opencode-swarm 7.144.2 → 7.144.4

package/dist/observability/catalog.d.ts

@@ -1,13 +1,15 @@
 /**
  * The event catalog (issue #2029).
  *
- * Exactly 42 entries, matching the `TelemetryEvent` union at
- * `src/telemetry.ts:15-91`. Thirty-eight predate the #2029 contract; the 39th is
+ * Exactly 43 entries, matching the `TelemetryEvent` union at
+ * `src/telemetry.ts:15-92`. Thirty-eight predate the #2029 contract; the 39th is
  * `agent_conflict_detected` (previously emitted through a force-cast past the
- * type system), and the 40th is `close_archive_result` (issue #2030 — the
- * structured close/archive result event). The 41st is the bounded diagnostic
+ * type system), the 40th is `close_archive_result` (issue #2030 — the
+ * structured close/archive result event), the 41st is the bounded diagnostic
  * projection of authoritative knowledge-receipt transitions (issue #2031).
- * These late additions are instances of
+ * The 42nd is the human-only `knowledge_maintenance` quarantine audit
+ * (issue #2033), and the 43rd is the aggregate `context_pruned` transcript
+ * mutation audit. These late additions are instances of
  * the defect class this contract exists to close: an event kind entering the
  * stream with no registration.
  *
@@ -62,7 +64,7 @@ export interface CatalogEntry {
     /**
      * Whether an event of this kind must carry `trace.parentSpanId`.
      *
-     * `false` for all 42 entries today, and that is a truthful statement about
+     * `false` for all 43 entries today, and that is a truthful statement about
      * the current system rather than a placeholder: no producer supplies a
      * parent span, so `createObservation` never sets one. Setting this to `true`
      * for a kind whose producer cannot supply a parent would make every

package/dist/sast/semgrep.d.ts

@@ -16,13 +16,12 @@ export interface SemgrepOptions {
     timeoutMs?: number;
     /** Working directory for Semgrep execution */
     cwd?: string;
-    /** Language identifier for --lang flag (used with useAutoConfig) */
-    lang?: string;
     /** When true, use --config auto instead of local rulesDir (for profile-driven languages) */
     useAutoConfig?: boolean;
     /** Host/tool cancellation propagated to the shared subprocess runner. */
     abortSignal?: AbortSignal;
 }
+export type SemgrepFailureKind = 'process_exit' | 'timeout' | 'cancelled' | 'output_limit' | 'spawn_error' | 'invalid_output' | 'scan_error' | 'unexpected';
 /**
  * Result from Semgrep execution
  */
@@ -33,6 +32,8 @@ export interface SemgrepResult {
     findings: SastFinding[];
     /** Error message if Semgrep failed */
     error?: string;
+    /** Machine-readable category for an available scanner failure. */
+    failure_kind?: SemgrepFailureKind;
     /** Engine label for the findings */
     engine: 'tier_a' | 'tier_a+tier_b';
 }

package/dist/telemetry.d.ts

@@ -1,6 +1,6 @@
 import { createObservation, toLegacyTelemetryLine } from './observability/index.js';
 import type { DelegationCostFields } from './services/cost-accounting.js';
-export type TelemetryEvent = 'session_started' | 'session_ended' | 'agent_activated' | 'delegation_begin' | 'delegation_end' | 'task_state_changed' | 'gate_passed' | 'gate_failed' | 'gate_parse_error' | 'reviewer_gate_decision' | 'phase_changed' | 'budget_updated' | 'model_fallback' | 'hard_limit_hit' | 'revision_limit_hit' | 'loop_detected' | 'no_op_strong_warning' | 'scope_violation' | 'qa_skip_violation' | 'heartbeat' | 'turbo_mode_changed' | 'auto_oversight_escalation' | 'environment_detected' | 'evidence_lock_acquired' | 'evidence_lock_contended' | 'evidence_lock_stale_recovered' | 'plan_ledger_cas_retry' | 'plan_md_write_failed' | 'snapshot_failed' | 'gate_denial_loop'
+export type TelemetryEvent = 'session_started' | 'session_ended' | 'agent_activated' | 'delegation_begin' | 'delegation_end' | 'task_state_changed' | 'gate_passed' | 'gate_failed' | 'gate_parse_error' | 'reviewer_gate_decision' | 'phase_changed' | 'budget_updated' | 'context_pruned' | 'model_fallback' | 'hard_limit_hit' | 'revision_limit_hit' | 'loop_detected' | 'no_op_strong_warning' | 'scope_violation' | 'qa_skip_violation' | 'heartbeat' | 'turbo_mode_changed' | 'auto_oversight_escalation' | 'environment_detected' | 'evidence_lock_acquired' | 'evidence_lock_contended' | 'evidence_lock_stale_recovered' | 'plan_ledger_cas_retry' | 'plan_md_write_failed' | 'snapshot_failed' | 'gate_denial_loop'
 /**
  * Issue #2063 B5 — an ARMED execution episode reached the advisory rung:
  * `execution_stall_warn_calls` tool calls with no delegation completion, no
@@ -116,6 +116,22 @@ export declare const telemetry: {
     reviewerGateDecision(sessionId: string, taskId: string, blocked: boolean, reasonCode: ReviewerGateReasonCode, evidenceKind: ReviewerGateEvidenceKind): void;
     phaseChanged(sessionId: string, oldPhase: number, newPhase: number): void;
     budgetUpdated(sessionId: string, budgetPct: number, agentName: string): void;
+    contextPruned(data: {
+        sessionId: string;
+        agentName: string;
+        trigger: "agent_switch" | "critical_threshold";
+        usageSource: "provider" | "estimated";
+        beforeTokens: number;
+        afterTokens: number;
+        modelLimit: number;
+        maskedMessages: number;
+        maskedToolParts: number;
+        maskedTokensFreed: number;
+        prunedMessages: number;
+        prunedTextParts: number;
+        prunedToolParts: number;
+        prunedTokensFreed: number;
+    }): void;
     modelFallback(sessionId: string, agentName: string, fromModel: string, toModel: string, reason: string): void;
     hardLimitHit(sessionId: string, agentName: string, limitType: string, value: number): void;
     revisionLimitHit(sessionId: string, agentName: string): void;

package/dist/tools/context-status.d.ts

@@ -2,7 +2,9 @@
  * Context Status Tool
  *
  * Read-only tool that reports current context-window headroom for the active
- * session. Derives messages from the runtime session context (via
+ * session. Returns both the measured usage and the `usageSource`
+ * (`provider` prompt accounting when available, otherwise `estimated`).
+ * Derives messages from the runtime session context (via
  * `swarmState.opencodeClient.session.messages`) and resolves thresholds from
  * the plugin config, mirroring the active `createContextBudgetHandler` hook's
  * behavior exactly — including strict `>` boundary semantics (exact threshold
@@ -12,6 +14,7 @@
  * Works whether `context_budget.enabled` is true or false.
  */
 import { loadPluginConfig } from '../config';
+import { type ContextUsageSource } from '../hooks/context-usage';
 import { createSwarmTool } from './create-tool';
 /**
  * Shape of a message's info block.
@@ -47,8 +50,10 @@ export interface ContextMessage {
  * Result returned by the context_status tool.
  */
 export interface ContextStatusResult {
-    /** Estimated tokens used across all text parts in the session */
+    /** Provider-accounted or estimated tokens used across the session */
     tokensUsed: number;
+    /** Whether usage came from provider prompt accounting or a bounded estimate */
+    usageSource: ContextUsageSource;
     /** Resolved model context limit in tokens */
     modelLimit: number;
     /** Ratio of tokens-used to model-limit (0.0 – 1.0+) */
@@ -101,7 +106,8 @@ declare function computeContextHeadroom(messages: ContextMessage[], warnThreshol
  *
  * No arguments required — the tool queries current state automatically.
  *
- * Returns JSON string with tokensUsed, modelLimit, usagePercent, thresholdCrossed, modelId, provider.
+ * Returns JSON with tokensUsed, usageSource, modelLimit, usagePercent,
+ * thresholdCrossed, modelId, and provider.
  */
 export { computeContextHeadroom };
 export declare const context_status: ReturnType<typeof createSwarmTool>;

package/dist/tools/dispatch-lanes.d.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
-import { type BackgroundDelegationRecord } from '../background/pending-delegations.js';
+import { type BackgroundDelegationRecord, type BackgroundDelegationWorkflowLaneRecovery } from '../background/pending-delegations.js';
 import { resolveExactMergeBaseAsync, resolvePrWorkflowRevisionDigestAsync } from '../background/workspace-snapshot.js';
-import { type PrReviewDepthTier } from '../hooks/pr-workflow-gate.js';
+import { type PrReviewDepthTier, validatePrWorkflowTransportRecovery } from '../hooks/pr-workflow-gate.js';
 import { buildLaneOrientationBlock } from '../hooks/repo-graph-injection.js';
 import { createParallelDispatcher } from '../parallel/dispatcher/parallel-dispatcher.js';
 import { createSwarmTool } from './create-tool.js';
@@ -126,6 +126,12 @@ export interface DispatchLaneResult {
     output_artifact_error?: string;
     transcript_incomplete?: boolean;
     message_count?: number;
+    salvaged_workflow_lanes?: string[];
+    salvaged_workflow_lane_recoveries?: Array<{
+        workflow_lane: string;
+        kind: BackgroundDelegationWorkflowLaneRecovery['kind'];
+        reason: string;
+    }>;
     /**
      * Set to true when this lane's `output` preview was withheld because an
      * identical preview (same batch, lane, and result digest) was already
@@ -251,6 +257,11 @@ export interface SessionOps {
         data?: Array<{
             info?: {
                 role?: string;
+                time?: {
+                    completed?: number;
+                };
+                finish?: string;
+                error?: unknown;
             };
             parts?: Array<{
                 type: string;
@@ -286,6 +297,7 @@ export declare const _internals: {
     createParallelDispatcher: typeof createParallelDispatcher;
     resolvePrWorkflowRevisionDigestAsync: typeof resolvePrWorkflowRevisionDigestAsync;
     resolveExactMergeBaseAsync: typeof resolveExactMergeBaseAsync;
+    validatePrWorkflowTransportRecovery: typeof validatePrWorkflowTransportRecovery;
     now: () => number;
     sleep: (ms: number) => Promise<void>;
 };
@@ -302,6 +314,7 @@ export declare const _test_exports: {
     formatError: typeof formatError;
     nextCollectPollInterval: typeof nextCollectPollInterval;
     promptHash: typeof promptHash;
+    reserveCollectionLaneCallBudgets: typeof reserveCollectionLaneCallBudgets;
     isRetryableSessionCreateFailure: typeof isRetryableSessionCreateFailure;
     DispatchLanesArgsSchema: z.ZodObject<{
         lanes: z.ZodArray<z.ZodObject<{
@@ -403,6 +416,11 @@ declare function isRetryableSessionCreateFailure(error: unknown): boolean;
 declare function extractAssistantTranscript(messages: Array<{
     info?: {
         role?: string;
+        time?: {
+            completed?: number;
+        };
+        finish?: string;
+        error?: unknown;
     };
     parts?: Array<{
         type: string;
@@ -412,6 +430,13 @@ declare function extractAssistantTranscript(messages: Array<{
     text: string;
     messageCount: number;
     transcriptIncomplete: boolean;
+    terminalAssistantProof: boolean;
+};
+declare function reserveCollectionLaneCallBudgets(deadline: number, remainingLaneCount: number, hasStatusCall: boolean, hasRevisionDigestCall?: boolean): {
+    laneBudgetMs: number;
+    statusBudgetMs: number;
+    messagesBudgetMs: number;
+    revisionDigestBudgetMs: number;
 };
 declare function nextCollectPollInterval(currentMs: number): number;
 declare function buildCollectResult(batchId: string, records: BackgroundDelegationRecord[], includePending: boolean, deliveryContext?: {

package/dist/tools/pre-check-batch.d.ts

@@ -9,6 +9,7 @@ import { saveEvidence } from '../evidence/manager.js';
 import { runExternalTool } from '../utils/external-tool-runner';
 import type { LintResult, ResolvedLinterCommand } from './lint';
 import { detectResolvedLinter } from './lint';
+import { resolveGatePreamble } from './phase-complete/gates/gate-helpers';
 import type { QualityBudgetResult } from './quality-budget';
 import { qualityBudget } from './quality-budget';
 import type { SastScanFinding, SastScanResult } from './sast-scan';
@@ -27,6 +28,8 @@ export declare const _internals: {
     runLintOnFiles: typeof runLintOnFiles;
     platform: () => NodeJS.Platform;
     serializePreCheckResult: typeof serializePreCheckResult;
+    resolveGatePreamble: typeof resolveGatePreamble;
+    runPreCheckBatch: typeof runPreCheckBatch;
     MAX_COMBINED_BYTES: number;
 };
 export interface PreCheckBatchInput {
@@ -46,6 +49,8 @@ export interface PreCheckBatchInput {
      * with capture_baseline:true.
      */
     phase?: number;
+    /** Effective QA-profile value derived internally by the public tool boundary. */
+    sast_enabled?: boolean;
 }
 export interface ToolResult<T> {
     /** Whether the tool was executed */
@@ -76,6 +81,10 @@ export interface PreCheckBatchResult {
     total_duration_ms: number;
     /** Pre-existing SAST findings on unchanged lines, requiring reviewer triage */
     sast_preexisting_findings?: SastScanFinding[];
+    /** Optional Semgrep exited nonzero with no findings; SAST coverage is incomplete. */
+    sast_degraded?: boolean;
+    /** SAST was intentionally disabled by the effective QA profile. */
+    sast_skipped?: boolean;
 }
 /**
  * Serialize the public result below the decoder's stricter byte ceiling. When

package/dist/tools/sast-scan.d.ts

@@ -40,6 +40,8 @@ export interface SastScanResult {
     verdict: EvidenceVerdict;
     /** Validation error when the requested scan cannot safely run */
     error?: string;
+    /** Machine-readable failure category for gate consumers. */
+    failure_kind?: SastFailureKind;
     /** Array of security findings */
     findings: SastScanFinding[];
     /** Summary information */
@@ -71,6 +73,7 @@ export interface SastScanResult {
     /** True when pre_existing_findings were truncated to fit result limits */
     truncated_pre_existing?: boolean;
 }
+export type SastFailureKind = 'semgrep_process_exit' | 'semgrep_timeout' | 'semgrep_cancelled' | 'semgrep_output_limit' | 'semgrep_spawn_error' | 'semgrep_invalid_output' | 'semgrep_scan_error' | 'semgrep_unexpected' | 'semgrep_unclassified' | 'coverage' | 'cancelled' | 'invalid_input';
 export interface SastScanFinding {
     rule_id: string;
     severity: 'critical' | 'high' | 'medium' | 'low';

package/dist/workflow/coder-settlement.d.ts

@@ -1,6 +1,7 @@
 import type { BackgroundTaskChangeContext, BackgroundWorktreeDescriptor } from '../background/pending-delegations.js';
 import { type TaskEvidence } from '../gate-evidence.js';
 import type { MergeOperationProvenance } from '../worktree/merge.js';
+import type { CoderSettlementWal } from './workflow-wal-schema.js';
 export interface CoderSettlementResult {
     evidence: TaskEvidence;
     accepted: boolean;
@@ -64,6 +65,79 @@ export declare function completeCoderSettlementCleanup(directory: string, taskId
 export declare function recoverCoderSettlement(directory: string, taskId: string): Promise<CoderSettlementResult | null>;
 export declare function releaseCoderDispatchOwnership(directory: string, taskId: string, transitionId: string): void;
 export declare function assertNoUnsettledCoderDispatch(directory: string, taskId: string): Promise<void>;
+export interface CoderSettlementWalState {
+    taskId: string;
+    state: CoderSettlementWal['state'] | 'unreadable';
+    transitionId?: string;
+    processId?: number;
+    recordedAt?: string;
+    /** The in-process ownership registry still holds this dispatch (toolAfter never drained it). */
+    ownedInProcess: boolean;
+    /** A different, still-alive host process owns the dispatch. Never force-releasable from here. */
+    ownedByLiveForeignPid: boolean;
+}
+/**
+ * Bounded inventory of durable coder-settlement WALs for diagnostics and
+ * recovery surfaces (/swarm diagnose, /swarm recover, /swarm reset-session).
+ * Ownership predicates mirror recoverCoderSettlement's refusal guard exactly:
+ * `ownedInProcess` means this process's liveDispatches registry holds the
+ * dispatch (its completion may still be pending or was lost); a foreign live
+ * pid can never be released from this process by construction.
+ *
+ * `truncated` is true when the directory held more matching files than
+ * MAX_SETTLEMENT_WAL_SCAN — consumers MUST surface that so a wedge sorted
+ * past the cap is not silently invisible (issue #2268 review, PRR-011).
+ */
+export declare function listCoderSettlementWalStates(directory: string): Promise<{
+    states: CoderSettlementWalState[];
+    truncated: boolean;
+}>;
+export type StaleSettlementRecoveryOutcome = {
+    taskId: string;
+    outcome: 'recovered';
+    accepted: boolean;
+    forced: boolean;
+} | {
+    taskId: string;
+    outcome: 'already_terminal';
+    state: 'ABORTED' | 'COMMITTED';
+} | {
+    taskId: string;
+    outcome: 'owned_in_process';
+    transitionId: string;
+} | {
+    taskId: string;
+    outcome: 'owned_by_live_foreign_pid';
+    processId: number;
+} | {
+    taskId: string;
+    outcome: 'unreadable_wal';
+} | {
+    taskId: string;
+    outcome: 'error';
+    message: string;
+};
+/**
+ * Issue #2268: the user-facing settlement recovery entry point. Settles every
+ * non-terminal coder-settlement WAL via the same recoverCoderSettlement
+ * transition the internal sinks (update_task_status, /swarm close preflight,
+ * Stage-B ingestion) already use — no new states, no schema change.
+ *
+ * `force` releases THIS process's ownership registry keys before recovery.
+ * That is safe only as an explicit operator assertion (human-only /swarm
+ * recover --force, /swarm reset-session): if the dispatch was genuinely still
+ * in flight, its late completion will fail settlement with
+ * CODER_SETTLEMENT_IDEMPOTENCY_CONFLICT against the already-recovered WAL.
+ * A foreign live pid is NEVER forced — its dispatch lives in another process.
+ */
+export declare function recoverStaleCoderSettlements(directory: string, options?: {
+    taskIds?: string[];
+    force?: boolean;
+}): Promise<{
+    results: StaleSettlementRecoveryOutcome[];
+    truncated: boolean;
+}>;
 export declare const _internals: {
     liveDispatches: Set<string>;
+    recoverCoderSettlement: typeof recoverCoderSettlement;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.144.2",
+	"version": "7.144.4",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",