opencode-swarm 7.87.0 → 7.87.1

package/dist/cli/{guardrail-explain-wb1cj312.js → guardrail-explain-scym5r5y.js}

@@ -1,8 +1,8 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-f13d3b69.js";
-import"./index-wv2yj8ka.js";
+} from "./index-ts2j1wjr.js";
+import"./index-gwzpy671.js";
 import"./index-5hvbw5xh.js";
 import"./index-yhsmmv2z.js";
 import"./index-s8bj492g.js";

package/dist/cli/{index-0m44n5qv.js → index-dsjyfd3g.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-f13d3b69.js";
+} from "./index-ts2j1wjr.js";
 import {
   handleGuardrailLog
 } from "./index-5vpe6vq9.js";
@@ -76,7 +76,7 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-wv2yj8ka.js";
+} from "./index-gwzpy671.js";
 import"./index-5hvbw5xh.js";
 import"./index-yhsmmv2z.js";
 import"./index-s8bj492g.js";

package/dist/cli/{index-wv2yj8ka.js → index-gwzpy671.js}

@@ -894,7 +894,7 @@ var init_executor = __esm(() => {
 // package.json
 var package_default = {
   name: "opencode-swarm",
-  version: "7.87.0",
+  version: "7.87.1",
   description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -18161,7 +18161,26 @@ var SECRET_PATTERNS = [
   },
   {
     type: "env_secret",
-    pattern: /\b(?:[A-Z0-9]+_)*(?:KEY|TOKEN|SECRET|PASSWORD)\b\s*=\s*["']?[^\s"'`]{8,}["']?/gi
+    pattern: /\b(?:[A-Z][A-Z0-9]+_)+(?:KEY|TOKEN|SECRET|PASSWORD)\b\s*=\s*["']?[^\s"'`]{8,}["']?/gi
+  },
+  { type: "gitlab_token", pattern: /\bgl(?:pat|ptt)-[A-Za-z0-9_-]{15,}\b/g },
+  { type: "slack_token", pattern: /\bxox[abprs]-[A-Za-z0-9-]{10,}\b/g },
+  {
+    type: "jwt_token",
+    pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g
+  },
+  {
+    type: "aws_secret_access_key",
+    pattern: /\b(?:aws_secret_access_key|AWS_SECRET_ACCESS_KEY)\s*[=:]\s*[A-Za-z0-9/+=]{40}\b/g
+  },
+  {
+    type: "stripe_secret_key",
+    pattern: /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g
+  },
+  { type: "google_api_key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+  {
+    type: "openssh_private_key_block",
+    pattern: /-----BEGIN[ ]OPENSSH[ ]PRIVATE[ ]KEY-----[\s\S]*?-----END[ ]OPENSSH[ ]PRIVATE[ ]KEY-----/g
   }
 ];
 function findSecrets(text) {
@@ -18732,7 +18751,7 @@ function normalizeMemoryAgentRole(agentRole) {
   if (base === "critic" || base === "critic_sounding_board" || base === "critic_drift_verifier" || base === "critic_hallucination_verifier" || base === "critic_architecture_supervisor") {
     return "security";
   }
-  if (base === "curator_init" || base === "curator_phase")
+  if (base === "curator_init" || base === "curator_phase" || base === "curator_postmortem")
     return "curator";
   if (base === "docs")
     return "sme";
@@ -18743,6 +18762,17 @@ function normalizeMemoryAgentRole(agentRole) {
 }
 
 // src/memory/scoring.ts
+var SCORING_WEIGHTS = {
+  textOverlap: 0.38,
+  tagOverlap: 0.16,
+  fileOverlap: 0.12,
+  symbolOverlap: 0.08,
+  taskTermOverlap: 0.08,
+  scopeSpecificityBoost: 0.12,
+  kindProfileBoost: 0.06,
+  roleBoost: 0.05,
+  confidence: 0.08
+};
 function tokenize(text) {
   return new Set(text.toLowerCase().replace(/[^\w\s-]/g, " ").split(/\s+/).map((token) => token.trim()).filter(Boolean));
 }
@@ -18848,7 +18878,7 @@ function scoreMemoryRecordDetailed(record, request, context) {
   if (request.mode === "injection" && request.requireQuerySignal !== false && !hasQuerySignal) {
     return { item: null, skipReason: "no_signal" };
   }
-  const score = textOverlap * 0.38 + tagOverlap * 0.16 + fileOverlap * 0.12 + symbolOverlap * 0.08 + taskTermOverlap * 0.08 + scopeSpecificityBoost(record.scope) * 0.12 + kindProfileBoost(record.kind, request) * 0.06 + roleBoost * 0.05 + record.confidence * 0.08;
+  const score = textOverlap * SCORING_WEIGHTS.textOverlap + tagOverlap * SCORING_WEIGHTS.tagOverlap + fileOverlap * SCORING_WEIGHTS.fileOverlap + symbolOverlap * SCORING_WEIGHTS.symbolOverlap + taskTermOverlap * SCORING_WEIGHTS.taskTermOverlap + scopeSpecificityBoost(record.scope) * SCORING_WEIGHTS.scopeSpecificityBoost + kindProfileBoost(record.kind, request) * SCORING_WEIGHTS.kindProfileBoost + roleBoost * SCORING_WEIGHTS.roleBoost + record.confidence * SCORING_WEIGHTS.confidence;
   const reasonParts = [
     textOverlap > 0 ? `text_overlap=${textOverlap.toFixed(2)}` : null,
     tagOverlap > 0 ? `tag_overlap=${tagOverlap.toFixed(2)}` : null,
@@ -19548,7 +19578,6 @@ function loadDatabaseCtor2() {
   _DatabaseCtor2 = req("bun:sqlite").Database;
   return _DatabaseCtor2;
 }
-var FTS_SCHEMA_MIGRATION_VERSION = 3;
 var FTS_SCHEMA_MIGRATION_NAME = "create_memory_fts5_shadow_index";
 var FTS_TABLE_NAME = "memory_items_fts";
 var FTS_INDEX_COLUMNS = [
@@ -19637,6 +19666,15 @@ var MIGRATIONS2 = [
 			CREATE INDEX IF NOT EXISTS idx_memory_recall_usage_bundle
 				ON memory_recall_usage(bundle_id);
 		`
+  },
+  {
+    version: 3,
+    name: "create_memory_fts5_shadow_index",
+    sql: `
+			CREATE VIRTUAL TABLE IF NOT EXISTS ${FTS_TABLE_NAME} USING fts5(
+				${ftsCreateColumnsSql()}
+			);
+		`
   }
 ];
 
@@ -19645,6 +19683,7 @@ class SQLiteMemoryProvider {
   rootDirectory;
   config;
   initialized = false;
+  initPromise = null;
   db = null;
   ftsAvailable = false;
   memories = new Map;
@@ -19688,6 +19727,15 @@ class SQLiteMemoryProvider {
   async initialize() {
     if (this.initialized)
       return;
+    if (!this.initPromise) {
+      this.initPromise = this.doInitialize().catch((err) => {
+        this.initPromise = null;
+        throw err;
+      });
+    }
+    return this.initPromise;
+  }
+  async doInitialize() {
     const dbPath = this.databasePath();
     mkdirSync15(path40.dirname(dbPath), { recursive: true });
     const Db = loadDatabaseCtor2();
@@ -19883,6 +19931,7 @@ class SQLiteMemoryProvider {
     this.db = null;
     this.ftsAvailable = false;
     this.initialized = false;
+    this.initPromise = null;
     this.lastAutomaticJsonlMigration = null;
   }
   async importJsonl() {
@@ -20019,8 +20068,6 @@ class SQLiteMemoryProvider {
     try {
       if (!this.hasMigration(FTS_SCHEMA_MIGRATION_NAME)) {
         this.recreateFtsIndex();
-        this.markMigration(FTS_SCHEMA_MIGRATION_VERSION, FTS_SCHEMA_MIGRATION_NAME);
-        this.insertEvent("migration", String(FTS_SCHEMA_MIGRATION_VERSION), FTS_SCHEMA_MIGRATION_NAME);
       } else {
         db.run(`CREATE VIRTUAL TABLE IF NOT EXISTS ${FTS_TABLE_NAME} USING fts5(
 					${ftsCreateColumnsSql()}
@@ -20353,12 +20400,60 @@ class SQLiteMemoryProvider {
   }
   requireDb() {
     if (!this.db)
-      throw new Error("SQLite memory provider is not initialized");
+      throw new MemoryValidationError("SQLite memory provider is not initialized", "provider_not_initialized");
     return this.db;
   }
 }
 function splitSql(sql) {
-  return sql.split(";").map((statement) => statement.trim()).filter(Boolean);
+  const statements = [];
+  let current = "";
+  let inSingleQuote = false;
+  let inLineComment = false;
+  for (let i = 0;i < sql.length; i++) {
+    const char = sql[i];
+    const next = sql[i + 1];
+    if (inLineComment) {
+      if (char === `
+`) {
+        inLineComment = false;
+      }
+      continue;
+    }
+    if (inSingleQuote) {
+      if (char === "'" && next === "'") {
+        current += "''";
+        i++;
+        continue;
+      }
+      current += char;
+      if (char === "'") {
+        inSingleQuote = false;
+      }
+      continue;
+    }
+    if (char === "-" && next === "-") {
+      inLineComment = true;
+      i++;
+      continue;
+    }
+    if (char === "'") {
+      inSingleQuote = true;
+      current += char;
+      continue;
+    }
+    if (char === ";") {
+      const trimmed2 = current.trim();
+      if (trimmed2)
+        statements.push(trimmed2);
+      current = "";
+      continue;
+    }
+    current += char;
+  }
+  const trimmed = current.trim();
+  if (trimmed)
+    statements.push(trimmed);
+  return statements;
 }
 var FTS_STOP_WORDS = new Set([
   "a",
@@ -21087,7 +21182,16 @@ function parseEvaluateArgs(directory, args) {
           error: "Usage: /swarm memory evaluate [--json] [--fixtures <directory>]"
         };
       }
-      fixtureDirectory = path42.resolve(directory, next);
+      const resolvedFixtures = path42.resolve(directory, next);
+      const canonical = path42.normalize(resolvedFixtures) + path42.sep;
+      const allowedRootA = path42.normalize(directory) + path42.sep;
+      const allowedRootB = path42.normalize(path42.join(PACKAGE_ROOT, "tests", "fixtures", "memory-recall")) + path42.sep;
+      if (!canonical.startsWith(allowedRootA) && !canonical.startsWith(allowedRootB)) {
+        return {
+          error: "--fixtures <directory> must resolve under the project directory or the bundled tests/fixtures/memory-recall directory"
+        };
+      }
+      fixtureDirectory = resolvedFixtures;
       i++;
       continue;
     }
@@ -29151,7 +29255,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-0m44n5qv.js");
+    const { buildHelpText } = await import("./index-dsjyfd3g.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -29160,7 +29264,7 @@ async function handleHelpCommand(ctx) {
     return _internals44.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals44.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-0m44n5qv.js");
+  const { buildHelpText: fullHelp } = await import("./index-dsjyfd3g.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -29293,7 +29397,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-wb1cj312.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-scym5r5y.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",

package/dist/cli/{index-f13d3b69.js → index-ts2j1wjr.js}

@@ -12,7 +12,7 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-wv2yj8ka.js";
+} from "./index-gwzpy671.js";
 import {
   checkFileAuthority,
   classifyFile,

package/dist/cli/index.js

@@ -7,7 +7,7 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-wv2yj8ka.js";
+} from "./index-gwzpy671.js";
 import"./index-5hvbw5xh.js";
 import"./index-yhsmmv2z.js";
 import"./index-s8bj492g.js";

package/dist/index.js

@@ -69,7 +69,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "opencode-swarm",
-    version: "7.87.0",
+    version: "7.87.1",
     description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
     main: "dist/index.js",
     types: "dist/index.d.ts",
@@ -82494,7 +82494,26 @@ var init_redaction = __esm(() => {
     },
     {
       type: "env_secret",
-      pattern: /\b(?:[A-Z0-9]+_)*(?:KEY|TOKEN|SECRET|PASSWORD)\b\s*=\s*["']?[^\s"'`]{8,}["']?/gi
+      pattern: /\b(?:[A-Z][A-Z0-9]+_)+(?:KEY|TOKEN|SECRET|PASSWORD)\b\s*=\s*["']?[^\s"'`]{8,}["']?/gi
+    },
+    { type: "gitlab_token", pattern: /\bgl(?:pat|ptt)-[A-Za-z0-9_-]{15,}\b/g },
+    { type: "slack_token", pattern: /\bxox[abprs]-[A-Za-z0-9-]{10,}\b/g },
+    {
+      type: "jwt_token",
+      pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g
+    },
+    {
+      type: "aws_secret_access_key",
+      pattern: /\b(?:aws_secret_access_key|AWS_SECRET_ACCESS_KEY)\s*[=:]\s*[A-Za-z0-9/+=]{40}\b/g
+    },
+    {
+      type: "stripe_secret_key",
+      pattern: /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g
+    },
+    { type: "google_api_key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+    {
+      type: "openssh_private_key_block",
+      pattern: /-----BEGIN[ ]OPENSSH[ ]PRIVATE[ ]KEY-----[\s\S]*?-----END[ ]OPENSSH[ ]PRIVATE[ ]KEY-----/g
     }
   ];
 });
@@ -83012,7 +83031,7 @@ function normalizeMemoryAgentRole(agentRole) {
   if (base === "critic" || base === "critic_sounding_board" || base === "critic_drift_verifier" || base === "critic_hallucination_verifier" || base === "critic_architecture_supervisor") {
     return "security";
   }
-  if (base === "curator_init" || base === "curator_phase")
+  if (base === "curator_init" || base === "curator_phase" || base === "curator_postmortem")
     return "curator";
   if (base === "docs")
     return "sme";
@@ -83202,7 +83221,7 @@ function scoreMemoryRecordDetailed(record3, request, context) {
   if (request.mode === "injection" && request.requireQuerySignal !== false && !hasQuerySignal) {
     return { item: null, skipReason: "no_signal" };
   }
-  const score = textOverlap * 0.38 + tagOverlap * 0.16 + fileOverlap * 0.12 + symbolOverlap * 0.08 + taskTermOverlap * 0.08 + scopeSpecificityBoost(record3.scope) * 0.12 + kindProfileBoost(record3.kind, request) * 0.06 + roleBoost * 0.05 + record3.confidence * 0.08;
+  const score = textOverlap * SCORING_WEIGHTS.textOverlap + tagOverlap * SCORING_WEIGHTS.tagOverlap + fileOverlap * SCORING_WEIGHTS.fileOverlap + symbolOverlap * SCORING_WEIGHTS.symbolOverlap + taskTermOverlap * SCORING_WEIGHTS.taskTermOverlap + scopeSpecificityBoost(record3.scope) * SCORING_WEIGHTS.scopeSpecificityBoost + kindProfileBoost(record3.kind, request) * SCORING_WEIGHTS.kindProfileBoost + roleBoost * SCORING_WEIGHTS.roleBoost + record3.confidence * SCORING_WEIGHTS.confidence;
   const reasonParts = [
     textOverlap > 0 ? `text_overlap=${textOverlap.toFixed(2)}` : null,
     tagOverlap > 0 ? `tag_overlap=${tagOverlap.toFixed(2)}` : null,
@@ -83278,9 +83297,21 @@ function unionTokens(...sets) {
   }
   return union3;
 }
+var SCORING_WEIGHTS;
 var init_scoring = __esm(() => {
   init_role_profiles();
   init_schema2();
+  SCORING_WEIGHTS = {
+    textOverlap: 0.38,
+    tagOverlap: 0.16,
+    fileOverlap: 0.12,
+    symbolOverlap: 0.08,
+    taskTermOverlap: 0.08,
+    scopeSpecificityBoost: 0.12,
+    kindProfileBoost: 0.06,
+    roleBoost: 0.05,
+    confidence: 0.08
+  };
 });
 
 // src/memory/local-jsonl-provider.ts
@@ -84013,6 +84044,7 @@ class SQLiteMemoryProvider {
   rootDirectory;
   config;
   initialized = false;
+  initPromise = null;
   db = null;
   ftsAvailable = false;
   memories = new Map;
@@ -84056,6 +84088,15 @@ class SQLiteMemoryProvider {
   async initialize() {
     if (this.initialized)
       return;
+    if (!this.initPromise) {
+      this.initPromise = this.doInitialize().catch((err2) => {
+        this.initPromise = null;
+        throw err2;
+      });
+    }
+    return this.initPromise;
+  }
+  async doInitialize() {
     const dbPath = this.databasePath();
     mkdirSync27(path76.dirname(dbPath), { recursive: true });
     const Db = loadDatabaseCtor2();
@@ -84251,6 +84292,7 @@ class SQLiteMemoryProvider {
     this.db = null;
     this.ftsAvailable = false;
     this.initialized = false;
+    this.initPromise = null;
     this.lastAutomaticJsonlMigration = null;
   }
   async importJsonl() {
@@ -84387,8 +84429,6 @@ class SQLiteMemoryProvider {
     try {
       if (!this.hasMigration(FTS_SCHEMA_MIGRATION_NAME)) {
         this.recreateFtsIndex();
-        this.markMigration(FTS_SCHEMA_MIGRATION_VERSION, FTS_SCHEMA_MIGRATION_NAME);
-        this.insertEvent("migration", String(FTS_SCHEMA_MIGRATION_VERSION), FTS_SCHEMA_MIGRATION_NAME);
       } else {
         db.run(`CREATE VIRTUAL TABLE IF NOT EXISTS ${FTS_TABLE_NAME} USING fts5(
 					${ftsCreateColumnsSql()}
@@ -84721,12 +84761,60 @@ class SQLiteMemoryProvider {
   }
   requireDb() {
     if (!this.db)
-      throw new Error("SQLite memory provider is not initialized");
+      throw new MemoryValidationError("SQLite memory provider is not initialized", "provider_not_initialized");
     return this.db;
   }
 }
 function splitSql(sql) {
-  return sql.split(";").map((statement) => statement.trim()).filter(Boolean);
+  const statements = [];
+  let current = "";
+  let inSingleQuote = false;
+  let inLineComment = false;
+  for (let i2 = 0;i2 < sql.length; i2++) {
+    const char = sql[i2];
+    const next = sql[i2 + 1];
+    if (inLineComment) {
+      if (char === `
+`) {
+        inLineComment = false;
+      }
+      continue;
+    }
+    if (inSingleQuote) {
+      if (char === "'" && next === "'") {
+        current += "''";
+        i2++;
+        continue;
+      }
+      current += char;
+      if (char === "'") {
+        inSingleQuote = false;
+      }
+      continue;
+    }
+    if (char === "-" && next === "-") {
+      inLineComment = true;
+      i2++;
+      continue;
+    }
+    if (char === "'") {
+      inSingleQuote = true;
+      current += char;
+      continue;
+    }
+    if (char === ";") {
+      const trimmed2 = current.trim();
+      if (trimmed2)
+        statements.push(trimmed2);
+      current = "";
+      continue;
+    }
+    current += char;
+  }
+  const trimmed = current.trim();
+  if (trimmed)
+    statements.push(trimmed);
+  return statements;
 }
 function buildFtsQuery(request) {
   const text = request.mode === "injection" && request.task ? `${request.task}
@@ -84790,7 +84878,7 @@ function rerankWithFts(items, ftsOrder) {
     };
   }).sort((a, b) => b.score - a.score || a.record.id.localeCompare(b.record.id));
 }
-var _DatabaseCtor2 = null, FTS_SCHEMA_MIGRATION_VERSION = 3, FTS_SCHEMA_MIGRATION_NAME = "create_memory_fts5_shadow_index", FTS_TABLE_NAME = "memory_items_fts", FTS_INDEX_COLUMNS, FTS_INSERT_COLUMNS, MIGRATIONS2, FTS_STOP_WORDS;
+var _DatabaseCtor2 = null, FTS_SCHEMA_MIGRATION_NAME = "create_memory_fts5_shadow_index", FTS_TABLE_NAME = "memory_items_fts", FTS_INDEX_COLUMNS, FTS_INSERT_COLUMNS, MIGRATIONS2, FTS_STOP_WORDS;
 var init_sqlite_provider = __esm(() => {
   init_utils2();
   init_config3();
@@ -84886,6 +84974,15 @@ var init_sqlite_provider = __esm(() => {
 			CREATE INDEX IF NOT EXISTS idx_memory_recall_usage_bundle
 				ON memory_recall_usage(bundle_id);
 		`
+    },
+    {
+      version: 3,
+      name: "create_memory_fts5_shadow_index",
+      sql: `
+			CREATE VIRTUAL TABLE IF NOT EXISTS ${FTS_TABLE_NAME} USING fts5(
+				${ftsCreateColumnsSql()}
+			);
+		`
     }
   ];
   FTS_STOP_WORDS = new Set([
@@ -86036,65 +86133,69 @@ async function recallForAgent(input) {
     agentId: input.agentId,
     runId: input.sessionID
   }, { config: input.config });
-  const resolvedConfig = resolveMemoryConfig(input.config);
-  if (!gateway.isEnabled()) {
-    await logInjectionSkipped(input, "disabled");
-    return null;
-  }
-  if (!resolvedConfig.recall.injection.enabled) {
-    await logInjectionSkipped(input, "disabled");
-    return null;
-  }
-  const scopes = gateway.deriveAllowedScopes();
-  const planInput = {
-    userGoal: compactText(input.userGoal),
-    runId: input.sessionID ?? "unknown",
-    agentRole: input.agentRole,
-    agentId: input.agentId,
-    agentTask: compactText(input.agentTask),
-    touchedFiles: extractTouchedFiles(input.agentTask)
-  };
-  const plan = buildMemoryRecallPlan(planInput, { scopes });
-  plan.maxItems = resolvedConfig.recall.injection.maxItems;
-  plan.tokenBudget = resolvedConfig.recall.injection.tokenBudget;
-  await input.appendRunLog(input.directory, input.sessionID, {
-    event: "recall_requested",
-    runId: input.sessionID ?? "unknown",
-    agentRole: input.agentRole,
-    agentId: input.agentId,
-    metadata: {
+  try {
+    const resolvedConfig = resolveMemoryConfig(input.config);
+    if (!gateway.isEnabled()) {
+      await logInjectionSkipped(input, "disabled");
+      return null;
+    }
+    if (!resolvedConfig.recall.injection.enabled) {
+      await logInjectionSkipped(input, "disabled");
+      return null;
+    }
+    const scopes = gateway.deriveAllowedScopes();
+    const planInput = {
+      userGoal: compactText(input.userGoal),
+      runId: input.sessionID ?? "unknown",
+      agentRole: input.agentRole,
+      agentId: input.agentId,
+      agentTask: compactText(input.agentTask),
+      touchedFiles: extractTouchedFiles(input.agentTask)
+    };
+    const plan = buildMemoryRecallPlan(planInput, { scopes });
+    plan.maxItems = resolvedConfig.recall.injection.maxItems;
+    plan.tokenBudget = resolvedConfig.recall.injection.tokenBudget;
+    await input.appendRunLog(input.directory, input.sessionID, {
+      event: "recall_requested",
+      runId: input.sessionID ?? "unknown",
+      agentRole: input.agentRole,
+      agentId: input.agentId,
+      metadata: {
+        kinds: plan.kinds,
+        maxItems: plan.maxItems,
+        tokenBudget: plan.tokenBudget,
+        scopeTypes: plan.scopes.map((scope) => scope.type)
+      }
+    });
+    const recallInput = {
+      query: plan.query,
+      task: planInput.agentTask,
+      mode: "injection",
+      scopes: plan.scopes,
       kinds: plan.kinds,
       maxItems: plan.maxItems,
       tokenBudget: plan.tokenBudget,
-      scopeTypes: plan.scopes.map((scope) => scope.type)
+      minScore: resolvedConfig.recall.injection.minScore,
+      requireQuerySignal: resolvedConfig.recall.injection.requireQuerySignal
+    };
+    const bundle = await gateway.recall(recallInput);
+    await input.appendRunLog(input.directory, input.sessionID, {
+      event: "recall_returned",
+      runId: input.sessionID ?? "unknown",
+      agentRole: input.agentRole,
+      agentId: input.agentId,
+      bundleId: bundle.id,
+      memoryIds: bundle.items.map((item) => item.record.id),
+      scores: bundle.items.map((item) => item.score),
+      tokenEstimate: bundle.tokenEstimate
+    });
+    if (bundle.items.length === 0) {
+      await logInjectionSkipped(input, bundle.diagnostics?.injectionSkipReason ?? "no_results", bundle);
     }
-  });
-  const recallInput = {
-    query: plan.query,
-    task: planInput.agentTask,
-    mode: "injection",
-    scopes: plan.scopes,
-    kinds: plan.kinds,
-    maxItems: plan.maxItems,
-    tokenBudget: plan.tokenBudget,
-    minScore: resolvedConfig.recall.injection.minScore,
-    requireQuerySignal: resolvedConfig.recall.injection.requireQuerySignal
-  };
-  const bundle = await gateway.recall(recallInput);
-  await input.appendRunLog(input.directory, input.sessionID, {
-    event: "recall_returned",
-    runId: input.sessionID ?? "unknown",
-    agentRole: input.agentRole,
-    agentId: input.agentId,
-    bundleId: bundle.id,
-    memoryIds: bundle.items.map((item) => item.record.id),
-    scores: bundle.items.map((item) => item.score),
-    tokenEstimate: bundle.tokenEstimate
-  });
-  if (bundle.items.length === 0) {
-    await logInjectionSkipped(input, bundle.diagnostics?.injectionSkipReason ?? "no_results", bundle);
+    return { bundle, scopes };
+  } finally {
+    await gateway.dispose?.();
   }
-  return { bundle, scopes };
 }
 async function logInjectionSkipped(input, reason, bundle) {
   await input.appendRunLog(input.directory, input.sessionID, {
@@ -86136,7 +86237,7 @@ function parseTaskToolInput(input) {
   };
 }
 function isCuratorAgent(agentRole) {
-  return agentRole === "curator" || agentRole === "curator_init" || agentRole === "curator_phase";
+  return agentRole === "curator" || agentRole === "curator_init" || agentRole === "curator_phase" || agentRole === "curator_postmortem";
 }
 function messagesContainRecall(messages) {
   return messages.some((message) => message?.parts?.some((part) => typeof part?.text === "string" && (part.text.includes(MEMORY_SENTINEL) || part.text.includes("Retrieved Swarm Memory"))));
@@ -86509,7 +86610,16 @@ function parseEvaluateArgs(directory, args2) {
           error: "Usage: /swarm memory evaluate [--json] [--fixtures <directory>]"
         };
       }
-      fixtureDirectory = path80.resolve(directory, next);
+      const resolvedFixtures = path80.resolve(directory, next);
+      const canonical = path80.normalize(resolvedFixtures) + path80.sep;
+      const allowedRootA = path80.normalize(directory) + path80.sep;
+      const allowedRootB = path80.normalize(path80.join(PACKAGE_ROOT, "tests", "fixtures", "memory-recall")) + path80.sep;
+      if (!canonical.startsWith(allowedRootA) && !canonical.startsWith(allowedRootB)) {
+        return {
+          error: "--fixtures <directory> must resolve under the project directory or the bundled tests/fixtures/memory-recall directory"
+        };
+      }
+      fixtureDirectory = resolvedFixtures;
       i2++;
       continue;
     }
@@ -103626,9 +103736,9 @@ function validateFilename(filename) {
     throw new Error("Invalid filename: contains null byte");
   }
   const pathSeparators = ["/", "\\", ".."];
-  for (const sep13 of pathSeparators) {
-    if (filename.includes(sep13)) {
-      throw new Error(`Invalid filename: contains path separator '${sep13}'`);
+  for (const sep14 of pathSeparators) {
+    if (filename.includes(sep14)) {
+      throw new Error(`Invalid filename: contains path separator '${sep14}'`);
     }
   }
   if (filename.startsWith("/") || filename.startsWith("\\") || /^[a-zA-Z]:/.test(filename)) {

package/dist/memory/scoring.d.ts

@@ -7,6 +7,24 @@ export interface RecallScoringDiagnostics {
     noSignalCount: number;
     belowThresholdCount: number;
 }
+/**
+ * Recall scoring weight coefficients. Sum is 1.13 (scores are an unnormalised
+ * weighted sum; may exceed 1.0). minScore thresholds in DEFAULT_MEMORY_CONFIG
+ * are calibrated against these weights.
+ *
+ * Pinned by tests/unit/memory/scoring.test.ts to detect drift.
+ */
+export declare const SCORING_WEIGHTS: {
+    readonly textOverlap: 0.38;
+    readonly tagOverlap: 0.16;
+    readonly fileOverlap: 0.12;
+    readonly symbolOverlap: 0.08;
+    readonly taskTermOverlap: 0.08;
+    readonly scopeSpecificityBoost: 0.12;
+    readonly kindProfileBoost: 0.06;
+    readonly roleBoost: 0.05;
+    readonly confidence: 0.08;
+};
 export declare function sameScope(a: MemoryScopeRef, b: MemoryScopeRef): boolean;
 export declare function scopeAllowed(recordScope: MemoryScopeRef, allowedScopes: MemoryScopeRef[]): boolean;
 export declare function scoreMemoryRecord(record: MemoryRecord, request: RecallRequest): RecallResultItem | null;

package/dist/memory/sqlite-provider.d.ts

@@ -3,6 +3,12 @@ import { type JsonlMigrationReport } from './jsonl-migration';
 import type { MemoryCompactOptions, MemoryCompactResult, MemoryProposalStore, MemoryProvider, MemoryRecallUsageEvent, MemoryRecallUsageFilter } from './provider';
 import type { RecallScoringDiagnostics } from './scoring';
 import type { AppliedMemoryChange, MemoryListFilter, MemoryProposal, MemoryRecord, RecallRequest, RecallResultItem, ResolvedCuratorMemoryDecision } from './types';
+interface Migration {
+    version: number;
+    name: string;
+    sql: string;
+}
+export declare const MIGRATIONS: Migration[];
 export interface SQLiteJsonlImportResult {
     importedMemories: number;
     importedProposals: number;
@@ -14,6 +20,7 @@ export declare class SQLiteMemoryProvider implements MemoryProvider, MemoryPropo
     private readonly rootDirectory;
     private readonly config;
     private initialized;
+    private initPromise;
     private db;
     private ftsAvailable;
     private memories;
@@ -22,6 +29,7 @@ export declare class SQLiteMemoryProvider implements MemoryProvider, MemoryPropo
     constructor(rootDirectory: string, config?: Partial<MemoryConfig>);
     private databasePath;
     initialize(): Promise<void>;
+    private doInitialize;
     upsert(record: MemoryRecord): Promise<MemoryRecord>;
     get(id: string): Promise<MemoryRecord | null>;
     delete(id: string, reason?: string): Promise<void>;
@@ -75,9 +83,11 @@ export declare class SQLiteMemoryProvider implements MemoryProvider, MemoryPropo
     private insertEvent;
     private requireDb;
 }
+declare function splitSql(sql: string): string[];
 declare function buildFtsQuery(request: RecallRequest): string | null;
 declare function extractFtsTerms(text: string): Set<string>;
 export declare const _test_exports: {
+    splitSql: typeof splitSql;
     buildFtsQuery: typeof buildFtsQuery;
     extractFtsTerms: typeof extractFtsTerms;
     FTS_SCHEMA_MIGRATION_NAME: string;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencode-swarm",
-	"version": "7.87.0",
+	"version": "7.87.1",
 	"description": "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",