opencode-swarm 7.139.4 → 7.139.6

package/dist/plan/manager.d.ts

@@ -133,6 +133,7 @@ export declare function loadPlan(directory: string, cache?: Map<string, Promise<
  */
 export declare function savePlanWithAutoAcknowledgedRemovals(directory: string, plan: Plan, source: string, reason: string, options?: {
     preserveCompletedStatuses?: boolean;
+    planLockAlreadyHeld?: boolean;
 }): Promise<{
     removedCount: number;
 }>;
@@ -143,6 +144,8 @@ export declare function savePlanWithAutoAcknowledgedRemovals(directory: string,
 export declare function savePlan(directory: string, plan: Plan, options?: {
     preserveCompletedStatuses?: boolean;
     acknowledged_removals?: AcknowledgedRemovals;
+    /** True only when the caller already owns the canonical plan.json lock. */
+    planLockAlreadyHeld?: boolean;
 }): Promise<void>;
 /**
  * Rebuild plan from ledger events.
@@ -201,6 +204,7 @@ export declare function isTaskSettled(directory: string, taskId: string): Promis
  */
 export declare function updateTaskStatus(directory: string, taskId: string, status: TaskStatus, options?: {
     force?: boolean;
+    planLockAlreadyHeld?: boolean;
 }): Promise<Plan>;
 /**
  * Generate deterministic markdown view from plan object.

package/dist/qa-gate/recovery.d.ts

@@ -0,0 +1,6 @@
+export interface QaGateRecoveryIdentity {
+    swarm: string;
+    title: string;
+}
+export declare function formatLegacyQaBindingOnlyCall(identity: QaGateRecoveryIdentity): string;
+export declare function formatLegacyQaBindingRecovery(identity: QaGateRecoveryIdentity, retryAction: string): string;

package/dist/services/export-service.d.ts

@@ -1,3 +1,4 @@
+import type { ExecutionProfile } from '../config/plan-schema';
 /**
  * Structured export data.
  */
@@ -7,12 +8,7 @@ export interface ExportData {
     plan: unknown;
     context: string | null;
     /** The plan's execution_profile, if set. Consumers must honour locked profiles. */
-    execution_profile?: {
-        parallelization_enabled: boolean;
-        max_concurrent_tasks: number;
-        council_parallel: boolean;
-        locked: boolean;
-    } | null;
+    execution_profile?: ExecutionProfile | null;
 }
 /**
  * Get export data from the swarm directory.

package/dist/services/handoff-service.d.ts

@@ -4,6 +4,7 @@
  * Provides structured handoff data for agent transitions between swarm sessions.
  * Reads from .swarm files to gather current state for context-efficient handoffs.
  */
+import type { ExecutionProfile } from '../config/plan-schema';
 import { loadPlanJsonOnly } from '../plan/manager';
 /**
  * Escape HTML special characters to prevent XSS attacks
@@ -76,12 +77,7 @@ export interface HandoffData {
     /** Delegation state */
     delegationState: DelegationState | null;
     /** Locked execution_profile for this plan, if set. Resuming sessions must honour it. */
-    execution_profile?: {
-        parallelization_enabled: boolean;
-        max_concurrent_tasks: number;
-        council_parallel: boolean;
-        locked: boolean;
-    } | null;
+    execution_profile?: ExecutionProfile | null;
 }
 /**
  * Extract current phase and task from plan

package/dist/tools/checkpoint.d.ts

@@ -1,13 +1,23 @@
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
-/**
- * Record a checkpoint without staging or committing changes.
- * Writes only to .swarm/checkpoints.json with the current HEAD SHA.
- * Used by spiral detection to avoid silently committing mid-flight user work.
- */
-export declare function saveCheckpointRecord(label: string, directory: string): {
+import { tryAcquireLock } from '../parallel/file-locks.js';
+import { loadPlan } from '../plan/manager.js';
+export declare const _internals: {
+    tryAcquireLock: typeof tryAcquireLock;
+    loadPlan: typeof loadPlan;
+    gitExec: typeof gitExec;
+    sleep: (ms: number) => Promise<void>;
+    findCommitByExactSubject: typeof findCommitByExactSubject;
+    stageAllExcludingSwarm: typeof stageAllExcludingSwarm;
+    afterTaskEligibilityRead?: (directory: string, taskId: string) => Promise<void>;
+};
+declare function stageAllExcludingSwarm(directory: string): void;
+declare function gitExec(args: string[], cwd: string): string;
+declare function findCommitByExactSubject(directory: string, subject: string): string | null;
+export declare function saveCheckpointRecord(label: string, directory: string): Promise<{
     success: boolean;
     sha?: string;
     error?: string;
     warning?: string;
-};
+}>;
 export declare const checkpoint: ToolDefinition;
+export {};

package/dist/tools/get-approved-plan.d.ts

@@ -15,6 +15,7 @@
  * @see https://github.com/zaxbysauce/opencode-swarm/issues/449
  */
 import type { tool } from '@opencode-ai/plugin';
+import type { ExecutionProfile } from '../config/plan-schema';
 interface GetApprovedPlanResult {
     success: boolean;
     reason?: string;
@@ -26,6 +27,12 @@ interface GetApprovedPlanResult {
      *  or null when no profile exists for this plan. Used by the critic to
      *  detect silent gate mutations post-approval. */
     qa_profile_hash?: string | null;
+    /** Exact-binding status of the current QA gate profile identity lookup. */
+    qa_profile_status?: 'bound' | 'missing' | 'unbound_legacy';
+    /** Present when the profile lookup is unsafe even though the read can continue. */
+    qa_profile_error?: string;
+    /** Remediation guidance for unsafe QA profile identity states. */
+    qa_profile_recovery_guidance?: string;
 }
 interface ApprovedPlanPayload {
     plan: unknown;
@@ -34,12 +41,7 @@ interface ApprovedPlanPayload {
     snapshot_timestamp: string;
     payload_hash: string;
     /** The execution_profile from the approved snapshot, if any. */
-    execution_profile?: {
-        parallelization_enabled: boolean;
-        max_concurrent_tasks: number;
-        council_parallel: boolean;
-        locked: boolean;
-    } | null;
+    execution_profile?: ExecutionProfile | null;
 }
 interface CurrentPlanPayload {
     plan: unknown;

package/dist/tools/get-qa-gate-profile.d.ts

@@ -1,16 +1,20 @@
 /**
- * Tool to retrieve the QA gate profile for the current plan.
+ * Tool to retrieve a QA gate profile for the current or future plan.
  *
- * Read-only: derives plan_id from plan.json, then looks up the profile in the
+ * Read-only: uses plan.json identity when available or an explicit exact
+ * swarm/title pair before plan creation, then looks up the profile in the
  * per-project DB. Returns the spec-level profile gates, lock state, and profile
  * hash. Callers layering session overrides should combine with
  * `getEffectiveGates` themselves — this tool intentionally returns the
  * persisted/locked spec-level view.
  */
 import type { tool } from '@opencode-ai/plugin';
+import { type QaGatePlanIdentityArgs } from './qa-gate-plan-identity.js';
+export type GetQaGateProfileArgs = QaGatePlanIdentityArgs;
 interface GetQaGateProfileResult {
     success: boolean;
     reason?: string;
+    message?: string;
     plan_id?: string;
     profile?: {
         plan_id: string;
@@ -22,6 +26,6 @@ interface GetQaGateProfileResult {
         profile_hash: string;
     };
 }
-export declare function executeGetQaGateProfile(_args: Record<string, unknown>, directory: string): Promise<GetQaGateProfileResult>;
+export declare function executeGetQaGateProfile(args: GetQaGateProfileArgs, directory: string): Promise<GetQaGateProfileResult>;
 export declare const get_qa_gate_profile: ReturnType<typeof tool>;
 export {};

package/dist/tools/phase-complete/gates/gate-helpers.d.ts

@@ -25,6 +25,7 @@ export interface GatePreambleResult {
     planId?: string;
     planHash?: string;
     effectiveGates?: QaGates;
+    identityBound?: boolean;
 }
 /**
  * Load the plan, derive its identity, look up the QA-gate profile, resolve

package/dist/tools/qa-gate-plan-identity.d.ts

@@ -0,0 +1,28 @@
+export interface QaGatePlanIdentityArgs {
+    swarm_id?: string;
+    plan_title?: string;
+    confirm_identity_change?: boolean;
+}
+interface PlanIdentity {
+    swarm: string;
+    title: string;
+}
+export type QaGatePlanIdentityResolution = {
+    success: true;
+    planId: string;
+    identity: PlanIdentity;
+} | {
+    success: false;
+    reason: string;
+    message: string;
+};
+/**
+ * Resolve the QA profile identity before or after plan.json exists.
+ *
+ * Explicit identity is all-or-nothing. Values are checked for non-whitespace
+ * content but are otherwise preserved exactly when deriving the plan id. When
+ * a plan already exists, a different exact swarm/title pair requires the same
+ * explicit replacement confirmation used by save_plan.
+ */
+export declare function resolveQaGatePlanIdentity(plan: PlanIdentity | null, args: QaGatePlanIdentityArgs): QaGatePlanIdentityResolution;
+export {};

package/dist/tools/save-plan.d.ts

@@ -3,6 +3,7 @@
  * Allows the Architect agent to save structured plans to .swarm/plan.json and .swarm/plan.md.
  */
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
+import { type ExecutionProfile } from '../config/plan-schema';
 import { takeSnapshotWithRetry } from '../plan/ledger';
 /** Test seam for the snapshot retry helper (FR-004). */
 export declare const _test_exports: {
@@ -80,13 +81,7 @@ export interface SavePlanArgs {
      * save_plan calls that try to change it will be rejected (fail-closed).
      * Omit to leave the current profile unchanged.
      */
-    execution_profile?: {
-        parallelization_enabled?: boolean;
-        max_concurrent_tasks?: number;
-        council_parallel?: boolean;
-        locked?: boolean;
-        auto_proceed?: boolean;
-    };
+    execution_profile?: Partial<ExecutionProfile>;
 }
 /**
  * Result from executing save_plan
@@ -102,13 +97,7 @@ export interface SavePlanResult {
     recovery_guidance?: string;
     requirement_coverage?: RequirementCoverageResult;
     /** The resolved execution_profile that was persisted, if any. */
-    execution_profile?: {
-        parallelization_enabled: boolean;
-        max_concurrent_tasks: number;
-        council_parallel: boolean;
-        locked: boolean;
-        auto_proceed?: boolean;
-    };
+    execution_profile?: ExecutionProfile;
 }
 interface RequirementCoverageEntry {
     id: string;

package/dist/tools/set-qa-gates.d.ts

@@ -1,16 +1,17 @@
 /**
- * Tool to configure the QA gate profile for the current plan.
+ * Tool to configure a QA gate profile for the current or future plan.
  *
- * Architect-only: invoked during the QA GATE SELECTION phase of brainstorm
- * mode (or equivalent). The initial selection may override defaults; after a
- * profile exists, updates are ratchet-tighter and cannot disable enabled gates.
- * Rejects all writes once the profile is locked.
+ * Architect-only: invoked during PLAN's QA GATE SELECTION phase. The initial
+ * profile reflects explicit true/false choices; later writes are ratchet-tighter
+ * and cannot disable enabled gates. Rejects all writes once locked.
  *
- * Creates the profile with defaults plus the initial selection if missing,
- * then always applies the requested partial update through the normal ratchet.
+ * Creates the profile atomically from defaults plus the initial selection if
+ * missing, then applies the ordinary ratchet semantics.
  */
 import type { tool } from '@opencode-ai/plugin';
-export interface SetQaGatesArgs {
+import { setGatesForIdentity } from '../db/qa-gate-profile.js';
+import { type QaGatePlanIdentityArgs } from './qa-gate-plan-identity.js';
+export interface SetQaGatesArgs extends QaGatePlanIdentityArgs {
     reviewer?: boolean;
     test_engineer?: boolean;
     council_mode?: boolean;
@@ -23,6 +24,7 @@ export interface SetQaGatesArgs {
     drift_check?: boolean;
     final_council?: boolean;
     project_type?: string;
+    adopt_legacy_binding_only?: boolean;
 }
 interface SetQaGatesResult {
     success: boolean;
@@ -37,6 +39,9 @@ interface SetQaGatesResult {
         profile_hash: string;
     };
 }
+export declare const _internals: {
+    setGatesForIdentity: typeof setGatesForIdentity;
+};
 export declare function executeSetQaGates(args: SetQaGatesArgs, directory: string): Promise<SetQaGatesResult>;
 export declare const set_qa_gates: ReturnType<typeof tool>;
 export {};

package/dist/tools/write-drift-evidence.d.ts

@@ -4,6 +4,7 @@
  * a gate-contract formatted evidence file.
  */
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
+import { lockProfileForIdentity } from '../db/qa-gate-profile.js';
 import { isAcceptedVerdict2, normalizeVerdict2 } from '../evidence/normalize-verdict';
 /**
  * Arguments for the write_drift_evidence tool
@@ -39,6 +40,7 @@ export declare const _internals: {
     normalizeVerdict2: typeof normalizeVerdict2;
     VERDICT_SET_2: readonly string[];
     isAcceptedVerdict2: typeof isAcceptedVerdict2;
+    lockProfileForIdentity: typeof lockProfileForIdentity;
 };
 /**
  * Tool definition for write_drift_evidence

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.139.4",
+	"version": "7.139.6",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",