opencode-swarm 7.199.5 → 7.200.0

package/dist/cli/{index-b0kr8720.js → index-511hw14d.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-34jat4f2.js";
+} from "./index-wfb6vrc2.js";
 import {
   handleGuardrailLog
-} from "./index-esakwcr3.js";
+} from "./index-kwfhr3mz.js";
 import {
   COMMAND_REGISTRY,
   DEFAULT_CI_DEADLINE_MS,
@@ -23,6 +23,7 @@ import {
   handleAnalyzeCommand,
   handleApproveWriteCommand,
   handleArchiveCommand,
+  handleAttestCommand,
   handleAutoProceedCommand,
   handleBenchmarkCommand,
   handleBlueprintCurrentCommand,
@@ -97,80 +98,80 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-26dmsdx3.js";
-import"./index-my753e0g.js";
-import"./index-3fz5w2wb.js";
-import"./index-6ssraqaa.js";
+} from "./index-hg4qa0aq.js";
+import"./index-nq3zcrhm.js";
+import"./index-8rrs1nc0.js";
+import"./index-md2180vx.js";
+import"./index-yss701b3.js";
+import"./index-0wg5q595.js";
 import"./index-axqyjreb.js";
-import"./index-0je0mees.js";
-import"./index-hx2f3j9w.js";
 import"./index-txdagbh7.js";
-import"./index-zdfzrwbk.js";
+import"./index-qnabg1wp.js";
+import"./index-vqtca3xv.js";
 import"./index-rdec0y3z.js";
-import"./index-9n40q82y.js";
-import"./index-6xyt6d5m.js";
-import"./index-85vd6sxy.js";
-import"./index-10wwrgj2.js";
-import"./index-eyq1q1xn.js";
-import"./index-4cyc18bc.js";
+import"./index-qnst0jwc.js";
+import"./index-71bqn1nn.js";
+import"./index-e8m8bb1r.js";
+import"./index-bp476gwc.js";
+import"./index-8a3aasag.js";
 import"./index-x5jwegqw.js";
-import"./index-tsg61z0r.js";
-import"./index-4pbzepgw.js";
+import"./index-r02aqt0a.js";
+import"./index-rfvnq6wd.js";
 import"./index-8mrentmw.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-xtda4xsn.js";
-import"./index-gyz59cbh.js";
+import"./index-22atsy06.js";
+import"./index-35tf03js.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-76skvj8z.js";
+import"./index-9nmrw7ek.js";
 import"./index-v3bmwmqw.js";
-import"./index-9c0vp5yj.js";
-import"./index-yg5xd4am.js";
-import"./index-0ra0vs2p.js";
+import"./index-sk1rva12.js";
+import"./index-58cr1xg0.js";
+import"./index-m9j9varx.js";
 import"./index-spggmr30.js";
-import"./index-6xv2hz0e.js";
-import"./index-d7y3cafq.js";
+import"./index-1rfgzsaw.js";
+import"./index-x25rhkmk.js";
 import"./index-m9zzj4ee.js";
-import"./index-b3ws03kp.js";
-import"./index-xyg7des8.js";
-import"./index-0veqvgny.js";
+import"./index-x1z5d5kj.js";
+import"./index-p5m71yph.js";
+import"./index-jy0mgzjq.js";
 import"./index-rtry5xyf.js";
-import"./index-zte3djpf.js";
+import"./index-hxp5jgd8.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-p5d32v0x.js";
-import"./index-j3rfbs45.js";
-import"./index-ybvnf7rt.js";
-import"./index-9y6yk1n0.js";
-import"./index-snx2vb1x.js";
+import"./index-pyv8vzkx.js";
+import"./index-99zt998b.js";
+import"./index-7v74n9a1.js";
+import"./index-vmevv6my.js";
+import"./index-d083d1q7.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-3mzc5rqc.js";
+import"./index-wr0n2w3z.js";
 import"./index-7pmbnjvj.js";
 import"./index-9rwhas09.js";
-import"./index-zbygz217.js";
-import"./index-bgydmx8k.js";
+import"./index-1tpz99db.js";
+import"./index-n5k81wym.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-n1ddn12j.js";
-import"./index-jmhn6ab5.js";
-import"./index-dz15f98h.js";
+import"./index-dng8z8me.js";
+import"./index-ac8vdmgv.js";
+import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
-import"./index-dtwj4hsk.js";
+import"./index-c2k7q723.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-270zfq1f.js";
-import"./index-gx2vp8gx.js";
-import"./index-3ckvw3j2.js";
+import"./index-q1x73nnd.js";
+import"./index-3t46mez1.js";
+import"./index-gwc7jahh.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-dengtwpp.js";
+} from "./index-yvv0my1a.js";
 import {
   AGENT_TOOL_MAP,
   ORCHESTRATOR_NAME,
@@ -513,6 +514,7 @@ export {
   handleBlueprintCurrentCommand,
   handleBenchmarkCommand,
   handleAutoProceedCommand,
+  handleAttestCommand,
   handleArchiveCommand,
   handleApproveWriteCommand,
   handleAnalyzeCommand,

package/dist/cli/{index-yg5xd4am.js → index-58cr1xg0.js}

@@ -2,14 +2,14 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-0ra0vs2p.js";
+} from "./index-m9j9varx.js";
 import {
   isSpawnCwdMissing,
   isSpawnCwdUnreadable
 } from "./index-spggmr30.js";
 import {
   validateSwarmPath
-} from "./index-b3ws03kp.js";
+} from "./index-x1z5d5kj.js";
 import {
   init_path_identity,
   isPathWithinDeclaredScope,
@@ -19,13 +19,13 @@ import {
   atomicWriteFile,
   taskEvidencePath,
   withTaskEvidenceLock
-} from "./index-jmhn6ab5.js";
+} from "./index-ac8vdmgv.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";
 import {
   telemetry
-} from "./index-dtwj4hsk.js";
+} from "./index-c2k7q723.js";
 import {
   advisoryWarn,
   init_git_executable,
@@ -46,6 +46,7 @@ import {
 
 // src/gate-evidence.ts
 init_zod();
+import { createHash as createHash2 } from "crypto";
 import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, realpathSync as realpathSync2, statSync as statSync2 } from "fs";
 import * as path4 from "path";
 
@@ -222,6 +223,53 @@ async function readTaskGateRequirementsReceipts(directory, taskId) {
   }
   return receipts;
 }
+function readTaskGateRequirementsReceiptsSync(directory, taskId) {
+  const filePath = safeTaskGateRequirementsReceiptPath(directory, taskId, false);
+  const text = readBoundedTextFile(filePath);
+  if (text === null)
+    return [];
+  const receipts = [];
+  for (const line of text.split(`
+`)) {
+    if (!line.trim())
+      continue;
+    const parsed = TaskGateRequirementsReceiptSchema.parse(JSON.parse(line));
+    if (parsed.taskId !== taskId || parsed.routeBinding !== undefined && parsed.routeBinding.taskId !== taskId) {
+      throw new Error(`TASK_GATE_REQUIREMENTS_IDENTITY_MISMATCH: expected ${taskId}, found ${parsed.taskId}`);
+    }
+    const { chainHash, ...withoutChainHash } = parsed;
+    if (computeChainHash(withoutChainHash) !== chainHash) {
+      throw new Error(`TASK_GATE_REQUIREMENTS_CHAIN_MISMATCH: receipt for ${taskId} failed hash validation`);
+    }
+    const previousChainHash = receipts.at(-1)?.chainHash ?? null;
+    if (parsed.previousChainHash !== previousChainHash) {
+      throw new Error(`TASK_GATE_REQUIREMENTS_CHAIN_MISMATCH: receipt for ${taskId} failed linkage validation`);
+    }
+    receipts.push(parsed);
+  }
+  return receipts;
+}
+function routeEvidenceFromTaskGateRequirements(receipts) {
+  const latestByDispatch = new Map;
+  for (const receipt of receipts) {
+    const binding = receipt.routeBinding;
+    if (!binding)
+      continue;
+    const dispatchKey = [
+      binding.role,
+      binding.sessionId,
+      binding.taskId,
+      binding.callId,
+      binding.childSessionId,
+      String(binding.generation)
+    ].join("\x00");
+    latestByDispatch.set(dispatchKey, binding);
+  }
+  return [...latestByDispatch.values()];
+}
+function isLegacyTaskGateRequirementsChain(receipts) {
+  return receipts.length > 0 && receipts.every((receipt) => !receipt.routeBinding);
+}
 function deriveReceiptRole(event) {
   switch (event.type) {
     case "accepted_mutation":
@@ -344,6 +392,12 @@ function sanitizeTaskId(taskId) {
   }
   throw new Error(`Invalid task ID: must be alphanumeric (ASCII) with optional hyphens, underscores, or dots, got "${taskId}"`);
 }
+function validateTaskIdFormat(taskId) {
+  if (!STRICT_TASK_ID_PATTERN.test(taskId)) {
+    return `Invalid taskId "${taskId}". Must match pattern N.M or N.M.P (e.g., "1.1", "1.2.3")`;
+  }
+  return;
+}
 
 // src/workflow/workflow-wal-file.ts
 import * as fs4 from "fs";
@@ -1493,7 +1547,7 @@ function parseTaskRepairWal(raw, filePath, expectedTaskId) {
 }
 function parseTaskTerminalWal(raw, filePath, expectedTaskId) {
   const parsed = parseWalObject(raw, filePath, "TASK_TERMINAL_WAL_UNREADABLE", "Preserve this file and reconcile the task terminal transition before moving it aside.");
-  if (parsed.version !== 1 && parsed.version !== 2 || parsed.state !== "PREPARED" && parsed.state !== "COMMITTED" && parsed.state !== "ABORTED" || typeof parsed.taskId !== "string" || !TASK_ID_PATTERN.test(parsed.taskId) || typeof parsed.transitionId !== "string" || parsed.transitionId.length === 0 || parsed.transitionId.length > 512 || typeof parsed.actor !== "string" || parsed.actor.length === 0 || parsed.actor.length > 512 || typeof parsed.oldPlanStatus !== "string" || parsed.oldPlanStatus.length === 0 || parsed.oldPlanStatus.length > 128 || parsed.newPlanStatus !== "completed" && parsed.newPlanStatus !== "blocked" && parsed.newPlanStatus !== "closed" || typeof parsed.oldWorkflowState !== "string" || !WORKFLOW_STATES.has(parsed.oldWorkflowState) || parsed.newWorkflowState !== "complete" && parsed.newWorkflowState !== "blocked" && parsed.newWorkflowState !== "closed" || !Number.isInteger(parsed.generation) || (parsed.generation ?? -1) < 0 || typeof parsed.qaExempt !== "boolean" || parsed.readOnlyNoMutation !== undefined && typeof parsed.readOnlyNoMutation !== "boolean" || typeof parsed.recordedAt !== "string" || !Number.isFinite(Date.parse(parsed.recordedAt))) {
+  if (parsed.version !== 1 && parsed.version !== 2 || parsed.state !== "PREPARED" && parsed.state !== "COMMITTED" && parsed.state !== "ABORTED" || typeof parsed.taskId !== "string" || !TASK_ID_PATTERN.test(parsed.taskId) || typeof parsed.transitionId !== "string" || parsed.transitionId.length === 0 || parsed.transitionId.length > 512 || typeof parsed.actor !== "string" || parsed.actor.length === 0 || parsed.actor.length > 512 || typeof parsed.oldPlanStatus !== "string" || parsed.oldPlanStatus.length === 0 || parsed.oldPlanStatus.length > 128 || parsed.newPlanStatus !== "completed" && parsed.newPlanStatus !== "blocked" && parsed.newPlanStatus !== "closed" || typeof parsed.oldWorkflowState !== "string" || !WORKFLOW_STATES.has(parsed.oldWorkflowState) || parsed.newWorkflowState !== "complete" && parsed.newWorkflowState !== "blocked" && parsed.newWorkflowState !== "closed" || !Number.isInteger(parsed.generation) || (parsed.generation ?? -1) < 0 || typeof parsed.qaExempt !== "boolean" || parsed.readOnlyNoMutation !== undefined && typeof parsed.readOnlyNoMutation !== "boolean" || parsed.externalEvidence !== undefined && typeof parsed.externalEvidence !== "boolean" || typeof parsed.recordedAt !== "string" || !Number.isFinite(Date.parse(parsed.recordedAt))) {
     formatUnreadableMessage("TASK_TERMINAL_WAL_UNREADABLE", filePath, "is not a valid terminal WAL", "Preserve this file and reconcile the task terminal transition before moving it aside.");
   }
   if (parsed.version === 2 && (typeof parsed.planIdentityHash !== "string" || !SHA256_PATTERN.test(parsed.planIdentityHash) || typeof parsed.planEpoch !== "string" || !UUID_PATTERN.test(parsed.planEpoch))) {
@@ -1733,7 +1787,9 @@ var TASK_WORKFLOW_OUTCOMES = [
   "task_completed",
   "task_blocked",
   "task_closed",
-  "repair_idle"
+  "repair_idle",
+  "external_evidence_attested",
+  "external_evidence_revoked"
 ];
 var MAX_PLAN_SCOPE_INSPECTION_BYTES = 4 * 1024 * 1024;
 function readCurrentTaskDeclaredFiles(directory, taskId) {
@@ -1799,6 +1855,30 @@ var GateEvidenceSchema = exports_external.object({
   timestamp: exports_external.string(),
   agent: exports_external.string()
 }).passthrough();
+var ExternalEvidenceBundleSchema = exports_external.object({
+  class: exports_external.literal("external_git"),
+  transitionId: exports_external.string().min(1).max(512),
+  declarationDigest: exports_external.string().regex(/^[a-f0-9]{64}$/),
+  anchors: exports_external.array(exports_external.object({
+    command: exports_external.string().min(1).max(400),
+    expect: exports_external.string().max(4096).optional(),
+    expect_prefix: exports_external.string().min(1).max(4096).optional(),
+    matched: exports_external.boolean(),
+    exit_code: exports_external.number().int(),
+    stdout: exports_external.string().max(4096)
+  })).min(1).max(16).superRefine((anchors, ctx) => {
+    anchors.forEach((anchor, index) => {
+      if (anchor.expect === undefined && anchor.expect_prefix === undefined) {
+        ctx.addIssue({
+          code: exports_external.ZodIssueCode.custom,
+          message: `anchor ${index} must carry expect and/or a non-empty expect_prefix`,
+          path: [index]
+        });
+      }
+    });
+  }),
+  attestedAt: exports_external.string().min(1)
+});
 var TaskWorkflowMetadataSchema = exports_external.object({
   schema: exports_external.literal(TASK_WORKFLOW_SCHEMA_MARKER),
   generation: exports_external.number().int().min(0),
@@ -1816,7 +1896,8 @@ var TaskWorkflowMetadataSchema = exports_external.object({
     generation: exports_external.literal(0),
     transitionId: exports_external.string().min(1).max(512),
     declaredFiles: exports_external.array(exports_external.string()).length(0)
-  }).optional()
+  }).optional(),
+  externalEvidence: ExternalEvidenceBundleSchema.optional()
 });
 var TaskEvidenceSchema = exports_external.object({
   taskId: exports_external.string(),
@@ -1903,6 +1984,10 @@ function getEventOutcome(event) {
       return "task_closed";
     case "repair_idle":
       return "repair_idle";
+    case "external_evidence_attested":
+      return "external_evidence_attested";
+    case "external_evidence_revoked":
+      return "external_evidence_revoked";
   }
 }
 function isAuthoritativeWorkflowMetadata(workflow) {
@@ -1978,8 +2063,9 @@ function deriveApplicableGateSet(evidence, options) {
   }
   const workflow = getTaskWorkflowSnapshot(evidence);
   const readOnlyNoMutation = isNoMutationSettlementMetadata(workflow) && (options?.currentDeclaredFiles === undefined ? true : options.currentDeclaredFiles !== null && options.currentDeclaredFiles.length === 0);
+  const externalEvidenceMatched = workflow.lastOutcome === "external_evidence_attested" && (workflow.externalEvidence?.anchors.length ?? 0) > 0 && workflow.externalEvidence.anchors.every((anchor) => anchor.matched);
   const requiredGates = [...new Set(evidence.required_gates ?? [])];
-  if (!readOnlyNoMutation && !requiredGates.includes("pre_check")) {
+  if (!readOnlyNoMutation && !externalEvidenceMatched && !requiredGates.includes("pre_check")) {
     requiredGates.unshift("pre_check");
   }
   const satisfiedGates = requiredGates.filter((gate) => evidence.gates?.[gate] != null);
@@ -1993,6 +2079,47 @@ function deriveApplicableGateSet(evidence, options) {
 function isReadOnlyNoMutationEligible(evidence, options) {
   return deriveApplicableGateSet(evidence, options).readOnlyNoMutation;
 }
+function computeExternalDeclarationDigest(input) {
+  const canonical = {
+    taskId: input.taskId,
+    evidence_class: input.evidence_class,
+    evidence_anchors: input.evidence_anchors.map((anchor) => ({
+      command: anchor.command,
+      expect: anchor.expect,
+      expect_prefix: anchor.expect_prefix
+    })),
+    plan_title: input.plan_title,
+    plan_swarm: input.plan_swarm,
+    generation: input.generation
+  };
+  return createHash2("sha256").update(JSON.stringify(canonical)).digest("hex");
+}
+function externalProofCurrent(plan, planTask, evidence) {
+  if (planTask.evidence_class !== "external_git")
+    return false;
+  const workflow = evidence?.workflow;
+  if (!workflow)
+    return false;
+  const bundle = workflow.externalEvidence;
+  if (!bundle || bundle.anchors.length === 0)
+    return false;
+  if (!bundle.anchors.every((anchor) => anchor.matched))
+    return false;
+  return bundle.declarationDigest === computeExternalDeclarationDigest({
+    taskId: planTask.id,
+    evidence_class: "external_git",
+    evidence_anchors: planTask.evidence_anchors ?? [],
+    plan_title: plan.title,
+    plan_swarm: plan.swarm,
+    generation: workflow.generation
+  });
+}
+function isExternalEvidenceInitialCompletionEligible(plan, planTask, evidence) {
+  if (!externalProofCurrent(plan, planTask, evidence))
+    return false;
+  const snapshot = getTaskWorkflowSnapshot(evidence);
+  return snapshot.authoritative && snapshot.state === "idle";
+}
 function reduceTaskWorkflowSnapshot(current, event, context) {
   if ((current.state === "complete" || current.state === "blocked" || current.state === "closed") && event.type !== "repair_idle" && !(current.state === "complete" && event.type === "task_completed" || current.state === "blocked" && event.type === "task_blocked" || current.state === "blocked" && event.type === "task_closed" || current.state === "blocked" && event.type === "stage_a_passed" && event.settlementRecovery === true)) {
     throw new Error(`TASK_WORKFLOW_TERMINAL: cannot apply ${event.type} from ${current.state}`);
@@ -2011,15 +2138,24 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
     ...current.forcedCompletion === true ? { forcedCompletion: true } : {},
     ...current.supervisedRecovery === true ? { supervisedRecovery: true } : {},
     ...current.settlementRecovery === true ? { settlementRecovery: true } : {},
-    ...current.noMutationSettlement ? { noMutationSettlement: current.noMutationSettlement } : {}
+    ...current.noMutationSettlement ? { noMutationSettlement: current.noMutationSettlement } : {},
+    ...current.externalEvidence ? { externalEvidence: current.externalEvidence } : {}
   };
   switch (event.type) {
     case "dispatch_attempted": {
-      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
+      const {
+        noMutationSettlement: _clearedSettlement,
+        externalEvidence: _clearedExternalEvidence,
+        ...withoutSettlement
+      } = base;
       return withoutSettlement;
     }
     case "dispatch_no_mutation": {
-      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
+      const {
+        noMutationSettlement: _clearedSettlement,
+        externalEvidence: _clearedExternalEvidence,
+        ...withoutSettlement
+      } = base;
       return {
         ...withoutSettlement,
         retryCount: Math.min(current.retryCount + 1, 3),
@@ -2046,7 +2182,11 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         retryEpoch: current.retryEpoch || current.generation + 1
       };
     case "accepted_mutation": {
-      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
+      const {
+        noMutationSettlement: _clearedSettlement,
+        externalEvidence: _clearedExternalEvidence,
+        ...withoutSettlement
+      } = base;
       if (event.context?.settlementFailed === true) {
         return {
           ...withoutSettlement,
@@ -2110,9 +2250,26 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         ...base,
         state: current.state
       };
+    case "external_evidence_attested": {
+      if (current.state !== "idle") {
+        throw new Error(`TASK_WORKFLOW_EXTERNAL_ATTEST_STATE: external evidence can only be attested from idle (task never entered the coder QA lifecycle), not ${current.state}`);
+      }
+      if (current.externalEvidence?.transitionId === event.bundle.transitionId) {
+        return { ...base };
+      }
+      return { ...base, externalEvidence: event.bundle };
+    }
+    case "external_evidence_revoked": {
+      const {
+        externalEvidence: _revokedExternalEvidence,
+        ...withoutExternalEvidence
+      } = base;
+      return withoutExternalEvidence;
+    }
     case "task_completed": {
       const readOnlyNoMutation = event.readOnlyNoMutation === true && current.state === "idle" && current.generation === 0 && isNoMutationSettlementMetadata(current) && context.requiredGates.every((gate) => context.gates[gate] != null);
-      if (event.qaExempt !== true && current.state !== "tests_run" && current.state !== "complete" && !(current.state === "pre_check_passed" && context.gates.council != null) && !readOnlyNoMutation) {
+      const externalAdmitted = event.externalEvidence === true && current.externalEvidence !== undefined && current.externalEvidence.anchors.length > 0 && current.externalEvidence.anchors.every((anchor) => anchor.matched) && (current.state === "idle" || current.state === "complete");
+      if (event.qaExempt !== true && current.state !== "tests_run" && current.state !== "complete" && !(current.state === "pre_check_passed" && context.gates.council != null) && !readOnlyNoMutation && !externalAdmitted) {
         throw new Error(`TASK_WORKFLOW_QA_REQUIRED: cannot complete from ${current.state}`);
       }
       return {
@@ -2137,6 +2294,7 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         supervisedRecovery: _clearedMarker,
         settlementRecovery: _clearedSettlementMarker,
         noMutationSettlement: _clearedSettlement,
+        externalEvidence: _clearedExternalEvidence,
         ...withoutForced
       } = base;
       return {
@@ -2505,4 +2663,4 @@ function compareTaskWorkflowStateRank(left, right) {
   return WORKFLOW_STATE_RANK[left] - WORKFLOW_STATE_RANK[right];
 }
 
-export { isStrictTaskId, sanitizeTaskId, listRecoveryRecords, recoveryReadErrored, _internals, SOURCE_WORKTREE_GONE_STAGE, SOURCE_WORKTREE_UNCERTAIN_STAGE, getMergeStrategy, recoverMergeBackFromImmutableCoordinates, reconcileLandedMerge, postMergeCleanup, pruneStaleWorktreeMetadata, attemptMergeBackFromDirty, cleanupOrphanedBranches, startupOrphanRecovery, readWorkflowWalFile, writeWorkflowWalFile, _internals3 as _internals1, TASK_WORKFLOW_SCHEMA_MARKER, readCurrentTaskDeclaredFiles, TASK_GATE_REQUIREMENTS_RECONSTRUCTION_SENTINEL, assertTaskEvidenceWriteAllowed, parseTaskEvidence, DEFAULT_REQUIRED_GATES, isValidTaskId, getTaskWorkflowSnapshot, deriveApplicableGateSet, isReadOnlyNoMutationEligible, reduceTaskWorkflowSnapshot, deriveRequiredGates, expandRequiredGates, transitionTaskWorkflowEvidence, transitionTaskWorkflowEvidenceWithStatus, withTaskEvidenceTransaction, ensureTaskGateRequirementsReceiptForSettledTransition, recordGateEvidence, recordTodoScanEvidence, recordAgentDispatch, readTaskEvidence, readTaskEvidenceState, readTaskEvidenceRaw, hasPassedAllGates, compareTaskWorkflowStateRank };
+export { readTaskGateRequirementsReceiptsSync, routeEvidenceFromTaskGateRequirements, isLegacyTaskGateRequirementsChain, isStrictTaskId, sanitizeTaskId, validateTaskIdFormat, listRecoveryRecords, recoveryReadErrored, _internals, SOURCE_WORKTREE_GONE_STAGE, SOURCE_WORKTREE_UNCERTAIN_STAGE, getMergeStrategy, recoverMergeBackFromImmutableCoordinates, reconcileLandedMerge, postMergeCleanup, pruneStaleWorktreeMetadata, attemptMergeBackFromDirty, cleanupOrphanedBranches, startupOrphanRecovery, readWorkflowWalFile, writeWorkflowWalFile, _internals3 as _internals1, TASK_WORKFLOW_SCHEMA_MARKER, readCurrentTaskDeclaredFiles, TASK_GATE_REQUIREMENTS_RECONSTRUCTION_SENTINEL, assertTaskEvidenceWriteAllowed, ExternalEvidenceBundleSchema, parseTaskEvidence, DEFAULT_REQUIRED_GATES, isValidTaskId, getTaskWorkflowSnapshot, deriveApplicableGateSet, isReadOnlyNoMutationEligible, computeExternalDeclarationDigest, externalProofCurrent, isExternalEvidenceInitialCompletionEligible, reduceTaskWorkflowSnapshot, deriveRequiredGates, expandRequiredGates, transitionTaskWorkflowEvidence, transitionTaskWorkflowEvidenceWithStatus, withTaskEvidenceTransaction, ensureTaskGateRequirementsReceiptForSettledTransition, recordGateEvidence, recordTodoScanEvidence, recordAgentDispatch, readTaskEvidence, readTaskEvidenceState, readTaskEvidenceRaw, hasPassedAllGates, compareTaskWorkflowStateRank };

package/dist/cli/{index-6xyt6d5m.js → index-71bqn1nn.js}

@@ -2,10 +2,10 @@
 import {
   captureWorkspaceSnapshotAsync,
   changedFilesSinceSnapshotAsync
-} from "./index-eyq1q1xn.js";
+} from "./index-bp476gwc.js";
 import {
   removeWorktreeProvisioningOwner
-} from "./index-tsg61z0r.js";
+} from "./index-r02aqt0a.js";
 import {
   SOURCE_WORKTREE_GONE_STAGE,
   ensureTaskGateRequirementsReceiptForSettledTransition,
@@ -14,13 +14,13 @@ import {
   reconcileLandedMerge,
   withTaskEvidenceTransaction,
   writeWorkflowWalFile
-} from "./index-yg5xd4am.js";
+} from "./index-58cr1xg0.js";
 import {
   validateSwarmPath
-} from "./index-b3ws03kp.js";
+} from "./index-x1z5d5kj.js";
 import {
   appendCoreEventSync
-} from "./index-3mzc5rqc.js";
+} from "./index-wr0n2w3z.js";
 import {
   init_path_identity,
   isPathWithinDeclaredScope
@@ -512,7 +512,7 @@ async function cleanupRecoveredWorktree(directory, descriptor, options) {
     awaitingMergeByCallID,
     cleanupStandardWorktreeForCallId,
     standardWorktreeByCallID
-  } = await import("./worktree-isolation-z6ytes0j.js");
+  } = await import("./worktree-isolation-8snw7w34.js");
   standardWorktreeByCallID.delete(descriptor.callID);
   if (hasResidue)
     awaitingMergeByCallID.set(descriptor.callID, {
@@ -648,7 +648,7 @@ async function recoverCoderSettlement(directory, taskId) {
           awaitingMergeByCallID,
           finishStandardWorktreeDispatch,
           standardWorktreeByCallID
-        } = await import("./worktree-isolation-z6ytes0j.js");
+        } = await import("./worktree-isolation-8snw7w34.js");
         const descriptor = wal.worktree;
         const reconstructedDispatch = {
           callID: descriptor.callID,

package/dist/cli/{index-ybvnf7rt.js → index-7v74n9a1.js}

@@ -4,30 +4,30 @@ import {
   projectDbExists,
   withImmediateTransaction,
   withProjectDbReadOnly
-} from "./index-snx2vb1x.js";
+} from "./index-d083d1q7.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
 } from "./index-7pmbnjvj.js";
 import {
   withEvidenceLock
-} from "./index-dz15f98h.js";
+} from "./index-q8vfw61p.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";
 import {
   emit
-} from "./index-dtwj4hsk.js";
+} from "./index-c2k7q723.js";
 import {
   ExecutionProfileSchema,
   PlanSchema,
   TaskStatusSchema,
   normalizeCurrentPhaseInPlace
-} from "./index-gx2vp8gx.js";
+} from "./index-3t46mez1.js";
 import {
   init_loader,
   loadPluginConfig
-} from "./index-3ckvw3j2.js";
+} from "./index-gwc7jahh.js";
 import {
   criticalWarn,
   init_logger,
@@ -36,7 +36,7 @@ import {
 import {
   init_package,
   package_default
-} from "./index-dengtwpp.js";
+} from "./index-yvv0my1a.js";
 
 // src/plan/planning-profile.ts
 init_loader();
@@ -1179,7 +1179,9 @@ function computePlanLedgerHash(plan) {
         acceptance: task.acceptance,
         files_touched: [...task.files_touched].sort(),
         evidence_path: task.evidence_path,
-        blocked_reason: task.blocked_reason
+        blocked_reason: task.blocked_reason,
+        evidence_class: task.evidence_class,
+        evidence_anchors: task.evidence_anchors
       }))
     }))
   };
@@ -1207,7 +1209,9 @@ function computePlanStructureHash(plan) {
         acceptance: task.acceptance,
         files_touched: [...task.files_touched].sort(),
         evidence_path: task.evidence_path,
-        blocked_reason: task.blocked_reason
+        blocked_reason: task.blocked_reason,
+        evidence_class: task.evidence_class,
+        evidence_anchors: task.evidence_anchors
       }))
     }))
   };

package/dist/cli/{index-4cyc18bc.js → index-8a3aasag.js}

@@ -1,27 +1,27 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-b3ws03kp.js";
+} from "./index-x1z5d5kj.js";
 import {
   deleteCoordinationState,
   importCoordinationOnce,
   listCoordinationStates,
   transitionCoordinationState,
   withCoordinationTransaction
-} from "./index-9y6yk1n0.js";
+} from "./index-vmevv6my.js";
 import {
   getProjectDb,
   projectDbExists
-} from "./index-snx2vb1x.js";
+} from "./index-d083d1q7.js";
 import {
   observeStoreHealth
-} from "./index-zbygz217.js";
+} from "./index-1tpz99db.js";
 import {
   withEvidenceLock
-} from "./index-dz15f98h.js";
+} from "./index-q8vfw61p.js";
 import {
   telemetry
-} from "./index-dtwj4hsk.js";
+} from "./index-c2k7q723.js";
 import {
   canonicalRootKey,
   canonicalRootKeyFresh,
@@ -29,7 +29,7 @@ import {
 } from "./index-te9hq2f4.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-270zfq1f.js";
+} from "./index-q1x73nnd.js";
 import {
   log
 } from "./index-zgwm4ryv.js";

package/dist/cli/{index-my753e0g.js → index-8rrs1nc0.js}

@@ -11,10 +11,10 @@ import {
 } from "./index-9rwhas09.js";
 import {
   observeStoreHealth
-} from "./index-zbygz217.js";
+} from "./index-1tpz99db.js";
 import {
   telemetry
-} from "./index-dtwj4hsk.js";
+} from "./index-c2k7q723.js";
 import {
   init_git_executable,
   resolveGitExecutable
@@ -29,7 +29,7 @@ import {
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-dengtwpp.js";
+} from "./index-yvv0my1a.js";
 import {
   init_constants
 } from "./index-xfzkq1k4.js";

package/dist/cli/{index-j3rfbs45.js → index-99zt998b.js}

@@ -4,7 +4,7 @@ import {
   getProjectDb,
   projectDbExists,
   withImmediateTransaction
-} from "./index-snx2vb1x.js";
+} from "./index-d083d1q7.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
@@ -426,4 +426,4 @@ function getEffectiveGates(profile, sessionOverrides) {
   }
   return merged;
 }
-export { formatLegacyQaBindingOnlyCall, DEFAULT_QA_GATES, getProfileLookupForIdentity, setGatesForIdentity, computeProfileHash, getEffectiveGates };
+export { formatLegacyQaBindingOnlyCall, formatLegacyQaBindingRecovery, DEFAULT_QA_GATES, getProfileLookupForIdentity, setGatesForIdentity, computeProfileHash, getEffectiveGates };