opencode-swarm 7.153.0 → 7.153.2

package/dist/cli/{index-9gjbe4e4.js → index-1gzdnjg9.js}

@@ -9,11 +9,11 @@ import {
 } from "./index-y8552snf.js";
 import {
   atomicWriteFile
-} from "./index-0n7nm9e8.js";
+} from "./index-zppxpc3y.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-g0m6kypc.js → index-21pt4jwf.js}

@@ -4,7 +4,7 @@ import {
   readShellAuditTail,
   redactPath,
   redactShellCommand
-} from "./index-6v77adf7.js";
+} from "./index-h3zhb18p.js";
 
 // src/services/guardrail-log-service.ts
 var BLOCK_TYPES = new Set([

package/dist/cli/{index-z4bg1hv8.js → index-2mqmvxac.js}

@@ -8,7 +8,7 @@ import {
 import {
   EvidenceLockTimeoutError,
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   exports_external,
   init_zod
@@ -469,7 +469,14 @@ var WorktreeDescriptorSchema = exports_external.object({
   worktreeSessionId: exports_external.string().min(1).max(256),
   mergeStrategy: exports_external.enum(["merge", "rebase", "cherry-pick"]),
   laneIndex: exports_external.number().int().nonnegative().max(255),
-  worktreeDir: exports_external.string().min(1).max(4096).nullable()
+  worktreeDir: exports_external.string().min(1).max(4096).nullable(),
+  reservationId: exports_external.string().min(1).max(512).optional(),
+  generation: exports_external.number().int().min(1).optional(),
+  provisioningOwner: exports_external.object({
+    reservationId: exports_external.string().min(1).max(512),
+    generation: exports_external.number().int().min(1),
+    branchName: exports_external.string().min(1).max(1024)
+  }).strict().optional()
 }).strict();
 var TerminalResultSchema = exports_external.object({
   eventId: exports_external.string().min(1).max(256),

package/dist/cli/{index-xv881ahz.js → index-3bh4h6ve.js}

@@ -4,26 +4,26 @@ import {
 } from "./index-4cgee5vh.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-e2hs0bh7.js";
+} from "./index-5zp4c36c.js";
 import {
   KnowledgeConfigSchema,
   init_schema
-} from "./index-3z5jtyan.js";
+} from "./index-a58nmnmz.js";
 import {
   resolveHiveEventsPath
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-qgfnd206.js";
+} from "./index-x3y6zhgj.js";
 import {
   atomicWriteFile
-} from "./index-0n7nm9e8.js";
+} from "./index-zppxpc3y.js";
 import {
   assertProjectRoot
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   emit
-} from "./index-aw492hpn.js";
+} from "./index-x8vw6ap1.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -590,6 +590,7 @@ var CANONICAL_RECEIPT_SOURCES = new Set([
   "phase_override",
   "application_gate_staleness_release",
   "application_gate_denial_limit_release",
+  "application_gate_session_reset_release",
   "manual",
   "migration",
   "unknown"
@@ -1715,6 +1716,26 @@ function isLegacyUnverifiableTrace(state, traceId) {
     return false;
   return ![...state.memberships.values()].some((membership) => membership.origin === "v2");
 }
+function overlappingRepairUncertainties(state, filters) {
+  return [...state.repairUncertainties.values()].filter((uncertainty) => {
+    if (filters.phase && filters.phase !== uncertainty.phase)
+      return false;
+    if (filters.session_id && filters.session_id !== uncertainty.session_id) {
+      return false;
+    }
+    return true;
+  });
+}
+function repairUncertaintyUnavailable(uncertainties) {
+  const scoped = uncertainties.map((uncertainty) => `${uncertainty.session_id}/${uncertainty.phase}`).join(", ");
+  const detail = `receipt authority pending re-evaluation for repaired phase/session scope: ${scoped}`;
+  return {
+    ok: false,
+    code: "store_unavailable",
+    detail,
+    uncertainty: detail
+  };
+}
 async function runLocked(directory, graceDays, action, options = {}) {
   const observations = [];
   try {
@@ -1816,6 +1837,85 @@ async function commitApplicationMarkerBatch(directory, input) {
     return { committed, idempotent, rejected };
   });
 }
+async function commitGateReleaseBatch(directory, input) {
+  return runLocked(directory, input.grace_days, async (paths, state) => {
+    const committed = [];
+    const idempotent = [];
+    const rejected = [];
+    const releases = [];
+    const traceExists = state.traceIds.has(input.trace_id);
+    const staged = new Set;
+    for (const item of input.items) {
+      const membership = state.memberships.get(keyOf(input.trace_id, item.entry_id));
+      if (!membership) {
+        rejected.push({
+          entry_id: item.entry_id,
+          reason: traceExists ? "id_not_in_trace" : isLegacyUnverifiableTrace(state, input.trace_id) ? "legacy_unverifiable" : "trace_not_found"
+        });
+        continue;
+      }
+      if (membership.session_id !== input.session_id) {
+        rejected.push({ entry_id: item.entry_id, reason: "wrong_session" });
+        continue;
+      }
+      if (staged.has(item.entry_id)) {
+        idempotent.push({
+          entry_id: item.entry_id,
+          event_id: membership.gate_release?.event_id ?? releases.at(-1)?.release.event_id ?? ""
+        });
+        continue;
+      }
+      staged.add(item.entry_id);
+      if (membership.gate_release?.membership_event_id === membership.membership_event_id) {
+        idempotent.push({
+          entry_id: item.entry_id,
+          event_id: membership.gate_release.event_id
+        });
+        continue;
+      }
+      const release = {
+        source: normalizeReceiptSource(item.source),
+        reason: item.reason,
+        event_id: randomUUID2(),
+        committed_at: nowIso(),
+        membership_event_id: membership.membership_event_id
+      };
+      releases.push({
+        trace_id: input.trace_id,
+        entry_id: item.entry_id,
+        release
+      });
+      committed.push({
+        entry_id: item.entry_id,
+        event_id: release.event_id,
+        membership_event_id: release.membership_event_id
+      });
+    }
+    if (releases.length) {
+      await appendRecord(paths, state, makeRecord(state, "gate_release_committed", {
+        releases
+      }));
+    }
+    return { committed, idempotent, rejected };
+  });
+}
+async function queryLiveMemberships(directory, filters = {}) {
+  return runLocked(directory, filters.grace_days, async (_paths, state) => {
+    const overlaps = overlappingRepairUncertainties(state, {
+      phase: filters.phase,
+      session_id: filters.session_id
+    });
+    if (overlaps.length > 0) {
+      throw new ReceiptStoreError("store_unavailable", repairUncertaintyUnavailable(overlaps).detail);
+    }
+    return {
+      memberships: [...state.memberships.values()].filter((m) => (!filters.phase || m.phase === filters.phase) && (!filters.task_id || m.task_id === filters.task_id) && (!filters.session_id || m.session_id === filters.session_id) && (filters.include_terminal !== false || !m.terminal) && (filters.include_phase_closed !== false || !m.phase_closed_at) && (!filters.exposure_kind || m.exposure_kind === filters.exposure_kind)).map((m) => ({
+        ...m,
+        terminal: m.terminal ? { ...m.terminal } : undefined
+      }))
+    };
+  }, { compact: false, writeSnapshot: false });
+}
 async function queryHistoricalOutcomes(directory, entryIds, graceDays) {
   return runLocked(directory, graceDays, async (paths, state) => {
     const wanted = entryIds ? new Set(entryIds) : null;
@@ -2693,7 +2793,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
     }
     let bumps = 0;
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-w29aw5w0.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-2ngh8xvv.js");
       bumps = await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {
@@ -2730,4 +2830,4 @@ var _internals4 = {
   mergeRollupInto
 };
 
-export { queryHistoricalOutcomes, recordPhaseCloseIntent, reconcilePhaseClose, KNOWLEDGE_EVENT_SCHEMA_VERSION, MAX_EVENT_LOG_ENTRIES, RECEIPT_EVENT_TYPES, resolveKnowledgeEventsPath, resolveKnowledgeCounterBaselinePath, resolveHiveEventsPath2 as resolveHiveEventsPath, resolveLegacyApplicationLogPath, newTraceId, newEventId, appendKnowledgeEvent, appendKnowledgeEventsBatch, recordKnowledgeEvent, recordKnowledgeEventsBatch, appendHiveKnowledgeEvent, recordHiveKnowledgeEvent, readKnowledgeEvents, readHiveKnowledgeEvents, readLegacyApplicationRecords, MAX_VIOLATION_TIMESTAMPS, recomputeCounters, countViolationsInWindow, countEmptyTraceTerminals, countEntryViolationsInWindow, countEntryContradictionsInWindow, readKnowledgeCounterRollups, readAuthoritativeKnowledgeCounterRollups, effectiveRetrievalOutcomes, applyKnowledgeVerdictFeedback, _internals4 as _internals };
+export { commitGateReleaseBatch, queryLiveMemberships, queryHistoricalOutcomes, recordPhaseCloseIntent, reconcilePhaseClose, KNOWLEDGE_EVENT_SCHEMA_VERSION, MAX_EVENT_LOG_ENTRIES, RECEIPT_EVENT_TYPES, resolveKnowledgeEventsPath, resolveKnowledgeCounterBaselinePath, resolveHiveEventsPath2 as resolveHiveEventsPath, resolveLegacyApplicationLogPath, newTraceId, newEventId, appendKnowledgeEvent, appendKnowledgeEventsBatch, recordKnowledgeEvent, recordKnowledgeEventsBatch, appendHiveKnowledgeEvent, recordHiveKnowledgeEvent, readKnowledgeEvents, readHiveKnowledgeEvents, readLegacyApplicationRecords, MAX_VIOLATION_TIMESTAMPS, recomputeCounters, countViolationsInWindow, countEmptyTraceTerminals, countEntryViolationsInWindow, countEntryContradictionsInWindow, readKnowledgeCounterRollups, readAuthoritativeKnowledgeCounterRollups, effectiveRetrievalOutcomes, applyKnowledgeVerdictFeedback, _internals4 as _internals };

package/dist/cli/index-3cegckkq.js

@@ -0,0 +1,239 @@
+// @bun
+import {
+  validateSwarmPath
+} from "./index-4cgee5vh.js";
+import {
+  atomicWriteSwarmFileSync
+} from "./index-td0jz8xe.js";
+
+// src/hooks/delegation-gate/worktree-provisioning-owner.ts
+import { createHash } from "crypto";
+import * as fs from "fs";
+import * as path from "path";
+var PROVISIONING_OWNER_DIR = "worktree-provisioning-owners";
+var MAX_PROVISIONING_OWNERS = 512;
+var MAX_PROVISIONING_OWNER_BYTES = 16 * 1024;
+var PROVISIONING_JOURNAL_PATH = path.join(".swarm", "worktree-provisioning-lifecycle.json");
+var MAX_PROVISIONING_JOURNAL_BYTES = 256 * 1024;
+var MAX_PROVISIONING_JOURNAL_ENTRIES = 512;
+var WORKTREE_PROVISIONING_OWNER_LEASE_MS = 5 * 60 * 1000;
+var WORKTREE_LIFECYCLE_LOCK_FILE = ".swarm/locks/init-orphan-recovery.lock";
+var WORKTREE_PROVISIONING_LIFECYCLE_STATES = [
+  "OWNER_PUBLISHED",
+  "OWNER_REMOVED"
+];
+function ownerDirectory(directory) {
+  return path.dirname(validateSwarmPath(directory, path.join(PROVISIONING_OWNER_DIR, ".containment-anchor")));
+}
+function ownerPath(directory, callID) {
+  const digest = createHash("sha256").update(callID).digest("hex");
+  return validateSwarmPath(directory, path.join(PROVISIONING_OWNER_DIR, `${digest}.json`));
+}
+function journalPath(directory) {
+  return validateSwarmPath(directory, PROVISIONING_JOURNAL_PATH);
+}
+function isOwner(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const candidate = value;
+  const schemaVersion = candidate.schemaVersion;
+  const validTaskIdentity = schemaVersion === 1 ? candidate.taskId === undefined && candidate.reservationId === undefined && candidate.generation === undefined && candidate.branchName === undefined : schemaVersion === 2 && typeof candidate.taskId === "string" && candidate.taskId.length > 0 && candidate.taskId.length <= 512 && candidate.reservationId === undefined && candidate.generation === undefined && candidate.branchName === undefined;
+  const validV3Identity = schemaVersion === 3 && typeof candidate.taskId === "string" && candidate.taskId.length > 0 && candidate.taskId.length <= 512 && typeof candidate.reservationId === "string" && candidate.reservationId.length > 0 && candidate.reservationId.length <= 512 && typeof candidate.generation === "number" && Number.isInteger(candidate.generation) && candidate.generation > 0 && typeof candidate.branchName === "string" && candidate.branchName.length > 0 && candidate.branchName.length <= 1024;
+  return (schemaVersion === 1 || schemaVersion === 2 || schemaVersion === 3) && (validTaskIdentity || validV3Identity) && typeof candidate.callID === "string" && candidate.callID.length > 0 && candidate.callID.length <= 512 && typeof candidate.parentSessionId === "string" && candidate.parentSessionId.length > 0 && candidate.parentSessionId.length <= 512 && typeof candidate.worktreeSessionId === "string" && candidate.worktreeSessionId.length > 0 && candidate.worktreeSessionId.length <= 512 && typeof candidate.createdAt === "number" && Number.isFinite(candidate.createdAt) && candidate.createdAt >= 0;
+}
+function isLifecycleEntry(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const candidate = value;
+  const validState = WORKTREE_PROVISIONING_LIFECYCLE_STATES.includes(candidate.state);
+  return candidate.schemaVersion === 1 && validState && typeof candidate.callID === "string" && candidate.callID.length > 0 && candidate.callID.length <= 512 && typeof candidate.parentSessionId === "string" && candidate.parentSessionId.length > 0 && candidate.parentSessionId.length <= 512 && typeof candidate.worktreeSessionId === "string" && candidate.worktreeSessionId.length > 0 && candidate.worktreeSessionId.length <= 512 && (candidate.taskId === undefined || typeof candidate.taskId === "string" && candidate.taskId.length > 0 && candidate.taskId.length <= 512) && (candidate.reservationId === undefined || typeof candidate.reservationId === "string" && candidate.reservationId.length > 0 && candidate.reservationId.length <= 512) && (candidate.generation === undefined || typeof candidate.generation === "number" && Number.isInteger(candidate.generation) && candidate.generation > 0) && (candidate.branchName === undefined || typeof candidate.branchName === "string" && candidate.branchName.length > 0 && candidate.branchName.length <= 1024) && typeof candidate.recordedAt === "number" && Number.isFinite(candidate.recordedAt) && candidate.recordedAt >= 0;
+}
+function readBoundedJsonFile(filePath, maxBytes) {
+  try {
+    const stat = fs.statSync(filePath);
+    if (stat.size > maxBytes) {
+      return {
+        ok: false,
+        reason: `${path.basename(filePath)} exceeds the ${maxBytes}-byte safety bound`
+      };
+    }
+    const raw = fs.readFileSync(filePath, "utf8");
+    if (Buffer.byteLength(raw, "utf8") > maxBytes) {
+      return {
+        ok: false,
+        reason: `${path.basename(filePath)} changed beyond the ${maxBytes}-byte safety bound`
+      };
+    }
+    return { ok: true, value: JSON.parse(raw) };
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { ok: true, value: undefined };
+    }
+    return {
+      ok: false,
+      reason: `${path.basename(filePath)} is unreadable or malformed: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+}
+function readOwner(directory, callID) {
+  const absolutePath = ownerPath(directory, callID);
+  const loaded = readBoundedJsonFile(absolutePath, MAX_PROVISIONING_OWNER_BYTES);
+  if (!loaded.ok || loaded.value === undefined)
+    return null;
+  return isOwner(loaded.value) ? loaded.value : null;
+}
+function loadLifecycleJournal(directory) {
+  const loaded = readBoundedJsonFile(journalPath(directory), MAX_PROVISIONING_JOURNAL_BYTES);
+  if (!loaded.ok)
+    return { status: "uncertain", reason: loaded.reason };
+  if (loaded.value === undefined)
+    return { status: "ok", entries: [] };
+  const parsed = loaded.value;
+  if (parsed.schemaVersion !== 1 || !Array.isArray(parsed.entries)) {
+    return {
+      status: "uncertain",
+      reason: "worktree provisioning lifecycle journal is malformed"
+    };
+  }
+  if (parsed.entries.length > MAX_PROVISIONING_JOURNAL_ENTRIES) {
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning lifecycle journal exceeds the ${MAX_PROVISIONING_JOURNAL_ENTRIES}-entry safety bound`
+    };
+  }
+  const entries = [];
+  for (const entry of parsed.entries) {
+    if (!isLifecycleEntry(entry)) {
+      return {
+        status: "uncertain",
+        reason: "worktree provisioning lifecycle journal contains an invalid entry"
+      };
+    }
+    entries.push(entry);
+  }
+  return { status: "ok", entries };
+}
+function appendLifecycleEntry(directory, owner, state) {
+  const loaded = loadLifecycleJournal(directory);
+  if (loaded.status === "uncertain") {
+    throw new Error(loaded.reason);
+  }
+  const entries = [
+    ...loaded.entries,
+    {
+      schemaVersion: 1,
+      state,
+      callID: owner.callID,
+      parentSessionId: owner.parentSessionId,
+      worktreeSessionId: owner.worktreeSessionId,
+      ...owner.taskId ? { taskId: owner.taskId } : {},
+      ...owner.reservationId ? { reservationId: owner.reservationId } : {},
+      ...owner.generation !== undefined ? { generation: owner.generation } : {},
+      ...owner.branchName ? { branchName: owner.branchName } : {},
+      recordedAt: Date.now()
+    }
+  ];
+  const journal = {
+    schemaVersion: 1,
+    entries: entries.slice(-MAX_PROVISIONING_JOURNAL_ENTRIES)
+  };
+  atomicWriteSwarmFileSync(journalPath(directory), JSON.stringify(journal, null, 2));
+}
+function recordWorktreeProvisioningOwner(directory, input) {
+  const wantsV3 = input.reservationId !== undefined || input.generation !== undefined || input.branchName !== undefined;
+  if (wantsV3 && (!input.taskId || !input.reservationId || input.generation === undefined || !input.branchName)) {
+    throw new Error("worktree provisioning owner v3 requires taskId, reservationId, generation, and branchName");
+  }
+  const owner = {
+    schemaVersion: wantsV3 ? 3 : input.taskId ? 2 : 1,
+    callID: input.callID,
+    parentSessionId: input.parentSessionId,
+    worktreeSessionId: input.worktreeSessionId,
+    ...input.taskId ? { taskId: input.taskId } : {},
+    ...input.reservationId ? { reservationId: input.reservationId } : {},
+    ...input.generation !== undefined ? { generation: input.generation } : {},
+    ...input.branchName ? { branchName: input.branchName } : {},
+    createdAt: Date.now()
+  };
+  if (!isOwner(owner)) {
+    throw new Error("invalid worktree provisioning owner");
+  }
+  const absolutePath = ownerPath(directory, input.callID);
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true });
+  atomicWriteSwarmFileSync(absolutePath, `${JSON.stringify(owner)}
+`);
+  appendLifecycleEntry(directory, owner, "OWNER_PUBLISHED");
+  return owner;
+}
+function removeWorktreeProvisioningOwner(directory, callID, expected) {
+  try {
+    const owner = readOwner(directory, callID);
+    if (owner?.schemaVersion === 3 && (!expected || expected.reservationId !== owner.reservationId || expected.generation !== owner.generation || expected.branchName !== owner.branchName)) {
+      return false;
+    }
+    fs.unlinkSync(ownerPath(directory, callID));
+    if (owner)
+      appendLifecycleEntry(directory, owner, "OWNER_REMOVED");
+    return true;
+  } catch (error) {
+    return error.code === "ENOENT";
+  }
+}
+function scanWorktreeProvisioningOwnersForRecovery(directory) {
+  let directoryPath;
+  let entries;
+  try {
+    directoryPath = ownerDirectory(directory);
+    entries = fs.readdirSync(directoryPath, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json"));
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { status: "ok", owners: [] };
+    }
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning-owner directory is unreadable: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+  if (entries.length > MAX_PROVISIONING_OWNERS) {
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning-owner count exceeds the ${MAX_PROVISIONING_OWNERS}-marker safety bound`
+    };
+  }
+  const owners = [];
+  for (const entry of entries) {
+    const absolutePath = path.join(directoryPath, entry.name);
+    try {
+      const stat = fs.statSync(absolutePath);
+      if (stat.size > MAX_PROVISIONING_OWNER_BYTES) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" exceeds the recovery size bound`
+        };
+      }
+      const raw = fs.readFileSync(absolutePath, "utf8");
+      if (Buffer.byteLength(raw, "utf8") > MAX_PROVISIONING_OWNER_BYTES) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" changed beyond the recovery size bound`
+        };
+      }
+      const parsed = JSON.parse(raw);
+      if (!isOwner(parsed)) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" is invalid`
+        };
+      }
+      owners.push(parsed);
+    } catch (error) {
+      return {
+        status: "uncertain",
+        reason: `worktree provisioning owner "${entry.name}" is unreadable or malformed: ${error instanceof Error ? error.message : String(error)}`
+      };
+    }
+  }
+  return { status: "ok", owners };
+}
+
+export { WORKTREE_PROVISIONING_OWNER_LEASE_MS, WORKTREE_LIFECYCLE_LOCK_FILE, recordWorktreeProvisioningOwner, removeWorktreeProvisioningOwner, scanWorktreeProvisioningOwnersForRecovery };

package/dist/cli/{index-hkmgzesw.js → index-3fpqpyp6.js}

@@ -2,10 +2,10 @@
 import {
   init_loader,
   loadPluginConfigWithMeta
-} from "./index-e2hs0bh7.js";
+} from "./index-5zp4c36c.js";
 import {
   init_schema
-} from "./index-3z5jtyan.js";
+} from "./index-a58nmnmz.js";
 import {
   DEFAULT_WORKTREE_ISOLATION_CONFIG,
   init_constants

package/dist/cli/{index-1yfpw7w0.js → index-3ttktt56.js}

@@ -7,7 +7,7 @@ import {
   readLinkPointer,
   resolveKnowledgeStoreDir,
   resolveLinkDir
-} from "./index-qgfnd206.js";
+} from "./index-x3y6zhgj.js";
 
 // src/knowledge/curation-policy.ts
 import { appendFile, mkdir as mkdir2, readFile as readFile2 } from "fs/promises";

package/dist/cli/{index-x6zy6veh.js → index-4pjkdcgc.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-9gjbe4e4.js";
+} from "./index-1gzdnjg9.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,

package/dist/cli/{index-5w915x8b.js → index-56ejcj07.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-1yfpw7w0.js";
+} from "./index-3ttktt56.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,13 +9,13 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-77xy577c.js";
+} from "./index-bw55r5bz.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-qgfnd206.js";
+} from "./index-x3y6zhgj.js";
 import {
   atomicWriteFile
-} from "./index-0n7nm9e8.js";
+} from "./index-zppxpc3y.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-7q56f3se.js → index-5ad8xcv3.js}

@@ -2,14 +2,14 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-77xy577c.js";
+} from "./index-bw55r5bz.js";
 import {
   init_git_executable,
   resolveGitExecutableAsync
 } from "./index-9e6fdz2h.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-qgfnd206.js";
+} from "./index-x3y6zhgj.js";
 import {
   init_knowledge_types,
   isActiveStatus

package/dist/cli/{index-e2hs0bh7.js → index-5zp4c36c.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-3z5jtyan.js";
+} from "./index-a58nmnmz.js";
 import {
   GIT_BINARY_ENV_VAR,
   init_git_executable

package/dist/cli/{index-9vdh4kdx.js → index-84m4per1.js}

@@ -14,14 +14,14 @@ import {
   detectWindowsWrites,
   getSharedClassifierGuardrailBlock,
   resolveWriteTargets
-} from "./index-95qra69h.js";
+} from "./index-j4f8sz67.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-6v77adf7.js";
+} from "./index-h3zhb18p.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-txbd25bc.js → index-891g7hbf.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   emit
-} from "./index-aw492hpn.js";
+} from "./index-x8vw6ap1.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-3z5jtyan.js → index-a58nmnmz.js}

@@ -21,7 +21,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.153.0",
+    version: "7.153.2",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -132,7 +132,14 @@ var init_package = __esm(() => {
       "check:retention": "bun run scripts/check-retention-registry.ts",
       "check:core-events": "bun run scripts/check-core-events-usage.ts",
       "check:shell-audit": "bun run scripts/check-shell-audit-usage.ts",
+      "check:trajectory-store": "bun run scripts/check-trajectory-store-usage.ts",
+      "check:mock-cleanup": "bun run scripts/check-mock-cleanup.ts",
+      "check:invariants": "bun run scripts/check-invariants.ts",
+      "check:cross-contamination": "bun run scripts/check-cross-contamination.ts",
+      "check:test-clock": "bun run scripts/check-test-clock.ts",
       "check:test-file-cap": "bun run scripts/check-test-file-cap.ts",
+      "check:test-tmpdir": "bun run scripts/check-test-tmpdir.ts",
+      "check:bash-portability": "bun run scripts/check-bash-portability.ts",
       "check:pending-fragment": "bun run scripts/check-pending-fragment.ts",
       "check:gate-portability": "bun run scripts/check-gate-portability.ts",
       "check:bare-spawn": "bun run scripts/check-bare-executable-spawn.ts",
@@ -1349,7 +1356,7 @@ var init_schema = __esm(() => {
       stuck_on_test: 3,
       context_thrash: 10
     })),
-    max_trajectory_lines: exports_external.number().min(10).default(1000),
+    max_trajectory_lines: exports_external.number().min(10).max(1e4).default(1000),
     escalation_enabled: exports_external.boolean().default(true),
     detection_timeout_ms: exports_external.number().min(10).default(100)
   });

package/dist/cli/{index-77xy577c.js → index-bw55r5bz.js}

@@ -6,20 +6,20 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-qgfnd206.js";
+} from "./index-x3y6zhgj.js";
 import {
   atomicWriteFile
-} from "./index-0n7nm9e8.js";
+} from "./index-zppxpc3y.js";
 import {
   init_knowledge_types,
   isActiveStatus
 } from "./index-bk5tah7q.js";
-import {
-  require_proper_lockfile
-} from "./index-7g4c7s5r.js";
 import {
   readCachedParsedFile
 } from "./index-ed5ykebp.js";
+import {
+  require_proper_lockfile
+} from "./index-7g4c7s5r.js";
 import {
   init_logger,
   log
@@ -713,7 +713,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const {
     readAuthoritativeKnowledgeCounterRollups,
     effectiveRetrievalOutcomes
-  } = await import("./knowledge-events-79cak7eb.js");
+  } = await import("./knowledge-events-nvkhtqvn.js");
   const rollups = await readAuthoritativeKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -780,11 +780,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-qsecnt2d.js");
-    const { KnowledgeConfigSchema } = await import("./schema-19qsv6fw.js");
+    const { quarantineEntry } = await import("./knowledge-validator-4bphyrec.js");
+    const { KnowledgeConfigSchema } = await import("./schema-83tbte2g.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-hexhzq5j.js");
+      const { loadPluginConfigWithMeta } = await import("./index-kvk65qzz.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {