opencode-swarm 7.143.5 → 7.143.6

package/.opencode/skills/swarm-pr-review/SKILL.md

@@ -1135,7 +1135,7 @@ matched family owned exactly once across the dispatch, and every owned family
 attested in that lane's output, or the lane fails for all of them. Include
 the complete exact-set
 `trigger_evaluation` ledger and the same exact current `pr_head_sha` in the
-initial micro dispatch, in a separate batch from base lanes. That first
+initial micro dispatch, in a separate batch from base lanes (those inline `trigger_evaluation` rows carry only `trigger_id`, `result`, and `evidence` — they must never include `source_batch_id` or `source_lane_id`, which belong only to `write_pr_review_trigger_eval`'s `rows`). That first
 dispatch freezes the ledger for the session. A subsequent same-session micro
 batch may omit `trigger_evaluation` and reuse the frozen ledger; when it
 explicitly supplies a copy, the copy must remain exactly identical. The
@@ -1156,7 +1156,7 @@ plus provenance for every `MATCHED` row. The tool atomically writes
 pass the exact reviewed merge-base as `base_sha`, the exact live base branch
 tip/ref used to compute it as `base_ref`, and the same `pr_head_sha` to the
 writer. The writer runs bounded `git merge-base -- <base_ref> <pr_head_sha>` and
-rejects any claimed `base_sha` that is not the exact result. It accepts only an
+rejects any claimed `base_sha` that is not the exact result. When that bounded re-check is unavailable (git timeout, spawn failure, unresolvable ref) but the supplied `base_ref` and `base_sha` exactly equal the durably bound review scope, the writer proceeds and discloses `base_verification: bound_fallback` on the receipt, which synthesis must surface in the final review report (`references/lane-output-recoverability.md`); every other outcome stays fail-closed. It accepts only an
 exact eleven-row v2 receipt backed by verifiable provenance (identity, ownership, digest, retained artifact); a coverage-QUALITY failure is disclosed on the receipt as `coverage_degradations` and the run proceeds, with synthesis disclosing degraded families (`references/lane-output-recoverability.md`). `NOT_TRIGGERED` rows are provenance-free. Counts are recomputed and
 must agree. It never uses keyword or path classification alone as absence
 evidence. Any head mismatch makes persistence fail. Historical unversioned and
@@ -1946,9 +1946,9 @@ are:
    `pr_head_sha`, `base_sha`, and `base_ref`.
 2. **Call `abort_pr_workflow`** with `mode: "PR_REVIEW"`, `kind: "recovery"`,
    and a one-line `reason` describing the blocker. The tool clears the durable gate state
-   and stops the auto-resume loop. It refuses while PR workflow lanes are
-   still in flight (collect their results with `collect_lane_results`
-   first). It accepts both unbound and bound PR_REVIEW workflows so exhausted
+   and stops the auto-resume loop. It refuses only while PR workflow lanes are still LIVE (a recent `updatedAt`); collect those with `collect_lane_results` first.
+   Lanes idle past the 30-minute staleness horizon settle as presumed-stale instead of blocking, disclosed as `presumed_stale_lanes` on the response and in `.swarm/events.jsonl`; a schema-invalid (but JSON-parseable) gate state no longer defeats abort either. See `references/lane-output-recoverability.md`.
+   It accepts both unbound and bound PR_REVIEW workflows so exhausted
    post-bind discovery or validation cannot strand the gate. An audit event is
    appended to `.swarm/events.jsonl`.
    When the tool reports `checkout_restore_required`, immediately call

package/.opencode/skills/swarm-pr-review/references/lane-output-recoverability.md

@@ -52,3 +52,132 @@ synthesis phase MUST disclose every degraded family, with its recorded reason,
 in the final review report. Retries remain the first resort (COVERAGE GATE); a
 missing provenance chain still fails closed, and the reviewer/critic inventory
 skips exactly the receipt-disclosed dispatch tuples.
+
+## Bounded merge-base fallback (`base_verification`)
+
+Every v2 receipt now records how its `base_sha` was verified at write time:
+
+- **`live`** — the writer re-derived the merge base with a bounded
+  `git merge-base -- <base_ref> <pr_head_sha>` and it matched the supplied
+  `base_sha` exactly. This is the normal path.
+- **`bound_fallback`** — that re-derivation was **unavailable**, and the writer
+  proceeded because the supplied `base_ref`/`base_sha` exactly equalled the
+  review scope already bound durably at dispatch time.
+
+The distinction matters because the git helper collapses every failure mode
+into a bare `null`: a timed-out git call, a git process that failed to spawn, a
+`base_ref` that is unresolvable in this checkout, and a ref rejected as an
+unsafe revision token are indistinguishable to the caller. Treating that `null`
+as *refutation* rather than *unavailability* made review completion permanently
+unsatisfiable — every retry re-failed identically, the trigger-eval receipt was
+never written, an omission dispatch could not repair it, and the only exit was
+`abort_pr_workflow`. The bound scope is not a weaker fact: it was itself derived
+by a real `git merge-base` at dispatch and only trimmed/lowercased on the way
+into durable state, so re-deriving it at write time is a redundant re-check.
+
+What `bound_fallback` does and does not mean:
+
+- It does **not** widen what was reviewed. The reviewed range stays SHA-scoped
+  (`base_sha...pr_head_sha`), identical to the `live` path.
+- It does mean post-bind movement or deletion of the base ref would go
+  undetected for this run — the one staleness signal the live re-check provides.
+- It never relaxes a mismatch. If the re-check is unavailable **and** the
+  supplied scope differs from the bound scope in either half, the writer fails
+  closed with an enriched message naming the possible causes and the recovery
+  options. If the gate has no bound base at all, the writer fails closed before
+  attempting resolution.
+
+**Synthesis obligation (skill-directed):** when the trigger-eval result or the persisted receipt
+reports `base_verification: bound_fallback`, the final review report MUST
+disclose it. State that the merge base could not be re-verified live at write time and that the review was
+scoped to the durably bound base. Do not silently present the review as if the
+base had been re-verified. (Unlike `coverage_degradations`, which the workflow gate reads as a machine-enforced waiver filter, `bound_fallback` disclosure is skill-directed.)
+
+## Provenance fields: dispatch ledger vs. writer rows
+
+Two different row shapes carry the trigger evaluation, and mixing them up is a
+recurring source of first-dispatch failures:
+
+- **Dispatch-time `trigger_evaluation` rows** (the inline ledger frozen by the
+  first micro dispatch) use the strict inline schema: `trigger_id`, `result`,
+  and `evidence`, and nothing else. Adding `source_batch_id` or
+  `source_lane_id` there is rejected — at dispatch time no lane has run yet, so
+  there is no provenance to cite, and the frozen-ledger digest is computed over
+  exactly those three fields.
+- **Writer `rows`** (passed to `write_pr_review_trigger_eval` after the lanes
+  settle) carry the provenance: every `MATCHED` row adds the `source_batch_id`
+  and `source_lane_id` returned by its completed micro lane, and every
+  `NOT_TRIGGERED` row must omit both.
+
+Classifications must be identical across the two — the writer rejects
+classification drift from the frozen ledger — while `evidence` may be reworded
+in the writer call and is simply ignored (the frozen values are authoritative).
+
+## Gate-level recovery: stuck lanes, corrupted state, amended inventory
+
+Three wedge states used to leave a workflow with no exit through any tool. Each
+now degrades with disclosure; the contradiction cases still fail closed.
+
+### Stale lanes no longer block abort or completion
+
+A lane whose background process dies without writing a terminal snapshot used to
+count as "in flight" forever, and the same predicate gates `abort_pr_workflow`,
+the PR_REVIEW to PR_FEEDBACK transition, and `complete_pr_workflow` — so the
+escape hatch was refused by the very condition it exists to resolve.
+
+A lane whose delegation record has not advanced its `updatedAt` for 30 minutes is
+now **presumed stale** and settles instead of blocking. The disclosure appears as
+`presumed_stale_lanes` / `presumed_stale_disclosure` on the `abort_pr_workflow`
+and `complete_pr_workflow` responses, as a `pr_workflow_lanes_presumed_stale`
+record in `.swarm/events.jsonl`, and on the `pr_workflow_aborted` audit event.
+The delegation record itself is transitioned to `stale`.
+
+A lane with a **recent** `updatedAt` still blocks — a check that can run and
+reports "still progressing" is not softened. Collect it with
+`collect_lane_results`, or wait for the horizon.
+
+### A corrupted gate state no longer defeats abort
+
+If the durable gate-state file fails schema validation but is still valid JSON,
+`abort_pr_workflow` and `pr_workflow_status` read it through a **recovery-only**
+reader that salvages `sessionID`, `mode`, `prHeadSha`, and — when each is
+individually well-formed — `revision`, `prFeedbackReadyToPublish` and
+`checkoutRecovery`. Every other reader, including all write and completion paths,
+still refuses the file, so a salvaged view can never be acted on as if it were
+valid. `stateSalvaged` / `stateSalvageDisclosure` name the schema errors.
+
+Boundaries that deliberately did NOT soften:
+
+- **Unparseable bytes fail everywhere.** There is nothing to salvage.
+- **Unreadable identity fails everywhere.** Without a readable `sessionID` and
+  `mode` there is no provable subject to act on.
+- **An unreadable `prFeedbackReadyToPublish` is treated as ARMED**, so abort
+  still refuses. Corrupting that one record must never become a way past the
+  armed-abort refusal.
+- When `revision` cannot be salvaged, abort takes the documented
+  compare-and-swap escape and says so:
+  `state revision unsalvageable; cleared without compare-and-swap`.
+
+### The PR_FEEDBACK inventory is append-only, not immutable
+
+A finding discovered after `declarePrFeedbackInventory` used to require
+`abort_pr_workflow` plus a full restart, discarding completed verification work
+for correctly-declared items. Re-declaring with **additional** items is now
+accepted; every previously-declared entry must still be present, so mutation and
+removal still hard-fail (`inventory is append-only after declaration`).
+
+What an amendment costs, and what it preserves:
+
+- Completed **verification** batches for the original items are preserved. Cover
+  the appended item with a new verification batch owning just that item.
+- Stage A must be re-recorded over the full amended inventory, and each ordered
+  gate phase must be re-run with a lane owning every current inventory item —
+  a gate batch recorded before the amendment no longer settles its phase. This
+  is deliberate: it is the control that stops an appended item reaching
+  publication with no verdict.
+- Publication is disarmed by an amendment (the armed record attested coverage of
+  the pre-amendment inventory). Re-arm with one `complete_pr_workflow` call.
+- Every appended entry is recorded in an audit ledger surfaced as
+  `inventory_amendments` on the completion response and `inventoryAmendments` on
+  `pr_workflow_status`. The ledger is bounded at 128 entries and is never pruned;
+  further amendments are refused at the cap.

package/dist/background/pending-delegations.d.ts

@@ -38,7 +38,40 @@ export type RecoveryOwnershipScanResult<T> = {
 };
 /** An abandoned ingestion lease may be reclaimed after this bounded interval. */
 export declare const BACKGROUND_INGESTION_LEASE_MS = 30000;
+/**
+ * Canonical default staleness horizon for a tracked background delegation: a
+ * record whose `updatedAt` has not advanced in this long is treated as
+ * abandoned (its backing process died without ever writing a terminal
+ * snapshot) and may be swept to `stale`.
+ *
+ * 30 minutes is the value this subsystem already shipped — it was duplicated as
+ * a module-local literal in `src/tools/dispatch-lanes.ts` and as the
+ * `hooks.background_pending_timeout_minutes` schema default. It lives here so
+ * every consumer agrees on one number: this module imports nothing from
+ * `dispatch-lanes.ts` or `pr-workflow-gate.ts`, so both can reference it
+ * without an import cycle.
+ */
+export declare const DEFAULT_STALE_DELEGATION_TIMEOUT_MS: number;
 export type BackgroundDelegationStatus = 'pending' | 'running' | 'ingesting' | 'ingestion_error' | 'completed' | 'error' | 'cancelled' | 'stale' | 'consumed';
+/**
+ * The status classes the stale sweep is allowed to finalize to `stale`.
+ *
+ * Deliberately a subset of {@link BackgroundDelegationStatus}: a caller may
+ * *narrow* the sweep but can never widen it to a status the sweep was never
+ * meant to touch (`completed`, `consumed`, `ingesting`, ...).
+ */
+export type SweepableDelegationStatus = 'pending' | 'running' | 'ingestion_error';
+/**
+ * Default sweep scope — the exact set the sweep has always finalized.
+ *
+ * `ingestion_error` is included here because the pre-existing lazy-maintenance
+ * caller (`recordPendingDelegation`) relies on it: an ingestion that never
+ * retried within the horizon is genuinely abandoned from that caller's point of
+ * view. Callers for whom `ingestion_error` is still *retryable* — the ingestion
+ * claim gate admits `completed` and `ingestion_error` only, so the `stale` flip
+ * is irreversible — must pass a narrowed set instead.
+ */
+export declare const DEFAULT_SWEEPABLE_DELEGATION_STATUSES: ReadonlySet<SweepableDelegationStatus>;
 export interface BackgroundDelegationRecord {
     schemaVersion: 1 | 2 | 3;
     /** Subagent session id from the dispatch envelope — the correlation key. */
@@ -398,8 +431,16 @@ export declare function findOpenAsyncLaneBatches(directory: string): BackgroundD
 /**
  * Public stale sweep: acquires the store lock and marks overdue pendings as `stale`.
  * Best-effort; returns the number swept (0 on lock timeout / error).
+ *
+ * `options.statuses` narrows which status classes may be finalized; omitting it
+ * preserves the historical scope ({@link DEFAULT_SWEEPABLE_DELEGATION_STATUSES}).
+ * The sweep is directory-wide with no session or mode filter, so a caller whose
+ * own decision covers only some status classes must narrow accordingly rather
+ * than finalizing records it never reasoned about.
  */
-export declare function sweepStaleDelegations(directory: string, timeoutMs: number): Promise<number>;
+export declare function sweepStaleDelegations(directory: string, timeoutMs: number, options?: {
+    statuses?: ReadonlySet<SweepableDelegationStatus>;
+}): Promise<number>;
 export interface BackgroundDelegationFallbackArtifact {
     schemaVersion: 1;
     correlationId: string;

package/dist/background/pr-review-trigger-contract.d.ts

@@ -207,6 +207,16 @@ export interface BuildPrReviewTriggerReceiptV2Args {
     rows: unknown;
     /** Receipt-level degradation disclosure; ledger rows stay untouched so the frozen-ledger digest is unaffected. */
     coverage_degradations?: TriggerCoverageDegradation[];
+    /**
+     * How `base_sha` was verified for this receipt. `live` means the writer
+     * re-derived the merge base with git at write time; `bound_fallback` means
+     * that re-derivation was UNAVAILABLE and the writer accepted the caller's
+     * scope solely because it exactly equalled the durably bound, bind-time
+     * verified review scope. Optional for the same reason
+     * `coverage_degradations` is: the field is receipt-level disclosure, and
+     * making it required would break every existing builder call site.
+     */
+    base_verification?: 'live' | 'bound_fallback';
 }
 export declare function buildPrReviewTriggerReceiptV2(input: BuildPrReviewTriggerReceiptV2Args): {
     run_id: string;
@@ -243,6 +253,7 @@ export declare function buildPrReviewTriggerReceiptV2(input: BuildPrReviewTrigge
         source_lane_id: string;
         reason: string;
     }[];
+    base_verification?: "live" | "bound_fallback" | undefined;
 };
 export interface ParsedPrReviewTriggerReceipt {
     schemaVersion: 0 | 1 | 2;
@@ -255,6 +266,12 @@ export interface ParsedPrReviewTriggerReceipt {
     }>[];
     /** Empty for pre-v2.2 receipts. Present entries mean the family's cited lane is provenance-valid but coverage-degraded. */
     coverageDegradations: TriggerCoverageDegradation[];
+    /**
+     * Undefined for legacy receipts and for v2 receipts written before the field
+     * existed. `bound_fallback` means the writer could not re-derive the merge
+     * base live and accepted the bound scope instead; synthesis must disclose it.
+     */
+    baseVerification?: 'live' | 'bound_fallback';
 }
 /**
  * Bind every micro dispatch to one semantic ledger at bind time.

package/dist/cli/{config-doctor-y8wfw196.js → config-doctor-72zp0k4x.js}

@@ -12,8 +12,8 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-a4dkd7m7.js";
-import"./index-04x9wx7d.js";
+} from "./index-whyrhjsk.js";
+import"./index-7bs015gm.js";
 import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{core-zszmexgm.js → core-aj0wmbg8.js}

@@ -14,7 +14,7 @@ import {
   resolveWorktreeBaseDir,
   shortenWorktreePath,
   writeLaneProfileToDiskReal
-} from "./index-q2nd6q9e.js";
+} from "./index-s7nb33pc.js";
 import"./index-4rhhvd1a.js";
 import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";

package/dist/cli/{curator-e2sp925h.js → curator-2gt2835v.js}

@@ -14,50 +14,50 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-51axj9vd.js";
-import"./index-y8r7z30j.js";
-import"./index-a4dkd7m7.js";
-import"./index-5866smj5.js";
+} from "./index-5d8ydxae.js";
+import"./index-nd1j9wkw.js";
+import"./index-whyrhjsk.js";
+import"./index-w1q9yy1e.js";
 import"./index-134d35c1.js";
 import"./index-b6e016tv.js";
 import"./index-4q9vfav6.js";
 import"./index-k92cagmt.js";
 import"./index-y8552snf.js";
-import"./index-tmc43mkc.js";
+import"./index-92bm9ys3.js";
 import"./index-xmzmeknp.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-7en3eq3k.js";
+import"./index-bbv64s17.js";
 import"./index-74hpm6sh.js";
-import"./index-p844tcrm.js";
-import"./index-mbczeqs3.js";
-import"./index-at0h6cd6.js";
-import"./index-qdarzed6.js";
+import"./index-02nm8qhk.js";
+import"./index-scj2asek.js";
+import"./index-z4cv77tq.js";
+import"./index-hjy4txgr.js";
 import"./index-556ja8an.js";
 import"./index-gdd4jt6b.js";
 import"./index-zsrtt42s.js";
 import"./index-k3cxyk66.js";
-import"./index-8aabbfhv.js";
-import"./index-q2nd6q9e.js";
+import"./index-6vmazy9f.js";
+import"./index-s7nb33pc.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
 import"./index-7sy3aa9m.js";
 import"./index-4905hd2m.js";
-import"./index-47z3jbxk.js";
-import"./index-xmje20we.js";
+import"./index-0adcjpyx.js";
+import"./index-peqmw3wr.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-a1p87gew.js";
-import"./index-04x9wx7d.js";
+import"./index-36vry26a.js";
+import"./index-7bs015gm.js";
 import"./index-rn0eq85g.js";
 import"./index-4rhhvd1a.js";
 import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
-import"./index-dg1v2gnh.js";
+import"./index-gzxz0s50.js";
 import"./index-tq5s07ta.js";
 import"./index-rtry5xyf.js";
-import"./index-m7v7gggs.js";
+import"./index-wjk00vwk.js";
 import"./index-ae75rja9.js";
 import"./index-w7x7qxz2.js";
 import"./index-erfnw81g.js";

package/dist/cli/{curator-llm-factory-xsg7wesn.js → curator-llm-factory-x1vjhrnc.js}

@@ -1,50 +1,50 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-51axj9vd.js";
-import"./index-y8r7z30j.js";
-import"./index-a4dkd7m7.js";
-import"./index-5866smj5.js";
+} from "./index-5d8ydxae.js";
+import"./index-nd1j9wkw.js";
+import"./index-whyrhjsk.js";
+import"./index-w1q9yy1e.js";
 import"./index-134d35c1.js";
 import"./index-b6e016tv.js";
 import"./index-4q9vfav6.js";
 import"./index-k92cagmt.js";
 import"./index-y8552snf.js";
-import"./index-tmc43mkc.js";
+import"./index-92bm9ys3.js";
 import"./index-xmzmeknp.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-7en3eq3k.js";
+import"./index-bbv64s17.js";
 import"./index-74hpm6sh.js";
-import"./index-p844tcrm.js";
-import"./index-mbczeqs3.js";
-import"./index-at0h6cd6.js";
-import"./index-qdarzed6.js";
+import"./index-02nm8qhk.js";
+import"./index-scj2asek.js";
+import"./index-z4cv77tq.js";
+import"./index-hjy4txgr.js";
 import"./index-556ja8an.js";
 import"./index-gdd4jt6b.js";
 import"./index-zsrtt42s.js";
 import"./index-k3cxyk66.js";
-import"./index-8aabbfhv.js";
-import"./index-q2nd6q9e.js";
+import"./index-6vmazy9f.js";
+import"./index-s7nb33pc.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
 import"./index-7sy3aa9m.js";
 import"./index-4905hd2m.js";
-import"./index-47z3jbxk.js";
-import"./index-xmje20we.js";
+import"./index-0adcjpyx.js";
+import"./index-peqmw3wr.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-a1p87gew.js";
-import"./index-04x9wx7d.js";
+import"./index-36vry26a.js";
+import"./index-7bs015gm.js";
 import"./index-rn0eq85g.js";
 import"./index-4rhhvd1a.js";
 import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
-import"./index-dg1v2gnh.js";
+import"./index-gzxz0s50.js";
 import"./index-tq5s07ta.js";
 import"./index-rtry5xyf.js";
-import"./index-m7v7gggs.js";
+import"./index-wjk00vwk.js";
 import"./index-ae75rja9.js";
 import"./index-w7x7qxz2.js";
 import"./index-erfnw81g.js";

package/dist/cli/{evidence-summary-service-pfppq7mv.js → evidence-summary-service-yjr0662r.js}

@@ -6,21 +6,21 @@ import {
   loadPlanJsonOnly,
   mergeDurableGateEntriesFromEvidence,
   readDurableGateEvidence
-} from "./index-5866smj5.js";
+} from "./index-w1q9yy1e.js";
 import"./index-134d35c1.js";
 import"./index-k92cagmt.js";
 import"./index-y8552snf.js";
 import"./index-9ss2m4rs.js";
-import"./index-7en3eq3k.js";
-import"./index-qdarzed6.js";
+import"./index-bbv64s17.js";
+import"./index-hjy4txgr.js";
 import"./index-556ja8an.js";
 import"./index-zsrtt42s.js";
-import"./index-q2nd6q9e.js";
+import"./index-s7nb33pc.js";
 import"./index-q1exe2b3.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-a1p87gew.js";
-import"./index-04x9wx7d.js";
+import"./index-36vry26a.js";
+import"./index-7bs015gm.js";
 import"./index-rn0eq85g.js";
 import"./index-4rhhvd1a.js";
 import"./index-jqsfsqbx.js";

package/dist/cli/{gate-evidence-23jnh3mb.js → gate-evidence-r3c7eqpz.js}

@@ -17,9 +17,9 @@ import {
   reduceTaskWorkflowSnapshot,
   transitionTaskWorkflowEvidence,
   withTaskEvidenceTransaction
-} from "./index-7en3eq3k.js";
+} from "./index-bbv64s17.js";
 import"./index-556ja8an.js";
-import"./index-q2nd6q9e.js";
+import"./index-s7nb33pc.js";
 import"./index-rn0eq85g.js";
 import"./index-4rhhvd1a.js";
 import"./index-jqsfsqbx.js";

package/dist/cli/{guardrail-explain-byzmrgg1.js → guardrail-explain-f3zysesy.js}

@@ -1,51 +1,51 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-x64vt6sc.js";
-import"./index-51axj9vd.js";
-import"./index-y8r7z30j.js";
-import"./index-a4dkd7m7.js";
-import"./index-5866smj5.js";
+} from "./index-72zhsqgy.js";
+import"./index-5d8ydxae.js";
+import"./index-nd1j9wkw.js";
+import"./index-whyrhjsk.js";
+import"./index-w1q9yy1e.js";
 import"./index-134d35c1.js";
 import"./index-b6e016tv.js";
 import"./index-4q9vfav6.js";
 import"./index-k92cagmt.js";
 import"./index-y8552snf.js";
-import"./index-tmc43mkc.js";
+import"./index-92bm9ys3.js";
 import"./index-xmzmeknp.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-7en3eq3k.js";
+import"./index-bbv64s17.js";
 import"./index-74hpm6sh.js";
-import"./index-p844tcrm.js";
-import"./index-mbczeqs3.js";
-import"./index-at0h6cd6.js";
-import"./index-qdarzed6.js";
+import"./index-02nm8qhk.js";
+import"./index-scj2asek.js";
+import"./index-z4cv77tq.js";
+import"./index-hjy4txgr.js";
 import"./index-556ja8an.js";
 import"./index-gdd4jt6b.js";
 import"./index-zsrtt42s.js";
 import"./index-k3cxyk66.js";
-import"./index-8aabbfhv.js";
-import"./index-q2nd6q9e.js";
+import"./index-6vmazy9f.js";
+import"./index-s7nb33pc.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
 import"./index-7sy3aa9m.js";
 import"./index-4905hd2m.js";
-import"./index-47z3jbxk.js";
-import"./index-xmje20we.js";
+import"./index-0adcjpyx.js";
+import"./index-peqmw3wr.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-a1p87gew.js";
-import"./index-04x9wx7d.js";
+import"./index-36vry26a.js";
+import"./index-7bs015gm.js";
 import"./index-rn0eq85g.js";
 import"./index-4rhhvd1a.js";
 import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
-import"./index-dg1v2gnh.js";
+import"./index-gzxz0s50.js";
 import"./index-tq5s07ta.js";
 import"./index-rtry5xyf.js";
-import"./index-m7v7gggs.js";
+import"./index-wjk00vwk.js";
 import"./index-ae75rja9.js";
 import"./index-w7x7qxz2.js";
 import"./index-erfnw81g.js";

package/dist/cli/{guardrail-log-nr2g7hbw.js → guardrail-log-eat71fnh.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailLog
-} from "./index-jqxgdvr9.js";
-import"./index-y8r7z30j.js";
+} from "./index-fn0k0vsa.js";
+import"./index-nd1j9wkw.js";
 import"./index-556ja8an.js";
-import"./index-04x9wx7d.js";
+import"./index-7bs015gm.js";
 import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{hive-promoter-cw08380z.js → hive-promoter-fyb40am9.js}

@@ -7,52 +7,52 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-51axj9vd.js";
-import"./index-y8r7z30j.js";
-import"./index-a4dkd7m7.js";
-import"./index-5866smj5.js";
+} from "./index-5d8ydxae.js";
+import"./index-nd1j9wkw.js";
+import"./index-whyrhjsk.js";
+import"./index-w1q9yy1e.js";
 import"./index-134d35c1.js";
 import"./index-b6e016tv.js";
 import"./index-4q9vfav6.js";
 import"./index-k92cagmt.js";
 import"./index-y8552snf.js";
-import"./index-tmc43mkc.js";
+import"./index-92bm9ys3.js";
 import"./index-xmzmeknp.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-7en3eq3k.js";
+import"./index-bbv64s17.js";
 import"./index-74hpm6sh.js";
-import"./index-p844tcrm.js";
-import"./index-mbczeqs3.js";
-import"./index-at0h6cd6.js";
-import"./index-qdarzed6.js";
+import"./index-02nm8qhk.js";
+import"./index-scj2asek.js";
+import"./index-z4cv77tq.js";
+import"./index-hjy4txgr.js";
 import"./index-556ja8an.js";
 import"./index-gdd4jt6b.js";
 import"./index-zsrtt42s.js";
 import"./index-k3cxyk66.js";
-import"./index-8aabbfhv.js";
-import"./index-q2nd6q9e.js";
+import"./index-6vmazy9f.js";
+import"./index-s7nb33pc.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
 import"./index-7sy3aa9m.js";
 import"./index-4905hd2m.js";
-import"./index-47z3jbxk.js";
-import"./index-xmje20we.js";
+import"./index-0adcjpyx.js";
+import"./index-peqmw3wr.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-a1p87gew.js";
-import"./index-04x9wx7d.js";
+import"./index-36vry26a.js";
+import"./index-7bs015gm.js";
 import"./index-rn0eq85g.js";
 import"./index-4rhhvd1a.js";
 import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
-import"./index-dg1v2gnh.js";
+import"./index-gzxz0s50.js";
 import"./index-tq5s07ta.js";
 import"./index-rtry5xyf.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-m7v7gggs.js";
+} from "./index-wjk00vwk.js";
 import"./index-ae75rja9.js";
 import"./index-w7x7qxz2.js";
 import"./index-erfnw81g.js";

package/dist/cli/{index-p844tcrm.js → index-02nm8qhk.js}

@@ -2,7 +2,7 @@
 import {
   effectiveRetrievalOutcomes,
   readAuthoritativeKnowledgeCounterRollups
-} from "./index-47z3jbxk.js";
+} from "./index-0adcjpyx.js";
 import {
   advisoryWarn,
   init_warning_buffer
@@ -10,14 +10,14 @@ import {
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-dg1v2gnh.js";
+} from "./index-gzxz0s50.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-m7v7gggs.js";
+} from "./index-wjk00vwk.js";
 import {
   init_knowledge_types,
   isActiveStatus