opencode-swarm 7.192.4 → 7.194.0

package/dist/pr-review/finding-policy.d.ts

@@ -12,7 +12,7 @@ export type FindingSeverity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO' |
 export type FindingAction = 'route_to_reviewer' | 'route_to_critic' | 'report' | 'suppress_with_reason' | 'handoff_to_feedback';
 export type FindingStatus = 'UNRESOLVED' | 'CONFIRMED' | 'DISPROVED' | 'NON_ACTIONABLE' | 'PRE_EXISTING';
 export type ConfidenceLabel = 'LOW' | 'MEDIUM' | 'HIGH';
-export type CriticOutcome = 'UPHELD' | 'DOWNGRADED' | 'DISPROVED' | 'NEEDS_MORE_EVIDENCE';
+export type CriticOutcome = 'UPHELD' | 'DOWNGRADED' | 'DISPROVED' | 'NEEDS_MORE_EVIDENCE' | 'CRITIC_UNAVAILABLE';
 export interface ParsedCandidateConfidence {
     label: ConfidenceLabel;
     score: number;

package/dist/pr-review/verdict-settlement.d.ts

@@ -0,0 +1,182 @@
+import { z } from 'zod';
+import { findByBatchIdDetailed } from '../background/pending-delegations.js';
+/**
+ * N-of-M truthful verdict settlement (issue #3101).
+ *
+ * When a reviewer/critic verdict lane is liveness-dead and the bounded retry
+ * budget for its items is exhausted, the settlement may settle truthfully
+ * over the surviving items instead of blocking the whole run — under four
+ * conjunctive, non-negotiable constraints (the issue's validated design):
+ *
+ * 1. terminality evidence only — the trigger is the controller-written typed
+ *    liveness class on the durable delegation record (never lane self-report,
+ *    never mere absence/silence);
+ * 2. silence blocks — an unclaimed item with an EMPTY owner set keeps
+ *    blocking (subset batch declarations and capacity-GC pruning make empty
+ *    owner sets reachable; absence of declarations is not evidence);
+ * 3. downgrade-only — the verdict matrix constrains the report to
+ *    REQUEST_CHANGES/INCOMPLETE via the existing DEGRADED_DISCLOSED channel
+ *    (never APPROVE, never synthesized verdicts);
+ * 4. per-item disclosure — a durable receipt under
+ *    `.swarm/pr-review/<runId>/verdict-settlement.<phase>.json` carries one
+ *    structured (lane, disposition, evidence class) row per settled item. The
+ *    receipt is rename-overwritten on re-admission (last-writer-wins); every
+ *    consumer re-derives truth from the CURRENT file plus its state identity,
+ *    never from a prior read.
+ *
+ * This module deliberately mirrors the discovery-phase dead-family admission
+ * (`write-pr-review-trigger-eval.ts` + `PR_REVIEW_MICRO_FAMILY_RETRY_BUDGET`)
+ * rather than generalizing `bound_fallback`: a verdict artifact is the FIRST
+ * write of its fact, so disclose-and-proceed there would trust silence.
+ */
+/** Sibling of `PR_REVIEW_MICRO_FAMILY_RETRY_BUDGET` (micro discovery families). */
+export declare const PR_REVIEW_VERDICT_RETRY_BUDGET = 2;
+export declare const VERDICT_SETTLEMENT_SCHEMA_VERSION = 1;
+/**
+ * Bounded receipt read: per-item rows are small, but a wide dead set must
+ * still never produce an unbounded blocking read. 64 KiB ≈ hundreds of rows.
+ */
+export declare const VERDICT_SETTLEMENT_MAX_RECEIPT_BYTES = 65536;
+/**
+ * Writer-side item cap mirroring the byte bound above: 128 rows of
+ * pretty-printed receipt stay well under `VERDICT_SETTLEMENT_MAX_RECEIPT_BYTES`
+ * on every encoding, so the writer can never persist a receipt the bounded
+ * reader would refuse (that would wedge the run into a rewrite loop).
+ */
+export declare const VERDICT_SETTLEMENT_MAX_RECEIPT_ITEMS = 128;
+export declare const PrReviewVerdictSettlementPhaseSchema: z.ZodEnum<{
+    reviewer: "reviewer";
+    critic: "critic";
+}>;
+export type PrReviewVerdictSettlementPhase = z.infer<typeof PrReviewVerdictSettlementPhaseSchema>;
+export declare const PrReviewVerdictSettlementItemSchema: z.ZodObject<{
+    itemId: z.ZodString;
+    sourceBatchId: z.ZodString;
+    sourceLaneId: z.ZodString;
+    disposition: z.ZodLiteral<"liveness_dead">;
+    evidenceClass: z.ZodLiteral<"liveness">;
+    terminalStatus: z.ZodEnum<{
+        stale: "stale";
+        error: "error";
+        cancelled: "cancelled";
+    }>;
+}, z.core.$strict>;
+export type PrReviewVerdictSettlementItem = z.infer<typeof PrReviewVerdictSettlementItemSchema>;
+export declare const PrReviewVerdictSettlementReceiptSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    runId: z.ZodString;
+    prHeadSha: z.ZodString;
+    revisionDigest: z.ZodString;
+    phase: z.ZodEnum<{
+        reviewer: "reviewer";
+        critic: "critic";
+    }>;
+    items: z.ZodArray<z.ZodObject<{
+        itemId: z.ZodString;
+        sourceBatchId: z.ZodString;
+        sourceLaneId: z.ZodString;
+        disposition: z.ZodLiteral<"liveness_dead">;
+        evidenceClass: z.ZodLiteral<"liveness">;
+        terminalStatus: z.ZodEnum<{
+            stale: "stale";
+            error: "error";
+            cancelled: "cancelled";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PrReviewVerdictSettlementReceipt = z.infer<typeof PrReviewVerdictSettlementReceiptSchema>;
+/** Phase-qualified receipt path (dual-death runs carry one receipt per phase). */
+export declare function verdictSettlementRelativePath(runId: string, phase: PrReviewVerdictSettlementPhase): string;
+/** Structural slice of `PrReviewValidationBatchRecord` this module consumes. */
+export interface VerdictSettlementWindowBatch {
+    batchId: string;
+    lanes: ReadonlyArray<{
+        laneId: string;
+        workflowLane: string;
+        reviewItemIds?: readonly string[];
+    }>;
+}
+export interface VerdictSettlementAdmission {
+    admitted: boolean;
+    /** Human-readable, non-admitting reason (also embedded in BLOCKED guidance). */
+    reason: string;
+    items: PrReviewVerdictSettlementItem[];
+}
+/**
+ * The admissibility predicate (constraint 1 + 2 + the budget arm).
+ *
+ * The budget arm is PER ITEM: only the distinct window batches whose owner
+ * lanes declare THAT item count toward it (per-item-family counting mirroring
+ * `countFamilyDispatchAttempts` — never a raw phase-level batch count), and
+ * exhaustion requires `1 + budget` such attempts. The settled row's cited
+ * batch is one of its counted attempts by construction, so the cited-batch
+ * conjunction holds for every admitted row. Uncertain delegation-store reads
+ * fail closed (settlement keeps blocking).
+ */
+export declare function deriveVerdictSettlementAdmission(args: {
+    directory: string;
+    prHeadSha: string;
+    phase: PrReviewVerdictSettlementPhase;
+    /** The phase window batches composition scans (`prReviewPhaseWindow`). */
+    window: readonly VerdictSettlementWindowBatch[];
+    unclaimed: readonly string[];
+    /** Session scoping for delegation-store reads (sibling call-site parity). */
+    parentSessionId?: string;
+}): VerdictSettlementAdmission;
+export declare function buildVerdictSettlementReceipt(args: {
+    runId: string;
+    prHeadSha: string;
+    revisionDigest: string;
+    phase: PrReviewVerdictSettlementPhase;
+    items: readonly PrReviewVerdictSettlementItem[];
+}): PrReviewVerdictSettlementReceipt;
+export declare function persistVerdictSettlementReceipt(directory: string, receipt: PrReviewVerdictSettlementReceipt): Promise<void>;
+export type VerdictSettlementReceiptRead = {
+    status: 'ok';
+    receipt: PrReviewVerdictSettlementReceipt;
+    /** sha256 of the exact file bytes, for consumption-time anchor checks. */
+    rawSha256: string;
+} | {
+    status: 'absent';
+} | {
+    status: 'invalid';
+    reason: string;
+};
+export declare function readVerdictSettlementReceipt(directory: string, runId: string, phase: PrReviewVerdictSettlementPhase): VerdictSettlementReceiptRead;
+/**
+ * The single shared effective-set helper every consumer uses (constraint 4 +
+ * receipt re-verification): the EFFECTIVE disclosed set is
+ * `receipt.items ∩ currentUnclaimed`. An item claimed after the receipt was
+ * written drops out; an empty effective set exerts no constraint (no
+ * degradation flag, no exemptions).
+ */
+export declare function effectiveVerdictSettlementItems(receipt: PrReviewVerdictSettlementReceipt | undefined, currentUnclaimed: readonly string[]): PrReviewVerdictSettlementItem[];
+/**
+ * Whether an admitted N-of-M verdict settlement currently downgrades the
+ * verdict matrix (the DEGRADED_DISCLOSED channel): true when either phase's
+ * receipt identity-verifies AND its EFFECTIVE set (receipt ∩ current
+ * unclaimed) is non-empty. An empty effective set exerts no constraint.
+ *
+ * Note the deliberate one-way divergence from the gate's
+ * `settlementCoveringAllUnclaimed` predicate: that one requires FULL cover of
+ * the current unclaimed set before exempting anything, while this one fires
+ * on a non-empty intersection. The divergence is strictly fail-closed —
+ * degradation-on-while-exemptions-off is reachable, exemptions-on-while-
+ * degradation-off is not (full cover implies a non-empty intersection).
+ */
+export declare function verdictSettlementDegradationActive(args: {
+    directory: string;
+    runId: string | undefined;
+    prHeadSha: string | undefined;
+    revisionDigest: string | undefined;
+    reviewerUnclaimed: readonly string[];
+    criticUnclaimed: readonly string[];
+}): boolean;
+/**
+ * Test seam (DI over `mock.module`, repo convention): the delegation lookup is
+ * injectable so admission arms (uncertain store reads) are testable without
+ * corrupting a real store. Restore in `afterEach`.
+ */
+export declare const _internals: {
+    findByBatchIdDetailed: typeof findByBatchIdDetailed;
+};

package/dist/services/context-budget-service.d.ts

@@ -100,9 +100,16 @@ interface PlanCursorConfigShape {
  * @param directory - The swarm workspace directory
  * @param assembledSystemPrompt - The fully assembled system prompt
  * @param config - Budget configuration
+ * @param planCursorSuppressed - #3100/#3161 PRR-003: true when the shared
+ *   injection policy suppressed the plan-cursor channel this turn (e.g. an
+ *   active PR_REVIEW gate for the composing session) — the report then
+ *   counts zero cursor tokens instead of re-deriving content the prompt
+ *   does not contain. Two known residual divergences are NOT yet tracked by
+ *   an issue (see the note in src/hooks/injection-policy.ts): mode-blind
+ *   DISCOVER counting, and Path B ranked-drop counting.
  * @returns Context budget report
  */
-export declare function getContextBudgetReport(directory: string, assembledSystemPrompt: string, config: ContextBudgetConfig, planCursor?: PlanCursorConfigShape): Promise<ContextBudgetReport>;
+export declare function getContextBudgetReport(directory: string, assembledSystemPrompt: string, config: ContextBudgetConfig, planCursor?: PlanCursorConfigShape, planCursorSuppressed?: boolean): Promise<ContextBudgetReport>;
 /**
  * Format budget warning message based on report
  *

package/dist/tools/complete-pr-workflow.d.ts

@@ -12,4 +12,17 @@ export declare const _internals: {
     readPrReviewTerminalCoverageForReport: typeof readPrReviewTerminalCoverageForReport;
     readPrReviewFinalFindingPolicyForReport: typeof readPrReviewFinalFindingPolicyForReport;
     settlePresumedStalePrWorkflowLanes: typeof settlePresumedStalePrWorkflowLanes;
+    verdictSettlementSummaryForReportSafe: typeof verdictSettlementSummaryForReportSafe;
 };
+/** Observation-only echo: a read failure degrades to an absent echo (the
+ * sibling observation-only reads above follow the same guard pattern) rather
+ * than failing the completion report itself. */
+declare function verdictSettlementSummaryForReportSafe(directory: string, sessionID: string): Promise<{
+    itemId: string;
+    sourceBatchId: string;
+    sourceLaneId: string;
+    disposition: string;
+    evidenceClass: string;
+    terminalStatus: string;
+}[] | undefined>;
+export {};

package/dist/tools/pr-workflow-status.d.ts

@@ -1,4 +1,4 @@
-import { readDelegationsDetailed } from '../background/pending-delegations';
+import { findByBatchIdDetailed, readDelegationsDetailed } from '../background/pending-delegations';
 import { resolveCurrentGitHeadAsync, resolveIsWorkingTreeCleanAsync } from '../background/workspace-snapshot';
 import { classifyPrWorkflowGitState } from '../git/pr-workflow-state';
 import { isPrWorkflowAutoWakeSuppressed } from '../hooks/pr-workflow-auto-wake';
@@ -14,12 +14,30 @@ import { createSwarmTool } from './create-tool';
  * severed at the boundary instead of leaving a lone surrogate.
  */
 declare function truncateToByteBudget(value: string, maxBytes: number): string;
+/**
+ * Lightweight neutralizer for short, author-influenced Git strings (branch
+ * names, remote URLs, changed paths). A PR branch/remote is attacker-controlled
+ * text; this strips control characters and the markdown/HTML metacharacters that
+ * could break a downstream renderer, then bounds the length. It deliberately
+ * does NOT use the heavyweight `neutralizeUntrustedMarkdown` fenced wrapper,
+ * which is for large prose blobs, not single structured fields.
+ */
+declare function boundUntrusted(value: string, maxLen: number): string;
 /**
  * Bounded, killable, non-interactive Git read (AGENTS.md invariant 3). Array
  * form, explicit cwd, ignored stdin, capped stdout, timeout, best-effort kill in
  * finally. Never runs a PR-controlled script — only fixed read verbs are passed.
  */
 declare function runGitCapture(directory: string, args: string[]): Promise<string | null>;
+/**
+ * Bound a one-line finding summary for display: strip control characters and
+ * the markdown/HTML metacharacters (same character classes as
+ * {@link boundUntrusted} — receipt fields are lane-agent-authored text and a
+ * schema cap bounds length, not content), collapse whitespace, then cap to
+ * the char limit without splitting a surrogate pair (code-point-aware, unlike
+ * a bare `slice`).
+ */
+declare function boundFindingLine(line: string): string;
 declare function resolveWorkflowGateSession(directory: string, sessionID: string): Promise<string | null>;
 export declare const pr_workflow_status: ReturnType<typeof createSwarmTool>;
 /** Test seam mirroring gh-evidence's `_internals` (issue #507 DI convention). */
@@ -34,5 +52,10 @@ export declare const _internals: {
     classifyGitState: typeof classifyPrWorkflowGitState;
     truncateToByteBudget: typeof truncateToByteBudget;
     resolveWorkflowGateSession: typeof resolveWorkflowGateSession;
+    /** Batch receipt lookup for the lane-coverage projection (F-01 test seam). */
+    findByBatchIdDetailed: typeof findByBatchIdDetailed;
+    /** Pure field sanitizers (direct hostile-input unit suites). */
+    boundUntrusted: typeof boundUntrusted;
+    boundFindingLine: typeof boundFindingLine;
 };
 export {};

package/dist/tools/write-pr-review-artifact.d.ts

@@ -31,7 +31,7 @@ type FindingsRecord = z.infer<typeof PrReviewFindingSchema>;
 declare function assertCriticSettlements(records: readonly FindingsRecord[], existing: readonly PersistedFinding[], authoritativeCriticVerdicts: ReadonlyMap<string, {
     status: string;
     severity: string;
-}>): CriticSettlementRecord[];
+}>, criticUnavailableIds: ReadonlySet<string>): CriticSettlementRecord[];
 export declare function executeWritePrReviewArtifact(args: unknown, directory: string, context?: {
     sessionID?: string;
 }): Promise<string>;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.192.4",
+	"version": "7.194.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-6y7wrbvk.js

@@ -1,82 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-5gyq54c5.js";
-import"./index-22ww8fjt.js";
-import"./index-g2phkwh2.js";
-import"./index-xwxqtdwz.js";
-import"./index-j2vv0h13.js";
-import"./index-0e1nxkte.js";
-import"./index-5gy5dc2n.js";
-import"./index-txdagbh7.js";
-import"./index-c6wzbs0g.js";
-import"./index-rdec0y3z.js";
-import"./index-v6ghzghn.js";
-import"./index-myjqj3na.js";
-import"./index-vgktct21.js";
-import"./index-tww9qw9z.js";
-import"./index-fzqn2kk8.js";
-import"./index-dtet46e6.js";
-import"./index-cjapb4hy.js";
-import"./index-g8jd3h4r.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-qzkrcz1r.js";
-import"./index-c5gb6a86.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-cp9h2sqb.js";
-import"./index-v3bmwmqw.js";
-import"./index-6k70exke.js";
-import"./index-2qpme44n.js";
-import"./index-72eh47b2.js";
-import"./index-g4fs6z4e.js";
-import"./index-xpwp9hw1.js";
-import"./index-zya4a544.js";
-import"./index-gkr6ns9n.js";
-import"./index-m9zzj4ee.js";
-import"./index-eaess7dm.js";
-import"./index-2s7dvzff.js";
-import"./index-j4pxkvw3.js";
-import"./index-5dws7eyb.js";
-import"./index-rtry5xyf.js";
-import"./index-6vwnm3sm.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-kn16k0fv.js";
-import"./index-54p1vs33.js";
-import"./index-a9m7h5v0.js";
-import"./index-dt4cjxbz.js";
-import"./index-mbn4vn3z.js";
-import"./index-8zj647hc.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-7pmbnjvj.js";
-import"./index-4twjbsfw.js";
-import"./index-rsfvxaw0.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-bgzpw6ge.js";
-import"./index-1n7sf9gz.js";
-import"./index-e8k0v19e.js";
-import"./index-t7hmqgjy.js";
-import"./index-mtqwyjrg.js";
-import"./index-fzpt2djt.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
-import"./index-gx2vp8gx.js";
-import"./index-rqapvhh5.js";
-import"./index-zxdawwc7.js";
-import"./index-s68yyat0.js";
-import"./index-py8wpe81.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-bzfn85kq.js";
-import"./index-9rwhas09.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-b3y98j5b.js

@@ -1,83 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-jb669k7s.js";
-import"./index-5gyq54c5.js";
-import"./index-22ww8fjt.js";
-import"./index-g2phkwh2.js";
-import"./index-xwxqtdwz.js";
-import"./index-j2vv0h13.js";
-import"./index-0e1nxkte.js";
-import"./index-5gy5dc2n.js";
-import"./index-txdagbh7.js";
-import"./index-c6wzbs0g.js";
-import"./index-rdec0y3z.js";
-import"./index-v6ghzghn.js";
-import"./index-myjqj3na.js";
-import"./index-vgktct21.js";
-import"./index-tww9qw9z.js";
-import"./index-fzqn2kk8.js";
-import"./index-dtet46e6.js";
-import"./index-cjapb4hy.js";
-import"./index-g8jd3h4r.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-qzkrcz1r.js";
-import"./index-c5gb6a86.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-cp9h2sqb.js";
-import"./index-v3bmwmqw.js";
-import"./index-6k70exke.js";
-import"./index-2qpme44n.js";
-import"./index-72eh47b2.js";
-import"./index-g4fs6z4e.js";
-import"./index-xpwp9hw1.js";
-import"./index-zya4a544.js";
-import"./index-gkr6ns9n.js";
-import"./index-m9zzj4ee.js";
-import"./index-eaess7dm.js";
-import"./index-2s7dvzff.js";
-import"./index-j4pxkvw3.js";
-import"./index-5dws7eyb.js";
-import"./index-rtry5xyf.js";
-import"./index-6vwnm3sm.js";
-import"./index-g22dps7x.js";
-import"./index-0725jpp7.js";
-import"./index-kn16k0fv.js";
-import"./index-54p1vs33.js";
-import"./index-a9m7h5v0.js";
-import"./index-dt4cjxbz.js";
-import"./index-mbn4vn3z.js";
-import"./index-8zj647hc.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-7pmbnjvj.js";
-import"./index-4twjbsfw.js";
-import"./index-rsfvxaw0.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-bgzpw6ge.js";
-import"./index-1n7sf9gz.js";
-import"./index-e8k0v19e.js";
-import"./index-t7hmqgjy.js";
-import"./index-mtqwyjrg.js";
-import"./index-fzpt2djt.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
-import"./index-gx2vp8gx.js";
-import"./index-rqapvhh5.js";
-import"./index-zxdawwc7.js";
-import"./index-s68yyat0.js";
-import"./index-py8wpe81.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-bzfn85kq.js";
-import"./index-9rwhas09.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};