opencode-swarm 6.32.4 → 6.33.0

package/dist/agents/architect.dark-matter.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli/index.js

@@ -39929,6 +39929,47 @@ async function executeWriteRetro(args, directory) {
       message: "Invalid summary: must be a non-empty string"
     }, null, 2);
   }
+  if (args.task_id !== undefined) {
+    const tid = args.task_id;
+    if (!tid || tid.length === 0 || tid.length > 200) {
+      return JSON.stringify({
+        success: false,
+        phase,
+        message: "Invalid task ID: must match pattern"
+      }, null, 2);
+    }
+    if (/\0/.test(tid)) {
+      return JSON.stringify({
+        success: false,
+        phase,
+        message: "Invalid task ID: contains null bytes"
+      }, null, 2);
+    }
+    for (let i = 0;i < tid.length; i++) {
+      if (tid.charCodeAt(i) < 32) {
+        return JSON.stringify({
+          success: false,
+          phase,
+          message: "Invalid task ID: contains control characters"
+        }, null, 2);
+      }
+    }
+    if (tid.includes("..") || tid.includes("/") || tid.includes("\\")) {
+      return JSON.stringify({
+        success: false,
+        phase,
+        message: "Invalid task ID: path traversal detected"
+      }, null, 2);
+    }
+    const VALID_TASK_ID = /^(retro-\d+|\d+\.\d+(\.\d+)*)$/;
+    if (!VALID_TASK_ID.test(tid)) {
+      return JSON.stringify({
+        success: false,
+        phase,
+        message: "Invalid task ID: must match pattern"
+      }, null, 2);
+    }
+  }
   const taskId = args.task_id ?? `retro-${phase}`;
   const retroEntry = {
     task_id: taskId,

package/dist/hooks/delegation-gate.verify.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Verification tests for callID→evidenceTaskId map in delegation-gate.ts
+ *
+ * Tests verify the map behavior indirectly through evidence recording outcomes:
+ * 1. Map stores callID→evidenceTaskId after determining the taskId
+ * 2. Map is checked first before getEvidenceTaskId fallback
+ * 3. Map entry is cleaned up after successful evidence recording
+ * 4. Map entry is cleaned up even when evidence recording errors
+ * 5. Fallback works when storedTaskId is not in map
+ */
+export {};

package/dist/hooks/trajectory-logger.d.ts

@@ -0,0 +1,57 @@
+/**
+ * TRAJECTORY LOGGER (v6.31 Task 3.2)
+ *
+ * tool.execute.after hook that appends per-task tool call trajectories to a
+ * .swarm/evidence/{taskId}/trajectory.jsonl file. Only logs INSIDE delegation
+ * scope (when delegationActive is true on the session).
+ *
+ * Trajectories are used for post-hoc analysis, audit trails, and replay.
+ */
+export interface TrajectoryConfig {
+    enabled: boolean;
+    max_lines: number;
+}
+export interface TrajectoryEntry {
+    tool: string;
+    args_summary: string;
+    verdict: string;
+    timestamp: string;
+    agent: string;
+    elapsed_ms: number;
+}
+/**
+ * Truncates a trajectory file to the newest half when maxLines is exceeded.
+ * Reads all lines, keeps the newest half, rewrites the file.
+ *
+ * @param filePath - Absolute path to the trajectory.jsonl file
+ * @param maxLines - Maximum number of lines to retain
+ */
+export declare function truncateTrajectoryFile(filePath: string, maxLines: number): Promise<void>;
+/**
+ * Creates the trajectory logger hook pair.
+ *
+ * @param config - TrajectoryConfig { enabled: boolean (default true), max_lines: number (default 500) }
+ * @param _directory - Reserved for future use (evidence path derived from session taskId)
+ * @returns Object with toolAfter handler
+ */
+export declare function createTrajectoryLoggerHook(config: Partial<TrajectoryConfig>, _directory: string): {
+    toolAfter: (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+        args?: Record<string, unknown>;
+    }, output: {
+        title: string;
+        output: string;
+        metadata: unknown;
+    }) => Promise<void>;
+};
+/**
+ * Records the start time for a tool call (called from toolBefore).
+ * Stored in a module-level Map for correlation with toolAfter.
+ *
+ * @param sessionId - Session identifier
+ * @param callID - Tool call identifier
+ * @param startTime - Start timestamp in milliseconds
+ */
+export declare function recordToolCallStart(sessionId: string, callID: string, startTime: number): void;

package/dist/index.js

@@ -48749,6 +48749,47 @@ async function executeWriteRetro(args2, directory) {
       message: "Invalid summary: must be a non-empty string"
     }, null, 2);
   }
+  if (args2.task_id !== undefined) {
+    const tid = args2.task_id;
+    if (!tid || tid.length === 0 || tid.length > 200) {
+      return JSON.stringify({
+        success: false,
+        phase,
+        message: "Invalid task ID: must match pattern"
+      }, null, 2);
+    }
+    if (/\0/.test(tid)) {
+      return JSON.stringify({
+        success: false,
+        phase,
+        message: "Invalid task ID: contains null bytes"
+      }, null, 2);
+    }
+    for (let i2 = 0;i2 < tid.length; i2++) {
+      if (tid.charCodeAt(i2) < 32) {
+        return JSON.stringify({
+          success: false,
+          phase,
+          message: "Invalid task ID: contains control characters"
+        }, null, 2);
+      }
+    }
+    if (tid.includes("..") || tid.includes("/") || tid.includes("\\")) {
+      return JSON.stringify({
+        success: false,
+        phase,
+        message: "Invalid task ID: path traversal detected"
+      }, null, 2);
+    }
+    const VALID_TASK_ID = /^(retro-\d+|\d+\.\d+(\.\d+)*)$/;
+    if (!VALID_TASK_ID.test(tid)) {
+      return JSON.stringify({
+        success: false,
+        phase,
+        message: "Invalid task ID: must match pattern"
+      }, null, 2);
+    }
+  }
   const taskId = args2.task_id ?? `retro-${phase}`;
   const retroEntry = {
     task_id: taskId,

package/dist/tools/check-gate-status.prefix.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "6.32.4",
+	"version": "6.33.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",