opencode-swarm 7.200.0 → 7.200.2

package/dist/hooks/pr-workflow-gate.d.ts

@@ -31,7 +31,7 @@ export { PR_REVIEW_BASE_DIMENSION_IDS };
 export declare const PR_REVIEW_REQUIRED_MICRO_LANE_IDS: ("auth-identity-secrets" | "untrusted-input-boundaries" | "subprocess-platform" | "concurrency-state" | "dependencies-build-release" | "api-schema-migrations" | "test-infrastructure" | "ui-accessibility-i18n" | "privacy-observability" | "generated-provenance" | "unclassified-risk")[];
 export type PrReviewBaseDimensionId = (typeof PR_REVIEW_BASE_DIMENSION_IDS)[number];
 export type PrWorkflowMode = 'PR_REVIEW' | 'PR_FEEDBACK';
-export type PrReviewLaneValidationPredicate = 'batch.validated_at' | 'batch.expected_lane_unique' | 'record.missing' | 'record.duplicate_lane' | 'record.subagent_session_id' | 'record.duplicate_subagent_session_id' | 'record.forbidden_subagent_session_id' | 'record.created_at' | 'record.workflow_lane' | 'record.owned_workflow_lanes' | 'record.mode' | 'record.pr_head_sha' | 'record.git_head' | 'record.status' | 'result.output_degraded' | 'result.transcript_incomplete' | 'result.chars' | 'result.digest' | 'result.output_ref' | 'artifact.readable' | 'artifact.ref' | 'artifact.batch_id' | 'artifact.lane_id' | 'artifact.mode' | 'artifact.session_id' | 'artifact.parent_session_id' | 'artifact.agent' | 'artifact.role' | 'artifact.source' | 'artifact.workflow_lane_record' | 'artifact.workflow_lane_expected' | 'artifact.pr_head_sha' | 'artifact.git_head' | 'artifact.revision_digest' | 'record.scope' | 'artifact.scope' | 'artifact.digest' | 'artifact.chars' | 'discovery.header' | 'discovery.row' | 'discovery.coverage' | 'discovery.duplicate_evidence' | 'reviewer.verdict_rows' | 'critic.verdict_rows';
+export type PrReviewLaneValidationPredicate = 'batch.validated_at' | 'batch.expected_lane_unique' | 'record.missing' | 'record.duplicate_lane' | 'record.subagent_session_id' | 'record.duplicate_subagent_session_id' | 'record.forbidden_subagent_session_id' | 'record.created_at' | 'record.workflow_lane' | 'record.owned_workflow_lanes' | 'record.mode' | 'record.normalized_agent' | 'record.pr_head_sha' | 'record.git_head' | 'record.status' | 'result.output_degraded' | 'result.transcript_incomplete' | 'result.chars' | 'result.digest' | 'result.output_ref' | 'artifact.readable' | 'artifact.ref' | 'artifact.batch_id' | 'artifact.lane_id' | 'artifact.mode' | 'artifact.session_id' | 'artifact.parent_session_id' | 'artifact.agent' | 'artifact.role' | 'artifact.source' | 'artifact.workflow_lane_record' | 'artifact.workflow_lane_expected' | 'artifact.pr_head_sha' | 'artifact.git_head' | 'artifact.revision_digest' | 'record.scope' | 'artifact.scope' | 'artifact.digest' | 'artifact.chars' | 'discovery.header' | 'discovery.row' | 'discovery.coverage' | 'discovery.duplicate_evidence' | 'reviewer.verdict_rows' | 'critic.verdict_rows';
 export interface PrReviewLaneValidationFailure {
     predicate: PrReviewLaneValidationPredicate;
     expected: string;
@@ -182,6 +182,15 @@ export interface PrWorkflowLaneSpec {
     laneId?: string;
     workflowLane?: string;
     reviewItemIds?: string[];
+    /**
+     * The agent this lane declares it will run (threaded from the dispatch
+     * lane's `agent`). The critic-phase recorder asserts its canonical role
+     * (issue #3340 AC1): PR_REVIEW critic batches are refused unless every
+     * lane declares an agent whose resolved role is exactly `critic`, so the
+     * role rule holds at the persisting boundary instead of only at the
+     * dispatch call site (#3310). Persisted on the batch record for audit.
+     */
+    agent?: string;
     /**
      * Complete dimension/family set this lane covers under a consolidated depth
      * tier. Must contain workflowLane. Absent means the singleton [workflowLane].
@@ -425,6 +434,8 @@ interface PrReviewValidationBatchRecord {
         laneId: string;
         workflowLane: string;
         reviewItemIds?: string[];
+        /** Declared lane agent (issue #3340 audit trail; critic batches refuse non-critic roles at record time). */
+        agent?: string;
     }>;
     validatedAt: string;
 }
@@ -1357,6 +1368,14 @@ export declare function recordPrReviewValidationBatch(directory: string, session
      * closed so the prompt can never misrepresent the stamped receipt.
      */
     expectedPresentationOrder?: 'A' | 'B';
+    /**
+     * Issue #3340 AC1: the generated-agent-name registry the dispatch
+     * caller resolves lane roles against. When supplied, the critic-phase
+     * admission below resolves declared agents through the identical
+     * strict resolver, so the gate verdict matches the dispatch verdict
+     * for prefixed generated names (e.g. `mega_critic`).
+     */
+    generatedAgentNames?: readonly string[];
 }): Promise<PrWorkflowGateState>;
 /**
  * Validate that every declared council obligation has a successful retry, and
@@ -1835,6 +1854,7 @@ export declare const _test_exports: {
                 laneId: string;
                 workflowLane: string;
                 reviewItemIds?: string[] | undefined;
+                agent?: string | undefined;
             }[];
             validatedAt: string;
         }[] | undefined;

package/dist/host/v2/hook-budget.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Budget for the OpenCode 2 `tool.execute.before` guard chain (#3446).
+ *
+ * The v2 adapter wraps the whole v1 before-chain in one timeout. The chain is
+ * normally instant, but while Full-Auto is running it can contain an LLM
+ * oversight dispatch whose own deadline (`full_auto.oversight.total_timeout_ms`,
+ * default 120 s, up to 300 s) is LONGER than the fixed 60 s the adapter used.
+ * The host then reported "tool.execute.before exceeded budget" at 60 s while the
+ * critic kept running to its own deadline, and the run paused.
+ *
+ * Resolution order:
+ *   1. `full_auto.oversight.hook_timeout_ms` when set (explicit, always applies);
+ *   2. else, while a Full-Auto run is active for the session:
+ *      `oversight.total_timeout_ms + 30 s` (never below the base);
+ *   3. else the 60 s base.
+ *
+ * Settings are keyed by project directory (one plugin process can host several
+ * projects, each with its own config); a call without a directory, or for an
+ * unknown one, uses the default slot, then the module defaults.
+ */
+export declare const V2_TOOL_BEFORE_BASE_MS = 60000;
+export declare const V2_TOOL_BEFORE_MARGIN_MS = 30000;
+export declare const V2_TOOL_BEFORE_MAX_MS = 900000;
+/** Max distinct project directories retained (invariant 8: bounded state). */
+export declare const V2_TOOL_BEFORE_BUDGET_MAX_ENTRIES = 64;
+/**
+ * Record the relevant `full_auto.oversight` settings for a project directory
+ * (call at setup; omit `directory` to set the default slot).
+ */
+export declare function configureV2ToolBeforeBudget(fullAuto: unknown, directory?: string): void;
+/** Budget, in ms, for one `tool.execute.before` chain. */
+export declare function resolveV2ToolBeforeBudgetMs(fullAutoActive: boolean, directory?: string): number;
+/**
+ * Restore defaults for one project directory (setup failure path), or for
+ * everything when called without an argument (test seam).
+ */
+export declare function resetV2ToolBeforeBudget(directory?: string): void;

package/dist/host/v2/hooks.d.ts

@@ -40,6 +40,15 @@ import type { V1HooksSubset, V2PluginContext, V2Registration } from './types';
 /** Mirrors `isTaskToolId`'s shape (dotted SDK form OR normalized base name).
  * Exported for the event pump's progress-event gating (issue #3401). */
 export declare function isV2SubagentToolId(toolName: string | null | undefined): boolean;
+/**
+ * True for the host's Code Mode wrapper (#3446): the host-owned `execute`
+ * tool whose input is a JS program. The host id is matched exactly (no
+ * namespace stripping), and the call must carry a string `code` program.
+ */
+export declare function isV2CodeModeWrapper(event: {
+    readonly tool: string;
+    readonly input?: unknown;
+}): boolean;
 /**
  * Any recognized v2 subagent id (bare, namespace-prefixed, or dotted) is handed
  * to the v1 chain as the bare v1 id `task`. The v1 host reports the native tool

package/dist/host/v2/setup.d.ts

@@ -1,3 +1,16 @@
+/**
+ * Read `full_auto.oversight` once and size the v2 tool.execute.before budget
+ * for this project directory from it (#3446). Bounded and fail-open: on any
+ * error this project's entry is dropped and the module defaults apply (60 s
+ * base; 150 s while a Full-Auto run is active, i.e. the default 120 s
+ * oversight deadline + 30 s) and an operator-visible warning is queued,
+ * because a custom `hook_timeout_ms` / `total_timeout_ms` would not apply.
+ */
+declare function deferredV2ConfigureToolBeforeBudget(directory: string, loadConfig?: typeof loadPluginConfigWithMetaAsync): Promise<void>;
+export declare const _internals: {
+    configureToolBeforeBudget: typeof deferredV2ConfigureToolBeforeBudget;
+};
+import { loadPluginConfigWithMetaAsync } from '../../config/loader';
 import type { V1HooksSubset, V2PluginContext } from './types';
 /** Dependencies injected from src/index.ts (avoids an index↔host cycle). */
 export interface V2SetupDependencies {
@@ -24,3 +37,4 @@ export declare function seedV1SessionState(sessionID: string | undefined, agentR
  * be synchronous and cheap).
  */
 export declare function v2ToolInputSchema(args: unknown): unknown;
+export {};