opencode-swarm 7.138.3 → 7.139.0

package/dist/hooks/guardrails/tool-before.d.ts

@@ -9,6 +9,7 @@
  * target checks, and circuit breaker limits.
  */
 import { type AuthorityConfig, type GuardrailsConfig } from '../../config/schema';
+import type { ScopeLeaseCandidateInput } from '../../scope/scope-lease-renewal';
 import type { AgentRule } from './file-authority';
 /**
  * Shared context passed from createGuardrailsHooks to the toolBefore factory.
@@ -37,6 +38,8 @@ export interface ToolBeforeContext {
      * trusted roots when exempting `git worktree remove --force` (issue #1708).
      */
     worktreeBaseDirOverrides?: string[];
+    /** Sandbox executor getter seam for tests and platform-specific overrides. */
+    getSandboxExecutor: typeof import('../../sandbox/executor').getExecutor;
     /** Hold exact child-write provenance until the matching after-hook succeeds. */
     rememberReviewerScopeWrite?: (input: {
         callID: string;
@@ -45,6 +48,8 @@ export interface ToolBeforeContext {
         coderCallID: string;
         file: string;
     }) => void;
+    /** Snapshot an exact authorized write for success-only lease renewal. */
+    rememberScopeLeaseCandidate?: (input: ScopeLeaseCandidateInput) => void;
 }
 /**
  * Creates a toolBefore handler with the given shared context.

package/dist/hooks/scope-guard.d.ts

@@ -9,7 +9,7 @@
  * outside its Task-correlated scope, blocks the call and injects an advisory.
  */
 import { describeScopeWorkspaceMismatch, getAuthorizedPrFeedbackScopeBinding } from '../scope/scope-binding';
-import { resolveAuthorizedPrFeedbackScopeBindingFromDisk, resolveAuthorizedScopeBinding, resolveAuthorizedScopeBindingForSession } from '../scope/scope-persistence';
+import { resolveAuthorizedPrFeedbackScopeBindingFromDisk, resolveAuthorizedScopeBinding, resolveAuthorizedScopeBindingDetailed, resolveAuthorizedScopeBindingForSession, resolveAuthorizedScopeBindingForSessionDetailed } from '../scope/scope-persistence';
 import { type AgentSessionState, resolveSessionWorkspaceDirectory } from '../state';
 import { validatePrFeedbackScopeBinding } from './pr-workflow-gate';
 import { resolveWriteTargets } from './write-target-resolver';
@@ -74,6 +74,8 @@ declare function sanitizePath(raw: string): string;
 export declare const _internals: {
     sanitizePath: typeof sanitizePath;
     resolveWriteTargets: typeof resolveWriteTargets;
+    resolveAuthorizedScopeBindingDetailed: typeof resolveAuthorizedScopeBindingDetailed;
+    resolveAuthorizedScopeBindingForSessionDetailed: typeof resolveAuthorizedScopeBindingForSessionDetailed;
     resolveAuthorizedScopeBinding: typeof resolveAuthorizedScopeBinding;
     resolveAuthorizedScopeBindingForSession: typeof resolveAuthorizedScopeBindingForSession;
     getAuthorizedPrFeedbackScopeBinding: typeof getAuthorizedPrFeedbackScopeBinding;