opencode-swarm 7.152.1 → 7.153.1

package/dist/cli/{index-26vyr198.js → index-af0cqe6n.js}

@@ -1,12 +1,12 @@
 // @bun
+import {
+  loadDatabaseCtor
+} from "./index-134d35c1.js";
 import {
   EvaluationRunV1Schema,
   GateAuditResultV1Schema,
   getProtectedEvaluationRunIds
-} from "./index-73pmnsjg.js";
-import {
-  loadDatabaseCtor
-} from "./index-134d35c1.js";
+} from "./index-1gzdnjg9.js";
 import {
   readEffectiveSpecSync
 } from "./index-9ss2m4rs.js";
@@ -23,7 +23,7 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-z9fyd0d6.js";
+} from "./index-9v8d3c0k.js";
 import {
   LedgerStaleWriterError,
   appendLedgerEvent,
@@ -43,15 +43,15 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-xyfdmrv7.js";
+} from "./index-mb7b1gye.js";
 import {
   appendCoreEventSync
-} from "./index-6zkm4p7p.js";
+} from "./index-pk1gbqmq.js";
 import {
   init_executor,
   isUntrustedEnvKey,
   isValidEnvKey
-} from "./index-85gkedsf.js";
+} from "./index-4fwbbad3.js";
 import {
   EVIDENCE_MAX_JSON_BYTES,
   EvidenceBundleSchema,
@@ -68,7 +68,7 @@ import {
 } from "./index-r3mvsbtq.js";
 import {
   PlanSchema
-} from "./index-3djxegsc.js";
+} from "./index-1akn19mp.js";
 import {
   GIT_BINARY_ENV_VAR,
   describeGitResolution,
@@ -79,18 +79,18 @@ import {
   assertProjectRoot,
   tryAcquireLock,
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
+import {
+  invalidateCachedArtifact,
+  readCachedParsedFile
+} from "./index-ed5ykebp.js";
 import {
   emit
-} from "./index-aw492hpn.js";
+} from "./index-x8vw6ap1.js";
 import {
   ZodError,
   init_zod
 } from "./index-bpmtbmy9.js";
-import {
-  invalidateCachedArtifact,
-  readCachedParsedFile
-} from "./index-ed5ykebp.js";
 import {
   criticalWarn,
   error,
@@ -4345,4 +4345,4 @@ function mergeDurableGateEntriesFromEvidence(taskId, entries, evidence) {
   return merged;
 }
 
-export { projectDbExists, getProjectDb, closeProjectDb, normalizePath, buildTaskCompletionDescriptor, ensureTaskCheckpointReceipt, updateTaskCheckpointReceipt, MAX_TRANSIENT_RETRIES, isTransientSpawnError, transientBackoff, getGitRepositoryStatus, isGitRepo, getDefaultBaseBranch, detectDefaultRemoteBranch, resetToRemoteBranch, resetToMainAfterMerge, containsPathTraversal, containsControlChars, validateSymlinkBoundary, isStateUnreadable, loadEpicSessionState, isEpicModeActive, enableEpicMode, disableEpicMode, pathsConflict, isGlobalFile, isProtectedPath, readTaskScopes, loadPlanJsonOnly, loadPlan, savePlan, closePlanTerminalState, updateTaskStatus, derivePlanMarkdown, isValidEvidenceType, isSecretscanEvidence, sanitizeTaskId2 as sanitizeTaskId, validateProjectRoot, saveEvidence, loadEvidence, listEvidenceTaskIds, checkRequirementCoverage, archiveEvidence, readDurableGateEvidence, getDurableGateEvidenceStatus, getDurableGateEvidenceStatusForTask, mergeDurableGateEntriesFromEvidence };
+export { projectDbExists, getProjectDb, closeProjectDb, normalizePath, buildTaskCompletionDescriptor, ensureTaskCheckpointReceipt, updateTaskCheckpointReceipt, MAX_TRANSIENT_RETRIES, isTransientSpawnError, transientBackoff, getGitRepositoryStatus, isGitRepo, getDefaultBaseBranch, detectDefaultRemoteBranch, resetToRemoteBranch, resetToMainAfterMerge, containsPathTraversal, containsControlChars, validateSymlinkBoundary, validateTargetWithinRoot, isStateUnreadable, loadEpicSessionState, isEpicModeActive, enableEpicMode, disableEpicMode, pathsConflict, isGlobalFile, isProtectedPath, readTaskScopes, loadPlanJsonOnly, loadPlan, savePlan, closePlanTerminalState, updateTaskStatus, derivePlanMarkdown, isValidEvidenceType, isSecretscanEvidence, sanitizeTaskId2 as sanitizeTaskId, validateProjectRoot, saveEvidence, loadEvidence, listEvidenceTaskIds, checkRequirementCoverage, archiveEvidence, readDurableGateEvidence, getDurableGateEvidenceStatus, getDurableGateEvidenceStatusForTask, mergeDurableGateEntriesFromEvidence };

package/dist/cli/{index-ryecg2st.js → index-ajkxx2k6.js}

@@ -2,14 +2,14 @@
 import {
   init_loader,
   loadPluginConfigWithMeta
-} from "./index-3djxegsc.js";
+} from "./index-1akn19mp.js";
 import {
   init_schema
-} from "./index-n0vc5b5t.js";
+} from "./index-n823qsae.js";
 import {
   DEFAULT_WORKTREE_ISOLATION_CONFIG,
   init_constants
-} from "./index-cpg98bh1.js";
+} from "./index-myt57pht.js";
 
 // src/config/index.ts
 init_constants();

package/dist/cli/{index-k3d919yf.js → index-gn26q90p.js}

@@ -11,13 +11,13 @@ import {
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-n0vc5b5t.js";
+} from "./index-n823qsae.js";
 import {
   init_constants
-} from "./index-cpg98bh1.js";
+} from "./index-myt57pht.js";
 import {
   telemetry
-} from "./index-aw492hpn.js";
+} from "./index-x8vw6ap1.js";
 import {
   init_logger,
   warn
@@ -1768,7 +1768,7 @@ function classifyFile(filePath) {
 // src/hooks/guardrails/file-authority.ts
 import * as fsSync from "fs";
 var import_picomatch = __toESM(require_picomatch2(), 1);
-import * as path from "path";
+import * as path2 from "path";
 
 // node_modules/quick-lru/index.js
 class QuickLRU extends Map {
@@ -2045,6 +2045,64 @@ class QuickLRU extends Map {
 // src/hooks/guardrails/file-authority.ts
 init_schema();
 
+// src/security/protected-path-policy.ts
+import * as path from "path";
+var DEFAULT_SEGMENTS = new Set([
+  ".git",
+  ".swarm",
+  ".env",
+  "package.json",
+  "package-lock.json",
+  "bun.lock",
+  "CHANGELOG.md",
+  ".release-please-manifest.json",
+  "release-please-config.json",
+  "CODEOWNERS"
+]);
+var DEFAULT_PREFIXES = [
+  ".github/workflows",
+  ".github/CODEOWNERS",
+  "src/sandbox",
+  "src/hooks/guardrails",
+  "src/security",
+  "src/evaluation",
+  "docs/releases",
+  "tests/fixtures/evaluation"
+];
+function normalizeProtectedPath(value) {
+  return value.replace(/\\/g, "/").replace(/^\.\//, "").replace(/\/+$/, "");
+}
+function equalsOrDescendant(candidate, protectedPath) {
+  const left = process.platform === "win32" ? candidate.toLowerCase() : candidate;
+  const right = process.platform === "win32" ? protectedPath.toLowerCase() : protectedPath;
+  return left === right || left.startsWith(`${right}/`);
+}
+function isPolicyProtectedPath(filePath, options = {}) {
+  if (!filePath)
+    return false;
+  const normalized = normalizeProtectedPath(filePath);
+  const segments = normalized.split("/").filter(Boolean);
+  if (options.includeDefaults !== false) {
+    if (segments.some((segment) => DEFAULT_SEGMENTS.has(process.platform === "win32" ? segment.toLowerCase() : segment)))
+      return true;
+    if (DEFAULT_PREFIXES.some((prefix) => equalsOrDescendant(normalized, prefix)))
+      return true;
+  }
+  return (options.additional ?? []).some((entry) => {
+    const protectedPath = normalizeProtectedPath(entry);
+    if (!protectedPath)
+      return false;
+    if (equalsOrDescendant(normalized, protectedPath))
+      return true;
+    if (protectedPath.includes("/"))
+      return false;
+    return segments.some((segment) => (process.platform === "win32" ? segment.toLowerCase() : segment) === (process.platform === "win32" ? protectedPath.toLowerCase() : protectedPath));
+  });
+}
+function protectedRoots(projectRoot, additional = []) {
+  return [...DEFAULT_PREFIXES, ...DEFAULT_SEGMENTS, ...additional].map((entry) => path.resolve(projectRoot, entry));
+}
+
 // src/utils/arg-hash.ts
 var HASH_INPUT_CAP_BYTES = 64 * 1024;
 
@@ -2079,12 +2137,12 @@ function normalizePathWithCache(filePath, cwd) {
     return cached;
   }
   try {
-    const absolutePath = path.isAbsolute(filePath) ? filePath : path.resolve(cwd, filePath);
+    const absolutePath = path2.isAbsolute(filePath) ? filePath : path2.resolve(cwd, filePath);
     const normalized = fsSync.realpathSync(absolutePath);
     pathNormalizationCache.set(cacheKey, normalized);
     return normalized;
   } catch {
-    const fallback = path.isAbsolute(filePath) ? filePath : path.resolve(cwd, filePath);
+    const fallback = path2.isAbsolute(filePath) ? filePath : path2.resolve(cwd, filePath);
     pathNormalizationCache.set(cacheKey, fallback);
     return fallback;
   }
@@ -2232,7 +2290,7 @@ var DEFAULT_AGENT_AUTHORITY_RULES = {
   }
 };
 function matchesAuthorityDenyPrefix(candidate, prefix, cwd, flavor = getPathFlavor()) {
-  const pathImpl = flavor === "win32" ? path.win32 : path.posix;
+  const pathImpl = flavor === "win32" ? path2.win32 : path2.posix;
   const normalizeInput = (value) => flavor === "win32" ? value.replace(/\//g, "\\") : value;
   const normalizedPrefixInput = normalizeInput(prefix);
   const requiresComponentBoundary = normalizedPrefixInput.endsWith(pathImpl.sep);
@@ -2277,8 +2335,8 @@ function buildEffectiveRules(authorityConfig) {
   }
   return merged;
 }
-function isOnDifferentFilesystemRoot(targetAbsolute, cwdAbsolute, pathLib = path) {
-  const flavor = pathLib === path.win32 || pathLib.parse("C:\\probe").root !== "" ? "win32" : "posix";
+function isOnDifferentFilesystemRoot(targetAbsolute, cwdAbsolute, pathLib = path2) {
+  const flavor = pathLib === path2.win32 || pathLib.parse("C:\\probe").root !== "" ? "win32" : "posix";
   return isOnDifferentPathRoot(targetAbsolute, cwdAbsolute, flavor);
 }
 var BUILT_IN_VERIFIER_CONFIG_GLOBS = [
@@ -2349,11 +2407,11 @@ function checkFileAuthorityWithRules(agentName, filePath, cwd, effectiveRules, o
   let resolvedTarget;
   try {
     const normalizedWithSymlinks = normalizePathWithCache(filePath, dir);
-    resolvedTarget = path.resolve(dir, normalizedWithSymlinks);
-    normalizedPath = path.relative(dir, resolvedTarget).replace(/\\/g, "/");
+    resolvedTarget = path2.resolve(dir, normalizedWithSymlinks);
+    normalizedPath = path2.relative(dir, resolvedTarget).replace(/\\/g, "/");
   } catch {
-    resolvedTarget = path.resolve(dir, filePath);
-    normalizedPath = path.relative(dir, resolvedTarget).replace(/\\/g, "/");
+    resolvedTarget = path2.resolve(dir, filePath);
+    normalizedPath = path2.relative(dir, resolvedTarget).replace(/\\/g, "/");
   }
   if (isOnDifferentFilesystemRoot(resolvedTarget, dir)) {
     return denyAuthority(agentName, normalizedPath, {
@@ -2381,7 +2439,7 @@ function checkFileAuthorityWithRules(agentName, filePath, cwd, effectiveRules, o
     });
   }
   const flavor = getPathFlavor();
-  const matchesPathPrefix = (candidate, prefix) => isPathIdentityWithin(path.resolve(dir, candidate), path.resolve(dir, prefix), flavor);
+  const matchesPathPrefix = (candidate, prefix) => isPathIdentityWithin(path2.resolve(dir, candidate), path2.resolve(dir, prefix), flavor);
   const matchesGlob = (glob) => getGlobMatcher(glob)(normalizedPath);
   for (const prefix of options.universalDenyPrefixes ?? []) {
     if (matchesAuthorityDenyPrefix(normalizedPath, prefix, dir, flavor)) {
@@ -2394,12 +2452,15 @@ function checkFileAuthorityWithRules(agentName, filePath, cwd, effectiveRules, o
     }
   }
   const isCoderAgent = normalizedAgent === "coder" || strippedAgent === "coder";
-  if (isCoderAgent && matchesPathPrefix(normalizedPath, ".swarm")) {
+  if (isCoderAgent && isPolicyProtectedPath(normalizedPath, {
+    includeDefaults: false,
+    additional: [".git", ".swarm"]
+  })) {
     return denyAuthority(agentName, normalizedPath, {
       code: "AUTHORITY_PROTECTED_PATH",
       layer: "protected-path",
-      rule: "coder-swarm-state-protection",
-      detail: "coder writes to .swarm are always protected"
+      rule: "coder-control-state-protection",
+      detail: "coder writes to repository control state (.git/.swarm) are always protected"
     });
   }
   const isSwarmRole = Object.hasOwn(AUTHORITY_ROLE_CAPABILITIES, strippedAgent);
@@ -2608,7 +2669,7 @@ function redactShellCommand(cmd) {
 
 // src/hooks/guardrails/shell-audit-store.ts
 import * as fs from "fs";
-import * as path2 from "path";
+import * as path3 from "path";
 import { StringDecoder } from "string_decoder";
 init_logger();
 var SHELL_AUDIT_LIMITS = {
@@ -2718,10 +2779,10 @@ var _internals = {
   emitHealth: emitShellAuditHealth
 };
 function shellAuditFilePath(directory) {
-  return path2.join(directory, ".swarm", "session", "shell-audit.jsonl");
+  return path3.join(directory, ".swarm", "session", "shell-audit.jsonl");
 }
 function lockFilePath(directory) {
-  return path2.join(directory, ".swarm", "session", "shell-audit.lock");
+  return path3.join(directory, ".swarm", "session", "shell-audit.lock");
 }
 function tmpPathFor(finalPath) {
   return `${finalPath}.${process.pid}.tmp`;
@@ -2864,7 +2925,7 @@ function renameSyncWithRetry(fromPath, toPath) {
 function tryLockOnce(directory) {
   const lockPath = lockFilePath(directory);
   try {
-    _internals.mkdirSync(path2.dirname(lockPath), { recursive: true });
+    _internals.mkdirSync(path3.dirname(lockPath), { recursive: true });
     const fd = _internals.openSync(lockPath, "wx");
     _internals.closeSync(fd);
     return true;
@@ -3264,7 +3325,7 @@ function emitHealth(directory, payload) {
 // src/hooks/guardrails/audit-log.ts
 init_logger();
 import { createHash } from "crypto";
-import * as path3 from "path";
+import * as path4 from "path";
 var SHELL_AUDIT_FIELD_CLASSES = Object.freeze({
   ts: "timestamp",
   sessionID: "identifier",
@@ -3298,7 +3359,7 @@ function redactPath(filePath) {
   if (rawMacHomeMatch) {
     return `~${rawMacHomeMatch[2]}`;
   }
-  const normalized = path3.normalize(filePath);
+  const normalized = path4.normalize(filePath);
   const windowsHomeMatch = normalized.match(/^([A-Za-z]:\\[Uu][Ss][Ee][Rr][Ss]\\[^\\]+)(\\.*)$/i);
   if (windowsHomeMatch) {
     return `~\\${windowsHomeMatch[2]}`;
@@ -3360,4 +3421,4 @@ function redactDecisionLineForArchive(line) {
   return changed ? JSON.stringify(record) : line;
 }
 
-export { classifyFile, stableCanonicalStringify, checkFileAuthority, normalizeToolNameLowerCase, isInDeclaredScope, redactShellCommand, readShellAuditTail, getShellAuditFoldedSummary, finalizeShellAuditForClose, redactPath, redactDecisionLineForArchive };
+export { isPolicyProtectedPath, protectedRoots, classifyFile, stableCanonicalStringify, checkFileAuthority, normalizeToolNameLowerCase, isInDeclaredScope, redactShellCommand, readShellAuditTail, getShellAuditFoldedSummary, finalizeShellAuditForClose, redactPath, redactDecisionLineForArchive };

package/dist/cli/{index-0tfgn5x0.js → index-k10qtq71.js}

@@ -6,20 +6,20 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-79g6edht.js";
+} from "./index-x3y6zhgj.js";
 import {
   atomicWriteFile
-} from "./index-mken64yj.js";
+} from "./index-zppxpc3y.js";
 import {
   init_knowledge_types,
   isActiveStatus
 } from "./index-bk5tah7q.js";
-import {
-  require_proper_lockfile
-} from "./index-7g4c7s5r.js";
 import {
   readCachedParsedFile
 } from "./index-ed5ykebp.js";
+import {
+  require_proper_lockfile
+} from "./index-7g4c7s5r.js";
 import {
   init_logger,
   log
@@ -713,7 +713,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const {
     readAuthoritativeKnowledgeCounterRollups,
     effectiveRetrievalOutcomes
-  } = await import("./knowledge-events-kdyv4jzn.js");
+  } = await import("./knowledge-events-pwm9jc0m.js");
   const rollups = await readAuthoritativeKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -780,11 +780,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-4bhtden9.js");
-    const { KnowledgeConfigSchema } = await import("./schema-v4qcqhek.js");
+    const { quarantineEntry } = await import("./knowledge-validator-0ttfsca7.js");
+    const { KnowledgeConfigSchema } = await import("./schema-jkbfwqr2.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-96m8ckpq.js");
+      const { loadPluginConfigWithMeta } = await import("./index-xkjrg9k4.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-xyfdmrv7.js → index-mb7b1gye.js}

@@ -4,14 +4,14 @@ import {
   PlanSchema,
   TaskStatusSchema,
   init_loader
-} from "./index-3djxegsc.js";
+} from "./index-1akn19mp.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   emit
-} from "./index-aw492hpn.js";
+} from "./index-x8vw6ap1.js";
 import {
   criticalWarn,
   init_logger,

package/dist/cli/{index-0q2mjxp2.js → index-meg33yyv.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-4cgee5vh.js";
 import {
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-cpg98bh1.js → index-myt57pht.js}

@@ -795,7 +795,7 @@ var init_tool_metadata = __esm(() => {
       agents: ["architect"]
     },
     collect_lane_results: {
-      description: "collect or poll results for a dispatch_lanes_async batch; supports both non-blocking polling (wait omitted or false) and blocking join (wait: true). Non-blocking polls include pending lane identities by default and process settled lanes incrementally while continuing independent work; busy/retry lanes are not timed out just because they run for a long time. Does not advance workflow gates. Inline output for a settled lane is delivered only once: later polls of the same lane set output_omitted_repeat: true and omit output, but still include output_ref for recovery via retrieve_lane_output.",
+      description: "collect or poll results for a dispatch_lanes_async batch; a pure OBSERVER that never cancels or terminalizes child work unless you explicitly pass cancel_pending. Supports both non-blocking polling (wait omitted or false) and blocking join (wait: true). The wait budget bounds the observer call only \u2014 its expiry never kills a lane and is not evidence a lane died, so do not abort the workflow because a collection expired; poll again, cancel explicitly, or rely on the presumed-stale backstop. Any unsettled lane is reported in pending_lanes (batch_id, lane_id, stored status, output_ref when present) regardless of include_pending; busy/retry lanes are not timed out just because they run for a long time. Does not advance workflow gates. Inline output for a settled lane is delivered only once: later polls of the same lane set output_omitted_repeat: true and omit output, but still include output_ref for recovery via retrieve_lane_output.",
       agents: ["architect"]
     },
     summarize_work: {

package/dist/cli/{index-2e1294d1.js → index-n5pxkera.js}

@@ -2,7 +2,7 @@
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-rq6aetkv.js";
+} from "./index-v689bmr2.js";
 import {
   withTimeoutSignal
 } from "./index-q7sjgr1y.js";
@@ -12,11 +12,11 @@ import {
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-0tfgn5x0.js";
+} from "./index-k10qtq71.js";
 import {
   effectiveRetrievalOutcomes,
   readAuthoritativeKnowledgeCounterRollups
-} from "./index-dn6yt0xg.js";
+} from "./index-tdzbm974.js";
 import {
   advisoryWarn,
   init_warning_buffer
@@ -28,7 +28,7 @@ import {
 import {
   atomicWriteFileAnyRoot,
   atomicWriteSwarmFile
-} from "./index-7fh82sm1.js";
+} from "./index-td0jz8xe.js";
 import {
   init_logger,
   log,
@@ -1083,6 +1083,7 @@ async function atomicWrite2(p, content) {
   await atomicWriteFileAnyRoot(p, content);
 }
 async function generateSkills(req) {
+  const preview = req.preview === true;
   const minConfidence = req.minConfidence ?? DEFAULT_SKILL_MIN_CONFIDENCE;
   const minConfirmations = req.minConfirmations ?? DEFAULT_SKILL_MIN_CONFIRMATIONS;
   const candidates = await selectCandidateEntries(req.directory, {
@@ -1158,7 +1159,9 @@ async function generateSkills(req) {
       }
     }
     let content = renderSkillMarkdown(cluster, req.mode);
-    await writeEvalStub(req.directory, cluster.slug, generateEvalStub(cluster));
+    if (!preview) {
+      await writeEvalStub(req.directory, cluster.slug, generateEvalStub(cluster));
+    }
     if (await isRejectedSkillContent(req.directory, cluster.slug, content)) {
       result.skipped.push({
         slug: cluster.slug,
@@ -1167,7 +1170,7 @@ async function generateSkills(req) {
       continue;
     }
     let evaluation;
-    if (req.evaluate) {
+    if (req.evaluate && !preview) {
       let incumbentContent;
       const existingActivePath = activePath(req.directory, cluster.slug);
       if (existsSync2(existingActivePath)) {
@@ -1201,18 +1204,20 @@ async function generateSkills(req) {
       }
     }
     let missingSourceIds = [];
-    if (req.mode === "active") {
+    if (!preview && req.mode === "active") {
       const idsToStamp = req.sourceKnowledgeIds?.length ? req.sourceKnowledgeIds : cluster.entries.map((e) => e.id);
       const { missing } = await stampSourceEntries(req.directory, cluster.slug, idsToStamp);
       missingSourceIds = missing;
       if (missingSourceIds.length > 0) {
         content = injectMissingIdsIntoFrontmatter(content, missingSourceIds);
       }
-    } else if (req.mode === "draft") {
+    } else if (!preview && req.mode === "draft") {
       const idsToStamp = req.sourceKnowledgeIds?.length ? req.sourceKnowledgeIds : cluster.entries.map((e) => e.id);
       await stampSourceEntries(req.directory, cluster.slug, idsToStamp, "draft");
     }
-    await atomicWrite2(targetPath, content);
+    if (!preview) {
+      await atomicWrite2(targetPath, content);
+    }
     result.written.push({
       slug: cluster.slug,
       path: targetPath,
@@ -1220,7 +1225,8 @@ async function generateSkills(req) {
       sourceKnowledgeIds: cluster.entries.map((e) => e.id),
       missingSourceKnowledgeIds: missingSourceIds,
       preserved,
-      evaluation
+      evaluation,
+      ...preview ? { content } : {}
     });
   }
   return result;

package/dist/cli/{index-n0vc5b5t.js → index-n823qsae.js}

@@ -3,7 +3,7 @@ import {
   ALL_AGENT_NAMES,
   SUMMARIZER_EXEMPT_TOOL_NAMES,
   init_constants
-} from "./index-cpg98bh1.js";
+} from "./index-myt57pht.js";
 import {
   OUTCOME_BLOCK_THRESHOLD,
   init_knowledge_types
@@ -21,7 +21,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.152.1",
+    version: "7.153.1",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -132,6 +132,7 @@ var init_package = __esm(() => {
       "check:retention": "bun run scripts/check-retention-registry.ts",
       "check:core-events": "bun run scripts/check-core-events-usage.ts",
       "check:shell-audit": "bun run scripts/check-shell-audit-usage.ts",
+      "check:trajectory-store": "bun run scripts/check-trajectory-store-usage.ts",
       "check:test-file-cap": "bun run scripts/check-test-file-cap.ts",
       "check:pending-fragment": "bun run scripts/check-pending-fragment.ts",
       "check:gate-portability": "bun run scripts/check-gate-portability.ts",
@@ -784,11 +785,19 @@ var init_schema = __esm(() => {
     execution_stall_warn_calls: exports_external.number().int().min(1).default(30),
     execution_stall_stop_calls: exports_external.number().int().min(1).default(60),
     execution_stall_episode_minutes: exports_external.number().int().min(1).default(30),
-    sandbox_macos_enabled: exports_external.boolean().optional()
+    sandbox_macos_enabled: exports_external.boolean().optional(),
+    sandbox: exports_external.object({
+      mode: exports_external.enum(["advisory", "required"]).default("advisory"),
+      require_filesystem: exports_external.boolean().default(false),
+      require_network: exports_external.boolean().default(false),
+      require_process: exports_external.boolean().default(false),
+      network_mode: exports_external.enum(["off", "on"]).default("off"),
+      network_allowlist: exports_external.array(exports_external.string().min(1)).max(128).default([]),
+      writable_roots: exports_external.array(exports_external.string().min(1)).max(128).default([])
+    }).optional()
   });
   WatchdogConfigSchema = exports_external.object({
     scope_guard: exports_external.boolean().default(true),
-    skip_in_turbo: exports_external.boolean().default(false),
     delegation_ledger: exports_external.boolean().default(true)
   });
   SelfReviewConfigSchema = exports_external.object({
@@ -1341,7 +1350,7 @@ var init_schema = __esm(() => {
       stuck_on_test: 3,
       context_thrash: 10
     })),
-    max_trajectory_lines: exports_external.number().min(10).default(1000),
+    max_trajectory_lines: exports_external.number().min(10).max(1e4).default(1000),
     escalation_enabled: exports_external.boolean().default(true),
     detection_timeout_ms: exports_external.number().min(10).default(100)
   });
@@ -1601,14 +1610,14 @@ var init_schema = __esm(() => {
     enabled: false
   };
   DEFAULT_PR_REVIEW_RESILIENCE_CONFIG = {
-    enabled: true,
+    enabled: false,
     canary_probe_ms: 300000,
     status_probe_timeout_ms: 2000,
     correlated_failure_threshold: 2,
     max_retry_attempts_after_initial: 2
   };
   PrReviewResilienceConfigSchema = exports_external.object({
-    enabled: exports_external.boolean().default(true),
+    enabled: exports_external.boolean().default(false),
     canary_probe_ms: exports_external.number().int().min(1).max(3600000).default(300000),
     status_probe_timeout_ms: exports_external.number().int().min(1).max(60000).default(2000),
     correlated_failure_threshold: exports_external.number().int().min(2).max(8).default(2),

package/dist/cli/{index-6zkm4p7p.js → index-pk1gbqmq.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   telemetry
-} from "./index-aw492hpn.js";
+} from "./index-x8vw6ap1.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-nd8tkb3g.js → index-smqsp8hs.js}

@@ -6,12 +6,12 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-0tfgn5x0.js";
+} from "./index-k10qtq71.js";
 import {
   queryHistoricalOutcomes,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-dn6yt0xg.js";
+} from "./index-tdzbm974.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -224,11 +224,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-4bhtden9.js");
+    const { quarantineEntry } = await import("./knowledge-validator-0ttfsca7.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-v4qcqhek.js");
-      const { loadPluginConfigWithMeta } = await import("./index-96m8ckpq.js");
+      const { KnowledgeConfigSchema } = await import("./schema-jkbfwqr2.js");
+      const { loadPluginConfigWithMeta } = await import("./index-xkjrg9k4.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {