opencode-swarm 7.200.10 → 7.200.11

package/dist/cli/{workflow-wal-file-xvvwcxr1.js → workflow-wal-file-a2c8e920.js}

@@ -4,8 +4,8 @@ import {
   readWorkflowWalFile,
   readWorkflowWalFileSync,
   writeWorkflowWalFile
-} from "./index-r3wyt8za.js";
-import"./index-vm3j8fvn.js";
+} from "./index-hhzwfyd7.js";
+import"./index-2n7a184b.js";
 import"./index-spggmr30.js";
 import"./index-001tkp0j.js";
 import"./index-9rwhas09.js";

package/dist/cli/{worktree-collision-ownership-hac3t2xv.js → worktree-collision-ownership-xr6crt8c.js}

@@ -10,7 +10,7 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-66b4f2qd.js";
+} from "./index-0an54fza.js";
 import"./index-tggyracy.js";
 import {
   scanWorktreeMergeFailuresForRecovery
@@ -22,7 +22,7 @@ import"./index-rdm3px0g.js";
 import"./index-rjsqf4hv.js";
 import"./index-7pmbnjvj.js";
 import"./index-8xtdxy91.js";
-import"./index-vajbtn3v.js";
+import"./index-qdz6zysj.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-erp7fk72.js";

package/dist/cli/{worktree-isolation-tjvxcsr9.js → worktree-isolation-0126b5e7.js}

@@ -25,37 +25,37 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-4dvqvn4k.js";
+} from "./index-ce6qarfq.js";
 import"./index-ckq78kq1.js";
-import"./index-fbn2mv67.js";
-import"./index-kxxy7zq4.js";
-import"./index-ywwazz81.js";
+import"./index-5k88v1e7.js";
+import"./index-yn6jrxen.js";
+import"./index-x8sh8v4a.js";
 import"./index-vx1j2t5p.js";
 import"./index-txdagbh7.js";
 import"./index-axqyjreb.js";
-import"./index-60m7qnds.js";
-import"./index-h9qhy8r6.js";
-import"./index-bt3pxs7r.js";
+import"./index-aj41bscz.js";
+import"./index-ve74c3a8.js";
+import"./index-jt9j02tm.js";
 import"./index-rdec0y3z.js";
-import"./index-rnm6c33a.js";
-import"./index-vqknke9n.js";
-import"./index-xkavxqf2.js";
+import"./index-bv9tqmpm.js";
+import"./index-8g9rn3rp.js";
+import"./index-r097ettz.js";
 import"./index-rpvp88js.js";
 import"./index-kd1n3ne2.js";
 import"./index-x5jwegqw.js";
 import"./index-w0afnznk.js";
-import"./index-66b4f2qd.js";
-import"./index-ev46f132.js";
+import"./index-0an54fza.js";
+import"./index-bnbhqvsn.js";
 import"./index-tggyracy.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-ffm3d4cn.js";
-import"./index-tm6nwe43.js";
+import"./index-gkvk9et2.js";
+import"./index-h1chaf63.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-2dey2mtg.js";
+import"./index-nnc23ddw.js";
 import"./index-697mg68b.js";
-import"./index-6e7jxxys.js";
+import"./index-ra3erqpk.js";
 import"./index-rck7v4r4.js";
 import"./index-ck7jpn0y.js";
 import"./index-ry16d01s.js";
@@ -63,29 +63,29 @@ import"./index-rdm3px0g.js";
 import"./index-dp6hy23p.js";
 import"./index-rjsqf4hv.js";
 import"./index-7pmbnjvj.js";
-import"./index-43zgg04r.js";
-import"./index-gsnj3a0h.js";
-import"./index-6ehx0pj4.js";
+import"./index-nzhfhpng.js";
+import"./index-kzr3nby8.js";
+import"./index-ke881z7m.js";
 import"./index-m9zzj4ee.js";
 import"./index-8xtdxy91.js";
-import"./index-nv8tx9v4.js";
+import"./index-yq73sd3w.js";
 import"./index-qyj4383m.js";
 import"./index-rtry5xyf.js";
-import"./index-vajbtn3v.js";
+import"./index-qdz6zysj.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-erp7fk72.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-3h5ztpn5.js";
+} from "./index-krjamprc.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
 import"./index-3t46mez1.js";
-import"./index-ww5ne0g6.js";
-import"./index-06sj5bjh.js";
+import"./index-mq4eyhtf.js";
+import"./index-814q5t5s.js";
 import"./index-bk5tah7q.js";
-import"./index-r3wyt8za.js";
-import"./index-vm3j8fvn.js";
+import"./index-hhzwfyd7.js";
+import"./index-2n7a184b.js";
 import"./index-spggmr30.js";
 import"./index-001tkp0j.js";
 import"./index-9rwhas09.js";

package/dist/hooks/delegation-gate.d.ts

@@ -534,6 +534,12 @@ declare function resolveEvidenceTaskId(args: Record<string, unknown> | undefined
  */
 export declare const _internals: {
     isEpicOpenForProject: typeof isEpicOpenForProject;
+    /**
+     * #3502 review (PRR-007): set by createDelegationGateHook so tests can
+     * observe the settlement-side invalidation gate for a specific hook
+     * instance (did THIS dispatch's route persist fail for this task?).
+     */
+    routeInvalidationProbe: ((callID: string, sessionId: string, taskId: string) => boolean) | null;
     /** Epic v2 C4: wave-only coder admission + the wave's parallel/isolation policy. */
     resolveEpicDispatchPolicy: typeof resolveEpicDispatchPolicy;
     resolveEpicPrFeedbackConflict: typeof resolveEpicPrFeedbackConflict;

package/dist/hooks/guardrails/audit-log.d.ts

@@ -64,6 +64,8 @@ export interface ScopeViolationDecision {
     declaredScope: string;
     resolvedScope: string;
     action: string;
+    /** Shell write operator that tripped the gate (issue #3495 item 4). */
+    operator?: string;
 }
 export interface DestructiveBlockDecision {
     type: 'destructive_block';

package/dist/hooks/guardrails/cmd-delete-grammar.d.ts

@@ -0,0 +1,47 @@
+/**
+ * cmd.exe rd/rmdir/del recursion-switch grammar (leaf module — no local
+ * imports: both the destructive guard (guardrails/destructive-command.ts)
+ * and the shell-write detector (shell-write-detect.ts) consume it, and
+ * destructive-command already imports from shell-write-detect, so hosting
+ * the grammar in either would create a cycle).
+ *
+ * Modeled from executed cmd.exe ground truth (PR #3499 review round):
+ * - cmd scans each UNQUOTED argument for the FIRST `/` — everything from it
+ *   to the end of the token is switch text; the text before it is the path.
+ *   `rd zzz/s` therefore deletes `zzz` recursively (`rd zzz /s`), and so do
+ *   `rd ../s` and `rd ./s`.
+ * - A fully double-quoted token is a path; cmd does not scan it for
+ *   switches (`rd "/s" x` does not recurse — `"/s"` is a path).
+ * - Single quotes are NOT quotes for cmd (`rd 'zzz/s'` splits at the slash).
+ * - `^/` caret escapes decode to `/` (normalized by dcNormalizeCommand).
+ */
+/**
+ * Whether slash-separated switch TEXT (the characters after the first
+ * unquoted `/` of a cmd.exe argument) parses as a switch cluster: every
+ * slash-separated segment is 1–2 ASCII letters — `s`, `S`, `q`, `s/q`,
+ * `sq`, `qs`. Multi-letter segments never qualify: `share` and
+ * `src/old` are not switch names (real cmd.exe rejects `rd a/share/b` with
+ * "Parameter format not correct" — nothing is deletable, so the argument is
+ * a plain path operand, and on POSIX it stays an ordinary nested path).
+ */
+export declare function dcIsSwitchClusterText(text: string): boolean;
+/**
+ * Parse the argument text of a cmd.exe rd/rmdir/del command for the
+ * recursion switch and its deletion targets.
+ *
+ * - Leading `/` with valid switch letters: pure switch token; a quoted span
+ *   glued after the letters (`/s"file.txt"`) is the deletion target.
+ * - `/` at index > 0 with valid switch letters containing `s`: the command
+ *   recurses over the path prefix (`rd zzz/s` → target `zzz`).
+ * - Invalid switch text (`a/share/b` → cmd errors "Parameter format not
+ *   correct"): nothing is deletable; the token is a plain path operand and
+ *   never fires — on POSIX executors it stays an ordinary nested path.
+ * - A fully double-quoted token is a path operand, never a switch.
+ *
+ * Returns `fires` (the recursion switch is present) and the deletion
+ * targets to evaluate when it fires.
+ */
+export declare function dcParseWindowsRecursiveDelete(args: string): {
+    fires: boolean;
+    targets: string[];
+};

package/dist/hooks/guardrails/destructive-command.d.ts

@@ -136,11 +136,19 @@ export declare function dcEvaluateRecursiveDeleteTargets(input: {
  *   ln -s <target> <link>  (when target is outside cwd)
  */
 export declare function dcCheckJunctionCreation(segment: string, cwd: string): string | null;
+export { dcIsSwitchClusterText, dcParseWindowsRecursiveDelete, } from './cmd-delete-grammar';
 /**
- * Extract candidate target paths from a destructive Windows cmd.exe command.
- * Returns array of path-like arguments.
+ * Whether a whitespace-delimited cmd.exe argument behaves like a switch
+ * cluster (issue #3495): a leading `/` followed by switch text where EVERY
+ * slash-separated segment is 1–2 ASCII letters — `/s`, `/S`, `/q`, `/s/q`,
+ * `/sq`, `/qs`. Path-like tokens never qualify: `/share` and `/src/old`
+ * carry multi-letter segments, and a quoted token (`"/s"`, `"a/share/b"`)
+ * does not start with `/`. Verified against real cmd.exe: a quoted `"/s"`
+ * is treated as a path, and `/sq` is rejected by cmd itself ("Parameter
+ * format not correct"), so classifying these clusters as switches is at
+ * worst fail-closed parity. Grammar text lives in ./cmd-delete-grammar.
  */
-export declare function dcExtractWindowsCmdTargets(segment: string): string[];
+export declare function dcIsWindowsSwitchCluster(token: string): boolean;
 /**
  * Extract candidate target paths from a destructive PowerShell command.
  * Handles both `Remove-Item <path> -Recurse` and `Remove-Item -Recurse <path>` orderings.

package/dist/hooks/guardrails/shell-audit-store.d.ts

@@ -73,6 +73,8 @@ export interface ShellAuditLimits {
     maxCommandChars: number;
     /** Free-text (reason) truncation bound applied at line-shaping time. */
     maxReasonChars: number;
+    /** Path truncation bound applied at line-shaping time (issue #3495). */
+    maxPathChars: number;
     /**
      * Hard bound on any single whole-file store read. A legacy header-less
      * file larger than this migrates through the bounded STREAMING reader

package/dist/hooks/guardrails/tool-before.d.ts

@@ -63,6 +63,22 @@ export interface ToolBeforeContext {
 }
 /** @internal test seam */
 export declare function _resetSandboxUnavailableWarningState(): void;
+/**
+ * Structured denial from the shell write-scope gate (issue #3495). The
+ * message stays the operator-facing contract; these fields carry the
+ * structured facts the audit row needs (resolved target + write operator) so
+ * the toolBefore catch never re-parses human-readable text to recover them.
+ * Either field may be absent when the denial site does not know it (e.g. the
+ * dynamic-path denial has an operator but no resolvable target).
+ */
+export declare class ShellWriteBlockedError extends Error {
+    readonly writeTarget?: string;
+    readonly writeOperator?: string;
+    constructor(message: string, details?: {
+        writeTarget?: string;
+        writeOperator?: string;
+    });
+}
 /**
  * Whether the executor that will run a bare `rmdir` has POSIX rmdir(2)
  * semantics, the only basis for the empty-directory-removal exemption. Under