
+    authorityEnabled?: boolean;
+    universalDenyPrefixes?: readonly string[];
+    verifierConfigPaths?: readonly string[];
+}
+/**
+ * Checks file path authority against a pre-computed rules map. Evaluation is
+ * staged: safe path + workspace containment; universal and protected denies;
+ * immutable role capability; exact declared coder scope; then configurable
+ * role policy. Scope can therefore authorize config/generated deliverables but
+ * can never authorize `.swarm`, verifier config, universal denies, root escape,
+ * or raw writes from read-only/dedicated-tool roles.
+ */
+export declare function checkFileAuthorityWithRules(agentName: string, filePath: string, cwd: string, effectiveRules: Record<string, AgentRule>, options?: AuthorityEvaluationOptions): AuthorityDecision;
 /**
  * Checks whether the given agent is authorised to write to the given file path.
  */
-export declare function checkFileAuthority(agentName: string, filePath: string, cwd: string, authorityConfig?: AuthorityConfig, options?: {
-    declaredScope?: string[] | null;
-}): {
-    allowed: true;
-} | {
-    allowed: false;
-    reason: string;
-    zone?: FileZone;
-};
+export declare function checkFileAuthority(agentName: string, filePath: string, cwd: string, authorityConfig?: AuthorityConfig, options?: AuthorityEvaluationOptions): AuthorityDecision;

package/dist/hooks/guardrails/index.d.ts

@@ -8,6 +8,7 @@
  */
 import { extractSwarmIdFromAgentName, getSwarmAgents, resolveFallbackModel } from '../../agents/index';
 import { type AuthorityConfig, type GuardrailsConfig } from '../../config/schema';
+import { getExecutor } from '../../sandbox/executor';
 import { dcCheckJunctionCreation } from './destructive-command';
 import { getMostRecentAssistantText, getProviderFailureFingerprint, isTransientProviderFailureText } from './messages-transform';
 export declare const _internals: {
@@ -19,6 +20,7 @@ export declare const _internals: {
     resolveFallbackModel: typeof resolveFallbackModel;
     dcCheckJunctionCreation: typeof dcCheckJunctionCreation;
     extractErrorSignal: typeof extractErrorSignal;
+    getSandboxExecutor: typeof getExecutor;
     /**
      * Test/inspection seams for the no-op detector's bounded session state
      * (invariant 8). Production code does not call these; they exist so the