opencode-swarm 7.184.17 → 7.185.0

package/dist/cli/{index-tyzmjw2s.js → index-qqjqpmhj.js}

@@ -1,21 +1,21 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-dftztz4y.js";
+} from "./index-t9jr6zc7.js";
 import {
   deleteCoordinationState,
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-cftva3pa.js";
+} from "./index-7jqnckzg.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-pwcbtbhd.js";
+} from "./index-s5xmvt3k.js";
 import {
   observeStoreHealth
-} from "./index-yx5z4200.js";
+} from "./index-p544ppcp.js";
 import {
   withEvidenceLock
 } from "./index-6cjpmvpa.js";
@@ -29,7 +29,7 @@ import {
 } from "./index-mc72pk74.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-bntwj2tp.js";
+} from "./index-580t912d.js";
 import {
   exports_external,
   init_zod
@@ -43,6 +43,397 @@ init_zod();
 import { createHash } from "crypto";
 import * as fs from "fs";
 import * as path from "path";
+
+// src/providers/host-guards.ts
+var IPV4_PRIVATE = /^10\./;
+var IPV4_LOOPBACK = /^127\./;
+var IPV4_LINK_LOCAL = /^169\.254\./;
+var IPV4_PRIVATE_172 = /^172\.(1[6-9]|2\d|3[0-1])\./;
+var IPV4_PRIVATE_192 = /^192\.168\./;
+var IPV4_ZERO_NETWORK = /^0\./;
+var IPV6_LINK_LOCAL = /^fe80:/i;
+var IPV6_UNIQUE_LOCAL = /^f[cd][0-9a-f]{2}:/i;
+function containsControlCharacters(value) {
+  for (const ch of value) {
+    const cp = ch.codePointAt(0);
+    if (cp !== undefined && (cp <= 31 || cp === 127)) {
+      return true;
+    }
+  }
+  return false;
+}
+function hasNonAsciiHostname(hostname) {
+  for (const ch of hostname) {
+    const cp = ch.codePointAt(0);
+    if (cp !== undefined && cp > 127)
+      return true;
+  }
+  return false;
+}
+function isIpv4MappedPrivateHost(inner) {
+  if (IPV4_PRIVATE.test(inner) || IPV4_LOOPBACK.test(inner) || IPV4_LINK_LOCAL.test(inner) || IPV4_PRIVATE_172.test(inner) || IPV4_PRIVATE_192.test(inner) || IPV4_ZERO_NETWORK.test(inner)) {
+    return true;
+  }
+  const firstSegment = inner.split(":", 1)[0];
+  if (!firstSegment)
+    return false;
+  const firstWord = Number.parseInt(firstSegment, 16);
+  if (!Number.isFinite(firstWord))
+    return false;
+  return firstWord >= 0 && firstWord <= 255 || firstWord >= 2560 && firstWord <= 2815 || firstWord >= 32512 && firstWord <= 32767 || firstWord === 43518 || firstWord >= 44048 && firstWord <= 44063 || firstWord === 49320;
+}
+function isPrivateHost(url) {
+  const host = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (host === "localhost" || host === "::1" || host === "0.0.0.0" || IPV4_LOOPBACK.test(host) || IPV4_ZERO_NETWORK.test(host)) {
+    return true;
+  }
+  if (host.startsWith("localhost") || host === "localhost.com") {
+    return true;
+  }
+  if (host.endsWith(".localhost")) {
+    return true;
+  }
+  if (IPV4_PRIVATE.test(host) || IPV4_LINK_LOCAL.test(host) || IPV4_PRIVATE_172.test(host) || IPV4_PRIVATE_192.test(host) || IPV6_LINK_LOCAL.test(host) || IPV6_UNIQUE_LOCAL.test(host)) {
+    return true;
+  }
+  if (host.startsWith("::ffff:")) {
+    const inner = host.slice(7);
+    if (isIpv4MappedPrivateHost(inner)) {
+      return true;
+    }
+  }
+  return false;
+}
+function hasPunycodeLabel(host) {
+  const lower = host.toLowerCase();
+  return lower.split(".").some((label) => label.startsWith("xn--"));
+}
+
+// src/providers/forge-provider.ts
+var GITHUB_CANONICAL_HOST = "github.com";
+var GITLAB_PUBLIC_HOST = "gitlab.com";
+function isGitLabIndicatingHost(host) {
+  const lower = host.toLowerCase();
+  if (lower === GITLAB_PUBLIC_HOST)
+    return true;
+  if (!lower.startsWith("gitlab."))
+    return false;
+  const remainder = lower.slice("gitlab.".length);
+  if (remainder.length === 0)
+    return false;
+  return remainder.split(".").every((label) => /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(label));
+}
+function isForgePrUrl(url, configured) {
+  return canonicalForgePrUrl(url, configured) !== null;
+}
+function detectForgeFromUrl(url, configured) {
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:")
+      return null;
+    const host = parsed.hostname.toLowerCase();
+    if (hasUserinfo(parsed))
+      return null;
+    if (hasNonAsciiHostname(host) || hasPunycodeLabel(host))
+      return null;
+    if (isPrivateHost(parsed))
+      return null;
+    if (host === GITHUB_CANONICAL_HOST) {
+      return { provider: "github", host };
+    }
+    if (isGitLabIndicatingHost(host)) {
+      return { provider: "gitlab", host };
+    }
+    if (configured && configured.provider === "gitlab" && host === configured.host) {
+      return { provider: "gitlab", host };
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function hasUserinfo(parsed) {
+  return parsed.username !== "" || parsed.password !== "";
+}
+function isConfiguredGitLabHost(host, configured) {
+  return configured !== undefined && configured.provider === "gitlab" && host === configured.host;
+}
+var GITLAB_PROJECT_PATH_PATTERN = /^\/(.+)\/([^/]+)\/-\/(merge_requests|issues)\/(\d+)\/?$/;
+function matchForgeResourceUrl(url, resource, configured) {
+  if (containsControlCharacters(url))
+    return null;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return null;
+  }
+  if (parsed.protocol !== "https:")
+    return null;
+  if (hasUserinfo(parsed))
+    return null;
+  const host = parsed.hostname.toLowerCase();
+  if (hasNonAsciiHostname(host) || hasPunycodeLabel(host))
+    return null;
+  if (isPrivateHost(parsed))
+    return null;
+  try {
+    if (containsControlCharacters(decodeURIComponent(parsed.pathname))) {
+      return null;
+    }
+  } catch {
+    return null;
+  }
+  if (host === GITHUB_CANONICAL_HOST) {
+    const m = parsed.pathname.match(new RegExp(`^\\/([^/]+)\\/([^/]+)\\/${resource === "pull" ? "pull" : "issues"}\\/([0-9]+)\\/?$`));
+    if (!m)
+      return null;
+    if (containsControlCharacters(m[1]) || containsControlCharacters(m[2])) {
+      return null;
+    }
+    const number = Number.parseInt(m[3], 10);
+    if (!Number.isSafeInteger(number) || number <= 0)
+      return null;
+    return { provider: "github", host, owner: m[1], repo: m[2], number };
+  }
+  if (isGitLabIndicatingHost(host) || isConfiguredGitLabHost(host, configured)) {
+    const resourceSegment = resource === "pull" ? "merge_requests" : "issues";
+    const m = parsed.pathname.match(GITLAB_PROJECT_PATH_PATTERN);
+    if (!m || m[3] !== resourceSegment)
+      return null;
+    if (containsControlCharacters(m[1]) || containsControlCharacters(m[2])) {
+      return null;
+    }
+    const number = Number.parseInt(m[4], 10);
+    if (!Number.isSafeInteger(number) || number <= 0)
+      return null;
+    return { provider: "gitlab", host, owner: m[1], repo: m[2], number };
+  }
+  return null;
+}
+function parseForgeRemoteUrl(remoteUrl) {
+  const https = remoteUrl.match(/^https:\/\/([^/]+)\/(.+?)(?:\.git)?\/?$/i);
+  if (https) {
+    return remotePathResult(https[1], https[2]);
+  }
+  const ssh = remoteUrl.match(/^git@([^:/]+):(.+?)(?:\.git)?$/i);
+  if (ssh) {
+    return remotePathResult(ssh[1], ssh[2]);
+  }
+  return null;
+}
+function remotePathResult(rawHost, projectPath) {
+  const host = rawHost.toLowerCase();
+  if (!host || hasNonAsciiHostname(host) || hasPunycodeLabel(host))
+    return null;
+  if (!isGitLabIndicatingHost(host) && host !== GITHUB_CANONICAL_HOST) {
+    return null;
+  }
+  const segments = projectPath.split("/").filter((s) => s.length > 0);
+  if (segments.length < 2)
+    return null;
+  const repo = segments[segments.length - 1];
+  const owner = segments.slice(0, -1).join("/");
+  if (!owner || !repo)
+    return null;
+  if (containsControlCharacters(owner) || containsControlCharacters(repo)) {
+    return null;
+  }
+  return {
+    provider: host === GITHUB_CANONICAL_HOST ? "github" : "gitlab",
+    host,
+    owner,
+    repo
+  };
+}
+function buildPrUrl(ctx, owner, repo, number) {
+  if (ctx.provider === "gitlab") {
+    return `https://${ctx.host}/${owner}/${repo}/-/merge_requests/${number}`;
+  }
+  return `https://github.com/${owner}/${repo}/pull/${number}`;
+}
+function buildIssueUrl(ctx, owner, repo, number) {
+  if (ctx.provider === "gitlab") {
+    return `https://${ctx.host}/${owner}/${repo}/-/issues/${number}`;
+  }
+  return `https://github.com/${owner}/${repo}/issues/${number}`;
+}
+function canonicalForgePrUrl(value, configured) {
+  try {
+    const url = new URL(value);
+    if (url.protocol !== "https:")
+      return null;
+    if (hasUserinfo(url))
+      return null;
+    const host = url.hostname.toLowerCase();
+    if (hasNonAsciiHostname(host) || hasPunycodeLabel(host))
+      return null;
+    if (isPrivateHost(url))
+      return null;
+    if (host === GITHUB_CANONICAL_HOST) {
+      const m = url.pathname.match(/^\/([^/]+)\/([^/]+)\/pull\/(\d+)\/?$/);
+      if (!m)
+        return null;
+      const number = Number(m[3]);
+      if (!Number.isSafeInteger(number) || number <= 0)
+        return null;
+      return `github.com/${m[1].toLowerCase()}/${m[2].toLowerCase()}/pull/${number}`;
+    }
+    if (isGitLabIndicatingHost(host) || isConfiguredGitLabHost(host, configured)) {
+      const m = url.pathname.match(/^\/(.+)\/([^/]+)\/-\/merge_requests\/(\d+)\/?$/);
+      if (!m)
+        return null;
+      const number = Number(m[3]);
+      if (!Number.isSafeInteger(number) || number <= 0)
+        return null;
+      return `${host}/${m[1].toLowerCase()}/${m[2].toLowerCase()}/-/merge_requests/${number}`;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function getProviderCapabilities(provider) {
+  if (provider === "gitlab") {
+    return {
+      statusCheckRollup: false,
+      reviewDecision: false,
+      mergeStateStatus: false
+    };
+  }
+  return {
+    statusCheckRollup: true,
+    reviewDecision: true,
+    mergeStateStatus: true
+  };
+}
+function resolveForgeContextFromPluginConfig(pluginConfig, remotes) {
+  if (!pluginConfig?.forge)
+    return null;
+  const forge = pluginConfig.forge;
+  const provider = forge.provider === "github" || forge.provider === "gitlab" || forge.provider === "auto" ? forge.provider : undefined;
+  const selection = resolveProviderSelection({
+    config: { provider, baseUrl: forge.base_url },
+    remotes
+  });
+  return selection.ok ? selection.context : null;
+}
+function invalidBaseUrlError(reason) {
+  return `Invalid forge.base_url (${reason}) \u2014 provider config rejected; base_url must be an HTTPS URL on a public, ASCII host and is never a trust whitelist.`;
+}
+function resolveProviderSelection(input) {
+  const provider = input.config?.provider ?? "auto";
+  const remotes = input.remotes;
+  let baseUrlHost;
+  const rawBaseUrl = input.config?.baseUrl ?? input.config?.base_url;
+  if (rawBaseUrl !== undefined) {
+    const raw = rawBaseUrl.trim();
+    let parsed;
+    try {
+      parsed = new URL(raw);
+    } catch {
+      return { ok: false, error: invalidBaseUrlError("not a valid URL") };
+    }
+    if (parsed.protocol !== "https:") {
+      return { ok: false, error: invalidBaseUrlError("must use HTTPS") };
+    }
+    const host = parsed.hostname.toLowerCase();
+    if (hasNonAsciiHostname(host) || hasPunycodeLabel(host)) {
+      return {
+        ok: false,
+        error: invalidBaseUrlError("non-ASCII (IDN) hosts are not allowed")
+      };
+    }
+    if (isPrivateHost(parsed)) {
+      return {
+        ok: false,
+        error: invalidBaseUrlError("private or localhost hosts are not allowed")
+      };
+    }
+    if (!host) {
+      return { ok: false, error: invalidBaseUrlError("empty host") };
+    }
+    baseUrlHost = host;
+  }
+  if (provider === "github") {
+    if (baseUrlHost !== undefined) {
+      return {
+        ok: false,
+        error: 'Provider config conflict: forge.provider is "github" but forge.base_url is set \u2014 GitHub has a fixed base (github.com) and accepts no override. Remove base_url or set provider to "gitlab".'
+      };
+    }
+    return {
+      ok: true,
+      context: { provider: "github", host: GITHUB_CANONICAL_HOST }
+    };
+  }
+  if (baseUrlHost !== undefined) {
+    return { ok: true, context: { provider: "gitlab", host: baseUrlHost } };
+  }
+  const gitlabHosts = new Set;
+  let sawGithub = false;
+  let sawUnrecognized = false;
+  for (const remote of remotes) {
+    const parsed = parseForgeRemoteUrl(remote);
+    if (!parsed) {
+      sawUnrecognized = true;
+      continue;
+    }
+    if (parsed.provider === "github") {
+      sawGithub = true;
+    } else {
+      gitlabHosts.add(parsed.host);
+    }
+  }
+  if (provider === "gitlab") {
+    if (gitlabHosts.size === 1 && !sawGithub && !sawUnrecognized) {
+      return {
+        ok: true,
+        context: { provider: "gitlab", host: [...gitlabHosts][0] }
+      };
+    }
+    return {
+      ok: false,
+      error: 'Provider config incomplete: forge.provider is "gitlab" but no forge.base_url is set and the git remotes do not unanimously indicate a single GitLab host \u2014 set forge.base_url (e.g. https://gitlab.example.com) in config.'
+    };
+  }
+  if (sawGithub && gitlabHosts.size > 0) {
+    return {
+      ok: false,
+      error: "Provider selection ambiguous: git remotes indicate both GitHub and GitLab \u2014 set forge.provider (and forge.base_url for self-hosted GitLab) explicitly in config."
+    };
+  }
+  if (sawUnrecognized) {
+    return {
+      ok: false,
+      error: "Provider selection ambiguous: a git remote host matches no recognized provider (generic self-hosted) \u2014 set forge.provider and forge.base_url explicitly in config."
+    };
+  }
+  if (sawGithub) {
+    return {
+      ok: true,
+      context: { provider: "github", host: GITHUB_CANONICAL_HOST }
+    };
+  }
+  if (gitlabHosts.size === 1) {
+    return {
+      ok: true,
+      context: { provider: "gitlab", host: [...gitlabHosts][0] }
+    };
+  }
+  if (gitlabHosts.size > 1) {
+    return {
+      ok: false,
+      error: "Provider selection ambiguous: git remotes indicate multiple different GitLab hosts \u2014 set forge.provider and forge.base_url explicitly in config."
+    };
+  }
+  return {
+    ok: false,
+    error: "Provider selection failed: no workflow-relevant git remote and no forge.base_url \u2014 set forge.provider (and forge.base_url for self-hosted GitLab) explicitly in config."
+  };
+}
+
+// src/background/pr-subscriptions.ts
 var PR_SUBSCRIPTIONS_FILE = "pr-monitor/subscriptions.jsonl";
 var PR_SUBSCRIPTIONS_CHECKPOINT_FILE = "pr-monitor/subscriptions.checkpoint.json";
 var PR_SUBSCRIPTIONS_AUDIT_FILE = "pr-monitor/subscriptions.audit.jsonl";
@@ -115,8 +506,12 @@ var RecordSchema = exports_external.object({
   correlationId: exports_external.string().min(1),
   sessionID: exports_external.string().min(1),
   prNumber: exports_external.number().int().positive(),
-  repoFullName: exports_external.string().regex(/^[^/]+\/[^/]+$/, "Must be owner/repo format"),
-  prUrl: exports_external.string().min(1).regex(/^https:\/\/github\.com\/[^/]+\/[^/]+\/pull\/\d+$/, "Must be a valid GitHub PR URL"),
+  repoFullName: exports_external.string().regex(/^[^/\s]+(?:\/[^/\s]+)+$/, "Must be owner/repo format (GitLab nested namespaces allowed)"),
+  prUrl: exports_external.string().min(1),
+  forge: exports_external.object({
+    provider: exports_external.literal("gitlab"),
+    host: exports_external.string().min(1)
+  }).optional(),
   headRefOid: exports_external.string().optional(),
   lastCheckedAt: exports_external.number(),
   lastCommentId: exports_external.string().optional(),
@@ -134,7 +529,21 @@ var RecordSchema = exports_external.object({
   customPollIntervalSeconds: exports_external.number().int().positive().optional(),
   customFailureThreshold: exports_external.number().int().min(0).optional(),
   customCooldownSeconds: exports_external.number().int().min(0).optional()
-}).strict();
+}).strict().superRefine((record, ctx) => {
+  if (isForgePrUrl(record.prUrl))
+    return;
+  if (record.forge && isForgePrUrl(record.prUrl, {
+    provider: record.forge.provider,
+    host: record.forge.host
+  })) {
+    return;
+  }
+  ctx.addIssue({
+    code: exports_external.ZodIssueCode.custom,
+    path: ["prUrl"],
+    message: "Must be a valid PR URL (GitHub /pull/N or GitLab /-/merge_requests/N)"
+  });
+});
 var TerminalSummarySchema = exports_external.object({
   removed: exports_external.number().int().min(0),
   expired: exports_external.number().int().min(0),
@@ -2050,6 +2459,7 @@ async function subscribe(directory, input) {
         prNumber: input.prNumber,
         repoFullName: input.repoFullName,
         prUrl: input.prUrl,
+        ...input.forge ? { forge: input.forge } : {},
         lastCheckedAt: now,
         isWatching: true,
         hasUnaddressedEvents: false,
@@ -2086,6 +2496,7 @@ async function subscribe(directory, input) {
       prNumber: input.prNumber,
       repoFullName: input.repoFullName,
       prUrl: input.prUrl,
+      ...input.forge ? { forge: input.forge } : {},
       lastCheckedAt: now,
       isWatching: true,
       hasUnaddressedEvents: false,
@@ -2463,4 +2874,4 @@ var _internals = {
   writeCheckpointFile
 };
 
-export { PR_SUBSCRIPTIONS_FILE, PR_SUBSCRIPTIONS_CHECKPOINT_FILE, PR_SUBSCRIPTIONS_AUDIT_FILE, PR_SUBSCRIPTION_LIMITS, setOnSubscriptionCreated, registerPrMonitorWorkerHandler, removePrMonitorWorkerHandler, ensurePrSubscriptionDispatcherInstalled, PrSubscriptionCapacityError, isPrSubscriptionCapacityError, buildCorrelationId, subscribe, unsubscribe, listActive, lookupByPr, updateSnapshot, sweepStale, getPrSubscriptionHealth, _internals };
+export { containsControlCharacters, hasNonAsciiHostname, isPrivateHost, detectForgeFromUrl, matchForgeResourceUrl, parseForgeRemoteUrl, buildPrUrl, buildIssueUrl, canonicalForgePrUrl, getProviderCapabilities, resolveForgeContextFromPluginConfig, PR_SUBSCRIPTIONS_FILE, PR_SUBSCRIPTIONS_CHECKPOINT_FILE, PR_SUBSCRIPTIONS_AUDIT_FILE, PR_SUBSCRIPTION_LIMITS, setOnSubscriptionCreated, registerPrMonitorWorkerHandler, removePrMonitorWorkerHandler, ensurePrSubscriptionDispatcherInstalled, PrSubscriptionCapacityError, isPrSubscriptionCapacityError, buildCorrelationId, subscribe, unsubscribe, listActive, lookupByPr, updateSnapshot, sweepStale, getPrSubscriptionHealth, _internals };

package/dist/cli/{index-hx4jkj05.js → index-rcx4kb02.js}

@@ -7,7 +7,7 @@ import {
   loadPlan,
   transientBackoff,
   updateTaskCheckpointReceipt
-} from "./index-gx03v1y5.js";
+} from "./index-6wy9m25t.js";
 import {
   tool
 } from "./index-9nyqt3kb.js";
@@ -20,10 +20,10 @@ import {
 } from "./index-g4fs6z4e.js";
 import {
   readLedgerEvents
-} from "./index-a7y29h92.js";
+} from "./index-hx9vyvx0.js";
 import {
   appendCoreEventSync
-} from "./index-7rzgdcvc.js";
+} from "./index-gemq38en.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
@@ -38,7 +38,7 @@ import {
 } from "./index-ejhxgyvm.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-kxacpqwf.js";
+} from "./index-djen6c7q.js";
 import {
   init_git_executable,
   resolveGitExecutable

package/dist/cli/{index-48we80k1.js → index-rp0pyywc.js}

@@ -1,19 +1,19 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-dftztz4y.js";
+} from "./index-t9jr6zc7.js";
 import {
   observeReceiptTransition
-} from "./index-yx5z4200.js";
+} from "./index-p544ppcp.js";
 import {
   resolveHiveEventsPath
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-4g4sr4ah.js";
+} from "./index-zyz0xp2b.js";
 import {
   atomicWriteFile
-} from "./index-2y9b45jj.js";
+} from "./index-h5f5q60s.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";
@@ -28,11 +28,11 @@ import {
 } from "./index-7g4c7s5r.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-kxacpqwf.js";
+} from "./index-djen6c7q.js";
 import {
   KnowledgeConfigSchema,
   init_schema
-} from "./index-0pvvktht.js";
+} from "./index-w7sftxdy.js";
 import {
   init_logger,
   warn
@@ -2946,7 +2946,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
     }
     let bumps = 0;
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-z3fee1x1.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-yc20na25.js");
       bumps = await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-denfahc5.js → index-s0c1wxtt.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   writeSpeckitCheckoffLedger
-} from "./index-50q314wd.js";
+} from "./index-fmxty2h3.js";
 import {
   validateSpecContent
 } from "./index-0725jpp7.js";

package/dist/cli/{index-pwcbtbhd.js → index-s5xmvt3k.js}

@@ -11,7 +11,7 @@ import {
 } from "./index-mc72pk74.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-bntwj2tp.js";
+} from "./index-580t912d.js";
 
 // src/db/project-db.ts
 import { existsSync, mkdirSync, unlinkSync } from "fs";

package/dist/cli/{index-mfqge140.js → index-sz755xt1.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-jtg0zsnx.js";
+} from "./index-62z1vsvf.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,

package/dist/cli/{index-dftztz4y.js → index-t9jr6zc7.js}

@@ -10,7 +10,7 @@ import {
   readCachedTextFile,
   wasObservedToExist,
   wasRecentlyWrittenByThisProcess
-} from "./index-bntwj2tp.js";
+} from "./index-580t912d.js";
 import {
   warn
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-4v60grax.js → index-tmd5j8kh.js}

@@ -3,7 +3,7 @@ import {
   EvaluationRunV1Schema,
   GateAuditResultV1Schema,
   getProtectedEvaluationRunIds
-} from "./index-jtg0zsnx.js";
+} from "./index-62z1vsvf.js";
 import {
   TASK_WORKFLOW_SCHEMA_MARKER,
   deriveApplicableGateSet,
@@ -12,11 +12,11 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-m8342y3n.js";
+} from "./index-qccnny3g.js";
 import {
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-dftztz4y.js";
+} from "./index-t9jr6zc7.js";
 import {
   bunWrite
 } from "./index-2s7dvzff.js";
@@ -33,7 +33,7 @@ import {
 } from "./index-t7hmqgjy.js";
 import {
   invalidateCachedArtifact
-} from "./index-bntwj2tp.js";
+} from "./index-580t912d.js";
 import {
   ZodError,
   init_zod

package/dist/cli/{index-bktc2g9n.js → index-v5k5jw0r.js}

@@ -2,10 +2,10 @@
 import {
   init_loader,
   loadPluginConfigWithMeta
-} from "./index-kxacpqwf.js";
+} from "./index-djen6c7q.js";
 import {
   init_schema
-} from "./index-0pvvktht.js";
+} from "./index-w7sftxdy.js";
 import {
   DEFAULT_WORKTREE_ISOLATION_CONFIG,
   init_constants

package/dist/cli/{index-wxr5me67.js → index-vfr3z9rv.js}

@@ -12,7 +12,7 @@ import {
   PluginConfigSchema,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-0pvvktht.js";
+} from "./index-w7sftxdy.js";
 import {
   ALL_AGENT_NAMES,
   TOOL_NAME_SET,
@@ -1087,6 +1087,10 @@ function validateConfigKey(path2, value) {
       emitObjectTypeMismatch("docs", value, findings);
       break;
     }
+    case "forge": {
+      emitObjectTypeMismatch("forge", value, findings);
+      break;
+    }
     case "design_docs": {
       emitObjectTypeMismatch("design_docs", value, findings);
       break;