opencode-swarm 7.126.1 → 7.126.3

package/.opencode/skills/engineering-conventions/SKILL.md

@@ -35,7 +35,7 @@ If you are not sure whether you are touching one of these, you are touching one
 The full list of 12 invariants is in `AGENTS.md`. The four that have caused the most recent production regressions:
 
 1. **Plugin initialization is bounded and fail-open.** Every awaited operation on the plugin-init path must be wrapped in `withTimeout(...)` and degrade non-fatally on timeout. Issue #704 (v7.0.3) and the v7.3.3 git-hygiene regression both stem from violating this. The OpenCode plugin host silently drops a plugin whose entry never resolves; users see "no agents in TUI / GUI" with no error.
-   - **Bounded is not free:** `withTimeout` only prevents an *unbounded* hang — the awaited work's latency still counts toward the ~400 ms repro-704 init deadline. Defer non-trivial init I/O via `queueMicrotask` when nothing downstream needs it before `server()` resolves.
+   - **Bounded is not free:** `withTimeout` only prevents an *unbounded* hang — the awaited work's latency still counts toward the ~400 ms repro-704 init deadline. Register non-trivial init I/O in the wrapper-owned post-resolution task queue when nothing downstream needs it before `server()` resolves. Do not use `queueMicrotask` inside the initializer: it can run during a later `await` while `server()` is still unresolved.
 2. **Subprocesses are bounded, non-interactive, and killable.** Every `bunSpawn(['<bin>', ...])` call must pass `cwd`, `stdin: 'ignore'` (unless intentionally interactive), `timeout: <ms>`, bounded stdio, and call `proc.kill()` in a `finally`. An outer `withTimeout` is not enough — it lets the awaiter proceed but does not abort the child.
 3. **Runtime portability — Node-ESM-loadable + v1 plugin shape.** No top-level `bun:` imports in `dist/index.js`. Default export is `{ id, server }`. All `Bun.*` calls go through `src/utils/bun-compat.ts`. v6.86.8 / v6.86.9 are the cautionary tales.
 4. **Test mock isolation.** `mock.module(...)` leaks across files in Bun's shared test-runner process. Prefer, in order: (a) `_test_exports` for pure function testing with zero mocks, (b) `_internals` dependency-injection seam for within-module mocking (see `src/utils/gitignore-warning.ts:_internals` and `src/hooks/diff-scope.ts:_internals`), (c) `mock.module` only when unavoidable. Restore in `afterEach`. The writing-tests skill covers all three tiers in detail; load it before modifying tests.

package/.opencode/skills/swarm-pr-feedback/SKILL.md

@@ -139,9 +139,12 @@ tree:
   supersedes your planned fixes, and prefer the parallel work if it's more
   comprehensive (more tests, better edge coverage, clearer error handling).
   Abort your rebase, take the remote state, then add minor improvements on top.
-- Verify the working tree is clean first (`git status --porcelain`). If uncommitted
-  changes exist, stash them or abort to prevent data loss.
-- **Check out the head branch locally.** Feedback verification reads the working-tree
+- Verify the working tree is clean first (`git status --porcelain`). If tracked
+  changes exist, call `prepare_pr_workflow_checkout` with every explicit dirty
+  tracked path. It creates an auditable, path-scoped stash and returns its
+  recovery command. Do not issue `git stash` through shell. The controller never
+  stashes untracked files; move or remove those manually, or abort the checkout.
+- **Check out the head branch locally before dispatching feedback lanes.** Feedback verification reads the working-tree
   filesystem (`Read`/`Glob`/`Grep`), and fixes must land on the PR branch — without a
   checkout you would verify and patch the base branch's code instead. Record the
   exact `merge_base...head_ref` range for diff-scoped inspection.
@@ -156,6 +159,15 @@ tree:
   the upstream of an existing local branch with
   `git branch --set-upstream-to=<remote>/<remote-branch> <local-branch>`).
   Branch creation/tracking is blocked after the immutable head is bound.
+- `gh pr checkout` is permitted only in its non-force, non-submodule form with
+  the PR number/URL and optional `--repo` or `--branch` flags. Never use
+  `--force`, `--recurse-submodules`, or detached checkout during this
+  transition.
+- Before the first feedback verification dispatch binds the head, prove that
+  `git rev-parse HEAD` equals the authoritative full `pr_head_sha`,
+  `git status --porcelain` is empty, and the current branch tracks the intended
+  PR head remote/branch. A detached checkout is valid for review, not feedback
+  publication.
 
 When a verification lane result includes `output_ref`, treat `output` as a
 preview and call `retrieve_lane_output` before using it to classify, resolve,
@@ -730,8 +742,10 @@ the independently approved digest, the exact approved commit remains current,
 its bound upstream remote-tracking ref points to that exact commit, every
 feedback ID has exact-provenance evidence, and no PR-workflow lanes remain
 open. While the gate remains active, the runtime replaces architect
-final-response text with a mechanical blocked notice and re-wakes an idle
-parent session.
+final-response text with a mechanical blocked notice and normally re-wakes an
+idle parent session. A user interruption pauses automatic wakes until a later
+explicit user turn settles; the durable gate remains available to continue or
+abort.
 
 Report:
 

package/.opencode/skills/swarm-pr-review/SKILL.md

@@ -134,9 +134,26 @@ If scope cannot be determined, review the narrowest safe scope available and sta
 
 ### Pre-flight git ref availability
 
-Before launching explorers (Phase 3), confirm the PR branch refs are available:
-- If `head_ref` is a remote branch that is not checked out locally, fetch it via `git fetch origin <head_ref>`
-- **Check out the head branch locally.** Explorer agents read files from the working tree, not from git history — passing the commit range in the delegation prompt is not sufficient because `Read` / `Glob` / `Grep` tools operate on the filesystem. Without a checkout, explorers silently read the base branch's version of changed files and produce invalid candidates. **Before checking out, verify the working tree is clean (`git status --porcelain`). If uncommitted changes exist, stash them or abort the checkout to prevent data loss.**
+Before launching explorers (Phase 3), perform this exact standalone sequence:
+
+1. Resolve and retain the authoritative full `pr_head_sha` from PR metadata.
+2. Verify the working tree is clean with `git status --porcelain`. If tracked
+   changes exist, call `prepare_pr_workflow_checkout` with every explicit dirty
+   tracked path. Do not issue `git stash` through shell. The controller never
+   stashes untracked files; move or remove those manually, or abort.
+3. Fetch the PR head as one standalone command, for example
+   `git fetch origin refs/pull/<N>/head`. Do not compose fetch and checkout.
+4. Prove the full commit exists locally with
+   `git cat-file -e <full_pr_head_sha>^{commit}`.
+5. Check out the exact PR filesystem with
+   `git switch --detach <full_pr_head_sha>`. Do not use `--track FETCH_HEAD`:
+   `FETCH_HEAD` is not a remote-tracking branch.
+6. Confirm `git rev-parse HEAD` equals the full `pr_head_sha`, bind that exact
+   head through the first PR-review controller call, and finish this before dispatching explorer lanes.
+
+Explorer agents read files from the working tree, not from git history. Passing
+the commit range in a prompt cannot substitute for this checkout because
+`Read` / `Glob` / `Grep` operate on the filesystem.
 - Explicitly pass the verified merge-base range (`base_sha...pr_head_sha`) in every explorer delegation so explorers inspect exactly the controller-bound PR diff. Include `base_ref` only as the live ref used to recompute `base_sha`; do not substitute a two-dot branch-tip range.
 
 If refs cannot be fetched or checked out, state the limitation in the context pack.
@@ -1405,7 +1422,9 @@ the same exact
 `pr_head_sha`. The tool refuses to clear the session gate while required base,
 trigger, declared reviewer/critic, or open-lane obligations remain incomplete.
 While the gate remains active, the runtime replaces architect final-response
-text with a mechanical blocked notice and re-wakes an idle parent session. Only
+text with a mechanical blocked notice and re-wakes an idle parent session. A
+user interruption pauses every automatic wake path until a later explicit user
+turn settles; the durable gate remains available to continue or abort. Only
 emit the final report after the completion tool confirms that the gate cleared.
 
 ## Aborting an unrecoverable review
@@ -1419,9 +1438,11 @@ the merge-base bind can never verify. In that state the response gate
 suspends further auto-resumes after a small number of consecutive
 unproductive wakes, and the only exits are:
 
-1. **Diagnose and retry as two separate standalone commands.** First run
-   `git fetch origin refs/pull/<N>/head:pr-<N>-head` (single command), then
-   `git checkout pr-<N>-head` (single command). Then recompute the exact
+1. **Diagnose and retry the canonical standalone sequence.** Run
+   `git fetch origin refs/pull/<N>/head`, verify
+   `git cat-file -e <full_pr_head_sha>^{commit}`, then run
+   `git switch --detach <full_pr_head_sha>`. Do not use `--track FETCH_HEAD`.
+   Confirm `git rev-parse HEAD` equals the authoritative PR head, then recompute the exact
    merge base with `git merge-base -- <base_ref> <pr_head_sha>` (single
    command) and retry the `swarm-pr-review:base` dispatch with the exact
    `pr_head_sha`, `base_sha`, and `base_ref`.

package/dist/background/pr-event-delivery.d.ts

@@ -89,7 +89,7 @@ export declare function buildWakeMessage(events: FormattedPrEvent[]): string;
  * clients that lack it. Bounded by withTimeout; returns false on any
  * failure or timeout. Never throws.
  */
-declare function sendWakePrompt(sessionID: string, events: FormattedPrEvent[]): Promise<boolean>;
+declare function sendWakePrompt(sessionID: string, events: FormattedPrEvent[], messageID: string): Promise<boolean>;
 export declare const _internals: {
     sendWakePrompt: typeof sendWakePrompt;
     withTimeout: typeof withTimeout;

package/dist/cli/{config-doctor-23jxdqwv.js → config-doctor-mfx27331.js}

@@ -12,8 +12,8 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-w0yztxgq.js";
-import"./index-c8sqc3nh.js";
+} from "./index-3xd9a2g7.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{curation-policy-0t6hny6g.js → curation-policy-n944aq62.js}

@@ -4,9 +4,9 @@ import {
   authorizeCuration,
   buildConfigFingerprintInput,
   readCohortConfigFingerprint
-} from "./index-kx3533dm.js";
+} from "./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-cnhp6c0k.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{curator-g8rggzbk.js → curator-jm9ehfkg.js}

@@ -14,31 +14,31 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-y9t766sw.js";
-import"./index-echdpdhy.js";
-import"./index-w0yztxgq.js";
+} from "./index-5n868tw8.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-k5xh81c9.js";
-import"./index-nkhp7j16.js";
-import"./index-3hkbegq2.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-6j9p0c40.js";
-import"./index-kx3533dm.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-nmyg9b7v.js";
-import"./index-cnhp6c0k.js";
+import"./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-abw10n3f.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-c8sqc3nh.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";

package/dist/cli/{curator-llm-factory-36psae60.js → curator-llm-factory-3cy0h9yw.js}

@@ -1,31 +1,31 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-y9t766sw.js";
-import"./index-echdpdhy.js";
-import"./index-w0yztxgq.js";
+} from "./index-5n868tw8.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-k5xh81c9.js";
-import"./index-nkhp7j16.js";
-import"./index-3hkbegq2.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-6j9p0c40.js";
-import"./index-kx3533dm.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-nmyg9b7v.js";
-import"./index-cnhp6c0k.js";
+import"./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-abw10n3f.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-c8sqc3nh.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";

package/dist/cli/{guardrail-explain-6ffgrjx9.js → guardrail-explain-va0kj05m.js}

@@ -1,32 +1,32 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-x1w4cx3n.js";
-import"./index-y9t766sw.js";
-import"./index-echdpdhy.js";
-import"./index-w0yztxgq.js";
+} from "./index-6t5sa6v0.js";
+import"./index-5n868tw8.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-k5xh81c9.js";
-import"./index-nkhp7j16.js";
-import"./index-3hkbegq2.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-6j9p0c40.js";
-import"./index-kx3533dm.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
-import"./index-nmyg9b7v.js";
-import"./index-cnhp6c0k.js";
+import"./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-abw10n3f.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-c8sqc3nh.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";

package/dist/cli/{guardrail-log-57sczn5h.js → guardrail-log-61gya05m.js}

@@ -1,9 +1,9 @@
 // @bun
 import {
   handleGuardrailLog
-} from "./index-1p9z8cc4.js";
-import"./index-echdpdhy.js";
-import"./index-c8sqc3nh.js";
+} from "./index-bf76q8q7.js";
+import"./index-gxw20m1d.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{hive-promoter-c458rgp5.js → hive-promoter-h9c4kyv0.js}

@@ -7,33 +7,33 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-y9t766sw.js";
-import"./index-echdpdhy.js";
-import"./index-w0yztxgq.js";
+} from "./index-5n868tw8.js";
+import"./index-gxw20m1d.js";
+import"./index-3xd9a2g7.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-k5xh81c9.js";
-import"./index-nkhp7j16.js";
-import"./index-3hkbegq2.js";
+import"./index-7bxw3v5w.js";
+import"./index-f97dm6tz.js";
+import"./index-pf3xae4s.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-6j9p0c40.js";
-import"./index-kx3533dm.js";
+import"./index-88dt7c9z.js";
+import"./index-gwss5btk.js";
 import"./index-rtry5xyf.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-nmyg9b7v.js";
-import"./index-cnhp6c0k.js";
+} from "./index-pb8ag9vg.js";
+import"./index-nqp13m5a.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-abw10n3f.js";
+import"./index-gf9cxvp0.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
-import"./index-c8sqc3nh.js";
+import"./index-vcqwhe9d.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";

package/dist/cli/{index-w0yztxgq.js → index-3xd9a2g7.js}

@@ -8,7 +8,7 @@ import {
   init_constants,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-c8sqc3nh.js";
+} from "./index-vcqwhe9d.js";
 import {
   log
 } from "./index-zgwm4ryv.js";