opencode-swarm 7.63.0 → 7.65.0

package/dist/config/schema.d.ts

@@ -607,6 +607,7 @@ export declare const ArchitecturalSupervisionConfigSchema: z.ZodObject<{
     max_phase_summary_words: z.ZodDefault<z.ZodNumber>;
     allow_concerns_to_complete: z.ZodDefault<z.ZodBoolean>;
     persist_knowledge_recommendations: z.ZodDefault<z.ZodBoolean>;
+    provenance_verify: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ArchitecturalSupervisionConfig = z.infer<typeof ArchitecturalSupervisionConfigSchema>;
 export declare const KnowledgeApplicationConfigSchema: z.ZodObject<{
@@ -962,6 +963,163 @@ export declare const TurboConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strip>;
 }, z.core.$strip>], "strategy">;
 export type TurboConfig = z.infer<typeof TurboConfigSchema>;
+/** Where an external skill candidate was discovered. */
+export declare const ExternalSkillCandidateSourceTypeSchema: z.ZodEnum<{
+    github: "github";
+    url: "url";
+    collection: "collection";
+    manual_import: "manual_import";
+}>;
+export type ExternalSkillCandidateSourceType = z.infer<typeof ExternalSkillCandidateSourceTypeSchema>;
+/** Evaluation verdict for an external skill candidate. */
+export declare const ExternalSkillCandidateEvaluationVerdictSchema: z.ZodEnum<{
+    pending: "pending";
+    in_review: "in_review";
+    quarantined: "quarantined";
+    passed: "passed";
+    rejected: "rejected";
+    promoted: "promoted";
+    revoked: "revoked";
+}>;
+export type ExternalSkillCandidateEvaluationVerdict = z.infer<typeof ExternalSkillCandidateEvaluationVerdictSchema>;
+/** A single discovery source that feeds candidates into the quarantine store. */
+export declare const DiscoverySourceSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        github: "github";
+        url: "url";
+        collection: "collection";
+        manual_import: "manual_import";
+    }>;
+    location: z.ZodString;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    trust_level: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>>>;
+}, z.core.$strip>;
+export type DiscoverySource = z.infer<typeof DiscoverySourceSchema>;
+/**
+ * A quarantined or evaluated external skill candidate awaiting promotion.
+ * Stored in `.swarm/external-skills/` with content-addressable naming.
+ */
+export declare const ExternalSkillCandidateSchema: z.ZodObject<{
+    id: z.ZodString;
+    source_url: z.ZodString;
+    source_type: z.ZodEnum<{
+        github: "github";
+        url: "url";
+        collection: "collection";
+        manual_import: "manual_import";
+    }>;
+    publisher: z.ZodString;
+    sha256: z.ZodString;
+    fetched_at: z.ZodString;
+    skill_name: z.ZodOptional<z.ZodString>;
+    skill_description: z.ZodOptional<z.ZodString>;
+    skill_body: z.ZodString;
+    risk_flags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    evaluation_verdict: z.ZodDefault<z.ZodEnum<{
+        pending: "pending";
+        in_review: "in_review";
+        quarantined: "quarantined";
+        passed: "passed";
+        rejected: "rejected";
+        promoted: "promoted";
+        revoked: "revoked";
+    }>>;
+    evaluation_history: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        verdict: z.ZodEnum<{
+            pending: "pending";
+            in_review: "in_review";
+            quarantined: "quarantined";
+            passed: "passed";
+            rejected: "rejected";
+            promoted: "promoted";
+            revoked: "revoked";
+        }>;
+        timestamp: z.ZodString;
+        actor: z.ZodString;
+        reason: z.ZodOptional<z.ZodString>;
+        candidate_id: z.ZodOptional<z.ZodString>;
+        original_verdict: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            in_review: "in_review";
+            quarantined: "quarantined";
+            passed: "passed";
+            rejected: "rejected";
+            promoted: "promoted";
+            revoked: "revoked";
+        }>>;
+        gate_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            gate: z.ZodString;
+            verdict: z.ZodString;
+        }, z.core.$strip>>>;
+        risk_assessment: z.ZodOptional<z.ZodObject<{
+            total_flags: z.ZodNumber;
+            findings: z.ZodArray<z.ZodObject<{
+                severity: z.ZodEnum<{
+                    error: "error";
+                    warning: "warning";
+                }>;
+                category: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        risk_flags_count: z.ZodOptional<z.ZodNumber>;
+        provenance_snapshot: z.ZodOptional<z.ZodObject<{
+            sha256: z.ZodString;
+            source_url: z.ZodString;
+            publisher: z.ZodString;
+            fetched_at: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        target_path: z.ZodOptional<z.ZodString>;
+        promoted_content_hash: z.ZodOptional<z.ZodString>;
+        original_evaluation: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type ExternalSkillCandidate = z.infer<typeof ExternalSkillCandidateSchema>;
+/** Top-level configuration block for the external skills subsystem. */
+export declare const ExternalSkillsConfigSchema: z.ZodObject<{
+    curation_enabled: z.ZodDefault<z.ZodBoolean>;
+    max_candidates: z.ZodDefault<z.ZodNumber>;
+    max_bytes_per_candidate: z.ZodDefault<z.ZodNumber>;
+    eviction_policy: z.ZodDefault<z.ZodEnum<{
+        fifo: "fifo";
+    }>>;
+    ttl_days: z.ZodDefault<z.ZodNumber>;
+    evaluation_enabled: z.ZodDefault<z.ZodBoolean>;
+    sources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            github: "github";
+            url: "url";
+            collection: "collection";
+            manual_import: "manual_import";
+        }>;
+        location: z.ZodString;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        trust_level: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>>>;
+    }, z.core.$strip>>>;
+    max_candidates_per_discovery: z.ZodDefault<z.ZodNumber>;
+    max_concurrent_fetches: z.ZodDefault<z.ZodNumber>;
+    fetch_timeout_ms: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type ExternalSkillsConfig = z.infer<typeof ExternalSkillsConfigSchema>;
+/** Default external skills configuration (all subsystems disabled). */
+export declare const DEFAULT_EXTERNAL_SKILLS_CONFIG: ExternalSkillsConfig;
+/**
+ * Resolve the external_skills config section, merging user-provided values
+ * over defaults.  Returns the default (all-disabled) config when
+ * `external_skills` is absent or undefined, ensuring callers never need
+ * null checks.
+ *
+ * Invalid source configs produce warnings via the logger but do NOT block
+ * plugin load (AGENTS.md #1 — fail-open, bounded init).
+ */
+export declare function resolveExternalSkillsConfig(input: unknown): ExternalSkillsConfig;
 export declare const PluginConfigSchema: z.ZodObject<{
     agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         model: z.ZodOptional<z.ZodString>;
@@ -1371,6 +1529,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
         max_phase_summary_words: z.ZodDefault<z.ZodNumber>;
         allow_concerns_to_complete: z.ZodDefault<z.ZodBoolean>;
         persist_knowledge_recommendations: z.ZodDefault<z.ZodBoolean>;
+        provenance_verify: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
     knowledge_application: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
@@ -1623,6 +1782,34 @@ export declare const PluginConfigSchema: z.ZodObject<{
             every_minutes: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
+    external_skills: z.ZodOptional<z.ZodObject<{
+        curation_enabled: z.ZodDefault<z.ZodBoolean>;
+        max_candidates: z.ZodDefault<z.ZodNumber>;
+        max_bytes_per_candidate: z.ZodDefault<z.ZodNumber>;
+        eviction_policy: z.ZodDefault<z.ZodEnum<{
+            fifo: "fifo";
+        }>>;
+        ttl_days: z.ZodDefault<z.ZodNumber>;
+        evaluation_enabled: z.ZodDefault<z.ZodBoolean>;
+        sources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                github: "github";
+                url: "url";
+                collection: "collection";
+                manual_import: "manual_import";
+            }>;
+            location: z.ZodString;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            trust_level: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                low: "low";
+                medium: "medium";
+                high: "high";
+            }>>>;
+        }, z.core.$strip>>>;
+        max_candidates_per_discovery: z.ZodDefault<z.ZodNumber>;
+        max_concurrent_fetches: z.ZodDefault<z.ZodNumber>;
+        fetch_timeout_ms: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type PluginConfig = z.infer<typeof PluginConfigSchema>;
 export type { AgentName, PipelineAgentName, QAAgentName, } from './constants';

package/dist/hooks/knowledge-store.d.ts

@@ -24,6 +24,7 @@ export declare function appendKnowledge<T>(filePath: string, entry: T): Promise<
 export declare function rewriteKnowledge<T>(filePath: string, entries: T[]): Promise<void>;
 export declare function transactFile<T>(filePath: string, read: (filePath: string) => Promise<T>, write: (filePath: string, data: T) => Promise<void>, mutate: (data: T) => T | null): Promise<boolean>;
 export declare function transactKnowledge<T>(filePath: string, mutate: (entries: T[]) => T[] | null): Promise<boolean>;
+export declare function appendKnowledgeWithCapEnforcement<T>(filePath: string, entry: T, maxEntries: number): Promise<boolean>;
 export declare function enforceKnowledgeCap<T>(filePath: string, maxEntries: number): Promise<void>;
 export interface SweepResult {
     scanned: number;
@@ -34,7 +35,7 @@ export interface SweepResult {
 }
 export declare function sweepAgedEntries<T extends KnowledgeEntryBase>(filePath: string, defaultMaxPhases: number): Promise<SweepResult>;
 export declare function sweepStaleTodos<T extends KnowledgeEntryBase>(filePath: string, todoMaxPhases: number): Promise<SweepResult>;
-export declare function appendRejectedLesson(directory: string, lesson: RejectedLesson): Promise<void>;
+export declare function appendRejectedLesson(directory: string, lesson: RejectedLesson, maxEntries?: number): Promise<void>;
 export declare function normalize(text: string): string;
 export declare function wordBigrams(text: string): Set<string>;
 export declare function jaccardBigram(a: Set<string>, b: Set<string>): number;

package/dist/hooks/knowledge-validator.d.ts

@@ -27,6 +27,11 @@ export interface ActionableValidationResult {
 }
 /** Validate a generated_skill_path: must be repo-local and under an allowed prefix. */
 export declare function validateSkillPath(p: unknown): boolean;
+/**
+ * Validate that a path is a valid candidate storage path under `.swarm/skills/candidates/`.
+ * The filename must be a UUID v4 (canonical, no braces) with `.json` extension.
+ */
+export declare function validateSkillCandidatePath(p: unknown): boolean;
 /** Validate the optional ActionableDirectiveFields block on a knowledge entry. */
 export declare function validateActionableFields(fields: ActionableDirectiveFields | undefined): ActionableValidationResult;
 export type { ActionableDirectiveFields, DirectivePriority };