opencode-swarm 7.193.0 → 7.194.0

package/dist/tools/pr-workflow-status.d.ts

@@ -1,4 +1,4 @@
-import { readDelegationsDetailed } from '../background/pending-delegations';
+import { findByBatchIdDetailed, readDelegationsDetailed } from '../background/pending-delegations';
 import { resolveCurrentGitHeadAsync, resolveIsWorkingTreeCleanAsync } from '../background/workspace-snapshot';
 import { classifyPrWorkflowGitState } from '../git/pr-workflow-state';
 import { isPrWorkflowAutoWakeSuppressed } from '../hooks/pr-workflow-auto-wake';
@@ -14,12 +14,30 @@ import { createSwarmTool } from './create-tool';
  * severed at the boundary instead of leaving a lone surrogate.
  */
 declare function truncateToByteBudget(value: string, maxBytes: number): string;
+/**
+ * Lightweight neutralizer for short, author-influenced Git strings (branch
+ * names, remote URLs, changed paths). A PR branch/remote is attacker-controlled
+ * text; this strips control characters and the markdown/HTML metacharacters that
+ * could break a downstream renderer, then bounds the length. It deliberately
+ * does NOT use the heavyweight `neutralizeUntrustedMarkdown` fenced wrapper,
+ * which is for large prose blobs, not single structured fields.
+ */
+declare function boundUntrusted(value: string, maxLen: number): string;
 /**
  * Bounded, killable, non-interactive Git read (AGENTS.md invariant 3). Array
  * form, explicit cwd, ignored stdin, capped stdout, timeout, best-effort kill in
  * finally. Never runs a PR-controlled script — only fixed read verbs are passed.
  */
 declare function runGitCapture(directory: string, args: string[]): Promise<string | null>;
+/**
+ * Bound a one-line finding summary for display: strip control characters and
+ * the markdown/HTML metacharacters (same character classes as
+ * {@link boundUntrusted} — receipt fields are lane-agent-authored text and a
+ * schema cap bounds length, not content), collapse whitespace, then cap to
+ * the char limit without splitting a surrogate pair (code-point-aware, unlike
+ * a bare `slice`).
+ */
+declare function boundFindingLine(line: string): string;
 declare function resolveWorkflowGateSession(directory: string, sessionID: string): Promise<string | null>;
 export declare const pr_workflow_status: ReturnType<typeof createSwarmTool>;
 /** Test seam mirroring gh-evidence's `_internals` (issue #507 DI convention). */
@@ -34,5 +52,10 @@ export declare const _internals: {
     classifyGitState: typeof classifyPrWorkflowGitState;
     truncateToByteBudget: typeof truncateToByteBudget;
     resolveWorkflowGateSession: typeof resolveWorkflowGateSession;
+    /** Batch receipt lookup for the lane-coverage projection (F-01 test seam). */
+    findByBatchIdDetailed: typeof findByBatchIdDetailed;
+    /** Pure field sanitizers (direct hostile-input unit suites). */
+    boundUntrusted: typeof boundUntrusted;
+    boundFindingLine: typeof boundFindingLine;
 };
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.193.0",
+	"version": "7.194.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",