opencode-swarm 7.101.0 → 7.102.0

package/.opencode/skills/execute/SKILL.md

@@ -54,6 +54,7 @@ All other gates: failure → return to coder. No self-fixes. No workarounds.
     → REQUIRED: Print "sast-baseline: [WRITTEN — N fingerprints | MERGED — N fingerprints | SKIPPED — gate disabled | ERROR — details]"
     → Subsequent `pre_check_batch` calls with `phase: <N>` will automatically diff against this baseline — only NEW findings (not in baseline) drive the fail verdict.
 5b. the active swarm's coder agent - Implement (if designer scaffold produced, include it as INPUT).
+5b-bis. **CODER OUTPUT VERIFICATION**: After the coder reports completion, do NOT accept the self-report alone. Run `diff` (step 5c) and inspect at least one of the modified files yourself to confirm the change exists. The coder may report DONE without having produced any diff. A 30-second read of the changed file(s) catches this failure mode. This is NOT a separate explorer dispatch — the existing `diff` tool at step 5c is the verification mechanism; the key discipline is checking that `diff` returns actual changes before proceeding, rather than forwarding the coder's self-report to the next gate.
 5c. Run `diff` tool. If `hasContractChanges` → the active swarm's explorer agent integration analysis. If COMPATIBILITY SIGNALS=INCOMPATIBLE or MIGRATION_SURFACE=yes → coder retry. If COMPATIBILITY SIGNALS=COMPATIBLE and MIGRATION_SURFACE=no → proceed.
     → REQUIRED: Print "diff: [PASS | CONTRACT CHANGE — details]"
     5d. Run `syntax_check` tool. SYNTACTIC ERRORS → return to coder. NO ERRORS → proceed to placeholder_scan.

package/.opencode/skills/running-tests/SKILL.md

@@ -137,6 +137,7 @@ Get-Content "$env:TEMP\test_out.txt" | Select-Object -Last 50
 - `Select-String -Last N` — invalid parameter, use `Select-Object -Last N`
 - `2>&1 2>&1` — duplicate redirection, causes parse error; use `2>&1` once
 - `&&` — not supported in PowerShell 5.1; use `; if ($?) { cmd2 }` instead
+- `bun test --exec bash` — fails on Windows hosts with ENOENT (bash is not available in standard PowerShell). Use `bun test` directly or a PowerShell-based loop instead.
 - After `bun install --frozen-lockfile --force`, non-elevated Windows shells can hit `EPERM` while reading refreshed `node_modules` entries. Treat that as a host permission/access issue: rerun the same focused Bun command with approved/elevated access before diagnosing it as a code or test failure.
 
 ---

package/.opencode/skills/writing-tests/SKILL.md

@@ -736,6 +736,7 @@ The `--timeout 120000` flag sets per-test timeout to 120 seconds. Individual tes
 3. Verify no `process.cwd()` usage — use the `directory` parameter from `createSwarmTool` or hook constructor
 4. Verify no hardcoded paths (`/tmp/...`, `C:\...`) — use `os.tmpdir()` + `path.join()`
 5. Verify mocks are restored in `afterEach` if using `spyOn` or `mock.module`
+6. Run `bunx @biomejs/biome@2.3.14 check --write <touched-test-files>` to auto-format only the files you created or modified. Formatting issues are a common first-pass failure — scoping the command to touched files avoids accidental workspace-wide rewrites.
 
 ## Known Pre-existing Test Failures
 

package/dist/cli/{guardrail-explain-ma84cj3s.js → guardrail-explain-ea9ja7x8.js}

@@ -1,8 +1,8 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-wc8g49dp.js";
-import"./index-rmh6nqbp.js";
+} from "./index-72893pwd.js";
+import"./index-3v3rq2tq.js";
 import"./index-pj3a5fbt.js";
 import"./index-ydgy7vg5.js";
 import"./index-vwyjkzgs.js";

package/dist/cli/{index-mz3j0me8.js → index-2r26qngd.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-wc8g49dp.js";
+} from "./index-72893pwd.js";
 import {
   handleGuardrailLog
 } from "./index-5bstvpct.js";
@@ -79,7 +79,7 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-rmh6nqbp.js";
+} from "./index-3v3rq2tq.js";
 import"./index-pj3a5fbt.js";
 import"./index-ydgy7vg5.js";
 import"./index-vwyjkzgs.js";

package/dist/cli/{index-rmh6nqbp.js → index-3v3rq2tq.js}

@@ -912,7 +912,7 @@ var init_executor = __esm(() => {
 // package.json
 var package_default = {
   name: "opencode-swarm",
-  version: "7.101.0",
+  version: "7.102.0",
   description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -33362,7 +33362,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-mz3j0me8.js");
+    const { buildHelpText } = await import("./index-2r26qngd.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -33371,7 +33371,7 @@ async function handleHelpCommand(ctx) {
     return _internals47.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals47.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-mz3j0me8.js");
+  const { buildHelpText: fullHelp } = await import("./index-2r26qngd.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -33504,7 +33504,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-ma84cj3s.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-ea9ja7x8.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",

package/dist/cli/{index-wc8g49dp.js → index-72893pwd.js}

@@ -12,7 +12,7 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-rmh6nqbp.js";
+} from "./index-3v3rq2tq.js";
 import {
   checkFileAuthority,
   classifyFile,

package/dist/cli/index.js

@@ -7,7 +7,7 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-rmh6nqbp.js";
+} from "./index-3v3rq2tq.js";
 import"./index-pj3a5fbt.js";
 import"./index-ydgy7vg5.js";
 import"./index-vwyjkzgs.js";

package/dist/index.js

@@ -69,7 +69,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.101.0",
+    version: "7.102.0",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -115819,6 +115819,308 @@ import * as fsPromises5 from "node:fs/promises";
 import * as os20 from "node:os";
 import * as path137 from "node:path";
 
+// src/lang/symbol-visibility.ts
+var PUBLIC_INFO = {
+  exported: true,
+  visibility: "public",
+  exportedReason: "top_level_public",
+  apiSurfaceKind: "public"
+};
+var PRIVATE_INFO = {
+  exported: false,
+  visibility: "private",
+  exportedReason: "unknown",
+  apiSurfaceKind: "private"
+};
+function collectCommonJsExports(source) {
+  const sanitized = maskCommentsAndStrings(source);
+  const exportsByLocal = new Map;
+  const add2 = (localName, exportedName, sourceIndex) => {
+    if (!isIdentifier(localName) || !isIdentifier(exportedName))
+      return;
+    const existing = exportsByLocal.get(localName);
+    if (existing && existing.sourceIndex <= sourceIndex)
+      return;
+    exportsByLocal.set(localName, {
+      localName,
+      exportedName,
+      exportedReason: "explicit_export",
+      sourceIndex
+    });
+  };
+  for (const match of sanitized.matchAll(/\bmodule\s*\.\s*exports\s*=\s*([A-Za-z_$][\w$]*)\b/g)) {
+    add2(match[1], match[1], match.index ?? 0);
+  }
+  for (const match of sanitized.matchAll(/\bmodule\s*\.\s*exports\s*=\s*\{([^}]*)\}/g)) {
+    const body = match[1];
+    const baseIndex = match.index ?? 0;
+    for (const part of body.split(",")) {
+      const entry = part.trim();
+      if (!entry)
+        continue;
+      const alias = entry.match(/^([A-Za-z_$][\w$]*)\s*:\s*([A-Za-z_$][\w$]*)$/);
+      if (alias) {
+        add2(alias[2], alias[1], baseIndex + match[0].indexOf(part));
+        continue;
+      }
+      const shorthand = entry.match(/^([A-Za-z_$][\w$]*)$/);
+      if (shorthand) {
+        add2(shorthand[1], shorthand[1], baseIndex + match[0].indexOf(part));
+      }
+    }
+  }
+  for (const match of sanitized.matchAll(/\b(?:module\s*\.\s*exports|exports)\s*\.\s*([A-Za-z_$][\w$]*)\s*=\s*([A-Za-z_$][\w$]*)\b/g)) {
+    add2(match[2], match[1], match.index ?? 0);
+  }
+  return exportsByLocal;
+}
+function collectPythonAllNames(source) {
+  const match = source.match(/__all__\s*=\s*([[({])([\s\S]*?)[\])}]/);
+  if (!match)
+    return null;
+  const body = match[2].trim();
+  if (!body)
+    return new Set;
+  const names = new Set;
+  for (const part of body.split(",")) {
+    const trimmed = part.trim();
+    if (!trimmed)
+      continue;
+    const stringMatch = trimmed.match(/^['"]([^'"]+)['"]$/);
+    if (!stringMatch)
+      return null;
+    names.add(stringMatch[1]);
+  }
+  return names;
+}
+function getSymbolVisibilityInfo(ctx) {
+  if (hasPrivateContainer(ctx.defNode))
+    return { ...PRIVATE_INFO };
+  if (ctx.explicitExported || ctx.commonJsExport) {
+    return {
+      exported: true,
+      visibility: "public",
+      exportedReason: "explicit_export",
+      apiSurfaceKind: "export"
+    };
+  }
+  const ownVisibility = visibilityFromText(ctx.grammarId, ctx.defNode.text);
+  if (ctx.kind === "method") {
+    return {
+      exported: false,
+      visibility: ownVisibility,
+      exportedReason: ownVisibility === "unknown" ? "unknown" : "modifier",
+      apiSurfaceKind: ownVisibility === "private" ? "private" : "public"
+    };
+  }
+  if (!ctx.isTopLevel && isMemberLikeNode(ctx.defNode)) {
+    return {
+      exported: false,
+      visibility: ownVisibility === "unknown" ? "public" : ownVisibility,
+      exportedReason: ownVisibility === "unknown" ? "module_public" : "modifier",
+      apiSurfaceKind: ownVisibility === "private" ? "private" : "public"
+    };
+  }
+  if (!ctx.isTopLevel)
+    return { ...PRIVATE_INFO };
+  switch (ctx.grammarId) {
+    case "typescript":
+    case "javascript":
+    case "tsx":
+      return { ...PRIVATE_INFO };
+    case "python":
+      return pythonVisibility(ctx);
+    case "rust":
+      return rustVisibility(ctx);
+    case "go":
+      return isUppercasePublic(ctx.localName) ? {
+        ...PUBLIC_INFO,
+        exportedReason: "naming_convention"
+      } : { ...PRIVATE_INFO };
+    case "java":
+    case "kotlin":
+    case "csharp":
+    case "swift":
+    case "php":
+      return modifierLanguageVisibility(ctx);
+    case "cpp":
+      return cppVisibility(ctx);
+    case "dart":
+      return ctx.localName.startsWith("_") ? { ...PRIVATE_INFO } : { ...PUBLIC_INFO, exportedReason: "naming_convention" };
+    case "ruby":
+      return ctx.localName.startsWith("_") ? { ...PRIVATE_INFO } : { ...PUBLIC_INFO, exportedReason: "module_public" };
+    default:
+      return {
+        exported: false,
+        visibility: "unknown",
+        exportedReason: "unknown",
+        apiSurfaceKind: "unknown"
+      };
+  }
+}
+function pythonVisibility(ctx) {
+  if (ctx.pythonAllNames) {
+    return ctx.pythonAllNames.has(ctx.localName) ? {
+      exported: true,
+      visibility: "public",
+      exportedReason: "module_public",
+      apiSurfaceKind: "public"
+    } : { ...PRIVATE_INFO };
+  }
+  return ctx.localName.startsWith("_") ? { ...PRIVATE_INFO } : { ...PUBLIC_INFO, exportedReason: "naming_convention" };
+}
+function rustVisibility(ctx) {
+  const text = ctx.defNode.text.trimStart();
+  if (!/^pub\b|^pub\s*\(/.test(text))
+    return { ...PRIVATE_INFO };
+  const internal = /^pub\s*\(\s*(crate|super|in\b)/.test(text);
+  return {
+    exported: true,
+    visibility: internal ? "internal" : "public",
+    exportedReason: "modifier",
+    apiSurfaceKind: "public"
+  };
+}
+function modifierLanguageVisibility(ctx) {
+  if (ctx.grammarId === "php" && ctx.localName.startsWith("_")) {
+    return { ...PRIVATE_INFO };
+  }
+  const visibility = visibilityFromText(ctx.grammarId, ctx.defNode.text);
+  if (visibility === "private")
+    return { ...PRIVATE_INFO };
+  if (visibility === "unknown") {
+    const defaultVisibility = ctx.grammarId === "java" ? "package" : defaultModuleVisibility(ctx.grammarId);
+    return {
+      exported: true,
+      visibility: defaultVisibility,
+      exportedReason: "module_public",
+      apiSurfaceKind: "public"
+    };
+  }
+  return {
+    exported: true,
+    visibility,
+    exportedReason: "modifier",
+    apiSurfaceKind: "public"
+  };
+}
+function cppVisibility(ctx) {
+  const text = ctx.defNode.text.trimStart();
+  if (/^static\b/.test(text) || ctx.localName.startsWith("_")) {
+    return { ...PRIVATE_INFO };
+  }
+  return {
+    exported: true,
+    visibility: "public",
+    exportedReason: "namespace_public",
+    apiSurfaceKind: "public"
+  };
+}
+function visibilityFromText(grammarId, text) {
+  const normalized = declarationPrefix(text).trimStart();
+  if (/\b(private|fileprivate)\b/.test(normalized))
+    return "private";
+  if (/\bprotected\b/.test(normalized))
+    return "protected";
+  if (/\binternal\b/.test(normalized))
+    return "internal";
+  if (/\b(public|open)\b/.test(normalized))
+    return "public";
+  if (grammarId === "rust" && /^pub\s*\(\s*(crate|super|in\b)/.test(normalized)) {
+    return "internal";
+  }
+  if (grammarId === "rust" && /^pub\b|^pub\s*\(/.test(normalized)) {
+    return "public";
+  }
+  return "unknown";
+}
+function declarationPrefix(text) {
+  const bodyStart = text.search(/[{\n]/);
+  return bodyStart === -1 ? text : text.slice(0, bodyStart);
+}
+function defaultModuleVisibility(grammarId) {
+  switch (grammarId) {
+    case "kotlin":
+    case "swift":
+    case "csharp":
+      return "internal";
+    case "php":
+      return "public";
+    default:
+      return "public";
+  }
+}
+function hasPrivateContainer(node) {
+  let current = node.parent;
+  while (current) {
+    if (isContainerNode(current) && visibilityFromText("", current.text) === "private") {
+      return true;
+    }
+    current = current.parent;
+  }
+  return false;
+}
+function isContainerNode(node) {
+  return /(?:class|struct|interface|object|protocol|namespace|module)/.test(node.type);
+}
+function isMemberLikeNode(node) {
+  return /(?:method|function)_declaration|function_definition/.test(node.type);
+}
+function isUppercasePublic(name) {
+  return /^[A-Z]/.test(name);
+}
+function isIdentifier(value) {
+  return /^[A-Za-z_$][\w$]*$/.test(value);
+}
+function maskCommentsAndStrings(source) {
+  const chars = [...source];
+  let i = 0;
+  while (i < chars.length) {
+    const ch = chars[i];
+    const next = chars[i + 1];
+    if (ch === "/" && next === "/") {
+      chars[i++] = " ";
+      chars[i++] = " ";
+      while (i < chars.length && chars[i] !== `
+`)
+        chars[i++] = " ";
+      continue;
+    }
+    if (ch === "/" && next === "*") {
+      chars[i++] = " ";
+      chars[i++] = " ";
+      while (i < chars.length) {
+        const end = chars[i] === "*" && chars[i + 1] === "/";
+        chars[i++] = " ";
+        if (end) {
+          chars[i++] = " ";
+          break;
+        }
+      }
+      continue;
+    }
+    if (ch === '"' || ch === "'" || ch === "`") {
+      const quote = ch;
+      chars[i++] = " ";
+      while (i < chars.length) {
+        if (chars[i] === "\\") {
+          chars[i++] = " ";
+          if (i < chars.length)
+            chars[i++] = " ";
+          continue;
+        }
+        const done = chars[i] === quote;
+        chars[i++] = " ";
+        if (done)
+          break;
+      }
+      continue;
+    }
+    i++;
+  }
+  return chars.join("");
+}
+
 // src/lang/symbol-graph.ts
 var _QueryCtor = null;
 var AST_TIMEOUT_MS = 500;
@@ -116198,6 +116500,8 @@ function buildFacts(tree, qs, grammarId) {
     if (cap)
       exportNodes.push(asTs(cap.node));
   }
+  const commonJsExports = isEsMGrammar(grammarId) ? collectCommonJsExports(root.text) : new Map;
+  const pythonAllNames = grammarId === "python" ? collectPythonAllNames(root.text) : null;
   const defs = [];
   const defNodes = [];
   const defNameKeys = new Set;
@@ -116208,10 +116512,11 @@ function buildFacts(tree, qs, grammarId) {
       continue;
     const kindKey = defCap.name.replace(/\.def$/, "");
     const kind = CAPTURE_KIND[kindKey] ?? "function";
-    let defNode = asTs(defCap.node);
-    const exported = exportNodes.some((en) => isNodeInside(en, defNode));
+    const originalDefNode = asTs(defCap.node);
+    let defNode = originalDefNode;
+    const explicitExported = exportNodes.some((en) => isNodeInside(en, defNode));
     let isDefaultExport = false;
-    if (exported && isEsMGrammar(grammarId)) {
+    if (explicitExported && isEsMGrammar(grammarId)) {
       isDefaultExport = exportNodes.some((en) => isNodeInside(en, defNode) && isDefaultExportStatement(en));
     }
     if (grammarId === "dart" && defNode.type === "function_signature") {
@@ -116230,11 +116535,24 @@ function buildFacts(tree, qs, grammarId) {
     for (const nc of nameCaps) {
       const nameNode = asTs(nc.node);
       const localName = nameNode.text;
-      const exportedName = isDefaultExport ? "default" : localName;
+      const commonJsExport = commonJsExports.get(localName);
+      const visibilityInfo = getSymbolVisibilityInfo({
+        grammarId,
+        localName,
+        kind,
+        defNode: originalDefNode,
+        rootNode: root,
+        isTopLevel: isTopLevelDef(originalDefNode, root),
+        explicitExported,
+        commonJsExport,
+        pythonAllNames
+      });
+      const exportedName = isDefaultExport ? "default" : commonJsExport?.exportedName ?? localName;
       defs.push({
         name: exportedName,
         kind,
-        exported,
+        exported: visibilityInfo.exported,
+        visibilityInfo,
         startLine: defNode.startPosition.row + 1,
         endLine: defNode.endPosition.row + 1
       });

package/dist/lang/symbol-graph.d.ts

@@ -1,8 +1,10 @@
+import { type SymbolVisibilityInfo } from './symbol-visibility';
 export interface FileSymbolFacts {
     defs: Array<{
         name: string;
         kind: 'function' | 'class' | 'const' | 'type' | 'interface' | 'enum' | 'method';
         exported: boolean;
+        visibilityInfo?: SymbolVisibilityInfo;
         startLine: number;
         endLine: number;
     }>;

package/dist/lang/symbol-visibility.d.ts

@@ -0,0 +1,38 @@
+export declare const SYMBOL_VISIBILITY_VALUES: readonly ["public", "internal", "protected", "private", "package", "unknown"];
+export type SymbolVisibility = (typeof SYMBOL_VISIBILITY_VALUES)[number];
+export declare const SYMBOL_EXPORTED_REASON_VALUES: readonly ["explicit_export", "top_level_public", "naming_convention", "modifier", "header_declaration", "namespace_public", "module_public", "unknown"];
+export type SymbolExportedReason = (typeof SYMBOL_EXPORTED_REASON_VALUES)[number];
+export declare const SYMBOL_API_SURFACE_KIND_VALUES: readonly ["export", "public", "entrypoint", "test", "private", "unknown"];
+export type SymbolApiSurfaceKind = (typeof SYMBOL_API_SURFACE_KIND_VALUES)[number];
+export interface SymbolVisibilityInfo {
+    exported: boolean;
+    visibility: SymbolVisibility;
+    exportedReason: SymbolExportedReason;
+    apiSurfaceKind: SymbolApiSurfaceKind;
+}
+export interface SymbolVisibilityNode {
+    type: string;
+    text: string;
+    parent: SymbolVisibilityNode | null;
+    children: Array<SymbolVisibilityNode | null>;
+}
+export interface CommonJsExportInfo {
+    localName: string;
+    exportedName: string;
+    exportedReason: 'explicit_export';
+    sourceIndex: number;
+}
+export interface SymbolVisibilityContext {
+    grammarId: string;
+    localName: string;
+    kind: 'function' | 'class' | 'const' | 'type' | 'interface' | 'enum' | 'method';
+    defNode: SymbolVisibilityNode;
+    rootNode: SymbolVisibilityNode;
+    isTopLevel: boolean;
+    explicitExported: boolean;
+    commonJsExport?: CommonJsExportInfo;
+    pythonAllNames?: Set<string> | null;
+}
+export declare function collectCommonJsExports(source: string): Map<string, CommonJsExportInfo>;
+export declare function collectPythonAllNames(source: string): Set<string> | null;
+export declare function getSymbolVisibilityInfo(ctx: SymbolVisibilityContext): SymbolVisibilityInfo;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.101.0",
+	"version": "7.102.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",