opencode-swarm 7.138.4 → 7.139.0

package/dist/plan/manager.d.ts

@@ -41,6 +41,7 @@ export interface AcknowledgedRemovals {
 import { type Plan, type RuntimePlan, type TaskStatus } from '../config/plan-schema';
 import { isGitRepo } from '../git/branch';
 import { getWorktreeMergeFailure } from '../hooks/delegation-gate/worktree-merge-status';
+import { recordTaskAttempt } from '../services/run-memory.js';
 import { isEpicModeActiveForProject } from '../turbo/epic/state.js';
 import { commitTaskCompletion } from '../turbo/epic/task-commit.js';
 import { readTaskScopes } from '../turbo/lean/conflicts.js';
@@ -64,6 +65,7 @@ export declare const _internals: {
     readTaskScopes: typeof readTaskScopes;
     commitTaskCompletion: typeof commitTaskCompletion;
     getWorktreeMergeFailure: typeof getWorktreeMergeFailure;
+    recordTaskAttempt: typeof recordTaskAttempt;
 };
 /** @internal Test seam for snapshot retry helper */
 export declare const _snapshot_test_exports: {

package/dist/services/run-memory.d.ts

@@ -16,7 +16,28 @@ export interface RunMemoryEntry {
     taskFingerprint: string;
     /** Which agent executed the task (e.g. "coder") */
     agent: string;
-    /** Outcome of the task execution */
+    /**
+     * Outcome of the task execution.
+     *
+     * PRODUCER COVERAGE (keep this note accurate — directive 2, no unwired code):
+     * - `pass` / `fail` are produced today by TWO call sites, deliberately split:
+     *   1. `plan/manager.updateTaskStatus` records the TERMINAL outcome after
+     *      savePlan succeeds — `completed` -> pass, `blocked` -> fail. It lives
+     *      there, not in the `update_task_status` tool, because the tool is only
+     *      one of two writers: the council APPROVE fast-path completes tasks via
+     *      `advanceTaskStateAndPersist` (src/state.ts) with no tool call.
+     *   2. `update_task_status` records a `fail` when a council or QA gate
+     *      BLOCKS a completion. That is a refusal, not a status transition, so
+     *      it never reaches updateTaskStatus and must be recorded at the tool.
+     * - `retry` has a CONSUMER (`summarizeTask` below treats it like `fail`) but
+     *   no producer. It is deliberately retained for the guardrails
+     *   transient-retry path (AGENTS.md invariant 9), which owns retry
+     *   accounting and is out of scope here. Do not add a `retry` producer from
+     *   the task-status path — a gate block is a real failure, not a retry.
+     * - `skip` has neither producer nor consumer (`summarizeTask` ignores it).
+     *   It is retained only so pre-existing `.swarm/run-memory.jsonl` lines
+     *   written by hand or by older builds still parse.
+     */
     outcome: 'pass' | 'fail' | 'retry' | 'skip';
     /** 1-indexed attempt number */
     attemptNumber: number;
@@ -51,12 +72,39 @@ export declare function recordOutcome(directory: string, entry: RunMemoryEntry):
  */
 export declare function getTaskHistory(directory: string, taskId: string): Promise<RunMemoryEntry[]>;
 /**
- * Get all failure and retry entries
+ * Input for {@link recordTaskAttempt}. `attemptNumber` and `taskFingerprint`
+ * are derived, not supplied — callers know the task, not its history.
+ */
+export interface TaskAttemptInput {
+    /** Plan.json task ID (e.g. "3.2") */
+    taskId: string;
+    /** Which agent executed the task (e.g. "coder") */
+    agent: string;
+    /** Outcome of this attempt */
+    outcome: RunMemoryEntry['outcome'];
+    /** One-line failure reason — required in practice for fail/retry to be useful */
+    failureReason?: string;
+    /** Plan `files_touched` for the task; feeds the fingerprint */
+    fileTargets?: string[];
+    /** Wall-clock time in milliseconds */
+    durationMs?: number;
+}
+/**
+ * Record one task attempt, deriving the attempt number from prior history.
+ *
+ * This is the single production producer for `.swarm/run-memory.jsonl`, which
+ * `getRunMemorySummary` reads back for cross-turn failure-pattern avoidance.
+ *
+ * Advisory-only and fail-open by contract: run memory is context enrichment,
+ * never a correctness gate, so a write failure must never surface to — or
+ * abort — the caller's primary operation (a task status update). The work is
+ * still awaited rather than fire-and-forget, so the entry is durable before the
+ * caller returns and a test can observe it.
  *
  * @param directory - The swarm workspace directory
- * @returns Array of fail/retry entries
+ * @param input - The attempt to record
  */
-export declare function getFailures(directory: string): Promise<RunMemoryEntry[]>;
+export declare function recordTaskAttempt(directory: string, input: TaskAttemptInput): Promise<void>;
 /**
  * Group entries by taskId
  */
@@ -79,8 +127,8 @@ export declare function getRunMemorySummary(directory: string): Promise<string |
 export declare const _internals: {
     generateTaskFingerprint: typeof generateTaskFingerprint;
     recordOutcome: typeof recordOutcome;
+    recordTaskAttempt: typeof recordTaskAttempt;
     getTaskHistory: typeof getTaskHistory;
-    getFailures: typeof getFailures;
     getRunMemorySummary: typeof getRunMemorySummary;
     groupByTaskId: typeof groupByTaskId;
     summarizeTask: typeof summarizeTask;

package/dist/tools/update-task-status.d.ts

@@ -6,6 +6,7 @@ import type { ToolContext, ToolDefinition } from '@opencode-ai/plugin/tool';
 import { readTaskEvidenceRaw } from '../gate-evidence.js';
 import { tryAcquireLock } from '../parallel/file-locks.js';
 import { loadPlan, updateTaskStatus } from '../plan/manager';
+import { recordTaskAttempt } from '../services/run-memory.js';
 import { hasActiveLeanTurbo, hasActiveTurboMode } from '../state';
 import { type ReviewerGateEvidenceKind, type ReviewerGateReasonCode } from '../telemetry.js';
 import { verifyLeanTurboTaskCompletion } from '../turbo/lean/task-completion';
@@ -26,6 +27,7 @@ export declare const _internals: {
     verifyLeanTurboTaskCompletion: typeof verifyLeanTurboTaskCompletion;
     hasPassedDurableGateEvidence: typeof hasPassedDurableGateEvidence;
     emitReviewerGateDecision: (sessionId: string, taskId: string, blocked: boolean, reasonCode: ReviewerGateReasonCode, evidenceKind: ReviewerGateEvidenceKind) => void;
+    recordTaskAttempt: typeof recordTaskAttempt;
 };
 /**
  * Arguments for the update_task_status tool

package/dist/utils/path-security.d.ts

@@ -17,10 +17,34 @@ export declare function containsPathTraversal(str: string): boolean;
  */
 export declare function containsControlChars(str: string): boolean;
 /**
- * Validate a directory path for safety.
+ * Validate a **project/workspace root** for safety.
+ *
+ * Distinct from {@link validateDirectory}, which additionally rejects absolute
+ * paths and is therefore only correct for a *relative sub-path*. A workspace
+ * root is absolute by contract — `ctx.directory` injected by `createSwarmTool`
+ * is always an absolute project root (AGENTS.md invariant 4) — so applying
+ * `validateDirectory` to one rejects 100% of real inputs and silently kills
+ * whatever feature depends on it. That is exactly how `.swarm/run-memory.jsonl`
+ * came to have no producer and a consumer that threw on every call.
+ *
+ * This validator keeps the checks that are meaningful for a root (empty,
+ * traversal segments, control/bidi characters) and drops the absolute-path
+ * rejection. Containment of the actual file is NOT this function's job and is
+ * unchanged: `validateSwarmPath(directory, filename)` resolves the target under
+ * `<directory>/.swarm`, rejects any path that escapes it, and rejects a
+ * symlinked `.swarm` base.
+ *
+ * @param directory - The workspace root to validate
+ * @throws Error if the root is invalid
+ */
+export declare function validateWorkspaceRoot(directory: string): void;
+/**
+ * Validate a relative directory path for safety.
  * Rejects empty paths, paths with traversal, control characters, and absolute paths.
  * Throws an Error if the directory is invalid.
  *
+ * Do NOT use this on a project/workspace root — see {@link validateWorkspaceRoot}.
+ *
  * @param directory - The directory string to validate
  * @throws Error if directory is invalid
  */

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.138.4",
+	"version": "7.139.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",