opencode-swarm 6.33.0 → 6.33.2

package/dist/config/evidence-schema.d.ts

@@ -4,6 +4,7 @@ export declare const EVIDENCE_MAX_PATCH_BYTES: number;
 export declare const EVIDENCE_MAX_TASK_BYTES: number;
 export declare const EvidenceTypeSchema: z.ZodEnum<{
     diff: "diff";
+    secretscan: "secretscan";
     quality_budget: "quality_budget";
     placeholder: "placeholder";
     test: "test";
@@ -29,6 +30,7 @@ export declare const BaseEvidenceSchema: z.ZodObject<{
     task_id: z.ZodString;
     type: z.ZodEnum<{
         diff: "diff";
+        secretscan: "secretscan";
         quality_budget: "quality_budget";
         placeholder: "placeholder";
         test: "test";
@@ -217,6 +219,13 @@ export declare const RetrospectiveEvidenceSchema: z.ZodObject<{
         }>;
         abandoned_reason: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
+    error_taxonomy: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        planning_error: "planning_error";
+        interface_mismatch: "interface_mismatch";
+        logic_error: "logic_error";
+        scope_creep: "scope_creep";
+        gate_evasion: "gate_evasion";
+    }>>>;
 }, z.core.$strip>;
 export type RetrospectiveEvidence = z.infer<typeof RetrospectiveEvidenceSchema>;
 export declare const SyntaxEvidenceSchema: z.ZodObject<{
@@ -434,6 +443,26 @@ export declare const QualityBudgetEvidenceSchema: z.ZodObject<{
     files_analyzed: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
 export type QualityBudgetEvidence = z.infer<typeof QualityBudgetEvidenceSchema>;
+export declare const SecretscanEvidenceSchema: z.ZodObject<{
+    task_id: z.ZodString;
+    timestamp: z.ZodString;
+    agent: z.ZodString;
+    verdict: z.ZodEnum<{
+        pass: "pass";
+        fail: "fail";
+        approved: "approved";
+        rejected: "rejected";
+        info: "info";
+    }>;
+    summary: z.ZodString;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    type: z.ZodLiteral<"secretscan">;
+    findings_count: z.ZodDefault<z.ZodNumber>;
+    scan_directory: z.ZodOptional<z.ZodString>;
+    files_scanned: z.ZodDefault<z.ZodNumber>;
+    skipped_files: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type SecretscanEvidence = z.infer<typeof SecretscanEvidenceSchema>;
 export declare const EvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     task_id: z.ZodString;
     timestamp: z.ZodString;
@@ -587,6 +616,13 @@ export declare const EvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }>;
         abandoned_reason: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
+    error_taxonomy: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        planning_error: "planning_error";
+        interface_mismatch: "interface_mismatch";
+        logic_error: "logic_error";
+        scope_creep: "scope_creep";
+        gate_evasion: "gate_evasion";
+    }>>>;
 }, z.core.$strip>, z.ZodObject<{
     task_id: z.ZodString;
     timestamp: z.ZodString;
@@ -790,6 +826,24 @@ export declare const EvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         files: z.ZodArray<z.ZodString>;
     }, z.core.$strip>>>;
     files_analyzed: z.ZodArray<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    task_id: z.ZodString;
+    timestamp: z.ZodString;
+    agent: z.ZodString;
+    verdict: z.ZodEnum<{
+        pass: "pass";
+        fail: "fail";
+        approved: "approved";
+        rejected: "rejected";
+        info: "info";
+    }>;
+    summary: z.ZodString;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    type: z.ZodLiteral<"secretscan">;
+    findings_count: z.ZodDefault<z.ZodNumber>;
+    scan_directory: z.ZodOptional<z.ZodString>;
+    files_scanned: z.ZodDefault<z.ZodNumber>;
+    skipped_files: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>], "type">;
 export type Evidence = z.infer<typeof EvidenceSchema>;
 export declare const EvidenceBundleSchema: z.ZodObject<{
@@ -948,6 +1002,13 @@ export declare const EvidenceBundleSchema: z.ZodObject<{
             }>;
             abandoned_reason: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
+        error_taxonomy: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            planning_error: "planning_error";
+            interface_mismatch: "interface_mismatch";
+            logic_error: "logic_error";
+            scope_creep: "scope_creep";
+            gate_evasion: "gate_evasion";
+        }>>>;
     }, z.core.$strip>, z.ZodObject<{
         task_id: z.ZodString;
         timestamp: z.ZodString;
@@ -1151,6 +1212,24 @@ export declare const EvidenceBundleSchema: z.ZodObject<{
             files: z.ZodArray<z.ZodString>;
         }, z.core.$strip>>>;
         files_analyzed: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        task_id: z.ZodString;
+        timestamp: z.ZodString;
+        agent: z.ZodString;
+        verdict: z.ZodEnum<{
+            pass: "pass";
+            fail: "fail";
+            approved: "approved";
+            rejected: "rejected";
+            info: "info";
+        }>;
+        summary: z.ZodString;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        type: z.ZodLiteral<"secretscan">;
+        findings_count: z.ZodDefault<z.ZodNumber>;
+        scan_directory: z.ZodOptional<z.ZodString>;
+        files_scanned: z.ZodDefault<z.ZodNumber>;
+        skipped_files: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>], "type">>>;
     created_at: z.ZodString;
     updated_at: z.ZodString;

package/dist/config/schema.d.ts

@@ -18,6 +18,7 @@ export declare const AgentOverrideConfigSchema: z.ZodObject<{
     model: z.ZodOptional<z.ZodString>;
     temperature: z.ZodOptional<z.ZodNumber>;
     disabled: z.ZodOptional<z.ZodBoolean>;
+    fallback_models: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type AgentOverrideConfig = z.infer<typeof AgentOverrideConfigSchema>;
 export declare const SwarmConfigSchema: z.ZodObject<{
@@ -26,6 +27,7 @@ export declare const SwarmConfigSchema: z.ZodObject<{
         model: z.ZodOptional<z.ZodString>;
         temperature: z.ZodOptional<z.ZodNumber>;
         disabled: z.ZodOptional<z.ZodBoolean>;
+        fallback_models: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type SwarmConfig = z.infer<typeof SwarmConfigSchema>;
@@ -313,6 +315,8 @@ export declare const GuardrailsConfigSchema: z.ZodObject<{
     max_consecutive_errors: z.ZodDefault<z.ZodNumber>;
     warning_threshold: z.ZodDefault<z.ZodNumber>;
     idle_timeout_minutes: z.ZodDefault<z.ZodNumber>;
+    no_op_warning_threshold: z.ZodDefault<z.ZodNumber>;
+    max_coder_revisions: z.ZodDefault<z.ZodNumber>;
     qa_gates: z.ZodOptional<z.ZodObject<{
         required_tools: z.ZodDefault<z.ZodArray<z.ZodString>>;
         require_reviewer_test_engineer: z.ZodDefault<z.ZodBoolean>;
@@ -467,6 +471,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
         model: z.ZodOptional<z.ZodString>;
         temperature: z.ZodOptional<z.ZodNumber>;
         disabled: z.ZodOptional<z.ZodBoolean>;
+        fallback_models: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>>;
     swarms: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
@@ -474,6 +479,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
             model: z.ZodOptional<z.ZodString>;
             temperature: z.ZodOptional<z.ZodNumber>;
             disabled: z.ZodOptional<z.ZodBoolean>;
+            fallback_models: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>>;
     }, z.core.$strip>>>;
     max_iterations: z.ZodDefault<z.ZodNumber>;
@@ -497,6 +503,11 @@ export declare const PluginConfigSchema: z.ZodObject<{
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     qa_retry_limit: z.ZodDefault<z.ZodNumber>;
+    execution_mode: z.ZodDefault<z.ZodEnum<{
+        strict: "strict";
+        balanced: "balanced";
+        fast: "fast";
+    }>>;
     inject_phase_reminders: z.ZodDefault<z.ZodBoolean>;
     hooks: z.ZodOptional<z.ZodObject<{
         system_enhancer: z.ZodDefault<z.ZodBoolean>;
@@ -585,6 +596,8 @@ export declare const PluginConfigSchema: z.ZodObject<{
         max_consecutive_errors: z.ZodDefault<z.ZodNumber>;
         warning_threshold: z.ZodDefault<z.ZodNumber>;
         idle_timeout_minutes: z.ZodDefault<z.ZodNumber>;
+        no_op_warning_threshold: z.ZodDefault<z.ZodNumber>;
+        max_coder_revisions: z.ZodDefault<z.ZodNumber>;
         qa_gates: z.ZodOptional<z.ZodObject<{
             required_tools: z.ZodDefault<z.ZodArray<z.ZodString>>;
             require_reviewer_test_engineer: z.ZodDefault<z.ZodBoolean>;

package/dist/evidence/manager.d.ts

@@ -1,4 +1,4 @@
-import { type BuildEvidence, type Evidence, type EvidenceBundle, type PlaceholderEvidence, type QualityBudgetEvidence, type SastEvidence, type SbomEvidence, type SyntaxEvidence } from '../config/evidence-schema';
+import { type BuildEvidence, type Evidence, type EvidenceBundle, type PlaceholderEvidence, type QualityBudgetEvidence, type SastEvidence, type SbomEvidence, type SecretscanEvidence, type SyntaxEvidence } from '../config/evidence-schema';
 /**
  * Discriminated union returned by loadEvidence.
  * - 'found': file exists and passed Zod schema validation
@@ -15,9 +15,9 @@ export type LoadEvidenceResult = {
     errors: string[];
 };
 /**
- * All valid evidence types (12 total)
+ * All valid evidence types (13 total)
  */
-export declare const VALID_EVIDENCE_TYPES: readonly ["review", "test", "diff", "approval", "note", "retrospective", "syntax", "placeholder", "sast", "sbom", "build", "quality_budget"];
+export declare const VALID_EVIDENCE_TYPES: readonly ["review", "test", "diff", "approval", "note", "retrospective", "syntax", "placeholder", "sast", "sbom", "build", "quality_budget", "secretscan"];
 /**
  * Check if a string is a valid evidence type.
  * Returns true if the type is recognized, false otherwise.
@@ -32,12 +32,16 @@ export declare function isSastEvidence(evidence: Evidence): evidence is SastEvid
 export declare function isSbomEvidence(evidence: Evidence): evidence is SbomEvidence;
 export declare function isBuildEvidence(evidence: Evidence): evidence is BuildEvidence;
 export declare function isQualityBudgetEvidence(evidence: Evidence): evidence is QualityBudgetEvidence;
+/**
+ * Type guard for secretscan evidence
+ */
+export declare function isSecretscanEvidence(evidence: Evidence): evidence is SecretscanEvidence;
 /**
  * Validate and sanitize task ID.
  * Accepts three formats:
  * 1. Canonical N.M or N.M.P numeric format (matches TASK_ID_REGEX)
  * 2. Retrospective format: retro-<number> (matches RETRO_TASK_ID_REGEX)
- * 3. Internal automated-tool format: specific tool IDs (sast_scan, quality_budget, syntax_check, placeholder_scan, sbom_generate, build)
+ * 3. Internal automated-tool format: specific tool IDs (sast_scan, quality_budget, syntax_check, placeholder_scan, sbom_generate, build, secretscan)
  * Rejects: .., ../, null bytes, control characters, empty string, other non-numeric IDs
  * @throws Error with descriptive message on failure
  */

package/dist/hooks/delegation-gate.d.ts

@@ -6,6 +6,13 @@
  */
 import type { PluginConfig } from '../config';
 import type { DelegationEnvelope, EnvelopeValidationResult } from '../types/delegation.js';
+/**
+ * v6.33.1 CRIT-1: Fallback map for declared coder scope by taskId.
+ * When messagesTransform sets declaredCoderScope on the architect session,
+ * the coder session may not exist yet. This map allows scope-guard to look up
+ * the scope by taskId when the session's declaredCoderScope is null.
+ */
+export declare const pendingCoderScopeByTaskId: Map<string, string[]>;
 /**
  * Parses a string to extract a DelegationEnvelope.
  * Returns null if no valid envelope is found.

package/dist/hooks/delegation-gate.getEvidenceTaskId.test.d.ts

@@ -0,0 +1,20 @@
+/**
+ * delegation-gate.getEvidenceTaskId.test.ts
+ *
+ * Verification tests for the async conversion of getEvidenceTaskId.
+ * Tests the function behavior by recreating its logic in isolation since
+ * the function is private (not exported) and depends on fs.promises.
+ *
+ * Covers:
+ * 1. Function returns a Promise (is async)
+ * 2. Function resolves to correct task ID when currentTaskId is set
+ * 3. Function resolves to correct task ID when lastCoderDelegationTaskId is set
+ * 4. Function falls back to taskWorkflowStates when above are null
+ * 5. Function returns null when plan.json doesn't exist (ENOENT)
+ * 6. Function returns null when plan.json has no in_progress tasks
+ * 7. Function returns null when session has direct task_id (early return path via currentTaskId)
+ * 8. Path traversal is blocked (security hardening)
+ * 9. Malformed JSON returns null
+ * 10. Empty/invalid directory returns null
+ */
+export {};

package/dist/hooks/scope-guard.d.ts

@@ -23,7 +23,7 @@ export interface ScopeGuardConfig {
  * @param _directory - The workspace directory (reserved for future use)
  * @param injectAdvisory - Optional callback to push advisory to architect session
  */
-export declare function createScopeGuardHook(config: Partial<ScopeGuardConfig>, _directory: string, injectAdvisory?: (sessionId: string, message: string) => void): {
+export declare function createScopeGuardHook(config: Partial<ScopeGuardConfig>, directory: string, injectAdvisory?: (sessionId: string, message: string) => void): {
     toolBefore: (input: {
         tool: string;
         sessionID: string;
@@ -40,4 +40,4 @@ export declare function createScopeGuardHook(config: Partial<ScopeGuardConfig>,
  * @param scopeEntries - Array of declared scope entries (files or directories)
  * @returns true if the file is within scope, false otherwise
  */
-export declare function isFileInScope(filePath: string, scopeEntries: string[]): boolean;
+export declare function isFileInScope(filePath: string, scopeEntries: string[], directory?: string): boolean;