opencode-swarm 7.167.2 → 7.168.1

package/dist/cli/{worktree-isolation-mt7z75hz.js → worktree-isolation-1bdzfgky.js}

@@ -21,66 +21,66 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-y1sj2e1n.js";
+} from "./index-kkmezerc.js";
 import"./index-d5qf7hvh.js";
-import"./index-k73ehxa1.js";
-import"./index-dme7wvwg.js";
-import"./index-f8cc92g7.js";
-import"./index-rrne6g2m.js";
-import"./index-arqv4psy.js";
-import"./index-83r0v5tn.js";
+import"./index-qhey6vc3.js";
+import"./index-chebm5h5.js";
+import"./index-nwwk3dej.js";
+import"./index-5g6rhkn7.js";
+import"./index-w1dfkp1q.js";
+import"./index-gp9yzr1v.js";
 import"./index-txdagbh7.js";
 import"./index-9br68j86.js";
 import"./index-cw912re7.js";
-import"./index-f91fhch0.js";
-import"./index-ce8p9t28.js";
-import"./index-pdcperq5.js";
+import"./index-xhb4gryr.js";
+import"./index-bw9x8d8n.js";
+import"./index-9b2105n0.js";
 import"./index-fyfbpz4f.js";
-import"./index-mtepgqan.js";
+import"./index-dfyv3xkd.js";
 import"./index-zsrtt42s.js";
-import"./index-5sjq3shs.js";
-import"./index-m7cwnt9r.js";
-import"./index-gmjg65tm.js";
+import"./index-j0bxxz9d.js";
+import"./index-5zqakgp4.js";
+import"./index-bvqqwx84.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-3r6k6qa7.js";
-import"./index-09gv90d7.js";
-import"./index-sjkg2hc4.js";
-import"./index-m3z83nhs.js";
-import"./index-8vbahc4c.js";
+import"./index-gmpmgtzn.js";
+import"./index-qkwtth00.js";
+import"./index-f1fps3w9.js";
+import"./index-6df6wbvj.js";
+import"./index-kear8gb7.js";
 import"./index-p612v1mv.js";
-import"./index-shrf0wt3.js";
-import"./index-syedr4e3.js";
+import"./index-qthc56c4.js";
+import"./index-m35hybf0.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-s7a9dqtb.js";
+} from "./index-xkf3672y.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-jhd3pmd1.js";
-import"./index-z7z3g5wt.js";
-import"./index-z6we1abx.js";
-import"./index-g409c7ke.js";
-import"./index-962qme08.js";
-import"./index-hhkm64wh.js";
-import"./index-n4fzmqz8.js";
+import"./index-y85aptep.js";
+import"./index-gh9ybrrs.js";
+import"./index-a8xbvsse.js";
+import"./index-pyf517sz.js";
+import"./index-h439y187.js";
+import"./index-wst6n478.js";
+import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-gs12223x.js";
-import"./index-18rfc7qv.js";
+import"./index-qwsh0h2g.js";
+import"./index-2xbww1x0.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-0q839sg6.js";
-import"./index-vgpedapd.js";
+import"./index-8ybjqg51.js";
+import"./index-4r5pmtvk.js";
 import"./index-7g4c7s5r.js";
-import"./index-x7pm61wk.js";
-import"./index-tcj8v6my.js";
+import"./index-v3xc4sde.js";
+import"./index-z6qreakh.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-wjet7x0a.js";
+import"./index-91ww9hyr.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-2b1hd1fx.js";
-import"./index-g5m43paw.js";
+import"./index-apy1qfj0.js";
+import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
 import"./index-zpsr8rpc.js";

package/dist/commands/reset.d.ts

@@ -1,3 +1,6 @@
+import * as fs from 'node:fs';
+import { clearPlanLedgerForReset } from '../plan/ledger.js';
+import { withPlanLifecycleLock } from '../plan/manager.js';
 import { type ResetBackupResult } from './reset-backup';
 /**
  * _internals DI seam so tests can stub the pre-deletion backup without touching
@@ -6,6 +9,13 @@ import { type ResetBackupResult } from './reset-backup';
  */
 export declare const _internals: {
     backupSwarmStateBeforeReset: (directory: string, kind: 'reset' | 'reset-session', relEntries: string[]) => ResetBackupResult;
+    clearPlanLedgerForReset: typeof clearPlanLedgerForReset;
+    withPlanLifecycleLock: typeof withPlanLifecycleLock;
+    existsSync: typeof fs.existsSync;
+    readFileSync: typeof fs.readFileSync;
+    unlinkSync: typeof fs.unlinkSync;
+    writeFileSync: typeof fs.writeFileSync;
+    rmSync: typeof fs.rmSync;
 };
 /**
  * Handles the /swarm reset command.

package/dist/commands/rollback.d.ts

@@ -1,3 +1,12 @@
+import { clearPlanLedgerForReset, peekPlanFromLedger, replacePlanLedgerWithRoot } from '../plan/ledger';
+import { withPlanLifecycleLock } from '../plan/manager';
+/** Test-only seam for the atomic ledger re-root lifecycle transition. */
+export declare const _internals: {
+    replacePlanLedgerWithRoot: typeof replacePlanLedgerWithRoot;
+    clearPlanLedgerForReset: typeof clearPlanLedgerForReset;
+    peekPlanFromLedger: typeof peekPlanFromLedger;
+    withPlanLifecycleLock: typeof withPlanLifecycleLock;
+};
 /**
  * Handle /swarm rollback command
  * Restores .swarm/ state from a checkpoint using direct overwrite

package/dist/config/schema.d.ts

@@ -1395,6 +1395,7 @@ export declare const WorktreeIsolationConfigSchema: z.ZodObject<{
     }>>;
     serialization_release_after_dispatches: z.ZodDefault<z.ZodNumber>;
     serialization_release_after_ms: z.ZodDefault<z.ZodNumber>;
+    session_create_timeout_ms: z.ZodDefault<z.ZodNumber>;
     runtime_isolation: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         port_base: z.ZodOptional<z.ZodNumber>;
@@ -1889,6 +1890,26 @@ export declare const LaneLivenessWatchdogConfigSchema: z.ZodObject<{
     stall_token_threshold: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>;
 export type LaneLivenessWatchdogConfig = z.infer<typeof LaneLivenessWatchdogConfigSchema>;
+/**
+ * Issue #2507 dispatch protection: an action-local spawn-protection circuit
+ * plus a token-bucket dispatch rate limit for native task delegations.
+ *
+ * Default-ON follows the guardrails family (`guardrails.enabled` defaults
+ * true): the numbers are deliberately conservative (10 dispatches per second
+ * with a burst of 10 never waits in normal use), and every knob is
+ * user-overridable — set `enabled: false` to opt out entirely, or
+ * `rate_per_second: 0` to disable only the limiter. Parameter surface
+ * adopted with credit from opencode-ensemble (reimplemented per ADR 0002 —
+ * no upstream code is ported).
+ */
+export declare const DispatchProtectionConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    spawn_failure_threshold: z.ZodDefault<z.ZodNumber>;
+    half_open_after_ms: z.ZodDefault<z.ZodNumber>;
+    rate_per_second: z.ZodDefault<z.ZodNumber>;
+    burst_capacity: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export type DispatchProtectionConfig = z.infer<typeof DispatchProtectionConfigSchema>;
 /**
  * Issue #2384: deprecated transcript-row settlement for Profile A PR-review
  * base/micro discovery lanes is an explicit compatibility opt-in. Omitted
@@ -2001,6 +2022,13 @@ export declare const PluginConfigSchema: z.ZodObject<{
         stall_min_steps: z.ZodDefault<z.ZodNumber>;
         stall_token_threshold: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>>;
+    dispatch_protection: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        spawn_failure_threshold: z.ZodDefault<z.ZodNumber>;
+        half_open_after_ms: z.ZodDefault<z.ZodNumber>;
+        rate_per_second: z.ZodDefault<z.ZodNumber>;
+        burst_capacity: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
     pr_review_legacy_transcript_compatibility: z.ZodOptional<z.ZodBoolean>;
     gates: z.ZodOptional<z.ZodObject<{
         syntax_check: z.ZodDefault<z.ZodObject<{
@@ -2801,6 +2829,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
         }>>;
         serialization_release_after_dispatches: z.ZodDefault<z.ZodNumber>;
         serialization_release_after_ms: z.ZodDefault<z.ZodNumber>;
+        session_create_timeout_ms: z.ZodDefault<z.ZodNumber>;
         runtime_isolation: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             port_base: z.ZodOptional<z.ZodNumber>;

package/dist/db/project-db.d.ts

@@ -39,6 +39,14 @@ export declare function projectDbPath(directory: string): string;
  * workspace just to check for a missing record.
  */
 export declare function projectDbExists(directory: string): boolean;
+/**
+ * Open the existing project database for one observational callback.
+ *
+ * Unlike `getProjectDb`, this never creates directories, negotiates WAL, runs
+ * migrations, or enters the shared connection cache. It is the only suitable
+ * path for lifecycle previews such as `/swarm close --dry-run`.
+ */
+export declare function withProjectDbReadOnly<T>(directory: string, read: (db: Database) => T): T | null;
 /**
  * Best-effort WAL checkpoint before close (issue #2480 checkpoint policy).
  *

package/dist/db/sqlite-loader.d.ts

@@ -51,8 +51,9 @@ interface NodeDatabaseSync {
     loadExtension(path: string): void;
     close(): void;
 }
-type NodeDatabaseSyncCtor = new (filename: string, options?: {
+type NodeDatabaseSyncCtor = new (filename: string | URL, options?: {
     allowExtension?: boolean;
+    readOnly?: boolean;
 }) => NodeDatabaseSync;
 /**
  * Build a `bun:sqlite`-`Database`-compatible constructor backed by `node:sqlite`'s

package/dist/dispatch/spawn-circuit.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Action-local spawn-protection circuit for native task delegations
+ * (issue #2507 / ADR 0002 G3 — reimplemented, no upstream code ported).
+ *
+ * Ownership boundary (one accounting owner per failure category,
+ * docs/invocation-failures.md): this circuit owns repeated ACTUAL dispatch
+ * failures of the SAME semantic action on the native `task` route. Policy
+ * denials stay with the gate-denial tracker, shell-structural failures with
+ * the non-transient circuit, PR-review lane provider-terminal with the
+ * PR-review resilience circuit, provable-non-acceptance launch retry with
+ * #2473, and lane liveness with #2506.
+ *
+ * State machine (the src/pr-review/circuit.ts timed HALF_OPEN precedent):
+ * CLOSED -> (threshold failures) -> OPEN -> (denyUntil elapses, next dispatch
+ * admitted) -> HALF_OPEN (exactly one probe) -> completed probe closes |
+ * failed probe re-opens with a fresh interval.
+ *
+ * The state is process-local, invocation-owned, and bounded — the
+ * docs/invocation-failures.md contract for action circuits (only the
+ * PR-review resilience circuit is durable).
+ */
+/** Bounded memory: same discipline as MAX_TRACKED_ACTION_CIRCUITS. */
+export declare const MAX_TRACKED_SPAWN_CIRCUITS = 500;
+export declare const SPAWN_CIRCUIT_TTL_MS: number;
+/** Bounded armed-digest map (late toolAfter results must not grow it). */
+export declare const MAX_ARMED_DISPATCH_IDENTITIES = 500;
+/** Frozen denial code — gate-denial-tracker exempts exactly this code. */
+export declare const SPAWN_CIRCUIT_DENIAL_CODE = "SPAWN PROTECTION CIRCUIT OPEN";
+export interface SpawnCircuitEntry {
+    state: 'CLOSED' | 'OPEN' | 'HALF_OPEN';
+    sessionID: string;
+    invocationID: string;
+    actionDigest: string;
+    failureCount: number;
+    openedAt: number;
+    denyUntil: number;
+    /** Denials issued in the current OPEN episode (reset on each OPEN). */
+    denialsInEpisode: number;
+    updatedAt: number;
+}
+export declare function invocationIdForSession(sessionID: string): string;
+/**
+ * Compute the dispatch identity for a tool + args WITHOUT storing anything.
+ * Shared by armDispatchIdentity (before-hook step 0) and by the after-hook
+ * recorder's fallback (which must not re-insert into the bounded armed map
+ * — a stored-but-never-consumed entry would evict legitimate pending
+ * identities under review feedback WD-1).
+ */
+export declare function dispatchIdentityFor(tool: string, args: unknown): {
+    digest: string;
+    pattern: string;
+};
+/**
+ * Arm the pre-mutation dispatch identity for a callID. Step 0 of the
+ * fail-closed tool.execute.before region calls this BEFORE any hook can
+ * mutate `output.args` (skill / delegate-directive injection), so the
+ * toolAfter recorder consumes the SAME digest the circuit was keyed with —
+ * a corrected success can never clear a phantom key (plan Round 1
+ * revision 2).
+ */
+export declare function armDispatchIdentity(callID: string, tool: string, args: unknown): {
+    digest: string;
+    pattern: string;
+};
+/** Consume the armed identity for a callID (fallback: undefined). */
+export declare function takeArmedDispatchIdentity(callID: string): {
+    digest: string;
+    pattern: string;
+} | undefined;
+/**
+ * Record one ACTUAL dispatch failure for the matching action. Returns the
+ * entry and whether this call performed the CLOSED->OPEN transition (the
+ * caller emits exactly one bounded telemetry event on that transition).
+ */
+export declare function noteDispatchSpawnFailure(input: {
+    sessionID: string;
+    invocationID: string;
+    actionDigest: string;
+    threshold: number;
+    halfOpenAfterMs: number;
+    now?: number;
+}): {
+    entry: SpawnCircuitEntry;
+    opened: boolean;
+};
+/**
+ * Deny when the matching action's circuit is OPEN (before its interval
+ * elapses) or when a half-open probe is already in flight. When the open
+ * interval has elapsed, this call is ADMITTED as the single probe.
+ * Throws an Error whose leading token is the frozen
+ * SPAWN_CIRCUIT_DENIAL_CODE so the gate-denial tracker can exempt it.
+ */
+export declare function assertDispatchSpawnCircuitAdmits(input: {
+    sessionID: string;
+    invocationID: string;
+    actionDigest: string;
+    threshold: number;
+    halfOpenAfterMs: number;
+    now?: number;
+}): void;
+/**
+ * A corrected successful execution clears ONLY the matching action's entry
+ * (and closes an in-flight half-open probe). Failures of other actions are
+ * never touched.
+ */
+export declare function noteDispatchSpawnSuccess(input: {
+    sessionID: string;
+    invocationID: string;
+    actionDigest: string;
+}): void;
+export declare function getSpawnCircuitEntry(input: {
+    sessionID: string;
+    invocationID: string;
+    actionDigest: string;
+}): SpawnCircuitEntry | undefined;
+export declare function spawnCircuitIsTaskTool(tool: string): boolean;
+/** Test seam: reset all circuits + armed identities between test files. */
+export declare function _clearAllSpawnCircuits(): void;
+export declare const _internals: {
+    now: () => number;
+};

package/dist/dispatch/token-bucket.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Token-bucket dispatch rate limiting for native task delegations
+ * (issue #2507 / ADR 0002 G3 — reimplemented, no upstream code ported).
+ *
+ * Pacing, never denial: an empty bucket awaits until a token refills, so
+ * dispatch rate is bounded WITHOUT blocking diagnosis or recovery (only the
+ * `task` tool acquires tokens; read/diagnose/repair/rescope/abort controls
+ * never wait).
+ *
+ * Restart-state integration: the per-PROJECT bucket level and refill
+ * timestamp persist as one row in the existing `coordination_state` table
+ * under namespace `dispatch.token-bucket` (entity `project`), written when
+ * tokens are consumed. A fresh process rehydrates from that row and refills
+ * by elapsed wall time — an exhausted bucket does not grant a fresh burst
+ * after restart. Write failures fail OPEN (debug log, never break
+ * dispatch): the in-memory bucket stays authoritative for the process
+ * lifetime, and a restart after persistent write failure sees no row and
+ * grants a fresh burst (documented limitation — the limiter's purpose is
+ * runaway containment within a process).
+ */
+export declare const TOKEN_BUCKET_NAMESPACE = "dispatch.token-bucket";
+export declare const TOKEN_BUCKET_ENTITY_KEY = "project";
+/**
+ * Acquire one dispatch token, awaiting until one is available (paced, never
+ * denied). `ratePerSecond === 0` disables the limiter entirely.
+ *
+ * Persistence is debounced to the acquires that matter for restart
+ * semantics: only a PACED acquire (one that had to wait for a refill)
+ * writes the coordination row. Immediate burst consumption is
+ * reconstructible within the documented one-burst over-permission bound,
+ * and skipping those writes keeps the common fast path free of SQLite I/O
+ * (composing gates run under tight timing windows).
+ */
+export declare function acquireDispatchToken(input: {
+    directory: string;
+    ratePerSecond: number;
+    burstCapacity: number;
+}): Promise<void>;
+/** Test seam: forget all in-memory buckets (does not touch persisted rows). */
+export declare function _resetDispatchTokenBuckets(): void;
+export declare const _internals: {
+    now: () => number;
+    sleep: (ms: number) => Promise<void>;
+    readState: (directory: string) => import("../db/coordination-store.js").CoordinationState | null;
+    onPersistError: (err: unknown) => void;
+};

package/dist/hooks/delegation-gate/dead-lane-reclaim.d.ts

@@ -0,0 +1,61 @@
+import { closeProjectDb } from '../../db/project-db';
+import { atomicWriteSwarmFileSync } from '../../utils/atomic-write';
+import { bunSpawn } from '../../utils/bun-compat';
+import { canonicalRootKeyFresh } from '../../utils/canonical-root';
+import { resolveGitExecutable } from '../../utils/git-executable.js';
+import { removeWorktree } from '../../worktree/core';
+export interface DeadLaneReclaimEntry {
+    lanePath: string;
+    branchName: string;
+    parentSessionId: string;
+    taskId: string;
+    /** The removal error that stranded the lane (e.g. `EBUSY: ...`). */
+    reason: string;
+    recordedAt: number;
+}
+export interface ReclaimDeadLanesContext {
+    /**
+     * Session ids that still own live state (#2527 interplay: a lane whose
+     * parent session is active, or whose path is protected by recovery/
+     * ownership machinery, is NOT reclaimable — it is not dead).
+     */
+    activeSessionIds?: Iterable<string>;
+    protectedWorktreePaths?: Iterable<string>;
+}
+export interface ReclaimDeadLanesResult {
+    reclaimed: string[];
+    retained: Array<{
+        lanePath: string;
+        reason: string;
+    }>;
+}
+/** Record a dead lane for next-start reclaim. Dedupes by lanePath. */
+export declare function recordDeadLaneReclaim(directory: string, entry: Omit<DeadLaneReclaimEntry, 'recordedAt'>): void;
+/** Read-only view for diagnostics and tests. */
+export declare function listDeadLaneReclaims(directory: string): DeadLaneReclaimEntry[];
+declare function isLaneOwnedByActiveSession(lanePath: string, activeSessionIds: Set<string>, parentSessionId?: string): boolean;
+/**
+ * Dirty-lane gate (#2508 interplay): a lane with uncommitted changes is NEVER
+ * purged without the shared confirmation primitive — fail closed. Any git
+ * error also counts as dirty: an unknowable state is not a purgeable state.
+ */
+declare function isLaneDirty(lanePath: string): Promise<boolean>;
+/**
+ * Reclaim every recorded dead lane whose gates pass. Runs inside the bounded,
+ * fail-open next-start init task (`runInitOrphanRecovery`), so it never throws
+ * and never blocks init: per-lane failures retain the entry for the next start.
+ */
+export declare function reclaimDeadLanes(directory: string, context?: ReclaimDeadLanesContext): Promise<ReclaimDeadLanesResult>;
+declare function pathExists(target: string): Promise<boolean>;
+export declare const _internals: {
+    removeWorktree: typeof removeWorktree;
+    closeProjectDb: typeof closeProjectDb;
+    isLaneOwnedByActiveSession: typeof isLaneOwnedByActiveSession;
+    isLaneDirty: typeof isLaneDirty;
+    pathExists: typeof pathExists;
+    bunSpawn: typeof bunSpawn;
+    resolveGitExecutable: typeof resolveGitExecutable;
+    atomicWriteSwarmFileSync: typeof atomicWriteSwarmFileSync;
+    canonicalRootKeyFresh: typeof canonicalRootKeyFresh;
+};
+export {};

package/dist/hooks/delegation-gate/worktree-isolation.d.ts

@@ -146,6 +146,16 @@ interface SessionSerializationState {
      */
     successfulDispatchesSince: number;
 }
+/**
+ * Issue #2599: bounded lane session.create with deterministic late-settle
+ * handling. The create promise's outcome is captured exactly once into a
+ * derived settle-state promise — never a mutable flag read across async
+ * continuations — so a create that settles after the deadline reaches
+ * `onLateResolve` (verified teardown of the late child) under EVERY
+ * microtask interleaving, and only after the settle (or this grace bound)
+ * does the caller's lane cleanup begin.
+ */
+declare function createSessionWithinBudget<T>(promise: Promise<T>, label: string, onLateResolve?: (result: T) => Promise<void> | void, timeoutMs?: number): Promise<T>;
 interface CleanupStandardWorktreeResult {
     removedWorktree: boolean;
     cleanedBranch: boolean;
@@ -384,6 +394,18 @@ export declare const _internals: {
     preserveDirtyWorktreeAtPath: typeof preserveDirtyWorktreeAtPath;
     /** Bounded lane session.create timeout (tests may override). */
     worktreeSessionCreateTimeoutMs: number;
+    /**
+     * Issue #2599 AC4: bound on how long the deadline path waits for the
+     * create promise to settle before proceeding to lane cleanup. Tests
+     * override this to keep never-settling-create cases fast.
+     */
+    worktreeSessionCreateSettleGraceMs: number;
+    /**
+     * Issue #2599: the settle-state-machine budget wrapper, exposed so tests
+     * can drive both late-settle interleavings directly with controlled
+     * promises (no racy shared flag is involved).
+     */
+    createSessionWithinBudget: typeof createSessionWithinBudget;
     /** FR-001a: abort entry point for in-flight dispatches. */
     abortStandardWorktreeDispatch: typeof abortStandardWorktreeDispatch;
     standardWorktreeByCallID: Map<string, StandardWorktreeDispatch>;

package/dist/hooks/issue-trace.d.ts

@@ -15,6 +15,7 @@
  * advanced, so the next cycle recomputes and retries — a lost directive can
  * no longer be permanently suppressed by idempotency while state advances.
  */
+import { getPlanLedgerStateReadOnly } from '../plan/ledger-sqlite';
 import { error as _logErrorImpl } from '../utils/logger.js';
 import { isPlanCriticApproved } from './delegation-gate';
 import { implementationReviewReceiptExists, publicationReceiptExists, readIssueReference, readPlanPhaseStatus, readSpecIssueNumber, readTraceState, recurrenceSweepReceiptExists, reproductionReceiptExists, specExists, writeTraceState } from './issue-trace-state';
@@ -30,7 +31,9 @@ export declare const _internals: {
     recurrenceSweepReceiptExists: typeof recurrenceSweepReceiptExists;
     implementationReviewReceiptExists: typeof implementationReviewReceiptExists;
     isPlanCriticApproved: typeof isPlanCriticApproved;
+    getPlanLedgerState: typeof getPlanLedgerStateReadOnly;
     logError: typeof _logErrorImpl;
+    boundedApprovalCheck: (directory: string, timeoutMs: number) => Promise<boolean>;
 };
 export declare function createIssueTraceHook(_config: unknown, directory: string, approvalTimeoutMs?: number): {
     messagesTransform: (input: unknown, output: unknown) => Promise<void>;

package/dist/hooks/utils.d.ts

@@ -76,7 +76,7 @@ export declare function composeBlockingHandlers<I, O>(...fns: Array<HookHandler<
  * @throws Error if the filename is invalid or attempts path traversal
  */
 export declare function validateSwarmPath(directory: string, filename: string): string;
-export declare function readSwarmFileAsync(directory: string, filename: string, cache?: Map<string, Promise<string | null>>): Promise<string | null>;
+export declare function readSwarmFileAsync(directory: string, filename: string, cache?: Map<string, Promise<string | null>>, reader?: (resolvedPath: string) => Promise<string | null>, useArtifactCache?: boolean): Promise<string | null>;
 /**
  * Estimate tokens from a character count using the canonical heuristic.
  * This is the single sanctioned numeric form (issue #2107 §1).