opencode-swarm 6.36.0 → 6.37.0

package/dist/cli/index.js

@@ -36582,7 +36582,7 @@ function isExcluded(entry, relPath, exactNames, globPatterns) {
   return false;
 }
 function containsControlChars(str) {
-  return /[\0\r]/.test(str);
+  return /[\0\t\r\n]/.test(str);
 }
 function validateDirectoryInput(dir) {
   if (!dir || dir.length === 0) {

package/dist/hooks/delegation-gate.d.ts

@@ -50,6 +50,13 @@ export declare function createDelegationGateHook(config: PluginConfig, directory
     messagesTransform: (input: Record<string, never>, output: {
         messages?: MessageWithParts[];
     }) => Promise<void>;
+    toolBefore: (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        args: unknown;
+    }) => Promise<void>;
     toolAfter: (input: {
         tool: string;
         sessionID: string;

package/dist/index.js

@@ -34195,7 +34195,7 @@ function isExcluded(entry, relPath, exactNames, globPatterns) {
   return false;
 }
 function containsControlChars(str) {
-  return /[\0\r]/.test(str);
+  return /[\0\t\r\n]/.test(str);
 }
 function validateDirectoryInput(dir) {
   if (!dir || dir.length === 0) {
@@ -40386,7 +40386,7 @@ async function readPlanFromDisk(directory) {
     return null;
   }
 }
-async function readEvidenceFromDisk(directory) {
+async function readGateEvidenceFromDisk(directory) {
   const evidenceMap = new Map;
   try {
     const evidenceDir = path3.join(directory, ".swarm", "evidence");
@@ -40421,7 +40421,7 @@ async function buildRehydrationCache(directory) {
       }
     }
   }
-  const evidenceMap = await readEvidenceFromDisk(directory);
+  const evidenceMap = await readGateEvidenceFromDisk(directory);
   _rehydrationCache = { planTaskStates, evidenceMap };
 }
 function applyRehydrationCache(session) {
@@ -40530,7 +40530,9 @@ Do not re-trigger DISCOVER or CONSULT because you noticed a project phase bounda
 Output to .swarm/plan.md MUST use "## Phase N" headers. Do not write MODE labels into plan.md.
 
 1. DELEGATE all coding to {{AGENT_PREFIX}}coder. You do NOT write code.
-YOUR TOOLS: Task (delegation), diff, syntax_check, placeholder_scan, imports, lint, secretscan, sast_scan, build_check, pre_check_batch, quality_budget, symbols, complexity_hotspots, schema_drift, todo_extract, evidence_check, sbom_generate, checkpoint, pkg_audit, test_runner.
+// IMPORTANT: This list MUST match AGENT_TOOL_MAP['architect'] in src/config/constants.ts
+// If you add a tool to the map, add it here. If you remove it from the map, remove it here.
+YOUR TOOLS: Task (delegation), checkpoint, check_gate_status, complexity_hotspots, declare_scope, detect_domains, diff, evidence_check, extract_code_blocks, gitingest, imports, knowledge_query, lint, pkg_audit, pre_check_batch, retrieve_summary, save_plan, schema_drift, secretscan, symbols, test_runner, todo_extract, update_task_status, write_retro.
 CODER'S TOOLS: write, edit, patch, apply_patch, create_file, insert, replace \u2014 any tool that modifies file contents.
 If a tool modifies a file, it is a CODER tool. Delegate.
 2. ONE agent per message. Send, STOP, wait for response.
@@ -51144,15 +51146,19 @@ function createGuardrailsHooks(directory, directoryOrConfig, config3) {
           const errorContent = output.error ?? outputStr;
           if (typeof errorContent === "string" && TRANSIENT_MODEL_ERROR_PATTERN.test(errorContent) && !session.modelFallbackExhausted) {
             session.model_fallback_index++;
-            session.modelFallbackExhausted = true;
             const baseAgentName = session.agentName ? session.agentName.replace(/^[^_]+[_]/, "") : "";
-            const fallbackModel = resolveFallbackModel(baseAgentName, session.model_fallback_index, getSwarmAgents());
+            const swarmAgents = getSwarmAgents();
+            const fallbackModels = swarmAgents?.[baseAgentName]?.fallback_models;
+            session.modelFallbackExhausted = !fallbackModels || session.model_fallback_index > fallbackModels.length;
+            const fallbackModel = resolveFallbackModel(baseAgentName, session.model_fallback_index, swarmAgents);
             if (fallbackModel) {
-              const swarmAgents = getSwarmAgents();
               const primaryModel = swarmAgents?.[baseAgentName]?.model ?? "default";
+              if (swarmAgents?.[baseAgentName]) {
+                swarmAgents[baseAgentName].model = fallbackModel;
+              }
               telemetry.modelFallback(input.sessionID, session.agentName, primaryModel, fallbackModel, "transient_model_error");
               session.pendingAdvisoryMessages ??= [];
-              session.pendingAdvisoryMessages.push(`MODEL FALLBACK: Transient model error detected (attempt ${session.model_fallback_index}). ` + `Configured fallback model: "${fallbackModel}". ` + `Consider retrying with this model or using /swarm handoff to reset.`);
+              session.pendingAdvisoryMessages.push(`MODEL FALLBACK: Applied fallback model "${fallbackModel}" (attempt ${session.model_fallback_index}). ` + `Using /swarm handoff to reset to primary model.`);
             } else {
               session.pendingAdvisoryMessages ??= [];
               session.pendingAdvisoryMessages.push(`MODEL FALLBACK: Transient model error detected (attempt ${session.model_fallback_index}). ` + `No fallback models configured for this agent. Add "fallback_models": ["model-a", "model-b"] ` + `to the agent's config in opencode-swarm.json.`);
@@ -51558,9 +51564,40 @@ function createDelegationGateHook(config3, directory) {
   if (!enabled) {
     return {
       messagesTransform: async (_input, _output) => {},
+      toolBefore: async () => {},
       toolAfter: async () => {}
     };
   }
+  const toolBefore = async (input, output) => {
+    if (!input.sessionID)
+      return;
+    const normalized = input.tool.replace(/^[^:]+[:.]/, "");
+    if (normalized !== "Task" && normalized !== "task")
+      return;
+    const args2 = output.args;
+    if (!args2)
+      return;
+    const subagentType = args2.subagent_type;
+    if (typeof subagentType !== "string")
+      return;
+    const targetAgent = stripKnownSwarmPrefix(subagentType);
+    if (targetAgent !== "coder")
+      return;
+    const session = swarmState.agentSessions.get(input.sessionID);
+    if (!session || !session.taskWorkflowStates)
+      return;
+    for (const [taskId, state2] of session.taskWorkflowStates) {
+      if (state2 !== "coder_delegated")
+        continue;
+      const turbo = hasActiveTurboMode(input.sessionID);
+      if (turbo) {
+        const isTier3 = taskId.startsWith("3.");
+        if (!isTier3)
+          continue;
+      }
+      throw new Error(`REVIEWER_GATE_VIOLATION: Cannot re-delegate to coder without reviewer delegation. ` + `Task ${taskId} state: coder_delegated. Delegate to reviewer first.`);
+    }
+  };
   const toolAfter = async (input, _output) => {
     if (!input.sessionID)
       return;
@@ -51782,6 +51819,7 @@ function createDelegationGateHook(config3, directory) {
     }
   };
   return {
+    toolBefore,
     messagesTransform: async (_input, output) => {
       const messages = output.messages;
       if (!messages || messages.length === 0)
@@ -66221,6 +66259,7 @@ var OpenCodeSwarm = async (ctx) => {
       }
       await guardrailsHooks.toolBefore(input, output);
       await scopeGuardHook.toolBefore(input, output);
+      await delegationGateHooks.toolBefore(input, output);
       if (swarmState.lastBudgetPct >= 50) {
         const pressureSession = ensureAgentSession(input.sessionID, swarmState.activeAgent.get(input.sessionID) ?? ORCHESTRATOR_NAME);
         if (!pressureSession.contextPressureWarningSent) {

package/dist/state.session-restart.test.d.ts

@@ -2,6 +2,6 @@
  * Adversarial security tests for Task 2.15: Session restart rehydration
  *
  * ONLY attack vectors - malformed inputs, oversized payloads, injection attempts, boundary violations
- * Tests the security hardening of rehydrateSessionFromDisk, readPlanFromDisk, and readEvidenceFromDisk
+ * Tests the security hardening of rehydrateSessionFromDisk, readPlanFromDisk, and readGateEvidenceFromDisk
  */
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "6.36.0",
+	"version": "6.37.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",