opencode-swarm 7.144.4 → 7.144.6

package/dist/cli/{index-y8j8ehc8.js → index-68mqwvf5.js}

@@ -21,7 +21,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.144.4",
+    version: "7.144.6",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -130,7 +130,8 @@ var init_package = __esm(() => {
       "repro:1873": "bun build scripts/repro-1873-entry.ts --outdir dist-build-test/repro-1873 --target node --format esm && node scripts/repro-1873.mjs",
       "check:events": "bun run scripts/check-event-contract.ts",
       "check:test-file-cap": "bun run scripts/check-test-file-cap.ts",
-      "check:gate-portability": "bun run scripts/check-gate-portability.ts"
+      "check:gate-portability": "bun run scripts/check-gate-portability.ts",
+      "check:bare-spawn": "bun run scripts/check-bare-executable-spawn.ts"
     },
     dependencies: {
       "@opencode-ai/plugin": "^1.18.3",
@@ -290,7 +291,7 @@ function resolveExternalSkillsConfig(input) {
   };
   return merged;
 }
-var _internals, SEPARATORS, CANONICAL_ROLES_LONGEST_FIRST, CANONICAL_ROLES_SET, AgentReasoningConfigSchema, AgentThinkingConfigSchema, FALLBACK_MODELS_MAX = 3, AgentOverrideConfigSchema, SwarmConfigSchema, ModelPricingConfigSchema, PricingConfigSchema, HooksConfigSchema, ScoringWeightsSchema, DecisionDecaySchema, TokenRatiosSchema, ScoringConfigSchema, ContextBudgetConfigSchema, EvidenceConfigSchema, GateFeatureSchema, PlaceholderScanConfigSchema, QualityBudgetConfigSchema, GATE_CONFIG_KNOWN_SECTION_KEYS, GateConfigSchema, PipelineConfigSchema, PhaseCompleteConfigSchema, SummaryConfigSchema, ReviewPassesConfigSchema, AUTO_REVIEW_V8_BURN_IN_DECISION, AutoReviewFinalConfigSchema, AutoReviewConfigObjectSchema, AutoReviewConfigSchema, AdversarialDetectionConfigSchema, AdversarialTestingConfigSchemaBase, AdversarialTestingConfigSchema, IntegrationAnalysisConfigSchema, DocsConfigSchema, DesignDocsConfigSchema, UIReviewConfigSchema, CompactionAdvisoryConfigSchema, LintConfigSchema, SecretscanConfigSchema, GuardrailsProfileSchema, DEFAULT_AGENT_PROFILES, DEFAULT_ARCHITECT_PROFILE, GuardrailsConfigSchema, WatchdogConfigSchema, SelfReviewConfigSchema, ToolFilterConfigSchema, PlanCursorConfigSchema, ContextMapConfigSchema, RepoGraphConfigSchema, INVALID_CHECKPOINT_PROTO_FIELD = "__swarm_invalid_checkpoint_proto__", FORBIDDEN_CHECKPOINT_CONFIG_KEYS, CheckpointConfigSchema, ApplyPatchConfigSchema, AutomationModeSchema, AutomationCapabilitiesSchema, AutomationConfigSchemaBase, AutomationConfigSchema, KnowledgeConfigSchema, LearningConfigSchema, ConsensusConfigSchema, MemoryConfigSchema, CuratorConfigSchema, ArchitecturalSupervisionConfigSchema, KnowledgeApplicationConfigSchema, SkillPropagationAudienceSchema, SkillPropagationConfigSchema, SkillImproverConfigSchema, SkillsConfigSchema, SkillOptConfigSchema, DEFAULT_SKILL_OPT_CONFIG, SpecWriterConfigSchema, SlopDetectorConfigSchema, IncrementalVerifyConfigSchema, CompactionConfigSchema, PrmConfigSchema, AgentAuthorityRuleSchema, AuthorityConfigSchema, GeneralCouncilMemberConfigSchema, GeneralCouncilConfigSchema, CouncilConfigSchema, PrMonitorConfigSchema, ParallelizationConfigSchema, WorktreeIsolationConfigSchema, LeanTurboConfigSchema, EpicConfigSchema, StandardTurboConfigSchema, LeanTurboStrategyConfigSchema, TurboConfigSchema, ExternalSkillCandidateSourceTypeSchema, ExternalSkillCandidateEvaluationVerdictSchema, DiscoverySourceSchema, ExternalSkillCandidateSchema, ExternalSkillsConfigSchema, DEFAULT_EXTERNAL_SKILLS_CONFIG, DEFAULT_SKILLS_CONFIG, PluginConfigSchema;
+var _internals, SEPARATORS, CANONICAL_ROLES_LONGEST_FIRST, CANONICAL_ROLES_SET, AgentReasoningConfigSchema, AgentThinkingConfigSchema, FALLBACK_MODELS_MAX = 3, AgentOverrideConfigSchema, SwarmConfigSchema, ModelPricingConfigSchema, PricingConfigSchema, HooksConfigSchema, ScoringWeightsSchema, DecisionDecaySchema, TokenRatiosSchema, ScoringConfigSchema, ContextBudgetConfigSchema, EvidenceConfigSchema, GateFeatureSchema, PlaceholderScanConfigSchema, QualityBudgetConfigSchema, GATE_CONFIG_KNOWN_SECTION_KEYS, GateConfigSchema, PipelineConfigSchema, PhaseCompleteConfigSchema, SummaryConfigSchema, ReviewPassesConfigSchema, AUTO_REVIEW_V8_BURN_IN_DECISION, AutoReviewFinalConfigSchema, AutoReviewConfigObjectSchema, AutoReviewConfigSchema, AdversarialDetectionConfigSchema, AdversarialTestingConfigSchemaBase, AdversarialTestingConfigSchema, IntegrationAnalysisConfigSchema, DocsConfigSchema, DesignDocsConfigSchema, GitConfigSchema, UIReviewConfigSchema, CompactionAdvisoryConfigSchema, LintConfigSchema, SecretscanConfigSchema, GuardrailsProfileSchema, DEFAULT_AGENT_PROFILES, DEFAULT_ARCHITECT_PROFILE, GuardrailsConfigSchema, WatchdogConfigSchema, SelfReviewConfigSchema, ToolFilterConfigSchema, PlanCursorConfigSchema, ContextMapConfigSchema, RepoGraphConfigSchema, INVALID_CHECKPOINT_PROTO_FIELD = "__swarm_invalid_checkpoint_proto__", FORBIDDEN_CHECKPOINT_CONFIG_KEYS, CheckpointConfigSchema, ApplyPatchConfigSchema, AutomationModeSchema, AutomationCapabilitiesSchema, AutomationConfigSchemaBase, AutomationConfigSchema, KnowledgeConfigSchema, LearningConfigSchema, ConsensusConfigSchema, MemoryConfigSchema, CuratorConfigSchema, ArchitecturalSupervisionConfigSchema, KnowledgeApplicationConfigSchema, SkillPropagationAudienceSchema, SkillPropagationConfigSchema, SkillImproverConfigSchema, SkillsConfigSchema, SkillOptConfigSchema, DEFAULT_SKILL_OPT_CONFIG, SpecWriterConfigSchema, SlopDetectorConfigSchema, IncrementalVerifyConfigSchema, CompactionConfigSchema, PrmConfigSchema, AgentAuthorityRuleSchema, AuthorityConfigSchema, GeneralCouncilMemberConfigSchema, GeneralCouncilConfigSchema, CouncilConfigSchema, PrMonitorConfigSchema, ParallelizationConfigSchema, WorktreeIsolationConfigSchema, LeanTurboConfigSchema, EpicConfigSchema, StandardTurboConfigSchema, LeanTurboStrategyConfigSchema, TurboConfigSchema, ExternalSkillCandidateSourceTypeSchema, ExternalSkillCandidateEvaluationVerdictSchema, DiscoverySourceSchema, ExternalSkillCandidateSchema, ExternalSkillsConfigSchema, DEFAULT_EXTERNAL_SKILLS_CONFIG, DEFAULT_SKILLS_CONFIG, PluginConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   init_package();
@@ -582,6 +583,9 @@ var init_schema = __esm(() => {
     }),
     language: exports_external.string().optional()
   });
+  GitConfigSchema = exports_external.object({
+    binary: exports_external.string().optional()
+  });
   UIReviewConfigSchema = exports_external.object({
     enabled: exports_external.boolean().default(false),
     trigger_paths: exports_external.array(exports_external.string()).default([
@@ -765,7 +769,8 @@ var init_schema = __esm(() => {
     gate_denial_stop_threshold: exports_external.number().int().min(1).default(5),
     execution_stall_warn_calls: exports_external.number().int().min(1).default(30),
     execution_stall_stop_calls: exports_external.number().int().min(1).default(60),
-    execution_stall_episode_minutes: exports_external.number().int().min(1).default(30)
+    execution_stall_episode_minutes: exports_external.number().int().min(1).default(30),
+    sandbox_macos_enabled: exports_external.boolean().optional()
   });
   WatchdogConfigSchema = exports_external.object({
     scope_guard: exports_external.boolean().default(true),
@@ -1603,6 +1608,7 @@ var init_schema = __esm(() => {
     integration_analysis: IntegrationAnalysisConfigSchema.optional(),
     docs: DocsConfigSchema.optional(),
     design_docs: DesignDocsConfigSchema.optional(),
+    git: GitConfigSchema.optional(),
     ui_review: UIReviewConfigSchema.optional(),
     compaction_advisory: CompactionAdvisoryConfigSchema.optional(),
     lint: LintConfigSchema.optional(),
@@ -1802,4 +1808,4 @@ var init_schema = __esm(() => {
   });
 });
 
-export { init_package, package_default, DEFAULT_MODEL_CONTEXT_TOKENS, init_context_window, _internals, isKnownCanonicalRole, getCanonicalAgentRole, resolveGeneratedAgentRole, stripKnownSwarmPrefix, AgentReasoningConfigSchema, AgentThinkingConfigSchema, FALLBACK_MODELS_MAX, AgentOverrideConfigSchema, SwarmConfigSchema, ModelPricingConfigSchema, PricingConfigSchema, HooksConfigSchema, ScoringWeightsSchema, DecisionDecaySchema, TokenRatiosSchema, ScoringConfigSchema, ContextBudgetConfigSchema, EvidenceConfigSchema, GateFeatureSchema, PlaceholderScanConfigSchema, QualityBudgetConfigSchema, GATE_CONFIG_KNOWN_SECTION_KEYS, GateConfigSchema, PipelineConfigSchema, PhaseCompleteConfigSchema, SummaryConfigSchema, ReviewPassesConfigSchema, AUTO_REVIEW_V8_BURN_IN_DECISION, AutoReviewConfigSchema, resolveAutoReviewConfig, AdversarialDetectionConfigSchema, AdversarialTestingConfigSchema, IntegrationAnalysisConfigSchema, DocsConfigSchema, DesignDocsConfigSchema, UIReviewConfigSchema, CompactionAdvisoryConfigSchema, LintConfigSchema, SecretscanConfigSchema, GuardrailsProfileSchema, DEFAULT_AGENT_PROFILES, DEFAULT_ARCHITECT_PROFILE, GuardrailsConfigSchema, WatchdogConfigSchema, SelfReviewConfigSchema, resolveGuardrailsConfig, ToolFilterConfigSchema, PlanCursorConfigSchema, ContextMapConfigSchema, RepoGraphConfigSchema, CheckpointConfigSchema, ApplyPatchConfigSchema, AutomationModeSchema, AutomationCapabilitiesSchema, AutomationConfigSchema, KnowledgeConfigSchema, LearningConfigSchema, ConsensusConfigSchema, MemoryConfigSchema, CuratorConfigSchema, ArchitecturalSupervisionConfigSchema, KnowledgeApplicationConfigSchema, SkillPropagationConfigSchema, SkillImproverConfigSchema, SkillsConfigSchema, SkillOptConfigSchema, DEFAULT_SKILL_OPT_CONFIG, SpecWriterConfigSchema, SlopDetectorConfigSchema, IncrementalVerifyConfigSchema, CompactionConfigSchema, PrmConfigSchema, AgentAuthorityRuleSchema, AuthorityConfigSchema, GeneralCouncilConfigSchema, CouncilConfigSchema, PrMonitorConfigSchema, ParallelizationConfigSchema, WorktreeIsolationConfigSchema, LeanTurboConfigSchema, EpicConfigSchema, StandardTurboConfigSchema, LeanTurboStrategyConfigSchema, TurboConfigSchema, ExternalSkillCandidateSourceTypeSchema, ExternalSkillCandidateEvaluationVerdictSchema, DiscoverySourceSchema, ExternalSkillCandidateSchema, ExternalSkillsConfigSchema, DEFAULT_EXTERNAL_SKILLS_CONFIG, DEFAULT_SKILLS_CONFIG, resolveExternalSkillsConfig, PluginConfigSchema, init_schema };
+export { init_package, package_default, DEFAULT_MODEL_CONTEXT_TOKENS, init_context_window, _internals, isKnownCanonicalRole, getCanonicalAgentRole, resolveGeneratedAgentRole, stripKnownSwarmPrefix, AgentReasoningConfigSchema, AgentThinkingConfigSchema, FALLBACK_MODELS_MAX, AgentOverrideConfigSchema, SwarmConfigSchema, ModelPricingConfigSchema, PricingConfigSchema, HooksConfigSchema, ScoringWeightsSchema, DecisionDecaySchema, TokenRatiosSchema, ScoringConfigSchema, ContextBudgetConfigSchema, EvidenceConfigSchema, GateFeatureSchema, PlaceholderScanConfigSchema, QualityBudgetConfigSchema, GATE_CONFIG_KNOWN_SECTION_KEYS, GateConfigSchema, PipelineConfigSchema, PhaseCompleteConfigSchema, SummaryConfigSchema, ReviewPassesConfigSchema, AUTO_REVIEW_V8_BURN_IN_DECISION, AutoReviewConfigSchema, resolveAutoReviewConfig, AdversarialDetectionConfigSchema, AdversarialTestingConfigSchema, IntegrationAnalysisConfigSchema, DocsConfigSchema, DesignDocsConfigSchema, GitConfigSchema, UIReviewConfigSchema, CompactionAdvisoryConfigSchema, LintConfigSchema, SecretscanConfigSchema, GuardrailsProfileSchema, DEFAULT_AGENT_PROFILES, DEFAULT_ARCHITECT_PROFILE, GuardrailsConfigSchema, WatchdogConfigSchema, SelfReviewConfigSchema, resolveGuardrailsConfig, ToolFilterConfigSchema, PlanCursorConfigSchema, ContextMapConfigSchema, RepoGraphConfigSchema, CheckpointConfigSchema, ApplyPatchConfigSchema, AutomationModeSchema, AutomationCapabilitiesSchema, AutomationConfigSchema, KnowledgeConfigSchema, LearningConfigSchema, ConsensusConfigSchema, MemoryConfigSchema, CuratorConfigSchema, ArchitecturalSupervisionConfigSchema, KnowledgeApplicationConfigSchema, SkillPropagationConfigSchema, SkillImproverConfigSchema, SkillsConfigSchema, SkillOptConfigSchema, DEFAULT_SKILL_OPT_CONFIG, SpecWriterConfigSchema, SlopDetectorConfigSchema, IncrementalVerifyConfigSchema, CompactionConfigSchema, PrmConfigSchema, AgentAuthorityRuleSchema, AuthorityConfigSchema, GeneralCouncilConfigSchema, CouncilConfigSchema, PrMonitorConfigSchema, ParallelizationConfigSchema, WorktreeIsolationConfigSchema, LeanTurboConfigSchema, EpicConfigSchema, StandardTurboConfigSchema, LeanTurboStrategyConfigSchema, TurboConfigSchema, ExternalSkillCandidateSourceTypeSchema, ExternalSkillCandidateEvaluationVerdictSchema, DiscoverySourceSchema, ExternalSkillCandidateSchema, ExternalSkillsConfigSchema, DEFAULT_EXTERNAL_SKILLS_CONFIG, DEFAULT_SKILLS_CONFIG, resolveExternalSkillsConfig, PluginConfigSchema, init_schema };

package/dist/cli/{index-1csyxv0f.js → index-6z5jtf7d.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-fqcjragy.js";
+} from "./index-wknz5c8q.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,
@@ -24,7 +24,7 @@ import {
 } from "./index-bpmtbmy9.js";
 import {
   bunSpawn
-} from "./index-4nt52yr9.js";
+} from "./index-zj6t9zgx.js";
 
 // src/evaluation/runner.ts
 import * as fs3 from "fs";

package/dist/cli/{index-2m7mavaz.js → index-7zehmnv1.js}

@@ -12,14 +12,14 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-q4ed1jk7.js";
+} from "./index-42ezdzam.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-d12jd5mn.js";
+} from "./index-dj8cah6s.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/index-9e6fdz2h.js

@@ -0,0 +1,282 @@
+// @bun
+import {
+  advisoryWarn,
+  init_warning_buffer
+} from "./index-4rhhvd1a.js";
+import {
+  __esm
+} from "./index-a76rekgs.js";
+
+// src/utils/git-executable.ts
+import { spawnSync } from "child_process";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+function excerptProbeOutput(raw) {
+  return raw.slice(0, PROBE_OUTPUT_EXCERPT_CHARS).replace(/[^\x20-\x7E]/g, " ").trim();
+}
+function unique(values) {
+  return [...new Set(values.filter(Boolean))];
+}
+function envOverride() {
+  const raw = _internals.env()[GIT_BINARY_ENV_VAR];
+  return raw && raw.trim() !== "" ? raw : undefined;
+}
+function effectiveOverride() {
+  return envOverride() ?? configuredOverride;
+}
+function overrideSource() {
+  if (envOverride() !== undefined)
+    return "env";
+  if (configuredOverride !== undefined)
+    return "config";
+  return;
+}
+function isAbsoluteForPlatform(candidate, platform) {
+  return platform === "win32" ? path.win32.isAbsolute(candidate) : path.posix.isAbsolute(candidate);
+}
+function windowsPlatformCandidates() {
+  const env = _internals.env();
+  const roots = unique([
+    env.ProgramFiles ?? "",
+    env["ProgramFiles(x86)"] ?? "",
+    env.LOCALAPPDATA ? `${env.LOCALAPPDATA}\\Programs` : ""
+  ]);
+  const installed = roots.flatMap((root) => [
+    `${root}\\Git\\cmd\\git.exe`,
+    `${root}\\Git\\bin\\git.exe`
+  ]);
+  return unique(installed);
+}
+function platformCandidates(platform) {
+  if (platform === "darwin") {
+    return ["/opt/homebrew/bin/git", "/usr/local/bin/git", "/usr/bin/git"];
+  }
+  if (platform === "win32") {
+    return windowsPlatformCandidates();
+  }
+  return ["/usr/bin/git", "/usr/local/bin/git", "/bin/git"];
+}
+function pathDelimiterFor(platform) {
+  return platform === "win32" ? ";" : ":";
+}
+function joinDirAndName(dir, name, platform) {
+  const sep = platform === "win32" ? "\\" : "/";
+  const trimmed = dir.replace(/[\\/]+$/, "");
+  return trimmed ? `${trimmed}${sep}${name}` : `${sep}${name}`;
+}
+function pathCandidates(platform) {
+  const pathValue = _internals.env().PATH ?? "";
+  if (!pathValue)
+    return [];
+  const dirs = pathValue.split(pathDelimiterFor(platform)).filter(Boolean);
+  const names = platform === "win32" ? [...WINDOWS_PATH_EXTENSIONS.map((ext) => `git${ext}`), "git"] : ["git"];
+  const out = [];
+  for (const dir of dirs) {
+    for (const name of names) {
+      out.push(joinDirAndName(dir, name, platform));
+    }
+  }
+  return unique(out);
+}
+function buildCandidates(platform) {
+  const override = effectiveOverride();
+  const overrideCandidate = override ? [{ source: "override", path: override }] : [];
+  const seen = new Set(overrideCandidate.map((c) => c.path));
+  const rest = [];
+  for (const p of platformCandidates(platform)) {
+    if (seen.has(p))
+      continue;
+    seen.add(p);
+    rest.push({ source: "platform", path: p });
+  }
+  for (const p of pathCandidates(platform)) {
+    if (seen.has(p))
+      continue;
+    seen.add(p);
+    rest.push({ source: "path", path: p });
+  }
+  return [...overrideCandidate, ...rest];
+}
+function probeCandidate(candidatePath, platform) {
+  if (!isAbsoluteForPlatform(candidatePath, platform)) {
+    return { accepted: false, reason: "not an absolute path" };
+  }
+  let stat;
+  try {
+    stat = fs.statSync(candidatePath);
+  } catch (err) {
+    const code = err?.code;
+    if (code === "ENOENT")
+      return { accepted: false, reason: "no such file" };
+    return {
+      accepted: false,
+      reason: `cannot stat (${code ?? "unknown error"})`
+    };
+  }
+  if (stat.isDirectory()) {
+    return { accepted: false, reason: "is a directory" };
+  }
+  if (!stat.isFile()) {
+    return { accepted: false, reason: "not a regular file" };
+  }
+  let result;
+  try {
+    result = _internals.spawnSync(candidatePath, ["--version"], {
+      cwd: os.tmpdir(),
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true,
+      timeout: PER_PROBE_TIMEOUT_MS,
+      maxBuffer: PROBE_MAX_BUFFER_BYTES
+    });
+  } catch (err) {
+    return {
+      accepted: false,
+      reason: `spawn threw: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  if (result.error) {
+    return { accepted: false, reason: `spawn failed: ${result.error.message}` };
+  }
+  if (result.status !== 0) {
+    const statusDescription = result.status !== null ? `exit ${result.status}` : `signal ${result.signal ?? "unknown"}`;
+    return {
+      accepted: false,
+      reason: `git --version returned ${statusDescription}`
+    };
+  }
+  const versionOutput = (result.stdout ?? "").toString().trim();
+  if (!GIT_VERSION_PATTERN.test(versionOutput)) {
+    const excerpt = excerptProbeOutput(versionOutput);
+    return {
+      accepted: false,
+      reason: excerpt ? `not git: --version printed "${excerpt}"` : "not git: --version printed nothing"
+    };
+  }
+  return { accepted: true };
+}
+function* probeCycle(candidates, platform, attempts) {
+  const start = _internals.now();
+  let budgetExceeded = false;
+  for (const candidate of candidates) {
+    if (_internals.now() - start > TOTAL_BUDGET_MS) {
+      budgetExceeded = true;
+      break;
+    }
+    const result = probeCandidate(candidate.path, platform);
+    attempts.push({
+      source: candidate.source,
+      candidate: candidate.path,
+      accepted: result.accepted,
+      reason: result.reason
+    });
+    if (candidate.source === "override" && !result.accepted) {
+      advisoryWarn(`[opencode-swarm] git.binary override "${candidate.path}" is unusable (${result.reason}); falling back to automatic git resolution.`);
+    }
+    if (result.accepted) {
+      return { outcome: "accepted", path: candidate.path };
+    }
+    yield;
+  }
+  return budgetExceeded ? { outcome: "exhausted-budget" } : { outcome: "all-rejected" };
+}
+function driveSync(gen) {
+  let step = gen.next();
+  while (!step.done) {
+    step = gen.next();
+  }
+  return step.value;
+}
+async function driveAsync(gen) {
+  let step = gen.next();
+  while (!step.done) {
+    await _internals.yieldToEventLoop();
+    step = gen.next();
+  }
+  return step.value;
+}
+function readCache() {
+  if (cache === null)
+    return null;
+  if (cache.kind === "success")
+    return cache;
+  if (_internals.now() < cache.expiresAt)
+    return cache;
+  cache = null;
+  return null;
+}
+function applyProbeResult(result, attempts, generation) {
+  if (generation !== cacheGeneration) {
+    return result.outcome === "accepted" ? result.path : BARE_GIT;
+  }
+  lastAttempts = attempts;
+  if (result.outcome === "accepted") {
+    cache = { kind: "success", path: result.path };
+    return result.path;
+  }
+  cache = {
+    kind: "fallback",
+    expiresAt: _internals.now() + NEGATIVE_CACHE_TTL_MS
+  };
+  return BARE_GIT;
+}
+function resolveGitExecutable() {
+  const cached = readCache();
+  if (cached)
+    return cached.kind === "success" ? cached.path : BARE_GIT;
+  const platform = _internals.platform();
+  const attempts = [];
+  const generation = cacheGeneration;
+  const candidates = buildCandidates(platform);
+  const result = driveSync(probeCycle(candidates, platform, attempts));
+  return applyProbeResult(result, attempts, generation);
+}
+async function resolveGitExecutableAsync() {
+  const cached = readCache();
+  if (cached)
+    return cached.kind === "success" ? cached.path : BARE_GIT;
+  if (inFlightAsync)
+    return inFlightAsync;
+  const platform = _internals.platform();
+  const attempts = [];
+  const generation = cacheGeneration;
+  const candidates = buildCandidates(platform);
+  const run = (async () => {
+    const result = await driveAsync(probeCycle(candidates, platform, attempts));
+    return applyProbeResult(result, attempts, generation);
+  })();
+  inFlightAsync = run;
+  try {
+    return await run;
+  } finally {
+    if (inFlightAsync === run)
+      inFlightAsync = null;
+  }
+}
+function describeGitResolution() {
+  const cached = cache;
+  return {
+    resolved: cached?.kind === "success",
+    resolvedPath: cached?.kind === "success" ? cached.path : undefined,
+    attempts: [...lastAttempts],
+    overrideValue: effectiveOverride(),
+    overrideSource: overrideSource()
+  };
+}
+var GIT_BINARY_ENV_VAR = "OPENCODE_SWARM_GIT_BINARY", PER_PROBE_TIMEOUT_MS = 250, TOTAL_BUDGET_MS = 1000, NEGATIVE_CACHE_TTL_MS = 60000, BARE_GIT = "git", PROBE_MAX_BUFFER_BYTES, WINDOWS_PATH_EXTENSIONS, GIT_VERSION_PATTERN, PROBE_OUTPUT_EXCERPT_CHARS = 60, cache = null, lastAttempts, configuredOverride, inFlightAsync = null, cacheGeneration = 0, _internals;
+var init_git_executable = __esm(() => {
+  init_warning_buffer();
+  PROBE_MAX_BUFFER_BYTES = 64 * 1024;
+  WINDOWS_PATH_EXTENSIONS = [".exe", ".cmd", ".bat"];
+  GIT_VERSION_PATTERN = /^git version \d+\.\d+/;
+  lastAttempts = [];
+  _internals = {
+    spawnSync,
+    platform: () => process.platform,
+    env: () => process.env,
+    now: () => Date.now(),
+    yieldToEventLoop: () => new Promise((resolve) => setTimeout(resolve, 0))
+  };
+});
+
+export { GIT_BINARY_ENV_VAR, resolveGitExecutable, resolveGitExecutableAsync, describeGitResolution, init_git_executable };

package/dist/cli/{index-mazgg5s2.js → index-9s8drsf9.js}

@@ -7,7 +7,7 @@ import {
 } from "./index-f9vvg5xb.js";
 import {
   bunWrite
-} from "./index-4nt52yr9.js";
+} from "./index-zj6t9zgx.js";
 
 // src/evidence/task-file.ts
 import { renameSync, unlinkSync } from "fs";

package/dist/cli/{index-b6e016tv.js → index-abtrcs16.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-z6xqpmqg.js";
 import {
   bunSpawnSync
-} from "./index-4nt52yr9.js";
+} from "./index-zj6t9zgx.js";
 import {
   warn
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-8fwhhayc.js → index-b44qqqt2.js}

@@ -1,8 +1,12 @@
 // @bun
 import {
+  _internals,
+  _internals1 as _internals2,
   exports_runner_client,
-  init_runner_client
-} from "./index-q1exe2b3.js";
+  init_bubblewrap_executor,
+  init_runner_client,
+  init_sandbox_exec_executor
+} from "./index-zy7f84cs.js";
 import {
   __esm,
   __toCommonJS
@@ -11,6 +15,9 @@ import {
 // src/sandbox/capability-probe.ts
 import { execFile, spawnSync } from "child_process";
 import * as os from "os";
+function _resetCapabilityCache() {
+  _cached = undefined;
+}
 function withProbeTimeout(cmd, args, ms) {
   return new Promise((resolve, reject) => {
     const controller = new AbortController;
@@ -50,7 +57,8 @@ function withProbeTimeout(cmd, args, ms) {
 }
 async function probeLinux() {
   try {
-    const output = await withProbeTimeout("bwrap", ["--version"], 2000);
+    const binary = _internals.resolveBwrapBinary();
+    const output = await _internals3.withProbeTimeout(binary, ["--version"], 2000);
     if (output.length > 0) {
       return {
         status: "enabled",
@@ -85,20 +93,15 @@ async function probeLinux() {
 }
 async function probeMacOS() {
   try {
-    const output = await withProbeTimeout("sandbox-exec", ["--version"], 2000);
-    if (output.length > 0) {
-      return {
-        status: "enabled",
-        strength: "strong",
-        mechanism: "sandbox-exec",
-        platform: "darwin"
-      };
-    }
+    const binary = _internals2.resolveSandboxExecBinary();
+    const target = _internals2.resolveProbeTargetBinary();
+    const profile = _internals2.buildProbeProfile(os.tmpdir());
+    await _internals3.withProbeTimeout(binary, ["-p", profile, target], 2000);
     return {
-      status: "disabled",
+      status: "enabled",
+      strength: "strong",
       mechanism: "sandbox-exec",
-      platform: "darwin",
-      error: "binary returned empty version"
+      platform: "darwin"
     };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -204,7 +207,13 @@ class SandboxCapabilityProbe {
     return _cached;
   }
 }
-var _cached;
-var init_capability_probe = () => {};
+var _cached, _internals3;
+var init_capability_probe = __esm(() => {
+  init_bubblewrap_executor();
+  init_sandbox_exec_executor();
+  _internals3 = {
+    withProbeTimeout
+  };
+});
 
-export { isBubblewrapAvailable, isSandboxExecAvailable, isWindowsSandboxAvailable, SandboxCapabilityProbe, init_capability_probe };
+export { _resetCapabilityCache, _internals3 as _internals, isBubblewrapAvailable, isSandboxExecAvailable, isWindowsSandboxAvailable, SandboxCapabilityProbe, init_capability_probe };

package/dist/cli/{index-yts89pqg.js → index-bac12jpv.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-dty5qgk2.js";
+} from "./index-vdha477y.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,13 +9,13 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-03pv47h2.js";
+} from "./index-ec1kywxg.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-ywn7vtxp.js";
+} from "./index-h1p08s3n.js";
 import {
   atomicWriteFile
-} from "./index-mazgg5s2.js";
+} from "./index-9s8drsf9.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-psvxq93b.js → index-ckq719fr.js}

@@ -2,10 +2,10 @@
 import {
   init_loader,
   loadPluginConfigWithMeta
-} from "./index-9qq7c18c.js";
+} from "./index-ytzz6pq1.js";
 import {
   init_schema
-} from "./index-y8j8ehc8.js";
+} from "./index-68mqwvf5.js";
 import {
   DEFAULT_WORKTREE_ISOLATION_CONFIG,
   init_constants

package/dist/cli/{index-k3cxyk66.js → index-cwtpqm5f.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-rn0eq85g.js";
+} from "./index-fv0s19g9.js";
 
 // src/hooks/delegation-gate/worktree-provisioning-owner.ts
 import { createHash, randomBytes } from "crypto";

package/dist/cli/{index-d12jd5mn.js → index-dj8cah6s.js}

@@ -11,7 +11,7 @@ import {
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-y8j8ehc8.js";
+} from "./index-68mqwvf5.js";
 import {
   init_constants
 } from "./index-v3y3qg48.js";

package/dist/cli/{index-pw83zgny.js → index-dvybg11w.js}

@@ -2,13 +2,13 @@
 import {
   computePlanStructureHash,
   derivePlanId
-} from "./index-z6v7kwpa.js";
+} from "./index-q6bhmyxb.js";
 import {
   unsafePathTextReason
 } from "./index-556ja8an.js";
 import {
   PlanSchema
-} from "./index-9qq7c18c.js";
+} from "./index-ytzz6pq1.js";
 import {
   assertProjectRoot
 } from "./index-f9vvg5xb.js";
@@ -17,7 +17,7 @@ import {
 } from "./index-7g4c7s5r.js";
 import {
   bunWrite
-} from "./index-4nt52yr9.js";
+} from "./index-zj6t9zgx.js";
 import {
   __toESM
 } from "./index-a76rekgs.js";

package/dist/cli/{index-03pv47h2.js → index-ec1kywxg.js}

@@ -6,10 +6,10 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-ywn7vtxp.js";
+} from "./index-h1p08s3n.js";
 import {
   atomicWriteFile
-} from "./index-mazgg5s2.js";
+} from "./index-9s8drsf9.js";
 import {
   readCachedParsedFile
 } from "./index-ed5ykebp.js";
@@ -709,7 +709,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const {
     readAuthoritativeKnowledgeCounterRollups,
     effectiveRetrievalOutcomes
-  } = await import("./knowledge-events-nkrym4wb.js");
+  } = await import("./knowledge-events-rgcwewpn.js");
   const rollups = await readAuthoritativeKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -776,11 +776,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-jrxvexv6.js");
-    const { KnowledgeConfigSchema } = await import("./schema-rptwqbm4.js");
+    const { quarantineEntry } = await import("./knowledge-validator-dx6zzcdf.js");
+    const { KnowledgeConfigSchema } = await import("./schema-tzcjwe8j.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-btmsqv7p.js");
+      const { loadPluginConfigWithMeta } = await import("./index-zxr5r9b7.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {