opencode-swarm 7.135.2 → 7.135.3

package/dist/cli/{index-hdy2nd5h.js → index-45t7w06b.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-bfd4xfpp.js";
+} from "./index-4qzeef9h.js";
 import {
   withEvidenceLock
 } from "./index-09b9zncg.js";
@@ -9,13 +9,13 @@ import {
   exports_external,
   init_zod
 } from "./index-bpmtbmy9.js";
+import {
+  bunWrite
+} from "./index-y111zefa.js";
 import {
   init_logger,
   warn
 } from "./index-zgwm4ryv.js";
-import {
-  bunWrite
-} from "./index-y111zefa.js";
 
 // src/background/pending-delegations.ts
 init_zod();

package/dist/cli/{index-bs4m85v1.js → index-5436jxnw.js}

@@ -12,14 +12,14 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-340chr1e.js";
+} from "./index-dwargd10.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-2pxk6qg4.js";
+} from "./index-kb7qy7an.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-j92ser8n.js → index-a01r818w.js}

@@ -1,14 +1,16 @@
 // @bun
 import {
-  ALL_AGENT_NAMES,
   FALLBACK_MODELS_MAX,
   GATE_CONFIG_KNOWN_SECTION_KEYS,
   GateConfigSchema,
   PluginConfigSchema,
-  init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-j0kte6gd.js";
+} from "./index-p5kr35wh.js";
+import {
+  ALL_AGENT_NAMES,
+  init_constants
+} from "./index-3jcyn8g6.js";
 import {
   log
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-hvrrq3f3.js → index-bcmrg4t4.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-2pxk6qg4.js";
+} from "./index-kb7qy7an.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/{index-d5psymdk.js → index-c9ddxv4k.js}

@@ -4,21 +4,68 @@ import {
   init_warning_buffer
 } from "./index-4rhhvd1a.js";
 import {
-  log
-} from "./index-zgwm4ryv.js";
+  SWARM_WORKTREE_DIR_NAME,
+  init_constants
+} from "./index-3jcyn8g6.js";
 import {
   bunSpawn
 } from "./index-y111zefa.js";
+import {
+  log
+} from "./index-zgwm4ryv.js";
 import {
   __require
 } from "./index-a76rekgs.js";
 
 // src/worktree/core.ts
-init_warning_buffer();
+init_constants();
 import * as fs from "fs";
 import * as fsPromises from "fs/promises";
 import * as os from "os";
 import * as path from "path";
+
+// src/config/swarm-branch.ts
+init_constants();
+var SWARM_WORKTREE_BRANCH_PREFIXES = ["swarm/", "swarm-lane/"];
+var SESSION_ID_PATTERN = /^ses_[A-Za-z0-9]+$/;
+function isPlainSegment(segment) {
+  return typeof segment === "string" && segment.length > 0 && segment !== "." && segment !== "..";
+}
+function buildSwarmBranchName(sessionId, id, purpose, legacyLane) {
+  const [standardPrefix, legacyLanePrefix] = SWARM_WORKTREE_BRANCH_PREFIXES;
+  return legacyLane ? `${legacyLanePrefix}${sessionId}/${id}` : `${standardPrefix}${purpose}/${sessionId}/${id}`;
+}
+function matchSwarmLaneBranch(branch) {
+  if (typeof branch !== "string" || branch === "")
+    return;
+  const segments = branch.split("/");
+  if (segments[0] === "swarm-lane") {
+    if (segments.length !== 3)
+      return;
+    const [, sessionId, id] = segments;
+    if (!SESSION_ID_PATTERN.test(sessionId ?? ""))
+      return;
+    if (!isPlainSegment(id))
+      return;
+    return { purpose: "lane", sessionId, id, style: "legacy-lane" };
+  }
+  if (segments[0] === "swarm") {
+    if (segments.length !== 4)
+      return;
+    const [, purpose, sessionId, id] = segments;
+    if (!isPlainSegment(purpose))
+      return;
+    if (!SESSION_ID_PATTERN.test(sessionId ?? ""))
+      return;
+    if (!isPlainSegment(id))
+      return;
+    return { purpose, sessionId, id, style: "purpose" };
+  }
+  return;
+}
+
+// src/worktree/core.ts
+init_warning_buffer();
 var _internals = {
   bunSpawn,
   platform: process.platform,
@@ -162,13 +209,10 @@ function shortenWorktreePath(_directory, sessionId, laneId) {
   return path.join(tmp, "swwt", sessionId, laneId);
 }
 function makeWorktreeBranchName(sessionId, id, options) {
-  if (options.branchStyle === "legacy-lane" && options.purpose === "lane") {
-    return `swarm-lane/${sessionId}/${id}`;
-  }
-  return `swarm/${options.purpose}/${sessionId}/${id}`;
+  return buildSwarmBranchName(sessionId, id, options.purpose, options.branchStyle === "legacy-lane" && options.purpose === "lane");
 }
 function resolveWorktreeBaseDir(directory, worktreeDir) {
-  return worktreeDir ? path.resolve(directory, worktreeDir) : path.resolve(path.dirname(directory), ".swarm-worktrees");
+  return worktreeDir ? path.resolve(directory, worktreeDir) : path.resolve(path.dirname(directory), SWARM_WORKTREE_DIR_NAME);
 }
 function isPathUnderSwarmWorktreeBase(targetPath, directory, worktreeDirOverrides = []) {
   const caseInsensitive = process.platform === "win32";
@@ -199,6 +243,11 @@ function isPathUnderSwarmWorktreeBase(targetPath, directory, worktreeDirOverride
 }
 async function provisionWorktree(directory, id, sessionId, options) {
   const branchName = makeWorktreeBranchName(sessionId, id, options);
+  if (!matchSwarmLaneBranch(branchName)) {
+    return {
+      error: `Refusing to provision worktree: branch "${branchName}" does not match the swarm lane grammar, so lane permission scoping could not recognise it and the lane would hang on the first external-directory prompt. This is almost always an invalid sessionId ("${sessionId}"); it must look like "ses_" followed by letters/digits, and the execution-unit id ("${id}") must be a single path segment.`
+    };
+  }
   let worktreePath = path.resolve(resolveWorktreeBaseDir(directory, options.worktreeDir), sessionId, id);
   const budgetResult = await checkPathBudget(worktreePath, directory);
   if (budgetResult.ok === false) {

package/dist/cli/{index-7pnvf04s.js → index-cggqh2dz.js}

@@ -7,7 +7,7 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-ryqnn3nv.js";
+} from "./index-mrtms113.js";
 import {
   atomicWriteFile
 } from "./index-ey29aap6.js";
@@ -48,32 +48,32 @@ import {
 import {
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-bfd4xfpp.js";
+} from "./index-4qzeef9h.js";
 import {
   readCachedParsedFile
 } from "./index-fsrp8wp3.js";
 import {
   withEvidenceLock
 } from "./index-09b9zncg.js";
-import {
-  emit
-} from "./index-7a2hm51h.js";
 import {
   ZodError,
   exports_external,
   init_zod
 } from "./index-bpmtbmy9.js";
 import {
-  criticalWarn,
-  error,
-  init_logger,
-  warn
-} from "./index-zgwm4ryv.js";
+  emit
+} from "./index-7a2hm51h.js";
 import {
   bunHash,
   bunWrite,
   mergeEnvForChild
 } from "./index-y111zefa.js";
+import {
+  criticalWarn,
+  error,
+  init_logger,
+  warn
+} from "./index-zgwm4ryv.js";
 import {
   __esm,
   __export,