opencode-swarm 7.107.6 → 7.109.0

package/dist/cli/{index-xmarctsf.js → index-wg0665ft.js}

@@ -1,19 +1,19 @@
 // @bun
 import {
   resolveKnowledgeStoreDir
-} from "./index-n1sptn1w.js";
+} from "./index-2nt4mq9n.js";
 import {
   isActiveStatus
 } from "./index-bfwt3abw.js";
-import {
-  atomicWriteFile
-} from "./index-9b7qp18e.js";
 import {
   readCachedParsedFile
 } from "./index-jtqkh8jf.js";
+import {
+  atomicWriteFile
+} from "./index-1cn967sa.js";
 import {
   require_proper_lockfile
-} from "./index-3naa2ajc.js";
+} from "./index-vvk2g744.js";
 import {
   __require,
   __toESM
@@ -525,7 +525,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const recovered = touched.filter((e) => e.confidence > CONFIDENCE_FLOOR + FLOOR_EPSILON && e.confidence_floor_demoted);
   if (atFloor.length === 0 && recovered.length === 0)
     return;
-  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-kfc6xmkw.js");
+  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-6n3x3he2.js");
   const rollups = await readKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -592,7 +592,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-ez3ws8ef.js");
+    const { quarantineEntry } = await import("./knowledge-validator-exymfcb9.js");
     for (const { id } of toQuarantine) {
       await quarantineEntry(directory, id, "confidence_floor_negative_outcome", "auto").catch((err) => {
         console.warn("[knowledge-store] confidence-floor quarantine failed (best-effort):", err instanceof Error ? err.message : String(err));

package/dist/cli/{index-4vsgp5a8.js → index-wj4jeavn.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   stripKnownSwarmPrefix
-} from "./index-pchpahdf.js";
+} from "./index-h4c4rrwx.js";
 import {
   init_logger,
   warn

package/dist/cli/index-wvrj16f0.js

@@ -0,0 +1,206 @@
+// @bun
+import {
+  exports_runner_client,
+  init_runner_client
+} from "./index-q1exe2b3.js";
+import {
+  __esm,
+  __toCommonJS
+} from "./index-a76rekgs.js";
+
+// src/sandbox/capability-probe.ts
+import { execFile, spawnSync } from "child_process";
+import * as os from "os";
+function withProbeTimeout(cmd, args, ms) {
+  return new Promise((resolve, reject) => {
+    const controller = new AbortController;
+    const timer = setTimeout(() => {
+      controller.abort();
+      proc?.kill();
+    }, ms);
+    const unref = timer.unref;
+    if (typeof unref === "function") {
+      unref.call(timer);
+    }
+    let proc;
+    try {
+      proc = execFile(cmd, args, {
+        signal: controller.signal,
+        timeout: ms,
+        windowsHide: true,
+        cwd: os.tmpdir()
+      }, (error, stdout, _stderr) => {
+        clearTimeout(timer);
+        if (error) {
+          const exc = error;
+          if (exc.code === "ENOENT" || exc.code === "ENOTFOUND") {
+            reject(new Error("binary not found"));
+          } else {
+            reject(error);
+          }
+          return;
+        }
+        resolve(stdout?.trim() ?? "");
+      });
+    } catch (spawnError) {
+      clearTimeout(timer);
+      reject(spawnError);
+    }
+  });
+}
+async function probeLinux() {
+  try {
+    const output = await withProbeTimeout("bwrap", ["--version"], 2000);
+    if (output.length > 0) {
+      return {
+        status: "enabled",
+        mechanism: "Bubblewrap",
+        platform: "linux"
+      };
+    }
+    return {
+      status: "disabled",
+      mechanism: "Bubblewrap",
+      platform: "linux",
+      error: "binary returned empty version"
+    };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg === "binary not found") {
+      return {
+        status: "unsupported",
+        mechanism: "Bubblewrap",
+        platform: "linux",
+        error: msg
+      };
+    }
+    return {
+      status: "disabled",
+      mechanism: "Bubblewrap",
+      platform: "linux",
+      error: msg
+    };
+  }
+}
+async function probeMacOS() {
+  try {
+    const output = await withProbeTimeout("sandbox-exec", ["--version"], 2000);
+    if (output.length > 0) {
+      return {
+        status: "enabled",
+        mechanism: "sandbox-exec",
+        platform: "darwin"
+      };
+    }
+    return {
+      status: "disabled",
+      mechanism: "sandbox-exec",
+      platform: "darwin",
+      error: "binary returned empty version"
+    };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg === "binary not found") {
+      return {
+        status: "unsupported",
+        mechanism: "sandbox-exec",
+        platform: "darwin",
+        error: msg
+      };
+    }
+    return {
+      status: "disabled",
+      mechanism: "sandbox-exec",
+      platform: "darwin",
+      error: msg
+    };
+  }
+}
+function probeWindows() {
+  try {
+    const { probe: runnerProbe } = (init_runner_client(), __toCommonJS(exports_runner_client));
+    const result = runnerProbe();
+    if (result.available) {
+      return {
+        status: "enabled",
+        platform: "win32",
+        mechanism: `native-runner/${result.mode}`
+      };
+    }
+  } catch {}
+  try {
+    const result = spawnSync("cmd", ["/c", "echo", "ok"], {
+      windowsHide: true,
+      encoding: "utf-8",
+      timeout: 5000,
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    if (result.error) {
+      return {
+        status: "disabled",
+        platform: "win32",
+        mechanism: "PowerShell wrapper",
+        error: `cmd.exe probe failed: ${result.error.code}`
+      };
+    }
+    return result.status === 0 ? {
+      status: "enabled",
+      platform: "win32",
+      mechanism: "PowerShell wrapper"
+    } : {
+      status: "disabled",
+      platform: "win32",
+      mechanism: "PowerShell wrapper",
+      error: "cmd.exe probe returned non-zero"
+    };
+  } catch (err) {
+    return {
+      status: "disabled",
+      platform: "win32",
+      mechanism: "PowerShell wrapper",
+      error: String(err)
+    };
+  }
+}
+function isBubblewrapAvailable() {
+  return _cached?.status === "enabled" && _cached?.platform === "linux";
+}
+function isSandboxExecAvailable() {
+  return _cached?.status === "enabled" && _cached?.platform === "darwin";
+}
+function isWindowsSandboxAvailable() {
+  return _cached?.status === "enabled" && _cached?.platform === "win32";
+}
+
+class SandboxCapabilityProbe {
+  async detect() {
+    if (_cached !== undefined) {
+      return _cached;
+    }
+    const platform = process.platform;
+    switch (platform) {
+      case "linux":
+        _cached = await probeLinux();
+        break;
+      case "darwin":
+        _cached = await probeMacOS();
+        break;
+      case "win32":
+        _cached = probeWindows();
+        break;
+      default: {
+        _cached = {
+          status: "unsupported",
+          mechanism: "unknown",
+          platform,
+          error: `unsupported platform: ${platform}`
+        };
+      }
+    }
+    return _cached;
+  }
+}
+var _cached;
+var init_capability_probe = () => {};
+
+export { isBubblewrapAvailable, isSandboxExecAvailable, isWindowsSandboxAvailable, SandboxCapabilityProbe, init_capability_probe };

package/dist/cli/index-x2q0gnt8.js

@@ -0,0 +1,254 @@
+// @bun
+import {
+  require_proper_lockfile
+} from "./index-vvk2g744.js";
+import {
+  bunWrite
+} from "./index-7xgqky26.js";
+import {
+  __toESM
+} from "./index-a76rekgs.js";
+
+// src/scope/scope-persistence.ts
+var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
+import * as fs from "fs";
+import * as path from "path";
+var SCOPE_SCHEMA_VERSION = 1;
+var DEFAULT_TTL_MS = 24 * 60 * 60 * 1000;
+var LOCK_STALE_MS = 30 * 1000;
+var SCOPES_DIR = ".swarm/scopes";
+var MAX_FILES_PER_SCOPE = 1e4;
+var MAX_PLAN_BYTES = 10 * 1024 * 1024;
+var MAX_SCOPE_BYTES = 2 * 1024 * 1024;
+var WINDOWS_RESERVED = new Set([
+  "CON",
+  "PRN",
+  "AUX",
+  "NUL",
+  "COM1",
+  "COM2",
+  "COM3",
+  "COM4",
+  "COM5",
+  "COM6",
+  "COM7",
+  "COM8",
+  "COM9",
+  "LPT1",
+  "LPT2",
+  "LPT3",
+  "LPT4",
+  "LPT5",
+  "LPT6",
+  "LPT7",
+  "LPT8",
+  "LPT9"
+]);
+function getScopesDir(directory) {
+  return path.join(directory, SCOPES_DIR);
+}
+function isSafeTaskId(taskId) {
+  if (typeof taskId !== "string")
+    return false;
+  if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(taskId))
+    return false;
+  const head = taskId.replace(/\.+$/, "").split(".")[0].toUpperCase();
+  if (WINDOWS_RESERVED.has(head))
+    return false;
+  return true;
+}
+function isScopesDirSafe(directory, scopesDir) {
+  try {
+    const resolvedWorkspace = fs.realpathSync(directory);
+    const resolvedScopes = fs.realpathSync(scopesDir);
+    const rel = path.relative(resolvedWorkspace, resolvedScopes);
+    return rel.length > 0 && !rel.startsWith("..") && !path.isAbsolute(rel);
+  } catch {
+    return false;
+  }
+}
+function getScopeFilePath(directory, taskId) {
+  if (!isSafeTaskId(taskId)) {
+    throw new Error(`Invalid taskId for scope persistence: ${taskId}`);
+  }
+  return path.join(getScopesDir(directory), `scope-${taskId}.json`);
+}
+async function writeScopeToDisk(directory, taskId, files, ttlMs = DEFAULT_TTL_MS) {
+  if (!isSafeTaskId(taskId))
+    return;
+  if (!Array.isArray(files) || files.length === 0)
+    return;
+  if (files.length > MAX_FILES_PER_SCOPE)
+    return;
+  const scopesDir = getScopesDir(directory);
+  const scopePath = getScopeFilePath(directory, taskId);
+  try {
+    fs.mkdirSync(scopesDir, { recursive: true });
+  } catch {
+    return;
+  }
+  if (!isScopesDirSafe(directory, scopesDir))
+    return;
+  const now = Date.now();
+  const payload = {
+    version: SCOPE_SCHEMA_VERSION,
+    taskId,
+    declaredAt: now,
+    expiresAt: now + ttlMs,
+    files: [...files]
+  };
+  const content = JSON.stringify(payload, null, 2);
+  try {
+    const flags = fs.constants.O_WRONLY | fs.constants.O_CREAT;
+    const nofollow = fs.constants.O_NOFOLLOW ?? 0;
+    const fd = fs.openSync(scopePath, flags | nofollow);
+    fs.closeSync(fd);
+  } catch {
+    return;
+  }
+  let release;
+  try {
+    release = await import_proper_lockfile.default.lock(scopePath, {
+      stale: LOCK_STALE_MS,
+      retries: { retries: 3, minTimeout: 50, maxTimeout: 200 },
+      realpath: false
+    });
+    await atomicWrite(scopePath, content);
+  } catch {} finally {
+    if (release) {
+      try {
+        await release();
+      } catch {}
+    }
+  }
+}
+async function atomicWrite(targetPath, content) {
+  const tempPath = `${targetPath}.tmp.${Date.now()}.${Math.floor(Math.random() * 1e9)}`;
+  try {
+    await bunWrite(tempPath, content);
+    fs.renameSync(tempPath, targetPath);
+  } finally {
+    try {
+      fs.unlinkSync(tempPath);
+    } catch {}
+  }
+}
+function readScopeFromDisk(directory, taskId) {
+  if (!isSafeTaskId(taskId))
+    return null;
+  const scopesDir = getScopesDir(directory);
+  if (!isScopesDirSafe(directory, scopesDir))
+    return null;
+  const scopePath = getScopeFilePath(directory, taskId);
+  const nofollow = fs.constants.O_NOFOLLOW ?? 0;
+  let fd;
+  try {
+    fd = fs.openSync(scopePath, fs.constants.O_RDONLY | nofollow);
+  } catch {
+    return null;
+  }
+  let raw;
+  try {
+    const stat = fs.fstatSync(fd);
+    if (!stat.isFile())
+      return null;
+    if (stat.size > MAX_SCOPE_BYTES)
+      return null;
+    const buf = Buffer.alloc(stat.size);
+    fs.readSync(fd, buf, 0, stat.size, 0);
+    raw = buf.toString("utf-8");
+  } catch {
+    return null;
+  } finally {
+    try {
+      fs.closeSync(fd);
+    } catch {}
+  }
+  if (!raw.trim())
+    return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (parsed.version !== SCOPE_SCHEMA_VERSION)
+    return null;
+  if (parsed.taskId !== taskId)
+    return null;
+  const now = Date.now();
+  if (typeof parsed.declaredAt !== "number" || parsed.declaredAt > now) {
+    return null;
+  }
+  if (typeof parsed.expiresAt !== "number" || now > parsed.expiresAt) {
+    return null;
+  }
+  if (!Array.isArray(parsed.files))
+    return null;
+  if (parsed.files.length > MAX_FILES_PER_SCOPE)
+    return null;
+  const files = parsed.files.filter((f) => typeof f === "string");
+  return files.length > 0 ? files : null;
+}
+function readPlanScope(directory, taskId) {
+  if (!isSafeTaskId(taskId))
+    return null;
+  try {
+    const planPath = path.join(directory, ".swarm", "plan.json");
+    const stat = fs.statSync(planPath);
+    if (!stat.isFile())
+      return null;
+    if (stat.size > MAX_PLAN_BYTES)
+      return null;
+    const raw = fs.readFileSync(planPath, "utf-8");
+    const plan = JSON.parse(raw);
+    for (const phase of plan.phases ?? []) {
+      for (const task of phase.tasks ?? []) {
+        if (task.id !== taskId)
+          continue;
+        const ft = task.files_touched;
+        if (Array.isArray(ft) && ft.length > 0) {
+          if (ft.length > MAX_FILES_PER_SCOPE)
+            return null;
+          return ft.filter((f) => typeof f === "string");
+        }
+        if (typeof ft === "string" && ft.length > 0)
+          return [ft];
+        return null;
+      }
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function clearScopeForTask(directory, taskId) {
+  if (!isSafeTaskId(taskId))
+    return;
+  try {
+    fs.unlinkSync(getScopeFilePath(directory, taskId));
+  } catch {}
+}
+function clearAllScopes(directory) {
+  try {
+    fs.rmSync(getScopesDir(directory), { recursive: true, force: true });
+  } catch {}
+}
+function resolveScopeWithFallbacks(input) {
+  const { directory, taskId, inMemoryScope, pendingMapScope } = input;
+  if (inMemoryScope && inMemoryScope.length > 0)
+    return inMemoryScope;
+  if (taskId) {
+    const disk = readScopeFromDisk(directory, taskId);
+    if (disk && disk.length > 0)
+      return disk;
+    const plan = readPlanScope(directory, taskId);
+    if (plan && plan.length > 0)
+      return plan;
+  }
+  if (pendingMapScope && pendingMapScope.length > 0)
+    return pendingMapScope;
+  return null;
+}
+
+export { writeScopeToDisk, readScopeFromDisk, readPlanScope, clearScopeForTask, clearAllScopes, resolveScopeWithFallbacks };

package/dist/cli/{index-xg18az81.js → index-yw8qpf51.js}

@@ -7,7 +7,7 @@ import {
 } from "./index-zgwm4ryv.js";
 import {
   bunSpawnSync
-} from "./index-b9v501fr.js";
+} from "./index-7xgqky26.js";
 import {
   __export
 } from "./index-a76rekgs.js";

package/dist/cli/index.js

@@ -7,37 +7,41 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-572t1qff.js";
-import"./index-4vsgp5a8.js";
+} from "./index-vb5t1kvs.js";
+import"./index-wj4jeavn.js";
+import"./index-5gnp8fyw.js";
 import"./index-c8s9a3zh.js";
-import"./index-wvxhynxq.js";
-import"./index-6h82c2h0.js";
-import"./index-91j1sqzm.js";
-import"./index-xg18az81.js";
+import"./index-fm7xz1ne.js";
+import"./index-wfq4r95s.js";
+import"./index-scww5b77.js";
+import"./index-yw8qpf51.js";
+import"./index-85bacexr.js";
 import"./index-09xpycan.js";
 import {
   DEFAULT_AGENT_CONFIGS
-} from "./index-pchpahdf.js";
-import"./index-bpgqbwmf.js";
-import"./index-dfdg4ws5.js";
-import"./index-bq8kd9r9.js";
-import"./index-kxm3bdjh.js";
-import"./index-xmarctsf.js";
-import"./index-n1sptn1w.js";
+} from "./index-h4c4rrwx.js";
+import"./index-9qxntjtx.js";
+import"./index-mmny81g1.js";
+import"./index-fz1jgbvw.js";
+import"./index-wg0665ft.js";
+import"./index-2nt4mq9n.js";
 import"./index-bfwt3abw.js";
-import"./index-v4fcn4tr.js";
-import"./index-0kxc7t16.js";
-import"./index-9b7qp18e.js";
-import"./index-4r5z8sgw.js";
-import"./index-57ymmh7h.js";
+import"./index-wvrj16f0.js";
+import"./index-q1exe2b3.js";
+import"./index-x2q0gnt8.js";
+import"./index-f1qyj61w.js";
+import"./index-r3j3458j.js";
+import"./index-jtqkh8jf.js";
 import"./index-5e4e2hvv.js";
 import"./index-p0arc26j.js";
-import"./index-jtqkh8jf.js";
 import"./index-zgwm4ryv.js";
+import"./index-6jng9c8t.js";
+import"./index-1cn967sa.js";
 import"./index-293f68mj.js";
-import"./index-3naa2ajc.js";
-import"./index-b9v501fr.js";
+import"./index-5mkc2f9z.js";
 import"./index-vn263hqt.js";
+import"./index-vvk2g744.js";
+import"./index-7xgqky26.js";
 import"./index-a76rekgs.js";
 
 // src/cli/index.ts

package/dist/cli/{knowledge-escalator-3sgwrgy9.js → knowledge-escalator-6v7sjprx.js}

@@ -8,17 +8,18 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-bq8kd9r9.js";
-import"./index-kxm3bdjh.js";
-import"./index-xmarctsf.js";
-import"./index-n1sptn1w.js";
+} from "./index-5gnp8fyw.js";
+import"./index-mmny81g1.js";
+import"./index-wg0665ft.js";
+import"./index-2nt4mq9n.js";
 import"./index-bfwt3abw.js";
-import"./index-9b7qp18e.js";
 import"./index-jtqkh8jf.js";
 import"./index-zgwm4ryv.js";
-import"./index-3naa2ajc.js";
-import"./index-b9v501fr.js";
+import"./index-1cn967sa.js";
+import"./index-5mkc2f9z.js";
 import"./index-vn263hqt.js";
+import"./index-vvk2g744.js";
+import"./index-7xgqky26.js";
 import"./index-a76rekgs.js";
 export {
   readRecentEscalations,

package/dist/cli/{knowledge-events-kfc6xmkw.js → knowledge-events-6n3x3he2.js}

@@ -25,13 +25,14 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-kxm3bdjh.js";
-import"./index-n1sptn1w.js";
-import"./index-9b7qp18e.js";
+} from "./index-mmny81g1.js";
+import"./index-2nt4mq9n.js";
 import"./index-zgwm4ryv.js";
-import"./index-3naa2ajc.js";
-import"./index-b9v501fr.js";
+import"./index-1cn967sa.js";
+import"./index-5mkc2f9z.js";
 import"./index-vn263hqt.js";
+import"./index-vvk2g744.js";
+import"./index-7xgqky26.js";
 import"./index-a76rekgs.js";
 export {
   resolveLegacyApplicationLogPath,

package/dist/cli/{knowledge-store-kyacem71.js → knowledge-store-exkw6yb1.js}

@@ -32,14 +32,15 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-xmarctsf.js";
-import"./index-n1sptn1w.js";
+} from "./index-wg0665ft.js";
+import"./index-2nt4mq9n.js";
 import"./index-bfwt3abw.js";
-import"./index-9b7qp18e.js";
 import"./index-jtqkh8jf.js";
-import"./index-3naa2ajc.js";
-import"./index-b9v501fr.js";
+import"./index-1cn967sa.js";
+import"./index-5mkc2f9z.js";
 import"./index-vn263hqt.js";
+import"./index-vvk2g744.js";
+import"./index-7xgqky26.js";
 import"./index-a76rekgs.js";
 export {
   wordBigrams,

package/dist/cli/{knowledge-validator-ez3ws8ef.js → knowledge-validator-exymfcb9.js}

@@ -21,16 +21,17 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-dfdg4ws5.js";
-import"./index-xmarctsf.js";
-import"./index-n1sptn1w.js";
+} from "./index-fz1jgbvw.js";
+import"./index-wg0665ft.js";
+import"./index-2nt4mq9n.js";
 import"./index-bfwt3abw.js";
-import"./index-9b7qp18e.js";
 import"./index-jtqkh8jf.js";
 import"./index-zgwm4ryv.js";
-import"./index-3naa2ajc.js";
-import"./index-b9v501fr.js";
+import"./index-1cn967sa.js";
+import"./index-5mkc2f9z.js";
 import"./index-vn263hqt.js";
+import"./index-vvk2g744.js";
+import"./index-7xgqky26.js";
 import"./index-a76rekgs.js";
 export {
   validateSkillPath,