opencode-swarm 7.152.1 → 7.153.0

package/dist/cli/index.js

@@ -11,64 +11,63 @@ import {
   readCachePackageVersion,
   resolveCommand,
   safeRealpathSync
-} from "./index-sg2sx2q7.js";
-import"./index-44xdtqz8.js";
-import"./index-k3d919yf.js";
-import"./index-x6803sxh.js";
-import"./index-26vyr198.js";
-import"./index-73pmnsjg.js";
+} from "./index-95qra69h.js";
+import"./index-x6zy6veh.js";
+import"./index-6v77adf7.js";
+import"./index-hw49515c.js";
+import"./index-eqh3t8eh.js";
+import"./index-9gjbe4e4.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
 import"./index-y8552snf.js";
-import"./index-nd8tkb3g.js";
-import"./index-02ajc6d1.js";
+import"./index-4gn111h3.js";
+import"./index-7q56f3se.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-vnn7qq8c.js";
 import"./index-0q2mjxp2.js";
-import"./index-2e1294d1.js";
-import"./index-rq6aetkv.js";
-import"./index-pvrap7xg.js";
+import"./index-3z2f1cy8.js";
+import"./index-5w915x8b.js";
+import"./index-1yfpw7w0.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-z4bg1hv8.js";
 import"./index-fxvgaeq4.js";
-import"./index-z9fyd0d6.js";
-import"./index-qqrdmaxq.js";
-import"./index-q77e475x.js";
-import"./index-xyfdmrv7.js";
+import"./index-babtfqa0.js";
+import"./index-eajfs7v4.js";
+import"./index-5x67858f.js";
+import"./index-80ekaf5b.js";
 import"./index-6zkm4p7p.js";
 import"./index-556ja8an.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-3g0xk6tk.js";
-import"./index-85gkedsf.js";
-import"./index-0tfgn5x0.js";
-import"./index-dn6yt0xg.js";
-import"./index-ryecg2st.js";
+import"./index-4fwbbad3.js";
+import"./index-77xy577c.js";
+import"./index-xv881ahz.js";
+import"./index-hkmgzesw.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-3djxegsc.js";
+import"./index-e2hs0bh7.js";
 import {
   init_package,
   package_default
-} from "./index-n0vc5b5t.js";
+} from "./index-3z5jtyan.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants
-} from "./index-cpg98bh1.js";
+} from "./index-myt57pht.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{knowledge-escalator-4egcr928.js → knowledge-escalator-79zbhpz5.js}

@@ -9,26 +9,26 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-nd8tkb3g.js";
-import"./index-0tfgn5x0.js";
-import"./index-dn6yt0xg.js";
-import"./index-ryecg2st.js";
+} from "./index-4gn111h3.js";
+import"./index-77xy577c.js";
+import"./index-xv881ahz.js";
+import"./index-hkmgzesw.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-3djxegsc.js";
-import"./index-n0vc5b5t.js";
-import"./index-cpg98bh1.js";
+import"./index-e2hs0bh7.js";
+import"./index-3z5jtyan.js";
+import"./index-myt57pht.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{knowledge-events-kdyv4jzn.js → knowledge-events-79cak7eb.js}

@@ -29,24 +29,24 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-dn6yt0xg.js";
-import"./index-ryecg2st.js";
+} from "./index-xv881ahz.js";
+import"./index-hkmgzesw.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-3djxegsc.js";
-import"./index-n0vc5b5t.js";
-import"./index-cpg98bh1.js";
+import"./index-e2hs0bh7.js";
+import"./index-3z5jtyan.js";
+import"./index-myt57pht.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{knowledge-link-h8cwj7af.js → knowledge-link-40zsr5ja.js}

@@ -12,9 +12,9 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-79g6edht.js";
-import"./index-mken64yj.js";
-import"./index-7fh82sm1.js";
+} from "./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{knowledge-store-dq3cvg53.js → knowledge-store-w29aw5w0.js}

@@ -42,14 +42,14 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-0tfgn5x0.js";
+} from "./index-77xy577c.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{knowledge-validator-4bhtden9.js → knowledge-validator-qsecnt2d.js}

@@ -23,15 +23,15 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-rq6aetkv.js";
-import"./index-pvrap7xg.js";
+} from "./index-5w915x8b.js";
+import"./index-1yfpw7w0.js";
 import"./index-rtry5xyf.js";
-import"./index-0tfgn5x0.js";
+import"./index-77xy577c.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{model-preflight-7ea00h34.js → model-preflight-b95w8wxy.js}

@@ -2,7 +2,7 @@
 import {
   DEFAULT_MODELS,
   init_constants
-} from "./index-cpg98bh1.js";
+} from "./index-myt57pht.js";
 import"./index-zjygnfay.js";
 import"./index-a76rekgs.js";
 

package/dist/cli/{runner-w81n9js3.js → runner-fbgsxs74.js}

@@ -3,12 +3,12 @@ import {
   _internals,
   createModelEvaluationExecutor,
   runEvaluation
-} from "./index-44xdtqz8.js";
-import"./index-73pmnsjg.js";
+} from "./index-x6zy6veh.js";
+import"./index-9gjbe4e4.js";
 import"./index-y8552snf.js";
 import"./index-r3mvsbtq.js";
-import"./index-mken64yj.js";
-import"./index-7fh82sm1.js";
+import"./index-0n7nm9e8.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{scan-cursor-2eezv81a.js → scan-cursor-1r3pcdqp.js}

@@ -4,15 +4,15 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-02ajc6d1.js";
-import"./index-0tfgn5x0.js";
+} from "./index-7q56f3se.js";
+import"./index-77xy577c.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{schema-v4qcqhek.js → schema-19qsv6fw.js}

@@ -99,8 +99,8 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-n0vc5b5t.js";
-import"./index-cpg98bh1.js";
+} from "./index-3z5jtyan.js";
+import"./index-myt57pht.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{scope-persistence-y2r227r0.js → scope-persistence-ypcrvqtt.js}

@@ -23,18 +23,18 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-q77e475x.js";
-import"./index-xyfdmrv7.js";
+} from "./index-5x67858f.js";
+import"./index-80ekaf5b.js";
 import"./index-6zkm4p7p.js";
 import"./index-556ja8an.js";
-import"./index-3djxegsc.js";
-import"./index-n0vc5b5t.js";
-import"./index-cpg98bh1.js";
+import"./index-e2hs0bh7.js";
+import"./index-3z5jtyan.js";
+import"./index-myt57pht.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{skill-generator-hhzxvb3h.js → skill-generator-wpp9kpa0.js}

@@ -33,30 +33,30 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-2e1294d1.js";
-import"./index-rq6aetkv.js";
-import"./index-pvrap7xg.js";
+} from "./index-3z2f1cy8.js";
+import"./index-5w915x8b.js";
+import"./index-1yfpw7w0.js";
 import"./index-rtry5xyf.js";
 import"./index-q7sjgr1y.js";
-import"./index-0tfgn5x0.js";
-import"./index-dn6yt0xg.js";
-import"./index-ryecg2st.js";
+import"./index-77xy577c.js";
+import"./index-xv881ahz.js";
+import"./index-hkmgzesw.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-3djxegsc.js";
-import"./index-n0vc5b5t.js";
-import"./index-cpg98bh1.js";
+import"./index-e2hs0bh7.js";
+import"./index-3z5jtyan.js";
+import"./index-myt57pht.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/cli/{worktree-isolation-ve338ez6.js → worktree-isolation-wcry8qnn.js}

@@ -21,60 +21,59 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-sg2sx2q7.js";
-import"./index-44xdtqz8.js";
-import"./index-k3d919yf.js";
-import"./index-x6803sxh.js";
-import"./index-26vyr198.js";
-import"./index-73pmnsjg.js";
+} from "./index-95qra69h.js";
+import"./index-x6zy6veh.js";
+import"./index-6v77adf7.js";
+import"./index-hw49515c.js";
+import"./index-eqh3t8eh.js";
+import"./index-9gjbe4e4.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
 import"./index-y8552snf.js";
-import"./index-nd8tkb3g.js";
-import"./index-02ajc6d1.js";
+import"./index-4gn111h3.js";
+import"./index-7q56f3se.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-vnn7qq8c.js";
 import"./index-0q2mjxp2.js";
-import"./index-2e1294d1.js";
-import"./index-rq6aetkv.js";
-import"./index-pvrap7xg.js";
+import"./index-3z2f1cy8.js";
+import"./index-5w915x8b.js";
+import"./index-1yfpw7w0.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-z4bg1hv8.js";
 import"./index-fxvgaeq4.js";
-import"./index-z9fyd0d6.js";
-import"./index-qqrdmaxq.js";
-import"./index-q77e475x.js";
-import"./index-xyfdmrv7.js";
+import"./index-babtfqa0.js";
+import"./index-eajfs7v4.js";
+import"./index-5x67858f.js";
+import"./index-80ekaf5b.js";
 import"./index-6zkm4p7p.js";
 import"./index-556ja8an.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-3g0xk6tk.js";
-import"./index-85gkedsf.js";
-import"./index-0tfgn5x0.js";
-import"./index-dn6yt0xg.js";
+import"./index-4fwbbad3.js";
+import"./index-77xy577c.js";
+import"./index-xv881ahz.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-ryecg2st.js";
+} from "./index-hkmgzesw.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-3djxegsc.js";
-import"./index-n0vc5b5t.js";
-import"./index-cpg98bh1.js";
+import"./index-e2hs0bh7.js";
+import"./index-3z5jtyan.js";
+import"./index-myt57pht.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-qgfnd206.js";
+import"./index-0n7nm9e8.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
+import"./index-k2ydsqs7.js";
 import"./index-txbd25bc.js";
 import"./index-aw492hpn.js";
 import"./index-7g4c7s5r.js";

package/dist/commands/approve-write.d.ts

@@ -0,0 +1 @@
+export declare function handleApproveWriteCommand(directory: string, args: string[], sessionID: string): Promise<string>;

package/dist/commands/index.d.ts

@@ -6,6 +6,7 @@ import type { ReviewAgentModelRegistry } from '../review/runtime.js';
 export { handleAcknowledgeSpecDriftCommand } from './acknowledge-spec-drift';
 export { handleAgentsCommand } from './agents';
 export { handleAnalyzeCommand } from './analyze';
+export { handleApproveWriteCommand } from './approve-write';
 export { handleArchiveCommand } from './archive';
 export { handleAutoProceedCommand } from './auto-proceed';
 export { handleBenchmarkCommand } from './benchmark';

package/dist/commands/registry.d.ts

@@ -80,6 +80,13 @@ export declare const COMMAND_REGISTRY: {
         readonly category: "diagnostics";
         readonly toolPolicy: "restricted";
     };
+    readonly 'approve-write': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Issue a one-shot session/action/candidate/hash-bound write approval";
+        readonly args: "<target-session-id> skill_improve <candidate-id> <candidate-content-hash> [--generation <n>] [--allowed-path-digest <sha256>]";
+        readonly category: "utility";
+        readonly toolPolicy: "human-only";
+    };
     readonly status: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Show current swarm state (plus background-work health when hooks.background_subagents is enabled)";

package/dist/config/schema.d.ts

@@ -555,11 +555,25 @@ export declare const GuardrailsConfigSchema: z.ZodObject<{
     execution_stall_stop_calls: z.ZodDefault<z.ZodNumber>;
     execution_stall_episode_minutes: z.ZodDefault<z.ZodNumber>;
     sandbox_macos_enabled: z.ZodOptional<z.ZodBoolean>;
+    sandbox: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodDefault<z.ZodEnum<{
+            advisory: "advisory";
+            required: "required";
+        }>>;
+        require_filesystem: z.ZodDefault<z.ZodBoolean>;
+        require_network: z.ZodDefault<z.ZodBoolean>;
+        require_process: z.ZodDefault<z.ZodBoolean>;
+        network_mode: z.ZodDefault<z.ZodEnum<{
+            on: "on";
+            off: "off";
+        }>>;
+        network_allowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        writable_roots: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type GuardrailsConfig = z.infer<typeof GuardrailsConfigSchema>;
 export declare const WatchdogConfigSchema: z.ZodObject<{
     scope_guard: z.ZodDefault<z.ZodBoolean>;
-    skip_in_turbo: z.ZodDefault<z.ZodBoolean>;
     delegation_ledger: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 export type WatchdogConfig = z.infer<typeof WatchdogConfigSchema>;
@@ -1281,9 +1295,9 @@ export declare const WorktreeIsolationConfigSchema: z.ZodObject<{
         copy: "copy";
     }>>;
     lane_permissions: z.ZodDefault<z.ZodEnum<{
+        off: "off";
         scoped_allow: "scoped_allow";
         deny: "deny";
-        off: "off";
     }>>;
     serialization_release_after_dispatches: z.ZodDefault<z.ZodNumber>;
     serialization_release_after_ms: z.ZodDefault<z.ZodNumber>;
@@ -1742,6 +1756,13 @@ export interface PrReviewResilienceConfig {
     correlated_failure_threshold: number;
     max_retry_attempts_after_initial: number;
 }
+/**
+ * Issue #2381: staged PR-review resilience defaults OFF while the #2380 repair
+ * program is incomplete. Tier M/L base waves therefore use the legacy one-wave
+ * dispatch unless a project explicitly opts in with `enabled: true`, which
+ * remains fully honored. The tracker re-enables this by default only after its
+ * host/OS/depth validation matrix is green.
+ */
 export declare const DEFAULT_PR_REVIEW_RESILIENCE_CONFIG: PrReviewResilienceConfig;
 export declare const PrReviewResilienceConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
@@ -1960,10 +1981,24 @@ export declare const PluginConfigSchema: z.ZodObject<{
         execution_stall_stop_calls: z.ZodDefault<z.ZodNumber>;
         execution_stall_episode_minutes: z.ZodDefault<z.ZodNumber>;
         sandbox_macos_enabled: z.ZodOptional<z.ZodBoolean>;
+        sandbox: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodDefault<z.ZodEnum<{
+                advisory: "advisory";
+                required: "required";
+            }>>;
+            require_filesystem: z.ZodDefault<z.ZodBoolean>;
+            require_network: z.ZodDefault<z.ZodBoolean>;
+            require_process: z.ZodDefault<z.ZodBoolean>;
+            network_mode: z.ZodDefault<z.ZodEnum<{
+                on: "on";
+                off: "off";
+            }>>;
+            network_allowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            writable_roots: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     watchdog: z.ZodOptional<z.ZodObject<{
         scope_guard: z.ZodDefault<z.ZodBoolean>;
-        skip_in_turbo: z.ZodDefault<z.ZodBoolean>;
         delegation_ledger: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
     self_review: z.ZodOptional<z.ZodObject<{
@@ -2594,9 +2629,9 @@ export declare const PluginConfigSchema: z.ZodObject<{
             copy: "copy";
         }>>;
         lane_permissions: z.ZodDefault<z.ZodEnum<{
+            off: "off";
             scoped_allow: "scoped_allow";
             deny: "deny";
-            off: "off";
         }>>;
         serialization_release_after_dispatches: z.ZodDefault<z.ZodNumber>;
         serialization_release_after_ms: z.ZodDefault<z.ZodNumber>;

package/dist/consensus/contracts.d.ts

@@ -12,6 +12,7 @@
  * without forcing consumers to read Zod inference to learn the shape.
  */
 import { z } from 'zod';
+import type { WriteAuthorityOrigin } from '../security/write-authority.js';
 /** Upper bound on any single reference list. Keeps a report bounded on disk. */
 export declare const MAX_CONSENSUS_REFS = 200;
 /**
@@ -234,6 +235,7 @@ export interface ProposedSkillChangeProvenance {
     writeOrigin: {
         sessionId?: string;
         agentRole?: string;
+        authority?: WriteAuthorityOrigin;
         producedAt: string;
     };
 }
@@ -258,6 +260,12 @@ export declare const ProposedSkillChangeSchema: z.ZodObject<{
         writeOrigin: z.ZodObject<{
             sessionId: z.ZodOptional<z.ZodString>;
             agentRole: z.ZodOptional<z.ZodString>;
+            authority: z.ZodOptional<z.ZodEnum<{
+                critic_approved: "critic_approved";
+                autonomous: "autonomous";
+                optimizer_proposed: "optimizer_proposed";
+                human_approved: "human_approved";
+            }>>;
             producedAt: z.ZodISODateTime;
         }, z.core.$strict>;
     }, z.core.$strict>;
@@ -420,6 +428,12 @@ export declare const ConsensusReportV1Schema: z.ZodObject<{
             writeOrigin: z.ZodObject<{
                 sessionId: z.ZodOptional<z.ZodString>;
                 agentRole: z.ZodOptional<z.ZodString>;
+                authority: z.ZodOptional<z.ZodEnum<{
+                    critic_approved: "critic_approved";
+                    autonomous: "autonomous";
+                    optimizer_proposed: "optimizer_proposed";
+                    human_approved: "human_approved";
+                }>>;
                 producedAt: z.ZodISODateTime;
             }, z.core.$strict>;
         }, z.core.$strict>;

package/dist/hooks/full-auto-permission.d.ts

@@ -24,6 +24,13 @@
  *     or terminate per `full_auto.denials.on_limit`.
  */
 import type { PluginConfig } from '../config';
+import { assessSandboxEnforcement } from '../sandbox/executor';
+import { clearSandboxWrapOutcome, readSandboxWrapOutcome } from '../sandbox/skip-state';
+export declare const _internals: {
+    assessSandboxEnforcement: typeof assessSandboxEnforcement;
+    readSandboxWrapOutcome: typeof readSandboxWrapOutcome;
+    clearSandboxWrapOutcome: typeof clearSandboxWrapOutcome;
+};
 export interface FullAutoPermissionHookOptions {
     config: PluginConfig;
     directory: string;

package/dist/hooks/guardrails/index.d.ts

@@ -8,7 +8,7 @@
  */
 import { extractSwarmIdFromAgentName, getSwarmAgents, resolveFallbackModel } from '../../agents/index';
 import { type AuthorityConfig, type GuardrailsConfig } from '../../config/schema';
-import { getExecutor } from '../../sandbox/executor';
+import { assessSandboxEnforcement, getExecutor } from '../../sandbox/executor';
 import { dcCheckJunctionCreation } from './destructive-command';
 import { getMostRecentAssistantText, getProviderFailureFingerprint, isTransientProviderFailureText } from './messages-transform';
 export declare const _internals: {
@@ -21,6 +21,7 @@ export declare const _internals: {
     dcCheckJunctionCreation: typeof dcCheckJunctionCreation;
     extractErrorSignal: typeof extractErrorSignal;
     getSandboxExecutor: typeof getExecutor;
+    assessSandboxEnforcement: typeof assessSandboxEnforcement;
     /** Test-only compatibility for legacy direct-after hook tests. */
     allowUncorrelatedGateReceipts: boolean;
     MAX_PENDING_GATE_RECEIPTS_PER_SESSION: number;

package/dist/hooks/guardrails/tool-before.d.ts

@@ -38,6 +38,8 @@ export interface ToolBeforeContext {
     worktreeBaseDirOverrides?: string[];
     /** Sandbox executor getter seam for tests and platform-specific overrides. */
     getSandboxExecutor: typeof import('../../sandbox/executor').getExecutor;
+    /** Sandbox capability assessment seam for deterministic cross-platform tests. */
+    assessSandboxEnforcement: typeof import('../../sandbox/executor').assessSandboxEnforcement;
     /** Hold exact child-write provenance until the matching after-hook succeeds. */
     rememberReviewerScopeWrite?: (input: {
         callID: string;
@@ -49,6 +51,8 @@ export interface ToolBeforeContext {
     /** Snapshot an exact authorized write for success-only lease renewal. */
     rememberScopeLeaseCandidate?: (input: ScopeLeaseCandidateInput) => void;
 }
+/** @internal test seam */
+export declare function _resetSandboxUnavailableWarningState(): void;
 /**
  * Creates a toolBefore handler with the given shared context.
  *