opencode-swarm 7.135.1 → 7.135.3

package/dist/cli/{index-7an2qn0s.js → index-45t7w06b.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-2ghkk9ve.js";
+} from "./index-4qzeef9h.js";
 import {
   withEvidenceLock
 } from "./index-09b9zncg.js";
@@ -11,7 +11,7 @@ import {
 } from "./index-bpmtbmy9.js";
 import {
   bunWrite
-} from "./index-qe3v54nb.js";
+} from "./index-y111zefa.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-2ghkk9ve.js → index-4qzeef9h.js}

@@ -7,7 +7,7 @@ import {
 } from "./index-z6xqpmqg.js";
 import {
   bunFile
-} from "./index-qe3v54nb.js";
+} from "./index-y111zefa.js";
 import {
   warn
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-4pdrmemy.js → index-5436jxnw.js}

@@ -12,14 +12,14 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-aky90eqz.js";
+} from "./index-dwargd10.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-jtshf1pd.js";
+} from "./index-kb7qy7an.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-5vp9gka3.js → index-a01r818w.js}

@@ -1,14 +1,16 @@
 // @bun
 import {
-  ALL_AGENT_NAMES,
   FALLBACK_MODELS_MAX,
   GATE_CONFIG_KNOWN_SECTION_KEYS,
   GateConfigSchema,
   PluginConfigSchema,
-  init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-dzaarxhg.js";
+} from "./index-p5kr35wh.js";
+import {
+  ALL_AGENT_NAMES,
+  init_constants
+} from "./index-3jcyn8g6.js";
 import {
   log
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-nbnqf4fj.js → index-bcmrg4t4.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-jtshf1pd.js";
+} from "./index-kb7qy7an.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/{index-fwkqq9mq.js → index-c9ddxv4k.js}

@@ -3,9 +3,13 @@ import {
   advisoryWarn,
   init_warning_buffer
 } from "./index-4rhhvd1a.js";
+import {
+  SWARM_WORKTREE_DIR_NAME,
+  init_constants
+} from "./index-3jcyn8g6.js";
 import {
   bunSpawn
-} from "./index-qe3v54nb.js";
+} from "./index-y111zefa.js";
 import {
   log
 } from "./index-zgwm4ryv.js";
@@ -14,11 +18,54 @@ import {
 } from "./index-a76rekgs.js";
 
 // src/worktree/core.ts
-init_warning_buffer();
+init_constants();
 import * as fs from "fs";
 import * as fsPromises from "fs/promises";
 import * as os from "os";
 import * as path from "path";
+
+// src/config/swarm-branch.ts
+init_constants();
+var SWARM_WORKTREE_BRANCH_PREFIXES = ["swarm/", "swarm-lane/"];
+var SESSION_ID_PATTERN = /^ses_[A-Za-z0-9]+$/;
+function isPlainSegment(segment) {
+  return typeof segment === "string" && segment.length > 0 && segment !== "." && segment !== "..";
+}
+function buildSwarmBranchName(sessionId, id, purpose, legacyLane) {
+  const [standardPrefix, legacyLanePrefix] = SWARM_WORKTREE_BRANCH_PREFIXES;
+  return legacyLane ? `${legacyLanePrefix}${sessionId}/${id}` : `${standardPrefix}${purpose}/${sessionId}/${id}`;
+}
+function matchSwarmLaneBranch(branch) {
+  if (typeof branch !== "string" || branch === "")
+    return;
+  const segments = branch.split("/");
+  if (segments[0] === "swarm-lane") {
+    if (segments.length !== 3)
+      return;
+    const [, sessionId, id] = segments;
+    if (!SESSION_ID_PATTERN.test(sessionId ?? ""))
+      return;
+    if (!isPlainSegment(id))
+      return;
+    return { purpose: "lane", sessionId, id, style: "legacy-lane" };
+  }
+  if (segments[0] === "swarm") {
+    if (segments.length !== 4)
+      return;
+    const [, purpose, sessionId, id] = segments;
+    if (!isPlainSegment(purpose))
+      return;
+    if (!SESSION_ID_PATTERN.test(sessionId ?? ""))
+      return;
+    if (!isPlainSegment(id))
+      return;
+    return { purpose, sessionId, id, style: "purpose" };
+  }
+  return;
+}
+
+// src/worktree/core.ts
+init_warning_buffer();
 var _internals = {
   bunSpawn,
   platform: process.platform,
@@ -39,7 +86,7 @@ var _internals = {
     symlinkSync: fs.symlinkSync
   },
   writeScopeToDisk: async (directory, taskId, files) => {
-    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-1vsnkmm4.js");
+    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-h2fpgxww.js");
     return realWrite(directory, taskId, files);
   },
   writeLaneProfileToDisk: async (_worktreePath, _laneIndex, _envOverrides) => {
@@ -162,13 +209,10 @@ function shortenWorktreePath(_directory, sessionId, laneId) {
   return path.join(tmp, "swwt", sessionId, laneId);
 }
 function makeWorktreeBranchName(sessionId, id, options) {
-  if (options.branchStyle === "legacy-lane" && options.purpose === "lane") {
-    return `swarm-lane/${sessionId}/${id}`;
-  }
-  return `swarm/${options.purpose}/${sessionId}/${id}`;
+  return buildSwarmBranchName(sessionId, id, options.purpose, options.branchStyle === "legacy-lane" && options.purpose === "lane");
 }
 function resolveWorktreeBaseDir(directory, worktreeDir) {
-  return worktreeDir ? path.resolve(directory, worktreeDir) : path.resolve(path.dirname(directory), ".swarm-worktrees");
+  return worktreeDir ? path.resolve(directory, worktreeDir) : path.resolve(path.dirname(directory), SWARM_WORKTREE_DIR_NAME);
 }
 function isPathUnderSwarmWorktreeBase(targetPath, directory, worktreeDirOverrides = []) {
   const caseInsensitive = process.platform === "win32";
@@ -199,6 +243,11 @@ function isPathUnderSwarmWorktreeBase(targetPath, directory, worktreeDirOverride
 }
 async function provisionWorktree(directory, id, sessionId, options) {
   const branchName = makeWorktreeBranchName(sessionId, id, options);
+  if (!matchSwarmLaneBranch(branchName)) {
+    return {
+      error: `Refusing to provision worktree: branch "${branchName}" does not match the swarm lane grammar, so lane permission scoping could not recognise it and the lane would hang on the first external-directory prompt. This is almost always an invalid sessionId ("${sessionId}"); it must look like "ses_" followed by letters/digits, and the execution-unit id ("${id}") must be a single path segment.`
+    };
+  }
   let worktreePath = path.resolve(resolveWorktreeBaseDir(directory, options.worktreeDir), sessionId, id);
   const budgetResult = await checkPathBudget(worktreePath, directory);
   if (budgetResult.ok === false) {

package/dist/cli/{index-ens0gt38.js → index-cggqh2dz.js}

@@ -7,10 +7,10 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-b7p0mp2q.js";
+} from "./index-mrtms113.js";
 import {
   atomicWriteFile
-} from "./index-xg9repnx.js";
+} from "./index-ey29aap6.js";
 import {
   EVIDENCE_MAX_JSON_BYTES,
   EvidenceBundleSchema,
@@ -48,26 +48,26 @@ import {
 import {
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-2ghkk9ve.js";
+} from "./index-4qzeef9h.js";
 import {
   readCachedParsedFile
 } from "./index-fsrp8wp3.js";
 import {
   withEvidenceLock
 } from "./index-09b9zncg.js";
-import {
-  emit
-} from "./index-7a2hm51h.js";
 import {
   ZodError,
   exports_external,
   init_zod
 } from "./index-bpmtbmy9.js";
+import {
+  emit
+} from "./index-7a2hm51h.js";
 import {
   bunHash,
   bunWrite,
   mergeEnvForChild
-} from "./index-qe3v54nb.js";
+} from "./index-y111zefa.js";
 import {
   criticalWarn,
   error,

package/dist/cli/{index-vxv732ex.js → index-dg1njnms.js}

@@ -145,11 +145,14 @@ Field rules:
 Emit a header row first, then one unprefixed data row per finding. Use pipe (|) to
 separate fields; escape literal pipe characters inside field values as \\|.
 
-If a standard explorer finds zero issues, emit the header row with no data rows.
-If a micro-lane finds zero issues, emit the header followed by exactly:
+If either a standard explorer or a micro-lane finds zero issues, emit the
+header followed by exactly the matching family form:
+[CLEAN] | lane | coverage_scope | evidence
 [CLEAN] | micro_lane | coverage_scope | evidence
-Fill every CLEAN field with the assigned micro-lane, checks completed, and the
-negative evidence. Do NOT fall back to the default PROJECT/STRUCTURE format.
+Replace lane or micro_lane with the exact controller-assigned value and fill
+the remaining fields with the checks completed and concrete negative evidence.
+Header-only output is unattested. Do NOT fall back to the default
+PROJECT/STRUCTURE format.
 
 For micro-lane dispatches, use the micro-lane variant:
 [CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence