opencode-swarm 7.13.1 → 7.14.0

package/dist/tools/convene-council.d.ts

@@ -21,11 +21,11 @@ export declare const ArgsSchema: z.ZodObject<{
     roundNumber: z.ZodDefault<z.ZodNumber>;
     verdicts: z.ZodArray<z.ZodObject<{
         agent: z.ZodEnum<{
-            sme: "sme";
             reviewer: "reviewer";
-            critic: "critic";
-            explorer: "explorer";
             test_engineer: "test_engineer";
+            explorer: "explorer";
+            sme: "sme";
+            critic: "critic";
         }>;
         verdict: z.ZodEnum<{
             APPROVE: "APPROVE";

package/dist/tools/submit-phase-council-verdicts.d.ts

@@ -7,11 +7,11 @@ export declare const ArgsSchema: z.ZodObject<{
     roundNumber: z.ZodOptional<z.ZodNumber>;
     verdicts: z.ZodArray<z.ZodObject<{
         agent: z.ZodEnum<{
-            sme: "sme";
             reviewer: "reviewer";
-            critic: "critic";
-            explorer: "explorer";
             test_engineer: "test_engineer";
+            explorer: "explorer";
+            sme: "sme";
+            critic: "critic";
         }>;
         verdict: z.ZodEnum<{
             APPROVE: "APPROVE";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.13.1",
+	"version": "7.14.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/__tests__/acknowledge-spec-drift.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/cli-version.adversarial.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/cli-version.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/conflict-resolution.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/convene-general-council.test.d.ts

@@ -1,12 +0,0 @@
-/**
- * Tests for src/tools/convene-general-council.ts.
- *
- * Covers config gating, evidence path isolation (.swarm/council/general/),
- * roundsCompleted derivation, and structured-error responses for invalid
- * args + disabled-config paths. The moderatorPrompt field has been removed
- * from ConveneOk — the architect now synthesizes the final answer directly
- * via the inline output rules in MODE: COUNCIL.
- *
- * Real filesystem (tmp dir) for evidence-path assertions; no real HTTP.
- */
-export {};

package/dist/__tests__/critic_drift_verifier-whitelist.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/critic_hallucination_verifier-whitelist.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/disagreement-detector.test.d.ts

@@ -1,7 +0,0 @@
-/**
- * Tests for src/council/disagreement-detector.ts.
- *
- * Pure-function tests — no mocks, no I/O. Adversarial cases for empty/missing
- * fields and the cap-of-10 boundary.
- */
-export {};

package/dist/__tests__/evidence-lock.adversarial.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * Adversarial tests for evidence write locking — 16 concurrent writers.
- *
- * Proves that no writes are lost when concurrent callers race on the same
- * evidence file.  Each writer appends a unique marker; after all settle we
- * assert every marker is present exactly once.
- */
-export {};

package/dist/__tests__/evidence-lock.test.d.ts

@@ -1,6 +0,0 @@
-/**
- * Tests for src/evidence/lock.ts
- *
- * Runs in per-file isolation (CI step 6). Uses real filesystem via os.tmpdir().
- */
-export {};

package/dist/__tests__/gate-evidence.adversarial.test.d.ts

@@ -1,7 +0,0 @@
-/**
- * Adversarial tests for gate-evidence write locking — concurrent gate record.
- *
- * Proves that no gate records are lost when concurrent callers race on the
- * same gate-evidence file.
- */
-export {};

package/dist/__tests__/general-council-service.test.d.ts

@@ -1,7 +0,0 @@
-/**
- * Tests for src/council/general-council-service.ts.
- *
- * Pure-function tests. Verify confidence-weighted consensus, MAINTAIN/CONCEDE/
- * NUANCE protocol, source dedup, and well-formed synthesis markdown.
- */
-export {};

package/dist/__tests__/lint-spec.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/preflight-phase.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/qa-gate-hardening.test.d.ts

@@ -1,12 +0,0 @@
-/**
- * QA gate hardening tests.
- *
- * Covers the additions from the QA gate hardening rollout:
- * 1. council_general_review as the 9th and final_council as the 11th QA gate (default OFF, ratchet-tighter, persistence)
- * 2. Behavioral guidance markup is rendered into the architect prompt for SPECIFY,
- *    BRAINSTORM, and PLAN inline gate-selection paths.
- * 3. save_plan blocks with QA_GATE_SELECTION_REQUIRED when context.md has no
- *    `## Pending QA Gate Selection` section AND no existing QaGateProfile.
- * 4. SWARM_SKIP_GATE_SELECTION=1 bypasses the new check.
- */
-export {};

package/dist/__tests__/req-coverage.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/security-adversarial.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/sounding-board-parser.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/spec-hash.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/spec-schema.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/web-search-provider.test.d.ts

@@ -1,6 +0,0 @@
-/**
- * Tests for src/council/web-search-provider.ts and src/tools/web-search.ts.
- *
- * All HTTP calls are mocked via globalThis.fetch — no real network traffic.
- */
-export {};

package/dist/__tests__/write-drift-evidence-requirement-coverage.test.d.ts

@@ -1,4 +0,0 @@
-/**
- * Test for requirementCoverage wiring in write_drift_evidence tool
- */
-export {};

package/dist/adversarial-tests.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/architect-permission.adversarial.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * Adversarial Tests for Architect Task-Permission Hotfix (Task 1.21)
- * Focus: Agent naming edge cases, prefix misclassification, permission leakage
- */
-export {};

package/dist/agents/architect.commands-list.adversarial.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/architect.commands-list.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/architect.dark-matter.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/architect.designer-gate.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/architect.skip-aliases.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/coder.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/council-prompts.test.d.ts

@@ -1,9 +0,0 @@
-/**
- * Tests for src/agents/council-prompts.ts.
- *
- * Covers prompt content (NSED protocol markers, hardcoded persona/memberId),
- * AGENT_TOOL_MAP enforcement (empty tool lists for the three council agents,
- * web_search shifted to architect), and protocol preservation across the
- * Round 1 → Round 2 deliberation flow.
- */
-export {};

package/dist/agents/council-registration.test.d.ts

@@ -1,23 +0,0 @@
-/**
- * Integration tests for council agent registration in src/agents/index.ts.
- *
- * Pins two behaviors that the council-mode refactor (commit c7e3be4) intends
- * to guarantee:
- *
- * 1. Model resolution regression test — `council_generalist` / `council_skeptic`
- *    / `council_domain_expert` MUST source their models from the user's
- *    configured `agents.reviewer.model` / `agents.critic.model` /
- *    `agents.sme.model` overrides, not from a hardcoded DEFAULT_MODELS
- *    fallback. This pins the fix for the original bug where
- *    `getModel('council_member')` always fell back to
- *    DEFAULT_MODELS.council_member because no swarm config ever had a
- *    `council_member` entry.
- *
- * 2. Deprecation warning pathway test — setting
- *    `council.general.moderatorModel` MUST surface a deferred deprecation
- *    warning at agent-creation time. The legacy `council.general.moderator`
- *    field is NOT checked because the strict schema applies a default of
- *    `true` to it, and the warning would then fire for every council user
- *    (real bug fixed in commit eee5977).
- */
-export {};

package/dist/agents/explorer-consumer-contract.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/explorer-role-boundary.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/prompt-namespace.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/reviewer.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/agents/test-engineer.adversarial.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * Adversarial Security Tests for Test Engineer Agent (Task 7.1)
- * Focus: Prompt injection, unsafe execution bypass, secret leakage
- */
-export {};

package/dist/agents/test-engineer.security.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/background/trigger.vulnerability.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/archive.error-handling.test.d.ts

@@ -1,9 +0,0 @@
-/**
- * Tests for archive.ts graceful handling of corrupt evidence files (Task 1.6)
- *
- * Verifies that the try/catch in handleArchiveCommand's dry-run loop
- * catches exceptions from loadEvidence and skips corrupt/unreadable files.
- *
- * Uses real filesystem operations like existing archive tests.
- */
-export {};

package/dist/commands/benchmark.error-handling.test.d.ts

@@ -1,7 +0,0 @@
-/**
- * Tests for benchmark.ts graceful handling of corrupt evidence files.
- *
- * Verifies that the try/catch in handleBenchmarkCommand's cumulative loop
- * catches exceptions from loadEvidence and skips corrupt/unreadable files.
- */
-export {};

package/dist/commands/brainstorm.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/clashes-with-native-cc.test.d.ts

@@ -1,10 +0,0 @@
-/**
- * Task 1.3: clashesWithNativeCcCommand field + buildHelpText() conflict warnings
- * Structural tests verifying:
- * 1. CommandEntry type accepts the new optional field
- * 2. All 9 conflicting commands have the field set correctly
- * 3. buildHelpText() outputs conflict warnings for CRITICAL commands
- * 4. buildHelpText() does NOT output false conflict warnings
- * 5. doctor deprecated alias has clashesWithNativeCcCommand: '/doctor'
- */
-export {};

package/dist/commands/command-adapters.security.test.d.ts

@@ -1,14 +0,0 @@
-/**
- * Adversarial Security Tests for Command Adapters (Task 5.10)
- *
- * ATTACK VECTORS COVERED:
- * 1. Path Traversal - attempts to escape .swarm directory via command args
- * 2. Null Byte Injection - injecting null bytes to truncate paths/strings
- * 3. Control Character Injection - injecting control chars (0x00-0x1F)
- * 4. Command Injection - shell metacharacters in args
- * 5. Argument Pollution - malformed, oversized, special character args
- * 6. Flag Injection - malicious flag values and combinations
- * 7. Unicode Attacks - unicode normalization/replacement attacks
- * 8. Edge Cases - empty, extremely long, boundary values
- */
-export {};

package/dist/commands/command-names.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/commands.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/conflict-registry.structural.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/conflict-registry.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * CI gate tests for conflict-registry data integrity.
- * Ensures CRITICAL conflicts are properly registered and disambiguation notes are present.
- */
-export {};

package/dist/commands/council.test.d.ts

@@ -1,4 +0,0 @@
-/**
- * Tests for /swarm council command handler.
- */
-export {};

package/dist/commands/curate.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/dark-matter.error-handling.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/first-run.test.d.ts

@@ -1,11 +0,0 @@
-/**
- * Tests for first-run sentinel detection, welcome message, and error handling
- * catch block in createSwarmCommandHandler().
- *
- * Covers:
- * - First-run sentinel detection (atomic 'wx' flag write)
- * - Welcome message prepended on first run only
- * - Error handling catch block when command handler throws
- * - Regression: existing shortcut-routing tests still pass
- */
-export {};

package/dist/commands/full-auto-config-guard.test.d.ts

@@ -1,7 +0,0 @@
-/**
- * Tests for the config-guard behavior in handleFullAutoCommand.
- *
- * When swarmState.fullAutoEnabledInConfig is false, activation must be blocked.
- * When it is true, activation must succeed. Disabling always works regardless.
- */
-export {};

package/dist/commands/full-auto-discoverability.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * Tests for Full-Auto command discoverability fixes.
- *
- * Verifies that TUI shortcuts, error messages, and registry entries
- * all use the dashed form (/swarm-full-auto) while maintaining backward
- * compatibility with the spaced form (/swarm full-auto).
- */
-export {};

package/dist/commands/full-auto-registration.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * Tests for Full-Auto Mode command registration in src/commands/index.ts.
- * Verifies import, export, help text, and registry routing for /swarm full-auto.
- */
-export {};

package/dist/commands/full-auto-sessionid.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * Tests for empty sessionID handling in handleFullAutoCommand.
- * Tests the CLI wiring fix where empty sessionID returns proper error message.
- */
-export {};

package/dist/commands/full-auto.regression.test.d.ts

@@ -1,10 +0,0 @@
-/**
- * Regression Tests for Full-Auto Mode Integration.
- *
- * Covers the integration surfaces unique to full-auto mode:
- * 1. /swarm full-auto command toggle, on, off
- * 2. hasActiveFullAuto() - session-scoped and global-fallback behavior
- * 3. System-enhancer hook injects FULL-AUTO MODE ACTIVE banner (Path A and global)
- * 4. Counter reset side-effects are visible after disable
- */
-export {};

package/dist/commands/full-auto.test.d.ts

@@ -1,6 +0,0 @@
-/**
- * Tests for handleFullAutoCommand function.
- * Tests the /swarm full-auto command toggle functionality,
- * including the unique counter-reset behavior on disable.
- */
-export {};

package/dist/commands/handoff.error-handling.adversarial.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/handoff.error-handling.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/index.help-text.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/index.not-found.adversarial.test.d.ts

@@ -1,12 +0,0 @@
-/**
- * Adversarial security tests for command-not-found UX in createSwarmCommandHandler.
- *
- * Attack vectors covered:
- * 1. Very long command name (10000+ chars) — does it hang or crash?
- * 2. Command with special characters (script injection, shell injection, template literals)
- * 3. Command with newlines/embedded control chars — does it break output format?
- * 4. Command with unicode/emoji — handled gracefully?
- * 5. Extremely deep tokens array (1000 elements) — does findSimilarCommands handle it?
- * 6. Null bytes in command name
- */
-export {};

package/dist/commands/index.not-found.test.d.ts

@@ -1,11 +0,0 @@
-/**
- * Tests for command-not-found UX improvement in createSwarmCommandHandler.
- *
- * Covers:
- * - Unknown single-word command shows "Command not found" + suggestions + footer
- * - Unknown compound command shows header with command name
- * - Empty tokens (empty array) → returns buildHelpText() output
- * - Command with no similar matches → shows header + footer only (no "Did you mean" section)
- * - Multiple similar commands returned → all shown with bullet format
- */
-export {};

package/dist/commands/qa-gates.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/registration-parity.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/registry-documentation.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/registry-type.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/registry.find-similar.adversarial.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/registry.find-similar.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/registry.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/shortcut-routing.test.d.ts

@@ -1,11 +0,0 @@
-/**
- * Regression tests for swarm-* shortcut command routing.
- *
- * When a user selects a shortcut command from the OpenCode command picker
- * (e.g. swarm-config, swarm-status, swarm-turbo), OpenCode sets
- * input.command to the registered key name ('swarm-config') rather than
- * the generic 'swarm' key. Previously the handler returned early for any
- * command that wasn't exactly 'swarm', so these shortcuts fell through to
- * the LLM as plain text. This file verifies they are correctly routed.
- */
-export {};

package/dist/commands/simulate.report-write.adversarial.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/simulate.report-write.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/commands/turbo-registration.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * Tests for Task 3.12: Turbo Mode command registration in src/commands/index.ts
- * Verifies import, export, help text, and switch case routing for /swarm turbo
- */
-export {};

package/dist/commands/turbo-sessionid.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * Tests for Task 3.13: Empty sessionID handling in handleTurboCommand
- * Tests the CLI wiring fix where empty sessionID returns proper error message
- */
-export {};

package/dist/commands/turbo.regression.test.d.ts

@@ -1,11 +0,0 @@
-/**
- * Regression Tests for Task 4: Turbo Mode Integration
- *
- * These tests verify that Turbo Mode is correctly integrated across all surfaces:
- * 1. /swarm turbo command toggles turboMode correctly
- * 2. checkReviewerGate bypasses Stage B when turboMode is active AND task is not Tier 3
- * 3. Evidence records include turbo flag when recorded under turboMode
- * 4. Architect prompt includes TURBO MODE ACTIVE banner when active
- * 5. Status output shows TURBO MODE indicator when active
- */
-export {};

package/dist/commands/turbo.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * Tests for Task 3.11: handleTurboCommand function
- * Tests the /swarm turbo command toggle functionality
- */
-export {};

package/dist/config/constants.architect-whitelist.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/config/constants.security.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/council/__tests__/council-evidence-writer.adversarial.test.d.ts

@@ -1,6 +0,0 @@
-/**
- * Adversarial security tests for safeAssignOwnProps.
- * Tests prototype pollution attacks, constructor pollution, array smuggling,
- * and boundary violations.
- */
-export {};

package/dist/db/global-db.test.d.ts

@@ -1,7 +0,0 @@
-/**
- * Tests for src/db/global-db.ts.
- *
- * Uses XDG_CONFIG_HOME override so getPlatformConfigDir() resolves into
- * a temp directory (Linux only — this test suite is gated accordingly).
- */
-export {};

package/dist/db/project-db.test.d.ts

@@ -1,4 +0,0 @@
-/**
- * Tests for src/db/project-db.ts.
- */
-export {};

package/dist/db/qa-gate-profile.test.d.ts

@@ -1,4 +0,0 @@
-/**
- * Tests for src/db/qa-gate-profile.ts.
- */
-export {};

package/dist/diff/__tests__/semantic-classifier.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/diff/__tests__/summary-generator.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/gate-evidence.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/hooks/__tests__/repo-graph-builder.test.d.ts

@@ -1,12 +0,0 @@
-/**
- * Repo-graph builder hook tests (issue #704).
- *
- * These tests validate the contract that prevents the OpenCode Desktop hang:
- *   - calling `init()` returns control to the caller within a single
- *     macrotask (i.e. async-function-runs-sync-until-first-await is not
- *     reintroduced),
- *   - `toolAfter` waits for the initial scan before applying incremental
- *     updates (no race between the deferred init and the first write tool),
- *   - the homedir-refusal guard surfaces as a clean catch in `init()`.
- */
-export {};

package/dist/hooks/__tests__/semantic-diff-injection.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/hooks/agent-activity.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/hooks/cc-command-intercept.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/hooks/curator-drift-advisory.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/hooks/delegation-gate.evidence.test.d.ts

@@ -1,4 +0,0 @@
-/**
- * Integration tests for evidence recording in delegation-gate.ts toolAfter.
- */
-export {};