opencode-swarm 7.187.0 → 7.187.2

package/dist/state.d.ts

@@ -1249,14 +1249,37 @@ export declare function recordPhaseAgentDispatch(sessionId: string, agentName: s
 /**
  * Atomically replace one task's attributed file list.
  *
+ * Callers MUST pass `workspaceDirectory`: omitting it silently drops
+ * absolute entries (issue #2925 review, PRR-014).
+ *
+ * Issue #2925: entries are canonicalized at this write boundary to the
+ * portable form (repo-relative against `workspaceDirectory` when provided,
+ * forward-slashed, win32-case-folded via `normalizePath`); entries that
+ * cannot be proven canonical — absolutes without a base, `..`-escapes —
+ * drop silently (entries are advisory). Legacy snapshot entries bypass this
+ * boundary by design (deserializeModifiedFilesByTask builds the map
+ * directly) and stay readable via read-side canonicalization.
+ *
  * Returns false without mutation when the task id is invalid or the bounded
  * map has no reclaimable workflow-complete slot.
  */
-export declare function recordModifiedFilesForTask(session: AgentSessionState, taskId: string, files: readonly string[]): boolean;
+export declare function recordModifiedFilesForTask(session: AgentSessionState, taskId: string, files: readonly string[], workspaceDirectory?: string): boolean;
 /**
  * Add one file to a task's attribution without disturbing its existing files.
- */
-export declare function recordModifiedFileForTask(session: AgentSessionState, taskId: string, file: string): boolean;
+ *
+ * Callers MUST pass `workspaceDirectory`: omitting it silently drops
+ * absolute entries (they cannot be proven in-workspace), with no other
+ * signal (issue #2925 review, PRR-014).
+ *
+ * Issue #2925: the INCOMING entry is canonicalized against
+ * `workspaceDirectory` (same rules as the plural setter); a
+ * non-canonicalizable incoming entry drops silently with a `true` return
+ * (advisory no-op — pre-existing invalid-input/invalid-taskId paths still
+ * return false). Stored legacy raw entries are deliberately NOT
+ * re-canonicalized by an append; they persist verbatim until the task's list
+ * is atomically replaced by a producer.
+ */
+export declare function recordModifiedFileForTask(session: AgentSessionState, taskId: string, file: string, workspaceDirectory?: string): boolean;
 /**
  * Whether a per-task attribution slot EXISTS for the task (present-but-empty
  * counts as present). Distinguishes "no record" from "record with zero files"

package/dist/tools/phase-complete.d.ts

@@ -9,10 +9,10 @@ import type { ReviewAgentModelRegistry } from '../review/runtime.js';
 import { runArchitectureSupervisorGate, runCompletionVerifyGate, runDriftGate, runFinalCouncilGate, runFinalReviewGate, runHallucinationGate, runMutationGate, runPhaseCouncilGate, runTodoGateGate } from './phase-complete/gates/index.js';
 /** Narrow seam for receipt/plan ordering tests. */
 export declare const phaseCompleteReceiptInternals: {
-    recordPhaseCloseIntent: (directory: string, phase: string, sessionId?: string, taskId?: string) => Promise<import("../hooks/knowledge-receipt-ledger.js").ReceiptLedgerResult<{
+    recordPhaseCloseIntent: (directory: string, phase: string, sessionId?: string, taskId?: string, phaseId?: number) => Promise<import("../hooks/knowledge-receipt-ledger.js").ReceiptLedgerResult<{
         event_id: string;
     }>>;
-    commitPhaseClosed: (directory: string, phase: string, sessionId?: string, taskId?: string) => Promise<import("../hooks/knowledge-receipt-ledger.js").ReceiptLedgerResult<{
+    commitPhaseClosed: (directory: string, phase: string, sessionId?: string, taskId?: string, phaseId?: number) => Promise<import("../hooks/knowledge-receipt-ledger.js").ReceiptLedgerResult<{
         event_id: string;
     }>>;
     rebindCursorTaggedReceipts: (directory: string, plan: {

package/dist/tools/repair-knowledge-receipt-ledger.d.ts

@@ -2,16 +2,38 @@ import type { ToolContext, ToolDefinition } from '@opencode-ai/plugin/tool';
 import { type RepairKnowledgeReceiptLedgerInput } from '../hooks/knowledge-receipt-ledger.js';
 export declare function executeRepairKnowledgeReceiptLedger(args: RepairKnowledgeReceiptLedgerInput & {
     working_directory?: string;
+    operation?: 'repair' | 'backfill_phase_id';
 }, directory: string, _ctx?: ToolContext): Promise<{
     success: boolean;
     message: string;
     errors: string[];
     code?: undefined;
+    backfilled?: undefined;
+    skipped?: undefined;
+    skipped_total?: undefined;
+    journal_records?: undefined;
 } | {
     success: boolean;
     message: string;
     errors: string[];
     code: import("../hooks/knowledge-receipt-ledger-storage.js").ReceiptStoreErrorCode | "legacy_unverifiable";
+    backfilled?: undefined;
+    skipped?: undefined;
+    skipped_total?: undefined;
+    journal_records?: undefined;
+} | {
+    success: boolean;
+    message: string;
+    backfilled: number;
+    skipped: {
+        trace_id: string;
+        entry_id: string;
+        label?: string;
+    }[];
+    skipped_total: number;
+    journal_records: number;
+    errors?: undefined;
+    code?: undefined;
 } | {
     ok: true;
     status: "validated_projection" | "repaired_authority" | "pending_re_evaluation";
@@ -23,5 +45,9 @@ export declare function executeRepairKnowledgeReceiptLedger(args: RepairKnowledg
     message: string;
     errors?: undefined;
     code?: undefined;
+    backfilled?: undefined;
+    skipped?: undefined;
+    skipped_total?: undefined;
+    journal_records?: undefined;
 }>;
 export declare const repair_knowledge_receipt_ledger: ToolDefinition;

package/dist/utils/path.d.ts

@@ -1 +1,24 @@
 export declare function normalizePath(p: string): string;
+/**
+ * Canonicalize one per-task file-attribution entry to the portable form used
+ * by `modifiedFilesByTask` (issue #2925): repo-relative against the writer's
+ * workspace directory, forward-slashed, win32-case-folded via
+ * {@link normalizePath}.
+ *
+ * Returns null (drop) for entries that cannot be proven canonical:
+ * - absolute input without a `workspaceDirectory` (no base to resolve
+ *   against — storing it raw is exactly the pre-#2925 defect);
+ * - any input whose resolved form escapes the workspace (`..`-prefixed or
+ *   absolute relative, e.g. a different drive on win32);
+ * - relative input with a `..` segment when no base is available (a leading
+ *   or inner `..` can never appear in a repo-relative path);
+ * - empty/whitespace-only input, or a path that collapses to '.' (the
+ *   workspace root itself is not a file entry).
+ *
+ * Entries are advisory, so drops are silent by contract (the caller never
+ * throws on a dropped entry). The snapshot deserializer
+ * (`deserializeModifiedFilesByTask`) intentionally sits OUTSIDE this
+ * boundary: legacy raw entries round-trip verbatim from old snapshots and
+ * remain covered by read-side canonicalization.
+ */
+export declare function canonicalAttributionPath(raw: string, workspaceDirectory?: string): string | null;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.187.0",
+	"version": "7.187.2",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",