opencode-swarm 7.138.1 → 7.138.3

package/.opencode/skills/swarm-pr-review/SKILL.md

@@ -1057,7 +1057,11 @@ the complete ledger with `write_pr_review_trigger_eval`; its rows use the stable
 trigger IDs below. Every `MATCHED` row includes its returned `source_batch_id`
 and `source_lane_id`; every `NOT_TRIGGERED` row must omit both fields. Missing,
 extra, duplicate, malformed, or incorrectly provenanced rows make persistence
-fail and Phase 4 BLOCKED. The tool atomically writes
+fail and Phase 4 BLOCKED. Evidence is frozen by the first micro dispatch and is
+authoritative thereafter. The final writer may omit its duplicate `evidence`
+fields; if it includes reworded evidence, the writer ignores that copy and
+persists the frozen values. It still requires the exact frozen classifications,
+plus provenance for every `MATCHED` row. The tool atomically writes
 `.swarm/pr-review/<run_id>/trigger-eval.json`, separate from `findings.jsonl`;
 pass the exact reviewed merge-base as `base_sha`, the exact live base branch
 tip/ref used to compute it as `base_ref`, and the same `pr_head_sha` to the

package/dist/background/candidate-contract.d.ts

@@ -43,6 +43,37 @@ export interface CandidateHeaderSelection {
 export declare function selectCandidateHeader(lines: readonly string[]): CandidateHeaderSelection | null;
 /** Remove fenced markdown blocks before any candidate-contract inspection. */
 export declare function removeCandidateCodeFences(text: string): string;
+export interface NormalizedCandidateArtifact {
+    /** Fence-stripped text, with a canonical header synthesized when salvageable. */
+    text: string;
+    /** True when a canonical header was supplied by this normalizer. */
+    synthesizedHeader: boolean;
+}
+/**
+ * Normalize a lane artifact ONCE so every consumer parses byte-identical text.
+ *
+ * Coverage validation and candidate-id extraction previously applied the header
+ * rule in two separate places, so a repair applied to one could not be seen by
+ * the other — a lane could be judged "covered" while contributing zero findings
+ * to the inventory. Both callers now route through this function.
+ *
+ * A missing header is repaired; a *wrong* or *late* header is not, so genuine
+ * contract violations still fail closed:
+ *  - a leading canonical header (either family) is left alone, preserving
+ *    `expected-family-mismatch`;
+ *  - a canonical header that exists but does not lead is left alone, preserving
+ *    "a later valid header cannot rescue a malformed first marker";
+ *  - only a total absence of any canonical header, together with at least one
+ *    valid marker-bearing row, is repaired.
+ *
+ * KNOWN RESIDUAL: the two row families are both nine fields and differ only in
+ * the meaning of positions 6 and 7 (`evidence_summary`/`impact_context` versus
+ * `invariant_violated`/`evidence_summary`), neither of which is structurally
+ * distinguishable. A headerless lane that emits the other family's field order
+ * is therefore repaired into the expected family and its two prose fields are
+ * transposed. Callers surface `synthesizedHeader` so this is auditable.
+ */
+export declare function normalizeCandidateArtifact(rawText: string, fallbackFamily: RowFormatFamily): NormalizedCandidateArtifact;
 export type CandidateFieldName = (typeof CANDIDATE_FIELDS)[RowFormatFamily][number];
 export interface CandidateFieldIssue {
     field: CandidateFieldName | 'row';

package/dist/background/pending-delegations.d.ts

@@ -141,6 +141,13 @@ export interface BackgroundDelegationResult {
     outputArtifactError?: string;
     transcriptIncomplete?: boolean;
     messageCount?: number;
+    /**
+     * Workflow lanes whose discovery artifact was accepted only after repair — a
+     * synthesized canonical header, or valid rows retained beside malformed ones.
+     * Recorded on the durable ledger so a repaired lane stays distinguishable from
+     * a well-formed one after the fact, which is where post-mortems actually look.
+     */
+    salvagedWorkflowLanes?: string[];
 }
 export interface BackgroundTerminalResult {
     /** Stable identity derived from trusted correlation + immutable result metadata. */

package/dist/background/pr-review-trigger-contract.d.ts

@@ -125,8 +125,44 @@ export declare const PrReviewPersistedInputRowSchema: z.ZodDiscriminatedUnion<[z
     result: z.ZodLiteral<"NOT_TRIGGERED">;
     evidence: z.ZodString;
 }, z.core.$strict>], "result">;
+export declare const PrReviewWriterInputRowSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    trigger_id: z.ZodEnum<{
+        "auth-identity-secrets": "auth-identity-secrets";
+        "untrusted-input-boundaries": "untrusted-input-boundaries";
+        "subprocess-platform": "subprocess-platform";
+        "concurrency-state": "concurrency-state";
+        "dependencies-build-release": "dependencies-build-release";
+        "api-schema-migrations": "api-schema-migrations";
+        "test-infrastructure": "test-infrastructure";
+        "ui-accessibility-i18n": "ui-accessibility-i18n";
+        "privacy-observability": "privacy-observability";
+        "generated-provenance": "generated-provenance";
+        "unclassified-risk": "unclassified-risk";
+    }>;
+    result: z.ZodLiteral<"MATCHED">;
+    evidence: z.ZodOptional<z.ZodString>;
+    source_batch_id: z.ZodString;
+    source_lane_id: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    trigger_id: z.ZodEnum<{
+        "auth-identity-secrets": "auth-identity-secrets";
+        "untrusted-input-boundaries": "untrusted-input-boundaries";
+        "subprocess-platform": "subprocess-platform";
+        "concurrency-state": "concurrency-state";
+        "dependencies-build-release": "dependencies-build-release";
+        "api-schema-migrations": "api-schema-migrations";
+        "test-infrastructure": "test-infrastructure";
+        "ui-accessibility-i18n": "ui-accessibility-i18n";
+        "privacy-observability": "privacy-observability";
+        "generated-provenance": "generated-provenance";
+        "unclassified-risk": "unclassified-risk";
+    }>;
+    result: z.ZodLiteral<"NOT_TRIGGERED">;
+    evidence: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "result">;
 export type PrReviewInlineTriggerRow = z.infer<typeof PrReviewInlineTriggerRowSchema>;
 export type PrReviewPersistedInputRow = z.infer<typeof PrReviewPersistedInputRowSchema>;
+export type PrReviewWriterInputRow = z.infer<typeof PrReviewWriterInputRowSchema>;
 interface ValidatedTriggerLedger<TRow> {
     rows: TRow[];
     matchedIds: PrReviewTriggerId[];
@@ -134,6 +170,7 @@ interface ValidatedTriggerLedger<TRow> {
 }
 export declare function validatePrReviewInlineTriggerLedger(input: unknown): ValidatedTriggerLedger<PrReviewInlineTriggerRow>;
 export declare function validatePrReviewPersistedInputLedger(input: unknown): ValidatedTriggerLedger<PrReviewPersistedInputRow>;
+export declare function validatePrReviewWriterInputLedger(input: unknown): ValidatedTriggerLedger<PrReviewWriterInputRow>;
 export interface BuildPrReviewTriggerReceiptV2Args {
     run_id: string;
     pr_head_sha: string;
@@ -184,7 +221,7 @@ export interface ParsedPrReviewTriggerReceipt {
     }>[];
 }
 /**
- * Bind every micro dispatch and the final receipt to one semantic ledger.
+ * Bind every micro dispatch to one semantic ledger at bind time.
  * Callers pass rows after exact-set validation; the tuple representation makes
  * the identity stable and independent of post-dispatch provenance fields.
  */

package/dist/cli/{config-doctor-m79sx8b2.js → config-doctor-2mwgdbsn.js}

@@ -12,8 +12,8 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-vp3mwsd1.js";
-import"./index-e78pqbkj.js";
+} from "./index-btx8j39p.js";
+import"./index-ab57h0yq.js";
 import"./index-bk5tah7q.js";
 import"./index-3jcyn8g6.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{curation-policy-dkx4s5va.js → curation-policy-5dqexw5j.js}

@@ -4,9 +4,9 @@ import {
   authorizeCuration,
   buildConfigFingerprintInput,
   readCohortConfigFingerprint
-} from "./index-9vvskh03.js";
+} from "./index-wqg74mwj.js";
 import"./index-rtry5xyf.js";
-import"./index-kqzzdxc1.js";
+import"./index-93ky909v.js";
 import"./index-ae75rja9.js";
 import"./index-en4fb04r.js";
 import"./index-tqshdzaw.js";

package/dist/cli/{curator-jjf5x6bn.js → curator-jjtp9hn2.js}

@@ -14,36 +14,36 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-mnw8g9bs.js";
+} from "./index-99af5gvd.js";
 import"./index-vm4xw9z3.js";
 import"./index-rrxcfxrd.js";
-import"./index-e2eedz1b.js";
-import"./index-vp3mwsd1.js";
+import"./index-31vfewmn.js";
+import"./index-btx8j39p.js";
 import"./index-y06a43sk.js";
 import"./index-ngqxzkqm.js";
 import"./index-y8552snf.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-mzqgtzxq.js";
-import"./index-navw2ezf.js";
-import"./index-aeyktf9q.js";
+import"./index-jhb8kjc5.js";
+import"./index-adde7nm2.js";
+import"./index-rjratees.js";
 import"./index-6mjf4vr1.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-wsdnttf4.js";
 import"./index-39k6y018.js";
-import"./index-d4t92fa3.js";
-import"./index-9vvskh03.js";
+import"./index-tc61fybd.js";
+import"./index-wqg74mwj.js";
 import"./index-rtry5xyf.js";
-import"./index-8xqnp3gw.js";
-import"./index-kqzzdxc1.js";
+import"./index-1djv5684.js";
+import"./index-93ky909v.js";
 import"./index-ae75rja9.js";
 import"./index-en4fb04r.js";
 import"./index-tqshdzaw.js";
-import"./index-p7fn5byt.js";
+import"./index-y6dvs5tt.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-e78pqbkj.js";
+import"./index-ab57h0yq.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
@@ -56,7 +56,7 @@ import"./index-b8zgtz81.js";
 import"./index-j0xx9wpj.js";
 import"./index-4rhhvd1a.js";
 import"./index-3jcyn8g6.js";
-import"./index-0s4gr6qh.js";
+import"./index-q344kj84.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
 import"./index-xybtaph7.js";

package/dist/cli/{curator-llm-factory-sprc6pm3.js → curator-llm-factory-wkjme59b.js}

@@ -1,36 +1,36 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-mnw8g9bs.js";
+} from "./index-99af5gvd.js";
 import"./index-vm4xw9z3.js";
 import"./index-rrxcfxrd.js";
-import"./index-e2eedz1b.js";
-import"./index-vp3mwsd1.js";
+import"./index-31vfewmn.js";
+import"./index-btx8j39p.js";
 import"./index-y06a43sk.js";
 import"./index-ngqxzkqm.js";
 import"./index-y8552snf.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-mzqgtzxq.js";
-import"./index-navw2ezf.js";
-import"./index-aeyktf9q.js";
+import"./index-jhb8kjc5.js";
+import"./index-adde7nm2.js";
+import"./index-rjratees.js";
 import"./index-6mjf4vr1.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-wsdnttf4.js";
 import"./index-39k6y018.js";
-import"./index-d4t92fa3.js";
-import"./index-9vvskh03.js";
+import"./index-tc61fybd.js";
+import"./index-wqg74mwj.js";
 import"./index-rtry5xyf.js";
-import"./index-8xqnp3gw.js";
-import"./index-kqzzdxc1.js";
+import"./index-1djv5684.js";
+import"./index-93ky909v.js";
 import"./index-ae75rja9.js";
 import"./index-en4fb04r.js";
 import"./index-tqshdzaw.js";
-import"./index-p7fn5byt.js";
+import"./index-y6dvs5tt.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-e78pqbkj.js";
+import"./index-ab57h0yq.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
@@ -43,7 +43,7 @@ import"./index-b8zgtz81.js";
 import"./index-j0xx9wpj.js";
 import"./index-4rhhvd1a.js";
 import"./index-3jcyn8g6.js";
-import"./index-0s4gr6qh.js";
+import"./index-q344kj84.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
 import"./index-xybtaph7.js";

package/dist/cli/{guardrail-explain-zs3hq02c.js → guardrail-explain-xppwfnxr.js}

@@ -1,37 +1,37 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-5fdztrpt.js";
-import"./index-mnw8g9bs.js";
+} from "./index-gda7cwqz.js";
+import"./index-99af5gvd.js";
 import"./index-vm4xw9z3.js";
 import"./index-rrxcfxrd.js";
-import"./index-e2eedz1b.js";
-import"./index-vp3mwsd1.js";
+import"./index-31vfewmn.js";
+import"./index-btx8j39p.js";
 import"./index-y06a43sk.js";
 import"./index-ngqxzkqm.js";
 import"./index-y8552snf.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-mzqgtzxq.js";
-import"./index-navw2ezf.js";
-import"./index-aeyktf9q.js";
+import"./index-jhb8kjc5.js";
+import"./index-adde7nm2.js";
+import"./index-rjratees.js";
 import"./index-6mjf4vr1.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-wsdnttf4.js";
 import"./index-39k6y018.js";
-import"./index-d4t92fa3.js";
-import"./index-9vvskh03.js";
+import"./index-tc61fybd.js";
+import"./index-wqg74mwj.js";
 import"./index-rtry5xyf.js";
-import"./index-8xqnp3gw.js";
-import"./index-kqzzdxc1.js";
+import"./index-1djv5684.js";
+import"./index-93ky909v.js";
 import"./index-ae75rja9.js";
 import"./index-en4fb04r.js";
 import"./index-tqshdzaw.js";
-import"./index-p7fn5byt.js";
+import"./index-y6dvs5tt.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-e78pqbkj.js";
+import"./index-ab57h0yq.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
@@ -44,7 +44,7 @@ import"./index-b8zgtz81.js";
 import"./index-j0xx9wpj.js";
 import"./index-4rhhvd1a.js";
 import"./index-3jcyn8g6.js";
-import"./index-0s4gr6qh.js";
+import"./index-q344kj84.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
 import"./index-xybtaph7.js";

package/dist/cli/{guardrail-log-90dnv508.js → guardrail-log-swet7rch.js}

@@ -1,9 +1,9 @@
 // @bun
 import {
   handleGuardrailLog
-} from "./index-06zw53mf.js";
-import"./index-e2eedz1b.js";
-import"./index-e78pqbkj.js";
+} from "./index-js7th5my.js";
+import"./index-31vfewmn.js";
+import"./index-ab57h0yq.js";
 import"./index-bk5tah7q.js";
 import"./index-3jcyn8g6.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{hive-promoter-zkay2ffy.js → hive-promoter-xvq8jzbs.js}

@@ -7,38 +7,38 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-mnw8g9bs.js";
+} from "./index-99af5gvd.js";
 import"./index-vm4xw9z3.js";
 import"./index-rrxcfxrd.js";
-import"./index-e2eedz1b.js";
-import"./index-vp3mwsd1.js";
+import"./index-31vfewmn.js";
+import"./index-btx8j39p.js";
 import"./index-y06a43sk.js";
 import"./index-ngqxzkqm.js";
 import"./index-y8552snf.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-mzqgtzxq.js";
-import"./index-navw2ezf.js";
-import"./index-aeyktf9q.js";
+import"./index-jhb8kjc5.js";
+import"./index-adde7nm2.js";
+import"./index-rjratees.js";
 import"./index-6mjf4vr1.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-wsdnttf4.js";
 import"./index-39k6y018.js";
-import"./index-d4t92fa3.js";
-import"./index-9vvskh03.js";
+import"./index-tc61fybd.js";
+import"./index-wqg74mwj.js";
 import"./index-rtry5xyf.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-8xqnp3gw.js";
-import"./index-kqzzdxc1.js";
+} from "./index-1djv5684.js";
+import"./index-93ky909v.js";
 import"./index-ae75rja9.js";
 import"./index-en4fb04r.js";
 import"./index-tqshdzaw.js";
-import"./index-p7fn5byt.js";
+import"./index-y6dvs5tt.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-e78pqbkj.js";
+import"./index-ab57h0yq.js";
 import"./index-bk5tah7q.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
@@ -51,7 +51,7 @@ import"./index-b8zgtz81.js";
 import"./index-j0xx9wpj.js";
 import"./index-4rhhvd1a.js";
 import"./index-3jcyn8g6.js";
-import"./index-0s4gr6qh.js";
+import"./index-q344kj84.js";
 import"./index-4qzeef9h.js";
 import"./index-fsrp8wp3.js";
 import"./index-xybtaph7.js";

package/dist/cli/{index-8xqnp3gw.js → index-1djv5684.js}

@@ -702,7 +702,7 @@ async function applyConfidenceFloorAction(directory, touched, options) {
   const recovered = touched.filter((e) => e.confidence > CONFIDENCE_FLOOR + FLOOR_EPSILON && e.confidence_floor_demoted);
   if (atFloor.length === 0 && recovered.length === 0)
     return;
-  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-bnr4weyn.js");
+  const { readKnowledgeCounterRollups, effectiveRetrievalOutcomes } = await import("./knowledge-events-yaj0yjd6.js");
   const rollups = await readKnowledgeCounterRollups(directory);
   const flagIds = new Set;
   for (const e of atFloor) {
@@ -769,11 +769,11 @@ async function applyConfidenceFloorAction(directory, touched, options) {
     });
   }
   if (action === "quarantine" && toQuarantine.length > 0) {
-    const { quarantineEntry } = await import("./knowledge-validator-pf377mtx.js");
-    const { KnowledgeConfigSchema } = await import("./schema-1xtxr4d9.js");
+    const { quarantineEntry } = await import("./knowledge-validator-e5fqy9h4.js");
+    const { KnowledgeConfigSchema } = await import("./schema-xg5f11md.js");
     let config;
     try {
-      const { loadPluginConfigWithMeta } = await import("./index-vmff7b40.js");
+      const { loadPluginConfigWithMeta } = await import("./index-1v89yst3.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       config = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-vmff7b40.js → index-1v89yst3.js}

@@ -7,7 +7,7 @@ import {
   loadPluginConfigWithMeta,
   loadPluginConfigWithMetaAsync,
   resolveWorktreeIsolationConfig
-} from "./index-p7fn5byt.js";
+} from "./index-y6dvs5tt.js";
 import {
   ApprovalEvidenceSchema,
   BaseEvidenceSchema,
@@ -54,7 +54,7 @@ import {
   TurboConfigSchema,
   WorktreeIsolationConfigSchema,
   resolveAutoReviewConfig
-} from "./index-e78pqbkj.js";
+} from "./index-ab57h0yq.js";
 import"./index-bk5tah7q.js";
 import {
   MigrationStatusSchema,

package/dist/cli/{index-e2eedz1b.js → index-31vfewmn.js}

@@ -2,7 +2,7 @@
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-e78pqbkj.js";
+} from "./index-ab57h0yq.js";
 import {
   init_constants
 } from "./index-3jcyn8g6.js";

package/dist/cli/{index-kqzzdxc1.js → index-93ky909v.js}

@@ -625,7 +625,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
       deltas.push({ id, delta });
     }
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-4mcmb2rj.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-d99k0z2d.js");
       await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {