opencode-swarm 7.165.0 → 7.166.1

package/dist/cli/{index-4fwbbad3.js → index-q1r1cfww.js}

@@ -1,5 +1,10 @@
 // @bun
 import {
+  init_path_identity,
+  sanitizeDiagnosticText
+} from "./index-yzjaj53h.js";
+import {
+  criticalWarn,
   init_logger,
   warn
 } from "./index-zgwm4ryv.js";
@@ -504,13 +509,14 @@ class WindowsSandboxExecutor {
     throw 'cmd.exe did not report an exit code';
   }
   exit [int]$childExitCode;`;
-    const envOverrideBlock = envOverrideLines.length > 0 ? `
-  ${envOverrideLines.join(`
-  `)}` : "";
+    const envOverrideBlock = envOverrideLines.length > 0 ? `${envOverrideLines.join(`
+  `)}
+` : "";
     const psScript = `
 $ErrorActionPreference = 'Stop';
 $ProgressPreference = 'SilentlyContinue';
 try {
+  ${envOverrideBlock}
   $env:TEMP = '${escapedTemp}';
   $env:TMP = '${escapedTemp}';
 
@@ -529,7 +535,6 @@ try {
       Remove-Item Env:$v -Force -ErrorAction SilentlyContinue;
     }
   }
-  ${envOverrideBlock}
 
   # Execute the command \u2014 PS-native cmdlets via Invoke-Expression, others via the standard command interpreter
   $commandBytes = [Convert]::FromBase64String('${commandBase64}');
@@ -598,6 +603,7 @@ __export(exports_runner_client, {
   buildDefaultPolicy: () => buildDefaultPolicy,
   _resetProbeCache: () => _resetProbeCache,
   _internals: () => _internals3,
+  RUNNER_PROTOCOL_SCHEMA_VERSION: () => RUNNER_PROTOCOL_SCHEMA_VERSION,
   RUNNER_EXIT_CODES: () => RUNNER_EXIT_CODES
 });
 import { spawn, spawnSync as spawnSync3 } from "child_process";
@@ -608,9 +614,11 @@ import { fileURLToPath } from "url";
 function findRunnerBinary() {
   const arch = process.arch === "x64" ? "x64" : "arm64";
   const platform = "win32";
+  const runtimeDir = _internals3.runtimeDir ?? _runtimeDir;
   const packagePaths = [
-    path3.resolve(_runtimeDir, "..", "..", "..", "binaries", `${platform}-${arch}`, "swarm-sandbox-runner.exe"),
-    path3.resolve(_runtimeDir, "..", "..", "..", "..", "binaries", `${platform}-${arch}`, "swarm-sandbox-runner.exe")
+    path3.resolve(runtimeDir, "..", "binaries", `${platform}-${arch}`, "swarm-sandbox-runner.exe"),
+    path3.resolve(runtimeDir, "..", "..", "..", "binaries", `${platform}-${arch}`, "swarm-sandbox-runner.exe"),
+    path3.resolve(runtimeDir, "..", "..", "..", "..", "binaries", `${platform}-${arch}`, "swarm-sandbox-runner.exe")
   ];
   for (const p of packagePaths) {
     try {
@@ -654,7 +662,7 @@ function probe() {
       capabilities: null,
       error: "runner binary not found"
     };
-    warn("Sandbox runner binary not found \u2014 degrading to weak sandbox");
+    criticalWarn("[sandbox] swarm-sandbox-runner binary not found \u2014 native Windows sandbox unavailable; commands fall back to the weak PowerShell wrapper (or run unsandboxed in advisory mode). Run /swarm diagnose for details.");
     return _cachedProbe;
   }
   try {
@@ -672,7 +680,7 @@ function probe() {
         capabilities: null,
         error: `probe spawn error: ${result.error.code ?? result.error.message}`
       };
-      warn(`Sandbox runner probe failed: ${_cachedProbe.error}`);
+      criticalWarn(`[sandbox] swarm-sandbox-runner probe failed (${_cachedProbe.error}) \u2014 degrading to weak sandbox. This covers wrong-arch and corrupt binaries; run /swarm diagnose for details.`);
       return _cachedProbe;
     }
     if (result.status !== 0) {
@@ -682,10 +690,21 @@ function probe() {
         capabilities: null,
         error: `probe exited with code ${result.status}`
       };
-      warn(`Sandbox runner probe failed: ${_cachedProbe.error}`);
+      criticalWarn(`[sandbox] swarm-sandbox-runner probe failed (${_cachedProbe.error}) \u2014 degrading to weak sandbox. Run /swarm diagnose for details.`);
       return _cachedProbe;
     }
     const capabilities = JSON.parse(result.stdout?.trim() ?? "{}");
+    const reportedProtocol = typeof capabilities.protocol_schema_version === "number" ? capabilities.protocol_schema_version : null;
+    if (reportedProtocol !== RUNNER_PROTOCOL_SCHEMA_VERSION) {
+      _cachedProbe = {
+        available: false,
+        mode: "none",
+        capabilities,
+        error: `runner protocol mismatch (got ${reportedProtocol ?? "none"}, expected ${RUNNER_PROTOCOL_SCHEMA_VERSION})`
+      };
+      criticalWarn(`[sandbox] ${_cachedProbe.error} at ${path3.basename(binary)} \u2014 stale or foreign runner binary refused; degrading to weak sandbox. Run /swarm diagnose for details.`);
+      return _cachedProbe;
+    }
     let mode = "none";
     if (capabilities.app_container_available) {
       mode = "app-container";
@@ -706,7 +725,7 @@ function probe() {
       capabilities: null,
       error: `probe threw: ${msg}`
     };
-    warn(`Sandbox runner probe threw: ${msg}`);
+    criticalWarn(`[sandbox] swarm-sandbox-runner probe threw (${sanitizeDiagnosticText(msg, 200)}) \u2014 degrading to weak sandbox. Run /swarm diagnose for details.`);
     return _cachedProbe;
   }
 }
@@ -806,6 +825,7 @@ function buildDefaultPolicy(workspaceRoot, runId) {
       HTTP_PROXY: "http://127.0.0.1:1",
       HTTPS_PROXY: "http://127.0.0.1:1"
     },
+    env_unsets: [],
     path_stubs: ["ssh.exe", "curl.exe", "wget.exe", "scp.exe", "sftp.exe"],
     private_desktop: true,
     deny_alternate_data_streams: true,
@@ -814,8 +834,9 @@ function buildDefaultPolicy(workspaceRoot, runId) {
     deny_symlink_egress: true
   };
 }
-var _runtimeDir, RUNNER_EXIT_CODES, _cachedProbe, _internals3;
+var _runtimeDir, RUNNER_PROTOCOL_SCHEMA_VERSION = 1, RUNNER_EXIT_CODES, _cachedProbe, _internals3;
 var init_runner_client = __esm(() => {
+  init_path_identity();
   init_logger();
   _runtimeDir = fileURLToPath(new URL(".", import.meta.url));
   RUNNER_EXIT_CODES = {
@@ -831,7 +852,8 @@ var init_runner_client = __esm(() => {
   _internals3 = {
     findRunnerBinary,
     spawnRunner: spawnSync3,
-    spawnAsync: spawn
+    spawnAsync: spawn,
+    runtimeDir: null
   };
 });
 
@@ -859,7 +881,7 @@ class NativeWindowsSandboxExecutor {
     } else if (this._fallbackExecutor.isAvailable()) {
       this._strength = "weak";
       this.mechanism = "powershell-wrapper";
-      warn(`Native sandbox runner unavailable (${this._probeResult.error ?? "unknown"}); ` + "falling back to PowerShell environment restrictions (weak sandbox)");
+      criticalWarn(`[sandbox] native Windows sandbox runner unavailable (${sanitizeDiagnosticText(this._probeResult.error ?? "unknown", 200)}); falling back to PowerShell environment restrictions (weak sandbox). Run /swarm diagnose for details.`);
     } else {
       this._strength = "none";
       this.mechanism = "none";
@@ -876,13 +898,16 @@ class NativeWindowsSandboxExecutor {
   disable(reason) {
     this._disabled = true;
     this._disabledReason = reason;
-    warn(`Sandbox disabled: ${reason}. Falling through to tool-layer enforcement.`);
+    criticalWarn(`[sandbox] Sandbox disabled: ${sanitizeDiagnosticText(reason, 200)}. Falling through to tool-layer enforcement. Run /swarm diagnose for details.`);
   }
   wrapCommand(command, scopePaths, tempDir, envOverrides, policy) {
     if (!this.isAvailable()) {
       throw new SandboxError("Sandbox not available", "SANDBOX_UNAVAILABLE");
     }
     if (this._strength === "strong") {
+      if (/["&|<>^%]/.test(command)) {
+        return this._fallbackExecutor.wrapCommand(command, scopePaths, tempDir, envOverrides);
+      }
       return this._wrapWithRunner(command, scopePaths, tempDir, envOverrides, policy);
     }
     return this._fallbackExecutor.wrapCommand(command, scopePaths, tempDir, envOverrides);
@@ -907,6 +932,9 @@ class NativeWindowsSandboxExecutor {
           continue;
         if (typeof value === "string") {
           policy.env_overrides[key] = value;
+        } else {
+          policy.env_unsets.push(key);
+          policy.env_allowlist = policy.env_allowlist.filter((allowed) => allowed.toUpperCase() !== key.toUpperCase());
         }
       }
     }
@@ -957,6 +985,7 @@ class NativeWindowsSandboxExecutor {
   }
 }
 var init_native_sandbox_executor = __esm(() => {
+  init_path_identity();
   init_logger();
   init_executor();
   init_restricted_environment_executor();
@@ -1007,7 +1036,7 @@ async function _createExecutor() {
   return null;
 }
 async function _createLinuxExecutor() {
-  const { SandboxCapabilityProbe: SandboxCapabilityProbe2, isBubblewrapAvailable } = await import("./capability-probe-5wa7mcp6.js");
+  const { SandboxCapabilityProbe: SandboxCapabilityProbe2, isBubblewrapAvailable } = await import("./capability-probe-faqefhah.js");
   await new SandboxCapabilityProbe2().detect();
   if (!isBubblewrapAvailable()) {
     return null;
@@ -1027,7 +1056,7 @@ async function _createMacOSExecutor() {
     }
     return null;
   }
-  const { SandboxCapabilityProbe: SandboxCapabilityProbe2, isSandboxExecAvailable } = await import("./capability-probe-5wa7mcp6.js");
+  const { SandboxCapabilityProbe: SandboxCapabilityProbe2, isSandboxExecAvailable } = await import("./capability-probe-faqefhah.js");
   await new SandboxCapabilityProbe2().detect();
   if (!isSandboxExecAvailable()) {
     return null;
@@ -1040,7 +1069,7 @@ async function _createMacOSExecutor() {
   }
 }
 async function _createWindowsExecutor() {
-  const { SandboxCapabilityProbe: SandboxCapabilityProbe2, isWindowsSandboxAvailable } = await import("./capability-probe-5wa7mcp6.js");
+  const { SandboxCapabilityProbe: SandboxCapabilityProbe2, isWindowsSandboxAvailable } = await import("./capability-probe-faqefhah.js");
   await new SandboxCapabilityProbe2().detect();
   if (!isWindowsSandboxAvailable()) {
     return null;

package/dist/cli/{index-afpkqsdb.js → index-w11whwn3.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-anxs69ad.js";
+} from "./index-bfr392e7.js";
 import {
   bunWrite
 } from "./index-p612v1mv.js";
@@ -18,14 +18,14 @@ import {
   releaseCoordinationLease,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-e45htt92.js";
+} from "./index-jx9f4ke1.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-w6988bbc.js";
+} from "./index-aftapk6j.js";
 import {
   observeDelegationLedgerPressure
-} from "./index-j2svfhzk.js";
+} from "./index-axf65x87.js";
 import {
   canonicalRootKeyFresh,
   sameProjectRoot
@@ -33,7 +33,7 @@ import {
 import {
   EvidenceLockTimeoutError,
   withEvidenceLock
-} from "./index-jre6tm3v.js";
+} from "./index-edm41q4j.js";
 import {
   exports_external,
   init_zod
@@ -3656,6 +3656,10 @@ function isTerminal(status) {
 function isTerminalDelegationStatus(status) {
   return isTerminal(status);
 }
+var _staleSweepObserver = null;
+function registerStaleSweepObserver(observer) {
+  _staleSweepObserver = observer;
+}
 function sweepStaleLocked(directory, timeoutMs, now, statuses = DEFAULT_SWEEPABLE_DELEGATION_STATUSES, filters = {}, limits = {}) {
   let swept = 0;
   const { excludeCorrelationIds, includeCorrelationIds } = filters;
@@ -3679,6 +3683,9 @@ function sweepStaleLocked(directory, timeoutMs, now, statuses = DEFAULT_SWEEPABL
       status: "stale",
       updatedAt: now
     });
+    try {
+      _staleSweepObserver?.(record, "stale");
+    } catch {}
     swept += 1;
   }
   if (swept > 0)
@@ -4517,7 +4524,7 @@ async function reconcileLegacyCoderSettlements(directory, maxRecords, onReconcil
   const candidates = readDelegations(directory).filter((record) => record.normalizedAgent === "coder" && Boolean(record.legacyCoderSettlementTransfer) && Boolean(record.terminalResult)).slice(0, maxRecords);
   if (candidates.length === 0)
     return 0;
-  const { transferCoderSettlementToBackground } = await import("./coder-settlement-89nt4j7g.js");
+  const { transferCoderSettlementToBackground } = await import("./coder-settlement-x0h3h6vd.js");
   let transferred = 0;
   for (const record of candidates) {
     try {
@@ -4874,4 +4881,4 @@ async function maintainBackgroundDelegations(directory, options = {}) {
   return emitObservation("ok");
 }
 
-export { prReviewFindingRequiresCritic, PR_REVIEW_BASE_DIMENSION_IDS, PR_REVIEW_RISK_IMPACTS, PR_REVIEW_RISK_TAGS, prReviewLegacyTranscriptCompatibilityEnabled, PrReviewLaneResultEnvelopeSchema, decodePrReviewWorkflowBinding, prReviewLaneResultEnvelopeDigest, PrReviewResultReceiptSchema, PR_REVIEW_FINDINGS_MAX_BYTES, PR_REVIEW_HANDOFF_MAX_BYTES, PR_REVIEW_DISCARDED_EXAMPLE_ITEM_ID, PrReviewRunIdSchema, parsePrReviewRiskTagsField, PrReviewReviewerVerdictFieldsSchema, PrReviewCriticVerdictFieldsSchema, parsePrReviewVerdictRow, generatePrReviewRunId, MAX_RECOVERY_LEDGER_BYTES, readDelegationHealthArtifact, collectDelegationLedgerHealth, MAX_PR_REVIEW_COLLECTION_RECEIPT_ITEM_IDS, BACKGROUND_DELEGATIONS_FILE, BACKGROUND_DELEGATION_FALLBACK_DIR, BACKGROUND_CODER_RESERVATIONS_FILE, BACKGROUND_DELEGATIONS_CHECKPOINT_FILE, BACKGROUND_DELEGATIONS_MANIFEST_FILE, MAX_LIVE_BACKGROUND_FALLBACKS, MAX_LIVE_BACKGROUND_CODER_RESERVATIONS, MAX_BACKGROUND_OBSERVED_FILES, MAX_BACKGROUND_ADVISORY_CHARS, LEGACY_CODER_SETTLEMENT_PENDING_ADVISORY_MARKER, DELEGATION_COMPACTION_LOW_WATER_BYTES, DELEGATION_COMPACTION_HIGH_WATER_BYTES, MAX_CHECKPOINT_BYTES, MAX_CHECKPOINT_RECORDS, TOMBSTONE_MIN_AGE_MS, BACKGROUND_INGESTION_LEASE_MS, BACKGROUND_CODER_RESERVATION_LEASE_MS, BACKGROUND_CODER_RESERVATION_LEASE_MAX_MS, BACKGROUND_CODER_RESERVATION_LEASE_MIN_MS, DEFAULT_STALE_DELEGATION_TIMEOUT_MS, DEFAULT_SWEEPABLE_DELEGATION_STATUSES, _checkpointInternals, isUnsettledWorktreeOwner, compactBackgroundDelegations, readDelegations, scanDelegationsForRecovery, findByCorrelationId, recordPendingDelegationDetailed, recordPendingDelegation, buildPromptSnapshot, appendDelegationTransition, publishPrReviewResultReceipt, buildBackgroundCompletionEventId, claimTerminalResult, claimCoderSettlement, normalizeBackgroundObservedFiles, updateCoderSettlement, registerLegacyCoderSettlementReconciler, _internals, markLegacyCoderSettlementTransferPending, clearLegacyCoderSettlementTransferPending, claimDelegationIngestion, recordDelegationIngestionResult, putPendingBackgroundAdvisory, replacePendingBackgroundAdvisory, preparePendingBackgroundAdvisories, acknowledgeObservedBackgroundAdvisories, releasePreparedBackgroundAdvisories, findByBatchId, findOpenAsyncLaneBatches, isTerminalDelegationStatus, sweepStaleDelegations, readDelegationFallback, listDelegationFallbacks, scanDelegationFallbacksForRecovery, writeDelegationFallback, removeDelegationFallback, findDelegationForCompletion, promoteDelegationFallback, buildBackgroundCoderReservationId, scanBackgroundCoderReservationsForAdmission, reserveBackgroundCoderSlot, bindBackgroundCoderReservation, releaseBackgroundCoderReservation, maintainBackgroundDelegations };
+export { prReviewFindingRequiresCritic, PR_REVIEW_BASE_DIMENSION_IDS, PR_REVIEW_RISK_IMPACTS, PR_REVIEW_RISK_TAGS, prReviewLegacyTranscriptCompatibilityEnabled, PrReviewLaneResultEnvelopeSchema, decodePrReviewWorkflowBinding, prReviewLaneResultEnvelopeDigest, PrReviewResultReceiptSchema, PR_REVIEW_FINDINGS_MAX_BYTES, PR_REVIEW_HANDOFF_MAX_BYTES, PR_REVIEW_DISCARDED_EXAMPLE_ITEM_ID, PrReviewRunIdSchema, parsePrReviewRiskTagsField, PrReviewReviewerVerdictFieldsSchema, PrReviewCriticVerdictFieldsSchema, parsePrReviewVerdictRow, generatePrReviewRunId, MAX_RECOVERY_LEDGER_BYTES, readDelegationHealthArtifact, collectDelegationLedgerHealth, MAX_PR_REVIEW_COLLECTION_RECEIPT_ITEM_IDS, BACKGROUND_DELEGATIONS_FILE, BACKGROUND_DELEGATION_FALLBACK_DIR, BACKGROUND_CODER_RESERVATIONS_FILE, BACKGROUND_DELEGATIONS_CHECKPOINT_FILE, BACKGROUND_DELEGATIONS_MANIFEST_FILE, MAX_LIVE_BACKGROUND_FALLBACKS, MAX_LIVE_BACKGROUND_CODER_RESERVATIONS, MAX_BACKGROUND_OBSERVED_FILES, MAX_BACKGROUND_ADVISORY_CHARS, LEGACY_CODER_SETTLEMENT_PENDING_ADVISORY_MARKER, DELEGATION_COMPACTION_LOW_WATER_BYTES, DELEGATION_COMPACTION_HIGH_WATER_BYTES, MAX_CHECKPOINT_BYTES, MAX_CHECKPOINT_RECORDS, TOMBSTONE_MIN_AGE_MS, BACKGROUND_INGESTION_LEASE_MS, BACKGROUND_CODER_RESERVATION_LEASE_MS, BACKGROUND_CODER_RESERVATION_LEASE_MAX_MS, BACKGROUND_CODER_RESERVATION_LEASE_MIN_MS, DEFAULT_STALE_DELEGATION_TIMEOUT_MS, DEFAULT_SWEEPABLE_DELEGATION_STATUSES, _checkpointInternals, isUnsettledWorktreeOwner, compactBackgroundDelegations, readDelegations, scanDelegationsForRecovery, findByCorrelationId, recordPendingDelegationDetailed, recordPendingDelegation, buildPromptSnapshot, appendDelegationTransition, publishPrReviewResultReceipt, buildBackgroundCompletionEventId, claimTerminalResult, claimCoderSettlement, normalizeBackgroundObservedFiles, updateCoderSettlement, registerLegacyCoderSettlementReconciler, _internals, markLegacyCoderSettlementTransferPending, clearLegacyCoderSettlementTransferPending, claimDelegationIngestion, recordDelegationIngestionResult, putPendingBackgroundAdvisory, replacePendingBackgroundAdvisory, preparePendingBackgroundAdvisories, acknowledgeObservedBackgroundAdvisories, releasePreparedBackgroundAdvisories, findByBatchId, findOpenAsyncLaneBatches, isTerminalDelegationStatus, registerStaleSweepObserver, sweepStaleDelegations, readDelegationFallback, listDelegationFallbacks, scanDelegationFallbacksForRecovery, writeDelegationFallback, removeDelegationFallback, findDelegationForCompletion, promoteDelegationFallback, buildBackgroundCoderReservationId, scanBackgroundCoderReservationsForAdmission, reserveBackgroundCoderSlot, bindBackgroundCoderReservation, releaseBackgroundCoderReservation, maintainBackgroundDelegations };

package/dist/cli/{index-0e9jh9c7.js → index-wf12wckd.js}

@@ -3,7 +3,7 @@ import {
   ALL_AGENT_NAMES,
   SUMMARIZER_EXEMPT_TOOL_NAMES,
   init_constants
-} from "./index-a0d4fp6r.js";
+} from "./index-0tc0pcmh.js";
 import {
   OUTCOME_BLOCK_THRESHOLD,
   init_knowledge_types
@@ -21,7 +21,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.165.0",
+    version: "7.166.1",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -835,7 +835,7 @@ var init_schema = __esm(() => {
   ]);
   CheckpointConfigSchema = exports_external.preprocess(rejectCheckpointPrototypePollution, exports_external.object({
     enabled: exports_external.boolean().default(true),
-    auto_checkpoint_threshold: exports_external.number().int().min(1).max(20).default(3).describe("Maximum number of checkpoints to retain. Oldest checkpoints are evicted when this limit is exceeded."),
+    auto_checkpoint_threshold: exports_external.number().int().min(1).max(20).default(3).describe("Number of completed tasks that trigger an automatic checkpoint. Retention of old checkpoints is controlled separately by max_retention."),
     max_retention: exports_external.number().int().min(1).max(100).default(20),
     allow_empty_commits: exports_external.boolean().default(false)
   }).strict());

package/dist/cli/{index-ptsqnxwd.js → index-xezfx7ge.js}

@@ -1,21 +1,21 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-anxs69ad.js";
+} from "./index-bfr392e7.js";
 import {
   deleteCoordinationState,
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-e45htt92.js";
+} from "./index-jx9f4ke1.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-w6988bbc.js";
+} from "./index-aftapk6j.js";
 import {
   observeStoreHealth
-} from "./index-j2svfhzk.js";
+} from "./index-axf65x87.js";
 import {
   canonicalRootKey,
   canonicalRootKeyFresh,
@@ -23,13 +23,13 @@ import {
 } from "./index-7qefgq4j.js";
 import {
   withEvidenceLock
-} from "./index-jre6tm3v.js";
+} from "./index-edm41q4j.js";
 import {
   atomicWriteSwarmFileSync
 } from "./index-gy0nyfbw.js";
 import {
   telemetry
-} from "./index-5ebgzb5a.js";
+} from "./index-hwj25q9r.js";
 import {
   exports_external,
   init_zod
@@ -285,16 +285,26 @@ function buildCoordinationProjectionCheckpoint(directory, view, baseCheckpoint)
   checkpoint.rootPath = path.resolve(directory);
   return checkpoint;
 }
+
+class PrSubscriptionCapacityError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "PrSubscriptionCapacityError";
+  }
+}
+function isPrSubscriptionCapacityError(err) {
+  return err instanceof PrSubscriptionCapacityError;
+}
 function assertCoordinationProjectionCapacity(directory, view, baseCheckpoint) {
   const checkpoint = buildCoordinationProjectionCheckpoint(directory, view, baseCheckpoint);
   const recordCount = Object.keys(checkpoint.records).length;
   if (recordCount > PR_SUBSCRIPTION_LIMITS.maxCheckpointRecords) {
-    throw new Error(`PR subscription store over checkpoint capacity: ${recordCount} records > ${PR_SUBSCRIPTION_LIMITS.maxCheckpointRecords}. The folded state exceeds the bounded checkpoint \u2014 archive or split .swarm/pr-monitor/subscriptions.jsonl (subscriptions can be re-created with /swarm pr subscribe), then remove it.`);
+    throw new PrSubscriptionCapacityError(`PR subscription store over checkpoint capacity: ${recordCount} records > ${PR_SUBSCRIPTION_LIMITS.maxCheckpointRecords}. The folded state exceeds the bounded checkpoint \u2014 archive or split .swarm/pr-monitor/subscriptions.jsonl (subscriptions can be re-created with /swarm pr subscribe), then remove it.`);
   }
   const contentBytes = Buffer.byteLength(`${JSON.stringify(checkpoint)}
 `, "utf-8");
   if (contentBytes > PR_SUBSCRIPTION_LIMITS.checkpointHardReadBytes) {
-    throw new Error(`PR subscription store over checkpoint capacity: ${contentBytes} bytes > ${PR_SUBSCRIPTION_LIMITS.checkpointHardReadBytes}. The folded state exceeds the bounded checkpoint \u2014 archive or split .swarm/pr-monitor/subscriptions.jsonl (subscriptions can be re-created with /swarm pr subscribe), then remove it.`);
+    throw new PrSubscriptionCapacityError(`PR subscription store over checkpoint capacity: ${contentBytes} bytes > ${PR_SUBSCRIPTION_LIMITS.checkpointHardReadBytes}. The folded state exceeds the bounded checkpoint \u2014 archive or split .swarm/pr-monitor/subscriptions.jsonl (subscriptions can be re-created with /swarm pr subscribe), then remove it.`);
   }
 }
 function prepareCoordinationPersistence(directory, view, baseCheckpoint) {
@@ -1013,13 +1023,13 @@ function snapshotUpdateHasChanges(match, updates) {
 function writeCheckpointFile(directory, checkpoint) {
   const recordCount = Object.keys(checkpoint.records).length;
   if (recordCount > PR_SUBSCRIPTION_LIMITS.maxCheckpointRecords) {
-    throw new Error(`PR subscription store over checkpoint capacity: ${recordCount} records > ${PR_SUBSCRIPTION_LIMITS.maxCheckpointRecords}. The folded state exceeds the bounded checkpoint \u2014 archive or split .swarm/pr-monitor/subscriptions.jsonl (subscriptions can be re-created with /swarm pr subscribe), then remove it.`);
+    throw new PrSubscriptionCapacityError(`PR subscription store over checkpoint capacity: ${recordCount} records > ${PR_SUBSCRIPTION_LIMITS.maxCheckpointRecords}. The folded state exceeds the bounded checkpoint \u2014 archive or split .swarm/pr-monitor/subscriptions.jsonl (subscriptions can be re-created with /swarm pr subscribe), then remove it.`);
   }
   const content = `${JSON.stringify(checkpoint)}
 `;
   const contentBytes = Buffer.byteLength(content, "utf-8");
   if (contentBytes > PR_SUBSCRIPTION_LIMITS.checkpointHardReadBytes) {
-    throw new Error(`PR subscription store over checkpoint capacity: ${contentBytes} bytes > ${PR_SUBSCRIPTION_LIMITS.checkpointHardReadBytes}. The folded state exceeds the bounded checkpoint \u2014 archive or split .swarm/pr-monitor/subscriptions.jsonl (subscriptions can be re-created with /swarm pr subscribe), then remove it.`);
+    throw new PrSubscriptionCapacityError(`PR subscription store over checkpoint capacity: ${contentBytes} bytes > ${PR_SUBSCRIPTION_LIMITS.checkpointHardReadBytes}. The folded state exceeds the bounded checkpoint \u2014 archive or split .swarm/pr-monitor/subscriptions.jsonl (subscriptions can be re-created with /swarm pr subscribe), then remove it.`);
   }
   if (contentBytes > PR_SUBSCRIPTION_LIMITS.maxCheckpointBytes) {
     log(`[pr-monitor] checkpoint pressure: ${contentBytes}/${PR_SUBSCRIPTION_LIMITS.maxCheckpointBytes} bytes`);
@@ -2419,4 +2429,4 @@ var _internals = {
   writeCheckpointFile
 };
 
-export { PR_SUBSCRIPTIONS_FILE, PR_SUBSCRIPTIONS_CHECKPOINT_FILE, PR_SUBSCRIPTIONS_AUDIT_FILE, PR_SUBSCRIPTION_LIMITS, setOnSubscriptionCreated, buildCorrelationId, subscribe, unsubscribe, listActive, lookupByPr, updateSnapshot, sweepStale, getPrSubscriptionHealth, _internals };
+export { PR_SUBSCRIPTIONS_FILE, PR_SUBSCRIPTIONS_CHECKPOINT_FILE, PR_SUBSCRIPTIONS_AUDIT_FILE, PR_SUBSCRIPTION_LIMITS, setOnSubscriptionCreated, PrSubscriptionCapacityError, isPrSubscriptionCapacityError, buildCorrelationId, subscribe, unsubscribe, listActive, lookupByPr, updateSnapshot, sweepStale, getPrSubscriptionHealth, _internals };

package/dist/cli/{index-3xyjvx24.js → index-xwkn5hse.js}

@@ -1,13 +1,10 @@
 // @bun
 import {
   computePlanStructureHash
-} from "./index-y1zhpfk8.js";
+} from "./index-2y4kargd.js";
 import {
   appendCoreEventSync
-} from "./index-xwbn7c8m.js";
-import {
-  unsafePathTextReason
-} from "./index-556ja8an.js";
+} from "./index-2v17wb75.js";
 import {
   deleteCoordinationState,
   derivePlanId,
@@ -16,17 +13,17 @@ import {
   transitionCoordinationState,
   transitionCoordinationStateWithinTransaction,
   withCoordinationTransaction
-} from "./index-e45htt92.js";
+} from "./index-jx9f4ke1.js";
 import {
   getProjectDb
-} from "./index-w6988bbc.js";
+} from "./index-aftapk6j.js";
 import {
   canonicalExistingFilesystemPath,
   legacyCanonicalExistingFilesystemPath
 } from "./index-ry16d01s.js";
 import {
   assertProjectRoot
-} from "./index-jre6tm3v.js";
+} from "./index-edm41q4j.js";
 import {
   atomicWriteSwarmFile,
   atomicWriteSwarmFileSync
@@ -36,7 +33,11 @@ import {
 } from "./index-7g4c7s5r.js";
 import {
   PlanSchema
-} from "./index-zycp24b9.js";
+} from "./index-52xdezsh.js";
+import {
+  init_path_identity,
+  unsafePathTextReason
+} from "./index-yzjaj53h.js";
 import {
   __toESM
 } from "./index-a76rekgs.js";
@@ -50,6 +51,7 @@ import * as path2 from "path";
 // src/scope/scope-binding.ts
 import { randomUUID } from "crypto";
 import * as path from "path";
+init_path_identity();
 var MAX_PENDING_SCOPE_BINDINGS = 256;
 var DEFAULT_SCOPE_BINDING_TTL_MS = 60 * 60 * 1000;
 var MAX_SCOPE_BINDING_TOMBSTONES = 256;

package/dist/cli/{index-g8wdekzz.js → index-ybcxvv17.js}

@@ -2,10 +2,10 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-c4ddtrqg.js";
+} from "./index-bkd3450m.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-6rx1rdaq.js";
+} from "./index-a7rw4g4s.js";
 import {
   init_git_executable,
   resolveGitExecutableAsync

package/dist/cli/{index-e6n7cemz.js → index-yt25kpvz.js}

@@ -2,27 +2,23 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-p7hdp3rp.js";
+} from "./index-fc1dqzjp.js";
 import {
   validateSwarmPath
-} from "./index-anxs69ad.js";
+} from "./index-bfr392e7.js";
 import {
   bunSpawn,
   classifySpawnFailure
 } from "./index-p612v1mv.js";
-import {
-  isPathWithinDeclaredScope,
-  unsafePathTextReason
-} from "./index-556ja8an.js";
 import {
   assertProjectRoot,
   atomicWriteFile,
   taskEvidencePath,
   withTaskEvidenceLock
-} from "./index-jre6tm3v.js";
+} from "./index-edm41q4j.js";
 import {
   telemetry
-} from "./index-5ebgzb5a.js";
+} from "./index-hwj25q9r.js";
 import {
   init_git_executable,
   resolveGitExecutable
@@ -35,6 +31,11 @@ import {
   exports_external,
   init_zod
 } from "./index-bpmtbmy9.js";
+import {
+  init_path_identity,
+  isPathWithinDeclaredScope,
+  unsafePathTextReason
+} from "./index-yzjaj53h.js";
 import {
   log
 } from "./index-zgwm4ryv.js";
@@ -301,6 +302,9 @@ import * as fs4 from "fs";
 import { mkdir, open } from "fs/promises";
 import { dirname } from "path";
 
+// src/workflow/workflow-wal-schema.ts
+init_path_identity();
+
 // src/worktree/merge.ts
 init_warning_buffer();
 import * as fs3 from "fs";

package/dist/cli/{index-556ja8an.js → index-yzjaj53h.js}

@@ -1,7 +1,10 @@
 // @bun
+import {
+  __esm
+} from "./index-a76rekgs.js";
+
 // src/scope/path-identity.ts
 import * as path from "path";
-var BIDI_CONTROL_CHARACTERS = /[\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u;
 function isControlCharacter(character) {
   const codePoint = character.codePointAt(0) ?? 0;
   return codePoint <= 31 || codePoint >= 127 && codePoint <= 159;
@@ -58,5 +61,9 @@ function sanitizeDiagnosticText(value, maxLength = 256) {
     return rendered;
   return `${rendered.slice(0, Math.max(0, maxLength - 1))}\u2026`;
 }
+var BIDI_CONTROL_CHARACTERS;
+var init_path_identity = __esm(() => {
+  BIDI_CONTROL_CHARACTERS = /[\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u;
+});
 
-export { getPathFlavor, pathIdentitiesEqual, isPathIdentityWithin, isPathWithinDeclaredScope, isOnDifferentPathRoot, unsafePathTextReason, sanitizeDiagnosticText };
+export { getPathFlavor, pathIdentitiesEqual, isPathIdentityWithin, isPathWithinDeclaredScope, isOnDifferentPathRoot, unsafePathTextReason, sanitizeDiagnosticText, init_path_identity };

package/dist/cli/{index-gn6ybsc4.js → index-zha9bdj9.js}

@@ -1,36 +1,36 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-anxs69ad.js";
+} from "./index-bfr392e7.js";
 import {
   observeReceiptTransition
-} from "./index-j2svfhzk.js";
+} from "./index-axf65x87.js";
 import {
   resolveHiveEventsPath
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-6rx1rdaq.js";
+} from "./index-a7rw4g4s.js";
 import {
   canonicalRootKey
 } from "./index-7qefgq4j.js";
 import {
   assertProjectRoot,
   atomicWriteFile
-} from "./index-jre6tm3v.js";
+} from "./index-edm41q4j.js";
 import {
   emit
-} from "./index-5ebgzb5a.js";
+} from "./index-hwj25q9r.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-zycp24b9.js";
+} from "./index-52xdezsh.js";
 import {
   KnowledgeConfigSchema,
   init_schema
-} from "./index-0e9jh9c7.js";
+} from "./index-wf12wckd.js";
 import {
   init_logger,
   warn
@@ -2813,7 +2813,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
     }
     let bumps = 0;
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-cxcr0ttk.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-h85efsak.js");
       bumps = await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {