opencode-swarm 7.157.0 → 7.158.0

package/.opencode/skills/swarm-pr-review/SKILL.md

@@ -142,11 +142,11 @@ ordering, vocabulary, or schema.
   `test-infrastructure`, `ui-accessibility-i18n`, `privacy-observability`,
   `generated-provenance`, `unclassified-risk`.
 - Base candidate header:
-  `[CANDIDATE] | candidate_id | lane | severity | category | file:line | claim | evidence_summary | impact_context | confidence`
+  `[CANDIDATE] | candidate_id | lane | severity | category | file:line | claim | evidence_summary | impact_context | confidence | risk_impact | risk_tags`
 - Base clean attestation:
   `[CLEAN] | lane | coverage_scope | evidence`
 - Micro/council candidate header:
-  `[CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence`
+  `[CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence | risk_impact | risk_tags`
 - Micro/council clean attestation:
   `[CLEAN] | micro_lane | coverage_scope | evidence`
 - Severity is exactly `INFO | LOW | MEDIUM | HIGH | CRITICAL`; confidence is
@@ -972,14 +972,9 @@ Before Phase 4 or synthesis, all base lanes must be settled. `dispatch_lanes_asy
 For ANY lane that failed (either mode):
 1. **Retry** (max 2 attempts after the initial attempt) with materially different parameters — different session or prompt decomposition, while preserving the required structured async mode and exact head provenance.
 2. If a base lane fails under Profile A, retry only the unresolved `workflow_lane` identifiers with `dispatch_lanes_async`, `mode: "swarm-pr-review:base"`, the same exact `pr_head_sha`, explorer agents, and the staged-resilience fields when that policy is enabled: a singleton `pr_review_wave_stage: "canary"` first, then a matching `"fanout"` batch only for the remaining unresolved obligations. The durable gate joins successful provenance across the initial wave and retry batches, carries unresolved obligations forward attempt by attempt, and rejects typed `retry_exhausted` or `circuit_open` outcomes before any new lane is launched. While that controller is active, blocking `dispatch_lanes` and direct Task dispatch are not equivalent because they cannot satisfy the structured provenance gate. Under Profiles B/C, retry only the failed `workflow_lane` identifiers with a fresh subagent or pass, the same exact `pr_head_sha`, and a materially different prompt decomposition.
-3. If no equivalent alternative can be verified, **STOP and surface the lane failure to the user as BLOCKED** with the lane id, scope, failure mode, retry attempts, and why equivalence could not be proven. Do not present partial findings, do not issue a review verdict, and do not synthesize from successful lanes. A low-quality partial review is worse than no review.
-4. Under Profile A: After the second failed retry, collect every lane to a
-   terminal state, do not probe downstream writers or micro lanes, call
-   `abort_pr_workflow` with `mode: "PR_REVIEW"`, `kind: "recovery"`, and a
-   non-empty one-line `reason` naming the failed lane and exhausted retries.
-   Then call `prepare_pr_workflow_checkout` with `operation: "restore"`.
-   Report the preserved failure only after the gate is cleared and the checkout
-   restoration either succeeds or returns a concrete manual-recovery diagnostic.
+3. If no equivalent alternative can be verified AND every launched lane is terminal or explicitly cancelled, **settle N-of-6 truthfully (issue #2383)** instead of discarding validated work: admit the terminal settlement with `write_pr_review_artifact` (`kind: "findings"`, `boundary: "post_explorer"`, the sentinel `CLEAN-REVIEW` record when no candidates exist, and `partial_base_coverage: { unresolved_dimensions: [<exactly the dimensions that are not covered>] }`), run the remaining phases over the covered dimensions' findings, and complete with `complete_pr_workflow` carrying the verdict the settlement allows. NEVER fabricate coverage, NEVER present an unresolved dimension as reviewed, and NEVER let a partial report approve.
+4. **Terminal report kinds (issue #2383):** all six dimensions covered → `COMPLETE` (verdict may be APPROVE, REQUEST_CHANGES, or INCOMPLETE); at least one covered → `PARTIAL` (verdict must be REQUEST_CHANGES or INCOMPLETE; validated findings from covered dimensions remain publishable); zero covered → `NO_COVERAGE` (skip the findings ladder entirely, call `complete_pr_workflow` with `report_verdict: "INCOMPLETE"` directly — the completion returns a truthful operational report with per-dimension reasons and never claims a code-quality review). A still-live lane blocks settlement: poll, cancel explicitly with `cancel_pending`, or let the presumed-stale sweep settle it first.
+5. Under Profile A, when the bind/checkout path itself is genuinely unreachable or the workflow is publication-armed and exact publication cannot proceed, use the bounded recovery exits: `abort_pr_workflow` with `mode: "PR_REVIEW"`, `kind: "recovery"`, and a non-empty one-line `reason` for an unrecoverable unbound/bound gate, or `kind: "armed_recovery"` (issue #2383) for a publication-armed wedge — then `prepare_pr_workflow_checkout` with `operation: "restore"`. Abort remains a recovery tool for the genuinely unrecoverable, never a shortcut past a settleable coverage obligation.
 
 ### Contract-failure diagnosis and recovery
 
@@ -1109,7 +1104,7 @@ The fence below is documentation formatting only. Emit the header and all
 machine-readable rows as unfenced plain text; do not emit the backticks.
 
 ```text
-[CANDIDATE] | candidate_id | lane | severity | category | file:line | claim | evidence_summary | impact_context | confidence
+[CANDIDATE] | candidate_id | lane | severity | category | file:line | claim | evidence_summary | impact_context | confidence | risk_impact | risk_tags
 ```
 
 Profile A stores the full assistant transcript, so earlier unmarked progress
@@ -1312,7 +1307,7 @@ The fence below is documentation formatting only. Emit the header and all
 machine-readable rows as unfenced plain text; do not emit the backticks.
 
 ```text
-[CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence
+[CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence | risk_impact | risk_tags
 [CLEAN] | micro_lane | coverage_scope | evidence
 ```
 
@@ -1443,7 +1438,7 @@ For each candidate, the reviewer must determine:
 Reviewer output format:
 
 ```text
-[REVIEWED] | item_id | classification | evidence_type | severity | introduced_by_pr | file:line | rationale | probe | reviewer_notes
+[REVIEWED] | item_id | classification | evidence_type | severity | introduced_by_pr | file:line | rationale | probe | reviewer_notes | risk_impact | risk_tags
 ```
 
 For the mechanically derived `CLEAN-REVIEW` sentinel, use the same exact row
@@ -1486,14 +1481,9 @@ A finding may still be reported without a runnable command if it is structurally
 
 ## Phase 8: Critic Challenge
 
-Route every reviewer-confirmed HIGH or CRITICAL finding to a critic. Also route borderline MEDIUM findings when they involve security, state machines, write authority, evidence integrity, model/tool permissions, git safety, or config ratchets.
+Route reviewer-confirmed CRITICAL and HIGH findings to a critic always. Route a MEDIUM finding only when its typed risk metadata says so (issue #2383): `risk_impact: "HIGH_IMPACT"`, or any `risk_tags` entry (`SECURITY`, `AUTH_PERMISSIONS`, `STATE_INTEGRITY`, `WRITE_PATH`, `EVIDENCE_INTEGRITY`, `GIT`, `CONFIGURATION`). An ordinary MEDIUM (`risk_impact: "ORDINARY"`, no tags) is NOT critic-routed. `risk_impact: "UNKNOWN"` always routes to critic — never guess impact you could not assess, and never let file paths, dimension names, or prose override the typed `risk_impact`/`risk_tags` the reviewer row carries.
 
-The controller conservatively derives critic ownership from semantic reviewer
-rows: every reviewer-confirmed CRITICAL, HIGH, or MEDIUM item is mandatory
-critic inventory. This intentionally over-routes ordinary MEDIUM items because
-machine enforcement cannot safely infer every repository-specific trust
-boundary from prose. Completion is blocked until that exact derived inventory
-has valid critic rows.
+The controller derives critic ownership from the typed reviewer rows through the one shared production predicate; every newly written CONFIRMED finding must supply `risk_impact` and `risk_tags` (the write boundary rejects a CONFIRMED record without them, and unknown tag values fail the row). Completion is blocked until that exact derived inventory has valid critic rows.
 
 Reviewer and critic settlement MUST compose successful verdicts item by item
 across complementary partial batches. The newest successful claim wins each
@@ -1694,7 +1684,7 @@ When triggered:
 2. After the default base-dimension and risk-family coverage is complete, launch all supplementary council agents. Under Profile A, use one `dispatch_lanes_async` call with `mode: "swarm-pr-review:council"`, the same exact `pr_head_sha`, and one unique `workflow_lane` per council member; continue independent context preparation while they run, polling with `collect_lane_results` (without `wait`) to process settled agents incrementally, and use `wait: true` only when no independent work remains. All agents must be settled and their candidates added to the ledger before reviewer classification; under Profile A the runtime enforces this join barrier, and blocking, sequential, or direct-Task fallback is not equivalent to the structured council dispatch — bypassing the active controller is `BLOCKED`. Under Profile B, dispatch council members as parallel subagents with the same marker contract and settle them all before reviewer classification; under Profile C, run each council lens as a separate sequential pass.
 3. Each council agent assumes all work is wrong until code evidence proves otherwise.
 4. Each agent hunts within its lane only.
-5. Council uses the micro-lane row family: `[CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence`. Emit one row per `EVIDENCE_FOUND` or `SUSPICIOUS` claim, or a fully populated `[CLEAN] | micro_lane | coverage_scope | evidence` row when no candidate survives. Put the exact council `workflow_lane` value in the `micro_lane` data field. Council prose without one of those markers does not settle the lane.
+5. Council uses the micro-lane row family: `[CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence | risk_impact | risk_tags`. Emit one row per `EVIDENCE_FOUND` or `SUSPICIOUS` claim, or a fully populated `[CLEAN] | micro_lane | coverage_scope | evidence` row when no candidate survives. Put the exact council `workflow_lane` value in the `micro_lane` data field. Council prose without one of those markers does not settle the lane.
 6. Agents must not return `CONFIRMED`, `DISPROVED`, or final severity; candidate severity remains provisional until reviewer classification.
 7. The independent reviewer then classifies every council candidate as `CONFIRMED`, `DISPROVED`, `UNVERIFIED`, or `PRE_EXISTING`.
 8. Apply critic challenge to reviewer-confirmed HIGH/CRITICAL or borderline findings.
@@ -1770,7 +1760,7 @@ Before writing the final output, print this checklist with filled values. Every
 [VALIDATION] repo graph / impact cone source: ___
 [VALIDATION] deterministic signals ingested: ___
 [VALIDATION] lane dispatch mechanism: controller / native subagents / sequential passes — ___
-[VALIDATION] base dimensions covered with attestation: ___ / 6 (lanes dispatched: ___)
+[VALIDATION] terminal coverage: COMPLETE (6/6) OR PARTIAL (___/6 + unresolved dimensions settled) OR NO_COVERAGE (0/6) (issue #2383; lanes dispatched: ___)
 [VALIDATION] base explorer lanes returned: ___ / ___
 [VALIDATION] micro risk families evaluated and attested: ___ / 11 OR BLOCKED — <missing rows> (micro lanes dispatched: ___)
 [VALIDATION] Swarm verifier routing used: ___
@@ -1783,7 +1773,7 @@ Before writing the final output, print this checklist with filled values. Every
 [VALIDATION] findings marked PRE_EXISTING: ___
 [VALIDATION] findings left UNVERIFIED: ___
 [VALIDATION] findings escalated to critic: ___
-[VALIDATION] critic dispatched: ___ OR "SKIPPED — no reviewer-confirmed HIGH/CRITICAL or borderline findings"
+[VALIDATION] critic dispatched: ___ OR "SKIPPED — no typed critic-routed finding (CRITICAL/HIGH, MEDIUM+HIGH_IMPACT, MEDIUM+risk_tags, or UNKNOWN)"
 [VALIDATION] critic returned: ___ OR "N/A"
 [VALIDATION] findings upheld by critic: ___
 [VALIDATION] findings downgraded by critic: ___
@@ -1922,8 +1912,8 @@ For reviewer, critic, and explorer prompt templates, read `references/prompt-tem
 
 Under Profile A, after metrics and durable review artifacts are complete, but
 before emitting the user-facing final report, call `complete_pr_workflow` with
-mode `PR_REVIEW` and the same exact
-`pr_head_sha`. The tool refuses to clear the session gate while required base,
+mode `PR_REVIEW`, the same exact
+`pr_head_sha`, and the terminal `report_verdict` the coverage kind allows (issue #2383). The tool refuses to clear the session gate while required base,
 trigger, declared reviewer/critic, or open-lane obligations remain incomplete.
 While the gate remains active, the runtime prepends a workflow-active banner
 to the first substantive text part of each architect message (the model's text
@@ -2015,7 +2005,15 @@ the frozen ledger before re-binding.
 Abort is a recovery tool, not a coverage shortcut. Use it only when the
 bind/checkout path is genuinely unreachable or bounded structural recovery or
 retries are genuinely exhausted; never use it to skip a coverage obligation
-that is still recoverable, merely expensive, or inconvenient.
+that is still recoverable, merely expensive, or inconvenient. When lanes have
+settled short of full coverage, the terminal N-of-6 settlement (issue #2383)
+is the truthful exit — not abort. For a publication-armed workflow whose exact
+publication cannot proceed, `abort_pr_workflow` with `kind: "armed_recovery"`
+(plus the armed recovery identity fields from `pr_workflow_status`) is the
+audited escape: it settles lanes, invalidates the staged publication
+authorization, preserves validated work, and leaves a recoverable terminal
+state; exact approved publication via `complete_pr_workflow` remains available
+and preferred whenever it can proceed.
 
 On Profiles B/C there is no durable gate or auto-resume loop to clear: if the
 head bind is genuinely unreachable or bounded lane recovery is exhausted,

package/.opencode/skills/swarm-pr-review/references/findings-persistence-contract.md

@@ -5,7 +5,7 @@
 The following machine-readable block mirrors `src/background/pr-review-contract.ts`. CI parses it structurally; changing a skill dialect without the executable schema (or vice versa) fails the contract test.
 
 <!-- PR_REVIEW_EXECUTABLE_DIALECT_START -->
-reviewer_fields: marker | item_id | classification | evidence_type | severity | introduced_by_pr | file:line | rationale | probe | reviewer_notes
+reviewer_fields: marker | item_id | classification | evidence_type | severity | introduced_by_pr | file:line | rationale | probe | reviewer_notes | risk_impact | risk_tags
 reviewer_classifications: CONFIRMED | DISPROVED | UNVERIFIED | PRE_EXISTING
 reviewer_evidence_types: STRUCTURALLY_PROVEN | EXECUTION_PROVEN | STATIC_TRACE_PROVEN | PLAUSIBLE_BUT_UNVERIFIED
 critic_fields: marker | item_id | status | severity | rationale | required_change
@@ -118,8 +118,16 @@ satisfy two:
 | `post_critic` | not critic-routed | the reviewer `final_severity` |
 | `post_critic` | critic-routed | the **critic** `final_severity` — the final word |
 
-A record is critic-routed when the reviewer classification is `CONFIRMED` and the
-reviewer severity is `CRITICAL`, `HIGH`, or `MEDIUM`.
+A record is critic-routed by the shared typed predicate (issue #2383): reviewer
+classification `CONFIRMED` AND one of — severity `CRITICAL`/`HIGH`; severity
+`MEDIUM` with `risk_impact: "HIGH_IMPACT"`; severity `MEDIUM` with any
+`risk_tags` entry (`SECURITY`, `AUTH_PERMISSIONS`, `STATE_INTEGRITY`,
+`WRITE_PATH`, `EVIDENCE_INTEGRITY`, `GIT`, `CONFIGURATION`); or
+`risk_impact: "UNKNOWN"`. An `ORDINARY` MEDIUM with no tags is NOT
+critic-routed; `LOW` follows the existing no-critic policy once its metadata
+is known. Every CONFIRMED finding record must carry `risk_impact` and
+`risk_tags`; unknown tag values are rejected, and no path- or dimension-based
+inference ever substitutes for the typed values.
 
 Because the critic is authoritative for critic-routed records, a **downgrade is
 encodable verbatim**: reviewer `MEDIUM` + critic `LOW` persists as

package/.opencode/skills/swarm-pr-review/references/parser-dry-run.md

@@ -235,7 +235,7 @@ Candidates (Chunk A — src/utils/):
 - C-001 | HIGH | null-safety | src/utils/cache.ts:142 | Uncached getter may return undefined on cold start
 
 For each candidate, return:
-[REVIEWED] | item_id | classification | evidence_type | severity | introduced_by_pr | file:line | rationale | probe | reviewer_notes
+[REVIEWED] | item_id | classification | evidence_type | severity | introduced_by_pr | file:line | rationale | probe | reviewer_notes | risk_impact | risk_tags
 
 You must check caller context, reachability, schema/middleware/framework mitigations, state-machine constraints, test coverage, PR-introducedness, and severity.
 

package/.opencode/skills/swarm-pr-review/references/prompt-templates.md

@@ -20,7 +20,7 @@ Candidates:
 - ...
 
 For each candidate, return:
-[REVIEWED] | item_id | classification | evidence_type | severity | introduced_by_pr | file:line | rationale | probe | reviewer_notes
+[REVIEWED] | item_id | classification | evidence_type | severity | introduced_by_pr | file:line | rationale | probe | reviewer_notes | risk_impact | risk_tags
 
 Escape free-text fields with the executable verdict codec: `\\` (backslash),
 `\|` (pipe), `\n` (newline), and `\r` (carriage return). Do not copy the
@@ -97,7 +97,7 @@ You must inspect or mark unavailable:
 8. the exact `base_sha...pr_head_sha` merge-base range and both endpoint revisions.
 
 Return:
-[CANDIDATE] | candidate_id | lane | severity | category | file:line | claim | evidence_summary | impact_context | confidence
+[CANDIDATE] | candidate_id | lane | severity | category | file:line | claim | evidence_summary | impact_context | confidence | risk_impact | risk_tags
 
 Emit the marker-bearing header once, then unprefixed data rows.
 For a clean base lane, emit `[CLEAN] | lane | coverage_scope | evidence`.
@@ -138,7 +138,7 @@ You must inspect or mark unavailable:
 8. the exact `base_sha...pr_head_sha` merge-base range and both endpoint revisions.
 
 Return:
-[CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence
+[CANDIDATE] | candidate_id | micro_lane | severity | category | file:line | claim | invariant_violated | evidence_summary | confidence | risk_impact | risk_tags
 
 Emit the marker-bearing header once, then unprefixed data rows.
 For a clean micro-lane or council lane, emit `[CLEAN] | micro_lane | coverage_scope | evidence`.

package/dist/background/candidate-contract.d.ts

@@ -1,3 +1,6 @@
+import { type PrReviewRiskImpact, type PrReviewRiskTag } from './pr-review-contract.js';
+export type { PrReviewRiskImpact, PrReviewRiskTag };
+export { PR_REVIEW_RISK_IMPACTS, PR_REVIEW_RISK_TAGS, parsePrReviewRiskTagsField, } from './pr-review-contract.js';
 export declare const CANDIDATE_SEVERITIES: readonly ["INFO", "LOW", "MEDIUM", "HIGH", "CRITICAL"];
 export type CandidateSeverity = (typeof CANDIDATE_SEVERITIES)[number];
 /**
@@ -23,15 +26,29 @@ export type FindingsSeverity = (typeof FINDINGS_SEVERITIES)[number];
 export declare const CANDIDATE_CONFIDENCES: readonly ["HIGH", "MEDIUM", "LOW"];
 export type CandidateConfidence = (typeof CANDIDATE_CONFIDENCES)[number];
 export type RowFormatFamily = 'base_explorer' | 'micro_lane';
-export declare const CANDIDATE_FIELD_COUNT = 9;
+/**
+ * Canonical candidate row width (issue #2383): the legacy nine fields plus the
+ * two typed risk fields. Lanes emit eleven fields; legacy nine-field rows are
+ * normalized to `UNKNOWN` / no tags at the single parse boundary.
+ */
+export declare const CANDIDATE_FIELD_COUNT = 11;
+/** Row width of pre-#2383 candidate rows, which lack the two risk fields. */
+export declare const CANDIDATE_LEGACY_FIELD_COUNT = 9;
 export declare const CLEAN_FIELD_COUNT = 4;
 export declare const CLEAN_COVERAGE_SCOPE_MIN_CHARS = 12;
 export declare const CLEAN_EVIDENCE_MIN_CHARS = 20;
 export declare const CANDIDATE_DIAGNOSTIC_PREVIEW_CHARS = 160;
 export declare const CANDIDATE_FIELDS: {
-    readonly base_explorer: readonly ["candidate_id", "lane", "severity", "category", "file_line", "claim", "evidence_summary", "impact_context", "confidence"];
-    readonly micro_lane: readonly ["candidate_id", "micro_lane", "severity", "category", "file_line", "claim", "invariant_violated", "evidence_summary", "confidence"];
+    readonly base_explorer: readonly ["candidate_id", "lane", "severity", "category", "file_line", "claim", "evidence_summary", "impact_context", "confidence", "risk_impact", "risk_tags"];
+    readonly micro_lane: readonly ["candidate_id", "micro_lane", "severity", "category", "file_line", "claim", "invariant_violated", "evidence_summary", "confidence", "risk_impact", "risk_tags"];
 };
+/**
+ * Fields whose presence is enforced by the parser's required-field check.
+ * The two trailing risk fields are deliberately excluded: `risk_tags` may be
+ * legitimately empty, and legacy nine-field rows are normalized to
+ * `UNKNOWN` / no tags before the check runs (issue #2383).
+ */
+export declare const CANDIDATE_REQUIRED_FIELDS: Record<RowFormatFamily, readonly string[]>;
 export declare const CANDIDATE_MARKER: "[CANDIDATE]";
 export declare const CLEAN_MARKER: "[CLEAN]";
 /** Canonical marker-bearing header derived from the parser's field authority. */

package/dist/background/candidate-parser.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { type CandidateArtifactRepairKind, type CandidateConfidence, type CandidateSeverity, type RowFormatFamily, type CleanAttestationRecord as SharedCleanAttestationRecord } from './candidate-contract';
+import { type CandidateArtifactRepairKind, type CandidateConfidence, type CandidateSeverity, type PrReviewRiskImpact, type PrReviewRiskTag, type RowFormatFamily, type CleanAttestationRecord as SharedCleanAttestationRecord } from './candidate-contract';
 declare const ArtifactInputSchema: z.ZodObject<{
     output_ref: z.ZodString;
     batchId: z.ZodString;
@@ -70,6 +70,13 @@ export interface CandidateRecord {
     impact_context: string | null;
     invariant_violated: string | null;
     confidence: CandidateConfidence | null;
+    /**
+     * Typed risk metadata (issue #2383). Advisory at candidate stage — the
+     * reviewer's `[REVIEWED]` row is the authoritative producer for confirmed
+     * findings. Legacy rows parse as `UNKNOWN` / `[]`.
+     */
+    risk_impact: PrReviewRiskImpact | null;
+    risk_tags: PrReviewRiskTag[] | null;
 }
 /** A machine-readable attestation that a complete lane found no candidates. */
 export type CleanAttestationRecord = SharedCleanAttestationRecord;

package/dist/background/pr-review-contract.d.ts

@@ -6,6 +6,25 @@ export declare const PR_REVIEW_CRITIC_STATUSES: readonly ["UPHELD", "DOWNGRADED"
 export declare const PR_REVIEW_FINDING_STATUSES: readonly ["PENDING", "CONFIRMED", "DISPROVED", "PRE_EXISTING"];
 export declare const PR_REVIEW_FINDING_ACTIONS: readonly ["route_to_reviewer", "route_to_critic", "report", "suppress_with_reason", "handoff_to_feedback"];
 export declare const PR_REVIEW_ARTIFACT_BOUNDARIES: readonly ["post_explorer", "post_reviewer", "post_critic"];
+/**
+ * The six canonical PR-review base dimensions (issue #2383).
+ *
+ * Single source of truth: this contract module owns the list; the workflow
+ * gate re-exports it. No other file may define the literal (guarded by a
+ * source-scan test).
+ */
+export declare const PR_REVIEW_BASE_DIMENSION_IDS: readonly ["intent-architecture", "correctness-state", "tests-falsifiability", "security-trust", "reliability-performance", "compatibility-delivery"];
+export type PrReviewBaseDimensionId = (typeof PR_REVIEW_BASE_DIMENSION_IDS)[number];
+/** Typed risk-impact classification for critic routing (issue #2383). */
+export declare const PR_REVIEW_RISK_IMPACTS: readonly ["ORDINARY", "HIGH_IMPACT", "UNKNOWN"];
+export type PrReviewRiskImpact = (typeof PR_REVIEW_RISK_IMPACTS)[number];
+/**
+ * Typed risk tags for critic routing (issue #2383). Presence of ANY tag on a
+ * MEDIUM finding routes it to critic; paths, dimensions, keywords, and prompt
+ * prose may suggest risk to the model but can never override the typed result.
+ */
+export declare const PR_REVIEW_RISK_TAGS: readonly ["SECURITY", "AUTH_PERMISSIONS", "STATE_INTEGRITY", "WRITE_PATH", "EVIDENCE_INTEGRITY", "GIT", "CONFIGURATION"];
+export type PrReviewRiskTag = (typeof PR_REVIEW_RISK_TAGS)[number];
 export declare const PR_REVIEW_CONTRACT_CARD_HEADER = "[PR-REVIEW CONTRACT CARD]";
 export declare const PR_REVIEW_FINDINGS_MAX_BYTES: number;
 export declare const PR_REVIEW_FINDINGS_WRITE_MAX_BYTES: number;
@@ -40,22 +59,69 @@ export declare const PrReviewFindingSchema: z.ZodObject<{
         NONE: "NONE";
     }>>;
     category: z.ZodOptional<z.ZodString>;
+    risk_impact: z.ZodOptional<z.ZodEnum<{
+        ORDINARY: "ORDINARY";
+        HIGH_IMPACT: "HIGH_IMPACT";
+        UNKNOWN: "UNKNOWN";
+    }>>;
+    risk_tags: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        SECURITY: "SECURITY";
+        AUTH_PERMISSIONS: "AUTH_PERMISSIONS";
+        STATE_INTEGRITY: "STATE_INTEGRITY";
+        WRITE_PATH: "WRITE_PATH";
+        EVIDENCE_INTEGRITY: "EVIDENCE_INTEGRITY";
+        GIT: "GIT";
+        CONFIGURATION: "CONFIGURATION";
+    }>>>;
 }, z.core.$strict>;
+export interface PrReviewCriticRoutingInput {
+    classification?: string;
+    severity?: string;
+    risk_impact?: PrReviewRiskImpact;
+    risk_tags?: readonly PrReviewRiskTag[];
+}
+/**
+ * THE shared production critic-routing predicate (issue #2383).
+ *
+ * Exactly one definition, imported by every production consumer (critic
+ * inventory derivation, artifact-record validation, coverage admission).
+ * Inline severity triples are forbidden — a parity/centralization guard test
+ * enforces it. Accepts only the normalized canonical shape:
+ *
+ * - non-CONFIRMED classifications are never critic-routed;
+ * - UNKNOWN/missing/invalid risk metadata routes to critic (fail-safe);
+ * - CRITICAL/HIGH always route to critic;
+ * - MEDIUM routes iff HIGH_IMPACT or at least one risk tag;
+ * - LOW/INFO/NONE follow the existing no-critic policy once metadata is known.
+ *
+ * Paths, dimensions, keywords, and prompt prose may suggest risk to the model
+ * but can never override this typed result.
+ */
+export declare function prReviewFindingRequiresCritic(input: PrReviewCriticRoutingInput): boolean;
 export declare const PrReviewHandoffSchema: z.ZodObject<{
     pr_url: z.ZodString;
     finding_ids: z.ZodArray<z.ZodString>;
     summary: z.ZodString;
     provenance: z.ZodArray<z.ZodString>;
 }, z.core.$strict>;
+/**
+ * Terminal N-of-6 settlement disclosure input (issue #2383).
+ *
+ * The controller declares the set of dimensions it believes are unresolved;
+ * the gate derives each dimension's terminal state from lane evidence and
+ * rejects any declaration that does not exactly match. New writers emit ONLY
+ * this array shape; the persisted disclosure record additionally carries the
+ * gate-derived per-dimension terminal states (versioned v2).
+ */
 export declare const PrReviewPartialBaseCoverageSchema: z.ZodObject<{
-    missing_dimension: z.ZodEnum<{
+    unresolved_dimensions: z.ZodArray<z.ZodEnum<{
         "intent-architecture": "intent-architecture";
         "correctness-state": "correctness-state";
         "tests-falsifiability": "tests-falsifiability";
         "security-trust": "security-trust";
         "reliability-performance": "reliability-performance";
         "compatibility-delivery": "compatibility-delivery";
-    }>;
+    }>>;
 }, z.core.$strict>;
 export declare const WritePrReviewArtifactArgsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"findings">;
@@ -92,16 +158,30 @@ export declare const WritePrReviewArtifactArgsSchema: z.ZodDiscriminatedUnion<[z
             NONE: "NONE";
         }>>;
         category: z.ZodOptional<z.ZodString>;
+        risk_impact: z.ZodOptional<z.ZodEnum<{
+            ORDINARY: "ORDINARY";
+            HIGH_IMPACT: "HIGH_IMPACT";
+            UNKNOWN: "UNKNOWN";
+        }>>;
+        risk_tags: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            SECURITY: "SECURITY";
+            AUTH_PERMISSIONS: "AUTH_PERMISSIONS";
+            STATE_INTEGRITY: "STATE_INTEGRITY";
+            WRITE_PATH: "WRITE_PATH";
+            EVIDENCE_INTEGRITY: "EVIDENCE_INTEGRITY";
+            GIT: "GIT";
+            CONFIGURATION: "CONFIGURATION";
+        }>>>;
     }, z.core.$strict>>;
     partial_base_coverage: z.ZodOptional<z.ZodObject<{
-        missing_dimension: z.ZodEnum<{
+        unresolved_dimensions: z.ZodArray<z.ZodEnum<{
             "intent-architecture": "intent-architecture";
             "correctness-state": "correctness-state";
             "tests-falsifiability": "tests-falsifiability";
             "security-trust": "security-trust";
             "reliability-performance": "reliability-performance";
             "compatibility-delivery": "compatibility-delivery";
-        }>;
+        }>>;
     }, z.core.$strict>>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"handoff">;
@@ -121,6 +201,10 @@ export interface PrReviewVerdictDescriptor {
     fieldRoles: readonly string[];
     schema: z.ZodType<readonly string[]>;
 }
+/** Field count of pre-#2383 reviewer rows, which lack the two risk fields. */
+export declare const PR_REVIEW_REVIEWER_LEGACY_FIELD_COUNT = 10;
+export declare function parsePrReviewRiskTagsField(field: string): PrReviewRiskTag[];
+export declare function encodePrReviewRiskTagsField(tags: readonly PrReviewRiskTag[]): string;
 export declare const PrReviewReviewerVerdictFieldsSchema: z.ZodTuple<[z.ZodLiteral<"[REVIEWED]">, z.ZodString, z.ZodEnum<{
     CONFIRMED: "CONFIRMED";
     DISPROVED: "DISPROVED";
@@ -138,7 +222,11 @@ export declare const PrReviewReviewerVerdictFieldsSchema: z.ZodTuple<[z.ZodLiter
     LOW: "LOW";
     INFO: "INFO";
     NONE: "NONE";
-}>, z.ZodString, z.ZodString, z.ZodString, z.ZodString, z.ZodString], null>;
+}>, z.ZodString, z.ZodString, z.ZodString, z.ZodString, z.ZodString, z.ZodEnum<{
+    ORDINARY: "ORDINARY";
+    HIGH_IMPACT: "HIGH_IMPACT";
+    UNKNOWN: "UNKNOWN";
+}>, z.ZodString], null>;
 export declare const PrReviewCriticVerdictFieldsSchema: z.ZodTuple<[z.ZodLiteral<"[CRITIC]">, z.ZodString, z.ZodEnum<{
     DISPROVED: "DISPROVED";
     UPHELD: "UPHELD";

package/dist/cli/{coder-settlement-dz2x352d.js → coder-settlement-5sexsmqz.js}

@@ -13,23 +13,23 @@ import {
   releaseCoderDispatchOwnership,
   settleCoderDispatch,
   transferCoderSettlementToBackground
-} from "./index-vbqssmbs.js";
-import"./index-dwkrdpz2.js";
-import"./index-61nkp124.js";
-import"./index-p0by16z8.js";
-import"./index-ddszzne4.js";
+} from "./index-c57cyrwn.js";
 import"./index-3f7hqtgg.js";
+import"./index-8fqb0ynp.js";
+import"./index-fwe1wh6r.js";
+import"./index-a1884hh4.js";
+import"./index-ddszzne4.js";
 import"./index-nwkr6tvv.js";
 import"./index-556ja8an.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-9r7gp6cp.js";
-import"./index-zjygnfay.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-xe6zbfps.js";
-import"./index-6sbx96v6.js";
+import"./index-yt75r1er.js";
+import"./index-zjygnfay.js";
+import"./index-h52hs4e9.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/cli/{config-doctor-4jxf9w9e.js → config-doctor-ewn2kw6d.js}

@@ -12,10 +12,10 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-nd22bsnt.js";
+} from "./index-rd324153.js";
 import"./index-z6xqpmqg.js";
-import"./index-4w20thrc.js";
-import"./index-9r7gp6cp.js";
+import"./index-f776m4r5.js";
+import"./index-yt75r1er.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{core-xf2f087t.js → core-72wdmzps.js}

@@ -14,13 +14,13 @@ import {
   resolveWorktreeBaseDir,
   shortenWorktreePath,
   writeLaneProfileToDiskReal
-} from "./index-p0by16z8.js";
+} from "./index-a1884hh4.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-9r7gp6cp.js";
-import"./index-zjygnfay.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
+import"./index-yt75r1er.js";
+import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{curation-policy-72qx868r.js → curation-policy-vn3m5nq2.js}

@@ -4,11 +4,11 @@ import {
   authorizeCuration,
   buildConfigFingerprintInput,
   readCohortConfigFingerprint
-} from "./index-gpf3cjre.js";
+} from "./index-pfnj5pvs.js";
 import"./index-rtry5xyf.js";
-import"./index-b5xm177r.js";
-import"./index-xe6zbfps.js";
-import"./index-6sbx96v6.js";
+import"./index-5zgf140g.js";
+import"./index-h52hs4e9.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/cli/curator-drift-g6w4ga1q.js

@@ -12,8 +12,8 @@ import {
 } from "./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-zjygnfay.js";
 import"./index-4rhhvd1a.js";
+import"./index-zjygnfay.js";
 import {
   invalidateCachedArtifact
 } from "./index-ed5ykebp.js";

package/dist/cli/{curator-pjjw3ja4.js → curator-g06sa98p.js}

@@ -14,59 +14,59 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-gk6wpq41.js";
-import"./index-t0kxka8n.js";
-import"./index-4kd1nqd2.js";
-import"./index-nd22bsnt.js";
-import"./index-93ymj3j5.js";
-import"./index-ngn6jmad.js";
+} from "./index-rac2gkvr.js";
+import"./index-z54qw70y.js";
+import"./index-rc93mm6e.js";
+import"./index-rd324153.js";
+import"./index-bv24pbaj.js";
+import"./index-7s1hmrfh.js";
+import"./index-txdagbh7.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
-import"./index-txdagbh7.js";
-import"./index-g0j2hnse.js";
-import"./index-1dzy1j4v.js";
+import"./index-y3hdwh66.js";
+import"./index-vwx0by4y.js";
+import"./index-5tchehv7.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-91ybfvy2.js";
+import"./index-x4ftmdha.js";
 import"./index-zsrtt42s.js";
-import"./index-vbqssmbs.js";
-import"./index-dwkrdpz2.js";
-import"./index-n6ayyadp.js";
-import"./index-tvtvhjh0.js";
-import"./index-gpf3cjre.js";
+import"./index-c57cyrwn.js";
+import"./index-3f7hqtgg.js";
+import"./index-8fqb0ynp.js";
+import"./index-dmfbmnp7.js";
+import"./index-pfnj5pvs.js";
 import"./index-rtry5xyf.js";
-import"./index-61nkp124.js";
-import"./index-p0by16z8.js";
-import"./index-12e2hztp.js";
+import"./index-fwe1wh6r.js";
+import"./index-a1884hh4.js";
+import"./index-yfbp4q09.js";
 import"./index-ddszzne4.js";
-import"./index-3f7hqtgg.js";
-import"./index-n7gv8m7v.js";
-import"./index-79k7p589.js";
+import"./index-nvta6kcv.js";
+import"./index-6xxpwk5x.js";
 import"./index-nwkr6tvv.js";
 import"./index-556ja8an.js";
 import"./index-4fwbbad3.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-j3egsxa1.js";
-import"./index-3vqdt1sx.js";
-import"./index-q94gt4n9.js";
+import"./index-x71shq8j.js";
+import"./index-f036tggv.js";
+import"./index-gm10kvne.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-2e60kmzg.js";
-import"./index-4w20thrc.js";
-import"./index-9r7gp6cp.js";
-import"./index-zjygnfay.js";
+import"./index-663wnh64.js";
+import"./index-f776m4r5.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
+import"./index-yt75r1er.js";
+import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-b5xm177r.js";
-import"./index-xe6zbfps.js";
+import"./index-5zgf140g.js";
+import"./index-h52hs4e9.js";
 import"./index-bk5tah7q.js";
-import"./index-6sbx96v6.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";