opencode-swarm 7.146.1 → 7.146.3

package/dist/council/types.d.ts

@@ -8,6 +8,13 @@ export type CouncilVerdict = 'APPROVE' | 'CONCERNS' | 'REJECT';
 export type CouncilFindingSeverity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
 export type CouncilFindingCategory = 'logic' | 'edge_case' | 'error_handling' | 'spec_compliance' | 'security' | 'maintainability' | 'naming' | 'domain' | 'test_gap' | 'test_quality' | 'mutation_gap' | 'adversarial_gap' | 'slop_pattern' | 'hallucinated_api' | 'lazy_abstraction' | 'cargo_cult' | 'spec_drift' | 'other';
 export type CouncilAgent = 'critic' | 'reviewer' | 'sme' | 'test_engineer' | 'explorer';
+/**
+ * The canonical five-member council role set (issue #2102 contract H).
+ * Writers, gates, and quorum checks must import this constant instead of
+ * re-declaring the list, so the role policy can never drift between the
+ * write path and the gate path.
+ */
+export declare const COUNCIL_MEMBER_ROLES: readonly CouncilAgent[];
 export interface CouncilFinding {
     severity: CouncilFindingSeverity;
     category: CouncilFindingCategory;
@@ -145,12 +152,25 @@ export interface CouncilCriteria {
     /** ISO 8601 */
     declaredAt: string;
 }
+/** Normalized final-council completion policy (issue #2102 contract C). */
+export interface FinalCompletionPolicyConfig {
+    /** 'all_required' (default, strict legacy) or explicit 'quorum' weakening. */
+    mode: 'all_required' | 'quorum';
+    /** Required when mode is 'quorum'; bounded 3..5 distinct canonical members. */
+    minimumMembers?: number;
+}
 /** Config shape — matched in schema.ts via CouncilConfigSchema. */
 export interface CouncilConfig {
     enabled: boolean;
     /** Default 3 */
     maxRounds: number;
-    /** Default 30_000 */
+    /**
+     * @deprecated Inert — declared for parse compatibility only. No runtime
+     * consumer exists: council tools consume already-returned verdict
+     * submissions and there is no member-dispatch cancellation seam. Config
+     * doctor warns when this is explicitly set; the field will be removed in
+     * a future release. Dispatch timeouts are governed by the agent host.
+     */
     parallelTimeoutMs: number;
     /** Default true — any REJECT blocks */
     vetoPriority: boolean;
@@ -159,15 +179,31 @@ export interface CouncilConfig {
     /** Default 3 — minimum distinct council members required for quorum. requireAllMembers: true overrides this to 5. */
     minimumMembers: number;
     /**
-     * Optional webhook URL or handler name for auto-escalation when maxRounds is
-     * reached without APPROVE. Reserved for forward compatibility — NOT yet
-     * implemented. Currently, maxRounds exhaustion surfaces a user-facing message
-     * via `buildUnifiedFeedbackMd` in council-service.ts (see the "Escalate to
-     * user" block), and the architect must relay it to the user. Future wiring
-     * options: critic_oversight agent, HTTP webhook, or configurable handler.
+     * Optional webhook URL or handler name declared for escalation when
+     * maxRounds is reached without APPROVE. REMAINS INERT: no handler,
+     * webhook, or outbound execution exists or is invoked. Config doctor
+     * visibly warns when it is explicitly set (issue #1650), and max-rounds
+     * exhaustion emits a durable structured event plus a user escalation
+     * message. Wiring real escalation requires a separate security review.
      */
     escalateOnMaxRounds?: string;
     /** Default true — CONCERNS verdict with only MEDIUM/LOW findings does NOT block completion (advisory). Set false to make all CONCERNS block like REJECT. Note: HIGH/CRITICAL findings from CONCERNS members are always promoted to requiredFixes and block at the tool level regardless of this setting. */
     phaseConcernsAllowComplete: boolean;
+    /**
+     * Final-council completion policy. Missing/default `all_required`
+     * preserves the exact legacy requirement (all five canonical roles,
+     * five distinct members, zero absentees). `quorum` is an explicit,
+     * bounded weakening: it requires `minimumMembers` between 3 and 5, and
+     * only distinct members of the canonical five-role set count. The
+     * normalized policy is part of the council policy digest, so any change
+     * invalidates previously accepted final-council evidence.
+     */
+    finalCompletionPolicy: FinalCompletionPolicyConfig;
+    /**
+     * Default 24 — maximum age (hours) of phase-council, architecture-
+     * supervisor, and final-council evidence. Bounded 1..720. Part of the
+     * council policy digest, so changing it invalidates prior evidence.
+     */
+    freshnessMaxAgeHours: number;
 }
 export declare const COUNCIL_DEFAULTS: CouncilConfig;

package/dist/hooks/knowledge-application-gate.d.ts

@@ -45,6 +45,27 @@ export interface GateInput {
 }
 declare function selectCurrentArchitectDirectiveMemberships(memberships: ReceiptMembership[]): ReceiptMembership[];
 declare function selectStaleUnmarkedMemberships(memberships: ReceiptMembership[], now: number, stalenessMs: number): ReceiptMembership[];
+/**
+ * Best-effort lookup of directive lesson text by knowledge entry id, for
+ * surfacing the acknowledged content inside a gate denial (issue #2299).
+ *
+ * Reads the project-local swarm store always (cached by `readKnowledge` and
+ * bounded in size by the store's own knowledge cap) and the cross-project hive
+ * store only when the hive file exists. A hive entry can only be an
+ * unacknowledged architect-directive membership if it was displayed, which
+ * requires hive to have been enabled at display time, so reading it back here
+ * is not a fresh disclosure. Fail-open: any read error simply omits the
+ * content echo and never alters the denial outcome.
+ */
+export declare function loadDirectiveContents(directory: string, entryIds: string[]): Promise<Map<string, string>>;
+/**
+ * Build the KNOWLEDGE_ENFORCE_GATE_DENY message (issue #2299). Renders
+ * unacknowledged memberships in the single canonical colon pair form
+ * `<trace_id>:<entry_id>`, lists every valid verb with its token grammar,
+ * and emits one fully-instantiated, copy-pasteable `KNOWLEDGE_N_A` example per
+ * membership plus the directive content being acknowledged.
+ */
+export declare function buildGateDenialMessage(toolName: string, memberships: ReceiptMembership[], contents: Map<string, string>): string;
 /**
  * Pre-tool gate. Throws when the architect attempts a high-risk action with
  * an unacknowledged critical directive in `enforce` mode. Always returns in
@@ -69,5 +90,7 @@ export declare const _internals: {
     writeWarnEvent: typeof writeWarnEvent;
     selectCurrentArchitectDirectiveMemberships: typeof selectCurrentArchitectDirectiveMemberships;
     selectStaleUnmarkedMemberships: typeof selectStaleUnmarkedMemberships;
+    loadDirectiveContents: typeof loadDirectiveContents;
+    buildGateDenialMessage: typeof buildGateDenialMessage;
 };
 export {};