opencode-swarm 7.168.1 → 7.170.0

package/dist/cli/{snapshot-coordination-init-e4s8bn4p.js → snapshot-coordination-init-ms36zxv6.js}

@@ -8,68 +8,69 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-kkmezerc.js";
-import"./index-d5qf7hvh.js";
-import"./index-qhey6vc3.js";
-import"./index-chebm5h5.js";
-import"./index-nwwk3dej.js";
-import"./index-5g6rhkn7.js";
-import"./index-w1dfkp1q.js";
-import"./index-gp9yzr1v.js";
+} from "./index-j144fgk8.js";
+import"./index-5400m33a.js";
+import"./index-7h01bkm6.js";
+import"./index-zw3hkzch.js";
+import"./index-cgpwjctj.js";
+import"./index-ye43mdfm.js";
+import"./index-3p3y55xg.js";
+import"./index-xnpjwc4h.js";
 import"./index-txdagbh7.js";
 import"./index-9br68j86.js";
 import"./index-cw912re7.js";
-import"./index-xhb4gryr.js";
-import"./index-bw9x8d8n.js";
-import"./index-9b2105n0.js";
+import"./index-9xk97bcf.js";
+import"./index-r1z8nrb6.js";
+import"./index-3eh2n3dx.js";
 import"./index-fyfbpz4f.js";
-import"./index-dfyv3xkd.js";
+import"./index-gfbggp8k.js";
+import"./index-0hgmsyfp.js";
 import"./index-zsrtt42s.js";
-import"./index-j0bxxz9d.js";
-import"./index-5zqakgp4.js";
-import"./index-bvqqwx84.js";
+import"./index-5bbem0ey.js";
+import"./index-fhh02gwx.js";
+import"./index-nyn01yrz.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-gmpmgtzn.js";
-import"./index-qkwtth00.js";
-import"./index-f1fps3w9.js";
-import"./index-6df6wbvj.js";
-import"./index-kear8gb7.js";
-import"./index-p612v1mv.js";
-import"./index-qthc56c4.js";
-import"./index-m35hybf0.js";
+import"./index-06rbdzqn.js";
+import"./index-59fcfpkh.js";
+import"./index-0xprxg95.js";
+import"./index-8w1mrvbd.js";
+import"./index-b3pmzbh1.js";
+import"./index-2s7dvzff.js";
+import"./index-31sqcdsd.js";
+import"./index-bm5xrfnx.js";
 import"./index-rtry5xyf.js";
-import"./index-xkf3672y.js";
+import"./index-mjn6aqqk.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-y85aptep.js";
-import"./index-gh9ybrrs.js";
-import"./index-a8xbvsse.js";
-import"./index-pyf517sz.js";
-import"./index-h439y187.js";
-import"./index-wst6n478.js";
+import"./index-3axdtaf0.js";
+import"./index-pw00xcj0.js";
+import"./index-fgp96k3r.js";
+import"./index-br3mvbsa.js";
+import"./index-bernkwgf.js";
+import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-qwsh0h2g.js";
-import"./index-2xbww1x0.js";
+import"./index-5qt9yf5w.js";
+import"./index-ssx8087p.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-8ybjqg51.js";
-import"./index-4r5pmtvk.js";
+import"./index-9ttqbhvw.js";
+import"./index-bx1wgn3a.js";
 import"./index-7g4c7s5r.js";
-import"./index-v3xc4sde.js";
-import"./index-z6qreakh.js";
+import"./index-nprdr0sm.js";
+import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-91ww9hyr.js";
+import"./index-td6xrw55.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-apy1qfj0.js";
+import"./index-4wc5gfgm.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
 import"./index-zpsr8rpc.js";
-import"./index-q1r1cfww.js";
+import"./index-76qm2c2y.js";
 import"./index-yzjaj53h.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";

package/dist/cli/{telemetry-2wzapf11.js → telemetry-fdtaemnv.js}

@@ -14,7 +14,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-z6qreakh.js";
+} from "./index-nprdr0sm.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{workspace-snapshot-rkgxhj9b.js → workspace-snapshot-hkz2wt1c.js}

@@ -45,10 +45,10 @@ import {
   shouldSkipSnapshot,
   switchPrFeedbackTrackingCandidateAsync,
   workspaceSnapshotMatches
-} from "./index-5zqakgp4.js";
-import"./index-kear8gb7.js";
-import"./index-p612v1mv.js";
-import"./index-v3xc4sde.js";
+} from "./index-fhh02gwx.js";
+import"./index-b3pmzbh1.js";
+import"./index-2s7dvzff.js";
+import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
 import"./index-0mhftbpp.js";

package/dist/cli/{worktree-collision-ownership-rk9gz638.js → worktree-collision-ownership-7v7gg511.js}

@@ -1,4 +1,7 @@
 // @bun
+import {
+  scanBackgroundWorktreeOwnershipTagsForRecovery
+} from "./index-0hgmsyfp.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-zsrtt42s.js";
@@ -6,37 +9,32 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-bvqqwx84.js";
+} from "./index-nyn01yrz.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-f1fps3w9.js";
-import"./index-kear8gb7.js";
-import {
-  bunSpawn
-} from "./index-p612v1mv.js";
-import"./index-pyf517sz.js";
-import"./index-h439y187.js";
-import"./index-wst6n478.js";
+} from "./index-0xprxg95.js";
+import"./index-b3pmzbh1.js";
+import"./index-2s7dvzff.js";
+import"./index-br3mvbsa.js";
+import"./index-bernkwgf.js";
+import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-qwsh0h2g.js";
-import"./index-2xbww1x0.js";
+import"./index-5qt9yf5w.js";
+import"./index-ssx8087p.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-8ybjqg51.js";
-import"./index-4r5pmtvk.js";
+import"./index-9ttqbhvw.js";
+import"./index-bx1wgn3a.js";
 import"./index-7g4c7s5r.js";
-import"./index-v3xc4sde.js";
-import"./index-z6qreakh.js";
+import"./index-nprdr0sm.js";
+import"./index-nbdmdyke.js";
 import {
   canonicalRootKeyFresh
 } from "./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import {
-  init_git_executable,
-  resolveGitExecutable
-} from "./index-0mhftbpp.js";
+import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
@@ -45,93 +43,9 @@ import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 
 // src/hooks/delegation-gate/worktree-collision-ownership.ts
-import * as fs2 from "fs";
-
-// src/hooks/delegation-gate/worktree-ownership-tag.ts
 import * as fs from "fs";
-import * as path from "path";
-init_git_executable();
-var OWNERSHIP_TAG_SCAN_TIMEOUT_MS = 2000;
-var MAX_OWNERSHIP_TAGS = 512;
-function decodeTagPart(value) {
-  if (!value || !/^[A-Za-z0-9_-]+$/.test(value))
-    return null;
-  const decoded = Buffer.from(value, "base64url").toString("utf8");
-  return decoded && Buffer.from(decoded, "utf8").toString("base64url") === value ? decoded : null;
-}
-async function scanBackgroundWorktreeOwnershipTagsForRecovery(directory) {
-  try {
-    fs.statSync(path.join(directory, ".git"));
-  } catch (error) {
-    if (error.code === "ENOENT") {
-      return { status: "ok", owners: [] };
-    }
-    return {
-      status: "uncertain",
-      reason: `Git metadata could not be inspected: ${error instanceof Error ? error.message : String(error)}`
-    };
-  }
-  let proc;
-  try {
-    proc = bunSpawn([
-      resolveGitExecutable(),
-      "-C",
-      directory,
-      "for-each-ref",
-      `--count=${MAX_OWNERSHIP_TAGS + 1}`,
-      "--format=%(refname:strip=2)%00%(objectname)",
-      "refs/tags/swarm-preserved-owner/"
-    ], {
-      stdin: "ignore",
-      stdout: "pipe",
-      stderr: "ignore",
-      timeout: OWNERSHIP_TAG_SCAN_TIMEOUT_MS
-    });
-    const exitCode = await proc.exited;
-    if (exitCode !== 0) {
-      return {
-        status: "uncertain",
-        reason: `ownership tag scan exited ${exitCode}`
-      };
-    }
-    const lines = (await proc.stdout.text()).split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
-    if (lines.length > MAX_OWNERSHIP_TAGS) {
-      return {
-        status: "uncertain",
-        reason: `ownership tag scan exceeded the ${MAX_OWNERSHIP_TAGS}-tag safety bound`
-      };
-    }
-    const owners = [];
-    for (const line of lines) {
-      const [tag, ref, ...extra] = line.split("\x00");
-      const segments = tag?.split("/") ?? [];
-      const sessionId = decodeTagPart(segments[1] ?? "");
-      const laneId = decodeTagPart(segments[2] ?? "");
-      const callDigest = segments[3];
-      if (extra.length > 0 || segments.length !== 4 || segments[0] !== "swarm-preserved-owner" || !sessionId || !laneId || !callDigest || !/^[0-9a-f]{12}$/.test(callDigest) || !ref || !/^[0-9a-f]{40,64}$/i.test(ref)) {
-        return {
-          status: "uncertain",
-          reason: `malformed background ownership tag entry "${tag ?? ""}"`
-        };
-      }
-      owners.push({ sessionId, laneId, callDigest, ref });
-    }
-    return { status: "ok", owners };
-  } catch (error) {
-    return {
-      status: "uncertain",
-      reason: `ownership tag scan failed: ${error instanceof Error ? error.message : String(error)}`
-    };
-  } finally {
-    try {
-      proc?.kill();
-    } catch {}
-  }
-}
-
-// src/hooks/delegation-gate/worktree-collision-ownership.ts
 var _internals = {
-  statSync: fs2.statSync,
+  statSync: fs.statSync,
   removeWorktreeProvisioningOwner
 };
 function descriptorCoordinateMatch(descriptor, identity) {

package/dist/cli/{worktree-isolation-1bdzfgky.js → worktree-isolation-nanamt25.js}

@@ -21,70 +21,71 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-kkmezerc.js";
-import"./index-d5qf7hvh.js";
-import"./index-qhey6vc3.js";
-import"./index-chebm5h5.js";
-import"./index-nwwk3dej.js";
-import"./index-5g6rhkn7.js";
-import"./index-w1dfkp1q.js";
-import"./index-gp9yzr1v.js";
+} from "./index-j144fgk8.js";
+import"./index-5400m33a.js";
+import"./index-7h01bkm6.js";
+import"./index-zw3hkzch.js";
+import"./index-cgpwjctj.js";
+import"./index-ye43mdfm.js";
+import"./index-3p3y55xg.js";
+import"./index-xnpjwc4h.js";
 import"./index-txdagbh7.js";
 import"./index-9br68j86.js";
 import"./index-cw912re7.js";
-import"./index-xhb4gryr.js";
-import"./index-bw9x8d8n.js";
-import"./index-9b2105n0.js";
+import"./index-9xk97bcf.js";
+import"./index-r1z8nrb6.js";
+import"./index-3eh2n3dx.js";
 import"./index-fyfbpz4f.js";
-import"./index-dfyv3xkd.js";
+import"./index-gfbggp8k.js";
+import"./index-0hgmsyfp.js";
 import"./index-zsrtt42s.js";
-import"./index-j0bxxz9d.js";
-import"./index-5zqakgp4.js";
-import"./index-bvqqwx84.js";
+import"./index-5bbem0ey.js";
+import"./index-fhh02gwx.js";
+import"./index-nyn01yrz.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-gmpmgtzn.js";
-import"./index-qkwtth00.js";
-import"./index-f1fps3w9.js";
-import"./index-6df6wbvj.js";
-import"./index-kear8gb7.js";
-import"./index-p612v1mv.js";
-import"./index-qthc56c4.js";
-import"./index-m35hybf0.js";
+import"./index-06rbdzqn.js";
+import"./index-59fcfpkh.js";
+import"./index-0xprxg95.js";
+import"./index-8w1mrvbd.js";
+import"./index-b3pmzbh1.js";
+import"./index-2s7dvzff.js";
+import"./index-31sqcdsd.js";
+import"./index-bm5xrfnx.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-xkf3672y.js";
+} from "./index-mjn6aqqk.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-y85aptep.js";
-import"./index-gh9ybrrs.js";
-import"./index-a8xbvsse.js";
-import"./index-pyf517sz.js";
-import"./index-h439y187.js";
-import"./index-wst6n478.js";
+import"./index-3axdtaf0.js";
+import"./index-pw00xcj0.js";
+import"./index-fgp96k3r.js";
+import"./index-br3mvbsa.js";
+import"./index-bernkwgf.js";
+import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-qwsh0h2g.js";
-import"./index-2xbww1x0.js";
+import"./index-5qt9yf5w.js";
+import"./index-ssx8087p.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-8ybjqg51.js";
-import"./index-4r5pmtvk.js";
+import"./index-9ttqbhvw.js";
+import"./index-bx1wgn3a.js";
 import"./index-7g4c7s5r.js";
-import"./index-v3xc4sde.js";
-import"./index-z6qreakh.js";
+import"./index-nprdr0sm.js";
+import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-91ww9hyr.js";
+import"./index-td6xrw55.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-apy1qfj0.js";
+import"./index-4wc5gfgm.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
 import"./index-zpsr8rpc.js";
-import"./index-q1r1cfww.js";
+import"./index-76qm2c2y.js";
 import"./index-yzjaj53h.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";

package/dist/commands/ci.d.ts

@@ -0,0 +1,40 @@
+/**
+ * `swarm ci` command handler (issue #2497).
+ *
+ * Advisory headless CI: evaluates a checked-out repo's authoritative gates
+ * read-only (see src/ci/evaluate.ts), renders Markdown + [SWARM_CI_JSON],
+ * and maps the run outcome to a machine exit status:
+ *   0 = every evaluated gate passed (and at least one was evaluated)
+ *   1 = gate violation / no-data / corrupt evidence / nothing to evaluate
+ *   2 = cancelled (SIGINT/SIGTERM)
+ *   3 = deadline or internal error
+ *
+ * The command must run without a TTY and without the OpenCode host
+ * (scrubbed CI environments), so it carries NO toolPolicy (neither
+ * human-only nor agent-gated). It uses `ctx.directory` — never
+ * process.cwd() — per AGENTS.md invariant 4, spawns no subprocess, and
+ * consumes no stdin.
+ */
+import { runAdvisoryCiRuntime } from '../ci/index.js';
+import type { CommandContext, CommandFailure } from './registry.js';
+export declare const DEFAULT_CI_DEADLINE_MS = 300000;
+export interface CiSignalCancellation {
+    /** The handler invoked on SIGINT/SIGTERM; exported for unit testing the
+     * wiring without relying on platform signal delivery. */
+    handler: () => void;
+    install: () => void;
+    dispose: () => void;
+}
+/** Wire SIGINT/SIGTERM to the run's AbortController. Kept as a seam so the
+ * cancellation contract is unit-testable on platforms where self-signalling
+ * a native process is unreliable (Windows Git Bash; see frozen check C5's
+ * notes). */
+export declare function createSignalCancellation(controller: AbortController, onCancelled?: () => void): CiSignalCancellation;
+export declare function handleCiCommand(ctx: CommandContext): Promise<string | CommandFailure>;
+/** Test seam: dependency injection over the runtime entry so handler-level
+ * diagnostic-branch tests can drive cancelled/deadline outcomes without
+ * timing or signal-delivery dependence (repo convention: DI over mock.module;
+ * restore in afterEach). */
+export declare const _internals: {
+    runAdvisoryCiRuntime: typeof runAdvisoryCiRuntime;
+};

package/dist/commands/destructive-purge.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Issue #2527 / #2508: the shared two-step destructive-purge confirmation
+ * primitive (preview + confirm_token → exact-token execution).
+ *
+ * Contract (frozen by check C8 and the destructive-purge-2527 unit suite):
+ *  - `previewDestructivePurge` is a side-effect-free preview (counts, exact
+ *    option label, the confirmation the operator must echo);
+ *  - `issueConfirmToken` records a single-slot pending purge keyed by a
+ *    digest over the candidate SET (sorted absolute paths + kind) and
+ *    returns the confirm token (15-minute TTL);
+ *  - `executeDestructivePurge` re-derives the CURRENT scope digest and
+ *    passes only on exact token match AND digest match AND fresh TTL — so
+ *    replay after the candidate set changes (a lane added, removed, or the
+ *    scope re-derived differently) is rejected by construction, and the
+ *    token is single-use (the pending record is consumed on execution; a
+ *    second execution is rejected with "no pending purge").
+ *  - TTL expiry: an expired pending record is treated as absent on read
+ *    (silent); every new issuance overwrites the single slot — the
+ *    overwritten token can never execute (it is rejected with "confirm
+ *    token mismatch"; a single-slot store cannot distinguish generations,
+ *    but rejection is guaranteed either way).
+ *  - Scope-of-execution: the executor deletes ONLY the recorded candidate
+ *    paths. The primitive confirms operator intent; CALLERS own scoping —
+ *    `/swarm reset-session` (and #2508's `/swarm close` when it adopts
+ *    this) must only construct candidate sets from ownership-gated,
+ *    base-scoped directories.
+ */
+import { randomBytes } from 'node:crypto';
+import * as fs from 'node:fs';
+import { atomicWriteSwarmFileSync } from '../utils/atomic-write';
+export interface PurgeCandidate {
+    path: string;
+    reason: string;
+}
+export interface PurgePlan {
+    previewLines: string[];
+    counts: {
+        total: number;
+    };
+    optionLabel: string;
+    confirmToken: string;
+    candidates: PurgeCandidate[];
+}
+export interface PurgeExecution {
+    ok: boolean;
+    reason?: string;
+    purged?: string[];
+}
+export declare const _internals: {
+    readFileSync: (p: string, enc: BufferEncoding) => string;
+    rmSync: typeof fs.rmSync;
+    existsSync: typeof fs.existsSync;
+    atomicWriteSwarmFileSync: typeof atomicWriteSwarmFileSync;
+    now: () => number;
+    randomBytes: typeof randomBytes;
+};
+/**
+ * Side-effect-free preview: what would be purged, the counts, the exact
+ * option label the operator must echo, and the confirm token to use.
+ * (The token returned here is informational; `issueConfirmToken` is what
+ * arms it — keeping preview strictly read-only lets callers preview freely.)
+ */
+export declare function previewDestructivePurge(scopeTarget: string, projectRoot: string, extra?: {
+    kind?: string;
+    candidates?: PurgeCandidate[];
+}): PurgePlan;
+/**
+ * Arm a pending purge for the scope and return the confirm token. The
+ * single-slot record is overwritten by every new issuance (the previous
+ * token stops working — "no pending purge for this scope").
+ */
+export declare function issueConfirmToken(scopeTarget: string, projectRoot: string, extra?: {
+    kind?: string;
+    candidates?: PurgeCandidate[];
+}): string;
+/**
+ * Execute the pending purge under the exact token. Re-derives the CURRENT
+ * scope digest: token match AND digest match AND fresh TTL required; the
+ * record is consumed on success (single use). Deletes ONLY the recorded
+ * candidate paths.
+ */
+export declare function executeDestructivePurge(scopeTarget: string, projectRoot: string, token: string, extra?: {
+    kind?: string;
+    candidates?: PurgeCandidate[];
+}): PurgeExecution;

package/dist/commands/index.d.ts

@@ -12,6 +12,7 @@ export { handleAutoProceedCommand } from './auto-proceed';
 export { handleBenchmarkCommand } from './benchmark';
 export { handleBrainstormCommand } from './brainstorm';
 export { handleCheckpointCommand } from './checkpoint';
+export { createSignalCancellation, DEFAULT_CI_DEADLINE_MS, handleCiCommand, } from './ci';
 export { handleCiSimulateCommand } from './ci-simulate';
 export { handleClarifyCommand } from './clarify';
 export { handleCloseCommand } from './close';

package/dist/commands/registry.d.ts

@@ -788,6 +788,14 @@ export declare const COMMAND_REGISTRY: {
         readonly category: "agent";
         readonly toolPolicy: "none";
     };
+    readonly ci: {
+        readonly handler: (ctx: CommandContext) => Promise<string | CommandFailure>;
+        readonly description: "Advisory headless CI: evaluate the repo gate/evidence state read-only with machine exit codes [--timeout-ms <n>] [--json]";
+        readonly args: "--timeout-ms <n>, --json";
+        readonly details: "Host-decoupled, read-only evaluation of the checked-out repo (#2497): per-task required gates (tri-state evidence), plan-critic approval, and evidence-quality thresholds, composed from the authoritative readers. Exits 0 only when every evaluated gate passes; 1 on any violation, no-data, corrupt evidence, or a missing plan; 2 on cancellation (SIGINT/SIGTERM); 3 on deadline/internal error. Emits a Markdown report plus a [SWARM_CI_JSON] machine block. Never writes to .swarm and cannot satisfy or bypass any gate; runs with no TTY and no OpenCode host.";
+        readonly category: "diagnostics";
+        readonly toolPolicy: "none";
+    };
     readonly 'ci-monitor': {
         readonly handler: (ctx: CommandContext) => CommandResult;
         readonly description: "Drive an already-reviewed, approved PR to green and merged (monitor CI, fix, merge) [pr]";
@@ -960,7 +968,7 @@ export declare const COMMAND_REGISTRY: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Clear session state while preserving plan, evidence, and knowledge";
         readonly details: "Deletes only .swarm/session/state.json and other session files. Clears in-memory agent sessions, delegation chains, and active-agent mappings. Preserves plan, evidence, and knowledge. Also releases this session's pending knowledge-gate obligations (#2398) and recovers stale coder settlements so dispatches cannot wedge on CODER_DISPATCH_IN_PROGRESS (#2268). Auto-backs up removed files to .swarm/reset-backups/ (newest 5 kept).";
-        readonly args: "";
+        readonly args: "--confirm=<token> (purge dirty/live lanes)";
         readonly category: "utility";
         readonly toolPolicy: "restricted";
     };
@@ -1151,7 +1159,7 @@ export declare const COMMAND_REGISTRY: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Run golden Swarm memory recall evaluation fixtures";
         readonly subcommandOf: "memory";
-        readonly args: "--json, --fixtures <directory>";
+        readonly args: "--json, --fixtures <directory>, --profiles <list>, --manifest <file>";
         readonly category: "diagnostics";
         readonly toolPolicy: "agent";
     };

package/dist/commands/reset-session.d.ts

@@ -1,8 +1,10 @@
 import { commitGateReleaseBatch, queryLiveMemberships } from '../hooks/knowledge-receipt-ledger';
+import { listLiveLaneOwners } from '../parallel/lane-owners';
 import { beginSnapshotCoordinationReset } from '../session/snapshot-coordination-init.js';
 import { clearSnapshotRows } from '../session/snapshot-store.js';
 import { recoverStaleCoderSettlements } from '../workflow/coder-settlement.js';
 import { type OrphanCleanupResult } from '../worktree/merge';
+import { removeOwnedWorktreeDir } from '../worktree/ownership';
 import { type ResetBackupResult } from './reset-backup';
 /**
  * _internals DI seam for testing reset-session without spawning real git processes.
@@ -12,6 +14,8 @@ import { type ResetBackupResult } from './reset-backup';
  */
 export declare const _internals: {
     cleanupOrphanedBranches: (directory: string, activeSessionIds: string[]) => Promise<OrphanCleanupResult>;
+    removeOwnedWorktreeDir: typeof removeOwnedWorktreeDir;
+    listLiveLaneOwners: typeof listLiveLaneOwners;
     backupSwarmStateBeforeReset: (directory: string, kind: 'reset' | 'reset-session', relEntries: string[]) => ResetBackupResult;
     recoverStaleCoderSettlements: typeof recoverStaleCoderSettlements;
     queryLiveMemberships: typeof queryLiveMemberships;
@@ -28,4 +32,4 @@ export declare const _internals: {
  * session's pending knowledge-application gate obligations (issue #2398) so
  * the reset is a real escape from an enforce-mode lockout.
  */
-export declare function handleResetSessionCommand(directory: string, _args: string[], sessionID?: string): Promise<string>;
+export declare function handleResetSessionCommand(directory: string, args: string[], sessionID?: string): Promise<string>;

package/dist/config/constants.d.ts

@@ -141,7 +141,10 @@ export declare const AUTO_PROCEED_BANNER = "## \u23ED\uFE0F AUTO-PROCEED STATUS\
 export declare const DEFAULT_LEAN_TURBO_CONFIG: LeanTurboConfig;
 /**
  * Directory name of the DD-6 default swarm-managed worktree base, created as a
- * SIBLING of the project root (`<project-parent>/.swarm-worktrees`).
+ * child of the project root (`<project>/.swarm-worktrees`) — moved inside the
+ * project by issue #2527 (the pre-#2527 parent-level default was shared by
+ * every sibling checkout and enabled cross-project reclamation destruction);
+ * a start-time migration moves owned legacy-base lanes into the project.
  *
  * Single source of truth shared by `resolveWorktreeBaseDir` in
  * `src/worktree/core.ts` (which BUILDS lane paths) and

package/dist/config/lane-context.d.ts

@@ -55,6 +55,25 @@ export interface LaneContext {
      */
     parentProjectPath: string;
 }
+/**
+ * Issue #2527: repo-ownership answer for destructive reclamation.
+ *
+ * `owned === true` (and `uncertain === false`) is the ONLY answer that
+ * permits deleting a worktree directory from a reclamation path: the
+ * candidate's `.git` pointer must resolve, through git's own `commondir`
+ * metadata, back to a main working tree that IS the expected project root.
+ * Anything else — foreign repo (the common shared-base case: `git worktree
+ * remove` says "is not a working tree"), unreadable/malformed pointer, or a
+ * main-working-tree candidate we were not asked about — is NOT deletable.
+ * Comparison is case-insensitive on Windows, matching
+ * `isPathUnderSwarmWorktreeBase` in `src/worktree/core.ts`.
+ */
+export interface WorktreeRepoOwnership {
+    owned: boolean;
+    mainWorktree?: string;
+    uncertain: boolean;
+}
+export declare function resolveWorktreeRepoOwnership(worktreePath: string, expectedProjectRoot: string): WorktreeRepoOwnership;
 /**
  * Test-only dependency-injection seam (AGENTS.md invariant 7 — prefer
  * `_internals` over `mock.module`, which leaks across files in Bun's shared