opencode-swarm 7.166.0 → 7.166.2

package/dist/cli/{worktree-isolation-y7ec1pm5.js → worktree-isolation-sa1tbqff.js}

@@ -21,68 +21,68 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-an89qzd9.js";
-import"./index-8d90gzaz.js";
-import"./index-hvk3zs62.js";
-import"./index-9hy5q7gp.js";
-import"./index-p04pa9c9.js";
-import"./index-qkq56zyr.js";
-import"./index-17yszqs5.js";
+} from "./index-gy55mc55.js";
+import"./index-d5qf7hvh.js";
+import"./index-j81kpway.js";
+import"./index-3wtfrjcx.js";
+import"./index-2n1v8ft1.js";
+import"./index-wz258yje.js";
+import"./index-ft1tnx0e.js";
 import"./index-txdagbh7.js";
 import"./index-cw912re7.js";
-import"./index-hrkamw9q.js";
-import"./index-359djbj1.js";
-import"./index-bw7r2b2m.js";
+import"./index-jgtje76m.js";
+import"./index-ty0wg9yp.js";
+import"./index-x4azb6qj.js";
 import"./index-70ha9e09.js";
-import"./index-8hqkrd2j.js";
+import"./index-bysyj3z4.js";
 import"./index-9ss2m4rs.js";
-import"./index-czr3jcg6.js";
+import"./index-jr6tppv9.js";
 import"./index-zsrtt42s.js";
-import"./index-2dvk153d.js";
-import"./index-6chhqq2n.js";
-import"./index-8bdk7124.js";
+import"./index-hbjax6hy.js";
+import"./index-p0r5fn7y.js";
+import"./index-x8cvbkjs.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-8n62bphd.js";
-import"./index-2rm5x9ps.js";
-import"./index-52jfm5s0.js";
-import"./index-jc9cxh90.js";
-import"./index-anxs69ad.js";
-import"./index-z6xqpmqg.js";
+import"./index-c0eyq4rp.js";
+import"./index-qmp4gxac.js";
+import"./index-sxsyd7kf.js";
+import"./index-3nww2vnx.js";
+import"./index-4kwxpnf8.js";
 import"./index-p612v1mv.js";
-import"./index-a5w71m8f.js";
-import"./index-c20gf089.js";
+import"./index-8nv3bc9h.js";
+import"./index-c23w8t46.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-apxaa755.js";
+} from "./index-kd68b6mg.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-8m12y79g.js";
-import"./index-30f4fe30.js";
-import"./index-2v17wb75.js";
-import"./index-79sr3fd1.js";
-import"./index-jx9f4ke1.js";
-import"./index-aftapk6j.js";
+import"./index-7mxrqy4r.js";
+import"./index-9ccxcjdm.js";
+import"./index-hgphhnrp.js";
+import"./index-nthqfxzz.js";
+import"./index-7pp8fz4j.js";
+import"./index-y3dtdn2f.js";
 import"./index-ry16d01s.js";
 import"./index-n4fzmqz8.js";
-import"./index-axf65x87.js";
-import"./index-fywshabz.js";
+import"./index-fkk7x6sy.js";
+import"./index-22sannyk.js";
 import"./index-ae75rja9.js";
-import"./index-a7rw4g4s.js";
+import"./index-14z9en94.js";
+import"./index-sxe3t040.js";
+import"./index-19hjpqsy.js";
+import"./index-bks56jbg.js";
 import"./index-7qefgq4j.js";
-import"./index-edm41q4j.js";
-import"./index-gy0nyfbw.js";
-import"./index-hwj25q9r.js";
+import"./index-ee6ydtfe.js";
 import"./index-7g4c7s5r.js";
-import"./index-mg43w8p2.js";
+import"./index-0a0jsbhg.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-nb924ar6.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
+import"./index-e0bjbadr.js";
+import"./index-0tc0pcmh.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
+import"./index-zpsr8rpc.js";
 import"./index-q1r1cfww.js";
 import"./index-yzjaj53h.js";
 import"./index-zgwm4ryv.js";

package/dist/evidence/phase-participation.d.ts

@@ -40,5 +40,5 @@ export declare function completeBackgroundPhaseParticipation(input: {
     record: BackgroundDelegationRecord;
     resultText: string;
 }): Promise<boolean>;
-export declare function readPhaseParticipation(directory: string, plan: Plan, phase: number, role: string): ParticipationReadResult;
+export declare function readPhaseParticipation(directory: string, plan: Plan, phase: number, role: string): Promise<ParticipationReadResult>;
 export declare function resetPhaseParticipationForTests(): void;

package/dist/git/pr.d.ts

@@ -1,5 +1,6 @@
 import * as child_process from 'node:child_process';
-import { resolveGhBinary } from '../tools/gh-evidence.js';
+import { resolveGhExecutable } from '../utils/gh-executable.js';
+import { resolveGitExecutable } from '../utils/git-executable.js';
 import { readLaneEnvFileFromDiskSync } from './branch.js';
 export declare const GIT_TIMEOUT_MS = 30000;
 /**
@@ -71,7 +72,8 @@ export declare const _internals: {
     spawnSync: typeof __spawnSyncSeam.spawnSync;
     readLaneEnvFileFromDiskSync: typeof readLaneEnvFileFromDiskSync;
     getMergeGroupRun: typeof getMergeGroupRun;
-    resolveGhBinary: typeof resolveGhBinary;
+    resolveGhExecutable: typeof resolveGhExecutable;
+    resolveGitExecutable: typeof resolveGitExecutable;
 };
 /**
  * Check if gh CLI is available

package/dist/git/safe-ref.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Fail-closed guard for git ref arguments (issue #2476 AC3, source issue
+ * #2265).
+ *
+ * Defect class: a repository- or caller-derived ref interpolated into a git
+ * argv position can BEGIN WITH A DASH and be parsed by git as an OPTION. A
+ * hostile remote can advertise `refs/heads/--evil` (`git update-ref` bypasses
+ * `check-ref-format`; a plain `git clone` propagates it), so `git checkout
+ * --evil` exits 129 with "unknown option" and a branch literally named
+ * `--force` makes `git checkout --force` SILENTLY DESTRUCTIVE.
+ *
+ * Guard placement is per-command, settled empirically against git 2.x (see
+ * `.agents/issue-traces/2476-harden-trust-boundaries/02-reproduction.md` R3):
+ *
+ * - `branch -d -- <name>` and `push <remote> -- <refspec>` accept a literal
+ *   `--` end-of-options separator with IDENTICAL semantics for benign names
+ *   and fail-closed behavior for hostile ones — those sinks insert `--`.
+ * - `checkout`, `checkout -b <new> <start>`, `rev-parse --verify`,
+ *   `rev-parse --abbrev-ref <b>@{upstream}`, `reset --hard`, `log <range>`,
+ *   `diff <base> HEAD`, and `branch --merged <target>` REGRESS benign
+ *   behavior when a leading `--` is inserted (pathspec/malformed-object
+ *   errors) — those sinks use this validation guard instead.
+ *
+ * The predicate is deliberately minimal — NOT the full check-ref-format
+ * grammar — so `origin/main`, `HEAD`, `feature/x`, SHAs, and each side of an
+ * `a..b` range all pass while any dash-leading side is rejected. This mirrors
+ * the in-repo validator family (`isSafeGitRef` in ci-simulate.ts,
+ * `isSafeGitRevisionToken` in workspace-snapshot.ts, `isSafeGitRefToken` in
+ * pr-workflow-gate.ts), which this module centralizes for the src/git sinks.
+ */
+/** Typed, fail-closed rejection of an option-injectable git ref. */
+export declare class UnsafeGitRefError extends Error {
+    readonly ref: string;
+    readonly context: string;
+    constructor(ref: string, context: string);
+}
+/**
+ * True when `value` is safe to interpolate into a git argv ref position:
+ * non-empty, and no `..`-separated side starts with "-". Empty/odd `..`
+ * sides are deliberately NOT rejected here (a name like `../../x` is not an
+ * option-injection risk; git itself rejects it as an invalid ref, and the
+ * pre-existing adversarial contract in tests/unit/git/branch.adversarial
+ * pins pass-through for those shapes) — only dash-leading sides are.
+ */
+export declare function isSafeGitRefArg(value: string): boolean;
+/**
+ * Fail-closed form of {@link isSafeGitRefArg}: returns `value` unchanged when
+ * safe, throws {@link UnsafeGitRefError} otherwise. `context` names the
+ * caller/sink so the error is actionable (e.g. "createBranch checkout").
+ */
+export declare function assertSafeGitRefArg(value: string, context: string): string;

package/dist/hooks/guardrails/execution-stall.d.ts

@@ -92,7 +92,7 @@
  * escalates to the STOP directive.
  */
 import type { BackgroundWorkspaceSnapshot } from '../../background/pending-delegations.js';
-import { captureWorkspaceSnapshot, changedFilesSinceSnapshot } from '../../background/workspace-snapshot.js';
+import { captureWorkspaceSnapshotAsync, changedFilesSinceSnapshotAsync } from '../../background/workspace-snapshot.js';
 /** Default advisory rung (mirrors `guardrails.execution_stall_warn_calls`). */
 export declare const DEFAULT_EXECUTION_STALL_WARN_CALLS = 30;
 /** Default hard rung (mirrors `guardrails.execution_stall_stop_calls`). */
@@ -251,6 +251,9 @@ export declare function enforceExecutionStallDenial(params: {
  * `tool.execute.after`. Records progress events, arms on a successful
  * `update_task_status(in_progress)`, and runs the periodic workspace probe.
  * NEVER throws.
+ *
+ * Async (issue #2472 W7): the workspace captures route through the async
+ * snapshot twin, so callers (guardrails' `toolAfter`) must await it.
  */
 export declare function recordExecutionStallToolAfter(params: {
     sessionID: string;
@@ -260,18 +263,20 @@ export declare function recordExecutionStallToolAfter(params: {
     output: unknown;
     directory: string;
     options?: ExecutionStallOptions;
-}): void;
+}): Promise<void>;
 /**
  * Test/DI seam (AGENTS.md invariant 7). `now` is the fake-clock seam the
  * idleness-lapse tests drive; the two workspace functions are indirected so a
  * test never spawns git, and `readPlanOpenTaskState` so a test can drive the
  * disarm edge without a plan fixture (the disarm tests exercise the REAL reader
- * against a real `.swarm/plan.json` as well).
+ * against a real `.swarm/plan.json` as well). The capture seam carries the
+ * ASYNC twin (issue #2472 W7) — hook paths must never reach the sync
+ * spawn-based capture.
  */
 export declare const _internals: {
     now: () => number;
-    captureWorkspaceSnapshot: typeof captureWorkspaceSnapshot;
-    changedFilesSinceSnapshot: typeof changedFilesSinceSnapshot;
+    captureWorkspaceSnapshotAsync: typeof captureWorkspaceSnapshotAsync;
+    changedFilesSinceSnapshotAsync: typeof changedFilesSinceSnapshotAsync;
     ensureArchitectSession: typeof ensureArchitectSession;
     readPlanOpenTaskState: typeof readPlanOpenTaskState;
 };

package/dist/hooks/hive-promoter.d.ts

@@ -21,7 +21,7 @@
  * This module is NOT imported on the plugin-init path (invariant 1): promotion
  * runs only on the lazy `/swarm promote`, close, curate, and postmortem paths.
  */
-import { resolveCohortId } from '../knowledge/cohort-identity.js';
+import type { CohortIdentity } from '../knowledge/cohort-identity.js';
 import { authorizeCuration } from '../knowledge/curation-policy.js';
 import { appendCuratorRecommendation, readCuratorSummary } from './curator.js';
 import { transactHiveStore } from './hive-transaction.js';
@@ -65,19 +65,21 @@ export declare function countDistinctProjects(confirmedBy: ProjectConfirmationRe
  * new canonical-cohort confirmations. Returns a summary for curator state.
  *
  * `directory` is required (#1847) to resolve the canonical cohort identity
- * (#1846) for cross-project distinctness.
+ * (#1846) for cross-project distinctness. `sessionID` (#2472 W2) is optional:
+ * when present, cohort resolution reuses the session's cached cohort id (see
+ * the `_internals.resolveCohortId` default).
  *
  * @note The 'hive-fast-track' tag is privileged — it bypasses the 3-phase
  *   confirmation requirement inside the eligibility_route gate. It should only
  *   be set by authorized tooling (inferTags() never produces it automatically).
  */
-export declare function checkHivePromotions(swarmEntries: SwarmKnowledgeEntry[], config: KnowledgeConfig, directory: string): Promise<HivePromotionSummary>;
+export declare function checkHivePromotions(swarmEntries: SwarmKnowledgeEntry[], config: KnowledgeConfig, directory: string, sessionID?: string): Promise<HivePromotionSummary>;
 export declare const _internals: {
     readSwarmEntries: (directory: string) => Promise<SwarmKnowledgeEntry[]>;
     checkHivePromotions: typeof checkHivePromotions;
     readCuratorSummary: typeof readCuratorSummary;
     appendCuratorRecommendation: typeof appendCuratorRecommendation;
-    resolveCohortId: typeof resolveCohortId;
+    resolveCohortId: (directory: string, sessionID?: string) => Promise<CohortIdentity>;
     transactHiveStore: typeof transactHiveStore;
     validateLesson: typeof validateLesson;
     authorizeCuration: typeof authorizeCuration;
@@ -146,10 +148,31 @@ export declare const _internals: {
             synonym_map_max_pairs: number;
         } | undefined;
     };
+    /** #2472 W2 cadence clock (PRR-021 DI seam, invariant 7): the promotion
+     *  cadence floor reads time through this seam so tests can advance the
+     *  60s floor deterministically without real sleeping or raw wall-clock
+     *  polling. Everything else (entry timestamps, audit timestamps) stays on
+     *  `new Date().toISOString()` — only the cadence decision is time-driven
+     *  control flow. */
+    now: () => number;
+    /** Test-only: clears the #2472 W2 hook-gating state (per-directory cadence
+     *  map + curator-migration guard). Production code never calls this; it
+     *  exists so test files sharing one Bun process start from a clean slate. */
+    resetPromoterGatingState: () => void;
 };
 /**
  * Create a hook that promotes swarm entries to the hive.
- * The hook fires unconditionally - the caller decides when to invoke it.
+ *
+ * #2472 W2 gating — the hook self-gates instead of running unconditionally:
+ *  1. Write-class tools only (`PROMOTER_WRITE_TOOL_NAMES`): a read-only tool
+ *     call returns before even the swarm-store read.
+ *  2. Empty-candidates gate: when no swarm entry has ACTIVE status the hook
+ *     returns BEFORE cohort resolution, evidence loading, the hive
+ *     transaction, and the curator-summary read. The one-time legacy
+ *     curator-summary migration read stays reachable — at most once per
+ *     directory per process (critic Round 2 item 1).
+ *  3. Cadence floor: a second qualifying invocation inside
+ *     `PROMOTION_CADENCE_FLOOR_MS` returns before the promotion body.
  */
 export declare function createHivePromoterHook(directory: string, config: KnowledgeConfig): (input: unknown, output: unknown) => Promise<void>;
 /** Options for manual promotion (override semantics, #1847 §4). */

package/dist/hooks/repo-graph-builder.d.ts

@@ -14,6 +14,14 @@
  * the async builder, yields to the event loop before doing any work, and
  * exposes the init promise so `toolAfter` can serialize incremental
  * updates after the initial scan completes.
+ *
+ * Issue #2472 (REPOGRAPH-1): `toolAfter` runs its entire cheap synchronous
+ * filter chain (enabled flag, write-tool membership, path extraction and
+ * validation, exclude-dir scoping) BEFORE awaiting the init promise, so a
+ * non-write tool call settles immediately even while the startup scan is
+ * pending — only write tools that will actually mutate the graph wait for
+ * the scan. The startup scan itself is bounded by an overall wall-clock
+ * budget (STARTUP_SCAN_BUDGET_MS) that resolves fail-open on timeout.
  */
 import { type BuildWorkspaceGraphOptions, type RepoGraph } from '../tools/repo-graph';
 import { type FreshnessOptions, type FreshnessProbe } from '../tools/repo-graph/freshness';
@@ -51,6 +59,12 @@ export interface RepoGraphBuilderOptions {
     maxFiles?: number;
     walkBudgetMs?: number;
     excludeDirs?: readonly string[];
+    /**
+     * Overall wall-clock budget (ms) for the startup scan (issue #2472).
+     * Defaults to STARTUP_SCAN_BUDGET_MS. Additive DI/test knob so the
+     * fail-open timeout path can be exercised without waiting 30 s.
+     */
+    scanBudgetMs?: number;
 }
 /**
  * Rebase a realpath'd file onto the lexical workspace root so the incremental

package/dist/hooks/system-enhancer.d.ts

@@ -40,6 +40,27 @@ declare function maybeAppendSpecDriftAdvisory(output: {
  * Returns null if no valid retrospective found.
  */
 export declare function buildRetroInjection(directory: string, currentPhaseNumber: number, currentPlanTitle?: string): Promise<string | null>;
+/**
+ * #2472 W4 (PR #2588 bot finding 7): dispose fence for a project root's
+ * deferred maintenance scans. Called best-effort from the plugin's
+ * `dispose` so a scheduled-but-not-yet-fired (or in-flight) doc-index /
+ * dark-matter background task cannot fire into — or keep writing `.swarm`
+ * artifacts for — a project whose plugin instance is being torn down.
+ *
+ *  (i)  Future scheduling for `directory` is suppressed: the resolved root
+ *       is added to `cancelledDeferredScanDirs`, and
+ *       `scheduleDeferredMaintenanceScans` is a no-op for cancelled roots.
+ *  (ii) Any already-scheduled or in-flight task for `directory` aborts:
+ *       the root's deferred-scan generation is bumped, and every task
+ *       captured the pre-bump value and re-checks it before its first
+ *       statement and before each major scan step, so even a long-running
+ *       dark-matter git scan stops before its next write.
+ *
+ * A NEW system-enhancer instance created for the same directory (plugin
+ * re-init — the restart-safe lifecycle of issue #2472) removes the
+ * cancellation marker, so fresh instances schedule scans normally again.
+ */
+export declare function cancelDeferredMaintenanceScans(directory: string): void;
 /**
  * Creates the experimental.chat.system.transform hook for system enhancement.
  */