opencode-swarm 7.177.1 → 7.178.1

package/dist/tools/scope-validate.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Read-only shell-write scope advisory for the MCP surface (#2500).
+ *
+ * This tool is deliberately an evaluator only. It never executes a command,
+ * publishes an OpenCode scope binding, or persists any state. The decision is
+ * composed from the same classifier, write detector, containment, and file
+ * authority helpers used by the live guardrails.
+ */
+import { z } from 'zod';
+import { createSwarmTool } from './create-tool';
+export declare const scopeValidateArgs: {
+    command: z.ZodString;
+    shell: z.ZodEnum<{
+        powershell: "powershell";
+        cmd: "cmd";
+        posix: "posix";
+    }>;
+    scope_files: z.ZodArray<z.ZodString>;
+};
+export declare const scopeValidateSchema: z.ZodObject<{
+    command: z.ZodString;
+    shell: z.ZodEnum<{
+        powershell: "powershell";
+        cmd: "cmd";
+        posix: "posix";
+    }>;
+    scope_files: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type ScopeValidateArgs = {
+    command: string;
+    shell: 'posix' | 'powershell' | 'cmd';
+    scope_files: string[];
+};
+export interface ScopeValidateTarget {
+    category: string;
+    operator: string;
+    path: string;
+}
+export interface ScopeValidateResult {
+    allowed: true;
+    shell: ScopeValidateArgs['shell'];
+    command_digest: string;
+    targets: ScopeValidateTarget[];
+}
+export declare class ScopeValidationError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Evaluate a shell command against an inline scope without executing it.
+ * Every filesystem path is checked against the supplied root and scope before
+ * a successful result is returned.
+ */
+export declare function evaluateScopeValidate(args: ScopeValidateArgs, directory: string): ScopeValidateResult;
+export declare const scope_validate: ReturnType<typeof createSwarmTool>;

package/dist/tools/tool-metadata.d.ts

@@ -373,6 +373,10 @@ export declare const TOOL_METADATA: {
         description: string;
         agents: "architect"[];
     };
+    scope_validate: {
+        description: string;
+        agents: "architect"[];
+    };
     knowledge_query: {
         description: string;
         agents: ("architect" | "skill_improver" | "spec_writer")[];
@@ -541,6 +545,10 @@ export declare const TOOL_METADATA: {
         description: string;
         agents: ("reviewer" | "test_engineer" | "coder" | "critic" | "critic_finding_validator" | "architect" | "sme" | "docs" | "docs_design" | "designer" | "critic_sounding_board" | "critic_drift_verifier" | "critic_hallucination_verifier" | "critic_architecture_supervisor" | "curator_init" | "curator_phase" | "skill_improver" | "spec_writer")[];
     };
+    knowledge_receipt_status: {
+        description: string;
+        agents: "architect"[];
+    };
     knowledge_archive: {
         description: string;
         agents: "architect"[];

package/dist/utils/path-security.d.ts

@@ -175,6 +175,27 @@ export declare function validateSymlinkBoundary(targetPath: string, rootPath: st
  * @returns true if the canonical target is within the canonical root
  */
 export declare function isCanonicalPathWithinRoot(targetPath: string, rootPath: string): boolean;
+/**
+ * Build a canonical containment checker for a single root.
+ *
+ * Scope validation may check thousands of entries against one workspace root.
+ * Calling `isCanonicalPathWithinRoot` for every entry re-resolves the same root
+ * and the same existing ancestors, which turns an otherwise linear validation
+ * into a synchronous filesystem bottleneck. This checker keeps the root and
+ * observed ancestors local to one evaluation, and only canonicalizes entries
+ * that are actually links. A regular entry beneath a non-link ancestor is
+ * already lexically inside the validated root; canonicalizing it adds no
+ * security signal. Missing entries still walk to the nearest existing
+ * ancestor, so a symlinked directory cannot be used to escape the root.
+ *
+ * The cache is deliberately per-checker (never module-global) and bounded.
+ */
+export declare function createCanonicalPathWithinRootChecker(rootPath: string): (targetPath: string) => boolean;
+/**
+ * Build a relative-target validator that reuses one canonical root and its
+ * observed ancestor cache across a batch of paths.
+ */
+export declare function createTargetWithinRootValidator(root: string): (filePath: string) => string | null;
 /**
  * Validate that a caller-supplied path stays within an allowed root directory.
  * Rejects empty paths, absolute paths (POSIX + Windows drive), traversal,

package/opencode-swarm.schema.json

@@ -5400,6 +5400,20 @@
         }
       },
       "additionalProperties": false
+    },
+    "dashboard": {
+      "description": "Opt-in local mission-control dashboard over durable swarm state (issue #2509). Disabled by default; set port > 0 to enable the loopback-only read-only view.",
+      "type": "object",
+      "properties": {
+        "port": {
+          "default": 0,
+          "description": "Loopback port for the opt-in local dashboard (issue #2509). 0 or absent = disabled (default).",
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 65535
+        }
+      },
+      "additionalProperties": false
     }
   },
   "additionalProperties": false

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.177.1",
+	"version": "7.178.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-fywmb8jh.js

@@ -1,72 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-yepxmq4f.js";
-import"./index-hnvmj9wx.js";
-import"./index-vfp9hjgv.js";
-import"./index-fgv6qp10.js";
-import"./index-eefz8ghz.js";
-import"./index-1042jnb9.js";
-import"./index-4ygb35m1.js";
-import"./index-k6bjkqw8.js";
-import"./index-txdagbh7.js";
-import"./index-n1tcj1q7.js";
-import"./index-fpbcxykc.js";
-import"./index-qgf5xexz.js";
-import"./index-k330631a.js";
-import"./index-7c24bb1r.js";
-import"./index-fyfbpz4f.js";
-import"./index-eya03h5m.js";
-import"./index-549wxbe1.js";
-import"./index-zsrtt42s.js";
-import"./index-822hhbkc.js";
-import"./index-5d2avnj9.js";
-import"./index-7nsvszwn.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-fnq5ac3f.js";
-import"./index-j82xdrqp.js";
-import"./index-bqmxxbrw.js";
-import"./index-cv191ybt.js";
-import"./index-exhm2ztr.js";
-import"./index-2s7dvzff.js";
-import"./index-yrs4wwfq.js";
-import"./index-wemtrnch.js";
-import"./index-rtry5xyf.js";
-import"./index-67amf4my.js";
-import"./index-frcemc0b.js";
-import"./index-wrt875kh.js";
-import"./index-7ntcak58.js";
-import"./index-drgt81xf.js";
-import"./index-t2nf57mv.js";
-import"./index-v2he8xfj.js";
-import"./index-1bq6hkw5.js";
-import"./index-xnednxvm.js";
-import"./index-rdm3px0g.js";
-import"./index-ry16d01s.js";
-import"./index-tbswvz8s.js";
-import"./index-634pjhe4.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-en0p0hqp.js";
-import"./index-tj0sdxg9.js";
-import"./index-7g4c7s5r.js";
-import"./index-2jtmevrr.js";
-import"./index-yhaxn5r7.js";
-import"./index-1xnse449.js";
-import"./index-c1ggtmpm.js";
-import"./index-m0cdjvtv.js";
-import"./index-zz7gzw57.js";
-import"./index-4ddpvd5c.js";
-import"./index-e48h8m73.js";
-import"./index-n7nzwz0q.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-76qm2c2y.js";
-import"./index-yzjaj53h.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-gm69b76w.js

@@ -1,73 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-t6q73twc.js";
-import"./index-yepxmq4f.js";
-import"./index-hnvmj9wx.js";
-import"./index-vfp9hjgv.js";
-import"./index-fgv6qp10.js";
-import"./index-eefz8ghz.js";
-import"./index-1042jnb9.js";
-import"./index-4ygb35m1.js";
-import"./index-k6bjkqw8.js";
-import"./index-txdagbh7.js";
-import"./index-n1tcj1q7.js";
-import"./index-fpbcxykc.js";
-import"./index-qgf5xexz.js";
-import"./index-k330631a.js";
-import"./index-7c24bb1r.js";
-import"./index-fyfbpz4f.js";
-import"./index-eya03h5m.js";
-import"./index-549wxbe1.js";
-import"./index-zsrtt42s.js";
-import"./index-822hhbkc.js";
-import"./index-5d2avnj9.js";
-import"./index-7nsvszwn.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-fnq5ac3f.js";
-import"./index-j82xdrqp.js";
-import"./index-bqmxxbrw.js";
-import"./index-cv191ybt.js";
-import"./index-exhm2ztr.js";
-import"./index-2s7dvzff.js";
-import"./index-yrs4wwfq.js";
-import"./index-wemtrnch.js";
-import"./index-rtry5xyf.js";
-import"./index-67amf4my.js";
-import"./index-frcemc0b.js";
-import"./index-wrt875kh.js";
-import"./index-7ntcak58.js";
-import"./index-drgt81xf.js";
-import"./index-t2nf57mv.js";
-import"./index-v2he8xfj.js";
-import"./index-1bq6hkw5.js";
-import"./index-xnednxvm.js";
-import"./index-rdm3px0g.js";
-import"./index-ry16d01s.js";
-import"./index-tbswvz8s.js";
-import"./index-634pjhe4.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-en0p0hqp.js";
-import"./index-tj0sdxg9.js";
-import"./index-7g4c7s5r.js";
-import"./index-2jtmevrr.js";
-import"./index-yhaxn5r7.js";
-import"./index-1xnse449.js";
-import"./index-c1ggtmpm.js";
-import"./index-m0cdjvtv.js";
-import"./index-zz7gzw57.js";
-import"./index-4ddpvd5c.js";
-import"./index-e48h8m73.js";
-import"./index-n7nzwz0q.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-76qm2c2y.js";
-import"./index-yzjaj53h.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};

package/dist/cli/hive-promoter-hc0r0z9h.js

@@ -1,87 +0,0 @@
-// @bun
-import {
-  _internals3 as _internals,
-  checkHivePromotions,
-  countDistinctProjects,
-  createHivePromoterHook,
-  isHiveEligible,
-  promoteFromSwarm,
-  promoteToHive
-} from "./index-yepxmq4f.js";
-import"./index-hnvmj9wx.js";
-import"./index-vfp9hjgv.js";
-import"./index-fgv6qp10.js";
-import"./index-eefz8ghz.js";
-import"./index-1042jnb9.js";
-import"./index-4ygb35m1.js";
-import"./index-k6bjkqw8.js";
-import"./index-txdagbh7.js";
-import"./index-n1tcj1q7.js";
-import"./index-fpbcxykc.js";
-import"./index-qgf5xexz.js";
-import"./index-k330631a.js";
-import"./index-7c24bb1r.js";
-import"./index-fyfbpz4f.js";
-import"./index-eya03h5m.js";
-import"./index-549wxbe1.js";
-import"./index-zsrtt42s.js";
-import"./index-822hhbkc.js";
-import"./index-5d2avnj9.js";
-import"./index-7nsvszwn.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-fnq5ac3f.js";
-import"./index-j82xdrqp.js";
-import"./index-bqmxxbrw.js";
-import"./index-cv191ybt.js";
-import"./index-exhm2ztr.js";
-import"./index-2s7dvzff.js";
-import"./index-yrs4wwfq.js";
-import"./index-wemtrnch.js";
-import"./index-rtry5xyf.js";
-import"./index-67amf4my.js";
-import"./index-frcemc0b.js";
-import"./index-wrt875kh.js";
-import"./index-7ntcak58.js";
-import"./index-drgt81xf.js";
-import"./index-t2nf57mv.js";
-import"./index-v2he8xfj.js";
-import"./index-1bq6hkw5.js";
-import"./index-xnednxvm.js";
-import"./index-rdm3px0g.js";
-import"./index-ry16d01s.js";
-import"./index-tbswvz8s.js";
-import {
-  resolveHiveKnowledgePath
-} from "./index-634pjhe4.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-en0p0hqp.js";
-import"./index-tj0sdxg9.js";
-import"./index-7g4c7s5r.js";
-import"./index-2jtmevrr.js";
-import"./index-yhaxn5r7.js";
-import"./index-1xnse449.js";
-import"./index-c1ggtmpm.js";
-import"./index-m0cdjvtv.js";
-import"./index-zz7gzw57.js";
-import"./index-4ddpvd5c.js";
-import"./index-e48h8m73.js";
-import"./index-n7nzwz0q.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-76qm2c2y.js";
-import"./index-yzjaj53h.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  resolveHiveKnowledgePath,
-  promoteToHive,
-  promoteFromSwarm,
-  isHiveEligible,
-  createHivePromoterHook,
-  countDistinctProjects,
-  checkHivePromotions,
-  _internals
-};