opencode-swarm 7.178.0 → 7.178.1

package/dist/memory/index.d.ts

@@ -10,6 +10,7 @@ export { createMemoryLifecycleHooks, type MemoryLifecycleHookOptions, type Memor
 export { backupLegacyJsonl, getLegacyJsonlFileStatus, getLegacyOutcomeJsonlSignature, type JsonlBackupResult, type JsonlImportPayload, type JsonlInvalidRow, type JsonlMigrationReport, LEGACY_JSONL_MIGRATION_NAME, LEGACY_JSONL_MIGRATION_VERSION, LEGACY_JSONL_OUTCOME_META_KEY, readLegacyJsonl, readMigrationReport, resolveMemoryStorageDir, resolveSqliteDatabasePath, writeJsonlExport, writeMigrationReport, } from './jsonl-migration';
 export { LocalJsonlMemoryProvider } from './local-jsonl-provider';
 export { buildMemoryMaintenanceReport, type MemoryMaintenanceReport, type MemoryMaintenanceReportOptions, type MemoryRecallUsageByMemory, type MemoryRecallUsageByRole, type MemorySupersededChain, shouldCompactMemory, } from './maintenance';
+export { MemoryMigrationLockError } from './memory-family-migration';
 export { invalidateMemoryStoreDirCache, isMemoryLinked, MEMORY_LINK_POINTER_FILENAME, type MemoryLinkPointer, readMemoryLinkPointer, removeMemoryLinkPointer, resolveMemoryStoreDir, writeMemoryLinkPointer, } from './memory-link';
 export type { MemoryOutcomeEvent } from './outcome-events';
 export { computePiiScore, createPiiDetector, type PiiDetector, type PiiFinding, type PiiType, RegexPiiDetector, summarizePiiFindings, } from './pii';

package/dist/memory/memory-family-migration.d.ts

@@ -18,15 +18,46 @@
  * (`handleMemoryLinkCommand`), so a mid-migration failure leaves the worktree
  * in its prior link state and a retry is idempotent.
  *
- * Lock discipline: `proper-lockfile` on the destination cohort dir with a
- * bumped `stale` (30s) for the migration critical section — reused from the
- * knowledge family so there is one source of truth for the lock config.
+ * Lock discipline: `proper-lockfile` on the destination storage dir (cohort
+ * OR local — both directions) with a bumped `stale` (30s) for the migration
+ * critical section — reused from the knowledge family so there is one source
+ * of truth for the lock config. `realpath: false` keeps the lock identity on
+ * the literal path so it is the SAME lock the local JSONL provider takes on
+ * this directory (PRR-U1): symlinked roots (e.g. macOS /var → /private/var)
+ * must not split the exclusion into two identities.
+ * Admission is fail-closed (#2577): if the destination lock cannot be
+ * acquired (a legitimate concurrent writer holds it, or acquisition fails for
+ * a storage reason), the migration throws a typed
+ * {@link MemoryMigrationLockError} and never runs unlocked.
  *
  * No writes happen here on the plugin-init path (invariant 1). Called only
  * from the `/swarm memory link` / `/swarm memory unlink` command handlers.
  */
 import { type MemoryOutcomeEvent } from './outcome-events.js';
 import type { VettedMemoryRoot } from './storage-root.js';
+/**
+ * Minimal typing for the async `proper-lockfile` API this engine uses,
+ * exposed through {@link _internals} so tests can classify acquisition
+ * failures deterministically (same DI pattern as `src/full-auto/state.ts`).
+ */
+type MigrationLockFile = {
+    lock: typeof import('proper-lockfile')['lock'];
+};
+/** Failure category for destination-lock admission (#2577, #2575 contract). */
+export type MemoryMigrationLockErrorCategory = 'contention' | 'storage';
+/**
+ * Typed failure for acquiring the destination migration lock. Thrown BEFORE
+ * the merge loop opens, so no destination or source write ever happens on a
+ * failed admission. Mirrors `FullAutoStateLockError` in
+ * `src/full-auto/state.ts` (#2575): stable category + code, cause preserved
+ * for diagnostics, and messages that never echo absolute host paths.
+ */
+export declare class MemoryMigrationLockError extends Error {
+    readonly category: MemoryMigrationLockErrorCategory;
+    readonly cause: unknown;
+    readonly code: `MEMORY_MIGRATION_LOCK_${Uppercase<MemoryMigrationLockErrorCategory>}`;
+    constructor(category: MemoryMigrationLockErrorCategory, message: string, cause?: unknown);
+}
 export interface MemoryFamilyMigrationCounts {
     readonly perMember: ReadonlyArray<{
         filename: string;
@@ -102,5 +133,6 @@ export declare const _internals: {
     stageSqliteDb: typeof stageSqliteDb;
     mergeStagedSqlite: typeof mergeStagedSqlite;
     countRowsSafe: typeof countRowsSafe;
+    lockfile: MigrationLockFile;
 };
 export {};

package/dist/plan/ledger.d.ts

@@ -163,6 +163,20 @@ export declare function computePlanLedgerHash(plan: Plan): string;
  * any structural change (description, acceptance, dependencies, files, added
  * or removed tasks/phases) always must.
  *
+ * DELIBERATE exception, recorded with #2532 (PLAN-4): `current_phase` — the
+ * execution cursor — IS included in this hash (and in
+ * {@link computePlanLedgerHash}). Unlike task/phase statuses, a cursor
+ * advance therefore DOES change the baseline hash: bindings and approved
+ * snapshots declared against the pre-advance plan stop matching, exactly as
+ * they already do for any save_plan revision. This is intentional — the
+ * hash bytes are persisted on every live binding (`planStructureHash`,
+ * verified with strict equality) and every critic-approved snapshot
+ * (`payload_hash`), so changing the normalization would silently invalidate
+ * all pre-existing state at upgrade. The bounded safety property: only a
+ * phase-boundary advancement moves the cursor (task-status churn inside a
+ * phase is hash-excluded), so mid-phase parallel siblings keep their
+ * bindings across ordinary task completion.
+ *
  * This mirrors {@link computePlanLedgerHash}'s normalization byte-for-byte
  * EXCEPT it omits the two status fields from the hashed payload. The two
  * functions are deliberately distinct: {@link computePlanLedgerHash} is

package/dist/plan/manager.d.ts

@@ -44,7 +44,6 @@ import { getWorktreeMergeFailure } from '../hooks/delegation-gate/worktree-merge
 import { recordTaskAttempt } from '../services/run-memory.js';
 import { isEpicModeActiveForProject } from '../turbo/epic/state.js';
 import { commitTaskCompletion } from '../turbo/epic/task-commit.js';
-import { readTaskScopes } from '../turbo/lean/conflicts.js';
 import { type LedgerEvent, type LedgerEventInput, ledgerExists, loadLastApprovedPlan, readLedgerEventsWithIntegrity, replayFromLedger, takeSnapshotWithRetry } from './ledger';
 /** Reset the startup ledger check flag. For testing only. */
 export declare function resetStartupLedgerCheck(): void;
@@ -69,7 +68,6 @@ export declare const _internals: {
     regeneratePlanMarkdown: typeof regeneratePlanMarkdown;
     isGitRepo: typeof isGitRepo;
     isEpicModeActiveForProject: typeof isEpicModeActiveForProject;
-    readTaskScopes: typeof readTaskScopes;
     commitTaskCompletion: typeof commitTaskCompletion;
     getWorktreeMergeFailure: typeof getWorktreeMergeFailure;
     recordTaskAttempt: typeof recordTaskAttempt;

package/dist/plan/parallel-verdict.d.ts

@@ -1,7 +1,7 @@
 /**
  * Plan-time parallel-execution verdict helper (#1656 / #1674 v8 flagship).
  *
- * Pure, synchronous, side-effect-free pairwise conflict analysis for N proposed
+ * Pure, side-effect-free pairwise conflict analysis for N proposed
  * parallel task groups. Used by BOTH:
  *   - the `plan_conflict_check` tool (architect-facing advisory — see
  *     `src/tools/plan-conflict-check.ts`), and
@@ -14,23 +14,30 @@
  * means.
  *
  * Design notes:
- *  - Sync by design: it reads only `.swarm/scopes/scope-<taskId>.json` via
- *    the hardened persisted-scope reader (sync + fail-closed). The gate runs in
- *    `toolBefore` on every tool call and must stay bounded; an async/gitten
- *    helper would violate the bounded-gate spirit.
+ *  - Sync by design: it reads only the authoritative v2 scope-binding store
+ *    (the same authority `declare_scope` writes) via the hardened
+ *    fail-closed readers. The gate runs in `toolBefore` on every tool call
+ *    and must stay bounded; an async helper would violate the bounded-gate
+ *    spirit. One binding-set scan is hoisted per verdict, never per task.
+ *  - #2532 (PARALLEL-4): scope resolution deliberately does NOT consult the
+ *    legacy v1 `.swarm/scopes/scope-<taskId>.json` projection — no production
+ *    code writes it in the project root (its one writer targets lane
+ *    worktrees), so v2-declared disjoint scopes used to be reported as
+ *    `unknown_scopes` and parallel-first could never engage.
  *  - The helper itself NEVER calls `getCoChangePairs` (async + `git log`).
  *    Co-change signal is opt-in and supplied by the caller (the tool) via
  *    `options.cochangePairs`. The gate never supplies it, keeping the
  *    enforcement path git-free and fast.
- *  - Fail-closed: a missing/malformed scope → `unknown_scope`, which conflicts
- *    with everything, so `verdict` can never be `all_disjoint` while any task
- *    lacks a declared scope. This is the v8 safety guarantee.
+ *  - Fail-closed: a task with no single live exact-plan v2 binding →
+ *    `unknown`, which conflicts with everything, so `verdict` can never be
+ *    `all_disjoint` while any task lacks a declared scope. This is the v8
+ *    safety guarantee.
  *  - Writes nothing. Honors issue #1656's "read-only (writes nothing)" tool
  *    acceptance criterion.
  */
+import { type Plan } from '../config/plan-schema.js';
 import type { CoChangeEntry } from '../tools/co-change-analyzer.js';
 import { type CoChangeThreshold } from '../turbo/epic/cochange-conflict.js';
-import { normalizePath, pathsConflict, readTaskScopes } from '../turbo/lean/conflicts.js';
 /**
  * Per-pair conflict classification. Mirrors `EpicPairVerdict`'s signal
  * decomposition but flattens `none` into `disjoint` for the plan-level view.
@@ -70,14 +77,22 @@ export interface ComputeParallelVerdictOptions {
     cochangePairs?: CoChangeEntry[];
     /** Override the co-change threshold. Defaults to `DEFAULT_PARALLEL_COCHANGE_THRESHOLD`. */
     cochangeThreshold?: CoChangeThreshold;
+    /**
+     * The plan the verdict is computed against (issue #2532). Bindings must
+     * match its exact identity (`planId` + `planStructureHash`). When omitted,
+     * the helper synchronously reads `<directory>/.swarm/plan.json`; a missing
+     * or unparseable plan resolves every task to `unknown` (fail-closed).
+     */
+    plan?: Plan;
 }
 /**
  * Compute a pairwise conflict verdict for the given task ids.
  *
- * Pure + synchronous. Reads only `.swarm/scopes/`. Writes nothing. Fail-closed
- * on any read/parse error (treats the task as `unknown`).
+ * Pure + synchronous. Reads only the authoritative v2 binding store (plus a
+ * bounded plan.json read when `options.plan` is omitted). Writes nothing.
+ * Fail-closed on any read/parse error (treats the task as `unknown`).
  *
- * @param directory  Project root (for `.swarm/scopes/` reads).
+ * @param directory  Project root (for the binding store and plan.json reads).
  * @param taskIds    Task ids to analyze. Caller is responsible for min-length
  *                   validation (the tool requires ≥2; the gate only calls this
  *                   with ≥2 pending tasks).
@@ -90,5 +105,4 @@ export declare function computeParallelVerdict(directory: string, taskIds: strin
  * Equivalent to `computeParallelVerdict(...).verdict === 'all_disjoint'` but
  * exposed as a named predicate so the gate reads as intent.
  */
-export declare function isProvablyDisjoint(directory: string, taskIds: string[]): boolean;
-export { normalizePath, pathsConflict, readTaskScopes };
+export declare function isProvablyDisjoint(directory: string, taskIds: string[], options?: ComputeParallelVerdictOptions): boolean;

package/dist/scope/scope-persistence.d.ts

@@ -117,6 +117,47 @@ export declare function readScopeBindingFromDisk(input: {
     requireDispatchCorrelation?: boolean;
     requireDeclaration?: boolean;
 }): ScopeBinding | null;
+/**
+ * Resolve the currently-declared scope FILES for a task from the authoritative
+ * v2 binding store (issue #2532 / PARALLEL-4).
+ *
+ * Scheduling/conflict consumers (the v8 parallel verdict, Rule-2 auto-commit)
+ * must resolve task scopes from the same authority `declare_scope` writes —
+ * never from the legacy v1 `scope-<taskId>.json` projection, which no
+ * production code writes in the project root. This is a scheduling read, NOT
+ * write authorization: it deliberately does not require owner-session or
+ * dispatch correlation, but it DOES require an exact `planStructureHash`
+ * match so a declaration made against an older plan revision cannot certify
+ * disjointness for the current one.
+ *
+ * Fail-closed: zero live candidates (undeclared or store failure), live
+ * candidates that DISAGREE on the file set, or an empty file list all return
+ * `null`, which callers treat as "unknown scope" → serial. Multiple live
+ * candidates that AGREE on the exact same file set are NOT ambiguous: the
+ * delegation gate mints a dispatch-correlated binding (activation 'active',
+ * child owner) alongside the architect's declaration binding for the same
+ * task with the same files, and the scheduling question — "what is this
+ * task's currently-declared scope?" — has one answer whenever they agree.
+ *
+ * `bindingSet` lets a multi-task caller hoist ONE
+ * `readAllAuthoritativeScopeBindings` scan for the whole verdict (pass the
+ * result of {@link readAuthoritativeScopeBindingSet}); omit it for a
+ * single-task read.
+ */
+export declare function readDeclaredScopeFilesFromBindings(input: {
+    directory: string;
+    taskId: string;
+    plan: Plan;
+    bindingSet?: ScopeBinding[] | null;
+}): string[] | null;
+/**
+ * Hoisted single read of the authoritative v2 binding set for multi-task
+ * scheduling consumers (issue #2532): one bounded scan shared by every
+ * per-task {@link readDeclaredScopeFilesFromBindings} call in a verdict.
+ * Returns `null` when the store is unreadable/overloaded so callers fail
+ * closed to "unknown scope" per task.
+ */
+export declare function readAuthoritativeScopeBindingSet(directory: string): ScopeBinding[] | null;
 export declare function resolveScopeBindingFromDisk(input: {
     directory: string;
     taskId: string;

package/dist/tools/plan-conflict-check.d.ts

@@ -7,10 +7,10 @@
  *
  * READ-ONLY CONTRACT (issue #1656 acceptance): this tool writes NOTHING — not
  * to `.swarm/`, not to the source tree. It calls no other tools. The only I/O
- * is reading `.swarm/plan.json` (via `loadPlanJsonOnly`) and
- * `.swarm/scopes/scope-<taskId>.json` (via `readTaskScopes` inside
- * `computeParallelVerdict`), plus an optional `git log` (only when the caller
- * opts in via `use_cochange: true`).
+ * is reading `.swarm/plan.json` (via `loadPlanJsonOnly`) and the
+ * authoritative v2 scope-binding store (via `readDeclaredScopeFilesFromBindings`
+ * inside `computeParallelVerdict`, #2532), plus an optional `git log` (only
+ * when the caller opts in via `use_cochange: true`).
  *
  * Why this tool exists alongside the gate: the gate (`delegation-gate.ts`)
  * independently recomputes the verdict INLINE at coder-dispatch time via the
@@ -50,8 +50,9 @@ export interface PlanConflictCheckResult {
 /**
  * Pure executor (no createSwarmTool wrapper) so it is directly unit-testable.
  *
- * Reads `.swarm/plan.json` (to confirm the task ids exist) and
- * `.swarm/scopes/scope-*.json` (via `computeParallelVerdict`). Writes nothing.
+ * Reads `.swarm/plan.json` (to confirm the task ids exist) and the
+ * authoritative v2 scope-binding store (via `computeParallelVerdict`,
+ * #2532). Writes nothing.
  */
 export declare function executePlanConflictCheck(args: {
     task_ids: string[];

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.178.0",
+	"version": "7.178.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-qhhxev17.js

@@ -1,72 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-heg4em8j.js";
-import"./index-hnvmj9wx.js";
-import"./index-q9vb5e7n.js";
-import"./index-qs8eth8h.js";
-import"./index-bfz1jvcn.js";
-import"./index-vfc7d22n.js";
-import"./index-jzxeymr0.js";
-import"./index-mpcp6rmj.js";
-import"./index-txdagbh7.js";
-import"./index-n1tcj1q7.js";
-import"./index-6b295cas.js";
-import"./index-zsm8h8y1.js";
-import"./index-at0ygwwp.js";
-import"./index-zex7644g.js";
-import"./index-fyfbpz4f.js";
-import"./index-y74n1sy8.js";
-import"./index-549wxbe1.js";
-import"./index-zsrtt42s.js";
-import"./index-wkde35ej.js";
-import"./index-pm7c6f66.js";
-import"./index-2b1whj28.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-kfk403mc.js";
-import"./index-p27az2hc.js";
-import"./index-rp0jk48x.js";
-import"./index-29begjkp.js";
-import"./index-zmb8fjp5.js";
-import"./index-2s7dvzff.js";
-import"./index-d5dexrv1.js";
-import"./index-ffqy30e5.js";
-import"./index-rtry5xyf.js";
-import"./index-2vhkwy6v.js";
-import"./index-frcemc0b.js";
-import"./index-wrt875kh.js";
-import"./index-gg44hytk.js";
-import"./index-ke3m026z.js";
-import"./index-j1v54ahd.js";
-import"./index-y6a2bkp1.js";
-import"./index-w4yjy3vp.js";
-import"./index-tnjmn0dn.js";
-import"./index-rdm3px0g.js";
-import"./index-ry16d01s.js";
-import"./index-yeh78c1g.js";
-import"./index-2mdk6nt9.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-yj1kr0ft.js";
-import"./index-j3rkh9mp.js";
-import"./index-7g4c7s5r.js";
-import"./index-wfbh1bx8.js";
-import"./index-zsp9de3k.js";
-import"./index-1xnse449.js";
-import"./index-c1ggtmpm.js";
-import"./index-18hjycr1.js";
-import"./index-zz7gzw57.js";
-import"./index-4ddpvd5c.js";
-import"./index-wbkxbgk8.js";
-import"./index-m2n1rhgv.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-wvghb3x6.js";
-import"./index-9rwhas09.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-kvgejh24.js

@@ -1,73 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-azy3tw6c.js";
-import"./index-heg4em8j.js";
-import"./index-hnvmj9wx.js";
-import"./index-q9vb5e7n.js";
-import"./index-qs8eth8h.js";
-import"./index-bfz1jvcn.js";
-import"./index-vfc7d22n.js";
-import"./index-jzxeymr0.js";
-import"./index-mpcp6rmj.js";
-import"./index-txdagbh7.js";
-import"./index-n1tcj1q7.js";
-import"./index-6b295cas.js";
-import"./index-zsm8h8y1.js";
-import"./index-at0ygwwp.js";
-import"./index-zex7644g.js";
-import"./index-fyfbpz4f.js";
-import"./index-y74n1sy8.js";
-import"./index-549wxbe1.js";
-import"./index-zsrtt42s.js";
-import"./index-wkde35ej.js";
-import"./index-pm7c6f66.js";
-import"./index-2b1whj28.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-kfk403mc.js";
-import"./index-p27az2hc.js";
-import"./index-rp0jk48x.js";
-import"./index-29begjkp.js";
-import"./index-zmb8fjp5.js";
-import"./index-2s7dvzff.js";
-import"./index-d5dexrv1.js";
-import"./index-ffqy30e5.js";
-import"./index-rtry5xyf.js";
-import"./index-2vhkwy6v.js";
-import"./index-frcemc0b.js";
-import"./index-wrt875kh.js";
-import"./index-gg44hytk.js";
-import"./index-ke3m026z.js";
-import"./index-j1v54ahd.js";
-import"./index-y6a2bkp1.js";
-import"./index-w4yjy3vp.js";
-import"./index-tnjmn0dn.js";
-import"./index-rdm3px0g.js";
-import"./index-ry16d01s.js";
-import"./index-yeh78c1g.js";
-import"./index-2mdk6nt9.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-yj1kr0ft.js";
-import"./index-j3rkh9mp.js";
-import"./index-7g4c7s5r.js";
-import"./index-wfbh1bx8.js";
-import"./index-zsp9de3k.js";
-import"./index-1xnse449.js";
-import"./index-c1ggtmpm.js";
-import"./index-18hjycr1.js";
-import"./index-zz7gzw57.js";
-import"./index-4ddpvd5c.js";
-import"./index-wbkxbgk8.js";
-import"./index-m2n1rhgv.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-wvghb3x6.js";
-import"./index-9rwhas09.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};