opencode-swarm 7.192.3 → 7.193.0

package/dist/pr-review/finding-policy.d.ts

@@ -12,7 +12,7 @@ export type FindingSeverity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO' |
 export type FindingAction = 'route_to_reviewer' | 'route_to_critic' | 'report' | 'suppress_with_reason' | 'handoff_to_feedback';
 export type FindingStatus = 'UNRESOLVED' | 'CONFIRMED' | 'DISPROVED' | 'NON_ACTIONABLE' | 'PRE_EXISTING';
 export type ConfidenceLabel = 'LOW' | 'MEDIUM' | 'HIGH';
-export type CriticOutcome = 'UPHELD' | 'DOWNGRADED' | 'DISPROVED' | 'NEEDS_MORE_EVIDENCE';
+export type CriticOutcome = 'UPHELD' | 'DOWNGRADED' | 'DISPROVED' | 'NEEDS_MORE_EVIDENCE' | 'CRITIC_UNAVAILABLE';
 export interface ParsedCandidateConfidence {
     label: ConfidenceLabel;
     score: number;

package/dist/pr-review/verdict-settlement.d.ts

@@ -0,0 +1,182 @@
+import { z } from 'zod';
+import { findByBatchIdDetailed } from '../background/pending-delegations.js';
+/**
+ * N-of-M truthful verdict settlement (issue #3101).
+ *
+ * When a reviewer/critic verdict lane is liveness-dead and the bounded retry
+ * budget for its items is exhausted, the settlement may settle truthfully
+ * over the surviving items instead of blocking the whole run — under four
+ * conjunctive, non-negotiable constraints (the issue's validated design):
+ *
+ * 1. terminality evidence only — the trigger is the controller-written typed
+ *    liveness class on the durable delegation record (never lane self-report,
+ *    never mere absence/silence);
+ * 2. silence blocks — an unclaimed item with an EMPTY owner set keeps
+ *    blocking (subset batch declarations and capacity-GC pruning make empty
+ *    owner sets reachable; absence of declarations is not evidence);
+ * 3. downgrade-only — the verdict matrix constrains the report to
+ *    REQUEST_CHANGES/INCOMPLETE via the existing DEGRADED_DISCLOSED channel
+ *    (never APPROVE, never synthesized verdicts);
+ * 4. per-item disclosure — a durable receipt under
+ *    `.swarm/pr-review/<runId>/verdict-settlement.<phase>.json` carries one
+ *    structured (lane, disposition, evidence class) row per settled item. The
+ *    receipt is rename-overwritten on re-admission (last-writer-wins); every
+ *    consumer re-derives truth from the CURRENT file plus its state identity,
+ *    never from a prior read.
+ *
+ * This module deliberately mirrors the discovery-phase dead-family admission
+ * (`write-pr-review-trigger-eval.ts` + `PR_REVIEW_MICRO_FAMILY_RETRY_BUDGET`)
+ * rather than generalizing `bound_fallback`: a verdict artifact is the FIRST
+ * write of its fact, so disclose-and-proceed there would trust silence.
+ */
+/** Sibling of `PR_REVIEW_MICRO_FAMILY_RETRY_BUDGET` (micro discovery families). */
+export declare const PR_REVIEW_VERDICT_RETRY_BUDGET = 2;
+export declare const VERDICT_SETTLEMENT_SCHEMA_VERSION = 1;
+/**
+ * Bounded receipt read: per-item rows are small, but a wide dead set must
+ * still never produce an unbounded blocking read. 64 KiB ≈ hundreds of rows.
+ */
+export declare const VERDICT_SETTLEMENT_MAX_RECEIPT_BYTES = 65536;
+/**
+ * Writer-side item cap mirroring the byte bound above: 128 rows of
+ * pretty-printed receipt stay well under `VERDICT_SETTLEMENT_MAX_RECEIPT_BYTES`
+ * on every encoding, so the writer can never persist a receipt the bounded
+ * reader would refuse (that would wedge the run into a rewrite loop).
+ */
+export declare const VERDICT_SETTLEMENT_MAX_RECEIPT_ITEMS = 128;
+export declare const PrReviewVerdictSettlementPhaseSchema: z.ZodEnum<{
+    reviewer: "reviewer";
+    critic: "critic";
+}>;
+export type PrReviewVerdictSettlementPhase = z.infer<typeof PrReviewVerdictSettlementPhaseSchema>;
+export declare const PrReviewVerdictSettlementItemSchema: z.ZodObject<{
+    itemId: z.ZodString;
+    sourceBatchId: z.ZodString;
+    sourceLaneId: z.ZodString;
+    disposition: z.ZodLiteral<"liveness_dead">;
+    evidenceClass: z.ZodLiteral<"liveness">;
+    terminalStatus: z.ZodEnum<{
+        stale: "stale";
+        error: "error";
+        cancelled: "cancelled";
+    }>;
+}, z.core.$strict>;
+export type PrReviewVerdictSettlementItem = z.infer<typeof PrReviewVerdictSettlementItemSchema>;
+export declare const PrReviewVerdictSettlementReceiptSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    runId: z.ZodString;
+    prHeadSha: z.ZodString;
+    revisionDigest: z.ZodString;
+    phase: z.ZodEnum<{
+        reviewer: "reviewer";
+        critic: "critic";
+    }>;
+    items: z.ZodArray<z.ZodObject<{
+        itemId: z.ZodString;
+        sourceBatchId: z.ZodString;
+        sourceLaneId: z.ZodString;
+        disposition: z.ZodLiteral<"liveness_dead">;
+        evidenceClass: z.ZodLiteral<"liveness">;
+        terminalStatus: z.ZodEnum<{
+            stale: "stale";
+            error: "error";
+            cancelled: "cancelled";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PrReviewVerdictSettlementReceipt = z.infer<typeof PrReviewVerdictSettlementReceiptSchema>;
+/** Phase-qualified receipt path (dual-death runs carry one receipt per phase). */
+export declare function verdictSettlementRelativePath(runId: string, phase: PrReviewVerdictSettlementPhase): string;
+/** Structural slice of `PrReviewValidationBatchRecord` this module consumes. */
+export interface VerdictSettlementWindowBatch {
+    batchId: string;
+    lanes: ReadonlyArray<{
+        laneId: string;
+        workflowLane: string;
+        reviewItemIds?: readonly string[];
+    }>;
+}
+export interface VerdictSettlementAdmission {
+    admitted: boolean;
+    /** Human-readable, non-admitting reason (also embedded in BLOCKED guidance). */
+    reason: string;
+    items: PrReviewVerdictSettlementItem[];
+}
+/**
+ * The admissibility predicate (constraint 1 + 2 + the budget arm).
+ *
+ * The budget arm is PER ITEM: only the distinct window batches whose owner
+ * lanes declare THAT item count toward it (per-item-family counting mirroring
+ * `countFamilyDispatchAttempts` — never a raw phase-level batch count), and
+ * exhaustion requires `1 + budget` such attempts. The settled row's cited
+ * batch is one of its counted attempts by construction, so the cited-batch
+ * conjunction holds for every admitted row. Uncertain delegation-store reads
+ * fail closed (settlement keeps blocking).
+ */
+export declare function deriveVerdictSettlementAdmission(args: {
+    directory: string;
+    prHeadSha: string;
+    phase: PrReviewVerdictSettlementPhase;
+    /** The phase window batches composition scans (`prReviewPhaseWindow`). */
+    window: readonly VerdictSettlementWindowBatch[];
+    unclaimed: readonly string[];
+    /** Session scoping for delegation-store reads (sibling call-site parity). */
+    parentSessionId?: string;
+}): VerdictSettlementAdmission;
+export declare function buildVerdictSettlementReceipt(args: {
+    runId: string;
+    prHeadSha: string;
+    revisionDigest: string;
+    phase: PrReviewVerdictSettlementPhase;
+    items: readonly PrReviewVerdictSettlementItem[];
+}): PrReviewVerdictSettlementReceipt;
+export declare function persistVerdictSettlementReceipt(directory: string, receipt: PrReviewVerdictSettlementReceipt): Promise<void>;
+export type VerdictSettlementReceiptRead = {
+    status: 'ok';
+    receipt: PrReviewVerdictSettlementReceipt;
+    /** sha256 of the exact file bytes, for consumption-time anchor checks. */
+    rawSha256: string;
+} | {
+    status: 'absent';
+} | {
+    status: 'invalid';
+    reason: string;
+};
+export declare function readVerdictSettlementReceipt(directory: string, runId: string, phase: PrReviewVerdictSettlementPhase): VerdictSettlementReceiptRead;
+/**
+ * The single shared effective-set helper every consumer uses (constraint 4 +
+ * receipt re-verification): the EFFECTIVE disclosed set is
+ * `receipt.items ∩ currentUnclaimed`. An item claimed after the receipt was
+ * written drops out; an empty effective set exerts no constraint (no
+ * degradation flag, no exemptions).
+ */
+export declare function effectiveVerdictSettlementItems(receipt: PrReviewVerdictSettlementReceipt | undefined, currentUnclaimed: readonly string[]): PrReviewVerdictSettlementItem[];
+/**
+ * Whether an admitted N-of-M verdict settlement currently downgrades the
+ * verdict matrix (the DEGRADED_DISCLOSED channel): true when either phase's
+ * receipt identity-verifies AND its EFFECTIVE set (receipt ∩ current
+ * unclaimed) is non-empty. An empty effective set exerts no constraint.
+ *
+ * Note the deliberate one-way divergence from the gate's
+ * `settlementCoveringAllUnclaimed` predicate: that one requires FULL cover of
+ * the current unclaimed set before exempting anything, while this one fires
+ * on a non-empty intersection. The divergence is strictly fail-closed —
+ * degradation-on-while-exemptions-off is reachable, exemptions-on-while-
+ * degradation-off is not (full cover implies a non-empty intersection).
+ */
+export declare function verdictSettlementDegradationActive(args: {
+    directory: string;
+    runId: string | undefined;
+    prHeadSha: string | undefined;
+    revisionDigest: string | undefined;
+    reviewerUnclaimed: readonly string[];
+    criticUnclaimed: readonly string[];
+}): boolean;
+/**
+ * Test seam (DI over `mock.module`, repo convention): the delegation lookup is
+ * injectable so admission arms (uncertain store reads) are testable without
+ * corrupting a real store. Restore in `afterEach`.
+ */
+export declare const _internals: {
+    findByBatchIdDetailed: typeof findByBatchIdDetailed;
+};

package/dist/services/context-budget-service.d.ts

@@ -100,9 +100,16 @@ interface PlanCursorConfigShape {
  * @param directory - The swarm workspace directory
  * @param assembledSystemPrompt - The fully assembled system prompt
  * @param config - Budget configuration
+ * @param planCursorSuppressed - #3100/#3161 PRR-003: true when the shared
+ *   injection policy suppressed the plan-cursor channel this turn (e.g. an
+ *   active PR_REVIEW gate for the composing session) — the report then
+ *   counts zero cursor tokens instead of re-deriving content the prompt
+ *   does not contain. Two known residual divergences are NOT yet tracked by
+ *   an issue (see the note in src/hooks/injection-policy.ts): mode-blind
+ *   DISCOVER counting, and Path B ranked-drop counting.
  * @returns Context budget report
  */
-export declare function getContextBudgetReport(directory: string, assembledSystemPrompt: string, config: ContextBudgetConfig, planCursor?: PlanCursorConfigShape): Promise<ContextBudgetReport>;
+export declare function getContextBudgetReport(directory: string, assembledSystemPrompt: string, config: ContextBudgetConfig, planCursor?: PlanCursorConfigShape, planCursorSuppressed?: boolean): Promise<ContextBudgetReport>;
 /**
  * Format budget warning message based on report
  *

package/dist/services/pr-workflow-gh-readiness.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Issue #3099 R2-14 — workflow-scoped `gh` readiness.
+ *
+ * `gh` availability is otherwise only ever resolved lazily: the moment a tool
+ * that needs it runs (`src/tools/gh-evidence.ts` degrades with a typed
+ * `gh-not-found` payload, `src/tools/pr-review-submission.ts` fails its
+ * transport). Nothing checks at PR-workflow ACTIVATION, which is the last point
+ * where an operator can still act — and because the workflow is fail-open, a
+ * lane that cannot reach `gh` produces degraded output that then flows into
+ * reviewer and critic inputs instead of failing loudly.
+ *
+ * The generic missing-binary advisory cannot cover this: its checklist
+ * (`src/services/tool-doctor.ts`) is PATH-presence-only and deliberately
+ * excludes `gh`, whereas `resolveGhBinary` performs a behavioural
+ * `gh version` probe.
+ *
+ * Fail-open by contract: this module returns a string or null and NEVER throws.
+ * A resolver failure yields no advisory rather than blocking activation.
+ */
+/** Prefixed so the entry is self-identifying inside the shared advisory array. */
+export declare const GH_READINESS_ADVISORY_PREFIX = "gh-readiness:";
+export declare const _internals: {
+    resolveGhBinary: () => string | null;
+    emit: (message: string) => void;
+};
+/**
+ * Returns a workflow-scoped readiness advisory when `gh` cannot be resolved,
+ * or null when it can (or when detection itself fails). Never throws.
+ */
+export declare function collectPrWorkflowGhReadinessAdvisory(resolve: (() => string | null) | undefined): string | null;

package/dist/tools/complete-pr-workflow.d.ts

@@ -12,4 +12,17 @@ export declare const _internals: {
     readPrReviewTerminalCoverageForReport: typeof readPrReviewTerminalCoverageForReport;
     readPrReviewFinalFindingPolicyForReport: typeof readPrReviewFinalFindingPolicyForReport;
     settlePresumedStalePrWorkflowLanes: typeof settlePresumedStalePrWorkflowLanes;
+    verdictSettlementSummaryForReportSafe: typeof verdictSettlementSummaryForReportSafe;
 };
+/** Observation-only echo: a read failure degrades to an absent echo (the
+ * sibling observation-only reads above follow the same guard pattern) rather
+ * than failing the completion report itself. */
+declare function verdictSettlementSummaryForReportSafe(directory: string, sessionID: string): Promise<{
+    itemId: string;
+    sourceBatchId: string;
+    sourceLaneId: string;
+    disposition: string;
+    evidenceClass: string;
+    terminalStatus: string;
+}[] | undefined>;
+export {};

package/dist/tools/gh-evidence.d.ts

@@ -28,6 +28,20 @@ export declare function resolveGhBinary(): string | null;
  * `__seedGitExecutableForTests` in `src/utils/git-executable.ts`.
  */
 export declare function __seedGhBinaryForTests(value: string | null): void;
+/**
+ * Actionable guidance emitted when the gh CLI is not on PATH.
+ *
+ * There is DELIBERATELY no hidden REST fallback wired in. Two reasons make a
+ * silent transport swap unsafe: (1) the in-repo web_fetch tool pins a public IP,
+ * blocks loopback, and ignores HTTPS_PROXY, so it cannot be a general REST
+ * client from inside the plugin; (2) field-shape divergence — `gh --json`
+ * returns camelCase keys plus gh-only synthesized fields (statusCheckRollup,
+ * reviewDecision, mergeStateStatus) absent from the snake_case api.github.com
+ * REST payload, so auto-swapping transports would return a differently-shaped
+ * object under the same contract and mislead readers. Instead we hand the caller
+ * the exact REST URL and the gate-allowed degraded read path.
+ */
+export declare function ghNotFoundGuidance(target: 'pr' | 'issue' | 'run', number: number, repo: string | undefined, logFailed: boolean): string;
 export declare const gh_evidence: ToolDefinition;
 export declare const _internals: {
     resolveGhBinaryCandidates: typeof resolveGhBinaryCandidates;

package/dist/tools/write-pr-review-artifact.d.ts

@@ -31,7 +31,7 @@ type FindingsRecord = z.infer<typeof PrReviewFindingSchema>;
 declare function assertCriticSettlements(records: readonly FindingsRecord[], existing: readonly PersistedFinding[], authoritativeCriticVerdicts: ReadonlyMap<string, {
     status: string;
     severity: string;
-}>): CriticSettlementRecord[];
+}>, criticUnavailableIds: ReadonlySet<string>): CriticSettlementRecord[];
 export declare function executeWritePrReviewArtifact(args: unknown, directory: string, context?: {
     sessionID?: string;
 }): Promise<string>;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.192.3",
+	"version": "7.193.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-9g9p90jz.js

@@ -1,82 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-5m64x65w.js";
-import"./index-nd4kkbjw.js";
-import"./index-3bst6f3c.js";
-import"./index-b7nb6c0p.js";
-import"./index-j2vv0h13.js";
-import"./index-0e1nxkte.js";
-import"./index-5gy5dc2n.js";
-import"./index-txdagbh7.js";
-import"./index-4e8xcgkx.js";
-import"./index-rdec0y3z.js";
-import"./index-hmgx2bsy.js";
-import"./index-8z8cj2rz.js";
-import"./index-zdt5m9n2.js";
-import"./index-f6am4ypq.js";
-import"./index-fzqn2kk8.js";
-import"./index-dtet46e6.js";
-import"./index-cjapb4hy.js";
-import"./index-g8jd3h4r.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-b67200rm.js";
-import"./index-31bd6hrm.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-azr0092e.js";
-import"./index-v3bmwmqw.js";
-import"./index-g7vd2azv.js";
-import"./index-83swjsyd.js";
-import"./index-fayfa263.js";
-import"./index-g4fs6z4e.js";
-import"./index-fzcr2s01.js";
-import"./index-4g39c948.js";
-import"./index-6a4t4p4p.js";
-import"./index-m9zzj4ee.js";
-import"./index-eaess7dm.js";
-import"./index-2s7dvzff.js";
-import"./index-yc8v81ab.js";
-import"./index-5dws7eyb.js";
-import"./index-rtry5xyf.js";
-import"./index-bccf3c0h.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-cme96pja.js";
-import"./index-ef0tgsgj.js";
-import"./index-a9m7h5v0.js";
-import"./index-dt4cjxbz.js";
-import"./index-mbn4vn3z.js";
-import"./index-8zj647hc.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-7pmbnjvj.js";
-import"./index-4twjbsfw.js";
-import"./index-5mrvx2vm.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-bgzpw6ge.js";
-import"./index-1n7sf9gz.js";
-import"./index-e8k0v19e.js";
-import"./index-t7hmqgjy.js";
-import"./index-mtqwyjrg.js";
-import"./index-fzpt2djt.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
-import"./index-gx2vp8gx.js";
-import"./index-rhjzq6kw.js";
-import"./index-zxdawwc7.js";
-import"./index-04knttpn.js";
-import"./index-py8wpe81.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-bzfn85kq.js";
-import"./index-9rwhas09.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-784a2m4p.js

@@ -1,83 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-4bpnf2eg.js";
-import"./index-5m64x65w.js";
-import"./index-nd4kkbjw.js";
-import"./index-3bst6f3c.js";
-import"./index-b7nb6c0p.js";
-import"./index-j2vv0h13.js";
-import"./index-0e1nxkte.js";
-import"./index-5gy5dc2n.js";
-import"./index-txdagbh7.js";
-import"./index-4e8xcgkx.js";
-import"./index-rdec0y3z.js";
-import"./index-hmgx2bsy.js";
-import"./index-8z8cj2rz.js";
-import"./index-zdt5m9n2.js";
-import"./index-f6am4ypq.js";
-import"./index-fzqn2kk8.js";
-import"./index-dtet46e6.js";
-import"./index-cjapb4hy.js";
-import"./index-g8jd3h4r.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-b67200rm.js";
-import"./index-31bd6hrm.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-azr0092e.js";
-import"./index-v3bmwmqw.js";
-import"./index-g7vd2azv.js";
-import"./index-83swjsyd.js";
-import"./index-fayfa263.js";
-import"./index-g4fs6z4e.js";
-import"./index-fzcr2s01.js";
-import"./index-4g39c948.js";
-import"./index-6a4t4p4p.js";
-import"./index-m9zzj4ee.js";
-import"./index-eaess7dm.js";
-import"./index-2s7dvzff.js";
-import"./index-yc8v81ab.js";
-import"./index-5dws7eyb.js";
-import"./index-rtry5xyf.js";
-import"./index-bccf3c0h.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-cme96pja.js";
-import"./index-ef0tgsgj.js";
-import"./index-a9m7h5v0.js";
-import"./index-dt4cjxbz.js";
-import"./index-mbn4vn3z.js";
-import"./index-8zj647hc.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-7pmbnjvj.js";
-import"./index-4twjbsfw.js";
-import"./index-5mrvx2vm.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-bgzpw6ge.js";
-import"./index-1n7sf9gz.js";
-import"./index-e8k0v19e.js";
-import"./index-t7hmqgjy.js";
-import"./index-mtqwyjrg.js";
-import"./index-fzpt2djt.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
-import"./index-gx2vp8gx.js";
-import"./index-rhjzq6kw.js";
-import"./index-zxdawwc7.js";
-import"./index-04knttpn.js";
-import"./index-py8wpe81.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-bzfn85kq.js";
-import"./index-9rwhas09.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};