opencode-swarm 7.196.0 → 7.197.0

package/dist/cli/{index-bjaef5zn.js → index-jvpvghyh.js}

@@ -8,14 +8,14 @@ import {
   protectedRoots,
   redactDecisionLineForArchive,
   stableCanonicalStringify
-} from "./index-t5med3ga.js";
+} from "./index-8zwmfh9d.js";
 import {
   detectStraySwarmDirs,
   readDoctorArtifact,
   removeStraySwarmDir,
   resolvePlanParallelizationFlag,
   runConfigDoctor
-} from "./index-hjma52c8.js";
+} from "./index-67w61x1b.js";
 import {
   archiveEvidence,
   checkRequirementCoverage,
@@ -27,7 +27,7 @@ import {
   sanitizeTaskId,
   saveEvidence,
   validateProjectRoot
-} from "./index-2grr37ry.js";
+} from "./index-jvzfw0n5.js";
 import {
   JAVA_SYMBOL_GRAMMAR,
   LANGUAGE_REGISTRY,
@@ -89,7 +89,7 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-knxq5byr.js";
+} from "./index-dgvf1jey.js";
 import {
   CURATOR_CONSOLIDATION_PROMPT,
   CURATOR_INIT_PROMPT,
@@ -108,13 +108,13 @@ import {
   getGroupCommitWriter,
   importLegacyJsonl,
   readPriorDriftReports
-} from "./index-sgt1d7ez.js";
+} from "./index-ysbmrmzk.js";
 import {
   assertNoUnsettledCoderDispatch,
   listCoderSettlementWalStates,
   recoverCoderSettlement,
   recoverStaleCoderSettlements
-} from "./index-7zkgdefv.js";
+} from "./index-njfkqr77.js";
 import {
   BUNDLED_PROJECT_SKILL_ROOT,
   DEFAULT_SKILL_MIN_CONFIDENCE,
@@ -134,12 +134,14 @@ import {
   retireOrMarkStale,
   retireSkill,
   selectCandidateEntries,
+  skillContractDigest,
+  splitSkillFrontmatter,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-41p9zzpe.js";
+} from "./index-29xr45xr.js";
 import {
   buildEscalationBriefing,
   readRecentEscalations
-} from "./index-7gqmqhzj.js";
+} from "./index-1cks27mv.js";
 import {
   parsePorcelainV2Snapshot,
   resolveCommitCountSince,
@@ -223,7 +225,7 @@ import {
   swarmOverwriteCandidates,
   trackedDirtyCandidates,
   transientBackoff
-} from "./index-31b55cq9.js";
+} from "./index-xf6tdsyr.js";
 import {
   EPIC_MODE_CONFIG_DISABLED_MESSAGE,
   PlanRecoverySupersededError,
@@ -255,7 +257,7 @@ import {
   updateEpicRecord,
   updateTaskStatus,
   withPlanLifecycleLock
-} from "./index-tjc68trf.js";
+} from "./index-1gnrtz76.js";
 import {
   containsControlChars,
   containsPathTraversal,
@@ -271,7 +273,7 @@ import {
   resolveSpeckitProjection,
   validateSpeckit,
   writeProjectedSpecSync
-} from "./index-ryjp0wmq.js";
+} from "./index-t3tzk566.js";
 import {
   clearWorktreeMergeStatus,
   getAllWorktreeMergeFailures,
@@ -303,7 +305,7 @@ import {
   transitionTaskWorkflowEvidenceWithStatus,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-3drq02r1.js";
+} from "./index-401a12w5.js";
 import {
   isPathUnderSwarmWorktreeBase,
   listLiveLaneOwners,
@@ -312,7 +314,7 @@ import {
   recordLiveLaneOwner,
   removeWorktree,
   resolveWorktreeBaseDir
-} from "./index-391ydd25.js";
+} from "./index-mbdkr2sh.js";
 import {
   GitBinaryMissingError,
   GitSpawnCwdError,
@@ -354,7 +356,7 @@ import {
   scanBackgroundCoderReservationsForAdmission,
   scanDelegationsForRecovery,
   sweepStaleDelegations
-} from "./index-vsa05smc.js";
+} from "./index-9px1knpj.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals,
@@ -366,7 +368,7 @@ import {
   recordHiveKnowledgeEvent,
   recordKnowledgeEvent,
   resolveKnowledgeEventsPath
-} from "./index-mt5t492g.js";
+} from "./index-eabxecjf.js";
 import {
   commitDisplayedMembership,
   commitEmptyRetrieval,
@@ -379,7 +381,7 @@ import {
   queryLiveMemberships,
   reconcilePhaseClose,
   recordPhaseCloseIntent
-} from "./index-te61qv0q.js";
+} from "./index-ng6me2hh.js";
 import {
   sanitizeContextText
 } from "./index-m9zzj4ee.js";
@@ -410,7 +412,7 @@ import {
   validateActionableFields,
   validateLesson,
   validateSkillPath
-} from "./index-wscg5ryb.js";
+} from "./index-avbvxmw2.js";
 import {
   MAX_CURATION_PROPOSALS,
   authorizeCuration,
@@ -421,7 +423,7 @@ import {
 } from "./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-8bsnnnj2.js";
+} from "./index-g749xs7c.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-g22dps7x.js";
@@ -433,7 +435,7 @@ import {
   clearScopeBindings,
   readAuthoritativeScopeBindingSet,
   readDeclaredScopeFilesFromBindings
-} from "./index-tzasccpd.js";
+} from "./index-fzx1wfxn.js";
 import {
   approvedSnapshotCoversPlan,
   clearPlanLedgerForReset,
@@ -450,7 +452,7 @@ import {
   replayFromLedgerWithStatus,
   resolvePlanningProfile,
   takeSnapshotEvent
-} from "./index-174j0g38.js";
+} from "./index-9sqcmzc2.js";
 import {
   CORE_EVENT_LOCKED,
   appendCoreEventSync,
@@ -539,7 +541,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-jnjvghgp.js";
+} from "./index-xb3h5tvj.js";
 import {
   readTailJsonl,
   readTailJsonlDetailed,
@@ -624,7 +626,7 @@ import {
   loadPluginConfig,
   loadPluginConfigWithMeta,
   resolveEpicConfig
-} from "./index-ppnpkww2.js";
+} from "./index-bpnpvhja.js";
 import {
   GIT_BINARY_ENV_VAR,
   addDeferredWarning,
@@ -657,7 +659,7 @@ import {
   resolveContextWindow,
   resolveGeneratedAgentRole,
   stripKnownSwarmPrefix
-} from "./index-nqxbqb50.js";
+} from "./index-20m9q2z9.js";
 import {
   AGENT_TOOL_MAP,
   ALL_AGENT_NAMES,
@@ -830,7 +832,7 @@ init_loader();
 
 // src/hooks/pr-workflow-gate.ts
 init_zod();
-import { createHash as createHash26, randomUUID as randomUUID6 } from "crypto";
+import { createHash as createHash25, randomUUID as randomUUID6 } from "crypto";
 import * as fsp5 from "fs/promises";
 import * as path34 from "path";
 
@@ -3457,7 +3459,7 @@ async function importLegacyPrWorkflowGateStateIfNeeded(directory, sessionID, all
       return null;
     throw error2;
   }
-  const legacy = allowSalvagedImport ? (await (await import("./pr-workflow-gate-2gmznmj4.js")).readPrWorkflowGateStateForRecovery(directory, sessionID))?.state ?? null : await readPrWorkflowGateStateFileFromDisk(filePath, sessionID);
+  const legacy = allowSalvagedImport ? (await (await import("./pr-workflow-gate-wg003fkd.js")).readPrWorkflowGateStateForRecovery(directory, sessionID))?.state ?? null : await readPrWorkflowGateStateFileFromDisk(filePath, sessionID);
   if (!legacy)
     return null;
   const namespace = workflowGateStateCoordinationNamespace(sessionID);
@@ -3544,7 +3546,7 @@ async function deleteStateWhileLocked(directory, sessionID, options = {}) {
   let recoveryState = null;
   if (!currentAuthoritative) {
     if (options.allowSalvagedRead) {
-      const { readPrWorkflowGateStateForRecovery } = await import("./pr-workflow-gate-2gmznmj4.js");
+      const { readPrWorkflowGateStateForRecovery } = await import("./pr-workflow-gate-wg003fkd.js");
       recoveryState = (await readPrWorkflowGateStateForRecovery(directory, normalizedSessionID))?.state ?? null;
     }
     if (!recoveryState) {
@@ -7019,30 +7021,6 @@ import * as fs4 from "fs";
 import * as os2 from "os";
 import * as path9 from "path";
 import { fileURLToPath } from "url";
-
-// src/config/skill-contract-digest.ts
-import { createHash as createHash11 } from "crypto";
-function splitSkillFrontmatter(content) {
-  if (!content.startsWith(`---
-`))
-    return { frontmatter: "", body: content };
-  const end = content.indexOf(`
----
-`, 4);
-  if (end === -1)
-    return { frontmatter: "", body: content };
-  return {
-    frontmatter: content.slice(0, end + 5),
-    body: content.slice(end + 5)
-  };
-}
-function skillContractDigest(body) {
-  const normalized = body.replace(/\r\n/g, `
-`);
-  return createHash11("sha256").update(normalized, "utf8").digest("hex").slice(0, 12);
-}
-
-// src/services/pr-workflow-skill-contract.ts
 init_warning_buffer();
 var PR_WORKFLOW_MODE_SKILL = {
   PR_REVIEW: "swarm-pr-review",
@@ -7155,7 +7133,7 @@ init_schema();
 
 // src/council/council-review-identity.ts
 init_schema();
-import { createHash as createHash12 } from "crypto";
+import { createHash as createHash11 } from "crypto";
 var COUNCIL_REVIEW_IDENTITY_VERSION = 2;
 function computeCouncilReviewHash(plan) {
   const normalized = {
@@ -7182,7 +7160,7 @@ function computeCouncilReviewHash(plan) {
       }))
     }))
   };
-  return createHash12("sha256").update(JSON.stringify(normalized), "utf8").digest("hex");
+  return createHash11("sha256").update(JSON.stringify(normalized), "utf8").digest("hex");
 }
 function computeCouncilPolicyDigest(level, config) {
   const base = {
@@ -7210,7 +7188,7 @@ function computeCouncilPolicyDigest(level, config) {
       minimumMembers: config?.minimumMembers ?? 3
     };
   }
-  return createHash12("sha256").update(JSON.stringify(normalized), "utf8").digest("hex");
+  return createHash11("sha256").update(JSON.stringify(normalized), "utf8").digest("hex");
 }
 function resolveFinalCompletionPolicy(config) {
   const policy = config?.finalCompletionPolicy;
@@ -7235,7 +7213,7 @@ function computeCouncilReviewIdentity(input) {
   };
   return {
     ...identity,
-    identityDigest: createHash12("sha256").update(JSON.stringify(identity), "utf8").digest("hex")
+    identityDigest: createHash11("sha256").update(JSON.stringify(identity), "utf8").digest("hex")
   };
 }
 
@@ -7529,7 +7507,7 @@ import * as fs21 from "fs";
 import * as path31 from "path";
 
 // src/background/stage-b-dispatch-binding-store.ts
-import { createHash as createHash13 } from "crypto";
+import { createHash as createHash12 } from "crypto";
 var STAGE_B_BINDINGS_DIR = "stage-b-dispatch-bindings";
 var STAGE_B_BINDING_MAX_BYTES = 64 * 1024;
 var STAGE_B_BINDING_TTL_MS = 24 * 60 * 60 * 1000;
@@ -7559,7 +7537,7 @@ var WINDOWS_RESERVED = new Set([
   "LPT9"
 ]);
 function stageBSessionDirName(sessionID) {
-  return createHash13("sha256").update(sessionID).digest("hex").slice(0, 24);
+  return createHash12("sha256").update(sessionID).digest("hex").slice(0, 24);
 }
 
 // src/hooks/delegation-gate.ts
@@ -9153,7 +9131,7 @@ import * as path18 from "path";
 // src/hooks/delegation-gate/worktree-isolation.ts
 init_constants();
 init_schema();
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 import * as fs10 from "fs/promises";
 import * as path16 from "path";
 
@@ -9161,7 +9139,7 @@ import * as path16 from "path";
 init_logger();
 
 // src/epic/plan-key.ts
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash13 } from "crypto";
 var SWARM_PLAN_TRAILER_KEY = "Swarm-Plan";
 var SWARM_TASK_SUBJECT_RE = /^swarm\(task ([^)]+)\):/;
 var TRAILER_LINE_RE = /^Swarm-Plan:[ \t]*(\S+)[ \t]*$/;
@@ -9175,7 +9153,7 @@ function scrubTaskIdForGitSubject(taskId) {
   return taskId.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
 function computePlanKey(planIdentityHash, planEpoch) {
-  return createHash14("sha256").update(`${planIdentityHash}|${planEpoch ?? ""}`, "utf8").digest("hex").slice(0, 16);
+  return createHash13("sha256").update(`${planIdentityHash}|${planEpoch ?? ""}`, "utf8").digest("hex").slice(0, 16);
 }
 function formatSwarmPlanTrailer(planKey) {
   return `${SWARM_PLAN_TRAILER_KEY}: ${planKey}`;
@@ -9450,7 +9428,7 @@ var _internals19 = {
 init_git_executable();
 init_logger();
 // src/hooks/reviewer-scope-file-fingerprint.ts
-import { createHash as createHash15 } from "crypto";
+import { createHash as createHash14 } from "crypto";
 import * as fs7 from "fs";
 import * as path14 from "path";
 var RETRYABLE_CAPTURE_FAILURE_CODES = new Set([
@@ -9736,7 +9714,7 @@ function captureReviewerScopeFileFingerprint(directory, file, options = {}) {
         retryable: true
       };
     }
-    const hash = createHash15("sha256");
+    const hash = createHash14("sha256");
     const chunk = Buffer.alloc(REVIEWER_SCOPE_CAPTURE_CHUNK_BYTES);
     let totalBytes = 0;
     for (;; ) {
@@ -10092,7 +10070,7 @@ var _internals22 = {
 };
 
 // src/hooks/delegation-gate/worktree-recovery-authority.ts
-import { createHash as createHash16, randomBytes } from "crypto";
+import { createHash as createHash15, randomBytes } from "crypto";
 import * as fs9 from "fs";
 import * as path15 from "path";
 var STORE_RELATIVE_PATH = path15.join(".swarm", "worktree-merge-recovery-v2.json");
@@ -10111,7 +10089,7 @@ function nowMs(input) {
   return input ?? Date.now();
 }
 function sha2562(input) {
-  return createHash16("sha256").update(input).digest("hex");
+  return createHash15("sha256").update(input).digest("hex");
 }
 function storePath2(directory) {
   return path15.join(directory, STORE_RELATIVE_PATH);
@@ -11342,7 +11320,7 @@ function isLaneOwnedByCurrentSession(branchName, expectedSessionId) {
   return extracted === expectedSessionId;
 }
 async function inspectStandardWorktreeCollisionOwnership(identity) {
-  const collisionOwnership = await import("./worktree-collision-ownership-1bgcea0v.js");
+  const collisionOwnership = await import("./worktree-collision-ownership-p7zmj4ag.js");
   return collisionOwnership.inspectStandardWorktreeCollisionOwnership(identity);
 }
 async function runRecoveryGit(directory, args, timeoutMs = 15000) {
@@ -11770,7 +11748,7 @@ async function precreateStandardWorktreeSession(args) {
   const laneProfile = computeLaneRuntimeProfile(worktreeConfig.runtime_isolation, laneIndex, handle.worktreePath);
   if (laneProfile) {
     try {
-      const { writeLaneProfileToDiskReal } = await import("./core-dmn3arr1.js");
+      const { writeLaneProfileToDiskReal } = await import("./core-qpmksfae.js");
       await writeLaneProfileToDiskReal(handle.worktreePath, laneProfile.laneIndex, laneProfile.envOverrides);
     } catch {}
   }
@@ -11935,7 +11913,7 @@ async function preserveBackgroundWorktreeOwnershipForCallId(callID) {
   }
   const session = Buffer.from(dispatch.handle.sessionId, "utf8").toString("base64url");
   const lane = Buffer.from(dispatch.handle.id, "utf8").toString("base64url");
-  const callDigest = createHash17("sha256").update(callID).digest("hex").slice(0, 12);
+  const callDigest = createHash16("sha256").update(callID).digest("hex").slice(0, 12);
   const tag = `swarm-preserved-owner/${session}/${lane}/${callDigest}`;
   let tagProc;
   try {
@@ -12764,7 +12742,7 @@ async function finishStandardWorktreeDispatch(directory, dispatch, config, callI
       }
       clearWorktreeMergeStatus(statusKey);
       try {
-        const { removeLaneProfileFromDiskReal } = await import("./core-dmn3arr1.js");
+        const { removeLaneProfileFromDiskReal } = await import("./core-qpmksfae.js");
         await removeLaneProfileFromDiskReal(dispatch.handle.worktreePath, dispatch.laneIndex);
       } catch {}
       const state = serializationStateBySessionID.get(dispatch.parentSessionID);
@@ -13347,7 +13325,7 @@ function summarizeEpicLearning(stats, hotExcess, limit = 10) {
 
 // src/epic/learning-store.ts
 init_zod();
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 import * as fs11 from "fs";
 import * as path17 from "path";
 init_logger();
@@ -13449,7 +13427,7 @@ function readBounded(filePath) {
   return fs11.readFileSync(filePath, "utf-8");
 }
 function sha2563(text) {
-  return createHash18("sha256").update(text).digest("hex");
+  return createHash17("sha256").update(text).digest("hex");
 }
 function directoryProbe(directory) {
   return (entry) => {
@@ -14600,7 +14578,7 @@ init_schema();
 init_config();
 
 // src/security/command-classifier.ts
-import { createHash as createHash19 } from "crypto";
+import { createHash as createHash18 } from "crypto";
 
 // src/hooks/guardrails/destructive-command.ts
 import * as fsSync2 from "fs";
@@ -15411,7 +15389,7 @@ var SAFE = [
 ];
 var BLOCK_RULES_BY_ID = new Map([...CATASTROPHIC, ...DESTRUCTIVE].map((rule) => [rule.id, rule]));
 function digest(value) {
-  return createHash19("sha256").update(value).digest("hex");
+  return createHash18("sha256").update(value).digest("hex");
 }
 function hasAmbiguousSyntax(value) {
   let single = false;
@@ -18149,6 +18127,10 @@ function parseGeneratedFromKnowledge(content) {
   if (!frontmatterMatch)
     return [];
   const body = frontmatterMatch[1];
+  const jsonMatch = body.match(/^\s+generated_from_knowledge:\s*'?\[([^\]]*)\]'?\s*$/m);
+  if (jsonMatch) {
+    return jsonMatch[1].split(",").map((entry) => entry.trim().replace(/^["']|["']$/g, "")).filter(Boolean);
+  }
   const ids = [];
   const sectionRegex = /generated_from_knowledge\s*:\s*\n((?:\s+-\s+\S+[^\n]*\n?)+)/;
   const sectionMatch = body.match(sectionRegex);
@@ -18479,6 +18461,61 @@ function collectAudienceYamlList(lines, start, end) {
     nextIndex: i - 1
   };
 }
+function collectMetadataChildren(lines, start, end) {
+  const children = new Map;
+  const duplicateKeys = new Set;
+  let i = start;
+  let current = null;
+  for (;i < end; i++) {
+    const line = lines[i] ?? "";
+    if (line.trim() === "")
+      continue;
+    if (!/^\s/.test(line))
+      break;
+    const childMatch = line.match(/^\s+([A-Za-z_][A-Za-z0-9_-]*)\s*:\s*(.*)$/);
+    if (childMatch) {
+      const key = childMatch[1].toLowerCase();
+      if (children.has(key)) {
+        duplicateKeys.add(key);
+        current = null;
+        continue;
+      }
+      const child = {
+        inline: stripQuotes(childMatch[2].trim()).replace(/''/g, "'"),
+        listItems: []
+      };
+      children.set(key, child);
+      current = { child };
+      continue;
+    }
+    const itemMatch = line.match(/^\s+-\s+(.+?)\s*$/);
+    if (itemMatch && current) {
+      current.child.listItems.push(itemMatch[1]);
+    }
+  }
+  return { children, duplicateKeys, nextIndex: i - 1 };
+}
+function resolveAudiencePair(metadataAudience, topLevelAudience) {
+  if (metadataAudience.status === "absent")
+    return topLevelAudience;
+  if (metadataAudience.status !== "valid")
+    return { status: "invalid", values: [] };
+  if (topLevelAudience.status === "absent")
+    return metadataAudience;
+  if (topLevelAudience.status !== "valid")
+    return { status: "invalid", values: [] };
+  const sortKey = (values) => [...values].sort().join("\x00");
+  return sortKey(metadataAudience.values) === sortKey(topLevelAudience.values) ? metadataAudience : { status: "invalid", values: [] };
+}
+function parseMetadataAudienceChild(child) {
+  if (child.inline) {
+    return parseInlineAudienceList(child.inline);
+  }
+  if (child.listItems.length === 0) {
+    return { status: "invalid", values: [] };
+  }
+  return parseAudienceValues(child.listItems);
+}
 function isSkillAudienceMatch(metadata, context) {
   const audience = metadata.audience;
   if (!audience || audience.status === "absent")
@@ -18513,6 +18550,8 @@ function parseSkillFrontmatter(content, skillPath) {
   let skillType;
   let triggers = [];
   let audience = { status: "absent", values: [] };
+  let metadataChildren = null;
+  let duplicateMetadataBlocks = 0;
   for (let i = 1;i < end; i++) {
     const line = lines[i] ?? "";
     const match = line.match(/^([A-Za-z_][A-Za-z0-9_-]*)\s*:\s*(.*)$/);
@@ -18520,6 +18559,18 @@ function parseSkillFrontmatter(content, skillPath) {
       continue;
     const key = match[1].toLowerCase();
     const rawValue = match[2].trim();
+    if (key === "metadata") {
+      duplicateMetadataBlocks += 1;
+      if (duplicateMetadataBlocks === 1) {
+        const collected = collectMetadataChildren(lines, i + 1, end);
+        metadataChildren = collected.children;
+        if (collected.duplicateKeys.has("audience")) {
+          audience = { status: "invalid", values: [] };
+        }
+        i = collected.nextIndex;
+      }
+      continue;
+    }
     if (key === "name") {
       const parsed = stripQuotes(rawValue);
       if (parsed)
@@ -18552,7 +18603,7 @@ function parseSkillFrontmatter(content, skillPath) {
         audience = collected.audience;
         i = collected.nextIndex;
       } else {
-        audience = parseInlineAudienceList(rawValue);
+        audience = parseInlineAudienceList(stripQuotes(rawValue));
       }
       continue;
     }
@@ -18572,6 +18623,24 @@ function parseSkillFrontmatter(content, skillPath) {
       description = stripQuotes(rawValue);
     }
   }
+  if (duplicateMetadataBlocks > 1) {
+    audience = { status: "invalid", values: [] };
+  } else if (metadataChildren) {
+    const audienceChild = metadataChildren.get("audience");
+    if (audienceChild && audience.status !== "invalid") {
+      audience = resolveAudiencePair(parseMetadataAudienceChild(audienceChild), audience);
+    }
+    const skillTypeChild = metadataChildren.get("skill_type");
+    if (skillTypeChild) {
+      const value = skillTypeChild.inline;
+      if (value === "directive" || value === "workflow")
+        skillType = value;
+    }
+    const triggersChild = metadataChildren.get("triggers");
+    if (triggersChild) {
+      triggers = triggersChild.inline ? normalizeTriggerList(parseInlineStringList(triggersChild.inline)) : normalizeTriggerList(triggersChild.listItems);
+    }
+  }
   const meta = {
     path: normalizedPath,
     frontmatterStatus: "valid",
@@ -21232,7 +21301,7 @@ init_schema();
 
 // src/failures/action-identity.ts
 init_schema();
-import { createHash as createHash21 } from "crypto";
+import { createHash as createHash20 } from "crypto";
 var MAX_STRING_INPUT = 512;
 var MAX_PUBLIC_FIELD_LENGTH = 128;
 var MAX_COLLECTION_ITEMS = 64;
@@ -21286,7 +21355,7 @@ function normalizeToolName2(tool) {
   return tool.trim().toLowerCase() || "unknown-tool";
 }
 function hashString(value) {
-  return createHash21("sha256").update(value).digest("hex");
+  return createHash20("sha256").update(value).digest("hex");
 }
 function readRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : undefined;
@@ -21531,7 +21600,7 @@ function createActionIdentity(input) {
 }
 
 // src/failures/invocation-failure.ts
-import { createHash as createHash22 } from "crypto";
+import { createHash as createHash21 } from "crypto";
 var MAX_DISPLAY_BYTES = 512;
 var MAX_STRUCTURED_STRING = 128;
 function hasOwn(source, key) {
@@ -21555,7 +21624,7 @@ function boundedUtf8(value, maxBytes = MAX_DISPLAY_BYTES) {
   return buffer.subarray(0, maxBytes).toString("utf8").replace(/\uFFFD+$/g, "");
 }
 function hashValue(value) {
-  return createHash22("sha256").update(value).digest("hex");
+  return createHash21("sha256").update(value).digest("hex");
 }
 function redactUrl(match) {
   try {
@@ -21895,7 +21964,7 @@ function getFullAutoRecoveryBlockers(input) {
 }
 
 // src/review/diff-source.ts
-import { createHash as createHash23 } from "crypto";
+import { createHash as createHash22 } from "crypto";
 import * as fs19 from "fs";
 import * as path28 from "path";
 init_git_executable();
@@ -22307,7 +22376,7 @@ function uniqueSkipCodes(skipReasons) {
   return [...new Set(skipReasons.map((item) => item.code))].sort();
 }
 function hashManifestPayload(payload) {
-  return createHash23("sha256").update(JSON.stringify(payload), "utf8").digest("hex");
+  return createHash22("sha256").update(JSON.stringify(payload), "utf8").digest("hex");
 }
 function parseObjectFormat(stdout) {
   const objectFormat = stdout.trim();
@@ -22395,7 +22464,7 @@ function hashWorkingTreeIdentity(root, rawPath, budget) {
     if (fileBytes > budget.remainingBytes) {
       return deadlineExceeded(`working-tree content identity exceeded the ${WORKTREE_IDENTITY_TOTAL_BYTES}-byte aggregate cap`);
     }
-    const hash = createHash23("sha256");
+    const hash = createHash22("sha256");
     const buffer = Buffer.alloc(64 * 1024);
     let offset = 0;
     while (offset < fileBytes) {
@@ -22975,8 +23044,8 @@ async function collectReviewDiff(options) {
     canonicalText,
     fileListFallback: fileListFallback ?? null
   });
-  const scopeHash = createHash23("sha256").update(hashPayload, "utf8").digest("hex");
-  const reviewContentHash = createHash23("sha256").update(JSON.stringify({
+  const scopeHash = createHash22("sha256").update(hashPayload, "utf8").digest("hex");
+  const reviewContentHash = createHash22("sha256").update(JSON.stringify({
     selector,
     canonicalText,
     fileListFallback: fileListFallback ?? null
@@ -23180,7 +23249,7 @@ ${text}`;
 }
 
 // src/db/observability-event-store.ts
-import { createHash as createHash24 } from "crypto";
+import { createHash as createHash23 } from "crypto";
 import { existsSync as existsSync11, readFileSync as readFileSync14, statSync as statSync10 } from "fs";
 import { join as join23 } from "path";
 var MAX_OBSERVABILITY_EVENT_ROWS = 50000;
@@ -23192,7 +23261,7 @@ var LINE_HASH_NAMESPACE = "obs-line-v1";
 var LINE_HASH_QUERY_CHUNK = 500;
 var LIVE_LINE_HASH_BACKFILL_MARKER = "__live_line_hash_backfill__";
 function lineHashOf(content) {
-  return createHash24("sha256").update(`${LINE_HASH_NAMESPACE}\x00${content}`).digest("hex");
+  return createHash23("sha256").update(`${LINE_HASH_NAMESPACE}\x00${content}`).digest("hex");
 }
 function normalizeSegmentForLineHash(segment) {
   return segment.endsWith("\r") ? segment.slice(0, -1) : segment;
@@ -23249,7 +23318,7 @@ function runRetentionIfOverCap(db) {
   db.run("DELETE FROM observability_event WHERE rowid IN (SELECT rowid FROM observability_event ORDER BY rowid ASC LIMIT ?)", [excess]);
 }
 function syntheticImportEventId(line) {
-  return createHash24("sha256").update(`${IMPORT_ID_NAMESPACE}\x00${line}`).digest("hex");
+  return createHash23("sha256").update(`${IMPORT_ID_NAMESPACE}\x00${line}`).digest("hex");
 }
 function unparseableImportRow(line, reason) {
   return {
@@ -23639,7 +23708,7 @@ function readOtlpExporterHealth(directory) {
 
 // src/services/task-cohort.ts
 init_logger();
-import { createHash as createHash25 } from "crypto";
+import { createHash as createHash24 } from "crypto";
 import * as fs20 from "fs";
 import * as path29 from "path";
 var MANIFEST_DIGEST_LIMIT_BYTES = 64 * 1024;
@@ -23661,7 +23730,7 @@ function captureFileManifest(source, filePath, capturedAt) {
     try {
       const buffer = Buffer.alloc(MANIFEST_DIGEST_LIMIT_BYTES);
       const bytesRead = fs20.readSync(fd, buffer, 0, buffer.length, 0);
-      const digest2 = createHash25("sha256").update(buffer.subarray(0, bytesRead)).digest("hex");
+      const digest2 = createHash24("sha256").update(buffer.subarray(0, bytesRead)).digest("hex");
       return {
         source,
         status: "captured",
@@ -23687,7 +23756,7 @@ function captureHostStatusManifest(capturedAt, strata) {
   if (runtime === "") {
     return { source: "host_status", status: "unavailable", capturedAt };
   }
-  const digest2 = createHash25("sha256").update(runtime).digest("hex");
+  const digest2 = createHash24("sha256").update(runtime).digest("hex");
   return {
     source: "host_status",
     status: "captured",
@@ -23697,7 +23766,7 @@ function captureHostStatusManifest(capturedAt, strata) {
 }
 function manifestFileName(capturedAt, manifests) {
   const combined = manifests.map((m) => `${m.source}:${m.status}:${m.digest ?? "-"}`).join("|");
-  const suffix = createHash25("sha256").update(combined).digest("hex").slice(0, 12);
+  const suffix = createHash24("sha256").update(combined).digest("hex").slice(0, 12);
   const epoch = Date.parse(capturedAt);
   const stamp = Number.isFinite(epoch) ? epoch : 0;
   return `${stamp}-${suffix}.json`;
@@ -29106,7 +29175,7 @@ function clearCriticalShownIds(sessionID) {
 async function rehydratePrSubscriptions(sessionID, directory) {
   const map = new Map;
   try {
-    const { listActive: listActive2 } = await import("./pr-subscriptions-hkzd0nr4.js");
+    const { listActive: listActive2 } = await import("./pr-subscriptions-9dbrw7ky.js");
     const records = await listActive2(directory);
     for (const record of records) {
       if (record.sessionID !== sessionID)
@@ -32492,7 +32561,7 @@ async function recordPrFeedbackStageA(directory, sessionID, revisionDigest, chec
         throw new Error(`BLOCKED: PR_FEEDBACK Stage A obligation ${obligation.id} requires exact validator contract provenance`);
       }
     }
-    const commandDigest = createHash26("sha256").update(`${check.obligationId ?? check.category}\x00${check.workingDirectory ?? "."}\x00${check.command.join("\x00")}`).digest("hex");
+    const commandDigest = createHash25("sha256").update(`${check.obligationId ?? check.category}\x00${check.workingDirectory ?? "."}\x00${check.command.join("\x00")}`).digest("hex");
     if (commandDigests.has(commandDigest)) {
       throw new Error("BLOCKED: PR_FEEDBACK Stage A cannot reuse one command as multiple check receipts");
     }
@@ -33361,7 +33430,7 @@ function parseExactBoundPushIntent(command, armed) {
   return {
     ok: true,
     intent,
-    digest: createHash26("sha256").update(JSON.stringify(intent), "utf8").digest("hex")
+    digest: createHash25("sha256").update(JSON.stringify(intent), "utf8").digest("hex")
   };
 }
 async function admitPrFeedbackPushAttempt(directory, sessionID, callID, intent, intentDigest) {
@@ -34152,7 +34221,7 @@ async function findOwnedPrReviewRunReservations(directory, sessionID, workflowIn
   return owned.sort();
 }
 function hashPrReviewFindingIds(ids) {
-  return createHash26("sha256").update([...new Set(ids)].sort().join("\x00"), "utf8").digest("hex");
+  return createHash25("sha256").update([...new Set(ids)].sort().join("\x00"), "utf8").digest("hex");
 }
 async function readPrReviewRunReservation(directory, runId) {
   try {
@@ -34267,7 +34336,7 @@ async function readPrReviewFeedbackHandoffArtifact(directory, relativePath) {
   }
   return {
     artifact: parsed.data,
-    digest: createHash26("sha256").update(raw, "utf8").digest("hex")
+    digest: createHash25("sha256").update(raw, "utf8").digest("hex")
   };
 }
 var PrReviewFindingProjectionSchema = exports_external.object({
@@ -34345,7 +34414,7 @@ async function readAuthoritativeFindingPolicy(directory, state) {
   const receipt = routeReceipt;
   const expectedPath = `pr-review/${runId}/findings.jsonl`;
   const raw = await readBoundedSwarmRegularFile2(directory, state.prReviewFindingsPath, PR_REVIEW_FINDINGS_MAX_BYTES, "PR_REVIEW final findings artifact");
-  const findingsDigest = createHash26("sha256").update(raw, "utf8").digest("hex");
+  const findingsDigest = createHash25("sha256").update(raw, "utf8").digest("hex");
   if (receipt.version !== FINDING_POLICY_VERSION) {
     throw new Error(`BLOCKED: PR_REVIEW finding-policy route receipt version ${String(receipt.version)} does not match the current finding-policy version ${FINDING_POLICY_VERSION}; the sidecar was written by a different plugin version and cannot be trusted at this one`);
   }
@@ -34395,7 +34464,7 @@ function assertMatchingPrReviewFeedbackConsent(record, input) {
   }
 }
 function workflowIdentity(state) {
-  return state.workflowInstanceId ?? `legacy-${createHash26("sha256").update(`${state.sessionID}\x00${state.mode}\x00${state.activatedAt}`).digest("hex").slice(0, 32)}`;
+  return state.workflowInstanceId ?? `legacy-${createHash25("sha256").update(`${state.sessionID}\x00${state.mode}\x00${state.activatedAt}`).digest("hex").slice(0, 32)}`;
 }
 function sameHandoffIds(left, right) {
   const normalizedLeft = [...new Set(left)].sort();
@@ -37944,7 +38013,7 @@ ${USAGE2}`;
 }
 
 // src/services/spec-drift-recovery.ts
-import { createHash as createHash27 } from "crypto";
+import { createHash as createHash26 } from "crypto";
 import { mkdir as mkdir6, readFile as readFile10, unlink as unlink2 } from "fs/promises";
 import { dirname as dirname17 } from "path";
 var SPEC_DRIFT_RECOVERY_AGENT = "spec-drift-recovery";
@@ -37974,7 +38043,7 @@ function now() {
   return new Date().toISOString();
 }
 function sha2564(text) {
-  return createHash27("sha256").update(text, "utf-8").digest("hex");
+  return createHash26("sha256").update(text, "utf-8").digest("hex");
 }
 function parseMarker(raw) {
   try {
@@ -38493,7 +38562,7 @@ ${USAGE3}`;
 
 // src/security/write-authority.ts
 import { AsyncLocalStorage } from "async_hooks";
-import { createHash as createHash28, randomUUID as randomUUID7 } from "crypto";
+import { createHash as createHash27, randomUUID as randomUUID7 } from "crypto";
 import { existsSync as existsSync15, readFileSync as readFileSync17 } from "fs";
 import * as path35 from "path";
 var DEFAULT_TTL_MS = 30 * 60 * 1000;
@@ -38600,7 +38669,7 @@ function leastPrivilege(left, right) {
   return ORIGIN_RANK[left.origin] <= ORIGIN_RANK[right.origin] ? left : right;
 }
 function computeWriteApprovalHash(input) {
-  return createHash28("sha256").update(stableSerialize(input)).digest("hex");
+  return createHash27("sha256").update(stableSerialize(input)).digest("hex");
 }
 function getCurrentWriteAuthority() {
   const extent = authorityStore.getStore();
@@ -43222,7 +43291,7 @@ import { promises as fs31 } from "fs";
 import path47 from "path";
 
 // src/services/swarm-residue.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash28 } from "crypto";
 import * as fs30 from "fs";
 import * as path45 from "path";
 var RESIDUE_STALE_AGE_MS = 30 * 60000;
@@ -43276,7 +43345,7 @@ var _internals52 = {
     return targets;
   },
   sha256File: (absPath) => {
-    const hash = createHash29("sha256");
+    const hash = createHash28("sha256");
     const fd = fs30.openSync(absPath, "r");
     try {
       const chunk = Buffer.alloc(1024 * 1024);
@@ -45826,7 +45895,7 @@ var _internals56 = {
 import { existsSync as existsSync22 } from "fs";
 
 // src/hooks/knowledge-curator.ts
-import { createHash as createHash30 } from "crypto";
+import { createHash as createHash29 } from "crypto";
 import { realpath as realpath3 } from "fs/promises";
 import * as path53 from "path";
 
@@ -46105,12 +46174,12 @@ function recordSeenRetroSection(key, value, timestamp) {
   capSeenRetroSections();
 }
 function hashContent(content) {
-  return createHash30("sha1").update(content).digest("hex");
+  return createHash29("sha1").update(content).digest("hex");
 }
 async function loadConfigForPolicyCurator(directory) {
-  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-emx6r32d.js");
+  const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-0ny9ef6s.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-psqfkgav.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-3qqnz0jg.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -48948,9 +49017,9 @@ var _internals59 = {
 init_logger();
 
 // src/workflow/close-terminal.ts
-import { createHash as createHash31 } from "crypto";
+import { createHash as createHash30 } from "crypto";
 function createCloseTransitionId(planEpoch, taskId, target) {
-  const digest2 = createHash31("sha256").update(JSON.stringify([planEpoch, taskId, target]), "utf8").digest("hex");
+  const digest2 = createHash30("sha256").update(JSON.stringify([planEpoch, taskId, target]), "utf8").digest("hex");
   return `close-terminal:${digest2}`;
 }
 function findTask(plan, taskId) {
@@ -49168,7 +49237,7 @@ async function resolveCuratorLLMDelegate(directory, mode, sessionId) {
   const seam = _internals50.createCuratorLLMDelegate;
   if (seam)
     return seam(directory, mode, sessionId);
-  const { createCuratorLLMDelegate } = await import("./curator-llm-factory-cvrt4bf9.js");
+  const { createCuratorLLMDelegate } = await import("./curator-llm-factory-kt3jhgs9.js");
   return createCuratorLLMDelegate(directory, mode, sessionId);
 }
 async function reconcileCloseTerminalStateForPlan(directory, targetPlan, options) {
@@ -49563,7 +49632,7 @@ async function runFinalizeStage(ctx) {
     }
   }
   try {
-    const { CuratorConfigSchema: CCS } = await import("./schema-emx6r32d.js");
+    const { CuratorConfigSchema: CCS } = await import("./schema-0ny9ef6s.js");
     const { config: pmLoadedConfig } = _internals50.loadPluginConfigWithMeta(ctx.directory);
     const curatorCfg = CCS.parse(pmLoadedConfig.curator ?? {});
     if (curatorCfg.enabled && curatorCfg.postmortem_enabled) {
@@ -52295,7 +52364,7 @@ function buildApprovedReceipt(opts) {
 }
 
 // src/services/skill-optimizer/store.ts
-import { createHash as createHash33, randomUUID as randomUUID10 } from "crypto";
+import { createHash as createHash32, randomUUID as randomUUID10 } from "crypto";
 import {
   closeSync as closeSync13,
   existsSync as existsSync27,
@@ -52320,10 +52389,10 @@ function canonicalJson2(value) {
   return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson2(v)}`).join(",")}}`;
 }
 function computeStateHash(value) {
-  return createHash33("sha256").update(canonicalJson2(value), "utf8").digest("hex");
+  return createHash32("sha256").update(canonicalJson2(value), "utf8").digest("hex");
 }
 function computeContentHash2(content) {
-  return createHash33("sha256").update(content, "utf8").digest("hex");
+  return createHash32("sha256").update(content, "utf8").digest("hex");
 }
 function computeEventHash(event) {
   return computeStateHash({
@@ -53361,7 +53430,7 @@ async function countStaleSummaries(projectRoot, retentionDays, now2) {
 }
 
 // src/session/snapshot-coordination-init.ts
-import { createHash as createHash34, randomUUID as randomUUID11 } from "crypto";
+import { createHash as createHash33, randomUUID as randomUUID11 } from "crypto";
 import { existsSync as existsSync29, readFileSync as readFileSync24, renameSync as renameSync10 } from "fs";
 init_warning_buffer();
 
@@ -53596,7 +53665,7 @@ function serializeAgentSession(s) {
 }
 async function writeSnapshot(directory, state) {
   try {
-    const { ensureSnapshotCoordinationReady } = await import("./snapshot-coordination-init-2x56ds8a.js");
+    const { ensureSnapshotCoordinationReady } = await import("./snapshot-coordination-init-f6ecsn9c.js");
     await ensureSnapshotCoordinationReady(directory);
     const snapshot = {
       version: 3,
@@ -54190,7 +54259,7 @@ async function initializeSnapshotCoordination(directory, scope) {
       if (!isCurrent())
         return "superseded";
       const serialized = JSON.stringify(candidate);
-      const outcome = _snapshotCoordinationInternals.importSnapshotRowsOnce(directory, candidate, createHash34("sha256").update(serialized).digest("hex"), source);
+      const outcome = _snapshotCoordinationInternals.importSnapshotRowsOnce(directory, candidate, createHash33("sha256").update(serialized).digest("hex"), source);
       snapshot = readSnapshotRows(directory);
       if (outcome === "imported" && source === "session/state.json") {
         legacyArchiveAttempted = true;
@@ -55895,16 +55964,16 @@ function parsePromotedExternalFrontmatter(content) {
   if (!match)
     return {};
   const fm = match[1];
-  const originMatch = /^skill_origin:\s*(\S+)/m.exec(fm);
-  const promotedAtMatch = /^promoted_at:\s*(\S+)/m.exec(fm);
-  const origin = originMatch?.[1];
-  const promotedAt = promotedAtMatch?.[1];
+  const originMatch = /^\s+skill_origin:\s*(\S+)/m.exec(fm);
+  const promotedAtMatch = /^\s+promoted_at:\s*(\S+)/m.exec(fm);
+  const origin = stripFmQuotes(originMatch?.[1] ?? /^skill_origin:\s*(\S+)/m.exec(fm)?.[1]);
+  const promotedAt = stripFmQuotes(promotedAtMatch?.[1] ?? /^promoted_at:\s*(\S+)/m.exec(fm)?.[1]);
   let sourceKnowledgeIds;
-  const inlineMatch = /^source_knowledge_ids:\s*\[([^\]]*)\]/m.exec(fm);
+  const inlineMatch = /^\s*source_knowledge_ids:\s*'?\[([^\]]*)\]'?/m.exec(fm);
   if (inlineMatch) {
     sourceKnowledgeIds = inlineMatch[1].split(",").map((s) => s.trim().replace(/^["']|["']$/g, "")).filter(Boolean);
   } else {
-    const blockMatch = /^source_knowledge_ids:\s*$/m.exec(fm);
+    const blockMatch = /^\s*source_knowledge_ids:\s*$/m.exec(fm);
     if (blockMatch && blockMatch.index !== undefined) {
       const afterKey = fm.slice(blockMatch.index + blockMatch[0].length);
       const blockItems = [];
@@ -55924,6 +55993,15 @@ function parsePromotedExternalFrontmatter(content) {
   }
   return { origin, sourceKnowledgeIds, promotedAt };
 }
+function stripFmQuotes(value) {
+  if (value === undefined)
+    return;
+  const trimmed = value.trim();
+  if (trimmed.startsWith('"') && trimmed.endsWith('"') || trimmed.startsWith("'") && trimmed.endsWith("'")) {
+    return trimmed.slice(1, -1);
+  }
+  return trimmed;
+}
 function readPromotedExternalFrontmatter(skillPath) {
   if (!existsSync32(skillPath))
     return {};
@@ -55977,14 +56055,17 @@ function buildPromotedExternalInputFromSkill(directory, skillSlug, usage, ageDay
 }
 
 // src/services/skill-reviser.ts
-init_logger();
 import { readFile as readFile16, rename as rename6, writeFile as writeFile7 } from "fs/promises";
+init_logger();
 var REVISION_VIOLATION_THRESHOLD = 0.15;
 var MAX_REVISION_CALLS_PER_PHASE = 3;
 var DEFAULT_MAX_CALLS = 10;
 async function getSkillVersion(skillPath) {
   try {
     const content = await readFile16(skillPath, "utf-8");
+    const nested = content.match(/^\s+version:\s*"(\d+)"\s*$/m);
+    if (nested)
+      return parseInt(nested[1], 10);
     const match = content.match(/^version:\s*(\d+)\s*$/m);
     return match ? parseInt(match[1], 10) : 1;
   } catch {
@@ -56009,15 +56090,30 @@ function buildDeterministicRevision(currentContent, currentVersion, violationCon
   ].join(`
 `);
   let result = currentContent;
-  if (/^version:\s*\d+\s*$/m.test(result)) {
-    result = result.replace(/^version:\s*\d+\s*$/m, `version: ${nextVersion}`);
-  } else if (/^confidence:\s*.+$/m.test(result)) {
-    result = result.replace(/^(confidence:\s*.+)$/m, `$1
+  const split = splitSkillFrontmatter(result);
+  let fm = split.frontmatter;
+  const nestedVersion = /^(\s+)version:\s*"?(\d+)"?\s*[ \t]*$/m.exec(fm);
+  if (nestedVersion?.[1]) {
+    fm = fm.replace(/^(\s+)version:\s*"?(\d+)"?\s*[ \t]*$/m, `${nestedVersion[1]}version: "${nextVersion}"`);
+  } else if (/^version:\s*"?(\d+)"?\s*[ \t]*$/m.test(fm)) {
+    fm = fm.replace(/^version:\s*"?(\d+)"?\s*[ \t]*$/m, `version: ${nextVersion}`);
+  } else if (/^(\s+)confidence:\s*/m.test(fm)) {
+    const indent = /^(\s+)confidence:/m.exec(fm)?.[1] ?? "";
+    fm = fm.replace(/^(\s+)(confidence:[^\n]*)$/m, `$1$2
+${indent}version: "${nextVersion}"`);
+  } else if (/^confidence:[^\n]*$/m.test(fm) && !/^metadata:[ \t]*$/m.test(fm)) {
+    fm = fm.replace(/^(confidence:[^\n]*)$/m, `$1
 version: ${nextVersion}`);
-  } else {
-    result = result.replace(/^(---\s*\n)/, `$1version: ${nextVersion}
+  } else if (/^metadata:[ \t]*$/m.test(fm)) {
+    fm = fm.replace(/^(metadata:[ \t]*\n)/m, `$1  version: "${nextVersion}"
 `);
+  } else {
+    fm = fm.replace(/\n(---[ \t]*(?:\r?\n|$))/, `
+metadata:
+  version: "${nextVersion}"
+$1`);
   }
+  result = fm + split.body;
   const revisionNotesPattern = /## Revision Notes\n[\s\S]*?(?=\n## Source Knowledge IDs|$)/;
   if (revisionNotesPattern.test(result)) {
     result = result.replace(revisionNotesPattern, "");
@@ -56051,9 +56147,9 @@ function buildLLMPrompt(currentContent, currentVersion, violationContexts) {
   const userPrompt = [
     "Instructions:",
     "- Revise ONLY the sections that were violated",
-    "- Preserve the exact frontmatter format (--- fenced YAML)",
+    "- Preserve the exact frontmatter format (--- fenced YAML), including the indented `metadata:` block",
     "- Preserve all sections: Trigger, Required Procedure, Forbidden Shortcuts, Delegation Template, Reviewer Checks, Source Knowledge IDs",
-    `- Update the version field in frontmatter to ${currentVersion + 1}`,
+    `- Update the version field in frontmatter to ${currentVersion + 1} (metadata.version when the metadata block is present)`,
     "- Make the violated rules clearer, more specific, or add missing edge cases",
     "- Do NOT remove any source knowledge IDs",
     "- Do NOT change the name or description in frontmatter",
@@ -56185,8 +56281,16 @@ async function reviseSkill(params) {
     }
     const expectedVersion = params.currentVersion + 1;
     let finalOutput = llmOutput.trim();
-    if (/^version:\s*\d+\s*$/m.test(finalOutput)) {
-      finalOutput = finalOutput.replace(/^version:\s*\d+\s*$/m, `version: ${expectedVersion}`);
+    {
+      const llmSplit = splitSkillFrontmatter(finalOutput);
+      let llmFm = llmSplit.frontmatter;
+      const nested = /^(\s+)version:\s*"?\d+"?\s*[ \t]*$/m.exec(llmFm);
+      if (nested?.[1]) {
+        llmFm = llmFm.replace(/^(\s+)version:\s*"?\d+"?\s*[ \t]*$/m, `${nested[1]}version: "${expectedVersion}"`);
+      } else if (/^version:\s*\d+\s*$/m.test(llmFm)) {
+        llmFm = llmFm.replace(/^version:\s*\d+\s*$/m, `version: ${expectedVersion}`);
+      }
+      finalOutput = llmFm + llmSplit.body;
     }
     const validation = await validateRevisionCandidate(params, `${finalOutput}
 `, "skill_reviser:llm");
@@ -56617,7 +56721,7 @@ function planMerges(active, threshold, maxComparisons, maxMerges) {
   };
 }
 async function sweepActiveNearDuplicates(directory, options = {}) {
-  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-psqfkgav.js");
+  const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-3qqnz0jg.js");
   const { config } = loadPluginConfigWithMeta2(directory);
   const sweepConfig = config.learning?.dedup_sweep;
   if (sweepConfig?.enabled === false)
@@ -57741,7 +57845,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-w0jy1mpc.js");
+        const skillModule = await import("./skill-generator-h1w7s5dh.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -58213,7 +58317,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-2dy96d0j.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-42cvn0ec.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -59045,7 +59149,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-arezehhk.js");
+      const { getScanStatus } = await import("./scan-cursor-d93q0q3s.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -59217,9 +59321,9 @@ var _internals72 = {
   verifyPostMortemKnowledgeActions,
   repairPostMortemActions,
   loadDefaultKnowledgeConfig: async (directory) => {
-    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-emx6r32d.js");
+    const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-0ny9ef6s.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-psqfkgav.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-3qqnz0jg.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -59227,11 +59331,11 @@ var _internals72 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-891pc8b7.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-mqnqst1g.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries2, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-w1vchgfr.js");
+    const { checkHivePromotions } = await import("./hive-promoter-w8f840ah.js");
     return checkHivePromotions(entries2, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -59240,7 +59344,7 @@ var _internals72 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-w0jy1mpc.js");
+    } = await import("./skill-generator-h1w7s5dh.js");
     const result = {
       approved: [],
       rejected: [],
@@ -59282,7 +59386,7 @@ var _internals72 = {
     return result;
   },
   readPriorDriftReports: async (directory) => {
-    const { readPriorDriftReports: readPriorDriftReports2 } = await import("./curator-drift-sxzs48ew.js");
+    const { readPriorDriftReports: readPriorDriftReports2 } = await import("./curator-drift-2h6nf0mw.js");
     return readPriorDriftReports2(directory);
   },
   readSwarmKnowledge: (directory) => readKnowledge(resolveSwarmKnowledgePath(directory))
@@ -59291,7 +59395,7 @@ var _internals72 = {
 // src/hooks/hive-promoter.ts
 init_constants();
 init_schema();
-import { createHash as createHash35 } from "crypto";
+import { createHash as createHash34 } from "crypto";
 import path75 from "path";
 
 // src/hooks/cohort-cache.ts
@@ -59733,7 +59837,7 @@ function buildLineage(args) {
   return lineage;
 }
 function lessonRevision(lesson) {
-  return createHash35("sha256").update(lesson).digest("hex").slice(0, 12);
+  return createHash34("sha256").update(lesson).digest("hex").slice(0, 12);
 }
 async function checkHivePromotions(swarmEntries, config, directory, sessionID) {
   const empty = {
@@ -60377,7 +60481,7 @@ async function promoteFromSwarm(directory, lessonId, options, config) {
 init_logger();
 
 // src/memory/gateway.ts
-import { createHash as createHash39, randomUUID as randomUUID16 } from "crypto";
+import { createHash as createHash38, randomUUID as randomUUID16 } from "crypto";
 import { existsSync as existsSync39, mkdirSync as mkdirSync25, readFileSync as readFileSync32 } from "fs";
 import * as path84 from "path";
 init_logger();
@@ -60627,7 +60731,7 @@ var MAX_RELATIONS_PER_MEMORY = 32;
 var RELATED_RECALL_FANOUT = 2;
 // src/memory/schema.ts
 init_zod();
-import { createHash as createHash36 } from "crypto";
+import { createHash as createHash35 } from "crypto";
 
 // src/memory/pii.ts
 import { createRequire } from "module";
@@ -61112,7 +61216,7 @@ function stableScopeKey(scope) {
 }
 function computeMemoryContentHash(recordLike) {
   const normalized = normalizeMemoryText(recordLike.text).toLowerCase();
-  return createHash36("sha256").update(`${stableScopeKey(recordLike.scope)}
+  return createHash35("sha256").update(`${stableScopeKey(recordLike.scope)}
 ${recordLike.kind}
 ${normalized}`).digest("hex");
 }
@@ -61120,14 +61224,14 @@ function createMemoryId(recordLike) {
   return `mem_${computeMemoryContentHash(recordLike).slice(0, 16)}`;
 }
 function createProposalId(input) {
-  const hash = createHash36("sha256").update(`${input.createdAt}
+  const hash = createHash35("sha256").update(`${input.createdAt}
 ${input.proposer}
 ${normalizeMemoryText(input.text)}`).digest("hex");
   return `prop_${hash.slice(0, 16)}`;
 }
 function createBundleId(query, generatedAt) {
   const compactTimestamp = generatedAt.replace(/[-:.TZ]/g, "").slice(0, 14);
-  const hash = createHash36("sha256").update(`${generatedAt}
+  const hash = createHash35("sha256").update(`${generatedAt}
 ${query}`).digest("hex").slice(0, 8);
   return `bundle_${compactTimestamp}_${hash}`;
 }
@@ -61989,7 +62093,7 @@ function proposalSort(a, b) {
 }
 
 // src/memory/outcome-events.ts
-import { createHash as createHash37, randomUUID as randomUUID13 } from "crypto";
+import { createHash as createHash36, randomUUID as randomUUID13 } from "crypto";
 function newOutcomeGeneration() {
   return randomUUID13();
 }
@@ -62122,7 +62226,7 @@ function dedupeAnchors(anchors) {
   return [...byKey.values()].sort((a, b) => compareText(a.file, b.file) || compareText(a.symbol ?? "", b.symbol ?? ""));
 }
 function hash(value) {
-  return createHash37("sha256").update(value).digest("hex").slice(0, 32);
+  return createHash36("sha256").update(value).digest("hex").slice(0, 32);
 }
 function compareText(a, b) {
   return a < b ? -1 : a > b ? 1 : 0;
@@ -63088,7 +63192,7 @@ function toRecallBundle(input) {
 import { mkdirSync as mkdirSync23 } from "fs";
 
 // src/memory/sqlite-provider.ts
-import { createHash as createHash38, randomUUID as randomUUID15 } from "crypto";
+import { createHash as createHash37, randomUUID as randomUUID15 } from "crypto";
 import {
   existsSync as existsSync37,
   mkdirSync as mkdirSync22,
@@ -63758,7 +63862,7 @@ function toJsonl(values) {
 var EVENT_CHAIN_GENESIS = "GENESIS";
 var MEMORY_EVENTS_CHAIN_HEAD_KEY = "memory_events_chain_head";
 function memoryEventRowHash(row) {
-  return createHash38("sha256").update(stableCanonicalStringify({
+  return createHash37("sha256").update(stableCanonicalStringify({
     id: row.id,
     operation: row.operation,
     target_id: row.target_id,
@@ -67248,7 +67352,7 @@ function sourceFromEvidence(evidenceRefs, context) {
   return { type: "manual", ref: first };
 }
 function createStableId(value) {
-  return createHash39("sha256").update(value.toLowerCase()).digest("hex").slice(0, 16);
+  return createHash38("sha256").update(value.toLowerCase()).digest("hex").slice(0, 16);
 }
 var gitRemoteUrlCache = new Map;
 var MAX_GIT_REMOTE_CACHE_ENTRIES = 128;
@@ -69552,9 +69656,9 @@ var _internals80 = {
   loadPluginConfigWithMeta,
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate }] = await Promise.all([
-      import("./schema-emx6r32d.js"),
-      import("./curator-891pc8b7.js"),
-      import("./curator-llm-factory-cvrt4bf9.js")
+      import("./schema-0ny9ef6s.js"),
+      import("./curator-mqnqst1g.js"),
+      import("./curator-llm-factory-kt3jhgs9.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate };
   }
@@ -69821,11 +69925,11 @@ async function handleDashboardCommand(directory, _args) {
 }
 
 // src/commands/dataset.ts
-import { createHash as createHash43 } from "crypto";
+import { createHash as createHash42 } from "crypto";
 
 // src/training/consent.ts
 init_zod();
-import { createHash as createHash40, randomUUID as randomUUID17 } from "crypto";
+import { createHash as createHash39, randomUUID as randomUUID17 } from "crypto";
 import * as fs46 from "fs";
 import * as path90 from "path";
 
@@ -69896,7 +70000,7 @@ function rootDigestOf(directory) {
   try {
     canonical = fs46.realpathSync.native(directory);
   } catch {}
-  return createHash40("sha256").update(`training-project-binding-v1\x00${canonical}`).digest("hex").slice(0, 16);
+  return createHash39("sha256").update(`training-project-binding-v1\x00${canonical}`).digest("hex").slice(0, 16);
 }
 function computeProjectBinding(directory) {
   return {
@@ -70005,13 +70109,13 @@ function readTrainingConsentState(directory) {
 
 // src/training/exporter.ts
 init_zod();
-import { createHash as createHash42, randomBytes as randomBytes2 } from "crypto";
+import { createHash as createHash41, randomBytes as randomBytes2 } from "crypto";
 import * as fs49 from "fs";
 import * as path92 from "path";
 
 // src/training/vault.ts
 init_zod();
-import { createHash as createHash41, randomUUID as randomUUID18 } from "crypto";
+import { createHash as createHash40, randomUUID as randomUUID18 } from "crypto";
 import * as fs48 from "fs";
 import * as path91 from "path";
 
@@ -70096,7 +70200,7 @@ var TrainingWithdrawalTombstoneSchema = exports_external.object({
   revoked_export_ids: exports_external.array(exports_external.string())
 }).strict();
 function sha2565(input) {
-  return createHash41("sha256").update(input, "utf8").digest("hex");
+  return createHash40("sha256").update(input, "utf8").digest("hex");
 }
 function readHealth(directory) {
   try {
@@ -70332,7 +70436,7 @@ var TrainingExportFiltersSchema = exports_external.object({
   validationRatio: exports_external.number().min(0).max(0.5).optional()
 }).strict();
 function sha2566(input) {
-  return createHash42("sha256").update(input, "utf8").digest("hex");
+  return createHash41("sha256").update(input, "utf8").digest("hex");
 }
 function canonicalJson3(value) {
   if (value === null || typeof value !== "object") {
@@ -70473,7 +70577,7 @@ function consumeTrainingPendingOp(directory) {
   } catch {}
 }
 function issueTrainingConfirmToken(directory, scope) {
-  const token = createHash42("sha256").update(`${scope.digest}:${randomBytes2(16).toString("hex")}`).digest("hex").slice(0, 24);
+  const token = createHash41("sha256").update(`${scope.digest}:${randomBytes2(16).toString("hex")}`).digest("hex").slice(0, 24);
   writePending(directory, {
     schema_version: 1,
     kind: scope.kind,
@@ -70617,7 +70721,7 @@ async function handleDatasetConsentCommand(directory, args) {
     maxRecords: quotaNumber(flagValue(args, "max-records")) ?? TRAINING_QUOTA_CEILINGS.maxRecords,
     retentionDays: quotaNumber(flagValue(args, "retention-days")) ?? TRAINING_QUOTA_CEILINGS.retentionDays
   };
-  const digest2 = createHash43("sha256").update(`dataset-consent-v1\x00${JSON.stringify(quotas)}`).digest("hex");
+  const digest2 = createHash42("sha256").update(`dataset-consent-v1\x00${JSON.stringify(quotas)}`).digest("hex");
   if (confirm !== undefined) {
     const check = checkTrainingConfirmToken(directory, "consent", confirm);
     if (!check.ok) {
@@ -70658,7 +70762,7 @@ async function handleDatasetWithdrawCommand(directory, args) {
   const status = getTrainingVaultStatus(directory);
   const revocations = readTrainingExportRevocations(directory);
   const exportIds = revocations.length;
-  const digest2 = createHash43("sha256").update(`dataset-withdraw-v1\x00${status.recordCount}\x00${status.vaultBytes}\x00${status.tombstoneCount}`).digest("hex");
+  const digest2 = createHash42("sha256").update(`dataset-withdraw-v1\x00${status.recordCount}\x00${status.vaultBytes}\x00${status.tombstoneCount}`).digest("hex");
   const confirm = flagValue(args, "confirm");
   if (confirm !== undefined) {
     const check = checkTrainingConfirmToken(directory, "withdraw", confirm);
@@ -72004,7 +72108,7 @@ async function computeCurationDiagnostics(directory, entries2) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-arezehhk.js");
+    const { getScanStatus } = await import("./scan-cursor-d93q0q3s.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -72014,10 +72118,10 @@ async function computeCurationDiagnostics(directory, entries2) {
   try {
     const { isLinked: isLinked2 } = await import("./knowledge-link-8bn2b7vr.js");
     if (isLinked2(directory)) {
-      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-emx6r32d.js");
+      const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-0ny9ef6s.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-psqfkgav.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-3qqnz0jg.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
@@ -73473,7 +73577,7 @@ async function handleDoctorCommand(directory, args) {
   const result = runConfigDoctor(config, directory, planParallelizationEnabled);
   let output;
   if (enableAutoFix && result.hasAutoFixableIssues) {
-    const { runConfigDoctorWithFixes } = await import("./config-doctor-qv7wc6fa.js");
+    const { runConfigDoctorWithFixes } = await import("./config-doctor-yrven0ya.js");
     const fixResult = await runConfigDoctorWithFixes(directory, config, true, {
       applyLossy: true
     });
@@ -73511,7 +73615,7 @@ async function handleDoctorCommand(directory, args) {
 `;
   }
   try {
-    const { runModelPreflight } = await import("./model-preflight-skhq4xtr.js");
+    const { runModelPreflight } = await import("./model-preflight-0k8bd388.js");
     const preflight = await runModelPreflight(config, swarmState.opencodeClient, { generatedAgentNames: swarmState.generatedAgentNames });
     const missingSelection = preflight.resolutions.filter((resolution) => resolution.status === "missing-selection");
     const unresolved = preflight.catalogAvailable ? preflight.resolutions.filter((resolution) => resolution.status === "unresolved") : [];
@@ -73545,7 +73649,7 @@ async function handleDoctorCommand(directory, args) {
     }
   } catch {}
   try {
-    const { renderKnowledgeReceiptPhaseIdSection } = await import("./doctor-knowledge-receipt-phase-id-mvbj576e.js");
+    const { renderKnowledgeReceiptPhaseIdSection } = await import("./doctor-knowledge-receipt-phase-id-d8arz38j.js");
     output += await renderKnowledgeReceiptPhaseIdSection(directory, enableAutoFix);
   } catch {}
   const strayDirs = detectStraySwarmDirs(directory);
@@ -75562,7 +75666,7 @@ async function handleEvidenceCommand(directory, args) {
   return formatTaskEvidenceMarkdown(evidenceData);
 }
 async function handleEvidenceSummaryCommand(directory) {
-  const { buildEvidenceSummary } = await import("./evidence-summary-service-x9nxvmn5.js");
+  const { buildEvidenceSummary } = await import("./evidence-summary-service-gjs4zssz.js");
   const artifact = await buildEvidenceSummary(directory);
   if (!artifact) {
     return "No plan found. Run `/swarm plan` to check plan status.";
@@ -83282,7 +83386,7 @@ import * as path109 from "path";
 init_zod();
 
 // src/harness/hash.ts
-import { createHash as createHash46 } from "crypto";
+import { createHash as createHash45 } from "crypto";
 function canonicalize(value, ancestors2) {
   if (value === null || typeof value === "string" || typeof value === "boolean") {
     return value;
@@ -83330,7 +83434,7 @@ function canonicalJson4(value) {
   return serialized;
 }
 function sha2567(value) {
-  return createHash46("sha256").update(value).digest("hex");
+  return createHash45("sha256").update(value).digest("hex");
 }
 function canonicalHash2(value) {
   return sha2567(canonicalJson4(value));
@@ -87447,7 +87551,7 @@ async function handleHistoryCommand(directory, _args) {
 }
 // src/knowledge/hive-quarantine.ts
 init_package();
-import { createHash as createHash47, createHmac, randomBytes as randomBytes3, randomUUID as randomUUID20 } from "crypto";
+import { createHash as createHash46, createHmac, randomBytes as randomBytes3, randomUUID as randomUUID20 } from "crypto";
 import {
   chmod,
   copyFile as copyFile2,
@@ -87480,7 +87584,7 @@ function serializeCanonical(value) {
   return `{${entries2.map(([k, v]) => `${JSON.stringify(k)}:${serializeCanonical(v)}`).join(",")}}`;
 }
 function sha256Hex(content) {
-  return createHash47("sha256").update(content, "utf-8").digest("hex");
+  return createHash46("sha256").update(content, "utf-8").digest("hex");
 }
 var QUARANTINE_SECRET_FILE = "hive-quarantine.key";
 async function readQuarantineSecret() {
@@ -90270,13 +90374,13 @@ import { existsSync as existsSync66, readFileSync as readFileSync60, realpathSyn
 import * as path132 from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // src/memory/evaluation.ts
-import { createHash as createHash49 } from "crypto";
+import { createHash as createHash48 } from "crypto";
 import * as fs65 from "fs/promises";
 import * as os13 from "os";
 import * as path121 from "path";
 
 // src/memory/heldout-evaluation-corpus.ts
-import { createHash as createHash48 } from "crypto";
+import { createHash as createHash47 } from "crypto";
 import * as fs64 from "fs/promises";
 import * as path120 from "path";
 var MAX_CORPUS_CASES = 256;
@@ -90349,7 +90453,7 @@ function isValidEdge(value) {
   return typeof edge.from === "string" && Boolean(edge.from.trim()) && typeof edge.to === "string" && Boolean(edge.to.trim());
 }
 function computeCanonicalSourceHash(source) {
-  return createHash48("sha256").update(source.toString("utf8").replace(/\r\n?|\n/g, `
+  return createHash47("sha256").update(source.toString("utf8").replace(/\r\n?|\n/g, `
 `)).digest("hex");
 }
 async function loadHeldoutRecallEvaluationScenarios(corpusDirectory) {
@@ -90762,8 +90866,8 @@ function normalizeResourceUsage(usage) {
   };
 }
 function createRecallEvaluationManifest(args) {
-  const corpusHash = createHash49("sha256").update(stableStringify2(args.fixtures)).digest("hex");
-  const configHash = createHash49("sha256").update(stableStringify2({
+  const corpusHash = createHash48("sha256").update(stableStringify2(args.fixtures)).digest("hex");
+  const configHash = createHash48("sha256").update(stableStringify2({
     providers: args.providers,
     profiles: args.profiles ?? ["legacy"],
     resourceCaps: args.resourceCaps,
@@ -90794,19 +90898,19 @@ function createRecallEvaluationManifest(args) {
         source_id: args.heldoutCorpusId ? `heldout:${args.heldoutCorpusId}` : `fixtures:${corpusHash}`,
         model_id: profile === "lexical" ? "none" : args.dependencies?.embeddingProvider?.modelVersion ?? "configured-embedding",
         provider_id: `profiles:${profile};providers:${args.providers.join(",")}`,
-        config_hash: createHash49("sha256").update(stableStringify2({ profile, resourceCaps: args.resourceCaps })).digest("hex")
+        config_hash: createHash48("sha256").update(stableStringify2({ profile, resourceCaps: args.resourceCaps })).digest("hex")
       }
     ]))
   };
 }
 function createRunIdentity(args) {
   const profile = args.profile ?? "legacy";
-  const sourceId = args.fixture.scenario ? `source:${args.fixture.scenario.id}:${args.fixture.sourceHash}` : `fixture:${args.fixture.name}:${createHash49("sha256").update(args.fixture.query).digest("hex")}`;
+  const sourceId = args.fixture.scenario ? `source:${args.fixture.scenario.id}:${args.fixture.sourceHash}` : `fixture:${args.fixture.name}:${createHash48("sha256").update(args.fixture.query).digest("hex")}`;
   return {
     source_id: sourceId,
     model_id: profile === "lexical" ? "none" : args.dependencies?.embeddingProvider?.modelVersion ?? "configured-embedding",
     provider_id: args.provider,
-    config_hash: createHash49("sha256").update(stableStringify2({
+    config_hash: createHash48("sha256").update(stableStringify2({
       profile,
       resourceCaps: args.resourceCaps,
       model: args.dependencies?.embeddingProvider?.modelVersion ?? "configured",
@@ -91118,7 +91222,7 @@ function parseJsonObject(candidate2) {
 init_schema();
 init_logger();
 // src/memory/instruction-pairing.ts
-import { createHash as createHash51 } from "crypto";
+import { createHash as createHash50 } from "crypto";
 import {
   existsSync as existsSync63,
   mkdirSync as mkdirSync37,
@@ -91131,7 +91235,7 @@ import { tmpdir as tmpdir7 } from "os";
 import path125 from "path";
 
 // src/hooks/knowledge-injector.ts
-import { createHash as createHash50 } from "crypto";
+import { createHash as createHash49 } from "crypto";
 
 // src/agents/reviewer-directive-compliance.ts
 var DIRECTIVES_TO_VERIFY_TAG = "<directives_to_verify>";
@@ -92138,7 +92242,7 @@ function stableInstructionJson(value) {
   return JSON.stringify(value);
 }
 function sha256Short(value) {
-  return createHash50("sha256").update(value).digest("hex").slice(0, 16);
+  return createHash49("sha256").update(value).digest("hex").slice(0, 16);
 }
 async function readInstructionInputs(directory) {
   let briefing = null;
@@ -92663,9 +92767,9 @@ function createKnowledgeInjectorHook(directory, config, modelLimitOverrides = {}
       ctx.targetAgent ?? "",
       ctx.taskId ?? "",
       (ctx.filePaths ?? []).slice(0, 8).join(","),
-      ctx.lastUserMessage ? createHash50("sha1").update(ctx.lastUserMessage).digest("hex").slice(0, 16) : ""
+      ctx.lastUserMessage ? createHash49("sha1").update(ctx.lastUserMessage).digest("hex").slice(0, 16) : ""
     ].join("|");
-    return createHash50("sha1").update(parts).digest("hex").slice(0, 16);
+    return createHash49("sha1").update(parts).digest("hex").slice(0, 16);
   }
   let lastSeenCacheKey = null;
   let cachedInjectionText = null;
@@ -93197,7 +93301,7 @@ async function materializeTaskStore(projectDir, task2) {
   for (const record of task2.records) {
     const lesson = `__PAIRING_LABEL_${record.label}__ ${record.lesson}`.slice(0, 280);
     const entry = {
-      id: createHash51("sha1").update(`${task2.id}:${record.label}`).digest("hex"),
+      id: createHash50("sha1").update(`${task2.id}:${record.label}`).digest("hex"),
       tier: "swarm",
       lesson,
       category: "process",
@@ -93355,8 +93459,8 @@ async function runInstructionSelectionPairing(options) {
     pairs.push(await runTaskPairing(task2, injectCharBudget));
   }
   const cacheInvalidation = await verifyCacheInvalidation();
-  const taskSetId = createHash51("sha256").update(stableJson2(tasks)).digest("hex");
-  const instructionSetDigest = createHash51("sha256").update(stableJson2({
+  const taskSetId = createHash50("sha256").update(stableJson2(tasks)).digest("hex");
+  const instructionSetDigest = createHash50("sha256").update(stableJson2({
     task_set: taskSetId,
     inject_char_budget: injectCharBudget,
     cache_invalidation_verified: cacheInvalidation.verified
@@ -98560,12 +98664,12 @@ var workspaceCache = new Map;
 
 // src/tools/repo-graph/freshness.ts
 init_package();
-import { createHash as createHash52 } from "crypto";
+import { createHash as createHash51 } from "crypto";
 import * as fsPromises3 from "fs/promises";
 import * as path130 from "path";
 var REPO_GRAPH_FINGERPRINT_FILENAME = "repo-graph.fingerprint.json";
 var FINGERPRINT_SCHEMA_VERSION = 1;
-var EXTRACTOR_STAMP = createHash52("sha256").update(`${package_default.version}\x00${GRAPH_SCHEMA_VERSION}`).digest("hex");
+var EXTRACTOR_STAMP = createHash51("sha256").update(`${package_default.version}\x00${GRAPH_SCHEMA_VERSION}`).digest("hex");
 var MAX_FINGERPRINT_BYTES = 24 * 1024 * 1024;
 var MAX_FINGERPRINT_ENTRIES = 100256;
 var MAX_RELATIVE_PATH_LENGTH = 4096;
@@ -98588,7 +98692,7 @@ function normalizedExcludes(options) {
   return [...new Set((options?.excludeDirs ?? []).filter(Boolean))].sort((a, b) => a.localeCompare(b));
 }
 function exclusionStamp(options) {
-  return createHash52("sha256").update(JSON.stringify({
+  return createHash51("sha256").update(JSON.stringify({
     excludeDirs: normalizedExcludes(options),
     followSymlinks: options?.followSymlinks ?? false
   })).digest("hex");
@@ -100028,7 +100132,7 @@ function createCuratorLLMDelegate(directory, mode = "init", sessionId) {
     }
     const sdkOpts = signal ? { signal } : {};
     try {
-      const { getSwarmAgents: getSwarmAgents2, resolveFallbackModel: resolveFallbackModel2 } = await import("./index-nrqyc8pr.js");
+      const { getSwarmAgents: getSwarmAgents2, resolveFallbackModel: resolveFallbackModel2 } = await import("./index-agvmmvdt.js");
       const createResult = await client.session.create({
         ...sessionId ? {
           body: {
@@ -100319,7 +100423,7 @@ function handlePrFeedbackCommand(directory, args) {
 // src/background/pr-feedback-loop.ts
 init_zod();
 init_loader();
-import { createHash as createHash53, randomUUID as randomUUID23 } from "crypto";
+import { createHash as createHash52, randomUUID as randomUUID23 } from "crypto";
 import * as fsSync10 from "fs";
 import * as fs68 from "fs/promises";
 import * as path136 from "path";
@@ -102126,7 +102230,7 @@ async function cancelPrFeedbackLoopUnlocked(directory, sessionID, reason) {
     clearedEvents: []
   };
   try {
-    const { cancelPrFeedbackPublication: cancelPrFeedbackPublication2 } = await import("./pr-workflow-gate-2gmznmj4.js");
+    const { cancelPrFeedbackPublication: cancelPrFeedbackPublication2 } = await import("./pr-workflow-gate-wg003fkd.js");
     await cancelPrFeedbackPublication2(directory, sessionID, reason);
   } catch (err) {
     warn(`[pr-feedback-loop] cancelPrFeedbackPublication failed (fail-open): ${err instanceof Error ? err.message : String(err)}`);
@@ -105464,7 +105568,7 @@ import * as fs73 from "fs";
 import * as path141 from "path";
 
 // src/test-impact/analyzer.ts
-import { createHash as createHash54 } from "crypto";
+import { createHash as createHash53 } from "crypto";
 import fs71 from "fs";
 import path139 from "path";
 var MAX_IMPACT_TEST_FILES = 4096;
@@ -105569,7 +105673,7 @@ function sharedTrailingSegments(a, b) {
   return shared;
 }
 function digestContent(content) {
-  return createHash54("sha256").update(content).digest("hex");
+  return createHash53("sha256").update(content).digest("hex");
 }
 function scanTestFilesSync(cwd) {
   const result = {
@@ -111439,7 +111543,7 @@ function resolveWorktreeEnumerationBases(directory) {
 
 // src/hooks/gate-denial-tracker.ts
 init_schema();
-import { createHash as createHash55 } from "crypto";
+import { createHash as createHash54 } from "crypto";
 
 // src/dispatch/spawn-circuit.ts
 var SPAWN_CIRCUIT_TTL_MS = 30 * 60000;
@@ -111511,7 +111615,7 @@ function boundedPathAlias(value) {
     if (normalizedPaths.length <= MAX_ACTION_PATH_PREFIX_ITEMS) {
       return { value: normalizedPaths };
     }
-    const tailHasher = createHash55("sha256");
+    const tailHasher = createHash54("sha256");
     tailHasher.update(`tail-count:${normalizedPaths.length - MAX_ACTION_PATH_PREFIX_ITEMS};`);
     for (let index = MAX_ACTION_PATH_PREFIX_ITEMS;index < normalizedPaths.length; index += 1) {
       const pathValue = normalizedPaths[index];
@@ -112132,7 +112236,7 @@ import * as path149 from "path";
 init_schema();
 
 // src/review/finding-validator.ts
-import { createHash as createHash56 } from "crypto";
+import { createHash as createHash55 } from "crypto";
 init_schema();
 var MAX_VALIDATOR_FALLBACK_MODELS = FALLBACK_MODELS_MAX;
 function canonicalFindingPayload(finding) {
@@ -112158,7 +112262,7 @@ function canonicalizeValidationCandidates(findings) {
       line_start: finding.line_start,
       line_end: finding.line_end
     };
-    const findingId = createHash56("sha256").update(canonicalFindingPayload(normalized), "utf8").digest("hex");
+    const findingId = createHash55("sha256").update(canonicalFindingPayload(normalized), "utf8").digest("hex");
     const existing = candidates.get(findingId);
     if (existing) {
       existing.duplicate_count += "duplicate_count" in finding && finding.duplicate_count > 1 ? finding.duplicate_count : 1;
@@ -112824,11 +112928,11 @@ var _internals134 = {
 };
 
 // src/review/evidence.ts
-import { createHash as createHash57 } from "crypto";
+import { createHash as createHash56 } from "crypto";
 import * as fs81 from "fs";
 import * as path148 from "path";
 function computeAutoReviewManifestHash(manifest) {
-  return createHash57("sha256").update(JSON.stringify({
+  return createHash56("sha256").update(JSON.stringify({
     schema_version: manifest.schema_version,
     content_hash: manifest.content_hash,
     plan_requirements_hash: manifest.plan_requirements_hash,
@@ -112919,7 +113023,7 @@ async function computePlanRequirementsHash(directory) {
   return plan ? computeReviewPlanRequirementsHash(plan) : "plan:none";
 }
 function computeAutoReviewPolicyDigest(config) {
-  return createHash57("sha256").update(JSON.stringify({
+  return createHash56("sha256").update(JSON.stringify({
     mode: config.final_review.mode,
     min_confidence: config.min_confidence,
     structured_findings: config.structured_findings,
@@ -112965,7 +113069,7 @@ async function loadReviewRequirementsPlan(directory) {
   return replayed.plan;
 }
 function computeReviewPlanRequirementsHash(plan) {
-  return createHash57("sha256").update(JSON.stringify({
+  return createHash56("sha256").update(JSON.stringify({
     schema_version: plan.schema_version,
     title: plan.title,
     swarm: plan.swarm,
@@ -115277,7 +115381,7 @@ import { existsSync as existsSync78, mkdirSync as mkdirSync43, readFileSync as r
 import * as path156 from "path";
 
 // src/security/protected-input-integrity.ts
-import { createHash as createHash58 } from "crypto";
+import { createHash as createHash57 } from "crypto";
 import { lstat as lstat6, readdir as readdir9, readFile as readFile32, realpath as realpath11 } from "fs/promises";
 import * as path154 from "path";
 var LIMITS = {
@@ -115300,11 +115404,11 @@ async function snapshotProtectedTree(root) {
     const afterRead = await lstat6(canonicalRoot);
     if (`${afterRead.dev}:${afterRead.ino}:${afterRead.size}:${afterRead.mtimeMs}` !== `${rootStat.dev}:${rootStat.ino}:${rootStat.size}:${rootStat.mtimeMs}`)
       throw new Error("PROTECTED_INPUT_REPLACED_DURING_READ:root");
-    entries2.push(`f\x00.\x00${rootStat.size}\x00${rootStat.mode}\x00${createHash58("sha256").update(content).digest("hex")}`);
+    entries2.push(`f\x00.\x00${rootStat.size}\x00${rootStat.mode}\x00${createHash57("sha256").update(content).digest("hex")}`);
     return Object.freeze({
       v: 1,
       root: canonicalRoot,
-      digest: createHash58("sha256").update(entries2[0]).digest("hex"),
+      digest: createHash57("sha256").update(entries2[0]).digest("hex"),
       entries: Object.freeze(entries2)
     });
   }
@@ -115335,7 +115439,7 @@ async function snapshotProtectedTree(root) {
       byteCount += stat14.size;
       if (fileCount > LIMITS.files || byteCount > LIMITS.bytes || Date.now() - started > LIMITS.elapsedMs)
         throw new Error("PROTECTED_INPUT_INTEGRITY_BUDGET_EXCEEDED");
-      const contentHash = createHash58("sha256").update(await readFile32(absolute)).digest("hex");
+      const contentHash = createHash57("sha256").update(await readFile32(absolute)).digest("hex");
       const afterRead = await lstat6(absolute);
       if (`${afterRead.dev}:${afterRead.ino}:${afterRead.size}:${afterRead.mtimeMs}` !== identityBefore)
         throw new Error(`PROTECTED_INPUT_REPLACED_DURING_READ:${relative37}`);
@@ -115346,7 +115450,7 @@ async function snapshotProtectedTree(root) {
   return Object.freeze({
     v: 1,
     root: canonicalRoot,
-    digest: createHash58("sha256").update(entries2.join(`
+    digest: createHash57("sha256").update(entries2.join(`
 `)).digest("hex"),
     entries: Object.freeze(entries2)
   });
@@ -116710,7 +116814,7 @@ async function countConsensusReportFiles(directory) {
 }
 
 // src/turbo/lean/state.ts
-import { createHash as createHash59 } from "crypto";
+import { createHash as createHash58 } from "crypto";
 import * as fs86 from "fs";
 import * as path160 from "path";
 init_logger();
@@ -116803,7 +116907,7 @@ function readLegacyPersisted(directory) {
   const raw = fs86.readFileSync(filePath, "utf-8");
   return {
     persisted: parsePersistedJson(raw),
-    sourceDigest: createHash59("sha256").update(raw).digest("hex")
+    sourceDigest: createHash58("sha256").update(raw).digest("hex")
   };
 }
 function seedProjectionBestEffort(directory, persisted) {
@@ -118592,7 +118696,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-4cazf4kb.js");
+    const { buildHelpText } = await import("./index-g1r94prs.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -118606,7 +118710,7 @@ async function handleHelpCommand(ctx) {
 > Note: \`/swarm ${resolved.key}\` is a deprecated alias for \`/swarm ${aliasTarget}\`.` : detailed;
   }
   const similar = _internals39.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-4cazf4kb.js");
+  const { buildHelpText: fullHelp } = await import("./index-g1r94prs.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -118934,7 +119038,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-fga9bnvt.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-g4wcr664.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -118944,7 +119048,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail reset": {
     handler: async (ctx) => {
-      const { handleGuardrailReset } = await import("./guardrail-reset-xpcsxyt0.js");
+      const { handleGuardrailReset } = await import("./guardrail-reset-9z5rmp3f.js");
       return handleGuardrailReset(ctx.args, ctx.sessionID);
     },
     description: "Reset one exact active invocation/action circuit after repair",
@@ -118965,7 +119069,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-log": {
     handler: async (ctx) => {
-      const { handleGuardrailLog } = await import("./guardrail-log-y84b9m8n.js");
+      const { handleGuardrailLog } = await import("./guardrail-log-0hy23f7d.js");
       return handleGuardrailLog(ctx.directory, ctx.args);
     },
     description: "Read the guardrail decision log (use --blocks-only for blocks)",