opencode-swarm 7.140.3 → 7.140.4

package/dist/cli/{scan-cursor-rc8q12ss.js → scan-cursor-j8ytdpam.js}

@@ -4,18 +4,18 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-gtbmabws.js";
-import"./index-qksjaxpd.js";
+} from "./index-mpytsq6k.js";
+import"./index-vrmkg8fm.js";
 import"./index-ae75rja9.js";
-import"./index-rs1f1bh0.js";
-import"./index-h2waehqq.js";
+import"./index-mrpfd1jx.js";
+import"./index-4hp8nvwb.js";
 import"./index-ed5ykebp.js";
-import"./index-hfvxhk4z.js";
+import"./index-35qep0v7.js";
 import"./index-7g4c7s5r.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
 import"./index-bk5tah7q.js";
-import"./index-ry0hgg3m.js";
+import"./index-bfhwtdsw.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{schema-n9eaxp3a.js → schema-6xfqtpvn.js}

@@ -96,8 +96,8 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-7d5jseea.js";
-import"./index-n408rw7n.js";
+} from "./index-tj04dj06.js";
+import"./index-hxvkfx6t.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{scope-persistence-dr1msqxw.js → scope-persistence-8c72jrgp.js}

@@ -23,15 +23,15 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-adyxbmt5.js";
+} from "./index-ryq97w1x.js";
 import"./index-556ja8an.js";
-import"./index-kbfsp07d.js";
-import"./index-hfvxhk4z.js";
+import"./index-wk8s1m7b.js";
+import"./index-35qep0v7.js";
 import"./index-7g4c7s5r.js";
 import"./index-4nt52yr9.js";
 import"./index-d181x9zr.js";
 import"./index-zgwm4ryv.js";
-import"./index-ry0hgg3m.js";
+import"./index-bfhwtdsw.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{skill-generator-q7c6vadg.js → skill-generator-n8vm1yhn.js}

@@ -33,23 +33,32 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-7kdd75se.js";
-import"./index-8n4c3vec.js";
-import"./index-p9dsb0tw.js";
+} from "./index-hfjvepk2.js";
+import"./index-2rb3x0fk.js";
+import"./index-k46me75h.js";
+import"./index-ee3x66a5.js";
+import"./index-7begd9aq.js";
+import"./index-dtam929z.js";
 import"./index-rtry5xyf.js";
-import"./index-qksjaxpd.js";
-import"./index-n8jncheh.js";
+import"./index-vrmkg8fm.js";
 import"./index-ae75rja9.js";
-import"./index-rs1f1bh0.js";
-import"./index-h2waehqq.js";
+import"./index-mrpfd1jx.js";
+import"./index-4hp8nvwb.js";
 import"./index-ed5ykebp.js";
-import"./index-hfvxhk4z.js";
+import"./index-35qep0v7.js";
 import"./index-7g4c7s5r.js";
 import"./index-4nt52yr9.js";
+import"./index-pp5m7xga.js";
+import"./index-gprxjmm7.js";
+import"./index-n832052r.js";
+import"./index-d181x9zr.js";
 import"./index-4rhhvd1a.js";
 import"./index-zgwm4ryv.js";
+import"./index-tj04dj06.js";
+import"./index-hxvkfx6t.js";
+import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-ry0hgg3m.js";
+import"./index-bfhwtdsw.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{telemetry-sc57xtb0.js → telemetry-fb44gpba.js}

@@ -13,7 +13,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-ry0hgg3m.js";
+} from "./index-bfhwtdsw.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{worktree-collision-ownership-7a8e6gr9.js → worktree-collision-ownership-f28r473k.js}

@@ -10,18 +10,18 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-b9rd29ge.js";
+} from "./index-rrb6cz2f.js";
 import"./index-k46me75h.js";
 import"./index-ee3x66a5.js";
 import"./index-ed5ykebp.js";
-import"./index-hfvxhk4z.js";
+import"./index-35qep0v7.js";
 import"./index-7g4c7s5r.js";
 import {
   bunSpawn
 } from "./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";
 import"./index-zjygnfay.js";
-import"./index-ry0hgg3m.js";
+import"./index-bfhwtdsw.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 

package/dist/commands/ci-simulate.d.ts

@@ -14,20 +14,24 @@
  * merge-queue kick-outs.
  *
  * Input contract:
- *   /swarm ci-simulate              → uses current HEAD branch
- *   /swarm ci-simulate <pr-ref>     → uses the specified branch/ref
+ *   /swarm ci-simulate                        → uses current HEAD branch
+ *   /swarm ci-simulate <pr-ref>               → uses the specified branch/ref
+ *   /swarm ci-simulate <pr-ref> --base <ref>  → validated explicit base for
+ *                                               stacked/release-branch PRs
  */
 import * as fs from 'node:fs';
-import { getDefaultBaseBranch } from '../git/branch.js';
+import { detectDefaultRemoteBranch, getDefaultBaseBranch } from '../git/branch.js';
 import { runExternalTool } from '../utils/external-tool-runner.js';
 export declare const _internals: {
     runExternalTool: typeof runExternalTool;
     getDefaultBaseBranch: typeof getDefaultBaseBranch;
+    detectDefaultRemoteBranch: typeof detectDefaultRemoteBranch;
     platform: string;
     osTmpdir: () => string;
     fs: {
         existsSync: typeof fs.existsSync;
         rmSync: typeof fs.rmSync;
+        realpathSync: (p: fs.PathLike) => string;
     };
 };
 /**

package/dist/commands/close.d.ts

@@ -6,6 +6,14 @@ import { createCuratorLLMDelegate } from '../hooks/curator-llm-factory';
 import { runCuratorPostMortem } from '../hooks/curator-postmortem';
 import { checkHivePromotions } from '../hooks/hive-promoter';
 import { curateAndStoreSwarm } from '../hooks/knowledge-curator';
+import { reconcilePhaseClose } from '../hooks/knowledge-receipt-ledger.js';
+/** Narrow seam for receipt/plan ordering tests. */
+export declare const closeReceiptLifecycleInternals: {
+    recordPhaseCloseIntent: (directory: string, phase: string, sessionId?: string, taskId?: string) => Promise<import("../hooks/knowledge-receipt-ledger.js").ReceiptLedgerResult<{
+        event_id: string;
+    }>>;
+    reconcilePhaseClose: typeof reconcilePhaseClose;
+};
 import { runFinalizeRewardSweep } from '../memory/finalize-reward-sweep';
 import { closePlanTerminalState } from '../plan/manager';
 import { type SessionReflectionResult } from '../services/session-reflection';

package/dist/commands/registry.d.ts

@@ -701,8 +701,8 @@ export declare const COMMAND_REGISTRY: {
     readonly 'ci-simulate': {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Create a temporary merge-result worktree and run CI before merge queue entry";
-        readonly args: "[--base origin/main] [--head <ref>]";
-        readonly details: "Creates a detached temporary worktree under .swarm/ci-simulate from the base ref, merges the current worktree HEAD (or --head ref), runs fixed local CI gates (typecheck, Biome CI, build, unit/integration/security/smoke tests, drift check), then removes the worktree and prunes metadata. Intended as a pre-queue merge_group simulation helper.";
+        readonly args: "[pr-ref] [--base <ref>]";
+        readonly details: "Creates a detached temporary worktree under the OS temp dir (swarm-ci-simulate) from the base — an explicit validated --base <ref> when given (stacked/release-branch PRs), otherwise the detected default remote branch (origin/HEAD, init.defaultBranch, origin/main, origin/master, verified to exist) — merges the given PR ref (or the current ref), runs fixed local CI gates (typecheck, lint, build, test), then removes the worktree non-force and prunes metadata. Worktree removal is fail-closed: a blocked or dirty worktree is surfaced, never force-deleted. Intended as a pre-queue merge_group simulation helper.";
         readonly category: "agent";
         readonly toolPolicy: "agent";
     };

package/dist/commands/sdd.d.ts

@@ -16,6 +16,21 @@ interface ParsedSddArgs {
     feature?: string;
     error?: string;
 }
+/**
+ * Returns true when `value` contains characters that are unsafe in a directory
+ * name id: path separators, traversal sequences, bracket characters, or control/bidi
+ * characters.
+ *
+ * Shared by both --change and --feature so the same rejection logic is reused
+ * (task 2.2 explicit requirement; matches the pre-task baseline).
+ */
+/**
+ * Issue #2131 criterion G: the allowed-mutations policy derived from the
+ * effective spec's source kind. Only a native swarm spec may be created,
+ * refined, or archived through the swarm tooling; projected sources
+ * (openspec / speckit) are read-only inputs — refine them in their own tool.
+ */
+export declare function allowedMutationsFor(source: 'swarm' | 'openspec_projection' | 'speckit_projection'): string[];
 declare function parseArgs(args: string[]): ParsedSddArgs;
 export declare function handleSddStatusCommand(directory: string, args: string[]): Promise<string>;
 export declare function handleSddValidateCommand(directory: string, args: string[]): Promise<string>;

package/dist/config/bundled-skills.d.ts

@@ -1,4 +1,4 @@
-export declare const BUNDLED_PROJECT_SKILLS: readonly ["brainstorm", "specify", "clarify-spec", "resume", "clarify", "discover", "consult", "pre-phase-briefing", "council", "deep-dive", "deep-research", "codebase-review-swarm", "swarm-implement", "design-docs", "swarm-pr-review", "swarm", "swarm-pr-feedback", "swarm-pr-subscribe", "swarm-ci-monitor", "issue-ingest", "plan", "critic-gate", "execute", "phase-wrap", "loop", "writing-tests", "running-tests", "engineering-conventions", "commit-pr", "ci-failure-batching", "gate-attribution", "merge-queue-readiness", "skill-edit-validation", "worktree-retry-cleanup", "test-file-split", "fork-pr-operations", "parallel-work-check", "ci-fix-monitor", "issue-tracer"];
+export declare const BUNDLED_PROJECT_SKILLS: readonly ["brainstorm", "specify", "clarify-spec", "resume", "clarify", "discover", "consult", "pre-phase-briefing", "council", "deep-dive", "deep-research", "codebase-review-swarm", "swarm-implement", "design-docs", "swarm-pr-review", "swarm", "swarm-pr-feedback", "swarm-pr-subscribe", "swarm-ci-monitor", "issue-ingest", "plan", "critic-gate", "execute", "phase-wrap", "loop", "writing-tests", "running-tests", "engineering-conventions", "commit-pr", "ci-failure-batching", "gate-attribution", "merge-queue-readiness", "skill-edit-validation", "worktree-retry-cleanup", "test-file-split", "fork-pr-operations", "parallel-work-check", "ci-fix-monitor", "issue-tracer", "orchestrating-subagents", "durable-session-state"];
 export type BundledProjectSkill = (typeof BUNDLED_PROJECT_SKILLS)[number];
 /**
  * Project-private runtime location for plugin-owned skills. Repository-native

package/dist/config/schema.d.ts

@@ -676,6 +676,7 @@ export declare const KnowledgeConfigSchema: z.ZodObject<{
     evergreen_utility: z.ZodDefault<z.ZodNumber>;
     low_utility_threshold: z.ZodDefault<z.ZodNumber>;
     min_retrievals_for_utility: z.ZodDefault<z.ZodNumber>;
+    receipt_close_grace_days: z.ZodDefault<z.ZodNumber>;
     schema_version: z.ZodDefault<z.ZodNumber>;
     directive_min_confidence: z.ZodDefault<z.ZodNumber>;
     same_project_weight: z.ZodDefault<z.ZodNumber>;
@@ -2121,6 +2122,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
         evergreen_utility: z.ZodDefault<z.ZodNumber>;
         low_utility_threshold: z.ZodDefault<z.ZodNumber>;
         min_retrievals_for_utility: z.ZodDefault<z.ZodNumber>;
+        receipt_close_grace_days: z.ZodDefault<z.ZodNumber>;
         schema_version: z.ZodDefault<z.ZodNumber>;
         directive_min_confidence: z.ZodDefault<z.ZodNumber>;
         same_project_weight: z.ZodDefault<z.ZodNumber>;

package/dist/git/branch.d.ts

@@ -142,7 +142,7 @@ export interface ResetToRemoteBranchResult {
 /**
  * Detect the default remote branch using multiple fallback methods
  */
-declare function detectDefaultRemoteBranch(cwd: string): string | null;
+export declare function detectDefaultRemoteBranch(cwd: string): string | null;
 /**
  * Reset local branch to align with its remote counterpart.
  * Safely handles uncommitted changes, unpushed commits, and detached HEAD states.

package/dist/hooks/delegate-ack-collector.d.ts

@@ -53,6 +53,11 @@ export interface CollectDelegateAcksResult {
      * promotion evidence.
      */
     unacknowledgedNonCritical: string[];
+    /** Typed authority failure: no V2 mutation was attempted. */
+    unverifiable?: {
+        code: 'missing_session_id';
+        detail: string;
+    };
 }
 /**
  * Core reconciliation used by both the runtime hook and tests. Returns a summary

package/dist/hooks/hive-promoter.d.ts

@@ -81,10 +81,9 @@ export declare const _internals: {
     transactHiveStore: typeof transactHiveStore;
     validateLesson: typeof validateLesson;
     authorizeCuration: typeof authorizeCuration;
-    /** (#1849) Loads validated terminal-application evidence per swarm entry id
-     *  from .swarm/knowledge-promotion-evidence.jsonl. Empty when no validated
-     *  receipts exist yet (conservative: no synthetic credit). */
-    loadPromotionEvidence: (directory: string) => Promise<Record<string, PromotionEvidenceRecord[]>>;
+    /** Loads authoritative terminal-application evidence per swarm entry id.
+     *  Empty on receipt-ledger uncertainty (conservative: no synthetic credit). */
+    loadPromotionEvidence: (directory: string, canonicalCohortId?: string) => Promise<Record<string, PromotionEvidenceRecord[]>>;
     /** Loads the default KnowledgeConfig (schema defaults) for manual promotion
      *  paths when the command did not load one. */
     loadDefaultKnowledgeConfig: () => {
@@ -105,6 +104,7 @@ export declare const _internals: {
         evergreen_utility: number;
         low_utility_threshold: number;
         min_retrievals_for_utility: number;
+        receipt_close_grace_days: number;
         schema_version: number;
         directive_min_confidence: number;
         same_project_weight: number;

package/dist/hooks/issue-trace-reducer.d.ts

@@ -55,6 +55,10 @@ export interface WorkflowArtifacts {
     reproductionPermitted: boolean;
     /** A verifiable publication receipt has been observed (issue #2131 2.4). */
     publicationObserved: boolean;
+    /** A valid recurrence-sweep receipt exists (issue #2131 residual B). */
+    recurrenceSweepVerified: boolean;
+    /** Fresh reviewer + critic APPROVE verdicts recorded (issue #2131 residual B). */
+    implementationReviewVerified: boolean;
 }
 export interface TransitionResult {
     nextMode: string | null;
@@ -82,7 +86,9 @@ export interface ComputeNextModeParams {
  *   (f-block) Spec exists, no plan, reproduction NOT permitted → no-op
  *   (g) Plan exists but critic not approved              → no-op
  *   (h) Critic approved, phases incomplete, not yet PLAN_TO_EXECUTE → EXECUTE
- *   (i) All phases complete, not yet EXECUTE_TO_COMMIT   → publication_handoff + COMMIT directive
+ *   (i-pre1) Phases complete, impl-review receipt missing → one-shot REVIEW_GATE directive
+ *   (i-pre2) Impl-review ok, recurrence-sweep receipt missing → one-shot RECURRENCE_GATE directive
+ *   (i) All phases complete + both gates verified, not yet EXECUTE_TO_COMMIT → publication_handoff + COMMIT directive
  *
  * Idempotency: rows (f), (h), (i) return no-op when
  * `traceState.lastTransition` already equals the target transition value.

package/dist/hooks/issue-trace-state.d.ts

@@ -17,6 +17,8 @@ import type { IssueReference, TraceState } from './issue-trace-reducer';
 declare function _defaultLoadPlanFromLedger(directory: string): Promise<Plan | null>;
 declare function _defaultReproductionReceiptExists(directory: string, issueNumber: number): Promise<boolean>;
 declare function _defaultPublicationReceiptExists(directory: string, issueNumber: number): Promise<boolean>;
+declare function _defaultRecurrenceSweepReceiptExists(directory: string, issueNumber: number): Promise<boolean>;
+declare function _defaultImplementationReviewReceiptExists(directory: string, issueNumber: number): Promise<boolean>;
 export declare const _internals: {
     readFileSync: typeof readFileSync;
     writeFileSync: typeof writeFileSync;
@@ -27,6 +29,8 @@ export declare const _internals: {
     loadPlanFromLedger: typeof _defaultLoadPlanFromLedger;
     reproductionReceiptExists: typeof _defaultReproductionReceiptExists;
     publicationReceiptExists: typeof _defaultPublicationReceiptExists;
+    recurrenceSweepReceiptExists: typeof _defaultRecurrenceSweepReceiptExists;
+    implementationReviewReceiptExists: typeof _defaultImplementationReviewReceiptExists;
 };
 /**
  * Reads `.swarm/issue-reference.json` and returns the parsed object,
@@ -90,4 +94,18 @@ export declare function reproductionReceiptExists(directory: string, issueNumber
  * a new trace.
  */
 export declare function publicationReceiptExists(directory: string, issueNumber: number): Promise<boolean>;
+/**
+ * Returns whether a valid recurrence-sweep receipt exists for the given issue
+ * (issue #2131 residual criterion B). Modeled on issue-tracer Phase 4.2: for a
+ * real defect class it must record search predicates, a typed disposition for
+ * every hit, and a guardrail with proof it catches the original defect; the
+ * "no defect class" fast path requires a one-line justification.
+ */
+export declare function recurrenceSweepReceiptExists(directory: string, issueNumber: number): Promise<boolean>;
+/**
+ * Returns whether a valid independent implementation-review receipt exists for
+ * the given issue (issue #2131 residual criterion B): fresh reviewer AND critic
+ * contexts both recorded APPROVE verdicts for the implementation diff.
+ */
+export declare function implementationReviewReceiptExists(directory: string, issueNumber: number): Promise<boolean>;
 export {};

package/dist/hooks/issue-trace.d.ts

@@ -17,7 +17,7 @@
  */
 import { error as _logErrorImpl } from '../utils/logger.js';
 import { isPlanCriticApproved } from './delegation-gate';
-import { publicationReceiptExists, readIssueReference, readPlanPhaseStatus, readSpecIssueNumber, readTraceState, reproductionReceiptExists, specExists, writeTraceState } from './issue-trace-state';
+import { implementationReviewReceiptExists, publicationReceiptExists, readIssueReference, readPlanPhaseStatus, readSpecIssueNumber, readTraceState, recurrenceSweepReceiptExists, reproductionReceiptExists, specExists, writeTraceState } from './issue-trace-state';
 export declare const _internals: {
     readIssueReference: typeof readIssueReference;
     readTraceState: typeof readTraceState;
@@ -27,6 +27,8 @@ export declare const _internals: {
     specExists: typeof specExists;
     reproductionReceiptExists: typeof reproductionReceiptExists;
     publicationReceiptExists: typeof publicationReceiptExists;
+    recurrenceSweepReceiptExists: typeof recurrenceSweepReceiptExists;
+    implementationReviewReceiptExists: typeof implementationReviewReceiptExists;
     isPlanCriticApproved: typeof isPlanCriticApproved;
     logError: typeof _logErrorImpl;
 };

package/dist/hooks/knowledge-application-gate.d.ts

@@ -12,13 +12,13 @@
  *
  *   2. `tool.execute.before` (FAIL-CLOSED chain at src/index.ts) — when a
  *      high-risk tool fires and the calling agent is the architect,
- *      consults `swarmState.currentCriticalShownIds` and the audit log to
- *      assemble the set of critical directives that have been shown but
+ *      consults the authoritative receipt ledger for critical architect
+ *      directives in the current active phase/task that have been shown but
  *      not acknowledged. In `mode: 'enforce'` it THROWS to block the
  *      action (per the FAIL-CLOSED contract — `output.error` is NOT a
  *      write API at toolBefore time) — UNLESS one of two bounded escape
  *      hatches has fired first (a per-directive denial-count limit, or a
- *      staleness TTL since the directive was shown; see
+ *      per-exact-pair staleness TTL since the directive was shown; see
  *      `incrementGateDenialCount`/`buildGateDenialDirectiveKey` in
  *      `../state.js`), in which case the pending directives are
  *      auto-acknowledged and an audit event is durably written before the
@@ -34,6 +34,7 @@
  * Non-architect agents are never gated.
  */
 import { type KnowledgeApplicationConfig } from './knowledge-application.js';
+import { type ReceiptMembership } from './knowledge-receipt-ledger.js';
 import type { MessageWithParts } from './knowledge-types.js';
 /** Tools that require knowledge-directive acknowledgment before execution. */
 export declare const HIGH_RISK_TOOLS: Set<string>;
@@ -42,6 +43,8 @@ export interface GateInput {
     agent?: unknown;
     sessionID?: unknown;
 }
+declare function selectCurrentArchitectDirectiveMemberships(memberships: ReceiptMembership[]): ReceiptMembership[];
+declare function selectStaleUnmarkedMemberships(memberships: ReceiptMembership[], now: number, stalenessMs: number): ReceiptMembership[];
 /**
  * Pre-tool gate. Throws when the architect attempts a high-risk action with
  * an unacknowledged critical directive in `enforce` mode. Always returns in
@@ -64,5 +67,7 @@ export declare const _internals: {
     knowledgeApplicationTransformScan: typeof knowledgeApplicationTransformScan;
     HIGH_RISK_TOOLS: Set<string>;
     writeWarnEvent: typeof writeWarnEvent;
+    selectCurrentArchitectDirectiveMemberships: typeof selectCurrentArchitectDirectiveMemberships;
+    selectStaleUnmarkedMemberships: typeof selectStaleUnmarkedMemberships;
 };
 export {};

package/dist/hooks/knowledge-application.d.ts

@@ -11,14 +11,17 @@ export declare const MAX_LEGACY_APPLICATION_LOG_ENTRIES = 5000;
 /**
  * Parse explicit knowledge-acknowledgment markers from architect/delegate text.
  * Recognised forms (case-insensitive, line-anchored or inline):
- *   KNOWLEDGE_APPLIED: <id>
- *   KNOWLEDGE_IGNORED: <id> reason=<reason>
- *   KNOWLEDGE_CONTRADICTED: <id> reason=<observable conflict>
- *   KNOWLEDGE_VIOLATED: <id> reason=<reason>
- *   KNOWLEDGE_N_A: <id> reason=<reason>   (delegate contract, Change 1)
+ *   KNOWLEDGE_APPLIED: <trace_id>:<entry_id>
+ *   KNOWLEDGE_IGNORED: <trace_id>:<entry_id> reason=<reason>
+ *   KNOWLEDGE_CONTRADICTED: <trace_id>:<entry_id> reason=<observable conflict>
+ *   KNOWLEDGE_VIOLATED: <trace_id>:<entry_id> reason=<reason>
+ *   KNOWLEDGE_N_A: <trace_id>:<entry_id> reason=<reason>
+ * Legacy one-token delegate markers remain parseable, but architect application
+ * reconciliation requires the exact trace token.
  */
 export interface ParsedAcknowledgment {
     id: string;
+    trace_id?: string;
     result: 'applied' | 'ignored' | 'contradicted' | 'violated' | 'n_a';
     reason?: string;
 }

package/dist/hooks/knowledge-escalator.d.ts

@@ -11,6 +11,7 @@
  * Persistence goes through `rewriteKnowledge` (never a raw JSONL write). Fail-open:
  * any error leaves the entry untouched and returns `escalated:false`.
  */
+import { queryHistoricalOutcomes } from './knowledge-receipt-ledger.js';
 import type { DirectivePriority } from './knowledge-types.js';
 export declare const ESCALATION_WINDOW_DAYS = 30;
 export declare const ESCALATION_THRESHOLD = 2;
@@ -25,7 +26,7 @@ export interface EscalationResult {
 }
 /**
  * Evaluate and (if warranted) apply a repeat-violation escalation to a single
- * entry. Call AFTER the triggering `violated` event has been persisted.
+ * entry. Call AFTER the triggering authoritative `violated` terminal commits.
  */
 export declare function maybeEscalateOnViolation(directory: string, entryId: string, now?: Date): Promise<EscalationResult>;
 export interface RecentEscalation {
@@ -58,9 +59,12 @@ export interface ContradictionQuarantineResult {
 /**
  * G3 (#1715): if an entry's `contradicted` count within `windowDays` crosses
  * `threshold`, auto-quarantine it. Mirrors {@link maybeEscalateOnViolation}
- * (counts from the RAW event log via {@link countEntryContradictionsInWindow}
- * — NOT the rollup cache, which is mtime-keyed and can be stale immediately
- * after an append). Idempotent: already-quarantined/archived entries are
- * skipped. Never throws.
+ * Counts exact authoritative receipt terminals, never the diagnostic FIFO or
+ * rollup cache. Idempotent: already-quarantined/archived entries are skipped.
+ * Receipt-ledger uncertainty is conservative and never quarantines.
  */
 export declare function maybeQuarantineOnContradiction(directory: string, entryId: string, threshold: number, windowDays: number, now?: Date): Promise<ContradictionQuarantineResult>;
+/** Dependency seam for authoritative-history tests; restore after each test. */
+export declare const _internals: {
+    queryHistoricalOutcomes: typeof queryHistoricalOutcomes;
+};

package/dist/hooks/knowledge-events.d.ts

@@ -1,11 +1,13 @@
 /**
- * Event-sourced knowledge lifecycle for opencode-swarm.
+ * Bounded diagnostic knowledge lifecycle stream for opencode-swarm.
  *
  * `.swarm/knowledge-events.jsonl` records meaningful knowledge interactions
  * (retrieval, receipt, outcome, archival). Recent lines stay in the event log;
  * old lines are folded into `.swarm/knowledge-counter-baseline.json` when the
- * log exceeds the cap. The event log plus baseline are the authoritative
- * history for derived per-entry counters (`retrieval_outcomes.*`).
+ * log exceeds the cap. The event log plus baseline remain the source for
+ * best-effort aggregate metrics (`retrieval_outcomes.*`), but are not receipt,
+ * membership, gate, promotion, escalation, or destructive-action authority.
+ * Correctness state lives in the canonical project-local V2 receipt ledger.
  *
  * Design contracts:
  * - Append-first, bounded retention. New events use OS-level atomic append; trim
@@ -20,6 +22,7 @@
  *   from the process working directory.
  */
 import { resolveHiveEventsPath as resolveHiveEventsPathImpl } from '../knowledge/hive-paths.js';
+import { queryHistoricalOutcomes } from './knowledge-receipt-ledger.js';
 import type { ConfidenceFloorOptions } from './knowledge-store.js';
 import type { KnowledgeApplicationRecord, RetrievalOutcome } from './knowledge-types.js';
 /** Current event-log record schema version. Bump when the on-disk shape changes. */
@@ -372,16 +375,24 @@ export declare function countEntryViolationsInWindow(directory: string, entryId:
  */
 export declare function countEntryContradictionsInWindow(directory: string, entryId: string, windowDays: number, now?: Date): Promise<number>;
 /**
- * Fail-open rollup reader for hot paths. Search and promotion use this instead
- * of stale persisted counters so `knowledge_receipt` feedback affects ranking
- * and safety gates immediately.
+ * Fail-open diagnostic rollup reader. This preserves legacy metrics and
+ * postmortem views, but correctness-affecting consumers must use
+ * {@link readAuthoritativeKnowledgeCounterRollups} instead.
  */
 export declare function readKnowledgeCounterRollups(directory: string): Promise<Map<string, CounterRollup>>;
+/**
+ * Build correctness-affecting retrieval/outcome counters exclusively from the
+ * project-local receipt authority. The bounded knowledge-events FIFO remains a
+ * diagnostics/metrics source and must never influence ranking, curation,
+ * confidence floors, promotion, or generated-skill eligibility.
+ */
+export declare function readAuthoritativeKnowledgeCounterRollups(directory: string): Promise<Map<string, CounterRollup>>;
 /** Merge event-derived rollups over stored outcome counters for scoring only. */
 export declare function effectiveRetrievalOutcomes(stored: RetrievalOutcome | undefined, rollup: CounterRollup | undefined): RetrievalOutcome;
 /**
- * Read receipt events (applied/violated/ignored), aggregate per knowledge entry,
- * and apply bounded confidence deltas via `bumpKnowledgeConfidenceBatch`.
+ * Read authoritative receipt terminals (applied/violated/ignored), aggregate
+ * per knowledge entry, and apply bounded confidence deltas via
+ * `bumpKnowledgeConfidenceBatch`.
  *
  * Complements `applySkillUsageFeedback` (skill-usage-log.ts) which bridges
  * skill compliance → confidence. This function bridges raw knowledge verdict
@@ -407,9 +418,11 @@ export declare const _internals: {
     appendKnowledgeEvent: typeof appendKnowledgeEvent;
     recordKnowledgeEvent: typeof recordKnowledgeEvent;
     readKnowledgeEvents: typeof readKnowledgeEvents;
+    queryHistoricalOutcomes: typeof queryHistoricalOutcomes;
     readCounterBaseline: typeof readCounterBaseline;
     readLegacyApplicationRecords: typeof readLegacyApplicationRecords;
     readKnowledgeCounterRollups: typeof readKnowledgeCounterRollups;
+    readAuthoritativeKnowledgeCounterRollups: typeof readAuthoritativeKnowledgeCounterRollups;
     effectiveRetrievalOutcomes: typeof effectiveRetrievalOutcomes;
     recomputeCounters: typeof recomputeCounters;
     applyKnowledgeVerdictFeedback: typeof applyKnowledgeVerdictFeedback;

package/dist/hooks/knowledge-injector.d.ts

@@ -5,11 +5,14 @@
  * compaction. Skips for non-architect agents. Appends rejected-pattern warnings
  * to prevent re-learning loops.
  */
+import { ensureCohortIdCached } from './cohort-cache.js';
 import { recordKnowledgeShown } from './knowledge-application.js';
 import { buildEscalationBriefing, readRecentEscalations } from './knowledge-escalator.js';
 import { recordKnowledgeEvent } from './knowledge-events.js';
+import { readLinkPointer } from './knowledge-link.js';
 import type { RankedEntry } from './knowledge-reader.js';
 import { recordLessonsShown } from './knowledge-reader.js';
+import { commitDisplayedMembership, commitEmptyRetrieval, queryLiveMemberships } from './knowledge-receipt-ledger.js';
 import { confirmEntriesPhase } from './knowledge-store.js';
 import type { DirectivePriority, KnowledgeConfig, MessageWithParts } from './knowledge-types.js';
 import { searchKnowledge } from './search-knowledge.js';
@@ -48,6 +51,7 @@ export interface InjectForDelegateParams {
     agent: string;
     expectedTools?: string[];
     taskTitle?: string;
+    taskId?: string;
     sessionId?: string;
     config: KnowledgeConfig;
     /**
@@ -117,6 +121,11 @@ export declare const _internals: {
     buildEscalationBriefing: typeof buildEscalationBriefing;
     recordLessonsShown: typeof recordLessonsShown;
     confirmEntriesPhase: typeof confirmEntriesPhase;
+    commitDisplayedMembership: typeof commitDisplayedMembership;
+    commitEmptyRetrieval: typeof commitEmptyRetrieval;
+    queryLiveMemberships: typeof queryLiveMemberships;
+    ensureCohortIdCached: typeof ensureCohortIdCached;
+    readLinkPointer: typeof readLinkPointer;
 };
 /**
  * Tier-0 test seam (see `.opencode/skills/writing-tests/SKILL.md`). Exposes the

package/dist/hooks/knowledge-receipt-ledger-storage.d.ts

@@ -0,0 +1,49 @@
+import * as fs from 'node:fs';
+import { lstat, realpath } from 'node:fs/promises';
+export declare const RECEIPT_SCHEMA_VERSION = 2;
+export declare const RECEIPT_CUTOVER_VERSION = 1;
+export interface ReceiptLedgerPaths {
+    root: string;
+    swarmDir: string;
+    journal: string;
+    snapshot: string;
+    archive: string;
+    quarantine: string;
+    lockTarget: string;
+    legacyEvents: string;
+    legacyBaseline: string;
+    linkPointer: string;
+}
+export type ReceiptStoreErrorCode = 'lock_timeout' | 'store_unavailable' | 'store_corrupt';
+export declare class ReceiptStoreError extends Error {
+    readonly code: ReceiptStoreErrorCode;
+    constructor(code: ReceiptStoreErrorCode, message: string);
+}
+export declare function resolveReceiptLedgerPaths(directory: string): ReceiptLedgerPaths;
+interface MutationParentDependencies {
+    lstat: typeof lstat;
+    realpath: typeof realpath;
+}
+declare function validateMutationParent(filePath: string, dependencies?: MutationParentDependencies): Promise<string>;
+declare function readLinuxProcStat(pid: number, signal: AbortSignal): Promise<string>;
+declare function isProcessAlive(pid: number): Promise<boolean>;
+declare function recoverLockIfSafe(paths: ReceiptLedgerPaths): Promise<void>;
+export declare function withReceiptLedgerLock<T>(directory: string, action: (paths: ReceiptLedgerPaths) => Promise<T>): Promise<T>;
+export declare function receiptRecordHash(value: unknown): string;
+export declare function readUtf8IfPresent(filePath: string, maxBytes?: number): Promise<string | null>;
+export declare function appendFsynced(filePath: string, line: string): Promise<void>;
+export declare function atomicWriteFsynced(targetPath: string, content: string): Promise<void>;
+export declare function fileMtimeMs(filePath: string): Promise<number | null>;
+export declare const _internals: {
+    platform: () => NodeJS.Platform;
+    killProcess: (pid: number) => void;
+    readLinuxProcStat: typeof readLinuxProcStat;
+    procStateReadTimeoutMs: number;
+    isProcessAlive: typeof isProcessAlive;
+    rename: typeof fs.promises.rename;
+    rm: typeof fs.promises.rm;
+    afterRecoveryRename: (_paths: ReceiptLedgerPaths, _claimedPath: string) => Promise<void>;
+    recoverLockIfSafe: typeof recoverLockIfSafe;
+    validateMutationParent: typeof validateMutationParent;
+};
+export {};