opencode-swarm 7.140.6 → 7.141.1

package/dist/hooks/knowledge-receipt-observability.d.ts

@@ -4,6 +4,23 @@
  */
 import { emit } from '../telemetry.js';
 import type { ReceiptOutcome } from './knowledge-receipt-validator.js';
+/**
+ * Semantic version of the outcome/source MEANING contract (issue #2032).
+ * 1 = pre-#2032 producer semantics (outcome words meant different things per
+ * producer; delegate terminals carried no source). 2 = the #2032 atomic
+ * semantics: one typed outcome/source vocabulary, delegate terminals stamped
+ * `source: 'delegate'`, `n_a` neutral everywhere, legacy ambiguity `unknown`.
+ * Distinct from the journal `RECEIPT_SCHEMA_VERSION` (a hard format gate).
+ * Bump this whenever a producer or consumer changes what an outcome or source
+ * MEANS, so health/reports consumers can distinguish producer behavior and
+ * migration uncertainty.
+ */
+export declare const RECEIPT_SEMANTICS_VERSION = 2;
+/**
+ * Outcomes observable on a transition. Terminal outcomes plus the trace-level
+ * `no_relevant` tombstone that closes an empty retrieval (not a terminal).
+ */
+export type ReceiptObservationOutcome = ReceiptOutcome | 'no_relevant';
 export type KnowledgeReceiptObservedTransition = 'membership_committed' | 'empty_retrieval_committed' | 'terminal_committed' | 'terminal_attempt_rejected' | 'terminal_attempt_idempotent' | 'authorized_transition_committed' | 'application_marker_committed' | 'phase_close_intent' | 'phase_closed' | 'legacy_imported' | 'legacy_unverifiable' | 'cutover_completed' | 'checkpoint';
 export type KnowledgeReceiptObservationReasonCode = 'committed' | 'idempotent' | 'trace_not_found' | 'id_not_in_trace' | 'wrong_session' | 'wrong_phase' | 'wrong_task' | 'duplicate_conflicting_terminal' | 'event_id_conflict' | 'invalid_outcome' | 'empty_receipt' | 'lock_timeout' | 'store_unavailable' | 'store_corrupt' | 'legacy_unverifiable' | 'unauthorized_transition';
 export interface KnowledgeReceiptTransitionObservation {
@@ -16,9 +33,15 @@ export interface KnowledgeReceiptTransitionObservation {
     taskId?: string;
     phase?: string;
     /** Domain value only; never projected to the generic observability outcome. */
-    receiptOutcome?: ReceiptOutcome;
+    receiptOutcome?: ReceiptObservationOutcome;
     /** Bounded domain code only; arbitrary prose is deliberately rejected. */
     receiptSource?: string;
+    /**
+     * Outcome/source semantics contract version. Optional so existing ledger
+     * observation constructors need no churn; the emitter defaults it to
+     * {@link RECEIPT_SEMANTICS_VERSION}.
+     */
+    receiptSemantics?: number;
 }
 /** Emit bounded diagnostics fail-open after an authoritative transition. */
 export declare function emitKnowledgeReceiptTransition(observation: KnowledgeReceiptTransitionObservation): void;

package/dist/hooks/knowledge-receipt-validator.d.ts

@@ -7,10 +7,17 @@
  * diagnostic or promotion projection is written.
  */
 import type { KnowledgeEvent, RetrievedEvent } from './knowledge-events.js';
-export type ReceiptOutcome = 'applied' | 'ignored' | 'contradicted' | 'violated' | 'n_a' | 'no_relevant';
+import { type ReceiptOutcome } from './knowledge-receipt-ledger.js';
+/**
+ * Canonical terminal outcome — single declaration lives in the authoritative
+ * ledger (issue #2032). Re-exported here for existing import sites; do NOT
+ * redeclare. The trace-level `no_relevant` tombstone is NOT a terminal
+ * outcome and never appears on a `ReceiptItem`.
+ */
+export type { ReceiptOutcome };
 export interface ReceiptItem {
     id: string;
-    outcome: Exclude<ReceiptOutcome, 'no_relevant'>;
+    outcome: ReceiptOutcome;
     reason?: string;
 }
 export interface ReceiptValidationContext {
@@ -20,6 +27,16 @@ export interface ReceiptValidationContext {
     task_id?: string;
     phase?: string;
     agent: string;
+    /**
+     * Provenance class for the committed terminals (issue #2032): who is
+     * reporting, e.g. 'delegate' for the delegate-ack collector or the
+     * agent-class value for the knowledge_receipt tool. This is deliberately
+     * NOT derived from `agent` — agent identity and source are different
+     * facts, and conflating them is how delegate terminals lost their
+     * provenance. Type-required, but fail-open at runtime: a falsy value
+     * stamps the honest 'unknown' class rather than rejecting the receipt.
+     */
+    source: string;
     cohort_id?: string;
     source_link_id?: string;
     grace_days?: number;
@@ -58,4 +75,3 @@ export declare const _internals: {
     isTerminalReceipt: typeof isTerminalReceipt;
     VALID_OUTCOMES: ReadonlySet<string>;
 };
-export {};

package/dist/hooks/knowledge-types.d.ts

@@ -352,6 +352,15 @@ export interface PromotionEvidenceRecord {
     retrieval_trace_id: string;
     /** Terminal receipt outcome. */
     receipt_outcome: 'applied' | 'violated' | 'contradicted';
+    /**
+     * Provenance class of the terminal this evidence was derived from
+     * (#2032 review F-003). `'delegate'` evidence is a self-report and stays
+     * non-independent: the promotion gate only counts evidence whose source is
+     * present and not `'delegate'` toward `promotion_min_terminal_applications`.
+     * Absent on records written before #2032 — such records fail closed (they
+     * do not count as independent).
+     */
+    receipt_source?: string;
     /** Id of the ReceiptEvent this evidence was derived from. */
     receipt_event_id: string;
     phase?: string;

package/dist/hooks/repo-graph-injection.d.ts

@@ -17,6 +17,7 @@
  * complete drift above the configured refresh cap are suppressed;
  * inconclusive probes remain usable as freshness-unknown, without mutation.
  */
+import { loadPluginConfigWithMetaAsync } from '../config/loader';
 import { type FreshnessOptions, probeFreshness, type RepoGraph } from '../tools/repo-graph';
 export interface RepoGraphInjectionOptions extends FreshnessOptions {
     enabled?: boolean;
@@ -25,6 +26,9 @@ export interface RepoGraphInjectionOptions extends FreshnessOptions {
 export declare const _internals: {
     probeFreshness: typeof probeFreshness;
     cacheSize: () => number;
+    renderLaneOrientationBlock: typeof renderLaneOrientationBlock;
+    orientationFreshnessLine: typeof orientationFreshnessLine;
+    loadPluginConfigWithMetaAsync: typeof loadPluginConfigWithMetaAsync;
 };
 /**
  * Load the repo graph for `directory`, using a bounded per-directory cache that
@@ -54,3 +58,51 @@ export declare function buildCoderLocalizationBlock(directory: string, targetFil
  * the per-block context budget.
  */
 export declare function buildReviewerBlastRadiusBlock(directory: string, changedFiles: string[], options?: RepoGraphInjectionOptions): Promise<string | null>;
+/**
+ * Options for {@link buildLaneOrientationBlock}.
+ *
+ * `sessionID` scopes the novelty dedupe so two controller sessions never
+ * suppress each other's orientation blocks (invariant 8).
+ */
+export interface LaneOrientationOptions extends RepoGraphInjectionOptions {
+    sessionID?: string;
+}
+/** Test-only: clear the per-session orientation dedupe state. */
+export declare function resetLaneOrientationDedupe(): void;
+interface OrientationAskFile {
+    file: string;
+    score: number;
+    exports: string[];
+}
+/**
+ * Pure render for the lane orientation block. Deterministic: a pure function
+ * of its arguments — no timestamps, no randomness, no probe timing fields.
+ * Exported only through {@link _internals} for tests.
+ */
+declare function renderLaneOrientationBlock(askFiles: OrientationAskFile[], hubFiles: string[], freshnessLine: string): string;
+/**
+ * Deterministic freshness statement for the orientation block. Only probe
+ * state and drift counts feed the text — never elapsedMs, probedFiles, or
+ * truncated, which would break the block's determinism contract.
+ */
+declare function orientationFreshnessLine(state: string, changedCount: number, removedCount: number): string;
+/**
+ * Build a bounded, relevance-gated repo-graph orientation block for a lane
+ * dispatch batch (issue #1988 C2/C6). The block is appended to the shared
+ * `common_prompt` prefix by the dispatch caller.
+ *
+ * Gating policy — the block is emitted only when ALL hold:
+ *   - a usable graph exists (fresh, or drifted within the refresh cap);
+ *   - the top `ask` hit for the concatenated mission texts clears
+ *     LANE_ORIENTATION_SCORE_FLOOR;
+ *   - at least one file pointer is novel for this session (per-session
+ *     novelty dedupe, bounded FIFO — suppressed repeats emit NOTHING);
+ *   - the rendered block fits LANE_ORIENTATION_MAX_TOKENS.
+ *
+ * Determinism contract: a pure function of (graph state, mission texts,
+ * empty dedupe state) — the same dispatch replayed from a reset dedupe
+ * state produces a byte-identical block. Returns null on every gate
+ * failure or error; never throws into the dispatch path.
+ */
+export declare function buildLaneOrientationBlock(directory: string, lanePrompts: string[], options?: LaneOrientationOptions): Promise<string | null>;
+export {};