opencode-swarm 7.74.1 → 7.74.3

package/dist/services/config-doctor.d.ts

@@ -102,6 +102,21 @@ export declare function applySafeAutoFixes(directory: string, result: ConfigDoct
     appliedFixes: ConfigFix[];
     updatedConfigPath: string | null;
 };
+/** Summary data from a previous config-doctor artifact */
+export interface DoctorArtifactSummary {
+    /** ISO 8601 timestamp of the previous run */
+    timestamp: string;
+    /** Total number of findings in the previous run */
+    findingsCount: number;
+    /** Number of auto-fixable findings in the previous run */
+    autoFixableCount: number;
+}
+/**
+ * Read the last-run config-doctor artifact from .swarm/config-doctor.json.
+ * Returns a compact summary or null if the artifact does not exist or cannot be parsed.
+ * Fail-open: any I/O or parse error silently returns null.
+ */
+export declare function readDoctorArtifact(directory: string): DoctorArtifactSummary | null;
 /**
  * Write doctor result to .swarm directory for GUI consumption
  */

package/dist/services/external-content-scanner.d.ts

@@ -0,0 +1,67 @@
+/**
+ * External content scanner — shared ingress point for arbitrary external text.
+ *
+ * Reuses the prompt-injection and unsafe-instruction patterns from
+ * external-skill-validator.ts to scan network-fetched content (gitingest,
+ * web_search, future network tools) before it enters the LLM context.
+ *
+ * Provides a single shared interface: `scanExternalContent(text, options?)`.
+ * This ensures consistent threat detection across all external sources
+ * and closes the asymmetry documented in issue #1278.
+ *
+ * Uses an `_internals` DI seam for testability — no `mock.module` leakage.
+ */
+import { type ValidationFinding } from './external-skill-validator';
+/** Result from scanning external content for injection and unsafe instructions. */
+export interface ExternalContentScanResult {
+    /** Whether threats were detected. */
+    clean: boolean;
+    /** Individual findings from the scan. */
+    findings: ValidationFinding[];
+    /** Threats found: 'none', 'warning', or 'error'. */
+    threatLevel: 'none' | 'warning' | 'error';
+    /** The original text (for comparison). */
+    originalLength: number;
+    /** The neutralized text with threat markers wrapped. */
+    neutralized: string;
+}
+/**
+ * Apply invisible-format-character detection to raw text.
+ *
+ * Unlike the other patterns, invisible format chars are detected by counting
+ * occurrences in the raw string (not via regex .test), because we need the
+ * match string and they are multi-codepoint.
+ *
+ * Returns an array of findings (empty if none found).
+ * Each finding includes the individual match string (not concatenated),
+ * so callers can neutralize each occurrence at its original position.
+ */
+declare function scanInvisibleFormatChars(text: string): ValidationFinding[];
+/**
+ * Neutralize threat patterns in text by wrapping them with delimiters.
+ * This makes them visible to the LLM as data, not instructions.
+ */
+declare function neutralizeThreatPatterns(text: string, findings: ValidationFinding[]): string;
+/**
+ * Scan arbitrary external content for prompt-injection and unsafe-instruction threats.
+ *
+ * Returns a structured result with:
+ * - `clean`: boolean indicating no error-severity findings
+ * - `findings`: all detected findings
+ * - `threatLevel`: aggregated threat assessment
+ * - `neutralized`: the text with threat patterns wrapped for safety
+ *
+ * @param text - The external content to scan (arbitrary length, typically from API)
+ * @param options - Optional: { trustLevel = 'low' }
+ *   - 'low': warnings are treated as errors
+ *   - 'medium'/'high': warnings stay warnings
+ */
+export declare function scanExternalContent(text: string, options?: {
+    trustLevel?: 'low' | 'medium' | 'high';
+    maxLength?: number;
+}): ExternalContentScanResult;
+export declare const _internals: {
+    scanInvisibleFormatChars: typeof scanInvisibleFormatChars;
+    neutralizeThreatPatterns: typeof neutralizeThreatPatterns;
+};
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.74.1",
+	"version": "7.74.3",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",