opencode-swarm 7.56.1 → 7.56.2

package/dist/cli/index.d.ts

@@ -2,9 +2,17 @@
 export declare function isSafeCachePath(p: string): boolean;
 /**
  * Safety guard for lock file deletion. Lock files have different basenames
- * than cache directories so they need a separate check. Mirrors
- * isSafeCachePath()'s defense-in-depth: minimum segment depth, recognized
- * basename, and parent directory must be 'opencode'.
+ * and directory structure than cache directories, requiring separate validation
+ * logic. While both functions share defense-in-depth principles, they are kept
+ * separate rather than extracted to a parameterized helper because the
+ * validation rules differ significantly:
+ * - Cache paths verify: parent ∈ {packages, node_modules}, grandparent === 'opencode'
+ * - Lock file paths verify: parent === 'opencode', grandparent !== 'opencode'
+ * This separation maintains clarity and avoids over-parameterization.
+ *
+ * This function mirrors isSafeCachePath()'s defense-in-depth: minimum segment
+ * depth, recognized basename, parent directory must be 'opencode', and
+ * grandparent structure validation to prevent misconfigured nested paths.
  */
 export declare function isSafeLockFilePath(p: string): boolean;
 /**

package/dist/cli/index.js

@@ -52,7 +52,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.56.1",
+    version: "7.56.2",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -39569,7 +39569,7 @@ async function handleCloseCommand(directory, args, options = {}) {
       swarmPlanFilesRemoved++;
     } catch (err) {
       if (err?.code !== "ENOENT") {
-        warnings.push(`Failed to remove ${path19.basename(candidate)}: ${err instanceof Error ? err.message : String(err)}`);
+        warnings.push(`Failed to remove ${candidate}: ${err instanceof Error ? err.message : String(err)}`);
       }
     }
   }
@@ -59529,6 +59529,10 @@ function isSafeLockFilePath(p) {
   if (parent !== "opencode") {
     return false;
   }
+  const grandparent = path55.basename(path55.dirname(path55.dirname(resolved)));
+  if (grandparent === "opencode") {
+    return false;
+  }
   return true;
 }
 function ensureDir(dir) {

package/dist/index.js

@@ -69,7 +69,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.56.1",
+    version: "7.56.2",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -61950,7 +61950,7 @@ async function handleCloseCommand(directory, args2, options = {}) {
       swarmPlanFilesRemoved++;
     } catch (err2) {
       if (err2?.code !== "ENOENT") {
-        warnings.push(`Failed to remove ${path32.basename(candidate)}: ${err2 instanceof Error ? err2.message : String(err2)}`);
+        warnings.push(`Failed to remove ${candidate}: ${err2 instanceof Error ? err2.message : String(err2)}`);
       }
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.56.1",
+	"version": "7.56.2",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",