opencode-swarm 7.168.0 → 7.169.0

package/dist/cli/{snapshot-coordination-init-8yt8p7q0.js → snapshot-coordination-init-rspykgd0.js}

@@ -8,63 +8,64 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-yevn4jpe.js";
-import"./index-d5qf7hvh.js";
-import"./index-qhey6vc3.js";
-import"./index-30h1pk05.js";
-import"./index-nwwk3dej.js";
-import"./index-cyenn3pf.js";
-import"./index-21ree67h.js";
-import"./index-gp9yzr1v.js";
+} from "./index-3zcds757.js";
+import"./index-5400m33a.js";
+import"./index-7h01bkm6.js";
+import"./index-5reh1bjz.js";
+import"./index-cgpwjctj.js";
+import"./index-egkc2bpv.js";
+import"./index-zapc8vj4.js";
+import"./index-xnpjwc4h.js";
 import"./index-txdagbh7.js";
 import"./index-9br68j86.js";
 import"./index-cw912re7.js";
-import"./index-64phnth4.js";
-import"./index-mr0wn36f.js";
-import"./index-wnzxcr0z.js";
+import"./index-c7kr7tnk.js";
+import"./index-55fkkjec.js";
+import"./index-nwv3e3kc.js";
 import"./index-fyfbpz4f.js";
-import"./index-dfyv3xkd.js";
+import"./index-gfbggp8k.js";
+import"./index-0hgmsyfp.js";
 import"./index-zsrtt42s.js";
-import"./index-ze520xw1.js";
-import"./index-5zqakgp4.js";
-import"./index-bvqqwx84.js";
+import"./index-sb1s03y9.js";
+import"./index-fhh02gwx.js";
+import"./index-nyn01yrz.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-00zx94vn.js";
-import"./index-8f0kscpg.js";
-import"./index-nprngf8p.js";
-import"./index-nsyxj57e.js";
-import"./index-kear8gb7.js";
-import"./index-p612v1mv.js";
-import"./index-3dywbkyr.js";
-import"./index-m35hybf0.js";
+import"./index-sxcfszbe.js";
+import"./index-wwr67xc0.js";
+import"./index-ksybszed.js";
+import"./index-0vgs5r39.js";
+import"./index-b3pmzbh1.js";
+import"./index-2s7dvzff.js";
+import"./index-2znfa537.js";
+import"./index-bm5xrfnx.js";
 import"./index-rtry5xyf.js";
-import"./index-x7k3dps5.js";
+import"./index-s96dpjsk.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-an8b5gda.js";
-import"./index-yv76j77m.js";
-import"./index-a8xbvsse.js";
-import"./index-pyf517sz.js";
-import"./index-h439y187.js";
-import"./index-wst6n478.js";
+import"./index-p6xsgk4r.js";
+import"./index-83m0y4cj.js";
+import"./index-fgp96k3r.js";
+import"./index-br3mvbsa.js";
+import"./index-bernkwgf.js";
+import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-qwsh0h2g.js";
-import"./index-j950hqmq.js";
+import"./index-5qt9yf5w.js";
+import"./index-76ng6vmq.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-8ybjqg51.js";
-import"./index-4r5pmtvk.js";
+import"./index-9ttqbhvw.js";
+import"./index-bx1wgn3a.js";
 import"./index-7g4c7s5r.js";
-import"./index-v3xc4sde.js";
-import"./index-z6qreakh.js";
+import"./index-nprdr0sm.js";
+import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-seetnhpx.js";
+import"./index-3bfzpzsb.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-exatbqwj.js";
+import"./index-yj24ny5k.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{telemetry-2wzapf11.js → telemetry-fdtaemnv.js}

@@ -14,7 +14,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-z6qreakh.js";
+} from "./index-nprdr0sm.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{workspace-snapshot-rkgxhj9b.js → workspace-snapshot-hkz2wt1c.js}

@@ -45,10 +45,10 @@ import {
   shouldSkipSnapshot,
   switchPrFeedbackTrackingCandidateAsync,
   workspaceSnapshotMatches
-} from "./index-5zqakgp4.js";
-import"./index-kear8gb7.js";
-import"./index-p612v1mv.js";
-import"./index-v3xc4sde.js";
+} from "./index-fhh02gwx.js";
+import"./index-b3pmzbh1.js";
+import"./index-2s7dvzff.js";
+import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
 import"./index-0mhftbpp.js";

package/dist/cli/{worktree-collision-ownership-xttafc4h.js → worktree-collision-ownership-x84dzzzc.js}

@@ -1,4 +1,7 @@
 // @bun
+import {
+  scanBackgroundWorktreeOwnershipTagsForRecovery
+} from "./index-0hgmsyfp.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-zsrtt42s.js";
@@ -6,37 +9,32 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-bvqqwx84.js";
+} from "./index-nyn01yrz.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-nprngf8p.js";
-import"./index-kear8gb7.js";
-import {
-  bunSpawn
-} from "./index-p612v1mv.js";
-import"./index-pyf517sz.js";
-import"./index-h439y187.js";
-import"./index-wst6n478.js";
+} from "./index-ksybszed.js";
+import"./index-b3pmzbh1.js";
+import"./index-2s7dvzff.js";
+import"./index-br3mvbsa.js";
+import"./index-bernkwgf.js";
+import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-qwsh0h2g.js";
-import"./index-j950hqmq.js";
+import"./index-5qt9yf5w.js";
+import"./index-76ng6vmq.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-8ybjqg51.js";
-import"./index-4r5pmtvk.js";
+import"./index-9ttqbhvw.js";
+import"./index-bx1wgn3a.js";
 import"./index-7g4c7s5r.js";
-import"./index-v3xc4sde.js";
-import"./index-z6qreakh.js";
+import"./index-nprdr0sm.js";
+import"./index-nbdmdyke.js";
 import {
   canonicalRootKeyFresh
 } from "./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import {
-  init_git_executable,
-  resolveGitExecutable
-} from "./index-0mhftbpp.js";
+import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
@@ -45,93 +43,9 @@ import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 
 // src/hooks/delegation-gate/worktree-collision-ownership.ts
-import * as fs2 from "fs";
-
-// src/hooks/delegation-gate/worktree-ownership-tag.ts
 import * as fs from "fs";
-import * as path from "path";
-init_git_executable();
-var OWNERSHIP_TAG_SCAN_TIMEOUT_MS = 2000;
-var MAX_OWNERSHIP_TAGS = 512;
-function decodeTagPart(value) {
-  if (!value || !/^[A-Za-z0-9_-]+$/.test(value))
-    return null;
-  const decoded = Buffer.from(value, "base64url").toString("utf8");
-  return decoded && Buffer.from(decoded, "utf8").toString("base64url") === value ? decoded : null;
-}
-async function scanBackgroundWorktreeOwnershipTagsForRecovery(directory) {
-  try {
-    fs.statSync(path.join(directory, ".git"));
-  } catch (error) {
-    if (error.code === "ENOENT") {
-      return { status: "ok", owners: [] };
-    }
-    return {
-      status: "uncertain",
-      reason: `Git metadata could not be inspected: ${error instanceof Error ? error.message : String(error)}`
-    };
-  }
-  let proc;
-  try {
-    proc = bunSpawn([
-      resolveGitExecutable(),
-      "-C",
-      directory,
-      "for-each-ref",
-      `--count=${MAX_OWNERSHIP_TAGS + 1}`,
-      "--format=%(refname:strip=2)%00%(objectname)",
-      "refs/tags/swarm-preserved-owner/"
-    ], {
-      stdin: "ignore",
-      stdout: "pipe",
-      stderr: "ignore",
-      timeout: OWNERSHIP_TAG_SCAN_TIMEOUT_MS
-    });
-    const exitCode = await proc.exited;
-    if (exitCode !== 0) {
-      return {
-        status: "uncertain",
-        reason: `ownership tag scan exited ${exitCode}`
-      };
-    }
-    const lines = (await proc.stdout.text()).split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
-    if (lines.length > MAX_OWNERSHIP_TAGS) {
-      return {
-        status: "uncertain",
-        reason: `ownership tag scan exceeded the ${MAX_OWNERSHIP_TAGS}-tag safety bound`
-      };
-    }
-    const owners = [];
-    for (const line of lines) {
-      const [tag, ref, ...extra] = line.split("\x00");
-      const segments = tag?.split("/") ?? [];
-      const sessionId = decodeTagPart(segments[1] ?? "");
-      const laneId = decodeTagPart(segments[2] ?? "");
-      const callDigest = segments[3];
-      if (extra.length > 0 || segments.length !== 4 || segments[0] !== "swarm-preserved-owner" || !sessionId || !laneId || !callDigest || !/^[0-9a-f]{12}$/.test(callDigest) || !ref || !/^[0-9a-f]{40,64}$/i.test(ref)) {
-        return {
-          status: "uncertain",
-          reason: `malformed background ownership tag entry "${tag ?? ""}"`
-        };
-      }
-      owners.push({ sessionId, laneId, callDigest, ref });
-    }
-    return { status: "ok", owners };
-  } catch (error) {
-    return {
-      status: "uncertain",
-      reason: `ownership tag scan failed: ${error instanceof Error ? error.message : String(error)}`
-    };
-  } finally {
-    try {
-      proc?.kill();
-    } catch {}
-  }
-}
-
-// src/hooks/delegation-gate/worktree-collision-ownership.ts
 var _internals = {
-  statSync: fs2.statSync,
+  statSync: fs.statSync,
   removeWorktreeProvisioningOwner
 };
 function descriptorCoordinateMatch(descriptor, identity) {

package/dist/cli/{worktree-isolation-e5q5rewk.js → worktree-isolation-nw9pakkx.js}

@@ -21,65 +21,66 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-yevn4jpe.js";
-import"./index-d5qf7hvh.js";
-import"./index-qhey6vc3.js";
-import"./index-30h1pk05.js";
-import"./index-nwwk3dej.js";
-import"./index-cyenn3pf.js";
-import"./index-21ree67h.js";
-import"./index-gp9yzr1v.js";
+} from "./index-3zcds757.js";
+import"./index-5400m33a.js";
+import"./index-7h01bkm6.js";
+import"./index-5reh1bjz.js";
+import"./index-cgpwjctj.js";
+import"./index-egkc2bpv.js";
+import"./index-zapc8vj4.js";
+import"./index-xnpjwc4h.js";
 import"./index-txdagbh7.js";
 import"./index-9br68j86.js";
 import"./index-cw912re7.js";
-import"./index-64phnth4.js";
-import"./index-mr0wn36f.js";
-import"./index-wnzxcr0z.js";
+import"./index-c7kr7tnk.js";
+import"./index-55fkkjec.js";
+import"./index-nwv3e3kc.js";
 import"./index-fyfbpz4f.js";
-import"./index-dfyv3xkd.js";
+import"./index-gfbggp8k.js";
+import"./index-0hgmsyfp.js";
 import"./index-zsrtt42s.js";
-import"./index-ze520xw1.js";
-import"./index-5zqakgp4.js";
-import"./index-bvqqwx84.js";
+import"./index-sb1s03y9.js";
+import"./index-fhh02gwx.js";
+import"./index-nyn01yrz.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-00zx94vn.js";
-import"./index-8f0kscpg.js";
-import"./index-nprngf8p.js";
-import"./index-nsyxj57e.js";
-import"./index-kear8gb7.js";
-import"./index-p612v1mv.js";
-import"./index-3dywbkyr.js";
-import"./index-m35hybf0.js";
+import"./index-sxcfszbe.js";
+import"./index-wwr67xc0.js";
+import"./index-ksybszed.js";
+import"./index-0vgs5r39.js";
+import"./index-b3pmzbh1.js";
+import"./index-2s7dvzff.js";
+import"./index-2znfa537.js";
+import"./index-bm5xrfnx.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-x7k3dps5.js";
+} from "./index-s96dpjsk.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-an8b5gda.js";
-import"./index-yv76j77m.js";
-import"./index-a8xbvsse.js";
-import"./index-pyf517sz.js";
-import"./index-h439y187.js";
-import"./index-wst6n478.js";
+import"./index-p6xsgk4r.js";
+import"./index-83m0y4cj.js";
+import"./index-fgp96k3r.js";
+import"./index-br3mvbsa.js";
+import"./index-bernkwgf.js";
+import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-qwsh0h2g.js";
-import"./index-j950hqmq.js";
+import"./index-5qt9yf5w.js";
+import"./index-76ng6vmq.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-8ybjqg51.js";
-import"./index-4r5pmtvk.js";
+import"./index-9ttqbhvw.js";
+import"./index-bx1wgn3a.js";
 import"./index-7g4c7s5r.js";
-import"./index-v3xc4sde.js";
-import"./index-z6qreakh.js";
+import"./index-nprdr0sm.js";
+import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-seetnhpx.js";
+import"./index-3bfzpzsb.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-exatbqwj.js";
+import"./index-yj24ny5k.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/commands/destructive-purge.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Issue #2527 / #2508: the shared two-step destructive-purge confirmation
+ * primitive (preview + confirm_token → exact-token execution).
+ *
+ * Contract (frozen by check C8 and the destructive-purge-2527 unit suite):
+ *  - `previewDestructivePurge` is a side-effect-free preview (counts, exact
+ *    option label, the confirmation the operator must echo);
+ *  - `issueConfirmToken` records a single-slot pending purge keyed by a
+ *    digest over the candidate SET (sorted absolute paths + kind) and
+ *    returns the confirm token (15-minute TTL);
+ *  - `executeDestructivePurge` re-derives the CURRENT scope digest and
+ *    passes only on exact token match AND digest match AND fresh TTL — so
+ *    replay after the candidate set changes (a lane added, removed, or the
+ *    scope re-derived differently) is rejected by construction, and the
+ *    token is single-use (the pending record is consumed on execution; a
+ *    second execution is rejected with "no pending purge").
+ *  - TTL expiry: an expired pending record is treated as absent on read
+ *    (silent); every new issuance overwrites the single slot — the
+ *    overwritten token can never execute (it is rejected with "confirm
+ *    token mismatch"; a single-slot store cannot distinguish generations,
+ *    but rejection is guaranteed either way).
+ *  - Scope-of-execution: the executor deletes ONLY the recorded candidate
+ *    paths. The primitive confirms operator intent; CALLERS own scoping —
+ *    `/swarm reset-session` (and #2508's `/swarm close` when it adopts
+ *    this) must only construct candidate sets from ownership-gated,
+ *    base-scoped directories.
+ */
+import { randomBytes } from 'node:crypto';
+import * as fs from 'node:fs';
+import { atomicWriteSwarmFileSync } from '../utils/atomic-write';
+export interface PurgeCandidate {
+    path: string;
+    reason: string;
+}
+export interface PurgePlan {
+    previewLines: string[];
+    counts: {
+        total: number;
+    };
+    optionLabel: string;
+    confirmToken: string;
+    candidates: PurgeCandidate[];
+}
+export interface PurgeExecution {
+    ok: boolean;
+    reason?: string;
+    purged?: string[];
+}
+export declare const _internals: {
+    readFileSync: (p: string, enc: BufferEncoding) => string;
+    rmSync: typeof fs.rmSync;
+    existsSync: typeof fs.existsSync;
+    atomicWriteSwarmFileSync: typeof atomicWriteSwarmFileSync;
+    now: () => number;
+    randomBytes: typeof randomBytes;
+};
+/**
+ * Side-effect-free preview: what would be purged, the counts, the exact
+ * option label the operator must echo, and the confirm token to use.
+ * (The token returned here is informational; `issueConfirmToken` is what
+ * arms it — keeping preview strictly read-only lets callers preview freely.)
+ */
+export declare function previewDestructivePurge(scopeTarget: string, projectRoot: string, extra?: {
+    kind?: string;
+    candidates?: PurgeCandidate[];
+}): PurgePlan;
+/**
+ * Arm a pending purge for the scope and return the confirm token. The
+ * single-slot record is overwritten by every new issuance (the previous
+ * token stops working — "no pending purge for this scope").
+ */
+export declare function issueConfirmToken(scopeTarget: string, projectRoot: string, extra?: {
+    kind?: string;
+    candidates?: PurgeCandidate[];
+}): string;
+/**
+ * Execute the pending purge under the exact token. Re-derives the CURRENT
+ * scope digest: token match AND digest match AND fresh TTL required; the
+ * record is consumed on success (single use). Deletes ONLY the recorded
+ * candidate paths.
+ */
+export declare function executeDestructivePurge(scopeTarget: string, projectRoot: string, token: string, extra?: {
+    kind?: string;
+    candidates?: PurgeCandidate[];
+}): PurgeExecution;

package/dist/commands/registry.d.ts

@@ -960,7 +960,7 @@ export declare const COMMAND_REGISTRY: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Clear session state while preserving plan, evidence, and knowledge";
         readonly details: "Deletes only .swarm/session/state.json and other session files. Clears in-memory agent sessions, delegation chains, and active-agent mappings. Preserves plan, evidence, and knowledge. Also releases this session's pending knowledge-gate obligations (#2398) and recovers stale coder settlements so dispatches cannot wedge on CODER_DISPATCH_IN_PROGRESS (#2268). Auto-backs up removed files to .swarm/reset-backups/ (newest 5 kept).";
-        readonly args: "";
+        readonly args: "--confirm=<token> (purge dirty/live lanes)";
         readonly category: "utility";
         readonly toolPolicy: "restricted";
     };
@@ -1151,7 +1151,7 @@ export declare const COMMAND_REGISTRY: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Run golden Swarm memory recall evaluation fixtures";
         readonly subcommandOf: "memory";
-        readonly args: "--json, --fixtures <directory>";
+        readonly args: "--json, --fixtures <directory>, --profiles <list>, --manifest <file>";
         readonly category: "diagnostics";
         readonly toolPolicy: "agent";
     };

package/dist/commands/reset-session.d.ts

@@ -1,8 +1,10 @@
 import { commitGateReleaseBatch, queryLiveMemberships } from '../hooks/knowledge-receipt-ledger';
+import { listLiveLaneOwners } from '../parallel/lane-owners';
 import { beginSnapshotCoordinationReset } from '../session/snapshot-coordination-init.js';
 import { clearSnapshotRows } from '../session/snapshot-store.js';
 import { recoverStaleCoderSettlements } from '../workflow/coder-settlement.js';
 import { type OrphanCleanupResult } from '../worktree/merge';
+import { removeOwnedWorktreeDir } from '../worktree/ownership';
 import { type ResetBackupResult } from './reset-backup';
 /**
  * _internals DI seam for testing reset-session without spawning real git processes.
@@ -12,6 +14,8 @@ import { type ResetBackupResult } from './reset-backup';
  */
 export declare const _internals: {
     cleanupOrphanedBranches: (directory: string, activeSessionIds: string[]) => Promise<OrphanCleanupResult>;
+    removeOwnedWorktreeDir: typeof removeOwnedWorktreeDir;
+    listLiveLaneOwners: typeof listLiveLaneOwners;
     backupSwarmStateBeforeReset: (directory: string, kind: 'reset' | 'reset-session', relEntries: string[]) => ResetBackupResult;
     recoverStaleCoderSettlements: typeof recoverStaleCoderSettlements;
     queryLiveMemberships: typeof queryLiveMemberships;
@@ -28,4 +32,4 @@ export declare const _internals: {
  * session's pending knowledge-application gate obligations (issue #2398) so
  * the reset is a real escape from an enforce-mode lockout.
  */
-export declare function handleResetSessionCommand(directory: string, _args: string[], sessionID?: string): Promise<string>;
+export declare function handleResetSessionCommand(directory: string, args: string[], sessionID?: string): Promise<string>;

package/dist/config/constants.d.ts

@@ -141,7 +141,10 @@ export declare const AUTO_PROCEED_BANNER = "## \u23ED\uFE0F AUTO-PROCEED STATUS\
 export declare const DEFAULT_LEAN_TURBO_CONFIG: LeanTurboConfig;
 /**
  * Directory name of the DD-6 default swarm-managed worktree base, created as a
- * SIBLING of the project root (`<project-parent>/.swarm-worktrees`).
+ * child of the project root (`<project>/.swarm-worktrees`) — moved inside the
+ * project by issue #2527 (the pre-#2527 parent-level default was shared by
+ * every sibling checkout and enabled cross-project reclamation destruction);
+ * a start-time migration moves owned legacy-base lanes into the project.
  *
  * Single source of truth shared by `resolveWorktreeBaseDir` in
  * `src/worktree/core.ts` (which BUILDS lane paths) and

package/dist/config/lane-context.d.ts

@@ -55,6 +55,25 @@ export interface LaneContext {
      */
     parentProjectPath: string;
 }
+/**
+ * Issue #2527: repo-ownership answer for destructive reclamation.
+ *
+ * `owned === true` (and `uncertain === false`) is the ONLY answer that
+ * permits deleting a worktree directory from a reclamation path: the
+ * candidate's `.git` pointer must resolve, through git's own `commondir`
+ * metadata, back to a main working tree that IS the expected project root.
+ * Anything else — foreign repo (the common shared-base case: `git worktree
+ * remove` says "is not a working tree"), unreadable/malformed pointer, or a
+ * main-working-tree candidate we were not asked about — is NOT deletable.
+ * Comparison is case-insensitive on Windows, matching
+ * `isPathUnderSwarmWorktreeBase` in `src/worktree/core.ts`.
+ */
+export interface WorktreeRepoOwnership {
+    owned: boolean;
+    mainWorktree?: string;
+    uncertain: boolean;
+}
+export declare function resolveWorktreeRepoOwnership(worktreePath: string, expectedProjectRoot: string): WorktreeRepoOwnership;
 /**
  * Test-only dependency-injection seam (AGENTS.md invariant 7 — prefer
  * `_internals` over `mock.module`, which leaks across files in Bun's shared

package/dist/config/schema.d.ts

@@ -882,6 +882,62 @@ export declare const ConsensusConfigSchema: z.ZodObject<{
     report_retention: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
 export type ConsensusConfig = z.infer<typeof ConsensusConfigSchema>;
+/**
+ * Opt-in remote OTLP/OpenInference observability export (issue #2485).
+ *
+ * Disabled by default: local operation — plugin init, the SQLite sink, the
+ * legacy telemetry stream, /swarm report — is fully independent of the
+ * exporter and of any collector/network. When enabled, the exporter
+ * registers as a telemetry listener (the same O(1) shape as the SQLite
+ * observability sink), persists privacy-filtered records in a bounded
+ * spool under `.swarm/otlp-export/`, and ships them as OTLP/HTTP JSON to
+ * `endpoint` with bounded retry/backoff and a cooldown circuit. Endpoint
+ * policy: `https:` required for remote collectors; plain `http:` is
+ * accepted only for loopback test collectors.
+ */
+export declare const OtlpExportConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    endpoint: z.ZodDefault<z.ZodString>;
+    convention: z.ZodDefault<z.ZodEnum<{
+        genai: "genai";
+        openinference: "openinference";
+    }>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    batchSize: z.ZodDefault<z.ZodNumber>;
+    flushIntervalMs: z.ZodDefault<z.ZodNumber>;
+    requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    spoolMaxBytes: z.ZodDefault<z.ZodNumber>;
+    spoolMaxAgeMs: z.ZodDefault<z.ZodNumber>;
+    maxRetries: z.ZodDefault<z.ZodNumber>;
+    backoffBaseMs: z.ZodDefault<z.ZodNumber>;
+    backoffMaxMs: z.ZodDefault<z.ZodNumber>;
+    circuitThreshold: z.ZodDefault<z.ZodNumber>;
+    circuitCooldownMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type OtlpExportConfig = z.infer<typeof OtlpExportConfigSchema>;
+/** Observability block. Only the opt-in remote export today. */
+export declare const ObservabilityConfigSchema: z.ZodObject<{
+    export: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        endpoint: z.ZodDefault<z.ZodString>;
+        convention: z.ZodDefault<z.ZodEnum<{
+            genai: "genai";
+            openinference: "openinference";
+        }>>;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        batchSize: z.ZodDefault<z.ZodNumber>;
+        flushIntervalMs: z.ZodDefault<z.ZodNumber>;
+        requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        spoolMaxBytes: z.ZodDefault<z.ZodNumber>;
+        spoolMaxAgeMs: z.ZodDefault<z.ZodNumber>;
+        maxRetries: z.ZodDefault<z.ZodNumber>;
+        backoffBaseMs: z.ZodDefault<z.ZodNumber>;
+        backoffMaxMs: z.ZodDefault<z.ZodNumber>;
+        circuitThreshold: z.ZodDefault<z.ZodNumber>;
+        circuitCooldownMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ObservabilityConfig = z.infer<typeof ObservabilityConfigSchema>;
 export declare const MemoryConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     provider: z.ZodDefault<z.ZodEnum<{
@@ -2563,6 +2619,27 @@ export declare const PluginConfigSchema: z.ZodObject<{
             latencyBudgetMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
+    observability: z.ZodOptional<z.ZodObject<{
+        export: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            endpoint: z.ZodDefault<z.ZodString>;
+            convention: z.ZodDefault<z.ZodEnum<{
+                genai: "genai";
+                openinference: "openinference";
+            }>>;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            batchSize: z.ZodDefault<z.ZodNumber>;
+            flushIntervalMs: z.ZodDefault<z.ZodNumber>;
+            requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            spoolMaxBytes: z.ZodDefault<z.ZodNumber>;
+            spoolMaxAgeMs: z.ZodDefault<z.ZodNumber>;
+            maxRetries: z.ZodDefault<z.ZodNumber>;
+            backoffBaseMs: z.ZodDefault<z.ZodNumber>;
+            backoffMaxMs: z.ZodDefault<z.ZodNumber>;
+            circuitThreshold: z.ZodDefault<z.ZodNumber>;
+            circuitCooldownMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
     learning: z.ZodOptional<z.ZodObject<{
         realtime_admission: z.ZodPrefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;

package/dist/evaluation/index.d.ts

@@ -12,6 +12,7 @@ export { createEvaluationModelDispatcher, resolveEvaluationAgentName, } from './
 export * from './pr-review-recovery.js';
 export * from './public-api.js';
 export * from './retention.js';
+export { type AggregateExactMeasurement, type ExactMeasurement, evaluateHeldoutGraphRetrievalQuality, type HeldoutGraphQualityCase, type HeldoutGraphQualityReport, type RetrievalQualityOptions, type RetrievalQualityResourceCaps, type RetrievalQualityStatus, type RetrievalRouteMeasurement, } from './retrieval-quality.js';
 export type { EvaluationExecutor, EvaluationExecutorResult, RunEvaluationOptions, } from './runner.js';
 export { createModelEvaluationExecutor, runEvaluation, } from './runner.js';
 export * from './statistics.js';