opencode-swarm 7.125.6 → 7.126.1

package/.opencode/skills/brainstorm/SKILL.md

@@ -74,24 +74,28 @@ until PLAN; MODE: PLAN will choose safe parallelism automatically. Keep commit
 frequency at phase-level only.
 Now ask the user which QA gates to enable for this plan, how many parallel coders to use, the commit frequency, and auto_proceed -- do not select on their behalf. Present all four items together as one unified exchange.
 
+<!-- BEGIN QA_GATE_BODY -->
+
 Present the eleven gates with their defaults (DEFAULT_QA_GATES), parallel coder count, commit frequency, and auto_proceed as a single user-facing section. Offer the user a one-shot choice: accept defaults, or customize. The eleven gates are:
-- reviewer (default: ON) -- code review of coder output
-- test_engineer (default: ON) -- test verification of coder output
-- sme_enabled (default: ON) -- SME consultation during planning/clarification
-- critic_pre_plan (default: ON) -- critic review before plan finalization
-- sast_enabled (default: ON) -- static security scanning
-- council_mode (default: OFF) -- replaces per-task Stage B (reviewer + test_engineer) with the full 5-member council (critic, reviewer, sme, test_engineer, explorer). Requires council.enabled: true in config. (recommended for high-impact architecture, public APIs, schema/data mutation, security-sensitive code)
-- hallucination_guard (default: OFF) -- when enabled, mandatory per-phase API/signature/claim/citation verification via critic_hallucination_verifier at PHASE-WRAP; phase_complete will REJECT phase completion unless .swarm/evidence/{phase}/hallucination-guard.json exists with an APPROVED verdict (recommended for claim-heavy or research-heavy work)
-- mutation_test (default: OFF) -- when enabled, runs mutation testing on source files touched this phase via generate_mutants + mutation_test + write_mutation_evidence at PHASE-WRAP; FAIL verdict blocks phase_complete; WARN is non-blocking (recommended for projects with coverage gaps or safety-critical code)
-- phase_council (default: OFF) -- full 5-member council reviews all work in a phase holistically at phase_complete time. Requires council.enabled: true in config. (recommended for multi-task phases with cross-cutting concerns or high-risk integration)
-- drift_check (default: ON) -- when enabled, mandatory per-phase drift verification via critic_drift_verifier at PHASE-WRAP; compares implemented changes against spec.md intent; hard-blocks phase_complete when spec.md exists and drift evidence is missing or REJECTED; advisory-only when no spec.md exists (recommended for all projects with a specification)
-- final_council (default: OFF) -- when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) -- NOT the General Council -- at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
+- reviewer (default: ON) - code review of coder output
+- test_engineer (default: ON) - test verification of coder output
+- sme_enabled (default: ON) - SME consultation during planning/clarification
+- critic_pre_plan (default: ON) - critic review before plan finalization
+- sast_enabled (default: ON) - static security scanning
+- council_mode (default: OFF) - replaces per-task Stage B (reviewer + test_engineer) with the full 5-member council (critic, reviewer, sme, test_engineer, explorer). Requires council.enabled: true in config.
+- hallucination_guard (default: OFF) - when enabled, mandatory per-phase API/signature/claim/citation verification at PHASE-WRAP; phase_complete will REJECT phase completion unless .swarm/evidence/{phase}/hallucination-guard.json exists with an APPROVED verdict.
+- mutation_test (default: OFF) - when enabled, runs mutation testing on source files touched this phase via generate_mutants + mutation_test + write_mutation_evidence at PHASE-WRAP; FAIL verdict blocks phase_complete; WARN is non-blocking.
+- phase_council (default: OFF) - full 5-member council reviews all work in a phase holistically at phase_complete time. Requires council.enabled: true in config.
+- drift_check (default: ON) - mandatory per-phase drift verification via critic_drift_verifier at PHASE-WRAP; hard-blocks phase_complete when spec.md exists and drift evidence is missing or REJECTED; advisory-only when no spec.md exists.
+- final_council (default: OFF) - when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) - NOT the General Council - at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
 
 Additionally, present these three sub-items as part of the same exchange:
-- Parallel coders (default: 1, range: 1-6) -- how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files -- safe and faster, but only for tasks whose file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
+- Parallel coders (default: 1, range: 1-6) - how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files - safe and faster, but only for tasks whose declared file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
   > COMMON MISCONCEPTION: worktree isolation is baseline for standard parallel coders, governed by the parallel execution profile plus top-level `worktree.policy`. It is not provided by Lean Turbo or Epic. Do not recommend Lean Turbo or Epic to obtain worktree isolation; recommend them only for what they add beyond baseline (Lean Turbo: lane planning, file locks, phase reviewer, integrated diff; Epic: co-change awareness and auto-decide). Worktrees also do not make overlapping scopes safe: dependency readiness, file-disjoint scopes, and merge-back ownership are still required.
-- Commit frequency (default: phase-level only) -- optional per-task checkpoint commit after each task completion.
-- auto_proceed (boolean, default: false) -- when true, auto-advance to the next phase without asking "Ready for Phase N+1?"; runtime toggle via /swarm auto-proceed on|off.
+- Commit frequency (default: phase-level only) - optional per-task checkpoint commit after each task completion.
+- auto_proceed (boolean, default: false) - when true, auto-advance to the next phase without asking "Ready for Phase N+1?"; runtime toggle via /swarm auto-proceed on|off.
+
+<!-- END QA_GATE_BODY -->
 
 The user answers all four items (gates, parallel coders, commit frequency, auto_proceed) in one exchange. Wait for the user's response.
 

package/.opencode/skills/plan/SKILL.md

@@ -228,22 +228,28 @@ After `save_plan` succeeds, read `.swarm/context.md`:
 - If a `## Pending Parallelization Config` section also exists: parse the values and call `save_plan` again with `execution_profile` set to `{ parallelization_enabled: <parsed>, max_concurrent_tasks: <parsed>, council_parallel: false, locked: true }`. Then remove the section from context.md. If the plan already had `execution_profile.locked: true`, skip this step — the profile is already locked and immutable.
 - If a `## Task Completion Commit Policy` section exists: preserve it in `.swarm/context.md` (do NOT remove). This section is execution-time guidance for optional per-task checkpoint commits after `update_task_status(status="completed")`.
 - If no pending section exists, ask the user inline now. Present the eleven gates with their defaults (DEFAULT_QA_GATES), parallel coder count, commit frequency, and auto_proceed as a single user-facing section. Offer the user a one-shot choice: accept defaults, or customize. The eleven gates are:
-  - reviewer (default: ON) - code review of coder output
-  - test_engineer (default: ON) - test verification of coder output
-  - sme_enabled (default: ON) - SME consultation during planning/clarification
-  - critic_pre_plan (default: ON) - critic review before plan finalization
-  - sast_enabled (default: ON) - static security scanning
-  - council_mode (default: OFF) - replaces per-task Stage B (reviewer + test_engineer) with the full 5-member council (critic, reviewer, sme, test_engineer, explorer). Requires council.enabled: true in config.
-  - hallucination_guard (default: OFF) - mandatory per-phase API/signature/claim/citation verification at PHASE-WRAP
-  - mutation_test (default: OFF) - mutation testing on source files touched this phase at PHASE-WRAP
-  - phase_council (default: OFF) - full 5-member council reviews all work in a phase holistically at phase_complete time. Requires council.enabled: true in config.
-  - drift_check (default: ON) - mandatory per-phase drift verification at PHASE-WRAP
-  - final_council (default: OFF) - when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) -- NOT the General Council -- at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
-  Additionally, present these three sub-items as part of the same exchange:
-  - Parallel coders (default: 1, range: 1-6) - how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files - safe and faster, but only for tasks whose declared file scopes do NOT overlap. Inspect the plan and recommend a count equal to the number of dependency-ready, file-disjoint task groups (clamped 1-6); recommend 1 (serial) when scopes overlap or are unknown. State your recommendation and reasoning when you ask.
+  <!-- BEGIN QA_GATE_BODY -->
+
+Present the eleven gates with their defaults (DEFAULT_QA_GATES), parallel coder count, commit frequency, and auto_proceed as a single user-facing section. Offer the user a one-shot choice: accept defaults, or customize. The eleven gates are:
+- reviewer (default: ON) - code review of coder output
+- test_engineer (default: ON) - test verification of coder output
+- sme_enabled (default: ON) - SME consultation during planning/clarification
+- critic_pre_plan (default: ON) - critic review before plan finalization
+- sast_enabled (default: ON) - static security scanning
+- council_mode (default: OFF) - replaces per-task Stage B (reviewer + test_engineer) with the full 5-member council (critic, reviewer, sme, test_engineer, explorer). Requires council.enabled: true in config.
+- hallucination_guard (default: OFF) - when enabled, mandatory per-phase API/signature/claim/citation verification at PHASE-WRAP; phase_complete will REJECT phase completion unless .swarm/evidence/{phase}/hallucination-guard.json exists with an APPROVED verdict.
+- mutation_test (default: OFF) - when enabled, runs mutation testing on source files touched this phase via generate_mutants + mutation_test + write_mutation_evidence at PHASE-WRAP; FAIL verdict blocks phase_complete; WARN is non-blocking.
+- phase_council (default: OFF) - full 5-member council reviews all work in a phase holistically at phase_complete time. Requires council.enabled: true in config.
+- drift_check (default: ON) - mandatory per-phase drift verification via critic_drift_verifier at PHASE-WRAP; hard-blocks phase_complete when spec.md exists and drift evidence is missing or REJECTED; advisory-only when no spec.md exists.
+- final_council (default: OFF) - when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) - NOT the General Council - at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
+
+Additionally, present these three sub-items as part of the same exchange:
+- Parallel coders (default: 1, range: 1-6) - how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files - safe and faster, but only for tasks whose declared file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
   > COMMON MISCONCEPTION: worktree isolation is baseline for standard parallel coders, governed by the parallel execution profile plus top-level `worktree.policy`. It is not provided by Lean Turbo or Epic. Do not recommend Lean Turbo or Epic to obtain worktree isolation; recommend them only for what they add beyond baseline (Lean Turbo: lane planning, file locks, phase reviewer, integrated diff; Epic: co-change awareness and auto-decide). Worktrees also do not make overlapping scopes safe: dependency readiness, file-disjoint scopes, and merge-back ownership are still required.
-  - Commit frequency (default: phase-level only) - optional per-task checkpoint commit after each task completion.
-  - auto_proceed (boolean, default: false) - when true, auto-advance to the next phase without asking "Ready for Phase N+1?"; runtime toggle via /swarm auto-proceed on|off.
+- Commit frequency (default: phase-level only) - optional per-task checkpoint commit after each task completion.
+- auto_proceed (boolean, default: false) - when true, auto-advance to the next phase without asking "Ready for Phase N+1?"; runtime toggle via /swarm auto-proceed on|off.
+
+<!-- END QA_GATE_BODY -->
   The user answers all four (gates, parallel coders, commit frequency, auto_proceed) in one exchange. Wait for the user's response.
   If the user says parallel coders > 1, write a `## Pending Parallelization Config` section to `.swarm/context.md` alongside the gate selection:
   ```

package/.opencode/skills/specify/SKILL.md

@@ -53,24 +53,28 @@ Activates when: user asks to "specify", "define requirements", "write a spec", o
 5b. **QA GATE SELECTION, PARALLEL CODERS, COMMIT FREQUENCY, AND AUTO_PROCEED (dialogue only).**
 Ask the user which QA gates to enable for this plan, how many parallel coders to use, the commit frequency, and auto_proceed -- do not select on their behalf. Present all four items together as one unified exchange. Exception: when SPECIFY is running inside MODE: LOOP with `autonomy=auto`, write the balanced-speed default `## Pending QA Gate Selection` instead (reviewer, test_engineer, sme_enabled, critic_pre_plan, sast_enabled, drift_check ON; council_mode, hallucination_guard, mutation_test, phase_council, final_council OFF), keep phase-level commits, and let MODE: PLAN choose safe parallelism after task scopes exist.
 
+<!-- BEGIN QA_GATE_BODY -->
+
 Present the eleven gates with their defaults (DEFAULT_QA_GATES), parallel coder count, commit frequency, and auto_proceed as a single user-facing section. Offer the user a one-shot choice: accept defaults, or customize. The eleven gates are:
-- reviewer (default: ON) -- code review of coder output
-- test_engineer (default: ON) -- test verification of coder output
-- sme_enabled (default: ON) -- SME consultation during planning/clarification
-- critic_pre_plan (default: ON) -- critic review before plan finalization
-- sast_enabled (default: ON) -- static security scanning
-- council_mode (default: OFF) -- replaces per-task Stage B (reviewer + test_engineer) with the full 5-member council (critic, reviewer, sme, test_engineer, explorer). Requires council.enabled: true in config. (recommended for high-impact architecture, public APIs, schema/data mutation, security-sensitive code)
-- hallucination_guard (default: OFF) -- when enabled, mandatory per-phase API/signature/claim/citation verification via critic_hallucination_verifier at PHASE-WRAP; phase_complete will REJECT phase completion unless .swarm/evidence/{phase}/hallucination-guard.json exists with an APPROVED verdict (recommended for claim-heavy or research-heavy work)
-- mutation_test (default: OFF) -- when enabled, runs mutation testing on source files touched this phase via generate_mutants + mutation_test + write_mutation_evidence at PHASE-WRAP; FAIL verdict blocks phase_complete; WARN is non-blocking (recommended for projects with coverage gaps or safety-critical code)
-- phase_council (default: OFF) -- full 5-member council reviews all work in a phase holistically at phase_complete time. Requires council.enabled: true in config. (recommended for multi-task phases with cross-cutting concerns or high-risk integration)
-- drift_check (default: ON) -- when enabled, mandatory per-phase drift verification via critic_drift_verifier at PHASE-WRAP; compares implemented changes against spec.md intent; hard-blocks phase_complete when spec.md exists and drift evidence is missing or REJECTED; advisory-only when no spec.md exists (recommended for all projects with a specification)
-- final_council (default: OFF) -- when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) -- NOT the General Council -- at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
+- reviewer (default: ON) - code review of coder output
+- test_engineer (default: ON) - test verification of coder output
+- sme_enabled (default: ON) - SME consultation during planning/clarification
+- critic_pre_plan (default: ON) - critic review before plan finalization
+- sast_enabled (default: ON) - static security scanning
+- council_mode (default: OFF) - replaces per-task Stage B (reviewer + test_engineer) with the full 5-member council (critic, reviewer, sme, test_engineer, explorer). Requires council.enabled: true in config.
+- hallucination_guard (default: OFF) - when enabled, mandatory per-phase API/signature/claim/citation verification at PHASE-WRAP; phase_complete will REJECT phase completion unless .swarm/evidence/{phase}/hallucination-guard.json exists with an APPROVED verdict.
+- mutation_test (default: OFF) - when enabled, runs mutation testing on source files touched this phase via generate_mutants + mutation_test + write_mutation_evidence at PHASE-WRAP; FAIL verdict blocks phase_complete; WARN is non-blocking.
+- phase_council (default: OFF) - full 5-member council reviews all work in a phase holistically at phase_complete time. Requires council.enabled: true in config.
+- drift_check (default: ON) - mandatory per-phase drift verification via critic_drift_verifier at PHASE-WRAP; hard-blocks phase_complete when spec.md exists and drift evidence is missing or REJECTED; advisory-only when no spec.md exists.
+- final_council (default: OFF) - when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) - NOT the General Council - at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
 
 Additionally, present these three sub-items as part of the same exchange:
-- Parallel coders (default: 1, range: 1-6) -- how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files -- safe and faster, but only for tasks whose file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
+- Parallel coders (default: 1, range: 1-6) - how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files - safe and faster, but only for tasks whose declared file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
   > COMMON MISCONCEPTION: worktree isolation is baseline for standard parallel coders, governed by the parallel execution profile plus top-level `worktree.policy`. It is not provided by Lean Turbo or Epic. Do not recommend Lean Turbo or Epic to obtain worktree isolation; recommend them only for what they add beyond baseline (Lean Turbo: lane planning, file locks, phase reviewer, integrated diff; Epic: co-change awareness and auto-decide). Worktrees also do not make overlapping scopes safe: dependency readiness, file-disjoint scopes, and merge-back ownership are still required.
-- Commit frequency (default: phase-level only) -- optional per-task checkpoint commit after each task completion.
-- auto_proceed (boolean, default: false) -- when true, auto-advance to the next phase without asking "Ready for Phase N+1?"; runtime toggle via /swarm auto-proceed on|off.
+- Commit frequency (default: phase-level only) - optional per-task checkpoint commit after each task completion.
+- auto_proceed (boolean, default: false) - when true, auto-advance to the next phase without asking "Ready for Phase N+1?"; runtime toggle via /swarm auto-proceed on|off.
+
+<!-- END QA_GATE_BODY -->
 
 The user answers all four (gates, parallel coders, commit frequency, auto_proceed) in one exchange. Wait for the user's response.
 

package/.opencode/skills/swarm-pr-feedback/SKILL.md

@@ -203,20 +203,25 @@ for the Fix Planning step.
 
 ## Pre-flight: Scope Discipline
 
-The following `save_plan` / `declare_scope` mechanics apply only when those
-plugin tools are available. In other repositories or runtimes, use the native
-scope controller; if none exists, put exact allowed files and non-goals in the
-delegation and verify the resulting diff mechanically. Never bypass an
-available scope controller merely to reduce ceremony.
-
-`declare_scope({ taskId, files })` enforces that the delegated coder agent may only modify the declared files. The enforcement requires an active `.swarm/plan.json` — calling `declare_scope` in a feedback-closure run (which does not go through `save_plan`) rejects with "No plan found."
-
-**When to use `declare_scope` (preferred):** any feedback round that touches 2+ files, OR any feedback round where the file scope is not 100% obvious from the prompt. Before delegating, save a minimal plan via `save_plan` with a single phase containing the feedback-closure tasks, then call `declare_scope` per task with the exact file list.
-
-**Carve-out for direct Task delegation:** 1-file, single-function changes where the file path appears verbatim in the coder's prompt may use direct `Task(subagent_type="<coder>", ...)` delegation without `declare_scope`, where `<coder>` is the active swarm's coder agent (e.g. `coder`, or `paid_coder` when the swarm id is `paid`). This is a narrow exception; the orchestrator is responsible for verifying the scope is unambiguous.
-→ REQUIRED: even under this carve-out, the direct Task dispatch MUST contain a literal `ACCEPTANCE:` line — resolve per ACCEPTANCE FIELD RESOLUTION in your system prompt (one-line task-derived DONE restatement for the feedback fix, since feedback-closure runs typically have no fr_refs). A missing line is BLOCKED by ACCEPTANCE_FIELD_REQUIRED.
-
-**Anti-pattern:** do not use `Task` delegation for multi-file feedback fixes just to skip `save_plan` — the loss of scope discipline is not worth the saved ceremony.
+When the plugin's mechanical controller is available, every coder Task must be
+preceded by `prepare_pr_feedback_scope({ task_id, files })`. The controller is
+available only after the immutable feedback-verification lanes have settled and
+binds the exact file set to the current feedback revision, parent session, and
+next matching Task call. The coder prompt must use the same numeric `task_id`,
+contain matching `FILE:` directives, and include a literal `ACCEPTANCE:` line.
+Once a Task consumes that scope, its `task_id` is immutable for the current
+feedback revision. Any retry must prepare and dispatch a fresh nested numeric
+task identity (for example `1.1.1`), never re-declare the consumed ID.
+
+Do not create a synthetic `save_plan` merely to authorize feedback work, and do
+not use `declare_scope`; those tools belong to the normal implementation-plan
+lifecycle. There is no one-file or single-function carve-out from the dedicated
+PR-feedback scope controller.
+
+In runtimes without this controller, use the native scope mechanism. If none
+exists, put exact allowed files and non-goals in the delegation and verify the
+resulting diff mechanically. Never bypass an available scope controller merely
+to reduce ceremony.
 
 ## Intake Surfaces
 

package/.opencode/skills/swarm-pr-review/SKILL.md

@@ -24,11 +24,11 @@ without running a fresh broad review.
 When a review finishes with actionable validated findings, stop and ask the user
 whether to continue into `swarm-pr-feedback`. Do not auto-dispatch fix work from
 `PR_REVIEW`. Instead, write a handoff artifact under
-`.swarm/pr-review/<run_id>/feedback-handoff.md` (or `.json`) and include the
-exact continuation prompt:
+`.swarm/pr-review/<run_id>/feedback-handoff.json` with `write_pr_review_artifact`
+and include the exact continuation prompt:
 
 ```text
-/swarm pr-feedback <PR_URL> continue from .swarm/pr-review/<run_id>/feedback-handoff.md
+/swarm pr-feedback <PR_URL> continue from .swarm/pr-review/<run_id>/feedback-handoff.json
 ```
 
 `<run_id>` is a stable identifier for this review run, such as
@@ -459,10 +459,10 @@ The context pack must include, when available:
 
 ## Review Finding Persistence
 
-Do not rely on conversation context to preserve review findings. Create a run
-artifact under `.swarm/pr-review/<run_id>/findings.jsonl` when file writes are
-allowed, or under `.swarm/evidence/pr-review-<run_id>-findings.jsonl` when the
-review already uses the evidence tree.
+Do not rely on conversation context to preserve review findings. Use
+`write_pr_review_artifact` with `kind: "findings"`; the controller creates and
+appends `.swarm/pr-review/<run_id>/findings.jsonl` without granting generic
+write authority over `.swarm/`.
 
 Each persisted finding record must include at least:
 
@@ -484,11 +484,14 @@ Minimum field contract:
 Persist after every major validation boundary:
 
 1. **Post-explorer:** after Phase 3/4 candidate parsing and before reviewer
-   dispatch, write all candidates as `PENDING` with their lane provenance.
-2. **Post-reviewer:** after Phase 6 reviewer validation, update each reviewed
+   dispatch, call `write_pr_review_artifact` with `boundary: "post_explorer"`
+   and all candidates as `PENDING` with their lane provenance.
+2. **Post-reviewer:** after Phase 6 reviewer validation, call the controller
+   with `boundary: "post_reviewer"` and update each reviewed
    record to `CONFIRMED`, `DISPROVED`, `PRE_EXISTING`, or keep `PENDING` with a
    concrete `next_action` if more evidence is required.
-3. **Post-critic:** after Phase 8 critic challenge, update final status,
+3. **Post-critic:** after Phase 8 critic challenge, call the controller with
+   `boundary: "post_critic"` and update final status,
    severity/action notes in `evidence`, and final reporting or handoff action.
 
 Resume/reload procedure:
@@ -1376,7 +1379,9 @@ Explain the recommendation in one short paragraph and list required actions befo
 ## Feedback handoff
 
 When the review produced actionable validated findings or operational blockers,
-include:
+call `write_pr_review_artifact` with `kind: "handoff"`. The controller writes
+`.swarm/pr-review/<run_id>/feedback-handoff.json` only when its finding IDs
+exactly match the latest confirmed `handoff_to_feedback` records. Include:
 
 - the handoff artifact path,
 - the preserved finding IDs and provenance that `swarm-pr-feedback` must carry
@@ -1387,7 +1392,7 @@ include:
 Use this exact continuation prompt format:
 
 ```text
-/swarm pr-feedback <PR_URL> continue from .swarm/pr-review/<run_id>/feedback-handoff.md
+/swarm pr-feedback <PR_URL> continue from .swarm/pr-review/<run_id>/feedback-handoff.json
 ```
 
 ---
@@ -1435,4 +1440,3 @@ unproductive wakes, and the only exits are:
 Abort is a recovery tool, not a coverage shortcut. Use it only when the
 bind/checkout path is genuinely unreachable; never use it to skip a
 coverage obligation that is merely expensive or inconvenient.
-

package/dist/agents/architect.d.ts

@@ -61,14 +61,16 @@ export declare function buildArchitectureSupervisionWorkflow(arch?: Architecture
  */
 export declare function buildCouncilWorkflow(council?: CouncilWorkflowConfig): string;
 /**
- * Build the user-facing QA gate selection dialogue, used by MODE: SPECIFY
- * (step 5b), MODE: BRAINSTORM (Phase 6), and MODE: PLAN (post-`save_plan`
- * inline path). The dialogue is dialogue-only — persistence happens during
- * MODE: PLAN after `save_plan` creates `plan.json`.
+ * TEST-ONLY ORACLE: This function is no longer wired into the architect prompt
+ * (the {{QA_GATE_DIALOGUE_*}} placeholder substitution was removed in #1690,
+ * task 3.1). It is retained here because three test files import it directly:
+ *   - src/__tests__/qa-gate-hardening.test.ts:17
+ *   - tests/unit/agents/architect-hallucination-gate.test.ts:3
+ *   - tests/unit/skills/plan-protocol.test.ts:8
  *
- * The lead-in sentence varies per mode, but the body (ten gates with
- * defaults, one-shot accept-or-customize prompt) is shared so SPECIFY,
- * BRAINSTORM, and PLAN inline paths stay in lockstep.
+ * Future work (task 3.2) will create `references/qa-gate-gates-body.md` and
+ * migrate those tests to assert against the canonical body. Once migrated,
+ * this helper may be deleted.
  */
 export declare function buildQaGateSelectionDialogue(modeLabel: 'BRAINSTORM' | 'SPECIFY' | 'PLAN'): string;
 export declare function createArchitectAgent(model: string, customPrompt?: string, customAppendPrompt?: string, adversarialTesting?: AdversarialTestingConfig, council?: CouncilWorkflowConfig, uiReview?: UIReviewConfig, memoryEnabled?: boolean, architecturalSupervision?: ArchitectureSupervisionWorkflowConfig, designDocsEnabled?: boolean, externalSkillsEnabled?: boolean, turboEnabled?: boolean, skillsEnabled?: boolean): AgentDefinition;

package/dist/cli/{config-doctor-akxywx0c.js → config-doctor-23jxdqwv.js}

@@ -12,8 +12,8 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-jt7hnr7q.js";
-import"./index-r1gdkn2d.js";
+} from "./index-w0yztxgq.js";
+import"./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{core-v1kp7anb.js → core-wg3re04e.js}

@@ -14,7 +14,7 @@ import {
   resolveWorktreeBaseDir,
   shortenWorktreePath,
   writeLaneProfileToDiskReal
-} from "./index-g4ef4v3m.js";
+} from "./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{curation-policy-62w2pwfz.js → curation-policy-0t6hny6g.js}

@@ -4,9 +4,9 @@ import {
   authorizeCuration,
   buildConfigFingerprintInput,
   readCohortConfigFingerprint
-} from "./index-1htanqp1.js";
+} from "./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-gbnpz7rh.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{curator-gke6nrc4.js → curator-g8rggzbk.js}

@@ -14,38 +14,38 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-d17kqe54.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-y9t766sw.js";
+import"./index-echdpdhy.js";
+import"./index-w0yztxgq.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-gd5w3ef8.js";
-import"./index-0f45t7xy.js";
-import"./index-e315gwc9.js";
+import"./index-k5xh81c9.js";
+import"./index-nkhp7j16.js";
+import"./index-3hkbegq2.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-yq4s3q43.js";
-import"./index-1htanqp1.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-74xejn4v.js";
+import"./index-abw10n3f.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-r1gdkn2d.js";
+import"./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{curator-llm-factory-40c4852v.js → curator-llm-factory-36psae60.js}

@@ -1,38 +1,38 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-d17kqe54.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-y9t766sw.js";
+import"./index-echdpdhy.js";
+import"./index-w0yztxgq.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-gd5w3ef8.js";
-import"./index-0f45t7xy.js";
-import"./index-e315gwc9.js";
+import"./index-k5xh81c9.js";
+import"./index-nkhp7j16.js";
+import"./index-3hkbegq2.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-yq4s3q43.js";
-import"./index-1htanqp1.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-74xejn4v.js";
+import"./index-abw10n3f.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-r1gdkn2d.js";
+import"./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{guardrail-explain-m34vcgjg.js → guardrail-explain-6ffgrjx9.js}

@@ -1,39 +1,39 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-1cxp3b5y.js";
-import"./index-d17kqe54.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-x1w4cx3n.js";
+import"./index-y9t766sw.js";
+import"./index-echdpdhy.js";
+import"./index-w0yztxgq.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-gd5w3ef8.js";
-import"./index-0f45t7xy.js";
-import"./index-e315gwc9.js";
+import"./index-k5xh81c9.js";
+import"./index-nkhp7j16.js";
+import"./index-3hkbegq2.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-yq4s3q43.js";
-import"./index-1htanqp1.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-74xejn4v.js";
+import"./index-abw10n3f.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-r1gdkn2d.js";
+import"./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{guardrail-log-222xyxfp.js → guardrail-log-57sczn5h.js}

@@ -1,9 +1,9 @@
 // @bun
 import {
   handleGuardrailLog
-} from "./index-qzkcy22e.js";
-import"./index-dezgmvtw.js";
-import"./index-r1gdkn2d.js";
+} from "./index-1p9z8cc4.js";
+import"./index-echdpdhy.js";
+import"./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{hive-promoter-6fg3redm.js → hive-promoter-c458rgp5.js}

@@ -7,40 +7,40 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-d17kqe54.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-y9t766sw.js";
+import"./index-echdpdhy.js";
+import"./index-w0yztxgq.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-gd5w3ef8.js";
-import"./index-0f45t7xy.js";
-import"./index-e315gwc9.js";
+import"./index-k5xh81c9.js";
+import"./index-nkhp7j16.js";
+import"./index-3hkbegq2.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-yq4s3q43.js";
-import"./index-1htanqp1.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+} from "./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-74xejn4v.js";
+import"./index-abw10n3f.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-r1gdkn2d.js";
+import"./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{index-qzkcy22e.js → index-1p9z8cc4.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-dezgmvtw.js";
+} from "./index-echdpdhy.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/{index-e315gwc9.js → index-3hkbegq2.js}

@@ -2,7 +2,7 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-1012f47p.js";
+} from "./index-nmyg9b7v.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-q27bajqb.js";