opencode-swarm 7.125.3 → 7.125.5

package/dist/cli/{index-sa3dgpmc.js → index-yq4s3q43.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-rp5msv7n.js";
+} from "./index-1htanqp1.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,7 +9,7 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-45mvd5q7.js";
+} from "./index-1012f47p.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-q27bajqb.js";

package/dist/cli/index.js

@@ -7,34 +7,34 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-m5e00g9s.js";
-import"./index-xezv6tdw.js";
-import"./index-pk099nqv.js";
+} from "./index-s6hskqg6.js";
+import"./index-dezgmvtw.js";
+import"./index-jt7hnr7q.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-01n43w2p.js";
-import"./index-vdfewvn5.js";
-import"./index-8tjbq2ej.js";
+import"./index-gd5w3ef8.js";
+import"./index-0f45t7xy.js";
+import"./index-e315gwc9.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-sa3dgpmc.js";
-import"./index-rp5msv7n.js";
+import"./index-yq4s3q43.js";
+import"./index-1htanqp1.js";
 import"./index-rtry5xyf.js";
-import"./index-45mvd5q7.js";
-import"./index-fm4zfxnr.js";
+import"./index-1012f47p.js";
+import"./index-gbnpz7rh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-ambnwnmt.js";
+import"./index-74xejn4v.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants
-} from "./index-414r47r7.js";
+} from "./index-r1gdkn2d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";

package/dist/cli/{knowledge-escalator-gr8qd7kz.js → knowledge-escalator-h3hg7ek7.js}

@@ -8,9 +8,9 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-vdfewvn5.js";
-import"./index-45mvd5q7.js";
-import"./index-fm4zfxnr.js";
+} from "./index-0f45t7xy.js";
+import"./index-1012f47p.js";
+import"./index-gbnpz7rh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{knowledge-events-q83g3f8z.js → knowledge-events-jtr66wxz.js}

@@ -26,7 +26,7 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-fm4zfxnr.js";
+} from "./index-gbnpz7rh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-store-qq3w5yt8.js → knowledge-store-69ttjjjs.js}

@@ -40,7 +40,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-45mvd5q7.js";
+} from "./index-1012f47p.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-7jhq8yam.js → knowledge-validator-yn06rh13.js}

@@ -23,11 +23,11 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-sa3dgpmc.js";
-import"./index-rp5msv7n.js";
+} from "./index-yq4s3q43.js";
+import"./index-1htanqp1.js";
 import"./index-rtry5xyf.js";
-import"./index-45mvd5q7.js";
-import"./index-fm4zfxnr.js";
+import"./index-1012f47p.js";
+import"./index-gbnpz7rh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scan-cursor-fa5sy36q.js → scan-cursor-r0w2p5gz.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-8tjbq2ej.js";
-import"./index-45mvd5q7.js";
+} from "./index-e315gwc9.js";
+import"./index-1012f47p.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{schema-bw68my66.js → schema-69z8w1ka.js}

@@ -89,7 +89,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-414r47r7.js";
+} from "./index-r1gdkn2d.js";
 import"./index-bk5tah7q.js";
 import"./index-zjygnfay.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{skill-generator-ffc1agyw.js → skill-generator-a7xfyddq.js}

@@ -33,12 +33,12 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-01n43w2p.js";
-import"./index-sa3dgpmc.js";
-import"./index-rp5msv7n.js";
+} from "./index-gd5w3ef8.js";
+import"./index-yq4s3q43.js";
+import"./index-1htanqp1.js";
 import"./index-rtry5xyf.js";
-import"./index-45mvd5q7.js";
-import"./index-fm4zfxnr.js";
+import"./index-1012f47p.js";
+import"./index-gbnpz7rh.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/commands/abort-pr-workflow.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Handle /swarm abort-pr-workflow command.
+ *
+ * Human-only escape hatch for an unrecoverable PR_REVIEW / PR_FEEDBACK
+ * mechanical gate. When the architect cannot reach `complete_pr_workflow`
+ * (compound `git fetch && git checkout` rejected as read-only shell syntax,
+ * missing PR ref, model confusion, suspended wake budget, …), the user runs
+ * this to clear the durable gate and stop the auto-resume loop without
+ * depending on the trapped model.
+ *
+ * The command is `toolPolicy: 'restricted'` — the agent cannot run it via
+ * `swarm_command`; the agent must instead call the `abort_pr_workflow` tool
+ * (or ask the user to run this command). Both paths funnel into
+ * `abortPrWorkflow`, which is fail-closed on armed publication and on
+ * in-flight lanes.
+ */
+export declare function handleAbortPrWorkflowCommand(directory: string, args: string[], sessionID: string): Promise<string>;

package/dist/commands/registry.d.ts

@@ -513,6 +513,14 @@ export declare const COMMAND_REGISTRY: {
         readonly category: "agent";
         readonly toolPolicy: "none";
     };
+    readonly 'abort-pr-workflow': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Clear a stuck PR_REVIEW/PR_FEEDBACK mechanical gate and stop the auto-resume loop [mode] [reason]";
+        readonly args: "[PR_REVIEW|PR_FEEDBACK] [reason...]";
+        readonly details: "Human-only escape hatch for an unrecoverable PR_REVIEW or PR_FEEDBACK mechanical gate. When the architect cannot reach complete_pr_workflow — for example a compound `git fetch && git checkout` was rejected as read-only shell syntax, the PR head cannot be fetched, or the working tree is on the wrong branch — running this clears the durable gate state for the current session and stops the auto-resume loop without depending on the trapped model. The agent itself cannot run this command; it must call the abort_pr_workflow tool (or ask you to run this command). Both paths funnel into the same fail-closed abortPrWorkflow hook, which refuses while the workflow is armed for publication or while PR workflow lanes are still in flight. An audit event is appended to .swarm/events.jsonl.";
+        readonly category: "utility";
+        readonly toolPolicy: "restricted";
+    };
     readonly 'pr-review': {
         readonly handler: (ctx: CommandContext) => CommandResult;
         readonly description: "Launch deep PR review with multi-lane analysis [url] [--council]";

package/dist/hooks/delegation-gate.d.ts

@@ -189,8 +189,42 @@ export declare function extractSpecRequirementBodyById(specText: string, id: str
  * fold is symmetric (both sides go through this one function), so it can only
  * REDUCE false-blocks — it never opens a bypass, since covered/uncovered still
  * differ by whole words, not punctuation.
+ *
+ * Issue #1896: encoding tolerance. Canonicalizes Unicode via NFC first (so a
+ * decomposed accent vs its composed form compare equal — same text, different
+ * byte encoding), and folds the section sign `§` (U+00A7) — and the common
+ * Latin-1 mojibake `§` a non-UTF-8 web save produces — to the spaced word token
+ * " section " so `§4.2`, `§ 4.2`, `§ 4.2`, and `section 4.2` all compare equal.
+ * Both additions are symmetric and information-preserving, so they can only
+ * reduce false-blocks. A literal `??` (U+003F run, from a save that DESTROYED the
+ * `§`) is NOT recoverable here — the coverage-miss diagnostic surfaces it instead.
  */
 export declare function normalizeAcceptanceText(s: string): string;
+/**
+ * Issue #1896: bounded, diagnostic description of WHY an ACCEPTANCE text failed
+ * to cover a requirement body. The coverage check is a SUBSTRING match
+ * (`acceptance.includes(body)`), so "first divergence" is defined against the
+ * best-aligning window: the longest prefix of the normalized expected body that
+ * still appears as a substring of the normalized acceptance. `divergenceOffset`
+ * is the length of that matched prefix; the snippets show the expected text at
+ * the break and the acceptance text where the match ran out. All scans and
+ * snippets are capped so this stays O(1)-bounded on large spec bodies. When the
+ * raw (pre-normalization) text carries mojibake markers (a `??` run, U+FFFD, or a
+ * Latin-1 `Â`-prefixed byte), a corruption hint is attached — this is the signal
+ * that unblocks the destroyed-`§`-as-`??` case the diagnostic exists for.
+ */
+export interface CoverageMissDiagnostic {
+    expectedSnippet: string;
+    foundSnippet: string;
+    divergenceOffset: number;
+    corruptionHint?: string;
+}
+export declare function describeCoverageMiss(params: {
+    rawExpectedBody: string;
+    rawAcceptanceText: string;
+    normalizedExpected: string;
+    normalizedAcceptance: string;
+}): CoverageMissDiagnostic;
 /**
  * FR-001/FR-002/FR-005/SC-001/SC-002/SC-006 (issue #1687): mechanical coverage
  * check that the ACCEPTANCE text CONTAINS the verbatim requirement body for each
@@ -213,6 +247,7 @@ export declare function checkAcceptanceCoversFrRefs(params: {
 }): {
     covered: boolean;
     missingId?: string;
+    diagnostic?: CoverageMissDiagnostic;
 };
 interface MessageInfo {
     role: string;

package/dist/hooks/pr-workflow-gate.d.ts

@@ -118,6 +118,38 @@ export declare function activatePrWorkflow(directory: string, sessionID: string,
 }): Promise<PrWorkflowGateState>;
 export declare function readPrWorkflowGateState(directory: string, sessionID: string): Promise<PrWorkflowGateState | null>;
 export declare function clearPrWorkflowGateState(directory: string, sessionID: string, expectedRevision?: number): Promise<void>;
+/**
+ * Abort an active PR workflow gate without reaching terminal completion.
+ *
+ * This is the escape hatch for the deadlock where `/swarm pr-review` activates
+ * a PR_REVIEW gate without binding a PR head and the architect cannot reach
+ * `completePrWorkflow` (compound `git fetch && git checkout` rejected by the
+ * read-only shell classifier, missing PR ref, model confusion, etc.). Without
+ * this path the durable gate is permanent for the session and the response
+ * gate's auto-resume loop runs unbounded.
+ *
+ * Fail-closed semantics, checked in order:
+ *   1. Authorization: operates on the raw caller `sessionID` only. A lane or
+ *      child session whose ID has no gate record throws "no active gate" —
+ *      lanes must not abort the controller's gate.
+ *   2. Mode match when `expectedMode` is supplied.
+ *   3. Refuses while `prFeedbackReadyToPublish` is set — clearing an armed
+ *      gate would drop the immutable-commit binding and leave a half-published
+ *      commit. The tool gate refuses armed abort too (defense in depth).
+ *   4. Refuses while open `swarm-pr-*` delegations exist, matching
+ *      `completePrWorkflow` — aborting mid-flight would orphan running lanes.
+ *
+ * Records a non-fatal audit event into the existing `.swarm/events.jsonl`
+ * (no new ledger file), then delegates to `clearPrWorkflowGateState`.
+ */
+export declare function abortPrWorkflow(directory: string, sessionID: string, options?: {
+    expectedMode?: PrWorkflowMode;
+    reason?: string;
+}): Promise<{
+    mode: PrWorkflowMode;
+    prHeadSha?: string;
+    openLanes: number;
+}>;
 /** Bind an active PR workflow to one immutable PR head. */
 export declare function bindPrWorkflowHead(directory: string, sessionID: string, prHeadSha: string): Promise<PrWorkflowGateState>;
 /** Bind an active PR_REVIEW workflow to one immutable merge-base scope. */

package/dist/hooks/pr-workflow-response-gate.d.ts

@@ -1,15 +1,56 @@
+/**
+ * Maximum number of consecutive unproductive auto-resumes per gated session
+ * before the response gate suspends further wakes. "Unproductive" means the
+ * durable gate's `revision` did not advance between wakes — i.e. no
+ * state-mutating controller tool (dispatch_lanes_async,
+ * write_pr_review_trigger_eval, complete_pr_workflow, recordPrReview*,
+ * bindPrReviewBase, …) made durable progress. A healthy review bumps
+ * `revision` on every successful state-mutating controller call, so the
+ * consecutive counter resets on progress and never exhausts the budget.
+ * Read-only tools (collect_lane_results polling, grep, read) intentionally do
+ * NOT bump `revision` — an architect that only polls without ever dispatching
+ * new lanes or recording trigger evaluations IS making progress on the
+ * runtime's bookkeeping but is not advancing the durable gate, so the budget
+ * treats long polling-only stretches conservatively. Only a genuinely stuck
+ * session holds `revision` constant across many idle cycles.
+ */
+export declare const DEFAULT_MAX_CONSECUTIVE_UNPRODUCTIVE_WAKES = 5;
+/**
+ * Cooldown applied ONLY between consecutive unproductive wakes. The first
+ * wake after progress is never throttled, so a review that is actively
+ * bumping `revision` never waits.
+ */
+export declare const DEFAULT_WAKE_COOLDOWN_MS = 30000;
+/**
+ * Bounded FIFO map of tracked wake budgets. Invariant 8 (session/global
+ * state): module-level state must have an explicit eviction strategy.
+ */
+export declare const MAX_TRACKED_WAKE_SESSIONS = 200;
 interface PrWorkflowResponseGateClient {
     session?: unknown;
 }
+interface WakeBudget {
+    consecutiveUnproductive: number;
+    lastWakeAt: number;
+    lastSeenRevision?: number;
+    suspended: boolean;
+}
 /**
  * Prevent an architect from bypassing PR obligations by simply emitting text.
  * The text-complete hook replaces every architect-session text part while the
  * durable gate exists; session.idle then mechanically resumes that session.
+ *
+ * The resume loop is bounded (see DEFAULT_MAX_CONSECUTIVE_UNPRODUCTIVE_WAKES)
+ * so a session that cannot make progress suspends instead of spinning
+ * forever. `textComplete` keeps rewriting text after suspension so the
+ * user-visible surface always names the recovery path.
  */
 export declare function createPrWorkflowResponseGate(options: {
     directory: string;
     client?: PrWorkflowResponseGateClient;
     wakeTimeoutMs?: number;
+    maxConsecutiveUnproductiveWakes?: number;
+    wakeCooldownMs?: number;
 }): {
     event: (input: {
         event: unknown;
@@ -19,5 +60,12 @@ export declare function createPrWorkflowResponseGate(options: {
     }, output: {
         text: string;
     }) => Promise<void>;
+    /**
+     * Test/inspection seam: returns a snapshot of the wake budget for the
+     * given session. Production code does not call this; it exists so
+     * tests can assert the consecutive counter and suspended flag
+     * without relying on `promptAsync` call counts alone.
+     */
+    _inspectWakeBudget: (sessionID: string) => WakeBudget | undefined;
 };
 export {};

package/dist/hooks/shell-write-detect.d.ts

@@ -70,7 +70,7 @@ export declare function detectInteractiveSession(command: string, shell: 'posix'
  * - Redirection operators: >, >>, >|, <<, <<- (here-docs)
  * - Write-effect builtins: cp, mv, install, ln, truncate, dd (of=)
  * - In-place editors: sed -i, perl -i, awk -i
- * - Interpreter eval: python -c/-m, node -e, bun -e, ruby -e, perl -e, php -r
+ * - Interpreter eval: python -c, node -e, bun -e, ruby -e, perl -e, php -r
  * - Network downloaders: curl -o, wget -O, scp
  * - Archive extraction: tar -x, unzip, gunzip
  * - Git destructive: git checkout --, git restore, git reset --hard, git clean -fd