opencode-swarm 7.145.1 → 7.146.0

package/dist/hooks/knowledge-receipt-ledger.d.ts

@@ -1,4 +1,4 @@
-import { atomicWriteFsynced, type ReceiptLedgerPaths, type ReceiptStoreErrorCode } from './knowledge-receipt-ledger-storage.js';
+import { appendFsynced, atomicWriteFsynced, type ReceiptLedgerPaths, type ReceiptStoreErrorCode } from './knowledge-receipt-ledger-storage.js';
 import { type KnowledgeReceiptTransitionObservation } from './knowledge-receipt-observability.js';
 /**
  * Canonical terminal-outcome vocabulary for the authoritative receipt ledger
@@ -27,7 +27,7 @@ export declare const RECEIPT_TERMINAL_OUTCOMES: ReadonlySet<ReceiptOutcome>;
  * preserved as `'unknown'` and is never coerced to delegate, ignored, or any
  * other class. New producers must stamp one of the closed values below.
  */
-export type ReceiptSourceCode = 'delegate' | 'reviewer' | 'architect' | 'architect_marker' | 'test_engineer' | 'phase_override' | 'application_gate_staleness_clear' | 'application_gate_denial_limit_clear' | 'manual' | 'migration' | 'unknown';
+export type ReceiptSourceCode = 'delegate' | 'reviewer' | 'architect' | 'architect_marker' | 'test_engineer' | 'phase_override' | 'application_gate_staleness_release' | 'application_gate_denial_limit_release' | 'manual' | 'migration' | 'unknown';
 /** Closed set form of {@link ReceiptSourceCode}. */
 export declare const CANONICAL_RECEIPT_SOURCES: ReadonlySet<string>;
 /**
@@ -65,6 +65,13 @@ export interface ReceiptApplicationMarker {
     event_id: string;
     committed_at: string;
 }
+export interface ReceiptGateRelease {
+    source: string;
+    reason?: string;
+    event_id: string;
+    committed_at: string;
+    membership_event_id: string;
+}
 export interface ReceiptMembership {
     trace_id: string;
     entry_id: string;
@@ -84,11 +91,24 @@ export interface ReceiptMembership {
     /** Append-only audited terminal transitions; `terminal` is the current gate state. */
     terminal_history?: ReceiptTerminal[];
     application_marker?: ReceiptApplicationMarker;
+    gate_release?: ReceiptGateRelease;
     cohort_id?: string;
     source_link_id?: string;
     exposure_kind: ReceiptExposureKind;
     origin: 'v2' | 'legacy';
 }
+export interface ReceiptRepairUncertainty {
+    phase: string;
+    session_id: string;
+    task_id?: string;
+    reason: string;
+    repair_id: string;
+    installed_at: string;
+    raw_journal_sha256: string;
+    raw_journal_bytes: number;
+    salvage_through_seq: number;
+    salvage_through_hash: string;
+}
 export type ReceiptExposureKind = 'architect_directive' | 'delegate_directive' | 'manual_recall' | 'legacy_unknown';
 interface EmptyTrace {
     trace_id: string;
@@ -122,7 +142,7 @@ interface ReceiptAuditSummary {
     entry_ids?: string[];
     reason_codes?: string[];
 }
-export type ReceiptTransitionKind = 'membership_committed' | 'empty_retrieval_committed' | 'terminal_committed' | 'terminal_attempt_rejected' | 'terminal_attempt_idempotent' | 'authorized_transition_committed' | 'application_marker_committed' | 'phase_close_intent' | 'phase_closed' | 'legacy_imported' | 'legacy_unverifiable' | 'cutover_completed' | 'checkpoint';
+export type ReceiptTransitionKind = 'membership_committed' | 'empty_retrieval_committed' | 'terminal_committed' | 'terminal_attempt_rejected' | 'terminal_attempt_idempotent' | 'authorized_transition_committed' | 'application_marker_committed' | 'gate_release_committed' | 'phase_close_intent' | 'phase_closed' | 'repair_uncertainty_installed' | 'repair_uncertainty_cleared' | 'legacy_imported' | 'legacy_unverifiable' | 'cutover_completed' | 'checkpoint';
 interface LedgerState {
     memberships: Map<string, ReceiptMembership>;
     traceIds: Set<string>;
@@ -132,6 +152,7 @@ interface LedgerState {
     legacyTraceRegistry: Set<string>;
     legacyUnverifiableTraceIds: Set<string>;
     phaseLifecycle: Map<string, PhaseLifecycle>;
+    repairUncertainties: Map<string, ReceiptRepairUncertainty>;
     auditTail: ReceiptAuditSummary[];
     lastSeq: number;
     lastHash: string;
@@ -149,6 +170,25 @@ export type ReceiptLedgerResult<T> = ({
     ok: true;
 } & T) | ReceiptUnavailable;
 declare function writeSnapshot(paths: ReceiptLedgerPaths, state: LedgerState): Promise<void>;
+export interface RepairKnowledgeReceiptLedgerInput {
+    phase: string;
+    session_id: string;
+    task_id?: string;
+    reason: string;
+    grace_days?: number;
+}
+export interface ReceiptRepairReevaluationProof {
+    repair_id: string;
+    /** Exact producer assertion that this retrieval covered the full repaired scope. */
+    scope_complete: boolean;
+}
+export declare function repairKnowledgeReceiptLedger(directory: string, input: RepairKnowledgeReceiptLedgerInput): Promise<ReceiptLedgerResult<{
+    status: 'validated_projection' | 'repaired_authority' | 'pending_re_evaluation';
+    pending_re_evaluation: boolean;
+    repair_id?: string;
+    salvage_through_seq: number;
+    salvage_through_hash: string;
+}>>;
 export interface CommitDisplayedMembershipInput {
     trace_id: string;
     session_id: string;
@@ -166,6 +206,8 @@ export interface CommitDisplayedMembershipInput {
     source_link_id?: string;
     /** Producer provenance used by application gates; omitted callers fail closed. */
     exposure_kind?: ReceiptExposureKind;
+    /** Explicit repair-bound proof; ordinary retrievals intentionally omit this. */
+    repair_re_evaluation?: ReceiptRepairReevaluationProof;
 }
 export declare function commitDisplayedMembership(directory: string, input: CommitDisplayedMembershipInput): Promise<ReceiptLedgerResult<{
     event_id: string;
@@ -261,6 +303,31 @@ declare function commitApplicationMarkerBatch(directory: string, input: Applicat
         reason: string;
     }>;
 }>>;
+export interface GateReleaseBatchInput {
+    trace_id: string;
+    session_id: string;
+    grace_days?: number;
+    items: Array<{
+        entry_id: string;
+        source?: string;
+        reason?: string;
+    }>;
+}
+export declare function commitGateReleaseBatch(directory: string, input: GateReleaseBatchInput): Promise<ReceiptLedgerResult<{
+    committed: Array<{
+        entry_id: string;
+        event_id: string;
+        membership_event_id: string;
+    }>;
+    idempotent: Array<{
+        entry_id: string;
+        event_id: string;
+    }>;
+    rejected: Array<{
+        entry_id: string;
+        reason: string;
+    }>;
+}>>;
 export interface ApplicationOutcomeBatchInput {
     trace_id: string;
     session_id: string;
@@ -334,10 +401,12 @@ export declare const _internals: {
     nowMs: () => number;
     writeSnapshot: typeof writeSnapshot;
     atomicWriteFsynced: typeof atomicWriteFsynced;
+    appendFsynced: typeof appendFsynced;
     /** Test-only migration fixture for pre-atomic marker-only state. */
     commitApplicationMarkerBatch: typeof commitApplicationMarkerBatch;
     maxJournalRecords: number;
     maxArchiveRecords: number;
     maxArchiveBytes: number;
+    maxRepairQuarantineRecords: number;
 };
 export {};

package/dist/hooks/knowledge-receipt-observability.d.ts

@@ -21,7 +21,7 @@ export declare const RECEIPT_SEMANTICS_VERSION = 2;
  * `no_relevant` tombstone that closes an empty retrieval (not a terminal).
  */
 export type ReceiptObservationOutcome = ReceiptOutcome | 'no_relevant';
-export type KnowledgeReceiptObservedTransition = 'membership_committed' | 'empty_retrieval_committed' | 'terminal_committed' | 'terminal_attempt_rejected' | 'terminal_attempt_idempotent' | 'authorized_transition_committed' | 'application_marker_committed' | 'phase_close_intent' | 'phase_closed' | 'legacy_imported' | 'legacy_unverifiable' | 'cutover_completed' | 'checkpoint';
+export type KnowledgeReceiptObservedTransition = 'membership_committed' | 'empty_retrieval_committed' | 'terminal_committed' | 'terminal_attempt_rejected' | 'terminal_attempt_idempotent' | 'authorized_transition_committed' | 'application_marker_committed' | 'gate_release_committed' | 'phase_close_intent' | 'phase_closed' | 'repair_uncertainty_installed' | 'repair_uncertainty_cleared' | 'legacy_imported' | 'legacy_unverifiable' | 'cutover_completed' | 'checkpoint';
 export type KnowledgeReceiptObservationReasonCode = 'committed' | 'idempotent' | 'trace_not_found' | 'id_not_in_trace' | 'wrong_session' | 'wrong_phase' | 'wrong_task' | 'duplicate_conflicting_terminal' | 'event_id_conflict' | 'invalid_outcome' | 'empty_receipt' | 'lock_timeout' | 'store_unavailable' | 'store_corrupt' | 'legacy_unverifiable' | 'unauthorized_transition';
 export interface KnowledgeReceiptTransitionObservation {
     transition: KnowledgeReceiptObservedTransition;

package/dist/hooks/phase-complete-directive-gate.d.ts

@@ -17,6 +17,7 @@
  * surfaces as a block, never a silent pass.
  */
 export type DirectiveBlockReason = 'no_verdict' | 'unremediated_violation';
+export type DirectiveGateFailureCode = 'RECEIPT_MISSING' | 'RECEIPT_CORRUPT' | 'RECEIPT_LOCK_TIMEOUT' | 'RECEIPT_WRONG_ROOT' | 'RECEIPT_PERMISSION' | 'RECEIPT_TRANSIENT' | 'RECEIPT_STORE_UNAVAILABLE';
 export interface DirectiveGateResult {
     blocked: boolean;
     unresolved: Array<{
@@ -27,6 +28,14 @@ export interface DirectiveGateResult {
     overridden: string[];
     /** True when the gate could not read its inputs (fail-closed → blocked). */
     failedClosed: boolean;
+    failure?: {
+        code: DirectiveGateFailureCode;
+        action_id: 'knowledge_receipt' | 'phase_complete' | 'repair_knowledge_receipt_ledger';
+    };
+    recovery?: {
+        kind: 'tool' | 'retry';
+        action: 'knowledge_receipt' | 'phase_complete' | 'repair_knowledge_receipt_ledger';
+    };
 }
 /**
  * Evaluate all critical directives shown during the phase. Fail-closed.