opencode-swarm 7.184.17 → 7.185.1

package/dist/cli/{index-7r3pkgma.js → index-9g61bfj9.js}

@@ -4,7 +4,7 @@ import {
   getProjectDb,
   projectDbExists,
   withImmediateTransaction
-} from "./index-pwcbtbhd.js";
+} from "./index-74yxwf8y.js";
 import {
   derivePlanId,
   derivePlanIdentityHash

package/dist/cli/{index-wxr5me67.js → index-9h93zjm3.js}

@@ -12,7 +12,7 @@ import {
   PluginConfigSchema,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-0pvvktht.js";
+} from "./index-rr1dggfe.js";
 import {
   ALL_AGENT_NAMES,
   TOOL_NAME_SET,
@@ -1087,6 +1087,10 @@ function validateConfigKey(path2, value) {
       emitObjectTypeMismatch("docs", value, findings);
       break;
     }
+    case "forge": {
+      emitObjectTypeMismatch("forge", value, findings);
+      break;
+    }
     case "design_docs": {
       emitObjectTypeMismatch("design_docs", value, findings);
       break;

package/dist/cli/{index-dftztz4y.js → index-afmyp3kt.js}

@@ -10,7 +10,7 @@ import {
   readCachedTextFile,
   wasObservedToExist,
   wasRecentlyWrittenByThisProcess
-} from "./index-bntwj2tp.js";
+} from "./index-yj7etak0.js";
 import {
   warn
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-m8342y3n.js → index-cnbpht7m.js}

@@ -2,14 +2,14 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-7n1pfpnj.js";
+} from "./index-2c6e1p7j.js";
 import {
   isSpawnCwdMissing,
   isSpawnCwdUnreadable
 } from "./index-g4fs6z4e.js";
 import {
   validateSwarmPath
-} from "./index-dftztz4y.js";
+} from "./index-afmyp3kt.js";
 import {
   bunSpawn
 } from "./index-2s7dvzff.js";
@@ -17,7 +17,7 @@ import {
   atomicWriteFile,
   taskEvidencePath,
   withTaskEvidenceLock
-} from "./index-2y9b45jj.js";
+} from "./index-6sffjy74.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";

package/dist/cli/{index-tyzmjw2s.js → index-cp2nerjd.js}

@@ -1,21 +1,21 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-dftztz4y.js";
+} from "./index-afmyp3kt.js";
 import {
   deleteCoordinationState,
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-cftva3pa.js";
+} from "./index-nen885g8.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-pwcbtbhd.js";
+} from "./index-74yxwf8y.js";
 import {
   observeStoreHealth
-} from "./index-yx5z4200.js";
+} from "./index-xgdypzch.js";
 import {
   withEvidenceLock
 } from "./index-6cjpmvpa.js";
@@ -29,7 +29,7 @@ import {
 } from "./index-mc72pk74.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-bntwj2tp.js";
+} from "./index-yj7etak0.js";
 import {
   exports_external,
   init_zod
@@ -43,6 +43,397 @@ init_zod();
 import { createHash } from "crypto";
 import * as fs from "fs";
 import * as path from "path";
+
+// src/providers/host-guards.ts
+var IPV4_PRIVATE = /^10\./;
+var IPV4_LOOPBACK = /^127\./;
+var IPV4_LINK_LOCAL = /^169\.254\./;
+var IPV4_PRIVATE_172 = /^172\.(1[6-9]|2\d|3[0-1])\./;
+var IPV4_PRIVATE_192 = /^192\.168\./;
+var IPV4_ZERO_NETWORK = /^0\./;
+var IPV6_LINK_LOCAL = /^fe80:/i;
+var IPV6_UNIQUE_LOCAL = /^f[cd][0-9a-f]{2}:/i;
+function containsControlCharacters(value) {
+  for (const ch of value) {
+    const cp = ch.codePointAt(0);
+    if (cp !== undefined && (cp <= 31 || cp === 127)) {
+      return true;
+    }
+  }
+  return false;
+}
+function hasNonAsciiHostname(hostname) {
+  for (const ch of hostname) {
+    const cp = ch.codePointAt(0);
+    if (cp !== undefined && cp > 127)
+      return true;
+  }
+  return false;
+}
+function isIpv4MappedPrivateHost(inner) {
+  if (IPV4_PRIVATE.test(inner) || IPV4_LOOPBACK.test(inner) || IPV4_LINK_LOCAL.test(inner) || IPV4_PRIVATE_172.test(inner) || IPV4_PRIVATE_192.test(inner) || IPV4_ZERO_NETWORK.test(inner)) {
+    return true;
+  }
+  const firstSegment = inner.split(":", 1)[0];
+  if (!firstSegment)
+    return false;
+  const firstWord = Number.parseInt(firstSegment, 16);
+  if (!Number.isFinite(firstWord))
+    return false;
+  return firstWord >= 0 && firstWord <= 255 || firstWord >= 2560 && firstWord <= 2815 || firstWord >= 32512 && firstWord <= 32767 || firstWord === 43518 || firstWord >= 44048 && firstWord <= 44063 || firstWord === 49320;
+}
+function isPrivateHost(url) {
+  const host = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (host === "localhost" || host === "::1" || host === "0.0.0.0" || IPV4_LOOPBACK.test(host) || IPV4_ZERO_NETWORK.test(host)) {
+    return true;
+  }
+  if (host.startsWith("localhost") || host === "localhost.com") {
+    return true;
+  }
+  if (host.endsWith(".localhost")) {
+    return true;
+  }
+  if (IPV4_PRIVATE.test(host) || IPV4_LINK_LOCAL.test(host) || IPV4_PRIVATE_172.test(host) || IPV4_PRIVATE_192.test(host) || IPV6_LINK_LOCAL.test(host) || IPV6_UNIQUE_LOCAL.test(host)) {
+    return true;
+  }
+  if (host.startsWith("::ffff:")) {
+    const inner = host.slice(7);
+    if (isIpv4MappedPrivateHost(inner)) {
+      return true;
+    }
+  }
+  return false;
+}
+function hasPunycodeLabel(host) {
+  const lower = host.toLowerCase();
+  return lower.split(".").some((label) => label.startsWith("xn--"));
+}
+
+// src/providers/forge-provider.ts
+var GITHUB_CANONICAL_HOST = "github.com";
+var GITLAB_PUBLIC_HOST = "gitlab.com";
+function isGitLabIndicatingHost(host) {
+  const lower = host.toLowerCase();
+  if (lower === GITLAB_PUBLIC_HOST)
+    return true;
+  if (!lower.startsWith("gitlab."))
+    return false;
+  const remainder = lower.slice("gitlab.".length);
+  if (remainder.length === 0)
+    return false;
+  return remainder.split(".").every((label) => /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(label));
+}
+function isForgePrUrl(url, configured) {
+  return canonicalForgePrUrl(url, configured) !== null;
+}
+function detectForgeFromUrl(url, configured) {
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:")
+      return null;
+    const host = parsed.hostname.toLowerCase();
+    if (hasUserinfo(parsed))
+      return null;
+    if (hasNonAsciiHostname(host) || hasPunycodeLabel(host))
+      return null;
+    if (isPrivateHost(parsed))
+      return null;
+    if (host === GITHUB_CANONICAL_HOST) {
+      return { provider: "github", host };
+    }
+    if (isGitLabIndicatingHost(host)) {
+      return { provider: "gitlab", host };
+    }
+    if (configured && configured.provider === "gitlab" && host === configured.host) {
+      return { provider: "gitlab", host };
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function hasUserinfo(parsed) {
+  return parsed.username !== "" || parsed.password !== "";
+}
+function isConfiguredGitLabHost(host, configured) {
+  return configured !== undefined && configured.provider === "gitlab" && host === configured.host;
+}
+var GITLAB_PROJECT_PATH_PATTERN = /^\/(.+)\/([^/]+)\/-\/(merge_requests|issues)\/(\d+)\/?$/;
+function matchForgeResourceUrl(url, resource, configured) {
+  if (containsControlCharacters(url))
+    return null;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return null;
+  }
+  if (parsed.protocol !== "https:")
+    return null;
+  if (hasUserinfo(parsed))
+    return null;
+  const host = parsed.hostname.toLowerCase();
+  if (hasNonAsciiHostname(host) || hasPunycodeLabel(host))
+    return null;
+  if (isPrivateHost(parsed))
+    return null;
+  try {
+    if (containsControlCharacters(decodeURIComponent(parsed.pathname))) {
+      return null;
+    }
+  } catch {
+    return null;
+  }
+  if (host === GITHUB_CANONICAL_HOST) {
+    const m = parsed.pathname.match(new RegExp(`^\\/([^/]+)\\/([^/]+)\\/${resource === "pull" ? "pull" : "issues"}\\/([0-9]+)\\/?$`));
+    if (!m)
+      return null;
+    if (containsControlCharacters(m[1]) || containsControlCharacters(m[2])) {
+      return null;
+    }
+    const number = Number.parseInt(m[3], 10);
+    if (!Number.isSafeInteger(number) || number <= 0)
+      return null;
+    return { provider: "github", host, owner: m[1], repo: m[2], number };
+  }
+  if (isGitLabIndicatingHost(host) || isConfiguredGitLabHost(host, configured)) {
+    const resourceSegment = resource === "pull" ? "merge_requests" : "issues";
+    const m = parsed.pathname.match(GITLAB_PROJECT_PATH_PATTERN);
+    if (!m || m[3] !== resourceSegment)
+      return null;
+    if (containsControlCharacters(m[1]) || containsControlCharacters(m[2])) {
+      return null;
+    }
+    const number = Number.parseInt(m[4], 10);
+    if (!Number.isSafeInteger(number) || number <= 0)
+      return null;
+    return { provider: "gitlab", host, owner: m[1], repo: m[2], number };
+  }
+  return null;
+}
+function parseForgeRemoteUrl(remoteUrl) {
+  const https = remoteUrl.match(/^https:\/\/([^/]+)\/(.+?)(?:\.git)?\/?$/i);
+  if (https) {
+    return remotePathResult(https[1], https[2]);
+  }
+  const ssh = remoteUrl.match(/^git@([^:/]+):(.+?)(?:\.git)?$/i);
+  if (ssh) {
+    return remotePathResult(ssh[1], ssh[2]);
+  }
+  return null;
+}
+function remotePathResult(rawHost, projectPath) {
+  const host = rawHost.toLowerCase();
+  if (!host || hasNonAsciiHostname(host) || hasPunycodeLabel(host))
+    return null;
+  if (!isGitLabIndicatingHost(host) && host !== GITHUB_CANONICAL_HOST) {
+    return null;
+  }
+  const segments = projectPath.split("/").filter((s) => s.length > 0);
+  if (segments.length < 2)
+    return null;
+  const repo = segments[segments.length - 1];
+  const owner = segments.slice(0, -1).join("/");
+  if (!owner || !repo)
+    return null;
+  if (containsControlCharacters(owner) || containsControlCharacters(repo)) {
+    return null;
+  }
+  return {
+    provider: host === GITHUB_CANONICAL_HOST ? "github" : "gitlab",
+    host,
+    owner,
+    repo
+  };
+}
+function buildPrUrl(ctx, owner, repo, number) {
+  if (ctx.provider === "gitlab") {
+    return `https://${ctx.host}/${owner}/${repo}/-/merge_requests/${number}`;
+  }
+  return `https://github.com/${owner}/${repo}/pull/${number}`;
+}
+function buildIssueUrl(ctx, owner, repo, number) {
+  if (ctx.provider === "gitlab") {
+    return `https://${ctx.host}/${owner}/${repo}/-/issues/${number}`;
+  }
+  return `https://github.com/${owner}/${repo}/issues/${number}`;
+}
+function canonicalForgePrUrl(value, configured) {
+  try {
+    const url = new URL(value);
+    if (url.protocol !== "https:")
+      return null;
+    if (hasUserinfo(url))
+      return null;
+    const host = url.hostname.toLowerCase();
+    if (hasNonAsciiHostname(host) || hasPunycodeLabel(host))
+      return null;
+    if (isPrivateHost(url))
+      return null;
+    if (host === GITHUB_CANONICAL_HOST) {
+      const m = url.pathname.match(/^\/([^/]+)\/([^/]+)\/pull\/(\d+)\/?$/);
+      if (!m)
+        return null;
+      const number = Number(m[3]);
+      if (!Number.isSafeInteger(number) || number <= 0)
+        return null;
+      return `github.com/${m[1].toLowerCase()}/${m[2].toLowerCase()}/pull/${number}`;
+    }
+    if (isGitLabIndicatingHost(host) || isConfiguredGitLabHost(host, configured)) {
+      const m = url.pathname.match(/^\/(.+)\/([^/]+)\/-\/merge_requests\/(\d+)\/?$/);
+      if (!m)
+        return null;
+      const number = Number(m[3]);
+      if (!Number.isSafeInteger(number) || number <= 0)
+        return null;
+      return `${host}/${m[1].toLowerCase()}/${m[2].toLowerCase()}/-/merge_requests/${number}`;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function getProviderCapabilities(provider) {
+  if (provider === "gitlab") {
+    return {
+      statusCheckRollup: false,
+      reviewDecision: false,
+      mergeStateStatus: false
+    };
+  }
+  return {
+    statusCheckRollup: true,
+    reviewDecision: true,
+    mergeStateStatus: true
+  };
+}
+function resolveForgeContextFromPluginConfig(pluginConfig, remotes) {
+  if (!pluginConfig?.forge)
+    return null;
+  const forge = pluginConfig.forge;
+  const provider = forge.provider === "github" || forge.provider === "gitlab" || forge.provider === "auto" ? forge.provider : undefined;
+  const selection = resolveProviderSelection({
+    config: { provider, baseUrl: forge.base_url },
+    remotes
+  });
+  return selection.ok ? selection.context : null;
+}
+function invalidBaseUrlError(reason) {
+  return `Invalid forge.base_url (${reason}) \u2014 provider config rejected; base_url must be an HTTPS URL on a public, ASCII host and is never a trust whitelist.`;
+}
+function resolveProviderSelection(input) {
+  const provider = input.config?.provider ?? "auto";
+  const remotes = input.remotes;
+  let baseUrlHost;
+  const rawBaseUrl = input.config?.baseUrl ?? input.config?.base_url;
+  if (rawBaseUrl !== undefined) {
+    const raw = rawBaseUrl.trim();
+    let parsed;
+    try {
+      parsed = new URL(raw);
+    } catch {
+      return { ok: false, error: invalidBaseUrlError("not a valid URL") };
+    }
+    if (parsed.protocol !== "https:") {
+      return { ok: false, error: invalidBaseUrlError("must use HTTPS") };
+    }
+    const host = parsed.hostname.toLowerCase();
+    if (hasNonAsciiHostname(host) || hasPunycodeLabel(host)) {
+      return {
+        ok: false,
+        error: invalidBaseUrlError("non-ASCII (IDN) hosts are not allowed")
+      };
+    }
+    if (isPrivateHost(parsed)) {
+      return {
+        ok: false,
+        error: invalidBaseUrlError("private or localhost hosts are not allowed")
+      };
+    }
+    if (!host) {
+      return { ok: false, error: invalidBaseUrlError("empty host") };
+    }
+    baseUrlHost = host;
+  }
+  if (provider === "github") {
+    if (baseUrlHost !== undefined) {
+      return {
+        ok: false,
+        error: 'Provider config conflict: forge.provider is "github" but forge.base_url is set \u2014 GitHub has a fixed base (github.com) and accepts no override. Remove base_url or set provider to "gitlab".'
+      };
+    }
+    return {
+      ok: true,
+      context: { provider: "github", host: GITHUB_CANONICAL_HOST }
+    };
+  }
+  if (baseUrlHost !== undefined) {
+    return { ok: true, context: { provider: "gitlab", host: baseUrlHost } };
+  }
+  const gitlabHosts = new Set;
+  let sawGithub = false;
+  let sawUnrecognized = false;
+  for (const remote of remotes) {
+    const parsed = parseForgeRemoteUrl(remote);
+    if (!parsed) {
+      sawUnrecognized = true;
+      continue;
+    }
+    if (parsed.provider === "github") {
+      sawGithub = true;
+    } else {
+      gitlabHosts.add(parsed.host);
+    }
+  }
+  if (provider === "gitlab") {
+    if (gitlabHosts.size === 1 && !sawGithub && !sawUnrecognized) {
+      return {
+        ok: true,
+        context: { provider: "gitlab", host: [...gitlabHosts][0] }
+      };
+    }
+    return {
+      ok: false,
+      error: 'Provider config incomplete: forge.provider is "gitlab" but no forge.base_url is set and the git remotes do not unanimously indicate a single GitLab host \u2014 set forge.base_url (e.g. https://gitlab.example.com) in config.'
+    };
+  }
+  if (sawGithub && gitlabHosts.size > 0) {
+    return {
+      ok: false,
+      error: "Provider selection ambiguous: git remotes indicate both GitHub and GitLab \u2014 set forge.provider (and forge.base_url for self-hosted GitLab) explicitly in config."
+    };
+  }
+  if (sawUnrecognized) {
+    return {
+      ok: false,
+      error: "Provider selection ambiguous: a git remote host matches no recognized provider (generic self-hosted) \u2014 set forge.provider and forge.base_url explicitly in config."
+    };
+  }
+  if (sawGithub) {
+    return {
+      ok: true,
+      context: { provider: "github", host: GITHUB_CANONICAL_HOST }
+    };
+  }
+  if (gitlabHosts.size === 1) {
+    return {
+      ok: true,
+      context: { provider: "gitlab", host: [...gitlabHosts][0] }
+    };
+  }
+  if (gitlabHosts.size > 1) {
+    return {
+      ok: false,
+      error: "Provider selection ambiguous: git remotes indicate multiple different GitLab hosts \u2014 set forge.provider and forge.base_url explicitly in config."
+    };
+  }
+  return {
+    ok: false,
+    error: "Provider selection failed: no workflow-relevant git remote and no forge.base_url \u2014 set forge.provider (and forge.base_url for self-hosted GitLab) explicitly in config."
+  };
+}
+
+// src/background/pr-subscriptions.ts
 var PR_SUBSCRIPTIONS_FILE = "pr-monitor/subscriptions.jsonl";
 var PR_SUBSCRIPTIONS_CHECKPOINT_FILE = "pr-monitor/subscriptions.checkpoint.json";
 var PR_SUBSCRIPTIONS_AUDIT_FILE = "pr-monitor/subscriptions.audit.jsonl";
@@ -115,8 +506,12 @@ var RecordSchema = exports_external.object({
   correlationId: exports_external.string().min(1),
   sessionID: exports_external.string().min(1),
   prNumber: exports_external.number().int().positive(),
-  repoFullName: exports_external.string().regex(/^[^/]+\/[^/]+$/, "Must be owner/repo format"),
-  prUrl: exports_external.string().min(1).regex(/^https:\/\/github\.com\/[^/]+\/[^/]+\/pull\/\d+$/, "Must be a valid GitHub PR URL"),
+  repoFullName: exports_external.string().regex(/^[^/\s]+(?:\/[^/\s]+)+$/, "Must be owner/repo format (GitLab nested namespaces allowed)"),
+  prUrl: exports_external.string().min(1),
+  forge: exports_external.object({
+    provider: exports_external.literal("gitlab"),
+    host: exports_external.string().min(1)
+  }).optional(),
   headRefOid: exports_external.string().optional(),
   lastCheckedAt: exports_external.number(),
   lastCommentId: exports_external.string().optional(),
@@ -134,7 +529,21 @@ var RecordSchema = exports_external.object({
   customPollIntervalSeconds: exports_external.number().int().positive().optional(),
   customFailureThreshold: exports_external.number().int().min(0).optional(),
   customCooldownSeconds: exports_external.number().int().min(0).optional()
-}).strict();
+}).strict().superRefine((record, ctx) => {
+  if (isForgePrUrl(record.prUrl))
+    return;
+  if (record.forge && isForgePrUrl(record.prUrl, {
+    provider: record.forge.provider,
+    host: record.forge.host
+  })) {
+    return;
+  }
+  ctx.addIssue({
+    code: exports_external.ZodIssueCode.custom,
+    path: ["prUrl"],
+    message: "Must be a valid PR URL (GitHub /pull/N or GitLab /-/merge_requests/N)"
+  });
+});
 var TerminalSummarySchema = exports_external.object({
   removed: exports_external.number().int().min(0),
   expired: exports_external.number().int().min(0),
@@ -2050,6 +2459,7 @@ async function subscribe(directory, input) {
         prNumber: input.prNumber,
         repoFullName: input.repoFullName,
         prUrl: input.prUrl,
+        ...input.forge ? { forge: input.forge } : {},
         lastCheckedAt: now,
         isWatching: true,
         hasUnaddressedEvents: false,
@@ -2086,6 +2496,7 @@ async function subscribe(directory, input) {
       prNumber: input.prNumber,
       repoFullName: input.repoFullName,
       prUrl: input.prUrl,
+      ...input.forge ? { forge: input.forge } : {},
       lastCheckedAt: now,
       isWatching: true,
       hasUnaddressedEvents: false,
@@ -2463,4 +2874,4 @@ var _internals = {
   writeCheckpointFile
 };
 
-export { PR_SUBSCRIPTIONS_FILE, PR_SUBSCRIPTIONS_CHECKPOINT_FILE, PR_SUBSCRIPTIONS_AUDIT_FILE, PR_SUBSCRIPTION_LIMITS, setOnSubscriptionCreated, registerPrMonitorWorkerHandler, removePrMonitorWorkerHandler, ensurePrSubscriptionDispatcherInstalled, PrSubscriptionCapacityError, isPrSubscriptionCapacityError, buildCorrelationId, subscribe, unsubscribe, listActive, lookupByPr, updateSnapshot, sweepStale, getPrSubscriptionHealth, _internals };
+export { containsControlCharacters, hasNonAsciiHostname, isPrivateHost, detectForgeFromUrl, matchForgeResourceUrl, parseForgeRemoteUrl, buildPrUrl, buildIssueUrl, canonicalForgePrUrl, getProviderCapabilities, resolveForgeContextFromPluginConfig, PR_SUBSCRIPTIONS_FILE, PR_SUBSCRIPTIONS_CHECKPOINT_FILE, PR_SUBSCRIPTIONS_AUDIT_FILE, PR_SUBSCRIPTION_LIMITS, setOnSubscriptionCreated, registerPrMonitorWorkerHandler, removePrMonitorWorkerHandler, ensurePrSubscriptionDispatcherInstalled, PrSubscriptionCapacityError, isPrSubscriptionCapacityError, buildCorrelationId, subscribe, unsubscribe, listActive, lookupByPr, updateSnapshot, sweepStale, getPrSubscriptionHealth, _internals };

package/dist/cli/{index-a7y29h92.js → index-dryhmaft.js}

@@ -4,7 +4,7 @@ import {
   projectDbExists,
   withImmediateTransaction,
   withProjectDbReadOnly
-} from "./index-pwcbtbhd.js";
+} from "./index-74yxwf8y.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
@@ -27,11 +27,11 @@ import {
 import {
   init_loader,
   loadPluginConfig
-} from "./index-kxacpqwf.js";
+} from "./index-ekyg4p8b.js";
 import {
   init_package,
   package_default
-} from "./index-0pvvktht.js";
+} from "./index-rr1dggfe.js";
 import {
   criticalWarn,
   init_logger,

package/dist/cli/{index-e708d35g.js → index-dz5cbkrm.js}

@@ -5,18 +5,18 @@ import {
 import {
   effectiveRetrievalOutcomes,
   readAuthoritativeKnowledgeCounterRollups
-} from "./index-48we80k1.js";
+} from "./index-ppj5bjaq.js";
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-0zjg4kt5.js";
+} from "./index-ycqsnfd1.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-y8gxcmnj.js";
+} from "./index-7n3h39h9.js";
 import {
   appendCappedJsonl,
   resolveRetentionCap
@@ -27,7 +27,7 @@ import {
 import {
   atomicWriteFileAnyRoot,
   atomicWriteSwarmFile
-} from "./index-bntwj2tp.js";
+} from "./index-yj7etak0.js";
 import {
   advisoryWarn,
   init_warning_buffer

package/dist/cli/{index-naxrpyb0.js → index-ek5gvpvm.js}

@@ -2,10 +2,10 @@
 import {
   captureWorkspaceSnapshotAsync,
   changedFilesSinceSnapshotAsync
-} from "./index-m1pqenq9.js";
+} from "./index-s68z4a39.js";
 import {
   removeWorktreeProvisioningOwner
-} from "./index-yydv4jfy.js";
+} from "./index-vqz0avr4.js";
 import {
   SOURCE_WORKTREE_GONE_STAGE,
   ensureTaskGateRequirementsReceiptForSettledTransition,
@@ -14,13 +14,13 @@ import {
   reconcileLandedMerge,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-m8342y3n.js";
+} from "./index-cnbpht7m.js";
 import {
   validateSwarmPath
-} from "./index-dftztz4y.js";
+} from "./index-afmyp3kt.js";
 import {
   appendCoreEventSync
-} from "./index-7rzgdcvc.js";
+} from "./index-373880cv.js";
 import {
   canonicalRootKeyFresh
 } from "./index-mc72pk74.js";
@@ -512,7 +512,7 @@ async function cleanupRecoveredWorktree(directory, descriptor, options) {
     awaitingMergeByCallID,
     cleanupStandardWorktreeForCallId,
     standardWorktreeByCallID
-  } = await import("./worktree-isolation-bmzkxa64.js");
+  } = await import("./worktree-isolation-kaxkr61t.js");
   standardWorktreeByCallID.delete(descriptor.callID);
   if (hasResidue)
     awaitingMergeByCallID.set(descriptor.callID, {
@@ -648,7 +648,7 @@ async function recoverCoderSettlement(directory, taskId) {
           awaitingMergeByCallID,
           finishStandardWorktreeDispatch,
           standardWorktreeByCallID
-        } = await import("./worktree-isolation-bmzkxa64.js");
+        } = await import("./worktree-isolation-kaxkr61t.js");
         const descriptor = wal.worktree;
         const reconstructedDispatch = {
           callID: descriptor.callID,

package/dist/cli/{index-kxacpqwf.js → index-ekyg4p8b.js}

@@ -13,7 +13,7 @@ import {
   PluginConfigSchema,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-0pvvktht.js";
+} from "./index-rr1dggfe.js";
 import {
   DangerousMergeKeyError,
   MAX_MERGE_DEPTH,

package/dist/cli/{index-hk2cap4d.js → index-fa014mra.js}

@@ -2,7 +2,7 @@
 import {
   _internals,
   resolveWorktreeIsolationConfig
-} from "./index-bktc2g9n.js";
+} from "./index-7jt24hpz.js";
 import {
   ApprovalEvidenceSchema,
   BaseEvidenceSchema,
@@ -46,7 +46,7 @@ import {
   loadPluginConfigWithMeta,
   loadPluginConfigWithMetaAsync,
   resetConfigAdvisoryDedup
-} from "./index-kxacpqwf.js";
+} from "./index-ekyg4p8b.js";
 import"./index-zxdawwc7.js";
 import {
   AUTO_REVIEW_V8_BURN_IN_DECISION,
@@ -72,7 +72,7 @@ import {
   TurboConfigSchema,
   WorktreeIsolationConfigSchema,
   resolveAutoReviewConfig
-} from "./index-0pvvktht.js";
+} from "./index-rr1dggfe.js";
 import {
   ALL_AGENT_NAMES,
   ALL_SUBAGENT_NAMES,