opencode-swarm 7.192.4 → 7.194.0

package/dist/cli/{snapshot-coordination-init-wyyn8ftk.js → snapshot-coordination-init-z1aqsvn4.js}

@@ -8,75 +8,75 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-5gyq54c5.js";
-import"./index-22ww8fjt.js";
-import"./index-g2phkwh2.js";
-import"./index-xwxqtdwz.js";
+} from "./index-vjytfp05.js";
+import"./index-51dxek4p.js";
+import"./index-ehab3z5y.js";
+import"./index-48h1yn6c.js";
 import"./index-j2vv0h13.js";
-import"./index-0e1nxkte.js";
-import"./index-5gy5dc2n.js";
+import"./index-668npagp.js";
+import"./index-7njm9jk1.js";
 import"./index-txdagbh7.js";
-import"./index-c6wzbs0g.js";
+import"./index-vfdkvvkf.js";
 import"./index-rdec0y3z.js";
-import"./index-v6ghzghn.js";
-import"./index-myjqj3na.js";
-import"./index-vgktct21.js";
-import"./index-tww9qw9z.js";
-import"./index-fzqn2kk8.js";
-import"./index-dtet46e6.js";
+import"./index-y3n9ry9q.js";
+import"./index-n5xwza76.js";
+import"./index-9bzgea2y.js";
+import"./index-rpnkp79f.js";
+import"./index-fd6b9f38.js";
+import"./index-hfnyykvm.js";
 import"./index-cjapb4hy.js";
-import"./index-g8jd3h4r.js";
+import"./index-6s3ab22d.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-qzkrcz1r.js";
-import"./index-c5gb6a86.js";
+import"./index-yfbk69b1.js";
+import"./index-9v43y7y6.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-cp9h2sqb.js";
+import"./index-6xppb1er.js";
 import"./index-v3bmwmqw.js";
-import"./index-6k70exke.js";
-import"./index-2qpme44n.js";
-import"./index-72eh47b2.js";
+import"./index-f3ttgqak.js";
+import"./index-jrs2qh6j.js";
+import"./index-d7pznffh.js";
 import"./index-g4fs6z4e.js";
-import"./index-xpwp9hw1.js";
-import"./index-zya4a544.js";
-import"./index-gkr6ns9n.js";
+import"./index-dy7nztyp.js";
+import"./index-ajkdt5b8.js";
+import"./index-43v5axvm.js";
 import"./index-m9zzj4ee.js";
-import"./index-eaess7dm.js";
+import"./index-84k9zzv1.js";
 import"./index-2s7dvzff.js";
-import"./index-j4pxkvw3.js";
-import"./index-5dws7eyb.js";
+import"./index-3dpb3kps.js";
+import"./index-w2vbaczx.js";
 import"./index-rtry5xyf.js";
-import"./index-6vwnm3sm.js";
+import"./index-7bfshvq1.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-kn16k0fv.js";
-import"./index-54p1vs33.js";
-import"./index-a9m7h5v0.js";
-import"./index-dt4cjxbz.js";
-import"./index-mbn4vn3z.js";
-import"./index-8zj647hc.js";
+import"./index-r8mavcg6.js";
+import"./index-at34nry4.js";
+import"./index-qh93qjc2.js";
+import"./index-st80sjg7.js";
+import"./index-vg8sxg12.js";
+import"./index-0e318vgt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
-import"./index-4twjbsfw.js";
-import"./index-rsfvxaw0.js";
+import"./index-ndec8akq.js";
+import"./index-cwr69qw7.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-bgzpw6ge.js";
-import"./index-1n7sf9gz.js";
+import"./index-3atkcqpb.js";
+import"./index-5rkh69f3.js";
 import"./index-e8k0v19e.js";
 import"./index-t7hmqgjy.js";
 import"./index-mtqwyjrg.js";
 import"./index-fzpt2djt.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
+import"./index-hfssjyxs.js";
 import"./index-gx2vp8gx.js";
-import"./index-rqapvhh5.js";
+import"./index-0xe19j9g.js";
 import"./index-zxdawwc7.js";
-import"./index-s68yyat0.js";
-import"./index-py8wpe81.js";
+import"./index-4ftg3p9n.js";
+import"./index-1jt12p3y.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";

package/dist/cli/{speckit-checkoff-y2ywmh9k.js → speckit-checkoff-1g3vzywn.js}

@@ -7,14 +7,14 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-6k70exke.js";
+} from "./index-f3ttgqak.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
-import"./index-rqapvhh5.js";
+import"./index-hfssjyxs.js";
+import"./index-0xe19j9g.js";
 import"./index-zxdawwc7.js";
-import"./index-s68yyat0.js";
-import"./index-py8wpe81.js";
+import"./index-4ftg3p9n.js";
+import"./index-1jt12p3y.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";

package/dist/cli/{workspace-snapshot-vfpnxjsp.js → workspace-snapshot-p69t9zn7.js}

@@ -46,11 +46,11 @@ import {
   shouldSkipSnapshot,
   switchPrFeedbackTrackingCandidateAsync,
   workspaceSnapshotMatches
-} from "./index-fzqn2kk8.js";
-import"./index-eaess7dm.js";
+} from "./index-fd6b9f38.js";
+import"./index-84k9zzv1.js";
 import"./index-2s7dvzff.js";
 import"./index-fzpt2djt.js";
-import"./index-nwswxes7.js";
+import"./index-hfssjyxs.js";
 import"./index-zxdawwc7.js";
 import"./index-zpsr8rpc.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-collision-ownership-hg0yrc5b.js → worktree-collision-ownership-d0etv08a.js}

@@ -6,28 +6,28 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-g8jd3h4r.js";
+} from "./index-6s3ab22d.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-v3bmwmqw.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-xpwp9hw1.js";
-import"./index-eaess7dm.js";
+} from "./index-dy7nztyp.js";
+import"./index-84k9zzv1.js";
 import"./index-2s7dvzff.js";
-import"./index-dt4cjxbz.js";
-import"./index-mbn4vn3z.js";
-import"./index-8zj647hc.js";
+import"./index-st80sjg7.js";
+import"./index-vg8sxg12.js";
+import"./index-0e318vgt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
-import"./index-4twjbsfw.js";
-import"./index-rsfvxaw0.js";
+import"./index-ndec8akq.js";
+import"./index-cwr69qw7.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-bgzpw6ge.js";
-import"./index-1n7sf9gz.js";
+import"./index-3atkcqpb.js";
+import"./index-5rkh69f3.js";
 import"./index-e8k0v19e.js";
 import"./index-t7hmqgjy.js";
 import"./index-mtqwyjrg.js";
@@ -36,7 +36,7 @@ import {
 } from "./index-fzpt2djt.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
+import"./index-hfssjyxs.js";
 import"./index-zxdawwc7.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{worktree-isolation-epbn1xgh.js → worktree-isolation-dj2qw13p.js}

@@ -25,77 +25,77 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-5gyq54c5.js";
-import"./index-22ww8fjt.js";
-import"./index-g2phkwh2.js";
-import"./index-xwxqtdwz.js";
+} from "./index-vjytfp05.js";
+import"./index-51dxek4p.js";
+import"./index-ehab3z5y.js";
+import"./index-48h1yn6c.js";
 import"./index-j2vv0h13.js";
-import"./index-0e1nxkte.js";
-import"./index-5gy5dc2n.js";
+import"./index-668npagp.js";
+import"./index-7njm9jk1.js";
 import"./index-txdagbh7.js";
-import"./index-c6wzbs0g.js";
+import"./index-vfdkvvkf.js";
 import"./index-rdec0y3z.js";
-import"./index-v6ghzghn.js";
-import"./index-myjqj3na.js";
-import"./index-vgktct21.js";
-import"./index-tww9qw9z.js";
-import"./index-fzqn2kk8.js";
-import"./index-dtet46e6.js";
+import"./index-y3n9ry9q.js";
+import"./index-n5xwza76.js";
+import"./index-9bzgea2y.js";
+import"./index-rpnkp79f.js";
+import"./index-fd6b9f38.js";
+import"./index-hfnyykvm.js";
 import"./index-cjapb4hy.js";
-import"./index-g8jd3h4r.js";
+import"./index-6s3ab22d.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-qzkrcz1r.js";
-import"./index-c5gb6a86.js";
+import"./index-yfbk69b1.js";
+import"./index-9v43y7y6.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-cp9h2sqb.js";
+import"./index-6xppb1er.js";
 import"./index-v3bmwmqw.js";
-import"./index-6k70exke.js";
-import"./index-2qpme44n.js";
-import"./index-72eh47b2.js";
+import"./index-f3ttgqak.js";
+import"./index-jrs2qh6j.js";
+import"./index-d7pznffh.js";
 import"./index-g4fs6z4e.js";
-import"./index-xpwp9hw1.js";
-import"./index-zya4a544.js";
-import"./index-gkr6ns9n.js";
+import"./index-dy7nztyp.js";
+import"./index-ajkdt5b8.js";
+import"./index-43v5axvm.js";
 import"./index-m9zzj4ee.js";
-import"./index-eaess7dm.js";
+import"./index-84k9zzv1.js";
 import"./index-2s7dvzff.js";
-import"./index-j4pxkvw3.js";
-import"./index-5dws7eyb.js";
+import"./index-3dpb3kps.js";
+import"./index-w2vbaczx.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-6vwnm3sm.js";
+} from "./index-7bfshvq1.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-kn16k0fv.js";
-import"./index-54p1vs33.js";
-import"./index-a9m7h5v0.js";
-import"./index-dt4cjxbz.js";
-import"./index-mbn4vn3z.js";
-import"./index-8zj647hc.js";
+import"./index-r8mavcg6.js";
+import"./index-at34nry4.js";
+import"./index-qh93qjc2.js";
+import"./index-st80sjg7.js";
+import"./index-vg8sxg12.js";
+import"./index-0e318vgt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
 import"./index-7pmbnjvj.js";
-import"./index-4twjbsfw.js";
-import"./index-rsfvxaw0.js";
+import"./index-ndec8akq.js";
+import"./index-cwr69qw7.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-bgzpw6ge.js";
-import"./index-1n7sf9gz.js";
+import"./index-3atkcqpb.js";
+import"./index-5rkh69f3.js";
 import"./index-e8k0v19e.js";
 import"./index-t7hmqgjy.js";
 import"./index-mtqwyjrg.js";
 import"./index-fzpt2djt.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-nwswxes7.js";
+import"./index-hfssjyxs.js";
 import"./index-gx2vp8gx.js";
-import"./index-rqapvhh5.js";
+import"./index-0xe19j9g.js";
 import"./index-zxdawwc7.js";
-import"./index-s68yyat0.js";
-import"./index-py8wpe81.js";
+import"./index-4ftg3p9n.js";
+import"./index-1jt12p3y.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";
 import"./index-zpsr8rpc.js";

package/dist/commands/registry.d.ts

@@ -715,10 +715,10 @@ export declare const COMMAND_REGISTRY: {
     readonly epic: {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Open, inspect, and close a plan-scoped epic (coupling-aware parallel execution of the current plan)";
-        readonly details: "An epic is bound to ONE plan: `start` opens it for the current plan, `close` ends it. Requires `epic.mode.enabled: true` in config (top-level `epic` block; no `turbo` block needed — the legacy `turbo.epic` path is still accepted and migrated). `start [--force]` refuses, in order: epic-disabled-by-config, host-unsupported (the host gives the plugin no OpenCode SDK client — OpenCode 2 does not yet — so worktree-isolated coders and the phase review cannot run), no-plan / plan-ledger-unreadable, epic-already-open (idempotent for the same plan) / epic-open-for-other-plan, turbo-active (config turbo_mode, a session with Turbo on, or a running Lean run — Epic enables neither Lean nor Turbo and never waives per-task QA), dirty-baseline (git: uncommitted changes outside .swarm/), detached-head / epic-branch-exists (epic-branch policy), in-flight-coders (any coder dispatch, background delegation, unsettled settlement, or preserved/recovery lane), not-epic-sized (too few pending tasks, insufficient scope coverage, or insufficient effective speedup — run it in Balanced, or reshape it with the plan-shaping suggestions shown; `--force` overrides and is recorded). Non-git projects run an epic serially (one task per wave). Git epics default to `epic.commit_policy: \"epic-branch\"`: start checks out `swarm/epic/<epicKey>` and every Epic commit goes there (epic_next_wave blocks with epic-branch-mismatch, and no landing or residue is committed, while HEAD is elsewhere); `current-branch` keeps commits on the starting branch. In a git epic every coder runs in an isolated worktree (refused EPIC_ISOLATION_DEGRADED when isolation is unavailable) and lands as a `swarm(task <id>): …` merge commit; main-tree files a non-coder writer (test_engineer, docs) wrote for a task are committed as residue of that task; update_task_status writes nothing to git; wave close records the commit of each task as `refs/swarm/epics/<epicKey>/tasks/<id>` (deleted at close unless `epic.retain_refs`; never pushed by default). While open, the architect calls epic_next_wave and does what its status says: it issues one wave at a time (tasks with non-conflicting declared scopes — exclusive tasks alone, at most one task per densely coupled component; phases strictly in order), the architect dispatches one Task per taskId in ONE message and runs per-task QA (pre_check_batch → reviewer + test_engineer → update_task_status(completed)), and the next epic_next_wave closes the wave (recording outcomes and declared-vs-actual divergence) and issues the next; when a phase is done it returns phase-ready-for-review → epic_phase_review → phase_complete. `close [--abandon] [--land squash|merge|none]` refuses while tasks are pending (or the epic is orphaned / unreadable) unless `--abandon`, refuses a dirty tree before landing, writes a close report (epic-report-v2, embedding the epic scorecard) to .swarm/epic/reports/ and .swarm/epic-prior/reports/ (newest 50 kept), and lands the epic branch onto the original branch: squash (default — staged, uncommitted changes for you to review and commit), merge (a --no-ff merge commit), or none (switch back only). The epic branch is kept (remove it with `git branch -D` once committed). A landing conflict is rolled back (the attempted squash or merge is undone) and the epic stays closing — rerun close to resume. `--abandon` never lands; it switches back to the original branch when the tree is clean. `status [--repair-refs]` (also bare /swarm epic) shows the epic, its waves, phases, the task components recorded with the latest wave and recorded divergence, orphan detection (plan renamed or replaced), sentinel/row repair, recorded worktree merge failures, and retires legacy Epic v1 session state once; `--repair-refs` re-adopts task commits a rebase or amend made unreachable from HEAD. `report [<key>|last] [--format json]` shows the epic scorecard: live for the open epic (bare `report`), else from the close report of a past epic in .swarm/epic-prior/reports/ (`last` = newest; `<key>` = a report or epic key) — tasks completed in the epic, waves (count, width), time over closed waves (wave span, task issue→resolve time, and their ratio, a concurrency factor that is NOT a speedup: it includes queueing behind serialized QA), conflicts (merge-back failures, undeclared writes), rework (extra generations, reopens), first-pass gate rates (upper bounds: the failure history is bounded), forced/sizing at start and learned hot files. Epics learn from their outcomes: undeclared writes teach learned co-writes (a task declaring D that also wrote f makes later tasks declaring D conflict with tasks on f — planner analysis only, never write authorization) and incidents (undeclared writes, merge conflicts, Stage B failures, rework, reopens) in excess of clean exposures make a file hot (a task declaring it runs alone) — undeclared writes its strongest learned co-writer explains are discounted (expansion already separates them), so one declarer writing a file is not heat; an empty history learns nothing (neutral start). Each wave close updates the posterior of the epic; close merges it into the project prior .swarm/epic-prior/learning.json (decayed per epic and by age; kept across /swarm close; `epic.learning.*`). `learning` shows what the planner learned and uses now; `prior [show]` shows the project prior; `prior reset` previews and prints a single-use confirm token (15 minutes); `prior reset --confirm=<token>` clears it. Also: clear-merge-failure <taskId> [--confirm]. The former `on` / `off` toggles, the `decide` / `last` subcommands and `calibration` (renamed `learning`) were removed.";
+        readonly details: "An epic is bound to ONE plan: `start` opens it for the current plan, `close` ends it. Requires `epic.mode.enabled: true` in config (top-level `epic` block; no `turbo` block needed — the legacy `turbo.epic` path is still accepted and migrated). `start [--force]` refuses, in order: epic-disabled-by-config, host-unsupported (the host gives the plugin no OpenCode SDK client; on OpenCode 2 the v2 adapter now ships one, so this refusal no longer fires there — v2 is held by the child-session placement work instead), no-plan / plan-ledger-unreadable, epic-already-open (idempotent for the same plan) / epic-open-for-other-plan, turbo-active (config turbo_mode, a session with Turbo on, or a running Lean run — Epic enables neither Lean nor Turbo and never waives per-task QA), dirty-baseline (git: uncommitted changes outside .swarm/), detached-head / epic-branch-exists (epic-branch policy), in-flight-coders (any coder dispatch, background delegation, unsettled settlement, or preserved/recovery lane), not-epic-sized (too few pending tasks, insufficient scope coverage, or insufficient effective speedup — run it in Balanced, or reshape it with the plan-shaping suggestions shown; `--force` overrides and is recorded). Non-git projects run an epic serially (one task per wave). Git epics default to `epic.commit_policy: \"epic-branch\"`: start checks out `swarm/epic/<epicKey>` and every Epic commit goes there (epic_next_wave blocks with epic-branch-mismatch, and no landing or residue is committed, while HEAD is elsewhere); `current-branch` keeps commits on the starting branch. In a git epic every coder runs in an isolated worktree (refused EPIC_ISOLATION_DEGRADED when isolation is unavailable) and lands as a `swarm(task <id>): …` merge commit; main-tree files a non-coder writer (test_engineer, docs) wrote for a task are committed as residue of that task; update_task_status writes nothing to git; wave close records the commit of each task as `refs/swarm/epics/<epicKey>/tasks/<id>` (deleted at close unless `epic.retain_refs`; never pushed by default). While open, the architect calls epic_next_wave and does what its status says: it issues one wave at a time (tasks with non-conflicting declared scopes — exclusive tasks alone, at most one task per densely coupled component; phases strictly in order), the architect dispatches one Task per taskId in ONE message and runs per-task QA (pre_check_batch → reviewer + test_engineer → update_task_status(completed)), and the next epic_next_wave closes the wave (recording outcomes and declared-vs-actual divergence) and issues the next; when a phase is done it returns phase-ready-for-review → epic_phase_review → phase_complete. `close [--abandon] [--land squash|merge|none]` refuses while tasks are pending (or the epic is orphaned / unreadable) unless `--abandon`, refuses a dirty tree before landing, writes a close report (epic-report-v2, embedding the epic scorecard) to .swarm/epic/reports/ and .swarm/epic-prior/reports/ (newest 50 kept), and lands the epic branch onto the original branch: squash (default — staged, uncommitted changes for you to review and commit), merge (a --no-ff merge commit), or none (switch back only). The epic branch is kept (remove it with `git branch -D` once committed). A landing conflict is rolled back (the attempted squash or merge is undone) and the epic stays closing — rerun close to resume. `--abandon` never lands; it switches back to the original branch when the tree is clean. `status [--repair-refs]` (also bare /swarm epic) shows the epic, its waves, phases, the task components recorded with the latest wave and recorded divergence, orphan detection (plan renamed or replaced), sentinel/row repair, recorded worktree merge failures, and retires legacy Epic v1 session state once; `--repair-refs` re-adopts task commits a rebase or amend made unreachable from HEAD. `report [<key>|last] [--format json]` shows the epic scorecard: live for the open epic (bare `report`), else from the close report of a past epic in .swarm/epic-prior/reports/ (`last` = newest; `<key>` = a report or epic key) — tasks completed in the epic, waves (count, width), time over closed waves (wave span, task issue→resolve time, and their ratio, a concurrency factor that is NOT a speedup: it includes queueing behind serialized QA), conflicts (merge-back failures, undeclared writes), rework (extra generations, reopens), first-pass gate rates (upper bounds: the failure history is bounded), forced/sizing at start and learned hot files. Epics learn from their outcomes: undeclared writes teach learned co-writes (a task declaring D that also wrote f makes later tasks declaring D conflict with tasks on f — planner analysis only, never write authorization) and incidents (undeclared writes, merge conflicts, Stage B failures, rework, reopens) in excess of clean exposures make a file hot (a task declaring it runs alone) — undeclared writes its strongest learned co-writer explains are discounted (expansion already separates them), so one declarer writing a file is not heat; an empty history learns nothing (neutral start). Each wave close updates the posterior of the epic; close merges it into the project prior .swarm/epic-prior/learning.json (decayed per epic and by age; kept across /swarm close; `epic.learning.*`). `learning` shows what the planner learned and uses now; `prior [show]` shows the project prior; `prior reset` previews and prints a single-use confirm token (15 minutes); `prior reset --confirm=<token>` clears it. Also: clear-merge-failure <taskId> [--confirm]. The former `on` / `off` toggles, the `decide` / `last` subcommands and `calibration` (renamed `learning`) were removed.";
         readonly args: "start [--force] | close [--abandon] [--land squash|merge|none] | status [--repair-refs] | report [<key>|last] [--format json] | learning | prior [show|reset [--confirm=<token>]] | clear-merge-failure <taskId> [--confirm]";
         readonly category: "diagnostics";
-        readonly toolPolicy: "none";
+        readonly toolPolicy: "human-only";
     };
     readonly 'dark-matter': {
         readonly handler: (ctx: CommandContext) => Promise<string>;

package/dist/epic/start.d.ts

@@ -97,7 +97,7 @@ export interface EpicStartOptions {
  * with `client: undefined` (`src/host/v2/setup.ts`), so an epic there could
  * neither dispatch a coder nor complete a phase.
  */
-export declare const EPIC_HOST_UNSUPPORTED_MESSAGE = "This OpenCode host gives the plugin no SDK client (OpenCode 2 does not yet, see docs/host/v2-hook-inventory.md). Epic needs it for worktree-isolated coders and for the epic_phase_review reviewer/critic, so an epic here could neither run its coders nor complete a phase. Run the plan in Balanced, or use an OpenCode 1.x host (1.18.29+).";
+export declare const EPIC_HOST_UNSUPPORTED_MESSAGE = "This OpenCode host gives the plugin no SDK client. Epic needs it for worktree-isolated coders and for the epic_phase_review reviewer/critic, so an epic here could neither run its coders nor complete a phase. Run the plan in Balanced, or use an OpenCode 1.x host (1.18.29+). (On OpenCode 2 the v2 adapter now ships a session-capable client, so this refusal no longer fires there \u2014 Epic on v2 is held by the #3169 child-session placement work instead.)";
 /** Durable Lean run marked `running` — read without the migrating Lean reader. */
 declare function findRunningLeanRun(directory: string): string | null;
 /** Why Turbo blocks the start, or null (M-a). */
@@ -163,10 +163,13 @@ export declare const _internals: {
     hasActiveTurboMode: () => boolean;
     /**
      * False only when the plugin was initialized on a host that supplies no
-     * SDK client: the v1 init stores the host client, the OpenCode 2 adapter
-     * stores `undefined`, and an uninitialized process (tests, scripts) keeps
-     * the initial `null` — which is not a host verdict, so it is allowed.
-     * Capability-based: once a v2 client is wired, Epic starts there too.
+     * SDK client: the v1 init stores the host client, an uninitialized process
+     * (tests, scripts) keeps the initial `null`, and only a genuinely
+     * client-less host stores `undefined` — which is not a host verdict, so
+     * it is allowed. Capability-based: the v2 adapter now ships a
+     * session-capable client (the #3169 session shim), so this passes on v2;
+     * Epic's v2 execution is held by the entry-point double-gate and the
+     * child-session placement work, not by this check.
      */
     hostProvidesClient: () => boolean;
     findRunningLeanRun: typeof findRunningLeanRun;

package/dist/hooks/injection-policy.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Shared gate-aware injection policy (issue #3100).
+ *
+ * One deterministic decision point for session-state directive channels,
+ * keyed by PR-workflow gate mode × content class — never by content
+ * heuristics. #3093's plan-cursor/parallel-pre-check suppression is the
+ * first registered consumer (migrated with zero behavior change); the
+ * agent-activity table channel is the second (new suppression under
+ * PR_REVIEW). The swarm-command banner and delegation [NEXT] steering are
+ * load-bearing and structurally never-suppressed.
+ *
+ * Proposed suppression matrix (issue #3100 AC5 — the maintainer confirms
+ * the matrix on the issue before merge; this module ships the proposed
+ * shape and a ratchet test pins it):
+ *
+ * | content class       | channels                       | PR_REVIEW | PR_FEEDBACK | no gate* |
+ * |---------------------|--------------------------------|-----------|-------------|----------|
+ * | plan-execution      | plan-cursor, parallel-precheck | suppress  | inject      | inject   |
+ * | agent-activity      | agent-activity tables          | suppress  | inject      | inject   |
+ * | command-contract    | command-banner                 | inject    | inject      | inject   |
+ * | delegation-steering | delegation-steering            | inject    | inject      | inject   |
+ *
+ * *no gate / a gate owned by a different session / a gate read that
+ * failed all arrive here as a null gate state and fail toward emission —
+ * matching the #3093 fail-open composition convention: a miss costs extra
+ * directives, never hidden ones. (The gate-state READER throws on invalid
+ * or unreadable state; the null is the composer's `.catch` result, not the
+ * reader's. This module is pure and has no failure path of its own.)
+ *
+ * Deliberate asymmetry (#3161 PRR-010): composition keys the gate read on
+ * the RAW composing sessionID (the composer owns the read; see
+ * system-enhancer), while PR-workflow ENFORCEMENT resolves the gate-owning
+ * ancestor session via pr-workflow-session-resolver. A pre-gate child
+ * session that outlives gate activation therefore still receives these
+ * directives. This is intentional: the #3093 session-scoping pin requires
+ * a different session's gate NOT to suppress, and changing composition to
+ * ancestor resolution would alter that shipped behavior.
+ *
+ * Divergence disclosure (plan-critic rounds 1/3): `command-banner` and
+ * `delegation-steering` are REGISTERED here but their composers do not
+ * consult this policy at runtime — the never-suppress guarantee is
+ * structural (empty suppression lists below, pinned by a ratchet test),
+ * not an emission-site check. If emission-path governance is ever wanted,
+ * the fallback is wiring each composer through shouldInjectChannel (the
+ * decision is gate-independent for never-suppress classes, so no new gate
+ * read would be required).
+ *
+ * Budget-report consumer (#3161 PRR-003): the context-budget report
+ * consumes the plan-cursor channel decision (as an explicit emission
+ * flag) so it stops counting a policy-suppressed cursor.
+ *
+ * Known residual budget-report divergences, NOT yet tracked by an issue
+ * (verify they still exist before filing):
+ *  - DISCOVER-mode counting — the emission conditions require a non-DISCOVER
+ *    mode while the report is mode-blind, so in DISCOVER it still counts a
+ *    cursor the prompt never contained.
+ *  - Path B ranked-drop counting — a cursor candidate skipped by the
+ *    scoring injection loop is still counted.
+ * #3161 tracks the budget twin itself (PRR-003), not these two.
+ */
+import type { PrWorkflowMode } from './pr-workflow-gate';
+/** Content classes the policy reasons about. */
+export type InjectionContentClass = 'plan-execution' | 'agent-activity' | 'command-contract' | 'delegation-steering';
+/** The directive channels registered as policy consumers (issue #3100 scope). */
+export type InjectionChannel = 'plan-cursor' | 'parallel-precheck' | 'agent-activity' | 'command-banner' | 'delegation-steering';
+/**
+ * Minimal gate-state shape the policy needs (structural: a full
+ * PrWorkflowGateState satisfies it, keeping this module pure and
+ * runtime-independent of the gate store).
+ */
+export interface InjectionGateState {
+    mode: PrWorkflowMode;
+}
+/** Channel registry: every registered channel maps to exactly one content class. */
+export declare const INJECTION_CHANNEL_CONTENT_CLASS: Readonly<Record<InjectionChannel, InjectionContentClass>>;
+/**
+ * The suppression matrix: gate modes under which a content class is
+ * suppressed. Empty list = must-not-suppress under every mode (the two
+ * load-bearing classes; a ratchet test pins their emptiness).
+ */
+export declare const SUPPRESSED_UNDER: Readonly<Record<InjectionContentClass, readonly InjectionGateState['mode'][]>>;
+/**
+ * Decide whether a channel may inject this turn. Deterministic: a pure
+ * function of the channel's content class and the gate mode. Unknown
+ * channels and absent gate state (no gate, read failure, foreign session)
+ * fail toward emission.
+ *
+ * The own-property check (not a truthiness check) is load-bearing: the
+ * registries are plain object literals, so a PROTOTYPE key such as
+ * 'constructor' or 'toString' resolves to a truthy inherited value that
+ * would otherwise pass a truthiness guard and then throw on
+ * `SUPPRESSED_UNDER[<Function>].includes` instead of failing open.
+ */
+export declare function shouldInjectChannel(channel: InjectionChannel, gateState: InjectionGateState | null): boolean;

package/dist/hooks/pr-workflow-gate.d.ts

@@ -15,6 +15,7 @@ import { type PrReviewDimensionCancellationRecord, type PrReviewPartialBaseCover
 import { type CriticOutcome } from '../pr-review/finding-policy.js';
 import { type PrReviewComposablePhase, type PrReviewItemClaim, type PrReviewPhaseComposition, parseCriticVerdict } from '../pr-review/legacy-transcript-adapter.js';
 import { withPrWorkflowCheckoutMutationLock, workflowCheckoutMutationLockRelativePath, workflowGateStateLockRelativePath, workflowGateStateRelativePath } from '../pr-review/persistence.js';
+import { type PrReviewVerdictSettlementPhase } from '../pr-review/verdict-settlement.js';
 import { type ForgeContext } from '../providers/forge-provider.js';
 import { resolveGhBinary } from '../tools/gh-evidence.js';
 import { classifyLaneLivenessCondition, type EffectivePrLaneHorizon, resolveEffectivePrLaneHorizonMs } from './lane-liveness-watchdog.js';
@@ -390,6 +391,14 @@ type PrReviewArtifactRecord = {
      */
     risk_impact?: PrReviewRiskImpact;
     risk_tags?: PrReviewRiskTag[];
+    /**
+     * Model-supplied critic status (issue #3101). Present on post_critic
+     * records when the caller attests a critic outcome; the records-match
+     * validator rejects any value on a disclosed-dead critic item (the model
+     * never authors a critic status there — the writer's settlement injection
+     * derives it).
+     */
+    critic_status?: string;
 };
 interface PrFeedbackScopeDeclarationRecord {
     taskId: string;
@@ -552,6 +561,14 @@ export interface PrWorkflowGateState {
     prReviewArtifactRunId?: string;
     prReviewFindingsPath?: string;
     prReviewArtifactBoundaries?: PrReviewArtifactBoundary[];
+    /**
+     * Issue #3101: sha256 of each phase's persisted N-of-M verdict-settlement
+     * receipt (the exact file bytes, recorded at persist time). Consumption
+     * re-verifies the digest so a receipt rewritten after the fact under the
+     * same head/digest identity fails closed — the same controller-held anchor
+     * discipline as `prReviewCoverageDisclosureDigest` (issue #2383).
+     */
+    prReviewVerdictSettlementDigests?: Partial<Record<PrReviewVerdictSettlementPhase, string>>;
     prReviewPartialBaseCoverage?: PrReviewPartialBaseCoverageRecord;
     prReviewCoverageDisclosurePath?: string;
     prReviewCoverageDisclosureDigest?: string;
@@ -2191,6 +2208,32 @@ interface PrReviewGateContext {
      */
     candidateSeverities?: Map<string, CandidateSeverity>;
 }
+/**
+ * Issue #3095: read-surface reuse of the derivation above for
+ * `pr_workflow_status`. The derivation itself stays single-sourced: every
+ * production caller is a validation/enforcement path that must keep throwing,
+ * so this wrapper exists only to thread the SAME result to a read-only status
+ * tool and to degrade fail-soft instead of blocking an observation. A status
+ * read must never fail the whole tool for an unbound head or an unreadable
+ * revision digest — the caller renders the `unavailable` arm (with the
+ * bounded reason) and still projects boundaries and lane coverage.
+ *
+ * Read-only by construction: it performs no writes and mutates no state.
+ * COST DISCLOSURE (not free): resolving the derivation context runs the
+ * revision-digest computation on every bound PR_REVIEW call — three bounded
+ * git processes plus a re-read/hash of every changed file
+ * (`createPrReviewGateContext` → `resolvePrWorkflowRevisionDigestForGate` →
+ * the workspace-snapshot digest path). An observation surface pays the same
+ * digest price an enforcement call would.
+ */
+export type PrReviewCandidateInventoryForStatus = {
+    state: 'available';
+    inventory: string[];
+} | {
+    state: 'unavailable';
+    reason: string;
+};
+export declare function derivePrReviewCandidateInventoryForStatus(directory: string, state: PrWorkflowGateState): Promise<PrReviewCandidateInventoryForStatus>;
 /**
  * Extract candidate ids from a discovery artifact's [CANDIDATE] rows. When
  * `scopeToLanes` is given (base-dimension sources credited for only a subset
@@ -2227,6 +2270,25 @@ interface CandidateArtifactParseResult {
 declare function resolvePrReviewRowFamily(workflowLane: string | undefined, mode?: string): RowFormatFamily;
 declare function parseCanonicalCandidateRows(text: string, fallbackFamily: RowFormatFamily): CandidateArtifactParseResult;
 declare function extractCandidateIds(text: string, fallbackFamily: RowFormatFamily, scopeToLanes?: readonly string[]): string[];
+/**
+ * Issue #3101: the per-item disclosure rows of admitted N-of-M verdict
+ * settlements (both phases, effective sets), for additive tool-response echoes.
+ */
+export declare function readPrReviewVerdictSettlementReceiptItems(directory: string, sessionID: string): Promise<Array<{
+    itemId: string;
+    sourceBatchId: string;
+    sourceLaneId: string;
+    disposition: string;
+    evidenceClass: string;
+    terminalStatus: string;
+}>>;
+/**
+ * Issue #3101: the effective (receipt ∩ current-unclaimed) item ids of an
+ * admitted N-of-M verdict settlement for a phase; empty when no covering
+ * settlement exists. Consumers: the artifact writer's critic-settlement
+ * injection, the exact-cover exemption, and the tool-response echoes.
+ */
+export declare function readPrReviewVerdictSettlementEffectiveIds(directory: string, sessionID: string, phase: PrReviewVerdictSettlementPhase): Promise<ReadonlySet<string>>;
 /** Read the durable critic settlement projection used by terminal readiness. */
 export declare function readAuthoritativePrReviewCriticSettlements(directory: string, sessionID: string): Promise<Array<{
     findingId: string;
@@ -2246,13 +2308,16 @@ export declare function readAuthoritativePrReviewCriticSettlements(directory: st
  * unchallenged, with the only surface symptom a downstream
  * `no authoritative reviewer verdict` that names a consequence, not the cause.
  *
- * Composition currently makes this unreachable by construction: settlement *is*
+ * Under plain composition this is unreachable by construction: settlement *is*
  * `unclaimed.length === 0` over the very map derivation projects, and claims are
  * filtered to `requiredInventory`, so `unclaimed === []` implies the map covers
- * every required item. This assertion deliberately does **not** rely on that
- * adjacency. It states the property directly so a future refactor that re-splits
- * settlement from derivation fails loudly at the gate instead of silently
- * skipping the critic phase.
+ * every required item. Under an admitted N-of-M verdict settlement (issue
+ * #3101) a settled phase can still carry unclaimed items, and this guard
+ * early-returns for them — on that path the settlement receipt, not this
+ * assertion, is the coverage proof. The property check still stands for every
+ * plain-composition settle so a future refactor that re-splits settlement from
+ * derivation fails loudly at the gate instead of silently skipping the critic
+ * phase.
  *
  * Fail-closed and always on; never downgraded to a warning, because the failure
  * it catches is invisible in the passing direction. Pure over values the caller
@@ -2367,6 +2432,17 @@ export interface PrWorkflowGateRecoveryRead {
      * availability one.
      */
     armedShapeUnreadable: boolean;
+    /**
+     * true when the salvage reconstructed ONLY the abort-relevant fields and
+     * every `prReview*` projection field (base dispatches, artifact
+     * boundaries, run id, findings path, settlement digests) was dropped
+     * because the shadow bytes failed schema validation. The status tool uses
+     * this to mark its derived PR_REVIEW sections `unavailable` instead of
+     * reporting healthy-but-empty coverage — an absent field on a salvaged
+     * state proves nothing about the workflow. Present only when true; a
+     * schema-valid shadow (or an ordinary healthy read) keeps full fidelity.
+     */
+    prReviewProjectionDropped?: boolean;
 }
 /**
  * Recovery-only gate-state reader (issue #2242 R4, wedge W-5).