opencode-swarm 7.99.1 → 7.99.3

package/.opencode/skills/brainstorm/SKILL.md

@@ -61,6 +61,14 @@ If `council.general.enabled` is true in the resolved opencode-swarm config AND a
 - Exit when reviewer signs off (or user explicitly accepts remaining disagreements).
 
 **Phase 6: QA GATE SELECTION, PARALLEL CODERS, AND COMMIT FREQUENCY (architect, dialogue only).**
+Auto-loop exception: when BRAINSTORM is running inside MODE: LOOP with
+`autonomy=auto`, do not ask this preference question. Write the balanced-speed
+default `## Pending QA Gate Selection` instead (reviewer, test_engineer,
+sme_enabled, critic_pre_plan, sast_enabled, drift_check ON; council_mode,
+hallucination_guard, mutation_test, phase_council, final_council OFF). Do not
+write `## Pending Parallelization Config` here because task scopes are not known
+until PLAN; MODE: PLAN will choose safe parallelism automatically. Keep commit
+frequency at phase-level only.
 Now ask the user which QA gates to enable for this plan, how many parallel coders to use, and the commit frequency -- do not select on their behalf. Present all three items together as one unified exchange.
 
 Present the eleven gates with their defaults (DEFAULT_QA_GATES), parallel coder count, and commit frequency as a single user-facing section. Offer the user a one-shot choice: accept defaults, or customize. The eleven gates are:
@@ -77,7 +85,7 @@ Present the eleven gates with their defaults (DEFAULT_QA_GATES), parallel coder
 - final_council (default: OFF) -- when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) -- NOT the General Council -- at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
 
 Additionally, present these two sub-items as part of the same exchange:
-- Parallel coders (default: 1, range: 1-4) -- how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files -- safe and faster, but only for tasks whose file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
+- Parallel coders (default: 1, range: 1-6) -- how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files -- safe and faster, but only for tasks whose file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
 - Commit frequency (default: phase-level only) -- optional per-task checkpoint commit after each task completion.
 - auto_proceed (boolean, default: false) -- when true, auto-advance to the next phase without asking "Ready for Phase N+1?"; runtime toggle via /swarm auto-proceed on|off.
 
@@ -117,6 +125,8 @@ GATE SELECTION IS MANDATORY — these thoughts are WRONG and must be ignored:
     → WRONG: the architect does not configure gates. The user configures gates. Always ask.
 
 MANDATORY PAUSE: Do NOT write the spec summary (step 7). Do NOT suggest next steps.
+Exception: MODE: LOOP with `autonomy=auto` uses the balanced-speed defaults
+above and does not pause for this preference exchange.
 You are BLOCKED until ALL THREE of these conditions are met:
   (1) The unified gate/coders/commit selection section has been presented to the user in a single message
   (2) The user has responded (accept defaults OR customized list for all three items)

package/.opencode/skills/loop/SKILL.md

@@ -43,11 +43,11 @@ Parse the `[MODE: LOOP ...]` header to extract:
 - `objective`: the goal text after the header (the WHAT to achieve). Empty only
   when `resume=true`.
 - `max_cycles`: integer 1..5 (default 3) — hard cap on outer improvement cycles.
-- `autonomy`: `checkpoint` (default) or `auto`.
-  - `checkpoint`: pause at each phase gate and wait for explicit user approval
-    before continuing.
+- `autonomy`: `auto` (default) or `checkpoint`.
   - `auto`: proceed across gates without prompting, but still enforce every
     hard stop condition and the mandatory review/critic gates.
+  - `checkpoint`: pause at each phase gate and wait for explicit user approval
+    before continuing.
 - `depth`: `standard` (default) or `exhaustive` (wider exploration in
   BRAINSTORM and PLAN: more candidate approaches, deeper localization).
 - `resume`: `true` | `false`. When true, resume the existing run from durable
@@ -100,6 +100,15 @@ IMPROVE**. Do not skip or collapse phases. Each phase has an entry gate
 (precondition) and an exit gate (positive evidence required before the next
 phase begins). In `checkpoint` autonomy, pause at each gate for user approval.
 
+When `autonomy=auto`, use the balanced-speed defaults instead of asking the user
+for execution preferences: reviewer ON, test_engineer ON, sme_enabled ON,
+critic_pre_plan ON, sast_enabled ON, drift_check ON, and council_mode,
+hallucination_guard, mutation_test, phase_council, final_council OFF. Keep
+commit frequency at phase-level only. During PLAN, choose the largest safe
+parallel coder count from dependency-ready, file-disjoint task groups, clamped to
+the configured limit (currently 6); if scopes overlap or are unknown, use 1.
+This does not weaken QA; it removes only the preference prompt.
+
 On cycle 2+, BRAINSTORM is replaced by a lightweight **refinement** step: feed
 the prior cycle's captured improvements and residual findings into PLAN
 directly (skip full discovery dialogue) — the objective is already framed.
@@ -281,7 +290,7 @@ A minimal, append-friendly shape — extend as needed but keep these fields:
 
 ## Autonomy Quick Reference
 
-| Behavior | `checkpoint` (default) | `auto` |
+| Behavior | `auto` (default) | `checkpoint` |
 | --- | --- | --- |
 | Pause at phase gates | Yes — wait for user approval | No |
 | Confirm before next cycle | Yes | No |

package/.opencode/skills/plan/SKILL.md

@@ -203,6 +203,13 @@ save_plan({
 })
 
 **POST-SAVE_PLAN: APPLY QA GATE SELECTION.**
+Auto-loop exception: when this PLAN step is running inside MODE: LOOP with
+`autonomy=auto`, do not ask the gate/parallelism/commit-frequency question. Use
+the balanced-speed defaults from the loop skill, call `set_qa_gates` with those
+values after `save_plan`, keep phase-level commits, and set a locked
+`execution_profile` automatically when the plan has dependency-ready,
+file-disjoint tasks. Choose the largest safe count, clamped to the configured
+limit (currently 6); use serial execution when scopes overlap or are unknown.
 After `save_plan` succeeds, read `.swarm/context.md`:
 - If a `## Pending QA Gate Selection` section exists: parse the gate values, call `set_qa_gates` with those flags, confirm with the user ("QA gates applied: <list>"), then remove the section from context.md.
 - If a `## Pending Parallelization Config` section also exists: parse the values and call `save_plan` again with `execution_profile` set to `{ parallelization_enabled: <parsed>, max_concurrent_tasks: <parsed>, council_parallel: false, locked: true }`. Then remove the section from context.md. If the plan already had `execution_profile.locked: true`, skip this step — the profile is already locked and immutable.
@@ -220,7 +227,7 @@ After `save_plan` succeeds, read `.swarm/context.md`:
   - drift_check (default: ON) - mandatory per-phase drift verification at PHASE-WRAP
   - final_council (default: OFF) - when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) -- NOT the General Council -- at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
   Additionally, present these two sub-items as part of the same exchange:
-  - Parallel coders (default: 1, range: 1-4) - how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files - safe and faster, but only for tasks whose file scopes do NOT overlap. Inspect the plan and recommend a count equal to the number of dependency-ready, file-disjoint task groups (clamped 1-4); recommend 1 (serial) when scopes overlap or are unknown. State your recommendation and reasoning when you ask.
+  - Parallel coders (default: 1, range: 1-6) - how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files - safe and faster, but only for tasks whose declared file scopes do NOT overlap. Inspect the plan and recommend a count equal to the number of dependency-ready, file-disjoint task groups (clamped 1-6); recommend 1 (serial) when scopes overlap or are unknown. State your recommendation and reasoning when you ask.
   - Commit frequency (default: phase-level only) - optional per-task checkpoint commit after each task completion.
   The user answers all three (gates, parallel coders, commit frequency) in one exchange. Wait for the user's response.
   If the user says parallel coders > 1, write a `## Pending Parallelization Config` section to `.swarm/context.md` alongside the gate selection:

package/.opencode/skills/specify/SKILL.md

@@ -32,7 +32,7 @@ Activates when: user asks to "specify", "define requirements", "write a spec", o
      - **Important:** If research is ongoing, monitor the timeout configured in `.swarm/config.json` under `research_needed_timeout_ms` (default: 300000ms / 5 minutes). If research does not complete before the timeout expires, automatically reclassify the item to `user_decision` with a note that research was incomplete, then surface it to the user. This prevents the clarification funnel from stalling while waiting for external research.
  5. Write the spec to `.swarm/spec.md`.
 5b. **QA GATE SELECTION, PARALLEL CODERS, COMMIT FREQUENCY, AND AUTO_PROCEED (dialogue only).**
-Ask the user which QA gates to enable for this plan, how many parallel coders to use, the commit frequency, and auto_proceed -- do not select on their behalf. Present all four items together as one unified exchange.
+Ask the user which QA gates to enable for this plan, how many parallel coders to use, the commit frequency, and auto_proceed -- do not select on their behalf. Present all four items together as one unified exchange. Exception: when SPECIFY is running inside MODE: LOOP with `autonomy=auto`, write the balanced-speed default `## Pending QA Gate Selection` instead (reviewer, test_engineer, sme_enabled, critic_pre_plan, sast_enabled, drift_check ON; council_mode, hallucination_guard, mutation_test, phase_council, final_council OFF), keep phase-level commits, and let MODE: PLAN choose safe parallelism after task scopes exist.
 
 Present the eleven gates with their defaults (DEFAULT_QA_GATES), parallel coder count, commit frequency, and auto_proceed as a single user-facing section. Offer the user a one-shot choice: accept defaults, or customize. The eleven gates are:
 - reviewer (default: ON) -- code review of coder output
@@ -48,7 +48,7 @@ Present the eleven gates with their defaults (DEFAULT_QA_GATES), parallel coder
 - final_council (default: OFF) -- when enabled, after all phases complete the architect dispatches the full 5-member council (critic, reviewer, sme, test_engineer, explorer) -- NOT the General Council -- at project scope, collects `CouncilMemberVerdict` objects, and calls `write_final_council_evidence`. This does not require `council.general.enabled`.
 
 Additionally, present these three sub-items as part of the same exchange:
-- Parallel coders (default: 1, range: 1-4) -- how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files -- safe and faster, but only for tasks whose file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
+- Parallel coders (default: 1, range: 1-6) -- how many coders should run in parallel. Parallel coders each run in an isolated git worktree (separate working dir + branch) and merge back automatically, so they never overwrite each other's files -- safe and faster, but only for tasks whose file scopes do NOT overlap. The per-task file scopes that determine a safe parallel count are not known until the plan is finalized, so default to 1 (serial) here; the precise recommendation is made at plan time once the tasks and their scopes exist.
 - Commit frequency (default: phase-level only) -- optional per-task checkpoint commit after each task completion.
 - auto_proceed (boolean, default: false) -- when true, auto-advance to the next phase without asking "Ready for Phase N+1?"; runtime toggle via /swarm auto-proceed on|off.
 
@@ -88,6 +88,8 @@ GATE SELECTION IS MANDATORY — these thoughts are WRONG and must be ignored:
     → WRONG: the architect does not configure gates. The user configures gates. Always ask.
 
 MANDATORY PAUSE: Do NOT write the spec summary (step 7). Do NOT suggest next steps.
+Exception: MODE: LOOP with `autonomy=auto` uses the balanced-speed defaults
+above and does not pause for this preference exchange.
 You are BLOCKED until ALL THREE of these conditions are met:
   (1) The unified gate/coders/commit/auto_proceed selection section has been presented to the user in a single message
   (2) The user has responded (accept defaults OR customized list for all four items)

package/dist/cli/{evidence-summary-service-gvd7mw7v.js → evidence-summary-service-wxarfgt8.js}

@@ -6,10 +6,10 @@ import {
   loadPlanJsonOnly,
   mergeDurableGateEntriesFromEvidence,
   readDurableGateEvidence
-} from "./index-qcr60fgm.js";
+} from "./index-6wgwybzj.js";
 import"./index-r8f89sm9.js";
 import"./index-9b7qp18e.js";
-import"./index-we94wkty.js";
+import"./index-94qwbx11.js";
 import"./index-jtqkh8jf.js";
 import"./index-5e4e2hvv.js";
 import"./index-p0arc26j.js";

package/dist/cli/{guardrail-explain-6g1japmf.js → guardrail-explain-5fpwhqk5.js}

@@ -1,21 +1,21 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-sy329dh4.js";
-import"./index-brpm7xs3.js";
+} from "./index-nytjghhx.js";
+import"./index-fhve3nj7.js";
 import"./index-xsswhy6k.js";
 import"./index-ydgy7vg5.js";
 import"./index-vwyjkzgs.js";
 import"./index-f7nma02k.js";
 import"./index-svf2zjxs.js";
 import"./index-7hnwnw5g.js";
-import"./index-qcr60fgm.js";
+import"./index-6wgwybzj.js";
 import"./index-adz3nk9b.js";
 import"./index-v4fcn4tr.js";
 import"./index-r8f89sm9.js";
 import"./index-9b7qp18e.js";
-import"./index-5fxjagjt.js";
-import"./index-we94wkty.js";
+import"./index-s3esnz7m.js";
+import"./index-94qwbx11.js";
 import"./index-jtqkh8jf.js";
 import"./index-5e4e2hvv.js";
 import"./index-p0arc26j.js";

package/dist/cli/{index-qcr60fgm.js → index-6wgwybzj.js}

@@ -8,7 +8,7 @@ import {
 import {
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-we94wkty.js";
+} from "./index-94qwbx11.js";
 import {
   readCachedParsedFile
 } from "./index-jtqkh8jf.js";

package/dist/cli/{index-we94wkty.js → index-94qwbx11.js}

@@ -13,6 +13,7 @@ import {
 } from "./index-b9v501fr.js";
 
 // src/hooks/utils.ts
+import * as fs from "fs";
 import * as path from "path";
 var _internals = {
   safeHook,
@@ -71,8 +72,55 @@ function validateSwarmPath(directory, filename) {
       throw new Error("Invalid filename: path escapes .swarm directory");
     }
   }
+  let realBaseDir;
+  try {
+    if (fs.lstatSync(baseDir).isSymbolicLink()) {
+      throw new Error("Invalid filename: path escapes .swarm directory");
+    }
+    realBaseDir = fs.realpathSync(baseDir);
+  } catch (error) {
+    if (error instanceof Error && error.message === "Invalid filename: path escapes .swarm directory") {
+      throw error;
+    }
+    if (error.code === "ENOENT") {
+      return resolved;
+    }
+    throw new Error("Invalid filename: failed to resolve .swarm directory");
+  }
+  let existingPath = resolved;
+  while (!fs.existsSync(existingPath)) {
+    const parent = path.dirname(existingPath);
+    if (parent === existingPath || !isPathWithin(parent, baseDir)) {
+      existingPath = baseDir;
+      break;
+    }
+    existingPath = parent;
+  }
+  let realExistingPath;
+  try {
+    realExistingPath = fs.realpathSync(existingPath);
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      realExistingPath = realBaseDir;
+    } else {
+      throw new Error("Invalid filename: failed to resolve path");
+    }
+  }
+  if (!isPathWithin(realExistingPath, realBaseDir)) {
+    throw new Error("Invalid filename: path escapes .swarm directory");
+  }
   return resolved;
 }
+function isPathWithin(candidate, base) {
+  const normalizedCandidate = path.normalize(candidate);
+  const normalizedBase = path.normalize(base);
+  if (process.platform === "win32") {
+    const candidateLower = normalizedCandidate.toLowerCase();
+    const baseLower = normalizedBase.toLowerCase();
+    return candidateLower === baseLower || candidateLower.startsWith(`${baseLower}${path.sep}`);
+  }
+  return normalizedCandidate === normalizedBase || normalizedCandidate.startsWith(`${normalizedBase}${path.sep}`);
+}
 async function readSwarmFileAsync(directory, filename, cache) {
   if (cache !== undefined) {
     const key = `${directory}::${filename}`;