opencode-swarm 7.148.5 → 7.149.0

package/dist/cli/{knowledge-validator-cq2cgfcx.js → knowledge-validator-bdhgkw9f.js}

@@ -23,17 +23,17 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-kj6m9ry3.js";
-import"./index-nq4tkfpc.js";
+} from "./index-8hkxm9mh.js";
+import"./index-bmaz2yy4.js";
 import"./index-rtry5xyf.js";
-import"./index-1w5nnyew.js";
+import"./index-01q7mb83.js";
 import"./index-ae75rja9.js";
-import"./index-k1s8gxjh.js";
-import"./index-vhefvcta.js";
+import"./index-c1h0rdkr.js";
+import"./index-cfvbd3dg.js";
 import"./index-bk5tah7q.js";
-import"./index-kg4knw6r.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-ame8ek9g.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/cli/{pending-delegations-f4wvyzbf.js → pending-delegations-aez8ebdr.js}

@@ -58,13 +58,13 @@ import {
   sweepStaleDelegations,
   updateCoderSettlement,
   writeDelegationFallback
-} from "./index-t25evmna.js";
+} from "./index-n6jykega.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
 import"./index-zjygnfay.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/cli/{pr-subscriptions-f4xw1rxy.js → pr-subscriptions-cpnwvc6y.js}

@@ -9,13 +9,13 @@ import {
   sweepStale,
   unsubscribe,
   updateSnapshot
-} from "./index-qwmrt51t.js";
+} from "./index-wbz365gn.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
 import"./index-zjygnfay.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/cli/{runner-rk26nk58.js → runner-9mnkfjw7.js}

@@ -3,14 +3,14 @@ import {
   _internals,
   createModelEvaluationExecutor,
   runEvaluation
-} from "./index-j382eh60.js";
-import"./index-8djgxw2w.js";
+} from "./index-vfv4vnnc.js";
+import"./index-z6471b7r.js";
 import"./index-y8552snf.js";
 import"./index-r3mvsbtq.js";
-import"./index-vhefvcta.js";
-import"./index-kg4knw6r.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-cfvbd3dg.js";
+import"./index-ame8ek9g.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/cli/{scan-cursor-7n0zs72g.js → scan-cursor-3ba1spad.js}

@@ -4,17 +4,17 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-zf2vwa7y.js";
-import"./index-1w5nnyew.js";
+} from "./index-s7t2c9jd.js";
+import"./index-01q7mb83.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-ae75rja9.js";
-import"./index-k1s8gxjh.js";
-import"./index-vhefvcta.js";
+import"./index-c1h0rdkr.js";
+import"./index-cfvbd3dg.js";
 import"./index-bk5tah7q.js";
-import"./index-kg4knw6r.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-ame8ek9g.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/cli/{schema-e59spg93.js → schema-h251vmd1.js}

@@ -99,7 +99,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-yezd5ks6.js";
+} from "./index-41n0thtd.js";
 import"./index-cpg98bh1.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scope-persistence-d75p900m.js → scope-persistence-h1b31ba2.js}

@@ -23,22 +23,20 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-q7ke7kwd.js";
-import"./index-x3d9asnz.js";
+} from "./index-79pwr8hc.js";
+import"./index-6thxr1q7.js";
+import"./index-c83bztkp.js";
 import"./index-556ja8an.js";
-import"./index-59wqcatm.js";
-import"./index-yezd5ks6.js";
+import"./index-q8e2yd98.js";
+import"./index-41n0thtd.js";
 import"./index-cpg98bh1.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-4cgee5vh.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-kg4knw6r.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-ame8ek9g.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/cli/{skill-generator-c65y1h6a.js → skill-generator-esrn40th.js}

@@ -33,32 +33,32 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-jzz52as5.js";
-import"./index-kj6m9ry3.js";
-import"./index-nq4tkfpc.js";
+} from "./index-42habrdv.js";
+import"./index-8hkxm9mh.js";
+import"./index-bmaz2yy4.js";
 import"./index-rtry5xyf.js";
 import"./index-q7sjgr1y.js";
-import"./index-1w5nnyew.js";
-import"./index-ne45ew6z.js";
-import"./index-c6jqkx9d.js";
+import"./index-01q7mb83.js";
+import"./index-pgfn8h50.js";
+import"./index-xdp0bx28.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-59wqcatm.js";
-import"./index-yezd5ks6.js";
-import"./index-cpg98bh1.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
+import"./index-q8e2yd98.js";
+import"./index-41n0thtd.js";
+import"./index-cpg98bh1.js";
+import"./index-9e6fdz2h.js";
+import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-k1s8gxjh.js";
-import"./index-vhefvcta.js";
+import"./index-c1h0rdkr.js";
+import"./index-cfvbd3dg.js";
 import"./index-bk5tah7q.js";
-import"./index-kg4knw6r.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-ame8ek9g.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/cli/{telemetry-1pnsftp0.js → telemetry-jtq6px7k.js}

@@ -13,7 +13,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-ghbkknjz.js";
+} from "./index-wj0gnab0.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{workspace-snapshot-nq25j94x.js → workspace-snapshot-8269e1p9.js}

@@ -38,10 +38,10 @@ import {
   resolveRemoteRefsContainingHeadAsync,
   switchPrFeedbackTrackingCandidateAsync,
   workspaceSnapshotMatches
-} from "./index-g8wwj0sz.js";
+} from "./index-vnn7qq8c.js";
+import"./index-r3mvsbtq.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-r3mvsbtq.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{worktree-collision-ownership-wqy7mgb3.js → worktree-collision-ownership-r8j31h06.js}

@@ -5,25 +5,25 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-t25evmna.js";
+} from "./index-n6jykega.js";
 import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
 } from "./index-fxvgaeq4.js";
-import {
-  init_git_executable,
-  resolveGitExecutable
-} from "./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import {
   bunSpawn
 } from "./index-r3mvsbtq.js";
+import {
+  init_git_executable,
+  resolveGitExecutable
+} from "./index-9e6fdz2h.js";
+import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/cli/{worktree-isolation-ay9d58w4.js → worktree-isolation-pbr4d5m9.js}

@@ -21,61 +21,62 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-3aev3a0c.js";
-import"./index-j382eh60.js";
-import"./index-arjq717j.js";
-import"./index-5r2mcgpa.js";
-import"./index-zhn0q7nf.js";
-import"./index-8djgxw2w.js";
+} from "./index-bcfcekx9.js";
+import"./index-vfv4vnnc.js";
+import"./index-wsar7d91.js";
+import"./index-ccyve4pb.js";
+import"./index-kb1p6dpx.js";
+import"./index-z6471b7r.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
 import"./index-y8552snf.js";
-import"./index-vyg5b8ee.js";
-import"./index-zf2vwa7y.js";
+import"./index-ef0wracg.js";
+import"./index-s7t2c9jd.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-g8wwj0sz.js";
-import"./index-qwmrt51t.js";
-import"./index-jzz52as5.js";
-import"./index-kj6m9ry3.js";
-import"./index-nq4tkfpc.js";
+import"./index-vnn7qq8c.js";
+import"./index-wbz365gn.js";
+import"./index-42habrdv.js";
+import"./index-8hkxm9mh.js";
+import"./index-bmaz2yy4.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
-import"./index-t25evmna.js";
+import"./index-n6jykega.js";
 import"./index-fxvgaeq4.js";
-import"./index-haf092ak.js";
-import"./index-5zq3892p.js";
-import"./index-q7ke7kwd.js";
-import"./index-x3d9asnz.js";
+import"./index-5q5ws00e.js";
+import"./index-mza55jmc.js";
+import"./index-79pwr8hc.js";
+import"./index-6thxr1q7.js";
+import"./index-c83bztkp.js";
 import"./index-556ja8an.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
 import"./index-3g0xk6tk.js";
 import"./index-85gkedsf.js";
-import"./index-1w5nnyew.js";
-import"./index-ne45ew6z.js";
+import"./index-01q7mb83.js";
+import"./index-pgfn8h50.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-c6jqkx9d.js";
+} from "./index-xdp0bx28.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
-import"./index-59wqcatm.js";
-import"./index-yezd5ks6.js";
-import"./index-cpg98bh1.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
 import"./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
+import"./index-q8e2yd98.js";
+import"./index-41n0thtd.js";
+import"./index-cpg98bh1.js";
+import"./index-9e6fdz2h.js";
+import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-k1s8gxjh.js";
-import"./index-vhefvcta.js";
+import"./index-c1h0rdkr.js";
+import"./index-cfvbd3dg.js";
 import"./index-bk5tah7q.js";
-import"./index-kg4knw6r.js";
-import"./index-vrp2zva8.js";
-import"./index-ghbkknjz.js";
+import"./index-ame8ek9g.js";
+import"./index-a90c1gtn.js";
+import"./index-wj0gnab0.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-ed5ykebp.js";

package/dist/commands/close.d.ts

@@ -303,5 +303,6 @@ export declare const _internals: {
     endAgentSession: typeof endAgentSession;
     flushAndDrainTelemetry: () => Promise<void>;
     finalizeContextTelemetry: (directory: string) => void;
+    finalizeCoreEvents: (directory: string) => void;
 };
 export {};

package/dist/events/core-events.d.ts

@@ -0,0 +1,250 @@
+/**
+ * Core event store — the single append seam and bounded store for
+ * `.swarm/events.jsonl` (issue #2039, Observability PR 11/23).
+ *
+ * HISTORY: `.swarm/events.jsonl` was an ad hoc shared event bus with ~30
+ * direct append sites across ~29 modules and NO hard byte/age/count ceiling;
+ * nine production readers parsed the entire file, three of them
+ * (coder-retry escalation, spec-drift commit dedup, task-repair audit
+ * dedup) basing CORRECTNESS decisions on arbitrary-age lookups.
+ *
+ * NOW it is a BOUNDED single-file store in the `src/context-map/telemetry.ts`
+ * (#2037) house pattern:
+ *
+ *   Line 1:  `swarm-events-manifest` header carrying the size-bounded FOLDED
+ *            aggregate (events compacted away: lifetime total, per-type
+ *            counts ≤64 keys + "other", corrupt/dropped counters).
+ *   Line 2+: raw event JSONL — the RECENT retained window, bounded to
+ *            CORE_EVENT_LIMITS.activeMaxBytes / activeMaxEntries / ageMaxMs.
+ *
+ * Lifetime totals = folded aggregate (header) + retained window (file). Event
+ * lines are preserved byte-for-byte (both `event:` and `type:` discriminators
+ * pass through untouched — the store never normalizes producer schemas).
+ *
+ * AUTHORITATIVE PARTITION (issue #2039 requirement 2/5): the four
+ * correctness-relevant event types (`coder_retry_circuit_breaker`,
+ * `task_workflow_repaired`, `spec_drift_acknowledged`, `spec_drift_repaired`)
+ * are indexed into `.swarm/events-authority-index.json` at THREE points —
+ * append time, fold time (BEFORE a line leaves the window), and read time
+ * (self-healing) — so compaction can never make an authority answer wrong.
+ * Authority queries are index-first with a bounded retained-window fallback
+ * for legacy sessions; the only reachable "absent after compaction" case is
+ * FIFO eviction past authorityIndexMaxEntries (disclosed via health).
+ *
+ * CONCURRENCY (issue #2039 review C2/C4): EVERY write (append, compaction,
+ * index update, finalize) holds the exclusive `.swarm/events.lock` (`wx`
+ * create, stale-broken after 5 minutes) — there are NO lockless writes, so an
+ * append racing a compaction rewrite can never be silently discarded. The wx
+ * store lock is the ONLY lock on this store; producers' former
+ * `tryAcquireLock(..., 'events.jsonl', ...)` proper-lockfile calls are all
+ * removed. Lock acquisition retries briefly, then fails with a typed error
+ * the caller maps onto its existing error contract.
+ *
+ * All functions are synchronous (house pattern). The `_internals` DI seam
+ * lets tests override filesystem operations and limits without `mock.module`
+ * (AGENTS.md invariant 7). State lives exclusively under `.swarm/`
+ * (invariant 4) — every function takes an explicit project-root `directory`.
+ * No `bun:` imports — Node-ESM-loadable (invariant 2).
+ */
+import * as fs from 'node:fs';
+export interface CoreEventLimits {
+    /** Hard ceiling on the retained window (manifest line + event lines). */
+    activeMaxBytes: number;
+    /** Hard ceiling on the retained window (event lines). */
+    activeMaxEntries: number;
+    /** Operational-event retention age; aged events fold into the header. */
+    ageMaxMs: number;
+    /** Bounded fold work per maintenance pass (bytes of folded lines). */
+    compactMaxBytes: number;
+    /** Hard documented read bound for public reads, independent of history. */
+    readMaxBytes: number;
+    /** Appends between throttled maintenance checks. */
+    checkInterval: number;
+    /** Disk-pressure/failure warning cooldown. */
+    warnCooldownMs: number;
+    /** Upper bound for a serialized manifest header (single line). */
+    headerMaxBytes: number;
+    /** Hard ceiling on authority-index entries (FIFO-evicted, disclosed). */
+    authorityIndexMaxEntries: number;
+    /** Serialized single-event bound; larger appends fail with a typed error. */
+    maxLineBytes: number;
+}
+export declare const CORE_EVENT_LIMITS: CoreEventLimits;
+export type CoderRetryEscalationAction = 'sounding_board_consultation' | 'simplification' | 'user_escalation';
+/** Size-bounded folded aggregate persisted in the manifest header. FOLDED-ONLY:
+ *  events compacted/cut away from the retained window. Retained events are NOT
+ *  in here. Lifetime totals = folded + retained. */
+export interface CoreEventFolded {
+    totalEvents: number;
+    /** Per-discriminator counts, capped at 64 distinct keys + "other". */
+    byType: Record<string, number>;
+    corrupt: number;
+    dropped: number;
+    oldestTimestamp: string | null;
+    newestTimestamp: string | null;
+}
+export interface CoreEventManifest {
+    v: 1;
+    type: 'swarm-events-manifest';
+    schemaVersion: number;
+    folded: CoreEventFolded;
+    updatedAt: string;
+}
+export declare const _internals: {
+    readonly appendFileSync: typeof fs.appendFileSync;
+    readonly readFileSync: typeof fs.readFileSync;
+    readonly existsSync: typeof fs.existsSync;
+    readonly mkdirSync: typeof fs.mkdirSync;
+    readonly statSync: fs.StatSyncFn;
+    readonly renameSync: typeof fs.renameSync;
+    readonly writeFileSync: typeof fs.writeFileSync;
+    readonly unlinkSync: typeof fs.unlinkSync;
+    readonly openSync: typeof fs.openSync;
+    readonly closeSync: typeof fs.closeSync;
+    readonly readSync: typeof fs.readSync;
+    readonly now: () => number;
+    readonly limits: CoreEventLimits;
+    readonly emitHealth: typeof emitCoreEventsHealth;
+};
+export type CoreEventCoverage = 'complete' | 'truncated' | 'empty';
+/** The bounded view of the retained window. `text` is manifest-stripped event
+ *  lines in append order (possibly starting mid-line when truncated). */
+export interface CoreEventReadResult {
+    text: string;
+    truncated: boolean;
+    coverage: CoreEventCoverage;
+}
+interface AuthorityIndexFile {
+    version: 1;
+    entries: Record<string, string>;
+    evicted: number;
+}
+/** Result flavors: 'ok' carries the index; 'corrupt' means the index exists
+ *  but is unreadable/malformed — authority consumers fail CLOSED on this
+ *  (mirroring today's malformed-JSONL throws in the consumers they replace);
+ *  'absent' means no index file yet (fresh or legacy session — fall back to
+ *  the retained-window scan). */
+type AuthorityIndexState = {
+    kind: 'ok';
+    index: AuthorityIndexFile;
+} | {
+    kind: 'absent';
+} | {
+    kind: 'corrupt';
+};
+export interface CoreEventStoreLock {
+    /** Release the lock (idempotent). */
+    release: () => void;
+}
+/**
+ * Acquire the exclusive store lock with a brief bounded retry, then run `fn`
+ * while holding it. Returns null when the lock stays contended for the whole
+ * retry window — callers map that onto their existing error contract
+ * (operational producers catch+warn; the two hard-fail producers rethrow
+ * their pre-existing audit-locked codes).
+ */
+export declare function withCoreEventStoreLock<T>(directory: string, fn: () => T): T | null;
+/** Test seam (AGENTS.md invariant 7): reset module-scoped maintenance
+ *  counters between tests. Restore by calling in `afterEach`. */
+export declare function _resetMaintenanceCounters(): void;
+/**
+ * Bounded read of the retained window: the newest `readMaxBytes` of event
+ * lines, manifest-stripped, in append order. `truncated` means older history
+ * exists beyond the read bound (a legacy header-less file larger than the
+ * bound, or a store mid-drain) — callers disclose it, never silently treat
+ * the window as complete history.
+ */
+export declare function readCoreEvents(directory: string): CoreEventReadResult;
+/** Coverage disclosure without reading the window body. */
+export declare function getCoreEventCoverage(directory: string): CoreEventCoverage;
+/**
+ * Lifetime event count = folded total (manifest) + retained window count.
+ * The explicit counter/projection the issue requires for turn estimation —
+ * O(header) once a manifest exists; a legacy header-less file falls back to
+ * a bounded window count (advisory consumers only).
+ *
+ * Point-in-time advisory: the manifest head read and the window read are two
+ * separate reads, so a maintenance fold racing between them can briefly
+ * underreport (old folded + new, smaller window). Consumers are display-only
+ * (context-budget turn estimate); exactness across a compaction boundary is
+ * not required.
+ */
+export declare function getCoreEventLifetimeCount(directory: string): number;
+/** Typed store-busy error — producers map it onto their existing contracts
+ *  (catch+warn for operational producers; the two hard-fail audit producers
+ *  rethrow their pre-existing locked codes). */
+export declare const CORE_EVENT_LOCKED = "CORE_EVENT_STORE_LOCKED";
+export declare const CORE_EVENT_LINE_TOO_LARGE = "CORE_EVENT_LINE_TOO_LARGE";
+/**
+ * Append one event to `.swarm/events.jsonl` through the canonical seam.
+ *
+ * - Serializes the event EXACTLY as the producer shaped it (`event:` and
+ *   `type:` discriminators preserved; no normalization).
+ * - Holds the store lock for the write; closed-set authority events index
+ *   their authority key in the same lock scope, event-first (the crash
+ *   window between the two is healed at fold time and read time).
+ * - `dedupeOnAuthorityKey` (authority events only): skips the append when
+ *   the event's authority key is already indexed or present in the
+ *   retained window — the at-most-once audit contract the two hard-fail
+ *   producers previously enforced with lock-then-recheck reads.
+ * - Runs throttled maintenance (bounded compaction / legacy drain) every
+ *   `checkInterval` appends, after the lock is released.
+ *
+ * Throws `CORE_EVENT_STORE_LOCKED` after bounded lock retry, or a typed
+ * serialize error for oversized lines — every producer's existing error
+ * handling applies unchanged.
+ */
+export declare const CORE_EVENT_NO_STORE = "CORE_EVENT_NO_STORE";
+export declare function appendCoreEventSync(directory: string, event: Record<string, unknown>, options?: {
+    dedupeOnAuthorityKey?: boolean;
+    ensureSwarmDir?: boolean;
+}): void;
+/**
+ * Batch append: identical semantics to {@link appendCoreEventSync} for each
+ * event, but ONE lock acquisition for the whole batch (reconciliation loops
+ * that correct many records at once — e.g. the steering hook's unconsumed
+ * set — must not pay a lock round-trip per line). Per-line error contracts
+ * are the caller's: a lock failure throws `CORE_EVENT_STORE_LOCKED` before
+ * any line lands; an oversized line throws `CORE_EVENT_LINE_TOO_LARGE` before
+ * the batch starts (all lines are validated first).
+ */
+export declare function appendCoreEventsSync(directory: string, events: readonly Record<string, unknown>[], options?: {
+    dedupeOnAuthorityKey?: boolean;
+    ensureSwarmDir?: boolean;
+}): void;
+/** The set of escalation actions already durably emitted for a
+ *  (taskId, retryEpoch) pair. Index answer UNION the bounded retained-window
+ *  scan — identical verdicts to the pre-#2039 whole-file scan for everything
+ *  within the window, and complete-after-compaction via the index. */
+export declare function getCoderRetryEscalationActions(directory: string, taskId: string, retryEpoch: number): Set<CoderRetryEscalationAction>;
+/** Spec-drift audit presence: the idempotency check that gates a drift WAL's
+ *  transition to COMMITTED. Fails closed (typed throw) on a corrupt index,
+ *  matching the malformed-JSONL throw it replaces. */
+export declare function hasSpecDriftAuditEvent(directory: string, kind: 'spec_drift_acknowledged' | 'spec_drift_repaired', transitionId: string): boolean;
+/** Task-repair audit presence: the idempotency check behind
+ *  `ensureAuditEvent` (COMMITTED repair WALs are never deleted within a
+ *  session, so this must answer for arbitrarily old repairs). */
+export declare function hasTaskRepairAuditEvent(directory: string, taskId: string, transitionId: string): boolean;
+/** External compaction trigger (diagnose maintenance). Fail-open. */
+export declare function compactCoreEvents(directory: string): void;
+/**
+ * Close finalize (issue #2039 requirement 5): under one lock acquisition,
+ * drain any legacy header-less file to convergence and fold the remaining
+ * window into a defined, VALIDATED cut (the atomicReplace pre-rename
+ * validation), which `/swarm close` then archives. Fail-open: never throws
+ * to the close pipeline.
+ */
+export declare function finalizeCoreEventsForClose(directory: string): void;
+declare function emitCoreEventsHealth(directory: string, payload: {
+    trigger: 'compaction' | 'close';
+    accepted: number;
+    compacted: number;
+    retained: number;
+    dropped: number;
+    corrupt: number;
+    oldest: string | null;
+    newest: string | null;
+    bytes: number;
+    limitBytes: number;
+}, preloadedAuthorityState?: AuthorityIndexState): void;
+export {};

package/dist/full-auto/oversight.d.ts

@@ -65,9 +65,11 @@ export declare function parseFullAutoCriticResponse(rawResponse: string): FullAu
  * durably audited is not a real verdict — the dispatcher converts the
  * thrown error into a BLOCKED/pause outcome.
  *
- * The lock acquisition is best-effort (some platforms / test sandboxes
- * cannot acquire the cross-process lock); the actual append is the
- * mandatory step and any failure throws.
+ * The append goes through the canonical store seam (`appendCoreEventSync`),
+ * which holds the exclusive store lock for the write and throws a typed
+ * error when the store stays contended. The seam releases its lock before
+ * any throw, so the mandatory rethrow below preserves the original
+ * rethrow-after-lock-release contract.
  */
 export declare function writeFullAutoOversightEvent(directory: string, event: FullAutoOversightEvent): Promise<void>;
 /**

package/dist/hooks/full-auto-delegation.d.ts

@@ -1,3 +1,27 @@
+/**
+ * Full-Auto v2 subagent outbound and return checks.
+ *
+ * Composable hook that fires alongside the existing delegation-gate hooks.
+ * It does not replace delegation-gate; it adds Full-Auto-specific verification
+ * for outbound Task delegations and post-return safety review.
+ *
+ * Outbound (tool.execute.before, only for Task tool):
+ *   - Require valid `subagent_type` matching a registered swarm role.
+ *   - For coder delegation, require declared scope (warning if missing).
+ *   - Reject delegation that targets a clearly invalid agent or that requests
+ *     a write to a protected path inside the prompt body.
+ *   - Out-of-policy outbound delegations escalate to the critic via the
+ *     permission hook's escalate_critic path; this hook itself records
+ *     advisories and structured denials for the most clear-cut cases.
+ *
+ * Return (tool.execute.after, only for Task tool):
+ *   - Inspect subagent result text for skipped tests, tool timeouts, scope
+ *     changes, "instructions from external content", missing evidence,
+ *     and out-of-scope file generation.
+ *   - On detected return warnings, write a `full_auto_subagent_warning`
+ *     event and increment a per-session counter so the cadence/escalation
+ *     layer can react.
+ */
 import type { PluginConfig } from '../config';
 export interface FullAutoDelegationHookOptions {
     config: PluginConfig;