opencode-swarm 7.200.5 → 7.200.7

package/dist/cli/{skill-generator-r8kvvbh2.js → skill-generator-6r8pxx5z.js}

@@ -33,21 +33,21 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-b4amh1n3.js";
+} from "./index-6phyfsvn.js";
 import"./index-q7sjgr1y.js";
-import"./index-ee59rzwk.js";
-import"./index-wyfag7r7.js";
+import"./index-mkkwhrtn.js";
+import"./index-y76sev7j.js";
 import"./index-m9zzj4ee.js";
 import"./index-4krkevgc.js";
-import"./index-10myvh2k.js";
+import"./index-bgcanr26.js";
 import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
-import"./index-xh861gf3.js";
+import"./index-kmnyh4r1.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
 import"./index-8srvdpw6.js";
 import"./index-9rwhas09.js";
-import"./index-h8419k5d.js";
+import"./index-qc3qqknb.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-4fkxdnc7.js";
@@ -60,11 +60,11 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-dsqavehz.js";
+import"./index-h9hgxbsw.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-se501ytb.js";
+import"./index-7r9yg7h1.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{snapshot-coordination-init-wnt85258.js → snapshot-coordination-init-z8b9twvf.js}

@@ -8,51 +8,51 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-8c51asrp.js";
+} from "./index-87kk5dqm.js";
 import"./index-p2dst45x.js";
-import"./index-1by2qd8n.js";
-import"./index-k01n01sc.js";
-import"./index-cy2gbs5b.js";
+import"./index-6e75mvmn.js";
+import"./index-jfkzhyqs.js";
+import"./index-5djd4vrn.js";
 import"./index-4ph7ad0b.js";
 import"./index-axqyjreb.js";
 import"./index-txdagbh7.js";
-import"./index-4mjfdpte.js";
-import"./index-3x8mz39c.js";
+import"./index-ramxwbtt.js";
+import"./index-f3ed5wde.js";
 import"./index-rdec0y3z.js";
-import"./index-74n7sz4s.js";
-import"./index-826kptfe.js";
-import"./index-b4amh1n3.js";
+import"./index-g5hghxgw.js";
+import"./index-q8fy8cxa.js";
+import"./index-6phyfsvn.js";
 import"./index-bk8r4m9j.js";
 import"./index-tecp3a77.js";
 import"./index-x5jwegqw.js";
 import"./index-7h22y3ew.js";
-import"./index-pvj101jx.js";
+import"./index-sy15gtjr.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-687c2ze1.js";
-import"./index-ryrg48c7.js";
+import"./index-8k6jd7a9.js";
+import"./index-223g5dj9.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-5qajesjq.js";
+import"./index-c0dbzf9v.js";
 import"./index-697mg68b.js";
 import"./index-8mrentmw.js";
-import"./index-phz90w3t.js";
-import"./index-1akazdbj.js";
-import"./index-twwdx79t.js";
+import"./index-vsqc38a0.js";
+import"./index-rjtf507t.js";
+import"./index-f4tht67a.js";
 import"./index-spggmr30.js";
-import"./index-ee59rzwk.js";
-import"./index-wyfag7r7.js";
+import"./index-mkkwhrtn.js";
+import"./index-y76sev7j.js";
 import"./index-m9zzj4ee.js";
 import"./index-4krkevgc.js";
-import"./index-10myvh2k.js";
+import"./index-bgcanr26.js";
 import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
-import"./index-xh861gf3.js";
+import"./index-kmnyh4r1.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-1asbb0r4.js";
+import"./index-k69vjyfm.js";
 import"./index-v839c9mv.js";
-import"./index-vxbj42j0.js";
+import"./index-mnpcwcqf.js";
 import"./index-2x015vjy.js";
 import"./index-y7c4hqcj.js";
 import"./index-ry16d01s.js";
@@ -61,7 +61,7 @@ import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
 import"./index-8srvdpw6.js";
 import"./index-9rwhas09.js";
-import"./index-h8419k5d.js";
+import"./index-qc3qqknb.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-4fkxdnc7.js";
@@ -74,11 +74,11 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-dsqavehz.js";
+import"./index-h9hgxbsw.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-se501ytb.js";
+import"./index-7r9yg7h1.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{speckit-checkoff-64p4d5hf.js → speckit-checkoff-hhbcq87w.js}

@@ -7,15 +7,15 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-phz90w3t.js";
+} from "./index-vsqc38a0.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-mn75z39t.js";
-import"./index-dsqavehz.js";
+import"./index-h9hgxbsw.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-se501ytb.js";
+import"./index-7r9yg7h1.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{worktree-collision-ownership-eej2phhm.js → worktree-collision-ownership-waf8d48d.js}

@@ -10,7 +10,7 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-pvj101jx.js";
+} from "./index-sy15gtjr.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-697mg68b.js";
@@ -23,7 +23,7 @@ import"./index-rdm3px0g.js";
 import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
 import"./index-8srvdpw6.js";
-import"./index-h8419k5d.js";
+import"./index-qc3qqknb.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-4fkxdnc7.js";

package/dist/cli/{worktree-isolation-xsc0k2n3.js → worktree-isolation-ea4qe5f5.js}

@@ -25,53 +25,53 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-8c51asrp.js";
+} from "./index-87kk5dqm.js";
 import"./index-p2dst45x.js";
-import"./index-1by2qd8n.js";
-import"./index-k01n01sc.js";
-import"./index-cy2gbs5b.js";
+import"./index-6e75mvmn.js";
+import"./index-jfkzhyqs.js";
+import"./index-5djd4vrn.js";
 import"./index-4ph7ad0b.js";
 import"./index-axqyjreb.js";
 import"./index-txdagbh7.js";
-import"./index-4mjfdpte.js";
-import"./index-3x8mz39c.js";
+import"./index-ramxwbtt.js";
+import"./index-f3ed5wde.js";
 import"./index-rdec0y3z.js";
-import"./index-74n7sz4s.js";
-import"./index-826kptfe.js";
-import"./index-b4amh1n3.js";
+import"./index-g5hghxgw.js";
+import"./index-q8fy8cxa.js";
+import"./index-6phyfsvn.js";
 import"./index-bk8r4m9j.js";
 import"./index-tecp3a77.js";
 import"./index-x5jwegqw.js";
 import"./index-7h22y3ew.js";
-import"./index-pvj101jx.js";
+import"./index-sy15gtjr.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-687c2ze1.js";
-import"./index-ryrg48c7.js";
+import"./index-8k6jd7a9.js";
+import"./index-223g5dj9.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-5qajesjq.js";
+import"./index-c0dbzf9v.js";
 import"./index-697mg68b.js";
 import"./index-8mrentmw.js";
-import"./index-phz90w3t.js";
-import"./index-1akazdbj.js";
-import"./index-twwdx79t.js";
+import"./index-vsqc38a0.js";
+import"./index-rjtf507t.js";
+import"./index-f4tht67a.js";
 import"./index-spggmr30.js";
-import"./index-ee59rzwk.js";
-import"./index-wyfag7r7.js";
+import"./index-mkkwhrtn.js";
+import"./index-y76sev7j.js";
 import"./index-m9zzj4ee.js";
 import"./index-4krkevgc.js";
-import"./index-10myvh2k.js";
+import"./index-bgcanr26.js";
 import"./index-mhd6kdzr.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-xh861gf3.js";
+} from "./index-kmnyh4r1.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-1asbb0r4.js";
+import"./index-k69vjyfm.js";
 import"./index-v839c9mv.js";
-import"./index-vxbj42j0.js";
+import"./index-mnpcwcqf.js";
 import"./index-2x015vjy.js";
 import"./index-y7c4hqcj.js";
 import"./index-ry16d01s.js";
@@ -80,7 +80,7 @@ import"./index-vtpt8yns.js";
 import"./index-7pmbnjvj.js";
 import"./index-8srvdpw6.js";
 import"./index-9rwhas09.js";
-import"./index-h8419k5d.js";
+import"./index-qc3qqknb.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-4fkxdnc7.js";
@@ -93,11 +93,11 @@ import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-mn75z39t.js";
 import"./index-3t46mez1.js";
-import"./index-dsqavehz.js";
+import"./index-h9hgxbsw.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-se501ytb.js";
+import"./index-7r9yg7h1.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/gate-evidence.d.ts

@@ -119,6 +119,8 @@ export interface TaskEvidence {
     requirements_state?: 'known' | 'unknown';
     /** Durable proof that the coder dispatch was classified as exact Markdown-only. */
     test_engineer_exempt?: boolean;
+    planId?: string;
+    planIdentityHash?: string;
     /** Exact-task workflow metadata. Missing on legacy evidence written before #2098. */
     workflow?: TaskWorkflowMetadata;
     /** Immutable source identity for an idempotent fail-closed evidence repair. */
@@ -341,6 +343,24 @@ export declare const ExternalEvidenceBundleSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type ExternalEvidenceBundle = z.infer<typeof ExternalEvidenceBundleSchema>;
 export declare function parseTaskEvidence(raw: string, expectedTaskId: string): TaskEvidence;
+/**
+ * Stage B wedge fix (Class E): resolve the current plan identity from
+ * {directory}/.swarm/plan.json. Returns null when the plan is missing or
+ * unreadable; callers must treat null as "identity unknown" and never
+ * block evidence writes on it.
+ */
+export declare function resolveCurrentPlanIdentitySync(directory: string | undefined): {
+    planId: string;
+    planIdentityHash: string;
+} | null;
+/**
+ * Stage B wedge fix (Class E): true iff the evidence carries a plan-identity
+ * stamp that names a DIFFERENT plan than the current one. An absent stamp
+ * (legacy evidence written before stamping, or a plan.json that could not be
+ * read at write time) means "unknown", never "prior campaign": only a positive
+ * mismatch classifies evidence as predating the current campaign.
+ */
+export declare function evidenceStampedForDifferentPlan(evidence: TaskEvidence | null | undefined, currentPlanIdentityHash: string | null | undefined): boolean;
 export declare const DEFAULT_REQUIRED_GATES: string[];
 export interface GateDerivationContext {
     /** Trusted pre/post workspace classification; false/absent fails closed. */

package/dist/hooks/guardrails/tool-before.d.ts

@@ -115,7 +115,7 @@ export declare function isEmptyDirectoryRemovalWithinWorkspace(targetPath: strin
  * checkShellWriteScope, and a mirror that diverges answers "allow" for
  * commands the gate blocks (#3099 review finding).
  */
-export declare function resolveWindowsWriteAuthority(tool: string, command: string, detectedShellType: 'posix' | 'powershell' | 'cmd' | 'unix' | 'bash', shaped: boolean, platform?: NodeJS.Platform): 'powershell' | 'cmd' | null;
+export declare function resolveWindowsWriteAuthority(tool: string, command: string, detectedShellType: 'posix' | 'powershell' | 'cmd' | 'unix' | 'bash', shaped: boolean, platform?: NodeJS.Platform, hostShell?: string): 'powershell' | 'cmd' | null;
 /**
  * Creates a toolBefore handler with the given shared context.
  *

package/dist/hooks/shell-executor-context.d.ts

@@ -41,3 +41,20 @@ export declare const CMD_BUILTIN_PREFIX: RegExp;
 export declare const CMD_STRIP_PREFIX: RegExp;
 /** Strip pattern for a powershell/pwsh -Command/-c wrapper with switches. */
 export declare const PS_STRIP_PREFIX: RegExp;
+/** Record the host-reported shell for the `shell` tool (latest wins). */
+export declare function recordObservedHostShell(shell: string): void;
+/** The host-reported shell for the `shell` tool, when one has been observed. */
+export declare function getObservedHostShell(): string | undefined;
+/** Test seam: clear the observed host shell. */
+export declare function resetObservedHostShell(): void;
+/**
+ * Classify a host-reported shell path into the grammar family the write
+ * detectors should apply for the `shell` tool: a PowerShell-family binary
+ * (powershell/pwsh) or cmd.exe keeps a Windows grammar eligible; ANY other
+ * basename (bash, zsh, sh, dash, ksh, fish, nu, …) is a POSIX-family
+ * executor. Separator-independent basename: the host may report a Windows
+ * path while the gate evaluates under an injected POSIX platform (and vice
+ * versa), so `path.basename` — which is separator-bound to the host — is
+ * never used here (mirrors `basenameAnySep` in shell-write-detect.ts).
+ */
+export declare function hostShellGrammarFamily(hostShell: string): 'windows' | 'posix';

package/dist/hooks/shell-write-detect.d.ts

@@ -22,6 +22,17 @@ export interface WriteTarget {
     operator: string;
     /** The file path written to, or null when the path cannot be determined statically. */
     path: string | null;
+    /**
+     * Present ONLY on inspectable POSIX inline-code interpreter evals
+     * (`python -c`, `node -e`, `bash -c`, `eval`, … — the detectInterpreterEval
+     * sites). Marks a capability write whose target the gate routes through
+     * declared scope / file authority at the eval's working directory
+     * (#1902/#3347). The opaque interpreter_eval classes (PowerShell
+     * -EncodedCommand, nested script blocks, dynamic `&`/IEX invocation,
+     * unsafe-text parse failures) deliberately do NOT set it and keep the
+     * blanket block.
+     */
+    capability?: true;
     /**
      * Set only for a bare POSIX `rmdir <dir>`: no options, exactly one literal
      * operand (no expansion, glob, brace or quote characters). rmdir(2) refuses
@@ -63,6 +74,13 @@ export interface ResolvedWriteTarget {
      * contains command substitution ($(cmd) or `cmd`).
      */
     resolved: boolean;
+    /**
+     * For capability interpreter-eval writes only: the working directory the
+     * eval runs at, tracked through subshell `cd` commands (the starting cwd
+     * when none precedes it). The gate authorizes the eval against this
+     * directory (#1902/#3347); absent for every other write kind.
+     */
+    evalDirectory?: string;
 }
 /**
  * Issue #3099 R2 (executor context): merge a POSIX analysis with a Windows
@@ -108,6 +126,14 @@ export declare function isPowerShellShaped(command: string): boolean;
  *     detectors cannot see) fails and the command stays blocked.
  */
 export declare function isPowerShellReadOnlyPipeline(command: string): boolean;
+/**
+ * Separator-independent basename: splits on BOTH `/` and `\` so a Windows
+ * path (`C:\Python311\python.exe`) yields the same leaf under any host
+ * platform, then strips a case-insensitive `.exe` suffix. Used by the
+ * interpreter-spelling normalizer (#3343) and the host-shell classifier
+ * (#3346) — never `path.basename`, which is separator-bound to the host.
+ */
+export declare function basenameAnySep(word: string): string;
 /**
  * Detect interactive/session tools that should be denied regardless of scope.
  *

package/dist/host/v2/hooks.d.ts

@@ -77,3 +77,23 @@ export declare function registerV2ToolHooks(ctx: V2PluginContext, hooks: V1Hooks
  * warns, and only a double failure rejects.
  */
 export declare function registerV2SessionHooks(ctx: V2PluginContext, hooks: V1HooksSubset, directory: string, registrations: V2Registration[]): Promise<void>;
+/**
+ * Register the shell-executor observer hook (#3346).
+ *
+ * The v2 host reports the shell a `shell`-tool command will actually execute
+ * through `ctx.shell` "create.before" (payload carries the resolved `shell`
+ * path). Recording it in the observed-host-shell store lets the write gate
+ * and `/swarm guardrail explain` key cmd/powershell grammar inheritance on
+ * the real executor instead of the platform — closing the Git-Bash-on-Windows
+ * false-positive class from #3323/#3346.
+ *
+ * Contract (mirrors registerV2SessionHooks' bounded registration, with a
+ * softer failure mode): a host without the shell domain (pre-2.0.29-era
+ * hosts; the vendored member is optional) is a SKIP, not a failure — the
+ * gate falls back to the platform-keyed interim, never wider than today. A
+ * present-but-REJECTING registration warns through the shared
+ * warnV2HookRegistrationFailure path and is likewise non-fatal; a successful
+ * registration lands in the disposal sink. Authoritative hook observations
+ * only — this module performs no environment probing (plan-critic r2).
+ */
+export declare function registerV2ShellHooks(ctx: V2PluginContext, registrations: V2Registration[]): Promise<void>;

package/dist/host/v2/types.d.ts

@@ -97,6 +97,24 @@ export interface V2ToolEditor {
         readonly description: string;
     }): void;
 }
+/**
+ * v2 `ShellCreateBefore` payload (dist/promise/shell.d.ts @2.0.29). The
+ * `shell` field is the resolved shell PATH the host will execute the
+ * command with (upstream `ShellSelect` resolution) — the authoritative
+ * executor report the write gate keys cmd/powershell grammar inheritance
+ * on (#3346).
+ */
+export interface V2ShellCreateBefore {
+    readonly command: string;
+    readonly cwd: string;
+    readonly timeout: number;
+    readonly shell: string;
+    readonly env: Record<string, string | undefined>;
+}
+/** v2 `ShellDomain` (dist/promise/shell.d.ts @2.0.29) — hook payloads inline. */
+export interface V2ShellDomain {
+    readonly hook: <K extends 'create.before'>(event: K, handler: (payload: V2ShellCreateBefore) => Promise<void> | void) => Promise<unknown> | unknown;
+}
 /** v2 `ToolDomain` (dist/promise/tool.d.ts) — hook payloads inline. */
 export interface V2ToolDomain {
     readonly transform: (callback: (editor: V2ToolEditor) => void) => Promise<V2Registration>;
@@ -522,6 +540,15 @@ export interface V2PluginContext {
     readonly permission?: V2PermissionDomain;
     /** Present on 2.0.26 hosts; no Phase 1 code path consumes it (issue #3169). */
     readonly worktree?: V2WorktreeDomain;
+    /**
+     * v2 `ShellDomain` (dist/promise/shell.d.ts @2.0.29; the
+     * `shell.create.before` hook was added upstream 2026-07-29 and is present
+     * across the vendored 2.0.26 pin). OPTIONAL: hosts predating the domain —
+     * and the structural-type discipline of this file — treat it as absent.
+     * Consumed by `registerV2ShellHooks` (src/host/v2/hooks.ts) to observe
+     * the shell the `shell` tool actually executes (#3346).
+     */
+    readonly shell?: V2ShellDomain;
     readonly [key: string]: unknown;
 }
 /** v2 `Cleanup` — the return of `setup`. */