opencode-swarm 7.127.1 → 7.129.0

package/dist/cli/{index-bn3w6ym4.js → index-e3xtpsmf.js}

@@ -94,15 +94,15 @@ import {
   retireSkill,
   selectCandidateEntries,
   syncBundledProjectSkillsIfMissingAsync
-} from "./index-c4mcheyz.js";
+} from "./index-9s0ztmmz.js";
 import {
   readRecentEscalations
-} from "./index-ff3j65em.js";
+} from "./index-her5rv14.js";
 import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   resolveCohortId
-} from "./index-gn62e04k.js";
+} from "./index-zty6p8ps.js";
 import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
@@ -135,11 +135,11 @@ import {
   validateActionability,
   validateActionableFields,
   validateLesson
-} from "./index-ns62nv6t.js";
+} from "./index-b2m6mtde.js";
 import {
   authorizeCuration,
   buildConfigFingerprintInput
-} from "./index-3ntrn97w.js";
+} from "./index-jmsnbct2.js";
 import {
   cohortConfigFingerprint
 } from "./index-rtry5xyf.js";
@@ -169,7 +169,7 @@ import {
   transactFile,
   transactKnowledge,
   wordBigrams
-} from "./index-72envp1b.js";
+} from "./index-gy9h08cg.js";
 import {
   MAX_EVENT_LOG_ENTRIES,
   _internals,
@@ -179,7 +179,7 @@ import {
   recordHiveKnowledgeEvent,
   recordKnowledgeEvent,
   resolveKnowledgeEventsPath
-} from "./index-1mwdhq2p.js";
+} from "./index-d4zjjtqs.js";
 import {
   resolveHiveDataDir,
   resolveHiveEventsPath,
@@ -201,7 +201,7 @@ import {
   init_loader,
   loadPluginConfig,
   loadPluginConfigWithMeta
-} from "./index-hv2p03f3.js";
+} from "./index-dbn9d4kj.js";
 import {
   RetrospectiveEvidenceSchema
 } from "./index-k5jrywpr.js";
@@ -10987,7 +10987,7 @@ async function runCuratorPhase(directory, phase, agentsDispatched, config, knowl
     }
     if (config.skill_generation_enabled === true && skillCandidates.length > 0) {
       try {
-        const skillModule = await import("./skill-generator-e8c2r816.js");
+        const skillModule = await import("./skill-generator-dmshq3p6.js");
         for (const cand of skillCandidates) {
           if (cand.confidence < (config.min_skill_confidence ?? DEFAULT_SKILL_MIN_CONFIDENCE)) {
             continue;
@@ -11324,7 +11324,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     } catch {}
   }
   if (contradictedEntries.length > 0 && knowledgeConfig.contradiction_threshold_action === "quarantine") {
-    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-b3k4b8pk.js");
+    const { maybeQuarantineOnContradiction } = await import("./knowledge-escalator-h6jhw20r.js");
     for (const { id } of contradictedEntries) {
       try {
         await maybeQuarantineOnContradiction(directory, id, knowledgeConfig.contradiction_quarantine_threshold, knowledgeConfig.contradiction_quarantine_window_days);
@@ -12123,7 +12123,7 @@ async function runCuratorPostMortem(directory, options = {}) {
       warnings.push("Failed to collect knowledge summary.");
     }
     try {
-      const { getScanStatus } = await import("./scan-cursor-rgnarf67.js");
+      const { getScanStatus } = await import("./scan-cursor-hh6gdzrg.js");
       const scanStatus = await getScanStatus(directory);
       if (scanStatus.remaining_estimate > 0) {
         warnings.push(`Fair scan: reviewed ${knowledgeSummary.length} entries this sweep (generation ${scanStatus.generation}); ${scanStatus.remaining_estimate} more eligible entries will be visited in future curation sweeps.`);
@@ -12297,7 +12297,7 @@ var _internals15 = {
   loadDefaultKnowledgeConfig: async (directory) => {
     const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-2x7wsb0n.js");
     try {
-      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-edv27z4p.js");
+      const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-4gsqjp9p.js");
       const loaded = loadPluginConfigWithMeta2(directory);
       return KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
     } catch {
@@ -12305,11 +12305,11 @@ var _internals15 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-qqd1fvvg.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-wywrxn1j.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-14jh86kj.js");
+    const { checkHivePromotions } = await import("./hive-promoter-w2hf8w69.js");
     return checkHivePromotions(entries, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -12318,7 +12318,7 @@ var _internals15 = {
       activateProposal,
       listSkills: listSkills2,
       sanitizeSlug
-    } = await import("./skill-generator-e8c2r816.js");
+    } = await import("./skill-generator-dmshq3p6.js");
     const result = {
       approved: [],
       rejected: [],
@@ -14845,7 +14845,7 @@ function hashContent(content) {
 async function loadConfigForPolicyCurator(directory) {
   const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-2x7wsb0n.js");
   try {
-    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-edv27z4p.js");
+    const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-4gsqjp9p.js");
     const { config: loadedConfig } = loadPluginConfigWithMeta2(directory);
     return KnowledgeConfigSchema2.parse(loadedConfig.knowledge ?? {});
   } catch {
@@ -20176,8 +20176,8 @@ var _internals28 = {
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
       import("./schema-2x7wsb0n.js"),
-      import("./curator-qqd1fvvg.js"),
-      import("./curator-llm-factory-4t2h2p60.js")
+      import("./curator-wywrxn1j.js"),
+      import("./curator-llm-factory-j35jd864.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -20676,7 +20676,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "opencode-swarm",
-  version: "7.127.1",
+  version: "7.129.0",
   description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -21198,7 +21198,7 @@ async function computeCurationDiagnostics(directory, entries) {
   let scanCompleted = false;
   let scanRemaining = 0;
   try {
-    const { getScanStatus } = await import("./scan-cursor-rgnarf67.js");
+    const { getScanStatus } = await import("./scan-cursor-hh6gdzrg.js");
     const status = await getScanStatus(directory);
     scanGeneration = status.generation;
     scanCompleted = status.completed;
@@ -21211,14 +21211,14 @@ async function computeCurationDiagnostics(directory, entries) {
       const { KnowledgeConfigSchema: KnowledgeConfigSchema2 } = await import("./schema-2x7wsb0n.js");
       let config;
       try {
-        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-edv27z4p.js");
+        const { loadPluginConfigWithMeta: loadPluginConfigWithMeta2 } = await import("./index-4gsqjp9p.js");
         const loaded = loadPluginConfigWithMeta2(directory);
         config = KnowledgeConfigSchema2.parse(loaded.config.knowledge ?? {});
       } catch {
         config = KnowledgeConfigSchema2.parse({});
       }
       const { cohortConfigFingerprint: cohortConfigFingerprint2 } = await import("./config-fingerprint-v22xh5a2.js");
-      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-82czah39.js");
+      const { buildConfigFingerprintInput: buildConfigFingerprintInput2, readCohortConfigFingerprint } = await import("./curation-policy-qwj9yxvp.js");
       const currentFp = cohortConfigFingerprint2(buildConfigFingerprintInput2(config));
       const cohortFp = await readCohortConfigFingerprint(directory);
       configMatch = cohortFp === null ? null : currentFp === cohortFp;
@@ -41238,7 +41238,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-pbw1ncre.js");
+    const { buildHelpText } = await import("./index-3a0dthh5.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -41247,7 +41247,7 @@ async function handleHelpCommand(ctx) {
     return _internals63.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals63.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-pbw1ncre.js");
+  const { buildHelpText: fullHelp } = await import("./index-3a0dthh5.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -41386,7 +41386,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-4yg67c3t.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-850vrn06.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -41396,7 +41396,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-4yg67c3t.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-850vrn06.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",

package/dist/cli/{index-72envp1b.js → index-gy9h08cg.js}

@@ -650,7 +650,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const recovered = touched.filter((e) => e.confidence > CONFIDENCE_FLOOR + FLOOR_EPSILON && e.confidence_floor_demoted);
   if (atFloor.length === 0 && recovered.length === 0)
     return;
-  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-4z5rkefv.js");
+  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-wtyjkcg0.js");
   const rollups = await readKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -717,11 +717,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-cs33ws57.js");
+    const { quarantineEntry } = await import("./knowledge-validator-afpv79e3.js");
     const { KnowledgeConfigSchema } = await import("./schema-2x7wsb0n.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-edv27z4p.js");
+      const { loadPluginConfigWithMeta } = await import("./index-4gsqjp9p.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-ff3j65em.js → index-her5rv14.js}

@@ -6,13 +6,13 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-72envp1b.js";
+} from "./index-gy9h08cg.js";
 import {
   countEntryContradictionsInWindow,
   countEntryViolationsInWindow,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-1mwdhq2p.js";
+} from "./index-d4zjjtqs.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -190,11 +190,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-cs33ws57.js");
+    const { quarantineEntry } = await import("./knowledge-validator-afpv79e3.js");
     let policyConfig;
     try {
       const { KnowledgeConfigSchema } = await import("./schema-2x7wsb0n.js");
-      const { loadPluginConfigWithMeta } = await import("./index-edv27z4p.js");
+      const { loadPluginConfigWithMeta } = await import("./index-4gsqjp9p.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-3ntrn97w.js → index-jmsnbct2.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-rtry5xyf.js";
 import {
   readKnowledgeEvents
-} from "./index-1mwdhq2p.js";
+} from "./index-d4zjjtqs.js";
 import {
   isLinked,
   readLinkPointer,

package/dist/cli/{index-8cnpsbk5.js → index-rmyxgxpj.js}

@@ -12,7 +12,7 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-bn3w6ym4.js";
+} from "./index-e3xtpsmf.js";
 import {
   checkFileAuthority,
   classifyFile,

package/dist/cli/{index-gn62e04k.js → index-zty6p8ps.js}

@@ -2,7 +2,7 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-72envp1b.js";
+} from "./index-gy9h08cg.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-q27bajqb.js";

package/dist/cli/index.js

@@ -7,28 +7,28 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-bn3w6ym4.js";
+} from "./index-e3xtpsmf.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kk1scggc.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
 import"./index-6n2jpz7x.js";
-import"./index-c4mcheyz.js";
-import"./index-ff3j65em.js";
-import"./index-gn62e04k.js";
+import"./index-9s0ztmmz.js";
+import"./index-her5rv14.js";
+import"./index-zty6p8ps.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-23zsx7dm.js";
-import"./index-ns62nv6t.js";
-import"./index-3ntrn97w.js";
+import"./index-b2m6mtde.js";
+import"./index-jmsnbct2.js";
 import"./index-rtry5xyf.js";
-import"./index-72envp1b.js";
-import"./index-1mwdhq2p.js";
+import"./index-gy9h08cg.js";
+import"./index-d4zjjtqs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-hv2p03f3.js";
+import"./index-dbn9d4kj.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {

package/dist/cli/{knowledge-escalator-b3k4b8pk.js → knowledge-escalator-h6jhw20r.js}

@@ -8,9 +8,9 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-ff3j65em.js";
-import"./index-72envp1b.js";
-import"./index-1mwdhq2p.js";
+} from "./index-her5rv14.js";
+import"./index-gy9h08cg.js";
+import"./index-d4zjjtqs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{knowledge-events-4z5rkefv.js → knowledge-events-wtyjkcg0.js}

@@ -26,7 +26,7 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-1mwdhq2p.js";
+} from "./index-d4zjjtqs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{knowledge-store-c0t16yr4.js → knowledge-store-a1xr70yg.js}

@@ -40,7 +40,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-72envp1b.js";
+} from "./index-gy9h08cg.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-cs33ws57.js → knowledge-validator-afpv79e3.js}

@@ -23,11 +23,11 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-ns62nv6t.js";
-import"./index-3ntrn97w.js";
+} from "./index-b2m6mtde.js";
+import"./index-jmsnbct2.js";
 import"./index-rtry5xyf.js";
-import"./index-72envp1b.js";
-import"./index-1mwdhq2p.js";
+import"./index-gy9h08cg.js";
+import"./index-d4zjjtqs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scan-cursor-rgnarf67.js → scan-cursor-hh6gdzrg.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-gn62e04k.js";
-import"./index-72envp1b.js";
+} from "./index-zty6p8ps.js";
+import"./index-gy9h08cg.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{skill-generator-e8c2r816.js → skill-generator-dmshq3p6.js}

@@ -33,12 +33,12 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-c4mcheyz.js";
-import"./index-ns62nv6t.js";
-import"./index-3ntrn97w.js";
+} from "./index-9s0ztmmz.js";
+import"./index-b2m6mtde.js";
+import"./index-jmsnbct2.js";
 import"./index-rtry5xyf.js";
-import"./index-72envp1b.js";
-import"./index-1mwdhq2p.js";
+import"./index-gy9h08cg.js";
+import"./index-d4zjjtqs.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-bk5tah7q.js";

package/dist/config/loader-recovery.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Config loader recovery persistence module.
+ *
+ * Persists recovery metadata emitted by the config loader so that:
+ *   - `/swarm config doctor` can surface stale recovery artifacts
+ *     (left by a prior process that crashed before cleanup).
+ *   - Post-init flush (via `flushPendingLoaderRecovery`) can record
+ *     recovery warnings without blocking plugin init.
+ *   - Stale artifacts from older loads are cleaned up atomically
+ *     when a newer load completes successfully (SC-002.3).
+ *
+ * Conflict resolution: every completed load writes a recovery artifact
+ * tagged with the tuple `{loadStartedAt, pid, inProcessCounter}`. When
+ * an artifact already exists, the new load wins iff its tuple is
+ * numerically greater than the existing one (component-wise comparison).
+ * This prevents a slower or earlier process from overwriting a newer
+ * recovery result.
+ *
+ * Artifact format (JSON):
+ * ```json
+ * {
+ *   "loadStartedAt": number,
+ *   "pid": number,
+ *   "inProcessCounter": number,
+ *   "sources": string[],
+ *   "fingerprint": string,
+ *   "warnings": RecoveryWarning[]
+ * }
+ * ```
+ *
+ * Lives under `src/config/` alongside `loader.ts` so the loader can
+ * import it without cross-module dependency violations.
+ */
+import * as fsPromises from 'node:fs/promises';
+import { bunWrite } from '../utils/bun-compat.js';
+import type { RecoveryWarning } from './sanitize-malformed-values.js';
+/** Shape of the on-disk recovery artifact. */
+export interface LoaderRecoveryArtifact {
+    /** Date.now() when the config load started. */
+    loadStartedAt: number;
+    /** process.pid of the loading process. */
+    pid: number;
+    /** Monotonic per-process counter for same-process disambiguation. */
+    inProcessCounter: number;
+    /** Sorted source paths that contributed to the config merge. */
+    sources: string[];
+    /** SHA-256 fingerprint of the merged raw config. */
+    fingerprint: string;
+    /** Recovery warnings from the load (empty for clean loads). */
+    warnings: RecoveryWarning[];
+}
+/**
+ * Input shape accepted by the public API.
+ * Matches `LoadPluginConfigWithRecoveryResult.pendingPersistence`
+ * from `loader.ts`.
+ */
+export type PendingLoaderRecoveryData = Omit<LoaderRecoveryArtifact, 'warnings'> & {
+    warnings: RecoveryWarning[];
+};
+/**
+ * Test-only dependency-injection seam — replaces `fsPromises.readFile`
+ * and `bunWrite` so tests can exercise failure paths without
+ * `mock.module` leakage (AGENTS.md §7).
+ */
+export declare const _internals: {
+    readFile: typeof fsPromises.readFile;
+    write: typeof bunWrite;
+};
+/**
+ * Persist loader recovery data to `<directory>/.swarm/advisories/loader-recovery.json`.
+ *
+ * Every completed load atomically writes the artifact under deterministic
+ * conflict resolution: the new load wins iff its `{loadStartedAt, pid,
+ * inProcessCounter}` tuple is numerically greater than the existing artifact's.
+ * Clean loads (no recovery warnings) write `warnings: []`, which serves as
+ * the SC-002.3 stale-artifact cleanup signal.
+ *
+ * Failures (filesystem errors, permission issues) are logged via
+ * `advisoryWarn` and never thrown — this is best-effort persistence.
+ *
+ * @param directory - Project root directory (the `.swarm/` parent).
+ * @param data - Recovery data from the loader's `pendingPersistence`.
+ */
+export declare function persistLoaderRecovery(directory: string, data: PendingLoaderRecoveryData): Promise<void>;
+/**
+ * Synchronous wrapper that defers `persistLoaderRecovery` via `queueMicrotask`.
+ *
+ * This is designed for the post-init flush path (task 1.5) where the caller
+ * must not await the write — the write is fire-and-forget, with errors
+ * routed to `advisoryWarn` inside `persistLoaderRecovery`.
+ *
+ * @param directory - Project root directory (the `.swarm/` parent).
+ * @param pendingData - Recovery data from the loader's `pendingPersistence`.
+ */
+export declare function flushPendingLoaderRecovery(directory: string, pendingData: PendingLoaderRecoveryData): void;

package/dist/config/loader.d.ts

@@ -24,10 +24,14 @@ export declare function formatZodIssues(error: z.ZodError): string;
  *                          the remaining configuration was preserved.
  *   'user_only'          – project config was discarded (failed validation and
  *                          targeted recovery); user config alone was used.
+ *   'sanitized_values'   – merged and user configs both failed, but recursive
+ *                          malformed-value recovery (step 7b, issue #1690)
+ *                          dropped the smallest invalid leaves/sections so the
+ *                          remaining valid configuration could load.
  *   'guardrails_defaults'– neither merged nor user config was recoverable;
  *                          fell back to fail-secure guardrails-only defaults.
  */
-export type ConfigRecovery = 'none' | 'stripped_keys' | 'user_only' | 'guardrails_defaults';
+export type ConfigRecovery = 'none' | 'stripped_keys' | 'user_only' | 'sanitized_values' | 'guardrails_defaults';
 /** Full result from the shared config-build core. */
 export type ConfigBuildResult = {
     config: PluginConfig;

package/dist/config/sanitize-malformed-values.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Fixed-point recovery helper for malformed config values.
+ *
+ * Given a Zod schema and a raw config object, this module iteratively
+ * removes malformed fields/sections until the config validates cleanly.
+ * It uses ONLY `safeParse` + `issue.path`/`issue.code`/`issue.keys` as
+ * signals — no schema introspection (`_def`, `.shape`, `instanceof` along
+ * paths), making it robust across Zod versions (v3 and v4+).
+ *
+ * Algorithm (SME-designed fixed-point):
+ *   1. Fast path: if `safeParse` succeeds, return the original reference
+ *      (no clone cost on the happy path).
+ *   2. Deep-clone the input exactly once.
+ *   3. Loop: parse → build leaf drop-set from issue paths → remove deepest
+ *      leaves first → re-parse.  If no new leaves found but fresh issues
+ *      remain, escalate to nearest non-removed ancestor.  If still stuck,
+ *      drop entire implicated top-level sections.
+ *   4. Terminate when parse succeeds or fuel is exhausted.
+ *   5. Emit ancestor-suppressed, deterministically-ordered warnings.
+ *
+ * This is a PURE function — no side effects, no I/O, no logging.
+ */
+import type { z } from 'zod';
+/** Dotted path identifying the dropped unit, e.g. "council.enabled" or "pr_monitor". */
+export interface RecoveryWarning {
+    section: string;
+    /** Currently always 'warn'; reserved for future severity levels. */
+    severity: 'warn';
+    /** Human-readable description of what was dropped and why. */
+    message: string;
+    /** Full Zod error path if available (for debugging / downstream use). */
+    path?: string;
+}
+export interface SanitizeResult {
+    /** The recovered config object. Keys omitted here will be filled by Zod defaults
+     *  at parse time — callers should re-parse this through the schema. */
+    config: Record<string, unknown>;
+    /** Warnings for every field or section that was dropped during recovery. */
+    recoveryWarnings: RecoveryWarning[];
+}
+/**
+ * Attempt to recover a malformed config by iteratively dropping invalid
+ * values until the config validates.  This is a generic helper that works
+ * with any Zod schema and avoids all schema introspection.
+ *
+ * The returned `config` is the cleaned raw config — callers should pass it
+ * through `schema.parse()` to get fully typed output with defaults applied.
+ *
+ * @param schema - The Zod schema to validate against.
+ * @param rawConfig - The raw parsed-config object (not yet Zod-validated).
+ * @returns The cleaned config plus any warnings emitted during recovery.
+ */
+export declare function sanitizeMalformedValues(schema: z.ZodTypeAny, rawConfig: Record<string, unknown>): SanitizeResult;

package/dist/hooks/auto-review.d.ts

@@ -21,8 +21,16 @@
  * Bounds (AGENTS.md invariants 3 and 8): the diff subprocess uses execFile
  * with cwd/timeout/maxBuffer and ignored stdin; dispatches are guarded by a
  * per-session in-flight set plus a 60s cooldown in a bounded FIFO map.
+ *
+ * #1896 / #1905: on a transient/quota dispatch error the reviewer fails over to
+ * a configured `fallback_models` entry via the shared `dispatchWithModelFallback`
+ * helper, instead of immediately writing a `verdict: 'error'` event (a quota
+ * blip previously dropped the review pass with no recovery). The SDK error
+ * envelope is preserved in the thrown message so the classifier sees the quota
+ * token on the dominant SDK error shape.
  */
 import { type AutoReviewConfig } from '../config/schema.js';
+import { type ModelOverride } from '../utils/model-dispatch-fallback.js';
 /** Test-only: clear module-level dispatch tracking. */
 export declare function resetAutoReviewTracking(): void;
 export type ExecutionDiffResult = {
@@ -42,7 +50,7 @@ export type ExecutionDiffResult = {
  * `maxBytes`.
  */
 declare function computeExecutionDiff(directory: string, maxBytes: number): Promise<ExecutionDiffResult>;
-declare function dispatchReviewer(directory: string, prompt: string, agentName: string, timeoutMs: number, parentSessionId: string): Promise<string>;
+declare function dispatchReviewer(directory: string, prompt: string, agentName: string, timeoutMs: number, parentSessionId: string, model?: ModelOverride): Promise<string>;
 export interface AutoReviewRunInput {
     directory: string;
     sessionID: string;