opencode-swarm 6.1.1 → 6.1.2

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="https://img.shields.io/badge/version-6.1.1-blue" alt="Version">
+  <img src="https://img.shields.io/badge/version-6.1.2-blue" alt="Version">
   <img src="https://img.shields.io/badge/license-MIT-green" alt="License">
   <img src="https://img.shields.io/badge/opencode-plugin-purple" alt="OpenCode Plugin">
   <img src="https://img.shields.io/badge/agents-9-orange" alt="Agents">
@@ -343,6 +343,12 @@ bunx opencode-swarm uninstall --clean
 
 ## What's New
 
+### v6.1.2 — Guardrails Remediation
+- **Fail-safe config validation** — Config validation failures now disable guardrails as a safety precaution (previously Zod defaults could silently re-enable them).
+- **Architect exemption fix** — Architect/orchestrator sessions can no longer inherit 30-minute base limits during delegation race conditions.
+- **Explicit disable always wins** — `guardrails.enabled: false` in config is now always honored, even when the config was loaded from file.
+- **Internal map synchronization** — `startAgentSession()` now keeps `activeAgent` and `agentSessions` maps in sync for consistent state tracking.
+
 ### v6.1.1 — Security Fix & Tech Debt
 - **Security hardening (`_loadedFromFile`)** — Fixed a critical vulnerability where an internal loader flag could be injected via JSON config to bypass guardrails. The flag is now purely internal and no longer part of the public schema.
 - **TOCTOU protection** — Added atomic-style content checks in the config loader to prevent race conditions during file reads.

package/dist/index.js

@@ -14010,7 +14010,9 @@ function loadPluginConfig(directory) {
     console.warn("[opencode-swarm] Merged config validation failed:");
     console.warn(result.error.format());
     console.warn("[opencode-swarm] \u26A0\uFE0F Guardrails will be DISABLED as a safety precaution. Fix the config file to restore normal operation.");
-    return PluginConfigSchema.parse({});
+    return PluginConfigSchema.parse({
+      guardrails: { enabled: false }
+    });
   }
   return result.data;
 }
@@ -15450,6 +15452,7 @@ function startAgentSession(sessionId, agentName, staleDurationMs = 7200000) {
     windows: {}
   };
   swarmState.agentSessions.set(sessionId, sessionState);
+  swarmState.activeAgent.set(sessionId, agentName);
 }
 function ensureAgentSession(sessionId, agentName) {
   const now = Date.now();
@@ -17268,7 +17271,7 @@ function createGuardrailsHooks(config2) {
           return;
         }
       }
-      const agentName = swarmState.activeAgent.get(input.sessionID);
+      const agentName = swarmState.activeAgent.get(input.sessionID) ?? ORCHESTRATOR_NAME;
       const session = ensureAgentSession(input.sessionID, agentName);
       const resolvedName = stripKnownSwarmPrefix(session.agentName);
       if (resolvedName === ORCHESTRATOR_NAME) {
@@ -30824,7 +30827,7 @@ var OpenCodeSwarm = async (ctx) => {
   const commandHandler = createSwarmCommandHandler(ctx.directory, Object.fromEntries(agentDefinitions.map((agent) => [agent.name, agent])));
   const activityHooks = createAgentActivityHooks(config3, ctx.directory);
   const delegationGateHandler = createDelegationGateHook(config3);
-  const guardrailsFallback = loadedFromFile ? config3.guardrails ?? {} : { ...config3.guardrails, enabled: false };
+  const guardrailsFallback = config3.guardrails?.enabled === false ? { ...config3.guardrails, enabled: false } : loadedFromFile ? config3.guardrails ?? {} : { ...config3.guardrails, enabled: false };
   const guardrailsConfig = GuardrailsConfigSchema.parse(guardrailsFallback);
   const delegationHandler = createDelegationTrackerHook(config3, guardrailsConfig.enabled);
   const guardrailsHooks = createGuardrailsHooks(guardrailsConfig);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "6.1.1",
+	"version": "6.1.2",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",