opencode-swarm 7.144.8 → 7.145.0

package/dist/config/schema.d.ts

@@ -435,8 +435,8 @@ export type AutoReviewConfig = z.infer<typeof AutoReviewConfigSchema>;
 export declare const AdversarialDetectionConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     policy: z.ZodDefault<z.ZodEnum<{
-        ignore: "ignore";
         gate: "gate";
+        ignore: "ignore";
         warn: "warn";
     }>>;
     pairs: z.ZodDefault<z.ZodArray<z.ZodTuple<[z.ZodString, z.ZodString], null>>>;
@@ -1571,10 +1571,10 @@ export declare const ExternalSkillCandidateSourceTypeSchema: z.ZodEnum<{
 export type ExternalSkillCandidateSourceType = z.infer<typeof ExternalSkillCandidateSourceTypeSchema>;
 /** Evaluation verdict for an external skill candidate. */
 export declare const ExternalSkillCandidateEvaluationVerdictSchema: z.ZodEnum<{
+    quarantined: "quarantined";
     passed: "passed";
     pending: "pending";
     promoted: "promoted";
-    quarantined: "quarantined";
     in_review: "in_review";
     rejected: "rejected";
     revoked: "revoked";
@@ -1618,20 +1618,20 @@ export declare const ExternalSkillCandidateSchema: z.ZodObject<{
     skill_body: z.ZodString;
     risk_flags: z.ZodDefault<z.ZodArray<z.ZodString>>;
     evaluation_verdict: z.ZodDefault<z.ZodEnum<{
+        quarantined: "quarantined";
         passed: "passed";
         pending: "pending";
         promoted: "promoted";
-        quarantined: "quarantined";
         in_review: "in_review";
         rejected: "rejected";
         revoked: "revoked";
     }>>;
     evaluation_history: z.ZodDefault<z.ZodArray<z.ZodObject<{
         verdict: z.ZodEnum<{
+            quarantined: "quarantined";
             passed: "passed";
             pending: "pending";
             promoted: "promoted";
-            quarantined: "quarantined";
             in_review: "in_review";
             rejected: "rejected";
             revoked: "revoked";
@@ -1641,10 +1641,10 @@ export declare const ExternalSkillCandidateSchema: z.ZodObject<{
         reason: z.ZodOptional<z.ZodString>;
         candidate_id: z.ZodOptional<z.ZodString>;
         original_verdict: z.ZodOptional<z.ZodEnum<{
+            quarantined: "quarantined";
             passed: "passed";
             pending: "pending";
             promoted: "promoted";
-            quarantined: "quarantined";
             in_review: "in_review";
             rejected: "rejected";
             revoked: "revoked";
@@ -1657,8 +1657,8 @@ export declare const ExternalSkillCandidateSchema: z.ZodObject<{
             total_flags: z.ZodNumber;
             findings: z.ZodArray<z.ZodObject<{
                 severity: z.ZodEnum<{
-                    error: "error";
                     warning: "warning";
+                    error: "error";
                 }>;
                 category: z.ZodString;
             }, z.core.$strip>>;
@@ -2033,8 +2033,8 @@ export declare const PluginConfigSchema: z.ZodObject<{
     adversarial_detection: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         policy: z.ZodDefault<z.ZodEnum<{
-            ignore: "ignore";
             gate: "gate";
+            ignore: "ignore";
             warn: "warn";
         }>>;
         pairs: z.ZodDefault<z.ZodArray<z.ZodTuple<[z.ZodString, z.ZodString], null>>>;

package/dist/evidence/task-file.d.ts

@@ -17,7 +17,6 @@
  * This module deliberately holds no schema/validation logic — each caller keeps
  * its own taskId validation and read/merge semantics.
  */
-import { renameSync, unlinkSync } from 'node:fs';
 /**
  * Relative path (under `.swarm/`) of the flat task evidence file.
  * This is also the lock key — it MUST be identical across all writers to the
@@ -26,26 +25,27 @@ import { renameSync, unlinkSync } from 'node:fs';
 export declare function taskEvidenceRelPath(taskId: string): string;
 /** Absolute path of the flat task evidence file under `<directory>/.swarm/`. */
 export declare function taskEvidencePath(directory: string, taskId: string): string;
-/**
- * Dependency-injection seam for testing. Tests can temporarily replace these
- * to exercise failure paths (e.g. EPERM on renameSync) without mock.module leakage.
- * Restore each entry in afterEach via the saved original reference.
- */
-export declare const _internals: {
-    renameSync: typeof renameSync;
-    unlinkSync: typeof unlinkSync;
-};
 /**
  * Atomic write: write to a unique temp file, then rename over the target.
  * The rename is atomic on POSIX and Windows, so readers never observe a torn
  * file. The temp file is cleaned up in `finally` (no-op once renamed away).
  *
- * Invalidates any swarm-artifact-cache entry for `targetPath` after a
- * successful rename: the cache's stat-based staleness check can collide on a
- * same-size rewrite that lands within one filesystem timestamp tick (issue
- * #1729), which would otherwise let a read immediately following this write
- * (e.g. a second locked transaction in the same logical operation) observe
- * the pre-write content instead of what was just committed.
+ * Delegates to the canonical writer core (`src/utils/atomic-write.ts`, issue
+ * #2035) via the ANY-ROOT variant: this shared writer serves dual
+ * destinations — `.swarm/evidence/**` files AND the linked/hive knowledge
+ * stores whose directories live outside any `.swarm` root (knowledge-store /
+ * knowledge-link / memory-link / family migrations) — so `.swarm` root
+ * containment (the canonical entry point's contract) is inapplicable here.
+ * Everything else is canonical: registered `canonical-v1` temp grammar,
+ * fsync-before-rename, bounded Windows rename retry, exact own-temp cleanup,
+ * and swarm-artifact-cache invalidation after a successful rename — the
+ * cache's stat-based staleness check can collide on a same-size rewrite that
+ * lands within one filesystem timestamp tick (issue #1729), which would
+ * otherwise let a read immediately following this write observe the pre-write
+ * content instead of what was just committed.
+ *
+ * Failure-injection tests target `src/utils/atomic-write.ts:_internals`
+ * (renameSync/unlinkSync) — the seam moved there with the implementation.
  */
 export declare function atomicWriteFile(targetPath: string, content: string): Promise<void>;
 /**