crewswarm 0.9.3 → 0.9.4

package/lib/crew-judge/judge.mjs

@@ -150,25 +150,26 @@ function getJudgeModel() {
 
 async function callJudgeModel(model, prompt) {
   // Import LLM caller from crew-lead
-  const { callLLMForText } = await import('../crew-lead/llm-caller.mjs');
-  
+  const { callLLM } = await import('../crew-lead/llm-caller.mjs');
+  const { loadProviderMap } = await import('../runtime/config.mjs');
+
   try {
-    const response = await callLLMForText({
-      provider: model.split('/')[0],
-      model: model.split('/').slice(1).join('/'),
-      messages: [
-        {
-          role: 'system',
-          content: 'You are crew-judge. Return ONLY valid JSON: {"decision": "CONTINUE"|"SHIP"|"RESET", "reasoning": "...", "confidence": 0.0-1.0}'
-        },
-        {
-          role: 'user',
-          content: prompt
-        }
-      ],
-      temperature: 0.3, // Lower temperature for more consistent decisions
-      maxTokens: 500
-    });
+    const providerKey = model.split('/')[0];
+    const modelId = model.split('/').slice(1).join('/');
+    const providerMap = loadProviderMap();
+    const provider = providerMap[providerKey] || null;
+
+    const messages = [
+      {
+        role: 'system',
+        content: 'You are crew-judge. Return ONLY valid JSON: {"decision": "CONTINUE"|"SHIP"|"RESET", "reasoning": "...", "confidence": 0.0-1.0}'
+      },
+      {
+        role: 'user',
+        content: prompt
+      }
+    ];
+    const { reply: response } = await callLLM(messages, { provider, modelId, providerKey }, { temperature: 0.3, maxTokens: 500 });
 
     // Parse JSON response
     const jsonMatch = response.match(/\{[\s\S]*\}/);

package/lib/crew-lead/agent-manager.mjs

@@ -79,7 +79,7 @@ export function createAgent({ id, role, displayName, prompt, description, model
   const defaultOcModel = (() => {
     const existingCoder = swarm.agents.find(a => a.opencodeModel && a.useOpenCode);
     if (existingCoder) return existingCoder.opencodeModel;
-    return process.env.CREWSWARM_OPENCODE_MODEL || "openai/gpt-5.3-codex";
+    return process.env.CREWSWARM_OPENCODE_MODEL || "openai/gpt-5.4";
   })();
 
   const agentEntry = {

package/lib/crew-lead/background.mjs

@@ -28,6 +28,19 @@ const _timeoutLog = [];
 let _lastBgConsciousnessAt = 0;
 let _bgLoopInterval = null;
 
+/** Reset internal state for test isolation. */
+export function resetForTesting() {
+  _agentTimeoutCounts.clear();
+  _timeoutLog.length = 0;
+  _lastBgConsciousnessAt = 0;
+  if (_bgLoopInterval) { clearInterval(_bgLoopInterval); _bgLoopInterval = null; }
+}
+
+/** Stop the background loop interval (prevents process from hanging in tests). */
+export function stopBackgroundLoop() {
+  if (_bgLoopInterval) { clearInterval(_bgLoopInterval); _bgLoopInterval = null; }
+}
+
 export function initBackground({
   broadcastSSE,
   appendHistory,
@@ -267,4 +280,4 @@ export function getRateLimitFallback(agentId) {
   return "crew-main";
 }
 
-export const RATE_LIMIT_PATTERN = /429|rate\s*limit|throttl|quota\s*exceeded|too\s*many\s*requests|resource_exhausted|overloaded/i;
+export const RATE_LIMIT_PATTERN = /429|rate[\s_]*limit|throttl|quota[\s_]*exceeded|too[\s_]*many[\s_]*requests|resource_exhausted|overloaded/i;

package/lib/crew-lead/chat-handler.mjs

@@ -750,7 +750,10 @@ Reply with your answers and I'll turn this into a concrete build plan with file
   // IMPORTANT: Do not gate on keywords only. Casual replies ("yeah no shit", "ok cool")
   // used to skip the snapshot while long contradictory assistant history stayed in context,
   // so the LLM invented swarm-wide offline/online flips. Fetch for substantive messages.
-  const needsHealth = message.trim().length >= 6;
+  // Custom personas (displayName set to something other than default "crew-lead") are
+  // personality/chat personas — they don't need operational system state, skip snapshot.
+  const isCustomPersona = cfg.displayName && cfg.displayName.toLowerCase() !== "crew-lead";
+  const needsHealth = !isCustomPersona && message.trim().length >= 6;
   const needsBenchmarkCatalog =
     message.length > 4 &&
     /benchmark|zeroeval|leaderboard|llm-stats|swe-bench|livecodebench|mmlu|gpqa|humaneval|gsm8k|what\.tests?|which\.tests?|available\.tests?/i.test(

package/lib/crew-lead/http-server.mjs

@@ -8,7 +8,7 @@ import fs from "node:fs";
 import crypto from "node:crypto";
 import path from "node:path";
 import os from "node:os";
-import { spawn } from "node:child_process";
+import { spawn, execFileSync } from "node:child_process";
 import { executeCLI } from "../bridges/cli-executor.mjs";
 import { applySharedChatPromptOverlay } from "../chat/shared-chat-prompt-overlay.mjs";
 import { classifySharedChatMention } from "../chat/mention-routing-intent.mjs";
@@ -60,6 +60,25 @@ function resolveCliBinary(configured, candidates = []) {
   return configured;
 }
 
+function isClaudeOauthAuthenticated() {
+  try {
+    const bin = resolveCliBinary("claude", [
+      path.join(os.homedir(), ".local", "bin", "claude"),
+      "/usr/local/bin/claude",
+      "/opt/homebrew/bin/claude",
+    ]);
+    const output = execFileSync(bin, ["auth", "status"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+    }).trim().toLowerCase();
+    if (!output) return false;
+    if (/"loggedin"\s*:\s*true/.test(output)) return true;
+    return output.includes("logged in");
+  } catch {
+    return false;
+  }
+}
+
 /** Strip SGR / OSC ANSI sequences (OpenCode and CLIs often emit colored TTY junk on stdout). */
 function stripAnsiPassthrough(text) {
   return String(text || "")
@@ -94,6 +113,7 @@ function shouldDropPassthroughStderrLine(engine, line) {
   if (/rmcp::/i.test(l)) return true;
   if (/error decoding response body.*initialized notification/i.test(l))
     return true;
+  if (/\[Executor\]\s+\w+\s+\((OAuth|API)\)/i.test(l)) return true;
   if (
     engine === "codex" &&
     /worker quit with fatal/i.test(l) &&
@@ -3733,7 +3753,7 @@ export function createAndStartServer(PORT) {
           const ocModel =
             reqModel ||
             process.env.CREWSWARM_OPENCODE_MODEL ||
-            "groq/moonshotai/kimi-k2-instruct-0905";
+            "openai/gpt-5.4";
           args = ["run", finalMessage, "--model", ocModel];
           // Add workspace directory context
           if (projectDir) args.push("--dir", projectDir);
@@ -3756,7 +3776,7 @@ export function createAndStartServer(PORT) {
 
           if (priorCodexThread) {
             // `codex resume <thread_id> "prompt"` continues the prior session
-            args = ["resume", priorCodexThread, finalMessage, "--json"];
+            args = ["resume", priorCodexThread, finalMessage];
             if (codexModel) args.push("--model", codexModel);
             if (projectDir) args.push("-C", projectDir);
           } else {
@@ -3806,10 +3826,10 @@ export function createAndStartServer(PORT) {
           const crewCliModel =
             reqModel || process.env.CREWSWARM_CREW_CLI_MODEL || null;
           if (bin.endsWith(".js")) {
-            args = [bin, "chat", finalMessage, "--direct", "--json"];
+            args = [bin, "chat", finalMessage, "--direct", "--json", "--apply"];
             bin = process.execPath;
           } else {
-            args = ["chat", finalMessage, "--direct", "--json"];
+            args = ["chat", finalMessage, "--direct", "--json", "--apply"];
           }
           if (crewCliModel) args.push("--model", crewCliModel);
           if (projectDir && projectDir !== process.cwd())
@@ -3921,6 +3941,25 @@ export function createAndStartServer(PORT) {
             }
           }
         } catch {}
+        // Strip API keys AFTER config merge so CLI tools use OAuth (free) not API credits
+        if (engine === "claude") {
+          delete spawnEnv.ANTHROPIC_API_KEY;
+          delete spawnEnv.CLAUDECODE;
+          delete spawnEnv.CLAUDE_CODE;
+          delete spawnEnv.CREWSWARM_CLAUDE_CODE;
+        }
+        if (engine === "codex") {
+          delete spawnEnv.OPENAI_API_KEY;
+        }
+        if (engine === "gemini" || engine === "gemini-cli") {
+          delete spawnEnv.GEMINI_API_KEY;
+          delete spawnEnv.GOOGLE_API_KEY;
+        }
+        if (engine === "opencode" || engine === "antigravity") {
+          delete spawnEnv.OPENAI_API_KEY;
+          delete spawnEnv.ANTHROPIC_API_KEY;
+          delete spawnEnv.GEMINI_API_KEY;
+        }
         // Force L2 planner for crew-cli when requested (enhance-prompt planner path)
         if (reqForceL2) spawnEnv.CREW_FORCE_L2 = "true";
 
@@ -4229,56 +4268,39 @@ export function createAndStartServer(PORT) {
 
           // crew-cli special handling: extract JSON from output (skipping logs) and send only response field
           if (engine === "crew-cli" && fullOutput.trim()) {
+            let extracted = false;
             try {
-              // crew-cli emits logs before JSON — find the JSON by scanning for the last
-              // line that starts with { and contains "chat.result"
-              const lines = fullOutput.split("\n");
-              let jsonStart = -1;
-              for (let i = lines.length - 1; i >= 0; i--) {
-                if (lines[i].trimStart().startsWith("{") && fullOutput.indexOf('"kind"') >= 0) {
-                  jsonStart = i;
-                  break;
+              // Strategy 1: cross-line regex to find JSON envelope
+              const jsonMatch = fullOutput.match(/\{[\s\S]*"kind":\s*"[^"]+\.result"[\s\S]*\}/);
+              if (jsonMatch) {
+                const parsed = JSON.parse(jsonMatch[0]);
+                if (parsed.response) {
+                  const responseText = typeof parsed.response === "string"
+                    ? parsed.response
+                    : JSON.stringify(parsed.response, null, 2);
+                  console.log(`[crew-cli] ✅ Extracted response: ${responseText.slice(0, 80)}...`);
+                  send({ type: "chunk", text: responseText });
+                  fullOutput = responseText;
+                  extracted = true;
                 }
               }
-              if (jsonStart < 0) {
-                throw new Error("No JSON object found in crew-cli output");
-              }
-              // Collect from jsonStart to end, parse
-              const jsonCandidate = lines.slice(jsonStart).join("\n");
-              let parsed;
+            } catch { /* fall through */ }
+            if (!extracted) {
+              // Strategy 2: regex extract just the response field
               try {
-                parsed = JSON.parse(jsonCandidate);
-              } catch {
-                // Try to find just the response field with regex
-                const respMatch = jsonCandidate.match(/"response":\s*"((?:[^"\\]|\\.)*)"/);
+                const respMatch = fullOutput.match(/"response":\s*"((?:[^"\\]|\\.)*)"/);
                 if (respMatch) {
-                  parsed = { response: respMatch[1].replace(/\\n/g, "\n").replace(/\\"/g, '"') };
-                } else {
-                  throw new Error("Failed to parse crew-cli JSON output");
+                  const responseText = respMatch[1].replace(/\\n/g, "\n").replace(/\\"/g, '"').replace(/\\t/g, "\t");
+                  console.log(`[crew-cli] ✅ Extracted response (regex): ${responseText.slice(0, 80)}...`);
+                  send({ type: "chunk", text: responseText });
+                  fullOutput = responseText;
+                  extracted = true;
                 }
-              }
-              if (parsed.response) {
-                const responseText = typeof parsed.response === 'string'
-                  ? parsed.response
-                  : JSON.stringify(parsed.response, null, 2);
-                console.error(
-                  `[crew-cli] ✅ Extracted response: ${responseText.slice(0, 80)}...`,
-                );
-                // NOW send the actual response as a chunk
-                send({ type: "chunk", text: responseText });
-                fullOutput = responseText; // Replace fullOutput for notifications
-              } else {
-                console.error(`[crew-cli] ⚠️ No response field in JSON`);
-                send({ type: "chunk", text: fullOutput }); // Send raw output as fallback
-              }
-            } catch (err) {
-              console.error(
-                `[crew-cli] ❌ Failed to extract JSON: ${err.message}`,
-              );
-              console.error(
-                `[crew-cli] First 200 chars: ${fullOutput.slice(0, 200)}`,
-              );
-              // Send raw output as fallback
+              } catch { /* fall through */ }
+            }
+            if (!extracted) {
+              console.error(`[crew-cli] ❌ Failed to extract response from crew-cli output`);
+              console.error(`[crew-cli] First 200 chars: ${fullOutput.slice(0, 200)}`);
               send({ type: "chunk", text: fullOutput });
             }
           }
@@ -4536,22 +4558,8 @@ export function createAndStartServer(PORT) {
             );
             enabled = cfg.claudeCode === true;
           } catch { }
-          const hasKey = !!(
-            process.env.ANTHROPIC_API_KEY ||
-            (() => {
-              try {
-                return JSON.parse(
-                  fs.readFileSync(
-                    path.join(os.homedir(), ".crewswarm", "crewswarm.json"),
-                    "utf8",
-                  ),
-                )?.providers?.anthropic?.apiKey;
-              } catch {
-                return null;
-              }
-            })()
-          );
-          json(res, 200, { ok: true, enabled, hasKey });
+          const hasAuth = isClaudeOauthAuthenticated();
+          json(res, 200, { ok: true, enabled, hasKey: hasAuth, hasAuth });
           return;
         }
         if (req.method === "POST") {

package/lib/crew-lead/prompts.mjs

@@ -41,6 +41,12 @@ export function initPrompts({
 let _sysPromptCache = null;
 let _sysPromptKey = "";
 
+/** Clear the system prompt memoization cache (for test isolation). */
+export function resetPromptCache() {
+  _sysPromptCache = null;
+  _sysPromptKey = "";
+}
+
 export function buildSystemPrompt(cfg) {
   // Memoize — only rebuild when config files or agent prompts change
   const keyParts = [cfg.providerKey, cfg.modelId, cfg.displayName];
@@ -137,7 +143,7 @@ export function buildSystemPrompt(cfg) {
     "DEFAULT: CHAT. You are a conversational assistant first.",
     "- Questions, explanations, status, clarifications, follow-ups, 'how does X work', 'what is X', 'can you', 'show me' → ANSWER. Never dispatch.",
     "- Short messages under ~8 words ('i mean X', 'no, X', 'about X') → corrections, not directives. ANSWER.",
-    "- Greetings ('hi', 'yo', 'hey') → reply briefly. No health dump unless asked.",
+    "- Greetings ('hi', 'yo', 'hey', 'hello', 'sup', 'what's up') → reply with 1-2 SHORT sentences. Do NOT report system status, agent counts, RT bus, skills, or health data. Just be conversational. Only report health/status when the user EXPLICITLY asks ('status', 'health', 'how is the system', 'what's running').",
     "- Self-audit requests (find bugs, review, inspect) → DO IT YOURSELF with @@READ_FILE / @@RUN_CMD. No asking permission. Only dispatch to crew-qa/crew-coder if user explicitly says 'have X do it'.",
     "",
     "DISPATCH: when user gives explicit action language.",

package/lib/crew-lead/tools.mjs

@@ -154,10 +154,11 @@ export async function execCrewLeadTools(reply) {
         } catch { return null; }
       })();
       
-      // Fallback: check search-tools.json
+      // Fallback: check search-tools.json (same dir as config file)
       if (!braveKey) {
         try {
-          const searchTools = JSON.parse(fs.readFileSync(path.join(os.homedir(), ".crewswarm", "search-tools.json"), "utf8"));
+          const cfgDir = _crewswarmCfgFile ? path.dirname(_crewswarmCfgFile) : path.join(os.homedir(), ".crewswarm");
+          const searchTools = JSON.parse(fs.readFileSync(path.join(cfgDir, "search-tools.json"), "utf8"));
           braveKey = searchTools.brave?.apiKey;
         } catch {}
       }

package/lib/crew-lead/wave-dispatcher.mjs

@@ -535,10 +535,12 @@ export function checkWaveQualityGate(pipeline, pipelineId) {
       const hasWriteFile = /@@WRITE_FILE/.test(result);
       const wroteFile = /(?:wrote|created|saved|written|updated|enhanced|implemented|added)\s+(?:to\s+)?(?:\/\S+|[a-zA-Z][\w/.-]+\.(?:html|css|js|ts|py|json|md|txt|sh|yaml|yml))/i.test(result);
       const opencodeWrote = /(?:←\s*Write|Wrote file|Write\s+\.\.[\w/.-]+\.(?:html|css|js|ts|py|json|md)|Created\s+`\/)/i.test(result);
+      // Cursor outputs "`filename` is in place at:" or "Created the file at:\n`/path`"
+      const cursorInPlace = /`[\w/.-]+`\s+is\s+in\s+place\s+at|Created\s+the\s+file\s+at:/i.test(result);
       const explicitDone = /Done\.\s+(?:Created|Updated|Enhanced|Implemented|The\s+(?:file|prototype|component))/i.test(result);
       // OpenCode agents write silently — check if any src files changed in last 20 min as fallback
       let opencodeFilesChanged = false;
-      if (!hasWriteFile && !wroteFile && !opencodeWrote && !explicitDone) {
+      if (!hasWriteFile && !wroteFile && !opencodeWrote && !cursorInPlace && !explicitDone) {
         try {
           const cutoff = Date.now() - 20 * 60 * 1000;
           // Use dynamic project directory from pipeline metadata or environment
@@ -565,7 +567,7 @@ export function checkWaveQualityGate(pipeline, pipelineId) {
           opencodeFilesChanged = dirs.some(checkDir);
         } catch {}
       }
-      if (!hasWriteFile && !wroteFile && !opencodeWrote && !explicitDone && !opencodeFilesChanged) {
+      if (!hasWriteFile && !wroteFile && !opencodeWrote && !cursorInPlace && !explicitDone && !opencodeFilesChanged) {
         issues.push(`${agent} (builder) did not write any files`);
       }
     }

package/lib/engines/crew-cli.mjs

@@ -111,7 +111,7 @@ export async function runCrewCLITask(prompt, payload = {}) {
   const engine = await getEngine();
 
   // Create sandbox pointed at the project directory
-  const sandbox = new engine.Sandbox({ baseDir: projectDir });
+  const sandbox = new engine.Sandbox(projectDir);
 
   // Run the agentic executor directly — THINK→ACT→OBSERVE loop with 34 tools
   const result = await engine.runAgenticWorker(prompt, sandbox, {

package/lib/engines/engine-registry.mjs

@@ -154,15 +154,9 @@ function evaluateShouldUse(engineDef, payload, incomingType) {
  * Select engine: payload flags → payload runtime → per-agent crewswarm.json → fallback rules
  */
 export function selectEngine(payload, incomingType) {
-  // PRIORITY 0: Chat messages always use direct LLM, not CLI engines.
-  // CLI engines (claude-code, cursor, codex, etc.) are only for coding tasks.
-  // The agent's configured model handles conversational replies directly.
   const prompt = payload?.prompt || payload?.task || payload?.message || "";
-  if (!isCodingTask(incomingType, prompt, payload)) {
-    return null;
-  }
 
-  // PRIORITY 1: Payload flags (from enriched task)
+  // PRIORITY 1: Payload flags (from enriched task) — always respected regardless of prompt content
   const explicitEngines = [
     { key: 'useCodex', id: 'codex' },
     { key: 'useCursor', id: 'cursor' },
@@ -195,7 +189,9 @@ export function selectEngine(payload, incomingType) {
     }
   }
 
-  // PRIORITY 2.3: Per-agent engine from crewswarm.json (`engine` + use* flags), not global env alone
+  // PRIORITY 2.3: Per-agent engine from crewswarm.json (`engine` + use* flags) — always respected.
+  // Agents that explicitly opt into an engine (useGeminiCli, useClaudeCode, etc.) should always
+  // use it, even for non-coding prompts like "reply with exactly X".
   const preferredFromCfg = resolveAgentPreferredEngineId(payload);
   if (preferredFromCfg) {
     const preferredEngine = _engines.find((e) => e.id === preferredFromCfg);
@@ -204,7 +200,13 @@ export function selectEngine(payload, incomingType) {
     }
   }
 
-  // PRIORITY 2.5: If agent explicitly opted out of ALL CLI engines, skip fallback — use direct LLM
+  // PRIORITY 2.5: Chat messages and non-coding tasks always use direct LLM for fallback routing.
+  // Only applies when no explicit engine was configured above.
+  if (!isCodingTask(incomingType, prompt, payload)) {
+    return null;
+  }
+
+  // PRIORITY 2.6: If agent explicitly opted out of ALL CLI engines, skip fallback — use direct LLM
   const agentId = String(payload?.agentId || payload?.agent || "").toLowerCase();
   if (agentId && _loadAgentList) {
     try {

package/lib/engines/runners.mjs

@@ -27,6 +27,19 @@ function which(bin) {
   try { execSync(`which ${bin}`, { stdio: "ignore" }); return true; } catch { return false; }
 }
 
+function isClaudeOauthAuthenticated() {
+  try {
+    const output = execSync(`${CLAUDE_CODE_BIN} auth status`, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] })
+      .trim()
+      .toLowerCase();
+    if (!output) return false;
+    if (/"loggedin"\s*:\s*true/.test(output)) return true;
+    return output.includes("logged in");
+  } catch {
+    return false;
+  }
+}
+
 // ── Module-level deps (injected via initRunners) ───────────────────────────
 let _getAgentOpenCodeConfig = () => ({ enabled: false, useCursorCli: false, cursorCliModel: null, claudeCodeModel: null });
 let _loadAgentList = () => [];
@@ -1076,7 +1089,7 @@ export async function runDockerSandboxTask(prompt, payload = {}) {
 
     let innerArgs;
     if (innerEngine === "opencode") {
-      innerArgs = ["opencode", "run", titledPrompt, "--model", process.env.CREWSWARM_OPENCODE_MODEL || "anthropic/claude-sonnet-4-5"];
+      innerArgs = ["opencode", "run", titledPrompt, "--model", process.env.CREWSWARM_OPENCODE_MODEL || "openai/gpt-5.4"];
     } else if (innerEngine === "codex") {
       innerArgs = ["codex", "exec", "--sandbox", "workspace-write", "--json", titledPrompt];
     } else {
@@ -1214,15 +1227,23 @@ export async function runClaudeCodeTask(prompt, payload = {}) {
     if (!which(CLAUDE_CODE_BIN)) {
       throw new Error(`Claude Code CLI not found: "${CLAUDE_CODE_BIN}". Install with: npm i -g @anthropic-ai/claude-code`);
     }
+    if (!isClaudeOauthAuthenticated()) {
+      console.error(`[ClaudeCode:${agentId}] auth preflight reported logged out; continuing and letting Claude decide at runtime.`);
+    }
 
     console.error(`[ClaudeCode:${agentId}] Running: ${CLAUDE_CODE_BIN} -p --dangerously-skip-permissions (cwd=${projectDir})`);
 
     _rtClientForApprovals?.publish({ channel: "events", type: "agent_working", to: "broadcast",
       payload: { agent: agentId, model: model || "claude/auto", ts: Date.now() } });
 
+    const childEnv = { ...process.env };
+    delete childEnv.ANTHROPIC_API_KEY;
+    delete childEnv.CLAUDECODE;
+    delete childEnv.CLAUDE_CODE;
+
     const child = spawn(CLAUDE_CODE_BIN, args, {
       cwd: projectDir,
-      env: process.env,
+      env: childEnv,
       stdio: ["ignore", "pipe", "pipe"],  // Changed from "pipe" to "ignore" for stdin since we use args
     });
 

package/lib/gemini-cli-passthrough-noise.mjs

@@ -33,5 +33,5 @@ export function filterGeminiPassthroughTextChunk(engine, text) {
   if (engine !== "gemini" && engine !== "gemini-cli") return String(text ?? "");
   const s = String(text ?? "");
   if (!s) return s;
-  return s.split("\n").filter((ln) => !shouldSkipGeminiPassthroughLine(ln)).join("\n");
+  return s.split("\n").filter((ln) => !shouldSkipGeminiPassthroughLine(ln)).map((ln) => ln.replace(/\r$/, "")).join("\n");
 }

package/lib/integrations/code-search.mjs

@@ -198,7 +198,8 @@ export function formatSearchResults(searchResults, maxChars = 4000) {
  */
 export async function findFiles(pattern, projectDir = process.cwd()) {
   try {
-    const output = execSync(`rg --files | rg "${pattern}"`, {
+    const safePattern = pattern.replace(/["`$\\]/g, '\\$&');
+    const output = execSync(`rg --files | rg "${safePattern}"`, {
       cwd: projectDir,
       encoding: 'utf8',
       stdio: ['pipe', 'pipe', 'ignore']
@@ -247,7 +248,7 @@ export async function findFunctions(name, projectDir = process.cwd()) {
   // Escape special regex characters in name
   const escapedName = name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
   const pattern = `(function|const|let|export)\\s+${escapedName}`;
-  return await searchPattern(pattern, projectDir, { fileTypes: ['js', 'ts', 'mjs'] });
+  return await searchPattern(pattern, projectDir, { fileTypes: ['js', 'ts'] });
 }
 
 /**
@@ -255,5 +256,5 @@ export async function findFunctions(name, projectDir = process.cwd()) {
  */
 export async function findClasses(name, projectDir = process.cwd()) {
   const pattern = `class\\s+${name}\\s*[{(]`;
-  return await searchPattern(pattern, projectDir, { fileTypes: ['js', 'ts', 'mjs'] });
+  return await searchPattern(pattern, projectDir, { fileTypes: ['js', 'ts'] });
 }

package/lib/memory/shared-adapter.mjs

@@ -36,6 +36,19 @@ try {
 // Shared memory root (env var or default)
 export const CREW_MEMORY_DIR = process.env.CREW_MEMORY_DIR || path.join(os.homedir(), '.crewswarm', 'shared-memory');
 
+// Cache project-messages-rag module to avoid dynamic import() on every call
+let _projectMessagesRag = null;
+async function getProjectMessagesRag() {
+  if (_projectMessagesRag === null) {
+    try {
+      _projectMessagesRag = await import('../chat/project-messages-rag.mjs');
+    } catch {
+      _projectMessagesRag = false; // mark as unavailable
+    }
+  }
+  return _projectMessagesRag || null;
+}
+
 /**
  * Get or create AgentKeeper instance for task memory.
  * @param {string} projectDir - Project root directory
@@ -143,8 +156,8 @@ export async function recallMemoryContext(projectDir, query, options = {}) {
   // This lets agents see past discussions about the same topic
   if (options.projectId) {
     try {
-      const { getConversationContext } = await import('../chat/project-messages-rag.mjs');
-      const conversationContext = getConversationContext(options.projectId, query, 3);
+      const ragModule = await getProjectMessagesRag();
+      const conversationContext = ragModule?.getConversationContext(options.projectId, query, 3);
       
       if (conversationContext) {
         memoryContext += (memoryContext ? '\n\n' : '') + conversationContext;
@@ -264,21 +277,21 @@ export async function migrateBrainToMemory(brainPath, agentId = 'crew-lead') {
       
       // Extract tags from markdown list items
       const tags = [];
-      let content = trimmed;
+      let factContent = trimmed;
       
       // Extract date tags (YYYY-MM-DD)
-      const dateMatch = content.match(/\b(\d{4}-\d{2}-\d{2})\b/);
+      const dateMatch = factContent.match(/\b(\d{4}-\d{2}-\d{2})\b/);
       if (dateMatch) tags.push('dated', dateMatch[1]);
-      
+
       // Extract agent mentions
-      const agentMatch = content.match(/\b(crew-\w+)\b/);
+      const agentMatch = factContent.match(/\b(crew-\w+)\b/);
       if (agentMatch) tags.push('agent', agentMatch[1]);
-      
+
       // Determine criticality (heuristic: lines with CRITICAL, ERROR, WARNING, or !)
-      const critical = /\b(CRITICAL|ERROR|WARNING|!)\b/i.test(content) || content.includes('MUST') || content.includes('NEVER');
-      
+      const critical = /\b(CRITICAL|ERROR|WARNING|!)\b/i.test(factContent) || factContent.includes('MUST') || factContent.includes('NEVER');
+
       try {
-        memory.remember(content, {
+        memory.remember(factContent, {
           critical,
           tags: tags.length > 0 ? tags : ['brain-migration'],
           provider: 'brain-migration'

package/lib/pipeline/manager.mjs

@@ -20,7 +20,7 @@ function tryRead(p) {
 
 export const pendingProjects = new Map();
 
-export function initPipelineManager({ dashboard, broadcastSSE, appendHistory, handleChat, loadConfig }) {
+export function initPipelineManager({ dashboard, broadcastSSE, appendHistory, handleChat, loadConfig } = {}) {
   if (dashboard !== undefined) _dashboard = dashboard;
   if (broadcastSSE) _broadcastSSE = broadcastSSE;
   if (appendHistory) _appendHistory = appendHistory;
@@ -502,6 +502,7 @@ export function parseRoadmapPhases(content) {
 }
 
 export function findNextRoadmapPhase(projectDir) {
+  if (!projectDir) return null;
   const roadmapPath = path.join(projectDir, "ROADMAP.md");
   if (!fs.existsSync(roadmapPath)) return null;
   try {

package/lib/runtime/config.mjs

@@ -185,7 +185,7 @@ export const CREWSWARM_CLAUDE_CODE = (() => {
 export const CREWSWARM_OPENCODE_FORCE = process.env.CREWSWARM_OPENCODE_FORCE === "1";
 export const CREWSWARM_OPENCODE_BIN = process.env.CREWSWARM_OPENCODE_BIN || path.join(os.homedir(), ".opencode", "bin", "opencode");
 export const CREWSWARM_OPENCODE_AGENT = process.env.CREWSWARM_OPENCODE_AGENT || "admin";
-export const CREWSWARM_OPENCODE_MODEL = process.env.CREWSWARM_OPENCODE_MODEL || "groq/moonshotai/kimi-k2-instruct-0905";
+export const CREWSWARM_OPENCODE_MODEL = process.env.CREWSWARM_OPENCODE_MODEL || "openai/gpt-5.4";
 export const CREWSWARM_OPENCODE_FALLBACK_DEFAULT = "groq/llama-3.3-70b-versatile";
 export const CREWSWARM_OPENCODE_TIMEOUT_MS = Number(process.env.CREWSWARM_OPENCODE_TIMEOUT_MS || "300000");
 

package/lib/runtime/spending.mjs

@@ -6,6 +6,7 @@
 import fs   from "fs";
 import path from "path";
 import os   from "os";
+import { getConfigPath } from "./paths.mjs";
 
 const SPENDING_FILE    = path.join(os.homedir(), ".crewswarm", "spending.json");
 const TOKEN_USAGE_FILE = path.join(os.homedir(), ".crewswarm", "token-usage.json");
@@ -86,7 +87,7 @@ export function addAgentSpend(agentId, tokens, costUSD) {
 
 export function checkSpendingCap(agentId, providerKey) {
   try {
-    const csw = JSON.parse(fs.readFileSync(getCrewswarmConfigPath(), "utf8"));
+    const csw = JSON.parse(fs.readFileSync(getConfigPath("crewswarm.json"), "utf8"));
     const s   = loadSpending();
     const gl  = csw.globalSpendingCaps || {};
     if (gl.dailyTokenLimit && s.global.tokens >= gl.dailyTokenLimit)