feat(guards): swarm pipeline guardrails for INT-2388 dogfooding defects

[unohee]

What

Behavioral + deterministic guardrails against the systematic swarm orchestrator defects surfaced while reviewing autonomous PRs #201–207 (approve 3 / request-changes 3 / reject 1). Tracks INT-2388.

Scope agreed for this PR: all 6 defects' prompt-side behavior + the two highest-leverage deterministic guards (#5, #6). The heavier greenfield items are split out as follow-ups (see below).

Changes

Prompt rules — worker ## Rules + reviewer criteria (en + ko)

• refactor: rename claude-swarm to OpenSwarm #1 on import/SDK/dependency failure, fix the environment or report a blocker — never re-author a third-party package or spoof its __version__.
• Merge pull request #1 from unohee/feature/src-layer-hierarchy #2 cite the counterparty's real producer/consumer code (file:line, command output) for cross-service/cross-repo contracts; no self-referential tests.
• feat(projectUpdater): PO agent with multi-signal health scoring #4 don't delete existing "verified"/"confirmed" statements without counter-evidence; include a before/after distribution for score/gate/metric changes.
• Reviewer criteria extended with contract integrity, evidence & wiring, scope.

Deterministic guards — pipelineGuards.ts (non-blocking, warning → reviewer)

• deadModuleCheck (Guardrail integration for safe delegation #5): flags a newly-added source module that nothing imports/calls (git-grep by basename, skips tests + generic names). Catches "created but never wired" scaffolding.
• reformatCheck (refactor(tui): simplify pipeline event rendering logic #6): flags reformat-only files (diff vanishes under git diff -w) and oversized diffs (scope creep).
• getWorkingDiffDetail (gitTracker): per-file numstat + new-file / whitespace-only flags. The working tree is the source of truth (worker edits aren't committed until reviewer-approve).
• Non-blocking guard warnings are now surfaced to the reviewer (ReviewerOptions.guardWarnings → worker report), instead of dying in a log line.

Wiring

• PipelineGuardsConfig.deadModuleCheck / .reformatCheck (types + zod schema), enabled in config.example.yaml.

Tests

• pipelineGuards.test.ts (new): dead-module flag / no-flag-when-imported / ignore-tests / skip-generic; reformat-only / semantic / oversized; disabled path.
• gitTracker.test.ts: getWorkingDiffDetail added/deleted, isNew, whitespaceOnly, non-git dir.
• prompts.test.ts: asserts the new worker rules + reviewer criteria (en + ko mirror).
• Full suite green: 1439 tests, 130 files. lint + typecheck + build clean.

Out of scope — follow-up issues to file

• refactor: rename claude-swarm to OpenSwarm #1 canonical-package registry (which repo owns a symbol) — greenfield, no prior art.
• Merge pull request #1 from unohee/feature/src-layer-hierarchy #2 deterministic contract verification — hard to check mechanically; prompt-only here.
• #3 orchestrator file-overlap serialization + PR-overlap report (autonomousRunner/conflictDetector/worktreeManager) — separate subsystem.

🤖 Generated with Claude Code