opencode-swarm 7.62.1 → 7.64.0

package/dist/tools/external-skill-discover.d.ts

@@ -0,0 +1,21 @@
+/**
+ * external_skill_discover — Discover external skill candidates from configured sources.
+ *
+ * Fetches skill content from URLs or accepts manual imports, validates them
+ * through the security gates (prompt-injection, unsafe-instructions,
+ * provenance-integrity), and stores them as quarantined candidates in the
+ * external skill store.
+ *
+ * Uses an `_internals` DI seam for testability — no `mock.module` leakage.
+ */
+import { createSwarmTool } from './create-tool.js';
+export declare const _internals: {
+    fetchContent: (_url: string, _timeoutMs: number) => Promise<{
+        content: string;
+        finalUrl: string;
+    }>;
+    getTimestamp: () => string;
+    computeSha256: (content: string) => string;
+    uuid: () => string;
+};
+export declare const external_skill_discover: ReturnType<typeof createSwarmTool>;

package/dist/tools/external-skill-inspect.d.ts

@@ -0,0 +1,15 @@
+/**
+ * external_skill_inspect — Inspect a specific external skill candidate by ID.
+ *
+ * Read-only tool that returns the full candidate record including provenance,
+ * skill_body, and evaluation_history.  Returns a disabled message when
+ * external_skills.curation_enabled is false.
+ *
+ * Uses an `_internals` DI seam for testability — no `mock.module` leakage.
+ */
+import type { ExternalSkillsConfig } from '../config/schema.js';
+import { createSwarmTool } from './create-tool.js';
+export declare const _internals: {
+    loadConfig: (directory: string) => ExternalSkillsConfig | undefined;
+};
+export declare const external_skill_inspect: ReturnType<typeof createSwarmTool>;

package/dist/tools/external-skill-list.d.ts

@@ -0,0 +1,15 @@
+/**
+ * external_skill_list — List external skill candidates in the quarantine store.
+ *
+ * Read-only tool that returns candidate summaries filtered by evaluation verdict,
+ * source type, or date range.  Returns a disabled message when
+ * external_skills.curation_enabled is false.
+ *
+ * Uses an `_internals` DI seam for testability — no `mock.module` leakage.
+ */
+import type { ExternalSkillsConfig } from '../config/schema.js';
+import { createSwarmTool } from './create-tool.js';
+export declare const _internals: {
+    loadConfig: (directory: string) => ExternalSkillsConfig | undefined;
+};
+export declare const external_skill_list: ReturnType<typeof createSwarmTool>;

package/dist/tools/external-skill-promote.d.ts

@@ -0,0 +1,20 @@
+/**
+ * external_skill_promote — Promote a validated external skill candidate to an
+ * active generated skill.
+ *
+ * Re-runs all three validation gates (TOCTOU re-validation).  Requires explicit
+ * user approval (`approver='user'`).  Writes SKILL.md to
+ * `.opencode/skills/generated/<slug>/` with provenance frontmatter.  Stamps the
+ * candidate as promoted and creates an audit record.
+ *
+ * Uses an `_internals` DI seam for testability — no `mock.module` leakage.
+ */
+import type { ExternalSkillsConfig } from '../config/schema.js';
+import { createSwarmTool } from './create-tool.js';
+export declare const _internals: {
+    loadConfig: (directory: string) => ExternalSkillsConfig | undefined;
+    getTimestamp: () => string;
+    fileExists: (filePath: string) => Promise<boolean>;
+    writeSkillFile: (filePath: string, content: string) => Promise<void>;
+};
+export declare const external_skill_promote: ReturnType<typeof createSwarmTool>;

package/dist/tools/external-skill-reject.d.ts

@@ -0,0 +1,15 @@
+/**
+ * external_skill_reject — Reject an external skill candidate after evaluation.
+ *
+ * Marks a candidate as rejected with a user-provided reason.  Records the
+ * state transition in evaluation_history with timestamp, actor, and reason.
+ * Returns a disabled message when external_skills.curation_enabled is false.
+ *
+ * Uses an `_internals` DI seam for testability — no `mock.module` leakage.
+ */
+import type { ExternalSkillsConfig } from '../config/schema.js';
+import { createSwarmTool } from './create-tool.js';
+export declare const _internals: {
+    loadConfig: (directory: string) => ExternalSkillsConfig | undefined;
+};
+export declare const external_skill_reject: ReturnType<typeof createSwarmTool>;

package/dist/tools/external-skill-revoke.d.ts

@@ -0,0 +1,17 @@
+/**
+ * external_skill_revoke — Revoke a previously promoted external skill.
+ *
+ * Atomically retires the SKILL.md from `.opencode/skills/generated/<slug>/`
+ * and stamps the candidate with evaluation_verdict: 'revoked'.  The candidate
+ * stays in quarantine for forensic audit.
+ *
+ * Uses an `_internals` DI seam for testability — no `mock.module` leakage.
+ */
+import type { ExternalSkillsConfig } from '../config/schema.js';
+import { createSwarmTool } from './create-tool.js';
+export declare const _internals: {
+    loadConfig: (directory: string) => ExternalSkillsConfig | undefined;
+    getTimestamp: () => string;
+    retireSkillFile: (filePath: string) => Promise<boolean>;
+};
+export declare const external_skill_revoke: ReturnType<typeof createSwarmTool>;

package/dist/tools/index.d.ts

@@ -18,6 +18,13 @@ export { diff_summary } from './diff-summary';
 export { doc_extract, doc_scan } from './doc-scan';
 export { detect_domains } from './domain-detector';
 export { evidence_check } from './evidence-check';
+export { external_skill_delete } from './external-skill-delete';
+export { external_skill_discover } from './external-skill-discover';
+export { external_skill_inspect } from './external-skill-inspect';
+export { external_skill_list } from './external-skill-list';
+export { external_skill_promote } from './external-skill-promote';
+export { external_skill_reject } from './external-skill-reject';
+export { external_skill_revoke } from './external-skill-revoke';
 export { extract_code_blocks } from './file-extractor';
 export { get_approved_plan } from './get-approved-plan';
 export { get_qa_gate_profile } from './get-qa-gate-profile';

package/dist/tools/manifest.d.ts

@@ -108,4 +108,11 @@ export declare const TOOL_MANIFEST: {
     lean_turbo_run_phase: () => ToolDefinition;
     lean_turbo_status: () => ToolDefinition;
     apply_patch: () => ToolDefinition;
+    external_skill_discover: () => ToolDefinition;
+    external_skill_list: () => ToolDefinition;
+    external_skill_inspect: () => ToolDefinition;
+    external_skill_promote: () => ToolDefinition;
+    external_skill_reject: () => ToolDefinition;
+    external_skill_delete: () => ToolDefinition;
+    external_skill_revoke: () => ToolDefinition;
 };

package/dist/tools/phase-complete.d.ts

@@ -13,6 +13,16 @@ export interface PhaseCompleteArgs {
     summary?: string;
     /** Session ID to track state (optional, defaults to current session context) */
     sessionID?: string;
+    /**
+     * Architect-only (Change 2, Task 2.4): explicitly accept these unresolved
+     * critical directive IDs. Requires acceptViolationsJustification. Each
+     * accepted id is logged as an `override` knowledge event.
+     */
+    acceptViolations?: string[];
+    /** Written justification required to use acceptViolations. */
+    acceptViolationsJustification?: string;
+    /** Calling agent identity (from tool ctx) — gates the override to the architect. */
+    callerAgent?: string;
 }
 export declare const MAX_OUTPUT_BYTES = 512000;
 /**

package/dist/tools/tool-metadata.d.ts

@@ -363,6 +363,34 @@ export declare const TOOL_METADATA: {
         description: string;
         agents: "coder"[];
     };
+    external_skill_discover: {
+        description: string;
+        agents: never[];
+    };
+    external_skill_list: {
+        description: string;
+        agents: never[];
+    };
+    external_skill_inspect: {
+        description: string;
+        agents: never[];
+    };
+    external_skill_promote: {
+        description: string;
+        agents: never[];
+    };
+    external_skill_reject: {
+        description: string;
+        agents: never[];
+    };
+    external_skill_delete: {
+        description: string;
+        agents: never[];
+    };
+    external_skill_revoke: {
+        description: string;
+        agents: never[];
+    };
 };
 /** Union type of all valid tool names (the metadata keys). */
 export type ToolName = keyof typeof TOOL_METADATA;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.62.1",
+	"version": "7.64.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",