opencode-swarm 7.177.0 → 7.178.0

package/dist/cli/{index-ebmep9me.js → index-heg4em8j.js}

@@ -16,7 +16,7 @@ import {
   resolveExecutableFromPath,
   runEvaluation,
   runExternalTool
-} from "./index-vfp9hjgv.js";
+} from "./index-q9vb5e7n.js";
 import {
   finalizeShellAuditForClose,
   isPolicyProtectedPath,
@@ -26,20 +26,20 @@ import {
   protectedRoots,
   redactDecisionLineForArchive,
   stableCanonicalStringify
-} from "./index-by7xpk8f.js";
+} from "./index-qs8eth8h.js";
 import {
   canonicalProjectKey,
   closeGroupCommitWriter,
   getGlobalEventBus,
   getGroupCommitWriter,
   importLegacyJsonl
-} from "./index-eefz8ghz.js";
+} from "./index-bfz1jvcn.js";
 import {
   detectStraySwarmDirs,
   readDoctorArtifact,
   removeStraySwarmDir,
   runConfigDoctor
-} from "./index-rgapg88w.js";
+} from "./index-vfc7d22n.js";
 import {
   MAX_TRANSIENT_RETRIES,
   archiveEvidence,
@@ -81,7 +81,7 @@ import {
   updateTaskStatus,
   validateProjectRoot,
   withPlanLifecycleLock
-} from "./index-zbq9091c.js";
+} from "./index-jzxeymr0.js";
 import {
   EvaluationTaskV1Schema,
   GateAuditManifestV1Schema,
@@ -98,7 +98,7 @@ import {
   saveGateAuditResult,
   savePromotionDecision,
   saveTaskSetSnapshot
-} from "./index-k6bjkqw8.js";
+} from "./index-mpcp6rmj.js";
 import {
   canonicalHash,
   canonicalJson,
@@ -125,7 +125,7 @@ import {
   isCanonicalPathWithinRoot,
   validateSymlinkBoundary,
   validateTargetWithinRoot
-} from "./index-fpbcxykc.js";
+} from "./index-6b295cas.js";
 import {
   BUNDLED_PROJECT_SKILL_ROOT,
   DEFAULT_SKILL_MIN_CONFIDENCE,
@@ -146,15 +146,15 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-mcq6xs4k.js";
+} from "./index-zsm8h8y1.js";
 import {
   readRecentEscalations
-} from "./index-8dy3qf4q.js";
+} from "./index-at0ygwwp.js";
 import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-nzz58tbs.js";
+} from "./index-zex7644g.js";
 import {
   CURATOR_CONSOLIDATION_PROMPT,
   CURATOR_INIT_PROMPT,
@@ -174,7 +174,7 @@ import {
   sweepStale,
   unsubscribe,
   updateSnapshot
-} from "./index-eya03h5m.js";
+} from "./index-y74n1sy8.js";
 import {
   clearWorktreeMergeStatus,
   getAllWorktreeMergeFailures,
@@ -186,7 +186,7 @@ import {
   listCoderSettlementWalStates,
   recoverCoderSettlement,
   recoverStaleCoderSettlements
-} from "./index-4chr4gbq.js";
+} from "./index-wkde35ej.js";
 import {
   parsePorcelainV2Snapshot,
   resolveCommitCountSince,
@@ -214,12 +214,12 @@ import {
   resolveRemoteUrlIdentity,
   resolveRemoteUrlIdentityAsync,
   switchPrFeedbackTrackingCandidateAsync
-} from "./index-5d2avnj9.js";
+} from "./index-pm7c6f66.js";
 import {
   WORKTREE_LIFECYCLE_LOCK_FILE,
   recordWorktreeProvisioningOwner,
   removeWorktreeProvisioningOwner
-} from "./index-7nsvszwn.js";
+} from "./index-2b1whj28.js";
 import {
   getLanguageForExtension
 } from "./index-pt7h91zc.js";
@@ -257,7 +257,7 @@ import {
   transitionTaskWorkflowEvidence,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-r18n5f17.js";
+} from "./index-kfk403mc.js";
 import {
   isPathUnderSwarmWorktreeBase,
   listLiveLaneOwners,
@@ -266,7 +266,7 @@ import {
   recordLiveLaneOwner,
   removeWorktree,
   resolveWorktreeBaseDir
-} from "./index-fnmt1ema.js";
+} from "./index-p27az2hc.js";
 import {
   DEFAULT_STALE_DELEGATION_TIMEOUT_MS,
   DELEGATION_COMPACTION_HIGH_WATER_BYTES,
@@ -300,7 +300,7 @@ import {
   scanBackgroundCoderReservationsForAdmission,
   scanDelegationsForRecovery,
   sweepStaleDelegations
-} from "./index-ef2fa774.js";
+} from "./index-rp0jk48x.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals,
@@ -316,13 +316,13 @@ import {
   recordKnowledgeEvent,
   recordPhaseCloseIntent,
   resolveKnowledgeEventsPath
-} from "./index-w7aedfce.js";
+} from "./index-29begjkp.js";
 import {
   estimateTokens,
   readSwarmFileAsync,
   safeHook,
   validateSwarmPath
-} from "./index-exhm2ztr.js";
+} from "./index-zmb8fjp5.js";
 import {
   bunFile,
   bunSpawn,
@@ -342,18 +342,18 @@ import {
   validateActionableFields,
   validateLesson,
   validateSkillPath
-} from "./index-gwnbprzk.js";
+} from "./index-d5dexrv1.js";
 import {
   MAX_CURATION_PROPOSALS,
   authorizeCuration,
   buildConfigFingerprintInput
-} from "./index-wemtrnch.js";
+} from "./index-ffqy30e5.js";
 import {
   cohortConfigFingerprint
 } from "./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-rz4gpt3n.js";
+} from "./index-2vhkwy6v.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-frcemc0b.js";
@@ -364,7 +364,7 @@ import {
   clearScopeBindingFromDisk,
   clearScopeBindings,
   readScopeFromDisk
-} from "./index-5w51tawb.js";
+} from "./index-gg44hytk.js";
 import {
   clearPlanLedgerForReset,
   computePlanStructureHash,
@@ -380,7 +380,7 @@ import {
   replayFromLedgerWithStatus,
   resolvePlanningProfile,
   takeSnapshotEvent
-} from "./index-zwam9stk.js";
+} from "./index-ke3m026z.js";
 import {
   CORE_EVENT_LOCKED,
   appendCoreEventSync,
@@ -390,7 +390,7 @@ import {
   hasSpecDriftAuditEvent,
   hasTaskRepairAuditEvent,
   readCoreEvents
-} from "./index-z8j7jqxt.js";
+} from "./index-j1v54ahd.js";
 import {
   DEFAULT_QA_GATES,
   computeProfileHash,
@@ -398,7 +398,7 @@ import {
   getEffectiveGates,
   getProfileLookupForIdentity,
   setGatesForIdentity
-} from "./index-v2he8xfj.js";
+} from "./index-y6a2bkp1.js";
 import {
   MAX_COORDINATION_STATE_LIST_ROWS,
   deleteCoordinationImports,
@@ -410,7 +410,7 @@ import {
   listCoordinationStates,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-1bq6hkw5.js";
+} from "./index-w4yjy3vp.js";
 import {
   DURABILITY_CLASSES,
   closeAllProjectDbs,
@@ -418,7 +418,7 @@ import {
   getProjectDb,
   projectDbExists,
   projectDbPath
-} from "./index-xnednxvm.js";
+} from "./index-tnjmn0dn.js";
 import {
   loadDatabaseCtor
 } from "./index-rdm3px0g.js";
@@ -433,7 +433,7 @@ import {
   observeCuratorCompliance,
   observeStoreHealth,
   readLearningHealth
-} from "./index-tbswvz8s.js";
+} from "./index-yeh78c1g.js";
 import {
   appendKnowledge,
   appendRejectedLesson,
@@ -463,7 +463,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-hxdswvtv.js";
+} from "./index-2mdk6nt9.js";
 import {
   readTailJsonl,
   readTailJsonlDetailed,
@@ -484,7 +484,7 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-en0p0hqp.js";
+} from "./index-yj1kr0ft.js";
 import {
   assertProjectRoot,
   atomicWriteFile,
@@ -493,7 +493,7 @@ import {
   listActiveLocks,
   tryAcquireLock,
   withEvidenceLock
-} from "./index-tj0sdxg9.js";
+} from "./index-j3rkh9mp.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -507,7 +507,7 @@ import {
   pseudonymousRef,
   resolveLineageSalt,
   telemetry
-} from "./index-2jtmevrr.js";
+} from "./index-wfbh1bx8.js";
 import {
   atomicWriteSwarmFile,
   atomicWriteSwarmFileSync,
@@ -515,7 +515,7 @@ import {
   matchTempGrammar,
   parseTargetBasename,
   resetSwarmArtifactCache
-} from "./index-yhaxn5r7.js";
+} from "./index-zsp9de3k.js";
 import {
   canonicalRootKey,
   canonicalRootKeyFresh,
@@ -532,7 +532,7 @@ import {
   loadGateOverrides,
   loadPluginConfig,
   loadPluginConfigWithMeta
-} from "./index-zzr7f594.js";
+} from "./index-18hjycr1.js";
 import {
   init_git_executable,
   resolveGitExecutable,
@@ -561,7 +561,7 @@ import {
   resolveAutoReviewConfig,
   resolveGeneratedAgentRole,
   stripKnownSwarmPrefix
-} from "./index-73arkdgf.js";
+} from "./index-wbkxbgk8.js";
 import {
   AGENT_TOOL_MAP,
   ALL_AGENT_NAMES,
@@ -584,7 +584,7 @@ import {
   init_agent_names,
   init_constants,
   init_tool_metadata
-} from "./index-5frh43fj.js";
+} from "./index-m2n1rhgv.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -602,11 +602,12 @@ import {
   init_executor,
   isUntrustedEnvKey,
   isValidEnvKey
-} from "./index-76qm2c2y.js";
+} from "./index-wvghb3x6.js";
 import {
   init_path_identity,
-  sanitizeDiagnosticText
-} from "./index-yzjaj53h.js";
+  sanitizeDiagnosticText,
+  unsafePathTextReason
+} from "./index-9rwhas09.js";
 import {
   criticalWarn,
   error,
@@ -3175,7 +3176,7 @@ async function importLegacyPrWorkflowGateStateIfNeeded(directory, sessionID, all
       return null;
     throw error2;
   }
-  const legacy = allowSalvagedImport ? (await (await import("./pr-workflow-gate-jx30c9vz.js")).readPrWorkflowGateStateForRecovery(directory, sessionID))?.state ?? null : await readPrWorkflowGateStateFileFromDisk(filePath, sessionID);
+  const legacy = allowSalvagedImport ? (await (await import("./pr-workflow-gate-wn6v5za8.js")).readPrWorkflowGateStateForRecovery(directory, sessionID))?.state ?? null : await readPrWorkflowGateStateFileFromDisk(filePath, sessionID);
   if (!legacy)
     return null;
   const namespace = workflowGateStateCoordinationNamespace(sessionID);
@@ -3245,7 +3246,7 @@ async function deleteStateWhileLocked(directory, sessionID, options = {}) {
   let recoveryState = null;
   if (!currentAuthoritative) {
     if (options.allowSalvagedRead) {
-      const { readPrWorkflowGateStateForRecovery } = await import("./pr-workflow-gate-jx30c9vz.js");
+      const { readPrWorkflowGateStateForRecovery } = await import("./pr-workflow-gate-wn6v5za8.js");
       recoveryState = (await readPrWorkflowGateStateForRecovery(directory, normalizedSessionID))?.state ?? null;
     }
     if (!recoveryState) {
@@ -14214,7 +14215,7 @@ function isLaneOwnedByCurrentSession(branchName, expectedSessionId) {
   return extracted === expectedSessionId;
 }
 async function inspectStandardWorktreeCollisionOwnership(identity) {
-  const collisionOwnership = await import("./worktree-collision-ownership-ecwj3ehp.js");
+  const collisionOwnership = await import("./worktree-collision-ownership-hjk0jx19.js");
   return collisionOwnership.inspectStandardWorktreeCollisionOwnership(identity);
 }
 async function runRecoveryGit(directory, args, timeoutMs = 15000) {
@@ -14640,7 +14641,7 @@ async function precreateStandardWorktreeSession(args) {
   const laneProfile = computeLaneRuntimeProfile(worktreeConfig.runtime_isolation, laneIndex, handle.worktreePath);
   if (laneProfile) {
     try {
-      const { writeLaneProfileToDiskReal } = await import("./core-ty985ae1.js");
+      const { writeLaneProfileToDiskReal } = await import("./core-k7wfx1wx.js");
       await writeLaneProfileToDiskReal(handle.worktreePath, laneProfile.laneIndex, laneProfile.envOverrides);
     } catch {}
   }
@@ -15619,7 +15620,7 @@ async function finishStandardWorktreeDispatch(directory, dispatch, config, callI
       }
       clearWorktreeMergeStatus(statusKey);
       try {
-        const { removeLaneProfileFromDiskReal } = await import("./core-ty985ae1.js");
+        const { removeLaneProfileFromDiskReal } = await import("./core-k7wfx1wx.js");
         await removeLaneProfileFromDiskReal(dispatch.handle.worktreePath, dispatch.laneIndex);
       } catch {}
       const state = serializationStateBySessionID.get(dispatch.parentSessionID);
@@ -18938,8 +18939,12 @@ function getSandboxSkipSummary(sessionID) {
 init_path_identity();
 
 // src/hooks/shell-write-detect.ts
+init_path_identity();
 import * as path20 from "path";
 import parse from "bash-parser";
+function unsafeShellCommandTextReason(value) {
+  return unsafePathTextReason(value.replace(/[\r\n]/g, ""));
+}
 function buildDedupeKey(category, operator, path21) {
   return `${category}|${operator}|${path21 ?? "null"}`;
 }
@@ -18950,16 +18955,20 @@ var REDIRECT_WRITE_TOKENS = new Set([
   "LESSGREAT"
 ]);
 var REDIRECT_HERE_TOKENS = new Set(["DLESS", "DLESSDASH"]);
+var REDIRECT_GREATAND_TOKENS = new Set(["GREATAND"]);
 var REDIRECT_ALL_WRITE_TOKENS = new Set([
   ...REDIRECT_WRITE_TOKENS,
-  ...REDIRECT_HERE_TOKENS
+  ...REDIRECT_HERE_TOKENS,
+  ...REDIRECT_GREATAND_TOKENS
 ]);
 var BUILTIN_WRITE_COMMANDS = new Set([
   "cp",
   "mv",
   "install",
   "ln",
-  "truncate"
+  "truncate",
+  "unlink",
+  "rmdir"
 ]);
 var INPLACE_EDIT_COMMANDS = new Set(["sed", "perl", "awk"]);
 var INTERPRETER_EVAL_COMMANDS = new Set([
@@ -18970,7 +18979,13 @@ var INTERPRETER_EVAL_COMMANDS = new Set([
   "bun",
   "ruby",
   "perl",
-  "php"
+  "php",
+  "bash",
+  "sh",
+  "dash",
+  "zsh",
+  "ksh",
+  "eval"
 ]);
 var NETWORK_DOWNLOAD_COMMANDS = new Set(["curl", "wget", "scp"]);
 var ARCHIVE_EXTRACT_COMMANDS = new Set([
@@ -19023,6 +19038,9 @@ function detectBuiltinWritesFromString(cmd) {
   if (tokens.length === 0)
     return null;
   const name = tokens[0].toLowerCase();
+  if (name === "rmdir" && tokens.some((token) => /^\/(?:s|q)$/i.test(token))) {
+    return null;
+  }
   if (BUILTIN_WRITE_COMMANDS.has(name)) {
     for (let i = tokens.length - 1;i >= 1; i--) {
       if (!tokens[i].startsWith("-")) {
@@ -19190,6 +19208,9 @@ function isNullDevice(path21) {
 function isNumeric(s) {
   return /^\d+$/.test(s);
 }
+function isNonFileGreatAndTarget(path21) {
+  return path21 !== null && (isNumeric(path21) || path21 === "-");
+}
 function detectRedirects(cmd) {
   const results = [];
   results.push(...detectHereDocMarkers(cmd));
@@ -19207,7 +19228,7 @@ function detectRedirects(cmd) {
     const fileNode = r.file;
     const path21 = extractRedirectPath(fileNode);
     const opLabel = operatorLabel(opNode);
-    if (REDIRECT_WRITE_TOKENS.has(opType)) {
+    if (REDIRECT_WRITE_TOKENS.has(opType) || REDIRECT_GREATAND_TOKENS.has(opType) && !isNonFileGreatAndTarget(path21)) {
       results.push({ category: "redirect", operator: opLabel, path: path21 });
     } else if (REDIRECT_HERE_TOKENS.has(opType)) {
       results.push({ category: "here_doc", operator: opLabel, path: path21 });
@@ -19284,6 +19305,9 @@ function detectBuiltinWrites(cmd) {
   if (!BUILTIN_WRITE_COMMANDS.has(lowerName))
     return results;
   const suffixWords = getSuffixWords(cmd);
+  if (lowerName === "rmdir" && suffixWords.some((word) => /^\/(?:s|q)$/i.test(word))) {
+    return results;
+  }
   if (lowerName === "truncate") {
     for (const word of suffixWords) {
       if (!word.startsWith("-") && !isNumeric(word)) {
@@ -19368,8 +19392,21 @@ function detectInterpreterEval(cmd) {
     bun: ["-e", "-p", "-pe"],
     ruby: ["-e"],
     perl: ["-e", "-E"],
-    php: ["-r", "-R", "-F"]
-  };
+    php: ["-r", "-R", "-F"],
+    bash: ["-c"],
+    sh: ["-c"],
+    dash: ["-c"],
+    zsh: ["-c"],
+    ksh: ["-c"]
+  };
+  if (lowerName === "eval") {
+    results.push({
+      category: "interpreter_eval",
+      operator: "eval",
+      path: null
+    });
+    return results;
+  }
   const relevantFlags = evalFlags[lowerName] ?? [];
   const hasEvalFlag = suffixWords.some((word) => relevantFlags.some((f) => word === f || word.startsWith(f) && word.length > f.length));
   if (!hasEvalFlag)
@@ -19576,7 +19613,7 @@ function detectGitDestructive(cmd) {
   }
   return results;
 }
-function splitWindowsCommands(command) {
+function splitWindowsCommands(command, shell) {
   const commands = [];
   let current = "";
   let inSingleQuote = false;
@@ -19584,7 +19621,7 @@ function splitWindowsCommands(command) {
   let parenDepth = 0;
   for (let i = 0;i < command.length; i++) {
     const ch = command[i];
-    if (ch === "'" && !inDoubleQuote) {
+    if (shell === "powershell" && ch === "'" && !inDoubleQuote) {
       inSingleQuote = !inSingleQuote;
     } else if (ch === '"' && !inSingleQuote) {
       inDoubleQuote = !inDoubleQuote;
@@ -19593,6 +19630,12 @@ function splitWindowsCommands(command) {
     } else if (ch === ")" && !inSingleQuote && !inDoubleQuote) {
       parenDepth--;
     }
+    if (shell === "powershell" && (ch === ";" || ch === "{" || ch === "}") && !inSingleQuote && !inDoubleQuote && parenDepth === 0) {
+      if (current.trim())
+        commands.push(current.trim());
+      current = "";
+      continue;
+    }
     if (ch === "|" && !inSingleQuote && !inDoubleQuote && parenDepth === 0) {
       if (current.trim())
         commands.push(current.trim());
@@ -19608,6 +19651,10 @@ function splitWindowsCommands(command) {
       continue;
     }
     if (ch === "&" && !inSingleQuote && !inDoubleQuote && parenDepth === 0) {
+      if (command[i - 1] === ">") {
+        current += ch;
+        continue;
+      }
       if (!(i + 1 < command.length && command[i + 1] === "&")) {
         if (current.trim())
           commands.push(current.trim());
@@ -19632,38 +19679,148 @@ var _PS_WRITE_CMDLETS = new Set([
   "Invoke-WebRequest",
   "Start-Process"
 ]);
-var _PS_WRITE_ALIASES = new Set(["echo", "write"]);
+function detectPowerShellRedirects(command) {
+  const results = [];
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  const isBoundary = (character) => character === undefined || /[\s;|&()]/.test(character);
+  for (let index = 0;index < command.length; index++) {
+    const character = command[index];
+    if (inSingleQuote) {
+      if (character === "'") {
+        if (command[index + 1] === "'") {
+          index++;
+        } else {
+          inSingleQuote = false;
+        }
+      }
+      continue;
+    }
+    if (inDoubleQuote) {
+      if (character === "`" && index + 1 < command.length) {
+        index++;
+        continue;
+      }
+      if (character === '"')
+        inDoubleQuote = false;
+      continue;
+    }
+    if (character === "'") {
+      inSingleQuote = true;
+      continue;
+    }
+    if (character === '"') {
+      inDoubleQuote = true;
+      continue;
+    }
+    if (character !== ">")
+      continue;
+    const operator = command[index + 1] === ">" ? ">>" : ">";
+    let cursor = index + operator.length;
+    while (/\s/.test(command[cursor] ?? ""))
+      cursor++;
+    if (command[cursor] === "&") {
+      cursor++;
+      while (/\s/.test(command[cursor] ?? ""))
+        cursor++;
+      const descriptorStart = cursor;
+      while (/\d/.test(command[cursor] ?? ""))
+        cursor++;
+      const descriptor = command.slice(descriptorStart, cursor);
+      if (descriptor && isBoundary(command[cursor])) {
+        index = Math.max(index, cursor - 1);
+        continue;
+      }
+      results.push({ category: "redirect", operator, path: null });
+      index = Math.max(index, cursor - 1);
+      continue;
+    }
+    let pathValue = null;
+    if (cursor < command.length) {
+      const quote = command[cursor];
+      if (quote === '"' || quote === "'") {
+        cursor++;
+        const pathStart = cursor;
+        let closed = false;
+        while (cursor < command.length) {
+          if (quote === '"' && command[cursor] === "`") {
+            cursor += 2;
+            continue;
+          }
+          if (command[cursor] === quote) {
+            if (quote === "'" && command[cursor + 1] === "'") {
+              cursor += 2;
+              continue;
+            }
+            pathValue = command.slice(pathStart, cursor);
+            cursor++;
+            closed = true;
+            break;
+          }
+          cursor++;
+        }
+        if (!closed)
+          pathValue = null;
+      } else {
+        const pathStart = cursor;
+        while (cursor < command.length && !/\s|[;|&()<>]/.test(command[cursor] ?? "")) {
+          cursor++;
+        }
+        if (cursor > pathStart)
+          pathValue = command.slice(pathStart, cursor);
+      }
+    }
+    results.push({ category: "redirect", operator, path: pathValue });
+    index = Math.max(index, cursor - 1);
+  }
+  if (inSingleQuote || inDoubleQuote) {
+    results.push({ category: "redirect", operator: ">", path: null });
+  }
+  return results;
+}
 function detectPowerShellWrites(command) {
   const results = [];
   const trimmed = command.trim();
   if (!trimmed)
     return results;
+  if (/^(?:powershell|pwsh)(?:\.exe)?\s+/i.test(trimmed) && /(?:^|\s)-(?:e|ec|enc|encodedcommand)(?=\s|=|$)/i.test(trimmed)) {
+    results.push({
+      category: "interpreter_eval",
+      operator: "PowerShell -EncodedCommand",
+      path: null
+    });
+    return results;
+  }
   let innerCommand = trimmed;
-  const cmdMatch = trimmed.match(/^(?:powershell|pwsh)\s+(?:-Command|-C)\s+(.*)$/i);
+  const cmdMatch = trimmed.match(/^(?:powershell|pwsh)(?:\.exe)?\s+(?:-Command|-C)\s+(.*)$/i);
   if (cmdMatch) {
     innerCommand = cmdMatch[1].trim();
     if (innerCommand.startsWith('"') && innerCommand.endsWith('"') || innerCommand.startsWith("'") && innerCommand.endsWith("'")) {
       innerCommand = innerCommand.slice(1, -1);
     }
   }
-  const redirectMatch = innerCommand.match(/^(.*?)\s+((?:>){1,2})\s*(\S+)$/);
-  if (redirectMatch) {
-    const beforeRedirect = redirectMatch[1];
-    const op = redirectMatch[2];
-    const path21 = redirectMatch[3];
-    const fdRedirectPattern = /\d>\s*$|\s\d>&$/;
-    if (!fdRedirectPattern.test(`${beforeRedirect} ${op}`)) {
-      results.push({ category: "redirect", operator: op, path: path21 });
-    }
+  if (/(?:^|[;{}|&])\s*(?:Set-Location|Push-Location|Pop-Location|cd|chdir|sl)\b/i.test(innerCommand)) {
+    results.push({
+      category: "builtin_write",
+      operator: "working-directory mutation",
+      path: null
+    });
+  }
+  if (/[({]\s*(?:Out-File|Set-Content|Add-Content|Clear-Content|Copy-Item|Move-Item|Remove-Item)\b/i.test(innerCommand)) {
+    results.push({
+      category: "interpreter_eval",
+      operator: "nested PowerShell script block",
+      path: null
+    });
   }
-  const leadingRedirect = innerCommand.match(/^((?:>){1,2})\s+(\S+)$/);
-  if (leadingRedirect) {
+  if (/(?:^|[;|])\s*&\s*(?:['"$({]|\S+\s*\()/i.test(innerCommand) || /(?:^|[;|])\s*(?:Invoke-Expression|IEX)\b/i.test(innerCommand)) {
     results.push({
-      category: "redirect",
-      operator: leadingRedirect[1],
-      path: leadingRedirect[2]
+      category: "interpreter_eval",
+      operator: "dynamic PowerShell invocation",
+      path: null
     });
   }
+  results.push(...detectPowerShellRedirects(innerCommand));
   const iwrMatch = trimmed.match(/^(?:Invoke-WebRequest|curl)\s.*?(?:-OutFile\s+(\S+)|-o\s+(\S+))/i);
   if (iwrMatch) {
     const path21 = iwrMatch[1] || iwrMatch[2];
@@ -19678,27 +19835,31 @@ function detectPowerShellWrites(command) {
   function detectPsContentCmdlet(cmd) {
     const cmdletMatch = cmd.match(/^(Out-File|Set-Content|Add-Content|Clear-Content)\b/i);
     if (!cmdletMatch)
-      return null;
+      return [];
     const cmdletName = cmdletMatch[1];
     const rest = cmd.slice(cmdletMatch[0].length).trim();
-    const pathFlagMatch = rest.match(/(?:-Path|-FilePath|-LiteralPath)\s+("([^"]+)"|'([^']+)'|(\S+))/i);
+    const pathFlagMatch = rest.match(/(?:-Path|-FilePath|-LiteralPath)\s+((?:"[^"]*"|'[^']*'|[^,\s]+)(?:\s*,\s*(?:"[^"]*"|'[^']*'|[^,\s]+))*)/i);
     if (pathFlagMatch) {
-      const path21 = pathFlagMatch[2] ?? pathFlagMatch[3] ?? pathFlagMatch[4] ?? "";
-      return { category: "redirect", operator: cmdletName, path: path21 };
+      const paths = pathFlagMatch[1].split(/\s*,\s*/).map((value) => value.replace(/^(["'])|(["'])$/g, ""));
+      return paths.map((path21) => ({
+        category: "redirect",
+        operator: cmdletName,
+        path: path21 || null
+      }));
+    }
+    if (/(?:-Path|-FilePath|-LiteralPath)(?:\s|$)/i.test(rest)) {
+      return [{ category: "redirect", operator: cmdletName, path: null }];
     }
     const tokens = rest.match(/(?:[^\s"-]+|"[^"]*"|'[^']*'|-[^\s]+)/g) ?? [];
     for (const token of tokens) {
       if (token.startsWith("-"))
         continue;
       const path21 = token.replace(/^["']|["']$/g, "");
-      return { category: "redirect", operator: cmdletName, path: path21 };
+      return [{ category: "redirect", operator: cmdletName, path: path21 }];
     }
-    return null;
-  }
-  const contentResult = detectPsContentCmdlet(innerCommand);
-  if (contentResult) {
-    results.push(contentResult);
+    return [];
   }
+  results.push(...detectPsContentCmdlet(innerCommand));
   const pipeContentMatch = innerCommand.match(/\|\s*(Out-File|Set-Content|Add-Content|Clear-Content)\b\s*(.*)$/i);
   if (pipeContentMatch) {
     const cmdletName = pipeContentMatch[1];
@@ -19791,27 +19952,6 @@ function detectPowerShellWrites(command) {
       }
     }
   }
-  const aliasRedirectMatch = trimmed.match(/^(echo|write)\s+(\S+.*?)\s*(?:>|\s{2,})/i);
-  if (aliasRedirectMatch) {
-    const _aliasPart = aliasRedirectMatch[0];
-    const _afterAlias = trimmed.slice(aliasRedirectMatch[0].length);
-    const fullRedirectMatch = trimmed.match(/((?:>){1,2})\s*(\S+)$/);
-    if (fullRedirectMatch) {
-      results.push({
-        category: "redirect",
-        operator: fullRedirectMatch[1],
-        path: fullRedirectMatch[2]
-      });
-    }
-  }
-  const bareAliasMatch = trimmed.match(/^(echo|write)\s+.*?\s+((?:>){1,2})\s*(\S+)$/i);
-  if (bareAliasMatch) {
-    results.push({
-      category: "redirect",
-      operator: bareAliasMatch[2],
-      path: bareAliasMatch[3]
-    });
-  }
   return results;
 }
 var _CMD_WRITE_BUILTINS = new Set([
@@ -19823,6 +19963,108 @@ var _CMD_WRITE_BUILTINS = new Set([
   "md",
   "ren"
 ]);
+var _CMD_COPY_MOVE_SWITCHES = new Set([
+  "/a",
+  "/b",
+  "/d",
+  "/f",
+  "/n",
+  "/v",
+  "/y",
+  "/-y",
+  "/z"
+]);
+function tokenizeCmdArguments(command) {
+  const tokens = [];
+  let current = "";
+  let inDoubleQuote = false;
+  for (let index = 0;index < command.length; index++) {
+    const character = command[index];
+    if (character === "^" && !inDoubleQuote) {
+      if (index + 1 < command.length)
+        current += command[++index];
+      continue;
+    }
+    if (character === '"') {
+      inDoubleQuote = !inDoubleQuote;
+      continue;
+    }
+    if (/\s/.test(character) && !inDoubleQuote) {
+      if (current) {
+        tokens.push(current);
+        current = "";
+      }
+      continue;
+    }
+    current += character;
+  }
+  if (current)
+    tokens.push(current);
+  return tokens;
+}
+function detectCmdRedirects(command) {
+  const results = [];
+  let inDoubleQuote = false;
+  const isTokenBoundary = (character) => character === undefined || /[\s&|()]/.test(character);
+  for (let index = 0;index < command.length; index++) {
+    const character = command[index];
+    if (character === "^" && !inDoubleQuote) {
+      index++;
+      continue;
+    }
+    if (character === '"') {
+      inDoubleQuote = !inDoubleQuote;
+      continue;
+    }
+    if (inDoubleQuote || character !== ">")
+      continue;
+    const operator = command[index + 1] === ">" ? ">>" : ">";
+    const targetStart = index + operator.length;
+    let cursor = targetStart;
+    while (/\s/.test(command[cursor] ?? ""))
+      cursor++;
+    if (command[cursor] === "&") {
+      cursor++;
+      while (/\s/.test(command[cursor] ?? ""))
+        cursor++;
+      const descriptorStart = cursor;
+      while (/\d/.test(command[cursor] ?? ""))
+        cursor++;
+      const descriptor = command.slice(descriptorStart, cursor);
+      if (descriptor && isTokenBoundary(command[cursor])) {
+        index = Math.max(index, cursor - 1);
+        continue;
+      }
+      results.push({ category: "redirect", operator, path: null });
+      index = Math.max(index, cursor - 1);
+      continue;
+    }
+    let pathValue = null;
+    if (cursor < command.length) {
+      const quote = command[cursor];
+      if (quote === '"') {
+        const closingQuote = command.indexOf(quote, cursor + 1);
+        if (closingQuote !== -1) {
+          pathValue = command.slice(cursor + 1, closingQuote);
+          cursor = closingQuote + 1;
+        }
+      } else {
+        const pathStart = cursor;
+        while (cursor < command.length && !/[\s&|()<>]/.test(command[cursor] ?? "")) {
+          cursor++;
+        }
+        if (cursor > pathStart)
+          pathValue = command.slice(pathStart, cursor);
+      }
+    }
+    results.push({ category: "redirect", operator, path: pathValue });
+    index = Math.max(index, cursor - 1);
+  }
+  if (inDoubleQuote) {
+    results.push({ category: "redirect", operator: ">", path: null });
+  }
+  return results;
+}
 function detectCmdWrites(command) {
   const results = [];
   const trimmed = command.trim();
@@ -19836,46 +20078,30 @@ function detectCmdWrites(command) {
       innerCommand = innerCommand.slice(1, -1);
     }
   }
-  const redirectMatch = innerCommand.match(/^(.*?)\s+((?:>){1,2})\s*(\S+)$/);
-  if (redirectMatch) {
-    const beforeRedirect = redirectMatch[1];
-    const op = redirectMatch[2];
-    const path21 = redirectMatch[3];
-    const fdRedirectPattern = /\d>&?$/;
-    if (!fdRedirectPattern.test(beforeRedirect)) {
-      results.push({ category: "redirect", operator: op, path: path21 });
-    }
-  }
-  const leadingRedirect = innerCommand.match(/^((?:>){1,2})\s+(\S+)$/);
-  if (leadingRedirect) {
-    results.push({
-      category: "redirect",
-      operator: leadingRedirect[1],
-      path: leadingRedirect[2]
-    });
+  if (/^(?:powershell|pwsh)(?:\.exe)?\s+/i.test(innerCommand)) {
+    results.push(...detectPowerShellWrites(innerCommand));
   }
+  results.push(...detectCmdRedirects(innerCommand));
   function detectCmdCopy(cmd) {
-    const directMatch = cmd.match(/^copy\s+(\S+|"[^"]+"|'[^']+')\s+(\S+|"[^"]+"|'[^']+')/i);
-    if (directMatch) {
-      const dest = directMatch[2].replace(/^["']|["']$/g, "");
-      return { category: "builtin_write", operator: "copy", path: dest };
-    }
-    const ifExistMatch = cmd.match(/if\s+exist\s+\S+.*?copy\s+(\S+|"[^"]+"|'[^']+')\s+(\S+|"[^"]+"|'[^']+')/i);
-    if (ifExistMatch) {
-      const dest = ifExistMatch[2].replace(/^["']|["']$/g, "");
+    const commandMatch = cmd.match(/(?:^|\s)copy(?=\s|$)/i);
+    if (commandMatch) {
+      const start = (commandMatch.index ?? 0) + commandMatch[0].length;
+      const positional = tokenizeCmdArguments(cmd.slice(start)).filter((token) => !_CMD_COPY_MOVE_SWITCHES.has(token.toLowerCase()));
+      if (positional.length < 2)
+        return null;
+      const dest = positional[positional.length - 1];
       return { category: "builtin_write", operator: "copy", path: dest };
     }
     return null;
   }
   function detectCmdMove(cmd) {
-    const directMatch = cmd.match(/^move\s+(\S+|"[^"]+"|'[^']+')\s+(\S+|"[^"]+"|'[^']+')/i);
-    if (directMatch) {
-      const dest = directMatch[2].replace(/^["']|["']$/g, "");
-      return { category: "builtin_write", operator: "move", path: dest };
-    }
-    const ifExistMatch = cmd.match(/if\s+exist\s+\S+.*?move\s+(\S+|"[^"]+"|'[^']+')\s+(\S+|"[^"]+"|'[^']+')/i);
-    if (ifExistMatch) {
-      const dest = ifExistMatch[2].replace(/^["']|["']$/g, "");
+    const commandMatch = cmd.match(/(?:^|\s)move(?=\s|$)/i);
+    if (commandMatch) {
+      const start = (commandMatch.index ?? 0) + commandMatch[0].length;
+      const positional = tokenizeCmdArguments(cmd.slice(start)).filter((token) => !_CMD_COPY_MOVE_SWITCHES.has(token.toLowerCase()));
+      if (positional.length < 2)
+        return null;
+      const dest = positional[positional.length - 1];
       return { category: "builtin_write", operator: "move", path: dest };
     }
     return null;
@@ -19924,36 +20150,25 @@ function detectCmdWrites(command) {
       results.push({ category: "builtin_write", operator: "md", path: path21 });
     }
   }
-  const echoMatch = trimmed.match(/^echo\s+(\S+.*?)\s+((?:>){1,2})\s*(\S+)$/i);
-  if (echoMatch) {
-    results.push({
-      category: "redirect",
-      operator: echoMatch[2],
-      path: echoMatch[3]
-    });
-  }
-  const echoDotMatch = trimmed.match(/^echo\.\s+((?:>){1,2})\s*(\S+)$/i);
-  if (echoDotMatch) {
-    results.push({
-      category: "redirect",
-      operator: echoDotMatch[1],
-      path: echoDotMatch[2]
-    });
-  }
-  const setMatch = trimmed.match(/^set\s+\S+\s*=\s*\S*\s*((?:>){1,2})\s*(\S+)$/i);
-  if (setMatch) {
-    results.push({
-      category: "redirect",
-      operator: setMatch[1],
-      path: setMatch[2]
-    });
-  }
   return results;
 }
 function detectPosixWrites(command) {
   if (!command || typeof command !== "string") {
     return { writes: [], hasWrites: false };
   }
+  if (unsafeShellCommandTextReason(command)) {
+    return {
+      writes: [
+        {
+          category: "interpreter_eval",
+          operator: "unsafe command text",
+          path: null
+        }
+      ],
+      hasWrites: true,
+      parseError: true
+    };
+  }
   let ast;
   let parseFailed = false;
   try {
@@ -19997,8 +20212,21 @@ function detectWindowsWrites(command, shell) {
   if (!command || typeof command !== "string") {
     return { writes: [], hasWrites: false };
   }
+  if (unsafeShellCommandTextReason(command)) {
+    return {
+      writes: [
+        {
+          category: "interpreter_eval",
+          operator: "unsafe command text",
+          path: null
+        }
+      ],
+      hasWrites: true,
+      parseError: true
+    };
+  }
   try {
-    const subCommands = splitWindowsCommands(command);
+    const subCommands = splitWindowsCommands(command, shell);
     const allWrites = [];
     for (const subCmd of subCommands) {
       const writes2 = shell === "powershell" ? detectPowerShellWrites(subCmd) : detectCmdWrites(subCmd);
@@ -20024,10 +20252,18 @@ function isDynamicPath(pathText) {
     return true;
   if (/\$\{[^}]+\}/.test(pathText))
     return true;
+  if (/%[A-Za-z_][A-Za-z0-9_]*%/.test(pathText))
+    return true;
   if (/\$\([^)]+\)/.test(pathText))
     return true;
   if (/`[^`]+`/.test(pathText))
     return true;
+  if (/^~(?:[^/\\\s]*)?(?:[/\\]|$)/.test(pathText))
+    return true;
+  if (/%~[A-Za-z]*(?:\d+|\*)/.test(pathText))
+    return true;
+  if (/%(?:\d+|\*)/.test(pathText))
+    return true;
   return false;
 }
 function resolvePath(pathText, cwd) {
@@ -20201,7 +20437,7 @@ function getWritesFromRedirectNode(redirect, _context) {
   const fileNode = r.file;
   const path21 = extractRedirectPath(fileNode);
   const opLabel = operatorLabel(opNode);
-  if (REDIRECT_WRITE_TOKENS.has(opType)) {
+  if (REDIRECT_WRITE_TOKENS.has(opType) || REDIRECT_GREATAND_TOKENS.has(opType) && !isNonFileGreatAndTarget(path21)) {
     return [{ category: "redirect", operator: opLabel, path: path21 }];
   } else if (REDIRECT_HERE_TOKENS.has(opType)) {
     return [{ category: "here_doc", operator: opLabel, path: path21 }];
@@ -22238,7 +22474,7 @@ function getDisplayFinalPromptPressure() {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-x2rr3gva.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-h1n6dbds.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)
@@ -39113,9 +39349,9 @@ function hashContent(content) {
   return createHash24("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-8h1b602y.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-4k4hr33y.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-7bvzssz0.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-2bmhe2jn.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -42173,7 +42409,7 @@ async function resolveCuratorLLMDelegate(directory, mode, sessionId) {
   const seam = _internals36.createCuratorLLMDelegate;
   if (seam)
     return seam(directory, mode, sessionId);
-  const { createCuratorLLMDelegate } = await import("./curator-llm-factory-zbs6hm60.js");
+  const { createCuratorLLMDelegate } = await import("./curator-llm-factory-qhhxev17.js");
   return createCuratorLLMDelegate(directory, mode, sessionId);
 }
 async function reconcileCloseTerminalStateForPlan(directory, targetPlan, options) {
@@ -42568,7 +42804,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-8h1b602y.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-4k4hr33y.js");
     const { config: pmLoadedConfig } = _internals36.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -43805,7 +44041,14 @@ function isTerminal(state) {
 }
 
 // src/summaries/manager.ts
-import { mkdirSync as mkdirSync14, readdirSync as readdirSync4, renameSync as renameSync11, rmSync as rmSync6, statSync as statSync17 } from "fs";
+import {
+  linkSync,
+  mkdirSync as mkdirSync14,
+  readdirSync as readdirSync4,
+  rmSync as rmSync6,
+  statSync as statSync17,
+  unlinkSync as unlinkSync10
+} from "fs";
 import * as path52 from "path";
 var SUMMARY_ID_REGEX = /^S\d+$/;
 function sanitizeSummaryId(id) {
@@ -44345,7 +44588,7 @@ async function countStaleSummaries(projectRoot, retentionDays, now2) {
 
 // src/session/snapshot-coordination-init.ts
 import { createHash as createHash28, randomUUID as randomUUID10 } from "crypto";
-import { existsSync as existsSync27, readFileSync as readFileSync19, renameSync as renameSync12 } from "fs";
+import { existsSync as existsSync27, readFileSync as readFileSync19, renameSync as renameSync11 } from "fs";
 init_warning_buffer();
 
 // src/session/snapshot-reader.ts
@@ -44358,7 +44601,7 @@ import {
   fsyncSync as fsyncSync3,
   mkdirSync as mkdirSync15,
   openSync as openSync11,
-  unlinkSync as unlinkSync10
+  unlinkSync as unlinkSync11
 } from "fs";
 import { rename as fsRename } from "fs/promises";
 import * as path55 from "path";
@@ -44506,7 +44749,7 @@ function serializeAgentSession(s) {
 }
 async function writeSnapshot(directory, state) {
   try {
-    const { ensureSnapshotCoordinationReady } = await import("./snapshot-coordination-init-hexx2msp.js");
+    const { ensureSnapshotCoordinationReady } = await import("./snapshot-coordination-init-5fawrj35.js");
     await ensureSnapshotCoordinationReady(directory);
     const snapshot = {
       version: 3,
@@ -44550,7 +44793,7 @@ async function writeSnapshotProjection(directory, snapshot) {
     await renameWithTransientRetry(tempPath, resolvedPath);
   } finally {
     try {
-      unlinkSync10(tempPath);
+      unlinkSync11(tempPath);
     } catch {}
   }
   invalidateCachedArtifact(resolvedPath);
@@ -45070,7 +45313,7 @@ function markSnapshotCoordinationClosing(directory) {
 var _snapshotCoordinationInternals = {
   entries,
   initialize: initializeSnapshotCoordination,
-  renameLegacySnapshot: renameSync12,
+  renameLegacySnapshot: renameSync11,
   writeProjection: writeSnapshotProjection,
   timeoutMs: READY_TIMEOUT_MS
 };
@@ -47432,7 +47675,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-7bvzssz0.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-2bmhe2jn.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -48556,7 +48799,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-nz7wjabh.js");
+        const skillModule = await import("./skill-generator-fhj13jmq.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -49028,7 +49271,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-praedffr.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-rgz471df.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -49860,7 +50103,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-6h85e2g0.js");
+      const { getScanStatus } = await import("./scan-cursor-e63t0g5b.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -50032,9 +50275,9 @@ var _internals54 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-8h1b602y.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-4k4hr33y.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-7bvzssz0.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-2bmhe2jn.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -50042,11 +50285,11 @@ var _internals54 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-pch7ww87.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-wyadq69k.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries2, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-3dp8qbqc.js");
+    const { checkHivePromotions } = await import("./hive-promoter-s87hkb40.js");
     return checkHivePromotions(entries2, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -50055,7 +50298,7 @@ var _internals54 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-nz7wjabh.js");
+    } = await import("./skill-generator-fhj13jmq.js");
     const result = {
       approved: [],
       rejected: [],
@@ -50097,7 +50340,7 @@ var _internals54 = {
     return result;
   },
   readPriorDriftReports: async (directory) => {
-    const { readPriorDriftReports } = await import("./curator-drift-4m984tvy.js");
+    const { readPriorDriftReports } = await import("./curator-drift-smqmej5v.js");
     return readPriorDriftReports(directory);
   },
   readSwarmKnowledge: (directory) => readKnowledge(resolveSwarmKnowledgePath(directory))
@@ -54274,7 +54517,7 @@ function resolveRerankerCacheDir() {
 }
 
 // src/memory/jsonl-migration.ts
-import { existsSync as existsSync35, renameSync as renameSync14, unlinkSync as unlinkSync12 } from "fs";
+import { existsSync as existsSync35, renameSync as renameSync13, unlinkSync as unlinkSync13 } from "fs";
 import { copyFile, mkdir as mkdir14, readFile as readFile17, stat as stat6, writeFile as writeFile9 } from "fs/promises";
 import * as path69 from "path";
 var LEGACY_JSONL_MIGRATION_VERSION = 2;
@@ -54342,30 +54585,30 @@ async function writeJsonlExport(rootDirectory, config, memories, proposals, outc
   const memoriesTempPath = path69.join(path69.dirname(memoriesPath), `${path69.basename(memoriesPath)}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`);
   try {
     await writeFile9(memoriesTempPath, toJsonl(memories), "utf-8");
-    renameSync14(memoriesTempPath, memoriesPath);
+    renameSync13(memoriesTempPath, memoriesPath);
   } catch (err) {
     try {
-      unlinkSync12(memoriesTempPath);
+      unlinkSync13(memoriesTempPath);
     } catch {}
     throw err;
   }
   const proposalsTempPath = path69.join(path69.dirname(proposalsPath), `${path69.basename(proposalsPath)}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`);
   try {
     await writeFile9(proposalsTempPath, toJsonl(proposals), "utf-8");
-    renameSync14(proposalsTempPath, proposalsPath);
+    renameSync13(proposalsTempPath, proposalsPath);
   } catch (err) {
     try {
-      unlinkSync12(proposalsTempPath);
+      unlinkSync13(proposalsTempPath);
     } catch {}
     throw err;
   }
   const outcomesTempPath = path69.join(path69.dirname(outcomesPath), `${path69.basename(outcomesPath)}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`);
   try {
     await writeFile9(outcomesTempPath, toJsonl(outcomeEvents), "utf-8");
-    renameSync14(outcomesTempPath, outcomesPath);
+    renameSync13(outcomesTempPath, outcomesPath);
   } catch (err) {
     try {
-      unlinkSync12(outcomesTempPath);
+      unlinkSync13(outcomesTempPath);
     } catch {}
     throw err;
   }
@@ -54378,10 +54621,10 @@ async function writeMigrationReport(rootDirectory, report, config = {}) {
   try {
     await writeFile9(reportTempPath, `${JSON.stringify(report, null, 2)}
 `, "utf-8");
-    renameSync14(reportTempPath, reportPath);
+    renameSync13(reportTempPath, reportPath);
   } catch (err) {
     try {
-      unlinkSync12(reportTempPath);
+      unlinkSync13(reportTempPath);
     } catch {}
     throw err;
   }
@@ -58541,7 +58784,7 @@ function wireCloseInternals() {
     archiveEvidence,
     endAgentSession,
     flushAndDrainTelemetry: async () => {
-      const { flushAndDrainTelemetry } = await import("./telemetry-w774xb8g.js");
+      const { flushAndDrainTelemetry } = await import("./telemetry-ca8dmn26.js");
       return flushAndDrainTelemetry();
     },
     finalizeContextTelemetry,
@@ -59893,9 +60136,9 @@ var _internals64 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate }] = await Promise.all([
-      import("./schema-8h1b602y.js"),
-      import("./curator-pch7ww87.js"),
-      import("./curator-llm-factory-zbs6hm60.js")
+      import("./schema-4k4hr33y.js"),
+      import("./curator-wyadq69k.js"),
+      import("./curator-llm-factory-qhhxev17.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate };
   }
@@ -60045,6 +60288,122 @@ Ensure this is a git repository with commit history.`;
   return output;
 }
 
+// src/dashboard/index.ts
+init_logger();
+
+// src/db/health.ts
+import { existsSync as existsSync40, statSync as statSync23 } from "fs";
+import { join as join58 } from "path";
+var SWARM_DB_QUICK_CHECK_MAX_BYTES = 64 * 1024 * 1024;
+function getSwarmDbHealthSnapshot(directory) {
+  try {
+    const size = statSync23(projectDbPath(directory)).size;
+    if (size > SWARM_DB_QUICK_CHECK_MAX_BYTES) {
+      return { kind: "too_large", sizeBytes: size };
+    }
+  } catch {
+    return { kind: "absent" };
+  }
+  const staleMarker = existsSync40(join58(canonicalProjectKey(directory), ".swarm", "db-migration-failure.json"));
+  try {
+    const db = getProjectDb(directory);
+    return {
+      kind: "open",
+      quickCheck: db.query("PRAGMA quick_check").get()?.quick_check ?? "unknown",
+      journalMode: db.query("PRAGMA journal_mode").get()?.journal_mode ?? "unknown",
+      pageCount: db.query("PRAGMA page_count").get()?.page_count ?? -1,
+      migrationFailures: db.query("SELECT COUNT(*) as n FROM migration_failures").get()?.n ?? 0,
+      staleMarker
+    };
+  } catch (err) {
+    const category = err && typeof err === "object" && "category" in err ? String(err.category) : "unknown";
+    return {
+      kind: "error",
+      category,
+      message: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+
+// src/dashboard/views.ts
+var LANE_STALE_HORIZON_MS = 30 * 60000;
+
+// src/dashboard/server.ts
+var MAX_RESPONSE_BYTES = 256 * 1024;
+var LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1"]);
+
+// src/dashboard/index.ts
+var registry = new Map;
+function getDashboardHandle(directory) {
+  return registry.get(canonicalProjectKey(directory))?.handle ?? null;
+}
+
+// src/commands/dashboard.ts
+async function readStatusFileRecord(directory) {
+  try {
+    const raw = await readSwarmFileAsync(directory, "dashboard-status.json");
+    if (!raw)
+      return null;
+    const parsed = JSON.parse(raw);
+    return typeof parsed === "object" && parsed !== null ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+async function handleDashboardCommand(directory, _args) {
+  const handle = getDashboardHandle(directory);
+  if (handle && handle.listening) {
+    return [
+      "## Swarm dashboard",
+      "",
+      `Status: **listening** on 127.0.0.1:${handle.port} (read-only, token-protected)`,
+      "",
+      `Open: ${handle.url ?? "(url unavailable)"}`,
+      "",
+      "Views: gates & circuits, pending-delegation age bands, lane liveness, task board, activity timeline.",
+      "This page is read-only; abort/recover actions stay in the swarm commands and tools."
+    ].join(`
+`);
+  }
+  const record = await readStatusFileRecord(directory);
+  if (record && typeof record.status === "string") {
+    if (record.status === "disabled_port_conflict") {
+      return [
+        "## Swarm dashboard",
+        "",
+        "**Disabled \u2014 port conflict.** The configured `dashboard.port` is already in use (or the bind failed), so no listener is running.",
+        "",
+        "Fix: free the port or set another `dashboard.port` in your opencode-swarm.json, then restart the host."
+      ].join(`
+`);
+    }
+    if (record.status === "stopped") {
+      return [
+        "## Swarm dashboard",
+        "",
+        "The dashboard listener was stopped (host shutdown). It restarts with the next host boot when `dashboard.port` is set."
+      ].join(`
+`);
+    }
+  }
+  return [
+    "## Swarm dashboard",
+    "",
+    "**Disabled (default).** The local mission-control dashboard is opt-in.",
+    "",
+    "To enable, set a loopback port in your opencode-swarm.json:",
+    "",
+    "```json",
+    "{",
+    '  "dashboard": { "port": 47832 }',
+    "}",
+    "```",
+    "",
+    "When enabled, a read-only, token-protected view (gates & circuits, delegation age bands, lane liveness, task board, activity timeline) serves on 127.0.0.1 and starts after plugin init; port 0 or absent keeps it fully off."
+  ].join(`
+`);
+}
+
 // src/commands/dataset.ts
 import { createHash as createHash38 } from "crypto";
 
@@ -61411,42 +61770,6 @@ function readCachePackageVersion(cachePath) {
 
 // src/services/diagnose-service.ts
 init_loader();
-
-// src/db/health.ts
-import { existsSync as existsSync42, statSync as statSync24 } from "fs";
-import { join as join61 } from "path";
-var SWARM_DB_QUICK_CHECK_MAX_BYTES = 64 * 1024 * 1024;
-function getSwarmDbHealthSnapshot(directory) {
-  try {
-    const size = statSync24(projectDbPath(directory)).size;
-    if (size > SWARM_DB_QUICK_CHECK_MAX_BYTES) {
-      return { kind: "too_large", sizeBytes: size };
-    }
-  } catch {
-    return { kind: "absent" };
-  }
-  const staleMarker = existsSync42(join61(canonicalProjectKey(directory), ".swarm", "db-migration-failure.json"));
-  try {
-    const db = getProjectDb(directory);
-    return {
-      kind: "open",
-      quickCheck: db.query("PRAGMA quick_check").get()?.quick_check ?? "unknown",
-      journalMode: db.query("PRAGMA journal_mode").get()?.journal_mode ?? "unknown",
-      pageCount: db.query("PRAGMA page_count").get()?.page_count ?? -1,
-      migrationFailures: db.query("SELECT COUNT(*) as n FROM migration_failures").get()?.n ?? 0,
-      staleMarker
-    };
-  } catch (err) {
-    const category = err && typeof err === "object" && "category" in err ? String(err.category) : "unknown";
-    return {
-      kind: "error",
-      category,
-      message: err instanceof Error ? err.message : String(err)
-    };
-  }
-}
-
-// src/services/diagnose-service.ts
 init_capability_probe();
 init_executor();
 init_path_identity();
@@ -61807,7 +62130,7 @@ import { homedir as homedir6 } from "os";
 import { join as join62 } from "path";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
 var SEMVER_REGEX = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/;
-var MAX_RESPONSE_BYTES = 256 * 1024;
+var MAX_RESPONSE_BYTES2 = 256 * 1024;
 function cacheDir() {
   const xdg = process.env.XDG_CACHE_HOME;
   const base = xdg && xdg.length > 0 ? xdg : join62(homedir6(), ".cache");
@@ -62147,7 +62470,7 @@ async function computeCurationDiagnostics(directory, entries2) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-6h85e2g0.js");
+    const { getScanStatus } = await import("./scan-cursor-e63t0g5b.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -62155,19 +62478,19 @@ async function computeCurationDiagnostics(directory, entries2) {
   } catch {}
   let configMatch = null;
   try {
-    const { isLinked: isLinked2 } = await import("./knowledge-link-9z3fha35.js");
+    const { isLinked: isLinked2 } = await import("./knowledge-link-npk50523.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-8h1b602y.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-4k4hr33y.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-7bvzssz0.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-2bmhe2jn.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
         config = KnowledgeConfigSchema2.parse({});
       }
       const { cohortConfigFingerprint: cohortConfigFingerprint2 } = await import("./config-fingerprint-v22xh5a2.js");
-      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-d8s9w1z8.js");
+      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-n4hd2wsa.js");
       const currentFp = cohortConfigFingerprint2(buildConfigFingerprintInput2(config));
       const cohortFp = await readCohortConfigFingerprint(directory);
       configMatch = cohortFp === null ? null : currentFp === cohortFp;
@@ -63603,7 +63926,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-3mwx2rwq.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-905x2s1c.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -63641,7 +63964,7 @@ async function handleDoctorCommand(directory, args) {
 `;
   }
   try {
-    const { runModelPreflight } = await import("./model-preflight-gk1jysa8.js");
+    const { runModelPreflight } = await import("./model-preflight-kh9dwts2.js");
     const preflight = await runModelPreflight(config, swarmState.opencodeClient);
     if (preflight.catalogAvailable) {
       const unresolved = preflight.resolutions.filter((resolution) => resolution.status === "unresolved");
@@ -64557,7 +64880,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-cxed89n3.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-r3wcprfk.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -65752,7 +66075,7 @@ init_zod();
 
 // src/mutation/engine.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { unlinkSync as unlinkSync16, writeFileSync as writeFileSync17 } from "fs";
+import { unlinkSync as unlinkSync17, writeFileSync as writeFileSync17 } from "fs";
 import * as path88 from "path";
 init_git_executable();
 
@@ -66124,7 +66447,7 @@ async function executeMutation(patch, testCommand, testFiles, workingDir, option
         revertError = new Error(`Failed to revert mutation ${patch.id}: ${revertErr}. Working tree may be dirty.`);
       }
       try {
-        unlinkSync16(patchFile);
+        unlinkSync17(patchFile);
       } catch (_unlinkErr) {}
     }
   }
@@ -72428,10 +72751,10 @@ import {
   opendirSync as opendirSync2,
   openSync as openSync16,
   readFileSync as readFileSync44,
-  renameSync as renameSync18,
+  renameSync as renameSync17,
   rmSync as rmSync14,
   statSync as statSync29,
-  unlinkSync as unlinkSync18,
+  unlinkSync as unlinkSync19,
   writeSync as writeSync2
 } from "fs";
 import * as path96 from "path";
@@ -83822,7 +84145,7 @@ init_schema();
 
 // src/memory/memory-family-migration.ts
 var import_proper_lockfile10 = __toESM(require_proper_lockfile(), 1);
-import { copyFileSync as copyFileSync4, existsSync as existsSync58, readFileSync as readFileSync51, unlinkSync as unlinkSync20 } from "fs";
+import { copyFileSync as copyFileSync4, existsSync as existsSync58, readFileSync as readFileSync51, unlinkSync as unlinkSync21 } from "fs";
 import { mkdir as mkdir21, rename as rename10 } from "fs/promises";
 import * as path111 from "path";
 init_logger();
@@ -84085,10 +84408,10 @@ async function mergeStagedSqlite(destStoragePath, stagedPath) {
       }
       db.close();
       try {
-        unlinkSync20(stagedPath);
+        unlinkSync21(stagedPath);
         for (const suffix of ["-wal", "-shm"]) {
           try {
-            unlinkSync20(`${stagedPath}${suffix}`);
+            unlinkSync21(`${stagedPath}${suffix}`);
           } catch {}
         }
       } catch {}
@@ -84612,7 +84935,7 @@ function createCuratorLLMDelegate(directory, mode = "init", sessionId) {
     }
     const sdkOpts = signal ? { signal } : {};
     try {
-      const { getSwarmAgents: getSwarmAgents2, resolveFallbackModel: resolveFallbackModel2 } = await import("./index-tzxk6ct7.js");
+      const { getSwarmAgents: getSwarmAgents2, resolveFallbackModel: resolveFallbackModel2 } = await import("./index-swxaa0zs.js");
       const createResult = await client.session.create({
         ...sessionId ? {
           body: {
@@ -94400,7 +94723,7 @@ async function handleResetSessionCommand(directory, args, sessionID) {
     "",
     "Session state cleared. Plan, evidence, and knowledge preserved.",
     "",
-    "**All circuit breakers and revision limits have been cleared.** You can continue in this session \u2014 fresh state will be initialized automatically on the next tool call."
+    "In-memory circuit breakers and revision limits have been cleared. " + "Durable per-task retry gates (the coder retry circuit breaker, bound " + "to commit settlement in the events audit log and .swarm/evidence/) " + "intentionally survive this reset. If a task is blocked with " + "TASK_RETRY_CRITIC_REQUIRED waiting for a critic_sounding_board " + "APPROVED verdict that was already obtained, have the architect " + "record it with the approve_retry_sounding_board tool."
   ].join(`
 `);
 }
@@ -94765,12 +95088,12 @@ function resolveReviewAgentNames(generatedAgentNames, activeAgentName) {
   const validator = names.find((name) => name === preferredValidator) ?? preferredValidator;
   return { reviewer, validator };
 }
-function reviewFallbackModelStrings(agentName, registry) {
-  return registry?.[agentName]?.fallbackModels ?? [];
+function reviewFallbackModelStrings(agentName, registry2) {
+  return registry2?.[agentName]?.fallbackModels ?? [];
 }
-function resolveReviewFallbackModels(agentName, registry) {
+function resolveReviewFallbackModels(agentName, registry2) {
   const result = [];
-  for (const configured of reviewFallbackModelStrings(agentName, registry)) {
+  for (const configured of reviewFallbackModelStrings(agentName, registry2)) {
     try {
       const parsed = parseModelString2(configured);
       if (parsed)
@@ -97365,8 +97688,8 @@ import {
   existsSync as existsSync69,
   mkdirSync as mkdirSync39,
   readFileSync as readFileSync60,
-  renameSync as renameSync21,
-  unlinkSync as unlinkSync26,
+  renameSync as renameSync20,
+  unlinkSync as unlinkSync27,
   writeFileSync as writeFileSync23
 } from "fs";
 import * as path131 from "path";
@@ -97384,8 +97707,8 @@ function writeSkillFileAtomic(targetPath, content) {
 }
 var _internals115 = {
   writeFileSync: writeFileSync23,
-  renameSync: renameSync21,
-  unlinkSync: unlinkSync26
+  renameSync: renameSync20,
+  unlinkSync: unlinkSync27
 };
 async function activateCandidate(input) {
   const skillPath = path131.join(input.directory, ".opencode", "skills", "generated", input.skillSlug, "SKILL.md");
@@ -98530,7 +98853,7 @@ async function runValidationWithTransientRetry(input, candidateContent, baseline
       if (!input.dispatcher) {
         throw new Error("no evaluation dispatcher available (cannot run validation)");
       }
-      const { createModelEvaluationExecutor: createModelEvaluationExecutor2 } = await import("./runner-yhfmejzb.js");
+      const { createModelEvaluationExecutor: createModelEvaluationExecutor2 } = await import("./runner-ffy5ahhz.js");
       const executor = createModelEvaluationExecutor2(input.dispatcher, input.sessionId);
       const result = await withProtectedSetIntegrity([evalInputRoot, ...protectedRoots(input.directory)], () => _internals119.evaluateCandidateV1({
         projectRoot: input.directory,
@@ -101159,7 +101482,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-0z5s71kn.js");
+    const { buildHelpText } = await import("./index-qk29b7s4.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -101173,7 +101496,7 @@ async function handleHelpCommand(ctx) {
 > Note: \`/swarm ${resolved.key}\` is a deprecated alias for \`/swarm ${aliasTarget}\`.` : detailed;
   }
   const similar = _internals24.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-0z5s71kn.js");
+  const { buildHelpText: fullHelp } = await import("./index-qk29b7s4.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -101488,7 +101811,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-1zy8c3vn.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-kvgejh24.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -101498,7 +101821,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail reset": {
     handler: async (ctx) => {
-      const { handleGuardrailReset } = await import("./guardrail-reset-aghymhr5.js");
+      const { handleGuardrailReset } = await import("./guardrail-reset-86esv8cr.js");
       return handleGuardrailReset(ctx.args, ctx.sessionID);
     },
     description: "Reset one exact active invocation/action circuit after repair",
@@ -101519,7 +101842,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-pgggycf9.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-m6twga6x.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -101680,6 +102003,13 @@ var COMMAND_REGISTRY = {
     category: "diagnostics",
     toolPolicy: "agent"
   },
+  dashboard: {
+    handler: (ctx) => handleDashboardCommand(ctx.directory, ctx.args),
+    description: "Show the opt-in local mission-control dashboard URL and status (issue #2509)",
+    details: "Read-only status for the opt-in loopback dashboard over durable swarm state (gates & circuits, delegation age bands, lane liveness, task board, activity timeline). Disabled by default; enable with dashboard.port > 0 in opencode-swarm.json. Never starts or stops the listener \u2014 lifecycle belongs to plugin init; the dashboard itself performs no mutations.",
+    category: "diagnostics",
+    toolPolicy: "agent"
+  },
   learning: {
     handler: (ctx) => handleLearningCommand(ctx.directory, ctx.args),
     description: "Show learning metrics and violation trends",