opencode-swarm 7.133.0 → 7.134.0

package/dist/cli/{index-2tn5h2zp.js → index-4p02dp92.js}

@@ -4,17 +4,17 @@ import {
   PlanSchema,
   TaskStatusSchema
 } from "./index-1kz6da87.js";
-import {
-  criticalWarn,
-  init_logger,
-  log
-} from "./index-zgwm4ryv.js";
 import {
   withEvidenceLock
-} from "./index-76kvm9z5.js";
+} from "./index-5nybajn9.js";
 import {
   emit
 } from "./index-q2rrv0cy.js";
+import {
+  criticalWarn,
+  init_logger,
+  log
+} from "./index-zgwm4ryv.js";
 
 // src/plan/utils.ts
 function derivePlanId(plan) {

package/dist/cli/index-b4z7s917.js

@@ -0,0 +1,80 @@
+// @bun
+import {
+  validateSwarmPath
+} from "./index-2ghkk9ve.js";
+
+// src/hooks/delegation-gate/worktree-provisioning-owner.ts
+import * as fs from "fs";
+import * as path from "path";
+var PROVISIONING_OWNER_DIR = "worktree-provisioning-owners";
+var MAX_PROVISIONING_OWNERS = 512;
+var MAX_PROVISIONING_OWNER_BYTES = 16 * 1024;
+function ownerDirectory(directory) {
+  return path.dirname(validateSwarmPath(directory, path.join(PROVISIONING_OWNER_DIR, ".containment-anchor")));
+}
+function isOwner(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const candidate = value;
+  const schemaVersion = candidate.schemaVersion;
+  const validTaskIdentity = schemaVersion === 1 ? candidate.taskId === undefined : schemaVersion === 2 && typeof candidate.taskId === "string" && candidate.taskId.length > 0 && candidate.taskId.length <= 512;
+  return (schemaVersion === 1 || schemaVersion === 2) && validTaskIdentity && typeof candidate.callID === "string" && candidate.callID.length > 0 && candidate.callID.length <= 512 && typeof candidate.parentSessionId === "string" && candidate.parentSessionId.length > 0 && candidate.parentSessionId.length <= 512 && typeof candidate.worktreeSessionId === "string" && candidate.worktreeSessionId.length > 0 && candidate.worktreeSessionId.length <= 512 && typeof candidate.createdAt === "number" && Number.isFinite(candidate.createdAt) && candidate.createdAt >= 0;
+}
+function scanWorktreeProvisioningOwnersForRecovery(directory) {
+  let directoryPath;
+  let entries;
+  try {
+    directoryPath = ownerDirectory(directory);
+    entries = fs.readdirSync(directoryPath, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json"));
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { status: "ok", owners: [] };
+    }
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning-owner directory is unreadable: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+  if (entries.length > MAX_PROVISIONING_OWNERS) {
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning-owner count exceeds the ${MAX_PROVISIONING_OWNERS}-marker safety bound`
+    };
+  }
+  const owners = [];
+  for (const entry of entries) {
+    const absolutePath = path.join(directoryPath, entry.name);
+    try {
+      const stat = fs.statSync(absolutePath);
+      if (stat.size > MAX_PROVISIONING_OWNER_BYTES) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" exceeds the recovery size bound`
+        };
+      }
+      const raw = fs.readFileSync(absolutePath, "utf8");
+      if (Buffer.byteLength(raw, "utf8") > MAX_PROVISIONING_OWNER_BYTES) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" changed beyond the recovery size bound`
+        };
+      }
+      const parsed = JSON.parse(raw);
+      if (!isOwner(parsed)) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" is invalid`
+        };
+      }
+      owners.push(parsed);
+    } catch (error) {
+      return {
+        status: "uncertain",
+        reason: `worktree provisioning owner "${entry.name}" is unreadable or malformed: ${error instanceof Error ? error.message : String(error)}`
+      };
+    }
+  }
+  return { status: "ok", owners };
+}
+
+export { scanWorktreeProvisioningOwnersForRecovery };

package/dist/cli/{index-wzb4dv5s.js → index-b5ek2cge.js}

@@ -3,13 +3,13 @@ import {
   OUTCOME_BLOCK_THRESHOLD,
   init_knowledge_types
 } from "./index-bk5tah7q.js";
-import {
-  init_merge
-} from "./index-zjygnfay.js";
 import {
   exports_external,
   init_zod
 } from "./index-bpmtbmy9.js";
+import {
+  init_merge
+} from "./index-zjygnfay.js";
 import {
   __esm
 } from "./index-a76rekgs.js";
@@ -19,7 +19,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.133.0",
+    version: "7.134.0",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",

package/dist/cli/index-b8zgtz81.js

@@ -0,0 +1,123 @@
+// @bun
+// src/hooks/delegation-gate/worktree-merge-status.ts
+import * as fs from "fs";
+import * as path from "path";
+var failuresByTask = new Map;
+var durableStatusPath;
+var MAX_RECOVERY_STATUS_BYTES = 2 * 1024 * 1024;
+var MAX_RECOVERY_STATUS_ENTRIES = 512;
+var hasLoaded = false;
+function loadDurableStatus(statusPath) {
+  try {
+    hasLoaded = true;
+    if (!fs.existsSync(statusPath)) {
+      failuresByTask.clear();
+      return;
+    }
+    const data = JSON.parse(fs.readFileSync(statusPath, "utf-8"));
+    if (data && typeof data === "object") {
+      failuresByTask.clear();
+      for (const [taskId, failure] of Object.entries(data)) {
+        failuresByTask.set(taskId, failure);
+      }
+    }
+  } catch {
+    failuresByTask.clear();
+  }
+}
+function isRecoveryFailure(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const candidate = value;
+  if (candidate.outcome !== "partial" && candidate.outcome !== "failed" || typeof candidate.stage !== "string" || !candidate.stage || typeof candidate.message !== "string" || !candidate.message) {
+    return false;
+  }
+  for (const key of ["worktreePath", "branch"]) {
+    if (candidate[key] !== undefined && (typeof candidate[key] !== "string" || candidate[key].length === 0)) {
+      return false;
+    }
+  }
+  for (const key of ["queuedAt", "completedAt"]) {
+    if (candidate[key] !== undefined && (typeof candidate[key] !== "number" || !Number.isFinite(candidate[key]) || candidate[key] < 0)) {
+      return false;
+    }
+  }
+  return true;
+}
+function scanWorktreeMergeFailuresForRecovery(projectDir) {
+  const statusPath = path.join(projectDir, ".swarm", "worktree-merge-status.json");
+  try {
+    const stat = fs.statSync(statusPath);
+    if (stat.size > MAX_RECOVERY_STATUS_BYTES) {
+      return {
+        status: "uncertain",
+        reason: `worktree merge-status file exceeds the ${MAX_RECOVERY_STATUS_BYTES}-byte recovery bound`
+      };
+    }
+    const raw = fs.readFileSync(statusPath, "utf-8");
+    if (Buffer.byteLength(raw, "utf8") > MAX_RECOVERY_STATUS_BYTES) {
+      return {
+        status: "uncertain",
+        reason: `worktree merge-status file changed beyond the ${MAX_RECOVERY_STATUS_BYTES}-byte recovery bound`
+      };
+    }
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return {
+        status: "uncertain",
+        reason: "worktree merge-status file does not contain an object"
+      };
+    }
+    const entries = Object.entries(parsed);
+    if (entries.length > MAX_RECOVERY_STATUS_ENTRIES) {
+      return {
+        status: "uncertain",
+        reason: `worktree merge-status owner count exceeds the ${MAX_RECOVERY_STATUS_ENTRIES}-entry safety bound`
+      };
+    }
+    for (const [taskId, failure] of entries) {
+      if (!taskId || !isRecoveryFailure(failure)) {
+        return {
+          status: "uncertain",
+          reason: `worktree merge-status has an invalid owner record for task "${taskId}"`
+        };
+      }
+    }
+    return {
+      status: "ok",
+      failures: entries
+    };
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { status: "ok", failures: [] };
+    }
+    return {
+      status: "uncertain",
+      reason: `worktree merge-status is unreadable or malformed: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+}
+function initDurableStatusPath(projectDir) {
+  if (typeof projectDir !== "string" || projectDir.length === 0)
+    return;
+  const nextPath = path.join(projectDir, ".swarm", "worktree-merge-status.json");
+  if (durableStatusPath === nextPath && hasLoaded)
+    return;
+  durableStatusPath = nextPath;
+  hasLoaded = false;
+  loadDurableStatus(durableStatusPath);
+}
+function getWorktreeMergeFailure(taskId) {
+  if (!hasLoaded && durableStatusPath) {
+    loadDurableStatus(durableStatusPath);
+  }
+  return failuresByTask.get(taskId);
+}
+function getAllWorktreeMergeFailures() {
+  if (!hasLoaded && durableStatusPath) {
+    loadDurableStatus(durableStatusPath);
+  }
+  return failuresByTask.entries();
+}
+
+export { scanWorktreeMergeFailuresForRecovery, initDurableStatusPath, getWorktreeMergeFailure, getAllWorktreeMergeFailures };

package/dist/cli/{index-j5pnah1w.js → index-baawkm48.js}

@@ -6,24 +6,24 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-q27bajqb.js";
+} from "./index-cfkvc5q9.js";
+import {
+  atomicWriteFile
+} from "./index-dd7ttx8x.js";
 import {
   init_knowledge_types,
   isActiveStatus
 } from "./index-bk5tah7q.js";
-import {
-  init_logger,
-  log
-} from "./index-zgwm4ryv.js";
-import {
-  atomicWriteFile
-} from "./index-7mkpsw6g.js";
 import {
   readCachedParsedFile
 } from "./index-fsrp8wp3.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
+import {
+  init_logger,
+  log
+} from "./index-zgwm4ryv.js";
 import {
   __require,
   __toESM
@@ -702,7 +702,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const recovered = touched.filter((e) => e.confidence > CONFIDENCE_FLOOR + FLOOR_EPSILON && e.confidence_floor_demoted);
   if (atFloor.length === 0 && recovered.length === 0)
     return;
-  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-pbycdhqd.js");
+  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-jjc9qbe0.js");
   const rollups = await readKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -769,11 +769,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-ge576f8n.js");
-    const { KnowledgeConfigSchema } = await import("./schema-a2zm2m3r.js");
+    const { quarantineEntry } = await import("./knowledge-validator-h1nrn2pk.js");
+    const { KnowledgeConfigSchema } = await import("./schema-bjb0yzsq.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-hfpw5m0e.js");
+      const { loadPluginConfigWithMeta } = await import("./index-kapharv7.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-sp7tm8t7.js → index-c3e0ymrg.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-mmvaf4t6.js";
+} from "./index-hgh01f6h.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/{index-q27bajqb.js → index-cfkvc5q9.js}

@@ -1,11 +1,11 @@
 // @bun
+import {
+  atomicWriteFile
+} from "./index-dd7ttx8x.js";
 import {
   init_logger,
   warn
 } from "./index-zgwm4ryv.js";
-import {
-  atomicWriteFile
-} from "./index-7mkpsw6g.js";
 
 // src/hooks/knowledge-link.ts
 import {

package/dist/cli/{index-7mkpsw6g.js → index-dd7ttx8x.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-fsrp8wp3.js";
 import {
   withEvidenceLock
-} from "./index-76kvm9z5.js";
+} from "./index-5nybajn9.js";
 import {
   bunWrite
 } from "./index-qe3v54nb.js";

package/dist/cli/{index-bz08438z.js → index-dgxgvzab.js}

@@ -4,17 +4,17 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-q27bajqb.js";
-import {
-  init_logger,
-  warn
-} from "./index-zgwm4ryv.js";
+} from "./index-cfkvc5q9.js";
 import {
   atomicWriteFile
-} from "./index-7mkpsw6g.js";
+} from "./index-dd7ttx8x.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
+import {
+  init_logger,
+  warn
+} from "./index-zgwm4ryv.js";
 import {
   __require,
   __toESM
@@ -608,7 +608,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
       deltas.push({ id, delta });
     }
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-45jawb2p.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-9e0w1kxm.js");
       await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-mhcge2ry.js → index-eedq2y40.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-sw82jvf2.js";
+} from "./index-rkyhv4p5.js";
 import {
   handleGuardrailLog
-} from "./index-sp7tm8t7.js";
+} from "./index-c3e0ymrg.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -84,29 +84,30 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-mwqfyjja.js";
-import"./index-mmvaf4t6.js";
-import"./index-tj2mkfb3.js";
-import"./index-r260ybay.js";
+} from "./index-3dtjhr26.js";
+import"./index-13xxjfhn.js";
+import"./index-hgh01f6h.js";
+import"./index-g87ty4wp.js";
+import"./index-k742ecbm.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-9f71ye47.js";
-import"./index-0vd91yb8.js";
-import"./index-cpest8sa.js";
-import"./index-66zght9d.js";
+import"./index-j6ywarjp.js";
+import"./index-jpkxjmfw.js";
+import"./index-m2s0gbzt.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-g4mnf3p5.js";
-import"./index-s80bsjkj.js";
-import"./index-7ftthvqt.js";
-import"./index-wz36r0fk.js";
+import"./index-wk1h5ec2.js";
+import"./index-1j3682j8.js";
+import"./index-2njes601.js";
+import"./index-y0kk3rtv.js";
 import"./index-rtry5xyf.js";
-import"./index-j5pnah1w.js";
-import"./index-bz08438z.js";
+import"./index-baawkm48.js";
+import"./index-dgxgvzab.js";
 import"./index-ae75rja9.js";
-import"./index-q27bajqb.js";
-import"./index-kc1m6vpr.js";
+import"./index-cfkvc5q9.js";
+import"./index-dd7ttx8x.js";
+import"./index-xfejq1p9.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
@@ -115,27 +116,29 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-wzb4dv5s.js";
+} from "./index-b5ek2cge.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-74tptrss.js";
-import"./index-2tn5h2zp.js";
+import"./index-p8hezdtz.js";
+import"./index-4p02dp92.js";
 import"./index-1kz6da87.js";
-import"./index-17zjp67y.js";
-import"./index-z6xqpmqg.js";
+import"./index-b4z7s917.js";
+import"./index-b8zgtz81.js";
+import"./index-2t1n9k7b.js";
 import"./index-4rhhvd1a.js";
-import"./index-zjygnfay.js";
-import"./index-zgwm4ryv.js";
-import"./index-h3k62043.js";
-import"./index-3x761jqv.js";
-import"./index-7mkpsw6g.js";
+import"./index-y3v1404y.js";
+import"./index-2ghkk9ve.js";
 import"./index-fsrp8wp3.js";
-import"./index-76kvm9z5.js";
+import"./index-5nybajn9.js";
+import"./index-7g4c7s5r.js";
 import"./index-q2rrv0cy.js";
 import"./index-bpmtbmy9.js";
-import"./index-7g4c7s5r.js";
+import"./index-z6xqpmqg.js";
+import"./index-zjygnfay.js";
 import"./index-qe3v54nb.js";
+import"./index-zgwm4ryv.js";
+import"./index-h3k62043.js";
 import"./index-a76rekgs.js";
 
 // src/commands/index.ts

package/dist/cli/{index-tj2mkfb3.js → index-g87ty4wp.js}

@@ -8,7 +8,7 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-wzb4dv5s.js";
+} from "./index-b5ek2cge.js";
 import {
   log
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-mmvaf4t6.js → index-hgh01f6h.js}

@@ -3,7 +3,7 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-wzb4dv5s.js";
+} from "./index-b5ek2cge.js";
 import {
   init_logger,
   warn
@@ -2212,6 +2212,28 @@ function isInDeclaredScope(filePath, scopeEntries, cwd) {
     return rel.length > 0 && !rel.startsWith("..") && !path.isAbsolute(rel);
   });
 }
+var MAX_ALLOWED_HINT_ENTRIES = 20;
+function formatAllowedHints(rules) {
+  const fmt = (items) => {
+    if (!items || items.length === 0)
+      return "(none)";
+    if (items.length <= MAX_ALLOWED_HINT_ENTRIES)
+      return items.join(", ");
+    const omitted = items.length - MAX_ALLOWED_HINT_ENTRIES;
+    return `${items.slice(0, MAX_ALLOWED_HINT_ENTRIES).join(", ")}, \u2026 (+${omitted} more)`;
+  };
+  const parts = [];
+  if (rules.allowedExact && rules.allowedExact.length > 0) {
+    parts.push(`Allowed exact paths: ${fmt(rules.allowedExact)}`);
+  }
+  parts.push(`Allowed prefixes: ${fmt(rules.allowedPrefix)}`);
+  parts.push(`Allowed globs: ${fmt(rules.allowedGlobs)}`);
+  if (rules.allowedCaseSensitiveGlobs && rules.allowedCaseSensitiveGlobs.length > 0) {
+    parts.push(`Allowed case-sensitive globs: ${fmt(rules.allowedCaseSensitiveGlobs)}`);
+  }
+  parts.push("Block rules (blocked zones/prefixes/globs/exact) and universal deny paths still apply.");
+  return parts.join(" ");
+}
 function checkFileAuthorityWithRules(agentName, filePath, cwd, effectiveRules, options) {
   const normalizedAgent = agentName.toLowerCase();
   const strippedAgent = stripKnownSwarmPrefix(agentName).toLowerCase();
@@ -2321,13 +2343,13 @@ function checkFileAuthorityWithRules(agentName, filePath, cwd, effectiveRules, o
       if (!isAllowed) {
         return {
           allowed: false,
-          reason: `Path ${normalizedPath} not in allowed list for ${normalizedAgent}`
+          reason: `Path ${normalizedPath} not in allowed list for ${normalizedAgent}. ${formatAllowedHints(rules)}`
         };
       }
     } else if (rules.allowedPrefix != null && rules.allowedPrefix.length === 0) {
       return {
         allowed: false,
-        reason: `Path ${normalizedPath} not in allowed list for ${normalizedAgent}`
+        reason: `Path ${normalizedPath} not in allowed list for ${normalizedAgent}. ${formatAllowedHints(rules)}`
       };
     }
   }

package/dist/cli/{index-0vd91yb8.js → index-j6ywarjp.js}

@@ -2,18 +2,18 @@
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-7ftthvqt.js";
+} from "./index-2njes601.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-j5pnah1w.js";
+} from "./index-baawkm48.js";
 import {
   effectiveRetrievalOutcomes,
   readKnowledgeCounterRollups
-} from "./index-bz08438z.js";
+} from "./index-dgxgvzab.js";
 import {
   init_knowledge_types,
   isActiveStatus

package/dist/cli/{index-cpest8sa.js → index-jpkxjmfw.js}

@@ -6,13 +6,13 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-j5pnah1w.js";
+} from "./index-baawkm48.js";
 import {
   countEntryContradictionsInWindow,
   countEntryViolationsInWindow,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-bz08438z.js";
+} from "./index-dgxgvzab.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -190,11 +190,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-ge576f8n.js");
+    const { quarantineEntry } = await import("./knowledge-validator-h1nrn2pk.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-a2zm2m3r.js");
-      const { loadPluginConfigWithMeta } = await import("./index-hfpw5m0e.js");
+      const { KnowledgeConfigSchema } = await import("./schema-bjb0yzsq.js");
+      const { loadPluginConfigWithMeta } = await import("./index-kapharv7.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {