opencode-swarm 7.177.0 → 7.178.0

package/dist/cli/{index-z8j7jqxt.js → index-j1v54ahd.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   observeStoreHealth
-} from "./index-tbswvz8s.js";
+} from "./index-yeh78c1g.js";
 import {
   telemetry
-} from "./index-2jtmevrr.js";
+} from "./index-wfbh1bx8.js";
 import {
   init_logger,
   warn
@@ -43,7 +43,8 @@ var PUBLICATION_TERMINAL_EVENT_TYPES = new Set([
 var RETRY_ACTIONS = new Set([
   "sounding_board_consultation",
   "simplification",
-  "user_escalation"
+  "user_escalation",
+  "sounding_board_manual_approval"
 ]);
 function authorityKeyFor(event) {
   switch (event.type) {

package/dist/cli/{index-tj0sdxg9.js → index-j3rkh9mp.js}

@@ -4,10 +4,10 @@ import {
 } from "./index-7g4c7s5r.js";
 import {
   emit
-} from "./index-2jtmevrr.js";
+} from "./index-wfbh1bx8.js";
 import {
   atomicWriteFileAnyRoot
-} from "./index-yhaxn5r7.js";
+} from "./index-zsp9de3k.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-zbq9091c.js → index-jzxeymr0.js}

@@ -3,13 +3,13 @@ import {
   EvaluationRunV1Schema,
   GateAuditResultV1Schema,
   getProtectedEvaluationRunIds
-} from "./index-k6bjkqw8.js";
+} from "./index-mpcp6rmj.js";
 import {
   readEffectiveSpecSync
 } from "./index-n1tcj1q7.js";
 import {
   validateWorkspaceRoot
-} from "./index-fpbcxykc.js";
+} from "./index-6b295cas.js";
 import {
   getWorktreeMergeFailure
 } from "./index-zsrtt42s.js";
@@ -23,13 +23,13 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-r18n5f17.js";
+} from "./index-kfk403mc.js";
 import {
   estimateCharsForTokens,
   estimateTokens,
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-exhm2ztr.js";
+} from "./index-zmb8fjp5.js";
 import {
   bunHash,
   bunWrite,
@@ -58,10 +58,10 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-zwam9stk.js";
+} from "./index-ke3m026z.js";
 import {
   appendCoreEventSync
-} from "./index-z8j7jqxt.js";
+} from "./index-j1v54ahd.js";
 import {
   derivePlanId,
   derivePlanIdentityHash,
@@ -69,32 +69,32 @@ import {
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState
-} from "./index-1bq6hkw5.js";
+} from "./index-w4yjy3vp.js";
 import {
   DURABILITY_CLASSES,
   getProjectDb,
   projectDbExists,
   withDurabilityClass
-} from "./index-xnednxvm.js";
+} from "./index-tnjmn0dn.js";
 import {
   assertProjectRoot,
   tryAcquireLock,
   withEvidenceLock
-} from "./index-tj0sdxg9.js";
+} from "./index-j3rkh9mp.js";
 import {
   emit
-} from "./index-2jtmevrr.js";
+} from "./index-wfbh1bx8.js";
 import {
   atomicWriteSwarmFileSync,
   invalidateCachedArtifact,
   readCachedParsedFile
-} from "./index-yhaxn5r7.js";
+} from "./index-zsp9de3k.js";
 import {
   canonicalRootKeyFresh
 } from "./index-1xnse449.js";
 import {
   PlanSchema
-} from "./index-zzr7f594.js";
+} from "./index-18hjycr1.js";
 import {
   GIT_BINARY_ENV_VAR,
   describeGitResolution,
@@ -109,7 +109,7 @@ import {
   init_executor,
   isUntrustedEnvKey,
   isValidEnvKey
-} from "./index-76qm2c2y.js";
+} from "./index-wvghb3x6.js";
 import {
   criticalWarn,
   error,

package/dist/cli/{index-zwam9stk.js → index-ke3m026z.js}

@@ -2,31 +2,31 @@
 import {
   derivePlanId,
   derivePlanIdentityHash
-} from "./index-1bq6hkw5.js";
+} from "./index-w4yjy3vp.js";
 import {
   getProjectDb,
   projectDbExists,
   withImmediateTransaction,
   withProjectDbReadOnly
-} from "./index-xnednxvm.js";
+} from "./index-tnjmn0dn.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-tj0sdxg9.js";
+} from "./index-j3rkh9mp.js";
 import {
   emit
-} from "./index-2jtmevrr.js";
+} from "./index-wfbh1bx8.js";
 import {
   ExecutionProfileSchema,
   PlanSchema,
   TaskStatusSchema,
   init_loader,
   loadPluginConfig
-} from "./index-zzr7f594.js";
+} from "./index-18hjycr1.js";
 import {
   init_package,
   package_default
-} from "./index-73arkdgf.js";
+} from "./index-wbkxbgk8.js";
 import {
   criticalWarn,
   init_logger,

package/dist/cli/{index-r18n5f17.js → index-kfk403mc.js}

@@ -2,10 +2,10 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-fnmt1ema.js";
+} from "./index-p27az2hc.js";
 import {
   validateSwarmPath
-} from "./index-exhm2ztr.js";
+} from "./index-zmb8fjp5.js";
 import {
   bunSpawn,
   classifySpawnFailure
@@ -15,10 +15,10 @@ import {
   atomicWriteFile,
   taskEvidencePath,
   withTaskEvidenceLock
-} from "./index-tj0sdxg9.js";
+} from "./index-j3rkh9mp.js";
 import {
   telemetry
-} from "./index-2jtmevrr.js";
+} from "./index-wfbh1bx8.js";
 import {
   init_git_executable,
   resolveGitExecutable
@@ -35,7 +35,7 @@ import {
   init_path_identity,
   isPathWithinDeclaredScope,
   unsafePathTextReason
-} from "./index-yzjaj53h.js";
+} from "./index-9rwhas09.js";
 import {
   log
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-5frh43fj.js → index-m2n1rhgv.js}

@@ -257,6 +257,10 @@ var init_tool_metadata = __esm(() => {
       description: "record a MANUAL plan_critic_gate approval snapshot to unblock the ratchet-tighter critic_pre_plan execution gate when the critic already returned APPROVED but the mechanical recorder failed to persist it (issue #2012), or as the sanctioned recovery for a bookkeeping-grade hashed-field repair under the critic-gate PLAN FREEZE rule (the reason must state which case applies)",
       agents: ["architect"]
     },
+    approve_retry_sounding_board: {
+      description: "record a MANUAL critic_sounding_board gate entry to unblock the coder retry circuit-breaker gate when the sounding board returned APPROVED but the mechanical recorder missed it (issue #2703)",
+      agents: ["architect"]
+    },
     prepare_pr_workflow_checkout: {
       description: "prepare an auditable PR workflow checkout or restore its exact original branch/HEAD and preserved stash after terminal cleanup",
       agents: ["architect"]
@@ -505,6 +509,10 @@ var init_tool_metadata = __esm(() => {
       description: "declare file scope for next coder delegation",
       agents: ["architect"]
     },
+    scope_validate: {
+      description: "validate shell writes against an inline file scope",
+      agents: ["architect"]
+    },
     knowledge_query: {
       description: "query swarm or hive knowledge with optional filters",
       agents: ["architect", "skill_improver", "spec_writer"]
@@ -773,6 +781,10 @@ var init_tool_metadata = __esm(() => {
         "test_engineer"
       ]
     },
+    knowledge_receipt_status: {
+      description: "receipt status",
+      agents: ["architect"]
+    },
     knowledge_archive: {
       description: "archive (default), quarantine, or purge a swarm or hive knowledge entry by ID with an immutable audit tombstone; purge requires an admin flag",
       agents: ["architect"]

package/dist/cli/{index-k6bjkqw8.js → index-mpcp6rmj.js}

@@ -11,7 +11,7 @@ import {
   assertProjectRoot,
   atomicWriteFile,
   withEvidenceLock
-} from "./index-tj0sdxg9.js";
+} from "./index-j3rkh9mp.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-fnmt1ema.js → index-p27az2hc.js}

@@ -1,13 +1,13 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-exhm2ztr.js";
+} from "./index-zmb8fjp5.js";
 import {
   bunSpawn
 } from "./index-2s7dvzff.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-yhaxn5r7.js";
+} from "./index-zsp9de3k.js";
 import {
   canonicalRootKeyFresh
 } from "./index-1xnse449.js";
@@ -22,7 +22,7 @@ import {
 import {
   SWARM_WORKTREE_DIR_NAME,
   init_constants
-} from "./index-5frh43fj.js";
+} from "./index-m2n1rhgv.js";
 import {
   init_logger,
   log
@@ -244,7 +244,7 @@ var _internals2 = {
     symlinkSync: fs2.symlinkSync
   },
   writeScopeToDisk: async (directory, taskId, files) => {
-    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-rb99xjr0.js");
+    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-qcw3rtxq.js");
     return realWrite(directory, taskId, files);
   },
   writeLaneProfileToDisk: async (_worktreePath, _laneIndex, _envOverrides) => {

package/dist/cli/{index-5d2avnj9.js → index-pm7c6f66.js}

@@ -1,13 +1,13 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-exhm2ztr.js";
+} from "./index-zmb8fjp5.js";
 import {
   bunSpawn
 } from "./index-2s7dvzff.js";
 import {
   atomicWriteSwarmFile
-} from "./index-yhaxn5r7.js";
+} from "./index-zsp9de3k.js";
 import {
   canonicalRootKey,
   sameProjectRoot

package/dist/cli/{index-vfp9hjgv.js → index-q9vb5e7n.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-k6bjkqw8.js";
+} from "./index-mpcp6rmj.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,

package/dist/cli/{index-0z5s71kn.js → index-qk29b7s4.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-q1jterxw.js";
+} from "./index-azy3tw6c.js";
 import {
   handleGuardrailLog
-} from "./index-9ftc8saz.js";
+} from "./index-sqngtwyq.js";
 import {
   COMMAND_REGISTRY,
   DEFAULT_CI_DEADLINE_MS,
@@ -97,77 +97,77 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-ebmep9me.js";
+} from "./index-heg4em8j.js";
 import"./index-hnvmj9wx.js";
-import"./index-vfp9hjgv.js";
-import"./index-by7xpk8f.js";
-import"./index-eefz8ghz.js";
-import"./index-rgapg88w.js";
-import"./index-zbq9091c.js";
-import"./index-k6bjkqw8.js";
+import"./index-q9vb5e7n.js";
+import"./index-qs8eth8h.js";
+import"./index-bfz1jvcn.js";
+import"./index-vfc7d22n.js";
+import"./index-jzxeymr0.js";
+import"./index-mpcp6rmj.js";
 import"./index-txdagbh7.js";
 import"./index-n1tcj1q7.js";
-import"./index-fpbcxykc.js";
-import"./index-mcq6xs4k.js";
-import"./index-8dy3qf4q.js";
-import"./index-nzz58tbs.js";
+import"./index-6b295cas.js";
+import"./index-zsm8h8y1.js";
+import"./index-at0ygwwp.js";
+import"./index-zex7644g.js";
 import"./index-fyfbpz4f.js";
-import"./index-eya03h5m.js";
+import"./index-y74n1sy8.js";
 import"./index-549wxbe1.js";
 import"./index-zsrtt42s.js";
-import"./index-4chr4gbq.js";
-import"./index-5d2avnj9.js";
-import"./index-7nsvszwn.js";
+import"./index-wkde35ej.js";
+import"./index-pm7c6f66.js";
+import"./index-2b1whj28.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-r18n5f17.js";
-import"./index-fnmt1ema.js";
-import"./index-ef2fa774.js";
-import"./index-w7aedfce.js";
-import"./index-exhm2ztr.js";
+import"./index-kfk403mc.js";
+import"./index-p27az2hc.js";
+import"./index-rp0jk48x.js";
+import"./index-29begjkp.js";
+import"./index-zmb8fjp5.js";
 import"./index-2s7dvzff.js";
-import"./index-gwnbprzk.js";
-import"./index-wemtrnch.js";
+import"./index-d5dexrv1.js";
+import"./index-ffqy30e5.js";
 import"./index-rtry5xyf.js";
-import"./index-rz4gpt3n.js";
+import"./index-2vhkwy6v.js";
 import"./index-frcemc0b.js";
 import"./index-wrt875kh.js";
-import"./index-5w51tawb.js";
-import"./index-zwam9stk.js";
-import"./index-z8j7jqxt.js";
-import"./index-v2he8xfj.js";
-import"./index-1bq6hkw5.js";
-import"./index-xnednxvm.js";
+import"./index-gg44hytk.js";
+import"./index-ke3m026z.js";
+import"./index-j1v54ahd.js";
+import"./index-y6a2bkp1.js";
+import"./index-w4yjy3vp.js";
+import"./index-tnjmn0dn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-tbswvz8s.js";
-import"./index-hxdswvtv.js";
+import"./index-yeh78c1g.js";
+import"./index-2mdk6nt9.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-en0p0hqp.js";
-import"./index-tj0sdxg9.js";
+import"./index-yj1kr0ft.js";
+import"./index-j3rkh9mp.js";
 import"./index-7g4c7s5r.js";
-import"./index-2jtmevrr.js";
-import"./index-yhaxn5r7.js";
+import"./index-wfbh1bx8.js";
+import"./index-zsp9de3k.js";
 import"./index-1xnse449.js";
 import"./index-c1ggtmpm.js";
-import"./index-zzr7f594.js";
+import"./index-18hjycr1.js";
 import"./index-zz7gzw57.js";
 import"./index-4ddpvd5c.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-73arkdgf.js";
+} from "./index-wbkxbgk8.js";
 import {
   AGENT_TOOL_MAP,
   ORCHESTRATOR_NAME,
   init_constants
-} from "./index-5frh43fj.js";
+} from "./index-m2n1rhgv.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";
-import"./index-76qm2c2y.js";
-import"./index-yzjaj53h.js";
+import"./index-wvghb3x6.js";
+import"./index-9rwhas09.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 

package/dist/cli/{index-by7xpk8f.js → index-qs8eth8h.js}

@@ -1,17 +1,17 @@
 // @bun
 import {
   observeStoreHealth
-} from "./index-tbswvz8s.js";
+} from "./index-yeh78c1g.js";
 import {
   telemetry
-} from "./index-2jtmevrr.js";
+} from "./index-wfbh1bx8.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-73arkdgf.js";
+} from "./index-wbkxbgk8.js";
 import {
   init_constants
-} from "./index-5frh43fj.js";
+} from "./index-m2n1rhgv.js";
 import {
   getPathFlavor,
   init_path_identity,
@@ -21,7 +21,7 @@ import {
   pathIdentitiesEqual,
   sanitizeDiagnosticText,
   unsafePathTextReason
-} from "./index-yzjaj53h.js";
+} from "./index-9rwhas09.js";
 import {
   init_logger,
   warn
@@ -2313,6 +2313,37 @@ var DEFAULT_AGENT_AUTHORITY_RULES = {
     blockedZones: ["generated"]
   }
 };
+function checkWriteTargetForSymlink(targetPath, cwd) {
+  const normalizedCwd = path2.resolve(cwd);
+  const normalizedTarget = path2.resolve(cwd, targetPath);
+  const ancestors = [];
+  let current = normalizedTarget;
+  while (true) {
+    const rel = path2.relative(normalizedCwd, current);
+    if (rel === "" || rel === ".." || rel.startsWith(`..${path2.sep}`) || path2.isAbsolute(rel))
+      break;
+    ancestors.push(current);
+    const parent = path2.dirname(current);
+    if (parent === current)
+      break;
+    current = parent;
+  }
+  for (const ancestor of ancestors) {
+    let stat = null;
+    try {
+      stat = fsSync.lstatSync(ancestor);
+    } catch (err) {
+      const code = err.code;
+      if (code === "ENOENT")
+        continue;
+      return `WRITE BLOCKED: lstat failed on "${ancestor}": ${String(err)} \u2014 refusing write on unverifiable path`;
+    }
+    if (stat.isSymbolicLink()) {
+      return `WRITE BLOCKED: "${ancestor}" is a symlink/junction \u2014 writing through a symlink or junction could redirect the write outside the working directory`;
+    }
+  }
+  return null;
+}
 function matchesAuthorityDenyPrefix(candidate, prefix, cwd, flavor = getPathFlavor()) {
   const pathImpl = flavor === "win32" ? path2.win32 : path2.posix;
   const normalizeInput = (value) => flavor === "win32" ? value.replace(/\//g, "\\") : value;
@@ -3444,4 +3475,4 @@ function redactDecisionLineForArchive(line) {
   return changed ? JSON.stringify(record) : line;
 }
 
-export { normalizeToolName, normalizeToolNameLowerCase, isTaskToolId, isPolicyProtectedPath, protectedRoots, classifyFile, stableCanonicalStringify, checkFileAuthority, isInDeclaredScope, redactShellCommand, readShellAuditTail, getShellAuditFoldedSummary, finalizeShellAuditForClose, redactPath, redactDecisionLineForArchive };
+export { normalizeToolName, normalizeToolNameLowerCase, isTaskToolId, isPolicyProtectedPath, protectedRoots, classifyFile, stableCanonicalStringify, checkWriteTargetForSymlink, checkFileAuthority, isInDeclaredScope, redactShellCommand, readShellAuditTail, getShellAuditFoldedSummary, finalizeShellAuditForClose, redactPath, redactDecisionLineForArchive };

package/dist/cli/{index-ef2fa774.js → index-rp0jk48x.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-exhm2ztr.js";
+} from "./index-zmb8fjp5.js";
 import {
   bunWrite
 } from "./index-2s7dvzff.js";
@@ -18,21 +18,21 @@ import {
   releaseCoordinationLease,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-1bq6hkw5.js";
+} from "./index-w4yjy3vp.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-xnednxvm.js";
+} from "./index-tnjmn0dn.js";
 import {
   observeDelegationLedgerPressure
-} from "./index-tbswvz8s.js";
+} from "./index-yeh78c1g.js";
 import {
   EvidenceLockTimeoutError,
   withEvidenceLock
-} from "./index-tj0sdxg9.js";
+} from "./index-j3rkh9mp.js";
 import {
   telemetry
-} from "./index-2jtmevrr.js";
+} from "./index-wfbh1bx8.js";
 import {
   canonicalRootKeyFresh,
   sameProjectRoot
@@ -4660,7 +4660,7 @@ async function reconcileLegacyCoderSettlements(directory, maxRecords, onReconcil
   const candidates = readDelegations(directory).filter((record) => record.normalizedAgent === "coder" && Boolean(record.legacyCoderSettlementTransfer) && Boolean(record.terminalResult)).slice(0, maxRecords);
   if (candidates.length === 0)
     return 0;
-  const { transferCoderSettlementToBackground } = await import("./coder-settlement-pm07553t.js");
+  const { transferCoderSettlementToBackground } = await import("./coder-settlement-d2bfb25j.js");
   let transferred = 0;
   for (const record of candidates) {
     try {

package/dist/cli/{index-9ftc8saz.js → index-sqngtwyq.js}

@@ -4,7 +4,7 @@ import {
   readShellAuditTail,
   redactPath,
   redactShellCommand
-} from "./index-by7xpk8f.js";
+} from "./index-qs8eth8h.js";
 
 // src/services/guardrail-log-service.ts
 var BLOCK_TYPES = new Set([