opencode-swarm 7.164.2 → 7.164.4

package/dist/plan/ledger.d.ts

@@ -111,44 +111,68 @@ declare function getPlanJsonPath(directory: string): string;
 declare function writeFileFsyncedThenRename(tempPath: string, targetPath: string, data: string | Uint8Array): void;
 declare function fsyncRecoveryDirectory(directory: string): void;
 /**
- * Compute a SHA-256 hash of the plan state.
+ * Compute a SHA-256 digest of the FULL plan state for the ledger hash chain.
  * Uses deterministic JSON serialization for consistent hashing.
  *
+ * This is the LEDGER digest, not an approval-baseline hash. It deliberately
+ * INCLUDES `phase.status` and `task.status` because `plan_hash_after` pins the
+ * exact persisted ledger state, execution progress included. Its output is
+ * persisted on-disk (`plan_hash_after`, plan-epoch identity, snapshot
+ * integrity, staleness detection), so its byte output must NEVER change.
+ * For drift-baseline comparisons use {@link computePlanStructureHash}.
+ *
  * IMPORTANT: Intentionally excludes `specMtime` and `specHash` fields.
  * These fields track changes to spec.md but do not affect plan execution or structure.
  * Including them would cause the plan hash to change whenever spec metadata changes,
  * invalidating cached plan state unnecessarily. Spec changes are tracked separately
  * in the ledger via `spec_updated` and acknowledgment events.
  *
+ * Renamed in issue #2523 (retiring the old generic name) so that exactly one
+ * name (`computePlanStructureHash`) identifies the plan-structure hash. The
+ * rename is byte-identical — the normalization below is unchanged.
+ *
  * @param plan - The plan to hash
  * @returns Hex-encoded SHA-256 hash
  */
-export declare function computePlanHash(plan: Plan): string;
-/**
- * Compute a SHA-256 hash of the plan's STRUCTURE, excluding transient
- * execution progress fields (`phase.status` and `task.status`).
- *
- * This mirrors {@link computePlanHash}'s normalization byte-for-byte EXCEPT it
- * omits the two status fields from the hashed payload. It exists solely for the
- * plan-critic execution gate (`assertPlanCriticApprovedForExecution`), which
- * must recognize a plan as "the same plan the critic approved" even after the
- * architect flips a task to `in_progress` before delegating its coder. Including
- * status (as `computePlanHash` does) would make the gate fire on the very first
- * conforming coder dispatch, because `update_task_status(taskId,'in_progress')`
- * runs before it and mutates the status-inclusive hash.
- *
- * IMPORTANT: This is intentionally a SEPARATE function, not a refactor of
- * `computePlanHash`. `computePlanHash` is load-bearing for ledger replay and
- * staleness/integrity detection (its output is persisted on-disk as
- * `plan_hash_after`), so its byte output must never change. Do NOT collapse
- * these two into a shared normalizer.
+export declare function computePlanLedgerHash(plan: Plan): string;
+/**
+ * Compute a SHA-256 hash of the plan's STRUCTURE — THE single approval-baseline
+ * hash (issue #2523). Excludes the transient execution-progress fields
+ * (`phase.status` and `task.status`).
+ *
+ * DECISION (documented per issue #2523): task/phase status does NOT belong in
+ * the baseline hash. The baseline exists to detect *plan edits* — content,
+ * scope, dependencies, files — not execution progress. Every writer and reader
+ * of an approval-baseline `payload_hash` uses this function:
+ * - `takeSnapshotEvent` stores it as the `payload_hash` of every
+ *   `source === 'critic_approved'` snapshot (the gate recorders in
+ *   `src/hooks/delegation-gate.ts` and the drift-verifier approval in
+ *   `src/tools/write-drift-evidence.ts`).
+ * - `get_approved_plan` compares it against that stored hash to compute
+ *   `drift_detected`.
+ * - The scope/participation bindings persist it as `planStructureHash` and
+ *   re-derive it with the same function at verification time.
+ * A status-only change (e.g. `update_task_status` flipping a task to
+ * `in_progress`/`completed`) must therefore NEVER trip a baseline comparison;
+ * any structural change (description, acceptance, dependencies, files, added
+ * or removed tasks/phases) always must.
+ *
+ * This mirrors {@link computePlanLedgerHash}'s normalization byte-for-byte
+ * EXCEPT it omits the two status fields from the hashed payload. The two
+ * functions are deliberately distinct: {@link computePlanLedgerHash} is
+ * load-bearing for ledger replay and staleness/integrity detection (its
+ * output is persisted on-disk as `plan_hash_after`), so its byte output must
+ * never change. Do NOT collapse these two into a shared normalizer.
  *
  * @param plan - The plan to hash
  * @returns Hex-encoded SHA-256 hash of the status-excluded structure
  */
 export declare function computePlanStructureHash(plan: Plan): string;
 /**
- * Read the current plan.json and compute its hash.
+ * Read the current plan.json and compute its LEDGER digest (the
+ * status-inclusive {@link computePlanLedgerHash}, not the approval-baseline
+ * structure hash). Used for hash-chain bookkeeping (`plan_hash_before`,
+ * concurrency-token refresh), never for drift baselines.
  *
  * @param directory - The working directory
  * @returns Hash of current plan.json, or empty string if not found
@@ -286,13 +310,16 @@ export declare function takeSnapshotWithRetry(directory: string, plan: Plan, opt
  *     snapshot payload (e.g. phase number, verdict, summary) so that
  *     downstream readers can filter without decoding prompts.
  *   - payloadHashOverride: when supplied, stored as the snapshot payload's
- *     `payload_hash` INSTEAD of the default `computePlanHash(plan)`. Used by the
- *     plan-critic gate to persist a status-excluded structural hash
- *     (`computePlanStructureHash`) so the gate can match the plan across the
- *     architect's pre-delegation `in_progress` status flip. Note this only
- *     changes the embedded snapshot `payload_hash`; the ledger event's
- *     hash-chain field `plan_hash_after` is unaffected (still governed by
- *     `planHashAfter` / on-disk plan.json), preserving replay integrity.
+ *     `payload_hash` INSTEAD of the source-derived default. The default for a
+ *     `source === 'critic_approved'` snapshot is the status-excluded structure
+ *     hash (`computePlanStructureHash`) — an approval baseline is, by
+ *     definition (issue #2523), the plan's structure, so this is enforced here
+ *     at the single write choke point and every approval-snapshot writer gets
+ *     it without having to remember an override. Every other source defaults
+ *     to the status-inclusive ledger digest (`computePlanLedgerHash`).
+ *     Note this only changes the embedded snapshot `payload_hash`; the ledger
+ *     event's hash-chain field `plan_hash_after` is unaffected (still governed
+ *     by `planHashAfter` / on-disk plan.json), preserving replay integrity.
  * @returns The LedgerEvent that was written
  */
 export declare function takeSnapshotEvent(directory: string, plan: Plan, options?: {
@@ -524,7 +551,7 @@ export declare function loadLastApprovedPlan(directory: string, expectedPlanId?:
  */
 export declare function loadLastPlanCriticApprovedSnapshot(directory: string, expectedPlanId?: string): Promise<ApprovedSnapshotInfo | null>;
 export declare const _internals: {
-    computePlanHash: typeof computePlanHash;
+    computePlanLedgerHash: typeof computePlanLedgerHash;
     computePlanStructureHash: typeof computePlanStructureHash;
     computeCurrentPlanHash: typeof computeCurrentPlanHash;
     ledgerExists: typeof ledgerExists;

package/dist/services/skill-optimizer/store.d.ts

@@ -101,7 +101,7 @@ export declare function replayCandidate(directory: string, skillSlug: string, ca
  * Quarantine a corrupt ledger suffix. Writes the bad suffix to a unique side
  * file under `.swarm/evolution/skills/`. NEVER rewrites or truncates the
  * canonical `lifecycle.jsonl`. Mirrors `quarantineLedgerSuffix` in
- * `src/plan/ledger.ts:1188`.
+ * `src/plan/ledger.ts:1849`.
  */
 export declare function quarantineSuffix(directory: string, skillSlug: string, badSuffix: string): string;
 /**

package/dist/services/tool-doctor.d.ts

@@ -5,12 +5,13 @@
  *
  * As of #507, registration is DERIVED from the single registration-data source
  * (tool-metadata) and the handler set is compile-time-guaranteed to match it
- * (`manifest.ts satisfies Record<ToolName, () => ToolDefinition>`), so the set of
+ * (`manifest.ts` registers handlers via a `defineHandlers<T extends
+ * Record<ToolName, () => ToolDefinition>>` generic constraint), so the set of
  * registered tools is exactly TOOL_NAME_SET. This service therefore validates
  * against TOOL_NAME_SET (handler-free) rather than importing the handler-bearing
  * manifest — that keeps tool-doctor (and the `../services` barrel that re-exports
  * it) out of the tool-module import graph, avoiding init cycles (#507 CI finding).
- * The handler-level coherence is enforced by the compile-time `satisfies` plus the
+ * The handler-level coherence is enforced by that compile-time constraint plus the
  * standalone CI script `scripts/check-tool-registration.ts`.
  *
  * Also validates:

package/dist/tools/tool-metadata.d.ts

@@ -9,10 +9,11 @@
  * modules and form an init cycle (#507 CI finding). Keeping metadata handler-free
  * makes the module graph acyclic.
  *
- * Cross-checked with ./manifest.ts: that file does
- * `satisfies Record<ToolName, () => ToolDefinition>` with `ToolName = keyof typeof
- * TOOL_METADATA`, so adding a tool here without wiring a handler there (or vice
- * versa) is a COMPILE error - the dead-tools bug class stays impossible.
+ * Cross-checked with ./manifest.ts: that file registers handlers via
+ * `defineHandlers<T extends Record<ToolName, () => ToolDefinition>>` with
+ * `ToolName = keyof typeof TOOL_METADATA`, so adding a tool here without wiring a
+ * handler there (or vice versa) is a COMPILE error - the dead-tools bug class
+ * stays impossible.
  */
 import { type AgentName } from '../config/agent-names';
 /** A tool's registration metadata. All fields required so a missing one is a compile error. */

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.164.2",
+	"version": "7.164.4",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-d415s169.js

@@ -1,66 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-yjftcanv.js";
-import"./index-2xj34nkh.js";
-import"./index-qmeewt3g.js";
-import"./index-34exj2e3.js";
-import"./index-6vtm4rd0.js";
-import"./index-w5jpjaqe.js";
-import"./index-txdagbh7.js";
-import"./index-3146wmgv.js";
-import"./index-kwd09y5a.js";
-import"./index-yqhwrjw9.js";
-import"./index-b85jnfp4.js";
-import"./index-70ha9e09.js";
-import"./index-y2f5s2cf.js";
-import"./index-hcn69kp0.js";
-import"./index-zaab1wz9.js";
-import"./index-c8k4cs94.js";
-import"./index-zsrtt42s.js";
-import"./index-92q98ry8.js";
-import"./index-3f7hqtgg.js";
-import"./index-qbr05tbw.js";
-import"./index-q3xn3m3g.js";
-import"./index-sb4eanpv.js";
-import"./index-rtry5xyf.js";
-import"./index-h9wnkr2e.js";
-import"./index-zgeqwbhw.js";
-import"./index-hnwg5gt6.js";
-import"./index-ddszzne4.js";
-import"./index-axtnc0xf.js";
-import"./index-w8qt2612.js";
-import"./index-0145kpjr.js";
-import"./index-556ja8an.js";
-import"./index-4fwbbad3.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-br7q79t2.js";
-import"./index-gz5rn6w6.js";
-import"./index-fyt5byhd.js";
-import"./index-zg9d392c.js";
-import"./index-n832052r.js";
-import"./index-v56mhyhs.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
-import"./index-xm6c1tnf.js";
-import"./index-3704v4e6.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-ac39znep.js";
-import"./index-m1nrd3yd.js";
-import"./index-zjygnfay.js";
-import"./index-ae75rja9.js";
-import"./index-5d7bzpfn.js";
-import"./index-zs1jrsta.js";
-import"./index-bk5tah7q.js";
-import"./index-yep24wn4.js";
-import"./index-f9nfknjg.js";
-import"./index-bzd67m2j.js";
-import"./index-7g4c7s5r.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-mn2x7w2y.js

@@ -1,67 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-pcnhh2vt.js";
-import"./index-yjftcanv.js";
-import"./index-2xj34nkh.js";
-import"./index-qmeewt3g.js";
-import"./index-34exj2e3.js";
-import"./index-6vtm4rd0.js";
-import"./index-w5jpjaqe.js";
-import"./index-txdagbh7.js";
-import"./index-3146wmgv.js";
-import"./index-kwd09y5a.js";
-import"./index-yqhwrjw9.js";
-import"./index-b85jnfp4.js";
-import"./index-70ha9e09.js";
-import"./index-y2f5s2cf.js";
-import"./index-hcn69kp0.js";
-import"./index-zaab1wz9.js";
-import"./index-c8k4cs94.js";
-import"./index-zsrtt42s.js";
-import"./index-92q98ry8.js";
-import"./index-3f7hqtgg.js";
-import"./index-qbr05tbw.js";
-import"./index-q3xn3m3g.js";
-import"./index-sb4eanpv.js";
-import"./index-rtry5xyf.js";
-import"./index-h9wnkr2e.js";
-import"./index-zgeqwbhw.js";
-import"./index-hnwg5gt6.js";
-import"./index-ddszzne4.js";
-import"./index-axtnc0xf.js";
-import"./index-w8qt2612.js";
-import"./index-0145kpjr.js";
-import"./index-556ja8an.js";
-import"./index-4fwbbad3.js";
-import"./index-b43rt5ph.js";
-import"./index-q7sjgr1y.js";
-import"./index-br7q79t2.js";
-import"./index-gz5rn6w6.js";
-import"./index-fyt5byhd.js";
-import"./index-zg9d392c.js";
-import"./index-n832052r.js";
-import"./index-v56mhyhs.js";
-import"./index-z6xqpmqg.js";
-import"./index-r3mvsbtq.js";
-import"./index-xm6c1tnf.js";
-import"./index-3704v4e6.js";
-import"./index-9e6fdz2h.js";
-import"./index-4rhhvd1a.js";
-import"./index-ac39znep.js";
-import"./index-m1nrd3yd.js";
-import"./index-zjygnfay.js";
-import"./index-ae75rja9.js";
-import"./index-5d7bzpfn.js";
-import"./index-zs1jrsta.js";
-import"./index-bk5tah7q.js";
-import"./index-yep24wn4.js";
-import"./index-f9nfknjg.js";
-import"./index-bzd67m2j.js";
-import"./index-7g4c7s5r.js";
-import"./index-bpmtbmy9.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};