opencode-swarm 6.9.0 → 6.11.0

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-   <img src="https://img.shields.io/badge/version-6.9.0-blue" alt="Version">
+   <img src="https://img.shields.io/badge/version-6.11.0-blue" alt="Version">
    <img src="https://img.shields.io/badge/license-MIT-green" alt="License">
    <img src="https://img.shields.io/badge/opencode-plugin-purple" alt="OpenCode Plugin">
    <img src="https://img.shields.io/badge/agents-9-orange" alt="Agents">
@@ -108,8 +108,11 @@ OpenCode Swarm:
 │                                                                          │
 │  @coder (one task, full context)                                         │
 │       ↓                                                                  │
-│  diff tool  →  imports tool  →  lint fix  →  lint check  →  secretscan  │
-│  (contract change detection)   (AST-based)  (auto-fix)   (entropy scan) │
+│  diff → syntax_check → placeholder_scan → imports → lint fix            │
+│  (contract detection) (parse validation) (anti-slop) (AST-based)         │
+│       ↓                                                                  │
+│  build_check → pre_check_batch (4 parallel: lint:check, secretscan,      │
+│  (compile verify)        sast_scan, quality_budget)                      │
 │       ↓                                                                  │
 │  @reviewer (correctness pass)                                            │
 │       ↓ APPROVED                                                         │
@@ -119,9 +122,12 @@ OpenCode Swarm:
 │       ↓ PASS                                                             │
 │  @test_engineer (adversarial tests — boundary violations, injections)    │
 │       ↓ PASS                                                             │
+│  ⛔ HARD STOP: Pre-commit checklist (4 items required, no override)       │
+│       ↓ COMPLETE                                                         │
 │  plan.md → [x] Task complete                                             │
 │                                                                          │
-│  Any gate fails → back to @coder with structured rejection reason        │
+│  Any gate fails → retry with failure count + structured rejection        │
+│  Max 5 retries → escalate to user                                        │
 └──────────────────────────────────────────────────────────────────────────┘
                                     │
                                     ▼
@@ -497,6 +503,159 @@ Runs repo-native build/typecheck commands. Ensures code compiles before review.
 ### quality_budget - Maintainability Enforcement
 Enforces complexity, API, duplication, and test-to-code ratio budgets. Configurable thresholds.
 
+## Parallel Pre-Check Batch (v6.10.0)
+
+### pre_check_batch - Parallel Verification
+
+Runs four verification tools in parallel for faster QA gate execution:
+- **lint:check** - Code quality verification (hard gate)
+- **secretscan** - Secret detection (hard gate)
+- **sast_scan** - Static security analysis (hard gate)
+- **quality_budget** - Maintainability metrics
+
+**Purpose**: Reduces total gate execution time from ~60s (sequential) to ~15s (parallel) by running independent checks concurrently.
+
+**When to use**: After `build_check` passes and before `@reviewer` — all 4 gates must pass for `gates_passed: true`.
+
+**Usage**:
+```typescript
+const result = await pre_check_batch({
+  directory: ".",
+  files: ["src/auth.ts", "src/session.ts"],
+  sast_threshold: "medium"
+});
+
+// Returns:
+// {
+//   gates_passed: boolean,  // All hard gates passed
+//   lint: { ran, result, error, duration_ms },
+//   secretscan: { ran, result, error, duration_ms },
+//   sast_scan: { ran, result, error, duration_ms },
+//   quality_budget: { ran, result, error, duration_ms },
+//   total_duration_ms: number
+// }
+```
+
+**Hard Gates** (must pass for gates_passed=true):
+- Lint errors → Fix and retry
+- Secrets found → Fix and retry
+- SAST vulnerabilities at/above threshold → Fix and retry
+- Quality budget violations → Refactor or adjust thresholds
+
+**Parallel Execution Safety**:
+- Max 4 concurrent operations via `p-limit`
+- 60-second timeout per tool
+- 500KB output size limit
+- Individual tool failures don't cascade to others
+
+### Configuration
+
+Enable/disable parallel pre-check via `.opencode/swarm.json`:
+
+```json
+{
+  "pipeline": {
+    "parallel_precheck": true  // default: true
+  }
+}
+```
+
+Set to `false` to run gates sequentially (useful for debugging or resource-constrained environments).
+
+### Updated Phase 5 QA Sequence (v6.11.0)
+
+Complete execution pipeline with MODE labels and observable outputs:
+
+```
+MODE: EXECUTE (per task)
+│
+├── 5a. @coder implements (ONE task only)
+│   └── → REQUIRED: Print task start confirmation
+│
+├── 5b. diff + imports tools (contract + dependency analysis)
+│   └── → REQUIRED: Print change summary
+│
+├── 5c. syntax_check (parse validation)
+│   └── → REQUIRED: Print syntax status
+│
+├── 5d. placeholder_scan (anti-slop detection)
+│   └── → REQUIRED: Print placeholder scan results
+│
+├── 5e. lint fix → 5f. lint:check (inside pre_check_batch)
+│   └── → REQUIRED: Print lint status
+│
+├── 5g. build_check (compilation verification)
+│   └── → REQUIRED: Print build status
+│
+├── 5h. pre_check_batch (4 parallel gates)
+│   ├── lint:check (hard gate)
+│   ├── secretscan (hard gate)
+│   ├── sast_scan (hard gate)
+│   └── quality_budget (maintainability metrics)
+│   └── → REQUIRED: Print gates_passed status
+│
+├── 5i. @reviewer (correctness pass)
+│   └── → REQUIRED: Print approval decision
+│
+├── 5j. @reviewer security-only pass (if security file)
+│   └── → REQUIRED: Print security approval
+│
+├── 5k. @test_engineer (verification tests + coverage)
+│   └── → REQUIRED: Print test results
+│
+├── 5l. @test_engineer (adversarial tests)
+│   └── → REQUIRED: Print adversarial test results
+│
+├── 5m. ⛔ HARD STOP: Pre-commit checklist
+│   ├── [ ] All QA gates passed (no overrides)
+│   ├── [ ] Reviewer approval documented
+│   ├── [ ] Tests pass with evidence
+│   └── [ ] No security findings
+│   └── → REQUIRED: Print checklist completion
+│
+└── 5n. TASK COMPLETION CHECKLIST (emit before marking complete)
+    ├── Evidence written to .swarm/evidence/{taskId}/
+    ├── plan.md updated with [x] task complete
+    └── → REQUIRED: Print completion confirmation
+```
+
+**MODE Labels** (v6.11): Architect workflow uses MODE labels internally:
+- `MODE: RESUME` — Resume detection
+- `MODE: CLARIFY` — Requirement clarification
+- `MODE: DISCOVER` — Codebase exploration
+- `MODE: CONSULT` — SME consultation
+- `MODE: PLAN` — Plan creation
+- `MODE: CRITIC-GATE` — Plan review checkpoint
+- `MODE: EXECUTE` — Task implementation
+- `MODE: PHASE-WRAP` — Phase completion
+
+**NAMESPACE RULE**: MODE labels refer to architect workflow phases. Project plan phases (in plan.md) remain as "Phase N".
+
+**Retry Protocol** (v6.11): On failure, emit structured rejection:
+```
+RETRY #{count}/5
+FAILED GATE: {gate_name}
+REASON: {specific failure}
+REQUIRED FIX: {actionable instruction}
+RESUME AT: {step_5x}
+```
+
+**Anti-Exemption Rules** (v6.11): The following rationalizations are explicitly blocked:
+- "It's a simple change"
+- "Just updating docs"
+- "Only a config tweak"
+- "Hotfix, no time for QA"
+- "The tests pass locally"
+- "I'll clean it up later"
+- "No logic changes"
+- "Already reviewed the pattern"
+
+**Pre-Commit Rule** (v6.11): All 4 checkboxes required before commit. No override. A commit without completed QA gate is a workflow violation.
+
+### Rollback
+
+If parallel execution causes issues, refer to `.swarm/ROLLBACK-pre-check-batch.md` for rollback instructions.
+
 ### Local-Only Guarantee
 All v6.9.0 quality tools run locally without:
 - Docker containers

package/dist/config/index.d.ts

@@ -5,5 +5,5 @@ export { ApprovalEvidenceSchema, BaseEvidenceSchema, DiffEvidenceSchema, EVIDENC
 export { loadAgentPrompt, loadPluginConfig, loadPluginConfigWithMeta, } from './loader';
 export type { MigrationStatus, Phase, PhaseStatus, Plan, Task, TaskSize, TaskStatus, } from './plan-schema';
 export { MigrationStatusSchema, PhaseSchema, PhaseStatusSchema, PlanSchema, TaskSchema, TaskSizeSchema, TaskStatusSchema, } from './plan-schema';
-export type { AgentOverrideConfig, AutomationCapabilities, AutomationConfig, AutomationMode, PluginConfig, SwarmConfig, } from './schema';
-export { AgentOverrideConfigSchema, AutomationCapabilitiesSchema, AutomationConfigSchema, AutomationModeSchema, PluginConfigSchema, SwarmConfigSchema, } from './schema';
+export type { AgentOverrideConfig, AutomationCapabilities, AutomationConfig, AutomationMode, PipelineConfig, PluginConfig, SwarmConfig, } from './schema';
+export { AgentOverrideConfigSchema, AutomationCapabilitiesSchema, AutomationConfigSchema, AutomationModeSchema, PipelineConfigSchema, PluginConfigSchema, SwarmConfigSchema, } from './schema';

package/dist/config/schema.d.ts

@@ -171,6 +171,10 @@ export declare const GateConfigSchema: z.ZodObject<{
     }, z.core.$strip>;
 }, z.core.$strip>;
 export type GateConfig = z.infer<typeof GateConfigSchema>;
+export declare const PipelineConfigSchema: z.ZodObject<{
+    parallel_precheck: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type PipelineConfig = z.infer<typeof PipelineConfigSchema>;
 export declare const SummaryConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     threshold_bytes: z.ZodDefault<z.ZodNumber>;
@@ -343,6 +347,9 @@ export declare const PluginConfigSchema: z.ZodObject<{
         }, z.core.$strip>>>;
     }, z.core.$strip>>>;
     max_iterations: z.ZodDefault<z.ZodNumber>;
+    pipeline: z.ZodOptional<z.ZodObject<{
+        parallel_precheck: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
     qa_retry_limit: z.ZodDefault<z.ZodNumber>;
     inject_phase_reminders: z.ZodDefault<z.ZodBoolean>;
     hooks: z.ZodOptional<z.ZodObject<{