opencode-swarm 7.126.0 → 7.126.1

package/dist/cli/{index-68fpa7ff.js → index-yf4kvhrn.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-y4ry07h8.js";
+} from "./index-x1w4cx3n.js";
 import {
   handleGuardrailLog
-} from "./index-qzkcy22e.js";
+} from "./index-1p9z8cc4.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -83,28 +83,28 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-0ff5cm9j.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-y9t766sw.js";
+import"./index-echdpdhy.js";
+import"./index-w0yztxgq.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-yfzn5r9s.js";
-import"./index-bcgfhxzv.js";
-import"./index-cdx337js.js";
+import"./index-k5xh81c9.js";
+import"./index-nkhp7j16.js";
+import"./index-3hkbegq2.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-a1c9az5e.js";
+import"./index-abw10n3f.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
@@ -113,14 +113,14 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-r1gdkn2d.js";
+} from "./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/index.js

@@ -7,41 +7,41 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-0ff5cm9j.js";
-import"./index-dezgmvtw.js";
-import"./index-jt7hnr7q.js";
+} from "./index-y9t766sw.js";
+import"./index-echdpdhy.js";
+import"./index-w0yztxgq.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-yfzn5r9s.js";
-import"./index-bcgfhxzv.js";
-import"./index-cdx337js.js";
+import"./index-k5xh81c9.js";
+import"./index-nkhp7j16.js";
+import"./index-3hkbegq2.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-a1c9az5e.js";
+import"./index-abw10n3f.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants
-} from "./index-r1gdkn2d.js";
+} from "./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-gnvg72y1.js";
+import"./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
-import"./index-g4ef4v3m.js";
+import"./index-w9cb5zwh.js";
 import"./index-4rhhvd1a.js";
 import"./index-0cz1ws47.js";
 import"./index-2445sx3d.js";

package/dist/cli/{knowledge-escalator-4hc8w7sd.js → knowledge-escalator-kd80m9vp.js}

@@ -8,9 +8,9 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-bcgfhxzv.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+} from "./index-nkhp7j16.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{knowledge-events-kyqjv1f8.js → knowledge-events-j7jfwm1d.js}

@@ -26,7 +26,7 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-2bnfwmk3.js";
+} from "./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-store-06k0p1gs.js → knowledge-store-1d4byc7y.js}

@@ -40,7 +40,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-2yd75hms.js";
+} from "./index-nmyg9b7v.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-42xjmcmh.js → knowledge-validator-63mkgt9x.js}

@@ -23,11 +23,11 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+} from "./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scan-cursor-gjcvpyta.js → scan-cursor-qzn5jmbe.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-cdx337js.js";
-import"./index-2yd75hms.js";
+} from "./index-3hkbegq2.js";
+import"./index-nmyg9b7v.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{schema-69z8w1ka.js → schema-2j92wnns.js}

@@ -89,7 +89,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-r1gdkn2d.js";
+} from "./index-c8sqc3nh.js";
 import"./index-bk5tah7q.js";
 import"./index-zjygnfay.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{scope-persistence-habn4q8a.js → scope-persistence-dm5bab50.js}

@@ -6,12 +6,13 @@ import {
   readPlanScope,
   readScopeBindingFromDisk,
   readScopeFromDisk,
+  resolveAuthorizedPrFeedbackScopeBindingFromDisk,
   resolveAuthorizedScopeBinding,
   resolveAuthorizedScopeBindingForSession,
   resolveScopeWithFallbacks,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-gnvg72y1.js";
+} from "./index-4ff0x4cg.js";
 import"./index-2tn5h2zp.js";
 import"./index-1kz6da87.js";
 import"./index-zgwm4ryv.js";
@@ -27,6 +28,7 @@ export {
   resolveScopeWithFallbacks,
   resolveAuthorizedScopeBindingForSession,
   resolveAuthorizedScopeBinding,
+  resolveAuthorizedPrFeedbackScopeBindingFromDisk,
   readScopeFromDisk,
   readScopeBindingFromDisk,
   readPlanScope,

package/dist/cli/{skill-generator-t6j93mwt.js → skill-generator-sv6zvdvz.js}

@@ -33,12 +33,12 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-yfzn5r9s.js";
-import"./index-kwnsatzq.js";
-import"./index-mgrsx5hn.js";
+} from "./index-k5xh81c9.js";
+import"./index-6j9p0c40.js";
+import"./index-kx3533dm.js";
 import"./index-rtry5xyf.js";
-import"./index-2yd75hms.js";
-import"./index-2bnfwmk3.js";
+import"./index-nmyg9b7v.js";
+import"./index-cnhp6c0k.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/config/index.d.ts

@@ -2,6 +2,7 @@ export type { AgentName, PipelineAgentName, QAAgentName, } from './constants';
 export { ALL_AGENT_NAMES, ALL_SUBAGENT_NAMES, DEFAULT_MODELS, isQAAgent, isSubagent, ORCHESTRATOR_NAME, PIPELINE_AGENTS, QA_AGENTS, } from './constants';
 export type { ApprovalEvidence, BaseEvidence, DiffEvidence, Evidence, EvidenceBundle, EvidenceType, EvidenceVerdict, NoteEvidence, ReviewEvidence, TestEvidence, } from './evidence-schema';
 export { ApprovalEvidenceSchema, BaseEvidenceSchema, DiffEvidenceSchema, EVIDENCE_MAX_JSON_BYTES, EVIDENCE_MAX_PATCH_BYTES, EVIDENCE_MAX_TASK_BYTES, EvidenceBundleSchema, EvidenceSchema, EvidenceTypeSchema, EvidenceVerdictSchema, NoteEvidenceSchema, ReviewEvidenceSchema, TestEvidenceSchema, } from './evidence-schema';
+export type { ConfigBuildResult, ConfigLoadResult, ConfigRecovery, } from './loader';
 export { loadAgentPrompt, loadPluginConfig, loadPluginConfigWithMeta, loadPluginConfigWithMetaAsync, } from './loader';
 import { loadPluginConfigWithMeta } from './loader';
 /**

package/dist/config/loader.d.ts

@@ -1,26 +1,6 @@
 import type { z } from 'zod';
 import { type PluginConfig } from './schema';
 export declare const MAX_CONFIG_FILE_BYTES = 102400;
-/**
- * Recovery type indicating how the config was recovered from parse failure.
- * - 'none': config parsed cleanly on first attempt
- * - 'stripped_keys': Zod-confirmed unrecognized keys were surgically removed and parse succeeded
- * - 'user_only': project config was ignored (validation error); user config used alone
- * - 'guardrails_defaults': no recovery succeeded; fail-secure guardrails defaults applied
- */
-export type RecoveryType = 'none' | 'stripped_keys' | 'user_only' | 'guardrails_defaults';
-/**
- * Structured recovery metadata returned by parseConfigWithFallback.
- * Exposed via loadPluginConfigWithMeta[Async] so programmatic callers can
- * introspect what recovery was performed.
- */
-export interface RecoveryInfo {
-    recovery: RecoveryType;
-    /** Dotted key paths that were removed during recovery (empty if none were stripped). */
-    removedKeys: string[];
-    /** Human-readable advisory messages describing what recovery was performed. */
-    warnings: string[];
-}
 export { deepMerge, MAX_MERGE_DEPTH } from '../utils/merge';
 /**
  * Flatten a ZodError into a compact, single-line, human-readable summary that
@@ -35,36 +15,71 @@ export { deepMerge, MAX_MERGE_DEPTH } from '../utils/merge';
  * raw dump of the user's config values.
  */
 export declare function formatZodIssues(error: z.ZodError): string;
-export declare function loadPluginConfig(directory: string): PluginConfig;
 /**
- * Internal variant of loadPluginConfig that also returns loader metadata.
- * Used only by src/index.ts to determine guardrails fallback behavior.
- * NOT part of the public API — use loadPluginConfig() for all other callers.
+ * Recovery classification returned by `buildConfigWithMeta`.
+ *
+ *   'none'               – config parsed cleanly, no keys removed.
+ *   'stripped_keys'      – pre-Zod section sanitization (gates, external_skills)
+ *                          and/or Zod-targeted key removal dropped some keys;
+ *                          the remaining configuration was preserved.
+ *   'user_only'          – project config was discarded (failed validation and
+ *                          targeted recovery); user config alone was used.
+ *   'guardrails_defaults'– neither merged nor user config was recoverable;
+ *                          fell back to fail-secure guardrails-only defaults.
  */
-export declare function loadPluginConfigWithMeta(directory: string): {
+export type ConfigRecovery = 'none' | 'stripped_keys' | 'user_only' | 'guardrails_defaults';
+/** Full result from the shared config-build core. */
+export type ConfigBuildResult = {
     config: PluginConfig;
+    recovery: ConfigRecovery;
+    /** Dotted key paths that were removed during recovery (gates, Zod strict, etc.). */
+    removedKeys: string[];
+    /** Human-readable summary messages about the recovery action. */
+    warnings: string[];
+};
+/**
+ * Full result from `loadPluginConfigWithMeta` and `loadPluginConfigWithMetaAsync`.
+ * Extends `ConfigBuildResult` with I/O-layer fields about whether a config
+ * file was found and whether it could be read.
+ */
+export type ConfigLoadResult = ConfigBuildResult & {
+    /** True when at least one config file (user or project) existed on disk. */
     loadedFromFile: boolean;
     /** True when a config file existed but could not be loaded (corrupt JSON,
      *  oversized, permission error). Consumers with fail-closed semantics —
      *  e.g. the Full-Auto `locked` activation guard — must treat this as
      *  "config unknown", not "config defaults". */
     configHadErrors: boolean;
-    recovery: RecoveryType;
-    removedKeys: string[];
-    warnings: string[];
 };
+/**
+ * Load plugin configuration from user and project config files.
+ *
+ * Config locations:
+ * 1. User config: ~/.config/opencode/opencode-swarm.json
+ * 2. Project config: <directory>/.opencode/opencode-swarm.json
+ *
+ * Project config takes precedence. Nested objects are deep-merged, except
+ * `full_auto.locked`: it is a hard-off and OR-merges across both levels, so
+ * `locked: true` at either level cannot be overridden by `locked: false`.
+ * IMPORTANT: Raw configs are merged BEFORE Zod parsing so that
+ * Zod defaults don't override explicit user values.
+ */
+export declare function loadPluginConfig(directory: string): PluginConfig;
+/**
+ * Variant of `loadPluginConfig` that also returns loader metadata, including
+ * recovery classification, removed keys, and warning messages.  All callers
+ * that need to surface config-health information (doctor, command-return) use
+ * this function.  `buildConfigWithMeta` is the shared core — files are read
+ * exactly once, no double-read.
+ */
+export declare function loadPluginConfigWithMeta(directory: string): ConfigLoadResult;
 /**
  * Async variant of `loadPluginConfigWithMeta`. Used by the plugin entry
  * (issue #704) so initialization does not perform synchronous fs reads.
+ * Calls the same `buildConfigWithMeta` shared core as the sync path — the
+ * only difference is that file I/O uses `node:fs/promises` (issue #1900 FR-1).
  */
-export declare function loadPluginConfigWithMetaAsync(directory: string): Promise<{
-    config: PluginConfig;
-    loadedFromFile: boolean;
-    configHadErrors: boolean;
-    recovery: RecoveryType;
-    removedKeys: string[];
-    warnings: string[];
-}>;
+export declare function loadPluginConfigWithMetaAsync(directory: string): Promise<ConfigLoadResult>;
 /**
  * Load custom prompt for an agent from the prompts directory.
  * Checks for {agent}.md (replaces default) and {agent}_append.md (appends).

package/dist/hooks/pr-workflow-gate.d.ts

@@ -79,6 +79,20 @@ interface PrFeedbackReadyToPublishRecord {
 }
 export type PrWorkflowCompletionStatus = 'completed' | 'ready-to-publish';
 export type PrReviewValidationPhase = 'council' | 'reviewer' | 'critic';
+export type PrReviewArtifactBoundary = 'post_explorer' | 'post_reviewer' | 'post_critic';
+type PrReviewArtifactRecord = {
+    finding_id: string;
+    status: 'PENDING' | 'CONFIRMED' | 'DISPROVED' | 'PRE_EXISTING';
+    next_action: 'route_to_reviewer' | 'route_to_critic' | 'report' | 'suppress_with_reason' | 'handoff_to_feedback';
+    severity?: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
+};
+interface PrFeedbackScopeDeclarationRecord {
+    taskId: string;
+    files: string[];
+    revisionDigest: string;
+    declaredAt: string;
+    consumedByCallId?: string;
+}
 interface PrReviewValidationBatchRecord {
     batchId: string;
     phase: PrReviewValidationPhase;
@@ -105,6 +119,11 @@ export interface PrWorkflowGateState {
     prReviewBaseDispatch?: PrReviewBaseDispatchRecord;
     prReviewTriggerEvalPath?: string;
     prReviewValidationBatches?: PrReviewValidationBatchRecord[];
+    prReviewArtifactRunId?: string;
+    prReviewFindingsPath?: string;
+    prReviewArtifactBoundaries?: PrReviewArtifactBoundary[];
+    prReviewHandoffPath?: string;
+    prReviewHandoffRequired?: boolean;
     prFeedbackInventory?: string[];
     prFeedbackVerifications?: PrFeedbackVerificationRecord[];
     /** @deprecated Compatibility projection of the most recent verification dispatch. */
@@ -112,6 +131,7 @@ export interface PrWorkflowGateState {
     prFeedbackStageA?: PrFeedbackStageARecord;
     prFeedbackGateBatches?: PrFeedbackGateBatchRecord[];
     prFeedbackReadyToPublish?: PrFeedbackReadyToPublishRecord;
+    prFeedbackScopes?: PrFeedbackScopeDeclarationRecord[];
 }
 export declare function activatePrWorkflow(directory: string, sessionID: string, mode: PrWorkflowMode, options?: {
     prHeadSha?: string;
@@ -210,6 +230,25 @@ export declare function assertPrFeedbackGatePhaseSettled(directory: string, sess
 /** Require every ordered feedback gate on one unchanged revision. */
 export declare function assertPrFeedbackReadyToPublish(directory: string, sessionID: string): Promise<PrWorkflowGateState>;
 export declare function markPrReviewTriggerEvaluationComplete(directory: string, sessionID: string, artifactPath: string): Promise<PrWorkflowGateState>;
+export declare function assertPrReviewArtifactBoundary(directory: string, sessionID: string, runId: string, boundary: PrReviewArtifactBoundary, findingIds: string[]): Promise<PrWorkflowGateState>;
+/**
+ * Artifact records are a projection of lane receipts, never a caller-controlled
+ * replacement for them. Keep their workflow status/action aligned with the
+ * reviewer and critic rows that the gate already authenticated.
+ */
+export declare function assertPrReviewArtifactRecordsMatchAuthoritativeVerdicts(directory: string, sessionID: string, boundary: PrReviewArtifactBoundary, records: readonly PrReviewArtifactRecord[]): Promise<void>;
+export declare function markPrReviewArtifactBoundary(directory: string, sessionID: string, runId: string, boundary: PrReviewArtifactBoundary, artifactPath: string, findingIds: string[], handoffRequired: boolean): Promise<PrWorkflowGateState>;
+export declare function markPrReviewHandoffComplete(directory: string, sessionID: string, runId: string, artifactPath: string): Promise<PrWorkflowGateState>;
+export declare function declarePrFeedbackScope(directory: string, sessionID: string, taskId: string, files: string[]): Promise<PrWorkflowGateState>;
+export declare function resolvePrFeedbackScopeDeclaration(directory: string, sessionID: string, taskId: string): Promise<PrFeedbackScopeDeclarationRecord | null>;
+export declare function consumePrFeedbackScopeDeclaration(directory: string, sessionID: string, taskId: string, callID: string): Promise<PrFeedbackScopeDeclarationRecord | null>;
+export declare function validatePrFeedbackScopeBinding(directory: string, binding: {
+    taskId: string;
+    files: string[];
+    dispatchCallId?: string;
+    workflowSessionId?: string;
+    workflowRevisionDigest?: string;
+}): Promise<boolean>;
 export declare function enforcePrWorkflowToolBefore(directory: string, sessionID: string, toolName: string, args: Record<string, unknown> | undefined, generatedAgentNames?: readonly string[]): Promise<void>;
 /** Validate the terminal PR workflow contract before removing its durable gate. */
 export declare function completePrWorkflow(directory: string, sessionID: string, expectedMode: PrWorkflowMode, prHeadSha: string): Promise<PrWorkflowCompletionStatus>;

package/dist/hooks/scope-guard.d.ts

@@ -8,8 +8,10 @@
  * Fires BEFORE write/edit tools execute. When a coder attempts to modify a file
  * outside its Task-correlated scope, blocks the call and injects an advisory.
  */
-import { resolveAuthorizedScopeBinding, resolveAuthorizedScopeBindingForSession } from '../scope/scope-persistence';
+import { getAuthorizedPrFeedbackScopeBinding } from '../scope/scope-binding';
+import { resolveAuthorizedPrFeedbackScopeBindingFromDisk, resolveAuthorizedScopeBinding, resolveAuthorizedScopeBindingForSession } from '../scope/scope-persistence';
 import { type AgentSessionState } from '../state';
+import { validatePrFeedbackScopeBinding } from './pr-workflow-gate';
 import { resolveWriteTargets } from './write-target-resolver';
 /**
  * Configuration for scope guard behavior.
@@ -69,6 +71,9 @@ export declare const _internals: {
     resolveWriteTargets: typeof resolveWriteTargets;
     resolveAuthorizedScopeBinding: typeof resolveAuthorizedScopeBinding;
     resolveAuthorizedScopeBindingForSession: typeof resolveAuthorizedScopeBindingForSession;
+    getAuthorizedPrFeedbackScopeBinding: typeof getAuthorizedPrFeedbackScopeBinding;
+    resolveAuthorizedPrFeedbackScopeBindingFromDisk: typeof resolveAuthorizedPrFeedbackScopeBindingFromDisk;
+    validatePrFeedbackScopeBinding: typeof validatePrFeedbackScopeBinding;
     resolveTaskId: (session: AgentSessionState | undefined) => string | null;
 };
 export {};