opencode-swarm 7.152.1 → 7.153.1

package/dist/cli/{hive-promoter-d0xydg6r.js → hive-promoter-55qcqgfx.js}

@@ -7,65 +7,64 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-sg2sx2q7.js";
-import"./index-44xdtqz8.js";
-import"./index-k3d919yf.js";
-import"./index-x6803sxh.js";
-import"./index-26vyr198.js";
-import"./index-73pmnsjg.js";
+} from "./index-6ybjrqf7.js";
+import"./index-gn26q90p.js";
+import"./index-0tyc8kdg.js";
+import"./index-af0cqe6n.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
+import"./index-4pjkdcgc.js";
+import"./index-1gzdnjg9.js";
 import"./index-y8552snf.js";
-import"./index-nd8tkb3g.js";
-import"./index-02ajc6d1.js";
+import"./index-8v9sj4aq.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-vnn7qq8c.js";
-import"./index-0q2mjxp2.js";
-import"./index-2e1294d1.js";
-import"./index-rq6aetkv.js";
-import"./index-pvrap7xg.js";
+import"./index-meg33yyv.js";
+import"./index-n5pxkera.js";
+import"./index-smqsp8hs.js";
+import"./index-v689bmr2.js";
+import"./index-3ttktt56.js";
 import"./index-rtry5xyf.js";
+import"./index-3cegckkq.js";
 import"./index-zsrtt42s.js";
-import"./index-z4bg1hv8.js";
-import"./index-fxvgaeq4.js";
-import"./index-z9fyd0d6.js";
-import"./index-qqrdmaxq.js";
-import"./index-q77e475x.js";
-import"./index-xyfdmrv7.js";
-import"./index-6zkm4p7p.js";
+import"./index-9v8d3c0k.js";
+import"./index-4g0g3dqz.js";
+import"./index-2mqmvxac.js";
+import"./index-1dtshrzg.js";
+import"./index-mb7b1gye.js";
+import"./index-pk1gbqmq.js";
 import"./index-556ja8an.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-3g0xk6tk.js";
-import"./index-85gkedsf.js";
+import"./index-4fwbbad3.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-0tfgn5x0.js";
-import"./index-dn6yt0xg.js";
-import"./index-ryecg2st.js";
+} from "./index-k10qtq71.js";
+import"./index-tdzbm974.js";
+import"./index-ajkxx2k6.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-3djxegsc.js";
-import"./index-n0vc5b5t.js";
-import"./index-cpg98bh1.js";
+import"./index-1akn19mp.js";
+import"./index-n823qsae.js";
+import"./index-myt57pht.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-x3y6zhgj.js";
+import"./index-zppxpc3y.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
-import"./index-txbd25bc.js";
-import"./index-aw492hpn.js";
+import"./index-td0jz8xe.js";
+import"./index-891g7hbf.js";
+import"./index-ed5ykebp.js";
+import"./index-x8vw6ap1.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
-import"./index-ed5ykebp.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{index-x6803sxh.js → index-0tyc8kdg.js}

@@ -6,11 +6,11 @@ import {
   PluginConfigSchema,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-n0vc5b5t.js";
+} from "./index-n823qsae.js";
 import {
   ALL_AGENT_NAMES,
   init_constants
-} from "./index-cpg98bh1.js";
+} from "./index-myt57pht.js";
 import {
   log
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-z8s2asdk.js → index-0tzv5zg2.js}

@@ -1,6 +1,7 @@
 // @bun
 import {
   HUMAN_ONLY_SWARM_COMMANDS,
+  classifyCommand,
   dcCheckJunctionCreation,
   dcEvaluateRecursiveDeleteTargets,
   dcExtractPowerShellTargets,
@@ -11,15 +12,16 @@ import {
   dcUnwrapWrappers,
   detectPosixWrites,
   detectWindowsWrites,
+  getSharedClassifierGuardrailBlock,
   resolveWriteTargets
-} from "./index-sg2sx2q7.js";
+} from "./index-6ybjrqf7.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-k3d919yf.js";
+} from "./index-gn26q90p.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";
@@ -65,13 +67,12 @@ function evaluateDestructiveDecision(rawCommand, cwd, declaredScope) {
   if (!rawCommand) {
     return { decision: "allow", firingRule: "allow: no rule matched" };
   }
-  const command = dcNormalizeCommand(rawCommand);
-  if (/:\s*\(\s*\)\s*\{[^}]*\|[^}]*:/.test(command)) {
-    return {
-      decision: "block",
-      firingRule: "destructive_block: fork bomb pattern"
-    };
+  const shared = classifyCommand(rawCommand);
+  const sharedFiringRule = `shared_classifier: ${shared.aggregate}`;
+  if (getSharedClassifierGuardrailBlock(shared)) {
+    return { decision: "block", firingRule: sharedFiringRule };
   }
+  const command = dcNormalizeCommand(rawCommand);
   const unwrapped = dcUnwrapWrappers(command);
   const outerSegments = dcSplitSegments(command);
   const innerSegments = dcSplitSegments(unwrapped);
@@ -157,119 +158,20 @@ function evaluateDestructiveDecision(rawCommand, cwd, declaredScope) {
         firingRule: "destructive_block: PowerShell pipeline Get-ChildItem | Remove-Item -Recurse"
       };
     }
-    if (/^vssadmin(?:\.exe)?\s+delete\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: vssadmin delete (ransomware-grade)"
-      };
-    }
-    if (/^wbadmin(?:\.exe)?\s+delete\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: wbadmin delete (backup catalog deletion)"
-      };
-    }
-    if (/^diskpart(?:\.exe)?$/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: diskpart (interactive disk partitioning)"
-      };
-    }
-    if (/^bcdedit(?:\.exe)?\s+\/delete\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: bcdedit /delete (boot config modification)"
-      };
-    }
-    if (/^sdelete(?:\.exe)?\s+/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: sdelete (secure file deletion)"
-      };
-    }
-    if (/^fsutil(?:\.exe)?\s+reparsepoint\s+delete\b/i.test(seg) || /^fsutil(?:\.exe)?\s+file\s+setzerodata\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: fsutil destructive subcommand"
-      };
-    }
-    if (/^takeown(?:\.exe)?\s+.*\/[rR]\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: takeown /R (recursive ownership takeover)"
-      };
-    }
-    if (/^cipher(?:\.exe)?\s+\/[wW]\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: cipher /w (free disk space wipe)"
-      };
-    }
-    if (/^format\s+[A-Za-z]:/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: Windows disk format command"
-      };
-    }
-    if (/^robocopy(?:\.exe)?\s+.*\/(?:MIR|mir)\b/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: robocopy /MIR (mirror delete)"
-      };
-    }
-    if (/^chmod\s+.*-[rR]\b.*000\b/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: chmod -R 000 (permission wipe)"
-      };
-    }
-    if (/^chattr\s+.*\+i\b/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: chattr +i (immutable flag)"
-      };
-    }
-    if (/^icacls(?:\.exe)?\s+.*\/deny\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: icacls /deny (permission denial)"
-      };
-    }
-    if (/^dd\b.*\bif=\/dev\/(zero|null|urandom)\b/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: dd with /dev/zero|null|urandom (data wipe)"
-      };
-    }
-    if (/^git\s+push\b.*?(--force(?!-with-lease)|-f)\b/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: git push --force"
-      };
-    }
-    if (/^git\s+reset\s+--hard/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: git reset --hard"
-      };
-    }
-    if (/^git\s+reset\s+--mixed\s+\S+/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: git reset --mixed with target"
-      };
-    }
-    if (/^git\s+clean\s+.*-[fF].*[dD]/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: git clean -fd"
-      };
-    }
     if (/^git\s+worktree\s+remove\s+.*--force\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: git worktree remove --force"
-      };
+      const worktreeRemoveMatch = /^git\s+worktree\s+remove\s+(.+)$/i.exec(seg);
+      if (worktreeRemoveMatch) {
+        const normalizedArgs = worktreeRemoveMatch[1].trim().split(/\s+/).filter(Boolean).map((token) => token.replace(/^["']|["']$/g, ""));
+        const pathArgs = normalizedArgs.filter((token) => !token.startsWith("-"));
+        const target = pathArgs.length === 1 ? pathArgs[0]?.trim() : null;
+        const scopeExempt = target != null && target.length > 0 && declaredScope != null && declaredScope.length > 0 && isInDeclaredScope(target, declaredScope, cwd);
+        if (!scopeExempt) {
+          return {
+            decision: "block",
+            firingRule: "destructive_block: git worktree remove --force"
+          };
+        }
+      }
     }
     if (/^rsync\b.*--delete(?:-after|-before|-during|-delay)?\b/.test(seg)) {
       const rsyncArgs = seg.split(/\s+/).slice(1);
@@ -282,30 +184,6 @@ function evaluateDestructiveDecision(rawCommand, cwd, declaredScope) {
         };
       }
     }
-    if (/^kubectl\s+delete\b/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: kubectl delete"
-      };
-    }
-    if (/^docker\s+system\s+prune\b/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: docker system prune"
-      };
-    }
-    if (/^\s*DROP\s+(TABLE|DATABASE|SCHEMA)\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: SQL DROP statement"
-      };
-    }
-    if (/^\s*TRUNCATE\s+TABLE\b/i.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: SQL TRUNCATE TABLE statement"
-      };
-    }
     if (/^\\?mv\s/i.test(seg)) {
       const mvMatch = seg.match(/^\\?mv\s+(.+)$/i);
       if (mvMatch) {
@@ -372,12 +250,6 @@ function evaluateDestructiveDecision(rawCommand, cwd, declaredScope) {
         firingRule: 'destructive_block: "7z" with delete-source flag targeting .swarm/ detected \u2014 archive with source deletion under .swarm/ is not allowed'
       };
     }
-    if (/^mkfs[./]/.test(seg)) {
-      return {
-        decision: "block",
-        firingRule: "destructive_block: mkfs (filesystem format)"
-      };
-    }
     {
       let probe = seg.replace(/^(?:[A-Za-z_][A-Za-z0-9_]*=\S+\s+)+/, "").replace(/^eval(?:\s+--)?\s+["']?/, "").replace(/["']\s*$/, "").replace(/^\$\(\s*/, "").replace(/^\(\s*/, "").replace(/\s*\)$/, "").replace(/^`/, "").replace(/`$/, "").trim();
       for (let i = 0;i < 4; i++) {

package/dist/cli/{index-3djxegsc.js → index-1akn19mp.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-n0vc5b5t.js";
+} from "./index-n823qsae.js";
 import {
   GIT_BINARY_ENV_VAR,
   init_git_executable

package/dist/cli/{index-q77e475x.js → index-1dtshrzg.js}

@@ -2,23 +2,23 @@
 import {
   computePlanStructureHash,
   derivePlanId
-} from "./index-xyfdmrv7.js";
+} from "./index-mb7b1gye.js";
 import {
   appendCoreEventSync
-} from "./index-6zkm4p7p.js";
+} from "./index-pk1gbqmq.js";
 import {
   unsafePathTextReason
 } from "./index-556ja8an.js";
 import {
   PlanSchema
-} from "./index-3djxegsc.js";
+} from "./index-1akn19mp.js";
 import {
   atomicWriteSwarmFile,
   atomicWriteSwarmFileSync
-} from "./index-7fh82sm1.js";
+} from "./index-td0jz8xe.js";
 import {
   assertProjectRoot
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-73pmnsjg.js → index-1gzdnjg9.js}

@@ -9,11 +9,11 @@ import {
 } from "./index-y8552snf.js";
 import {
   atomicWriteFile
-} from "./index-mken64yj.js";
+} from "./index-zppxpc3y.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-4tvvh7pn.js → index-23rneydq.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-z8s2asdk.js";
+} from "./index-0tzv5zg2.js";
 import {
   handleGuardrailLog
-} from "./index-29vd7v3e.js";
+} from "./index-6vgb5fyb.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -19,6 +19,7 @@ import {
   handleAcknowledgeSpecDriftCommand,
   handleAgentsCommand,
   handleAnalyzeCommand,
+  handleApproveWriteCommand,
   handleArchiveCommand,
   handleAutoProceedCommand,
   handleBenchmarkCommand,
@@ -85,70 +86,69 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-sg2sx2q7.js";
-import"./index-44xdtqz8.js";
-import"./index-k3d919yf.js";
-import"./index-x6803sxh.js";
-import"./index-26vyr198.js";
-import"./index-73pmnsjg.js";
+} from "./index-6ybjrqf7.js";
+import"./index-gn26q90p.js";
+import"./index-0tyc8kdg.js";
+import"./index-af0cqe6n.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
+import"./index-4pjkdcgc.js";
+import"./index-1gzdnjg9.js";
 import"./index-y8552snf.js";
-import"./index-nd8tkb3g.js";
-import"./index-02ajc6d1.js";
+import"./index-8v9sj4aq.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-vnn7qq8c.js";
-import"./index-0q2mjxp2.js";
-import"./index-2e1294d1.js";
-import"./index-rq6aetkv.js";
-import"./index-pvrap7xg.js";
+import"./index-meg33yyv.js";
+import"./index-n5pxkera.js";
+import"./index-smqsp8hs.js";
+import"./index-v689bmr2.js";
+import"./index-3ttktt56.js";
 import"./index-rtry5xyf.js";
+import"./index-3cegckkq.js";
 import"./index-zsrtt42s.js";
-import"./index-z4bg1hv8.js";
-import"./index-fxvgaeq4.js";
-import"./index-z9fyd0d6.js";
-import"./index-qqrdmaxq.js";
-import"./index-q77e475x.js";
-import"./index-xyfdmrv7.js";
-import"./index-6zkm4p7p.js";
+import"./index-9v8d3c0k.js";
+import"./index-4g0g3dqz.js";
+import"./index-2mqmvxac.js";
+import"./index-1dtshrzg.js";
+import"./index-mb7b1gye.js";
+import"./index-pk1gbqmq.js";
 import"./index-556ja8an.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-3g0xk6tk.js";
-import"./index-85gkedsf.js";
-import"./index-0tfgn5x0.js";
-import"./index-dn6yt0xg.js";
-import"./index-ryecg2st.js";
+import"./index-4fwbbad3.js";
+import"./index-k10qtq71.js";
+import"./index-tdzbm974.js";
+import"./index-ajkxx2k6.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-3djxegsc.js";
+import"./index-1akn19mp.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-n0vc5b5t.js";
+} from "./index-n823qsae.js";
 import {
   AGENT_TOOL_MAP,
   ORCHESTRATOR_NAME,
   init_constants
-} from "./index-cpg98bh1.js";
+} from "./index-myt57pht.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-79g6edht.js";
-import"./index-mken64yj.js";
+import"./index-x3y6zhgj.js";
+import"./index-zppxpc3y.js";
 import"./index-bk5tah7q.js";
-import"./index-7fh82sm1.js";
-import"./index-txbd25bc.js";
-import"./index-aw492hpn.js";
+import"./index-td0jz8xe.js";
+import"./index-891g7hbf.js";
+import"./index-ed5ykebp.js";
+import"./index-x8vw6ap1.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
-import"./index-ed5ykebp.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 
@@ -467,6 +467,7 @@ export {
   handleBenchmarkCommand,
   handleAutoProceedCommand,
   handleArchiveCommand,
+  handleApproveWriteCommand,
   handleAnalyzeCommand,
   handleAgentsCommand,
   handleAcknowledgeSpecDriftCommand,

package/dist/cli/{index-z4bg1hv8.js → index-2mqmvxac.js}

@@ -8,7 +8,7 @@ import {
 import {
   EvidenceLockTimeoutError,
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   exports_external,
   init_zod
@@ -469,7 +469,14 @@ var WorktreeDescriptorSchema = exports_external.object({
   worktreeSessionId: exports_external.string().min(1).max(256),
   mergeStrategy: exports_external.enum(["merge", "rebase", "cherry-pick"]),
   laneIndex: exports_external.number().int().nonnegative().max(255),
-  worktreeDir: exports_external.string().min(1).max(4096).nullable()
+  worktreeDir: exports_external.string().min(1).max(4096).nullable(),
+  reservationId: exports_external.string().min(1).max(512).optional(),
+  generation: exports_external.number().int().min(1).optional(),
+  provisioningOwner: exports_external.object({
+    reservationId: exports_external.string().min(1).max(512),
+    generation: exports_external.number().int().min(1),
+    branchName: exports_external.string().min(1).max(1024)
+  }).strict().optional()
 }).strict();
 var TerminalResultSchema = exports_external.object({
   eventId: exports_external.string().min(1).max(256),