opencode-swarm 7.169.0 → 7.170.1

package/dist/cli/{pr-workflow-gate-k1r4rjw4.js → pr-workflow-gate-heajnnkw.js}

@@ -78,45 +78,45 @@ import {
   withPrWorkflowCheckoutMutationLock,
   withPrWorkflowCheckoutPreparationLock,
   writePrWorkflowAtomicJson
-} from "./index-3zcds757.js";
+} from "./index-bswpngg6.js";
 import"./index-5400m33a.js";
 import"./index-7h01bkm6.js";
-import"./index-5reh1bjz.js";
+import"./index-krzb4zkx.js";
 import"./index-cgpwjctj.js";
-import"./index-egkc2bpv.js";
-import"./index-zapc8vj4.js";
+import"./index-r1yqx3h9.js";
+import"./index-rwdfk03c.js";
 import"./index-xnpjwc4h.js";
 import"./index-txdagbh7.js";
 import"./index-9br68j86.js";
 import"./index-cw912re7.js";
-import"./index-c7kr7tnk.js";
-import"./index-55fkkjec.js";
-import"./index-nwv3e3kc.js";
+import"./index-987ga2vy.js";
+import"./index-v5gsvtvs.js";
+import"./index-wc34rqj0.js";
 import"./index-fyfbpz4f.js";
 import"./index-gfbggp8k.js";
 import"./index-0hgmsyfp.js";
 import"./index-zsrtt42s.js";
-import"./index-sb1s03y9.js";
+import"./index-d6q0g0nd.js";
 import"./index-fhh02gwx.js";
 import"./index-nyn01yrz.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-sxcfszbe.js";
-import"./index-wwr67xc0.js";
+import"./index-g0qsftdd.js";
+import"./index-tz3jzz2t.js";
 import {
   PR_REVIEW_BASE_DIMENSION_IDS
-} from "./index-ksybszed.js";
-import"./index-0vgs5r39.js";
+} from "./index-knh5z9gb.js";
+import"./index-qv1y6f8r.js";
 import"./index-b3pmzbh1.js";
 import"./index-2s7dvzff.js";
-import"./index-2znfa537.js";
+import"./index-ensg0pt6.js";
 import"./index-bm5xrfnx.js";
 import"./index-rtry5xyf.js";
-import"./index-s96dpjsk.js";
+import"./index-rp0dpvd2.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-p6xsgk4r.js";
-import"./index-83m0y4cj.js";
+import"./index-z970hmyt.js";
+import"./index-0hjtck07.js";
 import"./index-fgp96k3r.js";
 import"./index-br3mvbsa.js";
 import"./index-bernkwgf.js";
@@ -124,7 +124,7 @@ import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
 import"./index-5qt9yf5w.js";
-import"./index-76ng6vmq.js";
+import"./index-q5q42mf3.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-9ttqbhvw.js";
@@ -134,15 +134,15 @@ import"./index-nprdr0sm.js";
 import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-3bfzpzsb.js";
+import"./index-hp729z5v.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-yj24ny5k.js";
+import"./index-9z0dc1t5.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
 import"./index-zpsr8rpc.js";
-import"./index-q1r1cfww.js";
+import"./index-76qm2c2y.js";
 import"./index-yzjaj53h.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";

package/dist/cli/{scan-cursor-k6egg4n0.js → scan-cursor-512cqk7t.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-nwv3e3kc.js";
-import"./index-76ng6vmq.js";
+} from "./index-wc34rqj0.js";
+import"./index-q5q42mf3.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-9ttqbhvw.js";

package/dist/cli/{schema-vdrtpggt.js → schema-z9kd66wf.js}

@@ -109,7 +109,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-yj24ny5k.js";
+} from "./index-9z0dc1t5.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{scope-persistence-h1mmww19.js → scope-persistence-8cpqcwg7.js}

@@ -23,8 +23,8 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-p6xsgk4r.js";
-import"./index-83m0y4cj.js";
+} from "./index-z970hmyt.js";
+import"./index-0hjtck07.js";
 import"./index-fgp96k3r.js";
 import"./index-br3mvbsa.js";
 import"./index-bernkwgf.js";
@@ -32,7 +32,7 @@ import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
 import"./index-5qt9yf5w.js";
-import"./index-76ng6vmq.js";
+import"./index-q5q42mf3.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-9ttqbhvw.js";
@@ -42,10 +42,10 @@ import"./index-nprdr0sm.js";
 import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-3bfzpzsb.js";
+import"./index-hp729z5v.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-yj24ny5k.js";
+import"./index-9z0dc1t5.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{skill-generator-pmn6gmvk.js → skill-generator-1efdbkqh.js}

@@ -33,19 +33,19 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-c7kr7tnk.js";
+} from "./index-987ga2vy.js";
 import"./index-q7sjgr1y.js";
-import"./index-0vgs5r39.js";
+import"./index-qv1y6f8r.js";
 import"./index-b3pmzbh1.js";
 import"./index-2s7dvzff.js";
-import"./index-2znfa537.js";
+import"./index-ensg0pt6.js";
 import"./index-bm5xrfnx.js";
 import"./index-rtry5xyf.js";
-import"./index-s96dpjsk.js";
+import"./index-rp0dpvd2.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
 import"./index-5qt9yf5w.js";
-import"./index-76ng6vmq.js";
+import"./index-q5q42mf3.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-9ttqbhvw.js";
@@ -55,10 +55,10 @@ import"./index-nprdr0sm.js";
 import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-3bfzpzsb.js";
+import"./index-hp729z5v.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-yj24ny5k.js";
+import"./index-9z0dc1t5.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{snapshot-coordination-init-rspykgd0.js → snapshot-coordination-init-fsf8h4d3.js}

@@ -8,43 +8,43 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-3zcds757.js";
+} from "./index-bswpngg6.js";
 import"./index-5400m33a.js";
 import"./index-7h01bkm6.js";
-import"./index-5reh1bjz.js";
+import"./index-krzb4zkx.js";
 import"./index-cgpwjctj.js";
-import"./index-egkc2bpv.js";
-import"./index-zapc8vj4.js";
+import"./index-r1yqx3h9.js";
+import"./index-rwdfk03c.js";
 import"./index-xnpjwc4h.js";
 import"./index-txdagbh7.js";
 import"./index-9br68j86.js";
 import"./index-cw912re7.js";
-import"./index-c7kr7tnk.js";
-import"./index-55fkkjec.js";
-import"./index-nwv3e3kc.js";
+import"./index-987ga2vy.js";
+import"./index-v5gsvtvs.js";
+import"./index-wc34rqj0.js";
 import"./index-fyfbpz4f.js";
 import"./index-gfbggp8k.js";
 import"./index-0hgmsyfp.js";
 import"./index-zsrtt42s.js";
-import"./index-sb1s03y9.js";
+import"./index-d6q0g0nd.js";
 import"./index-fhh02gwx.js";
 import"./index-nyn01yrz.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-sxcfszbe.js";
-import"./index-wwr67xc0.js";
-import"./index-ksybszed.js";
-import"./index-0vgs5r39.js";
+import"./index-g0qsftdd.js";
+import"./index-tz3jzz2t.js";
+import"./index-knh5z9gb.js";
+import"./index-qv1y6f8r.js";
 import"./index-b3pmzbh1.js";
 import"./index-2s7dvzff.js";
-import"./index-2znfa537.js";
+import"./index-ensg0pt6.js";
 import"./index-bm5xrfnx.js";
 import"./index-rtry5xyf.js";
-import"./index-s96dpjsk.js";
+import"./index-rp0dpvd2.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-p6xsgk4r.js";
-import"./index-83m0y4cj.js";
+import"./index-z970hmyt.js";
+import"./index-0hjtck07.js";
 import"./index-fgp96k3r.js";
 import"./index-br3mvbsa.js";
 import"./index-bernkwgf.js";
@@ -52,7 +52,7 @@ import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
 import"./index-5qt9yf5w.js";
-import"./index-76ng6vmq.js";
+import"./index-q5q42mf3.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-9ttqbhvw.js";
@@ -62,15 +62,15 @@ import"./index-nprdr0sm.js";
 import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-3bfzpzsb.js";
+import"./index-hp729z5v.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-yj24ny5k.js";
+import"./index-9z0dc1t5.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
 import"./index-zpsr8rpc.js";
-import"./index-q1r1cfww.js";
+import"./index-76qm2c2y.js";
 import"./index-yzjaj53h.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";

package/dist/cli/{worktree-collision-ownership-x84dzzzc.js → worktree-collision-ownership-zdpeepe4.js}

@@ -13,7 +13,7 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-ksybszed.js";
+} from "./index-knh5z9gb.js";
 import"./index-b3pmzbh1.js";
 import"./index-2s7dvzff.js";
 import"./index-br3mvbsa.js";
@@ -22,7 +22,7 @@ import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
 import"./index-5qt9yf5w.js";
-import"./index-76ng6vmq.js";
+import"./index-q5q42mf3.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-9ttqbhvw.js";

package/dist/cli/{worktree-isolation-nw9pakkx.js → worktree-isolation-zswrjstb.js}

@@ -21,45 +21,45 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-3zcds757.js";
+} from "./index-bswpngg6.js";
 import"./index-5400m33a.js";
 import"./index-7h01bkm6.js";
-import"./index-5reh1bjz.js";
+import"./index-krzb4zkx.js";
 import"./index-cgpwjctj.js";
-import"./index-egkc2bpv.js";
-import"./index-zapc8vj4.js";
+import"./index-r1yqx3h9.js";
+import"./index-rwdfk03c.js";
 import"./index-xnpjwc4h.js";
 import"./index-txdagbh7.js";
 import"./index-9br68j86.js";
 import"./index-cw912re7.js";
-import"./index-c7kr7tnk.js";
-import"./index-55fkkjec.js";
-import"./index-nwv3e3kc.js";
+import"./index-987ga2vy.js";
+import"./index-v5gsvtvs.js";
+import"./index-wc34rqj0.js";
 import"./index-fyfbpz4f.js";
 import"./index-gfbggp8k.js";
 import"./index-0hgmsyfp.js";
 import"./index-zsrtt42s.js";
-import"./index-sb1s03y9.js";
+import"./index-d6q0g0nd.js";
 import"./index-fhh02gwx.js";
 import"./index-nyn01yrz.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-sxcfszbe.js";
-import"./index-wwr67xc0.js";
-import"./index-ksybszed.js";
-import"./index-0vgs5r39.js";
+import"./index-g0qsftdd.js";
+import"./index-tz3jzz2t.js";
+import"./index-knh5z9gb.js";
+import"./index-qv1y6f8r.js";
 import"./index-b3pmzbh1.js";
 import"./index-2s7dvzff.js";
-import"./index-2znfa537.js";
+import"./index-ensg0pt6.js";
 import"./index-bm5xrfnx.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-s96dpjsk.js";
+} from "./index-rp0dpvd2.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-p6xsgk4r.js";
-import"./index-83m0y4cj.js";
+import"./index-z970hmyt.js";
+import"./index-0hjtck07.js";
 import"./index-fgp96k3r.js";
 import"./index-br3mvbsa.js";
 import"./index-bernkwgf.js";
@@ -67,7 +67,7 @@ import"./index-dvbf6fpn.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
 import"./index-5qt9yf5w.js";
-import"./index-76ng6vmq.js";
+import"./index-q5q42mf3.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
 import"./index-9ttqbhvw.js";
@@ -77,15 +77,15 @@ import"./index-nprdr0sm.js";
 import"./index-nbdmdyke.js";
 import"./index-1xnse449.js";
 import"./index-ee6ydtfe.js";
-import"./index-3bfzpzsb.js";
+import"./index-hp729z5v.js";
 import"./index-0mhftbpp.js";
 import"./index-a1w58b47.js";
-import"./index-yj24ny5k.js";
+import"./index-9z0dc1t5.js";
 import"./index-sxt7fgcw.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
 import"./index-zpsr8rpc.js";
-import"./index-q1r1cfww.js";
+import"./index-76qm2c2y.js";
 import"./index-yzjaj53h.js";
 import"./index-zgwm4ryv.js";
 import"./index-a76rekgs.js";

package/dist/commands/ci.d.ts

@@ -0,0 +1,40 @@
+/**
+ * `swarm ci` command handler (issue #2497).
+ *
+ * Advisory headless CI: evaluates a checked-out repo's authoritative gates
+ * read-only (see src/ci/evaluate.ts), renders Markdown + [SWARM_CI_JSON],
+ * and maps the run outcome to a machine exit status:
+ *   0 = every evaluated gate passed (and at least one was evaluated)
+ *   1 = gate violation / no-data / corrupt evidence / nothing to evaluate
+ *   2 = cancelled (SIGINT/SIGTERM)
+ *   3 = deadline or internal error
+ *
+ * The command must run without a TTY and without the OpenCode host
+ * (scrubbed CI environments), so it carries NO toolPolicy (neither
+ * human-only nor agent-gated). It uses `ctx.directory` — never
+ * process.cwd() — per AGENTS.md invariant 4, spawns no subprocess, and
+ * consumes no stdin.
+ */
+import { runAdvisoryCiRuntime } from '../ci/index.js';
+import type { CommandContext, CommandFailure } from './registry.js';
+export declare const DEFAULT_CI_DEADLINE_MS = 300000;
+export interface CiSignalCancellation {
+    /** The handler invoked on SIGINT/SIGTERM; exported for unit testing the
+     * wiring without relying on platform signal delivery. */
+    handler: () => void;
+    install: () => void;
+    dispose: () => void;
+}
+/** Wire SIGINT/SIGTERM to the run's AbortController. Kept as a seam so the
+ * cancellation contract is unit-testable on platforms where self-signalling
+ * a native process is unreliable (Windows Git Bash; see frozen check C5's
+ * notes). */
+export declare function createSignalCancellation(controller: AbortController, onCancelled?: () => void): CiSignalCancellation;
+export declare function handleCiCommand(ctx: CommandContext): Promise<string | CommandFailure>;
+/** Test seam: dependency injection over the runtime entry so handler-level
+ * diagnostic-branch tests can drive cancelled/deadline outcomes without
+ * timing or signal-delivery dependence (repo convention: DI over mock.module;
+ * restore in afterEach). */
+export declare const _internals: {
+    runAdvisoryCiRuntime: typeof runAdvisoryCiRuntime;
+};

package/dist/commands/index.d.ts

@@ -12,6 +12,7 @@ export { handleAutoProceedCommand } from './auto-proceed';
 export { handleBenchmarkCommand } from './benchmark';
 export { handleBrainstormCommand } from './brainstorm';
 export { handleCheckpointCommand } from './checkpoint';
+export { createSignalCancellation, DEFAULT_CI_DEADLINE_MS, handleCiCommand, } from './ci';
 export { handleCiSimulateCommand } from './ci-simulate';
 export { handleClarifyCommand } from './clarify';
 export { handleCloseCommand } from './close';

package/dist/commands/registry.d.ts

@@ -788,6 +788,14 @@ export declare const COMMAND_REGISTRY: {
         readonly category: "agent";
         readonly toolPolicy: "none";
     };
+    readonly ci: {
+        readonly handler: (ctx: CommandContext) => Promise<string | CommandFailure>;
+        readonly description: "Advisory headless CI: evaluate the repo gate/evidence state read-only with machine exit codes [--timeout-ms <n>] [--json]";
+        readonly args: "--timeout-ms <n>, --json";
+        readonly details: "Host-decoupled, read-only evaluation of the checked-out repo (#2497): per-task required gates (tri-state evidence), plan-critic approval, and evidence-quality thresholds, composed from the authoritative readers. Exits 0 only when every evaluated gate passes; 1 on any violation, no-data, corrupt evidence, or a missing plan; 2 on cancellation (SIGINT/SIGTERM); 3 on deadline/internal error. Emits a Markdown report plus a [SWARM_CI_JSON] machine block. Never writes to .swarm and cannot satisfy or bypass any gate; runs with no TTY and no OpenCode host.";
+        readonly category: "diagnostics";
+        readonly toolPolicy: "none";
+    };
     readonly 'ci-monitor': {
         readonly handler: (ctx: CommandContext) => CommandResult;
         readonly description: "Drive an already-reviewed, approved PR to green and merged (monitor CI, fix, merge) [pr]";

package/dist/hooks/gate-denial-tracker.d.ts

@@ -8,21 +8,18 @@
  *
  * This module owns that counter. `noteGateDenial` is called from the single
  * catch site wrapping the fail-closed chain in `src/index.ts`. It:
- *   1. classifies the denial by the leading code token of the error message,
- *   2. increments a per-(sessionID, toolName, discriminator, code) streak,
+ *   1. classifies the denial by its bounded structured cause (falling back to
+ *      the leading code token of the error message),
+ *   2. increments a per-(sessionID, invocationID, stable action, cause) streak,
  *   3. APPENDS (never rewrites) escalating guidance to the error message so the
  *      model reads it in the tool-rejection text, and
  *   4. at the hard rung, pushes an advisory + emits telemetry.
  *
- * The DISCRIMINATOR (reviewer round-4 REQUIRED 2) is the canonicalized
- * `subagent_type` of a `Task` call, and the empty string for every other tool.
- * Without it the reset was too wide: `resetGateDenialStreaks` drops a whole
- * (session, tool) prefix on any successful completion of that tool, so ONE
- * successful `Task` → `explorer` erased a 4-deep `ACCEPTANCE_FIELD_REQUIRED`
- * streak on `Task` → `coder`. Under the interleaving the loop actually
- * exhibits — deny coder, delegate an explorer to investigate, deny coder again —
- * the STOP rung was unreachable. Sub-scoping both the count and the reset by
- * dispatch target makes a success clear only what plausibly succeeded.
+ * The action projection intentionally retains only stable routing fields. It
+ * canonicalizes the `Task` role and target aliases, while omitting prompts,
+ * command content, and other retry-varying payloads. The same projection is
+ * used by note, reset, and the test peek/expiry seams, so a success can clear
+ * only what plausibly succeeded.
  *
  * Invariants this module must not break:
  *   - The caller ALWAYS rethrows. Decoration is append-only, so the leading
@@ -82,6 +79,13 @@ export declare function gateDenialDiscriminator(tool: string, args: unknown): st
  * a per-occurrence key.
  */
 export declare function deriveGateDenialCode(message: string): string;
+/**
+ * Resolve a denial cause from an own data property only. Accessors and
+ * inherited values are intentionally ignored so a hostile/frozen error cannot
+ * make tracking invoke arbitrary code. The message parser remains the
+ * trajectory logger's message-only boundary.
+ */
+export declare function deriveStructuredGateDenialCode(err: unknown): string | undefined;
 /**
  * True when the thrown value is a user/host abort rather than a policy denial.
  * Aborts must not count toward a denial streak AND must not reset one: a user
@@ -94,7 +98,7 @@ export declare function gateDenialWarnText(count: number, code: string): string;
  * The append-only hard rung, modelled on `nonTransientHardStopMessage`
  * (src/hooks/guardrails/nontransient-circuit.ts:336-354).
  */
-export declare function gateDenialStopText(count: number, code: string, tool: string): string;
+export declare function gateDenialStopText(count: number, code: string, tool: string, actionPattern?: string): string;
 export interface GateDenialOptions {
     /**
      * `guardrails.enabled`. The thresholds live in the `guardrails` config block
@@ -169,7 +173,7 @@ export declare const _test_exports: {
     readonly MAX_DISCRIMINATOR_LENGTH: 64;
     readonly streakCount: () => number;
     /** Read a streak length without mutating it. */
-    readonly peekStreak: (sessionID: string, tool: string, code: string, discriminator?: string) => number;
+    readonly peekStreak: (sessionID: string, tool: string, code: string, target?: unknown) => number;
     /** Force a streak's TTL into the past so eviction can be tested. */
-    readonly expireStreak: (sessionID: string, tool: string, code: string, discriminator?: string) => void;
+    readonly expireStreak: (sessionID: string, tool: string, code: string, target?: unknown) => void;
 };

package/dist/hooks/phase-complete-directive-gate.d.ts

@@ -39,6 +39,19 @@ export interface DirectiveGateResult {
 }
 /**
  * Evaluate all critical directives shown during the phase. Fail-closed.
+ *
+ * Since #2628 the reviewer-facing obligation unit is the ENTRY (one shown
+ * obligation per entry), so resolution is evaluated per entry: an entry is
+ * resolved when (a) at least one of its phase-window memberships carries a
+ * satisfying terminal (authorized override, applied, or ignored/n_a with a
+ * reason), AND (b) every violated/contradicted membership is remediated by an
+ * `applied` terminal committed STRICTLY LATER on some membership of the same
+ * entry (an earlier applied never hides a later violation; the same-membership
+ * case is the historical in-place remediation flow, where the current terminal
+ * is `applied` and the violated state moved to terminal_history). The reported
+ * trace_id is the representative the reviewer was shown: a violated membership
+ * when one exists, else the most recently committed one (ties by greatest
+ * trace_id) — mirroring `pickDirectiveRepresentatives` in phase-directives.ts.
  */
 export declare function evaluatePhaseCriticalDirectives(params: {
     directory: string;

package/dist/hooks/phase-directives.d.ts

@@ -18,11 +18,40 @@ import type { KnowledgeEntryBase } from './knowledge-types.js';
 export declare function collectPhaseDirectiveIds(directory: string, phaseLabel?: string): Promise<string[]>;
 /** Load all knowledge entries (swarm + hive) indexed by id. */
 export declare function readEntriesById(directory: string): Promise<Map<string, KnowledgeEntryBase>>;
+/**
+ * One candidate obligation per receipt membership, before per-entry collapse.
+ * `committed_at` and the terminal fields come from the membership so the
+ * representative selection below is deterministic.
+ */
+export interface DirectiveCandidate {
+    directive: DirectiveToVerify;
+    /** Membership commit time (ISO-8601 UTC from the receipt ledger). */
+    committed_at: string;
+}
+/**
+ * True when `next` is a better per-entry representative than `incumbent`.
+ * Precedence (#2628): a membership whose current terminal is a violation
+ * (`violated` or `contradicted`) wins (it carries the remediation obligation
+ * via prior_terminal_*), then the most recently committed membership, then the
+ * lexicographically greatest trace_id (code-unit order — locale-independent
+ * determinism).
+ */
+export declare function isPreferredDirectiveCandidate(next: DirectiveCandidate, incumbent: DirectiveCandidate): boolean;
+/**
+ * Collapse membership-derived candidates to at most one per unique entry_id
+ * (issue #2628). The reviewer's obligation unit is the directive (entry), not
+ * the (trace_id, entry_id) pair — pair multiplicity re-created one verification
+ * per historical exposure and grew the injected block O(entries x trace_ids).
+ * Snapshot semantics: the result is a pure function of the membership list at
+ * read time; a membership committed between dispatch and settle can shift the
+ * representative (pre-existing skew class, not widened here).
+ */
+export declare function pickDirectiveRepresentatives(candidates: DirectiveCandidate[]): DirectiveCandidate[];
 /**
  * Resolve the directives the reviewer must verify for a phase: the entries
  * behind the phase's retrieved IDs, with priority + lesson + verification
- * predicate. Archived/quarantined entries are excluded. Fail-open: returns [] on
- * any error.
+ * predicate, deduplicated to ONE obligation per entry. Archived/quarantined
+ * entries are excluded. Fail-open: returns [] on any error.
  */
 export declare function readPhaseDirectivesToVerify(directory: string, phaseLabel?: string): Promise<DirectiveToVerify[]>;
 /** The CRITICAL directive IDs retrieved during the phase. */

package/dist/hooks/reviewer-verdict-parser.d.ts

@@ -4,12 +4,17 @@
  *
  * Parses a reviewer's `DIRECTIVE_COMPLIANCE` block (VERIFIED / VIOLATED / N/A
  * lines) and reconciles it against the exact retrieval memberships the reviewer
- * was asked to verify, committing one authoritative terminal per pair:
+ * was asked to verify, committing one authoritative terminal per shown pair:
  *
  *   VERIFIED:<trace_id>:<entry_id> -> outcome:'applied'
  *   VIOLATED:<trace_id>:<entry_id> -> outcome:'violated'
  *   N/A:<trace_id>:<entry_id>      -> outcome:'n_a'
  *
+ * Since #2628 the shown set carries at most one pair per entry, so the pair
+ * shown is the entry's single obligation for the phase; the phase-complete gate
+ * resolves the ENTRY once that pair's terminal commits (see
+ * phase-complete-directive-gate.ts).
+ *
  * Anti-spoofing: verdicts for pairs that were not in the verify-set are dropped.
  * An omitted CRITICAL pair gets a `violated` / `reviewer_omitted` terminal.
  * Authority failures return typed uncertainty and never fabricate success.