opencode-swarm 7.144.7 → 7.145.0

package/dist/commands/close.d.ts

@@ -169,7 +169,14 @@ export interface CleanStageResult {
     cleanedFiles: string[];
     configBackupsRemoved: number;
     swarmPlanFilesRemoved: number;
-    tmpFilesRemoved: number;
+    /**
+     * Stale atomic-write temp files MOVED into `.swarm/quarantine/<batch>/`
+     * (issue #2035). Quarantine is a recoverable move with a manifest — the
+     * pre-#2035 blind `.tmp.*` unlink sweep is gone; preserved candidates
+     * (recent/active/tracked/ambiguous) are counted in `residuePreserved`.
+     */
+    residueQuarantined: number;
+    residuePreserved: number;
 }
 /**
  * Emit the single `close_archive_result` telemetry event whose payload is the

package/dist/config/evidence-schema.d.ts

@@ -90,9 +90,9 @@ export declare const ReviewEvidenceSchema: z.ZodObject<{
     }>;
     issues: z.ZodDefault<z.ZodArray<z.ZodObject<{
         severity: z.ZodEnum<{
-            error: "error";
             info: "info";
             warning: "warning";
+            error: "error";
         }>;
         message: z.ZodString;
         file: z.ZodOptional<z.ZodString>;
@@ -518,8 +518,8 @@ export declare const QualityBudgetEvidenceSchema: z.ZodObject<{
         }>;
         message: z.ZodString;
         severity: z.ZodEnum<{
-            error: "error";
             warning: "warning";
+            error: "error";
         }>;
         files: z.ZodArray<z.ZodString>;
     }, z.core.$strip>>>;
@@ -623,9 +623,9 @@ export declare const EvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }>;
     issues: z.ZodDefault<z.ZodArray<z.ZodObject<{
         severity: z.ZodEnum<{
-            error: "error";
             info: "info";
             warning: "warning";
+            error: "error";
         }>;
         message: z.ZodString;
         file: z.ZodOptional<z.ZodString>;
@@ -1013,8 +1013,8 @@ export declare const EvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }>;
         message: z.ZodString;
         severity: z.ZodEnum<{
-            error: "error";
             warning: "warning";
+            error: "error";
         }>;
         files: z.ZodArray<z.ZodString>;
     }, z.core.$strip>>>;
@@ -1113,9 +1113,9 @@ export declare const EvidenceBundleSchema: z.ZodObject<{
         }>;
         issues: z.ZodDefault<z.ZodArray<z.ZodObject<{
             severity: z.ZodEnum<{
-                error: "error";
                 info: "info";
                 warning: "warning";
+                error: "error";
             }>;
             message: z.ZodString;
             file: z.ZodOptional<z.ZodString>;
@@ -1503,8 +1503,8 @@ export declare const EvidenceBundleSchema: z.ZodObject<{
             }>;
             message: z.ZodString;
             severity: z.ZodEnum<{
-                error: "error";
                 warning: "warning";
+                error: "error";
             }>;
             files: z.ZodArray<z.ZodString>;
         }, z.core.$strip>>>;

package/dist/config/plan-schema.d.ts

@@ -48,8 +48,8 @@ export declare function normalizePhaseStatus(status: PhaseStatus): PhaseStatus;
  */
 export declare function isPhaseComplete(status: PhaseStatus): boolean;
 export declare const MigrationStatusSchema: z.ZodEnum<{
-    native: "native";
     migrated: "migrated";
+    native: "native";
     migration_failed: "migration_failed";
 }>;
 export type MigrationStatus = z.infer<typeof MigrationStatusSchema>;
@@ -164,8 +164,8 @@ export declare const PlanSchema: z.ZodObject<{
         required_agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
     migration_status: z.ZodOptional<z.ZodEnum<{
-        native: "native";
         migrated: "migrated";
+        native: "native";
         migration_failed: "migration_failed";
     }>>;
     specMtime: z.ZodOptional<z.ZodString>;

package/dist/config/schema.d.ts

@@ -435,8 +435,8 @@ export type AutoReviewConfig = z.infer<typeof AutoReviewConfigSchema>;
 export declare const AdversarialDetectionConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     policy: z.ZodDefault<z.ZodEnum<{
-        ignore: "ignore";
         gate: "gate";
+        ignore: "ignore";
         warn: "warn";
     }>>;
     pairs: z.ZodDefault<z.ZodArray<z.ZodTuple<[z.ZodString, z.ZodString], null>>>;
@@ -1571,10 +1571,10 @@ export declare const ExternalSkillCandidateSourceTypeSchema: z.ZodEnum<{
 export type ExternalSkillCandidateSourceType = z.infer<typeof ExternalSkillCandidateSourceTypeSchema>;
 /** Evaluation verdict for an external skill candidate. */
 export declare const ExternalSkillCandidateEvaluationVerdictSchema: z.ZodEnum<{
+    quarantined: "quarantined";
     passed: "passed";
     pending: "pending";
     promoted: "promoted";
-    quarantined: "quarantined";
     in_review: "in_review";
     rejected: "rejected";
     revoked: "revoked";
@@ -1618,20 +1618,20 @@ export declare const ExternalSkillCandidateSchema: z.ZodObject<{
     skill_body: z.ZodString;
     risk_flags: z.ZodDefault<z.ZodArray<z.ZodString>>;
     evaluation_verdict: z.ZodDefault<z.ZodEnum<{
+        quarantined: "quarantined";
         passed: "passed";
         pending: "pending";
         promoted: "promoted";
-        quarantined: "quarantined";
         in_review: "in_review";
         rejected: "rejected";
         revoked: "revoked";
     }>>;
     evaluation_history: z.ZodDefault<z.ZodArray<z.ZodObject<{
         verdict: z.ZodEnum<{
+            quarantined: "quarantined";
             passed: "passed";
             pending: "pending";
             promoted: "promoted";
-            quarantined: "quarantined";
             in_review: "in_review";
             rejected: "rejected";
             revoked: "revoked";
@@ -1641,10 +1641,10 @@ export declare const ExternalSkillCandidateSchema: z.ZodObject<{
         reason: z.ZodOptional<z.ZodString>;
         candidate_id: z.ZodOptional<z.ZodString>;
         original_verdict: z.ZodOptional<z.ZodEnum<{
+            quarantined: "quarantined";
             passed: "passed";
             pending: "pending";
             promoted: "promoted";
-            quarantined: "quarantined";
             in_review: "in_review";
             rejected: "rejected";
             revoked: "revoked";
@@ -1657,8 +1657,8 @@ export declare const ExternalSkillCandidateSchema: z.ZodObject<{
             total_flags: z.ZodNumber;
             findings: z.ZodArray<z.ZodObject<{
                 severity: z.ZodEnum<{
-                    error: "error";
                     warning: "warning";
+                    error: "error";
                 }>;
                 category: z.ZodString;
             }, z.core.$strip>>;
@@ -2033,8 +2033,8 @@ export declare const PluginConfigSchema: z.ZodObject<{
     adversarial_detection: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         policy: z.ZodDefault<z.ZodEnum<{
-            ignore: "ignore";
             gate: "gate";
+            ignore: "ignore";
             warn: "warn";
         }>>;
         pairs: z.ZodDefault<z.ZodArray<z.ZodTuple<[z.ZodString, z.ZodString], null>>>;

package/dist/evidence/task-file.d.ts

@@ -17,7 +17,6 @@
  * This module deliberately holds no schema/validation logic — each caller keeps
  * its own taskId validation and read/merge semantics.
  */
-import { renameSync, unlinkSync } from 'node:fs';
 /**
  * Relative path (under `.swarm/`) of the flat task evidence file.
  * This is also the lock key — it MUST be identical across all writers to the
@@ -26,26 +25,27 @@ import { renameSync, unlinkSync } from 'node:fs';
 export declare function taskEvidenceRelPath(taskId: string): string;
 /** Absolute path of the flat task evidence file under `<directory>/.swarm/`. */
 export declare function taskEvidencePath(directory: string, taskId: string): string;
-/**
- * Dependency-injection seam for testing. Tests can temporarily replace these
- * to exercise failure paths (e.g. EPERM on renameSync) without mock.module leakage.
- * Restore each entry in afterEach via the saved original reference.
- */
-export declare const _internals: {
-    renameSync: typeof renameSync;
-    unlinkSync: typeof unlinkSync;
-};
 /**
  * Atomic write: write to a unique temp file, then rename over the target.
  * The rename is atomic on POSIX and Windows, so readers never observe a torn
  * file. The temp file is cleaned up in `finally` (no-op once renamed away).
  *
- * Invalidates any swarm-artifact-cache entry for `targetPath` after a
- * successful rename: the cache's stat-based staleness check can collide on a
- * same-size rewrite that lands within one filesystem timestamp tick (issue
- * #1729), which would otherwise let a read immediately following this write
- * (e.g. a second locked transaction in the same logical operation) observe
- * the pre-write content instead of what was just committed.
+ * Delegates to the canonical writer core (`src/utils/atomic-write.ts`, issue
+ * #2035) via the ANY-ROOT variant: this shared writer serves dual
+ * destinations — `.swarm/evidence/**` files AND the linked/hive knowledge
+ * stores whose directories live outside any `.swarm` root (knowledge-store /
+ * knowledge-link / memory-link / family migrations) — so `.swarm` root
+ * containment (the canonical entry point's contract) is inapplicable here.
+ * Everything else is canonical: registered `canonical-v1` temp grammar,
+ * fsync-before-rename, bounded Windows rename retry, exact own-temp cleanup,
+ * and swarm-artifact-cache invalidation after a successful rename — the
+ * cache's stat-based staleness check can collide on a same-size rewrite that
+ * lands within one filesystem timestamp tick (issue #1729), which would
+ * otherwise let a read immediately following this write observe the pre-write
+ * content instead of what was just committed.
+ *
+ * Failure-injection tests target `src/utils/atomic-write.ts:_internals`
+ * (renameSync/unlinkSync) — the seam moved there with the implementation.
  */
 export declare function atomicWriteFile(targetPath: string, content: string): Promise<void>;
 /**

package/dist/git/branch.d.ts

@@ -60,6 +60,15 @@ declare const __spawnSyncSeam: {
  * Synchronously read and parse a lane runtime profile from disk.
  * Mirrors the logic of `readLaneEnvFileFromDisk` but uses sync fs.
  * Returns an empty record when the file does not exist or cannot be read.
+ *
+ * UNTRUSTED INPUT (issue #2263): this file lives at
+ * `<worktree>/.swarm/lanes/<N>.env` — a path INSIDE the repository — so a
+ * hostile repository can simply commit it. Every key/value parsed here is
+ * attacker-controlled and must pass BOTH the `isValidEnvKey` shape check and
+ * the `isUntrustedEnvKey` denylist (drops the `GIT_*` control plane and the
+ * `LD_*`/`DYLD_*` loader-hijack families, which are code-execution
+ * primitives in a git child-process environment). The shape-only validation
+ * looks sufficient but is not — that gap is exactly what #2263 reported.
  */
 export declare function readLaneEnvFileFromDiskSync(worktreePath: string, laneIndex: number): Record<string, string>;
 declare function gitExec(args: string[], cwd: string, laneEnv?: Record<string, string>, laneIndex?: number): string;

package/dist/hooks/delegation-gate/worktree-isolation.d.ts

@@ -287,6 +287,11 @@ callID?: string, settlement?: StandardWorktreeSettlementOptions): Promise<Standa
  * - Skips blank lines and lines starting with `#` (comments).
  * - Skips malformed lines (no `=` separator).
  * - Validates each key with `isValidEnvKey`; rejects and skips invalid keys.
+ * - Drops `GIT_*` / `LD_*` / `DYLD_*` keys via `isUntrustedEnvKey` (#2263):
+ *   the file is repo-resident, so its contents are attacker-controlled. The
+ *   `GIT_*` family is git's control plane (`GIT_SSH_COMMAND`,
+ *   `GIT_CONFIG_*`, …) and `LD_*`/`DYLD_*` are loader-hijack vectors — none
+ *   belong in a lane profile (PORT / TMPDIR / cache redirects).
  * - Returns an empty record when the file does not exist.
  *
  * Exposed via _internals for testability (no mock.module leakage).