opencode-swarm 7.137.0 → 7.137.2

package/dist/cli/{index-y25nsyaq.js → index-gey6qegb.js}

@@ -2,7 +2,7 @@
 import {
   redactPath,
   redactShellCommand
-} from "./index-j6ewv2pe.js";
+} from "./index-aygnzd04.js";
 
 // src/services/guardrail-log-service.ts
 import * as fs from "fs/promises";

package/dist/cli/{index-p124rnwb.js → index-jdqayy7h.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-mg26zd8x.js";
+} from "./index-s9at02fn.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,7 +9,7 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-fgkhpdc6.js";
+} from "./index-9casmxdt.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-vft1pg34.js";

package/dist/cli/{index-wg98bsxz.js → index-kakb2jm0.js}

@@ -2,7 +2,7 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-fgkhpdc6.js";
+} from "./index-9casmxdt.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-vft1pg34.js";

package/dist/cli/{index-j2ghsdzz.js → index-p0kez6cn.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-d0nhz96c.js";
+} from "./index-ysh3a2nb.js";
 import {
   handleGuardrailLog
-} from "./index-y25nsyaq.js";
+} from "./index-gey6qegb.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -84,39 +84,39 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-92v63zzr.js";
+} from "./index-d735dzm7.js";
 import"./index-vm4xw9z3.js";
-import"./index-k3mezk96.js";
-import"./index-j6ewv2pe.js";
-import"./index-91kk2e9j.js";
+import"./index-b2s3t517.js";
+import"./index-aygnzd04.js";
+import"./index-rfrkt29c.js";
 import"./index-1zrb3vt2.js";
 import"./index-5wjw05dy.js";
 import"./index-y8552snf.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-f24r6yqk.js";
-import"./index-d00q9kpq.js";
-import"./index-wg98bsxz.js";
+import"./index-pwx989sa.js";
+import"./index-02jqxmh8.js";
+import"./index-kakb2jm0.js";
 import"./index-6mjf4vr1.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-wsdnttf4.js";
 import"./index-5r6kkhd7.js";
-import"./index-p124rnwb.js";
-import"./index-mg26zd8x.js";
+import"./index-jdqayy7h.js";
+import"./index-s9at02fn.js";
 import"./index-rtry5xyf.js";
-import"./index-fgkhpdc6.js";
-import"./index-72wzb81c.js";
+import"./index-9casmxdt.js";
+import"./index-4t39wzzg.js";
 import"./index-ae75rja9.js";
 import"./index-vft1pg34.js";
 import"./index-n3h6rmbe.js";
-import"./index-pcwjz5de.js";
+import"./index-1da1tvtn.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-mwdzkr6k.js";
+} from "./index-vyh2prxv.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";

package/dist/cli/{index-f24r6yqk.js → index-pwx989sa.js}

@@ -2,18 +2,18 @@
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-p124rnwb.js";
+} from "./index-jdqayy7h.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-fgkhpdc6.js";
+} from "./index-9casmxdt.js";
 import {
   effectiveRetrievalOutcomes,
   readKnowledgeCounterRollups
-} from "./index-72wzb81c.js";
+} from "./index-4t39wzzg.js";
 import {
   init_knowledge_types,
   isActiveStatus

package/dist/cli/{index-91kk2e9j.js → index-rfrkt29c.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-mwdzkr6k.js";
+} from "./index-vyh2prxv.js";
 import {
   ALL_AGENT_NAMES,
   init_constants

package/dist/cli/{index-mg26zd8x.js → index-s9at02fn.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-rtry5xyf.js";
 import {
   readKnowledgeEvents
-} from "./index-72wzb81c.js";
+} from "./index-4t39wzzg.js";
 import {
   isLinked,
   readLinkPointer,

package/dist/cli/{index-mwdzkr6k.js → index-vyh2prxv.js}

@@ -21,7 +21,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.137.0",
+    version: "7.137.2",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",

package/dist/cli/{index-d0nhz96c.js → index-ysh3a2nb.js}

@@ -12,14 +12,14 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-92v63zzr.js";
+} from "./index-d735dzm7.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-j6ewv2pe.js";
+} from "./index-aygnzd04.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/index.js

@@ -6,39 +6,39 @@ import {
   getPluginConfigDir,
   getPluginLockFilePaths,
   resolveCommand
-} from "./index-92v63zzr.js";
+} from "./index-d735dzm7.js";
 import"./index-vm4xw9z3.js";
-import"./index-k3mezk96.js";
-import"./index-j6ewv2pe.js";
-import"./index-91kk2e9j.js";
+import"./index-b2s3t517.js";
+import"./index-aygnzd04.js";
+import"./index-rfrkt29c.js";
 import"./index-1zrb3vt2.js";
 import"./index-5wjw05dy.js";
 import"./index-y8552snf.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-f24r6yqk.js";
-import"./index-d00q9kpq.js";
-import"./index-wg98bsxz.js";
+import"./index-pwx989sa.js";
+import"./index-02jqxmh8.js";
+import"./index-kakb2jm0.js";
 import"./index-6mjf4vr1.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-wsdnttf4.js";
 import"./index-5r6kkhd7.js";
-import"./index-p124rnwb.js";
-import"./index-mg26zd8x.js";
+import"./index-jdqayy7h.js";
+import"./index-s9at02fn.js";
 import"./index-rtry5xyf.js";
-import"./index-fgkhpdc6.js";
-import"./index-72wzb81c.js";
+import"./index-9casmxdt.js";
+import"./index-4t39wzzg.js";
 import"./index-ae75rja9.js";
 import"./index-vft1pg34.js";
 import"./index-n3h6rmbe.js";
-import"./index-pcwjz5de.js";
+import"./index-1da1tvtn.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
   init_package,
   package_default
-} from "./index-mwdzkr6k.js";
+} from "./index-vyh2prxv.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";

package/dist/cli/{knowledge-escalator-9k0kbx6b.js → knowledge-escalator-e9zk371p.js}

@@ -8,9 +8,9 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-d00q9kpq.js";
-import"./index-fgkhpdc6.js";
-import"./index-72wzb81c.js";
+} from "./index-02jqxmh8.js";
+import"./index-9casmxdt.js";
+import"./index-4t39wzzg.js";
 import"./index-ae75rja9.js";
 import"./index-vft1pg34.js";
 import"./index-n3h6rmbe.js";

package/dist/cli/{knowledge-events-8nz3sa2d.js → knowledge-events-dnyc1k78.js}

@@ -28,7 +28,7 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-72wzb81c.js";
+} from "./index-4t39wzzg.js";
 import"./index-ae75rja9.js";
 import"./index-vft1pg34.js";
 import"./index-n3h6rmbe.js";

package/dist/cli/{knowledge-store-esghe3f9.js → knowledge-store-x4vqyhbz.js}

@@ -41,7 +41,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-fgkhpdc6.js";
+} from "./index-9casmxdt.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-bjxag1jp.js → knowledge-validator-72jdx5ze.js}

@@ -23,11 +23,11 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-p124rnwb.js";
-import"./index-mg26zd8x.js";
+} from "./index-jdqayy7h.js";
+import"./index-s9at02fn.js";
 import"./index-rtry5xyf.js";
-import"./index-fgkhpdc6.js";
-import"./index-72wzb81c.js";
+import"./index-9casmxdt.js";
+import"./index-4t39wzzg.js";
 import"./index-ae75rja9.js";
 import"./index-vft1pg34.js";
 import"./index-n3h6rmbe.js";

package/dist/cli/{runner-d820ws7y.js → runner-9rqc8y3m.js}

@@ -3,7 +3,7 @@ import {
   _internals,
   createModelEvaluationExecutor,
   runEvaluation
-} from "./index-k3mezk96.js";
+} from "./index-b2s3t517.js";
 import"./index-5wjw05dy.js";
 import"./index-y8552snf.js";
 import"./index-n3h6rmbe.js";

package/dist/cli/{scan-cursor-t212v00f.js → scan-cursor-z4xpes5f.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-wg98bsxz.js";
-import"./index-fgkhpdc6.js";
+} from "./index-kakb2jm0.js";
+import"./index-9casmxdt.js";
 import"./index-ae75rja9.js";
 import"./index-vft1pg34.js";
 import"./index-n3h6rmbe.js";

package/dist/cli/{schema-11gyrec3.js → schema-2dkw18zz.js}

@@ -95,7 +95,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-mwdzkr6k.js";
+} from "./index-vyh2prxv.js";
 import"./index-bk5tah7q.js";
 import"./index-3jcyn8g6.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{skill-generator-a07hpmw6.js → skill-generator-0q1jk6xd.js}

@@ -33,12 +33,12 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-f24r6yqk.js";
-import"./index-p124rnwb.js";
-import"./index-mg26zd8x.js";
+} from "./index-pwx989sa.js";
+import"./index-jdqayy7h.js";
+import"./index-s9at02fn.js";
 import"./index-rtry5xyf.js";
-import"./index-fgkhpdc6.js";
-import"./index-72wzb81c.js";
+import"./index-9casmxdt.js";
+import"./index-4t39wzzg.js";
 import"./index-ae75rja9.js";
 import"./index-vft1pg34.js";
 import"./index-n3h6rmbe.js";

package/dist/council/council-evidence-writer.d.ts

@@ -24,4 +24,5 @@ import type { CouncilSynthesis } from './types';
 export declare const _internals: {
     withTaskEvidenceLock: typeof withTaskEvidenceLock;
 };
-export declare function writeCouncilEvidence(workingDir: string, synthesis: CouncilSynthesis): Promise<void>;
+export declare function writeCouncilEvidence(workingDir: string, synthesis: CouncilSynthesis, attemptId?: string): Promise<void>;
+export declare function hasCouncilEvidenceAttempt(workingDir: string, taskId: string, attemptId: string, roundNumber: number): boolean;

package/dist/council/council-round-state.d.ts

@@ -0,0 +1,110 @@
+import { randomUUID } from 'node:crypto';
+import { withEvidenceLock } from '../evidence/lock.js';
+import { atomicWriteFile } from '../evidence/task-file.js';
+export type CouncilRoundScope = {
+    kind: 'task';
+    taskId: string;
+} | {
+    kind: 'phase';
+    phaseNumber: number;
+} | {
+    kind: 'final';
+    generation: string;
+};
+export type CouncilRoundTransition = 'stay' | 'advance' | 'close';
+type AuditScope = {
+    kind: 'task';
+    scopeHash: string;
+} | {
+    kind: 'phase';
+    phaseNumber: number;
+} | {
+    kind: 'final';
+    scopeHash: string;
+};
+interface StateSnapshot {
+    version: 1;
+    currentRound: number;
+    status: 'open' | 'closed';
+    maxRoundsExhausted: boolean;
+    lastAttemptId?: string;
+    lastDigest?: string;
+}
+interface AttemptRecord {
+    version: 1;
+    event: 'received' | 'finalized' | 'recovered';
+    attemptId: string;
+    timestamp: string;
+    scope: AuditScope;
+    clientRound?: number;
+    authoritativeRound: number;
+    digest: string;
+    sessionHash?: string;
+    disposition: string;
+    verdictCount: number;
+    members: string[];
+    transition?: CouncilRoundTransition;
+    gateEffect?: 'none' | 'blocked' | 'allowed';
+    verdict?: 'APPROVE' | 'CONCERNS' | 'REJECT';
+    quorumSize?: number;
+    evidenceRef?: string;
+    nextState?: StateSnapshot;
+}
+export interface CouncilAttemptEvaluation {
+    disposition: string;
+    response: Record<string, unknown>;
+    transition: CouncilRoundTransition;
+    gateEffect: 'none' | 'blocked' | 'allowed';
+    verdict?: 'APPROVE' | 'CONCERNS' | 'REJECT';
+    quorumSize?: number;
+    evidence?: {
+        reference: string;
+        commit: (attemptId: string) => Promise<void>;
+    };
+    /**
+     * Non-critical notification/reward work. It runs best-effort and at most once
+     * after the verdict, audit, and state commit; failures never change the verdict.
+     */
+    afterCommit?: () => void | Promise<void>;
+}
+export interface CouncilAttemptInput {
+    directory: string;
+    scope: CouncilRoundScope;
+    clientRound?: number;
+    maxRounds: number;
+    sessionID?: string;
+    request: unknown;
+    verdictCount: number;
+    members: string[];
+    probePendingEvidence?: (attemptId: string, round: number, evidenceRef?: string) => Promise<boolean>;
+    evaluate: (authoritativeRound: number) => Promise<CouncilAttemptEvaluation>;
+}
+export declare class CouncilRoundStateUncertainError extends Error {
+    constructor(message: string);
+}
+export declare function councilRoundStatePaths(directory: string, scope: CouncilRoundScope): {
+    state: string;
+    audit: string;
+    lock: string;
+};
+export declare function councilRequestDigest(request: unknown, round: number): string;
+declare function appendAudit(path: string, record: AttemptRecord): void;
+interface AuditTail {
+    records: AttemptRecord[];
+    truncated: boolean;
+}
+declare function readAuditTail(path: string, scope: CouncilRoundScope): AuditTail;
+export declare function runCouncilAttempt(input: CouncilAttemptInput): Promise<string>;
+export declare function recordUnscopedCouncilAttempt(directory: string, level: 'task' | 'phase' | 'final', disposition: string, raw: unknown, issues: Array<{
+    path: Array<PropertyKey>;
+    code: string;
+}>, sessionID?: string): Promise<string | null>;
+export declare const _internals: {
+    now: () => string;
+    uuid: typeof randomUUID;
+    appendAudit: typeof appendAudit;
+    readAuditTail: typeof readAuditTail;
+    atomicWrite: typeof atomicWriteFile;
+    withLock: typeof withEvidenceLock;
+};
+export {};

package/dist/council/types.d.ts

@@ -21,8 +21,6 @@ export interface CouncilFinding {
 export interface CouncilMemberVerdict {
     agent: CouncilAgent;
     verdict: CouncilVerdict;
-    /** Optional source round for freshness checks on resubmission. */
-    verdictRound?: number;
     /** Confidence 0.0–1.0 */
     confidence: number;
     findings: CouncilFinding[];

package/dist/evaluation/index.d.ts

@@ -9,6 +9,7 @@ export type { TaskInputHashLimits } from './hashing.js';
 export { canonicalHash, canonicalJson, computeCandidateInputContentHash, computeManifestContentHash, computeRunIntegrityHash, computeTaskContentHash, computeTaskInputContentHash, computeTaskLineageInputHash, computeTaskSetContentHash, contentHashWithout, resolveContainedExistingPath, sha256, } from './hashing.js';
 export type { EvaluationModelDispatcher, EvaluationModelDispatchRequest, EvaluationModelDispatchResult, } from './model-dispatcher.js';
 export { createEvaluationModelDispatcher, resolveEvaluationAgentName, } from './model-dispatcher.js';
+export * from './pr-review-recovery.js';
 export * from './public-api.js';
 export * from './retention.js';
 export type { EvaluationExecutor, EvaluationExecutorResult, RunEvaluationOptions, } from './runner.js';

package/dist/evaluation/model-dispatcher.d.ts

@@ -2,7 +2,25 @@ import type { Agent, OpencodeClient } from '@opencode-ai/sdk';
 import type { DelegationCostFields } from '../services/cost-accounting.js';
 import { _internals as ephemeralDispatcherInternals } from './ephemeral-agent-dispatcher.js';
 export type EvaluationModelDispatchRequest = {
-    directory: string;
+    /**
+     * The directory the ephemeral session is created against.
+     *
+     * This is the directory OpenCode uses to key permission state
+     * (`Permission.state`, `Agent.state`, `ToolRegistry.state` are all built
+     * through the directory-keyed `InstanceState` cache) AND to resolve
+     * registered agents. It MUST be the invoking instance's directory (the
+     * project root) so the session lands in the SAME permission partition as
+     * the user's session — a foreign directory gets a fresh, empty `approved`
+     * list and a private pending map that the user's TUI cannot reach, so an
+     * `external_directory` prompt raised there hangs forever.
+     *
+     * The SDK's `session.create` has no separate working-directory field, so
+     * this is also the agent's CWD. When the fixture the agent must inspect is
+     * NOT under this directory, the caller conveys the fixture path via the
+     * prompt (see gate-audit.ts `modelPrompt` and runner.ts
+     * `createModelEvaluationExecutor`).
+     */
+    sessionDirectory: string;
     agentName: string;
     modelId: string;
     prompt: string;

package/dist/evaluation/pr-review-recovery.d.ts

@@ -0,0 +1,41 @@
+import type { EvaluationRunV1 } from './contracts.js';
+import type { EvaluationModelDispatcher } from './model-dispatcher.js';
+export declare const PR_REVIEW_RECOVERY_BASE_SHA: "3811fe5981072c7fa541523e9f08430f18594590";
+type RecoveryBudgets = {
+    maxTasks: number;
+    maxRepetitions: number;
+    maxConcurrency: number;
+    maxTaskTimeMs: number;
+    maxRetries: number;
+    maxOutputBytes: number;
+    maxSpendUsd?: number;
+};
+export type EvaluatePrReviewRecoveryV1Options = {
+    projectRoot: string;
+    packageRoot?: string;
+    dispatcher: EvaluationModelDispatcher;
+    parentSessionId?: string;
+    model?: string;
+    seed?: string;
+    baselineSourceSha?: string;
+    budgets?: Partial<RecoveryBudgets>;
+    abortSignal?: AbortSignal;
+};
+type BaselineManifest = {
+    v: 1;
+    sourceSha: string;
+    payloadPath: string;
+    sha256: string;
+};
+declare function parseBaselineManifest(value: unknown): BaselineManifest;
+declare function verifyBaseline(packageRoot: string, requestedSourceSha: string): Promise<void>;
+/**
+ * Runs the packaged issue-2075 recovery scenario against the exact canonical
+ * PR-review skill and its content-addressed pre-hardening baseline.
+ */
+export declare function evaluatePrReviewRecoveryV1(options: EvaluatePrReviewRecoveryV1Options): Promise<EvaluationRunV1>;
+export declare const _internals: {
+    parseBaselineManifest: typeof parseBaselineManifest;
+    verifyBaseline: typeof verifyBaseline;
+};
+export {};

package/dist/evaluation/public-api.d.ts

@@ -1,6 +1,7 @@
 import type { EvaluationRunV1, PromotionDecisionV1, PromotionPolicyV1 } from './contracts.js';
 import { recordTestImpactGateGroundTruth } from './gate-ground-truth.js';
 import { computeCandidateInputContentHash, computeTaskInputContentHash } from './hashing.js';
+import { evaluatePrReviewRecoveryV1 } from './pr-review-recovery.js';
 import { type RunEvaluationOptions, runEvaluation } from './runner.js';
 import { type DecidePromotionInput } from './statistics.js';
 export type EvaluateCandidateV1Options = RunEvaluationOptions & {
@@ -25,6 +26,7 @@ export declare function evaluateCandidateV1(options: EvaluateCandidateV1Options)
  */
 export declare const evaluationV1: ((options: EvaluateCandidateV1Options) => Promise<EvaluateCandidateV1Result>) & {
     evaluateCandidate: typeof evaluateCandidateV1;
+    evaluatePrReviewRecovery: typeof evaluatePrReviewRecoveryV1;
     runEvaluation: typeof runEvaluation;
     decidePromotion: (input: DecidePromotionInput) => {
         v: 1;

package/dist/evaluation/runner.d.ts

@@ -19,6 +19,15 @@ export type EvaluationExecutor = (args: {
     payload: string;
     seed: string;
     abortSignal: AbortSignal;
+    /**
+     * The invoking instance's directory (the project root). An executor that
+     * creates an OpenCode session MUST bind it here — NOT to `isolatedRoot` —
+     * so the session lands in the same permission partition as the user's
+     * session (#2009). OpenCode keys permission state per directory; a foreign
+     * directory gets an empty approved list and a private pending map the TUI
+     * cannot reach, so a prompt raised there hangs forever.
+     */
+    projectRoot: string;
 }) => Promise<EvaluationExecutorResult>;
 export type RunEvaluationOptions = {
     projectRoot: string;