opencode-swarm 7.148.5 → 7.149.1

package/dist/hooks/full-auto-delegation.d.ts

@@ -1,3 +1,27 @@
+/**
+ * Full-Auto v2 subagent outbound and return checks.
+ *
+ * Composable hook that fires alongside the existing delegation-gate hooks.
+ * It does not replace delegation-gate; it adds Full-Auto-specific verification
+ * for outbound Task delegations and post-return safety review.
+ *
+ * Outbound (tool.execute.before, only for Task tool):
+ *   - Require valid `subagent_type` matching a registered swarm role.
+ *   - For coder delegation, require declared scope (warning if missing).
+ *   - Reject delegation that targets a clearly invalid agent or that requests
+ *     a write to a protected path inside the prompt body.
+ *   - Out-of-policy outbound delegations escalate to the critic via the
+ *     permission hook's escalate_critic path; this hook itself records
+ *     advisories and structured denials for the most clear-cut cases.
+ *
+ * Return (tool.execute.after, only for Task tool):
+ *   - Inspect subagent result text for skipped tests, tool timeouts, scope
+ *     changes, "instructions from external content", missing evidence,
+ *     and out-of-scope file generation.
+ *   - On detected return warnings, write a `full_auto_subagent_warning`
+ *     event and increment a per-session counter so the cadence/escalation
+ *     layer can react.
+ */
 import type { PluginConfig } from '../config';
 export interface FullAutoDelegationHookOptions {
     config: PluginConfig;

package/dist/hooks/full-auto-input-probe.d.ts

@@ -1,3 +1,14 @@
+/**
+ * Full-Auto v2 input-probe hook (tool.execute.after).
+ *
+ * Inspects tool output for prompt-injection / credential-request /
+ * exfiltration / guardrail-disable shapes and stores a warning on the
+ * durable Full-Auto run state. The warning is consulted by the permission
+ * hook on the next risky action — when both fire, the action escalates to
+ * the critic instead of using the deterministic policy.
+ *
+ * The probe never blocks tool execution by itself.
+ */
 import type { PluginConfig } from '../config';
 export interface FullAutoInputProbeHookOptions {
     config: PluginConfig;

package/dist/hooks/pr-workflow-gate.d.ts

@@ -2,7 +2,7 @@ import * as fsp from 'node:fs/promises';
 import { z } from 'zod';
 import { type CandidateSeverity, type FindingsSeverity, type RowFormatFamily } from '../background/candidate-contract.js';
 import { type LaneOutputArtifact } from '../background/lane-output-store.js';
-import { type BackgroundDelegationRecord, type BackgroundDelegationResult, type BackgroundDelegationWorkflowLaneRecovery, findByBatchId, sweepStaleDelegations } from '../background/pending-delegations.js';
+import { type BackgroundDelegationRecord, type BackgroundDelegationResult, type BackgroundDelegationWorkflowLaneFailureClass, type BackgroundDelegationWorkflowLaneRecovery, findByBatchId, sweepStaleDelegations } from '../background/pending-delegations.js';
 import { type PrReviewInlineTriggerRow } from '../background/pr-review-trigger-contract.js';
 import { type RevisionDigestResult, resolveCommitCountSince, resolveCommitCountSinceAsync, resolveCurrentGitHead, resolveCurrentGitHeadAsync, resolveCurrentUpstreamPushTarget, resolveCurrentUpstreamPushTargetAsync, resolveCurrentUpstreamRemoteRef, resolveExactRemoteBranchHead, resolveExactRemoteBranchHeadAsync, resolveIsExactSingleChildCommit, resolveIsExactSingleChildCommitAsync, resolveIsWorkingTreeClean, resolveIsWorkingTreeCleanAsync, resolvePrReviewDiffStats, resolvePrReviewDiffStatsAsync, resolvePrWorkflowRevisionDigest, resolvePrWorkflowRevisionDigestDetailed, resolveRemoteRefsContainingHead, resolveRemoteRefsContainingHeadAsync } from '../background/workspace-snapshot.js';
 import { type PrReviewResilienceConfig } from '../config/schema.js';
@@ -349,6 +349,8 @@ export interface PrWorkflowGateState {
     /** @deprecated Compatibility projection of the most recent base dispatch. */
     prReviewBaseDispatch?: PrReviewBaseDispatchRecord;
     prReviewResilience?: PrReviewResilienceStateRecord;
+    /** Dimensions that consumed their one contract-only retry; top-level for rollback readability. */
+    prReviewContractRetryDimensions?: PrReviewBaseDimensionId[];
     /** Canonical ordered semantic ledger frozen by the first micro dispatch. */
     prReviewTriggerLedger?: PrReviewInlineTriggerRow[];
     prReviewTriggerEvalPath?: string;
@@ -393,6 +395,9 @@ export interface PrWorkflowGateState {
     prReviewArtifactRunId?: string;
     prReviewFindingsPath?: string;
     prReviewArtifactBoundaries?: PrReviewArtifactBoundary[];
+    prReviewPartialBaseCoverage?: PrReviewPartialBaseCoverageRecord;
+    prReviewCoverageDisclosurePath?: string;
+    prReviewCoverageDisclosureDigest?: string;
     prReviewHandoffPath?: string;
     prReviewHandoffRequired?: boolean;
     checkoutRecovery?: PrWorkflowCheckoutRecoveryRecord;
@@ -432,6 +437,15 @@ export interface PrWorkflowGateState {
     prFeedbackRebindCount?: number;
     prFeedbackScopes?: PrFeedbackScopeDeclarationRecord[];
 }
+export interface PrReviewPartialBaseCoverageRecord {
+    runId: string;
+    prHeadSha: string;
+    revisionDigest: string;
+    missingDimension: PrReviewBaseDimensionId;
+    failureClass: BackgroundDelegationWorkflowLaneFailureClass;
+    terminalEventId: string;
+    admittedAt: string;
+}
 /**
  * Bound on the PR_FEEDBACK inventory-amendment audit ledger (issue #2242 R3).
  *
@@ -536,7 +550,7 @@ declare function probeAlivePrWorkflowLaneSessions(directory: string, records: Ba
     alive: Set<string>;
     degradedReason?: PrWorkflowLaneProbeDegradedReason;
 }>;
-/** One still-pending pr-review lane's host liveness reading (issue #2280 Part B). */
+/** One still-pending lane's host liveness reading (issue #2280 Part B). */
 export interface PrWorkflowPendingLaneLiveness {
     laneId: string;
     /**
@@ -568,7 +582,7 @@ export interface PrWorkflowPendingLaneLiveness {
     degradedReason?: PrWorkflowLaneProbeDegradedReason | 'advisory-unavailable';
 }
 /**
- * Bounded, fail-open liveness advisory for still-pending pr-review lanes
+ * Bounded, fail-open liveness advisory for still-pending async lanes
  * (issue #2280 Part B).
  *
  * ALERT-ONLY, by design: this reads host session status and reports it; it
@@ -770,18 +784,32 @@ export declare class PrReviewResilienceRetryExhaustedError extends Error {
     readonly code: "PR_REVIEW_RESILIENCE_RETRY_EXHAUSTED";
     constructor(message: string);
 }
+declare function classifyTerminalFailureSignature(record: BackgroundDelegationRecord): string | null;
 interface EnforcePrReviewBaseDimensionsOptions {
     batchId: string;
     prHeadSha: string;
     revisionDigest?: string;
+    prReviewContractRetry?: boolean;
     prReviewWaveStage?: 'canary' | 'fanout';
     prReviewWaveAttempt?: 0 | 1 | 2;
     prReviewResiliencePolicy?: PrReviewResilienceConfig;
 }
 export declare function enforcePrReviewBaseDimensions(directory: string, sessionID: string, lanes: readonly PrWorkflowLaneSpec[], options: EnforcePrReviewBaseDimensionsOptions): Promise<PrWorkflowGateState>;
-export declare function rollbackPrReviewBaseAdmissionIfUnlaunched(directory: string, sessionID: string, batchId: string): Promise<boolean>;
+export declare function rollbackPrReviewBaseAdmissionIfUnlaunched(directory: string, sessionID: string, batchId: string, contractRetry?: boolean): Promise<boolean>;
 declare function minimumConsolidatedLaneCover(sets: ReadonlyArray<readonly string[]>): number;
-/** Validate durable exact-six PR review evidence across all base and retry batches. */
+export declare function admitPrReviewPartialBaseCoverage(directory: string, sessionID: string, runId: string, missingDimension: PrReviewBaseDimensionId): Promise<PrWorkflowGateState>;
+/**
+ * Undo a newly admitted partial-base disclosure when the findings checkpoint
+ * cannot be completed. The compare-and-clear checks keep a stale writer from
+ * deleting a disclosure that another writer has already committed.
+ */
+export declare function rollbackPrReviewPartialBaseCoverageAdmission(directory: string, sessionID: string, options: {
+    runId: string;
+    boundary: 'post_explorer' | 'post_reviewer' | 'post_critic';
+    relativePath: string;
+    digest: string;
+}): Promise<boolean>;
+/** Validate durable exact-six or explicitly admitted N-1 PR review evidence. */
 export declare function assertPrReviewBaseCoverageSettled(directory: string, sessionID: string, gateContext?: PrReviewGateContext): Promise<PrWorkflowGateState>;
 /** Persist a council/reviewer/critic validation batch before launch. */
 export declare function recordPrReviewValidationBatch(directory: string, sessionID: string, phase: PrReviewValidationPhase, lanes: readonly PrWorkflowLaneSpec[], options: {
@@ -835,7 +863,9 @@ export declare function resolvePrReviewWriterRunId(directory: string, sessionID:
 export declare function markPrReviewTriggerEvaluationComplete(directory: string, sessionID: string, runId: string, artifactPath: string): Promise<PrWorkflowGateState>;
 /** Freeze one exact inline trigger ledger across every micro dispatch. */
 export declare function bindPrReviewTriggerLedger(directory: string, sessionID: string, input: unknown): Promise<PrWorkflowGateState>;
-export declare function assertPrReviewArtifactBoundary(directory: string, sessionID: string, runId: string, boundary: PrReviewArtifactBoundary, findingIds: string[]): Promise<PrWorkflowGateState>;
+export declare function assertPrReviewArtifactBoundary(directory: string, sessionID: string, runId: string, boundary: PrReviewArtifactBoundary, findingIds: string[], options?: {
+    skipBaseCoverage?: boolean;
+}): Promise<PrWorkflowGateState>;
 /**
  * Artifact records are a projection of lane receipts, never a caller-controlled
  * replacement for them. Keep their workflow status/action aligned with the
@@ -871,6 +901,7 @@ export declare function enforcePrWorkflowToolBefore(directory: string, sessionID
 /** Validate the terminal PR workflow contract before removing its durable gate. */
 export declare function completePrWorkflow(directory: string, sessionID: string, expectedMode: PrWorkflowMode, prHeadSha: string): Promise<PrWorkflowCompletionStatus>;
 export declare const _test_exports: {
+    classifyTerminalFailureSignature: typeof classifyTerminalFailureSignature;
     minimumConsolidatedLaneCover: typeof minimumConsolidatedLaneCover;
     analyzePrReviewBatchRecordIntegrity: typeof analyzePrReviewBatchRecordIntegrity;
     MAX_COVER_UNIVERSE_BITS: number;

package/dist/hooks/steering-consumed.d.ts

@@ -2,10 +2,17 @@
  * Steering consumed hook for OpenCode Swarm
  *
  * Provides mechanisms for recording and tracking steering directive consumption.
- * Writes steering-consumed events to .swarm/events.jsonl for health check verification.
+ * Writes steering-consumed events to the core event store for health check
+ * verification.
+ *
+ * ISSUE #2039: the reconciliation read is now the bounded core event window
+ * (manifest-stripped, hard read bound) instead of the whole file. Directives
+ * issued before the retained window cannot be reconciled by design; the
+ * window's coverage is observable via the core event store (diagnose Check E
+ * discloses it).
  */
 /**
- * Event written to .swarm/events.jsonl when a steering directive is consumed
+ * Event written when a steering directive is consumed
  */
 export interface SteeringConsumedEvent {
     type: 'steering-consumed';
@@ -13,7 +20,7 @@ export interface SteeringConsumedEvent {
     timestamp: string;
 }
 /**
- * Records a steering-consumed event to the events.jsonl file.
+ * Records a steering-consumed event to the core event store.
  * Synchronous function that appends a single JSON line.
  *
  * @param directory - The project directory containing the .swarm folder
@@ -22,7 +29,8 @@ export interface SteeringConsumedEvent {
 export declare function recordSteeringConsumed(directory: string, directiveId: string): void;
 /**
  * Creates a hook that records steering-consumed events for any unconsumed directives.
- * Reads events.jsonl to find steering-directive events without matching consumed events.
+ * Reads the bounded core event window to find steering-directive events without
+ * matching consumed events (issue #2039).
  *
  * @param directory - The project directory containing the .swarm folder
  * @returns A fire-and-forget hook function