opencode-swarm 7.180.0 → 7.181.0

package/dist/cli/{snapshot-coordination-init-sad6q0a2.js → snapshot-coordination-init-azkzphpy.js}

@@ -8,66 +8,66 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-dnbqmay5.js";
-import"./index-06crt1ej.js";
+} from "./index-m31a2q35.js";
+import"./index-t5gqdkqx.js";
 import"./index-hamqvzqn.js";
-import"./index-jscqefqm.js";
+import"./index-m65tnv4j.js";
 import"./index-nhxykfyy.js";
-import"./index-1hzqyx13.js";
-import"./index-kp654qcw.js";
-import"./index-aspxz5r5.js";
+import"./index-gez80bfr.js";
+import"./index-dn0wqvv2.js";
+import"./index-s0zgz4p1.js";
 import"./index-txdagbh7.js";
-import"./index-bx70zs8d.js";
+import"./index-m7havzy4.js";
 import"./index-6b295cas.js";
-import"./index-5gmn0a3j.js";
-import"./index-ret97f1t.js";
-import"./index-2h0qng38.js";
+import"./index-yet4r7kp.js";
+import"./index-jysjhvpv.js";
+import"./index-886rpw6w.js";
 import"./index-rdec0y3z.js";
-import"./index-93vk5s7v.js";
+import"./index-y30y1rkg.js";
 import"./index-cjapb4hy.js";
 import"./index-zsrtt42s.js";
-import"./index-cxgr6ad5.js";
+import"./index-xq9gsfsc.js";
 import"./index-bdpgfep1.js";
 import"./index-92m05mew.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-b9z9gvx0.js";
-import"./index-caj76d0f.js";
-import"./index-8b1f2t5q.js";
-import"./index-v1sc1gxv.js";
-import"./index-ekgc71m1.js";
+import"./index-06f6h0fv.js";
+import"./index-n7syegpa.js";
+import"./index-ytxgr424.js";
+import"./index-t8hv63wy.js";
+import"./index-gm67qky7.js";
 import"./index-gc6h1fmf.js";
 import"./index-2s7dvzff.js";
-import"./index-5m378633.js";
-import"./index-5yc5n4ae.js";
+import"./index-s5ghg4kg.js";
+import"./index-6gcxgx84.js";
 import"./index-rtry5xyf.js";
-import"./index-dcttq1mn.js";
+import"./index-pc3cw1xm.js";
 import"./index-frcemc0b.js";
 import"./index-0725jpp7.js";
-import"./index-jrfv2am8.js";
-import"./index-x6kjbjya.js";
-import"./index-htrb9ec3.js";
+import"./index-6aj0ej18.js";
+import"./index-ge1w25n8.js";
+import"./index-38cfx8g8.js";
 import"./index-91dhg3wr.js";
 import"./index-vmthakz0.js";
 import"./index-bv4b8tpa.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-jmrsfhwq.js";
-import"./index-pnt98k7z.js";
+import"./index-516j9vsk.js";
+import"./index-r1cnmq4j.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-zvxy0mev.js";
-import"./index-0v1rtanv.js";
-import"./index-qt0793qm.js";
+import"./index-12ewkms0.js";
+import"./index-ea9fk6v0.js";
+import"./index-6mwha20t.js";
 import"./index-1xnse449.js";
 import"./index-c1ggtmpm.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-989v83pb.js";
 import"./index-gx2vp8gx.js";
-import"./index-zptq8mp1.js";
+import"./index-0vvpe98m.js";
 import"./index-zxdawwc7.js";
-import"./index-defq2crz.js";
+import"./index-rqm075jf.js";
 import"./index-w872yykk.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{speckit-checkoff-46g9sqak.js → speckit-checkoff-1cqfakw2.js}

@@ -7,13 +7,13 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-b9z9gvx0.js";
+} from "./index-06f6h0fv.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-989v83pb.js";
-import"./index-zptq8mp1.js";
+import"./index-0vvpe98m.js";
 import"./index-zxdawwc7.js";
-import"./index-defq2crz.js";
+import"./index-rqm075jf.js";
 import"./index-w872yykk.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{telemetry-qxav5cdk.js → telemetry-zhcgfe70.js}

@@ -14,7 +14,7 @@ import {
   startHeartbeatTracking,
   stopHeartbeatTracking,
   telemetry
-} from "./index-qt0793qm.js";
+} from "./index-6mwha20t.js";
 import"./index-1xnse449.js";
 import"./index-c1ggtmpm.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{worktree-collision-ownership-4znkfq1t.js → worktree-collision-ownership-58sab2m6.js}

@@ -13,7 +13,7 @@ import {
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-v1sc1gxv.js";
+} from "./index-t8hv63wy.js";
 import"./index-gc6h1fmf.js";
 import"./index-2s7dvzff.js";
 import"./index-91dhg3wr.js";
@@ -21,13 +21,13 @@ import"./index-vmthakz0.js";
 import"./index-bv4b8tpa.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-jmrsfhwq.js";
-import"./index-pnt98k7z.js";
+import"./index-516j9vsk.js";
+import"./index-r1cnmq4j.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-zvxy0mev.js";
-import"./index-0v1rtanv.js";
-import"./index-qt0793qm.js";
+import"./index-12ewkms0.js";
+import"./index-ea9fk6v0.js";
+import"./index-6mwha20t.js";
 import {
   canonicalRootKeyFresh
 } from "./index-1xnse449.js";

package/dist/cli/{worktree-isolation-mv9ee00v.js → worktree-isolation-9egt1ccv.js}

@@ -21,68 +21,68 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-dnbqmay5.js";
-import"./index-06crt1ej.js";
+} from "./index-m31a2q35.js";
+import"./index-t5gqdkqx.js";
 import"./index-hamqvzqn.js";
-import"./index-jscqefqm.js";
+import"./index-m65tnv4j.js";
 import"./index-nhxykfyy.js";
-import"./index-1hzqyx13.js";
-import"./index-kp654qcw.js";
-import"./index-aspxz5r5.js";
+import"./index-gez80bfr.js";
+import"./index-dn0wqvv2.js";
+import"./index-s0zgz4p1.js";
 import"./index-txdagbh7.js";
-import"./index-bx70zs8d.js";
+import"./index-m7havzy4.js";
 import"./index-6b295cas.js";
-import"./index-5gmn0a3j.js";
-import"./index-ret97f1t.js";
-import"./index-2h0qng38.js";
+import"./index-yet4r7kp.js";
+import"./index-jysjhvpv.js";
+import"./index-886rpw6w.js";
 import"./index-rdec0y3z.js";
-import"./index-93vk5s7v.js";
+import"./index-y30y1rkg.js";
 import"./index-cjapb4hy.js";
 import"./index-zsrtt42s.js";
-import"./index-cxgr6ad5.js";
+import"./index-xq9gsfsc.js";
 import"./index-bdpgfep1.js";
 import"./index-92m05mew.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-b9z9gvx0.js";
-import"./index-caj76d0f.js";
-import"./index-8b1f2t5q.js";
-import"./index-v1sc1gxv.js";
-import"./index-ekgc71m1.js";
+import"./index-06f6h0fv.js";
+import"./index-n7syegpa.js";
+import"./index-ytxgr424.js";
+import"./index-t8hv63wy.js";
+import"./index-gm67qky7.js";
 import"./index-gc6h1fmf.js";
 import"./index-2s7dvzff.js";
-import"./index-5m378633.js";
-import"./index-5yc5n4ae.js";
+import"./index-s5ghg4kg.js";
+import"./index-6gcxgx84.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-dcttq1mn.js";
+} from "./index-pc3cw1xm.js";
 import"./index-frcemc0b.js";
 import"./index-0725jpp7.js";
-import"./index-jrfv2am8.js";
-import"./index-x6kjbjya.js";
-import"./index-htrb9ec3.js";
+import"./index-6aj0ej18.js";
+import"./index-ge1w25n8.js";
+import"./index-38cfx8g8.js";
 import"./index-91dhg3wr.js";
 import"./index-vmthakz0.js";
 import"./index-bv4b8tpa.js";
 import"./index-rdm3px0g.js";
 import"./index-ry16d01s.js";
-import"./index-jmrsfhwq.js";
-import"./index-pnt98k7z.js";
+import"./index-516j9vsk.js";
+import"./index-r1cnmq4j.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-zvxy0mev.js";
-import"./index-0v1rtanv.js";
-import"./index-qt0793qm.js";
+import"./index-12ewkms0.js";
+import"./index-ea9fk6v0.js";
+import"./index-6mwha20t.js";
 import"./index-1xnse449.js";
 import"./index-c1ggtmpm.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
 import"./index-989v83pb.js";
 import"./index-gx2vp8gx.js";
-import"./index-zptq8mp1.js";
+import"./index-0vvpe98m.js";
 import"./index-zxdawwc7.js";
-import"./index-defq2crz.js";
+import"./index-rqm075jf.js";
 import"./index-w872yykk.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/commands/harness-opt.d.ts

@@ -0,0 +1,44 @@
+/**
+ * `/swarm harness-opt` command group (issue #2503 — governed HarnessOpt
+ * capstone).
+ *
+ * Subcommands: plan | run | status | stop | history
+ *
+ * - JSON output on `--json` (convention: skill-opt.ts).
+ * - Disabled by default: `run` requires `config.harness_opt.enabled === true`
+ *   AND an explicit `--confirm`. The `--confirm` refusal is evaluated FIRST
+ *   so it stays observable without any config in the command context.
+ * - `run` and `stop` are human-gated (`toolPolicy: 'human-only'` on the
+ *   registry entries); `plan`/`status`/`history` are read-only/proposal-only.
+ * - Activation and rollback are NOT here: they stay on the existing
+ *   human-only `/swarm approve-write` + harness store path.
+ * - `run` executes the round through the production evaluation substrate
+ *   in a disposable worktree; a `test` split consumes the held-out set
+ *   exactly once (substrate-enforced).
+ */
+import { type HarnessOptConfig } from '../config/schema.js';
+import type { EvaluationModelDispatcher } from '../evaluation/model-dispatcher.js';
+export interface HarnessOptRuntime {
+    config?: HarnessOptConfig;
+    /** Evaluation dispatcher from CommandContext.evaluationModelDispatcher. */
+    dispatcher?: EvaluationModelDispatcher;
+    parentSessionId?: string;
+}
+/** `/swarm harness-opt plan` — freeze the task set and report (dry-run). */
+export declare function handleHarnessOptPlan(directory: string, args: string[], _runtime?: HarnessOptRuntime): Promise<string>;
+/** `/swarm harness-opt run` — execute ONE governed round (human-only). */
+export declare function handleHarnessOptRun(directory: string, args: string[], runtime?: HarnessOptRuntime): Promise<string>;
+/** `/swarm harness-opt status` — loop status + latest lineage summary. */
+export declare function handleHarnessOptStatus(directory: string, args: string[]): Promise<string>;
+/** `/swarm harness-opt stop` — human-only operator stop (or --resume). */
+export declare function handleHarnessOptStop(directory: string, args: string[]): Promise<string>;
+/** `/swarm harness-opt history` — bounded lineage listing. */
+export declare function handleHarnessOptHistory(directory: string, args: string[]): Promise<string>;
+/** `/swarm harness-opt compare` — the separately executable comparative
+ * evaluation work package (issue #2503): three arms on one frozen task
+ * population, an independently validated manifest when supplied, the
+ * independent oracle's verdict on baseline-vs-candidate summaries, and a
+ * pilot-graduation record retaining the observed evidence verbatim.
+ * Human-gated: requires --confirm and an evaluation dispatcher; never
+ * consumes a held-out split and never mutates the harness. */
+export declare function handleHarnessOptCompare(directory: string, args: string[], runtime?: HarnessOptRuntime): Promise<string>;

package/dist/commands/registry.d.ts

@@ -474,6 +474,62 @@ export declare const COMMAND_REGISTRY: {
         readonly category: "utility";
         readonly toolPolicy: "agent";
     };
+    readonly 'harness-opt': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Governed HarnessOpt capstone (issue #2503). Freezes the comparative task set and drives isolated, approved, reversible optimization rounds through the evaluation substrate.";
+        readonly args: "plan|run|status|stop|history [--tasks <json>] [--split train|validation|test] [--seed <s>] [--confirm] [--json] [--reason <text>]";
+        readonly details: "Disabled by default. `run` requires harness_opt.enabled=true AND --confirm, executes one governed round in a disposable worktree (a test split consumes the held-out set exactly once, substrate-enforced), and records durable lineage with task-cost accounting (unknown-not-zero). Activation/rollback stay on /swarm approve-write + the harness store; the controller never mutates the live harness.";
+        readonly category: "utility";
+        readonly toolPolicy: "agent";
+    };
+    readonly 'harness-opt plan': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Freeze the comparative task set and report loop status (dry-run)";
+        readonly subcommandOf: "harness-opt";
+        readonly args: "--tasks <json> [--split train|validation|test] [--seed <s>] [--json]";
+        readonly category: "utility";
+        readonly toolPolicy: "agent";
+    };
+    readonly 'harness-opt run': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Execute ONE governed optimization round in a disposable worktree. Requires harness_opt.enabled=true and --confirm; a test split consumes the held-out set exactly once.";
+        readonly subcommandOf: "harness-opt";
+        readonly args: "--tasks <json> --confirm [--split train|validation|test] [--seed <s>] [--json]";
+        readonly category: "utility";
+        readonly toolPolicy: "human-only";
+    };
+    readonly 'harness-opt status': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Show loop status and the latest round lineage summary";
+        readonly subcommandOf: "harness-opt";
+        readonly args: "[--json]";
+        readonly category: "utility";
+        readonly toolPolicy: "agent";
+    };
+    readonly 'harness-opt stop': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Human-only operator stop: halt governed rounds with a recorded reason";
+        readonly subcommandOf: "harness-opt";
+        readonly args: "[--reason <text>] [--json]";
+        readonly category: "utility";
+        readonly toolPolicy: "human-only";
+    };
+    readonly 'harness-opt compare': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "Separately executable comparative evaluation (issue #2503): baseline, ablation, and simple-agent arms on one frozen task population with an independently validated manifest, the independent oracle verdict, and a retained pilot-graduation record.";
+        readonly subcommandOf: "harness-opt";
+        readonly args: "--tasks <json> --confirm [--manifest <json>] [--seed <s>] [--lower-ci <n>] [--json]";
+        readonly category: "utility";
+        readonly toolPolicy: "human-only";
+    };
+    readonly 'harness-opt history': {
+        readonly handler: (ctx: CommandContext) => Promise<string>;
+        readonly description: "List durable round lineage records (bounded to the last 20)";
+        readonly subcommandOf: "harness-opt";
+        readonly args: "[--json]";
+        readonly category: "utility";
+        readonly toolPolicy: "agent";
+    };
     readonly review: {
         readonly handler: typeof handleReviewCommand;
         readonly description: "Run the independent review model against a selected Git diff";

package/dist/config/schema.d.ts

@@ -1149,6 +1149,17 @@ export declare const HarnessEvolutionConfigSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type HarnessEvolutionConfig = z.infer<typeof HarnessEvolutionConfigSchema>;
 export declare const DEFAULT_HARNESS_EVOLUTION_CONFIG: HarnessEvolutionConfig;
+export declare const HarnessOptConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    max_rounds: z.ZodDefault<z.ZodNumber>;
+    max_transient_retries: z.ZodDefault<z.ZodNumber>;
+    max_wall_clock_ms: z.ZodDefault<z.ZodNumber>;
+    max_spend_usd: z.ZodOptional<z.ZodNumber>;
+    run_ablation_arm: z.ZodDefault<z.ZodBoolean>;
+    run_simple_agent_arm: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export type HarnessOptConfig = z.infer<typeof HarnessOptConfigSchema>;
+export declare const DEFAULT_HARNESS_OPT_CONFIG: HarnessOptConfig;
 export declare const SkillImproverConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -2817,6 +2828,15 @@ export declare const PluginConfigSchema: z.ZodObject<{
         max_replay_records: z.ZodDefault<z.ZodNumber>;
         max_output_bytes: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>>;
+    harness_opt: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        max_rounds: z.ZodDefault<z.ZodNumber>;
+        max_transient_retries: z.ZodDefault<z.ZodNumber>;
+        max_wall_clock_ms: z.ZodDefault<z.ZodNumber>;
+        max_spend_usd: z.ZodOptional<z.ZodNumber>;
+        run_ablation_arm: z.ZodDefault<z.ZodBoolean>;
+        run_simple_agent_arm: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>;
     spec_writer: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         model: z.ZodDefault<z.ZodNullable<z.ZodString>>;

package/dist/council/disagreement-detector.d.ts

@@ -23,7 +23,29 @@
  * forward to Round 2, not full Round 1 context — mirrors the "semantic forget
  * gate" selective-retention insight and keeps prompt sizes bounded.
  */
-import type { GeneralCouncilDisagreement, GeneralCouncilMemberResponse } from './general-council-types.js';
+import type { GeneralCouncilClaim, GeneralCouncilDisagreement, GeneralCouncilMemberResponse } from './general-council-types.js';
+/**
+ * Defensive shape check for one structured claim. Malformed claims are
+ * skipped individually — they must never break the detector or suppress the
+ * fallback passes (issue #2102 contract G safety rule).
+ *
+ * Exported (issue #2578) so the general-council synthesis service applies the
+ * SAME well-formedness filter when deciding which members hold explicit
+ * contrary positions for consensus clustering — one definition, no duplicate
+ * shape-check.
+ */
+export declare function isWellFormedClaim(value: unknown): value is GeneralCouncilClaim;
+/**
+ * Two stances are contrary when they differ, neither is neutral, and at
+ * least one is an explicit contrary position (`oppose` or `alternative`).
+ * `concern` flags risk without taking a side, so support-vs-concern is not
+ * auto-detected here — the marker/heuristic passes still cover it.
+ *
+ * Exported (issue #2578): the synthesis service reuses this canonical
+ * definition to identify a member's explicit contrary stance
+ * (`areContraryStances(stance, 'support')`) instead of duplicating the list.
+ */
+export declare function areContraryStances(a: GeneralCouncilClaim['stance'], b: GeneralCouncilClaim['stance']): boolean;
 /**
  * Detect disagreements across Round 1 member responses.
  *

package/dist/council/general-council-service.d.ts

@@ -9,14 +9,51 @@
  * member confidence rather than counted by headcount. A claim is a consensus
  * point only when its weighted agreement exceeds 0.6 across members.
  *
- * MAINTAIN/CONCEDE/NUANCE protocol (ConfMAD): a Round 2 response with the
- * CONCEDE keyword on a topic resolves the corresponding Round 1 disagreement;
- * MAINTAIN leaves it persisting; NUANCE marks it persisting-with-boundary.
+ * MAINTAIN/CONCEDE/NUANCE protocol (ConfMAD): a Round 2 response resolves a
+ * Round 1 disagreement only when a disputant declares a paragraph-leading
+ * CONCEDE on that topic (the documented stance grammar in
+ * ../agents/council-prompts.ts); MAINTAIN and NUANCE both leave it
+ * persisting (NUANCE carries no distinct synthesis behavior — it is parsed
+ * only so the stance grammar is recognized and recorded). Issue #2578: prose
+ * that merely CONTAINS the word "concede" (e.g. "MAINTAIN — I do not
+ * concede…") is not a concession, and a member detected as holding a
+ * contrary position (typed oppose/alternative claim, or appearing in any
+ * detected disagreement) is disagreement evidence that must never be emitted
+ * as consensus.
  */
 import type { GeneralCouncilDeliberationResponse, GeneralCouncilMemberResponse, GeneralCouncilResult } from './general-council-types.js';
+/** Round 2 stance keywords, exactly as documented in council-prompts.ts. */
+declare const LEADING_STANCE_KEYWORDS: readonly ["MAINTAIN", "CONCEDE", "NUANCE"];
+export type GeneralCouncilLeadingStance = (typeof LEADING_STANCE_KEYWORDS)[number];
+/** One paragraph-leading stance declaration parsed from a Round 2 response. */
+export interface LeadingStanceDeclaration {
+    stance: GeneralCouncilLeadingStance;
+    /** The full text of the paragraph whose first word is the stance keyword. */
+    paragraph: string;
+}
+/**
+ * Parse the documented paragraph-leading stance contract (issue #2578 sole
+ * owner: this module — callers must reuse this parser, not re-implement it).
+ *
+ * A declaration exists only when the FIRST word of a paragraph (blank-line
+ * separated) is exactly one of the uppercase keywords MAINTAIN / CONCEDE /
+ * NUANCE (case-sensitive, as the prompt documents them), standing alone
+ * before whitespace, punctuation, or a markdown decorator. Prose such as
+ * "I do not concede" or "After review I concede…" never leads a paragraph
+ * with the keyword and so yields no declaration — the conservative direction
+ * (no concession).
+ *
+ * Council prompts sanction markdown inside the response string ("Markdown OK
+ * inside the string"), so common paragraph decorators must not hide a
+ * declaration: leading blockquote/heading/list markers are stripped before
+ * the first-word check, emphasis wrapping (bold/italic/code) and hyphen
+ * joins are boundary characters, and zero-width characters are removed.
+ */
+export declare function extractLeadingStanceDeclarations(response: string): LeadingStanceDeclaration[];
 /**
  * Pure synthesis. Given completed member responses, produces the final
  * `GeneralCouncilResult` (without `moderatorOutput` — moderator is invoked
  * by the architect after this returns and populated separately).
  */
 export declare function synthesizeGeneralCouncil(question: string, mode: 'general' | 'spec_review', round1Responses: GeneralCouncilMemberResponse[], round2Responses: GeneralCouncilDeliberationResponse[]): GeneralCouncilResult;
+export {};

package/dist/failures/invocation-failure.d.ts

@@ -58,6 +58,17 @@ export interface ToolFailureClassificationInput {
  */
 export declare function sanitizeFailureEvidenceDisplay(value: string): string;
 declare function isNeutralExitOne(command: string): boolean;
+/**
+ * Provider failure categories in use (enumerated per issue #2673 plan-critic
+ * finding 6, so downstream category-prefix consumers — telemetry filters,
+ * dashboards, circuit thresholds — can discover every leaf):
+ *   provider.cancelled, provider.authentication_configuration,
+ *   provider.quota_billing, provider.rate_limit, provider.unavailable,
+ *   provider.context_window, provider.content_policy,
+ *   provider.request_shape (#2673: deterministic request-shape rejections,
+ *   e.g. a strict single-system provider rejecting a multi-system payload),
+ *   provider.unknown.
+ */
 export declare function classifyProviderFailure(error: unknown, action?: ActionIdentityInput): InvocationFailureRecordV1;
 export declare function isRetryableProviderFailure(record: InvocationFailureRecordV1): boolean;
 export declare function classifyToolInvocationFailure(input: ToolFailureClassificationInput): InvocationFailureRecordV1 | null;

package/dist/harness/store.d.ts

@@ -1,3 +1,4 @@
+import type { HarnessEvolutionConfig } from '../config/schema.js';
 import { type WriteApprovalRequest } from '../security/write-authority.js';
 import { type BlueprintPatchV1, type HarnessBlueprintV1, type PromptArtifactV1 } from './contracts.js';
 import type { HarnessSourceCandidateV1 } from './source-candidate.js';
@@ -93,6 +94,9 @@ export type ActivateHarnessCandidateResult = {
 } | {
     status: 'candidate_not_activatable';
     reason: string;
+} | {
+    status: 'allowlist_revoked';
+    reason: string;
 } | {
     status: 'consumer_mismatch';
     reason: string;
@@ -120,6 +124,9 @@ export type RollbackHarnessVersionResult = {
 } | {
     status: 'version_not_found';
     reason: string;
+} | {
+    status: 'allowlist_revoked';
+    reason: string;
 } | {
     status: 'consumer_mismatch';
     reason: string;
@@ -229,6 +236,7 @@ export declare function activateHarnessCandidate(args: {
     expectedCurrentGeneration: number;
     targetContentHash: string;
     allowedPathDigest: string;
+    config?: HarnessEvolutionConfig;
     maxVersions?: number;
     maxReplayRecords?: number;
     maxInactiveCandidates?: number;
@@ -242,6 +250,7 @@ export declare function rollbackHarnessVersion(args: {
     expectedCurrentGeneration: number;
     targetContentHash: string;
     allowedPathDigest: string;
+    config?: HarnessEvolutionConfig;
     maxVersions?: number;
     maxReplayRecords?: number;
     maxInactiveCandidates?: number;

package/dist/hooks/system-enhancer.d.ts

@@ -10,8 +10,10 @@ import type { RuntimePlan } from '../config/plan-schema';
 /**
  * Build the [spec-drift] advisory injected into the model's system prompt
  * after every loadPlan whenever spec staleness is detected (issue #853
- * Layer A). The text is appended to `output.system` and survives the
- * single-system-message collapse at `experimental.chat.system.transform`.
+ * Layer A). The text is appended to `output.system`; when the system render
+ * boundary (issue #2673) resolves `strict-single-system` for this request's
+ * model, the joined single entry retains the `[spec-drift]` block
+ * byte-verbatim (pinned by the boundary's acceptance checks).
  *
  * The "Do NOT proceed" line enumerates every tool in SPEC_DRIFT_BLOCKED_TOOLS
  * so the architect knows exactly which calls will return SPEC_DRIFT_BLOCK

package/dist/hooks/system-render-boundary.d.ts

@@ -0,0 +1,68 @@
+/**
+ * System render boundary (issue #2673).
+ *
+ * The final request boundary for the SYSTEM surface. The pinned host
+ * (@opencode-ai 1.18.3 — anomalyco/opencode@v1.18.3,
+ * packages/opencode/src/session/llm/request.ts, LLMRequestPrep.prepare)
+ * triggers `experimental.chat.system.transform` with `{ sessionID?, model }`
+ * and the SHARED `system` array, then coalesces only when
+ * `system.length > 2 && system[0] === header`, and materializes EVERY
+ * surviving entry as a separate `{role:'system'}` message ahead of the
+ * conversation. With plugin guidance entries present, every non-OAuth
+ * provider therefore receives exactly two system messages.
+ *
+ * Strict single-system providers (Qwen3.6/Gemma class — the documented
+ * v6.85.1 incident: "require exactly one `{role:'system'}` message at
+ * index 0") crash or silently degrade on that shape. An UNCONDITIONAL
+ * collapse is wrong (issue #1619): the host marks prompt-cache breakpoints
+ * on the first two system messages, so folding the stable base prompt
+ * together with per-request injections would move the breakpoint behind
+ * varying content and defeat caching for cache-capable providers.
+ *
+ * This module resolves the per-request rendering capability from the model
+ * the host hands the boundary and collapses ONLY for strict single-system
+ * models, IN PLACE (`length = 0` + `push` — the #1619 discipline: the host
+ * discards hook return values and reads its own array). Everything else is
+ * left byte-identical.
+ *
+ * Known limitation (plan-critic round 1, finding 1): host request paths that
+ * bypass `output.system` — OpenAI OAuth and workflow models consume the
+ * system surface via `options.instructions` — cannot be shaped by any plugin
+ * hook and are out of scope.
+ */
+/** Rendering classes the boundary distinguishes. */
+export type SystemRenderCapability = 'strict-single-system' | 'multi-system';
+/** Bounded, observable result of one boundary application. */
+export interface SystemRenderBoundaryResult {
+    capability: SystemRenderCapability;
+    entriesBefore: number;
+    entriesAfter: number;
+    collapsed: boolean;
+}
+/**
+ * Resolve the rendering capability for one request's model. Fail-open:
+ * anything unreadable or unknown resolves to `multi-system`, which leaves the
+ * array byte-identical (the pre-#2673 behavior), so the boundary can never
+ * regress a provider it does not positively know to be strict.
+ */
+export declare function resolveSystemRenderCapability(model: unknown): SystemRenderCapability;
+/**
+ * Apply the boundary to one request's system array, in place.
+ *
+ * Strict single-system models with more than one entry: empty-string entries
+ * are dropped, the rest are joined with a blank line (base prompt first —
+ * every producer appends after the host's pre-joined header), and the array is
+ * collapsed to exactly ONE entry via `length = 0` + `push`. Multi-system
+ * models: no mutation at all. Length ≤ 1: no-op. Never fabricates or reorders
+ * non-empty content.
+ */
+export declare function applySystemRenderBoundary(model: unknown, system: string[]): SystemRenderBoundaryResult;
+/**
+ * Hook factory for the `experimental.chat.system.transform` chain. Registered
+ * LAST (after every producer, including the role filter) so the shape is
+ * finalized once, after all pushes and prunes. Fail-open: any throw leaves the
+ * array untouched and logs non-fatally.
+ */
+export declare function createSystemRenderBoundaryHook(): {
+    'experimental.chat.system.transform': (input: unknown, output: unknown) => Promise<void>;
+};