@desplega.ai/agent-swarm 2.4.2 → 2.4.3

package/src/providers/codex-adapter.ts

@@ -37,7 +37,7 @@ import {
   clampContextPercent,
   computeContextUsedUnified,
 } from "../utils/context-window";
-import { isEnvFlagEnabled } from "../utils/env-flag";
+import { isEnvFlagEnabled, isSessionSummarySkipped } from "../utils/env-flag";
 import { SessionErrorTracker } from "../utils/error-tracker";
 import { summarizeSession as runSummarize } from "../utils/internal-ai";
 import { getMemoryRaterNames } from "../utils/memory-raters";
@@ -1739,8 +1739,8 @@ export class CodexSession implements ProviderSession {
     } finally {
       // Session-end summarization. Pure addition for codex — no behavior to
       // preserve. Wrapped in its own try/catch so summary failure must NOT
-      // block the existing log/AGENTS.md cleanup below. Gate `SKIP_SESSION_SUMMARY=1`
-      // matches the parity convention used by the claude Stop hook + pi/opencode.
+      // block the existing log/AGENTS.md cleanup below. `SKIP_SESSION_SUMMARY` is
+      // read with `isSessionSummarySkipped`, the same as the claude Stop hook + pi/opencode.
       //
       // Skip the summary entirely when the session was aborted. The transcript
       // is incomplete, the LLM call would retry 3× through openrouter and
@@ -1751,7 +1751,7 @@ export class CodexSession implements ProviderSession {
         this.aborted ||
         this.abortController?.signal.aborted === true ||
         this.pendingResult?.exitCode === 130;
-      if (process.env.SKIP_SESSION_SUMMARY !== "1" && !sessionWasAborted) {
+      if (!isSessionSummarySkipped() && !sessionWasAborted) {
         try {
           await this.summarizeAtEnd();
         } catch (err) {

package/src/providers/opencode-adapter.ts

@@ -31,7 +31,7 @@ import {
   splitCredentialPool,
   validateOpencodeCredentials,
 } from "../utils/credentials";
-import { isEnvFlagEnabled } from "../utils/env-flag";
+import { isEnvFlagEnabled, isSessionSummarySkipped } from "../utils/env-flag";
 import { fetchInstalledMcpServers } from "../utils/mcp-server-fetcher";
 import { swarmRuntimeInstanceId } from "../utils/multi-runtime";
 import {
@@ -797,7 +797,7 @@ export class OpencodeSession implements ProviderSession {
   /** Identity sync, session summary, and session close (Stop-hook parity). */
   private async runSessionEnd(signal: AbortSignal): Promise<void> {
     await sessionHooks.syncIdentity(this.swarm, "session_sync", signal);
-    if (process.env.SKIP_SESSION_SUMMARY) {
+    if (isSessionSummarySkipped()) {
       console.debug("session_summary skipped (opencode): SKIP_SESSION_SUMMARY is set");
     } else {
       const transcript = this.transcript.join("\n").slice(-TRANSCRIPT_TAIL_CHARS);

package/src/providers/pi-mono-extension.ts

@@ -10,6 +10,7 @@ import type { ExtensionFactory, McpServerConfig } from "@earendil-works/pi-codin
 import { buildRatingsFromLlm, fetchRetrievalsForTask, postRatings } from "../be/memory/raters/llm";
 import { checkToolLoop, clearToolHistory } from "../hooks/tool-loop-detection";
 import { renderGoalReminder } from "../prompts/goal-reminder";
+import { isSessionSummarySkipped } from "../utils/env-flag";
 import { summarizeSession as runSummarize } from "../utils/internal-ai";
 import { getMemoryRaterNames } from "../utils/memory-raters";
 import { getOpenRouterAttributionHeaders } from "../utils/openrouter-base-url";
@@ -743,7 +744,7 @@ export function createSwarmHooksExtension(config: SwarmHooksConfig): ExtensionFa
 
       // Session summarization — get session file from context's session manager
       const sessionFile = ctx.sessionManager.getSessionFile?.();
-      if (!process.env.SKIP_SESSION_SUMMARY) {
+      if (!isSessionSummarySkipped()) {
         await summarizeSessionForPi(config, sessionFile);
       } else {
         console.debug("session_summary skipped (pi): SKIP_SESSION_SUMMARY is set");

package/src/tests/claude-stop-hook.test.ts

@@ -371,6 +371,53 @@ describe("runStopHookSessionSummary", () => {
     expect(consoleErrors.length).toBe(0);
   });
 
+  test.each(["true", "TRUE"])("SKIP_SESSION_SUMMARY=%s → no runSummarize call", async (value) => {
+    const transcriptPath = await writeTempTranscript(longTranscript());
+
+    let runSummarizeCalled = false;
+    const deps: RunStopHookSessionSummaryDeps = {
+      runSummarize: async () => {
+        runSummarizeCalled = true;
+        throw new Error("should not be called");
+      },
+    };
+
+    await runStopHookSessionSummary(
+      {
+        agentId: "agent-claude-1",
+        transcriptPath,
+        env: makeEnv({ SKIP_SESSION_SUMMARY: value }),
+      },
+      deps,
+    );
+
+    expect(runSummarizeCalled).toBe(false);
+    expect(fetchCalls.length).toBe(0);
+  });
+
+  test.each(["0", "false"])("SKIP_SESSION_SUMMARY=%s → summary still runs", async (value) => {
+    const transcriptPath = await writeTempTranscript(longTranscript());
+
+    let runSummarizeCalled = false;
+    const deps: RunStopHookSessionSummaryDeps = {
+      runSummarize: async () => {
+        runSummarizeCalled = true;
+        return null;
+      },
+    };
+
+    await runStopHookSessionSummary(
+      {
+        agentId: "agent-claude-1",
+        transcriptPath,
+        env: makeEnv({ SKIP_SESSION_SUMMARY: value }),
+      },
+      deps,
+    );
+
+    expect(runSummarizeCalled).toBe(true);
+  });
+
   test("short transcript (≤100 chars) → no runSummarize call, no POST", async () => {
     const transcriptPath = await writeTempTranscript("tiny");
 

package/src/tests/codex-adapter.test.ts

@@ -2294,6 +2294,48 @@ describe("CodexSession session-end summarization", () => {
     expect(indexCalls.length).toBe(0);
   });
 
+  test.each(["true", "TRUE"])("SKIP_SESSION_SUMMARY=%s → no runSummarize call", async (value) => {
+    process.env.SKIP_SESSION_SUMMARY = value;
+    const events = buildSummaryEvents();
+
+    let runSummarizeCalls = 0;
+    const deps: SummarizeSessionForCodexDeps = {
+      runSummarize: async () => {
+        runSummarizeCalls += 1;
+        return null;
+      },
+    };
+
+    const config = testConfig({
+      logFile: join(tmpLogDir, `skip-${value}.log`),
+      cwd: "",
+    });
+    await runSessionWithFakeThreadAndDeps(events, config, deps);
+
+    expect(runSummarizeCalls).toBe(0);
+  });
+
+  test.each(["0", "false"])("SKIP_SESSION_SUMMARY=%s → summary still runs", async (value) => {
+    process.env.SKIP_SESSION_SUMMARY = value;
+    const events = buildSummaryEvents();
+
+    let runSummarizeCalls = 0;
+    const deps: SummarizeSessionForCodexDeps = {
+      runSummarize: async () => {
+        runSummarizeCalls += 1;
+        return null;
+      },
+    };
+
+    const config = testConfig({
+      logFile: join(tmpLogDir, `no-skip-${value}.log`),
+      cwd: "",
+    });
+    await runSessionWithFakeThreadAndDeps(events, config, deps);
+
+    expect(runSummarizeCalls).toBe(1);
+  });
+
   test("missing taskId → no runSummarize call, no POST", async () => {
     const events = buildSummaryEvents();
 

package/src/tests/env-flag.test.ts

@@ -1,6 +1,6 @@
 import { describe, expect, test } from "bun:test";
 import { validateConfigValue } from "../be/swarm-config-guard";
-import { isEnvFlagEnabled, parseEnvFlag } from "../utils/env-flag";
+import { isEnvFlagEnabled, isSessionSummarySkipped, parseEnvFlag } from "../utils/env-flag";
 
 describe("parseEnvFlag", () => {
   test("accepts both truthy serializations", () => {
@@ -199,3 +199,17 @@ describe("swarm-config-guard: Configuration-page value validation", () => {
     expect(validateConfigValue("SOME_RANDOM_KEY", "whatever")).toBeNull();
   });
 });
+
+describe("isSessionSummarySkipped", () => {
+  test.each(["1", "true", "TRUE", " True "])("SKIP_SESSION_SUMMARY=%p skips", (value) => {
+    expect(isSessionSummarySkipped({ SKIP_SESSION_SUMMARY: value })).toBe(true);
+  });
+
+  test.each(["0", "false", "FALSE", ""])("SKIP_SESSION_SUMMARY=%p keeps the summary", (value) => {
+    expect(isSessionSummarySkipped({ SKIP_SESSION_SUMMARY: value })).toBe(false);
+  });
+
+  test("unset keeps the summary", () => {
+    expect(isSessionSummarySkipped({})).toBe(false);
+  });
+});

package/src/tests/github-handlers-cancel-config.test.ts

@@ -6,8 +6,8 @@
  *   github.cancelOnUnassign              — PR unassigned + issue unassigned
  *   github.cancelOnReviewRequestRemoved  — PR review_request_removed
  *
- * Absent / any value ≠ "false" → cancel (current behavior, default).
- * Value "false" → leave task untouched, return { created: false }.
+ * Absent / empty / unrecognized values → cancel (default).
+ * Values "false" / "0" (case-insensitive, trimmed) → leave task untouched.
  */
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:test";
 import { unlink } from "node:fs/promises";
@@ -122,8 +122,15 @@ describe("PR unassigned — github.cancelOnUnassign", () => {
     expect(await getTaskStatus(taskId)).toBe("failed");
   });
 
-  test("config = 'false': unassign leaves task untouched", async () => {
-    await setConfigFlag("github.cancelOnUnassign", "false");
+  test.each([
+    "false",
+    "FALSE",
+    "False",
+    "0",
+    " false ",
+    " 0 ",
+  ])("config = %j: unassign leaves task untouched", async (value) => {
+    await setConfigFlag("github.cancelOnUnassign", value);
     const taskId = await seedTask(BASE_PR.number, "pr");
     expect(await getTaskStatus(taskId)).toBe("pending");
 
@@ -162,8 +169,15 @@ describe("issue unassigned — github.cancelOnUnassign", () => {
     expect(await getTaskStatus(taskId)).toBe("failed");
   });
 
-  test("config = 'false': unassign leaves task untouched", async () => {
-    await setConfigFlag("github.cancelOnUnassign", "false");
+  test.each([
+    "false",
+    "FALSE",
+    "False",
+    "0",
+    " false ",
+    " 0 ",
+  ])("config = %j: unassign leaves task untouched", async (value) => {
+    await setConfigFlag("github.cancelOnUnassign", value);
     const taskId = await seedTask(BASE_ISSUE.number, "issue");
     expect(await getTaskStatus(taskId)).toBe("pending");
 
@@ -201,8 +215,15 @@ describe("PR review_request_removed — github.cancelOnReviewRequestRemoved", ()
     expect(await getTaskStatus(taskId)).toBe("failed");
   });
 
-  test("config = 'false': review removal leaves task untouched", async () => {
-    await setConfigFlag("github.cancelOnReviewRequestRemoved", "false");
+  test.each([
+    "false",
+    "FALSE",
+    "False",
+    "0",
+    " false ",
+    " 0 ",
+  ])("config = %j: review removal leaves task untouched", async (value) => {
+    await setConfigFlag("github.cancelOnReviewRequestRemoved", value);
     const taskId = await seedTask(BASE_PR.number, "pr");
     expect(await getTaskStatus(taskId)).toBe("pending");
 

package/src/tests/github-handlers-inline-comments.test.ts

@@ -573,9 +573,16 @@ describe("no-op approved reviews", () => {
     }
   });
 
-  test("GITHUB_SKIP_NOOP_APPROVALS=false: empty-body approval still creates a task", async () => {
+  test.each([
+    "false",
+    "FALSE",
+    "False",
+    "0",
+    " false ",
+    " 0 ",
+  ])("GITHUB_SKIP_NOOP_APPROVALS=%j: empty-body approval still creates a task", async (value) => {
     const previous = process.env.GITHUB_SKIP_NOOP_APPROVALS;
-    process.env.GITHUB_SKIP_NOOP_APPROVALS = "false";
+    process.env.GITHUB_SKIP_NOOP_APPROVALS = value;
     const fetchSpy = mockFetchForApproval({ reviews: [APPROVED_BY_REVIEWER] });
 
     try {

package/src/tests/script-connections.test.ts

@@ -634,6 +634,8 @@ describe("script connections", () => {
       markMigrationApplied(database, "220_model_profiles.sql");
       // 227 alters inbox_item_state, which this migration-112-only fixture does not create.
       markMigrationApplied(database, "227_inbox_item_state_last_read_at.sql");
+      // 231 indexes agent_tasks columns that this fixture's id-only agent_tasks lacks.
+      markMigrationApplied(database, "231_slack_tasks_last_updated_index.sql");
 
       const id = crypto.randomUUID();
       const now = new Date().toISOString();

package/src/tests/skill-script-refs.test.ts

@@ -0,0 +1,63 @@
+import { describe, expect, test } from "bun:test";
+import { join, relative } from "node:path";
+import { SEED_SCRIPTS } from "../be/seed-scripts";
+
+// A shipped skill that tells agents to `script-run` a named script must name a
+// script this repo ships in SEED_SCRIPTS. Otherwise the skill works only on a
+// swarm that happens to hold that script in its catalog, and every other
+// deployment hits "Script not found" at that step.
+
+const REPO_ROOT = join(import.meta.dir, "../..");
+// Seeded skills, baked plugin commands/agents/skills, and public operator skills.
+const SKILL_DIRS = ["templates/skills", "plugin", "skills"].map((d) => join(REPO_ROOT, d));
+
+// `script-run name="x"` and the prose forms "`script-run` with name `x`" / "`script-run` on `x`".
+const REF_PATTERNS = [
+  /script-run\s+name=["']([a-z0-9][a-z0-9-]*)["']/g,
+  /`script-run`\s+(?:with\s+name|on)\s+`([a-z0-9][a-z0-9-]*)`/g,
+];
+
+function findScriptRefs(text: string): string[] {
+  const names = new Set<string>();
+  for (const re of REF_PATTERNS) {
+    for (const m of text.matchAll(re)) if (m[1]) names.add(m[1]);
+  }
+  return [...names];
+}
+
+async function collectRefs(): Promise<{ file: string; name: string }[]> {
+  const refs: { file: string; name: string }[] = [];
+  for (const dir of SKILL_DIRS) {
+    for await (const path of new Bun.Glob("**/*.md").scan({ cwd: dir, absolute: true })) {
+      const text = await Bun.file(path).text();
+      for (const name of findScriptRefs(text)) refs.push({ file: relative(REPO_ROOT, path), name });
+    }
+  }
+  return refs;
+}
+
+describe("shipped skills only script-run scripts the repo ships", () => {
+  test("the reference scanner matches each call form and ignores prose", () => {
+    expect(
+      findScriptRefs(
+        [
+          'Run `script-run name="internal-only-gate" scope="global" args=<draft>`.',
+          "Run `script-run` with name `boot-triage`.",
+          "Preview with `script-run` on `heartbeat-jev-gate`.",
+          "Seed scripts (`script-run` with `name` and `args`):",
+          "Inline `script-run` for a one-off.",
+        ].join("\n"),
+      ).sort(),
+    ).toEqual(["boot-triage", "heartbeat-jev-gate", "internal-only-gate"]);
+  });
+
+  test("every script-run name in a shipped skill is in SEED_SCRIPTS", async () => {
+    const refs = await collectRefs();
+    // Positive control: the scan must see heartbeat-runbook's boot-triage reference, or it is blind.
+    expect(refs.some((r) => r.name === "boot-triage")).toBe(true);
+
+    const shipped = new Set(SEED_SCRIPTS.map((s) => s.name));
+    const missing = refs.filter((r) => !shipped.has(r.name)).map((r) => `${r.file}: ${r.name}`);
+    expect(missing).toEqual([]);
+  });
+});

package/src/tests/slack-render-v2-query-plans.test.ts

@@ -0,0 +1,147 @@
+import { afterEach, beforeEach, describe, expect, spyOn, test } from "bun:test";
+import {
+  closeDb,
+  createAgent,
+  createTaskExtended,
+  getDb,
+  getDbClient,
+  getResolvableDeferralOutcomes,
+  initDb,
+  recordSlackMessage,
+} from "../be/db";
+import { getSlackTasksMissingTree } from "../be/db/tasks/read";
+import { completeTask, startTask } from "../be/db/tasks/write";
+
+// Both queries run on every Slack watcher tick. The DB has no sqlite_stat1, so
+// the planner works from heuristics; these pin the plans that keep each tick
+// proportional to Slack rows instead of every task.
+
+async function capturedSql(run: () => Promise<unknown>): Promise<string> {
+  const client = getDbClient();
+  const seen: string[] = [];
+  const original = client.query.bind(client);
+  const spy = spyOn(client, "query").mockImplementation(((sql: string, params?: unknown[]) => {
+    seen.push(sql);
+    return original(sql, params);
+  }) as typeof client.query);
+  try {
+    await run();
+  } finally {
+    spy.mockRestore();
+  }
+  expect(seen).toHaveLength(1);
+  return seen[0]!;
+}
+
+function plan(sql: string, params: unknown[] = []): string {
+  return getDb()
+    .query<{ detail: string }, any[]>(`EXPLAIN QUERY PLAN ${sql}`)
+    .all(...params)
+    .map((row) => row.detail)
+    .join("\n");
+}
+
+async function deferredAsk(label: string, leadId: string) {
+  const ask = await createTaskExtended(`ask ${label}`, {
+    agentId: leadId,
+    source: "slack",
+    slackChannelId: `C_${label}`,
+    slackThreadTs: `${label}.0`,
+  });
+  await startTask(ask.id);
+  await completeTask(ask.id, "Checking back later", {
+    addTags: ["deferred"],
+    deferredAt: new Date().toISOString(),
+  });
+  const card = await recordSlackMessage({
+    contextKey: `slack:C_${label}:${label}.0`,
+    channelId: `C_${label}`,
+    threadTs: `${label}.0`,
+    ts: `${label}.1`,
+    kind: "outcome",
+    taskId: ask.id,
+    finalized: true,
+  });
+  return { ask, card };
+}
+
+async function wake(parentTaskId: string, leadId: string, opts: { deferAgain?: boolean } = {}) {
+  await Bun.sleep(2);
+  const task = await createTaskExtended("wake", {
+    agentId: leadId,
+    parentTaskId,
+    taskType: "deferred",
+  });
+  await startTask(task.id);
+  await completeTask(
+    task.id,
+    "done",
+    opts.deferAgain ? { deferredAt: new Date().toISOString() } : {},
+  );
+  return task;
+}
+
+describe("slack render-v2 watcher queries", () => {
+  beforeEach(() => {
+    initDb(":memory:");
+    getDb().run(
+      "INSERT OR IGNORE INTO slack_render_v2_state (id, activated_at) VALUES (1, '2000-01-01T00:00:00.000Z')",
+    );
+  });
+
+  afterEach(() => {
+    closeDb();
+  });
+
+  test("deferral resolution drives from the chain, not from every task", async () => {
+    const sql = await capturedSql(() => getResolvableDeferralOutcomes());
+    const detail = plan(sql, [50]);
+    expect(detail).toContain(
+      "SEARCH wake USING INDEX idx_agent_tasks_parentTaskId (parentTaskId=?)",
+    );
+    expect(detail).not.toContain("idx_agent_tasks_taskType");
+    expect(detail).not.toContain("idx_agent_tasks_status_last_updated");
+  });
+
+  test("missing-tree scan reads only Slack tasks", async () => {
+    const sql = await capturedSql(() => getSlackTasksMissingTree());
+    const detail = plan(sql);
+    expect(detail).toContain("SCAN task USING INDEX idx_agent_tasks_slack_last_updated");
+    expect(detail).not.toContain("idx_agent_tasks_last_updated");
+  });
+
+  test("deferral resolution returns the latest terminal wake of each open chain", async () => {
+    const lead = await createAgent({ name: "Plan Lead", isLead: true, status: "idle" });
+
+    const single = await deferredAsk("SINGLE", lead.id);
+    const singleWake = await wake(single.ask.id, lead.id);
+
+    const chained = await deferredAsk("CHAIN", lead.id);
+    const firstWake = await wake(chained.ask.id, lead.id, { deferAgain: true });
+    const lastWake = await wake(firstWake.id, lead.id);
+
+    const pending = await deferredAsk("PENDING", lead.id);
+    const running = await createTaskExtended("still running", {
+      agentId: lead.id,
+      parentTaskId: pending.ask.id,
+      taskType: "deferred",
+    });
+    await startTask(running.id);
+
+    const plainChild = await deferredAsk("PLAIN", lead.id);
+    const notDeferred = await createTaskExtended("ordinary child", {
+      agentId: lead.id,
+      parentTaskId: plainChild.ask.id,
+    });
+    await startTask(notDeferred.id);
+    await completeTask(notDeferred.id, "done");
+
+    const rows = await getResolvableDeferralOutcomes();
+    expect(rows.map((row) => [row.card.id, row.deferredTaskId, row.wakeTaskId]).sort()).toEqual(
+      [
+        [single.card.id, single.ask.id, singleWake.id],
+        [chained.card.id, chained.ask.id, lastWake.id],
+      ].sort(),
+    );
+  });
+});

package/src/utils/env-flag.ts

@@ -53,3 +53,12 @@ export function isEnvFlagEnabled(
 ): boolean {
   return parseEnvFlag(env[key], defaultValue);
 }
+
+/**
+ * Whether the session-end summary is turned off via `SKIP_SESSION_SUMMARY`.
+ * Every harness (claude Stop hook, pi, opencode, codex) gates on this, so
+ * `1`/`true` skip and unset/empty/`0`/`false` keep the summary everywhere.
+ */
+export function isSessionSummarySkipped(env: NodeJS.ProcessEnv = process.env): boolean {
+  return isEnvFlagEnabled("SKIP_SESSION_SUMMARY", false, env);
+}

package/templates/skills/apps/SKILL.md

@@ -790,6 +790,7 @@ The tool returns `{ appId, url: "/apps/<id>" }`. Open that URL to verify the liv
 - Logged-in browser: a fresh dashboard has no connection and redirects to /setup. Seed the localStorage key `agent-swarm-connections` with `{connections:[{id,name,apiUrl,apiKey}],activeId}`. Build the value from an env var and pipe it to `agent-browser eval --stdin`, so the key never reaches a command line. Reload, then pick a user in the "Who are you?" dialog.
 - Apps scroll inside an inner canvas, so a full-page screenshot captures only the viewport. Scroll the canvas or raise the viewport height. For mobile, set a 375px-wide viewport before the screenshot.
 - App definitions: `GET /api/apps` and `GET /api/apps/<id>` with the API key as Bearer.
+- Follow-up edit to a live app: list in the brief the control numbers the edit must not move, and assert them from the backing script before publishing. Take a signed-in screenshot of each changed selector at 1440px wide, save the shots to agent-fs, critique, and repeat at least 3 times. If the backing script caches results, bump its version or force a fresh run so the shots show new data.
 
 
 ### Rows from agents and scripts

package/templates/skills/apps/content.md

@@ -785,6 +785,7 @@ The tool returns `{ appId, url: "/apps/<id>" }`. Open that URL to verify the liv
 - Logged-in browser: a fresh dashboard has no connection and redirects to /setup. Seed the localStorage key `agent-swarm-connections` with `{connections:[{id,name,apiUrl,apiKey}],activeId}`. Build the value from an env var and pipe it to `agent-browser eval --stdin`, so the key never reaches a command line. Reload, then pick a user in the "Who are you?" dialog.
 - Apps scroll inside an inner canvas, so a full-page screenshot captures only the viewport. Scroll the canvas or raise the viewport height. For mobile, set a 375px-wide viewport before the screenshot.
 - App definitions: `GET /api/apps` and `GET /api/apps/<id>` with the API key as Bearer.
+- Follow-up edit to a live app: list in the brief the control numbers the edit must not move, and assert them from the backing script before publishing. Take a signed-in screenshot of each changed selector at 1440px wide, save the shots to agent-fs, critique, and repeat at least 3 times. If the backing script caches results, bump its version or force a fresh run so the shots show new data.
 
 
 ### Rows from agents and scripts

package/templates/skills/code-quality/content.md

@@ -82,27 +82,22 @@ The review body is the verdict line: at most about 60 tokens. Each inline commen
 - Swarm PR, nit fixed: ``**Approve** at `3d4f34a` · 0 blocking · set `Risk: high` (billing) in the body``
 - Re-review: ``**Approve** at `661327f` · B1 fixed · N1 won't fix (author)``, new findings inline.
 
-Never on GitHub: test counts, CI lists (unless a red check changes the verdict), what you read, how the code works, or why GitHub refused a formal verdict. Those go to your task output and the ledger.
+Never on GitHub: test counts, CI lists (unless a red check changes the verdict), what you read, how the code works, or why GitHub refused a formal verdict. Those go to your task output.
 
-### Post through the gate
+### Post the review
 
-Nothing reaches GitHub without passing `review-post-gate`.
-
-1. Draft the review as JSON: `{ pr: "<owner>/<repo>#<n>", head, swarmAuthored, risk, round, priorFindings: [{ id, state, text }], findings: [{ id?, tag, path?, line?, text, fix? }], body? }`. Write `fix` so it reads as done in the verdict line, for example "set `Risk: high` (billing) in the body". When you ran `code-reviewing`, its Standards/Spec report stays in your task output; only its findings go into the draft.
-2. Run `script-run name="review-post-gate" scope="global" args=<draft>`. It checks token limits, the nit cap, tallies and CI lists, turns swarm-PR nits into `fixes`, and asks Jev to keep, drop or relabel each finding against the live `rules.md`. Every decision is logged with its reason. With `jev: "unavailable"` the deterministic result still stands.
-3. Apply every entry in `fixes`, then post exactly `postable`, never your draft:
+1. Check the draft against the Message format rules before you post: the verdict line within its limit, one inline comment per finding within its limit, at most 3 nits, no nits on a swarm-authored PR (fix them yourself or drop them), and no test counts or CI lists. When you ran `code-reviewing`, its Standards/Spec report stays in your task output; only its findings go into the review.
+2. Post the verdict line and every inline comment as one review:
 
    ```bash
-   jq -n --argjson p "$POSTABLE" --arg sha "$HEAD" \
-     '{commit_id: $sha, event: $p.event, body: $p.body, comments: [$p.comments[] | {path, line, side: "RIGHT", body}]}' \
+   jq -n --arg sha "$HEAD" --arg event "$EVENT" --arg body "$VERDICT" --argjson comments "$COMMENTS" \
+     '{commit_id: $sha, event: $event, body: $body, comments: [$comments[] | {path, line, side: "RIGHT", body}]}' \
      | gh api repos/<owner>/<repo>/pulls/<n>/reviews --input -
    ```
 
-   On a PR the reviewing account authored, the gate returns `event: "COMMENT"`, because GitHub refuses APPROVE and REQUEST_CHANGES there. Post it as is.
-4. Record the evidence (tests run, controls, "checked, fine" notes, the gate's `logKey`) in your task output and with `script-run name="pr-review-ledger-write" scope="global"` (`action: "round"`). Never on the PR. If the ledger write fails, keep the exact payload and the error in your task output, report it to the lead once, and finish the review. Read the PR's existing ledger rounds before any retry so a round is never written twice.
-5. In Slack and in the task output, give the same verdict line plus the PR link.
-
-If the gate cannot run, post nothing to GitHub. Keep the draft in your task output and report the gate failure (the error and the time) to the lead.
+   `EVENT` is `APPROVE` or `REQUEST_CHANGES`. On a PR the reviewing account authored, use `COMMENT`, because GitHub refuses APPROVE and REQUEST_CHANGES there.
+3. Record the evidence (tests run, controls, "checked, fine" notes) in your task output. Never on the PR.
+4. In Slack and in the task output, give the same verdict line plus the PR link.
 
 ### Capture pushback as a rule
 

package/dist/handlers-dkcarkd0.js

@@ -1,39 +0,0 @@
-import {
-  isUserAllowed2,
-  registerMessageHandler2
-} from "./cli-10hhg0km.js";
-import"./cli-0qvtffe9.js";
-import"./cli-bcj753sq.js";
-import"./cli-5rk36sjf.js";
-import"./cli-smvcw9z5.js";
-import"./cli-sv5gb0yb.js";
-import"./cli-qz93y3x5.js";
-import"./cli-3h26v7yj.js";
-import"./cli-7a91w22y.js";
-import"./cli-saw9a6f6.js";
-import"./cli-h38rjv87.js";
-import"./cli-3ggwdtb0.js";
-import"./cli-s6vr7r2d.js";
-import"./cli-faypxz7q.js";
-import"./cli-h93c9vb3.js";
-import"./cli-qje9k2nh.js";
-import"./cli-y2x52gs2.js";
-import"./cli-02qm7src.js";
-import"./cli-8nyhf7za.js";
-import"./cli-ejs3m1sx.js";
-import"./cli-efaqv1c7.js";
-import"./cli-13p25grh.js";
-import"./cli-0adyhvq2.js";
-import"./cli-nn47d7e8.js";
-import"./cli-pkht5hap.js";
-import"./cli-n85dqg6d.js";
-import"./cli-nmqdc2t3.js";
-import"./cli-445c1vp7.js";
-import"./cli-kvzgak7c.js";
-import"./cli-7awf1fp8.js";
-import"./cli-d3qqdy4c.js";
-import"./cli-wt645v7q.js";
-export {
-  isUserAllowed2 as isUserAllowed,
-  registerMessageHandler2 as registerMessageHandler
-};

package/dist/index-5jecgp3n.js

@@ -1,41 +0,0 @@
-import"./cli-ns59dc6r.js";
-import {
-  startHeartbeat2,
-  stopHeartbeat2
-} from "./cli-hyfw2j1e.js";
-import"./cli-8zwe9mpk.js";
-import"./cli-hqhzg1qq.js";
-import"./cli-5rk36sjf.js";
-import"./cli-smvcw9z5.js";
-import"./cli-sv5gb0yb.js";
-import"./cli-qz93y3x5.js";
-import"./cli-3h26v7yj.js";
-import"./cli-7a91w22y.js";
-import"./cli-saw9a6f6.js";
-import"./cli-h38rjv87.js";
-import"./cli-3ggwdtb0.js";
-import"./cli-s6vr7r2d.js";
-import"./cli-faypxz7q.js";
-import"./cli-h93c9vb3.js";
-import"./cli-qje9k2nh.js";
-import"./cli-y2x52gs2.js";
-import"./cli-02qm7src.js";
-import"./cli-8nyhf7za.js";
-import"./cli-ejs3m1sx.js";
-import"./cli-efaqv1c7.js";
-import"./cli-13p25grh.js";
-import"./cli-0adyhvq2.js";
-import"./cli-nn47d7e8.js";
-import"./cli-pkht5hap.js";
-import"./cli-n85dqg6d.js";
-import"./cli-nmqdc2t3.js";
-import"./cli-445c1vp7.js";
-import"./cli-kvzgak7c.js";
-import"./cli-b2mz5mjc.js";
-import"./cli-7awf1fp8.js";
-import"./cli-d3qqdy4c.js";
-import"./cli-wt645v7q.js";
-export {
-  startHeartbeat2 as startHeartbeat,
-  stopHeartbeat2 as stopHeartbeat
-};