opencode-swarm 7.152.0 → 7.153.0

package/dist/hooks/guardrails/tool-before.d.ts

@@ -38,6 +38,8 @@ export interface ToolBeforeContext {
     worktreeBaseDirOverrides?: string[];
     /** Sandbox executor getter seam for tests and platform-specific overrides. */
     getSandboxExecutor: typeof import('../../sandbox/executor').getExecutor;
+    /** Sandbox capability assessment seam for deterministic cross-platform tests. */
+    assessSandboxEnforcement: typeof import('../../sandbox/executor').assessSandboxEnforcement;
     /** Hold exact child-write provenance until the matching after-hook succeeds. */
     rememberReviewerScopeWrite?: (input: {
         callID: string;
@@ -49,6 +51,8 @@ export interface ToolBeforeContext {
     /** Snapshot an exact authorized write for success-only lease renewal. */
     rememberScopeLeaseCandidate?: (input: ScopeLeaseCandidateInput) => void;
 }
+/** @internal test seam */
+export declare function _resetSandboxUnavailableWarningState(): void;
 /**
  * Creates a toolBefore handler with the given shared context.
  *

package/dist/hooks/pr-workflow-gate.d.ts

@@ -784,6 +784,8 @@ export declare class PrReviewResilienceRetryExhaustedError extends Error {
     readonly code: "PR_REVIEW_RESILIENCE_RETRY_EXHAUSTED";
     constructor(message: string);
 }
+declare function snapshotPrReviewResiliencePolicy(policy?: PrReviewResilienceConfig): PrReviewResiliencePolicyRecord;
+declare function effectivePrReviewResiliencePolicy(state: PrWorkflowGateState, requestedPolicy?: PrReviewResilienceConfig): PrReviewResiliencePolicyRecord;
 declare function classifyTerminalFailureSignature(record: BackgroundDelegationRecord): string | null;
 interface EnforcePrReviewBaseDimensionsOptions {
     batchId: string;
@@ -969,6 +971,16 @@ export declare const _test_exports: {
      * shortening the threshold, not by waiting minutes.
      */
     pendingLaneLivenessThresholdMs: number;
+    /**
+     * Issue #2381: exposed so the staged-resilience DEFAULT can be pinned
+     * directly. This resolution path is reached whenever a gate state carries no
+     * recorded policy and no policy is supplied, and it previously hardcoded
+     * `enabled: true`; the default flip is only real if this agrees with
+     * `DEFAULT_PR_REVIEW_RESILIENCE_CONFIG`. Pure functions of their arguments,
+     * so `_test_exports` is the right seam (no `mock.module` needed).
+     */
+    effectivePrReviewResiliencePolicy: typeof effectivePrReviewResiliencePolicy;
+    snapshotPrReviewResiliencePolicy: typeof snapshotPrReviewResiliencePolicy;
     resolveCurrentGitHead: typeof resolveCurrentGitHead;
     resolveCurrentGitHeadAsync: typeof resolveCurrentGitHeadAsync;
     resolveCurrentUpstreamPushTarget: typeof resolveCurrentUpstreamPushTarget;

package/dist/hooks/scope-guard.d.ts

@@ -19,12 +19,10 @@ import { resolveWriteTargets } from './write-target-resolver';
 export interface ScopeGuardConfig {
     /** Whether scope guard is enabled (default: true) */
     enabled: boolean;
-    /** Whether to skip in turbo mode (default: false — NOT skippable by design) */
-    skip_in_turbo: boolean;
 }
 /**
  * Creates the scope-guard hook that blocks out-of-scope writes.
- * @param config - ScopeGuardConfig (enabled, skip_in_turbo)
+ * @param config - ScopeGuardConfig. Scope enforcement is never skipped in Turbo.
  * @param fallbackDirectory - The plugin-root directory (`ctx.directory`). Used
  *   ONLY as the fallback for sessions with no recorded workspace root. Issue
  *   #2002: this hook is constructed once per plugin instance and serves every