opencode-swarm 6.20.1 → 6.20.3

package/dist/cli/index.js

@@ -14186,6 +14186,8 @@ function log(message, data) {
   }
 }
 function warn(message, data) {
+  if (!DEBUG)
+    return;
   const timestamp = new Date().toISOString();
   if (data !== undefined) {
     console.warn(`[opencode-swarm ${timestamp}] WARN: ${message}`, data);

package/dist/hooks/guardrails.d.ts

@@ -9,11 +9,11 @@
 import { type GuardrailsConfig } from '../config/schema';
 /**
  * Creates guardrails hooks for circuit breaker protection
- * @param directory Working directory (from plugin init context)
- * @param config Guardrails configuration
+ * @param directoryOrConfig Working directory (from plugin init context) OR legacy config object for backward compatibility
+ * @param config Guardrails configuration (optional if first arg is config)
  * @returns Tool before/after hooks and messages transform hook
  */
-export declare function createGuardrailsHooks(directory: string, config: GuardrailsConfig): {
+export declare function createGuardrailsHooks(directoryOrConfig?: string | GuardrailsConfig, config?: GuardrailsConfig): {
     toolBefore: (input: {
         tool: string;
         sessionID: string;

package/dist/index.js

@@ -14248,6 +14248,8 @@ function log(message, data) {
   }
 }
 function warn(message, data) {
+  if (!DEBUG)
+    return;
   const timestamp = new Date().toISOString();
   if (data !== undefined) {
     console.warn(`[opencode-swarm ${timestamp}] WARN: ${message}`, data);
@@ -39101,6 +39103,8 @@ If you are about to edit a source file: STOP. You are violating protocol.
 writeCount > 0 on source files from the Architect is equivalent to GATE_DELEGATION_BYPASS.
 
 PLAN STATE PROTECTION
+WHY: plan.md is auto-regenerated by PlanSyncWorker from plan.json. Any direct write to plan.md will be silently overwritten within seconds. If you see plan.md reverting after your edit, this is the cause \u2014 the worker detected a plan.json change and regenerated plan.md from it.
+The correct tools: save_plan to create or restructure a plan (writes plan.json \u2192 triggers regeneration); update_task_status() for task completion status; phase_complete() for phase-level transitions.
 .swarm/plan.md and .swarm/plan.json are READABLE but NOT DIRECTLY WRITABLE for state transitions.
 Task-level status changes (marking individual tasks as "completed") must use update_task_status().
 Phase-level completion (marking an entire phase as done) must use phase_complete().
@@ -47502,14 +47506,24 @@ function getCurrentTaskId(sessionId) {
   const session = swarmState.agentSessions.get(sessionId);
   return session?.currentTaskId ?? `${sessionId}:unknown`;
 }
-function createGuardrailsHooks(directory, config3) {
-  if (config3.enabled === false) {
+function createGuardrailsHooks(directoryOrConfig, config3) {
+  let directory;
+  let guardrailsConfig;
+  if (directoryOrConfig && typeof directoryOrConfig === "object" && "enabled" in directoryOrConfig) {
+    directory = process.cwd();
+    guardrailsConfig = directoryOrConfig;
+  } else {
+    directory = directoryOrConfig ?? process.cwd();
+    guardrailsConfig = config3;
+  }
+  if (guardrailsConfig?.enabled === false) {
     return {
       toolBefore: async () => {},
       toolAfter: async () => {},
       messagesTransform: async () => {}
     };
   }
+  const cfg = guardrailsConfig;
   const inputArgsByCallID = new Map;
   return {
     toolBefore: async (input, output) => {
@@ -47517,6 +47531,13 @@ function createGuardrailsHooks(directory, config3) {
       if (currentSession?.delegationActive) {} else if (isArchitect(input.sessionID) && isWriteTool(input.tool)) {
         const args2 = output.args;
         const targetPath = args2?.filePath ?? args2?.path ?? args2?.file ?? args2?.target;
+        if (typeof targetPath === "string" && targetPath.length > 0) {
+          const resolvedTarget = path25.resolve(directory, targetPath).toLowerCase();
+          const planMdPath = path25.resolve(directory, ".swarm", "plan.md").toLowerCase();
+          if (resolvedTarget === planMdPath) {
+            throw new Error("PLAN STATE VIOLATION: Direct writes to .swarm/plan.md are blocked. " + "plan.md is auto-regenerated from plan.json by PlanSyncWorker. " + "Use update_task_status() to mark tasks complete, " + "phase_complete() for phase transitions, or " + "save_plan to create/restructure plans.");
+          }
+        }
         if (!targetPath && (input.tool === "apply_patch" || input.tool === "patch")) {
           const patchText = args2?.input ?? args2?.patch ?? (Array.isArray(args2?.cmd) ? args2.cmd[1] : undefined);
           if (typeof patchText === "string") {
@@ -47532,6 +47553,11 @@ function createGuardrailsHooks(directory, config3) {
                 paths.add(p);
             }
             for (const p of paths) {
+              const resolvedP = path25.resolve(directory, p);
+              const planMdPath = path25.resolve(directory, ".swarm", "plan.md");
+              if (resolvedP.toLowerCase() === planMdPath.toLowerCase()) {
+                throw new Error("PLAN STATE VIOLATION: Direct writes to .swarm/plan.md are blocked. " + "plan.md is auto-regenerated from plan.json by PlanSyncWorker. " + "Use update_task_status() to mark tasks complete, " + "phase_complete() for phase transitions, or " + "save_plan to create/restructure plans.");
+              }
               if (isOutsideSwarmDir(p, directory) && (isSourceCodePath(p) || hasTraversalSegments(p))) {
                 const session2 = swarmState.agentSessions.get(input.sessionID);
                 if (session2) {
@@ -47548,7 +47574,7 @@ function createGuardrailsHooks(directory, config3) {
             }
           }
         }
-        if (typeof targetPath === "string" && isOutsideSwarmDir(targetPath, directory) && (isSourceCodePath(targetPath) || hasTraversalSegments(targetPath))) {
+        if (typeof targetPath === "string" && targetPath.length > 0 && isOutsideSwarmDir(targetPath, directory) && isSourceCodePath(path25.relative(directory, path25.resolve(directory, targetPath)))) {
           const session2 = swarmState.agentSessions.get(input.sessionID);
           if (session2) {
             session2.architectWriteCount++;
@@ -47590,7 +47616,7 @@ function createGuardrailsHooks(directory, config3) {
       if (resolvedName === ORCHESTRATOR_NAME) {
         return;
       }
-      const agentConfig = resolveGuardrailsConfig(config3, session.agentName);
+      const agentConfig = resolveGuardrailsConfig(cfg, session.agentName);
       if (agentConfig.max_duration_minutes === 0 && agentConfig.max_tool_calls === 0) {
         return;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "6.20.1",
+	"version": "6.20.3",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",