opencode-swarm 7.64.0 → 7.65.0

package/dist/cli/index.js

@@ -52,7 +52,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.64.0",
+    version: "7.65.0",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -18518,7 +18518,8 @@ var init_schema = __esm(() => {
     max_agent_summary_words: exports_external.number().int().min(20).max(500).default(100),
     max_phase_summary_words: exports_external.number().int().min(50).max(1000).default(250),
     allow_concerns_to_complete: exports_external.boolean().default(true),
-    persist_knowledge_recommendations: exports_external.boolean().default(false)
+    persist_knowledge_recommendations: exports_external.boolean().default(false),
+    provenance_verify: exports_external.boolean().default(false)
   });
   KnowledgeApplicationConfigSchema = exports_external.object({
     enabled: exports_external.boolean().default(true),
@@ -37126,13 +37127,12 @@ async function enforceKnowledgeCap(filePath, maxEntries) {
     return entries.slice(entries.length - maxEntries);
   });
 }
-async function appendRejectedLesson(directory, lesson) {
+async function appendRejectedLesson(directory, lesson, maxEntries = 20) {
   const filePath = resolveSwarmRejectedPath(directory);
-  const MAX = 20;
   await transactKnowledge(filePath, (existing) => {
     const updated = [...existing, lesson];
-    if (updated.length > MAX) {
-      return updated.slice(updated.length - MAX);
+    if (updated.length > maxEntries) {
+      return updated.slice(updated.length - maxEntries);
     }
     return updated;
   });
@@ -40697,18 +40697,20 @@ async function curateAndStoreSwarm(lessons, projectName, phaseInfo, directory, c
       scope: "global",
       confidence: computeConfidence(0, true)
     };
-    const result = validateLesson(lesson, snapshotPlusNew.map((e) => e.lesson), meta3);
-    if (result.valid === false || result.severity === "error") {
-      const rejectedLesson = {
-        id: crypto.randomUUID(),
-        lesson,
-        rejection_reason: result.reason ?? "unknown",
-        rejected_at: new Date().toISOString(),
-        rejection_layer: result.layer ?? 1
-      };
-      await appendRejectedLesson(directory, rejectedLesson);
-      rejected++;
-      continue;
+    if (config3.validation_enabled !== false) {
+      const result = validateLesson(lesson, snapshotPlusNew.map((e) => e.lesson), meta3);
+      if (result.valid === false || result.severity === "error") {
+        const rejectedLesson = {
+          id: crypto.randomUUID(),
+          lesson,
+          rejection_reason: result.reason ?? "unknown",
+          rejected_at: new Date().toISOString(),
+          rejection_layer: result.layer ?? 1
+        };
+        await appendRejectedLesson(directory, rejectedLesson, config3.rejected_max_entries);
+        rejected++;
+        continue;
+      }
     }
     const duplicate = findNearDuplicate(lesson, snapshotPlusNew, config3.dedup_threshold);
     if (duplicate) {

package/dist/config/schema.d.ts

@@ -607,6 +607,7 @@ export declare const ArchitecturalSupervisionConfigSchema: z.ZodObject<{
     max_phase_summary_words: z.ZodDefault<z.ZodNumber>;
     allow_concerns_to_complete: z.ZodDefault<z.ZodBoolean>;
     persist_knowledge_recommendations: z.ZodDefault<z.ZodBoolean>;
+    provenance_verify: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ArchitecturalSupervisionConfig = z.infer<typeof ArchitecturalSupervisionConfigSchema>;
 export declare const KnowledgeApplicationConfigSchema: z.ZodObject<{
@@ -1528,6 +1529,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
         max_phase_summary_words: z.ZodDefault<z.ZodNumber>;
         allow_concerns_to_complete: z.ZodDefault<z.ZodBoolean>;
         persist_knowledge_recommendations: z.ZodDefault<z.ZodBoolean>;
+        provenance_verify: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
     knowledge_application: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;

package/dist/hooks/knowledge-store.d.ts

@@ -24,6 +24,7 @@ export declare function appendKnowledge<T>(filePath: string, entry: T): Promise<
 export declare function rewriteKnowledge<T>(filePath: string, entries: T[]): Promise<void>;
 export declare function transactFile<T>(filePath: string, read: (filePath: string) => Promise<T>, write: (filePath: string, data: T) => Promise<void>, mutate: (data: T) => T | null): Promise<boolean>;
 export declare function transactKnowledge<T>(filePath: string, mutate: (entries: T[]) => T[] | null): Promise<boolean>;
+export declare function appendKnowledgeWithCapEnforcement<T>(filePath: string, entry: T, maxEntries: number): Promise<boolean>;
 export declare function enforceKnowledgeCap<T>(filePath: string, maxEntries: number): Promise<void>;
 export interface SweepResult {
     scanned: number;
@@ -34,7 +35,7 @@ export interface SweepResult {
 }
 export declare function sweepAgedEntries<T extends KnowledgeEntryBase>(filePath: string, defaultMaxPhases: number): Promise<SweepResult>;
 export declare function sweepStaleTodos<T extends KnowledgeEntryBase>(filePath: string, todoMaxPhases: number): Promise<SweepResult>;
-export declare function appendRejectedLesson(directory: string, lesson: RejectedLesson): Promise<void>;
+export declare function appendRejectedLesson(directory: string, lesson: RejectedLesson, maxEntries?: number): Promise<void>;
 export declare function normalize(text: string): string;
 export declare function wordBigrams(text: string): Set<string>;
 export declare function jaccardBigram(a: Set<string>, b: Set<string>): number;

package/dist/index.js

@@ -69,7 +69,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.64.0",
+    version: "7.65.0",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -15849,7 +15849,8 @@ var init_schema = __esm(() => {
     max_agent_summary_words: exports_external.number().int().min(20).max(500).default(100),
     max_phase_summary_words: exports_external.number().int().min(50).max(1000).default(250),
     allow_concerns_to_complete: exports_external.boolean().default(true),
-    persist_knowledge_recommendations: exports_external.boolean().default(false)
+    persist_knowledge_recommendations: exports_external.boolean().default(false),
+    provenance_verify: exports_external.boolean().default(false)
   });
   KnowledgeApplicationConfigSchema = exports_external.object({
     enabled: exports_external.boolean().default(true),
@@ -58633,6 +58634,15 @@ async function transactKnowledge(filePath, mutate) {
     await atomicWriteFile(fp, content);
   }, mutate);
 }
+async function appendKnowledgeWithCapEnforcement(filePath, entry, maxEntries) {
+  return transactKnowledge(filePath, (entries) => {
+    const updated = [...entries, entry];
+    if (updated.length > maxEntries) {
+      return updated.slice(updated.length - maxEntries);
+    }
+    return updated;
+  });
+}
 async function enforceKnowledgeCap(filePath, maxEntries) {
   await transactKnowledge(filePath, (entries) => {
     if (entries.length <= maxEntries)
@@ -58701,13 +58711,12 @@ async function sweepStaleTodos(filePath, todoMaxPhases) {
   });
   return result;
 }
-async function appendRejectedLesson(directory, lesson) {
+async function appendRejectedLesson(directory, lesson, maxEntries = 20) {
   const filePath = resolveSwarmRejectedPath(directory);
-  const MAX = 20;
   await transactKnowledge(filePath, (existing) => {
     const updated = [...existing, lesson];
-    if (updated.length > MAX) {
-      return updated.slice(updated.length - MAX);
+    if (updated.length > maxEntries) {
+      return updated.slice(updated.length - maxEntries);
     }
     return updated;
   });
@@ -63808,18 +63817,20 @@ async function curateAndStoreSwarm(lessons, projectName, phaseInfo, directory, c
       scope: "global",
       confidence: computeConfidence(0, true)
     };
-    const result = validateLesson(lesson, snapshotPlusNew.map((e) => e.lesson), meta3);
-    if (result.valid === false || result.severity === "error") {
-      const rejectedLesson = {
-        id: crypto.randomUUID(),
-        lesson,
-        rejection_reason: result.reason ?? "unknown",
-        rejected_at: new Date().toISOString(),
-        rejection_layer: result.layer ?? 1
-      };
-      await appendRejectedLesson(directory, rejectedLesson);
-      rejected++;
-      continue;
+    if (config3.validation_enabled !== false) {
+      const result = validateLesson(lesson, snapshotPlusNew.map((e) => e.lesson), meta3);
+      if (result.valid === false || result.severity === "error") {
+        const rejectedLesson = {
+          id: crypto.randomUUID(),
+          lesson,
+          rejection_reason: result.reason ?? "unknown",
+          rejected_at: new Date().toISOString(),
+          rejection_layer: result.layer ?? 1
+        };
+        await appendRejectedLesson(directory, rejectedLesson, config3.rejected_max_entries);
+        rejected++;
+        continue;
+      }
     }
     const duplicate = findNearDuplicate(lesson, snapshotPlusNew, config3.dedup_threshold);
     if (duplicate) {
@@ -92672,7 +92683,7 @@ function normalizeAgentWorkSummary(input, maxSummaryWords = MAX_AGENT_SUMMARY_WO
   };
   return AgentWorkSummarySchema.parse(candidate);
 }
-var SUMMARY_SCHEMA_VERSION = "1.0.0", MAX_AGENT_SUMMARY_WORDS = 100, MAX_PHASE_SUMMARY_WORDS = 250, MAX_LIST_ITEMS = 5, SupervisorVerdictSchema, AgentWorkSummarySchema, PhaseArchitectureSummarySchema, SupervisorFindingSchema, KnowledgeRecommendationSchema, ArchitectureSupervisorReportSchema;
+var SUMMARY_SCHEMA_VERSION = "1.0.0", MAX_AGENT_SUMMARY_WORDS = 100, MAX_PHASE_SUMMARY_WORDS = 250, MAX_LIST_ITEMS = 5, SupervisorVerdictSchema, AgentWorkSummarySchema, PhaseArchitectureSummarySchema, SupervisorFindingSchema, KnowledgeRecommendationSchema, EvidenceProvenanceSchema, ArchitectureSupervisorReportSchema;
 var init_schema3 = __esm(() => {
   init_zod();
   SupervisorVerdictSchema = exports_external.enum([
@@ -92726,13 +92737,19 @@ var init_schema3 = __esm(() => {
     confidence: exports_external.number().min(0).max(1).default(0.5),
     evidence_refs: exports_external.array(exports_external.string().min(1)).default([])
   });
+  EvidenceProvenanceSchema = exports_external.object({
+    agent_name: exports_external.string().min(1).optional(),
+    session_id: exports_external.string().min(1).optional(),
+    captured_at: exports_external.string().datetime().optional()
+  });
   ArchitectureSupervisorReportSchema = exports_external.object({
     schema_version: exports_external.literal(SUMMARY_SCHEMA_VERSION),
     phase: exports_external.number().int().min(0).max(999),
     verdict: SupervisorVerdictSchema,
     findings: exports_external.array(SupervisorFindingSchema).default([]),
     knowledge_recommendations: exports_external.array(KnowledgeRecommendationSchema).default([]),
-    created_at: exports_external.string().datetime()
+    created_at: exports_external.string().datetime(),
+    provenance: EvidenceProvenanceSchema.optional()
   });
 });
 
@@ -92824,7 +92841,8 @@ function writeSupervisorReport(directory, report) {
         timestamp: report.created_at,
         verdict: report.verdict,
         findings: report.findings,
-        knowledge_recommendations: report.knowledge_recommendations
+        knowledge_recommendations: report.knowledge_recommendations,
+        ...report.provenance ? { provenance: report.provenance } : {}
       }
     ]
   };
@@ -96961,9 +96979,14 @@ async function readMergedKnowledge(directory, config3, context, opts) {
     } else if (entry.tags.length === 0) {
       keywordsScore = 0.5;
     }
-    const tierBoost = entry.tier === "hive" ? HIVE_TIER_BOOST : 0;
-    const isSameProjectSource = context?.projectName && entry.tier === "hive" && "source_project" in entry && entry.source_project === context.projectName;
-    const sameProjectPenalty = isSameProjectSource ? SAME_PROJECT_PENALTY : 0;
+    let tierBoost = 0;
+    let isSameProject = false;
+    if (entry.tier === "hive" && "source_project" in entry) {
+      const sourceProject = entry.source_project;
+      isSameProject = !!(context?.projectName && sourceProject === context.projectName);
+      tierBoost = HIVE_TIER_BOOST;
+    }
+    const sameProjectPenalty = isSameProject ? DEFAULT_SAME_PROJECT_PENALTY : 0;
     const finalScore = categoryScore * 0.4 + confidenceScore * 0.35 + keywordsScore * 0.25 + tierBoost + sameProjectPenalty;
     const relevanceScore = {
       category: categoryScore,
@@ -97112,7 +97135,7 @@ function scoreDirectiveAgainstContext(entry, ctx) {
     score += 0.1;
   return { triggerHit, actionHit, agentHit, score: Math.min(1, score) };
 }
-var JACCARD_THRESHOLD2 = 0.6, HIVE_TIER_BOOST = 0.05, SAME_PROJECT_PENALTY = -0.05, QUARANTINED_STATUS = "quarantined";
+var JACCARD_THRESHOLD2 = 0.6, HIVE_TIER_BOOST = 0.05, DEFAULT_SAME_PROJECT_PENALTY = -0.05, QUARANTINED_STATUS = "quarantined";
 var init_knowledge_reader = __esm(() => {
   init_task_file();
   init_logger();
@@ -120704,8 +120727,12 @@ var knowledge_add = createSwarmTool({
       hive_eligible: false,
       ...actionable
     };
+    let config3;
+    let dedupThreshold = 0.6;
     try {
-      const { config: config3 } = loadPluginConfigWithMeta(directory);
+      const loaded = loadPluginConfigWithMeta(directory);
+      config3 = loaded.config;
+      dedupThreshold = config3.knowledge?.dedup_threshold ?? 0.6;
       if (config3.knowledge?.validation_enabled !== false) {
         const validation2 = validateLesson(lesson, [], {
           category,
@@ -120722,7 +120749,7 @@ var knowledge_add = createSwarmTool({
     } catch {}
     try {
       const existingEntries = await readKnowledge(resolveSwarmKnowledgePath(directory));
-      const duplicate = findNearDuplicate(lesson, existingEntries, 0.6);
+      const duplicate = findNearDuplicate(lesson, existingEntries, dedupThreshold);
       if (duplicate) {
         return JSON.stringify({
           success: false,
@@ -120747,7 +120774,8 @@ var knowledge_add = createSwarmTool({
       });
     }
     try {
-      await appendKnowledge(resolveSwarmKnowledgePath(directory), entry);
+      const maxEntries = config3?.knowledge?.swarm_max_entries ?? 100;
+      await appendKnowledgeWithCapEnforcement(resolveSwarmKnowledgePath(directory), entry, maxEntries);
     } catch (err2) {
       const message = err2 instanceof Error ? err2.message : "Unknown error";
       return JSON.stringify({
@@ -121283,7 +121311,7 @@ init_zod();
 init_knowledge_store();
 init_create_tool();
 var knowledge_remove = createSwarmTool({
-  description: "Delete an outdated swarm knowledge entry by ID (swarm tier only — does not affect hive). Double-deletion is idempotent — removing a non-existent entry returns a clear message without error.",
+  description: "Delete an outdated swarm knowledge entry by ID (swarm tier only — does not affect hive). Promoted entries cannot be deleted. Double-deletion is idempotent — removing a non-existent entry returns a clear message without error.",
   args: {
     id: exports_external.string().min(1).describe("UUID of the knowledge entry to remove")
   },
@@ -121305,8 +121333,16 @@ var knowledge_remove = createSwarmTool({
     const swarmPath = resolveSwarmKnowledgePath(directory);
     let found = false;
     let remaining = 0;
+    let isPromoted = false;
     try {
       await transactKnowledge(swarmPath, (entries) => {
+        const entryToDelete = entries.find((entry) => entry.id === id);
+        if (!entryToDelete)
+          return null;
+        if (entryToDelete.status === "promoted") {
+          isPromoted = true;
+          return null;
+        }
         const filtered = entries.filter((entry) => entry.id !== id);
         if (filtered.length === entries.length)
           return null;
@@ -121321,6 +121357,12 @@ var knowledge_remove = createSwarmTool({
         error: message
       });
     }
+    if (isPromoted) {
+      return JSON.stringify({
+        success: false,
+        message: "cannot delete promoted entry — this entry has been promoted to cross-project consensus"
+      });
+    }
     if (!found) {
       return JSON.stringify({
         success: false,
@@ -124641,6 +124683,17 @@ Findings: ${details.join("; ")}` : "";
   if (typeof asEntry.phase_number !== "number" || asEntry.phase_number !== phase) {
     return asBlocked("ARCH_SUPERVISOR_PHASE_MISMATCH", `Phase ${phase} cannot be completed: architecture supervisor evidence is for phase ${String(asEntry.phase_number)}, not phase ${phase}.`);
   }
+  const gateWarnings = [];
+  if (asConfig?.provenance_verify === true) {
+    const provenance = asEntry.provenance;
+    if (!provenance || !provenance.agent_name && !provenance.session_id) {
+      return asBlocked("ARCH_SUPERVISOR_MISSING_PROVENANCE", `Phase ${phase} cannot be completed: architecture supervisor evidence lacks provenance (agent_name or session_id). Evidence provenance verification is enabled.`);
+    }
+  } else if (!asEntry.provenance || !asEntry.provenance.agent_name && !asEntry.provenance.session_id) {
+    const msg = `Architecture supervisor evidence lacks provenance for phase ${phase}. Enable 'provenance_verify' in architectural_supervision config to enforce provenance verification.`;
+    gateWarnings.push(msg);
+    safeWarn(`[phase_complete] ${msg}`, undefined);
+  }
   const asVerdict = asEntry.verdict;
   if (asVerdict === "REJECT") {
     return asBlocked("ARCH_SUPERVISOR_REJECTED", `Phase ${phase} cannot be completed: architecture supervisor returned verdict 'REJECT'. Address the system-level findings before completing the phase.${summarizeFindings(asEntry.findings)}`);
@@ -124653,7 +124706,12 @@ Findings: ${details.join("; ")}` : "";
   } else if (asVerdict !== "APPROVE") {
     return asBlocked("ARCH_SUPERVISOR_INVALID", `Phase ${phase} cannot be completed: architecture supervisor evidence contains unrecognized verdict '${String(asVerdict)}'. Expected one of: APPROVE, CONCERNS, REJECT.`);
   }
-  return { blocked: false, agentsDispatched, agentsMissing: [], warnings: [] };
+  return {
+    blocked: false,
+    agentsDispatched,
+    agentsMissing: [],
+    warnings: gateWarnings
+  };
 }
 // src/tools/phase-complete/gates/completion-verify-gate.ts
 async function runCompletionVerifyGate(ctx) {
@@ -124698,6 +124756,7 @@ import * as fs106 from "node:fs";
 import * as path153 from "node:path";
 async function runDriftGate(ctx) {
   const { phase, dir, sessionID, agentsDispatched, safeWarn } = ctx;
+  const gateWarnings = [];
   let driftCheckEnabled = true;
   let driftHasEffectiveSpec = false;
   try {
@@ -124757,6 +124816,11 @@ async function runDriftGate(ctx) {
       for (const entry of entries) {
         if (typeof entry.type === "string" && entry.type.includes("drift") && typeof entry.verdict === "string") {
           driftVerdictFound = true;
+          if (!entry.provenance || !entry.provenance.agent_name && !entry.provenance.session_id) {
+            const msg = `Drift verification evidence lacks provenance for phase ${phase}. Evidence should include agent_name or session_id for verification.`;
+            gateWarnings.push(msg);
+            safeWarn(`[phase_complete] ${msg}`, undefined);
+          }
           if (entry.verdict === "approved") {
             driftVerdictApproved = true;
           }
@@ -124847,7 +124911,7 @@ async function runDriftGate(ctx) {
       blocked: false,
       agentsDispatched,
       agentsMissing: [],
-      warnings: []
+      warnings: gateWarnings
     };
   } catch (driftError) {
     return {
@@ -125179,6 +125243,7 @@ import * as fs110 from "node:fs";
 import * as path157 from "node:path";
 async function runPhaseCouncilGate(ctx) {
   const { phase, dir, sessionID, pluginConfig, agentsDispatched, safeWarn } = ctx;
+  const gateWarnings = [];
   let councilModeEnabled = false;
   try {
     const plan = await loadPlan(dir);
@@ -125240,6 +125305,11 @@ async function runPhaseCouncilGate(ctx) {
                     warnings: []
                   };
                 }
+                if (!entry.provenance || !entry.provenance.agent_name && !entry.provenance.session_id) {
+                  const msg = `Phase council evidence lacks provenance for phase ${phase}. Evidence should include agent_name or session_id for verification.`;
+                  gateWarnings.push(msg);
+                  safeWarn(`[phase_complete] ${msg}`, undefined);
+                }
                 if (entry.verdict === "REJECT" || entry.verdict === "reject") {
                   const requiredFixes = entry.requiredFixes ?? entry.required_fixes ?? [];
                   const fixesDetail = Array.isArray(requiredFixes) && requiredFixes.length > 0 ? `
@@ -125358,7 +125428,12 @@ Advisory notes: ${advisoryNotes.join("; ")}` : "";
       safeWarn(`[phase_complete] Phase council gate error (non-blocking):`, pcError);
     }
   }
-  return { blocked: false, agentsDispatched, agentsMissing: [], warnings: [] };
+  return {
+    blocked: false,
+    agentsDispatched,
+    agentsMissing: [],
+    warnings: gateWarnings
+  };
 }
 // src/tools/phase-complete.ts
 init_resolve_working_directory();
@@ -133737,7 +133812,9 @@ var ArgsSchema4 = exports_external.object({
   phaseSummary: exports_external.string().min(1),
   roundNumber: exports_external.number().int().min(1).max(10).optional(),
   verdicts: exports_external.array(VerdictSchema2).min(1).max(5),
-  working_directory: exports_external.string().optional()
+  working_directory: exports_external.string().optional(),
+  provenanceAgentName: exports_external.string().min(1).optional(),
+  provenanceSessionId: exports_external.string().min(1).optional()
 });
 var submit_phase_council_verdicts = createSwarmTool({
   description: "Submit pre-collected council member verdicts for PHASE-LEVEL synthesis. " + "PREREQUISITE — you MUST dispatch each council member (critic, reviewer, sme, " + "test_engineer, explorer) as separate Agent tasks with PHASE-SCOPED context and " + "collect their verdict responses BEFORE calling this tool. This tool performs " + "synthesis only — it does NOT dispatch, invoke, or contact council members. " + "Writes .swarm/evidence/{phase}/phase-council.json which is required by " + "phase_complete Gate 5 when phase_council is enabled. " + "Architect-only. Config-gated via council.enabled.",
@@ -133768,7 +133845,9 @@ var submit_phase_council_verdicts = createSwarmTool({
       criteriaUnmet: exports_external.array(exports_external.string()),
       durationMs: exports_external.number()
     })).min(1).max(5).describe("Collected CouncilMemberVerdict objects from all dispatched council members"),
-    working_directory: exports_external.string().optional().describe("Working directory where the plan is located")
+    working_directory: exports_external.string().optional().describe("Working directory where the plan is located"),
+    provenanceAgentName: exports_external.string().min(1).optional().describe("Agent name that produced this evidence (optional provenance)"),
+    provenanceSessionId: exports_external.string().min(1).optional().describe("Session ID of the agent that produced this evidence (optional provenance)")
   },
   async execute(args2, directory) {
     const parsed = ArgsSchema4.safeParse(args2);
@@ -133848,7 +133927,12 @@ var submit_phase_council_verdicts = createSwarmTool({
         message: `Phase council returned CONCERNS with ${synthesis.blockingConcernsCount} HIGH/CRITICAL finding(s) promoted to requiredFixes. These must be resolved before the phase can complete. Do NOT write evidence or proceed — address every requiredFix and resubmit.`
       }, null, 2);
     }
-    writePhaseCouncilEvidence(workingDir, synthesis);
+    const provenance = input.provenanceAgentName || input.provenanceSessionId ? {
+      agent_name: input.provenanceAgentName,
+      session_id: input.provenanceSessionId,
+      captured_at: new Date().toISOString()
+    } : undefined;
+    writePhaseCouncilEvidence(workingDir, synthesis, provenance);
     return JSON.stringify({
       success: true,
       overallVerdict: synthesis.overallVerdict,
@@ -133931,7 +134015,7 @@ function getPhaseMutationGapFinding(phaseNumber, workingDir) {
     };
   }
 }
-function writePhaseCouncilEvidence(workingDir, synthesis) {
+function writePhaseCouncilEvidence(workingDir, synthesis, provenance) {
   const evidenceDir = path173.join(workingDir, ".swarm", "evidence", String(synthesis.phaseNumber));
   mkdirSync42(evidenceDir, { recursive: true });
   const evidenceFile = path173.join(evidenceDir, "phase-council.json");
@@ -133961,7 +134045,8 @@ function writePhaseCouncilEvidence(workingDir, synthesis) {
           evidence: finding.evidence
         })),
         roundNumber: synthesis.roundNumber,
-        allCriteriaMet: synthesis.allCriteriaMet
+        allCriteriaMet: synthesis.allCriteriaMet,
+        ...provenance ? { provenance } : {}
       }
     ]
   };
@@ -136791,7 +136876,9 @@ var ArgsSchema7 = exports_external.object({
   verdict: exports_external.enum(["APPROVE", "CONCERNS", "REJECT"]),
   findings: exports_external.array(FindingSchema2).default([]),
   knowledge_recommendations: exports_external.array(KnowledgeRecommendationSchema2).default([]),
-  working_directory: exports_external.string().optional()
+  working_directory: exports_external.string().optional(),
+  provenance_agent_name: exports_external.string().min(1).optional(),
+  provenance_session_id: exports_external.string().min(1).optional()
 });
 var write_architecture_supervisor_evidence = createSwarmTool({
   description: "Persist the architecture supervisor verdict for a phase. PREREQUISITE: dispatch " + "critic_architecture_supervisor as an Agent task with the phase + agent summaries, " + "collect its strict-JSON verdict (verdict/findings/knowledge_recommendations), then " + "call this tool with those values. Writes .swarm/evidence/{phase}/" + "architecture-supervisor.json. This tool persists only — it does not contact the " + "supervisor. Architect-only; config-gated via architectural_supervision.enabled.",
@@ -136800,7 +136887,9 @@ var write_architecture_supervisor_evidence = createSwarmTool({
     verdict: exports_external.enum(["APPROVE", "CONCERNS", "REJECT"]).describe("Supervisor verdict."),
     findings: exports_external.array(FindingSchema2).optional().describe("System-level findings from the supervisor."),
     knowledge_recommendations: exports_external.array(KnowledgeRecommendationSchema2).optional().describe("Durable lessons proposed by the supervisor."),
-    working_directory: exports_external.string().optional()
+    working_directory: exports_external.string().optional(),
+    provenance_agent_name: exports_external.string().min(1).optional().describe("Agent name that produced this evidence (optional provenance)."),
+    provenance_session_id: exports_external.string().min(1).optional().describe("Session ID of the agent that produced this evidence (optional provenance).")
   },
   execute: async (rawArgs, directory) => {
     const parsed = ArgsSchema7.safeParse(rawArgs);
@@ -136819,13 +136908,19 @@ var write_architecture_supervisor_evidence = createSwarmTool({
     if (!dirResult.success) {
       return JSON.stringify({ success: false, reason: dirResult.message }, null, 2);
     }
+    const provenance = args2.provenance_agent_name || args2.provenance_session_id ? {
+      agent_name: args2.provenance_agent_name,
+      session_id: args2.provenance_session_id,
+      captured_at: new Date().toISOString()
+    } : undefined;
     const report = {
       schema_version: SUMMARY_SCHEMA_VERSION,
       phase: args2.phase,
       verdict: args2.verdict,
       findings: args2.findings,
       knowledge_recommendations: args2.knowledge_recommendations,
-      created_at: new Date().toISOString()
+      created_at: new Date().toISOString(),
+      ...provenance ? { provenance } : {}
     };
     const evidencePath = writeSupervisorReport(dirResult.directory, report);
     let knowledgeProposed = 0;
@@ -136918,12 +137013,18 @@ async function executeWriteDriftEvidence(args2, directory) {
     }, null, 2);
   }
   const normalizedVerdict = normalizeVerdict(args2.verdict);
+  const provenance = args2.provenanceAgentName || args2.provenanceSessionId ? {
+    agent_name: args2.provenanceAgentName,
+    session_id: args2.provenanceSessionId,
+    captured_at: new Date().toISOString()
+  } : undefined;
   const evidenceEntry = {
     type: "drift-verification",
     verdict: normalizedVerdict,
     summary: summary.trim(),
     timestamp: new Date().toISOString(),
-    requirementCoverage: args2.requirementCoverage
+    requirementCoverage: args2.requirementCoverage,
+    ...provenance ? { provenance } : {}
   };
   const evidenceContent = {
     entries: [evidenceEntry]
@@ -137014,7 +137115,9 @@ var write_drift_evidence = createSwarmTool({
     phase: exports_external.number().int().min(1).describe("The phase number for the drift verification (e.g., 1, 2, 3)"),
     verdict: exports_external.enum(["APPROVED", "NEEDS_REVISION"]).describe("Verdict of the drift verification: 'APPROVED' or 'NEEDS_REVISION'"),
     summary: exports_external.string().describe("Human-readable summary of the drift verification"),
-    requirementCoverage: exports_external.string().optional().describe("Requirement coverage report from req_coverage tool (JSON string)")
+    requirementCoverage: exports_external.string().optional().describe("Requirement coverage report from req_coverage tool (JSON string)"),
+    provenanceAgentName: exports_external.string().min(1).optional().describe("Agent name that produced this evidence (optional provenance)"),
+    provenanceSessionId: exports_external.string().min(1).optional().describe("Session ID of the agent that produced this evidence (optional provenance)")
   },
   execute: async (args2, directory) => {
     const rawPhase = args2.phase !== undefined ? Number(args2.phase) : 0;
@@ -137023,7 +137126,9 @@ var write_drift_evidence = createSwarmTool({
         phase: Number(args2.phase),
         verdict: String(args2.verdict),
         summary: String(args2.summary ?? ""),
-        requirementCoverage: args2.requirementCoverage !== undefined ? String(args2.requirementCoverage) : undefined
+        requirementCoverage: args2.requirementCoverage !== undefined ? String(args2.requirementCoverage) : undefined,
+        provenanceAgentName: args2.provenanceAgentName !== undefined ? String(args2.provenanceAgentName) : undefined,
+        provenanceSessionId: args2.provenanceSessionId !== undefined ? String(args2.provenanceSessionId) : undefined
       };
       return await executeWriteDriftEvidence(writeDriftEvidenceArgs, directory);
     } catch (error93) {
@@ -137571,9 +137676,22 @@ var TOOL_MANIFEST = defineHandlers({
 });
 
 // src/tools/plugin-registration.ts
-function buildPluginToolObject(agents) {
+function buildPluginToolObject(agents, config3) {
   const tools = {};
+  const knowledgeEnabled = config3?.knowledge?.enabled !== false;
+  const knowledgeTools = new Set([
+    "knowledge_add",
+    "knowledge_recall",
+    "knowledge_remove",
+    "knowledge_query",
+    "knowledge_ack",
+    "knowledge_receipt",
+    "knowledge_archive"
+  ]);
   for (const [name2, handler] of Object.entries(TOOL_MANIFEST)) {
+    if (!knowledgeEnabled && knowledgeTools.has(name2)) {
+      continue;
+    }
     tools[name2] = handler();
   }
   tools.swarm_command = createSwarmCommandTool(agents);
@@ -137988,7 +138106,7 @@ async function initializeOpenCodeSwarm(ctx) {
   return {
     name: "opencode-swarm",
     agent: agents,
-    tool: buildPluginToolObject(agentDefinitionMap),
+    tool: buildPluginToolObject(agentDefinitionMap, config3),
     event: safeHook(backgroundCompletionObserver.event),
     config: async (opencodeConfig) => {
       const isObjectRecord = (value) => typeof value === "object" && value !== null;

package/dist/summaries/schema.d.ts

@@ -115,6 +115,16 @@ export declare const KnowledgeRecommendationSchema: z.ZodObject<{
     evidence_refs: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type KnowledgeRecommendation = z.infer<typeof KnowledgeRecommendationSchema>;
+/**
+ * Provenance metadata for evidence: agent identity, session binding, and capture timestamp.
+ * Optional for backwards compatibility; when present and in gate mode, gates verify these fields.
+ */
+export declare const EvidenceProvenanceSchema: z.ZodObject<{
+    agent_name: z.ZodOptional<z.ZodString>;
+    session_id: z.ZodOptional<z.ZodString>;
+    captured_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type EvidenceProvenance = z.infer<typeof EvidenceProvenanceSchema>;
 export declare const ArchitectureSupervisorReportSchema: z.ZodObject<{
     schema_version: z.ZodLiteral<"1.0.0">;
     phase: z.ZodNumber;
@@ -144,5 +154,10 @@ export declare const ArchitectureSupervisorReportSchema: z.ZodObject<{
         evidence_refs: z.ZodDefault<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>>;
     created_at: z.ZodString;
+    provenance: z.ZodOptional<z.ZodObject<{
+        agent_name: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        captured_at: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type ArchitectureSupervisorReport = z.infer<typeof ArchitectureSupervisorReportSchema>;

package/dist/summaries/store.d.ts

@@ -43,6 +43,11 @@ export interface RawSupervisorEntry {
     verdict?: string;
     findings?: unknown[];
     knowledge_recommendations?: unknown[];
+    provenance?: {
+        agent_name?: string;
+        session_id?: string;
+        captured_at?: string;
+    };
 }
 /**
  * Read the supervisor report sidecar raw (no zod), returning the supervisor entry or

package/dist/tools/plugin-registration.d.ts

@@ -10,6 +10,7 @@
  */
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
 import type { AgentDefinition } from '../agents/index.js';
+import type { PluginConfig } from '../config/index.js';
 /**
  * Construct the plugin tool object: one handler per manifest entry, with
  * `swarm_command` overridden by its dependency-injected instance.
@@ -17,5 +18,7 @@ import type { AgentDefinition } from '../agents/index.js';
  * The manifest's `swarm_command` handler is the static (no-DI) form used only
  * for derivation; the real instance needs the agent definition map, which is
  * only available at plugin-init time.
+ *
+ * Knowledge tools are conditionally excluded when config.knowledge.enabled = false.
  */
-export declare function buildPluginToolObject(agents: Record<string, AgentDefinition>): Record<string, ToolDefinition>;
+export declare function buildPluginToolObject(agents: Record<string, AgentDefinition>, config?: PluginConfig): Record<string, ToolDefinition>;

package/dist/tools/submit-phase-council-verdicts.d.ts

@@ -37,5 +37,7 @@ export declare const ArgsSchema: z.ZodObject<{
         durationMs: z.ZodNumber;
     }, z.core.$strip>>;
     working_directory: z.ZodOptional<z.ZodString>;
+    provenanceAgentName: z.ZodOptional<z.ZodString>;
+    provenanceSessionId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const submit_phase_council_verdicts: ReturnType<typeof tool>;

package/dist/tools/write-drift-evidence.d.ts

@@ -16,6 +16,10 @@ export interface WriteDriftEvidenceArgs {
     summary: string;
     /** Requirement coverage report from req_coverage tool */
     requirementCoverage?: string;
+    /** Agent name that produced this evidence (optional provenance) */
+    provenanceAgentName?: string;
+    /** Session ID of the agent that produced this evidence (optional provenance) */
+    provenanceSessionId?: string;
 }
 /**
  * Execute the write_drift_evidence tool.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.64.0",
+	"version": "7.65.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",