opencode-swarm 7.185.0 → 7.186.0

package/dist/git/pr.d.ts

@@ -1,6 +1,7 @@
 import * as child_process from 'node:child_process';
 import { resolveGhExecutable } from '../utils/gh-executable.js';
 import { resolveGitExecutable } from '../utils/git-executable.js';
+import { resolveGlabExecutable } from '../utils/glab-executable.js';
 import { readLaneEnvFileFromDiskSync } from './branch.js';
 export declare const GIT_TIMEOUT_MS = 30000;
 /**
@@ -60,6 +61,21 @@ declare function spawnSyncWithTransientRetry(command: string, args: string[], op
  * stdin: 'ignore', timeout, bounded stdout/stderr, proc.kill() in finally.
  */
 export declare function ghExecAsync(args: string[], cwd: string): Promise<string>;
+/**
+ * Bounded async spawn shared by the gh and glab (GitLab) fetch paths
+ * (issue #2882). Same safety contract as the pre-#2882 ghExecAsync body:
+ * array-form argv, explicit cwd, stdin 'ignore', GIT_TIMEOUT_MS timeout,
+ * MAX_OUTPUT_BYTES per-stream caps, best-effort proc.kill() on settle.
+ *
+ * `label` names the CLI in error messages ('gh' / 'glab') so existing
+ * GitHub-path error text is unchanged. `opts.env` is an overlay merged onto
+ * process.env via mergeEnvForChild ONLY when defined — an absent overlay
+ * leaves the spawn options without an `env` key, preserving the inherit-
+ * process.env behavior the gh path has always had.
+ */
+declare function forgeExecAsyncImpl(binary: string, args: string[], cwd: string, label: string, opts?: {
+    env?: Record<string, string>;
+}): Promise<string>;
 /**
  * Test-only dependency-injection seam — see `gitignore-warning.ts:_internals`.
  * Production code calls `_internals.ghExec(...)` so tests can replace the
@@ -68,12 +84,16 @@ export declare function ghExecAsync(args: string[], cwd: string): Promise<string
 export declare const _internals: {
     ghExec: typeof ghExec;
     ghExecAsync: typeof ghExecAsync;
+    forgeExecAsync: typeof forgeExecAsyncImpl;
+    getMRPollSnapshot: typeof getMRPollSnapshot;
+    getMRComments: typeof getMRComments;
     spawnSyncWithTransientRetry: typeof spawnSyncWithTransientRetry;
     spawnSync: typeof __spawnSyncSeam.spawnSync;
     readLaneEnvFileFromDiskSync: typeof readLaneEnvFileFromDiskSync;
     getMergeGroupRun: typeof getMergeGroupRun;
     resolveGhExecutable: typeof resolveGhExecutable;
     resolveGitExecutable: typeof resolveGitExecutable;
+    resolveGlabExecutable: typeof resolveGlabExecutable;
 };
 /**
  * Check if gh CLI is available
@@ -160,6 +180,59 @@ export declare function getPRPollSnapshot(prNumber: number, repoFullName: string
  * equivalent, so this stays the second spawn of the poll cycle.
  */
 export declare function getPRReviewComments(prNumber: number, repoFullName: string, cwd: string): Promise<PRCommentResult[]>;
+/**
+ * Honest-unavailable marker for the three GitHub-synthesized fields
+ * (statusCheckRollup / reviewDecision / mergeStateStatus). `getProviderCapabilities`
+ * is the source of truth: GitLab reports all three unavailable, so the glab-backed
+ * snapshot carries explicit markers instead of fabricated equivalents (#2733 AC7).
+ */
+export declare const MR_SYNTHESIZED_FIELD_MARKER = "NOT_AVAILABLE";
+/** Input for glab-backed MR fetches. `host` is the resolved forge host. */
+export interface MRFetchInput {
+    /** Full project path (may be multi-segment: group/subgroup/repo). */
+    projectPath: string;
+    /** Merge request iid (the subscription's prNumber). */
+    iid: number;
+    cwd: string;
+    /** Forge host; when present and not gitlab.com, spawns get GITLAB_HOST. */
+    host?: string;
+}
+/** Check-shaped entry derived from a real GitLab pipeline (NOT a statusCheckRollup member). */
+export interface MRPipelineCheck {
+    name: string;
+    status: string;
+    conclusion: string | null;
+    detailsUrl?: string;
+}
+/** glab-backed MR snapshot: PRPollSnapshot-compatible core plus a pipelines channel. */
+export interface MRPollSnapshot {
+    status: PRStatusResult;
+    comments: PRCommentResult[];
+    merge: MergeStateResult;
+    review: ReviewStateResult;
+    /** Terminal pipeline verdicts for the MR head sha (empty when none terminal yet). */
+    pipelines: MRPipelineCheck[];
+    /** False when the pipelines fetch failed — caller preserves prior CI state. */
+    pipelinesFetchSucceeded: boolean;
+}
+/**
+ * glab-backed MR snapshot (issue #2882): three bounded spawns.
+ *  1. `glab mr view <iid> -R <projectPath> -F json` — MR fields.
+ *  2. `glab api projects/<url-encoded-path>/merge_requests/<iid>` — REST
+ *     detail (deprecated-but-present merge_status; the issue prescribes this
+ *     call for merge state). Approvals on this payload are intentionally NOT
+ *     consumed: no existing event vocabulary maps to GitLab approvals without
+ *     fabricating the GitHub-synthesized reviewDecision (#2733 AC7 binding).
+ *  3. `glab api .../merge_requests/<iid>/pipelines?per_page=20` — pipelines
+ *     for the MR, filtered to the head sha, latest by id, terminal-only.
+ */
+export declare function getMRPollSnapshot(input: MRFetchInput): Promise<MRPollSnapshot>;
+/**
+ * glab-backed MR comments (issue #2882): the MR notes endpoint, ascending by
+ * creation time, system notes excluded (automation notes are not user
+ * comments). Bounded single page (per_page=100).
+ */
+export declare function getMRComments(input: MRFetchInput): Promise<PRCommentResult[]>;
 /**
  * Result of fetching a GitHub Actions run for a PR's merge group.
  */

package/dist/hooks/extractors.d.ts

@@ -7,10 +7,17 @@ import { type Plan } from '../config/plan-schema';
  */
 /**
  * Extracts the current phase information from plan content.
+ *
+ * #2841: plan.md is user-writeable content and this one-liner feeds the
+ * `[SWARM CONTEXT] Phase:` architect-context injection, so it MUST pass the
+ * shared sanitizer (input-side, the same pattern as `extractPlanCursor`).
  */
 export declare function extractCurrentPhase(planContent: string): string | null;
 /**
  * Extracts the first incomplete task from the current IN PROGRESS phase.
+ *
+ * #2841: feeds the `[SWARM CONTEXT] Current task:` injection — sanitized
+ * input-side like its siblings.
  */
 export declare function extractCurrentTask(planContent: string): string | null;
 /**
@@ -24,14 +31,28 @@ export declare function extractCurrentTask(planContent: string): string | null;
  *   indented sub-bullets are filtered out here).
  * - Lines are reproduced verbatim from `raw` — bullet prefix, markers
  *   (✅ / [timestamps]) and all — then joined, trimmed and truncated.
+ *
+ * #2886: context.md is agent-written after consuming untrusted task/issue
+ * text and this return feeds the compaction `SWARM DECISIONS` LLM-context
+ * fact, so it MUST pass the shared sanitizer input-side (the same pattern as
+ * `extractCurrentPhase`); the system-enhancer wraps of this output become
+ * idempotent no-ops.
  */
 export declare function extractDecisions(contextContent: string, maxChars?: number): string | null;
 /**
  * Extracts incomplete tasks from plan content under the current IN PROGRESS phase.
+ *
+ * #2841: feeds the `SWARM TASKS` compaction fact (LLM-context injection) —
+ * sanitized input-side like its siblings.
  */
 export declare function extractIncompleteTasks(planContent: string, maxChars?: number): string | null;
 /**
  * Extracts patterns section from context content.
+ *
+ * #2886: context.md is agent-written after consuming untrusted task/issue
+ * text and this return feeds the compaction `SWARM PATTERNS` LLM-context
+ * fact, so it MUST pass the shared sanitizer input-side (the same pattern as
+ * `extractCurrentPhase`).
  */
 export declare function extractPatterns(contextContent: string, maxChars?: number): string | null;
 /**
@@ -44,6 +65,9 @@ export declare function extractPatterns(contextContent: string, maxChars?: numbe
 export declare function extractCurrentPhaseFromPlan(plan: Plan): string | null;
 /**
  * Extracts the first incomplete task from the current phase of a Plan object.
+ *
+ * #2841: task fields feed the `[SWARM CONTEXT] Current task:` injection —
+ * the composed line must pass the shared sanitizer before it is returned.
  */
 export declare function extractCurrentTaskFromPlan(plan: Plan): string | null;
 /**

package/dist/hooks/pr-workflow-gate.d.ts

@@ -15,6 +15,7 @@ import { type PrReviewDimensionCancellationRecord, type PrReviewPartialBaseCover
 import { type CriticOutcome } from '../pr-review/finding-policy.js';
 import { type PrReviewComposablePhase, type PrReviewItemClaim, type PrReviewPhaseComposition, parseCriticVerdict } from '../pr-review/legacy-transcript-adapter.js';
 import { withPrWorkflowCheckoutMutationLock, workflowCheckoutMutationLockRelativePath, workflowGateStateLockRelativePath, workflowGateStateRelativePath } from '../pr-review/persistence.js';
+import { type ForgeContext } from '../providers/forge-provider.js';
 import { classifyLaneLivenessCondition, type EffectivePrLaneHorizon, resolveEffectivePrLaneHorizonMs } from './lane-liveness-watchdog.js';
 export type { PrReviewDimensionCancellationRecord, PrReviewDimensionTerminalState, PrReviewPartialBaseCoverageRecord, PrReviewPartialBaseCoverageRecordV1, PrReviewPartialBaseCoverageRecordV2, PrReviewReportVerdict, PrReviewTerminalCoverageKind, PrReviewTerminalCoverageSettlement, PrReviewUnresolvedDimensionRecord, } from '../pr-review/completion.js';
 export { allowedPrReviewReportVerdicts, normalizePrReviewPartialBaseCoverageRecord, PR_REVIEW_REPORT_VERDICTS, readPrReviewTerminalCoverageForReport, rollbackPrReviewPartialBaseCoverageAdmission, } from '../pr-review/completion.js';
@@ -623,6 +624,7 @@ export declare function activatePrWorkflow(directory: string, sessionID: string,
     prHeadSha?: string;
     requireCheckoutPreflight?: boolean;
     prUrl?: string;
+    forge?: ForgeContext;
 }): Promise<PrWorkflowGateState>;
 /**
  * Issue #2601: append skill-contract advisories detected by the auto-resume