opencode-swarm 7.164.0 → 7.164.2

package/dist/pr-review/authorization.d.ts

@@ -7,10 +7,11 @@
  * `reviewer`/`test_engineer` may bypass the generic Stage-A task-workflow
  * requirement. The PR workflow controller issues an authorization bound to
  * the exact active session, workflow, run, base/head SHA, worktree revision
- * digest, role, and gate generation; the Task delegation gate consumes it
- * atomically, exactly once. Stale, cross-session, wrong-role, replayed,
- * expired, or revision-drifted requests fail closed to the normal gating
- * path.
+ * digest, role, and gate generation; the PR workflow controller boundary
+ * reserves it atomically for exactly one Task call and the Task delegation
+ * gate verifies that same call-bound reservation (idempotent for the same
+ * callID). Stale, cross-session, wrong-role, replayed, expired, or
+ * revision-drifted requests fail closed to the normal gating path.
  *
  * Binding verification: the CURRENT gate binding (head/revision/generation)
  * is supplied by the owning gate through a bound reader
@@ -80,7 +81,11 @@ type AuthorizationFile = z.infer<typeof AuthorizationFileSchema>;
 declare function reentryAuthorizationFilePath(directory: string, sessionID: string): string;
 declare function renameWithRetryAsync(tempPath: string, targetPath: string): Promise<void>;
 declare function writeAuthorizationFile(filePath: string, file: AuthorizationFile): Promise<void>;
-/** Drop consumed/expired records past the retention bound; keep newest first. */
+/**
+ * Drop expired records past the retention bound; keep newest first. A burst
+ * of consumed records must never evict a still-live unconsumed authorization
+ * before its TTL, so unconsumed records take priority within the cap.
+ */
 declare function pruneAuthorizations(records: readonly PrReviewReentryAuthorizationRecord[], nowMs: number): PrReviewReentryAuthorizationRecord[];
 /**
  * Issue a one-use authorization for the CURRENT active PR_REVIEW workflow.
@@ -93,22 +98,23 @@ export declare function issuePrReviewReentryAuthorization(directory: string, ses
     prHeadSha: string;
     role: PrReviewReentryRole;
 }): Promise<PrReviewReentryAuthorizationRecord>;
+declare function authorizationMatchesBinding(record: PrReviewReentryAuthorizationRecord, binding: PrReviewReentryBindingContext): boolean;
 /**
- * Atomically consume the one active authorization for this session+role.
- * Re-verifies the binding against the CURRENT PR_REVIEW gate state — any
- * drift (mode change, head change, revision digest change, generation bump)
- * fails closed to null, as does replay, expiry, cross-session use, or wrong
- * role. Returns the consumed record on success.
+ * Reserve or verify one authorization against a binding whose owning workflow
+ * lock is held by the caller. The authorization-file lock is always acquired
+ * second. A consumed record is retained until expiry so the exact same Task
+ * call can verify its reservation in a later hook (and after process restart).
  */
-export declare function consumePrReviewReentryAuthorization(directory: string, sessionID: string, request: {
+export declare function reservePrReviewReentryAuthorizationAgainstBinding(directory: string, sessionID: string, request: {
     role: PrReviewReentryRole;
     callID: string;
-}): Promise<PrReviewReentryAuthorizationRecord | null>;
+}, binding: PrReviewReentryBindingContext): Promise<PrReviewReentryAuthorizationRecord | null>;
 export declare const _internals: {
     AUTHORIZATION_TTL_MS: number;
     MAX_ACTIVE_AUTHORIZATIONS: number;
     reentryAuthorizationFilePath: typeof reentryAuthorizationFilePath;
     pruneAuthorizations: typeof pruneAuthorizations;
+    authorizationMatchesBinding: typeof authorizationMatchesBinding;
     /** DI seam: the rename implementation (tests inject failure modes). */
     renameImpl: (from: string, to: string) => Promise<void>;
     /** DI seam: retry backoff schedule (tests shrink to avoid real sleeps). */

package/dist/tools/authorize-pr-review-reentry.d.ts

@@ -1,14 +1,18 @@
 import { createSwarmTool } from './create-tool.js';
 /**
  * Issue a ONE-USE reviewer re-entry authorization (issue #2383) for the
- * CURRENT active PR_REVIEW workflow. The very next direct Task dispatch of
- * the declared role consumes it atomically and bypasses ONLY the generic
- * Stage-A task-workflow requirement; every other delegation gate stays
- * authoritative. Bindings are exact (session, workflow, run, head SHA,
- * worktree revision digest, role, gate generation): replay, cross-session
- * use, wrong role, expiry, or any workflow progress since issuance fails
- * closed. Issue immediately before the Task dispatch — authorizations are
- * not stockpilable.
+ * CURRENT active PR_REVIEW workflow. The very next direct subagent_type Task
+ * dispatch of the declared role reserves it atomically at the controller
+ * boundary — admitting that one dispatch past the PR_REVIEW read-only
+ * restriction — and the delegation gate verifies the same call-bound
+ * reservation while bypassing ONLY the generic Stage-A task-workflow
+ * requirement; every other delegation gate stays authoritative. Bindings are
+ * exact (session, workflow, run, head SHA, worktree revision digest, role,
+ * gate generation): replay, cross-session use, wrong role, expiry, or any
+ * workflow progress since issuance fails closed. A Task the delegation gate
+ * later rejects for an unrelated reason still burns the authorization —
+ * issue a fresh one before retrying. Issue immediately before the Task
+ * dispatch — authorizations are not stockpilable.
  */
 export declare function executeAuthorizePrReviewReentry(args: unknown, directory: string, context?: {
     sessionID?: string;

package/dist/tools/tool-metadata.d.ts

@@ -466,7 +466,7 @@ export declare const TOOL_METADATA: {
     };
     repo_map: {
         description: string;
-        agents: ("coder" | "reviewer" | "critic" | "critic_oversight" | "critic_finding_validator" | "explorer" | "architect" | "critic_sounding_board" | "critic_drift_verifier" | "critic_hallucination_verifier" | "critic_architecture_supervisor")[];
+        agents: ("coder" | "reviewer" | "test_engineer" | "critic" | "critic_oversight" | "critic_finding_validator" | "explorer" | "architect" | "critic_sounding_board" | "critic_drift_verifier" | "critic_hallucination_verifier" | "critic_architecture_supervisor")[];
         prWorkflow: {
             modes: ("PR_REVIEW" | "PR_FEEDBACK")[];
             capability: "observe";

package/opencode-swarm.schema.json

@@ -1583,7 +1583,10 @@
               {
                 "type": "string"
               }
-            ]
+            ],
+            "items": false,
+            "minItems": 2,
+            "maxItems": 2
           }
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.164.0",
+	"version": "7.164.2",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/authorization-vstrh7ra.js

@@ -1,23 +0,0 @@
-// @bun
-import {
-  _internals,
-  bindPrReviewReentryBindingReader,
-  consumePrReviewReentryAuthorization,
-  issuePrReviewReentryAuthorization
-} from "./index-mmngnxev.js";
-import"./index-w7ekntej.js";
-import"./index-dtn0pne5.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
-import"./index-zjygnfay.js";
-import"./index-ed5ykebp.js";
-import"./index-7g4c7s5r.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  issuePrReviewReentryAuthorization,
-  consumePrReviewReentryAuthorization,
-  bindPrReviewReentryBindingReader,
-  _internals
-};

package/dist/cli/curator-llm-factory-msbj3hpn.js

@@ -1,69 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-xk0kc1py.js";
-import"./index-c4pynht5.js";
-import"./index-9sy65e94.js";
-import"./index-g64154pd.js";
-import"./index-hyq20s2v.js";
-import"./index-2s4s9n82.js";
-import"./index-txdagbh7.js";
-import"./index-3146wmgv.js";
-import"./index-pvgcex0d.js";
-import"./index-t5t82jy8.js";
-import"./index-e3hwzcjv.js";
-import"./index-70ha9e09.js";
-import"./index-0515j0cz.js";
-import"./index-1hpjwz3s.js";
-import"./index-zaab1wz9.js";
-import"./index-ma8w6pfp.js";
-import"./index-zsrtt42s.js";
-import"./index-4afh2cz7.js";
-import"./index-3f7hqtgg.js";
-import"./index-fckfgptr.js";
-import"./index-gxd8fwyt.js";
-import"./index-tb1k8jya.js";
-import"./index-rtry5xyf.js";
-import"./index-7r9vpkwa.js";
-import"./index-nzrhw31r.js";
-import"./index-12f1tsn2.js";
-import"./index-ddszzne4.js";
-import"./index-mmngnxev.js";
-import"./index-w7ekntej.js";
-import"./index-4jersar8.js";
-import"./index-1z4jzwja.js";
-import"./index-93sepnc9.js";
-import"./index-556ja8an.js";
-import"./index-4fwbbad3.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-bm73pych.js";
-import"./index-zbpcpsk0.js";
-import"./index-t9rhtvy9.js";
-import"./index-zg9d392c.js";
-import"./index-n832052r.js";
-import"./index-dtn0pne5.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
-import"./index-nhxaa9j5.js";
-import"./index-td6n935w.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-wdtckfnf.js";
-import"./index-9xd073d4.js";
-import"./index-zjygnfay.js";
-import"./index-ae75rja9.js";
-import"./index-ynqp3jb6.js";
-import"./index-70bfj3v1.js";
-import"./index-bk5tah7q.js";
-import"./index-36nt17m8.js";
-import"./index-3b762978.js";
-import"./index-1b1h770t.js";
-import"./index-ed5ykebp.js";
-import"./index-7g4c7s5r.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-kksdy032.js

@@ -1,70 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-c69jbpex.js";
-import"./index-xk0kc1py.js";
-import"./index-c4pynht5.js";
-import"./index-9sy65e94.js";
-import"./index-g64154pd.js";
-import"./index-hyq20s2v.js";
-import"./index-2s4s9n82.js";
-import"./index-txdagbh7.js";
-import"./index-3146wmgv.js";
-import"./index-pvgcex0d.js";
-import"./index-t5t82jy8.js";
-import"./index-e3hwzcjv.js";
-import"./index-70ha9e09.js";
-import"./index-0515j0cz.js";
-import"./index-1hpjwz3s.js";
-import"./index-zaab1wz9.js";
-import"./index-ma8w6pfp.js";
-import"./index-zsrtt42s.js";
-import"./index-4afh2cz7.js";
-import"./index-3f7hqtgg.js";
-import"./index-fckfgptr.js";
-import"./index-gxd8fwyt.js";
-import"./index-tb1k8jya.js";
-import"./index-rtry5xyf.js";
-import"./index-7r9vpkwa.js";
-import"./index-nzrhw31r.js";
-import"./index-12f1tsn2.js";
-import"./index-ddszzne4.js";
-import"./index-mmngnxev.js";
-import"./index-w7ekntej.js";
-import"./index-4jersar8.js";
-import"./index-1z4jzwja.js";
-import"./index-93sepnc9.js";
-import"./index-556ja8an.js";
-import"./index-4fwbbad3.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-bm73pych.js";
-import"./index-zbpcpsk0.js";
-import"./index-t9rhtvy9.js";
-import"./index-zg9d392c.js";
-import"./index-n832052r.js";
-import"./index-dtn0pne5.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
-import"./index-nhxaa9j5.js";
-import"./index-td6n935w.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-wdtckfnf.js";
-import"./index-9xd073d4.js";
-import"./index-zjygnfay.js";
-import"./index-ae75rja9.js";
-import"./index-ynqp3jb6.js";
-import"./index-70bfj3v1.js";
-import"./index-bk5tah7q.js";
-import"./index-36nt17m8.js";
-import"./index-3b762978.js";
-import"./index-1b1h770t.js";
-import"./index-ed5ykebp.js";
-import"./index-7g4c7s5r.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};

package/dist/cli/index-ed5ykebp.js

@@ -1,151 +0,0 @@
-// @bun
-// src/utils/swarm-artifact-cache.ts
-import * as fsSync from "fs";
-import * as fs from "fs/promises";
-import * as path from "path";
-var MAX_CACHE_ENTRIES = 128;
-var textCache = new Map;
-var parsedCache = new Map;
-var stats = {
-  textReadCount: 0,
-  textCacheHitCount: 0,
-  textCacheMissCount: 0,
-  parsedReadCount: 0,
-  parseCount: 0,
-  parsedCacheHitCount: 0,
-  parsedCacheMissCount: 0,
-  statFailureCount: 0,
-  evictionCount: 0,
-  textEvictionCount: 0,
-  parsedEvictionCount: 0,
-  cloneFallbackCount: 0,
-  textEntryCount: 0,
-  parsedEntryCount: 0
-};
-function sameStamp(a, b) {
-  return a.mtimeMs === b.mtimeMs && a.ctimeMs === b.ctimeMs && a.size === b.size;
-}
-var _internals = {
-  stat: fs.stat,
-  statSync: fsSync.statSync
-};
-async function getStamp(filePath) {
-  try {
-    const stat2 = await _internals.stat(filePath);
-    if (!stat2.isFile())
-      return null;
-    return { mtimeMs: stat2.mtimeMs, ctimeMs: stat2.ctimeMs, size: stat2.size };
-  } catch {
-    stats.statFailureCount++;
-    return null;
-  }
-}
-function canStoreRead(before, after) {
-  return after !== null && sameStamp(before, after);
-}
-function setBounded(cache, key, value, cacheKind) {
-  cache.set(key, value);
-  while (cache.size > MAX_CACHE_ENTRIES) {
-    const oldest = cache.keys().next().value;
-    if (oldest === undefined)
-      break;
-    cache.delete(oldest);
-    stats.evictionCount++;
-    if (cacheKind === "text") {
-      stats.textEvictionCount++;
-    } else {
-      stats.parsedEvictionCount++;
-    }
-  }
-  stats.textEntryCount = textCache.size;
-  stats.parsedEntryCount = parsedCache.size;
-}
-function cloneCachedValue(value) {
-  if (value === null || typeof value !== "object")
-    return value;
-  if (typeof structuredClone === "function") {
-    return structuredClone(value);
-  }
-  stats.cloneFallbackCount++;
-  return JSON.parse(JSON.stringify(value));
-}
-async function readCachedTextFile(filePath, directRead) {
-  const cacheKey = path.resolve(filePath);
-  const stamp = await getStamp(cacheKey);
-  if (!stamp) {
-    stats.textReadCount++;
-    return directRead();
-  }
-  const cached = textCache.get(cacheKey);
-  if (cached && sameStamp(cached, stamp)) {
-    stats.textCacheHitCount++;
-    return cached.value;
-  }
-  stats.textCacheMissCount++;
-  stats.textReadCount++;
-  const value = await directRead();
-  const afterReadStamp = await getStamp(cacheKey);
-  if (value !== null && canStoreRead(stamp, afterReadStamp)) {
-    setBounded(textCache, cacheKey, { ...afterReadStamp, value }, "text");
-  }
-  return value;
-}
-async function readCachedParsedFile(filePath, namespace, readText, parse) {
-  const resolvedPath = path.resolve(filePath);
-  const cacheKey = `${resolvedPath}\x00${namespace}`;
-  const stamp = await getStamp(resolvedPath);
-  if (!stamp) {
-    stats.parsedReadCount++;
-    const content2 = await readText();
-    if (content2 === null)
-      return null;
-    stats.parseCount++;
-    return parse(content2);
-  }
-  const cached = parsedCache.get(cacheKey);
-  if (cached && sameStamp(cached, stamp)) {
-    stats.parsedCacheHitCount++;
-    return cloneCachedValue(cached.value);
-  }
-  stats.parsedCacheMissCount++;
-  stats.parsedReadCount++;
-  const content = await readText();
-  if (content === null)
-    return null;
-  stats.parseCount++;
-  const value = parse(content);
-  const afterReadStamp = await getStamp(resolvedPath);
-  if (canStoreRead(stamp, afterReadStamp)) {
-    setBounded(parsedCache, cacheKey, { ...afterReadStamp, value }, "parsed");
-  }
-  return cloneCachedValue(value);
-}
-function invalidateCachedArtifact(filePath) {
-  const resolvedPath = path.resolve(filePath);
-  textCache.delete(resolvedPath);
-  const prefix = `${resolvedPath}\x00`;
-  for (const key of parsedCache.keys()) {
-    if (key.startsWith(prefix))
-      parsedCache.delete(key);
-  }
-}
-function resetSwarmArtifactCache() {
-  textCache.clear();
-  parsedCache.clear();
-  stats.textReadCount = 0;
-  stats.textCacheHitCount = 0;
-  stats.textCacheMissCount = 0;
-  stats.parsedReadCount = 0;
-  stats.parseCount = 0;
-  stats.parsedCacheHitCount = 0;
-  stats.parsedCacheMissCount = 0;
-  stats.statFailureCount = 0;
-  stats.evictionCount = 0;
-  stats.textEvictionCount = 0;
-  stats.parsedEvictionCount = 0;
-  stats.cloneFallbackCount = 0;
-  stats.textEntryCount = 0;
-  stats.parsedEntryCount = 0;
-}
-
-export { readCachedTextFile, readCachedParsedFile, invalidateCachedArtifact, resetSwarmArtifactCache };