opencode-swarm 6.22.3 → 6.22.4

package/dist/index.js

@@ -47321,406 +47321,32 @@ function maskToolOutput(msg, _threshold) {
 }
 // src/hooks/delegation-gate.ts
 init_schema();
-function extractTaskLine(text) {
-  const match = text.match(/TASK:\s*(.+?)(?:\n|$)/i);
-  return match ? match[1].trim() : null;
-}
-function createDelegationGateHook(config3) {
-  const enabled = config3.hooks?.delegation_gate !== false;
-  const delegationMaxChars = config3.hooks?.delegation_max_chars ?? 4000;
-  if (!enabled) {
-    return {
-      messagesTransform: async (_input, _output) => {},
-      toolAfter: async () => {}
-    };
-  }
-  const toolAfter = async (input, _output) => {
-    if (!input.sessionID)
-      return;
-    const session = swarmState.agentSessions.get(input.sessionID);
-    if (!session)
-      return;
-    const normalized = input.tool.replace(/^[^:]+[:.]/, "");
-    if (normalized === "Task" || normalized === "task") {
-      const delegationChain = swarmState.delegationChains.get(input.sessionID);
-      if (delegationChain && delegationChain.length > 0) {
-        let lastCoderIndex = -1;
-        for (let i2 = delegationChain.length - 1;i2 >= 0; i2--) {
-          const target = stripKnownSwarmPrefix(delegationChain[i2].to);
-          if (target.includes("coder")) {
-            lastCoderIndex = i2;
-            break;
-          }
-        }
-        if (lastCoderIndex === -1)
-          return;
-        const afterCoder = delegationChain.slice(lastCoderIndex);
-        let hasReviewer = false;
-        let hasTestEngineer = false;
-        for (const delegation of afterCoder) {
-          const target = stripKnownSwarmPrefix(delegation.to);
-          if (target === "reviewer")
-            hasReviewer = true;
-          if (target === "test_engineer")
-            hasTestEngineer = true;
-        }
-        if (hasReviewer && hasTestEngineer) {
-          session.qaSkipCount = 0;
-          session.qaSkipTaskIds = [];
-        }
-        if (hasReviewer && session.taskWorkflowStates) {
-          for (const [taskId, state] of session.taskWorkflowStates) {
-            if (state === "coder_delegated" || state === "pre_check_passed") {
-              try {
-                advanceTaskState(session, taskId, "reviewer_run");
-              } catch {}
-            }
-          }
-        }
-        if (hasReviewer && hasTestEngineer && session.taskWorkflowStates) {
-          for (const [taskId, state] of session.taskWorkflowStates) {
-            if (state === "reviewer_run") {
-              try {
-                advanceTaskState(session, taskId, "tests_run");
-              } catch {}
-            }
-          }
-        }
-      }
-    }
-  };
-  return {
-    messagesTransform: async (_input, output) => {
-      const messages = output.messages;
-      if (!messages || messages.length === 0)
-        return;
-      let lastUserMessageIndex = -1;
-      for (let i2 = messages.length - 1;i2 >= 0; i2--) {
-        if (messages[i2]?.info?.role === "user") {
-          lastUserMessageIndex = i2;
-          break;
-        }
-      }
-      if (lastUserMessageIndex === -1)
-        return;
-      const lastUserMessage = messages[lastUserMessageIndex];
-      if (!lastUserMessage?.parts)
-        return;
-      const agent = lastUserMessage.info?.agent;
-      const strippedAgent = agent ? stripKnownSwarmPrefix(agent) : undefined;
-      if (strippedAgent && strippedAgent !== "architect")
-        return;
-      const textPartIndex = lastUserMessage.parts.findIndex((p) => p?.type === "text" && p.text !== undefined);
-      if (textPartIndex === -1)
-        return;
-      const textPart = lastUserMessage.parts[textPartIndex];
-      const text = textPart.text ?? "";
-      const taskDisclosureSessionID = lastUserMessage.info?.sessionID;
-      if (taskDisclosureSessionID) {
-        const taskSession = ensureAgentSession(taskDisclosureSessionID);
-        const currentTaskIdForWindow = taskSession.currentTaskId;
-        if (currentTaskIdForWindow) {
-          const taskLineRegex = /^[ \t]*-[ \t]*(?:\[[ x]\][ \t]+)?(\d+\.\d+(?:\.\d+)*)[:. ].*/gm;
-          const taskLines = [];
-          taskLineRegex.lastIndex = 0;
-          let regexMatch = taskLineRegex.exec(text);
-          while (regexMatch !== null) {
-            taskLines.push({
-              line: regexMatch[0],
-              taskId: regexMatch[1],
-              index: regexMatch.index
-            });
-            regexMatch = taskLineRegex.exec(text);
-          }
-          if (taskLines.length > 5) {
-            const currentIdx = taskLines.findIndex((t) => t.taskId === currentTaskIdForWindow);
-            const windowStart = Math.max(0, currentIdx - 2);
-            const windowEnd = Math.min(taskLines.length - 1, currentIdx + 3);
-            const visibleTasks = taskLines.slice(windowStart, windowEnd + 1);
-            const hiddenBefore = windowStart;
-            const hiddenAfter = taskLines.length - 1 - windowEnd;
-            const totalTasks = taskLines.length;
-            const visibleCount = visibleTasks.length;
-            const firstTaskIndex = taskLines[0].index;
-            const lastTask = taskLines[taskLines.length - 1];
-            const lastTaskEnd = lastTask.index + lastTask.line.length;
-            const before = text.slice(0, firstTaskIndex);
-            const after = text.slice(lastTaskEnd);
-            const visibleLines = visibleTasks.map((t) => t.line).join(`
-`);
-            const trimComment = `[Task window: showing ${visibleCount} of ${totalTasks} tasks]`;
-            const trimmedMiddle = (hiddenBefore > 0 ? `[...${hiddenBefore} tasks hidden...]
-` : "") + visibleLines + (hiddenAfter > 0 ? `
-[...${hiddenAfter} tasks hidden...]` : "");
-            textPart.text = `${before}${trimmedMiddle}
-${trimComment}${after}`;
-          }
-        }
-      }
-      const sessionID = lastUserMessage.info?.sessionID;
-      const taskIdMatch = text.match(/TASK:\s*(.+?)(?:\n|$)/i);
-      const currentTaskId = taskIdMatch ? taskIdMatch[1].trim() : null;
-      const coderDelegationPattern = /(?:^|\n)\s*(?:\w+_)?coder\s*\n\s*TASK:/i;
-      const isCoderDelegation = coderDelegationPattern.test(text);
-      const priorCoderTaskId = sessionID ? ensureAgentSession(sessionID).lastCoderDelegationTaskId ?? null : null;
-      if (sessionID && isCoderDelegation && currentTaskId) {
-        const session = ensureAgentSession(sessionID);
-        session.lastCoderDelegationTaskId = currentTaskId;
-        const fileDirPattern = /^FILE:\s*(.+)$/gm;
-        const declaredFiles = [];
-        for (const match of text.matchAll(fileDirPattern)) {
-          const filePath = match[1].trim();
-          if (filePath.length > 0 && !declaredFiles.includes(filePath)) {
-            declaredFiles.push(filePath);
-          }
-        }
-        session.declaredCoderScope = declaredFiles.length > 0 ? declaredFiles : null;
-        try {
-          advanceTaskState(session, currentTaskId, "coder_delegated");
-        } catch (err2) {
-          console.warn(`[delegation-gate] state machine warn: ${err2 instanceof Error ? err2.message : String(err2)}`);
-        }
-      }
-      if (sessionID && !isCoderDelegation && currentTaskId) {
-        const session = ensureAgentSession(sessionID);
-        if (session.architectWriteCount > 0 && session.lastCoderDelegationTaskId !== currentTaskId) {
-          const warningText2 = `\u26A0\uFE0F DELEGATION VIOLATION: Code modifications detected for task ${currentTaskId} with zero coder delegations.
-Rule 1: DELEGATE all coding to coder. You do NOT write code.`;
-          textPart.text = `${warningText2}
-
-${text}`;
-        }
-      }
-      {
-        const deliberationSessionID = lastUserMessage.info?.sessionID;
-        if (deliberationSessionID) {
-          if (!/^[a-zA-Z0-9_-]{1,128}$/.test(deliberationSessionID)) {} else {
-            const deliberationSession = ensureAgentSession(deliberationSessionID);
-            const lastGate = deliberationSession.lastGateOutcome;
-            let preamble;
-            if (lastGate) {
-              const gateResult = lastGate.passed ? "PASSED" : "FAILED";
-              const sanitizedGate = lastGate.gate.replace(/\[/g, "(").replace(/\]/g, ")").replace(/[\r\n]/g, " ").slice(0, 64);
-              const sanitizedTaskId = lastGate.taskId.replace(/\[/g, "(").replace(/\]/g, ")").replace(/[\r\n]/g, " ").slice(0, 32);
-              preamble = `[Last gate: ${sanitizedGate} ${gateResult} for task ${sanitizedTaskId}]
-[DELIBERATE: Before proceeding \u2014 what is the SINGLE next task? What gates must it pass?]`;
-            } else {
-              preamble = `[DELIBERATE: Identify the first task from the plan. What gates must it pass before marking complete?]`;
-            }
-            const currentText = textPart.text ?? "";
-            textPart.text = `${preamble}
-
-${currentText}`;
-          }
-        }
-      }
-      if (!isCoderDelegation)
-        return;
-      const warnings = [];
-      if (text.length > delegationMaxChars) {
-        warnings.push(`Delegation exceeds recommended size (${text.length} chars, limit ${delegationMaxChars}). Consider splitting into smaller tasks.`);
-      }
-      const fileMatches = text.match(/^FILE:/gm);
-      if (fileMatches && fileMatches.length > 1) {
-        warnings.push(`Multiple FILE: directives detected (${fileMatches.length}). Each coder task should target ONE file.`);
-      }
-      const taskMatches = text.match(/^TASK:/gm);
-      if (taskMatches && taskMatches.length > 1) {
-        warnings.push(`Multiple TASK: sections detected (${taskMatches.length}). Send ONE task per coder call.`);
-      }
-      const batchingPattern = /\b(?:and also|then also|additionally|as well as|along with|while you'?re at it)[.,]?\b/gi;
-      const batchingMatches = text.match(batchingPattern);
-      if (batchingMatches && batchingMatches.length > 0) {
-        warnings.push(`Batching language detected (${batchingMatches.join(", ")}). Break compound objectives into separate coder calls.`);
-      }
-      const taskLine = extractTaskLine(text);
-      if (taskLine) {
-        const andPattern = /\s+and\s+(update|add|remove|modify|refactor|implement|create|delete|fix|change|build|deploy|write|test|move|rename|extend|extract|convert|migrate|upgrade|replace)\b/i;
-        if (andPattern.test(taskLine)) {
-          warnings.push('TASK line contains "and" connecting separate actions');
-        }
-      }
-      if (sessionID) {
-        const delegationChain = swarmState.delegationChains.get(sessionID);
-        if (delegationChain && delegationChain.length >= 2) {
-          const coderIndices = [];
-          for (let i2 = delegationChain.length - 1;i2 >= 0; i2--) {
-            if (stripKnownSwarmPrefix(delegationChain[i2].to).includes("coder")) {
-              coderIndices.unshift(i2);
-              if (coderIndices.length === 2)
-                break;
-            }
-          }
-          if (coderIndices.length === 2) {
-            const prevCoderIndex = coderIndices[0];
-            const betweenCoders = delegationChain.slice(prevCoderIndex + 1);
-            const hasReviewer = betweenCoders.some((d) => stripKnownSwarmPrefix(d.to) === "reviewer");
-            const hasTestEngineer = betweenCoders.some((d) => stripKnownSwarmPrefix(d.to) === "test_engineer");
-            const session = ensureAgentSession(sessionID);
-            const priorTaskStuckAtCoder = priorCoderTaskId !== null && getTaskState(session, priorCoderTaskId) === "coder_delegated";
-            if (!hasReviewer || !hasTestEngineer || priorTaskStuckAtCoder) {
-              if (session.qaSkipCount >= 1) {
-                const skippedTasks = session.qaSkipTaskIds.join(", ");
-                throw new Error(`\uD83D\uDED1 QA GATE ENFORCEMENT: ${session.qaSkipCount + 1} consecutive coder delegations without reviewer/test_engineer. ` + `Skipped tasks: [${skippedTasks}]. ` + `DELEGATE to reviewer and test_engineer NOW before any further coder work.`);
-              }
-              session.qaSkipCount++;
-              session.qaSkipTaskIds.push(currentTaskId ?? "unknown");
-              warnings.push(`\u26A0\uFE0F PROTOCOL VIOLATION: Previous coder task completed, but QA gate was skipped. ` + `You MUST delegate to reviewer (code review) and test_engineer (test execution) ` + `before starting a new coder task. Review RULES 7-8 in your system prompt.`);
-            }
-          }
-        }
-      }
-      if (warnings.length === 0)
-        return;
-      const warningLines = warnings.map((w) => `Detected signal: ${w}`);
-      const warningText = `\u26A0\uFE0F BATCH DETECTED: Your coder delegation appears to contain multiple tasks.
-Rule 3: ONE task per coder call. Split this into separate delegations.
-${warningLines.join(`
-`)}`;
-      const originalText = textPart.text ?? "";
-      textPart.text = `${warningText}
-
-${originalText}`;
-    },
-    toolAfter
-  };
-}
-// src/hooks/delegation-sanitizer.ts
-init_utils2();
-import * as fs13 from "fs";
-var SANITIZATION_PATTERNS = [
-  /\b\d+(st|nd|rd|th)\s+(attempt|try|time)\b/gi,
-  /\b(5th|fifth|final|last)\s+attempt\b/gi,
-  /attempt\s+\d+\s*\/\s*\d+/gi,
-  /\bthis\s+is\s+(the\s+)?(5th|fifth|final|last)\b/gi,
-  /\bwe('re|\s+are)\s+(behind|late)\b/gi,
-  /\buser\s+is\s+waiting\b/gi,
-  /\bship\s+(this|it)\s+now\b/gi,
-  /\bor\s+I('ll|\s+will)\s+(stop|halt|alert)\b/gi,
-  /\bor\s+all\s+work\s+stops\b/gi,
-  /\bthis\s+will\s+(delay|block)\s+everything\b/gi,
-  /\b(I'm|I\s+am)\s+(frustrated|disappointed)\b/gi
-];
-function sanitizeMessage(text, patterns = SANITIZATION_PATTERNS) {
-  let sanitized = text;
-  const stripped = [];
-  for (const pattern of patterns) {
-    const matches = sanitized.match(pattern);
-    if (matches) {
-      stripped.push(...matches);
-      sanitized = sanitized.replace(pattern, "");
-    }
-  }
-  sanitized = sanitized.replace(/\s+/g, " ").trim();
-  return {
-    sanitized,
-    modified: stripped.length > 0,
-    stripped
-  };
-}
-function isGateAgentMessage(agentName) {
-  const gateAgents = ["reviewer", "test_engineer", "critic", "test-engineer"];
-  const normalized = agentName.toLowerCase().replace(/-/g, "_");
-  return gateAgents.includes(normalized);
-}
-function createDelegationSanitizerHook(directory) {
-  const hook = async (_input, output) => {
-    const messages = output?.messages;
-    if (!messages || !Array.isArray(messages)) {
-      return;
-    }
-    for (const message of messages) {
-      const info2 = message?.info;
-      if (!info2)
-        continue;
-      const agent = info2.agent;
-      if (!agent || !isGateAgentMessage(agent)) {
-        continue;
-      }
-      if (!message.parts || !Array.isArray(message.parts)) {
-        continue;
-      }
-      for (const part of message.parts) {
-        if (part?.type !== "text" || !part.text) {
-          continue;
-        }
-        const originalText = part.text;
-        const result = sanitizeMessage(originalText);
-        if (result.modified) {
-          part.text = result.sanitized;
-          try {
-            const eventsPath = validateSwarmPath(directory, "events.jsonl");
-            const event = {
-              event: "message_sanitized",
-              agent,
-              original_length: originalText.length,
-              stripped_count: result.stripped.length,
-              stripped_patterns: result.stripped,
-              timestamp: new Date().toISOString()
-            };
-            fs13.appendFileSync(eventsPath, `${JSON.stringify(event)}
-`, "utf-8");
-          } catch {}
-        }
-      }
-    }
-  };
-  return safeHook(hook);
-}
-// src/hooks/delegation-tracker.ts
-init_constants();
-init_schema();
-function createDelegationTrackerHook(config3, guardrailsEnabled = true) {
-  return async (input, _output) => {
-    const now = Date.now();
-    if (!input.agent || input.agent === "") {
-      const session2 = swarmState.agentSessions.get(input.sessionID);
-      if (session2?.delegationActive) {
-        session2.delegationActive = false;
-        swarmState.activeAgent.set(input.sessionID, ORCHESTRATOR_NAME);
-        ensureAgentSession(input.sessionID, ORCHESTRATOR_NAME);
-        updateAgentEventTime(input.sessionID);
-      } else if (!session2) {
-        ensureAgentSession(input.sessionID, ORCHESTRATOR_NAME);
-      }
-      return;
-    }
-    const agentName = input.agent;
-    const previousAgent = swarmState.activeAgent.get(input.sessionID);
-    swarmState.activeAgent.set(input.sessionID, agentName);
-    const strippedAgent = stripKnownSwarmPrefix(agentName);
-    const isArchitect = strippedAgent === ORCHESTRATOR_NAME;
-    const session = ensureAgentSession(input.sessionID, agentName);
-    session.delegationActive = !isArchitect;
-    recordPhaseAgentDispatch(input.sessionID, agentName);
-    if (!isArchitect && guardrailsEnabled) {
-      beginInvocation(input.sessionID, agentName);
-    }
-    const delegationTrackerEnabled = config3.hooks?.delegation_tracker === true;
-    const delegationGateEnabled = config3.hooks?.delegation_gate !== false;
-    if ((delegationTrackerEnabled || delegationGateEnabled) && previousAgent && previousAgent !== agentName) {
-      const entry = {
-        from: previousAgent,
-        to: agentName,
-        timestamp: now
-      };
-      if (!swarmState.delegationChains.has(input.sessionID)) {
-        swarmState.delegationChains.set(input.sessionID, []);
-      }
-      const chain = swarmState.delegationChains.get(input.sessionID);
-      chain?.push(entry);
-      if (delegationTrackerEnabled) {
-        swarmState.pendingEvents++;
-      }
-    }
-  };
-}
+
 // src/hooks/guardrails.ts
 init_constants();
 init_schema();
 init_manager2();
 import * as path25 from "path";
 init_utils();
+var storedInputArgs = new Map;
+function debugStoredArgs(action, callID, extra) {
+  const args2 = storedInputArgs.get(callID);
+  const argsObj = args2;
+  const subagentType = argsObj?.subagent_type;
+  console.log(`[swarm-debug-task] stored-args.${action} | callID=${callID} subagent_type=${subagentType ?? "(none)"}`, extra ? JSON.stringify(extra) : "");
+}
+function getStoredInputArgs(callID) {
+  debugStoredArgs("get", callID);
+  return storedInputArgs.get(callID);
+}
+function setStoredInputArgs(callID, args2) {
+  debugStoredArgs("set", callID);
+  storedInputArgs.set(callID, args2);
+}
+function deleteStoredInputArgs(callID) {
+  debugStoredArgs("delete", callID);
+  storedInputArgs.delete(callID);
+}
 function extractPhaseNumber(phaseString) {
   if (!phaseString)
     return 1;
@@ -47854,7 +47480,6 @@ function createGuardrailsHooks(directoryOrConfig, config3) {
     };
   }
   const cfg = guardrailsConfig;
-  const inputArgsByCallID = new Map;
   return {
     toolBefore: async (input, output) => {
       const currentSession = swarmState.agentSessions.get(input.sessionID);
@@ -47868,495 +47493,1001 @@ function createGuardrailsHooks(directoryOrConfig, config3) {
             }
           }
         }
-      } else if (isArchitect(input.sessionID)) {
-        const coderDelegArgs = output.args;
-        const coderDeleg = isAgentDelegation(input.tool, coderDelegArgs);
-        if (coderDeleg.isDelegation && coderDeleg.targetAgent === "coder") {
-          const coderSession = swarmState.agentSessions.get(input.sessionID);
-          if (coderSession) {
-            coderSession.modifiedFilesThisCoderTask = [];
-          }
+      } else if (isArchitect(input.sessionID)) {
+        const coderDelegArgs = output.args;
+        const coderDeleg = isAgentDelegation(input.tool, coderDelegArgs);
+        if (coderDeleg.isDelegation && coderDeleg.targetAgent === "coder") {
+          const coderSession = swarmState.agentSessions.get(input.sessionID);
+          if (coderSession) {
+            coderSession.modifiedFilesThisCoderTask = [];
+          }
+        }
+      }
+      if (isArchitect(input.sessionID) && isWriteTool(input.tool)) {
+        const args2 = output.args;
+        const targetPath = args2?.filePath ?? args2?.path ?? args2?.file ?? args2?.target;
+        if (typeof targetPath === "string" && targetPath.length > 0) {
+          const resolvedTarget = path25.resolve(directory, targetPath).toLowerCase();
+          const planMdPath = path25.resolve(directory, ".swarm", "plan.md").toLowerCase();
+          const planJsonPath = path25.resolve(directory, ".swarm", "plan.json").toLowerCase();
+          if (resolvedTarget === planMdPath || resolvedTarget === planJsonPath) {
+            throw new Error("PLAN STATE VIOLATION: Direct writes to .swarm/plan.md and .swarm/plan.json are blocked. " + "plan.md is auto-regenerated from plan.json by PlanSyncWorker. " + "Use update_task_status() to mark tasks complete, " + "phase_complete() for phase transitions, or " + "save_plan to create/restructure plans.");
+          }
+        }
+        if (!targetPath && (input.tool === "apply_patch" || input.tool === "patch")) {
+          const patchText = args2?.input ?? args2?.patch ?? (Array.isArray(args2?.cmd) ? args2.cmd[1] : undefined);
+          if (typeof patchText === "string" && patchText.length <= 1e6) {
+            const patchPathPattern = /\*\*\*\s+(?:Update|Add|Delete)\s+File:\s*(.+)/gi;
+            const diffPathPattern = /\+\+\+\s+b\/(.+)/gm;
+            const paths = new Set;
+            for (const match of patchText.matchAll(patchPathPattern)) {
+              paths.add(match[1].trim());
+            }
+            for (const match of patchText.matchAll(diffPathPattern)) {
+              const p = match[1].trim();
+              if (p !== "/dev/null")
+                paths.add(p);
+            }
+            const gitDiffPathPattern = /^diff --git a\/(.+?) b\/(.+?)$/gm;
+            for (const match of patchText.matchAll(gitDiffPathPattern)) {
+              const aPath = match[1].trim();
+              const bPath = match[2].trim();
+              if (aPath !== "/dev/null")
+                paths.add(aPath);
+              if (bPath !== "/dev/null")
+                paths.add(bPath);
+            }
+            const minusPathPattern = /^---\s+a\/(.+)$/gm;
+            for (const match of patchText.matchAll(minusPathPattern)) {
+              const p = match[1].trim();
+              if (p !== "/dev/null")
+                paths.add(p);
+            }
+            const traditionalMinusPattern = /^---\s+([^\s].+?)(?:\t.*)?$/gm;
+            const traditionalPlusPattern = /^\+\+\+\s+([^\s].+?)(?:\t.*)?$/gm;
+            for (const match of patchText.matchAll(traditionalMinusPattern)) {
+              const p = match[1].trim();
+              if (p !== "/dev/null" && !p.startsWith("a/") && !p.startsWith("b/")) {
+                paths.add(p);
+              }
+            }
+            for (const match of patchText.matchAll(traditionalPlusPattern)) {
+              const p = match[1].trim();
+              if (p !== "/dev/null" && !p.startsWith("a/") && !p.startsWith("b/")) {
+                paths.add(p);
+              }
+            }
+            for (const p of paths) {
+              const resolvedP = path25.resolve(directory, p);
+              const planMdPath = path25.resolve(directory, ".swarm", "plan.md").toLowerCase();
+              const planJsonPath = path25.resolve(directory, ".swarm", "plan.json").toLowerCase();
+              if (resolvedP.toLowerCase() === planMdPath || resolvedP.toLowerCase() === planJsonPath) {
+                throw new Error("PLAN STATE VIOLATION: Direct writes to .swarm/plan.md and .swarm/plan.json are blocked. " + "plan.md is auto-regenerated from plan.json by PlanSyncWorker. " + "Use update_task_status() to mark tasks complete, " + "phase_complete() for phase transitions, or " + "save_plan to create/restructure plans.");
+              }
+              if (isOutsideSwarmDir(p, directory) && (isSourceCodePath(p) || hasTraversalSegments(p))) {
+                const session2 = swarmState.agentSessions.get(input.sessionID);
+                if (session2) {
+                  session2.architectWriteCount++;
+                  warn("Architect direct code edit detected via apply_patch", {
+                    tool: input.tool,
+                    sessionID: input.sessionID,
+                    targetPath: p,
+                    writeCount: session2.architectWriteCount
+                  });
+                }
+                break;
+              }
+            }
+          }
+        }
+        if (typeof targetPath === "string" && targetPath.length > 0 && isOutsideSwarmDir(targetPath, directory) && isSourceCodePath(path25.relative(directory, path25.resolve(directory, targetPath)))) {
+          const session2 = swarmState.agentSessions.get(input.sessionID);
+          if (session2) {
+            session2.architectWriteCount++;
+            warn("Architect direct code edit detected", {
+              tool: input.tool,
+              sessionID: input.sessionID,
+              targetPath,
+              writeCount: session2.architectWriteCount
+            });
+            if (session2.lastGateFailure && Date.now() - session2.lastGateFailure.timestamp < 120000) {
+              const failedGate = session2.lastGateFailure.tool;
+              const failedTaskId = session2.lastGateFailure.taskId;
+              warn("Self-fix after gate failure detected", {
+                failedGate,
+                failedTaskId,
+                currentTool: input.tool,
+                sessionID: input.sessionID
+              });
+              session2.selfFixAttempted = true;
+            }
+          }
+        }
+      }
+      const rawActiveAgent = swarmState.activeAgent.get(input.sessionID);
+      const strippedAgent = rawActiveAgent ? stripKnownSwarmPrefix(rawActiveAgent) : undefined;
+      if (strippedAgent === ORCHESTRATOR_NAME) {
+        return;
+      }
+      const existingSession = swarmState.agentSessions.get(input.sessionID);
+      if (existingSession) {
+        const sessionAgent = stripKnownSwarmPrefix(existingSession.agentName);
+        if (sessionAgent === ORCHESTRATOR_NAME) {
+          return;
+        }
+      }
+      const agentName = swarmState.activeAgent.get(input.sessionID) ?? ORCHESTRATOR_NAME;
+      const session = ensureAgentSession(input.sessionID, agentName);
+      const resolvedName = stripKnownSwarmPrefix(session.agentName);
+      if (resolvedName === ORCHESTRATOR_NAME) {
+        return;
+      }
+      const agentConfig = resolveGuardrailsConfig(cfg, session.agentName);
+      if (agentConfig.max_duration_minutes === 0 && agentConfig.max_tool_calls === 0) {
+        return;
+      }
+      if (!getActiveWindow(input.sessionID)) {
+        const fallbackAgent = swarmState.activeAgent.get(input.sessionID) ?? session.agentName;
+        const stripped = stripKnownSwarmPrefix(fallbackAgent);
+        if (stripped !== ORCHESTRATOR_NAME) {
+          beginInvocation(input.sessionID, fallbackAgent);
+        }
+      }
+      const window2 = getActiveWindow(input.sessionID);
+      if (!window2) {
+        return;
+      }
+      if (window2.hardLimitHit) {
+        throw new Error("\uD83D\uDED1 CIRCUIT BREAKER: Agent blocked. Hard limit was previously triggered. Stop making tool calls and return your progress summary.");
+      }
+      window2.toolCalls++;
+      const hash3 = hashArgs(output.args);
+      window2.recentToolCalls.push({
+        tool: input.tool,
+        argsHash: hash3,
+        timestamp: Date.now()
+      });
+      if (window2.recentToolCalls.length > 20) {
+        window2.recentToolCalls.shift();
+      }
+      let repetitionCount = 0;
+      if (window2.recentToolCalls.length > 0) {
+        const lastEntry = window2.recentToolCalls[window2.recentToolCalls.length - 1];
+        for (let i2 = window2.recentToolCalls.length - 1;i2 >= 0; i2--) {
+          const entry = window2.recentToolCalls[i2];
+          if (entry.tool === lastEntry.tool && entry.argsHash === lastEntry.argsHash) {
+            repetitionCount++;
+          } else {
+            break;
+          }
+        }
+      }
+      const elapsedMinutes = (Date.now() - window2.startedAtMs) / 60000;
+      if (agentConfig.max_tool_calls > 0 && window2.toolCalls >= agentConfig.max_tool_calls) {
+        window2.hardLimitHit = true;
+        warn("Circuit breaker: tool call limit hit", {
+          sessionID: input.sessionID,
+          agentName: window2.agentName,
+          invocationId: window2.id,
+          windowKey: `${window2.agentName}:${window2.id}`,
+          resolvedMaxCalls: agentConfig.max_tool_calls,
+          currentCalls: window2.toolCalls
+        });
+        throw new Error(`\uD83D\uDED1 LIMIT REACHED: Tool calls exhausted (${window2.toolCalls}/${agentConfig.max_tool_calls}). Finish the current operation and return your progress summary.`);
+      }
+      if (agentConfig.max_duration_minutes > 0 && elapsedMinutes >= agentConfig.max_duration_minutes) {
+        window2.hardLimitHit = true;
+        warn("Circuit breaker: duration limit hit", {
+          sessionID: input.sessionID,
+          agentName: window2.agentName,
+          invocationId: window2.id,
+          windowKey: `${window2.agentName}:${window2.id}`,
+          resolvedMaxMinutes: agentConfig.max_duration_minutes,
+          elapsedMinutes: Math.floor(elapsedMinutes)
+        });
+        throw new Error(`\uD83D\uDED1 LIMIT REACHED: Duration exhausted (${Math.floor(elapsedMinutes)}/${agentConfig.max_duration_minutes} min). Finish the current operation and return your progress summary.`);
+      }
+      if (repetitionCount >= agentConfig.max_repetitions) {
+        window2.hardLimitHit = true;
+        throw new Error(`\uD83D\uDED1 LIMIT REACHED: Repeated the same tool call ${repetitionCount} times. This suggests a loop. Return your progress summary.`);
+      }
+      if (window2.consecutiveErrors >= agentConfig.max_consecutive_errors) {
+        window2.hardLimitHit = true;
+        throw new Error(`\uD83D\uDED1 LIMIT REACHED: ${window2.consecutiveErrors} consecutive tool errors detected. Return your progress summary with details of what went wrong.`);
+      }
+      const idleMinutes = (Date.now() - window2.lastSuccessTimeMs) / 60000;
+      if (idleMinutes >= agentConfig.idle_timeout_minutes) {
+        window2.hardLimitHit = true;
+        warn("Circuit breaker: idle timeout hit", {
+          sessionID: input.sessionID,
+          agentName: window2.agentName,
+          invocationId: window2.id,
+          windowKey: `${window2.agentName}:${window2.id}`,
+          idleTimeoutMinutes: agentConfig.idle_timeout_minutes,
+          idleMinutes: Math.floor(idleMinutes)
+        });
+        throw new Error(`\uD83D\uDED1 LIMIT REACHED: No successful tool call for ${Math.floor(idleMinutes)} minutes (idle timeout: ${agentConfig.idle_timeout_minutes} min). This suggests the agent may be stuck. Return your progress summary.`);
+      }
+      if (!window2.warningIssued) {
+        const toolPct = agentConfig.max_tool_calls > 0 ? window2.toolCalls / agentConfig.max_tool_calls : 0;
+        const durationPct = agentConfig.max_duration_minutes > 0 ? elapsedMinutes / agentConfig.max_duration_minutes : 0;
+        const repPct = repetitionCount / agentConfig.max_repetitions;
+        const errorPct = window2.consecutiveErrors / agentConfig.max_consecutive_errors;
+        const reasons = [];
+        if (agentConfig.max_tool_calls > 0 && toolPct >= agentConfig.warning_threshold) {
+          reasons.push(`tool calls ${window2.toolCalls}/${agentConfig.max_tool_calls}`);
+        }
+        if (durationPct >= agentConfig.warning_threshold) {
+          reasons.push(`duration ${Math.floor(elapsedMinutes)}/${agentConfig.max_duration_minutes} min`);
+        }
+        if (repPct >= agentConfig.warning_threshold) {
+          reasons.push(`repetitions ${repetitionCount}/${agentConfig.max_repetitions}`);
+        }
+        if (errorPct >= agentConfig.warning_threshold) {
+          reasons.push(`errors ${window2.consecutiveErrors}/${agentConfig.max_consecutive_errors}`);
+        }
+        if (reasons.length > 0) {
+          window2.warningIssued = true;
+          window2.warningReason = reasons.join(", ");
         }
       }
-      if (isArchitect(input.sessionID) && isWriteTool(input.tool)) {
-        const args2 = output.args;
-        const targetPath = args2?.filePath ?? args2?.path ?? args2?.file ?? args2?.target;
-        if (typeof targetPath === "string" && targetPath.length > 0) {
-          const resolvedTarget = path25.resolve(directory, targetPath).toLowerCase();
-          const planMdPath = path25.resolve(directory, ".swarm", "plan.md").toLowerCase();
-          const planJsonPath = path25.resolve(directory, ".swarm", "plan.json").toLowerCase();
-          if (resolvedTarget === planMdPath || resolvedTarget === planJsonPath) {
-            throw new Error("PLAN STATE VIOLATION: Direct writes to .swarm/plan.md and .swarm/plan.json are blocked. " + "plan.md is auto-regenerated from plan.json by PlanSyncWorker. " + "Use update_task_status() to mark tasks complete, " + "phase_complete() for phase transitions, or " + "save_plan to create/restructure plans.");
+      setStoredInputArgs(input.callID, output.args);
+    },
+    toolAfter: async (input, output) => {
+      const session = swarmState.agentSessions.get(input.sessionID);
+      if (session) {
+        if (isGateTool(input.tool)) {
+          const taskId = getCurrentTaskId(input.sessionID);
+          if (!session.gateLog.has(taskId)) {
+            session.gateLog.set(taskId, new Set);
           }
-        }
-        if (!targetPath && (input.tool === "apply_patch" || input.tool === "patch")) {
-          const patchText = args2?.input ?? args2?.patch ?? (Array.isArray(args2?.cmd) ? args2.cmd[1] : undefined);
-          if (typeof patchText === "string" && patchText.length <= 1e6) {
-            const patchPathPattern = /\*\*\*\s+(?:Update|Add|Delete)\s+File:\s*(.+)/gi;
-            const diffPathPattern = /\+\+\+\s+b\/(.+)/gm;
-            const paths = new Set;
-            for (const match of patchText.matchAll(patchPathPattern)) {
-              paths.add(match[1].trim());
-            }
-            for (const match of patchText.matchAll(diffPathPattern)) {
-              const p = match[1].trim();
-              if (p !== "/dev/null")
-                paths.add(p);
-            }
-            const gitDiffPathPattern = /^diff --git a\/(.+?) b\/(.+?)$/gm;
-            for (const match of patchText.matchAll(gitDiffPathPattern)) {
-              const aPath = match[1].trim();
-              const bPath = match[2].trim();
-              if (aPath !== "/dev/null")
-                paths.add(aPath);
-              if (bPath !== "/dev/null")
-                paths.add(bPath);
-            }
-            const minusPathPattern = /^---\s+a\/(.+)$/gm;
-            for (const match of patchText.matchAll(minusPathPattern)) {
-              const p = match[1].trim();
-              if (p !== "/dev/null")
-                paths.add(p);
-            }
-            const traditionalMinusPattern = /^---\s+([^\s].+?)(?:\t.*)?$/gm;
-            const traditionalPlusPattern = /^\+\+\+\s+([^\s].+?)(?:\t.*)?$/gm;
-            for (const match of patchText.matchAll(traditionalMinusPattern)) {
-              const p = match[1].trim();
-              if (p !== "/dev/null" && !p.startsWith("a/") && !p.startsWith("b/")) {
-                paths.add(p);
-              }
-            }
-            for (const match of patchText.matchAll(traditionalPlusPattern)) {
-              const p = match[1].trim();
-              if (p !== "/dev/null" && !p.startsWith("a/") && !p.startsWith("b/")) {
-                paths.add(p);
-              }
-            }
-            for (const p of paths) {
-              const resolvedP = path25.resolve(directory, p);
-              const planMdPath = path25.resolve(directory, ".swarm", "plan.md").toLowerCase();
-              const planJsonPath = path25.resolve(directory, ".swarm", "plan.json").toLowerCase();
-              if (resolvedP.toLowerCase() === planMdPath || resolvedP.toLowerCase() === planJsonPath) {
-                throw new Error("PLAN STATE VIOLATION: Direct writes to .swarm/plan.md and .swarm/plan.json are blocked. " + "plan.md is auto-regenerated from plan.json by PlanSyncWorker. " + "Use update_task_status() to mark tasks complete, " + "phase_complete() for phase transitions, or " + "save_plan to create/restructure plans.");
+          session.gateLog.get(taskId)?.add(input.tool);
+          const outputStr = typeof output.output === "string" ? output.output : "";
+          const hasFailure = output.output === null || output.output === undefined || outputStr.includes("FAIL") || outputStr.includes("error") || outputStr.toLowerCase().includes("gates_passed: false");
+          if (hasFailure) {
+            session.lastGateFailure = {
+              tool: input.tool,
+              taskId,
+              timestamp: Date.now()
+            };
+          } else {
+            session.lastGateFailure = null;
+            if (input.tool === "pre_check_batch") {
+              const successStr = typeof output.output === "string" ? output.output : "";
+              let isPassed = false;
+              try {
+                const result = JSON.parse(successStr);
+                isPassed = result.gates_passed === true;
+              } catch {
+                isPassed = false;
               }
-              if (isOutsideSwarmDir(p, directory) && (isSourceCodePath(p) || hasTraversalSegments(p))) {
-                const session2 = swarmState.agentSessions.get(input.sessionID);
-                if (session2) {
-                  session2.architectWriteCount++;
-                  warn("Architect direct code edit detected via apply_patch", {
-                    tool: input.tool,
-                    sessionID: input.sessionID,
-                    targetPath: p,
-                    writeCount: session2.architectWriteCount
+              if (isPassed && session.currentTaskId) {
+                try {
+                  advanceTaskState(session, session.currentTaskId, "pre_check_passed");
+                } catch (err2) {
+                  warn("Failed to advance task state after pre_check_batch pass", {
+                    taskId: session.currentTaskId,
+                    error: String(err2)
                   });
                 }
-                break;
               }
             }
           }
         }
-        if (typeof targetPath === "string" && targetPath.length > 0 && isOutsideSwarmDir(targetPath, directory) && isSourceCodePath(path25.relative(directory, path25.resolve(directory, targetPath)))) {
-          const session2 = swarmState.agentSessions.get(input.sessionID);
-          if (session2) {
-            session2.architectWriteCount++;
-            warn("Architect direct code edit detected", {
-              tool: input.tool,
-              sessionID: input.sessionID,
-              targetPath,
-              writeCount: session2.architectWriteCount
-            });
-            if (session2.lastGateFailure && Date.now() - session2.lastGateFailure.timestamp < 120000) {
-              const failedGate = session2.lastGateFailure.tool;
-              const failedTaskId = session2.lastGateFailure.taskId;
-              warn("Self-fix after gate failure detected", {
-                failedGate,
-                failedTaskId,
-                currentTool: input.tool,
-                sessionID: input.sessionID
-              });
-              session2.selfFixAttempted = true;
+        const inputArgs = getStoredInputArgs(input.callID);
+        const delegation = isAgentDelegation(input.tool, inputArgs);
+        if (delegation.isDelegation && (delegation.targetAgent === "reviewer" || delegation.targetAgent === "test_engineer")) {
+          let currentPhase = 1;
+          try {
+            const plan = await loadPlan(directory);
+            if (plan) {
+              const phaseString = extractCurrentPhaseFromPlan2(plan);
+              currentPhase = extractPhaseNumber(phaseString);
+            }
+          } catch {}
+          const count = session.reviewerCallCount.get(currentPhase) ?? 0;
+          session.reviewerCallCount.set(currentPhase, count + 1);
+        }
+        if (delegation.isDelegation && delegation.targetAgent === "coder" && session.lastCoderDelegationTaskId) {
+          session.currentTaskId = session.lastCoderDelegationTaskId;
+          session.partialGateWarningsIssuedForTask?.delete(session.currentTaskId);
+          if (session.declaredCoderScope !== null) {
+            const undeclaredFiles = session.modifiedFilesThisCoderTask.map((f) => f.replace(/[\r\n\t]/g, "_")).filter((f) => !isInDeclaredScope(f, session.declaredCoderScope));
+            if (undeclaredFiles.length > 2) {
+              const safeTaskId = String(session.currentTaskId ?? "").replace(/[\r\n\t]/g, "_");
+              session.lastScopeViolation = `Scope violation for task ${safeTaskId}: ` + `${undeclaredFiles.length} undeclared files modified: ` + undeclaredFiles.join(", ");
+              session.scopeViolationDetected = true;
+            }
+          }
+          session.modifiedFilesThisCoderTask = [];
+        }
+      }
+      const window2 = getActiveWindow(input.sessionID);
+      if (!window2)
+        return;
+      const hasError = output.output === null || output.output === undefined;
+      if (hasError) {
+        window2.consecutiveErrors++;
+      } else {
+        window2.consecutiveErrors = 0;
+        window2.lastSuccessTimeMs = Date.now();
+      }
+    },
+    messagesTransform: async (_input, output) => {
+      const messages = output.messages;
+      if (!messages || messages.length === 0) {
+        return;
+      }
+      const lastMessage = messages[messages.length - 1];
+      const sessionId = lastMessage.info?.sessionID;
+      if (!sessionId) {
+        return;
+      }
+      {
+        const { modelID } = extractModelInfo(messages);
+        if (modelID && isLowCapabilityModel(modelID)) {
+          for (const msg of messages) {
+            if (msg.info?.role !== "system")
+              continue;
+            for (const part of msg.parts) {
+              try {
+                if (part == null)
+                  continue;
+                if (part.type !== "text" || typeof part.text !== "string")
+                  continue;
+                if (!part.text.includes("<!-- BEHAVIORAL_GUIDANCE_START -->"))
+                  continue;
+                part.text = part.text.replace(/<!--\s*BEHAVIORAL_GUIDANCE_START\s*-->[\s\S]*?<!--\s*BEHAVIORAL_GUIDANCE_END\s*-->/g, "[Enforcement: programmatic gates active]");
+              } catch {}
+            }
+          }
+        }
+      }
+      const session = swarmState.agentSessions.get(sessionId);
+      const activeAgent = swarmState.activeAgent.get(sessionId);
+      const isArchitectSession = activeAgent ? stripKnownSwarmPrefix(activeAgent) === ORCHESTRATOR_NAME : session ? stripKnownSwarmPrefix(session.agentName) === ORCHESTRATOR_NAME : false;
+      if (isArchitectSession && session && session.architectWriteCount > 0) {
+        const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
+        if (textPart2) {
+          textPart2.text = `\u26A0\uFE0F SELF-CODING DETECTED: You have used ${session.architectWriteCount} write-class tool(s) directly on non-.swarm/ files.
+` + `Rule 1 requires ALL coding to be delegated to @coder.
+` + `If you have not exhausted QA_RETRY_LIMIT coder failures on this task, STOP and delegate.
+
+` + textPart2.text;
+        }
+      }
+      if (isArchitectSession && session && session.selfFixAttempted && session.lastGateFailure && Date.now() - session.lastGateFailure.timestamp < 120000) {
+        const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
+        if (textPart2 && !textPart2.text.includes("SELF-FIX DETECTED")) {
+          textPart2.text = `\u26A0\uFE0F SELF-FIX DETECTED: Gate '${session.lastGateFailure.tool}' failed on task ${session.lastGateFailure.taskId}.
+` + `You are now using a write tool instead of delegating to @coder.
+` + `GATE FAILURE RESPONSE RULES require: return to coder with structured rejection.
+` + `Do NOT fix gate failures yourself.
+
+` + textPart2.text;
+          session.selfFixAttempted = false;
+        }
+      }
+      const isArchitectSessionForGates = activeAgent ? stripKnownSwarmPrefix(activeAgent) === ORCHESTRATOR_NAME : session ? stripKnownSwarmPrefix(session.agentName) === ORCHESTRATOR_NAME : false;
+      if (isArchitectSessionForGates && session) {
+        const taskId = getCurrentTaskId(sessionId);
+        if (!session.partialGateWarningsIssuedForTask.has(taskId)) {
+          const gates = session.gateLog.get(taskId);
+          const REQUIRED_GATES = [
+            "diff",
+            "syntax_check",
+            "placeholder_scan",
+            "lint",
+            "pre_check_batch"
+          ];
+          const missingGates = [];
+          if (!gates) {
+            missingGates.push(...REQUIRED_GATES);
+          } else {
+            for (const gate of REQUIRED_GATES) {
+              if (!gates.has(gate)) {
+                missingGates.push(gate);
+              }
+            }
+          }
+          let currentPhaseForCheck = 1;
+          try {
+            const plan = await loadPlan(directory);
+            if (plan) {
+              const phaseString = extractCurrentPhaseFromPlan2(plan);
+              currentPhaseForCheck = extractPhaseNumber(phaseString);
+            }
+          } catch {}
+          const hasReviewerDelegation = (session.reviewerCallCount.get(currentPhaseForCheck) ?? 0) > 0;
+          if (missingGates.length > 0 || !hasReviewerDelegation) {
+            const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
+            if (textPart2 && !textPart2.text.includes("PARTIAL GATE VIOLATION")) {
+              const missing = [...missingGates];
+              if (!hasReviewerDelegation) {
+                missing.push("reviewer/test_engineer (no delegations this phase)");
+              }
+              session.partialGateWarningsIssuedForTask.add(taskId);
+              textPart2.text = `\u26A0\uFE0F PARTIAL GATE VIOLATION: Task may be marked complete but missing gates: [${missing.join(", ")}].
+` + `The QA gate is ALL steps or NONE. Revert any \u2713 marks and run the missing gates.
+
+` + textPart2.text;
             }
           }
         }
       }
-      const rawActiveAgent = swarmState.activeAgent.get(input.sessionID);
-      const strippedAgent = rawActiveAgent ? stripKnownSwarmPrefix(rawActiveAgent) : undefined;
-      if (strippedAgent === ORCHESTRATOR_NAME) {
-        return;
-      }
-      const existingSession = swarmState.agentSessions.get(input.sessionID);
-      if (existingSession) {
-        const sessionAgent = stripKnownSwarmPrefix(existingSession.agentName);
-        if (sessionAgent === ORCHESTRATOR_NAME) {
-          return;
+      if (isArchitectSessionForGates && session && session.scopeViolationDetected) {
+        session.scopeViolationDetected = false;
+        const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
+        if (textPart2 && session.lastScopeViolation) {
+          textPart2.text = `\u26A0\uFE0F SCOPE VIOLATION: ${session.lastScopeViolation}
+` + `Only modify files within your declared scope. Request scope expansion from architect if needed.
+
+` + textPart2.text;
         }
       }
-      const agentName = swarmState.activeAgent.get(input.sessionID) ?? ORCHESTRATOR_NAME;
-      const session = ensureAgentSession(input.sessionID, agentName);
-      const resolvedName = stripKnownSwarmPrefix(session.agentName);
-      if (resolvedName === ORCHESTRATOR_NAME) {
-        return;
+      if (isArchitectSessionForGates && session && session.catastrophicPhaseWarnings) {
+        try {
+          const plan = await loadPlan(directory);
+          if (plan?.phases) {
+            for (const phase of plan.phases) {
+              if (phase.status === "complete") {
+                const phaseNum = phase.id;
+                if (!session.catastrophicPhaseWarnings.has(phaseNum)) {
+                  const reviewerCount = session.reviewerCallCount.get(phaseNum) ?? 0;
+                  if (reviewerCount === 0) {
+                    session.catastrophicPhaseWarnings.add(phaseNum);
+                    const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
+                    if (textPart2 && !textPart2.text.includes("CATASTROPHIC VIOLATION")) {
+                      textPart2.text = `[CATASTROPHIC VIOLATION: Phase ${phaseNum} completed with ZERO reviewer delegations.` + ` Every coder task requires reviewer approval. Recommend retrospective review of all Phase ${phaseNum} tasks.]
+
+` + textPart2.text;
+                    }
+                    break;
+                  }
+                }
+              }
+            }
+          }
+        } catch {}
       }
-      const agentConfig = resolveGuardrailsConfig(cfg, session.agentName);
-      if (agentConfig.max_duration_minutes === 0 && agentConfig.max_tool_calls === 0) {
+      const targetWindow = getActiveWindow(sessionId);
+      if (!targetWindow || !targetWindow.warningIssued && !targetWindow.hardLimitHit) {
         return;
       }
-      if (!getActiveWindow(input.sessionID)) {
-        const fallbackAgent = swarmState.activeAgent.get(input.sessionID) ?? session.agentName;
-        const stripped = stripKnownSwarmPrefix(fallbackAgent);
-        if (stripped !== ORCHESTRATOR_NAME) {
-          beginInvocation(input.sessionID, fallbackAgent);
-        }
-      }
-      const window2 = getActiveWindow(input.sessionID);
-      if (!window2) {
+      const textPart = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
+      if (!textPart) {
         return;
       }
-      if (window2.hardLimitHit) {
-        throw new Error("\uD83D\uDED1 CIRCUIT BREAKER: Agent blocked. Hard limit was previously triggered. Stop making tool calls and return your progress summary.");
-      }
-      window2.toolCalls++;
-      const hash3 = hashArgs(output.args);
-      window2.recentToolCalls.push({
-        tool: input.tool,
-        argsHash: hash3,
-        timestamp: Date.now()
-      });
-      if (window2.recentToolCalls.length > 20) {
-        window2.recentToolCalls.shift();
-      }
-      let repetitionCount = 0;
-      if (window2.recentToolCalls.length > 0) {
-        const lastEntry = window2.recentToolCalls[window2.recentToolCalls.length - 1];
-        for (let i2 = window2.recentToolCalls.length - 1;i2 >= 0; i2--) {
-          const entry = window2.recentToolCalls[i2];
-          if (entry.tool === lastEntry.tool && entry.argsHash === lastEntry.argsHash) {
-            repetitionCount++;
-          } else {
-            break;
-          }
-        }
-      }
-      const elapsedMinutes = (Date.now() - window2.startedAtMs) / 60000;
-      if (agentConfig.max_tool_calls > 0 && window2.toolCalls >= agentConfig.max_tool_calls) {
-        window2.hardLimitHit = true;
-        warn("Circuit breaker: tool call limit hit", {
-          sessionID: input.sessionID,
-          agentName: window2.agentName,
-          invocationId: window2.id,
-          windowKey: `${window2.agentName}:${window2.id}`,
-          resolvedMaxCalls: agentConfig.max_tool_calls,
-          currentCalls: window2.toolCalls
-        });
-        throw new Error(`\uD83D\uDED1 LIMIT REACHED: Tool calls exhausted (${window2.toolCalls}/${agentConfig.max_tool_calls}). Finish the current operation and return your progress summary.`);
-      }
-      if (agentConfig.max_duration_minutes > 0 && elapsedMinutes >= agentConfig.max_duration_minutes) {
-        window2.hardLimitHit = true;
-        warn("Circuit breaker: duration limit hit", {
-          sessionID: input.sessionID,
-          agentName: window2.agentName,
-          invocationId: window2.id,
-          windowKey: `${window2.agentName}:${window2.id}`,
-          resolvedMaxMinutes: agentConfig.max_duration_minutes,
-          elapsedMinutes: Math.floor(elapsedMinutes)
-        });
-        throw new Error(`\uD83D\uDED1 LIMIT REACHED: Duration exhausted (${Math.floor(elapsedMinutes)}/${agentConfig.max_duration_minutes} min). Finish the current operation and return your progress summary.`);
-      }
-      if (repetitionCount >= agentConfig.max_repetitions) {
-        window2.hardLimitHit = true;
-        throw new Error(`\uD83D\uDED1 LIMIT REACHED: Repeated the same tool call ${repetitionCount} times. This suggests a loop. Return your progress summary.`);
-      }
-      if (window2.consecutiveErrors >= agentConfig.max_consecutive_errors) {
-        window2.hardLimitHit = true;
-        throw new Error(`\uD83D\uDED1 LIMIT REACHED: ${window2.consecutiveErrors} consecutive tool errors detected. Return your progress summary with details of what went wrong.`);
-      }
-      const idleMinutes = (Date.now() - window2.lastSuccessTimeMs) / 60000;
-      if (idleMinutes >= agentConfig.idle_timeout_minutes) {
-        window2.hardLimitHit = true;
-        warn("Circuit breaker: idle timeout hit", {
-          sessionID: input.sessionID,
-          agentName: window2.agentName,
-          invocationId: window2.id,
-          windowKey: `${window2.agentName}:${window2.id}`,
-          idleTimeoutMinutes: agentConfig.idle_timeout_minutes,
-          idleMinutes: Math.floor(idleMinutes)
-        });
-        throw new Error(`\uD83D\uDED1 LIMIT REACHED: No successful tool call for ${Math.floor(idleMinutes)} minutes (idle timeout: ${agentConfig.idle_timeout_minutes} min). This suggests the agent may be stuck. Return your progress summary.`);
-      }
-      if (!window2.warningIssued) {
-        const toolPct = agentConfig.max_tool_calls > 0 ? window2.toolCalls / agentConfig.max_tool_calls : 0;
-        const durationPct = agentConfig.max_duration_minutes > 0 ? elapsedMinutes / agentConfig.max_duration_minutes : 0;
-        const repPct = repetitionCount / agentConfig.max_repetitions;
-        const errorPct = window2.consecutiveErrors / agentConfig.max_consecutive_errors;
-        const reasons = [];
-        if (agentConfig.max_tool_calls > 0 && toolPct >= agentConfig.warning_threshold) {
-          reasons.push(`tool calls ${window2.toolCalls}/${agentConfig.max_tool_calls}`);
-        }
-        if (durationPct >= agentConfig.warning_threshold) {
-          reasons.push(`duration ${Math.floor(elapsedMinutes)}/${agentConfig.max_duration_minutes} min`);
-        }
-        if (repPct >= agentConfig.warning_threshold) {
-          reasons.push(`repetitions ${repetitionCount}/${agentConfig.max_repetitions}`);
-        }
-        if (errorPct >= agentConfig.warning_threshold) {
-          reasons.push(`errors ${window2.consecutiveErrors}/${agentConfig.max_consecutive_errors}`);
-        }
-        if (reasons.length > 0) {
-          window2.warningIssued = true;
-          window2.warningReason = reasons.join(", ");
-        }
+      if (targetWindow.hardLimitHit) {
+        textPart.text = `[\uD83D\uDED1 LIMIT REACHED: Your resource budget is exhausted. Do not make additional tool calls. Return a summary of your progress and any remaining work.]
+
+` + textPart.text;
+      } else if (targetWindow.warningIssued) {
+        const reasonSuffix = targetWindow.warningReason ? ` (${targetWindow.warningReason})` : "";
+        textPart.text = `[\u26A0\uFE0F APPROACHING LIMITS${reasonSuffix}: You still have capacity to finish your current step. Complete what you're working on, then return your results.]
+
+` + textPart.text;
       }
-      inputArgsByCallID.set(input.callID, output.args);
-    },
-    toolAfter: async (input, output) => {
-      const session = swarmState.agentSessions.get(input.sessionID);
-      if (session) {
-        if (isGateTool(input.tool)) {
-          const taskId = getCurrentTaskId(input.sessionID);
-          if (!session.gateLog.has(taskId)) {
-            session.gateLog.set(taskId, new Set);
-          }
-          session.gateLog.get(taskId)?.add(input.tool);
-          const outputStr = typeof output.output === "string" ? output.output : "";
-          const hasFailure = output.output === null || output.output === undefined || outputStr.includes("FAIL") || outputStr.includes("error") || outputStr.toLowerCase().includes("gates_passed: false");
-          if (hasFailure) {
-            session.lastGateFailure = {
-              tool: input.tool,
-              taskId,
-              timestamp: Date.now()
-            };
-          } else {
-            session.lastGateFailure = null;
-            if (input.tool === "pre_check_batch") {
-              const successStr = typeof output.output === "string" ? output.output : "";
-              let isPassed = false;
+    }
+  };
+}
+function hashArgs(args2) {
+  try {
+    if (typeof args2 !== "object" || args2 === null) {
+      return 0;
+    }
+    const sortedKeys = Object.keys(args2).sort();
+    return Number(Bun.hash(JSON.stringify(args2, sortedKeys)));
+  } catch {
+    return 0;
+  }
+}
+
+// src/hooks/delegation-gate.ts
+function extractTaskLine(text) {
+  const match = text.match(/TASK:\s*(.+?)(?:\n|$)/i);
+  return match ? match[1].trim() : null;
+}
+function extractPlanTaskId(text) {
+  const taskListMatch = text.match(/^[ \t]*-[ \t]*(?:\[[ x]\][ \t]+)?(\d+\.\d+(?:\.\d+)*)[:. ]/m);
+  if (taskListMatch) {
+    return taskListMatch[1];
+  }
+  const taskLineMatch = text.match(/TASK:\s*(?:.+?\s)?(\d+\.\d+(?:\.\d+)*)(?:\s|$|:)/i);
+  if (taskLineMatch) {
+    return taskLineMatch[1];
+  }
+  return null;
+}
+function createDelegationGateHook(config3) {
+  const enabled = config3.hooks?.delegation_gate !== false;
+  const delegationMaxChars = config3.hooks?.delegation_max_chars ?? 4000;
+  if (!enabled) {
+    return {
+      messagesTransform: async (_input, _output) => {},
+      toolAfter: async () => {}
+    };
+  }
+  const toolAfter = async (input, _output) => {
+    if (!input.sessionID)
+      return;
+    const session = swarmState.agentSessions.get(input.sessionID);
+    if (!session)
+      return;
+    const taskStates = session.taskWorkflowStates ? Object.entries(session.taskWorkflowStates) : [];
+    const statesSummary = taskStates.length > 0 ? taskStates.map(([k, v]) => `${k}=${v}`).join(",") : "(none)";
+    console.log(`[swarm-debug-task] delegation-gate.toolAfter | session=${input.sessionID} callID=${input.callID} tool=${input.tool}`);
+    const normalized = input.tool.replace(/^[^:]+[:.]/, "");
+    if (normalized === "Task" || normalized === "task") {
+      const storedArgs = getStoredInputArgs(input.callID);
+      const argsObj = storedArgs;
+      const subagentType = argsObj?.subagent_type;
+      console.log(`[swarm-debug-task] delegation-gate.taskDetected | session=${input.sessionID} subagent_type=${subagentType ?? "(none)"} currentStates=[${statesSummary}]`);
+      let hasReviewer = false;
+      let hasTestEngineer = false;
+      if (typeof subagentType === "string") {
+        const targetAgent = stripKnownSwarmPrefix(subagentType);
+        if (targetAgent === "reviewer")
+          hasReviewer = true;
+        if (targetAgent === "test_engineer")
+          hasTestEngineer = true;
+        if (targetAgent === "reviewer" && session.taskWorkflowStates) {
+          for (const [taskId, state] of session.taskWorkflowStates) {
+            if (state === "coder_delegated" || state === "pre_check_passed") {
+              try {
+                advanceTaskState(session, taskId, "reviewer_run");
+              } catch {}
+            }
+          }
+        }
+        if (targetAgent === "test_engineer" && session.taskWorkflowStates) {
+          for (const [taskId, state] of session.taskWorkflowStates) {
+            if (state === "reviewer_run") {
               try {
-                const result = JSON.parse(successStr);
-                isPassed = result.gates_passed === true;
-              } catch {
-                isPassed = false;
+                advanceTaskState(session, taskId, "tests_run");
+              } catch {}
+            }
+          }
+        }
+        if (targetAgent === "reviewer" || targetAgent === "test_engineer") {
+          for (const [, otherSession] of swarmState.agentSessions) {
+            if (otherSession === session)
+              continue;
+            if (!otherSession.taskWorkflowStates)
+              continue;
+            if (targetAgent === "reviewer") {
+              for (const [taskId, state] of otherSession.taskWorkflowStates) {
+                if (state === "coder_delegated" || state === "pre_check_passed") {
+                  try {
+                    advanceTaskState(otherSession, taskId, "reviewer_run");
+                  } catch {}
+                }
               }
-              if (isPassed && session.currentTaskId) {
-                try {
-                  advanceTaskState(session, session.currentTaskId, "pre_check_passed");
-                } catch (err2) {
-                  warn("Failed to advance task state after pre_check_batch pass", {
-                    taskId: session.currentTaskId,
-                    error: String(err2)
-                  });
+            }
+            if (targetAgent === "test_engineer") {
+              for (const [taskId, state] of otherSession.taskWorkflowStates) {
+                if (state === "reviewer_run") {
+                  try {
+                    advanceTaskState(otherSession, taskId, "tests_run");
+                  } catch {}
                 }
               }
             }
           }
         }
-        const inputArgs = inputArgsByCallID.get(input.callID);
-        inputArgsByCallID.delete(input.callID);
-        const delegation = isAgentDelegation(input.tool, inputArgs);
-        if (delegation.isDelegation && (delegation.targetAgent === "reviewer" || delegation.targetAgent === "test_engineer")) {
-          let currentPhase = 1;
-          try {
-            const plan = await loadPlan(directory);
-            if (plan) {
-              const phaseString = extractCurrentPhaseFromPlan2(plan);
-              currentPhase = extractPhaseNumber(phaseString);
+      }
+      if (argsObj !== undefined) {
+        deleteStoredInputArgs(input.callID);
+      }
+      if (!subagentType || !hasReviewer) {
+        const delegationChain = swarmState.delegationChains.get(input.sessionID);
+        if (delegationChain && delegationChain.length > 0) {
+          let lastCoderIndex = -1;
+          for (let i2 = delegationChain.length - 1;i2 >= 0; i2--) {
+            const target = stripKnownSwarmPrefix(delegationChain[i2].to);
+            if (target.includes("coder")) {
+              lastCoderIndex = i2;
+              break;
             }
-          } catch {}
-          const count = session.reviewerCallCount.get(currentPhase) ?? 0;
-          session.reviewerCallCount.set(currentPhase, count + 1);
-        }
-        if (delegation.isDelegation && delegation.targetAgent === "coder" && session.lastCoderDelegationTaskId) {
-          session.currentTaskId = session.lastCoderDelegationTaskId;
-          session.partialGateWarningsIssuedForTask?.delete(session.currentTaskId);
-          if (session.declaredCoderScope !== null) {
-            const undeclaredFiles = session.modifiedFilesThisCoderTask.map((f) => f.replace(/[\r\n\t]/g, "_")).filter((f) => !isInDeclaredScope(f, session.declaredCoderScope));
-            if (undeclaredFiles.length > 2) {
-              const safeTaskId = String(session.currentTaskId ?? "").replace(/[\r\n\t]/g, "_");
-              session.lastScopeViolation = `Scope violation for task ${safeTaskId}: ` + `${undeclaredFiles.length} undeclared files modified: ` + undeclaredFiles.join(", ");
-              session.scopeViolationDetected = true;
+          }
+          if (lastCoderIndex === -1) {
+            return;
+          }
+          const afterCoder = delegationChain.slice(lastCoderIndex);
+          for (const delegation of afterCoder) {
+            const target = stripKnownSwarmPrefix(delegation.to);
+            if (target === "reviewer")
+              hasReviewer = true;
+            if (target === "test_engineer")
+              hasTestEngineer = true;
+          }
+          if (hasReviewer && hasTestEngineer) {
+            session.qaSkipCount = 0;
+            session.qaSkipTaskIds = [];
+          }
+          if (hasReviewer && session.taskWorkflowStates) {
+            for (const [taskId, state] of session.taskWorkflowStates) {
+              if (state === "coder_delegated" || state === "pre_check_passed") {
+                try {
+                  advanceTaskState(session, taskId, "reviewer_run");
+                } catch {}
+              }
+            }
+          }
+          if (hasReviewer && hasTestEngineer && session.taskWorkflowStates) {
+            for (const [taskId, state] of session.taskWorkflowStates) {
+              if (state === "reviewer_run") {
+                try {
+                  advanceTaskState(session, taskId, "tests_run");
+                } catch {}
+              }
+            }
+          }
+          if (hasReviewer) {
+            for (const [, otherSession] of swarmState.agentSessions) {
+              if (otherSession === session)
+                continue;
+              if (!otherSession.taskWorkflowStates)
+                continue;
+              for (const [taskId, state] of otherSession.taskWorkflowStates) {
+                if (state === "coder_delegated" || state === "pre_check_passed") {
+                  try {
+                    advanceTaskState(otherSession, taskId, "reviewer_run");
+                  } catch {}
+                }
+              }
+            }
+          }
+          if (hasReviewer && hasTestEngineer) {
+            for (const [, otherSession] of swarmState.agentSessions) {
+              if (otherSession === session)
+                continue;
+              if (!otherSession.taskWorkflowStates)
+                continue;
+              for (const [taskId, state] of otherSession.taskWorkflowStates) {
+                if (state === "reviewer_run") {
+                  try {
+                    advanceTaskState(otherSession, taskId, "tests_run");
+                  } catch {}
+                }
+              }
             }
           }
-          session.modifiedFilesThisCoderTask = [];
         }
       }
-      const window2 = getActiveWindow(input.sessionID);
-      if (!window2)
-        return;
-      const hasError = output.output === null || output.output === undefined;
-      if (hasError) {
-        window2.consecutiveErrors++;
-      } else {
-        window2.consecutiveErrors = 0;
-        window2.lastSuccessTimeMs = Date.now();
-      }
-    },
+    }
+  };
+  return {
     messagesTransform: async (_input, output) => {
       const messages = output.messages;
-      if (!messages || messages.length === 0) {
+      if (!messages || messages.length === 0)
         return;
+      let lastUserMessageIndex = -1;
+      for (let i2 = messages.length - 1;i2 >= 0; i2--) {
+        if (messages[i2]?.info?.role === "user") {
+          lastUserMessageIndex = i2;
+          break;
+        }
       }
-      const lastMessage = messages[messages.length - 1];
-      const sessionId = lastMessage.info?.sessionID;
-      if (!sessionId) {
+      if (lastUserMessageIndex === -1)
         return;
-      }
-      {
-        const { modelID } = extractModelInfo(messages);
-        if (modelID && isLowCapabilityModel(modelID)) {
-          for (const msg of messages) {
-            if (msg.info?.role !== "system")
-              continue;
-            for (const part of msg.parts) {
-              try {
-                if (part == null)
-                  continue;
-                if (part.type !== "text" || typeof part.text !== "string")
-                  continue;
-                if (!part.text.includes("<!-- BEHAVIORAL_GUIDANCE_START -->"))
-                  continue;
-                part.text = part.text.replace(/<!--\s*BEHAVIORAL_GUIDANCE_START\s*-->[\s\S]*?<!--\s*BEHAVIORAL_GUIDANCE_END\s*-->/g, "[Enforcement: programmatic gates active]");
-              } catch {}
-            }
+      const lastUserMessage = messages[lastUserMessageIndex];
+      if (!lastUserMessage?.parts)
+        return;
+      const agent = lastUserMessage.info?.agent;
+      const strippedAgent = agent ? stripKnownSwarmPrefix(agent) : undefined;
+      if (strippedAgent && strippedAgent !== "architect")
+        return;
+      const textPartIndex = lastUserMessage.parts.findIndex((p) => p?.type === "text" && p.text !== undefined);
+      if (textPartIndex === -1)
+        return;
+      const textPart = lastUserMessage.parts[textPartIndex];
+      const text = textPart.text ?? "";
+      const taskDisclosureSessionID = lastUserMessage.info?.sessionID;
+      if (taskDisclosureSessionID) {
+        const taskSession = ensureAgentSession(taskDisclosureSessionID);
+        const currentTaskIdForWindow = taskSession.currentTaskId;
+        if (currentTaskIdForWindow) {
+          const taskLineRegex = /^[ \t]*-[ \t]*(?:\[[ x]\][ \t]+)?(\d+\.\d+(?:\.\d+)*)[:. ].*/gm;
+          const taskLines = [];
+          taskLineRegex.lastIndex = 0;
+          let regexMatch = taskLineRegex.exec(text);
+          while (regexMatch !== null) {
+            taskLines.push({
+              line: regexMatch[0],
+              taskId: regexMatch[1],
+              index: regexMatch.index
+            });
+            regexMatch = taskLineRegex.exec(text);
+          }
+          if (taskLines.length > 5) {
+            const currentIdx = taskLines.findIndex((t) => t.taskId === currentTaskIdForWindow);
+            const windowStart = Math.max(0, currentIdx - 2);
+            const windowEnd = Math.min(taskLines.length - 1, currentIdx + 3);
+            const visibleTasks = taskLines.slice(windowStart, windowEnd + 1);
+            const hiddenBefore = windowStart;
+            const hiddenAfter = taskLines.length - 1 - windowEnd;
+            const totalTasks = taskLines.length;
+            const visibleCount = visibleTasks.length;
+            const firstTaskIndex = taskLines[0].index;
+            const lastTask = taskLines[taskLines.length - 1];
+            const lastTaskEnd = lastTask.index + lastTask.line.length;
+            const before = text.slice(0, firstTaskIndex);
+            const after = text.slice(lastTaskEnd);
+            const visibleLines = visibleTasks.map((t) => t.line).join(`
+`);
+            const trimComment = `[Task window: showing ${visibleCount} of ${totalTasks} tasks]`;
+            const trimmedMiddle = (hiddenBefore > 0 ? `[...${hiddenBefore} tasks hidden...]
+` : "") + visibleLines + (hiddenAfter > 0 ? `
+[...${hiddenAfter} tasks hidden...]` : "");
+            textPart.text = `${before}${trimmedMiddle}
+${trimComment}${after}`;
           }
         }
       }
-      const session = swarmState.agentSessions.get(sessionId);
-      const activeAgent = swarmState.activeAgent.get(sessionId);
-      const isArchitectSession = activeAgent ? stripKnownSwarmPrefix(activeAgent) === ORCHESTRATOR_NAME : session ? stripKnownSwarmPrefix(session.agentName) === ORCHESTRATOR_NAME : false;
-      if (isArchitectSession && session && session.architectWriteCount > 0) {
-        const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
-        if (textPart2) {
-          textPart2.text = `\u26A0\uFE0F SELF-CODING DETECTED: You have used ${session.architectWriteCount} write-class tool(s) directly on non-.swarm/ files.
-` + `Rule 1 requires ALL coding to be delegated to @coder.
-` + `If you have not exhausted QA_RETRY_LIMIT coder failures on this task, STOP and delegate.
-
-` + textPart2.text;
+      const sessionID = lastUserMessage.info?.sessionID;
+      const planTaskId = extractPlanTaskId(text);
+      const taskIdMatch = text.match(/TASK:\s*(.+?)(?:\n|$)/i);
+      const taskIdFromLine = taskIdMatch ? taskIdMatch[1].trim() : null;
+      const currentTaskId = planTaskId ?? taskIdFromLine;
+      const coderDelegationPattern = /(?:^|\n)\s*(?:\w+_)?coder\s*\n\s*TASK:/i;
+      const isCoderDelegation = coderDelegationPattern.test(text);
+      const priorCoderTaskId = sessionID ? ensureAgentSession(sessionID).lastCoderDelegationTaskId ?? null : null;
+      if (sessionID && isCoderDelegation && currentTaskId) {
+        const session = ensureAgentSession(sessionID);
+        session.lastCoderDelegationTaskId = currentTaskId;
+        const fileDirPattern = /^FILE:\s*(.+)$/gm;
+        const declaredFiles = [];
+        for (const match of text.matchAll(fileDirPattern)) {
+          const filePath = match[1].trim();
+          if (filePath.length > 0 && !declaredFiles.includes(filePath)) {
+            declaredFiles.push(filePath);
+          }
+        }
+        session.declaredCoderScope = declaredFiles.length > 0 ? declaredFiles : null;
+        try {
+          advanceTaskState(session, currentTaskId, "coder_delegated");
+        } catch (err2) {
+          console.warn(`[delegation-gate] state machine warn: ${err2 instanceof Error ? err2.message : String(err2)}`);
         }
       }
-      if (isArchitectSession && session && session.selfFixAttempted && session.lastGateFailure && Date.now() - session.lastGateFailure.timestamp < 120000) {
-        const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
-        if (textPart2 && !textPart2.text.includes("SELF-FIX DETECTED")) {
-          textPart2.text = `\u26A0\uFE0F SELF-FIX DETECTED: Gate '${session.lastGateFailure.tool}' failed on task ${session.lastGateFailure.taskId}.
-` + `You are now using a write tool instead of delegating to @coder.
-` + `GATE FAILURE RESPONSE RULES require: return to coder with structured rejection.
-` + `Do NOT fix gate failures yourself.
+      if (sessionID && !isCoderDelegation && currentTaskId) {
+        const session = ensureAgentSession(sessionID);
+        if (session.architectWriteCount > 0 && session.lastCoderDelegationTaskId !== currentTaskId) {
+          const warningText2 = `\u26A0\uFE0F DELEGATION VIOLATION: Code modifications detected for task ${currentTaskId} with zero coder delegations.
+Rule 1: DELEGATE all coding to coder. You do NOT write code.`;
+          textPart.text = `${warningText2}
 
-` + textPart2.text;
-          session.selfFixAttempted = false;
+${text}`;
         }
       }
-      const isArchitectSessionForGates = activeAgent ? stripKnownSwarmPrefix(activeAgent) === ORCHESTRATOR_NAME : session ? stripKnownSwarmPrefix(session.agentName) === ORCHESTRATOR_NAME : false;
-      if (isArchitectSessionForGates && session) {
-        const taskId = getCurrentTaskId(sessionId);
-        if (!session.partialGateWarningsIssuedForTask.has(taskId)) {
-          const gates = session.gateLog.get(taskId);
-          const REQUIRED_GATES = [
-            "diff",
-            "syntax_check",
-            "placeholder_scan",
-            "lint",
-            "pre_check_batch"
-          ];
-          const missingGates = [];
-          if (!gates) {
-            missingGates.push(...REQUIRED_GATES);
-          } else {
-            for (const gate of REQUIRED_GATES) {
-              if (!gates.has(gate)) {
-                missingGates.push(gate);
-              }
-            }
-          }
-          let currentPhaseForCheck = 1;
-          try {
-            const plan = await loadPlan(directory);
-            if (plan) {
-              const phaseString = extractCurrentPhaseFromPlan2(plan);
-              currentPhaseForCheck = extractPhaseNumber(phaseString);
+      {
+        const deliberationSessionID = lastUserMessage.info?.sessionID;
+        if (deliberationSessionID) {
+          if (!/^[a-zA-Z0-9_-]{1,128}$/.test(deliberationSessionID)) {} else {
+            const deliberationSession = ensureAgentSession(deliberationSessionID);
+            const lastGate = deliberationSession.lastGateOutcome;
+            let preamble;
+            if (lastGate) {
+              const gateResult = lastGate.passed ? "PASSED" : "FAILED";
+              const sanitizedGate = lastGate.gate.replace(/\[/g, "(").replace(/\]/g, ")").replace(/[\r\n]/g, " ").slice(0, 64);
+              const sanitizedTaskId = lastGate.taskId.replace(/\[/g, "(").replace(/\]/g, ")").replace(/[\r\n]/g, " ").slice(0, 32);
+              preamble = `[Last gate: ${sanitizedGate} ${gateResult} for task ${sanitizedTaskId}]
+[DELIBERATE: Before proceeding \u2014 what is the SINGLE next task? What gates must it pass?]`;
+            } else {
+              preamble = `[DELIBERATE: Identify the first task from the plan. What gates must it pass before marking complete?]`;
             }
-          } catch {}
-          const hasReviewerDelegation = (session.reviewerCallCount.get(currentPhaseForCheck) ?? 0) > 0;
-          if (missingGates.length > 0 || !hasReviewerDelegation) {
-            const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
-            if (textPart2 && !textPart2.text.includes("PARTIAL GATE VIOLATION")) {
-              const missing = [...missingGates];
-              if (!hasReviewerDelegation) {
-                missing.push("reviewer/test_engineer (no delegations this phase)");
-              }
-              session.partialGateWarningsIssuedForTask.add(taskId);
-              textPart2.text = `\u26A0\uFE0F PARTIAL GATE VIOLATION: Task may be marked complete but missing gates: [${missing.join(", ")}].
-` + `The QA gate is ALL steps or NONE. Revert any \u2713 marks and run the missing gates.
+            const currentText = textPart.text ?? "";
+            textPart.text = `${preamble}
 
-` + textPart2.text;
-            }
+${currentText}`;
           }
         }
       }
-      if (isArchitectSessionForGates && session && session.scopeViolationDetected) {
-        session.scopeViolationDetected = false;
-        const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
-        if (textPart2 && session.lastScopeViolation) {
-          textPart2.text = `\u26A0\uFE0F SCOPE VIOLATION: ${session.lastScopeViolation}
-` + `Only modify files within your declared scope. Request scope expansion from architect if needed.
-
-` + textPart2.text;
+      if (!isCoderDelegation)
+        return;
+      const warnings = [];
+      if (text.length > delegationMaxChars) {
+        warnings.push(`Delegation exceeds recommended size (${text.length} chars, limit ${delegationMaxChars}). Consider splitting into smaller tasks.`);
+      }
+      const fileMatches = text.match(/^FILE:/gm);
+      if (fileMatches && fileMatches.length > 1) {
+        warnings.push(`Multiple FILE: directives detected (${fileMatches.length}). Each coder task should target ONE file.`);
+      }
+      const taskMatches = text.match(/^TASK:/gm);
+      if (taskMatches && taskMatches.length > 1) {
+        warnings.push(`Multiple TASK: sections detected (${taskMatches.length}). Send ONE task per coder call.`);
+      }
+      const batchingPattern = /\b(?:and also|then also|additionally|as well as|along with|while you'?re at it)[.,]?\b/gi;
+      const batchingMatches = text.match(batchingPattern);
+      if (batchingMatches && batchingMatches.length > 0) {
+        warnings.push(`Batching language detected (${batchingMatches.join(", ")}). Break compound objectives into separate coder calls.`);
+      }
+      const taskLine = extractTaskLine(text);
+      if (taskLine) {
+        const andPattern = /\s+and\s+(update|add|remove|modify|refactor|implement|create|delete|fix|change|build|deploy|write|test|move|rename|extend|extract|convert|migrate|upgrade|replace)\b/i;
+        if (andPattern.test(taskLine)) {
+          warnings.push('TASK line contains "and" connecting separate actions');
         }
       }
-      if (isArchitectSessionForGates && session && session.catastrophicPhaseWarnings) {
-        try {
-          const plan = await loadPlan(directory);
-          if (plan?.phases) {
-            for (const phase of plan.phases) {
-              if (phase.status === "complete") {
-                const phaseNum = phase.id;
-                if (!session.catastrophicPhaseWarnings.has(phaseNum)) {
-                  const reviewerCount = session.reviewerCallCount.get(phaseNum) ?? 0;
-                  if (reviewerCount === 0) {
-                    session.catastrophicPhaseWarnings.add(phaseNum);
-                    const textPart2 = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
-                    if (textPart2 && !textPart2.text.includes("CATASTROPHIC VIOLATION")) {
-                      textPart2.text = `[CATASTROPHIC VIOLATION: Phase ${phaseNum} completed with ZERO reviewer delegations.` + ` Every coder task requires reviewer approval. Recommend retrospective review of all Phase ${phaseNum} tasks.]
-
-` + textPart2.text;
-                    }
-                    break;
-                  }
-                }
+      if (sessionID) {
+        const delegationChain = swarmState.delegationChains.get(sessionID);
+        if (delegationChain && delegationChain.length >= 2) {
+          const coderIndices = [];
+          for (let i2 = delegationChain.length - 1;i2 >= 0; i2--) {
+            if (stripKnownSwarmPrefix(delegationChain[i2].to).includes("coder")) {
+              coderIndices.unshift(i2);
+              if (coderIndices.length === 2)
+                break;
+            }
+          }
+          if (coderIndices.length === 2) {
+            const prevCoderIndex = coderIndices[0];
+            const betweenCoders = delegationChain.slice(prevCoderIndex + 1);
+            const hasReviewer = betweenCoders.some((d) => stripKnownSwarmPrefix(d.to) === "reviewer");
+            const hasTestEngineer = betweenCoders.some((d) => stripKnownSwarmPrefix(d.to) === "test_engineer");
+            const session = ensureAgentSession(sessionID);
+            const priorTaskStuckAtCoder = priorCoderTaskId !== null && getTaskState(session, priorCoderTaskId) === "coder_delegated";
+            if (!hasReviewer || !hasTestEngineer || priorTaskStuckAtCoder) {
+              if (session.qaSkipCount >= 1) {
+                const skippedTasks = session.qaSkipTaskIds.join(", ");
+                throw new Error(`\uD83D\uDED1 QA GATE ENFORCEMENT: ${session.qaSkipCount + 1} consecutive coder delegations without reviewer/test_engineer. ` + `Skipped tasks: [${skippedTasks}]. ` + `DELEGATE to reviewer and test_engineer NOW before any further coder work.`);
               }
+              session.qaSkipCount++;
+              session.qaSkipTaskIds.push(currentTaskId ?? "unknown");
+              warnings.push(`\u26A0\uFE0F PROTOCOL VIOLATION: Previous coder task completed, but QA gate was skipped. ` + `You MUST delegate to reviewer (code review) and test_engineer (test execution) ` + `before starting a new coder task. Review RULES 7-8 in your system prompt.`);
             }
           }
-        } catch {}
+        }
       }
-      const targetWindow = getActiveWindow(sessionId);
-      if (!targetWindow || !targetWindow.warningIssued && !targetWindow.hardLimitHit) {
+      if (warnings.length === 0)
         return;
+      const warningLines = warnings.map((w) => `Detected signal: ${w}`);
+      const warningText = `\u26A0\uFE0F BATCH DETECTED: Your coder delegation appears to contain multiple tasks.
+Rule 3: ONE task per coder call. Split this into separate delegations.
+${warningLines.join(`
+`)}`;
+      const originalText = textPart.text ?? "";
+      textPart.text = `${warningText}
+
+${originalText}`;
+    },
+    toolAfter
+  };
+}
+// src/hooks/delegation-sanitizer.ts
+init_utils2();
+import * as fs13 from "fs";
+var SANITIZATION_PATTERNS = [
+  /\b\d+(st|nd|rd|th)\s+(attempt|try|time)\b/gi,
+  /\b(5th|fifth|final|last)\s+attempt\b/gi,
+  /attempt\s+\d+\s*\/\s*\d+/gi,
+  /\bthis\s+is\s+(the\s+)?(5th|fifth|final|last)\b/gi,
+  /\bwe('re|\s+are)\s+(behind|late)\b/gi,
+  /\buser\s+is\s+waiting\b/gi,
+  /\bship\s+(this|it)\s+now\b/gi,
+  /\bor\s+I('ll|\s+will)\s+(stop|halt|alert)\b/gi,
+  /\bor\s+all\s+work\s+stops\b/gi,
+  /\bthis\s+will\s+(delay|block)\s+everything\b/gi,
+  /\b(I'm|I\s+am)\s+(frustrated|disappointed)\b/gi
+];
+function sanitizeMessage(text, patterns = SANITIZATION_PATTERNS) {
+  let sanitized = text;
+  const stripped = [];
+  for (const pattern of patterns) {
+    const matches = sanitized.match(pattern);
+    if (matches) {
+      stripped.push(...matches);
+      sanitized = sanitized.replace(pattern, "");
+    }
+  }
+  sanitized = sanitized.replace(/\s+/g, " ").trim();
+  return {
+    sanitized,
+    modified: stripped.length > 0,
+    stripped
+  };
+}
+function isGateAgentMessage(agentName) {
+  const gateAgents = ["reviewer", "test_engineer", "critic", "test-engineer"];
+  const normalized = agentName.toLowerCase().replace(/-/g, "_");
+  return gateAgents.includes(normalized);
+}
+function createDelegationSanitizerHook(directory) {
+  const hook = async (_input, output) => {
+    const messages = output?.messages;
+    if (!messages || !Array.isArray(messages)) {
+      return;
+    }
+    for (const message of messages) {
+      const info2 = message?.info;
+      if (!info2)
+        continue;
+      const agent = info2.agent;
+      if (!agent || !isGateAgentMessage(agent)) {
+        continue;
       }
-      const textPart = lastMessage.parts.find((part) => part.type === "text" && typeof part.text === "string");
-      if (!textPart) {
-        return;
+      if (!message.parts || !Array.isArray(message.parts)) {
+        continue;
       }
-      if (targetWindow.hardLimitHit) {
-        textPart.text = `[\uD83D\uDED1 LIMIT REACHED: Your resource budget is exhausted. Do not make additional tool calls. Return a summary of your progress and any remaining work.]
-
-` + textPart.text;
-      } else if (targetWindow.warningIssued) {
-        const reasonSuffix = targetWindow.warningReason ? ` (${targetWindow.warningReason})` : "";
-        textPart.text = `[\u26A0\uFE0F APPROACHING LIMITS${reasonSuffix}: You still have capacity to finish your current step. Complete what you're working on, then return your results.]
-
-` + textPart.text;
+      for (const part of message.parts) {
+        if (part?.type !== "text" || !part.text) {
+          continue;
+        }
+        const originalText = part.text;
+        const result = sanitizeMessage(originalText);
+        if (result.modified) {
+          part.text = result.sanitized;
+          try {
+            const eventsPath = validateSwarmPath(directory, "events.jsonl");
+            const event = {
+              event: "message_sanitized",
+              agent,
+              original_length: originalText.length,
+              stripped_count: result.stripped.length,
+              stripped_patterns: result.stripped,
+              timestamp: new Date().toISOString()
+            };
+            fs13.appendFileSync(eventsPath, `${JSON.stringify(event)}
+`, "utf-8");
+          } catch {}
+        }
       }
     }
   };
+  return safeHook(hook);
 }
-function hashArgs(args2) {
-  try {
-    if (typeof args2 !== "object" || args2 === null) {
-      return 0;
+// src/hooks/delegation-tracker.ts
+init_constants();
+init_schema();
+function createDelegationTrackerHook(config3, guardrailsEnabled = true) {
+  return async (input, _output) => {
+    const now = Date.now();
+    const debugSession = swarmState.agentSessions.get(input.sessionID);
+    const taskStates = debugSession?.taskWorkflowStates ? Object.entries(debugSession.taskWorkflowStates) : [];
+    const statesSummary = taskStates.length > 0 ? taskStates.map(([k, v]) => `${k}=${v}`).join(",") : "(none)";
+    console.log(`[swarm-debug-task] chat.message | session=${input.sessionID} agent=${input.agent ?? "(none)"} prevAgent=${swarmState.activeAgent.get(input.sessionID) ?? "(none)"} taskStates=[${statesSummary}]`);
+    if (!input.agent || input.agent === "") {
+      const session2 = swarmState.agentSessions.get(input.sessionID);
+      if (session2?.delegationActive) {
+        session2.delegationActive = false;
+        swarmState.activeAgent.set(input.sessionID, ORCHESTRATOR_NAME);
+        ensureAgentSession(input.sessionID, ORCHESTRATOR_NAME);
+        updateAgentEventTime(input.sessionID);
+      } else if (!session2) {
+        ensureAgentSession(input.sessionID, ORCHESTRATOR_NAME);
+      }
+      return;
     }
-    const sortedKeys = Object.keys(args2).sort();
-    return Number(Bun.hash(JSON.stringify(args2, sortedKeys)));
-  } catch {
-    return 0;
-  }
+    const agentName = input.agent;
+    const previousAgent = swarmState.activeAgent.get(input.sessionID);
+    swarmState.activeAgent.set(input.sessionID, agentName);
+    const strippedAgent = stripKnownSwarmPrefix(agentName);
+    const isArchitect2 = strippedAgent === ORCHESTRATOR_NAME;
+    const session = ensureAgentSession(input.sessionID, agentName);
+    session.delegationActive = !isArchitect2;
+    recordPhaseAgentDispatch(input.sessionID, agentName);
+    if (!isArchitect2 && guardrailsEnabled) {
+      beginInvocation(input.sessionID, agentName);
+    }
+    const delegationTrackerEnabled = config3.hooks?.delegation_tracker === true;
+    const delegationGateEnabled = config3.hooks?.delegation_gate !== false;
+    if ((delegationTrackerEnabled || delegationGateEnabled) && previousAgent && previousAgent !== agentName) {
+      const entry = {
+        from: previousAgent,
+        to: agentName,
+        timestamp: now
+      };
+      if (!swarmState.delegationChains.has(input.sessionID)) {
+        swarmState.delegationChains.set(input.sessionID, []);
+      }
+      const chain = swarmState.delegationChains.get(input.sessionID);
+      chain?.push(entry);
+      if (delegationTrackerEnabled) {
+        swarmState.pendingEvents++;
+      }
+    }
+  };
 }
 // src/hooks/messages-transform.ts
 function consolidateSystemMessages(messages) {
@@ -60436,6 +60567,13 @@ ${footerLines.join(`
 }
 
 // src/index.ts
+function debugTaskLog(hook, ctx, extra) {
+  const activeAgent = swarmState.activeAgent.get(ctx.sessionID);
+  const session = swarmState.agentSessions.get(ctx.sessionID);
+  const taskStates = session?.taskWorkflowStates ? Object.entries(session.taskWorkflowStates) : [];
+  const statesSummary = taskStates.length > 0 ? taskStates.map(([k, v]) => `${k}=${v}`).join(",") : "(none)";
+  console.log(`[swarm-debug-task] ${hook} | session=${ctx.sessionID} callID=${ctx.callID ?? "(n/a)"} agent=${activeAgent ?? "(none)"} taskStates=[${statesSummary}]`, extra ? JSON.stringify(extra) : "");
+}
 var OpenCodeSwarm = async (ctx) => {
   const { config: config3, loadedFromFile } = loadPluginConfigWithMeta(ctx.directory);
   await loadSnapshot(ctx.directory);
@@ -60730,6 +60868,10 @@ var OpenCodeSwarm = async (ctx) => {
     "experimental.session.compacting": compactionHook["experimental.session.compacting"],
     "command.execute.before": safeHook(commandHandler),
     "tool.execute.before": async (input, output) => {
+      debugTaskLog("tool.execute.before", {
+        sessionID: input.sessionID,
+        callID: input.callID
+      }, { tool: input.tool });
       if (!swarmState.activeAgent.has(input.sessionID)) {
         swarmState.activeAgent.set(input.sessionID, ORCHESTRATOR_NAME);
       }
@@ -60749,6 +60891,10 @@ var OpenCodeSwarm = async (ctx) => {
       await safeHook(activityHooks.toolBefore)(input, output);
     },
     "tool.execute.after": async (input, output) => {
+      debugTaskLog("tool.execute.after", {
+        sessionID: input.sessionID,
+        callID: input.callID
+      }, { tool: input.tool });
       await activityHooks.toolAfter(input, output);
       await guardrailsHooks.toolAfter(input, output);
       await safeHook(delegationGateHooks.toolAfter)(input, output);
@@ -60778,6 +60924,9 @@ var OpenCodeSwarm = async (ctx) => {
       }
       if (input.tool === "task") {
         const sessionId = input.sessionID;
+        const beforeSession = swarmState.agentSessions.get(sessionId);
+        const beforeStates = beforeSession?.taskWorkflowStates ? Object.entries(beforeSession.taskWorkflowStates).map(([k, v]) => `${k}=${v}`).join(",") : "(none)";
+        console.log(`[swarm-debug-task] tool.execute.after.taskHandoff | session=${sessionId} BEFORE: taskStates=[${beforeStates}]`);
         swarmState.activeAgent.set(sessionId, ORCHESTRATOR_NAME);
         ensureAgentSession(sessionId, ORCHESTRATOR_NAME);
         const session = swarmState.agentSessions.get(sessionId);
@@ -60785,6 +60934,10 @@ var OpenCodeSwarm = async (ctx) => {
           session.delegationActive = false;
           session.lastAgentEventTime = Date.now();
         }
+        const afterSession = swarmState.agentSessions.get(sessionId);
+        const afterStates = afterSession?.taskWorkflowStates ? Object.entries(afterSession.taskWorkflowStates).map(([k, v]) => `${k}=${v}`).join(",") : "(none)";
+        const afterActive = swarmState.activeAgent.get(sessionId);
+        console.log(`[swarm-debug-task] tool.execute.after.taskHandoff | session=${sessionId} AFTER: activeAgent=${afterActive} delegationActive=${afterSession?.delegationActive} taskStates=[${afterStates}]`);
       }
     },
     "chat.message": safeHook(delegationHandler),