opencode-swarm 7.125.6 → 7.126.1

package/dist/cli/{index-zp330ss0.js → index-yf4kvhrn.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-1cxp3b5y.js";
+} from "./index-x1w4cx3n.js";
 import {
   handleGuardrailLog
-} from "./index-qzkcy22e.js";
+} from "./index-1p9z8cc4.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -83,28 +83,28 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-d17kqe54.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-y9t766sw.js";
+import"./index-echdpdhy.js";
+import"./index-w0yztxgq.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-gd5w3ef8.js";
-import"./index-0f45t7xy.js";
-import"./index-e315gwc9.js";
+import"./index-k5xh81c9.js";
+import"./index-nkhp7j16.js";
+import"./index-3hkbegq2.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-yq4s3q43.js";
-import"./index-1htanqp1.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-74xejn4v.js";
+import"./index-abw10n3f.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
@@ -113,14 +113,14 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-r1gdkn2d.js";
+} from "./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/index.js

@@ -7,41 +7,41 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-d17kqe54.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-y9t766sw.js";
+import"./index-echdpdhy.js";
+import"./index-w0yztxgq.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-gd5w3ef8.js";
-import"./index-0f45t7xy.js";
-import"./index-e315gwc9.js";
+import"./index-k5xh81c9.js";
+import"./index-nkhp7j16.js";
+import"./index-3hkbegq2.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-yq4s3q43.js";
-import"./index-1htanqp1.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-74xejn4v.js";
+import"./index-abw10n3f.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants
-} from "./index-r1gdkn2d.js";
+} from "./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{knowledge-escalator-h3hg7ek7.js → knowledge-escalator-kd80m9vp.js}

@@ -8,9 +8,9 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-0f45t7xy.js";
-import"./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+} from "./index-nkhp7j16.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{knowledge-events-jtr66wxz.js → knowledge-events-j7jfwm1d.js}

@@ -26,7 +26,7 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-gbnpz7rh.js";
+} from "./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-store-69ttjjjs.js → knowledge-store-1d4byc7y.js}

@@ -40,7 +40,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-1012f47p.js";
+} from "./index-nmyg9b7v.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-yn06rh13.js → knowledge-validator-63mkgt9x.js}

@@ -23,11 +23,11 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-yq4s3q43.js";
-import"./index-1htanqp1.js";
+} from "./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scan-cursor-r0w2p5gz.js → scan-cursor-qzn5jmbe.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-e315gwc9.js";
-import"./index-1012f47p.js";
+} from "./index-3hkbegq2.js";
+import"./index-nmyg9b7v.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{schema-69z8w1ka.js → schema-2j92wnns.js}

@@ -89,7 +89,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-r1gdkn2d.js";
+} from "./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-zjygnfay.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{scope-persistence-habn4q8a.js → scope-persistence-dm5bab50.js}

@@ -6,12 +6,13 @@ import {
   readPlanScope,
   readScopeBindingFromDisk,
   readScopeFromDisk,
+  resolveAuthorizedPrFeedbackScopeBindingFromDisk,
   resolveAuthorizedScopeBinding,
   resolveAuthorizedScopeBindingForSession,
   resolveScopeWithFallbacks,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-gnvg72y1.js";
+} from "./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
 import"./index-zgwm4ryv.js";
@@ -27,6 +28,7 @@ export {
   resolveScopeWithFallbacks,
   resolveAuthorizedScopeBindingForSession,
   resolveAuthorizedScopeBinding,
+  resolveAuthorizedPrFeedbackScopeBindingFromDisk,
   readScopeFromDisk,
   readScopeBindingFromDisk,
   readPlanScope,

package/dist/cli/{skill-generator-a7xfyddq.js → skill-generator-sv6zvdvz.js}

@@ -33,12 +33,12 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-gd5w3ef8.js";
-import"./index-yq4s3q43.js";
-import"./index-1htanqp1.js";
+} from "./index-k5xh81c9.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-1012f47p.js";
-import"./index-gbnpz7rh.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/commands/turbo-constants.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Single source of truth for the gate-bypass enumeration in Turbo enable messages.
+ * Used by all four standard-Turbo enable return strings and by the registry help text.
+ * Kept in a separate file to avoid circular-import issues between turbo.ts and registry.ts.
+ */
+export declare const TURBO_BYPASS_DISCLOSURE: string;

package/dist/config/constants.d.ts

@@ -82,7 +82,7 @@ export declare const COMPACTION_DEFAULTS: {
     readonly emergencyThreshold: 80;
     readonly preserveLastNTurns: 5;
 };
-export declare const TURBO_MODE_BANNER = "## \uD83D\uDE80 TURBO MODE ACTIVE\n\n**Speed optimization enabled for this session.**\n\nWhile Turbo Mode is active:\n- **Stage A gates** (lint, imports, pre_check_batch) are still REQUIRED for ALL tasks\n- **Tier 3 tasks** (security-sensitive files matching: architect*.ts, delegation*.ts, guardrails*.ts, adversarial*.ts, sanitiz*.ts, auth*, permission*, crypto*, secret*, security) still require FULL review (Stage B)\n- **Tier 0-2 tasks** can skip Stage B (reviewer, test_engineer) to speed up execution\n- **Phase completion gates** (completion-verify and drift verification gate) are automatically bypassed \u2014 phase_complete will succeed without drift verification evidence when turbo is active. Note: turbo bypass is session-scoped; one session's turbo does not affect other sessions.\n\nClassification still determines the pipeline:\n- TIER 0 (metadata): lint + diff only \u2014 no change\n- TIER 1 (docs): Stage A + reviewer \u2014 no change\n- TIER 2 (standard code): Stage A + reviewer + test_engineer \u2014 CAN SKIP Stage B with turboMode\n- TIER 3 (critical): Stage A + 2x reviewer + 2x test_engineer \u2014 Stage B REQUIRED (no turbo bypass)\n\nDo NOT skip Stage A gates. Do NOT skip Stage B for TIER 3.\n";
+export declare const TURBO_MODE_BANNER = "## \uD83D\uDE80 TURBO MODE ACTIVE\n\n**Speed optimization enabled for this session.**\n\nWhile Turbo Mode is active:\n- **Stage A gates** (lint, imports, pre_check_batch) are still REQUIRED for ALL tasks\n- **Tier 3 tasks** (security-sensitive files matching: architect*.ts, delegation*.ts, guardrails*.ts, adversarial*.ts, sanitiz*.ts, auth*, permission*, crypto*, secret*, security) still require FULL review (Stage B)\n- **Tier 0-2 tasks** can skip Stage B (reviewer, test_engineer) to speed up execution\n- **Phase completion gates** (Gates 1\u20135: completion-verify, drift-verifier, hallucination-guard, mutation-gate, phase-council) are automatically bypassed via the orchestrator short-circuit at `src/tools/phase-complete.ts:774\u2013827` when turbo is active; Gate 5b (architecture-supervisor), Gate 6 (final-council), and Gate 7 (full-auto) remain enforced. Note: turbo bypass is session-scoped; one session's turbo does not affect other sessions.\n\nClassification still determines the pipeline:\n- TIER 0 (metadata): lint + diff only \u2014 no change\n- TIER 1 (docs): Stage A + reviewer \u2014 no change\n- TIER 2 (standard code): Stage A + reviewer + test_engineer \u2014 CAN SKIP Stage B with turboMode\n- TIER 3 (critical): Stage A + 2x reviewer + 2x test_engineer \u2014 Stage B REQUIRED (no turbo bypass)\n\nDo NOT skip Stage A gates. Do NOT skip Stage B for TIER 3.\n";
 export declare const FULL_AUTO_BANNER = "## \u26A1 FULL-AUTO MODE ACTIVE\n\nYou are operating without a human in the loop. All escalations route to the Autonomous Oversight Critic instead of a user.\n\nBehavioral changes:\n- TIER 3 escalations go to the critic, not a human. Frame your questions technically, not conversationally.\n- Phase completion approval comes from the critic. Ensure all evidence is written before requesting.\n- The critic defaults to REJECT. Do not attempt to pressure, negotiate, or shortcut. Complete the evidence trail.\n- If the critic returns ESCALATE_TO_HUMAN, the session will pause or terminate. Only the critic can trigger this.\n- Do NOT ask \"Ready for Phase N+1?\" \u2014 call phase_complete directly. The critic reviews automatically.\n";
 export declare const AUTO_PROCEED_BANNER = "## \u23ED\uFE0F AUTO-PROCEED STATUS\n\nAuto-proceed controls whether the architect advances to the next phase automatically (skipping the \"Ready for Phase N+1?\" confirmation).\n\nBehavioral rules:\n- Session override (set via /swarm auto-proceed on|off) wins over the plan default.\n- If neither is set, auto-proceed defaults to OFF and the architect asks before advancing.\n- Full-auto mode (critic oversight) is independent \u2014 it has its own auto-advance mechanism.\n- autoProceedNudgeDone prevents the FR-004 first-boundary nudge from re-firing in this session.\n\nTo toggle at runtime: call swarm_command({ command: \"auto-proceed\", args: [\"on\"|\"off\"] }) from the architect.\n";
 /**

package/dist/config/index.d.ts

@@ -2,6 +2,7 @@ export type { AgentName, PipelineAgentName, QAAgentName, } from './constants';
 export { ALL_AGENT_NAMES, ALL_SUBAGENT_NAMES, DEFAULT_MODELS, isQAAgent, isSubagent, ORCHESTRATOR_NAME, PIPELINE_AGENTS, QA_AGENTS, } from './constants';
 export type { ApprovalEvidence, BaseEvidence, DiffEvidence, Evidence, EvidenceBundle, EvidenceType, EvidenceVerdict, NoteEvidence, ReviewEvidence, TestEvidence, } from './evidence-schema';
 export { ApprovalEvidenceSchema, BaseEvidenceSchema, DiffEvidenceSchema, EVIDENCE_MAX_JSON_BYTES, EVIDENCE_MAX_PATCH_BYTES, EVIDENCE_MAX_TASK_BYTES, EvidenceBundleSchema, EvidenceSchema, EvidenceTypeSchema, EvidenceVerdictSchema, NoteEvidenceSchema, ReviewEvidenceSchema, TestEvidenceSchema, } from './evidence-schema';
+export type { ConfigBuildResult, ConfigLoadResult, ConfigRecovery, } from './loader';
 export { loadAgentPrompt, loadPluginConfig, loadPluginConfigWithMeta, loadPluginConfigWithMetaAsync, } from './loader';
 import { loadPluginConfigWithMeta } from './loader';
 /**

package/dist/config/loader.d.ts

@@ -15,14 +15,35 @@ export { deepMerge, MAX_MERGE_DEPTH } from '../utils/merge';
  * raw dump of the user's config values.
  */
 export declare function formatZodIssues(error: z.ZodError): string;
-export declare function loadPluginConfig(directory: string): PluginConfig;
 /**
- * Internal variant of loadPluginConfig that also returns loader metadata.
- * Used only by src/index.ts to determine guardrails fallback behavior.
- * NOT part of the public API — use loadPluginConfig() for all other callers.
+ * Recovery classification returned by `buildConfigWithMeta`.
+ *
+ *   'none'               – config parsed cleanly, no keys removed.
+ *   'stripped_keys'      – pre-Zod section sanitization (gates, external_skills)
+ *                          and/or Zod-targeted key removal dropped some keys;
+ *                          the remaining configuration was preserved.
+ *   'user_only'          – project config was discarded (failed validation and
+ *                          targeted recovery); user config alone was used.
+ *   'guardrails_defaults'– neither merged nor user config was recoverable;
+ *                          fell back to fail-secure guardrails-only defaults.
  */
-export declare function loadPluginConfigWithMeta(directory: string): {
+export type ConfigRecovery = 'none' | 'stripped_keys' | 'user_only' | 'guardrails_defaults';
+/** Full result from the shared config-build core. */
+export type ConfigBuildResult = {
     config: PluginConfig;
+    recovery: ConfigRecovery;
+    /** Dotted key paths that were removed during recovery (gates, Zod strict, etc.). */
+    removedKeys: string[];
+    /** Human-readable summary messages about the recovery action. */
+    warnings: string[];
+};
+/**
+ * Full result from `loadPluginConfigWithMeta` and `loadPluginConfigWithMetaAsync`.
+ * Extends `ConfigBuildResult` with I/O-layer fields about whether a config
+ * file was found and whether it could be read.
+ */
+export type ConfigLoadResult = ConfigBuildResult & {
+    /** True when at least one config file (user or project) existed on disk. */
     loadedFromFile: boolean;
     /** True when a config file existed but could not be loaded (corrupt JSON,
      *  oversized, permission error). Consumers with fail-closed semantics —
@@ -30,15 +51,35 @@ export declare function loadPluginConfigWithMeta(directory: string): {
      *  "config unknown", not "config defaults". */
     configHadErrors: boolean;
 };
+/**
+ * Load plugin configuration from user and project config files.
+ *
+ * Config locations:
+ * 1. User config: ~/.config/opencode/opencode-swarm.json
+ * 2. Project config: <directory>/.opencode/opencode-swarm.json
+ *
+ * Project config takes precedence. Nested objects are deep-merged, except
+ * `full_auto.locked`: it is a hard-off and OR-merges across both levels, so
+ * `locked: true` at either level cannot be overridden by `locked: false`.
+ * IMPORTANT: Raw configs are merged BEFORE Zod parsing so that
+ * Zod defaults don't override explicit user values.
+ */
+export declare function loadPluginConfig(directory: string): PluginConfig;
+/**
+ * Variant of `loadPluginConfig` that also returns loader metadata, including
+ * recovery classification, removed keys, and warning messages.  All callers
+ * that need to surface config-health information (doctor, command-return) use
+ * this function.  `buildConfigWithMeta` is the shared core — files are read
+ * exactly once, no double-read.
+ */
+export declare function loadPluginConfigWithMeta(directory: string): ConfigLoadResult;
 /**
  * Async variant of `loadPluginConfigWithMeta`. Used by the plugin entry
  * (issue #704) so initialization does not perform synchronous fs reads.
+ * Calls the same `buildConfigWithMeta` shared core as the sync path — the
+ * only difference is that file I/O uses `node:fs/promises` (issue #1900 FR-1).
  */
-export declare function loadPluginConfigWithMetaAsync(directory: string): Promise<{
-    config: PluginConfig;
-    loadedFromFile: boolean;
-    configHadErrors: boolean;
-}>;
+export declare function loadPluginConfigWithMetaAsync(directory: string): Promise<ConfigLoadResult>;
 /**
  * Load custom prompt for an agent from the prompts directory.
  * Checks for {agent}.md (replaces default) and {agent}_append.md (appends).

package/dist/hooks/pr-workflow-gate.d.ts

@@ -79,6 +79,20 @@ interface PrFeedbackReadyToPublishRecord {
 }
 export type PrWorkflowCompletionStatus = 'completed' | 'ready-to-publish';
 export type PrReviewValidationPhase = 'council' | 'reviewer' | 'critic';
+export type PrReviewArtifactBoundary = 'post_explorer' | 'post_reviewer' | 'post_critic';
+type PrReviewArtifactRecord = {
+    finding_id: string;
+    status: 'PENDING' | 'CONFIRMED' | 'DISPROVED' | 'PRE_EXISTING';
+    next_action: 'route_to_reviewer' | 'route_to_critic' | 'report' | 'suppress_with_reason' | 'handoff_to_feedback';
+    severity?: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
+};
+interface PrFeedbackScopeDeclarationRecord {
+    taskId: string;
+    files: string[];
+    revisionDigest: string;
+    declaredAt: string;
+    consumedByCallId?: string;
+}
 interface PrReviewValidationBatchRecord {
     batchId: string;
     phase: PrReviewValidationPhase;
@@ -105,6 +119,11 @@ export interface PrWorkflowGateState {
     prReviewBaseDispatch?: PrReviewBaseDispatchRecord;
     prReviewTriggerEvalPath?: string;
     prReviewValidationBatches?: PrReviewValidationBatchRecord[];
+    prReviewArtifactRunId?: string;
+    prReviewFindingsPath?: string;
+    prReviewArtifactBoundaries?: PrReviewArtifactBoundary[];
+    prReviewHandoffPath?: string;
+    prReviewHandoffRequired?: boolean;
     prFeedbackInventory?: string[];
     prFeedbackVerifications?: PrFeedbackVerificationRecord[];
     /** @deprecated Compatibility projection of the most recent verification dispatch. */
@@ -112,6 +131,7 @@ export interface PrWorkflowGateState {
     prFeedbackStageA?: PrFeedbackStageARecord;
     prFeedbackGateBatches?: PrFeedbackGateBatchRecord[];
     prFeedbackReadyToPublish?: PrFeedbackReadyToPublishRecord;
+    prFeedbackScopes?: PrFeedbackScopeDeclarationRecord[];
 }
 export declare function activatePrWorkflow(directory: string, sessionID: string, mode: PrWorkflowMode, options?: {
     prHeadSha?: string;
@@ -210,6 +230,25 @@ export declare function assertPrFeedbackGatePhaseSettled(directory: string, sess
 /** Require every ordered feedback gate on one unchanged revision. */
 export declare function assertPrFeedbackReadyToPublish(directory: string, sessionID: string): Promise<PrWorkflowGateState>;
 export declare function markPrReviewTriggerEvaluationComplete(directory: string, sessionID: string, artifactPath: string): Promise<PrWorkflowGateState>;
+export declare function assertPrReviewArtifactBoundary(directory: string, sessionID: string, runId: string, boundary: PrReviewArtifactBoundary, findingIds: string[]): Promise<PrWorkflowGateState>;
+/**
+ * Artifact records are a projection of lane receipts, never a caller-controlled
+ * replacement for them. Keep their workflow status/action aligned with the
+ * reviewer and critic rows that the gate already authenticated.
+ */
+export declare function assertPrReviewArtifactRecordsMatchAuthoritativeVerdicts(directory: string, sessionID: string, boundary: PrReviewArtifactBoundary, records: readonly PrReviewArtifactRecord[]): Promise<void>;
+export declare function markPrReviewArtifactBoundary(directory: string, sessionID: string, runId: string, boundary: PrReviewArtifactBoundary, artifactPath: string, findingIds: string[], handoffRequired: boolean): Promise<PrWorkflowGateState>;
+export declare function markPrReviewHandoffComplete(directory: string, sessionID: string, runId: string, artifactPath: string): Promise<PrWorkflowGateState>;
+export declare function declarePrFeedbackScope(directory: string, sessionID: string, taskId: string, files: string[]): Promise<PrWorkflowGateState>;
+export declare function resolvePrFeedbackScopeDeclaration(directory: string, sessionID: string, taskId: string): Promise<PrFeedbackScopeDeclarationRecord | null>;
+export declare function consumePrFeedbackScopeDeclaration(directory: string, sessionID: string, taskId: string, callID: string): Promise<PrFeedbackScopeDeclarationRecord | null>;
+export declare function validatePrFeedbackScopeBinding(directory: string, binding: {
+    taskId: string;
+    files: string[];
+    dispatchCallId?: string;
+    workflowSessionId?: string;
+    workflowRevisionDigest?: string;
+}): Promise<boolean>;
 export declare function enforcePrWorkflowToolBefore(directory: string, sessionID: string, toolName: string, args: Record<string, unknown> | undefined, generatedAgentNames?: readonly string[]): Promise<void>;
 /** Validate the terminal PR workflow contract before removing its durable gate. */
 export declare function completePrWorkflow(directory: string, sessionID: string, expectedMode: PrWorkflowMode, prHeadSha: string): Promise<PrWorkflowCompletionStatus>;

package/dist/hooks/scope-guard.d.ts

@@ -8,8 +8,10 @@
  * Fires BEFORE write/edit tools execute. When a coder attempts to modify a file
  * outside its Task-correlated scope, blocks the call and injects an advisory.
  */
-import { resolveAuthorizedScopeBinding, resolveAuthorizedScopeBindingForSession } from '../scope/scope-persistence';
+import { getAuthorizedPrFeedbackScopeBinding } from '../scope/scope-binding';
+import { resolveAuthorizedPrFeedbackScopeBindingFromDisk, resolveAuthorizedScopeBinding, resolveAuthorizedScopeBindingForSession } from '../scope/scope-persistence';
 import { type AgentSessionState } from '../state';
+import { validatePrFeedbackScopeBinding } from './pr-workflow-gate';
 import { resolveWriteTargets } from './write-target-resolver';
 /**
  * Configuration for scope guard behavior.
@@ -69,6 +71,9 @@ export declare const _internals: {
     resolveWriteTargets: typeof resolveWriteTargets;
     resolveAuthorizedScopeBinding: typeof resolveAuthorizedScopeBinding;
     resolveAuthorizedScopeBindingForSession: typeof resolveAuthorizedScopeBindingForSession;
+    getAuthorizedPrFeedbackScopeBinding: typeof getAuthorizedPrFeedbackScopeBinding;
+    resolveAuthorizedPrFeedbackScopeBindingFromDisk: typeof resolveAuthorizedPrFeedbackScopeBindingFromDisk;
+    validatePrFeedbackScopeBinding: typeof validatePrFeedbackScopeBinding;
     resolveTaskId: (session: AgentSessionState | undefined) => string | null;
 };
 export {};