opencode-swarm 7.200.4 → 7.200.5

package/dist/cli/{skill-generator-kt8j40ev.js → skill-generator-r8kvvbh2.js}

@@ -33,20 +33,21 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-q8456mrf.js";
+} from "./index-b4amh1n3.js";
 import"./index-q7sjgr1y.js";
-import"./index-yp5p6kpf.js";
-import"./index-zystaewy.js";
+import"./index-ee59rzwk.js";
+import"./index-wyfag7r7.js";
 import"./index-m9zzj4ee.js";
 import"./index-4krkevgc.js";
-import"./index-3vwfpqaj.js";
+import"./index-10myvh2k.js";
 import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
-import"./index-xd5jn7nr.js";
+import"./index-xh861gf3.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
 import"./index-8srvdpw6.js";
-import"./index-52arsav6.js";
+import"./index-9rwhas09.js";
+import"./index-h8419k5d.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-4fkxdnc7.js";
@@ -59,11 +60,11 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-fz5qbpbw.js";
+import"./index-dsqavehz.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-08h39kf4.js";
+import"./index-se501ytb.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{snapshot-coordination-init-b08vm3ye.js → snapshot-coordination-init-wnt85258.js}

@@ -8,60 +8,60 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-66c8xae5.js";
+} from "./index-8c51asrp.js";
 import"./index-p2dst45x.js";
-import"./index-ss8wnczy.js";
-import"./index-vqzsp93p.js";
-import"./index-43djb5h6.js";
+import"./index-1by2qd8n.js";
+import"./index-k01n01sc.js";
+import"./index-cy2gbs5b.js";
 import"./index-4ph7ad0b.js";
 import"./index-axqyjreb.js";
 import"./index-txdagbh7.js";
-import"./index-ddf3f3k8.js";
-import"./index-6rxm153v.js";
+import"./index-4mjfdpte.js";
+import"./index-3x8mz39c.js";
 import"./index-rdec0y3z.js";
-import"./index-5fm37ceh.js";
-import"./index-2s3wgvj8.js";
-import"./index-q8456mrf.js";
+import"./index-74n7sz4s.js";
+import"./index-826kptfe.js";
+import"./index-b4amh1n3.js";
 import"./index-bk8r4m9j.js";
 import"./index-tecp3a77.js";
 import"./index-x5jwegqw.js";
 import"./index-7h22y3ew.js";
-import"./index-gs4gnndf.js";
+import"./index-pvj101jx.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-1qc3fhnv.js";
-import"./index-hmndq4hk.js";
+import"./index-687c2ze1.js";
+import"./index-ryrg48c7.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-70ctksz3.js";
+import"./index-5qajesjq.js";
 import"./index-697mg68b.js";
 import"./index-8mrentmw.js";
-import"./index-8jbvmffw.js";
-import"./index-2xdsmkev.js";
-import"./index-81b69x1b.js";
+import"./index-phz90w3t.js";
+import"./index-1akazdbj.js";
+import"./index-twwdx79t.js";
 import"./index-spggmr30.js";
-import"./index-yp5p6kpf.js";
-import"./index-zystaewy.js";
+import"./index-ee59rzwk.js";
+import"./index-wyfag7r7.js";
 import"./index-m9zzj4ee.js";
 import"./index-4krkevgc.js";
-import"./index-3vwfpqaj.js";
+import"./index-10myvh2k.js";
 import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
-import"./index-xd5jn7nr.js";
+import"./index-xh861gf3.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-zbxahqb0.js";
+import"./index-1asbb0r4.js";
 import"./index-v839c9mv.js";
-import"./index-5y245xwk.js";
+import"./index-vxbj42j0.js";
 import"./index-2x015vjy.js";
 import"./index-y7c4hqcj.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
-import"./index-9rwhas09.js";
 import"./index-8srvdpw6.js";
-import"./index-52arsav6.js";
+import"./index-9rwhas09.js";
+import"./index-h8419k5d.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-4fkxdnc7.js";
@@ -74,11 +74,11 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-fz5qbpbw.js";
+import"./index-dsqavehz.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-08h39kf4.js";
+import"./index-se501ytb.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{speckit-checkoff-3g3bfv0y.js → speckit-checkoff-64p4d5hf.js}

@@ -7,15 +7,15 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-8jbvmffw.js";
+} from "./index-phz90w3t.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-mn75z39t.js";
-import"./index-fz5qbpbw.js";
+import"./index-dsqavehz.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-08h39kf4.js";
+import"./index-se501ytb.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{worktree-collision-ownership-sf7vbj8n.js → worktree-collision-ownership-eej2phhm.js}

@@ -10,7 +10,7 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-gs4gnndf.js";
+} from "./index-pvj101jx.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-697mg68b.js";
@@ -23,7 +23,7 @@ import"./index-rdm3px0g.js";
 import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
 import"./index-8srvdpw6.js";
-import"./index-52arsav6.js";
+import"./index-h8419k5d.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-4fkxdnc7.js";

package/dist/cli/{worktree-isolation-5eh9bgcm.js → worktree-isolation-xsc0k2n3.js}

@@ -25,62 +25,62 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-66c8xae5.js";
+} from "./index-8c51asrp.js";
 import"./index-p2dst45x.js";
-import"./index-ss8wnczy.js";
-import"./index-vqzsp93p.js";
-import"./index-43djb5h6.js";
+import"./index-1by2qd8n.js";
+import"./index-k01n01sc.js";
+import"./index-cy2gbs5b.js";
 import"./index-4ph7ad0b.js";
 import"./index-axqyjreb.js";
 import"./index-txdagbh7.js";
-import"./index-ddf3f3k8.js";
-import"./index-6rxm153v.js";
+import"./index-4mjfdpte.js";
+import"./index-3x8mz39c.js";
 import"./index-rdec0y3z.js";
-import"./index-5fm37ceh.js";
-import"./index-2s3wgvj8.js";
-import"./index-q8456mrf.js";
+import"./index-74n7sz4s.js";
+import"./index-826kptfe.js";
+import"./index-b4amh1n3.js";
 import"./index-bk8r4m9j.js";
 import"./index-tecp3a77.js";
 import"./index-x5jwegqw.js";
 import"./index-7h22y3ew.js";
-import"./index-gs4gnndf.js";
+import"./index-pvj101jx.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-1qc3fhnv.js";
-import"./index-hmndq4hk.js";
+import"./index-687c2ze1.js";
+import"./index-ryrg48c7.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-70ctksz3.js";
+import"./index-5qajesjq.js";
 import"./index-697mg68b.js";
 import"./index-8mrentmw.js";
-import"./index-8jbvmffw.js";
-import"./index-2xdsmkev.js";
-import"./index-81b69x1b.js";
+import"./index-phz90w3t.js";
+import"./index-1akazdbj.js";
+import"./index-twwdx79t.js";
 import"./index-spggmr30.js";
-import"./index-yp5p6kpf.js";
-import"./index-zystaewy.js";
+import"./index-ee59rzwk.js";
+import"./index-wyfag7r7.js";
 import"./index-m9zzj4ee.js";
 import"./index-4krkevgc.js";
-import"./index-3vwfpqaj.js";
+import"./index-10myvh2k.js";
 import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-xd5jn7nr.js";
+} from "./index-xh861gf3.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-zbxahqb0.js";
+import"./index-1asbb0r4.js";
 import"./index-v839c9mv.js";
-import"./index-5y245xwk.js";
+import"./index-vxbj42j0.js";
 import"./index-2x015vjy.js";
 import"./index-y7c4hqcj.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
-import"./index-9rwhas09.js";
 import"./index-8srvdpw6.js";
-import"./index-52arsav6.js";
+import"./index-9rwhas09.js";
+import"./index-h8419k5d.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-4fkxdnc7.js";
@@ -93,11 +93,11 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-fz5qbpbw.js";
+import"./index-dsqavehz.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-08h39kf4.js";
+import"./index-se501ytb.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/hooks/guardrails/tool-before.d.ts

@@ -64,11 +64,36 @@ export interface ToolBeforeContext {
 /** @internal test seam */
 export declare function _resetSandboxUnavailableWarningState(): void;
 /**
- * Creates a toolBefore handler with the given shared context.
- *
- * @param ctx Shared configuration and closures from createGuardrailsHooks
- * @returns The toolBefore handler function
+ * Whether the executor that will run a bare `rmdir` has POSIX rmdir(2)
+ * semantics, the only basis for the empty-directory-removal exemption. Under
+ * PowerShell `rmdir` is an alias of Remove-Item (it deletes a file operand and
+ * can recurse), and cmd's `rd` differs too. So: no Windows grammar may own the
+ * command (`windowsShell` from resolveWindowsWriteAuthority; when it is null
+ * the Windows detectors do not run at all), the `shell` tool on a Windows host
+ * is not POSIX, and a Windows wrapper exposed only by unwrapping
+ * (`bash -c 'powershell -Command …'`) also disqualifies it.
+ */
+export declare function isPosixRmdirExecutor(tool: string, windowsShell: 'powershell' | 'cmd' | null, detectionCommand: string, platform?: NodeJS.Platform): boolean;
+/**
+ * Whether a bare `rmdir` target (`WriteTarget.emptyDirectoryRemoval`) may skip
+ * declared-scope membership. `targetPath` is the gate's resolved path, which
+ * is already LEXICALLY normalised (path.resolve collapses `.` and `..`
+ * segments before any symlink is followed); that is safe only because an
+ * operand with a `..` segment is never tagged (shell-write-detect.ts
+ * isBareRmdirOperand). The helper then realpaths the target's PARENT, so
+ * every symlink/junction in the parent chain is resolved, and requires the
+ * result to lie strictly inside the canonical workspace root. Fail-closed:
+ * a resolution error, the root itself, a target outside the root, a target
+ * that exists as a file or symlink, or a target under the workspace's
+ * repository control state (`.git` / `.swarm`, checked on both the lexical
+ * and the canonical location — PR #3456 review FB-007: an architect passes
+ * file authority for control paths, so the exemption must not be what lets
+ * a declared-scope-bound role reach them) returns false. rmdir(2) does not
+ * follow a final symlink, so the parent chain decides containment. There is
+ * deliberately no emptiness check — that would be a TOCTOU race; the
+ * kernel's ENOTEMPTY is the authoritative guard.
  */
+export declare function isEmptyDirectoryRemovalWithinWorkspace(targetPath: string, workspace: string): boolean;
 /**
  * Issue #3099 R2 (executor context): which grammar OWNS shared constructs.
  *
@@ -91,6 +116,12 @@ export declare function _resetSandboxUnavailableWarningState(): void;
  * commands the gate blocks (#3099 review finding).
  */
 export declare function resolveWindowsWriteAuthority(tool: string, command: string, detectedShellType: 'posix' | 'powershell' | 'cmd' | 'unix' | 'bash', shaped: boolean, platform?: NodeJS.Platform): 'powershell' | 'cmd' | null;
+/**
+ * Creates a toolBefore handler with the given shared context.
+ *
+ * @param ctx Shared configuration and closures from createGuardrailsHooks
+ * @returns The toolBefore handler function
+ */
 export declare function createToolBeforeHandler(ctx: ToolBeforeContext): (input: {
     tool: string;
     sessionID: string;

package/dist/hooks/knowledge-receipt-ledger.d.ts

@@ -173,6 +173,24 @@ export type ReceiptUnavailable = {
 export type ReceiptLedgerResult<T> = ({
     ok: true;
 } & T) | ReceiptUnavailable;
+/**
+ * #2965: permanent identity-conflict codes for the empty-trace immutability
+ * rule. The conflict itself stays legitimate — only its category changes: a
+ * deterministic policy rejection must never ride the retry-inviting
+ * `store_unavailable` store channel (AGENTS.md invariant 9).
+ */
+export type ReceiptEmptyTraceConflictCode = 'wrong_task' | 'wrong_phase' | 'duplicate_conflicting_terminal';
+/** #2965: typed rejection for a conflicting `'none'`-sentinel re-file. */
+export type ReceiptEmptyTraceConflict = {
+    ok: false;
+    code: ReceiptEmptyTraceConflictCode;
+    detail: string;
+};
+export type CommitEmptyRetrievalResult = {
+    ok: true;
+    event_id: string;
+    terminal_event_id: string;
+} | ReceiptEmptyTraceConflict | ReceiptUnavailable;
 declare function writeSnapshot(paths: ReceiptLedgerPaths, state: LedgerState): Promise<void>;
 export interface RepairKnowledgeReceiptLedgerInput {
     phase: string;
@@ -219,10 +237,7 @@ export declare function commitDisplayedMembership(directory: string, input: Comm
     event_id: string;
     memberships: ReceiptMembership[];
 }>>;
-export declare function commitEmptyRetrieval(directory: string, input: Omit<CommitDisplayedMembershipInput, 'entries'>): Promise<ReceiptLedgerResult<{
-    event_id: string;
-    terminal_event_id: string;
-}>>;
+export declare function commitEmptyRetrieval(directory: string, input: Omit<CommitDisplayedMembershipInput, 'entries'>): Promise<CommitEmptyRetrievalResult>;
 export interface TerminalBatchInput {
     trace_id: string;
     session_id: string;

package/dist/hooks/phase-complete-directive-gate.d.ts

@@ -16,8 +16,9 @@
  * `override` event with a written justification). Fail-CLOSED: any read error
  * surfaces as a block, never a silent pass.
  */
+import { type ReceiptUnavailable } from './knowledge-receipt-ledger.js';
 export type DirectiveBlockReason = 'no_verdict' | 'unremediated_violation';
-export type DirectiveGateFailureCode = 'RECEIPT_MISSING' | 'RECEIPT_CORRUPT' | 'RECEIPT_LOCK_TIMEOUT' | 'RECEIPT_WRONG_ROOT' | 'RECEIPT_PERMISSION' | 'RECEIPT_TRANSIENT' | 'RECEIPT_STORE_UNAVAILABLE';
+export type DirectiveGateFailureCode = 'RECEIPT_MISSING' | 'RECEIPT_CORRUPT' | 'RECEIPT_LOCK_TIMEOUT' | 'RECEIPT_WRONG_ROOT' | 'RECEIPT_PERMISSION' | 'RECEIPT_TRANSIENT' | 'RECEIPT_CONFLICT' | 'RECEIPT_STORE_UNAVAILABLE';
 export interface DirectiveGateResult {
     blocked: boolean;
     unresolved: Array<{
@@ -52,6 +53,7 @@ export interface DirectiveGateResult {
         action: 'knowledge_receipt' | 'phase_complete' | 'repair_knowledge_receipt_ledger';
     };
 }
+declare function classifyDirectiveGateFailure(error: unknown | ReceiptUnavailable): Pick<DirectiveGateResult, 'failure' | 'recovery'>;
 /**
  * Evaluate all critical directives shown during the phase. Fail-closed.
  *
@@ -83,3 +85,13 @@ export declare function evaluatePhaseCriticalDirectives(params: {
 export declare function recordDirectiveOverrides(directory: string, ids: string[], justification: string, sessionId: string | undefined, phaseLabel?: string, phaseId?: number): Promise<void>;
 /** Build a structured, human-readable block message for unresolved criticals. */
 export declare function formatDirectiveBlockMessage(unresolved: DirectiveGateResult['unresolved']): string;
+/**
+ * #2965: dependency-injection seam for the failure classifier. Tests drive
+ * `classifyDirectiveGateFailure` through this seam (per the repo's
+ * `_internals` convention); these are synthetic classifier tests, not
+ * end-to-end gate evidence.
+ */
+export declare const _internals: {
+    classifyDirectiveGateFailure: typeof classifyDirectiveGateFailure;
+};
+export {};

package/dist/hooks/shell-write-detect.d.ts

@@ -22,6 +22,18 @@ export interface WriteTarget {
     operator: string;
     /** The file path written to, or null when the path cannot be determined statically. */
     path: string | null;
+    /**
+     * Set only for a bare POSIX `rmdir <dir>`: no options, exactly one literal
+     * operand (no expansion, glob, brace or quote characters). rmdir(2) refuses
+     * a non-empty directory (ENOTEMPTY), so this form cannot destroy file data.
+     * The shell write-scope gate uses it to skip declared-scope membership for
+     * a target that resolves inside the workspace; every other check still
+     * applies. `rmdir -p` (removes parents) and all other forms never carry it,
+     * and neither does any write of a line that runs a command outside
+     * CWD_NEUTRAL_COMMANDS or holds a character outside PLAIN_COMMAND_LINE
+     * (see detectPosixWrites).
+     */
+    emptyDirectoryRemoval?: true;
 }
 /**
  * Result of analyzing a single shell command.