opencode-swarm 6.53.5 → 6.53.7

package/dist/cli/index.js

@@ -32389,8 +32389,10 @@ var SECURITY_DEGRADING_PATTERNS = [
   /disable\s+.{0,50}2fa/i,
   /remove\s+.{0,50}password/i
 ];
+var INVISIBLE_FORMAT_CHARS = /[\u00AD\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u2069\uFEFF]/g;
 var INJECTION_PATTERNS = [
   /[\x00-\x08\x0b-\x0c\x0e-\x1f\x7f\x0d]/,
+  /[\u00AD\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u2069\uFEFF]/,
   /^system\s*:/i,
   /<script/i,
   /javascript:/i,
@@ -32543,7 +32545,7 @@ function validateLesson(candidate, existingLessons, meta3) {
       severity: "error"
     };
   }
-  const normalizedCandidate = candidate.normalize("NFKC").toLowerCase();
+  const normalizedCandidate = candidate.normalize("NFKC").replace(INVISIBLE_FORMAT_CHARS, " ").replace(/\s+/g, " ").toLowerCase();
   for (const pattern of DANGEROUS_COMMAND_PATTERNS) {
     if (pattern.test(normalizedCandidate)) {
       return {

package/dist/hooks/knowledge-validator.d.ts

@@ -8,6 +8,7 @@ export interface ValidationResult {
 }
 export declare const DANGEROUS_COMMAND_PATTERNS: RegExp[];
 export declare const SECURITY_DEGRADING_PATTERNS: RegExp[];
+export declare const INVISIBLE_FORMAT_CHARS: RegExp;
 export declare const INJECTION_PATTERNS: RegExp[];
 export declare function validateLesson(candidate: string, existingLessons: string[], meta: {
     category: KnowledgeCategory;

package/dist/index.js

@@ -43634,8 +43634,10 @@ var SECURITY_DEGRADING_PATTERNS = [
   /disable\s+.{0,50}2fa/i,
   /remove\s+.{0,50}password/i
 ];
+var INVISIBLE_FORMAT_CHARS = /[\u00AD\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u2069\uFEFF]/g;
 var INJECTION_PATTERNS = [
   /[\x00-\x08\x0b-\x0c\x0e-\x1f\x7f\x0d]/,
+  /[\u00AD\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u2069\uFEFF]/,
   /^system\s*:/i,
   /<script/i,
   /javascript:/i,
@@ -43788,7 +43790,7 @@ function validateLesson(candidate, existingLessons, meta3) {
       severity: "error"
     };
   }
-  const normalizedCandidate = candidate.normalize("NFKC").toLowerCase();
+  const normalizedCandidate = candidate.normalize("NFKC").replace(INVISIBLE_FORMAT_CHARS, " ").replace(/\s+/g, " ").toLowerCase();
   for (const pattern of DANGEROUS_COMMAND_PATTERNS) {
     if (pattern.test(normalizedCandidate)) {
       return {
@@ -45923,15 +45925,19 @@ ${phaseDigest.summary}`,
 async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledgeConfig) {
   let applied = 0;
   let skipped = 0;
-  if (recommendations.length === 0) {
+  if (!recommendations || recommendations.length === 0) {
     return { applied, skipped };
   }
+  if (knowledgeConfig == null) {
+    return { applied: 0, skipped: 0 };
+  }
+  const validRecommendations = recommendations.filter((rec) => rec != null);
   const knowledgePath = resolveSwarmKnowledgePath(directory);
   const entries = await readKnowledge(knowledgePath);
   let modified = false;
   const appliedIds = new Set;
   const updatedEntries = entries.map((entry) => {
-    const rec = recommendations.find((r) => r.entry_id === entry.id);
+    const rec = validRecommendations.find((r) => r.entry_id === entry.id);
     if (!rec)
       return entry;
     switch (rec.action) {
@@ -45985,7 +45991,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
         return entry;
     }
   });
-  for (const rec of recommendations) {
+  for (const rec of validRecommendations) {
     if (rec.entry_id !== undefined && !appliedIds.has(rec.entry_id)) {
       const found = entries.some((e) => e.id === rec.entry_id);
       if (!found) {
@@ -45998,7 +46004,7 @@ async function applyCuratorKnowledgeUpdates(directory, recommendations, knowledg
     await rewriteKnowledge(knowledgePath, updatedEntries);
   }
   const existingLessons = entries.map((e) => e.lesson);
-  for (const rec of recommendations) {
+  for (const rec of validRecommendations) {
     if (rec.entry_id !== undefined)
       continue;
     if (rec.action !== "promote") {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "6.53.5",
+	"version": "6.53.7",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",