opencode-swarm 7.153.0 → 7.153.1

package/dist/cli/{index-9vdh4kdx.js → index-0tzv5zg2.js}

@@ -14,14 +14,14 @@ import {
   detectWindowsWrites,
   getSharedClassifierGuardrailBlock,
   resolveWriteTargets
-} from "./index-95qra69h.js";
+} from "./index-6ybjrqf7.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-6v77adf7.js";
+} from "./index-gn26q90p.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-e2hs0bh7.js → index-1akn19mp.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-3z5jtyan.js";
+} from "./index-n823qsae.js";
 import {
   GIT_BINARY_ENV_VAR,
   init_git_executable

package/dist/cli/{index-5x67858f.js → index-1dtshrzg.js}

@@ -2,23 +2,23 @@
 import {
   computePlanStructureHash,
   derivePlanId
-} from "./index-80ekaf5b.js";
+} from "./index-mb7b1gye.js";
 import {
   appendCoreEventSync
-} from "./index-6zkm4p7p.js";
+} from "./index-pk1gbqmq.js";
 import {
   unsafePathTextReason
 } from "./index-556ja8an.js";
 import {
   PlanSchema
-} from "./index-e2hs0bh7.js";
+} from "./index-1akn19mp.js";
 import {
   atomicWriteSwarmFile,
   atomicWriteSwarmFileSync
-} from "./index-k2ydsqs7.js";
+} from "./index-td0jz8xe.js";
 import {
   assertProjectRoot
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-9gjbe4e4.js → index-1gzdnjg9.js}

@@ -9,11 +9,11 @@ import {
 } from "./index-y8552snf.js";
 import {
   atomicWriteFile
-} from "./index-0n7nm9e8.js";
+} from "./index-zppxpc3y.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-dh1gk5c5.js → index-23rneydq.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-9vdh4kdx.js";
+} from "./index-0tzv5zg2.js";
 import {
   handleGuardrailLog
-} from "./index-g0m6kypc.js";
+} from "./index-6vgb5fyb.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -86,51 +86,51 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-95qra69h.js";
-import"./index-x6zy6veh.js";
-import"./index-6v77adf7.js";
-import"./index-hw49515c.js";
-import"./index-eqh3t8eh.js";
-import"./index-9gjbe4e4.js";
+} from "./index-6ybjrqf7.js";
+import"./index-gn26q90p.js";
+import"./index-0tyc8kdg.js";
+import"./index-af0cqe6n.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
+import"./index-4pjkdcgc.js";
+import"./index-1gzdnjg9.js";
 import"./index-y8552snf.js";
-import"./index-4gn111h3.js";
-import"./index-7q56f3se.js";
+import"./index-8v9sj4aq.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-vnn7qq8c.js";
-import"./index-0q2mjxp2.js";
-import"./index-3z2f1cy8.js";
-import"./index-5w915x8b.js";
-import"./index-1yfpw7w0.js";
+import"./index-meg33yyv.js";
+import"./index-n5pxkera.js";
+import"./index-smqsp8hs.js";
+import"./index-v689bmr2.js";
+import"./index-3ttktt56.js";
 import"./index-rtry5xyf.js";
+import"./index-3cegckkq.js";
 import"./index-zsrtt42s.js";
-import"./index-z4bg1hv8.js";
-import"./index-fxvgaeq4.js";
-import"./index-babtfqa0.js";
-import"./index-eajfs7v4.js";
-import"./index-5x67858f.js";
-import"./index-80ekaf5b.js";
-import"./index-6zkm4p7p.js";
+import"./index-9v8d3c0k.js";
+import"./index-4g0g3dqz.js";
+import"./index-2mqmvxac.js";
+import"./index-1dtshrzg.js";
+import"./index-mb7b1gye.js";
+import"./index-pk1gbqmq.js";
 import"./index-556ja8an.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
 import"./index-4fwbbad3.js";
-import"./index-77xy577c.js";
-import"./index-xv881ahz.js";
-import"./index-hkmgzesw.js";
+import"./index-k10qtq71.js";
+import"./index-tdzbm974.js";
+import"./index-ajkxx2k6.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-e2hs0bh7.js";
+import"./index-1akn19mp.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-3z5jtyan.js";
+} from "./index-n823qsae.js";
 import {
   AGENT_TOOL_MAP,
   ORCHESTRATOR_NAME,
@@ -140,15 +140,15 @@ import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-qgfnd206.js";
-import"./index-0n7nm9e8.js";
+import"./index-x3y6zhgj.js";
+import"./index-zppxpc3y.js";
 import"./index-bk5tah7q.js";
-import"./index-k2ydsqs7.js";
-import"./index-txbd25bc.js";
-import"./index-aw492hpn.js";
+import"./index-td0jz8xe.js";
+import"./index-891g7hbf.js";
+import"./index-ed5ykebp.js";
+import"./index-x8vw6ap1.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
-import"./index-ed5ykebp.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 

package/dist/cli/{index-z4bg1hv8.js → index-2mqmvxac.js}

@@ -8,7 +8,7 @@ import {
 import {
   EvidenceLockTimeoutError,
   withEvidenceLock
-} from "./index-txbd25bc.js";
+} from "./index-891g7hbf.js";
 import {
   exports_external,
   init_zod
@@ -469,7 +469,14 @@ var WorktreeDescriptorSchema = exports_external.object({
   worktreeSessionId: exports_external.string().min(1).max(256),
   mergeStrategy: exports_external.enum(["merge", "rebase", "cherry-pick"]),
   laneIndex: exports_external.number().int().nonnegative().max(255),
-  worktreeDir: exports_external.string().min(1).max(4096).nullable()
+  worktreeDir: exports_external.string().min(1).max(4096).nullable(),
+  reservationId: exports_external.string().min(1).max(512).optional(),
+  generation: exports_external.number().int().min(1).optional(),
+  provisioningOwner: exports_external.object({
+    reservationId: exports_external.string().min(1).max(512),
+    generation: exports_external.number().int().min(1),
+    branchName: exports_external.string().min(1).max(1024)
+  }).strict().optional()
 }).strict();
 var TerminalResultSchema = exports_external.object({
   eventId: exports_external.string().min(1).max(256),

package/dist/cli/index-3cegckkq.js

@@ -0,0 +1,239 @@
+// @bun
+import {
+  validateSwarmPath
+} from "./index-4cgee5vh.js";
+import {
+  atomicWriteSwarmFileSync
+} from "./index-td0jz8xe.js";
+
+// src/hooks/delegation-gate/worktree-provisioning-owner.ts
+import { createHash } from "crypto";
+import * as fs from "fs";
+import * as path from "path";
+var PROVISIONING_OWNER_DIR = "worktree-provisioning-owners";
+var MAX_PROVISIONING_OWNERS = 512;
+var MAX_PROVISIONING_OWNER_BYTES = 16 * 1024;
+var PROVISIONING_JOURNAL_PATH = path.join(".swarm", "worktree-provisioning-lifecycle.json");
+var MAX_PROVISIONING_JOURNAL_BYTES = 256 * 1024;
+var MAX_PROVISIONING_JOURNAL_ENTRIES = 512;
+var WORKTREE_PROVISIONING_OWNER_LEASE_MS = 5 * 60 * 1000;
+var WORKTREE_LIFECYCLE_LOCK_FILE = ".swarm/locks/init-orphan-recovery.lock";
+var WORKTREE_PROVISIONING_LIFECYCLE_STATES = [
+  "OWNER_PUBLISHED",
+  "OWNER_REMOVED"
+];
+function ownerDirectory(directory) {
+  return path.dirname(validateSwarmPath(directory, path.join(PROVISIONING_OWNER_DIR, ".containment-anchor")));
+}
+function ownerPath(directory, callID) {
+  const digest = createHash("sha256").update(callID).digest("hex");
+  return validateSwarmPath(directory, path.join(PROVISIONING_OWNER_DIR, `${digest}.json`));
+}
+function journalPath(directory) {
+  return validateSwarmPath(directory, PROVISIONING_JOURNAL_PATH);
+}
+function isOwner(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const candidate = value;
+  const schemaVersion = candidate.schemaVersion;
+  const validTaskIdentity = schemaVersion === 1 ? candidate.taskId === undefined && candidate.reservationId === undefined && candidate.generation === undefined && candidate.branchName === undefined : schemaVersion === 2 && typeof candidate.taskId === "string" && candidate.taskId.length > 0 && candidate.taskId.length <= 512 && candidate.reservationId === undefined && candidate.generation === undefined && candidate.branchName === undefined;
+  const validV3Identity = schemaVersion === 3 && typeof candidate.taskId === "string" && candidate.taskId.length > 0 && candidate.taskId.length <= 512 && typeof candidate.reservationId === "string" && candidate.reservationId.length > 0 && candidate.reservationId.length <= 512 && typeof candidate.generation === "number" && Number.isInteger(candidate.generation) && candidate.generation > 0 && typeof candidate.branchName === "string" && candidate.branchName.length > 0 && candidate.branchName.length <= 1024;
+  return (schemaVersion === 1 || schemaVersion === 2 || schemaVersion === 3) && (validTaskIdentity || validV3Identity) && typeof candidate.callID === "string" && candidate.callID.length > 0 && candidate.callID.length <= 512 && typeof candidate.parentSessionId === "string" && candidate.parentSessionId.length > 0 && candidate.parentSessionId.length <= 512 && typeof candidate.worktreeSessionId === "string" && candidate.worktreeSessionId.length > 0 && candidate.worktreeSessionId.length <= 512 && typeof candidate.createdAt === "number" && Number.isFinite(candidate.createdAt) && candidate.createdAt >= 0;
+}
+function isLifecycleEntry(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const candidate = value;
+  const validState = WORKTREE_PROVISIONING_LIFECYCLE_STATES.includes(candidate.state);
+  return candidate.schemaVersion === 1 && validState && typeof candidate.callID === "string" && candidate.callID.length > 0 && candidate.callID.length <= 512 && typeof candidate.parentSessionId === "string" && candidate.parentSessionId.length > 0 && candidate.parentSessionId.length <= 512 && typeof candidate.worktreeSessionId === "string" && candidate.worktreeSessionId.length > 0 && candidate.worktreeSessionId.length <= 512 && (candidate.taskId === undefined || typeof candidate.taskId === "string" && candidate.taskId.length > 0 && candidate.taskId.length <= 512) && (candidate.reservationId === undefined || typeof candidate.reservationId === "string" && candidate.reservationId.length > 0 && candidate.reservationId.length <= 512) && (candidate.generation === undefined || typeof candidate.generation === "number" && Number.isInteger(candidate.generation) && candidate.generation > 0) && (candidate.branchName === undefined || typeof candidate.branchName === "string" && candidate.branchName.length > 0 && candidate.branchName.length <= 1024) && typeof candidate.recordedAt === "number" && Number.isFinite(candidate.recordedAt) && candidate.recordedAt >= 0;
+}
+function readBoundedJsonFile(filePath, maxBytes) {
+  try {
+    const stat = fs.statSync(filePath);
+    if (stat.size > maxBytes) {
+      return {
+        ok: false,
+        reason: `${path.basename(filePath)} exceeds the ${maxBytes}-byte safety bound`
+      };
+    }
+    const raw = fs.readFileSync(filePath, "utf8");
+    if (Buffer.byteLength(raw, "utf8") > maxBytes) {
+      return {
+        ok: false,
+        reason: `${path.basename(filePath)} changed beyond the ${maxBytes}-byte safety bound`
+      };
+    }
+    return { ok: true, value: JSON.parse(raw) };
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { ok: true, value: undefined };
+    }
+    return {
+      ok: false,
+      reason: `${path.basename(filePath)} is unreadable or malformed: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+}
+function readOwner(directory, callID) {
+  const absolutePath = ownerPath(directory, callID);
+  const loaded = readBoundedJsonFile(absolutePath, MAX_PROVISIONING_OWNER_BYTES);
+  if (!loaded.ok || loaded.value === undefined)
+    return null;
+  return isOwner(loaded.value) ? loaded.value : null;
+}
+function loadLifecycleJournal(directory) {
+  const loaded = readBoundedJsonFile(journalPath(directory), MAX_PROVISIONING_JOURNAL_BYTES);
+  if (!loaded.ok)
+    return { status: "uncertain", reason: loaded.reason };
+  if (loaded.value === undefined)
+    return { status: "ok", entries: [] };
+  const parsed = loaded.value;
+  if (parsed.schemaVersion !== 1 || !Array.isArray(parsed.entries)) {
+    return {
+      status: "uncertain",
+      reason: "worktree provisioning lifecycle journal is malformed"
+    };
+  }
+  if (parsed.entries.length > MAX_PROVISIONING_JOURNAL_ENTRIES) {
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning lifecycle journal exceeds the ${MAX_PROVISIONING_JOURNAL_ENTRIES}-entry safety bound`
+    };
+  }
+  const entries = [];
+  for (const entry of parsed.entries) {
+    if (!isLifecycleEntry(entry)) {
+      return {
+        status: "uncertain",
+        reason: "worktree provisioning lifecycle journal contains an invalid entry"
+      };
+    }
+    entries.push(entry);
+  }
+  return { status: "ok", entries };
+}
+function appendLifecycleEntry(directory, owner, state) {
+  const loaded = loadLifecycleJournal(directory);
+  if (loaded.status === "uncertain") {
+    throw new Error(loaded.reason);
+  }
+  const entries = [
+    ...loaded.entries,
+    {
+      schemaVersion: 1,
+      state,
+      callID: owner.callID,
+      parentSessionId: owner.parentSessionId,
+      worktreeSessionId: owner.worktreeSessionId,
+      ...owner.taskId ? { taskId: owner.taskId } : {},
+      ...owner.reservationId ? { reservationId: owner.reservationId } : {},
+      ...owner.generation !== undefined ? { generation: owner.generation } : {},
+      ...owner.branchName ? { branchName: owner.branchName } : {},
+      recordedAt: Date.now()
+    }
+  ];
+  const journal = {
+    schemaVersion: 1,
+    entries: entries.slice(-MAX_PROVISIONING_JOURNAL_ENTRIES)
+  };
+  atomicWriteSwarmFileSync(journalPath(directory), JSON.stringify(journal, null, 2));
+}
+function recordWorktreeProvisioningOwner(directory, input) {
+  const wantsV3 = input.reservationId !== undefined || input.generation !== undefined || input.branchName !== undefined;
+  if (wantsV3 && (!input.taskId || !input.reservationId || input.generation === undefined || !input.branchName)) {
+    throw new Error("worktree provisioning owner v3 requires taskId, reservationId, generation, and branchName");
+  }
+  const owner = {
+    schemaVersion: wantsV3 ? 3 : input.taskId ? 2 : 1,
+    callID: input.callID,
+    parentSessionId: input.parentSessionId,
+    worktreeSessionId: input.worktreeSessionId,
+    ...input.taskId ? { taskId: input.taskId } : {},
+    ...input.reservationId ? { reservationId: input.reservationId } : {},
+    ...input.generation !== undefined ? { generation: input.generation } : {},
+    ...input.branchName ? { branchName: input.branchName } : {},
+    createdAt: Date.now()
+  };
+  if (!isOwner(owner)) {
+    throw new Error("invalid worktree provisioning owner");
+  }
+  const absolutePath = ownerPath(directory, input.callID);
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true });
+  atomicWriteSwarmFileSync(absolutePath, `${JSON.stringify(owner)}
+`);
+  appendLifecycleEntry(directory, owner, "OWNER_PUBLISHED");
+  return owner;
+}
+function removeWorktreeProvisioningOwner(directory, callID, expected) {
+  try {
+    const owner = readOwner(directory, callID);
+    if (owner?.schemaVersion === 3 && (!expected || expected.reservationId !== owner.reservationId || expected.generation !== owner.generation || expected.branchName !== owner.branchName)) {
+      return false;
+    }
+    fs.unlinkSync(ownerPath(directory, callID));
+    if (owner)
+      appendLifecycleEntry(directory, owner, "OWNER_REMOVED");
+    return true;
+  } catch (error) {
+    return error.code === "ENOENT";
+  }
+}
+function scanWorktreeProvisioningOwnersForRecovery(directory) {
+  let directoryPath;
+  let entries;
+  try {
+    directoryPath = ownerDirectory(directory);
+    entries = fs.readdirSync(directoryPath, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json"));
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { status: "ok", owners: [] };
+    }
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning-owner directory is unreadable: ${error instanceof Error ? error.message : String(error)}`
+    };
+  }
+  if (entries.length > MAX_PROVISIONING_OWNERS) {
+    return {
+      status: "uncertain",
+      reason: `worktree provisioning-owner count exceeds the ${MAX_PROVISIONING_OWNERS}-marker safety bound`
+    };
+  }
+  const owners = [];
+  for (const entry of entries) {
+    const absolutePath = path.join(directoryPath, entry.name);
+    try {
+      const stat = fs.statSync(absolutePath);
+      if (stat.size > MAX_PROVISIONING_OWNER_BYTES) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" exceeds the recovery size bound`
+        };
+      }
+      const raw = fs.readFileSync(absolutePath, "utf8");
+      if (Buffer.byteLength(raw, "utf8") > MAX_PROVISIONING_OWNER_BYTES) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" changed beyond the recovery size bound`
+        };
+      }
+      const parsed = JSON.parse(raw);
+      if (!isOwner(parsed)) {
+        return {
+          status: "uncertain",
+          reason: `worktree provisioning owner "${entry.name}" is invalid`
+        };
+      }
+      owners.push(parsed);
+    } catch (error) {
+      return {
+        status: "uncertain",
+        reason: `worktree provisioning owner "${entry.name}" is unreadable or malformed: ${error instanceof Error ? error.message : String(error)}`
+      };
+    }
+  }
+  return { status: "ok", owners };
+}
+
+export { WORKTREE_PROVISIONING_OWNER_LEASE_MS, WORKTREE_LIFECYCLE_LOCK_FILE, recordWorktreeProvisioningOwner, removeWorktreeProvisioningOwner, scanWorktreeProvisioningOwnersForRecovery };

package/dist/cli/{index-1yfpw7w0.js → index-3ttktt56.js}

@@ -7,7 +7,7 @@ import {
   readLinkPointer,
   resolveKnowledgeStoreDir,
   resolveLinkDir
-} from "./index-qgfnd206.js";
+} from "./index-x3y6zhgj.js";
 
 // src/knowledge/curation-policy.ts
 import { appendFile, mkdir as mkdir2, readFile as readFile2 } from "fs/promises";

package/dist/cli/{index-eajfs7v4.js → index-4g0g3dqz.js}

@@ -92,7 +92,7 @@ var _internals = {
     symlinkSync: fs.symlinkSync
   },
   writeScopeToDisk: async (directory, taskId, files) => {
-    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-ypcrvqtt.js");
+    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-5xt2m5ep.js");
     return realWrite(directory, taskId, files);
   },
   writeLaneProfileToDisk: async (_worktreePath, _laneIndex, _envOverrides) => {

package/dist/cli/{index-x6zy6veh.js → index-4pjkdcgc.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-9gjbe4e4.js";
+} from "./index-1gzdnjg9.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,

package/dist/cli/{index-g0m6kypc.js → index-6vgb5fyb.js}

@@ -4,7 +4,7 @@ import {
   readShellAuditTail,
   redactPath,
   redactShellCommand
-} from "./index-6v77adf7.js";
+} from "./index-gn26q90p.js";
 
 // src/services/guardrail-log-service.ts
 var BLOCK_TYPES = new Set([