opencode-swarm 7.199.1 → 7.199.3

package/dist/tools/index.d.ts

@@ -119,6 +119,7 @@ export { lean_turbo_status } from './lean-turbo-status';
 export { lint_spec } from './lint-spec';
 export { mutation_test } from './mutation-test';
 export { executePrReviewSubmission, pr_review_submission, } from './pr-review-submission';
+export { executePreparePrFeedbackCommitMessage, prepare_pr_feedback_commit_message, } from './prepare-pr-feedback-commit-message';
 export { executePreparePrWorkflowCheckout, prepare_pr_workflow_checkout, } from './prepare-pr-workflow-checkout';
 export { executeRebindPrFeedbackHead, rebind_pr_feedback_head, } from './rebind-pr-feedback-head';
 export { executeRecordBranchFreshness, record_branch_freshness, } from './record-branch-freshness';

package/dist/tools/manifest.d.ts

@@ -60,6 +60,7 @@ export declare const TOOL_MANIFEST: {
     record_trace_validation: () => ToolDefinition;
     record_merge_approval: () => ToolDefinition;
     invalidate_pr_feedback_publication: () => ToolDefinition;
+    prepare_pr_feedback_commit_message: () => ToolDefinition;
     rebind_pr_feedback_head: () => ToolDefinition;
     run_pr_feedback_stage_a: () => ToolDefinition;
     submit_council_verdicts: () => ToolDefinition;

package/dist/tools/prepare-pr-feedback-commit-message.d.ts

@@ -0,0 +1,30 @@
+/**
+ * prepare_pr_feedback_commit_message — sanctioned authoring surface for
+ * PR_FEEDBACK commit messages that contain shell metacharacters (issue #3315
+ * D8, Option B).
+ *
+ * The PR_FEEDBACK shell classifier deliberately rejects `git commit -m`
+ * payloads containing `; & < >`, backtick, newline, or command substitution
+ * regardless of quoting (cross-shell injection safety), so an attribution
+ * trailer such as `Co-Authored-By: X <noreply@anthropic.com>` cannot be
+ * committed inline. `git commit -F <file>` is admitted by the classifier, but
+ * only for a message file that resolves OUTSIDE the repository (an in-repo
+ * message file is an untracked file that breaks the clean-tree arming check,
+ * and architect write containment refuses outside-repo writes). This tool is
+ * the missing authoring step: it writes the exact message bytes ATOMICALLY to
+ * a deterministic file under the OS temp directory (outside every repository)
+ * and returns the path to hand to `git commit -F`.
+ *
+ * Hardening (feedback round PRR-011/F-R18/19/21): the write goes through the
+ * canonical atomic writer (temp + fsync + rename, mode 0o600) so a concurrent
+ * `git commit -F` can never observe a torn file; the resolved target is
+ * proven — lexically AND through realpath once the directory exists — to
+ * stay inside the dedicated temp subdirectory and OUTSIDE the repository (a
+ * TMPDIR pointing into the checkout is refused); files are pruned after
+ * MESSAGE_FILE_TTL_MS on each call so the directory stays bounded.
+ */
+import { createSwarmTool } from './create-tool';
+export declare function executePreparePrFeedbackCommitMessage(args: unknown, directory: string, context?: {
+    sessionID?: string;
+}): Promise<string>;
+export declare const prepare_pr_feedback_commit_message: ReturnType<typeof createSwarmTool>;

package/dist/tools/tool-metadata.d.ts

@@ -285,13 +285,13 @@ export declare const TOOL_METADATA: {
         description: string;
         agents: "architect"[];
     };
+    prepare_pr_feedback_commit_message: {
+        description: string;
+        agents: "architect"[];
+    };
     test_runner: {
         description: string;
         agents: ("reviewer" | "test_engineer" | "critic_finding_validator" | "architect")[];
-        prWorkflow: {
-            modes: "PR_REVIEW"[];
-            capability: "validate";
-        };
     };
     test_impact: {
         description: string;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.199.1",
+	"version": "7.199.3",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",