opencode-swarm 7.200.9 → 7.200.10

package/dist/memory/redaction.d.ts

@@ -9,9 +9,13 @@ export interface SecretFinding {
  * cohort-root open. This is honest about what it measures (the regex pattern
  * count + the durable-rejection toggles) — it is NOT a content hash of stored
  * records. Bump the salt constant when the redaction contract changes
- * meaningfully (done for #1466: PII detection settings joined the policy).
+ * meaningfully (done for #1466: PII detection settings joined the policy;
+ * done for #3382: fixed-length credential families match embedded
+ * (non-word-boundary) shapes and the AWS-secret arms now run before the bare
+ * access-key arm, so durable-secret rejection decisions differ between
+ * members on opposite sides of the change).
  */
-export declare const REDACTION_POLICY_SALT = 2;
+export declare const REDACTION_POLICY_SALT = 3;
 /**
  * #1466: redaction-policy input. `detectPii`/`rejectDurablePii`/`piiDetector`
  * are optional so non-memory callers (e.g. the consensus miner, which applies
@@ -49,6 +53,12 @@ export interface MemoryCohortFingerprintInput {
  * digest for an unchanged input is a version bump so legacy files surface as
  * "re-run `/swarm memory link`" instead of a false config-mismatch throw.
  *
+ * Version 3 (#3382): again no change to canonicalization, hashing, or
+ * truncation — bumped because `redaction_policy_version` changed for
+ * unchanged user config (REDACTION_POLICY_SALT 2→3 with the embedded-shape
+ * detection and the AWS-secret arm reorder). Same remedy: legacy files
+ * surface as "re-run `/swarm memory link`".
+ *
  * BUMP THIS whenever a change would alter the digest for an unchanged input —
  * e.g. a different hash, a different truncation length, a change to
  * `stableCanonicalStringify`'s output for a reachable input, or a change to the
@@ -56,7 +66,7 @@ export interface MemoryCohortFingerprintInput {
  * comparing fingerprints, so a bump surfaces as "re-run `/swarm memory link`"
  * instead of being misreported as a real provider/embedding config mismatch.
  */
-export declare const FINGERPRINT_ALGORITHM_VERSION = 2;
+export declare const FINGERPRINT_ALGORITHM_VERSION = 3;
 /**
  * #2062 F-012 (R3 fix): the algorithm version implied by a persisted cohort
  * config that has NO `algorithm_version` field. Every file written before the

package/dist/pr-review/legacy-transcript-adapter.d.ts

@@ -241,9 +241,20 @@ export interface IndexedVerdictRows {
      * grammar noise (typically a Stage-B task row or an echoed format line) —
      * they carry no authenticable verdict, so they are quarantined out of the
      * exact-set count instead of voiding every valid sibling row. Identifiers
-     * and arity only; never row prose. A legal-arity row naming an unassigned
-     * ID is NOT quarantined — that is the spoofing class and still voids the
-     * lane.
+     * and arity only; never row prose.
+     *
+     * Issue #3357 (second arm): a row that ARRIVED over its legal arity was
+     * tail-merged back to exactly the legal count (`recoveredOverflow`), so
+     * the post-parse-arity discriminator above can never see it — the #3310
+     * headline root cause survived in exactly that shape. When the caller
+     * supplies the assigned-id set, such a recoveredOverflow row whose
+     * post-merge id is UNASSIGNED is quarantined on its arrival arity
+     * (rawFieldCount) instead of being admitted to `markerRows`: over-arrival
+     * is by construction non-format-conformant (a spoofer copying the injected
+     * contract card emits exactly the legal arity), so it is grammar noise,
+     * not spoofing. The spoofing floor is unchanged: a row that arrived at
+     * EXACTLY the legal arity (no tail-merge) naming an unassigned ID is NOT
+     * quarantined — that is the spoofing class and still voids the lane.
      */
     quarantined: Array<{
         marker: '[REVIEWED]' | '[CRITIC]';
@@ -251,7 +262,7 @@ export interface IndexedVerdictRows {
         arity: number;
     }>;
 }
-export declare function indexVerdictRows(text: string, marker: '[REVIEWED]' | '[CRITIC]'): IndexedVerdictRows;
+export declare function indexVerdictRows(text: string, marker: '[REVIEWED]' | '[CRITIC]', assignedIds?: ReadonlySet<string>): IndexedVerdictRows;
 export declare function validateReviewerVerdictFields(fields: string[]): string[] | null;
 /**
  * Digest of the FULL canonical reviewer row, not the classification/severity

package/dist/sandbox/macos/sandbox-exec-executor.d.ts

@@ -18,6 +18,29 @@ import { type SandboxExecutor } from '../executor';
 declare function resolveSandboxExecBinary(): string;
 /** Resolve the probe's target command: absolute base-OS path, bare-name fallback. */
 declare function resolveProbeTargetBinary(): string;
+/** The one filesystem call realpathOrSelf needs; injectable for tests. */
+interface ResolveFs {
+    realpath(p: string): string;
+}
+/**
+ * Return the kernel-resolved form of a path under one of the macOS system
+ * links (`/tmp`, `/var`, `/etc` -> `/private/...`) for embedding in an SBPL
+ * profile. Seatbelt matches `subpath` predicates against the kernel-resolved
+ * path, so the unresolved form of such a path never matches and its allow
+ * line is inert.
+ *
+ * Fail closed by construction: the result is the INPUT STRING with the leading
+ * system prefix swapped (`/var/x` -> `/private/var/x`); the filesystem is
+ * consulted only to confirm that this host's `/var` really is the link to
+ * `/private/var`. No other symlink is ever followed, so a link created inside
+ * a project can neither change the result nor widen the profile to its
+ * target, and there is no check-then-resolve window to race. Any other path
+ * (another prefix, a host where the link is absent, an error) is returned
+ * unchanged: an already-resolved path matches as it always did, while a path
+ * under some other symlink stays unresolved, Seatbelt does not match it, and
+ * its allow line is inert (writes denied, as before).
+ */
+declare function realpathOrSelf(p: string, fsx?: ResolveFs): string;
 /**
  * Build the SBPL profile used ONLY for availability probing.
  *
@@ -67,6 +90,7 @@ export declare const _internals: {
     resetProbeMemo: typeof resetProbeMemo;
     buildSandboxProfile: typeof buildSandboxProfile;
     buildProbeProfile: typeof buildProbeProfile;
+    realpathOrSelf: typeof realpathOrSelf;
     buildEnvOverridePrefix: typeof buildEnvOverridePrefix;
     resolveSandboxExecBinary: typeof resolveSandboxExecBinary;
     resolveProbeTargetBinary: typeof resolveProbeTargetBinary;

package/dist/workflow/coder-settlement.d.ts

@@ -2,6 +2,8 @@ import type { BackgroundTaskChangeContext, BackgroundWorktreeDescriptor } from '
 import { type TaskEvidence } from '../gate-evidence.js';
 import { removeWorktreeProvisioningOwner } from '../hooks/delegation-gate/worktree-provisioning-owner.js';
 import type { MergeOperationProvenance } from '../worktree/merge.js';
+import { withSettlementArtifactLifecycle } from '../worktree/settlement-artifact-lifecycle.js';
+import { validateSettlementLane } from '../worktree/settlement-source-recovery.js';
 import type { CoderSettlementWal } from './workflow-wal-schema.js';
 export interface CoderSettlementResult {
     evidence: TaskEvidence;
@@ -193,6 +195,8 @@ export declare function recoverStaleCoderSettlements(directory: string, options?
 }>;
 export declare const _internals: {
     liveDispatches: Set<string>;
+    withSettlementArtifactLifecycle: typeof withSettlementArtifactLifecycle;
+    validateSettlementLane: typeof validateSettlementLane;
     removeWorktreeProvisioningOwner: typeof removeWorktreeProvisioningOwner;
     /**
      * Test seam for the lane-branch existence probe. Production reads it here,
@@ -203,5 +207,6 @@ export declare const _internals: {
      */
     branchExists: typeof probeBranchExists;
     recoverCoderSettlement: typeof recoverCoderSettlement;
+    historicalOrphanAdvisoryAt: Map<string, number>;
 };
 export {};

package/dist/worktree/core.d.ts

@@ -13,6 +13,7 @@ import * as fsPromises from 'node:fs/promises';
 import { clearLiveLaneOwner } from '../parallel/lane-owners';
 import { bunSpawn } from '../utils/bun-compat';
 import { resolveGitExecutable } from '../utils/git-executable.js';
+import { assertSettlementArtifactsRemovable, withSettlementArtifactLifecycle } from './settlement-artifact-lifecycle';
 import type { WorktreeHandle, WorktreeOptions, WorktreeProvisionResult } from './types';
 /**
  * Test-only dependency-injection seam. Production code calls
@@ -23,6 +24,8 @@ import type { WorktreeHandle, WorktreeOptions, WorktreeProvisionResult } from '.
  * local object is file-scoped and trivially restorable via `afterEach`.
  */
 export declare const _internals: {
+    withSettlementArtifactLifecycle: typeof withSettlementArtifactLifecycle;
+    assertSettlementArtifactsRemovable: typeof assertSettlementArtifactsRemovable;
     bunSpawn: typeof bunSpawn;
     /**
      * Issue #2527 F3: clear the durable live-lane-owner record when this

package/dist/worktree/merge.d.ts

@@ -11,6 +11,7 @@
  */
 import { bunSpawn } from '../utils/bun-compat';
 import { resolveGitExecutable } from '../utils/git-executable.js';
+import { assertSettlementArtifactsRemovable, withSettlementArtifactLifecycle } from './settlement-artifact-lifecycle';
 import type { MergeStrategy } from './types';
 /**
  * Test-only dependency-injection seam. Production code calls
@@ -21,6 +22,8 @@ import type { MergeStrategy } from './types';
  * local object is file-scoped and trivially restorable via `afterEach`.
  */
 export declare const _internals: {
+    withSettlementArtifactLifecycle: typeof withSettlementArtifactLifecycle;
+    assertSettlementArtifactsRemovable: typeof assertSettlementArtifactsRemovable;
     bunSpawn: typeof bunSpawn;
     /** Test seam for process.platform — allows non-Windows CIs to exercise Windows paths. */
     platform: string;
@@ -297,8 +300,19 @@ commitMessage?: string): Promise<MergeSuccess | MergeConflict | MergeFailure>;
  * operate on mutable branch refs, verifies that the captured lane ancestry is
  * coherent, and fails closed if the current primary checkout no longer
  * descends from the captured target head.
+ * Explicit landing messages retain the ordinary committed-merge policy;
+ * callers that omit options keep the existing plain Git merge behavior.
  */
-export declare function recoverMergeBackFromImmutableCoordinates(primaryDir: string, coordinates: ImmutableMergeRecoveryCoordinates): Promise<ImmutableMergeRecoveryResult>;
+export declare function recoverMergeBackFromImmutableCoordinates(primaryDir: string, coordinates: ImmutableMergeRecoveryCoordinates, options?: Pick<DirtyMergeOptions, 'landingCommitMessage'> & {
+    /**
+     * Land a `'merge'` recovery via the #2508 squash-unstaged shape (changes
+     * applied unstaged, no merge commit, HEAD does not move) instead of
+     * `git merge --no-edit`. `attemptMergeBackFromDirty` sets it whenever the
+     * caller did not opt into `commitLanding`, so the retarget path lands in
+     * the same shape as the normal path. Ignored for `rebase`/`cherry-pick`.
+     */
+    landUnstaged?: boolean;
+}): Promise<ImmutableMergeRecoveryResult>;
 /**
  * Detect whether a previously-started merge-back already landed on the target.
  *

package/dist/worktree/ownership.d.ts

@@ -33,6 +33,7 @@
 import * as fs from 'node:fs';
 import { resolveWorktreeRepoOwnership } from '../config/lane-context';
 import { isPathUnderSwarmWorktreeBase, removeWorktree } from './core';
+import { assertSettlementArtifactsRemovable, withSettlementArtifactLifecycle } from './settlement-artifact-lifecycle';
 export type OwnedRemovalOutcome = {
     status: 'removed';
 } | {
@@ -44,6 +45,8 @@ export type OwnedRemovalOutcome = {
 };
 export type GitMarkerProbe = 'gitless' | 'present' | 'uncertain';
 export declare const _internals: {
+    withSettlementArtifactLifecycle: typeof withSettlementArtifactLifecycle;
+    assertSettlementArtifactsRemovable: typeof assertSettlementArtifactsRemovable;
     resolveWorktreeRepoOwnership: typeof resolveWorktreeRepoOwnership;
     isPathUnderSwarmWorktreeBase: typeof isPathUnderSwarmWorktreeBase;
     removeWorktree: typeof removeWorktree;

package/dist/worktree/settlement-artifact-lifecycle.d.ts

@@ -0,0 +1,32 @@
+import { lstat, opendir, realpath } from 'node:fs/promises';
+import { tryAcquireLock } from '../parallel/file-locks.js';
+import { assertProjectRoot } from '../utils/project-boundary.js';
+import type { CoderSettlementWal } from '../workflow/workflow-wal-schema.js';
+declare function readWal(filePath: string, taskId: string): Promise<CoderSettlementWal | null>;
+declare function canonicalizeArtifact(filePath: string): Promise<string>;
+export declare const _internals: {
+    tryAcquireLock: typeof tryAcquireLock;
+    opendir: typeof opendir;
+    lstat: typeof lstat;
+    realpath: typeof realpath;
+    readWal: typeof readWal;
+    canonicalize: typeof canonicalizeArtifact;
+    assertProjectRoot: typeof assertProjectRoot;
+};
+/**
+ * Serialize isolated dispatch publication against destructive lane admission.
+ * Lock order is task/evidence -> lifecycle. The callback must never acquire a
+ * task/evidence lock or recursively enter this non-reentrant lifecycle lock.
+ */
+export declare function withSettlementArtifactLifecycle<T>(directory: string, operation: () => Promise<T>): Promise<T>;
+export interface SettlementArtifactTarget {
+    path?: string;
+    branch?: string;
+}
+/**
+ * Fail closed on an incomplete inventory. Call only while holding lifecycle
+ * admission, and retain that admission until the actual destructive operation
+ * finishes; an advisory scan alone cannot authorize a later deletion.
+ */
+export declare function assertSettlementArtifactsRemovable(directory: string, target: SettlementArtifactTarget): Promise<void>;
+export {};

package/dist/worktree/settlement-source-recovery.d.ts

@@ -0,0 +1,12 @@
+import { bunSpawn } from '../utils/bun-compat';
+import { resolveGitExecutable } from '../utils/git-executable.js';
+export declare const _internals: {
+    bunSpawn: typeof bunSpawn;
+    resolveGitExecutable: typeof resolveGitExecutable;
+};
+export declare function probeSettlementSource(directory: string, oid: string): Promise<'present' | 'absent'>;
+export declare function settlementBackupRef(oid: string): string;
+export declare function preserveSettlementSource(directory: string, oid: string): Promise<string>;
+export declare function restoreSettlementBranch(directory: string, branch: string, oid: string): Promise<boolean>;
+export declare function releaseSettlementSource(directory: string, oid: string): Promise<void>;
+export declare function validateSettlementLane(directory: string, branchName: string, expectedHead: string): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.200.9",
+	"version": "7.200.10",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-kja1c81k.js

@@ -1,82 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-casbh4y7.js";
-import"./index-p2dst45x.js";
-import"./index-hhq5f82z.js";
-import"./index-qw2wfz92.js";
-import"./index-xh50xsgf.js";
-import"./index-4ph7ad0b.js";
-import"./index-axqyjreb.js";
-import"./index-txdagbh7.js";
-import"./index-hzy6n59p.js";
-import"./index-x3rxa3sh.js";
-import"./index-rdec0y3z.js";
-import"./index-9jty56xr.js";
-import"./index-08jd4gz2.js";
-import"./index-6q2s7r67.js";
-import"./index-bk8r4m9j.js";
-import"./index-tecp3a77.js";
-import"./index-x5jwegqw.js";
-import"./index-7h22y3ew.js";
-import"./index-zy943kpp.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-qawbxp81.js";
-import"./index-kxp43wbw.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-hh87yny7.js";
-import"./index-697mg68b.js";
-import"./index-8mrentmw.js";
-import"./index-7c4gckzq.js";
-import"./index-4ya4krts.js";
-import"./index-rdyfrdcp.js";
-import"./index-spggmr30.js";
-import"./index-f8nb470m.js";
-import"./index-ss8nfrbb.js";
-import"./index-m9zzj4ee.js";
-import"./index-4krkevgc.js";
-import"./index-94s844qn.js";
-import"./index-mhd6kdzr.js";
-import"./index-rtry5xyf.js";
-import"./index-9ws7m02r.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-2c4hjeea.js";
-import"./index-v839c9mv.js";
-import"./index-tvdn9gr0.js";
-import"./index-2x015vjy.js";
-import"./index-y7c4hqcj.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-vtpt8yns.js";
-import"./index-7pmbnjvj.js";
-import"./index-8srvdpw6.js";
-import"./index-9rwhas09.js";
-import"./index-xhxbv7mz.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-4fkxdnc7.js";
-import"./index-yyrnkc3a.js";
-import"./index-q8vfw61p.js";
-import"./index-t7hmqgjy.js";
-import"./index-c2k7q723.js";
-import"./index-te9hq2f4.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-mn75z39t.js";
-import"./index-3t46mez1.js";
-import"./index-02vgzrpg.js";
-import"./index-sp2cxpaq.js";
-import"./index-qbxk2rn6.js";
-import"./index-zgwm4ryv.js";
-import"./index-y16v2q1x.js";
-import"./index-xfzkq1k4.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-agaet7r5.js

@@ -1,83 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-6901y99d.js";
-import"./index-casbh4y7.js";
-import"./index-p2dst45x.js";
-import"./index-hhq5f82z.js";
-import"./index-qw2wfz92.js";
-import"./index-xh50xsgf.js";
-import"./index-4ph7ad0b.js";
-import"./index-axqyjreb.js";
-import"./index-txdagbh7.js";
-import"./index-hzy6n59p.js";
-import"./index-x3rxa3sh.js";
-import"./index-rdec0y3z.js";
-import"./index-9jty56xr.js";
-import"./index-08jd4gz2.js";
-import"./index-6q2s7r67.js";
-import"./index-bk8r4m9j.js";
-import"./index-tecp3a77.js";
-import"./index-x5jwegqw.js";
-import"./index-7h22y3ew.js";
-import"./index-zy943kpp.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-qawbxp81.js";
-import"./index-kxp43wbw.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-hh87yny7.js";
-import"./index-697mg68b.js";
-import"./index-8mrentmw.js";
-import"./index-7c4gckzq.js";
-import"./index-4ya4krts.js";
-import"./index-rdyfrdcp.js";
-import"./index-spggmr30.js";
-import"./index-f8nb470m.js";
-import"./index-ss8nfrbb.js";
-import"./index-m9zzj4ee.js";
-import"./index-4krkevgc.js";
-import"./index-94s844qn.js";
-import"./index-mhd6kdzr.js";
-import"./index-rtry5xyf.js";
-import"./index-9ws7m02r.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-2c4hjeea.js";
-import"./index-v839c9mv.js";
-import"./index-tvdn9gr0.js";
-import"./index-2x015vjy.js";
-import"./index-y7c4hqcj.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-vtpt8yns.js";
-import"./index-7pmbnjvj.js";
-import"./index-8srvdpw6.js";
-import"./index-9rwhas09.js";
-import"./index-xhxbv7mz.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-4fkxdnc7.js";
-import"./index-yyrnkc3a.js";
-import"./index-q8vfw61p.js";
-import"./index-t7hmqgjy.js";
-import"./index-c2k7q723.js";
-import"./index-te9hq2f4.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-mn75z39t.js";
-import"./index-3t46mez1.js";
-import"./index-02vgzrpg.js";
-import"./index-sp2cxpaq.js";
-import"./index-qbxk2rn6.js";
-import"./index-zgwm4ryv.js";
-import"./index-y16v2q1x.js";
-import"./index-xfzkq1k4.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};