opencode-swarm 7.148.4 → 7.149.0

package/dist/cli/{index-hj1xd3pg.js → index-bcfcekx9.js}

@@ -6,17 +6,17 @@ import {
   resolveExecutableFromPath,
   runEvaluation,
   runExternalTool
-} from "./index-j382eh60.js";
+} from "./index-vfv4vnnc.js";
 import {
   normalizeToolNameLowerCase,
   stableCanonicalStringify
-} from "./index-b94487xm.js";
+} from "./index-wsar7d91.js";
 import {
   detectStraySwarmDirs,
   readDoctorArtifact,
   removeStraySwarmDir,
   runConfigDoctor
-} from "./index-1vbmra32.js";
+} from "./index-ccyve4pb.js";
 import {
   MAX_TRANSIENT_RETRIES,
   archiveEvidence,
@@ -62,7 +62,7 @@ import {
   updateTaskStatus,
   validateProjectRoot,
   validateSymlinkBoundary
-} from "./index-b1c83zf9.js";
+} from "./index-kb1p6dpx.js";
 import {
   EvaluationTaskV1Schema,
   GateAuditManifestV1Schema,
@@ -79,7 +79,7 @@ import {
   saveGateAuditResult,
   savePromotionDecision,
   saveTaskSetSnapshot
-} from "./index-8djgxw2w.js";
+} from "./index-z6471b7r.js";
 import {
   loadDatabaseCtor
 } from "./index-134d35c1.js";
@@ -105,12 +105,12 @@ import {
 } from "./index-y8552snf.js";
 import {
   readRecentEscalations
-} from "./index-ye7kpzrk.js";
+} from "./index-ef0wracg.js";
 import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-w00hn0dd.js";
+} from "./index-s7t2c9jd.js";
 import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
@@ -153,13 +153,13 @@ import {
   resolveRemoteRefsContainingHead,
   resolveRemoteRefsContainingHeadAsync,
   switchPrFeedbackTrackingCandidateAsync
-} from "./index-g8wwj0sz.js";
+} from "./index-vnn7qq8c.js";
 import {
   buildCorrelationId,
   listActive,
   subscribe,
   unsubscribe
-} from "./index-qwmrt51t.js";
+} from "./index-wbz365gn.js";
 import {
   BUNDLED_PROJECT_SKILL_ROOT,
   DEFAULT_SKILL_MIN_CONFIDENCE,
@@ -180,7 +180,7 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-bccfz7br.js";
+} from "./index-42habrdv.js";
 import {
   appendUnactionable,
   quarantineEntry,
@@ -191,11 +191,11 @@ import {
   validateActionableFields,
   validateLesson,
   validateSkillPath
-} from "./index-gswx08pr.js";
+} from "./index-8hkxm9mh.js";
 import {
   authorizeCuration,
   buildConfigFingerprintInput
-} from "./index-nq4tkfpc.js";
+} from "./index-bmaz2yy4.js";
 import {
   cohortConfigFingerprint
 } from "./index-rtry5xyf.js";
@@ -219,7 +219,7 @@ import {
   scanBackgroundCoderReservationsForAdmission,
   scanDelegationsForRecovery,
   sweepStaleDelegations
-} from "./index-t25evmna.js";
+} from "./index-n6jykega.js";
 import {
   WORKTREE_LIFECYCLE_LOCK_FILE,
   recordWorktreeProvisioningOwner,
@@ -252,18 +252,18 @@ import {
   transitionTaskWorkflowEvidence,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-622phhp5.js";
+} from "./index-5q5ws00e.js";
 import {
   provisionWorktree,
   removeWorktree
-} from "./index-8kzrgjt6.js";
+} from "./index-mza55jmc.js";
 import {
   MAX_PENDING_SCOPE_BINDINGS,
   canonicalWorkspaceIdentity,
   clearAllScopes,
   clearScopeBindingFromDisk,
   clearScopeBindings
-} from "./index-6kw1a3bk.js";
+} from "./index-79pwr8hc.js";
 import {
   appendLedgerEvent,
   computePlanHash,
@@ -278,7 +278,17 @@ import {
   readPlanEpochIdentity,
   replayFromLedgerWithStatus,
   takeSnapshotEvent
-} from "./index-9m8jy3av.js";
+} from "./index-6thxr1q7.js";
+import {
+  CORE_EVENT_LOCKED,
+  appendCoreEventSync,
+  appendCoreEventsSync,
+  finalizeCoreEventsForClose,
+  getCoreEventCoverage,
+  hasSpecDriftAuditEvent,
+  hasTaskRepairAuditEvent,
+  readCoreEvents
+} from "./index-c83bztkp.js";
 import {
   isPathWithinDeclaredScope,
   sanitizeDiagnosticText
@@ -330,7 +340,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-sxtz2d26.js";
+} from "./index-01q7mb83.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals as _internals2,
@@ -344,20 +354,32 @@ import {
   recordKnowledgeEvent,
   recordPhaseCloseIntent,
   resolveKnowledgeEventsPath
-} from "./index-skgeytf6.js";
+} from "./index-pgfn8h50.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-0045n7qe.js";
+} from "./index-xdp0bx28.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-gprxjmm7.js";
+import {
+  readSwarmFileAsync,
+  safeHook,
+  validateSwarmPath
+} from "./index-4cgee5vh.js";
+import {
+  bunSpawn,
+  bunSpawnSync,
+  bunWrite,
+  mergeEnvForChild,
+  sleep
+} from "./index-r3mvsbtq.js";
 import {
   PlanSchema,
   exports_loader,
   init_loader,
   loadPluginConfig,
   loadPluginConfigWithMeta
-} from "./index-7rerkeg8.js";
+} from "./index-q8e2yd98.js";
 import {
   DEFAULT_SKILL_OPT_CONFIG,
   FALLBACK_MODELS_MAX,
@@ -371,7 +393,7 @@ import {
   package_default,
   resolveAutoReviewConfig,
   stripKnownSwarmPrefix
-} from "./index-yq89bgnz.js";
+} from "./index-41n0thtd.js";
 import {
   AGENT_TOOL_MAP,
   ALL_AGENT_NAMES,
@@ -396,18 +418,6 @@ import {
   getDeferredWarnings,
   init_warning_buffer
 } from "./index-4rhhvd1a.js";
-import {
-  readSwarmFileAsync,
-  safeHook,
-  validateSwarmPath
-} from "./index-4cgee5vh.js";
-import {
-  bunSpawn,
-  bunSpawnSync,
-  bunWrite,
-  mergeEnvForChild,
-  sleep
-} from "./index-r3mvsbtq.js";
 import {
   resolveHiveDataDir,
   resolveHiveEventsPath,
@@ -423,10 +433,10 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-k1s8gxjh.js";
+} from "./index-c1h0rdkr.js";
 import {
   atomicWriteFile
-} from "./index-vhefvcta.js";
+} from "./index-cfvbd3dg.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -438,7 +448,7 @@ import {
   atomicWriteSwarmFileSync,
   matchTempGrammar,
   parseTargetBasename
-} from "./index-kg4knw6r.js";
+} from "./index-ame8ek9g.js";
 import {
   assertProjectRoot,
   hasExplicitProjectBoundary,
@@ -446,12 +456,12 @@ import {
   listActiveLocks,
   tryAcquireLock,
   withEvidenceLock
-} from "./index-vrp2zva8.js";
+} from "./index-a90c1gtn.js";
 import {
   emit,
   getLastHeartbeat,
   telemetry
-} from "./index-ghbkknjz.js";
+} from "./index-wj0gnab0.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -1991,9 +2001,9 @@ var storedInputArgs = new Map;
 
 // src/hooks/skill-propagation-gate.ts
 init_schema();
-init_logger();
 import * as fs4 from "fs";
 import * as path6 from "path";
+init_logger();
 
 // src/hooks/skill-scoring.ts
 import * as fs3 from "fs";
@@ -4382,14 +4392,8 @@ function extractSkillsFieldFromPrompt(prompt) {
   return "";
 }
 function writeWarnEvent(directory, record) {
-  const filePath = path6.join(directory, ".swarm", "events.jsonl");
   try {
-    const dir = path6.dirname(filePath);
-    if (!_internals10.existsSync(dir)) {
-      _internals10.mkdirSync(dir, { recursive: true });
-    }
-    _internals10.appendFileSync(filePath, `${JSON.stringify(record)}
-`, "utf-8");
+    appendCoreEventSync(directory, record);
   } catch (err) {
     warn(`[skill-propagation-gate] failed to write warning event: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -5401,8 +5405,7 @@ init_logger();
 import { spawnSync } from "child_process";
 import { randomUUID as randomUUID2 } from "crypto";
 import { existsSync as existsSync6 } from "fs";
-import { appendFile as appendFile2, mkdir as mkdir3, readdir as readdir2 } from "fs/promises";
-import { dirname as dirname7 } from "path";
+import { readdir as readdir2 } from "fs/promises";
 init_warning_buffer();
 init_git_executable();
 init_logger();
@@ -5440,32 +5443,17 @@ async function writeWal(filePath, wal) {
   await writeWorkflowWalFile("coder-settlement", filePath, wal);
 }
 async function appendSettlementEvent(directory, action, wal, extra) {
-  const line = `${JSON.stringify({
-    type: "coder_settlement",
-    action,
-    timestamp: new Date().toISOString(),
-    taskId: wal.taskId,
-    transitionId: wal.transitionId,
-    actor: wal.actor,
-    ...extra ?? {}
-  })}
-`;
   try {
-    const eventsPath = validateSwarmPath(directory, "events.jsonl");
-    await mkdir3(dirname7(eventsPath), { recursive: true });
-    await appendFile2(eventsPath, line, "utf-8");
+    appendCoreEventSync(directory, {
+      type: "coder_settlement",
+      action,
+      timestamp: new Date().toISOString(),
+      taskId: wal.taskId,
+      transitionId: wal.transitionId,
+      actor: wal.actor,
+      ...extra ?? {}
+    });
   } catch (error2) {
-    const code = error2.code;
-    if (code === "EBUSY" || code === "EPERM") {
-      try {
-        const eventsPath = validateSwarmPath(directory, "events.jsonl");
-        await appendFile2(eventsPath, line, "utf-8");
-        return;
-      } catch (retryError) {
-        criticalWarn(`[coder-settlement] lifecycle event write failed after retry (${action} ${wal.taskId}): ${retryError instanceof Error ? retryError.message : String(retryError)}`);
-        return;
-      }
-    }
     criticalWarn(`[coder-settlement] lifecycle event write failed (${action} ${wal.taskId}): ${error2 instanceof Error ? error2.message : String(error2)}`);
   }
 }
@@ -5608,7 +5596,7 @@ async function cleanupRecoveredWorktree(directory, descriptor) {
     awaitingMergeByCallID,
     cleanupStandardWorktreeForCallId,
     standardWorktreeByCallID
-  } = await import("./worktree-isolation-sbsdx1yj.js");
+  } = await import("./worktree-isolation-pbr4d5m9.js");
   standardWorktreeByCallID.delete(descriptor.callID);
   if (hasResidue)
     awaitingMergeByCallID.set(descriptor.callID, {
@@ -5710,7 +5698,7 @@ async function recoverCoderSettlement(directory, taskId) {
           awaitingMergeByCallID,
           finishStandardWorktreeDispatch,
           standardWorktreeByCallID
-        } = await import("./worktree-isolation-sbsdx1yj.js");
+        } = await import("./worktree-isolation-pbr4d5m9.js");
         const descriptor = wal.worktree;
         const reconstructedDispatch = {
           callID: descriptor.callID,
@@ -5980,17 +5968,15 @@ var _internals13 = {
 };
 
 // src/workflow/task-repair.ts
-import { appendFile as appendFile3, readFile as readFile4 } from "fs/promises";
 async function recoverPreparedTaskRepairWithPlanLock(directory, taskId, actor, currentPlan) {
   const walPath2 = validateSwarmPath(directory, `task-repairs/${taskId}.json`);
-  const eventsPath = validateSwarmPath(directory, "events.jsonl");
   const wal = await readWal2(walPath2, taskId);
   if (wal === null)
     return null;
   if (wal.state === "ABORTED")
     return null;
   if (wal.state === "COMMITTED") {
-    await ensureAuditEvent(directory, eventsPath, wal);
+    await ensureAuditEvent(directory, wal);
     return null;
   }
   const task = currentPlan.phases.flatMap((phase) => phase.tasks).find((candidate) => candidate.id === taskId);
@@ -6030,57 +6016,15 @@ async function recoverPreparedTaskRepairUnderPlanLock(directory, taskId, actor,
 async function readWal2(filePath, taskId) {
   return readWorkflowWalFile("task-repair", filePath, taskId);
 }
-async function readText(filePath) {
-  try {
-    return await readFile4(filePath, "utf-8");
-  } catch (error2) {
-    if (error2.code === "ENOENT")
-      return null;
-    throw error2;
-  }
-}
 async function writeWal2(filePath, wal) {
   await writeWorkflowWalFile("task-repair", filePath, wal);
 }
-function parseAuditEventLine(line) {
-  try {
-    return JSON.parse(line);
-  } catch {
-    return null;
-  }
-}
-function findRepairEvent(content, taskId, transitionId) {
-  if (!content)
-    return false;
-  const transitionNeedle = JSON.stringify(transitionId).slice(1, -1);
-  const taskNeedle = JSON.stringify(taskId).slice(1, -1);
-  if (!content.includes(transitionNeedle) || !content.includes(taskNeedle))
-    return false;
-  for (const line of content.split(`
-`)) {
-    if (!line.trim())
-      continue;
-    const event = parseAuditEventLine(line);
-    if (!event)
-      continue;
-    if (event.type === "task_workflow_repaired" && event.taskId === taskId && event.transitionId === transitionId) {
-      return true;
-    }
-  }
-  return false;
-}
-async function ensureAuditEvent(directory, eventsPath, wal) {
-  if (findRepairEvent(await readText(eventsPath), wal.taskId, wal.transitionId))
+async function ensureAuditEvent(directory, wal) {
+  if (hasTaskRepairAuditEvent(directory, wal.taskId, wal.transitionId)) {
     return;
-  const lock = await tryAcquireLock(directory, "events.jsonl", "task-repair-audit", `task-repair:${wal.taskId}:${wal.transitionId}`);
-  if (!lock.acquired) {
-    throw new Error("TASK_REPAIR_AUDIT_LOCKED");
   }
   try {
-    const existing = await readText(eventsPath);
-    if (findRepairEvent(existing, wal.taskId, wal.transitionId))
-      return;
-    await appendFile3(eventsPath, `${JSON.stringify({
+    appendCoreEventSync(directory, {
       type: "task_workflow_repaired",
       timestamp: new Date().toISOString(),
       taskId: wal.taskId,
@@ -6092,15 +6036,15 @@ async function ensureAuditEvent(directory, eventsPath, wal) {
       oldWorkflowState: wal.oldWorkflowState,
       newWorkflowState: wal.newWorkflowState,
       generation: wal.generation
-    })}
-`, "utf-8");
-    const verified = await readText(eventsPath);
-    if (!findRepairEvent(verified, wal.taskId, wal.transitionId)) {
-      throw new Error("TASK_REPAIR_AUDIT_UNVERIFIED");
+    }, { dedupeOnAuthorityKey: true });
+  } catch (error2) {
+    if (error2 instanceof Error && error2.message === CORE_EVENT_LOCKED) {
+      throw new Error("TASK_REPAIR_AUDIT_LOCKED");
     }
-  } finally {
-    if (lock.lock._release)
-      await lock.lock._release().catch(() => {});
+    throw error2;
+  }
+  if (!hasTaskRepairAuditEvent(directory, wal.taskId, wal.transitionId)) {
+    throw new Error("TASK_REPAIR_AUDIT_UNVERIFIED");
   }
 }
 function workflowMatchesCommittedRepair(evidence, wal) {
@@ -6109,7 +6053,6 @@ function workflowMatchesCommittedRepair(evidence, wal) {
 }
 async function repairTaskWorkflowUnderPlanLock(options) {
   const walPath2 = validateSwarmPath(options.directory, `task-repairs/${options.taskId}.json`);
-  const eventsPath = validateSwarmPath(options.directory, "events.jsonl");
   return withTaskEvidenceTransaction(options.directory, options.taskId, options.actor, async (transaction) => {
     await assertNoUnsettledCoderDispatch(options.directory, options.taskId);
     let evidence = transaction.read();
@@ -6127,7 +6070,7 @@ async function repairTaskWorkflowUnderPlanLock(options) {
       throw new Error(`TASK_REPAIR_IDEMPOTENCY_CONFLICT: transition ${options.transitionId} was prepared with different reason or workflow CAS fields`);
     }
     if (existingWal?.state === "COMMITTED" && options.currentPlanStatus === "in_progress" && workflowMatchesCommittedRepair(evidence, existingWal)) {
-      await ensureAuditEvent(options.directory, eventsPath, existingWal);
+      await ensureAuditEvent(options.directory, existingWal);
       return {
         plan: options.currentPlan,
         alreadyApplied: true,
@@ -6180,7 +6123,7 @@ async function repairTaskWorkflowUnderPlanLock(options) {
       }
     }
     await writeWal2(walPath2, { ...wal, state: "COMMITTED" });
-    await ensureAuditEvent(options.directory, eventsPath, wal);
+    await ensureAuditEvent(options.directory, wal);
     return {
       plan,
       alreadyApplied: false,
@@ -9022,7 +8965,7 @@ async function settlePresumedStalePrWorkflowLanes(directory, sessionID) {
     });
   } catch {}
   try {
-    await fsp2.appendFile(validateSwarmPath(directory, "events.jsonl"), `${JSON.stringify({
+    appendCoreEventSync(directory, {
       type: "pr_workflow_lanes_presumed_stale",
       timestamp: isoNow(),
       sessionID,
@@ -9031,8 +8974,7 @@ async function settlePresumedStalePrWorkflowLanes(directory, sessionID) {
       probeStatus: probe.degradedReason ?? "ok",
       probedAliveLanes: probedAliveLaneIds.slice(0, MAX_DISCLOSED_LANE_IDS),
       disclosure
-    })}
-`, "utf-8");
+    });
   } catch {}
   return {
     openLaneIds,
@@ -9123,9 +9065,7 @@ async function abortPrWorkflow(directory, sessionID, options = { kind: "recovery
     reason: sanitizedReason
   };
   try {
-    const eventsPath = validateSwarmPath(directory, "events.jsonl");
-    await fsp2.appendFile(eventsPath, `${JSON.stringify(abortEvent)}
-`, "utf-8");
+    appendCoreEventSync(directory, abortEvent);
   } catch {}
   const casEscape = recovery.salvaged && !recovery.revisionSalvageable;
   await _test_exports2.beforeAbortClear?.();
@@ -9133,7 +9073,7 @@ async function abortPrWorkflow(directory, sessionID, options = { kind: "recovery
     await clearPrWorkflowGateState(directory, sessionID, casEscape ? undefined : state.revision, { allowSalvagedRead: recovery.salvaged });
   } catch (error2) {
     try {
-      await fsp2.appendFile(validateSwarmPath(directory, "events.jsonl"), `${JSON.stringify({
+      appendCoreEventSync(directory, {
         type: "pr_workflow_abort_not_completed",
         timestamp: isoNow(),
         sessionID: state.sessionID,
@@ -9146,8 +9086,7 @@ async function abortPrWorkflow(directory, sessionID, options = { kind: "recovery
         } : {},
         failure: (error2 instanceof Error ? error2.message : String(error2)).slice(0, MAX_BASE_COVERAGE_DIAGNOSTIC_CHARS),
         disclosure: "RETRACTION: the pr_workflow_aborted record for this session did NOT complete \u2014 " + "the clear failed and the gate state may still be active. Revalidate the current " + "session state before retrying the abort." + (overridesProbeRetention ? " The probe-retention override finalized no record: it runs only after the " + "clear succeeds, and this clear failed. Other lanes in the same settlement " + "batch may already have been finalized as presumed-stale, and a concurrent abort for this session may have finalized more \u2014 revalidate the lane records rather than assuming they are untouched." : "")
-      })}
-`, "utf-8");
+      });
     } catch {}
     throw error2;
   }
@@ -12116,8 +12055,8 @@ ${USAGE}`;
 
 // src/services/spec-drift-recovery.ts
 import { createHash as createHash6 } from "crypto";
-import { appendFile as appendFile5, mkdir as mkdir5, readFile as readFile6, unlink as unlink2 } from "fs/promises";
-import { dirname as dirname10 } from "path";
+import { mkdir as mkdir4, readFile as readFile5, unlink as unlink2 } from "fs/promises";
+import { dirname as dirname9 } from "path";
 var SPEC_DRIFT_RECOVERY_AGENT = "spec-drift-recovery";
 var _internals16 = {
   appendEvent,
@@ -12177,7 +12116,7 @@ function parseWal(raw) {
 }
 async function readFileText(filePath) {
   try {
-    return await readFile6(filePath, "utf-8");
+    return await readFile5(filePath, "utf-8");
   } catch (error2) {
     if (error2?.code === "ENOENT") {
       return null;
@@ -12197,7 +12136,7 @@ async function unlinkIfExists(filePath) {
   }
 }
 async function writeWal4(walPath2, wal) {
-  await mkdir5(dirname10(walPath2), { recursive: true });
+  await mkdir4(dirname9(walPath2), { recursive: true });
   await atomicWriteFile(walPath2, `${JSON.stringify(wal, null, 2)}
 `);
 }
@@ -12243,37 +12182,18 @@ async function ensureSnapshotEvent(directory, plan, transitionId) {
     approvalMetadata: { specDriftTransitionId: transitionId }
   });
 }
-async function appendEvent(eventsPath, event) {
-  const existing = await _internals16.verifyEventPresence(eventsPath, event.type, event.transitionId);
+async function appendEvent(directory, event) {
+  const existing = await _internals16.verifyEventPresence(directory, event.type, event.transitionId);
   if (existing)
     return;
-  await appendFile5(eventsPath, `${JSON.stringify(event)}
-`, "utf-8");
-  const verified = await _internals16.verifyEventPresence(eventsPath, event.type, event.transitionId);
+  appendCoreEventSync(directory, { ...event }, { dedupeOnAuthorityKey: true });
+  const verified = await _internals16.verifyEventPresence(directory, event.type, event.transitionId);
   if (!verified) {
     throw new Error(`spec drift audit verification failed for transition ${event.transitionId}`);
   }
 }
-async function verifyEventPresence(eventsPath, eventType, transitionId) {
-  const raw = await _internals16.readFileText(eventsPath);
-  if (raw === null)
-    return false;
-  for (const line of raw.split(`
-`)) {
-    const trimmed = line.trim();
-    if (trimmed.length === 0)
-      continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(trimmed);
-    } catch (error2) {
-      throw new Error(`events.jsonl is not valid JSONL near "${trimmed.slice(0, 80)}": ${error2 instanceof Error ? error2.message : String(error2)}`);
-    }
-    if (parsed.type === eventType && parsed.transitionId === transitionId) {
-      return true;
-    }
-  }
-  return false;
+async function verifyEventPresence(directory, eventType, transitionId) {
+  return hasSpecDriftAuditEvent(directory, eventType, transitionId);
 }
 function buildTransitionId(mode, markerHash, previousHash, newHash) {
   return sha2562(`${mode}:${markerHash}:${previousHash ?? "(null)"}:${newHash ?? "(null)"}`);
@@ -12316,7 +12236,6 @@ async function reconcileSpecDrift(directory, options) {
   const markerPath = _internals16.validateSwarmPath(directory, "spec-staleness.json");
   const walPath2 = _internals16.validateSwarmPath(directory, "spec-drift-recovery.json");
   const snapshotPath = _internals16.validateSwarmPath(directory, "spec-snapshot.md");
-  const eventsPath = _internals16.validateSwarmPath(directory, "events.jsonl");
   const markerMaybe = await _internals16.readFileText(markerPath);
   if (markerMaybe === null) {
     return {
@@ -12463,7 +12382,7 @@ async function reconcileSpecDrift(directory, options) {
           previousHash: wal.previousHash,
           transitionId
         });
-        await _internals16.appendEvent(eventsPath, event);
+        await _internals16.appendEvent(directory, event);
         await _internals16.writeWal(walPath2, { ...wal, state: "COMMITTED" });
       }
       if (markerReplacedDuringPrepared) {
@@ -12888,7 +12807,7 @@ import * as path14 from "path";
 
 // src/evaluation/gate-ground-truth.ts
 init_zod();
-import { mkdir as mkdir6, readFile as readFile7 } from "fs/promises";
+import { mkdir as mkdir5, readFile as readFile6 } from "fs/promises";
 import * as path13 from "path";
 var GateGroundTruthV1Schema = exports_external.object({
   v: exports_external.literal(1),
@@ -12941,11 +12860,11 @@ async function saveGateGroundTruth(directory, runId, input) {
   }
   const target = absolutePath(directory, runId);
   assertProjectRoot(directory);
-  await mkdir6(path13.dirname(target), { recursive: true });
+  await mkdir5(path13.dirname(target), { recursive: true });
   return withEvidenceLock(directory, relativePath(runId), "gate-ground-truth", runId, async () => {
     let existingEvents = [];
     try {
-      existingEvents = parseStrict(await readFile7(target, "utf8"));
+      existingEvents = parseStrict(await readFile6(target, "utf8"));
     } catch (error2) {
       if (error2.code !== "ENOENT")
         throw error2;
@@ -12974,7 +12893,7 @@ async function recordTestImpactGateGroundTruth(directory, runId, input) {
 async function readGateGroundTruth(directory, runId) {
   let content;
   try {
-    content = await readFile7(absolutePath(directory, runId), "utf8");
+    content = await readFile6(absolutePath(directory, runId), "utf8");
   } catch (error2) {
     if (error2.code === "ENOENT") {
       return { events: [], malformed: 0 };
@@ -14115,13 +14034,10 @@ function writeCheckpointLog(log2, directory) {
 }
 function appendRetentionEvent(directory, event) {
   try {
-    const eventsPath = path17.join(directory, ".swarm", "events.jsonl");
-    const line = `${JSON.stringify({
+    appendCoreEventSync(directory, {
       ...event,
       timestamp: new Date().toISOString()
-    })}
-`;
-    fs10.appendFileSync(eventsPath, line);
+    });
   } catch {}
 }
 function loadCheckpointConfig(directory) {
@@ -17295,7 +17211,7 @@ function formatLearningSummary(metrics) {
 }
 
 // src/services/recommendation-ledger.ts
-import { readFile as readFile8 } from "fs/promises";
+import { readFile as readFile7 } from "fs/promises";
 import * as path20 from "path";
 
 // src/learning/fingerprint.ts
@@ -17458,7 +17374,7 @@ function parseLedgerJsonl(content) {
 }
 async function readLedgerForTransaction(filePath) {
   try {
-    return parseLedgerJsonl(await readFile8(filePath, "utf-8"));
+    return parseLedgerJsonl(await readFile7(filePath, "utf-8"));
   } catch (err) {
     if (err?.code === "ENOENT")
       return [];
@@ -17468,7 +17384,7 @@ async function readLedgerForTransaction(filePath) {
 async function readLedgerStrict(directory) {
   const filePath = _internals23.resolveRecommendationLedgerPath(directory);
   try {
-    return parseLedgerJsonl(await readFile8(filePath, "utf-8"));
+    return parseLedgerJsonl(await readFile7(filePath, "utf-8"));
   } catch (err) {
     if (err?.code === "ENOENT")
       return [];
@@ -17747,13 +17663,13 @@ function buildPromotedExternalInputFromSkill(directory, skillSlug, usage, ageDay
 
 // src/services/skill-reviser.ts
 init_logger();
-import { readFile as readFile9, rename as rename3, writeFile as writeFile5 } from "fs/promises";
+import { readFile as readFile8, rename as rename3, writeFile as writeFile5 } from "fs/promises";
 var REVISION_VIOLATION_THRESHOLD = 0.15;
 var MAX_REVISION_CALLS_PER_PHASE = 3;
 var DEFAULT_MAX_CALLS = 10;
 async function getSkillVersion(skillPath) {
   try {
-    const content = await readFile9(skillPath, "utf-8");
+    const content = await readFile8(skillPath, "utf-8");
     const match = content.match(/^version:\s*(\d+)\s*$/m);
     return match ? parseInt(match[1], 10) : 1;
   } catch {
@@ -18386,7 +18302,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-9qzkcmry.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-hbhw2qd7.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -19347,8 +19263,19 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
         already_digested: true
       };
     }
-    const eventsJsonlContent = await readSwarmFileAsync(directory, "events.jsonl");
-    const phaseEvents = eventsJsonlContent ? _internals25.filterPhaseEvents(eventsJsonlContent, phase) : [];
+    const eventsWindow = readCoreEvents(directory);
+    const phaseEvents = eventsWindow.text.length > 0 ? _internals25.filterPhaseEvents(eventsWindow.text, phase) : [];
+    if (eventsWindow.coverage === "truncated") {
+      try {
+        appendCoreEventSync(directory, {
+          timestamp: new Date().toISOString(),
+          event: "curator_skipped",
+          scope: "phase_digest",
+          phase,
+          reason: "events_window_truncated"
+        });
+      } catch {}
+    }
     const contextMd = await readSwarmFileAsync(directory, "context.md");
     const requiredAgents = ["reviewer", "test_engineer"];
     const complianceObservations = _internals25.checkPhaseCompliance(phaseEvents, agentsDispatched, requiredAgents, phase);
@@ -19491,20 +19418,21 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
         warn(`[curator] failed to persist application findings: ${err instanceof Error ? err.message : String(err)}`);
       }
     }
-    const eventsPath = path23.join(directory, ".swarm", "events.jsonl");
-    for (const obs of complianceObservations) {
-      await appendKnowledge(eventsPath, {
+    try {
+      appendCoreEventsSync(directory, complianceObservations.map((obs) => ({
         type: "curator_compliance",
         timestamp: obs.timestamp,
         phase: obs.phase,
         observation_type: obs.type,
         severity: obs.severity,
         description: obs.description
-      });
+      })));
+    } catch (err) {
+      warn(`[curator] failed to append compliance events: ${err instanceof Error ? err.message : String(err)}`);
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-fh8emssb.js");
+        const skillModule = await import("./skill-generator-esrn40th.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -19976,7 +19904,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-9w53tx55.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-ty2kesdj.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -20795,7 +20723,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-www6dbn8.js");
+      const { getScanStatus } = await import("./scan-cursor-3ba1spad.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -20967,9 +20895,9 @@ var _internals26 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-vyg0k7rh.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-h251vmd1.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-9qzkcmry.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-hbhw2qd7.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -20977,11 +20905,11 @@ var _internals26 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-8y57gq1g.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-6w4frzdz.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-te5d78yt.js");
+    const { checkHivePromotions } = await import("./hive-promoter-32artf8c.js");
     return checkHivePromotions(entries, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -20990,7 +20918,7 @@ var _internals26 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-fh8emssb.js");
+    } = await import("./skill-generator-esrn40th.js");
     const result = {
       approved: [],
       rejected: [],
@@ -21032,7 +20960,7 @@ var _internals26 = {
     return result;
   },
   readPriorDriftReports: async (directory) => {
-    const { readPriorDriftReports } = await import("./curator-drift-fv4rttf4.js");
+    const { readPriorDriftReports } = await import("./curator-drift-2h1d2fnq.js");
     return readPriorDriftReports(directory);
   },
   readSwarmKnowledge: (directory) => readKnowledge(resolveSwarmKnowledgePath(directory))
@@ -21172,7 +21100,7 @@ function failedGateNames(decision) {
 
 // src/hooks/hive-transaction.ts
 var import_proper_lockfile4 = __toESM(require_proper_lockfile(), 1);
-import { appendFile as appendFile6, mkdir as mkdir8, realpath as realpath2 } from "fs/promises";
+import { appendFile as appendFile2, mkdir as mkdir7, realpath as realpath2 } from "fs/promises";
 import * as path25 from "path";
 init_logger();
 var HIVE_LOCK_STALE_MS = 5000;
@@ -21197,7 +21125,7 @@ async function transactHiveStore(mutate) {
   const eventsPath = _internals27.resolveHiveEventsPath();
   const diagnostics = [];
   try {
-    await mkdir8(dataDir, { recursive: true });
+    await mkdir7(dataDir, { recursive: true });
   } catch (err) {
     diagnostics.push(`hive data dir create failed: ${err instanceof Error ? err.message : String(err)}`);
     return { committed: false, return: undefined, diagnostics };
@@ -21250,13 +21178,13 @@ async function transactHiveStore(mutate) {
       const rejectBlock = `${outcome.rejects.map((r) => JSON.stringify(r)).join(`
 `)}
 `;
-      await appendFile6(rejectedPath, rejectBlock, "utf-8");
+      await appendFile2(rejectedPath, rejectBlock, "utf-8");
     }
     if (outcome.audit && outcome.audit.length > 0) {
       const auditBlock = `${outcome.audit.map((a) => a.line).join(`
 `)}
 `;
-      await appendFile6(eventsPath, auditBlock, "utf-8");
+      await appendFile2(eventsPath, auditBlock, "utf-8");
       try {
         await trimHiveEventsUnderLock(eventsPath);
       } catch (err) {
@@ -21316,11 +21244,11 @@ async function realpathQuiet(target) {
   }
 }
 async function trimHiveEventsUnderLock(eventsPath) {
-  const { readFile: readFile10 } = await import("fs/promises");
+  const { readFile: readFile9 } = await import("fs/promises");
   const { existsSync: existsSync15 } = await import("fs");
   if (!existsSync15(eventsPath))
     return;
-  const content = await readFile10(eventsPath, "utf-8");
+  const content = await readFile9(eventsPath, "utf-8");
   const lines = content.split(`
 `).filter((l) => l.trim().length > 0);
   if (lines.length <= MAX_EVENT_LOG_ENTRIES)
@@ -21339,7 +21267,7 @@ var _internals27 = {
   resolveHiveKnowledgePath,
   resolveHiveRejectedPath,
   resolveHiveEventsPath,
-  appendFile: appendFile6,
+  appendFile: appendFile2,
   path: path25
 };
 
@@ -22087,20 +22015,14 @@ async function promoteFromSwarm(directory, lessonId, options, config) {
 // src/hooks/knowledge-curator.ts
 import { createHash as createHash10 } from "crypto";
 import { existsSync as existsSync15 } from "fs";
-import {
-  appendFile as appendFile7,
-  mkdir as mkdir10,
-  readFile as readFile11,
-  realpath as realpath3,
-  writeFile as writeFile7
-} from "fs/promises";
+import { readFile as readFile10, realpath as realpath3, writeFile as writeFile7 } from "fs/promises";
 import * as path28 from "path";
 
 // src/services/synonym-map.ts
 var import_proper_lockfile5 = __toESM(require_proper_lockfile(), 1);
 import {
-  mkdir as mkdir9,
-  readFile as readFile10,
+  mkdir as mkdir8,
+  readFile as readFile9,
   rename as rename4,
   stat as stat3,
   unlink as unlink3,
@@ -22254,14 +22176,14 @@ async function readSynonymMap(directory, maxPairs = DEFAULT_MAX_PAIRS) {
     const st = await stat3(filePath);
     if (st.size > ceiling)
       return emptySynonymMap();
-    const raw = await readFile10(filePath, "utf-8");
+    const raw = await readFile9(filePath, "utf-8");
     return coerceSynonymMap(JSON.parse(raw), maxPairs);
   } catch {
     return emptySynonymMap();
   }
 }
 async function writeSynonymMapAtomic(filePath, map) {
-  await mkdir9(path27.dirname(filePath), { recursive: true });
+  await mkdir8(path27.dirname(filePath), { recursive: true });
   const tmp = `${filePath}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`;
   try {
     await writeFile6(tmp, JSON.stringify(map, null, 2), "utf-8");
@@ -22275,7 +22197,7 @@ async function writeSynonymMapAtomic(filePath, map) {
 async function rebuildSynonymMap(directory, entries, maxPairs = DEFAULT_MAX_PAIRS) {
   const filePath = resolveSynonymMapPath(directory);
   const dir = path27.dirname(filePath);
-  await mkdir9(dir, { recursive: true });
+  await mkdir8(dir, { recursive: true });
   let release = null;
   try {
     release = await import_proper_lockfile5.default.lock(dir, {
@@ -22326,9 +22248,9 @@ function hashContent(content) {
   return createHash10("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-vyg0k7rh.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-h251vmd1.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-9qzkcmry.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-hbhw2qd7.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -22806,16 +22728,13 @@ RETRY: your last output was missing ${result.missing.join("; ")}; produce valid
 }
 async function appendCuratorSkippedEvent(directory, record) {
   try {
-    const filePath = path28.join(directory, ".swarm", "events.jsonl");
-    await mkdir10(path28.dirname(filePath), { recursive: true });
-    await appendFile7(filePath, `${JSON.stringify({
+    appendCoreEventSync(directory, {
       timestamp: new Date().toISOString(),
       event: "curator_skipped",
       entry_id: record.entry_id,
       lesson: record.lesson.slice(0, 200),
       reason: record.reason
-    })}
-`, "utf-8");
+    });
   } catch {}
 }
 var MESO_INSIGHT_BATCH_LIMIT = 20;
@@ -22850,7 +22769,7 @@ async function consumeInsightCandidates(directory, batchLimit = MESO_INSIGHT_BAT
     if (!existsSync15(filePath))
       return [];
     const consumed = [];
-    await transactFile(filePath, async (p) => readInsightJsonl2(await readFile11(p, "utf-8").catch(() => "")), async (p, data) => {
+    await transactFile(filePath, async (p) => readInsightJsonl2(await readFile10(p, "utf-8").catch(() => "")), async (p, data) => {
       const body = data.length === 0 ? "" : `${data.map((c) => JSON.stringify(c)).join(`
 `)}
 `;
@@ -24707,9 +24626,9 @@ var import_proper_lockfile6 = __toESM(require_proper_lockfile(), 1);
 import { randomUUID as randomUUID6 } from "crypto";
 import { existsSync as existsSync17, readFileSync as readFileSync14, writeFileSync as writeFileSync8 } from "fs";
 import {
-  appendFile as appendFile8,
-  mkdir as mkdir11,
-  readFile as readFile12,
+  appendFile as appendFile3,
+  mkdir as mkdir9,
+  readFile as readFile11,
   rename as rename5,
   truncate,
   writeFile as writeFile8
@@ -25876,7 +25795,7 @@ class LocalJsonlMemoryProvider {
   }
   async withOutcomeStoreLock(fn) {
     const storageDirectory = path31.dirname(this.pathFor("memories"));
-    await mkdir11(storageDirectory, { recursive: true });
+    await mkdir9(storageDirectory, { recursive: true });
     const release = await lockfile6.lock(storageDirectory, {
       realpath: false,
       stale: 1e4,
@@ -26079,7 +25998,7 @@ function validateLoadedProposals(values, config) {
 async function readJsonl(filePath) {
   if (!existsSync17(filePath))
     return [];
-  const content = await readFile12(filePath, "utf-8");
+  const content = await readFile11(filePath, "utf-8");
   const records = [];
   for (const line of content.split(`
 `)) {
@@ -26154,12 +26073,12 @@ function parseRewardEvent(value) {
   };
 }
 async function appendJsonl(filePath, value) {
-  await mkdir11(path31.dirname(filePath), { recursive: true });
-  await appendFile8(filePath, `${JSON.stringify(value)}
+  await mkdir9(path31.dirname(filePath), { recursive: true });
+  await appendFile3(filePath, `${JSON.stringify(value)}
 `, "utf-8");
 }
 async function writeJsonlAtomic(filePath, values) {
-  await mkdir11(path31.dirname(filePath), { recursive: true });
+  await mkdir9(path31.dirname(filePath), { recursive: true });
   const tmp = `${filePath}.tmp.${randomUUID6()}`;
   const content = values.map((value) => JSON.stringify(value)).join(`
 `) + (values.length > 0 ? `
@@ -26170,7 +26089,7 @@ async function writeJsonlAtomic(filePath, values) {
 async function repairIncompleteJsonlTail(filePath) {
   if (!existsSync17(filePath))
     return;
-  const content = await readFile12(filePath, "utf-8");
+  const content = await readFile11(filePath, "utf-8");
   if (content.length === 0 || content.endsWith(`
 `))
     return;
@@ -26551,7 +26470,7 @@ function resolveRerankerCacheDir() {
 
 // src/memory/jsonl-migration.ts
 import { existsSync as existsSync18, renameSync as renameSync7, unlinkSync as unlinkSync6 } from "fs";
-import { copyFile, mkdir as mkdir12, readFile as readFile13, stat as stat4, writeFile as writeFile9 } from "fs/promises";
+import { copyFile, mkdir as mkdir10, readFile as readFile12, stat as stat4, writeFile as writeFile9 } from "fs/promises";
 import * as path34 from "path";
 var LEGACY_JSONL_MIGRATION_VERSION = 2;
 var LEGACY_JSONL_MIGRATION_NAME = "legacy_jsonl_import_complete";
@@ -26589,7 +26508,7 @@ async function readLegacyJsonl(rootDirectory, config = {}) {
 async function backupLegacyJsonl(rootDirectory, config = {}) {
   const storageDir = resolveMemoryStorageDir(rootDirectory, config);
   const backupDir = path34.join(storageDir, "backups");
-  await mkdir12(backupDir, { recursive: true });
+  await mkdir10(backupDir, { recursive: true });
   const results = [];
   for (const filename of [
     "memories.jsonl",
@@ -26611,7 +26530,7 @@ async function backupLegacyJsonl(rootDirectory, config = {}) {
 }
 async function writeJsonlExport(rootDirectory, config, memories, proposals, outcomeEvents = []) {
   const exportDir = path34.join(resolveMemoryStorageDir(rootDirectory, config), "export");
-  await mkdir12(exportDir, { recursive: true });
+  await mkdir10(exportDir, { recursive: true });
   const memoriesPath = path34.join(exportDir, "memories.jsonl");
   const proposalsPath = path34.join(exportDir, "proposals.jsonl");
   const outcomesPath = path34.join(exportDir, "outcome-events.jsonl");
@@ -26649,7 +26568,7 @@ async function writeJsonlExport(rootDirectory, config, memories, proposals, outc
 }
 async function writeMigrationReport(rootDirectory, report, config = {}) {
   const reportPath = path34.join(resolveMemoryStorageDir(rootDirectory, config), "migration-report.json");
-  await mkdir12(path34.dirname(reportPath), { recursive: true });
+  await mkdir10(path34.dirname(reportPath), { recursive: true });
   const reportTempPath = path34.join(path34.dirname(reportPath), `${path34.basename(reportPath)}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`);
   try {
     await writeFile9(reportTempPath, `${JSON.stringify(report, null, 2)}
@@ -26668,7 +26587,7 @@ async function readMigrationReport(rootDirectory, config = {}) {
   if (!existsSync18(reportPath))
     return null;
   try {
-    return JSON.parse(await readFile13(reportPath, "utf-8"));
+    return JSON.parse(await readFile12(reportPath, "utf-8"));
   } catch {
     return null;
   }
@@ -26822,7 +26741,7 @@ async function readJsonlRows(filePath) {
   if (!existsSync18(filePath)) {
     return { rows: [], invalidRows: [], totalRows: 0 };
   }
-  const content = await readFile13(filePath, "utf-8");
+  const content = await readFile12(filePath, "utf-8");
   const rows = [];
   const invalidRows = [];
   let totalRows = 0;
@@ -30106,7 +30025,10 @@ async function gatherLedgerRejections(directory, sessionId) {
     }
     return readLedger(target);
   };
-  let content = await readLedger(path39.join(directory, ".swarm", "events.jsonl"));
+  let content = readCoreEvents(directory).text;
+  if (content === "") {
+    content = null;
+  }
   if (content === null) {
     try {
       const archiveRoot = path39.join(directory, ".swarm", "archive");
@@ -30126,6 +30048,8 @@ async function gatherLedgerRejections(directory, sessionId) {
       continue;
     try {
       const parsed = JSON.parse(trimmed);
+      if (parsed.type === "swarm-events-manifest")
+        continue;
       if (typeof parsed.type === "string" && REJECTION_LEDGER_EVENT_TYPES.has(parsed.type)) {
         if (sessionId !== undefined) {
           const eventSession = typeof parsed.sessionId === "string" ? parsed.sessionId : typeof parsed.sessionID === "string" ? parsed.sessionID : undefined;
@@ -30652,12 +30576,12 @@ var _internals35 = {
 
 // src/services/skill-improver.ts
 import { existsSync as existsSync22 } from "fs";
-import { mkdir as mkdir14, readFile as readFile14 } from "fs/promises";
+import { mkdir as mkdir12, readFile as readFile13 } from "fs/promises";
 import * as path41 from "path";
 init_logger();
 
 // src/services/trajectory-cluster.ts
-import { mkdir as mkdir13, writeFile as writeFile10 } from "fs/promises";
+import { mkdir as mkdir11, writeFile as writeFile10 } from "fs/promises";
 import * as path40 from "path";
 init_logger();
 var MACRO_TRAJECTORY_WINDOW = 200;
@@ -30826,7 +30750,7 @@ async function writeMotifProposals(directory, opts = {}) {
     if (emitted.length === 0)
       return result;
     const proposalsDir = validateSwarmPath(directory, path40.join("skills", "proposals"));
-    await mkdir13(proposalsDir, { recursive: true });
+    await mkdir11(proposalsDir, { recursive: true });
     const written = [];
     for (const decision of emitted) {
       const motif = selected[decision.index];
@@ -31016,7 +30940,7 @@ async function writeSuccessMotifProposals(directory, opts = {}) {
     if (emitted.length === 0)
       return result;
     const proposalsDir = validateSwarmPath(directory, path40.join("skills", "proposals"));
-    await mkdir13(proposalsDir, { recursive: true });
+    await mkdir11(proposalsDir, { recursive: true });
     const written = [];
     for (const decision of emitted) {
       const motif = selected[decision.index];
@@ -31159,7 +31083,7 @@ function timestampSlug(d) {
   return d.toISOString().replace(/[:.]/g, "-");
 }
 async function atomicWrite(p, content) {
-  await mkdir14(path41.dirname(p), { recursive: true });
+  await mkdir12(path41.dirname(p), { recursive: true });
   await atomicWriteSwarmFile(p, content);
 }
 async function gatherInventory(directory) {
@@ -31174,7 +31098,7 @@ async function gatherInventory(directory) {
   for (const skill of skills.active) {
     let content;
     try {
-      content = await readFile14(skill.path, "utf-8");
+      content = await readFile13(skill.path, "utf-8");
     } catch {
       continue;
     }
@@ -31350,7 +31274,7 @@ async function reconcileStaleActiveSkills(directory, options = {}) {
   for (const skill of skills.active) {
     let content;
     try {
-      content = await readFile14(skill.path, "utf-8");
+      content = await readFile13(skill.path, "utf-8");
     } catch {
       continue;
     }
@@ -33094,6 +33018,7 @@ var ARCHIVE_ARTIFACTS = [
   "plan-ledger.jsonl",
   "context.md",
   "events.jsonl",
+  "events-authority-index.json",
   "handoff.md",
   "handoff-prompt.md",
   "handoff-consumed.md",
@@ -33127,6 +33052,7 @@ var ACTIVE_STATE_TO_CLEAN = [
   "plan.md",
   "plan-ledger.jsonl",
   "events.jsonl",
+  "events-authority-index.json",
   "handoff.md",
   "handoff-prompt.md",
   "handoff-consumed.md",
@@ -33524,7 +33450,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-vyg0k7rh.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-h251vmd1.js");
     const { config: pmLoadedConfig } = _internals41.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -33563,6 +33489,12 @@ async function runArchiveStage(ctx) {
       const msg = finalizeErr instanceof Error ? finalizeErr.message : String(finalizeErr);
       ctx.warnings.push(`Context-map telemetry finalize before archive failed: ${msg}`);
     }
+    try {
+      _internals41.finalizeCoreEvents(ctx.directory);
+    } catch (finalizeErr) {
+      const msg = finalizeErr instanceof Error ? finalizeErr.message : String(finalizeErr);
+      ctx.warnings.push(`Core events finalize before archive failed: ${msg}`);
+    }
     const linkedKnowledgeShared = isLinked(ctx.directory);
     if (linkedKnowledgeShared) {
       ctx.warnings.push("Worktree is linked: shared knowledge (knowledge.jsonl, knowledge-rejected.jsonl) lives in the link store and is not archived or cleaned by /swarm close. Manage it via the link.");
@@ -34388,11 +34320,14 @@ var _internals41 = {
   closePlanTerminalState: reconcileCloseTerminalStateForPlan,
   endAgentSession,
   flushAndDrainTelemetry: async () => {
-    const { flushAndDrainTelemetry } = await import("./telemetry-1pnsftp0.js");
+    const { flushAndDrainTelemetry } = await import("./telemetry-jtq6px7k.js");
     return flushAndDrainTelemetry();
   },
   finalizeContextTelemetry: (directory) => {
     finalizeContextTelemetry(directory);
+  },
+  finalizeCoreEvents: (directory) => {
+    finalizeCoreEventsForClose(directory);
   }
 };
 
@@ -34657,7 +34592,7 @@ init_schema();
 
 // src/services/skill-consolidation.ts
 import { existsSync as existsSync28 } from "fs";
-import { mkdir as mkdir15, readFile as readFile15 } from "fs/promises";
+import { mkdir as mkdir13, readFile as readFile14 } from "fs/promises";
 import * as path48 from "path";
 var DEFAULT_CONSOLIDATION_INTERVAL_HOURS = 24;
 var DEFAULT_CONSOLIDATION_MAX_CALLS_PER_RUN = 1;
@@ -34671,7 +34606,7 @@ async function readState2(directory) {
   if (!existsSync28(filePath))
     return {};
   try {
-    const parsed = JSON.parse(await readFile15(filePath, "utf-8"));
+    const parsed = JSON.parse(await readFile14(filePath, "utf-8"));
     if (!parsed || typeof parsed !== "object")
       return {};
     return parsed;
@@ -34680,7 +34615,7 @@ async function readState2(directory) {
   }
 }
 async function atomicWrite2(filePath, content) {
-  await mkdir15(path48.dirname(filePath), { recursive: true });
+  await mkdir13(path48.dirname(filePath), { recursive: true });
   await atomicWriteSwarmFile(filePath, content);
 }
 async function writeState2(directory, state) {
@@ -35006,7 +34941,7 @@ import { promisify as promisify2 } from "util";
 init_zod();
 import * as child_process3 from "child_process";
 import { randomUUID as randomUUID8 } from "crypto";
-import { readdir as readdir4, readFile as readFile16, stat as stat5 } from "fs/promises";
+import { readdir as readdir4, readFile as readFile15, stat as stat5 } from "fs/promises";
 import * as path49 from "path";
 import { promisify } from "util";
 function getExecFileAsync() {
@@ -35133,7 +35068,7 @@ async function getStaticEdges(directory) {
   const sourceFiles = await scanSourceFiles(directory);
   for (const sourceFile of sourceFiles) {
     try {
-      const content = await readFile16(sourceFile, "utf-8");
+      const content = await readFile15(sourceFile, "utf-8");
       const importRegex = /(?:import|require)\s*(?:\(?\s*['"`]|.*?from\s+['"`])([^'"`]+)['"`]/g;
       for (let match = importRegex.exec(content);match !== null; match = importRegex.exec(content)) {
         const importPath = match[1].trim();
@@ -35717,9 +35652,9 @@ var _internals45 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
-      import("./schema-vyg0k7rh.js"),
-      import("./curator-8y57gq1g.js"),
-      import("./curator-llm-factory-rj4vw5fd.js")
+      import("./schema-h251vmd1.js"),
+      import("./curator-6w4frzdz.js"),
+      import("./curator-llm-factory-8fstpeqh.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -36360,7 +36295,7 @@ init_git_executable();
 // src/services/knowledge-diagnostics.ts
 init_package();
 import { existsSync as existsSync31, readFileSync as readFileSync21 } from "fs";
-import { readFile as readFile17 } from "fs/promises";
+import { readFile as readFile16 } from "fs/promises";
 import { join as join41 } from "path";
 
 // src/services/version-check.ts
@@ -36437,7 +36372,7 @@ var INSIGHT_BACKLOG_WARN = 50;
 async function readRawLines(filePath) {
   if (!existsSync31(filePath))
     return { entries: [], corrupt: 0 };
-  const content = await readFile17(filePath, "utf-8");
+  const content = await readFile16(filePath, "utf-8");
   const entries = [];
   let corrupt = 0;
   for (const line of content.split(`
@@ -36709,7 +36644,7 @@ async function computeCurationDiagnostics(directory, entries) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-www6dbn8.js");
+    const { getScanStatus } = await import("./scan-cursor-3ba1spad.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -36717,19 +36652,19 @@ async function computeCurationDiagnostics(directory, entries) {
   } catch {}
   let configMatch = null;
   try {
-    const { isLinked: isLinked2 } = await import("./knowledge-link-spw879rs.js");
+    const { isLinked: isLinked2 } = await import("./knowledge-link-a5f89833.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-vyg0k7rh.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-h251vmd1.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-9qzkcmry.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-hbhw2qd7.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
         config = KnowledgeConfigSchema2.parse({});
       }
       const { cohortConfigFingerprint: cohortConfigFingerprint2 } = await import("./config-fingerprint-v22xh5a2.js");
-      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-fbvctttr.js");
+      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-4jxx3ey4.js");
       const currentFp = cohortConfigFingerprint2(buildConfigFingerprintInput2(config));
       const cohortFp = await readCohortConfigFingerprint(directory);
       configMatch = cohortFp === null ? null : currentFp === cohortFp;
@@ -36764,7 +36699,7 @@ async function countPendingProposals(directory) {
   if (!existsSync31(proposalsPath))
     return 0;
   try {
-    const content = await readFile17(proposalsPath, "utf-8");
+    const content = await readFile16(proposalsPath, "utf-8");
     let n = 0;
     for (const line of content.split(`
 `)) {
@@ -36786,7 +36721,7 @@ async function safeJsonlCount(filePath) {
   if (!filePath || !existsSync31(filePath))
     return 0;
   try {
-    const content = await readFile17(filePath, "utf-8");
+    const content = await readFile16(filePath, "utf-8");
     let n = 0;
     for (const line of content.split(`
 `)) {
@@ -37331,8 +37266,7 @@ async function checkCheckpointManifest(directory) {
   }
 }
 async function checkEventStreamIntegrity(directory) {
-  const eventsPath = path53.join(directory, ".swarm/events.jsonl");
-  if (!existsSync32(eventsPath)) {
+  if (getCoreEventCoverage(directory) === "empty") {
     return {
       name: "Event Stream",
       status: "\u2705",
@@ -37340,8 +37274,8 @@ async function checkEventStreamIntegrity(directory) {
     };
   }
   try {
-    const content = readFileSync22(eventsPath, "utf-8");
-    const lines = content.split(`
+    const window = readCoreEvents(directory);
+    const lines = window.text.split(`
 `).filter((line) => line.trim() !== "");
     let malformedCount = 0;
     for (const line of lines) {
@@ -37351,11 +37285,12 @@ async function checkEventStreamIntegrity(directory) {
         malformedCount++;
       }
     }
+    const coverageNote = window.coverage === "truncated" ? " (retained window \u2014 compacted history excluded)" : "";
     if (malformedCount === 0) {
       return {
         name: "Event Stream",
         status: "\u2705",
-        detail: `events.jsonl is valid \u2014 ${lines.length} event(s)`
+        detail: `events.jsonl is valid \u2014 ${lines.length} event(s)${coverageNote}`
       };
     }
     return {
@@ -37372,8 +37307,7 @@ async function checkEventStreamIntegrity(directory) {
   }
 }
 async function checkSteeringDirectives(directory) {
-  const eventsPath = path53.join(directory, ".swarm/events.jsonl");
-  if (!existsSync32(eventsPath)) {
+  if (getCoreEventCoverage(directory) === "empty") {
     return {
       name: "Steering Directives",
       status: "\u2705",
@@ -37381,8 +37315,8 @@ async function checkSteeringDirectives(directory) {
     };
   }
   try {
-    const content = readFileSync22(eventsPath, "utf-8");
-    const lines = content.split(`
+    const window = readCoreEvents(directory);
+    const lines = window.text.split(`
 `).filter((line) => line.trim() !== "");
     const directivesIssued = [];
     const consumedIds = new Set;
@@ -37399,10 +37333,11 @@ async function checkSteeringDirectives(directory) {
     }
     const unconsumed = directivesIssued.filter((id) => !consumedIds.has(id));
     if (unconsumed.length === 0) {
+      const coverageNote = window.coverage === "truncated" ? " (within the retained event window)" : "";
       return {
         name: "Steering Directives",
         status: "\u2705",
-        detail: "All steering directives acknowledged (or none issued)"
+        detail: `All steering directives acknowledged (or none issued)${coverageNote}`
       };
     }
     return {
@@ -38033,7 +37968,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-ycf9ws4p.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-fx8d6pma.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -38973,7 +38908,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-wkp0gfpd.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-x00z38n2.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -41962,7 +41897,974 @@ var javaRules = [
   }
 ];
 
+// src/sast/rules/javascript-call-classifier.ts
+var MAX_ANALYSIS_BYTES = 512 * 1024;
+var CHILD_PROCESS_MODULES = new Set(["child_process", "node:child_process"]);
+var analysisByContext = new WeakMap;
+var dispositionByContext = new WeakMap;
+var tokenPairsByList = new WeakMap;
+var ASSIGNMENTS = new Set([
+  "=",
+  "+=",
+  "-=",
+  "*=",
+  "/=",
+  "%=",
+  "&&=",
+  "||=",
+  "??="
+]);
+var DECLARATION_KEYWORDS = new Set(["const", "let", "var"]);
+function isIdentifierStart(char) {
+  return /[A-Za-z_$]/.test(char);
+}
+function isIdentifierPart(char) {
+  return /[A-Za-z0-9_$]/.test(char);
+}
+function canStartRegex(previous) {
+  if (!previous)
+    return true;
+  if (previous.kind === "identifier") {
+    return [
+      "return",
+      "throw",
+      "case",
+      "delete",
+      "typeof",
+      "void",
+      "yield",
+      "await"
+    ].includes(previous.value);
+  }
+  return previous.kind === "punctuator" && [
+    "(",
+    "[",
+    "{",
+    "=",
+    ":",
+    ",",
+    ";",
+    "!",
+    "?",
+    "=>",
+    "&&",
+    "||",
+    "??"
+  ].includes(previous.value);
+}
+function tokenize2(content) {
+  const tokens = [];
+  let malformed = false;
+  let index = 0;
+  while (index < content.length) {
+    const char = content[index];
+    const next = content[index + 1];
+    if (/\s/.test(char)) {
+      index++;
+      continue;
+    }
+    if (char === "/" && next === "/") {
+      index += 2;
+      while (index < content.length && content[index] !== `
+`)
+        index++;
+      continue;
+    }
+    if (char === "/" && next === "*") {
+      const start = index;
+      index += 2;
+      while (index < content.length && !(content[index] === "*" && content[index + 1] === "/")) {
+        index++;
+      }
+      if (index >= content.length) {
+        malformed = true;
+        break;
+      }
+      index += 2;
+      if (index <= start)
+        malformed = true;
+      continue;
+    }
+    if (char === '"' || char === "'") {
+      const quote = char;
+      const start = index++;
+      let value2 = "";
+      let closed = false;
+      while (index < content.length) {
+        const current = content[index];
+        if (current === "\\") {
+          value2 += current;
+          if (index + 1 < content.length)
+            value2 += content[index + 1];
+          index += 2;
+          continue;
+        }
+        if (current === quote) {
+          index++;
+          closed = true;
+          break;
+        }
+        value2 += current;
+        index++;
+      }
+      if (!closed)
+        malformed = true;
+      tokens.push({ kind: "string", value: value2, start, end: index });
+      continue;
+    }
+    if (char === "`") {
+      const start = index++;
+      tokens.push({ kind: "template", value: "", start, end: start + 1 });
+      let closed = false;
+      while (index < content.length) {
+        if (content[index] === "\\") {
+          index += 2;
+          continue;
+        }
+        if (content[index] === "$" && content[index + 1] === "{") {
+          const expressionStart = index + 2;
+          let cursor = expressionStart;
+          let depth = 1;
+          let quote = null;
+          while (cursor < content.length && depth > 0) {
+            const current = content[cursor];
+            if (quote) {
+              if (current === "\\")
+                cursor++;
+              else if (current === quote)
+                quote = null;
+            } else if (current === '"' || current === "'")
+              quote = current;
+            else if (current === "{")
+              depth++;
+            else if (current === "}")
+              depth--;
+            cursor++;
+          }
+          if (depth !== 0) {
+            malformed = true;
+            index = cursor;
+            break;
+          }
+          const nested = tokenize2(content.slice(expressionStart, cursor - 1));
+          for (const token of nested.tokens) {
+            tokens.push({
+              ...token,
+              start: token.start + expressionStart,
+              end: token.end + expressionStart
+            });
+          }
+          malformed ||= nested.malformed;
+          index = cursor;
+          continue;
+        }
+        if (content[index] === "`") {
+          index++;
+          closed = true;
+          break;
+        }
+        index++;
+      }
+      if (!closed)
+        malformed = true;
+      continue;
+    }
+    if (char === "/" && canStartRegex(tokens.at(-1))) {
+      const start = index++;
+      let inClass = false;
+      let closed = false;
+      while (index < content.length) {
+        const current = content[index];
+        if (current === "\\") {
+          index += 2;
+          continue;
+        }
+        if (current === "[")
+          inClass = true;
+        if (current === "]")
+          inClass = false;
+        if (current === "/" && !inClass) {
+          index++;
+          while (index < content.length && /[A-Za-z]/.test(content[index]))
+            index++;
+          closed = true;
+          break;
+        }
+        if (current === `
+`)
+          break;
+        index++;
+      }
+      if (!closed)
+        malformed = true;
+      tokens.push({
+        kind: "regex",
+        value: content.slice(start, index),
+        start,
+        end: index
+      });
+      continue;
+    }
+    if (isIdentifierStart(char)) {
+      const start = index++;
+      while (index < content.length && isIdentifierPart(content[index]))
+        index++;
+      tokens.push({
+        kind: "identifier",
+        value: content.slice(start, index),
+        start,
+        end: index
+      });
+      continue;
+    }
+    if (/\d/.test(char)) {
+      const start = index++;
+      while (index < content.length && /[\w.]/.test(content[index]))
+        index++;
+      tokens.push({
+        kind: "number",
+        value: content.slice(start, index),
+        start,
+        end: index
+      });
+      continue;
+    }
+    const punctuator = [
+      "?.",
+      "=>",
+      "===",
+      "!==",
+      "==",
+      "!=",
+      "++",
+      "--",
+      "+=",
+      "-=",
+      "*=",
+      "/=",
+      "%=",
+      "&&=",
+      "||=",
+      "??=",
+      "&&",
+      "||",
+      "??",
+      "..."
+    ].find((candidate) => content.startsWith(candidate, index));
+    const value = punctuator ?? char;
+    tokens.push({
+      kind: "punctuator",
+      value,
+      start: index,
+      end: index + value.length
+    });
+    index += value.length;
+  }
+  return { tokens, malformed };
+}
+function addDeclaration(analysis, name) {
+  analysis.declarations.set(name, (analysis.declarations.get(name) ?? 0) + 1);
+}
+function addFact(analysis, name, fact, tokenIndex) {
+  const facts = analysis.facts.get(name) ?? new Set;
+  facts.add(fact);
+  analysis.facts.set(name, facts);
+  const scope = declarationScope(analysis, tokenIndex);
+  const scopedFacts = analysis.factScopes.get(name) ?? new Map;
+  const factsAtScope = scopedFacts.get(scope) ?? new Set;
+  factsAtScope.add(fact);
+  scopedFacts.set(scope, factsAtScope);
+  analysis.factScopes.set(name, scopedFacts);
+}
+function addScopedMarker(store, name, scope) {
+  const scopes = store.get(name) ?? new Set;
+  scopes.add(scope);
+  store.set(name, scopes);
+}
+function hasScopedMarker(store, name, scope) {
+  return scope !== null && (store.get(name)?.has(scope) ?? false);
+}
+function visibleScopeAt(analysis, name, callIndex) {
+  return visibleDeclarationScope(analysis, name, callIndex) ?? analysis.scopeAtToken[callIndex] ?? 0;
+}
+function hasVisibleMarker(analysis, store, name, callIndex) {
+  let scope = visibleScopeAt(analysis, name, callIndex);
+  while (scope >= 0) {
+    if (store.get(name)?.has(scope))
+      return true;
+    scope = analysis.scopeParents[scope] ?? -1;
+  }
+  return false;
+}
+function factsAtVisibleScope(analysis, name, callIndex) {
+  const scope = visibleDeclarationScope(analysis, name, callIndex);
+  return scope === null ? undefined : analysis.factScopes.get(name)?.get(scope);
+}
+function tokenPairs(tokens) {
+  const cached = tokenPairsByList.get(tokens);
+  if (cached)
+    return cached;
+  const pairs = new Map;
+  const stack = [];
+  const matching = { ")": "(", "]": "[", "}": "{" };
+  for (let index = 0;index < tokens.length; index++) {
+    const value = tokens[index]?.value;
+    if (value === "(" || value === "[" || value === "{") {
+      stack.push({ value, index });
+      continue;
+    }
+    const open2 = matching[value ?? ""];
+    if (!open2)
+      continue;
+    const top = stack.at(-1);
+    if (!top || top.value !== open2)
+      continue;
+    stack.pop();
+    pairs.set(top.index, index);
+    pairs.set(index, top.index);
+  }
+  tokenPairsByList.set(tokens, pairs);
+  return pairs;
+}
+function pairedToken(tokens, index) {
+  return tokenPairs(tokens).get(index) ?? -1;
+}
+function buildScopes(tokens) {
+  const scopeAtToken = [];
+  const scopeParents = [-1];
+  const scopeIsFunction = [true];
+  const stack = [0];
+  const braceCreatesScope = [];
+  for (let index = 0;index < tokens.length; index++) {
+    scopeAtToken[index] = stack.at(-1);
+    if (tokens[index]?.value === "{") {
+      const previous = tokens[index - 1];
+      let cursor = index - 1;
+      let importClause = false;
+      while (cursor >= 0 && ![";", "{", "}"].includes(tokens[cursor].value)) {
+        if (tokens[cursor]?.value === "import")
+          importClause = true;
+        cursor--;
+      }
+      const createsScope = !importClause && !DECLARATION_KEYWORDS.has(previous?.value ?? "") && !["=", "(", "[", ",", ":", "return"].includes(previous?.value ?? "");
+      braceCreatesScope.push(createsScope);
+      if (createsScope) {
+        const child = scopeParents.length;
+        scopeParents.push(stack.at(-1));
+        const previousValue = previous?.value;
+        let functionBody = previousValue === "=>";
+        if (previousValue === ")") {
+          const open2 = pairedToken(tokens, index - 1);
+          for (let cursor2 = open2 - 1;cursor2 >= 0; cursor2--) {
+            const value = tokens[cursor2]?.value;
+            if (value === "function") {
+              functionBody = true;
+              break;
+            }
+            if (value === ";" || value === "{" || value === "}")
+              break;
+          }
+        }
+        scopeIsFunction.push(functionBody);
+        stack.push(child);
+      }
+    } else if (tokens[index]?.value === "}") {
+      if (braceCreatesScope.pop() && stack.length > 1)
+        stack.pop();
+    }
+  }
+  return { scopeAtToken, scopeParents, scopeIsFunction };
+}
+function declarationScope(analysis, tokenIndex) {
+  if (analysis.varDeclarationIndexes.has(tokenIndex)) {
+    let scope = analysis.scopeAtToken[tokenIndex] ?? 0;
+    while (scope > 0 && !analysis.scopeIsFunction[scope]) {
+      scope = analysis.scopeParents[scope] ?? 0;
+    }
+    return scope;
+  }
+  const parameterScope = analysis.parameterScopes.get(tokenIndex);
+  if (parameterScope !== undefined)
+    return parameterScope;
+  return analysis.scopeAtToken[tokenIndex] ?? 0;
+}
+function visibleDeclarationScope(analysis, name, callIndex) {
+  const scopes = analysis.declarationScopes.get(name);
+  if (!scopes)
+    return null;
+  let scope = analysis.scopeAtToken[callIndex] ?? 0;
+  while (scope >= 0) {
+    if (scopes.has(scope))
+      return scope;
+    scope = analysis.scopeParents[scope] ?? -1;
+  }
+  return null;
+}
+function matchingToken(tokens, start, open2, close) {
+  if (tokens[start]?.value !== open2)
+    return -1;
+  const match = pairedToken(tokens, start);
+  return tokens[match]?.value === close ? match : -1;
+}
+function moduleAtCall(tokens, start, callee) {
+  if (tokens[start]?.value !== callee || tokens[start + 1]?.value !== "(" || tokens[start + 2]?.kind !== "string" || tokens[start + 3]?.value !== ")") {
+    return null;
+  }
+  return tokens[start + 2].value;
+}
+function declarationNames(tokens, start, end) {
+  const names = [];
+  if (tokens[start]?.value === "{") {
+    for (let index = start + 1;index < end; index++) {
+      const token = tokens[index];
+      if (token?.kind !== "identifier")
+        continue;
+      if (tokens[index + 1]?.value === ":") {
+        const local = tokens[index + 2];
+        if (local?.kind === "identifier")
+          names.push({ name: local.value, index: index + 2 });
+        index += 2;
+      } else if (tokens[index - 1]?.value !== ":") {
+        names.push({ name: token.value, index });
+      }
+    }
+  } else if (tokens[start]?.kind === "identifier") {
+    names.push({ name: tokens[start].value, index: start });
+  }
+  return names;
+}
+function nextFunctionOpen(tokens, start) {
+  for (let index = start + 1;index < tokens.length; index++) {
+    const value = tokens[index]?.value;
+    if (value === "(")
+      return index;
+    if (value === "{" || value === ";" || value === "=>")
+      return -1;
+  }
+  return -1;
+}
+function nextFunctionBody(tokens, start) {
+  for (let index = start;index < tokens.length; index++) {
+    const value = tokens[index]?.value;
+    if (value === "{")
+      return index;
+    if (value === ";" || value === "=>")
+      return -1;
+  }
+  return -1;
+}
+function collectDeclarations(analysis) {
+  const { tokens } = analysis;
+  const declarationTokenIndexes = new Set;
+  for (let index = 0;index < tokens.length; index++) {
+    const token = tokens[index];
+    if (!token)
+      continue;
+    if (token.value === "import") {
+      if (tokens[index + 1]?.value === "type")
+        continue;
+      if (tokens[index + 1]?.value === "{") {
+        const close = matchingToken(tokens, index + 1, "{", "}");
+        for (let cursor = index + 2;cursor > 0 && cursor < close; cursor++) {
+          const imported = tokens[cursor];
+          if (imported?.kind !== "identifier")
+            continue;
+          if (imported.value === "type") {
+            while (cursor < close && tokens[cursor]?.value !== ",")
+              cursor++;
+            continue;
+          }
+          const local = tokens[cursor + 1]?.value === "as" ? tokens[cursor + 2] : imported;
+          if (local?.kind === "identifier") {
+            addDeclaration(analysis, local.value);
+            declarationTokenIndexes.add(tokens[cursor + 1]?.value === "as" ? cursor + 2 : cursor);
+          }
+          while (cursor < close && tokens[cursor]?.value !== ",")
+            cursor++;
+        }
+      } else if (tokens[index + 1]?.value === "*" && tokens[index + 2]?.value === "as") {
+        const local = tokens[index + 3];
+        if (local?.kind === "identifier") {
+          addDeclaration(analysis, local.value);
+          declarationTokenIndexes.add(index + 3);
+        }
+      } else if (tokens[index + 1]?.kind === "identifier") {
+        addDeclaration(analysis, tokens[index + 1].value);
+        declarationTokenIndexes.add(index + 1);
+      }
+    }
+    if (DECLARATION_KEYWORDS.has(token.value)) {
+      const start = index + 1;
+      const close = tokens[start]?.value === "{" ? matchingToken(tokens, start, "{", "}") : start + 1;
+      for (const item of declarationNames(tokens, start, close)) {
+        addDeclaration(analysis, item.name);
+        declarationTokenIndexes.add(item.index);
+        if (token.value === "var")
+          analysis.varDeclarationIndexes.add(item.index);
+      }
+    }
+    if ((token.value === "function" || token.value === "class") && tokens[index + 1]?.kind === "identifier") {
+      addDeclaration(analysis, tokens[index + 1].value);
+      declarationTokenIndexes.add(index + 1);
+    }
+    if (token.value === "function") {
+      const open2 = nextFunctionOpen(tokens, index);
+      if (open2 > index) {
+        const close = matchingToken(tokens, open2, "(", ")");
+        const body = close >= 0 ? nextFunctionBody(tokens, close + 1) : -1;
+        const bodyScope = body >= 0 ? analysis.scopeAtToken[body + 1] ?? analysis.scopeAtToken[body] : undefined;
+        for (let cursor = open2 + 1;cursor < close; cursor++) {
+          if (tokens[cursor]?.kind === "identifier" && tokens[cursor - 1]?.value !== ".") {
+            addDeclaration(analysis, tokens[cursor].value);
+            declarationTokenIndexes.add(cursor);
+            if (bodyScope !== undefined)
+              analysis.parameterScopes.set(cursor, bodyScope);
+            while (cursor < close && tokens[cursor]?.value !== ",")
+              cursor++;
+          }
+        }
+      }
+    }
+    if (token.value === "catch" && tokens[index + 1]?.value === "(" && tokens[index + 2]?.kind === "identifier") {
+      addDeclaration(analysis, tokens[index + 2].value);
+      declarationTokenIndexes.add(index + 2);
+    }
+    if (token.kind === "identifier" && tokens[index + 1]?.value === "=>") {
+      addDeclaration(analysis, token.value);
+      declarationTokenIndexes.add(index);
+      const body = nextFunctionBody(tokens, index + 2);
+      if (body >= 0)
+        analysis.parameterScopes.set(index, analysis.scopeAtToken[body + 1] ?? analysis.scopeAtToken[body]);
+    }
+    if (token.value === "=>") {
+      let close = index - 1;
+      while (close >= 0 && tokens[close]?.value !== ")")
+        close--;
+      let cursor = close - 1;
+      let depth = 1;
+      while (cursor >= 0 && depth > 0) {
+        if (tokens[cursor]?.value === ")")
+          depth++;
+        else if (tokens[cursor]?.value === "(")
+          depth--;
+        cursor--;
+      }
+      const body = nextFunctionBody(tokens, index + 1);
+      const bodyScope = body >= 0 ? analysis.scopeAtToken[body + 1] ?? analysis.scopeAtToken[body] : undefined;
+      for (cursor += 2;cursor < close; cursor++) {
+        if (tokens[cursor]?.kind === "identifier") {
+          addDeclaration(analysis, tokens[cursor].value);
+          declarationTokenIndexes.add(cursor);
+          if (bodyScope !== undefined)
+            analysis.parameterScopes.set(cursor, bodyScope);
+          while (cursor < close && tokens[cursor]?.value !== ",")
+            cursor++;
+        }
+      }
+    }
+  }
+  return declarationTokenIndexes;
+}
+function collectFacts(analysis) {
+  const { tokens } = analysis;
+  for (let index = 0;index < tokens.length; index++) {
+    if (tokens[index]?.value === "import" && tokens[index + 1]?.value !== "type") {
+      if (tokens[index + 1]?.value === "{") {
+        const close = matchingToken(tokens, index + 1, "{", "}");
+        const module2 = tokens[close + 1]?.value === "from" ? tokens[close + 2]?.value : null;
+        for (let cursor = index + 2;cursor > 0 && cursor < close; cursor++) {
+          const imported = tokens[cursor];
+          if (imported?.kind !== "identifier")
+            continue;
+          if (imported.value === "type") {
+            while (cursor < close && tokens[cursor]?.value !== ",")
+              cursor++;
+            continue;
+          }
+          const local2 = tokens[cursor + 1]?.value === "as" ? tokens[cursor + 2] : imported;
+          if (local2?.kind === "identifier") {
+            if (CHILD_PROCESS_MODULES.has(module2 ?? "") && imported.value === "exec") {
+              addFact(analysis, local2.value, "child-direct", tokens[cursor + 1]?.value === "as" ? cursor + 2 : cursor);
+            } else if (module2)
+              addFact(analysis, local2.value, "other-import", tokens[cursor + 1]?.value === "as" ? cursor + 2 : cursor);
+          }
+          while (cursor < close && tokens[cursor]?.value !== ",")
+            cursor++;
+        }
+      } else if (tokens[index + 1]?.value === "*" && tokens[index + 2]?.value === "as") {
+        const local2 = tokens[index + 3];
+        const module2 = tokens[index + 4]?.value === "from" ? tokens[index + 5]?.value : null;
+        if (local2?.kind === "identifier" && module2) {
+          addFact(analysis, local2.value, CHILD_PROCESS_MODULES.has(module2) ? "child-namespace" : "other-import", index + 3);
+          analysis.requireDerived.add(local2.value);
+          addScopedMarker(analysis.requireDerivedScopes, local2.value, declarationScope(analysis, index + 3));
+        }
+      } else if (tokens[index + 1]?.kind === "identifier" && tokens[index + 2]?.value === "=" && tokens[index + 3]?.value === "require") {
+        const module2 = moduleAtCall(tokens, index + 3, "require");
+        if (module2)
+          addFact(analysis, tokens[index + 1].value, CHILD_PROCESS_MODULES.has(module2) ? "child-namespace" : "other-import", index + 1);
+      } else if (tokens[index + 1]?.kind === "identifier" && tokens[index + 2]?.value === "from" && tokens[index + 3]?.kind === "string") {
+        const local2 = tokens[index + 1];
+        addFact(analysis, local2.value, CHILD_PROCESS_MODULES.has(tokens[index + 3].value) ? "child-namespace" : "other-import", index + 1);
+      }
+    }
+    if (!DECLARATION_KEYWORDS.has(tokens[index]?.value ?? ""))
+      continue;
+    const start = index + 1;
+    if (tokens[start]?.value === "{") {
+      const close = matchingToken(tokens, start, "{", "}");
+      const rhs2 = close + 1;
+      const module2 = tokens[rhs2]?.value === "=" ? moduleAtCall(tokens, rhs2 + 1, "require") : null;
+      const namespace = tokens[rhs2]?.value === "=" && tokens[rhs2 + 1]?.kind === "identifier" ? tokens[rhs2 + 1].value : null;
+      for (let cursor = start + 1;cursor < close; cursor++) {
+        const imported = tokens[cursor];
+        if (imported?.kind !== "identifier")
+          continue;
+        const local2 = tokens[cursor + 1]?.value === ":" ? tokens[cursor + 2] : imported;
+        if (local2?.kind === "identifier" && imported.value === "exec") {
+          if (module2 && CHILD_PROCESS_MODULES.has(module2)) {
+            addFact(analysis, local2.value, "child-direct", tokens[cursor + 1]?.value === ":" ? cursor + 2 : cursor);
+            analysis.requireDerived.add(local2.value);
+            addScopedMarker(analysis.requireDerivedScopes, local2.value, declarationScope(analysis, tokens[cursor + 1]?.value === ":" ? cursor + 2 : cursor));
+          } else if (namespace && hasUniqueFact(analysis, namespace, rhs2 + 1, "child-namespace")) {
+            addFact(analysis, local2.value, "child-direct", tokens[cursor + 1]?.value === ":" ? cursor + 2 : cursor);
+            if (hasScopedMarker(analysis.requireDerivedScopes, namespace, visibleDeclarationScope(analysis, namespace, rhs2 + 1))) {
+              analysis.requireDerived.add(local2.value);
+              addScopedMarker(analysis.requireDerivedScopes, local2.value, declarationScope(analysis, tokens[cursor + 1]?.value === ":" ? cursor + 2 : cursor));
+            }
+          }
+        }
+        while (cursor < close && tokens[cursor]?.value !== ",")
+          cursor++;
+      }
+      continue;
+    }
+    const local = tokens[start];
+    if (local?.kind !== "identifier" || tokens[start + 1]?.value !== "=")
+      continue;
+    const rhs = start + 2;
+    const module = moduleAtCall(tokens, rhs, "require");
+    if (module) {
+      addFact(analysis, local.value, CHILD_PROCESS_MODULES.has(module) ? "child-namespace" : "other-import", start);
+      analysis.requireDerived.add(local.value);
+      addScopedMarker(analysis.requireDerivedScopes, local.value, declarationScope(analysis, start));
+    } else if (tokens[rhs]?.value === "import" || tokens[rhs]?.value === "await" && tokens[rhs + 1]?.value === "import") {
+      const importIndex = tokens[rhs]?.value === "await" ? rhs + 1 : rhs;
+      const importedModule = moduleAtCall(tokens, importIndex, "import");
+      if (importedModule) {
+        addFact(analysis, local.value, CHILD_PROCESS_MODULES.has(importedModule) ? "child-namespace" : "other-import", start);
+      }
+    } else if (tokens[rhs]?.kind === "regex" || tokens[rhs]?.value === "new" && tokens[rhs + 1]?.value === "RegExp") {
+      addFact(analysis, local.value, "regex", start);
+    } else if (tokens[rhs]?.kind === "identifier" && (tokens[rhs + 1]?.value === "." || tokens[rhs + 1]?.value === "?.") && tokens[rhs + 2]?.value === "exec" && hasUniqueFact(analysis, tokens[rhs].value, rhs, "child-namespace")) {
+      addFact(analysis, local.value, "child-direct", start);
+      if (hasScopedMarker(analysis.requireDerivedScopes, tokens[rhs].value, visibleDeclarationScope(analysis, tokens[rhs].value, rhs))) {
+        analysis.requireDerived.add(local.value);
+        addScopedMarker(analysis.requireDerivedScopes, local.value, declarationScope(analysis, start));
+      }
+    }
+  }
+}
+function hasUniqueFact(analysis, name, callIndex, fact) {
+  const scope = visibleDeclarationScope(analysis, name, callIndex);
+  const facts = scope === null ? undefined : analysis.factScopes.get(name)?.get(scope);
+  return scope !== null && analysis.declarationScopes.get(name)?.get(scope) === 1 && !hasScopedMarker(analysis.reassignedScopes, name, scope) && facts?.size === 1 && facts.has(fact);
+}
+function buildAnalysis(context) {
+  const lineStarts = [0];
+  for (let index = 0;index < context.content.length; index++) {
+    if (context.content[index] === `
+`)
+      lineStarts.push(index + 1);
+  }
+  if (context.content.length > MAX_ANALYSIS_BYTES) {
+    return {
+      tokens: [],
+      lineStarts,
+      scopeAtToken: [],
+      scopeParents: [-1],
+      scopeIsFunction: [true],
+      declarations: new Map,
+      declarationScopes: new Map,
+      facts: new Map,
+      factScopes: new Map,
+      reassigned: new Set,
+      reassignedScopes: new Map,
+      mutatedMembers: new Set,
+      mutatedMemberScopes: new Map,
+      requireDerived: new Set,
+      requireDerivedScopes: new Map,
+      parameterScopes: new Map,
+      varDeclarationIndexes: new Set,
+      oversizedOrMalformed: true
+    };
+  }
+  const tokenized = tokenize2(context.content);
+  const scopes = buildScopes(tokenized.tokens);
+  const analysis = {
+    tokens: tokenized.tokens,
+    lineStarts,
+    scopeAtToken: scopes.scopeAtToken,
+    scopeParents: scopes.scopeParents,
+    scopeIsFunction: scopes.scopeIsFunction,
+    declarations: new Map,
+    declarationScopes: new Map,
+    facts: new Map,
+    factScopes: new Map,
+    reassigned: new Set,
+    reassignedScopes: new Map,
+    mutatedMembers: new Set,
+    mutatedMemberScopes: new Map,
+    requireDerived: new Set,
+    requireDerivedScopes: new Map,
+    parameterScopes: new Map,
+    varDeclarationIndexes: new Set,
+    oversizedOrMalformed: tokenized.malformed
+  };
+  const declarationIndexes = collectDeclarations(analysis);
+  for (const index of declarationIndexes) {
+    const name = analysis.tokens[index]?.value;
+    if (!name)
+      continue;
+    const scope = declarationScope(analysis, index);
+    const counts = analysis.declarationScopes.get(name) ?? new Map;
+    counts.set(scope, (counts.get(scope) ?? 0) + 1);
+    analysis.declarationScopes.set(name, counts);
+  }
+  collectFacts(analysis);
+  for (let index = 0;index < analysis.tokens.length; index++) {
+    const token = analysis.tokens[index];
+    if (token?.kind !== "identifier" || declarationIndexes.has(index))
+      continue;
+    const previous = analysis.tokens[index - 1]?.value;
+    if (previous === "." || previous === "?.") {
+      if (token.value === "exec" && (ASSIGNMENTS.has(analysis.tokens[index + 1]?.value ?? "") || analysis.tokens[index - 3]?.value === "delete")) {
+        const receiver = analysis.tokens[index - 2];
+        if (receiver?.kind === "identifier") {
+          analysis.mutatedMembers.add(receiver.value);
+          addScopedMarker(analysis.mutatedMemberScopes, receiver.value, visibleDeclarationScope(analysis, receiver.value, index - 2) ?? analysis.scopeAtToken[index - 2] ?? 0);
+        }
+      }
+      continue;
+    }
+    if (ASSIGNMENTS.has(analysis.tokens[index + 1]?.value ?? "") || previous === "++" || previous === "--" || analysis.tokens[index + 1]?.value === "++" || analysis.tokens[index + 1]?.value === "--") {
+      analysis.reassigned.add(token.value);
+      addScopedMarker(analysis.reassignedScopes, token.value, visibleDeclarationScope(analysis, token.value, index) ?? analysis.scopeAtToken[index] ?? 0);
+    }
+  }
+  return analysis;
+}
+function getAnalysis(context) {
+  let analysis = analysisByContext.get(context);
+  if (!analysis) {
+    analysis = buildAnalysis(context);
+    analysisByContext.set(context, analysis);
+  }
+  return analysis;
+}
+function tokenIndexAtOffset(tokens, offset) {
+  let low = 0;
+  let high = tokens.length - 1;
+  while (low <= high) {
+    const mid = low + high >>> 1;
+    const token = tokens[mid];
+    if (offset < token.start)
+      high = mid - 1;
+    else if (offset >= token.end)
+      low = mid + 1;
+    else
+      return mid;
+  }
+  return -1;
+}
+function directRequireBefore(tokens, dotIndex) {
+  if (tokens[dotIndex - 1]?.value !== ")")
+    return false;
+  for (let start = dotIndex - 2;start >= 0 && start >= dotIndex - 5; start--) {
+    const module = moduleAtCall(tokens, start, "require");
+    if (module && start + 4 === dotIndex)
+      return CHILD_PROCESS_MODULES.has(module);
+  }
+  return false;
+}
+function isTransparentWrapperCall(tokens, openIndex) {
+  return tokens[openIndex - 1]?.kind === "identifier" ? tokens[openIndex - 1].value === "promisify" : false;
+}
+function shouldSkipTrailingClose(tokens, nameIndex, closeIndex) {
+  const openIndex = pairedToken(tokens, closeIndex);
+  if (openIndex < 0 || openIndex > nameIndex)
+    return false;
+  const beforeOpen = tokens[openIndex - 1];
+  if (!beforeOpen || beforeOpen.kind !== "identifier" && beforeOpen.kind !== "string" && beforeOpen.kind !== "regex" && beforeOpen.value !== ")" && beforeOpen.value !== "]") {
+    return true;
+  }
+  return isTransparentWrapperCall(tokens, openIndex);
+}
+function parseCallee(tokens, nameIndex) {
+  const nameToken = tokens[nameIndex];
+  if (!nameToken)
+    return null;
+  let cursor = nameIndex + 1;
+  if (nameToken.kind === "string") {
+    if (tokens[nameIndex - 1]?.value !== "[" || tokens[nameIndex + 1]?.value !== "]")
+      return null;
+    cursor = nameIndex + 2;
+  }
+  while (tokens[cursor]?.value === ")" && shouldSkipTrailingClose(tokens, nameIndex, cursor)) {
+    cursor++;
+  }
+  if (tokens[cursor]?.value === "?.")
+    cursor++;
+  if (tokens[cursor]?.value !== "(")
+    return null;
+  const callee = { name: nameToken.value, openParen: cursor };
+  const accessIndex = nameToken.kind === "string" ? nameIndex - 1 : nameIndex - 1;
+  if (nameToken.kind === "string") {
+    const receiver = tokens[nameIndex - 2];
+    if (receiver?.kind === "identifier") {
+      callee.receiver = receiver.value;
+      callee.receiverKind = "identifier";
+    } else if (receiver?.kind === "regex")
+      callee.receiverKind = "regex";
+    return callee;
+  }
+  if (tokens[accessIndex]?.value === "." || tokens[accessIndex]?.value === "?.") {
+    const receiver = tokens[accessIndex - 1];
+    if (receiver?.kind === "identifier") {
+      callee.receiver = receiver.value;
+      callee.receiverKind = "identifier";
+    } else if (receiver?.kind === "regex")
+      callee.receiverKind = "regex";
+    else if (directRequireBefore(tokens, accessIndex))
+      callee.receiverKind = "direct-child-require";
+  }
+  return callee;
+}
+function bindingDisposition(analysis, name, confirmedFact, callIndex) {
+  const visibleScope = visibleDeclarationScope(analysis, name, callIndex);
+  if (visibleScope === null)
+    return "ambiguous";
+  const declarationCount = analysis.declarationScopes.get(name)?.get(visibleScope) ?? 0;
+  const facts = analysis.factScopes.get(name)?.get(visibleScope);
+  if (hasScopedMarker(analysis.requireDerivedScopes, name, visibleScope) && globalDisposition(analysis, "require", callIndex) !== "confirmed") {
+    return "ambiguous";
+  }
+  if (declarationCount !== 1 || hasScopedMarker(analysis.reassignedScopes, name, visibleScope) || !facts || facts.size !== 1) {
+    return "ambiguous";
+  }
+  if (facts.has(confirmedFact))
+    return "confirmed";
+  if (facts.has("other-import") || facts.has("regex"))
+    return "safe";
+  return "ambiguous";
+}
+function globalDisposition(analysis, name, callIndex) {
+  const visibleScope = visibleDeclarationScope(analysis, name, callIndex);
+  if (visibleScope === null && !hasVisibleMarker(analysis, analysis.reassignedScopes, name, callIndex)) {
+    return "confirmed";
+  }
+  const facts = visibleScope === null ? undefined : analysis.factScopes.get(name)?.get(visibleScope);
+  if (facts?.size === 1 && facts.has("other-import") && visibleScope !== null && analysis.declarationScopes.get(name)?.get(visibleScope) === 1 && !hasScopedMarker(analysis.reassignedScopes, name, visibleScope)) {
+    return "safe";
+  }
+  return "ambiguous";
+}
+function firstArgument(tokens, openParen) {
+  return tokens[openParen + 1];
+}
+function oversizedCandidate(match, family) {
+  const expected = family === "exec" ? ["exec"] : family === "eval" ? ["eval"] : family === "function-constructor" ? ["Function"] : family === "timer-string" ? ["setTimeout", "setInterval"] : family === "document-write" ? ["write"] : ["addEventListener"];
+  return expected.includes(match.text) ? "ambiguous" : "none";
+}
+function classifyJavascriptCallUncached(match, context, family) {
+  const analysis = getAnalysis(context);
+  if (analysis.oversizedOrMalformed)
+    return oversizedCandidate(match, family);
+  const offset = (analysis.lineStarts[match.line - 1] ?? 0) + match.column - 1;
+  const tokenIndex = tokenIndexAtOffset(analysis.tokens, offset);
+  if (tokenIndex < 0)
+    return "none";
+  const callee = parseCallee(analysis.tokens, tokenIndex);
+  if (!callee)
+    return "none";
+  const argument = firstArgument(analysis.tokens, callee.openParen);
+  switch (family) {
+    case "exec":
+      if (!argument || argument.value === ")")
+        return "none";
+      if (callee.receiverKind === "regex")
+        return "safe";
+      if (callee.receiverKind === "direct-child-require") {
+        if (callee.name !== "exec")
+          return "none";
+        return globalDisposition(analysis, "require", tokenIndex) === "confirmed" ? "confirmed" : "ambiguous";
+      }
+      if (callee.receiver) {
+        if (callee.name !== "exec")
+          return "none";
+        if (hasScopedMarker(analysis.mutatedMemberScopes, callee.receiver, visibleDeclarationScope(analysis, callee.receiver, tokenIndex))) {
+          return "ambiguous";
+        }
+        return bindingDisposition(analysis, callee.receiver, "child-namespace", tokenIndex);
+      }
+      if (callee.name === "exec" || factsAtVisibleScope(analysis, callee.name, tokenIndex)?.has("child-direct")) {
+        return bindingDisposition(analysis, callee.name, "child-direct", tokenIndex);
+      }
+      return "none";
+    case "eval":
+      if (callee.name !== "eval")
+        return "none";
+      if (callee.receiver) {
+        if (["globalThis", "window", "self"].includes(callee.receiver)) {
+          return globalDisposition(analysis, callee.receiver, tokenIndex);
+        }
+        return bindingDisposition(analysis, callee.receiver, "child-namespace", tokenIndex) === "safe" ? "safe" : "ambiguous";
+      }
+      return globalDisposition(analysis, "eval", tokenIndex);
+    case "function-constructor":
+      if (callee.name !== "Function" || analysis.tokens[tokenIndex - 1]?.value !== "new")
+        return "none";
+      return globalDisposition(analysis, "Function", tokenIndex);
+    case "timer-string":
+      if (!["setTimeout", "setInterval"].includes(callee.name) || !argument || !["string", "template"].includes(argument.kind))
+        return "none";
+      if (callee.receiver) {
+        if (["globalThis", "window", "self"].includes(callee.receiver))
+          return globalDisposition(analysis, callee.receiver, tokenIndex);
+        return bindingDisposition(analysis, callee.receiver, "child-namespace", tokenIndex) === "safe" ? "safe" : "ambiguous";
+      }
+      return globalDisposition(analysis, callee.name, tokenIndex);
+    case "document-write":
+      if (callee.name !== "write" || callee.receiver !== "document")
+        return "none";
+      return globalDisposition(analysis, "document", tokenIndex) === "confirmed" ? "confirmed" : "ambiguous";
+    case "postmessage":
+      if (callee.name !== "addEventListener" || argument?.kind !== "string" || argument.value !== "message")
+        return "none";
+      if (callee.receiver) {
+        if (["globalThis", "window", "self"].includes(callee.receiver))
+          return globalDisposition(analysis, callee.receiver, tokenIndex);
+        return bindingDisposition(analysis, callee.receiver, "child-namespace", tokenIndex) === "safe" ? "safe" : "ambiguous";
+      }
+      return globalDisposition(analysis, "addEventListener", tokenIndex);
+  }
+}
+function classifyJavascriptCall(match, context, family) {
+  const key = `${family}:${match.line}:${match.column}:${match.text}`;
+  const cache2 = dispositionByContext.get(context) ?? new Map;
+  const cached = cache2.get(key);
+  if (cached !== undefined)
+    return cached;
+  const disposition = classifyJavascriptCallUncached(match, context, family);
+  cache2.set(key, disposition);
+  dispositionByContext.set(context, cache2);
+  return disposition;
+}
+
 // src/sast/rules/javascript.ts
+function hasDisposition(family, disposition) {
+  return (match, context) => classifyJavascriptCall(match, context, family) === disposition;
+}
 var javascriptRules = [
   {
     id: "sast/js-eval",
@@ -41971,7 +42873,18 @@ var javascriptRules = [
     languages: ["javascript", "typescript"],
     description: "Dangerous use of eval() detected - allows arbitrary code execution",
     remediation: "Avoid using eval(). If you must parse dynamic content, use JSON.parse() or a proper parser instead.",
-    pattern: /\beval\s*\(/
+    pattern: /\beval\b/,
+    validate: hasDisposition("eval", "confirmed")
+  },
+  {
+    id: "sast/js-eval-review",
+    name: "Unresolved eval-like call",
+    severity: "low",
+    languages: ["javascript", "typescript"],
+    description: "Unresolved eval-like call requires manual review",
+    remediation: "Verify the callee binding and avoid dynamic code evaluation.",
+    pattern: /\beval\b/,
+    validate: hasDisposition("eval", "ambiguous")
   },
   {
     id: "sast/js-dangerous-function",
@@ -41980,7 +42893,18 @@ var javascriptRules = [
     languages: ["javascript", "typescript"],
     description: "Dangerous use of new Function() detected - allows arbitrary code execution",
     remediation: "Avoid using new Function(). Use a safer alternative like JSON.parse() or a proper expression parser.",
-    pattern: /\bnew\s+Function\s*\(/
+    pattern: /\bFunction\b/,
+    validate: hasDisposition("function-constructor", "confirmed")
+  },
+  {
+    id: "sast/js-function-constructor-review",
+    name: "Unresolved Function-like constructor",
+    severity: "low",
+    languages: ["javascript", "typescript"],
+    description: "Unresolved Function-like constructor requires manual review",
+    remediation: "Verify the constructor binding and avoid dynamic code construction.",
+    pattern: /\bFunction\b/,
+    validate: hasDisposition("function-constructor", "ambiguous")
   },
   {
     id: "sast/js-command-injection",
@@ -41989,10 +42913,18 @@ var javascriptRules = [
     languages: ["javascript", "typescript"],
     description: "Potential command injection via child_process.exec() with unsanitized input",
     remediation: "Never pass user input directly to exec(). Use execFile() with arguments array or sanitize input thoroughly.",
-    pattern: /exec\s*\(\s*(?:[`'"]|\w)/,
-    validate: (_match, _context) => {
-      return true;
-    }
+    pattern: /[A-Za-z_$][\w$]*/,
+    validate: hasDisposition("exec", "confirmed")
+  },
+  {
+    id: "sast/js-command-exec-review",
+    name: "Unresolved exec-like call",
+    severity: "low",
+    languages: ["javascript", "typescript"],
+    description: "Unresolved exec-like call requires manual review",
+    remediation: "Verify whether the callee reaches child_process; prefer execFile() with an arguments array.",
+    pattern: /[A-Za-z_$][\w$]*/,
+    validate: hasDisposition("exec", "ambiguous")
   },
   {
     id: "sast/js-set-timeout-string",
@@ -42001,7 +42933,18 @@ var javascriptRules = [
     languages: ["javascript", "typescript"],
     description: "setTimeout/setInterval called with string argument - similar to eval()",
     remediation: 'Use function references instead of strings: setTimeout(() => ..., 1000) instead of setTimeout("...", 1000)',
-    pattern: /(?:setTimeout|setInterval)\s*\(\s*['"`]/
+    pattern: /\b(?:setTimeout|setInterval)\b/,
+    validate: hasDisposition("timer-string", "confirmed")
+  },
+  {
+    id: "sast/js-timer-string-review",
+    name: "Unresolved string timer call",
+    severity: "low",
+    languages: ["javascript", "typescript"],
+    description: "Unresolved string timer call requires manual review",
+    remediation: "Verify the timer binding and replace string callbacks with functions.",
+    pattern: /\b(?:setTimeout|setInterval)\b/,
+    validate: hasDisposition("timer-string", "ambiguous")
   },
   {
     id: "sast/js-innerhtml",
@@ -42019,7 +42962,18 @@ var javascriptRules = [
     languages: ["javascript", "typescript"],
     description: "document.write() can introduce XSS vulnerabilities",
     remediation: "Use DOM manipulation methods (createElement, appendChild, textContent) instead.",
-    pattern: /document\.write\s*\(/
+    pattern: /\bwrite\b/,
+    validate: hasDisposition("document-write", "confirmed")
+  },
+  {
+    id: "sast/js-document-write-review",
+    name: "Unresolved document.write-like call",
+    severity: "low",
+    languages: ["javascript", "typescript"],
+    description: "Unresolved document.write-like call requires manual review",
+    remediation: "Verify the document binding and use safe DOM construction.",
+    pattern: /\bwrite\b/,
+    validate: hasDisposition("document-write", "ambiguous")
   },
   {
     id: "sast/js-postmessage",
@@ -42028,7 +42982,18 @@ var javascriptRules = [
     languages: ["javascript", "typescript"],
     description: "postMessage event listener without origin validation",
     remediation: "Always validate the origin in postMessage event handlers: event.origin === expectedOrigin",
-    pattern: /addEventListener\s*\(\s*['"]message['"]/
+    pattern: /\baddEventListener\b/,
+    validate: hasDisposition("postmessage", "confirmed")
+  },
+  {
+    id: "sast/js-postmessage-review",
+    name: "Unresolved message-listener call",
+    severity: "low",
+    languages: ["javascript", "typescript"],
+    description: "Unresolved message-listener call requires manual review",
+    remediation: "Verify the event target and validate message origins where applicable.",
+    pattern: /\baddEventListener\b/,
+    validate: hasDisposition("postmessage", "ambiguous")
   },
   {
     id: "sast/js-hardcoded-secret",
@@ -42338,23 +43303,23 @@ function executeRulesSync(filePath, content, language) {
   const findings = [];
   const normalizedLang = language.toLowerCase();
   const rules = getRulesForLanguage(normalizedLang);
+  const lines = content.split(`
+`);
+  const context = {
+    filePath,
+    content,
+    language: normalizedLang
+  };
   for (const rule of rules) {
     if (!rule.pattern)
       continue;
     const matches = findPatternMatches(content, rule.pattern);
     for (const match of matches) {
       if (rule.validate) {
-        const context = {
-          filePath,
-          content,
-          language: normalizedLang
-        };
         if (!rule.validate(match, context)) {
           continue;
         }
       }
-      const lines = content.split(`
-`);
       const excerpt = lines[match.line - 1]?.trim() || "";
       findings.push({
         rule_id: rule.id,
@@ -45161,9 +46126,9 @@ import { createHash as createHash19, createHmac, randomBytes, randomUUID as rand
 import {
   chmod,
   copyFile as copyFile2,
-  mkdir as mkdir16,
+  mkdir as mkdir14,
   readdir as readdir5,
-  readFile as readFile18,
+  readFile as readFile17,
   realpath as realpath4,
   rm as rm2,
   stat as stat6,
@@ -45958,10 +46923,10 @@ function emitMaintenanceTelemetry(payload) {
 }
 var _internals60 = {
   emit,
-  readFile: readFile18,
+  readFile: readFile17,
   writeFile: writeFile11,
   copyFile: copyFile2,
-  mkdir: mkdir16,
+  mkdir: mkdir14,
   stat: stat6,
   readdir: readdir5,
   resolveHiveDataDir,
@@ -46283,7 +47248,7 @@ init_schema();
 init_logger();
 import { randomUUID as randomUUID10 } from "crypto";
 import { existsSync as existsSync41, readFileSync as readFileSync32 } from "fs";
-import { mkdir as mkdir17, readFile as readFile19, writeFile as writeFile12 } from "fs/promises";
+import { mkdir as mkdir15, readFile as readFile18, writeFile as writeFile12 } from "fs/promises";
 import * as os9 from "os";
 import * as path68 from "path";
 init_knowledge_types();
@@ -46349,8 +47314,8 @@ var _internals62 = {
   resolveLegacyHiveKnowledgePath,
   existsSync: existsSync41,
   readFileSync: readFileSync32,
-  readFile: readFile19,
-  mkdir: mkdir17,
+  readFile: readFile18,
+  mkdir: mkdir15,
   writeFile: writeFile12
 };
 async function migrateContextToKnowledge(directory, config) {
@@ -46375,7 +47340,7 @@ async function migrateContextToKnowledge(directory, config) {
       skippedReason: "no-context-file"
     };
   }
-  const contextContent = await readFile19(contextPath, "utf-8");
+  const contextContent = await readFile18(contextPath, "utf-8");
   if (contextContent.trim().length === 0) {
     return {
       migrated: false,
@@ -47164,14 +48129,14 @@ var _internals63 = {
 };
 
 // src/commands/link.ts
-import { mkdir as mkdir19, writeFile as writeFile13 } from "fs/promises";
+import { mkdir as mkdir17, writeFile as writeFile13 } from "fs/promises";
 import * as path70 from "path";
 init_schema();
 
 // src/knowledge/family-migration.ts
 var import_proper_lockfile7 = __toESM(require_proper_lockfile(), 1);
 import { existsSync as existsSync42, readFileSync as readFileSync33 } from "fs";
-import { mkdir as mkdir18 } from "fs/promises";
+import { mkdir as mkdir16 } from "fs/promises";
 import * as path69 from "path";
 
 // src/knowledge/family-manifest.ts
@@ -47454,7 +48419,7 @@ async function snapshotSourceFamily(storeDir) {
   const snapshot = {};
   let release = null;
   try {
-    await mkdir18(storeDir, { recursive: true });
+    await mkdir16(storeDir, { recursive: true });
   } catch {}
   try {
     release = await import_proper_lockfile7.default.lock(storeDir, {
@@ -47473,7 +48438,7 @@ async function snapshotSourceFamily(storeDir) {
   return snapshot;
 }
 async function migrateKnowledgeFamily(destinationDir, sourceDir) {
-  await mkdir18(destinationDir, { recursive: true });
+  await mkdir16(destinationDir, { recursive: true });
   let destRelease = null;
   try {
     destRelease = await import_proper_lockfile7.default.lock(destinationDir, {
@@ -47623,7 +48588,7 @@ ${formatStatus(directory)}`;
     const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
     const config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     const fingerprint = cohortConfigFingerprint(buildConfigFingerprintInput(config));
-    await mkdir19(linkDir, { recursive: true });
+    await mkdir17(linkDir, { recursive: true });
     await writeFile13(path70.join(linkDir, "cohort-config.json"), JSON.stringify({ fingerprint, updated_at: new Date().toISOString() }, null, 2), "utf-8");
   } catch {}
   const relinkNote = existing ? `
@@ -52347,7 +53312,7 @@ function readDeadAnchorMemoryIds(directory) {
   return new Set(Array.isArray(digest?.deadAnchorMemoryIds) ? digest.deadAnchorMemoryIds.filter((value) => typeof value === "string") : []);
 }
 // src/memory/consolidation-log.ts
-import { appendFile as appendFile9, mkdir as mkdir21, readFile as readFile23 } from "fs/promises";
+import { appendFile as appendFile4, mkdir as mkdir19, readFile as readFile22 } from "fs/promises";
 import * as path76 from "path";
 var LOG_RELATIVE_PATH = path76.join("memory", "consolidation-log.jsonl");
 var LOG_BASENAME = "consolidation-log.jsonl";
@@ -52364,7 +53329,7 @@ async function readConsolidationLog(target) {
   const filePath = resolveLogPath2(target);
   let raw;
   try {
-    raw = await readFile23(filePath, "utf-8");
+    raw = await readFile22(filePath, "utf-8");
   } catch {
     return [];
   }
@@ -53011,14 +53976,14 @@ function truncate2(value, maxLength) {
 }
 
 // src/commands/memory-link.ts
-import { mkdir as mkdir23, writeFile as writeFile15 } from "fs/promises";
+import { mkdir as mkdir21, writeFile as writeFile15 } from "fs/promises";
 import * as path79 from "path";
 init_schema();
 
 // src/memory/memory-family-migration.ts
 var import_proper_lockfile9 = __toESM(require_proper_lockfile(), 1);
 import { copyFileSync as copyFileSync4, existsSync as existsSync45, readFileSync as readFileSync35, unlinkSync as unlinkSync13 } from "fs";
-import { mkdir as mkdir22, rename as rename8 } from "fs/promises";
+import { mkdir as mkdir20, rename as rename8 } from "fs/promises";
 import * as path78 from "path";
 init_logger();
 
@@ -53310,7 +54275,7 @@ async function countRowsSafe(dbPath) {
 async function migrateMemoryFamily(destRoot, sourceRoot) {
   const destStoragePath = rootStoragePath(destRoot);
   const sourceStoragePath = rootStoragePath(sourceRoot);
-  await mkdir22(destStoragePath, { recursive: true });
+  await mkdir20(destStoragePath, { recursive: true });
   let destRelease = null;
   try {
     destRelease = await import_proper_lockfile9.default.lock(destStoragePath, {
@@ -53357,7 +54322,7 @@ async function migrateMemoryFamily(destRoot, sourceRoot) {
     }
     if (isCohortRoot(sourceRoot)) {
       const backupDir = path78.join(destStoragePath, "backups");
-      await mkdir22(backupDir, { recursive: true });
+      await mkdir20(backupDir, { recursive: true });
       const stamp = new Date().toISOString().replace(/[:.]/g, "-");
       const sourceDbPath = path78.join(sourceStoragePath, "memory.db");
       if (existsSync45(sourceDbPath)) {
@@ -53493,7 +54458,7 @@ ${formatStatus2(directory)}`;
     return `\u274C Failed to migrate the memory family into the cohort store: ${error2 instanceof Error ? error2.message : String(error2)}`;
   }
   try {
-    await mkdir23(cohortRoot.cohortRoot, { recursive: true });
+    await mkdir21(cohortRoot.cohortRoot, { recursive: true });
     const fingerprintInput = buildMemoryCohortFingerprintInput(memoryConfig);
     const fingerprint = computeMemoryCohortFingerprint(fingerprintInput);
     await writeFile15(path79.join(cohortRoot.cohortRoot, "memory-cohort-config.json"), JSON.stringify({
@@ -58034,7 +58999,7 @@ function getTestFilesFromConvention(sourceFiles, workingDir = process.cwd()) {
     const absoluteFile = resolveWorkspacePath(file, workingDir);
     const relativeFile = path85.relative(workingDir, absoluteFile);
     const basename20 = path85.basename(absoluteFile);
-    const dirname38 = path85.dirname(absoluteFile);
+    const dirname36 = path85.dirname(absoluteFile);
     const preferRelativeOutput = !path85.isAbsolute(file);
     if (isConventionTestFilePath(relativeFile) || isConventionTestFilePath(file)) {
       dedupePush(testFiles, toWorkspaceOutputPath(absoluteFile, workingDir, preferRelativeOutput));
@@ -58050,7 +59015,7 @@ function getTestFilesFromConvention(sourceFiles, workingDir = process.cwd()) {
     const colocatedCandidates = [
       ...genericTestNames,
       ...languageSpecificTestNames
-    ].map((candidateName) => path85.join(dirname38, candidateName));
+    ].map((candidateName) => path85.join(dirname36, candidateName));
     const testDirectoryNames = [
       basename20,
       ...genericTestNames,
@@ -58059,7 +59024,7 @@ function getTestFilesFromConvention(sourceFiles, workingDir = process.cwd()) {
     const repoLevelDirectories = getRepoLevelCandidateDirectories(workingDir, relativeFile, ext);
     const possibleTestFiles = [
       ...colocatedCandidates,
-      ...TEST_DIRECTORY_NAMES.flatMap((dirName) => testDirectoryNames.map((candidateName) => path85.join(dirname38, dirName, candidateName))),
+      ...TEST_DIRECTORY_NAMES.flatMap((dirName) => testDirectoryNames.map((candidateName) => path85.join(dirname36, dirName, candidateName))),
       ...repoLevelDirectories.flatMap((candidateDir) => testDirectoryNames.map((candidateName) => path85.join(candidateDir, candidateName)))
     ];
     for (const testFile of possibleTestFiles) {
@@ -60636,34 +61601,17 @@ async function handleQaGatesCommand(directory, args, sessionID) {
 }
 
 // src/workflow/stage-a-repair.ts
-import { appendFile as appendFile10, mkdir as mkdir24, readdir as readdir8 } from "fs/promises";
-import { dirname as dirname38 } from "path";
+import { readdir as readdir8 } from "fs/promises";
 init_logger();
 var MAX_STAGE_A_REPAIR_SCAN = 200;
-var RETRYABLE_EVENT_CODES = new Set(["EBUSY", "EPERM"]);
 async function appendStageARepairEvent(directory, payload) {
-  const line = `${JSON.stringify({
-    type: "stage_a_repair",
-    timestamp: new Date().toISOString(),
-    ...payload
-  })}
-`;
   try {
-    const eventsPath = validateSwarmPath(directory, "events.jsonl");
-    await mkdir24(dirname38(eventsPath), { recursive: true });
-    await appendFile10(eventsPath, line, "utf-8");
+    appendCoreEventSync(directory, {
+      type: "stage_a_repair",
+      timestamp: new Date().toISOString(),
+      ...payload
+    });
   } catch (error2) {
-    const code = error2.code;
-    if (code && RETRYABLE_EVENT_CODES.has(code)) {
-      try {
-        const eventsPath = validateSwarmPath(directory, "events.jsonl");
-        await appendFile10(eventsPath, line, "utf-8");
-        return;
-      } catch (retryError) {
-        criticalWarn(`[stage-a-repair] audit event write failed after retry: ${retryError instanceof Error ? retryError.message : String(retryError)}`);
-        return;
-      }
-    }
     criticalWarn(`[stage-a-repair] audit event write failed: ${error2 instanceof Error ? error2.message : String(error2)}`);
   }
 }
@@ -61738,6 +62686,7 @@ async function handleResetCommand(directory, args) {
     "plan-export/SWARM_PLAN.json",
     "checkpoints.json",
     "events.jsonl",
+    "events-authority-index.json",
     "run-memory.jsonl",
     "reproduction.json",
     "issue-publication.json",
@@ -66216,7 +67165,6 @@ async function restoreGitCheckpoint(directory, selected) {
   if (parsed.success !== true) {
     return `Error: ${parsed.error || `Failed to restore checkpoint "${selected.label}"`}`;
   }
-  const eventsPath = validateSwarmPath(directory, "events.jsonl");
   const rollbackEvent = {
     type: "rollback",
     label: selected.label,
@@ -66225,8 +67173,7 @@ async function restoreGitCheckpoint(directory, selected) {
     source: "checkpoints.json"
   };
   try {
-    fs48.appendFileSync(eventsPath, `${JSON.stringify(rollbackEvent)}
-`);
+    appendCoreEventSync(directory, rollbackEvent);
   } catch (error2) {
     log("Failed to write rollback event:", error2 instanceof Error ? error2.message : String(error2));
   }
@@ -66373,7 +67320,6 @@ async function handleRollbackCommand(directory, args) {
 `);
     }
   }
-  const eventsPath = validateSwarmPath(directory, "events.jsonl");
   const rollbackEvent = {
     type: "rollback",
     phase: targetPhase,
@@ -66381,8 +67327,7 @@ async function handleRollbackCommand(directory, args) {
     timestamp: new Date().toISOString()
   };
   try {
-    fs48.appendFileSync(eventsPath, `${JSON.stringify(rollbackEvent)}
-`);
+    appendCoreEventSync(directory, rollbackEvent);
   } catch (error2) {
     log("Failed to write rollback event:", error2 instanceof Error ? error2.message : String(error2));
   }
@@ -68374,7 +69319,7 @@ async function runValidationWithTransientRetry(input, candidateContent, baseline
       if (!input.dispatcher) {
         throw new Error("no evaluation dispatcher available (cannot run validation)");
       }
-      const { createModelEvaluationExecutor: createModelEvaluationExecutor2 } = await import("./runner-rk26nk58.js");
+      const { createModelEvaluationExecutor: createModelEvaluationExecutor2 } = await import("./runner-9mnkfjw7.js");
       const executor = createModelEvaluationExecutor2(input.dispatcher, input.sessionId);
       const result = await _internals95.evaluateCandidateV1({
         projectRoot: input.directory,
@@ -68890,7 +69835,7 @@ async function handleSpecifyCommand(_directory, args) {
 
 // src/services/status-service.ts
 import * as fsSync3 from "fs";
-import { readFile as readFile25 } from "fs/promises";
+import { readFile as readFile24 } from "fs/promises";
 import * as path109 from "path";
 init_loader();
 init_schema();
@@ -69931,7 +70876,7 @@ async function safeLineCount(filePath) {
   try {
     if (!fsSync3.existsSync(filePath))
       return 0;
-    const content = await readFile25(filePath, "utf-8");
+    const content = await readFile24(filePath, "utf-8");
     let n = 0;
     for (const line of content.split(`
 `)) {
@@ -70409,7 +71354,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-rzzwem6x.js");
+    const { buildHelpText } = await import("./index-ka2vav7t.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -70418,7 +71363,7 @@ async function handleHelpCommand(ctx) {
     return _internals98.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals98.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-rzzwem6x.js");
+  const { buildHelpText: fullHelp } = await import("./index-ka2vav7t.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -70598,7 +71543,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-2n3ahs0m.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-nynjhbzk.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -70608,7 +71553,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail reset": {
     handler: async (ctx) => {
-      const { handleGuardrailReset } = await import("./guardrail-reset-be3sx0am.js");
+      const { handleGuardrailReset } = await import("./guardrail-reset-hsfd5ykq.js");
       return handleGuardrailReset(ctx.args, ctx.sessionID);
     },
     description: "Reset one exact active invocation/action circuit after repair",
@@ -70617,7 +71562,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-2n3ahs0m.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-nynjhbzk.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -70627,7 +71572,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-reset": {
     handler: async (ctx) => {
-      const { handleGuardrailReset } = await import("./guardrail-reset-be3sx0am.js");
+      const { handleGuardrailReset } = await import("./guardrail-reset-hsfd5ykq.js");
       return handleGuardrailReset(ctx.args, ctx.sessionID);
     },
     description: "Reset one exact active invocation/action circuit after repair",
@@ -70637,7 +71582,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-bmxrb3r2.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-6bktj08e.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -75872,16 +76817,14 @@ async function forceRecordPlanCriticApproval(directory, sessionID, options = {})
     payloadHashOverride: computePlanStructureHash(plan)
   });
   try {
-    const eventsPath = validateSwarmPath(directory, "events.jsonl");
-    await fs52.promises.appendFile(eventsPath, `${JSON.stringify({
+    appendCoreEventSync(directory, {
       type: "plan_critic_gate_manual_approval",
       timestamp: recordedAt,
       sessionID,
       plan_id: planId,
       user_confirmed: userConfirmed,
       ...sanitizedReason ? { reason: sanitizedReason } : {}
-    })}
-`, "utf-8");
+    });
   } catch (err) {
     warn(`[delegation-gate] plan_critic_gate_manual_approval audit event write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -77064,7 +78007,7 @@ function getDisplayBudget() {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-f4xw1rxy.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-cpnwvc6y.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)
@@ -77480,7 +78423,7 @@ function isLaneOwnedByCurrentSession(branchName, expectedSessionId) {
   return extracted === expectedSessionId;
 }
 async function inspectStandardWorktreeCollisionOwnership(identity) {
-  const collisionOwnership = await import("./worktree-collision-ownership-wqy7mgb3.js");
+  const collisionOwnership = await import("./worktree-collision-ownership-r8j31h06.js");
   return collisionOwnership.inspectStandardWorktreeCollisionOwnership(identity);
 }
 async function precreateStandardWorktreeSession(args) {
@@ -77628,7 +78571,7 @@ async function precreateStandardWorktreeSession(args) {
   const laneProfile = computeLaneRuntimeProfile(worktreeConfig.runtime_isolation, laneIndex, provisionResult.worktreePath);
   if (laneProfile) {
     try {
-      const { writeLaneProfileToDiskReal } = await import("./core-a1bhs3xa.js");
+      const { writeLaneProfileToDiskReal } = await import("./core-0v762txd.js");
       await writeLaneProfileToDiskReal(provisionResult.worktreePath, laneProfile.laneIndex, laneProfile.envOverrides);
     } catch {}
   }
@@ -78286,7 +79229,7 @@ async function finishStandardWorktreeDispatch(directory, dispatch, config, callI
       }
       clearWorktreeMergeStatus(statusKey);
       try {
-        const { removeLaneProfileFromDiskReal } = await import("./core-a1bhs3xa.js");
+        const { removeLaneProfileFromDiskReal } = await import("./core-0v762txd.js");
         await removeLaneProfileFromDiskReal(dispatch.handle.worktreePath, dispatch.laneIndex);
       } catch {}
       const state = serializationStateBySessionID.get(dispatch.parentSessionID);