opencode-swarm 7.133.0 → 7.134.1

package/dist/cli/{index-hfpw5m0e.js → index-463k8mfr.js}

@@ -7,7 +7,7 @@ import {
   loadPluginConfigWithMeta,
   loadPluginConfigWithMetaAsync,
   resolveWorktreeIsolationConfig
-} from "./index-kc1m6vpr.js";
+} from "./index-c0e3vhv9.js";
 import {
   ApprovalEvidenceSchema,
   BaseEvidenceSchema,
@@ -62,7 +62,7 @@ import {
   isQAAgent,
   isSubagent,
   resolveAutoReviewConfig
-} from "./index-wzb4dv5s.js";
+} from "./index-y2esw64s.js";
 import"./index-bk5tah7q.js";
 import {
   MigrationStatusSchema,
@@ -74,9 +74,9 @@ import {
   TaskStatusSchema
 } from "./index-1kz6da87.js";
 import"./index-4rhhvd1a.js";
+import"./index-bpmtbmy9.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {
   validateSpecContent,

package/dist/cli/{index-2tn5h2zp.js → index-4p02dp92.js}

@@ -4,17 +4,17 @@ import {
   PlanSchema,
   TaskStatusSchema
 } from "./index-1kz6da87.js";
-import {
-  criticalWarn,
-  init_logger,
-  log
-} from "./index-zgwm4ryv.js";
 import {
   withEvidenceLock
-} from "./index-76kvm9z5.js";
+} from "./index-5nybajn9.js";
 import {
   emit
 } from "./index-q2rrv0cy.js";
+import {
+  criticalWarn,
+  init_logger,
+  log
+} from "./index-zgwm4ryv.js";
 
 // src/plan/utils.ts
 function derivePlanId(plan) {

package/dist/cli/{index-7ftthvqt.js → index-6b69mp0r.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-wz36r0fk.js";
+} from "./index-zjw32rv9.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,20 +9,20 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-j5pnah1w.js";
+} from "./index-2j8f71c3.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-q27bajqb.js";
-import {
-  init_logger,
-  warn
-} from "./index-zgwm4ryv.js";
+} from "./index-cfkvc5q9.js";
 import {
   atomicWriteFile
-} from "./index-7mkpsw6g.js";
+} from "./index-dd7ttx8x.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
+import {
+  init_logger,
+  warn
+} from "./index-zgwm4ryv.js";
 import {
   __toESM
 } from "./index-a76rekgs.js";

package/dist/cli/{index-bz08438z.js → index-8t9xpn1a.js}

@@ -4,17 +4,17 @@ import {
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-q27bajqb.js";
-import {
-  init_logger,
-  warn
-} from "./index-zgwm4ryv.js";
+} from "./index-cfkvc5q9.js";
 import {
   atomicWriteFile
-} from "./index-7mkpsw6g.js";
+} from "./index-dd7ttx8x.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
+import {
+  init_logger,
+  warn
+} from "./index-zgwm4ryv.js";
 import {
   __require,
   __toESM
@@ -608,7 +608,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
       deltas.push({ id, delta });
     }
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-45jawb2p.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-n5pvv0s3.js");
       await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-sp7tm8t7.js → index-9z1q181f.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-mmvaf4t6.js";
+} from "./index-1v5mby7t.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/index-b4z7s917.js

@@ -0,0 +1,80 @@
+// @bun
+import {
+  validateSwarmPath
+} from "./index-2ghkk9ve.js";
+
+// src/hooks/delegation-gate/worktree-provisioning-owner.ts
+import * as fs from "fs";
+import * as path from "path";
+var PROVISIONING_OWNER_DIR = "worktree-provisioning-owners";
+var MAX_PROVISIONING_OWNERS = 512;
+var MAX_PROVISIONING_OWNER_BYTES = 16 * 1024;
+function ownerDirectory(directory) {
+  return path.dirname(validateSwarmPath(directory, path.join(PROVISIONING_OWNER_DIR, ".containment-anchor")));
+}
+function isOwner(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const candidate = value;
+  const schemaVersion = candidate.schemaVersion;
+  const validTaskIdentity = schemaVersion === 1 ? candidate.taskId === undefined : schemaVersion === 2 && typeof candidate.taskId === "string" && candidate.taskId.length > 0 && candidate.taskId.length <= 512;
+  return (schemaVersion === 1 || schemaVersion === 2) && validTaskIdentity && typeof candidate.callID === "string" && candidate.callID.length > 0 && candidate.callID.length <= 512 && typeof candidate.parentSessionId === "string" && candidate.parentSessionId.length > 0 && candidate.parentSessionId.length <= 512 && typeof candidate.worktreeSessionId === "string" && candidate.worktreeSessionId.length > 0 && candidate.worktreeSessionId.length <= 512 && typeof candidate.createdAt === "number" && Number.isFinite(candidate.createdAt) && candidate.createdAt >= 0;
+}
+function scanWorktreeProvisioningOwnersForRecovery(directory) {
+  let directoryPath;
+  let entries;
+  try {
+    directoryPath = ownerDirectory(directory);
+    entries = fs.readdirSync(directoryPath, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json"));
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { status: "ok", owners: [] };
+    }
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning-owner directory is unreadable: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+  if (entries.length > MAX_PROVISIONING_OWNERS) {
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning-owner count exceeds the ${MAX_PROVISIONING_OWNERS}-marker safety bound`
+    };
+  }
+  const owners = [];
+  for (const entry of entries) {
+    const absolutePath = path.join(directoryPath, entry.name);
+    try {
+      const stat = fs.statSync(absolutePath);
+      if (stat.size > MAX_PROVISIONING_OWNER_BYTES) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" exceeds the recovery size bound`
+        };
+      }
+      const raw = fs.readFileSync(absolutePath, "utf8");
+      if (Buffer.byteLength(raw, "utf8") > MAX_PROVISIONING_OWNER_BYTES) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" changed beyond the recovery size bound`
+        };
+      }
+      const parsed = JSON.parse(raw);
+      if (!isOwner(parsed)) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" is invalid`
+        };
+      }
+      owners.push(parsed);
+    } catch (error) {
+      return {
+        status: "uncertain",
+        reason: `worktree provisioning owner "${entry.name}" is unreadable or malformed: ${error instanceof Error ? error.message : String(error)}`
+      };
+    }
+  }
+  return { status: "ok", owners };
+}
+
+export { scanWorktreeProvisioningOwnersForRecovery };

package/dist/cli/index-b8zgtz81.js

@@ -0,0 +1,123 @@
+// @bun
+// src/hooks/delegation-gate/worktree-merge-status.ts
+import * as fs from "fs";
+import * as path from "path";
+var failuresByTask = new Map;
+var durableStatusPath;
+var MAX_RECOVERY_STATUS_BYTES = 2 * 1024 * 1024;
+var MAX_RECOVERY_STATUS_ENTRIES = 512;
+var hasLoaded = false;
+function loadDurableStatus(statusPath) {
+  try {
+    hasLoaded = true;
+    if (!fs.existsSync(statusPath)) {
+      failuresByTask.clear();
+      return;
+    }
+    const data = JSON.parse(fs.readFileSync(statusPath, "utf-8"));
+    if (data && typeof data === "object") {
+      failuresByTask.clear();
+      for (const [taskId, failure] of Object.entries(data)) {
+        failuresByTask.set(taskId, failure);
+      }
+    }
+  } catch {
+    failuresByTask.clear();
+  }
+}
+function isRecoveryFailure(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const candidate = value;
+  if (candidate.outcome !== "partial" && candidate.outcome !== "failed" || typeof candidate.stage !== "string" || !candidate.stage || typeof candidate.message !== "string" || !candidate.message) {
+    return false;
+  }
+  for (const key of ["worktreePath", "branch"]) {
+    if (candidate[key] !== undefined && (typeof candidate[key] !== "string" || candidate[key].length === 0)) {
+      return false;
+    }
+  }
+  for (const key of ["queuedAt", "completedAt"]) {
+    if (candidate[key] !== undefined && (typeof candidate[key] !== "number" || !Number.isFinite(candidate[key]) || candidate[key] < 0)) {
+      return false;
+    }
+  }
+  return true;
+}
+function scanWorktreeMergeFailuresForRecovery(projectDir) {
+  const statusPath = path.join(projectDir, ".swarm", "worktree-merge-status.json");
+  try {
+    const stat = fs.statSync(statusPath);
+    if (stat.size > MAX_RECOVERY_STATUS_BYTES) {
+      return {
+        status: "uncertain",
+        reason: `worktree merge-status file exceeds the ${MAX_RECOVERY_STATUS_BYTES}-byte recovery bound`
+      };
+    }
+    const raw = fs.readFileSync(statusPath, "utf-8");
+    if (Buffer.byteLength(raw, "utf8") > MAX_RECOVERY_STATUS_BYTES) {
+      return {
+        status: "uncertain",
+        reason: `worktree merge-status file changed beyond the ${MAX_RECOVERY_STATUS_BYTES}-byte recovery bound`
+      };
+    }
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return {
+        status: "uncertain",
+        reason: "worktree merge-status file does not contain an object"
+      };
+    }
+    const entries = Object.entries(parsed);
+    if (entries.length > MAX_RECOVERY_STATUS_ENTRIES) {
+      return {
+        status: "uncertain",
+        reason: `worktree merge-status owner count exceeds the ${MAX_RECOVERY_STATUS_ENTRIES}-entry safety bound`
+      };
+    }
+    for (const [taskId, failure] of entries) {
+      if (!taskId || !isRecoveryFailure(failure)) {
+        return {
+          status: "uncertain",
+          reason: `worktree merge-status has an invalid owner record for task "${taskId}"`
+        };
+      }
+    }
+    return {
+      status: "ok",
+      failures: entries
+    };
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { status: "ok", failures: [] };
+    }
+    return {
+      status: "uncertain",
+      reason: `worktree merge-status is unreadable or malformed: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+}
+function initDurableStatusPath(projectDir) {
+  if (typeof projectDir !== "string" || projectDir.length === 0)
+    return;
+  const nextPath = path.join(projectDir, ".swarm", "worktree-merge-status.json");
+  if (durableStatusPath === nextPath && hasLoaded)
+    return;
+  durableStatusPath = nextPath;
+  hasLoaded = false;
+  loadDurableStatus(durableStatusPath);
+}
+function getWorktreeMergeFailure(taskId) {
+  if (!hasLoaded && durableStatusPath) {
+    loadDurableStatus(durableStatusPath);
+  }
+  return failuresByTask.get(taskId);
+}
+function getAllWorktreeMergeFailures() {
+  if (!hasLoaded && durableStatusPath) {
+    loadDurableStatus(durableStatusPath);
+  }
+  return failuresByTask.entries();
+}
+
+export { scanWorktreeMergeFailuresForRecovery, initDurableStatusPath, getWorktreeMergeFailure, getAllWorktreeMergeFailures };

package/dist/cli/{index-tj2mkfb3.js → index-bq2848a3.js}

@@ -8,7 +8,7 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-wzb4dv5s.js";
+} from "./index-y2esw64s.js";
 import {
   log
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-kc1m6vpr.js → index-c0e3vhv9.js}

@@ -8,7 +8,7 @@ import {
   init_constants,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-wzb4dv5s.js";
+} from "./index-y2esw64s.js";
 import {
   advisoryWarn,
   init_warning_buffer
@@ -715,4 +715,4 @@ function resolveWorktreeIsolationConfig(config) {
 // src/config/index.ts
 var _internals = { loadPluginConfigWithMeta };
 
-export { resolveWorktreeIsolationConfig, loadPluginConfig, loadPluginConfigWithMeta, getSafeDefaultConfigLoadResult, loadPluginConfigWithMetaAsync, loadAgentPrompt, exports_loader, init_loader, _internals };
+export { loadPluginConfig, loadPluginConfigWithMeta, getSafeDefaultConfigLoadResult, loadPluginConfigWithMetaAsync, loadAgentPrompt, exports_loader, init_loader, resolveWorktreeIsolationConfig, _internals };

package/dist/cli/{index-q27bajqb.js → index-cfkvc5q9.js}

@@ -1,11 +1,11 @@
 // @bun
+import {
+  atomicWriteFile
+} from "./index-dd7ttx8x.js";
 import {
   init_logger,
   warn
 } from "./index-zgwm4ryv.js";
-import {
-  atomicWriteFile
-} from "./index-7mkpsw6g.js";
 
 // src/hooks/knowledge-link.ts
 import {

package/dist/cli/{index-7mkpsw6g.js → index-dd7ttx8x.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-fsrp8wp3.js";
 import {
   withEvidenceLock
-} from "./index-76kvm9z5.js";
+} from "./index-5nybajn9.js";
 import {
   bunWrite
 } from "./index-qe3v54nb.js";