opencode-swarm 6.55.0 → 6.57.0

package/README.md

@@ -689,8 +689,11 @@ Override default rules in `.opencode/opencode-swarm.json`:
 |-------|------|-------------|
 | `readOnly` | boolean | If `true`, agent cannot write anywhere |
 | `blockedExact` | string[] | Exact file paths that are blocked |
+| `allowedExact` | string[] | Exact file paths that are allowed (overrides prefix/glob restrictions) |
 | `blockedPrefix` | string[] | Path prefixes that are blocked (e.g., `.swarm/`) |
 | `allowedPrefix` | string[] | Only these path prefixes are allowed. Omit to remove restriction; set `[]` to deny all |
+| `blockedGlobs` | string[] | Glob patterns that are blocked (uses picomatch: `**`, `*`, `?`) |
+| `allowedGlobs` | string[] | Glob patterns that are allowed (uses picomatch: `**`, `*`, `?`) |
 | `blockedZones` | string[] | File zones to block: `production`, `test`, `config`, `generated`, `docs`, `build` |
 
 ### Merge Behavior
@@ -726,6 +729,46 @@ To safely restrict a custom agent, always set `allowedPrefix` explicitly:
 }
 ```
 
+### Advanced Examples
+
+#### Glob Pattern Support
+
+Use glob patterns for complex path matching:
+
+```json
+{
+  "authority": {
+    "rules": {
+      "coder": {
+        "allowedGlobs": ["src/**/*.ts", "tests/**/*.test.ts"],
+        "blockedGlobs": ["src/**/*.generated.ts", "**/*.d.ts"],
+        "allowedExact": ["src/index.ts", "package.json"]
+      },
+      "docs_agent": {
+        "allowedGlobs": ["docs/**/*.md", "*.md"],
+        "blockedExact": [".swarm/plan.md"]
+      }
+    }
+  }
+}
+```
+
+**Glob Pattern Features:**
+- `**` — Match any number of directories: `src/**/*.ts` matches all TypeScript files in src/ and subdirectories
+- `*` — Match any characters except path separators: `*.md` matches all Markdown files in current directory
+- `?` — Match single character: `test?.js` matches `test1.js`, `testa.js`
+- Uses [picomatch](https://github.com/micromatch/picomatch) for cross-platform compatibility
+
+**Evaluation Order:**
+1. `readOnly` check (if true, deny all writes)
+2. `blockedExact` (exact path matches, highest priority)
+3. `blockedGlobs` (glob pattern matches)
+4. `allowedExact` (exact path matches, overrides prefix/glob restrictions)
+5. `allowedGlobs` (glob pattern matches)
+6. `allowedPrefix` (prefix matches)
+7. `blockedPrefix` (prefix matches)
+8. `blockedZones` (zone classification)
+
 </details>
 
 <details>

package/dist/agents/index.d.ts

@@ -33,7 +33,7 @@ export declare function createAgents(config?: PluginConfig): AgentDefinition[];
 /**
  * Get agent configurations formatted for the OpenCode SDK.
  */
-export declare function getAgentConfigs(config?: PluginConfig): Record<string, SDKAgentConfig>;
+export declare function getAgentConfigs(config?: PluginConfig, directory?: string, sessionId?: string): Record<string, SDKAgentConfig>;
 export { createArchitectAgent } from './architect';
 export { createCoderAgent } from './coder';
 export { createCriticAgent } from './critic';

package/dist/cli/index.js

@@ -14587,6 +14587,9 @@ var init_plan_schema = __esm(() => {
   });
 });
 
+// src/telemetry.ts
+var init_telemetry = () => {};
+
 // node_modules/graceful-fs/polyfills.js
 var require_polyfills = __commonJS((exports, module) => {
   var constants = __require("constants");
@@ -18114,9 +18117,9 @@ var TOOL_NAMES = [
   "doc_scan",
   "doc_extract",
   "curator_analyze",
-  "knowledgeAdd",
-  "knowledgeRecall",
-  "knowledgeRemove",
+  "knowledge_add",
+  "knowledge_recall",
+  "knowledge_remove",
   "co_change_analyzer",
   "search",
   "batch_symbols",
@@ -18182,9 +18185,9 @@ var AGENT_TOOL_MAP = {
     "doc_scan",
     "doc_extract",
     "curator_analyze",
-    "knowledgeAdd",
-    "knowledgeRecall",
-    "knowledgeRemove",
+    "knowledge_add",
+    "knowledge_recall",
+    "knowledge_remove",
     "co_change_analyzer",
     "suggest_patch"
   ],
@@ -18201,7 +18204,7 @@ var AGENT_TOOL_MAP = {
     "symbols",
     "todo_extract",
     "doc_scan",
-    "knowledgeRecall"
+    "knowledge_recall"
   ],
   coder: [
     "diff",
@@ -18213,8 +18216,8 @@ var AGENT_TOOL_MAP = {
     "search",
     "build_check",
     "syntax_check",
-    "knowledgeAdd",
-    "knowledgeRecall"
+    "knowledge_add",
+    "knowledge_recall"
   ],
   test_engineer: [
     "test_runner",
@@ -18237,7 +18240,7 @@ var AGENT_TOOL_MAP = {
     "retrieve_summary",
     "schema_drift",
     "symbols",
-    "knowledgeRecall"
+    "knowledge_recall"
   ],
   reviewer: [
     "diff",
@@ -18253,7 +18256,7 @@ var AGENT_TOOL_MAP = {
     "test_runner",
     "sast_scan",
     "placeholder_scan",
-    "knowledgeRecall",
+    "knowledge_recall",
     "search",
     "batch_symbols",
     "suggest_patch"
@@ -18264,7 +18267,7 @@ var AGENT_TOOL_MAP = {
     "imports",
     "retrieve_summary",
     "symbols",
-    "knowledgeRecall"
+    "knowledge_recall"
   ],
   critic_sounding_board: [
     "complexity_hotspots",
@@ -18272,7 +18275,7 @@ var AGENT_TOOL_MAP = {
     "imports",
     "retrieve_summary",
     "symbols",
-    "knowledgeRecall"
+    "knowledge_recall"
   ],
   critic_drift_verifier: [
     "complexity_hotspots",
@@ -18280,7 +18283,7 @@ var AGENT_TOOL_MAP = {
     "imports",
     "retrieve_summary",
     "symbols",
-    "knowledgeRecall"
+    "knowledge_recall"
   ],
   critic_oversight: [
     "complexity_hotspots",
@@ -18288,7 +18291,7 @@ var AGENT_TOOL_MAP = {
     "imports",
     "retrieve_summary",
     "symbols",
-    "knowledgeRecall"
+    "knowledge_recall"
   ],
   docs: [
     "detect_domains",
@@ -18299,16 +18302,16 @@ var AGENT_TOOL_MAP = {
     "schema_drift",
     "symbols",
     "todo_extract",
-    "knowledgeRecall"
+    "knowledge_recall"
   ],
   designer: [
     "extract_code_blocks",
     "retrieve_summary",
     "symbols",
-    "knowledgeRecall"
+    "knowledge_recall"
   ],
-  curator_init: ["knowledgeRecall"],
-  curator_phase: ["knowledgeRecall"]
+  curator_init: ["knowledge_recall"],
+  curator_phase: ["knowledge_recall"]
 };
 for (const [agentName, tools] of Object.entries(AGENT_TOOL_MAP)) {
   const invalidTools = tools.filter((tool) => !TOOL_NAME_SET.has(tool));
@@ -18727,6 +18730,7 @@ var KnowledgeConfigSchema = exports_external.object({
   auto_promote_days: exports_external.number().min(1).max(3650).default(90),
   max_inject_count: exports_external.number().min(0).max(50).default(5),
   inject_char_budget: exports_external.number().min(200).max(1e4).default(2000),
+  context_budget_threshold: exports_external.number().int().positive().optional(),
   max_lesson_display_chars: exports_external.number().min(40).max(280).default(120),
   dedup_threshold: exports_external.number().min(0).max(1).default(0.6),
   scope_filter: exports_external.array(exports_external.string()).default(["global"]),
@@ -18779,9 +18783,12 @@ var CompactionConfigSchema = exports_external.object({
 var AgentAuthorityRuleSchema = exports_external.object({
   readOnly: exports_external.boolean().optional(),
   blockedExact: exports_external.array(exports_external.string()).optional(),
+  allowedExact: exports_external.array(exports_external.string()).optional(),
   blockedPrefix: exports_external.array(exports_external.string()).optional(),
   allowedPrefix: exports_external.array(exports_external.string()).optional(),
-  blockedZones: exports_external.array(exports_external.enum(["production", "test", "config", "generated", "docs", "build"])).optional()
+  blockedZones: exports_external.array(exports_external.enum(["production", "test", "config", "generated", "docs", "build"])).optional(),
+  blockedGlobs: exports_external.array(exports_external.string()).optional(),
+  allowedGlobs: exports_external.array(exports_external.string()).optional()
 });
 var AuthorityConfigSchema = exports_external.object({
   enabled: exports_external.boolean().default(true),
@@ -19035,6 +19042,7 @@ init_manager();
 
 // src/state.ts
 init_plan_schema();
+init_telemetry();
 var swarmState = {
   activeToolCalls: new Map,
   toolAggregates: new Map,
@@ -19047,7 +19055,8 @@ var swarmState = {
   lastBudgetPct: 0,
   agentSessions: new Map,
   pendingRehydrations: new Set,
-  fullAutoEnabledInConfig: false
+  fullAutoEnabledInConfig: false,
+  environmentProfiles: new Map
 };
 function getAgentSession(sessionId) {
   return swarmState.agentSessions.get(sessionId);
@@ -31717,6 +31726,16 @@ tool.schema = exports_external2;
 init_evidence_schema();
 init_plan_schema();
 // src/tools/create-tool.ts
+function classifyToolError(error93) {
+  const msg = (error93 instanceof Error ? error93.message : String(error93)).toLowerCase();
+  if (msg.includes("not registered") || msg.includes("unknown tool"))
+    return "not_registered";
+  if (msg.includes("not whitelisted") || msg.includes("not allowed"))
+    return "not_whitelisted";
+  if (msg.includes("enoent") || msg.includes("command not found") || msg.includes("binary not found") || msg.includes("no such file or directory"))
+    return "binary_missing";
+  return "execution_error";
+}
 function createSwarmTool(opts) {
   return tool({
     description: opts.description,
@@ -31729,6 +31748,7 @@ function createSwarmTool(opts) {
         const message = error93 instanceof Error ? error93.message : String(error93);
         return JSON.stringify({
           success: false,
+          failure_class: classifyToolError(error93),
           message: "Tool execution failed",
           errors: [message]
         }, null, 2);
@@ -35028,6 +35048,30 @@ async function getDiagnoseData(directory) {
   checks5.push(await checkEventStreamIntegrity(directory));
   checks5.push(await checkSteeringDirectives(directory));
   checks5.push(await checkCurator(directory));
+  try {
+    const evidenceDir = path15.join(directory, ".swarm", "evidence");
+    const snapshotFiles = existsSync6(evidenceDir) ? readdirSync2(evidenceDir).filter((f) => f.startsWith("agent-tools-") && f.endsWith(".json")) : [];
+    if (snapshotFiles.length > 0) {
+      const latest = snapshotFiles.sort().pop();
+      checks5.push({
+        name: "Agent Tool Snapshots",
+        status: "\u2705",
+        detail: `${snapshotFiles.length} snapshot(s) found \u2014 latest: ${latest}`
+      });
+    } else {
+      checks5.push({
+        name: "Agent Tool Snapshots",
+        status: "\u2705",
+        detail: "No snapshots yet (snapshots written on next session start)"
+      });
+    }
+  } catch {
+    checks5.push({
+      name: "Agent Tool Snapshots",
+      status: "\u2705",
+      detail: "No snapshots yet (snapshots written on next session start)"
+    });
+  }
   const passCount = checks5.filter((c) => c.status === "\u2705").length;
   const totalCount = checks5.length;
   const allPassed = passCount === totalCount;

package/dist/config/schema.d.ts

@@ -416,6 +416,7 @@ export declare const KnowledgeConfigSchema: z.ZodObject<{
     auto_promote_days: z.ZodDefault<z.ZodNumber>;
     max_inject_count: z.ZodDefault<z.ZodNumber>;
     inject_char_budget: z.ZodDefault<z.ZodNumber>;
+    context_budget_threshold: z.ZodOptional<z.ZodNumber>;
     max_lesson_display_chars: z.ZodDefault<z.ZodNumber>;
     dedup_threshold: z.ZodDefault<z.ZodNumber>;
     scope_filter: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -473,6 +474,7 @@ export type CompactionConfig = z.infer<typeof CompactionConfigSchema>;
 export declare const AgentAuthorityRuleSchema: z.ZodObject<{
     readOnly: z.ZodOptional<z.ZodBoolean>;
     blockedExact: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    allowedExact: z.ZodOptional<z.ZodArray<z.ZodString>>;
     blockedPrefix: z.ZodOptional<z.ZodArray<z.ZodString>>;
     allowedPrefix: z.ZodOptional<z.ZodArray<z.ZodString>>;
     blockedZones: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -483,6 +485,8 @@ export declare const AgentAuthorityRuleSchema: z.ZodObject<{
         generated: "generated";
         build: "build";
     }>>>;
+    blockedGlobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    allowedGlobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type AgentAuthorityRule = z.infer<typeof AgentAuthorityRuleSchema>;
 export declare const AuthorityConfigSchema: z.ZodObject<{
@@ -490,6 +494,7 @@ export declare const AuthorityConfigSchema: z.ZodObject<{
     rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         readOnly: z.ZodOptional<z.ZodBoolean>;
         blockedExact: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allowedExact: z.ZodOptional<z.ZodArray<z.ZodString>>;
         blockedPrefix: z.ZodOptional<z.ZodArray<z.ZodString>>;
         allowedPrefix: z.ZodOptional<z.ZodArray<z.ZodString>>;
         blockedZones: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -500,6 +505,8 @@ export declare const AuthorityConfigSchema: z.ZodObject<{
             generated: "generated";
             build: "build";
         }>>>;
+        blockedGlobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allowedGlobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type AuthorityConfig = z.infer<typeof AuthorityConfigSchema>;
@@ -667,6 +674,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
         rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
             readOnly: z.ZodOptional<z.ZodBoolean>;
             blockedExact: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allowedExact: z.ZodOptional<z.ZodArray<z.ZodString>>;
             blockedPrefix: z.ZodOptional<z.ZodArray<z.ZodString>>;
             allowedPrefix: z.ZodOptional<z.ZodArray<z.ZodString>>;
             blockedZones: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -677,6 +685,8 @@ export declare const PluginConfigSchema: z.ZodObject<{
                 generated: "generated";
                 build: "build";
             }>>>;
+            blockedGlobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allowedGlobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
     plan_cursor: z.ZodOptional<z.ZodObject<{
@@ -781,6 +791,7 @@ export declare const PluginConfigSchema: z.ZodObject<{
         auto_promote_days: z.ZodDefault<z.ZodNumber>;
         max_inject_count: z.ZodDefault<z.ZodNumber>;
         inject_char_budget: z.ZodDefault<z.ZodNumber>;
+        context_budget_threshold: z.ZodOptional<z.ZodNumber>;
         max_lesson_display_chars: z.ZodDefault<z.ZodNumber>;
         dedup_threshold: z.ZodDefault<z.ZodNumber>;
         scope_filter: z.ZodDefault<z.ZodArray<z.ZodString>>;

package/dist/environment/index.d.ts

@@ -0,0 +1,3 @@
+export type { CommandPolicy, EnvironmentProfile, ExecutionMode, HostOS, OperatingMode, ShellFamily, } from './profile.js';
+export { deriveCommandPolicy, detectEnvironmentProfile } from './profile.js';
+export { renderEnvironmentPrompt } from './prompt-renderer.js';

package/dist/environment/profile.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Session-level execution environment profiling for opencode-swarm.
+ * Computed once per session; never re-detected within a session.
+ */
+export type HostOS = 'windows' | 'linux' | 'macos' | 'unknown';
+export type ShellFamily = 'powershell' | 'cmd' | 'bash' | 'zsh' | 'sh' | 'unknown';
+export type ExecutionMode = 'native' | 'docker' | 'wsl' | 'unknown';
+export type OperatingMode = 'linux' | 'macos-native' | 'windows-native' | 'unknown';
+export interface EnvironmentProfile {
+    hostOS: HostOS;
+    shellFamily: ShellFamily;
+    executionMode: ExecutionMode;
+    operatingMode: OperatingMode;
+    isWindowsNative: boolean;
+    isWindowsDocker: boolean;
+    isWSL: boolean;
+    pathStyle: 'windows' | 'posix';
+    shellCommandPreference: 'powershell-native' | 'posix-native';
+    evidence: {
+        processPlatform: string;
+        comspec?: string;
+        psModulePath?: string;
+        termProgram?: string;
+        shell?: string;
+        wslDistroName?: string;
+        containerMarkers: string[];
+    };
+}
+export interface CommandPolicy {
+    preferredShell: ShellFamily;
+    avoidPosixExamples: boolean;
+    preferNodeApis: boolean;
+    preferToolingOverShell: boolean;
+    pathExampleStyle: 'windows' | 'posix';
+    examples: {
+        listDir: string;
+        removeFile: string;
+        setEnv: string;
+        printEnv: string;
+        searchText: string;
+    };
+}
+/**
+ * Detect the current execution environment. Call once per session.
+ */
+export declare function detectEnvironmentProfile(): EnvironmentProfile;
+/**
+ * Derive a CommandPolicy from a detected EnvironmentProfile.
+ */
+export declare function deriveCommandPolicy(profile: EnvironmentProfile): CommandPolicy;

package/dist/environment/prompt-renderer.d.ts

@@ -0,0 +1,6 @@
+import type { EnvironmentProfile } from './profile.js';
+/**
+ * Renders a concise runtime environment block for agent prompts.
+ * Audience: 'coder' or 'testengineer'
+ */
+export declare function renderEnvironmentPrompt(profile: EnvironmentProfile, audience: 'coder' | 'testengineer'): string;

package/dist/hooks/guardrails.d.ts

@@ -106,9 +106,12 @@ export declare function validateAndRecordAttestation(dir: string, findingId: str
 type AgentRule = {
     readOnly?: boolean;
     blockedExact?: string[];
+    allowedExact?: string[];
     blockedPrefix?: string[];
     allowedPrefix?: string[];
     blockedZones?: FileZone[];
+    blockedGlobs?: string[];
+    allowedGlobs?: string[];
 };
 export declare const DEFAULT_AGENT_AUTHORITY_RULES: Record<string, AgentRule>;
 /**

package/dist/hooks/knowledge-types.d.ts

@@ -67,6 +67,8 @@ export interface KnowledgeConfig {
     max_inject_count: number;
     /** Maximum total chars for the entire injection block. Default: 2000 */
     inject_char_budget?: number;
+    /** Minimum headroom chars required before knowledge injection activates. Default: 300 */
+    context_budget_threshold?: number;
     /** Maximum display chars per lesson at injection time. Default: 120 */
     max_lesson_display_chars?: number;
     /** Jaccard bigram similarity threshold for deduplication. Default: 0.6 */