opencode-swarm 7.141.1 → 7.142.0

package/dist/cli/{knowledge-escalator-5xg6vmr4.js → knowledge-escalator-w235g6ce.js}

@@ -9,29 +9,29 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-2ygp3pnx.js";
-import"./index-ry609ctr.js";
+} from "./index-hncahn40.js";
+import"./index-67vxmh1v.js";
 import"./index-k46me75h.js";
 import"./index-ee3x66a5.js";
-import"./index-w9613ace.js";
+import"./index-26ynh10w.js";
 import"./index-ae75rja9.js";
-import"./index-kq5p3nm3.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+import"./index-gcn7tsr3.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
-import"./index-ysapwztd.js";
+import"./index-vwyamc2d.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-z8yr1yra.js";
+import"./index-ad93kz8m.js";
 import"./index-4rhhvd1a.js";
 import"./index-zgwm4ryv.js";
-import"./index-pkxt2rg2.js";
+import"./index-v8f3wa0e.js";
 import"./index-jqsfsqbx.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{knowledge-events-qvzpqt5b.js → knowledge-events-amn94djz.js}

@@ -29,27 +29,27 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-ry609ctr.js";
+} from "./index-67vxmh1v.js";
 import"./index-k46me75h.js";
 import"./index-ee3x66a5.js";
 import"./index-ae75rja9.js";
-import"./index-kq5p3nm3.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+import"./index-gcn7tsr3.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
-import"./index-ysapwztd.js";
+import"./index-vwyamc2d.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-z8yr1yra.js";
+import"./index-ad93kz8m.js";
 import"./index-4rhhvd1a.js";
 import"./index-zgwm4ryv.js";
-import"./index-pkxt2rg2.js";
+import"./index-v8f3wa0e.js";
 import"./index-jqsfsqbx.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{knowledge-link-x86ebng8.js → knowledge-link-xned4jbm.js}

@@ -12,14 +12,14 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-kq5p3nm3.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+} from "./index-gcn7tsr3.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{knowledge-store-k5td1vqx.js → knowledge-store-3vb855ta.js}

@@ -41,19 +41,19 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-w9613ace.js";
+} from "./index-26ynh10w.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";
-import"./index-kq5p3nm3.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+import"./index-gcn7tsr3.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
 import"./index-bk5tah7q.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{knowledge-validator-zz26gk5d.js → knowledge-validator-a8c185hw.js}

@@ -23,20 +23,20 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-8s4vnqts.js";
-import"./index-v250345n.js";
+} from "./index-tzbd5050.js";
+import"./index-ycd63sz3.js";
 import"./index-rtry5xyf.js";
-import"./index-w9613ace.js";
+import"./index-26ynh10w.js";
 import"./index-ae75rja9.js";
-import"./index-kq5p3nm3.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+import"./index-gcn7tsr3.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
 import"./index-bk5tah7q.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{pending-delegations-7xsagjy5.js → pending-delegations-8ccjby4b.js}

@@ -41,16 +41,16 @@ import {
   sweepStaleDelegations,
   updateCoderSettlement,
   writeDelegationFallback
-} from "./index-nse60anv.js";
+} from "./index-520ev2d7.js";
 import"./index-k46me75h.js";
 import"./index-ee3x66a5.js";
-import"./index-zbj3yrrd.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
 import"./index-zjygnfay.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{pr-subscriptions-r6cdsa3t.js → pr-subscriptions-gn7r3bg7.js}

@@ -9,16 +9,16 @@ import {
   sweepStale,
   unsubscribe,
   updateSnapshot
-} from "./index-qskz8j2z.js";
+} from "./index-99eftm6b.js";
 import"./index-k46me75h.js";
 import"./index-ee3x66a5.js";
-import"./index-zbj3yrrd.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
 import"./index-zjygnfay.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{runner-nm3baddf.js → runner-rhgkhy5e.js}

@@ -3,16 +3,16 @@ import {
   _internals,
   createModelEvaluationExecutor,
   runEvaluation
-} from "./index-f1hsrgw1.js";
-import"./index-q4vaar2b.js";
+} from "./index-78p6nvcv.js";
+import"./index-0dvx8f03.js";
 import"./index-y8552snf.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{scan-cursor-nhcpebh5.js → scan-cursor-vjbjm140.js}

@@ -4,18 +4,18 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-mr397tze.js";
-import"./index-w9613ace.js";
+} from "./index-8g5aa1s7.js";
+import"./index-26ynh10w.js";
 import"./index-ae75rja9.js";
-import"./index-kq5p3nm3.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+import"./index-gcn7tsr3.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
 import"./index-bk5tah7q.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{schema-6ecb0xhn.js → schema-dd8mzm6k.js}

@@ -96,7 +96,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-pkxt2rg2.js";
+} from "./index-v8f3wa0e.js";
 import"./index-jqsfsqbx.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scope-persistence-yet1hvmq.js → scope-persistence-8j8d4874.js}

@@ -23,20 +23,20 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-8056f16v.js";
+} from "./index-eytxcbm8.js";
 import"./index-556ja8an.js";
-import"./index-zqshpey0.js";
-import"./index-zbj3yrrd.js";
+import"./index-amepv9dh.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-4nt52yr9.js";
-import"./index-z8yr1yra.js";
+import"./index-ad93kz8m.js";
 import"./index-4rhhvd1a.js";
 import"./index-zgwm4ryv.js";
-import"./index-pkxt2rg2.js";
+import"./index-v8f3wa0e.js";
 import"./index-jqsfsqbx.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{skill-generator-j0mbd2pp.js → skill-generator-a4apb7c2.js}

@@ -33,32 +33,32 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-hjf8pjd4.js";
-import"./index-ry609ctr.js";
+} from "./index-7c5xtcfm.js";
+import"./index-67vxmh1v.js";
 import"./index-k46me75h.js";
 import"./index-ee3x66a5.js";
-import"./index-8s4vnqts.js";
-import"./index-v250345n.js";
+import"./index-tzbd5050.js";
+import"./index-ycd63sz3.js";
 import"./index-rtry5xyf.js";
-import"./index-w9613ace.js";
+import"./index-26ynh10w.js";
 import"./index-ae75rja9.js";
-import"./index-kq5p3nm3.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+import"./index-gcn7tsr3.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
-import"./index-ysapwztd.js";
+import"./index-vwyamc2d.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-z8yr1yra.js";
+import"./index-ad93kz8m.js";
 import"./index-4rhhvd1a.js";
 import"./index-zgwm4ryv.js";
-import"./index-pkxt2rg2.js";
+import"./index-v8f3wa0e.js";
 import"./index-jqsfsqbx.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{telemetry-zex3zv3v.js → telemetry-k9nxy24s.js}

@@ -13,7 +13,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-9d4gck4e.js";
+} from "./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{worktree-collision-ownership-n41qw3n8.js → worktree-collision-ownership-183jk2dv.js}

@@ -10,10 +10,10 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-nse60anv.js";
+} from "./index-520ev2d7.js";
 import"./index-k46me75h.js";
 import"./index-ee3x66a5.js";
-import"./index-zbj3yrrd.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import {
@@ -21,7 +21,7 @@ import {
 } from "./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
 import"./index-zjygnfay.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 

package/dist/cli/{worktree-isolation-445zjngp.js → worktree-isolation-j71zz7g9.js}

@@ -20,61 +20,61 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-dx1mdsrj.js";
+} from "./index-56knmbwf.js";
 import"./index-4905hd2m.js";
 import"./index-ebwznsfy.js";
-import"./index-f1hsrgw1.js";
-import"./index-39xs96mk.js";
+import"./index-78p6nvcv.js";
+import"./index-2p3h7det.js";
 import"./index-c8s9a3zh.js";
-import"./index-3gfdb0t9.js";
-import"./index-c6m3t5n2.js";
+import"./index-sh3r66tt.js";
+import"./index-z7eeq0tt.js";
 import"./index-134d35c1.js";
-import"./index-q4vaar2b.js";
+import"./index-0dvx8f03.js";
 import"./index-y8552snf.js";
 import"./index-9ss2m4rs.js";
 import"./index-74hpm6sh.js";
-import"./index-hjf8pjd4.js";
-import"./index-2ygp3pnx.js";
-import"./index-mr397tze.js";
+import"./index-7c5xtcfm.js";
+import"./index-hncahn40.js";
+import"./index-8g5aa1s7.js";
 import"./index-xmzmeknp.js";
-import"./index-qskz8j2z.js";
-import"./index-8056f16v.js";
+import"./index-99eftm6b.js";
+import"./index-eytxcbm8.js";
 import"./index-556ja8an.js";
-import"./index-zqshpey0.js";
+import"./index-amepv9dh.js";
 import"./index-zsrtt42s.js";
-import"./index-wbf8sv70.js";
+import"./index-e4y7mfp0.js";
 import"./index-qwm6vdyv.js";
-import"./index-3d13jkzq.js";
-import"./index-nse60anv.js";
+import"./index-h2vpk15y.js";
+import"./index-520ev2d7.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-ry609ctr.js";
+import"./index-67vxmh1v.js";
 import"./index-k46me75h.js";
 import"./index-ee3x66a5.js";
-import"./index-8s4vnqts.js";
-import"./index-v250345n.js";
+import"./index-tzbd5050.js";
+import"./index-ycd63sz3.js";
 import"./index-rtry5xyf.js";
-import"./index-w9613ace.js";
+import"./index-26ynh10w.js";
 import"./index-ae75rja9.js";
-import"./index-kq5p3nm3.js";
-import"./index-c2hczjhp.js";
-import"./index-zbj3yrrd.js";
+import"./index-gcn7tsr3.js";
+import"./index-em1kfnss.js";
+import"./index-bd2h7r2w.js";
 import"./index-7g4c7s5r.js";
 import"./index-ed5ykebp.js";
 import"./index-4nt52yr9.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-ysapwztd.js";
+} from "./index-vwyamc2d.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-z8yr1yra.js";
+import"./index-ad93kz8m.js";
 import"./index-4rhhvd1a.js";
 import"./index-zgwm4ryv.js";
-import"./index-pkxt2rg2.js";
+import"./index-v8f3wa0e.js";
 import"./index-jqsfsqbx.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-9d4gck4e.js";
+import"./index-338zfvff.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/commands/hive-quarantine.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `/swarm knowledge hive-quarantine` — human-only knowledge maintenance for the
+ * machine-global hive store (issue #2033).
+ *
+ * Flow (operator-driven; no `--yes`/`--force` flag exists — the only
+ * non-interactive escape is the explicit SWARM_ALLOW_HUMAN_ONLY_CLI=1 opt-in):
+ *   preview  <id>[,<id>…]            read-only snapshot + confirmation token
+ *   commit   --token <t> [--reason r] validated backup → exact-ID quarantine → verify
+ *   rollback --token <t12> | --latest  idempotent byte-exact restore from the manifest
+ *   status                            read-only list of quarantine backups
+ *
+ * Layered gates (PR #2200 review): `toolPolicy: 'human-only'` refuses agents at
+ * `swarm_command` classification and the chat-fallback policy blocks agent-typed
+ * usage; the shell guardrail blocks direct, quoted, path-qualified, and
+ * shell-variable-indirected CLI invocations from agent shells; the CLI entry
+ * itself refuses human-only commands from non-interactive shells (aliases
+ * resolved to their canonical policy). The confirmation token is HMAC-bound to
+ * a per-install secret, so it cannot be minted from public store contents
+ * alone. These layers are defense-in-depth with an honest audit trail — local
+ * single-user tooling cannot be tamper-proof against the owning user, and the
+ * docs make no absolute claim otherwise.
+ */
+export declare function handleKnowledgeHiveQuarantineCommand(_directory: string, args: string[]): Promise<string>;

package/dist/commands/registry.d.ts

@@ -910,6 +910,15 @@ export declare const COMMAND_REGISTRY: {
         readonly args: "<entry-id>";
         readonly category: "utility";
     };
+    readonly 'knowledge hive-quarantine': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Human-only exact-ID quarantine of hive-store entries with backup and rollback";
+        readonly subcommandOf: "knowledge";
+        readonly details: string;
+        readonly args: "<preview|commit|rollback|status> ...";
+        readonly category: "utility";
+        readonly toolPolicy: "human-only";
+    };
     readonly 'knowledge unactionable': {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "List unactionable knowledge entries pending hardening";

package/dist/hooks/hive-transaction.d.ts

@@ -34,6 +34,7 @@
  * This module holds NO module-level mutable state (invariant 8) and is NOT
  * imported on the plugin-init path (invariant 1).
  */
+import { appendFile } from 'node:fs/promises';
 import * as path from 'node:path';
 import lockfile from 'proper-lockfile';
 import { atomicWriteFile } from '../evidence/task-file.js';
@@ -53,6 +54,29 @@ export interface HiveTxContext {
 export interface HiveAuditEntry {
     line: string;
 }
+/**
+ * A staged raw append to a JSONL file inside the hive data dir, performed under the
+ * held directory lock AFTER the atomic store write (issue #2033). Used by the
+ * human-only hive-quarantine flow to append quarantine records to the
+ * `shared-learnings-quarantined.jsonl` sidecar with the same atomicity guarantees as
+ * the audit log — never via `appendKnowledge`, which would re-enter the lock.
+ */
+export interface HiveStagedAppend {
+    /** Absolute path of an existing-or-new .jsonl file inside the hive data dir. */
+    path: string;
+    /** Pre-serialized JSONL block (newline-terminated lines). */
+    block: string;
+}
+/**
+ * Thrown when a staged append fails AFTER the atomic store rewrite (issue #2033). The
+ * store mutation already happened, so callers must compensate (the hive-quarantine flow
+ * restores from its just-written backup) rather than treating this as a clean abort.
+ */
+export declare class HiveStagedAppendError extends Error {
+    readonly stagedPath: string;
+    readonly cause: unknown;
+    constructor(stagedPath: string, cause: unknown);
+}
 /** The result a mutation closure returns. */
 export type HiveMutationOutcome<T> = {
     kind: 'commit';
@@ -63,6 +87,22 @@ export type HiveMutationOutcome<T> = {
     rejects?: RejectedLesson[];
     /** Audit lines to append to the hive events log under the lock. */
     audit?: HiveAuditEntry[];
+    /**
+     * Additional staged raw JSONL appends under the same lock (issue #2033).
+     * Each path is validated (before the atomic write) to resolve inside the
+     * hive data dir, end in `.jsonl`, and NOT sit under `quarantine-backups/`
+     * (reparse/junction defense). These appends are NEVER FIFO-trimmed.
+     */
+    extraStagedAppends?: HiveStagedAppend[];
+    /**
+     * Exact raw line bytes to persist for specific entry ids (issue #2033),
+     * overriding the `JSON.stringify(entry)` serialization. Used by the
+     * hive-quarantine rollback so restored legacy-shaped entries are written
+     * byte-exactly instead of re-serialized through the normalize-on-read
+     * pipeline. A Map by contract (PR review CC-9): plain-object maps
+     * silently corrupt prototype-key ids like '__proto__'.
+     */
+    rawLineOverrides?: ReadonlyMap<string, string>;
     /** Caller return value surfaced back through HiveTransactionResult. */
     return: T;
 } | {
@@ -109,5 +149,6 @@ export declare const _internals: {
     resolveHiveKnowledgePath: typeof resolveHiveKnowledgePath;
     resolveHiveRejectedPath: typeof resolveHiveRejectedPath;
     resolveHiveEventsPath: typeof resolveHiveEventsPath;
+    appendFile: typeof appendFile;
     path: typeof path;
 };