opencode-swarm 7.164.5 → 7.164.7

package/dist/plan/ledger.d.ts

@@ -88,6 +88,7 @@ declare function getLedgerPath(directory: string): string;
  * Get the path to plan.json
  */
 declare function getPlanJsonPath(directory: string): string;
+declare function readLedgerDirectory(directory: string): string[];
 /**
  * Durable atomic write: write `data` to `tempPath`, fsync the file descriptor so
  * the bytes are flushed to stable storage, then atomically rename it over
@@ -572,6 +573,7 @@ export declare const _internals: {
     getPlanJsonPath: typeof getPlanJsonPath;
     writeFileFsyncedThenRename: typeof writeFileFsyncedThenRename;
     fsyncRecoveryDirectory: typeof fsyncRecoveryDirectory;
+    readLedgerDirectory: typeof readLedgerDirectory;
     randomUUID: () => `${string}-${string}-${string}-${string}-${string}`;
 };
 export {};

package/dist/pr-review/authorization.d.ts

@@ -82,9 +82,9 @@ declare function reentryAuthorizationFilePath(directory: string, sessionID: stri
 declare function renameWithRetryAsync(tempPath: string, targetPath: string): Promise<void>;
 declare function writeAuthorizationFile(filePath: string, file: AuthorizationFile): Promise<void>;
 /**
- * Drop expired records past the retention bound; keep newest first. A burst
- * of consumed records must never evict a still-live unconsumed authorization
- * before its TTL, so unconsumed records take priority within the cap.
+ * Drop expired records past the retention bound while preserving every live
+ * authorization. Consumed records are retained only as same-call replay
+ * evidence, so they fill the remaining bounded capacity after live records.
  */
 declare function pruneAuthorizations(records: readonly PrReviewReentryAuthorizationRecord[], nowMs: number): PrReviewReentryAuthorizationRecord[];
 /**
@@ -99,6 +99,15 @@ export declare function issuePrReviewReentryAuthorization(directory: string, ses
     role: PrReviewReentryRole;
 }): Promise<PrReviewReentryAuthorizationRecord>;
 declare function authorizationMatchesBinding(record: PrReviewReentryAuthorizationRecord, binding: PrReviewReentryBindingContext): boolean;
+/**
+ * Read-only admission check for the PR workflow hook. The workflow-session
+ * lock is held by the caller while this authorization-store lock is acquired,
+ * so the binding used for the check cannot change underneath the read. The
+ * token remains unconsumed until the delegation gate has accepted the Task.
+ */
+export declare function hasPrReviewReentryAuthorizationAgainstBinding(directory: string, sessionID: string, request: {
+    role: PrReviewReentryRole;
+}, binding: PrReviewReentryBindingContext): Promise<boolean>;
 /**
  * Reserve or verify one authorization against a binding whose owning workflow
  * lock is held by the caller. The authorization-file lock is always acquired
@@ -115,6 +124,7 @@ export declare const _internals: {
     reentryAuthorizationFilePath: typeof reentryAuthorizationFilePath;
     pruneAuthorizations: typeof pruneAuthorizations;
     authorizationMatchesBinding: typeof authorizationMatchesBinding;
+    hasPrReviewReentryAuthorizationAgainstBinding: typeof hasPrReviewReentryAuthorizationAgainstBinding;
     /** DI seam: the rename implementation (tests inject failure modes). */
     renameImpl: (from: string, to: string) => Promise<void>;
     /** DI seam: retry backoff schedule (tests shrink to avoid real sleeps). */

package/dist/tools/authorize-pr-review-reentry.d.ts

@@ -9,10 +9,11 @@ import { createSwarmTool } from './create-tool.js';
  * requirement; every other delegation gate stays authoritative. Bindings are
  * exact (session, workflow, run, head SHA, worktree revision digest, role,
  * gate generation): replay, cross-session use, wrong role, expiry, or any
- * workflow progress since issuance fails closed. A Task the delegation gate
- * later rejects for an unrelated reason still burns the authorization —
- * issue a fresh one before retrying. Issue immediately before the Task
- * dispatch — authorizations are not stockpilable.
+ * workflow progress since issuance fails closed. If a plan or task workflow
+ * state exists, the dispatch must identify the exact task; taskless dispatches
+ * are limited to plan-free standalone review. A later unrelated gate rejection
+ * still burns the authorization — issue a fresh one before retrying. Issue
+ * immediately before the Task dispatch — authorizations are not stockpilable.
  */
 export declare function executeAuthorizePrReviewReentry(args: unknown, directory: string, context?: {
     sessionID?: string;

package/dist/tools/dispatch-lanes.d.ts

@@ -676,6 +676,7 @@ declare function applyExplorerFormatSuffix(lanes: DispatchLaneSpec[], options?:
 declare function prReviewLaneResponseBudgetChars(mode: string, lane: DispatchLaneSpec): number | undefined;
 declare function applyPrWorkflowPromptContract(lanes: DispatchLaneSpec[], options: {
     mode?: string;
+    batchId?: string;
     prHeadSha?: string;
     revisionDigest?: string;
     scope?: string;

package/dist/tools/pr-workflow-status.d.ts

@@ -17,6 +17,7 @@ declare function truncateToByteBudget(value: string, maxBytes: number): string;
  * finally. Never runs a PR-controlled script — only fixed read verbs are passed.
  */
 declare function runGitCapture(directory: string, args: string[]): Promise<string | null>;
+declare function resolveWorkflowGateSession(directory: string, sessionID: string): Promise<string | null>;
 export declare const pr_workflow_status: ReturnType<typeof createSwarmTool>;
 /** Test seam mirroring gh-evidence's `_internals` (issue #507 DI convention). */
 export declare const _internals: {
@@ -26,5 +27,6 @@ export declare const _internals: {
     runGitCapture: typeof runGitCapture;
     classifyGitState: typeof classifyPrWorkflowGitState;
     truncateToByteBudget: typeof truncateToByteBudget;
+    resolveWorkflowGateSession: typeof resolveWorkflowGateSession;
 };
 export {};

package/dist/tools/pre-check-batch.d.ts

@@ -104,7 +104,7 @@ export interface PreCheckBatchResult {
  * field and replace optional payloads with bounded, UTF-8-safe summaries.
  */
 declare function serializePreCheckResult(result: PreCheckBatchResult): string;
-declare function isAcceptedProjectRootForPlatform(dir: string, workspaceDir: string, platform: NodeJS.Platform, hasExplicitBoundary: boolean): boolean;
+declare function isAcceptedProjectRootForPlatform(dir: string, workspaceDir: string, platform: NodeJS.Platform, hasExplicitBoundary: boolean, exactPhysicalRoot?: boolean): boolean;
 export declare const _test_exports: {
     isAcceptedProjectRootForPlatform: typeof isAcceptedProjectRootForPlatform;
 };

package/dist/utils/canonical-root.d.ts

@@ -13,6 +13,7 @@
  * `validateSwarmPath`, so the aliasing this resolves lives strictly ABOVE
  * `.swarm`. One shared implementation so the three maps cannot drift.
  */
+import * as fsSync from 'node:fs';
 /**
  * Separator between canonical root and session id in composite keys.
  * `String.fromCharCode(0)` rather than an escape literal so the source stays
@@ -20,10 +21,29 @@
  * binary); NUL cannot appear in a path on any supported platform.
  */
 export declare const SESSION_KEY_SEPARATOR: string;
+/** Keep filesystem and platform access behind a narrow test seam. */
+export declare const _internals: {
+    realpathSyncNative: (path: fsSync.PathLike) => string;
+    realpathSync: typeof fsSync.realpathSync;
+    lstatSync: typeof fsSync.lstatSync;
+    platform: () => NodeJS.Platform;
+};
+/**
+ * Normalize only the caller's lexical spelling of a root.
+ *
+ * This is deliberately not physical project identity. It exists solely for
+ * bounded resource-lifecycle alias tables that must remember how a caller
+ * spelled a root after that path is deleted or becomes inaccessible. New
+ * equality, cache, authority, or persistence decisions must use
+ * {@link canonicalRootKeyFresh} instead.
+ */
+export declare function lexicalRootAliasKey(directory: string): string;
 export declare function canonicalRootKey(directory: string): string;
 /** Resolve a root without consulting the bounded memoized cache. */
 export declare function canonicalRootKeyFresh(directory: string): string;
-/** Composite map key: canonical root + NUL + session id. */
+/** Compare current physical project-root identity, bypassing the memo. */
+export declare function sameProjectRoot(a: string, b: string): boolean;
+/** Composite map key: current physical root + NUL + session id. */
 export declare function compositeSessionKey(directory: string, sessionId: string): string;
 /**
  * Suffix every root's key for a session ends with. Suffix-scan clear paths

package/dist/utils/filesystem-identity.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Fail-closed physical filesystem identity for existing entries.
+ *
+ * Unlike canonicalRootKey, this helper never falls back to a lexical path:
+ * callers use it only when equality must be proven for entries that exist.
+ * It does not establish containment, authorization, hard-link equivalence, or
+ * race-free safety; it proves pathname identity at the instant of resolution.
+ */
+import * as fsSync from 'node:fs';
+export declare const _internals: {
+    realpathSyncNative: (path: fsSync.PathLike) => string;
+    realpathSync: typeof fsSync.realpathSync;
+    lstatSync: typeof fsSync.lstatSync;
+    platform: () => NodeJS.Platform;
+};
+/**
+ * Return a canonical pathname only when the entry physically resolves.
+ * Native realpath expands Windows 8.3 names; ordinary realpath is a portable
+ * fallback for runtimes/filesystems where the native binding is unavailable.
+ */
+export declare function canonicalExistingFilesystemPath(entryPath: string): string | null;
+/**
+ * Return the pre-#2474 canonical spelling used in persisted scope bindings.
+ *
+ * It deliberately skips the native Windows resolver: old releases used the
+ * ordinary `realpathSync` result (then slash-normalized and case-folded). The
+ * scope persistence reader uses this as a narrow dual-read compatibility
+ * witness and always rewrites a recovered binding with the current native-first
+ * identity on its next durable write.
+ */
+export declare function legacyCanonicalExistingFilesystemPath(entryPath: string): string | null;
+export interface CanonicalPathFromExistingAncestor {
+    canonicalPath: string;
+    existingAncestor: string;
+    existingAncestorIsLink: boolean;
+    identityWitnesses: FilesystemIdentityWitness[];
+}
+export interface FilesystemIdentityWitness {
+    lexicalPath: string;
+    canonicalPath: string;
+}
+/** Capture the entry plus linked ancestors whose identity can prove retarget. */
+export declare function filesystemIdentityWitnesses(entryPath: string): FilesystemIdentityWitness[];
+/**
+ * Resolve a not-yet-existing path through its nearest existing physical
+ * ancestor, then append the normalized missing suffix. This does not prove the
+ * leaf exists and must not be used for equality or authorization decisions; it
+ * binds future lazy I/O to the mount/alias target observed at acquisition time.
+ */
+export declare function canonicalPathFromExistingAncestor(entryPath: string): CanonicalPathFromExistingAncestor | null;
+/**
+ * Capture the path a future lazy filesystem operation must use. Existing paths
+ * resolve exactly; missing paths inherit the physical identity of their nearest
+ * existing ancestor. A wholly unresolvable path returns null so authority or
+ * storage callers can fail closed rather than bind to a mutable lexical alias.
+ */
+export declare function canonicalPathForFutureIo(entryPath: string): string | null;
+/** Compare two existing entries, failing closed if either cannot resolve. */
+export declare function sameExistingFilesystemPath(a: string, b: string): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.164.5",
+	"version": "7.164.7",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
@@ -127,6 +127,7 @@
 		"check:gate-portability": "bun run scripts/check-gate-portability.ts",
 		"check:bare-spawn": "bun run scripts/check-bare-executable-spawn.ts",
 		"check:error-channel-discard": "bun run scripts/check-error-channel-discard.ts",
+		"check:path-identity": "bun run scripts/check-path-identity.ts",
 		"check:registry-citations": "bun run scripts/check-registry-citations.ts",
 		"check:memory-recall": "bun run scripts/memory-recall-regression.ts"
 	},

package/dist/cli/curator-llm-factory-cv7ft0mb.js

@@ -1,66 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-3gb7bw7h.js";
-import"./index-25jze7sf.js";
-import"./index-ea7sehgy.js";
-import"./index-1q2dwv69.js";
-import"./index-maxz22c1.js";
-import"./index-4krjn1gn.js";
-import"./index-txdagbh7.js";
-import"./index-3146wmgv.js";
-import"./index-7rat6nyh.js";
-import"./index-s09b63xg.js";
-import"./index-aaqbhn9h.js";
-import"./index-70ha9e09.js";
-import"./index-1f4nandk.js";
-import"./index-0zbze3n6.js";
-import"./index-zaab1wz9.js";
-import"./index-y42pra05.js";
-import"./index-zsrtt42s.js";
-import"./index-fwebva1m.js";
-import"./index-3f7hqtgg.js";
-import"./index-xj4kbtdw.js";
-import"./index-rc6hec4j.js";
-import"./index-hnjkpk57.js";
-import"./index-rtry5xyf.js";
-import"./index-wbnyc50b.js";
-import"./index-j9a4fsxg.js";
-import"./index-er8ba9be.js";
-import"./index-ddszzne4.js";
-import"./index-8h9nng7f.js";
-import"./index-xm7dc14y.js";
-import"./index-50s9q4c1.js";
-import"./index-556ja8an.js";
-import"./index-4fwbbad3.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-q0gtgwyr.js";
-import"./index-0trtcm9n.js";
-import"./index-4jmtdtm9.js";
-import"./index-zg9d392c.js";
-import"./index-n832052r.js";
-import"./index-rz87mx1c.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
-import"./index-553veay1.js";
-import"./index-yrsag0vs.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-164m995b.js";
-import"./index-m1nrd3yd.js";
-import"./index-zjygnfay.js";
-import"./index-ae75rja9.js";
-import"./index-25z5qwkk.js";
-import"./index-4emx8hhh.js";
-import"./index-bk5tah7q.js";
-import"./index-fxxja498.js";
-import"./index-tfa2p4y4.js";
-import"./index-1dz8hv7p.js";
-import"./index-7g4c7s5r.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-cvha7b9p.js

@@ -1,67 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-3rrc5x4v.js";
-import"./index-3gb7bw7h.js";
-import"./index-25jze7sf.js";
-import"./index-ea7sehgy.js";
-import"./index-1q2dwv69.js";
-import"./index-maxz22c1.js";
-import"./index-4krjn1gn.js";
-import"./index-txdagbh7.js";
-import"./index-3146wmgv.js";
-import"./index-7rat6nyh.js";
-import"./index-s09b63xg.js";
-import"./index-aaqbhn9h.js";
-import"./index-70ha9e09.js";
-import"./index-1f4nandk.js";
-import"./index-0zbze3n6.js";
-import"./index-zaab1wz9.js";
-import"./index-y42pra05.js";
-import"./index-zsrtt42s.js";
-import"./index-fwebva1m.js";
-import"./index-3f7hqtgg.js";
-import"./index-xj4kbtdw.js";
-import"./index-rc6hec4j.js";
-import"./index-hnjkpk57.js";
-import"./index-rtry5xyf.js";
-import"./index-wbnyc50b.js";
-import"./index-j9a4fsxg.js";
-import"./index-er8ba9be.js";
-import"./index-ddszzne4.js";
-import"./index-8h9nng7f.js";
-import"./index-xm7dc14y.js";
-import"./index-50s9q4c1.js";
-import"./index-556ja8an.js";
-import"./index-4fwbbad3.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-q0gtgwyr.js";
-import"./index-0trtcm9n.js";
-import"./index-4jmtdtm9.js";
-import"./index-zg9d392c.js";
-import"./index-n832052r.js";
-import"./index-rz87mx1c.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
-import"./index-553veay1.js";
-import"./index-yrsag0vs.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-164m995b.js";
-import"./index-m1nrd3yd.js";
-import"./index-zjygnfay.js";
-import"./index-ae75rja9.js";
-import"./index-25z5qwkk.js";
-import"./index-4emx8hhh.js";
-import"./index-bk5tah7q.js";
-import"./index-fxxja498.js";
-import"./index-tfa2p4y4.js";
-import"./index-1dz8hv7p.js";
-import"./index-7g4c7s5r.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};

package/dist/cli/hive-promoter-yzv5g7jy.js

@@ -1,81 +0,0 @@
-// @bun
-import {
-  _internals2 as _internals,
-  checkHivePromotions,
-  countDistinctProjects,
-  createHivePromoterHook,
-  isHiveEligible,
-  promoteFromSwarm,
-  promoteToHive
-} from "./index-3gb7bw7h.js";
-import"./index-25jze7sf.js";
-import"./index-ea7sehgy.js";
-import"./index-1q2dwv69.js";
-import"./index-maxz22c1.js";
-import"./index-4krjn1gn.js";
-import"./index-txdagbh7.js";
-import"./index-3146wmgv.js";
-import"./index-7rat6nyh.js";
-import"./index-s09b63xg.js";
-import"./index-aaqbhn9h.js";
-import"./index-70ha9e09.js";
-import"./index-1f4nandk.js";
-import"./index-0zbze3n6.js";
-import"./index-zaab1wz9.js";
-import"./index-y42pra05.js";
-import"./index-zsrtt42s.js";
-import"./index-fwebva1m.js";
-import"./index-3f7hqtgg.js";
-import"./index-xj4kbtdw.js";
-import"./index-rc6hec4j.js";
-import"./index-hnjkpk57.js";
-import"./index-rtry5xyf.js";
-import"./index-wbnyc50b.js";
-import"./index-j9a4fsxg.js";
-import"./index-er8ba9be.js";
-import"./index-ddszzne4.js";
-import"./index-8h9nng7f.js";
-import"./index-xm7dc14y.js";
-import"./index-50s9q4c1.js";
-import"./index-556ja8an.js";
-import"./index-4fwbbad3.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import {
-  resolveHiveKnowledgePath
-} from "./index-q0gtgwyr.js";
-import"./index-0trtcm9n.js";
-import"./index-4jmtdtm9.js";
-import"./index-zg9d392c.js";
-import"./index-n832052r.js";
-import"./index-rz87mx1c.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
-import"./index-553veay1.js";
-import"./index-yrsag0vs.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-164m995b.js";
-import"./index-m1nrd3yd.js";
-import"./index-zjygnfay.js";
-import"./index-ae75rja9.js";
-import"./index-25z5qwkk.js";
-import"./index-4emx8hhh.js";
-import"./index-bk5tah7q.js";
-import"./index-fxxja498.js";
-import"./index-tfa2p4y4.js";
-import"./index-1dz8hv7p.js";
-import"./index-7g4c7s5r.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  resolveHiveKnowledgePath,
-  promoteToHive,
-  promoteFromSwarm,
-  isHiveEligible,
-  createHivePromoterHook,
-  countDistinctProjects,
-  checkHivePromotions,
-  _internals
-};

package/dist/cli/index-ddszzne4.js

@@ -1,42 +0,0 @@
-// @bun
-// src/utils/canonical-root.ts
-import * as fsSync from "fs";
-import * as path from "path";
-var SESSION_KEY_SEPARATOR = String.fromCharCode(0);
-var canonicalRootMemo = new Map;
-var MAX_CANONICAL_ROOT_CACHE = 128;
-function resolveCanonicalRootKey(directory) {
-  let resolved = path.resolve(directory);
-  try {
-    resolved = fsSync.realpathSync(resolved);
-  } catch {}
-  const key = process.platform === "win32" ? resolved.toLowerCase() : resolved;
-  return key;
-}
-function canonicalRootKey(directory) {
-  const memoized = canonicalRootMemo.get(directory);
-  if (memoized !== undefined)
-    return memoized;
-  const key = resolveCanonicalRootKey(directory);
-  if (!canonicalRootMemo.has(directory)) {
-    while (canonicalRootMemo.size >= MAX_CANONICAL_ROOT_CACHE) {
-      const oldest = canonicalRootMemo.keys().next().value;
-      if (oldest === undefined)
-        break;
-      canonicalRootMemo.delete(oldest);
-    }
-  }
-  canonicalRootMemo.set(directory, key);
-  return key;
-}
-function canonicalRootKeyFresh(directory) {
-  return resolveCanonicalRootKey(directory);
-}
-function compositeSessionKey(directory, sessionId) {
-  return `${canonicalRootKey(directory)}${SESSION_KEY_SEPARATOR}${sessionId}`;
-}
-function sessionKeySuffix(sessionId) {
-  return `${SESSION_KEY_SEPARATOR}${sessionId}`;
-}
-
-export { canonicalRootKeyFresh, compositeSessionKey, sessionKeySuffix };