opencode-swarm 7.145.0 → 7.145.2

package/dist/cli/{index-6ezbzd5e.js → index-cb2qtetk.js}

@@ -1,13 +1,21 @@
 // @bun
+import {
+  captureWorkingTreeFingerprint,
+  createModelEvaluationExecutor,
+  pLimit,
+  resolveExecutableFromPath,
+  runEvaluation,
+  runExternalTool
+} from "./index-0a0asz2s.js";
 import {
   stableCanonicalStringify
-} from "./index-2dnqazyr.js";
+} from "./index-1g87esfp.js";
 import {
   detectStraySwarmDirs,
   readDoctorArtifact,
   removeStraySwarmDir,
   runConfigDoctor
-} from "./index-0jr9zn34.js";
+} from "./index-612rr70a.js";
 import {
   MAX_TRANSIENT_RETRIES,
   archiveEvidence,
@@ -52,27 +60,7 @@ import {
   updateTaskStatus,
   validateProjectRoot,
   validateSymlinkBoundary
-} from "./index-v64kjqvg.js";
-import {
-  loadDatabaseCtor
-} from "./index-134d35c1.js";
-import {
-  LANGUAGE_REGISTRY,
-  _internals as _internals3,
-  _internals1 as _internals4,
-  buildNativeTargetCommand,
-  getProfileForFile,
-  isCommandAvailable,
-  tool
-} from "./index-abtrcs16.js";
-import {
-  captureWorkingTreeFingerprint,
-  createModelEvaluationExecutor,
-  pLimit,
-  resolveExecutableFromPath,
-  runEvaluation,
-  runExternalTool
-} from "./index-wk54ey3h.js";
+} from "./index-917z76qr.js";
 import {
   EvaluationTaskV1Schema,
   GateAuditManifestV1Schema,
@@ -89,7 +77,19 @@ import {
   saveGateAuditResult,
   savePromotionDecision,
   saveTaskSetSnapshot
-} from "./index-jy9bwa9k.js";
+} from "./index-nsr5b69r.js";
+import {
+  loadDatabaseCtor
+} from "./index-134d35c1.js";
+import {
+  LANGUAGE_REGISTRY,
+  _internals as _internals3,
+  _internals1 as _internals4,
+  buildNativeTargetCommand,
+  getProfileForFile,
+  isCommandAvailable,
+  tool
+} from "./index-abtrcs16.js";
 import {
   canonicalHash,
   canonicalJson,
@@ -101,11 +101,14 @@ import {
   resolveContainedExistingPath,
   sha256
 } from "./index-y8552snf.js";
+import {
+  readRecentEscalations
+} from "./index-ncfjxz9n.js";
 import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-e00wbqw5.js";
+} from "./index-np4ytvvv.js";
 import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
@@ -148,13 +151,13 @@ import {
   resolveRemoteRefsContainingHead,
   resolveRemoteRefsContainingHeadAsync,
   switchPrFeedbackTrackingCandidateAsync
-} from "./index-b30x236n.js";
+} from "./index-z9yhhk6q.js";
 import {
   buildCorrelationId,
   listActive,
   subscribe,
   unsubscribe
-} from "./index-77ef8gye.js";
+} from "./index-5e5a1y2r.js";
 import {
   BUNDLED_PROJECT_SKILL_ROOT,
   DEFAULT_SKILL_MIN_CONFIDENCE,
@@ -175,10 +178,7 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-mkks7jwg.js";
-import {
-  readRecentEscalations
-} from "./index-b3xret0a.js";
+} from "./index-jgb7mq2y.js";
 import {
   appendUnactionable,
   quarantineEntry,
@@ -189,11 +189,11 @@ import {
   validateActionableFields,
   validateLesson,
   validateSkillPath
-} from "./index-h4hasck4.js";
+} from "./index-jpppcckq.js";
 import {
   authorizeCuration,
   buildConfigFingerprintInput
-} from "./index-fp464as8.js";
+} from "./index-4p3qfb05.js";
 import {
   cohortConfigFingerprint
 } from "./index-rtry5xyf.js";
@@ -212,7 +212,7 @@ import {
   findByBatchId,
   readDelegations,
   sweepStaleDelegations
-} from "./index-ffdwj1an.js";
+} from "./index-97psh79d.js";
 import {
   WORKTREE_LIFECYCLE_LOCK_FILE,
   recordWorktreeProvisioningOwner,
@@ -242,18 +242,18 @@ import {
   startupOrphanRecovery,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-s6cwsnrw.js";
+} from "./index-n55a28zr.js";
 import {
   provisionWorktree,
   removeWorktree
-} from "./index-6hqhyb0f.js";
+} from "./index-rk80jhef.js";
 import {
   MAX_PENDING_SCOPE_BINDINGS,
   canonicalWorkspaceIdentity,
   clearAllScopes,
   clearScopeBindingFromDisk,
   clearScopeBindings
-} from "./index-4zwjc9sb.js";
+} from "./index-vav705md.js";
 import {
   appendLedgerEvent,
   computePlanHash,
@@ -262,11 +262,12 @@ import {
   derivePlanIdentityHash,
   getOrAdoptPlanEpochUnderLock,
   initLedger,
+  ledgerExists,
   readLedgerEvents,
   readPlanEpochIdentity,
   replayFromLedgerWithStatus,
   takeSnapshotEvent
-} from "./index-apjdytwx.js";
+} from "./index-673axbjx.js";
 import {
   isPathWithinDeclaredScope,
   sanitizeDiagnosticText
@@ -317,7 +318,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-qfawexc8.js";
+} from "./index-6wf75rcm.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals as _internals2,
@@ -331,31 +332,20 @@ import {
   recordKnowledgeEvent,
   recordPhaseCloseIntent,
   resolveKnowledgeEventsPath
-} from "./index-c13ttmak.js";
+} from "./index-cxn95n7q.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-7g276m9m.js";
+} from "./index-czde45km.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-gprxjmm7.js";
-import {
-  readSwarmFileAsync,
-  safeHook,
-  validateSwarmPath
-} from "./index-w8pgjr75.js";
-import {
-  bunSpawn,
-  bunSpawnSync,
-  bunWrite,
-  mergeEnvForChild
-} from "./index-zj6t9zgx.js";
 import {
   PlanSchema,
   exports_loader,
   init_loader,
   loadPluginConfig,
   loadPluginConfigWithMeta
-} from "./index-0pcq32y2.js";
+} from "./index-2vefr1f8.js";
 import {
   DEFAULT_SKILL_OPT_CONFIG,
   FALLBACK_MODELS_MAX,
@@ -369,7 +359,7 @@ import {
   package_default,
   resolveAutoReviewConfig,
   stripKnownSwarmPrefix
-} from "./index-zfhe7vbb.js";
+} from "./index-gpnv14kq.js";
 import {
   AGENT_TOOL_MAP,
   ALL_AGENT_NAMES,
@@ -383,7 +373,7 @@ import {
   init_agent_names,
   init_constants,
   init_tool_metadata
-} from "./index-v3y3qg48.js";
+} from "./index-cpg98bh1.js";
 import {
   init_git_executable,
   resolveGitExecutable,
@@ -394,6 +384,17 @@ import {
   getDeferredWarnings,
   init_warning_buffer
 } from "./index-4rhhvd1a.js";
+import {
+  readSwarmFileAsync,
+  safeHook,
+  validateSwarmPath
+} from "./index-w8pgjr75.js";
+import {
+  bunSpawn,
+  bunSpawnSync,
+  bunWrite,
+  mergeEnvForChild
+} from "./index-zj6t9zgx.js";
 import {
   resolveHiveDataDir,
   resolveHiveEventsPath,
@@ -409,10 +410,10 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-s72naw1j.js";
+} from "./index-x8pm918t.js";
 import {
   atomicWriteFile
-} from "./index-6q3agdmr.js";
+} from "./index-j20fzn0w.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -424,7 +425,7 @@ import {
   atomicWriteSwarmFileSync,
   matchTempGrammar,
   parseTargetBasename
-} from "./index-4evasm2b.js";
+} from "./index-kggqpefz.js";
 import {
   assertProjectRoot,
   hasExplicitProjectBoundary,
@@ -432,12 +433,12 @@ import {
   listActiveLocks,
   tryAcquireLock,
   withEvidenceLock
-} from "./index-pa86tpgt.js";
+} from "./index-bghwrr59.js";
 import {
   emit,
   getLastHeartbeat,
   telemetry
-} from "./index-zz5qsjd1.js";
+} from "./index-qyvjp0bq.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -464,7 +465,7 @@ import {
 
 // src/hooks/delegation-gate/worktree-isolation.ts
 init_constants();
-import { createHash as createHash22 } from "crypto";
+import { createHash as createHash23 } from "crypto";
 import * as fs53 from "fs/promises";
 import * as path113 from "path";
 init_executor();
@@ -940,6 +941,7 @@ init_zod();
 import * as fs51 from "fs";
 import * as path111 from "path";
 init_agent_names();
+init_constants();
 init_schema();
 
 // src/full-auto/policy.ts
@@ -4191,7 +4193,7 @@ async function cleanupRecoveredWorktree(directory, descriptor) {
     awaitingMergeByCallID,
     cleanupStandardWorktreeForCallId,
     standardWorktreeByCallID
-  } = await import("./worktree-isolation-4tehtym5.js");
+  } = await import("./worktree-isolation-ajzyp2gm.js");
   standardWorktreeByCallID.delete(descriptor.callID);
   if (hasResidue)
     awaitingMergeByCallID.set(descriptor.callID, {
@@ -4293,7 +4295,7 @@ async function recoverCoderSettlement(directory, taskId) {
           awaitingMergeByCallID,
           finishStandardWorktreeDispatch,
           standardWorktreeByCallID
-        } = await import("./worktree-isolation-4tehtym5.js");
+        } = await import("./worktree-isolation-ajzyp2gm.js");
         const descriptor = wal.worktree;
         const reconstructedDispatch = {
           callID: descriptor.callID,
@@ -15556,7 +15558,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-kp87kr1a.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-9gt8g2qj.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -16640,7 +16642,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-drscnzq9.js");
+        const skillModule = await import("./skill-generator-gsa6qwwt.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -17100,7 +17102,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-w1mbaktt.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-22apj3dj.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -17919,7 +17921,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-12jxwd14.js");
+      const { getScanStatus } = await import("./scan-cursor-6ksgv514.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -18091,9 +18093,9 @@ var _internals24 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-nq9tcz87.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-mpcm7nje.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-kp87kr1a.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-9gt8g2qj.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -18101,11 +18103,11 @@ var _internals24 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-zssndq5x.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-gk2kmrk1.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-3h7dhnek.js");
+    const { checkHivePromotions } = await import("./hive-promoter-ay8a7sct.js");
     return checkHivePromotions(entries, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -18114,7 +18116,7 @@ var _internals24 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-drscnzq9.js");
+    } = await import("./skill-generator-gsa6qwwt.js");
     const result = {
       approved: [],
       rejected: [],
@@ -18156,7 +18158,7 @@ var _internals24 = {
     return result;
   },
   readPriorDriftReports: async (directory) => {
-    const { readPriorDriftReports } = await import("./curator-drift-yn5d0mvq.js");
+    const { readPriorDriftReports } = await import("./curator-drift-r50x1rac.js");
     return readPriorDriftReports(directory);
   },
   readSwarmKnowledge: (directory) => readKnowledge(resolveSwarmKnowledgePath(directory))
@@ -19450,9 +19452,9 @@ function hashContent(content) {
   return createHash7("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-nq9tcz87.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-mpcm7nje.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-kp87kr1a.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-9gt8g2qj.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -26227,6 +26229,78 @@ async function gatherGateFailures(directory) {
   } catch {}
   return [...failures.values()].sort((a, b) => b.count - a.count);
 }
+var REJECTION_LEDGER_EVENT_TYPES = new Set([
+  "coder_retry_circuit_breaker",
+  "plan_critic_gate_manual_approval",
+  "architect_loop_detected",
+  "agent_conflict_detected"
+]);
+var MAX_LEDGER_BYTES = 16 * 1024 * 1024;
+async function gatherLedgerRejections(directory, sessionId) {
+  const counts = {};
+  const readLedger = async (filePath) => {
+    try {
+      const handle = await fs13.open(filePath, "r");
+      try {
+        const stat5 = await handle.stat();
+        if (!stat5.isFile())
+          return null;
+        const length = Math.min(stat5.size, MAX_LEDGER_BYTES);
+        const buffer = Buffer.alloc(length);
+        await handle.read(buffer, 0, length, stat5.size - length);
+        return buffer.toString("utf-8");
+      } finally {
+        await handle.close().catch(() => {});
+      }
+    } catch {
+      return null;
+    }
+  };
+  const readContained = async (root, ...segments) => {
+    const target = path36.join(root, ...segments);
+    try {
+      const realRoot = await fs13.realpath(path36.join(root));
+      const realTarget = await fs13.realpath(target);
+      const rel = path36.relative(realRoot, realTarget);
+      if (rel.startsWith("..") || path36.isAbsolute(rel))
+        return null;
+    } catch {
+      return null;
+    }
+    return readLedger(target);
+  };
+  let content = await readLedger(path36.join(directory, ".swarm", "events.jsonl"));
+  if (content === null) {
+    try {
+      const archiveRoot = path36.join(directory, ".swarm", "archive");
+      const archiveEntries = await fs13.readdir(archiveRoot);
+      const archives = archiveEntries.filter((entry) => entry.startsWith("swarm-")).sort();
+      for (let index = archives.length - 1;index >= 0 && content === null; index--) {
+        content = await readContained(archiveRoot, archives[index], "events.jsonl");
+      }
+    } catch {}
+  }
+  if (content === null)
+    return counts;
+  for (const line of content.split(`
+`)) {
+    const trimmed = line.trim();
+    if (!trimmed)
+      continue;
+    try {
+      const parsed = JSON.parse(trimmed);
+      if (typeof parsed.type === "string" && REJECTION_LEDGER_EVENT_TYPES.has(parsed.type)) {
+        if (sessionId !== undefined) {
+          const eventSession = typeof parsed.sessionId === "string" ? parsed.sessionId : typeof parsed.sessionID === "string" ? parsed.sessionID : undefined;
+          if (eventSession !== undefined && eventSession !== sessionId)
+            continue;
+        }
+        counts[parsed.type] = (counts[parsed.type] ?? 0) + 1;
+      }
+    } catch {}
+  }
+  return counts;
+}
 var CONTRADICTION_LOWER = 0.45;
 var CONTRADICTION_SESSION_CAP = 50;
 var CONTRADICTION_PAIR_CAP = 10;
@@ -26581,8 +26655,22 @@ function buildDeterministicReport(data) {
   const lines = [];
   lines.push("## Problems Encountered");
   lines.push("");
+  const ledgerEntries = Object.entries(data.ledgerRejections ?? {}).filter(([, count]) => count > 0).sort((a, b) => b[1] - a[1]);
+  const ledgerTotal = ledgerEntries.reduce((sum, [, count]) => sum + count, 0);
+  const ledgerLines = () => {
+    if (ledgerTotal === 0)
+      return;
+    lines.push(`${ledgerTotal} rejection/circuit-breaker event(s) in the session ledger (events.jsonl):`);
+    for (const [type, count] of ledgerEntries.slice(0, 8)) {
+      lines.push(`- ${type}: ${count}`);
+    }
+  };
   if (data.totalToolFailures === 0 && data.gateFailures.length === 0) {
-    lines.push("No tool failures or gate rejections recorded this session.");
+    if (ledgerTotal > 0) {
+      ledgerLines();
+    } else {
+      lines.push("No tool failures or gate rejections recorded this session.");
+    }
     lines.push("");
   } else {
     if (data.totalToolFailures > 0) {
@@ -26603,6 +26691,10 @@ function buildDeterministicReport(data) {
         lines.push(`- ${cat}: ${count} occurrence(s)`);
       }
     }
+    if (ledgerTotal > 0) {
+      lines.push("");
+      ledgerLines();
+    }
     lines.push("");
   }
   if (data.toolProblems.length > 0) {
@@ -26624,7 +26716,7 @@ function buildDeterministicReport(data) {
   }
   lines.push("## Process Improvements");
   lines.push("");
-  if (data.totalToolFailures === 0 && data.gateFailures.length === 0 && data.lessonsFromRetros.length === 0) {
+  if (data.totalToolFailures === 0 && data.gateFailures.length === 0 && ledgerTotal === 0 && data.lessonsFromRetros.length === 0) {
     lines.push("Session completed without notable issues.");
   } else {
     lines.push("_Deterministic fallback: no LLM client available for deep analysis. Review the data above manually._");
@@ -26638,6 +26730,7 @@ async function runSessionReflection(input) {
   const agentDispatches = gatherAgentDispatches(input.agentSessions);
   const { lessons, taxonomy } = await gatherRetroLessonsAndTaxonomy(input.directory);
   const gateFailures = await gatherGateFailures(input.directory);
+  const ledgerRejections = await _internals32.gatherLedgerRejections(input.directory, input.sessionId);
   const skillViolations = _internals32.gatherSkillViolations(input.directory, input.sessionId);
   const contradictionCandidates = await _internals32.gatherContradictionCandidates(input.directory, input.sessionStart, input.dedupThreshold ?? DEFAULT_DEDUP_THRESHOLD2);
   const realtimeCounts = await _internals32.gatherRealtimeAdmissionCounts(input.directory, input.sessionStart);
@@ -26658,7 +26751,8 @@ async function runSessionReflection(input) {
     errorTaxonomy: taxonomy,
     knowledgeDelta,
     skillViolations,
-    contradictionCandidates
+    contradictionCandidates,
+    ledgerRejections
   };
   const signalsReport = buildSignalsBlock(data);
   const actionProposals = buildActionProposals(data);
@@ -26705,6 +26799,7 @@ var _internals32 = {
   gatherAgentDispatches,
   gatherRetroLessonsAndTaxonomy,
   gatherGateFailures,
+  gatherLedgerRejections,
   buildReflectionDataSummary,
   buildDeterministicReport,
   gatherSkillViolations,
@@ -28433,12 +28528,20 @@ async function executeWriteRetro(args, directory) {
     }
   }
   const taskId = args.task_id ?? `retro-${phase}`;
+  if (args.verdict !== "pass" && args.verdict !== "fail") {
+    return JSON.stringify({
+      success: false,
+      phase,
+      reason: "RETRO_VERDICT_REQUIRED",
+      message: 'Invalid verdict: write_retro requires an explicit verdict of "pass" or "fail".'
+    }, null, 2);
+  }
   const retroEntry = {
     task_id: taskId,
     type: "retrospective",
     timestamp: new Date().toISOString(),
     agent: "architect",
-    verdict: "pass",
+    verdict: args.verdict,
     summary,
     metadata: args.metadata,
     phase_number: phase,
@@ -28527,6 +28630,7 @@ var write_retro = createSwarmTool({
   description: "Write a retrospective evidence bundle for a completed phase. " + "Accepts flat retro fields and writes a correctly-wrapped EvidenceBundle to " + ".swarm/evidence/retro-{phase}/evidence.json. " + "Use this instead of manually writing retro JSON to avoid schema validation failures in phase_complete.",
   args: {
     phase: exports_external.number().int().min(1).max(99).describe("The phase number being completed (e.g., 1, 2, 3)"),
+    verdict: exports_external.enum(["pass", "fail"]).describe("Explicit retrospective verdict for the phase"),
     summary: exports_external.string().describe("Human-readable summary of the phase"),
     task_count: exports_external.number().int().min(1).max(9999).describe("Count of tasks completed in this phase"),
     task_complexity: exports_external.enum(["trivial", "simple", "moderate", "complex"]).describe("Complexity level of the completed tasks"),
@@ -28548,6 +28652,7 @@ var write_retro = createSwarmTool({
     try {
       const writeRetroArgs = {
         phase: Number(args.phase),
+        verdict: args.verdict,
         summary: String(args.summary ?? ""),
         task_count: Number(args.task_count),
         task_complexity: args.task_complexity,
@@ -29280,6 +29385,7 @@ async function runFinalizeStage(ctx) {
       try {
         retroResult = await executeWriteRetro({
           phase: phase.id,
+          verdict: ctx.isForced ? "fail" : "pass",
           summary: ctx.isForced ? `Phase force-closed via /swarm close --force` : `Phase closed via /swarm close`,
           task_count: Math.max(1, (phase.tasks ?? []).length),
           task_complexity: "simple",
@@ -29327,6 +29433,7 @@ async function runFinalizeStage(ctx) {
     try {
       const sessionRetroResult = await executeWriteRetro({
         phase: 1,
+        verdict: ctx.isForced ? "fail" : "pass",
         task_id: "retro-session",
         summary: ctx.isForced ? "Plan-free session force-closed via /swarm close --force" : "Plan-free session closed via /swarm close",
         task_count: 1,
@@ -29579,7 +29686,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-nq9tcz87.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-mpcm7nje.js");
     const { config: pmLoadedConfig } = _internals38.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -30437,7 +30544,7 @@ var _internals38 = {
   closePlanTerminalState: reconcileCloseTerminalStateForPlan,
   endAgentSession,
   flushAndDrainTelemetry: async () => {
-    const { flushAndDrainTelemetry } = await import("./telemetry-z54dgdrh.js");
+    const { flushAndDrainTelemetry } = await import("./telemetry-t109dhv7.js");
     return flushAndDrainTelemetry();
   }
 };
@@ -31843,9 +31950,9 @@ var _internals43 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
-      import("./schema-nq9tcz87.js"),
-      import("./curator-zssndq5x.js"),
-      import("./curator-llm-factory-q5p4578g.js")
+      import("./schema-mpcm7nje.js"),
+      import("./curator-gk2kmrk1.js"),
+      import("./curator-llm-factory-sat3mn5n.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -32799,7 +32906,7 @@ async function computeCurationDiagnostics(directory, entries) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-12jxwd14.js");
+    const { getScanStatus } = await import("./scan-cursor-6ksgv514.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -32807,19 +32914,19 @@ async function computeCurationDiagnostics(directory, entries) {
   } catch {}
   let configMatch = null;
   try {
-    const { isLinked: isLinked2 } = await import("./knowledge-link-mzdjvjsd.js");
+    const { isLinked: isLinked2 } = await import("./knowledge-link-82ew2yc4.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-nq9tcz87.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-mpcm7nje.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-kp87kr1a.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-9gt8g2qj.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
         config = KnowledgeConfigSchema2.parse({});
       }
       const { cohortConfigFingerprint: cohortConfigFingerprint2 } = await import("./config-fingerprint-v22xh5a2.js");
-      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-5x6346tf.js");
+      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-xv0j8zyt.js");
       const currentFp = cohortConfigFingerprint2(buildConfigFingerprintInput2(config));
       const cohortFp = await readCohortConfigFingerprint(directory);
       configMatch = cohortFp === null ? null : currentFp === cohortFp;
@@ -34095,7 +34202,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-dzsv3pqy.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-j1r33f4q.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -34132,6 +34239,29 @@ async function handleDoctorCommand(directory, args) {
 `)}
 `;
   }
+  try {
+    const { runModelPreflight } = await import("./model-preflight-7ea00h34.js");
+    const preflight = await runModelPreflight(config, swarmState.opencodeClient);
+    if (preflight.catalogAvailable) {
+      const unresolved = preflight.resolutions.filter((resolution) => resolution.status === "unresolved");
+      if (unresolved.length > 0) {
+        output += `
+---
+
+## Agent Model Resolution
+
+`;
+        output += `${unresolved.length} configured agent model(s) do not resolve against the provider catalog:
+
+`;
+        for (const resolution of unresolved) {
+          output += `- \`${resolution.agent}\` \u2192 \`${resolution.model}\`: ${resolution.detail ?? "does not resolve"}
+`;
+        }
+        output += "\nDispatching these agents will fail permanently. Fix `agents.<role>.model` in opencode-swarm.json or remove the override.\n";
+      }
+    }
+  } catch {}
   const strayDirs = detectStraySwarmDirs(directory);
   if (strayDirs.length > 0) {
     if (enableAutoFix) {
@@ -35012,7 +35142,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-dqcpapj8.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-0mhx0t0v.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -38377,6 +38507,7 @@ async function sastScan(input, directory, config) {
   const allFindings = [];
   let filesScanned = 0;
   let _filesSkipped = 0;
+  let nonCodeSkipped = 0;
   const scannedFilePaths = [];
   if (abort_signal?.aborted) {
     return cancelledScanResult(allFindings, filesScanned);
@@ -38414,6 +38545,7 @@ async function sastScan(input, directory, config) {
     const langDef = getLanguageForExtension(ext);
     if (!profile && !langDef) {
       _filesSkipped++;
+      nonCodeSkipped++;
       continue;
     }
     const language = profile?.id ?? langDef.id;
@@ -38649,15 +38781,21 @@ async function sastScan(input, directory, config) {
     }
   }
   let zeroCoverageError;
+  let nonCodeOnly = false;
   if (filesScanned === 0) {
-    verdict = "fail";
-    zeroCoverageError = "SAST requires at least one file to scan; zero files were scanned";
+    if (!baselineUsed && nonCodeSkipped > 0 && nonCodeSkipped === changed_files.length) {
+      nonCodeOnly = true;
+    } else {
+      verdict = "fail";
+      zeroCoverageError = "SAST requires at least one file to scan; zero files were scanned";
+    }
   }
   const summary = {
     engine,
     files_scanned: filesScanned,
     findings_count: finalFindings.length,
-    findings_by_severity: findingsBySeverity
+    findings_by_severity: findingsBySeverity,
+    ...nonCodeOnly ? { files_skipped_non_code: nonCodeSkipped } : {}
   };
   if (abort_signal?.aborted) {
     return cancelledScanResult(allFindings, filesScanned);
@@ -38668,7 +38806,7 @@ async function sastScan(input, directory, config) {
     timestamp: new Date().toISOString(),
     agent: "sast_scan",
     verdict,
-    summary: `Scanned ${filesScanned} files, found ${finalFindings.length} finding(s) using ${engine}`,
+    summary: nonCodeOnly ? `No scannable code files in input (${nonCodeSkipped} non-code file(s) skipped); nothing to scan` : `Scanned ${filesScanned} files, found ${finalFindings.length} finding(s) using ${engine}`,
     ...summary,
     findings: finalFindings,
     ...baselineUsed && {
@@ -46324,10 +46462,10 @@ function rustModulePathToSpecifier(modulePath, sourceFile, workspaceRoot) {
   }
   if (parts[0] === "crate" && sourceFile && workspaceRoot) {
     const target = path72.join(workspaceRoot, ...parts.slice(1));
-    let relative9 = path72.relative(path72.dirname(sourceFile), target).replace(/\\/g, "/");
-    if (!relative9.startsWith("."))
-      relative9 = `./${relative9}`;
-    return relative9;
+    let relative10 = path72.relative(path72.dirname(sourceFile), target).replace(/\\/g, "/");
+    if (!relative10.startsWith("."))
+      relative10 = `./${relative10}`;
+    return relative10;
   }
   return modulePath;
 }
@@ -46768,10 +46906,10 @@ function safeRelativePath(value) {
   return normalized;
 }
 function relativeFromRoot(root, absolutePath2) {
-  const relative10 = path73.relative(path73.resolve(root), path73.resolve(absolutePath2));
-  if (relative10.startsWith("..") || path73.isAbsolute(relative10))
+  const relative11 = path73.relative(path73.resolve(root), path73.resolve(absolutePath2));
+  if (relative11.startsWith("..") || path73.isAbsolute(relative11))
     return null;
-  return safeRelativePath(relative10);
+  return safeRelativePath(relative11);
 }
 function absoluteFromRelative(root, relativePath2) {
   const safe = safeRelativePath(relativePath2);
@@ -46779,8 +46917,8 @@ function absoluteFromRelative(root, relativePath2) {
     return null;
   const resolvedRoot = path73.resolve(root);
   const absolute = path73.resolve(resolvedRoot, safe);
-  const relative10 = path73.relative(resolvedRoot, absolute);
-  if (relative10.startsWith("..") || path73.isAbsolute(relative10))
+  const relative11 = path73.relative(resolvedRoot, absolute);
+  if (relative11.startsWith("..") || path73.isAbsolute(relative11))
     return null;
   return absolute;
 }
@@ -46810,8 +46948,8 @@ function diagnosticPaths(root, diagnostics) {
     if (witness.kind === "stable-skip")
       stable.add(safe);
   }
-  for (const relative10 of reportedStable) {
-    if (witnesses.get(relative10)?.kind !== "stable-skip")
+  for (const relative11 of reportedStable) {
+    if (witnesses.get(relative11)?.kind !== "stable-skip")
       return null;
   }
   return { stable, witnesses };
@@ -46833,50 +46971,50 @@ async function writeFingerprint(root, graph, options) {
       return refuseFingerprint(root);
     const current = new Map;
     for (const input of walk.metadata) {
-      const relative10 = relativeFromRoot(root, input.absolutePath);
-      if (relative10 === null)
+      const relative11 = relativeFromRoot(root, input.absolutePath);
+      if (relative11 === null)
         return refuseFingerprint(root);
-      current.set(relative10, {
+      current.set(relative11, {
         size: input.sizeBytes,
         mtimeMs: input.mtimeMs
       });
     }
-    for (const [relative10, witness] of certifiedInputs.witnesses) {
-      const observed = current.get(relative10);
+    for (const [relative11, witness] of certifiedInputs.witnesses) {
+      const observed = current.get(relative11);
       if (observed === undefined || observed.size !== witness.sizeBytes || observed.mtimeMs !== witness.mtimeMs) {
         return refuseFingerprint(root);
       }
     }
     const nodePaths = new Set;
     for (const node of Object.values(graph.nodes)) {
-      const relative10 = relativeFromRoot(root, node.filePath);
-      if (relative10 === null)
+      const relative11 = relativeFromRoot(root, node.filePath);
+      if (relative11 === null)
         return refuseFingerprint(root);
       if (typeof node.sizeBytes !== "number" || !Number.isFinite(node.sizeBytes) || node.sizeBytes < 0 || typeof node.mtimeMs !== "number" || !Number.isFinite(node.mtimeMs) || node.mtimeMs < 0) {
         return refuseFingerprint(root);
       }
-      const observed = current.get(relative10);
+      const observed = current.get(relative11);
       if (observed === undefined || observed.size !== node.sizeBytes || observed.mtimeMs !== node.mtimeMs) {
         return refuseFingerprint(root);
       }
-      nodePaths.add(relative10);
+      nodePaths.add(relative11);
     }
     for (const input of walk.metadata) {
-      const relative10 = relativeFromRoot(root, input.absolutePath);
-      if (relative10 === null)
+      const relative11 = relativeFromRoot(root, input.absolutePath);
+      if (relative11 === null)
         return refuseFingerprint(root);
-      if (input.kind === "manifest" && certifiedInputs.witnesses.get(relative10)?.kind !== "manifest") {
+      if (input.kind === "manifest" && certifiedInputs.witnesses.get(relative11)?.kind !== "manifest") {
         return refuseFingerprint(root);
       }
       if (input.kind !== "source")
         continue;
-      if (!nodePaths.has(relative10) && !certifiedInputs.stable.has(relative10)) {
+      if (!nodePaths.has(relative11) && !certifiedInputs.stable.has(relative11)) {
         return refuseFingerprint(root);
       }
     }
     const files = Object.create(null);
-    for (const relative10 of [...current.keys()].sort((a, b) => a.localeCompare(b))) {
-      files[relative10] = current.get(relative10);
+    for (const relative11 of [...current.keys()].sort((a, b) => a.localeCompare(b))) {
+      files[relative11] = current.get(relative11);
     }
     if (Object.keys(files).length > MAX_FINGERPRINT_ENTRIES)
       return refuseFingerprint(root);
@@ -49508,8 +49646,8 @@ function resolvePathShimTarget(shimPath, linter, platform = _internals70.platfor
   }
   const allowedRoots = [canonicalShimDir, canonicalShimParent];
   const isContained = allowedRoots.some((root) => {
-    const relative11 = path79.relative(root, canonicalTarget);
-    return relative11 === "" || !relative11.startsWith("..") && !path79.isAbsolute(relative11);
+    const relative12 = path79.relative(root, canonicalTarget);
+    return relative12 === "" || !relative12.startsWith("..") && !path79.isAbsolute(relative12);
   });
   if (!isContained)
     return null;
@@ -49689,8 +49827,8 @@ function resolveContainedWindowsBatchCommand(cwd, fileName, args) {
   } catch {
     return null;
   }
-  const relative11 = path79.relative(canonicalCwd, canonicalCandidate);
-  if (relative11 === "" || relative11.startsWith("..") || path79.isAbsolute(relative11)) {
+  const relative12 = path79.relative(canonicalCwd, canonicalCandidate);
+  if (relative12 === "" || relative12.startsWith("..") || path79.isAbsolute(relative12)) {
     return null;
   }
   return buildWindowsBatchCommand(canonicalCandidate, args);
@@ -50613,14 +50751,14 @@ function isPathWithinScope(realPath, scanDir) {
 }
 var DISCOVERY_YIELD_INTERVAL = 100;
 function toSafeRelativePath(rootDir, targetPath) {
-  const relative12 = path80.relative(rootDir, targetPath).replace(/\\/g, "/");
-  if (!relative12 || relative12 === ".")
+  const relative13 = path80.relative(rootDir, targetPath).replace(/\\/g, "/");
+  if (!relative13 || relative13 === ".")
     return ".";
-  if (relative12.startsWith("..") || path80.isAbsolute(relative12)) {
+  if (relative13.startsWith("..") || path80.isAbsolute(relative13)) {
     const basename19 = path80.basename(targetPath).replace(/\\/g, "/");
     return basename19 || ".";
   }
-  return relative12;
+  return relative13;
 }
 function recordIncompletePath(target, rootDir, targetPath, reason) {
   if (target.length >= MAX_INCOMPLETE_PATHS) {
@@ -52138,8 +52276,8 @@ function resolveNativeTarget(target, workingDir) {
   } catch {
     return { success: false, error: "Native target path does not exist" };
   }
-  const relative13 = path83.relative(rootReal, targetReal);
-  if (relative13.startsWith("..") || path83.isAbsolute(relative13)) {
+  const relative14 = path83.relative(rootReal, targetReal);
+  if (relative14.startsWith("..") || path83.isAbsolute(relative14)) {
     return { success: false, error: "Native target path escapes project root" };
   }
   if (!_internals74.isCommandAvailable(target.framework === "go-test" ? "go" : "ctest")) {
@@ -52149,7 +52287,7 @@ function resolveNativeTarget(target, workingDir) {
     };
   }
   let executionDirectory = rootReal;
-  let commandRelative = relative13;
+  let commandRelative = relative14;
   if (target.framework === "go-test") {
     const hasRootWorkspace = fs35.existsSync(path83.join(rootReal, "go.work"));
     let moduleRoot;
@@ -52187,7 +52325,7 @@ function resolveNativeTarget(target, workingDir) {
       path: commandRelative.length === 0 ? "." : commandRelative.replace(/\\/g, "/")
     },
     executionDirectory,
-    historyPath: relative13.length === 0 ? "." : relative13.replace(/\\/g, "/")
+    historyPath: relative14.length === 0 ? "." : relative14.replace(/\\/g, "/")
   };
 }
 function hasPackageJsonDependency(deps, ...patterns) {
@@ -53598,11 +53736,11 @@ function normalizeHistoryTestFile(testFile, workingDir) {
   const normalized = testFile.replace(/\\/g, "/");
   if (!path83.isAbsolute(testFile))
     return normalized;
-  const relative13 = path83.relative(workingDir, testFile);
-  if (relative13.startsWith("..") || path83.isAbsolute(relative13)) {
+  const relative14 = path83.relative(workingDir, testFile);
+  if (relative14.startsWith("..") || path83.isAbsolute(relative14)) {
     return normalized;
   }
-  return relative13.replace(/\\/g, "/");
+  return relative14.replace(/\\/g, "/");
 }
 function combineAggregateResult(current, next) {
   if (current === "fail" || next === "fail")
@@ -56412,6 +56550,9 @@ var DEFAULT_MAX_UNTRACKED_FILE_BYTES = 64 * 1024;
 var MAX_REVIEW_BYTES = 8 * 1024 * 1024;
 var MAX_UNTRACKED_FILE_BYTES = 1024 * 1024;
 var MAX_TIMEOUT_MS2 = 60000;
+var WORKTREE_IDENTITY_MAX_FILE_BYTES = 2 * 1024 * 1024;
+var WORKTREE_IDENTITY_TOTAL_BYTES = 8 * 1024 * 1024;
+var WORKTREE_IDENTITY_MAX_DURATION_MS = 2000;
 var METADATA_OUTPUT_LIMIT = 256 * 1024;
 var STDERR_OUTPUT_LIMIT = 64 * 1024;
 var MAX_REF_LENGTH = 200;
@@ -56779,8 +56920,8 @@ function sameFileSnapshot(left, right) {
   return sameFileIdentity(left, right) && left.size === right.size && left.mtimeNs === right.mtimeNs && left.ctimeNs === right.ctimeNs;
 }
 function isContained(root, candidate) {
-  const relative16 = path89.relative(root, candidate);
-  return relative16.length > 0 && !relative16.startsWith(`..${path89.sep}`) && relative16 !== ".." && !path89.isAbsolute(relative16);
+  const relative17 = path89.relative(root, candidate);
+  return relative17.length > 0 && !relative17.startsWith(`..${path89.sep}`) && relative17 !== ".." && !path89.isAbsolute(relative17);
 }
 function selectorKey(selector) {
   switch (selector.kind) {
@@ -56794,6 +56935,204 @@ function selectorKey(selector) {
       return "working-tree";
   }
 }
+function reviewTargetKind(selector) {
+  switch (selector.kind) {
+    case "range":
+      return "exact-committed-range";
+    case "working-tree":
+      return "checkout-index-working-tree";
+    default:
+      return "checkout-history-index-working-tree";
+  }
+}
+function compareUtf8Bytes(left, right) {
+  return Buffer.compare(Buffer.from(left, "utf8"), Buffer.from(right, "utf8"));
+}
+function uniqueSkipCodes(skipReasons) {
+  return [...new Set(skipReasons.map((item) => item.code))].sort();
+}
+function hashManifestPayload(payload) {
+  return createHash17("sha256").update(JSON.stringify(payload), "utf8").digest("hex");
+}
+function parseObjectFormat(stdout) {
+  const objectFormat = stdout.trim();
+  return objectFormat.length > 0 && !hasControlCharacter(objectFormat) ? objectFormat : null;
+}
+function parseLsTreeBlobId(stdout, expectedPath) {
+  const trimmed = stdout.endsWith("\x00") ? stdout.slice(0, -1) : stdout;
+  if (!trimmed)
+    return null;
+  const tabIndex = trimmed.indexOf("\t");
+  if (tabIndex === -1)
+    return null;
+  const metadata = trimmed.slice(0, tabIndex).trim().split(/\s+/);
+  const actualPath = normalizeRelativePath(trimmed.slice(tabIndex + 1));
+  if (metadata.length < 3 || metadata[1] !== "blob" || actualPath !== expectedPath || !SHA_PATTERN.test(metadata[2] ?? "")) {
+    return null;
+  }
+  return metadata[2];
+}
+async function resolveGitObjectFormat(root, timeoutMs) {
+  const result = await runGit2(root, ["rev-parse", "--show-object-format"], {
+    timeoutMs,
+    maxStdoutBytes: METADATA_OUTPUT_LIMIT
+  });
+  return result.ok ? parseObjectFormat(result.stdout) : null;
+}
+async function readGitBlobIdentity(root, treeish, relativePath2, timeoutMs, objectFormat) {
+  const result = await runGit2(root, ["ls-tree", "-z", treeish, "--", relativePath2], {
+    timeoutMs,
+    maxStdoutBytes: METADATA_OUTPUT_LIMIT
+  });
+  if (!result.ok)
+    return null;
+  const blobId = parseLsTreeBlobId(result.stdout, relativePath2);
+  if (!blobId)
+    return null;
+  return {
+    algorithm: "git-blob",
+    git_blob_oid: blobId,
+    git_object_format: objectFormat
+  };
+}
+function compareStats(left, right) {
+  return sameFileIdentity(left, right) && left.size === right.size && left.mtimeNs === right.mtimeNs && left.ctimeNs === right.ctimeNs;
+}
+function hashWorkingTreeIdentity(root, rawPath, budget) {
+  const normalized = normalizeRelativePath(rawPath);
+  if (!normalized)
+    return { identity: null };
+  const candidate = path89.resolve(root, ...normalized.split("/"));
+  if (!isContained(root, candidate))
+    return { identity: null };
+  let handle;
+  const deadlineExceeded = (detail) => ({
+    identity: null,
+    failure: {
+      code: "UNREADABLE_FILE",
+      path: normalized,
+      detail
+    }
+  });
+  try {
+    if (_internals78.now() > budget.deadlineMs) {
+      return deadlineExceeded("working-tree content identity deadline expired before file hashing started");
+    }
+    const pathStat = _internals78.lstatBigIntSync(candidate);
+    if (!pathStat.isFile() || pathStat.isSymbolicLink())
+      return { identity: null };
+    const canonicalBeforeOpen = _internals78.realpathSync(candidate);
+    if (!isContained(root, canonicalBeforeOpen))
+      return { identity: null };
+    handle = _internals78.openSync(canonicalBeforeOpen, "r");
+    const openedBeforeRead = _internals78.fstatBigIntSync(handle);
+    const canonicalAfterOpen = _internals78.realpathSync(candidate);
+    if (!openedBeforeRead.isFile() || !compareStats(pathStat, openedBeforeRead) || !samePath(canonicalBeforeOpen, canonicalAfterOpen) || !isContained(root, canonicalAfterOpen)) {
+      return { identity: null };
+    }
+    if (openedBeforeRead.size > BigInt(Number.MAX_SAFE_INTEGER)) {
+      return deadlineExceeded("working-tree content identity byte length exceeds safe integer bounds");
+    }
+    if (openedBeforeRead.size > BigInt(WORKTREE_IDENTITY_MAX_FILE_BYTES)) {
+      return deadlineExceeded(`working-tree content identity exceeded the ${WORKTREE_IDENTITY_MAX_FILE_BYTES}-byte per-file cap`);
+    }
+    const fileBytes = Number(openedBeforeRead.size);
+    if (fileBytes > budget.remainingBytes) {
+      return deadlineExceeded(`working-tree content identity exceeded the ${WORKTREE_IDENTITY_TOTAL_BYTES}-byte aggregate cap`);
+    }
+    const hash2 = createHash17("sha256");
+    const buffer = Buffer.alloc(64 * 1024);
+    let offset = 0;
+    while (offset < fileBytes) {
+      if (_internals78.now() > budget.deadlineMs) {
+        return deadlineExceeded("working-tree content identity deadline expired while hashing file content");
+      }
+      const read = _internals78.readSync(handle, buffer, 0, Math.min(buffer.byteLength, fileBytes - offset), offset);
+      if (read === 0)
+        break;
+      hash2.update(buffer.subarray(0, read));
+      offset += read;
+    }
+    const openedAfterRead = _internals78.fstatBigIntSync(handle);
+    const canonicalAfterRead = _internals78.realpathSync(candidate);
+    if (!compareStats(openedBeforeRead, openedAfterRead) || !samePath(canonicalBeforeOpen, canonicalAfterRead) || !isContained(root, canonicalAfterRead) || offset !== fileBytes) {
+      return { identity: null };
+    }
+    budget.remainingBytes -= fileBytes;
+    return {
+      identity: {
+        algorithm: "sha256",
+        sha256: hash2.digest("hex"),
+        byte_length: Number(openedAfterRead.size)
+      }
+    };
+  } catch {
+    return { identity: null };
+  } finally {
+    if (handle !== undefined) {
+      try {
+        _internals78.closeSync(handle);
+      } catch {}
+    }
+  }
+}
+async function buildReviewManifest(root, selector, files, completeness, timeoutMs, revisionContext, contentHash) {
+  const objectFormat = await resolveGitObjectFormat(root, timeoutMs) ?? "sha1";
+  const pathRecords = [];
+  const identityFailures = [];
+  const missingIdentityBindings = new Set;
+  const workingTreeBudget = selector.kind === "range" ? undefined : {
+    remainingBytes: WORKTREE_IDENTITY_TOTAL_BYTES,
+    deadlineMs: _internals78.now() + Math.min(timeoutMs, WORKTREE_IDENTITY_MAX_DURATION_MS)
+  };
+  const orderedScopes = [...files.values()].sort((left, right) => compareUtf8Bytes(left.newPath ?? left.oldPath ?? "", right.newPath ?? right.oldPath ?? ""));
+  const oldTreeForSelector = selector.kind === "working-tree" ? revisionContext.headSha : selector.kind === "range" ? selector.operator === "..." ? revisionContext.mergeBase : revisionContext.baseSha : revisionContext.mergeBase;
+  const newTreeForSelector = selector.kind === "range" ? revisionContext.rangeToSha : undefined;
+  for (const scope of orderedScopes) {
+    const record = {
+      kind: scope.kind,
+      old_path: scope.oldPath,
+      new_path: scope.newPath
+    };
+    if (scope.kind !== "added" && scope.oldPath && oldTreeForSelector) {
+      record.old_identity = await readGitBlobIdentity(root, oldTreeForSelector, scope.oldPath, timeoutMs, objectFormat) ?? undefined;
+    }
+    if (scope.newPath) {
+      if (selector.kind === "range" && newTreeForSelector) {
+        record.new_identity = await readGitBlobIdentity(root, newTreeForSelector, scope.newPath, timeoutMs, objectFormat) ?? undefined;
+      } else if (workingTreeBudget) {
+        const hashed = hashWorkingTreeIdentity(root, scope.newPath, workingTreeBudget);
+        record.new_identity = hashed.identity ?? undefined;
+        if (hashed.failure) {
+          identityFailures.push(hashed.failure);
+          missingIdentityBindings.add(`new:${scope.newPath}`);
+        }
+      }
+    }
+    pathRecords.push(record);
+  }
+  const payload = {
+    schema_version: 2,
+    content_hash: contentHash,
+    selector,
+    selector_key: selectorKey(selector),
+    review_target_kind: reviewTargetKind(selector),
+    completeness: {
+      complete: completeness.complete,
+      truncated: completeness.truncated,
+      skip_reason_codes: uniqueSkipCodes(completeness.skipReasons)
+    },
+    path_records: pathRecords
+  };
+  return {
+    manifest: {
+      ...payload,
+      hash: hashManifestPayload(payload)
+    },
+    identityFailures,
+    missingIdentityBindings
+  };
+}
 function boundedPositiveInteger(value, fallback, maximum) {
   if (value === undefined || !Number.isFinite(value))
     return fallback;
@@ -57282,6 +57621,11 @@ async function collectReviewDiff(options) {
     fileListFallback: fileListFallback ?? null
   });
   const scopeHash = createHash17("sha256").update(hashPayload, "utf8").digest("hex");
+  const reviewContentHash = createHash17("sha256").update(JSON.stringify({
+    selector,
+    canonicalText,
+    fileListFallback: fileListFallback ?? null
+  }), "utf8").digest("hex");
   const completeness = {
     complete: skipReasons.length === 0 && !truncated,
     truncated,
@@ -57295,6 +57639,39 @@ async function collectReviewDiff(options) {
     includesWorkingTree,
     scopeHash
   };
+  const { manifest, identityFailures, missingIdentityBindings } = await buildReviewManifest(root, selector, parsed.files, completeness, timeoutMs, {
+    headSha,
+    mergeBase,
+    baseSha,
+    rangeToSha
+  }, reviewContentHash);
+  skipReasons.push(...identityFailures);
+  for (const record of manifest.path_records) {
+    if (record.kind !== "added" && record.old_path && !record.old_identity) {
+      skipReasons.push({
+        code: "UNREADABLE_FILE",
+        path: record.old_path,
+        detail: "could not bind the reviewed old-side file to a complete content identity"
+      });
+    }
+    if (record.kind !== "deleted" && record.new_path && !record.new_identity && !missingIdentityBindings.has(`new:${record.new_path}`)) {
+      skipReasons.push({
+        code: "UNREADABLE_FILE",
+        path: record.new_path,
+        detail: "could not bind the reviewed new-side file to a complete content identity"
+      });
+    }
+  }
+  if (skipReasons.length > manifest.completeness.skip_reason_codes.length) {
+    completeness.complete = false;
+    manifest.completeness = {
+      complete: false,
+      truncated: completeness.truncated,
+      skip_reason_codes: uniqueSkipCodes(skipReasons)
+    };
+    const { hash: _oldHash, ...manifestPayload } = manifest;
+    manifest.hash = hashManifestPayload(manifestPayload);
+  }
   const scope = {
     selector,
     canonicalText,
@@ -57309,7 +57686,8 @@ async function collectReviewDiff(options) {
     deletedLines: parsed.deletedLines,
     files: parsed.files,
     completeness,
-    staleness
+    staleness,
+    manifest
   };
   const clean = canonicalText.trim().length === 0 && untrackedCount === 0 && skipReasons.length === 0;
   return { status: clean ? "clean" : "ok", ...scope };
@@ -57322,7 +57700,8 @@ var _internals78 = {
   fstatBigIntSync: (fd) => fs40.fstatSync(fd, { bigint: true }),
   readSync: fs40.readSync,
   closeSync: fs40.closeSync,
-  resolveGitExecutable: resolveGitExecutableAsync
+  resolveGitExecutable: resolveGitExecutableAsync,
+  now: () => Date.now()
 };
 
 // src/review/engine.ts
@@ -58094,15 +58473,15 @@ function normalizedProjectFile(directory, file) {
     return null;
   const root = path91.resolve(directory);
   const absolute = path91.resolve(root, file);
-  const relative17 = path91.relative(root, absolute).replaceAll("\\", "/");
-  if (!relative17 || relative17 === ".." || relative17.startsWith("../") || path91.isAbsolute(relative17)) {
+  const relative18 = path91.relative(root, absolute).replaceAll("\\", "/");
+  if (!relative18 || relative18 === ".." || relative18.startsWith("../") || path91.isAbsolute(relative18)) {
     return null;
   }
-  return relative17;
+  return relative18;
 }
 function isWithinRoot2(root, candidate) {
-  const relative17 = path91.relative(root, candidate);
-  return relative17 === "" || relative17 !== ".." && !relative17.startsWith(`..${path91.sep}`) && !path91.isAbsolute(relative17);
+  const relative18 = path91.relative(root, candidate);
+  return relative18 === "" || relative18 !== ".." && !relative18.startsWith(`..${path91.sep}`) && !path91.isAbsolute(relative18);
 }
 function deletedPathIsContained(canonicalRoot, absolute) {
   let current = path91.dirname(absolute);
@@ -58488,8 +58867,8 @@ function hasControlCharacter3(value) {
   return false;
 }
 function isContained2(root, candidate) {
-  const relative18 = path92.relative(root, candidate);
-  return relative18.length > 0 && relative18 !== ".." && !relative18.startsWith(`..${path92.sep}`) && !path92.isAbsolute(relative18);
+  const relative19 = path92.relative(root, candidate);
+  return relative19.length > 0 && relative19 !== ".." && !relative19.startsWith(`..${path92.sep}`) && !path92.isAbsolute(relative19);
 }
 function canonicalPath(relativePath2) {
   return relativePath2.split(path92.sep).join("/");
@@ -58868,8 +59247,22 @@ var _internals82 = {
 };
 
 // src/review/evidence.ts
+import { createHash as createHash21 } from "crypto";
 import * as fs44 from "fs";
 import * as path93 from "path";
+function computeAutoReviewManifestHash(manifest) {
+  return createHash21("sha256").update(JSON.stringify({
+    schema_version: manifest.schema_version,
+    content_hash: manifest.content_hash,
+    plan_requirements_hash: manifest.plan_requirements_hash,
+    review_policy_digest: manifest.review_policy_digest,
+    selector: manifest.selector,
+    selector_key: manifest.selector_key,
+    review_target_kind: manifest.review_target_kind,
+    completeness: manifest.completeness,
+    path_records: manifest.path_records
+  }), "utf8").digest("hex");
+}
 function autoReviewEvidenceRelativePath(trigger, scopeHash, phase) {
   if ((trigger === "phase_completion" || trigger === "plan_completion") && Number.isInteger(phase) && (phase ?? 0) > 0) {
     return path93.join("evidence", String(phase), "auto-review.json");
@@ -58921,7 +59314,7 @@ function isAutoReviewEvidence(value) {
   if (!value || typeof value !== "object")
     return false;
   const candidate = value;
-  if (!(candidate.schema_version === 1 && typeof candidate.timestamp === "string" && [
+  if (!((candidate.schema_version === 1 || candidate.schema_version === 2) && typeof candidate.timestamp === "string" && [
     "task_completion",
     "phase_completion",
     "plan_completion",
@@ -58929,8 +59322,91 @@ function isAutoReviewEvidence(value) {
   ].includes(String(candidate.trigger)) && typeof candidate.session_id === "string" && Boolean(candidate.scope) && typeof candidate.scope?.hash === "string" && typeof candidate.scope?.head_sha === "string" && Boolean(candidate.scope?.selector) && Boolean(candidate.scope?.completeness) && Boolean(candidate.policy) && (candidate.policy?.mode === "advisory" || candidate.policy?.mode === "gate") && typeof candidate.policy?.min_confidence === "number" && typeof candidate.policy?.structured_findings === "boolean" && typeof candidate.policy?.validate_findings === "boolean" && Array.isArray(candidate.findings) && Array.isArray(candidate.blocking_finding_ids) && typeof candidate.validation_complete === "boolean" && Boolean(candidate.review) && ["completed", "clean", "error"].includes(String(candidate.review?.status)))) {
     return false;
   }
+  if (candidate.schema_version === 2) {
+    if (!candidate.scope?.manifest || candidate.scope.manifest.schema_version !== 2 || typeof candidate.scope.manifest.content_hash !== "string" || typeof candidate.scope.manifest.plan_requirements_hash !== "string" || typeof candidate.scope.manifest.review_policy_digest !== "string" || typeof candidate.scope.manifest.hash !== "string" || typeof candidate.policy?.digest !== "string") {
+      return false;
+    }
+    const { hash: hash2, ...manifestPayload } = candidate.scope.manifest;
+    if (hash2 !== computeAutoReviewManifestHash(manifestPayload)) {
+      return false;
+    }
+  }
   return candidate.findings.every(isAutoReviewEvidenceFinding);
 }
+async function computePlanRequirementsHash(directory) {
+  const plan = await loadReviewRequirementsPlan(directory);
+  return plan ? computeReviewPlanRequirementsHash(plan) : "plan:none";
+}
+function computeAutoReviewPolicyDigest(config) {
+  return createHash21("sha256").update(JSON.stringify({
+    mode: config.final_review.mode,
+    min_confidence: config.min_confidence,
+    structured_findings: config.structured_findings,
+    validate_findings: config.validate_findings,
+    final_review: {
+      on_phase_complete: config.final_review.on_phase_complete,
+      on_plan_complete: config.final_review.on_plan_complete,
+      max_diff_bytes: config.final_review.max_diff_bytes,
+      timeout_ms: config.final_review.timeout_ms,
+      model: config.final_review.model
+    },
+    validation_timeout_ms: config.validation_timeout_ms,
+    validation_model: config.validation_model
+  }), "utf8").digest("hex");
+}
+async function materializeAutoReviewManifest(directory, manifest, config) {
+  const planRequirementsHash = await computePlanRequirementsHash(directory);
+  const policyDigest = computeAutoReviewPolicyDigest(config);
+  const payload = {
+    ...manifest,
+    plan_requirements_hash: planRequirementsHash,
+    review_policy_digest: policyDigest
+  };
+  const hash2 = computeAutoReviewManifestHash(payload);
+  return { ...payload, hash: hash2 };
+}
+async function loadReviewRequirementsPlan(directory) {
+  if (!await ledgerExists(directory)) {
+    return loadPlanJsonOnly(directory);
+  }
+  let replayed;
+  try {
+    replayed = await replayFromLedgerWithStatus(directory);
+  } catch (error2) {
+    throw new Error(`authoritative plan ledger replay failed for final-review requirements: ${error2 instanceof Error ? error2.message : String(error2)}`);
+  }
+  if (replayed.truncated) {
+    throw new Error("authoritative plan ledger replay is truncated; final-review requirements are unavailable");
+  }
+  if (!replayed.plan) {
+    throw new Error("authoritative plan ledger replay returned no plan; final-review requirements are unavailable");
+  }
+  return replayed.plan;
+}
+function computeReviewPlanRequirementsHash(plan) {
+  return createHash21("sha256").update(JSON.stringify({
+    schema_version: plan.schema_version,
+    title: plan.title,
+    swarm: plan.swarm,
+    migration_status: plan.migration_status,
+    phases: plan.phases.map((phase) => ({
+      id: phase.id,
+      name: phase.name,
+      type: phase.type,
+      required_agents: phase.required_agents ? [...phase.required_agents].sort() : undefined,
+      tasks: phase.tasks.map((task) => ({
+        id: task.id,
+        phase: task.phase,
+        size: task.size,
+        description: task.description,
+        depends: [...task.depends].sort(),
+        acceptance: task.acceptance,
+        files_touched: [...task.files_touched].sort(),
+        fr_refs: task.fr_refs ? [...task.fr_refs].sort() : undefined
+      }))
+    }))
+  }), "utf8").digest("hex");
+}
 function baseFinding(finding) {
   return {
     title: finding.title,
@@ -59051,13 +59527,9 @@ function scopeFreshnessMismatches(reviewed, current) {
   };
   compare("status", reviewed.status, current.status);
   compare("scopeHash", reviewed.scopeHash, current.scopeHash);
+  compare("manifestHash", reviewed.manifest.hash, current.manifest.hash);
   compare("canonicalText", reviewed.canonicalText, current.canonicalText);
   compare("reviewTextBytes", reviewed.reviewTextBytes, current.reviewTextBytes);
-  compare("headSha", reviewed.headSha, current.headSha);
-  compare("baseRef", reviewed.baseRef, current.baseRef);
-  compare("baseSha", reviewed.baseSha, current.baseSha);
-  compare("mergeBase", reviewed.mergeBase, current.mergeBase);
-  compare("rangeToSha", reviewed.rangeToSha, current.rangeToSha);
   compare("selector", JSON.stringify(reviewed.selector), JSON.stringify(current.selector));
   compare("completeness", JSON.stringify(reviewed.completeness), JSON.stringify(current.completeness));
   compare("includesWorkingTree", reviewed.staleness.includesWorkingTree, current.staleness.includesWorkingTree);
@@ -59083,6 +59555,7 @@ async function stalePersistenceResult(input, maxBytes, message, modelCalls) {
   result.modelCalls = modelCalls;
   if (current.status !== "error") {
     result.scopeHash = current.scopeHash;
+    result.manifestHash = current.manifest.hash;
     result.scopeComplete = current.completeness.complete;
     Object.assign(result, scopeResultFields(current));
   }
@@ -59148,14 +59621,14 @@ var REVIEW_SYSTEM_PROMPT = [
 function renderReviewPrompt(input, renderedFallbackFiles, omittedFallbackFiles) {
   const { diff } = input;
   const exactRange = diff.selector.kind === "range";
-  const reviewTargetKind = diff.selector.kind === "range" ? "exact-committed-range" : diff.selector.kind === "working-tree" ? "checkout-index-working-tree" : "checkout-history-index-working-tree";
+  const reviewTargetKind2 = diff.selector.kind === "range" ? "exact-committed-range" : diff.selector.kind === "working-tree" ? "checkout-index-working-tree" : "checkout-history-index-working-tree";
   const fallback = diff.completeness.fileListFallback;
   const promptFallbackComplete = fallback?.complete && omittedFallbackFiles === 0;
   return [
     `TASK: Review the complete ${input.trigger.replaceAll("_", " ")} diff.`,
     input.phase ? `PHASE: ${input.phase}` : "",
     `REVIEW_SELECTOR: ${JSON.stringify(diff.selector)}`,
-    `REVIEW_TARGET_KIND: ${reviewTargetKind}`,
+    `REVIEW_TARGET_KIND: ${reviewTargetKind2}`,
     `SCOPE_HASH: ${diff.scopeHash}`,
     `BASE_REF: ${diff.baseRef ?? "none"}`,
     `BASE_SHA: ${diff.baseSha ?? "none"}`,
@@ -59254,8 +59727,8 @@ function normalizedRelativePath(file) {
   return normalized.replace(/^\.\//, "");
 }
 function isWithinRoot3(root, candidate) {
-  const relative20 = path94.relative(root, candidate);
-  return relative20.length > 0 && relative20 !== ".." && !relative20.startsWith(`..${path94.sep}`) && !path94.isAbsolute(relative20);
+  const relative21 = path94.relative(root, candidate);
+  return relative21.length > 0 && relative21 !== ".." && !relative21.startsWith(`..${path94.sep}`) && !path94.isAbsolute(relative21);
 }
 function rangesOverlap(start, end, ranges) {
   return ranges.some((range) => start <= range.end && end >= range.start);
@@ -59372,7 +59845,7 @@ function addCost(evidence2, dispatches) {
 }
 function baseEvidence(input, diff, status) {
   return {
-    schema_version: 1,
+    schema_version: 2,
     timestamp: new Date().toISOString(),
     trigger: input.trigger,
     session_id: input.sessionID,
@@ -59392,7 +59865,8 @@ function baseEvidence(input, diff, status) {
       mode: input.config.final_review.mode,
       min_confidence: input.config.min_confidence,
       structured_findings: input.config.structured_findings,
-      validate_findings: input.config.validate_findings
+      validate_findings: input.config.validate_findings,
+      digest: undefined
     },
     review: { status },
     findings: [],
@@ -59451,6 +59925,8 @@ function emptyResult2(status, message, blocked, blockReason) {
 }
 async function persistErrorResult(input, diff, result, error2, dispatches, promptRequest) {
   const evidence2 = baseEvidence(input, diff, "error");
+  evidence2.scope.manifest = await materializeAutoReviewManifest(input.directory, diff.manifest, input.config);
+  evidence2.policy.digest = evidence2.scope.manifest.review_policy_digest;
   evidence2.review.error = error2;
   addCost(evidence2, dispatches);
   try {
@@ -59462,6 +59938,7 @@ async function persistErrorResult(input, diff, result, error2, dispatches, promp
     }
   }
   result.scopeHash = diff.scopeHash;
+  result.manifestHash = evidence2.scope.manifest.hash;
   result.scopeComplete = diff.completeness.complete;
   Object.assign(result, scopeResultFields(diff, promptRequest));
   return result;
@@ -59482,6 +59959,8 @@ async function runReviewEngine(input) {
   }
   if (diff.status === "clean") {
     const evidence3 = baseEvidence(input, diff, "clean");
+    evidence3.scope.manifest = await materializeAutoReviewManifest(input.directory, diff.manifest, input.config);
+    evidence3.policy.digest = evidence3.scope.manifest.review_policy_digest;
     let evidencePath2;
     try {
       evidencePath2 = await _internals83.persistEvidence(input.directory, evidence3, { verifyCurrent: createScopeVerifier(input, diff, maxBytes) });
@@ -59495,6 +59974,7 @@ async function runReviewEngine(input) {
       ...emptyResult2("clean", "Review scope is clean.", blocked2, blocked2 ? "EVIDENCE_PERSISTENCE_FAILED" : undefined),
       validationComplete: true,
       scopeHash: diff.scopeHash,
+      manifestHash: evidence3.scope.manifest.hash,
       scopeComplete: diff.completeness.complete,
       ...scopeResultFields(diff),
       evidencePath: evidencePath2
@@ -59505,6 +59985,7 @@ async function runReviewEngine(input) {
     diff,
     phase: input.phase
   });
+  const reviewManifest = await materializeAutoReviewManifest(input.directory, diff.manifest, input.config);
   if (input.phase !== undefined && (input.trigger === "phase_completion" || input.trigger === "plan_completion")) {
     const existing = _internals83.readPhaseEvidence(input.directory, input.phase);
     const integrity = existing ? validateAutoReviewEvidenceIntegrity(input.directory, existing, {
@@ -59519,7 +60000,7 @@ async function runReviewEngine(input) {
       },
       scopeContent: diff.canonicalText
     }) : undefined;
-    if (existing?.review.status === "completed" && existing.scope.head_sha === diff.headSha && integrity?.ok && integrity.receipt) {
+    if (existing?.review.status === "completed" && existing.schema_version === 2 && existing.scope.manifest?.hash === reviewManifest.hash && integrity?.ok && integrity.receipt) {
       const validationsById = new Map((integrity.receipt.finding_validations ?? []).map((validation) => [
         validation.finding_id,
         validation
@@ -59548,6 +60029,7 @@ async function runReviewEngine(input) {
         receiptPath: existing.receipt_path,
         evidencePath: path94.join(input.directory, ".swarm", "evidence", String(input.phase), "auto-review.json"),
         scopeHash: existing.scope.hash,
+        manifestHash: existing.scope.manifest?.hash,
         scopeComplete: diff.completeness.complete,
         ...scopeResultFields(diff, promptRequest),
         reviewModel: existing.review.model,
@@ -59654,6 +60136,8 @@ async function runReviewEngine(input) {
   }
   const blockingFindings = findings.filter((finding) => finding.anchored && isGateSeverity(finding.effective_severity) && finding.validation?.disposition === "CONFIRMED");
   const evidence2 = baseEvidence(input, diff, "completed");
+  evidence2.scope.manifest = reviewManifest;
+  evidence2.policy.digest = reviewManifest.review_policy_digest;
   evidence2.review = {
     status: "completed",
     output_mode: parsed.outputMode,
@@ -59771,6 +60255,7 @@ async function runReviewEngine(input) {
     receiptPath,
     evidencePath,
     scopeHash: diff.scopeHash,
+    manifestHash: reviewManifest.hash,
     scopeComplete: diff.completeness.complete,
     ...scopeResultFields(diff, promptRequest),
     reviewModel: dispatched.result.modelId,
@@ -59821,8 +60306,8 @@ function formatSelector(selector) {
   }
 }
 function isPathInside(parent, candidate) {
-  const relative21 = path95.relative(parent, candidate);
-  return relative21.length > 0 && relative21 !== ".." && !relative21.startsWith(`..${path95.sep}`) && !path95.isAbsolute(relative21);
+  const relative22 = path95.relative(parent, candidate);
+  return relative22.length > 0 && relative22 !== ".." && !relative22.startsWith(`..${path95.sep}`) && !path95.isAbsolute(relative22);
 }
 function sameFileSnapshot3(left, right) {
   return (left.dev !== 0n || left.ino !== 0n) && (right.dev !== 0n || right.ino !== 0n) && left.dev === right.dev && left.ino === right.ino && left.size === right.size && left.mtimeNs === right.mtimeNs && left.ctimeNs === right.ctimeNs;
@@ -60907,7 +61392,7 @@ import {
 import * as path99 from "path";
 
 // src/services/skill-optimizer/store.ts
-import { createHash as createHash21, randomUUID as randomUUID12 } from "crypto";
+import { createHash as createHash22, randomUUID as randomUUID12 } from "crypto";
 import {
   closeSync as closeSync16,
   existsSync as existsSync55,
@@ -60932,10 +61417,10 @@ function canonicalJson3(value) {
   return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson3(v)}`).join(",")}}`;
 }
 function computeStateHash(value) {
-  return createHash21("sha256").update(canonicalJson3(value), "utf8").digest("hex");
+  return createHash22("sha256").update(canonicalJson3(value), "utf8").digest("hex");
 }
 function computeContentHash2(content) {
-  return createHash21("sha256").update(content, "utf8").digest("hex");
+  return createHash22("sha256").update(content, "utf8").digest("hex");
 }
 function computeEventHash(event) {
   return computeStateHash({
@@ -62287,7 +62772,7 @@ async function runValidationWithTransientRetry(input, candidateContent, baseline
       if (!input.dispatcher) {
         throw new Error("no evaluation dispatcher available (cannot run validation)");
       }
-      const { createModelEvaluationExecutor: createModelEvaluationExecutor2 } = await import("./runner-jj32v8bk.js");
+      const { createModelEvaluationExecutor: createModelEvaluationExecutor2 } = await import("./runner-pqsf809k.js");
       const executor = createModelEvaluationExecutor2(input.dispatcher, input.sessionId);
       const result = await _internals91.evaluateCandidateV1({
         projectRoot: input.directory,
@@ -64058,6 +64543,7 @@ Writes a retrospective evidence bundle for a completed phase.
 \`\`\`json
 {
   "phase": 1,
+  "verdict": "pass",
   "summary": "Phase summary here",
   "task_count": 3,
   "task_complexity": "simple",
@@ -64076,6 +64562,8 @@ Writes a retrospective evidence bundle for a completed phase.
 - \`task_id\`: string (defaults to \`retro-{phase}\`)
 - \`metadata\`: Record<string, unknown>
 
+### verdict values: pass | fail
+
 ### task_complexity values: trivial | simple | moderate | complex`;
   }
   let parsedArgs;
@@ -64190,7 +64678,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-hfzcztv6.js");
+    const { buildHelpText } = await import("./index-9080b3de.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -64199,7 +64687,7 @@ async function handleHelpCommand(ctx) {
     return _internals94.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals94.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-hfzcztv6.js");
+  const { buildHelpText: fullHelp } = await import("./index-9080b3de.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -64376,7 +64864,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-kspf83x5.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-r50fery8.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -64386,7 +64874,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-kspf83x5.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-r50fery8.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -64396,7 +64884,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-qg4sq6gr.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-p69eys6d.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -68226,8 +68714,8 @@ function dcEvaluateRecursiveDeleteTargets(input) {
     }
     const filesystemTarget = target.replace(/[\\/]+/g, path109.sep);
     const resolved = path109.resolve(input.cwd, filesystemTarget);
-    const relative23 = path109.relative(path109.resolve(input.cwd), resolved);
-    if (relative23 === "" || relative23 === ".." || relative23.startsWith(`..${path109.sep}`) || path109.isAbsolute(relative23)) {
+    const relative24 = path109.relative(path109.resolve(input.cwd), resolved);
+    if (relative24 === "" || relative24 === ".." || relative24.startsWith(`..${path109.sep}`) || path109.isAbsolute(relative24)) {
       return {
         allowed: false,
         code: "DESTRUCTIVE_TARGET_OUTSIDE_WORKSPACE",
@@ -68242,7 +68730,7 @@ function dcEvaluateRecursiveDeleteTargets(input) {
         reason: `BLOCKED: Recursive delete target "${safeTarget}" is not an allowlisted build/cache artifact.`
       };
     }
-    const normalizedRelative = relative23.replace(/\\/g, "/");
+    const normalizedRelative = relative24.replace(/\\/g, "/");
     const isBare = components.length === 1;
     if (!isBare) {
       hasNested = true;
@@ -71390,7 +71878,7 @@ function getDisplayBudget() {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-zc3skxde.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-2xn238xt.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)
@@ -71622,14 +72110,23 @@ function serializeStandardWorktreeDispatches(sessionID, message) {
     pushAdvisory(session2, `${message} Serialization tracking is at capacity (256 sessions active); ` + `continuing in normal parallel mode.`);
     return;
   }
+  standardWorktreeDegradationReasonBySession.set(sessionID, {
+    reason: message,
+    at: Date.now()
+  });
   const session = ensureAgentSession(sessionID);
   session.maxConcurrencyOverride = 1;
   pushAdvisory(session, `${message} Serializing standard coder dispatches for this session.`);
 }
+var standardWorktreeDegradationReasonBySession = new Map;
+function getStandardWorktreeDegradationReason(sessionID) {
+  return standardWorktreeDegradationReasonBySession.get(sessionID);
+}
 function resetStandardWorktreeIsolationState() {
   standardWorktreeByCallID.clear();
   standardWorktreeSerializationSessions.clear();
   serializationStateBySessionID.clear();
+  standardWorktreeDegradationReasonBySession.clear();
   awaitingMergeByCallID.clear();
   standardWorktreeMergeQueue = Promise.resolve();
   standardWorktreeLaneIndexBySession.clear();
@@ -71639,6 +72136,7 @@ function releaseStandardWorktreeSerialization(sessionID) {
     return false;
   standardWorktreeSerializationSessions.delete(sessionID);
   serializationStateBySessionID.delete(sessionID);
+  standardWorktreeDegradationReasonBySession.delete(sessionID);
   const session = ensureAgentSession(sessionID);
   session.maxConcurrencyOverride = undefined;
   pushAdvisory(session, `WORKTREE_SERIALIZATION_RELEASED: ${sessionID} regains parallel dispatch eligibility (release-after-dispatches or TTL).`);
@@ -71665,6 +72163,7 @@ function rememberStandardWorktreeSerializationSession(sessionID) {
       if (!hasInFlightStandardWorktreeDispatch(key)) {
         standardWorktreeSerializationSessions.delete(key);
         serializationStateBySessionID.delete(key);
+        standardWorktreeDegradationReasonBySession.delete(key);
         evicted = true;
         break;
       }
@@ -71795,7 +72294,7 @@ function isLaneOwnedByCurrentSession(branchName, expectedSessionId) {
   return extracted === expectedSessionId;
 }
 async function inspectStandardWorktreeCollisionOwnership(identity) {
-  const collisionOwnership = await import("./worktree-collision-ownership-rfyyjjct.js");
+  const collisionOwnership = await import("./worktree-collision-ownership-2jtg2my1.js");
   return collisionOwnership.inspectStandardWorktreeCollisionOwnership(identity);
 }
 async function precreateStandardWorktreeSession(args) {
@@ -71943,7 +72442,7 @@ async function precreateStandardWorktreeSession(args) {
   const laneProfile = computeLaneRuntimeProfile(worktreeConfig.runtime_isolation, laneIndex, provisionResult.worktreePath);
   if (laneProfile) {
     try {
-      const { writeLaneProfileToDiskReal } = await import("./core-qkh9me8x.js");
+      const { writeLaneProfileToDiskReal } = await import("./core-c2zrd384.js");
       await writeLaneProfileToDiskReal(provisionResult.worktreePath, laneProfile.laneIndex, laneProfile.envOverrides);
     } catch {}
   }
@@ -71967,7 +72466,9 @@ async function precreateStandardWorktreeSession(args) {
     await _internals96.removeWorktree(provisionResult.worktreePath, args.directory, {
       force: true,
       worktreeDir: worktreeConfig.worktree_dir
-    }).catch(() => {});
+    }).catch((cleanupError) => {
+      log(`[worktree-isolation] session-create failure cleanup could not remove lane ${provisionResult.worktreePath}: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`);
+    });
     _internals96.removeWorktreeProvisioningOwner(args.directory, args.callID);
     const createError = createResult.error;
     const detail = typeof createError === "string" ? createError : JSON.stringify(createError ?? "missing session id");
@@ -72037,7 +72538,7 @@ async function preserveBackgroundWorktreeOwnershipForCallId(callID) {
   }
   const session = Buffer.from(dispatch.handle.sessionId, "utf8").toString("base64url");
   const lane = Buffer.from(dispatch.handle.id, "utf8").toString("base64url");
-  const callDigest = createHash22("sha256").update(callID).digest("hex").slice(0, 12);
+  const callDigest = createHash23("sha256").update(callID).digest("hex").slice(0, 12);
   const tag = `swarm-preserved-owner/${session}/${lane}/${callDigest}`;
   let tagProc;
   try {
@@ -72599,7 +73100,7 @@ async function finishStandardWorktreeDispatch(directory, dispatch, config, callI
       }
       clearWorktreeMergeStatus(statusKey);
       try {
-        const { removeLaneProfileFromDiskReal } = await import("./core-qkh9me8x.js");
+        const { removeLaneProfileFromDiskReal } = await import("./core-c2zrd384.js");
         await removeLaneProfileFromDiskReal(dispatch.handle.worktreePath, dispatch.laneIndex);
       } catch {}
       const state = serializationStateBySessionID.get(dispatch.parentSessionID);
@@ -72745,4 +73246,4 @@ var _internals96 = {
   resolveGitExecutable
 };
 
-export { parseLeanLaneIndex, computeLaneRuntimeProfile, MAX_TRACKED_STANDARD_WORKTREE_CALLS, awaitingMergeByCallID, standardWorktreeByCallID, standardWorktreeSerializationSessions, resetStandardWorktreeIsolationState, checkStandardWorktreeSerializationRelease, sanitizeWorktreeTaskId, preProvisionCollisionCheck, isLaneOwnedByCurrentSession, precreateStandardWorktreeSession, preserveBackgroundWorktreeOwnershipForCallId, preserveDirtyWorktreeForCallId, preserveDirtyWorktreeAtPath, cleanupStandardWorktreeForCallId, abortStandardWorktreeDispatch, finishStandardWorktreeDispatch, readLaneEnvFileFromDisk, _internals96 as _internals, dcNormalizeCommand, dcUnwrapWrappers, dcSplitSegments, dcExtractRecursiveRmTargets, dcEvaluateRecursiveDeleteTargets, dcCheckJunctionCreation, dcExtractWindowsCmdTargets, dcExtractPowerShellTargets, normalizeSwarmCommandInput, canonicalCommandKey, formatCommandNotFound, executeSwarmCommand, SWARM_COMMAND_TOOL_COMMANDS, SWARM_COMMAND_TOOL_ALLOWLIST, HUMAN_ONLY_SWARM_COMMANDS, classifySwarmCommandToolUse, classifySwarmCommandChatFallbackUse, detectPosixWrites, detectWindowsWrites, resolveWriteTargets, handleAcknowledgeSpecDriftCommand, handleAgentsCommand, handleAnalyzeCommand, handleArchiveCommand, handleAutoProceedCommand, handleBenchmarkCommand, handleBrainstormCommand, handleCheckpointCommand, handleCiSimulateCommand, handleClarifyCommand, createCuratorLLMDelegate, _internals23 as _internals1, normalizeRecommendationEntryIdToken, parseKnowledgeRecommendations, parseKnowledgeRecommendationsWithDiagnostics, parseStructuredCuratorBlocks, readCuratorSummary, writeCuratorSummary, appendCuratorRecommendation, mergeCuratorPhaseSummary, filterPhaseEvents, checkPhaseCompliance, runCuratorInit, runCuratorPhase, applyCuratorKnowledgeUpdates, isHiveEligible, countDistinctProjects, checkHivePromotions, _internals27 as _internals2, createHivePromoterHook, promoteToHive, promoteFromSwarm, handleCloseCommand, handleCodebaseReviewCommand, handleConcurrencyCommand, handleConfigCommand, handleConsolidateCommand, handleCostsCommand, handleCouncilCommand, handleCurateCommand, handleDarkMatterCommand, handleDeepDiveCommand, handleDeepResearchCommand, getPluginConfigDir, getPluginCachePaths, getPluginLockFilePaths, VERSION_PINNED_LEAF, discoverVersionPinnedCachePaths, readCachePackageVersion, handleDiagnoseCommand, handleDoctorCommand, handleEvidenceCommand, handleEvidenceSummaryCommand, handleExportCommand, handleFullAutoCommand, handleGateAuditCommand, handleGateStatsCommand, handleHandoffCommand, handleHistoryCommand, handleKnowledgeQuarantineCommand, handleKnowledgeRestoreCommand, handleKnowledgeMigrateCommand, handleKnowledgeListCommand, handleKnowledgeUnactionableCommand, handleKnowledgeRetryHardeningCommand, handleLearningCommand, handleLinkCommand, safeRealpathSync, handleMemoryCommand, handleMemoryStatusCommand, handleMemoryValueLogCommand, handleMemoryMigrateCommand, handleMemoryImportCommand, handleMemoryExportCommand, handlePlanCommand, handlePreflightCommand, handlePromoteCommand, handleQaGatesCommand, handleRecoverCommand, handleResetCommand, handleResetSessionCommand, handleRetrieveCommand, handleReviewCommand, handleRollbackCommand, handleSddStatusCommand, handleSddValidateCommand, handleSddProjectCommand, handleSddCommand, handleSimulateCommand, handleSpecifyCommand, handleStatusCommand, handleSyncPlanCommand, handleTurboCommand, handleUnlinkCommand, handleWriteRetroCommand, handleHelpCommand, COMMAND_REGISTRY, VALID_COMMANDS, _internals94 as _internals3, resolveCommand };
+export { parseLeanLaneIndex, computeLaneRuntimeProfile, MAX_TRACKED_STANDARD_WORKTREE_CALLS, awaitingMergeByCallID, standardWorktreeByCallID, standardWorktreeSerializationSessions, getStandardWorktreeDegradationReason, resetStandardWorktreeIsolationState, checkStandardWorktreeSerializationRelease, sanitizeWorktreeTaskId, preProvisionCollisionCheck, isLaneOwnedByCurrentSession, precreateStandardWorktreeSession, preserveBackgroundWorktreeOwnershipForCallId, preserveDirtyWorktreeForCallId, preserveDirtyWorktreeAtPath, cleanupStandardWorktreeForCallId, abortStandardWorktreeDispatch, finishStandardWorktreeDispatch, readLaneEnvFileFromDisk, _internals96 as _internals, dcNormalizeCommand, dcUnwrapWrappers, dcSplitSegments, dcExtractRecursiveRmTargets, dcEvaluateRecursiveDeleteTargets, dcCheckJunctionCreation, dcExtractWindowsCmdTargets, dcExtractPowerShellTargets, normalizeSwarmCommandInput, canonicalCommandKey, formatCommandNotFound, executeSwarmCommand, SWARM_COMMAND_TOOL_COMMANDS, SWARM_COMMAND_TOOL_ALLOWLIST, HUMAN_ONLY_SWARM_COMMANDS, classifySwarmCommandToolUse, classifySwarmCommandChatFallbackUse, detectPosixWrites, detectWindowsWrites, resolveWriteTargets, handleAcknowledgeSpecDriftCommand, handleAgentsCommand, handleAnalyzeCommand, handleArchiveCommand, handleAutoProceedCommand, handleBenchmarkCommand, handleBrainstormCommand, handleCheckpointCommand, handleCiSimulateCommand, handleClarifyCommand, createCuratorLLMDelegate, _internals23 as _internals1, normalizeRecommendationEntryIdToken, parseKnowledgeRecommendations, parseKnowledgeRecommendationsWithDiagnostics, parseStructuredCuratorBlocks, readCuratorSummary, writeCuratorSummary, appendCuratorRecommendation, mergeCuratorPhaseSummary, filterPhaseEvents, checkPhaseCompliance, runCuratorInit, runCuratorPhase, applyCuratorKnowledgeUpdates, isHiveEligible, countDistinctProjects, checkHivePromotions, _internals27 as _internals2, createHivePromoterHook, promoteToHive, promoteFromSwarm, handleCloseCommand, handleCodebaseReviewCommand, handleConcurrencyCommand, handleConfigCommand, handleConsolidateCommand, handleCostsCommand, handleCouncilCommand, handleCurateCommand, handleDarkMatterCommand, handleDeepDiveCommand, handleDeepResearchCommand, getPluginConfigDir, getPluginCachePaths, getPluginLockFilePaths, VERSION_PINNED_LEAF, discoverVersionPinnedCachePaths, readCachePackageVersion, handleDiagnoseCommand, handleDoctorCommand, handleEvidenceCommand, handleEvidenceSummaryCommand, handleExportCommand, handleFullAutoCommand, handleGateAuditCommand, handleGateStatsCommand, handleHandoffCommand, handleHistoryCommand, handleKnowledgeQuarantineCommand, handleKnowledgeRestoreCommand, handleKnowledgeMigrateCommand, handleKnowledgeListCommand, handleKnowledgeUnactionableCommand, handleKnowledgeRetryHardeningCommand, handleLearningCommand, handleLinkCommand, safeRealpathSync, handleMemoryCommand, handleMemoryStatusCommand, handleMemoryValueLogCommand, handleMemoryMigrateCommand, handleMemoryImportCommand, handleMemoryExportCommand, handlePlanCommand, handlePreflightCommand, handlePromoteCommand, handleQaGatesCommand, handleRecoverCommand, handleResetCommand, handleResetSessionCommand, handleRetrieveCommand, handleReviewCommand, handleRollbackCommand, handleSddStatusCommand, handleSddValidateCommand, handleSddProjectCommand, handleSddCommand, handleSimulateCommand, handleSpecifyCommand, handleStatusCommand, handleSyncPlanCommand, handleTurboCommand, handleUnlinkCommand, handleWriteRetroCommand, handleHelpCommand, COMMAND_REGISTRY, VALID_COMMANDS, _internals94 as _internals3, resolveCommand };