opencode-swarm 7.18.3 → 7.19.1

package/dist/plan/ledger.d.ts

@@ -6,13 +6,18 @@
  */
 import { type Plan } from '../config/plan-schema';
 /**
- * Ledger schema version
+ * Ledger schema version.
+ *
+ * v7.19.0: bumped from 1.0.0 → 1.1.0 with the addition of `task_removed`.
+ * Older plugin readers throw on unknown event types (applyEventToPlan default
+ * branch); restart any running OpenCode session after upgrade so the new
+ * reader is loaded in-process.
  */
-export declare const LEDGER_SCHEMA_VERSION = "1.0.0";
+export declare const LEDGER_SCHEMA_VERSION = "1.1.0";
 /**
  * Valid ledger event types
  */
-export declare const LEDGER_EVENT_TYPES: readonly ["plan_created", "task_added", "task_updated", "task_status_changed", "task_reordered", "phase_completed", "plan_rebuilt", "plan_exported", "plan_reset", "snapshot", "execution_profile_set", "execution_profile_locked"];
+export declare const LEDGER_EVENT_TYPES: readonly ["plan_created", "task_added", "task_removed", "task_updated", "task_status_changed", "task_reordered", "phase_completed", "plan_rebuilt", "plan_exported", "plan_reset", "snapshot", "execution_profile_set", "execution_profile_locked"];
 export type LedgerEventType = (typeof LEDGER_EVENT_TYPES)[number];
 /**
  * A ledger event representing a plan mutation.

package/dist/plan/manager.d.ts

@@ -6,6 +6,38 @@
 export declare class PlanConcurrentModificationError extends Error {
     constructor(message: string);
 }
+/**
+ * Thrown when savePlan detects that the incoming plan would silently drop one
+ * or more tasks from the prior plan without the caller acknowledging the
+ * removal (issue #853).
+ *
+ * Callers must pass `options.acknowledged_removals.ids` covering every missing
+ * task id together with a non-empty reason to proceed.
+ */
+export declare class PlanTaskRemovalNotAcknowledgedError extends Error {
+    readonly missingTasks: Array<{
+        id: string;
+        phase: number;
+        status: TaskStatus;
+    }>;
+    constructor(missingTasks: Array<{
+        id: string;
+        phase: number;
+        status: TaskStatus;
+    }>);
+}
+/**
+ * Caller-supplied acknowledgement that a save_plan operation is intentionally
+ * removing tasks from the prior plan (issue #853). Passed to savePlan via the
+ * `acknowledged_removals` option; `ids` must list every task id missing from
+ * the incoming plan; `reason` must be non-empty; `source` identifies the
+ * caller (e.g. 'save_plan_tool', 'phase_complete_rebuild_from_ledger').
+ */
+export interface AcknowledgedRemovals {
+    ids: string[];
+    reason: string;
+    source: string;
+}
 import { type Plan, type RuntimePlan, type TaskStatus } from '../config/plan-schema';
 import { type LedgerEvent, type LedgerEventInput } from './ledger';
 /** Reset the startup ledger check flag. For testing only. */
@@ -63,12 +95,32 @@ export declare function regeneratePlanMarkdown(directory: string, plan: Plan): P
  * 4. Neither exists -> return null
  */
 export declare function loadPlan(directory: string): Promise<RuntimePlan | null>;
+/**
+ * Recovery-path helper for callers that legitimately need to replace the
+ * plan task set without explicit per-id acknowledgement (e.g. rebuilding
+ * from the ledger after replay, importing an external checkpoint, or
+ * recovering from a critic-approved snapshot).
+ *
+ * Diffs the on-disk plan against the incoming plan, auto-populates
+ * `acknowledged_removals` with every missing id, and delegates to savePlan.
+ * The architect-facing save_plan tool MUST NOT use this — it should fail
+ * closed and require the caller to enumerate removals explicitly.
+ *
+ * Returns the count of auto-acknowledged removals so the caller can attach
+ * `_midLoadRemovals` to the RuntimePlan for Layer A disclosure.
+ */
+export declare function savePlanWithAutoAcknowledgedRemovals(directory: string, plan: Plan, source: string, reason: string, options?: {
+    preserveCompletedStatuses?: boolean;
+}): Promise<{
+    removedCount: number;
+}>;
 /**
  * Validate against PlanSchema (throw on invalid), write to .swarm/plan.json via atomic temp+rename pattern,
  * then derive and write .swarm/plan.md
  */
 export declare function savePlan(directory: string, plan: Plan, options?: {
     preserveCompletedStatuses?: boolean;
+    acknowledged_removals?: AcknowledgedRemovals;
 }): Promise<void>;
 /**
  * Rebuild plan from ledger events.

package/dist/services/config-doctor.d.ts

@@ -56,18 +56,6 @@ export interface ConfigDoctorResult {
     /** The config that was analyzed */
     configSource: string;
 }
-/** Model availability snapshot from the active OpenCode provider registry. */
-export interface ModelAvailability {
-    /** Fully-qualified model IDs in provider/model form. */
-    availableModelIds: ReadonlySet<string>;
-    /** Human-readable source for diagnostics. */
-    source: string;
-    /** Optional failure message when the registry could not be loaded. */
-    error?: string;
-}
-export interface ConfigDoctorOptions {
-    modelAvailability?: ModelAvailability;
-}
 /** Backup artifact for rollback */
 export interface ConfigBackup {
     /** When the backup was created */
@@ -102,11 +90,10 @@ export declare function writeBackupArtifact(directory: string, backup: ConfigBac
  * @returns the path to the restored config file, or null if restore failed
  */
 export declare function restoreFromBackup(backupPath: string, directory: string): string | null;
-export declare function collectConfiguredModelRefs(config: PluginConfig): Map<string, Set<string>>;
 /**
  * Run the config doctor on a loaded config
  */
-export declare function runConfigDoctor(config: PluginConfig, directory: string, options?: ConfigDoctorOptions): ConfigDoctorResult;
+export declare function runConfigDoctor(config: PluginConfig, directory: string): ConfigDoctorResult;
 /**
  * Apply safe auto-fixes to config
  * Only applies low-risk, non-destructive fixes
@@ -129,7 +116,7 @@ export declare function shouldRunOnStartup(automationConfig: {
 /**
  * Full config doctor run with backup and fix application
  */
-export declare function runConfigDoctorWithFixes(directory: string, config: PluginConfig, autoFix?: boolean, options?: ConfigDoctorOptions): Promise<{
+export declare function runConfigDoctorWithFixes(directory: string, config: PluginConfig, autoFix?: boolean): Promise<{
     result: ConfigDoctorResult;
     backupPath: string | null;
     appliedFixes: ConfigFix[];

package/dist/services/evidence-service.d.ts

@@ -1,4 +1,12 @@
 import type { Evidence } from '../config/evidence-schema';
+import { listEvidenceTaskIds as _listEvidenceTaskIds, loadEvidence as _loadEvidence } from '../evidence/manager';
+/**
+ * _internals — DI seam for testing async I/O without cross-module mocks.
+ */
+export declare const _internals: {
+    loadEvidence: typeof _loadEvidence;
+    listEvidenceTaskIds: typeof _listEvidenceTaskIds;
+};
 /**
  * Structured evidence entry for a task.
  */

package/dist/services/plan-service.d.ts

@@ -1,3 +1,19 @@
+import { readSwarmFileAsync } from '../hooks/utils';
+import { derivePlanMarkdown, loadPlanJsonOnly } from '../plan/manager';
+/**
+ * Test-only dependency-injection seam. Production code calls
+ * `_internals.loadPlanJsonOnly(...)`, `_internals.derivePlanMarkdown(...)`,
+ * and `_internals.readSwarmFileAsync(...)` so tests can replace the
+ * functions on this object without touching the real module — `mock.module`
+ * from `bun:test` leaks across files in Bun's shared test-runner process,
+ * which would corrupt unrelated suites. Mutating this local object is
+ * file-scoped and trivially restorable via `afterEach`.
+ */
+export declare const _internals: {
+    loadPlanJsonOnly: typeof loadPlanJsonOnly;
+    derivePlanMarkdown: typeof derivePlanMarkdown;
+    readSwarmFileAsync: typeof readSwarmFileAsync;
+};
 /**
  * Structured plan data for a specific phase or full plan.
  */

package/dist/services/status-service.d.ts

@@ -46,6 +46,14 @@ export interface StatusData {
     compactionCount: number;
     /** ISO timestamp of last compaction snapshot, or null if none */
     lastSnapshotAt: string | null;
+    /** Issue #853 Layer C: true if spec drift was detected for this plan */
+    specStale?: boolean;
+    /** Reason text from .swarm/spec-staleness.json (or RuntimePlan._specStaleReason) */
+    specStaleReason?: string;
+    /** Stored spec hash from when the plan was last saved */
+    specStaleStoredHash?: string;
+    /** Current spec.md hash on disk (null when spec.md is missing) */
+    specStaleCurrentHash?: string | null;
 }
 /**
  * Get status data from the swarm directory.

package/dist/state/agent-run-context.d.ts

@@ -1,13 +1,13 @@
 /**
  * AgentRunContext — typed per-run state container.
  *
- * Holds the subset of swarmState used by run-scoped orchestration:
+ * Holds the subset of swarmState needed for future per-run isolation:
  *   activeToolCalls, activeAgent, delegationChains, agentSessions,
  *   environmentProfiles, and a shared reference to process-global toolAggregates.
  *
- * The default context preserves existing single-run behavior. Distinct contexts
- * remain available for dispatcher-slot isolation as the standard parallel path
- * grows beyond current task and Stage B gate coordination.
+ * PR 1 (dark foundation): the class exists and is instantiated for the default
+ * single-run path only.  No runtime behavior is changed.
+ * PR 2 will wire distinct contexts to parallel dispatcher slots.
  *
  * Generic type parameters let state.ts bind concrete internal types without
  * creating a circular import.

package/dist/state.d.ts

@@ -50,7 +50,6 @@ export type DelegationReason = 'normal_delegation' | 'review_rejected' | 'critic
  * Transitions must be forward-only: idle → coder_delegated → pre_check_passed → reviewer_run → tests_run → complete
  */
 export type TaskWorkflowState = 'idle' | 'coder_delegated' | 'pre_check_passed' | 'reviewer_run' | 'tests_run' | 'complete';
-export type StageBGate = 'reviewer' | 'test_engineer' | 'adversarial_test_engineer';
 /**
  * Represents per-session state for guardrail tracking.
  * Budget fields (toolCallCount, consecutiveErrors, etc.) have moved to InvocationWindow.
@@ -112,9 +111,7 @@ export interface AgentSessionState {
      * When both are present, the task may advance to tests_run regardless of order.
      * Always populated — Stage B is unconditionally parallel.
      */
-    stageBCompletion?: Map<string, Set<StageBGate>>;
-    /** Per-task required Stage B gates. Optional gates are added when dispatched. */
-    requiredStageBGates?: Map<string, Set<StageBGate>>;
+    stageBCompletion?: Map<string, Set<'reviewer' | 'test_engineer'>>;
     /** v6.71+ Council mode: per-task council verdict, recorded by delegation-gate when submit_council_verdicts resolves. */
     taskCouncilApproved?: Map<string, {
         verdict: 'APPROVE' | 'REJECT' | 'CONCERNS';
@@ -451,11 +448,19 @@ export declare function advanceTaskStateAndPersist(session: AgentSessionState, t
  * @returns Current task workflow state
  */
 export declare function getTaskState(session: AgentSessionState, taskId: string): TaskWorkflowState;
-export declare function requireStageBGate(session: AgentSessionState, taskId: string, gate: StageBGate): void;
-export declare function recordStageBCompletion(session: AgentSessionState, taskId: string, agent: StageBGate): void;
 /**
- * PR 2 Stage B barrier: returns true iff every required Stage B gate has been
- * recorded for the given task in this session.
+ * PR 2 Stage B barrier: record that a Stage B agent has completed for a task.
+ * Order-independent — either 'reviewer' or 'test_engineer' may complete first.
+ * Initializes the per-task set on first write.
+ *
+ * @param session - The agent session state
+ * @param taskId - The task identifier
+ * @param agent - Which Stage B agent completed ('reviewer' or 'test_engineer')
+ */
+export declare function recordStageBCompletion(session: AgentSessionState, taskId: string, agent: 'reviewer' | 'test_engineer'): void;
+/**
+ * PR 2 Stage B barrier: returns true iff both 'reviewer' and 'test_engineer' have
+ * been recorded for the given task in this session.
  *
  * @param session - The agent session state
  * @param taskId - The task identifier

package/dist/tools/index.d.ts

@@ -50,6 +50,7 @@ export { skill_inspect } from './skill-inspect';
 export { skill_list } from './skill-list';
 export { spec_write } from './spec-write';
 export { submit_phase_council_verdicts } from './submit-phase-council-verdicts';
+export { createSwarmCommandTool } from './swarm-command';
 import { suggestPatch } from './suggest-patch';
 export { suggestPatch };
 export type { SuggestPatchArgs } from './suggest-patch';

package/dist/tools/save-plan.d.ts

@@ -33,6 +33,25 @@ export interface SavePlanArgs {
      * after a failed phase).  Defaults to false (existing statuses preserved).
      */
     reset_statuses?: boolean;
+    /**
+     * Issue #853: tasks that are present in the prior plan but intentionally
+     * being removed by this save. Every task missing from `phases` must be
+     * enumerated here, otherwise save_plan rejects with
+     * `PLAN_TASK_REMOVAL_NOT_ACKNOWLEDGED`.
+     */
+    removed_task_ids?: string[];
+    /**
+     * Human-readable reason for the removals listed in `removed_task_ids`.
+     * Must be non-empty when `removed_task_ids` is non-empty. Recorded on
+     * each `task_removed` ledger event for audit.
+     */
+    removal_reason?: string;
+    /**
+     * Required when both `reset_statuses` is true AND at least one task is
+     * missing from the new plan. Without this flag set, save_plan rejects to
+     * prevent a destructive reset from silently dropping unfinished work.
+     */
+    confirm_destructive_reset?: boolean;
     /**
      * Architect-facing concurrency controls for this plan.
      * When execution_profile.locked is true the profile is immutable — subsequent

package/dist/tools/swarm-command.d.ts

@@ -0,0 +1,3 @@
+import type { AgentDefinition } from '../agents/index.js';
+import { createSwarmTool } from './create-tool.js';
+export declare function createSwarmCommandTool(agents: Record<string, AgentDefinition>): ReturnType<typeof createSwarmTool>;

package/dist/tools/tool-names.d.ts

@@ -3,7 +3,7 @@
  * Used for constants and agent setup references.
  */
 /** Union type of all valid tool names */
-export type ToolName = 'diff' | 'diff_summary' | 'syntax_check' | 'placeholder_scan' | 'imports' | 'lint' | 'secretscan' | 'sast_scan' | 'build_check' | 'pre_check_batch' | 'quality_budget' | 'symbols' | 'complexity_hotspots' | 'schema_drift' | 'todo_extract' | 'evidence_check' | 'check_gate_status' | 'completion_verify' | 'submit_council_verdicts' | 'submit_phase_council_verdicts' | 'declare_council_criteria' | 'sbom_generate' | 'checkpoint' | 'pkg_audit' | 'test_runner' | 'test_impact' | 'mutation_test' | 'generate_mutants' | 'detect_domains' | 'gitingest' | 'retrieve_summary' | 'extract_code_blocks' | 'phase_complete' | 'save_plan' | 'update_task_status' | 'lint_spec' | 'write_retro' | 'write_drift_evidence' | 'write_hallucination_evidence' | 'write_mutation_evidence' | 'declare_scope' | 'knowledge_query' | 'doc_scan' | 'doc_extract' | 'curator_analyze' | 'knowledge_add' | 'knowledge_recall' | 'knowledge_remove' | 'co_change_analyzer' | 'search' | 'batch_symbols' | 'suggest_patch' | 'req_coverage' | 'get_approved_plan' | 'repo_map' | 'get_qa_gate_profile' | 'set_qa_gates' | 'web_search' | 'convene_general_council' | 'write_final_council_evidence' | 'skill_generate' | 'skill_list' | 'skill_apply' | 'skill_inspect' | 'skill_improve' | 'spec_write' | 'knowledge_ack' | 'lean_turbo_plan_lanes' | 'lean_turbo_acquire_locks' | 'lean_turbo_runner_status' | 'lean_turbo_review' | 'lean_turbo_run_phase' | 'lean_turbo_status';
+export type ToolName = 'diff' | 'diff_summary' | 'syntax_check' | 'placeholder_scan' | 'imports' | 'lint' | 'secretscan' | 'sast_scan' | 'build_check' | 'pre_check_batch' | 'quality_budget' | 'symbols' | 'complexity_hotspots' | 'schema_drift' | 'todo_extract' | 'evidence_check' | 'check_gate_status' | 'completion_verify' | 'submit_council_verdicts' | 'submit_phase_council_verdicts' | 'declare_council_criteria' | 'sbom_generate' | 'checkpoint' | 'pkg_audit' | 'test_runner' | 'test_impact' | 'mutation_test' | 'generate_mutants' | 'detect_domains' | 'gitingest' | 'retrieve_summary' | 'extract_code_blocks' | 'phase_complete' | 'save_plan' | 'update_task_status' | 'lint_spec' | 'write_retro' | 'write_drift_evidence' | 'write_hallucination_evidence' | 'write_mutation_evidence' | 'declare_scope' | 'knowledge_query' | 'doc_scan' | 'doc_extract' | 'curator_analyze' | 'knowledge_add' | 'knowledge_recall' | 'knowledge_remove' | 'co_change_analyzer' | 'search' | 'batch_symbols' | 'suggest_patch' | 'req_coverage' | 'get_approved_plan' | 'repo_map' | 'get_qa_gate_profile' | 'set_qa_gates' | 'web_search' | 'convene_general_council' | 'write_final_council_evidence' | 'skill_generate' | 'skill_list' | 'skill_apply' | 'skill_inspect' | 'skill_improve' | 'spec_write' | 'knowledge_ack' | 'swarm_command' | 'lean_turbo_plan_lanes' | 'lean_turbo_acquire_locks' | 'lean_turbo_runner_status' | 'lean_turbo_review' | 'lean_turbo_run_phase' | 'lean_turbo_status';
 /** Readonly array of all tool names */
 export declare const TOOL_NAMES: readonly ToolName[];
 /** Set for O(1) tool name validation */

package/dist/tools/update-task-status.d.ts

@@ -57,7 +57,7 @@ export declare function checkReviewerGate(taskId: string, workingDirectory?: str
 /**
  * Wrapper around checkReviewerGate that appends a diff-scope advisory warning.
  * Keeps checkReviewerGate synchronous for backward compatibility.
- * Stage B parallel is resolved from standard parallelization config.
+ * Stage B parallel is hardcoded (not config-driven).
  * @param taskId - The task ID to check gate state for
  * @param workingDirectory - Optional working directory for plan.json fallback
  * @param sessionID - Optional session ID to scope Lean Turbo bypass to the current tool-execution context

package/dist/tools/write-final-council-evidence.d.ts

@@ -7,12 +7,7 @@
  */
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
 import { z } from 'zod';
-import { loadPluginConfig } from '../config/loader';
-import { synthesizeFinalCouncilAdvisory } from '../council/council-service';
 import type { CouncilMemberVerdict } from '../council/types';
-import { validateSwarmPath } from '../hooks/utils';
-import { loadPlan } from '../plan/manager.js';
-import { derivePlanId } from '../plan/utils.js';
 export declare const ArgsSchema: z.ZodObject<{
     phase: z.ZodNumber;
     projectSummary: z.ZodString;
@@ -60,13 +55,6 @@ export interface WriteFinalCouncilEvidenceArgs {
     /** Collected verdicts from critic, reviewer, sme, test_engineer, explorer */
     verdicts: CouncilMemberVerdict[];
 }
-export declare const _internals: {
-    loadPluginConfig: typeof loadPluginConfig;
-    synthesizeFinalCouncilAdvisory: typeof synthesizeFinalCouncilAdvisory;
-    loadPlan: typeof loadPlan;
-    derivePlanId: typeof derivePlanId;
-    validateSwarmPath: typeof validateSwarmPath;
-};
 /**
  * Execute the write_final_council_evidence tool.
  * Validates input, synthesizes project-scoped council evidence, and writes it.

package/dist/types/events.d.ts

@@ -90,6 +90,26 @@ export interface SpecDriftAcknowledgedEvent {
     previousHash: string;
     newHash: string | null;
 }
+/**
+ * Emitted whenever savePlan removes one or more tasks from the prior plan
+ * (issue #853). Functional during replayFromLedger (post-merge fix) — the
+ * ledger commit precedes the plan.json rename, so rebuild must drop the
+ * task to maintain crash consistency. The `source` identifies the caller
+ * (e.g. 'save_plan_tool', 'phase_complete_rebuild_from_ledger'); the
+ * removal reason rides on the `payload` envelope to match LedgerEvent.
+ */
+export interface TaskRemovedEvent {
+    type: 'task_removed';
+    timestamp: string;
+    task_id: string;
+    phase_id: number;
+    from_status: string;
+    source: string;
+    payload?: {
+        reason?: string;
+        source?: string;
+    };
+}
 export interface PrmPatternDetectedEvent {
     type: 'prm_pattern_detected';
     timestamp: string;
@@ -122,4 +142,4 @@ export interface PrmHardStopEvent {
     level: number;
     occurrenceCount: number;
 }
-export type V619Event = SoundingBoardConsultedEvent | ArchitectLoopDetectedEvent | PrecedentManipulationDetectedEvent | CoderSelfAuditEvent | CoderRetryCircuitBreakerEvent | AgentConflictDetectedEvent | AuthorityHandoffResolvedEvent | SpecStaleDetectedEvent | SpecDriftAcknowledgedEvent | PrmPatternDetectedEvent | PrmCourseCorrectionInjectedEvent | PrmEscalationTriggeredEvent | PrmHardStopEvent;
+export type V619Event = SoundingBoardConsultedEvent | ArchitectLoopDetectedEvent | PrecedentManipulationDetectedEvent | CoderSelfAuditEvent | CoderRetryCircuitBreakerEvent | AgentConflictDetectedEvent | AuthorityHandoffResolvedEvent | SpecStaleDetectedEvent | SpecDriftAcknowledgedEvent | TaskRemovedEvent | PrmPatternDetectedEvent | PrmCourseCorrectionInjectedEvent | PrmEscalationTriggeredEvent | PrmHardStopEvent;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.18.3",
+	"version": "7.19.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/parallel/runtime-config.d.ts

@@ -1,11 +0,0 @@
-import type { PluginConfig } from '../config';
-export type StandardParallelizationRuntimeConfig = {
-    stageBParallelEnabled: boolean;
-    taskFanoutEnabled: boolean;
-    maxConcurrentTasks: number;
-    maxConcurrentCoders: number;
-    maxConcurrentStageBGroups: number;
-    evidenceLockTimeoutMs: number;
-    source: 'current-default' | 'global-config' | 'locked-profile';
-};
-export declare function resolveStandardParallelizationConfig(config: PluginConfig | undefined, directory: string): StandardParallelizationRuntimeConfig;