opencode-swarm 7.25.2 → 7.26.1

package/dist/scope/scope-persistence.d.ts

@@ -43,9 +43,10 @@
  *      leaves `scope-{id}.json.tmp.{ts}.{rand}` files. No sweeper runs today;
  *      accumulation is bounded by `/swarm close` (which rm -rf's .swarm/scopes/).
  *
- * NOT a security boundary. Bash remains unguarded at the write-authority layer.
- * The durable fix lives at the syscall layer (#520). This module closes the
- * cross-process gap and the plan-as-scope gap, both of which are mitigations.
+ * NOT a standalone security boundary. Tool-layer write interception is now
+ * implemented in shell-write-detect.ts (Phases 1-2). This module closes the
+ * cross-process gap and the plan-as-scope gap. The syscall-layer fix (#520)
+ * remains the durable long-term boundary.
  */
 declare const SCOPE_SCHEMA_VERSION: 1;
 export interface PersistedScope {

package/dist/services/config-doctor.d.ts

@@ -123,36 +123,3 @@ export declare function runConfigDoctorWithFixes(directory: string, config: Plug
     updatedConfigPath: string | null;
     artifactPath: string | null;
 }>;
-/**
- * A stray .swarm directory found below the project root.
- * These are typically created by bugs in prior versions (see Issue #922).
- */
-export interface StraySwarmFinding {
-    /** Relative path from project root (forward-slash normalized) */
-    path: string;
-    /** Absolute path on disk */
-    absolutePath: string;
-    /** Contents summary (up to 20 entries) */
-    contents: string[];
-    /** Total number of entries in the directory */
-    totalEntries: number;
-}
-/**
- * Detect stray .swarm directories in project subdirectories.
- * These are .swarm/ directories that exist below the project root,
- * typically created by bugs in prior versions (see Issue #922).
- *
- * Skips: node_modules/, .git/, dist/, .cache/, .next/, coverage/
- * and common tool/build output directories.
- */
-export declare function detectStraySwarmDirs(projectRoot: string): StraySwarmFinding[];
-/**
- * Remove a stray .swarm directory.
- * NEVER removes the root .swarm/ directory.
- *
- * @returns `{ success, message }` indicating outcome
- */
-export declare function removeStraySwarmDir(projectRoot: string, strayPath: string): {
-    success: boolean;
-    message: string;
-};

package/dist/test-impact/analyzer.d.ts

@@ -1,4 +1,3 @@
-import { validateProjectRoot } from '../evidence/manager.js';
 export interface TestImpactResult {
     impactedTests: string[];
     unrelatedTests: string[];
@@ -19,7 +18,6 @@ declare function findTestFilesSync(cwd: string): string[];
 declare function extractImports(content: string): string[];
 declare function buildImpactMapInternal(cwd: string): Promise<Record<string, string[]>>;
 export declare const _internals: {
-    validateProjectRoot: typeof validateProjectRoot;
     normalizePath: typeof normalizePath;
     isCacheStale: typeof isCacheStale;
     resolveRelativeImport: typeof resolveRelativeImport;

package/dist/test-impact/history-store.d.ts

@@ -1,4 +1,3 @@
-import { validateProjectRoot } from '../evidence/manager.js';
 export type TestRunResult = 'pass' | 'fail' | 'skip';
 export interface TestRunRecord {
     timestamp: string;
@@ -14,9 +13,3 @@ export interface TestRunRecord {
 export declare function appendTestRun(record: TestRunRecord, workingDir?: string): void;
 export declare function getTestHistory(testFile: string, workingDir?: string): TestRunRecord[];
 export declare function getAllHistory(workingDir?: string): TestRunRecord[];
-/**
- * DI seam for testability. Contains functions that tests may override.
- */
-export declare const _internals: {
-    validateProjectRoot: typeof validateProjectRoot;
-};

package/dist/tools/pre-check-batch.d.ts

@@ -79,7 +79,7 @@ export declare function classifySastFindings(findings: SastScanFinding[], change
 /**
  * Run all 4 pre-check tools in parallel with concurrency limit
  * @param input - The pre-check batch input
- * @param workspaceDir - Optional workspace directory for traversal validation (injected project root from createSwarmTool, or input.directory)
+ * @param workspaceDir - Optional workspace directory for traversal validation (defaults to directory param or process.cwd())
  */
 export declare function runPreCheckBatch(input: PreCheckBatchInput, workspaceDir?: string, contextDir?: string): Promise<PreCheckBatchResult>;
 /**

package/dist/tools/resolve-working-directory.d.ts

@@ -19,14 +19,7 @@ export interface ResolveError {
     message: string;
 }
 /**
- * Resolves and validates a working directory against a fallback (injected project root).
- *
- * NOTE: This function intentionally does NOT use realpathSync for the resolved path
- * to avoid Windows 8.3 short filename issues. Symlink-based subdirectory bypasses
- * through this coarse filter are caught by the write-time validateProjectRoot guard
- * in evidence/manager.ts, which DOES use realpathSync. These two functions form a
- * defense-in-depth pair: resolveWorkingDirectory is the fast entry filter,
- * validateProjectRoot is the authoritative canonical check at write time.
+ * Resolve the effective working directory for a swarm tool.
  *
  * Priority: explicit working_directory param > injected directory (from createSwarmTool).
  *

package/dist/tools/test-runner.d.ts

@@ -32,14 +32,6 @@ export interface TestTotals {
     skipped: number;
     total: number;
 }
-export interface ParsedTestCaseResult {
-    testFile: string;
-    testName: string;
-    result: 'pass' | 'fail' | 'skip';
-    durationMs: number;
-    errorMessage?: string;
-    stackPrefix?: string;
-}
 export interface TestSuccessResult {
     success: true;
     framework: TestFramework;
@@ -50,7 +42,6 @@ export interface TestSuccessResult {
     totals: TestTotals;
     coveragePercent?: number;
     rawOutput?: string;
-    testCases?: ParsedTestCaseResult[];
     message?: string;
     outcome?: RegressionOutcome;
 }
@@ -65,7 +56,6 @@ export interface TestErrorResult {
     coveragePercent?: number;
     error: string;
     rawOutput?: string;
-    testCases?: ParsedTestCaseResult[];
     message?: string;
     outcome?: RegressionOutcome;
     attempted_scope?: 'graph';

package/dist/tools/update-task-status.d.ts

@@ -53,7 +53,7 @@ export interface ReviewerGateResult {
  * @param sessionID - Optional session ID to scope Lean Turbo bypass to the current tool-execution context
  * @returns ReviewerGateResult indicating whether the gate is blocked
  */
-export declare function checkReviewerGate(taskId: string, workingDirectory?: string, stageBParallelEnabled?: boolean, sessionID?: string, fallbackDir?: string): ReviewerGateResult;
+export declare function checkReviewerGate(taskId: string, workingDirectory?: string, stageBParallelEnabled?: boolean, sessionID?: string): ReviewerGateResult;
 /**
  * Wrapper around checkReviewerGate that appends a diff-scope advisory warning.
  * Keeps checkReviewerGate synchronous for backward compatibility.
@@ -61,10 +61,9 @@ export declare function checkReviewerGate(taskId: string, workingDirectory?: str
  * @param taskId - The task ID to check gate state for
  * @param workingDirectory - Optional working directory for plan.json fallback
  * @param sessionID - Optional session ID to scope Lean Turbo bypass to the current tool-execution context
- * @param fallbackDir - Optional fallback directory for resolveWorkingDirectory when workingDirectory is absent
  * @returns ReviewerGateResult with optional scope warning appended to reason
  */
-export declare function checkReviewerGateWithScope(taskId: string, workingDirectory?: string, sessionID?: string, fallbackDir?: string): Promise<ReviewerGateResult>;
+export declare function checkReviewerGateWithScope(taskId: string, workingDirectory?: string, sessionID?: string): Promise<ReviewerGateResult>;
 /**
  * Recovery mechanism: reconcile task state with delegation history.
  * When task-scoped reviewer/test_engineer delegations occurred but the state

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.25.2",
+	"version": "7.26.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
@@ -38,7 +38,7 @@
 	],
 	"scripts": {
 		"clean": "bun -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
-		"build": "bun run clean && bun run scripts/copy-grammars.ts && bun build src/index.ts --outdir dist --target node --format esm && bun build src/cli/index.ts --outdir dist/cli --target bun --format esm && bun run scripts/copy-grammars.ts --to-dist && tsc --emitDeclarationOnly",
+		"build": "bun run clean && bun run scripts/copy-grammars.ts && bun build src/index.ts --outdir dist --target node --format esm --external bash-parser && bun build src/cli/index.ts --outdir dist/cli --target bun --format esm --external bash-parser && bun run scripts/copy-grammars.ts --to-dist && tsc --emitDeclarationOnly",
 		"typecheck": "tsc --noEmit",
 		"test": "bun test",
 		"lint": "biome lint .",
@@ -52,6 +52,7 @@
 		"@opencode-ai/plugin": "^1.1.53",
 		"@opencode-ai/sdk": "^1.1.53",
 		"@vscode/tree-sitter-wasm": "^0.3.0",
+		"bash-parser": "^0.5.0",
 		"p-limit": "^7.3.0",
 		"picomatch": "^4.0.4",
 		"proper-lockfile": "^4.1.2",