opencode-swarm 7.168.0 → 7.169.0

package/dist/evaluation/retrieval-quality.d.ts

@@ -0,0 +1,116 @@
+import { buildWorkspaceGraphAsync } from '../tools/repo-graph/builder';
+export declare const _internals: {
+    buildWorkspaceGraphAsync: typeof buildWorkspaceGraphAsync;
+};
+export interface RetrievalQualityResourceCaps {
+    max_files: number;
+    walk_budget_ms: number;
+    max_tokens: number;
+    top_n: number;
+}
+export interface RetrievalQualityOptions {
+    corpusDirectory: string;
+    resourceCaps?: Partial<RetrievalQualityResourceCaps>;
+    /** Test-only diagnostic escape hatch. Production callers must clean up. */
+    keepTempRoot?: boolean;
+}
+export type RetrievalQualityStatus = 'complete' | 'degraded' | 'skipped';
+export interface ExactMeasurement {
+    expected: string[];
+    observed: string[];
+    true_positive_count: number;
+    false_negative: string[];
+    false_positive: string[];
+    precision: number;
+    recall: number;
+}
+export interface RetrievalRouteMeasurement {
+    status: RetrievalQualityStatus;
+    provenance: 'direct-source-fallback' | 'fresh-indexed-subgraph' | 'unavailable';
+    degradation_reason?: string;
+    graph_hit: boolean;
+    positive_hit: boolean;
+    fallback_reason: string | null;
+    actions: string[];
+    matched_resource_count: number;
+}
+export interface HeldoutGraphQualityCase {
+    id: string;
+    language: string;
+    analyzer: {
+        declared_id: string | null;
+        implementation: 'extractFileSymbols';
+    };
+    source: {
+        hash: string;
+        provenance: 'direct-source';
+    };
+    status: RetrievalQualityStatus;
+    degradation_reason?: string;
+    symbols: ExactMeasurement;
+    edges: ExactMeasurement;
+    known_misses: {
+        declared: string[];
+        matching_measured_false_negatives: string[];
+    };
+    spurious_edges: {
+        declared: string[];
+        matching_measured_false_positives: string[];
+    };
+    paraphrase: {
+        query: string;
+        direct_source: RetrievalRouteMeasurement;
+        indexed_control: RetrievalRouteMeasurement;
+    };
+    latency_ms: number;
+}
+export interface HeldoutGraphQualityReport {
+    schema_version: 1;
+    corpus: {
+        id: string;
+        version: string | null;
+        hash: string;
+        split: 'heldout';
+    };
+    generated_at: string;
+    status: RetrievalQualityStatus;
+    degradation_reasons: string[];
+    resource_caps: RetrievalQualityResourceCaps;
+    resource_usage: {
+        case_count: number;
+        graph_node_count: number;
+        graph_edge_count: number;
+        indexed_storage_available: boolean;
+    };
+    summary: {
+        symbols: AggregateExactMeasurement;
+        edges: AggregateExactMeasurement;
+        complete_case_count: number;
+        direct_source_fallback_complete_count: number;
+        direct_source_fallback_positive_hit_count: number;
+        fresh_indexed_control_complete_count: number;
+    };
+    thresholds: Record<string, number>;
+    uncertainty: {
+        method: 'deterministic-heldout-corpus';
+        confidence: 0.95;
+        sample_count: number;
+    };
+    cases: HeldoutGraphQualityCase[];
+}
+export interface AggregateExactMeasurement {
+    expected_count: number;
+    observed_count: number;
+    true_positive_count: number;
+    false_negative_count: number;
+    false_positive_count: number;
+    precision: number;
+    recall: number;
+}
+/**
+ * Measure the repository graph and retrieval router against the immutable
+ * multilingual held-out corpus. This intentionally owns a disposable project
+ * root: graph persistence remains under that root's `.swarm/`, never beside a
+ * source fixture or a caller workspace.
+ */
+export declare function evaluateHeldoutGraphRetrievalQuality(options: RetrievalQualityOptions): Promise<HeldoutGraphQualityReport>;

package/dist/failures/invocation-failure.d.ts

@@ -32,10 +32,29 @@ export interface ToolFailureClassificationInput {
 }
 /**
  * Redacts secrets/URLs and strips control chars for terminal/display safety.
- * Redaction runs FIRST against the raw value so `\b` sees genuine boundaries;
- * control-char stripping runs LAST so it can't interfere with matching. See
- * the FILL doc comment above for why control chars and whitespace are both
- * treated as tolerated fill throughout the redaction patterns.
+ * Order of operations (each step exists to keep a prior fix closed):
+ *   1. slice to MAX_SANITIZE_INPUT_CHARS (regex-work bound)
+ *   2. neutralize ANSI CSI sequences to a single space (#2369 Gap 2 — an SGR
+ *      final byte `m` is a word character and defeated `\b`; substituting a
+ *      separator can only create boundaries, never remove one, so the #2363
+ *      split/join fixes stay closed)
+ *   3. redact URLs (against the CSI-neutralized view)
+ *   4. redact credential KV pairs — keyword match is UNANCHORED and tolerant
+ *      of glued key names and identifier suffixes (#2369 Gap 1), and the
+ *      value matcher tolerates a fill-tolerant auth scheme word (Basic,
+ *      Digest, …) between separator and credential so `Authorization: Basic
+ *      <base64>` redacts the credential, not just the scheme
+ *   5. redact SCREAMING_CASE KV pairs (unchanged shape)
+ *   6. strip residual control/format/DI runs to spaces
+ *   7. sweep residual over-long bare `[<params>m` SGR bodies (the >32-char
+ *      CSI tail the bounded pre-pass cannot match)
+ *   8. trim + 512-byte UTF-8 bound
+ *
+ * Best-effort defense-in-depth for a log-display string, NOT a security
+ * boundary: combining marks (U+0300 class) still defeat keyword matching and
+ * are deliberately not fixed (#2369 Gap 3 — sweeping `\p{Mn}` would over-redact
+ * every legitimate combining accent in non-Latin diagnostics). Glued-key
+ * matching (Gap 1) and the CSI pre-pass (Gap 2) were added by #2485.
  */
 export declare function sanitizeFailureEvidenceDisplay(value: string): string;
 declare function isNeutralExitOne(command: string): boolean;

package/dist/hooks/init-orphan-recovery.d.ts

@@ -72,6 +72,13 @@ export interface InitOrphanRecoveryResult {
         reason: string;
     };
 }
+/**
+ * Issue #2527: resolves the worktree bases this project enumerates for
+ * reclamation — the project-internal default base plus every configured
+ * `worktree_dir` override. The LEGACY parent-level shared base is never
+ * enumerated for deletion (it is only read by the migration pass).
+ */
+export declare function resolveWorktreeEnumerationBases(directory: string): string[];
 /**
  * Runs bounded orphan cleanup at plugin init time.
  *

package/dist/hooks/pr-workflow-gate.d.ts

@@ -914,6 +914,8 @@ export declare function abortPrWorkflow(directory: string, sessionID: string, op
 }): Promise<{
     mode: PrWorkflowMode;
     prHeadSha?: string;
+    /** Remote branch head observed while cancelling a publication generation. */
+    observedRemoteHead?: string | null;
     openLanes: number;
     presumedStaleLanes?: string[];
     presumedStaleDisclosure?: string;
@@ -1280,9 +1282,13 @@ export declare function recordPrFeedbackPushAttemptResult(directory: string, inp
  * appends the audit event, and NEVER manufactures push authority. Used only
  * by `abortPrWorkflow`'s explicit `cancelPublication` arm. Returns the NEW
  * state revision when a state write landed (the abort clear must CAS against
- * it), or null when the generation state was absent/unreadable.
+ * it), and the exact remote-head observation (including null when it could not
+ * be resolved).
  */
-declare function cancelPrFeedbackPublication(directory: string, sessionID: string, reason: string): Promise<number | null>;
+declare function cancelPrFeedbackPublication(directory: string, sessionID: string, reason: string): Promise<{
+    revision: number | null;
+    observedRemoteHead: string | null;
+}>;
 export declare function resolvePrReviewWriterRunId(directory: string, sessionID: string, requestedRunId?: string): Promise<string>;
 export declare function markPrReviewTriggerEvaluationComplete(directory: string, sessionID: string, runId: string, artifactPath: string): Promise<PrWorkflowGateState>;
 /** Freeze one exact inline trigger ledger across every micro dispatch. */