opencode-swarm 7.199.6 → 7.200.1

package/dist/cli/{index-0je0mees.js → index-s3w41p1x.js}

@@ -9,7 +9,7 @@ import {
   readEvaluationRun,
   saveEvaluationRun,
   saveTaskSetSnapshot
-} from "./index-hx2f3j9w.js";
+} from "./index-5snwc3dz.js";
 import {
   canonicalHash,
   computeCandidateInputContentHash,

package/dist/cli/{index-zzpy5cx3.js → index-s8eac99p.js}

@@ -4,30 +4,30 @@ import {
   projectDbExists,
   withImmediateTransaction,
   withProjectDbReadOnly
-} from "./index-snx2vb1x.js";
+} from "./index-ves1rtqt.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
 } from "./index-7pmbnjvj.js";
 import {
   withEvidenceLock
-} from "./index-dz15f98h.js";
+} from "./index-q8vfw61p.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";
 import {
   emit
-} from "./index-dtwj4hsk.js";
+} from "./index-c2k7q723.js";
 import {
   ExecutionProfileSchema,
   PlanSchema,
   TaskStatusSchema,
   normalizeCurrentPhaseInPlace
-} from "./index-gx2vp8gx.js";
+} from "./index-3t46mez1.js";
 import {
   init_loader,
   loadPluginConfig
-} from "./index-88d5kpjj.js";
+} from "./index-3020n6d9.js";
 import {
   criticalWarn,
   init_logger,
@@ -36,7 +36,7 @@ import {
 import {
   init_package,
   package_default
-} from "./index-0bw1jyen.js";
+} from "./index-p6v544jn.js";
 
 // src/plan/planning-profile.ts
 init_loader();
@@ -1179,7 +1179,9 @@ function computePlanLedgerHash(plan) {
         acceptance: task.acceptance,
         files_touched: [...task.files_touched].sort(),
         evidence_path: task.evidence_path,
-        blocked_reason: task.blocked_reason
+        blocked_reason: task.blocked_reason,
+        evidence_class: task.evidence_class,
+        evidence_anchors: task.evidence_anchors
       }))
     }))
   };
@@ -1207,7 +1209,9 @@ function computePlanStructureHash(plan) {
         acceptance: task.acceptance,
         files_touched: [...task.files_touched].sort(),
         evidence_path: task.evidence_path,
-        blocked_reason: task.blocked_reason
+        blocked_reason: task.blocked_reason,
+        evidence_class: task.evidence_class,
+        evidence_anchors: task.evidence_anchors
       }))
     }))
   };

package/dist/cli/{index-j3rfbs45.js → index-s9y49avf.js}

@@ -4,7 +4,7 @@ import {
   getProjectDb,
   projectDbExists,
   withImmediateTransaction
-} from "./index-snx2vb1x.js";
+} from "./index-ves1rtqt.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
@@ -426,4 +426,4 @@ function getEffectiveGates(profile, sessionOverrides) {
   }
   return merged;
 }
-export { formatLegacyQaBindingOnlyCall, DEFAULT_QA_GATES, getProfileLookupForIdentity, setGatesForIdentity, computeProfileHash, getEffectiveGates };
+export { formatLegacyQaBindingOnlyCall, formatLegacyQaBindingRecovery, DEFAULT_QA_GATES, getProfileLookupForIdentity, setGatesForIdentity, computeProfileHash, getEffectiveGates };

package/dist/cli/{index-dqkr60bw.js → index-sva5swrs.js}

@@ -2,14 +2,14 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-vgb679vr.js";
+} from "./index-3exe6k66.js";
 import {
   isSpawnCwdMissing,
   isSpawnCwdUnreadable
 } from "./index-spggmr30.js";
 import {
   validateSwarmPath
-} from "./index-b3ws03kp.js";
+} from "./index-xyvsdn07.js";
 import {
   init_path_identity,
   isPathWithinDeclaredScope,
@@ -19,13 +19,13 @@ import {
   atomicWriteFile,
   taskEvidencePath,
   withTaskEvidenceLock
-} from "./index-jmhn6ab5.js";
+} from "./index-traz987v.js";
 import {
   assertProjectRoot
 } from "./index-t7hmqgjy.js";
 import {
   telemetry
-} from "./index-dtwj4hsk.js";
+} from "./index-c2k7q723.js";
 import {
   advisoryWarn,
   init_git_executable,
@@ -46,6 +46,7 @@ import {
 
 // src/gate-evidence.ts
 init_zod();
+import { createHash as createHash2 } from "crypto";
 import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, realpathSync as realpathSync2, statSync as statSync2 } from "fs";
 import * as path4 from "path";
 
@@ -222,6 +223,53 @@ async function readTaskGateRequirementsReceipts(directory, taskId) {
   }
   return receipts;
 }
+function readTaskGateRequirementsReceiptsSync(directory, taskId) {
+  const filePath = safeTaskGateRequirementsReceiptPath(directory, taskId, false);
+  const text = readBoundedTextFile(filePath);
+  if (text === null)
+    return [];
+  const receipts = [];
+  for (const line of text.split(`
+`)) {
+    if (!line.trim())
+      continue;
+    const parsed = TaskGateRequirementsReceiptSchema.parse(JSON.parse(line));
+    if (parsed.taskId !== taskId || parsed.routeBinding !== undefined && parsed.routeBinding.taskId !== taskId) {
+      throw new Error(`TASK_GATE_REQUIREMENTS_IDENTITY_MISMATCH: expected ${taskId}, found ${parsed.taskId}`);
+    }
+    const { chainHash, ...withoutChainHash } = parsed;
+    if (computeChainHash(withoutChainHash) !== chainHash) {
+      throw new Error(`TASK_GATE_REQUIREMENTS_CHAIN_MISMATCH: receipt for ${taskId} failed hash validation`);
+    }
+    const previousChainHash = receipts.at(-1)?.chainHash ?? null;
+    if (parsed.previousChainHash !== previousChainHash) {
+      throw new Error(`TASK_GATE_REQUIREMENTS_CHAIN_MISMATCH: receipt for ${taskId} failed linkage validation`);
+    }
+    receipts.push(parsed);
+  }
+  return receipts;
+}
+function routeEvidenceFromTaskGateRequirements(receipts) {
+  const latestByDispatch = new Map;
+  for (const receipt of receipts) {
+    const binding = receipt.routeBinding;
+    if (!binding)
+      continue;
+    const dispatchKey = [
+      binding.role,
+      binding.sessionId,
+      binding.taskId,
+      binding.callId,
+      binding.childSessionId,
+      String(binding.generation)
+    ].join("\x00");
+    latestByDispatch.set(dispatchKey, binding);
+  }
+  return [...latestByDispatch.values()];
+}
+function isLegacyTaskGateRequirementsChain(receipts) {
+  return receipts.length > 0 && receipts.every((receipt) => !receipt.routeBinding);
+}
 function deriveReceiptRole(event) {
   switch (event.type) {
     case "accepted_mutation":
@@ -344,6 +392,12 @@ function sanitizeTaskId(taskId) {
   }
   throw new Error(`Invalid task ID: must be alphanumeric (ASCII) with optional hyphens, underscores, or dots, got "${taskId}"`);
 }
+function validateTaskIdFormat(taskId) {
+  if (!STRICT_TASK_ID_PATTERN.test(taskId)) {
+    return `Invalid taskId "${taskId}". Must match pattern N.M or N.M.P (e.g., "1.1", "1.2.3")`;
+  }
+  return;
+}
 
 // src/workflow/workflow-wal-file.ts
 import * as fs4 from "fs";
@@ -1493,7 +1547,7 @@ function parseTaskRepairWal(raw, filePath, expectedTaskId) {
 }
 function parseTaskTerminalWal(raw, filePath, expectedTaskId) {
   const parsed = parseWalObject(raw, filePath, "TASK_TERMINAL_WAL_UNREADABLE", "Preserve this file and reconcile the task terminal transition before moving it aside.");
-  if (parsed.version !== 1 && parsed.version !== 2 || parsed.state !== "PREPARED" && parsed.state !== "COMMITTED" && parsed.state !== "ABORTED" || typeof parsed.taskId !== "string" || !TASK_ID_PATTERN.test(parsed.taskId) || typeof parsed.transitionId !== "string" || parsed.transitionId.length === 0 || parsed.transitionId.length > 512 || typeof parsed.actor !== "string" || parsed.actor.length === 0 || parsed.actor.length > 512 || typeof parsed.oldPlanStatus !== "string" || parsed.oldPlanStatus.length === 0 || parsed.oldPlanStatus.length > 128 || parsed.newPlanStatus !== "completed" && parsed.newPlanStatus !== "blocked" && parsed.newPlanStatus !== "closed" || typeof parsed.oldWorkflowState !== "string" || !WORKFLOW_STATES.has(parsed.oldWorkflowState) || parsed.newWorkflowState !== "complete" && parsed.newWorkflowState !== "blocked" && parsed.newWorkflowState !== "closed" || !Number.isInteger(parsed.generation) || (parsed.generation ?? -1) < 0 || typeof parsed.qaExempt !== "boolean" || parsed.readOnlyNoMutation !== undefined && typeof parsed.readOnlyNoMutation !== "boolean" || typeof parsed.recordedAt !== "string" || !Number.isFinite(Date.parse(parsed.recordedAt))) {
+  if (parsed.version !== 1 && parsed.version !== 2 || parsed.state !== "PREPARED" && parsed.state !== "COMMITTED" && parsed.state !== "ABORTED" || typeof parsed.taskId !== "string" || !TASK_ID_PATTERN.test(parsed.taskId) || typeof parsed.transitionId !== "string" || parsed.transitionId.length === 0 || parsed.transitionId.length > 512 || typeof parsed.actor !== "string" || parsed.actor.length === 0 || parsed.actor.length > 512 || typeof parsed.oldPlanStatus !== "string" || parsed.oldPlanStatus.length === 0 || parsed.oldPlanStatus.length > 128 || parsed.newPlanStatus !== "completed" && parsed.newPlanStatus !== "blocked" && parsed.newPlanStatus !== "closed" || typeof parsed.oldWorkflowState !== "string" || !WORKFLOW_STATES.has(parsed.oldWorkflowState) || parsed.newWorkflowState !== "complete" && parsed.newWorkflowState !== "blocked" && parsed.newWorkflowState !== "closed" || !Number.isInteger(parsed.generation) || (parsed.generation ?? -1) < 0 || typeof parsed.qaExempt !== "boolean" || parsed.readOnlyNoMutation !== undefined && typeof parsed.readOnlyNoMutation !== "boolean" || parsed.externalEvidence !== undefined && typeof parsed.externalEvidence !== "boolean" || typeof parsed.recordedAt !== "string" || !Number.isFinite(Date.parse(parsed.recordedAt))) {
     formatUnreadableMessage("TASK_TERMINAL_WAL_UNREADABLE", filePath, "is not a valid terminal WAL", "Preserve this file and reconcile the task terminal transition before moving it aside.");
   }
   if (parsed.version === 2 && (typeof parsed.planIdentityHash !== "string" || !SHA256_PATTERN.test(parsed.planIdentityHash) || typeof parsed.planEpoch !== "string" || !UUID_PATTERN.test(parsed.planEpoch))) {
@@ -1733,7 +1787,9 @@ var TASK_WORKFLOW_OUTCOMES = [
   "task_completed",
   "task_blocked",
   "task_closed",
-  "repair_idle"
+  "repair_idle",
+  "external_evidence_attested",
+  "external_evidence_revoked"
 ];
 var MAX_PLAN_SCOPE_INSPECTION_BYTES = 4 * 1024 * 1024;
 function readCurrentTaskDeclaredFiles(directory, taskId) {
@@ -1799,6 +1855,30 @@ var GateEvidenceSchema = exports_external.object({
   timestamp: exports_external.string(),
   agent: exports_external.string()
 }).passthrough();
+var ExternalEvidenceBundleSchema = exports_external.object({
+  class: exports_external.literal("external_git"),
+  transitionId: exports_external.string().min(1).max(512),
+  declarationDigest: exports_external.string().regex(/^[a-f0-9]{64}$/),
+  anchors: exports_external.array(exports_external.object({
+    command: exports_external.string().min(1).max(400),
+    expect: exports_external.string().max(4096).optional(),
+    expect_prefix: exports_external.string().min(1).max(4096).optional(),
+    matched: exports_external.boolean(),
+    exit_code: exports_external.number().int(),
+    stdout: exports_external.string().max(4096)
+  })).min(1).max(16).superRefine((anchors, ctx) => {
+    anchors.forEach((anchor, index) => {
+      if (anchor.expect === undefined && anchor.expect_prefix === undefined) {
+        ctx.addIssue({
+          code: exports_external.ZodIssueCode.custom,
+          message: `anchor ${index} must carry expect and/or a non-empty expect_prefix`,
+          path: [index]
+        });
+      }
+    });
+  }),
+  attestedAt: exports_external.string().min(1)
+});
 var TaskWorkflowMetadataSchema = exports_external.object({
   schema: exports_external.literal(TASK_WORKFLOW_SCHEMA_MARKER),
   generation: exports_external.number().int().min(0),
@@ -1816,7 +1896,8 @@ var TaskWorkflowMetadataSchema = exports_external.object({
     generation: exports_external.literal(0),
     transitionId: exports_external.string().min(1).max(512),
     declaredFiles: exports_external.array(exports_external.string()).length(0)
-  }).optional()
+  }).optional(),
+  externalEvidence: ExternalEvidenceBundleSchema.optional()
 });
 var TaskEvidenceSchema = exports_external.object({
   taskId: exports_external.string(),
@@ -1903,6 +1984,10 @@ function getEventOutcome(event) {
       return "task_closed";
     case "repair_idle":
       return "repair_idle";
+    case "external_evidence_attested":
+      return "external_evidence_attested";
+    case "external_evidence_revoked":
+      return "external_evidence_revoked";
   }
 }
 function isAuthoritativeWorkflowMetadata(workflow) {
@@ -1978,8 +2063,9 @@ function deriveApplicableGateSet(evidence, options) {
   }
   const workflow = getTaskWorkflowSnapshot(evidence);
   const readOnlyNoMutation = isNoMutationSettlementMetadata(workflow) && (options?.currentDeclaredFiles === undefined ? true : options.currentDeclaredFiles !== null && options.currentDeclaredFiles.length === 0);
+  const externalEvidenceMatched = workflow.lastOutcome === "external_evidence_attested" && (workflow.externalEvidence?.anchors.length ?? 0) > 0 && workflow.externalEvidence.anchors.every((anchor) => anchor.matched);
   const requiredGates = [...new Set(evidence.required_gates ?? [])];
-  if (!readOnlyNoMutation && !requiredGates.includes("pre_check")) {
+  if (!readOnlyNoMutation && !externalEvidenceMatched && !requiredGates.includes("pre_check")) {
     requiredGates.unshift("pre_check");
   }
   const satisfiedGates = requiredGates.filter((gate) => evidence.gates?.[gate] != null);
@@ -1993,6 +2079,47 @@ function deriveApplicableGateSet(evidence, options) {
 function isReadOnlyNoMutationEligible(evidence, options) {
   return deriveApplicableGateSet(evidence, options).readOnlyNoMutation;
 }
+function computeExternalDeclarationDigest(input) {
+  const canonical = {
+    taskId: input.taskId,
+    evidence_class: input.evidence_class,
+    evidence_anchors: input.evidence_anchors.map((anchor) => ({
+      command: anchor.command,
+      expect: anchor.expect,
+      expect_prefix: anchor.expect_prefix
+    })),
+    plan_title: input.plan_title,
+    plan_swarm: input.plan_swarm,
+    generation: input.generation
+  };
+  return createHash2("sha256").update(JSON.stringify(canonical)).digest("hex");
+}
+function externalProofCurrent(plan, planTask, evidence) {
+  if (planTask.evidence_class !== "external_git")
+    return false;
+  const workflow = evidence?.workflow;
+  if (!workflow)
+    return false;
+  const bundle = workflow.externalEvidence;
+  if (!bundle || bundle.anchors.length === 0)
+    return false;
+  if (!bundle.anchors.every((anchor) => anchor.matched))
+    return false;
+  return bundle.declarationDigest === computeExternalDeclarationDigest({
+    taskId: planTask.id,
+    evidence_class: "external_git",
+    evidence_anchors: planTask.evidence_anchors ?? [],
+    plan_title: plan.title,
+    plan_swarm: plan.swarm,
+    generation: workflow.generation
+  });
+}
+function isExternalEvidenceInitialCompletionEligible(plan, planTask, evidence) {
+  if (!externalProofCurrent(plan, planTask, evidence))
+    return false;
+  const snapshot = getTaskWorkflowSnapshot(evidence);
+  return snapshot.authoritative && snapshot.state === "idle";
+}
 function reduceTaskWorkflowSnapshot(current, event, context) {
   if ((current.state === "complete" || current.state === "blocked" || current.state === "closed") && event.type !== "repair_idle" && !(current.state === "complete" && event.type === "task_completed" || current.state === "blocked" && event.type === "task_blocked" || current.state === "blocked" && event.type === "task_closed" || current.state === "blocked" && event.type === "stage_a_passed" && event.settlementRecovery === true)) {
     throw new Error(`TASK_WORKFLOW_TERMINAL: cannot apply ${event.type} from ${current.state}`);
@@ -2011,15 +2138,24 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
     ...current.forcedCompletion === true ? { forcedCompletion: true } : {},
     ...current.supervisedRecovery === true ? { supervisedRecovery: true } : {},
     ...current.settlementRecovery === true ? { settlementRecovery: true } : {},
-    ...current.noMutationSettlement ? { noMutationSettlement: current.noMutationSettlement } : {}
+    ...current.noMutationSettlement ? { noMutationSettlement: current.noMutationSettlement } : {},
+    ...current.externalEvidence ? { externalEvidence: current.externalEvidence } : {}
   };
   switch (event.type) {
     case "dispatch_attempted": {
-      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
+      const {
+        noMutationSettlement: _clearedSettlement,
+        externalEvidence: _clearedExternalEvidence,
+        ...withoutSettlement
+      } = base;
       return withoutSettlement;
     }
     case "dispatch_no_mutation": {
-      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
+      const {
+        noMutationSettlement: _clearedSettlement,
+        externalEvidence: _clearedExternalEvidence,
+        ...withoutSettlement
+      } = base;
       return {
         ...withoutSettlement,
         retryCount: Math.min(current.retryCount + 1, 3),
@@ -2046,7 +2182,11 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         retryEpoch: current.retryEpoch || current.generation + 1
       };
     case "accepted_mutation": {
-      const { noMutationSettlement: _clearedSettlement, ...withoutSettlement } = base;
+      const {
+        noMutationSettlement: _clearedSettlement,
+        externalEvidence: _clearedExternalEvidence,
+        ...withoutSettlement
+      } = base;
       if (event.context?.settlementFailed === true) {
         return {
           ...withoutSettlement,
@@ -2110,9 +2250,26 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         ...base,
         state: current.state
       };
+    case "external_evidence_attested": {
+      if (current.state !== "idle") {
+        throw new Error(`TASK_WORKFLOW_EXTERNAL_ATTEST_STATE: external evidence can only be attested from idle (task never entered the coder QA lifecycle), not ${current.state}`);
+      }
+      if (current.externalEvidence?.transitionId === event.bundle.transitionId) {
+        return { ...base };
+      }
+      return { ...base, externalEvidence: event.bundle };
+    }
+    case "external_evidence_revoked": {
+      const {
+        externalEvidence: _revokedExternalEvidence,
+        ...withoutExternalEvidence
+      } = base;
+      return withoutExternalEvidence;
+    }
     case "task_completed": {
       const readOnlyNoMutation = event.readOnlyNoMutation === true && current.state === "idle" && current.generation === 0 && isNoMutationSettlementMetadata(current) && context.requiredGates.every((gate) => context.gates[gate] != null);
-      if (event.qaExempt !== true && current.state !== "tests_run" && current.state !== "complete" && !(current.state === "pre_check_passed" && context.gates.council != null) && !readOnlyNoMutation) {
+      const externalAdmitted = event.externalEvidence === true && current.externalEvidence !== undefined && current.externalEvidence.anchors.length > 0 && current.externalEvidence.anchors.every((anchor) => anchor.matched) && (current.state === "idle" || current.state === "complete");
+      if (event.qaExempt !== true && current.state !== "tests_run" && current.state !== "complete" && !(current.state === "pre_check_passed" && context.gates.council != null) && !readOnlyNoMutation && !externalAdmitted) {
         throw new Error(`TASK_WORKFLOW_QA_REQUIRED: cannot complete from ${current.state}`);
       }
       return {
@@ -2137,6 +2294,7 @@ function reduceTaskWorkflowSnapshot(current, event, context) {
         supervisedRecovery: _clearedMarker,
         settlementRecovery: _clearedSettlementMarker,
         noMutationSettlement: _clearedSettlement,
+        externalEvidence: _clearedExternalEvidence,
         ...withoutForced
       } = base;
       return {
@@ -2505,4 +2663,4 @@ function compareTaskWorkflowStateRank(left, right) {
   return WORKFLOW_STATE_RANK[left] - WORKFLOW_STATE_RANK[right];
 }
 
-export { isStrictTaskId, sanitizeTaskId, listRecoveryRecords, recoveryReadErrored, _internals, SOURCE_WORKTREE_GONE_STAGE, SOURCE_WORKTREE_UNCERTAIN_STAGE, getMergeStrategy, recoverMergeBackFromImmutableCoordinates, reconcileLandedMerge, postMergeCleanup, pruneStaleWorktreeMetadata, attemptMergeBackFromDirty, cleanupOrphanedBranches, startupOrphanRecovery, readWorkflowWalFile, writeWorkflowWalFile, _internals3 as _internals1, TASK_WORKFLOW_SCHEMA_MARKER, readCurrentTaskDeclaredFiles, TASK_GATE_REQUIREMENTS_RECONSTRUCTION_SENTINEL, assertTaskEvidenceWriteAllowed, parseTaskEvidence, DEFAULT_REQUIRED_GATES, isValidTaskId, getTaskWorkflowSnapshot, deriveApplicableGateSet, isReadOnlyNoMutationEligible, reduceTaskWorkflowSnapshot, deriveRequiredGates, expandRequiredGates, transitionTaskWorkflowEvidence, transitionTaskWorkflowEvidenceWithStatus, withTaskEvidenceTransaction, ensureTaskGateRequirementsReceiptForSettledTransition, recordGateEvidence, recordTodoScanEvidence, recordAgentDispatch, readTaskEvidence, readTaskEvidenceState, readTaskEvidenceRaw, hasPassedAllGates, compareTaskWorkflowStateRank };
+export { readTaskGateRequirementsReceiptsSync, routeEvidenceFromTaskGateRequirements, isLegacyTaskGateRequirementsChain, isStrictTaskId, sanitizeTaskId, validateTaskIdFormat, listRecoveryRecords, recoveryReadErrored, _internals, SOURCE_WORKTREE_GONE_STAGE, SOURCE_WORKTREE_UNCERTAIN_STAGE, getMergeStrategy, recoverMergeBackFromImmutableCoordinates, reconcileLandedMerge, postMergeCleanup, pruneStaleWorktreeMetadata, attemptMergeBackFromDirty, cleanupOrphanedBranches, startupOrphanRecovery, readWorkflowWalFile, writeWorkflowWalFile, _internals3 as _internals1, TASK_WORKFLOW_SCHEMA_MARKER, readCurrentTaskDeclaredFiles, TASK_GATE_REQUIREMENTS_RECONSTRUCTION_SENTINEL, assertTaskEvidenceWriteAllowed, ExternalEvidenceBundleSchema, parseTaskEvidence, DEFAULT_REQUIRED_GATES, isValidTaskId, getTaskWorkflowSnapshot, deriveApplicableGateSet, isReadOnlyNoMutationEligible, computeExternalDeclarationDigest, externalProofCurrent, isExternalEvidenceInitialCompletionEligible, reduceTaskWorkflowSnapshot, deriveRequiredGates, expandRequiredGates, transitionTaskWorkflowEvidence, transitionTaskWorkflowEvidenceWithStatus, withTaskEvidenceTransaction, ensureTaskGateRequirementsReceiptForSettledTransition, recordGateEvidence, recordTodoScanEvidence, recordAgentDispatch, readTaskEvidence, readTaskEvidenceState, readTaskEvidenceRaw, hasPassedAllGates, compareTaskWorkflowStateRank };

package/dist/cli/{index-3ct8kgfj.js → index-sz67z90q.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-0veqvgny.js";
+} from "./index-v1h70r3y.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,13 +9,13 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-cwg99gea.js";
+} from "./index-bn3aa5q1.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-n1ddn12j.js";
+} from "./index-g57p8p1k.js";
 import {
   atomicWriteFile
-} from "./index-jmhn6ab5.js";
+} from "./index-traz987v.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-gdyqdhz1.js → index-th667k1y.js}

@@ -5,18 +5,18 @@ import {
 import {
   effectiveRetrievalOutcomes,
   readAuthoritativeKnowledgeCounterRollups
-} from "./index-s4wbe96z.js";
+} from "./index-0ptf66x5.js";
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-3ct8kgfj.js";
+} from "./index-sz67z90q.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-cwg99gea.js";
+} from "./index-bn3aa5q1.js";
 import {
   appendCappedJsonl,
   resolveRetentionCap
@@ -27,7 +27,7 @@ import {
 import {
   atomicWriteFileAnyRoot,
   atomicWriteSwarmFile
-} from "./index-270zfq1f.js";
+} from "./index-epzadpmm.js";
 import {
   advisoryWarn,
   init_warning_buffer

package/dist/cli/{index-jmhn6ab5.js → index-traz987v.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   withEvidenceLock
-} from "./index-dz15f98h.js";
+} from "./index-q8vfw61p.js";
 import {
   atomicWriteFileAnyRoot
-} from "./index-270zfq1f.js";
+} from "./index-epzadpmm.js";
 
 // src/evidence/task-file.ts
 import * as path from "path";

package/dist/cli/{index-0veqvgny.js → index-v1h70r3y.js}

@@ -11,7 +11,7 @@ import {
   readLinkPointer,
   resolveKnowledgeStoreDir,
   resolveLinkDir
-} from "./index-n1ddn12j.js";
+} from "./index-g57p8p1k.js";
 
 // src/knowledge/curation-policy.ts
 import { readFile as readFile2 } from "fs/promises";

package/dist/cli/{index-snx2vb1x.js → index-ves1rtqt.js}

@@ -11,7 +11,7 @@ import {
 } from "./index-te9hq2f4.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-270zfq1f.js";
+} from "./index-epzadpmm.js";
 
 // src/db/project-db.ts
 import { existsSync, mkdirSync, unlinkSync } from "fs";

package/dist/cli/{index-qbhjey8k.js → index-vtkgg2qn.js}

@@ -1,14 +1,14 @@
 // @bun
 import {
   writeSpeckitCheckoffLedger
-} from "./index-38fgg593.js";
+} from "./index-3zspah3v.js";
 import {
   validateSpecContent
 } from "./index-0725jpp7.js";
 import {
   init_loader,
   readSddSourceSetting
-} from "./index-88d5kpjj.js";
+} from "./index-3020n6d9.js";
 import {
   advisoryWarn,
   init_warning_buffer
@@ -20,7 +20,7 @@ import {
 import {
   SDD_SOURCES,
   init_schema
-} from "./index-0bw1jyen.js";
+} from "./index-p6v544jn.js";
 
 // src/sdd/effective-spec.ts
 init_loader();

package/dist/cli/{index-x6rv0e00.js → index-w2bhrp6z.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-6b295cas.js";
 import {
   readEffectiveSpecSync
-} from "./index-qbhjey8k.js";
+} from "./index-vtkgg2qn.js";
 import {
   _internals,
   clearWorktreeMergeStatus,
@@ -20,7 +20,7 @@ import {
   estimateTokens,
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-b3ws03kp.js";
+} from "./index-xyvsdn07.js";
 import {
   LedgerStaleWriterError,
   appendLedgerEvent,
@@ -39,7 +39,7 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-zzpy5cx3.js";
+} from "./index-s8eac99p.js";
 import {
   deleteCoordinationStateWithinTransaction,
   getCoordinationStateRaw,
@@ -48,16 +48,16 @@ import {
   transitionCoordinationState,
   transitionCoordinationStateWithinTransaction,
   withCoordinationTransaction
-} from "./index-9y6yk1n0.js";
+} from "./index-na6ph1fp.js";
 import {
   DURABILITY_CLASSES,
   getProjectDb,
   projectDbExists,
   withDurabilityClass
-} from "./index-snx2vb1x.js";
+} from "./index-ves1rtqt.js";
 import {
   appendCoreEventSync
-} from "./index-3mzc5rqc.js";
+} from "./index-nzfq1ms2.js";
 import {
   derivePlanId,
   derivePlanIdentityHash
@@ -67,7 +67,7 @@ import {
 } from "./index-t7hmqgjy.js";
 import {
   emit
-} from "./index-dtwj4hsk.js";
+} from "./index-c2k7q723.js";
 import {
   canonicalRootKeyFresh
 } from "./index-te9hq2f4.js";
@@ -78,18 +78,18 @@ import {
   atomicWriteSwarmFileSync,
   invalidateCachedArtifact,
   readCachedParsedFile
-} from "./index-270zfq1f.js";
+} from "./index-epzadpmm.js";
 import {
   PlanSchema,
   normalizeCurrentPhaseInPlace,
   resolveActivePhaseId
-} from "./index-gx2vp8gx.js";
+} from "./index-3t46mez1.js";
 import {
   init_config,
   init_loader,
   isEpicModeConfigEnabled,
   loadPluginConfigWithMeta
-} from "./index-88d5kpjj.js";
+} from "./index-3020n6d9.js";
 import {
   bunHash,
   bunWrite,
@@ -1600,7 +1600,9 @@ function computePlanContentHash(plan) {
         acceptance: task.acceptance,
         files_touched: [...task.files_touched].sort(),
         evidence_path: task.evidence_path,
-        blocked_reason: task.blocked_reason
+        blocked_reason: task.blocked_reason,
+        evidence_class: task.evidence_class,
+        evidence_anchors: task.evidence_anchors
       })).sort((a, b) => compareTaskIds(a.id, b.id))
     })).sort((a, b) => a.id - b.id)
   };
@@ -2668,7 +2670,7 @@ ${markdown}`;
   }
 }
 async function defaultMaybeSaveAutoCheckpoint(directory, plan) {
-  const { maybeSaveAutoCheckpoint } = await import("./auto-checkpoint-gv21fb1h.js");
+  const { maybeSaveAutoCheckpoint } = await import("./auto-checkpoint-bywgxh27.js");
   return maybeSaveAutoCheckpoint(directory, plan);
 }
 async function updateTaskStatus(directory, taskId, status, options) {
@@ -2744,7 +2746,7 @@ async function updateTaskStatus(directory, taskId, status, options) {
       if (status === "completed") {
         try {
           const completedTask = updatedPlan.phases.flatMap((phase) => phase.tasks).find((candidate) => candidate.id === taskId);
-          const { maybePropagateSpeckitCheckoff } = await import("./speckit-checkoff-61xn2c2v.js");
+          const { maybePropagateSpeckitCheckoff } = await import("./speckit-checkoff-1v02b2dt.js");
           await maybePropagateSpeckitCheckoff(directory, {
             taskId,
             frRefs: completedTask?.fr_refs ?? [],
@@ -2843,6 +2845,11 @@ Phase: ${currentPhase} [${phaseStatus}] | Updated: ${now}
         const sortedFiles = [...task.files_touched].sort();
         suffix += ` (files_touched: ${JSON.stringify(sortedFiles)})`;
       }
+      if (task.evidence_class === "external_git") {
+        const anchorCommands = (task.evidence_anchors ?? []).map((anchor) => anchor.command).join("; ");
+        const anchorsSummary = anchorCommands.length > 120 ? `${anchorCommands.slice(0, 117)}...` : anchorCommands;
+        suffix += ` \u2014 external evidence: external_git (anchors: ${anchorsSummary})`;
+      }
       if (phase.id === currentPhase && task.status === "in_progress" && !currentTaskMarked) {
         suffix += " \u2190 CURRENT";
         currentTaskMarked = true;
@@ -3084,4 +3091,4 @@ function migrateLegacyPlan(planContent, swarmId) {
   return plan;
 }
 
-export { EPIC_MODE_CONFIG_DISABLED_MESSAGE, isEpicModeConfigEnabledForDirectory, epicSentinelExists, computeEpicKey, planIdentityOf, readLedgerRootDigest, inspectEpic, getOpenEpic, isEpicOpenForProject, createEpicRecord, updateEpicRecord, readPlanTaskRef, markEpicClosing, recordEpicBranch, recordEpicLandingAttempt, deleteEpicState, repairEpicSentinel, buildTaskCompletionDescriptor, ensureTaskCheckpointReceipt, updateTaskCheckpointReceipt, relevantMergeFailureForProject, describeMergeFailuresForStatus, clearMergeFailureCommand, getRunMemorySummary, PlanRecoverySupersededError, loadPlanJsonOnly, loadPlan, withPlanLifecycleLock, savePlan, closePlanTerminalState, updateTaskStatus, derivePlanMarkdown, getCurrentTaskId };
+export { EPIC_MODE_CONFIG_DISABLED_MESSAGE, isEpicModeConfigEnabledForDirectory, epicSentinelExists, computeEpicKey, planIdentityOf, readLedgerRootDigest, inspectEpic, getOpenEpic, isEpicOpenForProject, createEpicRecord, updateEpicRecord, readPlanTaskRef, markEpicClosing, recordEpicBranch, recordEpicLandingAttempt, deleteEpicState, repairEpicSentinel, buildTaskCompletionDescriptor, ensureTaskCheckpointReceipt, updateTaskCheckpointReceipt, relevantMergeFailureForProject, describeMergeFailuresForStatus, clearMergeFailureCommand, recordTaskAttempt, getRunMemorySummary, PlanRecoverySupersededError, loadPlanJsonOnly, loadPlan, withPlanLifecycleLock, savePlan, closePlanTerminalState, updateTaskStatus, derivePlanMarkdown, getCurrentTaskId };