opencode-swarm 7.200.9 → 7.200.11

package/dist/cli/{snapshot-coordination-init-t7vfaqhw.js → snapshot-coordination-init-0yva5015.js}

@@ -8,79 +8,80 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-casbh4y7.js";
-import"./index-p2dst45x.js";
-import"./index-hhq5f82z.js";
-import"./index-qw2wfz92.js";
-import"./index-xh50xsgf.js";
-import"./index-4ph7ad0b.js";
-import"./index-axqyjreb.js";
+} from "./index-ce6qarfq.js";
+import"./index-ckq78kq1.js";
+import"./index-5k88v1e7.js";
+import"./index-yn6jrxen.js";
+import"./index-x8sh8v4a.js";
+import"./index-vx1j2t5p.js";
 import"./index-txdagbh7.js";
-import"./index-hzy6n59p.js";
-import"./index-x3rxa3sh.js";
+import"./index-axqyjreb.js";
+import"./index-aj41bscz.js";
+import"./index-ve74c3a8.js";
+import"./index-jt9j02tm.js";
 import"./index-rdec0y3z.js";
-import"./index-9jty56xr.js";
-import"./index-08jd4gz2.js";
-import"./index-6q2s7r67.js";
-import"./index-bk8r4m9j.js";
-import"./index-tecp3a77.js";
+import"./index-bv9tqmpm.js";
+import"./index-8g9rn3rp.js";
+import"./index-r097ettz.js";
+import"./index-rpvp88js.js";
+import"./index-kd1n3ne2.js";
 import"./index-x5jwegqw.js";
-import"./index-7h22y3ew.js";
-import"./index-zy943kpp.js";
+import"./index-w0afnznk.js";
+import"./index-0an54fza.js";
+import"./index-bnbhqvsn.js";
+import"./index-tggyracy.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-qawbxp81.js";
-import"./index-kxp43wbw.js";
+import"./index-gkvk9et2.js";
+import"./index-h1chaf63.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-hh87yny7.js";
+import"./index-nnc23ddw.js";
 import"./index-697mg68b.js";
-import"./index-8mrentmw.js";
-import"./index-7c4gckzq.js";
-import"./index-4ya4krts.js";
-import"./index-rdyfrdcp.js";
-import"./index-spggmr30.js";
-import"./index-f8nb470m.js";
-import"./index-ss8nfrbb.js";
-import"./index-m9zzj4ee.js";
-import"./index-4krkevgc.js";
-import"./index-94s844qn.js";
-import"./index-mhd6kdzr.js";
-import"./index-rtry5xyf.js";
-import"./index-9ws7m02r.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-2c4hjeea.js";
-import"./index-v839c9mv.js";
-import"./index-tvdn9gr0.js";
-import"./index-2x015vjy.js";
-import"./index-y7c4hqcj.js";
+import"./index-ra3erqpk.js";
+import"./index-rck7v4r4.js";
+import"./index-ck7jpn0y.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-vtpt8yns.js";
+import"./index-dp6hy23p.js";
+import"./index-rjsqf4hv.js";
 import"./index-7pmbnjvj.js";
-import"./index-8srvdpw6.js";
-import"./index-9rwhas09.js";
-import"./index-xhxbv7mz.js";
+import"./index-nzhfhpng.js";
+import"./index-kzr3nby8.js";
+import"./index-ke881z7m.js";
+import"./index-m9zzj4ee.js";
+import"./index-8xtdxy91.js";
+import"./index-yq73sd3w.js";
+import"./index-qyj4383m.js";
+import"./index-rtry5xyf.js";
+import"./index-qdz6zysj.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-4fkxdnc7.js";
-import"./index-yyrnkc3a.js";
-import"./index-q8vfw61p.js";
+import"./index-erp7fk72.js";
+import"./index-krjamprc.js";
+import"./index-g22dps7x.js";
+import"./index-0725jpp7.js";
+import"./index-3t46mez1.js";
+import"./index-mq4eyhtf.js";
+import"./index-814q5t5s.js";
+import"./index-bk5tah7q.js";
+import"./index-hhzwfyd7.js";
+import"./index-2n7a184b.js";
+import"./index-spggmr30.js";
+import"./index-001tkp0j.js";
+import"./index-9rwhas09.js";
+import"./index-6m551cng.js";
+import"./index-pjrx4jkq.js";
 import"./index-t7hmqgjy.js";
-import"./index-c2k7q723.js";
+import"./index-6cppzd9c.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-mn75z39t.js";
-import"./index-3t46mez1.js";
-import"./index-02vgzrpg.js";
+import"./index-9qy3tzt5.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-y16v2q1x.js";
 import"./index-xfzkq1k4.js";
-import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";
 import"./index-a76rekgs.js";

package/dist/cli/{speckit-checkoff-tcn1dqt0.js → speckit-checkoff-sh9w7j5b.js}

@@ -7,17 +7,17 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-7c4gckzq.js";
+} from "./index-nzhfhpng.js";
+import"./index-mq4eyhtf.js";
+import"./index-814q5t5s.js";
+import"./index-bk5tah7q.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-mn75z39t.js";
-import"./index-02vgzrpg.js";
+import"./index-9qy3tzt5.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-y16v2q1x.js";
 import"./index-xfzkq1k4.js";
-import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";
 import"./index-a76rekgs.js";

package/dist/cli/{telemetry-cr8q16wk.js → telemetry-j7zr1dht.js}

@@ -14,7 +14,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-c2k7q723.js";
+} from "./index-6cppzd9c.js";
 import"./index-te9hq2f4.js";
 import"./index-zgwm4ryv.js";
 import"./index-gknz3bv1.js";

package/dist/cli/workflow-wal-file-a2c8e920.js

@@ -0,0 +1,32 @@
+// @bun
+import {
+  _internals1 as _internals,
+  readWorkflowWalFile,
+  readWorkflowWalFileSync,
+  writeWorkflowWalFile
+} from "./index-hhzwfyd7.js";
+import"./index-2n7a184b.js";
+import"./index-spggmr30.js";
+import"./index-001tkp0j.js";
+import"./index-9rwhas09.js";
+import"./index-6m551cng.js";
+import"./index-pjrx4jkq.js";
+import"./index-t7hmqgjy.js";
+import"./index-6cppzd9c.js";
+import"./index-te9hq2f4.js";
+import"./index-ejhxgyvm.js";
+import"./index-7g4c7s5r.js";
+import"./index-9qy3tzt5.js";
+import"./index-sp2cxpaq.js";
+import"./index-qbxk2rn6.js";
+import"./index-zgwm4ryv.js";
+import"./index-xfzkq1k4.js";
+import"./index-gknz3bv1.js";
+import"./index-zpsr8rpc.js";
+import"./index-a76rekgs.js";
+export {
+  writeWorkflowWalFile,
+  readWorkflowWalFileSync,
+  readWorkflowWalFile,
+  _internals
+};

package/dist/cli/{workspace-snapshot-7hws89e9.js → workspace-snapshot-ksdspd74.js}

@@ -52,10 +52,10 @@ import {
   shouldSkipSnapshot,
   switchPrFeedbackTrackingCandidateAsync,
   workspaceSnapshotMatches
-} from "./index-bk8r4m9j.js";
-import"./index-4krkevgc.js";
+} from "./index-rpvp88js.js";
+import"./index-001tkp0j.js";
 import"./index-te9hq2f4.js";
-import"./index-mn75z39t.js";
+import"./index-9qy3tzt5.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-collision-ownership-5jb0p5aa.js → worktree-collision-ownership-xr6crt8c.js}

@@ -6,41 +6,41 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-7h22y3ew.js";
+} from "./index-w0afnznk.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-zy943kpp.js";
+} from "./index-0an54fza.js";
+import"./index-tggyracy.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-697mg68b.js";
-import"./index-4krkevgc.js";
-import"./index-v839c9mv.js";
-import"./index-2x015vjy.js";
-import"./index-y7c4hqcj.js";
+import"./index-rck7v4r4.js";
+import"./index-ck7jpn0y.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-vtpt8yns.js";
+import"./index-rjsqf4hv.js";
 import"./index-7pmbnjvj.js";
-import"./index-8srvdpw6.js";
-import"./index-xhxbv7mz.js";
+import"./index-8xtdxy91.js";
+import"./index-qdz6zysj.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-4fkxdnc7.js";
-import"./index-yyrnkc3a.js";
-import"./index-q8vfw61p.js";
+import"./index-erp7fk72.js";
+import"./index-bk5tah7q.js";
+import"./index-001tkp0j.js";
+import"./index-6m551cng.js";
+import"./index-pjrx4jkq.js";
 import"./index-t7hmqgjy.js";
-import"./index-c2k7q723.js";
+import"./index-6cppzd9c.js";
 import {
   canonicalRootKeyFresh
 } from "./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-mn75z39t.js";
+import"./index-9qy3tzt5.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";
 import"./index-a76rekgs.js";

package/dist/cli/{worktree-isolation-cxg8fgba.js → worktree-isolation-0126b5e7.js}

@@ -25,81 +25,82 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-casbh4y7.js";
-import"./index-p2dst45x.js";
-import"./index-hhq5f82z.js";
-import"./index-qw2wfz92.js";
-import"./index-xh50xsgf.js";
-import"./index-4ph7ad0b.js";
-import"./index-axqyjreb.js";
+} from "./index-ce6qarfq.js";
+import"./index-ckq78kq1.js";
+import"./index-5k88v1e7.js";
+import"./index-yn6jrxen.js";
+import"./index-x8sh8v4a.js";
+import"./index-vx1j2t5p.js";
 import"./index-txdagbh7.js";
-import"./index-hzy6n59p.js";
-import"./index-x3rxa3sh.js";
+import"./index-axqyjreb.js";
+import"./index-aj41bscz.js";
+import"./index-ve74c3a8.js";
+import"./index-jt9j02tm.js";
 import"./index-rdec0y3z.js";
-import"./index-9jty56xr.js";
-import"./index-08jd4gz2.js";
-import"./index-6q2s7r67.js";
-import"./index-bk8r4m9j.js";
-import"./index-tecp3a77.js";
+import"./index-bv9tqmpm.js";
+import"./index-8g9rn3rp.js";
+import"./index-r097ettz.js";
+import"./index-rpvp88js.js";
+import"./index-kd1n3ne2.js";
 import"./index-x5jwegqw.js";
-import"./index-7h22y3ew.js";
-import"./index-zy943kpp.js";
+import"./index-w0afnznk.js";
+import"./index-0an54fza.js";
+import"./index-bnbhqvsn.js";
+import"./index-tggyracy.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-qawbxp81.js";
-import"./index-kxp43wbw.js";
+import"./index-gkvk9et2.js";
+import"./index-h1chaf63.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-hh87yny7.js";
+import"./index-nnc23ddw.js";
 import"./index-697mg68b.js";
-import"./index-8mrentmw.js";
-import"./index-7c4gckzq.js";
-import"./index-4ya4krts.js";
-import"./index-rdyfrdcp.js";
-import"./index-spggmr30.js";
-import"./index-f8nb470m.js";
-import"./index-ss8nfrbb.js";
+import"./index-ra3erqpk.js";
+import"./index-rck7v4r4.js";
+import"./index-ck7jpn0y.js";
+import"./index-ry16d01s.js";
+import"./index-rdm3px0g.js";
+import"./index-dp6hy23p.js";
+import"./index-rjsqf4hv.js";
+import"./index-7pmbnjvj.js";
+import"./index-nzhfhpng.js";
+import"./index-kzr3nby8.js";
+import"./index-ke881z7m.js";
 import"./index-m9zzj4ee.js";
-import"./index-4krkevgc.js";
-import"./index-94s844qn.js";
-import"./index-mhd6kdzr.js";
+import"./index-8xtdxy91.js";
+import"./index-yq73sd3w.js";
+import"./index-qyj4383m.js";
 import"./index-rtry5xyf.js";
+import"./index-qdz6zysj.js";
+import"./index-vzm6zre7.js";
+import"./index-ae75rja9.js";
+import"./index-erp7fk72.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-9ws7m02r.js";
+} from "./index-krjamprc.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-2c4hjeea.js";
-import"./index-v839c9mv.js";
-import"./index-tvdn9gr0.js";
-import"./index-2x015vjy.js";
-import"./index-y7c4hqcj.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-vtpt8yns.js";
-import"./index-7pmbnjvj.js";
-import"./index-8srvdpw6.js";
+import"./index-3t46mez1.js";
+import"./index-mq4eyhtf.js";
+import"./index-814q5t5s.js";
+import"./index-bk5tah7q.js";
+import"./index-hhzwfyd7.js";
+import"./index-2n7a184b.js";
+import"./index-spggmr30.js";
+import"./index-001tkp0j.js";
 import"./index-9rwhas09.js";
-import"./index-xhxbv7mz.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-4fkxdnc7.js";
-import"./index-yyrnkc3a.js";
-import"./index-q8vfw61p.js";
+import"./index-6m551cng.js";
+import"./index-pjrx4jkq.js";
 import"./index-t7hmqgjy.js";
-import"./index-c2k7q723.js";
+import"./index-6cppzd9c.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-mn75z39t.js";
-import"./index-3t46mez1.js";
-import"./index-02vgzrpg.js";
+import"./index-9qy3tzt5.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-y16v2q1x.js";
 import"./index-xfzkq1k4.js";
-import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";
 import"./index-a76rekgs.js";

package/dist/hooks/delegation-gate/worktree-isolation.d.ts

@@ -16,6 +16,7 @@ import { resolveGitExecutable } from '../../utils/git-executable.js';
 import type { WorktreeHandle } from '../../worktree';
 import { attemptMergeBackFromDirty, cleanupOrphanedBranches, postMergeCleanup, provisionWorktree, pruneStaleWorktreeMetadata, recoverMergeBackFromImmutableCoordinates, removeWorktree, startupOrphanRecovery } from '../../worktree';
 import type { DirtyMergeOptions, ImmutableMergeRecoveryCoordinates, MergeOperationProvenance } from '../../worktree/merge';
+import { assertSettlementArtifactsRemovable, withSettlementArtifactLifecycle } from '../../worktree/settlement-artifact-lifecycle';
 import type { MergeStrategy } from '../../worktree/types';
 import type { WorktreeProvisioningOwnerRemovalIdentity } from './worktree-provisioning-owner';
 import { recordWorktreeProvisioningOwner, removeWorktreeProvisioningOwner } from './worktree-provisioning-owner';
@@ -417,6 +418,8 @@ export declare function readLaneEnvFileFromDisk(worktreePath: string, laneIndex:
  * here via getters/setters) to mock worktree provisioning, merge-back, etc.
  */
 export declare const _internals: {
+    withSettlementArtifactLifecycle: typeof withSettlementArtifactLifecycle;
+    assertSettlementArtifactsRemovable: typeof assertSettlementArtifactsRemovable;
     /** Epic v2 C3: committed landing for a task of the open epic. */
     epicCommitLandingFor: typeof epicCommitLandingFor;
     provisionWorktree: typeof provisionWorktree;

package/dist/hooks/delegation-gate.d.ts

@@ -534,6 +534,12 @@ declare function resolveEvidenceTaskId(args: Record<string, unknown> | undefined
  */
 export declare const _internals: {
     isEpicOpenForProject: typeof isEpicOpenForProject;
+    /**
+     * #3502 review (PRR-007): set by createDelegationGateHook so tests can
+     * observe the settlement-side invalidation gate for a specific hook
+     * instance (did THIS dispatch's route persist fail for this task?).
+     */
+    routeInvalidationProbe: ((callID: string, sessionId: string, taskId: string) => boolean) | null;
     /** Epic v2 C4: wave-only coder admission + the wave's parallel/isolation policy. */
     resolveEpicDispatchPolicy: typeof resolveEpicDispatchPolicy;
     resolveEpicPrFeedbackConflict: typeof resolveEpicPrFeedbackConflict;

package/dist/hooks/guardrails/audit-log.d.ts

@@ -64,6 +64,8 @@ export interface ScopeViolationDecision {
     declaredScope: string;
     resolvedScope: string;
     action: string;
+    /** Shell write operator that tripped the gate (issue #3495 item 4). */
+    operator?: string;
 }
 export interface DestructiveBlockDecision {
     type: 'destructive_block';

package/dist/hooks/guardrails/cmd-delete-grammar.d.ts

@@ -0,0 +1,47 @@
+/**
+ * cmd.exe rd/rmdir/del recursion-switch grammar (leaf module — no local
+ * imports: both the destructive guard (guardrails/destructive-command.ts)
+ * and the shell-write detector (shell-write-detect.ts) consume it, and
+ * destructive-command already imports from shell-write-detect, so hosting
+ * the grammar in either would create a cycle).
+ *
+ * Modeled from executed cmd.exe ground truth (PR #3499 review round):
+ * - cmd scans each UNQUOTED argument for the FIRST `/` — everything from it
+ *   to the end of the token is switch text; the text before it is the path.
+ *   `rd zzz/s` therefore deletes `zzz` recursively (`rd zzz /s`), and so do
+ *   `rd ../s` and `rd ./s`.
+ * - A fully double-quoted token is a path; cmd does not scan it for
+ *   switches (`rd "/s" x` does not recurse — `"/s"` is a path).
+ * - Single quotes are NOT quotes for cmd (`rd 'zzz/s'` splits at the slash).
+ * - `^/` caret escapes decode to `/` (normalized by dcNormalizeCommand).
+ */
+/**
+ * Whether slash-separated switch TEXT (the characters after the first
+ * unquoted `/` of a cmd.exe argument) parses as a switch cluster: every
+ * slash-separated segment is 1–2 ASCII letters — `s`, `S`, `q`, `s/q`,
+ * `sq`, `qs`. Multi-letter segments never qualify: `share` and
+ * `src/old` are not switch names (real cmd.exe rejects `rd a/share/b` with
+ * "Parameter format not correct" — nothing is deletable, so the argument is
+ * a plain path operand, and on POSIX it stays an ordinary nested path).
+ */
+export declare function dcIsSwitchClusterText(text: string): boolean;
+/**
+ * Parse the argument text of a cmd.exe rd/rmdir/del command for the
+ * recursion switch and its deletion targets.
+ *
+ * - Leading `/` with valid switch letters: pure switch token; a quoted span
+ *   glued after the letters (`/s"file.txt"`) is the deletion target.
+ * - `/` at index > 0 with valid switch letters containing `s`: the command
+ *   recurses over the path prefix (`rd zzz/s` → target `zzz`).
+ * - Invalid switch text (`a/share/b` → cmd errors "Parameter format not
+ *   correct"): nothing is deletable; the token is a plain path operand and
+ *   never fires — on POSIX executors it stays an ordinary nested path.
+ * - A fully double-quoted token is a path operand, never a switch.
+ *
+ * Returns `fires` (the recursion switch is present) and the deletion
+ * targets to evaluate when it fires.
+ */
+export declare function dcParseWindowsRecursiveDelete(args: string): {
+    fires: boolean;
+    targets: string[];
+};

package/dist/hooks/guardrails/destructive-command.d.ts

@@ -136,11 +136,19 @@ export declare function dcEvaluateRecursiveDeleteTargets(input: {
  *   ln -s <target> <link>  (when target is outside cwd)
  */
 export declare function dcCheckJunctionCreation(segment: string, cwd: string): string | null;
+export { dcIsSwitchClusterText, dcParseWindowsRecursiveDelete, } from './cmd-delete-grammar';
 /**
- * Extract candidate target paths from a destructive Windows cmd.exe command.
- * Returns array of path-like arguments.
+ * Whether a whitespace-delimited cmd.exe argument behaves like a switch
+ * cluster (issue #3495): a leading `/` followed by switch text where EVERY
+ * slash-separated segment is 1–2 ASCII letters — `/s`, `/S`, `/q`, `/s/q`,
+ * `/sq`, `/qs`. Path-like tokens never qualify: `/share` and `/src/old`
+ * carry multi-letter segments, and a quoted token (`"/s"`, `"a/share/b"`)
+ * does not start with `/`. Verified against real cmd.exe: a quoted `"/s"`
+ * is treated as a path, and `/sq` is rejected by cmd itself ("Parameter
+ * format not correct"), so classifying these clusters as switches is at
+ * worst fail-closed parity. Grammar text lives in ./cmd-delete-grammar.
  */
-export declare function dcExtractWindowsCmdTargets(segment: string): string[];
+export declare function dcIsWindowsSwitchCluster(token: string): boolean;
 /**
  * Extract candidate target paths from a destructive PowerShell command.
  * Handles both `Remove-Item <path> -Recurse` and `Remove-Item -Recurse <path>` orderings.

package/dist/hooks/guardrails/shell-audit-store.d.ts

@@ -73,6 +73,8 @@ export interface ShellAuditLimits {
     maxCommandChars: number;
     /** Free-text (reason) truncation bound applied at line-shaping time. */
     maxReasonChars: number;
+    /** Path truncation bound applied at line-shaping time (issue #3495). */
+    maxPathChars: number;
     /**
      * Hard bound on any single whole-file store read. A legacy header-less
      * file larger than this migrates through the bounded STREAMING reader

package/dist/hooks/guardrails/tool-before.d.ts

@@ -63,6 +63,22 @@ export interface ToolBeforeContext {
 }
 /** @internal test seam */
 export declare function _resetSandboxUnavailableWarningState(): void;
+/**
+ * Structured denial from the shell write-scope gate (issue #3495). The
+ * message stays the operator-facing contract; these fields carry the
+ * structured facts the audit row needs (resolved target + write operator) so
+ * the toolBefore catch never re-parses human-readable text to recover them.
+ * Either field may be absent when the denial site does not know it (e.g. the
+ * dynamic-path denial has an operator but no resolvable target).
+ */
+export declare class ShellWriteBlockedError extends Error {
+    readonly writeTarget?: string;
+    readonly writeOperator?: string;
+    constructor(message: string, details?: {
+        writeTarget?: string;
+        writeOperator?: string;
+    });
+}
 /**
  * Whether the executor that will run a bare `rmdir` has POSIX rmdir(2)
  * semantics, the only basis for the empty-directory-removal exemption. Under

package/dist/hooks/shell-write-detect.d.ts

@@ -104,6 +104,16 @@ export interface ResolvedWriteTarget {
  */
 export declare function mergeWriteAnalyses(primary: WriteAnalysis, additional: WriteAnalysis, additionalIsAuthoritative?: boolean, wrapperDeclared?: boolean): WriteAnalysis;
 export declare function buildDedupeKey(category: string, operator: string, path: string | null | undefined): string;
+/**
+ * Real bash builtins (#3485 feedback): `builtin CMD` executes CMD only when
+ * CMD names a shell builtin — for anything external (`builtin rm …`,
+ * `builtin curl …`) bash errors "not a shell builtin" and runs nothing, so
+ * neither the dc unwrap nor the detector walk may unwrap those forms (doing
+ * so fabricated destructive/write detections of commands that never ran).
+ * Not exhaustive: membership only gates UNWRAPPING, and missing an exotic
+ * builtin degrades to the safe no-unwrap direction.
+ */
+export declare const BASH_BUILTIN_COMMANDS: Set<string>;
 /** True when any unquoted word token is a known PowerShell cmdlet. */
 export declare function isPowerShellShaped(command: string): boolean;
 /**