opencode-swarm 7.144.7 → 7.144.8

package/dist/cli/{capability-probe-976tt4ba.js → capability-probe-va4kk8vg.js}

@@ -7,8 +7,8 @@ import {
   isBubblewrapAvailable,
   isSandboxExecAvailable,
   isWindowsSandboxAvailable
-} from "./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
+} from "./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 init_capability_probe();

package/dist/cli/{config-doctor-zdvaq4nb.js → config-doctor-zbqfp0v6.js}

@@ -12,9 +12,9 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-00fk9c3b.js";
+} from "./index-r14qx363.js";
 import"./index-z6xqpmqg.js";
-import"./index-x4eqd82b.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{core-j7f118a5.js → core-pz9gwatq.js}

@@ -14,7 +14,7 @@ import {
   resolveWorktreeBaseDir,
   shortenWorktreePath,
   writeLaneProfileToDiskReal
-} from "./index-q7zy6dej.js";
+} from "./index-xp5g9eps.js";
 import"./index-z6xqpmqg.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";

package/dist/cli/{curator-llm-factory-eny079d1.js → curator-llm-factory-3nq3p02z.js}

@@ -1,47 +1,47 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-x4q96ejx.js";
-import"./index-gmdgap01.js";
-import"./index-00fk9c3b.js";
-import"./index-s1xefrx7.js";
+} from "./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-d879g58v.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-w9bnt74s.js";
-import"./index-pzsezhek.js";
-import"./index-c1cfsg9y.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-grkev1g6.js";
-import"./index-q7zy6dej.js";
-import"./index-jszgrk71.js";
-import"./index-7bvd5nh2.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
-import"./index-77h4xjn5.js";
-import"./index-qm0mz7rj.js";
-import"./index-bx20cv1v.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{curator-97sm8wn0.js → curator-sk0dyvke.js}

@@ -14,47 +14,47 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-x4q96ejx.js";
-import"./index-gmdgap01.js";
-import"./index-00fk9c3b.js";
-import"./index-s1xefrx7.js";
+} from "./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-d879g58v.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-w9bnt74s.js";
-import"./index-pzsezhek.js";
-import"./index-c1cfsg9y.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-grkev1g6.js";
-import"./index-q7zy6dej.js";
-import"./index-jszgrk71.js";
-import"./index-7bvd5nh2.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
-import"./index-77h4xjn5.js";
-import"./index-qm0mz7rj.js";
-import"./index-bx20cv1v.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{evidence-summary-service-kwtb2d14.js → evidence-summary-service-abwrjqd0.js}

@@ -6,23 +6,23 @@ import {
   loadPlanJsonOnly,
   mergeDurableGateEntriesFromEvidence,
   readDurableGateEvidence
-} from "./index-s1xefrx7.js";
+} from "./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
 import"./index-9ss2m4rs.js";
 import"./index-zsrtt42s.js";
-import"./index-grkev1g6.js";
-import"./index-q7zy6dej.js";
-import"./index-7bvd5nh2.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
-import"./index-zy7f84cs.js";
+import"./index-85gkedsf.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{gate-evidence-rk9j0hc4.js → gate-evidence-aa7vvtcd.js}

@@ -17,8 +17,8 @@ import {
   reduceTaskWorkflowSnapshot,
   transitionTaskWorkflowEvidence,
   withTaskEvidenceTransaction
-} from "./index-grkev1g6.js";
-import"./index-q7zy6dej.js";
+} from "./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
 import"./index-556ja8an.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";

package/dist/cli/{guardrail-explain-8gggptqj.js → guardrail-explain-hvtyr2fz.js}

@@ -1,48 +1,48 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-yz0hfa4g.js";
-import"./index-x4q96ejx.js";
-import"./index-gmdgap01.js";
-import"./index-00fk9c3b.js";
-import"./index-s1xefrx7.js";
+} from "./index-r2rkwvzq.js";
+import"./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-d879g58v.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-w9bnt74s.js";
-import"./index-pzsezhek.js";
-import"./index-c1cfsg9y.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-grkev1g6.js";
-import"./index-q7zy6dej.js";
-import"./index-jszgrk71.js";
-import"./index-7bvd5nh2.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
-import"./index-77h4xjn5.js";
-import"./index-qm0mz7rj.js";
-import"./index-bx20cv1v.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{guardrail-log-zbqf4ws6.js → guardrail-log-jw5mzs0d.js}

@@ -1,11 +1,11 @@
 // @bun
 import {
   handleGuardrailLog
-} from "./index-xjgwr4c6.js";
-import"./index-gmdgap01.js";
+} from "./index-bv44950t.js";
+import"./index-nmy6rss1.js";
 import"./index-556ja8an.js";
 import"./index-z6xqpmqg.js";
-import"./index-x4eqd82b.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{hive-promoter-qzvtp5wx.js → hive-promoter-m20j63yg.js}

@@ -7,49 +7,49 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-x4q96ejx.js";
-import"./index-gmdgap01.js";
-import"./index-00fk9c3b.js";
-import"./index-s1xefrx7.js";
+} from "./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-d879g58v.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-w9bnt74s.js";
-import"./index-pzsezhek.js";
-import"./index-c1cfsg9y.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-grkev1g6.js";
-import"./index-q7zy6dej.js";
-import"./index-jszgrk71.js";
-import"./index-7bvd5nh2.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-77h4xjn5.js";
-import"./index-qm0mz7rj.js";
-import"./index-bx20cv1v.js";
+} from "./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{index-bx20cv1v.js → index-0v1f2sdb.js}

@@ -2,10 +2,10 @@
 import {
   init_loader,
   loadPluginConfigWithMeta
-} from "./index-zq9gs0yk.js";
+} from "./index-7qb0hn8n.js";
 import {
   init_schema
-} from "./index-x4eqd82b.js";
+} from "./index-gfvkttvd.js";
 import {
   DEFAULT_WORKTREE_ISOLATION_CONFIG,
   init_constants

package/dist/cli/{index-b44qqqt2.js → index-3g0xk6tk.js}

@@ -6,7 +6,7 @@ import {
   init_bubblewrap_executor,
   init_runner_client,
   init_sandbox_exec_executor
-} from "./index-zy7f84cs.js";
+} from "./index-85gkedsf.js";
 import {
   __esm,
   __toCommonJS

package/dist/cli/{index-77h4xjn5.js → index-3k3nbs52.js}

@@ -709,7 +709,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const {
     readAuthoritativeKnowledgeCounterRollups,
     effectiveRetrievalOutcomes
-  } = await import("./knowledge-events-31g69mx2.js");
+  } = await import("./knowledge-events-3zxf8xpb.js");
   const rollups = await readAuthoritativeKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -776,11 +776,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-sng5xt5a.js");
-    const { KnowledgeConfigSchema } = await import("./schema-vnghba3d.js");
+    const { quarantineEntry } = await import("./knowledge-validator-3ke5scx3.js");
+    const { KnowledgeConfigSchema } = await import("./schema-5nmkp1pc.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-r2q0nd0a.js");
+      const { loadPluginConfigWithMeta } = await import("./index-t2ntgzts.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-zq9gs0yk.js → index-7qb0hn8n.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-x4eqd82b.js";
+} from "./index-gfvkttvd.js";
 import {
   GIT_BINARY_ENV_VAR,
   init_git_executable

package/dist/cli/{index-zy7f84cs.js → index-85gkedsf.js}

@@ -977,6 +977,14 @@ var init_windows = __esm(() => {
 function isValidEnvKey(key) {
   return /^[a-zA-Z_][a-zA-Z0-9_]*$/.test(key);
 }
+function isUntrustedEnvKey(key) {
+  const upper = key.toUpperCase();
+  for (const prefix of UNTRUSTED_ENV_KEY_PREFIXES) {
+    if (upper.startsWith(prefix))
+      return true;
+  }
+  return false;
+}
 async function getExecutor() {
   if (_cachedExecutorPromise !== undefined) {
     return _cachedExecutorPromise;
@@ -998,7 +1006,7 @@ async function _createExecutor() {
   return null;
 }
 async function _createLinuxExecutor() {
-  const { SandboxCapabilityProbe, isBubblewrapAvailable } = await import("./capability-probe-976tt4ba.js");
+  const { SandboxCapabilityProbe, isBubblewrapAvailable } = await import("./capability-probe-va4kk8vg.js");
   await new SandboxCapabilityProbe().detect();
   if (!isBubblewrapAvailable()) {
     return null;
@@ -1018,7 +1026,7 @@ async function _createMacOSExecutor() {
     }
     return null;
   }
-  const { SandboxCapabilityProbe, isSandboxExecAvailable } = await import("./capability-probe-976tt4ba.js");
+  const { SandboxCapabilityProbe, isSandboxExecAvailable } = await import("./capability-probe-va4kk8vg.js");
   await new SandboxCapabilityProbe().detect();
   if (!isSandboxExecAvailable()) {
     return null;
@@ -1031,7 +1039,7 @@ async function _createMacOSExecutor() {
   }
 }
 async function _createWindowsExecutor() {
-  const { SandboxCapabilityProbe, isWindowsSandboxAvailable } = await import("./capability-probe-976tt4ba.js");
+  const { SandboxCapabilityProbe, isWindowsSandboxAvailable } = await import("./capability-probe-va4kk8vg.js");
   await new SandboxCapabilityProbe().detect();
   if (!isWindowsSandboxAvailable()) {
     return null;
@@ -1043,7 +1051,7 @@ async function _createWindowsExecutor() {
     return null;
   }
 }
-var SandboxError, _cachedExecutorPromise, _macosSandboxEnabled = false, _hasWarnedMacOSSandboxDisabledByConfig = false;
+var SandboxError, UNTRUSTED_ENV_KEY_PREFIXES, _cachedExecutorPromise, _macosSandboxEnabled = false, _hasWarnedMacOSSandboxDisabledByConfig = false;
 var init_executor = __esm(() => {
   init_logger();
   SandboxError = class SandboxError extends Error {
@@ -1054,6 +1062,7 @@ var init_executor = __esm(() => {
       this.name = "SandboxError";
     }
   };
+  UNTRUSTED_ENV_KEY_PREFIXES = ["GIT_", "LD_", "DYLD_"];
 });
 
 // src/sandbox/linux/bubblewrap-executor.ts
@@ -1207,4 +1216,4 @@ var init_bubblewrap_executor = __esm(() => {
   };
 });
 
-export { _internals4 as _internals, init_bubblewrap_executor, _internals as _internals1, init_sandbox_exec_executor, exports_runner_client, init_runner_client, isValidEnvKey, getExecutor, init_executor };
+export { _internals4 as _internals, init_bubblewrap_executor, _internals as _internals1, init_sandbox_exec_executor, exports_runner_client, init_runner_client, isValidEnvKey, isUntrustedEnvKey, getExecutor, init_executor };

package/dist/cli/{index-c1cfsg9y.js → index-8dbzaf0m.js}

@@ -9,7 +9,7 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-77h4xjn5.js";
+} from "./index-3k3nbs52.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-h1p08s3n.js";

package/dist/cli/{index-xjgwr4c6.js → index-bv44950t.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-gmdgap01.js";
+} from "./index-nmy6rss1.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";