opencode-swarm 7.159.3 → 7.160.1

package/dist/cli/{worktree-collision-ownership-cy24p5mr.js → worktree-collision-ownership-6b3kshcv.js}

@@ -6,11 +6,11 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-8fyebh3w.js";
+} from "./index-awjx0wgk.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-h96xp4t0.js";
+} from "./index-61c3d769.js";
 import"./index-ddszzne4.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
@@ -22,11 +22,12 @@ import {
   resolveGitExecutable
 } from "./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
+import"./index-mmr96pwr.js";
 import"./index-zjygnfay.js";
-import"./index-9qw4sbg1.js";
-import"./index-av3gnekk.js";
+import"./index-b5adxpy6.js";
+import"./index-dh5q6z7y.js";
 import"./index-ed5ykebp.js";
-import"./index-prknc0xn.js";
+import"./index-dke4wzkn.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-isolation-8jbx0s8d.js → worktree-isolation-he01qhss.js}

@@ -21,64 +21,65 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-txwx9p21.js";
-import"./index-xs32znyz.js";
-import"./index-8zw60wya.js";
-import"./index-6jp5yxye.js";
-import"./index-wwpe4am7.js";
-import"./index-gk6gpe7r.js";
+} from "./index-zdv914xa.js";
+import"./index-j3ss86kf.js";
+import"./index-m84z3aa8.js";
+import"./index-f72612zc.js";
+import"./index-m1cw9fsh.js";
+import"./index-nk498mx6.js";
 import"./index-txdagbh7.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
-import"./index-xqjhbfbx.js";
-import"./index-fnxmg8sz.js";
-import"./index-m9m3emns.js";
+import"./index-v8dsmee1.js";
+import"./index-ny0g8fdg.js";
+import"./index-7v0ex0jt.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-515nwvdp.js";
+import"./index-497a3hhj.js";
 import"./index-zsrtt42s.js";
-import"./index-nvz4mp5w.js";
+import"./index-dq93ar40.js";
 import"./index-3f7hqtgg.js";
-import"./index-8fyebh3w.js";
-import"./index-p3ym3y8b.js";
-import"./index-2fq4a3vk.js";
+import"./index-awjx0wgk.js";
+import"./index-jszabr0r.js";
+import"./index-znf683sm.js";
 import"./index-rtry5xyf.js";
-import"./index-rq4jcw64.js";
-import"./index-mqfs5f8a.js";
-import"./index-h96xp4t0.js";
+import"./index-z0bxbb9g.js";
+import"./index-qc53dfzh.js";
+import"./index-61c3d769.js";
 import"./index-ddszzne4.js";
-import"./index-zswy6xgb.js";
-import"./index-bxpqq9th.js";
-import"./index-0zerbq1v.js";
+import"./index-drqvph47.js";
+import"./index-pqjcyj0p.js";
+import"./index-7h2armwf.js";
 import"./index-556ja8an.js";
 import"./index-4fwbbad3.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-2jzmg2km.js";
-import"./index-5hfqc3h3.js";
+import"./index-nnzdayvk.js";
+import"./index-98jmggma.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-40t6s98s.js";
-import"./index-ebz97mks.js";
+} from "./index-pkz91fwm.js";
+import"./index-8c9qzpy7.js";
 import"./index-n832052r.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-t3wk7q51.js";
-import"./index-ebxmfr4j.js";
+import"./index-bqxffayb.js";
+import"./index-7npz9n4s.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-yt75r1er.js";
+import"./index-mmr96pwr.js";
+import"./index-c9zp4xwc.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-nhhek8yw.js";
-import"./index-ve0xj03m.js";
+import"./index-prv20xq6.js";
+import"./index-7ezv5j23.js";
 import"./index-bk5tah7q.js";
-import"./index-9qw4sbg1.js";
-import"./index-av3gnekk.js";
+import"./index-b5adxpy6.js";
+import"./index-dh5q6z7y.js";
 import"./index-ed5ykebp.js";
-import"./index-prknc0xn.js";
+import"./index-dke4wzkn.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/config/constants.d.ts

@@ -17,6 +17,14 @@ export declare const TURBO_TOOL_NAMES: readonly ["lean_turbo_plan_lanes", "lean_
 export declare const TURBO_AGENT_TOOL_MAP: Partial<Record<AgentName, ToolName[]>>;
 export declare const SKILL_TOOL_NAMES: readonly ["skill_generate", "skill_list", "skill_apply", "skill_inspect", "skill_regenerate", "skill_retire", "skill_improve"];
 export declare const SKILL_AGENT_TOOL_MAP: Partial<Record<AgentName, ToolName[]>>;
+export declare const PR_REVIEW_CHILD_TOOL_NAMES: readonly ["submit_pr_review_result"];
+/**
+ * This map documents the role ownership required by the registry invariant.
+ * It is deliberately consumed only by dispatch_lanes' base/micro child tool
+ * overlay; merging it into ordinary agent configs would expose the submission
+ * capability outside an exact controller-bound delegation.
+ */
+export declare const PR_REVIEW_CHILD_AGENT_TOOL_MAP: Partial<Record<AgentName, ToolName[]>>;
 /**
  * Human-readable descriptions for tools shown in the architect Available Tools block.
  * Used to generate the Available Tools section of the architect prompt at construction time.

package/dist/config/context-window.d.ts

@@ -100,7 +100,7 @@ export declare const DEFAULT_MODEL_CONTEXT_TOKENS = 128000;
  */
 export declare const MIN_PLAUSIBLE_CONTEXT_TOKENS = 1000;
 /** Which rung of the resolution order produced the value. */
-export type ContextWindowSource = 'user_provider_model' | 'user_model' | 'user_default' | 'live_model_limit' | 'static_table' | 'static_default';
+export type ContextWindowSource = 'user_provider_model' | 'user_model' | 'user_default' | 'live_model_limit' | 'static_provider_cap' | 'static_native' | 'static_default';
 export interface ContextWindowResolution {
     /**
      * The resolved denominator, in tokens. Always a finite integer ≥ 1, so it is
@@ -135,10 +135,17 @@ export interface ContextWindowInputs {
     liveContextLimit?: unknown;
     /**
      * Last-resort static lookup. Injected rather than imported so this module
-     * stays free of any dependency on `src/hooks/`. Returning `undefined` means
-     * "no opinion" and falls through to `DEFAULT_MODEL_CONTEXT_TOKENS`.
+     * stays free of any dependency on `src/hooks/`. The lookup must say WHICH
+     * static table matched (`provider_cap` vs `native`) so the resolution source
+     * stays honest (#2044): the two tables have different staleness profiles and
+     * downstream provenance consumers (the `context_status` tool, the
+     * model-limit-fallback health alarm) distinguish them. Returning `undefined`
+     * means "no opinion" and falls through to `DEFAULT_MODEL_CONTEXT_TOKENS`.
      */
-    fallbackLookup?: ((modelID?: string, providerID?: string) => number | undefined) | undefined;
+    fallbackLookup?: ((modelID?: string, providerID?: string) => {
+        tokens: number;
+        table: 'provider_cap' | 'native';
+    } | undefined) | undefined;
 }
 /**
  * True when `value` can be used as a divisor at all: a finite number strictly

package/dist/config/evidence-schema.d.ts

@@ -227,9 +227,9 @@ export declare const RetrospectiveEvidenceSchema: z.ZodObject<{
             code_style: "code_style";
         }>;
         scope: z.ZodEnum<{
-            global: "global";
-            project: "project";
             session: "session";
+            project: "project";
+            global: "global";
         }>;
     }, z.core.$strip>>>;
     approaches_tried: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -424,6 +424,7 @@ export declare const SastEvidenceSchema: z.ZodObject<{
         remediation: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     baseline_used: z.ZodOptional<z.ZodBoolean>;
+    truncated_pre_existing: z.ZodOptional<z.ZodBoolean>;
     truncated_moved_findings: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type SastEvidence = z.infer<typeof SastEvidenceSchema>;
@@ -767,9 +768,9 @@ export declare const EvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             code_style: "code_style";
         }>;
         scope: z.ZodEnum<{
-            global: "global";
-            project: "project";
             session: "session";
+            project: "project";
+            global: "global";
         }>;
     }, z.core.$strip>>>;
     approaches_tried: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -942,6 +943,7 @@ export declare const EvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         remediation: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     baseline_used: z.ZodOptional<z.ZodBoolean>;
+    truncated_pre_existing: z.ZodOptional<z.ZodBoolean>;
     truncated_moved_findings: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, z.ZodObject<{
     task_id: z.ZodString;
@@ -1274,9 +1276,9 @@ export declare const EvidenceBundleSchema: z.ZodObject<{
                 code_style: "code_style";
             }>;
             scope: z.ZodEnum<{
-                global: "global";
-                project: "project";
                 session: "session";
+                project: "project";
+                global: "global";
             }>;
         }, z.core.$strip>>>;
         approaches_tried: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -1449,6 +1451,7 @@ export declare const EvidenceBundleSchema: z.ZodObject<{
             remediation: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
         baseline_used: z.ZodOptional<z.ZodBoolean>;
+        truncated_pre_existing: z.ZodOptional<z.ZodBoolean>;
         truncated_moved_findings: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>, z.ZodObject<{
         task_id: z.ZodString;

package/dist/config/schema.d.ts

@@ -1813,6 +1813,13 @@ export declare const PrReviewResilienceConfigSchema: z.ZodObject<{
     max_retry_attempts_after_initial: z.ZodDefault<z.ZodNumber>;
     circuit_open_duration_ms: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>;
+/**
+ * Issue #2384: deprecated transcript-row settlement for Profile A PR-review
+ * base/micro discovery lanes is an explicit compatibility opt-in. Omitted
+ * config resolves false in consumers; legacy transcript parsing remains a
+ * migration-only path rather than the default authority.
+ */
+export declare const DEFAULT_PR_REVIEW_LEGACY_TRANSCRIPT_COMPATIBILITY = false;
 export declare const PluginConfigSchema: z.ZodObject<{
     $schema: z.ZodCatch<z.ZodOptional<z.ZodString>>;
     config_format_version: z.ZodDefault<z.ZodNumber>;
@@ -1911,6 +1918,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
         max_retry_attempts_after_initial: z.ZodDefault<z.ZodNumber>;
         circuit_open_duration_ms: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>>;
+    pr_review_legacy_transcript_compatibility: z.ZodOptional<z.ZodBoolean>;
     gates: z.ZodOptional<z.ZodObject<{
         syntax_check: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;

package/dist/context-map/telemetry.d.ts

@@ -246,7 +246,7 @@ export declare function getTelemetrySummary(directory: string): TelemetrySummary
  * @param directory - Project root directory
  */
 export declare function finalizeContextTelemetry(directory: string): void;
-declare function emitContextTelemetryHealth(_directory: string, payload: {
+declare function emitContextTelemetryHealth(directory: string, payload: {
     trigger: 'compaction' | 'close';
     accepted: number;
     compacted: number;

package/dist/health/learning-health.d.ts

@@ -0,0 +1,356 @@
+/**
+ * Learning/operations health — bounded-window alarm registry (issue #2044).
+ *
+ * Lives in `src/health/`, NOT `src/observability/`: this module performs
+ * bounded artifact I/O (`.swarm/learning-health.json`) and imports telemetry,
+ * both of which the observability directory's zero-I/O contract forbids
+ * (enforced by `tests/unit/observability/no-io.test.ts`).
+ *
+ * This module owns the eight alarm families the observability series assigned
+ * to PR 16:
+ *
+ *   1. `headroom_dead_streak`       — repeated zero/negative effective headroom
+ *   2. `model_limit_fallback`       — context-limit resolution fell back off the
+ *                                     host/live or user-override rungs
+ *   3. `retrieval_outcome_liveness` — retrieval → terminal receipt → application
+ *                                     outcome chain stalled
+ *   4. `role_participation`         — eligible workflow roles not participating
+ *   5. `promoted_fixture_share`     — promoted-tier evidence dominated by
+ *                                     non-field (fixture/synthetic-class) sources
+ *   6. `archive_activity_mismatch`  — close archive empty/invalid while recorded
+ *                                     activity predicted content
+ *   7. `recovery_ledger_pressure`   — background delegation recovery ledger near
+ *                                     its 4 MiB bound
+ *   8. `compaction_drop_coverage`   — store compaction dropping/corrupting
+ *                                     records across the six audited stores
+ *
+ * ## Contracts (issue #2044 items 5-10)
+ *
+ * - **Bounded windows with cooldown + hysteresis.** Every alarm raises only on
+ *   its per-family condition inside a bounded window, re-emits at most once per
+ *   cooldown interval (`sustained`), and recovers explicitly. Duplicate facts
+ *   (same kind + timestamp) and late/out-of-order facts never storm alerts: the
+ *   window is a monotonic append; a late fact counts but never rewinds
+ *   `windowStartMs`.
+ * - **Per-canonical-project/session state with explicit eviction.** Session
+ *   scopes are keyed `<projectRef>/<sessionRef>` when the producer knows its
+ *   project directory and `u/<sessionRef>` when it does not (the chat-transform
+ *   hooks receive no directory), so identical session ids under distinct
+ *   projects never collide. Scope maps are FIFO-evicted at
+ *   {@link MAX_HEALTH_SCOPES}; fact rings at {@link MAX_FACTS_PER_SCOPE}.
+ * - **No raw content.** Payloads and the persisted artifact carry counts,
+ *   closed-vocabulary enums, booleans, millisecond timestamps, model/provider
+ *   identity, and 16-hex salted session refs from
+ *   `pseudonymousSessionRef` — never raw session ids, paths, queries, prompts,
+ *   or responses (item 10).
+ * - **Persistence is transitions + compact per-scope counters ONLY** (item 9):
+ *   what incident reconstruction needs. This module intentionally contains NO
+ *   invocation-owned transient-retry or `nonTransientCircuit` state, so there is
+ *   nothing of that class to persist or rehydrate — restarts resume health
+ *   accumulation from the persisted counters, which is health state, not
+ *   invocation state.
+ * - **Typed health-source registration, no fake sink** (item 8):
+ *   {@link HEALTH_SOURCES} cites every real producer and reader file:line.
+ *   There is deliberately NO `sink` source and NO "sink loss" value — issue
+ *   #2047 / PR 19 must register its own real producer and reader.
+ *
+ * Every alarm is wired to production readers: the `/swarm status` Learning
+ * Health section and the `/swarm diagnose` learning-health check (both via
+ * {@link readLearningHealth}); `context_status` additionally exposes model-limit
+ * provenance directly.
+ */
+import type { ContextWindowSource } from '../config/context-window';
+/** The eight alarm families owned by this module. */
+export type LearningHealthAlarmId = 'headroom_dead_streak' | 'model_limit_fallback' | 'retrieval_outcome_liveness' | 'role_participation' | 'promoted_fixture_share' | 'archive_activity_mismatch' | 'recovery_ledger_pressure' | 'compaction_drop_coverage';
+export type LearningHealthTransition = 'raised' | 'sustained' | 'recovered';
+export type LearningHealthSeverity = 'warning' | 'critical';
+export type LearningHealthScopeClass = 'session' | 'identity' | 'project';
+/** Identifier of a producer subsystem feeding alarms (typed registration). */
+export type HealthSourceId = 'context_budget' | 'model_limits' | 'knowledge_receipts' | 'curator_compliance' | 'promotion_evidence' | 'close_archive' | 'delegation_ledger' | 'store_health_events';
+export interface HealthSourceRegistration {
+    /** file:line of the live producer call site. */
+    readonly producer: string;
+    /** file:line of every live reader of this source's data. */
+    readonly readers: readonly string[];
+    /** Alarms this source feeds. */
+    readonly alarms: readonly LearningHealthAlarmId[];
+}
+export declare const HEALTH_SOURCES: Readonly<Record<HealthSourceId, HealthSourceRegistration>>;
+/** Per-family thresholds. Documented constants, deliberately not user config. */
+export declare const LEARNING_HEALTH_ALARM_CONFIG: Readonly<{
+    headroom_dead_streak: Readonly<{
+        windowMs: 600000;
+        raiseFacts: 3;
+        cooldownMs: 1800000;
+        severity: LearningHealthSeverity;
+    }>;
+    model_limit_fallback: Readonly<{
+        windowMs: 1800000;
+        cooldownMs: 3600000;
+        severity: LearningHealthSeverity;
+    }>;
+    retrieval_outcome_liveness: Readonly<{
+        windowMs: 1800000;
+        cooldownMs: 900000;
+        severity: LearningHealthSeverity;
+        gap2StalenessMs: 600000;
+    }>;
+    role_participation: Readonly<{
+        windowMs: 86400000;
+        raiseFacts: 2;
+        cooldownMs: 43200000;
+        severity: LearningHealthSeverity;
+    }>;
+    promoted_fixture_share: Readonly<{
+        windowMs: 604800000;
+        raiseShare: 0.5;
+        clearShare: 0.3;
+        minEvidence: 4;
+        cooldownMs: 86400000;
+        severity: LearningHealthSeverity;
+    }>;
+    archive_activity_mismatch: Readonly<{
+        windowMs: 0;
+        cooldownMs: 86400000;
+        severity: LearningHealthSeverity;
+    }>;
+    recovery_ledger_pressure: Readonly<{
+        windowMs: 900000;
+        raisePct: 0.8;
+        clearPct: 0.7;
+        cooldownMs: 1800000;
+        severity: LearningHealthSeverity;
+    }>;
+    compaction_drop_coverage: Readonly<{
+        windowMs: 3600000;
+        corruptRaise: 1;
+        droppedRaise: 100;
+        cooldownMs: 3600000;
+        severity: LearningHealthSeverity;
+    }>;
+}>;
+/**
+ * Receipt sources that count as FIELD evidence for the fixture-share alarm:
+ * real workflow actors in a real run. `delegate` is field-but-non-independent —
+ * the independence dimension belongs to the promotion gate
+ * (src/hooks/knowledge-types.ts:410-418) and is deliberately NOT duplicated
+ * here.
+ */
+export declare const FIELD_RECEIPT_SOURCES: ReadonlySet<string>;
+/**
+ * Receipt sources that count as NON-FIELD (fixture/synthetic-class) evidence:
+ * authorized overrides, manual/migration imports, administrative gate
+ * releases, and `unknown` (fail-closed — a forged or missing label never counts
+ * as field).
+ */
+export declare const NON_FIELD_RECEIPT_SOURCES: ReadonlySet<string>;
+interface PersistedTransition {
+    alarm: LearningHealthAlarmId;
+    transition: LearningHealthTransition;
+    severity: LearningHealthSeverity;
+    atMs: number;
+    coverageFacts: number;
+}
+export declare const _internals: {
+    now: () => number;
+    emitTelemetry: (payload: Record<string, unknown>) => void;
+    writeArtifact: (directory: string, contents: string) => Promise<void>;
+    readArtifact: (directory: string) => Promise<string | null>;
+};
+/** Alarm payload detail — counts/enums/refs only, never raw content. */
+export interface AlarmEmitDetail {
+    sessionRef?: string;
+    model?: string;
+    provider?: string;
+    limitSource?: string;
+    denominatorFallback?: boolean;
+    pressurePct?: number;
+    band?: string;
+    sharePct?: number;
+    fieldCount?: number;
+    nonFieldCount?: number;
+    store?: string;
+    dropped?: number;
+    corrupt?: number;
+    retained?: number;
+    accepted?: number;
+    gapType?: 'membership_to_terminal' | 'terminal_to_application';
+    role?: string;
+    phase?: number;
+    reason?: string;
+}
+/** Serialize current health state to `.swarm/learning-health.json` (fire-and-forget). */
+export declare function persistLearningHealth(directory: string): Promise<void>;
+/**
+ * Observe one context-budget evaluation. `dead` = usagePercent ≥ 1.0
+ * (zero/negative effective headroom). The alarm raises after
+ * {@link LEARNING_HEALTH_ALARM_CONFIG.headroom_dead_streak.raiseFacts} distinct
+ * dead observations in the window and recovers on a healthy observation below
+ * the warn threshold. Attribution, not suppression: the payload always carries
+ * `limit_source` and `denominator_fallback` so an operator can tell real
+ * exhaustion from a stale static-table denominator — the "fallback hides
+ * dead-headroom loops" defect this alarm exists to surface.
+ */
+export declare function observeContextHeadroom(input: {
+    sessionID: string;
+    /** Project directory when the producer knows it (threaded from the plugin
+     * wiring at handler construction); the chat-transform input itself carries
+     * none. Scopes key by `<projectRef>/<sessionRef>` when present. */
+    directory?: string;
+    usagePercent: number;
+    limit: number;
+    limitSource: string;
+    warnThreshold: number;
+}): void;
+/**
+ * Observe one model-limit resolution. Fallback-active when the resolution came
+ * from the static tables or the flat default (not host/live, not a user
+ * override); recovery when the same identity later resolves from host/override.
+ */
+export declare function observeModelLimitResolution(input: {
+    modelID?: string;
+    providerID?: string;
+    /** Project directory when the producer knows it (threaded through
+     * resolveModelLimit); identity scopes key project-prefixed when present. */
+    directory?: string;
+    resolution: ContextWindowSource;
+    /** Which override key class matched (compound/model/default) — the alias
+     * provenance for user-authored limits (issue #2044 item 2). */
+    aliasKeyClass?: 'compound' | 'model' | 'default';
+    /** True when a user-authored override failed usability validation and was
+     * skipped (never coerced) — surfaced durably, not just as a warning. */
+    invalidOverride?: boolean;
+}): void;
+/**
+ * Observe one receipt-ledger transition. Called from the ledger's post-lock
+ * observation drain where the project directory and the observation record are
+ * both in hand. Gap-1: membership committed without a terminal within the
+ * window. Gap-2: a terminal with outcome 'applied' without an authoritative
+ * application closure — either an `architect_marker`-sourced application
+ * outcome or any gate release (the release valve is one-way, so a release MUST
+ * count as closure). Gap-2 opens only past the gate's staleness horizon.
+ */
+export declare function observeReceiptTransition(input: {
+    directory: string;
+    kind: string;
+    traceId: string;
+    receiptOutcome?: string;
+    receiptSource?: string;
+    /**
+     * OPTIONAL membership commit time for gap-2 staleness anchoring. Intentionally
+     * not populated by the current ledger drain (PRR-008): anchoring gap-2
+     * eligibility to the TERMINAL time (the fallback when absent) is the
+     * conservative bound — it can only delay eligibility, never fire the alarm
+     * before the application gate's own staleness escalation has had its
+     * window. Kept as an explicit input so a future ledger observation can
+     * tighten the anchor without an API change.
+     */
+    membershipCommittedAtMs?: number;
+    atMs?: number;
+}): void;
+/**
+ * Observe one curator phase-compliance pass. `gaps` carries the compliance
+ * observation types counted as participation gaps; `agentsUsed` is the set of
+ * roles that DID participate. The structural-zero guard keeps a single review
+ * window with no eligible opportunity from ever raising.
+ */
+export declare function observeCuratorCompliance(input: {
+    directory: string;
+    phase?: number;
+    gapTypes: readonly string[];
+    agentsUsed: readonly string[];
+}): void;
+/**
+ * Observe one promotion-evidence record. Classification is closed-vocabulary:
+ * field sources are real workflow actors; everything else (overrides, manual
+ * and migration imports, administrative releases, unknown) is non-field and
+ * `unknown` NEVER counts as field (fail-closed against forged labels).
+ */
+export declare function observePromotionEvidence(input: {
+    directory: string;
+    receiptSource: string | undefined;
+}): void;
+/**
+ * Observe one close-archive result. Raises when the archive is empty/invalid
+ * while recorded activity predicted content; recovers on the next valid,
+ * non-empty archive. Late-arriving activity never retro-raises — the payload
+ * records what was known at decision time.
+ */
+export declare function observeCloseArchive(input: {
+    directory: string;
+    archiveValid: boolean;
+    archiveEmpty: boolean;
+    activityPredictsContent: boolean;
+}): void;
+/**
+ * Observe one delegation-ledger health collection. Raises at pressure ≥ 0.8
+ * (near the 4 MiB recovery bound) or on the compact-overdue / fail-closed
+ * bands; clears below 0.7 (hysteresis). `uncertain` surfaces recovery
+ * observation failures as closed reason codes.
+ */
+export declare function observeDelegationLedgerPressure(input: {
+    directory: string;
+    pressurePct: number;
+    band: string;
+    uncertain?: boolean;
+}): void;
+/**
+ * Direct, directory-bearing store-health observation (final-critic finding 3):
+ * the six audited stores call this at their health-event emit sites, so family
+ * 8 is fed from its real producers from the FIRST event — not only after an
+ * operator opens a status surface.
+ */
+export declare function observeStoreHealth(input: {
+    directory: string;
+    kind: string;
+    payload: Record<string, unknown>;
+}): void;
+declare function observeStoreHealthEvent(event: string, data: Record<string, unknown>, directory?: string): void;
+/**
+ * Idempotent no-op registration point (PR #2446 review): family 8 is fed
+ * DIRECTLY by all six audited stores via {@link observeStoreHealth}, so no
+ * telemetry listener is attached. The historical listener double-fed every
+ * store event (direct + listener observed the same emission into two scope
+ * namespaces); it was removed. This function remains as the documented
+ * registration seam so future feeds have one call site to wire — it performs
+ * no work today and never touches the plugin init path.
+ */
+export declare function ensureLearningHealth(): void;
+/**
+ * Test teardown: clear all in-memory health state. Never used in production
+ * code paths.
+ */
+export declare function resetLearningHealthForTest(): void;
+export interface ActiveLearningHealthAlarm {
+    alarm: LearningHealthAlarmId;
+    severity: LearningHealthSeverity;
+    scopeClass: LearningHealthScopeClass;
+    scopeRef: string;
+    ageMs: number;
+    coverageFacts: number;
+    transitionCount: number;
+}
+export interface LearningHealthSnapshot {
+    activeAlarms: readonly ActiveLearningHealthAlarm[];
+    totalTransitions: number;
+    updatedAtMs: number;
+}
+/**
+ * Read learning health for a project: rehydrate any persisted artifact,
+ * lazily evaluate window-based alarms (liveness gaps age into raises without a
+ * timer), and persist the refreshed state. Fail-open: any error yields an
+ * empty snapshot.
+ */
+export declare function readLearningHealth(directory: string): Promise<LearningHealthSnapshot>;
+/** All transitions in the bounded ring (newest last). Test/diagnostic accessor. */
+export declare function getLearningHealthTransitions(): readonly PersistedTransition[];
+/**
+ * Tier-0 test exports (writing-tests skill): pure-or-near-pure internals that
+ * tests exercise directly. `observeStoreHealthEvent` is the shared core the
+ * public `observeStoreHealth` wraps; tests use it to drive family-8 logic
+ * without constructing a directory scope.
+ */
+export declare const _test_exports: {
+    observeStoreHealthEvent: typeof observeStoreHealthEvent;
+};
+export {};

package/dist/hooks/context-budget.d.ts

@@ -6,6 +6,7 @@
  * to provide proactive context management guidance to the architect agent.
  */
 import type { PluginConfig } from '../config';
+import { observeContextHeadroom } from '../health/learning-health';
 import { telemetry } from '../telemetry';
 interface MessageInfo {
     role: string;
@@ -34,13 +35,21 @@ interface MessageWithParts {
 }
 export declare const _internals: {
     telemetryContextPruned: typeof telemetry.contextPruned;
+    observeContextHeadroom: typeof observeContextHeadroom;
 };
 /**
  * Creates the experimental.chat.messages.transform hook for context budget tracking.
  * Injects warnings when context usage exceeds configured thresholds.
  * Only operates on messages for the architect agent.
  */
-export declare function createContextBudgetHandler(config: PluginConfig, resolveAgentModel?: (agentName: string) => string | undefined): (_input: Record<string, never>, _output: {
+export declare function createContextBudgetHandler(config: PluginConfig, resolveAgentModel?: (agentName: string) => string | undefined, 
+/**
+ * Project directory (threaded from the plugin wiring at handler
+ * construction — the chat-transform hook input itself carries none). Used
+ * ONLY to scope + persist the #2044 headroom health observation; every
+ * budget behavior is identical without it.
+ */
+directory?: string): (_input: Record<string, never>, _output: {
     messages?: MessageWithParts[];
 }) => Promise<void>;
 export {};