opencode-swarm 7.159.3 → 7.160.1

package/dist/observability/catalog.d.ts

@@ -1,7 +1,7 @@
 /**
  * The event catalog (issue #2029).
  *
- * Exactly 54 entries, matching the `TelemetryEvent` union at
+ * Exactly 55 entries, matching the `TelemetryEvent` union at
  * `src/telemetry.ts:15-131`. Thirty-eight predate the #2029 contract; the 39th is
  * `agent_conflict_detected` (previously emitted through a force-cast past the
  * type system), the 40th is `close_archive_result` (issue #2030 — the
@@ -80,7 +80,7 @@ export interface CatalogEntry {
     /**
      * Whether an event of this kind must carry `trace.parentSpanId`.
      *
-     * `false` for all 54 entries today, and that is a truthful statement about
+     * `false` for all 55 entries today, and that is a truthful statement about
      * the current system rather than a placeholder: no producer supplies a
      * parent span, so `createObservation` never sets one. Setting this to `true`
      * for a kind whose producer cannot supply a parent would make every

package/dist/observability/ids.d.ts

@@ -95,3 +95,20 @@ export declare function resolveLineageSalt(): string;
  * @param salt - Salt from {@link resolveLineageSalt}.
  */
 export declare function pseudonymousRef(absolutePath: string, salt: string): string;
+/**
+ * Produce a pseudonymous reference for a session id (#2044).
+ *
+ * Same construction and salt handling as {@link pseudonymousRef}, applied to the
+ * opaque session id string: `sha256(salt + NUL + sessionId)`, truncated to
+ * {@link PSEUDONYMOUS_REF_LENGTH} hex chars. Used by the learning-health alarm
+ * registry so persisted health state and telemetry payloads never carry raw
+ * session ids (issue #2044 item 10).
+ *
+ * Contract note: session ids are operator-known opaque strings, not secrets;
+ * the pseudonym prevents cross-install linkage exactly as `pseudonymousRef`
+ * does for paths. With the public default salt a holder of a payload can
+ * CONFIRM a guessed session id by re-hashing; a private
+ * {@link LINEAGE_SALT_ENV} restores guess-resistance. This module stays pure —
+ * no I/O; the salt is read at call time.
+ */
+export declare function pseudonymousSessionRef(sessionId: string, salt?: string): string;

package/dist/prm/trajectory-store.d.ts

@@ -34,7 +34,7 @@
  * .swarm/evidence/{taskId}/trajectory.jsonl for audit/evidence (bounded by its
  * own write-side truncation; untouched by this contract).
  */
-import { telemetry } from '../telemetry';
+import { telemetry } from '../telemetry.js';
 import type { TrajectoryEntry } from './types';
 /**
  * Hard budgets for the bounded session-trajectory contract (issue #2041).

package/dist/services/diagnose-service.d.ts

@@ -31,6 +31,13 @@ export interface DiagnoseData {
  *   - Main bundle (everything else):          stay put        → dist/lang/grammars
  */
 export declare function resolveGrammarDir(thisDir: string): string;
+/**
+ * Check (#2044): Learning/operations health — bounded-window alarm families
+ * from the learning-health registry. Warns when any alarm is active; the
+ * detail lines carry the same redacted form as the telemetry payload (16-hex
+ * refs, counts, enums — never raw session ids, paths, or content).
+ */
+export declare function checkLearningHealth(directory: string): Promise<HealthCheck>;
 /**
  * Get diagnose data from the swarm directory.
  * Returns structured health checks for GUI, background flows, or commands.

package/dist/services/status-service.d.ts

@@ -122,6 +122,24 @@ export interface StatusData {
      * report id.
      */
     consensusReports?: number;
+    /**
+     * Learning/operations health (issue #2044): the bounded-window alarm
+     * snapshot from the learning-health registry (active alarms + transition
+     * count). `undefined` when the read failed (fail-open) — never blocks
+     * status rendering.
+     */
+    learningHealth?: {
+        activeAlarms: readonly {
+            alarm: string;
+            severity: string;
+            scopeClass: string;
+            scopeRef: string;
+            ageMs: number;
+            coverageFacts: number;
+            transitionCount: number;
+        }[];
+        totalTransitions: number;
+    };
     /**
      * Cohort/link status (issue #1846). Makes the linked knowledge store and its
      * health obvious in `/swarm status`. `undefined` when link state is absent.

package/dist/telemetry.d.ts

@@ -32,7 +32,7 @@ export type TelemetryEvent = 'session_started' | 'session_ended' | 'agent_activa
  * `prm_hard_stop` TRIGGER emitted by `src/prm/escalation.ts`. A trigger with
  * no matching delivery means the containment never reached the agent.
  */
- | 'prm_hard_stop_delivered' | 'agent_conflict_detected' | 'close_archive_result' | 'knowledge_receipt_transition' | 'knowledge_maintenance' | 'residue_health' | 'context_telemetry_health' | 'skill_usage_health' | 'core_events_health' | 'shell_audit_health' | 'trajectory_health' | 'pr_subscription_health';
+ | 'prm_hard_stop_delivered' | 'agent_conflict_detected' | 'close_archive_result' | 'knowledge_receipt_transition' | 'knowledge_maintenance' | 'residue_health' | 'context_telemetry_health' | 'skill_usage_health' | 'core_events_health' | 'shell_audit_health' | 'trajectory_health' | 'learning_health_alarm' | 'pr_subscription_health';
 /** Stable classification for how a reviewer-gate decision was established. */
 export type ReviewerGateEvidenceKind = 'genuine' | 'fallback' | 'data_quality' | 'block';
 /**
@@ -77,6 +77,16 @@ export declare function emit(event: TelemetryEvent, data: Record<string, unknown
  * @param callback - Function called with (event, data) on each emit
  */
 export declare function addTelemetryListener(callback: TelemetryListener): void;
+/**
+ * Remove a previously registered telemetry listener (issue #2044).
+ * Currently unused in-tree: the learning-health registry no longer attaches a
+ * listener (its six store feeds call the observer directly), and the heartbeat
+ * teardown splices `_listeners` inline by design. Kept as the public disposer
+ * complement to `addTelemetryListener` — push-only registration with no
+ * removal path was an API gap. Removing a listener that was never registered
+ * is a no-op.
+ */
+export declare function removeTelemetryListener(callback: TelemetryListener): void;
 /**
  * Rotate telemetry file if it exceeds maxBytes.
  * Renames `telemetry.jsonl` → `telemetry.jsonl.1` and reopens a fresh stream.
@@ -376,6 +386,47 @@ export declare const telemetry: {
         checkpoint_bytes: number;
         limit_bytes: number;
     }): void;
+    /**
+     * Learning/operations health alarm transition (issue #2044): emitted by the
+     * learning-health registry (`src/observability/learning-health.ts`) when an
+     * alarm family raises, re-emits past its cooldown (`sustained`), or
+     * recovers. Payload is counts, closed-vocabulary enums (`alarm` from the
+     * eight-family closed set, `transition`, `severity`, `scope_class`),
+     * millisecond timestamps, model/provider identity, and 16-hex salted
+     * `session_ref` values — no raw session IDs, paths, queries, prompts, or
+     * content — matching the observability contract's no-content rule. Live
+     * readers: the `/swarm status` Learning Health section and the
+     * `/swarm diagnose` learning-health check.
+     */
+    learningHealthAlarm(data: {
+        alarm: string;
+        transition: "raised" | "sustained" | "recovered";
+        severity: "warning" | "critical";
+        scope_class: "session" | "identity" | "project";
+        session_ref?: string;
+        model?: string;
+        provider?: string;
+        window_ms: number;
+        coverage_facts: number;
+        raise_facts: number;
+        age_ms: number;
+        limit_source?: string;
+        denominator_fallback?: boolean;
+        pressure_pct?: number;
+        band?: string;
+        share_pct?: number;
+        field_count?: number;
+        non_field_count?: number;
+        store?: string;
+        dropped?: number;
+        corrupt?: number;
+        retained?: number;
+        accepted?: number;
+        gap_type?: "membership_to_terminal" | "terminal_to_application";
+        role?: string;
+        phase?: number;
+        reason?: string;
+    }): void;
     /**
      * Issue #2063 C2 — the PRM hard-stop DENIAL was actually delivered to the
      * agent (thrown by the guardrails `toolBefore` consumer). `prm_hard_stop`

package/dist/tools/context-status.d.ts

@@ -14,7 +14,9 @@
  * Works whether `context_budget.enabled` is true or false.
  */
 import { loadPluginConfig } from '../config';
+import type { ContextWindowSource } from '../config/context-window';
 import { type ContextUsageSource } from '../hooks/context-usage';
+import { type ModelLimitSource } from '../hooks/model-limits';
 import { createSwarmTool } from './create-tool';
 /**
  * Shape of a message's info block.
@@ -56,6 +58,16 @@ export interface ContextStatusResult {
     usageSource: ContextUsageSource;
     /** Resolved model context limit in tokens */
     modelLimit: number;
+    /** Coarse provenance class of the resolved limit (issue #2044): where the
+     * denominator came from — host live window, user override, one of the two
+     * static tables, or the flat 128k fallback. */
+    modelLimitSource: ModelLimitSource;
+    /** Fine-grained resolution rung that produced the limit (which key/table). */
+    modelLimitResolution: ContextWindowSource;
+    /** True when the limit came from a static table or the flat default — i.e.
+     * the denominator is NOT the host's live window and headroom figures carry
+     * that uncertainty (issue #2044: "fallback can hide dead-headroom loops"). */
+    fallbackActive: boolean;
     /** Ratio of tokens-used to model-limit (0.0 – 1.0+) */
     usagePercent: number;
     /** Threshold state: 'none' | 'warn' | 'critical' */
@@ -91,7 +103,9 @@ export declare const _internals: {
 declare function computeContextHeadroom(messages: ContextMessage[], warnThreshold?: number, criticalThreshold?: number, modelLimitsConfig?: Record<string, number>, liveContextLimit?: unknown, modelIdentity?: {
     modelID?: string;
     providerID?: string;
-}): ContextStatusResult;
+}, 
+/** Project directory (#2044): scopes the model-limit health observation. */
+directory?: string): ContextStatusResult;
 /**
  * context_status tool — read-only context window headroom report.
  *

package/dist/tools/dispatch-lanes.d.ts

@@ -460,16 +460,31 @@ export declare const _test_exports: {
     resolvePrReviewReceiptFallbacks: typeof resolvePrReviewReceiptFallbacks;
     resolvePrReviewReceiptFallbacksFromState: typeof resolvePrReviewReceiptFallbacksFromState;
     consumePrReviewReceiptAppendFailureLog: typeof consumePrReviewReceiptAppendFailureLog;
+    startAsyncLanePrompt: typeof startAsyncLanePrompt;
     prReviewLaneResponseBudgetChars: typeof prReviewLaneResponseBudgetChars;
 };
-type ReadOnlyToolPermissions = Record<string, false> & {
+type ReadOnlyToolPermissions = Record<string, boolean> & {
     write: false;
     edit: false;
     patch: false;
 };
-interface DispatchLanesExecutionContext {
+export interface DispatchLanesExecutionContext {
     callerAgent?: string;
     sessionID?: string;
+    /** Optional host-verified structured transport. Absent on current hosts. */
+    prReviewStructuredPromptAdapter?: PrReviewStructuredPromptAdapter;
+}
+export interface PrReviewStructuredPromptAdapter {
+    promptJsonSchema(args: {
+        sessionId: string;
+        agent: string;
+        schema: unknown;
+        parts: unknown[];
+    }): Promise<unknown>;
+}
+/** Explicit pre-execution capability miss; the only adapter error that falls back. */
+export declare class PrReviewStructuredPromptUnsupportedError extends Error {
+    constructor(message?: string);
 }
 export declare function executeDispatchLanes(args: unknown, directory: string, context?: DispatchLanesExecutionContext): Promise<DispatchLanesResult>;
 export declare function executeDispatchLanesAsync(args: unknown, directory: string, context?: DispatchLanesExecutionContext): Promise<DispatchLanesAsyncResult>;
@@ -499,6 +514,15 @@ type LaneDiagnostics = Map<string, Set<string>>;
 declare function assembleCollectionDiagnostics(hostTimeouts: ReadonlySet<string>, settleFailureLogs: LaneDiagnostics, collectionResourceFailures: LaneDiagnostics): string[];
 declare function addLaneDiagnostic(diagnostics: LaneDiagnostics, laneLabel: string, message: string): void;
 declare function consumePrReviewReceiptAppendFailureLog(loggedFailures: Set<string>, parentSessionId: string, correlationId: string): boolean;
+declare function startAsyncLanePrompt(args: {
+    session: SessionOps;
+    directory: string;
+    sessionId: string;
+    lane: DispatchLaneSpec;
+    timeoutMs: number;
+    mode?: string;
+    structuredAdapter?: PrReviewStructuredPromptAdapter;
+}): Promise<void>;
 /**
  * Issue #2349: a terminal error read off the last assistant message of a lane
  * session, classified for settlement.
@@ -593,7 +617,7 @@ declare function resolvePrReviewReceiptFallbacksFromState(records: readonly Back
 declare function appendPrReviewCollectionReceipt(record: BackgroundDelegationRecord, result: BackgroundDelegationResult, receipt: PrReviewVerdictCollectionReceipt): BackgroundDelegationResult | null;
 declare function parsePrReviewCollectionReceipt(record: BackgroundDelegationRecord): PrReviewVerdictCollectionReceipt | null;
 declare function recordToLaneResult(record: BackgroundDelegationRecord, batchId: string, deliveryContext?: LaneResultDeliveryContext): DispatchLaneResult;
-declare function buildReadOnlyTools(): ReadOnlyToolPermissions;
+declare function buildReadOnlyTools(mode?: string): ReadOnlyToolPermissions;
 type ApplyCommonPromptResult = {
     ok: true;
     lanes: DispatchLaneSpec[];

package/dist/tools/index.d.ts

@@ -81,6 +81,7 @@ export { skill_retire } from './skill-retire';
 export { spec_write } from './spec-write';
 export { run_stale_reconciliation } from './stale-reconciliation';
 export { submit_phase_council_verdicts } from './submit-phase-council-verdicts';
+export { submit_pr_review_result } from './submit-pr-review-result';
 export { summarize_work } from './summarize-work';
 export { createSwarmCommandTool, swarm_command } from './swarm-command';
 export { swarm_memory_outcome } from './swarm-memory-outcome';

package/dist/tools/manifest.d.ts

@@ -45,6 +45,7 @@ export declare const TOOL_MANIFEST: {
     complete_pr_workflow: () => ToolDefinition;
     abort_pr_workflow: () => ToolDefinition;
     authorize_pr_review_reentry: () => ToolDefinition;
+    submit_pr_review_result: () => ToolDefinition;
     approve_plan_critic: () => ToolDefinition;
     prepare_pr_workflow_checkout: () => ToolDefinition;
     record_implementation_review: () => ToolDefinition;

package/dist/tools/repo-graph/ontology.d.ts

@@ -38,4 +38,10 @@ export interface ExtractFileOntologyInput {
  * re-exported from the package index; call `extractFileOntology` instead.
  */
 export declare function maskMultilineStringLiterals(text: string, language: string): string;
+/**
+ * Normalize one segment of a user-supplied route path so `route_trace` inputs
+ * like `/api/users/[...slug]` match the normalized form RouteFacts store
+ * (`/api/users/:slug*`). Exported for the query layer (KG-15, issue #1536).
+ */
+export declare function normalizeRoutePathInput(input: string): string;
 export declare function extractFileOntology(input: ExtractFileOntologyInput): FileOntology;

package/dist/tools/repo-graph/pack-query.d.ts

@@ -0,0 +1,36 @@
+/**
+ * KG-15 change-risk pack queries (issue #1536).
+ *
+ * Route, data, and test packs over the persisted repo graph: `route_trace`,
+ * `data_trace`, and `test_pack`. Every function is stateless and read-only:
+ * inputs are validated by the `repo_map` tool layer; this module assumes
+ * well-formed arguments and focuses on bounded, workspace-relative,
+ * evidence-bearing output (the same contract as `symbol-query.ts`).
+ *
+ * Schema note: route/data packs read persisted `ontology.links` (schema
+ * >= 1.7.0) and degrade with `linksSupported: false` + warnings on older
+ * graphs, where the edges/facts-derived sections still populate. Test packs
+ * derive TESTS / USES_FIXTURE associations at query time from persisted
+ * edges plus colocated-name heuristics, so they work on every schema.
+ */
+import type { DataTraceResult, RepoGraph, RouteMethod, RouteTraceResult, TestPackResult } from './types';
+export declare function traceRoute(graph: RepoGraph, options: {
+    routePath?: string;
+    method?: RouteMethod;
+    file?: string;
+    symbol?: string;
+    topN?: number;
+}): RouteTraceResult;
+export declare function traceData(graph: RepoGraph, options: {
+    entity?: string;
+    file?: string;
+    symbol?: string;
+    topN?: number;
+}): DataTraceResult;
+export declare function buildTestPack(graph: RepoGraph, options: {
+    file?: string;
+    files?: string[];
+    symbol?: string;
+    diff?: string;
+    topN?: number;
+}): TestPackResult;

package/dist/tools/repo-graph/types.d.ts

@@ -54,8 +54,17 @@ export declare const REPO_GRAPH_FILENAME = "repo-graph.json";
  * The field is optional, so 1.0.0–1.5.0 graphs still load; queries surface
  * `kind: null` hits and a `kindSupported: false` degradation note instead of
  * failing (issue #1535).
+ *
+ * 1.7.0 adds the optional per-node `ontology.links` array (KG-15):
+ * `HANDLES_ROUTE` handler-symbol binding, entity-keyed `READS`/`WRITES`/
+ * `DELETES` data access, `VALIDATES`/`AUTHORIZES` security binding, and
+ * `CONFIGURES` env/config-key facts. `TESTS` and `USES_FIXTURE` associations
+ * are derived at query time from persisted edges plus colocated-name
+ * heuristics and are never stored. The field is optional, so 1.0.0–1.6.0
+ * graphs still load; queries surface `linksSupported: false` degradation
+ * notes instead of failing (issue #1536).
  */
-export declare const GRAPH_SCHEMA_VERSION = "1.6.0";
+export declare const GRAPH_SCHEMA_VERSION = "1.7.0";
 /**
  * Default per-file source-size ceiling shared by graph construction and
  * query-time source reads. The builder treats this as the default value of
@@ -117,6 +126,39 @@ export interface OntologyFinding {
     message: string;
     line?: number;
 }
+export declare const ONTOLOGY_LINK_KIND_VALUES: readonly ["HANDLES_ROUTE", "READS", "WRITES", "DELETES", "VALIDATES", "AUTHORIZES", "TESTS", "USES_FIXTURE", "CONFIGURES"];
+export type OntologyLinkKind = (typeof ONTOLOGY_LINK_KIND_VALUES)[number];
+export declare const ONTOLOGY_LINK_CONFIDENCE_VALUES: readonly ["low", "medium", "high"];
+export type OntologyLinkConfidence = (typeof ONTOLOGY_LINK_CONFIDENCE_VALUES)[number];
+/**
+ * A change-risk link binding one ontology fact to its subject and — when the
+ * evidence ties it to a declaration — to a symbol (KG-15, issue #1536).
+ *
+ * Persisted links are file-local (they live on the node whose source produced
+ * them): `HANDLES_ROUTE` (subject `'<METHOD> <path>'`, symbol = the handler
+ * export or named router callback), `READS`/`WRITES`/`DELETES` (subject = the
+ * entity/table name, file-level), `VALIDATES`/`AUTHORIZES` (from security
+ * facts, file-level), and `CONFIGURES` (subject = an env/config key).
+ *
+ * `TESTS` and `USES_FIXTURE` are part of the kind union for output shaping
+ * but are derived at query time from persisted edges + colocated-name
+ * heuristics (`buildTestPack`), never persisted here.
+ *
+ * Advisory and evidence-backed: `confidence` records heuristic strength, and
+ * every field is bounded by `validateOntologyStrings`.
+ */
+export interface OntologyLink {
+    kind: OntologyLinkKind;
+    /** Route (`'GET /api/users'`), entity/table name, or config/env key. */
+    subject?: string;
+    /** 1-based line of the producing evidence (absent for file-level-only facts). */
+    line?: number;
+    /** Raw comment-stripped source line slice (<=160 chars). */
+    evidence?: string;
+    confidence: OntologyLinkConfidence;
+    /** Declaration the link is bound to, when evidence ties it to one symbol. */
+    symbol?: string;
+}
 export interface FileOntology {
     roles: FileRole[];
     packageBoundary: string;
@@ -125,6 +167,8 @@ export interface FileOntology {
     security: SecurityFact[];
     conventions: ConventionFact[];
     findings: OntologyFinding[];
+    /** Change-risk links (schema >= 1.7.0; optional so older graphs load unchanged). */
+    links?: OntologyLink[];
 }
 /**
  * A node in the dependency graph representing a source file.
@@ -677,6 +721,159 @@ export interface GraphExplainResult {
     };
     warnings: string[];
 }
+/** One matched route with its full change-risk pack (route_trace). */
+export interface RouteTraceRoute {
+    route: {
+        method: RouteMethod;
+        path: string;
+        line: number | null;
+        source: RouteSource;
+    };
+    /** Workspace-relative handler file. */
+    file: string;
+    /** Handler symbol from a HANDLES_ROUTE link; null on pre-1.7.0 graphs. */
+    handlerSymbol: string | null;
+    handlerConfidence: OntologyLinkConfidence | null;
+    /** The link's evidence line (handler declaration); null without a link. */
+    handlerEvidence: string | null;
+    /** Depth-1 non-test node dependencies of the handler file, deduped + sorted. */
+    services: string[];
+    /** Facts from the handler file and its services (each list <= 20). */
+    dataOperations: Array<{
+        file: string;
+        fact: DataOperationFact;
+    }>;
+    security: Array<{
+        file: string;
+        fact: SecurityFact;
+    }>;
+    /** Handler-file ontology findings (the unguarded-mutating-route surface). */
+    findings: Array<{
+        file: string;
+        finding: OntologyFinding;
+    }>;
+    /** test_file-role importers of the handler/services files. */
+    tests: string[];
+}
+export interface RouteTraceResult {
+    target: {
+        routePath: string | null;
+        method: RouteMethod | null;
+        file: string | null;
+        symbol: string | null;
+    };
+    routes: RouteTraceRoute[];
+    /**
+     * False on graphs predating schema 1.7.0: handler-symbol binding degrades
+     * to null while the facts/edges-derived sections still populate.
+     */
+    linksSupported: boolean;
+    budget: {
+        returned: number;
+        dropped: number;
+    };
+    truncated: boolean;
+    warnings: string[];
+}
+/** One reader/writer/deleter/configurer match for a traced subject (data_trace). */
+export interface DataTraceAccess {
+    file: string;
+    kind: 'READS' | 'WRITES' | 'DELETES' | 'CONFIGURES';
+    symbol: string | null;
+    line: number | null;
+    evidence: string | null;
+    confidence: OntologyLinkConfidence | null;
+    /** 'link' = schema 1.7.0 ontology link; 'fact' = DataOperationFact fallback (works on all schemas). */
+    via: 'link' | 'fact';
+}
+export interface DataTraceResult {
+    target: {
+        entity: string | null;
+        file: string | null;
+        symbol: string | null;
+    };
+    /** Resolved subject when `entity` was given (matched link subject or fact entity). */
+    subject: string | null;
+    readers: DataTraceAccess[];
+    writers: DataTraceAccess[];
+    deleters: DataTraceAccess[];
+    configurers: DataTraceAccess[];
+    /** Routes declared in files that touch the subject (<= 20). */
+    routes: Array<{
+        file: string;
+        fact: RouteFact;
+    }>;
+    tests: string[];
+    /** Fixed-vocabulary advisory notes with counts. */
+    riskNotes: string[];
+    linksSupported: boolean;
+    budget: {
+        returned: number;
+        dropped: number;
+    };
+    truncated: boolean;
+    warnings: string[];
+}
+/** One test file associated with a target (test_pack). */
+export interface TestPackTestEntry {
+    file: string;
+    confidence: OntologyLinkConfidence;
+    /** 'import' = explicit import edge (high); 'colocated' = sibling-name heuristic (medium). */
+    basis: 'import' | 'colocated';
+    /** Why this association exists: the import specifier, or the colocated-name rationale. */
+    evidence: string;
+    /** Target exports referenced by the test (edge imported/used symbols ∩ target exports). */
+    coveredSymbols: string[];
+}
+/** A fixture-pattern file imported by at least one discovered test. */
+export interface TestPackFixture {
+    file: string;
+    usedBy: string[];
+    /** Derivation is a path-pattern heuristic — always medium. */
+    confidence: OntologyLinkConfidence;
+    /** The import specifier a test used to pull the fixture in. */
+    evidence: string;
+}
+/**
+ * A query-time-derived TESTS / USES_FIXTURE association, materialized with
+ * its evidence and confidence so the two derived link kinds are
+ * consumer-visible (they are never persisted on the graph).
+ */
+export interface DerivedAssociation {
+    kind: 'TESTS' | 'USES_FIXTURE';
+    /** Workspace-relative test file. */
+    fromFile: string;
+    /** Workspace-relative implementation or fixture file. */
+    toFile: string;
+    evidence: string;
+    confidence: OntologyLinkConfidence;
+}
+export interface TestPackResult {
+    target: {
+        files: string[];
+        symbol: string | null;
+    };
+    tests: TestPackTestEntry[];
+    fixtures: TestPackFixture[];
+    /** Non-fixture node deps shared by >= 2 discovered tests or under test-support directories. */
+    helpers: string[];
+    /** Target exports with no detected test coverage (coverage hints). */
+    uncoveredExports: Array<{
+        file: string;
+        symbol: string;
+    }>;
+    /** Fixed-vocabulary advisory notes (missing tests, uncovered exports, heuristic-only association). */
+    riskNotes: string[];
+    /** Derived TESTS / USES_FIXTURE associations (bounded, evidence + confidence). */
+    associations: DerivedAssociation[];
+    /** Aggregate across every bounded section: tests + fixtures + helpers + associations. */
+    budget: {
+        returned: number;
+        dropped: number;
+    };
+    truncated: boolean;
+    warnings: string[];
+}
 export interface GraphExtractionFailure {
     file: string;
     language: string;

package/dist/tools/repo-graph.d.ts

@@ -12,6 +12,7 @@
  *   builder.ts     — workspace scanning and full-graph construction
  *   incremental.ts — incremental updates for changed files
  *   symbol-query.ts — KG-14 symbol/impact/diff/explain queries (issue #1535)
+ *   pack-query.ts  — KG-15 route/data/test change-risk packs (issue #1536)
  *
  * All existing imports of this module continue to work unchanged.
  */
@@ -23,11 +24,12 @@ export type { FreshnessOptions, FreshnessProbe, } from './repo-graph/freshness';
 export { EXTRACTOR_STAMP, FINGERPRINT_SCHEMA_VERSION, invalidateFreshnessCache, probeFreshness, REPO_GRAPH_FINGERPRINT_FILENAME, writeFingerprint, } from './repo-graph/freshness';
 export { updateGraphForFiles } from './repo-graph/incremental';
 export type { ExtractFileOntologyInput } from './repo-graph/ontology';
-export { extractFileOntology } from './repo-graph/ontology';
+export { extractFileOntology, normalizeRoutePathInput, } from './repo-graph/ontology';
+export { buildTestPack, traceData, traceRoute } from './repo-graph/pack-query';
 export type { DeadExportsOptions } from './repo-graph/query';
 export { buildOntologyPreflightPacket, getBlastRadius, getCallers, getContextPack, getDeadExports, getDependencies, getFileOntology, getGraphHealth, getGraphNode, getImporters, getKeyFiles, getLocalizationContext, getPackageBoundaries, getSymbolConsumers, isGraphFresh, resetQueryCache, } from './repo-graph/query';
 export { getGraphPath, loadGraph, loadGraphSync, loadOrCreateGraph, saveGraph, saveIfDirty, } from './repo-graph/storage';
 export { explainGraphEntry, getDiffContext, getImpactCone, getSymbolContext, searchSymbols, } from './repo-graph/symbol-query';
-export type { AskHit, AskOptions, AskResult, BlastRadiusResult, BuildWorkspaceGraphOptions, CallerReference, ConeEntry, ContextPackCoverage, ContextPackResult, ContextPackSnippet, ContextPackSourceMode, ContextPackSpan, ConventionFact, DataOperationFact, DeadExportCandidate, DeadExportsResult, DiffContextResult, DiffFileSummary, DiffSymbolChange, ExplainReason, FileOntology, FileReference, FileRole, FreshnessProbeState, GraphEdge, GraphExplainResult, GraphExtractionFailure, GraphExtractorInputWitness, GraphHealthResult, GraphNode, GraphSymbolKind, GraphSymbolVisibility, GraphUnresolvedImport, ImpactConeResult, LocalizationBlock, OntologyFinding, PackageBoundarySummary, RepoGraph, RepoGraphDiagnostics, RouteFact, RouteMethod, SecurityFact, SymbolContextResult, SymbolEdge, SymbolEdgeEvidence, SymbolEdgeKind, SymbolEdgeResolution, SymbolHit, SymbolIdentityKind, SymbolReference, SymbolSearchResult, } from './repo-graph/types';
-export { createEmptyGraph, DEFAULT_MAX_SOURCE_BYTES, GRAPH_SCHEMA_VERSION, inferPackageBoundary, isSchemaVersionAtLeast, normalizeGraphPath, REPO_GRAPH_FILENAME, updateGraphMetadata, } from './repo-graph/types';
+export type { AskHit, AskOptions, AskResult, BlastRadiusResult, BuildWorkspaceGraphOptions, CallerReference, ConeEntry, ContextPackCoverage, ContextPackResult, ContextPackSnippet, ContextPackSourceMode, ContextPackSpan, ConventionFact, DataOperationFact, DataTraceAccess, DataTraceResult, DeadExportCandidate, DeadExportsResult, DerivedAssociation, DiffContextResult, DiffFileSummary, DiffSymbolChange, ExplainReason, FileOntology, FileReference, FileRole, FreshnessProbeState, GraphEdge, GraphExplainResult, GraphExtractionFailure, GraphExtractorInputWitness, GraphHealthResult, GraphNode, GraphSymbolKind, GraphSymbolVisibility, GraphUnresolvedImport, ImpactConeResult, LocalizationBlock, OntologyFinding, OntologyLink, OntologyLinkConfidence, OntologyLinkKind, PackageBoundarySummary, RepoGraph, RepoGraphDiagnostics, RouteFact, RouteMethod, RouteTraceResult, RouteTraceRoute, SecurityFact, SymbolContextResult, SymbolEdge, SymbolEdgeEvidence, SymbolEdgeKind, SymbolEdgeResolution, SymbolHit, SymbolIdentityKind, SymbolReference, SymbolSearchResult, TestPackFixture, TestPackResult, TestPackTestEntry, } from './repo-graph/types';
+export { createEmptyGraph, DEFAULT_MAX_SOURCE_BYTES, GRAPH_SCHEMA_VERSION, inferPackageBoundary, isSchemaVersionAtLeast, normalizeGraphPath, ONTOLOGY_LINK_CONFIDENCE_VALUES, ONTOLOGY_LINK_KIND_VALUES, REPO_GRAPH_FILENAME, updateGraphMetadata, } from './repo-graph/types';
 export { validateGraphEdge, validateGraphNode, validateWorkspace, } from './repo-graph/validation';

package/dist/tools/sast-baseline.d.ts

@@ -138,6 +138,8 @@ export type CaptureResult = {
     fingerprint_count: number;
     /** Novel absorptions recorded in triage_log by this capture. */
     absorbed_finding_count: number;
+    /** Prior triage entries whose fingerprints no longer survive this merge. */
+    dropped_triage_count: number;
 } | {
     status: 'absorption_blocked';
     path: string;

package/dist/tools/sast-scan.d.ts

@@ -98,8 +98,8 @@ export interface SastScanResult {
     truncated_pre_existing?: boolean;
     /**
      * True when moved_findings were truncated to fit result limits. Advisory
-     * telemetry only (no in-tree consumer) — kept for parity with
-     * truncated_pre_existing and for future audit consumers.
+     * telemetry: emitted into the sast_scan evidence payload when set (as is
+     * truncated_pre_existing) and mirrored on the result for callers.
      */
     truncated_moved_findings?: boolean;
 }

package/dist/tools/submit-pr-review-result.d.ts

@@ -0,0 +1,5 @@
+import { createSwarmTool } from './create-tool.js';
+export declare function executeSubmitPrReviewResult(args: unknown, directory: string, context?: {
+    sessionID?: string;
+}): Promise<string>;
+export declare const submit_pr_review_result: ReturnType<typeof createSwarmTool>;

package/dist/tools/tool-metadata.d.ts

@@ -160,6 +160,14 @@ export declare const TOOL_METADATA: {
         description: string;
         agents: "architect"[];
     };
+    submit_pr_review_result: {
+        description: string;
+        agents: never[];
+        prWorkflow: {
+            modes: "PR_REVIEW"[];
+            capability: "validate";
+        };
+    };
     approve_plan_critic: {
         description: string;
         agents: "architect"[];

package/opencode-swarm.schema.json

@@ -351,6 +351,10 @@
       },
       "additionalProperties": false
     },
+    "pr_review_legacy_transcript_compatibility": {
+      "description": "Deprecated migration-only opt-in for transcript-row PR-review base and micro discovery lanes.",
+      "type": "boolean"
+    },
     "gates": {
       "description": "Quality gate configuration (v6.9 anti-slop features).",
       "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.159.3",
+	"version": "7.160.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",