opencode-swarm 7.164.4 → 7.164.6

package/dist/cli/{index-jba9jgse.js → index-9qvmsyab.js}

@@ -9,11 +9,11 @@ import {
 } from "./index-txdagbh7.js";
 import {
   atomicWriteFile
-} from "./index-5k226hxp.js";
+} from "./index-ze5zyv28.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-gt6p21cs.js";
+} from "./index-fxxja498.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-nwpg81ke.js → index-ay9cr8tr.js}

@@ -4,7 +4,7 @@ import {
   readShellAuditTail,
   redactPath,
   redactShellCommand
-} from "./index-pztdbtgw.js";
+} from "./index-12xzj0hm.js";
 
 // src/services/guardrail-log-service.ts
 var BLOCK_TYPES = new Set([

package/dist/cli/{index-xj4kbtdw.js → index-b0m3efpf.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-rz87mx1c.js";
+} from "./index-2c3np82d.js";
 import {
   atomicWriteSwarmFileSync
-} from "./index-tfa2p4y4.js";
+} from "./index-cyhw0der.js";
 
 // src/hooks/delegation-gate/worktree-provisioning-owner.ts
 import { createHash } from "crypto";

package/dist/cli/{index-tfa2p4y4.js → index-cyhw0der.js}

@@ -270,7 +270,7 @@ var SWARM_TEMP_GRAMMARS = [
       "src/tools/spec-write.ts:98",
       "src/sdd/effective-spec.ts:1149",
       "src/background/lane-output-store.ts:353",
-      "src/background/pending-delegations.ts:1091",
+      "src/background/pending-delegations.ts:1114",
       "src/background/delegation-health.ts:391",
       "src/tools/submit-phase-council-verdicts.ts:458",
       "src/summaries/store.ts:46 (pre-#2035)"

package/dist/cli/{index-vx28633q.js → index-ew99d4y6.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   resolveExternalSkillsConfig
-} from "./index-wzmchqry.js";
+} from "./index-5p1tzpwh.js";
 import {
   GIT_BINARY_ENV_VAR,
   init_git_executable
@@ -237,9 +237,11 @@ var init_sanitize_malformed_values = () => {};
 // src/config/loader.ts
 var exports_loader = {};
 __export(exports_loader, {
+  resetConfigAdvisoryDedup: () => resetConfigAdvisoryDedup,
   loadPluginConfigWithMetaAsync: () => loadPluginConfigWithMetaAsync,
   loadPluginConfigWithMeta: () => loadPluginConfigWithMeta,
   loadPluginConfig: () => loadPluginConfig,
+  loadGateOverrides: () => loadGateOverrides,
   loadAgentPrompt: () => loadAgentPrompt,
   getSafeDefaultConfigLoadResult: () => getSafeDefaultConfigLoadResult,
   formatZodIssues: () => formatZodIssues,
@@ -252,6 +254,15 @@ import * as fs from "fs";
 import * as fsPromises from "fs/promises";
 import * as os from "os";
 import * as path from "path";
+function gatesAdvisoryWarn(message, data) {
+  if (gatesAdvisorySignatures.has(message))
+    return;
+  if (gatesAdvisorySignatures.size >= MAX_GATES_ADVISORY_SIGNATURES) {
+    gatesAdvisorySignatures.clear();
+  }
+  gatesAdvisorySignatures.add(message);
+  advisoryWarn(message, data);
+}
 function getUserConfigDir() {
   return process.env.XDG_CONFIG_HOME || path.join(os.homedir(), ".config");
 }
@@ -346,7 +357,7 @@ function sanitizeGatesConfig(raw) {
     return { result: raw, strippedKeys };
   }
   if (typeof raw.gates !== "object" || raw.gates === null || Array.isArray(raw.gates)) {
-    advisoryWarn("[opencode-swarm] gates config validation failed: expected an object. Quality gates will use defaults; other config sections remain active.");
+    gatesAdvisoryWarn("[opencode-swarm] gates config validation failed: expected an object. Quality gates will use defaults; other config sections remain active.");
     const cleaned2 = { ...raw };
     delete cleaned2.gates;
     strippedKeys.push("gates");
@@ -357,7 +368,7 @@ function sanitizeGatesConfig(raw) {
   for (const [key, value] of Object.entries(cleanedGates)) {
     const schema = gateSchemas[key];
     if (!schema) {
-      advisoryWarn(`[opencode-swarm] Unknown gates config section "gates.${key}" ignored. Other config sections remain active.`);
+      gatesAdvisoryWarn(`[opencode-swarm] Unknown gates config section "gates.${key}" ignored. Other config sections remain active.`);
       delete cleanedGates[key];
       strippedKeys.push(`gates.${key}`);
       continue;
@@ -369,7 +380,7 @@ function sanitizeGatesConfig(raw) {
       const knownFieldSet = new Set(knownFields);
       for (const fieldName of Object.keys(cleanedSection)) {
         if (!knownFieldSet.has(fieldName)) {
-          advisoryWarn(`[opencode-swarm] Unknown gates config key "gates.${key}.${fieldName}" ignored. Other config sections remain active.`);
+          gatesAdvisoryWarn(`[opencode-swarm] Unknown gates config key "gates.${key}.${fieldName}" ignored. Other config sections remain active.`);
           delete cleanedSection[fieldName];
           strippedKeys.push(`gates.${key}.${fieldName}`);
         }
@@ -379,7 +390,7 @@ function sanitizeGatesConfig(raw) {
     }
     const sectionResult = schema.safeParse(sectionValue);
     if (!sectionResult.success) {
-      advisoryWarn(`[opencode-swarm] gates.${key} config validation failed; that gate section will use defaults and other config sections remain active:`, formatZodIssues(sectionResult.error));
+      gatesAdvisoryWarn(`[opencode-swarm] gates.${key} config validation failed; that gate section will use defaults and other config sections remain active:`, formatZodIssues(sectionResult.error));
       delete cleanedGates[key];
       if (!strippedKeys.includes(`gates.${key}`)) {
         strippedKeys.push(`gates.${key}`);
@@ -390,10 +401,11 @@ function sanitizeGatesConfig(raw) {
   if (gatesResult.success) {
     return {
       result: { ...raw, gates: gatesResult.data },
-      strippedKeys
+      strippedKeys,
+      rawGates: cleanedGates
     };
   }
-  advisoryWarn("[opencode-swarm] gates config validation failed after section cleanup; quality gates will use defaults and other config sections remain active:", formatZodIssues(gatesResult.error));
+  gatesAdvisoryWarn("[opencode-swarm] gates config validation failed after section cleanup; quality gates will use defaults and other config sections remain active:", formatZodIssues(gatesResult.error));
   const cleaned = { ...raw };
   delete cleaned.gates;
   if (!strippedKeys.includes("gates")) {
@@ -403,8 +415,16 @@ function sanitizeGatesConfig(raw) {
 }
 function sanitizeSectionConfigs(raw) {
   const { result: afterExternal, strippedKeys: externalStripped } = sanitizeExternalSkillsConfig(raw);
-  const { result, strippedKeys: gatesStripped } = sanitizeGatesConfig(afterExternal);
-  return { result, strippedKeys: [...externalStripped, ...gatesStripped] };
+  const {
+    result,
+    strippedKeys: gatesStripped,
+    rawGates
+  } = sanitizeGatesConfig(afterExternal);
+  return {
+    result,
+    strippedKeys: [...externalStripped, ...gatesStripped],
+    rawGates
+  };
 }
 function formatZodIssues(error) {
   if (error.issues.length === 0)
@@ -491,7 +511,11 @@ function buildConfigWithMeta(rawUserConfig, rawProjectConfig, loadedFromFile, co
     mergedRaw = { ...mergedRaw, full_auto: { ...fa, locked: true } };
   }
   mergedRaw = migratePresetsConfig(mergedRaw);
-  const { result: sanitized, strippedKeys: gatesStripped } = sanitizeSectionConfigs(mergedRaw);
+  const {
+    result: sanitized,
+    strippedKeys: gatesStripped,
+    rawGates
+  } = sanitizeSectionConfigs(mergedRaw);
   mergedRaw = sanitized;
   const knownTopLevel = new Set(Object.keys(PluginConfigSchema.shape));
   const unknownTopLevel = Object.keys(mergedRaw).filter((key) => !knownTopLevel.has(key));
@@ -515,14 +539,16 @@ function buildConfigWithMeta(rawUserConfig, rawProjectConfig, loadedFromFile, co
         config,
         recovery: "guardrails_defaults",
         removedKeys: [...gatesStripped],
-        warnings: []
+        warnings: [],
+        rawGates
       };
     }
     return {
       config,
       recovery: gatesStripped.length > 0 ? "stripped_keys" : "none",
       removedKeys: [...gatesStripped],
-      warnings: []
+      warnings: [],
+      rawGates
     };
   }
   const { cleaned, removed } = stripUnrecognizedKeys(mergedRaw, firstResult.error);
@@ -534,12 +560,17 @@ function buildConfigWithMeta(rawUserConfig, rawProjectConfig, loadedFromFile, co
         config: secure(recovered.data),
         recovery: "stripped_keys",
         removedKeys: [...gatesStripped, ...removed],
-        warnings: []
+        warnings: [],
+        rawGates
       };
     }
   }
   if (rawUserConfig) {
-    const { result: userSanitized, strippedKeys: userGatesStripped } = sanitizeSectionConfigs(rawUserConfig);
+    const {
+      result: userSanitized,
+      strippedKeys: userGatesStripped,
+      rawGates: userRawGates
+    } = sanitizeSectionConfigs(rawUserConfig);
     const userParseResult = PluginConfigSchema.safeParse(userSanitized);
     if (userParseResult.success) {
       advisoryWarn("[opencode-swarm] Project config ignored due to validation errors. Using user config.");
@@ -549,7 +580,8 @@ function buildConfigWithMeta(rawUserConfig, rawProjectConfig, loadedFromFile, co
         removedKeys: [...gatesStripped, ...userGatesStripped],
         warnings: [
           "Project config ignored due to validation errors; using user config."
-        ]
+        ],
+        rawGates: userRawGates
       };
     }
     const userStripped = stripUnrecognizedKeys(userSanitized, userParseResult.error);
@@ -567,7 +599,8 @@ function buildConfigWithMeta(rawUserConfig, rawProjectConfig, loadedFromFile, co
           ],
           warnings: [
             "Project config ignored due to validation errors; using user config."
-          ]
+          ],
+          rawGates: userRawGates
         };
       }
     }
@@ -595,7 +628,8 @@ function buildConfigWithMeta(rawUserConfig, rawProjectConfig, loadedFromFile, co
             config: secure(secureParse.data),
             recovery: "sanitized_values",
             removedKeys,
-            warnings: []
+            warnings: [],
+            rawGates
           };
         }
       }
@@ -633,16 +667,29 @@ function loadPluginConfigWithMeta(directory) {
   const projectResult = loadRawConfigFromPath(projectConfigPath);
   const loadedFromFile = userResult.fileExisted || projectResult.fileExisted;
   const configHadErrors = userResult.hadError || projectResult.hadError;
-  const { config, recovery, removedKeys, warnings } = buildConfigWithMeta(userResult.config, projectResult.config, loadedFromFile, configHadErrors);
+  const { config, recovery, removedKeys, warnings, rawGates } = buildConfigWithMeta(userResult.config, projectResult.config, loadedFromFile, configHadErrors);
   return {
     config,
     loadedFromFile,
     configHadErrors,
     recovery,
     removedKeys,
-    warnings
+    warnings,
+    rawGates
   };
 }
+function loadGateOverrides(directory) {
+  try {
+    const meta = loadPluginConfigWithMeta(directory);
+    return meta.rawGates;
+  } catch {
+    return;
+  }
+}
+function resetConfigAdvisoryDedup() {
+  gatesAdvisorySignatures.clear();
+  lastUnknownTopLevelSig = null;
+}
 function getSafeDefaultConfigLoadResult() {
   const { config, recovery, removedKeys, warnings } = buildConfigWithMeta(null, null, false, false);
   return {
@@ -701,14 +748,15 @@ async function loadPluginConfigWithMetaAsync(directory) {
   ]);
   const loadedFromFile = userResult.fileExisted || projectResult.fileExisted;
   const configHadErrors = userResult.hadError || projectResult.hadError;
-  const { config, recovery, removedKeys, warnings } = buildConfigWithMeta(userResult.config, projectResult.config, loadedFromFile, configHadErrors);
+  const { config, recovery, removedKeys, warnings, rawGates } = buildConfigWithMeta(userResult.config, projectResult.config, loadedFromFile, configHadErrors);
   return {
     config,
     loadedFromFile,
     configHadErrors,
     recovery,
     removedKeys,
-    warnings
+    warnings,
+    rawGates
   };
 }
 function loadAgentPrompt(agentName) {
@@ -732,7 +780,7 @@ function loadAgentPrompt(agentName) {
   }
   return result;
 }
-var CONFIG_FILENAME = "opencode-swarm.json", PROMPTS_DIR_NAME = "opencode-swarm", MAX_CONFIG_FILE_BYTES = 102400, lastUnknownTopLevelSig = null, _internals;
+var CONFIG_FILENAME = "opencode-swarm.json", PROMPTS_DIR_NAME = "opencode-swarm", MAX_CONFIG_FILE_BYTES = 102400, lastUnknownTopLevelSig = null, gatesAdvisorySignatures, MAX_GATES_ADVISORY_SIGNATURES = 64, _internals;
 var init_loader = __esm(() => {
   init_warning_buffer();
   init_git_executable();
@@ -740,9 +788,13 @@ var init_loader = __esm(() => {
   init_schema();
   init_merge();
   init_merge();
+  gatesAdvisorySignatures = new Set;
   _internals = {
     resetUnknownTopLevelKeyWarning() {
       lastUnknownTopLevelSig = null;
+    },
+    resetGatesAdvisoryDedup() {
+      gatesAdvisorySignatures.clear();
     }
   };
 });
@@ -812,4 +864,4 @@ var PlanSchema = exports_external.object({
   execution_profile: ExecutionProfileSchema.optional()
 });
 
-export { ExecutionProfileSchema, TaskStatusSchema, TaskSizeSchema, PhaseStatusSchema, MigrationStatusSchema, TaskSchema, PhaseSchema, PlanSchema, loadPluginConfig, loadPluginConfigWithMeta, getSafeDefaultConfigLoadResult, loadPluginConfigWithMetaAsync, loadAgentPrompt, exports_loader, init_loader };
+export { ExecutionProfileSchema, TaskStatusSchema, TaskSizeSchema, PhaseStatusSchema, MigrationStatusSchema, TaskSchema, PhaseSchema, PlanSchema, loadPluginConfig, loadPluginConfigWithMeta, loadGateOverrides, resetConfigAdvisoryDedup, getSafeDefaultConfigLoadResult, loadPluginConfigWithMetaAsync, loadAgentPrompt, exports_loader, init_loader };

package/dist/cli/{index-gt6p21cs.js → index-fxxja498.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   emit
-} from "./index-k1m9214q.js";
+} from "./index-1dz8hv7p.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-0m94jsss.js → index-g5714mpv.js}

@@ -2,14 +2,14 @@
 import {
   autoCommitDirty,
   cleanUntrackedFiles
-} from "./index-8fjx6k2s.js";
+} from "./index-t1nkr7cz.js";
 import {
   isPathWithinDeclaredScope,
   unsafePathTextReason
 } from "./index-556ja8an.js";
 import {
   validateSwarmPath
-} from "./index-rz87mx1c.js";
+} from "./index-2c3np82d.js";
 import {
   bunSpawn,
   classifySpawnFailure
@@ -26,13 +26,13 @@ import {
   atomicWriteFile,
   taskEvidencePath,
   withTaskEvidenceLock
-} from "./index-5k226hxp.js";
+} from "./index-ze5zyv28.js";
 import {
   assertProjectRoot
-} from "./index-gt6p21cs.js";
+} from "./index-fxxja498.js";
 import {
   telemetry
-} from "./index-k1m9214q.js";
+} from "./index-1dz8hv7p.js";
 import {
   exports_external,
   init_zod

package/dist/cli/{index-ne38vr77.js → index-g94qqwnz.js}

@@ -14,14 +14,14 @@ import {
   detectWindowsWrites,
   getSharedClassifierGuardrailBlock,
   resolveWriteTargets
-} from "./index-qkwx4rrc.js";
+} from "./index-935ww10s.js";
 import {
   checkFileAuthority,
   classifyFile,
   isInDeclaredScope,
   redactPath,
   redactShellCommand
-} from "./index-pztdbtgw.js";
+} from "./index-12xzj0hm.js";
 
 // src/services/guardrail-explain-service.ts
 import path from "path";

package/dist/cli/{index-7zbk1e24.js → index-gwg7a00b.js}

@@ -1,32 +1,32 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-rz87mx1c.js";
+} from "./index-2c3np82d.js";
 import {
   loadPluginConfigWithMeta
-} from "./index-vx28633q.js";
+} from "./index-ew99d4y6.js";
 import {
   KnowledgeConfigSchema,
   init_schema
-} from "./index-wzmchqry.js";
+} from "./index-5p1tzpwh.js";
 import {
   observeReceiptTransition
-} from "./index-stj85yx1.js";
+} from "./index-p56xc59p.js";
 import {
   resolveHiveEventsPath
 } from "./index-ae75rja9.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-qfrrcdhj.js";
+} from "./index-tegp2mny.js";
 import {
   atomicWriteFile
-} from "./index-5k226hxp.js";
+} from "./index-ze5zyv28.js";
 import {
   assertProjectRoot
-} from "./index-gt6p21cs.js";
+} from "./index-fxxja498.js";
 import {
   emit
-} from "./index-k1m9214q.js";
+} from "./index-1dz8hv7p.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";
@@ -2810,7 +2810,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
     }
     let bumps = 0;
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-8er824g9.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-j97ejf6a.js");
       bumps = await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-v7a8e7rv.js → index-hdapetg1.js}

@@ -2,10 +2,10 @@
 import {
   init_loader,
   loadPluginConfigWithMeta
-} from "./index-vx28633q.js";
+} from "./index-ew99d4y6.js";
 import {
   init_schema
-} from "./index-wzmchqry.js";
+} from "./index-5p1tzpwh.js";
 import {
   DEFAULT_WORKTREE_ISOLATION_CONFIG,
   init_constants

package/dist/cli/{index-q9yz8da4.js → index-j3hsjynw.js}

@@ -2,23 +2,23 @@
 import {
   computePlanStructureHash,
   derivePlanId
-} from "./index-yx3xqb0w.js";
+} from "./index-j645xpsm.js";
 import {
   appendCoreEventSync
-} from "./index-z408nj03.js";
+} from "./index-pvp5tnn2.js";
 import {
   unsafePathTextReason
 } from "./index-556ja8an.js";
 import {
   PlanSchema
-} from "./index-vx28633q.js";
+} from "./index-ew99d4y6.js";
 import {
   assertProjectRoot
-} from "./index-gt6p21cs.js";
+} from "./index-fxxja498.js";
 import {
   atomicWriteSwarmFile,
   atomicWriteSwarmFileSync
-} from "./index-tfa2p4y4.js";
+} from "./index-cyhw0der.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-yx3xqb0w.js → index-j645xpsm.js}

@@ -4,14 +4,14 @@ import {
   PlanSchema,
   TaskStatusSchema,
   init_loader
-} from "./index-vx28633q.js";
+} from "./index-ew99d4y6.js";
 import {
   assertProjectRoot,
   withEvidenceLock
-} from "./index-gt6p21cs.js";
+} from "./index-fxxja498.js";
 import {
   emit
-} from "./index-k1m9214q.js";
+} from "./index-1dz8hv7p.js";
 import {
   criticalWarn,
   init_logger,

package/dist/cli/{index-t2tqbq62.js → index-jzvrvdmr.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   authorizeCuration
-} from "./index-prammvxb.js";
+} from "./index-x6zyc38w.js";
 import {
   findNearDuplicate,
   inferTags,
@@ -9,13 +9,13 @@ import {
   resolveSwarmKnowledgePath,
   resolveSwarmRejectedPath,
   transactKnowledge
-} from "./index-eh2k07pp.js";
+} from "./index-rysxqae0.js";
 import {
   resolveKnowledgeStoreDir
-} from "./index-qfrrcdhj.js";
+} from "./index-tegp2mny.js";
 import {
   atomicWriteFile
-} from "./index-5k226hxp.js";
+} from "./index-ze5zyv28.js";
 import {
   require_proper_lockfile
 } from "./index-7g4c7s5r.js";

package/dist/cli/{index-k8vy89vm.js → index-kvb4dwgf.js}

@@ -6,7 +6,7 @@ import {
   PluginConfigSchema,
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-wzmchqry.js";
+} from "./index-5p1tzpwh.js";
 import {
   ALL_AGENT_NAMES,
   init_constants

package/dist/cli/{index-stj85yx1.js → index-p56xc59p.js}

@@ -1,12 +1,12 @@
 // @bun
 import {
   atomicWriteSwarmFile
-} from "./index-tfa2p4y4.js";
+} from "./index-cyhw0der.js";
 import {
   pseudonymousRef,
   resolveLineageSalt,
   telemetry
-} from "./index-k1m9214q.js";
+} from "./index-1dz8hv7p.js";
 
 // src/health/learning-health.ts
 import { promises as fs } from "fs";

package/dist/cli/{index-z408nj03.js → index-pvp5tnn2.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   observeStoreHealth
-} from "./index-stj85yx1.js";
+} from "./index-p56xc59p.js";
 import {
   telemetry
-} from "./index-k1m9214q.js";
+} from "./index-1dz8hv7p.js";
 import {
   init_logger,
   warn

package/dist/cli/{index-cf54ftj1.js → index-qdbgc16x.js}

@@ -4,17 +4,17 @@ import {
 } from "./index-ddszzne4.js";
 import {
   validateSwarmPath
-} from "./index-rz87mx1c.js";
+} from "./index-2c3np82d.js";
 import {
   bunWrite
 } from "./index-r3mvsbtq.js";
 import {
   observeDelegationLedgerPressure
-} from "./index-stj85yx1.js";
+} from "./index-p56xc59p.js";
 import {
   EvidenceLockTimeoutError,
   withEvidenceLock
-} from "./index-gt6p21cs.js";
+} from "./index-fxxja498.js";
 import {
   exports_external,
   init_zod
@@ -695,6 +695,31 @@ var PrReviewLaneResultEnvelopeSchema = exports_external.object({
     });
   }
 });
+var PR_REVIEW_WORKFLOW_BINDING_PREFIX = "pr-review-workflow:v1:";
+var MAX_PR_REVIEW_WORKFLOW_INSTANCE_ID_CHARS = 128;
+function encodePrReviewWorkflowBinding(workflowInstanceId) {
+  const normalized = workflowInstanceId.trim();
+  if (!normalized || normalized.length > MAX_PR_REVIEW_WORKFLOW_INSTANCE_ID_CHARS) {
+    throw new Error("invalid PR-review workflow instance id");
+  }
+  return `${PR_REVIEW_WORKFLOW_BINDING_PREFIX}${Buffer.from(normalized, "utf8").toString("base64url")}`;
+}
+function decodePrReviewWorkflowBinding(value) {
+  if (!value?.startsWith(PR_REVIEW_WORKFLOW_BINDING_PREFIX))
+    return null;
+  const encoded = value.slice(PR_REVIEW_WORKFLOW_BINDING_PREFIX.length);
+  if (!encoded)
+    return null;
+  try {
+    const decoded = Buffer.from(encoded, "base64url").toString("utf8");
+    if (!decoded || decoded.length > MAX_PR_REVIEW_WORKFLOW_INSTANCE_ID_CHARS || encodePrReviewWorkflowBinding(decoded) !== value) {
+      return null;
+    }
+    return decoded;
+  } catch {
+    return null;
+  }
+}
 function serializedPrReviewResultReceiptBytes(value) {
   return new TextEncoder().encode(JSON.stringify(value)).byteLength;
 }
@@ -1350,7 +1375,14 @@ var RecordSchema = exports_external.object({
   ingestion: DelegationIngestionSchema.optional(),
   result: ResultSchema.optional(),
   completedAt: exports_external.number().optional()
-}).strict();
+}).strict().superRefine((value, context) => {
+  if (value.mode?.startsWith("swarm-pr-review:") && value.correlationId !== value.subagentSessionId) {
+    context.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      message: "PR-review delegation identity requires correlationId to equal subagentSessionId"
+    });
+  }
+});
 var FallbackArtifactSchema = exports_external.object({
   schemaVersion: exports_external.literal(1),
   correlationId: exports_external.string().min(1).max(256),
@@ -2480,7 +2512,8 @@ async function publishPrReviewResultReceipt(directory, input) {
       }
       const owned = current.ownedWorkflowLanes?.length ? current.ownedWorkflowLanes : current.workflowLane ? [current.workflowLane] : [];
       const sameOwned = owned.length === parsed.data.ownedWorkflowLanes.length && owned.every((lane) => parsed.data.ownedWorkflowLanes.includes(lane));
-      if (parsed.data.workflowInstanceId !== input.expectedWorkflowInstanceId || parsed.data.workflowRevision !== input.expectedWorkflowRevision || parsed.data.baseSha !== input.expectedBaseSha || current.mode !== parsed.data.mode || current.workflowLane !== parsed.data.workflowLane || !sameOwned || current.workspace?.prHeadSha !== parsed.data.headSha || current.workspace?.gitHead !== parsed.data.headSha || (current.generation ?? 1) !== parsed.data.generation) {
+      const dispatchWorkflowInstanceId = decodePrReviewWorkflowBinding(current.jobId);
+      if (!dispatchWorkflowInstanceId || current.workflowGeneration === undefined || dispatchWorkflowInstanceId !== parsed.data.workflowInstanceId || current.workflowGeneration !== parsed.data.workflowRevision || parsed.data.workflowInstanceId !== input.expectedWorkflowInstanceId || parsed.data.workflowRevision !== input.expectedWorkflowRevision || parsed.data.baseSha !== input.expectedBaseSha || current.mode !== parsed.data.mode || current.workflowLane !== parsed.data.workflowLane || !sameOwned || current.workspace?.prHeadSha !== parsed.data.headSha || current.workspace?.gitHead !== parsed.data.headSha || (current.generation ?? 1) !== parsed.data.generation) {
         outcome = {
           status: "conflict",
           reason: "receipt does not match immutable delegation identity"
@@ -3947,7 +3980,7 @@ async function reconcileLegacyCoderSettlements(directory, maxRecords, onReconcil
   const candidates = readDelegations(directory).filter((record) => record.normalizedAgent === "coder" && Boolean(record.legacyCoderSettlementTransfer) && Boolean(record.terminalResult)).slice(0, maxRecords);
   if (candidates.length === 0)
     return 0;
-  const { transferCoderSettlementToBackground } = await import("./coder-settlement-zzy2egsx.js");
+  const { transferCoderSettlementToBackground } = await import("./coder-settlement-6qgvzx40.js");
   let transferred = 0;
   for (const record of candidates) {
     try {
@@ -4304,4 +4337,4 @@ async function maintainBackgroundDelegations(directory, options = {}) {
   return emitObservation("ok");
 }
 
-export { prReviewFindingRequiresCritic, PR_REVIEW_BASE_DIMENSION_IDS, PR_REVIEW_RISK_IMPACTS, PR_REVIEW_RISK_TAGS, prReviewLegacyTranscriptCompatibilityEnabled, PrReviewLaneResultEnvelopeSchema, prReviewLaneResultEnvelopeDigest, PrReviewResultReceiptSchema, PR_REVIEW_FINDINGS_MAX_BYTES, PR_REVIEW_HANDOFF_MAX_BYTES, PR_REVIEW_DISCARDED_EXAMPLE_ITEM_ID, PrReviewRunIdSchema, parsePrReviewRiskTagsField, PrReviewReviewerVerdictFieldsSchema, PrReviewCriticVerdictFieldsSchema, parsePrReviewVerdictRow, generatePrReviewRunId, MAX_RECOVERY_LEDGER_BYTES, readDelegationHealthArtifact, collectDelegationLedgerHealth, MAX_PR_REVIEW_COLLECTION_RECEIPT_ITEM_IDS, BACKGROUND_DELEGATIONS_FILE, BACKGROUND_DELEGATION_FALLBACK_DIR, BACKGROUND_CODER_RESERVATIONS_FILE, BACKGROUND_DELEGATIONS_CHECKPOINT_FILE, BACKGROUND_DELEGATIONS_MANIFEST_FILE, MAX_LIVE_BACKGROUND_FALLBACKS, MAX_LIVE_BACKGROUND_CODER_RESERVATIONS, MAX_BACKGROUND_OBSERVED_FILES, MAX_BACKGROUND_ADVISORY_CHARS, LEGACY_CODER_SETTLEMENT_PENDING_ADVISORY_MARKER, DELEGATION_COMPACTION_LOW_WATER_BYTES, DELEGATION_COMPACTION_HIGH_WATER_BYTES, MAX_CHECKPOINT_BYTES, MAX_CHECKPOINT_RECORDS, TOMBSTONE_MIN_AGE_MS, BACKGROUND_INGESTION_LEASE_MS, BACKGROUND_CODER_RESERVATION_LEASE_MS, BACKGROUND_CODER_RESERVATION_LEASE_MAX_MS, BACKGROUND_CODER_RESERVATION_LEASE_MIN_MS, DEFAULT_STALE_DELEGATION_TIMEOUT_MS, DEFAULT_SWEEPABLE_DELEGATION_STATUSES, _checkpointInternals, isUnsettledWorktreeOwner, compactBackgroundDelegations, readDelegations, scanDelegationsForRecovery, findByCorrelationId, recordPendingDelegationDetailed, recordPendingDelegation, buildPromptSnapshot, appendDelegationTransition, publishPrReviewResultReceipt, buildBackgroundCompletionEventId, claimTerminalResult, claimCoderSettlement, normalizeBackgroundObservedFiles, updateCoderSettlement, registerLegacyCoderSettlementReconciler, _internals, markLegacyCoderSettlementTransferPending, clearLegacyCoderSettlementTransferPending, claimDelegationIngestion, recordDelegationIngestionResult, putPendingBackgroundAdvisory, replacePendingBackgroundAdvisory, preparePendingBackgroundAdvisories, acknowledgeObservedBackgroundAdvisories, releasePreparedBackgroundAdvisories, findByBatchId, findOpenAsyncLaneBatches, isTerminalDelegationStatus, sweepStaleDelegations, readDelegationFallback, listDelegationFallbacks, scanDelegationFallbacksForRecovery, writeDelegationFallback, removeDelegationFallback, findDelegationForCompletion, promoteDelegationFallback, buildBackgroundCoderReservationId, scanBackgroundCoderReservationsForAdmission, reserveBackgroundCoderSlot, bindBackgroundCoderReservation, releaseBackgroundCoderReservation, maintainBackgroundDelegations };
+export { prReviewFindingRequiresCritic, PR_REVIEW_BASE_DIMENSION_IDS, PR_REVIEW_RISK_IMPACTS, PR_REVIEW_RISK_TAGS, prReviewLegacyTranscriptCompatibilityEnabled, PrReviewLaneResultEnvelopeSchema, decodePrReviewWorkflowBinding, prReviewLaneResultEnvelopeDigest, PrReviewResultReceiptSchema, PR_REVIEW_FINDINGS_MAX_BYTES, PR_REVIEW_HANDOFF_MAX_BYTES, PR_REVIEW_DISCARDED_EXAMPLE_ITEM_ID, PrReviewRunIdSchema, parsePrReviewRiskTagsField, PrReviewReviewerVerdictFieldsSchema, PrReviewCriticVerdictFieldsSchema, parsePrReviewVerdictRow, generatePrReviewRunId, MAX_RECOVERY_LEDGER_BYTES, readDelegationHealthArtifact, collectDelegationLedgerHealth, MAX_PR_REVIEW_COLLECTION_RECEIPT_ITEM_IDS, BACKGROUND_DELEGATIONS_FILE, BACKGROUND_DELEGATION_FALLBACK_DIR, BACKGROUND_CODER_RESERVATIONS_FILE, BACKGROUND_DELEGATIONS_CHECKPOINT_FILE, BACKGROUND_DELEGATIONS_MANIFEST_FILE, MAX_LIVE_BACKGROUND_FALLBACKS, MAX_LIVE_BACKGROUND_CODER_RESERVATIONS, MAX_BACKGROUND_OBSERVED_FILES, MAX_BACKGROUND_ADVISORY_CHARS, LEGACY_CODER_SETTLEMENT_PENDING_ADVISORY_MARKER, DELEGATION_COMPACTION_LOW_WATER_BYTES, DELEGATION_COMPACTION_HIGH_WATER_BYTES, MAX_CHECKPOINT_BYTES, MAX_CHECKPOINT_RECORDS, TOMBSTONE_MIN_AGE_MS, BACKGROUND_INGESTION_LEASE_MS, BACKGROUND_CODER_RESERVATION_LEASE_MS, BACKGROUND_CODER_RESERVATION_LEASE_MAX_MS, BACKGROUND_CODER_RESERVATION_LEASE_MIN_MS, DEFAULT_STALE_DELEGATION_TIMEOUT_MS, DEFAULT_SWEEPABLE_DELEGATION_STATUSES, _checkpointInternals, isUnsettledWorktreeOwner, compactBackgroundDelegations, readDelegations, scanDelegationsForRecovery, findByCorrelationId, recordPendingDelegationDetailed, recordPendingDelegation, buildPromptSnapshot, appendDelegationTransition, publishPrReviewResultReceipt, buildBackgroundCompletionEventId, claimTerminalResult, claimCoderSettlement, normalizeBackgroundObservedFiles, updateCoderSettlement, registerLegacyCoderSettlementReconciler, _internals, markLegacyCoderSettlementTransferPending, clearLegacyCoderSettlementTransferPending, claimDelegationIngestion, recordDelegationIngestionResult, putPendingBackgroundAdvisory, replacePendingBackgroundAdvisory, preparePendingBackgroundAdvisories, acknowledgeObservedBackgroundAdvisories, releasePreparedBackgroundAdvisories, findByBatchId, findOpenAsyncLaneBatches, isTerminalDelegationStatus, sweepStaleDelegations, readDelegationFallback, listDelegationFallbacks, scanDelegationFallbacksForRecovery, writeDelegationFallback, removeDelegationFallback, findDelegationForCompletion, promoteDelegationFallback, buildBackgroundCoderReservationId, scanBackgroundCoderReservationsForAdmission, reserveBackgroundCoderSlot, bindBackgroundCoderReservation, releaseBackgroundCoderReservation, maintainBackgroundDelegations };