opencode-swarm 7.164.0 → 7.164.2

package/dist/cli/{schema-9xkt5hvd.js → schema-674qw3aj.js}

@@ -102,8 +102,8 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-td6n935w.js";
-import"./index-9xd073d4.js";
+} from "./index-3704v4e6.js";
+import"./index-m1nrd3yd.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{scope-persistence-gk55h3sp.js → scope-persistence-sq331eqh.js}

@@ -23,22 +23,21 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-4jersar8.js";
-import"./index-1z4jzwja.js";
-import"./index-93sepnc9.js";
+} from "./index-axtnc0xf.js";
+import"./index-w8qt2612.js";
+import"./index-0145kpjr.js";
 import"./index-556ja8an.js";
-import"./index-nhxaa9j5.js";
-import"./index-td6n935w.js";
+import"./index-xm6c1tnf.js";
+import"./index-3704v4e6.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-wdtckfnf.js";
-import"./index-9xd073d4.js";
+import"./index-ac39znep.js";
+import"./index-m1nrd3yd.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-36nt17m8.js";
-import"./index-3b762978.js";
-import"./index-1b1h770t.js";
-import"./index-ed5ykebp.js";
+import"./index-yep24wn4.js";
+import"./index-f9nfknjg.js";
+import"./index-bzd67m2j.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{skill-generator-sxxf7jbb.js → skill-generator-pcw7c50r.js}

@@ -33,34 +33,33 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-pvgcex0d.js";
-import"./index-gxd8fwyt.js";
-import"./index-tb1k8jya.js";
+} from "./index-kwd09y5a.js";
+import"./index-q3xn3m3g.js";
+import"./index-sb4eanpv.js";
 import"./index-rtry5xyf.js";
 import"./index-q7sjgr1y.js";
-import"./index-bm73pych.js";
-import"./index-zbpcpsk0.js";
-import"./index-t9rhtvy9.js";
+import"./index-br7q79t2.js";
+import"./index-gz5rn6w6.js";
+import"./index-fyt5byhd.js";
 import"./index-zg9d392c.js";
 import"./index-n832052r.js";
-import"./index-dtn0pne5.js";
+import"./index-v56mhyhs.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-nhxaa9j5.js";
-import"./index-td6n935w.js";
+import"./index-xm6c1tnf.js";
+import"./index-3704v4e6.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-wdtckfnf.js";
-import"./index-9xd073d4.js";
+import"./index-ac39znep.js";
+import"./index-m1nrd3yd.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-ynqp3jb6.js";
-import"./index-70bfj3v1.js";
+import"./index-5d7bzpfn.js";
+import"./index-zs1jrsta.js";
 import"./index-bk5tah7q.js";
-import"./index-36nt17m8.js";
-import"./index-3b762978.js";
-import"./index-1b1h770t.js";
-import"./index-ed5ykebp.js";
+import"./index-yep24wn4.js";
+import"./index-f9nfknjg.js";
+import"./index-bzd67m2j.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{telemetry-q51s6tyt.js → telemetry-c4j18da8.js}

@@ -14,7 +14,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-1b1h770t.js";
+} from "./index-bzd67m2j.js";
 import"./index-bpmtbmy9.js";
 import"./index-a76rekgs.js";
 export {

package/dist/cli/{worktree-collision-ownership-7kj2ryt1.js → worktree-collision-ownership-vnj31rgc.js}

@@ -6,14 +6,13 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-fckfgptr.js";
+} from "./index-qbr05tbw.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-12f1tsn2.js";
+} from "./index-hnwg5gt6.js";
 import"./index-ddszzne4.js";
-import"./index-w7ekntej.js";
-import"./index-dtn0pne5.js";
+import"./index-v56mhyhs.js";
 import"./index-z6xqpmqg.js";
 import {
   bunSpawn
@@ -23,12 +22,11 @@ import {
   resolveGitExecutable
 } from "./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-wdtckfnf.js";
+import"./index-ac39znep.js";
 import"./index-zjygnfay.js";
-import"./index-36nt17m8.js";
-import"./index-3b762978.js";
-import"./index-1b1h770t.js";
-import"./index-ed5ykebp.js";
+import"./index-yep24wn4.js";
+import"./index-f9nfknjg.js";
+import"./index-bzd67m2j.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-isolation-67fs6rz9.js → worktree-isolation-tje6p4zt.js}

@@ -21,67 +21,64 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-xk0kc1py.js";
-import"./index-c4pynht5.js";
-import"./index-9sy65e94.js";
-import"./index-g64154pd.js";
-import"./index-hyq20s2v.js";
-import"./index-2s4s9n82.js";
+} from "./index-yjftcanv.js";
+import"./index-2xj34nkh.js";
+import"./index-qmeewt3g.js";
+import"./index-34exj2e3.js";
+import"./index-6vtm4rd0.js";
+import"./index-w5jpjaqe.js";
 import"./index-txdagbh7.js";
 import"./index-3146wmgv.js";
-import"./index-pvgcex0d.js";
-import"./index-t5t82jy8.js";
-import"./index-e3hwzcjv.js";
+import"./index-kwd09y5a.js";
+import"./index-yqhwrjw9.js";
+import"./index-b85jnfp4.js";
 import"./index-70ha9e09.js";
-import"./index-0515j0cz.js";
-import"./index-1hpjwz3s.js";
+import"./index-y2f5s2cf.js";
+import"./index-hcn69kp0.js";
 import"./index-zaab1wz9.js";
-import"./index-ma8w6pfp.js";
+import"./index-c8k4cs94.js";
 import"./index-zsrtt42s.js";
-import"./index-4afh2cz7.js";
+import"./index-92q98ry8.js";
 import"./index-3f7hqtgg.js";
-import"./index-fckfgptr.js";
-import"./index-gxd8fwyt.js";
-import"./index-tb1k8jya.js";
+import"./index-qbr05tbw.js";
+import"./index-q3xn3m3g.js";
+import"./index-sb4eanpv.js";
 import"./index-rtry5xyf.js";
-import"./index-7r9vpkwa.js";
-import"./index-nzrhw31r.js";
-import"./index-12f1tsn2.js";
+import"./index-h9wnkr2e.js";
+import"./index-zgeqwbhw.js";
+import"./index-hnwg5gt6.js";
 import"./index-ddszzne4.js";
-import"./index-mmngnxev.js";
-import"./index-w7ekntej.js";
-import"./index-4jersar8.js";
-import"./index-1z4jzwja.js";
-import"./index-93sepnc9.js";
+import"./index-axtnc0xf.js";
+import"./index-w8qt2612.js";
+import"./index-0145kpjr.js";
 import"./index-556ja8an.js";
 import"./index-4fwbbad3.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-bm73pych.js";
-import"./index-zbpcpsk0.js";
+import"./index-br7q79t2.js";
+import"./index-gz5rn6w6.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-t9rhtvy9.js";
+} from "./index-fyt5byhd.js";
 import"./index-zg9d392c.js";
 import"./index-n832052r.js";
-import"./index-dtn0pne5.js";
+import"./index-v56mhyhs.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-nhxaa9j5.js";
-import"./index-td6n935w.js";
+import"./index-xm6c1tnf.js";
+import"./index-3704v4e6.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-wdtckfnf.js";
-import"./index-9xd073d4.js";
+import"./index-ac39znep.js";
+import"./index-m1nrd3yd.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-ynqp3jb6.js";
-import"./index-70bfj3v1.js";
+import"./index-5d7bzpfn.js";
+import"./index-zs1jrsta.js";
 import"./index-bk5tah7q.js";
-import"./index-36nt17m8.js";
-import"./index-3b762978.js";
-import"./index-1b1h770t.js";
-import"./index-ed5ykebp.js";
+import"./index-yep24wn4.js";
+import"./index-f9nfknjg.js";
+import"./index-bzd67m2j.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/hooks/delegate-ack-collector.d.ts

@@ -27,6 +27,7 @@
  * durable `delegate_directive` memberships) and Task collections share ONE
  * implementation — not a second lifecycle copy.
  */
+import { type TaskIdResolution } from './task-id-resolver.js';
 export interface DelegateAckInput {
     tool: unknown;
     agent?: unknown;
@@ -36,6 +37,8 @@ export interface DelegateAckInput {
 export interface DelegateAckOutput {
     output?: unknown;
 }
+/** Best-effort extraction of a task id from a delegation prompt envelope. */
+export declare function resolveDelegateAckTaskId(args: Record<string, unknown>, knownPlanTaskIds?: ReadonlySet<string>, planContextOverLimit?: boolean): string | undefined;
 export interface CollectDelegateAcksResult {
     emitted: Array<{
         id: string;
@@ -113,6 +116,8 @@ export declare function collectDelegateAcks(params: {
     agent: string;
     sessionId?: string;
     taskId?: string;
+    /** A caller-owned resolution attempt; non-resolved states forbid reparsing. */
+    taskIdResolution?: TaskIdResolution;
 }): Promise<CollectDelegateAcksResult>;
 export interface CollectLaneDelegateAcksResult extends CollectDelegateAcksResult {
     /**

package/dist/hooks/delegation-gate.d.ts

@@ -11,6 +11,9 @@ import { type QaGates } from '../db/qa-gate-profile.js';
 import { loadPlanJsonOnly } from '../plan/manager';
 import type { AgentSessionState } from '../state';
 import type { DelegationEnvelope, EnvelopeValidationResult } from '../types/delegation.js';
+import { type PlanTaskIdContext } from './plan-task-id-context.js';
+import { resolveDelegatedPlanTaskId } from './task-id-resolver.js';
+export { resolveDelegatedPlanTaskId } from './task-id-resolver.js';
 import { resetStandardWorktreeIsolationState } from './delegation-gate/worktree-isolation';
 export { resetStandardWorktreeIsolationState };
 import { _internals as _wtiInternals } from './delegation-gate/worktree-isolation';
@@ -351,6 +354,14 @@ interface MessageWithParts {
     info: MessageInfo;
     parts: MessagePart[];
 }
+/**
+ * Extracts a plan task ID (N.M or N.M.P format) from text.
+ * Checks for:
+ * 1. Task IDs in task list format: "- [ ] 1.1: ..." or "- [x] 1.1: ..."
+ * 2. Standalone task IDs like "1.1" or "1.2.3" near the TASK: line
+ * Returns the plan task ID if found, otherwise null.
+ */
+declare function extractPlanTaskId(text: string): string | null;
 declare function extractPlanCriticVerdict(output: unknown): 'APPROVED' | 'NEEDS_REVISION' | 'REJECTED' | null;
 /**
  * Returns whether the plan in the given directory has a valid plan-critic
@@ -407,7 +418,6 @@ export declare function forceRecordPlanCriticApproval(directory: string, session
     reason?: string;
     userConfirmed: boolean;
 }>;
-export declare function resolveDelegatedPlanTaskId(args: Record<string, unknown>, knownPlanTaskIds?: ReadonlySet<string>): string | null;
 /**
  * Builds a cause-specific diagnostic for `prepareCoderScope`'s SCOPE_NOT_DECLARED
  * throw when `resolveDelegatedPlanTaskId` returns null. Re-runs extraction with
@@ -418,7 +428,7 @@ export declare function resolveDelegatedPlanTaskId(args: Record<string, unknown>
  * latency, and does NOT handle plan-task-shaped-but-unknown ids (those are
  * rejected by the membership gate in prepareCoderScope with their own message).
  */
-declare function describeCoderScopeFailure(args: Record<string, unknown>, planTaskIds: ReadonlySet<string>): string;
+declare function describeCoderScopeFailure(args: Record<string, unknown>, planTaskIdContext: PlanTaskIdContext): string;
 type FileDirectiveExtractionMode = 'enforce' | 'observe';
 declare function extractTaskFileDirectives(args: Record<string, unknown>, mode?: FileDirectiveExtractionMode): {
     present: boolean;
@@ -493,7 +503,9 @@ export declare const _internals: {
     resetStandardWorktreeIsolationState: typeof resetStandardWorktreeIsolationState;
     PLAN_CRITIC_TASK_SIGNALS: readonly ["critic-gate", "plan critic", "review plan", "review the plan", "plan.md", "approve the plan", "plan approval", "pre-implementation review", "evaluate this plan", "evaluate the plan", "assess this plan", "assess the plan", "plan soundness", "before implementation", "review the plan below"];
     extractPlanCriticVerdict: typeof extractPlanCriticVerdict;
+    extractPlanTaskId: typeof extractPlanTaskId;
     forceRecordPlanCriticApproval: typeof forceRecordPlanCriticApproval;
+    beforePrFeedbackScopeConsume: (() => Promise<void>) | undefined;
     provisionWorktree: typeof _wtiInternals.provisionWorktree;
     removeWorktree: typeof _wtiInternals.removeWorktree;
     attemptMergeBackFromDirty: typeof _wtiInternals.attemptMergeBackFromDirty;

package/dist/hooks/plan-task-id-context.d.ts

@@ -0,0 +1,24 @@
+import { type TaskIdPlanContextOptions } from './task-id-resolver.js';
+export type PlanTaskIdContext = {
+    status: 'available';
+    taskIds: ReadonlySet<string>;
+} | {
+    status: 'unavailable';
+} | {
+    status: 'over_limit';
+};
+/** Traverse plan phases without first materializing an unbounded flat task list. */
+export declare function collectPlanTaskIdContextFromPhases(phases: ReadonlyArray<{
+    tasks?: ReadonlyArray<{
+        id?: string;
+    } | null> | null;
+} | null | undefined>): PlanTaskIdContext;
+/**
+ * Best-effort caller-side plan context for the pure task-ID resolver.
+ * Missing/corrupt plans remain distinguishable from valid plans whose task-ID
+ * cardinality exceeds the resolver bound. Callers must preserve that distinction
+ * so numeric IDs never become unfiltered when a plan is merely too large.
+ */
+export declare function loadPlanTaskIdContext(directory: string): Promise<PlanTaskIdContext>;
+/** Convert a typed loader result into the resolver's bounded plan context. */
+export declare function toTaskIdPlanContextOptions(context: PlanTaskIdContext): TaskIdPlanContextOptions;

package/dist/hooks/pr-workflow-gate.d.ts

@@ -8,6 +8,7 @@ import { type PrReviewInlineTriggerRow } from '../background/pr-review-trigger-c
 import { type RevisionDigestResult, resolveCommitCountSince, resolveCommitCountSinceAsync, resolveCurrentGitHead, resolveCurrentGitHeadAsync, resolveCurrentLocalHeadRefAsync, resolveCurrentUpstreamPushTarget, resolveCurrentUpstreamPushTargetAsync, resolveCurrentUpstreamRemoteRef, resolveExactRemoteBranchHead, resolveExactRemoteBranchHeadAsync, resolveIsExactSingleChildCommit, resolveIsExactSingleChildCommitAsync, resolveIsWorkingTreeClean, resolveIsWorkingTreeCleanAsync, resolvePrReviewDiffStats, resolvePrReviewDiffStatsAsync, resolvePrWorkflowRevisionDigest, resolvePrWorkflowRevisionDigestDetailed, resolveRemoteRefsContainingHead, resolveRemoteRefsContainingHeadAsync, resolveRemoteUrlIdentity, resolveRemoteUrlIdentityAsync } from '../background/workspace-snapshot.js';
 import { type PrReviewResilienceConfig } from '../config/schema.js';
 import { classifyPrWorkflowGitState, type PrWorkflowGitState } from '../git/pr-workflow-state.js';
+import { type PrReviewReentryAuthorizationRecord, type PrReviewReentryBindingContext, type PrReviewReentryRole } from '../pr-review/authorization.js';
 import { classifyPrReviewCircuitSignal, type PrReviewCircuitLegacyRecord, type PrReviewCircuitRecordV2, type PrReviewResiliencePolicyRecord, resolvePrReviewResiliencePolicy } from '../pr-review/circuit.js';
 import { type PrReviewDimensionCancellationRecord, type PrReviewPartialBaseCoverageRecord, type PrReviewReportVerdict, type PrReviewTerminalCoverageSettlement } from '../pr-review/completion.js';
 import { type PrReviewComposablePhase, type PrReviewPhaseComposition, parseCriticVerdict } from '../pr-review/legacy-transcript-adapter.js';
@@ -1252,7 +1253,7 @@ export declare function transitionPrReviewToFeedback(directory: string, sessionI
 }): Promise<PrWorkflowGateState>;
 export declare function declarePrFeedbackScope(directory: string, sessionID: string, taskId: string, files: string[]): Promise<PrWorkflowGateState>;
 export declare function resolvePrFeedbackScopeDeclaration(directory: string, sessionID: string, taskId: string): Promise<PrFeedbackScopeDeclarationRecord | null>;
-export declare function consumePrFeedbackScopeDeclaration(directory: string, sessionID: string, taskId: string, callID: string): Promise<PrFeedbackScopeDeclarationRecord | null>;
+export declare function consumePrFeedbackScopeDeclaration(directory: string, sessionID: string, taskId: string, callID: string, expected: Pick<PrFeedbackScopeDeclarationRecord, 'declaredAt' | 'revisionDigest' | 'files'>): Promise<PrFeedbackScopeDeclarationRecord | null>;
 export declare function validatePrFeedbackScopeBinding(directory: string, binding: {
     taskId: string;
     files: string[];
@@ -1270,13 +1271,16 @@ export declare function enforcePrWorkflowToolBefore(directory: string, sessionID
  * revision), workflow instance id, and the active run id. Null when no active
  * head-bound PR_REVIEW gate exists for the session.
  */
-export declare function readPrReviewReentryBindingContext(directory: string, sessionID: string): Promise<{
-    prHeadSha: string;
-    revisionDigest: string;
-    generation: number;
-    workflowInstanceId?: string;
-    runId?: string;
-} | null>;
+export declare function readPrReviewReentryBindingContext(directory: string, sessionID: string): Promise<PrReviewReentryBindingContext | null>;
+/**
+ * Sole production reservation/verification path for direct PR-review re-entry.
+ * Lock order is fixed: workflow-session first, authorization store second. The
+ * active binding cannot change between its locked reread and reservation commit.
+ */
+export declare function reserveActivePrReviewReentryAuthorization(directory: string, sessionID: string, request: {
+    role: PrReviewReentryRole;
+    callID: string;
+}): Promise<PrReviewReentryAuthorizationRecord | null>;
 export declare function completePrWorkflow(directory: string, sessionID: string, expectedMode: PrWorkflowMode, prHeadSha: string, options?: {
     reportVerdict?: PrReviewReportVerdict;
 }): Promise<PrWorkflowCompletionStatus>;
@@ -1305,6 +1309,8 @@ export declare const _test_exports: {
     beforePrFeedbackTrackingSwitch: (() => Promise<void>) | undefined;
     afterPrFeedbackTrackingSwitch: (() => Promise<void>) | undefined;
     beforePrFeedbackTrackingPersist: (() => Promise<void>) | undefined;
+    /** Interleave point held inside the workflow-session lock before auth commit. */
+    beforePrReviewReentryReservation: (() => Promise<void>) | undefined;
     beforeBoundedSwarmFileOpen: (() => Promise<void>) | undefined;
     beforeSessionStateLockWrite: (() => Promise<void>) | undefined;
     beforeCheckoutLockWrite: (() => Promise<void>) | undefined;

package/dist/hooks/pr-workflow-response-gate.d.ts

@@ -1,3 +1,4 @@
+import { scanDelegationsForRecovery } from '../background/pending-delegations.js';
 import { claimPrFeedbackMonitorEvents, readPrFeedbackMonitorQueue } from '../background/pr-feedback-event-queue.js';
 import { observePrWorkflowAutoWakeEvent } from './pr-workflow-auto-wake.js';
 import { type PrReviewDepthTier, readPrWorkflowGateState } from './pr-workflow-gate.js';
@@ -10,22 +11,16 @@ export declare const _internals: {
     claimPrFeedbackMonitorEvents: typeof claimPrFeedbackMonitorEvents;
     readPrFeedbackMonitorQueue: typeof readPrFeedbackMonitorQueue;
     observePrWorkflowAutoWakeEvent: typeof observePrWorkflowAutoWakeEvent;
+    scanDelegationsForRecovery: typeof scanDelegationsForRecovery;
 };
 /**
  * Maximum number of consecutive unproductive auto-resumes per gated session
  * before the response gate suspends further wakes. "Unproductive" means the
- * durable gate's `revision` did not advance between wakes — i.e. no
- * state-mutating controller tool (dispatch_lanes_async,
- * write_pr_review_trigger_eval, complete_pr_workflow, recordPrReview*,
- * bindPrReviewBase, …) made durable progress. A healthy review bumps
- * `revision` on every successful state-mutating controller call, so the
- * consecutive counter resets on progress and never exhausts the budget.
- * Read-only tools (collect_lane_results polling, grep, read) intentionally do
- * NOT bump `revision` — an architect that only polls without ever dispatching
- * new lanes or recording trigger evaluations IS making progress on the
- * runtime's bookkeeping but is not advancing the durable gate, so the budget
- * treats long polling-only stretches conservatively. Only a genuinely stuck
- * session holds `revision` constant across many idle cycles.
+ * fixed-size digest of the durable gate plus its exact active delegation lanes
+ * did not change. Controller revisions, lane status transitions, terminal
+ * events, and structured receipt digests count as progress; repeated
+ * collect_lane_results polls do not. Strict-ledger uncertainty is sticky and
+ * never earns progress credit, including the first recovered snapshot.
  */
 export declare const DEFAULT_MAX_CONSECUTIVE_UNPRODUCTIVE_WAKES = 5;
 /**
@@ -102,6 +97,8 @@ interface WakeBudget {
     consecutiveUnproductive: number;
     lastWakeAt: number;
     lastSeenRevision?: number;
+    lastSeenProgressToken?: string;
+    progressUncertain: boolean;
     suspended: boolean;
     /** Total number of wake attempts recorded for this budget. NEVER reset by
      * revision progress — only the consecutive counter resets on progress; that

package/dist/hooks/skill-injection.d.ts

@@ -15,9 +15,9 @@
  *     the three other recording sites in `skill-propagation-gate.ts`, (b) broke
  *     the SKILL_COMPLIANCE round-trip join except by coincidence, and (c)
  *     inflated frequency / taskID-diversity scoring. The fallback is
- *     `'auto-injected'` rather than `'unknown'` so the compliance resolver's
- *     `resolvedTaskID !== 'unknown'` guard at `skill-propagation-gate.ts:1302`
- *     continues to fire and populate fallback skill paths.
+ *     `'auto-injected'` to preserve a stable local audit ID for the injection
+ *     entry; reviewer compliance attribution still requires an explicit TASK
+ *     marker and otherwise fails closed as `'unknown'`.
  *
  *  2. Observability — a `skill_injection_decision` event is emitted to
  *     `.swarm/events.jsonl` for BOTH the qualified-injection and the
@@ -40,6 +40,10 @@ export interface RecommendedSkill {
 export interface SkillInjectionOptions {
     /** When true, suppresses console.warn output (does not affect event emission). */
     quiet?: boolean;
+    /** Caller-loaded finite plan IDs for plan-aware attribution. */
+    knownPlanTaskIds?: ReadonlySet<string>;
+    /** The caller observed a valid plan whose task-ID cardinality exceeded the bound. */
+    planContextOverLimit?: boolean;
 }
 /** Result of an injection attempt. */
 export interface SkillInjectionResult {

package/dist/hooks/skill-propagation-gate.d.ts

@@ -160,7 +160,7 @@ export declare function validateExplicitSkillReferencesBefore(directory: string,
  * Looks for patterns like "taskId: <id>" or "TASK: <id>" (case-insensitive).
  * Returns "unknown" when no pattern is found.
  */
-export declare function extractTaskIdFromPrompt(prompt: string): string;
+export declare function extractTaskIdFromPrompt(prompt: string, knownPlanTaskIds?: ReadonlySet<string>, planContextOverLimit?: boolean): string;
 /**
  * Pre-tool gate. When the architect delegates via Task tool to a skill-capable
  * agent and the SKILLS field is missing or 'none' while skills exist in the

package/dist/hooks/task-id-resolver.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Pure, bounded task-identity resolution shared by delegation hooks.
+ *
+ * This leaf deliberately performs no I/O and imports no plan, hook, or tool
+ * modules. Callers own plan loading and may supply only finite known IDs and an
+ * optional fallback whose uniqueness they have already proved.
+ */
+export declare const TASK_ID_RESOLUTION_LIMITS: {
+    readonly maxFields: 4;
+    readonly maxFieldChars: number;
+    readonly maxTotalChars: number;
+    readonly maxKnownIds: 1024;
+    readonly maxCandidates: 32;
+    readonly maxTokenChars: 80;
+};
+export type TaskIdPolicy = 'plan' | 'attribution';
+export type TaskIdSource = 'explicit' | 'task_line' | 'text' | 'marker' | 'fallback';
+export type TaskIdResolution = {
+    status: 'resolved';
+    taskId: string;
+    source: TaskIdSource;
+} | {
+    status: 'missing';
+} | {
+    status: 'ambiguous';
+    candidates: string[];
+} | {
+    status: 'over_limit';
+    input: string;
+} | {
+    status: 'invalid';
+    input: string;
+};
+export interface ResolveTaskIdOptions {
+    policy: TaskIdPolicy;
+    knownPlanTaskIds?: ReadonlySet<string>;
+    /** The caller observed a valid plan whose task-ID cardinality exceeded the bound. */
+    planContextOverLimit?: boolean;
+    fallback?: string;
+    fallbackProvenUnique?: boolean;
+}
+export type TaskIdPlanContextOptions = Pick<ResolveTaskIdOptions, 'knownPlanTaskIds' | 'planContextOverLimit'>;
+/** Resolve a task identity without I/O or mutable session state. */
+export declare function resolveTaskId(input: Record<string, unknown>, options: ResolveTaskIdOptions): TaskIdResolution;
+/** Backward-compatible delegation API backed by the bounded plan policy. */
+export declare function resolveDelegatedPlanTaskId(args: Record<string, unknown>, planContext?: ReadonlySet<string> | TaskIdPlanContextOptions): string | null;