opencode-swarm 7.179.1 → 7.180.1

package/dist/cli/{worktree-isolation-4855f2az.js → worktree-isolation-6zpnzr70.js}

@@ -21,66 +21,68 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-ky262b73.js";
+} from "./index-z2zrcecq.js";
+import"./index-tnhk72rs.js";
 import"./index-hamqvzqn.js";
-import"./index-pskba939.js";
-import"./index-aqpwm350.js";
-import"./index-h4nh6s8b.js";
-import"./index-q375xdcw.js";
-import"./index-y98fvmb8.js";
-import"./index-g6nyk713.js";
+import"./index-rejpbgxp.js";
+import"./index-nhxykfyy.js";
+import"./index-bhmrgbyv.js";
+import"./index-xd0e4amf.js";
+import"./index-s0zgz4p1.js";
 import"./index-txdagbh7.js";
-import"./index-n1tcj1q7.js";
+import"./index-g062wnw1.js";
 import"./index-6b295cas.js";
-import"./index-dz12bshh.js";
-import"./index-vp9pn7sv.js";
-import"./index-pfg3jwe9.js";
+import"./index-50v672wd.js";
+import"./index-3zvp7t5d.js";
+import"./index-yf7tdhpz.js";
 import"./index-rdec0y3z.js";
-import"./index-6r92fw88.js";
-import"./index-549wxbe1.js";
+import"./index-y30y1rkg.js";
+import"./index-cjapb4hy.js";
 import"./index-zsrtt42s.js";
-import"./index-y94vwx2q.js";
-import"./index-2b0ktpbf.js";
-import"./index-3pzwsesm.js";
+import"./index-z2xf153n.js";
+import"./index-bdpgfep1.js";
+import"./index-92m05mew.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-n2wjrgcs.js";
-import"./index-zbhvr9st.js";
-import"./index-sj29n50e.js";
-import"./index-epfjc1c1.js";
-import"./index-s4bkey0q.js";
+import"./index-v7fx8q3z.js";
+import"./index-k5vwnnym.js";
+import"./index-n5carmk0.js";
+import"./index-v0par978.js";
+import"./index-2q5m4m2r.js";
+import"./index-gc6h1fmf.js";
 import"./index-2s7dvzff.js";
-import"./index-5d224akk.js";
-import"./index-0h3cr7pn.js";
+import"./index-dzm5nfh7.js";
+import"./index-6gcxgx84.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-ajm7ebyd.js";
+} from "./index-k6f0nryj.js";
 import"./index-frcemc0b.js";
-import"./index-wrt875kh.js";
-import"./index-rb9jmj30.js";
-import"./index-b567t0cr.js";
-import"./index-h59vsbch.js";
-import"./index-cvg402ha.js";
-import"./index-a11ztzs5.js";
-import"./index-nzekzzs2.js";
-import"./index-ry16d01s.js";
+import"./index-0725jpp7.js";
+import"./index-cj64vp08.js";
+import"./index-wx3wz7ya.js";
+import"./index-38cfx8g8.js";
+import"./index-91dhg3wr.js";
+import"./index-vmthakz0.js";
+import"./index-bv4b8tpa.js";
 import"./index-rdm3px0g.js";
-import"./index-yfpswnjt.js";
-import"./index-yp25bc9n.js";
+import"./index-ry16d01s.js";
+import"./index-516j9vsk.js";
+import"./index-gy3tcmk4.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-34bwqcea.js";
-import"./index-f2v90gfc.js";
-import"./index-7g4c7s5r.js";
-import"./index-qt0793qm.js";
-import"./index-ne9zamcs.js";
+import"./index-12ewkms0.js";
+import"./index-ea9fk6v0.js";
+import"./index-6mwha20t.js";
 import"./index-1xnse449.js";
 import"./index-c1ggtmpm.js";
-import"./index-m1w40kfw.js";
-import"./index-zz7gzw57.js";
-import"./index-4ddpvd5c.js";
-import"./index-9s1xzvnn.js";
+import"./index-ejhxgyvm.js";
+import"./index-7g4c7s5r.js";
+import"./index-989v83pb.js";
+import"./index-gx2vp8gx.js";
+import"./index-xj5z92qz.js";
+import"./index-zxdawwc7.js";
+import"./index-rp4akjrm.js";
 import"./index-w872yykk.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/commands/pr-feedback-loop.d.ts

@@ -0,0 +1 @@
+export declare function handlePrFeedbackLoopCommand(directory: string, args: string[], sessionID: string): Promise<string>;

package/dist/commands/registry.d.ts

@@ -713,8 +713,8 @@ export declare const COMMAND_REGISTRY: {
     readonly sdd: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Manage OpenSpec-compatible SDD artifacts and effective spec projection";
-        readonly args: "status|validate|project [--json] [--change <id>] [--dry-run]";
-        readonly details: "Parent command for spec-driven development artifacts. Use sdd status to inspect .swarm/spec.md plus openspec/ artifacts, sdd validate to validate OpenSpec-compatible deltas, and sdd project to materialize the effective spec into .swarm/spec.md for planning.";
+        readonly args: "status|validate|project [--json] [--change <id>] [--dry-run] [--source <provider>] [--feature <id>|all] [--overwrite]";
+        readonly details: "Parent command for spec-driven development artifacts. Use sdd status to inspect .swarm/spec.md plus openspec/ artifacts, sdd validate to validate OpenSpec-compatible deltas, and sdd project to materialize the effective spec into .swarm/spec.md for planning. Spec-Kit: sdd project projects ALL features with feature-scoped ids (featureId/FR-nnn) when several exist; --feature <id> selects one (v1 bare-id output); --feature all is the explicit multi-feature alias (project only).";
         readonly category: "utility";
         readonly toolPolicy: "agent";
     };
@@ -810,6 +810,14 @@ export declare const COMMAND_REGISTRY: {
         readonly category: "utility";
         readonly toolPolicy: "restricted";
     };
+    readonly 'pr-feedback-loop': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Stop the autonomous PR babysitting settling loop for this session [stop] [reason...]";
+        readonly args: "stop <reason...>";
+        readonly details: "Human-only stop for the #2502 settling loop (triple opt-in: pr_monitor.enabled + pr_monitor.auto_pr_feedback + pr_feedback_loop.enabled). stop cancels any armed publication generation via the audited #2584 no-publish route (fail-open when nothing is armed), records a terminal cancelled state with the operator-visible reason, clears claimed-but-unsettled monitor events from the session queue via the sanctioned queue-clear primitive, and writes an atomic cleanup receipt under .swarm/pr-feedback-loop-cleanups/. Idempotent: re-running returns the same terminal without duplicating effects. Never issues new wakes; a wake already in flight may still surface in the session, but the workflow gate refuses pushes against a cancelled generation. The reason is mandatory.";
+        readonly category: "utility";
+        readonly toolPolicy: "restricted";
+    };
     readonly 'approve-plan-critic': {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Record a MANUAL plan-critic approval to unblock the critic_pre_plan execution gate [reason...]";

package/dist/config/schema.d.ts

@@ -1419,6 +1419,22 @@ export declare const PrMonitorConfigSchema: z.ZodObject<{
     auto_subscribe_on_pr_create: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strict>;
 export type PrMonitorConfig = z.infer<typeof PrMonitorConfigSchema>;
+/**
+ * Settling loop for autonomous PR babysitting (issue #2502; #1678 capstone) —
+ * TRIPLE opt-in: runs only when pr_monitor.enabled AND
+ * pr_monitor.auto_pr_feedback AND pr_feedback_loop.enabled are ALL true.
+ * Never a default flip. The only supported `publication` mode today is
+ * 'none' — the loop never arms publication and never pushes.
+ */
+export declare const PrFeedbackLoopConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    max_actions_per_pr: z.ZodDefault<z.ZodNumber>;
+    max_session_actions: z.ZodDefault<z.ZodNumber>;
+    publication: z.ZodDefault<z.ZodEnum<{
+        none: "none";
+    }>>;
+}, z.core.$strip>;
+export type PrFeedbackLoopConfig = z.infer<typeof PrFeedbackLoopConfigSchema>;
 export declare const ParallelizationConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     maxConcurrentTasks: z.ZodDefault<z.ZodNumber>;
@@ -2388,6 +2404,9 @@ export declare const PluginConfigSchema: z.ZodObject<{
         out_dir: z.ZodDefault<z.ZodString>;
         language: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    speckit_checkoff: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
     git: z.ZodOptional<z.ZodObject<{
         binary: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
@@ -3098,6 +3117,14 @@ export declare const PluginConfigSchema: z.ZodObject<{
             cleanup_timeout_ms: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
+    pr_feedback_loop: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        max_actions_per_pr: z.ZodDefault<z.ZodNumber>;
+        max_session_actions: z.ZodDefault<z.ZodNumber>;
+        publication: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+        }>>;
+    }, z.core.$strip>>;
     pr_monitor: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         poll_interval_seconds: z.ZodDefault<z.ZodNumber>;

package/dist/council/disagreement-detector.d.ts

@@ -23,7 +23,29 @@
  * forward to Round 2, not full Round 1 context — mirrors the "semantic forget
  * gate" selective-retention insight and keeps prompt sizes bounded.
  */
-import type { GeneralCouncilDisagreement, GeneralCouncilMemberResponse } from './general-council-types.js';
+import type { GeneralCouncilClaim, GeneralCouncilDisagreement, GeneralCouncilMemberResponse } from './general-council-types.js';
+/**
+ * Defensive shape check for one structured claim. Malformed claims are
+ * skipped individually — they must never break the detector or suppress the
+ * fallback passes (issue #2102 contract G safety rule).
+ *
+ * Exported (issue #2578) so the general-council synthesis service applies the
+ * SAME well-formedness filter when deciding which members hold explicit
+ * contrary positions for consensus clustering — one definition, no duplicate
+ * shape-check.
+ */
+export declare function isWellFormedClaim(value: unknown): value is GeneralCouncilClaim;
+/**
+ * Two stances are contrary when they differ, neither is neutral, and at
+ * least one is an explicit contrary position (`oppose` or `alternative`).
+ * `concern` flags risk without taking a side, so support-vs-concern is not
+ * auto-detected here — the marker/heuristic passes still cover it.
+ *
+ * Exported (issue #2578): the synthesis service reuses this canonical
+ * definition to identify a member's explicit contrary stance
+ * (`areContraryStances(stance, 'support')`) instead of duplicating the list.
+ */
+export declare function areContraryStances(a: GeneralCouncilClaim['stance'], b: GeneralCouncilClaim['stance']): boolean;
 /**
  * Detect disagreements across Round 1 member responses.
  *

package/dist/council/general-council-service.d.ts

@@ -9,14 +9,51 @@
  * member confidence rather than counted by headcount. A claim is a consensus
  * point only when its weighted agreement exceeds 0.6 across members.
  *
- * MAINTAIN/CONCEDE/NUANCE protocol (ConfMAD): a Round 2 response with the
- * CONCEDE keyword on a topic resolves the corresponding Round 1 disagreement;
- * MAINTAIN leaves it persisting; NUANCE marks it persisting-with-boundary.
+ * MAINTAIN/CONCEDE/NUANCE protocol (ConfMAD): a Round 2 response resolves a
+ * Round 1 disagreement only when a disputant declares a paragraph-leading
+ * CONCEDE on that topic (the documented stance grammar in
+ * ../agents/council-prompts.ts); MAINTAIN and NUANCE both leave it
+ * persisting (NUANCE carries no distinct synthesis behavior — it is parsed
+ * only so the stance grammar is recognized and recorded). Issue #2578: prose
+ * that merely CONTAINS the word "concede" (e.g. "MAINTAIN — I do not
+ * concede…") is not a concession, and a member detected as holding a
+ * contrary position (typed oppose/alternative claim, or appearing in any
+ * detected disagreement) is disagreement evidence that must never be emitted
+ * as consensus.
  */
 import type { GeneralCouncilDeliberationResponse, GeneralCouncilMemberResponse, GeneralCouncilResult } from './general-council-types.js';
+/** Round 2 stance keywords, exactly as documented in council-prompts.ts. */
+declare const LEADING_STANCE_KEYWORDS: readonly ["MAINTAIN", "CONCEDE", "NUANCE"];
+export type GeneralCouncilLeadingStance = (typeof LEADING_STANCE_KEYWORDS)[number];
+/** One paragraph-leading stance declaration parsed from a Round 2 response. */
+export interface LeadingStanceDeclaration {
+    stance: GeneralCouncilLeadingStance;
+    /** The full text of the paragraph whose first word is the stance keyword. */
+    paragraph: string;
+}
+/**
+ * Parse the documented paragraph-leading stance contract (issue #2578 sole
+ * owner: this module — callers must reuse this parser, not re-implement it).
+ *
+ * A declaration exists only when the FIRST word of a paragraph (blank-line
+ * separated) is exactly one of the uppercase keywords MAINTAIN / CONCEDE /
+ * NUANCE (case-sensitive, as the prompt documents them), standing alone
+ * before whitespace, punctuation, or a markdown decorator. Prose such as
+ * "I do not concede" or "After review I concede…" never leads a paragraph
+ * with the keyword and so yields no declaration — the conservative direction
+ * (no concession).
+ *
+ * Council prompts sanction markdown inside the response string ("Markdown OK
+ * inside the string"), so common paragraph decorators must not hide a
+ * declaration: leading blockquote/heading/list markers are stripped before
+ * the first-word check, emphasis wrapping (bold/italic/code) and hyphen
+ * joins are boundary characters, and zero-width characters are removed.
+ */
+export declare function extractLeadingStanceDeclarations(response: string): LeadingStanceDeclaration[];
 /**
  * Pure synthesis. Given completed member responses, produces the final
  * `GeneralCouncilResult` (without `moderatorOutput` — moderator is invoked
  * by the architect after this returns and populated separately).
  */
 export declare function synthesizeGeneralCouncil(question: string, mode: 'general' | 'spec_review', round1Responses: GeneralCouncilMemberResponse[], round2Responses: GeneralCouncilDeliberationResponse[]): GeneralCouncilResult;
+export {};

package/dist/failures/invocation-failure.d.ts

@@ -58,6 +58,17 @@ export interface ToolFailureClassificationInput {
  */
 export declare function sanitizeFailureEvidenceDisplay(value: string): string;
 declare function isNeutralExitOne(command: string): boolean;
+/**
+ * Provider failure categories in use (enumerated per issue #2673 plan-critic
+ * finding 6, so downstream category-prefix consumers — telemetry filters,
+ * dashboards, circuit thresholds — can discover every leaf):
+ *   provider.cancelled, provider.authentication_configuration,
+ *   provider.quota_billing, provider.rate_limit, provider.unavailable,
+ *   provider.context_window, provider.content_policy,
+ *   provider.request_shape (#2673: deterministic request-shape rejections,
+ *   e.g. a strict single-system provider rejecting a multi-system payload),
+ *   provider.unknown.
+ */
 export declare function classifyProviderFailure(error: unknown, action?: ActionIdentityInput): InvocationFailureRecordV1;
 export declare function isRetryableProviderFailure(record: InvocationFailureRecordV1): boolean;
 export declare function classifyToolInvocationFailure(input: ToolFailureClassificationInput): InvocationFailureRecordV1 | null;

package/dist/hooks/delegation-tracker.d.ts

@@ -8,8 +8,13 @@ import type { PluginConfig } from '../config/schema';
 export type { DelegationReason } from '../state';
 /**
  * Creates the chat.message hook for delegation tracking.
+ *
+ * `directory` (issue #2667) is the plugin instance's project root captured at
+ * hook construction — chat.message inputs carry no directory. Sessions created
+ * here are ownership-stamped for that project so another project's hydration
+ * can never evict them.
  */
-export declare function createDelegationTrackerHook(config: PluginConfig, guardrailsEnabled?: boolean): (input: {
+export declare function createDelegationTrackerHook(config: PluginConfig, guardrailsEnabled?: boolean, directory?: string): (input: {
     sessionID: string;
     agent?: string;
 }, output: Record<string, unknown>) => Promise<void>;

package/dist/hooks/pr-workflow-gate.d.ts

@@ -1310,7 +1310,7 @@ export declare function recordPrFeedbackPushAttemptResult(directory: string, inp
  * it), and the exact remote-head observation (including null when it could not
  * be resolved).
  */
-declare function cancelPrFeedbackPublication(directory: string, sessionID: string, reason: string): Promise<{
+export declare function cancelPrFeedbackPublication(directory: string, sessionID: string, reason: string): Promise<{
     revision: number | null;
     observedRemoteHead: string | null;
 }>;

package/dist/hooks/system-enhancer.d.ts

@@ -10,8 +10,10 @@ import type { RuntimePlan } from '../config/plan-schema';
 /**
  * Build the [spec-drift] advisory injected into the model's system prompt
  * after every loadPlan whenever spec staleness is detected (issue #853
- * Layer A). The text is appended to `output.system` and survives the
- * single-system-message collapse at `experimental.chat.system.transform`.
+ * Layer A). The text is appended to `output.system`; when the system render
+ * boundary (issue #2673) resolves `strict-single-system` for this request's
+ * model, the joined single entry retains the `[spec-drift]` block
+ * byte-verbatim (pinned by the boundary's acceptance checks).
  *
  * The "Do NOT proceed" line enumerates every tool in SPEC_DRIFT_BLOCKED_TOOLS
  * so the architect knows exactly which calls will return SPEC_DRIFT_BLOCK

package/dist/hooks/system-render-boundary.d.ts

@@ -0,0 +1,68 @@
+/**
+ * System render boundary (issue #2673).
+ *
+ * The final request boundary for the SYSTEM surface. The pinned host
+ * (@opencode-ai 1.18.3 — anomalyco/opencode@v1.18.3,
+ * packages/opencode/src/session/llm/request.ts, LLMRequestPrep.prepare)
+ * triggers `experimental.chat.system.transform` with `{ sessionID?, model }`
+ * and the SHARED `system` array, then coalesces only when
+ * `system.length > 2 && system[0] === header`, and materializes EVERY
+ * surviving entry as a separate `{role:'system'}` message ahead of the
+ * conversation. With plugin guidance entries present, every non-OAuth
+ * provider therefore receives exactly two system messages.
+ *
+ * Strict single-system providers (Qwen3.6/Gemma class — the documented
+ * v6.85.1 incident: "require exactly one `{role:'system'}` message at
+ * index 0") crash or silently degrade on that shape. An UNCONDITIONAL
+ * collapse is wrong (issue #1619): the host marks prompt-cache breakpoints
+ * on the first two system messages, so folding the stable base prompt
+ * together with per-request injections would move the breakpoint behind
+ * varying content and defeat caching for cache-capable providers.
+ *
+ * This module resolves the per-request rendering capability from the model
+ * the host hands the boundary and collapses ONLY for strict single-system
+ * models, IN PLACE (`length = 0` + `push` — the #1619 discipline: the host
+ * discards hook return values and reads its own array). Everything else is
+ * left byte-identical.
+ *
+ * Known limitation (plan-critic round 1, finding 1): host request paths that
+ * bypass `output.system` — OpenAI OAuth and workflow models consume the
+ * system surface via `options.instructions` — cannot be shaped by any plugin
+ * hook and are out of scope.
+ */
+/** Rendering classes the boundary distinguishes. */
+export type SystemRenderCapability = 'strict-single-system' | 'multi-system';
+/** Bounded, observable result of one boundary application. */
+export interface SystemRenderBoundaryResult {
+    capability: SystemRenderCapability;
+    entriesBefore: number;
+    entriesAfter: number;
+    collapsed: boolean;
+}
+/**
+ * Resolve the rendering capability for one request's model. Fail-open:
+ * anything unreadable or unknown resolves to `multi-system`, which leaves the
+ * array byte-identical (the pre-#2673 behavior), so the boundary can never
+ * regress a provider it does not positively know to be strict.
+ */
+export declare function resolveSystemRenderCapability(model: unknown): SystemRenderCapability;
+/**
+ * Apply the boundary to one request's system array, in place.
+ *
+ * Strict single-system models with more than one entry: empty-string entries
+ * are dropped, the rest are joined with a blank line (base prompt first —
+ * every producer appends after the host's pre-joined header), and the array is
+ * collapsed to exactly ONE entry via `length = 0` + `push`. Multi-system
+ * models: no mutation at all. Length ≤ 1: no-op. Never fabricates or reorders
+ * non-empty content.
+ */
+export declare function applySystemRenderBoundary(model: unknown, system: string[]): SystemRenderBoundaryResult;
+/**
+ * Hook factory for the `experimental.chat.system.transform` chain. Registered
+ * LAST (after every producer, including the role filter) so the shape is
+ * finalized once, after all pushes and prunes. Fail-open: any throw leaves the
+ * array untouched and logs non-fatally.
+ */
+export declare function createSystemRenderBoundaryHook(): {
+    'experimental.chat.system.transform': (input: unknown, output: unknown) => Promise<void>;
+};