opencode-swarm 7.184.0 → 7.184.2

package/dist/cli/{index-6h81yvyc.js → index-131ay7x1.js}

@@ -1,17 +1,17 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-nmh0s6dg.js";
+} from "./index-wy3zpwjy.js";
 import {
   bunSpawn
 } from "./index-2s7dvzff.js";
 import {
   canonicalRootKey,
   sameProjectRoot
-} from "./index-1xnse449.js";
+} from "./index-mc72pk74.js";
 import {
   atomicWriteSwarmFile
-} from "./index-5cve9g2b.js";
+} from "./index-k53a69vb.js";
 import {
   init_git_executable,
   resolveGitExecutable

package/dist/cli/{index-rwfmx7vn.js → index-1v13c6r0.js}

@@ -14,14 +14,14 @@ import {
   detectWindowsWrites,
   getSharedClassifierGuardrailBlock,
   resolveWriteTargets
-} from "./index-9yvjwfay.js";
+} from "./index-2wn8ww1e.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-pq6vr26z.js";
+} from "./index-rpsmx4ke.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-ad3yskxy.js → index-279xp2be.js}

@@ -2,23 +2,25 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-4gr9pj67.js";
+} from "./index-rp6sfpwp.js";
 import {
   validateSwarmPath
-} from "./index-nmh0s6dg.js";
+} from "./index-wy3zpwjy.js";
 import {
   bunSpawn,
   classifySpawnFailure
 } from "./index-2s7dvzff.js";
 import {
-  assertProjectRoot,
   atomicWriteFile,
   taskEvidencePath,
   withTaskEvidenceLock
-} from "./index-01wt209s.js";
+} from "./index-xf69xty9.js";
+import {
+  assertProjectRoot
+} from "./index-t7hmqgjy.js";
 import {
   telemetry
-} from "./index-fbhtb6f5.js";
+} from "./index-x1gyqgze.js";
 import {
   advisoryWarn,
   init_git_executable,
@@ -40,7 +42,7 @@ import {
 
 // src/gate-evidence.ts
 init_zod();
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, realpathSync as realpathSync2 } from "fs";
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, realpathSync as realpathSync2, statSync as statSync2 } from "fs";
 import * as path4 from "path";
 
 // src/evidence/task-gate-requirements.ts
@@ -1487,7 +1489,7 @@ function parseCoderSettlementWal(raw, filePath, expectedTaskId) {
   const baseline = context?.baseline;
   const worktree = parsed.worktree;
   const provenance = parsed.mergeProvenance;
-  if (parsed.version !== 1 || !["ABORTED", "COMMITTED", "DISPATCHED", "PREPARED"].includes(String(parsed.state)) || typeof parsed.taskId !== "string" || !TASK_ID_PATTERN.test(parsed.taskId) || typeof parsed.transitionId !== "string" || parsed.transitionId.length === 0 || parsed.transitionId.length > 512 || typeof parsed.actor !== "string" || parsed.actor.length === 0 || parsed.actor.length > 512 || !Number.isInteger(parsed.processId) || (parsed.processId ?? 0) <= 0 || typeof parsed.runtimeId !== "string" || parsed.runtimeId.length === 0 || !Number.isInteger(parsed.expectedGeneration) || (parsed.expectedGeneration ?? -1) < 0 || !context || !baseline || typeof baseline.directory !== "string" || baseline.directory.length === 0 || baseline.directory.length > 4096 || typeof baseline.gitHead !== "string" && baseline.gitHead !== null || typeof baseline.dirtyHash !== "string" && baseline.dirtyHash !== null || typeof baseline.prHeadSha !== "string" && baseline.prHeadSha !== null || typeof baseline.scope !== "string" && baseline.scope !== null || !Array.isArray(baseline.changedFiles) && baseline.changedFiles !== null && baseline.changedFiles !== undefined || Array.isArray(baseline.changedFiles) && (baseline.changedFiles.length > 50000 || baseline.changedFiles.some((candidatePath) => typeof candidatePath !== "string" || candidatePath.length > 4096)) || !Array.isArray(context.declaredFiles) && context.declaredFiles !== null || Array.isArray(context.declaredFiles) && (context.declaredFiles.length > 50000 || context.declaredFiles.some((candidatePath) => typeof candidatePath !== "string" || candidatePath.length > 4096)) || parsed.observedFiles !== undefined && (!Array.isArray(parsed.observedFiles) || parsed.observedFiles.length > 50000 || parsed.observedFiles.some((candidatePath) => typeof candidatePath !== "string" || candidatePath.length > 4096 || !isPathWithinDeclaredScope(candidatePath, context.declaredFiles ?? [], baseline.directory))) || worktree !== undefined && (typeof worktree.callID !== "string" || typeof worktree.parentSessionId !== "string" || typeof worktree.taskId !== "string" || worktree.taskId !== parsed.taskId || !isSafeWorktreePath(worktree.worktreePath) || !isSafeGitBranchName(worktree.branchName) || typeof worktree.worktreeId !== "string" || typeof worktree.worktreeSessionId !== "string" || !["merge", "rebase", "cherry-pick"].includes(String(worktree.mergeStrategy)) || !Number.isInteger(worktree.laneIndex)) || provenance !== undefined && (typeof provenance.operationId !== "string" || provenance.operationId !== parsed.transitionId || typeof provenance.sourceHead !== "string" || !GIT_OBJECT_ID_PATTERN.test(provenance.sourceHead) || typeof provenance.targetHeadBefore !== "string" || !GIT_OBJECT_ID_PATTERN.test(provenance.targetHeadBefore) || !isSafeGitBranchName(provenance.branchName) || worktree !== undefined && (provenance.branchName !== worktree.branchName || provenance.strategy !== worktree.mergeStrategy) || !["merge", "rebase", "cherry-pick"].includes(String(provenance.strategy))) || typeof parsed.recordedAt !== "string" || parsed.state === "PREPARED" && typeof parsed.accepted !== "boolean" || parsed.cleanupComplete !== undefined && typeof parsed.cleanupComplete !== "boolean" || parsed.settlementFailed !== undefined && typeof parsed.settlementFailed !== "boolean" || parsed.abortReason !== undefined && (typeof parsed.abortReason !== "string" || parsed.abortReason.length === 0 || parsed.abortReason.length > 512)) {
+  if (parsed.version !== 1 || !["ABORTED", "COMMITTED", "DISPATCHED", "PREPARED"].includes(String(parsed.state)) || typeof parsed.taskId !== "string" || !TASK_ID_PATTERN.test(parsed.taskId) || typeof parsed.transitionId !== "string" || parsed.transitionId.length === 0 || parsed.transitionId.length > 512 || typeof parsed.actor !== "string" || parsed.actor.length === 0 || parsed.actor.length > 512 || !Number.isInteger(parsed.processId) || (parsed.processId ?? 0) <= 0 || typeof parsed.runtimeId !== "string" || parsed.runtimeId.length === 0 || !Number.isInteger(parsed.expectedGeneration) || (parsed.expectedGeneration ?? -1) < 0 || !context || !baseline || typeof baseline.directory !== "string" || baseline.directory.length === 0 || baseline.directory.length > 4096 || typeof baseline.gitHead !== "string" && baseline.gitHead !== null || typeof baseline.dirtyHash !== "string" && baseline.dirtyHash !== null || typeof baseline.prHeadSha !== "string" && baseline.prHeadSha !== null || typeof baseline.scope !== "string" && baseline.scope !== null || !Array.isArray(baseline.changedFiles) && baseline.changedFiles !== null && baseline.changedFiles !== undefined || Array.isArray(baseline.changedFiles) && (baseline.changedFiles.length > 50000 || baseline.changedFiles.some((candidatePath) => typeof candidatePath !== "string" || candidatePath.length > 4096)) || !Array.isArray(context.declaredFiles) && context.declaredFiles !== null || Array.isArray(context.declaredFiles) && (context.declaredFiles.length > 50000 || context.declaredFiles.some((candidatePath) => typeof candidatePath !== "string" || candidatePath.length > 4096)) || parsed.observedFiles !== undefined && (!Array.isArray(parsed.observedFiles) || parsed.observedFiles.length > 50000 || parsed.observedFiles.some((candidatePath) => typeof candidatePath !== "string" || candidatePath.length > 4096 || Array.isArray(context.declaredFiles) && context.declaredFiles.length > 0 && !isPathWithinDeclaredScope(candidatePath, context.declaredFiles, baseline.directory))) || worktree !== undefined && (typeof worktree.callID !== "string" || typeof worktree.parentSessionId !== "string" || typeof worktree.taskId !== "string" || worktree.taskId !== parsed.taskId || !isSafeWorktreePath(worktree.worktreePath) || !isSafeGitBranchName(worktree.branchName) || typeof worktree.worktreeId !== "string" || typeof worktree.worktreeSessionId !== "string" || !["merge", "rebase", "cherry-pick"].includes(String(worktree.mergeStrategy)) || !Number.isInteger(worktree.laneIndex)) || provenance !== undefined && (typeof provenance.operationId !== "string" || provenance.operationId !== parsed.transitionId || typeof provenance.sourceHead !== "string" || !GIT_OBJECT_ID_PATTERN.test(provenance.sourceHead) || typeof provenance.targetHeadBefore !== "string" || !GIT_OBJECT_ID_PATTERN.test(provenance.targetHeadBefore) || !isSafeGitBranchName(provenance.branchName) || worktree !== undefined && (provenance.branchName !== worktree.branchName || provenance.strategy !== worktree.mergeStrategy) || !["merge", "rebase", "cherry-pick"].includes(String(provenance.strategy))) || typeof parsed.recordedAt !== "string" || parsed.state === "PREPARED" && typeof parsed.accepted !== "boolean" || parsed.cleanupComplete !== undefined && typeof parsed.cleanupComplete !== "boolean" || parsed.settlementFailed !== undefined && typeof parsed.settlementFailed !== "boolean" || parsed.abortReason !== undefined && (typeof parsed.abortReason !== "string" || parsed.abortReason.length === 0 || parsed.abortReason.length > 512)) {
     formatUnreadableMessage("CODER_SETTLEMENT_WAL_UNREADABLE", filePath, "is not a valid v1 coder-settlement WAL", "Preserve this file, reconcile the task lane, and only then move it aside.");
   }
   if (expectedTaskId && parsed.taskId !== expectedTaskId) {
@@ -1507,7 +1509,7 @@ function parseTaskRepairWal(raw, filePath, expectedTaskId) {
 }
 function parseTaskTerminalWal(raw, filePath, expectedTaskId) {
   const parsed = parseWalObject(raw, filePath, "TASK_TERMINAL_WAL_UNREADABLE", "Preserve this file and reconcile the task terminal transition before moving it aside.");
-  if (parsed.version !== 1 && parsed.version !== 2 || parsed.state !== "PREPARED" && parsed.state !== "COMMITTED" && parsed.state !== "ABORTED" || typeof parsed.taskId !== "string" || !TASK_ID_PATTERN.test(parsed.taskId) || typeof parsed.transitionId !== "string" || parsed.transitionId.length === 0 || parsed.transitionId.length > 512 || typeof parsed.actor !== "string" || parsed.actor.length === 0 || parsed.actor.length > 512 || typeof parsed.oldPlanStatus !== "string" || parsed.oldPlanStatus.length === 0 || parsed.oldPlanStatus.length > 128 || parsed.newPlanStatus !== "completed" && parsed.newPlanStatus !== "blocked" && parsed.newPlanStatus !== "closed" || typeof parsed.oldWorkflowState !== "string" || !WORKFLOW_STATES.has(parsed.oldWorkflowState) || parsed.newWorkflowState !== "complete" && parsed.newWorkflowState !== "blocked" && parsed.newWorkflowState !== "closed" || !Number.isInteger(parsed.generation) || (parsed.generation ?? -1) < 0 || typeof parsed.qaExempt !== "boolean" || typeof parsed.recordedAt !== "string" || !Number.isFinite(Date.parse(parsed.recordedAt))) {
+  if (parsed.version !== 1 && parsed.version !== 2 || parsed.state !== "PREPARED" && parsed.state !== "COMMITTED" && parsed.state !== "ABORTED" || typeof parsed.taskId !== "string" || !TASK_ID_PATTERN.test(parsed.taskId) || typeof parsed.transitionId !== "string" || parsed.transitionId.length === 0 || parsed.transitionId.length > 512 || typeof parsed.actor !== "string" || parsed.actor.length === 0 || parsed.actor.length > 512 || typeof parsed.oldPlanStatus !== "string" || parsed.oldPlanStatus.length === 0 || parsed.oldPlanStatus.length > 128 || parsed.newPlanStatus !== "completed" && parsed.newPlanStatus !== "blocked" && parsed.newPlanStatus !== "closed" || typeof parsed.oldWorkflowState !== "string" || !WORKFLOW_STATES.has(parsed.oldWorkflowState) || parsed.newWorkflowState !== "complete" && parsed.newWorkflowState !== "blocked" && parsed.newWorkflowState !== "closed" || !Number.isInteger(parsed.generation) || (parsed.generation ?? -1) < 0 || typeof parsed.qaExempt !== "boolean" || parsed.readOnlyNoMutation !== undefined && typeof parsed.readOnlyNoMutation !== "boolean" || typeof parsed.recordedAt !== "string" || !Number.isFinite(Date.parse(parsed.recordedAt))) {
     formatUnreadableMessage("TASK_TERMINAL_WAL_UNREADABLE", filePath, "is not a valid terminal WAL", "Preserve this file and reconcile the task terminal transition before moving it aside.");
   }
   if (parsed.version === 2 && (typeof parsed.planIdentityHash !== "string" || !SHA256_PATTERN.test(parsed.planIdentityHash) || typeof parsed.planEpoch !== "string" || !UUID_PATTERN.test(parsed.planEpoch))) {
@@ -1516,6 +1518,9 @@ function parseTaskTerminalWal(raw, filePath, expectedTaskId) {
   if (parsed.version === 1 && (parsed.newPlanStatus === "closed" || parsed.newWorkflowState === "closed")) {
     formatUnreadableMessage("TASK_TERMINAL_WAL_UNREADABLE", filePath, "claims a closed transition in a legacy v1 terminal WAL", "Preserve this file and reconcile the task terminal transition before moving it aside.");
   }
+  if (parsed.readOnlyNoMutation === true && (parsed.newPlanStatus !== "completed" || parsed.newWorkflowState !== "complete" || parsed.generation !== 0 || parsed.qaExempt !== false)) {
+    throw new Error(`TASK_TERMINAL_WAL_STATE_MISMATCH: ${filePath} claims read-only no-mutation completion outside generation 0`);
+  }
   if (!(parsed.newPlanStatus === "completed" && parsed.newWorkflowState === "complete" || parsed.newPlanStatus === "blocked" && parsed.newWorkflowState === "blocked" || parsed.newPlanStatus === "closed" && parsed.newWorkflowState === "closed")) {
     throw new Error(`TASK_TERMINAL_WAL_STATE_MISMATCH: ${filePath} encodes ${String(parsed.newPlanStatus)} -> ${String(parsed.newWorkflowState)}`);
   }
@@ -1746,6 +1751,43 @@ var TASK_WORKFLOW_OUTCOMES = [
   "task_closed",
   "repair_idle"
 ];
+var MAX_PLAN_SCOPE_INSPECTION_BYTES = 4 * 1024 * 1024;
+function readCurrentTaskDeclaredFiles(directory, taskId) {
+  try {
+    const planPath = validateSwarmPath(directory, "plan.json");
+    const stat = statSync2(planPath);
+    if (!stat.isFile() || stat.size > MAX_PLAN_SCOPE_INSPECTION_BYTES) {
+      return null;
+    }
+    const parsed = JSON.parse(readFileSync3(planPath, "utf8"));
+    if (!Array.isArray(parsed.phases))
+      return null;
+    let declaredFiles = null;
+    for (const phase of parsed.phases) {
+      if (!phase || typeof phase !== "object")
+        return null;
+      const tasks = phase.tasks;
+      if (!Array.isArray(tasks))
+        return null;
+      for (const task of tasks) {
+        if (!task || typeof task !== "object")
+          return null;
+        const record = task;
+        if (record.id !== taskId)
+          continue;
+        if (!Array.isArray(record.files_touched) || !record.files_touched.every((file) => typeof file === "string")) {
+          return null;
+        }
+        if (declaredFiles !== null)
+          return null;
+        declaredFiles = [...record.files_touched];
+      }
+    }
+    return declaredFiles;
+  } catch {
+    return null;
+  }
+}
 var TASK_GATE_REQUIREMENTS_RECONSTRUCTION_SENTINEL = "requirements_reconstruction";
 function assertTaskEvidenceWriteAllowed(directory, taskId, event) {
   assertValidTaskId(taskId);
@@ -1784,7 +1826,12 @@ var TaskWorkflowMetadataSchema = exports_external.object({
   lastTransitionId: exports_external.string().min(1).nullable().optional().default(null),
   updatedAt: exports_external.string(),
   forcedCompletion: exports_external.boolean().optional(),
-  supervisedRecovery: exports_external.boolean().optional()
+  supervisedRecovery: exports_external.boolean().optional(),
+  noMutationSettlement: exports_external.object({
+    generation: exports_external.literal(0),
+    transitionId: exports_external.string().min(1).max(512),
+    declaredFiles: exports_external.array(exports_external.string()).length(0)
+  }).optional()
 });
 var TaskEvidenceSchema = exports_external.object({
   taskId: exports_external.string(),
@@ -1918,8 +1965,43 @@ function assertExpectedGeneration(snapshot, event) {
   }
 }
 function isDuplicateTransition(snapshot, event) {
+  if (event.type === "dispatch_no_mutation" && event.context?.declaredFiles?.length === 0 && event.context.settlementTransitionId === event.transitionId && !snapshot.noMutationSettlement) {
+    return false;
+  }
   return snapshot.authoritative && typeof event.transitionId === "string" && event.transitionId.length > 0 && snapshot.lastTransitionId === event.transitionId && snapshot.lastOutcome === getEventOutcome(event);
 }
+function isNoMutationSettlementMetadata(workflow) {
+  const settlement = workflow.noMutationSettlement;
+  if (!workflow.authoritative || workflow.generation !== 0 || settlement?.generation !== 0 || typeof settlement.transitionId !== "string" || settlement.transitionId.length === 0 || !Array.isArray(settlement.declaredFiles) || settlement.declaredFiles.length !== 0)
+    return false;
+  return workflow.state === "idle" || workflow.state === "complete";
+}
+function deriveApplicableGateSet(evidence, options) {
+  if (!evidence) {
+    return {
+      requiredGates: ["pre_check"],
+      satisfiedGates: [],
+      missingGates: ["pre_check"],
+      readOnlyNoMutation: false
+    };
+  }
+  const workflow = getTaskWorkflowSnapshot(evidence);
+  const readOnlyNoMutation = isNoMutationSettlementMetadata(workflow) && (options?.currentDeclaredFiles === undefined ? true : options.currentDeclaredFiles !== null && options.currentDeclaredFiles.length === 0);
+  const requiredGates = [...new Set(evidence.required_gates ?? [])];
+  if (!readOnlyNoMutation && !requiredGates.includes("pre_check")) {
+    requiredGates.unshift("pre_check");
+  }
+  const satisfiedGates = requiredGates.filter((gate) => evidence.gates?.[gate] != null);
+  return {
+    requiredGates,
+    satisfiedGates,
+    missingGates: requiredGates.filter((gate) => evidence.gates?.[gate] == null),
+    readOnlyNoMutation
+  };
+}
+function isReadOnlyNoMutationEligible(evidence, options) {
+  return deriveApplicableGateSet(evidence, options).readOnlyNoMutation;
+}
 function reduceTaskWorkflowSnapshot(current, event, context) {
   if ((current.state === "complete" || current.state === "blocked" || current.state === "closed") && event.type !== "repair_idle" && !(current.state === "complete" && event.type === "task_completed" || current.state === "blocked" && event.type === "task_blocked" || current.state === "blocked" && event.type === "task_closed")) {
     throw new Error(`TASK_WORKFLOW_TERMINAL: cannot apply ${event.type} from ${current.state}`);
@@ -1936,18 +2018,30 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
     lastTransitionId: event.transitionId ?? current.lastTransitionId,
     updatedAt: context.nowIso,
     ...current.forcedCompletion === true ? { forcedCompletion: true } : {},
-    ...current.supervisedRecovery === true ? { supervisedRecovery: true } : {}
+    ...current.supervisedRecovery === true ? { supervisedRecovery: true } : {},
+    ...current.noMutationSettlement ? { noMutationSettlement: current.noMutationSettlement } : {}
   };
   switch (event.type) {
-    case "dispatch_attempted":
-      return base;
-    case "dispatch_no_mutation":
+    case "dispatch_attempted": {
+      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
+      return withoutSettlement;
+    }
+    case "dispatch_no_mutation": {
+      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
       return {
-        ...base,
+        ...withoutSettlement,
         retryCount: Math.min(current.retryCount + 1, 3),
         retryHistory: [...current.retryHistory, outcome].slice(-3),
-        retryEpoch: current.retryEpoch || current.generation + 1
+        retryEpoch: current.retryEpoch || current.generation + 1,
+        ...current.generation === 0 && event.transitionId && Array.isArray(event.context?.declaredFiles) && event.context.declaredFiles.length === 0 && event.context.settlementTransitionId === event.transitionId ? {
+          noMutationSettlement: {
+            generation: 0,
+            transitionId: event.transitionId,
+            declaredFiles: []
+          }
+        } : {}
       };
+    }
     case "stage_b_failed":
       if (current.state !== "pre_check_passed" && current.state !== "reviewer_run" && current.state !== "tests_run" && current.state !== "rework_required") {
         throw new Error(`TASK_WORKFLOW_STAGE_A_REQUIRED: cannot reject ${event.gate} from ${current.state}`);
@@ -1959,10 +2053,11 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         retryHistory: [...current.retryHistory, outcome].slice(-3),
         retryEpoch: current.retryEpoch || current.generation + 1
       };
-    case "accepted_mutation":
+    case "accepted_mutation": {
+      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
       if (event.context?.settlementFailed === true) {
         return {
-          ...base,
+          ...withoutSettlement,
           generation: current.generation + 1,
           state: "rework_required",
           retryCount: Math.min(current.retryCount + 1, 3),
@@ -1972,11 +2067,12 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         };
       }
       return {
-        ...base,
+        ...withoutSettlement,
         generation: current.generation + 1,
         state: "coder_delegated",
         supervisedRecovery: undefined
       };
+    }
     case "stage_a_passed":
       if (current.state !== "coder_delegated" && current.state !== "pre_check_passed" && !(current.state === "rework_required" && event.supervisedRecovery === true)) {
         throw new Error(`TASK_WORKFLOW_CODER_MUTATION_REQUIRED: cannot pass Stage A from ${current.state}`);
@@ -2019,8 +2115,9 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         ...base,
         state: current.state
       };
-    case "task_completed":
-      if (event.qaExempt !== true && current.state !== "tests_run" && current.state !== "complete" && !(current.state === "pre_check_passed" && context.gates.council != null)) {
+    case "task_completed": {
+      const readOnlyNoMutation = event.readOnlyNoMutation === true && current.state === "idle" && current.generation === 0 && isNoMutationSettlementMetadata(current) && context.requiredGates.every((gate) => context.gates[gate] != null);
+      if (event.qaExempt !== true && current.state !== "tests_run" && current.state !== "complete" && !(current.state === "pre_check_passed" && context.gates.council != null) && !readOnlyNoMutation) {
         throw new Error(`TASK_WORKFLOW_QA_REQUIRED: cannot complete from ${current.state}`);
       }
       return {
@@ -2028,6 +2125,7 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         state: "complete",
         ...event.qaExempt === true ? { forcedCompletion: true } : {}
       };
+    }
     case "task_blocked":
       return {
         ...base,
@@ -2042,6 +2140,7 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
       const {
         forcedCompletion: _cleared,
         supervisedRecovery: _clearedMarker,
+        noMutationSettlement: _clearedSettlement,
         ...withoutForced
       } = base;
       return {
@@ -2078,6 +2177,32 @@ function getEvidencePath(directory, taskId) {
   assertValidTaskId(taskId);
   return taskEvidencePath(directory, taskId);
 }
+function bindTrustedNoMutationSettlement(directory, taskId, event) {
+  if (event.type !== "dispatch_no_mutation")
+    return event;
+  const context = event.context;
+  if (!context || event.transitionId === undefined) {
+    return { ...event, context: undefined };
+  }
+  try {
+    const wal = readWorkflowWalFileSync("coder-settlement", validateSwarmPath(directory, `coder-settlements/${taskId}.json`), taskId);
+    const declaredFiles = wal?.context?.declaredFiles;
+    const trusted = wal !== null && (wal.state === "PREPARED" || wal.state === "COMMITTED") && wal.accepted === false && wal.transitionId === event.transitionId && Array.isArray(declaredFiles) && declaredFiles.length === 0 && Array.isArray(context.declaredFiles) && context.declaredFiles.length === 0;
+    return {
+      ...event,
+      context: trusted ? {
+        ...context,
+        declaredFiles,
+        settlementTransitionId: wal.transitionId
+      } : { ...context, settlementTransitionId: undefined }
+    };
+  } catch {
+    return {
+      ...event,
+      context: { ...context, settlementTransitionId: undefined }
+    };
+  }
+}
 function readExisting(evidencePath, taskId) {
   try {
     const raw = readFileSync3(evidencePath, "utf-8");
@@ -2220,10 +2345,11 @@ async function withTaskEvidenceTransaction(directory, taskId, agent, callback) {
       taskId,
       read: () => current,
       transition: async (event) => {
-        assertTaskEvidenceWriteAllowed(directory, taskId, event);
-        const nextEvidence = updateEvidenceForTransition(current, event);
+        const boundEvent = bindTrustedNoMutationSettlement(directory, taskId, event);
+        assertTaskEvidenceWriteAllowed(directory, taskId, boundEvent);
+        const nextEvidence = updateEvidenceForTransition(current, boundEvent);
         nextEvidence.taskId = taskId;
-        return persist(nextEvidence, event);
+        return persist(nextEvidence, boundEvent);
       }
     });
   });
@@ -2320,16 +2446,21 @@ function readTaskEvidenceRaw(directory, taskId) {
     throw error;
   }
 }
-async function hasPassedAllGates(directory, taskId) {
+async function hasPassedAllGates(directory, taskId, currentDeclaredFiles) {
   const evidence = await readTaskEvidence(directory, taskId);
   if (!evidence)
     return false;
-  if (!Array.isArray(evidence.required_gates) || evidence.required_gates.length === 0)
+  if (!Array.isArray(evidence.required_gates))
     return false;
-  return evidence.required_gates.every((gate) => evidence.gates[gate] != null);
+  if (currentDeclaredFiles === undefined) {
+    if (deriveApplicableGateSet(evidence).readOnlyNoMutation)
+      return false;
+    return hasAllRequiredGatesPassed(evidence.required_gates, evidence.gates);
+  }
+  return deriveApplicableGateSet(evidence, { currentDeclaredFiles }).missingGates.length === 0;
 }
 function compareTaskWorkflowStateRank(left, right) {
   return WORKFLOW_STATE_RANK[left] - WORKFLOW_STATE_RANK[right];
 }
 
-export { isStrictTaskId, sanitizeTaskId, listRecoveryRecords, GitBinaryMissingError, GitSpawnCwdError, isGitBinaryMissing, isSpawnCwdMissing, isSpawnCwdUnreadable, _internals, SOURCE_WORKTREE_GONE_STAGE, SOURCE_WORKTREE_UNCERTAIN_STAGE, getMergeStrategy, recoverMergeBackFromImmutableCoordinates, reconcileLandedMerge, postMergeCleanup, pruneStaleWorktreeMetadata, attemptMergeBackFromDirty, cleanupOrphanedBranches, startupOrphanRecovery, readWorkflowWalFile, writeWorkflowWalFile, _internals3 as _internals1, TASK_WORKFLOW_SCHEMA_MARKER, TASK_GATE_REQUIREMENTS_RECONSTRUCTION_SENTINEL, assertTaskEvidenceWriteAllowed, parseTaskEvidence, DEFAULT_REQUIRED_GATES, isValidTaskId, getTaskWorkflowSnapshot, reduceTaskWorkflowSnapshot, deriveRequiredGates, expandRequiredGates, transitionTaskWorkflowEvidence, withTaskEvidenceTransaction, ensureTaskGateRequirementsReceiptForSettledTransition, recordGateEvidence, recordAgentDispatch, readTaskEvidence, readTaskEvidenceState, readTaskEvidenceRaw, hasPassedAllGates, compareTaskWorkflowStateRank };
+export { isStrictTaskId, sanitizeTaskId, listRecoveryRecords, GitBinaryMissingError, GitSpawnCwdError, isGitBinaryMissing, isSpawnCwdMissing, isSpawnCwdUnreadable, _internals, SOURCE_WORKTREE_GONE_STAGE, SOURCE_WORKTREE_UNCERTAIN_STAGE, getMergeStrategy, recoverMergeBackFromImmutableCoordinates, reconcileLandedMerge, postMergeCleanup, pruneStaleWorktreeMetadata, attemptMergeBackFromDirty, cleanupOrphanedBranches, startupOrphanRecovery, readWorkflowWalFile, writeWorkflowWalFile, _internals3 as _internals1, TASK_WORKFLOW_SCHEMA_MARKER, readCurrentTaskDeclaredFiles, TASK_GATE_REQUIREMENTS_RECONSTRUCTION_SENTINEL, assertTaskEvidenceWriteAllowed, parseTaskEvidence, DEFAULT_REQUIRED_GATES, isValidTaskId, getTaskWorkflowSnapshot, deriveApplicableGateSet, isReadOnlyNoMutationEligible, reduceTaskWorkflowSnapshot, deriveRequiredGates, expandRequiredGates, transitionTaskWorkflowEvidence, withTaskEvidenceTransaction, ensureTaskGateRequirementsReceiptForSettledTransition, recordGateEvidence, recordAgentDispatch, readTaskEvidence, readTaskEvidenceState, readTaskEvidenceRaw, hasPassedAllGates, compareTaskWorkflowStateRank };