opencode-swarm 7.163.0 → 7.164.0

package/dist/cli/{index-9ss2m4rs.js → index-1hpjwz3s.js}

@@ -1,4 +1,7 @@
 // @bun
+import {
+  loadDatabaseCtor
+} from "./index-zaab1wz9.js";
 import {
   validateSpecContent
 } from "./index-n832052r.js";
@@ -6,6 +9,9 @@ import {
   advisoryWarn,
   init_warning_buffer
 } from "./index-4rhhvd1a.js";
+import {
+  atomicWriteSwarmFileSync
+} from "./index-3b762978.js";
 
 // src/sdd/effective-spec.ts
 import { createHash } from "crypto";
@@ -691,4 +697,407 @@ function validateSpeckit(directory, options = {}) {
   return { resolution, problems };
 }
 
-export { detectSpeckit, resolveSpeckitProjection, loadSddStatusSync, buildOpenSpecProjectionSync, readEffectiveSpecSync, writeProjectedSpecSync, validateSpeckit };
+// src/db/durability.ts
+var DURABILITY_CLASSES = {
+  qa_gate_profile: "full",
+  qa_gate_profile_identity: "full",
+  task_checkpoint_receipt: "full",
+  insight_candidate: "normal",
+  phase_report: "normal",
+  project_constraints: "normal",
+  migration_failures: "normal",
+  schema_migrations: "normal"
+};
+function batchDurabilityClass(classes) {
+  for (const cls of classes) {
+    if (cls === "full")
+      return "full";
+  }
+  return "normal";
+}
+function applySynchronousForClass(db, cls) {
+  db.run(cls === "full" ? "PRAGMA synchronous = FULL;" : "PRAGMA synchronous = NORMAL;");
+}
+function withDurabilityClass(db, cls, fn) {
+  applySynchronousForClass(db, cls);
+  try {
+    return fn();
+  } finally {
+    applySynchronousForClass(db, "normal");
+  }
+}
+
+// src/db/canonical-project.ts
+import { realpathSync } from "fs";
+import { resolve as resolve2 } from "path";
+var _internals = {
+  realpathSync
+};
+function canonicalProjectKey(directory) {
+  const lexical = resolve2(directory);
+  let canonical;
+  try {
+    canonical = _internals.realpathSync(lexical);
+  } catch {
+    canonical = lexical;
+  }
+  return process.platform === "win32" ? canonical.toLowerCase() : canonical;
+}
+
+// src/db/project-db.ts
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, unlinkSync } from "fs";
+import { join as join2, resolve as resolve3 } from "path";
+
+// src/db/db-errors.ts
+class ProjectDbError extends Error {
+  category;
+  constructor(category, message) {
+    super(message);
+    this.name = "ProjectDbError";
+    this.category = category;
+  }
+}
+
+class DbWriteError extends Error {
+  category;
+  constructor(category, message) {
+    super(message);
+    this.name = "DbWriteError";
+    this.category = category;
+  }
+}
+function classifyDbWriteError(err) {
+  const errno = err?.code;
+  if (errno === "ENOSPC")
+    return "disk_full";
+  if (errno === "EACCES" || errno === "EROFS" || errno === "EPERM")
+    return "read_only";
+  const message = err instanceof Error ? err.message : String(err);
+  const upper = message.toUpperCase();
+  if (upper.includes("SQLITE_FULL") || upper.includes("DATABASE OR DISK IS FULL")) {
+    return "disk_full";
+  }
+  if (upper.includes("SQLITE_READONLY") || upper.includes("ATTEMPT TO WRITE A READONLY")) {
+    return "read_only";
+  }
+  if (upper.includes("SQLITE_CORRUPT") || upper.includes("DATABASE DISK IMAGE IS MALFORMED") || upper.includes("NOT A DATABASE")) {
+    return "corrupt";
+  }
+  if (upper.includes("SQLITE_BUSY") || upper.includes("DATABASE IS LOCKED")) {
+    return "busy";
+  }
+  return "unknown";
+}
+
+// src/db/project-db.ts
+var MIGRATION_FAILURE_ERROR_MAX_CHARS = 500;
+var MIGRATION_FAILURE_MARKER = "db-migration-failure.json";
+var MIGRATIONS = [
+  {
+    version: 1,
+    name: "create_project_constraints",
+    sql: `CREATE TABLE project_constraints (
+			id INTEGER PRIMARY KEY AUTOINCREMENT,
+			constraint_type TEXT NOT NULL,
+			content TEXT NOT NULL,
+			created_at TEXT NOT NULL DEFAULT (datetime('now'))
+		)`
+  },
+  {
+    version: 2,
+    name: "create_qa_gate_profile",
+    sql: `CREATE TABLE qa_gate_profile (
+			id INTEGER PRIMARY KEY AUTOINCREMENT,
+			plan_id TEXT NOT NULL UNIQUE,
+			created_at TEXT NOT NULL DEFAULT (datetime('now')),
+			project_type TEXT,
+			gates TEXT NOT NULL DEFAULT '{}',
+			locked_at TEXT,
+			locked_by_snapshot_seq INTEGER
+		)`
+  },
+  {
+    version: 3,
+    name: "create_qa_gate_profile_immutability_trigger",
+    sql: `CREATE TRIGGER IF NOT EXISTS trg_qa_gate_profile_no_update_after_lock
+			BEFORE UPDATE ON qa_gate_profile
+			WHEN OLD.locked_at IS NOT NULL
+			BEGIN
+				SELECT RAISE(ABORT, 'qa_gate_profile row is locked and cannot be modified after critic approval');
+			END`
+  },
+  {
+    version: 4,
+    name: "add_qa_gate_profile_raw_swarm",
+    sql: "ALTER TABLE qa_gate_profile ADD COLUMN raw_swarm TEXT"
+  },
+  {
+    version: 5,
+    name: "add_qa_gate_profile_raw_title",
+    sql: "ALTER TABLE qa_gate_profile ADD COLUMN raw_title TEXT"
+  },
+  {
+    version: 6,
+    name: "add_qa_gate_profile_identity_hash",
+    sql: "ALTER TABLE qa_gate_profile ADD COLUMN identity_hash TEXT"
+  },
+  {
+    version: 7,
+    name: "create_qa_gate_profile_identity_hash_index",
+    sql: `CREATE UNIQUE INDEX IF NOT EXISTS idx_qa_gate_profile_identity_hash
+			ON qa_gate_profile(identity_hash)
+			WHERE identity_hash IS NOT NULL`
+  },
+  {
+    version: 8,
+    name: "create_qa_gate_profile_identity",
+    sql: `CREATE TABLE qa_gate_profile_identity (
+			identity_hash TEXT PRIMARY KEY,
+			profile_id INTEGER NOT NULL UNIQUE REFERENCES qa_gate_profile(id) ON DELETE CASCADE,
+			raw_swarm TEXT NOT NULL,
+			raw_title TEXT NOT NULL,
+			readable_plan_id TEXT NOT NULL
+		)`
+  },
+  {
+    version: 9,
+    name: "create_qa_gate_profile_identity_readable_plan_index",
+    sql: `CREATE INDEX idx_qa_gate_profile_identity_readable_plan_id
+			ON qa_gate_profile_identity(readable_plan_id)`
+  },
+  {
+    version: 10,
+    name: "backfill_qa_gate_profile_identity_from_legacy_columns",
+    sql: `INSERT INTO qa_gate_profile_identity (
+				identity_hash,
+				profile_id,
+				raw_swarm,
+				raw_title,
+				readable_plan_id
+			)
+			SELECT
+				identity_hash,
+				id,
+				raw_swarm,
+				raw_title,
+				plan_id
+			FROM qa_gate_profile
+			WHERE identity_hash IS NOT NULL
+				AND raw_swarm IS NOT NULL
+				AND raw_title IS NOT NULL
+				AND NOT EXISTS (
+					SELECT 1
+					FROM qa_gate_profile_identity AS qi
+					WHERE qi.profile_id = qa_gate_profile.id
+				)`
+  },
+  {
+    version: 11,
+    name: "create_task_checkpoint_receipt",
+    sql: `CREATE TABLE task_checkpoint_receipt (
+			plan_identity_hash TEXT NOT NULL,
+			task_id TEXT NOT NULL,
+			label TEXT NOT NULL,
+			state TEXT NOT NULL CHECK(state IN ('pending', 'committed', 'logged')),
+			sha TEXT,
+			created_at TEXT NOT NULL DEFAULT (datetime('now')),
+			updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+			PRIMARY KEY(plan_identity_hash, task_id)
+		)`
+  },
+  {
+    version: 12,
+    name: "add_task_checkpoint_receipt_completion_generation",
+    sql: `ALTER TABLE task_checkpoint_receipt
+			ADD COLUMN generation INTEGER NOT NULL DEFAULT 1;
+		ALTER TABLE task_checkpoint_receipt
+			ADD COLUMN completion_active INTEGER NOT NULL DEFAULT 1
+			CHECK(completion_active IN (0, 1))`
+  },
+  {
+    version: 13,
+    name: "bind_task_checkpoint_receipt_to_completion_ledger_seq",
+    sql: `ALTER TABLE task_checkpoint_receipt
+			ADD COLUMN completion_ledger_seq INTEGER
+			CHECK(completion_ledger_seq IS NULL OR completion_ledger_seq >= 0)`
+  },
+  {
+    version: 14,
+    name: "create_migration_failures",
+    sql: `CREATE TABLE IF NOT EXISTS migration_failures (
+			id INTEGER PRIMARY KEY AUTOINCREMENT,
+			version INTEGER NOT NULL,
+			name TEXT NOT NULL,
+			error TEXT NOT NULL,
+			failed_at TEXT NOT NULL DEFAULT (datetime('now'))
+		)`
+  },
+  {
+    version: 15,
+    name: "create_insight_candidate_stream",
+    sql: `CREATE TABLE IF NOT EXISTS insight_candidate (
+			stream_id TEXT NOT NULL,
+			version INTEGER NOT NULL,
+			payload TEXT NOT NULL,
+			created_at TEXT NOT NULL,
+			consumed_at TEXT,
+			PRIMARY KEY(stream_id, version)
+		)`
+  },
+  {
+    version: 16,
+    name: "create_insight_candidate_pending_index",
+    sql: `CREATE INDEX IF NOT EXISTS idx_insight_candidate_pending
+			ON insight_candidate(stream_id, version)
+			WHERE consumed_at IS NULL`
+  },
+  {
+    version: 17,
+    name: "create_phase_report",
+    sql: `CREATE TABLE IF NOT EXISTS phase_report (
+			kind TEXT NOT NULL CHECK(kind IN ('curator_drift', 'design_doc_drift')),
+			phase INTEGER NOT NULL,
+			payload TEXT NOT NULL,
+			updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+			PRIMARY KEY(kind, phase)
+		)`
+  }
+];
+var _projectDbs = new Map;
+function recordMigrationFailure(db, migration, err, markerDir) {
+  const errorText = String(err instanceof Error ? err.message : err).slice(0, MIGRATION_FAILURE_ERROR_MAX_CHARS);
+  try {
+    db.run("INSERT INTO migration_failures (version, name, error) VALUES (?, ?, ?)", [migration.version, migration.name, errorText]);
+    return;
+  } catch {}
+  if (!markerDir)
+    return;
+  try {
+    atomicWriteSwarmFileSync(join2(markerDir, MIGRATION_FAILURE_MARKER), JSON.stringify({
+      schema_version: 1,
+      version: migration.version,
+      name: migration.name,
+      error: errorText,
+      failed_at: new Date().toISOString()
+    }, null, 2));
+  } catch {}
+}
+function removeMigrationFailureMarker(markerDir) {
+  const marker = join2(markerDir, MIGRATION_FAILURE_MARKER);
+  if (!existsSync2(marker))
+    return;
+  try {
+    unlinkSync(marker);
+  } catch {}
+}
+function isConcurrentMigrationApply(err) {
+  const msg = (err instanceof Error ? err.message : String(err)).toLowerCase();
+  if (msg.includes("unique constraint failed: schema_migrations"))
+    return true;
+  return msg.includes("already exists") && (msg.includes("table") || msg.includes("index") || msg.includes("trigger"));
+}
+function currentVersionNowCovers(db, version) {
+  const row = db.query("SELECT MAX(version) as version FROM schema_migrations").get();
+  return (row?.version ?? 0) >= version;
+}
+function runProjectMigrations(db, markerDir) {
+  db.run(`CREATE TABLE IF NOT EXISTS schema_migrations (
+		version INTEGER PRIMARY KEY,
+		name TEXT NOT NULL,
+		applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+	)`);
+  const row = db.query("SELECT MAX(version) as version FROM schema_migrations").get();
+  const currentVersion = row?.version ?? 0;
+  for (const migration of MIGRATIONS) {
+    if (migration.version <= currentVersion)
+      continue;
+    const apply = db.transaction(() => {
+      db.run(migration.sql);
+      db.run("INSERT INTO schema_migrations (version, name) VALUES (?, ?)", [
+        migration.version,
+        migration.name
+      ]);
+    });
+    try {
+      apply();
+    } catch (err) {
+      if (isConcurrentMigrationApply(err) && currentVersionNowCovers(db, migration.version)) {
+        continue;
+      }
+      recordMigrationFailure(db, migration, err, markerDir);
+      throw new ProjectDbError("migration_failed", `swarm.db migration v${migration.version} (${migration.name}) failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  if (markerDir)
+    removeMigrationFailureMarker(markerDir);
+}
+function projectDbPath(directory) {
+  return join2(resolve3(directory), ".swarm", "swarm.db");
+}
+function projectDbExists(directory) {
+  return existsSync2(join2(canonicalProjectKey(directory), ".swarm", "swarm.db"));
+}
+function checkpointWalBestEffort(db) {
+  try {
+    const row = db.query("PRAGMA wal_checkpoint(TRUNCATE)").get();
+    if (row && row.busy === 1) {
+      db.run("PRAGMA wal_checkpoint(PASSIVE);");
+    }
+  } catch {
+    try {
+      db.run("PRAGMA wal_checkpoint(PASSIVE);");
+    } catch {}
+  }
+}
+function getProjectDb(directory) {
+  const key = canonicalProjectKey(directory);
+  const existing = _projectDbs.get(key);
+  if (existing)
+    return existing;
+  const swarmDir = join2(key, ".swarm");
+  try {
+    mkdirSync2(swarmDir, { recursive: true });
+  } catch (err) {
+    throw new ProjectDbError("mkdir_failed", `Failed to create .swarm/ for project ${key}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  let db;
+  try {
+    let Db;
+    try {
+      Db = loadDatabaseCtor();
+    } catch (err) {
+      throw new ProjectDbError("driver_unavailable", `Failed to resolve a SQLite driver for project ${key}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    db = new Db(join2(swarmDir, "swarm.db"));
+    db.run("PRAGMA journal_mode = WAL;");
+    db.run("PRAGMA synchronous = NORMAL;");
+    db.run("PRAGMA busy_timeout = 5000;");
+    db.run("PRAGMA foreign_keys = ON;");
+    runProjectMigrations(db, swarmDir);
+  } catch (err) {
+    if (db) {
+      try {
+        db.close();
+      } catch {}
+    }
+    if (err instanceof ProjectDbError)
+      throw err;
+    throw new ProjectDbError("open_failed", `Failed to open .swarm/swarm.db for project ${key}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  _projectDbs.set(key, db);
+  return db;
+}
+function closeProjectDb(directory) {
+  const key = canonicalProjectKey(directory);
+  const db = _projectDbs.get(key);
+  if (db) {
+    checkpointWalBestEffort(db);
+    try {
+      db.close();
+    } finally {
+      _projectDbs.delete(key);
+    }
+  }
+}
+
+export { DURABILITY_CLASSES, batchDurabilityClass, applySynchronousForClass, withDurabilityClass, canonicalProjectKey, DbWriteError, classifyDbWriteError, projectDbPath, projectDbExists, getProjectDb, closeProjectDb, detectSpeckit, resolveSpeckitProjection, loadSddStatusSync, buildOpenSpecProjectionSync, readEffectiveSpecSync, writeProjectedSpecSync, validateSpeckit };

package/dist/cli/{index-4t68xs0p.js → index-1z4jzwja.js}

@@ -4,14 +4,14 @@ import {
   PlanSchema,
   TaskStatusSchema,
   init_loader
-} from "./index-rqh25ns3.js";
+} from "./index-nhxaa9j5.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-9crtmnqg.js";
+} from "./index-36nt17m8.js";
 import {
   emit
-} from "./index-2zgjcmmc.js";
+} from "./index-1b1h770t.js";
 import {
   criticalWarn,
   init_logger,

package/dist/cli/{index-0103w5pf.js → index-2s4s9n82.js}

@@ -9,11 +9,11 @@ import {
 } from "./index-txdagbh7.js";
 import {
   atomicWriteFile
-} from "./index-n67vx5zw.js";
+} from "./index-70bfj3v1.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-9crtmnqg.js";
+} from "./index-36nt17m8.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-9crtmnqg.js → index-36nt17m8.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   emit
-} from "./index-2zgjcmmc.js";
+} from "./index-1b1h770t.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-qy2rm1f6.js → index-4afh2cz7.js}

@@ -13,13 +13,13 @@ import {
   reconcileLandedMerge,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-eqkdjfqa.js";
+} from "./index-7r9vpkwa.js";
 import {
   canonicalRootKeyFresh
 } from "./index-ddszzne4.js";
 import {
   appendCoreEventSync
-} from "./index-8ada7ag7.js";
+} from "./index-93sepnc9.js";
 import {
   isPathWithinDeclaredScope
 } from "./index-556ja8an.js";
@@ -36,7 +36,7 @@ import {
 } from "./index-4rhhvd1a.js";
 import {
   tryAcquireLock
-} from "./index-9crtmnqg.js";
+} from "./index-36nt17m8.js";
 import {
   criticalWarn,
   init_logger
@@ -478,7 +478,7 @@ async function cleanupRecoveredWorktree(directory, descriptor) {
     awaitingMergeByCallID,
     cleanupStandardWorktreeForCallId,
     standardWorktreeByCallID
-  } = await import("./worktree-isolation-534h3c2f.js");
+  } = await import("./worktree-isolation-67fs6rz9.js");
   standardWorktreeByCallID.delete(descriptor.callID);
   if (hasResidue)
     awaitingMergeByCallID.set(descriptor.callID, {
@@ -602,7 +602,7 @@ async function recoverCoderSettlement(directory, taskId) {
           awaitingMergeByCallID,
           finishStandardWorktreeDispatch,
           standardWorktreeByCallID
-        } = await import("./worktree-isolation-534h3c2f.js");
+        } = await import("./worktree-isolation-67fs6rz9.js");
         const descriptor = wal.worktree;
         const reconstructedDispatch = {
           callID: descriptor.callID,

package/dist/cli/{index-pykfqsk0.js → index-4jersar8.js}

@@ -2,19 +2,19 @@
 import {
   computePlanStructureHash,
   derivePlanId
-} from "./index-4t68xs0p.js";
+} from "./index-1z4jzwja.js";
 import {
   appendCoreEventSync
-} from "./index-8ada7ag7.js";
+} from "./index-93sepnc9.js";
 import {
   unsafePathTextReason
 } from "./index-556ja8an.js";
 import {
   PlanSchema
-} from "./index-rqh25ns3.js";
+} from "./index-nhxaa9j5.js";
 import {
   assertProjectRoot
-} from "./index-9crtmnqg.js";
+} from "./index-36nt17m8.js";
 import {
   atomicWriteSwarmFile,
   atomicWriteSwarmFileSync

package/dist/cli/{index-n67vx5zw.js → index-70bfj3v1.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   withEvidenceLock
-} from "./index-9crtmnqg.js";
+} from "./index-36nt17m8.js";
 import {
   atomicWriteFileAnyRoot
 } from "./index-3b762978.js";

package/dist/cli/{index-eqkdjfqa.js → index-7r9vpkwa.js}

@@ -2,7 +2,7 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-zgz81a8x.js";
+} from "./index-nzrhw31r.js";
 import {
   isPathWithinDeclaredScope,
   unsafePathTextReason
@@ -26,13 +26,13 @@ import {
   atomicWriteFile,
   taskEvidencePath,
   withTaskEvidenceLock
-} from "./index-n67vx5zw.js";
+} from "./index-70bfj3v1.js";
 import {
   assertProjectRoot
-} from "./index-9crtmnqg.js";
+} from "./index-36nt17m8.js";
 import {
   telemetry
-} from "./index-2zgjcmmc.js";
+} from "./index-1b1h770t.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-8ada7ag7.js → index-93sepnc9.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   observeStoreHealth
-} from "./index-cqgpvx2d.js";
+} from "./index-wdtckfnf.js";
 import {
   telemetry
-} from "./index-2zgjcmmc.js";
+} from "./index-1b1h770t.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-s8c6f9rr.js → index-9sy65e94.js}

@@ -11,16 +11,16 @@ import {
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-m7yt3xmk.js";
+} from "./index-td6n935w.js";
 import {
   observeStoreHealth
-} from "./index-cqgpvx2d.js";
+} from "./index-wdtckfnf.js";
 import {
   init_constants
 } from "./index-9xd073d4.js";
 import {
   telemetry
-} from "./index-2zgjcmmc.js";
+} from "./index-1b1h770t.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-ptsmms01.js → index-bm73pych.js}

@@ -6,10 +6,10 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-n2mhyect.js";
+} from "./index-ynqp3jb6.js";
 import {
   atomicWriteFile
-} from "./index-n67vx5zw.js";
+} from "./index-70bfj3v1.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -713,7 +713,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const {
     readAuthoritativeKnowledgeCounterRollups,
     effectiveRetrievalOutcomes
-  } = await import("./knowledge-events-xrd9es3p.js");
+  } = await import("./knowledge-events-4h88stj7.js");
   const rollups = await readAuthoritativeKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -780,11 +780,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-s1v7kry2.js");
-    const { KnowledgeConfigSchema } = await import("./schema-6cpgnq4s.js");
+    const { quarantineEntry } = await import("./knowledge-validator-edbg761g.js");
+    const { KnowledgeConfigSchema } = await import("./schema-9xkt5hvd.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-w0yn4rmh.js");
+      const { loadPluginConfigWithMeta } = await import("./index-v3a9rmyh.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-xyhmt813.js → index-c4pynht5.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-0103w5pf.js";
+} from "./index-2s4s9n82.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,

package/dist/cli/{index-w1mc7gcm.js → index-c69jbpex.js}

@@ -14,14 +14,14 @@ import {
   detectWindowsWrites,
   getSharedClassifierGuardrailBlock,
   resolveWriteTargets
-} from "./index-7wb2v7jg.js";
+} from "./index-xk0kc1py.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-s8c6f9rr.js";
+} from "./index-9sy65e94.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-axx3t3k7.js → index-e3hwzcjv.js}

@@ -2,14 +2,14 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-ptsmms01.js";
+} from "./index-bm73pych.js";
 import {
   init_git_executable,
   resolveGitExecutableAsync
 } from "./index-9e6fdz2h.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-n2mhyect.js";
+} from "./index-ynqp3jb6.js";
 import {
   init_knowledge_types,
   isActiveStatus