opencode-swarm 7.192.3 → 7.193.0

package/dist/cli/{index-fzcr2s01.js → index-6dn16dre.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-eaess7dm.js";
+} from "./index-84k9zzv1.js";
 import {
   bunWrite
 } from "./index-2s7dvzff.js";
@@ -18,14 +18,14 @@ import {
   releaseCoordinationLease,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-mbn4vn3z.js";
+} from "./index-vg8sxg12.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-8zj647hc.js";
+} from "./index-0e318vgt.js";
 import {
   observeDelegationLedgerPressure
-} from "./index-4twjbsfw.js";
+} from "./index-ndec8akq.js";
 import {
   EvidenceLockTimeoutError,
   withEvidenceLock
@@ -4735,7 +4735,7 @@ async function reconcileLegacyCoderSettlements(directory, maxRecords, onReconcil
   const candidates = readDelegations(directory).filter((record) => record.normalizedAgent === "coder" && Boolean(record.legacyCoderSettlementTransfer) && Boolean(record.terminalResult)).slice(0, maxRecords);
   if (candidates.length === 0)
     return 0;
-  const { transferCoderSettlementToBackground } = await import("./coder-settlement-0nhsjfh1.js");
+  const { transferCoderSettlementToBackground } = await import("./coder-settlement-hexmmefv.js");
   let transferred = 0;
   for (const record of candidates) {
     try {

package/dist/cli/{index-g8jd3h4r.js → index-6s3ab22d.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-eaess7dm.js";
+} from "./index-84k9zzv1.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-nwswxes7.js";
+} from "./index-hfssjyxs.js";
 
 // src/hooks/delegation-gate/worktree-provisioning-owner.ts
 import { createHash } from "crypto";

package/dist/cli/{index-5gy5dc2n.js → index-7njm9jk1.js}

@@ -9,7 +9,7 @@ import {
 } from "./index-txdagbh7.js";
 import {
   atomicWriteFile
-} from "./index-1n7sf9gz.js";
+} from "./index-5rkh69f3.js";
 import {
   withEvidenceLock
 } from "./index-e8k0v19e.js";

package/dist/cli/{index-eaess7dm.js → index-84k9zzv1.js}

@@ -10,7 +10,7 @@ import {
   readCachedTextFile,
   wasObservedToExist,
   wasRecentlyWrittenByThisProcess
-} from "./index-nwswxes7.js";
+} from "./index-hfssjyxs.js";
 import {
   warn
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-5mrvx2vm.js → index-bg19b84s.js}

@@ -11,16 +11,16 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-bgzpw6ge.js";
+} from "./index-3atkcqpb.js";
 import {
   atomicWriteFile
-} from "./index-1n7sf9gz.js";
+} from "./index-5rkh69f3.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
 import {
   readCachedParsedFile
-} from "./index-nwswxes7.js";
+} from "./index-hfssjyxs.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -739,7 +739,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const {
     readAuthoritativeKnowledgeCounterRollups,
     effectiveRetrievalOutcomes
-  } = await import("./knowledge-events-07vpvmmr.js");
+  } = await import("./knowledge-events-hjeaevc9.js");
   const rollups = await readAuthoritativeKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -806,11 +806,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-v13cjze1.js");
-    const { KnowledgeConfigSchema } = await import("./schema-qxgn4xzy.js");
+    const { quarantineEntry } = await import("./knowledge-validator-dghf9pcj.js");
+    const { KnowledgeConfigSchema } = await import("./schema-cr120ar5.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-pq5962z7.js");
+      const { loadPluginConfigWithMeta } = await import("./index-rd9th57y.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-azr0092e.js → index-bgtfvst1.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   writeSpeckitCheckoffLedger
-} from "./index-g7vd2azv.js";
+} from "./index-4gacy6y6.js";
 import {
   validateSpecContent
 } from "./index-0725jpp7.js";

package/dist/cli/{index-nd4kkbjw.js → index-bkpyff61.js}

@@ -1,14 +1,14 @@
 // @bun
 import {
   observeStoreHealth
-} from "./index-4twjbsfw.js";
+} from "./index-ndec8akq.js";
 import {
   telemetry
 } from "./index-mtqwyjrg.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-04knttpn.js";
+} from "./index-1dx5zyss.js";
 import {
   init_constants
 } from "./index-py8wpe81.js";

package/dist/cli/{index-4bpnf2eg.js → index-cpt38e0e.js}

@@ -10,18 +10,23 @@ import {
   dcNormalizeCommand,
   dcSplitSegments,
   dcUnwrapWrappers,
+  declaresWindowsWrapperLoose,
   detectPosixWrites,
   detectWindowsWrites,
   getSharedClassifierGuardrailBlock,
+  isPowerShellReadOnlyPipeline,
+  isPowerShellShaped,
+  mergeWriteAnalyses,
+  resolveWindowsWriteAuthority,
   resolveWriteTargets
-} from "./index-5m64x65w.js";
+} from "./index-jx80ed6g.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-nd4kkbjw.js";
+} from "./index-bkpyff61.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";
@@ -355,14 +360,28 @@ async function handleGuardrailExplain(directory, args) {
     decision = "block";
     firingRule = destructiveEval.firingRule;
   }
+  const commandSegments = dcSplitSegments(shellCommand);
+  const unwrappedSegments = commandSegments.map((s) => dcUnwrapWrappers(s));
+  const didUnwrap = commandSegments.some((s, i) => unwrappedSegments[i] !== s);
+  const detectionCommand = didUnwrap ? unwrappedSegments.join(`
+`) : shellCommand;
   if (decision === "allow") {
-    const shellType = resolveShellType(shellCommand);
-    const analysis = shellType === "powershell" || shellType === "cmd" ? detectWindowsWrites(shellCommand, shellType) : detectPosixWrites(shellCommand);
-    if (analysis.parseError) {
+    const detected = resolveShellType(shellCommand);
+    const authority = resolveWindowsWriteAuthority("shell", shellCommand, detected, isPowerShellShaped(shellCommand));
+    const wrapperDeclaredHere = declaresWindowsWrapperLoose(shellCommand);
+    const posix = detectPosixWrites(detectionCommand);
+    const analysis = authority === null ? posix : mergeWriteAnalyses(posix, detectWindowsWrites(detectionCommand, authority), true, wrapperDeclaredHere);
+    const rawPosix = detectPosixWrites(shellCommand);
+    const rawAnalysis = authority === null ? rawPosix : mergeWriteAnalyses(rawPosix, detectWindowsWrites(shellCommand, authority), true, wrapperDeclaredHere);
+    const rawParseFailure = rawAnalysis.parseError && !isPowerShellReadOnlyPipeline(shellCommand);
+    if (rawParseFailure) {
+      decision = "block";
+      firingRule = "parse_error: write detection failed to parse command \u2014 rejecting for safety";
+    } else if (analysis.parseError && !isPowerShellReadOnlyPipeline(detectionCommand)) {
       decision = "block";
       firingRule = "parse_error: write detection failed to parse command \u2014 rejecting for safety";
     } else if (analysis.hasWrites) {
-      const resolvedWrites = resolveWriteTargets(shellCommand, analysis.writes, directory);
+      const resolvedWrites = resolveWriteTargets(detectionCommand, analysis.writes, directory);
       for (const write of resolvedWrites) {
         if (write.resolvedPath) {
           if (agent !== "architect") {
@@ -380,8 +399,11 @@ async function handleGuardrailExplain(directory, args) {
       }
     }
   } else {
-    const shellType = resolveShellType(shellCommand);
-    const analysis = shellType === "powershell" || shellType === "cmd" ? detectWindowsWrites(shellCommand, shellType) : detectPosixWrites(shellCommand);
+    const detected = resolveShellType(shellCommand);
+    const authority = resolveWindowsWriteAuthority("shell", shellCommand, detected, isPowerShellShaped(shellCommand));
+    const wrapperDeclaredElse = declaresWindowsWrapperLoose(shellCommand);
+    const posix = detectPosixWrites(detectionCommand);
+    const analysis = authority === null ? posix : mergeWriteAnalyses(posix, detectWindowsWrites(detectionCommand, authority), true, wrapperDeclaredElse);
     if (!analysis.parseError && analysis.hasWrites) {
       for (const write of analysis.writes) {
         writeCategories.add(write.category);

package/dist/cli/{index-6a4t4p4p.js → index-cs0p582p.js}

@@ -4,10 +4,10 @@ import {
 } from "./index-m9zzj4ee.js";
 import {
   validateSwarmPath
-} from "./index-eaess7dm.js";
+} from "./index-84k9zzv1.js";
 import {
   observeReceiptTransition
-} from "./index-4twjbsfw.js";
+} from "./index-ndec8akq.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";
@@ -19,11 +19,11 @@ import {
 } from "./index-gx2vp8gx.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-rhjzq6kw.js";
+} from "./index-ngk8hpc3.js";
 import {
   KnowledgeConfigSchema,
   init_schema
-} from "./index-04knttpn.js";
+} from "./index-1dx5zyss.js";
 
 // src/utils/context-decisions.ts
 function extractContextDecisions(content) {

package/dist/cli/{index-hmgx2bsy.js → index-d2emv8ap.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   readEffectiveSpecSync
-} from "./index-azr0092e.js";
+} from "./index-bgtfvst1.js";
 import {
   readSwarmFileAsync
-} from "./index-eaess7dm.js";
+} from "./index-84k9zzv1.js";
 import {
   DURABILITY_CLASSES,
   DbWriteError,
@@ -13,7 +13,7 @@ import {
   classifyDbWriteError,
   getProjectDb,
   projectDbExists
-} from "./index-8zj647hc.js";
+} from "./index-0e318vgt.js";
 import {
   _internals,
   canonicalRootKeyFresh

package/dist/cli/{index-aqvsxjwn.js → index-db786kn6.js}

@@ -23,76 +23,76 @@ import {
   resolveFallbackModel,
   resolvePrimaryAgentNames,
   stripSwarmPrefix
-} from "./index-5m64x65w.js";
-import"./index-nd4kkbjw.js";
-import"./index-3bst6f3c.js";
-import"./index-b7nb6c0p.js";
+} from "./index-jx80ed6g.js";
+import"./index-bkpyff61.js";
+import"./index-4mq8r4be.js";
+import"./index-ma71x1aa.js";
 import"./index-j2vv0h13.js";
-import"./index-0e1nxkte.js";
-import"./index-5gy5dc2n.js";
+import"./index-668npagp.js";
+import"./index-7njm9jk1.js";
 import"./index-txdagbh7.js";
-import"./index-4e8xcgkx.js";
+import"./index-prvancd0.js";
 import {
   createExplorerAgent
 } from "./index-rdec0y3z.js";
-import"./index-hmgx2bsy.js";
-import"./index-8z8cj2rz.js";
-import"./index-zdt5m9n2.js";
-import"./index-f6am4ypq.js";
-import"./index-fzqn2kk8.js";
-import"./index-dtet46e6.js";
+import"./index-d2emv8ap.js";
+import"./index-ymnathfr.js";
+import"./index-r3mffz78.js";
+import"./index-5n760fzn.js";
+import"./index-fd6b9f38.js";
+import"./index-hfnyykvm.js";
 import"./index-cjapb4hy.js";
-import"./index-g8jd3h4r.js";
+import"./index-6s3ab22d.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-b67200rm.js";
-import"./index-31bd6hrm.js";
+import"./index-nktwf2xm.js";
+import"./index-he2nyr7x.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-azr0092e.js";
+import"./index-bgtfvst1.js";
 import"./index-v3bmwmqw.js";
-import"./index-g7vd2azv.js";
-import"./index-83swjsyd.js";
-import"./index-fayfa263.js";
+import"./index-4gacy6y6.js";
+import"./index-nz6ehpjn.js";
+import"./index-x2phyvcv.js";
 import"./index-g4fs6z4e.js";
-import"./index-fzcr2s01.js";
-import"./index-4g39c948.js";
-import"./index-6a4t4p4p.js";
+import"./index-6dn16dre.js";
+import"./index-tr47q89d.js";
+import"./index-cs0p582p.js";
 import"./index-m9zzj4ee.js";
-import"./index-eaess7dm.js";
+import"./index-84k9zzv1.js";
 import"./index-2s7dvzff.js";
-import"./index-yc8v81ab.js";
-import"./index-5dws7eyb.js";
+import"./index-jxs9qnad.js";
+import"./index-w2vbaczx.js";
 import"./index-rtry5xyf.js";
-import"./index-bccf3c0h.js";
+import"./index-vbp35frb.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-cme96pja.js";
-import"./index-ef0tgsgj.js";
-import"./index-a9m7h5v0.js";
-import"./index-dt4cjxbz.js";
-import"./index-mbn4vn3z.js";
-import"./index-8zj647hc.js";
+import"./index-1p24bfn2.js";
+import"./index-5ev6f1gj.js";
+import"./index-qh93qjc2.js";
+import"./index-st80sjg7.js";
+import"./index-vg8sxg12.js";
+import"./index-0e318vgt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
-import"./index-4twjbsfw.js";
-import"./index-5mrvx2vm.js";
+import"./index-ndec8akq.js";
+import"./index-bg19b84s.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-bgzpw6ge.js";
-import"./index-1n7sf9gz.js";
+import"./index-3atkcqpb.js";
+import"./index-5rkh69f3.js";
 import"./index-e8k0v19e.js";
 import"./index-t7hmqgjy.js";
 import"./index-mtqwyjrg.js";
 import"./index-fzpt2djt.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
+import"./index-hfssjyxs.js";
 import"./index-gx2vp8gx.js";
-import"./index-rhjzq6kw.js";
+import"./index-ngk8hpc3.js";
 import"./index-zxdawwc7.js";
-import"./index-04knttpn.js";
+import"./index-1dx5zyss.js";
 import"./index-py8wpe81.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{index-fzqn2kk8.js → index-fd6b9f38.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-eaess7dm.js";
+} from "./index-84k9zzv1.js";
 import {
   bunSpawn
 } from "./index-2s7dvzff.js";
@@ -11,7 +11,7 @@ import {
 } from "./index-fzpt2djt.js";
 import {
   atomicWriteSwarmFile
-} from "./index-nwswxes7.js";
+} from "./index-hfssjyxs.js";
 import {
   init_git_executable,
   resolveGitExecutable

package/dist/cli/{index-31bd6hrm.js → index-he2nyr7x.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-6b295cas.js";
 import {
   readEffectiveSpecSync
-} from "./index-azr0092e.js";
+} from "./index-bgtfvst1.js";
 import {
   _internals,
   clearWorktreeMergeStatus,
@@ -20,7 +20,7 @@ import {
   estimateTokens,
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-eaess7dm.js";
+} from "./index-84k9zzv1.js";
 import {
   bunHash,
   bunWrite
@@ -43,10 +43,10 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-ef0tgsgj.js";
+} from "./index-5ev6f1gj.js";
 import {
   appendCoreEventSync
-} from "./index-a9m7h5v0.js";
+} from "./index-qh93qjc2.js";
 import {
   deleteCoordinationStateWithinTransaction,
   getCoordinationStateRaw,
@@ -55,13 +55,13 @@ import {
   transitionCoordinationState,
   transitionCoordinationStateWithinTransaction,
   withCoordinationTransaction
-} from "./index-mbn4vn3z.js";
+} from "./index-vg8sxg12.js";
 import {
   DURABILITY_CLASSES,
   getProjectDb,
   projectDbExists,
   withDurabilityClass
-} from "./index-8zj647hc.js";
+} from "./index-0e318vgt.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
@@ -82,7 +82,7 @@ import {
   atomicWriteSwarmFileSync,
   invalidateCachedArtifact,
   readCachedParsedFile
-} from "./index-nwswxes7.js";
+} from "./index-hfssjyxs.js";
 import {
   PlanSchema,
   normalizeCurrentPhaseInPlace,
@@ -93,7 +93,7 @@ import {
   init_loader,
   isEpicModeConfigEnabled,
   loadPluginConfigWithMeta
-} from "./index-rhjzq6kw.js";
+} from "./index-ngk8hpc3.js";
 import {
   exports_external,
   init_zod
@@ -2664,7 +2664,7 @@ ${markdown}`;
   }
 }
 async function defaultMaybeSaveAutoCheckpoint(directory, plan) {
-  const { maybeSaveAutoCheckpoint } = await import("./auto-checkpoint-8c7hpz0z.js");
+  const { maybeSaveAutoCheckpoint } = await import("./auto-checkpoint-taay16xe.js");
   return maybeSaveAutoCheckpoint(directory, plan);
 }
 async function updateTaskStatus(directory, taskId, status, options) {
@@ -2740,7 +2740,7 @@ async function updateTaskStatus(directory, taskId, status, options) {
       if (status === "completed") {
         try {
           const completedTask = updatedPlan.phases.flatMap((phase) => phase.tasks).find((candidate) => candidate.id === taskId);
-          const { maybePropagateSpeckitCheckoff } = await import("./speckit-checkoff-atm1ftz7.js");
+          const { maybePropagateSpeckitCheckoff } = await import("./speckit-checkoff-g2qrb1tn.js");
           await maybePropagateSpeckitCheckoff(directory, {
             taskId,
             frRefs: completedTask?.fr_refs ?? [],

package/dist/cli/{index-dtet46e6.js → index-hfnyykvm.js}

@@ -1,21 +1,21 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-eaess7dm.js";
+} from "./index-84k9zzv1.js";
 import {
   deleteCoordinationState,
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-mbn4vn3z.js";
+} from "./index-vg8sxg12.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-8zj647hc.js";
+} from "./index-0e318vgt.js";
 import {
   observeStoreHealth
-} from "./index-4twjbsfw.js";
+} from "./index-ndec8akq.js";
 import {
   withEvidenceLock
 } from "./index-e8k0v19e.js";
@@ -29,7 +29,7 @@ import {
 } from "./index-fzpt2djt.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-nwswxes7.js";
+} from "./index-hfssjyxs.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-nwswxes7.js → index-hfssjyxs.js}

@@ -334,8 +334,8 @@ var SWARM_TEMP_GRAMMARS = [
     quarantineEligible: true,
     parsesTarget: true,
     producers: [
-      "src/tools/write-pr-review-artifact.ts:154",
-      "src/tools/write-pr-review-artifact.ts:174",
+      "src/tools/write-pr-review-artifact.ts:155",
+      "src/tools/write-pr-review-artifact.ts:175",
       "src/tools/write-pr-review-trigger-eval.ts:createTriggerReceipt"
     ],
     note: "bundled-skills writes outside .swarm (project skill roots) and keeps its own contained-directory logic (invariant 4 bundled-skill ownership)"