opencode-swarm 7.187.3 → 7.188.1

package/dist/cli/{snapshot-coordination-init-jjegs3v5.js → snapshot-coordination-init-j226zrvz.js}

@@ -8,74 +8,74 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-6rdajskg.js";
-import"./index-ez4kkgcd.js";
-import"./index-6551m2st.js";
-import"./index-7t15ybzn.js";
+} from "./index-wkxhhyej.js";
+import"./index-jn08bcaa.js";
+import"./index-qgvmq92m.js";
+import"./index-xrsfbr31.js";
 import"./index-vx8a8w3b.js";
-import"./index-e3vbyy10.js";
-import"./index-fk7s8btv.js";
+import"./index-x73e0zkb.js";
+import"./index-jd3hvnqn.js";
 import"./index-txdagbh7.js";
-import"./index-yk9vs9pw.js";
+import"./index-z4zznftq.js";
 import"./index-rdec0y3z.js";
-import"./index-45d3vpry.js";
-import"./index-zzgv4jy6.js";
-import"./index-5x8zhfsq.js";
-import"./index-wvkbp1qr.js";
+import"./index-gy57hcy2.js";
+import"./index-ztq5ag7q.js";
+import"./index-aqe9x8ga.js";
+import"./index-zhnywrhs.js";
 import"./index-mf19yqss.js";
-import"./index-by488z8m.js";
+import"./index-41v699sv.js";
 import"./index-cjapb4hy.js";
 import"./index-a8gvszr2.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-v8ytrkrg.js";
-import"./index-7fekgghd.js";
+import"./index-zvrfvtp3.js";
+import"./index-dxhd7dsr.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-w9p41945.js";
+import"./index-swagbt0g.js";
 import"./index-zsrtt42s.js";
-import"./index-468s960k.js";
-import"./index-w3xapqjq.js";
-import"./index-ksvm96bz.js";
+import"./index-c66ywect.js";
+import"./index-9007eaeh.js";
+import"./index-edaj9qxn.js";
 import"./index-g4fs6z4e.js";
-import"./index-10h0jx4e.js";
-import"./index-h7p78r0w.js";
-import"./index-h03j41jw.js";
+import"./index-w4q0sw5g.js";
+import"./index-mdbqm6w1.js";
+import"./index-4m6k2r0v.js";
 import"./index-m9zzj4ee.js";
 import"./index-bejxkee0.js";
 import"./index-2s7dvzff.js";
-import"./index-npkxp81s.js";
-import"./index-nsvm2j4x.js";
+import"./index-cs6g43qy.js";
+import"./index-rwabrcsg.js";
 import"./index-rtry5xyf.js";
-import"./index-a5pjm9zc.js";
+import"./index-cb72p9w2.js";
 import"./index-kbkk7vnh.js";
 import"./index-0725jpp7.js";
-import"./index-02nzb100.js";
-import"./index-naxtsh2e.js";
-import"./index-hrxr48p5.js";
+import"./index-9bjf0bhd.js";
+import"./index-4rjw95qw.js";
+import"./index-b9pz70d0.js";
 import"./index-m1qy7f1e.js";
 import"./index-cc1vzq4m.js";
 import"./index-9hag235h.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
-import"./index-7ba0hdg4.js";
-import"./index-zbv9t6p2.js";
+import"./index-mb1reyw3.js";
+import"./index-fdx38afm.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-q0am9gm3.js";
-import"./index-xpj149rz.js";
-import"./index-bkcd3nwh.js";
+import"./index-zwgh0gty.js";
+import"./index-7sbyvk99.js";
+import"./index-0v2svrev.js";
 import"./index-t7hmqgjy.js";
-import"./index-sec8fwf1.js";
+import"./index-4htcpbs4.js";
 import"./index-fzpt2djt.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-r6e8syr3.js";
 import"./index-gx2vp8gx.js";
-import"./index-5ktekhxk.js";
+import"./index-936d3ny7.js";
 import"./index-zxdawwc7.js";
-import"./index-4tmk29gc.js";
+import"./index-5m06enb0.js";
 import"./index-bstjg81q.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{speckit-checkoff-3m04ks95.js → speckit-checkoff-6xa1f1qr.js}

@@ -7,13 +7,13 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-468s960k.js";
+} from "./index-c66ywect.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-r6e8syr3.js";
-import"./index-5ktekhxk.js";
+import"./index-936d3ny7.js";
 import"./index-zxdawwc7.js";
-import"./index-4tmk29gc.js";
+import"./index-5m06enb0.js";
 import"./index-bstjg81q.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{telemetry-vwxbsnye.js → telemetry-d0j31j5d.js}

@@ -14,7 +14,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-sec8fwf1.js";
+} from "./index-4htcpbs4.js";
 import"./index-fzpt2djt.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";

package/dist/cli/{worktree-collision-ownership-0d73y8h0.js → worktree-collision-ownership-frtjkhms.js}

@@ -13,7 +13,7 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-10h0jx4e.js";
+} from "./index-w4q0sw5g.js";
 import"./index-bejxkee0.js";
 import"./index-2s7dvzff.js";
 import"./index-m1qy7f1e.js";
@@ -22,15 +22,15 @@ import"./index-9hag235h.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
-import"./index-7ba0hdg4.js";
-import"./index-zbv9t6p2.js";
+import"./index-mb1reyw3.js";
+import"./index-fdx38afm.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-q0am9gm3.js";
-import"./index-xpj149rz.js";
-import"./index-bkcd3nwh.js";
+import"./index-zwgh0gty.js";
+import"./index-7sbyvk99.js";
+import"./index-0v2svrev.js";
 import"./index-t7hmqgjy.js";
-import"./index-sec8fwf1.js";
+import"./index-4htcpbs4.js";
 import {
   canonicalRootKeyFresh
 } from "./index-fzpt2djt.js";

package/dist/cli/{worktree-isolation-d0vn38wb.js → worktree-isolation-c07qk28m.js}

@@ -21,76 +21,76 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-6rdajskg.js";
-import"./index-ez4kkgcd.js";
-import"./index-6551m2st.js";
-import"./index-7t15ybzn.js";
+} from "./index-wkxhhyej.js";
+import"./index-jn08bcaa.js";
+import"./index-qgvmq92m.js";
+import"./index-xrsfbr31.js";
 import"./index-vx8a8w3b.js";
-import"./index-e3vbyy10.js";
-import"./index-fk7s8btv.js";
+import"./index-x73e0zkb.js";
+import"./index-jd3hvnqn.js";
 import"./index-txdagbh7.js";
-import"./index-yk9vs9pw.js";
+import"./index-z4zznftq.js";
 import"./index-rdec0y3z.js";
-import"./index-45d3vpry.js";
-import"./index-zzgv4jy6.js";
-import"./index-5x8zhfsq.js";
-import"./index-wvkbp1qr.js";
+import"./index-gy57hcy2.js";
+import"./index-ztq5ag7q.js";
+import"./index-aqe9x8ga.js";
+import"./index-zhnywrhs.js";
 import"./index-mf19yqss.js";
-import"./index-by488z8m.js";
+import"./index-41v699sv.js";
 import"./index-cjapb4hy.js";
 import"./index-a8gvszr2.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-v8ytrkrg.js";
-import"./index-7fekgghd.js";
+import"./index-zvrfvtp3.js";
+import"./index-dxhd7dsr.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-w9p41945.js";
+import"./index-swagbt0g.js";
 import"./index-zsrtt42s.js";
-import"./index-468s960k.js";
-import"./index-w3xapqjq.js";
-import"./index-ksvm96bz.js";
+import"./index-c66ywect.js";
+import"./index-9007eaeh.js";
+import"./index-edaj9qxn.js";
 import"./index-g4fs6z4e.js";
-import"./index-10h0jx4e.js";
-import"./index-h7p78r0w.js";
-import"./index-h03j41jw.js";
+import"./index-w4q0sw5g.js";
+import"./index-mdbqm6w1.js";
+import"./index-4m6k2r0v.js";
 import"./index-m9zzj4ee.js";
 import"./index-bejxkee0.js";
 import"./index-2s7dvzff.js";
-import"./index-npkxp81s.js";
-import"./index-nsvm2j4x.js";
+import"./index-cs6g43qy.js";
+import"./index-rwabrcsg.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-a5pjm9zc.js";
+} from "./index-cb72p9w2.js";
 import"./index-kbkk7vnh.js";
 import"./index-0725jpp7.js";
-import"./index-02nzb100.js";
-import"./index-naxtsh2e.js";
-import"./index-hrxr48p5.js";
+import"./index-9bjf0bhd.js";
+import"./index-4rjw95qw.js";
+import"./index-b9pz70d0.js";
 import"./index-m1qy7f1e.js";
 import"./index-cc1vzq4m.js";
 import"./index-9hag235h.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
-import"./index-7ba0hdg4.js";
-import"./index-zbv9t6p2.js";
+import"./index-mb1reyw3.js";
+import"./index-fdx38afm.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-q0am9gm3.js";
-import"./index-xpj149rz.js";
-import"./index-bkcd3nwh.js";
+import"./index-zwgh0gty.js";
+import"./index-7sbyvk99.js";
+import"./index-0v2svrev.js";
 import"./index-t7hmqgjy.js";
-import"./index-sec8fwf1.js";
+import"./index-4htcpbs4.js";
 import"./index-fzpt2djt.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-r6e8syr3.js";
 import"./index-gx2vp8gx.js";
-import"./index-5ktekhxk.js";
+import"./index-936d3ny7.js";
 import"./index-zxdawwc7.js";
-import"./index-4tmk29gc.js";
+import"./index-5m06enb0.js";
 import"./index-bstjg81q.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/commands/close/align-stage.d.ts

@@ -1,4 +1,30 @@
 import type { CloseStageContext, GitAlignResult } from './context.js';
+/** Options for the guarded `resetToMainAfterMerge` seam (issue #2953). */
+export type GuardedResetToMainOptions = {
+    pruneBranches?: boolean;
+    /**
+     * The tracked-dirty set the close gate measured (and the operator
+     * confirmed, or the empty clean-tree set). REQUIRED — the guard
+     * re-verifies exactly this scope before the destructive reset.
+     */
+    expectedDirtyPaths: readonly string[];
+};
+export type GuardedResetToMainResult = import('../../git/branch.js').ResetToMainAfterMergeResult & {
+    /** True when the #2953 re-check refused and NO reset ran. */
+    recheckRefused?: true;
+};
+/**
+ * Issue #2953 guard: re-verify the tracked-dirty tree with the SAME argv and
+ * parser the close gate used, immediately before delegating to the real
+ * aggressive reset. Installed as the `_internals.resetToMainAfterMerge` seam
+ * value at facade wiring time (see wiring.ts) so the re-measurement happens
+ * at the tightest point reachable without editing src/git/branch.ts; a
+ * residual fetch/checkout window INSIDE the real reset remains and is
+ * disclosed in the release notes. On refusal the real reset is never called
+ * and the result carries the full bounded refusal text in `message` — the
+ * caller must treat `recheckRefused` as terminal (no cautious fallback).
+ */
+export declare function guardResetWithRecheck(real: typeof import('../../git/branch.js').resetToMainAfterMerge, cwd: string, options?: GuardedResetToMainOptions): Promise<GuardedResetToMainResult>;
 /**
  * STAGE 4: ALIGN
  *

package/dist/commands/close/context.d.ts

@@ -109,6 +109,14 @@ export interface CloseStageContext {
     archiveDir: string;
     archiveSuffix: string;
     args: string[];
+    /**
+     * Issue #2953: the tracked-dirty set the close gate measured at the top of
+     * this invocation — exactly the scope the operator's confirm token
+     * certified (or the empty set on the clean-tree fast path). The align
+     * stage's guard re-verifies it immediately before the destructive reset
+     * and aborts fail-closed if tracked files changed in the window.
+     */
+    purgeGateDirtyPaths?: string[];
 }
 export interface GitAlignResult {
     gitAlignResult: string;

package/dist/commands/close/internals.d.ts

@@ -27,7 +27,7 @@ export declare const _internals: {
     detectFullAuto: typeof import("./orchestrator.js").detectFullAuto;
     guaranteeAllPlansComplete: typeof import("./finalize-stage.js").guaranteeAllPlansComplete;
     getGitRepositoryStatus: typeof import("../../git/branch.js").getGitRepositoryStatus;
-    resetToMainAfterMerge: typeof import("../../git/branch.js").resetToMainAfterMerge;
+    resetToMainAfterMerge: (cwd: string, options?: import("./align-stage.js").GuardedResetToMainOptions) => Promise<import("./align-stage.js").GuardedResetToMainResult>;
     resetToRemoteBranch: typeof import("../../git/branch.js").resetToRemoteBranch;
     copyDirRecursive: typeof import("./fs-helpers.js").copyDirRecursive;
     loadPluginConfigWithMeta: typeof import("../../config/index.js").loadPluginConfigWithMeta;

package/dist/commands/destructive-purge.d.ts

@@ -1,30 +1,3 @@
-/**
- * Issue #2527 / #2508: the shared two-step destructive-purge confirmation
- * primitive (preview + confirm_token → exact-token execution).
- *
- * Contract (frozen by check C8 and the destructive-purge-2527 unit suite):
- *  - `previewDestructivePurge` is a side-effect-free preview (counts, exact
- *    option label, the confirmation the operator must echo);
- *  - `issueConfirmToken` records a single-slot pending purge keyed by a
- *    digest over the candidate SET (sorted absolute paths + kind) and
- *    returns the confirm token (15-minute TTL);
- *  - `executeDestructivePurge` re-derives the CURRENT scope digest and
- *    passes only on exact token match AND digest match AND fresh TTL — so
- *    replay after the candidate set changes (a lane added, removed, or the
- *    scope re-derived differently) is rejected by construction, and the
- *    token is single-use (the pending record is consumed on execution; a
- *    second execution is rejected with "no pending purge").
- *  - TTL expiry: an expired pending record is treated as absent on read
- *    (silent); every new issuance overwrites the single slot — the
- *    overwritten token can never execute (it is rejected with "confirm
- *    token mismatch"; a single-slot store cannot distinguish generations,
- *    but rejection is guaranteed either way).
- *  - Scope-of-execution: the executor deletes ONLY the recorded candidate
- *    paths. The primitive confirms operator intent; CALLERS own scoping —
- *    `/swarm reset-session` (and #2508's `/swarm close` when it adopts
- *    this) must only construct candidate sets from ownership-gated,
- *    base-scoped directories.
- */
 import { randomBytes } from 'node:crypto';
 import * as fs from 'node:fs';
 import { atomicWriteSwarmFileSync } from '../utils/atomic-write';
@@ -54,6 +27,61 @@ export declare const _internals: {
     now: () => number;
     randomBytes: typeof randomBytes;
     scopeDigest: typeof scopeDigest;
+    runGitStatus: typeof runGitStatusSync;
+};
+/**
+ * Shared argv for every tracked-dirty measurement (issue #2953): the close
+ * gate and the pre-destruction re-check run the identical status command and
+ * feed the same parser, so the two measurements parse identically. (The two
+ * reads still go through separate spawn wrappers; equivalence is by
+ * convention + review, not a single shared call site.)
+ */
+export declare const GIT_STATUS_ARGS: readonly ["status", "--porcelain"];
+/** Default bounded status read (invariant 3: array form, cwd, timeout, ignore
+ * stdin, bounded stdout, windowsHide). Exposed via `_internals` for tests. */
+declare function runGitStatusSync(args: readonly string[], cwd: string): string | null;
+/**
+ * Parse `git status --porcelain` (newline) output into repo-relative
+ * tracked-dirty paths: untracked (`??`) entries are skipped (they survive the
+ * align reset), surrounding quotes are stripped, and rename/copy records are
+ * split into BOTH sides. R/C may appear in EITHER status column (`R  old ->
+ * new` staged, ` R old -> new` worktree renames via `git add -N`) — both
+ * columns are tested, never just the first (the codebase porcelain-parser
+ * rule from the #2976 rollback-gate review). Sibling module
+ * `src/commands/rollback-gate.ts` exports a same-named parser for
+ * NUL-terminated `--porcelain -z` output (J1/#2946); the two are deliberately
+ * not consolidated in this PR.
+ */
+export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
+/**
+ * Shared tracked-dirty read (issue #2953): GIT_STATUS_ARGS + the shared
+ * parser around the default runner (test seam: `_internals.runGitStatus`).
+ * The close gate composes the same argv + parser directly through its own
+ * long-standing `_closeGateInternals.runGit` seam rather than calling this
+ * helper, so its existing #2508 fail-closed tests keep their injection point.
+ */
+export declare function readTrackedDirtyPaths(directory: string): {
+    ok: true;
+    dirtyPaths: string[];
+} | {
+    ok: false;
+};
+/**
+ * Issue #2953 TOCTOU re-check: re-measure the tracked-dirty set immediately
+ * before a destructive reset and compare it to the set the operator actually
+ * confirmed (or the empty clean-tree set). Fail-closed in both directions
+ * that matter: ANY newly-dirty tracked path refuses, and an unreadable
+ * status refuses (a measurement that cannot be taken must never read as
+ * "unchanged"). A file that got cleaner passes — strictly less destruction
+ * than confirmed.
+ */
+export declare function recheckBeforeDestructive(directory: string, expectedDirtyPaths: readonly string[]): {
+    ok: true;
+    dirtyPaths: string[];
+} | {
+    ok: false;
+    reason: string;
+    newDirtyPaths: string[];
 };
 declare function scopeDigest(kind: string, candidates: PurgeCandidate[]): string;
 /**

package/dist/commands/registry.d.ts

@@ -730,7 +730,7 @@ export declare const COMMAND_REGISTRY: {
     readonly finalize: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Use /swarm finalize to finalize the swarm project and archive evidence";
-        readonly details: "Idempotent 4-stage terminal finalization: (1) finalize writes retrospectives for in-progress phases, (2) archive creates timestamped bundle of swarm artifacts and evidence, (3) clean removes active-state files for a clean slate, (4) align performs aggressive git reset --hard to the default remote branch, discarding uncommitted changes and gitignored build artifacts (user-created untracked files are preserved); falls back to a cautious reset that preserves uncommitted changes when the aggressive path cannot proceed. WARNING: alignment discards local changes and gitignored files. Resets agent sessions, delegation chains, and active-agent mappings. Reads .swarm/close-lessons.md for explicit lessons and runs curation. Cleanup: knowledge.jsonl is preserved; plan.json, plan.md, events.jsonl, handoff.*, run-memory.jsonl, and summaries/ are removed. Use --skill-review to run the quota-bounded skill_improver in proposal mode. Use --dry-run to preview what finalize would archive, clean, and align without taking the lock or changing anything.";
+        readonly details: "Idempotent 4-stage terminal finalization: (1) finalize writes retrospectives for in-progress phases, (2) archive creates timestamped bundle of swarm artifacts and evidence, (3) clean removes active-state files for a clean slate, (4) align performs aggressive git reset --hard to the default remote branch, discarding uncommitted changes and gitignored build artifacts (user-created untracked files are preserved); falls back to a cautious reset that preserves uncommitted changes when the aggressive path cannot proceed. Alignment re-verifies the tracked tree immediately before its destructive reset and aborts fail-closed (leaving alignment undone) when tracked files changed after the close gate was verified or the status cannot be re-read (#2953). WARNING: alignment discards local changes and gitignored files. Resets agent sessions, delegation chains, and active-agent mappings. Reads .swarm/close-lessons.md for explicit lessons and runs curation. Cleanup: knowledge.jsonl is preserved; plan.json, plan.md, events.jsonl, handoff.*, run-memory.jsonl, and summaries/ are removed. Use --skill-review to run the quota-bounded skill_improver in proposal mode. Use --dry-run to preview what finalize would archive, clean, and align without taking the lock or changing anything.";
         readonly args: "--prune-branches, --skill-review, --dry-run";
         readonly category: "core";
         readonly toolPolicy: "none";

package/dist/hooks/knowledge-validator.d.ts

@@ -121,6 +121,23 @@ export interface EntryHealthResult {
     concern?: string;
 }
 export declare function auditEntryHealth(entry: KnowledgeEntryBase): EntryHealthResult;
+/**
+ * #2950: what `quarantineEntry` actually did inside the lock. Callers that
+ * need to report truthfully (the knowledge_archive tool) switch on this
+ * instead of assuming the mutation happened; value-discarding callers are
+ * unaffected.
+ */
+export type QuarantineEntryOutcome = {
+    status: 'quarantined';
+} | {
+    status: 'denied';
+    basis: string;
+    detail: string;
+} | {
+    status: 'not_found';
+} | {
+    status: 'invalid_input';
+};
 export declare function quarantineEntry(directory: string, entryId: string, reason: string, reportedBy: 'architect' | 'user' | 'auto', 
 /** #1848: cohort-safe curation context. When provided, the quarantine is
  * authorized through the shared curation policy BEFORE mutating; an
@@ -130,7 +147,7 @@ export declare function quarantineEntry(directory: string, entryId: string, reas
 curationContext?: {
     input: CurationAuthorizationInput;
     context: CurationContext;
-}): Promise<void>;
+}): Promise<QuarantineEntryOutcome>;
 export declare function restoreEntry(directory: string, entryId: string, 
 /** #1848 §2: cohort-safe curation context (optional). When provided, the
  * restore is authorized through the shared policy before mutating. */