opencode-swarm 7.190.0 → 7.191.0

package/dist/cli/{index-ffgcdf49.js → index-ap0tkg3v.js}

@@ -8,14 +8,14 @@ import {
   protectedRoots,
   redactDecisionLineForArchive,
   stableCanonicalStringify
-} from "./index-9xxqdzp4.js";
+} from "./index-kar6wt5k.js";
 import {
   detectStraySwarmDirs,
   readDoctorArtifact,
   removeStraySwarmDir,
   resolvePlanParallelizationFlag,
   runConfigDoctor
-} from "./index-tkhenmms.js";
+} from "./index-aw4ex9kn.js";
 import {
   archiveEvidence,
   checkRequirementCoverage,
@@ -27,7 +27,7 @@ import {
   sanitizeTaskId,
   saveEvidence,
   validateProjectRoot
-} from "./index-9gcqmgbc.js";
+} from "./index-n9wg3f7d.js";
 import {
   JAVA_SYMBOL_GRAMMAR,
   LANGUAGE_REGISTRY,
@@ -89,7 +89,7 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-ajzgeb2s.js";
+} from "./index-rq6tz67x.js";
 import {
   CURATOR_CONSOLIDATION_PROMPT,
   CURATOR_INIT_PROMPT,
@@ -108,13 +108,13 @@ import {
   getGroupCommitWriter,
   importLegacyJsonl,
   readPriorDriftReports
-} from "./index-0qc7a88d.js";
+} from "./index-2e2v96yk.js";
 import {
   assertNoUnsettledCoderDispatch,
   listCoderSettlementWalStates,
   recoverCoderSettlement,
   recoverStaleCoderSettlements
-} from "./index-vhn4e6rm.js";
+} from "./index-zr2ywh0s.js";
 import {
   BUNDLED_PROJECT_SKILL_ROOT,
   DEFAULT_SKILL_MIN_CONFIDENCE,
@@ -135,11 +135,11 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-s92a5ta3.js";
+} from "./index-tn2znwwf.js";
 import {
   buildEscalationBriefing,
   readRecentEscalations
-} from "./index-dmq7p8s9.js";
+} from "./index-evj271tm.js";
 import {
   parsePorcelainV2Snapshot,
   resolveCommitCountSince,
@@ -223,7 +223,7 @@ import {
   swarmOverwriteCandidates,
   trackedDirtyCandidates,
   transientBackoff
-} from "./index-mseerehd.js";
+} from "./index-y8ak7me7.js";
 import {
   EPIC_MODE_CONFIG_DISABLED_MESSAGE,
   PlanRecoverySupersededError,
@@ -255,7 +255,7 @@ import {
   updateEpicRecord,
   updateTaskStatus,
   withPlanLifecycleLock
-} from "./index-fb5s32c2.js";
+} from "./index-kdsdybmz.js";
 import {
   containsControlChars,
   containsPathTraversal,
@@ -271,7 +271,7 @@ import {
   resolveSpeckitProjection,
   validateSpeckit,
   writeProjectedSpecSync
-} from "./index-p69k8v0e.js";
+} from "./index-hq84mfha.js";
 import {
   clearWorktreeMergeStatus,
   getAllWorktreeMergeFailures,
@@ -303,7 +303,7 @@ import {
   transitionTaskWorkflowEvidenceWithStatus,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-69tgdm9t.js";
+} from "./index-msz0qtfy.js";
 import {
   isPathUnderSwarmWorktreeBase,
   listLiveLaneOwners,
@@ -312,7 +312,7 @@ import {
   recordLiveLaneOwner,
   removeWorktree,
   resolveWorktreeBaseDir
-} from "./index-zyg1m9d0.js";
+} from "./index-ykkpkzf7.js";
 import {
   GitBinaryMissingError,
   GitSpawnCwdError,
@@ -354,7 +354,7 @@ import {
   scanBackgroundCoderReservationsForAdmission,
   scanDelegationsForRecovery,
   sweepStaleDelegations
-} from "./index-npe10823.js";
+} from "./index-hqdfm79v.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals,
@@ -366,7 +366,7 @@ import {
   recordHiveKnowledgeEvent,
   recordKnowledgeEvent,
   resolveKnowledgeEventsPath
-} from "./index-h0xhec3d.js";
+} from "./index-9mq96f00.js";
 import {
   commitDisplayedMembership,
   commitEmptyRetrieval,
@@ -379,7 +379,7 @@ import {
   queryLiveMemberships,
   reconcilePhaseClose,
   recordPhaseCloseIntent
-} from "./index-49e65y51.js";
+} from "./index-se6v59r8.js";
 import {
   sanitizeContextText
 } from "./index-m9zzj4ee.js";
@@ -410,7 +410,7 @@ import {
   validateActionableFields,
   validateLesson,
   validateSkillPath
-} from "./index-2kpqqcch.js";
+} from "./index-7r41s196.js";
 import {
   MAX_CURATION_PROPOSALS,
   authorizeCuration,
@@ -421,10 +421,10 @@ import {
 } from "./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-1s95jrgc.js";
+} from "./index-mnx6hgh0.js";
 import {
   RetrospectiveEvidenceSchema
-} from "./index-pkhbd2t5.js";
+} from "./index-j5nhx6e8.js";
 import {
   MAX_PENDING_SCOPE_BINDINGS,
   canonicalWorkspaceIdentity,
@@ -433,7 +433,7 @@ import {
   clearScopeBindings,
   readAuthoritativeScopeBindingSet,
   readDeclaredScopeFilesFromBindings
-} from "./index-rgkzcw2a.js";
+} from "./index-ks4h9hag.js";
 import {
   clearPlanLedgerForReset,
   computePlanStructureHash,
@@ -449,7 +449,7 @@ import {
   replayFromLedgerWithStatus,
   resolvePlanningProfile,
   takeSnapshotEvent
-} from "./index-ej1hdw16.js";
+} from "./index-7rapcpgx.js";
 import {
   CORE_EVENT_LOCKED,
   appendCoreEventSync,
@@ -538,7 +538,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-mp1s7b0n.js";
+} from "./index-4wsvkvhc.js";
 import {
   readTailJsonl,
   readTailJsonlDetailed,
@@ -623,7 +623,7 @@ import {
   loadPluginConfig,
   loadPluginConfigWithMeta,
   resolveEpicConfig
-} from "./index-ejk34dnw.js";
+} from "./index-r27sprvr.js";
 import {
   GIT_BINARY_ENV_VAR,
   addDeferredWarning,
@@ -656,7 +656,7 @@ import {
   resolveContextWindow,
   resolveGeneratedAgentRole,
   stripKnownSwarmPrefix
-} from "./index-t0gj8s46.js";
+} from "./index-y6hwrfkt.js";
 import {
   AGENT_TOOL_MAP,
   ALL_AGENT_NAMES,
@@ -682,7 +682,7 @@ import {
   init_agent_names,
   init_constants,
   init_tool_metadata
-} from "./index-s8b67e6h.js";
+} from "./index-pksy4nzv.js";
 import {
   KNOWLEDGE_SCHEMA_VERSION,
   OUTCOME_BLOCK_THRESHOLD,
@@ -3449,7 +3449,7 @@ async function importLegacyPrWorkflowGateStateIfNeeded(directory, sessionID, all
       return null;
     throw error2;
   }
-  const legacy = allowSalvagedImport ? (await (await import("./pr-workflow-gate-0vt614f0.js")).readPrWorkflowGateStateForRecovery(directory, sessionID))?.state ?? null : await readPrWorkflowGateStateFileFromDisk(filePath, sessionID);
+  const legacy = allowSalvagedImport ? (await (await import("./pr-workflow-gate-prb2tzz7.js")).readPrWorkflowGateStateForRecovery(directory, sessionID))?.state ?? null : await readPrWorkflowGateStateFileFromDisk(filePath, sessionID);
   if (!legacy)
     return null;
   const namespace = workflowGateStateCoordinationNamespace(sessionID);
@@ -3536,7 +3536,7 @@ async function deleteStateWhileLocked(directory, sessionID, options = {}) {
   let recoveryState = null;
   if (!currentAuthoritative) {
     if (options.allowSalvagedRead) {
-      const { readPrWorkflowGateStateForRecovery } = await import("./pr-workflow-gate-0vt614f0.js");
+      const { readPrWorkflowGateStateForRecovery } = await import("./pr-workflow-gate-prb2tzz7.js");
       recoveryState = (await readPrWorkflowGateStateForRecovery(directory, normalizedSessionID))?.state ?? null;
     }
     if (!recoveryState) {
@@ -10334,7 +10334,7 @@ function isLaneOwnedByCurrentSession(branchName, expectedSessionId) {
   return extracted === expectedSessionId;
 }
 async function inspectStandardWorktreeCollisionOwnership(identity) {
-  const collisionOwnership = await import("./worktree-collision-ownership-3wwfc72t.js");
+  const collisionOwnership = await import("./worktree-collision-ownership-bk6znw4c.js");
   return collisionOwnership.inspectStandardWorktreeCollisionOwnership(identity);
 }
 async function runRecoveryGit(directory, args, timeoutMs = 15000) {
@@ -10761,7 +10761,7 @@ async function precreateStandardWorktreeSession(args) {
   const laneProfile = computeLaneRuntimeProfile(worktreeConfig.runtime_isolation, laneIndex, handle.worktreePath);
   if (laneProfile) {
     try {
-      const { writeLaneProfileToDiskReal } = await import("./core-b1b3kxzy.js");
+      const { writeLaneProfileToDiskReal } = await import("./core-xevv38dk.js");
       await writeLaneProfileToDiskReal(handle.worktreePath, laneProfile.laneIndex, laneProfile.envOverrides);
     } catch {}
   }
@@ -11754,7 +11754,7 @@ async function finishStandardWorktreeDispatch(directory, dispatch, config, callI
       }
       clearWorktreeMergeStatus(statusKey);
       try {
-        const { removeLaneProfileFromDiskReal } = await import("./core-b1b3kxzy.js");
+        const { removeLaneProfileFromDiskReal } = await import("./core-xevv38dk.js");
         await removeLaneProfileFromDiskReal(dispatch.handle.worktreePath, dispatch.laneIndex);
       } catch {}
       const state = serializationStateBySessionID.get(dispatch.parentSessionID);
@@ -27502,7 +27502,7 @@ function clearCriticalShownIds(sessionID) {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-yngda8mz.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-a1xd8smp.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)
@@ -44048,9 +44048,9 @@ function hashContent(content) {
   return createHash29("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-e58ytmqt.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-zx5j97ww.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-kp8k95v9.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-46fe64s6.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -47108,7 +47108,7 @@ async function resolveCuratorLLMDelegate(directory, mode, sessionId) {
   const seam = _internals46.createCuratorLLMDelegate;
   if (seam)
     return seam(directory, mode, sessionId);
-  const { createCuratorLLMDelegate } = await import("./curator-llm-factory-yvbktznk.js");
+  const { createCuratorLLMDelegate } = await import("./curator-llm-factory-bx720pwc.js");
   return createCuratorLLMDelegate(directory, mode, sessionId);
 }
 async function reconcileCloseTerminalStateForPlan(directory, targetPlan, options) {
@@ -47503,7 +47503,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-e58ytmqt.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-zx5j97ww.js");
     const { config: pmLoadedConfig } = _internals46.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -51536,7 +51536,7 @@ function serializeAgentSession(s) {
 }
 async function writeSnapshot(directory, state) {
   try {
-    const { ensureSnapshotCoordinationReady } = await import("./snapshot-coordination-init-sckyzb94.js");
+    const { ensureSnapshotCoordinationReady } = await import("./snapshot-coordination-init-cqxsm2rr.js");
     await ensureSnapshotCoordinationReady(directory);
     const snapshot = {
       version: 3,
@@ -54557,7 +54557,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-kp8k95v9.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-46fe64s6.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -55681,7 +55681,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-tbd4tq9r.js");
+        const skillModule = await import("./skill-generator-xarcb8vm.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -56153,7 +56153,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-n1ezv1zp.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-8ppf9pcx.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -56985,7 +56985,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-8pwfg5g9.js");
+      const { getScanStatus } = await import("./scan-cursor-waxfq7x5.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -57157,9 +57157,9 @@ var _internals68 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-e58ytmqt.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-zx5j97ww.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-kp8k95v9.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-46fe64s6.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -57167,11 +57167,11 @@ var _internals68 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-d7b88mzr.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-xckkw7yt.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries2, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-s7a5gwhz.js");
+    const { checkHivePromotions } = await import("./hive-promoter-sd1h9vjg.js");
     return checkHivePromotions(entries2, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -57180,7 +57180,7 @@ var _internals68 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-tbd4tq9r.js");
+    } = await import("./skill-generator-xarcb8vm.js");
     const result = {
       approved: [],
       rejected: [],
@@ -57222,7 +57222,7 @@ var _internals68 = {
     return result;
   },
   readPriorDriftReports: async (directory) => {
-    const { readPriorDriftReports: readPriorDriftReports2 } = await import("./curator-drift-6v604220.js");
+    const { readPriorDriftReports: readPriorDriftReports2 } = await import("./curator-drift-ej1s4fv9.js");
     return readPriorDriftReports2(directory);
   },
   readSwarmKnowledge: (directory) => readKnowledge(resolveSwarmKnowledgePath(directory))
@@ -67492,9 +67492,9 @@ var _internals76 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate }] = await Promise.all([
-      import("./schema-e58ytmqt.js"),
-      import("./curator-d7b88mzr.js"),
-      import("./curator-llm-factory-yvbktznk.js")
+      import("./schema-zx5j97ww.js"),
+      import("./curator-xckkw7yt.js"),
+      import("./curator-llm-factory-bx720pwc.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate };
   }
@@ -69932,7 +69932,7 @@ async function computeCurationDiagnostics(directory, entries2) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-8pwfg5g9.js");
+    const { getScanStatus } = await import("./scan-cursor-waxfq7x5.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -69942,10 +69942,10 @@ async function computeCurationDiagnostics(directory, entries2) {
   try {
     const { isLinked: isLinked2 } = await import("./knowledge-link-6hw3z6wn.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-e58ytmqt.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-zx5j97ww.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-kp8k95v9.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-46fe64s6.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
@@ -71401,7 +71401,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory, planParallelizationEnabled);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-by0ak49m.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-48ehw0b0.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -71439,7 +71439,7 @@ async function handleDoctorCommand(directory, args) {
 `;
   }
   try {
-    const { runModelPreflight } = await import("./model-preflight-ex482fsy.js");
+    const { runModelPreflight } = await import("./model-preflight-wq4ejsrk.js");
     const preflight = await runModelPreflight(config, swarmState.opencodeClient, { generatedAgentNames: swarmState.generatedAgentNames });
     const missingSelection = preflight.resolutions.filter((resolution) => resolution.status === "missing-selection");
     const unresolved = preflight.catalogAvailable ? preflight.resolutions.filter((resolution) => resolution.status === "unresolved") : [];
@@ -71473,7 +71473,7 @@ async function handleDoctorCommand(directory, args) {
     }
   } catch {}
   try {
-    const { renderKnowledgeReceiptPhaseIdSection } = await import("./doctor-knowledge-receipt-phase-id-kwrvnps9.js");
+    const { renderKnowledgeReceiptPhaseIdSection } = await import("./doctor-knowledge-receipt-phase-id-89jrgknr.js");
     output += await renderKnowledgeReceiptPhaseIdSection(directory, enableAutoFix);
   } catch {}
   const strayDirs = detectStraySwarmDirs(directory);
@@ -73490,7 +73490,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-mzr2q4bn.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-b8jqdf13.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -74491,6 +74491,26 @@ async function probeFullAutoOversightHealth(input) {
 
 // src/commands/full-auto.ts
 init_logger();
+function authorizeFullAuto(directory) {
+  const { config, configHadErrors } = loadPluginConfigWithMeta(directory);
+  if (configHadErrors) {
+    return {
+      authorized: false,
+      message: "Error: Full-Auto Mode cannot be enabled \u2014 a swarm plugin config file exists but could not be loaded, so full_auto.locked cannot be verified. Fix the config file (see warnings above) and retry.",
+      config,
+      configHadErrors
+    };
+  }
+  if (config.full_auto?.locked === true) {
+    return {
+      authorized: false,
+      message: "Error: Full-Auto Mode is locked for this project (full_auto.locked is true in the swarm plugin config). Runtime activation is disabled by configuration; remove the lock to use /swarm full-auto on.",
+      config,
+      configHadErrors
+    };
+  }
+  return { authorized: true, config, configHadErrors };
+}
 async function handleFullAutoCommand(directory, args, sessionID) {
   if (!sessionID || sessionID.trim() === "") {
     return "Error: No active session context. Full-Auto Mode requires an active session. Use /swarm-full-auto from within an OpenCode session, or start a session first.";
@@ -74535,6 +74555,10 @@ async function handleFullAutoCommand(directory, args, sessionID) {
     return probe.healthy ? `Full-Auto oversight recovery probe succeeded for pause generation ${runState.pauseGeneration ?? 0}. The transport path is healthy, but no denied action was replayed. Use \`/swarm full-auto resume\` within 5 minutes to create a new run generation and re-issue the original action for fresh review.` : `Full-Auto oversight recovery probe failed: ${probe.reason}`;
   }
   if (parsedCommand.kind === "resume") {
+    const auth = authorizeFullAuto(directory);
+    if (!auth.authorized) {
+      return auth.message;
+    }
     const runState = loadFullAutoRunState(directory, sessionID);
     if (!canResumeFromProbe(runState)) {
       return "Error: resume requires a paused infrastructure/deadline run with a recent successful matching retry-oversight probe. Policy, containment, sandbox, or severe-evidence pauses cannot be resumed by probe.";
@@ -74568,13 +74592,11 @@ async function handleFullAutoCommand(directory, args, sessionID) {
   let durableError;
   let criticModelAdvisory = "";
   try {
-    const { config, configHadErrors } = loadPluginConfigWithMeta(directory);
+    const auth = authorizeFullAuto(directory);
+    const config = auth.config;
     const fullAutoConfig = config.full_auto;
-    if (newFullAutoMode && configHadErrors) {
-      return "Error: Full-Auto Mode cannot be enabled \u2014 a swarm plugin config file exists but could not be loaded, so full_auto.locked cannot be verified. Fix the config file (see warnings above) and retry.";
-    }
-    if (newFullAutoMode && fullAutoConfig?.locked === true) {
-      return "Error: Full-Auto Mode is locked for this project (full_auto.locked is true in the swarm plugin config). Runtime activation is disabled by configuration; remove the lock to use /swarm full-auto on.";
+    if (newFullAutoMode && !auth.authorized) {
+      return auth.message;
     }
     const effectiveMode = modeOverride ?? fullAutoConfig?.mode ?? "supervised";
     modeLabel = effectiveMode;
@@ -97934,7 +97956,7 @@ function createCuratorLLMDelegate(directory, mode = "init", sessionId) {
     }
     const sdkOpts = signal ? { signal } : {};
     try {
-      const { getSwarmAgents: getSwarmAgents2, resolveFallbackModel: resolveFallbackModel2 } = await import("./index-3t9t9q2q.js");
+      const { getSwarmAgents: getSwarmAgents2, resolveFallbackModel: resolveFallbackModel2 } = await import("./index-0331n4t3.js");
       const createResult = await client.session.create({
         ...sessionId ? {
           body: {
@@ -100271,7 +100293,7 @@ async function cancelPrFeedbackLoopUnlocked(directory, sessionID, reason) {
     clearedEvents: []
   };
   try {
-    const { cancelPrFeedbackPublication: cancelPrFeedbackPublication2 } = await import("./pr-workflow-gate-0vt614f0.js");
+    const { cancelPrFeedbackPublication: cancelPrFeedbackPublication2 } = await import("./pr-workflow-gate-prb2tzz7.js");
     await cancelPrFeedbackPublication2(directory, sessionID, reason);
   } catch (err) {
     warn(`[pr-feedback-loop] cancelPrFeedbackPublication failed (fail-open): ${err instanceof Error ? err.message : String(err)}`);
@@ -102673,6 +102695,22 @@ function isExcluded(entry, relPath, exactNames, globPatterns) {
   }
   return false;
 }
+function isIgnoredExplicitPath(relPath, ignoreExact, ignoreGlobs) {
+  const segments = relPath.split("/");
+  const file = segments[segments.length - 1] ?? "";
+  if (isExcluded(file, relPath, ignoreExact, ignoreGlobs)) {
+    return true;
+  }
+  let prefix = "";
+  for (let i = 0;i < segments.length - 1; i++) {
+    const segment = segments[i] ?? "";
+    prefix = prefix.length === 0 ? segment : `${prefix}/${segment}`;
+    if (isExcluded(segment, prefix, ignoreExact, ignoreGlobs)) {
+      return true;
+    }
+  }
+  return false;
+}
 function validateDirectoryInput(dir) {
   if (!dir || dir.length === 0) {
     return "directory is required";
@@ -103301,6 +103339,7 @@ var secretscan = createSwarmTool({
         skipped_files: skippedFiles + stats.fileErrors + stats.symlinkSkipped,
         policy_skipped_files: 0,
         requested_files: 0,
+        ignored_files: 0,
         incomplete_files: incompleteFiles,
         incomplete_paths: discovery.incompletePaths
       };
@@ -103363,6 +103402,7 @@ async function runSecretscanOnFiles(files, directory, rawRequestedFiles) {
     let filesScanned = 0;
     let skippedFiles = 0;
     let policySkippedFiles = 0;
+    let ignoredFiles = 0;
     const requestedFiles = Math.max(0, rawRequestedFiles ?? files.length);
     const incompletePaths = [];
     const rawRoot = path137.resolve(directory);
@@ -103390,6 +103430,18 @@ async function runSecretscanOnFiles(files, directory, rawRequestedFiles) {
     if (!rootStat.isDirectory()) {
       throw new Error("target must be a directory");
     }
+    const ignoreExact = new Set;
+    const ignoreGlobs = [];
+    for (const pattern of loadSecretScanIgnore(canonicalRoot)) {
+      if (pattern.length === 0)
+        continue;
+      if (isGlobOrPathPattern(pattern)) {
+        ignoreGlobs.push(pattern);
+      } else {
+        ignoreExact.add(pattern);
+      }
+    }
+    const hasIgnorePatterns = ignoreExact.size > 0 || ignoreGlobs.length > 0;
     const filesToScan = files.slice(0, MAX_EXPLICIT_FILES_SCANNED);
     let incompleteFiles = Math.max(0, files.length - filesToScan.length);
     if (files.length > filesToScan.length) {
@@ -103483,6 +103535,14 @@ async function runSecretscanOnFiles(files, directory, rawRequestedFiles) {
         recordIncompletePath(incompletePaths, canonicalRoot, scanPath, "scope_escape");
         continue;
       }
+      if (hasIgnorePatterns) {
+        const relPath = path137.relative(canonicalRoot, scanPath).replace(/\\/g, "/");
+        if (isIgnoredExplicitPath(relPath, ignoreExact, ignoreGlobs)) {
+          skippedFiles++;
+          ignoredFiles++;
+          continue;
+        }
+      }
       const outcome = scanFileForSecrets(scanPath, "explicit");
       switch (outcome.status) {
         case "scanned":
@@ -103520,6 +103580,7 @@ async function runSecretscanOnFiles(files, directory, rawRequestedFiles) {
       files_scanned: filesScanned,
       skipped_files: skippedFiles,
       policy_skipped_files: policySkippedFiles,
+      ignored_files: ignoredFiles,
       requested_files: requestedFiles,
       incomplete_files: incompleteFiles,
       incomplete_paths: incompletePaths
@@ -105280,7 +105341,10 @@ async function parseTestOutputViaDispatch(framework, output, baseDir) {
 function relativeEscapesRoot(relative28) {
   return relative28 === ".." || relative28.startsWith(`..${path140.sep}`) || path140.isAbsolute(relative28);
 }
-function resolveMavenModuleDir(root, files) {
+var MAVEN_BUILD_FILES = ["pom.xml"];
+var GRADLE_BUILD_FILES = ["build.gradle", "build.gradle.kts"];
+function resolveModuleDirByMarkers(root, files, markerNames) {
+  const hasMarker = (dir) => markerNames.some((marker) => _internals123.existsSync(path140.join(dir, marker)));
   const resolvedRoot = path140.resolve(root);
   let rootReal;
   const isContainedModuleDir = (dir) => {
@@ -105310,7 +105374,7 @@ function resolveMavenModuleDir(root, files) {
       }
       let current = path140.dirname(resolvedFile);
       while (true) {
-        if (_internals123.existsSync(path140.join(current, "pom.xml")) && isContainedModuleDir(current)) {
+        if (hasMarker(current) && isContainedModuleDir(current)) {
           return current;
         }
         if (current === resolvedRoot)
@@ -105341,16 +105405,23 @@ function resolveMavenModuleDir(root, files) {
       break;
     inspected++;
     const candidate2 = path140.join(resolvedRoot, entry);
-    if (_internals123.existsSync(path140.join(candidate2, "pom.xml")) && isContainedModuleDir(candidate2)) {
+    if (hasMarker(candidate2) && isContainedModuleDir(candidate2)) {
       return candidate2;
     }
   }
   return null;
 }
-function resolveNestedMavenModuleDir(root, files) {
-  if (_internals123.existsSync(path140.join(root, "pom.xml")))
+function resolveNestedModuleDir(root, files, markerNames) {
+  if (markerNames.some((marker) => _internals123.existsSync(path140.join(root, marker)))) {
     return null;
-  return resolveMavenModuleDir(root, files);
+  }
+  return resolveModuleDirByMarkers(root, files, markerNames);
+}
+function resolveNestedMavenModuleDir(root, files) {
+  return resolveNestedModuleDir(root, files, MAVEN_BUILD_FILES);
+}
+function resolveNestedGradleModuleDir(root, files) {
+  return resolveNestedModuleDir(root, files, GRADLE_BUILD_FILES);
 }
 async function detectTestFramework(cwd, files) {
   const baseDir = cwd;
@@ -105448,6 +105519,10 @@ async function detectTestFramework(cwd, files) {
   if (mavenModuleDir && (_internals123.isCommandAvailable("mvn") || resolveMavenWrapperCommand(mavenModuleDir, ["test"]) !== null)) {
     return "maven";
   }
+  const gradleModuleDir = resolveNestedGradleModuleDir(baseDir, files);
+  if (gradleModuleDir && (_internals123.isCommandAvailable("gradle") || _internals123.existsSync(path140.join(gradleModuleDir, "gradlew")) || _internals123.existsSync(path140.join(gradleModuleDir, "gradlew.bat")))) {
+    return "gradle";
+  }
   return "none";
 }
 function detectPhpTest(cwd) {
@@ -105526,6 +105601,13 @@ function buildLanguageSpecificTestNames(nameWithoutExt, ext) {
       return [];
   }
 }
+function findPathSegmentIndex(normalizedPath, segment) {
+  for (let index = normalizedPath.indexOf(segment);index !== -1; index = normalizedPath.indexOf(segment, index + 1)) {
+    if (index === 0 || normalizedPath[index - 1] === "/")
+      return index;
+  }
+  return -1;
+}
 function getRepoLevelCandidateDirectories(workingDir, relativePath2, ext) {
   const relativeDir = path140.dirname(relativePath2);
   const nestedRelativeDir = relativeDir === "." ? "" : relativeDir;
@@ -105534,11 +105616,17 @@ function getRepoLevelCandidateDirectories(workingDir, relativePath2, ext) {
     return nestedRelativeDir ? [rootDir2, path140.join(rootDir2, nestedRelativeDir)] : [rootDir2];
   });
   const normalizedRelativePath = relativePath2.replace(/\\/g, "/");
-  if (ext === ".java" && normalizedRelativePath.startsWith("src/main/java/")) {
-    directories.push(path140.join(workingDir, "src/test/java", path140.dirname(normalizedRelativePath.slice("src/main/java/".length))));
+  if (ext === ".java") {
+    const index = findPathSegmentIndex(normalizedRelativePath, "src/main/java/");
+    if (index !== -1) {
+      directories.push(path140.join(workingDir, normalizedRelativePath.slice(0, index), "src/test/java", path140.dirname(normalizedRelativePath.slice(index + "src/main/java/".length))));
+    }
   }
-  if ((ext === ".kt" || ext === ".java") && normalizedRelativePath.startsWith("src/main/kotlin/")) {
-    directories.push(path140.join(workingDir, "src/test/kotlin", path140.dirname(normalizedRelativePath.slice("src/main/kotlin/".length))));
+  if (ext === ".kt" || ext === ".java") {
+    const index = findPathSegmentIndex(normalizedRelativePath, "src/main/kotlin/");
+    if (index !== -1) {
+      directories.push(path140.join(workingDir, normalizedRelativePath.slice(0, index), "src/test/kotlin", path140.dirname(normalizedRelativePath.slice(index + "src/main/kotlin/".length))));
+    }
   }
   return [...new Set(directories)];
 }
@@ -105740,6 +105828,22 @@ function getTargetedExecutionUnsupportedReason(framework) {
       return null;
   }
 }
+var CLASS_BASED_TEST_EXTENSIONS = new Set([".java", ".kt", ".groovy"]);
+function deriveClassBasedTargets(files) {
+  const derived = [];
+  const seen = new Set;
+  for (const file of files) {
+    const ext = path140.extname(file);
+    if (!CLASS_BASED_TEST_EXTENSIONS.has(ext.toLowerCase()))
+      return [];
+    const className = path140.basename(file, ext);
+    if (!className || seen.has(className))
+      continue;
+    seen.add(className);
+    derived.push(className);
+  }
+  return derived;
+}
 function buildTestCommand(framework, scope, files, coverage, baseDir, bail, targets, nativeTarget) {
   if (nativeTarget) {
     return nativeTarget.framework === framework ? buildNativeTargetCommand(nativeTarget) : null;
@@ -106361,7 +106465,14 @@ async function runTests(framework, scope, files, coverage, timeout_ms, cwd, bail
     resolvedNativeTarget = resolvedTarget.target;
     executionCwd = resolvedTarget.executionDirectory;
   }
-  if (scope !== "all" && scope !== "target" && files.length > 0 && !(targets && targets.length > 0)) {
+  let effectiveTargets = targets;
+  if (scope !== "all" && scope !== "target" && files.length > 0 && !(targets && targets.length > 0) && (framework === "maven" || framework === "gradle")) {
+    const derivedTargets = deriveClassBasedTargets(files);
+    if (derivedTargets.length > 0) {
+      effectiveTargets = derivedTargets;
+    }
+  }
+  if (scope !== "all" && scope !== "target" && files.length > 0 && !(effectiveTargets && effectiveTargets.length > 0)) {
     const unsupportedReason = getTargetedExecutionUnsupportedReason(framework);
     if (unsupportedReason) {
       return {
@@ -106375,7 +106486,7 @@ async function runTests(framework, scope, files, coverage, timeout_ms, cwd, bail
     }
   }
   const useDispatchBuild = process.env.SWARM_LANG_BACKEND !== "legacy";
-  const command = useDispatchBuild ? await buildTestCommandViaDispatch(framework, scope, files, coverage, executionCwd, bail, targets, resolvedNativeTarget) ?? buildTestCommand(framework, scope, files, coverage, executionCwd, bail, targets, resolvedNativeTarget) : buildTestCommand(framework, scope, files, coverage, executionCwd, bail, targets, resolvedNativeTarget);
+  const command = useDispatchBuild ? await buildTestCommandViaDispatch(framework, scope, files, coverage, executionCwd, bail, effectiveTargets, resolvedNativeTarget) ?? buildTestCommand(framework, scope, files, coverage, executionCwd, bail, effectiveTargets, resolvedNativeTarget) : buildTestCommand(framework, scope, files, coverage, executionCwd, bail, effectiveTargets, resolvedNativeTarget);
   if (!command) {
     return {
       success: false,
@@ -106880,6 +106991,11 @@ var test_runner = createSwarmTool({
       if (mavenModuleDir) {
         nativeExecutionDirectory = mavenModuleDir;
       }
+    } else if (scope !== "target" && framework === "gradle") {
+      const gradleModuleDir = resolveNestedGradleModuleDir(workingDir, _files);
+      if (gradleModuleDir) {
+        nativeExecutionDirectory = gradleModuleDir;
+      }
     }
     let testFiles = [];
     let graphFallbackReason;
@@ -116630,7 +116746,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-sm01zpqe.js");
+    const { buildHelpText } = await import("./index-5y2y23ac.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -116644,7 +116760,7 @@ async function handleHelpCommand(ctx) {
 > Note: \`/swarm ${resolved.key}\` is a deprecated alias for \`/swarm ${aliasTarget}\`.` : detailed;
   }
   const similar = _internals35.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-sm01zpqe.js");
+  const { buildHelpText: fullHelp } = await import("./index-5y2y23ac.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -116972,7 +117088,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-8kt2mxmw.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-wvymt5na.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -116982,7 +117098,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail reset": {
     handler: async (ctx) => {
-      const { handleGuardrailReset } = await import("./guardrail-reset-2n746rzv.js");
+      const { handleGuardrailReset } = await import("./guardrail-reset-8nje6gxk.js");
       return handleGuardrailReset(ctx.args, ctx.sessionID);
     },
     description: "Reset one exact active invocation/action circuit after repair",
@@ -117003,7 +117119,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-2sthykag.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-5mmc2y1v.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",
@@ -117841,7 +117957,7 @@ Subcommands:
     handler: (ctx) => handleFullAutoCommand(ctx.directory, ctx.args, ctx.sessionID),
     description: "Control Full-Auto Mode for the active session [on [mode]|off|exit|status|retry-oversight|resume|abort]",
     args: "on [assisted|supervised|strict], off|exit, status, retry-oversight, resume, abort",
-    details: 'First-class toggle for Full-Auto Mode \u2014 a critic gate reviewing escalations on your behalf (the architect still plans and delegates; full-auto never executes tasks itself). No config-level enablement is required: "on" activates immediately (unless full_auto.locked is true in config), "off" disarms the run and returns the session to normal interactive operation, "status" reports the durable run state. ' + 'An optional mode after "on" overrides full_auto.mode for this run: assisted (critic consulted only on policy escalations), supervised (default \u2014 risky/high-impact actions reviewed by the critic), strict (ALL plan mutations reviewed by the critic). ' + "While active, the critic answers architect questions and reviews phase boundaries, delegations, and risky actions on your behalf; only ESCALATE_TO_HUMAN verdicts halt the run for your input. `retry-oversight` performs a transport-only health probe for an infrastructure/deadline pause and never replays the denied action. `resume` requires a recent successful matching probe and no active recovery blockers. `abort` terminates the durable run immediately. The run state is durable (.swarm/full-auto-state.json) and survives restarts; toggle with no argument flips the current state. Composes with an open epic (Epic Mode): both the Full-Auto phase approval and the epic_phase_readiness gate apply at phase_complete.",
+    details: 'First-class toggle for Full-Auto Mode \u2014 a critic gate reviewing escalations on your behalf (the architect still plans and delegates; full-auto never executes tasks itself). No config-level enablement is required: "on" activates immediately (unless full_auto.locked is true in config), "off" disarms the run and returns the session to normal interactive operation, "status" reports the durable run state. ' + 'An optional mode after "on" overrides full_auto.mode for this run: assisted (critic consulted only on policy escalations), supervised (default \u2014 risky/high-impact actions reviewed by the critic), strict (ALL plan mutations reviewed by the critic). ' + "While active, the critic answers architect questions and reviews phase boundaries, delegations, and risky actions on your behalf; only ESCALATE_TO_HUMAN verdicts halt the run for your input. `retry-oversight` performs a transport-only health probe for an infrastructure/deadline pause and never replays the denied action. `resume` runs the same authorization preflight as `on` first (readable config; `full_auto.locked` refuses), then requires a recent successful matching probe and no active recovery blockers. `abort` terminates the durable run immediately. The run state is durable (.swarm/full-auto-state.json) and survives restarts; toggle with no argument flips the current state. Composes with an open epic (Epic Mode): both the Full-Auto phase approval and the epic_phase_readiness gate apply at phase_complete.",
     category: "utility",
     toolPolicy: "human-only"
   },