opencode-swarm 7.139.2 → 7.139.4

package/dist/tools/pre-check-batch.d.ts

@@ -6,7 +6,9 @@
 import type { tool } from '@opencode-ai/plugin';
 import type { PluginConfig } from '../config';
 import { saveEvidence } from '../evidence/manager.js';
-import type { LintResult } from './lint';
+import { runExternalTool } from '../utils/external-tool-runner';
+import type { LintResult, ResolvedLinterCommand } from './lint';
+import { detectResolvedLinter } from './lint';
 import type { QualityBudgetResult } from './quality-budget';
 import { qualityBudget } from './quality-budget';
 import type { SastScanFinding, SastScanResult } from './sast-scan';
@@ -17,8 +19,15 @@ export declare const _internals: {
     runSecretscanWrapped: typeof runSecretscanWrapped;
     runSastScanWrapped: typeof runSastScanWrapped;
     runQualityBudgetWrapped: typeof runQualityBudgetWrapped;
+    runWithTimeout: typeof runWithTimeout;
     getChangedLineRanges: typeof getChangedLineRanges;
     saveEvidence: typeof saveEvidence;
+    runExternalTool: typeof runExternalTool;
+    detectResolvedLinter: typeof detectResolvedLinter;
+    runLintOnFiles: typeof runLintOnFiles;
+    platform: () => NodeJS.Platform;
+    serializePreCheckResult: typeof serializePreCheckResult;
+    MAX_COMBINED_BYTES: number;
 };
 export interface PreCheckBatchInput {
     /** List of specific files to check (optional) */
@@ -45,10 +54,14 @@ export interface ToolResult<T> {
     result?: T;
     /** Error message if failed */
     error?: string;
+    /** Successful result payload was omitted from a compact serialized response. */
+    result_omitted?: boolean;
     /** Duration in milliseconds */
     duration_ms: number;
 }
 export interface PreCheckBatchResult {
+    /** Structured producer status. Optional only for legacy serialized results. */
+    batch_status?: 'completed' | 'skipped' | 'invalid';
     /** Overall gate status: true if all security gates pass */
     gates_passed: boolean;
     /** Lint tool result */
@@ -64,36 +77,51 @@ export interface PreCheckBatchResult {
     /** Pre-existing SAST findings on unchanged lines, requiring reviewer triage */
     sast_preexisting_findings?: SastScanFinding[];
 }
+/**
+ * Serialize the public result below the decoder's stricter byte ceiling. When
+ * detailed diagnostics exceed the aggregate budget, preserve every control
+ * field and replace optional payloads with bounded, UTF-8-safe summaries.
+ */
+declare function serializePreCheckResult(result: PreCheckBatchResult): string;
+declare function isAcceptedProjectRootForPlatform(dir: string, workspaceDir: string, platform: NodeJS.Platform, hasExplicitBoundary: boolean): boolean;
+export declare const _test_exports: {
+    isAcceptedProjectRootForPlatform: typeof isAcceptedProjectRootForPlatform;
+};
+/**
+ * Run a function with timeout
+ */
+declare function runWithTimeout<T>(operation: (abortSignal: AbortSignal) => Promise<T>, timeoutMs: number, parentSignal?: AbortSignal, waitForCancellationSettlement?: boolean): Promise<T>;
 /**
  * Run lint with detection and timeout
  */
-declare function runLintWrapped(files: string[] | undefined, directory: string, _config?: PluginConfig): Promise<ToolResult<LintResult>>;
+declare function runLintWrapped(files: string[] | undefined, directory: string, _config?: PluginConfig, abortSignal?: AbortSignal): Promise<ToolResult<LintResult>>;
+/**
+ * Run lint on specific files only
+ */
+declare function runLintOnFiles(resolvedLinter: ResolvedLinterCommand, files: string[], workspaceDir: string, abortSignal?: AbortSignal): Promise<LintResult>;
 /**
  * Run secretscan with timeout
  */
-declare function runSecretscanWrapped(files: string[] | undefined, directory: string, _config?: PluginConfig): Promise<ToolResult<SecretscanResult | SecretscanErrorResult>>;
+declare function runSecretscanWrapped(files: string[] | undefined, directory: string, _config?: PluginConfig, abortSignal?: AbortSignal): Promise<ToolResult<SecretscanResult | SecretscanErrorResult>>;
 /**
  * Run SAST scan with timeout
  */
-declare function runSastScanWrapped(changedFiles: string[], directory: string, severityThreshold: 'low' | 'medium' | 'high' | 'critical', config?: PluginConfig, phase?: number): Promise<ToolResult<SastScanResult>>;
+declare function runSastScanWrapped(changedFiles: string[], directory: string, severityThreshold: 'low' | 'medium' | 'high' | 'critical', config?: PluginConfig, phase?: number, abortSignal?: AbortSignal): Promise<ToolResult<SastScanResult>>;
 /**
  * Run quality budget with timeout
  */
-declare function runQualityBudgetWrapped(changedFiles: string[], directory: string, config?: PluginConfig): Promise<ToolResult<QualityBudgetResult>>;
+declare function runQualityBudgetWrapped(changedFiles: string[], directory: string, config?: PluginConfig, abortSignal?: AbortSignal): Promise<ToolResult<QualityBudgetResult>>;
 /**
  * Parse unified diff output (with -U0) to extract added/modified line numbers per file.
  * Returns a Map from normalised file path → Set of changed line numbers.
  */
 export declare function parseDiffLineRanges(diffOutput: string): Map<string, Set<number>>;
 /**
- * Get changed line ranges for the current branch vs its base.
- * Tries three strategies in order:
- * 1. merge-base diff against main/master (captures all branch changes, works after commit)
- * 2. HEAD~1 (single-commit diff, works after commit)
- * 3. HEAD (unstaged/staged changes, works before commit)
- * Returns null if git is unavailable or no changes found.
+ * Get the union of committed, staged, unstaged, and untracked changed lines.
+ * A known empty union is authoritative; null means a required Git source was
+ * unavailable or malformed and callers must classify findings fail-closed.
  */
-export declare function getChangedLineRanges(directory: string): Promise<Map<string, Set<number>> | null>;
+export declare function getChangedLineRanges(directory: string, abortSignal?: AbortSignal, requestedFiles?: string[]): Promise<Map<string, Set<number>> | null>;
 /**
  * Classify SAST findings as "new" (on changed lines) or "pre-existing" (unchanged lines).
  * A finding is "new" if its file+line intersects the changed line ranges from git diff.
@@ -108,7 +136,7 @@ export declare function classifySastFindings(findings: SastScanFinding[], change
  * @param input - The pre-check batch input
  * @param workspaceDir - Optional workspace directory for traversal validation (injected project root from createSwarmTool, or input.directory)
  */
-export declare function runPreCheckBatch(input: PreCheckBatchInput, workspaceDir?: string, contextDir?: string): Promise<PreCheckBatchResult>;
+export declare function runPreCheckBatch(input: PreCheckBatchInput, workspaceDir?: string, contextDir?: string, abortSignal?: AbortSignal): Promise<PreCheckBatchResult>;
 /**
  * Pre-check batch tool - runs 4 verification tools in parallel
  * Returns unified result with gates_passed status

package/dist/tools/quality-budget.d.ts

@@ -1,6 +1,6 @@
 import type { tool } from '@opencode-ai/plugin';
 import type { QualityBudgetConfig } from '../config/schema';
-import { type QualityMetrics, type QualityViolation } from '../quality/metrics';
+import { computeQualityMetrics, type QualityMetrics, type QualityViolation } from '../quality/metrics';
 export interface QualityBudgetInput {
     changed_files: string[];
     config?: Partial<QualityBudgetConfig>;
@@ -22,7 +22,7 @@ export interface QualityBudgetResult {
  * Computes quality metrics (complexity, API, duplication, test ratio)
  * and compares against configured thresholds to ensure code quality.
  */
-export declare function qualityBudget(input: QualityBudgetInput, directory: string): Promise<QualityBudgetResult>;
+export declare function qualityBudget(input: QualityBudgetInput, directory: string, abortSignal?: AbortSignal): Promise<QualityBudgetResult>;
 export declare const quality_budget: ReturnType<typeof tool>;
 /**
  * DI seam for testability. Contains all test-mocked exports.
@@ -30,4 +30,5 @@ export declare const quality_budget: ReturnType<typeof tool>;
  */
 export declare const _internals: {
     qualityBudget: typeof qualityBudget;
+    computeQualityMetrics: typeof computeQualityMetrics;
 };

package/dist/tools/resolve-working-directory.d.ts

@@ -23,10 +23,10 @@ export interface ResolveError {
  *
  * NOTE: This function intentionally does NOT use realpathSync for the resolved path
  * to avoid Windows 8.3 short filename issues. Symlink-based subdirectory bypasses
- * through this coarse filter are caught by the write-time validateProjectRoot guard
- * in evidence/manager.ts, which DOES use realpathSync. These two functions form a
- * defense-in-depth pair: resolveWorkingDirectory is the fast entry filter,
- * validateProjectRoot is the authoritative canonical check at write time.
+ * through this coarse filter are caught by the shared canonical project-root
+ * assertion at evidence, plan, and scope persistence sinks. These checks form a
+ * defense-in-depth pair: resolveWorkingDirectory is the fast entry filter and the
+ * persistence assertion is authoritative at write time.
  *
  * Priority: explicit working_directory param > injected directory (from createSwarmTool).
  *

package/dist/tools/sast-baseline.d.ts

@@ -116,6 +116,7 @@ export declare function assignOccurrenceIndices(findings: SastScanFinding[], dir
  */
 export declare function captureOrMergeBaseline(directory: string, phase: number, findings: SastScanFinding[], engine: 'tier_a' | 'tier_a+tier_b', scannedFiles: string[], opts?: {
     force?: boolean;
+    abortSignal?: AbortSignal;
 }): Promise<CaptureResult>;
 /**
  * Load the SAST baseline for a given phase.

package/dist/tools/sast-scan.d.ts

@@ -5,7 +5,7 @@
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
 import type { PluginConfig } from '../config';
 import type { EvidenceVerdict } from '../config/evidence-schema';
-import { isSemgrepAvailable, runSemgrep } from '../sast/semgrep';
+import { checkSemgrepAvailable, isSemgrepAvailable, runSemgrep } from '../sast/semgrep';
 export interface SastScanInput {
     /** List of files to scan */
     changed_files: string[];
@@ -32,6 +32,8 @@ export interface SastScanInput {
      * baseline diff mode: only findings absent from the phase baseline fail.
      */
     phase?: number;
+    /** Host/tool cancellation propagated to optional external scanners. */
+    abort_signal?: AbortSignal;
 }
 export interface SastScanResult {
     /** Overall verdict: pass if no findings above threshold, fail otherwise */
@@ -101,6 +103,7 @@ export declare const sast_scan: ToolDefinition;
 export declare const _internals: {
     sastScan: typeof sastScan;
     sast_scan: typeof sast_scan;
+    checkSemgrepAvailable: typeof checkSemgrepAvailable;
     isSemgrepAvailable: typeof isSemgrepAvailable;
     runSemgrep: typeof runSemgrep;
 };

package/dist/tools/secretscan.d.ts

@@ -67,10 +67,10 @@ export declare const _internals: {
     now: () => number;
     yieldToEventLoop: typeof yieldToEventLoop;
     openFile: typeof fs.openSync;
-    fstatFile: typeof fs.fstatSync;
+    fstatFile: (fd: number) => fs.BigIntStats;
     readFileChunk: typeof fs.readSync;
     closeFile: typeof fs.closeSync;
-    lstatFile: typeof fs.lstatSync;
+    lstatFile: (path: fs.PathLike) => fs.BigIntStats;
     closeDirectory: (directory: fs.Dir) => void;
 };
 export {};

package/dist/tools/set-qa-gates.d.ts

@@ -2,11 +2,12 @@
  * Tool to configure the QA gate profile for the current plan.
  *
  * Architect-only: invoked during the QA GATE SELECTION phase of brainstorm
- * mode (or equivalent). Ratchet-tighter only — cannot disable gates that are
- * already enabled. Rejects all writes once the profile is locked.
+ * mode (or equivalent). The initial selection may override defaults; after a
+ * profile exists, updates are ratchet-tighter and cannot disable enabled gates.
+ * Rejects all writes once the profile is locked.
  *
- * Creates the profile with defaults if missing, then applies the requested
- * partial update.
+ * Creates the profile with defaults plus the initial selection if missing,
+ * then always applies the requested partial update through the normal ratchet.
  */
 import type { tool } from '@opencode-ai/plugin';
 export interface SetQaGatesArgs {

package/dist/tools/submit-phase-council-verdicts.d.ts

@@ -15,8 +15,8 @@ export declare const ArgsSchema: z.ZodObject<{
         }>;
         verdict: z.ZodEnum<{
             APPROVE: "APPROVE";
-            CONCERNS: "CONCERNS";
             REJECT: "REJECT";
+            CONCERNS: "CONCERNS";
         }>;
         confidence: z.ZodNumber;
         findings: z.ZodArray<z.ZodObject<{

package/dist/tools/write-final-council-evidence.d.ts

@@ -16,8 +16,8 @@ export declare const ArgsSchema: z.ZodObject<{
         }>;
         verdict: z.ZodEnum<{
             APPROVE: "APPROVE";
-            CONCERNS: "CONCERNS";
             REJECT: "REJECT";
+            CONCERNS: "CONCERNS";
         }>;
         confidence: z.ZodNumber;
         findings: z.ZodArray<z.ZodObject<{

package/dist/utils/bun-compat.d.ts

@@ -24,6 +24,7 @@
  *   - `bunHash` uses Node's `xxhash` via `Bun.hash`'s default algorithm when
  *     present and falls back to a stable djb2-derived 32-bit hash on Node.
  */
+import { spawn as nodeSpawn } from 'node:child_process';
 /**
  * Whether the current runtime is Bun. Cached at first call — every subsequent
  * call is a single property access.
@@ -86,6 +87,8 @@ export interface BunCompatSpawnOptions {
     stdout?: 'inherit' | 'ignore' | 'pipe';
     stderr?: 'inherit' | 'ignore' | 'pipe';
     timeout?: number;
+    /** Preserve the caller's exact Windows argv quoting (required for cmd.exe /c). */
+    windowsVerbatimArguments?: boolean;
     /**
      * When true, spawn the child as its own process-group leader (Node path:
      * `detached`) and kill the entire descendant tree on `kill()`/timeout
@@ -113,8 +116,24 @@ export interface BunCompatSubprocess {
     readonly stderr: BunCompatStream;
     readonly exited: Promise<number>;
     exitCode: number | null;
+    readonly signalCode?: NodeJS.Signals | null;
+    /**
+     * Asynchronous process-creation failure reported by Node's ChildProcess
+     * `error` event (for example ENOENT). Bun reports equivalent failures by
+     * throwing from `Bun.spawn`, so this is populated only by the Node fallback.
+     */
+    readonly spawnError?: Error | null;
     kill(signal?: NodeJS.Signals | number): void;
+    /** Awaitable best-effort descendant-tree termination for bounded runners. */
+    killTree?(signal?: NodeJS.Signals | number): Promise<void>;
 }
+declare function createProcessTreeKiller(pid: number | undefined, directKill: (signal?: NodeJS.Signals | number) => void, wasDetached: boolean): (signal?: NodeJS.Signals | number) => Promise<void>;
+export declare const _internals: {
+    platform: () => NodeJS.Platform;
+    cwd: () => string;
+    spawnTaskkill: (args: string[], options: Parameters<typeof nodeSpawn>[2]) => import("node:child_process").ChildProcess;
+    createProcessTreeKiller: typeof createProcessTreeKiller;
+};
 /**
  * Merges `envOverrides` into the base env (or `process.env` if no base env
  * is given) and returns the resulting record.
@@ -150,3 +169,4 @@ export declare function bunSpawnSync(cmd: string[] | {
     stdin?: string | Uint8Array;
     timeout?: number;
 }, options?: BunCompatSpawnOptions): BunCompatSyncResult;
+export {};

package/dist/utils/external-tool-runner.d.ts

@@ -8,6 +8,8 @@ export interface ExternalToolRunOptions {
     maxStderrBytes: number;
     env?: Record<string, string | undefined>;
     abortSignal?: AbortSignal;
+    /** Preserve an already-quoted Windows command line, such as constrained cmd.exe /c. */
+    windowsVerbatimArguments?: boolean;
 }
 export interface ExternalToolRunResult {
     status: 'completed' | 'timeout' | 'cancelled' | 'spawn-error';
@@ -19,8 +21,16 @@ export interface ExternalToolRunResult {
     message?: string;
 }
 export declare function resolveExecutableFromPath(names: string[], envPath?: string, platform?: NodeJS.Platform): string | null;
+declare function clampTimeoutMs(timeoutMs: number): number;
+declare function computeSpawnTimeoutMs(timeoutMs: number): number;
 export declare function runExternalTool(options: ExternalToolRunOptions): Promise<ExternalToolRunResult>;
 export declare const _internals: {
     bunSpawn: typeof bunSpawn;
     platform: () => NodeJS.Platform;
+    now: () => number;
+    setTimeout: typeof setTimeout;
+    clearTimeout: typeof clearTimeout;
+    clampTimeoutMs: typeof clampTimeoutMs;
+    computeSpawnTimeoutMs: typeof computeSpawnTimeoutMs;
 };
+export {};

package/dist/utils/project-boundary.d.ts

@@ -0,0 +1,34 @@
+import * as fs from 'node:fs';
+/** Maximum depth to walk up the directory tree before failing closed. */
+export declare const MAX_PROJECT_ROOT_DEPTH = 20;
+/** File/directory names that indicate a real ancestor project root. */
+export declare const PROJECT_ROOT_INDICATORS: readonly ["package.json", ".git", ".opencode", "Cargo.toml", "go.mod", "pyproject.toml", "Gemfile", "composer.json", "pom.xml", "build.gradle", "CMakeLists.txt"];
+/**
+ * Return whether `directory` directly declares its own project boundary.
+ *
+ * Markers are local declarations, not verified Git metadata. A direct `.git`
+ * file/directory covers repositories, linked worktrees, and submodules; a
+ * direct `.opencode` directory is the manual opt-in. `lstatSync` is deliberate:
+ * marker symlinks/junctions do not grant an exemption. Missing, inaccessible,
+ * or ambiguous markers fail closed.
+ */
+export declare function hasExplicitProjectBoundary(directory: unknown): boolean;
+/**
+ * Test whether `candidate` is a strict lexical descendant of `root` using the
+ * host platform's path semantics (including case-insensitive Windows paths).
+ */
+export declare function isStrictPathDescendant(candidate: unknown, root: unknown): boolean;
+type ProjectRootProbeDependencies = Pick<typeof fs, 'realpathSync' | 'statSync'>;
+/**
+ * Authoritative write-time project-root assertion shared by persistence sinks.
+ *
+ * Direct boundary markers exempt a nested project from ancestor checks. Ordinary
+ * descendants are rejected when an ancestor contains both `.swarm/` and a
+ * project indicator. Ambiguous ancestor state fails closed.
+ */
+export declare function assertProjectRoot(directory: string, dependencies?: ProjectRootProbeDependencies, artifactLabel?: string): void;
+/** Narrow filesystem seam for deterministic marker error tests. */
+export declare const _internals: {
+    lstatSync: typeof fs.lstatSync;
+};
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.139.2",
+	"version": "7.139.4",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-hvw13hmr.js

@@ -1,61 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-a7nh382r.js";
-import"./index-vm4xw9z3.js";
-import"./index-wrt6m5ze.js";
-import"./index-y64jv2pe.js";
-import"./index-y47dwge1.js";
-import"./index-0wp67gqj.js";
-import"./index-s608d3hw.js";
-import"./index-y8552snf.js";
-import"./index-4905hd2m.js";
-import"./index-134d35c1.js";
-import"./index-ktagrqxw.js";
-import"./index-w71cq27a.js";
-import"./index-6w1re1qn.js";
-import"./index-6mjf4vr1.js";
-import"./index-c8s9a3zh.js";
-import"./index-9ss2m4rs.js";
-import"./index-wsdnttf4.js";
-import"./index-5w7ekpy3.js";
-import"./index-ffpmqx30.js";
-import"./index-3radty3f.js";
-import"./index-rtry5xyf.js";
-import"./index-cyw81ngh.js";
-import"./index-e9tx99ds.js";
-import"./index-ae75rja9.js";
-import"./index-668dpw5e.js";
-import"./index-gvhvz176.js";
-import"./index-q11t5erh.js";
-import"./index-gprxjmm7.js";
-import"./index-n832052r.js";
-import"./index-8p9pasnp.js";
-import"./index-bk5tah7q.js";
-import"./index-8fwhhayc.js";
-import"./index-q1exe2b3.js";
-import"./index-5zyk8qgv.js";
-import"./index-3eddtgxt.js";
-import"./index-556ja8an.js";
-import"./index-4xbyy6aw.js";
-import"./index-1kz6da87.js";
-import"./index-q7ezzgwq.js";
-import"./index-b8zgtz81.js";
-import"./index-a12906mj.js";
-import"./index-4rhhvd1a.js";
-import"./index-3jcyn8g6.js";
-import"./index-prmb5qfp.js";
-import"./index-x9q4bbhd.js";
-import"./index-ed5ykebp.js";
-import"./index-5j6chvj8.js";
-import"./index-7g4c7s5r.js";
-import"./index-a5eba0t8.js";
-import"./index-bpmtbmy9.js";
-import"./index-z6xqpmqg.js";
-import"./index-zjygnfay.js";
-import"./index-y111zefa.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-k62h3c92.js

@@ -1,62 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-6c5f309q.js";
-import"./index-a7nh382r.js";
-import"./index-vm4xw9z3.js";
-import"./index-wrt6m5ze.js";
-import"./index-y64jv2pe.js";
-import"./index-y47dwge1.js";
-import"./index-0wp67gqj.js";
-import"./index-s608d3hw.js";
-import"./index-y8552snf.js";
-import"./index-4905hd2m.js";
-import"./index-134d35c1.js";
-import"./index-ktagrqxw.js";
-import"./index-w71cq27a.js";
-import"./index-6w1re1qn.js";
-import"./index-6mjf4vr1.js";
-import"./index-c8s9a3zh.js";
-import"./index-9ss2m4rs.js";
-import"./index-wsdnttf4.js";
-import"./index-5w7ekpy3.js";
-import"./index-ffpmqx30.js";
-import"./index-3radty3f.js";
-import"./index-rtry5xyf.js";
-import"./index-cyw81ngh.js";
-import"./index-e9tx99ds.js";
-import"./index-ae75rja9.js";
-import"./index-668dpw5e.js";
-import"./index-gvhvz176.js";
-import"./index-q11t5erh.js";
-import"./index-gprxjmm7.js";
-import"./index-n832052r.js";
-import"./index-8p9pasnp.js";
-import"./index-bk5tah7q.js";
-import"./index-8fwhhayc.js";
-import"./index-q1exe2b3.js";
-import"./index-5zyk8qgv.js";
-import"./index-3eddtgxt.js";
-import"./index-556ja8an.js";
-import"./index-4xbyy6aw.js";
-import"./index-1kz6da87.js";
-import"./index-q7ezzgwq.js";
-import"./index-b8zgtz81.js";
-import"./index-a12906mj.js";
-import"./index-4rhhvd1a.js";
-import"./index-3jcyn8g6.js";
-import"./index-prmb5qfp.js";
-import"./index-x9q4bbhd.js";
-import"./index-ed5ykebp.js";
-import"./index-5j6chvj8.js";
-import"./index-7g4c7s5r.js";
-import"./index-a5eba0t8.js";
-import"./index-bpmtbmy9.js";
-import"./index-z6xqpmqg.js";
-import"./index-zjygnfay.js";
-import"./index-y111zefa.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};

package/dist/cli/index-5j6chvj8.js

@@ -1,159 +0,0 @@
-// @bun
-import {
-  require_proper_lockfile
-} from "./index-7g4c7s5r.js";
-import {
-  emit
-} from "./index-a5eba0t8.js";
-import {
-  __toESM
-} from "./index-a76rekgs.js";
-
-// src/parallel/file-locks.ts
-var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
-import * as crypto from "crypto";
-import * as fs from "fs";
-import * as path from "path";
-var LOCKS_DIR = ".swarm/locks";
-var LOCK_TIMEOUT_MS = 5 * 60 * 1000;
-var _internals = {
-  tryAcquireLock,
-  writeFile: fs.promises.writeFile
-};
-function getLockFilePath(directory, filePath) {
-  const normalized = path.resolve(directory, filePath);
-  const baseDir = path.resolve(directory) + path.sep;
-  const pathOk = process.platform === "win32" ? normalized.toLowerCase().startsWith(baseDir.toLowerCase()) : normalized.startsWith(baseDir);
-  if (!pathOk) {
-    throw new Error("Invalid file path: path traversal not allowed");
-  }
-  const pathForHash = process.platform === "win32" ? normalized.toLowerCase() : normalized;
-  const hash = crypto.createHash("sha256").update(pathForHash).digest("hex");
-  const lockPath = path.join(directory, LOCKS_DIR, `${hash}.lock`);
-  const legacyPaths = [pathForHash];
-  if (process.platform === "win32" && normalized !== pathForHash) {
-    legacyPaths.push(normalized);
-  }
-  for (const legacyPath of legacyPaths) {
-    const oldHash = Buffer.from(legacyPath).toString("base64").replace(/[/+=]/g, "_");
-    const oldLockPath = path.join(directory, LOCKS_DIR, `${oldHash}.lock`);
-    if (fs.existsSync(oldLockPath)) {
-      return oldLockPath;
-    }
-  }
-  return lockPath;
-}
-async function tryAcquireLock(directory, filePath, agent, taskId) {
-  const lockPath = getLockFilePath(directory, filePath);
-  const locksDir = path.dirname(lockPath);
-  if (!fs.existsSync(locksDir)) {
-    fs.mkdirSync(locksDir, { recursive: true });
-  }
-  if (!fs.existsSync(lockPath)) {
-    fs.writeFileSync(lockPath, "", "utf-8");
-  }
-  let release;
-  try {
-    release = await import_proper_lockfile.default.lock(lockPath, {
-      stale: LOCK_TIMEOUT_MS,
-      retries: {
-        retries: 5,
-        minTimeout: 10,
-        maxTimeout: 500,
-        factor: 2
-      },
-      realpath: false
-    });
-  } catch (err) {
-    const code = err.code;
-    if (code === "ELOCKED" || code === "EEXIST") {
-      return { acquired: false };
-    }
-    throw err;
-  }
-  const lock = {
-    filePath,
-    agent,
-    taskId,
-    timestamp: new Date().toISOString(),
-    expiresAt: Date.now() + LOCK_TIMEOUT_MS,
-    _release: release
-  };
-  return { acquired: true, lock };
-}
-
-// src/evidence/lock.ts
-class EvidenceLockTimeoutError extends Error {
-  directory;
-  evidencePath;
-  agent;
-  taskId;
-  constructor(directory, evidencePath, agent, taskId, timeoutMs) {
-    super(`Evidence lock timeout after ${timeoutMs}ms for ${evidencePath} (agent=${agent}, task=${taskId})`);
-    this.name = "EvidenceLockTimeoutError";
-    this.directory = directory;
-    this.evidencePath = evidencePath;
-    this.agent = agent;
-    this.taskId = taskId;
-  }
-}
-var BACKOFF_START_MS = 50;
-var BACKOFF_MAX_MS = 2000;
-var BACKOFF_JITTER_RATIO = 0.25;
-function backoffMs(attempt) {
-  const base = Math.min(BACKOFF_START_MS * 2 ** attempt, BACKOFF_MAX_MS);
-  const jitter = base * BACKOFF_JITTER_RATIO * (Math.random() * 2 - 1);
-  return Math.max(1, Math.round(base + jitter));
-}
-async function withEvidenceLock(directory, evidencePath, agent, taskId, fn, timeoutMs = 60000) {
-  const deadline = Date.now() + timeoutMs;
-  let attempt = 0;
-  while (true) {
-    const result = await tryAcquireLock(directory, evidencePath, agent, taskId);
-    if (result.acquired) {
-      const lock = result.lock;
-      if (attempt > 0) {
-        emit("evidence_lock_stale_recovered", {
-          directory,
-          evidencePath,
-          agent,
-          taskId,
-          attempt
-        });
-      }
-      emit("evidence_lock_acquired", {
-        directory,
-        evidencePath,
-        agent,
-        taskId,
-        attempt
-      });
-      try {
-        return await fn();
-      } finally {
-        if (lock._release) {
-          try {
-            await lock._release();
-          } catch {}
-        }
-      }
-    }
-    if (Date.now() >= deadline) {
-      throw new EvidenceLockTimeoutError(directory, evidencePath, agent, taskId, timeoutMs);
-    }
-    emit("evidence_lock_contended", {
-      directory,
-      evidencePath,
-      agent,
-      taskId,
-      attempt
-    });
-    const delay = Math.min(backoffMs(attempt), deadline - Date.now());
-    if (delay > 0) {
-      await new Promise((resolve2) => setTimeout(resolve2, delay));
-    }
-    attempt++;
-  }
-}
-
-export { tryAcquireLock, withEvidenceLock };

package/dist/cli/{index-z6xqpmqg.js → index-ee3x66a5.js}

@@ -1,10 +1,10 @@
 // @bun
-import {
-  init_merge
-} from "./index-zjygnfay.js";
 import {
   init_logger
 } from "./index-zgwm4ryv.js";
+import {
+  init_merge
+} from "./index-zjygnfay.js";
 
 // src/utils/errors.ts
 class SwarmError extends Error {