opencode-swarm 7.119.0 → 7.120.0

package/dist/cli/index-0mbmfmt0.js

@@ -0,0 +1,349 @@
+// @bun
+import {
+  exports_external
+} from "./index-293f68mj.js";
+
+// src/config/plan-schema.ts
+var ExecutionProfileSchema = exports_external.object({
+  parallelization_enabled: exports_external.boolean().default(false),
+  max_concurrent_tasks: exports_external.number().int().min(1).max(64).default(10),
+  council_parallel: exports_external.boolean().default(true),
+  locked: exports_external.boolean().default(false),
+  auto_proceed: exports_external.boolean().default(false)
+});
+var TaskStatusSchema = exports_external.enum([
+  "pending",
+  "in_progress",
+  "completed",
+  "blocked",
+  "closed"
+]);
+var TaskSizeSchema = exports_external.enum(["small", "medium", "large"]);
+var PhaseStatusSchema = exports_external.enum([
+  "pending",
+  "in_progress",
+  "complete",
+  "completed",
+  "blocked",
+  "closed"
+]);
+var MigrationStatusSchema = exports_external.enum([
+  "native",
+  "migrated",
+  "migration_failed"
+]);
+var TaskSchema = exports_external.object({
+  id: exports_external.string(),
+  phase: exports_external.number().int().min(1),
+  status: TaskStatusSchema.default("pending"),
+  size: TaskSizeSchema.default("small"),
+  description: exports_external.string().min(1),
+  depends: exports_external.array(exports_external.string()).default([]),
+  acceptance: exports_external.string().optional(),
+  files_touched: exports_external.array(exports_external.string()).default([]),
+  evidence_path: exports_external.string().optional(),
+  blocked_reason: exports_external.string().optional()
+});
+var PhaseSchema = exports_external.object({
+  id: exports_external.number().int().min(1),
+  name: exports_external.string().min(1),
+  status: PhaseStatusSchema.default("pending"),
+  tasks: exports_external.array(TaskSchema).default([]),
+  type: exports_external.enum(["code", "non-code"]).optional(),
+  required_agents: exports_external.array(exports_external.string()).optional()
+});
+var PlanSchema = exports_external.object({
+  schema_version: exports_external.literal("1.0.0"),
+  title: exports_external.string().min(1),
+  swarm: exports_external.string().min(1),
+  current_phase: exports_external.number().int().min(1).optional(),
+  phases: exports_external.array(PhaseSchema).min(1),
+  migration_status: MigrationStatusSchema.optional(),
+  specMtime: exports_external.string().optional(),
+  specHash: exports_external.string().optional(),
+  execution_profile: ExecutionProfileSchema.optional()
+});
+
+// src/config/evidence-schema.ts
+var EVIDENCE_MAX_JSON_BYTES = 500 * 1024;
+var EVIDENCE_MAX_PATCH_BYTES = 5 * 1024 * 1024;
+var EVIDENCE_MAX_TASK_BYTES = 20 * 1024 * 1024;
+var EvidenceTypeSchema = exports_external.enum([
+  "review",
+  "test",
+  "diff",
+  "approval",
+  "note",
+  "retrospective",
+  "syntax",
+  "placeholder",
+  "sast",
+  "sbom",
+  "build",
+  "quality_budget",
+  "secretscan",
+  "mutation-gate",
+  "drift-verification",
+  "hallucination-verification"
+]);
+var EvidenceVerdictSchema = exports_external.enum([
+  "pass",
+  "fail",
+  "warn",
+  "skip",
+  "approved",
+  "rejected",
+  "info"
+]);
+var BaseEvidenceSchema = exports_external.object({
+  task_id: exports_external.string().min(1),
+  type: EvidenceTypeSchema,
+  timestamp: exports_external.string().datetime(),
+  agent: exports_external.string().min(1),
+  verdict: EvidenceVerdictSchema,
+  summary: exports_external.string().min(1),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var ReviewEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("review"),
+  risk: exports_external.enum(["low", "medium", "high", "critical"]),
+  issues: exports_external.array(exports_external.object({
+    severity: exports_external.enum(["error", "warning", "info"]),
+    message: exports_external.string().min(1),
+    file: exports_external.string().optional(),
+    line: exports_external.number().int().optional()
+  })).default([])
+});
+var TestEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("test"),
+  tests_passed: exports_external.number().int().min(0),
+  tests_failed: exports_external.number().int().min(0),
+  test_file: exports_external.string().optional(),
+  failures: exports_external.array(exports_external.object({
+    name: exports_external.string().min(1),
+    message: exports_external.string().min(1)
+  })).default([])
+});
+var DiffEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("diff"),
+  files_changed: exports_external.array(exports_external.string()).default([]),
+  additions: exports_external.number().int().min(0).default(0),
+  deletions: exports_external.number().int().min(0).default(0),
+  patch_path: exports_external.string().optional()
+});
+var ApprovalEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("approval")
+});
+var NoteEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("note")
+});
+var RetrospectiveEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("retrospective"),
+  phase_number: exports_external.number().int().min(1).max(99),
+  total_tool_calls: exports_external.number().int().min(0).max(9999),
+  coder_revisions: exports_external.number().int().min(0).max(999),
+  reviewer_rejections: exports_external.number().int().min(0).max(999),
+  loop_detections: exports_external.number().int().min(0).max(9999).optional(),
+  circuit_breaker_trips: exports_external.number().int().min(0).max(9999).optional(),
+  test_failures: exports_external.number().int().min(0).max(9999),
+  security_findings: exports_external.number().int().min(0).max(999),
+  integration_issues: exports_external.number().int().min(0).max(999),
+  task_count: exports_external.number().int().min(1).max(9999),
+  task_complexity: exports_external.enum(["trivial", "simple", "moderate", "complex"]),
+  top_rejection_reasons: exports_external.array(exports_external.string()).default([]),
+  lessons_learned: exports_external.array(exports_external.string()).max(5).default([]),
+  user_directives: exports_external.array(exports_external.object({
+    directive: exports_external.string().min(1),
+    category: exports_external.enum([
+      "tooling",
+      "code_style",
+      "architecture",
+      "process",
+      "other"
+    ]),
+    scope: exports_external.enum(["session", "project", "global"])
+  })).default([]),
+  approaches_tried: exports_external.array(exports_external.object({
+    approach: exports_external.string().min(1),
+    result: exports_external.enum(["success", "failure", "partial"]),
+    abandoned_reason: exports_external.string().optional()
+  })).max(10).default([]),
+  error_taxonomy: exports_external.array(exports_external.enum([
+    "planning_error",
+    "interface_mismatch",
+    "logic_error",
+    "scope_creep",
+    "gate_evasion"
+  ])).default([])
+});
+var SyntaxEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("syntax"),
+  files_checked: exports_external.number().int(),
+  files_failed: exports_external.number().int(),
+  skipped_count: exports_external.number().int().default(0),
+  files: exports_external.array(exports_external.object({
+    path: exports_external.string(),
+    language: exports_external.string(),
+    ok: exports_external.boolean(),
+    errors: exports_external.array(exports_external.object({
+      line: exports_external.number().int(),
+      column: exports_external.number().int(),
+      message: exports_external.string()
+    })).default([]),
+    skipped_reason: exports_external.string().optional()
+  })).default([])
+});
+var PlaceholderEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("placeholder"),
+  findings: exports_external.array(exports_external.object({
+    path: exports_external.string(),
+    line: exports_external.number().int(),
+    kind: exports_external.enum(["comment", "string", "function_body", "other"]),
+    excerpt: exports_external.string(),
+    rule_id: exports_external.string()
+  })).default([]),
+  files_scanned: exports_external.number().int(),
+  files_with_findings: exports_external.number().int(),
+  findings_count: exports_external.number().int()
+});
+var SastFindingSchema = exports_external.object({
+  rule_id: exports_external.string(),
+  severity: exports_external.enum(["critical", "high", "medium", "low"]),
+  message: exports_external.string(),
+  location: exports_external.object({
+    file: exports_external.string(),
+    line: exports_external.number().int(),
+    column: exports_external.number().int().optional()
+  }),
+  remediation: exports_external.string().optional()
+});
+var SastEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("sast"),
+  findings: exports_external.array(SastFindingSchema).default([]),
+  engine: exports_external.enum(["tier_a", "tier_a+tier_b"]),
+  files_scanned: exports_external.number().int(),
+  findings_count: exports_external.number().int(),
+  findings_by_severity: exports_external.object({
+    critical: exports_external.number().int(),
+    high: exports_external.number().int(),
+    medium: exports_external.number().int(),
+    low: exports_external.number().int()
+  }),
+  new_findings: exports_external.array(SastFindingSchema).optional(),
+  pre_existing_findings: exports_external.array(SastFindingSchema).optional(),
+  baseline_used: exports_external.boolean().optional()
+});
+var SbomEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("sbom"),
+  components: exports_external.array(exports_external.object({
+    name: exports_external.string(),
+    version: exports_external.string(),
+    type: exports_external.enum(["library", "framework", "application"]),
+    purl: exports_external.string().optional(),
+    license: exports_external.string().optional()
+  })).default([]),
+  metadata: exports_external.object({
+    timestamp: exports_external.string().datetime(),
+    tool: exports_external.string(),
+    tool_version: exports_external.string()
+  }),
+  files: exports_external.array(exports_external.string()),
+  components_count: exports_external.number().int(),
+  output_path: exports_external.string()
+});
+var BuildEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("build"),
+  runs: exports_external.array(exports_external.object({
+    kind: exports_external.enum(["build", "typecheck", "test"]),
+    command: exports_external.string(),
+    cwd: exports_external.string(),
+    exit_code: exports_external.number().int(),
+    duration_ms: exports_external.number().int(),
+    stdout_tail: exports_external.string(),
+    stderr_tail: exports_external.string()
+  })).default([]),
+  files_scanned: exports_external.number().int(),
+  runs_count: exports_external.number().int(),
+  failed_count: exports_external.number().int(),
+  skipped_reason: exports_external.string().optional()
+});
+var QualityBudgetEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("quality_budget"),
+  metrics: exports_external.object({
+    complexity_delta: exports_external.number(),
+    public_api_delta: exports_external.number(),
+    duplication_ratio: exports_external.number(),
+    test_to_code_ratio: exports_external.number()
+  }),
+  thresholds: exports_external.object({
+    max_complexity_delta: exports_external.number(),
+    max_public_api_delta: exports_external.number(),
+    max_duplication_ratio: exports_external.number(),
+    min_test_to_code_ratio: exports_external.number()
+  }),
+  violations: exports_external.array(exports_external.object({
+    type: exports_external.enum(["complexity", "api", "duplication", "test_ratio"]),
+    message: exports_external.string(),
+    severity: exports_external.enum(["error", "warning"]),
+    files: exports_external.array(exports_external.string())
+  })).default([]),
+  files_analyzed: exports_external.array(exports_external.string())
+});
+var SecretscanEvidenceSchema = BaseEvidenceSchema.extend({
+  type: exports_external.literal("secretscan"),
+  findings_count: exports_external.number().int().min(0).default(0),
+  scan_directory: exports_external.string().optional(),
+  files_scanned: exports_external.number().int().min(0).default(0),
+  skipped_files: exports_external.number().int().min(0).default(0)
+});
+var GateEvidenceBaseSchema = exports_external.object({
+  task_id: exports_external.string().optional(),
+  agent: exports_external.string().optional(),
+  timestamp: exports_external.string().datetime(),
+  summary: exports_external.string().min(1),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var MutationGateEvidenceSchema = GateEvidenceBaseSchema.extend({
+  type: exports_external.literal("mutation-gate"),
+  verdict: exports_external.enum(["pass", "warn", "fail", "skip"]),
+  killRate: exports_external.number().min(0).max(1).optional(),
+  adjustedKillRate: exports_external.number().min(0).max(1).optional(),
+  survivedMutants: exports_external.string().optional()
+});
+var DriftVerificationEvidenceSchema = GateEvidenceBaseSchema.extend({
+  type: exports_external.literal("drift-verification"),
+  verdict: exports_external.enum(["approved", "rejected"]),
+  requirementCoverage: exports_external.string().optional()
+});
+var HallucinationVerificationEvidenceSchema = GateEvidenceBaseSchema.extend({
+  type: exports_external.literal("hallucination-verification"),
+  verdict: exports_external.enum(["approved", "rejected"]),
+  findings: exports_external.string().optional()
+});
+var EvidenceSchema = exports_external.discriminatedUnion("type", [
+  ReviewEvidenceSchema,
+  TestEvidenceSchema,
+  DiffEvidenceSchema,
+  ApprovalEvidenceSchema,
+  NoteEvidenceSchema,
+  RetrospectiveEvidenceSchema,
+  SyntaxEvidenceSchema,
+  PlaceholderEvidenceSchema,
+  SastEvidenceSchema,
+  SbomEvidenceSchema,
+  BuildEvidenceSchema,
+  QualityBudgetEvidenceSchema,
+  SecretscanEvidenceSchema,
+  MutationGateEvidenceSchema,
+  DriftVerificationEvidenceSchema,
+  HallucinationVerificationEvidenceSchema
+]);
+var EvidenceBundleSchema = exports_external.object({
+  schema_version: exports_external.literal("1.0.0"),
+  task_id: exports_external.string().min(1),
+  entries: exports_external.array(EvidenceSchema).default([]),
+  created_at: exports_external.string().datetime(),
+  updated_at: exports_external.string().datetime()
+});
+
+export { ExecutionProfileSchema, TaskStatusSchema, TaskSizeSchema, PhaseStatusSchema, MigrationStatusSchema, TaskSchema, PhaseSchema, PlanSchema, EVIDENCE_MAX_JSON_BYTES, EVIDENCE_MAX_PATCH_BYTES, EVIDENCE_MAX_TASK_BYTES, EvidenceTypeSchema, EvidenceVerdictSchema, BaseEvidenceSchema, ReviewEvidenceSchema, TestEvidenceSchema, DiffEvidenceSchema, ApprovalEvidenceSchema, NoteEvidenceSchema, RetrospectiveEvidenceSchema, EvidenceSchema, EvidenceBundleSchema };

package/dist/cli/{index-7pspktns.js → index-1smvzr78.js}

@@ -12,14 +12,14 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-mr3pnc4h.js";
+} from "./index-bndd885n.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-g2wrs7jy.js";
+} from "./index-kyvg2cmp.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-5bcrp3bc.js → index-22e127jw.js}

@@ -5,12 +5,12 @@ import {
 import {
   log
 } from "./index-zgwm4ryv.js";
+import {
+  withEvidenceLock
+} from "./index-76kvm9z5.js";
 import {
   exports_external
 } from "./index-293f68mj.js";
-import {
-  withEvidenceLock
-} from "./index-42cx6g2h.js";
 
 // src/background/pr-subscriptions.ts
 import * as fs from "fs";

package/dist/cli/{index-pjhfe7c3.js → index-3366gs26.js}

@@ -1,4 +1,7 @@
 // @bun
+import {
+  authorizeCuration
+} from "./index-69ms9ny1.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -6,20 +9,20 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-qx5z58a7.js";
+} from "./index-rywkdacj.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-wpgv6hht.js";
+} from "./index-3jvqw5hy.js";
 import {
   init_logger,
   warn
 } from "./index-zgwm4ryv.js";
 import {
   atomicWriteFile
-} from "./index-0pfqcjp6.js";
+} from "./index-h07wn84h.js";
 import {
   require_proper_lockfile
-} from "./index-vvk2g744.js";
+} from "./index-7g4c7s5r.js";
 import {
   __toESM
 } from "./index-a76rekgs.js";
@@ -569,7 +572,7 @@ function auditEntryHealth(entry) {
   }
   return { healthy: true };
 }
-async function quarantineEntry(directory, entryId, reason, reportedBy) {
+async function quarantineEntry(directory, entryId, reason, reportedBy, curationContext) {
   if (!directory || directory.includes("..")) {
     warn("[knowledge-validator] quarantineEntry: directory traversal attempt blocked");
     return;
@@ -600,6 +603,17 @@ async function quarantineEntry(directory, entryId, reason, reportedBy) {
     if (!entry) {
       return;
     }
+    if (curationContext) {
+      const refreshedContext = {
+        ...curationContext.context,
+        entry
+      };
+      const decision = await authorizeCuration(curationContext.input, refreshedContext);
+      if (!decision.authorized) {
+        warn(`[knowledge-validator] quarantineEntry blocked by cohort-safety policy ` + `(basis: ${decision.basis}): ${decision.detail}`);
+        return;
+      }
+    }
     const remaining = entries.filter((e) => e.id !== entryId);
     const quarantined = {
       ...entry,
@@ -638,7 +652,7 @@ async function quarantineEntry(directory, entryId, reason, reportedBy) {
     }
   }
 }
-async function restoreEntry(directory, entryId) {
+async function restoreEntry(directory, entryId, curationContext) {
   if (!directory || directory.includes("..")) {
     warn("[knowledge-validator] restoreEntry: directory traversal attempt blocked");
     return;
@@ -665,6 +679,17 @@ async function restoreEntry(directory, entryId) {
     if (!entryToRestore) {
       return;
     }
+    if (curationContext) {
+      const refreshedContext = {
+        ...curationContext.context,
+        entry: entryToRestore
+      };
+      const decision = await authorizeCuration(curationContext.input, refreshedContext);
+      if (!decision.authorized) {
+        warn(`[knowledge-validator] restoreEntry blocked by cohort-safety policy ` + `(basis: ${decision.basis}): ${decision.detail}`);
+        return;
+      }
+    }
     const remaining = quarantinedEntries.filter((e) => e.id !== entryId);
     const {
       quarantine_reason,
@@ -702,7 +727,7 @@ async function restoreEntry(directory, entryId) {
     }
   }
 }
-async function unarchiveEntry(directory, entryId) {
+async function unarchiveEntry(directory, entryId, curationContext) {
   if (!directory || directory.includes("..")) {
     warn("[knowledge-validator] unarchiveEntry: directory traversal attempt blocked");
     return { restored: false, reason: "not_found" };
@@ -730,6 +755,17 @@ async function unarchiveEntry(directory, entryId) {
     if (target.status !== "archived") {
       return { restored: false, reason: "not_archived" };
     }
+    if (curationContext) {
+      const refreshedContext = {
+        ...curationContext.context,
+        entry: target
+      };
+      const decision = await authorizeCuration(curationContext.input, refreshedContext);
+      if (!decision.authorized) {
+        warn(`[knowledge-validator] unarchiveEntry blocked by cohort-safety policy ` + `(basis: ${decision.basis}): ${decision.detail}`);
+        return { restored: false, reason: "blocked_by_policy" };
+      }
+    }
     const validation = validateLesson(target.lesson, [], {
       category: target.category,
       scope: target.scope,

package/dist/cli/{index-wpgv6hht.js → index-3jvqw5hy.js}

@@ -5,7 +5,7 @@ import {
 } from "./index-zgwm4ryv.js";
 import {
   atomicWriteFile
-} from "./index-0pfqcjp6.js";
+} from "./index-h07wn84h.js";
 
 // src/hooks/knowledge-link.ts
 import {
@@ -233,29 +233,16 @@ function invalidateKnowledgeStoreDirCache(directory) {
 function isLinked(directory) {
   return readLinkPointer(directory) !== null;
 }
+var _internals = {
+  resolveKnowledgeStoreDir,
+  readLinkPointer,
+  writeLinkPointer,
+  removeLinkPointer,
+  getLinkedLocalKnowledgeStatus,
+  invalidateKnowledgeStoreDirCache,
+  resolveLinkDir,
+  resolveLinkBaseDir,
+  sanitizeLinkId
+};
 
-// src/knowledge/hive-paths.ts
-import * as os2 from "os";
-import * as path2 from "path";
-function resolveHiveDataDir() {
-  const platform = process.platform;
-  const home = process.env.HOME || os2.homedir();
-  if (platform === "win32") {
-    return path2.join(process.env.LOCALAPPDATA || path2.join(home, "AppData", "Local"), "opencode-swarm", "Data");
-  }
-  if (platform === "darwin") {
-    return path2.join(home, "Library", "Application Support", "opencode-swarm");
-  }
-  return path2.join(process.env.XDG_DATA_HOME || path2.join(home, ".local", "share"), "opencode-swarm");
-}
-function resolveHiveKnowledgePath() {
-  return path2.join(resolveHiveDataDir(), "shared-learnings.jsonl");
-}
-function resolveHiveRejectedPath() {
-  return path2.join(resolveHiveDataDir(), "shared-learnings-rejected.jsonl");
-}
-function resolveHiveEventsPath() {
-  return path2.join(resolveHiveDataDir(), "shared-knowledge-events.jsonl");
-}
-
-export { resolveLinkDir, sanitizeLinkId, readLinkPointer, getLinkedLocalKnowledgeStatus, writeLinkPointer, removeLinkPointer, resolveKnowledgeStoreDir, isLinked, resolveHiveDataDir, resolveHiveKnowledgePath, resolveHiveRejectedPath, resolveHiveEventsPath };
+export { LINK_POINTER_FILENAME, resolveLinkBaseDir, resolveLinkDir, sanitizeLinkId, readLinkPointer, getLinkedLocalKnowledgeStatus, writeLinkPointer, removeLinkPointer, resolveKnowledgeStoreDir, invalidateKnowledgeStoreDirCache, isLinked, _internals };

package/dist/cli/{index-bfwt3abw.js → index-4rhcth7a.js}

@@ -1,6 +1,6 @@
 // @bun
 // src/hooks/knowledge-types.ts
-var KNOWLEDGE_SCHEMA_VERSION = 2;
+var KNOWLEDGE_SCHEMA_VERSION = 3;
 var INACTIVE_STATUSES = new Set([
   "archived",
   "quarantined",

package/dist/cli/{index-n6fa2hhk.js → index-51gg9947.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   require_proper_lockfile
-} from "./index-vvk2g744.js";
+} from "./index-7g4c7s5r.js";
 import {
   bunWrite
 } from "./index-qe3v54nb.js";