opencode-swarm 7.200.3 → 7.200.5

package/dist/cli/{skill-generator-7hxqq63r.js → skill-generator-r8kvvbh2.js}

@@ -33,37 +33,38 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-xxvman1m.js";
+} from "./index-b4amh1n3.js";
 import"./index-q7sjgr1y.js";
-import"./index-v5nh2fhv.js";
-import"./index-encs4mdm.js";
+import"./index-ee59rzwk.js";
+import"./index-wyfag7r7.js";
 import"./index-m9zzj4ee.js";
-import"./index-5q3hg1pk.js";
-import"./index-44z8mv05.js";
-import"./index-v1h70r3y.js";
+import"./index-4krkevgc.js";
+import"./index-10myvh2k.js";
+import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
-import"./index-pmcvznag.js";
+import"./index-xh861gf3.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-ypxq0x7r.js";
-import"./index-5c6zse74.js";
+import"./index-8srvdpw6.js";
+import"./index-9rwhas09.js";
+import"./index-h8419k5d.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-g57p8p1k.js";
-import"./index-traz987v.js";
+import"./index-4fkxdnc7.js";
+import"./index-yyrnkc3a.js";
 import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
 import"./index-c2k7q723.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-epzadpmm.js";
+import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-tmhwpzdg.js";
+import"./index-dsqavehz.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-5ph10kdd.js";
+import"./index-se501ytb.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{snapshot-coordination-init-kh4dayg5.js → snapshot-coordination-init-wnt85258.js}

@@ -8,77 +8,77 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-95k0fkhp.js";
-import"./index-s3w41p1x.js";
-import"./index-bft3404e.js";
-import"./index-yg4923ga.js";
-import"./index-mff4szvk.js";
-import"./index-5snwc3dz.js";
+} from "./index-8c51asrp.js";
+import"./index-p2dst45x.js";
+import"./index-1by2qd8n.js";
+import"./index-k01n01sc.js";
+import"./index-cy2gbs5b.js";
+import"./index-4ph7ad0b.js";
 import"./index-axqyjreb.js";
 import"./index-txdagbh7.js";
-import"./index-bcn30s7q.js";
-import"./index-8x90j950.js";
+import"./index-4mjfdpte.js";
+import"./index-3x8mz39c.js";
 import"./index-rdec0y3z.js";
-import"./index-q49vqmzh.js";
-import"./index-y46b7a5g.js";
-import"./index-xxvman1m.js";
-import"./index-0vv7vzp8.js";
-import"./index-1j14kbak.js";
+import"./index-74n7sz4s.js";
+import"./index-826kptfe.js";
+import"./index-b4amh1n3.js";
+import"./index-bk8r4m9j.js";
+import"./index-tecp3a77.js";
 import"./index-x5jwegqw.js";
-import"./index-7rpcbnp8.js";
-import"./index-2nq7h5cj.js";
+import"./index-7h22y3ew.js";
+import"./index-pvj101jx.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-5g0nrnyd.js";
-import"./index-dgv5xy0b.js";
+import"./index-687c2ze1.js";
+import"./index-ryrg48c7.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-vyb5xf36.js";
-import"./index-v3bmwmqw.js";
+import"./index-5qajesjq.js";
+import"./index-697mg68b.js";
 import"./index-8mrentmw.js";
-import"./index-8f7wgcpz.js";
-import"./index-j2x2ajz7.js";
-import"./index-2r6d72m6.js";
+import"./index-phz90w3t.js";
+import"./index-1akazdbj.js";
+import"./index-twwdx79t.js";
 import"./index-spggmr30.js";
-import"./index-v5nh2fhv.js";
-import"./index-encs4mdm.js";
+import"./index-ee59rzwk.js";
+import"./index-wyfag7r7.js";
 import"./index-m9zzj4ee.js";
-import"./index-5q3hg1pk.js";
-import"./index-44z8mv05.js";
-import"./index-v1h70r3y.js";
+import"./index-4krkevgc.js";
+import"./index-10myvh2k.js";
+import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
-import"./index-pmcvznag.js";
+import"./index-xh861gf3.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-eac47j2q.js";
-import"./index-s9y49avf.js";
-import"./index-9cffn82s.js";
-import"./index-na6ph1fp.js";
-import"./index-ves1rtqt.js";
+import"./index-1asbb0r4.js";
+import"./index-v839c9mv.js";
+import"./index-vxbj42j0.js";
+import"./index-2x015vjy.js";
+import"./index-y7c4hqcj.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-nzfq1ms2.js";
+import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
+import"./index-8srvdpw6.js";
 import"./index-9rwhas09.js";
-import"./index-ypxq0x7r.js";
-import"./index-5c6zse74.js";
+import"./index-h8419k5d.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-g57p8p1k.js";
-import"./index-traz987v.js";
+import"./index-4fkxdnc7.js";
+import"./index-yyrnkc3a.js";
 import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
 import"./index-c2k7q723.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-epzadpmm.js";
+import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-tmhwpzdg.js";
+import"./index-dsqavehz.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-5ph10kdd.js";
+import"./index-se501ytb.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{speckit-checkoff-n8s920fs.js → speckit-checkoff-64p4d5hf.js}

@@ -7,15 +7,15 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-8f7wgcpz.js";
+} from "./index-phz90w3t.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-epzadpmm.js";
-import"./index-tmhwpzdg.js";
+import"./index-mn75z39t.js";
+import"./index-dsqavehz.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-5ph10kdd.js";
+import"./index-se501ytb.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{workspace-snapshot-veqaqrjr.js → workspace-snapshot-7hws89e9.js}

@@ -52,10 +52,10 @@ import {
   shouldSkipSnapshot,
   switchPrFeedbackTrackingCandidateAsync,
   workspaceSnapshotMatches
-} from "./index-0vv7vzp8.js";
-import"./index-5q3hg1pk.js";
+} from "./index-bk8r4m9j.js";
+import"./index-4krkevgc.js";
 import"./index-te9hq2f4.js";
-import"./index-epzadpmm.js";
+import"./index-mn75z39t.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-collision-ownership-7cz0a2sr.js → worktree-collision-ownership-eej2phhm.js}

@@ -6,28 +6,28 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-7rpcbnp8.js";
+} from "./index-7h22y3ew.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-2nq7h5cj.js";
+} from "./index-pvj101jx.js";
 import {
   scanWorktreeMergeFailuresForRecovery
-} from "./index-v3bmwmqw.js";
-import"./index-5q3hg1pk.js";
-import"./index-s9y49avf.js";
-import"./index-na6ph1fp.js";
-import"./index-ves1rtqt.js";
+} from "./index-697mg68b.js";
+import"./index-4krkevgc.js";
+import"./index-v839c9mv.js";
+import"./index-2x015vjy.js";
+import"./index-y7c4hqcj.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-nzfq1ms2.js";
+import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
-import"./index-ypxq0x7r.js";
-import"./index-5c6zse74.js";
+import"./index-8srvdpw6.js";
+import"./index-h8419k5d.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-g57p8p1k.js";
-import"./index-traz987v.js";
+import"./index-4fkxdnc7.js";
+import"./index-yyrnkc3a.js";
 import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
 import"./index-c2k7q723.js";
@@ -36,7 +36,7 @@ import {
 } from "./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-epzadpmm.js";
+import"./index-mn75z39t.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-isolation-4dbza44f.js → worktree-isolation-xsc0k2n3.js}

@@ -25,79 +25,79 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-95k0fkhp.js";
-import"./index-s3w41p1x.js";
-import"./index-bft3404e.js";
-import"./index-yg4923ga.js";
-import"./index-mff4szvk.js";
-import"./index-5snwc3dz.js";
+} from "./index-8c51asrp.js";
+import"./index-p2dst45x.js";
+import"./index-1by2qd8n.js";
+import"./index-k01n01sc.js";
+import"./index-cy2gbs5b.js";
+import"./index-4ph7ad0b.js";
 import"./index-axqyjreb.js";
 import"./index-txdagbh7.js";
-import"./index-bcn30s7q.js";
-import"./index-8x90j950.js";
+import"./index-4mjfdpte.js";
+import"./index-3x8mz39c.js";
 import"./index-rdec0y3z.js";
-import"./index-q49vqmzh.js";
-import"./index-y46b7a5g.js";
-import"./index-xxvman1m.js";
-import"./index-0vv7vzp8.js";
-import"./index-1j14kbak.js";
+import"./index-74n7sz4s.js";
+import"./index-826kptfe.js";
+import"./index-b4amh1n3.js";
+import"./index-bk8r4m9j.js";
+import"./index-tecp3a77.js";
 import"./index-x5jwegqw.js";
-import"./index-7rpcbnp8.js";
-import"./index-2nq7h5cj.js";
+import"./index-7h22y3ew.js";
+import"./index-pvj101jx.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-5g0nrnyd.js";
-import"./index-dgv5xy0b.js";
+import"./index-687c2ze1.js";
+import"./index-ryrg48c7.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-vyb5xf36.js";
-import"./index-v3bmwmqw.js";
+import"./index-5qajesjq.js";
+import"./index-697mg68b.js";
 import"./index-8mrentmw.js";
-import"./index-8f7wgcpz.js";
-import"./index-j2x2ajz7.js";
-import"./index-2r6d72m6.js";
+import"./index-phz90w3t.js";
+import"./index-1akazdbj.js";
+import"./index-twwdx79t.js";
 import"./index-spggmr30.js";
-import"./index-v5nh2fhv.js";
-import"./index-encs4mdm.js";
+import"./index-ee59rzwk.js";
+import"./index-wyfag7r7.js";
 import"./index-m9zzj4ee.js";
-import"./index-5q3hg1pk.js";
-import"./index-44z8mv05.js";
-import"./index-v1h70r3y.js";
+import"./index-4krkevgc.js";
+import"./index-10myvh2k.js";
+import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-pmcvznag.js";
+} from "./index-xh861gf3.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-eac47j2q.js";
-import"./index-s9y49avf.js";
-import"./index-9cffn82s.js";
-import"./index-na6ph1fp.js";
-import"./index-ves1rtqt.js";
+import"./index-1asbb0r4.js";
+import"./index-v839c9mv.js";
+import"./index-vxbj42j0.js";
+import"./index-2x015vjy.js";
+import"./index-y7c4hqcj.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-nzfq1ms2.js";
+import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
+import"./index-8srvdpw6.js";
 import"./index-9rwhas09.js";
-import"./index-ypxq0x7r.js";
-import"./index-5c6zse74.js";
+import"./index-h8419k5d.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-g57p8p1k.js";
-import"./index-traz987v.js";
+import"./index-4fkxdnc7.js";
+import"./index-yyrnkc3a.js";
 import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
 import"./index-c2k7q723.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-epzadpmm.js";
+import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-tmhwpzdg.js";
+import"./index-dsqavehz.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-5ph10kdd.js";
+import"./index-se501ytb.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/hooks/delegation-gate/worktree-merge-status.d.ts

@@ -21,10 +21,10 @@
  * can depend on it without creating an import cycle.
  *
  * STATE DURABILITY: Status is stored in an in-memory Map (fast, per-process)
- * AND persisted to `.swarm/worktree-merge-status.json` (survives plugin restart).
- * On each write, the JSON file is atomically updated. On read, the in-memory
- * map is checked first (fast path); on plugin restart, the map is empty but
- * the durable file is restored on first read or Rule 2 lookup.
+ * AND persisted to `.swarm/worktree-merge-status.json` (survives plugin restart;
+ * EXCEPTION (#3448): a write whose status-directory parent root has vanished is
+ * skipped rather than recreating that root). On read, the in-memory map is
+ * checked first (fast path); after a restart the durable file restores it.
  */
 /** Why a task's worktree work did not fully reach the main tree. */
 export type WorktreeMergeOutcome = 'partial' | 'failed';

package/dist/hooks/guardrails/tool-before.d.ts

@@ -64,11 +64,36 @@ export interface ToolBeforeContext {
 /** @internal test seam */
 export declare function _resetSandboxUnavailableWarningState(): void;
 /**
- * Creates a toolBefore handler with the given shared context.
- *
- * @param ctx Shared configuration and closures from createGuardrailsHooks
- * @returns The toolBefore handler function
+ * Whether the executor that will run a bare `rmdir` has POSIX rmdir(2)
+ * semantics, the only basis for the empty-directory-removal exemption. Under
+ * PowerShell `rmdir` is an alias of Remove-Item (it deletes a file operand and
+ * can recurse), and cmd's `rd` differs too. So: no Windows grammar may own the
+ * command (`windowsShell` from resolveWindowsWriteAuthority; when it is null
+ * the Windows detectors do not run at all), the `shell` tool on a Windows host
+ * is not POSIX, and a Windows wrapper exposed only by unwrapping
+ * (`bash -c 'powershell -Command …'`) also disqualifies it.
+ */
+export declare function isPosixRmdirExecutor(tool: string, windowsShell: 'powershell' | 'cmd' | null, detectionCommand: string, platform?: NodeJS.Platform): boolean;
+/**
+ * Whether a bare `rmdir` target (`WriteTarget.emptyDirectoryRemoval`) may skip
+ * declared-scope membership. `targetPath` is the gate's resolved path, which
+ * is already LEXICALLY normalised (path.resolve collapses `.` and `..`
+ * segments before any symlink is followed); that is safe only because an
+ * operand with a `..` segment is never tagged (shell-write-detect.ts
+ * isBareRmdirOperand). The helper then realpaths the target's PARENT, so
+ * every symlink/junction in the parent chain is resolved, and requires the
+ * result to lie strictly inside the canonical workspace root. Fail-closed:
+ * a resolution error, the root itself, a target outside the root, a target
+ * that exists as a file or symlink, or a target under the workspace's
+ * repository control state (`.git` / `.swarm`, checked on both the lexical
+ * and the canonical location — PR #3456 review FB-007: an architect passes
+ * file authority for control paths, so the exemption must not be what lets
+ * a declared-scope-bound role reach them) returns false. rmdir(2) does not
+ * follow a final symlink, so the parent chain decides containment. There is
+ * deliberately no emptiness check — that would be a TOCTOU race; the
+ * kernel's ENOTEMPTY is the authoritative guard.
  */
+export declare function isEmptyDirectoryRemovalWithinWorkspace(targetPath: string, workspace: string): boolean;
 /**
  * Issue #3099 R2 (executor context): which grammar OWNS shared constructs.
  *
@@ -91,6 +116,12 @@ export declare function _resetSandboxUnavailableWarningState(): void;
  * commands the gate blocks (#3099 review finding).
  */
 export declare function resolveWindowsWriteAuthority(tool: string, command: string, detectedShellType: 'posix' | 'powershell' | 'cmd' | 'unix' | 'bash', shaped: boolean, platform?: NodeJS.Platform): 'powershell' | 'cmd' | null;
+/**
+ * Creates a toolBefore handler with the given shared context.
+ *
+ * @param ctx Shared configuration and closures from createGuardrailsHooks
+ * @returns The toolBefore handler function
+ */
 export declare function createToolBeforeHandler(ctx: ToolBeforeContext): (input: {
     tool: string;
     sessionID: string;

package/dist/hooks/knowledge-receipt-ledger.d.ts

@@ -173,6 +173,24 @@ export type ReceiptUnavailable = {
 export type ReceiptLedgerResult<T> = ({
     ok: true;
 } & T) | ReceiptUnavailable;
+/**
+ * #2965: permanent identity-conflict codes for the empty-trace immutability
+ * rule. The conflict itself stays legitimate — only its category changes: a
+ * deterministic policy rejection must never ride the retry-inviting
+ * `store_unavailable` store channel (AGENTS.md invariant 9).
+ */
+export type ReceiptEmptyTraceConflictCode = 'wrong_task' | 'wrong_phase' | 'duplicate_conflicting_terminal';
+/** #2965: typed rejection for a conflicting `'none'`-sentinel re-file. */
+export type ReceiptEmptyTraceConflict = {
+    ok: false;
+    code: ReceiptEmptyTraceConflictCode;
+    detail: string;
+};
+export type CommitEmptyRetrievalResult = {
+    ok: true;
+    event_id: string;
+    terminal_event_id: string;
+} | ReceiptEmptyTraceConflict | ReceiptUnavailable;
 declare function writeSnapshot(paths: ReceiptLedgerPaths, state: LedgerState): Promise<void>;
 export interface RepairKnowledgeReceiptLedgerInput {
     phase: string;
@@ -219,10 +237,7 @@ export declare function commitDisplayedMembership(directory: string, input: Comm
     event_id: string;
     memberships: ReceiptMembership[];
 }>>;
-export declare function commitEmptyRetrieval(directory: string, input: Omit<CommitDisplayedMembershipInput, 'entries'>): Promise<ReceiptLedgerResult<{
-    event_id: string;
-    terminal_event_id: string;
-}>>;
+export declare function commitEmptyRetrieval(directory: string, input: Omit<CommitDisplayedMembershipInput, 'entries'>): Promise<CommitEmptyRetrievalResult>;
 export interface TerminalBatchInput {
     trace_id: string;
     session_id: string;

package/dist/hooks/phase-complete-directive-gate.d.ts

@@ -16,8 +16,9 @@
  * `override` event with a written justification). Fail-CLOSED: any read error
  * surfaces as a block, never a silent pass.
  */
+import { type ReceiptUnavailable } from './knowledge-receipt-ledger.js';
 export type DirectiveBlockReason = 'no_verdict' | 'unremediated_violation';
-export type DirectiveGateFailureCode = 'RECEIPT_MISSING' | 'RECEIPT_CORRUPT' | 'RECEIPT_LOCK_TIMEOUT' | 'RECEIPT_WRONG_ROOT' | 'RECEIPT_PERMISSION' | 'RECEIPT_TRANSIENT' | 'RECEIPT_STORE_UNAVAILABLE';
+export type DirectiveGateFailureCode = 'RECEIPT_MISSING' | 'RECEIPT_CORRUPT' | 'RECEIPT_LOCK_TIMEOUT' | 'RECEIPT_WRONG_ROOT' | 'RECEIPT_PERMISSION' | 'RECEIPT_TRANSIENT' | 'RECEIPT_CONFLICT' | 'RECEIPT_STORE_UNAVAILABLE';
 export interface DirectiveGateResult {
     blocked: boolean;
     unresolved: Array<{
@@ -52,6 +53,7 @@ export interface DirectiveGateResult {
         action: 'knowledge_receipt' | 'phase_complete' | 'repair_knowledge_receipt_ledger';
     };
 }
+declare function classifyDirectiveGateFailure(error: unknown | ReceiptUnavailable): Pick<DirectiveGateResult, 'failure' | 'recovery'>;
 /**
  * Evaluate all critical directives shown during the phase. Fail-closed.
  *
@@ -83,3 +85,13 @@ export declare function evaluatePhaseCriticalDirectives(params: {
 export declare function recordDirectiveOverrides(directory: string, ids: string[], justification: string, sessionId: string | undefined, phaseLabel?: string, phaseId?: number): Promise<void>;
 /** Build a structured, human-readable block message for unresolved criticals. */
 export declare function formatDirectiveBlockMessage(unresolved: DirectiveGateResult['unresolved']): string;
+/**
+ * #2965: dependency-injection seam for the failure classifier. Tests drive
+ * `classifyDirectiveGateFailure` through this seam (per the repo's
+ * `_internals` convention); these are synthetic classifier tests, not
+ * end-to-end gate evidence.
+ */
+export declare const _internals: {
+    classifyDirectiveGateFailure: typeof classifyDirectiveGateFailure;
+};
+export {};

package/dist/hooks/shell-write-detect.d.ts

@@ -22,6 +22,18 @@ export interface WriteTarget {
     operator: string;
     /** The file path written to, or null when the path cannot be determined statically. */
     path: string | null;
+    /**
+     * Set only for a bare POSIX `rmdir <dir>`: no options, exactly one literal
+     * operand (no expansion, glob, brace or quote characters). rmdir(2) refuses
+     * a non-empty directory (ENOTEMPTY), so this form cannot destroy file data.
+     * The shell write-scope gate uses it to skip declared-scope membership for
+     * a target that resolves inside the workspace; every other check still
+     * applies. `rmdir -p` (removes parents) and all other forms never carry it,
+     * and neither does any write of a line that runs a command outside
+     * CWD_NEUTRAL_COMMANDS or holds a character outside PLAIN_COMMAND_LINE
+     * (see detectPosixWrites).
+     */
+    emptyDirectoryRemoval?: true;
 }
 /**
  * Result of analyzing a single shell command.