opencode-swarm 7.178.1 → 7.179.0

package/dist/cli/{index-wajcx84s.js → index-d66zb40k.js}

@@ -8,7 +8,7 @@ import {
   isCommandAvailable,
   resolveLocalNodeTool,
   tool
-} from "./index-hnvmj9wx.js";
+} from "./index-zgvzbz48.js";
 import {
   captureWorkingTreeFingerprint,
   createModelEvaluationExecutor,
@@ -16,7 +16,7 @@ import {
   resolveExecutableFromPath,
   runEvaluation,
   runExternalTool
-} from "./index-nrfjjqm4.js";
+} from "./index-pskba939.js";
 import {
   finalizeShellAuditForClose,
   isPolicyProtectedPath,
@@ -26,7 +26,7 @@ import {
   protectedRoots,
   redactDecisionLineForArchive,
   stableCanonicalStringify
-} from "./index-x1m1nnry.js";
+} from "./index-7zmbtxw1.js";
 import {
   canonicalProjectKey,
   closeGroupCommitWriter,
@@ -39,7 +39,7 @@ import {
   readDoctorArtifact,
   removeStraySwarmDir,
   runConfigDoctor
-} from "./index-6e8fpjdg.js";
+} from "./index-0bc8jdnv.js";
 import {
   MAX_TRANSIENT_RETRIES,
   archiveEvidence,
@@ -76,7 +76,7 @@ import {
   updateTaskStatus,
   validateProjectRoot,
   withPlanLifecycleLock
-} from "./index-h0kyy9rd.js";
+} from "./index-wvpsm8ja.js";
 import {
   EvaluationTaskV1Schema,
   GateAuditManifestV1Schema,
@@ -93,7 +93,7 @@ import {
   saveGateAuditResult,
   savePromotionDecision,
   saveTaskSetSnapshot
-} from "./index-7n4dtzk4.js";
+} from "./index-g6nyk713.js";
 import {
   canonicalHash,
   canonicalJson,
@@ -141,15 +141,15 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-r78kphsr.js";
+} from "./index-8815e95e.js";
 import {
   readRecentEscalations
-} from "./index-x54339yd.js";
+} from "./index-qxk5qkfh.js";
 import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-1zrrerev.js";
+} from "./index-1rwyfvq2.js";
 import {
   CURATOR_CONSOLIDATION_PROMPT,
   CURATOR_INIT_PROMPT,
@@ -159,7 +159,7 @@ import {
   READ_ONLY_LANE_GUIDANCE,
   createExplorerAgent,
   resolvePrompt
-} from "./index-fyfbpz4f.js";
+} from "./index-1c1dbwze.js";
 import {
   buildCorrelationId,
   getPrSubscriptionHealth,
@@ -169,7 +169,7 @@ import {
   sweepStale,
   unsubscribe,
   updateSnapshot
-} from "./index-yew23624.js";
+} from "./index-6r92fw88.js";
 import {
   clearWorktreeMergeStatus,
   getAllWorktreeMergeFailures,
@@ -181,7 +181,7 @@ import {
   listCoderSettlementWalStates,
   recoverCoderSettlement,
   recoverStaleCoderSettlements
-} from "./index-7kty6f59.js";
+} from "./index-3hne91yd.js";
 import {
   parsePorcelainV2Snapshot,
   resolveCommitCountSince,
@@ -252,7 +252,7 @@ import {
   transitionTaskWorkflowEvidence,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-1hgqs8j8.js";
+} from "./index-kmhnkn6t.js";
 import {
   isPathUnderSwarmWorktreeBase,
   listLiveLaneOwners,
@@ -261,7 +261,7 @@ import {
   recordLiveLaneOwner,
   removeWorktree,
   resolveWorktreeBaseDir
-} from "./index-j7w16s92.js";
+} from "./index-6tnkvqr9.js";
 import {
   DEFAULT_STALE_DELEGATION_TIMEOUT_MS,
   DELEGATION_COMPACTION_HIGH_WATER_BYTES,
@@ -295,7 +295,7 @@ import {
   scanBackgroundCoderReservationsForAdmission,
   scanDelegationsForRecovery,
   sweepStaleDelegations
-} from "./index-4e4zsj2g.js";
+} from "./index-sv4y1cma.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals,
@@ -311,7 +311,7 @@ import {
   recordKnowledgeEvent,
   recordPhaseCloseIntent,
   resolveKnowledgeEventsPath
-} from "./index-xr3eye3f.js";
+} from "./index-hwcra3y9.js";
 import {
   estimateTokens,
   readSwarmFileAsync,
@@ -337,18 +337,18 @@ import {
   validateActionableFields,
   validateLesson,
   validateSkillPath
-} from "./index-b50qevsm.js";
+} from "./index-yagqxt2p.js";
 import {
   MAX_CURATION_PROPOSALS,
   authorizeCuration,
   buildConfigFingerprintInput
-} from "./index-xr9n0vjv.js";
+} from "./index-0h3cr7pn.js";
 import {
   cohortConfigFingerprint
 } from "./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-2e6txjp7.js";
+} from "./index-kanxpgf8.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-frcemc0b.js";
@@ -360,7 +360,7 @@ import {
   clearScopeBindings,
   readAuthoritativeScopeBindingSet,
   readDeclaredScopeFilesFromBindings
-} from "./index-pyxs697r.js";
+} from "./index-9p1pqykb.js";
 import {
   clearPlanLedgerForReset,
   computePlanStructureHash,
@@ -376,7 +376,7 @@ import {
   replayFromLedgerWithStatus,
   resolvePlanningProfile,
   takeSnapshotEvent
-} from "./index-ksq6cqg0.js";
+} from "./index-09wm3963.js";
 import {
   CORE_EVENT_LOCKED,
   appendCoreEventSync,
@@ -386,7 +386,7 @@ import {
   hasSpecDriftAuditEvent,
   hasTaskRepairAuditEvent,
   readCoreEvents
-} from "./index-w1b5qqnp.js";
+} from "./index-h59vsbch.js";
 import {
   DEFAULT_QA_GATES,
   computeProfileHash,
@@ -394,7 +394,7 @@ import {
   getEffectiveGates,
   getProfileLookupForIdentity,
   setGatesForIdentity
-} from "./index-bb148vht.js";
+} from "./index-cvg402ha.js";
 import {
   MAX_COORDINATION_STATE_LIST_ROWS,
   deleteCoordinationImports,
@@ -402,11 +402,12 @@ import {
   derivePlanId,
   derivePlanIdentityHash,
   getCoordinationState,
+  getCoordinationStateRaw,
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-whjrhatw.js";
+} from "./index-a11ztzs5.js";
 import {
   DURABILITY_CLASSES,
   closeAllProjectDbs,
@@ -429,7 +430,7 @@ import {
   observeCuratorCompliance,
   observeStoreHealth,
   readLearningHealth
-} from "./index-0pmh1kks.js";
+} from "./index-yfpswnjt.js";
 import {
   appendKnowledge,
   appendRejectedLesson,
@@ -459,7 +460,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-2pyba37z.js";
+} from "./index-ndwbb3xm.js";
 import {
   readTailJsonl,
   readTailJsonlDetailed,
@@ -480,7 +481,7 @@ import {
   resolveLinkDir,
   sanitizeLinkId,
   writeLinkPointer
-} from "./index-t8dqe4ns.js";
+} from "./index-34bwqcea.js";
 import {
   assertProjectRoot,
   atomicWriteFile,
@@ -489,7 +490,7 @@ import {
   listActiveLocks,
   tryAcquireLock,
   withEvidenceLock
-} from "./index-kz9pcqn9.js";
+} from "./index-f2v90gfc.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -503,7 +504,7 @@ import {
   pseudonymousRef,
   resolveLineageSalt,
   telemetry
-} from "./index-pk97v7b8.js";
+} from "./index-qt0793qm.js";
 import {
   atomicWriteSwarmFile,
   atomicWriteSwarmFileSync,
@@ -530,7 +531,7 @@ import {
   loadPluginConfig,
   loadPluginConfigWithMeta,
   resolveActivePhaseId
-} from "./index-qbs49vge.js";
+} from "./index-1sz02k85.js";
 import {
   init_git_executable,
   resolveGitExecutable,
@@ -559,7 +560,7 @@ import {
   resolveAutoReviewConfig,
   resolveGeneratedAgentRole,
   stripKnownSwarmPrefix
-} from "./index-zv3j0v08.js";
+} from "./index-twtez316.js";
 import {
   AGENT_TOOL_MAP,
   ALL_AGENT_NAMES,
@@ -582,7 +583,7 @@ import {
   init_agent_names,
   init_constants,
   init_tool_metadata
-} from "./index-m2n1rhgv.js";
+} from "./index-w872yykk.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -2829,6 +2830,7 @@ var STATE_MUTATION_LOCK_MAX_ATTEMPTS = 50;
 var STATE_MUTATION_LOCK_RETRY_DELAY_MS = 10;
 var STATE_MUTATION_LOCK_UNINITIALIZED_STALE_MS = 30000;
 var CHECKOUT_MUTATION_ACTION_TIMEOUT_MS = 5 * 60000;
+var MAX_COORDINATION_PAYLOAD_CHARS = 1048576;
 var trackedStatesByProjectSession = new Map;
 var pendingStateMutationsByProjectSession = new Map;
 var pendingCheckoutMutationsByProject = new Map;
@@ -3050,6 +3052,61 @@ async function readPrWorkflowGateStateFromCoordination(directory, sessionID) {
   const decoded = readPrWorkflowGateStateCoordinationRow(directory, sessionID);
   return decoded?.state ?? null;
 }
+function readPrWorkflowGateStateCoordinationForRecovery(directory, sessionID) {
+  const normalizedSessionID = normalizeSessionID(sessionID);
+  const row = getCoordinationStateRaw(directory, workflowGateStateCoordinationNamespace(normalizedSessionID), WORKFLOW_STATE_ENTITY_KEY);
+  if (!row)
+    return { kind: "absent" };
+  if (row.payload.length > MAX_COORDINATION_PAYLOAD_CHARS) {
+    return {
+      kind: "corrupt",
+      rowRevision: row.revision,
+      generation: row.generation,
+      reason: "coordination payload exceeds the maximum size"
+    };
+  }
+  let parsedJson;
+  try {
+    parsedJson = JSON.parse(row.payload);
+  } catch {
+    return {
+      kind: "corrupt",
+      rowRevision: row.revision,
+      generation: row.generation,
+      reason: "coordination payload is not valid JSON"
+    };
+  }
+  const bound = requireCodec();
+  const parsed = bound.safeParse(parsedJson);
+  if (!parsed.success) {
+    return {
+      kind: "corrupt",
+      rowRevision: row.revision,
+      generation: row.generation,
+      reason: "coordination payload failed the workflow state schema"
+    };
+  }
+  if (parsed.data.sessionID !== normalizedSessionID) {
+    return {
+      kind: "invalid",
+      reason: "coordination payload session identity does not match the requested session"
+    };
+  }
+  if (parsed.data.revision !== row.generation) {
+    return {
+      kind: "corrupt",
+      rowRevision: row.revision,
+      generation: row.generation,
+      reason: "coordination payload revision does not match its generation"
+    };
+  }
+  return {
+    kind: "valid",
+    rowRevision: row.revision,
+    generation: row.generation,
+    state: parsed.data
+  };
+}
 function readPrWorkflowGateStateCoordinationRow(directory, sessionID) {
   const row = getCoordinationState(directory, workflowGateStateCoordinationNamespace(sessionID), WORKFLOW_STATE_ENTITY_KEY);
   if (!row)
@@ -3062,7 +3119,7 @@ function readPrWorkflowGateStateCoordinationRow(directory, sessionID) {
   }
   const bound = requireCodec();
   const parsed = bound.safeParse(parsedJson);
-  if (!parsed.success || parsed.data.revision !== row.generation) {
+  if (!parsed.success || parsed.data.sessionID !== normalizeSessionID(sessionID) || parsed.data.revision !== row.generation) {
     throw new Error(`BLOCKED: PR workflow gate state for session "${sessionID}" is invalid`);
   }
   return { rowRevision: row.revision, state: parsed.data };
@@ -3164,6 +3221,29 @@ async function repairImportedWorkflowGateShadow(directory, sessionID, state) {
     archiveLegacy: true
   });
 }
+async function removeWorkflowGateShadowProjection(directory, sessionID) {
+  for (const filePath of [
+    workflowGateStatePath(directory, sessionID),
+    workflowGateStateProjectionMarkerPath(directory, sessionID)
+  ]) {
+    try {
+      await (hooks.removeShadowProjection ?? ((target) => fsp2.rm(target, { force: true })))(filePath);
+    } catch (error2) {
+      if (error2.code !== "ENOENT")
+        throw error2;
+    }
+  }
+}
+function appendSessionTerminalizationEvent(directory, sessionID, rowRevision) {
+  try {
+    appendCoreEventSync(directory, {
+      type: "pr_workflow_session_terminalized",
+      timestamp: isoNow(),
+      sessionID,
+      rowRevision
+    });
+  } catch {}
+}
 async function importLegacyPrWorkflowGateStateIfNeeded(directory, sessionID, allowSalvagedImport = false) {
   const filePath = workflowGateStatePath(directory, sessionID);
   let raw;
@@ -3174,7 +3254,7 @@ async function importLegacyPrWorkflowGateStateIfNeeded(directory, sessionID, all
       return null;
     throw error2;
   }
-  const legacy = allowSalvagedImport ? (await (await import("./pr-workflow-gate-ke79bb9c.js")).readPrWorkflowGateStateForRecovery(directory, sessionID))?.state ?? null : await readPrWorkflowGateStateFileFromDisk(filePath, sessionID);
+  const legacy = allowSalvagedImport ? (await (await import("./pr-workflow-gate-8dgz5z1h.js")).readPrWorkflowGateStateForRecovery(directory, sessionID))?.state ?? null : await readPrWorkflowGateStateFileFromDisk(filePath, sessionID);
   if (!legacy)
     return null;
   const namespace = workflowGateStateCoordinationNamespace(sessionID);
@@ -3240,11 +3320,28 @@ async function writeStateWhileLocked(directory, state, options = {}) {
 }
 async function deleteStateWhileLocked(directory, sessionID, options = {}) {
   const normalizedSessionID = normalizeSessionID(sessionID);
-  let currentAuthoritative = readPrWorkflowGateStateCoordinationRow(directory, normalizedSessionID);
+  let currentAuthoritative = null;
+  let corruptCoordinationRowRevision;
+  if (options.allowSalvagedRead) {
+    const coordination = readPrWorkflowGateStateCoordinationForRecovery(directory, normalizedSessionID);
+    if (coordination.kind === "invalid") {
+      throw new Error(`BLOCKED: PR workflow gate state for session "${normalizedSessionID}" is invalid (${coordination.reason})`);
+    }
+    if (coordination.kind === "valid") {
+      currentAuthoritative = {
+        rowRevision: coordination.rowRevision,
+        state: coordination.state
+      };
+    } else if (coordination.kind === "corrupt") {
+      corruptCoordinationRowRevision = coordination.rowRevision;
+    }
+  } else {
+    currentAuthoritative = readPrWorkflowGateStateCoordinationRow(directory, normalizedSessionID);
+  }
   let recoveryState = null;
   if (!currentAuthoritative) {
     if (options.allowSalvagedRead) {
-      const { readPrWorkflowGateStateForRecovery } = await import("./pr-workflow-gate-ke79bb9c.js");
+      const { readPrWorkflowGateStateForRecovery } = await import("./pr-workflow-gate-8dgz5z1h.js");
       recoveryState = (await readPrWorkflowGateStateForRecovery(directory, normalizedSessionID))?.state ?? null;
     }
     if (!recoveryState) {
@@ -3258,23 +3355,32 @@ async function deleteStateWhileLocked(directory, sessionID, options = {}) {
   if (options.expectedStateRevision !== undefined && currentRevision !== options.expectedStateRevision) {
     throw new Error("BLOCKED: PR workflow gate state changed concurrently; reload the active session state before retrying");
   }
-  if (currentAuthoritative) {
-    const deleted = deleteCoordinationState(directory, workflowGateStateCoordinationNamespace(normalizedSessionID), WORKFLOW_STATE_ENTITY_KEY, currentAuthoritative.rowRevision);
+  const authoritativeRowRevision = currentAuthoritative?.rowRevision ?? (recoveryState ? corruptCoordinationRowRevision : undefined);
+  if (authoritativeRowRevision !== undefined) {
+    const deleted = deleteCoordinationState(directory, workflowGateStateCoordinationNamespace(normalizedSessionID), WORKFLOW_STATE_ENTITY_KEY, authoritativeRowRevision);
     if (!deleted) {
       throw new Error("BLOCKED: PR workflow gate state changed concurrently; reload the active session state before retrying");
     }
   }
-  try {
-    await fsp2.rm(workflowGateStatePath(directory, normalizedSessionID), {
-      force: true
-    });
-  } catch (error2) {
-    if (error2.code !== "ENOENT") {
-      throw error2;
-    }
-  }
+  await removeWorkflowGateShadowProjection(directory, normalizedSessionID);
   forgetTrackedPrWorkflowState(directory, normalizedSessionID);
 }
+async function terminalizePrWorkflowGateForSession(directory, sessionID) {
+  const normalizedSessionID = normalizeSessionID(sessionID);
+  await withSessionStateMutation(directory, normalizedSessionID, async () => {
+    const row = getCoordinationStateRaw(directory, workflowGateStateCoordinationNamespace(normalizedSessionID), WORKFLOW_STATE_ENTITY_KEY);
+    await removeWorkflowGateShadowProjection(directory, normalizedSessionID);
+    await hooks.beforeTerminalizationDelete?.();
+    if (row) {
+      const deleted = deleteCoordinationState(directory, workflowGateStateCoordinationNamespace(normalizedSessionID), WORKFLOW_STATE_ENTITY_KEY, row.revision);
+      if (!deleted) {
+        throw new Error("BLOCKED: PR workflow gate state changed concurrently; retry session terminalization");
+      }
+      appendSessionTerminalizationEvent(directory, normalizedSessionID, row.revision);
+    }
+    forgetTrackedPrWorkflowState(directory, normalizedSessionID);
+  });
+}
 function checkoutMutationProjectKey(directory) {
   return canonicalRootKeyFresh(directory);
 }
@@ -14382,7 +14488,7 @@ function isLaneOwnedByCurrentSession(branchName, expectedSessionId) {
   return extracted === expectedSessionId;
 }
 async function inspectStandardWorktreeCollisionOwnership(identity) {
-  const collisionOwnership = await import("./worktree-collision-ownership-drqhmmtd.js");
+  const collisionOwnership = await import("./worktree-collision-ownership-97jzh4ra.js");
   return collisionOwnership.inspectStandardWorktreeCollisionOwnership(identity);
 }
 async function runRecoveryGit(directory, args, timeoutMs = 15000) {
@@ -14808,7 +14914,7 @@ async function precreateStandardWorktreeSession(args) {
   const laneProfile = computeLaneRuntimeProfile(worktreeConfig.runtime_isolation, laneIndex, handle.worktreePath);
   if (laneProfile) {
     try {
-      const { writeLaneProfileToDiskReal } = await import("./core-2d0xcyby.js");
+      const { writeLaneProfileToDiskReal } = await import("./core-9rqzs794.js");
       await writeLaneProfileToDiskReal(handle.worktreePath, laneProfile.laneIndex, laneProfile.envOverrides);
     } catch {}
   }
@@ -15787,7 +15893,7 @@ async function finishStandardWorktreeDispatch(directory, dispatch, config, callI
       }
       clearWorktreeMergeStatus(statusKey);
       try {
-        const { removeLaneProfileFromDiskReal } = await import("./core-2d0xcyby.js");
+        const { removeLaneProfileFromDiskReal } = await import("./core-9rqzs794.js");
         await removeLaneProfileFromDiskReal(dispatch.handle.worktreePath, dispatch.laneIndex);
       } catch {}
       const state = serializationStateBySessionID.get(dispatch.parentSessionID);
@@ -22642,7 +22748,7 @@ function getDisplayFinalPromptPressure() {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-awwhg139.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-4dj9r71h.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)
@@ -22778,6 +22884,7 @@ var MAX_RETIRED_CONSOLIDATED_LANES = 64;
 var MAX_RETIRED_FEEDBACK_ITEM_OWNERS = 4096;
 var MAX_PR_FEEDBACK_INVENTORY_AMENDMENTS = 128;
 var MAX_PR_WORKFLOW_GATE_DIRECTORY_ENTRIES = MAX_TRACKED_SESSIONS * 2 + 1;
+var MAX_PR_WORKFLOW_GATE_ENTRY_NAME_CHARS = 240;
 var MAX_CANDIDATE_ISSUES_PER_ARTIFACT = 8;
 var MAX_BASE_COVERAGE_DIAGNOSTICS = 8;
 var MAX_BASE_COVERAGE_DIAGNOSTIC_CHARS2 = 1000;
@@ -23407,7 +23514,8 @@ async function assertNoActivePrWorkflowGateForCheckoutRestore(directory) {
       if (entry.name !== expectedName) {
         throw new Error("BLOCKED: PR workflow gate inventory contains an ambiguous state filename; checkout restoration cannot prove project inactivity");
       }
-      throw new Error(`BLOCKED: checkout restoration cannot mutate this project while session "${state.sessionID}" has an active ${state.mode} workflow`);
+      const boundedEntryName = entry.name.length <= MAX_PR_WORKFLOW_GATE_ENTRY_NAME_CHARS ? entry.name : `${entry.name.slice(0, MAX_PR_WORKFLOW_GATE_ENTRY_NAME_CHARS - 1)}\u2026`;
+      throw new Error(`BLOCKED: checkout restoration cannot mutate this project while session "${state.sessionID}" has an active ${state.mode} workflow (state entry "${boundedEntryName}"). For the owning session, run \`/swarm abort-pr-workflow ${state.mode} <reason...>\` to recover the stuck gate.`);
     }
   } catch (error2) {
     scanError = error2;
@@ -23440,6 +23548,9 @@ async function clearPrWorkflowGateState(directory, sessionID, expectedRevision,
     });
   });
 }
+async function terminalizePrWorkflowGateForSession2(directory, sessionID) {
+  return terminalizePrWorkflowGateForSession(directory, sessionID);
+}
 var PR_WORKFLOW_STALE_LANE_TIMEOUT_MS = DEFAULT_STALE_DELEGATION_TIMEOUT_MS;
 var MAX_DISCLOSED_LANE_IDS = 10;
 var PR_WORKFLOW_SWEEPABLE_LANE_STATUSES = new Set(["pending", "running"]);
@@ -30567,8 +30678,29 @@ var MAX_SALVAGED_SCHEMA_ERROR_CHARS = 240;
 function boundSalvagedSchemaError(message) {
   return message.length <= MAX_SALVAGED_SCHEMA_ERROR_CHARS ? message : `${message.slice(0, MAX_SALVAGED_SCHEMA_ERROR_CHARS - 1)}\u2026`;
 }
+function boundSalvageDisclosure(sessionID, schemaErrors, coordinationNotice, revisionSalvageable = true, armedShapeUnreadable = false, publicationShapeUnreadable = false) {
+  const disclosure = `DEGRADED: PR workflow gate state for session "${sessionID}" ` + (coordinationNotice ? `${coordinationNotice} and was SALVAGED for recovery only (abort/status; write and completion paths still refuse it). ` : "failed schema validation and was SALVAGED for recovery only (abort/status; write and completion paths still refuse it). ") + `Schema errors: ${schemaErrors.join("; ")}.` + (revisionSalvageable ? "" : " state revision unsalvageable.") + (armedShapeUnreadable ? " prFeedbackReadyToPublish is present but unreadable; treated as ARMED (fail-closed)." : "") + (publicationShapeUnreadable ? " prFeedbackPublication is present but unreadable; treated as ARMED (fail-closed)." : "");
+  const maxDisclosureChars = MAX_SALVAGED_SCHEMA_ERROR_CHARS * 12;
+  return disclosure.length <= maxDisclosureChars ? disclosure : `${disclosure.slice(0, maxDisclosureChars - 1)}\u2026`;
+}
 async function readPrWorkflowGateStateForRecovery(directory, sessionID) {
   const normalizedSessionID = normalizeSessionID(sessionID);
+  const coordination = readPrWorkflowGateStateCoordinationForRecovery(directory, normalizedSessionID);
+  if (coordination.kind === "invalid") {
+    throw new Error(`BLOCKED: PR workflow gate state for session "${normalizedSessionID}" is invalid (${coordination.reason})`);
+  }
+  if (coordination.kind === "valid") {
+    return {
+      state: coordination.state,
+      salvaged: false,
+      schemaErrors: [],
+      revisionSalvageable: true,
+      armedShapeUnreadable: false
+    };
+  }
+  const coordinationCorrupt = coordination.kind === "corrupt";
+  const coordinationGeneration = coordinationCorrupt ? coordination.generation : undefined;
+  const coordinationReason = coordinationCorrupt ? coordination.reason : undefined;
   const filePath = workflowGateStatePath(directory, normalizedSessionID);
   let raw;
   try {
@@ -30586,10 +30718,24 @@ async function readPrWorkflowGateStateForRecovery(directory, sessionID) {
   }
   const parsed = PrWorkflowGateStateSchema.safeParse(parsedJson);
   if (parsed.success) {
+    if (parsed.data.sessionID !== normalizedSessionID || coordinationGeneration !== undefined && parsed.data.revision !== coordinationGeneration) {
+      throw new Error(`BLOCKED: PR workflow gate state for session "${normalizedSessionID}" is invalid`);
+    }
+    if (!coordinationCorrupt) {
+      return {
+        state: parsed.data,
+        salvaged: false,
+        schemaErrors: [],
+        revisionSalvageable: true,
+        armedShapeUnreadable: false
+      };
+    }
+    const coordinationSchemaError = boundSalvagedSchemaError(`coordination_state.payload: ${coordinationReason}`);
     return {
       state: parsed.data,
-      salvaged: false,
-      schemaErrors: [],
+      salvaged: true,
+      schemaErrors: [coordinationSchemaError],
+      disclosure: boundSalvageDisclosure(normalizedSessionID, [coordinationSchemaError], "coordination authority was corrupt and the valid shadow projection was used"),
       revisionSalvageable: true,
       armedShapeUnreadable: false
     };
@@ -30601,12 +30747,16 @@ async function readPrWorkflowGateStateForRecovery(directory, sessionID) {
   const rawRecord = parsedJson;
   const salvagedSessionID = exports_external.string().min(1).safeParse(rawRecord.sessionID);
   const salvagedMode = exports_external.enum(["PR_REVIEW", "PR_FEEDBACK"]).safeParse(rawRecord.mode);
-  if (!salvagedSessionID.success || !salvagedMode.success)
+  if (!salvagedSessionID.success || !salvagedMode.success || salvagedSessionID.data !== normalizedSessionID) {
     throw invalidError;
+  }
   const salvagedRevision = exports_external.number().int().nonnegative().safeParse(rawRecord.revision);
   const salvagedHead = exports_external.string().min(1).safeParse(rawRecord.prHeadSha);
   const salvagedActivatedAt = exports_external.string().min(1).safeParse(rawRecord.activatedAt);
   const salvagedUpdatedAt = exports_external.string().min(1).safeParse(rawRecord.updatedAt);
+  if (coordinationGeneration !== undefined && (!salvagedRevision.success || salvagedRevision.data !== coordinationGeneration)) {
+    throw invalidError;
+  }
   const armedKeyPresent = rawRecord.prFeedbackReadyToPublish !== undefined;
   const salvagedArmed = PrFeedbackReadyToPublishRecordSchema.safeParse(rawRecord.prFeedbackReadyToPublish);
   const publicationKeyPresent = rawRecord.prFeedbackPublication !== undefined;
@@ -30614,8 +30764,14 @@ async function readPrWorkflowGateStateForRecovery(directory, sessionID) {
   const publicationShapeUnreadable = publicationKeyPresent && !salvagedPublication.success;
   const salvagedCheckoutRecovery = PrWorkflowCheckoutRecoveryRecordSchema.safeParse(rawRecord.checkoutRecovery);
   const armedShapeUnreadable = armedKeyPresent && !salvagedArmed.success || publicationShapeUnreadable;
-  const schemaErrors = parsed.error.issues.slice(0, MAX_SALVAGED_SCHEMA_ERRORS).map((issue) => boundSalvagedSchemaError(`${issue.path.join(".") || "(root)"}: ${issue.message}`));
-  const disclosure = `DEGRADED: PR workflow gate state for session "${normalizedSessionID}" failed schema validation ` + `and was SALVAGED for recovery only (abort/status; write and completion paths still refuse it). ` + `Schema errors: ${schemaErrors.join("; ")}.` + (salvagedRevision.success ? "" : " state revision unsalvageable.") + (armedShapeUnreadable ? " prFeedbackReadyToPublish is present but unreadable; treated as ARMED (fail-closed)." : "") + (publicationShapeUnreadable ? " prFeedbackPublication is present but unreadable; treated as ARMED (fail-closed)." : "");
+  const shadowSchemaErrors = parsed.error.issues.slice(0, MAX_SALVAGED_SCHEMA_ERRORS).map((issue) => boundSalvagedSchemaError(`${issue.path.join(".") || "(root)"}: ${issue.message}`));
+  const schemaErrors = [
+    ...coordinationCorrupt ? [
+      boundSalvagedSchemaError(`coordination_state.payload: ${coordinationReason}`)
+    ] : [],
+    ...shadowSchemaErrors
+  ].slice(0, MAX_SALVAGED_SCHEMA_ERRORS);
+  const disclosure = boundSalvageDisclosure(normalizedSessionID, schemaErrors, coordinationCorrupt ? `coordination authority was corrupt (${coordinationReason}) and the shadow projection was used` : undefined, salvagedRevision.success, armedShapeUnreadable, publicationShapeUnreadable);
   return {
     state: {
       schemaVersion: GATE_SCHEMA_VERSION,
@@ -30642,10 +30798,11 @@ init_logger();
 
 // src/commands/abort-pr-workflow.ts
 var USAGE2 = [
-  "Usage: /swarm abort-pr-workflow [PR_REVIEW|PR_FEEDBACK] <reason...>",
+  "Usage: /swarm abort-pr-workflow [PR_REVIEW|PR_FEEDBACK] [reason...]",
+  "       /swarm abort-pr-workflow PR_FEEDBACK --cancel-publication <reason...>",
   "",
   "Clear an active PR_REVIEW or PR_FEEDBACK mechanical gate for the current session",
-  "and stop the auto-resume loop. This is the human-only FORCE escape hatch, usable",
+  "and stop the auto-resume loop. The first form is the human-only FORCE escape hatch, usable",
   "even when the architect cannot call its audited recovery abort. Both paths may clear",
   "a BOUND gate after lanes settle; the force path does not require agent cooperation. Use when",
   "a PR review or feedback workflow is unrecoverably stuck (e.g. the working tree",
@@ -30657,6 +30814,8 @@ var USAGE2 = [
   "  reason  Optional free-text reason recorded to the audit trail (.swarm/events.jsonl).",
   '          If omitted, a default ("user-initiated force abort ...") is recorded so the',
   "          gate always has a non-empty reason. The agent tool call must supply its own.",
+  "  --cancel-publication  Explicitly cancel an armed PR_FEEDBACK publication without",
+  "          publishing. It is valid only after PR_FEEDBACK and requires a non-empty reason.",
   "",
   "Refuses while the workflow is armed for publication (call complete_pr_workflow",
   "instead) or while PR workflow lanes are still in flight (collect their results first).",
@@ -30664,10 +30823,10 @@ var USAGE2 = [
   "Armed publication (issue #2108): to CHANGE approved content after arming, the agent",
   "should use the invalidate_pr_feedback_publication tool (audited invalidation; the",
   "full Stage A + independent-gate ladder re-runs). To CANCEL an armed PR_FEEDBACK",
-  'workflow without publication, the agent tool supports kind "cancel-publication" with',
-  "cancel_publication: true and a reason \u2014 the publication generation is recorded as",
-  "cancelled_without_publication (terminal; never grants push authority) before the gate",
-  "clears. A plain (recovery or force) abort never clears an armed window.",
+  "workflow without publication, use the exact human form shown above. It records",
+  "cancelled_without_publication (terminal; never grants push authority), reports the",
+  "observed remote head, and then clears the gate. A plain (recovery or force) abort",
+  "never clears an armed window.",
   "",
   "Lane liveness (issue #2251): a lane past the 30-minute staleness horizon whose",
   "session the host still reports as busy or retrying is RETAINED rather than settled,",
@@ -30686,15 +30845,27 @@ var USAGE2 = [
 ].join(`
 `);
 var KNOWN_MODES = new Set(["PR_REVIEW", "PR_FEEDBACK"]);
+var CANCEL_PUBLICATION_FLAG = "--cancel-publication";
 async function handleAbortPrWorkflowCommand(directory, args, sessionID) {
   const tokens = (args ?? []).filter((token) => token.trim().length > 0);
   const modeToken = tokens[0]?.toUpperCase();
   const knownMode = modeToken && KNOWN_MODES.has(modeToken) ? modeToken : undefined;
+  const cancellationRequested = tokens.includes(CANCEL_PUBLICATION_FLAG);
   const reasonStartIndex = knownMode ? 1 : 0;
-  const explicitReason = tokens.slice(reasonStartIndex).join(" ").trim().slice(0, 500);
   if (modeToken && !knownMode) {
     return `Error: Unknown mode "${modeToken}". Expected PR_REVIEW or PR_FEEDBACK.
 
+${USAGE2}`;
+  }
+  if (cancellationRequested && (knownMode !== "PR_FEEDBACK" || tokens[1] !== CANCEL_PUBLICATION_FLAG)) {
+    return `Error: ${CANCEL_PUBLICATION_FLAG} requires the exact form PR_FEEDBACK ${CANCEL_PUBLICATION_FLAG} <reason...>. It is not valid for PR_REVIEW or an unqualified force abort.
+
+${USAGE2}`;
+  }
+  const explicitReason = tokens.slice(cancellationRequested ? 2 : reasonStartIndex).join(" ").trim().slice(0, 500);
+  if (cancellationRequested && !explicitReason) {
+    return `Error: cancel_publication requires a non-empty reason; use PR_FEEDBACK ${CANCEL_PUBLICATION_FLAG} <reason...>.
+
 ${USAGE2}`;
   }
   if (!sessionID?.trim()) {
@@ -30702,13 +30873,17 @@ ${USAGE2}`;
 
 ${USAGE2}`;
   }
-  const reason = explicitReason || "user-initiated force abort via /swarm abort-pr-workflow (no explicit reason provided)";
+  const reason = cancellationRequested ? explicitReason : explicitReason || "user-initiated force abort via /swarm abort-pr-workflow (no explicit reason provided)";
   try {
     const summary = await abortPrWorkflow(directory, sessionID, {
-      kind: "force",
+      kind: cancellationRequested ? "cancel-publication" : "force",
       reason,
-      ...knownMode ? { expectedMode: knownMode } : {}
+      ...cancellationRequested ? { cancelPublication: true, expectedMode: "PR_FEEDBACK" } : knownMode ? { expectedMode: knownMode } : {}
     });
+    if (cancellationRequested) {
+      const observedRemoteHead = summary.observedRemoteHead ?? "(unavailable)";
+      return `Cancelled active ${summary.mode} publication without publication (cancelled_without_publication) for session ${sessionID}. Observed remote head: ${observedRemoteHead}. The durable gate state has been cleared and the auto-resume loop will stop. An audit event was appended to .swarm/events.jsonl.`;
+    }
     const headLine = summary.prHeadSha ? ` (was bound to PR head ${summary.prHeadSha})` : " (was not bound to a PR head)";
     const overrideLine = summary.probeRetentionOverrideDisclosure ? ` WARNING: ${summary.probeRetentionOverrideDisclosure}` : "";
     return `Aborted active ${summary.mode} mechanical gate for session ${sessionID}${headLine} (force). The durable gate state has been cleared and the auto-resume loop will stop. An audit event was appended to .swarm/events.jsonl. If checkout preparation preserved changes, continue with prepare_pr_workflow_checkout operation=restore (or follow the preserved receipt manually).${overrideLine}`;
@@ -39517,9 +39692,9 @@ function hashContent(content) {
   return createHash24("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-nqjp43vq.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-q6gsrxwz.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-byfrearz.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-tmy46dtd.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -42577,7 +42752,7 @@ async function resolveCuratorLLMDelegate(directory, mode, sessionId) {
   const seam = _internals36.createCuratorLLMDelegate;
   if (seam)
     return seam(directory, mode, sessionId);
-  const { createCuratorLLMDelegate } = await import("./curator-llm-factory-rgdb2ee5.js");
+  const { createCuratorLLMDelegate } = await import("./curator-llm-factory-cbm1ny30.js");
   return createCuratorLLMDelegate(directory, mode, sessionId);
 }
 async function reconcileCloseTerminalStateForPlan(directory, targetPlan, options) {
@@ -42972,7 +43147,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-nqjp43vq.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-q6gsrxwz.js");
     const { config: pmLoadedConfig } = _internals36.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -44444,6 +44619,12 @@ var LEGACY_LEDGER_ARCHIVES_KEEP_NEWEST = 16;
 var PR_WORKFLOW_GATE_STATE_STEM = "[A-Za-z0-9_.-]+-[0-9a-f]{12}";
 var PR_WORKFLOW_GATE_STATE_NAME = new RegExp(`^${PR_WORKFLOW_GATE_STATE_STEM}\\.json$`);
 var PR_WORKFLOW_GATE_SIDECAR_NAME = new RegExp(`^${PR_WORKFLOW_GATE_STATE_STEM}\\.json(?:\\.imported(?:\\.[0-9]+)?|\\.sqlite-projection)$`);
+var PR_WORKFLOW_CHECKOUT_SESSION_NAME = /^[A-Za-z0-9_.-]+-[0-9a-f]{12}$/;
+var PR_WORKFLOW_CHECKOUT_TEMP_NAME = /^[0-9a-f]{40,64}\.json\.tmp\.[0-9]+\.[0-9a-f-]{36}$/i;
+var PR_WORKFLOW_CHECKOUT_RECEIPT_NAME = /^[0-9a-f]{40,64}\.json$/i;
+var PR_WORKFLOW_CHECKOUT_SESSION_SCAN_CAP = 256;
+var PR_WORKFLOW_CHECKOUT_ENTRY_SCAN_CAP = 64;
+var PR_WORKFLOW_CHECKOUT_RECEIPT_BYTES = 64 * 1024;
 var isPrWorkflowGateStateProjection = (name, stat6) => stat6.isFile() && PR_WORKFLOW_GATE_STATE_NAME.test(name);
 var isPrWorkflowGateSidecar = (name, stat6) => stat6.isFile() && PR_WORKFLOW_GATE_SIDECAR_NAME.test(name);
 var isPrReviewRunArtifact = (_name, stat6) => stat6.isDirectory();
@@ -44543,6 +44724,17 @@ async function runRetentionSweep(projectRoot, options = {}) {
       result.errors[family.label] = error2 instanceof Error ? error2.message : String(error2);
     }
   }
+  if (cancelled("pr-workflow-checkout-temps"))
+    return result;
+  try {
+    const pruned = await prunePrWorkflowCheckoutArtifacts(path56.join(swarmRoot, "pr-workflow-checkouts"), now2, dryRun);
+    if (pruned.temps > 0)
+      result.pruned["pr-workflow-checkout-temps"] = pruned.temps;
+    if (pruned.receipts > 0)
+      result.pruned["pr-workflow-checkout-receipts"] = pruned.receipts;
+  } catch (error2) {
+    result.errors["pr-workflow-checkout-temps"] = error2 instanceof Error ? error2.message : String(error2);
+  }
   if (cancelled("review-receipts-index"))
     return result;
   try {
@@ -44739,6 +44931,156 @@ async function walkEvolution(root, visit) {
     await visit(entryPath, stat6);
   }
 }
+async function readDirectoryNamesBounded(directory, cap) {
+  let handle;
+  try {
+    handle = await fs34.promises.opendir(directory);
+  } catch {
+    return null;
+  }
+  const names = [];
+  try {
+    for (;; ) {
+      const entry = await handle.read();
+      if (!entry)
+        return names;
+      if (names.length >= cap)
+        return null;
+      names.push(entry.name);
+    }
+  } catch {
+    return null;
+  } finally {
+    try {
+      await handle.close();
+    } catch {}
+  }
+}
+async function prunePrWorkflowCheckoutTemps(root, now2, dryRun) {
+  const sessionNames = await readDirectoryNamesBounded(root, PR_WORKFLOW_CHECKOUT_SESSION_SCAN_CAP);
+  if (!sessionNames)
+    return 0;
+  const cutoff = now2 - DEFAULT_FAMILY_AGE_DAYS * DAY_MS;
+  let pruned = 0;
+  for (const sessionName of sessionNames) {
+    if (!PR_WORKFLOW_CHECKOUT_SESSION_NAME.test(sessionName))
+      continue;
+    const sessionPath = path56.join(root, sessionName);
+    const sessionStat = await fs34.promises.lstat(sessionPath).catch(() => null);
+    if (!sessionStat || sessionStat.isSymbolicLink() || !sessionStat.isDirectory()) {
+      continue;
+    }
+    const entryNames = await readDirectoryNamesBounded(sessionPath, PR_WORKFLOW_CHECKOUT_ENTRY_SCAN_CAP);
+    if (!entryNames)
+      continue;
+    for (const entryName of entryNames) {
+      if (!PR_WORKFLOW_CHECKOUT_TEMP_NAME.test(entryName))
+        continue;
+      const entryPath = path56.join(sessionPath, entryName);
+      const stat6 = await fs34.promises.lstat(entryPath).catch(() => null);
+      if (!stat6 || stat6.isSymbolicLink() || !stat6.isFile())
+        continue;
+      if (stat6.mtimeMs > now2 || stat6.mtimeMs >= cutoff)
+        continue;
+      if (dryRun) {
+        pruned += 1;
+        continue;
+      }
+      try {
+        await fs34.promises.unlink(entryPath);
+        pruned += 1;
+      } catch {}
+    }
+  }
+  return pruned;
+}
+async function readBoundedCheckoutReceipt(receiptPath) {
+  const stat6 = await fs34.promises.lstat(receiptPath).catch(() => null);
+  if (!stat6 || stat6.isSymbolicLink() || !stat6.isFile())
+    return null;
+  let handle;
+  try {
+    handle = await fs34.promises.open(receiptPath, "r");
+  } catch {
+    return null;
+  }
+  try {
+    const buffer = new Uint8Array(PR_WORKFLOW_CHECKOUT_RECEIPT_BYTES + 1);
+    const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+    if (bytesRead > PR_WORKFLOW_CHECKOUT_RECEIPT_BYTES)
+      return null;
+    let value;
+    try {
+      value = JSON.parse(new TextDecoder().decode(buffer.subarray(0, bytesRead)));
+    } catch {
+      return null;
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value))
+      return null;
+    return { value, mtimeMs: stat6.mtimeMs };
+  } finally {
+    try {
+      await handle.close();
+    } catch {}
+  }
+}
+function isStrictlyValidatedAppliedCheckoutReceipt(value, stashOid, sessionStem) {
+  if (value.schemaVersion !== 1 || typeof value.sessionID !== "string" || value.sessionID.length === 0 || prWorkflowSessionFileStem(value.sessionID) !== sessionStem || typeof value.stashOid !== "string" || value.stashOid.toLowerCase() !== stashOid.toLowerCase() || !Array.isArray(value.paths) || value.paths.length > 64 || value.paths.some((entry) => typeof entry !== "string" || entry.length === 0 || entry.length > 4096) || typeof value.preparedAt !== "string" || value.preparedAt.length === 0 || value.preparedAt.length > 64 || value.mode !== "PR_REVIEW" && value.mode !== "PR_FEEDBACK" || !Number.isInteger(value.gateRevision) || value.gateRevision < 0 || typeof value.gateActivatedAt !== "string" || value.gateActivatedAt.length === 0 || value.gateActivatedAt.length > 64 || typeof value.originalHead !== "string" || !/^[0-9a-f]{40,64}$/i.test(value.originalHead) || value.originalBranch !== null && (typeof value.originalBranch !== "string" || value.originalBranch.length === 0 || value.originalBranch.length > 240 || value.originalBranch.startsWith("-") || value.originalBranch.startsWith("/") || value.originalBranch.endsWith("/") || value.originalBranch.endsWith(".") || value.originalBranch.endsWith(".lock") || value.originalBranch.includes("..") || value.originalBranch.includes("@{") || value.originalBranch.includes("//") || /[\s~^:?*[\]\\]/.test(value.originalBranch) || containsControlChars(value.originalBranch)) || value.restoreState !== "applied" || typeof value.restoreAppliedAt !== "string" || value.restoreAppliedAt.length === 0 || value.restoreAppliedAt.length > 64 || typeof value.restoreVerifiedAt !== "string" || value.restoreVerifiedAt.length === 0 || value.restoreVerifiedAt.length > 64 || typeof value.restoredHead !== "string" || !/^[0-9a-f]{40,64}$/i.test(value.restoredHead) || value.restoredBranch !== null && (typeof value.restoredBranch !== "string" || value.restoredBranch.length === 0 || value.restoredBranch.length > 240 || value.restoredBranch.startsWith("-") || value.restoredBranch.startsWith("/") || value.restoredBranch.endsWith("/") || value.restoredBranch.endsWith(".") || value.restoredBranch.endsWith(".lock") || value.restoredBranch.includes("..") || value.restoredBranch.includes("@{") || value.restoredBranch.includes("//") || /[\s~^:?*[\]\\]/.test(value.restoredBranch) || containsControlChars(value.restoredBranch))) {
+    return false;
+  }
+  return true;
+}
+async function prunePrWorkflowCheckoutReceipts(root, now2, dryRun) {
+  const sessionNames = await readDirectoryNamesBounded(root, PR_WORKFLOW_CHECKOUT_SESSION_SCAN_CAP);
+  if (!sessionNames)
+    return 0;
+  const cutoff = now2 - DEFAULT_FAMILY_AGE_DAYS * DAY_MS;
+  let pruned = 0;
+  for (const sessionName of sessionNames) {
+    if (!PR_WORKFLOW_CHECKOUT_SESSION_NAME.test(sessionName))
+      continue;
+    const sessionPath = path56.join(root, sessionName);
+    const sessionStat = await fs34.promises.lstat(sessionPath).catch(() => null);
+    if (!sessionStat || sessionStat.isSymbolicLink() || !sessionStat.isDirectory()) {
+      continue;
+    }
+    const entryNames = await readDirectoryNamesBounded(sessionPath, PR_WORKFLOW_CHECKOUT_ENTRY_SCAN_CAP);
+    if (!entryNames)
+      continue;
+    for (const entryName of entryNames) {
+      if (!PR_WORKFLOW_CHECKOUT_RECEIPT_NAME.test(entryName))
+        continue;
+      const receiptPath = path56.join(sessionPath, entryName);
+      const receipt = await readBoundedCheckoutReceipt(receiptPath);
+      if (!receipt || !isStrictlyValidatedAppliedCheckoutReceipt(receipt.value, entryName.slice(0, -".json".length), sessionName)) {
+        continue;
+      }
+      const verifiedAt = Date.parse(receipt.value.restoreVerifiedAt);
+      if (!Number.isFinite(verifiedAt) || verifiedAt > now2 || verifiedAt >= cutoff) {
+        continue;
+      }
+      if (dryRun) {
+        pruned += 1;
+        continue;
+      }
+      const beforeDelete = await fs34.promises.lstat(receiptPath).catch(() => null);
+      if (!beforeDelete || beforeDelete.isSymbolicLink() || !beforeDelete.isFile() || beforeDelete.mtimeMs !== receipt.mtimeMs) {
+        continue;
+      }
+      try {
+        await fs34.promises.unlink(receiptPath);
+        pruned += 1;
+      } catch {}
+    }
+  }
+  return pruned;
+}
+async function prunePrWorkflowCheckoutArtifacts(root, now2, dryRun) {
+  return {
+    temps: await prunePrWorkflowCheckoutTemps(root, now2, dryRun),
+    receipts: await prunePrWorkflowCheckoutReceipts(root, now2, dryRun)
+  };
+}
 async function isRealDirectory(dir) {
   try {
     const stat6 = fs34.lstatSync(dir);
@@ -44917,7 +45259,7 @@ function serializeAgentSession(s) {
 }
 async function writeSnapshot(directory, state) {
   try {
-    const { ensureSnapshotCoordinationReady } = await import("./snapshot-coordination-init-3yyzb2c4.js");
+    const { ensureSnapshotCoordinationReady } = await import("./snapshot-coordination-init-h8n8w1cm.js");
     await ensureSnapshotCoordinationReady(directory);
     const snapshot = {
       version: 3,
@@ -47843,7 +48185,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-byfrearz.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-tmy46dtd.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -48967,7 +49309,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-xadg43ph.js");
+        const skillModule = await import("./skill-generator-6j7tq2tb.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -49439,7 +49781,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-5r6mww64.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-yx97q9c1.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -50271,7 +50613,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-16s6dp7f.js");
+      const { getScanStatus } = await import("./scan-cursor-nx0jv9ya.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -50313,7 +50655,7 @@ async function runCuratorPostMortem(directory, options = {}) {
     let actionResult;
     if (options.llmDelegate) {
       try {
-        const { CURATOR_POSTMORTEM_PROMPT: CURATOR_POSTMORTEM_PROMPT2 } = await import("./explorer-2cv64zfj.js");
+        const { CURATOR_POSTMORTEM_PROMPT: CURATOR_POSTMORTEM_PROMPT2 } = await import("./explorer-z0cf5cz0.js");
         const userInput = assembleLLMInput(effectivePlanId, scope, options.sessionID, planSummary, knowledgeSummary, curatorDigest, proposals, unactionable, retrospectives, driftReports);
         const ac = new AbortController;
         const timer = setTimeout(() => ac.abort(), options.llmTimeoutMs ?? 300000);
@@ -50443,9 +50785,9 @@ var _internals54 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-nqjp43vq.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-q6gsrxwz.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-byfrearz.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-tmy46dtd.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -50453,11 +50795,11 @@ var _internals54 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-5kfkqzc9.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-m8act07j.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries2, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-zgnagx67.js");
+    const { checkHivePromotions } = await import("./hive-promoter-ewrz7vh1.js");
     return checkHivePromotions(entries2, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -50466,7 +50808,7 @@ var _internals54 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-xadg43ph.js");
+    } = await import("./skill-generator-6j7tq2tb.js");
     const result = {
       approved: [],
       rejected: [],
@@ -58952,7 +59294,7 @@ function wireCloseInternals() {
     archiveEvidence,
     endAgentSession,
     flushAndDrainTelemetry: async () => {
-      const { flushAndDrainTelemetry } = await import("./telemetry-c9wv2cfw.js");
+      const { flushAndDrainTelemetry } = await import("./telemetry-qxav5cdk.js");
       return flushAndDrainTelemetry();
     },
     finalizeContextTelemetry,
@@ -60304,9 +60646,9 @@ var _internals64 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate }] = await Promise.all([
-      import("./schema-nqjp43vq.js"),
-      import("./curator-5kfkqzc9.js"),
-      import("./curator-llm-factory-rgdb2ee5.js")
+      import("./schema-q6gsrxwz.js"),
+      import("./curator-m8act07j.js"),
+      import("./curator-llm-factory-cbm1ny30.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate };
   }
@@ -62638,7 +62980,7 @@ async function computeCurationDiagnostics(directory, entries2) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-16s6dp7f.js");
+    const { getScanStatus } = await import("./scan-cursor-nx0jv9ya.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -62646,19 +62988,19 @@ async function computeCurationDiagnostics(directory, entries2) {
   } catch {}
   let configMatch = null;
   try {
-    const { isLinked: isLinked2 } = await import("./knowledge-link-mvykydxg.js");
+    const { isLinked: isLinked2 } = await import("./knowledge-link-gfz47ves.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-nqjp43vq.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-q6gsrxwz.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-byfrearz.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-tmy46dtd.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
         config = KnowledgeConfigSchema2.parse({});
       }
       const { cohortConfigFingerprint: cohortConfigFingerprint2 } = await import("./config-fingerprint-v22xh5a2.js");
-      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-7am15ht9.js");
+      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-c7mdsf7m.js");
       const currentFp = cohortConfigFingerprint2(buildConfigFingerprintInput2(config));
       const cohortFp = await readCohortConfigFingerprint(directory);
       configMatch = cohortFp === null ? null : currentFp === cohortFp;
@@ -64094,7 +64436,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-x8b260sh.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-82w4bp4b.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -64132,7 +64474,7 @@ async function handleDoctorCommand(directory, args) {
 `;
   }
   try {
-    const { runModelPreflight } = await import("./model-preflight-kh9dwts2.js");
+    const { runModelPreflight } = await import("./model-preflight-61xgqwcs.js");
     const preflight = await runModelPreflight(config, swarmState.opencodeClient);
     if (preflight.catalogAvailable) {
       const unresolved = preflight.resolutions.filter((resolution) => resolution.status === "unresolved");
@@ -65048,7 +65390,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-959pwbwb.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-a99bgje1.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -65114,7 +65456,7 @@ async function handleExportCommand(directory, _args) {
 // src/agents/critic.ts
 var CRITIC_MEMORY_OUTCOME_GUIDANCE = "Use `swarm_memory_outcome` after evaluating recalled memory or a graph answer. When overturning a memory-backed claim, record `corrected` and include the correction text and relevant file/symbol anchors.";
 var GRAPH_FIRST_CRITIC_GUIDANCE = `## GRAPH-FIRST EVIDENCE
-Use repo_map action="graph_health" before graph-backed review and a targeted repo_map action="impact_cone" for changed or proposed shared symbols. Treat graph evidence as advisory, never as approval or denial. Require source anchors; if freshness is stale or inconclusive, confidence is low, source is missing, the language is unsupported/dynamic, the graph is absent, or an action fails, inspect the direct source and searches before deciding.`;
+Use repo_map action="graph_health" before graph-backed review, a targeted repo_map action="impact_cone" for changed or proposed shared symbols, and repo_map action="graph_explain" when validating or challenging why a file or symbol is graph-relevant. Treat graph evidence as advisory, never as approval or denial. Require source anchors; if freshness is stale or inconclusive, confidence is low, source is missing, the language is unsupported/dynamic, the graph is absent, or an action fails, inspect the direct source and searches before deciding.`;
 var ALWAYS_SURFACE_CATEGORIES = [
   "scope",
   "data_loss",
@@ -66248,12 +66590,49 @@ import * as path90 from "path";
 init_git_executable();
 
 // src/mutation/equivalence.ts
-function isStaticallyEquivalent(originalCode, mutatedCode) {
+var DEFAULT_COMMENT_FAMILY = {
+  lineTokens: ["//"],
+  blockComments: true
+};
+function commentFamilyForLanguage(languageHint) {
+  if (!languageHint)
+    return DEFAULT_COMMENT_FAMILY;
+  const hint = languageHint.toLowerCase();
+  const ext = hint.includes(".") ? hint.slice(hint.lastIndexOf(".") + 1) : hint;
+  switch (ext) {
+    case "py":
+    case "pyi":
+    case "python":
+    case "rb":
+    case "ruby":
+    case "sh":
+    case "bash":
+    case "zsh":
+    case "yaml":
+    case "yml":
+    case "toml":
+    case "r":
+    case "makefile":
+      return { lineTokens: ["#"], blockComments: false };
+    case "php":
+      return { lineTokens: ["//", "#"], blockComments: true };
+    case "sql":
+    case "lua":
+      return { lineTokens: ["--"], blockComments: false };
+    case "pl":
+    case "perl":
+      return { lineTokens: ["#"], blockComments: true };
+    default:
+      return DEFAULT_COMMENT_FAMILY;
+  }
+}
+function isStaticallyEquivalent(originalCode, mutatedCode, languageHint) {
+  const family = commentFamilyForLanguage(languageHint);
   const stripCode = (code) => {
     let inMultiLineComment = false;
     const afterMultiLine = [];
-    for (const line of code.split(`
-`)) {
+    for (const line of family.blockComments ? code.split(`
+`) : []) {
       if (!inMultiLineComment) {
         const openIndex = line.indexOf("/*");
         if (openIndex !== -1) {
@@ -66276,7 +66655,9 @@ function isStaticallyEquivalent(originalCode, mutatedCode) {
       }
     }
     const afterSingleLine = [];
-    for (const line of afterMultiLine) {
+    const linesForSingle = family.blockComments ? afterMultiLine : code.split(`
+`);
+    for (const line of linesForSingle) {
       let inString = null;
       let commentStart = -1;
       for (let i = 0;i < line.length; i++) {
@@ -66292,9 +66673,15 @@ function isStaticallyEquivalent(originalCode, mutatedCode) {
         } else {
           if (ch === "'" || ch === '"' || ch === "`") {
             inString = ch;
-          } else if (ch === "/" && i + 1 < line.length && line[i + 1] === "/") {
-            commentStart = i;
-            break;
+          } else {
+            for (const token of family.lineTokens) {
+              if (line.startsWith(token, i)) {
+                commentStart = i;
+                break;
+              }
+            }
+            if (commentStart >= 0)
+              break;
           }
         }
       }
@@ -66323,7 +66710,7 @@ var _internals72 = {
   batchCheckEquivalence
 };
 async function checkEquivalence(patch, originalCode, mutatedCode, llmJudge) {
-  if (isStaticallyEquivalent(originalCode, mutatedCode)) {
+  if (isStaticallyEquivalent(originalCode, mutatedCode, patch.filePath)) {
     return {
       patchId: patch.id,
       isEquivalent: true,
@@ -66717,6 +67104,89 @@ function computeReport(results, durationMs, budgetMs) {
     timestamp: new Date().toISOString()
   };
 }
+function hunkOnlyText(patchText) {
+  const mutatedLines = [];
+  for (const line of patchText.split(`
+`)) {
+    if (line.startsWith("+++"))
+      continue;
+    if (line.startsWith("+")) {
+      mutatedLines.push(line.substring(1));
+    } else if (!line.startsWith("-") && !line.startsWith("@") && !line.startsWith("diff ") && !line.startsWith("index ") && !line.startsWith("---") && !line.startsWith("\\")) {
+      mutatedLines.push(line.startsWith(" ") ? line.substring(1) : line);
+    }
+  }
+  return mutatedLines.join(`
+`);
+}
+function parseUnifiedHunks(patchText) {
+  const hunks = [];
+  let current = null;
+  const body = patchText.endsWith(`
+`) ? patchText.slice(0, -1) : patchText;
+  for (const line of body.split(`
+`)) {
+    const header = /^@@ -(\d+)(?:,(\d+))? \+\d+(?:,\d+)? @@/.exec(line);
+    if (header) {
+      current = {
+        oldStart: Number.parseInt(header[1], 10),
+        oldCount: header[2] === undefined ? 1 : Number.parseInt(header[2], 10),
+        originalLines: [],
+        resultLines: []
+      };
+      hunks.push(current);
+      continue;
+    }
+    if (!current)
+      continue;
+    if (line.startsWith("diff ") || line.startsWith("index ") || line.startsWith("---") || line.startsWith("+++")) {
+      continue;
+    }
+    if (line.startsWith("\\"))
+      continue;
+    if (line.startsWith("-")) {
+      current.originalLines.push(line.substring(1));
+    } else if (line.startsWith("+")) {
+      current.resultLines.push(line.substring(1));
+    } else if (line.startsWith(" ")) {
+      const ctx = line.substring(1);
+      current.originalLines.push(ctx);
+      current.resultLines.push(ctx);
+    } else if (line === "") {
+      current.originalLines.push("");
+      current.resultLines.push("");
+    } else {
+      return null;
+    }
+  }
+  return hunks.length > 0 ? hunks : null;
+}
+function applyUnifiedDiff(originalCode, patchText) {
+  const hunks = parseUnifiedHunks(patchText);
+  if (!hunks)
+    return null;
+  let lines = originalCode.split(`
+`);
+  for (const hunk of [...hunks].sort((a, b) => b.oldStart - a.oldStart)) {
+    const startIdx = hunk.oldCount === 0 ? hunk.oldStart : hunk.oldStart - 1;
+    if (startIdx < 0 || startIdx > lines.length)
+      return null;
+    if (hunk.originalLines.length > 0) {
+      const actual = lines.slice(startIdx, startIdx + hunk.originalLines.length);
+      for (let i = 0;i < hunk.originalLines.length; i++) {
+        if (actual[i] !== hunk.originalLines[i])
+          return null;
+      }
+    }
+    lines = [
+      ...lines.slice(0, startIdx),
+      ...hunk.resultLines,
+      ...lines.slice(startIdx + hunk.originalLines.length)
+    ];
+  }
+  return lines.join(`
+`);
+}
 async function executeMutationSuite(patches, testCommand, testFiles, workingDir, budgetMs, onProgress, sourceFiles, options = {}) {
   const startTime = Date.now();
   const effectiveBudget = budgetMs ?? TOTAL_BUDGET_MS;
@@ -66732,19 +67202,7 @@ async function executeMutationSuite(patches, testCommand, testFiles, workingDir,
     for (const patch of patches) {
       const originalCode = sourceFiles.get(patch.filePath);
       if (originalCode) {
-        const mutatedLines = [];
-        for (const line of patch.patch.split(`
-`)) {
-          if (line.startsWith("+++"))
-            continue;
-          if (line.startsWith("+")) {
-            mutatedLines.push(line.substring(1));
-          } else if (!line.startsWith("-") && !line.startsWith("@") && !line.startsWith("diff ") && !line.startsWith("index ") && !line.startsWith("---")) {
-            mutatedLines.push(line);
-          }
-        }
-        const mutatedCode = mutatedLines.join(`
-`);
+        const mutatedCode = applyUnifiedDiff(originalCode, patch.patch) ?? hunkOnlyText(patch.patch);
         eqInput.push({ patch, originalCode, mutatedCode });
       }
     }
@@ -85130,7 +85588,7 @@ function createCuratorLLMDelegate(directory, mode = "init", sessionId) {
     }
     const sdkOpts = signal ? { signal } : {};
     try {
-      const { getSwarmAgents: getSwarmAgents2, resolveFallbackModel: resolveFallbackModel2 } = await import("./index-1jcy4gc6.js");
+      const { getSwarmAgents: getSwarmAgents2, resolveFallbackModel: resolveFallbackModel2 } = await import("./index-etmwjgre.js");
       const createResult = await client.session.create({
         ...sessionId ? {
           body: {
@@ -89057,13 +89515,26 @@ function sharedTrailingSegments(a, b) {
   return shared;
 }
 function isCacheStale(impactMap, generatedAtMs) {
-  for (const sourcePath of Object.keys(impactMap)) {
+  const statFor = (filePath) => {
     try {
-      const stat12 = fs62.statSync(sourcePath);
-      if (stat12.mtimeMs > generatedAtMs) {
-        return true;
-      }
+      const stat12 = fs62.statSync(filePath);
+      return stat12.mtimeMs > generatedAtMs ? "stale" : "fresh";
     } catch {
+      return "missing";
+    }
+  };
+  for (const sourcePath of Object.keys(impactMap)) {
+    if (statFor(sourcePath) !== "fresh") {
+      return true;
+    }
+  }
+  const mappedTests = new Set;
+  for (const tests of Object.values(impactMap)) {
+    for (const testPath of tests)
+      mappedTests.add(testPath);
+  }
+  for (const testPath of mappedTests) {
+    if (statFor(testPath) !== "fresh") {
       return true;
     }
   }
@@ -89430,8 +89901,11 @@ async function analyzeImpact(changedFiles, cwd, budget) {
             budgetExceeded = true;
             break;
           }
+          const sizeBefore = impactedTestsSet.size;
           impactedTestsSet.add(test);
-          visitedCount++;
+          if (impactedTestsSet.size > sizeBefore) {
+            visitedCount++;
+          }
         }
         if (budgetExceeded)
           break;
@@ -89813,7 +90287,6 @@ var MAX_COMMAND_LENGTH2 = 500;
 var DEFAULT_TIMEOUT_MS3 = 60000;
 var MAX_TIMEOUT_MS2 = 300000;
 var MAX_SAFE_TEST_FILES = 50;
-var MAX_SAFE_SOURCE_FILES = 1;
 async function estimateFanOut(sourceFiles, cwd) {
   try {
     const impactMap = await _internals102.loadImpactMap(cwd, {
@@ -90117,7 +90590,7 @@ var DISPATCH_FRAMEWORK_MAP = {
 };
 async function detectTestFrameworkViaDispatch(cwd) {
   try {
-    const { pickBackend } = await import("./dispatch-9yqqqfr6.js");
+    const { pickBackend } = await import("./dispatch-3rwdxpp2.js");
     const backend = await pickBackend(cwd);
     if (!backend?.selectTestFramework)
       return "none";
@@ -90133,7 +90606,7 @@ async function buildTestCommandViaDispatch(framework, scope, files, coverage, ba
   if (framework === "none")
     return null;
   try {
-    const { pickBackend } = await import("./dispatch-9yqqqfr6.js");
+    const { pickBackend } = await import("./dispatch-3rwdxpp2.js");
     const backend = await pickBackend(baseDir);
     if (backend?.buildTestCommand) {
       const cmd = backend.buildTestCommand(framework, files, baseDir, {
@@ -90155,7 +90628,7 @@ async function parseTestOutputViaDispatch(framework, output, baseDir) {
   if (framework === "none")
     return null;
   try {
-    const { pickBackend } = await import("./dispatch-9yqqqfr6.js");
+    const { pickBackend } = await import("./dispatch-3rwdxpp2.js");
     const backend = await pickBackend(baseDir);
     if (!backend?.parseTestOutput)
       return null;
@@ -90470,6 +90943,7 @@ async function getTestFilesFromGraph(sourceFiles, workingDir) {
             }
           }
         } else {
+          match = importRegex.exec(content);
           continue;
         }
         const importBasename = path120.basename(resolvedImport, path120.extname(resolvedImport));
@@ -91544,7 +92018,7 @@ function analyzeFailures(workingDir) {
   return report;
 }
 var test_runner = createSwarmTool({
-  description: 'Run project tests with automatic framework detection for bun, vitest, jest, mocha, pytest, cargo, pester, go test, maven, gradle, dotnet test, ctest, swift test, dart test, rspec, minitest, pest, phpunit, or php-artisan. Returns JSON with success, framework, scope, command, timeout_ms, duration_ms, totals, outcome, and optional coveragePercent, rawOutput, testCases, and message fields. Scope "target" runs one exact Go test/subtest or CTest name via native_target using a workspace-relative package/build directory, with no broad fallback, coverage, or bail. The "targets" array passes framework-native test name patterns to cargo, go-test, maven, gradle, dotnet-test, ctest, and swift-test.',
+  description: 'Run project tests with automatic framework detection for bun, vitest, jest, mocha, pytest, cargo, pester, go test, maven, gradle, dotnet test, ctest, swift test, dart test, rspec, minitest, pest, phpunit, or php-artisan. Multi-source graph/impact/convention batches are permitted and deduplicated; the resolved test-file union is hard-capped at 50 (typed scope_exceeded with cap_decision on overflow). Returns JSON with success, framework, scope, command, timeout_ms, duration_ms, totals, outcome, and optional coveragePercent, rawOutput, testCases, resolved_test_files, cap_decision, fallback_reason, and message fields. A discovery scope that legitimately resolves zero tests returns outcome no_impacted_tests. Scope "target" runs one exact Go test/subtest or CTest name via native_target using a workspace-relative package/build directory, with no broad fallback, coverage, or bail. The "targets" array passes framework-native test name patterns to cargo, go-test, maven, gradle, dotnet-test, ctest, and swift-test.',
   args: {
     scope: exports_external.enum(["all", "convention", "graph", "impact", "target"]).optional().describe('Test scope: "all" runs the full suite, "convention"/"graph"/"impact" resolve files, and "target" runs one exact Go or CTest native name without file fallback.'),
     native_target: exports_external.object({
@@ -91653,8 +92127,8 @@ var test_runner = createSwarmTool({
           success: false,
           framework: "none",
           scope: "all",
-          error: 'scope "all" is blocked for agent use. Use scope "convention" with specific test files, or scope "graph" with exactly one source file.',
-          message: 'The full test suite is blocked in agent context. Use scope "convention" with specific test files, or scope "graph" with exactly one source file. Example: { scope: "convention", files: ["src/tools/test-runner.ts"] }',
+          error: 'scope "all" is blocked for agent use. Use scope "convention" with specific test files, or a bounded multi-source batch via scope "graph"/"impact" (the resolved test set must stay under the safe cap).',
+          message: 'The full test suite is blocked in agent context. Use scope "convention" with specific test files, or a bounded multi-source batch via scope "graph"/"impact" (the resolved test set must stay under the safe cap). Example: { scope: "convention", files: ["src/tools/test-runner.ts"] }',
           outcome: "error"
         };
         return JSON.stringify(errorResult, null, 2);
@@ -91738,17 +92212,6 @@ var test_runner = createSwarmTool({
         };
         return JSON.stringify(errorResult, null, 2);
       }
-      if (sourceFiles.length > MAX_SAFE_SOURCE_FILES) {
-        const errorResult = {
-          success: false,
-          framework,
-          scope,
-          error: `scope "convention" accepts at most ${MAX_SAFE_SOURCE_FILES} source file for discovery (got ${sourceFiles.length}). Treat this as SKIP without retry.`,
-          message: `Too many source files for scope "convention" discovery (${sourceFiles.length} provided, limit is ${MAX_SAFE_SOURCE_FILES}). Call test_runner once per source file, or pass direct test file paths instead of source files.`,
-          outcome: "scope_exceeded"
-        };
-        return JSON.stringify(errorResult, null, 2);
-      }
       testFiles = [
         ...directTestFiles,
         ...getTestFilesFromConvention(sourceFiles, workingDir)
@@ -91772,17 +92235,6 @@ var test_runner = createSwarmTool({
         };
         return JSON.stringify(errorResult, null, 2);
       }
-      if (sourceFiles.length > MAX_SAFE_SOURCE_FILES) {
-        const errorResult = {
-          success: false,
-          framework,
-          scope,
-          error: `scope "graph" accepts at most ${MAX_SAFE_SOURCE_FILES} source file (got ${sourceFiles.length}). Treat this as SKIP without retry.`,
-          message: `Too many source files for scope "graph" (${sourceFiles.length} provided, limit is ${MAX_SAFE_SOURCE_FILES}). Call test_runner once per source file, or use scope "convention" with direct test file paths.`,
-          outcome: "scope_exceeded"
-        };
-        return JSON.stringify(errorResult, null, 2);
-      }
       const estimate = await estimateFanOut(sourceFiles, workingDir);
       if (estimate.estimatedCount > MAX_SAFE_TEST_FILES) {
         const errorResult = {
@@ -91822,17 +92274,6 @@ var test_runner = createSwarmTool({
         };
         return JSON.stringify(errorResult, null, 2);
       }
-      if (sourceFiles.length > MAX_SAFE_SOURCE_FILES) {
-        const errorResult = {
-          success: false,
-          framework,
-          scope,
-          error: `scope "impact" accepts at most ${MAX_SAFE_SOURCE_FILES} source file (got ${sourceFiles.length}). Treat this as SKIP without retry.`,
-          message: `Too many source files for scope "impact" (${sourceFiles.length} provided, limit is ${MAX_SAFE_SOURCE_FILES}). Call test_runner once per source file, or use scope "convention" with direct test file paths.`,
-          outcome: "scope_exceeded"
-        };
-        return JSON.stringify(errorResult, null, 2);
-      }
       const estimate = await estimateFanOut(sourceFiles, workingDir);
       if (estimate.estimatedCount > MAX_SAFE_TEST_FILES) {
         const errorResult = {
@@ -91854,7 +92295,12 @@ var test_runner = createSwarmTool({
             scope,
             error: "Budget exceeded during impact analysis",
             message: `Impact analysis exceeded safe budget of ${MAX_SAFE_TEST_FILES} test files.`,
-            outcome: "scope_exceeded"
+            outcome: "scope_exceeded",
+            cap_decision: {
+              decision: "cap_exceeded",
+              resolved_test_count: impactResult.impactedTests.length,
+              limit: MAX_SAFE_TEST_FILES
+            }
           };
           return JSON.stringify(errorResult, null, 2);
         }
@@ -91890,13 +92336,21 @@ var test_runner = createSwarmTool({
     }
     if (scope !== "all" && scope !== "target" && testFiles.length === 0 && !(args.targets && args.targets.length > 0)) {
       const baseMessage = "No matching test files found for the provided source files. Check that test files exist with matching naming conventions (.spec.*, .test.*, .Tests.ps1, __tests__/, tests/, test/, spec/).";
+      const discoveryEmptyOutcome = scope === "impact" || scope === "graph" ? "no_impacted_tests" : "skip";
       const errorResult = {
         success: false,
         framework,
         scope: effectiveScope,
         error: "Provided source files resolved to zero test files",
         message: graphFallbackReason ? `${baseMessage} (${graphFallbackReason})` : baseMessage,
-        outcome: "skip",
+        outcome: discoveryEmptyOutcome,
+        resolved_test_files: [],
+        cap_decision: {
+          decision: "within_cap",
+          resolved_test_count: 0,
+          limit: MAX_SAFE_TEST_FILES
+        },
+        ...graphFallbackReason && { fallback_reason: graphFallbackReason },
         ...scope === "graph" && { attempted_scope: "graph" },
         ...scope === "impact" && { attempted_scope: "graph" }
       };
@@ -91910,7 +92364,14 @@ var test_runner = createSwarmTool({
         scope: effectiveScope,
         error: `Resolved test file count (${testFiles.length}) exceeds safe maximum (${MAX_SAFE_TEST_FILES})`,
         message: `Too many test files resolved (${testFiles.length}). Maximum allowed is ${MAX_SAFE_TEST_FILES}. Treat this as SKIP without retry. Provide more specific source files to narrow down test scope. First few resolved: ${sampleFiles.join(", ")}`,
-        outcome: "scope_exceeded"
+        outcome: "scope_exceeded",
+        resolved_test_files: testFiles,
+        cap_decision: {
+          decision: "cap_exceeded",
+          resolved_test_count: testFiles.length,
+          limit: MAX_SAFE_TEST_FILES
+        },
+        ...graphFallbackReason && { fallback_reason: graphFallbackReason }
       };
       return JSON.stringify(errorResult, null, 2);
     }
@@ -91928,6 +92389,17 @@ var test_runner = createSwarmTool({
         result.message = `${result.message || ""} | FAILURE ANALYSIS: ${clusterSummary}`;
       }
     }
+    if (scope === "graph" || scope === "impact" || scope === "convention") {
+      result.resolved_test_files = testFiles;
+      result.cap_decision = {
+        decision: "within_cap",
+        resolved_test_count: testFiles.length,
+        limit: MAX_SAFE_TEST_FILES
+      };
+      if (graphFallbackReason) {
+        result.fallback_reason = graphFallbackReason;
+      }
+    }
     if (graphFallbackReason && result.message) {
       result.message = `${result.message} (${graphFallbackReason})`;
     }
@@ -99048,7 +99520,7 @@ async function runValidationWithTransientRetry(input, candidateContent, baseline
       if (!input.dispatcher) {
         throw new Error("no evaluation dispatcher available (cannot run validation)");
       }
-      const { createModelEvaluationExecutor: createModelEvaluationExecutor2 } = await import("./runner-y3sydwtj.js");
+      const { createModelEvaluationExecutor: createModelEvaluationExecutor2 } = await import("./runner-16b691ba.js");
       const executor = createModelEvaluationExecutor2(input.dispatcher, input.sessionId);
       const result = await withProtectedSetIntegrity([evalInputRoot, ...protectedRoots(input.directory)], () => _internals120.evaluateCandidateV1({
         projectRoot: input.directory,
@@ -101677,7 +102149,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-1qnykdaw.js");
+    const { buildHelpText } = await import("./index-pxtye2ng.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -101691,7 +102163,7 @@ async function handleHelpCommand(ctx) {
 > Note: \`/swarm ${resolved.key}\` is a deprecated alias for \`/swarm ${aliasTarget}\`.` : detailed;
   }
   const similar = _internals24.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-1qnykdaw.js");
+  const { buildHelpText: fullHelp } = await import("./index-pxtye2ng.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -102006,7 +102478,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-rre9ntq3.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-ffwmhf7s.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -102016,7 +102488,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail reset": {
     handler: async (ctx) => {
-      const { handleGuardrailReset } = await import("./guardrail-reset-6gad352a.js");
+      const { handleGuardrailReset } = await import("./guardrail-reset-07byr7nr.js");
       return handleGuardrailReset(ctx.args, ctx.sessionID);
     },
     description: "Reset one exact active invocation/action circuit after repair",
@@ -102037,7 +102509,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-t0ydqz5s.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-j2wtq7p2.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -102523,9 +102995,9 @@ Subcommands:
   },
   "abort-pr-workflow": {
     handler: (ctx) => handleAbortPrWorkflowCommand(ctx.directory, ctx.args, ctx.sessionID),
-    description: "Clear a stuck PR_REVIEW/PR_FEEDBACK mechanical gate and stop the auto-resume loop [mode] [reason]",
-    args: "[PR_REVIEW|PR_FEEDBACK] [reason...]",
-    details: 'Human-only escape hatch for an unrecoverable PR_REVIEW or PR_FEEDBACK mechanical gate. When the architect cannot reach complete_pr_workflow \u2014 for example a compound `git fetch && git checkout` was rejected as read-only shell syntax, the PR head cannot be fetched, or the working tree is on the wrong branch \u2014 running this clears the durable gate state for the current session and stops the auto-resume loop without depending on the trapped model. The agent itself cannot run this command; it must call the abort_pr_workflow tool (or ask you to run this command). Both paths funnel into the same fail-closed abortPrWorkflow hook, which refuses while the workflow is armed for publication or while PR workflow lanes are still in flight. Issue #2108 adds the two audited exits from an armed publication window: the invalidate_pr_feedback_publication tool (change approved content \u2014 every approval of the generation is superseded and the full ladder re-runs) and the abort_pr_workflow tool kind "cancel-publication" with cancel_publication: true and a reason (terminal no-publish cancellation; never grants push authority). A plain recovery or force abort never clears an armed window. This human-only force path has exactly one exception to the lane refusal (issue #2251): when the ONLY lanes still blocking are ones past the 30-minute staleness horizon that the liveness probe reports as still running \u2014 a lane nothing will ever settle on a schedule \u2014 it clears the gate anyway, names exactly which lanes it overrode, and finalizes their delegation records so the session can start a new PR workflow. Those sessions are NOT stopped and their output is NOT collected. A lane with a fresh updatedAt still blocks even under force, and any delegation record that still keeps the session blocked is named in the warning. When checkout preparation preserved a stash, the result instructs the caller to run prepare_pr_workflow_checkout operation=restore after the clear. An audit event is appended to .swarm/events.jsonl.',
+    description: "Clear a stuck PR_REVIEW/PR_FEEDBACK mechanical gate and stop the auto-resume loop [mode] [reason] or PR_FEEDBACK --cancel-publication <reason...> (cancelled_without_publication)",
+    args: "[PR_REVIEW|PR_FEEDBACK] [reason...] | PR_FEEDBACK --cancel-publication <reason...>",
+    details: "Human-only escape hatch for an unrecoverable PR_REVIEW or PR_FEEDBACK mechanical gate. When the architect cannot reach complete_pr_workflow \u2014 for example a compound `git fetch && git checkout` was rejected as read-only shell syntax, the PR head cannot be fetched, or the working tree is on the wrong branch \u2014 running this clears the durable gate state for the current session and stops the auto-resume loop without depending on the trapped model. The agent itself cannot run this command; it must call the abort_pr_workflow tool (or ask you to run this command). Both paths funnel into the same fail-closed abortPrWorkflow hook, which refuses while the workflow is armed for publication or while PR workflow lanes are still in flight. To cancel an armed PR_FEEDBACK publication without publishing, use the exact human syntax `PR_FEEDBACK --cancel-publication <reason...>`; it requires a non-empty reason, records the terminal `cancelled_without_publication` status with the observed remote head, and never grants push authority. A plain recovery or force abort never clears an armed window. This human-only force path has exactly one exception to the lane refusal (issue #2251): when the ONLY lanes still blocking are ones past the 30-minute staleness horizon that the liveness probe reports as still running \u2014 a lane nothing will ever settle on a schedule \u2014 it clears the gate anyway, names exactly which lanes it overrode, and finalizes their delegation records so the session can start a new PR workflow. Those sessions are NOT stopped and their output is NOT collected. A lane with a fresh updatedAt still blocks even under force, and any delegation record that still keeps the session blocked is named in the warning. When checkout preparation preserved a stash, the result instructs the caller to run prepare_pr_workflow_checkout operation=restore after the clear. An audit event is appended to .swarm/events.jsonl.",
     category: "utility",
     toolPolicy: "restricted"
   },
@@ -103205,7 +103677,7 @@ Entry points: {{ENTRY_POINTS}}
 If any field is \`{{...}}\` (unresolved): run MODE: DISCOVER to populate it, then cache in \`.swarm/context.md\` under \`## Project Context\`.
 
 ## GRAPH-FIRST EVIDENCE
-Before planning or broad codebase/security review, use \`repo_map\` in this order: \`graph_health\`, then \`package_boundaries\` and \`key_files\`, then a targeted \`context_pack\` that includes source anchors. For security or cross-boundary data flow, add \`route_trace\` and \`data_trace\`. Graph evidence is advisory, never an approval or denial. If the graph is absent, stale, freshness is inconclusive, confidence is low, a claim lacks source, the language is unsupported/dynamic, or an action fails, inspect the direct source and searches before deciding.
+Before planning or broad codebase/security review, use \`repo_map\` in this order: \`graph_health\`, then \`package_boundaries\` and \`key_files\`, then a targeted \`context_pack\` that includes source anchors. For security or cross-boundary data flow, add \`route_trace\` and \`data_trace\`. For planning preflight, run \`repo_map\` with action="preflight_packet" (bounded ontology packet of roles, routes, data, and security findings) to frame risk, and action="ontology" where a file's roles matter. Graph evidence is advisory, never an approval or denial. If the graph is absent, stale, freshness is inconclusive, confidence is low, a claim lacks source, the language is unsupported/dynamic, or an action fails, inspect the direct source and searches before deciding.
 
 ## CONTEXT TRIAGE
 When approaching context limits, preserve/discard in this priority order:
@@ -104745,7 +105217,7 @@ SKILLS HANDLING: If SKILLS is present and not "none", read the skill names/descr
 
 RULES:
 - Read target file before editing
-- Before editing a shared or cross-imported file, call \`repo_map action="localization"\`, then \`repo_map action="impact_cone"\` before changing shared or exported symbols \u2014 the injected localization block covers only a declared scope's primary file; this covers the rest, including when no scope was declared
+- Before editing a shared or cross-imported file, call \`repo_map action="localization"\`, then \`repo_map action="impact_cone"\` plus \`repo_map action="callers"\` before changing shared or exported symbols (callers is conservative regex analysis; it cannot see dynamic dispatch) \u2014 the injected localization block covers only a declared scope's primary file; this covers the rest, including when no scope was declared
 - Treat graph results as advisory evidence. Require source anchors; when freshness is stale or inconclusive, confidence is low, source is missing, the language is unsupported/dynamic, the graph is absent, or an action fails, inspect the direct source and searches before editing.
 - Implement exactly what TASK specifies
 - Respect CONSTRAINT
@@ -105795,7 +106267,7 @@ DO (explicitly):
 - VERIFY imports exist: if the coder added a new import, use search to verify the export exists in the source
 - CHECK test files were updated: if the coder changed a function signature, the tests should reflect it
 - VERIFY platform compatibility: path.join() used for all paths, no hardcoded separators
-- GRAPH-FIRST REVIEW: call \`repo_map action="graph_health"\`, then use \`diff_context\` and \`impact_cone\` (or \`blast_radius\` for file-level dependents) to localize the changed surface. Require source anchors and verify the direct source. Graph evidence is advisory only, never an approval or denial; if freshness is stale or inconclusive, confidence is low, source is missing, the language is unsupported/dynamic, the graph is absent, or an action fails, rely on the direct source, Git diff, and searches.
+- GRAPH-FIRST REVIEW: call \`repo_map action="graph_health"\`, then use \`diff_context\` and \`impact_cone\` (or \`blast_radius\` for file-level dependents) to localize the changed surface. Use \`repo_map action="symbol_context"\` for definition-first verification of symbol claims and \`repo_map action="dead_exports"\` to surface advisory review candidates (never delete directives). Require source anchors and verify the direct source. Graph evidence is advisory only, never an approval or denial; if freshness is stale or inconclusive, confidence is low, source is missing, the language is unsupported/dynamic, the graph is absent, or an action fails, rely on the direct source, Git diff, and searches.
 - For confirmed issues requiring a concrete fix: use suggest_patch to produce a structured patch artifact for the coder
 
 ## CONFIG STRICTNESS VERIFICATION
@@ -107173,4 +107645,4 @@ function getAgentConfigs(config, directory, sessionId, projectContext) {
   return result;
 }
 
-export { resetActionCircuitExternally, getBlockingActionCircuit, dcNormalizeCommand, dcUnwrapWrappers, dcSplitSegments, dcExtractRecursiveRmTargets, dcEvaluateRecursiveDeleteTargets, dcCheckJunctionCreation, dcExtractWindowsCmdTargets, dcExtractPowerShellTargets, getSharedClassifierGuardrailBlock, classifyCommand, MAX_PARALLEL_VERDICT_TASKS, computeParallelVerdict, createArchitectAgent, createCoderAgent, GENERALIST_COUNCIL_PROMPT, SKEPTIC_COUNCIL_PROMPT, DOMAIN_EXPERT_COUNCIL_PROMPT, createCriticAgent, createCuratorAgent, createDesignerAgent, createDocsAgent, createResearcherAgent, SECURITY_CATEGORIES, createReviewerAgent, createSMEAgent, createTestEngineerAgent, _internals123 as _internals, stripSwarmPrefix, extractSwarmIdFromAgentName, resolveFallbackModel, getSwarmAgents, createAgents, resolvePrimaryAgentNames, getAgentConfigs, SWARM_COMMAND_TOOL_COMMANDS, SWARM_COMMAND_TOOL_ALLOWLIST, HUMAN_ONLY_SWARM_COMMANDS, classifySwarmCommandToolUse, classifySwarmCommandChatFallbackUse, detectPosixWrites, detectWindowsWrites, resolveWriteTargets, getAgentSession, parseLeanLaneIndex, computeLaneRuntimeProfile, MAX_TRACKED_STANDARD_WORKTREE_CALLS, awaitingMergeByCallID, standardWorktreeByCallID, standardWorktreeSerializationSessions, getStandardWorktreeDegradationReason, resetStandardWorktreeIsolationState, checkStandardWorktreeSerializationRelease, sanitizeWorktreeTaskId, preProvisionCollisionCheck, isLaneOwnedByCurrentSession, precreateStandardWorktreeSession, preserveBackgroundWorktreeOwnershipForCallId, preserveDirtyWorktreeForCallId, preserveDirtyWorktreeAtPath, cleanupStandardWorktreeForCallId, abortStandardWorktreeDispatch, finishStandardWorktreeDispatch, readLaneEnvFileFromDisk, _internals22 as _internals1, redactSecrets, prWorkflowSessionFileStem, ensurePrWorkflowSafeParentDirectory, writePrWorkflowAtomicJson, PrWorkflowCheckoutMutationTimeoutError, withPrWorkflowCheckoutMutationLock, PR_REVIEW_REPORT_VERDICTS, allowedPrReviewReportVerdicts, normalizePrReviewPartialBaseCoverageRecord, rollbackPrReviewPartialBaseCoverageAdmission, readPrReviewTerminalCoverageForReport, PR_REVIEW_REQUIRED_MICRO_LANE_IDS, PR_REVIEW_DEPTH_TIER_THRESHOLDS, PR_REVIEW_BASE_LANE_FLOORS, PR_REVIEW_TIER_L_CONSOLIDATED_LANE_FLOOR, PR_REVIEW_MICRO_LANE_FLOORS, computePrReviewDepthTier, MAX_PR_FEEDBACK_INVENTORY_AMENDMENTS, activatePrWorkflow, readPrWorkflowGateState, submitPrReviewResult, withPrWorkflowCheckoutPreparationLock, withInactivePrWorkflowCheckoutRestoreLock, clearPrWorkflowGateState, collectPrWorkflowPendingLaneLiveness, settlePresumedStalePrWorkflowLanes, abortPrWorkflow, recoverArmedPrWorkflow, bindPrWorkflowHead, rebindPrFeedbackHead, bindPrReviewBase, assertCurrentCheckoutHead, assertPrReviewCleanCheckout, enforcePrWorkflowDispatchLanesAsync, PrReviewResilienceCircuitOpenError, PrReviewResilienceRetryExhaustedError, enforcePrReviewBaseDimensions, rollbackPrReviewBaseAdmissionIfUnlaunched, admitPrReviewPartialBaseCoverage2 as admitPrReviewPartialBaseCoverage, assertPrReviewBaseCoverageSettled2 as assertPrReviewBaseCoverageSettled, recordPrReviewValidationBatch, assertPrReviewValidationSettled, declarePrFeedbackInventory, enforcePrFeedbackVerificationOwnership, assertPrFeedbackVerificationSettled, recordPrFeedbackStageA, recordPrFeedbackGateBatch, assertPrFeedbackGatePhaseSettled, assertPrFeedbackReadyToPublish, invalidatePrFeedbackPublication, describePrWorkflowPublicationSection, findDanglingLivePublicationGeneration, recordPrFeedbackPushAttemptResult, resolvePrReviewWriterRunId, markPrReviewTriggerEvaluationComplete, bindPrReviewTriggerLedger, assertPrReviewArtifactBoundary, assertPrReviewArtifactRecordsMatchAuthoritativeVerdicts, markPrReviewArtifactBoundary, markPrReviewHandoffComplete, readPrReviewFinalFindingPolicyForReport, transitionPrReviewToFeedback, declarePrFeedbackScope, resolvePrFeedbackScopeDeclaration, consumePrFeedbackScopeDeclaration, validatePrFeedbackScopeBinding, enforcePrWorkflowToolBefore, readPrReviewReentryBindingContext, hasActivePrReviewReentryAuthorization, reserveActivePrReviewReentryAuthorization, completePrWorkflow, _test_exports2 as _test_exports, normalizePrWorkflowShellCommand, describePrWorkflowRevisionDigestFailure, readAuthoritativePrReviewCriticSettlements, readAuthoritativePrReviewCriticVerdicts, formatPrReviewLaneValidationFailure, validatePrReviewDiscoveryLaneCompletion2 as validatePrReviewDiscoveryLaneCompletion, validatePrWorkflowTransportRecovery, prReviewDiscoveryArtifactCoversLane, MAX_SALVAGED_SCHEMA_ERROR_CHARS, readPrWorkflowGateStateForRecovery, handleAcknowledgeSpecDriftCommand, handleAgentsCommand, handleAnalyzeCommand, handleApproveWriteCommand, handleArchiveCommand, handleAutoProceedCommand, handleBenchmarkCommand, handleBrainstormCommand, createSwarmTool, handleCheckpointCommand, DEFAULT_CI_DEADLINE_MS2 as DEFAULT_CI_DEADLINE_MS, createSignalCancellation, handleCiCommand, handleCiSimulateCommand, handleClarifyCommand, safeRealpathSync, buildSynonymIndex, expandTokens, readSynonymMap, createCuratorLLMDelegate, startSnapshotCoordinationInitialization, ensureSnapshotCoordinationReady, retrySnapshotCoordinationInitialization, getSnapshotCoordinationStatus, beginSnapshotCoordinationReset, closeSnapshotCoordinationInitialization, markSnapshotCoordinationClosing, _snapshotCoordinationInternals, handleCloseCommand, _internals53 as _internals2, normalizeRecommendationEntryIdToken, parseKnowledgeRecommendations, parseKnowledgeRecommendationsWithDiagnostics, parseStructuredCuratorBlocks, readCuratorSummary, writeCuratorSummary, appendCuratorRecommendation, mergeCuratorPhaseSummary, filterPhaseEvents, checkPhaseCompliance, runCuratorInit, runCuratorPhase, applyCuratorKnowledgeUpdates, isHiveEligible, countDistinctProjects, checkHivePromotions, _internals57 as _internals3, createHivePromoterHook, promoteToHive, promoteFromSwarm, createMemoryGateway, handleCodebaseReviewCommand, handleConcurrencyCommand, handleConfigCommand, handleConsolidateCommand, handleCostsCommand, handleCouncilCommand, getCoChangePairs, handleCurateCommand, handleDarkMatterCommand, handleDeepDiveCommand, handleDeepResearchCommand, getHostConfigDir, getPluginCachePaths, getPluginLockFilePaths, VERSION_PINNED_LEAF, discoverVersionPinnedCachePaths, readCachePackageVersion, handleDiagnoseCommand, handleDoctorCommand, handleEvidenceCommand, handleEvidenceSummaryCommand, handleExportCommand, handleFullAutoCommand, computeQualityBudget, computeSastScan, handleGateAuditCommand, handleGateStatsCommand, handleHandoffCommand, handleBlueprintValidateCommand, handleBlueprintCurrentCommand, handleBlueprintHistoryCommand, handleBlueprintDiffCommand, handleBlueprintExportCommand, handleHarnessCandidateValidateCommand, handleHarnessCandidateShowCommand, handleHarnessCandidateDiffCommand, handleHistoryCommand, handleKnowledgeQuarantineCommand, handleKnowledgeRestoreCommand, handleKnowledgeMigrateCommand, handleKnowledgeListCommand, handleKnowledgeUnactionableCommand, handleKnowledgeRetryHardeningCommand, handleLearningCommand, handleLinkCommand, symbols, handleMemoryCommand, handleMemoryStatusCommand, handleMemoryValueLogCommand, handleMemoryMigrateCommand, handleMemoryImportCommand, handleMemoryExportCommand, handlePlanCommand, handlePreflightCommand, handlePromoteCommand, handleQaGatesCommand, handleRecoverCommand, handleResetCommand, handleResetSessionCommand, handleRetrieveCommand, handleReviewCommand, handleRollbackCommand, handleSddStatusCommand, handleSddValidateCommand, handleSddProjectCommand, handleSddCommand, handleSimulateCommand, handleSpecifyCommand, handleStatusCommand, handleSyncPlanCommand, handleTurboCommand, handleUnlinkCommand, handleWriteRetroCommand, handleHelpCommand, isCommandFailure, COMMAND_REGISTRY, VALID_COMMANDS, _internals24 as _internals4, resolveCommand, normalizeSwarmCommandInput, canonicalCommandKey, formatCommandNotFound, executeSwarmCommand };
+export { resetActionCircuitExternally, getBlockingActionCircuit, dcNormalizeCommand, dcUnwrapWrappers, dcSplitSegments, dcExtractRecursiveRmTargets, dcEvaluateRecursiveDeleteTargets, dcCheckJunctionCreation, dcExtractWindowsCmdTargets, dcExtractPowerShellTargets, getSharedClassifierGuardrailBlock, classifyCommand, MAX_PARALLEL_VERDICT_TASKS, computeParallelVerdict, createArchitectAgent, createCoderAgent, GENERALIST_COUNCIL_PROMPT, SKEPTIC_COUNCIL_PROMPT, DOMAIN_EXPERT_COUNCIL_PROMPT, createCriticAgent, createCuratorAgent, createDesignerAgent, createDocsAgent, createResearcherAgent, SECURITY_CATEGORIES, createReviewerAgent, createSMEAgent, createTestEngineerAgent, _internals123 as _internals, stripSwarmPrefix, extractSwarmIdFromAgentName, resolveFallbackModel, getSwarmAgents, createAgents, resolvePrimaryAgentNames, getAgentConfigs, SWARM_COMMAND_TOOL_COMMANDS, SWARM_COMMAND_TOOL_ALLOWLIST, HUMAN_ONLY_SWARM_COMMANDS, classifySwarmCommandToolUse, classifySwarmCommandChatFallbackUse, detectPosixWrites, detectWindowsWrites, resolveWriteTargets, getAgentSession, parseLeanLaneIndex, computeLaneRuntimeProfile, MAX_TRACKED_STANDARD_WORKTREE_CALLS, awaitingMergeByCallID, standardWorktreeByCallID, standardWorktreeSerializationSessions, getStandardWorktreeDegradationReason, resetStandardWorktreeIsolationState, checkStandardWorktreeSerializationRelease, sanitizeWorktreeTaskId, preProvisionCollisionCheck, isLaneOwnedByCurrentSession, precreateStandardWorktreeSession, preserveBackgroundWorktreeOwnershipForCallId, preserveDirtyWorktreeForCallId, preserveDirtyWorktreeAtPath, cleanupStandardWorktreeForCallId, abortStandardWorktreeDispatch, finishStandardWorktreeDispatch, readLaneEnvFileFromDisk, _internals22 as _internals1, redactSecrets, prWorkflowSessionFileStem, ensurePrWorkflowSafeParentDirectory, writePrWorkflowAtomicJson, PrWorkflowCheckoutMutationTimeoutError, withPrWorkflowCheckoutMutationLock, PR_REVIEW_REPORT_VERDICTS, allowedPrReviewReportVerdicts, normalizePrReviewPartialBaseCoverageRecord, rollbackPrReviewPartialBaseCoverageAdmission, readPrReviewTerminalCoverageForReport, PR_REVIEW_REQUIRED_MICRO_LANE_IDS, PR_REVIEW_DEPTH_TIER_THRESHOLDS, PR_REVIEW_BASE_LANE_FLOORS, PR_REVIEW_TIER_L_CONSOLIDATED_LANE_FLOOR, PR_REVIEW_MICRO_LANE_FLOORS, computePrReviewDepthTier, MAX_PR_FEEDBACK_INVENTORY_AMENDMENTS, activatePrWorkflow, readPrWorkflowGateState, submitPrReviewResult, withPrWorkflowCheckoutPreparationLock, withInactivePrWorkflowCheckoutRestoreLock, clearPrWorkflowGateState, terminalizePrWorkflowGateForSession2 as terminalizePrWorkflowGateForSession, collectPrWorkflowPendingLaneLiveness, settlePresumedStalePrWorkflowLanes, abortPrWorkflow, recoverArmedPrWorkflow, bindPrWorkflowHead, rebindPrFeedbackHead, bindPrReviewBase, assertCurrentCheckoutHead, assertPrReviewCleanCheckout, enforcePrWorkflowDispatchLanesAsync, PrReviewResilienceCircuitOpenError, PrReviewResilienceRetryExhaustedError, enforcePrReviewBaseDimensions, rollbackPrReviewBaseAdmissionIfUnlaunched, admitPrReviewPartialBaseCoverage2 as admitPrReviewPartialBaseCoverage, assertPrReviewBaseCoverageSettled2 as assertPrReviewBaseCoverageSettled, recordPrReviewValidationBatch, assertPrReviewValidationSettled, declarePrFeedbackInventory, enforcePrFeedbackVerificationOwnership, assertPrFeedbackVerificationSettled, recordPrFeedbackStageA, recordPrFeedbackGateBatch, assertPrFeedbackGatePhaseSettled, assertPrFeedbackReadyToPublish, invalidatePrFeedbackPublication, describePrWorkflowPublicationSection, findDanglingLivePublicationGeneration, recordPrFeedbackPushAttemptResult, resolvePrReviewWriterRunId, markPrReviewTriggerEvaluationComplete, bindPrReviewTriggerLedger, assertPrReviewArtifactBoundary, assertPrReviewArtifactRecordsMatchAuthoritativeVerdicts, markPrReviewArtifactBoundary, markPrReviewHandoffComplete, readPrReviewFinalFindingPolicyForReport, transitionPrReviewToFeedback, declarePrFeedbackScope, resolvePrFeedbackScopeDeclaration, consumePrFeedbackScopeDeclaration, validatePrFeedbackScopeBinding, enforcePrWorkflowToolBefore, readPrReviewReentryBindingContext, hasActivePrReviewReentryAuthorization, reserveActivePrReviewReentryAuthorization, completePrWorkflow, _test_exports2 as _test_exports, normalizePrWorkflowShellCommand, describePrWorkflowRevisionDigestFailure, readAuthoritativePrReviewCriticSettlements, readAuthoritativePrReviewCriticVerdicts, formatPrReviewLaneValidationFailure, validatePrReviewDiscoveryLaneCompletion2 as validatePrReviewDiscoveryLaneCompletion, validatePrWorkflowTransportRecovery, prReviewDiscoveryArtifactCoversLane, MAX_SALVAGED_SCHEMA_ERROR_CHARS, readPrWorkflowGateStateForRecovery, handleAcknowledgeSpecDriftCommand, handleAgentsCommand, handleAnalyzeCommand, handleApproveWriteCommand, handleArchiveCommand, handleAutoProceedCommand, handleBenchmarkCommand, handleBrainstormCommand, createSwarmTool, handleCheckpointCommand, DEFAULT_CI_DEADLINE_MS2 as DEFAULT_CI_DEADLINE_MS, createSignalCancellation, handleCiCommand, handleCiSimulateCommand, handleClarifyCommand, safeRealpathSync, buildSynonymIndex, expandTokens, readSynonymMap, createCuratorLLMDelegate, startSnapshotCoordinationInitialization, ensureSnapshotCoordinationReady, retrySnapshotCoordinationInitialization, getSnapshotCoordinationStatus, beginSnapshotCoordinationReset, closeSnapshotCoordinationInitialization, markSnapshotCoordinationClosing, _snapshotCoordinationInternals, handleCloseCommand, _internals53 as _internals2, normalizeRecommendationEntryIdToken, parseKnowledgeRecommendations, parseKnowledgeRecommendationsWithDiagnostics, parseStructuredCuratorBlocks, readCuratorSummary, writeCuratorSummary, appendCuratorRecommendation, mergeCuratorPhaseSummary, filterPhaseEvents, checkPhaseCompliance, runCuratorInit, runCuratorPhase, applyCuratorKnowledgeUpdates, isHiveEligible, countDistinctProjects, checkHivePromotions, _internals57 as _internals3, createHivePromoterHook, promoteToHive, promoteFromSwarm, createMemoryGateway, handleCodebaseReviewCommand, handleConcurrencyCommand, handleConfigCommand, handleConsolidateCommand, handleCostsCommand, handleCouncilCommand, getCoChangePairs, handleCurateCommand, handleDarkMatterCommand, handleDeepDiveCommand, handleDeepResearchCommand, getHostConfigDir, getPluginCachePaths, getPluginLockFilePaths, VERSION_PINNED_LEAF, discoverVersionPinnedCachePaths, readCachePackageVersion, handleDiagnoseCommand, handleDoctorCommand, handleEvidenceCommand, handleEvidenceSummaryCommand, handleExportCommand, handleFullAutoCommand, computeQualityBudget, computeSastScan, handleGateAuditCommand, handleGateStatsCommand, handleHandoffCommand, handleBlueprintValidateCommand, handleBlueprintCurrentCommand, handleBlueprintHistoryCommand, handleBlueprintDiffCommand, handleBlueprintExportCommand, handleHarnessCandidateValidateCommand, handleHarnessCandidateShowCommand, handleHarnessCandidateDiffCommand, handleHistoryCommand, handleKnowledgeQuarantineCommand, handleKnowledgeRestoreCommand, handleKnowledgeMigrateCommand, handleKnowledgeListCommand, handleKnowledgeUnactionableCommand, handleKnowledgeRetryHardeningCommand, handleLearningCommand, handleLinkCommand, symbols, handleMemoryCommand, handleMemoryStatusCommand, handleMemoryValueLogCommand, handleMemoryMigrateCommand, handleMemoryImportCommand, handleMemoryExportCommand, handlePlanCommand, handlePreflightCommand, handlePromoteCommand, handleQaGatesCommand, handleRecoverCommand, handleResetCommand, handleResetSessionCommand, handleRetrieveCommand, handleReviewCommand, handleRollbackCommand, handleSddStatusCommand, handleSddValidateCommand, handleSddProjectCommand, handleSddCommand, handleSimulateCommand, handleSpecifyCommand, handleStatusCommand, handleSyncPlanCommand, handleTurboCommand, handleUnlinkCommand, handleWriteRetroCommand, handleHelpCommand, isCommandFailure, COMMAND_REGISTRY, VALID_COMMANDS, _internals24 as _internals4, resolveCommand, normalizeSwarmCommandInput, canonicalCommandKey, formatCommandNotFound, executeSwarmCommand };