opencode-swarm 7.199.6 → 7.200.1

package/dist/session/snapshot-coordination-init.d.ts

@@ -13,6 +13,29 @@ interface ReadinessEntry {
     settled: boolean;
     underlying: Promise<void>;
     error?: string;
+    /**
+     * #2963: why this entry is closing, recorded by the only origins that
+     * know it — the reset command's release-gate decision
+     * ('reset-cleanup-failed') or host shutdown marking ('shutdown'). An
+     * in-flight reset's guard carries NO reason: consumers must never infer
+     * the cleanup-stranded contract from `settled` alone (a normal active
+     * reset presents `closing && settled` with no reason).
+     */
+    closingReason?: 'reset-cleanup-failed' | 'shutdown';
+    /**
+     * #2963: true while the ORIGINAL initializer this closing window is
+     * waiting on is still unsettled (priorUnsettled close-timeout, including
+     * guards installed by a reset re-entry before the original settled).
+     * Cleared by the identity-safe settlement observer below.
+     */
+    pendingPriorAttempt?: boolean;
+    /**
+     * #2963: the still-unsettled original initializer's promise, captured at
+     * the first priorUnsettled guard and propagated with the flag through
+     * every replacement so the whole chain observes the same original. Never
+     * exposed on SnapshotCoordinationStatus.
+     */
+    pendingPriorUnderlying?: Promise<void>;
 }
 export interface SnapshotCoordinationStatus {
     state: ReadinessState | 'idle';
@@ -20,6 +43,10 @@ export interface SnapshotCoordinationStatus {
     generation?: number;
     settled: boolean;
     error?: string;
+    /** #2963: read-only origin classification (see ReadinessEntry.closingReason). */
+    closingReason?: 'reset-cleanup-failed' | 'shutdown';
+    /** #2963: read-only — a prior initialization attempt is still settling. */
+    pendingPriorAttempt?: boolean;
 }
 /**
  * Held while reset-session removes the authoritative snapshot and its legacy
@@ -30,6 +57,13 @@ export interface SnapshotCoordinationResetGuard {
     closeError?: Error;
     /** True when the prior initializer did not settle before the reset deadline. */
     priorUnsettled?: boolean;
+    /**
+     * #2963: mark THIS guard's entry as cleanup-stranded. Returns whether the
+     * marking landed (same identity discipline as release(): false when a
+     * newer guard has replaced this one at the root). Callers gate any
+     * stranded-stop advisory on the boolean — a void no-op cannot.
+     */
+    markStranded(): boolean;
 }
 export declare function startSnapshotCoordinationInitialization(directory: string): Promise<void>;
 export declare function ensureSnapshotCoordinationReady(directory: string): Promise<void>;

package/dist/session/snapshot-writer.d.ts

@@ -197,7 +197,11 @@ export interface SnapshotData {
 export declare function serializeAgentSession(s: AgentSessionState): SerializedAgentSession;
 /**
  * Write a snapshot of swarmState to .swarm/session/state.json atomically.
- * Silently swallows errors (non-fatal — never crash the plugin).
+ * Non-fatal — never crashes the plugin. Failures are silent in the debug log
+ * EXCEPT the closing-stop class (#2963): when coordination refuses the write
+ * because a partially-failed reset stranded the closing guard, exactly one
+ * always-visible operational advisory per root per stop episode is emitted
+ * (advisoryWarn — the /swarm diagnose channel, never chat-visible noise).
  */
 export declare function writeSnapshot(directory: string, state: typeof swarmState): Promise<void>;
 export declare function writeSnapshotProjection(directory: string, snapshot: SnapshotData, shouldCommit?: () => boolean): Promise<void>;

package/dist/tools/attest-task.d.ts

@@ -0,0 +1,67 @@
+/**
+ * `/swarm attest` core (issue #3422): the external-evidence producer.
+ *
+ * A plan task whose deliverable is git-external (commit/push, gh ops) can
+ * declare `evidence_class: 'external_git'` with pinned read-only git
+ * `evidence_anchors`. This executor runs each anchor as a bounded, no-shell
+ * argv spawn inside the task's project root, checks the trimmed stdout
+ * against the anchor's `expect` (exact) or `expect_prefix` (non-empty
+ * prefix), and — only when every anchor matched — records a durable
+ * `external_evidence_attested` bundle on the task's exact-task evidence.
+ * The completion gate then admits completion for that task through the
+ * shared external predicates (`gate-evidence.ts`), with no coder settlement
+ * ever existing. Everything else refuses exactly as before (AC2).
+ *
+ * Trust boundary (documented, not tamper-proof): anchors are plan-authored.
+ * The grammar below refuses anything that is not a positively-known
+ * read-only git invocation — unknown flags, global options, output-writing
+ * flags, remote-helper URLs, and non-git commands all fail closed with a
+ * `read-only git` refusal. Malformed anchors (no `expect`/`expect_prefix`,
+ * or an empty prefix, which would match everything) refuse with an
+ * `expect` error before policy evaluation.
+ */
+export interface AttestTaskArgs {
+    task_id: string;
+    working_directory?: string;
+    reason?: string;
+}
+export interface AttestTaskResult {
+    success: boolean;
+    message: string;
+    task_id?: string;
+    errors?: string[];
+}
+interface AnchorPlan {
+    command: string;
+    expect?: string;
+    expect_prefix?: string;
+}
+/**
+ * Validate one anchor's command against the v1 grammar and build the final
+ * argv. Returns a refusal string (policy: `read-only git`; malformed
+ * expectation: `expect`) or null when admitted.
+ */
+export declare function buildAnchorArgv(command: string): {
+    argv: string[] | null;
+    refusal: string | null;
+};
+declare function runAnchor(argv: string[], cwd: string, timeoutMs: number): Promise<{
+    exitCode: number;
+    stdout: string;
+    refusal: string | null;
+}>;
+export declare const _internals: {
+    runAnchor: typeof runAnchor;
+    buildAnchorArgv: typeof buildAnchorArgv;
+    loadPlanTask: (directory: string, taskId: string) => {
+        title: string;
+        swarm: string;
+        task: {
+            id: string;
+            evidence_class?: string;
+            evidence_anchors?: AnchorPlan[];
+        };
+    } | null;
+};
+export declare function executeAttestTask(args: AttestTaskArgs, fallbackDir?: string): Promise<AttestTaskResult>;
+export {};

package/dist/tools/checkpoint.d.ts

@@ -1,4 +1,6 @@
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
+import { readGitRepositoryStatusDetailedAsync, readGitStatusAsync } from '../commands/git-status-read';
+import { measureGitDestruction } from '../commands/rollback-gate';
 import { tryAcquireLock } from '../parallel/file-locks.js';
 import { loadPlan } from '../plan/manager.js';
 import { resolveGitExecutable } from '../utils/git-executable.js';
@@ -20,6 +22,21 @@ export declare const _internals: {
      * `spawnSync` call slots the test is asserting on.
      */
     resolveGitExecutable: typeof resolveGitExecutable;
+    /**
+     * Feedback-round seam (#3441 review): the restore path's destruction
+     * measurement is reachable through this slot so a test can stub the
+     * measurement without mocking the whole rollback-gate module (whose
+     * process-global mock.module form leaks across co-run files).
+     */
+    measureGitDestruction: typeof measureGitDestruction;
+    /**
+     * Feedback-round seams (PRR-011): the two async reader probes are
+     * reachable through slots so tests stub them by PROPERTY ASSIGNMENT
+     * (restored in afterEach) instead of mock.module — the module-level
+     * registration is process-global and poisoned co-run files.
+     */
+    readGitStatusAsync: typeof readGitStatusAsync;
+    readGitRepositoryStatusDetailedAsync: typeof readGitRepositoryStatusDetailedAsync;
 };
 declare function stageAllExcludingSwarm(directory: string): void;
 declare function gitExec(args: string[], cwd: string): string;

package/dist/tools/phase-complete.d.ts

@@ -37,6 +37,12 @@ export declare const phaseCompleteReceiptInternals: {
                 evidence_path?: string | undefined;
                 blocked_reason?: string | undefined;
                 fr_refs?: string[] | undefined;
+                evidence_class?: "coder_mutation" | "external_git" | undefined;
+                evidence_anchors?: {
+                    command: string;
+                    expect?: string | undefined;
+                    expect_prefix?: string | undefined;
+                }[] | undefined;
             }[];
             type?: "code" | "non-code" | undefined;
             required_agents?: string[] | undefined;
@@ -83,6 +89,12 @@ export declare const phaseCompleteCommitInternals: {
                 evidence_path?: string | undefined;
                 blocked_reason?: string | undefined;
                 fr_refs?: string[] | undefined;
+                evidence_class?: "coder_mutation" | "external_git" | undefined;
+                evidence_anchors?: {
+                    command: string;
+                    expect?: string | undefined;
+                    expect_prefix?: string | undefined;
+                }[] | undefined;
             }[];
             type?: "code" | "non-code" | undefined;
             required_agents?: string[] | undefined;

package/dist/tools/save-plan.d.ts

@@ -42,6 +42,22 @@ export interface SavePlanArgs {
             files_touched?: string[];
             /** Spec FR-###/SC-### IDs this task maps to (issue #1687, FR-000). */
             fr_refs?: string[];
+            /**
+             * External-evidence completion class (issue #3422) — declare
+             * 'external_git' for deliverables proven outside coder mutations
+             * (commit/push, gh ops). Omission on a revision preserves the
+             * prior declaration; an explicit 'coder_mutation' clears it.
+             */
+            evidence_class?: 'coder_mutation' | 'external_git';
+            /**
+             * Pinned read-only git anchors attesting the external deliverable
+             * (issue #3422). Require evidence_class === 'external_git'.
+             */
+            evidence_anchors?: Array<{
+                command: string;
+                expect?: string;
+                expect_prefix?: string;
+            }>;
         }>;
     }>;
     /**

package/dist/tools/update-task-status.d.ts

@@ -84,7 +84,7 @@ export interface ReviewerGateResult {
     requiredGates?: string[];
     satisfiedGates?: string[];
     missingGates?: string[];
-    source?: 'durable_exact_task' | 'legacy_compat' | 'turbo_policy';
+    source?: 'durable_exact_task' | 'legacy_compat' | 'turbo_policy' | 'external_attest';
     corrupt?: boolean;
     contradictorySignals?: string[];
     generation?: number;

package/dist/workflow/task-terminal.d.ts

@@ -38,6 +38,7 @@ export declare function commitTaskTerminalUnderPlanLock<TPlan>(options: {
         qaExempt: boolean;
         preserveEvidence?: boolean;
         readOnlyNoMutation?: boolean;
+        externalEvidence?: boolean;
     };
     planIdentityHash?: string;
     planEpoch?: string;

package/dist/workflow/workflow-wal-schema.d.ts

@@ -56,6 +56,8 @@ export interface TaskTerminalWalV1 {
     qaExempt: boolean;
     /** Completion used the trusted generation-0 empty-scope settlement path. */
     readOnlyNoMutation?: boolean;
+    /** Completion admitted through the external-evidence path (#3422). */
+    externalEvidence?: boolean;
     recordedAt: string;
 }
 export interface TaskTerminalWalV2 extends Omit<TaskTerminalWalV1, 'version' | 'newPlanStatus' | 'newWorkflowState'> {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.199.6",
+	"version": "7.200.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-ab821je6.js

@@ -1,82 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-exj9yb0x.js";
-import"./index-jhjmf5sn.js";
-import"./index-tqtfjzb0.js";
-import"./index-exr153j1.js";
-import"./index-axqyjreb.js";
-import"./index-0je0mees.js";
-import"./index-hx2f3j9w.js";
-import"./index-txdagbh7.js";
-import"./index-t67n8jhb.js";
-import"./index-rdec0y3z.js";
-import"./index-b9f2j9bx.js";
-import"./index-s9hekeej.js";
-import"./index-gdyqdhz1.js";
-import"./index-r227g76y.js";
-import"./index-eyq1q1xn.js";
-import"./index-4cyc18bc.js";
-import"./index-x5jwegqw.js";
-import"./index-tsg61z0r.js";
-import"./index-cyp3r8ar.js";
-import"./index-8mrentmw.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-2cb644vj.js";
-import"./index-x6rv0e00.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-qbhjey8k.js";
-import"./index-v3bmwmqw.js";
-import"./index-38fgg593.js";
-import"./index-dqkr60bw.js";
-import"./index-vgb679vr.js";
-import"./index-spggmr30.js";
-import"./index-s4wbe96z.js";
-import"./index-s5tgnsmh.js";
-import"./index-m9zzj4ee.js";
-import"./index-b3ws03kp.js";
-import"./index-3ct8kgfj.js";
-import"./index-0veqvgny.js";
-import"./index-rtry5xyf.js";
-import"./index-f02p4yn4.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-7m2gcmm7.js";
-import"./index-j3rfbs45.js";
-import"./index-zzpy5cx3.js";
-import"./index-9y6yk1n0.js";
-import"./index-snx2vb1x.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-3mzc5rqc.js";
-import"./index-7pmbnjvj.js";
-import"./index-9rwhas09.js";
-import"./index-zbygz217.js";
-import"./index-cwg99gea.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-n1ddn12j.js";
-import"./index-jmhn6ab5.js";
-import"./index-dz15f98h.js";
-import"./index-t7hmqgjy.js";
-import"./index-dtwj4hsk.js";
-import"./index-te9hq2f4.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-270zfq1f.js";
-import"./index-gx2vp8gx.js";
-import"./index-88d5kpjj.js";
-import"./index-sp2cxpaq.js";
-import"./index-qbxk2rn6.js";
-import"./index-zgwm4ryv.js";
-import"./index-0bw1jyen.js";
-import"./index-xfzkq1k4.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-7jef0dhs.js

@@ -1,83 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-cs1d9e03.js";
-import"./index-exj9yb0x.js";
-import"./index-jhjmf5sn.js";
-import"./index-tqtfjzb0.js";
-import"./index-exr153j1.js";
-import"./index-axqyjreb.js";
-import"./index-0je0mees.js";
-import"./index-hx2f3j9w.js";
-import"./index-txdagbh7.js";
-import"./index-t67n8jhb.js";
-import"./index-rdec0y3z.js";
-import"./index-b9f2j9bx.js";
-import"./index-s9hekeej.js";
-import"./index-gdyqdhz1.js";
-import"./index-r227g76y.js";
-import"./index-eyq1q1xn.js";
-import"./index-4cyc18bc.js";
-import"./index-x5jwegqw.js";
-import"./index-tsg61z0r.js";
-import"./index-cyp3r8ar.js";
-import"./index-8mrentmw.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-2cb644vj.js";
-import"./index-x6rv0e00.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-qbhjey8k.js";
-import"./index-v3bmwmqw.js";
-import"./index-38fgg593.js";
-import"./index-dqkr60bw.js";
-import"./index-vgb679vr.js";
-import"./index-spggmr30.js";
-import"./index-s4wbe96z.js";
-import"./index-s5tgnsmh.js";
-import"./index-m9zzj4ee.js";
-import"./index-b3ws03kp.js";
-import"./index-3ct8kgfj.js";
-import"./index-0veqvgny.js";
-import"./index-rtry5xyf.js";
-import"./index-f02p4yn4.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-7m2gcmm7.js";
-import"./index-j3rfbs45.js";
-import"./index-zzpy5cx3.js";
-import"./index-9y6yk1n0.js";
-import"./index-snx2vb1x.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-3mzc5rqc.js";
-import"./index-7pmbnjvj.js";
-import"./index-9rwhas09.js";
-import"./index-zbygz217.js";
-import"./index-cwg99gea.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-n1ddn12j.js";
-import"./index-jmhn6ab5.js";
-import"./index-dz15f98h.js";
-import"./index-t7hmqgjy.js";
-import"./index-dtwj4hsk.js";
-import"./index-te9hq2f4.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-270zfq1f.js";
-import"./index-gx2vp8gx.js";
-import"./index-88d5kpjj.js";
-import"./index-sp2cxpaq.js";
-import"./index-qbxk2rn6.js";
-import"./index-zgwm4ryv.js";
-import"./index-0bw1jyen.js";
-import"./index-xfzkq1k4.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};