opencode-swarm 7.113.1 → 7.113.3

package/dist/cli/{schema-qb313fyy.js → schema-e5kd993s.js}

@@ -86,7 +86,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-1ey3dxq7.js";
+} from "./index-147ja18h.js";
 import"./index-bfwt3abw.js";
 import"./index-p0arc26j.js";
 import"./index-293f68mj.js";

package/dist/cli/{scope-persistence-5ccgtebg.js → scope-persistence-fm0gzhnk.js}

@@ -6,9 +6,9 @@ import {
   readScopeFromDisk,
   resolveScopeWithFallbacks,
   writeScopeToDisk
-} from "./index-g55nzpwn.js";
+} from "./index-n6fa2hhk.js";
 import"./index-vvk2g744.js";
-import"./index-h91bv3hy.js";
+import"./index-qe3v54nb.js";
 import"./index-a76rekgs.js";
 export {
   writeScopeToDisk,

package/dist/cli/{skill-generator-nnwn4sq0.js → skill-generator-z01sjppf.js}

@@ -33,19 +33,19 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-h389ed8y.js";
-import"./index-30ejh1tx.js";
-import"./index-hpp2r0sd.js";
-import"./index-32bx4kch.js";
+} from "./index-mr4whary.js";
+import"./index-43khae15.js";
+import"./index-qzqx2qky.js";
+import"./index-0q7rrh59.js";
 import"./index-bfwt3abw.js";
-import"./index-db1fh1fv.js";
+import"./index-g40r5d08.js";
 import"./index-jtqkh8jf.js";
 import"./index-zgwm4ryv.js";
-import"./index-0dab9w37.js";
-import"./index-5mkc2f9z.js";
-import"./index-vn263hqt.js";
+import"./index-0p660a87.js";
+import"./index-4sckv7y6.js";
+import"./index-pa6t33pt.js";
 import"./index-vvk2g744.js";
-import"./index-h91bv3hy.js";
+import"./index-qe3v54nb.js";
 import"./index-a76rekgs.js";
 export {
   writeEvalStub,

package/dist/cli/{telemetry-jm7t8031.js → telemetry-jny76r83.js}

@@ -8,7 +8,7 @@ import {
   resetTelemetryForTesting,
   rotateTelemetryIfNeeded,
   telemetry
-} from "./index-vn263hqt.js";
+} from "./index-pa6t33pt.js";
 import"./index-a76rekgs.js";
 export {
   telemetry,

package/dist/cli/workspace-snapshot-eyf6gd0d.js

@@ -0,0 +1,22 @@
+// @bun
+import {
+  _internals,
+  captureWorkspaceSnapshot,
+  changedFilesSinceSnapshot,
+  compareWorkspaceSnapshot,
+  compareWorkspaceSnapshots,
+  digest,
+  parsePorcelainPaths,
+  workspaceSnapshotMatches
+} from "./index-dqh3zhhc.js";
+import"./index-a76rekgs.js";
+export {
+  workspaceSnapshotMatches,
+  parsePorcelainPaths,
+  digest,
+  compareWorkspaceSnapshots,
+  compareWorkspaceSnapshot,
+  changedFilesSinceSnapshot,
+  captureWorkspaceSnapshot,
+  _internals
+};

package/dist/commands/registry.d.ts

@@ -176,6 +176,13 @@ export declare const COMMAND_REGISTRY: {
         readonly toolPolicy: "agent";
         readonly toolNoArgs: false;
     };
+    readonly 'guardrail-explain': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)";
+        readonly category: "diagnostics";
+        readonly aliasOf: "guardrail explain";
+        readonly deprecated: true;
+    };
     readonly 'guardrail-log': {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Read the guardrail decision log (use --blocks-only for blocks)";

package/dist/config/constants.d.ts

@@ -27,7 +27,7 @@ export declare const SKILL_AGENT_TOOL_MAP: Partial<Record<AgentName, ToolName[]>
  * NOTE: bash/shell tools are intentionally excluded — bash commands are opaque
  * to static scope analysis. Post-hoc detection via guardrails diff-scope provides secondary coverage.
  */
-export declare const WRITE_TOOL_NAMES: readonly ["write", "edit", "patch", "apply_patch", "swarm_apply_patch", "create_file", "insert", "replace", "append", "prepend"];
+export declare const WRITE_TOOL_NAMES: readonly ["write", "edit", "patch", "apply_patch", "swarm_apply_patch", "create_file", "insert", "replace", "append", "prepend", "extract_code_blocks"];
 export type WriteToolName = (typeof WRITE_TOOL_NAMES)[number];
 export declare const DEFAULT_MODELS: Record<string, string>;
 export declare const DEFAULT_AGENT_CONFIGS: Record<string, {

package/dist/config/skill-mirrors.d.ts

@@ -68,7 +68,8 @@ export declare const OPENCODE_ONLY_ARCHITECT_MODE_SKILLS: Array<{
  * `kind`:
  *  - `identical`: `.opencode` and `.claude` SKILL.md must be byte-identical.
  *    `canonical` records which side wins when they drift (fix direction only;
- *    detection is symmetric).
+ *    detection is symmetric). `extraIdenticalPaths` narrowly extends the same
+ *    byte-identity contract to additional runtime mirrors when present.
  *  - `divergent`: both must exist; content intentionally differs per runtime.
  *  - `opencode-only`: `.opencode` exists; no `.claude` mirror expected.
  */
@@ -76,6 +77,7 @@ export declare const ADDITIONAL_SKILL_MIRROR_CONTRACTS: Array<{
     slug: string;
     kind: 'identical' | 'divergent' | 'opencode-only';
     canonical?: '.claude' | '.opencode';
+    extraIdenticalPaths?: string[];
     reason: string;
 }>;
 /**

package/dist/gate-evidence-classification.d.ts

@@ -0,0 +1,5 @@
+export declare function isExactMarkdownPath(value: unknown): boolean;
+/** Cheap pre-classification used to avoid Git snapshots for ineligible tasks. */
+export declare function isMarkdownOnlyDeclaredScope(value: unknown): value is string[];
+/** Require independent non-empty declared and observed exact-.md proof. */
+export declare function isMarkdownOnlyTaskChange(declaredFiles: unknown, observedFiles: unknown): boolean;

package/dist/gate-evidence.d.ts

@@ -9,6 +9,11 @@
  * Evidence files survive session restarts (unlike in-memory state).
  * Agents never write these files directly — only the hook does.
  * Gates are append-only: required_gates can only grow, never shrink.
+ *
+ * Threat boundary: this store provides atomic, path-contained durability and
+ * auditability for cooperative same-user agents. It is not tamper-proof
+ * authorization against a process with arbitrary same-user workspace access;
+ * that requires a protected trust root outside the project workspace.
  */
 export interface GateEvidence {
     sessionId: string;
@@ -20,8 +25,14 @@ export interface TaskEvidence {
     required_gates: string[];
     gates: Record<string, GateEvidence>;
     turbo?: boolean;
+    /** Durable proof that the coder dispatch was classified as exact Markdown-only. */
+    test_engineer_exempt?: boolean;
 }
 export declare const DEFAULT_REQUIRED_GATES: string[];
+export interface GateDerivationContext {
+    /** Trusted pre/post workspace classification; false/absent fails closed. */
+    testEngineerExempt?: boolean;
+}
 /**
  * Canonical task-id validation helper.
  * Delegates to the shared strict validator (#452 item 2).
@@ -32,12 +43,12 @@ export declare function isValidTaskId(taskId: string): boolean;
  * Maps the first-dispatched agent type to the initial required_gates array.
  * Unknown agent types fall back to the safe default ["reviewer", "test_engineer"].
  */
-export declare function deriveRequiredGates(agentType: string): string[];
+export declare function deriveRequiredGates(agentType: string, context?: GateDerivationContext): string[];
 /**
  * Returns the union of existingGates and deriveRequiredGates(newAgentType).
  * Sorted, deduplicated. Gates can only grow, never shrink.
  */
-export declare function expandRequiredGates(existingGates: string[], newAgentType: string): string[];
+export declare function expandRequiredGates(existingGates: string[], newAgentType: string, context?: GateDerivationContext): string[];
 /**
  * Creates or updates .swarm/evidence/{taskId}.json with a gate pass entry.
  * If file doesn't exist: creates with required_gates from deriveRequiredGates(gate).
@@ -50,7 +61,7 @@ export declare function recordGateEvidence(directory: string, taskId: string, ga
  * Used when non-gate agents are dispatched (coder, explorer, sme, etc.).
  * Creates evidence file if it doesn't exist yet.
  */
-export declare function recordAgentDispatch(directory: string, taskId: string, agentType: string, turbo?: boolean): Promise<void>;
+export declare function recordAgentDispatch(directory: string, taskId: string, agentType: string, turbo?: boolean, context?: GateDerivationContext): Promise<void>;
 /**
  * Returns the TaskEvidence for a task, or null if file missing or parse error.
  * Never throws.

package/dist/hooks/messages-transform.d.ts

@@ -3,11 +3,32 @@
  *
  * Note: Merged content order matches original insertion order (OpenCode base prompt
  * first, then swarm agent prompt) - this assumes sequential message construction.
+ *
+ * Dual-shape (issue #1778 H1): the OpenCode `messages.transform` hook delivers
+ * items shaped `{ info: { role, ... }, parts: [{ type: 'text', text }] }`, while
+ * unit fixtures and some callers use the flat `{ role, content }` shape. Both
+ * must be handled — reading role from `info.role` OR top-level `role`, and text
+ * from `parts[].text` OR `content` — or the consolidation (and the invariant-10
+ * safety-net that strips system messages at index > 0 for local models) becomes
+ * a silent no-op on production data.
  */
-type Message = {
+type FlatMessage = {
     role: string;
     content: unknown;
     [key: string]: unknown;
 };
+type PartsMessage = {
+    info: {
+        role: string;
+        [key: string]: unknown;
+    };
+    parts: Array<{
+        type?: string;
+        text?: string;
+        [key: string]: unknown;
+    }>;
+    [key: string]: unknown;
+};
+export type Message = FlatMessage | PartsMessage;
 export declare function consolidateSystemMessages(messages: Message[]): Message[];
 export {};

package/dist/hooks/spawn-helper.d.ts

@@ -1,3 +1,13 @@
+import * as child_process from 'node:child_process';
+/**
+ * DI seam (AGENTS.md invariant #7 — prefer `_internals` over `mock.module`).
+ * Tests inject a spawn spy here to assert the win32 `.cmd` transformation of
+ * the resolved command name without depending on `npm.cmd` actually existing
+ * on the (POSIX) test runner. Restore in `afterEach`.
+ */
+export declare const _internals: {
+    spawn: typeof child_process.spawn;
+};
 export declare function spawnAsync(command: string[], cwd: string, timeoutMs: number): Promise<{
     exitCode: number;
     stdout: string;