opencode-swarm 7.148.5 → 7.149.1

package/dist/observability/catalog.d.ts

@@ -1,8 +1,8 @@
 /**
  * The event catalog (issue #2029).
  *
- * Exactly 47 entries, matching the `TelemetryEvent` union at
- * `src/telemetry.ts:15-109`. Thirty-eight predate the #2029 contract; the 39th is
+ * Exactly 48 entries, matching the `TelemetryEvent` union at
+ * `src/telemetry.ts:15-125`. Thirty-eight predate the #2029 contract; the 39th is
  * `agent_conflict_detected` (previously emitted through a force-cast past the
  * type system), the 40th is `close_archive_result` (issue #2030 — the
  * structured close/archive result event), the 41st is the bounded diagnostic
@@ -12,11 +12,13 @@
  * mutation audit, the 44th is the bounded `residue_health` atomic-write
  * residue audit (issue #2035), the 46th is the bounded
  * `context_telemetry_health` storage audit for the issue-#2037
- * `.swarm/context-telemetry.jsonl` store, and the 47th is the counts-only
+ * `.swarm/context-telemetry.jsonl` store, the 47th is the counts-only
  * `skill_usage_health` storage audit for the issue-#2038
- * `.swarm/skill-usage.jsonl` store and its authoritative pending sidecar. These late additions are instances of
- * the defect class this contract exists to close: an event kind entering the
- * stream with no registration.
+ * `.swarm/skill-usage.jsonl` store and its authoritative pending sidecar,
+ * and the 48th is the bounded `core_events_health` storage audit for the
+ * issue-#2039 `.swarm/events.jsonl` store. These late additions are instances
+ * of the defect class this contract exists to close: an event kind entering
+ * the stream with no registration.
  *
  * Every entry names a real producer `file:line`, a retention owner issue at or
  * above #2030 — every entry today cites the #2030-#2051 programme, but only the
@@ -69,7 +71,7 @@ export interface CatalogEntry {
     /**
      * Whether an event of this kind must carry `trace.parentSpanId`.
      *
-     * `false` for all 47 entries today, and that is a truthful statement about
+     * `false` for all 48 entries today, and that is a truthful statement about
      * the current system rather than a placeholder: no producer supplies a
      * parent span, so `createObservation` never sets one. Setting this to `true`
      * for a kind whose producer cannot supply a parent would make every

package/dist/services/session-reflection.d.ts

@@ -24,6 +24,13 @@ export interface ToolProblem {
     totalCalls: number;
     failureRate: number;
     avgDurationMs: number;
+    /**
+     * Issue #2349 sweep: a bounded, deduplicated sample of WHY this tool failed.
+     * Reporting only that a tool failed N times is the same defect class the
+     * sweep set out to close — the reason has to reach a surface a human or
+     * agent actually reads, which is this one.
+     */
+    failureReasons?: string[];
 }
 export interface AgentDispatchSummary {
     agent: string;

package/dist/services/spec-drift-recovery.d.ts

@@ -73,8 +73,15 @@ declare function verifySnapshot(snapshotPath: string, currentSpec: {
     content: string;
 } | null): Promise<void>;
 declare function ensureSnapshotEvent(directory: string, plan: NonNullable<Awaited<ReturnType<typeof loadPlanJsonOnly>>>, transitionId: string): Promise<void>;
-declare function appendEvent(eventsPath: string, event: SpecDriftAcknowledgedEvent | SpecDriftRepairedEvent): Promise<void>;
-declare function verifyEventPresence(eventsPath: string, eventType: 'spec_drift_acknowledged' | 'spec_drift_repaired', transitionId: string): Promise<boolean>;
+/**
+ * Issue #2039: audit events append through the core event seam with the
+ * authority-key dedupe restoring the old pre-check (lock-scoped, at-most-once),
+ * and presence verification reads the authoritative index — never the whole
+ * file. Fail-closed semantics are preserved: a corrupt authority index throws
+ * (previously a malformed events.jsonl line threw).
+ */
+declare function appendEvent(directory: string, event: SpecDriftAcknowledgedEvent | SpecDriftRepairedEvent): Promise<void>;
+declare function verifyEventPresence(directory: string, eventType: 'spec_drift_acknowledged' | 'spec_drift_repaired', transitionId: string): Promise<boolean>;
 export declare function reconcileSpecDrift(directory: string, options: {
     mode: RecoveryMode;
     actor: RecoveryActor;

package/dist/state.d.ts

@@ -33,6 +33,16 @@ export interface ToolAggregate {
     successCount: number;
     failureCount: number;
     totalDuration: number;
+    /**
+     * A small, bounded, deduplicated sample of WHY this tool failed (issue
+     * #2349 follow-up: agent-activity.ts previously collapsed `output.error`
+     * into a pure boolean and discarded the value). Capped at
+     * MAX_TOOL_FAILURE_REASONS distinct entries, each truncated to
+     * MAX_TOOL_FAILURE_REASON_LENGTH chars, so a tool that fails thousands of
+     * times with the same or varying reasons cannot grow this unboundedly.
+     * Omitted (absent, not an empty array) when no reason was ever recorded.
+     */
+    failureReasons?: string[];
 }
 /**
  * Represents a delegation from one agent to another

package/dist/telemetry.d.ts

@@ -32,7 +32,7 @@ export type TelemetryEvent = 'session_started' | 'session_ended' | 'agent_activa
  * `prm_hard_stop` TRIGGER emitted by `src/prm/escalation.ts`. A trigger with
  * no matching delivery means the containment never reached the agent.
  */
- | 'prm_hard_stop_delivered' | 'agent_conflict_detected' | 'close_archive_result' | 'knowledge_receipt_transition' | 'knowledge_maintenance' | 'residue_health' | 'context_telemetry_health' | 'skill_usage_health';
+ | 'prm_hard_stop_delivered' | 'agent_conflict_detected' | 'close_archive_result' | 'knowledge_receipt_transition' | 'knowledge_maintenance' | 'residue_health' | 'context_telemetry_health' | 'skill_usage_health' | 'core_events_health';
 /** Stable classification for how a reviewer-gate decision was established. */
 export type ReviewerGateEvidenceKind = 'genuine' | 'fallback' | 'data_quality' | 'block';
 /**
@@ -291,6 +291,29 @@ export declare const telemetry: {
         newest_timestamp: string | null;
         coverage: boolean;
     }): void;
+    /**
+     * Core event store health (issue #2039): emitted on compaction and close
+     * for the bounded `.swarm/events.jsonl` store. Counts ONLY — no event
+     * content and no filesystem paths, matching the observability contract's
+     * no-content-in-metrics rule. `authority_index_count` /
+     * `authority_evicted_count` disclose the authoritative partition's size
+     * and FIFO-eviction total (eviction is the only reachable
+     * absent-after-compaction case for authority lookups).
+     */
+    coreEventsHealth(data: {
+        trigger: "compaction" | "close";
+        accepted_count: number;
+        compacted_count: number;
+        retained_count: number;
+        dropped_count: number;
+        corrupt_count: number;
+        authority_index_count: number;
+        authority_evicted_count: number;
+        oldest_timestamp: string | null;
+        newest_timestamp: string | null;
+        bytes: number;
+        limit_bytes: number;
+    }): void;
     /**
      * Issue #2063 C2 — the PRM hard-stop DENIAL was actually delivered to the
      * agent (thrown by the guardrails `toolBefore` consumer). `prm_hard_stop`

package/dist/tools/dispatch-lanes.d.ts

@@ -96,6 +96,7 @@ declare const DispatchLanesAsyncArgsSchema: z.ZodObject<{
         fanout: "fanout";
     }>>;
     pr_review_wave_attempt: z.ZodOptional<z.ZodNumber>;
+    pr_review_contract_retry: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 declare const CollectLaneResultsArgsSchema: z.ZodObject<{
     batch_id: z.ZodString;
@@ -132,6 +133,7 @@ export interface DispatchLaneResult {
     output_artifact_error?: string;
     transcript_incomplete?: boolean;
     message_count?: number;
+    workflow_lane_failure_class?: BackgroundDelegationResult['workflowLaneFailureClass'];
     salvaged_workflow_lanes?: string[];
     salvaged_workflow_lane_recoveries?: Array<{
         workflow_lane: string;
@@ -195,7 +197,7 @@ export interface CollectLaneResultsResult {
     all_settled: boolean;
     lane_results: DispatchLaneResult[];
     /**
-     * Alert-only host liveness advisory for still-pending pr-review lanes past
+     * Alert-only host liveness advisory for still-pending async lanes past
      * the pending-liveness threshold (issue #2280 Part B). Present only when at
      * least one such lane exists; never affects `success`, counts, settlement,
      * or any lane's state.
@@ -415,6 +417,7 @@ export declare const _test_exports: {
             fanout: "fanout";
         }>>;
         pr_review_wave_attempt: z.ZodOptional<z.ZodNumber>;
+        pr_review_contract_retry: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>;
     DEFAULT_TIMEOUT_MS: number;
     DEFAULT_ASYNC_LAUNCH_TIMEOUT_MS: number;
@@ -449,6 +452,29 @@ export declare function executeDispatchLanesAsync(args: unknown, directory: stri
 export declare function executeCollectLaneResults(args: unknown, directory: string, context?: Pick<DispatchLanesExecutionContext, 'sessionID'>): Promise<CollectLaneResultsResult>;
 declare function isRetryableSessionCreateFailure(error: unknown): boolean;
 declare function consumePrReviewReceiptAppendFailureLog(loggedFailures: Set<string>, parentSessionId: string, correlationId: string): boolean;
+/**
+ * Issue #2349: a terminal error read off the last assistant message of a lane
+ * session, classified for settlement.
+ *
+ * `kind` derives from the SDK's discriminated `AssistantMessage.error` union and
+ * is AUTHORITATIVE for the settled lane status. `category`/`retryClass` come
+ * from the canonical {@link classifyProviderFailure} and are advisory
+ * classification for operator legibility. The two are NOT required to agree: an
+ * `APIError` whose message merely contains the word "aborted" settles as an
+ * error (the SDK says `APIError`) while carrying `provider.cancelled` from the
+ * text classifier. The reason string names both so the divergence is visible.
+ */
+interface LaneTerminalError {
+    kind: 'provider' | 'aborted' | 'output_length' | 'unknown';
+    /** SDK discriminator (`error.name`), bounded. */
+    name: string;
+    /** Sanitized + bounded provider message. */
+    message: string;
+    statusCode: number | undefined;
+    /** `ApiError.data.isRetryable` — host-stated, not inferred. */
+    hostRetryable: boolean | undefined;
+    category: string;
+}
 declare function extractAssistantTranscript(messages: Array<{
     info?: {
         role?: string;
@@ -467,6 +493,29 @@ declare function extractAssistantTranscript(messages: Array<{
     messageCount: number;
     transcriptIncomplete: boolean;
     terminalAssistantProof: boolean;
+    /**
+     * Issue #2349: `time.completed` of the last assistant message, surfaced so the
+     * collection loop can require positive turn-over evidence before settling a
+     * lane on an error. Previously computed here but discarded.
+     */
+    completedAt: number | undefined;
+    /**
+     * Issue #2349: the fetch-window truncation term ALONE, deliberately split out
+     * of {@link transcriptIncomplete}. `transcriptIncomplete` also folds in the
+     * TERMINAL `finish === 'length' | 'content-filter'` cases, so gating the
+     * error-settle on it would make the `output_length` classification
+     * unreachable. Only the "there may be unfetched earlier messages" signal is
+     * relevant to "did this lane really produce no output".
+     */
+    windowTruncated: boolean;
+    /**
+     * Issue #2349: the classified terminal error from the last assistant message,
+     * when present. The host records this on the persisted message; before this
+     * change the value was read only as an `=== undefined` existence test for
+     * {@link terminalAssistantProof} and then discarded, so no caller could ever
+     * learn WHY a lane died.
+     */
+    terminalError: LaneTerminalError | undefined;
 };
 declare function reserveCollectionLaneCallBudgets(deadline: number, remainingLaneCount: number, hasStatusCall: boolean, hasRevisionDigestCall?: boolean): {
     laneBudgetMs: number;

package/dist/tools/write-pr-review-artifact.d.ts

@@ -1,9 +1,11 @@
+import { assertPrReviewArtifactBoundary } from '../hooks/pr-workflow-gate.js';
 import { createSwarmTool } from './create-tool.js';
 declare function atomicWrite(filePath: string, content: string): Promise<void>;
 declare function atomicCreate(filePath: string, content: string): Promise<boolean>;
 export declare const _internals: {
     atomicWrite: typeof atomicWrite;
     atomicCreate: typeof atomicCreate;
+    assertBoundary: typeof assertPrReviewArtifactBoundary;
 };
 export declare function executeWritePrReviewArtifact(args: unknown, directory: string, context?: {
     sessionID?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.148.5",
+	"version": "7.149.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
@@ -109,10 +109,12 @@
 		"repro:1873": "bun build scripts/repro-1873-entry.ts --outdir dist-build-test/repro-1873 --target node --format esm && node scripts/repro-1873.mjs",
 		"check:events": "bun run scripts/check-event-contract.ts",
 		"check:retention": "bun run scripts/check-retention-registry.ts",
+		"check:core-events": "bun run scripts/check-core-events-usage.ts",
 		"check:test-file-cap": "bun run scripts/check-test-file-cap.ts",
 		"check:pending-fragment": "bun run scripts/check-pending-fragment.ts",
 		"check:gate-portability": "bun run scripts/check-gate-portability.ts",
 		"check:bare-spawn": "bun run scripts/check-bare-executable-spawn.ts",
+		"check:error-channel-discard": "bun run scripts/check-error-channel-discard.ts",
 		"check:memory-recall": "bun run scripts/memory-recall-regression.ts"
 	},
 	"dependencies": {

package/dist/cli/{curator-drift-fv4rttf4.js → curator-drift-2h1d2fnq.js}

@@ -6,13 +6,13 @@ import {
   readEffectiveSpecSync
 } from "./index-9ss2m4rs.js";
 import"./index-n832052r.js";
-import"./index-4rhhvd1a.js";
 import {
   readSwarmFileAsync,
   validateSwarmPath
 } from "./index-4cgee5vh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
+import"./index-4rhhvd1a.js";
 import"./index-zjygnfay.js";
 import"./index-bpmtbmy9.js";
 import {

package/dist/cli/{index-g8wwj0sz.js → index-vnn7qq8c.js}

@@ -1,11 +1,11 @@
 // @bun
+import {
+  bunSpawn
+} from "./index-r3mvsbtq.js";
 import {
   init_git_executable,
   resolveGitExecutable
 } from "./index-9e6fdz2h.js";
-import {
-  bunSpawn
-} from "./index-r3mvsbtq.js";
 
 // src/background/workspace-snapshot.ts
 import * as child_process from "child_process";