opencode-swarm 7.136.2 → 7.136.4

package/dist/hooks/trajectory-logger.d.ts

@@ -23,6 +23,13 @@ export interface TrajectoryEntry {
     args_summary: string;
     verdict: string;
     elapsed_ms: number;
+    /**
+     * Host tool-call id. Written only by {@link recordDeniedToolCall} (issue
+     * #2063 D1) so a `tool.execute.after` that unexpectedly fires for a call
+     * whose before-hook already threw can be recognised and skipped instead of
+     * double-recording the same call.
+     */
+    callID?: string;
 }
 /**
  * Truncates a trajectory file to the newest half when maxLines is exceeded.
@@ -32,6 +39,28 @@ export interface TrajectoryEntry {
  * @param maxLines - Maximum number of lines to retain
  */
 export declare function truncateTrajectoryFile(filePath: string, maxLines: number): Promise<void>;
+/**
+ * Derives the action type from the tool name.
+ *
+ * Issue #2063 D2: the name is normalized via `normalizeToolNameLowerCase`
+ * first, so host-namespaced names (`opencode:bash`, `opencode.read`) bucket
+ * identically to their bare forms. Previously they all fell through to
+ * `tool_use`, which flattened the taxonomy PRM pattern detection reads. `grep`
+ * was likewise missing from the read bucket despite being one of the most
+ * frequent read-only calls.
+ *
+ * @param tool - Tool name (may carry a host namespace prefix)
+ * @returns Action type string
+ */
+declare function deriveAction(tool: string): string;
+/**
+ * Extracts the target from tool arguments.
+ *
+ * @param tool - Tool name
+ * @param args - Tool arguments object
+ * @returns Target string
+ */
+declare function extractTarget(tool: string, args?: Record<string, unknown>): string;
 /**
  * Creates the trajectory logger hook pair.
  *
@@ -51,6 +80,41 @@ export declare function createTrajectoryLoggerHook(config: Partial<TrajectoryCon
         metadata: unknown;
     }) => Promise<void>;
 };
+/**
+ * Records a tool call that a fail-closed `tool.execute.before` hook DENIED.
+ *
+ * Before this existed the trajectory only contained calls that ran, so a
+ * session that spent fifty turns re-issuing a dispatch the delegation gate kept
+ * rejecting looked, to PRM and to any post-hoc reader, like a session that made
+ * no tool calls at all — the exact loop shape #2063 is about was invisible in
+ * the record of it.
+ *
+ * Contract:
+ *   - The step is minted with the SHARED `nextTrajectoryStep(sessionId)`. Any
+ *     private counter would desynchronise the `prmTrajectoryStep` window and
+ *     silently break PRM's step-range filtering.
+ *   - `session.delegationActive` gates recording at all (the architect session
+ *     is deliberately out of scope); the task-evidence copy additionally
+ *     requires `session.currentTaskId`, so a subagent running without a task id
+ *     still lands in the PRM store.
+ *   - EVERY failure is swallowed. This runs inside the `catch` that is about to
+ *     rethrow a policy denial; it must never change which error propagates.
+ *
+ * @param sessionID - Session whose chain denied the call
+ * @param input - The host `tool.execute.before` input (tool / callID / args)
+ * @param errorMessage - The ORIGINAL denial message, before any B1 decoration
+ * @param directory - Workspace root (evidence + PRM store live under `.swarm/`)
+ * @param options - `maxLines` mirrors the hook's `max_lines` config
+ */
+export declare function recordDeniedToolCall(sessionID: string, input: {
+    tool: string;
+    callID?: string;
+    args?: Record<string, unknown>;
+}, errorMessage: string, directory: string, options?: {
+    maxLines?: number;
+}): Promise<void>;
+/** Test helper: drop all denied-call dedupe markers. */
+export declare function clearDeniedCallMarkers(): void;
 /**
  * Resets the step counter for a session. Called when a new session starts
  * or when trajectory tracking should restart from step 1.
@@ -73,3 +137,15 @@ export declare function clearTrajectoryStep(sessionId?: string): void;
  * @param startTime - Start timestamp in milliseconds
  */
 export declare function recordToolCallStart(sessionId: string, callID: string, startTime: number): void;
+/**
+ * Tier-0 pure-function test seam (writing-tests skill). These helpers take no
+ * external dependencies, so testing them directly needs no mocks at all.
+ */
+export declare const _test_exports: {
+    readonly deriveAction: typeof deriveAction;
+    readonly extractTarget: typeof extractTarget;
+    readonly MAX_DENIED_CALL_MARKERS: 500;
+    readonly DENIED_CALL_TTL_MS: number;
+    readonly deniedCallMarkerCount: () => number;
+};
+export {};