opencode-swarm 7.165.0 → 7.166.1

package/dist/observability/catalog.d.ts

@@ -1,8 +1,8 @@
 /**
  * The event catalog (issue #2029).
  *
- * Exactly 59 entries, matching the `TelemetryEvent` union at
- * `src/telemetry.ts:15-165`. Thirty-eight predate the #2029 contract; the 39th is
+ * Exactly 61 entries, matching the `TelemetryEvent` union at
+ * `src/telemetry.ts:16-172`. Thirty-eight predate the #2029 contract; the 39th is
  * `agent_conflict_detected` (previously emitted through a force-cast past the
  * type system), the 40th is `close_archive_result` (issue #2030 — the
  * structured close/archive result event), the 41st is the bounded diagnostic
@@ -28,7 +28,11 @@
  * `council_round_transition`, and the 59th is `council_attempt_unscoped`
  * (issue #2046 item 9 — canonical council attempt / accepted-transition
  * observations joined to the lifecycle correlation system via the
- * server-derived `councilRoundId`). These late
+ * server-derived `councilRoundId`). The 60th is
+ * `context_source_attribution` and the 61st is `verdict_row_pipe_recovery`
+ * (issue #2482 — D3: honest savings attribution with the omit-when-unknown
+ * rule, and the #2184 verdict-row pipe-recovery fidelity class in the event
+ * lifecycle). These late
  * additions are instances
  * of the defect class this contract exists to close: an event kind entering
  * the stream with no registration.
@@ -84,7 +88,7 @@ export interface CatalogEntry {
     /**
      * Whether an event of this kind must carry `trace.parentSpanId`.
      *
-     * `false` for all 59 entries today, and that is a truthful statement about
+     * `false` for all 61 entries today, and that is a truthful statement about
      * the current system rather than a placeholder: no producer supplies a
      * parent span, so `createObservation` never sets one. Setting this to `true`
      * for a kind whose producer cannot supply a parent would make every

package/dist/sandbox/executor.d.ts

@@ -51,6 +51,16 @@ export interface SandboxExecutor {
      * Returns a record of env vars to set/unset.
      */
     getEnvOverrides(): Record<string, string | null>;
+    /**
+     * Probe result for executors backed by a native runner binary (Windows).
+     * Optional: executors without a runner binary leave it undefined and
+     * /swarm diagnose omits the downgrade reason for them.
+     */
+    readonly probeResult?: {
+        error?: string;
+    } | null;
+    /** Reason recorded via disable(), if this executor was disabled. */
+    readonly disabledReason?: string | null;
 }
 export interface SandboxPolicyOptions {
     network_mode?: 'off' | 'on';

package/dist/sandbox/win32/runner-client.d.ts

@@ -10,6 +10,8 @@
  * kill() in finally blocks.
  */
 import { spawn, spawnSync } from 'node:child_process';
+/** Policy/probe protocol version this client speaks. */
+export declare const RUNNER_PROTOCOL_SCHEMA_VERSION = 1;
 /** Result of probing the runner binary for capabilities. */
 export interface RunnerProbeResult {
     available: boolean;
@@ -23,6 +25,8 @@ export interface RunnerProbeResult {
         is_admin: boolean;
         os_version: string;
         arch: string;
+        runner_version?: string;
+        protocol_schema_version?: number;
     } | null;
     error?: string;
 }
@@ -77,6 +81,8 @@ export interface SandboxPolicy {
     network_mode: 'off' | 'on';
     env_allowlist: string[];
     env_overrides: Record<string, string>;
+    /** Keys the runner must remove from the child environment (null overrides). */
+    env_unsets: string[];
     path_stubs: string[];
     private_desktop: boolean;
     deny_alternate_data_streams: boolean;
@@ -92,6 +98,7 @@ export declare const _internals: {
     findRunnerBinary: () => string | null;
     spawnRunner: typeof spawnSync;
     spawnAsync: typeof spawn;
+    runtimeDir: string | null;
 };
 /**
  * Probe the runner binary for capabilities.

package/dist/services/context-attribution.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Context-source savings attribution (issue #2482 / D3, absorbing #1990's
+ * honesty rule).
+ *
+ * Records, per injected context source, what the surface returned and what it
+ * plausibly saved versus reading the cited files in full:
+ *
+ * - `tokensReturned` — the token estimate of the actually-injected content.
+ * - `tokensSavedEstimate` = max(0, citedFileTokensTotal − tokensReturned),
+ *   explicitly labeled an estimate (payload flag `estimate: true`).
+ *
+ * HONESTY RULE (the deliverable, #1990): when the cited-file token total is
+ * unknown — no citation set, or no file size could be measured — this module
+ * records NOTHING for that call. No zero, no guess: absent measurements are
+ * omitted entirely rather than fabricated (a zero would silently claim the
+ * source saved nothing, which is a measurement we do not have).
+ *
+ * Emission is fail-open (never throws), rides the existing telemetry stream
+ * (legacy `.swarm/telemetry.jsonl` line + the SQLite observability sink from
+ * issue #2482), and is aggregated by `/swarm report`. This module creates no
+ * new durable file stream.
+ */
+import type { TelemetryEvent } from '../telemetry.js';
+/** Context sources recognized by the attribution event. */
+export type ContextAttributionSource = 'context_pack' | 'lane-orientation' | 'reflection' | 'ask';
+export interface ContextAttributionInput {
+    sessionId: string;
+    source: ContextAttributionSource;
+    /** Token estimate of the content actually returned/injected. */
+    tokensReturned: number;
+    /**
+     * Sum of token estimates over the cited files, or `undefined`/`null` when
+     * unknown (module then records nothing — the honesty rule).
+     */
+    citedFileTokensTotal?: number | null;
+    taskId?: string;
+}
+/** Token-per-cited-file measurement for one production injection site. */
+export interface CitedFileTokenMeasurement {
+    /** Total token estimate over the files whose sizes were measured. */
+    total: number;
+    /** Number of files whose size could NOT be measured (stat failed). */
+    unmeasured: number;
+}
+/**
+ * Estimate tokens from a byte length using the same chars-per-token heuristic
+ * family as `estimateTokens` (conservative 4 bytes/token). Used ONLY for
+ * file-size-based estimates where full content is not read.
+ */
+export declare function estimateTokensFromBytes(bytes: number): number;
+/**
+ * Measure the cited-file token total from file sizes. Files whose size cannot
+ * be measured are skipped (never counted as zero); `unmeasured` reports how
+ * many. The loop is bounded — a pathological citation set never turns into an
+ * unbounded stat storm.
+ */
+export declare function measureCitedFileTokens(filePaths: readonly string[], statFn: (p: string) => {
+    size: number;
+}, maxFiles?: number): CitedFileTokenMeasurement;
+/** DI seam (repo `_internals` convention). */
+export declare const _internals: {
+    emit: (event: TelemetryEvent, data: Record<string, unknown>) => void;
+};
+/**
+ * Record one context-source attribution. Emits the
+ * `context_source_attribution` event ONLY when both measurements are known
+ * (#1990 omit-when-unknown); returns true when an event was emitted.
+ */
+export declare function recordContextSourceAttribution(input: ContextAttributionInput): boolean;

package/dist/services/cost-accounting.d.ts

@@ -66,6 +66,8 @@ export type DelegationCostFields = TokenUsage & {
     model?: string;
     gate?: string;
     retry_index?: number;
+    /** #2482: marks a recovered eventless-terminal end (stale sweep / terminal-without-event). */
+    recovered?: boolean;
 };
 export type DelegationCostInput = {
     raw?: unknown;

package/dist/telemetry.d.ts

@@ -1,3 +1,4 @@
+import type { ObservabilityEvent } from './observability/envelope.js';
 import { createObservation, toLegacyTelemetryLine } from './observability/index.js';
 import type { DelegationCostFields } from './services/cost-accounting.js';
 export type TelemetryEvent = 'session_started' | 'session_ended' | 'agent_activated' | 'delegation_begin' | 'delegation_end' | 'delegation_cost_correction' | 'delegation_cost_binding' | 'delegation_cost_join' | 'task_state_changed' | 'gate_passed' | 'gate_failed' | 'gate_parse_error' | 'reviewer_gate_decision' | 'phase_changed' | 'budget_updated' | 'context_pruned' | 'retrieval_routed' | 'model_fallback'
@@ -32,7 +33,7 @@ export type TelemetryEvent = 'session_started' | 'session_ended' | 'agent_activa
  * `prm_hard_stop` TRIGGER emitted by `src/prm/escalation.ts`. A trigger with
  * no matching delivery means the containment never reached the agent.
  */
- | 'prm_hard_stop_delivered' | 'agent_conflict_detected' | 'close_archive_result' | 'knowledge_receipt_transition' | 'knowledge_maintenance' | 'residue_health' | 'context_telemetry_health' | 'skill_usage_health' | 'core_events_health' | 'shell_audit_health' | 'trajectory_health' | 'learning_health_alarm' | 'pr_subscription_health' | 'council_attempt' | 'council_round_transition' | 'council_attempt_unscoped';
+ | 'prm_hard_stop_delivered' | 'agent_conflict_detected' | 'close_archive_result' | 'knowledge_receipt_transition' | 'knowledge_maintenance' | 'residue_health' | 'context_telemetry_health' | 'skill_usage_health' | 'core_events_health' | 'shell_audit_health' | 'trajectory_health' | 'learning_health_alarm' | 'pr_subscription_health' | 'council_attempt' | 'council_round_transition' | 'council_attempt_unscoped' | 'context_source_attribution' | 'verdict_row_pipe_recovery';
 /** Stable classification for how a reviewer-gate decision was established. */
 export type ReviewerGateEvidenceKind = 'genuine' | 'fallback' | 'data_quality' | 'block';
 /**
@@ -42,7 +43,14 @@ export type ReviewerGateEvidenceKind = 'genuine' | 'fallback' | 'data_quality' |
  * analytics, so additions are allowed but existing values must not be renamed.
  */
 export type ReviewerGateReasonCode = 'lean_turbo_completed_lane' | 'standard_turbo_non_tier3' | 'durable_evidence_complete' | 'workflow_state_complete' | 'stage_b_parallel_complete' | 'no_active_sessions' | 'zero_valid_sessions' | 'restart_recovery_complete' | 'scoped_delegation_complete' | 'unscoped_delegation_complete' | 'corrupt_evidence' | 'required_gates_missing' | 'inspection_error';
-export type TelemetryListener = (event: TelemetryEvent, data: Record<string, unknown>) => void;
+export type TelemetryListener = (event: TelemetryEvent, data: Record<string, unknown>, 
+/**
+ * The canonical observability envelope built by this emit (issue #2482).
+ * Always passed positionally by `emit()`; optional so every existing
+ * two-argument listener stays assignable. The SQLite observability sink
+ * (`src/db/observability-event-store.ts`) is the canonical consumer.
+ */
+canonical?: ObservabilityEvent) => void;
 export declare function startHeartbeatTracking(): void;
 export declare function getLastHeartbeat(sessionId: string): number | undefined;
 export declare function stopHeartbeatTracking(): void;

package/dist/tools/co-change-analyzer.d.ts

@@ -1,5 +1,10 @@
+import * as child_process from 'node:child_process';
 import type { tool } from '@opencode-ai/plugin';
 import type { SwarmKnowledgeEntry } from '../hooks/knowledge-types.js';
+/** Lazy-bind so mock.module can intercept at call time (#330); all internal
+ * calls route through _internals.getExecFileAsync so tests can replace the
+ * seam directly (PRR-020). */
+declare function getExecFileAsync(): typeof child_process.execFile.__promisify__;
 export interface CoChangeEntry {
     fileA: string;
     fileB: string;
@@ -55,4 +60,6 @@ export declare const _internals: {
     detectDarkMatter: typeof detectDarkMatter;
     darkMatterToKnowledgeEntries: typeof darkMatterToKnowledgeEntries;
     formatDarkMatterOutput: typeof formatDarkMatterOutput;
+    getExecFileAsync: typeof getExecFileAsync;
 };
+export {};

package/dist/tools/gh-evidence.d.ts

@@ -1,18 +1,24 @@
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
 import { resolveExecutableFromPath, runExternalTool } from '../utils/external-tool-runner';
+import { resolveGhExecutable } from '../utils/gh-executable';
 interface GhBinaryCandidateOptions {
-    env?: Pick<NodeJS.ProcessEnv, 'ProgramFiles' | 'ProgramFiles(x86)' | 'LOCALAPPDATA'>;
+    env?: NodeJS.ProcessEnv;
     platform?: NodeJS.Platform;
 }
 export declare function resolveGhBinaryCandidates(options?: GhBinaryCandidateOptions): string[];
 /**
- * Resolve the `gh` binary to invoke. Exported (issue #2236 hardening, lane
- * C1b) so other call sites that need a `gh` executable — e.g. `src/git/pr.ts`,
- * `src/commands/pr-monitor-status.ts` — reuse this resolver instead of
- * spawning a bare `'gh'` literal or inventing a second gh resolver. Returns
- * `null` when no candidate is found; callers should fall back to the bare
- * `'gh'` literal (mirrors `resolveGitExecutable()`'s "never regress a working
- * host" fallback in `src/utils/git-executable.ts`).
+ * Resolve the `gh` binary for the gh_evidence tool. Exported (issue #2236
+ * hardening, lane C1b) so other call sites that need a `gh` executable — e.g.
+ * `src/git/pr.ts`, `src/commands/pr-monitor-status.ts` — reuse this resolver
+ * instead of spawning a bare `'gh'` literal or inventing a second gh resolver.
+ *
+ * Issue #2476 AC1: delegates to the hardened twin of the git resolver
+ * (`src/utils/gh-executable.ts`) — absolute-candidate-first ordering,
+ * absoluteness requirement, `gh --version` probe, bounded budget, caching.
+ * Returns `null` when nothing validated (the resolver's bare-`'gh'` terminal
+ * fallback maps here to null so the tool renders its gh-not-found guidance
+ * exactly as a scan-miss did before); callers that spawn directly should use
+ * `resolveGhExecutable()` instead, which never returns null.
  */
 export declare function resolveGhBinary(): string | null;
 /**
@@ -26,6 +32,7 @@ export declare const gh_evidence: ToolDefinition;
 export declare const _internals: {
     resolveGhBinaryCandidates: typeof resolveGhBinaryCandidates;
     resolveExecutableFromPath: typeof resolveExecutableFromPath;
+    resolveGhExecutable: typeof resolveGhExecutable;
     resolveGhBinary: typeof resolveGhBinary;
     runExternalTool: typeof runExternalTool;
 };

package/dist/tools/pkg-audit.d.ts

@@ -9,7 +9,30 @@ import { bunSpawn } from '../utils/bun-compat';
  * functions gate strictly on a non-zero exit and were dispositioned
  * SAFE-EXIT-CHECK by that sweep.
  */
+/**
+ * Resolve the spawn command prefix for a package-audit binary (issue #2476
+ * AC5). On POSIX (or when resolution fails) the bare name is returned -- the
+ * historical behavior, which works there. On win32 the absolute candidate is
+ * resolved via resolveExecutableFromPath (.exe/.cmd/.bat variants); a
+ * `.cmd`/`.bat` hit cannot be spawned directly by Node (EINVAL since the
+ * CVE-2024-27980 hardening), so it is routed through cmd.exe as
+ * `/d /s /c call "<resolved>"` -- everything after `/c` is cmd's own command
+ * line, the repo-documented windowsVerbatimArguments pattern. Empirically
+ * verified on Windows (node & Bun): a bare quoted tail `"<path>"` is mangled
+ * by cmd's /s quote-stripping (the last quote in the line is removed), while
+ * the `call` prefix keeps the quoted path intact for paths containing spaces
+ * such as C:\Program Files. Callers append their fixed literal arguments
+ * (`audit --json`) as separate argv elements; verbatim joining keeps them
+ * outside the quoted path. The only interpolated value is the resolved
+ * ABSOLUTE path, rejected when it contains any cmd metacharacter
+ * (`" & | < > ^ ! %`) so the verbatim command line degrades to the bare-name
+ * fallback rather than through any cmd re-interpretation; the remaining
+ * tokens are fixed literals.
+ */
+declare function resolveAuditCommandDefault(name: 'npm' | 'cargo'): string[];
 export declare const _internals: {
     bunSpawn: typeof bunSpawn;
+    resolveAuditCommand: typeof resolveAuditCommandDefault;
 };
 export declare const pkg_audit: ReturnType<typeof tool>;
+export {};

package/dist/utils/gh-executable.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Single source of truth for "what absolute path do we invoke for gh" — the
+ * gh twin of `resolveGitExecutable()` in `src/utils/git-executable.ts`
+ * (issue #2476 AC1 / source issue #2262).
+ *
+ * The pre-fix resolver (`resolveGhBinaryCandidates` in
+ * `src/tools/gh-evidence.ts` + `resolveExecutableFromPath`) put the bare
+ * name FIRST, so a full PATH scan for `gh` beat every ProgramFiles absolute
+ * candidate; accepted any stat-able regular file (a 20-byte text file named
+ * gh.exe passed); and had no `gh --version` behavioral probe, no budget, and
+ * no cache. That matters MORE than the git case: `gh` runs with the user's
+ * GitHub token, so a hijack is credential theft in addition to code
+ * execution.
+ *
+ * Contract (mirrors git-executable.ts; deviations called out inline):
+ *
+ *   1. explicit override — the `OPENCODE_SWARM_GH_BINARY` env var ONLY.
+ *      There is deliberately NO config-file `gh.binary` key: the config path
+ *      is the attack surface `enforceGitBinaryProvenance` exists to strip
+ *      for git, and gh never had one. Env-only keeps every override
+ *      user-controlled by construction.
+ *   2. platform absolute candidates (win32 ProgramFiles/LOCALAPPDATA — the
+ *      set `resolveGhBinaryCandidates` already knew — plus darwin/linux
+ *      install locations, which the old resolver lacked entirely);
+ *   3. ALL PATH matches for `gh` (win32: `.exe`/`.cmd`/`.bat` variants);
+ *   4. bare `'gh'` LAST, unprobed, so a host that works via plain PATH
+ *      lookup never regresses.
+ *
+ * Each non-bare candidate must be ABSOLUTE and is validated once with
+ * `gh --version` (bounded, explicit cwd) whose output must match
+ * GH_VERSION_PATTERN — exit 0 alone does not accept a candidate. NOT AN
+ * ANTI-TAMPERING CONTROL (a hostile program can print `gh version 2.x`); it
+ * stops ACCIDENTS — a non-gh that merely exits 0, a broken shim. The
+ * trust-boundary control is that no repository-controlled value can name a
+ * candidate at all (env-only override).
+ *
+ * Bounded probing (AGENTS.md invariant 1): per-probe timeout 250 ms, total
+ * first-resolution budget 1000 ms. gh resolution is LAZY (tool/ghExec call
+ * paths, never plugin init), so the sync API below is sufficient — there is
+ * no init-path need for an async variant.
+ *
+ * NEVER throws: both non-accepting outcomes (budget exhausted, every
+ * candidate rejected) return the bare `'gh'` fallback, memoized with a 60 s
+ * TTL so a host that installs gh mid-session recovers (same rationale as
+ * git-executable.ts — a slash-less spawn does not resolve against the PATH
+ * this module enumerates, so "gh is missing" is not a state this resolver
+ * may report).
+ */
+import { spawnSync } from 'node:child_process';
+/** Env var escape hatch — a blocked user can set this without editing files. */
+export declare const GH_BINARY_ENV_VAR = "OPENCODE_SWARM_GH_BINARY";
+/**
+ * `gh --version` prints `gh version 2.74.0 (2025-...)` — a fixed format
+ * string in gh's own root command. Same accident-not-attacker contract as
+ * `GIT_VERSION_PATTERN` (see git-executable.ts); anchored to the first line.
+ */
+export declare const GH_VERSION_PATTERN: RegExp;
+export type GhResolutionCandidateSource = 'override' | 'platform' | 'path';
+export interface GhResolutionAttempt {
+    source: GhResolutionCandidateSource;
+    candidate: string;
+    accepted: boolean;
+    /** Rejection reason; absent when `accepted` is true. */
+    reason?: string;
+}
+export interface GhResolutionDescription {
+    resolved: boolean;
+    resolvedPath?: string;
+    attempts: GhResolutionAttempt[];
+    overrideValue?: string;
+}
+/**
+ * Windows install locations, kept in one place so the legacy
+ * `resolveGhBinaryCandidates` export in gh-evidence.ts can share the set.
+ * Paths are built with native separators via path.join by the caller.
+ */
+export declare function windowsGhAbsoluteCandidates(env: NodeJS.ProcessEnv): string[];
+/**
+ * Resolve the gh executable to invoke. Lazy, memoized, bounded by
+ * TOTAL_BUDGET_MS, never throws. Returns a validated absolute path or the
+ * bare `'gh'` fallback.
+ */
+export declare function resolveGhExecutable(): string;
+/** Exported for tests; clears the memoized cache (and bumps the generation). */
+export declare function resetGhExecutableCache(): void;
+/**
+ * TEST-ONLY seam — NOT a production API, do not call from `src/`. Pre-seeds
+ * the resolver cache with an explicit "success" entry so
+ * `resolveGhExecutable()` returns `value` with zero probe spawns. Distinct
+ * from gh-evidence.ts's `__seedGhBinaryForTests` (which pins only that
+ * wrapper's legacy layer): neither bypasses the other.
+ */
+export declare function __seedGhExecutableForTests(value: string): void;
+/** Diagnostic surface: candidates tried in the most recent probe cycle. */
+export declare function describeGhResolution(): GhResolutionDescription;
+/**
+ * DI seam for testability (repo convention — see git-executable.ts).
+ * `platform`/`env` let tests drive every platform branch regardless of the
+ * host OS; `now` makes the TTL and budget deterministically testable.
+ */
+export declare const _internals: {
+    spawnSync: typeof spawnSync;
+    platform: () => NodeJS.Platform;
+    env: () => NodeJS.ProcessEnv;
+    now: () => number;
+};

package/dist/utils/merge.d.ts

@@ -1,5 +1,31 @@
 export declare const MAX_MERGE_DEPTH = 10;
+/**
+ * Keys that must never be merged, at any depth (issue #2476 AC2 / source
+ * issue #2264). `JSON.parse` creates `__proto__` as an OWN ENUMERABLE data
+ * property (CreateDataProperty, not [[Set]]), so `Object.keys(override)`
+ * yields it and the plain assignment below would invoke the
+ * `Object.prototype.__proto__` setter and reparent the merged object.
+ * `constructor`/`prototype` are the sibling prototype-pollution carriers.
+ * Only the OVERRIDE side is checked: that is the untrusted side at every
+ * production call site (repo-supplied project config over user config at
+ * `src/config/loader.ts`; user scoring config over defaults at
+ * `src/config/constants.ts`) — `base` is either caller-built defaults or an
+ * already-vetted earlier merge.
+ */
+export declare const DANGEROUS_MERGE_KEYS: ReadonlySet<string>;
+/** Typed, fail-closed rejection of a dangerous merge key (issue #2476 AC2). */
+export declare class DangerousMergeKeyError extends Error {
+    readonly key: string;
+    readonly path: string;
+    constructor(key: string, path: string);
+}
 /**
  * Deep merge two objects, with override values taking precedence.
+ *
+ * Throws `DangerousMergeKeyError` when the override object carries
+ * `__proto__`, `constructor`, or `prototype` at ANY depth (issue #2476 AC2).
+ * The config loader catches this at the repo-supplied project-config merge
+ * and continues with user-level config only; other callers get the typed
+ * throw as fail-closed semantics.
  */
 export declare function deepMerge<T extends Record<string, unknown>>(base?: T, override?: T): T | undefined;

package/opencode-swarm.schema.json

@@ -1875,7 +1875,7 @@
         },
         "auto_checkpoint_threshold": {
           "default": 3,
-          "description": "Maximum number of checkpoints to retain. Oldest checkpoints are evicted when this limit is exceeded.",
+          "description": "Number of completed tasks that trigger an automatic checkpoint. Retention of old checkpoints is controlled separately by max_retention.",
           "type": "integer",
           "minimum": 1,
           "maximum": 20

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.165.0",
+	"version": "7.166.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-fhbjwar0.js

@@ -1,70 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-hwz46jj7.js";
-import"./index-8d90gzaz.js";
-import"./index-f36hy1x4.js";
-import"./index-hdakb4n9.js";
-import"./index-k1ntjzmf.js";
-import"./index-5ythtd9t.js";
-import"./index-tqw8w2n5.js";
-import"./index-txdagbh7.js";
-import"./index-cw912re7.js";
-import"./index-6be5caj8.js";
-import"./index-n3pjcks8.js";
-import"./index-g8wdekzz.js";
-import"./index-70ha9e09.js";
-import"./index-dh5th4jn.js";
-import"./index-9ss2m4rs.js";
-import"./index-ptsqnxwd.js";
-import"./index-zsrtt42s.js";
-import"./index-7h94rfem.js";
-import"./index-6chhqq2n.js";
-import"./index-8bdk7124.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-e6n7cemz.js";
-import"./index-p7hdp3rp.js";
-import"./index-afpkqsdb.js";
-import"./index-gn6ybsc4.js";
-import"./index-anxs69ad.js";
-import"./index-z6xqpmqg.js";
-import"./index-p612v1mv.js";
-import"./index-2k53pfnc.js";
-import"./index-ajknebrc.js";
-import"./index-rtry5xyf.js";
-import"./index-58be2gtd.js";
-import"./index-3qf1vxtb.js";
-import"./index-n832052r.js";
-import"./index-3xyjvx24.js";
-import"./index-y1zhpfk8.js";
-import"./index-xwbn7c8m.js";
-import"./index-556ja8an.js";
-import"./index-6m24v15v.js";
-import"./index-e45htt92.js";
-import"./index-w6988bbc.js";
-import"./index-ry16d01s.js";
-import"./index-n4fzmqz8.js";
-import"./index-j2svfhzk.js";
-import"./index-c4ddtrqg.js";
-import"./index-ae75rja9.js";
-import"./index-6rx1rdaq.js";
-import"./index-7qefgq4j.js";
-import"./index-jre6tm3v.js";
-import"./index-gy0nyfbw.js";
-import"./index-5ebgzb5a.js";
-import"./index-7g4c7s5r.js";
-import"./index-zycp24b9.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-0e9jh9c7.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
-import"./index-bk5tah7q.js";
-import"./index-bpmtbmy9.js";
-import"./index-4fwbbad3.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-1nfbtpgg.js

@@ -1,71 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-r5hj3nfe.js";
-import"./index-hwz46jj7.js";
-import"./index-8d90gzaz.js";
-import"./index-f36hy1x4.js";
-import"./index-hdakb4n9.js";
-import"./index-k1ntjzmf.js";
-import"./index-5ythtd9t.js";
-import"./index-tqw8w2n5.js";
-import"./index-txdagbh7.js";
-import"./index-cw912re7.js";
-import"./index-6be5caj8.js";
-import"./index-n3pjcks8.js";
-import"./index-g8wdekzz.js";
-import"./index-70ha9e09.js";
-import"./index-dh5th4jn.js";
-import"./index-9ss2m4rs.js";
-import"./index-ptsqnxwd.js";
-import"./index-zsrtt42s.js";
-import"./index-7h94rfem.js";
-import"./index-6chhqq2n.js";
-import"./index-8bdk7124.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-e6n7cemz.js";
-import"./index-p7hdp3rp.js";
-import"./index-afpkqsdb.js";
-import"./index-gn6ybsc4.js";
-import"./index-anxs69ad.js";
-import"./index-z6xqpmqg.js";
-import"./index-p612v1mv.js";
-import"./index-2k53pfnc.js";
-import"./index-ajknebrc.js";
-import"./index-rtry5xyf.js";
-import"./index-58be2gtd.js";
-import"./index-3qf1vxtb.js";
-import"./index-n832052r.js";
-import"./index-3xyjvx24.js";
-import"./index-y1zhpfk8.js";
-import"./index-xwbn7c8m.js";
-import"./index-556ja8an.js";
-import"./index-6m24v15v.js";
-import"./index-e45htt92.js";
-import"./index-w6988bbc.js";
-import"./index-ry16d01s.js";
-import"./index-n4fzmqz8.js";
-import"./index-j2svfhzk.js";
-import"./index-c4ddtrqg.js";
-import"./index-ae75rja9.js";
-import"./index-6rx1rdaq.js";
-import"./index-7qefgq4j.js";
-import"./index-jre6tm3v.js";
-import"./index-gy0nyfbw.js";
-import"./index-5ebgzb5a.js";
-import"./index-7g4c7s5r.js";
-import"./index-zycp24b9.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-0e9jh9c7.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
-import"./index-bk5tah7q.js";
-import"./index-bpmtbmy9.js";
-import"./index-4fwbbad3.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};

package/dist/cli/guardrail-log-nyggdv04.js

@@ -1,23 +0,0 @@
-// @bun
-import {
-  handleGuardrailLog
-} from "./index-4gmt79q9.js";
-import"./index-hdakb4n9.js";
-import"./index-z6xqpmqg.js";
-import"./index-p612v1mv.js";
-import"./index-xwbn7c8m.js";
-import"./index-556ja8an.js";
-import"./index-j2svfhzk.js";
-import"./index-7qefgq4j.js";
-import"./index-gy0nyfbw.js";
-import"./index-5ebgzb5a.js";
-import"./index-0e9jh9c7.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
-import"./index-bk5tah7q.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailLog
-};