opencode-swarm 7.164.3 → 7.164.5

package/dist/cli/{worktree-isolation-e6tym281.js → worktree-isolation-qcwt09ve.js}

@@ -21,64 +21,64 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-ehf0vjhx.js";
-import"./index-2xj34nkh.js";
-import"./index-8t11vcf5.js";
-import"./index-aty2dfmt.js";
-import"./index-493mxwj5.js";
-import"./index-w5jpjaqe.js";
+} from "./index-3gb7bw7h.js";
+import"./index-25jze7sf.js";
+import"./index-ea7sehgy.js";
+import"./index-1q2dwv69.js";
+import"./index-maxz22c1.js";
+import"./index-4krjn1gn.js";
 import"./index-txdagbh7.js";
 import"./index-3146wmgv.js";
-import"./index-88g6q52x.js";
-import"./index-rhdwrfgc.js";
-import"./index-xkqja15t.js";
+import"./index-7rat6nyh.js";
+import"./index-s09b63xg.js";
+import"./index-aaqbhn9h.js";
 import"./index-70ha9e09.js";
-import"./index-y2f5s2cf.js";
-import"./index-hcn69kp0.js";
+import"./index-1f4nandk.js";
+import"./index-0zbze3n6.js";
 import"./index-zaab1wz9.js";
-import"./index-c8k4cs94.js";
+import"./index-y42pra05.js";
 import"./index-zsrtt42s.js";
-import"./index-9pwa798m.js";
+import"./index-fwebva1m.js";
 import"./index-3f7hqtgg.js";
-import"./index-qbr05tbw.js";
-import"./index-fc153g7b.js";
-import"./index-sb4eanpv.js";
+import"./index-xj4kbtdw.js";
+import"./index-rc6hec4j.js";
+import"./index-hnjkpk57.js";
 import"./index-rtry5xyf.js";
-import"./index-jwc2v92w.js";
-import"./index-kn0y788q.js";
-import"./index-kyayzfxp.js";
+import"./index-wbnyc50b.js";
+import"./index-j9a4fsxg.js";
+import"./index-er8ba9be.js";
 import"./index-ddszzne4.js";
-import"./index-sn2vm710.js";
-import"./index-yhpbcrdk.js";
-import"./index-0145kpjr.js";
+import"./index-8h9nng7f.js";
+import"./index-xm7dc14y.js";
+import"./index-50s9q4c1.js";
 import"./index-556ja8an.js";
 import"./index-4fwbbad3.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-0e34njnm.js";
-import"./index-95hhrw1d.js";
+import"./index-q0gtgwyr.js";
+import"./index-0trtcm9n.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-j98116cx.js";
+} from "./index-4jmtdtm9.js";
 import"./index-zg9d392c.js";
 import"./index-n832052r.js";
-import"./index-v56mhyhs.js";
+import"./index-rz87mx1c.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-4wneygfx.js";
-import"./index-84qah5h6.js";
+import"./index-553veay1.js";
+import"./index-yrsag0vs.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-ac39znep.js";
+import"./index-164m995b.js";
 import"./index-m1nrd3yd.js";
 import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-5d7bzpfn.js";
-import"./index-zs1jrsta.js";
+import"./index-25z5qwkk.js";
+import"./index-4emx8hhh.js";
 import"./index-bk5tah7q.js";
-import"./index-yep24wn4.js";
-import"./index-f9nfknjg.js";
-import"./index-bzd67m2j.js";
+import"./index-fxxja498.js";
+import"./index-tfa2p4y4.js";
+import"./index-1dz8hv7p.js";
 import"./index-7g4c7s5r.js";
 import"./index-bpmtbmy9.js";
 import"./index-zgwm4ryv.js";

package/dist/config/index.d.ts

@@ -3,7 +3,7 @@ export { ALL_AGENT_NAMES, ALL_SUBAGENT_NAMES, DEFAULT_MODELS, isQAAgent, isSubag
 export type { ApprovalEvidence, BaseEvidence, DiffEvidence, Evidence, EvidenceBundle, EvidenceType, EvidenceVerdict, NoteEvidence, ReviewEvidence, TestEvidence, } from './evidence-schema';
 export { ApprovalEvidenceSchema, BaseEvidenceSchema, DiffEvidenceSchema, EVIDENCE_MAX_JSON_BYTES, EVIDENCE_MAX_PATCH_BYTES, EVIDENCE_MAX_TASK_BYTES, EvidenceBundleSchema, EvidenceSchema, EvidenceTypeSchema, EvidenceVerdictSchema, NoteEvidenceSchema, ReviewEvidenceSchema, TestEvidenceSchema, } from './evidence-schema';
 export type { ConfigBuildResult, ConfigLoadResult, ConfigRecovery, } from './loader';
-export { getSafeDefaultConfigLoadResult, loadAgentPrompt, loadPluginConfig, loadPluginConfigWithMeta, loadPluginConfigWithMetaAsync, } from './loader';
+export { getSafeDefaultConfigLoadResult, loadAgentPrompt, loadGateOverrides, loadPluginConfig, loadPluginConfigWithMeta, loadPluginConfigWithMetaAsync, resetConfigAdvisoryDedup, } from './loader';
 import { loadPluginConfigWithMeta } from './loader';
 /**
  * Test-only dependency-injection seam — see `gitignore-warning.ts:_internals`
@@ -19,8 +19,8 @@ export declare const _internals: {
 };
 export type { ExecutionProfile, MigrationStatus, Phase, PhaseStatus, Plan, Task, TaskSize, TaskStatus, } from './plan-schema';
 export { ExecutionProfileSchema, MigrationStatusSchema, PhaseSchema, PhaseStatusSchema, PlanSchema, TaskSchema, TaskSizeSchema, TaskStatusSchema, } from './plan-schema';
-export type { AgentOverrideConfig, ApplyPatchConfig, AutomationCapabilities, AutomationConfig, AutomationMode, AutoReviewBurnInDecision, AutoReviewConfig, AutoReviewReleaseContext, LeanTurboConfig, MemoryConfig, ModelPricingConfig, PhaseCompleteConfig, PipelineConfig, PluginConfig, PricingConfig, RepoGraphConfig, SkillPropagationConfig, SwarmConfig, TurboConfig, WorktreeIsolationConfig, } from './schema';
-export { AgentOverrideConfigSchema, ApplyPatchConfigSchema, AUTO_REVIEW_V8_BURN_IN_DECISION, AutomationCapabilitiesSchema, AutomationConfigSchema, AutomationModeSchema, AutoReviewConfigSchema, LeanTurboConfigSchema, MemoryConfigSchema, ModelPricingConfigSchema, PhaseCompleteConfigSchema, PipelineConfigSchema, PluginConfigSchema, PricingConfigSchema, RepoGraphConfigSchema, resolveAutoReviewConfig, SkillPropagationConfigSchema, SwarmConfigSchema, TurboConfigSchema, WorktreeIsolationConfigSchema, } from './schema';
+export type { AgentOverrideConfig, ApplyPatchConfig, AutomationCapabilities, AutomationConfig, AutomationMode, AutoReviewBurnInDecision, AutoReviewConfig, AutoReviewReleaseContext, GateConfig, GateConfigOverrides, GateSectionName, LeanTurboConfig, MemoryConfig, ModelPricingConfig, PhaseCompleteConfig, PipelineConfig, PluginConfig, PricingConfig, RepoGraphConfig, SkillPropagationConfig, SwarmConfig, TurboConfig, WorktreeIsolationConfig, } from './schema';
+export { AgentOverrideConfigSchema, ApplyPatchConfigSchema, AUTO_REVIEW_V8_BURN_IN_DECISION, AutomationCapabilitiesSchema, AutomationConfigSchema, AutomationModeSchema, AutoReviewConfigSchema, GATE_CONFIG_READERS, GATE_SECTION_SCHEMAS, LeanTurboConfigSchema, MemoryConfigSchema, ModelPricingConfigSchema, PhaseCompleteConfigSchema, PipelineConfigSchema, PluginConfigSchema, PricingConfigSchema, RepoGraphConfigSchema, resolveAutoReviewConfig, SkillPropagationConfigSchema, SwarmConfigSchema, TurboConfigSchema, WorktreeIsolationConfigSchema, } from './schema';
 export type { DeltaSpec, Obligation, SpecDelta, SpecRequirement, SpecScenario, SpecSection, SwarmSpec, } from './spec-schema';
 export { DeltaSpecSchema, ObligationSchema, SpecDeltaSchema, SpecRequirementSchema, SpecScenarioSchema, SpecSectionSchema, SwarmSpecSchema, validateSpecContent, } from './spec-schema';
 export { resolveWorktreeIsolationConfig } from './worktree-isolation-config';

package/dist/config/loader.d.ts

@@ -1,8 +1,9 @@
 import type { z } from 'zod';
-import { type PluginConfig } from './schema';
+import { type GateConfigOverrides, type PluginConfig } from './schema';
 export declare const MAX_CONFIG_FILE_BYTES = 102400;
 export declare const _internals: {
     resetUnknownTopLevelKeyWarning(): void;
+    resetGatesAdvisoryDedup(): void;
 };
 export { deepMerge, MAX_MERGE_DEPTH } from '../utils/merge';
 /**
@@ -43,6 +44,14 @@ export type ConfigBuildResult = {
     removedKeys: string[];
     /** Human-readable summary messages about the recovery action. */
     warnings: string[];
+    /**
+     * Post-sanitize raw `gates` section — only the keys the user actually wrote,
+     * before Zod-default materialization. Gate tools consult this via
+     * `loadGateOverrides` so schema defaults never masquerade as user intent
+     * (issue #2524). Absent when no `gates` object survived sanitization or the
+     * whole config fell back to defaults.
+     */
+    rawGates?: Record<string, Record<string, unknown>>;
 };
 /**
  * Full result from `loadPluginConfigWithMeta` and `loadPluginConfigWithMetaAsync`.
@@ -78,6 +87,30 @@ export declare function loadPluginConfig(directory: string): PluginConfig;
  * exactly once, no double-read.
  */
 export declare function loadPluginConfigWithMeta(directory: string): ConfigLoadResult;
+/**
+ * Gate configuration overrides a user actually wrote (issue #2524).
+ *
+ * Returns the post-sanitize RAW `gates` section — only keys present in the
+ * user's config files, with unknown keys stripped and NO Zod-default
+ * materialization. Gate tools consult this instead of the parsed
+ * `config.gates` because zod fills every `.default()` on parse: the parsed
+ * section always carries full default lists once any `gates` object exists,
+ * and placeholder_scan (among others) would treat such a list as an explicit
+ * user customization. `undefined` here means "no gates section" — callers
+ * fall back to their in-module defaults.
+ *
+ * Fail-open: any unexpected loader failure returns `undefined` (gates run
+ * with defaults) rather than throwing into the tool boundary.
+ */
+export declare function loadGateOverrides(directory: string): GateConfigOverrides | undefined;
+/**
+ * Reset the module-level config-advisory dedup state (gates-section
+ * signatures + the unknown-top-level-key slot). Called once at session start
+ * next to `clearDeferredWarnings()` so a config problem that is fixed and
+ * later re-introduced warns again in the new session instead of staying
+ * suppressed by a signature recorded before the fix.
+ */
+export declare function resetConfigAdvisoryDedup(): void;
 /**
  * Safe-default `ConfigLoadResult` for init-path timeout / error fallback.
  *

package/dist/config/plan-schema.d.ts

@@ -204,7 +204,7 @@ export type Plan = z.infer<typeof PlanSchema>;
  * `PlanSchema` (see this file ~line 95 — a plain `z.object`, no `.passthrough()`,
  * so Zod strips unknown keys), so `savePlan`'s `JSON.stringify(PlanSchema.parse(...))`
  * can never write these to .swarm/plan.json. It is also excluded from plan hashing:
- * both `computePlanHash` (src/plan/ledger.ts) and `computePlanContentHash`
+ * both `computePlanLedgerHash` (src/plan/ledger.ts) and `computePlanContentHash`
  * (src/plan/manager.ts) hash an explicit allow-list of fields, never the whole
  * object. Because of this, AGENTS.md invariant-5's "six places" (ledger replay,
  * projection, checkpoint import/export, get_approved_plan, tests, docs) do NOT

package/dist/config/schema.d.ts

@@ -322,14 +322,44 @@ export declare const QualityBudgetConfigSchema: z.ZodObject<{
     exclude_globs: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type QualityBudgetConfig = z.infer<typeof QualityBudgetConfigSchema>;
-export declare const GATE_CONFIG_KNOWN_SECTION_KEYS: {
-    readonly syntax_check: readonly ["enabled"];
-    readonly placeholder_scan: readonly ["enabled", "deny_patterns", "allow_globs", "max_allowed_findings"];
-    readonly sast_scan: readonly ["enabled"];
-    readonly sbom_generate: readonly ["enabled"];
-    readonly build_check: readonly ["enabled"];
-    readonly quality_budget: readonly ["enabled", "max_complexity_delta", "max_public_api_delta", "max_duplication_ratio", "min_test_to_code_ratio", "enforce_on_globs", "exclude_globs"];
+/**
+ * Single source of truth for gate sections (issue #2524): `GateConfigSchema` is
+ * built from this map and `GATE_CONFIG_KNOWN_SECTION_KEYS` is derived from it,
+ * so the loader's strip registry can never drift from the schema. The previous
+ * hand-maintained copy omitted `placeholder_scan.sentinel_allowlist`, which
+ * made the loader strip a real schema key as "unknown".
+ */
+export declare const GATE_SECTION_SCHEMAS: {
+    readonly syntax_check: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+    readonly placeholder_scan: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        deny_patterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        allow_globs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        max_allowed_findings: z.ZodDefault<z.ZodNumber>;
+        sentinel_allowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    readonly sast_scan: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+    readonly sbom_generate: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+    readonly build_check: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+    readonly quality_budget: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        max_complexity_delta: z.ZodDefault<z.ZodNumber>;
+        max_public_api_delta: z.ZodDefault<z.ZodNumber>;
+        max_duplication_ratio: z.ZodDefault<z.ZodNumber>;
+        min_test_to_code_ratio: z.ZodDefault<z.ZodNumber>;
+        enforce_on_globs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        exclude_globs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
 };
+export type GateSectionName = keyof typeof GATE_SECTION_SCHEMAS;
 export declare const GateConfigSchema: z.ZodObject<{
     syntax_check: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
@@ -361,6 +391,30 @@ export declare const GateConfigSchema: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type GateConfig = z.infer<typeof GateConfigSchema>;
+/**
+ * Per-section field keys, derived from `GATE_SECTION_SCHEMAS`. Consumed by
+ * `sanitizeGatesConfig` (config loader) and `collectRawGatesConfigFindings`
+ * (config doctor) to decide which `gates.*` keys are recognized.
+ */
+export declare const GATE_CONFIG_KNOWN_SECTION_KEYS: Record<GateSectionName, readonly string[]>;
+/**
+ * Only the gate keys a user actually wrote. Zod materializes every `.default()`
+ * on parse, so the parsed `config.gates` always carries full default lists once
+ * any `gates` object exists; tools must not mistake those for user intent
+ * (e.g. placeholder_scan treats any provided `deny_patterns` list as custom
+ * patterns and disables its built-in string/code scanning). The loader exposes
+ * the post-sanitize raw section as this shape — see `loadGateOverrides`.
+ */
+export type GateConfigOverrides = {
+    [K in GateSectionName]?: Partial<z.infer<(typeof GATE_SECTION_SCHEMAS)[K]>>;
+};
+/**
+ * Drift-check contract (issue #2524): every `GateConfigSchema` section must
+ * list the production modules that read it. `scripts/drift-check-gates-docs.ts`
+ * enforces key parity with the schema; the gates-config-wiring tests prove the
+ * wiring dynamically through the registered tool objects.
+ */
+export declare const GATE_CONFIG_READERS: Record<GateSectionName, readonly string[]>;
 export declare const PipelineConfigSchema: z.ZodObject<{
     parallel_precheck: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;

package/dist/council/council-review-identity.d.ts

@@ -20,7 +20,7 @@
  * - `identityDigest` — sha256 over the canonical identity object; this is
  *   the round-store scope/generation key and the evidence binding.
  *
- * `computePlanHash` (ledger integrity) and `computePlanStructureHash`
+ * `computePlanLedgerHash` (ledger integrity) and `computePlanStructureHash`
  * (plan-critic execution gate) are intentionally NOT reused or modified:
  * the first is status-sensitive by design, and the second still hashes
  * progress-like fields (`blocked_reason`, `current_phase`) while dropping