opencode-swarm 7.200.10 → 7.200.12

package/dist/cli/{guardrail-reset-q7m265wy.js → guardrail-reset-ygq8e117.js}

@@ -3,37 +3,37 @@ import {
   getAgentSession,
   getBlockingActionCircuit,
   resetActionCircuitExternally
-} from "./index-4dvqvn4k.js";
+} from "./index-phm7gmpq.js";
 import"./index-ckq78kq1.js";
-import"./index-fbn2mv67.js";
-import"./index-kxxy7zq4.js";
-import"./index-ywwazz81.js";
+import"./index-1egy4f76.js";
+import"./index-gkaj31rk.js";
+import"./index-sfd8kb4k.js";
 import"./index-vx1j2t5p.js";
 import"./index-txdagbh7.js";
 import"./index-axqyjreb.js";
-import"./index-60m7qnds.js";
-import"./index-h9qhy8r6.js";
-import"./index-bt3pxs7r.js";
+import"./index-fk1w7r9k.js";
+import"./index-5ecsb26p.js";
+import"./index-2w17wxc1.js";
 import"./index-rdec0y3z.js";
-import"./index-rnm6c33a.js";
-import"./index-vqknke9n.js";
-import"./index-xkavxqf2.js";
+import"./index-2ftz9m3d.js";
+import"./index-dfgqg3qd.js";
+import"./index-213w5jn9.js";
 import"./index-rpvp88js.js";
 import"./index-kd1n3ne2.js";
 import"./index-x5jwegqw.js";
 import"./index-w0afnznk.js";
-import"./index-66b4f2qd.js";
-import"./index-ev46f132.js";
+import"./index-n9mb83fx.js";
+import"./index-9dtd681s.js";
 import"./index-tggyracy.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-ffm3d4cn.js";
-import"./index-tm6nwe43.js";
+import"./index-fe3dtakd.js";
+import"./index-5t3p0nd1.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-2dey2mtg.js";
+import"./index-td0bfecx.js";
 import"./index-697mg68b.js";
-import"./index-6e7jxxys.js";
+import"./index-vzd1w4ra.js";
 import"./index-rck7v4r4.js";
 import"./index-ck7jpn0y.js";
 import"./index-ry16d01s.js";
@@ -41,27 +41,27 @@ import"./index-rdm3px0g.js";
 import"./index-dp6hy23p.js";
 import"./index-rjsqf4hv.js";
 import"./index-7pmbnjvj.js";
-import"./index-43zgg04r.js";
-import"./index-gsnj3a0h.js";
-import"./index-6ehx0pj4.js";
+import"./index-z0jf1tyr.js";
+import"./index-gvzf86kf.js";
+import"./index-wfx209wp.js";
 import"./index-m9zzj4ee.js";
 import"./index-8xtdxy91.js";
-import"./index-nv8tx9v4.js";
+import"./index-n425a88g.js";
 import"./index-qyj4383m.js";
 import"./index-rtry5xyf.js";
-import"./index-vajbtn3v.js";
+import"./index-0cqr8afr.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-erp7fk72.js";
-import"./index-3h5ztpn5.js";
+import"./index-60yd5f2p.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
 import"./index-3t46mez1.js";
-import"./index-ww5ne0g6.js";
-import"./index-06sj5bjh.js";
+import"./index-jkj598w8.js";
+import"./index-9t4gxpt5.js";
 import"./index-bk5tah7q.js";
-import"./index-r3wyt8za.js";
-import"./index-vm3j8fvn.js";
+import"./index-2pvmk43k.js";
+import"./index-xdyqfp37.js";
 import"./index-spggmr30.js";
 import"./index-001tkp0j.js";
 import"./index-9rwhas09.js";

package/dist/cli/{hive-promoter-857ranjf.js → hive-promoter-73e5qa2r.js}

@@ -7,37 +7,37 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-4dvqvn4k.js";
+} from "./index-phm7gmpq.js";
 import"./index-ckq78kq1.js";
-import"./index-fbn2mv67.js";
-import"./index-kxxy7zq4.js";
-import"./index-ywwazz81.js";
+import"./index-1egy4f76.js";
+import"./index-gkaj31rk.js";
+import"./index-sfd8kb4k.js";
 import"./index-vx1j2t5p.js";
 import"./index-txdagbh7.js";
 import"./index-axqyjreb.js";
-import"./index-60m7qnds.js";
-import"./index-h9qhy8r6.js";
-import"./index-bt3pxs7r.js";
+import"./index-fk1w7r9k.js";
+import"./index-5ecsb26p.js";
+import"./index-2w17wxc1.js";
 import"./index-rdec0y3z.js";
-import"./index-rnm6c33a.js";
-import"./index-vqknke9n.js";
-import"./index-xkavxqf2.js";
+import"./index-2ftz9m3d.js";
+import"./index-dfgqg3qd.js";
+import"./index-213w5jn9.js";
 import"./index-rpvp88js.js";
 import"./index-kd1n3ne2.js";
 import"./index-x5jwegqw.js";
 import"./index-w0afnznk.js";
-import"./index-66b4f2qd.js";
-import"./index-ev46f132.js";
+import"./index-n9mb83fx.js";
+import"./index-9dtd681s.js";
 import"./index-tggyracy.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-ffm3d4cn.js";
-import"./index-tm6nwe43.js";
+import"./index-fe3dtakd.js";
+import"./index-5t3p0nd1.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-2dey2mtg.js";
+import"./index-td0bfecx.js";
 import"./index-697mg68b.js";
-import"./index-6e7jxxys.js";
+import"./index-vzd1w4ra.js";
 import"./index-rck7v4r4.js";
 import"./index-ck7jpn0y.js";
 import"./index-ry16d01s.js";
@@ -45,29 +45,29 @@ import"./index-rdm3px0g.js";
 import"./index-dp6hy23p.js";
 import"./index-rjsqf4hv.js";
 import"./index-7pmbnjvj.js";
-import"./index-43zgg04r.js";
-import"./index-gsnj3a0h.js";
-import"./index-6ehx0pj4.js";
+import"./index-z0jf1tyr.js";
+import"./index-gvzf86kf.js";
+import"./index-wfx209wp.js";
 import"./index-m9zzj4ee.js";
 import"./index-8xtdxy91.js";
-import"./index-nv8tx9v4.js";
+import"./index-n425a88g.js";
 import"./index-qyj4383m.js";
 import"./index-rtry5xyf.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-vajbtn3v.js";
+} from "./index-0cqr8afr.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-erp7fk72.js";
-import"./index-3h5ztpn5.js";
+import"./index-60yd5f2p.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
 import"./index-3t46mez1.js";
-import"./index-ww5ne0g6.js";
-import"./index-06sj5bjh.js";
+import"./index-jkj598w8.js";
+import"./index-9t4gxpt5.js";
 import"./index-bk5tah7q.js";
-import"./index-r3wyt8za.js";
-import"./index-vm3j8fvn.js";
+import"./index-2pvmk43k.js";
+import"./index-xdyqfp37.js";
 import"./index-spggmr30.js";
 import"./index-001tkp0j.js";
 import"./index-9rwhas09.js";

package/dist/cli/{index-vajbtn3v.js → index-0cqr8afr.js}

@@ -739,7 +739,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const {
     readAuthoritativeKnowledgeCounterRollups,
     effectiveRetrievalOutcomes
-  } = await import("./knowledge-events-w3ep12sq.js");
+  } = await import("./knowledge-events-2ha1zsv5.js");
   const rollups = await readAuthoritativeKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -806,11 +806,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-zhy6mgxv.js");
-    const { KnowledgeConfigSchema } = await import("./schema-kep9t01t.js");
+    const { quarantineEntry } = await import("./knowledge-validator-0q4xmhch.js");
+    const { KnowledgeConfigSchema } = await import("./schema-ejerjdcy.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-c34tgnwm.js");
+      const { loadPluginConfigWithMeta } = await import("./index-bxsbm6xx.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-zmp1k0mb.js → index-0kgqjaaj.js}

@@ -6,8 +6,8 @@ import {
   dcEvaluateRecursiveDeleteTargets,
   dcExtractPowerShellTargets,
   dcExtractRecursiveRmTargets,
-  dcExtractWindowsCmdTargets,
   dcNormalizeCommand,
+  dcParseWindowsRecursiveDelete,
   dcSplitSegments,
   dcUnwrapWrappers,
   declaresWindowsWrapperLoose,
@@ -22,14 +22,14 @@ import {
   mergeWriteAnalyses,
   resolveWindowsWriteAuthority,
   resolveWriteTargets
-} from "./index-4dvqvn4k.js";
+} from "./index-phm7gmpq.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-fbn2mv67.js";
+} from "./index-1egy4f76.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";
@@ -109,27 +109,40 @@ function evaluateDestructiveDecision(rawCommand, cwd, declaredScope) {
         };
       }
     }
-    if (/^(?:rmdir|rd)(?:\.exe)?\s+.*\/[sS]/i.test(seg)) {
-      const targets2 = dcExtractWindowsCmdTargets(seg);
-      if (targets2.length === 0) {
-        return {
-          decision: "block",
-          firingRule: "destructive_block: Windows recursive directory delete (rmdir /s)"
-        };
-      }
-      const targetDecision = dcEvaluateRecursiveDeleteTargets({ targets: targets2, cwd });
-      if (!targetDecision.allowed) {
-        return {
-          decision: "block",
-          firingRule: `${targetDecision.code}: ${targetDecision.reason}`
-        };
+    const explainRmdirVerb = /^(?:rmdir|rd)(?:\.exe)?\s*/i.exec(seg);
+    if (explainRmdirVerb) {
+      const parsed = dcParseWindowsRecursiveDelete(seg.slice(explainRmdirVerb[0].length));
+      if (parsed.fires) {
+        if (parsed.targets.length === 0) {
+          return {
+            decision: "block",
+            firingRule: "destructive_block: Windows recursive directory delete (rmdir /s)"
+          };
+        }
+        const targetDecision = dcEvaluateRecursiveDeleteTargets({
+          targets: parsed.targets,
+          cwd
+        });
+        if (!targetDecision.allowed) {
+          return {
+            decision: "block",
+            firingRule: `${targetDecision.code}: ${targetDecision.reason}`
+          };
+        }
       }
     }
-    if (/^del(?:\.exe)?\s+.*\/[sS]/i.test(seg)) {
-      const targets2 = dcExtractWindowsCmdTargets(seg);
-      if (targets2.length > 0) {
+    const explainDelVerb = /^del(?:\.exe)?\s*/i.exec(seg);
+    if (explainDelVerb) {
+      const parsed = dcParseWindowsRecursiveDelete(seg.slice(explainDelVerb[0].length));
+      if (parsed.fires) {
+        if (parsed.targets.length === 0) {
+          return {
+            decision: "block",
+            firingRule: "destructive_block: Windows recursive file delete (del /s)"
+          };
+        }
         const targetDecision = dcEvaluateRecursiveDeleteTargets({
-          targets: targets2,
+          targets: parsed.targets,
           cwd
         });
         if (!targetDecision.allowed) {
@@ -140,7 +153,7 @@ function evaluateDestructiveDecision(rawCommand, cwd, declaredScope) {
         }
       }
     }
-    if (/^(?:Remove-Item|ri|rm|rmdir|del|erase|rd)\b.*-[Rr]ecurse\b/i.test(seg) || /^(?:Remove-Item|ri|rm|rmdir|del|erase|rd)\b.*-[Rr]\b/i.test(seg)) {
+    if (/^(?:Remove-Item|ri|rm|rmdir|del|erase|rd)\b.*\s-[Rr]ecurse\b/i.test(seg) || /^(?:Remove-Item|ri|rm|rmdir|del|erase|rd)\b.*\s-[Rr]\b/i.test(seg)) {
       const targets2 = dcExtractPowerShellTargets(seg);
       if (targets2.length > 0) {
         const targetDecision = dcEvaluateRecursiveDeleteTargets({

package/dist/cli/{index-fbn2mv67.js → index-1egy4f76.js}

@@ -5,7 +5,7 @@ import {
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-06sj5bjh.js";
+} from "./index-9t4gxpt5.js";
 import {
   getPathFlavor,
   init_path_identity,
@@ -277,7 +277,7 @@ var require_scan = __commonJS((exports, module) => {
   var scan = (input, options) => {
     const opts = options || {};
     const length = input.length - 1;
-    const scanToEnd = opts.parts === true || opts.scanToEnd === true;
+    const scanToEnd = opts.parts === true || opts.tokens === true || opts.scanToEnd === true;
     const slashes = [];
     const tokens = [];
     const parts = [];
@@ -384,14 +384,18 @@ var require_scan = __commonJS((exports, module) => {
             negatedExtglob = true;
           }
           if (scanToEnd === true) {
+            let parens = 0;
             while (eos() !== true && (code = advance())) {
               if (code === CHAR_BACKWARD_SLASH) {
                 backslashes = token.backslashes = true;
-                code = advance();
+                advance();
+                continue;
+              }
+              if (code === CHAR_LEFT_PARENTHESES) {
+                parens++;
                 continue;
               }
-              if (code === CHAR_RIGHT_PARENTHESES) {
-                isGlob = token.isGlob = true;
+              if (code === CHAR_RIGHT_PARENTHESES && --parens === 0) {
                 finished = true;
                 break;
               }
@@ -446,13 +450,18 @@ var require_scan = __commonJS((exports, module) => {
       if (opts.noparen !== true && code === CHAR_LEFT_PARENTHESES) {
         isGlob = token.isGlob = true;
         if (scanToEnd === true) {
+          let parens = 1;
           while (eos() !== true && (code = advance())) {
-            if (code === CHAR_LEFT_PARENTHESES) {
+            if (code === CHAR_BACKWARD_SLASH) {
               backslashes = token.backslashes = true;
-              code = advance();
+              advance();
               continue;
             }
-            if (code === CHAR_RIGHT_PARENTHESES) {
+            if (code === CHAR_LEFT_PARENTHESES) {
+              parens++;
+              continue;
+            }
+            if (code === CHAR_RIGHT_PARENTHESES && --parens === 0) {
               finished = true;
               break;
             }
@@ -526,32 +535,31 @@ var require_scan = __commonJS((exports, module) => {
     if (opts.parts === true || opts.tokens === true) {
       let prevIndex;
       for (let idx = 0;idx < slashes.length; idx++) {
-        const n = prevIndex ? prevIndex + 1 : start;
+        const n2 = prevIndex !== undefined ? prevIndex + 1 : start;
         const i = slashes[idx];
-        const value = input.slice(n, i);
+        const value2 = input.slice(n2, i);
         if (opts.tokens) {
           if (idx === 0 && start !== 0) {
             tokens[idx].isPrefix = true;
             tokens[idx].value = prefix;
           } else {
-            tokens[idx].value = value;
+            tokens[idx].value = value2;
           }
           depth(tokens[idx]);
           state.maxDepth += tokens[idx].depth;
         }
-        if (idx !== 0 || value !== "") {
-          parts.push(value);
+        if (i >= start) {
+          parts.push(value2);
+          prevIndex = i;
         }
-        prevIndex = i;
       }
-      if (prevIndex && prevIndex + 1 < input.length) {
-        const value = input.slice(prevIndex + 1);
-        parts.push(value);
-        if (opts.tokens) {
-          tokens[tokens.length - 1].value = value;
-          depth(tokens[tokens.length - 1]);
-          state.maxDepth += tokens[tokens.length - 1].depth;
-        }
+      const n = prevIndex !== undefined ? prevIndex + 1 : start;
+      const value = input.slice(n);
+      parts.push(value);
+      if (opts.tokens && prevIndex && prevIndex + 1 < input.length) {
+        tokens[tokens.length - 1].value = value;
+        depth(tokens[tokens.length - 1]);
+        state.maxDepth += tokens[tokens.length - 1].depth;
       }
       state.slashes = slashes;
       state.parts = parts;
@@ -737,7 +745,11 @@ var require_parse = __commonJS((exports, module) => {
       }
     }
   };
-  var getStarExtglobSequenceOutput = (pattern) => {
+  var buildCharClassStar = (chars) => {
+    const source = chars.length === 1 ? utils.escapeRegex(chars[0]) : `[${chars.map((ch) => utils.escapeRegex(ch)).join("")}]`;
+    return `${source}*`;
+  };
+  var getStarExtglobSequenceChars = (pattern) => {
     let index = 0;
     const chars = [];
     while (index < pattern.length) {
@@ -759,8 +771,7 @@ var require_parse = __commonJS((exports, module) => {
     if (chars.length < 1) {
       return;
     }
-    const source = chars.length === 1 ? utils.escapeRegex(chars[0]) : `[${chars.map((ch) => utils.escapeRegex(ch)).join("")}]`;
-    return `${source}*`;
+    return chars;
   };
   var repeatedExtglobRecursion = (pattern) => {
     let depth = 0;
@@ -784,15 +795,29 @@ var require_parse = __commonJS((exports, module) => {
         return { risky: true };
       }
     }
+    const safeChars = [];
+    let sawStarSequence = false;
+    let combinable = true;
     for (const branch of branches) {
-      const safeOutput = getStarExtglobSequenceOutput(branch);
-      if (safeOutput) {
-        return { risky: true, safeOutput };
+      const chars = getStarExtglobSequenceChars(branch);
+      if (chars) {
+        sawStarSequence = true;
+        safeChars.push(...chars);
+        continue;
+      }
+      const literal = normalizeSimpleBranch(branch);
+      if (literal && literal.length === 1) {
+        safeChars.push(literal);
+        continue;
       }
+      combinable = false;
       if (repeatedExtglobRecursion(branch) > max) {
         return { risky: true };
       }
     }
+    if (sawStarSequence) {
+      return combinable ? { risky: true, safeOutput: buildCharClassStar([...new Set(safeChars)]) } : { risky: true };
+    }
     return { risky: false };
   };
   var parse = (input, options) => {
@@ -1376,6 +1401,7 @@ var require_parse = __commonJS((exports, module) => {
           rest = rest.slice(3);
           consume("/**", 3);
         }
+        const isEnd = eos() || state.parens > 0 && rest === ")".repeat(state.parens) && !extglobs.some((extglob) => extglob.type === "negate");
         if (prior.type === "bos" && eos()) {
           prev.type = "globstar";
           prev.value += value;
@@ -1385,7 +1411,7 @@ var require_parse = __commonJS((exports, module) => {
           consume(value);
           continue;
         }
-        if (prior.type === "slash" && prior.prev.type !== "bos" && !afterStar && eos()) {
+        if (prior.type === "slash" && prior.prev.type !== "bos" && !afterStar && isEnd) {
           state.output = state.output.slice(0, -(prior.output + prev.output).length);
           prior.output = `(?:${prior.output}`;
           prev.type = "globstar";
@@ -1648,9 +1674,9 @@ var require_picomatch = __commonJS((exports, module) => {
     }
     return { isMatch: Boolean(match), match, output };
   };
-  picomatch.matchBase = (input, glob, options) => {
+  picomatch.matchBase = (input, glob, options, posix = options && options.windows) => {
     const regex = glob instanceof RegExp ? glob : picomatch.makeRe(glob, options);
-    return regex.test(utils.basename(input));
+    return regex.test(utils.basename(input, { windows: posix }));
   };
   picomatch.isMatch = (str, patterns, options) => picomatch(patterns, options)(str);
   picomatch.parse = (pattern, options) => {
@@ -2977,6 +3003,7 @@ var SHELL_AUDIT_LIMITS = {
   maxLineBytes: 64 * 1024,
   maxCommandChars: 4096,
   maxReasonChars: 1024,
+  maxPathChars: 320,
   migrationMaxBytes: 8 * 1024 * 1024
 };
 function decisionClassOf(event) {
@@ -3637,10 +3664,21 @@ var SHELL_AUDIT_FIELD_CLASSES = Object.freeze({
   resolvedScope: "redacted-path",
   declaredScope: "redacted-path",
   action: "enum",
+  operator: "free-text-redacted",
   destructiveCategory: "enum",
   executorMechanism: "enum",
   skipReason: "enum"
 });
+function truncateUtf8Safe(text, maxChars) {
+  if (text.length <= maxChars)
+    return text;
+  const cut = text.slice(0, maxChars);
+  const last = cut.charCodeAt(cut.length - 1);
+  if (last >= 55296 && last <= 56319) {
+    return `${cut.slice(0, -1)}\u2026[truncated]`;
+  }
+  return `${cut}\u2026[truncated]`;
+}
 function hashRedactedCommand(redacted) {
   return createHash("sha256").update(redacted, "utf-8").digest("hex").slice(0, 16);
 }
@@ -3707,6 +3745,13 @@ function redactDecisionLineForArchive(line) {
       changed = true;
     }
   }
+  if (typeof record.operator === "string") {
+    const redacted = truncateUtf8Safe(redactEmbeddedPaths(record.operator), 32);
+    if (redacted !== record.operator) {
+      record.operator = redacted;
+      changed = true;
+    }
+  }
   for (const field of ["declaredScope", "resolvedScope"]) {
     if (typeof record[field] === "string") {
       const redacted = redactPath(record[field]);

package/dist/cli/{index-xkavxqf2.js → index-213w5jn9.js}

@@ -5,7 +5,7 @@ import {
 } from "./index-7pmbnjvj.js";
 import {
   readWorkflowWalFileSync
-} from "./index-r3wyt8za.js";
+} from "./index-2pvmk43k.js";
 import {
   validateSwarmPath
 } from "./index-001tkp0j.js";

package/dist/cli/{index-rnm6c33a.js → index-2ftz9m3d.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   readEffectiveSpecSync
-} from "./index-2dey2mtg.js";
+} from "./index-td0bfecx.js";
 import {
   DURABILITY_CLASSES,
   DbWriteError,

package/dist/cli/{index-r3wyt8za.js → index-2pvmk43k.js}

@@ -4,7 +4,7 @@ import {
   autoCommitDirty,
   cleanUntrackedFiles,
   withSettlementArtifactLifecycle
-} from "./index-vm3j8fvn.js";
+} from "./index-xdyqfp37.js";
 import {
   isSpawnCwdMissing,
   isSpawnCwdUnreadable

package/dist/cli/{index-bt3pxs7r.js → index-2w17wxc1.js}

@@ -2,7 +2,7 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-vajbtn3v.js";
+} from "./index-0cqr8afr.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-erp7fk72.js";