opencode-swarm 7.164.7 → 7.164.9

package/dist/cli/{hive-promoter-a4cs5sbr.js → hive-promoter-8nr61bhn.js}

@@ -7,66 +7,66 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-bvjwmmdc.js";
-import"./index-yzn1fm9a.js";
-import"./index-jkwfajh1.js";
-import"./index-3kgg2n6z.js";
-import"./index-9qkytpwa.js";
-import"./index-wgqeqy68.js";
+} from "./index-mh57gjsd.js";
+import"./index-vjef4fy9.js";
+import"./index-41m7f0xj.js";
+import"./index-8nsknkgs.js";
+import"./index-18z6gf3a.js";
+import"./index-0rpfwzkw.js";
 import"./index-txdagbh7.js";
 import"./index-cw912re7.js";
 import"./index-3146wmgv.js";
-import"./index-gm65h7bh.js";
-import"./index-4vx89ymn.js";
-import"./index-581bcqp9.js";
+import"./index-g1rnq3pg.js";
+import"./index-7tme4v2x.js";
+import"./index-teq4xzkh.js";
 import"./index-70ha9e09.js";
-import"./index-zg34ngdf.js";
-import"./index-x3qzt684.js";
-import"./index-zaab1wz9.js";
-import"./index-8ntf8jnj.js";
+import"./index-s6ejwhew.js";
+import"./index-bv90qkyw.js";
+import"./index-n4fzmqz8.js";
+import"./index-83bewmqd.js";
 import"./index-zsrtt42s.js";
-import"./index-y75xd50f.js";
+import"./index-1afqzpj4.js";
 import"./index-w3gtqey0.js";
 import"./index-sxxh4ams.js";
-import"./index-h3k3rgyr.js";
-import"./index-0zjwnbze.js";
+import"./index-3qeznjj9.js";
+import"./index-sdhshera.js";
 import"./index-rtry5xyf.js";
-import"./index-388sxv1b.js";
-import"./index-xc3q62ev.js";
-import"./index-1ekzd5wf.js";
-import"./index-fq1wfsmw.js";
-import"./index-v1fj9exz.js";
+import"./index-rgj5zmms.js";
+import"./index-pxzx4wxb.js";
+import"./index-qxvdwx79.js";
+import"./index-qkzyfnmc.js";
+import"./index-wnw2rt73.js";
 import"./index-ry16d01s.js";
-import"./index-3sv8t7ca.js";
+import"./index-sf24zdbp.js";
 import"./index-556ja8an.js";
 import"./index-4fwbbad3.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-rey1tzcw.js";
-import"./index-63enf73z.js";
-import"./index-46yrz972.js";
+} from "./index-nj2gap5p.js";
+import"./index-h933exaw.js";
+import"./index-5kstr2ga.js";
 import"./index-zg9d392c.js";
 import"./index-n832052r.js";
 import"./index-8tqqmsav.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-xy59dnvq.js";
-import"./index-8ck1jkhd.js";
+import"./index-jpfktfb7.js";
+import"./index-8m3w7sr7.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-9ydhzegh.js";
+import"./index-1anz3srx.js";
 import"./index-8psybzzf.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-93znbdam.js";
-import"./index-mr3h3sm5.js";
+import"./index-7fyjv3f2.js";
+import"./index-pkga8b4j.js";
 import"./index-bk5tah7q.js";
 import"./index-7qefgq4j.js";
-import"./index-2czt53wz.js";
+import"./index-2bgr671r.js";
 import"./index-t1qzjhnj.js";
-import"./index-kvq1e82k.js";
+import"./index-ww6zm5hr.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{index-wgqeqy68.js → index-0rpfwzkw.js}

@@ -9,11 +9,11 @@ import {
 } from "./index-txdagbh7.js";
 import {
   atomicWriteFile
-} from "./index-mr3h3sm5.js";
+} from "./index-pkga8b4j.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-2czt53wz.js";
+} from "./index-2bgr671r.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-9qkytpwa.js → index-18z6gf3a.js}

@@ -3,7 +3,7 @@ import {
   EvaluationRunV1Schema,
   GateAuditResultV1Schema,
   getProtectedEvaluationRunIds
-} from "./index-wgqeqy68.js";
+} from "./index-0rpfwzkw.js";
 import {
   validateWorkspaceRoot
 } from "./index-cw912re7.js";
@@ -13,7 +13,7 @@ import {
   projectDbExists,
   readEffectiveSpecSync,
   withDurabilityClass
-} from "./index-x3qzt684.js";
+} from "./index-bv90qkyw.js";
 import {
   getWorktreeMergeFailure
 } from "./index-zsrtt42s.js";
@@ -27,7 +27,7 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-388sxv1b.js";
+} from "./index-rgj5zmms.js";
 import {
   LedgerStaleWriterError,
   appendLedgerEvent,
@@ -47,10 +47,10 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-v1fj9exz.js";
+} from "./index-wnw2rt73.js";
 import {
   appendCoreEventSync
-} from "./index-3sv8t7ca.js";
+} from "./index-sf24zdbp.js";
 import {
   init_executor,
   isUntrustedEnvKey,
@@ -74,7 +74,7 @@ import {
 } from "./index-r3mvsbtq.js";
 import {
   PlanSchema
-} from "./index-xy59dnvq.js";
+} from "./index-jpfktfb7.js";
 import {
   GIT_BINARY_ENV_VAR,
   describeGitResolution,
@@ -88,14 +88,14 @@ import {
   assertProjectRoot,
   tryAcquireLock,
   withEvidenceLock
-} from "./index-2czt53wz.js";
+} from "./index-2bgr671r.js";
 import {
   invalidateCachedArtifact,
   readCachedParsedFile
 } from "./index-t1qzjhnj.js";
 import {
   emit
-} from "./index-kvq1e82k.js";
+} from "./index-ww6zm5hr.js";
 import {
   ZodError,
   init_zod

package/dist/cli/{index-y75xd50f.js → index-1afqzpj4.js}

@@ -14,10 +14,10 @@ import {
   reconcileLandedMerge,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-388sxv1b.js";
+} from "./index-rgj5zmms.js";
 import {
   appendCoreEventSync
-} from "./index-3sv8t7ca.js";
+} from "./index-sf24zdbp.js";
 import {
   isPathWithinDeclaredScope
 } from "./index-556ja8an.js";
@@ -37,7 +37,7 @@ import {
 } from "./index-7qefgq4j.js";
 import {
   tryAcquireLock
-} from "./index-2czt53wz.js";
+} from "./index-2bgr671r.js";
 import {
   criticalWarn,
   init_logger
@@ -487,7 +487,7 @@ async function cleanupRecoveredWorktree(directory, descriptor) {
     awaitingMergeByCallID,
     cleanupStandardWorktreeForCallId,
     standardWorktreeByCallID
-  } = await import("./worktree-isolation-s9m3bgah.js");
+  } = await import("./worktree-isolation-s0d3qtpv.js");
   standardWorktreeByCallID.delete(descriptor.callID);
   if (hasResidue)
     awaitingMergeByCallID.set(descriptor.callID, {
@@ -611,7 +611,7 @@ async function recoverCoderSettlement(directory, taskId) {
           awaitingMergeByCallID,
           finishStandardWorktreeDispatch,
           standardWorktreeByCallID
-        } = await import("./worktree-isolation-s9m3bgah.js");
+        } = await import("./worktree-isolation-s0d3qtpv.js");
         const descriptor = wal.worktree;
         const reconstructedDispatch = {
           callID: descriptor.callID,

package/dist/cli/{index-9ydhzegh.js → index-1anz3srx.js}

@@ -9,7 +9,7 @@ import {
   pseudonymousRef,
   resolveLineageSalt,
   telemetry
-} from "./index-kvq1e82k.js";
+} from "./index-ww6zm5hr.js";
 
 // src/health/learning-health.ts
 import { promises as fs } from "fs";

package/dist/cli/{index-2czt53wz.js → index-2bgr671r.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   emit
-} from "./index-kvq1e82k.js";
+} from "./index-ww6zm5hr.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-h3k3rgyr.js → index-3qeznjj9.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-0zjwnbze.js";
+} from "./index-sdhshera.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,13 +9,13 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-rey1tzcw.js";
+} from "./index-nj2gap5p.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-93znbdam.js";
+} from "./index-7fyjv3f2.js";
 import {
   atomicWriteFile
-} from "./index-mr3h3sm5.js";
+} from "./index-pkga8b4j.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-jkwfajh1.js → index-41m7f0xj.js}

@@ -11,16 +11,16 @@ import {
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-8ck1jkhd.js";
+} from "./index-8m3w7sr7.js";
 import {
   observeStoreHealth
-} from "./index-9ydhzegh.js";
+} from "./index-1anz3srx.js";
 import {
   init_constants
 } from "./index-8psybzzf.js";
 import {
   telemetry
-} from "./index-kvq1e82k.js";
+} from "./index-ww6zm5hr.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-46yrz972.js → index-5kstr2ga.js}

@@ -2,10 +2,10 @@
 import {
   init_loader,
   loadPluginConfigWithMeta
-} from "./index-xy59dnvq.js";
+} from "./index-jpfktfb7.js";
 import {
   init_schema
-} from "./index-8ck1jkhd.js";
+} from "./index-8m3w7sr7.js";
 import {
   DEFAULT_WORKTREE_ISOLATION_CONFIG,
   init_constants

package/dist/cli/{index-93znbdam.js → index-7fyjv3f2.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   atomicWriteFile
-} from "./index-mr3h3sm5.js";
+} from "./index-pkga8b4j.js";
 import {
   canonicalRootKeyFresh
 } from "./index-7qefgq4j.js";

package/dist/cli/{index-4vx89ymn.js → index-7tme4v2x.js}

@@ -6,12 +6,12 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-rey1tzcw.js";
+} from "./index-nj2gap5p.js";
 import {
   queryHistoricalOutcomes,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-63enf73z.js";
+} from "./index-h933exaw.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -224,11 +224,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-5e6qbq6h.js");
+    const { quarantineEntry } = await import("./knowledge-validator-5zqwvnvr.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-8dfjsrk6.js");
-      const { loadPluginConfigWithMeta } = await import("./index-c4j9sjcs.js");
+      const { KnowledgeConfigSchema } = await import("./schema-4yjk7z24.js");
+      const { loadPluginConfigWithMeta } = await import("./index-vsxq8b54.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-8ntf8jnj.js → index-83bewmqd.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-8tqqmsav.js";
 import {
   observeStoreHealth
-} from "./index-9ydhzegh.js";
+} from "./index-1anz3srx.js";
 import {
   canonicalRootKey,
   canonicalRootKeyFresh,
@@ -12,13 +12,13 @@ import {
 } from "./index-7qefgq4j.js";
 import {
   withEvidenceLock
-} from "./index-2czt53wz.js";
+} from "./index-2bgr671r.js";
 import {
   atomicWriteSwarmFileSync
 } from "./index-t1qzjhnj.js";
 import {
   telemetry
-} from "./index-kvq1e82k.js";
+} from "./index-ww6zm5hr.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-8ck1jkhd.js → index-8m3w7sr7.js}

@@ -21,7 +21,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.164.7",
+    version: "7.164.9",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -1675,7 +1675,7 @@ var init_schema = __esm(() => {
     watchdog: WatchdogConfigSchema.optional().describe("Scope-guard and delegation-ledger watchdog settings."),
     self_review: SelfReviewConfigSchema.optional().describe("Advisory self-review after coder delegation."),
     auto_review: AutoReviewConfigSchema.optional().describe("Opt-in execution-diff review by the reviewer model in a fresh ephemeral session at task/phase boundaries."),
-    tool_filter: ToolFilterConfigSchema.optional().describe("Controls which tools each agent is allowed to use."),
+    tool_filter: ToolFilterConfigSchema.optional().describe("Controls which plugin tools each agent is allowed to use; enforced through host-side per-agent permission denies (issue #2528). enabled: false lifts the plugin-tool allow-list but keeps each role's read-only write-family floor."),
     authority: AuthorityConfigSchema.optional().describe("Per-agent file write authority rules."),
     plan_cursor: PlanCursorConfigSchema.optional().describe("Compressed plan summary injection settings."),
     context_map: ContextMapConfigSchema.optional().describe("Context Map (issue #1104, FR-006) \u2014 opt-in."),
@@ -1890,7 +1890,7 @@ var init_schema = __esm(() => {
     })).describe("Full-auto autonomous orchestration with critic oversight: permission policy, denial accounting, oversight cadence triggers (v2 preserves v1 fields so existing configs load unchanged)."),
     pr_monitor: PrMonitorConfigSchema.optional().describe("GitHub PR subscription and polling (FR-001) \u2014 disabled by default; opt-in for real-time PR status updates."),
     external_skills: ExternalSkillsConfigSchema.optional().describe("External skills: candidate model, discovery, and quarantine store (FR-001) \u2014 all subsystems opt-in."),
-    skills: SkillsConfigSchema.optional().describe("Opt-in gate for the 7 skill_* management tools (FR-004). Default false: the tools are absent from the architect tool surface."),
+    skills: SkillsConfigSchema.optional().describe("Opt-in gate for the 7 skill_* management tools (FR-004). Default false: the tools are host-denied for every agent except skill_improver (genuinely unreachable, not merely unlisted \u2014 issue #2528)."),
     skill_opt: SkillOptConfigSchema.optional().describe("Governed skill optimizer (issue #1822). Disabled by default; /swarm skill-opt run requires enabled: true. All other subcommands are proposal-only/read-only by default.")
   });
 });

package/dist/cli/{index-3kgg2n6z.js → index-8nsknkgs.js}

@@ -12,7 +12,7 @@ import {
   PluginConfigSchema,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-8ck1jkhd.js";
+} from "./index-8m3w7sr7.js";
 import {
   ALL_AGENT_NAMES,
   init_constants

package/dist/cli/{index-x3qzt684.js → index-bv90qkyw.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   loadDatabaseCtor
-} from "./index-zaab1wz9.js";
+} from "./index-n4fzmqz8.js";
 import {
   canonicalExistingFilesystemPath
 } from "./index-ry16d01s.js";

package/dist/cli/{index-gm65h7bh.js → index-g1rnq3pg.js}

@@ -2,7 +2,7 @@
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-h3k3rgyr.js";
+} from "./index-3qeznjj9.js";
 import {
   withTimeoutSignal
 } from "./index-q7sjgr1y.js";
@@ -12,11 +12,11 @@ import {
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-rey1tzcw.js";
+} from "./index-nj2gap5p.js";
 import {
   effectiveRetrievalOutcomes,
   readAuthoritativeKnowledgeCounterRollups
-} from "./index-63enf73z.js";
+} from "./index-h933exaw.js";
 import {
   advisoryWarn,
   init_warning_buffer

package/dist/cli/{index-63enf73z.js → index-h933exaw.js}

@@ -4,32 +4,32 @@ import {
 } from "./index-8tqqmsav.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-xy59dnvq.js";
+} from "./index-jpfktfb7.js";
 import {
   KnowledgeConfigSchema,
   init_schema
-} from "./index-8ck1jkhd.js";
+} from "./index-8m3w7sr7.js";
 import {
   observeReceiptTransition
-} from "./index-9ydhzegh.js";
+} from "./index-1anz3srx.js";
 import {
   resolveHiveEventsPath
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-93znbdam.js";
+} from "./index-7fyjv3f2.js";
 import {
   atomicWriteFile
-} from "./index-mr3h3sm5.js";
+} from "./index-pkga8b4j.js";
 import {
   canonicalRootKey
 } from "./index-7qefgq4j.js";
 import {
   assertProjectRoot
-} from "./index-2czt53wz.js";
+} from "./index-2bgr671r.js";
 import {
   emit
-} from "./index-kvq1e82k.js";
+} from "./index-ww6zm5hr.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -2815,7 +2815,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
     }
     let bumps = 0;
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-45jadhmb.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-rqkyw5zp.js");
       bumps = await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-zg8tvjb0.js → index-hwqxp3kr.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-x2t2tbm2.js";
+} from "./index-nnetagj1.js";
 import {
   handleGuardrailLog
-} from "./index-ry4mwbc2.js";
+} from "./index-prmwcpqn.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -94,57 +94,57 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-bvjwmmdc.js";
-import"./index-yzn1fm9a.js";
-import"./index-jkwfajh1.js";
-import"./index-3kgg2n6z.js";
-import"./index-9qkytpwa.js";
-import"./index-wgqeqy68.js";
+} from "./index-mh57gjsd.js";
+import"./index-vjef4fy9.js";
+import"./index-41m7f0xj.js";
+import"./index-8nsknkgs.js";
+import"./index-18z6gf3a.js";
+import"./index-0rpfwzkw.js";
 import"./index-txdagbh7.js";
 import"./index-cw912re7.js";
 import"./index-3146wmgv.js";
-import"./index-gm65h7bh.js";
-import"./index-4vx89ymn.js";
-import"./index-581bcqp9.js";
+import"./index-g1rnq3pg.js";
+import"./index-7tme4v2x.js";
+import"./index-teq4xzkh.js";
 import"./index-70ha9e09.js";
-import"./index-zg34ngdf.js";
-import"./index-x3qzt684.js";
-import"./index-zaab1wz9.js";
-import"./index-8ntf8jnj.js";
+import"./index-s6ejwhew.js";
+import"./index-bv90qkyw.js";
+import"./index-n4fzmqz8.js";
+import"./index-83bewmqd.js";
 import"./index-zsrtt42s.js";
-import"./index-y75xd50f.js";
+import"./index-1afqzpj4.js";
 import"./index-w3gtqey0.js";
 import"./index-sxxh4ams.js";
-import"./index-h3k3rgyr.js";
-import"./index-0zjwnbze.js";
+import"./index-3qeznjj9.js";
+import"./index-sdhshera.js";
 import"./index-rtry5xyf.js";
-import"./index-388sxv1b.js";
-import"./index-xc3q62ev.js";
-import"./index-1ekzd5wf.js";
-import"./index-fq1wfsmw.js";
-import"./index-v1fj9exz.js";
+import"./index-rgj5zmms.js";
+import"./index-pxzx4wxb.js";
+import"./index-qxvdwx79.js";
+import"./index-qkzyfnmc.js";
+import"./index-wnw2rt73.js";
 import"./index-ry16d01s.js";
-import"./index-3sv8t7ca.js";
+import"./index-sf24zdbp.js";
 import"./index-556ja8an.js";
 import"./index-4fwbbad3.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-rey1tzcw.js";
-import"./index-63enf73z.js";
-import"./index-46yrz972.js";
+import"./index-nj2gap5p.js";
+import"./index-h933exaw.js";
+import"./index-5kstr2ga.js";
 import"./index-zg9d392c.js";
 import"./index-n832052r.js";
 import"./index-8tqqmsav.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-xy59dnvq.js";
+import"./index-jpfktfb7.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-8ck1jkhd.js";
+} from "./index-8m3w7sr7.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-9ydhzegh.js";
+import"./index-1anz3srx.js";
 import {
   AGENT_TOOL_MAP,
   ORCHESTRATOR_NAME,
@@ -152,13 +152,13 @@ import {
 } from "./index-8psybzzf.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-93znbdam.js";
-import"./index-mr3h3sm5.js";
+import"./index-7fyjv3f2.js";
+import"./index-pkga8b4j.js";
 import"./index-bk5tah7q.js";
 import"./index-7qefgq4j.js";
-import"./index-2czt53wz.js";
+import"./index-2bgr671r.js";
 import"./index-t1qzjhnj.js";
-import"./index-kvq1e82k.js";
+import"./index-ww6zm5hr.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";
@@ -374,8 +374,12 @@ function agentHasSwarmCommandTool(activeAgentName, agents, registeredAgents) {
   if (registeredTools) {
     return registeredTools.swarm_command === true;
   }
+  const registeredPermission = registeredAgents?.[name]?.permission;
+  if (registeredPermission && typeof registeredPermission === "object" && Object.keys(registeredPermission).length > 0) {
+    return registeredPermission.swarm_command !== "deny";
+  }
   const explicitTools = agents[name]?.config?.tools;
-  if (explicitTools) {
+  if (explicitTools && explicitTools.swarm_command !== undefined) {
     return explicitTools.swarm_command === true;
   }
   const baseName = stripKnownSwarmPrefix(name);

package/dist/cli/{index-xy59dnvq.js → index-jpfktfb7.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-8ck1jkhd.js";
+} from "./index-8m3w7sr7.js";
 import {
   GIT_BINARY_ENV_VAR,
   init_git_executable