opencode-swarm 7.171.2 → 7.172.1

package/dist/cli/{index-vqb65csb.js → index-3r17j2gc.js}

@@ -3,13 +3,13 @@ import {
   EvaluationRunV1Schema,
   GateAuditResultV1Schema,
   getProtectedEvaluationRunIds
-} from "./index-3jcp3zb6.js";
+} from "./index-nzpw41w6.js";
 import {
   readEffectiveSpecSync
-} from "./index-9br68j86.js";
+} from "./index-z2deqhpp.js";
 import {
   validateWorkspaceRoot
-} from "./index-cw912re7.js";
+} from "./index-fpbcxykc.js";
 import {
   getWorktreeMergeFailure
 } from "./index-zsrtt42s.js";
@@ -23,13 +23,13 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-rrc08h4q.js";
+} from "./index-jc0as97z.js";
 import {
   estimateCharsForTokens,
   estimateTokens,
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-b3pmzbh1.js";
+} from "./index-ma38q4rf.js";
 import {
   bunHash,
   bunWrite,
@@ -39,7 +39,7 @@ import {
   EVIDENCE_MAX_JSON_BYTES,
   EvidenceBundleSchema,
   EvidenceSchema
-} from "./index-3qf1vxtb.js";
+} from "./index-frcemc0b.js";
 import {
   LedgerStaleWriterError,
   appendLedgerEvent,
@@ -58,10 +58,10 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-2ryy0cwt.js";
+} from "./index-c5wyannc.js";
 import {
   appendCoreEventSync
-} from "./index-6k5aq7b9.js";
+} from "./index-9bg5vc22.js";
 import {
   derivePlanId,
   derivePlanIdentityHash,
@@ -69,32 +69,32 @@ import {
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState
-} from "./index-g6nen3gt.js";
+} from "./index-9p00xent.js";
 import {
   DURABILITY_CLASSES,
   getProjectDb,
   projectDbExists,
   withDurabilityClass
-} from "./index-yqbnsmmv.js";
+} from "./index-bdqefjxg.js";
 import {
   assertProjectRoot,
   tryAcquireLock,
   withEvidenceLock
-} from "./index-evxd1art.js";
+} from "./index-yf1mvexg.js";
 import {
   emit
-} from "./index-9dz2ee2g.js";
+} from "./index-jmn35na4.js";
 import {
   atomicWriteSwarmFileSync,
   invalidateCachedArtifact,
   readCachedParsedFile
-} from "./index-nbdmdyke.js";
+} from "./index-ws3ggk1h.js";
 import {
   canonicalRootKeyFresh
 } from "./index-1xnse449.js";
 import {
   PlanSchema
-} from "./index-5a8q4qr5.js";
+} from "./index-zcjdw8dw.js";
 import {
   GIT_BINARY_ENV_VAR,
   describeGitResolution,
@@ -104,7 +104,7 @@ import {
 import {
   ZodError,
   init_zod
-} from "./index-bpmtbmy9.js";
+} from "./index-gknz3bv1.js";
 import {
   init_executor,
   isUntrustedEnvKey,
@@ -1880,6 +1880,11 @@ var _internals5 = {
   loadPlanJsonOnly,
   readPlanJsonUtf8,
   readPlanFileUtf8,
+  verifyWrittenPlanJson,
+  ledgerExists,
+  replayFromLedger,
+  loadLastApprovedPlan,
+  readLedgerEventsWithIntegrity,
   regeneratePlanMarkdown,
   isGitRepo,
   isEpicModeActiveForProject,
@@ -2265,14 +2270,20 @@ async function loadPlan(directory, cache) {
             rawPlanId = derivePlanId(rawParsed);
           }
         } catch {}
-        if (await ledgerExists(directory)) {
-          const ledgerEventsForCatch = await readLedgerEvents(directory);
+        if (await _internals5.ledgerExists(directory)) {
+          const catchIntegrity = await _internals5.readLedgerEventsWithIntegrity(directory);
+          const ledgerEventsForCatch = catchIntegrity.events;
           const catchFirstEvent = ledgerEventsForCatch.length > 0 ? ledgerEventsForCatch[0] : null;
           const identityMatch = rawPlanId === null || catchFirstEvent === null || catchFirstEvent.plan_id === rawPlanId;
           if (!identityMatch) {
             warn(`[loadPlan] Ledger identity mismatch in validation-failure path (ledger: ${catchFirstEvent?.plan_id}, plan: ${rawPlanId}) \u2014 skipping ledger rebuild (migration detected).`);
           } else if (catchFirstEvent !== null && rawPlanId !== null) {
-            const rebuilt = await replayFromLedger(directory);
+            let rebuilt = null;
+            try {
+              rebuilt = await _internals5.replayFromLedger(directory);
+            } catch (replayError) {
+              warn(`[loadPlan] Ledger replay threw in validation-failure path: ${replayError instanceof Error ? replayError.message : String(replayError)}. Falling back to critic-approved snapshot before legacy migration.`);
+            }
             if (rebuilt) {
               await rebuildPlan(directory, rebuilt, {
                 reason: "validation_failure_recovery"
@@ -2280,6 +2291,30 @@ async function loadPlan(directory, cache) {
               warn("[loadPlan] Rebuilt plan from ledger after validation failure. Projection was stale.");
               return rebuilt;
             }
+            try {
+              const approved = await _internals5.loadLastApprovedPlan(directory, catchFirstEvent.plan_id);
+              if (approved) {
+                const { removedCount } = await savePlanWithAutoAcknowledgedRemovals(directory, approved.plan, "load_plan_recovery_from_approved_snapshot", "restore from critic-approved snapshot");
+                if (removedCount > 0) {
+                  approved.plan._midLoadRemovals = {
+                    count: removedCount,
+                    source: "load_plan_recovery_from_approved_snapshot"
+                  };
+                }
+                try {
+                  await takeSnapshotEvent(directory, approved.plan, {
+                    source: "recovery_from_approved_snapshot",
+                    approvalMetadata: approved.approval
+                  });
+                } catch (healError) {
+                  warn(`[loadPlan] Recovery-heal snapshot append failed: ${healError instanceof Error ? healError.message : String(healError)}. Next loadPlan may re-enter recovery path.`);
+                }
+                warn(`[loadPlan] Recovered from critic-approved snapshot seq=${approved.seq} after validation failure with exhausted ledger replay (approved snapshot beats lossy Markdown migration).`);
+                return approved.plan;
+              }
+            } catch (approvedError) {
+              warn(`[loadPlan] Approved-snapshot recovery failed in validation-failure path: ${approvedError instanceof Error ? approvedError.message : String(approvedError)}`);
+            }
           }
         }
         const planMdContent2 = await readSwarmFileAsync(directory, "plan.md", cache);
@@ -2292,12 +2327,13 @@ async function loadPlan(directory, cache) {
               source: "load_plan_migration_from_md"
             };
           }
+          await appendMigrationProvenanceEvent(directory, migrated);
           return migrated;
         }
       }
     }
   }
-  if (await ledgerExists(directory)) {
+  if (await _internals5.ledgerExists(directory)) {
     const resolvedDir = canonicalRootKeyFresh(directory);
     const existingMutex = recoveryMutexes.get(resolvedDir);
     if (existingMutex) {
@@ -2312,7 +2348,12 @@ async function loadPlan(directory, cache) {
     });
     recoveryMutexes.set(resolvedDir, mutex);
     try {
-      const rebuilt = await replayFromLedger(directory);
+      let rebuilt = null;
+      try {
+        rebuilt = await _internals5.replayFromLedger(directory);
+      } catch (replayError) {
+        warn(`[loadPlan] Ledger replay threw in missing-projection path: ${replayError instanceof Error ? replayError.message : String(replayError)}. Falling back to critic-approved snapshot before legacy migration.`);
+      }
       if (rebuilt) {
         const { removedCount } = await savePlanWithAutoAcknowledgedRemovals(directory, rebuilt, "load_plan_rebuild_from_ledger", "rebuild plan from ledger replay");
         if (removedCount > 0) {
@@ -2324,13 +2365,14 @@ async function loadPlan(directory, cache) {
         return rebuilt;
       }
       try {
-        const anchorEvents = await readLedgerEvents(directory);
+        const anchorIntegrity = await _internals5.readLedgerEventsWithIntegrity(directory);
+        const anchorEvents = anchorIntegrity.events;
         if (anchorEvents.length === 0) {
           warn("[loadPlan] Ledger present but no events readable \u2014 refusing approved-snapshot recovery (cannot verify plan identity).");
           return null;
         }
         const expectedPlanId = anchorEvents[0].plan_id;
-        const approved = await loadLastApprovedPlan(directory, expectedPlanId);
+        const approved = await _internals5.loadLastApprovedPlan(directory, expectedPlanId);
         if (approved) {
           const approvedPhase = approved.approval && typeof approved.approval === "object" && "phase" in approved.approval ? approved.approval.phase : undefined;
           warn(`[loadPlan] Ledger replay returned no plan \u2014 recovered from critic-approved snapshot seq=${approved.seq} timestamp=${approved.timestamp} (approval phase=${approvedPhase ?? "unknown"}). This may roll the plan back to an earlier phase \u2014 verify before continuing.`);
@@ -2362,7 +2404,14 @@ async function loadPlan(directory, cache) {
   const planMdContent = await readSwarmFileAsync(directory, "plan.md", cache);
   if (planMdContent !== null) {
     const migrated = migrateLegacyPlan(planMdContent);
-    await savePlan(directory, migrated);
+    const { removedCount } = await savePlanWithAutoAcknowledgedRemovals(directory, migrated, "load_plan_migration_from_md", "migrate legacy plan.md to plan.json");
+    if (removedCount > 0) {
+      migrated._midLoadRemovals = {
+        count: removedCount,
+        source: "load_plan_migration_from_md"
+      };
+    }
+    await appendMigrationProvenanceEvent(directory, migrated);
     return migrated;
   }
   return null;
@@ -2403,6 +2452,57 @@ async function withPlanLifecycleLock(directory, taskId, fn) {
     }
   }
 }
+
+class PlanWriteVerificationError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "PlanWriteVerificationError";
+  }
+}
+var PLAN_WRITE_VERIFY_READ_RETRIES = 4;
+var PLAN_WRITE_VERIFY_READ_BACKOFF_MS = 200;
+async function verifyWrittenPlanJson(directory, expected) {
+  let content;
+  try {
+    content = await readSwarmFileAsync(directory, "plan.json", undefined, (filePath) => _internals5.readPlanFileUtf8(filePath), false);
+  } catch (error2) {
+    throw new PlanWriteVerificationError(`PLAN_WRITE_VERIFICATION_FAILED: plan.json read-back could not be read (${error2 instanceof Error ? error2.message : String(error2)})`);
+  }
+  for (let attempt = 0;content === null && attempt < PLAN_WRITE_VERIFY_READ_RETRIES; attempt++) {
+    await new Promise((resolve3) => setTimeout(resolve3, PLAN_WRITE_VERIFY_READ_BACKOFF_MS * (attempt + 1)));
+    try {
+      content = await readSwarmFileAsync(directory, "plan.json", undefined, (filePath) => _internals5.readPlanFileUtf8(filePath), false);
+    } catch {}
+  }
+  if (content === null) {
+    throw new PlanWriteVerificationError("PLAN_WRITE_VERIFICATION_FAILED: plan.json read-back returned no content after write");
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(content);
+  } catch (error2) {
+    throw new PlanWriteVerificationError(`PLAN_WRITE_VERIFICATION_FAILED: plan.json read-back did not parse (${error2 instanceof Error ? error2.message : String(error2)})`);
+  }
+  if (JSON.stringify(parsed) !== JSON.stringify(expected)) {
+    throw new PlanWriteVerificationError("PLAN_WRITE_VERIFICATION_FAILED: plan.json read-back content differs from the projected plan");
+  }
+}
+async function appendMigrationProvenanceEvent(directory, plan) {
+  try {
+    await appendLedgerEvent(directory, {
+      event_type: "plan_rebuilt",
+      source: "load_plan_migration_from_md",
+      plan_id: derivePlanId(plan),
+      payload: {
+        reason: "load_plan_migration_from_md",
+        phases_count: plan.phases.length,
+        tasks_count: plan.phases.reduce((sum, phase) => sum + phase.tasks.length, 0)
+      }
+    });
+  } catch (error2) {
+    warn(`[loadPlan] Markdown-migration provenance event append failed (plan remains migrated): ${error2 instanceof Error ? error2.message : String(error2)}`);
+  }
+}
 async function savePlan(directory, plan, options) {
   if (directory === null || directory === undefined || typeof directory !== "string" || directory.trim().length === 0) {
     throw new Error(`Invalid directory: directory must be a non-empty string`);
@@ -2414,11 +2514,10 @@ async function savePlan(directory, plan, options) {
       throw new PlanConcurrentModificationError(`Plan write blocked: plan.json is locked by ${lockResult.existing?.agent ?? "another agent"} (task: ${lockResult.existing?.taskId ?? "unknown"})`);
     }
     try {
-      await savePlan(directory, plan, {
+      return await savePlan(directory, plan, {
         ...options,
         planLockAlreadyHeld: true
       });
-      return;
     } finally {
       if (lockResult.lock._release) {
         await lockResult.lock._release().catch(() => {});
@@ -2491,7 +2590,7 @@ async function savePlan(directory, plan, options) {
       throw new PlanConcurrentModificationError("RECONCILE_LEDGER_PROJECTION_STALE: the ledger identity or tail changed before the recovery snapshot could be appended.");
     }
     try {
-      const integrity = await readLedgerEventsWithIntegrity(directory);
+      const integrity = await _internals5.readLedgerEventsWithIntegrity(directory);
       if (integrity.truncated) {
         await replaceTruncatedLedgerWithRecoveryRoot(directory, validated, {
           seq: expected.expectedSeq,
@@ -2633,7 +2732,7 @@ async function savePlan(directory, plan, options) {
     }
   }
   const ledgerStatusTaskIds = collectLedgerStatusTaskIds(await readLedgerEvents(directory));
-  const replayedBeforeProjection = await replayFromLedger(directory);
+  const replayedBeforeProjection = await _internals5.replayFromLedger(directory);
   const projectionCandidate = replayedBeforeProjection ? mergeStatusesTakingPrecedence(validated, replayedBeforeProjection, ledgerStatusTaskIds) : validated;
   if (replayedBeforeProjection && computePlanLedgerHash(replayedBeforeProjection) !== computePlanLedgerHash(projectionCandidate)) {
     options?.preCommitCheck?.();
@@ -2664,6 +2763,7 @@ async function savePlan(directory, plan, options) {
     } catch {}
   }
   invalidateCachedArtifact(planPath);
+  await _internals5.verifyWrittenPlanJson(directory, projectedPlan);
   try {
     const markerPath = path4.join(swarmDir, ".plan-write-marker");
     const inProgressMarker = JSON.stringify({
@@ -2675,6 +2775,7 @@ async function savePlan(directory, plan, options) {
     });
     await bunWrite(markerPath, inProgressMarker);
   } catch {}
+  let mdWriteError;
   try {
     const contentHash = computePlanContentHash(projectedPlan);
     const markdown = derivePlanMarkdown(projectedPlan);
@@ -2693,6 +2794,7 @@ ${markdown}`;
     invalidateCachedArtifact(mdPath);
   } catch (mdError) {
     const message = mdError instanceof Error ? mdError.message : String(mdError);
+    mdWriteError = message;
     warn(`[savePlan] plan.md write failed (non-fatal, plan.json is authoritative): ${message}`);
     try {
       emit("plan_md_write_failed", {
@@ -2745,6 +2847,14 @@ ${markdown}`;
       warn(`[savePlan] task checkpoint receipt lifecycle sync failed (plan remains authoritative): ${receiptError instanceof Error ? receiptError.message : String(receiptError)}`);
     }
   }
+  if (mdWriteError !== undefined) {
+    return {
+      durability: "incomplete",
+      degraded_surfaces: ["plan.md"],
+      md_write_error: mdWriteError
+    };
+  }
+  return { durability: "complete", degraded_surfaces: [] };
 }
 async function rebuildPlan(directory, plan, options) {
   assertProjectRoot(directory);
@@ -4166,4 +4276,4 @@ function mergeDurableGateEntriesFromEvidence(taskId, entries, evidence) {
   return merged;
 }
 
-export { normalizePath, buildTaskCompletionDescriptor, ensureTaskCheckpointReceipt, updateTaskCheckpointReceipt, MAX_TRANSIENT_RETRIES, isTransientSpawnError, transientBackoff, readLaneEnvFileFromDiskSync, getGitRepositoryStatus, isGitRepo, getDefaultBaseBranch, detectDefaultRemoteBranch, resetToRemoteBranch, resetToMainAfterMerge, isStateUnreadable, loadEpicSessionState, isEpicModeActive, enableEpicMode, disableEpicMode, pathsConflict, isGlobalFile, isProtectedPath, readTaskScopes, loadPlanJsonOnly, loadPlan, withPlanLifecycleLock, savePlan, closePlanTerminalState, updateTaskStatus, derivePlanMarkdown, isValidEvidenceType, isSecretscanEvidence, sanitizeTaskId2 as sanitizeTaskId, validateProjectRoot, saveEvidence, loadEvidence, listEvidenceTaskIds, checkRequirementCoverage, archiveEvidence, readDurableGateEvidence, getDurableGateEvidenceStatus, getDurableGateEvidenceStatusForTask, mergeDurableGateEntriesFromEvidence };
+export { normalizePath, buildTaskCompletionDescriptor, ensureTaskCheckpointReceipt, updateTaskCheckpointReceipt, MAX_TRANSIENT_RETRIES, isTransientSpawnError, transientBackoff, readLaneEnvFileFromDiskSync, getGitRepositoryStatus, isGitRepo, getDefaultBaseBranch, detectDefaultRemoteBranch, resetToRemoteBranch, resetToMainAfterMerge, isStateUnreadable, loadEpicSessionState, isEpicModeActive, enableEpicMode, disableEpicMode, pathsConflict, isGlobalFile, isProtectedPath, readTaskScopes, loadPlanJsonOnly, loadPlan, withPlanLifecycleLock, savePlan, closePlanTerminalState, updateTaskStatus, derivePlanMarkdown, isValidEvidenceType, isSecretscanEvidence, sanitizeTaskId2 as sanitizeTaskId, validateProjectRoot, saveEvidence, loadEvidence, listEvidenceTaskIds, checkRequirementCoverage, archiveEvidence, _internals7 as _internals, readDurableGateEvidence, getDurableGateEvidenceStatus, getDurableGateEvidenceStatusForTask, mergeDurableGateEntriesFromEvidence };

package/dist/cli/{index-wfh89qct.js → index-66tshqdp.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-0caqxnby.js";
+} from "./index-hydccmm1.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,13 +9,13 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-r60cw2jt.js";
+} from "./index-j8warkkj.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-95e3a9en.js";
+} from "./index-jzrx2sx2.js";
 import {
   atomicWriteFile
-} from "./index-evxd1art.js";
+} from "./index-yf1mvexg.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-e7yv4xw1.js → index-93z2fhyp.js}

@@ -2,14 +2,14 @@
 import {
   init_loader,
   loadPluginConfigWithMeta
-} from "./index-5a8q4qr5.js";
+} from "./index-zcjdw8dw.js";
 import {
   init_schema
-} from "./index-q2yk70rs.js";
+} from "./index-twpzfwga.js";
 import {
   DEFAULT_WORKTREE_ISOLATION_CONFIG,
   init_constants
-} from "./index-sxt7fgcw.js";
+} from "./index-ecaws78e.js";
 
 // src/config/index.ts
 init_constants();

package/dist/cli/{index-6k5aq7b9.js → index-9bg5vc22.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   observeStoreHealth
-} from "./index-nfs78aqj.js";
+} from "./index-gdrdtbw6.js";
 import {
   telemetry
-} from "./index-9dz2ee2g.js";
+} from "./index-jmn35na4.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-g6nen3gt.js → index-9p00xent.js}

@@ -4,7 +4,7 @@ import {
   getProjectDb,
   projectDbExists,
   withImmediateTransaction
-} from "./index-yqbnsmmv.js";
+} from "./index-bdqefjxg.js";
 
 // src/db/coordination-store.ts
 import { createHash } from "crypto";

package/dist/cli/{index-yqbnsmmv.js → index-bdqefjxg.js}

@@ -7,7 +7,7 @@ import {
 } from "./index-ry16d01s.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-nbdmdyke.js";
+} from "./index-ws3ggk1h.js";
 import {
   canonicalRootKeyFresh,
   lexicalRootAliasKey