opencode-swarm 7.139.0 → 7.139.2

package/dist/cli/{knowledge-validator-v2eevvdg.js → knowledge-validator-jxqj96cx.js}

@@ -23,19 +23,19 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-0tsetsxs.js";
-import"./index-67yqywan.js";
+} from "./index-ffpmqx30.js";
+import"./index-3radty3f.js";
 import"./index-rtry5xyf.js";
-import"./index-t31cc7kv.js";
-import"./index-kv36s0x0.js";
+import"./index-cyw81ngh.js";
+import"./index-e9tx99ds.js";
 import"./index-ae75rja9.js";
-import"./index-tyh0p5e8.js";
-import"./index-nc544sfw.js";
+import"./index-668dpw5e.js";
+import"./index-gvhvz176.js";
 import"./index-bk5tah7q.js";
-import"./index-fsrp8wp3.js";
-import"./index-a614s16f.js";
+import"./index-ed5ykebp.js";
+import"./index-5j6chvj8.js";
 import"./index-7g4c7s5r.js";
-import"./index-chvqee1j.js";
+import"./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{pending-delegations-p6n83x67.js → pending-delegations-tmyf18p4.js}

@@ -41,12 +41,12 @@ import {
   sweepStaleDelegations,
   updateCoderSettlement,
   writeDelegationFallback
-} from "./index-t26nfmcs.js";
-import"./index-4qzeef9h.js";
-import"./index-fsrp8wp3.js";
-import"./index-a614s16f.js";
+} from "./index-prmb5qfp.js";
+import"./index-x9q4bbhd.js";
+import"./index-ed5ykebp.js";
+import"./index-5j6chvj8.js";
 import"./index-7g4c7s5r.js";
-import"./index-chvqee1j.js";
+import"./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{pr-subscriptions-xbrfr51c.js → pr-subscriptions-hhx6yk24.js}

@@ -9,12 +9,12 @@ import {
   sweepStale,
   unsubscribe,
   updateSnapshot
-} from "./index-nbgw5dxa.js";
-import"./index-4qzeef9h.js";
-import"./index-fsrp8wp3.js";
-import"./index-a614s16f.js";
+} from "./index-5zyk8qgv.js";
+import"./index-x9q4bbhd.js";
+import"./index-ed5ykebp.js";
+import"./index-5j6chvj8.js";
 import"./index-7g4c7s5r.js";
-import"./index-chvqee1j.js";
+import"./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";

package/dist/cli/{runner-9an52tmz.js → runner-w30gazew.js}

@@ -3,14 +3,14 @@ import {
   _internals,
   createModelEvaluationExecutor,
   runEvaluation
-} from "./index-ddmnhv4h.js";
-import"./index-z1tkxzq4.js";
+} from "./index-wrt6m5ze.js";
+import"./index-s608d3hw.js";
 import"./index-y8552snf.js";
-import"./index-nc544sfw.js";
-import"./index-fsrp8wp3.js";
-import"./index-a614s16f.js";
+import"./index-gvhvz176.js";
+import"./index-ed5ykebp.js";
+import"./index-5j6chvj8.js";
 import"./index-7g4c7s5r.js";
-import"./index-chvqee1j.js";
+import"./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-a76rekgs.js";

package/dist/cli/{scan-cursor-39zxpw34.js → scan-cursor-ah5swtyh.js}

@@ -4,16 +4,16 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-s428dmy6.js";
-import"./index-t31cc7kv.js";
+} from "./index-6w1re1qn.js";
+import"./index-cyw81ngh.js";
 import"./index-ae75rja9.js";
-import"./index-tyh0p5e8.js";
-import"./index-nc544sfw.js";
+import"./index-668dpw5e.js";
+import"./index-gvhvz176.js";
 import"./index-bk5tah7q.js";
-import"./index-fsrp8wp3.js";
-import"./index-a614s16f.js";
+import"./index-ed5ykebp.js";
+import"./index-5j6chvj8.js";
 import"./index-7g4c7s5r.js";
-import"./index-chvqee1j.js";
+import"./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{schema-xhfwr6b2.js → schema-f7jgrtxj.js}

@@ -25,6 +25,7 @@ import {
   DEFAULT_AGENT_PROFILES,
   DEFAULT_ARCHITECT_PROFILE,
   DEFAULT_EXTERNAL_SKILLS_CONFIG,
+  DEFAULT_MODEL_CONTEXT_TOKENS,
   DEFAULT_SKILLS_CONFIG,
   DEFAULT_SKILL_OPT_CONFIG,
   DecisionDecaySchema,
@@ -95,7 +96,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-rtetrxxq.js";
+} from "./index-8p9pasnp.js";
 import"./index-bk5tah7q.js";
 import"./index-3jcyn8g6.js";
 import"./index-bpmtbmy9.js";
@@ -173,6 +174,7 @@ export {
   DecisionDecaySchema,
   DEFAULT_SKILL_OPT_CONFIG,
   DEFAULT_SKILLS_CONFIG,
+  DEFAULT_MODEL_CONTEXT_TOKENS,
   DEFAULT_EXTERNAL_SKILLS_CONFIG,
   DEFAULT_ARCHITECT_PROFILE,
   DEFAULT_AGENT_PROFILES,

package/dist/cli/{scope-persistence-nsa6ra9s.js → scope-persistence-3f0d4fwv.js}

@@ -23,13 +23,13 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-ymszzvnr.js";
+} from "./index-3eddtgxt.js";
 import"./index-556ja8an.js";
-import"./index-p2dz85tv.js";
+import"./index-4xbyy6aw.js";
 import"./index-1kz6da87.js";
-import"./index-a614s16f.js";
+import"./index-5j6chvj8.js";
 import"./index-7g4c7s5r.js";
-import"./index-chvqee1j.js";
+import"./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{skill-generator-5px81476.js → skill-generator-hp7as46c.js}

@@ -33,21 +33,21 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-3nr2sn32.js";
-import"./index-0tsetsxs.js";
-import"./index-67yqywan.js";
+} from "./index-ktagrqxw.js";
+import"./index-ffpmqx30.js";
+import"./index-3radty3f.js";
 import"./index-rtry5xyf.js";
-import"./index-t31cc7kv.js";
-import"./index-kv36s0x0.js";
+import"./index-cyw81ngh.js";
+import"./index-e9tx99ds.js";
 import"./index-ae75rja9.js";
-import"./index-tyh0p5e8.js";
-import"./index-nc544sfw.js";
+import"./index-668dpw5e.js";
+import"./index-gvhvz176.js";
 import"./index-bk5tah7q.js";
 import"./index-4rhhvd1a.js";
-import"./index-fsrp8wp3.js";
-import"./index-a614s16f.js";
+import"./index-ed5ykebp.js";
+import"./index-5j6chvj8.js";
 import"./index-7g4c7s5r.js";
-import"./index-chvqee1j.js";
+import"./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-y111zefa.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{telemetry-7nt7zhyp.js → telemetry-4tgrfhaz.js}

@@ -13,7 +13,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-chvqee1j.js";
+} from "./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{worktree-collision-ownership-9x4s4890.js → worktree-collision-ownership-vexb0b6r.js}

@@ -1,19 +1,21 @@
 // @bun
 import {
+  WORKTREE_PROVISIONING_OWNER_LEASE_MS,
+  removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-x20cgr2q.js";
+} from "./index-q7ezzgwq.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-b8zgtz81.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-t26nfmcs.js";
-import"./index-4qzeef9h.js";
-import"./index-fsrp8wp3.js";
-import"./index-a614s16f.js";
+} from "./index-prmb5qfp.js";
+import"./index-x9q4bbhd.js";
+import"./index-ed5ykebp.js";
+import"./index-5j6chvj8.js";
 import"./index-7g4c7s5r.js";
-import"./index-chvqee1j.js";
+import"./index-a5eba0t8.js";
 import"./index-bpmtbmy9.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
@@ -24,6 +26,7 @@ import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 
 // src/hooks/delegation-gate/worktree-collision-ownership.ts
+import * as fs2 from "fs";
 import * as path2 from "path";
 
 // src/hooks/delegation-gate/worktree-ownership-tag.ts
@@ -107,6 +110,10 @@ async function scanBackgroundWorktreeOwnershipTagsForRecovery(directory) {
 }
 
 // src/hooks/delegation-gate/worktree-collision-ownership.ts
+var _internals = {
+  statSync: fs2.statSync,
+  removeWorktreeProvisioningOwner
+};
 function normalizedPath(value) {
   const resolved = path2.normalize(path2.resolve(value));
   return process.platform === "win32" ? resolved.toLowerCase() : resolved;
@@ -151,16 +158,38 @@ async function inspectStandardWorktreeCollisionOwnership(identity) {
   const provisioning = scanWorktreeProvisioningOwnersForRecovery(identity.directory);
   if (provisioning.status === "uncertain")
     return provisioning;
+  const now = Date.now();
   for (const owner of provisioning.owners) {
     const sameSession = owner.parentSessionId === identity.parentSessionId || owner.worktreeSessionId === identity.parentSessionId;
     if (!sameSession)
       continue;
     if (owner.schemaVersion === 1 || owner.taskId === identity.taskId) {
+      const leaseIsLive = now - owner.createdAt <= WORKTREE_PROVISIONING_OWNER_LEASE_MS;
+      if (!leaseIsLive) {
+        try {
+          _internals.statSync(identity.worktreePath);
+        } catch (error) {
+          const code = error.code;
+          if (code !== "ENOENT" && code !== "ENOTDIR") {
+            return {
+              status: "uncertain",
+              reason: `expired provisioning owner ${owner.callID} lane liveness is unreadable: ${error instanceof Error ? error.message : String(error)}`
+            };
+          }
+          if (!_internals.removeWorktreeProvisioningOwner(identity.directory, owner.callID)) {
+            return {
+              status: "uncertain",
+              reason: `expired provisioning owner ${owner.callID} could not be removed`
+            };
+          }
+          continue;
+        }
+      }
       return {
         status: "protected",
         ownerKind: "provisioning",
         lifecycle: "active",
-        reason: owner.schemaVersion === 1 ? `legacy provisioning owner ${owner.callID} cannot disprove ownership of this same-session lane` : `provisioning owner ${owner.callID} is active for task ${identity.taskId}`
+        reason: !leaseIsLive ? `provisioning owner ${owner.callID} lease expired, but its exact lane path still exists` : owner.schemaVersion === 1 ? `legacy provisioning owner ${owner.callID} cannot disprove ownership of this same-session lane` : `provisioning owner ${owner.callID} is active for task ${identity.taskId}`
       };
     }
   }
@@ -217,5 +246,6 @@ async function inspectStandardWorktreeCollisionOwnership(identity) {
   return { status: "unowned" };
 }
 export {
-  inspectStandardWorktreeCollisionOwnership
+  inspectStandardWorktreeCollisionOwnership,
+  _internals
 };

package/dist/config/context-window.d.ts

@@ -0,0 +1,210 @@
+/**
+ * Context-window denominator resolution — the SINGLE derivation.
+ *
+ * Every "how many tokens does this model's context window hold?" question in
+ * the plugin resolves here: the context-budget denominator (`budgetTokens` in
+ * `src/hooks/system-enhancer.ts` Path A and Path B), the hard-enforcement
+ * threshold in `src/hooks/context-budget.ts`, the knowledge-injector headroom
+ * gate, the `context_status` tool, and the `/swarm status` render.
+ *
+ * ## Why this exists
+ *
+ * The denominator used to be a hardcoded 128 000. That number is stale:
+ * current frontier and mid-tier models ship 200k–1M windows, and 256k is
+ * common even for locally-hosted models. A budget that reports "87 % used"
+ * against a window that is really 1M does not just emit a spurious advisory —
+ * `context-budget.ts` HARD-PRUNES messages at `critical_threshold × limit`, so
+ * a too-small denominator silently deletes context the model still needed.
+ *
+ * The authoritative value is already in the host's hands. The
+ * `experimental.chat.system.transform` hook input carries
+ * `model: Model` (`@opencode-ai/plugin`), and `Model.limit.context`
+ * (`@opencode-ai/sdk`) is the live window for THAT provider's entry of THAT
+ * model. Provider-specific caps are already baked in, because the host's model
+ * catalog is keyed `providers[providerID].models[modelID]` — verified against
+ * the on-disk catalog, where `github-copilot`'s `claude-sonnet-4.5` and
+ * `anthropic`'s `claude-sonnet-4-5` carry DIFFERENT `limit.context` values.
+ * A user's `provider.<id>.models.<id>.limit.context` override in
+ * `opencode.json` is merged into the same object before it reaches the hook.
+ *
+ * ## Resolution order (first usable value wins)
+ *
+ *   1. `context_budget.model_limits["<providerID>/<modelID>"]`
+ *   2. `context_budget.model_limits["<modelID>"]`
+ *   3. `context_budget.model_limits.default`
+ *   4. the LIVE `model.limit.context` from the hook input
+ *   5. the static fallback table (`src/hooks/model-limits.ts`), injected as
+ *      `fallbackLookup` — reachable only when no live value is available
+ *   6. `DEFAULT_MODEL_CONTEXT_TOKENS`
+ *
+ * Steps 1–3 are ABOVE the live value on purpose: a user who writes a
+ * `model_limits` entry is asking for a smaller *working* budget than the
+ * physical window, and that intent must not be overridden by the hardware.
+ * This is why `context_budget.model_limits` no longer carries a zod
+ * `.default({ default: … })` — a schema-injected value is not user intent, and
+ * would have shadowed the live window for every user who has a
+ * `context_budget` block at all. See `ContextBudgetConfigSchema` in
+ * `./schema.ts`.
+ *
+ * Steps 5–6 are last resorts, NOT a cap on step 4. The hand-maintained table
+ * is stale in the downward direction (it claims Copilot caps everything at
+ * 128 000; the live catalog shows Copilot Claude entries at 200 000 and
+ * 1 000 000), so min-capping the live value against it would reintroduce
+ * exactly the too-small denominator this module exists to remove.
+ */
+/**
+ * LAST-RESORT context-budget denominator (tokens) — rung 6 above.
+ *
+ * Declared HERE rather than imported from `./schema`, deliberately: this module
+ * is loaded transitively by `src/hooks/model-limits.ts` and therefore by every
+ * `messages.transform` consumer, and several test files replace
+ * `src/config/schema` with a non-spreading `mock.module` factory. Importing a
+ * symbol from schema here would make Bun throw
+ * `SyntaxError: Export named 'DEFAULT_MODEL_CONTEXT_TOKENS' not found` in those
+ * files at import time (see the "mock.module() Export Completeness" section of
+ * the writing-tests skill). Keeping this module dependency-free removes the
+ * whole class. `./schema` re-exports the constant, so every existing importer
+ * is unaffected.
+ *
+ * It is reached only when the user configured no `model_limits` entry, the host
+ * supplied no usable `model.limit.context`, and the static fallback table in
+ * `src/hooks/model-limits.ts` had no opinion either. It is deliberately NOT the
+ * primary source: 128 000 is stale for current models, which routinely ship
+ * 200k–1M windows.
+ *
+ * Historical note: `budgetTokens` used to be derived from
+ * `context_budget.model_limits.default` in `src/hooks/system-enhancer.ts`, but
+ * `context_budget` is schema-OPTIONAL, so a user with no block fell back to
+ * `DEFAULT_CONTEXT_BUDGET_CONFIG.budgetTokens` in
+ * `src/services/context-budget-service.ts` instead. Those two numbers had
+ * drifted (128000 vs 40000), so the unconfigured default measured the swarm's
+ * architect system prompt — approximately 34.5k estimated tokens — against a
+ * 40k denominator and reported ~86% on turn one (34500/40000 = 86.25%; an
+ * earlier revision of this comment said 87%) — enough to fire the budget
+ * warning, the `CONTEXT PRESSURE`
+ * advisory (src/index.ts) and the compaction EMERGENCY tier
+ * (`observation/reflection/emergency` = 40/60/80) immediately.
+ */
+export declare const DEFAULT_MODEL_CONTEXT_TOKENS = 128000;
+/**
+ * Smallest context window this module will accept from an untrusted source.
+ *
+ * Mirrors the `z.number().min(1000)` floor that `ContextBudgetConfigSchema`
+ * already enforces on user-authored `model_limits` values, so live catalog data
+ * and user config are held to one standard. This is not theoretical: a survey
+ * of the host's on-disk model catalog (`~/.cache/opencode/models.json`, ~6.2k
+ * entries; the file is a per-machine, auto-refreshing artifact, so the exact
+ * total moves) found 124 entries with `limit.context: 0`. Dividing by that
+ * yields `Infinity` percent and would fire the EMERGENCY compaction tier on
+ * turn one.
+ */
+export declare const MIN_PLAUSIBLE_CONTEXT_TOKENS = 1000;
+/** Which rung of the resolution order produced the value. */
+export type ContextWindowSource = 'user_provider_model' | 'user_model' | 'user_default' | 'live_model_limit' | 'static_table' | 'static_default';
+export interface ContextWindowResolution {
+    /**
+     * The resolved denominator, in tokens. Always a finite integer ≥ 1, so it is
+     * never a divide-by-zero. Through a PARSED config it is additionally ≥ 1000:
+     * every rung except the user rungs is gated on
+     * {@link isUsableContextWindow} (≥ {@link MIN_PLAUSIBLE_CONTEXT_TOKENS}), and
+     * the user rungs are themselves floored at 1000 by
+     * `ContextBudgetConfigSchema`. A direct programmatic call may still supply a
+     * user value between 1 and 999 and get it back — that is deliberate
+     * (honouring explicit intent), and it is why the guarantee stated here is
+     * ≥ 1 rather than ≥ 1000.
+     */
+    tokens: number;
+    /** Which rung produced `tokens` — surfaced in debug logs and tests. */
+    source: ContextWindowSource;
+}
+export interface ContextWindowInputs {
+    /**
+     * `config.context_budget?.model_limits` exactly as the user authored it.
+     * Pass `undefined` when the user has no `context_budget` block.
+     */
+    userLimits?: Record<string, number> | undefined;
+    /** Model identifier, when known (e.g. `claude-sonnet-4-6`). */
+    modelID?: string | undefined;
+    /** Provider identifier, when known (e.g. `github-copilot`). */
+    providerID?: string | undefined;
+    /**
+     * The live `model.limit.context` for this turn. Deliberately `unknown`:
+     * it crosses the plugin-host boundary, and the survey above shows the
+     * catalog really does ship `0` for some entries.
+     */
+    liveContextLimit?: unknown;
+    /**
+     * Last-resort static lookup. Injected rather than imported so this module
+     * stays free of any dependency on `src/hooks/`. Returning `undefined` means
+     * "no opinion" and falls through to `DEFAULT_MODEL_CONTEXT_TOKENS`.
+     */
+    fallbackLookup?: ((modelID?: string, providerID?: string) => number | undefined) | undefined;
+}
+/**
+ * True when `value` can be used as a divisor at all: a finite number strictly
+ * greater than zero.
+ *
+ * This is the bar applied to USER-AUTHORED `model_limits` values. It is
+ * deliberately weaker than {@link isUsableContextWindow}: `ContextBudgetConfigSchema`
+ * already enforces `z.number().min(1000)` on that record, so anything smaller
+ * cannot reach here through a parsed config — and silently DISCARDING a value a
+ * user explicitly wrote would be worse than honouring it. What this does reject
+ * is the set that breaks arithmetic outright (`NaN`, `±Infinity`, `0`,
+ * negatives, non-numbers), which a direct programmatic call can still supply.
+ *
+ * The bar is `>= 1`, not `> 0` (#1619 review round 4). `resolveContextWindow`
+ * applies `Math.floor` to whatever this admits, so a fractional value in
+ * `(0, 1)` — e.g. `{ default: 0.5 }` from a programmatic caller — passed a
+ * `> 0` test and then floored to a **zero denominator**, producing the exact
+ * `Infinity %` this guard exists to prevent. `>= 1` closes that without
+ * discarding any value a user could author through a parsed config (the schema
+ * floor is 1000) and without changing the verdict for any previously-accepted
+ * integer.
+ */
+export declare function isUsableConfiguredWindow(value: unknown): value is number;
+/**
+ * True when `value` is a plausible context-window size reported by an
+ * UNTRUSTED source: a finite number at or above
+ * {@link MIN_PLAUSIBLE_CONTEXT_TOKENS}.
+ *
+ * Applied to the live `model.limit.context` and to the static fallback table.
+ * Stricter than {@link isUsableConfiguredWindow} because nothing validates the
+ * host's model catalog on the way in and no real model ships a sub-1000-token
+ * window — so a small value there is corrupt data, not intent. Rejects, by
+ * construction, `undefined`, `null`, non-numbers, `NaN`, `Infinity`,
+ * `-Infinity`, `0` and every negative: the shapes that turn a percentage into
+ * `NaN` / `Infinity` and drive spurious EMERGENCY compaction directives.
+ */
+export declare function isUsableContextWindow(value: unknown): value is number;
+/**
+ * Safely read `model.limit.context` off the `experimental.chat.system.transform`
+ * hook input's `model` object.
+ *
+ * Typed as `unknown` on purpose. The plugin `.d.ts` declares `model: Model`
+ * (non-optional), but this hook runs inside the host's transform chain: a throw
+ * here takes down ALL system enhancement for the turn, so the read never
+ * assumes the declared shape actually arrived.
+ *
+ * @returns the raw value, or `undefined` when the path is absent.
+ */
+export declare function readModelContextLimit(model: unknown): unknown;
+/**
+ * Safely read `model.id` / `model.providerID` off the hook input's `model`.
+ *
+ * Same defensive posture as {@link readModelContextLimit}: the declared type
+ * says these are strings, but this runs on the host boundary. Empty strings are
+ * normalised to `undefined` so a blank identity never becomes a config-lookup
+ * key like `"/"`.
+ */
+export declare function readModelIdentity(model: unknown, key: 'id' | 'providerID'): string | undefined;
+/**
+ * Resolve the context-window denominator and report which rung produced it.
+ *
+ * @see the module header for the full resolution order and its rationale.
+ */
+export declare function resolveContextWindow(inputs: ContextWindowInputs): ContextWindowResolution;
+/**
+ * Convenience wrapper around {@link resolveContextWindow} for call sites that
+ * only need the number.
+ */
+export declare function resolveContextWindowTokens(inputs: ContextWindowInputs): number;

package/dist/config/schema.d.ts

@@ -220,6 +220,24 @@ export declare const ScoringConfigSchema: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type ScoringConfig = z.infer<typeof ScoringConfigSchema>;
+/**
+ * LAST-RESORT context-budget denominator (tokens), used only when nothing
+ * better is available — rung 6 of the resolution order.
+ *
+ * DEFINED in `./context-window.ts` and re-exported here for the existing
+ * importers. It cannot live in this file: `context-window.ts` is loaded
+ * transitively by every context-budget consumer, and several test files replace
+ * `src/config/schema` with a non-spreading `mock.module` factory, so an import
+ * edge from `context-window.ts` into this module would make Bun throw
+ * `SyntaxError: Export named 'DEFAULT_MODEL_CONTEXT_TOKENS' not found` at
+ * import time. See the constant's own doc comment for the full history.
+ *
+ * A hardcoded denominator is wrong for any model whose window is not 128k. The
+ * budget denominator is derived from the live `model.limit.context` the host
+ * hands to `experimental.chat.system.transform`; this constant survives only as
+ * the no-information floor.
+ */
+export { DEFAULT_MODEL_CONTEXT_TOKENS } from './context-window';
 export declare const ContextBudgetConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     warn_threshold: z.ZodDefault<z.ZodNumber>;

package/dist/evaluation/ephemeral-agent-dispatcher.d.ts

@@ -4,6 +4,14 @@ import { log } from '../utils/logger.js';
 import type { ModelOverride } from '../utils/model-dispatch-fallback.js';
 export declare const DEFAULT_EPHEMERAL_TIMEOUT_MS = 120000;
 export declare const DEFAULT_EPHEMERAL_CLEANUP_TIMEOUT_MS = 500;
+/**
+ * Bounded timeout for the graceful `session.abort()` step that precedes delete
+ * in the ephemeral teardown (#2123). opencode's `SessionProcessor.cleanup` can
+ * take up to ~250 ms under interruption (it awaits each pending tool-call
+ * deferred with a 250 ms timeout), so this must stay well above that or the
+ * abort would give up before the final part/message flush lands.
+ */
+export declare const DEFAULT_EPHEMERAL_ABORT_TIMEOUT_MS = 5000;
 export declare const DEFAULT_EPHEMERAL_PROMPT_BYTE_LIMIT: number;
 export declare const MAX_EPHEMERAL_PROMPT_BYTE_LIMIT: number;
 export declare const DEFAULT_EPHEMERAL_RESPONSE_BYTE_LIMIT: number;
@@ -48,8 +56,18 @@ export type EphemeralAgentDispatchResult = {
     responseBytes: number;
     costFields?: DelegationCostFields;
 };
+/**
+ * Bounded graceful abort of an ephemeral session. opencode's
+ * `POST /session/{id}/abort` resolves only after `Fiber.interrupt` on the
+ * run-loop fiber — which runs `SessionProcessor.cleanup` (the final
+ * `updatePart`/`updateMessage` flush) as a finalizer. Awaiting this BEFORE the
+ * delete is what closes the FOREIGN KEY constraint race (#2123). If the session
+ * is already idle, abort is a fast no-op. Best-effort: never throws.
+ */
+export declare function boundedAbortEphemeralSession(client: OpencodeClient, sessionId: string, timeoutMs?: number): Promise<void>;
 export declare function boundedDeleteEphemeralSession(client: OpencodeClient, sessionId: string, timeoutMs?: number): Promise<void>;
 export declare const _internals: {
+    boundedAbort: typeof boundedAbortEphemeralSession;
     boundedDelete: typeof boundedDeleteEphemeralSession;
     log: typeof log;
 };

package/dist/evaluation/model-dispatcher.d.ts

@@ -48,6 +48,7 @@ export declare function resolveEvaluationAgentName(agents: readonly Pick<Agent,
  * primitive remains the single owner of cleanup and logging behavior.
  */
 export declare const _internals: {
+    boundedAbort: typeof ephemeralDispatcherInternals.boundedAbort;
     boundedDelete: typeof ephemeralDispatcherInternals.boundedDelete;
     log: typeof ephemeralDispatcherInternals.log;
 };

package/dist/hooks/delegate-ack-collector.d.ts

@@ -7,7 +7,7 @@
  * prompt) against the ack markers in the subagent's transcript:
  *
  *   - For every ack whose ID was actually shown, emit a receipt event of the
- *     matching type (applied / ignored / violated / n_a). Acks for IDs that were
+ *     matching type (applied / ignored / contradicted / violated / n_a). Acks for IDs that were
  *     never shown are DROPPED (anti-spoofing).
  *   - For every CRITICAL directive that was shown but never acknowledged, emit a
  *     `violated` event with reason `unacknowledged` and append an audit line to

package/dist/hooks/delegation-gate/worktree-collision-ownership.d.ts

@@ -1,3 +1,10 @@
+import * as fs from 'node:fs';
+import { removeWorktreeProvisioningOwner } from './worktree-provisioning-owner';
+/** File-operation seam for deterministic fail-closed recovery tests. */
+export declare const _internals: {
+    statSync: fs.StatSyncFn;
+    removeWorktreeProvisioningOwner: typeof removeWorktreeProvisioningOwner;
+};
 export interface StandardWorktreeCollisionIdentity {
     directory: string;
     parentSessionId: string;

package/dist/hooks/delegation-gate/worktree-isolation.d.ts

@@ -12,7 +12,7 @@ import type { PluginConfig, WorktreeIsolationConfig } from '../../config';
 import { tryAcquireLock } from '../../parallel/file-locks';
 import { bunSpawn } from '../../utils/bun-compat';
 import type { WorktreeHandle } from '../../worktree';
-import { attemptMergeBackFromDirty, cleanupOrphanedBranches, postMergeCleanup, provisionWorktree, removeWorktree, startupOrphanRecovery } from '../../worktree';
+import { attemptMergeBackFromDirty, cleanupOrphanedBranches, postMergeCleanup, provisionWorktree, pruneStaleWorktreeMetadata, removeWorktree, startupOrphanRecovery } from '../../worktree';
 import type { DirtyMergeOptions, MergeOperationProvenance } from '../../worktree/merge';
 import { recordWorktreeProvisioningOwner, removeWorktreeProvisioningOwner } from './worktree-provisioning-owner';
 /**
@@ -301,6 +301,7 @@ export declare const _internals: {
     removeWorktree: typeof removeWorktree;
     attemptMergeBackFromDirty: typeof attemptMergeBackFromDirty;
     postMergeCleanup: typeof postMergeCleanup;
+    pruneStaleWorktreeMetadata: typeof pruneStaleWorktreeMetadata;
     /** FR-201: read lane runtime profile from disk for spawn injection. */
     readLaneEnvFileFromDisk: typeof readLaneEnvFileFromDisk;
     /** FR-104: exposes serializationStateBySessionID for test setup (SC-111/SC-112/SC-113). */

package/dist/hooks/delegation-gate/worktree-provisioning-owner.d.ts

@@ -1,3 +1,9 @@
+/**
+ * A provisional marker covers the bounded gap before `git worktree add`
+ * materializes the exact lane path. Once that path exists, path liveness wins
+ * and the marker remains protected regardless of age.
+ */
+export declare const WORKTREE_PROVISIONING_OWNER_LEASE_MS: number;
 export declare const WORKTREE_LIFECYCLE_LOCK_FILE = ".swarm/locks/init-orphan-recovery.lock";
 export interface WorktreeProvisioningOwner {
     schemaVersion: 1 | 2;

package/dist/hooks/index.d.ts

@@ -11,8 +11,8 @@ export { extractCurrentPhase, extractCurrentPhaseFromPlan, extractCurrentTask, e
 export { createFullAutoInterceptHook } from './full-auto-intercept';
 export { checkFileAuthority, createGuardrailsHooks, DEFAULT_AGENT_AUTHORITY_RULES, } from './guardrails';
 export { classifyMessage, classifyMessages, containsPlanContent, getCompletedToolOutputs, getToolNames, getToolParts, isDuplicateToolRead, isStaleError, isToolResult, MessagePriority, type MessagePriorityType, type MessageWithParts, } from './message-priority';
-export { consolidateSystemMessages } from './messages-transform';
-export { extractModelInfo, NATIVE_MODEL_LIMITS, PROVIDER_CAPS, resolveModelLimit, } from './model-limits';
+export { consolidateSystemMessages, consolidateSystemMessagesInPlace, } from './messages-transform';
+export { extractModelInfo, extractSessionId, lookupStaticModelLimit, NATIVE_MODEL_LIMITS, PROVIDER_CAPS, resolveModelLimit, } from './model-limits';
 export { type CuratorDelegateFactory, createPhaseMonitorHook, } from './phase-monitor';
 export { createPipelineTrackerHook } from './pipeline-tracker';
 export { createRepoGraphBuilderHook, type RepoGraphBuilderHook, } from './repo-graph-builder';