opencode-swarm 7.159.3 → 7.160.1

package/.opencode/skills/swarm-pr-review/SKILL.md

@@ -66,12 +66,7 @@ This protocol runs on any agent harness. Before Phase 0, detect which profile
 this session is in by checking the actual tool list — never assume from the
 harness name, and never guess:
 
-- **Profile A — structured PR-workflow controller.** The swarm plugin's
-  controller tools are available in this session: `dispatch_lanes_async`,
-  `collect_lane_results`, `retrieve_lane_output`, `parse_lane_candidates`,
-  `write_pr_review_artifact`, `write_pr_review_trigger_eval`,
-  `complete_pr_workflow`. Typical host: OpenCode with the swarm plugin. The
-  controller mechanically enforces this skill's accounting: it computes the
+- **Profile A — structured PR-workflow controller.** The swarm plugin's controller tools are available in this session: `dispatch_lanes_async`, `collect_lane_results`, `retrieve_lane_output`, `parse_lane_candidates`, `submit_pr_review_result`, `write_pr_review_artifact`, `write_pr_review_trigger_eval`, `complete_pr_workflow`. Typical host: OpenCode with the swarm plugin. The controller mechanically enforces this skill's accounting: it computes the
   depth tier itself from the bound merge-base diff (never from caller
   claims), enforces the tier's lane floors and full dimension/family
   partitions for consolidated dispatch, and gates structured reviewer/critic
@@ -101,11 +96,19 @@ harness name, and never guess:
 
 | Harness (typical) | Profile | Lane dispatch | Ledger persistence | Completion gate |
 |---|---|---|---|---|
-| OpenCode + swarm plugin | A | `dispatch_lanes_async` / `collect_lane_results` | `write_pr_review_artifact`, `write_pr_review_trigger_eval` | `complete_pr_workflow` |
+| OpenCode + swarm plugin | A | `dispatch_lanes_async` / `collect_lane_results` | `submit_pr_review_result`, `write_pr_review_artifact`, `write_pr_review_trigger_eval` | `complete_pr_workflow` |
 | Claude Code | B | parallel `Agent`/`Task` subagents | ledger files in the session task workspace | Pre-Synthesis Gate checklist |
 | OpenAI Codex | B | parallel subagents (fresh context) | ledger files in working notes | Pre-Synthesis Gate checklist |
 | ZCode | B | parallel subagents (fresh context) | ledger files in working notes | Pre-Synthesis Gate checklist |
 
+Host-native JSON-schema transport is optional and currently unregistered on the
+tested OpenCode, Claude Code, Codex, and ZCode host matrix. Profile A therefore
+uses the child-bound `submit_pr_review_result` tool as its supported baseline.
+Any future native integration must implement the fixed internal
+`promptJsonSchema({ sessionId, agent, schema, parts })` seam and pass the
+adapter-present, unsupported-before-execution, provider-failure, timeout, and
+per-session capability tests before registration.
+
 **Completion-gate assurance is NOT equivalent across profiles.** Only Profile A
 enforces completion MECHANICALLY: the controller's `complete_pr_workflow` receipt
 gate refuses synthesis unless base coverage, the 11-family trigger ledger, and the
@@ -155,10 +158,14 @@ ordering, vocabulary, or schema.
 Controller order is exact: bind the immutable head/base range; dispatch,
 settle, and parse base lanes; evaluate every trigger row; dispatch micro lanes;
 settle and parse every matched micro family; persist the trigger evaluation;
-persist post-explorer findings; run reviewers; run critics; then persist the
-final artifact and complete the workflow. The **initial** micro dispatch MUST
-supply the complete trigger-evaluation ledger; that dispatch freezes it for the
-session.
+submit exactly one `submit_pr_review_result` receipt for each base/micro
+discovery lane and then stop; persist post-explorer findings; run reviewers;
+run critics; then persist the final artifact and complete the workflow. Transcript
+`[CANDIDATE]` / `[CLEAN]` rows are deprecated legacy compatibility only for
+lanes whose snapped `pr_review_legacy_transcript_compatibility` contract
+explicitly enables them.
+The **initial** micro dispatch MUST supply the complete trigger-evaluation
+ledger; that dispatch freezes it for the session.
 Any subsequent micro batch in that same session MAY omit `trigger_evaluation`
 and reuse the frozen ledger. If a subsequent batch explicitly supplies a copy,
 that copy MUST remain exactly identical to the frozen ledger.
@@ -1107,28 +1114,17 @@ machine-readable rows as unfenced plain text; do not emit the backticks.
 [CANDIDATE] | candidate_id | lane | severity | category | file:line | claim | evidence_summary | impact_context | confidence | risk_impact | risk_tags
 ```
 
-Profile A stores the full assistant transcript, so earlier unmarked progress
-turns may precede the machine-readable section. The parser locates that section
-at the first pipe-delimited line whose first field is exactly `[CANDIDATE]` and
-ignores unmarked preamble, including incidental pipe-delimited text. That first
-marker is authoritative and must be the exact canonical base or micro header;
-a malformed marker or marker-prefixed data row without a header fails closed.
-The Profile A controller coverage gate also refuses a missing marker. The pure
-parser retains markerless positional fallback only for legacy callers outside
-that controller trust boundary. Explorers should continue to make the canonical
-header the first line of their final machine-readable response.
+Profile A now treats `submit_pr_review_result` as the authoritative settlement path for base and micro discovery lanes. The caller-bound structured receipt dominates later prose, truncation, or transcript incompleteness. Transcript candidate/clean rows remain deprecated compatibility only when `pr_review_legacy_transcript_compatibility` was explicitly enabled for that lane and no structured receipt exists; a present-but-invalid structured result fails closed and never falls back.
+
+When compatibility mode is active, Profile A stores the full assistant transcript. The parser locates the first pipe-delimited line whose first field is exactly `[CANDIDATE]`, ignores unmarked preamble, and requires the exact canonical base/micro header; malformed markers or marker-prefixed rows without a header fail closed. The controller refuses a missing marker. Markerless positional fallback remains only for legacy callers outside that trust boundary; explorers should put the canonical header first.
 
 The confidence data value must be exactly LOW, MEDIUM, or HIGH.
 
-Under Profile A the parser normalizes this into a structured `candidates[]`
-array. On Profiles B/C — and as a Profile A fallback when the parser is
-unavailable — the explorer emits the `[CANDIDATE]` row format directly in the
-lane output as the extraction contract.
+Under Profile A the parser-backed transcript path is compatibility-only; a successful `submit_pr_review_result` receipt is authoritative. On Profiles B/C — and on a Profile A lane whose snapped contract explicitly enables deprecated legacy transcript compatibility and lacks a structured receipt — the explorer emits `[CANDIDATE]` rows directly as the extraction contract.
 
 Explorers must not use `CONFIRMED`, `DISPROVED`, or `PRE_EXISTING`.
 
-A base lane that finds no surviving candidates must emit exactly one fully
-populated clean row:
+A base lane that finds no surviving candidates must submit exactly one structured CLEAN result and then stop. Only a lane in the deprecated transcript-compatibility path may instead emit exactly one fully populated clean row:
 
 The fence below is documentation formatting only. Emit the clean attestation
 as unfenced plain text; do not emit the backticks.
@@ -1225,7 +1221,10 @@ artifact; and the completed ledger is persisted as `trigger-eval.json` in the
 session/task workspace before reviewer dispatch. A matched family with no
 attestation row is an unclosed coverage gap.
 
-For each micro `output_ref` (Profile A), call `parse_lane_candidates` with
+For each micro lane in Profile A, prefer the single structured
+`submit_pr_review_result` receipt over transcript parsing. Only for a lane
+whose snapped contract explicitly enables deprecated transcript compatibility
+and lacks a structured receipt should you fall back to `parse_lane_candidates` against its `output_ref`, with
 `producer: "swarm-pr-review"`, `expected_family: "micro_lane"`, and
 `expected_micro_lane` set to the launch-micro-lane value from the
 provenance-linked trigger row. When the artifact came from a consolidated
@@ -1249,7 +1248,7 @@ errors, zero malformed rows, and a complete, non-degraded source:
 [CLEAN] | micro_lane | coverage_scope | evidence
 ```
 
-Header-only or malformed zero output is `UNATTESTED`; apply the COVERAGE GATE (Phase 3). Under Profile A, the structured async PR-workflow path is required to preserve `L1`, exact-head, batch, and workflow-lane provenance; the active controller rejects blocking and direct-Task substitutes, and Task-derived findings or CLEAN prose cannot satisfy Phase 4's controller ledger. Under Profiles B/C, acceptance is the row contract itself: accept a candidate or clean row only when its `micro_lane` field matches the trigger row it claims, and treat prose-only "clean" claims as `UNATTESTED`.
+Header-only or malformed zero output is `UNATTESTED`; apply the COVERAGE GATE (Phase 3). Under Profile A, the structured async PR-workflow path must preserve `L1`, exact-head, batch, and workflow-lane provenance; the active controller rejects blocking and direct-Task substitutes, and Task-derived findings or CLEAN prose cannot satisfy Phase 4's controller ledger unless the lane explicitly runs deprecated transcript compatibility. Under Profiles B/C, acceptance is the row contract: accept a candidate or clean row only when its `micro_lane` matches the trigger row, and treat prose-only "clean" claims as `UNATTESTED`.
 
 Each micro-lane receives:
 

package/.opencode/skills/swarm-pr-review/references/prompt-templates.md

@@ -73,6 +73,13 @@ Use this template when dispatching a base explorer:
 ```text
 You are a base explorer. Optimize for recall, not final judgment.
 Return candidates only. Do not use CONFIRMED, DISPROVED, or PRE_EXISTING.
+On Profile A structured PR-review discovery lanes, call `submit_pr_review_result`
+exactly once with the canonical base-lane result and then stop. Do not append
+duplicate `[CANDIDATE]` / `[CLEAN]` transcript rows or recap prose after that
+tool call.
+The transcript rows below are deprecated legacy compatibility only. Emit them
+only when the dispatched lane explicitly enables
+`pr_review_legacy_transcript_compatibility`.
 Do not narrate progress or repeat the prompt. Keep the complete final response at or below 12,000 characters; spend that budget on evidence-bearing rows and the minimum prose needed to make them auditable. When the controller-appended contract declares a per-lane final_response_char_budget, that number is authoritative over this template default.
 
 Lane:
@@ -114,6 +121,13 @@ Use this template when dispatching a micro-lane or council explorer:
 ```text
 You are a micro-lane or council explorer. Optimize for recall, not final judgment.
 Return candidates only. Do not use CONFIRMED, DISPROVED, or PRE_EXISTING.
+On Profile A structured PR-review discovery lanes, call `submit_pr_review_result`
+exactly once with the canonical micro-lane result and then stop. Do not append
+duplicate `[CANDIDATE]` / `[CLEAN]` transcript rows or recap prose after that
+tool call.
+The transcript rows below are deprecated legacy compatibility only. Emit them
+only when the dispatched lane explicitly enables
+`pr_review_legacy_transcript_compatibility`.
 Do not narrate progress or repeat the prompt. Keep the complete final response at or below 12,000 characters; spend that budget on evidence-bearing rows and the minimum prose needed to make them auditable. When the controller-appended contract declares a per-lane final_response_char_budget, that number is authoritative over this template default.
 
 Micro/council lane:
@@ -146,10 +160,12 @@ Emit the final machine-readable header and rows as unfenced plain text. The
 Markdown fence around this prompt is documentation only; do not emit backticks.
 ```
 
-Under Profile A the orchestrator extracts candidates from the full lane
-artifact via `parse_lane_candidates` as the primary mechanism. On Profiles
-B/C — and as a Profile A fallback when the parser is unavailable — the
-`[CANDIDATE]` row format above IS the extraction contract. Explorers emit
-structured records regardless of which harness runs them.
+Under Profile A the authoritative discovery-settlement path is exactly one
+`submit_pr_review_result` call per base/micro lane. Transcript
+`[CANDIDATE]` / `[CLEAN]` rows remain a deprecated fallback only when the
+lane's snapped `pr_review_legacy_transcript_compatibility` contract enables
+them and no structured receipt exists. On Profiles B/C the `[CANDIDATE]` row
+format above remains the extraction contract. Explorers emit structured
+records regardless of which harness runs them.
 
 Do not let speed degrade validation quality.

package/dist/background/delegation-health.d.ts

@@ -159,9 +159,9 @@ export declare const DelegationLedgerHealthSchema: z.ZodObject<{
         pressurePct: z.ZodNumber;
         band: z.ZodEnum<{
             ok: "ok";
-            nominal: "nominal";
             "compact-overdue": "compact-overdue";
             "fail-closed": "fail-closed";
+            nominal: "nominal";
         }>;
     }, z.core.$strict>;
     checkpoint: z.ZodNullable<z.ZodObject<{

package/dist/background/pending-delegations.d.ts

@@ -36,6 +36,7 @@
  * escape `.swarm/` (Invariant 4).
  */
 import { type DelegationCheckpointAuditSummary } from './delegation-health.js';
+import { type PrReviewResultReceipt } from './pr-review-contract.js';
 export declare const BACKGROUND_DELEGATIONS_FILE = "background-delegations.jsonl";
 export declare const BACKGROUND_DELEGATION_FALLBACK_DIR = "background-delegation-fallback";
 export declare const BACKGROUND_CODER_RESERVATIONS_FILE = "background-coder-reservations.json";
@@ -129,7 +130,7 @@ export type SweepableDelegationStatus = 'pending' | 'running' | 'ingestion_error
  */
 export declare const DEFAULT_SWEEPABLE_DELEGATION_STATUSES: ReadonlySet<SweepableDelegationStatus>;
 export interface BackgroundDelegationRecord {
-    schemaVersion: 1 | 2 | 3;
+    schemaVersion: 1 | 2 | 3 | 4;
     /** Subagent session id from the dispatch envelope — the correlation key. */
     correlationId: string;
     /** Structured jobId from dispatch metadata when available, else null. */
@@ -164,6 +165,8 @@ export interface BackgroundDelegationRecord {
      * singleton lanes (legacy and tier-L dispatches).
      */
     ownedWorkflowLanes?: string[];
+    /** Dispatch-time snapshot; absent legacy records keep transcript compatibility. */
+    prReviewLegacyTranscriptCompatibility?: boolean;
     /** Canonical hash of prompt/provenance inputs captured at dispatch time. */
     promptHash?: string;
     /** Project/root provenance captured at dispatch time. */
@@ -281,6 +284,12 @@ export interface BackgroundDelegationResult {
     outputArtifactError?: string;
     transcriptIncomplete?: boolean;
     messageCount?: number;
+    /**
+     * Issue #2384: authoritative structured PR-review result receipt. Persisted
+     * separately from transcript text so compaction and preview truncation can
+     * never promote presentation-layer text into machine authority.
+     */
+    prReviewResultReceipt?: import('./pr-review-contract.js').PrReviewResultReceipt;
     /**
      * Durable failure provenance for a lane-atomic PR-workflow terminalization.
      * Optional because successful lanes and legacy terminal results have none.
@@ -487,6 +496,7 @@ export interface RecordPendingInput {
     mode?: string;
     workflowLane?: string;
     ownedWorkflowLanes?: string[];
+    prReviewLegacyTranscriptCompatibility?: boolean;
     promptHash?: string;
     workspace?: BackgroundWorkspaceSnapshot;
     taskChangeContext?: BackgroundTaskChangeContext;
@@ -533,6 +543,41 @@ export declare function appendDelegationTransition(directory: string, correlatio
     completedAt?: number;
     expectedCurrentStatuses?: readonly BackgroundDelegationStatus[];
 }): Promise<BackgroundDelegationRecord | null>;
+export type PublishPrReviewResultReceiptOutcome = {
+    status: 'recorded';
+    record: BackgroundDelegationRecord;
+} | {
+    status: 'duplicate';
+    record: BackgroundDelegationRecord;
+} | {
+    status: 'conflict';
+    reason: string;
+} | {
+    status: 'not_found';
+    reason: string;
+} | {
+    status: 'terminal';
+    reason: string;
+} | {
+    status: 'uncertain';
+    reason: string;
+};
+/**
+ * Atomically publish the child-bound PR-review receipt while its delegation is
+ * still live. The workflow gate performs the outer session-state validation;
+ * this inner transaction rechecks immutable delegation identity under the
+ * evidence lock and provides semantic exactly-once behavior.
+ */
+export declare function publishPrReviewResultReceipt(directory: string, input: {
+    parentSessionId: string;
+    childSessionId: string;
+    batchId: string;
+    laneId: string;
+    expectedWorkflowInstanceId: string;
+    expectedWorkflowRevision: number;
+    expectedBaseSha: string;
+    receipt: PrReviewResultReceipt;
+}): Promise<PublishPrReviewResultReceiptOutcome>;
 export interface BuildBackgroundCompletionEventIdInput {
     correlationId: string;
     jobId: string | null;

package/dist/background/pr-review-contract.d.ts

@@ -25,6 +25,249 @@ export type PrReviewRiskImpact = (typeof PR_REVIEW_RISK_IMPACTS)[number];
  */
 export declare const PR_REVIEW_RISK_TAGS: readonly ["SECURITY", "AUTH_PERMISSIONS", "STATE_INTEGRITY", "WRITE_PATH", "EVIDENCE_INTEGRITY", "GIT", "CONFIGURATION"];
 export type PrReviewRiskTag = (typeof PR_REVIEW_RISK_TAGS)[number];
+export declare const PR_REVIEW_RESULT_LANE_MODES: readonly ["swarm-pr-review:base", "swarm-pr-review:micro"];
+export declare const PR_REVIEW_RESULT_OUTCOMES: readonly ["CLEAN", "FINDINGS", "INCOMPLETE"];
+export declare const PR_REVIEW_RESULT_FINDING_SEVERITIES: readonly ["CRITICAL", "HIGH", "MEDIUM", "LOW", "INFO"];
+export declare const PR_REVIEW_RESULT_UNRESOLVED_REASONS: readonly ["NOT_EXECUTED", "PARTIAL_OUTPUT", "CONTRACT_FAILURE", "RESOURCE_LIMIT", "DEADLINE_EXCEEDED", "STALE_BINDING", "PARENT_CANCELLED"];
+export declare const MAX_PR_REVIEW_RESULT_OWNED_LANES = 11;
+export declare const MAX_PR_REVIEW_RESULT_FINDINGS = 256;
+export declare const MAX_PR_REVIEW_RESULT_RECEIPT_BYTES: number;
+export type PrReviewResultLaneMode = (typeof PR_REVIEW_RESULT_LANE_MODES)[number];
+export type PrReviewResultOutcome = (typeof PR_REVIEW_RESULT_OUTCOMES)[number];
+export type PrReviewResultFindingSeverity = (typeof PR_REVIEW_RESULT_FINDING_SEVERITIES)[number];
+export type PrReviewResultUnresolvedReason = (typeof PR_REVIEW_RESULT_UNRESOLVED_REASONS)[number];
+export declare function prReviewLegacyTranscriptCompatibilityEnabled(value: boolean | undefined): boolean;
+export declare const PrReviewResultLocationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"local">;
+    file: z.ZodString;
+    line: z.ZodOptional<z.ZodNumber>;
+    endLine: z.ZodOptional<z.ZodNumber>;
+    column: z.ZodOptional<z.ZodNumber>;
+    endColumn: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"non_local">;
+    label: z.ZodString;
+    detail: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type PrReviewResultLocation = z.infer<typeof PrReviewResultLocationSchema>;
+export declare const PrReviewResultFindingSchema: z.ZodObject<{
+    id: z.ZodString;
+    workflowLane: z.ZodString;
+    severity: z.ZodEnum<{
+        CRITICAL: "CRITICAL";
+        HIGH: "HIGH";
+        MEDIUM: "MEDIUM";
+        LOW: "LOW";
+        INFO: "INFO";
+    }>;
+    riskImpact: z.ZodEnum<{
+        ORDINARY: "ORDINARY";
+        HIGH_IMPACT: "HIGH_IMPACT";
+        UNKNOWN: "UNKNOWN";
+    }>;
+    riskTags: z.ZodArray<z.ZodEnum<{
+        SECURITY: "SECURITY";
+        AUTH_PERMISSIONS: "AUTH_PERMISSIONS";
+        STATE_INTEGRITY: "STATE_INTEGRITY";
+        WRITE_PATH: "WRITE_PATH";
+        EVIDENCE_INTEGRITY: "EVIDENCE_INTEGRITY";
+        GIT: "GIT";
+        CONFIGURATION: "CONFIGURATION";
+    }>>;
+    title: z.ZodString;
+    body: z.ZodString;
+    evidence: z.ZodString;
+    location: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"local">;
+        file: z.ZodString;
+        line: z.ZodOptional<z.ZodNumber>;
+        endLine: z.ZodOptional<z.ZodNumber>;
+        column: z.ZodOptional<z.ZodNumber>;
+        endColumn: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"non_local">;
+        label: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>;
+export type PrReviewResultFinding = z.infer<typeof PrReviewResultFindingSchema>;
+export declare const PrReviewCleanAttestationSchema: z.ZodObject<{
+    workflowLane: z.ZodString;
+    coverageScope: z.ZodString;
+    evidence: z.ZodString;
+}, z.core.$strict>;
+export type PrReviewCleanAttestation = z.infer<typeof PrReviewCleanAttestationSchema>;
+export declare const PrReviewUnresolvedLaneSchema: z.ZodObject<{
+    workflowLane: z.ZodString;
+    reason: z.ZodEnum<{
+        NOT_EXECUTED: "NOT_EXECUTED";
+        PARTIAL_OUTPUT: "PARTIAL_OUTPUT";
+        CONTRACT_FAILURE: "CONTRACT_FAILURE";
+        RESOURCE_LIMIT: "RESOURCE_LIMIT";
+        DEADLINE_EXCEEDED: "DEADLINE_EXCEEDED";
+        STALE_BINDING: "STALE_BINDING";
+        PARENT_CANCELLED: "PARENT_CANCELLED";
+    }>;
+    detail: z.ZodString;
+}, z.core.$strict>;
+export type PrReviewUnresolvedLane = z.infer<typeof PrReviewUnresolvedLaneSchema>;
+export declare const PrReviewLaneResultEnvelopeSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    outcome: z.ZodEnum<{
+        CLEAN: "CLEAN";
+        FINDINGS: "FINDINGS";
+        INCOMPLETE: "INCOMPLETE";
+    }>;
+    creditedLanes: z.ZodArray<z.ZodString>;
+    findings: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        workflowLane: z.ZodString;
+        severity: z.ZodEnum<{
+            CRITICAL: "CRITICAL";
+            HIGH: "HIGH";
+            MEDIUM: "MEDIUM";
+            LOW: "LOW";
+            INFO: "INFO";
+        }>;
+        riskImpact: z.ZodEnum<{
+            ORDINARY: "ORDINARY";
+            HIGH_IMPACT: "HIGH_IMPACT";
+            UNKNOWN: "UNKNOWN";
+        }>;
+        riskTags: z.ZodArray<z.ZodEnum<{
+            SECURITY: "SECURITY";
+            AUTH_PERMISSIONS: "AUTH_PERMISSIONS";
+            STATE_INTEGRITY: "STATE_INTEGRITY";
+            WRITE_PATH: "WRITE_PATH";
+            EVIDENCE_INTEGRITY: "EVIDENCE_INTEGRITY";
+            GIT: "GIT";
+            CONFIGURATION: "CONFIGURATION";
+        }>>;
+        title: z.ZodString;
+        body: z.ZodString;
+        evidence: z.ZodString;
+        location: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"local">;
+            file: z.ZodString;
+            line: z.ZodOptional<z.ZodNumber>;
+            endLine: z.ZodOptional<z.ZodNumber>;
+            column: z.ZodOptional<z.ZodNumber>;
+            endColumn: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"non_local">;
+            label: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>], "kind">;
+    }, z.core.$strict>>;
+    cleanAttestations: z.ZodArray<z.ZodObject<{
+        workflowLane: z.ZodString;
+        coverageScope: z.ZodString;
+        evidence: z.ZodString;
+    }, z.core.$strict>>;
+    unresolved: z.ZodArray<z.ZodObject<{
+        workflowLane: z.ZodString;
+        reason: z.ZodEnum<{
+            NOT_EXECUTED: "NOT_EXECUTED";
+            PARTIAL_OUTPUT: "PARTIAL_OUTPUT";
+            CONTRACT_FAILURE: "CONTRACT_FAILURE";
+            RESOURCE_LIMIT: "RESOURCE_LIMIT";
+            DEADLINE_EXCEEDED: "DEADLINE_EXCEEDED";
+            STALE_BINDING: "STALE_BINDING";
+            PARENT_CANCELLED: "PARENT_CANCELLED";
+        }>;
+        detail: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PrReviewLaneResultEnvelope = z.infer<typeof PrReviewLaneResultEnvelopeSchema>;
+export declare function serializedPrReviewResultReceiptBytes(value: unknown): number;
+export declare function prReviewLaneResultEnvelopeDigest(value: PrReviewLaneResultEnvelope): string;
+export declare const PrReviewResultReceiptSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    mode: z.ZodEnum<{
+        "swarm-pr-review:base": "swarm-pr-review:base";
+        "swarm-pr-review:micro": "swarm-pr-review:micro";
+    }>;
+    workflowInstanceId: z.ZodString;
+    workflowRevision: z.ZodNumber;
+    batchId: z.ZodString;
+    laneId: z.ZodString;
+    workflowLane: z.ZodString;
+    ownedWorkflowLanes: z.ZodArray<z.ZodString>;
+    baseSha: z.ZodString;
+    headSha: z.ZodString;
+    dispatchRevisionDigest: z.ZodString;
+    childSessionId: z.ZodString;
+    generation: z.ZodNumber;
+    semanticEnvelopeDigest: z.ZodString;
+    envelope: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        outcome: z.ZodEnum<{
+            CLEAN: "CLEAN";
+            FINDINGS: "FINDINGS";
+            INCOMPLETE: "INCOMPLETE";
+        }>;
+        creditedLanes: z.ZodArray<z.ZodString>;
+        findings: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            workflowLane: z.ZodString;
+            severity: z.ZodEnum<{
+                CRITICAL: "CRITICAL";
+                HIGH: "HIGH";
+                MEDIUM: "MEDIUM";
+                LOW: "LOW";
+                INFO: "INFO";
+            }>;
+            riskImpact: z.ZodEnum<{
+                ORDINARY: "ORDINARY";
+                HIGH_IMPACT: "HIGH_IMPACT";
+                UNKNOWN: "UNKNOWN";
+            }>;
+            riskTags: z.ZodArray<z.ZodEnum<{
+                SECURITY: "SECURITY";
+                AUTH_PERMISSIONS: "AUTH_PERMISSIONS";
+                STATE_INTEGRITY: "STATE_INTEGRITY";
+                WRITE_PATH: "WRITE_PATH";
+                EVIDENCE_INTEGRITY: "EVIDENCE_INTEGRITY";
+                GIT: "GIT";
+                CONFIGURATION: "CONFIGURATION";
+            }>>;
+            title: z.ZodString;
+            body: z.ZodString;
+            evidence: z.ZodString;
+            location: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"local">;
+                file: z.ZodString;
+                line: z.ZodOptional<z.ZodNumber>;
+                endLine: z.ZodOptional<z.ZodNumber>;
+                column: z.ZodOptional<z.ZodNumber>;
+                endColumn: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"non_local">;
+                label: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>], "kind">;
+        }, z.core.$strict>>;
+        cleanAttestations: z.ZodArray<z.ZodObject<{
+            workflowLane: z.ZodString;
+            coverageScope: z.ZodString;
+            evidence: z.ZodString;
+        }, z.core.$strict>>;
+        unresolved: z.ZodArray<z.ZodObject<{
+            workflowLane: z.ZodString;
+            reason: z.ZodEnum<{
+                NOT_EXECUTED: "NOT_EXECUTED";
+                PARTIAL_OUTPUT: "PARTIAL_OUTPUT";
+                CONTRACT_FAILURE: "CONTRACT_FAILURE";
+                RESOURCE_LIMIT: "RESOURCE_LIMIT";
+                DEADLINE_EXCEEDED: "DEADLINE_EXCEEDED";
+                STALE_BINDING: "STALE_BINDING";
+                PARENT_CANCELLED: "PARENT_CANCELLED";
+            }>;
+            detail: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type PrReviewResultReceipt = z.infer<typeof PrReviewResultReceiptSchema>;
 export declare const PR_REVIEW_CONTRACT_CARD_HEADER = "[PR-REVIEW CONTRACT CARD]";
 export declare const PR_REVIEW_FINDINGS_MAX_BYTES: number;
 export declare const PR_REVIEW_FINDINGS_WRITE_MAX_BYTES: number;
@@ -36,10 +279,10 @@ export declare const PrReviewRunIdSchema: z.ZodString;
 export declare const PrReviewFindingSchema: z.ZodObject<{
     finding_id: z.ZodString;
     status: z.ZodEnum<{
-        PENDING: "PENDING";
         CONFIRMED: "CONFIRMED";
         DISPROVED: "DISPROVED";
         PRE_EXISTING: "PRE_EXISTING";
+        PENDING: "PENDING";
     }>;
     file_line: z.ZodString;
     evidence: z.ZodString;
@@ -135,10 +378,10 @@ export declare const WritePrReviewArtifactArgsSchema: z.ZodDiscriminatedUnion<[z
     records: z.ZodArray<z.ZodObject<{
         finding_id: z.ZodString;
         status: z.ZodEnum<{
-            PENDING: "PENDING";
             CONFIRMED: "CONFIRMED";
             DISPROVED: "DISPROVED";
             PRE_EXISTING: "PRE_EXISTING";
+            PENDING: "PENDING";
         }>;
         file_line: z.ZodString;
         evidence: z.ZodString;

package/dist/cli/{coder-settlement-50p7dsya.js → coder-settlement-678ccmnf.js}

@@ -13,26 +13,27 @@ import {
   releaseCoderDispatchOwnership,
   settleCoderDispatch,
   transferCoderSettlementToBackground
-} from "./index-nvz4mp5w.js";
+} from "./index-dq93ar40.js";
 import"./index-3f7hqtgg.js";
-import"./index-8fyebh3w.js";
-import"./index-rq4jcw64.js";
-import"./index-mqfs5f8a.js";
+import"./index-awjx0wgk.js";
+import"./index-z0bxbb9g.js";
+import"./index-qc53dfzh.js";
 import"./index-ddszzne4.js";
-import"./index-0zerbq1v.js";
+import"./index-7h2armwf.js";
 import"./index-556ja8an.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-yt75r1er.js";
+import"./index-mmr96pwr.js";
+import"./index-c9zp4xwc.js";
 import"./index-zjygnfay.js";
-import"./index-ve0xj03m.js";
-import"./index-9qw4sbg1.js";
-import"./index-av3gnekk.js";
+import"./index-7ezv5j23.js";
+import"./index-b5adxpy6.js";
+import"./index-dh5q6z7y.js";
 import"./index-ed5ykebp.js";
-import"./index-prknc0xn.js";
+import"./index-dke4wzkn.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{config-doctor-a7drgs33.js → config-doctor-fr8dfrt2.js}

@@ -12,10 +12,10 @@ import {
   shouldRunOnStartup,
   writeBackupArtifact,
   writeDoctorArtifact
-} from "./index-6jp5yxye.js";
+} from "./index-f72612zc.js";
 import"./index-z6xqpmqg.js";
-import"./index-ebxmfr4j.js";
-import"./index-yt75r1er.js";
+import"./index-7npz9n4s.js";
+import"./index-c9zp4xwc.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{core-madqgdsc.js → core-4j1hbhey.js}

@@ -14,12 +14,12 @@ import {
   resolveWorktreeBaseDir,
   shortenWorktreePath,
   writeLaneProfileToDiskReal
-} from "./index-mqfs5f8a.js";
+} from "./index-qc53dfzh.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-yt75r1er.js";
+import"./index-c9zp4xwc.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";

package/dist/cli/{curation-policy-ray8h55z.js → curation-policy-47przjwg.js}

@@ -4,14 +4,14 @@ import {
   authorizeCuration,
   buildConfigFingerprintInput,
   readCohortConfigFingerprint
-} from "./index-2fq4a3vk.js";
+} from "./index-znf683sm.js";
 import"./index-rtry5xyf.js";
-import"./index-nhhek8yw.js";
-import"./index-ve0xj03m.js";
-import"./index-9qw4sbg1.js";
-import"./index-av3gnekk.js";
+import"./index-prv20xq6.js";
+import"./index-7ezv5j23.js";
+import"./index-b5adxpy6.js";
+import"./index-dh5q6z7y.js";
 import"./index-ed5ykebp.js";
-import"./index-prknc0xn.js";
+import"./index-dke4wzkn.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";