opencode-swarm 7.164.4 → 7.164.5

package/dist/tools/build-check.d.ts

@@ -5,7 +5,15 @@
  */
 import type { tool } from '@opencode-ai/plugin';
 import { type BuildDiscoverySkip } from '../build/discovery';
+import { loadGateOverrides } from '../config';
 import type { EvidenceVerdict } from '../config/evidence-schema';
+/**
+ * DI seam (issue #2524): the tool boundary self-loads the user's gate
+ * overrides; tests substitute this instead of touching the config loader.
+ */
+export declare const _internals: {
+    loadGateOverrides: typeof loadGateOverrides;
+};
 export declare const DEFAULT_TIMEOUT_MS = 300000;
 export declare const MAX_OUTPUT_BYTES: number;
 export declare const MAX_OUTPUT_LINES = 100;

package/dist/tools/placeholder-scan.d.ts

@@ -1,4 +1,6 @@
 import type { tool } from '@opencode-ai/plugin';
+import type { GateConfigOverrides } from '../config';
+import { loadGateOverrides } from '../config';
 import type { EvidenceVerdict } from '../config/evidence-schema';
 import { saveEvidence } from '../evidence/manager';
 export interface PlaceholderScanInput {
@@ -35,6 +37,12 @@ export interface PlaceholderScanResult {
         files_scanned: number;
         findings_count: number;
         files_with_findings: number;
+        /**
+         * Present only when the gate was skipped via
+         * `gates.placeholder_scan.enabled: false` (issue #2524) — distinguishes
+         * a config-disabled run from a genuinely clean scan.
+         */
+        disabled_reason?: string;
     };
 }
 /**
@@ -92,7 +100,7 @@ declare function collectNonStubBodyLines(rootNode: any): Set<number>;
 /**
  * Scan files for placeholder content (TODO/FIXME comments, stub implementations, etc.)
  */
-export declare function placeholderScan(input: PlaceholderScanInput, directory: string): Promise<PlaceholderScanResult>;
+export declare function placeholderScan(input: PlaceholderScanInput, directory: string, gateOverrides?: GateConfigOverrides['placeholder_scan']): Promise<PlaceholderScanResult>;
 export declare const placeholder_scan: ReturnType<typeof tool>;
 /**
  * Internal seam for direct testing of the body-shape walker without
@@ -105,5 +113,6 @@ export declare const _internals: {
     isStubSkeletonFunction: typeof isStubSkeletonFunction;
     isConstantLiteralNode: typeof isConstantLiteralNode;
     saveEvidence: typeof saveEvidence;
+    loadGateOverrides: typeof loadGateOverrides;
 };
 export {};

package/dist/tools/pre-check-batch.d.ts

@@ -4,7 +4,8 @@
  * Returns unified result with gates_passed status
  */
 import type { tool } from '@opencode-ai/plugin';
-import type { PluginConfig } from '../config';
+import type { GateConfigOverrides, PluginConfig } from '../config';
+import { loadGateOverrides } from '../config';
 import { saveEvidence } from '../evidence/manager.js';
 import { runExternalTool } from '../utils/external-tool-runner';
 import type { LintResult, ResolvedLinterCommand } from './lint';
@@ -30,6 +31,7 @@ export declare const _internals: {
     serializePreCheckResult: typeof serializePreCheckResult;
     resolveGatePreamble: typeof resolveGatePreamble;
     runPreCheckBatch: typeof runPreCheckBatch;
+    loadGateOverrides: typeof loadGateOverrides;
     MAX_COMBINED_BYTES: number;
 };
 export interface PreCheckBatchInput {
@@ -39,12 +41,22 @@ export interface PreCheckBatchInput {
     directory: string;
     /** SAST severity threshold (default: medium) */
     sast_threshold?: 'low' | 'medium' | 'high' | 'critical';
-    /** Optional plugin config */
+    /**
+     * Optional legacy plugin-config carrier for the gates slices. The public
+     * tool boundary no longer populates it (agents cannot pass config); direct
+     * callers/tests may. `gates` below takes precedence.
+     * @deprecated prefer the `gates` field (issue #2524).
+     */
     config?: PluginConfig;
+    /**
+     * User-written gate overrides (issue #2524) — loaded from the project/user
+     * config files by the public tool boundary via `loadGateOverrides`.
+     */
+    gates?: GateConfigOverrides;
     /**
      * Current phase number (positive integer >= 1).
-     * When provided, enables SAST baseline diffing: only findings absent from the
-     * phase-scoped baseline (.swarm/evidence/{phase}/sast-baseline.json) drive the
+     * When provided, enables SAST baseline diffing: only findings absent from
+     * the phase-scoped baseline (.swarm/evidence/{phase}/sast-baseline.json) drive the
      * fail verdict. Capture the baseline before first coder delegation via sast_scan
      * with capture_baseline:true.
      */
@@ -103,7 +115,7 @@ declare function runWithTimeout<T>(operation: (abortSignal: AbortSignal) => Prom
 /**
  * Run lint with detection and timeout
  */
-declare function runLintWrapped(files: string[] | undefined, directory: string, _config?: PluginConfig, abortSignal?: AbortSignal): Promise<ToolResult<LintResult>>;
+declare function runLintWrapped(files: string[] | undefined, directory: string, _gates?: GateConfigOverrides, abortSignal?: AbortSignal): Promise<ToolResult<LintResult>>;
 /**
  * Run lint on specific files only
  */
@@ -111,15 +123,15 @@ declare function runLintOnFiles(resolvedLinter: ResolvedLinterCommand, files: st
 /**
  * Run secretscan with timeout
  */
-declare function runSecretscanWrapped(files: string[] | undefined, directory: string, _config?: PluginConfig, abortSignal?: AbortSignal): Promise<ToolResult<SecretscanResult | SecretscanErrorResult>>;
+declare function runSecretscanWrapped(files: string[] | undefined, directory: string, _gates?: GateConfigOverrides, abortSignal?: AbortSignal): Promise<ToolResult<SecretscanResult | SecretscanErrorResult>>;
 /**
  * Run SAST scan with timeout
  */
-declare function runSastScanWrapped(changedFiles: string[], directory: string, severityThreshold: 'low' | 'medium' | 'high' | 'critical', config?: PluginConfig, phase?: number, abortSignal?: AbortSignal): Promise<ToolResult<SastScanResult>>;
+declare function runSastScanWrapped(changedFiles: string[], directory: string, severityThreshold: 'low' | 'medium' | 'high' | 'critical', gates?: GateConfigOverrides, phase?: number, abortSignal?: AbortSignal): Promise<ToolResult<SastScanResult>>;
 /**
  * Run quality budget with timeout
  */
-declare function runQualityBudgetWrapped(changedFiles: string[], directory: string, config?: PluginConfig, abortSignal?: AbortSignal): Promise<ToolResult<QualityBudgetResult>>;
+declare function runQualityBudgetWrapped(changedFiles: string[], directory: string, gates?: GateConfigOverrides, abortSignal?: AbortSignal): Promise<ToolResult<QualityBudgetResult>>;
 /**
  * Parse unified diff output (with -U0) to extract added/modified line numbers per file.
  * Returns a Map from normalised file path → Set of changed line numbers.

package/dist/tools/quality-budget.d.ts

@@ -1,4 +1,5 @@
 import type { tool } from '@opencode-ai/plugin';
+import { loadGateOverrides } from '../config';
 import type { QualityBudgetConfig } from '../config/schema';
 import { computeQualityMetrics, type QualityMetrics, type QualityViolation } from '../quality/metrics';
 export interface QualityBudgetInput {
@@ -31,4 +32,5 @@ export declare const quality_budget: ReturnType<typeof tool>;
 export declare const _internals: {
     qualityBudget: typeof qualityBudget;
     computeQualityMetrics: typeof computeQualityMetrics;
+    loadGateOverrides: typeof loadGateOverrides;
 };

package/dist/tools/sast-scan.d.ts

@@ -3,7 +3,8 @@
  * Integrates Tier A rules (offline) and optional Semgrep (Tier B)
  */
 import type { ToolDefinition } from '@opencode-ai/plugin/tool';
-import type { PluginConfig } from '../config';
+import type { GateConfigOverrides } from '../config';
+import { loadGateOverrides } from '../config';
 import type { EvidenceVerdict } from '../config/evidence-schema';
 import { checkSemgrepAvailable, isSemgrepAvailable, runSemgrep } from '../sast/semgrep';
 export interface SastScanInput {
@@ -56,6 +57,12 @@ export interface SastScanResult {
     findings: SastScanFinding[];
     /** Summary information */
     summary: {
+        /**
+         * Present only when the gate was skipped via
+         * `gates.sast_scan.enabled: false` (issue #2524) — distinguishes a
+         * config-disabled run from a genuinely clean scan.
+         */
+        disabled_reason?: string;
         /** Engine used for scanning */
         engine: 'tier_a' | 'tier_a+tier_b';
         /** Number of files scanned */
@@ -121,7 +128,7 @@ export interface SastScanFinding {
  * - Tier A: Built-in pattern-based rules (always runs)
  * - Tier B: Semgrep (optional, if available on PATH)
  */
-export declare function sastScan(input: SastScanInput, directory: string, config?: PluginConfig): Promise<SastScanResult>;
+export declare function sastScan(input: SastScanInput, directory: string, gates?: GateConfigOverrides): Promise<SastScanResult>;
 /**
  * SAST Scan tool - Static Application Security Testing
  * Scans changed files for security vulnerabilities using:
@@ -139,4 +146,5 @@ export declare const _internals: {
     checkSemgrepAvailable: typeof checkSemgrepAvailable;
     isSemgrepAvailable: typeof isSemgrepAvailable;
     runSemgrep: typeof runSemgrep;
+    loadGateOverrides: typeof loadGateOverrides;
 };

package/dist/tools/sbom-generate.d.ts

@@ -5,6 +5,14 @@
  * for manifest/lock files and generating CycloneDX format output.
  */
 import type { tool } from '@opencode-ai/plugin';
+import { loadGateOverrides } from '../config';
+/**
+ * DI seam (issue #2524): the tool boundary self-loads the user's gate
+ * overrides; tests substitute this instead of touching the config loader.
+ */
+export declare const _internals: {
+    loadGateOverrides: typeof loadGateOverrides;
+};
 export interface SbomGenerateInput {
     /** Scope of the scan: 'changed' for modified files only, 'all' for entire project */
     scope: 'changed' | 'all';
@@ -22,5 +30,11 @@ export interface SbomGenerateResult {
     components_count: number;
     /** Path to the generated SBOM file */
     output_path: string;
+    /**
+     * Present only when the gate was skipped because the user disabled it via
+     * `gates.sbom_generate.enabled: false` (issue #2524) — distinguishes a
+     * config skip from "no manifests found".
+     */
+    disabled_reason?: string;
 }
 export declare const sbom_generate: ReturnType<typeof tool>;

package/dist/tools/syntax-check.d.ts

@@ -1,6 +1,14 @@
 import type { tool } from '@opencode-ai/plugin';
-import type { PluginConfig } from '../config';
+import type { GateConfigOverrides } from '../config';
+import { loadGateOverrides } from '../config';
 import type { EvidenceVerdict } from '../config/evidence-schema';
+/**
+ * DI seam (issue #2524): the tool boundary self-loads the user's gate
+ * overrides; tests substitute this instead of touching the config loader.
+ */
+export declare const _internals: {
+    loadGateOverrides: typeof loadGateOverrides;
+};
 export interface SyntaxCheckInput {
     /** Files to check (from diff gate) */
     changed_files: Array<{
@@ -31,7 +39,7 @@ export interface SyntaxCheckResult {
 /**
  * Run syntax check on changed files
  *
- * Respects config.gates.syntax_check.enabled - returns skipped if disabled
+ * Respects gates.syntax_check.enabled - returns skipped if disabled
  */
-export declare function syntaxCheck(input: SyntaxCheckInput, directory: string, config?: PluginConfig): Promise<SyntaxCheckResult>;
+export declare function syntaxCheck(input: SyntaxCheckInput, directory: string, gates?: GateConfigOverrides): Promise<SyntaxCheckResult>;
 export declare const syntax_check: ReturnType<typeof tool>;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.164.4",
+	"version": "7.164.5",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",