opencode-swarm 7.132.1 → 7.132.2

package/.opencode/skills/swarm-pr-review/SKILL.md

@@ -173,7 +173,9 @@ Exception: in explicit Council mode only, the main thread may act as the indepen
 Determine review scope using this priority:
 
 1. explicit user-provided PR URL, PR number, commit, branch, or file scope,
-2. current feature branch diff vs `origin/main`, `main`, `origin/master`, or `master`,
+2. current feature branch diff vs the remote-tracking base ref (`origin/main`,
+   `origin/master`; a local `main`/`master` only as a last resort — it is only as
+   fresh as the last fetch and yields a different merge base),
 3. staged changes,
 4. latest commit,
 5. user-specified files or directories.
@@ -211,6 +213,11 @@ Before launching explorers (Phase 3), perform this exact standalone sequence:
    `git stash` through shell.
 3. Fetch the PR head as one standalone command, for example
    `git fetch origin refs/pull/<N>/head`. Do not compose fetch and checkout.
+3a. Fetch the base branch as its own standalone command, for example
+   `git fetch origin main`. Skipping this is the single most common cause of a
+   rejected dispatch: the merge base is recomputed against `base_ref`, and a
+   local `main`/`refs/heads/main` that was never refreshed resolves to a
+   different commit than `origin/main` for the same `base_sha`.
 4. Prove the full commit exists locally with
    `git cat-file -e <full_pr_head_sha>^{commit}`.
 5. Check out the exact PR filesystem with
@@ -775,8 +782,10 @@ Under Profile A, launch all base lanes with `dispatch_lanes_async`. Pass the six
 lane specs together, set `mode: "swarm-pr-review:base"`, assign each lane its
 exact `workflow_lane` identifier from the table below, set `max_concurrent` to
 `6`, bind the batch with the exact current `pr_head_sha`, record the returned
-`batch_id`, and pass the exact reviewed merge base and its live base tip/ref as
-`base_sha` and `base_ref`. Every later base retry, micro, council, reviewer, and
+`batch_id`, and pass the exact reviewed merge base and its base ref as
+`base_sha` and `base_ref`. Use the REMOTE-TRACKING form for `base_ref`
+(`origin/main`, not `main` or `refs/heads/main`) and compute `base_sha` against
+that same ref, so the controller's recomputation matches yours. Every later base retry, micro, council, reviewer, and
 critic dispatch repeats those same exact bindings. The controller recomputes
 `git merge-base -- <base_ref> <pr_head_sha>`, rejects mismatches, and replaces
 caller `scope` text with the complete verified `base_sha...pr_head_sha` PR diff;
@@ -1683,8 +1692,9 @@ mode `PR_REVIEW` and the same exact
 `pr_head_sha`. The tool refuses to clear the session gate while required base,
 trigger, declared reviewer/critic, or open-lane obligations remain incomplete.
 While the gate remains active, the runtime prepends a workflow-active banner
-to architect text parts (the model's text is preserved below the banner) and
-re-wakes an idle parent session. A
+to the first substantive text part of each architect message (the model's text
+is preserved below the banner; later parts of the same message, and blank
+parts, are left untouched) and re-wakes an idle parent session. A
 user interruption pauses every automatic wake path until a later explicit user
 turn settles; the durable gate remains available to continue or abort. Only
 emit the final report after the completion tool confirms that the gate cleared.

package/dist/cli/{curator-28hcw9hx.js → curator-h067mrcc.js}

@@ -14,7 +14,7 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-b21a4zw4.js";
+} from "./index-f6480ee6.js";
 import"./index-yvv1wt2h.js";
 import"./index-630badhp.js";
 import"./index-03zyn94g.js";

package/dist/cli/{curator-llm-factory-rd0s95fw.js → curator-llm-factory-605d08hf.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-b21a4zw4.js";
+} from "./index-f6480ee6.js";
 import"./index-yvv1wt2h.js";
 import"./index-630badhp.js";
 import"./index-03zyn94g.js";

package/dist/cli/{guardrail-explain-742dhpec.js → guardrail-explain-s7vzm6z7.js}

@@ -1,8 +1,8 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-4hapy63e.js";
-import"./index-b21a4zw4.js";
+} from "./index-k4tmx21m.js";
+import"./index-f6480ee6.js";
 import"./index-yvv1wt2h.js";
 import"./index-630badhp.js";
 import"./index-03zyn94g.js";

package/dist/cli/{hive-promoter-8whgvcry.js → hive-promoter-nv0m5rzk.js}

@@ -7,7 +7,7 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-b21a4zw4.js";
+} from "./index-f6480ee6.js";
 import"./index-yvv1wt2h.js";
 import"./index-630badhp.js";
 import"./index-03zyn94g.js";

package/dist/cli/{index-x3p6ktva.js → index-8d3m0ge3.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-4hapy63e.js";
+} from "./index-k4tmx21m.js";
 import {
   handleGuardrailLog
 } from "./index-fgcmxjp7.js";
@@ -83,7 +83,7 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-b21a4zw4.js";
+} from "./index-f6480ee6.js";
 import"./index-yvv1wt2h.js";
 import"./index-630badhp.js";
 import"./index-03zyn94g.js";

package/dist/cli/{index-b21a4zw4.js → index-f6480ee6.js}

@@ -16810,11 +16810,11 @@ var _internals22 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-28hcw9hx.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-h067mrcc.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-8whgvcry.js");
+    const { checkHivePromotions } = await import("./hive-promoter-nv0m5rzk.js");
     return checkHivePromotions(entries, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -24916,8 +24916,8 @@ var _internals36 = {
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
       import("./schema-023gwne7.js"),
-      import("./curator-28hcw9hx.js"),
-      import("./curator-llm-factory-rd0s95fw.js")
+      import("./curator-h067mrcc.js"),
+      import("./curator-llm-factory-605d08hf.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -25422,7 +25422,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "opencode-swarm",
-  version: "7.132.1",
+  version: "7.132.2",
   description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -45957,7 +45957,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-x3p6ktva.js");
+    const { buildHelpText } = await import("./index-8d3m0ge3.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -45966,7 +45966,7 @@ async function handleHelpCommand(ctx) {
     return _internals9.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals9.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-x3p6ktva.js");
+  const { buildHelpText: fullHelp } = await import("./index-8d3m0ge3.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -46105,7 +46105,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-742dhpec.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-s7vzm6z7.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -46115,7 +46115,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-742dhpec.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-s7vzm6z7.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",

package/dist/cli/{index-4hapy63e.js → index-k4tmx21m.js}

@@ -12,7 +12,7 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-b21a4zw4.js";
+} from "./index-f6480ee6.js";
 import {
   checkFileAuthority,
   classifyFile,

package/dist/cli/index.js

@@ -7,7 +7,7 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-b21a4zw4.js";
+} from "./index-f6480ee6.js";
 import"./index-yvv1wt2h.js";
 import"./index-630badhp.js";
 import"./index-03zyn94g.js";

package/dist/hooks/guardrails/index.d.ts

@@ -19,6 +19,13 @@ export declare const _internals: {
     resolveFallbackModel: typeof resolveFallbackModel;
     dcCheckJunctionCreation: typeof dcCheckJunctionCreation;
     extractErrorSignal: typeof extractErrorSignal;
+    /**
+     * Test/inspection seams for the no-op detector's bounded session state
+     * (invariant 8). Production code does not call these; they exist so the
+     * eviction bound can be asserted without exporting the maps themselves.
+     */
+    noOpStateSize: () => number;
+    hasNoOpState: (sessionID: string) => boolean;
 };
 /**
  * Issue #853 Layer B: tools that are structurally blocked while
@@ -36,6 +43,31 @@ export declare function enforceSpecDriftGate(directory: string | undefined, tool
  * Extracts bounded provider/error signal from unknown hook error payloads.
  */
 declare function extractErrorSignal(errorContent: unknown): string;
+/**
+ * v6.33.1: No-op work detector state.
+ *
+ * AGENTS.md invariant 8: module-level, session-keyed state must have an explicit
+ * eviction strategy. Both containers below are keyed by `sessionID` and were
+ * previously unbounded — they grew for the lifetime of the plugin process, since
+ * nothing removed a key when a session ended. `noOpWarningIssued` was only ever
+ * `delete`d on a reset, and `toolCallsSinceLastWrite` never shrank at all.
+ *
+ * Bounded LRU, evicting the LEAST-RECENTLY-TOUCHED session.
+ *
+ * Plain insertion-order (FIFO) eviction is wrong here and actively harmful.
+ * `Map.set()` on an EXISTING key does not move it, so the first session created
+ * in the process stays permanently at the front of the iteration order. In an
+ * OpenCode plugin process that first session is the architect — the very session
+ * this detector exists to watch — making it the guaranteed first eviction victim
+ * while a session touched once and abandoned later survives. Measured: with a
+ * FIFO bound, an architect climbing toward the threshold had its counter evicted
+ * and reset mid-climb, and its 15th consecutive no-write call produced ZERO
+ * warnings. A bound must not silence the detector it was added to protect.
+ *
+ * {@link touchNoOpSession} therefore deletes before setting, moving the key to
+ * the back on every touch, so eviction genuinely targets quiet sessions.
+ */
+export declare const MAX_TRACKED_NO_OP_SESSIONS = 200;
 /**
  * Redacts sensitive values from a shell command string before audit logging.
  * Single-sourced from ./helpers (which additionally redacts home paths).

package/dist/hooks/guardrails/messages-transform.d.ts

@@ -32,6 +32,13 @@ type ChatMessageLike = {
         text?: unknown;
     }>;
 };
+/**
+ * Shared by the runaway-output advisory's TEXT and its once-per-drain dedupe
+ * predicate, so the two can never drift apart again. They previously did: the
+ * predicate tested for the string 'runaway output', which the pushed message
+ * never contained, making the guard permanently inert.
+ */
+export declare const RUNAWAY_OUTPUT_ADVISORY_MARKER = "Model is generating analysis without taking action";
 export declare function getMostRecentAssistantText(messages: ChatMessageLike[]): string;
 export declare function isTransientProviderFailureText(text: string): boolean;
 export declare function getProviderFailureFingerprint(text: string): string;

package/dist/hooks/guardrails.d.ts

@@ -10,5 +10,5 @@
  * - Layer 2 (Hard Block @ 100%): Throws error in toolBefore to block further calls, injects STOP message
  */
 export { type AgentRule, type AttestationRecord, buildEffectiveRules, checkFileAuthority, checkFileAuthorityWithRules, checkWriteTargetForSymlink, clearGuardrailsCaches, DEFAULT_AGENT_AUTHORITY_RULES, getGlobMatcher, hashArgs, isOnDifferentFilesystemRoot, normalizePathWithCache, recordAttestation, validateAndRecordAttestation, validateAttestation, } from './guardrails/file-authority';
-export { _internals, createGuardrailsHooks, enforceSpecDriftGate, redactShellCommand, SPEC_DRIFT_BLOCKED_TOOLS, } from './guardrails/index';
+export { _internals, createGuardrailsHooks, enforceSpecDriftGate, MAX_TRACKED_NO_OP_SESSIONS, redactShellCommand, SPEC_DRIFT_BLOCKED_TOOLS, } from './guardrails/index';
 export { deleteStoredInputArgs, getStoredInputArgs, setStoredInputArgs, } from './guardrails/stored-input-args';

package/dist/hooks/pr-workflow-response-gate.d.ts

@@ -26,26 +26,38 @@ export declare const DEFAULT_MAX_CONSECUTIVE_UNPRODUCTIVE_WAKES = 5;
  */
 export declare const DEFAULT_WAKE_COOLDOWN_MS = 30000;
 /**
- * Minimum time between FULL workflow banners prepended to a single session's
- * completed text parts. The textComplete hook prepends a banner to every
- * architect text part while the durable gate exists; without a cooldown a
- * burst of reasoning parts repeats the full multi-line banner many times
- * (field report: ~8 repeats between two model thoughts). Within the cooldown a
- * short one-line marker is prepended instead; the full banner (and its
- * suspension/interruption recovery notices) returns once the cooldown elapses.
+ * Minimum time between FULL workflow banners for a single session. The banner
+ * is injected at most once per assistant MESSAGE (see the `banneredMessages`
+ * map in {@link createPrWorkflowResponseGate}); this cooldown only chooses
+ * whether that one injection is the full multi-line banner or the short
+ * one-line marker.
  *
- * The input event exposes only `{ sessionID }` — there is NO message/part ID —
- * so this dedupe is necessarily a per-session cooldown, not a per-message one.
- *
- * Suspended and user-interrupted states BYPASS the cooldown entirely: those are
- * invariant-10 operational notices that must appear in full on every part.
+ * Suspended and user-interrupted states BYPASS the cooldown: those are
+ * invariant-10 operational notices that must not be downgraded to the short
+ * marker. They are still subject to the per-message dedupe — "always visible"
+ * means visible on every user-facing turn, not repeated on every part of it.
  * Overridable via `createPrWorkflowResponseGate({ bannerCooldownMs })`.
  */
 export declare const DEFAULT_BANNER_COOLDOWN_MS = 20000;
+/**
+ * Absolute per-session injection ceiling used ONLY when the host does not
+ * supply `messageID`. The pinned host contract
+ * (`@opencode-ai/plugin` `index.d.ts`: `experimental.text.complete` receives
+ * `{ sessionID, messageID, partID }`, all required) always supplies it, so this
+ * path is defensive. Without a ceiling, a host that omitted `messageID` would
+ * fall back to the wall-clock window alone — which is exactly the behavior that
+ * produced the measured flood (968 marker-only lines, 55.3% of a real review
+ * transcript), because a cooldown only downgrades an injection, it never
+ * suppresses one.
+ */
+export declare const MAX_FALLBACK_BANNER_INJECTIONS_PER_SESSION = 20;
 /**
  * Bounded FIFO map of tracked wake budgets. Invariant 8 (session/global
- * state): module-level state must have an explicit eviction strategy. The
- * banner-stamp map (last full-banner instant per session) shares this bound.
+ * state): module-level state must have an explicit eviction strategy. Three
+ * further per-session maps share this same bound and the same FIFO discipline:
+ * `bannerStamps` (instant of the last full banner), `banneredMessages` (the
+ * assistant message already carrying a banner), and `fallbackInjections` (the
+ * injection count on the messageID-less path).
  */
 export declare const MAX_TRACKED_WAKE_SESSIONS = 200;
 interface PrWorkflowResponseGateClient {
@@ -59,19 +71,23 @@ interface WakeBudget {
 }
 /**
  * Prevent an architect from masquerading a premature text output as a terminal
- * verdict. The text-complete hook prepends a workflow-active banner to
- * architect-session text parts while the durable gate exists; the model's
- * original text is preserved below the banner. To avoid spamming the full
- * multi-line banner across a burst of reasoning parts, the full banner is
- * throttled per session (see DEFAULT_BANNER_COOLDOWN_MS) — within the cooldown a
- * short one-line marker is prepended instead. session.idle then mechanically
- * resumes that session.
+ * verdict. The text-complete hook prepends a workflow-active banner to the
+ * FIRST substantive text part of each architect message while the durable gate
+ * exists; the model's original text is preserved below the banner.
+ *
+ * Injection is bounded on three independent axes, because a banner that is
+ * merely throttled is still injected on every part:
+ *   1. blank parts are never decorated (a banner labelling no content is noise);
+ *   2. a part that already opens with a banner is never re-decorated;
+ *   3. at most ONE injection per assistant `messageID`.
+ * The wall-clock cooldown (see DEFAULT_BANNER_COOLDOWN_MS) then only chooses
+ * whether that single injection is the full banner or the short marker.
  *
- * The resume loop is bounded (see DEFAULT_MAX_CONSECUTIVE_UNPRODUCTIVE_WAKES)
- * so a session that cannot make progress suspends instead of spinning
- * forever. Suspended and user-interrupted parts bypass the cooldown and always
- * carry the full suspension/interruption recovery notices so the user-visible
- * surface always names the recovery path.
+ * session.idle mechanically resumes a gated session. The resume loop is bounded
+ * (see DEFAULT_MAX_CONSECUTIVE_UNPRODUCTIVE_WAKES) so a session that cannot make
+ * progress suspends instead of spinning forever. Suspended and user-interrupted
+ * messages bypass the cooldown so their recovery notices are never downgraded to
+ * the short marker.
  */
 export declare function createPrWorkflowResponseGate(options: {
     directory: string;
@@ -86,6 +102,8 @@ export declare function createPrWorkflowResponseGate(options: {
     }) => Promise<void>;
     textComplete: (input: {
         sessionID?: string;
+        messageID?: string;
+        partID?: string;
     }, output: {
         text: string;
     }) => Promise<void>;