opencode-swarm 7.199.6 → 7.200.1

package/dist/cli/{worktree-collision-ownership-gsv009xc.js → worktree-collision-ownership-84m9f5an.js}

@@ -6,37 +6,37 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-tsg61z0r.js";
+} from "./index-b4kdms7x.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-cyp3r8ar.js";
+} from "./index-0tygsk8b.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-v3bmwmqw.js";
-import"./index-b3ws03kp.js";
-import"./index-j3rfbs45.js";
-import"./index-9y6yk1n0.js";
-import"./index-snx2vb1x.js";
+import"./index-xyvsdn07.js";
+import"./index-s9y49avf.js";
+import"./index-na6ph1fp.js";
+import"./index-ves1rtqt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-3mzc5rqc.js";
+import"./index-nzfq1ms2.js";
 import"./index-7pmbnjvj.js";
-import"./index-zbygz217.js";
-import"./index-cwg99gea.js";
+import"./index-ypxq0x7r.js";
+import"./index-bn3aa5q1.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-n1ddn12j.js";
-import"./index-jmhn6ab5.js";
-import"./index-dz15f98h.js";
+import"./index-g57p8p1k.js";
+import"./index-traz987v.js";
+import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
-import"./index-dtwj4hsk.js";
+import"./index-c2k7q723.js";
 import {
   canonicalRootKeyFresh
 } from "./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-270zfq1f.js";
+import"./index-epzadpmm.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-isolation-3sdvs69a.js → worktree-isolation-xwbszhja.js}

@@ -25,79 +25,79 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-exj9yb0x.js";
-import"./index-jhjmf5sn.js";
-import"./index-tqtfjzb0.js";
-import"./index-exr153j1.js";
+} from "./index-2hnnkj64.js";
+import"./index-s3w41p1x.js";
+import"./index-qzakbjcg.js";
+import"./index-c9g3hkjz.js";
+import"./index-pe77h482.js";
+import"./index-5snwc3dz.js";
 import"./index-axqyjreb.js";
-import"./index-0je0mees.js";
-import"./index-hx2f3j9w.js";
 import"./index-txdagbh7.js";
-import"./index-t67n8jhb.js";
+import"./index-dgyddtje.js";
+import"./index-z9mysg5m.js";
 import"./index-rdec0y3z.js";
-import"./index-b9f2j9bx.js";
-import"./index-s9hekeej.js";
-import"./index-gdyqdhz1.js";
-import"./index-r227g76y.js";
-import"./index-eyq1q1xn.js";
-import"./index-4cyc18bc.js";
+import"./index-12h2rtdj.js";
+import"./index-qaqyq25k.js";
+import"./index-th667k1y.js";
+import"./index-1v277wxc.js";
+import"./index-wgf1780e.js";
 import"./index-x5jwegqw.js";
-import"./index-tsg61z0r.js";
-import"./index-cyp3r8ar.js";
-import"./index-8mrentmw.js";
+import"./index-b4kdms7x.js";
+import"./index-0tygsk8b.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-2cb644vj.js";
-import"./index-x6rv0e00.js";
+import"./index-rzkmg02a.js";
+import"./index-w2bhrp6z.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-qbhjey8k.js";
+import"./index-vtkgg2qn.js";
 import"./index-v3bmwmqw.js";
-import"./index-38fgg593.js";
-import"./index-dqkr60bw.js";
-import"./index-vgb679vr.js";
+import"./index-8mrentmw.js";
+import"./index-3zspah3v.js";
+import"./index-sva5swrs.js";
+import"./index-3exe6k66.js";
 import"./index-spggmr30.js";
-import"./index-s4wbe96z.js";
-import"./index-s5tgnsmh.js";
+import"./index-0ptf66x5.js";
+import"./index-parkaa70.js";
 import"./index-m9zzj4ee.js";
-import"./index-b3ws03kp.js";
-import"./index-3ct8kgfj.js";
-import"./index-0veqvgny.js";
+import"./index-xyvsdn07.js";
+import"./index-sz67z90q.js";
+import"./index-v1h70r3y.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-f02p4yn4.js";
+} from "./index-51dw4bjc.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-7m2gcmm7.js";
-import"./index-j3rfbs45.js";
-import"./index-zzpy5cx3.js";
-import"./index-9y6yk1n0.js";
-import"./index-snx2vb1x.js";
+import"./index-2m740hyt.js";
+import"./index-s9y49avf.js";
+import"./index-s8eac99p.js";
+import"./index-na6ph1fp.js";
+import"./index-ves1rtqt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-3mzc5rqc.js";
+import"./index-nzfq1ms2.js";
 import"./index-7pmbnjvj.js";
 import"./index-9rwhas09.js";
-import"./index-zbygz217.js";
-import"./index-cwg99gea.js";
+import"./index-ypxq0x7r.js";
+import"./index-bn3aa5q1.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-n1ddn12j.js";
-import"./index-jmhn6ab5.js";
-import"./index-dz15f98h.js";
+import"./index-g57p8p1k.js";
+import"./index-traz987v.js";
+import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
-import"./index-dtwj4hsk.js";
+import"./index-c2k7q723.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-270zfq1f.js";
-import"./index-gx2vp8gx.js";
-import"./index-88d5kpjj.js";
+import"./index-epzadpmm.js";
+import"./index-3t46mez1.js";
+import"./index-3020n6d9.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-0bw1jyen.js";
+import"./index-p6v544jn.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/commands/attest.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `/swarm attest <task_id>` (issue #3422): verify a git-external deliverable
+ * with the task's pinned read-only git anchors and record the durable
+ * external-evidence bundle that admits completion — the in-machine exit for
+ * tasks whose deliverable (commit/push, gh ops) can never produce a coder
+ * settlement. Human- or agent-invoked; everything fails closed exactly as
+ * the underlying executor does (undeclared tasks, non-read-only commands,
+ * mismatched anchors, oversized output all refuse).
+ */
+export declare function handleAttestCommand(directory: string, args: string[], sessionID?: string): Promise<string>;

package/dist/commands/close/internals.d.ts

@@ -26,7 +26,7 @@ export declare const _internals: {
     CLOSE_REFLECTION_TIMEOUT_MS: number;
     detectFullAuto: typeof import("./orchestrator.js").detectFullAuto;
     guaranteeAllPlansComplete: typeof import("./finalize-stage.js").guaranteeAllPlansComplete;
-    getGitRepositoryStatus: typeof import("../../git/branch.js").getGitRepositoryStatus;
+    getGitRepositoryStatus: typeof import("../../commands/git-status-read.js").readGitRepositoryStatusDetailedAsync;
     resetToMainAfterMerge: (cwd: string, options?: import("./align-stage.js").GuardedResetToMainOptions) => Promise<import("./align-stage.js").GuardedResetToMainResult>;
     resetToRemoteBranch: typeof import("../../git/branch.js").resetToRemoteBranch;
     copyDirRecursive: typeof import("./fs-helpers.js").copyDirRecursive;

package/dist/commands/close/orchestrator.d.ts

@@ -36,6 +36,13 @@ export interface ClosePurgeGate {
         status: number | null;
         stderrTail: string;
     };
+    /**
+     * #3434: porcelain records whose path normalized outside the project
+     * root — excluded from `dirtyPaths`/`candidates` (and therefore from the
+     * confirm-token digest) and surfaced as a bounded warning instead of
+     * being joined into the scope unvalidated.
+     */
+    excludedOutOfRoot: string[];
 }
 /** Test seam for the #2508 gate (simulate git-status read failures). The
  * default routes through the #3317 async reader; legacy sync stubs returning

package/dist/commands/destructive-purge.d.ts

@@ -84,6 +84,18 @@ export declare const GIT_STATUS_ARGS: readonly ["--no-optional-locks", "status",
  * `src/commands/rollback-gate.ts` exports a same-named parser for
  * NUL-terminated `--porcelain -z` output (J1/#2946); the two are deliberately
  * not consolidated in this PR.
+ *
+ * #3434: `../`-bearing (or absolute) records are excluded from the dirty
+ * set and recorded in `excludedOutOfRoot` — the legacy `string[]` export
+ * below returns only the in-root paths. The containment predicate itself is
+ * the rollback-gate module's `isOutOfRootRelativePath` (single shared
+ * definition; the parsers stay separate by design).
+ */
+export declare function parseTrackedDirtyPathsWithExclusions(statusOutput: string): import('./rollback-gate.js').TrackedDirtyParseResult;
+/**
+ * Legacy `string[]` view of the newline-form parser (in-root paths only) —
+ * the export existing suites pin. New consumers that need the exclusion
+ * diagnostic use `parseTrackedDirtyPathsWithExclusions`.
  */
 export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
 /**
@@ -94,10 +106,13 @@ export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
  * helper, so its existing #2508 fail-closed tests keep their injection point.
  * #3317: async — the read is bounded and killable, and legacy sync stubs
  * keep working (awaiting a plain value is a no-op).
+ * #3434: the ok arm carries `excludedOutOfRoot` so the #2953 re-check
+ * compares against the SAME filtered set the operator confirmed.
  */
 export declare function readTrackedDirtyPaths(directory: string): Promise<{
     ok: true;
     dirtyPaths: string[];
+    excludedOutOfRoot: string[];
 } | {
     ok: false;
     /** Structured cause when the reader could tell (absent for legacy `null` stubs). */

package/dist/commands/git-status-read.d.ts

@@ -74,3 +74,26 @@ export declare function readGitStatusAsync(args: readonly string[], cwd: string,
  * non-blocking preview, with no transient-retry chain.
  */
 export declare function readGitRepositoryStatusAsync(cwd: string): Promise<boolean>;
+/**
+ * Detailed twin of `readGitRepositoryStatusAsync` (issue #3427): the same
+ * single-attempt `rev-parse --git-dir` read, mapped to the SAME
+ * `GitRepositoryStatus` vocabulary the sync `branch.getGitRepositoryStatus`
+ * produces — `{isRepo:true}` / `not_git_repo` / `git_unavailable` /
+ * `git_error` with a message — so the finalize align stage can move off the
+ * blocking sync probe without losing its reason-specific skip diagnostics.
+ *
+ * Classification parity with `src/git/branch.ts`:
+ * - ENOENT goes through the shared #2236 `classifySpawnFailure` split — a
+ *   cwd fault is `git_error` NAMING the cwd (never `git_unavailable`);
+ *   binary-missing keeps the full `gitBinaryMissingMessage` remediation text.
+ * - A nonzero child exit is `not_git_repo` only when the bounded stderr
+ *   matches the shared `isNotGitRepositoryMessage` vocabulary; every other
+ *   nonzero exit is `git_error` carrying the status.
+ * - Spawn-class failures (ETIMEDOUT/ESIGNAL/…) are `git_error` with the
+ *   failure code ALWAYS carried in the message — empty stderr never
+ *   discards the class.
+ *
+ * `ignoreOutput` is deliberately NOT set: the bounded stderr feeds the
+ * repo-detection classification.
+ */
+export declare function readGitRepositoryStatusDetailedAsync(cwd: string): Promise<import('../git/branch.js').GitRepositoryStatus>;

package/dist/commands/index.d.ts

@@ -8,6 +8,7 @@ export { handleAgentsCommand } from './agents';
 export { handleAnalyzeCommand } from './analyze';
 export { handleApproveWriteCommand } from './approve-write';
 export { handleArchiveCommand } from './archive';
+export { handleAttestCommand } from './attest';
 export { handleAutoProceedCommand } from './auto-proceed';
 export { handleBenchmarkCommand } from './benchmark';
 export { handleBrainstormCommand } from './brainstorm';

package/dist/commands/registry.d.ts

@@ -1077,11 +1077,19 @@ export declare const COMMAND_REGISTRY: {
     readonly 'reset-session': {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Clear session state while preserving plan, evidence, and knowledge";
-        readonly details: "Deletes only .swarm/session/state.json and other session files. Clears in-memory agent sessions, delegation chains, and active-agent mappings. Preserves plan, evidence, and knowledge. Also releases this session's pending knowledge-gate obligations (#2398) and recovers stale coder settlements so dispatches cannot wedge on CODER_DISPATCH_IN_PROGRESS (#2268). Auto-backs up removed files to .swarm/reset-backups/ (newest 5 kept).";
+        readonly details: "Deletes .swarm/session/state.json plus other session files; clears in-memory sessions, chains, and active-agent maps. Preserves plan, evidence, and knowledge; releases this session's pending knowledge-gate obligations (#2398); recovers coder settlements wedged on CODER_DISPATCH_IN_PROGRESS (#2268); backs up to .swarm/reset-backups/ (newest 5 kept). If a cleanup step fails, the closing guard stays closed by design, writes pause (an advisory says why), and a reset re-run or restart recovers.";
         readonly args: "--confirm=<token> (purge dirty/live lanes)";
         readonly category: "utility";
         readonly toolPolicy: "restricted";
     };
+    readonly attest: {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Verify a git-external deliverable with pinned anchors <task_id>";
+        readonly details: "Runs the task's pinned read-only git evidence_anchors (issue #3422) inside the project root and records the durable external-evidence bundle that admits completion — the in-machine exit for tasks whose deliverable (commit/push, gh ops) can never produce a coder settlement. Fail-closed: the plan task must declare evidence_class external_git with 1..16 anchors (expect exact / expect_prefix non-empty), every anchor runs as a bounded no-shell argv spawn (stdin ignored, 10s per anchor, 30s total; output over the 4096-char evidence bound refuses the anchor rather than truncating it), and only positively-known read-only git subcommands/flags (rev-list, log, rev-parse, show, diff) are admitted. Undeclared tasks, mismatched anchors, and non-read-only commands refuse exactly as the completion gate does. Declaration changes revoke stale proofs (a fresh attest is then required). See docs/commands.md and docs/plan-durability.md.";
+        readonly args: "<task_id>";
+        readonly category: "utility";
+        readonly toolPolicy: "agent";
+    };
     readonly recover: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Recover wedged coder settlements [task_id] [--force]";

package/dist/commands/rollback-gate.d.ts

@@ -23,6 +23,18 @@ export declare const _rollbackGateInternals: {
  * repositories; git tracks nothing there.
  */
 export declare function isRealGitRepository(directory: string): boolean;
+/** #3434: a parsed porcelain record whose path normalizes outside the repo root. */
+export declare function isOutOfRootRelativePath(rel: string): boolean;
+/**
+ * The NUL-form parser's result contract (#3434): the in-root dirty paths that
+ * feed the destroy scope, plus any records whose path normalized outside the
+ * project root — excluded from the scope and surfaced for the diagnostic
+ * instead of being joined into the confirm-token digest unvalidated.
+ */
+export interface TrackedDirtyParseResult {
+    dirtyPaths: string[];
+    excludedOutOfRoot: string[];
+}
 /**
  * Parse `git status --porcelain -z` output into repo-relative tracked-dirty
  * paths. The -z form is NUL-terminated and NEVER quotes paths (core.quotepath
@@ -36,6 +48,16 @@ export declare function isRealGitRepository(directory: string): boolean;
  * (intent-to-add) — so the test must not anchor to the first column, or the
  * ORIG_PATH token of an R/C-initial file (README.md, CHANGELOG.md, …) is
  * misread as the start of a new record and swallows the next real entry.
+ *
+ * #3434: `../`-bearing (or absolute) records are excluded from the dirty
+ * set and recorded in `excludedOutOfRoot` — the legacy `string[]` export
+ * below returns only the in-root paths.
+ */
+export declare function parseTrackedDirtyPathsWithExclusions(statusOutput: string): TrackedDirtyParseResult;
+/**
+ * Legacy `string[]` view of the NUL-form parser (in-root paths only) — the
+ * export existing suites pin. New consumers that need the exclusion
+ * diagnostic use `parseTrackedDirtyPathsWithExclusions`.
  */
 export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
 /**
@@ -43,11 +65,23 @@ export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
  * index while a file sits on disk at that path. `git reset --hard` silently
  * overwrites exactly these untracked (or since-ignored) files when it
  * materializes the target tree, so they belong in the destruction scope
- * alongside tracked-dirty paths (#2976 review F-1). Returns [] when either
- * listing cannot be read — the tracked-dirty gate above still applies, and
- * the caller's unreadable-status refusal covers real-repo failures.
+ * alongside tracked-dirty paths (#2976 review F-1).
+ *
+ * #3434 fail-closed contract: `failure` is set when either listing cannot
+ * be read, carrying the reader's structured cause when it could tell. The
+ * caller must REFUSE on it — an unreadable enumeration may not read as a
+ * measured "nothing in the way" (the same class #3317 closed for the status
+ * reads). A non-git or bare-marker root returns empty paths with NO failure:
+ * nothing tracked can be in the way there (#2127 convention).
  */
-export declare function untrackedPathsInTargetTree(directory: string, targetSha: string): Promise<string[]>;
+export declare function untrackedPathsInTargetTree(directory: string, targetSha: string): Promise<{
+    paths: string[];
+    failure: {
+        code: string | null;
+        status: number | null;
+        stderrTail: string;
+    } | null;
+}>;
 /**
  * The git-kind candidate set: the absolute paths of tracked-dirty files that
  * `git reset --hard` would destroy. This is the ONLY derivation for
@@ -63,30 +97,63 @@ export declare function swarmOverwriteCandidates(directory: string, overwriteRel
 /**
  * #3317: cause-matched wording for an unreadable destruction measurement —
  * single source shared by the /swarm rollback command and the checkpoint
- * tool sink so the two refusal texts cannot drift.
+ * tool sink so the two refusal texts cannot drift. `source` (#3434
+ * feedback round) names WHICH read failed: the default 'status' keeps the
+ * historical wording BYTE-IDENTICAL (pinned by the #3317 round-2 trace
+ * suite checkpoint-restore-cause-3275); 'enumeration' rewords the arms to
+ * name the ls-tree/ls-files listing so the operator is pointed at the read
+ * that actually failed.
  */
 export declare function describeUnreadableCause(measurement: {
     code?: string | null;
     status?: number | null;
     stderrTail?: string;
-}): string;
+}, source?: 'status' | 'enumeration'): string;
+/**
+ * Sanitize a repo-controlled porcelain record for operator/agent-facing
+ * diagnostic text (#3434 feedback round): collapse control characters
+ * (ANSI/CR/LF/NUL cannot smuggle terminal escapes or forged lines) and
+ * bound the excerpt — the same house discipline as the reader's
+ * `stderrTail` and `excerptProbeOutput`. Excluded records never enter the
+ * scope digest, so the digest's own NUL/newline rejection does not cover
+ * the one place their bytes are rendered.
+ */
+export declare function formatExcludedRecord(rel: string): string;
 /**
  * Measure the destruction scope for a git checkpoint restore. When
  * `targetSha` is provided, files that are untracked (or since-ignored) on
  * disk but tracked in the TARGET tree are included: `git reset --hard`
  * overwrites them silently, so they are part of the destruction set
- * (#2976 review F-1). `unreadable` means git status could not be read
- * inside a real repository — callers must fail closed on it (never treat
- * it as a clean tree). A non-git or bare-marker root returns an empty
- * dirty set: nothing tracked to destroy.
+ * (#2976 review F-1). `unreadable` means git status — or, #3434, the
+ * ls-tree/ls-files enumeration of the target tree — could not be read
+ * inside a real repository; callers must fail closed on it (never treat it
+ * as a clean tree, and never let a failed enumeration shrink the measured
+ * scope). A non-git or bare-marker root returns an empty dirty set: nothing
+ * tracked to destroy. `excludedOutOfRoot` carries porcelain records whose
+ * path normalized outside the project root (#3434) — excluded from the
+ * scope and surfaced for the preview diagnostic.
  */
 export declare function measureGitDestruction(directory: string, targetSha?: string): Promise<{
     kind: 'ok';
     dirtyRelPaths: string[];
+    /** #3434: out-of-root porcelain records excluded from the scope. */
+    excludedOutOfRoot: string[];
 } | {
     kind: 'unreadable';
     /** #3317: why the read failed, when the async reader could tell. */
     code?: string | null;
     status?: number | null;
     stderrTail?: string;
+    /**
+     * #3434 feedback: WHICH read failed — the status read or the
+     * ls-tree/ls-files enumeration. Consumers word the refusal
+     * accordingly instead of always blaming git status.
+     */
+    source: 'status' | 'enumeration';
+    /**
+     * Out-of-root records already parsed from a SUCCESSFUL status
+     * read before the enumeration failed — carried so the refusal
+     * can still disclose them instead of dropping them silently.
+     */
+    excludedOutOfRoot?: string[];
 }>;

package/dist/config/plan-schema.d.ts

@@ -53,6 +53,23 @@ export declare const MigrationStatusSchema: z.ZodEnum<{
     migration_failed: "migration_failed";
 }>;
 export type MigrationStatus = z.infer<typeof MigrationStatusSchema>;
+/**
+ * External-evidence anchor (issue #3422): a pinned read-only git assertion a
+ * task declares so `/swarm attest` can verify a git-external deliverable
+ * (commit/push, gh ops) without a coder settlement.
+ *
+ * `expect` matches the trimmed stdout exactly; `expect_prefix` requires a
+ * NON-EMPTY prefix of it (an empty prefix would match everything and attest
+ * nothing). At least one of the two must be present per anchor; both bounds
+ * mirror the durable-evidence storage cap so an anchor is never accepted with
+ * output that cannot be persisted verbatim.
+ */
+export declare const ExternalEvidenceAnchorSchema: z.ZodObject<{
+    command: z.ZodString;
+    expect: z.ZodOptional<z.ZodString>;
+    expect_prefix: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ExternalEvidenceAnchor = z.infer<typeof ExternalEvidenceAnchorSchema>;
 export declare const TaskSchema: z.ZodObject<{
     id: z.ZodString;
     phase: z.ZodNumber;
@@ -75,6 +92,15 @@ export declare const TaskSchema: z.ZodObject<{
     evidence_path: z.ZodOptional<z.ZodString>;
     blocked_reason: z.ZodOptional<z.ZodString>;
     fr_refs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    evidence_class: z.ZodOptional<z.ZodEnum<{
+        coder_mutation: "coder_mutation";
+        external_git: "external_git";
+    }>>;
+    evidence_anchors: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        command: z.ZodString;
+        expect: z.ZodOptional<z.ZodString>;
+        expect_prefix: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type Task = z.infer<typeof TaskSchema>;
 export declare const PhaseSchema: z.ZodObject<{
@@ -110,6 +136,15 @@ export declare const PhaseSchema: z.ZodObject<{
         evidence_path: z.ZodOptional<z.ZodString>;
         blocked_reason: z.ZodOptional<z.ZodString>;
         fr_refs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        evidence_class: z.ZodOptional<z.ZodEnum<{
+            coder_mutation: "coder_mutation";
+            external_git: "external_git";
+        }>>;
+        evidence_anchors: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            command: z.ZodString;
+            expect: z.ZodOptional<z.ZodString>;
+            expect_prefix: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>>;
     type: z.ZodOptional<z.ZodEnum<{
         code: "code";
@@ -156,6 +191,15 @@ export declare const PlanSchema: z.ZodObject<{
             evidence_path: z.ZodOptional<z.ZodString>;
             blocked_reason: z.ZodOptional<z.ZodString>;
             fr_refs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            evidence_class: z.ZodOptional<z.ZodEnum<{
+                coder_mutation: "coder_mutation";
+                external_git: "external_git";
+            }>>;
+            evidence_anchors: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                command: z.ZodString;
+                expect: z.ZodOptional<z.ZodString>;
+                expect_prefix: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
         }, z.core.$strip>>>;
         type: z.ZodOptional<z.ZodEnum<{
             code: "code";