opencode-swarm 7.166.0 → 7.166.2

package/dist/observability/catalog.d.ts

@@ -2,7 +2,7 @@
  * The event catalog (issue #2029).
  *
  * Exactly 61 entries, matching the `TelemetryEvent` union at
- * `src/telemetry.ts:16-172`. Thirty-eight predate the #2029 contract; the 39th is
+ * `src/telemetry.ts:20-172`. Thirty-eight predate the #2029 contract; the 39th is
  * `agent_conflict_detected` (previously emitted through a force-cast past the
  * type system), the 40th is `close_archive_result` (issue #2030 — the
  * structured close/archive result event), the 41st is the bounded diagnostic

package/dist/session/snapshot-writer.d.ts

@@ -104,6 +104,48 @@ export interface SerializedAgentSession {
     /** Provider id paired with lastObservedModel (#1896). Omitted when undefined. */
     lastObservedProviderID?: string;
 }
+/**
+ * Compile-time snapshot-field parity map (issue #2472 W6 / AC-7; frozen check C7).
+ *
+ * WHY THIS MAP EXISTS — the serializer reads FROM `AgentSessionState` and
+ * writes TO `SerializedAgentSession`, so the drift-prone direction is a field
+ * that exists on the live state but silently never reaches the snapshot:
+ * nothing fails, the field is just lost on every restart. The
+ * `Record<Exclude<keyof AgentSessionState, keyof SerializedAgentSession>, string>`
+ * key type makes that direction exhaustive at compile time — EVERY state field
+ * that is not a serialized field MUST appear here with a one-line rationale,
+ * and a key that is NOT such a field is an excess-property type error. Adding
+ * a field to either interface without reconciling this map fails
+ * `bun run typecheck` (CI gate).
+ *
+ * The serialized-only direction (a `SerializedAgentSession` field with no
+ * `AgentSessionState` counterpart) is guarded separately by the
+ * `_serializedFieldsExistOnState` assertion below. The asymmetry is
+ * deliberate: the serializer can only *drop* state fields, while the reader
+ * could otherwise *invent* fields the live state does not have.
+ *
+ * This is NOT the same list as `TRANSIENT_SESSION_FIELDS` in
+ * `src/session/snapshot-reader.ts` (fields RESET on rehydration — a subset of
+ * the *serialized* fields). This map lists fields that are NEVER serialized.
+ * Most are genuinely process-local; `workspaceDirectory` is deliberately
+ * unserializable for trust reasons (see its TRUST BOUNDARY comment in
+ * `src/state.ts`), which is exactly why it must carry an entry here rather
+ * than fall out of the type silently.
+ *
+ * The runtime mirror of this guard lives at
+ * `tests/unit/session/snapshot-field-parity-guard.test.ts` (what frozen
+ * check C7 runs).
+ */
+export declare const SESSION_TRANSIENT_FIELDS: Readonly<Record<Exclude<keyof AgentSessionState, keyof SerializedAgentSession>, string>>;
+/**
+ * Reverse-direction parity guard: every `SerializedAgentSession` field must
+ * exist on `AgentSessionState`. The const assignment is what makes tsc
+ * actually enforce the conditional type — when a serialized field has no
+ * state counterpart, the type degrades to the error tuple below and assigning
+ * `true` fails `bun run typecheck` with that message.
+ */
+export type SerializedFieldsAllExistOnState = Exclude<keyof SerializedAgentSession, keyof AgentSessionState> extends never ? true : ['SerializedAgentSession field missing from AgentSessionState'];
+export declare const _serializedFieldsExistOnState: SerializedFieldsAllExistOnState;
 /**
  * Minimal interface for serialized InvocationWindow
  */

package/dist/telemetry.d.ts

@@ -66,7 +66,37 @@ export declare function resetTelemetryForTesting(): void;
 /**
  * Initialize telemetry with the project directory.
  * Creates `.swarm/` if it doesn't exist and opens `telemetry.jsonl` for appending.
- * Idempotent — calling multiple times has no effect after the first successful call.
+ * Idempotent — calling multiple times with the SAME directory has no effect
+ * after the first successful call.
+ *
+ * Re-home (issue #2472 W9): when called with a projectDirectory DIFFERENT
+ * from the latched `_projectDirectory` while a stream exists (a second
+ * server() instance initializing in this process for another project root),
+ * telemetry re-initializes for the new directory exactly as a fresh init
+ * does — the previous behavior latched the first directory forever, so the
+ * second project's `.swarm/telemetry.jsonl` was never created. A disabled
+ * telemetry state stays disabled.
+ *
+ * No-drop ordering + fail-open ownership retention (PR #2588, review finding
+ * 6 / PRR-019): the NEW stream is created and published FIRST, and only then
+ * is the old stream flushed/closed best-effort. The previous
+ * close-then-create order nulled `_writeStream` before the replacement
+ * existed, so any emit racing the re-home was dropped by the
+ * `_writeStream === null` guard, and a new-stream creation FAILURE took the
+ * whole process's telemetry down (`_disabled = true`) after the old stream
+ * was already gone. On creation failure the OLD stream is now retained
+ * (logged non-fatally, no re-home) — events keep flowing to the previous
+ * directory until a later successful init.
+ *
+ * OWNERSHIP CONTRACT (last-init-wins): the newest successful initTelemetry
+ * call owns THE single live stream for the whole process. In a
+ * multi-project process, a project initialized earlier SHARES the latest
+ * stream until it re-initializes; per-event project routing is out of scope
+ * — the issue #2472 obligation is directory-CHANGE detection, not per-event
+ * fan-out. Same-directory detection uses canonical project-root identity
+ * (`sameProjectRoot`), so Windows case differences and symlink/junction
+ * spellings of one root do not churn the stream.
+ *
  * @param projectDirectory - Absolute path to the project root
  */
 export declare function initTelemetry(projectDirectory: string): void;

package/dist/tools/co-change-analyzer.d.ts

@@ -1,5 +1,10 @@
+import * as child_process from 'node:child_process';
 import type { tool } from '@opencode-ai/plugin';
 import type { SwarmKnowledgeEntry } from '../hooks/knowledge-types.js';
+/** Lazy-bind so mock.module can intercept at call time (#330); all internal
+ * calls route through _internals.getExecFileAsync so tests can replace the
+ * seam directly (PRR-020). */
+declare function getExecFileAsync(): typeof child_process.execFile.__promisify__;
 export interface CoChangeEntry {
     fileA: string;
     fileB: string;
@@ -55,4 +60,6 @@ export declare const _internals: {
     detectDarkMatter: typeof detectDarkMatter;
     darkMatterToKnowledgeEntries: typeof darkMatterToKnowledgeEntries;
     formatDarkMatterOutput: typeof formatDarkMatterOutput;
+    getExecFileAsync: typeof getExecFileAsync;
 };
+export {};

package/dist/tools/gh-evidence.d.ts

@@ -1,18 +1,24 @@
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
 import { resolveExecutableFromPath, runExternalTool } from '../utils/external-tool-runner';
+import { resolveGhExecutable } from '../utils/gh-executable';
 interface GhBinaryCandidateOptions {
-    env?: Pick<NodeJS.ProcessEnv, 'ProgramFiles' | 'ProgramFiles(x86)' | 'LOCALAPPDATA'>;
+    env?: NodeJS.ProcessEnv;
     platform?: NodeJS.Platform;
 }
 export declare function resolveGhBinaryCandidates(options?: GhBinaryCandidateOptions): string[];
 /**
- * Resolve the `gh` binary to invoke. Exported (issue #2236 hardening, lane
- * C1b) so other call sites that need a `gh` executable — e.g. `src/git/pr.ts`,
- * `src/commands/pr-monitor-status.ts` — reuse this resolver instead of
- * spawning a bare `'gh'` literal or inventing a second gh resolver. Returns
- * `null` when no candidate is found; callers should fall back to the bare
- * `'gh'` literal (mirrors `resolveGitExecutable()`'s "never regress a working
- * host" fallback in `src/utils/git-executable.ts`).
+ * Resolve the `gh` binary for the gh_evidence tool. Exported (issue #2236
+ * hardening, lane C1b) so other call sites that need a `gh` executable — e.g.
+ * `src/git/pr.ts`, `src/commands/pr-monitor-status.ts` — reuse this resolver
+ * instead of spawning a bare `'gh'` literal or inventing a second gh resolver.
+ *
+ * Issue #2476 AC1: delegates to the hardened twin of the git resolver
+ * (`src/utils/gh-executable.ts`) — absolute-candidate-first ordering,
+ * absoluteness requirement, `gh --version` probe, bounded budget, caching.
+ * Returns `null` when nothing validated (the resolver's bare-`'gh'` terminal
+ * fallback maps here to null so the tool renders its gh-not-found guidance
+ * exactly as a scan-miss did before); callers that spawn directly should use
+ * `resolveGhExecutable()` instead, which never returns null.
  */
 export declare function resolveGhBinary(): string | null;
 /**
@@ -26,6 +32,7 @@ export declare const gh_evidence: ToolDefinition;
 export declare const _internals: {
     resolveGhBinaryCandidates: typeof resolveGhBinaryCandidates;
     resolveExecutableFromPath: typeof resolveExecutableFromPath;
+    resolveGhExecutable: typeof resolveGhExecutable;
     resolveGhBinary: typeof resolveGhBinary;
     runExternalTool: typeof runExternalTool;
 };

package/dist/tools/pkg-audit.d.ts

@@ -9,7 +9,30 @@ import { bunSpawn } from '../utils/bun-compat';
  * functions gate strictly on a non-zero exit and were dispositioned
  * SAFE-EXIT-CHECK by that sweep.
  */
+/**
+ * Resolve the spawn command prefix for a package-audit binary (issue #2476
+ * AC5). On POSIX (or when resolution fails) the bare name is returned -- the
+ * historical behavior, which works there. On win32 the absolute candidate is
+ * resolved via resolveExecutableFromPath (.exe/.cmd/.bat variants); a
+ * `.cmd`/`.bat` hit cannot be spawned directly by Node (EINVAL since the
+ * CVE-2024-27980 hardening), so it is routed through cmd.exe as
+ * `/d /s /c call "<resolved>"` -- everything after `/c` is cmd's own command
+ * line, the repo-documented windowsVerbatimArguments pattern. Empirically
+ * verified on Windows (node & Bun): a bare quoted tail `"<path>"` is mangled
+ * by cmd's /s quote-stripping (the last quote in the line is removed), while
+ * the `call` prefix keeps the quoted path intact for paths containing spaces
+ * such as C:\Program Files. Callers append their fixed literal arguments
+ * (`audit --json`) as separate argv elements; verbatim joining keeps them
+ * outside the quoted path. The only interpolated value is the resolved
+ * ABSOLUTE path, rejected when it contains any cmd metacharacter
+ * (`" & | < > ^ ! %`) so the verbatim command line degrades to the bare-name
+ * fallback rather than through any cmd re-interpretation; the remaining
+ * tokens are fixed literals.
+ */
+declare function resolveAuditCommandDefault(name: 'npm' | 'cargo'): string[];
 export declare const _internals: {
     bunSpawn: typeof bunSpawn;
+    resolveAuditCommand: typeof resolveAuditCommandDefault;
 };
 export declare const pkg_audit: ReturnType<typeof tool>;
+export {};

package/dist/utils/atomic-write.d.ts

@@ -128,6 +128,38 @@ export declare function assertWellFormedTargetPath(targetPath: string): void;
 export declare function assertSwarmContainedTarget(targetPath: string): SwarmContainment;
 /** Hard bound on a single atomic write (bounded-write requirement). */
 export declare const MAX_ATOMIC_WRITE_BYTES: number;
+/**
+ * Default window within which an ENOENT read of a target this process wrote
+ * (or is writing) is treated as plausibly mid-rename rather than never-existed
+ * — see `wasRecentlyWrittenByThisProcess` and the three-way ENOENT policy in
+ * `readSwarmFileAsync` (src/hooks/utils.ts).
+ */
+export declare const RECENT_WRITE_WINDOW_MS = 500;
+/**
+ * Remove the recent-write marker for `targetPath` (PRR-008). Called from the
+ * canonical writer's failure path: a write that throws before its rename
+ * completes must not leave a stale INTENT stamp behind, or a subsequent ENOENT
+ * read of the target would be misclassified as a rename race and retried
+ * against a file this process is no longer producing. Successful writes are
+ * unaffected — they reach the WRITE COMPLETION refresh, which re-stamps the
+ * marker for the post-rename visibility window. Returns true when a stamp was
+ * present and removed.
+ */
+export declare function clearRecentWriteActivity(targetPath: string): boolean;
+/**
+ * Whether this process recorded a write INTENT or write COMPLETION for
+ * `targetPath` within the last `withinMs` milliseconds (default
+ * {@link RECENT_WRITE_WINDOW_MS}).
+ *
+ * Consumers: the ENOENT retry ladders (`readSwarmFileAsync`,
+ * `readFileOrEmpty` in src/services/context-budget-service.ts) use this as
+ * the "evidenced rename-race" arm — an ENOENT on a file THIS process just
+ * wrote (or is mid-write on: intent is recorded before the temp file write
+ * begins) retries, while an ENOENT with no evidence the file ever existed
+ * returns immediately (issue #2472 PERF-1: 4×10ms of sleeps per missing-file
+ * read, ~1.9s/turn on plan-less projects).
+ */
+export declare function wasRecentlyWrittenByThisProcess(targetPath: string, withinMs?: number): boolean;
 export interface AtomicWriteOptions {
     /** Skip the pre-rename fsync (tests / truly ephemeral data). */
     readonly skipFsync?: boolean;

package/dist/utils/gh-executable.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Single source of truth for "what absolute path do we invoke for gh" — the
+ * gh twin of `resolveGitExecutable()` in `src/utils/git-executable.ts`
+ * (issue #2476 AC1 / source issue #2262).
+ *
+ * The pre-fix resolver (`resolveGhBinaryCandidates` in
+ * `src/tools/gh-evidence.ts` + `resolveExecutableFromPath`) put the bare
+ * name FIRST, so a full PATH scan for `gh` beat every ProgramFiles absolute
+ * candidate; accepted any stat-able regular file (a 20-byte text file named
+ * gh.exe passed); and had no `gh --version` behavioral probe, no budget, and
+ * no cache. That matters MORE than the git case: `gh` runs with the user's
+ * GitHub token, so a hijack is credential theft in addition to code
+ * execution.
+ *
+ * Contract (mirrors git-executable.ts; deviations called out inline):
+ *
+ *   1. explicit override — the `OPENCODE_SWARM_GH_BINARY` env var ONLY.
+ *      There is deliberately NO config-file `gh.binary` key: the config path
+ *      is the attack surface `enforceGitBinaryProvenance` exists to strip
+ *      for git, and gh never had one. Env-only keeps every override
+ *      user-controlled by construction.
+ *   2. platform absolute candidates (win32 ProgramFiles/LOCALAPPDATA — the
+ *      set `resolveGhBinaryCandidates` already knew — plus darwin/linux
+ *      install locations, which the old resolver lacked entirely);
+ *   3. ALL PATH matches for `gh` (win32: `.exe`/`.cmd`/`.bat` variants);
+ *   4. bare `'gh'` LAST, unprobed, so a host that works via plain PATH
+ *      lookup never regresses.
+ *
+ * Each non-bare candidate must be ABSOLUTE and is validated once with
+ * `gh --version` (bounded, explicit cwd) whose output must match
+ * GH_VERSION_PATTERN — exit 0 alone does not accept a candidate. NOT AN
+ * ANTI-TAMPERING CONTROL (a hostile program can print `gh version 2.x`); it
+ * stops ACCIDENTS — a non-gh that merely exits 0, a broken shim. The
+ * trust-boundary control is that no repository-controlled value can name a
+ * candidate at all (env-only override).
+ *
+ * Bounded probing (AGENTS.md invariant 1): per-probe timeout 250 ms, total
+ * first-resolution budget 1000 ms. gh resolution is LAZY (tool/ghExec call
+ * paths, never plugin init), so the sync API below is sufficient — there is
+ * no init-path need for an async variant.
+ *
+ * NEVER throws: both non-accepting outcomes (budget exhausted, every
+ * candidate rejected) return the bare `'gh'` fallback, memoized with a 60 s
+ * TTL so a host that installs gh mid-session recovers (same rationale as
+ * git-executable.ts — a slash-less spawn does not resolve against the PATH
+ * this module enumerates, so "gh is missing" is not a state this resolver
+ * may report).
+ */
+import { spawnSync } from 'node:child_process';
+/** Env var escape hatch — a blocked user can set this without editing files. */
+export declare const GH_BINARY_ENV_VAR = "OPENCODE_SWARM_GH_BINARY";
+/**
+ * `gh --version` prints `gh version 2.74.0 (2025-...)` — a fixed format
+ * string in gh's own root command. Same accident-not-attacker contract as
+ * `GIT_VERSION_PATTERN` (see git-executable.ts); anchored to the first line.
+ */
+export declare const GH_VERSION_PATTERN: RegExp;
+export type GhResolutionCandidateSource = 'override' | 'platform' | 'path';
+export interface GhResolutionAttempt {
+    source: GhResolutionCandidateSource;
+    candidate: string;
+    accepted: boolean;
+    /** Rejection reason; absent when `accepted` is true. */
+    reason?: string;
+}
+export interface GhResolutionDescription {
+    resolved: boolean;
+    resolvedPath?: string;
+    attempts: GhResolutionAttempt[];
+    overrideValue?: string;
+}
+/**
+ * Windows install locations, kept in one place so the legacy
+ * `resolveGhBinaryCandidates` export in gh-evidence.ts can share the set.
+ * Paths are built with native separators via path.join by the caller.
+ */
+export declare function windowsGhAbsoluteCandidates(env: NodeJS.ProcessEnv): string[];
+/**
+ * Resolve the gh executable to invoke. Lazy, memoized, bounded by
+ * TOTAL_BUDGET_MS, never throws. Returns a validated absolute path or the
+ * bare `'gh'` fallback.
+ */
+export declare function resolveGhExecutable(): string;
+/** Exported for tests; clears the memoized cache (and bumps the generation). */
+export declare function resetGhExecutableCache(): void;
+/**
+ * TEST-ONLY seam — NOT a production API, do not call from `src/`. Pre-seeds
+ * the resolver cache with an explicit "success" entry so
+ * `resolveGhExecutable()` returns `value` with zero probe spawns. Distinct
+ * from gh-evidence.ts's `__seedGhBinaryForTests` (which pins only that
+ * wrapper's legacy layer): neither bypasses the other.
+ */
+export declare function __seedGhExecutableForTests(value: string): void;
+/** Diagnostic surface: candidates tried in the most recent probe cycle. */
+export declare function describeGhResolution(): GhResolutionDescription;
+/**
+ * DI seam for testability (repo convention — see git-executable.ts).
+ * `platform`/`env` let tests drive every platform branch regardless of the
+ * host OS; `now` makes the TTL and budget deterministically testable.
+ */
+export declare const _internals: {
+    spawnSync: typeof spawnSync;
+    platform: () => NodeJS.Platform;
+    env: () => NodeJS.ProcessEnv;
+    now: () => number;
+};

package/dist/utils/merge.d.ts

@@ -1,5 +1,31 @@
 export declare const MAX_MERGE_DEPTH = 10;
+/**
+ * Keys that must never be merged, at any depth (issue #2476 AC2 / source
+ * issue #2264). `JSON.parse` creates `__proto__` as an OWN ENUMERABLE data
+ * property (CreateDataProperty, not [[Set]]), so `Object.keys(override)`
+ * yields it and the plain assignment below would invoke the
+ * `Object.prototype.__proto__` setter and reparent the merged object.
+ * `constructor`/`prototype` are the sibling prototype-pollution carriers.
+ * Only the OVERRIDE side is checked: that is the untrusted side at every
+ * production call site (repo-supplied project config over user config at
+ * `src/config/loader.ts`; user scoring config over defaults at
+ * `src/config/constants.ts`) — `base` is either caller-built defaults or an
+ * already-vetted earlier merge.
+ */
+export declare const DANGEROUS_MERGE_KEYS: ReadonlySet<string>;
+/** Typed, fail-closed rejection of a dangerous merge key (issue #2476 AC2). */
+export declare class DangerousMergeKeyError extends Error {
+    readonly key: string;
+    readonly path: string;
+    constructor(key: string, path: string);
+}
 /**
  * Deep merge two objects, with override values taking precedence.
+ *
+ * Throws `DangerousMergeKeyError` when the override object carries
+ * `__proto__`, `constructor`, or `prototype` at ANY depth (issue #2476 AC2).
+ * The config loader catches this at the repo-supplied project-config merge
+ * and continues with user-level config only; other callers get the typed
+ * throw as fail-closed semantics.
  */
 export declare function deepMerge<T extends Record<string, unknown>>(base?: T, override?: T): T | undefined;

package/dist/utils/swarm-artifact-cache.d.ts

@@ -15,6 +15,12 @@ export interface SwarmArtifactCacheStats {
     textEntryCount: number;
     parsedEntryCount: number;
 }
+/**
+ * Whether a previous successful stat/read inside this module observed
+ * `filePath` to exist (resolved the same way the cache keys are). Cheap Set
+ * lookup — safe on hot paths.
+ */
+export declare function wasObservedToExist(filePath: string): boolean;
 /**
  * Dependency-injection seam for testing. Tests can temporarily replace these
  * to force a specific (e.g. colliding) stat stamp without relying on

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.166.0",
+	"version": "7.166.2",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-7znajprp.js

@@ -1,70 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-an89qzd9.js";
-import"./index-8d90gzaz.js";
-import"./index-hvk3zs62.js";
-import"./index-9hy5q7gp.js";
-import"./index-p04pa9c9.js";
-import"./index-qkq56zyr.js";
-import"./index-17yszqs5.js";
-import"./index-txdagbh7.js";
-import"./index-cw912re7.js";
-import"./index-hrkamw9q.js";
-import"./index-359djbj1.js";
-import"./index-bw7r2b2m.js";
-import"./index-70ha9e09.js";
-import"./index-8hqkrd2j.js";
-import"./index-9ss2m4rs.js";
-import"./index-czr3jcg6.js";
-import"./index-zsrtt42s.js";
-import"./index-2dvk153d.js";
-import"./index-6chhqq2n.js";
-import"./index-8bdk7124.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-8n62bphd.js";
-import"./index-2rm5x9ps.js";
-import"./index-52jfm5s0.js";
-import"./index-jc9cxh90.js";
-import"./index-anxs69ad.js";
-import"./index-z6xqpmqg.js";
-import"./index-p612v1mv.js";
-import"./index-a5w71m8f.js";
-import"./index-c20gf089.js";
-import"./index-rtry5xyf.js";
-import"./index-apxaa755.js";
-import"./index-3qf1vxtb.js";
-import"./index-n832052r.js";
-import"./index-8m12y79g.js";
-import"./index-30f4fe30.js";
-import"./index-2v17wb75.js";
-import"./index-79sr3fd1.js";
-import"./index-jx9f4ke1.js";
-import"./index-aftapk6j.js";
-import"./index-ry16d01s.js";
-import"./index-n4fzmqz8.js";
-import"./index-axf65x87.js";
-import"./index-fywshabz.js";
-import"./index-ae75rja9.js";
-import"./index-a7rw4g4s.js";
-import"./index-7qefgq4j.js";
-import"./index-edm41q4j.js";
-import"./index-gy0nyfbw.js";
-import"./index-hwj25q9r.js";
-import"./index-7g4c7s5r.js";
-import"./index-mg43w8p2.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-nb924ar6.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
-import"./index-bk5tah7q.js";
-import"./index-bpmtbmy9.js";
-import"./index-q1r1cfww.js";
-import"./index-yzjaj53h.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-jdv4n2j3.js

@@ -1,71 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-ejf6w8vw.js";
-import"./index-an89qzd9.js";
-import"./index-8d90gzaz.js";
-import"./index-hvk3zs62.js";
-import"./index-9hy5q7gp.js";
-import"./index-p04pa9c9.js";
-import"./index-qkq56zyr.js";
-import"./index-17yszqs5.js";
-import"./index-txdagbh7.js";
-import"./index-cw912re7.js";
-import"./index-hrkamw9q.js";
-import"./index-359djbj1.js";
-import"./index-bw7r2b2m.js";
-import"./index-70ha9e09.js";
-import"./index-8hqkrd2j.js";
-import"./index-9ss2m4rs.js";
-import"./index-czr3jcg6.js";
-import"./index-zsrtt42s.js";
-import"./index-2dvk153d.js";
-import"./index-6chhqq2n.js";
-import"./index-8bdk7124.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-8n62bphd.js";
-import"./index-2rm5x9ps.js";
-import"./index-52jfm5s0.js";
-import"./index-jc9cxh90.js";
-import"./index-anxs69ad.js";
-import"./index-z6xqpmqg.js";
-import"./index-p612v1mv.js";
-import"./index-a5w71m8f.js";
-import"./index-c20gf089.js";
-import"./index-rtry5xyf.js";
-import"./index-apxaa755.js";
-import"./index-3qf1vxtb.js";
-import"./index-n832052r.js";
-import"./index-8m12y79g.js";
-import"./index-30f4fe30.js";
-import"./index-2v17wb75.js";
-import"./index-79sr3fd1.js";
-import"./index-jx9f4ke1.js";
-import"./index-aftapk6j.js";
-import"./index-ry16d01s.js";
-import"./index-n4fzmqz8.js";
-import"./index-axf65x87.js";
-import"./index-fywshabz.js";
-import"./index-ae75rja9.js";
-import"./index-a7rw4g4s.js";
-import"./index-7qefgq4j.js";
-import"./index-edm41q4j.js";
-import"./index-gy0nyfbw.js";
-import"./index-hwj25q9r.js";
-import"./index-7g4c7s5r.js";
-import"./index-mg43w8p2.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-nb924ar6.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
-import"./index-bk5tah7q.js";
-import"./index-bpmtbmy9.js";
-import"./index-q1r1cfww.js";
-import"./index-yzjaj53h.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};

package/dist/cli/guardrail-log-s7c3rpde.js

@@ -1,23 +0,0 @@
-// @bun
-import {
-  handleGuardrailLog
-} from "./index-4mpdy32j.js";
-import"./index-9hy5q7gp.js";
-import"./index-z6xqpmqg.js";
-import"./index-p612v1mv.js";
-import"./index-2v17wb75.js";
-import"./index-axf65x87.js";
-import"./index-7qefgq4j.js";
-import"./index-gy0nyfbw.js";
-import"./index-hwj25q9r.js";
-import"./index-nb924ar6.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
-import"./index-bk5tah7q.js";
-import"./index-bpmtbmy9.js";
-import"./index-yzjaj53h.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailLog
-};

package/dist/cli/hive-promoter-w5tsgttc.js

@@ -1,85 +0,0 @@
-// @bun
-import {
-  _internals2 as _internals,
-  checkHivePromotions,
-  countDistinctProjects,
-  createHivePromoterHook,
-  isHiveEligible,
-  promoteFromSwarm,
-  promoteToHive
-} from "./index-an89qzd9.js";
-import"./index-8d90gzaz.js";
-import"./index-hvk3zs62.js";
-import"./index-9hy5q7gp.js";
-import"./index-p04pa9c9.js";
-import"./index-qkq56zyr.js";
-import"./index-17yszqs5.js";
-import"./index-txdagbh7.js";
-import"./index-cw912re7.js";
-import"./index-hrkamw9q.js";
-import"./index-359djbj1.js";
-import"./index-bw7r2b2m.js";
-import"./index-70ha9e09.js";
-import"./index-8hqkrd2j.js";
-import"./index-9ss2m4rs.js";
-import"./index-czr3jcg6.js";
-import"./index-zsrtt42s.js";
-import"./index-2dvk153d.js";
-import"./index-6chhqq2n.js";
-import"./index-8bdk7124.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-8n62bphd.js";
-import"./index-2rm5x9ps.js";
-import"./index-52jfm5s0.js";
-import"./index-jc9cxh90.js";
-import"./index-anxs69ad.js";
-import"./index-z6xqpmqg.js";
-import"./index-p612v1mv.js";
-import"./index-a5w71m8f.js";
-import"./index-c20gf089.js";
-import"./index-rtry5xyf.js";
-import"./index-apxaa755.js";
-import"./index-3qf1vxtb.js";
-import"./index-n832052r.js";
-import"./index-8m12y79g.js";
-import"./index-30f4fe30.js";
-import"./index-2v17wb75.js";
-import"./index-79sr3fd1.js";
-import"./index-jx9f4ke1.js";
-import"./index-aftapk6j.js";
-import"./index-ry16d01s.js";
-import"./index-n4fzmqz8.js";
-import"./index-axf65x87.js";
-import {
-  resolveHiveKnowledgePath
-} from "./index-fywshabz.js";
-import"./index-ae75rja9.js";
-import"./index-a7rw4g4s.js";
-import"./index-7qefgq4j.js";
-import"./index-edm41q4j.js";
-import"./index-gy0nyfbw.js";
-import"./index-hwj25q9r.js";
-import"./index-7g4c7s5r.js";
-import"./index-mg43w8p2.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-nb924ar6.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
-import"./index-bk5tah7q.js";
-import"./index-bpmtbmy9.js";
-import"./index-q1r1cfww.js";
-import"./index-yzjaj53h.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  resolveHiveKnowledgePath,
-  promoteToHive,
-  promoteFromSwarm,
-  isHiveEligible,
-  createHivePromoterHook,
-  countDistinctProjects,
-  checkHivePromotions,
-  _internals
-};