opencode-swarm 6.22.15 → 6.22.17

package/dist/hooks/pipeline-tracker.d.ts

@@ -31,7 +31,7 @@ interface MessageWithParts {
  * Creates the experimental.chat.messages.transform hook for pipeline tracking.
  * Only injects for the architect agent.
  */
-export declare function createPipelineTrackerHook(config: PluginConfig): {
+export declare function createPipelineTrackerHook(config: PluginConfig, directory?: string): {
     'experimental.chat.messages.transform'?: undefined;
 } | {
     'experimental.chat.messages.transform': (input: Record<string, never>, output: {

package/dist/index.js

@@ -46323,7 +46323,12 @@ async function handleRollbackCommand(directory, args2) {
     if (!fs13.existsSync(manifestPath2)) {
       return "No checkpoints found. Use `/swarm checkpoint` to create checkpoints.";
     }
-    const manifest2 = JSON.parse(fs13.readFileSync(manifestPath2, "utf-8"));
+    let manifest2;
+    try {
+      manifest2 = JSON.parse(fs13.readFileSync(manifestPath2, "utf-8"));
+    } catch {
+      return "Error: Checkpoint manifest is corrupted. Delete .swarm/checkpoints/manifest.json and re-checkpoint.";
+    }
     const checkpoints = manifest2.checkpoints || [];
     if (checkpoints.length === 0) {
       return "No checkpoints found in manifest.";
@@ -46345,7 +46350,12 @@ async function handleRollbackCommand(directory, args2) {
   if (!fs13.existsSync(manifestPath)) {
     return `Error: No checkpoints found. Cannot rollback to phase ${targetPhase}.`;
   }
-  const manifest = JSON.parse(fs13.readFileSync(manifestPath, "utf-8"));
+  let manifest;
+  try {
+    manifest = JSON.parse(fs13.readFileSync(manifestPath, "utf-8"));
+  } catch {
+    return `Error: Checkpoint manifest is corrupted. Delete .swarm/checkpoints/manifest.json and re-checkpoint.`;
+  }
   const checkpoint = manifest.checkpoints?.find((c) => c.phase === targetPhase);
   if (!checkpoint) {
     const available = manifest.checkpoints?.map((c) => c.phase).join(", ") || "none";
@@ -49247,7 +49257,7 @@ ${phaseNumber !== null && phaseNumber >= 4 ? `
 \u26A0\uFE0F You are in Phase ${phaseNumber}. Compliance degrades with time. Do not skip reviewer or test_engineer.` : ""}
 </swarm_reminder>`;
 }
-function createPipelineTrackerHook(config3) {
+function createPipelineTrackerHook(config3, directory) {
   const enabled = config3.inject_phase_reminders !== false;
   if (!enabled) {
     return {};
@@ -49277,7 +49287,7 @@ function createPipelineTrackerHook(config3) {
         return;
       let phaseNumber = null;
       try {
-        const plan = await loadPlan(process.cwd());
+        const plan = await loadPlan(directory ?? process.cwd());
         if (plan) {
           const phaseString = extractCurrentPhaseFromPlan2(plan);
           phaseNumber = parsePhaseNumber(phaseString);
@@ -53873,7 +53883,12 @@ async function fetchGitingest(args2) {
       if (Buffer.byteLength(text) > GITINGEST_MAX_RESPONSE_BYTES) {
         throw new Error("gitingest response too large");
       }
-      const data = JSON.parse(text);
+      let data;
+      try {
+        data = JSON.parse(text);
+      } catch {
+        throw new Error(`gitingest API returned non-JSON response (${text.length} chars, starts: ${text.slice(0, 80)})`);
+      }
       return `${data.summary}
 
 ${data.tree}
@@ -59687,7 +59702,6 @@ init_create_tool();
 var DEFAULT_OUTPUT_DIR = ".swarm/evidence/sbom";
 function findManifestFiles(rootDir) {
   const manifestFiles = [];
-  const cwd = process.cwd();
   const patterns = [...new Set(allDetectors.flatMap((d) => d.patterns))];
   function searchDir(dir) {
     try {
@@ -59703,7 +59717,7 @@ function findManifestFiles(rootDir) {
           for (const pattern of patterns) {
             const regex = pattern.replace(/\./g, "\\.").replace(/\*/g, ".*").replace(/\?/g, ".");
             if (new RegExp(regex, "i").test(entry.name)) {
-              manifestFiles.push(path43.relative(cwd, fullPath));
+              manifestFiles.push(path43.relative(rootDir, fullPath));
               break;
             }
           }
@@ -59716,7 +59730,6 @@ function findManifestFiles(rootDir) {
 }
 function findManifestFilesInDirs(directories, workingDir) {
   const found = [];
-  const _cwd = process.cwd();
   const patterns = [...new Set(allDetectors.flatMap((d) => d.patterns))];
   for (const dir of directories) {
     try {
@@ -59826,8 +59839,9 @@ var sbom_generate = createSwarmTool({
     const obj = args2;
     const scope = obj.scope;
     const changedFiles = obj.changed_files;
-    const outputDir = obj.output_dir || DEFAULT_OUTPUT_DIR;
+    const relativeOutputDir = obj.output_dir || DEFAULT_OUTPUT_DIR;
     const workingDir = directory;
+    const outputDir = path43.isAbsolute(relativeOutputDir) ? relativeOutputDir : path43.join(workingDir, relativeOutputDir);
     let manifestFiles = [];
     if (scope === "all") {
       manifestFiles = findManifestFiles(workingDir);
@@ -59981,7 +59995,12 @@ function parseSpec(specFile) {
   return parseYamlSpec(content);
 }
 function parseJsonSpec(content) {
-  const spec = JSON.parse(content);
+  let spec;
+  try {
+    spec = JSON.parse(content);
+  } catch {
+    return [];
+  }
   const paths = [];
   if (!spec.paths) {
     return paths;
@@ -61063,7 +61082,7 @@ var OpenCodeSwarm = async (ctx) => {
   await loadSnapshot(ctx.directory);
   const agents = getAgentConfigs(config3);
   const agentDefinitions = createAgents(config3);
-  const pipelineHook = createPipelineTrackerHook(config3);
+  const pipelineHook = createPipelineTrackerHook(config3, ctx.directory);
   const systemEnhancerHook = createSystemEnhancerHook(config3, ctx.directory);
   const compactionHook = createCompactionCustomizerHook(config3, ctx.directory);
   const contextBudgetHandler = createContextBudgetHandler(config3);

package/dist/state.d.ts

@@ -177,6 +177,9 @@ export declare function resetSwarmState(): void;
 export declare function startAgentSession(sessionId: string, agentName: string, staleDurationMs?: number): void;
 /**
  * End an agent session by removing it from the state.
+ * NOTE: Currently unused in production — no session lifecycle teardown is wired up.
+ * Sessions accumulate for the process lifetime. Callers should integrate this into
+ * a session TTL or idle-timeout mechanism to prevent unbounded Map growth.
  * @param sessionId - The session identifier to remove
  */
 export declare function endAgentSession(sessionId: string): void;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "6.22.15",
+	"version": "6.22.17",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",