opencode-swarm 7.144.1 → 7.144.3

package/.opencode/skills/swarm-pr-review/references/lane-output-recoverability.md

@@ -136,6 +136,102 @@ A lane with a **recent** `updatedAt` still blocks — a check that can run and
 reports "still progressing" is not softened. Collect it with
 `collect_lane_results`, or wait for the horizon.
 
+### A live session past the horizon is retained, not discarded
+
+Nothing heartbeats `updatedAt`, so age alone cannot tell a dead lane from a slow
+one. Before settling anything, the gate now runs a **liveness probe** over the
+stale candidates: if the host affirmatively reports a lane's session as `busy` or
+`retry`, that lane is **retained** — it keeps blocking, its record stays
+`pending`/`running`, and its transcript stays collectable.
+
+The probe is deliberately **fail-open**. For its error and no-data cases that is
+the inverse of the collector's readiness check, which refuses to collect a lane it
+cannot verify; the two agree rather than invert on a host that exposes no
+`session.status` at all, where the collector proceeds and the probe reports
+`probe-unavailable`. Only a probe that RAN and named a live session may contradict
+staleness. Every other outcome settles exactly as age alone would, and says why:
+
+| Outcome | `probe_status` |
+| --- | --- |
+| No session handle, or the host exposes no `status` | `probe-unavailable` |
+| The call threw | `probe-error` |
+| The call exceeded the 5s probe deadline | `probe-timeout` |
+| The response carried an `error` | `probe-error` |
+| The response carried no `data` | `probe-no-data` |
+
+Where it surfaces: `probe_retained_lanes` on the `complete_pr_workflow` response,
+`probe_status` on both tool responses, `probedAliveLanes` / `probeStatus` on the
+`pr_workflow_lanes_presumed_stale` record, and `probeRetainedLanes` /
+`probeStatus` / `probeRetentionOverrideLanes` on the `pr_workflow_aborted` event.
+Note that the event's `openLanes` now counts fresh open lanes PLUS probe-retained
+lanes, so a successful force abort can record a non-zero value where it always
+recorded `0` before. The settled-lane disclosure
+appends either `liveness probe found no live session` or `settled despite
+liveness probe failure (<reason>)`, so "re-verified" and "not re-verified" are
+never confused.
+
+**Retention has one override, and it is human-only.** A session that never goes
+idle would otherwise make the workflow permanently unexitable. `/swarm
+abort-pr-workflow` (the `force` path, not agent-callable) clears the gate when
+probe-retained lanes are the ONLY thing still blocking, and discloses exactly
+which lanes it overrode — those sessions are not stopped and their output is not
+collected. A lane with a fresh `updatedAt` is never overridden.
+
+On that override path only, the overridden lanes' delegation records are also
+finalized to `stale` — immediately **after** the gate clears, never before.
+Without that finalization the session would be left un-restartable:
+`prepare_pr_workflow_checkout` refuses while any `pending` / `running`
+`swarm-pr-*` record of the session exists, with no age filter, and an overridden
+lane never terminates on its own. So an override is the one case where a retained
+lane's record does NOT stay `pending` and its transcript stops being collectable,
+and the disclosure says so explicitly.
+
+The ordering matters for recoverability, which is what this document is about.
+The clear is CAS-guarded and can legitimately lose its compare-and-swap and
+throw; the finalization is irreversible. Doing the irreversible half second means
+a failed clear abandons no RETAINED lane and the operator's retry is a real
+override — so **a `pr_workflow_abort_not_completed` retraction in
+`.swarm/events.jsonl` means the lanes named in `probeRetentionOverrideLanes` were
+not finalized by the override, and their output is still collectable**
+(`probeRetentionOverrideFinalized: false`).
+
+Read that scope literally. It does NOT mean the abort finalized nothing:
+settlement durably sweeps the same batch's probe-DEAD lanes to `stale` *before*
+the clear is attempted, so those are already terminal when the retraction is
+written. Nor does it guarantee the named lanes are still `pending` by the time
+you read the record — a concurrent force abort for the same session can clear and
+finalize them, and that is itself one of the ways this CAS loses. Treat
+`.swarm/delegations.jsonl` as the authority and re-read it rather than inferring
+record state from the retraction alone.
+
+The override's disclosure separates three facts that used to be conflated, and
+every one of them is a POSITIVE observation rather than an inference from
+absence:
+
+1. Which overridden records went terminal `stale` — named by `correlationId`.
+   Only these have output that is no longer collectable.
+2. Which overridden records the sweep left INTACT because they had already moved
+   on — named as `correlationId (status)` with the status actually observed on
+   disk. **This abort did not discard them, so check `collect_lane_results`
+   before assuming that work is gone.** The clause deliberately stops at "left
+   intact" rather than promising collectable output: an `error` or
+   `ingestion_error` record comes back as `failed` with no result text, and an
+   `ingesting` one is filtered out of `lane_results` until it settles, so the
+   status is what tells you whether there is anything to read. An earlier
+   version inferred (1) from a lane's absence from the still-open set, and a
+   raced-to-`completed` lane is absent for the opposite reason a finalized one
+   is, so it was reported as gone while its transcript sat on disk.
+3. Whether the session can start a new PR workflow. This is read back over EVERY
+   still-open `swarm-pr-*` record of the session, not just the overridden ones —
+   because the ordinary settlement sweep swallows a store-lock timeout and
+   returns `0`, so a lane the abort reported as settled can still be `pending` on
+   disk and refuse the next checkout preparation. When that happens the
+   disclosure names the blocking `correlationId`s instead of claiming
+   restartability.
+
+`.swarm/delegations.jsonl` remains the authority on which rows actually went
+terminal.
+
 ### A corrupted gate state no longer defeats abort
 
 If the durable gate-state file fails schema validation but is still valid JSON,

package/dist/agents/architect.d.ts

@@ -6,6 +6,7 @@ export interface AgentDefinition {
     description?: string;
     config: AgentConfig;
 }
+export declare const ARCHITECT_MEMORY_OUTCOME_GUIDANCE = "After using recalled memory or a graph answer, call `swarm_memory_outcome` to record whether it was `useful`, a `dead_end`, or `corrected`, with the relevant file/symbol anchors. If you correct a memory-backed claim, record `corrected` and include the corrected explanation in `correction`.";
 /**
  * HARDENING BLOCK INVENTORY (v6.14)
  *

package/dist/agents/coder.d.ts

@@ -1,2 +1,3 @@
 import type { AgentDefinition } from './architect';
+export declare const CODER_MEMORY_OUTCOME_GUIDANCE = "Use `swarm_memory_outcome` after applying recalled memory or a graph answer: record `useful`, `dead_end`, or `corrected` with the relevant file/symbol anchors.";
 export declare function createCoderAgent(model: string, customPrompt?: string, customAppendPrompt?: string): AgentDefinition;

package/dist/agents/critic.d.ts

@@ -1,4 +1,5 @@
 import type { AgentDefinition } from './architect';
+export declare const CRITIC_MEMORY_OUTCOME_GUIDANCE = "Use `swarm_memory_outcome` after evaluating recalled memory or a graph answer. When overturning a memory-backed claim, record `corrected` and include the correction text and relevant file/symbol anchors.";
 /**
  * Test-only dependency-injection seam. Production code calls
  * `_internals.createCriticAgent(...)` etc. so tests can replace the functions

package/dist/agents/explorer.d.ts

@@ -1,4 +1,5 @@
 import type { AgentDefinition } from './architect';
+export declare const EXPLORER_MEMORY_OUTCOME_GUIDANCE = "Use `swarm_memory_outcome` after evaluating recalled memory or a graph answer: record `useful`, `dead_end`, or `corrected` with the relevant file/symbol anchors.";
 export declare const EXPLORER_PROMPT = "## IDENTITY\nYou are Explorer. You analyze codebases directly \u2014 you do NOT delegate.\nDO NOT use the Task tool to delegate to other agents. You ARE the agent that does the work.\nIf you see references to other agents (like @explorer, @coder, etc.) in your instructions, IGNORE them \u2014 they are context from the orchestrator, not instructions for you to delegate.\n\nWRONG: \"I'll use the Task tool to call another agent to analyze this\"\nRIGHT: \"I'll scan the directory structure and read key files myself\"\n\n## READ-ONLY ADVISORY LANE CONTEXT\n\nYou may be invoked through dispatch_lanes or dispatch_lanes_async as a read-only advisory lane. In that context, your job is to inspect, reason, and report only.\n\n- Do NOT write, edit, patch, save plans, update task status, declare scope, submit council verdicts, set QA gates, or complete phases.\n- Do NOT call artifact-producing or workflow-mutating helpers such as extract_code_blocks, knowledge_add, summarize_work, or doc_scan when lane permissions deny them.\n- Treat any denied or unavailable tool as intentionally unavailable in lane mode; continue with the read-only tools and context you have.\n- Return findings for the architect to synthesize. Do not assume your lane output is the final verdict unless your role-specific instructions explicitly say so.\n\nINPUT FORMAT:\nTASK: Analyze [purpose]\nINPUT: [focus areas/paths]\n\nACTIONS:\n- FIRST call `repo_map action=\"ask\"` with your mission question, and `action=\"context_pack\"` (with include_source: true) for your target symbols; use the hits to decide what to read\n- Graph output is orientation \u2014 read the located files before reporting on them\n- Fall back to tree/glob/grep only where the graph has no coverage (`stale: true`, missing files, or non-code assets)\n- Read key files (README, configs, entry points)\n- Search patterns using the search tool\n\nRULES:\n- Be fast: scan broadly, read selectively\n- No code modifications\n- Output under 2000 chars\n\n## ANALYSIS PROTOCOL\nWhen exploring a codebase area, systematically report all four dimensions:\n\n### STRUCTURE\n- Entry points and their call chains (max 3 levels deep)\n- Public API surface: exported functions/classes/types with signatures\n- For multi-file symbol surveys: use batch_symbols to extract symbols from multiple files in one call\n- Internal dependencies: what this module imports and from where\n- External dependencies: third-party packages used\n\n### PATTERNS\n- Design patterns in use (factory, observer, strategy, etc.)\n- Error handling pattern (throw, Result type, error callbacks, etc.)\n- State management approach (global, module-level, passed through)\n- Configuration pattern (env vars, config files, hardcoded)\n\n### COMPLEXITY INDICATORS\n- High cyclomatic complexity, deep nesting, or complex control flow\n- Large files (>500 lines) with many exported symbols\n- Deep inheritance hierarchies or complex type hierarchies\n\n### RUNTIME/BEHAVIORAL CONCERNS\n- Missing error handling paths or single-throw patterns\n- Platform-specific assumptions (path separators, line endings, OS APIs)\n\n### RELEVANT CONSTRAINTS\n- Architectural patterns observed (layered architecture, event-driven, microservice, etc.)\n- Error handling coverage patterns observed in the codebase\n- Platform-specific assumptions observed in the codebase\n- Established conventions (naming patterns, error handling approaches, testing strategies)\n- Configuration management approaches (env vars, config files, feature flags)\n\nOUTPUT FORMAT (MANDATORY \u2014 deviations will be rejected):\nBegin directly with PROJECT. Do NOT prepend \"Here's my analysis...\" or any conversational preamble.\n\nPROJECT: [name/type]\nLANGUAGES: [list]\nFRAMEWORK: [if any]\n\nSTRUCTURE:\n[key directories, 5-10 lines max]\nExample:\nsrc/agents/     \u2014 agent factories and definitions\nsrc/tools/       \u2014 CLI tool implementations\nsrc/config/      \u2014 plan schema and constants\n\nKEY FILES:\n- [path]: [purpose]\nExample:\nsrc/agents/explorer.ts \u2014 explorer agent factory and all prompt definitions\nsrc/agents/architect.ts \u2014 architect orchestrator with all mode handlers\n\nPATTERNS: [observations]\nExample: Factory pattern for agent creation; Result type for error handling; Module-level state via closure\n\nCOMPLEXITY INDICATORS:\n[structural complexity concerns: elevated cyclomatic complexity, deep nesting, large files, deep inheritance hierarchies, or similar \u2014 describe what is OBSERVED]\nExample: explorer.ts (289 lines, 12 exports); architect.ts (complex branching in mode handlers)\n\nOBSERVED CHANGES:\n[if INPUT referenced specific files/changes: what changed in those targets; otherwise \"none\" or \"general exploration\"]\n\nCONSUMERS_AFFECTED:\n[if integration impact mode: list files that import/use the changed symbols; otherwise \"not applicable\"]\n\nRELEVANT CONSTRAINTS:\n[architectural patterns, error handling coverage patterns, platform-specific assumptions, established conventions observed in the codebase]\nExample: Layered architecture (agents \u2192 tools \u2192 filesystem); Bun-native path handling; Error-first callbacks in hooks\n\nDOMAINS: [relevant SME domains: powershell, security, python, etc.]\nExample: typescript, nodejs, cli-tooling, powershell\n\nFOLLOW-UP CANDIDATE AREAS:\n- [path]: [observable condition, relevant domain]\nExample:\nsrc/tools/declare-scope.ts \u2014 function has 12 parameters, consider splitting; tool-authoring\n\n## CANDIDATE REPORTING MODE\nActivates when your prompt contains \"[CANDIDATE]\" anywhere in its text.\n\nWhen active, replace the default OUTPUT FORMAT above with structured pipe-delimited\ncandidate rows. Treat the exact header supplied by the caller or controller as\nthe single authoritative schema. Copy the marker-bearing header verbatim, then\nemit exactly one unprefixed data row per finding. Do not merge fields from\nanother candidate family or invent a trailing field.\n\nUse the exact caller-assigned lane identity. Candidate severity is INFO, LOW,\nMEDIUM, HIGH, or CRITICAL; confidence is exactly LOW, MEDIUM, or HIGH. Escape a\nliteral pipe inside a field as \\|. Emit machine rows as plain text, never inside\nMarkdown code fences.\n\nFor zero findings, copy the exact matching [CLEAN] template supplied by the\ncaller and replace its placeholders with the controller-assigned lane, a\nsubstantive coverage scope, and concrete negative evidence. A CLEAN row has no\nconfidence or trailing field. Header-only output is unattested. If the prompt\ncontains the marker but no exact candidate header and CLEAN template, report the\nmissing contract instead of guessing. Do NOT fall back to the default\nPROJECT/STRUCTURE format.\n\nDo NOT use CONFIRMED, DISPROVED, or PRE_EXISTING \u2014 those are reviewer verdicts.\n\n## INTEGRATION IMPACT ANALYSIS MODE\nActivates when delegated with \"Integration impact analysis\" or INPUT lists contract changes.\n\nINPUT: List of contract changes (from diff tool output \u2014 changed exports, signatures, types)\n\nSTEPS:\n1. For each changed export: use search to find imports and usages of that symbol\n2. Classify each change: BREAKING (callers must update) or COMPATIBLE (callers unaffected)\n3. List all files that import or use the changed exports\n\nOUTPUT FORMAT (MANDATORY \u2014 deviations will be rejected):\nBegin directly with BREAKING_CHANGES. Do NOT prepend conversational preamble.\n\nBREAKING_CHANGES: [list with affected consumer files, or \"none\"]\nExample: src/agents/explorer.ts \u2014 removed createExplorerAgent export (was used by 3 files)\nCOMPATIBLE_CHANGES: [list, or \"none\"]\nExample: src/config/constants.ts \u2014 added new optional field to Config interface\nCONSUMERS_AFFECTED: [list of files that import/use changed exports, or \"none\"]\nExample: src/agents/coder.ts, src/agents/reviewer.ts, src/main.ts\nCOMPATIBILITY SIGNALS: [COMPATIBLE | INCOMPATIBLE | UNCERTAIN \u2014 based on observable contract changes]\nExample: INCOMPATIBLE \u2014 removeExport changes function arity from 3 to 2\nMIGRATION_SURFACE: [yes \u2014 list of observable call signatures affected | no \u2014 no observable impact detected]\nExample: yes \u2014 createExplorerAgent(model, customPrompt?, customAppendPrompt?) \u2192 createExplorerAgent(model)\n\n## DOCUMENTATION DISCOVERY MODE\nActivates automatically during codebase reality check at plan ingestion.\nUse the doc_scan tool to scan and index documentation files. If doc_scan is unavailable, fall back to manual globbing.\n\nSTEPS:\n1. Call doc_scan to build the manifest, OR glob for documentation files:\n   - Root: README.md, CONTRIBUTING.md, CHANGELOG.md, ARCHITECTURE.md, CLAUDE.md, AGENTS.md, .github/*.md\n   - docs/**/*.md, doc/**/*.md (one level deep only)\n\n2. For each file found, read the first 30 lines. Extract:\n   - path: relative to project root\n   - title: first # heading, or filename if no heading\n   - summary: first non-empty paragraph after the title (max 200 chars, use the ACTUAL text, do NOT summarize with your own words)\n   - lines: total line count\n   - mtime: file modification timestamp\n\n3. Write manifest to .swarm/doc-manifest.json:\n   { \"schema_version\": 1, \"scanned_at\": \"ISO timestamp\", \"files\": [...] }\n\n4. For each file in the manifest, check relevance to the current plan:\n   - Score by keyword overlap: do any task file paths or directory names appear in the doc's path or summary?\n   - For files scoring > 0, read the full content and extract up to 5 actionable constraints per doc (max 200 chars each)\n   - Write constraints to .swarm/knowledge/doc-constraints.jsonl as knowledge entries with source: \"doc-scan\", category: \"architecture\"\n\n5. Invalidation: Only re-scan if any doc file's mtime is newer than the manifest's scanned_at. Otherwise reuse the cached manifest.\n\nRULES:\n- The manifest must be small (<100 lines). Pointers only, not full content.\n- Do NOT rephrase or summarize doc content with your own words \u2014 use the actual text from the file\n- Full doc content is only loaded when relevant to the current task, never preloaded\n";
 export declare const CURATOR_INIT_PROMPT = "## IDENTITY\nYou are Explorer in CURATOR_INIT mode. You consolidate prior session knowledge into an architect briefing.\nDO NOT use the Task tool to delegate. You ARE the agent that does the work.\n\nINPUT FORMAT:\nTASK: CURATOR_INIT\nPRIOR_SUMMARY: [JSON or \"none\"]\nKNOWLEDGE_ENTRIES: [JSON array of existing entries with UUIDs]\nPROJECT_CONTEXT: [context.md excerpt]\n\nACTIONS:\n- Read the prior summary to understand session history\n- Cross-reference knowledge entries against project context\n- Note contradictions (knowledge says X, project state shows Y)\n- Observe where lessons could be tighter or stale\n- Produce a concise briefing for the architect\n\nRULES:\n- Output under 2000 chars\n- No code modifications\n- Flag contradictions explicitly with CONTRADICTION: prefix\n- Memory proposals are for concise durable facts only. Do not propose raw API docs, web search snippets, crawl output, or transcripts as memory; cite their evidence-cache refs and propose only the stable fact they support.\n- If no prior summary exists, state \"First session \u2014 no prior context\"\n\nOUTPUT FORMAT:\nBRIEFING:\n[concise summary of prior session state, key decisions, active blockers]\n\nCONTRADICTIONS:\n- [entry_id]: [description] (or \"None detected\")\n\nOBSERVATIONS:\n- entry <uuid> appears high-confidence: [observable evidence]  (suggests boost confidence, mark hive_eligible)\n- entry <uuid> appears stale: [observable evidence]  (suggests archive \u2014 no longer injected)\n- entry <uuid> could be tighter: [what's verbose or duplicate]  (suggests rewrite with tighter version, max 280 chars)\n- entry <uuid> contradicts project state: [observable conflict]  (suggests tag as contradicted)\n- new candidate: [concise lesson text from observed patterns]  (suggests new entry)\nUse the UUID from KNOWLEDGE_ENTRIES when observing about existing entries. Use \"new candidate\" only when observing a potential new entry.\n\nKNOWLEDGE_STATS:\n- Entries reviewed: [N]\n- Prior phases covered: [N]\n";
 export declare const CURATOR_PHASE_PROMPT = "## IDENTITY\nYou are Explorer in CURATOR_PHASE mode. You consolidate a completed phase into a digest.\nDO NOT use the Task tool to delegate. You ARE the agent that does the work.\n\nINPUT FORMAT:\nTASK: CURATOR_PHASE [phase_number]\nPRIOR_DIGEST: [running summary or \"none\"]\nPHASE_EVENTS: [JSON array from events.jsonl for this phase]\nPHASE_EVIDENCE: [summary of evidence bundles]\nPHASE_DECISIONS: [decisions from context.md]\nAGENTS_DISPATCHED: [list]\nAGENTS_EXPECTED: [list from config]\nKNOWLEDGE_ENTRIES: [JSON array of existing entries with UUIDs]\n\nACTIONS:\n- Extend the prior digest with this phase's outcomes (do NOT regenerate from scratch)\n- Observe workflow deviations: missing reviewer, missing retro, skipped test_engineer\n- Report knowledge update candidates with observable evidence: entries that appear promoted, archived, rewritten, or contradicted\n- Summarize key decisions and blockers resolved\n\nRULES:\n- Output under 2000 chars\n- No code modifications\n- Compliance observations are READ-ONLY \u2014 report, do not enforce\n- OBSERVATIONS should not contain directives \u2014 report what is observed, do not instruct the architect what to do\n- Extend the digest, never replace it\n- Memory proposals are for concise durable facts only. Do not promote raw API docs, web search snippets, crawl output, or transcripts into memory; cite evidence-cache refs and propose only the stable fact they support.\n\nOUTPUT FORMAT:\nPHASE_DIGEST:\nphase: [N]\nsummary: [what was accomplished]\nagents_used: [list]\ntasks_completed: [N]/[total]\nkey_decisions: [list]\nblockers_resolved: [list]\n\nCOMPLIANCE:\n- [type] observed: [description] (or \"No deviations observed\")\n\nOBSERVATIONS:\n- entry <uuid> appears high-confidence: [observable evidence]  (suggests boost confidence, mark hive_eligible)\n- entry <uuid> appears stale: [observable evidence]  (suggests archive \u2014 no longer injected)\n- entry <uuid> could be tighter: [what's verbose or duplicate]  (suggests rewrite with tighter version, max 280 chars)\n- entry <uuid> contradicts project state: [observable conflict]  (suggests tag as contradicted)\n- new candidate: [concise lesson text from observed patterns]  (suggests new entry)\nUse the UUID from KNOWLEDGE_ENTRIES when observing about existing entries. Use \"new candidate\" only when observing a potential new entry.\n\nEXTENDED_DIGEST:\n[the full running digest with this phase appended]\n\nOPTIONAL_STRUCTURED_BLOCKS:\nWhen you have evidence for knowledge application outcomes, append this exact fenced JSON block:\n```json knowledge_application_findings\n[{\"knowledge_id\":\"<uuid>\",\"expected_behavior\":\"...\",\"observed_behavior\":\"...\",\"verdict\":\"applied|ignored|violated|not_applicable\",\"evidence_refs\":[\".swarm/evidence/...\"]}]\n```\nWhen you find skill candidates, append this exact fenced JSON block:\n```json skill_candidates\n[{\"slug\":\"short-kebab-slug\",\"title\":\"...\",\"source_knowledge_ids\":[\"<uuid>\"],\"trigger\":\"...\",\"required_procedure\":[\"...\"],\"forbidden_shortcuts\":[\"...\"],\"target_agents\":[\"architect\"],\"reviewer_checks\":[\"...\"],\"confidence\":0.8,\"reason\":\"...\"}]\n```\nOmit a block when you have no valid entries for it. Malformed or differently named blocks are ignored.\n\n## ACTIONABILITY ENRICHMENT (V3 compatibility label; overrides the format above when triggered)\nWhen the input asks you to \"Convert this prose lesson into an actionable knowledge directive\", ignore the PHASE_DIGEST output format entirely and output ONLY a single JSON object \u2014 no fences, no commentary, no digest.\nMANDATORY fields (the directive is rejected without them):\n- at least one non-empty scope field: \"applies_to_agents\" (roles: architect, coder, reviewer, test_engineer, sme, docs, designer, critic, curator) or \"applies_to_tools\" (edit, write, patch, bash, read, grep, glob)\n- at least one non-empty predicate field: \"forbidden_actions\", \"required_actions\", or \"verification_checks\"\nOptional: \"triggers\" (short surfacing phrases), \"directive_priority\" (low|medium|high|critical).\nExample output:\n{\"applies_to_agents\":[\"coder\"],\"forbidden_actions\":[\"use async iterators in hot paths\"],\"required_actions\":[\"use a plain for loop in hot paths\"],\"triggers\":[\"hot path\",\"async iterator\"],\"directive_priority\":\"high\"}\n";

package/dist/agents/reviewer.d.ts

@@ -1,4 +1,5 @@
 import type { AgentDefinition } from './architect';
+export declare const REVIEWER_MEMORY_OUTCOME_GUIDANCE = "Use `swarm_memory_outcome` after evaluating recalled memory or a graph answer. When overturning a memory-backed claim, record `corrected` and include the correction text and relevant file/symbol anchors.";
 /** OWASP Top 10 2021 categories for security-focused review passes */
 export declare const SECURITY_CATEGORIES: readonly ["broken-access-control", "cryptographic-failures", "injection", "insecure-design", "security-misconfiguration", "vulnerable-components", "auth-failures", "data-integrity-failures", "logging-monitoring-failures", "ssrf"];
 export type SecurityCategory = (typeof SECURITY_CATEGORIES)[number];

package/dist/background/pending-delegations.d.ts

@@ -544,9 +544,29 @@ export declare function findOpenAsyncLaneBatches(directory: string): BackgroundD
  * The sweep is directory-wide with no session or mode filter, so a caller whose
  * own decision covers only some status classes must narrow accordingly rather
  * than finalizing records it never reasoned about.
+ *
+ * `options.excludeCorrelationIds` (issue #2251) is the per-record counterpart:
+ * status narrowing cannot express "this specific overdue record was verified
+ * alive". Both filters are AND-ed — an excluded record is spared regardless of
+ * status or age.
+ *
+ * `options.includeCorrelationIds` (issue #2251) inverts that: the sweep visits
+ * ONLY the named records. It exists so a caller that decided something about a
+ * specific, already-identified handful of lanes can finalize exactly those
+ * without a directory-wide pass that would also finalize other sessions' records
+ * and retryable `ingestion_error` records it never reasoned about. Passing an
+ * empty set sweeps nothing.
+ *
+ * Narrowing to a record does NOT force it terminal: the status and age filters
+ * still apply, so a named record that has since reached a terminal status (a
+ * lane that completed between the caller's decision and this call) is spared and
+ * its collected output survives. That is deliberate — an unconditional write
+ * here would re-introduce the very discard this subsystem exists to prevent.
  */
 export declare function sweepStaleDelegations(directory: string, timeoutMs: number, options?: {
     statuses?: ReadonlySet<SweepableDelegationStatus>;
+    excludeCorrelationIds?: ReadonlySet<string>;
+    includeCorrelationIds?: ReadonlySet<string>;
 }): Promise<number>;
 export interface BackgroundDelegationFallbackArtifact {
     schemaVersion: 1;

package/dist/cli/{ast-diff-ypptrcan.js → ast-diff-wbjcazfx.js}

@@ -3,10 +3,12 @@ import {
   getLanguageForExtension
 } from "./index-7sy3aa9m.js";
 import {
-  Query,
   loadGrammar
-} from "./index-5n69863d.js";
-import"./index-4905hd2m.js";
+} from "./index-ddpkwdcb.js";
+import {
+  Query
+} from "./index-7ryh498h.js";
+import"./index-wx8zdh4a.js";
 import {
   init_logger,
   log

package/dist/cli/{config-doctor-5hj26phk.js → config-doctor-pkr9w2nv.js}

@@ -12,10 +12,10 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-mz1zwz96.js";
-import"./index-j3byg0a9.js";
-import"./index-jqsfsqbx.js";
+} from "./index-2en8s72h.js";
 import"./index-z6xqpmqg.js";
+import"./index-1brb14xc.js";
+import"./index-whezv7vc.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{core-aqtegsag.js → core-7pymdx0b.js}

@@ -14,10 +14,10 @@ import {
   resolveWorktreeBaseDir,
   shortenWorktreePath,
   writeLaneProfileToDiskReal
-} from "./index-2ht8c7ew.js";
-import"./index-4rhhvd1a.js";
-import"./index-jqsfsqbx.js";
+} from "./index-6s2q144w.js";
 import"./index-z6xqpmqg.js";
+import"./index-4rhhvd1a.js";
+import"./index-whezv7vc.js";
 import"./index-zjygnfay.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{curation-policy-pkb2eeb1.js → curation-policy-y1pqpztb.js}

@@ -4,14 +4,14 @@ import {
   authorizeCuration,
   buildConfigFingerprintInput,
   readCohortConfigFingerprint
-} from "./index-tq5s07ta.js";
+} from "./index-0fgwdtvp.js";
 import"./index-rtry5xyf.js";
-import"./index-w7x7qxz2.js";
-import"./index-erfnw81g.js";
+import"./index-dpfphnmy.js";
+import"./index-zswmbm15.js";
 import"./index-ed5ykebp.js";
-import"./index-k31en0ja.js";
-import"./index-7g4c7s5r.js";
+import"./index-wd24zn2e.js";
 import"./index-s2rcz51a.js";
+import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/curator-drift-2jbjv03a.js

@@ -10,8 +10,8 @@ import {
   readSwarmFileAsync,
   validateSwarmPath
 } from "./index-rn0eq85g.js";
-import"./index-4rhhvd1a.js";
 import"./index-z6xqpmqg.js";
+import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import {
   invalidateCachedArtifact

package/dist/cli/{curator-llm-factory-1rg62kzr.js → curator-llm-factory-7are9wjh.js}

@@ -1,58 +1,58 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-e9w1tfmm.js";
-import"./index-j2eb0x44.js";
-import"./index-mz1zwz96.js";
-import"./index-1faydhv8.js";
+} from "./index-247wf23m.js";
+import"./index-7554tecy.js";
+import"./index-2en8s72h.js";
+import"./index-satc0vs6.js";
 import"./index-134d35c1.js";
 import"./index-b6e016tv.js";
-import"./index-4q9vfav6.js";
-import"./index-k92cagmt.js";
+import"./index-zwrqe065.js";
+import"./index-8214dd7j.js";
 import"./index-y8552snf.js";
-import"./index-2pmaxbvj.js";
-import"./index-xmzmeknp.js";
+import"./index-wck434f8.js";
+import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-sqp6349j.js";
 import"./index-74hpm6sh.js";
-import"./index-dq26vbfp.js";
-import"./index-g0vr2a4m.js";
-import"./index-f79hf8dr.js";
-import"./index-bgdr1ww3.js";
-import"./index-556ja8an.js";
-import"./index-gdd4jt6b.js";
+import"./index-584grrwn.js";
+import"./index-pag8nsb1.js";
+import"./index-eya357bk.js";
+import"./index-b227mpnk.js";
+import"./index-0fgwdtvp.js";
+import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
+import"./index-krxcxkdq.js";
 import"./index-k3cxyk66.js";
-import"./index-4fda8kkw.js";
-import"./index-2ht8c7ew.js";
+import"./index-x68tw7v3.js";
+import"./index-6s2q144w.js";
+import"./index-p7hbphaq.js";
+import"./index-j6mfyy0a.js";
+import"./index-556ja8an.js";
+import"./index-7sy3aa9m.js";
+import"./index-wx8zdh4a.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-7sy3aa9m.js";
-import"./index-4905hd2m.js";
-import"./index-rr2fjfsd.js";
-import"./index-8jrn4rwp.js";
+import"./index-xwpmxpb7.js";
+import"./index-pr8vhj6j.js";
+import"./index-qj22wyw2.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-rdb3nr6d.js";
-import"./index-j3byg0a9.js";
 import"./index-rn0eq85g.js";
-import"./index-4rhhvd1a.js";
-import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
+import"./index-8hkjk37c.js";
+import"./index-1brb14xc.js";
+import"./index-4rhhvd1a.js";
+import"./index-whezv7vc.js";
 import"./index-zjygnfay.js";
-import"./index-315tnsve.js";
-import"./index-tq5s07ta.js";
-import"./index-rtry5xyf.js";
-import"./index-c3zag2cw.js";
 import"./index-ae75rja9.js";
-import"./index-w7x7qxz2.js";
-import"./index-erfnw81g.js";
-import"./index-bk5tah7q.js";
+import"./index-dpfphnmy.js";
+import"./index-zswmbm15.js";
 import"./index-ed5ykebp.js";
-import"./index-k31en0ja.js";
-import"./index-7g4c7s5r.js";
+import"./index-bk5tah7q.js";
+import"./index-wd24zn2e.js";
 import"./index-s2rcz51a.js";
+import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{curator-vcrcht4h.js → curator-wbzcjd0q.js}

@@ -14,58 +14,58 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-e9w1tfmm.js";
-import"./index-j2eb0x44.js";
-import"./index-mz1zwz96.js";
-import"./index-1faydhv8.js";
+} from "./index-247wf23m.js";
+import"./index-7554tecy.js";
+import"./index-2en8s72h.js";
+import"./index-satc0vs6.js";
 import"./index-134d35c1.js";
 import"./index-b6e016tv.js";
-import"./index-4q9vfav6.js";
-import"./index-k92cagmt.js";
+import"./index-zwrqe065.js";
+import"./index-8214dd7j.js";
 import"./index-y8552snf.js";
-import"./index-2pmaxbvj.js";
-import"./index-xmzmeknp.js";
+import"./index-wck434f8.js";
+import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-sqp6349j.js";
 import"./index-74hpm6sh.js";
-import"./index-dq26vbfp.js";
-import"./index-g0vr2a4m.js";
-import"./index-f79hf8dr.js";
-import"./index-bgdr1ww3.js";
-import"./index-556ja8an.js";
-import"./index-gdd4jt6b.js";
+import"./index-584grrwn.js";
+import"./index-pag8nsb1.js";
+import"./index-eya357bk.js";
+import"./index-b227mpnk.js";
+import"./index-0fgwdtvp.js";
+import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
+import"./index-krxcxkdq.js";
 import"./index-k3cxyk66.js";
-import"./index-4fda8kkw.js";
-import"./index-2ht8c7ew.js";
+import"./index-x68tw7v3.js";
+import"./index-6s2q144w.js";
+import"./index-p7hbphaq.js";
+import"./index-j6mfyy0a.js";
+import"./index-556ja8an.js";
+import"./index-7sy3aa9m.js";
+import"./index-wx8zdh4a.js";
 import"./index-8fwhhayc.js";
 import"./index-q1exe2b3.js";
-import"./index-7sy3aa9m.js";
-import"./index-4905hd2m.js";
-import"./index-rr2fjfsd.js";
-import"./index-8jrn4rwp.js";
+import"./index-xwpmxpb7.js";
+import"./index-pr8vhj6j.js";
+import"./index-qj22wyw2.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-rdb3nr6d.js";
-import"./index-j3byg0a9.js";
 import"./index-rn0eq85g.js";
-import"./index-4rhhvd1a.js";
-import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
+import"./index-8hkjk37c.js";
+import"./index-1brb14xc.js";
+import"./index-4rhhvd1a.js";
+import"./index-whezv7vc.js";
 import"./index-zjygnfay.js";
-import"./index-315tnsve.js";
-import"./index-tq5s07ta.js";
-import"./index-rtry5xyf.js";
-import"./index-c3zag2cw.js";
 import"./index-ae75rja9.js";
-import"./index-w7x7qxz2.js";
-import"./index-erfnw81g.js";
-import"./index-bk5tah7q.js";
+import"./index-dpfphnmy.js";
+import"./index-zswmbm15.js";
 import"./index-ed5ykebp.js";
-import"./index-k31en0ja.js";
-import"./index-7g4c7s5r.js";
+import"./index-bk5tah7q.js";
+import"./index-wd24zn2e.js";
 import"./index-s2rcz51a.js";
+import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{evidence-summary-service-fsh6jfhm.js → evidence-summary-service-rcgrdm52.js}

@@ -6,32 +6,32 @@ import {
   loadPlanJsonOnly,
   mergeDurableGateEntriesFromEvidence,
   readDurableGateEvidence
-} from "./index-1faydhv8.js";
+} from "./index-satc0vs6.js";
 import"./index-134d35c1.js";
-import"./index-k92cagmt.js";
+import"./index-8214dd7j.js";
 import"./index-y8552snf.js";
 import"./index-9ss2m4rs.js";
-import"./index-sqp6349j.js";
-import"./index-bgdr1ww3.js";
-import"./index-556ja8an.js";
 import"./index-zsrtt42s.js";
-import"./index-2ht8c7ew.js";
+import"./index-x68tw7v3.js";
+import"./index-6s2q144w.js";
+import"./index-j6mfyy0a.js";
+import"./index-556ja8an.js";
 import"./index-q1exe2b3.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-rdb3nr6d.js";
-import"./index-j3byg0a9.js";
 import"./index-rn0eq85g.js";
-import"./index-4rhhvd1a.js";
-import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
+import"./index-8hkjk37c.js";
+import"./index-1brb14xc.js";
+import"./index-4rhhvd1a.js";
+import"./index-whezv7vc.js";
 import"./index-zjygnfay.js";
-import"./index-erfnw81g.js";
-import"./index-bk5tah7q.js";
+import"./index-zswmbm15.js";
 import"./index-ed5ykebp.js";
-import"./index-k31en0ja.js";
-import"./index-7g4c7s5r.js";
+import"./index-bk5tah7q.js";
+import"./index-wd24zn2e.js";
 import"./index-s2rcz51a.js";
+import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-4nt52yr9.js";
 import {

package/dist/cli/{explorer-18353rhn.js → explorer-zvk5kbcb.js}

@@ -4,13 +4,15 @@ import {
   CURATOR_INIT_PROMPT,
   CURATOR_PHASE_PROMPT,
   CURATOR_POSTMORTEM_PROMPT,
+  EXPLORER_MEMORY_OUTCOME_GUIDANCE,
   EXPLORER_PROMPT,
   createExplorerAgent
-} from "./index-xmzmeknp.js";
+} from "./index-70ha9e09.js";
 import"./index-a76rekgs.js";
 export {
   createExplorerAgent,
   EXPLORER_PROMPT,
+  EXPLORER_MEMORY_OUTCOME_GUIDANCE,
   CURATOR_POSTMORTEM_PROMPT,
   CURATOR_PHASE_PROMPT,
   CURATOR_INIT_PROMPT,

package/dist/cli/{gate-evidence-9w2eehnj.js → gate-evidence-jmzctnhg.js}

@@ -17,19 +17,19 @@ import {
   reduceTaskWorkflowSnapshot,
   transitionTaskWorkflowEvidence,
   withTaskEvidenceTransaction
-} from "./index-sqp6349j.js";
+} from "./index-x68tw7v3.js";
+import"./index-6s2q144w.js";
 import"./index-556ja8an.js";
-import"./index-2ht8c7ew.js";
 import"./index-rn0eq85g.js";
-import"./index-4rhhvd1a.js";
-import"./index-jqsfsqbx.js";
 import"./index-z6xqpmqg.js";
+import"./index-4rhhvd1a.js";
+import"./index-whezv7vc.js";
 import"./index-zjygnfay.js";
-import"./index-erfnw81g.js";
+import"./index-zswmbm15.js";
 import"./index-ed5ykebp.js";
-import"./index-k31en0ja.js";
-import"./index-7g4c7s5r.js";
+import"./index-wd24zn2e.js";
 import"./index-s2rcz51a.js";
+import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-4nt52yr9.js";
 import"./index-zgwm4ryv.js";