sibyl-system 1.3.5 → 1.4.0

package/README.md

@@ -186,6 +186,13 @@ Plainly stated:
   A kinship hit stamps the run `independence=NOT-INDEPENDENT`: the ballot is
   preserved as data but is not in any effective path. A chain that cannot be
   read stamps `UNVERIFIABLE` — unreadable is never silently clean.
+- **Refused launches leave records (v1.4.0, council 16a2):** an explicit `--run-id`
+  whose tool-staged `launch-context.json` is missing or malformed is REFUSED, with a
+  `launch-refusal.json` written into the private run dir — a pinned id claiming a
+  tool launch that never staged its finding is a provenance lie, not an absence.
+  The bare CLI lane (no `--run-id`) keeps the named `UNVERIFIABLE` leg, and once the
+  chamber runner regenerates its run record, that face outvouches any contradicted
+  staged claim ("record wins").
 - **Absence is a disability (W2).** Before any tally is honored, every declared
   voter/worker must have left a terminal row (`ok|error|timeout` + detail) in
   the run's `TERMINALS.txt`. A declared seat without its row is counted
@@ -204,7 +211,9 @@ Plainly stated:
 - Consult/swarm send the artifact text to your configured model pool providers.
 - The plugin writes under its state paths (the runs file and the per-run space) and,
   for chamber/exam lanes, sealed run directories under `lane.runRoot`
-  (default `/tmp`) — role homes, transcripts, pidfiles, CHECKSUMS.
+  (default `/tmp`), every plugin-created dir `0700` (mkdir mode + explicit chmod:
+  unreachable to group/other regardless of umask — v1.4.0 private-dir law) —
+  role homes, transcripts, pidfiles, CHECKSUMS.
 - Voter/worker turns run with `bash`, `edit`, and `write` disabled per prompt.
 
 ## Architecture (`src/`)
@@ -263,7 +272,7 @@ PLAN→MINT→DISPATCH→AGGREGATE pipeline over ordinary child sessions.
 
 ```bash
 npm run typecheck   # tsc --noEmit, strict + noUncheckedIndexedAccess + exactOptionalPropertyTypes
-npm test            # full unit suite, fully offline (no network, no LLM; ~420 at v1.3.0 — the run prints the exact count)
+npm test            # full unit suite, fully offline (no network, no LLM; 459 at v1.4.0 — the run prints the exact count)
 npm run build       # esbuild bundle → dist/index.js + dist/cli.js (ESM)
 node smoke/run-smoke.mjs   # offline smoke of the shipped surface (see smoke/README.md)
 ./ship.sh           # the full release gate: all of the above + portability scan of the packed tarball

package/dist/cli.js

@@ -9,7 +9,16 @@ var __export = (target, all) => {
 import { randomBytes } from "node:crypto";
 import { spawn as spawn2 } from "node:child_process";
 import { existsSync as existsSync3 } from "node:fs";
-import { copyFile as copyFile2, mkdir as mkdir6, readFile as readFile6 } from "node:fs/promises";
+import { access, copyFile as copyFile2, mkdir as mkdir6, readFile as readFile6, writeFile as writeFile7 } from "node:fs/promises";
+
+// src/fsperm.ts
+import { chmod, mkdir } from "node:fs/promises";
+async function mkdirPrivate(dir) {
+  await mkdir(dir, { recursive: true, mode: 448 });
+  await chmod(dir, 448);
+}
+
+// src/cli.ts
 import { basename, dirname as dirname4, isAbsolute as isAbsolute2, join as join7, resolve as resolve2 } from "node:path";
 
 // src/state/record.ts
@@ -73,7 +82,7 @@ var COUNCIL_SIZE = COUNCILORS.length;
 var KNOWN_IDS = new Set(COUNCILORS);
 
 // src/chamber/protocol.ts
-import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
+import { mkdir as mkdir3, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
 import { join as join2 } from "node:path";
 
 // src/lane/seating.ts
@@ -185,7 +194,7 @@ var FAIL_CLOSED_REJECT = rejectVerdict("no-parse-performed");
 
 // src/state/chamber.ts
 import { createHash as createHash2 } from "node:crypto";
-import { mkdir, readFile, readdir, rename, unlink, writeFile } from "node:fs/promises";
+import { mkdir as mkdir2, readFile, readdir, rename, unlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 var DEFAULT_CHAMBER_LEDGER = join(homedir(), ".sibyl", "chamber-ledger.jsonl");
@@ -293,7 +302,7 @@ async function appendLedgerRow(ledgerPath, record2) {
   const stamped = { ...record2, serial };
   const line = JSON.stringify(stamped);
   if (line.includes("\n")) return { ok: false, reason: "row serializes with a newline \u2014 refused (ledger is one-JSON-per-line)" };
-  await mkdir(dirname(ledgerPath), { recursive: true });
+  await mkdir2(dirname(ledgerPath), { recursive: true });
   await writeFile(ledgerPath, `${line}
 `, { flag: "a" });
   return { ok: true, serial, line };
@@ -334,7 +343,7 @@ var RECORD_FILE = "run-record.json";
 var CHECKSUMS_FILE = "CHECKSUMS.txt";
 var LEDGER_LINE_FILE = "ledger-line.txt";
 async function atomicWrite(path, content) {
-  await mkdir(dirname(path), { recursive: true });
+  await mkdir2(dirname(path), { recursive: true });
   const tmp = `${path}.${String(process.pid)}.tmp`;
   try {
     await writeFile(tmp, content, "utf8");
@@ -636,9 +645,9 @@ var Protocol = class {
   }
 };
 async function runChamber(cfg, onRecord) {
-  await mkdir2(join2(cfg.runDir, "pids"), { recursive: true });
-  await mkdir2(join2(cfg.runDir, "evidence"), { recursive: true });
-  for (const role of CHAMBER_ROLES) await mkdir2(join2(cfg.runDir, role), { recursive: true });
+  await mkdir3(join2(cfg.runDir, "pids"), { recursive: true });
+  await mkdir3(join2(cfg.runDir, "evidence"), { recursive: true });
+  for (const role of CHAMBER_ROLES) await mkdir3(join2(cfg.runDir, role), { recursive: true });
   const roster = CHAMBER_ROLES.map((role) => {
     const d = resolveSeat(role, cfg.slots[role], cfg.pool, cfg.policy);
     return d.ok ? { role, slot: d.slot, modelId: d.modelId, policyCheck: "allow" } : { role, slot: cfg.slots[role], modelId: "", policyCheck: "deny", denyReason: d.deny };
@@ -852,7 +861,7 @@ function renderVoice(voice) {
 // src/lane/isolated.ts
 import { spawn } from "node:child_process";
 import { createWriteStream, existsSync } from "node:fs";
-import { copyFile, mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
+import { copyFile, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
 import { dirname as dirname2, join as join3 } from "node:path";
 var DEFAULT_PINNED_PATH = "/usr/bin:/bin";
 function composeSandboxArgs(opts) {
@@ -882,12 +891,12 @@ function rolePaths(cfg, role) {
 }
 async function prepareRoleHome(cfg, role) {
   const paths = rolePaths(cfg, role);
-  await mkdir3(join3(paths.home, ".config", "opencode"), { recursive: true });
-  await mkdir3(dirname2(paths.dbPath), { recursive: true });
-  await mkdir3(join3(paths.home, ".cache", "opencode"), { recursive: true });
-  await mkdir3(join3(paths.home, ".local", "state", "opencode"), { recursive: true });
-  await mkdir3(paths.workspace, { recursive: true });
-  await mkdir3(join3(cfg.runDir, "pids"), { recursive: true });
+  await mkdirPrivate(join3(paths.home, ".config", "opencode"));
+  await mkdirPrivate(dirname2(paths.dbPath));
+  await mkdirPrivate(join3(paths.home, ".cache", "opencode"));
+  await mkdirPrivate(join3(paths.home, ".local", "state", "opencode"));
+  await mkdirPrivate(paths.workspace);
+  await mkdirPrivate(join3(cfg.runDir, "pids"));
   try {
     if (cfg.configSource.length > 0) {
       await copyFile(cfg.configSource, join3(paths.home, ".config", "opencode", "opencode.jsonc"));
@@ -20381,17 +20390,51 @@ async function resolveRun(flags) {
     return { ok: false, error: `--run-id must be a bare sibyl run id, got "${flagRunId}"` };
   }
   const runId = flagRunId ?? `sibyl-${compactIso(now)}-${randomBytes(2).toString("hex")}`;
+  if (targetRaw !== "-") {
+    const abs = isAbsolute2(targetRaw) ? targetRaw : resolve2(process.cwd(), targetRaw);
+    try {
+      await access(abs);
+    } catch (e) {
+      return { ok: false, error: `--target unreadable: ${e instanceof Error ? e.message : String(e)}` };
+    }
+  }
   const runDir = join7(laneCfg.runRoot, `sibyl-run-${runId}`);
-  await mkdir6(runDir, { recursive: true });
-  let launchIndependence;
+  await mkdirPrivate(runDir);
+  let contextLeg = null;
+  let contextProblem = null;
   try {
     const lc = JSON.parse(await readFile6(join7(runDir, "launch-context.json"), "utf8"));
-    launchIndependence = isIndependenceShape(lc["independence"]) ? lc["independence"] : {
-      status: "UNVERIFIABLE",
-      convenerChain: [],
-      evidence: "launch-context staged but its independence leg is malformed \u2014 not trusted; this review carries no independence anchor"
+    if (isIndependenceShape(lc["independence"])) contextLeg = lc;
+    else contextProblem = "launch-context staged but its independence leg is malformed";
+  } catch (err) {
+    contextProblem = err instanceof Error && err.name === "SyntaxError" ? "launch-context exists but is not valid JSON" : "no launch-context staged in the run dir";
+  }
+  if (flagRunId !== null && contextProblem !== null) {
+    const refusal = {
+      kind: "refused-launch",
+      runId: flagRunId,
+      reason: `${contextProblem} \u2014 a --run-id launch claims a tool-staged review that never happened; rerun through the sibyl_review tool, or drop --run-id for the supported bare headless launch`,
+      at: now.toISOString()
     };
-  } catch {
+    await writeFile7(join7(runDir, "launch-refusal.json"), `${JSON.stringify(refusal, null, 2)}
+`, "utf8");
+    return { ok: false, error: refusal.reason };
+  }
+  let launchIndependence;
+  if (contextLeg !== null) {
+    launchIndependence = contextLeg["independence"];
+    try {
+      const face = JSON.parse(await readFile6(join7(runDir, "run-record.json"), "utf8"));
+      const faceInd = face["independence"];
+      if (isIndependenceShape(faceInd) && faceInd.status !== launchIndependence.status) {
+        launchIndependence = {
+          ...faceInd,
+          evidence: `context claimed ${launchIndependence.status}, run record carries ${faceInd.status} \u2014 record wins. ${faceInd.evidence}`
+        };
+      }
+    } catch {
+    }
+  } else {
     launchIndependence = {
       status: "UNVERIFIABLE",
       convenerChain: [],

package/dist/index.js

@@ -18981,7 +18981,16 @@ function parseOptions(raw) {
 
 // src/state/index.ts
 import { randomBytes } from "node:crypto";
-import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import { readFile, rename, unlink, writeFile } from "node:fs/promises";
+
+// src/fsperm.ts
+import { chmod, mkdir } from "node:fs/promises";
+async function mkdirPrivate(dir) {
+  await mkdir(dir, { recursive: true, mode: 448 });
+  await chmod(dir, 448);
+}
+
+// src/state/index.ts
 import { homedir as homedir2 } from "node:os";
 import { dirname, join as join2 } from "node:path";
 
@@ -19176,7 +19185,7 @@ var RunStore = class {
    * which briefly widens the crash window but never writes torn JSON. */
   async save(records, opts) {
     const dir = dirname(this.runsFile);
-    await mkdir(dir, { recursive: true });
+    await mkdirPrivate(dir);
     const tmp = join2(dir, `runs.${process.pid}.${randomBytes(4).toString("hex")}.tmp`);
     const renameStep = opts?.rename ?? this.renameFile;
     try {
@@ -19219,7 +19228,7 @@ var RunStore = class {
     const now = /* @__PURE__ */ new Date();
     const runId = `sibyl-${compactIso(now)}-${randomBytes(2).toString("hex")}`;
     const spaceDir = join2(input2.spaceRootDir ?? this.spaceRoot, runId);
-    await mkdir(spaceDir, { recursive: true });
+    await mkdirPrivate(spaceDir);
     const record3 = {
       runId,
       kind: input2.kind,
@@ -31989,6 +31998,8 @@ var LINEAGE_CHUNK = 256;
 var LINEAGE_SAMPLES = 32;
 var LINEAGE_UNION_RATIO = 0.6;
 var LINEAGE_MIN_WINDOWS = 3;
+var LINEAGE_FLOOR_MIN = 8;
+var LINEAGE_FLOOR_RATIO = 0.3;
 function sampleWindows(text) {
   const total = Math.floor(text.length / LINEAGE_CHUNK);
   if (total < LINEAGE_MIN_WINDOWS) return [];
@@ -32000,17 +32011,33 @@ function sampleWindows(text) {
 }
 function beginLineage(artifact) {
   if (artifact.kind !== "path" || artifact.mtimeMs === void 0) return null;
-  const chunks = sampleWindows(artifact.text);
+  return lineageFrom(artifact.text, artifact.mtimeMs);
+}
+function lineageFrom(text, mtimeMs) {
+  const chunks = sampleWindows(text);
   if (chunks.length < LINEAGE_MIN_WINDOWS) return null;
+  const unique = new Set(chunks).size;
   return {
     chunks,
-    need: Math.max(2, Math.ceil(chunks.length * LINEAGE_UNION_RATIO)),
-    mtimeMs: artifact.mtimeMs,
+    unique,
+    need: Math.max(2, Math.ceil(unique * LINEAGE_UNION_RATIO)),
+    mtimeMs,
     matched: /* @__PURE__ */ new Map(),
     copiedAfterMtime: 0,
     timeless: 0
   };
 }
+function lineageConvinced(lg) {
+  const n = lg.matched.size;
+  return n >= lg.need || n >= LINEAGE_FLOOR_MIN && n >= Math.ceil(lg.unique * LINEAGE_FLOOR_RATIO);
+}
+function creditWindows(lg, cands, label) {
+  for (const cand of cands) {
+    for (const chunk of lg.chunks) {
+      if (!lg.matched.has(chunk) && cand.includes(chunk)) lg.matched.set(chunk, label);
+    }
+  }
+}
 function messageTime(m) {
   const t = m.info?.time?.created;
   return typeof t === "number" ? t : void 0;
@@ -32028,7 +32055,8 @@ function partCandidates(p) {
 }
 function lineageVerdict(lg, artifact) {
   const sources = [.../* @__PURE__ */ new Set([...lg.matched.values()])].slice(0, 3).join("; ");
-  return `content-lineage evidence: ${String(lg.matched.size)} of ${String(lg.chunks.length)} verbatim ${String(LINEAGE_CHUNK)}-byte windows of ${artifact.source} appear in convener-chain tool inputs that predate its mtime (${sources}) \u2014 the chain authored this artifact's bytes before/independently of this path`;
+  const majority = lg.matched.size >= lg.need;
+  return `content-lineage evidence: ${String(lg.matched.size)} of ${String(lg.unique)} DISTINCT verbatim ${String(LINEAGE_CHUNK)}-byte windows of ${artifact.source} appear in convener-chain tool inputs that predate its mtime (${sources}) \u2014 ${majority ? "majority" : "absolute floor"} of drafting; repeated identical windows counted once`;
 }
 function scanMessages(rows, convenerIndex, sid, artifact, lg) {
   for (const [mi, m] of rows.entries()) {
@@ -32055,14 +32083,13 @@ function scanMessages(rows, convenerIndex, sid, artifact, lg) {
           continue;
         }
         const label = `${p.tool ?? "tool"}@${sid}:${String(mi)}`;
-        for (const cand of partCandidates(p)) {
+        const cands = partCandidates(p);
+        for (const cand of cands) {
           if (artifact.kind === "path" && cand.includes(artifact.text.trim())) {
             return `content-lineage evidence: the FULL text of ${artifact.source} appears verbatim in ${label} (convener-chain tool input, before the file's mtime) \u2014 the chain wrote these bytes elsewhere and moved them here; the chain cannot sit on both sides of this ballot`;
           }
-          for (const [wi, chunk] of lg.chunks.entries()) {
-            if (!lg.matched.has(wi) && cand.includes(chunk)) lg.matched.set(wi, label);
-          }
         }
+        creditWindows(lg, cands, label);
       }
     }
   }
@@ -32117,7 +32144,7 @@ async function assessIndependence(client, directory, convenerSessionID, artifact
       return { status: "NOT-INDEPENDENT", convenerChain: chain, evidence: hit };
     }
   }
-  if (lg !== null && lg.matched.size >= lg.need) {
+  if (lg !== null && lineageConvinced(lg)) {
     return { status: "NOT-INDEPENDENT", convenerChain: chain, evidence: lineageVerdict(lg, artifact) };
   }
   if (scanFailed.length > 0 || walkIncomplete) {
@@ -32134,7 +32161,9 @@ async function assessIndependence(client, directory, convenerSessionID, artifact
 }
 function lineageFaceNote(lg) {
   if (lg === null) return "";
-  const parts = [`${String(lg.matched.size)}/${String(lg.chunks.length)} lineage windows matched (need ${String(lg.need)})`];
+  const parts = [
+    `${String(lg.matched.size)}/${String(lg.unique)} distinct lineage windows matched (majority need ${String(lg.need)}, floor ${String(LINEAGE_FLOOR_MIN)}@${String(LINEAGE_FLOOR_RATIO * 100)}%)`
+  ];
   if (lg.copiedAfterMtime > 0) parts.push(`${String(lg.copiedAfterMtime)} part(s) excluded as post-mtime copies`);
   if (lg.timeless > 0) parts.push(`${String(lg.timeless)} part(s) lacked timestamps`);
   return `; content-lineage: ${parts.join(", ")}`;
@@ -32850,7 +32879,7 @@ function ballotTag(vote) {
 import { spawn } from "node:child_process";
 import { randomBytes as randomBytes2 } from "node:crypto";
 import { existsSync as existsSync2 } from "node:fs";
-import { mkdir as mkdir3, writeFile as writeFile4 } from "node:fs/promises";
+import { writeFile as writeFile4 } from "node:fs/promises";
 import { dirname as dirname3, join as join6 } from "node:path";
 import { fileURLToPath } from "node:url";
 var REVIEW_TOOL_NAME = "sibyl_review";
@@ -32859,12 +32888,16 @@ function nodeBinary() {
 }
 function cliCommand(thisUrl, node2) {
   const moduleDir = dirname3(fileURLToPath(thisUrl));
-  const repoRoot = dirname3(dirname3(moduleDir));
-  const distCli = join6(repoRoot, "dist", "cli.js");
-  if (existsSync2(distCli)) return { bin: node2, args: [distCli] };
-  const srcCli = join6(repoRoot, "src", "cli.ts");
-  const hooks = join6(repoRoot, "tools", "register-ts.mjs");
-  return { bin: node2, args: ["--import", hooks, srcCli] };
+  const roots = [dirname3(moduleDir), dirname3(dirname3(moduleDir))];
+  for (const root of roots) {
+    const distCli = join6(root, "dist", "cli.js");
+    if (existsSync2(distCli)) return { bin: node2, args: [distCli] };
+    const srcCli = join6(root, "src", "cli.ts");
+    const hooks = join6(root, "tools", "register-ts.mjs");
+    if (existsSync2(srcCli) && existsSync2(hooks)) return { bin: node2, args: ["--import", hooks, srcCli] };
+  }
+  const repoRoot = roots[1] ?? dirname3(dirname3(moduleDir));
+  return { bin: node2, args: ["--import", join6(repoRoot, "tools", "register-ts.mjs"), join6(repoRoot, "src", "cli.ts")] };
 }
 async function reviewExecute(deps, args, context) {
   try {
@@ -32873,7 +32906,7 @@ async function reviewExecute(deps, args, context) {
     const now = /* @__PURE__ */ new Date();
     const runId = `sibyl-${compactIso(now)}-${randomBytes2(2).toString("hex")}`;
     const runDir = join6(opts.lane.runRoot, `sibyl-run-${runId}`);
-    await mkdir3(runDir, { recursive: true });
+    await mkdirPrivate(runDir);
     const artifact = await readArtifact(args.target, context.directory);
     if (!artifact.ok) return `SIBYL review: ${artifact.error}`;
     let targetArg;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sibyl-system",
-  "version": "1.3.5",
+  "version": "1.4.0",
   "license": "MIT",
   "type": "module",
   "description": "Sibyl-System: democratic-centralism review chamber (one conclusion, one voice) + fail-closed council voting + dynamic swarm plugin for OpenCode",
@@ -35,7 +35,7 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@opencode-ai/plugin": "1.15.13",
+    "@opencode-ai/plugin": "1.19.4",
     "zod": "^4"
   },
   "devDependencies": {
@@ -45,5 +45,11 @@
   },
   "bin": {
     "sibyl-chamber": "./dist/cli.js"
+  },
+  "overrides": {
+    "toml": "5.0.1"
+  },
+  "engines": {
+    "node": ">=22"
   }
 }