opencode-swarm 7.187.1 → 7.187.3

package/dist/models/model-override-state.d.ts

@@ -42,6 +42,29 @@ export declare function normalizeModelChain(primaryModel: string | undefined, fa
 export declare function resolveScopedModelSelection(scope: ScopedModelOverrideKey, chain: NormalizedModelChain, now?: number): ScopedModelSelection;
 export declare function advanceScopedModelSelection(scope: ScopedModelOverrideKey, chain: NormalizedModelChain, expectedGeneration: number, now?: number): ScopedModelAdvanceResult;
 export declare function resetScopedModelSelection(scope: ScopedModelOverrideKey, expectedGeneration?: number): boolean;
-export declare function clearScopedModelSelectionsForSession(sessionID: string): void;
+/**
+ * Issue #2989: non-seeding read of a scoped selection for read-side
+ * consumers (the primary-session chat-boundary override).
+ *
+ * Unlike {@link resolveScopedModelSelection}, this NEVER creates or resets an
+ * entry: an absent key, an expired entry, or a stored signature that does not
+ * match the current chain all read as `undefined` (stale entries stay stale —
+ * the advance path owns reseeding). A PRESENT, signature-matching entry is
+ * touched (its `updatedAt` is refreshed), so an actively-used session's
+ * selection stays alive and an idle session's selection expires via the TTL.
+ */
+export declare function peekScopedModelSelection(scope: ScopedModelOverrideKey, chain: NormalizedModelChain, now?: number): ScopedModelSelection | undefined;
+export interface ClearScopedModelSelectionsOptions {
+    /**
+     * Issue #2989: when false, primary-session scopes (the sentinel
+     * empty-string `invocationID` used by the session-scoped fallback) are
+     * preserved. The per-invocation boundary clear
+     * (`clearPendingTaskModelRoutesForSession(..., 'invocation')`) uses this
+     * so a primary session's fallback selection stays sticky across turns;
+     * the session-end clear keeps the default (clear everything).
+     */
+    primaryScopes?: boolean;
+}
+export declare function clearScopedModelSelectionsForSession(sessionID: string, opts?: ClearScopedModelSelectionsOptions): void;
 export declare function getScopedModelSelectionSnapshot(): readonly ScopedModelSelectionSnapshotEntry[];
 export declare function resetScopedModelSelectionStateForTests(): void;

package/dist/models/task-model-routing.d.ts

@@ -61,7 +61,64 @@ export declare function registerPendingTaskModelRoute(input: PendingTaskModelRou
 export declare function bindPendingTaskModelRouteChild(input: BindTaskModelRouteChildInput, now?: number): PendingTaskModelRouteSnapshotEntry | undefined;
 export declare function advancePendingTaskModelRoute(input: AdvanceTaskModelRouteInput): TaskModelRouteAdvanceResult | undefined;
 export declare function resolveTaskChatModelOverride(input: ResolveTaskChatModelOverrideInput): Promise<TaskChatModelOverrideResolution>;
-export declare function clearPendingTaskModelRoutesForSession(sessionID: string): void;
+export interface AdvanceSessionFallbackSelectionInput {
+    sessionID: string;
+    role: string;
+    swarmID?: string;
+    primaryModel?: string;
+    fallbackModels?: Iterable<string | null | undefined>;
+    now?: number;
+}
+export interface SessionFallbackAdvanceResult {
+    accepted: boolean;
+    exhausted: boolean;
+    fallbackIndex: number;
+    modelString?: string;
+    scope: ScopedModelOverrideKey;
+}
+export interface ResolveSessionChatModelOverrideInput {
+    sessionID: string;
+    role: string;
+    swarmID?: string;
+    primaryModel?: string;
+    fallbackModels?: Iterable<string | null | undefined>;
+    now?: number;
+}
+export interface SessionChatModelOverrideResolution {
+    status: 'override' | 'primary' | 'exhausted' | 'missing';
+    model?: ModelOverrideParts;
+    modelString?: string;
+    fallbackIndex?: number;
+}
+/**
+ * Issue #2989: advance the primary-session (host-driven) fallback chain for
+ * a session with no Task route. Seed-then-advance mirrors
+ * {@link advancePendingTaskModelRoute}'s flow: `resolveScopedModelSelection`
+ * seeds a fresh entry at fallbackIndex 0, `advanceScopedModelSelection` moves
+ * it forward (clamped at chain end, where `exhausted` becomes true).
+ */
+export declare function advanceSessionFallbackSelection(input: AdvanceSessionFallbackSelectionInput): SessionFallbackAdvanceResult;
+/**
+ * Issue #2989: non-seeding read of the primary-session fallback selection
+ * for the chat-boundary override. `missing` covers no-selection/no-fallbacks
+ * (and stale-signature entries, which read as absent and are left alone);
+ * `exhausted` never throws here — a primary session's user message must
+ * never be blocked by the plugin.
+ */
+export declare function resolveSessionChatModelOverride(input: ResolveSessionChatModelOverrideInput): SessionChatModelOverrideResolution;
+/**
+ * Issue #2989 review (F-001): record the exact `input.agent` string at the
+ * chat boundary so the session.error no-route branch can resolve the same
+ * identity (the activeAgent pointer is reset by Task-tool completions).
+ */
+export declare function recordSessionChatAgent(sessionID: string, agentName: string): void;
+/**
+ * Issue #2989 review (F-001): the chat-boundary-recorded agent name for a
+ * session, or undefined when no chat.message has been seen for it in this
+ * process.
+ */
+export declare function resolveSessionChatAgent(sessionID: string): string | undefined;
+export declare function clearPendingTaskModelRoutesForSession(sessionID: string, mode?: 'session' | 'invocation'): void;
 export declare function getPendingTaskModelRouteSnapshot(): readonly PendingTaskModelRouteSnapshotEntry[];
 export declare function getTaskModelRoutingStateSnapshot(): {
     routes: readonly PendingTaskModelRouteSnapshotEntry[];

package/dist/state.d.ts

@@ -1249,14 +1249,37 @@ export declare function recordPhaseAgentDispatch(sessionId: string, agentName: s
 /**
  * Atomically replace one task's attributed file list.
  *
+ * Callers MUST pass `workspaceDirectory`: omitting it silently drops
+ * absolute entries (issue #2925 review, PRR-014).
+ *
+ * Issue #2925: entries are canonicalized at this write boundary to the
+ * portable form (repo-relative against `workspaceDirectory` when provided,
+ * forward-slashed, win32-case-folded via `normalizePath`); entries that
+ * cannot be proven canonical — absolutes without a base, `..`-escapes —
+ * drop silently (entries are advisory). Legacy snapshot entries bypass this
+ * boundary by design (deserializeModifiedFilesByTask builds the map
+ * directly) and stay readable via read-side canonicalization.
+ *
  * Returns false without mutation when the task id is invalid or the bounded
  * map has no reclaimable workflow-complete slot.
  */
-export declare function recordModifiedFilesForTask(session: AgentSessionState, taskId: string, files: readonly string[]): boolean;
+export declare function recordModifiedFilesForTask(session: AgentSessionState, taskId: string, files: readonly string[], workspaceDirectory?: string): boolean;
 /**
  * Add one file to a task's attribution without disturbing its existing files.
- */
-export declare function recordModifiedFileForTask(session: AgentSessionState, taskId: string, file: string): boolean;
+ *
+ * Callers MUST pass `workspaceDirectory`: omitting it silently drops
+ * absolute entries (they cannot be proven in-workspace), with no other
+ * signal (issue #2925 review, PRR-014).
+ *
+ * Issue #2925: the INCOMING entry is canonicalized against
+ * `workspaceDirectory` (same rules as the plural setter); a
+ * non-canonicalizable incoming entry drops silently with a `true` return
+ * (advisory no-op — pre-existing invalid-input/invalid-taskId paths still
+ * return false). Stored legacy raw entries are deliberately NOT
+ * re-canonicalized by an append; they persist verbatim until the task's list
+ * is atomically replaced by a producer.
+ */
+export declare function recordModifiedFileForTask(session: AgentSessionState, taskId: string, file: string, workspaceDirectory?: string): boolean;
 /**
  * Whether a per-task attribution slot EXISTS for the task (present-but-empty
  * counts as present). Distinguishes "no record" from "record with zero files"

package/dist/utils/path.d.ts

@@ -1 +1,24 @@
 export declare function normalizePath(p: string): string;
+/**
+ * Canonicalize one per-task file-attribution entry to the portable form used
+ * by `modifiedFilesByTask` (issue #2925): repo-relative against the writer's
+ * workspace directory, forward-slashed, win32-case-folded via
+ * {@link normalizePath}.
+ *
+ * Returns null (drop) for entries that cannot be proven canonical:
+ * - absolute input without a `workspaceDirectory` (no base to resolve
+ *   against — storing it raw is exactly the pre-#2925 defect);
+ * - any input whose resolved form escapes the workspace (`..`-prefixed or
+ *   absolute relative, e.g. a different drive on win32);
+ * - relative input with a `..` segment when no base is available (a leading
+ *   or inner `..` can never appear in a repo-relative path);
+ * - empty/whitespace-only input, or a path that collapses to '.' (the
+ *   workspace root itself is not a file entry).
+ *
+ * Entries are advisory, so drops are silent by contract (the caller never
+ * throws on a dropped entry). The snapshot deserializer
+ * (`deserializeModifiedFilesByTask`) intentionally sits OUTSIDE this
+ * boundary: legacy raw entries round-trip verbatim from old snapshots and
+ * remain covered by read-side canonicalization.
+ */
+export declare function canonicalAttributionPath(raw: string, workspaceDirectory?: string): string | null;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.187.1",
+	"version": "7.187.3",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",