opencode-swarm 7.77.3 → 7.77.5

package/dist/index.js

@@ -69,7 +69,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.77.3",
+    version: "7.77.5",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -611,7 +611,7 @@ var init_tool_metadata = __esm(() => {
       agents: ["architect"]
     },
     write_final_council_evidence: {
-      description: "write final council evidence for project completion",
+      description: "Persist project-scoped final council evidence to .swarm/evidence/final-council.json. PREREQUISITE: dispatch critic, reviewer, sme, test_engineer, and explorer as project-scoped Agent tasks and collect their CouncilMemberVerdict JSON — this tool synthesizes only. Rejects on insufficient quorum or CONCERNS with unresolved requiredFixes; normalizes verdicts to approved/concerns/rejected. Architect-only.",
       agents: ["architect"]
     },
     skill_generate: {
@@ -17346,6 +17346,14 @@ async function bunWrite(filePath, data) {
     } catch {}
     throw lastError;
   }
+  try {
+    const dirFd = await fsPromises2.open(dir, "r");
+    try {
+      await dirFd.sync();
+    } finally {
+      await dirFd.close();
+    }
+  } catch {}
   const stats = await fsPromises2.stat(filePath);
   return stats.size;
 }
@@ -17670,14 +17678,23 @@ function validateSwarmPath(directory, filename) {
   return resolved;
 }
 async function readSwarmFileAsync(directory, filename) {
-  try {
-    const resolvedPath = _internals3.validateSwarmPath(directory, filename);
-    const file2 = bunFile(resolvedPath);
-    const content = await file2.text();
-    return content;
-  } catch {
-    return null;
+  const maxAttempts = 5;
+  const retryDelayMs = 10;
+  for (let attempt = 0;attempt < maxAttempts; attempt++) {
+    try {
+      const resolvedPath = _internals3.validateSwarmPath(directory, filename);
+      const file2 = bunFile(resolvedPath);
+      const content = await file2.text();
+      return content;
+    } catch (err2) {
+      const isNotFound = err2?.code === "ENOENT";
+      if (!isNotFound || attempt === maxAttempts - 1) {
+        return null;
+      }
+      await new Promise((resolve3) => setTimeout(resolve3, retryDelayMs));
+    }
   }
+  return null;
 }
 function estimateTokens(text) {
   if (!text) {
@@ -20808,7 +20825,7 @@ GFS4: `);
     }
     function ReadStream$open() {
       var that = this;
-      open(that.path, that.flags, that.mode, function(err2, fd) {
+      open2(that.path, that.flags, that.mode, function(err2, fd) {
         if (err2) {
           if (that.autoClose)
             that.destroy();
@@ -20828,7 +20845,7 @@ GFS4: `);
     }
     function WriteStream$open() {
       var that = this;
-      open(that.path, that.flags, that.mode, function(err2, fd) {
+      open2(that.path, that.flags, that.mode, function(err2, fd) {
         if (err2) {
           that.destroy();
           that.emit("error", err2);
@@ -20845,8 +20862,8 @@ GFS4: `);
       return new fs8.WriteStream(path9, options);
     }
     var fs$open = fs8.open;
-    fs8.open = open;
-    function open(path9, flags2, mode, cb) {
+    fs8.open = open2;
+    function open2(path9, flags2, mode, cb) {
       if (typeof mode === "function")
         cb = mode, mode = null;
       return go$open(path9, flags2, mode, cb);
@@ -22180,6 +22197,9 @@ function wrapFlatRetrospective(flatEntry, taskId) {
 async function loadEvidence(directory, taskId) {
   const sanitizedTaskId = sanitizeTaskId2(taskId);
   const relativePath = path10.join("evidence", sanitizedTaskId, "evidence.json");
+  if (relativePath.length > 4096) {
+    return { status: "not_found" };
+  }
   const evidencePath = validateSwarmPath(directory, relativePath);
   const content = await readSwarmFileAsync(directory, relativePath);
   if (content === null) {
@@ -24393,16 +24413,16 @@ var require_parse = __commonJS((exports, module2) => {
       const analysis = analyzeRepeatedExtglob(body2, opts);
       if ((token.type === "plus" || token.type === "star") && analysis.risky) {
         const safeOutput = analysis.safeOutput ? (token.output ? "" : ONE_CHAR) + (opts.capture ? `(${analysis.safeOutput})` : analysis.safeOutput) : undefined;
-        const open = tokens[token.tokensIndex];
-        open.type = "text";
-        open.value = literal2;
-        open.output = safeOutput || utils.escapeRegex(literal2);
+        const open2 = tokens[token.tokensIndex];
+        open2.type = "text";
+        open2.value = literal2;
+        open2.output = safeOutput || utils.escapeRegex(literal2);
         for (let i2 = token.tokensIndex + 1;i2 < tokens.length; i2++) {
           tokens[i2].value = "";
           tokens[i2].output = "";
           delete tokens[i2].suffix;
         }
-        state.output = token.output + open.output;
+        state.output = token.output + open2.output;
         state.backtrack = true;
         push({ type: "paren", extglob: true, value, output: "" });
         decrement("parens");
@@ -24622,15 +24642,15 @@ var require_parse = __commonJS((exports, module2) => {
       }
       if (value === "{" && opts.nobrace !== true) {
         increment("braces");
-        const open = {
+        const open2 = {
           type: "brace",
           value,
           output: "(",
           outputIndex: state.output.length,
           tokensIndex: state.tokens.length
         };
-        braces.push(open);
-        push(open);
+        braces.push(open2);
+        push(open2);
         continue;
       }
       if (value === "}") {
@@ -27147,6 +27167,291 @@ var init_stored_input_args = __esm(() => {
   storedInputArgs = new Map;
 });
 
+// src/commands/command-dispatch.ts
+function normalizeSwarmCommandInput(command, argumentText) {
+  if (command !== "swarm" && !command.startsWith("swarm-")) {
+    return { isSwarmCommand: false, tokens: [] };
+  }
+  if (command === "swarm") {
+    return {
+      isSwarmCommand: true,
+      tokens: argumentText.trim().split(/\s+/).filter(Boolean)
+    };
+  }
+  const subcommand = command.slice("swarm-".length);
+  const extraArgs = argumentText.trim().split(/\s+/).filter(Boolean);
+  return {
+    isSwarmCommand: true,
+    tokens: [subcommand, ...extraArgs].filter(Boolean)
+  };
+}
+function canonicalCommandKey(resolved) {
+  return resolved.entry.aliasOf ?? resolved.key;
+}
+function formatCommandNotFound(tokens) {
+  const attemptedCommand = tokens[0] || "";
+  const MAX_DISPLAY = 100;
+  const displayCommand = attemptedCommand.length > MAX_DISPLAY ? `${attemptedCommand.slice(0, MAX_DISPLAY)}...` : attemptedCommand;
+  const similar = _internals13.findSimilarCommands(attemptedCommand);
+  const header = `Command \`/swarm ${displayCommand}\` not found.`;
+  const suggestions = similar.length > 0 ? `Did you mean:
+${similar.map((cmd) => `  - /swarm ${cmd}`).join(`
+`)}` : "";
+  const footer = "Run `/swarm help` for all commands.";
+  return [header, suggestions, footer].filter(Boolean).join(`
+
+`);
+}
+async function executeSwarmCommand(args2) {
+  const {
+    directory,
+    agents,
+    sessionID,
+    tokens,
+    packageRoot,
+    buildHelpText,
+    policy
+  } = args2;
+  let text;
+  const resolved = resolveCommand(tokens);
+  if (!resolved) {
+    text = tokens.length === 0 && buildHelpText ? buildHelpText() : formatCommandNotFound(tokens);
+  } else {
+    const policyResult = policy?.(resolved) ?? { allowed: true };
+    if (!policyResult.allowed) {
+      text = policyResult.message;
+    } else {
+      try {
+        text = await resolved.entry.handler({
+          directory,
+          args: resolved.remainingArgs,
+          sessionID,
+          agents,
+          packageRoot,
+          source: "chat"
+        });
+      } catch (_err) {
+        const cmdName = tokens[0] || "unknown";
+        const errMsg = _err instanceof Error ? _err.message : String(_err);
+        text = `Error executing /swarm ${cmdName}: ${errMsg}`;
+      }
+      if (resolved.warning) {
+        text = `${resolved.warning}
+
+${text}`;
+      }
+    }
+  }
+  return {
+    text,
+    resolved: resolved ?? undefined,
+    canonicalKey: resolved ? canonicalCommandKey(resolved) : undefined
+  };
+}
+var init_command_dispatch = __esm(() => {
+  init_registry();
+});
+
+// src/commands/tool-policy.ts
+function lazySet(getValues) {
+  let cached2 = null;
+  const ensure = () => {
+    if (cached2 === null)
+      cached2 = new Set(getValues());
+    return cached2;
+  };
+  return new Proxy({}, {
+    get(_target, prop) {
+      const set2 = ensure();
+      const value = Reflect.get(set2, prop);
+      return typeof value === "function" ? value.bind(set2) : value;
+    }
+  });
+}
+function lazyArray(getValues) {
+  let cached2 = null;
+  const ensure = () => {
+    if (cached2 === null)
+      cached2 = getValues();
+    return cached2;
+  };
+  return new Proxy([], {
+    get(_target, prop) {
+      const arr = ensure();
+      const value = Reflect.get(arr, prop);
+      return typeof value === "function" ? value.bind(arr) : value;
+    }
+  });
+}
+function classifySwarmCommandToolUse(resolved) {
+  const canonicalKey = canonicalCommandKey(resolved);
+  const args2 = resolved.remainingArgs;
+  if (!SWARM_COMMAND_TOOL_ALLOWLIST.has(canonicalKey)) {
+    if (HUMAN_ONLY_SWARM_COMMANDS.has(canonicalKey)) {
+      return {
+        allowed: false,
+        message: `/swarm ${canonicalKey} is a human-only command. ` + `Present the situation to the user and ask them to run \`/swarm ${canonicalKey}\` themselves ` + `(or \`bunx opencode-swarm run ${canonicalKey}\` from a terminal). ` + `You MUST NOT run it yourself via Bash, swarm_command, or any other tool — ` + `the runtime guardrail will block such attempts.`
+      };
+    }
+    return {
+      allowed: false,
+      message: `/swarm ${canonicalKey} is not available through the chat tool yet.
+
+` + `Use the canonical CLI path for now: \`bunx opencode-swarm run ${canonicalKey}\`.
+` + `Commands with state changes, auto-heal behavior, or subprocesses need confirmation gates before chat-tool support.`
+    };
+  }
+  if (canonicalKey === "config doctor" && args2.some((arg) => arg === "--fix" || arg === "-f")) {
+    return {
+      allowed: false,
+      message: "/swarm config doctor --fix is not available through swarm_command. Run the CLI command directly when you intend to modify config files."
+    };
+  }
+  if (NO_ARGS.has(canonicalKey) && args2.length > 0) {
+    return {
+      allowed: false,
+      message: `/swarm ${canonicalKey} does not accept arguments through swarm_command.`
+    };
+  }
+  if (canonicalKey === "knowledge") {
+    if (args2.length === 0)
+      return { allowed: true };
+    if (args2.length === 1 && (args2[0] === "list" || args2[0] === "unactionable"))
+      return { allowed: true };
+    return {
+      allowed: false,
+      message: "Only `/swarm knowledge`, `/swarm knowledge list`, and `/swarm knowledge unactionable` are available through swarm_command. Knowledge migrate/quarantine/restore/retry-hardening are intentionally excluded."
+    };
+  }
+  if (canonicalKey === "memory") {
+    if (args2.length === 0)
+      return { allowed: true };
+    return {
+      allowed: false,
+      message: "Use `/swarm memory status`, `/swarm memory pending`, `/swarm memory recall-log`, `/swarm memory stale`, `/swarm memory export`, or `/swarm memory evaluate --json` through swarm_command. Memory import, migrate, and compact are intentionally excluded from chat-tool execution."
+    };
+  }
+  if (canonicalKey === "memory evaluate") {
+    if (args2.length === 0)
+      return { allowed: true };
+    if (args2.length === 1 && args2[0] === "--json")
+      return { allowed: true };
+    return {
+      allowed: false,
+      message: "Usage through swarm_command: `/swarm memory evaluate --json`. Custom fixture directories are only available through direct user command execution."
+    };
+  }
+  if (canonicalKey === "sdd status") {
+    if (args2.length === 0)
+      return { allowed: true };
+    if (args2.length === 1 && args2[0] === "--json")
+      return { allowed: true };
+    return {
+      allowed: false,
+      message: "Usage through swarm_command: `/swarm sdd status` or `/swarm sdd status --json`."
+    };
+  }
+  if (canonicalKey === "sdd validate") {
+    if (args2.length === 0)
+      return { allowed: true };
+    if (args2.length === 1 && args2[0] === "--json")
+      return { allowed: true };
+    if (args2.length === 2 && args2[0] === "--change" && /^[A-Za-z0-9_.-]{1,128}$/.test(args2[1])) {
+      return { allowed: true };
+    }
+    return {
+      allowed: false,
+      message: "Usage through swarm_command: `/swarm sdd validate`, `/swarm sdd validate --json`, or `/swarm sdd validate --change <id>`."
+    };
+  }
+  if (canonicalKey === "memory pending" || canonicalKey === "memory recall-log" || canonicalKey === "memory stale") {
+    if (args2.length === 0)
+      return { allowed: true };
+    if (args2.length === 2 && args2[0] === "--limit" && /^\d+$/.test(args2[1])) {
+      return { allowed: true };
+    }
+    return {
+      allowed: false,
+      message: `Usage through swarm_command: \`/swarm ${canonicalKey}\` or ` + `\`/swarm ${canonicalKey} --limit <n>\`.`
+    };
+  }
+  if (canonicalKey === "retrieve") {
+    if (args2.length !== 1 || !SUMMARY_ID_PATTERN.test(args2[0])) {
+      return {
+        allowed: false,
+        message: "Usage through swarm_command: `/swarm retrieve <summary-id>` with a single summary ID such as S1."
+      };
+    }
+  }
+  if (canonicalKey === "benchmark") {
+    const allowedFlags = new Set(["--cumulative", "--ci-gate"]);
+    const invalid = args2.filter((arg) => !allowedFlags.has(arg));
+    if (invalid.length > 0) {
+      return {
+        allowed: false,
+        message: "Only `--cumulative` and `--ci-gate` are supported for `/swarm benchmark` through swarm_command."
+      };
+    }
+  }
+  if (canonicalKey === "show-plan") {
+    if (args2.length > 1 || args2[0] && !/^\d+$/.test(args2[0])) {
+      return {
+        allowed: false,
+        message: "Usage through swarm_command: `/swarm show-plan` or `/swarm show-plan <phase-number>`."
+      };
+    }
+  }
+  if (canonicalKey === "evidence") {
+    if (args2.length > 1 || args2[0] && !TASK_ID_PATTERN.test(args2[0])) {
+      return {
+        allowed: false,
+        message: "Usage through swarm_command: `/swarm evidence` or `/swarm evidence <task-id>`."
+      };
+    }
+  }
+  if (canonicalKey === "help" && args2.length > 2) {
+    return {
+      allowed: false,
+      message: "Usage through swarm_command: `/swarm help` or `/swarm help <command>`."
+    };
+  }
+  return { allowed: true };
+}
+function classifySwarmCommandChatFallbackUse(resolved) {
+  const canonicalKey = canonicalCommandKey(resolved);
+  const args2 = resolved.remainingArgs;
+  if (canonicalKey === "config doctor" && args2.some((arg) => arg === "--fix" || arg === "-f")) {
+    return {
+      allowed: false,
+      message: "/swarm config doctor --fix is not available through chat fallback because it can modify configuration files. Run the CLI command directly when you intend to apply fixes."
+    };
+  }
+  if (canonicalKey === "knowledge migrate" || canonicalKey === "knowledge quarantine" || canonicalKey === "knowledge restore" || canonicalKey === "memory import" || canonicalKey === "memory migrate" || canonicalKey === "memory compact" || canonicalKey === "sdd project") {
+    return {
+      allowed: false,
+      message: `/swarm ${canonicalKey} is not available through chat fallback because it mutates .swarm state. ` + "Run the CLI command directly after confirming the intended state change."
+    };
+  }
+  return { allowed: true };
+}
+var SWARM_COMMAND_TOOL_COMMANDS, SWARM_COMMAND_TOOL_ALLOWLIST, HUMAN_ONLY_SWARM_COMMANDS, NO_ARGS, SUMMARY_ID_PATTERN, TASK_ID_PATTERN;
+var init_tool_policy = __esm(() => {
+  init_command_dispatch();
+  init_registry();
+  SWARM_COMMAND_TOOL_COMMANDS = lazyArray(() => VALID_COMMANDS.filter((cmd) => {
+    const policy = COMMAND_REGISTRY[cmd]?.toolPolicy;
+    return policy === "agent" || policy === "human-only";
+  }).sort());
+  SWARM_COMMAND_TOOL_ALLOWLIST = lazySet(() => VALID_COMMANDS.filter((cmd) => COMMAND_REGISTRY[cmd]?.toolPolicy === "agent"));
+  HUMAN_ONLY_SWARM_COMMANDS = lazySet(() => VALID_COMMANDS.filter((cmd) => {
+    const policy = COMMAND_REGISTRY[cmd]?.toolPolicy;
+    return policy === "human-only" || policy === "restricted";
+  }));
+  NO_ARGS = lazySet(() => VALID_COMMANDS.filter((cmd) => COMMAND_REGISTRY[cmd]?.toolNoArgs === true));
+  SUMMARY_ID_PATTERN = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
+  TASK_ID_PATTERN = /^[A-Za-z0-9_.:-]{1,64}$/;
+});
+
 // src/sandbox/win32/runner-client.ts
 var exports_runner_client = {};
 __export(exports_runner_client, {
@@ -27154,7 +27459,7 @@ __export(exports_runner_client, {
   execute: () => execute,
   buildDefaultPolicy: () => buildDefaultPolicy,
   _resetProbeCache: () => _resetProbeCache,
-  _internals: () => _internals13,
+  _internals: () => _internals14,
   RUNNER_EXIT_CODES: () => RUNNER_EXIT_CODES
 });
 import { spawn, spawnSync } from "node:child_process";
@@ -27203,7 +27508,7 @@ function probe() {
     };
     return _cachedProbe;
   }
-  const binary2 = _internals13.findRunnerBinary();
+  const binary2 = _internals14.findRunnerBinary();
   if (!binary2) {
     _cachedProbe = {
       available: false,
@@ -27215,7 +27520,7 @@ function probe() {
     return _cachedProbe;
   }
   try {
-    const result = _internals13.spawnRunner(binary2, ["--probe"], {
+    const result = _internals14.spawnRunner(binary2, ["--probe"], {
       windowsHide: true,
       encoding: "utf-8",
       timeout: 2000,
@@ -27268,7 +27573,7 @@ function probe() {
   }
 }
 async function execute(command, policy, mode = "auto") {
-  const binary2 = _internals13.findRunnerBinary();
+  const binary2 = _internals14.findRunnerBinary();
   if (!binary2) {
     throw new Error("runner binary not found");
   }
@@ -27285,7 +27590,7 @@ async function execute(command, policy, mode = "auto") {
       unref.call(timeout);
     }
     try {
-      proc = _internals13.spawnAsync(binary2, args2, {
+      proc = _internals14.spawnAsync(binary2, args2, {
         windowsHide: true,
         stdio: ["pipe", "pipe", "pipe"],
         cwd: policy.workspace_roots[0] ?? os4.tmpdir()
@@ -27371,7 +27676,7 @@ function buildDefaultPolicy(workspaceRoot, runId) {
     deny_symlink_egress: true
   };
 }
-var _runtimeDir, RUNNER_EXIT_CODES, _cachedProbe, _internals13;
+var _runtimeDir, RUNNER_EXIT_CODES, _cachedProbe, _internals14;
 var init_runner_client = __esm(() => {
   init_logger();
   _runtimeDir = fileURLToPath(new URL(".", import.meta.url));
@@ -27385,7 +27690,7 @@ var init_runner_client = __esm(() => {
     OS_API_FAILURE: 68,
     PROBE_FAILED: 69
   };
-  _internals13 = {
+  _internals14 = {
     findRunnerBinary,
     spawnRunner: spawnSync,
     spawnAsync: spawn
@@ -27636,7 +27941,7 @@ class BubblewrapSandboxExecutor {
     this._available = false;
     this._disabledReason = null;
     try {
-      if (!_internals14.probeBwrap()) {
+      if (!_internals15.probeBwrap()) {
         this._disabledReason = "bwrap not available or not functional";
         warn(`Sandbox disabled: ${this._disabledReason}. Falling through to tool-layer enforcement.`);
       } else {
@@ -27707,12 +28012,12 @@ class BubblewrapSandboxExecutor {
     return {};
   }
 }
-var BWRAP_VERSION_EXIT = 0, BWRAP_UNAVAILABLE_CODES, _internals14;
+var BWRAP_VERSION_EXIT = 0, BWRAP_UNAVAILABLE_CODES, _internals15;
 var init_bubblewrap_executor = __esm(() => {
   init_logger();
   init_executor();
   BWRAP_UNAVAILABLE_CODES = new Set(["ENOENT", "EACCES", "ENOSPC"]);
-  _internals14 = {
+  _internals15 = {
     probeBwrap
   };
 });
@@ -27799,7 +28104,7 @@ class MacOSSandboxExecutor {
     this._available = false;
     this._disabledReason = null;
     try {
-      if (!_internals15.probeSandboxExec()) {
+      if (!_internals16.probeSandboxExec()) {
         this._disabledReason = "sandbox-exec not available or not functional";
         warn(`Sandbox disabled: ${this._disabledReason}. Falling through to tool-layer enforcement.`);
       } else {
@@ -27824,7 +28129,7 @@ class MacOSSandboxExecutor {
     if (!this._available) {
       throw new SandboxError("Sandbox not available", "SANDBOX_UNAVAILABLE");
     }
-    if (!_internals15.probeSandboxExec()) {
+    if (!_internals16.probeSandboxExec()) {
       this._available = false;
       this._disabledReason = "sandbox-exec became unavailable between calls";
       warn(`Sandbox disabled: ${this._disabledReason}. Falling through to tool-layer enforcement.`);
@@ -27857,12 +28162,12 @@ class MacOSSandboxExecutor {
     };
   }
 }
-var SANDBOX_UNAVAILABLE_CODES, _internals15;
+var SANDBOX_UNAVAILABLE_CODES, _internals16;
 var init_sandbox_exec_executor = __esm(() => {
   init_logger();
   init_executor();
   SANDBOX_UNAVAILABLE_CODES = new Set(["ENOENT", "EACCES", "ENOSPC"]);
-  _internals15 = {
+  _internals16 = {
     probeSandboxExec
   };
 });
@@ -27999,7 +28304,7 @@ class WindowsSandboxExecutor {
     this._disabled = false;
     this._disabledReason = null;
     try {
-      if (!_internals16.probeWindowsSandbox()) {
+      if (!_internals17.probeWindowsSandbox()) {
         this._available = false;
         this._disabledReason = "Windows sandbox not available or not functional";
         warn(`Sandbox unavailable: ${this._disabledReason}. Falling through to tool-layer enforcement.`);
@@ -28025,7 +28330,7 @@ class WindowsSandboxExecutor {
     if (!this.isAvailable()) {
       throw new SandboxError("Sandbox not available", "SANDBOX_UNAVAILABLE");
     }
-    if (!_internals16.probeWindowsSandbox()) {
+    if (!_internals17.probeWindowsSandbox()) {
       this._available = false;
       this._disabledReason = "Windows sandbox became unavailable between calls";
       warn(`Sandbox disabled: ${this._disabledReason}. Falling through to tool-layer enforcement.`);
@@ -28090,7 +28395,7 @@ try {
     };
   }
 }
-var SANDBOX_UNAVAILABLE_CODES2, _internals16;
+var SANDBOX_UNAVAILABLE_CODES2, _internals17;
 var init_restricted_environment_executor = __esm(() => {
   init_logger();
   init_executor();
@@ -28100,7 +28405,7 @@ var init_restricted_environment_executor = __esm(() => {
     "EPERM",
     "ENOSPC"
   ]);
-  _internals16 = {
+  _internals17 = {
     probeWindowsSandbox
   };
 });
@@ -28158,7 +28463,7 @@ class NativeWindowsSandboxExecutor {
     return this._fallbackExecutor.wrapCommand(command, scopePaths, tempDir);
   }
   _wrapWithRunner(command, scopePaths, tempDir) {
-    const binary2 = _internals13.findRunnerBinary();
+    const binary2 = _internals14.findRunnerBinary();
     if (!binary2) {
       throw new SandboxError("Runner binary not found", "RUNNER_NOT_FOUND");
     }
@@ -40959,14 +41264,7 @@ function createToolBeforeHandler(ctx) {
         throw new Error(`BLOCKED: "7z" with delete-source flag targeting .swarm/ detected — archive with source deletion under .swarm/ is not allowed`);
       }
       {
-        const HUMAN_ONLY_SWARM_SUBCOMMANDS = new Set([
-          "acknowledge-spec-drift",
-          "reset",
-          "reset-session",
-          "rollback",
-          "checkpoint",
-          "consolidate"
-        ]);
+        const HUMAN_ONLY_SWARM_SUBCOMMANDS = HUMAN_ONLY_SWARM_COMMANDS;
         let probe2 = seg.replace(/^(?:[A-Za-z_][A-Za-z0-9_]*=\S+\s+)+/, "").replace(/^eval(?:\s+--)?\s+["']?/, "").replace(/["']\s*$/, "").replace(/^\$\(\s*/, "").replace(/^\(\s*/, "").replace(/\s*\)$/, "").replace(/^`/, "").replace(/`$/, "").trim();
         for (let i2 = 0;i2 < 4; i2++) {
           const before = probe2;
@@ -40974,17 +41272,35 @@ function createToolBeforeHandler(ctx) {
           if (probe2 === before)
             break;
         }
-        const swarmCliBypassMatch = probe2.match(/^\\?(?:bunx|npx|pnpx|npm(?:\s+(?:exec|x)(?:\s+--)?)?|pnpm(?:\s+(?:dlx|exec))?|yarn(?:\s+(?:dlx|exec))?|bun(?:\s+x)?|node|deno\s+run|tsx|ts-node)\b[^|;&]*?\bopencode-swarm\b[^|;&]*?\brun\s+([A-Za-z0-9_-]+)/i);
-        if (swarmCliBypassMatch && HUMAN_ONLY_SWARM_SUBCOMMANDS.has(swarmCliBypassMatch[1])) {
-          throw new Error(`BLOCKED: "${swarmCliBypassMatch[1]}" is a human-only swarm command and may not be invoked from shell by an agent. ` + `Present the situation to the user and ask them to run \`/swarm ${swarmCliBypassMatch[1]}\` themselves.`);
+        const swarmCliBypassMatch = probe2.match(/^\\?(?:bunx|npx|pnpx|npm(?:\s+(?:exec|x)(?:\s+--)?)?|pnpm(?:\s+(?:dlx|exec))?|yarn(?:\s+(?:dlx|exec))?|bun(?:\s+x)?|node|deno\s+run|tsx|ts-node)\b[^|;&]*?\bopencode-swarm\b[^|;&]*?\brun\s+([A-Za-z0-9_-]+(?:\s+(?!-)[A-Za-z0-9_-]+)?)/i);
+        if (swarmCliBypassMatch) {
+          const captured = swarmCliBypassMatch[1];
+          const normalized = captured.trim().split(/\s+/).join(" ");
+          const firstToken = normalized.includes(" ") ? normalized.split(" ")[0] : normalized;
+          const cmdName = HUMAN_ONLY_SWARM_SUBCOMMANDS.has(normalized) ? normalized : firstToken;
+          if (HUMAN_ONLY_SWARM_SUBCOMMANDS.has(normalized) || HUMAN_ONLY_SWARM_SUBCOMMANDS.has(firstToken)) {
+            throw new Error(`BLOCKED: "${cmdName}" is a human-only swarm command and may not be invoked from shell by an agent. ` + `Present the situation to the user and ask them to run \`/swarm ${cmdName}\` themselves.`);
+          }
         }
-        const swarmBareBinMatch = probe2.match(/^\\?opencode-swarm\b[^|;&]*?\brun\s+([A-Za-z0-9_-]+)/i);
-        if (swarmBareBinMatch && HUMAN_ONLY_SWARM_SUBCOMMANDS.has(swarmBareBinMatch[1])) {
-          throw new Error(`BLOCKED: "${swarmBareBinMatch[1]}" is a human-only swarm command and may not be invoked from shell by an agent. ` + `Present the situation to the user and ask them to run \`/swarm ${swarmBareBinMatch[1]}\` themselves.`);
+        const swarmBareBinMatch = probe2.match(/^\\?opencode-swarm\b[^|;&]*?\brun\s+([A-Za-z0-9_-]+(?:\s+(?!-)[A-Za-z0-9_-]+)?)/i);
+        if (swarmBareBinMatch) {
+          const captured = swarmBareBinMatch[1];
+          const normalized = captured.trim().split(/\s+/).join(" ");
+          const firstToken = normalized.includes(" ") ? normalized.split(" ")[0] : normalized;
+          const cmdName = HUMAN_ONLY_SWARM_SUBCOMMANDS.has(normalized) ? normalized : firstToken;
+          if (HUMAN_ONLY_SWARM_SUBCOMMANDS.has(normalized) || HUMAN_ONLY_SWARM_SUBCOMMANDS.has(firstToken)) {
+            throw new Error(`BLOCKED: "${cmdName}" is a human-only swarm command and may not be invoked from shell by an agent. ` + `Present the situation to the user and ask them to run \`/swarm ${cmdName}\` themselves.`);
+          }
         }
-        const swarmCliPathMatch = probe2.match(/\bcli[/\\]+index\.[mc]?(?:js|ts)\b[^|;&]*?\brun\s+([A-Za-z0-9_-]+)/i);
-        if (swarmCliPathMatch && HUMAN_ONLY_SWARM_SUBCOMMANDS.has(swarmCliPathMatch[1])) {
-          throw new Error(`BLOCKED: "${swarmCliPathMatch[1]}" is a human-only swarm command and may not be invoked from shell by an agent. ` + `Present the situation to the user and ask them to run \`/swarm ${swarmCliPathMatch[1]}\` themselves.`);
+        const swarmCliPathMatch = probe2.match(/\bcli[/\\]+index\.[mc]?(?:js|ts)\b[^|;&]*?\brun\s+([A-Za-z0-9_-]+(?:\s+(?!-)[A-Za-z0-9_-]+)?)/i);
+        if (swarmCliPathMatch) {
+          const captured = swarmCliPathMatch[1];
+          const normalized = captured.trim().split(/\s+/).join(" ");
+          const firstToken = normalized.includes(" ") ? normalized.split(" ")[0] : normalized;
+          const cmdName = HUMAN_ONLY_SWARM_SUBCOMMANDS.has(normalized) ? normalized : firstToken;
+          if (HUMAN_ONLY_SWARM_SUBCOMMANDS.has(normalized) || HUMAN_ONLY_SWARM_SUBCOMMANDS.has(firstToken)) {
+            throw new Error(`BLOCKED: "${cmdName}" is a human-only swarm command and may not be invoked from shell by an agent. ` + `Present the situation to the user and ask them to run \`/swarm ${cmdName}\` themselves.`);
+          }
         }
       }
       {
@@ -41338,11 +41654,15 @@ function createToolBeforeHandler(ctx) {
     }
     return out2;
   }
+  function getHumanOnlyAlternation() {
+    return [...HUMAN_ONLY_SWARM_COMMANDS].map((c) => c.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).sort((a, b) => b.length - a.length).join("|");
+  }
   function patchPayloadHasHumanOnlyInvocation(args2) {
     const payloads = extractAllPatchPayloads(args2);
     if (payloads.length === 0)
       return false;
-    const re = /\bopencode-swarm\b[\s\S]*?\brun\s+(?:acknowledge-spec-drift|reset|reset-session|rollback|checkpoint|consolidate)\b/i;
+    const alternation = getHumanOnlyAlternation();
+    const re = new RegExp(`\\bopencode-swarm\\b[\\s\\S]*?\\brun\\s+(${alternation})\\b`, "i");
     return payloads.some((p) => re.test(p));
   }
   function extractPatchTargetPaths(tool, args2) {
@@ -41414,7 +41734,7 @@ function createToolBeforeHandler(ctx) {
         throw new Error("SPEC_DRIFT_VIOLATION: Direct writes to .swarm/spec-staleness.json are blocked. " + "This file is system-managed and gates plan-mutating tools while spec drift is unresolved. " + "Present the drift to the user and ask them to run /swarm clarify or /swarm acknowledge-spec-drift.");
       }
       const content = toolArgs?.content ?? toolArgs?.text ?? toolArgs?.new_string ?? toolArgs?.newText;
-      if (typeof content === "string" && /\bopencode-swarm\b[\s\S]*?\brun\s+(?:acknowledge-spec-drift|reset|reset-session|rollback|checkpoint|consolidate)\b/i.test(content)) {
+      if (typeof content === "string" && new RegExp(`\\bopencode-swarm\\b[\\s\\S]*?\\brun\\s+(${getHumanOnlyAlternation()})\\b`, "i").test(content)) {
         throw new Error("BLOCKED: write/edit tool would create a script invoking a human-only swarm CLI subcommand. " + "Present the situation to the user and ask them to run the command themselves.");
       }
     }
@@ -41653,6 +41973,7 @@ function createToolBeforeHandler(ctx) {
   };
 }
 var init_tool_before = __esm(() => {
+  init_tool_policy();
   init_constants();
   init_schema();
   init_executor();
@@ -42059,9 +42380,9 @@ function createGuardrailsHooks(directory, directoryOrConfig, config2, authorityC
           const isContentFilter = CONTENT_FILTER_PATTERN.test(errorSignal);
           if (session && !session.modelFallbackExhausted) {
             session.model_fallback_index++;
-            const swarmId = _internals17.extractSwarmIdFromAgentName(session.agentName);
+            const swarmId = _internals18.extractSwarmIdFromAgentName(session.agentName);
             const baseAgentName = session.agentName ? session.agentName.replace(/^[^_]+[_]/, "") : "";
-            const swarmAgents = _internals17.getSwarmAgents(swarmId);
+            const swarmAgents = _internals18.getSwarmAgents(swarmId);
             const fallbackModels = swarmAgents?.[baseAgentName]?.fallback_models;
             session.modelFallbackExhausted = !fallbackModels || session.model_fallback_index > fallbackModels.length;
             session.pendingAdvisoryMessages ??= [];
@@ -42084,12 +42405,12 @@ function createGuardrailsHooks(directory, directoryOrConfig, config2, authorityC
         let modelFallbackAdvisoryEmitted = false;
         if (session && isTransientMatch && !session.modelFallbackExhausted && !isDegraded) {
           session.model_fallback_index++;
-          const swarmId = _internals17.extractSwarmIdFromAgentName(session.agentName);
+          const swarmId = _internals18.extractSwarmIdFromAgentName(session.agentName);
           const baseAgentName = session.agentName ? session.agentName.replace(/^[^_]+[_]/, "") : "";
-          const swarmAgents = _internals17.getSwarmAgents(swarmId);
+          const swarmAgents = _internals18.getSwarmAgents(swarmId);
           const fallbackModels = swarmAgents?.[baseAgentName]?.fallback_models;
           session.modelFallbackExhausted = !fallbackModels || session.model_fallback_index > fallbackModels.length;
-          const fallbackModel = _internals17.resolveFallbackModel(baseAgentName, session.model_fallback_index, swarmAgents);
+          const fallbackModel = _internals18.resolveFallbackModel(baseAgentName, session.model_fallback_index, swarmAgents);
           const primaryModel = swarmAgents?.[baseAgentName]?.model ?? "default";
           if (fallbackModel) {
             if (swarmAgents?.[baseAgentName]) {
@@ -42127,7 +42448,7 @@ function createGuardrailsHooks(directory, directoryOrConfig, config2, authorityC
     messagesTransform
   };
 }
-var _internals17, SPEC_DRIFT_BLOCKED_TOOLS, TRANSIENT_STATUS_CODES2, TRANSIENT_MODEL_ERROR_PATTERN2, DEGRADED_ERROR_PATTERN, CONTENT_FILTER_PATTERN, toolCallsSinceLastWrite, noOpWarningIssued;
+var _internals18, SPEC_DRIFT_BLOCKED_TOOLS, TRANSIENT_STATUS_CODES2, TRANSIENT_MODEL_ERROR_PATTERN2, DEGRADED_ERROR_PATTERN, CONTENT_FILTER_PATTERN, toolCallsSinceLastWrite, noOpWarningIssued;
 var init_guardrails = __esm(() => {
   init_agents2();
   init_constants();
@@ -42145,7 +42466,7 @@ var init_guardrails = __esm(() => {
   init_messages_transform();
   init_stored_input_args();
   init_tool_before();
-  _internals17 = {
+  _internals18 = {
     extractSwarmIdFromAgentName,
     getSwarmAgents,
     getMostRecentAssistantText,
@@ -42380,21 +42701,21 @@ async function atomicWriteFile(targetPath, content) {
   const tempPath = `${targetPath}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`;
   try {
     await bunWrite(tempPath, content);
-    _internals18.renameSync(tempPath, targetPath);
+    _internals19.renameSync(tempPath, targetPath);
   } finally {
     try {
-      _internals18.unlinkSync(tempPath);
+      _internals19.unlinkSync(tempPath);
     } catch {}
   }
 }
 function withTaskEvidenceLock(directory, taskId, agent, fn2) {
   return withEvidenceLock(directory, taskEvidenceRelPath(taskId), agent, taskId, fn2);
 }
-var _internals18;
+var _internals19;
 var init_task_file = __esm(() => {
   init_bun_compat();
   init_lock();
-  _internals18 = {
+  _internals19 = {
     renameSync: renameSync6,
     unlinkSync: unlinkSync4
   };
@@ -42947,7 +43268,7 @@ function createDelegationGateHook(config2, directory) {
     if (standardWorktreeSerializationSessions.has(input.sessionID)) {
       throw new Error("STANDARD_WORKTREE_ISOLATION_SERIALIZED: prior standard worktree isolation setup failed in this session; wait for the active coder task to finish before dispatching another coder.");
     }
-    const plan = await _internals19.loadPlanJsonOnly(directory);
+    const plan = await _internals20.loadPlanJsonOnly(directory);
     if (!plan)
       return;
     const profile = plan.execution_profile;
@@ -43562,7 +43883,7 @@ ${warningLines.join(`
     toolAfter
   };
 }
-var EvidenceTaskIdPlanSchema, pendingCoderScopeByTaskId, SWARM_BACKGROUND_TASK_BLOCKED_MESSAGE, ACTIVE_PARALLEL_TASK_STATES, _internals19;
+var EvidenceTaskIdPlanSchema, pendingCoderScopeByTaskId, SWARM_BACKGROUND_TASK_BLOCKED_MESSAGE, ACTIVE_PARALLEL_TASK_STATES, _internals20;
 var init_delegation_gate = __esm(() => {
   init_zod();
   init_schema();
@@ -43592,7 +43913,7 @@ var init_delegation_gate = __esm(() => {
     "reviewer_run",
     "tests_run"
   ]);
-  _internals19 = {
+  _internals20 = {
     resolveEvidenceTaskId,
     resolveDelegatedPlanTaskId,
     buildParallelExecutionGuidance,
@@ -43926,7 +44247,7 @@ __export(exports_state, {
   advanceTaskState: () => advanceTaskState,
   addKnowledgeAckDedup: () => addKnowledgeAckDedup,
   _resetCouncilDisagreementWarnings: () => _resetCouncilDisagreementWarnings,
-  _internals: () => _internals20,
+  _internals: () => _internals21,
   MAX_TRACKED_KNOWLEDGE_ACKS: () => MAX_TRACKED_KNOWLEDGE_ACKS,
   MAX_TRACKED_CRITICAL_SHOWN: () => MAX_TRACKED_CRITICAL_SHOWN,
   AgentRunContext: () => AgentRunContext
@@ -44054,10 +44375,10 @@ function startAgentSession(sessionId, agentName, staleDurationMs = 7200000, dire
   swarmState.agentSessions.set(sessionId, sessionState);
   telemetry.sessionStarted(sessionId, agentName);
   swarmState.activeAgent.set(sessionId, agentName);
-  _internals20.applyRehydrationCache(sessionState);
+  _internals21.applyRehydrationCache(sessionState);
   if (directory) {
     let rehydrationPromise;
-    rehydrationPromise = _internals20.rehydrateSessionFromDisk(directory, sessionState).then(async () => {
+    rehydrationPromise = _internals21.rehydrateSessionFromDisk(directory, sessionState).then(async () => {
       try {
         sessionState.prSubscriptions = await rehydratePrSubscriptions(sessionId, directory);
       } catch (err2) {
@@ -44233,7 +44554,7 @@ function ensureAgentSession(sessionId, agentName, directory) {
     session.lastToolCallTime = now;
     return session;
   }
-  _internals20.startAgentSession(sessionId, agentName ?? "unknown", 7200000, directory);
+  _internals21.startAgentSession(sessionId, agentName ?? "unknown", 7200000, directory);
   session = swarmState.agentSessions.get(sessionId);
   if (!session) {
     throw new Error(`Failed to create guardrail session for ${sessionId}`);
@@ -44594,8 +44915,8 @@ function applyRehydrationCache(session) {
   }
 }
 async function rehydrateSessionFromDisk(directory, session) {
-  await _internals20.buildRehydrationCache(directory);
-  _internals20.applyRehydrationCache(session);
+  await _internals21.buildRehydrationCache(directory);
+  _internals21.applyRehydrationCache(session);
 }
 function hasActiveTurboMode(sessionID) {
   if (sessionID) {
@@ -44703,7 +45024,7 @@ async function rehydratePrSubscriptions(sessionID, directory) {
   }
   return map2;
 }
-var _rehydrationCache = null, _councilDisagreementWarned, STATE_ORDER, _toolAggregates, defaultRunContext, _runContexts, swarmState, MAX_TRACKED_CRITICAL_SHOWN = 500, MAX_TRACKED_KNOWLEDGE_ACKS = 5000, _internals20;
+var _rehydrationCache = null, _councilDisagreementWarned, STATE_ORDER, _toolAggregates, defaultRunContext, _runContexts, swarmState, MAX_TRACKED_CRITICAL_SHOWN = 500, MAX_TRACKED_KNOWLEDGE_ACKS = 5000, _internals21;
 var init_state = __esm(() => {
   init_constants();
   init_plan_schema();
@@ -44746,7 +45067,7 @@ var init_state = __esm(() => {
     fullAutoEnabledInConfig: false,
     environmentProfiles: defaultRunContext.environmentProfiles
   };
-  _internals20 = {
+  _internals21 = {
     swarmState,
     resetSwarmState,
     ensureAgentSession,
@@ -58414,7 +58735,7 @@ function resetToRemoteBranch(cwd, options) {
   const prunedBranches = [];
   try {
     const currentBranch = getCurrentBranch(cwd);
-    const defaultRemoteBranch = _internals21.detectDefaultRemoteBranch(cwd);
+    const defaultRemoteBranch = _internals22.detectDefaultRemoteBranch(cwd);
     if (!defaultRemoteBranch) {
       return {
         success: false,
@@ -58596,7 +58917,7 @@ function resetToRemoteBranch(cwd, options) {
 function resetToMainAfterMerge(cwd, options) {
   const warnings = [];
   try {
-    const defaultBranch = _internals21.detectDefaultRemoteBranch(cwd);
+    const defaultBranch = _internals22.detectDefaultRemoteBranch(cwd);
     if (!defaultBranch) {
       return {
         success: false,
@@ -58623,7 +58944,7 @@ function resetToMainAfterMerge(cwd, options) {
     }
     if (currentBranch === defaultBranch) {
       try {
-        const logOutput = _internals21.gitExec(["log", `${targetBranch}..HEAD`, "--oneline"], cwd);
+        const logOutput = _internals22.gitExec(["log", `${targetBranch}..HEAD`, "--oneline"], cwd);
         if (logOutput.trim().length > 0) {
           return {
             success: false,
@@ -58638,11 +58959,11 @@ function resetToMainAfterMerge(cwd, options) {
       } catch {}
     } else {
       try {
-        _internals21.gitExec(["rev-parse", "--abbrev-ref", `${currentBranch}@{upstream}`], cwd);
+        _internals22.gitExec(["rev-parse", "--abbrev-ref", `${currentBranch}@{upstream}`], cwd);
       } catch {
         try {
-          const localSha = _internals21.gitExec(["rev-parse", "HEAD"], cwd).trim();
-          const remoteSha = _internals21.gitExec(["rev-parse", targetBranch], cwd).trim();
+          const localSha = _internals22.gitExec(["rev-parse", "HEAD"], cwd).trim();
+          const remoteSha = _internals22.gitExec(["rev-parse", targetBranch], cwd).trim();
           if (localSha !== remoteSha) {
             return {
               success: false,
@@ -58668,7 +58989,7 @@ function resetToMainAfterMerge(cwd, options) {
       }
     }
     try {
-      _internals21.gitExec(["fetch", "--prune", "origin"], cwd);
+      _internals22.gitExec(["fetch", "--prune", "origin"], cwd);
     } catch (err2) {
       return {
         success: false,
@@ -58684,7 +59005,7 @@ function resetToMainAfterMerge(cwd, options) {
     let switchedBranch = false;
     if (currentBranch !== defaultBranch) {
       try {
-        _internals21.gitExec(["checkout", defaultBranch], cwd);
+        _internals22.gitExec(["checkout", defaultBranch], cwd);
         switchedBranch = true;
       } catch (err2) {
         return {
@@ -58699,7 +59020,7 @@ function resetToMainAfterMerge(cwd, options) {
       }
     }
     try {
-      _internals21.gitExec(["reset", "--hard", targetBranch], cwd);
+      _internals22.gitExec(["reset", "--hard", targetBranch], cwd);
     } catch (err2) {
       return {
         success: false,
@@ -58720,7 +59041,7 @@ function resetToMainAfterMerge(cwd, options) {
           while (Date.now() < endTime) {}
         }
         try {
-          _internals21.gitExec(["checkout", "--", "."], cwd);
+          _internals22.gitExec(["checkout", "--", "."], cwd);
           discardSucceeded = true;
           break;
         } catch {}
@@ -58731,18 +59052,18 @@ function resetToMainAfterMerge(cwd, options) {
       changesDiscarded = discardSucceeded;
     }
     try {
-      _internals21.gitExec(["clean", "-fd"], cwd);
+      _internals22.gitExec(["clean", "-fd"], cwd);
     } catch {
       warnings.push("Could not clean untracked files");
     }
     let branchDeleted = false;
     if (switchedBranch && previousBranch !== defaultBranch) {
       try {
-        const mergedOutput = _internals21.gitExec(["branch", "--merged", defaultBranch], cwd);
+        const mergedOutput = _internals22.gitExec(["branch", "--merged", defaultBranch], cwd);
         const isMerged = mergedOutput.split(`
 `).some((line) => line.trim() === previousBranch || line.trim() === `* ${previousBranch}`);
         if (isMerged) {
-          _internals21.gitExec(["branch", "-d", previousBranch], cwd);
+          _internals22.gitExec(["branch", "-d", previousBranch], cwd);
           branchDeleted = true;
         } else {
           warnings.push(`Branch ${previousBranch} is not merged into ${defaultBranch} — keeping it`);
@@ -58753,7 +59074,7 @@ function resetToMainAfterMerge(cwd, options) {
     }
     if (options?.pruneBranches) {
       try {
-        const mergedOutput = _internals21.gitExec(["branch", "--merged", defaultBranch], cwd);
+        const mergedOutput = _internals22.gitExec(["branch", "--merged", defaultBranch], cwd);
         const mergedLines = mergedOutput.split(`
 `);
         for (const line of mergedLines) {
@@ -58762,7 +59083,7 @@ function resetToMainAfterMerge(cwd, options) {
             continue;
           }
           try {
-            _internals21.gitExec(["branch", "-d", trimmedLine], cwd);
+            _internals22.gitExec(["branch", "-d", trimmedLine], cwd);
           } catch {
             warnings.push(`Could not prune branch: ${trimmedLine}`);
           }
@@ -58792,10 +59113,10 @@ function resetToMainAfterMerge(cwd, options) {
     };
   }
 }
-var GIT_TIMEOUT_MS2 = 30000, _internals21;
+var GIT_TIMEOUT_MS2 = 30000, _internals22;
 var init_branch = __esm(() => {
   init_logger();
-  _internals21 = {
+  _internals22 = {
     gitExec: gitExec2,
     detectDefaultRemoteBranch,
     getDefaultBaseBranch,
@@ -59374,7 +59695,7 @@ __export(exports_knowledge_store, {
   appendRejectedLesson: () => appendRejectedLesson,
   appendKnowledgeWithCapEnforcement: () => appendKnowledgeWithCapEnforcement,
   appendKnowledge: () => appendKnowledge,
-  _internals: () => _internals22,
+  _internals: () => _internals23,
   OUTCOME_SIGNAL_SMOOTHING: () => OUTCOME_SIGNAL_SMOOTHING
 });
 import { existsSync as existsSync13 } from "node:fs";
@@ -59850,11 +60171,11 @@ async function applyConfidenceDeltas(filePath, deltas) {
     }
   }
 }
-var import_proper_lockfile3, OUTCOME_SIGNAL_SMOOTHING = 4, CONFIDENCE_FLOOR = 0.1, CONFIDENCE_CEILING = 1, _internals22;
+var import_proper_lockfile3, OUTCOME_SIGNAL_SMOOTHING = 4, CONFIDENCE_FLOOR = 0.1, CONFIDENCE_CEILING = 1, _internals23;
 var init_knowledge_store = __esm(() => {
   init_task_file();
   import_proper_lockfile3 = __toESM(require_proper_lockfile(), 1);
-  _internals22 = {
+  _internals23 = {
     getPlatformConfigDir,
     resolveSwarmKnowledgePath,
     resolveSwarmRejectedPath,
@@ -59899,7 +60220,7 @@ __export(exports_knowledge_events, {
   countEntryViolationsInWindow: () => countEntryViolationsInWindow,
   applyKnowledgeVerdictFeedback: () => applyKnowledgeVerdictFeedback,
   appendKnowledgeEvent: () => appendKnowledgeEvent,
-  _internals: () => _internals23,
+  _internals: () => _internals24,
   RECEIPT_EVENT_TYPES: () => RECEIPT_EVENT_TYPES,
   MAX_VIOLATION_TIMESTAMPS: () => MAX_VIOLATION_TIMESTAMPS,
   MAX_EVENT_LOG_ENTRIES: () => MAX_EVENT_LOG_ENTRIES,
@@ -60355,7 +60676,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
     return { processed: 0, bumps: 0 };
   }
 }
-var import_proper_lockfile4, KNOWLEDGE_EVENT_SCHEMA_VERSION = 1, MAX_EVENT_LOG_ENTRIES = 5000, counterRollupCache, MAX_COUNTER_ROLLUP_CACHE_DIRS = 32, RECEIPT_EVENT_TYPES, MAX_VIOLATION_TIMESTAMPS = 10, VERDICT_CONFIDENCE_BOOST = 0.03, VERDICT_CONFIDENCE_DECAY = 0.05, _internals23;
+var import_proper_lockfile4, KNOWLEDGE_EVENT_SCHEMA_VERSION = 1, MAX_EVENT_LOG_ENTRIES = 5000, counterRollupCache, MAX_COUNTER_ROLLUP_CACHE_DIRS = 32, RECEIPT_EVENT_TYPES, MAX_VIOLATION_TIMESTAMPS = 10, VERDICT_CONFIDENCE_BOOST = 0.03, VERDICT_CONFIDENCE_DECAY = 0.05, _internals24;
 var init_knowledge_events = __esm(() => {
   init_task_file();
   init_logger();
@@ -60370,7 +60691,7 @@ var init_knowledge_events = __esm(() => {
     "n_a",
     "override"
   ]);
-  _internals23 = {
+  _internals24 = {
     resolveKnowledgeEventsPath,
     resolveKnowledgeCounterBaselinePath,
     appendKnowledgeEvent,
@@ -61911,7 +62232,7 @@ __export(exports_skill_generator, {
   activeRepoRelativePath: () => activeRepoRelativePath,
   activePath: () => activePath,
   activateProposal: () => activateProposal,
-  _internals: () => _internals24,
+  _internals: () => _internals25,
   STRONG_SKILL_OUTCOME_COUNT: () => STRONG_SKILL_OUTCOME_COUNT,
   DEFAULT_SKILL_MIN_CONFIRMATIONS: () => DEFAULT_SKILL_MIN_CONFIRMATIONS,
   DEFAULT_SKILL_MIN_CONFIDENCE: () => DEFAULT_SKILL_MIN_CONFIDENCE
@@ -62501,7 +62822,7 @@ async function activateProposal(directory, slug, force = false, options = {}) {
   try {
     await stampSourceEntries(directory, cleanSlug, fm.sourceKnowledgeIds);
     try {
-      _internals24.unlinkSync(from);
+      _internals25.unlinkSync(from);
     } catch {}
     return {
       activated: true,
@@ -62606,7 +62927,7 @@ async function autoApplyProposals(directory, llmDelegate) {
         }
       } else if (verdict === "REJECT") {
         try {
-          _internals24.unlinkSync(proposal.path);
+          _internals25.unlinkSync(proposal.path);
           warn(`[skill-generator] auto-apply rejected proposal "${proposal.slug}"; deleted ${proposal.path}`);
           result.rejected.push(proposal.slug);
         } catch (delErr) {
@@ -62716,7 +63037,7 @@ async function regenerateSkill(directory, slug, options = {}) {
       matchedEntries = all.filter((e) => idSet.has(e.id));
       if (matchedEntries.length === idSet.size && idSet.size > 0 && matchedEntries.every((e) => e.status === "archived")) {
         try {
-          await _internals24.retireSkill(directory, cleanSlug, "auto-retire: all source knowledge entries archived at regeneration time");
+          await _internals25.retireSkill(directory, cleanSlug, "auto-retire: all source knowledge entries archived at regeneration time");
         } catch {}
         return {
           regenerated: false,
@@ -62739,7 +63060,7 @@ async function regenerateSkill(directory, slug, options = {}) {
     const activeEntries = matchedEntries.filter((e) => e.status !== "archived");
     if (activeEntries.length === 0) {
       try {
-        await _internals24.retireSkill(directory, cleanSlug, "auto-retire: all matched source knowledge entries archived at regeneration time");
+        await _internals25.retireSkill(directory, cleanSlug, "auto-retire: all matched source knowledge entries archived at regeneration time");
       } catch {}
       return {
         regenerated: false,
@@ -62856,7 +63177,7 @@ async function regenerateSkill(directory, slug, options = {}) {
     evaluation
   };
 }
-var SLUG_PATTERN2, DEFAULT_SKILL_MIN_CONFIDENCE = 0.7, DEFAULT_SKILL_MIN_CONFIRMATIONS = 2, STRONG_SKILL_OUTCOME_COUNT = 3, MIN_CLUSTER_SIZE = 2, JACCARD_THRESHOLD = 0.5, AUTO_APPLY_BATCH_LIMIT = 5, _internals24;
+var SLUG_PATTERN2, DEFAULT_SKILL_MIN_CONFIDENCE = 0.7, DEFAULT_SKILL_MIN_CONFIRMATIONS = 2, STRONG_SKILL_OUTCOME_COUNT = 3, MIN_CLUSTER_SIZE = 2, JACCARD_THRESHOLD = 0.5, AUTO_APPLY_BATCH_LIMIT = 5, _internals25;
 var init_skill_generator = __esm(() => {
   init_knowledge_events();
   init_knowledge_store();
@@ -62865,7 +63186,7 @@ var init_skill_generator = __esm(() => {
   init_skill_changelog();
   init_skill_evaluator();
   SLUG_PATTERN2 = /^[a-z0-9][a-z0-9-]{0,63}$/;
-  _internals24 = {
+  _internals25 = {
     sanitizeSlug,
     isValidSlug: isValidSlug2,
     selectCandidateEntries,
@@ -63152,7 +63473,7 @@ async function reviseSkill(params) {
   }
   if (!params.delegate) {
     try {
-      const revised = _internals25.buildDeterministicRevision(params.currentContent, params.currentVersion, params.violationContexts);
+      const revised = _internals26.buildDeterministicRevision(params.currentContent, params.currentVersion, params.violationContexts);
       const validation = await validateRevisionCandidate(params, revised, "skill_reviser:deterministic");
       if (!validation.passed) {
         return {
@@ -63279,13 +63600,13 @@ async function reviseSkill(params) {
     };
   }
 }
-var REVISION_VIOLATION_THRESHOLD = 0.15, MAX_REVISION_CALLS_PER_PHASE = 3, DEFAULT_MAX_CALLS = 10, _internals25;
+var REVISION_VIOLATION_THRESHOLD = 0.15, MAX_REVISION_CALLS_PER_PHASE = 3, DEFAULT_MAX_CALLS = 10, _internals26;
 var init_skill_reviser = __esm(() => {
   init_logger();
   init_skill_changelog();
   init_skill_evaluator();
   init_skill_improver_quota();
-  _internals25 = {
+  _internals26 = {
     reviseSkill,
     getSkillVersion,
     buildDeterministicRevision,
@@ -63356,9 +63677,9 @@ function parseFeedbackMarker(raw) {
 function readFeedbackAppliedEntryIds(directory) {
   const resolved = resolveLogPath(directory);
   const processed = new Set;
-  if (!_internals26.existsSync(resolved))
+  if (!_internals27.existsSync(resolved))
     return processed;
-  const raw = _internals26.readFileSync(resolved, "utf-8");
+  const raw = _internals27.readFileSync(resolved, "utf-8");
   for (const line of raw.split(`
 `)) {
     const trimmed = line.trim();
@@ -63379,15 +63700,15 @@ function appendFeedbackAppliedMarker(directory, processedEntryIds) {
     return;
   const resolved = resolveLogPath(directory);
   const dir = path38.dirname(resolved);
-  if (!_internals26.existsSync(dir)) {
-    _internals26.mkdirSync(dir, { recursive: true });
+  if (!_internals27.existsSync(dir)) {
+    _internals27.mkdirSync(dir, { recursive: true });
   }
   const marker = {
     type: "feedback_applied",
     timestamp: new Date().toISOString(),
     processedEntryIds: [...new Set(processedEntryIds)]
   };
-  _internals26.appendFileSync(resolved, `${JSON.stringify(marker)}
+  _internals27.appendFileSync(resolved, `${JSON.stringify(marker)}
 `, "utf-8");
 }
 function appendSkillUsageEntry(directory, entry) {
@@ -63424,11 +63745,11 @@ function appendSkillUsageEntry(directory, entry) {
   }
   const resolved = validateSwarmPath(directory, "skill-usage.jsonl");
   const dir = path38.dirname(resolved);
-  if (!_internals26.existsSync(dir)) {
-    _internals26.mkdirSync(dir, { recursive: true });
+  if (!_internals27.existsSync(dir)) {
+    _internals27.mkdirSync(dir, { recursive: true });
   }
   const fullEntry = {
-    id: _internals26.generateId(),
+    id: _internals27.generateId(),
     skillPath,
     agentName,
     taskID,
@@ -63438,21 +63759,21 @@ function appendSkillUsageEntry(directory, entry) {
     ...reviewerNotes !== undefined && { reviewerNotes },
     ...skillVersion !== undefined && { skillVersion }
   };
-  _internals26.appendFileSync(resolved, `${JSON.stringify(fullEntry)}
+  _internals27.appendFileSync(resolved, `${JSON.stringify(fullEntry)}
 `, "utf-8");
   try {
-    const stat6 = _internals26.statSync(resolved);
+    const stat6 = _internals27.statSync(resolved);
     if (stat6.size > SKILL_USAGE_LOG_ROTATE_BYTES) {
-      _internals26.pruneSkillUsageLog(directory, SKILL_USAGE_LOG_MAX_ENTRIES_PER_SKILL);
+      _internals27.pruneSkillUsageLog(directory, SKILL_USAGE_LOG_MAX_ENTRIES_PER_SKILL);
     }
   } catch {}
 }
 function readSkillUsageEntries(directory, options) {
   const resolved = resolveLogPath(directory);
-  if (!_internals26.existsSync(resolved)) {
+  if (!_internals27.existsSync(resolved)) {
     return [];
   }
-  const raw = _internals26.readFileSync(resolved, "utf-8");
+  const raw = _internals27.readFileSync(resolved, "utf-8");
   const entries = [];
   for (const line of raw.split(`
 `)) {
@@ -63491,20 +63812,20 @@ function readSkillUsageEntries(directory, options) {
 }
 function readSkillUsageEntriesTail(directory, filters, maxBytes = TAIL_BYTES_DEFAULT) {
   const logPath = resolveLogPath(directory);
-  if (!_internals26.existsSync(logPath))
+  if (!_internals27.existsSync(logPath))
     return [];
   try {
     const normalizedMaxBytes = Number.isFinite(maxBytes) ? maxBytes : TAIL_BYTES_DEFAULT;
     const boundedMaxBytes = Math.min(Math.max(1, normalizedMaxBytes), MAX_TAIL_BYTES);
-    const stat6 = _internals26.statSync(logPath);
+    const stat6 = _internals27.statSync(logPath);
     const start2 = Math.max(0, stat6.size - boundedMaxBytes);
-    const fd = _internals26.openSync(logPath, "r");
+    const fd = _internals27.openSync(logPath, "r");
     try {
       const readLen = stat6.size - start2;
       if (readLen === 0)
         return [];
       const buf = Buffer.alloc(readLen);
-      _internals26.readSync(fd, buf, 0, buf.length, start2);
+      _internals27.readSync(fd, buf, 0, buf.length, start2);
       const content = buf.toString("utf-8");
       let usable;
       if (start2 > 0) {
@@ -63531,7 +63852,7 @@ function readSkillUsageEntriesTail(directory, filters, maxBytes = TAIL_BYTES_DEF
       }
       return entries;
     } finally {
-      _internals26.closeSync(fd);
+      _internals27.closeSync(fd);
     }
   } catch {
     return [];
@@ -63568,7 +63889,7 @@ function computeComplianceByVersion(entries, skillPath) {
 }
 function pruneSkillUsageLog(directory, maxEntriesPerSkill = 500) {
   const resolved = resolveLogPath(directory);
-  if (!_internals26.existsSync(resolved)) {
+  if (!_internals27.existsSync(resolved)) {
     return { pruned: 0, remaining: 0 };
   }
   const allEntries = readSkillUsageEntries(directory);
@@ -63604,13 +63925,13 @@ function pruneSkillUsageLog(directory, maxEntriesPerSkill = 500) {
 `).concat(`
 `);
   try {
-    _internals26.writeFileSync(tmpPath, content, "utf-8");
-    _internals26.renameSync(tmpPath, resolved);
+    _internals27.writeFileSync(tmpPath, content, "utf-8");
+    _internals27.renameSync(tmpPath, resolved);
   } catch (writeErr) {
     const msg = writeErr instanceof Error ? writeErr.message : String(writeErr);
     try {
-      if (_internals26.existsSync(tmpPath)) {
-        _internals26.writeFileSync(tmpPath, "", "utf-8");
+      if (_internals27.existsSync(tmpPath)) {
+        _internals27.writeFileSync(tmpPath, "", "utf-8");
       }
     } catch {}
     return { pruned: 0, remaining: allEntries.length, error: msg };
@@ -63632,10 +63953,10 @@ async function resolveSourceKnowledgeIds(directory, skillPath) {
     if (!isContained) {
       return [];
     }
-    if (!_internals26.existsSync(absolute)) {
+    if (!_internals27.existsSync(absolute)) {
       return [];
     }
-    const content = _internals26.readFileSync(absolute, "utf-8");
+    const content = _internals27.readFileSync(absolute, "utf-8");
     return parseGeneratedFromKnowledge(content);
   } catch (err2) {
     console.warn("[skill-usage-log] resolveSourceKnowledgeIds failed (fail-open):", err2 instanceof Error ? err2.message : String(err2));
@@ -63735,11 +64056,11 @@ async function applySkillUsageFeedback(directory, options) {
   }
   return { processed, bumps };
 }
-var _internals26, TAIL_BYTES_DEFAULT, MAX_TAIL_BYTES, SKILL_USAGE_LOG_ROTATE_BYTES, SKILL_USAGE_LOG_MAX_ENTRIES_PER_SKILL = 500, COMPLIANCE_BOOST = 0.05, VIOLATION_DECAY = 0.1;
+var _internals27, TAIL_BYTES_DEFAULT, MAX_TAIL_BYTES, SKILL_USAGE_LOG_ROTATE_BYTES, SKILL_USAGE_LOG_MAX_ENTRIES_PER_SKILL = 500, COMPLIANCE_BOOST = 0.05, VIOLATION_DECAY = 0.1;
 var init_skill_usage_log = __esm(() => {
   init_knowledge_store();
   init_utils2();
-  _internals26 = {
+  _internals27 = {
     generateId: () => crypto4.randomUUID(),
     appendFileSync: fs19.appendFileSync.bind(fs19),
     readFileSync: fs19.readFileSync.bind(fs19),
@@ -63772,8 +64093,8 @@ import * as path39 from "node:path";
 async function autoRetireSkills(directory, curatorKnowledgePath, excludeSlugs) {
   const observations = [];
   try {
-    const skillListResult = await _internals27.listSkills(directory);
-    const usageEntries = _internals27.readSkillUsageEntries(directory);
+    const skillListResult = await _internals28.listSkills(directory);
+    const usageEntries = _internals28.readSkillUsageEntries(directory);
     for (const active of skillListResult.active) {
       if (excludeSlugs?.has(active.slug))
         continue;
@@ -63791,19 +64112,19 @@ async function autoRetireSkills(directory, curatorKnowledgePath, excludeSlugs) {
           return true;
         return false;
       });
-      const violations = skillUsage.filter((e) => normalizeComplianceVerdict(e.complianceVerdict) === "violated").length;
+      const violations = skillUsage.filter((e) => e.complianceVerdict === "violation").length;
       const violationRate = skillUsage.length > 0 ? violations / skillUsage.length : 0;
       let allArchived = false;
       try {
-        const content = await _internals27.readFileAsync(active.path, "utf-8");
-        const fm = _internals27.parseDraftFrontmatter(content);
+        const content = await _internals28.readFileAsync(active.path, "utf-8");
+        const fm = _internals28.parseDraftFrontmatter(content);
         if (fm && fm.sourceKnowledgeIds.length > 0) {
-          const swarmKnowledge = await _internals27.readKnowledge(curatorKnowledgePath);
+          const swarmKnowledge = await _internals28.readKnowledge(curatorKnowledgePath);
           let hiveKnowledge = [];
           try {
             const hivePath = resolveHiveKnowledgePath();
             if (fs20.existsSync(hivePath)) {
-              hiveKnowledge = await _internals27.readKnowledge(hivePath);
+              hiveKnowledge = await _internals28.readKnowledge(hivePath);
             }
           } catch {}
           const allKnowledge = [...swarmKnowledge, ...hiveKnowledge];
@@ -63814,7 +64135,7 @@ async function autoRetireSkills(directory, curatorKnowledgePath, excludeSlugs) {
       } catch {}
       if (violationRate > 0.3 || allArchived) {
         const reason = violationRate > 0.3 ? `auto-retire: violation rate ${(violationRate * 100).toFixed(0)}% exceeds 30% threshold` : "auto-retire: all source knowledge entries archived";
-        await _internals27.retireSkill(directory, active.slug, reason);
+        await _internals28.retireSkill(directory, active.slug, reason);
         observations.push(`Skill '${active.slug}' auto-retired: ${reason}`);
         warn(`[curator] ${observations[observations.length - 1]}`);
       }
@@ -63991,9 +64312,7 @@ async function readCuratorSummary(directory) {
 async function writeCuratorSummary(directory, summary) {
   const resolvedPath = validateSwarmPath(directory, "curator-summary.json");
   fs20.mkdirSync(path39.dirname(resolvedPath), { recursive: true });
-  const tempPath = `${resolvedPath}.tmp.${Date.now()}.${Math.random().toString(36).slice(2)}`;
-  await bunWrite(tempPath, JSON.stringify(summary, null, 2));
-  fs20.renameSync(tempPath, resolvedPath);
+  await bunWrite(resolvedPath, JSON.stringify(summary, null, 2));
 }
 function normalizeAgentName(name2) {
   const registry3 = swarmState.generatedAgentNames.length > 0 ? swarmState.generatedAgentNames : undefined;
@@ -64027,8 +64346,8 @@ function checkPhaseCompliance(phaseEvents, agentsDispatched, requiredAgents, pha
   const observations = [];
   const timestamp = new Date().toISOString();
   for (const agent of requiredAgents) {
-    const normalizedAgent = _internals27.normalizeAgentName(agent);
-    const isDispatched = agentsDispatched.some((a) => _internals27.normalizeAgentName(a) === normalizedAgent);
+    const normalizedAgent = _internals28.normalizeAgentName(agent);
+    const isDispatched = agentsDispatched.some((a) => _internals28.normalizeAgentName(a) === normalizedAgent);
     if (!isDispatched) {
       observations.push({
         phase,
@@ -64047,7 +64366,7 @@ function checkPhaseCompliance(phaseEvents, agentsDispatched, requiredAgents, pha
       if (e.type === "agent.delegation") {
         const agent = e.agent;
         if (agent && typeof agent === "string") {
-          const normalized = _internals27.normalizeAgentName(agent);
+          const normalized = _internals28.normalizeAgentName(agent);
           if (normalized === "coder") {
             coderDelegations.push({ event: e, index: i2 });
           } else if (normalized === "reviewer") {
@@ -64104,7 +64423,7 @@ function checkPhaseCompliance(phaseEvents, agentsDispatched, requiredAgents, pha
       if (e.type === "agent.delegation" && e.agent) {
         const agent = e.agent;
         if (agent && typeof agent === "string") {
-          const normalized = _internals27.normalizeAgentName(agent);
+          const normalized = _internals28.normalizeAgentName(agent);
           if (normalized === "sme") {
             smeDelegations.push({ event: e, index: i2 });
           }
@@ -64128,7 +64447,7 @@ function checkPhaseCompliance(phaseEvents, agentsDispatched, requiredAgents, pha
 }
 async function runCuratorInit(directory, config3, llmDelegate) {
   try {
-    const priorSummary = await _internals27.readCuratorSummary(directory);
+    const priorSummary = await _internals28.readCuratorSummary(directory);
     const knowledgePath = resolveSwarmKnowledgePath(directory);
     const allEntries = await readKnowledge(knowledgePath);
     const highConfidenceEntries = allEntries.filter((e) => typeof e.confidence === "number" && e.confidence >= config3.min_knowledge_confidence);
@@ -64249,7 +64568,7 @@ Could not load prior session context.`,
 }
 async function runCuratorPhase(directory, phase, agentsDispatched, config3, _knowledgeConfig, llmDelegate) {
   try {
-    const priorSummary = await _internals27.readCuratorSummary(directory);
+    const priorSummary = await _internals28.readCuratorSummary(directory);
     if (priorSummary?.phase_digests.some((d) => d.phase === phase)) {
       const existingDigest = priorSummary.phase_digests.find((d) => d.phase === phase);
       return {
@@ -64262,10 +64581,10 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config3, _kno
       };
     }
     const eventsJsonlContent = await readSwarmFileAsync(directory, "events.jsonl");
-    const phaseEvents = eventsJsonlContent ? _internals27.filterPhaseEvents(eventsJsonlContent, phase) : [];
+    const phaseEvents = eventsJsonlContent ? _internals28.filterPhaseEvents(eventsJsonlContent, phase) : [];
     const contextMd = await readSwarmFileAsync(directory, "context.md");
     const requiredAgents = ["reviewer", "test_engineer"];
-    const complianceObservations = _internals27.checkPhaseCompliance(phaseEvents, agentsDispatched, requiredAgents, phase);
+    const complianceObservations = _internals28.checkPhaseCompliance(phaseEvents, agentsDispatched, requiredAgents, phase);
     const plan = await loadPlanJsonOnly(directory);
     const phaseData = plan?.phases.find((p) => p.id === phase);
     const tasksCompleted = phaseData ? phaseData.tasks.filter((t) => t.status === "completed").length : 0;
@@ -64289,7 +64608,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config3, _kno
       timestamp: new Date().toISOString(),
       summary: `Phase ${phase} completed. ${tasksCompleted}/${tasksTotal} tasks completed. ${complianceObservations.length} compliance observations.`,
       agents_used: [
-        ...new Set(agentsDispatched.map((a) => _internals27.normalizeAgentName(a)))
+        ...new Set(agentsDispatched.map((a) => _internals28.normalizeAgentName(a)))
       ],
       tasks_completed: tasksCompleted,
       tasks_total: tasksTotal,
@@ -64339,7 +64658,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config3, _kno
           clearTimeout(timer);
         }
         if (llmOutput?.trim()) {
-          knowledgeRecommendations = _internals27.parseKnowledgeRecommendations(llmOutput);
+          knowledgeRecommendations = _internals28.parseKnowledgeRecommendations(llmOutput);
           const structured = parseStructuredCuratorBlocks(llmOutput);
           knowledgeApplicationFindings = structured.findings;
           skillCandidates = structured.candidates;
@@ -64390,15 +64709,13 @@ ${phaseDigest.summary}`,
         knowledge_recommendations: knowledgeRecommendations
       };
     }
-    await _internals27.writeCuratorSummary(directory, updatedSummary);
+    await _internals28.writeCuratorSummary(directory, updatedSummary);
     if (knowledgeApplicationFindings.length > 0) {
       try {
         const evidenceDir = path39.join(directory, ".swarm", "evidence", String(phase));
         fs20.mkdirSync(evidenceDir, { recursive: true });
         const findingsPath = path39.join(evidenceDir, "curator-findings.json");
-        const tmpPath = `${findingsPath}.tmp.${Date.now()}`;
-        fs20.writeFileSync(tmpPath, JSON.stringify({ findings: knowledgeApplicationFindings }, null, 2));
-        fs20.renameSync(tmpPath, findingsPath);
+        await bunWrite(findingsPath, JSON.stringify({ findings: knowledgeApplicationFindings }, null, 2));
       } catch (err2) {
         warn(`[curator] failed to persist application findings: ${err2 instanceof Error ? err2.message : String(err2)}`);
       }
@@ -64434,8 +64751,8 @@ ${phaseDigest.summary}`,
     }
     const revisedSlugs = new Set;
     try {
-      const skillListResult = await _internals27.listSkills(directory);
-      const usageEntries = _internals27.readSkillUsageEntries(directory);
+      const skillListResult = await _internals28.listSkills(directory);
+      const usageEntries = _internals28.readSkillUsageEntries(directory);
       let revisionCallsThisPhase = 0;
       for (const active of skillListResult.active) {
         if (revisionCallsThisPhase >= MAX_REVISION_CALLS_PER_PHASE)
@@ -64456,22 +64773,22 @@ ${phaseDigest.summary}`,
         });
         if (skillUsage.length === 0)
           continue;
-        const violations = skillUsage.filter((e) => normalizeComplianceVerdict(e.complianceVerdict) === "violated").length;
+        const violations = skillUsage.filter((e) => e.complianceVerdict === "violation").length;
         const violationRate = violations / skillUsage.length;
         if (violationRate > REVISION_VIOLATION_THRESHOLD && violationRate <= 0.3) {
-          const content = await _internals27.readFileAsync(active.path, "utf-8");
-          const fm = _internals27.parseDraftFrontmatter(content);
+          const content = await _internals28.readFileAsync(active.path, "utf-8");
+          const fm = _internals28.parseDraftFrontmatter(content);
           if (fm && fm.skillOrigin === "promoted_external")
             continue;
           const currentVersion = fm?.version ?? 1;
-          const violationContexts = skillUsage.filter((e) => normalizeComplianceVerdict(e.complianceVerdict) === "violated").slice(-10).map((e) => ({
+          const violationContexts = skillUsage.filter((e) => e.complianceVerdict === "violation").slice(-10).map((e) => ({
             taskId: e.taskID,
             agent: e.agentName,
             verdict: e.complianceVerdict,
             reviewerNotes: e.reviewerNotes,
             timestamp: e.timestamp
           }));
-          const result2 = await _internals27.reviseSkill({
+          const result2 = await _internals28.reviseSkill({
             directory,
             slug: active.slug,
             skillPath: active.path,
@@ -64490,7 +64807,7 @@ ${phaseDigest.summary}`,
     } catch (revisionErr) {
       warn(`[curator] skill revision check failed: ${revisionErr instanceof Error ? revisionErr.message : String(revisionErr)}`);
     }
-    const autoRetireObservations = await _internals27.autoRetireSkills(directory, curatorKnowledgePath, revisedSlugs);
+    const autoRetireObservations = await _internals28.autoRetireSkills(directory, curatorKnowledgePath, revisedSlugs);
     if (autoRetireObservations.length > 0) {
       const retireNote = ` [${autoRetireObservations.length} skill(s) auto-retired]`;
       phaseDigest.summary += retireNote;
@@ -64698,7 +65015,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
   }
   return { applied, skipped };
 }
-var DEFAULT_CURATOR_LLM_TIMEOUT_MS = 300000, _internals27;
+var DEFAULT_CURATOR_LLM_TIMEOUT_MS = 300000, _internals28;
 var init_curator = __esm(() => {
   init_event_bus();
   init_schema();
@@ -64713,7 +65030,7 @@ var init_curator = __esm(() => {
   init_knowledge_validator();
   init_skill_usage_log();
   init_utils2();
-  _internals27 = {
+  _internals28 = {
     parseKnowledgeRecommendations,
     readCuratorSummary,
     writeCuratorSummary,
@@ -65559,7 +65876,7 @@ function rankSkillsForContext(skills, taskContext, directory) {
   const results = [];
   for (const skillPath of skills) {
     const skillEntries = allEntries.filter((e) => e.skillPath === skillPath);
-    const metadata2 = _internals28.readSkillMetadata(skillPath, directory);
+    const metadata2 = _internals29.readSkillMetadata(skillPath, directory);
     const score = computeSkillRelevanceScore(skillPath, taskContext, skillEntries, metadata2);
     const entriesWithVerdict = skillEntries.filter((e) => e.complianceVerdict !== undefined && e.complianceVerdict !== "not_checked");
     const compliantCount = entriesWithVerdict.filter((e) => e.complianceVerdict === "compliant").length;
@@ -65614,7 +65931,7 @@ function formatSkillIndexWithContext(skills, directory) {
   } catch {}
   if (!hasHistory) {
     return skills.map((sp) => {
-      const meta3 = _internals28.readSkillMetadata(sp, directory);
+      const meta3 = _internals29.readSkillMetadata(sp, directory);
       return `  - file:${meta3.path} - ${meta3.name}: ${meta3.description}`;
     }).join(`
 `);
@@ -65622,7 +65939,7 @@ function formatSkillIndexWithContext(skills, directory) {
   const lines = [];
   for (const skillPath of skills) {
     const stats = getSkillStats(skillPath, directory);
-    const meta3 = _internals28.readSkillMetadata(skillPath, directory);
+    const meta3 = _internals29.readSkillMetadata(skillPath, directory);
     const compliancePct = Math.round(stats.complianceRate * 100);
     const topAgentNames = stats.topAgents.slice(0, 3).map((a) => a.agent).join(", ");
     lines.push(`  - file:${meta3.path} - ${meta3.name}: ${meta3.description} (used: ${stats.totalUsage}, compliance: ${compliancePct}%)` + (stats.topAgents.length > 0 ? ` → ${topAgentNames}` : ""));
@@ -65630,12 +65947,12 @@ function formatSkillIndexWithContext(skills, directory) {
   return lines.join(`
 `);
 }
-var FREQUENCY_CAP = 10, FREQUENCY_WEIGHT = 0.3, COMPLIANCE_WEIGHT = 0.3, RECENCY_WEIGHT = 0.15, TASK_DIVERSITY_WEIGHT = 0.05, CONTEXT_WEIGHT = 0.2, WORKFLOW_BOOST = 0.1, SKILL_TRIGGER_BOOST = 0.3, SKILL_TRIGGER_MIN_LENGTH = 3, MAX_SKILL_TRIGGERS = 20, MAX_SKILL_TRIGGER_LENGTH = 120, WORKFLOW_BOOST_MIN_CONTEXT = 0.05, RECENCY_DECAY_MS, SKILL_FRONTMATTER_READ_BYTES, _internals28, MIN_KEYWORD_LENGTH = 3;
+var FREQUENCY_CAP = 10, FREQUENCY_WEIGHT = 0.3, COMPLIANCE_WEIGHT = 0.3, RECENCY_WEIGHT = 0.15, TASK_DIVERSITY_WEIGHT = 0.05, CONTEXT_WEIGHT = 0.2, WORKFLOW_BOOST = 0.1, SKILL_TRIGGER_BOOST = 0.3, SKILL_TRIGGER_MIN_LENGTH = 3, MAX_SKILL_TRIGGERS = 20, MAX_SKILL_TRIGGER_LENGTH = 120, WORKFLOW_BOOST_MIN_CONTEXT = 0.05, RECENCY_DECAY_MS, SKILL_FRONTMATTER_READ_BYTES, _internals29, MIN_KEYWORD_LENGTH = 3;
 var init_skill_scoring = __esm(() => {
   init_skill_usage_log();
   RECENCY_DECAY_MS = 30 * 24 * 60 * 60 * 1000;
   SKILL_FRONTMATTER_READ_BYTES = 16 * 1024;
-  _internals28 = {
+  _internals29 = {
     computeSkillRelevanceScore: null,
     rankSkillsForContext: null,
     getSkillStats: null,
@@ -65647,16 +65964,16 @@ var init_skill_scoring = __esm(() => {
     computeContextMatchScore: null,
     computeTriggerMatchBoost: null
   };
-  _internals28.computeSkillRelevanceScore = computeSkillRelevanceScore;
-  _internals28.rankSkillsForContext = rankSkillsForContext;
-  _internals28.getSkillStats = getSkillStats;
-  _internals28.formatSkillIndexWithContext = formatSkillIndexWithContext;
-  _internals28.parseSkillFrontmatter = parseSkillFrontmatter;
-  _internals28.readSkillMetadata = readSkillMetadata;
-  _internals28.extractSkillName = extractSkillName;
-  _internals28.computeRecencyScore = computeRecencyScore;
-  _internals28.computeContextMatchScore = computeContextMatchScore;
-  _internals28.computeTriggerMatchBoost = computeTriggerMatchBoost;
+  _internals29.computeSkillRelevanceScore = computeSkillRelevanceScore;
+  _internals29.rankSkillsForContext = rankSkillsForContext;
+  _internals29.getSkillStats = getSkillStats;
+  _internals29.formatSkillIndexWithContext = formatSkillIndexWithContext;
+  _internals29.parseSkillFrontmatter = parseSkillFrontmatter;
+  _internals29.readSkillMetadata = readSkillMetadata;
+  _internals29.extractSkillName = extractSkillName;
+  _internals29.computeRecencyScore = computeRecencyScore;
+  _internals29.computeContextMatchScore = computeContextMatchScore;
+  _internals29.computeTriggerMatchBoost = computeTriggerMatchBoost;
 });
 
 // src/hooks/skill-propagation-gate.ts
@@ -65761,10 +66078,10 @@ function parseYamlValue(value) {
 }
 function loadRoutingSkills(directory, targetAgent) {
   const routingPath = path43.join(directory, ".opencode", "skill-routing.yaml");
-  if (!_internals29.existsSync(routingPath))
+  if (!_internals30.existsSync(routingPath))
     return [];
   try {
-    const content = _internals29.readFileSync(routingPath, "utf-8");
+    const content = _internals30.readFileSync(routingPath, "utf-8");
     const config3 = parseSimpleYaml(content);
     if (!config3?.routing)
       return [];
@@ -65781,11 +66098,11 @@ function discoverAvailableSkills(directory) {
   const results = [];
   for (const root of SKILL_SEARCH_ROOTS) {
     const rootPath = path43.join(directory, root);
-    if (!_internals29.existsSync(rootPath))
+    if (!_internals30.existsSync(rootPath))
       continue;
     let entries;
     try {
-      entries = _internals29.readdirSync(rootPath);
+      entries = _internals30.readdirSync(rootPath);
     } catch {
       continue;
     }
@@ -65793,11 +66110,11 @@ function discoverAvailableSkills(directory) {
       if (entry.startsWith("."))
         continue;
       const skillDir = path43.join(rootPath, entry);
-      if (_internals29.existsSync(path43.join(skillDir, "retired.marker")))
+      if (_internals30.existsSync(path43.join(skillDir, "retired.marker")))
         continue;
       const skillFile = path43.join(skillDir, "SKILL.md");
       try {
-        if (_internals29.statSync(skillDir).isDirectory() && _internals29.existsSync(skillFile)) {
+        if (_internals30.statSync(skillDir).isDirectory() && _internals30.existsSync(skillFile)) {
           results.push(path43.join(root, entry, "SKILL.md").replace(/\\/g, "/"));
         }
       } catch (err2) {
@@ -65829,7 +66146,7 @@ function parseDelegationArgs(args2) {
   }
   if (!targetAgent)
     return null;
-  const skillsField = prompt ? _internals29.extractSkillsFieldFromPrompt(prompt) : "";
+  const skillsField = prompt ? _internals30.extractSkillsFieldFromPrompt(prompt) : "";
   return { targetAgent, skillsField };
 }
 function extractSkillsFieldFromPrompt(prompt) {
@@ -65870,10 +66187,10 @@ function writeWarnEvent(directory, record3) {
   const filePath = path43.join(directory, ".swarm", "events.jsonl");
   try {
     const dir = path43.dirname(filePath);
-    if (!_internals29.existsSync(dir)) {
-      _internals29.mkdirSync(dir, { recursive: true });
+    if (!_internals30.existsSync(dir)) {
+      _internals30.mkdirSync(dir, { recursive: true });
     }
-    _internals29.appendFileSync(filePath, `${JSON.stringify(record3)}
+    _internals30.appendFileSync(filePath, `${JSON.stringify(record3)}
 `, "utf-8");
   } catch (err2) {
     warn(`[skill-propagation-gate] failed to write warning event: ${err2 instanceof Error ? err2.message : String(err2)}`);
@@ -65924,19 +66241,19 @@ async function skillPropagationGateBefore(directory, input, config3) {
   const baseAgent = stripKnownSwarmPrefix(agentRaw);
   if (baseAgent !== "architect")
     return { blocked: false, reason: null, recommendedSkills: undefined };
-  const parsed = _internals29.parseDelegationArgs(input.args);
+  const parsed = _internals30.parseDelegationArgs(input.args);
   if (!parsed)
     return { blocked: false, reason: null, recommendedSkills: undefined };
   const targetBase = stripKnownSwarmPrefix(parsed.targetAgent);
-  if (!_internals29.SKILL_CAPABLE_AGENTS.has(targetBase))
+  if (!_internals30.SKILL_CAPABLE_AGENTS.has(targetBase))
     return { blocked: false, reason: null, recommendedSkills: undefined };
   const sessionID = typeof input.sessionID === "string" ? input.sessionID : "unknown";
-  const availableSkills = _internals29.discoverAvailableSkills(directory);
+  const availableSkills = _internals30.discoverAvailableSkills(directory);
   const skillsValue = parsed.skillsField.trim();
   if (skillsValue && skillsValue.toLowerCase() !== "none") {
     const prompt = typeof input.args?.prompt === "string" ? String(input.args.prompt) : "";
-    const taskId = _internals29.extractTaskIdFromPrompt(prompt);
-    const skillPaths = _internals29.parseSkillPaths(skillsValue);
+    const taskId = _internals30.extractTaskIdFromPrompt(prompt);
+    const skillPaths = _internals30.parseSkillPaths(skillsValue);
     let coderSkillPaths = [];
     if (prompt) {
       for (const line of prompt.split(`
@@ -65944,7 +66261,7 @@ async function skillPropagationGateBefore(directory, input, config3) {
         const trimmed = line.trim();
         if (trimmed.startsWith("SKILLS_USED_BY_CODER:")) {
           const fieldVal = trimmed.slice("SKILLS_USED_BY_CODER:".length).trim();
-          coderSkillPaths = _internals29.parseSkillPaths(fieldVal);
+          coderSkillPaths = _internals30.parseSkillPaths(fieldVal);
           break;
         }
       }
@@ -65952,7 +66269,7 @@ async function skillPropagationGateBefore(directory, input, config3) {
     const allPaths = [...new Set([...skillPaths, ...coderSkillPaths])];
     for (const skillPath of allPaths) {
       try {
-        _internals29.appendSkillUsageEntry(directory, {
+        _internals30.appendSkillUsageEntry(directory, {
           skillPath,
           agentName: targetBase,
           taskID: taskId,
@@ -65969,18 +66286,18 @@ async function skillPropagationGateBefore(directory, input, config3) {
   let scored = [];
   if (skillsValue.toLowerCase() !== "none" && availableSkills.length > 0) {
     try {
-      const sessionEntries = _internals29.readSkillUsageEntriesTail(directory, {
+      const sessionEntries = _internals30.readSkillUsageEntriesTail(directory, {
         sessionID
       });
-      if (sessionEntries.length > _internals29.MAX_SCORING_SESSION_ENTRIES) {
+      if (sessionEntries.length > _internals30.MAX_SCORING_SESSION_ENTRIES) {
         scoringSkipped = true;
-        warn(`[skill-propagation-gate] skipping scoring — tail window has ${sessionEntries.length} session entries (limit: ${_internals29.MAX_SCORING_SESSION_ENTRIES})`);
+        warn(`[skill-propagation-gate] skipping scoring — tail window has ${sessionEntries.length} session entries (limit: ${_internals30.MAX_SCORING_SESSION_ENTRIES})`);
       } else {
         const prompt = typeof input.args?.prompt === "string" ? String(input.args.prompt) : "";
         scored = availableSkills.map((skillPath) => {
           const skillEntries = sessionEntries.filter((e) => e.skillPath === skillPath);
-          const metadata2 = _internals29.readSkillMetadata(skillPath, directory);
-          const score = _internals29.computeSkillRelevanceScore(skillPath, prompt, skillEntries, metadata2);
+          const metadata2 = _internals30.readSkillMetadata(skillPath, directory);
+          const score = _internals30.computeSkillRelevanceScore(skillPath, prompt, skillEntries, metadata2);
           return { skillPath, score, usageCount: skillEntries.length };
         }).sort((a, b) => b.score - a.score || b.usageCount - a.usageCount);
         if (scored.length > 0) {
@@ -65994,12 +66311,12 @@ async function skillPropagationGateBefore(directory, input, config3) {
     }
   }
   try {
-    const routingPaths = _internals29.loadRoutingSkills(directory, targetBase);
+    const routingPaths = _internals30.loadRoutingSkills(directory, targetBase);
     if (routingPaths.length > 0) {
       const existingPaths = new Set(scored.map((s) => s.skillPath));
       for (const routingPath of routingPaths) {
         const routedSkillDir = path43.dirname(path43.join(directory, routingPath));
-        if (_internals29.existsSync(path43.join(routedSkillDir, "retired.marker")))
+        if (_internals30.existsSync(path43.join(routedSkillDir, "retired.marker")))
           continue;
         if (!existingPaths.has(routingPath)) {
           scored.push({
@@ -66025,12 +66342,12 @@ async function skillPropagationGateBefore(directory, input, config3) {
       } else if (typeof scored !== "undefined" && scored.length > 0) {
         skillsForIndex = scored.map((r) => r.skillPath);
       }
-      const formattedIndex = _internals29.formatSkillIndexWithContext(skillsForIndex, directory);
+      const formattedIndex = _internals30.formatSkillIndexWithContext(skillsForIndex, directory);
       if (formattedIndex.length > 0) {
         const contextPath = path43.join(directory, ".swarm", "context.md");
         let existingContent = "";
-        if (_internals29.existsSync(contextPath)) {
-          existingContent = _internals29.readFileSync(contextPath, "utf-8");
+        if (_internals30.existsSync(contextPath)) {
+          existingContent = _internals30.readFileSync(contextPath, "utf-8");
         }
         const sectionHeader = "## Available Skills";
         const newSection = `${sectionHeader}
@@ -66050,10 +66367,10 @@ ${newSection}`;
           }
         }
         const swarmDir = path43.dirname(contextPath);
-        if (!_internals29.existsSync(swarmDir)) {
-          _internals29.mkdirSync(swarmDir, { recursive: true });
+        if (!_internals30.existsSync(swarmDir)) {
+          _internals30.mkdirSync(swarmDir, { recursive: true });
         }
-        _internals29.writeFileSync(contextPath, updatedContent, "utf-8");
+        _internals30.writeFileSync(contextPath, updatedContent, "utf-8");
       }
     } catch (err2) {
       warn(`[skill-propagation-gate] failed to write skill index to context.md: ${err2 instanceof Error ? err2.message : String(err2)}`);
@@ -66079,7 +66396,7 @@ ${newSection}`;
   });
   const warningMsg = `Skill propagation warning: Delegating to ${targetBase} without SKILLS field. ` + `Available skills: ${skillNames.join(", ")}`;
   try {
-    _internals29.writeWarnEvent(directory, {
+    _internals30.writeWarnEvent(directory, {
       type: "skill_propagation_warn",
       timestamp: new Date().toISOString(),
       tool: toolName,
@@ -66106,7 +66423,7 @@ async function skillPropagationTransformScan(directory, output, sessionID) {
   let dedupKeys = new Set;
   let existingEntries = [];
   try {
-    existingEntries = _internals29.readSkillUsageEntriesTail(directory, {
+    existingEntries = _internals30.readSkillUsageEntriesTail(directory, {
       sessionID
     });
     dedupKeys = new Set(existingEntries.map((e, i2) => {
@@ -66144,7 +66461,7 @@ async function skillPropagationTransformScan(directory, output, sessionID) {
       }
       const coderMatch = trimmed.match(CODER_SKILLS_PATTERN);
       if (coderMatch) {
-        const parsed = _internals29.parseSkillPaths(coderMatch[1]);
+        const parsed = _internals30.parseSkillPaths(coderMatch[1]);
         skillPaths.push(...parsed);
       }
     }
@@ -66177,7 +66494,7 @@ async function skillPropagationTransformScan(directory, output, sessionID) {
         if (isDuplicate(skillPath, "reviewer", resolvedTaskID))
           continue;
         try {
-          _internals29.appendSkillUsageEntry(directory, {
+          _internals30.appendSkillUsageEntry(directory, {
             skillPath,
             agentName: "reviewer",
             taskID: resolvedTaskID,
@@ -66221,15 +66538,15 @@ async function skillPropagationTransformScan(directory, output, sessionID) {
         skillsField = trimmed.slice("SKILLS:".length).trim();
       }
       if (currentTargetAgent && skillsField && skillsField.toLowerCase() !== "none") {
-        const skillPaths = _internals29.parseSkillPaths(skillsField);
-        const taskId = _internals29.extractTaskIdFromPrompt(text);
+        const skillPaths = _internals30.parseSkillPaths(skillsField);
+        const taskId = _internals30.extractTaskIdFromPrompt(text);
         for (const skillPath of skillPaths) {
           if (hadRecordingError)
             break;
           if (isDuplicate(skillPath, currentTargetAgent, taskId))
             continue;
           try {
-            _internals29.appendSkillUsageEntry(directory, {
+            _internals30.appendSkillUsageEntry(directory, {
               skillPath,
               agentName: currentTargetAgent,
               taskID: taskId,
@@ -66249,7 +66566,7 @@ async function skillPropagationTransformScan(directory, output, sessionID) {
     break;
   }
 }
-var SKILL_CAPABLE_AGENTS, SKILL_SEARCH_ROOTS, MAX_SCORING_SESSION_ENTRIES = 500, _internals29, COMPLIANCE_PATTERN, CODER_SKILLS_PATTERN, REVIEWER_TASK_PATTERN;
+var SKILL_CAPABLE_AGENTS, SKILL_SEARCH_ROOTS, MAX_SCORING_SESSION_ENTRIES = 500, _internals30, COMPLIANCE_PATTERN, CODER_SKILLS_PATTERN, REVIEWER_TASK_PATTERN;
 var init_skill_propagation_gate = __esm(() => {
   init_schema();
   init_logger();
@@ -66268,7 +66585,7 @@ var init_skill_propagation_gate = __esm(() => {
     ".opencode/skills/generated",
     ".claude/skills"
   ];
-  _internals29 = {
+  _internals30 = {
     readdirSync: fs22.readdirSync.bind(fs22),
     existsSync: fs22.existsSync.bind(fs22),
     statSync: fs22.statSync.bind(fs22),
@@ -66297,16 +66614,16 @@ var init_skill_propagation_gate = __esm(() => {
   COMPLIANCE_PATTERN = /SKILL_COMPLIANCE\s*:\s*(COMPLIANT|PARTIAL|VIOLATED)(?:\s*(?:—|-)\s*(.*))?\s*$/i;
   CODER_SKILLS_PATTERN = /SKILLS_USED_BY_CODER\s*:\s*(.+)/i;
   REVIEWER_TASK_PATTERN = /TASK\s*:\s*(\S+)/i;
-  _internals29.skillPropagationGateBefore = skillPropagationGateBefore;
-  _internals29.skillPropagationTransformScan = skillPropagationTransformScan;
-  _internals29.writeWarnEvent = writeWarnEvent;
-  _internals29.discoverAvailableSkills = discoverAvailableSkills;
-  _internals29.parseDelegationArgs = parseDelegationArgs;
-  _internals29.parseSkillPaths = parseSkillPaths;
-  _internals29.extractTaskIdFromPrompt = extractTaskIdFromPrompt;
-  _internals29.extractSkillsFieldFromPrompt = extractSkillsFieldFromPrompt;
-  _internals29.formatSkillIndexWithContext = formatSkillIndexWithContext;
-  _internals29.loadRoutingSkills = loadRoutingSkills;
+  _internals30.skillPropagationGateBefore = skillPropagationGateBefore;
+  _internals30.skillPropagationTransformScan = skillPropagationTransformScan;
+  _internals30.writeWarnEvent = writeWarnEvent;
+  _internals30.discoverAvailableSkills = discoverAvailableSkills;
+  _internals30.parseDelegationArgs = parseDelegationArgs;
+  _internals30.parseSkillPaths = parseSkillPaths;
+  _internals30.extractTaskIdFromPrompt = extractTaskIdFromPrompt;
+  _internals30.extractSkillsFieldFromPrompt = extractSkillsFieldFromPrompt;
+  _internals30.formatSkillIndexWithContext = formatSkillIndexWithContext;
+  _internals30.loadRoutingSkills = loadRoutingSkills;
 });
 
 // src/hooks/micro-reflector.ts
@@ -67138,7 +67455,7 @@ async function curateAndStoreSwarm(lessons, projectName, phaseInfo, directory, c
     } catch {}
   }
   if (!options?.skipAutoPromotion) {
-    await _internals30.runAutoPromotion(directory, config3);
+    await _internals31.runAutoPromotion(directory, config3);
   }
   return { stored, reinforced, skipped, rejected, quarantined };
 }
@@ -67221,7 +67538,7 @@ function createKnowledgeCuratorHook(directory, config3, options = {}) {
       recordSeenRetroSection(evidenceKey, evidenceHash, Date.now());
       const projectName2 = evidenceData.project_name ?? "unknown";
       const phaseNumber2 = typeof evidenceData.phase_number === "number" ? evidenceData.phase_number : 1;
-      await _internals30.curateAndStoreSwarm(lessons, projectName2, { phase_number: phaseNumber2 }, directory, config3, {
+      await _internals31.curateAndStoreSwarm(lessons, projectName2, { phase_number: phaseNumber2 }, directory, config3, {
         llmDelegate: options.llmDelegateFactory?.(sessionID),
         enrichmentQuota: options.enrichmentQuota
       });
@@ -67246,14 +67563,14 @@ function createKnowledgeCuratorHook(directory, config3, options = {}) {
     const projectName = projectNameMatch ? projectNameMatch[1].trim() : "unknown";
     const phaseMatch = /^Phase:\s*(\d+)/m.exec(planContent);
     const phaseNumber = phaseMatch ? parseInt(phaseMatch[1], 10) : 1;
-    await _internals30.curateAndStoreSwarm(normalLessons, projectName, { phase_number: phaseNumber }, directory, config3, {
+    await _internals31.curateAndStoreSwarm(normalLessons, projectName, { phase_number: phaseNumber }, directory, config3, {
       llmDelegate: options.llmDelegateFactory?.(sessionID),
       enrichmentQuota: options.enrichmentQuota
     });
   };
   return safeHook(handler);
 }
-var seenRetroSections, MAX_TRACKED_RETRO_SECTIONS = 500, ENRICHMENT_ALLOWED_FIELDS, ENRICHMENT_LLM_TIMEOUT_MS = 60000, MESO_INSIGHT_BATCH_LIMIT = 20, KNOWLEDGE_CATEGORIES, OUTCOME_PROMOTION_BLOCK = -0.3, _internals30;
+var seenRetroSections, MAX_TRACKED_RETRO_SECTIONS = 500, ENRICHMENT_ALLOWED_FIELDS, ENRICHMENT_LLM_TIMEOUT_MS = 60000, MESO_INSIGHT_BATCH_LIMIT = 20, KNOWLEDGE_CATEGORIES, OUTCOME_PROMOTION_BLOCK = -0.3, _internals31;
 var init_knowledge_curator = __esm(() => {
   init_skill_improver_quota();
   init_synonym_map();
@@ -67286,7 +67603,7 @@ var init_knowledge_curator = __esm(() => {
     "todo",
     "other"
   ]);
-  _internals30 = {
+  _internals31 = {
     isWriteToEvidenceFile,
     curateAndStoreSwarm,
     runAutoPromotion,
@@ -68534,7 +68851,7 @@ async function executeWriteRetro(args2, directory) {
     }, null, 2);
   }
 }
-var write_retro, _internals31;
+var write_retro, _internals32;
 var init_write_retro = __esm(() => {
   init_zod();
   init_evidence_schema();
@@ -68581,13 +68898,13 @@ var init_write_retro = __esm(() => {
           task_id: args2.task_id !== undefined ? String(args2.task_id) : undefined,
           metadata: args2.metadata
         };
-        return await _internals31.executeWriteRetro(writeRetroArgs, directory);
+        return await _internals32.executeWriteRetro(writeRetroArgs, directory);
       } catch {
         return JSON.stringify({ success: false, phase: rawPhase, message: "Invalid arguments" }, null, 2);
       }
     }
   });
-  _internals31 = {
+  _internals32 = {
     executeWriteRetro,
     write_retro
   };
@@ -68597,7 +68914,7 @@ var init_write_retro = __esm(() => {
 var exports_curator_postmortem = {};
 __export(exports_curator_postmortem, {
   runCuratorPostMortem: () => runCuratorPostMortem,
-  _internals: () => _internals32
+  _internals: () => _internals33
 });
 import { existsSync as existsSync26, readdirSync as readdirSync6, readFileSync as readFileSync12 } from "node:fs";
 import * as path48 from "node:path";
@@ -68922,9 +69239,9 @@ ${llmOutput}`;
     reportContent = buildDataOnlyReport(planId, planSummary, knowledgeSummary, curatorDigest, proposals, unactionable, retrospectives, driftReports);
   }
   try {
-    const { mkdirSync: mkdirSync16, writeFileSync: writeFileSync10 } = await import("node:fs");
+    const { mkdirSync: mkdirSync16, writeFileSync: writeFileSync9 } = await import("node:fs");
     mkdirSync16(path48.dirname(reportPath), { recursive: true });
-    writeFileSync10(reportPath, reportContent, "utf-8");
+    writeFileSync9(reportPath, reportContent, "utf-8");
   } catch (err2) {
     const msg = err2 instanceof Error ? err2.message : String(err2);
     return {
@@ -68951,13 +69268,13 @@ ${llmOutput}`;
     warnings
   };
 }
-var _internals32;
+var _internals33;
 var init_curator_postmortem = __esm(() => {
   init_manager();
   init_knowledge_events();
   init_knowledge_store();
   init_utils2();
-  _internals32 = {
+  _internals33 = {
     collectKnowledgeSummary,
     collectRetrospectives,
     collectDriftReports,
@@ -69962,7 +70279,7 @@ __export(exports_skill_consolidation, {
   runSkillConsolidationFireAndForget: () => runSkillConsolidationFireAndForget,
   runSkillConsolidation: () => runSkillConsolidation,
   consolidationStatePath: () => consolidationStatePath,
-  _internals: () => _internals33
+  _internals: () => _internals34
 });
 import { existsSync as existsSync27 } from "node:fs";
 import { mkdir as mkdir15, readFile as readFile15, rename as rename9, writeFile as writeFile13 } from "node:fs/promises";
@@ -70086,12 +70403,12 @@ function runSkillConsolidationFireAndForget(req, onComplete, onError) {
     runSkillConsolidation(req).then(onComplete).catch(onError);
   });
 }
-var DEFAULT_CONSOLIDATION_INTERVAL_HOURS = 24, DEFAULT_CONSOLIDATION_MAX_CALLS_PER_RUN = 1, CONSOLIDATION_RUN_TIMEOUT_MS, runningByDirectory, _internals33;
+var DEFAULT_CONSOLIDATION_INTERVAL_HOURS = 24, DEFAULT_CONSOLIDATION_MAX_CALLS_PER_RUN = 1, CONSOLIDATION_RUN_TIMEOUT_MS, runningByDirectory, _internals34;
 var init_skill_consolidation = __esm(() => {
   init_skill_improver();
   CONSOLIDATION_RUN_TIMEOUT_MS = 5 * 60 * 1000;
   runningByDirectory = new Map;
-  _internals33 = {
+  _internals34 = {
     readState: readState2,
     writeState: writeState2,
     intervalElapsed,
@@ -70281,7 +70598,7 @@ __export(exports_co_change_analyzer, {
   darkMatterToKnowledgeEntries: () => darkMatterToKnowledgeEntries,
   co_change_analyzer: () => co_change_analyzer,
   buildCoChangeMatrix: () => buildCoChangeMatrix,
-  _internals: () => _internals34
+  _internals: () => _internals35
 });
 import * as child_process3 from "node:child_process";
 import { randomUUID as randomUUID5 } from "node:crypto";
@@ -70507,9 +70824,9 @@ async function detectDarkMatter(directory, options) {
   } catch {
     return [];
   }
-  const commitMap = await _internals34.parseGitLog(directory, maxCommitsToAnalyze);
-  const matrix = _internals34.buildCoChangeMatrix(commitMap, maxFilesPerCommit);
-  const staticEdges = await _internals34.getStaticEdges(directory);
+  const commitMap = await _internals35.parseGitLog(directory, maxCommitsToAnalyze);
+  const matrix = _internals35.buildCoChangeMatrix(commitMap, maxFilesPerCommit);
+  const staticEdges = await _internals35.getStaticEdges(directory);
   const results = [];
   for (const entry of matrix.values()) {
     const key = `${entry.fileA}::${entry.fileB}`;
@@ -70597,7 +70914,7 @@ ${rows}
 These pairs likely share an architectural concern invisible to static analysis.
 Consider adding explicit documentation or extracting the shared concern.`;
 }
-var co_change_analyzer, _internals34;
+var co_change_analyzer, _internals35;
 var init_co_change_analyzer = __esm(() => {
   init_zod();
   init_create_tool();
@@ -70629,11 +70946,11 @@ var init_co_change_analyzer = __esm(() => {
         npmiThreshold,
         maxCommitsToAnalyze
       };
-      const pairs = await _internals34.detectDarkMatter(directory, options);
-      return _internals34.formatDarkMatterOutput(pairs);
+      const pairs = await _internals35.detectDarkMatter(directory, options);
+      return _internals35.formatDarkMatterOutput(pairs);
     }
   });
-  _internals34 = {
+  _internals35 = {
     parseGitLog,
     buildCoChangeMatrix,
     getStaticEdges,
@@ -70664,7 +70981,7 @@ async function handleDarkMatterCommand(directory, args2) {
   }
   let pairs;
   try {
-    pairs = await _internals34.detectDarkMatter(directory, options);
+    pairs = await _internals35.detectDarkMatter(directory, options);
   } catch (err2) {
     const errMsg = err2 instanceof Error ? err2.message : String(err2);
     return `## Dark Matter Analysis Failed
@@ -71182,7 +71499,7 @@ var init_gate_bridge = __esm(() => {
 });
 
 // src/services/version-check.ts
-import { existsSync as existsSync28, mkdirSync as mkdirSync16, readFileSync as readFileSync13, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync28, mkdirSync as mkdirSync16, readFileSync as readFileSync13, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { join as join43 } from "node:path";
 function cacheDir() {
@@ -71212,7 +71529,7 @@ function writeVersionCache(entry) {
   try {
     const dir = cacheDir();
     mkdirSync16(dir, { recursive: true });
-    writeFileSync10(cacheFile(), JSON.stringify(entry, null, 2), "utf-8");
+    writeFileSync9(cacheFile(), JSON.stringify(entry, null, 2), "utf-8");
   } catch {}
 }
 function compareVersions(a, b) {
@@ -74700,7 +75017,7 @@ function isCommandAvailable(command) {
   const isWindows = process.platform === "win32";
   const cmd = isWindows ? `${command}.exe` : command;
   try {
-    const result = _internals35.spawnSyncImpl(isWindows ? ["where", cmd] : ["which", cmd], {
+    const result = _internals36.spawnSyncImpl(isWindows ? ["where", cmd] : ["which", cmd], {
       cwd: process.cwd(),
       stdin: "ignore",
       stdout: "ignore",
@@ -74850,7 +75167,7 @@ async function discoverBuildCommands(workingDir, options) {
   const scope = options?.scope ?? "all";
   const changedFiles = options?.changedFiles ?? [];
   const _filesToCheck = filterByScope(workingDir, scope, changedFiles);
-  const profileResult = await _internals35.discoverBuildCommandsFromProfiles(workingDir);
+  const profileResult = await _internals36.discoverBuildCommandsFromProfiles(workingDir);
   const profileCommands = profileResult.commands;
   const profileSkipped = profileResult.skipped;
   const coveredEcosystems = new Set;
@@ -74913,7 +75230,7 @@ function clearToolchainCache() {
 function getEcosystems() {
   return ECOSYSTEMS.map((e) => e.ecosystem);
 }
-var ECOSYSTEMS, PROFILE_TO_ECOSYSTEM_NAMES, toolchainCache, IS_COMMAND_AVAILABLE_TIMEOUT_MS = 3000, _internals35, build_discovery;
+var ECOSYSTEMS, PROFILE_TO_ECOSYSTEM_NAMES, toolchainCache, IS_COMMAND_AVAILABLE_TIMEOUT_MS = 3000, _internals36, build_discovery;
 var init_discovery = __esm(() => {
   init_dist();
   init_detector();
@@ -75031,7 +75348,7 @@ var init_discovery = __esm(() => {
     php: ["php-composer"]
   };
   toolchainCache = new Map;
-  _internals35 = {
+  _internals36 = {
     isCommandAvailable,
     discoverBuildCommandsFromProfiles,
     discoverBuildCommands,
@@ -75328,7 +75645,7 @@ var exports_evidence_summary_service = {};
 __export(exports_evidence_summary_service, {
   isAutoSummaryEnabled: () => isAutoSummaryEnabled,
   buildEvidenceSummary: () => buildEvidenceSummary,
-  _internals: () => _internals36,
+  _internals: () => _internals37,
   REQUIRED_EVIDENCE_TYPES: () => REQUIRED_EVIDENCE_TYPES,
   EVIDENCE_SUMMARY_VERSION: () => EVIDENCE_SUMMARY_VERSION
 });
@@ -75366,7 +75683,7 @@ function getTaskStatus(task, bundle) {
   if (task?.status) {
     return task.status;
   }
-  const entries = _internals36.normalizeBundleEntries(bundle);
+  const entries = _internals37.normalizeBundleEntries(bundle);
   if (entries.length > 0) {
     return "completed";
   }
@@ -75392,7 +75709,7 @@ function evidenceCompleteFromEntries(entries) {
   };
 }
 function isEvidenceComplete(bundle) {
-  return evidenceCompleteFromEntries(_internals36.normalizeBundleEntries(bundle));
+  return evidenceCompleteFromEntries(_internals37.normalizeBundleEntries(bundle));
 }
 function getTaskBlockers(task, summary, status) {
   const blockers = [];
@@ -75412,9 +75729,9 @@ async function buildTaskSummary(directory, task, taskId) {
   const bundle = result.status === "found" ? result.bundle : null;
   const gateEvidence = await readDurableGateEvidence(directory, taskId);
   const phase = task?.phase ?? 0;
-  const status = _internals36.getTaskStatus(task, bundle);
-  const entries = mergeDurableGateEntriesFromEvidence(taskId, _internals36.normalizeBundleEntries(bundle), gateEvidence);
-  let evidenceCheck = _internals36.evidenceCompleteFromEntries(entries);
+  const status = _internals37.getTaskStatus(task, bundle);
+  const entries = mergeDurableGateEntriesFromEvidence(taskId, _internals37.normalizeBundleEntries(bundle), gateEvidence);
+  let evidenceCheck = _internals37.evidenceCompleteFromEntries(entries);
   if (gateEvidence) {
     const gateStatus = getDurableGateEvidenceStatus(gateEvidence);
     evidenceCheck = gateStatus.isComplete ? { isComplete: true, missingEvidence: [] } : {
@@ -75422,7 +75739,7 @@ async function buildTaskSummary(directory, task, taskId) {
       missingEvidence: gateStatus.missingGates.map((gate) => `gate:${gate}`)
     };
   }
-  const blockers = _internals36.getTaskBlockers(task, evidenceCheck, status);
+  const blockers = _internals37.getTaskBlockers(task, evidenceCheck, status);
   const hasReview = entries.some((e) => e.type === "review");
   const hasTest = entries.some((e) => e.type === "test");
   const hasApproval = entries.some((e) => e.type === "approval");
@@ -75451,12 +75768,12 @@ async function buildPhaseSummary(directory, phase) {
   const taskSummaries = [];
   const _taskMap = new Map(phase.tasks.map((t) => [t.id, t]));
   for (const task of phase.tasks) {
-    const summary = await _internals36.buildTaskSummary(directory, task, task.id);
+    const summary = await _internals37.buildTaskSummary(directory, task, task.id);
     taskSummaries.push(summary);
   }
   const extraTaskIds = taskIds.filter((id) => !phaseTaskIds.has(id));
   for (const taskId of extraTaskIds) {
-    const summary = await _internals36.buildTaskSummary(directory, undefined, taskId);
+    const summary = await _internals37.buildTaskSummary(directory, undefined, taskId);
     if (summary.phase === phase.id) {
       taskSummaries.push(summary);
     }
@@ -75557,7 +75874,7 @@ async function buildEvidenceSummary(directory, currentPhase) {
   let totalTasks = 0;
   let completedTasks = 0;
   for (const phase of phasesToProcess) {
-    const summary = await _internals36.buildPhaseSummary(directory, phase);
+    const summary = await _internals37.buildPhaseSummary(directory, phase);
     phaseSummaries.push(summary);
     totalTasks += summary.totalTasks;
     completedTasks += summary.completedTasks;
@@ -75579,7 +75896,7 @@ async function buildEvidenceSummary(directory, currentPhase) {
     overallBlockers,
     summaryText: ""
   };
-  artifact.summaryText = _internals36.generateSummaryText(artifact);
+  artifact.summaryText = _internals37.generateSummaryText(artifact);
   log("[EvidenceSummary] Summary built", {
     phases: phaseSummaries.length,
     totalTasks,
@@ -75598,7 +75915,7 @@ function isAutoSummaryEnabled(automationConfig) {
   }
   return automationConfig.capabilities?.evidence_auto_summaries === true;
 }
-var VALID_EVIDENCE_TYPES2, REQUIRED_EVIDENCE_TYPES, EVIDENCE_SUMMARY_VERSION = "1.0.0", _internals36;
+var VALID_EVIDENCE_TYPES2, REQUIRED_EVIDENCE_TYPES, EVIDENCE_SUMMARY_VERSION = "1.0.0", _internals37;
 var init_evidence_summary_service = __esm(() => {
   init_gate_bridge();
   init_manager2();
@@ -75613,7 +75930,7 @@ var init_evidence_summary_service = __esm(() => {
     "retrospective"
   ]);
   REQUIRED_EVIDENCE_TYPES = ["review", "test"];
-  _internals36 = {
+  _internals37 = {
     buildEvidenceSummary,
     isAutoSummaryEnabled,
     normalizeBundleEntries,
@@ -75669,7 +75986,7 @@ function getVerdictEmoji(verdict) {
   return getVerdictIcon(verdict);
 }
 async function getTaskEvidenceData(directory, taskId) {
-  const result = await _internals37.loadEvidence(directory, taskId);
+  const result = await _internals38.loadEvidence(directory, taskId);
   if (result.status !== "found") {
     return {
       hasEvidence: false,
@@ -75692,13 +76009,13 @@ async function getTaskEvidenceData(directory, taskId) {
   };
 }
 async function getEvidenceListData(directory) {
-  const taskIds = await _internals37.listEvidenceTaskIds(directory);
+  const taskIds = await _internals38.listEvidenceTaskIds(directory);
   if (taskIds.length === 0) {
     return { hasEvidence: false, tasks: [] };
   }
   const tasks = [];
   for (const taskId of taskIds) {
-    const result = await _internals37.loadEvidence(directory, taskId);
+    const result = await _internals38.loadEvidence(directory, taskId);
     if (result.status === "found") {
       tasks.push({
         taskId,
@@ -75812,10 +76129,10 @@ async function handleEvidenceSummaryCommand(directory) {
   return lines.join(`
 `);
 }
-var _internals37;
+var _internals38;
 var init_evidence_service = __esm(() => {
   init_manager2();
-  _internals37 = {
+  _internals38 = {
     loadEvidence,
     listEvidenceTaskIds
   };
@@ -76464,7 +76781,7 @@ function extractCurrentPhaseFromPlan2(plan) {
   if (!plan) {
     return { currentPhase: null, currentTask: null, incompleteTasks: [] };
   }
-  if (!_internals38.validatePlanPhases(plan)) {
+  if (!_internals39.validatePlanPhases(plan)) {
     return { currentPhase: null, currentTask: null, incompleteTasks: [] };
   }
   let currentPhase = null;
@@ -76606,9 +76923,9 @@ function extractPhaseMetrics(content) {
 async function getHandoffData(directory) {
   const now = new Date().toISOString();
   const sessionContent = await readSwarmFileAsync(directory, "session/state.json");
-  const sessionState = _internals38.parseSessionState(sessionContent);
+  const sessionState = _internals39.parseSessionState(sessionContent);
   const plan = await loadPlanJsonOnly(directory);
-  const planInfo = _internals38.extractCurrentPhaseFromPlan(plan);
+  const planInfo = _internals39.extractCurrentPhaseFromPlan(plan);
   if (!plan) {
     const planMdContent = await readSwarmFileAsync(directory, "plan.md");
     if (planMdContent) {
@@ -76627,8 +76944,8 @@ async function getHandoffData(directory) {
     }
   }
   const contextContent = await readSwarmFileAsync(directory, "context.md");
-  const recentDecisions = _internals38.extractDecisions(contextContent);
-  const rawPhaseMetrics = _internals38.extractPhaseMetrics(contextContent);
+  const recentDecisions = _internals39.extractDecisions(contextContent);
+  const rawPhaseMetrics = _internals39.extractPhaseMetrics(contextContent);
   const phaseMetrics = sanitizeString(rawPhaseMetrics, 1000);
   let delegationState = null;
   if (sessionState?.delegationState) {
@@ -76792,13 +77109,13 @@ ${lines.join(`
 `)}
 \`\`\``;
 }
-var RTL_OVERRIDE_PATTERN, MAX_TASK_ID_LENGTH = 100, MAX_DECISION_LENGTH = 500, MAX_INCOMPLETE_TASKS = 20, _internals38;
+var RTL_OVERRIDE_PATTERN, MAX_TASK_ID_LENGTH = 100, MAX_DECISION_LENGTH = 500, MAX_INCOMPLETE_TASKS = 20, _internals39;
 var init_handoff_service = __esm(() => {
   init_utils2();
   init_manager();
   init_utils();
   RTL_OVERRIDE_PATTERN = /[\u202e\u202d\u202c\u200f]/g;
-  _internals38 = {
+  _internals39 = {
     getHandoffData,
     formatHandoffMarkdown,
     formatContinuationPrompt,
@@ -76813,7 +77130,7 @@ var init_handoff_service = __esm(() => {
 });
 
 // src/session/snapshot-writer.ts
-import { closeSync as closeSync5, fsyncSync as fsyncSync2, mkdirSync as mkdirSync19, openSync as openSync5, renameSync as renameSync12 } from "node:fs";
+import { closeSync as closeSync5, fsyncSync as fsyncSync2, mkdirSync as mkdirSync19, openSync as openSync5, renameSync as renameSync11 } from "node:fs";
 import * as path59 from "node:path";
 function serializeAgentSession(s) {
   const gateLog = {};
@@ -76932,7 +77249,7 @@ async function writeSnapshot(directory, state) {
         closeSync5(fd);
       }
     } catch {}
-    renameSync12(tempPath, resolvedPath);
+    renameSync11(tempPath, resolvedPath);
   } catch (error93) {
     log("[snapshot-writer] write failed", {
       error: error93 instanceof Error ? error93.message : String(error93)
@@ -76941,22 +77258,22 @@ async function writeSnapshot(directory, state) {
 }
 function createSnapshotWriterHook(directory) {
   return (_input, _output) => {
-    _writeInFlight = _writeInFlight.then(() => _internals39.writeSnapshot(directory, swarmState), () => _internals39.writeSnapshot(directory, swarmState));
+    _writeInFlight = _writeInFlight.then(() => _internals40.writeSnapshot(directory, swarmState), () => _internals40.writeSnapshot(directory, swarmState));
     return _writeInFlight;
   };
 }
 async function flushPendingSnapshot(directory) {
-  _writeInFlight = _writeInFlight.then(() => _internals39.writeSnapshot(directory, swarmState), () => _internals39.writeSnapshot(directory, swarmState));
+  _writeInFlight = _writeInFlight.then(() => _internals40.writeSnapshot(directory, swarmState), () => _internals40.writeSnapshot(directory, swarmState));
   await _writeInFlight;
 }
-var _writeInFlight, _internals39;
+var _writeInFlight, _internals40;
 var init_snapshot_writer = __esm(() => {
   init_utils2();
   init_state();
   init_utils();
   init_bun_compat();
   _writeInFlight = Promise.resolve();
-  _internals39 = {
+  _internals40 = {
     writeSnapshot,
     createSnapshotWriterHook,
     flushPendingSnapshot
@@ -76965,7 +77282,7 @@ var init_snapshot_writer = __esm(() => {
 
 // src/commands/handoff.ts
 import crypto6 from "node:crypto";
-import { renameSync as renameSync13, unlinkSync as unlinkSync7 } from "node:fs";
+import { renameSync as renameSync12, unlinkSync as unlinkSync7 } from "node:fs";
 async function handleHandoffCommand(directory, _args) {
   const handoffData = await getHandoffData(directory);
   const markdown = formatHandoffMarkdown(handoffData);
@@ -76974,7 +77291,7 @@ async function handleHandoffCommand(directory, _args) {
     const tempPath = `${resolvedPath}.tmp.${crypto6.randomUUID()}`;
     await bunWrite(tempPath, markdown);
     try {
-      renameSync13(tempPath, resolvedPath);
+      renameSync12(tempPath, resolvedPath);
     } catch (renameErr) {
       try {
         unlinkSync7(tempPath);
@@ -76986,7 +77303,7 @@ async function handleHandoffCommand(directory, _args) {
     const promptTempPath = `${promptPath}.tmp.${crypto6.randomUUID()}`;
     await bunWrite(promptTempPath, continuationPrompt);
     try {
-      renameSync13(promptTempPath, promptPath);
+      renameSync12(promptTempPath, promptPath);
     } catch (renameErr) {
       try {
         unlinkSync7(promptTempPath);
@@ -77276,7 +77593,7 @@ function validateAndSanitizeGithubUrl(rawUrl, resource) {
 }
 function detectGitRemote(cwd) {
   try {
-    const result = _internals40.spawnSync("git", ["remote", "get-url", "origin"], {
+    const result = _internals41.spawnSync("git", ["remote", "get-url", "origin"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"],
       timeout: 5000,
@@ -77321,7 +77638,7 @@ function parseGitRemoteUrl(remoteUrl) {
   }
   return null;
 }
-var MAX_URL_LEN = 2048, IPV4_PRIVATE, IPV4_LOOPBACK, IPV4_LINK_LOCAL, IPV4_PRIVATE_172, IPV4_PRIVATE_192, IPV4_ZERO_NETWORK, IPV6_LINK_LOCAL, IPV6_UNIQUE_LOCAL, _internals40;
+var MAX_URL_LEN = 2048, IPV4_PRIVATE, IPV4_LOOPBACK, IPV4_LINK_LOCAL, IPV4_PRIVATE_172, IPV4_PRIVATE_192, IPV4_ZERO_NETWORK, IPV6_LINK_LOCAL, IPV6_UNIQUE_LOCAL, _internals41;
 var init_url_security = __esm(() => {
   IPV4_PRIVATE = /^10\./;
   IPV4_LOOPBACK = /^127\./;
@@ -77331,7 +77648,7 @@ var init_url_security = __esm(() => {
   IPV4_ZERO_NETWORK = /^0\./;
   IPV6_LINK_LOCAL = /^fe80:/i;
   IPV6_UNIQUE_LOCAL = /^f[cd][0-9a-f]{2}:/i;
-  _internals40 = { spawnSync: spawnSync8 };
+  _internals41 = { spawnSync: spawnSync8 };
 });
 
 // src/commands/issue.ts
@@ -77505,9 +77822,9 @@ async function migrateContextToKnowledge(directory, config3) {
       skippedReason: "empty-context"
     };
   }
-  const rawEntries = _internals41.parseContextMd(contextContent);
+  const rawEntries = _internals42.parseContextMd(contextContent);
   if (rawEntries.length === 0) {
-    await _internals41.writeSentinel(sentinelPath, 0, 0);
+    await _internals42.writeSentinel(sentinelPath, 0, 0);
     return {
       migrated: true,
       entriesMigrated: 0,
@@ -77518,10 +77835,10 @@ async function migrateContextToKnowledge(directory, config3) {
   const existing = await readKnowledge(knowledgePath);
   let migrated = 0;
   let dropped = 0;
-  const projectName = _internals41.inferProjectName(directory);
+  const projectName = _internals42.inferProjectName(directory);
   for (const raw of rawEntries) {
     if (config3.validation_enabled !== false) {
-      const category = raw.categoryHint ?? _internals41.inferCategoryFromText(raw.text);
+      const category = raw.categoryHint ?? _internals42.inferCategoryFromText(raw.text);
       const result = validateLesson(raw.text, existing.map((e) => e.lesson), {
         category,
         scope: "global",
@@ -77541,8 +77858,8 @@ async function migrateContextToKnowledge(directory, config3) {
     const entry = {
       id: randomUUID6(),
       tier: "swarm",
-      lesson: _internals41.truncateLesson(raw.text),
-      category: raw.categoryHint ?? _internals41.inferCategoryFromText(raw.text),
+      lesson: _internals42.truncateLesson(raw.text),
+      category: raw.categoryHint ?? _internals42.inferCategoryFromText(raw.text),
       tags: [...inferredTags, `migration:${raw.sourceSection}`],
       scope: "global",
       confidence: 0.3,
@@ -77565,7 +77882,7 @@ async function migrateContextToKnowledge(directory, config3) {
   if (migrated > 0) {
     await rewriteKnowledge(knowledgePath, existing);
   }
-  await _internals41.writeSentinel(sentinelPath, migrated, dropped);
+  await _internals42.writeSentinel(sentinelPath, migrated, dropped);
   log(`[knowledge-migrator] Migrated ${migrated} entries, dropped ${dropped}`);
   return {
     migrated: true,
@@ -77575,7 +77892,7 @@ async function migrateContextToKnowledge(directory, config3) {
   };
 }
 async function migrateHiveKnowledgeLegacy(config3) {
-  const legacyHivePath = _internals41.resolveLegacyHiveKnowledgePath();
+  const legacyHivePath = _internals42.resolveLegacyHiveKnowledgePath();
   const canonicalHivePath = resolveHiveKnowledgePath();
   const sentinelPath = path60.join(path60.dirname(canonicalHivePath), ".hive-knowledge-migrated");
   if (existsSync34(sentinelPath)) {
@@ -77598,7 +77915,7 @@ async function migrateHiveKnowledgeLegacy(config3) {
   }
   const legacyEntries = await readKnowledge(legacyHivePath);
   if (legacyEntries.length === 0) {
-    await _internals41.writeSentinel(sentinelPath, 0, 0);
+    await _internals42.writeSentinel(sentinelPath, 0, 0);
     return {
       migrated: true,
       entriesMigrated: 0,
@@ -77646,7 +77963,7 @@ async function migrateHiveKnowledgeLegacy(config3) {
       const newHiveEntry = {
         id: resolvedId,
         tier: "hive",
-        lesson: _internals41.truncateLesson(lesson),
+        lesson: _internals42.truncateLesson(lesson),
         category,
         tags: ["migration:legacy-hive"],
         scope: scopeTag,
@@ -77665,7 +77982,7 @@ async function migrateHiveKnowledgeLegacy(config3) {
         encounter_score: 1
       };
       try {
-        await _internals41.appendKnowledge(canonicalHivePath, newHiveEntry);
+        await _internals42.appendKnowledge(canonicalHivePath, newHiveEntry);
         existingHiveEntries.push(newHiveEntry);
         migrated++;
       } catch (appendError) {
@@ -77681,7 +77998,7 @@ async function migrateHiveKnowledgeLegacy(config3) {
       dropped++;
     }
   }
-  await _internals41.writeSentinel(sentinelPath, migrated, dropped);
+  await _internals42.writeSentinel(sentinelPath, migrated, dropped);
   log(`[knowledge-migrator] Migrated ${migrated} legacy hive entries, dropped ${dropped}`);
   return {
     migrated: true,
@@ -77692,7 +78009,7 @@ async function migrateHiveKnowledgeLegacy(config3) {
   };
 }
 function parseContextMd(content) {
-  const sections = _internals41.splitIntoSections(content);
+  const sections = _internals42.splitIntoSections(content);
   const entries = [];
   const seen = new Set;
   const sectionPatterns = [
@@ -77708,7 +78025,7 @@ function parseContextMd(content) {
     const match = sectionPatterns.find((sp) => sp.pattern.test(section.heading));
     if (!match)
       continue;
-    const bullets = _internals41.extractBullets(section.body);
+    const bullets = _internals42.extractBullets(section.body);
     for (const bullet of bullets) {
       if (bullet.length < 15)
         continue;
@@ -77717,9 +78034,9 @@ function parseContextMd(content) {
         continue;
       seen.add(normalized);
       entries.push({
-        text: _internals41.truncateLesson(bullet),
+        text: _internals42.truncateLesson(bullet),
         sourceSection: match.sourceSection,
-        categoryHint: _internals41.inferCategoryFromText(bullet)
+        categoryHint: _internals42.inferCategoryFromText(bullet)
       });
     }
   }
@@ -77825,12 +78142,12 @@ function resolveLegacyHiveKnowledgePath() {
   }
   return path60.join(dataDir, "hive-knowledge.jsonl");
 }
-var _internals41;
+var _internals42;
 var init_knowledge_migrator = __esm(() => {
   init_logger();
   init_knowledge_store();
   init_knowledge_validator();
-  _internals41 = {
+  _internals42 = {
     appendKnowledge,
     migrateContextToKnowledge,
     migrateKnowledgeToExternal,
@@ -82415,9 +82732,9 @@ var init_memory2 = __esm(() => {
 
 // src/services/plan-service.ts
 async function getPlanData(directory, phaseArg) {
-  const plan = await _internals42.loadPlanJsonOnly(directory);
+  const plan = await _internals43.loadPlanJsonOnly(directory);
   if (plan) {
-    const fullMarkdown = _internals42.derivePlanMarkdown(plan);
+    const fullMarkdown = _internals43.derivePlanMarkdown(plan);
     if (phaseArg === undefined || phaseArg === null || phaseArg === "") {
       return {
         hasPlan: true,
@@ -82460,7 +82777,7 @@ async function getPlanData(directory, phaseArg) {
       isLegacy: false
     };
   }
-  const planContent = await _internals42.readSwarmFileAsync(directory, "plan.md");
+  const planContent = await _internals43.readSwarmFileAsync(directory, "plan.md");
   if (!planContent) {
     return {
       hasPlan: false,
@@ -82556,11 +82873,11 @@ async function handlePlanCommand(directory, args2) {
   const planData = await getPlanData(directory, phaseArg);
   return formatPlanMarkdown(planData);
 }
-var _internals42;
+var _internals43;
 var init_plan_service = __esm(() => {
   init_utils2();
   init_manager();
-  _internals42 = {
+  _internals43 = {
     loadPlanJsonOnly,
     derivePlanMarkdown,
     readSwarmFileAsync
@@ -82750,7 +83067,7 @@ function formatRelativeTime(epochMs) {
   return `${diffDays} day${diffDays === 1 ? "" : "s"} ago`;
 }
 async function handlePrMonitorStatusCommand(directory, _args, sessionID) {
-  const allActive = await _internals43.listActive(directory);
+  const allActive = await _internals44.listActive(directory);
   const sessionSubs = allActive.filter((record3) => record3.sessionID === sessionID);
   if (sessionSubs.length === 0) {
     return "No active PR subscriptions for this session.";
@@ -82779,10 +83096,10 @@ async function handlePrMonitorStatusCommand(directory, _args, sessionID) {
   return lines.join(`
 `);
 }
-var _internals43;
+var _internals44;
 var init_pr_monitor_status = __esm(() => {
   init_pr_subscriptions();
-  _internals43 = {
+  _internals44 = {
     formatRelativeTime,
     listActive
   };
@@ -82887,7 +83204,7 @@ async function handlePrSubscribeCommand(directory, args2, sessionID) {
   const repoFullName = `${prInfo.owner}/${prInfo.repo}`;
   const prUrl = `https://github.com/${prInfo.owner}/${prInfo.repo}/pull/${prInfo.number}`;
   try {
-    const config3 = _internals44.loadPluginConfig(directory);
+    const config3 = _internals45.loadPluginConfig(directory);
     const prMonitorConfig = config3.pr_monitor;
     if (!prMonitorConfig?.enabled) {
       return [
@@ -82897,7 +83214,7 @@ async function handlePrSubscribeCommand(directory, args2, sessionID) {
       ].join(`
 `);
     }
-    await _internals44.subscribe(directory, {
+    await _internals45.subscribe(directory, {
       sessionID,
       prNumber: prInfo.number,
       repoFullName,
@@ -82921,12 +83238,12 @@ async function handlePrSubscribeCommand(directory, args2, sessionID) {
 `);
   }
 }
-var _internals44;
+var _internals45;
 var init_pr_subscribe = __esm(() => {
   init_pr_subscriptions();
   init_loader();
   init_pr_ref();
-  _internals44 = {
+  _internals45 = {
     loadPluginConfig,
     subscribe
   };
@@ -82950,9 +83267,9 @@ async function handlePrUnsubscribeCommand(directory, args2, sessionID) {
 `);
   }
   const refToken = rest[0];
-  const prInfo = _internals45.parsePrRef(refToken, directory);
+  const prInfo = _internals46.parsePrRef(refToken, directory);
   if (!prInfo) {
-    if (_internals45.looksLikePrRef(refToken)) {
+    if (_internals46.looksLikePrRef(refToken)) {
       return [
         `Error: Could not resolve PR reference from "${refToken}".`,
         "",
@@ -82973,8 +83290,8 @@ async function handlePrUnsubscribeCommand(directory, args2, sessionID) {
   const repoFullName = `${prInfo.owner}/${prInfo.repo}`;
   const prUrl = `https://github.com/${prInfo.owner}/${prInfo.repo}/pull/${prInfo.number}`;
   try {
-    const correlationId = _internals45.buildCorrelationId(sessionID, repoFullName, prInfo.number);
-    const result = await _internals45.unsubscribe(directory, correlationId);
+    const correlationId = _internals46.buildCorrelationId(sessionID, repoFullName, prInfo.number);
+    const result = await _internals46.unsubscribe(directory, correlationId);
     if (!result) {
       return [
         `Not subscribed to ${prUrl}`,
@@ -83001,11 +83318,11 @@ async function handlePrUnsubscribeCommand(directory, args2, sessionID) {
 `);
   }
 }
-var _internals45;
+var _internals46;
 var init_pr_unsubscribe = __esm(() => {
   init_pr_subscriptions();
   init_pr_ref();
-  _internals45 = {
+  _internals46 = {
     unsubscribe,
     buildCorrelationId,
     parsePrRef,
@@ -83461,7 +83778,7 @@ async function runAdditionalLint(linter, mode, cwd) {
     };
   }
 }
-var MAX_OUTPUT_BYTES = 512000, MAX_COMMAND_LENGTH = 500, lint, _internals46;
+var MAX_OUTPUT_BYTES = 512000, MAX_COMMAND_LENGTH = 500, lint, _internals47;
 var init_lint = __esm(() => {
   init_zod();
   init_discovery();
@@ -83493,15 +83810,15 @@ var init_lint = __esm(() => {
       }
       const { mode } = args2;
       const cwd = directory;
-      const linter = await _internals46.detectAvailableLinter(directory);
+      const linter = await _internals47.detectAvailableLinter(directory);
       if (linter) {
-        const result = await _internals46.runLint(linter, mode, directory);
+        const result = await _internals47.runLint(linter, mode, directory);
         return JSON.stringify(result, null, 2);
       }
-      const additionalLinter = _internals46.detectAdditionalLinter(cwd);
+      const additionalLinter = _internals47.detectAdditionalLinter(cwd);
       if (additionalLinter) {
         warn(`[lint] Using ${additionalLinter} linter for this project`);
-        const result = await _internals46.runAdditionalLint(additionalLinter, mode, cwd);
+        const result = await _internals47.runAdditionalLint(additionalLinter, mode, cwd);
         return JSON.stringify(result, null, 2);
       }
       const errorResult = {
@@ -83515,7 +83832,7 @@ For Rust: rustup component add clippy`
       return JSON.stringify(errorResult, null, 2);
     }
   });
-  _internals46 = {
+  _internals47 = {
     detectAvailableLinter,
     runLint,
     detectAdditionalLinter,
@@ -83829,7 +84146,7 @@ function findScannableFiles(dir, excludeExact, excludeGlobs, scanDir, visited, s
 }
 async function runSecretscan(directory) {
   try {
-    const result = await _internals47.secretscan.execute({ directory }, {});
+    const result = await _internals48.secretscan.execute({ directory }, {});
     const jsonStr = typeof result === "string" ? result : result.output;
     return JSON.parse(jsonStr);
   } catch (e) {
@@ -83844,7 +84161,7 @@ async function runSecretscan(directory) {
     return errorResult;
   }
 }
-var MAX_FILE_PATH_LENGTH = 500, MAX_FILE_SIZE_BYTES, MAX_FILES_SCANNED = 1000, MAX_FINDINGS = 100, MAX_OUTPUT_BYTES2 = 512000, MAX_LINE_LENGTH = 1e4, MAX_CONTENT_BYTES, BINARY_SIGNATURES, BINARY_PREFIX_BYTES = 4, BINARY_NULL_CHECK_BYTES = 8192, BINARY_NULL_THRESHOLD = 0.1, DEFAULT_EXCLUDE_DIRS, DEFAULT_EXCLUDE_EXTENSIONS, SECRET_PATTERNS2, O_NOFOLLOW, secretscan, _internals47;
+var MAX_FILE_PATH_LENGTH = 500, MAX_FILE_SIZE_BYTES, MAX_FILES_SCANNED = 1000, MAX_FINDINGS = 100, MAX_OUTPUT_BYTES2 = 512000, MAX_LINE_LENGTH = 1e4, MAX_CONTENT_BYTES, BINARY_SIGNATURES, BINARY_PREFIX_BYTES = 4, BINARY_NULL_CHECK_BYTES = 8192, BINARY_NULL_THRESHOLD = 0.1, DEFAULT_EXCLUDE_DIRS, DEFAULT_EXCLUDE_EXTENSIONS, SECRET_PATTERNS2, O_NOFOLLOW, secretscan, _internals48;
 var init_secretscan = __esm(() => {
   init_zod();
   init_path_security();
@@ -84216,7 +84533,7 @@ var init_secretscan = __esm(() => {
       }
     }
   });
-  _internals47 = {
+  _internals48 = {
     secretscan,
     runSecretscan
   };
@@ -84808,14 +85125,14 @@ function buildGoBackend() {
     selectEntryPoints
   };
 }
-var PROFILE_ID = "go", IMPORT_REGEX_SINGLE, IMPORT_REGEX_GROUP, IMPORT_REGEX_GROUP_LINE, _internals48;
+var PROFILE_ID = "go", IMPORT_REGEX_SINGLE, IMPORT_REGEX_GROUP, IMPORT_REGEX_GROUP_LINE, _internals49;
 var init_go = __esm(() => {
   init_default_backend();
   init_profiles();
   IMPORT_REGEX_SINGLE = /^\s*import\s+(?:[a-zA-Z_.][a-zA-Z0-9_]*\s+)?"([^"]+)"/gm;
   IMPORT_REGEX_GROUP = /^\s*import\s*\(([\s\S]*?)\)/gm;
   IMPORT_REGEX_GROUP_LINE = /(?:[a-zA-Z_.][a-zA-Z0-9_]*\s+)?"([^"]+)"/g;
-  _internals48 = { extractImports };
+  _internals49 = { extractImports };
 });
 
 // src/lang/backends/python.ts
@@ -84927,13 +85244,13 @@ function buildPythonBackend() {
     selectEntryPoints: selectEntryPoints2
   };
 }
-var PROFILE_ID2 = "python", IMPORT_REGEX_FROM_WITH_TARGETS, IMPORT_REGEX_IMPORT, _internals49;
+var PROFILE_ID2 = "python", IMPORT_REGEX_FROM_WITH_TARGETS, IMPORT_REGEX_IMPORT, _internals50;
 var init_python = __esm(() => {
   init_default_backend();
   init_profiles();
   IMPORT_REGEX_FROM_WITH_TARGETS = /^\s*from\s+(\.*[\w.]*)\s+import\s+(\([^)]*\)|[^\n#]+)/gm;
   IMPORT_REGEX_IMPORT = /^\s*import\s+([^\n#]+)/gm;
-  _internals49 = { extractImports: extractImports2 };
+  _internals50 = { extractImports: extractImports2 };
 });
 
 // src/test-impact/analyzer.ts
@@ -85157,7 +85474,7 @@ function addImpactEdgesForTestFile(testFile, content, impactMap) {
     return;
   }
   if (PYTHON_EXTENSIONS.has(ext)) {
-    const modules = _internals49.extractImports(testFile, content);
+    const modules = _internals50.extractImports(testFile, content);
     for (const mod of modules) {
       const resolved = resolvePythonImport(testDir, mod);
       if (resolved !== null)
@@ -85166,7 +85483,7 @@ function addImpactEdgesForTestFile(testFile, content, impactMap) {
     return;
   }
   if (GO_EXTENSIONS.has(ext)) {
-    const imports = _internals48.extractImports(testFile, content);
+    const imports = _internals49.extractImports(testFile, content);
     for (const importPath of imports) {
       const sourceFiles = resolveGoImport(testDir, importPath);
       for (const source of sourceFiles)
@@ -85193,8 +85510,8 @@ async function buildImpactMapInternal(cwd) {
   return impactMap;
 }
 async function buildImpactMap(cwd) {
-  const impactMap = await _internals50.buildImpactMapInternal(cwd);
-  await _internals50.saveImpactMap(cwd, impactMap);
+  const impactMap = await _internals51.buildImpactMapInternal(cwd);
+  await _internals51.saveImpactMap(cwd, impactMap);
   return impactMap;
 }
 async function loadImpactMap(cwd, options) {
@@ -85208,7 +85525,7 @@ async function loadImpactMap(cwd, options) {
         const hasValidValues = Object.values(map3).every((v) => Array.isArray(v) && v.every((item) => typeof item === "string"));
         if (hasValidValues) {
           const generatedAt = new Date(data.generatedAt).getTime();
-          if (!_internals50.isCacheStale(map3, generatedAt)) {
+          if (!_internals51.isCacheStale(map3, generatedAt)) {
             return map3;
           }
           if (options?.skipRebuild) {
@@ -85228,13 +85545,13 @@ async function loadImpactMap(cwd, options) {
   if (options?.skipRebuild) {
     return {};
   }
-  return _internals50.buildImpactMap(cwd);
+  return _internals51.buildImpactMap(cwd);
 }
 async function saveImpactMap(cwd, impactMap) {
   if (!path74.isAbsolute(cwd)) {
     throw new Error(`saveImpactMap requires an absolute project root path, got: "${cwd}"`);
   }
-  _internals50.validateProjectRoot(cwd);
+  _internals51.validateProjectRoot(cwd);
   const cacheDir2 = path74.join(cwd, ".swarm", "cache");
   const cachePath = path74.join(cacheDir2, "impact-map.json");
   if (!fs34.existsSync(cacheDir2)) {
@@ -85258,7 +85575,7 @@ async function analyzeImpact(changedFiles, cwd, budget) {
     };
   }
   const validFiles = changedFiles.filter((f) => typeof f === "string" && f.length > 0 && !f.includes("\x00"));
-  const impactMap = await _internals50.loadImpactMap(cwd);
+  const impactMap = await _internals51.loadImpactMap(cwd);
   const impactedTestsSet = new Set;
   const untestedFiles = [];
   let visitedCount = 0;
@@ -85343,7 +85660,7 @@ async function analyzeImpact(changedFiles, cwd, budget) {
     budgetExceeded
   };
 }
-var IMPORT_REGEX_ES, IMPORT_REGEX_REQUIRE, IMPORT_REGEX_REEXPORT, TS_EXTENSIONS, PYTHON_EXTENSIONS, GO_EXTENSIONS, EXTENSIONS_TO_TRY, goModuleCache, _internals50;
+var IMPORT_REGEX_ES, IMPORT_REGEX_REQUIRE, IMPORT_REGEX_REEXPORT, TS_EXTENSIONS, PYTHON_EXTENSIONS, GO_EXTENSIONS, EXTENSIONS_TO_TRY, goModuleCache, _internals51;
 var init_analyzer = __esm(() => {
   init_manager2();
   init_go();
@@ -85356,7 +85673,7 @@ var init_analyzer = __esm(() => {
   GO_EXTENSIONS = new Set([".go"]);
   EXTENSIONS_TO_TRY = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
   goModuleCache = new Map;
-  _internals50 = {
+  _internals51 = {
     validateProjectRoot,
     normalizePath,
     isCacheStale,
@@ -85739,7 +86056,7 @@ function batchAppendTestRuns(records, workingDir) {
   }
   const historyPath = getHistoryPath(workingDir);
   const historyDir = path75.dirname(historyPath);
-  _internals51.validateProjectRoot(workingDir);
+  _internals52.validateProjectRoot(workingDir);
   if (!fs35.existsSync(historyDir)) {
     fs35.mkdirSync(historyDir, { recursive: true });
   }
@@ -85862,7 +86179,7 @@ function getAllHistory(workingDir) {
   records.sort((a, b) => new Date(a.timestamp).getTime() - new Date(b.timestamp).getTime());
   return records;
 }
-var MAX_HISTORY_PER_TEST = 20, MAX_ERROR_LENGTH = 500, MAX_STACK_LENGTH = 200, MAX_CHANGED_FILES = 50, HISTORY_WRITE_LOCK_TIMEOUT_MS = 5000, HISTORY_WRITE_LOCK_STALE_MS = 60000, HISTORY_WRITE_LOCK_BACKOFF_MS = 10, DANGEROUS_PROPERTY_NAMES, _internals51;
+var MAX_HISTORY_PER_TEST = 20, MAX_ERROR_LENGTH = 500, MAX_STACK_LENGTH = 200, MAX_CHANGED_FILES = 50, HISTORY_WRITE_LOCK_TIMEOUT_MS = 5000, HISTORY_WRITE_LOCK_STALE_MS = 60000, HISTORY_WRITE_LOCK_BACKOFF_MS = 10, DANGEROUS_PROPERTY_NAMES, _internals52;
 var init_history_store = __esm(() => {
   init_manager2();
   DANGEROUS_PROPERTY_NAMES = new Set([
@@ -85870,7 +86187,7 @@ var init_history_store = __esm(() => {
     "constructor",
     "prototype"
   ]);
-  _internals51 = {
+  _internals52 = {
     validateProjectRoot
   };
 });
@@ -86120,7 +86437,7 @@ function readPackageJsonRaw(dir) {
   }
 }
 function readPackageJson(dir) {
-  return _internals52.readPackageJsonRaw(dir);
+  return _internals53.readPackageJsonRaw(dir);
 }
 function readPackageJsonTestScript(dir) {
   return readPackageJson(dir)?.scripts?.test ?? null;
@@ -86290,7 +86607,7 @@ function buildTypescriptBackend() {
     selectEntryPoints: selectEntryPoints3
   };
 }
-var PROFILE_ID4 = "typescript", IMPORT_REGEX_ES2, IMPORT_REGEX_BARE, IMPORT_REGEX_REQUIRE2, IMPORT_REGEX_DYNAMIC, IMPORT_REGEX_REEXPORT2, _internals52;
+var PROFILE_ID4 = "typescript", IMPORT_REGEX_ES2, IMPORT_REGEX_BARE, IMPORT_REGEX_REQUIRE2, IMPORT_REGEX_DYNAMIC, IMPORT_REGEX_REEXPORT2, _internals53;
 var init_typescript = __esm(() => {
   init_default_backend();
   init_profiles();
@@ -86299,7 +86616,7 @@ var init_typescript = __esm(() => {
   IMPORT_REGEX_REQUIRE2 = /require\s*\(\s*['"]([^'"]+)['"]\s*\)/g;
   IMPORT_REGEX_DYNAMIC = /import\s*\(\s*['"]([^'"]+)['"]\s*\)/g;
   IMPORT_REGEX_REEXPORT2 = /export\s+(?:\{[^}]*\}|\*)\s+from\s+['"]([^'"]+)['"]/g;
-  _internals52 = {
+  _internals53 = {
     readPackageJsonRaw,
     readPackageJsonTestScript,
     frameworkFromScriptsTest
@@ -86332,7 +86649,7 @@ __export(exports_dispatch, {
   pickedProfiles: () => pickedProfiles,
   pickBackend: () => pickBackend,
   clearDispatchCache: () => clearDispatchCache,
-  _internals: () => _internals53
+  _internals: () => _internals54
 });
 import * as fs39 from "node:fs";
 import * as path79 from "node:path";
@@ -86387,7 +86704,7 @@ function findManifestRoot(start2) {
   return start2;
 }
 function evictIfNeeded() {
-  if (cache.size <= _internals53.cacheCapacity)
+  if (cache.size <= _internals54.cacheCapacity)
     return;
   let oldestKey;
   let oldestOrder = Infinity;
@@ -86418,7 +86735,7 @@ async function pickBackend(dir) {
     evictIfNeeded();
     return null;
   }
-  const profiles = await _internals53.detectProjectLanguages(root);
+  const profiles = await _internals54.detectProjectLanguages(root);
   if (profiles.length === 0) {
     cache.set(cacheKey, {
       hash: hash4,
@@ -86450,12 +86767,12 @@ function clearDispatchCache() {
   manifestRootCache.clear();
   insertCounter = 0;
 }
-var _internals53, cache, insertCounter = 0, MANIFEST_FILES, _MANIFEST_SET, manifestRootCache;
+var _internals54, cache, insertCounter = 0, MANIFEST_FILES, _MANIFEST_SET, manifestRootCache;
 var init_dispatch = __esm(() => {
   init_backends();
   init_detector();
   init_registry_backend();
-  _internals53 = {
+  _internals54 = {
     detectProjectLanguages,
     cacheCapacity: 64
   };
@@ -88311,9 +88628,9 @@ function getVersionFileVersion(dir) {
 async function runVersionCheck2(dir, _timeoutMs) {
   const startTime = Date.now();
   try {
-    const packageVersion = _internals54.getPackageVersion(dir);
-    const changelogVersion = _internals54.getChangelogVersion(dir);
-    const versionFileVersion = _internals54.getVersionFileVersion(dir);
+    const packageVersion = _internals55.getPackageVersion(dir);
+    const changelogVersion = _internals55.getChangelogVersion(dir);
+    const versionFileVersion = _internals55.getVersionFileVersion(dir);
     const versions3 = [];
     if (packageVersion)
       versions3.push(`package.json: ${packageVersion}`);
@@ -88677,7 +88994,7 @@ async function runPreflight(dir, phase, config3) {
   const reportId = `preflight-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
   let validatedDir;
   try {
-    validatedDir = _internals54.validateDirectoryPath(dir);
+    validatedDir = _internals55.validateDirectoryPath(dir);
   } catch (error93) {
     return {
       id: reportId,
@@ -88697,7 +89014,7 @@ async function runPreflight(dir, phase, config3) {
   }
   let validatedTimeout;
   try {
-    validatedTimeout = _internals54.validateTimeout(config3?.checkTimeoutMs, DEFAULT_CONFIG.checkTimeoutMs);
+    validatedTimeout = _internals55.validateTimeout(config3?.checkTimeoutMs, DEFAULT_CONFIG.checkTimeoutMs);
   } catch (error93) {
     return {
       id: reportId,
@@ -88738,12 +89055,12 @@ async function runPreflight(dir, phase, config3) {
   });
   const checks5 = [];
   log("[Preflight] Running lint check...");
-  const lintResult = await _internals54.runLintCheck(validatedDir, cfg.linter, cfg.checkTimeoutMs);
+  const lintResult = await _internals55.runLintCheck(validatedDir, cfg.linter, cfg.checkTimeoutMs);
   checks5.push(lintResult);
   log(`[Preflight] Lint check: ${lintResult.status} ${lintResult.message}`);
   if (!cfg.skipTests) {
     log("[Preflight] Running tests check...");
-    const testsResult = await _internals54.runTestsCheck(validatedDir, cfg.testScope, cfg.checkTimeoutMs);
+    const testsResult = await _internals55.runTestsCheck(validatedDir, cfg.testScope, cfg.checkTimeoutMs);
     checks5.push(testsResult);
     log(`[Preflight] Tests check: ${testsResult.status} ${testsResult.message}`);
   } else {
@@ -88755,7 +89072,7 @@ async function runPreflight(dir, phase, config3) {
   }
   if (!cfg.skipSecrets) {
     log("[Preflight] Running secrets check...");
-    const secretsResult = await _internals54.runSecretsCheck(validatedDir, cfg.checkTimeoutMs);
+    const secretsResult = await _internals55.runSecretsCheck(validatedDir, cfg.checkTimeoutMs);
     checks5.push(secretsResult);
     log(`[Preflight] Secrets check: ${secretsResult.status} ${secretsResult.message}`);
   } else {
@@ -88767,7 +89084,7 @@ async function runPreflight(dir, phase, config3) {
   }
   if (!cfg.skipEvidence) {
     log("[Preflight] Running evidence check...");
-    const evidenceResult = await _internals54.runEvidenceCheck(validatedDir);
+    const evidenceResult = await _internals55.runEvidenceCheck(validatedDir);
     checks5.push(evidenceResult);
     log(`[Preflight] Evidence check: ${evidenceResult.status} ${evidenceResult.message}`);
   } else {
@@ -88778,12 +89095,12 @@ async function runPreflight(dir, phase, config3) {
     });
   }
   log("[Preflight] Running requirement coverage check...");
-  const reqCoverageResult = await _internals54.runRequirementCoverageCheck(validatedDir, phase);
+  const reqCoverageResult = await _internals55.runRequirementCoverageCheck(validatedDir, phase);
   checks5.push(reqCoverageResult);
   log(`[Preflight] Requirement coverage check: ${reqCoverageResult.status} ${reqCoverageResult.message}`);
   if (!cfg.skipVersion) {
     log("[Preflight] Running version check...");
-    const versionResult = await _internals54.runVersionCheck(validatedDir, cfg.checkTimeoutMs);
+    const versionResult = await _internals55.runVersionCheck(validatedDir, cfg.checkTimeoutMs);
     checks5.push(versionResult);
     log(`[Preflight] Version check: ${versionResult.status} ${versionResult.message}`);
   } else {
@@ -88846,10 +89163,10 @@ function formatPreflightMarkdown(report) {
 async function handlePreflightCommand(directory, _args) {
   const plan = await loadPlan(directory);
   const phase = plan?.current_phase ?? 1;
-  const report = await _internals54.runPreflight(directory, phase);
-  return _internals54.formatPreflightMarkdown(report);
+  const report = await _internals55.runPreflight(directory, phase);
+  return _internals55.formatPreflightMarkdown(report);
 }
-var MIN_CHECK_TIMEOUT_MS = 5000, MAX_CHECK_TIMEOUT_MS = 300000, DEFAULT_CONFIG, _internals54;
+var MIN_CHECK_TIMEOUT_MS = 5000, MAX_CHECK_TIMEOUT_MS = 300000, DEFAULT_CONFIG, _internals55;
 var init_preflight_service = __esm(() => {
   init_gate_bridge();
   init_manager2();
@@ -88868,7 +89185,7 @@ var init_preflight_service = __esm(() => {
     testScope: "convention",
     linter: "biome"
   };
-  _internals54 = {
+  _internals55 = {
     runPreflight,
     formatPreflightMarkdown,
     handlePreflightCommand,
@@ -89909,7 +90226,7 @@ var init_reset_session = __esm(() => {
 });
 
 // src/summaries/manager.ts
-import { mkdirSync as mkdirSync22, readdirSync as readdirSync17, renameSync as renameSync14, rmSync as rmSync5, statSync as statSync18 } from "node:fs";
+import { mkdirSync as mkdirSync22, readdirSync as readdirSync17, renameSync as renameSync13, rmSync as rmSync5, statSync as statSync18 } from "node:fs";
 import * as path84 from "node:path";
 function sanitizeSummaryId(id) {
   if (!id || id.length === 0) {
@@ -89959,7 +90276,7 @@ async function storeSummary(directory, id, fullOutput, summaryText, maxStoredByt
   const tempPath = path84.join(summaryDir, `${sanitizedId}.json.tmp.${Date.now()}.${process.pid}`);
   try {
     await bunWrite(tempPath, entryJson);
-    renameSync14(tempPath, summaryPath);
+    renameSync13(tempPath, summaryPath);
   } catch (error93) {
     try {
       rmSync5(tempPath, { force: true });
@@ -90351,7 +90668,7 @@ async function handleSimulateCommand(directory, args2) {
   }
   let darkMatterPairs;
   try {
-    darkMatterPairs = await _internals34.detectDarkMatter(directory, options);
+    darkMatterPairs = await _internals35.detectDarkMatter(directory, options);
   } catch (err2) {
     const errMsg = err2 instanceof Error ? err2.message : String(err2);
     return `## Simulate Report
@@ -90936,7 +91253,7 @@ async function getStatusData(directory, agents) {
 }
 function enrichWithLeanTurbo(status, directory) {
   const turboMode = hasActiveTurboMode();
-  const leanActive = _internals55.hasActiveLeanTurbo();
+  const leanActive = _internals56.hasActiveLeanTurbo();
   let turboStrategy = "off";
   if (leanActive) {
     turboStrategy = "lean";
@@ -90955,7 +91272,7 @@ function enrichWithLeanTurbo(status, directory) {
     }
   }
   if (leanSessionID) {
-    const runState = _internals55.loadLeanTurboRunState(directory, leanSessionID);
+    const runState = _internals56.loadLeanTurboRunState(directory, leanSessionID);
     if (runState) {
       status.leanTurboPhase = runState.phase;
       status.leanMaxParallelCoders = runState.maxParallelCoders;
@@ -90987,7 +91304,7 @@ function enrichWithLeanTurbo(status, directory) {
       }
     }
   }
-  status.fullAutoActive = _internals55.hasActiveFullAuto();
+  status.fullAutoActive = _internals56.hasActiveFullAuto();
   return status;
 }
 function formatStatusMarkdown(status) {
@@ -91115,7 +91432,7 @@ async function countProposals(directory) {
     return 0;
   }
 }
-var _internals55;
+var _internals56;
 var init_status_service = __esm(() => {
   init_extractors();
   init_knowledge_escalator();
@@ -91125,7 +91442,7 @@ var init_status_service = __esm(() => {
   init_state3();
   init_compaction_service();
   init_context_budget_service();
-  _internals55 = {
+  _internals56 = {
     loadLeanTurboRunState,
     hasActiveLeanTurbo,
     hasActiveFullAuto
@@ -91216,7 +91533,7 @@ async function handleTurboCommand(directory, args2, sessionID) {
   if (arg0 === "on") {
     let strategy = "standard";
     try {
-      const { config: config3 } = _internals56.loadPluginConfigWithMeta(directory);
+      const { config: config3 } = _internals57.loadPluginConfigWithMeta(directory);
       if (config3.turbo?.strategy === "lean") {
         strategy = "lean";
       }
@@ -91271,7 +91588,7 @@ function enableLeanTurbo(session, directory, sessionID) {
   let maxParallelCoders = 4;
   let conflictPolicy = "serialize";
   try {
-    const { config: config3 } = _internals56.loadPluginConfigWithMeta(directory);
+    const { config: config3 } = _internals57.loadPluginConfigWithMeta(directory);
     const leanConfig = config3.turbo?.lean;
     if (leanConfig) {
       maxParallelCoders = leanConfig.max_parallel_coders ?? 4;
@@ -91341,13 +91658,13 @@ function buildStatusMessage2(session, directory, sessionID) {
   ].join(`
 `);
 }
-var _internals56;
+var _internals57;
 var init_turbo = __esm(() => {
   init_config();
   init_state();
   init_state3();
   init_logger();
-  _internals56 = {
+  _internals57 = {
     loadPluginConfigWithMeta
   };
 });
@@ -91413,342 +91730,6 @@ var init_write_retro2 = __esm(() => {
   init_write_retro();
 });
 
-// src/commands/command-dispatch.ts
-function normalizeSwarmCommandInput(command, argumentText) {
-  if (command !== "swarm" && !command.startsWith("swarm-")) {
-    return { isSwarmCommand: false, tokens: [] };
-  }
-  if (command === "swarm") {
-    return {
-      isSwarmCommand: true,
-      tokens: argumentText.trim().split(/\s+/).filter(Boolean)
-    };
-  }
-  const subcommand = command.slice("swarm-".length);
-  const extraArgs = argumentText.trim().split(/\s+/).filter(Boolean);
-  return {
-    isSwarmCommand: true,
-    tokens: [subcommand, ...extraArgs].filter(Boolean)
-  };
-}
-function canonicalCommandKey(resolved) {
-  return resolved.entry.aliasOf ?? resolved.key;
-}
-function formatCommandNotFound(tokens) {
-  const attemptedCommand = tokens[0] || "";
-  const MAX_DISPLAY = 100;
-  const displayCommand = attemptedCommand.length > MAX_DISPLAY ? `${attemptedCommand.slice(0, MAX_DISPLAY)}...` : attemptedCommand;
-  const similar = _internals57.findSimilarCommands(attemptedCommand);
-  const header = `Command \`/swarm ${displayCommand}\` not found.`;
-  const suggestions = similar.length > 0 ? `Did you mean:
-${similar.map((cmd) => `  - /swarm ${cmd}`).join(`
-`)}` : "";
-  const footer = "Run `/swarm help` for all commands.";
-  return [header, suggestions, footer].filter(Boolean).join(`
-
-`);
-}
-async function executeSwarmCommand(args2) {
-  const {
-    directory,
-    agents,
-    sessionID,
-    tokens,
-    packageRoot,
-    buildHelpText,
-    policy
-  } = args2;
-  let text;
-  const resolved = resolveCommand(tokens);
-  if (!resolved) {
-    text = tokens.length === 0 && buildHelpText ? buildHelpText() : formatCommandNotFound(tokens);
-  } else {
-    const policyResult = policy?.(resolved) ?? { allowed: true };
-    if (!policyResult.allowed) {
-      text = policyResult.message;
-    } else {
-      try {
-        text = await resolved.entry.handler({
-          directory,
-          args: resolved.remainingArgs,
-          sessionID,
-          agents,
-          packageRoot,
-          source: "chat"
-        });
-      } catch (_err) {
-        const cmdName = tokens[0] || "unknown";
-        const errMsg = _err instanceof Error ? _err.message : String(_err);
-        text = `Error executing /swarm ${cmdName}: ${errMsg}`;
-      }
-      if (resolved.warning) {
-        text = `${resolved.warning}
-
-${text}`;
-      }
-    }
-  }
-  return {
-    text,
-    resolved: resolved ?? undefined,
-    canonicalKey: resolved ? canonicalCommandKey(resolved) : undefined
-  };
-}
-var init_command_dispatch = __esm(() => {
-  init_registry();
-});
-
-// src/commands/tool-policy.ts
-function classifySwarmCommandToolUse(resolved) {
-  const canonicalKey = canonicalCommandKey(resolved);
-  const args2 = resolved.remainingArgs;
-  if (!SWARM_COMMAND_TOOL_ALLOWLIST.has(canonicalKey)) {
-    if (HUMAN_ONLY_SWARM_COMMANDS.has(canonicalKey)) {
-      return {
-        allowed: false,
-        message: `/swarm ${canonicalKey} is a human-only command. ` + `Present the situation to the user and ask them to run \`/swarm ${canonicalKey}\` themselves ` + `(or \`bunx opencode-swarm run ${canonicalKey}\` from a terminal). ` + `You MUST NOT run it yourself via Bash, swarm_command, or any other tool — ` + `the runtime guardrail will block such attempts.`
-      };
-    }
-    return {
-      allowed: false,
-      message: `/swarm ${canonicalKey} is not available through the chat tool yet.
-
-` + `Use the canonical CLI path for now: \`bunx opencode-swarm run ${canonicalKey}\`.
-` + `Commands with state changes, auto-heal behavior, or subprocesses need confirmation gates before chat-tool support.`
-    };
-  }
-  if (canonicalKey === "config doctor" && args2.some((arg) => arg === "--fix" || arg === "-f")) {
-    return {
-      allowed: false,
-      message: "/swarm config doctor --fix is not available through swarm_command. Run the CLI command directly when you intend to modify config files."
-    };
-  }
-  if (NO_ARGS.has(canonicalKey) && args2.length > 0) {
-    return {
-      allowed: false,
-      message: `/swarm ${canonicalKey} does not accept arguments through swarm_command.`
-    };
-  }
-  if (canonicalKey === "knowledge") {
-    if (args2.length === 0)
-      return { allowed: true };
-    if (args2.length === 1 && (args2[0] === "list" || args2[0] === "unactionable"))
-      return { allowed: true };
-    return {
-      allowed: false,
-      message: "Only `/swarm knowledge`, `/swarm knowledge list`, and `/swarm knowledge unactionable` are available through swarm_command. Knowledge migrate/quarantine/restore/retry-hardening are intentionally excluded."
-    };
-  }
-  if (canonicalKey === "memory") {
-    if (args2.length === 0)
-      return { allowed: true };
-    return {
-      allowed: false,
-      message: "Use `/swarm memory status`, `/swarm memory pending`, `/swarm memory recall-log`, `/swarm memory stale`, `/swarm memory export`, or `/swarm memory evaluate --json` through swarm_command. Memory import, migrate, and compact are intentionally excluded from chat-tool execution."
-    };
-  }
-  if (canonicalKey === "memory evaluate") {
-    if (args2.length === 0)
-      return { allowed: true };
-    if (args2.length === 1 && args2[0] === "--json")
-      return { allowed: true };
-    return {
-      allowed: false,
-      message: "Usage through swarm_command: `/swarm memory evaluate --json`. Custom fixture directories are only available through direct user command execution."
-    };
-  }
-  if (canonicalKey === "sdd status") {
-    if (args2.length === 0)
-      return { allowed: true };
-    if (args2.length === 1 && args2[0] === "--json")
-      return { allowed: true };
-    return {
-      allowed: false,
-      message: "Usage through swarm_command: `/swarm sdd status` or `/swarm sdd status --json`."
-    };
-  }
-  if (canonicalKey === "sdd validate") {
-    if (args2.length === 0)
-      return { allowed: true };
-    if (args2.length === 1 && args2[0] === "--json")
-      return { allowed: true };
-    if (args2.length === 2 && args2[0] === "--change" && /^[A-Za-z0-9_.-]{1,128}$/.test(args2[1])) {
-      return { allowed: true };
-    }
-    return {
-      allowed: false,
-      message: "Usage through swarm_command: `/swarm sdd validate`, `/swarm sdd validate --json`, or `/swarm sdd validate --change <id>`."
-    };
-  }
-  if (canonicalKey === "memory pending" || canonicalKey === "memory recall-log" || canonicalKey === "memory stale") {
-    if (args2.length === 0)
-      return { allowed: true };
-    if (args2.length === 2 && args2[0] === "--limit" && /^\d+$/.test(args2[1])) {
-      return { allowed: true };
-    }
-    return {
-      allowed: false,
-      message: `Usage through swarm_command: \`/swarm ${canonicalKey}\` or ` + `\`/swarm ${canonicalKey} --limit <n>\`.`
-    };
-  }
-  if (canonicalKey === "retrieve") {
-    if (args2.length !== 1 || !SUMMARY_ID_PATTERN.test(args2[0])) {
-      return {
-        allowed: false,
-        message: "Usage through swarm_command: `/swarm retrieve <summary-id>` with a single summary ID such as S1."
-      };
-    }
-  }
-  if (canonicalKey === "benchmark") {
-    const allowedFlags = new Set(["--cumulative", "--ci-gate"]);
-    const invalid = args2.filter((arg) => !allowedFlags.has(arg));
-    if (invalid.length > 0) {
-      return {
-        allowed: false,
-        message: "Only `--cumulative` and `--ci-gate` are supported for `/swarm benchmark` through swarm_command."
-      };
-    }
-  }
-  if (canonicalKey === "show-plan") {
-    if (args2.length > 1 || args2[0] && !/^\d+$/.test(args2[0])) {
-      return {
-        allowed: false,
-        message: "Usage through swarm_command: `/swarm show-plan` or `/swarm show-plan <phase-number>`."
-      };
-    }
-  }
-  if (canonicalKey === "evidence") {
-    if (args2.length > 1 || args2[0] && !TASK_ID_PATTERN.test(args2[0])) {
-      return {
-        allowed: false,
-        message: "Usage through swarm_command: `/swarm evidence` or `/swarm evidence <task-id>`."
-      };
-    }
-  }
-  if (canonicalKey === "help" && args2.length > 2) {
-    return {
-      allowed: false,
-      message: "Usage through swarm_command: `/swarm help` or `/swarm help <command>`."
-    };
-  }
-  return { allowed: true };
-}
-function classifySwarmCommandChatFallbackUse(resolved) {
-  const canonicalKey = canonicalCommandKey(resolved);
-  const args2 = resolved.remainingArgs;
-  if (canonicalKey === "config doctor" && args2.some((arg) => arg === "--fix" || arg === "-f")) {
-    return {
-      allowed: false,
-      message: "/swarm config doctor --fix is not available through chat fallback because it can modify configuration files. Run the CLI command directly when you intend to apply fixes."
-    };
-  }
-  if (canonicalKey === "knowledge migrate" || canonicalKey === "knowledge quarantine" || canonicalKey === "knowledge restore" || canonicalKey === "memory import" || canonicalKey === "memory migrate" || canonicalKey === "memory compact" || canonicalKey === "sdd project") {
-    return {
-      allowed: false,
-      message: `/swarm ${canonicalKey} is not available through chat fallback because it mutates .swarm state. ` + "Run the CLI command directly after confirming the intended state change."
-    };
-  }
-  return { allowed: true };
-}
-var SWARM_COMMAND_TOOL_COMMANDS, SWARM_COMMAND_TOOL_ALLOWLIST, HUMAN_ONLY_SWARM_COMMANDS, NO_ARGS, SUMMARY_ID_PATTERN, TASK_ID_PATTERN;
-var init_tool_policy = __esm(() => {
-  init_command_dispatch();
-  SWARM_COMMAND_TOOL_COMMANDS = [
-    "agents",
-    "config",
-    "config doctor",
-    "doctor tools",
-    "status",
-    "show-plan",
-    "help",
-    "history",
-    "evidence",
-    "evidence summary",
-    "retrieve",
-    "diagnose",
-    "preflight",
-    "benchmark",
-    "knowledge",
-    "memory",
-    "memory status",
-    "memory pending",
-    "memory recall-log",
-    "memory compact",
-    "memory stale",
-    "memory export",
-    "memory evaluate",
-    "memory import",
-    "memory migrate",
-    "sdd",
-    "sdd status",
-    "sdd validate",
-    "sdd project",
-    "sync-plan",
-    "export",
-    "auto-proceed"
-  ];
-  SWARM_COMMAND_TOOL_ALLOWLIST = new Set([
-    "agents",
-    "config",
-    "config doctor",
-    "doctor tools",
-    "status",
-    "show-plan",
-    "help",
-    "history",
-    "evidence",
-    "evidence summary",
-    "retrieve",
-    "diagnose",
-    "preflight",
-    "benchmark",
-    "knowledge",
-    "memory",
-    "memory status",
-    "memory pending",
-    "memory recall-log",
-    "memory stale",
-    "memory export",
-    "memory evaluate",
-    "sdd",
-    "sdd status",
-    "sdd validate",
-    "sync-plan",
-    "export",
-    "auto-proceed"
-  ]);
-  HUMAN_ONLY_SWARM_COMMANDS = new Set([
-    "acknowledge-spec-drift",
-    "reset",
-    "reset-session",
-    "rollback",
-    "checkpoint",
-    "consolidate",
-    "memory import",
-    "memory migrate",
-    "memory compact",
-    "sdd project"
-  ]);
-  NO_ARGS = new Set([
-    "agents",
-    "config",
-    "config doctor",
-    "doctor tools",
-    "status",
-    "history",
-    "evidence summary",
-    "diagnose",
-    "preflight",
-    "sync-plan",
-    "export",
-    "memory",
-    "memory status",
-    "memory export"
-  ]);
-  SUMMARY_ID_PATTERN = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
-  TASK_ID_PATTERN = /^[A-Za-z0-9_.:-]{1,64}$/;
-});
-
 // src/commands/command-names.ts
 var COMMAND_NAMES, COMMAND_NAME_SET;
 var init_command_names = __esm(() => {
@@ -91966,7 +91947,7 @@ async function buildSwarmCommandPrompt(args2) {
     packageRoot,
     registeredAgents
   } = args2;
-  const resolved = _internals57.resolveCommand(tokens);
+  const resolved = _internals13.resolveCommand(tokens);
   if (!resolved) {
     if (tokens.length === 0) {
       return buildHelpText();
@@ -92139,7 +92120,7 @@ function findSimilarCommands(query) {
   }
   const scored = VALID_COMMANDS.map((cmd) => {
     const cmdLower = cmd.toLowerCase();
-    const fullScore = _internals57.levenshteinDistance(q, cmdLower);
+    const fullScore = _internals13.levenshteinDistance(q, cmdLower);
     let tokenScore = Infinity;
     if (cmd.includes(" ") || cmd.includes("-")) {
       const qTokens = q.split(/[\s-]+/);
@@ -92152,7 +92133,7 @@ function findSimilarCommands(query) {
         for (const ct of cmdTokens) {
           if (ct.length === 0)
             continue;
-          const dist = _internals57.levenshteinDistance(qt, ct);
+          const dist = _internals13.levenshteinDistance(qt, ct);
           if (dist < minDist)
             minDist = dist;
         }
@@ -92162,7 +92143,7 @@ function findSimilarCommands(query) {
     }
     const dashStrippedQ = q.replace(/-/g, "");
     const dashStrippedCmd = cmdLower.replace(/-/g, "");
-    const dashScore = _internals57.levenshteinDistance(dashStrippedQ, dashStrippedCmd);
+    const dashScore = _internals13.levenshteinDistance(dashStrippedQ, dashStrippedCmd);
     const score = Math.min(fullScore, tokenScore, dashScore);
     return { cmd, score };
   });
@@ -92194,11 +92175,11 @@ async function handleHelpCommand(ctx) {
     return buildHelpText2();
   }
   const tokens = targetCommand.split(/\s+/);
-  const resolved = _internals57.resolveCommand(tokens);
+  const resolved = _internals13.resolveCommand(tokens);
   if (resolved) {
-    return _internals57.buildDetailedHelp(resolved.key, resolved.entry);
+    return _internals13.buildDetailedHelp(resolved.key, resolved.entry);
   }
-  const similar = _internals57.findSimilarCommands(targetCommand);
+  const similar = _internals13.findSimilarCommands(targetCommand);
   const { buildHelpText: fullHelp } = await Promise.resolve().then(() => (init_commands(), exports_commands));
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
@@ -92269,6 +92250,18 @@ function validateAliases() {
   }
   return { valid: errors5.length === 0, errors: errors5, warnings };
 }
+function validateToolPolicy() {
+  const warnings = [];
+  for (const [name2, entry] of Object.entries(COMMAND_REGISTRY)) {
+    const cmdEntry = entry;
+    if (cmdEntry.aliasOf || cmdEntry.subcommandOf)
+      continue;
+    if (cmdEntry.toolPolicy === undefined) {
+      warnings.push(`Command '${name2}' has no toolPolicy field — it will not be available through the swarm_command tool. Add toolPolicy: 'agent' | 'human-only' | 'restricted' | 'none'.`);
+    }
+  }
+  return { valid: warnings.length === 0, warnings };
+}
 function resolveCommand(tokens) {
   if (tokens.length === 0)
     return null;
@@ -92298,7 +92291,7 @@ function resolveCommand(tokens) {
   }
   return null;
 }
-var COMMAND_REGISTRY, VALID_COMMANDS, _internals57, validation;
+var COMMAND_REGISTRY, VALID_COMMANDS, _internals13, validation;
 var init_registry = __esm(() => {
   init_bundled_skills();
   init_acknowledge_spec_drift();
@@ -92354,19 +92347,23 @@ var init_registry = __esm(() => {
       handler: (ctx) => handleAcknowledgeSpecDriftCommand(ctx.directory, ctx.args, ctx.source === "cli" ? "cli" : ctx.source === "chat" ? "user" : "unknown"),
       description: "Acknowledge that the spec has drifted from the plan and suppress further warnings",
       args: "",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "restricted"
     },
     status: {
       handler: (ctx) => handleStatusCommand(ctx.directory, ctx.agents),
       description: "Show current swarm state",
       category: "core",
-      clashesWithNativeCcCommand: "/status"
+      clashesWithNativeCcCommand: "/status",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "show-plan": {
       handler: (ctx) => handlePlanCommand(ctx.directory, ctx.args),
       description: "Show current plan (optionally filter by phase number)",
       category: "core",
-      args: "[phase-number]"
+      args: "[phase-number]",
+      toolPolicy: "agent"
     },
     plan: {
       handler: (ctx) => handlePlanCommand(ctx.directory, ctx.args),
@@ -92380,32 +92377,41 @@ var init_registry = __esm(() => {
       handler: (ctx) => Promise.resolve(handleAgentsCommand(ctx.agents, undefined)),
       description: "List registered agents",
       category: "core",
-      clashesWithNativeCcCommand: "/agents"
+      clashesWithNativeCcCommand: "/agents",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     help: {
-      handler: (ctx) => _internals57.handleHelpCommand(ctx),
+      handler: (ctx) => _internals13.handleHelpCommand(ctx),
       description: "Show help for swarm commands",
       category: "core",
       args: "[command]",
-      details: "Without argument, shows full command listing. With argument, shows detailed help for a specific command."
+      details: "Without argument, shows full command listing. With argument, shows detailed help for a specific command.",
+      toolPolicy: "agent"
     },
     history: {
       handler: (ctx) => handleHistoryCommand(ctx.directory, ctx.args),
       description: "Show completed phases summary",
       category: "utility",
-      clashesWithNativeCcCommand: "/history"
+      clashesWithNativeCcCommand: "/history",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     config: {
       handler: (ctx) => handleConfigCommand(ctx.directory, ctx.args),
       description: "Show current resolved configuration",
       category: "config",
-      clashesWithNativeCcCommand: "/config"
+      clashesWithNativeCcCommand: "/config",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "config doctor": {
       handler: (ctx) => handleDoctorCommand(ctx.directory, ctx.args),
       description: "Run config doctor checks",
       subcommandOf: "config",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "config-doctor": {
       handler: (ctx) => handleDoctorCommand(ctx.directory, ctx.args),
@@ -92418,7 +92424,9 @@ var init_registry = __esm(() => {
     "doctor tools": {
       handler: (ctx) => handleDoctorToolsCommand(ctx.directory, ctx.args),
       description: "Run tool registration coherence check",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "doctor-tools": {
       handler: (ctx) => handleDoctorToolsCommand(ctx.directory, ctx.args),
@@ -92430,7 +92438,9 @@ var init_registry = __esm(() => {
     diagnose: {
       handler: (ctx) => handleDiagnoseCommand(ctx.directory, ctx.args),
       description: "Run health check on swarm state",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     diagnosis: {
       handler: (ctx) => handleDiagnoseCommand(ctx.directory, ctx.args),
@@ -92442,26 +92452,32 @@ var init_registry = __esm(() => {
     preflight: {
       handler: (ctx) => handlePreflightCommand(ctx.directory, ctx.args),
       description: "Run preflight automation checks",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "sync-plan": {
       handler: (ctx) => handleSyncPlanCommand(ctx.directory, ctx.args),
       description: "Ensure plan.json and plan.md are synced",
       args: "",
-      category: "config"
+      category: "config",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     benchmark: {
       handler: (ctx) => handleBenchmarkCommand(ctx.directory, ctx.args),
       description: "Show performance metrics [--cumulative] [--ci-gate]",
       args: "--cumulative, --ci-gate",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent"
     },
     learning: {
       handler: (ctx) => handleLearningCommand(ctx.directory, ctx.args),
       description: "Show learning metrics and violation trends",
       args: "--json, --phase <N>",
       details: "Computes aggregate learning metrics from knowledge events: violation-rate trends, directive application rates, escalation frequency, per-entry ROI, and never-applied entries. Surfaces a learning summary for the curator digest.",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent"
     },
     export: {
       handler: (ctx) => handleExportCommand(ctx.directory, ctx.args),
@@ -92469,14 +92485,17 @@ var init_registry = __esm(() => {
       args: "",
       details: "Exports the current plan and context as JSON to stdout. Useful for piping to external tools or debugging swarm state.",
       category: "utility",
-      clashesWithNativeCcCommand: "/export"
+      clashesWithNativeCcCommand: "/export",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     evidence: {
       handler: (ctx) => handleEvidenceCommand(ctx.directory, ctx.args),
       description: "Show evidence bundles [taskId]",
       args: "<taskId>",
       details: 'Displays review results, test verdicts, and other evidence bundles for the given task ID (e.g., "2.1").',
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent"
     },
     "evidence summary": {
       handler: (ctx) => handleEvidenceSummaryCommand(ctx.directory),
@@ -92484,7 +92503,9 @@ var init_registry = __esm(() => {
       subcommandOf: "evidence",
       args: "",
       details: "Generates a summary showing completion ratio across all tasks, lists blockers, and identifies missing evidence.",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "evidence-summary": {
       handler: (ctx) => handleEvidenceSummaryCommand(ctx.directory),
@@ -92544,13 +92565,15 @@ var init_registry = __esm(() => {
       description: "Archive old evidence bundles [--dry-run]",
       details: "Archives evidence bundles older than max_age_days (config, default 90) or beyond max_bundles cap (config, default 1000). --dry-run previews which bundles would be archived without deleting them. Applies two-tier retention: age-based first, then count-based on oldest remaining.",
       args: "--dry-run",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "none"
     },
     curate: {
       handler: (ctx) => handleCurateCommand(ctx.directory, ctx.args),
       description: "Run knowledge curation and hive promotion review",
       args: "",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "none"
     },
     consolidate: {
       handler: (ctx) => handleConsolidateCommand(ctx.directory, ctx.args, {
@@ -92559,13 +92582,15 @@ var init_registry = __esm(() => {
       description: "Run quota-bounded skill-improver consolidation and stage skill proposals",
       details: "Runs the same consolidation pass used by scheduled skill_improver trigger points: queue hardening, skill-improver proposal writing, and optional draft-skill generation. It never auto-activates skills. Use --respect-interval to obey the configured cadence instead of forcing a run.",
       args: "--force, --respect-interval, --evaluate",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "restricted"
     },
     "dark-matter": {
       handler: (ctx) => handleDarkMatterCommand(ctx.directory, ctx.args),
       description: "Detect hidden file couplings via co-change NPMI analysis",
       args: "--threshold <number>, --min-commits <number>",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "none"
     },
     finalize: {
       handler: (ctx) => handleCloseCommand(ctx.directory, ctx.args, {
@@ -92574,7 +92599,8 @@ var init_registry = __esm(() => {
       description: "Use /swarm finalize to finalize the swarm project and archive evidence",
       details: "Idempotent 4-stage terminal finalization: (1) finalize writes retrospectives for in-progress phases, (2) archive creates timestamped bundle of swarm artifacts and evidence, (3) clean removes active-state files for a clean slate, (4) align performs safe git ff-only to main. Resets agent sessions and delegation chains. Reads .swarm/close-lessons.md for explicit lessons and runs curation. Use --skill-review to run the quota-bounded skill_improver in proposal mode.",
       args: "--prune-branches, --skill-review",
-      category: "core"
+      category: "core",
+      toolPolicy: "none"
     },
     close: {
       handler: (ctx) => handleCloseCommand(ctx.directory, ctx.args, {
@@ -92594,7 +92620,8 @@ var init_registry = __esm(() => {
       description: "Run the post-mortem agent: project-end synthesis, queue triage, and final curation pass",
       details: "Reads .swarm/ evidence (knowledge entries, events, curator digests, proposals, retrospectives, drift reports) and produces a post-mortem report at .swarm/post-mortem-{planId}.md. Idempotent: re-runs skip if report exists unless --force is passed.",
       args: "--force",
-      category: "core"
+      category: "core",
+      toolPolicy: "agent"
     },
     concurrency: {
       handler: (ctx) => handleConcurrencyCommand(ctx.directory, ctx.args, ctx.sessionID),
@@ -92611,115 +92638,133 @@ Subcommands:
 ` + `  concurrency reset             — Clear the session concurrency override
 ` + `
 ` + "Session-scoped — resets on new session.",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "none"
     },
     simulate: {
       handler: (ctx) => handleSimulateCommand(ctx.directory, ctx.args),
       description: "Dry-run hidden coupling analysis with configurable thresholds",
       args: "--threshold <number>, --min-commits <number>",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "none"
     },
     sdd: {
       handler: (ctx) => handleSddCommand(ctx.directory, ctx.args),
       description: "Manage OpenSpec-compatible SDD artifacts and effective spec projection",
       args: "status|validate|project [--json] [--change <id>] [--dry-run]",
       details: "Parent command for spec-driven development artifacts. Use sdd status to inspect .swarm/spec.md plus openspec/ artifacts, sdd validate to validate OpenSpec-compatible deltas, and sdd project to materialize the effective spec into .swarm/spec.md for planning.",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent"
     },
     "sdd status": {
       handler: (ctx) => handleSddStatusCommand(ctx.directory, ctx.args),
       description: "Show OpenSpec-compatible SDD status and effective spec source",
       subcommandOf: "sdd",
       args: "[--json]",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent"
     },
     "sdd validate": {
       handler: (ctx) => handleSddValidateCommand(ctx.directory, ctx.args),
       description: "Validate OpenSpec-compatible artifacts and effective spec projection",
       subcommandOf: "sdd",
       args: "[--json] [--change <id>]",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent"
     },
     "sdd project": {
       handler: (ctx) => handleSddProjectCommand(ctx.directory, ctx.args),
       description: "Materialize the OpenSpec-compatible effective spec into .swarm/spec.md",
       subcommandOf: "sdd",
       args: "[--dry-run] [--json] [--change <id>]",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "human-only"
     },
     analyze: {
       handler: (ctx) => handleAnalyzeCommand(ctx.directory, ctx.args),
       description: "Analyze spec.md vs plan.md for requirement coverage gaps",
       args: "",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     clarify: {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleClarifyCommand),
       description: "Clarify and refine an existing feature specification",
       args: "[description-text]",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     specify: {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleSpecifyCommand),
       description: "Generate or import a feature specification [description]",
       args: "[description-text]",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     brainstorm: {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleBrainstormCommand),
       description: "Enter architect MODE: BRAINSTORM — structured seven-phase planning workflow [topic]",
       args: "[topic-text]",
       details: "Triggers the architect to run the brainstorm workflow: CONTEXT SCAN, single-question DIALOGUE, APPROACHES, DESIGN SECTIONS, SPEC WRITE + SELF-REVIEW, QA GATE SELECTION, TRANSITION. Use for new plans where requirements need to be drawn out before writing spec.md / plan.md.",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     council: {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleCouncilCommand),
       description: "Enter architect MODE: COUNCIL — multi-model deliberation [question] [--preset <name>] [--spec-review]",
       args: "<question> [--preset <name>] [--spec-review]",
       details: "Triggers the architect to convene a three-agent General Council: Generalist (reviewer model), Skeptic (critic model), and Domain Expert (SME model). Use --preset <name> to choose a named member preset from council.general.presets. " + "The architect first runs 1–3 targeted web searches and passes a compiled RESEARCH CONTEXT " + "to all three agents before dispatching them in parallel. Agents deliberate using the NSED peer-review protocol (Round 1 independent analysis, Round 2 MAINTAIN/CONCEDE/NUANCE for disagreements). The architect synthesizes the final answer directly from convene_general_council output. --spec-review switches to single-pass advisory mode for spec review. Requires council.general.enabled: true and a search API key in the resolved config: global ~/.config/opencode/opencode-swarm.json, then project .opencode/opencode-swarm.json overrides.",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     "pr-review": {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handlePrReviewCommand),
       description: "Launch deep PR review with multi-lane analysis [url] [--council]",
       args: "<pr-url|owner/repo#N|N> [--council]",
       details: "Launches a structured PR review: reconstructs PR intent via obligation extraction cascade, runs 6 parallel explorer lanes through the deterministic dispatch_lanes join barrier (correctness, security, dependencies, docs-intent-vs-actual, tests, performance-architecture), validates findings through independent reviewer confirmation, applies critic challenge to HIGH/CRITICAL findings, synthesizes structured report. --council variant fires adversarial multi-model review. Supports full GitHub URL, owner/repo#N shorthand, or bare PR number (resolves against origin remote).",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     "pr-feedback": {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handlePrFeedbackCommand),
       description: "Ingest and close known PR feedback (review comments, CI failures, conflicts) [pr] [instructions]",
       args: "[url|owner/repo#N|N] [instructions...]",
       details: "Triggers MODE: PR_FEEDBACK — ingests existing pull-request feedback (review threads, requested changes, CI/check failures, merge conflicts, stale branch state, pasted notes), verifies every claim against source, clusters related problems, fixes confirmed items, validates the branch, and reports closure status for every ledger item. Distinct from /swarm pr-review, which discovers new findings. The PR reference is optional: with none, the architect builds the ledger from the current PR/branch; text after the reference is forwarded as extra instructions. Supports full GitHub URL, owner/repo#N shorthand, or bare PR number (resolved against origin).",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     "pr subscribe": {
       handler: (ctx) => handlePrSubscribeCommand(ctx.directory, ctx.args, ctx.sessionID),
       description: "Subscribe the current session to PR state-change notifications",
       args: "<pr-url|owner/repo#N|N>",
       details: "Subscribes the current session to receive advisory notifications for the specified PR. When pr_monitor.enabled is true, the background polling worker will detect CI failures, new comments, merge conflicts, review state changes, and merge/close events. Notifications are delivered as session-scoped advisories with dedup tokens. Supports full GitHub URL, owner/repo#N shorthand, or bare PR number (resolved against origin). Requires pr_monitor.enabled: true in config.",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "human-only"
     },
     "pr unsubscribe": {
       handler: (ctx) => handlePrUnsubscribeCommand(ctx.directory, ctx.args, ctx.sessionID),
       description: "Unsubscribe the current session from PR state-change notifications",
       args: "<pr-url|owner/repo#N|N>",
       details: "Unsubscribes the current session from receiving advisory notifications for the specified PR. Removes the active subscription record. Supports full GitHub URL, owner/repo#N shorthand, or bare PR number (resolved against origin).",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "human-only"
     },
     "pr status": {
       handler: (ctx) => handlePrMonitorStatusCommand(ctx.directory, ctx.args, ctx.sessionID),
       description: "Show PR monitor subscription status for the current session",
       args: "",
       details: "Displays all active PR subscriptions for the current session. Shows PR URL, last checked time, watching status, and error count per subscription. Also shows total active subscriptions across all sessions.",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "deep-dive": {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleDeepDiveCommand),
       description: "Launch deep codebase audit with parallel explorer waves, dual reviewers, and critic challenge [scope]",
       args: "<scope> [--profile standard|security|ux|architecture|full] [--max-explorers 1..8] [--json] [--skip-update] [--allow-dirty]",
       details: "Runs a read-only deep audit of the specified scope using parallel explorer waves (8-file cap per mission, ~3500 line guardrail), always 2 parallel reviewers for verification, and sequential critic challenge on HIGH/CRITICAL findings. Profiles select explorer lanes: standard (5 lanes), security, ux, architecture, full (all 8 lanes). Emits a structured findings report without mutating source code.",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     "deep dive": {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleDeepDiveCommand),
@@ -92733,7 +92778,8 @@ Subcommands:
       description: "Launch a multi-source, fact-checked deep research pass and synthesize a cited report [question]",
       args: "<question> [--depth standard|exhaustive] [--max-researchers 1..6] [--rounds 1..4] [--brief]",
       details: "Runs the orchestrator-worker deep-research protocol: the architect decomposes the question into subtopics, gathers evidence with web_search and web_fetch across up to N iterative rounds, dispatches parallel sme synthesis workers, verifies every claim against cited sources with dual reviewers, challenges high-stakes claims with the critic, and presents a cited report in chat. Read-only — does not mutate source code, delegate to coder, or call declare_scope. Requires council.general.enabled and a search API key.",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     "deep research": {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleDeepResearchCommand),
@@ -92747,7 +92793,8 @@ Subcommands:
       description: "Launch codebase-review-swarm for a quote-grounded full-repo or large-subsystem audit",
       args: "[scope] [--mode phase0|complete|defect|security|correctness|testing|ui|performance|ai-slop|enhancements|custom] [--tracks <list>] [--continue <run-id>] [--json] [--skip-update] [--allow-dirty]",
       details: "Runs the codebase-review-swarm workflow: Phase 0 inventory, selected-track depth planning, non-diluting review passes, coverage closure, reviewer validation, critic challenge, and .swarm/review-v8 artifacts. Materializes the bundled skill package if missing, then emits a MODE signal; the architect workflow must not mutate source files.",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     "codebase review": {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleCodebaseReviewCommand),
@@ -92761,7 +92808,8 @@ Subcommands:
       description: "Generate or sync language-agnostic design docs (domain, technical-spec, behavior-spec, reference/) for the project under build [description]",
       args: "<description> [--out <dir>] [--lang <name>] [--update]",
       details: "Triggers the architect to enter MODE: DESIGN_DOCS — delegates to the docs_design agent to author/sync docs/domain.md, docs/technical-spec.md, docs/behavior-spec.md, and docs/reference/* (plus reference/traceability.json and design-changelog.md). Normative docs are 100% language-agnostic; all framework-specific material is quarantined under reference/. --update syncs existing docs to current code/spec instead of generating fresh. Requires design_docs.enabled: true.",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     "design docs": {
       handler: (ctx) => handleModeCommandWithBundledSkills(ctx, handleDesignDocsCommand),
@@ -92775,21 +92823,24 @@ Subcommands:
       description: "Ingest a GitHub issue into the swarm workflow [url] [--plan] [--trace] [--no-repro]",
       args: "<issue-url|owner/repo#N|N> [--plan] [--trace] [--no-repro]",
       details: "Triggers the architect to enter MODE: ISSUE_INGEST — ingests a GitHub issue, restructures it into a normalized intake note, localizes root cause through hypothesis-driven tracing, and outputs a resolution spec. --plan transitions to plan creation after spec generation. --trace runs the full fix-and-PR workflow (implies --plan). --no-repro skips the reproduction step. Supports full GitHub URL, owner/repo#N shorthand, or bare issue number (resolves against origin remote).",
-      category: "agent"
+      category: "agent",
+      toolPolicy: "none"
     },
     "qa-gates": {
       handler: (ctx) => handleQaGatesCommand(ctx.directory, ctx.args, ctx.sessionID),
       description: "View or modify QA gate profile for the current plan [enable|override <gate>...]",
       args: "[show|enable|override] <gate>...",
       details: "show: display spec-level, session-override, and effective QA gates for the current plan. enable: persist gate(s) into the locked-once profile (architect; rejected after critic approval lock). override: session-only ratchet-tighter enable. Valid gates: reviewer, test_engineer, council_mode, sme_enabled, critic_pre_plan, hallucination_guard, sast_enabled, mutation_test, phase_council, drift_check, final_council.",
-      category: "config"
+      category: "config",
+      toolPolicy: "none"
     },
     promote: {
       handler: (ctx) => handlePromoteCommand(ctx.directory, ctx.args),
       description: "Manually promote lesson to hive knowledge",
       details: "Promotes a lesson directly to hive knowledge (--category flag sets category) or references an existing swarm lesson by ID (--from-swarm). Validates lesson text before promotion. Either direct text or --from-swarm ID is required.",
       args: "--category <category>, --from-swarm <lesson-id>, <lesson-text>",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "none"
     },
     reset: {
       handler: (ctx) => handleResetCommand(ctx.directory, ctx.args),
@@ -92797,35 +92848,40 @@ Subcommands:
       details: "DELETES plan.md, context.md, and summaries/ directory from .swarm/. Stops background automation and clears in-memory queues. SAFETY: requires --confirm flag — without it, displays a warning and tips to export first.",
       args: "--confirm (required)",
       category: "utility",
-      clashesWithNativeCcCommand: "/reset"
+      clashesWithNativeCcCommand: "/reset",
+      toolPolicy: "restricted"
     },
     "reset-session": {
       handler: (ctx) => handleResetSessionCommand(ctx.directory, ctx.args),
       description: "Clear session state while preserving plan, evidence, and knowledge",
       details: "Deletes only .swarm/session/state.json and any other session files. Clears in-memory agent sessions and delegation chains. Preserves plan, evidence, and knowledge for cross-session continuity.",
       args: "",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "restricted"
     },
     rollback: {
       handler: (ctx) => handleRollbackCommand(ctx.directory, ctx.args),
       description: "Restore swarm state to a checkpoint <phase>",
       details: "Restores .swarm/ state by directly overwriting files from a checkpoint directory (checkpoints/phase-<N>). Writes rollback event to events.jsonl. Without phase argument, lists available checkpoints. Partial failures are reported but processing continues.",
       args: "<phase-number>",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "restricted"
     },
     retrieve: {
       handler: (ctx) => handleRetrieveCommand(ctx.directory, ctx.args),
       description: "Retrieve full output from a summary <id>",
       args: "<summary-id>",
       details: "Loads the full tool output that was previously summarized (referenced by IDs like S1, S2). Use when you need the complete output instead of the truncated summary.",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent"
     },
     handoff: {
       handler: (ctx) => handleHandoffCommand(ctx.directory, ctx.args),
       description: "Prepare state for clean model switch (new session)",
       args: "",
       details: "Generates handoff.md with full session state snapshot, including plan progress, recent decisions, and agent delegation history. Prepended to the next session prompt for seamless model switches.",
-      category: "core"
+      category: "core",
+      toolPolicy: "none"
     },
     turbo: {
       handler: (ctx) => handleTurboCommand(ctx.directory, ctx.args, ctx.sessionID),
@@ -92847,28 +92903,32 @@ Subcommands:
 ` + `  turbo status       — show detailed status including active strategy and lanes
 ` + `
 ` + "Session-scoped — resets on new session.",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "none"
     },
     "full-auto": {
       handler: (ctx) => handleFullAutoCommand(ctx.directory, ctx.args, ctx.sessionID),
       description: "Toggle Full-Auto Mode for the active session [on [mode]|off|status]",
       args: "on [assisted|supervised|strict], off, status",
       details: 'First-class toggle for Full-Auto Mode — autonomous execution with the critic reviewing escalations on your behalf. No config-level enablement is required: "on" activates immediately (unless full_auto.locked is true in config), "off" disarms the run and returns the session to normal interactive operation, "status" reports the durable run state. ' + 'An optional mode after "on" overrides full_auto.mode for this run: assisted (critic consulted only on policy escalations), supervised (default — risky/high-impact actions reviewed by the critic), strict (ALL plan mutations reviewed by the critic). ' + "While active, the critic answers architect questions and reviews phase boundaries, delegations, and risky actions on your behalf; only ESCALATE_TO_HUMAN verdicts halt the run for your input. The run state is durable (.swarm/full-auto-state.json) and survives restarts; toggle with no argument flips the current state.",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "none"
     },
     "auto-proceed": {
       handler: (ctx) => handleAutoProceedCommand(ctx.directory, ctx.args, ctx.sessionID),
       description: "Toggle or set auto-proceed override for the active session",
       args: "[on|off]",
       category: "config",
-      details: 'Without argument, toggles auto-proceed mode. With "on" or "off", sets the state explicitly.'
+      details: 'Without argument, toggles auto-proceed mode. With "on" or "off", sets the state explicitly.',
+      toolPolicy: "agent"
     },
     "write-retro": {
       handler: (ctx) => handleWriteRetroCommand(ctx.directory, ctx.args),
       description: "Write a retrospective evidence bundle for a completed phase <json>",
       details: "Writes retrospective evidence bundle to .swarm/evidence/retro-{phase}/evidence.json. Required JSON: phase, summary, task_count, task_complexity, total_tool_calls, coder_revisions, reviewer_rejections, test_failures, security_findings, integration_issues. Optional: lessons_learned (max 5), top_rejection_reasons, task_id, metadata.",
       args: "<json: {phase, summary, task_count, task_complexity, ...}>",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "none"
     },
     "knowledge migrate": {
       handler: (ctx) => handleKnowledgeMigrateCommand(ctx.directory, ctx.args),
@@ -92912,75 +92972,89 @@ Subcommands:
     knowledge: {
       handler: (ctx) => handleKnowledgeListCommand(ctx.directory, ctx.args),
       description: "List knowledge entries",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent"
     },
     memory: {
       handler: (ctx) => handleMemoryCommand(ctx.directory, ctx.args),
       description: "Show Swarm memory commands",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "memory status": {
       handler: (ctx) => handleMemoryStatusCommand(ctx.directory, ctx.args),
       description: "Show Swarm memory provider, JSONL, and migration status",
       subcommandOf: "memory",
       args: "",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "memory pending": {
       handler: (ctx) => handleMemoryPendingCommand(ctx.directory, ctx.args),
       description: "Show pending Swarm memory proposals and rejection reasons",
       subcommandOf: "memory",
       args: "--limit <n>",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent"
     },
     "memory recall-log": {
       handler: (ctx) => handleMemoryRecallLogCommand(ctx.directory, ctx.args),
       description: "Summarize Swarm memory recall usage",
       subcommandOf: "memory",
       args: "--limit <n>",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent"
     },
     "memory compact": {
       handler: (ctx) => handleMemoryCompactCommand(ctx.directory, ctx.args),
       description: "Compact deleted, superseded, and expired scratch memories",
       subcommandOf: "memory",
       args: "--confirm",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "human-only"
     },
     "memory stale": {
       handler: (ctx) => handleMemoryStaleCommand(ctx.directory, ctx.args),
       description: "List stale and low-utility Swarm memories",
       subcommandOf: "memory",
       args: "--limit <n>",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent"
     },
     "memory export": {
       handler: (ctx) => handleMemoryExportCommand(ctx.directory, ctx.args),
       description: "Export current Swarm memory to JSONL files",
       subcommandOf: "memory",
       args: "",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "agent",
+      toolNoArgs: true
     },
     "memory evaluate": {
       handler: (ctx) => handleMemoryEvaluateCommand(ctx.directory, ctx.args),
       description: "Run golden Swarm memory recall evaluation fixtures",
       subcommandOf: "memory",
       args: "--json, --fixtures <directory>",
-      category: "diagnostics"
+      category: "diagnostics",
+      toolPolicy: "agent"
     },
     "memory import": {
       handler: (ctx) => handleMemoryImportCommand(ctx.directory, ctx.args),
       description: "Import legacy JSONL memory into SQLite",
       subcommandOf: "memory",
       args: "",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "human-only"
     },
     "memory migrate": {
       handler: (ctx) => handleMemoryMigrateCommand(ctx.directory, ctx.args),
       description: "Run the one-time legacy JSONL to SQLite migration",
       subcommandOf: "memory",
       args: "",
-      category: "utility"
+      category: "utility",
+      toolPolicy: "human-only"
     },
     checkpoint: {
       handler: (ctx) => handleCheckpointCommand(ctx.directory, ctx.args),
@@ -92988,19 +93062,21 @@ Subcommands:
       details: "save: creates named snapshot of current .swarm/ state. restore: soft-resets to checkpoint by overwriting current .swarm/ files. delete: removes named checkpoint. list: shows all checkpoints with timestamps. All subcommands require a label except list.",
       args: "<save|restore|delete|list> <label>",
       category: "utility",
-      clashesWithNativeCcCommand: "/checkpoint"
+      clashesWithNativeCcCommand: "/checkpoint",
+      toolPolicy: "restricted"
     }
   };
   VALID_COMMANDS = Object.keys(COMMAND_REGISTRY);
-  _internals57 = {
+  _internals13 = {
     handleHelpCommand,
     validateAliases,
+    validateToolPolicy,
     resolveCommand,
     levenshteinDistance: levenshteinDistance2,
     findSimilarCommands,
     buildDetailedHelp
   };
-  validation = _internals57.validateAliases();
+  validation = _internals13.validateAliases();
   if (!validation.valid) {
     throw new Error(`COMMAND_REGISTRY alias validation failed:
 ${validation.errors.join(`
@@ -93011,6 +93087,16 @@ ${validation.errors.join(`
 ${validation.warnings.join(`
 `)}`);
   }
+  try {
+    const toolPolicyValidation = _internals13.validateToolPolicy();
+    if (toolPolicyValidation.warnings.length > 0) {
+      console.warn(`COMMAND_REGISTRY toolPolicy warnings:
+${toolPolicyValidation.warnings.join(`
+`)}`);
+    }
+  } catch (e) {
+    console.warn(`COMMAND_REGISTRY toolPolicy validation failed (non-fatal): ${e.message}`);
+  }
 });
 
 // src/agents/architect.ts
@@ -97448,7 +97534,7 @@ __export(exports_evidence_summary_integration, {
   createEvidenceSummaryIntegration: () => createEvidenceSummaryIntegration,
   EvidenceSummaryIntegration: () => EvidenceSummaryIntegration
 });
-import { existsSync as existsSync50, mkdirSync as mkdirSync24, writeFileSync as writeFileSync14 } from "node:fs";
+import { existsSync as existsSync50, mkdirSync as mkdirSync24, writeFileSync as writeFileSync13 } from "node:fs";
 import * as path90 from "node:path";
 function persistSummary(projectDir, artifact, filename) {
   const swarmPath = path90.join(projectDir, ".swarm");
@@ -97457,7 +97543,7 @@ function persistSummary(projectDir, artifact, filename) {
   }
   const artifactPath = path90.join(swarmPath, filename);
   const content = JSON.stringify(artifact, null, 2);
-  writeFileSync14(artifactPath, content, "utf-8");
+  writeFileSync13(artifactPath, content, "utf-8");
   log("[EvidenceSummaryIntegration] Summary persisted", {
     path: artifactPath,
     size: content.length
@@ -98467,17 +98553,17 @@ import {
   existsSync as existsSync62,
   mkdirSync as mkdirSync31,
   readFileSync as readFileSync41,
-  renameSync as renameSync20,
+  renameSync as renameSync19,
   unlinkSync as unlinkSync15,
-  writeFileSync as writeFileSync21
+  writeFileSync as writeFileSync20
 } from "node:fs";
 import * as path103 from "node:path";
 function writeRawSidecar(absPath, bundle) {
   mkdirSync31(path103.dirname(absPath), { recursive: true });
   const tempFile = `${absPath}.tmp-${Date.now()}-${process.pid}`;
   try {
-    writeFileSync21(tempFile, JSON.stringify(bundle, null, 2), "utf-8");
-    renameSync20(tempFile, absPath);
+    writeFileSync20(tempFile, JSON.stringify(bundle, null, 2), "utf-8");
+    renameSync19(tempFile, absPath);
   } finally {
     if (existsSync62(tempFile)) {
       try {
@@ -104782,6 +104868,7 @@ function createBackgroundCompletionObserver(opts) {
 // src/index.ts
 init_pr_subscriptions();
 init_commands();
+init_registry();
 init_config();
 init_bundled_skills();
 init_constants();
@@ -105497,7 +105584,7 @@ async function writeFullAutoOversightEvidence(directory, phase, event) {
   }
 }
 async function dispatchFullAutoOversight(input) {
-  const client = _internals20.swarmState.opencodeClient;
+  const client = _internals21.swarmState.opencodeClient;
   const sequence = nextFullAutoOversightSequence(input.directory);
   oversightSequenceCounter = sequence;
   const beforeStatus = loadFullAutoRunState(input.directory, input.sessionID)?.status;
@@ -105831,7 +105918,7 @@ init_state();
 init_utils();
 init_bun_compat();
 init_utils2();
-import { renameSync as renameSync17, unlinkSync as unlinkSync13 } from "node:fs";
+import { renameSync as renameSync16, unlinkSync as unlinkSync13 } from "node:fs";
 import * as nodePath2 from "node:path";
 function createAgentActivityHooks(config3, directory) {
   if (config3.hooks?.agent_activity === false) {
@@ -105906,7 +105993,7 @@ async function doFlush(directory) {
     const tempPath = `${path98}.tmp`;
     try {
       await bunWrite(tempPath, updated);
-      renameSync17(tempPath, path98);
+      renameSync16(tempPath, path98);
     } catch (writeError) {
       try {
         unlinkSync13(tempPath);
@@ -107478,7 +107565,7 @@ Critic reasoning: ${criticResult.reasoning}`
   }
 }
 async function dispatchCriticAndWriteEvent(directory, architectOutput, criticContext, criticModel, escalationType, interactionCount, deadlockCount, oversightAgentName, sessionID) {
-  const client = _internals20.swarmState.opencodeClient;
+  const client = _internals21.swarmState.opencodeClient;
   if (!client) {
     warn("[full-auto-intercept] No opencodeClient — critic dispatch skipped (fallback to PENDING)");
     const result = {
@@ -107605,11 +107692,11 @@ function createFullAutoInterceptHook(config3, directory) {
     if (!architectText)
       return;
     const sessionID = architectMessage.info?.sessionID;
-    if (!_internals20.hasActiveFullAuto(sessionID))
+    if (!_internals21.hasActiveFullAuto(sessionID))
       return;
     let session = null;
     if (sessionID) {
-      session = _internals20.ensureAgentSession(sessionID);
+      session = _internals21.ensureAgentSession(sessionID);
     }
     if (session) {
       const interactionCount = session.fullAutoInteractionCount ?? 0;
@@ -114359,13 +114446,14 @@ function evictCooldownMap() {
 }
 function execGit2(directory, args2, opts) {
   return new Promise((resolve46, reject) => {
-    child_process7.execFile("git", args2, {
+    const proc = child_process7.execFile("git", args2, {
       encoding: "utf-8",
       cwd: directory,
       timeout: opts.timeoutMs,
       maxBuffer: opts.maxBuffer,
       stdio: ["ignore", "pipe", "pipe"]
     }, (error93, stdout) => {
+      proc.kill();
       if (error93) {
         reject(error93);
         return;
@@ -114467,15 +114555,26 @@ async function dispatchReviewer(directory, prompt, agentName, timeoutMs) {
     client.session.delete({ path: { id: sessionId } }).catch(() => {});
   }
 }
+var _eventWriteLockChain = Promise.resolve();
+function withEventWriteLock(fn2) {
+  let release;
+  _eventWriteLockChain = new Promise((r) => {
+    release = r;
+  });
+  try {
+    return fn2();
+  } finally {
+    release();
+  }
+}
 function writeAutoReviewEvent(directory, event) {
   try {
     const eventsPath = validateSwarmPath(directory, "events.jsonl");
-    const existing = fs71.existsSync(eventsPath) ? fs71.readFileSync(eventsPath, "utf-8") : "";
     const line = `${JSON.stringify(event)}
 `;
-    const tmpPath = `${eventsPath}.tmp.${Date.now()}.${Math.random().toString(36).slice(2)}`;
-    fs71.writeFileSync(tmpPath, existing + line, "utf-8");
-    fs71.renameSync(tmpPath, eventsPath);
+    withEventWriteLock(() => {
+      fs71.appendFileSync(eventsPath, line, "utf-8");
+    });
   } catch (err2) {
     warn(`[auto-review] event write failed: ${err2 instanceof Error ? err2.message : String(err2)}`);
   }
@@ -114793,7 +114892,7 @@ init_task_file();
 init_logger();
 init_knowledge_store();
 var import_proper_lockfile9 = __toESM(require_proper_lockfile(), 1);
-import { existsSync as existsSync71 } from "node:fs";
+import { existsSync as existsSync70 } from "node:fs";
 import { appendFile as appendFile11, mkdir as mkdir26, readFile as readFile27 } from "node:fs/promises";
 import * as path123 from "node:path";
 function resolveApplicationLogPath(directory) {
@@ -114878,7 +114977,7 @@ async function bumpCountersBatch(directory, bumps) {
   const swarmPath = resolveSwarmKnowledgePath(directory);
   await transactKnowledge(swarmPath, applyOne);
   const hivePath = resolveHiveKnowledgePath();
-  if (existsSync71(hivePath)) {
+  if (existsSync70(hivePath)) {
     await transactKnowledge(hivePath, applyOne);
   }
 }
@@ -115852,7 +115951,7 @@ init_extractors();
 // src/hooks/phase-directives.ts
 init_knowledge_events();
 init_knowledge_store();
-import { existsSync as existsSync72 } from "node:fs";
+import { existsSync as existsSync71 } from "node:fs";
 async function collectPhaseDirectiveIds(directory, phaseLabel) {
   const events = await readKnowledgeEvents(directory);
   const ids = new Set;
@@ -115872,7 +115971,7 @@ async function readEntriesById(directory) {
   for (const e of swarm)
     map3.set(e.id, e);
   const hivePath = resolveHiveKnowledgePath();
-  if (existsSync72(hivePath)) {
+  if (existsSync71(hivePath)) {
     const hive = await readKnowledge(hivePath);
     for (const e of hive)
       if (!map3.has(e.id))
@@ -117763,7 +117862,7 @@ init_schema();
 // src/services/directive-predicate-runner.ts
 init_bun_compat();
 init_logger();
-import { existsSync as existsSync75 } from "node:fs";
+import { existsSync as existsSync74 } from "node:fs";
 import * as path129 from "node:path";
 var PREDICATE_TIMEOUT_MS = 15000;
 var TOOL_BINARY_ALLOWLIST = new Set([
@@ -117805,7 +117904,7 @@ function findBinaryInPath(binary2) {
     if (!dir)
       continue;
     const candidate = path129.join(dir, exeName);
-    if (existsSync75(candidate))
+    if (existsSync74(candidate))
       return candidate;
   }
   return null;
@@ -119639,7 +119738,7 @@ init_state2();
 init_utils2();
 init_state();
 init_bun_compat();
-import { renameSync as renameSync23 } from "node:fs";
+import { renameSync as renameSync21 } from "node:fs";
 var TRANSIENT_SESSION_FIELDS = [
   { name: "revisionLimitHit", resetValue: false },
   { name: "coderRevisions", resetValue: 0 },
@@ -119782,7 +119881,7 @@ async function readSnapshot(directory) {
     if (parsed.version !== 1 && parsed.version !== 2) {
       try {
         const quarantinePath = validateSwarmPath(directory, "session/state.json.quarantine");
-        renameSync23(resolvedPath, quarantinePath);
+        renameSync21(resolvedPath, quarantinePath);
       } catch {}
       return null;
     }
@@ -119881,15 +119980,15 @@ init_zod();
 init_path_security();
 init_create_tool();
 import {
-  existsSync as existsSync77,
+  existsSync as existsSync76,
   mkdirSync as mkdirSync32,
   mkdtempSync as mkdtempSync2,
-  readFileSync as readFileSync50,
+  readFileSync as readFileSync49,
   realpathSync as realpathSync16,
-  renameSync as renameSync24,
+  renameSync as renameSync22,
   rmdirSync,
   unlinkSync as unlinkSync18,
-  writeFileSync as writeFileSync23
+  writeFileSync as writeFileSync21
 } from "node:fs";
 import * as path135 from "node:path";
 var WINDOWS_RESERVED_NAMES2 = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\.|:|$)/i;
@@ -120241,16 +120340,16 @@ function atomicWriteFileSync2(targetPath, content) {
     tempPath = path135.join(dir, `${tempPrefix}.tmp`);
   }
   try {
-    writeFileSync23(tempPath, content, "utf-8");
-    renameSync24(tempPath, targetPath);
+    writeFileSync21(tempPath, content, "utf-8");
+    renameSync22(tempPath, targetPath);
   } finally {
-    if (existsSync77(tempPath)) {
+    if (existsSync76(tempPath)) {
       try {
         unlinkSync18(tempPath);
       } catch {}
     }
     const tempDir = path135.dirname(tempPath);
-    if (tempDir !== dir && existsSync77(tempDir)) {
+    if (tempDir !== dir && existsSync76(tempDir)) {
       try {
         rmdirSync(tempDir);
       } catch {}
@@ -120327,7 +120426,7 @@ function processFileDiff(fileDiff, targetPath, fullPath, workspace, dryRun, allo
       };
     }
     const parentDir = path135.dirname(fullPath);
-    if (!existsSync77(parentDir)) {
+    if (!existsSync76(parentDir)) {
       return {
         file: targetPath,
         status: "error",
@@ -120343,7 +120442,7 @@ function processFileDiff(fileDiff, targetPath, fullPath, workspace, dryRun, allo
         ]
       };
     }
-    if (existsSync77(fullPath)) {
+    if (existsSync76(fullPath)) {
       return {
         file: targetPath,
         status: "error",
@@ -120418,7 +120517,7 @@ function processFileDiff(fileDiff, targetPath, fullPath, workspace, dryRun, allo
         ]
       };
     }
-    if (!existsSync77(fullPath)) {
+    if (!existsSync76(fullPath)) {
       return {
         file: targetPath,
         status: "error",
@@ -120462,7 +120561,7 @@ function processFileDiff(fileDiff, targetPath, fullPath, workspace, dryRun, allo
       hunksFailed: 0
     };
   }
-  if (!existsSync77(fullPath)) {
+  if (!existsSync76(fullPath)) {
     return {
       file: targetPath,
       status: "error",
@@ -120480,7 +120579,7 @@ function processFileDiff(fileDiff, targetPath, fullPath, workspace, dryRun, allo
   }
   let content;
   try {
-    content = readFileSync50(fullPath, "utf-8");
+    content = readFileSync49(fullPath, "utf-8");
   } catch (err2) {
     return {
       file: targetPath,
@@ -120613,7 +120712,7 @@ var applyPatch = createSwarmTool({
     const dryRun = obj.dryRun ?? false;
     const allowCreates = obj.allowCreates ?? false;
     const allowDeletes = obj.allowDeletes ?? false;
-    if (!existsSync77(directory)) {
+    if (!existsSync76(directory)) {
       return JSON.stringify(buildErrorResult("Workspace directory does not exist"), null, 2);
     }
     if (files.length === 0) {
@@ -122432,7 +122531,7 @@ ${body2}`);
 // src/council/council-evidence-writer.ts
 init_zod();
 init_task_file();
-import { appendFileSync as appendFileSync15, existsSync as existsSync82, mkdirSync as mkdirSync34, readFileSync as readFileSync56 } from "node:fs";
+import { appendFileSync as appendFileSync16, existsSync as existsSync81, mkdirSync as mkdirSync34, readFileSync as readFileSync55 } from "node:fs";
 import { join as join113 } from "node:path";
 var EVIDENCE_DIR2 = ".swarm/evidence";
 var VALID_TASK_ID = /^\d+\.\d+(\.\d+)*$/;
@@ -122476,9 +122575,9 @@ async function writeCouncilEvidence(workingDir, synthesis) {
   const filePath = taskEvidencePath(workingDir, synthesis.taskId);
   await _internals78.withTaskEvidenceLock(workingDir, synthesis.taskId, COUNCIL_AGENT_ID, async () => {
     const existingRoot = Object.create(null);
-    if (existsSync82(filePath)) {
+    if (existsSync81(filePath)) {
       try {
-        const parsed = EvidenceFileSchema.parse(JSON.parse(readFileSync56(filePath, "utf-8")));
+        const parsed = EvidenceFileSchema.parse(JSON.parse(readFileSync55(filePath, "utf-8")));
         safeAssignOwnProps(existingRoot, parsed);
       } catch {}
     }
@@ -122515,7 +122614,7 @@ async function writeCouncilEvidence(workingDir, synthesis) {
       timestamp: synthesis.timestamp,
       vetoedBy: synthesis.vetoedBy
     });
-    appendFileSync15(join113(councilDir, `${synthesis.taskId}.rounds.jsonl`), `${auditLine}
+    appendFileSync16(join113(councilDir, `${synthesis.taskId}.rounds.jsonl`), `${auditLine}
 `);
   } catch (auditError) {
     console.warn(`writeCouncilEvidence: failed to append round-history audit log: ${auditError instanceof Error ? auditError.message : String(auditError)}`);
@@ -122870,7 +122969,7 @@ function buildFinalCouncilFeedback(projectSummary, verdict, vetoedBy, requiredFi
 
 // src/council/criteria-store.ts
 init_zod();
-import { existsSync as existsSync83, mkdirSync as mkdirSync35, readFileSync as readFileSync57, writeFileSync as writeFileSync25 } from "node:fs";
+import { existsSync as existsSync82, mkdirSync as mkdirSync35, readFileSync as readFileSync56, writeFileSync as writeFileSync23 } from "node:fs";
 import { join as join114 } from "node:path";
 var COUNCIL_DIR = ".swarm/council";
 var CouncilCriteriaSchema = exports_external.object({
@@ -122890,14 +122989,14 @@ function writeCriteria(workingDir, taskId, criteria) {
     criteria,
     declaredAt: new Date().toISOString()
   };
-  writeFileSync25(join114(dir, `${safeId(taskId)}.json`), JSON.stringify(payload, null, 2));
+  writeFileSync23(join114(dir, `${safeId(taskId)}.json`), JSON.stringify(payload, null, 2));
 }
 function readCriteria(workingDir, taskId) {
   const filePath = join114(workingDir, COUNCIL_DIR, `${safeId(taskId)}.json`);
-  if (!existsSync83(filePath))
+  if (!existsSync82(filePath))
     return null;
   try {
-    return CouncilCriteriaSchema.parse(JSON.parse(readFileSync57(filePath, "utf-8")));
+    return CouncilCriteriaSchema.parse(JSON.parse(readFileSync56(filePath, "utf-8")));
   } catch {
     return null;
   }
@@ -128887,7 +128986,7 @@ init_zod();
 init_config();
 init_knowledge_store();
 init_create_tool();
-import { existsSync as existsSync89 } from "node:fs";
+import { existsSync as existsSync88 } from "node:fs";
 var DEFAULT_LIMIT = 10;
 var MAX_LESSON_LENGTH = 200;
 var VALID_CATEGORIES3 = [
@@ -128963,14 +129062,14 @@ function validateLimit(limit) {
 }
 async function readSwarmKnowledge(directory) {
   const swarmPath = resolveSwarmKnowledgePath(directory);
-  if (!existsSync89(swarmPath)) {
+  if (!existsSync88(swarmPath)) {
     return [];
   }
   return readKnowledge(swarmPath);
 }
 async function readHiveKnowledge() {
   const hivePath = resolveHiveKnowledgePath();
-  if (!existsSync89(hivePath)) {
+  if (!existsSync88(hivePath)) {
     return [];
   }
   return readKnowledge(hivePath);
@@ -131015,7 +131114,7 @@ import * as path155 from "node:path";
 
 // src/mutation/engine.ts
 import { spawnSync as spawnSync11 } from "node:child_process";
-import { unlinkSync as unlinkSync19, writeFileSync as writeFileSync27 } from "node:fs";
+import { unlinkSync as unlinkSync19, writeFileSync as writeFileSync25 } from "node:fs";
 import * as path154 from "node:path";
 
 // src/mutation/equivalence.ts
@@ -131205,7 +131304,7 @@ async function executeMutation(patch, testCommand, testFiles, workingDir) {
     const safeId2 = patch.id.replace(/[^a-zA-Z0-9_-]/g, "_");
     patchFile = path154.join(workingDir, `.mutation_patch_${safeId2}.diff`);
     try {
-      writeFileSync27(patchFile, patch.patch);
+      writeFileSync25(patchFile, patch.patch);
     } catch (writeErr) {
       error93 = `Failed to write patch file: ${writeErr}`;
       outcome = "error";
@@ -132623,6 +132722,17 @@ async function runFinalCouncilGate(ctx) {
   const gateWarnings = [];
   try {
     const preamble = await resolveGatePreamble(dir, sessionID);
+    if (!preamble.resolved || !preamble.plan) {
+      const warning = "Final council gate: plan.json is missing. If final_council is required, the gate cannot be verified.";
+      gateWarnings.push(warning);
+      safeWarn(`[phase_complete] ${warning}`, undefined);
+      return {
+        blocked: false,
+        agentsDispatched,
+        agentsMissing: [],
+        warnings: [warning]
+      };
+    }
     if (preamble.resolved && preamble.plan) {
       const lastPhaseId = preamble.plan.phases[preamble.plan.phases.length - 1]?.id;
       if (lastPhaseId !== undefined && phase === lastPhaseId) {
@@ -132638,6 +132748,23 @@ async function runFinalCouncilGate(ctx) {
               if (typeof entry.type === "string" && entry.type === "final-council" && typeof entry.verdict === "string") {
                 fcVerdictFound = true;
                 _fcVerdict = entry.verdict;
+                const now = new Date;
+                const fcTime = entry.timestamp ? new Date(entry.timestamp) : null;
+                if (fcTime && !Number.isNaN(fcTime.getTime()) && fcTime.getTime() > now.getTime()) {
+                  return {
+                    blocked: true,
+                    reason: "FINAL_COUNCIL_FUTURE_TIMESTAMP",
+                    message: `Phase ${phase} cannot be completed: final council evidence timestamp is in the future.`,
+                    agentsDispatched,
+                    agentsMissing: [],
+                    warnings: []
+                  };
+                }
+                if (fcTime && !Number.isNaN(fcTime.getTime()) && now.getTime() - fcTime.getTime() > 24 * 60 * 60 * 1000) {
+                  const warning = "Final council evidence is older than 24 hours. Consider re-running the final council for fresh review.";
+                  gateWarnings.push(warning);
+                  safeWarn(`[phase_complete] ${warning}`, undefined);
+                }
                 if (preamble.plan) {
                   const currentPlanId = derivePlanId(preamble.plan);
                   if (entry.plan_id && entry.plan_id !== currentPlanId) {
@@ -133372,58 +133499,56 @@ async function executePhaseComplete(args2, workingDirectory, directory) {
     safeWarn
   };
   if (hasActiveTurboMode(sessionID)) {
-    warnings.push(`Turbo mode active — skipped completion-verify, drift-verifier, hallucination-guard, mutation-gate, phase-council, and final-council gates for phase ${phase}.`);
+    warnings.push(`Turbo mode active — skipped completion-verify, drift-verifier, hallucination-guard, mutation-gate, and phase-council gates for phase ${phase}.`);
   } else {
     {
-      const gateResult = await runCompletionVerifyGate(gateCtx);
-      if (gateResult.blocked) {
-        return blockedResult(phase, gateResult);
+      const gateResult2 = await runCompletionVerifyGate(gateCtx);
+      if (gateResult2.blocked) {
+        return blockedResult(phase, gateResult2);
       }
-      warnings.push(...gateResult.warnings);
+      warnings.push(...gateResult2.warnings);
     }
     {
-      const gateResult = await runDriftGate(gateCtx);
-      if (gateResult.blocked) {
-        return blockedResult(phase, gateResult);
+      const gateResult2 = await runDriftGate(gateCtx);
+      if (gateResult2.blocked) {
+        return blockedResult(phase, gateResult2);
       }
-      warnings.push(...gateResult.warnings);
+      warnings.push(...gateResult2.warnings);
     }
     {
-      const gateResult = await runHallucinationGate(gateCtx);
-      if (gateResult.blocked) {
-        return blockedResult(phase, gateResult);
+      const gateResult2 = await runHallucinationGate(gateCtx);
+      if (gateResult2.blocked) {
+        return blockedResult(phase, gateResult2);
       }
-      warnings.push(...gateResult.warnings);
+      warnings.push(...gateResult2.warnings);
     }
     {
-      const gateResult = await runMutationGate(gateCtx);
-      if (gateResult.blocked) {
-        return blockedResult(phase, gateResult);
+      const gateResult2 = await runMutationGate(gateCtx);
+      if (gateResult2.blocked) {
+        return blockedResult(phase, gateResult2);
       }
-      warnings.push(...gateResult.warnings);
+      warnings.push(...gateResult2.warnings);
     }
     {
-      const gateResult = await runPhaseCouncilGate(gateCtx);
-      if (gateResult.blocked) {
-        return blockedResult(phase, gateResult);
+      const gateResult2 = await runPhaseCouncilGate(gateCtx);
+      if (gateResult2.blocked) {
+        return blockedResult(phase, gateResult2);
       }
-      warnings.push(...gateResult.warnings);
+      warnings.push(...gateResult2.warnings);
     }
   }
   if (config3.architectural_supervision?.enabled && config3.architectural_supervision.mode === "gate") {
-    const gateResult = await runArchitectureSupervisorGate(gateCtx);
-    if (gateResult.blocked) {
-      return blockedResult(phase, gateResult);
+    const gateResult2 = await runArchitectureSupervisorGate(gateCtx);
+    if (gateResult2.blocked) {
+      return blockedResult(phase, gateResult2);
     }
-    warnings.push(...gateResult.warnings);
+    warnings.push(...gateResult2.warnings);
   }
-  if (!hasActiveTurboMode(sessionID)) {
-    const gateResult = await runFinalCouncilGate(gateCtx);
-    if (gateResult.blocked) {
-      return blockedResult(phase, gateResult);
-    }
-    warnings.push(...gateResult.warnings);
+  const gateResult = await runFinalCouncilGate(gateCtx);
+  if (gateResult.blocked) {
+    return blockedResult(phase, gateResult);
   }
+  warnings.push(...gateResult.warnings);
   {
     const approval = verifyFullAutoPhaseApproval(dir, sessionID, phase, config3);
     if (!approval.ok) {
@@ -141582,12 +141707,12 @@ ${content}
 init_zod();
 init_loader();
 import {
-  existsSync as existsSync104,
+  existsSync as existsSync103,
   mkdirSync as mkdirSync41,
-  readFileSync as readFileSync82,
-  renameSync as renameSync26,
+  readFileSync as readFileSync81,
+  renameSync as renameSync24,
   unlinkSync as unlinkSync21,
-  writeFileSync as writeFileSync33
+  writeFileSync as writeFileSync31
 } from "node:fs";
 import path179 from "node:path";
 init_create_tool();
@@ -141758,7 +141883,7 @@ var submit_phase_council_verdicts = createSwarmTool({
 function getPhaseMutationGapFinding(phaseNumber, workingDir) {
   const mutationGatePath = path179.join(workingDir, ".swarm", "evidence", String(phaseNumber), "mutation-gate.json");
   try {
-    const raw = readFileSync82(mutationGatePath, "utf-8");
+    const raw = readFileSync81(mutationGatePath, "utf-8");
     const parsed = JSON.parse(raw);
     const gateEntry = (parsed.entries ?? []).find((entry) => entry?.type === "mutation-gate");
     if (!gateEntry) {
@@ -141854,10 +141979,10 @@ function writePhaseCouncilEvidence(workingDir, synthesis, provenance) {
   };
   const tempFile = `${evidenceFile}.tmp-${Date.now()}`;
   try {
-    writeFileSync33(tempFile, JSON.stringify(evidenceBundle, null, 2), "utf-8");
-    renameSync26(tempFile, evidenceFile);
+    writeFileSync31(tempFile, JSON.stringify(evidenceBundle, null, 2), "utf-8");
+    renameSync24(tempFile, evidenceFile);
   } finally {
-    if (existsSync104(tempFile)) {
+    if (existsSync103(tempFile)) {
       unlinkSync21(tempFile);
     }
   }
@@ -144573,18 +144698,18 @@ function safeFromCodePoint(code) {
     return "";
   }
 }
-function stripSpans(input, open3, close) {
+function stripSpans(input, open4, close) {
   const lower = input.toLowerCase();
   let out2 = "";
   let i2 = 0;
   while (i2 < input.length) {
-    const start2 = lower.indexOf(open3, i2);
+    const start2 = lower.indexOf(open4, i2);
     if (start2 === -1) {
       out2 += input.slice(i2);
       break;
     }
     out2 += input.slice(i2, start2);
-    const end = lower.indexOf(close, start2 + open3.length);
+    const end = lower.indexOf(close, start2 + open4.length);
     if (end === -1)
       break;
     i2 = end + close.length;
@@ -145596,7 +145721,7 @@ var VerdictSchema3 = exports_external.object({
   durationMs: exports_external.number().nonnegative()
 });
 var ArgsSchema9 = exports_external.object({
-  phase: exports_external.number().int().min(1),
+  phase: exports_external.number().int().min(1).max(1000),
   projectSummary: exports_external.string().min(1),
   roundNumber: exports_external.number().int().min(1).max(10).optional(),
   verdicts: exports_external.array(VerdictSchema3).min(1).max(5)
@@ -145651,7 +145776,16 @@ async function executeWriteFinalCouncilEvidence(args2, directory) {
     }, null, 2);
   }
   const plan = await loadPlan(directory);
-  const planId = plan ? derivePlanId(plan) : "unknown";
+  if (!plan) {
+    return JSON.stringify({
+      success: false,
+      reason: "plan_not_found",
+      message: "Cannot write final council evidence: plan.json not found. The plan must be loaded and available before writing final council evidence.",
+      phase: input.phase,
+      plan_id: "unknown"
+    }, null, 2);
+  }
+  const planId = derivePlanId(plan);
   const normalizedVerdict = normalizeFinalVerdict(synthesis.overallVerdict, synthesis.requiredFixes.length);
   const evidenceEntry = {
     type: "final-council",
@@ -146693,11 +146827,25 @@ async function initializeOpenCodeSwarm(ctx) {
           addDeferredWarning("[swarm] auto_select_architect is enabled but no architect agents were found in the generated set. The option has no effect.");
         }
       }
+      const shortcutDescription = (cmd) => {
+        const entry = COMMAND_REGISTRY[cmd];
+        if (!entry?.description) {
+          return `Use /swarm ${cmd}`;
+        }
+        const desc = entry.description.charAt(0).toLowerCase() + entry.description.slice(1);
+        return `Use /swarm ${cmd} to ${desc}`;
+      };
       opencodeConfig.command = {
         ...opencodeConfig.command || {},
         swarm: {
           template: "/swarm $ARGUMENTS",
-          description: "Swarm management commands: /swarm [status|show-plan|plan|agents|history|config|help|evidence|handoff|archive|diagnose|diagnosis|preflight|sync-plan|benchmark|export|reset|rollback|retrieve|clarify|analyze|specify|sdd|brainstorm|council|pr-review|pr-feedback|deep-dive|deep-research|codebase-review|design-docs|issue|qa-gates|dark-matter|knowledge|memory|curate|consolidate|concurrency|turbo|full-auto|auto-proceed|write-retro|reset-session|simulate|promote|checkpoint|acknowledge-spec-drift|doctor tools|finalize|close]"
+          description: (() => {
+            const standaloneCommands = VALID_COMMANDS.filter((cmd) => {
+              const entry = COMMAND_REGISTRY[cmd];
+              return !entry.aliasOf && !entry.deprecated && !entry.subcommandOf;
+            });
+            return `Swarm management commands: /swarm [${standaloneCommands.join("|")}]`;
+          })()
         },
         "swarm-status": {
           template: "/swarm status",
@@ -146799,6 +146947,26 @@ async function initializeOpenCodeSwarm(ctx) {
           template: "/swarm pr-feedback $ARGUMENTS",
           description: "Use /swarm pr-feedback to ingest and close known PR feedback (review comments, CI failures, conflicts) without a fresh broad review"
         },
+        "swarm-pr-subscribe": {
+          template: "/swarm pr subscribe $ARGUMENTS",
+          description: shortcutDescription("pr subscribe")
+        },
+        "swarm-pr-unsubscribe": {
+          template: "/swarm pr unsubscribe $ARGUMENTS",
+          description: shortcutDescription("pr unsubscribe")
+        },
+        "swarm-pr-status": {
+          template: "/swarm pr status",
+          description: shortcutDescription("pr status")
+        },
+        "swarm-learning": {
+          template: "/swarm learning",
+          description: shortcutDescription("learning")
+        },
+        "swarm-post-mortem": {
+          template: "/swarm post-mortem $ARGUMENTS",
+          description: shortcutDescription("post-mortem")
+        },
         "swarm-deep-dive": {
           template: "/swarm deep-dive $ARGUMENTS",
           description: "Use /swarm deep-dive to launch a read-only deep audit with parallel explorer waves, dual reviewers, and critic challenge"