opencode-swarm 7.144.6 → 7.144.8

package/dist/cli/{index-zy7f84cs.js → index-85gkedsf.js}

@@ -977,6 +977,14 @@ var init_windows = __esm(() => {
 function isValidEnvKey(key) {
   return /^[a-zA-Z_][a-zA-Z0-9_]*$/.test(key);
 }
+function isUntrustedEnvKey(key) {
+  const upper = key.toUpperCase();
+  for (const prefix of UNTRUSTED_ENV_KEY_PREFIXES) {
+    if (upper.startsWith(prefix))
+      return true;
+  }
+  return false;
+}
 async function getExecutor() {
   if (_cachedExecutorPromise !== undefined) {
     return _cachedExecutorPromise;
@@ -998,7 +1006,7 @@ async function _createExecutor() {
   return null;
 }
 async function _createLinuxExecutor() {
-  const { SandboxCapabilityProbe, isBubblewrapAvailable } = await import("./capability-probe-976tt4ba.js");
+  const { SandboxCapabilityProbe, isBubblewrapAvailable } = await import("./capability-probe-va4kk8vg.js");
   await new SandboxCapabilityProbe().detect();
   if (!isBubblewrapAvailable()) {
     return null;
@@ -1018,7 +1026,7 @@ async function _createMacOSExecutor() {
     }
     return null;
   }
-  const { SandboxCapabilityProbe, isSandboxExecAvailable } = await import("./capability-probe-976tt4ba.js");
+  const { SandboxCapabilityProbe, isSandboxExecAvailable } = await import("./capability-probe-va4kk8vg.js");
   await new SandboxCapabilityProbe().detect();
   if (!isSandboxExecAvailable()) {
     return null;
@@ -1031,7 +1039,7 @@ async function _createMacOSExecutor() {
   }
 }
 async function _createWindowsExecutor() {
-  const { SandboxCapabilityProbe, isWindowsSandboxAvailable } = await import("./capability-probe-976tt4ba.js");
+  const { SandboxCapabilityProbe, isWindowsSandboxAvailable } = await import("./capability-probe-va4kk8vg.js");
   await new SandboxCapabilityProbe().detect();
   if (!isWindowsSandboxAvailable()) {
     return null;
@@ -1043,7 +1051,7 @@ async function _createWindowsExecutor() {
     return null;
   }
 }
-var SandboxError, _cachedExecutorPromise, _macosSandboxEnabled = false, _hasWarnedMacOSSandboxDisabledByConfig = false;
+var SandboxError, UNTRUSTED_ENV_KEY_PREFIXES, _cachedExecutorPromise, _macosSandboxEnabled = false, _hasWarnedMacOSSandboxDisabledByConfig = false;
 var init_executor = __esm(() => {
   init_logger();
   SandboxError = class SandboxError extends Error {
@@ -1054,6 +1062,7 @@ var init_executor = __esm(() => {
       this.name = "SandboxError";
     }
   };
+  UNTRUSTED_ENV_KEY_PREFIXES = ["GIT_", "LD_", "DYLD_"];
 });
 
 // src/sandbox/linux/bubblewrap-executor.ts
@@ -1207,4 +1216,4 @@ var init_bubblewrap_executor = __esm(() => {
   };
 });
 
-export { _internals4 as _internals, init_bubblewrap_executor, _internals as _internals1, init_sandbox_exec_executor, exports_runner_client, init_runner_client, isValidEnvKey, getExecutor, init_executor };
+export { _internals4 as _internals, init_bubblewrap_executor, _internals as _internals1, init_sandbox_exec_executor, exports_runner_client, init_runner_client, isValidEnvKey, isUntrustedEnvKey, getExecutor, init_executor };

package/dist/cli/{index-bac12jpv.js → index-8dbzaf0m.js}

@@ -9,7 +9,7 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-ec1kywxg.js";
+} from "./index-3k3nbs52.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-h1p08s3n.js";

package/dist/cli/{index-sswzhcqb.js → index-bv44950t.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-dj8cah6s.js";
+} from "./index-nmy6rss1.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/{index-42ezdzam.js → index-c2rpht77.js}

@@ -1,13 +1,13 @@
 // @bun
 import {
   stableCanonicalStringify
-} from "./index-dj8cah6s.js";
+} from "./index-nmy6rss1.js";
 import {
   detectStraySwarmDirs,
   readDoctorArtifact,
   removeStraySwarmDir,
   runConfigDoctor
-} from "./index-01nhedm7.js";
+} from "./index-r14qx363.js";
 import {
   MAX_TRANSIENT_RETRIES,
   archiveEvidence,
@@ -52,7 +52,7 @@ import {
   updateTaskStatus,
   validateProjectRoot,
   validateSymlinkBoundary
-} from "./index-fgdhf6a5.js";
+} from "./index-z4fssj97.js";
 import {
   loadDatabaseCtor
 } from "./index-134d35c1.js";
@@ -105,7 +105,7 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-h5krb653.js";
+} from "./index-d1dbpxxk.js";
 import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
@@ -175,10 +175,10 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-vngs0meh.js";
+} from "./index-sxe5nyq4.js";
 import {
   readRecentEscalations
-} from "./index-n06653nr.js";
+} from "./index-xx8tm58n.js";
 import {
   appendUnactionable,
   quarantineEntry,
@@ -189,7 +189,7 @@ import {
   validateActionableFields,
   validateLesson,
   validateSkillPath
-} from "./index-bac12jpv.js";
+} from "./index-8dbzaf0m.js";
 import {
   authorizeCuration,
   buildConfigFingerprintInput
@@ -242,18 +242,18 @@ import {
   startupOrphanRecovery,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-sqe3nqh5.js";
+} from "./index-jdxnzbah.js";
 import {
   provisionWorktree,
   removeWorktree
-} from "./index-tq89td7b.js";
+} from "./index-xp5g9eps.js";
 import {
   MAX_PENDING_SCOPE_BINDINGS,
   canonicalWorkspaceIdentity,
   clearAllScopes,
   clearScopeBindingFromDisk,
   clearScopeBindings
-} from "./index-dvybg11w.js";
+} from "./index-k7fk9fjs.js";
 import {
   appendLedgerEvent,
   computePlanHash,
@@ -266,7 +266,7 @@ import {
   readPlanEpochIdentity,
   replayFromLedgerWithStatus,
   takeSnapshotEvent
-} from "./index-q6bhmyxb.js";
+} from "./index-tffg4mwr.js";
 import {
   isPathWithinDeclaredScope,
   sanitizeDiagnosticText
@@ -281,12 +281,13 @@ import {
 import {
   SandboxCapabilityProbe,
   init_capability_probe
-} from "./index-b44qqqt2.js";
+} from "./index-3g0xk6tk.js";
 import {
   getExecutor,
   init_executor,
+  isUntrustedEnvKey,
   isValidEnvKey
-} from "./index-zy7f84cs.js";
+} from "./index-85gkedsf.js";
 import {
   appendKnowledge,
   appendRejectedLesson,
@@ -316,7 +317,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-ec1kywxg.js";
+} from "./index-3k3nbs52.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals as _internals2,
@@ -330,10 +331,10 @@ import {
   recordKnowledgeEvent,
   recordPhaseCloseIntent,
   resolveKnowledgeEventsPath
-} from "./index-zde2mkmg.js";
+} from "./index-cx51wy0c.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-ckq719fr.js";
+} from "./index-0v1f2sdb.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-gprxjmm7.js";
@@ -348,7 +349,7 @@ import {
   init_loader,
   loadPluginConfig,
   loadPluginConfigWithMeta
-} from "./index-ytzz6pq1.js";
+} from "./index-7qb0hn8n.js";
 import {
   DEFAULT_SKILL_OPT_CONFIG,
   FALLBACK_MODELS_MAX,
@@ -362,7 +363,7 @@ import {
   package_default,
   resolveAutoReviewConfig,
   stripKnownSwarmPrefix
-} from "./index-68mqwvf5.js";
+} from "./index-gfvkttvd.js";
 import {
   AGENT_TOOL_MAP,
   ALL_AGENT_NAMES,
@@ -4182,7 +4183,7 @@ async function cleanupRecoveredWorktree(directory, descriptor) {
     awaitingMergeByCallID,
     cleanupStandardWorktreeForCallId,
     standardWorktreeByCallID
-  } = await import("./worktree-isolation-awpkp0yh.js");
+  } = await import("./worktree-isolation-bne0p54w.js");
   standardWorktreeByCallID.delete(descriptor.callID);
   if (hasResidue)
     awaitingMergeByCallID.set(descriptor.callID, {
@@ -4284,7 +4285,7 @@ async function recoverCoderSettlement(directory, taskId) {
           awaitingMergeByCallID,
           finishStandardWorktreeDispatch,
           standardWorktreeByCallID
-        } = await import("./worktree-isolation-awpkp0yh.js");
+        } = await import("./worktree-isolation-bne0p54w.js");
         const descriptor = wal.worktree;
         const reconstructedDispatch = {
           callID: descriptor.callID,
@@ -15547,7 +15548,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-zxr5r9b7.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-t2ntgzts.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -16631,7 +16632,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-7jrzbaej.js");
+        const skillModule = await import("./skill-generator-gv70s796.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -17091,7 +17092,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-yaxzz0k5.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-mg8qb7tm.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -17910,7 +17911,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-pbcaj8hj.js");
+      const { getScanStatus } = await import("./scan-cursor-00rbxkb4.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -18082,9 +18083,9 @@ var _internals24 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-tzcjwe8j.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-5nmkp1pc.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-zxr5r9b7.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-t2ntgzts.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -18092,11 +18093,11 @@ var _internals24 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-sxeh36gw.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-sk0dyvke.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-k8gtah3n.js");
+    const { checkHivePromotions } = await import("./hive-promoter-m20j63yg.js");
     return checkHivePromotions(entries, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -18105,7 +18106,7 @@ var _internals24 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-7jrzbaej.js");
+    } = await import("./skill-generator-gv70s796.js");
     const result = {
       approved: [],
       rejected: [],
@@ -19441,9 +19442,9 @@ function hashContent(content) {
   return createHash7("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-tzcjwe8j.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-5nmkp1pc.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-zxr5r9b7.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-t2ntgzts.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -29105,7 +29106,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-tzcjwe8j.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-5nmkp1pc.js");
     const { config: pmLoadedConfig } = _internals37.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -31385,9 +31386,9 @@ var _internals42 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
-      import("./schema-tzcjwe8j.js"),
-      import("./curator-sxeh36gw.js"),
-      import("./curator-llm-factory-vc1mrc3r.js")
+      import("./schema-5nmkp1pc.js"),
+      import("./curator-sk0dyvke.js"),
+      import("./curator-llm-factory-3nq3p02z.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -32341,7 +32342,7 @@ async function computeCurationDiagnostics(directory, entries) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-pbcaj8hj.js");
+    const { getScanStatus } = await import("./scan-cursor-00rbxkb4.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -32351,10 +32352,10 @@ async function computeCurationDiagnostics(directory, entries) {
   try {
     const { isLinked: isLinked2 } = await import("./knowledge-link-4cg4776a.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-tzcjwe8j.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-5nmkp1pc.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-zxr5r9b7.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-t2ntgzts.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
@@ -33611,7 +33612,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-4chz0b95.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-zbqfp0v6.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -34448,7 +34449,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-spyxcgsx.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-abwrjqd0.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -63678,7 +63679,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-jqvsh0g3.js");
+    const { buildHelpText } = await import("./index-t72g4a7y.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -63687,7 +63688,7 @@ async function handleHelpCommand(ctx) {
     return _internals93.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals93.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-jqvsh0g3.js");
+  const { buildHelpText: fullHelp } = await import("./index-t72g4a7y.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -63864,7 +63865,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-ass47kn8.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-hvtyr2fz.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -63874,7 +63875,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-ass47kn8.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-hvtyr2fz.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -63884,7 +63885,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-fyzd55fp.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-jw5mzs0d.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -71431,7 +71432,7 @@ async function precreateStandardWorktreeSession(args) {
   const laneProfile = computeLaneRuntimeProfile(worktreeConfig.runtime_isolation, laneIndex, provisionResult.worktreePath);
   if (laneProfile) {
     try {
-      const { writeLaneProfileToDiskReal } = await import("./core-p04nvknr.js");
+      const { writeLaneProfileToDiskReal } = await import("./core-pz9gwatq.js");
       await writeLaneProfileToDiskReal(provisionResult.worktreePath, laneProfile.laneIndex, laneProfile.envOverrides);
     } catch {}
   }
@@ -72087,7 +72088,7 @@ async function finishStandardWorktreeDispatch(directory, dispatch, config, callI
       }
       clearWorktreeMergeStatus(statusKey);
       try {
-        const { removeLaneProfileFromDiskReal } = await import("./core-p04nvknr.js");
+        const { removeLaneProfileFromDiskReal } = await import("./core-pz9gwatq.js");
         await removeLaneProfileFromDiskReal(dispatch.handle.worktreePath, dispatch.laneIndex);
       } catch {}
       const state = serializationStateBySessionID.get(dispatch.parentSessionID);
@@ -72199,6 +72200,8 @@ async function readLaneEnvFileFromDisk(worktreePath, laneIndex) {
     const v = line.slice(eqIdx + 1);
     if (!isValidEnvKey(k))
       continue;
+    if (isUntrustedEnvKey(k))
+      continue;
     result[k] = v;
   }
   return result;

package/dist/cli/{index-zde2mkmg.js → index-cx51wy0c.js}

@@ -4,11 +4,11 @@ import {
 } from "./index-fv0s19g9.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-ytzz6pq1.js";
+} from "./index-7qb0hn8n.js";
 import {
   KnowledgeConfigSchema,
   init_schema
-} from "./index-68mqwvf5.js";
+} from "./index-gfvkttvd.js";
 import {
   resolveHiveEventsPath
 } from "./index-ae75rja9.js";
@@ -2545,7 +2545,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
     }
     let bumps = 0;
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-qf8t25sw.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-awnm8s6c.js");
       bumps = await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-h5krb653.js → index-d1dbpxxk.js}

@@ -2,7 +2,7 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-ec1kywxg.js";
+} from "./index-3k3nbs52.js";
 import {
   init_git_executable,
   resolveGitExecutableAsync

package/dist/cli/{index-68mqwvf5.js → index-gfvkttvd.js}

@@ -21,7 +21,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.144.6",
+    version: "7.144.8",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",

package/dist/cli/{index-sqe3nqh5.js → index-jdxnzbah.js}

@@ -2,7 +2,7 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-tq89td7b.js";
+} from "./index-xp5g9eps.js";
 import {
   isPathWithinDeclaredScope,
   unsafePathTextReason

package/dist/cli/{index-dvybg11w.js → index-k7fk9fjs.js}

@@ -2,13 +2,13 @@
 import {
   computePlanStructureHash,
   derivePlanId
-} from "./index-q6bhmyxb.js";
+} from "./index-tffg4mwr.js";
 import {
   unsafePathTextReason
 } from "./index-556ja8an.js";
 import {
   PlanSchema
-} from "./index-ytzz6pq1.js";
+} from "./index-7qb0hn8n.js";
 import {
   assertProjectRoot
 } from "./index-f9vvg5xb.js";

package/dist/cli/{index-dj8cah6s.js → index-nmy6rss1.js}

@@ -11,7 +11,7 @@ import {
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-68mqwvf5.js";
+} from "./index-gfvkttvd.js";
 import {
   init_constants
 } from "./index-v3y3qg48.js";

package/dist/cli/{index-01nhedm7.js → index-r14qx363.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-68mqwvf5.js";
+} from "./index-gfvkttvd.js";
 import {
   ALL_AGENT_NAMES,
   init_constants

package/dist/cli/{index-7zehmnv1.js → index-r2rkwvzq.js}

@@ -12,14 +12,14 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-42ezdzam.js";
+} from "./index-c2rpht77.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-dj8cah6s.js";
+} from "./index-nmy6rss1.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-vngs0meh.js → index-sxe5nyq4.js}

@@ -2,18 +2,18 @@
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-bac12jpv.js";
+} from "./index-8dbzaf0m.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-ec1kywxg.js";
+} from "./index-3k3nbs52.js";
 import {
   effectiveRetrievalOutcomes,
   readAuthoritativeKnowledgeCounterRollups
-} from "./index-zde2mkmg.js";
+} from "./index-cx51wy0c.js";
 import {
   advisoryWarn,
   init_warning_buffer

package/dist/cli/{index-zxr5r9b7.js → index-t2ntgzts.js}

@@ -2,7 +2,7 @@
 import {
   _internals,
   resolveWorktreeIsolationConfig
-} from "./index-ckq719fr.js";
+} from "./index-0v1f2sdb.js";
 import {
   ApprovalEvidenceSchema,
   BaseEvidenceSchema,
@@ -42,7 +42,7 @@ import {
   loadPluginConfig,
   loadPluginConfigWithMeta,
   loadPluginConfigWithMetaAsync
-} from "./index-ytzz6pq1.js";
+} from "./index-7qb0hn8n.js";
 import {
   AUTO_REVIEW_V8_BURN_IN_DECISION,
   AgentOverrideConfigSchema,
@@ -64,7 +64,7 @@ import {
   TurboConfigSchema,
   WorktreeIsolationConfigSchema,
   resolveAutoReviewConfig
-} from "./index-68mqwvf5.js";
+} from "./index-gfvkttvd.js";
 import {
   ALL_AGENT_NAMES,
   ALL_SUBAGENT_NAMES,