opencode-swarm 7.184.17 → 7.185.0

package/dist/providers/forge-provider.d.ts

@@ -0,0 +1,167 @@
+/**
+ * Forge provider core (issue #2733): the provider model that makes GitLab a
+ * first-class forge alongside GitHub for the PR/issue command surface.
+ *
+ * This module is the SINGLE source of truth for provider-specific facts that
+ * were previously hardcoded inline at every integration point (see the trace
+ * localization log for the six duplicated validators it replaces):
+ *
+ *   - which hosts indicate which provider (`detectForgeFromUrl`)
+ *   - how a git remote maps to provider + host + owner/repo
+ *     (`parseForgeRemoteUrl`; GitLab owners may be nested namespace paths)
+ *   - how canonical PR/MR and issue URLs are built (`buildPrUrl`/`buildIssueUrl`)
+ *   - how a PR URL canonicalizes for identity matching (`canonicalForgePrUrl`,
+ *     a drop-in for the four module-local `canonicalGitHubPrUrl` copies)
+ *   - how an explicit provider/base_url configuration plus the observed git
+ *     remotes resolve to a provider context (`resolveProviderSelection`,
+ *     fail-closed on ambiguity)
+ *   - which GitHub-synthesized fields a provider can serve
+ *     (`getProviderCapabilities` — honest "unavailable" reporting; GitLab's MR
+ *     API does not synthesize statusCheckRollup/reviewDecision/mergeStateStatus)
+ *
+ * Shape detection is CONFIG-FREE for the well-known hosts: github.com →
+ * github; gitlab.com and any host whose first label is `gitlab` → gitlab with
+ * that host. Every other host is generic and requires an explicit configured
+ * context (`resolveProviderSelection`); it is never silently assumed.
+ *
+ * Security note: every guard applied to GitHub URLs applies here unchanged —
+ * HTTPS-only, private/localhost-host rejection, IDN (non-ASCII) host
+ * rejection, control-character rejection — via the shared guards in
+ * `./host-guards.ts` (the same implementation url-security.ts re-exports).
+ * The `base_url` override is NOT a trust whitelist: it passes through the
+ * same guards and never bypasses one.
+ */
+export type ForgeProviderId = 'github' | 'gitlab';
+/** Canonical web host, lowercase (e.g. 'github.com', 'gitlab.internal.example.com'). */
+export interface ForgeContext {
+    provider: ForgeProviderId;
+    host: string;
+}
+export interface ForgeRemote extends ForgeContext {
+    owner: string;
+    repo: string;
+}
+export interface ForgeResourceRef extends ForgeContext {
+    owner: string;
+    repo: string;
+    number: number;
+}
+export interface ProviderSelectionInput {
+    config?: {
+        provider?: 'github' | 'gitlab' | 'auto';
+        /** camelCase form (frozen-check binding). */
+        baseUrl?: string;
+        /** snake_case form — the plugin config schema key (`forge.base_url`). */
+        base_url?: string;
+    };
+    remotes: string[];
+}
+export type ProviderSelection = {
+    ok: true;
+    context: ForgeContext;
+} | {
+    ok: false;
+    error: string;
+};
+/** Fields GitHub's `gh pr view` synthesizes and GitLab's MR API does not. */
+export interface ForgeCapabilities {
+    statusCheckRollup: boolean;
+    reviewDecision: boolean;
+    mergeStateStatus: boolean;
+}
+export declare const GITHUB_CANONICAL_HOST = "github.com";
+export declare const GITLAB_PUBLIC_HOST = "gitlab.com";
+/**
+ * Hosts whose first DNS label is exactly `gitlab` (gitlab.com,
+ * gitlab.example.com). The remainder must be a syntactically plausible
+ * hostname: non-empty, no empty labels (`gitlab..com`), no bare trailing dot
+ * (`gitlab.`), and no leading digit violation on the next label.
+ */
+export declare function isGitLabIndicatingHost(host: string): boolean;
+/**
+ * True when the URL string is a canonical PR URL of either provider shape.
+ * A `configured` context (declared via `forge.base_url`) additionally
+ * authorizes exactly that generic self-hosted GitLab host — every guard in
+ * canonicalForgePrUrl still applies to the URL itself.
+ */
+export declare function isForgePrUrl(url: string, configured?: ForgeContext): boolean;
+/**
+ * Shape-based provider detection from any https URL. github.com → github;
+ * gitlab.com or a `gitlab.`-prefixed host → gitlab with that host; anything
+ * else → null unless the host matches a `configured` context (issue #2733:
+ * `forge.base_url` declares a generic self-hosted GitLab instance, and the
+ * declared host is then authorized exactly as gitlab.com is — it is NOT a
+ * trust whitelist: every URL guard still applies).
+ */
+export declare function detectForgeFromUrl(url: string, configured?: ForgeContext): ForgeContext | null;
+/**
+ * Match a resource URL (`resource: 'pull'` matches GitHub `/pull/N` and GitLab
+ * `/-/merge_requests/N`; `'issues'` matches `/issues/N` and `/-/issues/N`).
+ * Returns the provider context plus owner/repo/number, or null when the URL
+ * is not a well-formed resource URL of a recognized provider host. Owner may
+ * be a multi-segment namespace path for GitLab. The input must already be
+ * sanitized (query/fragment/credentials stripped) by the caller.
+ */
+export declare function matchForgeResourceUrl(url: string, resource: 'issues' | 'pull', configured?: ForgeContext): ForgeResourceRef | null;
+/**
+ * Host-aware git-remote parsing (HTTPS and SSH scp forms). GitLab owners may
+ * be nested namespace paths (`group/subgroup/repo` → owner `group/subgroup`);
+ * the host is preserved and lowercased. Generic hosts return null — unlike
+ * url-security's legacy `parseGitRemoteUrl` path fallback (kept for GHE/proxy
+ * bare-number resolution), this function never guesses a provider.
+ */
+export declare function parseForgeRemoteUrl(remoteUrl: string): ForgeRemote | null;
+/** Build the canonical PR/MR URL for a provider context. */
+export declare function buildPrUrl(ctx: ForgeContext, owner: string, repo: string, number: number): string;
+/** Build the canonical issue URL for a provider context. */
+export declare function buildIssueUrl(ctx: ForgeContext, owner: string, repo: string, number: number): string;
+/**
+ * Canonical scheme-less lowercase PR/MR URL for identity matching — the
+ * provider-aware replacement for the four duplicated `canonicalGitHubPrUrl`
+ * implementations (github output is byte-identical: host and owner/repo
+ * lowercased, trailing slash dropped). Null for anything that is not an
+ * https PR/MR URL of a recognized provider host.
+ */
+export declare function canonicalForgePrUrl(value: string, configured?: ForgeContext): string | null;
+/**
+ * Honest capability reporting. GitHub's `gh pr view` synthesizes these three
+ * fields; GitLab's MR API does not provide equivalents, so consumers must
+ * surface an explicit "not supported / unavailable" marker instead of
+ * fabricating or substituting a value (issue #2733 AC7).
+ */
+export declare function getProviderCapabilities(provider: ForgeProviderId): ForgeCapabilities;
+/**
+ * Production adapter: resolve the active forge context from the plugin
+ * config's `forge` section (schema keys: provider, base_url) plus the
+ * observed git remotes. Returns null when no context can be determined —
+ * callers fall back to config-free shape detection (GitHub behavior
+ * unchanged). Used lazily by the command surface ONLY when shape detection
+ * cannot answer (generic-host URLs / ambiguous bare numbers), so ordinary
+ * GitHub usage performs zero extra I/O.
+ */
+export declare function resolveForgeContextFromPluginConfig(pluginConfig: {
+    forge?: {
+        provider?: string;
+        base_url?: string;
+    };
+} | undefined, remotes: string[]): ForgeContext | null;
+/**
+ * Resolve the active provider context from explicit configuration plus the
+ * observed git remotes. FAIL-CLOSED on ambiguity — a mixed/generic/empty
+ * remote set never silently assumes a provider.
+ *
+ * Rules (frozen by acceptance checks C3/C4):
+ *  1. A configured `baseUrl` runs through the same guards as any forge URL
+ *     (HTTPS-only, non-private, ASCII host) and is stripped to its host; a
+ *     failing baseUrl is a configuration error, not a fallback trigger.
+ *  2. Explicit `provider: 'github'` selects github.com; combining it with a
+ *     `baseUrl` is a configuration conflict (GitHub's base is fixed).
+ *  3. Explicit `provider: 'gitlab'` takes its host from a valid `baseUrl`,
+ *     else from a unanimously GitLab-indicating remote set — never assumes
+ *     gitlab.com; without either it fails closed.
+ *  4. `provider: 'auto'` (the default): a valid `baseUrl` selects gitlab with
+ *     that host (a baseUrl is itself an explicit instance declaration);
+ *     otherwise unanimous github remotes → github, a unanimous single-host
+ *     GitLab-indicating remote set → gitlab, and anything else fails closed.
+ */
+export declare function resolveProviderSelection(input: ProviderSelectionInput): ProviderSelection;

package/dist/providers/host-guards.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Shared host/URL-component guards for forge-provider URL validation
+ * (issue #2733).
+ *
+ * Extracted verbatim from `src/commands/_shared/url-security.ts` so the
+ * provider layer can apply the identical private-host, IPv4-mapped-private,
+ * zero-network, IDN-homograph, and control-character guards WITHOUT a
+ * circular import (url-security imports the forge shape matcher; the forge
+ * layer imports these leaf guards). url-security re-exports its previous
+ * public surface from here, so its API is unchanged.
+ */
+/** True when any code point is a C0/DEL control character. */
+export declare function containsControlCharacters(value: string): boolean;
+/**
+ * Returns true if the hostname contains any non-ASCII code point (IDN
+ * homograph protection).
+ */
+export declare function hasNonAsciiHostname(hostname: string): boolean;
+export declare function isIpv4MappedPrivateHost(inner: string): boolean;
+/**
+ * Blocklist of private/localhost hostnames and IP ranges.
+ */
+export declare function isPrivateHost(url: URL): boolean;
+/**
+ * True when any DNS label is a punycode label (xn--…). The WHATWG URL parser
+ * silently converts non-ASCII (IDN) hosts to punycode, so a raw non-ASCII scan
+ * on `url.hostname` cannot detect them; rejecting punycode labels is how the
+ * IDN-homograph policy stays enforceable post-parse (issue #2733).
+ */
+export declare function hasPunycodeLabel(host: string): boolean;
+export declare function isIPv4ZeroNetwork(host: string): boolean;

package/dist/utils/gh-executable.d.ts

@@ -49,6 +49,16 @@
 import { spawnSync } from 'node:child_process';
 /** Env var escape hatch — a blocked user can set this without editing files. */
 export declare const GH_BINARY_ENV_VAR = "OPENCODE_SWARM_GH_BINARY";
+declare const PER_PROBE_TIMEOUT_MS = 250;
+declare const TOTAL_BUDGET_MS = 1000;
+declare const NEGATIVE_CACHE_TTL_MS = 60000;
+/**
+ * Budget/TTL constants exported for the gh↔glab resolver parity ratchet
+ * (tests/unit/utils/forge-executable-parity.test.ts, issue #2733): the glab
+ * twin must track the gh hardening, and the ratchet enforces identical probe
+ * bounds so a future gh hardening cannot land without its glab mirror.
+ */
+export { PER_PROBE_TIMEOUT_MS, TOTAL_BUDGET_MS, NEGATIVE_CACHE_TTL_MS };
 /**
  * `gh --version` prints `gh version 2.74.0 (2025-...)` — a fixed format
  * string in gh's own root command. Same accident-not-attacker contract as

package/dist/utils/glab-executable.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Single source of truth for "what absolute path do we invoke for glab" — the
+ * glab twin of `src/utils/gh-executable.ts` (issue #2733, GitLab provider).
+ *
+ * Built to the SAME contract as the gh resolver (the maintainer-verified shape
+ * for this feature, and issue #2262/#2476's hardening for gh):
+ *
+ *   1. explicit override — the `OPENCODE_SWARM_GLAB_BINARY` env var ONLY
+ *      (no config-file key; env-only keeps every override user-controlled);
+ *   2. platform absolute candidates first;
+ *   3. ALL PATH matches for `glab` (win32: `.exe`/`.cmd`/`.bat` variants);
+ *   4. bare `'glab'` LAST, unprobed.
+ *
+ * Each non-bare candidate must be ABSOLUTE and is validated once with
+ * `glab --version` whose output must match GLAB_VERSION_PATTERN
+ * (`glab version 1.65.0 (...)` — https://docs.gitlab.com/cli). Same
+ * accident-not-attacker contract as the gh probe.
+ *
+ * Bounded probing mirrors gh exactly (enforced by
+ * tests/unit/utils/forge-executable-parity.test.ts): per-probe timeout 250 ms,
+ * total first-resolution budget 1000 ms, negative-cache TTL 60 s. Resolution
+ * is LAZY (never plugin init) and NEVER throws — both non-accepting outcomes
+ * return the bare `'glab'` fallback so a host that works via plain PATH
+ * lookup never regresses. The probe/candidate machinery is one
+ * parameterized core so the glab twin cannot silently drift from the gh
+ * discipline it must track.
+ */
+import { spawnSync } from 'node:child_process';
+/** Env var escape hatch — a blocked user can set this without editing files. */
+export declare const GLAB_BINARY_ENV_VAR = "OPENCODE_SWARM_GLAB_BINARY";
+export declare const PER_PROBE_TIMEOUT_MS = 250;
+export declare const TOTAL_BUDGET_MS = 1000;
+export declare const NEGATIVE_CACHE_TTL_MS = 60000;
+/**
+ * `glab --version` prints `glab version 1.65.0 (...)` — a fixed format string
+ * in glab's own root command. Anchored to the first line, like
+ * `GH_VERSION_PATTERN`.
+ */
+export declare const GLAB_VERSION_PATTERN: RegExp;
+export type GlabResolutionCandidateSource = 'override' | 'platform' | 'path';
+export interface GlabResolutionAttempt {
+    source: GlabResolutionCandidateSource;
+    candidate: string;
+    accepted: boolean;
+    /** Rejection reason; absent when `accepted` is true. */
+    reason?: string;
+}
+export interface GlabResolutionDescription {
+    resolved: boolean;
+    resolvedPath?: string;
+    attempts: GlabResolutionAttempt[];
+    overrideValue?: string;
+}
+/**
+ * Windows install locations for glab (same ProgramFiles/LOCALAPPDATA layout
+ * gh uses, under a `GitLab CLI` directory).
+ */
+export declare function windowsGlabAbsoluteCandidates(env: NodeJS.ProcessEnv): string[];
+/**
+ * Resolve the glab executable to invoke. Lazy, memoized, bounded by
+ * TOTAL_BUDGET_MS, never throws. Returns a validated absolute path or the
+ * bare `'glab'` fallback.
+ */
+export declare function resolveGlabExecutable(): string;
+/** Exported for tests; clears the memoized cache (and bumps the generation). */
+export declare function resetGlabExecutableCache(): void;
+/**
+ * TEST-ONLY seam — NOT a production API, do not call from `src/`. Pre-seeds
+ * the resolver cache with an explicit "success" entry so
+ * `resolveGlabExecutable()` returns `value` with zero probe spawns.
+ */
+export declare function __seedGlabExecutableForTests(value: string): void;
+/** Diagnostic surface: candidates tried in the most recent probe cycle. */
+export declare function describeGlabResolution(): GlabResolutionDescription;
+/**
+ * DI seam for testability (repo convention — see gh-executable.ts).
+ * `platform`/`env` let tests drive every platform branch regardless of the
+ * host OS; `now` makes the TTL and budget deterministically testable.
+ */
+export declare const _internals: {
+    spawnSync: typeof spawnSync;
+    platform: () => NodeJS.Platform;
+    env: () => NodeJS.ProcessEnv;
+    now: () => number;
+};

package/opencode-swarm.schema.json

@@ -3112,6 +3112,25 @@
         }
       }
     },
+    "forge": {
+      "description": "Forge provider (GitHub/GitLab) selection for PR/issue workflows (issue #2733). Ambiguous git remotes (mixed providers, unrecognized self-hosted hosts, or no remote) fail closed and require an explicit selection; forge.base_url passes through the same HTTPS-only / non-private / ASCII-host guards as every forge URL and is never a trust whitelist; combining base_url with provider \"github\" is rejected as a configuration conflict.",
+      "type": "object",
+      "properties": {
+        "provider": {
+          "default": "auto",
+          "type": "string",
+          "enum": [
+            "github",
+            "gitlab",
+            "auto"
+          ]
+        },
+        "base_url": {
+          "type": "string",
+          "format": "uri"
+        }
+      }
+    },
     "observability": {
       "description": "Observability options — remote OTLP/OpenInference export is opt-in and disabled by default (issue #2485).",
       "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.184.17",
+	"version": "7.185.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/cli/curator-llm-factory-65qve6xk.js

@@ -1,81 +0,0 @@
-// @bun
-import {
-  createCuratorLLMDelegate
-} from "./index-pak3x772.js";
-import"./index-dky6qwrk.js";
-import"./index-wxr5me67.js";
-import"./index-4v60grax.js";
-import"./index-7bxssqaf.js";
-import"./index-mfqge140.js";
-import"./index-jtg0zsnx.js";
-import"./index-txdagbh7.js";
-import"./index-pef8ay7c.js";
-import"./index-rdec0y3z.js";
-import"./index-ww747mdg.js";
-import"./index-naxrpyb0.js";
-import"./index-e708d35g.js";
-import"./index-y0534tfs.js";
-import"./index-m1pqenq9.js";
-import"./index-tyzmjw2s.js";
-import"./index-cjapb4hy.js";
-import"./index-yydv4jfy.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-hx4jkj05.js";
-import"./index-gx03v1y5.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-denfahc5.js";
-import"./index-zsrtt42s.js";
-import"./index-50q314wd.js";
-import"./index-m8342y3n.js";
-import"./index-7n1pfpnj.js";
-import"./index-g4fs6z4e.js";
-import"./index-cyn2cb6k.js";
-import"./index-48we80k1.js";
-import"./index-dftztz4y.js";
-import"./index-2s7dvzff.js";
-import"./index-0zjg4kt5.js";
-import"./index-fxf3zhtq.js";
-import"./index-rtry5xyf.js";
-import"./index-bktc2g9n.js";
-import"./index-frcemc0b.js";
-import"./index-0725jpp7.js";
-import"./index-sfsydeh8.js";
-import"./index-a7y29h92.js";
-import"./index-7rzgdcvc.js";
-import"./index-7r3pkgma.js";
-import"./index-cftva3pa.js";
-import"./index-pwcbtbhd.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-7pmbnjvj.js";
-import"./index-yx5z4200.js";
-import"./index-y8gxcmnj.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-4g4sr4ah.js";
-import"./index-2y9b45jj.js";
-import"./index-6cjpmvpa.js";
-import"./index-t7hmqgjy.js";
-import"./index-w6w6ny06.js";
-import"./index-mc72pk74.js";
-import"./index-c1ggtmpm.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-bntwj2tp.js";
-import"./index-gx2vp8gx.js";
-import"./index-kxacpqwf.js";
-import"./index-zxdawwc7.js";
-import"./index-0pvvktht.js";
-import"./index-48jvqqfa.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-wvghb3x6.js";
-import"./index-9rwhas09.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  createCuratorLLMDelegate
-};

package/dist/cli/guardrail-explain-2prdgvjk.js

@@ -1,82 +0,0 @@
-// @bun
-import {
-  handleGuardrailExplain
-} from "./index-drndbj24.js";
-import"./index-pak3x772.js";
-import"./index-dky6qwrk.js";
-import"./index-wxr5me67.js";
-import"./index-4v60grax.js";
-import"./index-7bxssqaf.js";
-import"./index-mfqge140.js";
-import"./index-jtg0zsnx.js";
-import"./index-txdagbh7.js";
-import"./index-pef8ay7c.js";
-import"./index-rdec0y3z.js";
-import"./index-ww747mdg.js";
-import"./index-naxrpyb0.js";
-import"./index-e708d35g.js";
-import"./index-y0534tfs.js";
-import"./index-m1pqenq9.js";
-import"./index-tyzmjw2s.js";
-import"./index-cjapb4hy.js";
-import"./index-yydv4jfy.js";
-import"./index-pt7h91zc.js";
-import"./index-q7sjgr1y.js";
-import"./index-hx4jkj05.js";
-import"./index-gx03v1y5.js";
-import"./index-6b295cas.js";
-import"./index-9nyqt3kb.js";
-import"./index-denfahc5.js";
-import"./index-zsrtt42s.js";
-import"./index-50q314wd.js";
-import"./index-m8342y3n.js";
-import"./index-7n1pfpnj.js";
-import"./index-g4fs6z4e.js";
-import"./index-cyn2cb6k.js";
-import"./index-48we80k1.js";
-import"./index-dftztz4y.js";
-import"./index-2s7dvzff.js";
-import"./index-0zjg4kt5.js";
-import"./index-fxf3zhtq.js";
-import"./index-rtry5xyf.js";
-import"./index-bktc2g9n.js";
-import"./index-frcemc0b.js";
-import"./index-0725jpp7.js";
-import"./index-sfsydeh8.js";
-import"./index-a7y29h92.js";
-import"./index-7rzgdcvc.js";
-import"./index-7r3pkgma.js";
-import"./index-cftva3pa.js";
-import"./index-pwcbtbhd.js";
-import"./index-ry16d01s.js";
-import"./index-rdm3px0g.js";
-import"./index-7pmbnjvj.js";
-import"./index-yx5z4200.js";
-import"./index-y8gxcmnj.js";
-import"./index-vzm6zre7.js";
-import"./index-ae75rja9.js";
-import"./index-4g4sr4ah.js";
-import"./index-2y9b45jj.js";
-import"./index-6cjpmvpa.js";
-import"./index-t7hmqgjy.js";
-import"./index-w6w6ny06.js";
-import"./index-mc72pk74.js";
-import"./index-c1ggtmpm.js";
-import"./index-ejhxgyvm.js";
-import"./index-7g4c7s5r.js";
-import"./index-bntwj2tp.js";
-import"./index-gx2vp8gx.js";
-import"./index-kxacpqwf.js";
-import"./index-zxdawwc7.js";
-import"./index-0pvvktht.js";
-import"./index-48jvqqfa.js";
-import"./index-bk5tah7q.js";
-import"./index-gknz3bv1.js";
-import"./index-zpsr8rpc.js";
-import"./index-wvghb3x6.js";
-import"./index-9rwhas09.js";
-import"./index-zgwm4ryv.js";
-import"./index-a76rekgs.js";
-export {
-  handleGuardrailExplain
-};