depwire-cli 0.9.22 → 0.9.23

package/dist/{chunk-XBCQPU63.js → chunk-OBWFFD3M.js}

@@ -575,6 +575,9 @@ async function connectToRepo(source, subdirectory, state) {
 import { execSync } from "child_process";
 async function getCommitLog(dir, limit) {
   try {
+    if (limit !== void 0 && (!Number.isInteger(limit) || limit < 1)) {
+      throw new Error(`Invalid git log limit: ${limit}`);
+    }
     const limitArg = limit ? `-n ${limit}` : "";
     const output = execSync(
       `git log ${limitArg} --pretty=format:"%H|%aI|%s|%an"`,
@@ -602,6 +605,9 @@ async function getCurrentBranch(dir) {
   }
 }
 async function checkoutCommit(dir, hash) {
+  if (!/^[a-zA-Z0-9_.\-\/]+$/.test(hash)) {
+    throw new Error(`Invalid git ref: ${hash}`);
+  }
   try {
     execSync(`git checkout -q ${hash}`, { cwd: dir, stdio: "ignore" });
   } catch (error) {
@@ -609,6 +615,9 @@ async function checkoutCommit(dir, hash) {
   }
 }
 async function restoreOriginal(dir, originalBranch) {
+  if (!/^[a-zA-Z0-9_.\-\/]+$/.test(originalBranch)) {
+    throw new Error(`Invalid git ref: ${originalBranch}`);
+  }
   try {
     execSync(`git checkout -q ${originalBranch}`, {
       cwd: dir,

package/dist/index.js

@@ -17,7 +17,7 @@ import {
   stashChanges,
   updateFileInGraph,
   watchProject
-} from "./chunk-XBCQPU63.js";
+} from "./chunk-OBWFFD3M.js";
 import {
   SimulationEngine,
   analyzeDeadCode,

package/dist/mcpb-entry.js

@@ -4,7 +4,7 @@ import {
   startMcpServer,
   updateFileInGraph,
   watchProject
-} from "./chunk-XBCQPU63.js";
+} from "./chunk-OBWFFD3M.js";
 import {
   buildGraph,
   parseProject

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "depwire-cli",
-  "version": "0.9.22",
-  "description": "The missing context layer for AI coding assistants. Dependency graph, MCP server, architecture health, dead code detection.",
+  "version": "0.9.23",
+  "description": "Dependency graph + 16 MCP tools for AI coding assistants. Impact analysis, health scoring, visualization.",
   "type": "module",
   "bin": {
     "depwire": "dist/index.js"