opencode-swarm 7.188.3 → 7.188.5

package/dist/context-map/post-agent-update.d.ts

@@ -19,6 +19,48 @@ import * as fs from 'node:fs';
 import type { ContextMap, DecisionEntry } from '../types/context-map';
 import { extractFileSummary } from './file-summary';
 import { appendDecision, appendTaskHistory, createEmptyContextMap, loadContextMap, saveContextMap } from './persistence';
+/**
+ * A decision extracted from `.swarm/context.md`'s `## Decisions` section,
+ * ready to be persisted as a `DecisionEntry` by `updateContextMapAfterAgent`.
+ */
+export interface PostAgentDecision {
+    /** The decision text (bullet text before the first `: ` separator) */
+    decision: string;
+    /** Rationale text (after the first `: ` separator; empty when absent) */
+    rationale: string;
+    /** Phase number when the bullet carried or inherited one, else absent */
+    phase?: number;
+}
+/**
+ * Options for {@link extractContextDecisionsFromContextMd}.
+ */
+export interface ExtractContextDecisionsOptions {
+    /**
+     * Session agent role used to gate the sync. `.swarm/context.md` is
+     * architect-maintained (subagents are forbidden from writing it), so when
+     * a role is supplied and is not an architect role — bare `'architect'`
+     * (`ORCHESTRATOR_NAME`) or a multi-swarm prefixed form ending in
+     * `'_architect'` — the sync returns no decisions without reading the file.
+     * Omit to extract regardless of role.
+     */
+    agent_role?: string;
+}
+/**
+ * Maximum number of context.md decisions one sync records. The architect
+ * appends newest decisions at the bottom of the file, so the window keeps the
+ * MOST RECENT entries; older entries beyond the window are never
+ * retroactively recorded.
+ */
+export declare const MAX_CONTEXT_MD_DECISIONS = 50;
+/**
+ * Character bound for the context.md content handed to the shared extractor
+ * (PR #3023 feedback FB-005). The shared extractor's own cap slices a PREFIX
+ * (oldest-first), which would invert the most-recent window for pathological
+ * file sizes and silently drop a `## Decisions` heading lying beyond the
+ * slice; this module slices from the TAIL instead so the most recent content
+ * is what gets scanned.
+ */
+export declare const MAX_CONTEXT_MD_CONTENT_CHARS = 1000000;
 /**
  * Parameters for updating the Context Map after an agent completes a task.
  * Captures all relevant context from the agent's work session so that
@@ -45,6 +87,7 @@ export interface PostAgentUpdateParams {
     decisions?: Array<{
         decision: string;
         rationale: string;
+        phase?: number;
     }>;
     /** Project root directory */
     directory: string;
@@ -64,6 +107,37 @@ export interface PostAgentUpdateParams {
  * rather than crashing allocation.
  */
 export declare function allocateDecisionId(decisions: readonly DecisionEntry[]): string;
+/**
+ * Extract decisions from `.swarm/context.md`'s `## Decisions` section.
+ *
+ * The context file is the repo's decisions-recording convention (architect
+ * prompt `src/agents/architect.ts`; shared `## Decisions` grammar parsed by
+ * `extractContextDecisions`, the #2493 consolidation). Each bullet
+ * `- <decision>: <rationale>` becomes a {@link PostAgentDecision}: the text
+ * before the FIRST `: ` is the decision, the remainder the rationale (a
+ * rationale may itself contain colons; a bullet without a separator yields an
+ * empty rationale). Bullets whose decision text is empty after the
+ * extractor's marker stripping are dropped.
+ *
+ * Bounded: keeps the most recent {@link MAX_CONTEXT_MD_DECISIONS} entries —
+ * entries beyond that window are never retroactively recorded.
+ *
+ * When `options.agent_role` is supplied and is not an architect role, returns
+ * `[]` without touching the filesystem (the file is architect-maintained;
+ * subagent-only sessions do not adopt its decisions).
+ *
+ * Never throws — a missing or unreadable file yields `[]`.
+ */
+export declare function extractContextDecisionsFromContextMd(directory: string, options?: ExtractContextDecisionsOptions): PostAgentDecision[];
+/**
+ * Upper bound for the PERSISTED decisions log in `.swarm/context-map.json`
+ * (PR #3023 feedback FB-002). The log is append-only within this window:
+ * after each update the most recent entries are kept and older ones are
+ * trimmed at save time, so reworded decision variants cannot grow the file
+ * without bound. The capsule read surface is additionally capped by
+ * `MAX_CAPSULE_DECISIONS` in the capsule builder.
+ */
+export declare const MAX_PERSISTED_DECISIONS = 200;
 /**
  * Test-only dependency-injection seam. Production code calls through this
  * object so tests can replace the underlying implementations without

package/dist/full-auto/evidence-names.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Single source of truth for the Full-Auto oversight evidence filename
+ * grammar (issue #3011).
+ *
+ * `.swarm/evidence/{phase}/full-auto-{seq}.json` is BOTH written by
+ * `writeFullAutoOversightEvidence` (`src/full-auto/oversight.ts`) and scanned
+ * by `nextFullAutoOversightSequence` (`src/full-auto/state.ts`) when the
+ * durable counter catches up to persisted evidence. Defining the grammar once
+ * here — instead of an inline template in the writer and a separate regex in
+ * the scanner — makes writer/scanner drift impossible.
+ *
+ * Leaf module: imports nothing at all (pure string/regex builders), so both
+ * `oversight.ts` and `state.ts` can share it without an import cycle.
+ */
+/**
+ * Filename for one oversight evidence record: `full-auto-{seq}.json`.
+ */
+export declare function fullAutoOversightEvidenceFileName(sequence: number): string;
+/**
+ * Matches (and captures the sequence digits of) an oversight evidence
+ * filename. Anchored to the full basename so `full-auto-1.json.bak`-style
+ * neighbors and unrelated files are ignored.
+ */
+export declare const FULL_AUTO_OVERSIGHT_EVIDENCE_FILE_RE: RegExp;

package/dist/full-auto/oversight.d.ts

@@ -96,7 +96,6 @@ export declare function dispatchFullAutoOversight(input: DispatchFullAutoOversig
  * Test-only DI seam.
  */
 export declare const _internals: {
-    resetSequence: () => void;
     now: () => number;
     sleep: typeof sleep;
     setTimer: typeof setTimeout;

package/dist/full-auto/state.d.ts

@@ -183,8 +183,42 @@ export declare function resetFullAutoDenials(directory: string, sessionID: strin
  * Atomically increment and return the durable oversight-evidence sequence
  * counter. Used by `writeFullAutoOversightEvidence` to produce stable,
  * non-colliding evidence filenames across process restarts. (C4 fix.)
+ *
+ * #3011: before allocating, the counter is caught up to the highest sequence
+ * observable in persisted evidence filenames
+ * (`.swarm/evidence/<numeric-phase>/full-auto-N.json`), so a directory
+ * written by an older process that stamped sequences without advancing the
+ * durable counter (the pre-#3011 reactive mirror) can never have an evidence
+ * file reissued over it. The scan runs inside the same `withStateLock` as the
+ * read-modify-write, so concurrent allocations stay serialized.
+ *
+ * #3024 feedback hardening:
+ * - The walk descends ONLY into numeric phase directories — the evidence
+ *   tree also holds one directory per task id (plus gate-audit/ and sbom/)
+ *   that the oversight writer never uses, so skipping non-numeric names
+ *   keeps the locked walk bounded by plan phase count instead of the full
+ *   evidence-tree size (PR #3024 review F3: measured ~1 ms/dir under lock).
+ * - Both the persisted counter and every scanned filename value are treated
+ *   as valid only when they are non-negative safe integers (F2): a corrupt
+ *   persisted value is ignored (forcing the scan to re-derive from disk),
+ *   unsafe filename values are skipped, and an allocation would exceed
+ *   `Number.MAX_SAFE_INTEGER` fails closed rather than silently sticking.
+ * - A missing evidence directory scans as 0; a non-directory at the evidence
+ *   path also scans as 0 (no readable evidence records exist behind it — the
+ *   evidence writer's own `mkdirSync` fails closed downstream); an unexpected
+ *   scan failure throws a stable typed error (raw fs detail goes to the debug
+ *   log only, matching the `makeLockError` convention in this module).
  */
 export declare function nextFullAutoOversightSequence(directory: string): number;
+/**
+ * Highest oversight sequence encoded in a persisted evidence filename under
+ * `.swarm/evidence/<numeric-phase>/`, or 0 when none exist. Filename grammar
+ * comes from `evidence-names.ts` (the same module the evidence writer builds
+ * names with), so writer and scanner cannot drift. Runs under the caller's
+ * state lock. Exposed on `_internals` for direct unit testing and for
+ * failure-injection tests of the allocator's fail-closed path.
+ */
+declare function maxPersistedOversightEvidenceSequence(directory: string): number;
 export declare function recordFullAutoOversight(directory: string, sessionID: string, verdict: string, reason: string): FullAutoRunState | undefined;
 /**
  * Issue #1781 E2: persist the most recent oversight-escalation detail
@@ -220,5 +254,6 @@ export declare const _internals: {
     readPersisted: typeof readPersistedForMutation;
     writePersisted: typeof writePersisted;
     lockfile: StateLockFile;
+    scanOversightEvidenceSequence: typeof maxPersistedOversightEvidenceSequence;
 };
 export {};