opencode-swarm 7.74.3 → 7.76.0

package/dist/session/snapshot-reader.d.ts

@@ -28,7 +28,7 @@ export declare function readSnapshot(directory: string): Promise<SnapshotData |
  * Clears existing maps first, then populates from snapshot.
  * Does NOT touch activeToolCalls or pendingEvents (remain at defaults).
  */
-export declare function rehydrateState(snapshot: SnapshotData): Promise<void>;
+export declare function rehydrateState(snapshot: SnapshotData, directory?: string): Promise<void>;
 /**
  * Load snapshot from disk and rehydrate swarmState.
  * Called on plugin init to restore state from previous session.

package/dist/tools/repo-graph/builder.d.ts

@@ -11,6 +11,7 @@
  * used by both the builder and the incremental updater.
  */
 import { extractPythonSymbols, extractTSSymbols } from '../symbols';
+import { extractFileOntology } from './ontology';
 import { safeRealpathSync } from './safe-realpath';
 import type { BuildWorkspaceGraphOptions, GraphEdge, GraphNode, RepoGraph } from './types';
 /**
@@ -24,6 +25,7 @@ export declare const _internals: {
     extractTSSymbols: typeof extractTSSymbols;
     extractPythonSymbols: typeof extractPythonSymbols;
     parseFileImports: typeof parseFileImports;
+    extractFileOntology: typeof extractFileOntology;
 };
 /**
  * Add or update a node in the graph.
@@ -69,6 +71,8 @@ interface ParsedImport {
     specifier: string;
     /** The type of import */
     importType: 'default' | 'named' | 'namespace' | 'require' | 'sideeffect';
+    /** Named imported symbols when statically detectable */
+    importedSymbols: string[];
 }
 declare function parseFileImports(rawContent: string): ParsedImport[];
 /**

package/dist/tools/repo-graph/ontology.d.ts

@@ -0,0 +1,10 @@
+import type { FileOntology } from './types';
+export interface ExtractFileOntologyInput {
+    moduleName: string;
+    filePath: string;
+    content: string;
+    language: string;
+    exports: string[];
+    imports: string[];
+}
+export declare function extractFileOntology(input: ExtractFileOntologyInput): FileOntology;

package/dist/tools/repo-graph/query.d.ts

@@ -0,0 +1,21 @@
+import type { BlastRadiusResult, FileOntology, FileReference, GraphNode, LocalizationBlock, PackageBoundarySummary, RepoGraph, SymbolReference } from './types';
+export declare function getGraphNode(graph: RepoGraph, input: string): GraphNode | undefined;
+export declare function resetQueryCache(): void;
+export declare function isGraphFresh(graph: RepoGraph | null, maxAgeMs?: number): boolean;
+export declare function getImporters(graph: RepoGraph, filePath: string): FileReference[];
+export declare function getDependencies(graph: RepoGraph, filePath: string): FileReference[];
+export declare function getSymbolConsumers(graph: RepoGraph, filePath: string, symbolName: string): SymbolReference[];
+export declare function getBlastRadius(graph: RepoGraph, filePaths: string[], maxDepth?: number): BlastRadiusResult;
+export declare function getKeyFiles(graph: RepoGraph, topN?: number): GraphNode[];
+export declare function getFileOntology(graph: RepoGraph, filePath: string): FileOntology | null;
+export declare function getLocalizationContext(graph: RepoGraph, filePath: string, options?: {
+    maxImporters?: number;
+    maxDeps?: number;
+    maxDepth?: number;
+}): LocalizationBlock;
+export declare function getPackageBoundaries(graph: RepoGraph, topN?: number): PackageBoundarySummary[];
+export declare function buildOntologyPreflightPacket(graph: RepoGraph, filePaths?: string[], options?: {
+    maxFiles?: number;
+    maxFindings?: number;
+    maxBoundaries?: number;
+}): Record<string, unknown>;

package/dist/tools/repo-graph/storage.d.ts

@@ -33,6 +33,13 @@ export declare function getGraphPath(workspace: string): string;
  * @throws Error if file exists but is invalid/corrupted
  */
 export declare function loadGraph(workspace: string): Promise<RepoGraph | null>;
+/**
+ * Synchronous graph loader for prompt-injection hooks.
+ *
+ * Mirrors loadGraph validation but avoids async file I/O in system prompt
+ * construction. Returns null only when the graph file is absent.
+ */
+export declare function loadGraphSync(workspace: string): RepoGraph | null;
 /**
  * Save the graph to .swarm/repo-graph.json atomically.
  * Uses temp file + rename pattern to prevent partial writes.

package/dist/tools/repo-graph/types.d.ts

@@ -8,6 +8,61 @@
  */
 export declare const REPO_GRAPH_FILENAME = "repo-graph.json";
 export declare const GRAPH_SCHEMA_VERSION = "1.0.0";
+export declare const FILE_ROLE_VALUES: readonly ["api_route", "middleware", "service_module", "data_module", "swarm_tool", "agent", "hook", "config", "schema", "test_file", "cli_command", "documentation", "source_module"];
+export type FileRole = (typeof FILE_ROLE_VALUES)[number];
+export declare const ROUTE_METHOD_VALUES: readonly ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD", "ALL"];
+export type RouteMethod = (typeof ROUTE_METHOD_VALUES)[number];
+export declare const ROUTE_SOURCE_VALUES: readonly ["file_path", "handler_export", "router_call"];
+export type RouteSource = (typeof ROUTE_SOURCE_VALUES)[number];
+export interface RouteFact {
+    method: RouteMethod;
+    path: string;
+    line?: number;
+    source: RouteSource;
+}
+export declare const DATA_OPERATION_VALUES: readonly ["read", "write", "delete", "transaction", "migration"];
+export type DataOperation = (typeof DATA_OPERATION_VALUES)[number];
+export declare const DATA_ACCESS_VALUES: readonly ["database", "orm", "sql", "filesystem", "network", "unknown"];
+export type DataAccess = (typeof DATA_ACCESS_VALUES)[number];
+export interface DataOperationFact {
+    operation: DataOperation;
+    access: DataAccess;
+    entity?: string;
+    line: number;
+    evidence: string;
+}
+export declare const SECURITY_KIND_VALUES: readonly ["authentication", "authorization", "input_validation", "csrf", "sanitization", "secret_handling"];
+export type SecurityKind = (typeof SECURITY_KIND_VALUES)[number];
+export declare const SECURITY_CONFIDENCE_VALUES: readonly ["low", "medium", "high"];
+export type SecurityConfidence = (typeof SECURITY_CONFIDENCE_VALUES)[number];
+export interface SecurityFact {
+    kind: SecurityKind;
+    line: number;
+    evidence: string;
+    confidence: SecurityConfidence;
+}
+export interface ConventionFact {
+    name: string;
+    line?: number;
+    evidence: string;
+}
+export declare const ONTOLOGY_FINDING_SEVERITY_VALUES: readonly ["info", "low", "medium", "high"];
+export type OntologyFindingSeverity = (typeof ONTOLOGY_FINDING_SEVERITY_VALUES)[number];
+export interface OntologyFinding {
+    code: string;
+    severity: OntologyFindingSeverity;
+    message: string;
+    line?: number;
+}
+export interface FileOntology {
+    roles: FileRole[];
+    packageBoundary: string;
+    routes: RouteFact[];
+    dataOperations: DataOperationFact[];
+    security: SecurityFact[];
+    conventions: ConventionFact[];
+    findings: OntologyFinding[];
+}
 /**
  * A node in the dependency graph representing a source file.
  */
@@ -24,7 +79,11 @@ export interface GraphNode {
     language: string;
     /** Last modified timestamp */
     mtime: string;
+    /** Optional code ontology facts for agent context/preflight packets */
+    ontology?: FileOntology;
 }
+export declare const IMPORT_TYPE_VALUES: readonly ["default", "named", "namespace", "require", "sideeffect"];
+export type ImportType = (typeof IMPORT_TYPE_VALUES)[number];
 /**
  * An edge in the dependency graph representing a dependency relationship.
  */
@@ -36,7 +95,49 @@ export interface GraphEdge {
     /** Import specifier used */
     importSpecifier: string;
     /** Type of import */
-    importType: 'default' | 'named' | 'namespace' | 'require' | 'sideeffect';
+    importType: ImportType;
+    /** Named symbols imported from the target, when statically detectable */
+    importedSymbols?: string[];
+}
+export interface FileReference {
+    file: string;
+    line?: number;
+    importType?: GraphEdge['importType'];
+}
+export interface SymbolReference {
+    file: string;
+    line?: number;
+    importedAs: string;
+}
+export interface BlastRadiusResult {
+    target: string[];
+    directDependents: string[];
+    transitiveDependents: string[];
+    depthReached: number;
+    totalDependents: number;
+    riskLevel: 'low' | 'medium' | 'high' | 'critical';
+}
+export interface LocalizationBlock {
+    target: string;
+    importerCount: number;
+    importers: FileReference[];
+    dependencyCount: number;
+    dependencies: FileReference[];
+    exportedSymbolsUsedExternally: string[];
+    blastRadius: BlastRadiusResult;
+    summary: string;
+}
+export interface PackageBoundarySummary {
+    name: string;
+    root: string;
+    fileCount: number;
+    roles: Partial<Record<FileRole, number>>;
+    dependsOn: string[];
+    dependedOnBy: string[];
+    routeCount: number;
+    dataOperationCount: number;
+    findingCount: number;
+    publicFiles: string[];
 }
 /**
  * The complete dependency graph for a workspace.

package/dist/tools/repo-graph/validation.d.ts

@@ -4,7 +4,7 @@
  * All public functions throw descriptive errors on invalid input so callers
  * can surface actionable messages rather than obscure downstream failures.
  */
-import type { GraphEdge, GraphNode } from './types';
+import { type GraphEdge, type GraphNode } from './types';
 /**
  * Validate that a workspace directory is safe to use.
  * Accepts both absolute and relative paths.

package/dist/tools/repo-graph.d.ts

@@ -18,7 +18,10 @@ export type { ScanResult } from './repo-graph/builder';
 export { addEdge, buildWorkspaceGraph, buildWorkspaceGraphAsync, resolveModuleSpecifier, upsertNode, } from './repo-graph/builder';
 export { clearCache, getCachedGraph, getCachedMtime, isDirty, markDirty, setCachedGraph, } from './repo-graph/cache';
 export { updateGraphForFiles } from './repo-graph/incremental';
-export { getGraphPath, loadGraph, loadOrCreateGraph, saveGraph, saveIfDirty, } from './repo-graph/storage';
-export type { BuildWorkspaceGraphOptions, GraphEdge, GraphNode, RepoGraph, } from './repo-graph/types';
+export type { ExtractFileOntologyInput } from './repo-graph/ontology';
+export { extractFileOntology } from './repo-graph/ontology';
+export { buildOntologyPreflightPacket, getBlastRadius, getDependencies, getFileOntology, getGraphNode, getImporters, getKeyFiles, getLocalizationContext, getPackageBoundaries, getSymbolConsumers, isGraphFresh, resetQueryCache, } from './repo-graph/query';
+export { getGraphPath, loadGraph, loadGraphSync, loadOrCreateGraph, saveGraph, saveIfDirty, } from './repo-graph/storage';
+export type { BlastRadiusResult, BuildWorkspaceGraphOptions, ConventionFact, DataOperationFact, FileOntology, FileReference, FileRole, GraphEdge, GraphNode, LocalizationBlock, OntologyFinding, PackageBoundarySummary, RepoGraph, RouteFact, RouteMethod, SecurityFact, SymbolReference, } from './repo-graph/types';
 export { createEmptyGraph, GRAPH_SCHEMA_VERSION, normalizeGraphPath, REPO_GRAPH_FILENAME, updateGraphMetadata, } from './repo-graph/types';
 export { validateGraphEdge, validateGraphNode, validateWorkspace, } from './repo-graph/validation';

package/dist/turbo/lean/reviewer.d.ts

@@ -39,8 +39,10 @@ export interface PhaseReviewerResult {
  * Uses the `{swarmId}_reviewer` pattern for named swarms and bare `reviewer`
  * for the default swarm. Follows the same suffix-based resolution used by
  * `getCanonicalAgentRole` so that arbitrary swarm prefixes are handled correctly.
+ *
+ * Exported for reuse by the auto-review hook (src/hooks/auto-review.ts).
  */
-declare function resolveDefaultReviewerAgent(generatedAgentNames: string[]): string;
+export declare function resolveDefaultReviewerAgent(generatedAgentNames: string[]): string;
 /**
  * Compiles a structured review package from lane and phase evidence.
  */

package/dist/utils/path-security.d.ts

@@ -11,8 +11,8 @@
  */
 export declare function containsPathTraversal(str: string): boolean;
 /**
- * Check if a string contains control characters that could be used
- * for injection attacks. Matches null byte, tab, carriage return, and newline.
+ * Check if a string contains control or directional-format characters that
+ * could be used for injection attacks.
  */
 export declare function containsControlChars(str: string): boolean;
 /**

package/package.json

@@ -1,9 +1,16 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.74.3",
+	"version": "7.76.0",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"default": "./dist/index.js"
+		},
+		"./package.json": "./package.json"
+	},
 	"bin": {
 		"opencode-swarm": "./dist/cli/index.js"
 	},