opencode-swarm 7.192.2 → 7.192.4

package/dist/cli/{skill-generator-xdg4626x.js → skill-generator-b9by3739.js}

@@ -33,21 +33,21 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-asm2r4g2.js";
+} from "./index-vgktct21.js";
 import"./index-q7sjgr1y.js";
-import"./index-4qreeddq.js";
-import"./index-w8e73tp0.js";
+import"./index-zya4a544.js";
+import"./index-gkr6ns9n.js";
 import"./index-m9zzj4ee.js";
 import"./index-eaess7dm.js";
 import"./index-2s7dvzff.js";
-import"./index-7bppy3ve.js";
+import"./index-j4pxkvw3.js";
 import"./index-5dws7eyb.js";
 import"./index-rtry5xyf.js";
-import"./index-89826pb5.js";
+import"./index-6vwnm3sm.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
 import"./index-4twjbsfw.js";
-import"./index-29z0w323.js";
+import"./index-rsfvxaw0.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-bgzpw6ge.js";
@@ -60,9 +60,9 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-nwswxes7.js";
 import"./index-gx2vp8gx.js";
-import"./index-w9y482mp.js";
+import"./index-rqapvhh5.js";
 import"./index-zxdawwc7.js";
-import"./index-a83gmv2e.js";
+import"./index-s68yyat0.js";
 import"./index-py8wpe81.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{snapshot-coordination-init-wn0hnwyv.js → snapshot-coordination-init-wyyn8ftk.js}

@@ -8,50 +8,50 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-qta3x82z.js";
-import"./index-xf5v44qh.js";
-import"./index-yte4hqhv.js";
-import"./index-25zjz6kv.js";
+} from "./index-5gyq54c5.js";
+import"./index-22ww8fjt.js";
+import"./index-g2phkwh2.js";
+import"./index-xwxqtdwz.js";
 import"./index-j2vv0h13.js";
 import"./index-0e1nxkte.js";
 import"./index-5gy5dc2n.js";
 import"./index-txdagbh7.js";
-import"./index-914wsfyy.js";
+import"./index-c6wzbs0g.js";
 import"./index-rdec0y3z.js";
-import"./index-br28jc6d.js";
-import"./index-4tfr4j1a.js";
-import"./index-asm2r4g2.js";
-import"./index-w917g452.js";
+import"./index-v6ghzghn.js";
+import"./index-myjqj3na.js";
+import"./index-vgktct21.js";
+import"./index-tww9qw9z.js";
 import"./index-fzqn2kk8.js";
 import"./index-dtet46e6.js";
 import"./index-cjapb4hy.js";
 import"./index-g8jd3h4r.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-cf003krm.js";
-import"./index-878ksabw.js";
+import"./index-qzkrcz1r.js";
+import"./index-c5gb6a86.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-5s74qd5b.js";
+import"./index-cp9h2sqb.js";
 import"./index-v3bmwmqw.js";
-import"./index-k96fx4yw.js";
-import"./index-7a92gwbg.js";
-import"./index-f54stv77.js";
+import"./index-6k70exke.js";
+import"./index-2qpme44n.js";
+import"./index-72eh47b2.js";
 import"./index-g4fs6z4e.js";
-import"./index-ypvz2c60.js";
-import"./index-4qreeddq.js";
-import"./index-w8e73tp0.js";
+import"./index-xpwp9hw1.js";
+import"./index-zya4a544.js";
+import"./index-gkr6ns9n.js";
 import"./index-m9zzj4ee.js";
 import"./index-eaess7dm.js";
 import"./index-2s7dvzff.js";
-import"./index-7bppy3ve.js";
+import"./index-j4pxkvw3.js";
 import"./index-5dws7eyb.js";
 import"./index-rtry5xyf.js";
-import"./index-89826pb5.js";
+import"./index-6vwnm3sm.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-ejq082zj.js";
-import"./index-ba87gkb4.js";
+import"./index-kn16k0fv.js";
+import"./index-54p1vs33.js";
 import"./index-a9m7h5v0.js";
 import"./index-dt4cjxbz.js";
 import"./index-mbn4vn3z.js";
@@ -60,7 +60,7 @@ import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
 import"./index-4twjbsfw.js";
-import"./index-29z0w323.js";
+import"./index-rsfvxaw0.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-bgzpw6ge.js";
@@ -73,9 +73,9 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-nwswxes7.js";
 import"./index-gx2vp8gx.js";
-import"./index-w9y482mp.js";
+import"./index-rqapvhh5.js";
 import"./index-zxdawwc7.js";
-import"./index-a83gmv2e.js";
+import"./index-s68yyat0.js";
 import"./index-py8wpe81.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{speckit-checkoff-8x139jpf.js → speckit-checkoff-y2ywmh9k.js}

@@ -7,13 +7,13 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-k96fx4yw.js";
+} from "./index-6k70exke.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-nwswxes7.js";
-import"./index-w9y482mp.js";
+import"./index-rqapvhh5.js";
 import"./index-zxdawwc7.js";
-import"./index-a83gmv2e.js";
+import"./index-s68yyat0.js";
 import"./index-py8wpe81.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{worktree-collision-ownership-as8hnnff.js → worktree-collision-ownership-hg0yrc5b.js}

@@ -13,7 +13,7 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-ypvz2c60.js";
+} from "./index-xpwp9hw1.js";
 import"./index-eaess7dm.js";
 import"./index-2s7dvzff.js";
 import"./index-dt4cjxbz.js";
@@ -23,7 +23,7 @@ import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
 import"./index-4twjbsfw.js";
-import"./index-29z0w323.js";
+import"./index-rsfvxaw0.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-bgzpw6ge.js";

package/dist/cli/{worktree-isolation-7vrs8t9b.js → worktree-isolation-epbn1xgh.js}

@@ -25,52 +25,52 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-qta3x82z.js";
-import"./index-xf5v44qh.js";
-import"./index-yte4hqhv.js";
-import"./index-25zjz6kv.js";
+} from "./index-5gyq54c5.js";
+import"./index-22ww8fjt.js";
+import"./index-g2phkwh2.js";
+import"./index-xwxqtdwz.js";
 import"./index-j2vv0h13.js";
 import"./index-0e1nxkte.js";
 import"./index-5gy5dc2n.js";
 import"./index-txdagbh7.js";
-import"./index-914wsfyy.js";
+import"./index-c6wzbs0g.js";
 import"./index-rdec0y3z.js";
-import"./index-br28jc6d.js";
-import"./index-4tfr4j1a.js";
-import"./index-asm2r4g2.js";
-import"./index-w917g452.js";
+import"./index-v6ghzghn.js";
+import"./index-myjqj3na.js";
+import"./index-vgktct21.js";
+import"./index-tww9qw9z.js";
 import"./index-fzqn2kk8.js";
 import"./index-dtet46e6.js";
 import"./index-cjapb4hy.js";
 import"./index-g8jd3h4r.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-cf003krm.js";
-import"./index-878ksabw.js";
+import"./index-qzkrcz1r.js";
+import"./index-c5gb6a86.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-5s74qd5b.js";
+import"./index-cp9h2sqb.js";
 import"./index-v3bmwmqw.js";
-import"./index-k96fx4yw.js";
-import"./index-7a92gwbg.js";
-import"./index-f54stv77.js";
+import"./index-6k70exke.js";
+import"./index-2qpme44n.js";
+import"./index-72eh47b2.js";
 import"./index-g4fs6z4e.js";
-import"./index-ypvz2c60.js";
-import"./index-4qreeddq.js";
-import"./index-w8e73tp0.js";
+import"./index-xpwp9hw1.js";
+import"./index-zya4a544.js";
+import"./index-gkr6ns9n.js";
 import"./index-m9zzj4ee.js";
 import"./index-eaess7dm.js";
 import"./index-2s7dvzff.js";
-import"./index-7bppy3ve.js";
+import"./index-j4pxkvw3.js";
 import"./index-5dws7eyb.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-89826pb5.js";
+} from "./index-6vwnm3sm.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-ejq082zj.js";
-import"./index-ba87gkb4.js";
+import"./index-kn16k0fv.js";
+import"./index-54p1vs33.js";
 import"./index-a9m7h5v0.js";
 import"./index-dt4cjxbz.js";
 import"./index-mbn4vn3z.js";
@@ -79,7 +79,7 @@ import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
 import"./index-4twjbsfw.js";
-import"./index-29z0w323.js";
+import"./index-rsfvxaw0.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-bgzpw6ge.js";
@@ -92,9 +92,9 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-nwswxes7.js";
 import"./index-gx2vp8gx.js";
-import"./index-w9y482mp.js";
+import"./index-rqapvhh5.js";
 import"./index-zxdawwc7.js";
-import"./index-a83gmv2e.js";
+import"./index-s68yyat0.js";
 import"./index-py8wpe81.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/failures/provider-message-error.d.ts

@@ -7,7 +7,8 @@ export type ProviderMessageError = {
     category: string;
 };
 /**
- * Read the provider error OpenCode records on an assistant message, or
+ * Read the provider error OpenCode records on an assistant message
+ * (`info.error`, or an early `finish` of `length` / `content-filter`), or
  * `null` when the message carries none.
  */
 export declare function readProviderMessageError(info: unknown): ProviderMessageError | null;

package/dist/hooks/guardrails/tool-before.d.ts

@@ -69,6 +69,25 @@ export declare function _resetSandboxUnavailableWarningState(): void;
  * @param ctx Shared configuration and closures from createGuardrailsHooks
  * @returns The toolBefore handler function
  */
+/**
+ * Issue #3099 R2 (executor context): which grammar OWNS shared constructs.
+ *
+ * Content alone cannot pick the grammar — the Windows sandbox wraps commands
+ * in PowerShell (src/sandbox/win32) while the recovery runbook documents Git
+ * Bash AND PowerShell as both-real host shells. The authority ladder:
+ *   1. an explicit wrapper DECLARES the executor (cmd /c, powershell
+ *      -Command) — that grammar is authoritative;
+ *   2. a PowerShell-shaped body cannot execute under POSIX at all, so
+ *      Windows is authoritative;
+ *   3. otherwise the tool's own executor: `bash` runs a POSIX shell; the
+ *      `shell` tool inherits base content detection.
+ *
+ * Exported so `/swarm guardrail explain` routes through the SAME decision
+ * instead of a stale copy — its comment promises a mirror of
+ * checkShellWriteScope, and a mirror that diverges answers "allow" for
+ * commands the gate blocks (#3099 review finding).
+ */
+export declare function resolveWindowsWriteAuthority(tool: string, command: string, detectedShellType: 'posix' | 'powershell' | 'cmd' | 'unix' | 'bash', shaped: boolean): 'powershell' | 'cmd' | null;
 export declare function createToolBeforeHandler(ctx: ToolBeforeContext): (input: {
     tool: string;
     sessionID: string;

package/dist/hooks/pr-workflow-gate.d.ts

@@ -16,6 +16,7 @@ import { type CriticOutcome } from '../pr-review/finding-policy.js';
 import { type PrReviewComposablePhase, type PrReviewItemClaim, type PrReviewPhaseComposition, parseCriticVerdict } from '../pr-review/legacy-transcript-adapter.js';
 import { withPrWorkflowCheckoutMutationLock, workflowCheckoutMutationLockRelativePath, workflowGateStateLockRelativePath, workflowGateStateRelativePath } from '../pr-review/persistence.js';
 import { type ForgeContext } from '../providers/forge-provider.js';
+import { resolveGhBinary } from '../tools/gh-evidence.js';
 import { classifyLaneLivenessCondition, type EffectivePrLaneHorizon, resolveEffectivePrLaneHorizonMs } from './lane-liveness-watchdog.js';
 export type { PrReviewDimensionCancellationRecord, PrReviewDimensionTerminalState, PrReviewPartialBaseCoverageRecord, PrReviewPartialBaseCoverageRecordV1, PrReviewPartialBaseCoverageRecordV2, PrReviewReportVerdict, PrReviewTerminalCoverageKind, PrReviewTerminalCoverageSettlement, PrReviewUnresolvedDimensionRecord, } from '../pr-review/completion.js';
 export { allowedPrReviewReportVerdicts, normalizePrReviewPartialBaseCoverageRecord, PR_REVIEW_REPORT_VERDICTS, readPrReviewTerminalCoverageForReport, rollbackPrReviewPartialBaseCoverageAdmission, } from '../pr-review/completion.js';
@@ -1532,6 +1533,13 @@ export declare function completePrWorkflow(directory: string, sessionID: string,
     laneLiveness?: PrWorkflowLaneLivenessOptions;
 }): Promise<PrWorkflowCompletionStatus>;
 export declare const _test_exports: {
+    /**
+     * Issue #3099 R6: `gh` availability seam. Read at ACTIVATION call time and
+     * handed to the readiness service, so a test can pin presence or absence.
+     * Seeded to the real resolver, so removing the property falls back to live
+     * behavioural detection rather than to a null stub.
+     */
+    resolveGhBinary: typeof resolveGhBinary;
     parseGateState: (data: unknown) => z.ZodSafeParseResult<{
         [x: string]: unknown;
         schemaVersion: 1;

package/dist/hooks/shell-executor-context.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Shared Windows-executor wrapper declaration predicates (#3145).
+ *
+ * The wrapper-detection regexes lived as four byte-identical copies
+ * (resolveWindowsWriteAuthority, the gate's detect() closure, and both
+ * explain-service branches). Byte-divergence between those copies was the
+ * exact defect class of review rounds 5-7 (one copy drifting flipped
+ * explain-vs-gate verdicts), so this module is now the single definition.
+ *
+ * Switch tolerance (PRR-002): cmd.exe accepts switches between the binary
+ * and /c — `cmd /d /s /c copy a b`, `cmd /q /c`, `cmd /v:on /c`. The
+ * previous bare-`/c` regexes let every switch form fall through the
+ * authority ladder to the POSIX-only reading, which has no `copy`/`move`
+ * vocabulary — an out-of-scope write admitted. The same tolerance applies
+ * to the PowerShell wrapper strips (PRR-009): `powershell -NoProfile
+ * -Command "…"` must unwrap for the (now-authoritative) Windows reading to
+ * see the payload.
+ */
+/** Statement-position cmd /c declaration (switch-tolerant). */
+export declare const CMD_WRAPPER_DECLARATION: RegExp;
+/** Statement-position powershell/pwsh -Command declaration. */
+export declare const PS_WRAPPER_DECLARATION: RegExp;
+/** Loose powershell phrase (segment start or pipe) used by the ladder. */
+export declare const PS_WRAPPER_LOOSE: RegExp;
+/**
+ * True when the command explicitly declares a Windows executor at a
+ * statement boundary: a cmd /c wrapper (any switches) or a
+ * powershell/pwsh -Command wrapper.
+ */
+export declare function declaresWindowsWrapper(command: string): boolean;
+/** Same declaration, additionally accepting the pipe-adjacent loose form. */
+export declare function declaresWindowsWrapperLoose(command: string): boolean;
+/**
+ * Leading prefix that positions a cmd builtin (copy/move): an if-exist
+ * guard, a switch-tolerant `cmd … /c`, or call/start. Anchored variants of
+ * the cmd copy/move matchers compose this so `cmd /d /s /c copy a b` is
+ * detected like bare `cmd /c copy a b`.
+ */
+export declare const CMD_BUILTIN_PREFIX: RegExp;
+/** Strip pattern for a cmd /c or /k wrapper with any switches. */
+export declare const CMD_STRIP_PREFIX: RegExp;
+/** Strip pattern for a powershell/pwsh -Command/-c wrapper with switches. */
+export declare const PS_STRIP_PREFIX: RegExp;

package/dist/hooks/shell-write-detect.d.ts

@@ -52,6 +52,50 @@ export interface ResolvedWriteTarget {
      */
     resolved: boolean;
 }
+/**
+ * Issue #3099 R2 (executor context): merge a POSIX analysis with a Windows
+ * analysis under a declared AUTHORITY for shared constructs.
+ *
+ * Both grammars may report the same syntactic construct (e.g. a `>` redirect)
+ * with different path readings, because POSIX treats `\` as an escape: the
+ * same command yields `src\out.txt` under the Windows reading and `srcout`
+ * under POSIX. Only one of those describes what the real executor writes, and
+ * the guard cannot observe the executor — so the reading of the AUTHORITY
+ * grammar (the one matching the declared executor context: an explicit
+ * `cmd /c` / `powershell -Command` wrapper, or a PowerShell-shaped body that
+ * POSIX cannot execute at all) is kept, and the supplementary grammar
+ * contributes ONLY constructs the authority does not report at all (e.g. a
+ * POSIX `cp` inside a PowerShell pipeline). Lexical resemblance alone never
+ * discards a reading.
+ *
+ * `parseError` is carried from the POSIX analysis unchanged: it is the
+ * fail-closed backstop, and recomputing it over merged writes would let a
+ * malformed command that also writes escape it.
+ */
+export declare function mergeWriteAnalyses(primary: WriteAnalysis, additional: WriteAnalysis, additionalIsAuthoritative?: boolean, wrapperDeclared?: boolean): WriteAnalysis;
+export declare function buildDedupeKey(category: string, operator: string, path: string | null | undefined): string;
+/** True when any unquoted word token is a known PowerShell cmdlet. */
+export declare function isPowerShellShaped(command: string): boolean;
+/**
+ * True only when the command is positively a read-only PowerShell pipeline.
+ *
+ * Every condition must hold and the default is fail-closed: anything not
+ * positively proven read-only stays subject to the parse-failure rejection.
+ *
+ *  1. no redirect, `;`, `&`, backtick or `$(` anywhere;
+ *  2. quoting and braces balance — a malformed command is never "read-only";
+ *  3. splitting on `|` respects quotes (`Select-String -Pattern 'a|b'` is one
+ *     segment, not two);
+ *  4. no write-shaped token of ANY family appears as an unquoted word
+ *     anywhere (PowerShell Verb-Noun writes, their aliases, POSIX write
+ *     builtins, in-place editors with an edit flag);
+ *  5. every segment head is a known read-only cmdlet (case-insensitive);
+ *  6. every script-block body is POSITIVELY validated as a read-only
+ *     expression by `isReadOnlyScriptBlockBody` — deny-by-default, so a body
+ *     containing anything unrecognized (including write mechanisms the
+ *     detectors cannot see) fails and the command stays blocked.
+ */
+export declare function isPowerShellReadOnlyPipeline(command: string): boolean;
 /**
  * Detect interactive/session tools that should be denied regardless of scope.
  *