opencode-swarm 7.198.2 → 7.199.0

package/dist/cli/{index-t7qgt5yk.js → index-7c432abn.js}

@@ -9,10 +9,10 @@ import {
 } from "./index-txdagbh7.js";
 import {
   atomicWriteFile
-} from "./index-mjmsq8t7.js";
+} from "./index-w7d8gcj0.js";
 import {
   withEvidenceLock
-} from "./index-89j5h1j9.js";
+} from "./index-4s6kdsfr.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";

package/dist/cli/{index-xez06sc1.js → index-820pzqd6.js}

@@ -10,7 +10,7 @@ import {
   readCachedTextFile,
   wasObservedToExist,
   wasRecentlyWrittenByThisProcess
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 import {
   warn
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-v30zmakk.js → index-9ztsfved.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-xez06sc1.js";
+} from "./index-820pzqd6.js";
 import {
   bunSpawn
 } from "./index-2s7dvzff.js";
@@ -11,7 +11,7 @@ import {
 } from "./index-fzpt2djt.js";
 import {
   atomicWriteSwarmFile
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 import {
   init_git_executable,
   resolveGitExecutable

package/dist/cli/{index-ehw0s6xa.js → index-a5xzwxdq.js}

@@ -4,7 +4,7 @@ import {
   readShellAuditTail,
   redactPath,
   redactShellCommand
-} from "./index-bj916p5e.js";
+} from "./index-kxaxf3en.js";
 
 // src/services/guardrail-log-service.ts
 var BLOCK_TYPES = new Set([

package/dist/cli/{index-e4hj8r57.js → index-awt5dpam.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   observeStoreHealth
-} from "./index-tdpfecs3.js";
+} from "./index-hc6wa3yg.js";
 import {
   telemetry
-} from "./index-4s3770gs.js";
+} from "./index-6dtt0brw.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-cfs1k1eh.js → index-b5k6etf9.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   computePlanStructureHash
-} from "./index-drf91t9h.js";
+} from "./index-26h8fb7t.js";
 import {
   appendCoreEventSync
-} from "./index-e4hj8r57.js";
+} from "./index-awt5dpam.js";
 import {
   deleteCoordinationState,
   importCoordinationOnce,
@@ -12,10 +12,10 @@ import {
   transitionCoordinationState,
   transitionCoordinationStateWithinTransaction,
   withCoordinationTransaction
-} from "./index-rqxwv4q5.js";
+} from "./index-nr1pj3hy.js";
 import {
   getProjectDb
-} from "./index-wrn4khfb.js";
+} from "./index-w00dj8p5.js";
 import {
   canonicalExistingFilesystemPath,
   legacyCanonicalExistingFilesystemPath
@@ -32,7 +32,7 @@ import {
 import {
   atomicWriteSwarmFile,
   atomicWriteSwarmFileSync
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 import {
   PlanSchema
 } from "./index-gx2vp8gx.js";

package/dist/cli/{index-v85gn9jm.js → index-bjzxbxpw.js}

@@ -4,26 +4,26 @@ import {
 } from "./index-m9zzj4ee.js";
 import {
   validateSwarmPath
-} from "./index-xez06sc1.js";
+} from "./index-820pzqd6.js";
 import {
   observeReceiptTransition
-} from "./index-tdpfecs3.js";
+} from "./index-hc6wa3yg.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";
 import {
   emit
-} from "./index-4s3770gs.js";
+} from "./index-6dtt0brw.js";
 import {
   resolveActivePhaseId
 } from "./index-gx2vp8gx.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-bd4szzja.js";
+} from "./index-qdwccqv5.js";
 import {
   KnowledgeConfigSchema,
   init_schema
-} from "./index-rfcb9f54.js";
+} from "./index-3x07b03s.js";
 
 // src/utils/context-decisions.ts
 function extractContextDecisions(content) {

package/dist/cli/{index-qg6qn99c.js → index-bkscmz4z.js}

@@ -1,27 +1,27 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-xez06sc1.js";
+} from "./index-820pzqd6.js";
 import {
   deleteCoordinationState,
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-rqxwv4q5.js";
+} from "./index-nr1pj3hy.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-wrn4khfb.js";
+} from "./index-w00dj8p5.js";
 import {
   observeStoreHealth
-} from "./index-tdpfecs3.js";
+} from "./index-hc6wa3yg.js";
 import {
   withEvidenceLock
-} from "./index-89j5h1j9.js";
+} from "./index-4s6kdsfr.js";
 import {
   telemetry
-} from "./index-4s3770gs.js";
+} from "./index-6dtt0brw.js";
 import {
   canonicalRootKey,
   canonicalRootKeyFresh,
@@ -29,7 +29,7 @@ import {
 } from "./index-fzpt2djt.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-rnjtf5kn.js → index-ckcdheqx.js}

@@ -19,14 +19,14 @@ import {
   mergeWriteAnalyses,
   resolveWindowsWriteAuthority,
   resolveWriteTargets
-} from "./index-166xny29.js";
+} from "./index-79b9re6h.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-bj916p5e.js";
+} from "./index-kxaxf3en.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-xrghsqg3.js → index-e5ecn73v.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-d31b2zvf.js";
+} from "./index-2mx2gn97.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,13 +9,13 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-vjwmcxz4.js";
+} from "./index-1fwm8vqr.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-yk1vnpzx.js";
+} from "./index-2bc7zfw3.js";
 import {
   atomicWriteFile
-} from "./index-mjmsq8t7.js";
+} from "./index-w7d8gcj0.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-tnnxvq2f.js → index-gds6c8qt.js}

@@ -4,7 +4,7 @@ import {
   ensureTaskCheckpointReceipt,
   loadPlan,
   updateTaskCheckpointReceipt
-} from "./index-y81sw9vt.js";
+} from "./index-tnrq0pg8.js";
 import {
   tool
 } from "./index-9nyqt3kb.js";
@@ -17,13 +17,13 @@ import {
 } from "./index-g4fs6z4e.js";
 import {
   validateSwarmPath
-} from "./index-xez06sc1.js";
+} from "./index-820pzqd6.js";
 import {
   readLedgerEvents
-} from "./index-drf91t9h.js";
+} from "./index-26h8fb7t.js";
 import {
   appendCoreEventSync
-} from "./index-e4hj8r57.js";
+} from "./index-awt5dpam.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
@@ -38,10 +38,10 @@ import {
 } from "./index-ejhxgyvm.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-bd4szzja.js";
+} from "./index-qdwccqv5.js";
 import {
   init_git_executable,
   resolveGitExecutable

package/dist/cli/{index-tdpfecs3.js → index-hc6wa3yg.js}

@@ -3,13 +3,13 @@ import {
   pseudonymousRef,
   resolveLineageSalt,
   telemetry
-} from "./index-4s3770gs.js";
+} from "./index-6dtt0brw.js";
 import {
   canonicalRootKeyFresh
 } from "./index-fzpt2djt.js";
 import {
   atomicWriteSwarmFile
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 
 // src/health/learning-health.ts
 import { promises as fs } from "fs";

package/dist/cli/{index-76mg98ac.js → index-jccs3fgn.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-t7qgt5yk.js";
+} from "./index-7c432abn.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,

package/dist/cli/{index-0y5yvag6.js → index-jjsjjefm.js}

@@ -2,10 +2,10 @@
 import {
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-mx74665q.js";
+} from "./index-mzsj4kkv.js";
 import {
   queryHistoricalOutcomes
-} from "./index-v85gn9jm.js";
+} from "./index-bjzxbxpw.js";
 import {
   jaccardBigram,
   readKnowledge,
@@ -13,7 +13,7 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-vjwmcxz4.js";
+} from "./index-1fwm8vqr.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -226,11 +226,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-7red2zwb.js");
+    const { quarantineEntry } = await import("./knowledge-validator-zg7d9z8p.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-q2v7px9y.js");
-      const { loadPluginConfigWithMeta } = await import("./index-hd3d7rcw.js");
+      const { KnowledgeConfigSchema } = await import("./schema-qv9bvhyz.js");
+      const { loadPluginConfigWithMeta } = await import("./index-71g0ps66.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-whmby20t.js → index-kjhsssaq.js}

@@ -23,76 +23,76 @@ import {
   resolveFallbackModel,
   resolvePrimaryAgentNames,
   stripSwarmPrefix
-} from "./index-166xny29.js";
-import"./index-bj916p5e.js";
-import"./index-bczx8jcg.js";
-import"./index-59w9zfc5.js";
+} from "./index-79b9re6h.js";
+import"./index-kxaxf3en.js";
+import"./index-42dtc5nd.js";
+import"./index-zg5gnn3m.js";
 import"./index-j2vv0h13.js";
-import"./index-76mg98ac.js";
-import"./index-t7qgt5yk.js";
+import"./index-jccs3fgn.js";
+import"./index-7c432abn.js";
 import"./index-txdagbh7.js";
-import"./index-0ap067j7.js";
+import"./index-y9ckbta5.js";
 import {
   createExplorerAgent
 } from "./index-rdec0y3z.js";
-import"./index-d9jrzepr.js";
-import"./index-xxb2depv.js";
-import"./index-9keabj7d.js";
-import"./index-0y5yvag6.js";
-import"./index-v30zmakk.js";
-import"./index-qg6qn99c.js";
+import"./index-r52wrpb7.js";
+import"./index-ye9bze9s.js";
+import"./index-mefad009.js";
+import"./index-jjsjjefm.js";
+import"./index-9ztsfved.js";
+import"./index-bkscmz4z.js";
 import"./index-cjapb4hy.js";
-import"./index-84r9rydf.js";
+import"./index-pxdc0qn1.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-tnnxvq2f.js";
-import"./index-y81sw9vt.js";
+import"./index-gds6c8qt.js";
+import"./index-tnrq0pg8.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-6pc5j9rb.js";
+import"./index-zd15v0gr.js";
 import"./index-v3bmwmqw.js";
-import"./index-h86e4jp9.js";
-import"./index-5hbb3088.js";
-import"./index-7e9mqse6.js";
+import"./index-pqrepne6.js";
+import"./index-vbm2ykr9.js";
+import"./index-2f9tsejp.js";
 import"./index-g4fs6z4e.js";
-import"./index-wg1mt92h.js";
-import"./index-mx74665q.js";
-import"./index-v85gn9jm.js";
+import"./index-3gwh8c9d.js";
+import"./index-mzsj4kkv.js";
+import"./index-bjzxbxpw.js";
 import"./index-m9zzj4ee.js";
-import"./index-xez06sc1.js";
+import"./index-820pzqd6.js";
 import"./index-2s7dvzff.js";
-import"./index-xrghsqg3.js";
-import"./index-d31b2zvf.js";
+import"./index-e5ecn73v.js";
+import"./index-2mx2gn97.js";
 import"./index-rtry5xyf.js";
-import"./index-gc9dvmy7.js";
+import"./index-vh87e91s.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-cfs1k1eh.js";
-import"./index-drf91t9h.js";
-import"./index-e4hj8r57.js";
-import"./index-xt4q610f.js";
-import"./index-rqxwv4q5.js";
-import"./index-wrn4khfb.js";
+import"./index-b5k6etf9.js";
+import"./index-26h8fb7t.js";
+import"./index-awt5dpam.js";
+import"./index-p5pgjp7n.js";
+import"./index-nr1pj3hy.js";
+import"./index-w00dj8p5.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
-import"./index-tdpfecs3.js";
-import"./index-vjwmcxz4.js";
+import"./index-hc6wa3yg.js";
+import"./index-1fwm8vqr.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-yk1vnpzx.js";
-import"./index-mjmsq8t7.js";
-import"./index-89j5h1j9.js";
+import"./index-2bc7zfw3.js";
+import"./index-w7d8gcj0.js";
+import"./index-4s6kdsfr.js";
 import"./index-t7hmqgjy.js";
-import"./index-4s3770gs.js";
+import"./index-6dtt0brw.js";
 import"./index-fzpt2djt.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-p4xmq6aa.js";
+import"./index-ywb5er8g.js";
 import"./index-gx2vp8gx.js";
-import"./index-bd4szzja.js";
+import"./index-qdwccqv5.js";
 import"./index-zxdawwc7.js";
-import"./index-rfcb9f54.js";
+import"./index-3x07b03s.js";
 import"./index-hqrkr9ag.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{index-bj916p5e.js → index-kxaxf3en.js}

@@ -1,14 +1,14 @@
 // @bun
 import {
   observeStoreHealth
-} from "./index-tdpfecs3.js";
+} from "./index-hc6wa3yg.js";
 import {
   telemetry
-} from "./index-4s3770gs.js";
+} from "./index-6dtt0brw.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-rfcb9f54.js";
+} from "./index-3x07b03s.js";
 import {
   init_constants
 } from "./index-hqrkr9ag.js";
@@ -2484,7 +2484,9 @@ function checkFileAuthorityWithRules(agentName, filePath, cwd, effectiveRules, o
       detail: "target resolves outside the working directory"
     });
   }
-  const rules = effectiveRules[normalizedAgent] ?? effectiveRules[strippedAgent];
+  const classifiedRules = effectiveRules[normalizedAgent] ?? effectiveRules[strippedAgent];
+  const unclassifiedWhileDisabled = !classifiedRules && options.authorityEnabled === false && normalizedAgent !== "unknown";
+  const rules = classifiedRules ?? (unclassifiedWhileDisabled ? {} : undefined);
   if (!rules) {
     return denyAuthority(agentName, normalizedPath, {
       code: "AUTHORITY_UNKNOWN_AGENT",
@@ -2518,6 +2520,17 @@ function checkFileAuthorityWithRules(agentName, filePath, cwd, effectiveRules, o
       detail: "coder writes to repository control state (.git/.swarm) are always protected"
     });
   }
+  if (unclassifiedWhileDisabled && isPolicyProtectedPath(normalizedPath, {
+    includeDefaults: false,
+    additional: [".git", ".swarm"]
+  })) {
+    return denyAuthority(agentName, normalizedPath, {
+      code: "AUTHORITY_PROTECTED_PATH",
+      layer: "protected-path",
+      rule: "unclassified-agent-control-state-protection",
+      detail: "unclassified agent writes to repository control state (.git/.swarm) are always protected"
+    });
+  }
   const isSwarmRole = Object.hasOwn(AUTHORITY_ROLE_CAPABILITIES, strippedAgent);
   if (isSwarmRole) {
     const matchedVerifier = [

package/dist/cli/{index-9keabj7d.js → index-mefad009.js}

@@ -5,18 +5,18 @@ import {
 import {
   effectiveRetrievalOutcomes,
   readAuthoritativeKnowledgeCounterRollups
-} from "./index-mx74665q.js";
+} from "./index-mzsj4kkv.js";
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-xrghsqg3.js";
+} from "./index-e5ecn73v.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-vjwmcxz4.js";
+} from "./index-1fwm8vqr.js";
 import {
   appendCappedJsonl,
   resolveRetentionCap
@@ -27,7 +27,7 @@ import {
 import {
   atomicWriteFileAnyRoot,
   atomicWriteSwarmFile
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 import {
   advisoryWarn,
   init_warning_buffer

package/dist/cli/{index-mx74665q.js → index-mzsj4kkv.js}

@@ -1,16 +1,16 @@
 // @bun
 import {
   queryHistoricalOutcomes
-} from "./index-v85gn9jm.js";
+} from "./index-bjzxbxpw.js";
 import {
   resolveHiveEventsPath
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-yk1vnpzx.js";
+} from "./index-2bc7zfw3.js";
 import {
   atomicWriteFile
-} from "./index-mjmsq8t7.js";
+} from "./index-w7d8gcj0.js";
 import {
   canonicalRootKey
 } from "./index-fzpt2djt.js";
@@ -708,7 +708,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
     }
     let bumps = 0;
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-9y17zzce.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-knrqgmyk.js");
       bumps = await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-rqxwv4q5.js → index-nr1pj3hy.js}

@@ -4,7 +4,7 @@ import {
   getProjectDb,
   projectDbExists,
   withImmediateTransaction
-} from "./index-wrn4khfb.js";
+} from "./index-w00dj8p5.js";
 
 // src/db/coordination-store.ts
 import { createHash } from "crypto";

package/dist/cli/{index-xt4q610f.js → index-p5pgjp7n.js}

@@ -4,7 +4,7 @@ import {
   getProjectDb,
   projectDbExists,
   withImmediateTransaction
-} from "./index-wrn4khfb.js";
+} from "./index-w00dj8p5.js";
 import {
   derivePlanId,
   derivePlanIdentityHash

package/dist/cli/{index-h86e4jp9.js → index-pqrepne6.js}

@@ -5,11 +5,11 @@ import {
 import {
   atomicWriteFileAnyRoot,
   atomicWriteSwarmFileSync
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 import {
   init_loader,
   loadPluginConfig
-} from "./index-bd4szzja.js";
+} from "./index-qdwccqv5.js";
 import {
   init_logger,
   log,

package/dist/cli/{index-84r9rydf.js → index-pxdc0qn1.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-xez06sc1.js";
+} from "./index-820pzqd6.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-p4xmq6aa.js";
+} from "./index-ywb5er8g.js";
 
 // src/hooks/delegation-gate/worktree-provisioning-owner.ts
 import { createHash } from "crypto";

package/dist/cli/{index-bd4szzja.js → index-qdwccqv5.js}

@@ -16,7 +16,7 @@ import {
   init_schema,
   resolveExternalSkillsConfig,
   retiredEpicKeyReplacement
-} from "./index-rfcb9f54.js";
+} from "./index-3x07b03s.js";
 import {
   DangerousMergeKeyError,
   MAX_MERGE_DEPTH,

package/dist/cli/{index-d9jrzepr.js → index-r52wrpb7.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   readEffectiveSpecSync
-} from "./index-6pc5j9rb.js";
+} from "./index-zd15v0gr.js";
 import {
   readSwarmFileAsync
-} from "./index-xez06sc1.js";
+} from "./index-820pzqd6.js";
 import {
   DURABILITY_CLASSES,
   DbWriteError,
@@ -13,7 +13,7 @@ import {
   classifyDbWriteError,
   getProjectDb,
   projectDbExists
-} from "./index-wrn4khfb.js";
+} from "./index-w00dj8p5.js";
 import {
   _internals,
   canonicalRootKeyFresh