opencode-swarm 7.129.2 → 7.129.3

package/dist/background/workspace-snapshot.d.ts

@@ -19,8 +19,18 @@ interface CaptureWorkspaceSnapshotOptions {
 export declare function readGitTextAtRevision(directory: string, revision: string, relativePath: string): string | null;
 /** Resolve the exact checked-out commit through the bounded Git snapshot path. */
 export declare function resolveCurrentGitHead(directory: string): string | null;
+/**
+ * Async twin of {@link resolveCurrentGitHead}. PR-workflow gate/dispatch binding
+ * runs on the host tool/hook path, so HEAD verification must resolve Git off the
+ * blocking `spawnSync` path — a synchronous spawn on the long-running host (most
+ * acutely under Bun on Windows) can hang to its bound instead of returning, which
+ * a fail-closed gate would surface as a spurious "cannot resolve HEAD" block.
+ */
+export declare function resolveCurrentGitHeadAsync(directory: string): Promise<string | null>;
 /** Resolve one exact PR merge base without shell interpolation or unbounded I/O. */
 export declare function resolveExactMergeBase(directory: string, baseRef: string, prHeadSha: string): string | null;
+/** Async twin of {@link resolveExactMergeBase} for the gate/dispatch bind path. */
+export declare function resolveExactMergeBaseAsync(directory: string, baseRef: string, prHeadSha: string): Promise<string | null>;
 export interface PrReviewDiffStats {
     changedLines: number;
     changedFiles: number;
@@ -41,6 +51,8 @@ export interface PrReviewDiffStats {
  * git version/config.
  */
 export declare function resolvePrReviewDiffStats(directory: string, baseSha: string, prHeadSha: string): PrReviewDiffStats | null;
+/** Async twin of {@link resolvePrReviewDiffStats} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolvePrReviewDiffStatsAsync(directory: string, baseSha: string, prHeadSha: string): Promise<PrReviewDiffStats | null>;
 /** Resolve the current branch's exact remote-tracking publication target. */
 export declare function resolveCurrentUpstreamRemoteRef(directory: string): string | null;
 export interface PrUpstreamPushTarget {
@@ -50,22 +62,40 @@ export interface PrUpstreamPushTarget {
 }
 /** Resolve a branch's upstream without guessing where a remote name ends. */
 export declare function resolveCurrentUpstreamPushTarget(directory: string): PrUpstreamPushTarget | null;
+/** Async twin of {@link resolveCurrentUpstreamPushTarget} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveCurrentUpstreamPushTargetAsync(directory: string): Promise<PrUpstreamPushTarget | null>;
 /** Query the actual remote ref; local tracking refs are not publication proof. */
 export declare function resolveExactRemoteBranchHead(directory: string, remoteName: string, remoteBranchRef: string): string | null;
+/** Async twin of {@link resolveExactRemoteBranchHead} for the gate bind/publish path. */
+export declare function resolveExactRemoteBranchHeadAsync(directory: string, remoteName: string, remoteBranchRef: string): Promise<string | null>;
 /** Bind Stage-A execution to Git refs, config, HEAD, and index metadata. */
 export declare function resolveGitControlStateDigest(directory: string): string | null;
+/** Async twin of {@link resolveGitControlStateDigest} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveGitControlStateDigestAsync(directory: string): Promise<string | null>;
 /** Require all independently reviewed content to be captured by the commit. */
 export declare function resolveIsWorkingTreeClean(directory: string): boolean | null;
+/**
+ * Async twin of {@link resolveIsWorkingTreeClean} for the gate/dispatch bind path.
+ * `git status` emits far more output than `rev-parse`, so it is the most exposed
+ * of the bind-path checks to a blocking synchronous spawn stalling the host.
+ */
+export declare function resolveIsWorkingTreeCleanAsync(directory: string): Promise<boolean | null>;
 /** Count commits on the ancestry path from the immutable intake head to HEAD. */
 export declare function resolveCommitCountSince(directory: string, baseHeadSha: string, currentHeadSha: string): number | null;
+/** Async twin of {@link resolveCommitCountSince} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveCommitCountSinceAsync(directory: string, baseHeadSha: string, currentHeadSha: string): Promise<number | null>;
 /** Prove the publication commit is a non-merge direct child of intake HEAD. */
 export declare function resolveIsExactSingleChildCommit(directory: string, baseHeadSha: string, currentHeadSha: string): boolean | null;
+/** Async twin of {@link resolveIsExactSingleChildCommit} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveIsExactSingleChildCommitAsync(directory: string, baseHeadSha: string, currentHeadSha: string): Promise<boolean | null>;
 /**
  * Return remote-tracking refs whose tip equals the exact checked-out commit.
  * Publication closeout uses this bounded local observation after a successful
  * push; an empty list is not proof that the approved revision was published.
  */
 export declare function resolveRemoteRefsContainingHead(directory: string, headSha: string): string[] | null;
+/** Async twin of {@link resolveRemoteRefsContainingHead} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveRemoteRefsContainingHeadAsync(directory: string, headSha: string): Promise<string[] | null>;
 /**
  * Bind a mutable working tree to its actual content, not merely porcelain status.
  * This lets PR-feedback approvals fail closed when a same-path edit occurs after a

package/dist/cli/{curator-rtpbkffc.js → curator-gay2gz5p.js}

@@ -14,7 +14,7 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-ate4rw9q.js";
+} from "./index-9vbpy8f9.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
@@ -52,7 +52,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{curator-llm-factory-5dcetzsz.js → curator-llm-factory-90803y01.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-ate4rw9q.js";
+} from "./index-9vbpy8f9.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
@@ -39,7 +39,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{guardrail-explain-27xbz1h2.js → guardrail-explain-axvx94rx.js}

@@ -1,8 +1,8 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-vpjvqkdq.js";
-import"./index-ate4rw9q.js";
+} from "./index-509jpmdd.js";
+import"./index-9vbpy8f9.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
@@ -40,7 +40,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{hive-promoter-7x33c575.js → hive-promoter-3j6xp8gm.js}

@@ -7,7 +7,7 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-ate4rw9q.js";
+} from "./index-9vbpy8f9.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
@@ -47,7 +47,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{index-vpjvqkdq.js → index-509jpmdd.js}

@@ -12,7 +12,7 @@ import {
   detectPosixWrites,
   detectWindowsWrites,
   resolveWriteTargets
-} from "./index-ate4rw9q.js";
+} from "./index-9vbpy8f9.js";
 import {
   checkFileAuthority,
   classifyFile,

package/dist/cli/{index-ate4rw9q.js → index-9vbpy8f9.js}

@@ -268,16 +268,24 @@ import {
 } from "./index-zgwm4ryv.js";
 import {
   resolveCommitCountSince,
+  resolveCommitCountSinceAsync,
   resolveCurrentGitHead,
+  resolveCurrentGitHeadAsync,
   resolveCurrentUpstreamPushTarget,
+  resolveCurrentUpstreamPushTargetAsync,
   resolveCurrentUpstreamRemoteRef,
   resolveExactRemoteBranchHead,
+  resolveExactRemoteBranchHeadAsync,
   resolveIsExactSingleChildCommit,
+  resolveIsExactSingleChildCommitAsync,
   resolveIsWorkingTreeClean,
+  resolveIsWorkingTreeCleanAsync,
   resolvePrReviewDiffStats,
+  resolvePrReviewDiffStatsAsync,
   resolvePrWorkflowRevisionDigest,
-  resolveRemoteRefsContainingHead
-} from "./index-40zn444p.js";
+  resolveRemoteRefsContainingHead,
+  resolveRemoteRefsContainingHeadAsync
+} from "./index-f2y46pda.js";
 import {
   atomicWriteFile
 } from "./index-7mkpsw6g.js";
@@ -535,7 +543,7 @@ async function activatePrWorkflow(directory, sessionID, mode, options = {}) {
   if (existing) {
     throw new Error(`BLOCKED: session "${normalizedSessionID}" already has an active ${existing.mode} workflow; complete it before starting ${mode}`);
   }
-  const initialHead = options.prHeadSha ? assertCurrentCheckoutHead(directory, options.prHeadSha) : undefined;
+  const initialHead = options.prHeadSha ? await assertCurrentCheckoutHead(directory, options.prHeadSha) : undefined;
   const timestamp = isoNow();
   const nextState = {
     schemaVersion: GATE_SCHEMA_VERSION,
@@ -618,11 +626,11 @@ async function abortPrWorkflow(directory, sessionID, options = {}) {
 async function bindPrWorkflowHead(directory, sessionID, prHeadSha) {
   const state = await requireAnyActiveState(directory, sessionID);
   const normalizedHead = normalizePrHeadSha(prHeadSha);
-  assertCurrentCheckoutHead(directory, normalizedHead);
+  await assertCurrentCheckoutHead(directory, normalizedHead);
   if (!state.prHeadSha)
-    assertPrReviewCleanCheckout(directory, state.mode);
+    await assertPrReviewCleanCheckout(directory, state.mode);
   if (!state.prHeadSha && state.mode === "PR_FEEDBACK") {
-    assertPrFeedbackTrackingCheckout(directory, normalizedHead);
+    await assertPrFeedbackTrackingCheckout(directory, normalizedHead);
   }
   if (state.prHeadSha && state.prHeadSha !== normalizedHead) {
     throw new Error(`BLOCKED: active ${state.mode} workflow is bound to PR head "${state.prHeadSha}"; received "${normalizedHead}"`);
@@ -637,9 +645,9 @@ async function bindPrWorkflowHead(directory, sessionID, prHeadSha) {
   await persistState(directory, nextState);
   return nextState;
 }
-function assertCurrentCheckoutHead(directory, expectedHead) {
+async function assertCurrentCheckoutHead(directory, expectedHead) {
   const normalizedExpected = normalizePrHeadSha(expectedHead);
-  const currentHead = _test_exports.resolveCurrentGitHead(directory)?.trim();
+  const currentHead = (await _test_exports.resolveCurrentGitHeadAsync(directory))?.trim();
   if (!currentHead) {
     throw new Error(`BLOCKED: cannot resolve the current Git HEAD in "${directory}" to verify against PR head "${normalizedExpected}". ` + `This means Git could not resolve HEAD (the working directory may not be a Git repository, ` + `HEAD may be unborn, the commit object may be missing in a shallow clone, the Git binary may not be on PATH, ` + `or the bounded Git invocation may have timed out). ` + `Verify with: git -C "${directory}" rev-parse --verify HEAD^{commit}`);
   }
@@ -648,17 +656,17 @@ function assertCurrentCheckoutHead(directory, expectedHead) {
   }
   return normalizedExpected;
 }
-function assertPrReviewCleanCheckout(directory, mode = "PR_REVIEW") {
-  if (_test_exports.resolveIsWorkingTreeClean(directory) !== true) {
+async function assertPrReviewCleanCheckout(directory, mode = "PR_REVIEW") {
+  if (await _test_exports.resolveIsWorkingTreeCleanAsync(directory) !== true) {
     throw new Error(`BLOCKED: ${mode} requires a clean index and working tree at the exact PR head`);
   }
 }
-function assertPrFeedbackTrackingCheckout(directory, prHeadSha) {
-  const upstream = _test_exports.resolveCurrentUpstreamPushTarget(directory);
+async function assertPrFeedbackTrackingCheckout(directory, prHeadSha) {
+  const upstream = await _test_exports.resolveCurrentUpstreamPushTargetAsync(directory);
   if (!upstream) {
     throw new Error("BLOCKED: PR_FEEDBACK requires a current local branch bound to an exact remote name, remote branch ref, and remote-tracking ref before the first head bind; detached or non-tracking checkouts are not allowed");
   }
-  const matchingRemoteRefs = _test_exports.resolveRemoteRefsContainingHead(directory, prHeadSha);
+  const matchingRemoteRefs = await _test_exports.resolveRemoteRefsContainingHeadAsync(directory, prHeadSha);
   if (!matchingRemoteRefs?.includes(upstream.remoteTrackingRef)) {
     throw new Error(`BLOCKED: PR_FEEDBACK upstream "${upstream.remoteTrackingRef}" must point to the exact intake PR head "${prHeadSha}" before the first head bind`);
   }
@@ -673,15 +681,23 @@ var _test_exports = {
   },
   beforeTerminalClear: undefined,
   resolveCurrentGitHead,
+  resolveCurrentGitHeadAsync,
   resolveCurrentUpstreamPushTarget,
+  resolveCurrentUpstreamPushTargetAsync,
   resolveCurrentUpstreamRemoteRef,
   resolveExactRemoteBranchHead,
+  resolveExactRemoteBranchHeadAsync,
   resolveCommitCountSince,
+  resolveCommitCountSinceAsync,
   resolveIsWorkingTreeClean,
+  resolveIsWorkingTreeCleanAsync,
   resolveIsExactSingleChildCommit,
+  resolveIsExactSingleChildCommitAsync,
   resolvePrReviewDiffStats,
+  resolvePrReviewDiffStatsAsync,
   resolvePrWorkflowRevisionDigest,
   resolveRemoteRefsContainingHead,
+  resolveRemoteRefsContainingHeadAsync,
   parseCriticVerdict,
   isProcessAlive,
   rename: fsp.rename,
@@ -15573,11 +15589,11 @@ var _internals19 = {
     }
   },
   applyCuratorKnowledgeUpdates: async (directory, recommendations, knowledgeConfig, generation) => {
-    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-rtpbkffc.js");
+    const { applyCuratorKnowledgeUpdates: applyCuratorKnowledgeUpdates2 } = await import("./curator-gay2gz5p.js");
     return applyCuratorKnowledgeUpdates2(directory, recommendations, knowledgeConfig, generation);
   },
   checkHivePromotions: async (entries, knowledgeConfig, directory) => {
-    const { checkHivePromotions } = await import("./hive-promoter-7x33c575.js");
+    const { checkHivePromotions } = await import("./hive-promoter-3j6xp8gm.js");
     return checkHivePromotions(entries, knowledgeConfig, directory);
   },
   applyProposalTriage: async (directory, triage) => {
@@ -23482,8 +23498,8 @@ var _internals32 = {
   loadCuratorDeps: async () => {
     const [{ CuratorConfigSchema }, curator, { createCuratorLLMDelegate: createCuratorLLMDelegate2 }] = await Promise.all([
       import("./schema-2x7wsb0n.js"),
-      import("./curator-rtpbkffc.js"),
-      import("./curator-llm-factory-5dcetzsz.js")
+      import("./curator-gay2gz5p.js"),
+      import("./curator-llm-factory-90803y01.js")
     ]);
     return { CuratorConfigSchema, curator, createCuratorLLMDelegate: createCuratorLLMDelegate2 };
   }
@@ -23982,7 +23998,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "opencode-swarm",
-  version: "7.129.2",
+  version: "7.129.3",
   description: "Architect-centric agentic swarm plugin for OpenCode - hub-and-spoke orchestration with SME consultation, code generation, and QA review",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -44374,7 +44390,7 @@ function buildDetailedHelp(commandName, entry) {
 async function handleHelpCommand(ctx) {
   const targetCommand = ctx.args.join(" ");
   if (!targetCommand) {
-    const { buildHelpText } = await import("./index-s7tsx4v9.js");
+    const { buildHelpText } = await import("./index-vjmmzhv0.js");
     return buildHelpText();
   }
   const tokens = targetCommand.split(/\s+/);
@@ -44383,7 +44399,7 @@ async function handleHelpCommand(ctx) {
     return _internals9.buildDetailedHelp(resolved.key, resolved.entry);
   }
   const similar = _internals9.findSimilarCommands(targetCommand);
-  const { buildHelpText: fullHelp } = await import("./index-s7tsx4v9.js");
+  const { buildHelpText: fullHelp } = await import("./index-vjmmzhv0.js");
   if (similar.length > 0) {
     return `Command '/swarm ${targetCommand}' not found.
 
@@ -44522,7 +44538,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-27xbz1h2.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-axvx94rx.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",
@@ -44532,7 +44548,7 @@ var COMMAND_REGISTRY = {
   },
   "guardrail-explain": {
     handler: async (ctx) => {
-      const { handleGuardrailExplain } = await import("./guardrail-explain-27xbz1h2.js");
+      const { handleGuardrailExplain } = await import("./guardrail-explain-axvx94rx.js");
       return handleGuardrailExplain(ctx.directory, ctx.args);
     },
     description: "Dry-run: show what the guardrails would do to a command or write target (executes nothing)",

package/dist/cli/{index-40zn444p.js → index-f2y46pda.js}

@@ -86,12 +86,30 @@ function readGitTextAtRevision(directory, revision, relativePath) {
 function resolveCurrentGitHead(directory) {
   return runGit(directory, ["rev-parse", "--verify", "HEAD^{commit}"]);
 }
+async function resolveCurrentGitHeadAsync(directory) {
+  return await runGitAsync(directory, [
+    "rev-parse",
+    "--verify",
+    "HEAD^{commit}"
+  ]);
+}
 function resolveExactMergeBase(directory, baseRef, prHeadSha) {
   if (!isSafeGitRevisionToken(baseRef) || !isSafeGitRevisionToken(prHeadSha))
     return null;
   const mergeBase = runGit(directory, ["merge-base", "--", baseRef, prHeadSha]);
   return mergeBase && /^[0-9a-f]{6,64}$/i.test(mergeBase) ? mergeBase : null;
 }
+async function resolveExactMergeBaseAsync(directory, baseRef, prHeadSha) {
+  if (!isSafeGitRevisionToken(baseRef) || !isSafeGitRevisionToken(prHeadSha))
+    return null;
+  const mergeBase = await runGitAsync(directory, [
+    "merge-base",
+    "--",
+    baseRef,
+    prHeadSha
+  ]);
+  return mergeBase && /^[0-9a-f]{6,64}$/i.test(mergeBase) ? mergeBase : null;
+}
 var GITLINK_MODE_PATTERN = /^:\d{6} 160000 |^:160000 \d{6} /;
 function resolvePrReviewDiffStats(directory, baseSha, prHeadSha) {
   if (!isSafeGitRevisionToken(baseSha) || !isSafeGitRevisionToken(prHeadSha))
@@ -129,6 +147,42 @@ function resolvePrReviewDiffStats(directory, baseSha, prHeadSha) {
 `).some((line) => GITLINK_MODE_PATTERN.test(line.trim()));
   return { changedLines, changedFiles, hasSubmoduleChange };
 }
+async function resolvePrReviewDiffStatsAsync(directory, baseSha, prHeadSha) {
+  if (!isSafeGitRevisionToken(baseSha) || !isSafeGitRevisionToken(prHeadSha))
+    return null;
+  const range = `${baseSha}...${prHeadSha}`;
+  const output = await runGitAsync(directory, [
+    "diff",
+    "--no-renames",
+    "--numstat",
+    range
+  ]);
+  if (output === null)
+    return null;
+  let changedLines = 0;
+  let changedFiles = 0;
+  for (const line of output.split(`
+`)) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0)
+      continue;
+    const fields = trimmed.split("\t");
+    if (fields.length < 3)
+      return null;
+    const added = fields[0] === "-" ? 0 : Number.parseInt(fields[0], 10);
+    const deleted = fields[1] === "-" ? 0 : Number.parseInt(fields[1], 10);
+    if (Number.isNaN(added) || Number.isNaN(deleted))
+      return null;
+    changedFiles += 1;
+    changedLines += added + deleted;
+  }
+  const rawOutput = await runGitAsync(directory, ["diff", "--raw", range]);
+  if (rawOutput === null)
+    return null;
+  const hasSubmoduleChange = rawOutput.split(`
+`).some((line) => GITLINK_MODE_PATTERN.test(line.trim()));
+  return { changedLines, changedFiles, hasSubmoduleChange };
+}
 function isSafeGitRevisionToken(value) {
   return /^(?!-)[A-Za-z0-9][A-Za-z0-9._/-]{0,255}$/.test(value) && !value.includes("..") && !value.includes("//") && !value.includes("@{");
 }
@@ -160,6 +214,27 @@ function resolveCurrentUpstreamPushTarget(directory) {
   }
   return { remoteName, remoteBranchRef, remoteTrackingRef };
 }
+async function resolveCurrentUpstreamPushTargetAsync(directory) {
+  const localBranchRef = await runGitAsync(directory, [
+    "symbolic-ref",
+    "--quiet",
+    "HEAD"
+  ]);
+  if (!localBranchRef?.startsWith("refs/heads/"))
+    return null;
+  const encoded = await runGitAsync(directory, [
+    "for-each-ref",
+    "--format=%(upstream:remotename)%00%(upstream:remoteref)%00%(upstream)",
+    localBranchRef
+  ]);
+  if (!encoded)
+    return null;
+  const [remoteName, remoteBranchRef, remoteTrackingRef, ...extras] = encoded.split("\x00");
+  if (extras.length > 0 || !remoteName || remoteName.startsWith("-") || /[\s;&|<>`]/.test(remoteName) || !remoteBranchRef?.startsWith("refs/heads/") || remoteBranchRef === "refs/heads/" || /[\s;&|<>`]/.test(remoteBranchRef) || !remoteTrackingRef?.startsWith("refs/remotes/") || remoteTrackingRef.endsWith("/HEAD")) {
+    return null;
+  }
+  return { remoteName, remoteBranchRef, remoteTrackingRef };
+}
 function resolveExactRemoteBranchHead(directory, remoteName, remoteBranchRef) {
   if (!remoteName || remoteName.startsWith("-") || /[\s;&|<>`]/.test(remoteName) || !remoteBranchRef.startsWith("refs/heads/") || remoteBranchRef === "refs/heads/" || /[\s;&|<>`]/.test(remoteBranchRef)) {
     return null;
@@ -176,6 +251,22 @@ function resolveExactRemoteBranchHead(directory, remoteName, remoteBranchRef) {
   }
   return objectName;
 }
+async function resolveExactRemoteBranchHeadAsync(directory, remoteName, remoteBranchRef) {
+  if (!remoteName || remoteName.startsWith("-") || /[\s;&|<>`]/.test(remoteName) || !remoteBranchRef.startsWith("refs/heads/") || remoteBranchRef === "refs/heads/" || /[\s;&|<>`]/.test(remoteBranchRef)) {
+    return null;
+  }
+  const output = await runGitAsync(directory, ["ls-remote", "--exit-code", "--heads", remoteName, remoteBranchRef], 20000);
+  if (!output)
+    return null;
+  const rows = output.split(/\r?\n/).filter(Boolean);
+  if (rows.length !== 1)
+    return null;
+  const [objectName, refName, ...extras] = rows[0].split(/\s+/);
+  if (extras.length > 0 || refName !== remoteBranchRef || !objectName || !(/^[0-9a-f]{40}$/i.test(objectName) || /^[0-9a-f]{64}$/i.test(objectName))) {
+    return null;
+  }
+  return objectName;
+}
 function resolveGitControlStateDigest(directory) {
   const head = runGit(directory, ["rev-parse", "--verify", "HEAD^{commit}"]);
   const symbolicHead = runGit(directory, ["symbolic-ref", "--quiet", "HEAD"]);
@@ -200,6 +291,38 @@ function resolveGitControlStateDigest(directory) {
   }
   return digest(`head\x00${head}\x00symbolic\x00${symbolicHead}\x00upstream\x00${upstream.remoteName}\x00${upstream.remoteBranchRef}\x00${upstream.remoteTrackingRef}\x00refs\x00${refs}\x00config\x00${config}\x00index\x00${index}`);
 }
+async function resolveGitControlStateDigestAsync(directory) {
+  const head = await runGitAsync(directory, [
+    "rev-parse",
+    "--verify",
+    "HEAD^{commit}"
+  ]);
+  const symbolicHead = await runGitAsync(directory, [
+    "symbolic-ref",
+    "--quiet",
+    "HEAD"
+  ]);
+  const upstream = await resolveCurrentUpstreamPushTargetAsync(directory);
+  const refs = await runGitAsync(directory, [
+    "for-each-ref",
+    "--format=%(refname)%00%(objectname)",
+    "refs/heads",
+    "refs/remotes",
+    "refs/tags"
+  ]);
+  const config = await runGitAsync(directory, [
+    "config",
+    "--null",
+    "--show-origin",
+    "--show-scope",
+    "--list"
+  ]);
+  const index = await runGitAsync(directory, ["ls-files", "--stage", "-z"]);
+  if (head === null || symbolicHead === null || !upstream || refs === null || config === null || index === null) {
+    return null;
+  }
+  return digest(`head\x00${head}\x00symbolic\x00${symbolicHead}\x00upstream\x00${upstream.remoteName}\x00${upstream.remoteBranchRef}\x00${upstream.remoteTrackingRef}\x00refs\x00${refs}\x00config\x00${config}\x00index\x00${index}`);
+}
 function resolveIsWorkingTreeClean(directory) {
   const status = runGit(directory, [
     "status",
@@ -208,6 +331,14 @@ function resolveIsWorkingTreeClean(directory) {
   ]);
   return status === null ? null : status.length === 0;
 }
+async function resolveIsWorkingTreeCleanAsync(directory) {
+  const status = await runGitAsync(directory, [
+    "status",
+    "--porcelain=v1",
+    "--untracked-files=all"
+  ]);
+  return status === null ? null : status.length === 0;
+}
 function resolveCommitCountSince(directory, baseHeadSha, currentHeadSha) {
   const output = runGit(directory, [
     "rev-list",
@@ -220,6 +351,18 @@ function resolveCommitCountSince(directory, baseHeadSha, currentHeadSha) {
   const count = Number(output);
   return Number.isSafeInteger(count) ? count : null;
 }
+async function resolveCommitCountSinceAsync(directory, baseHeadSha, currentHeadSha) {
+  const output = await runGitAsync(directory, [
+    "rev-list",
+    "--count",
+    "--ancestry-path",
+    `${baseHeadSha}..${currentHeadSha}`
+  ]);
+  if (!output || !/^\d+$/.test(output))
+    return null;
+  const count = Number(output);
+  return Number.isSafeInteger(count) ? count : null;
+}
 function resolveIsExactSingleChildCommit(directory, baseHeadSha, currentHeadSha) {
   const base = runGit(directory, [
     "rev-parse",
@@ -245,6 +388,31 @@ function resolveIsExactSingleChildCommit(directory, baseHeadSha, currentHeadSha)
   const fields = commitAndParents.trim().split(/\s+/);
   return fields.length === 2 && fields[0]?.toLowerCase() === current.toLowerCase() && fields[1]?.toLowerCase() === base.toLowerCase();
 }
+async function resolveIsExactSingleChildCommitAsync(directory, baseHeadSha, currentHeadSha) {
+  const base = await runGitAsync(directory, [
+    "rev-parse",
+    "--verify",
+    `${baseHeadSha}^{commit}`
+  ]);
+  const current = await runGitAsync(directory, [
+    "rev-parse",
+    "--verify",
+    `${currentHeadSha}^{commit}`
+  ]);
+  if (!base || !current)
+    return null;
+  const commitAndParents = await runGitAsync(directory, [
+    "rev-list",
+    "--parents",
+    "-n",
+    "1",
+    current
+  ]);
+  if (commitAndParents === null)
+    return null;
+  const fields = commitAndParents.trim().split(/\s+/);
+  return fields.length === 2 && fields[0]?.toLowerCase() === current.toLowerCase() && fields[1]?.toLowerCase() === base.toLowerCase();
+}
 function resolveRemoteRefsContainingHead(directory, headSha) {
   const output = runGit(directory, [
     "for-each-ref",
@@ -255,6 +423,16 @@ function resolveRemoteRefsContainingHead(directory, headSha) {
     return null;
   return output.split(/\r?\n/).map((line) => line.trim().split("\t")).filter(([ref, objectName]) => ref?.startsWith("refs/remotes/") && !ref.endsWith("/HEAD") && objectName?.toLowerCase() === headSha.toLowerCase()).map(([ref]) => ref);
 }
+async function resolveRemoteRefsContainingHeadAsync(directory, headSha) {
+  const output = await runGitAsync(directory, [
+    "for-each-ref",
+    "--format=%(refname)%09%(objectname)",
+    "refs/remotes"
+  ]);
+  if (output === null)
+    return null;
+  return output.split(/\r?\n/).map((line) => line.trim().split("\t")).filter(([ref, objectName]) => ref?.startsWith("refs/remotes/") && !ref.endsWith("/HEAD") && objectName?.toLowerCase() === headSha.toLowerCase()).map(([ref]) => ref);
+}
 function resolvePrWorkflowRevisionDigest(directory, baseHeadSha) {
   const projectRoot = path.resolve(directory);
   const baseHead = runGit(projectRoot, [
@@ -598,4 +776,4 @@ var _internals = {
   parsePorcelainV2Snapshot
 };
 
-export { readGitTextAtRevision, resolveCurrentGitHead, resolveExactMergeBase, resolvePrReviewDiffStats, resolveCurrentUpstreamRemoteRef, resolveCurrentUpstreamPushTarget, resolveExactRemoteBranchHead, resolveGitControlStateDigest, resolveIsWorkingTreeClean, resolveCommitCountSince, resolveIsExactSingleChildCommit, resolveRemoteRefsContainingHead, resolvePrWorkflowRevisionDigest, resolvePrWorkflowRevisionDigestAsync, parsePorcelainPaths, captureWorkspaceSnapshot, changedFilesSinceSnapshot, workspaceSnapshotMatches, compareWorkspaceSnapshot, compareWorkspaceSnapshots, digest, _internals };
+export { readGitTextAtRevision, resolveCurrentGitHead, resolveCurrentGitHeadAsync, resolveExactMergeBase, resolveExactMergeBaseAsync, resolvePrReviewDiffStats, resolvePrReviewDiffStatsAsync, resolveCurrentUpstreamRemoteRef, resolveCurrentUpstreamPushTarget, resolveCurrentUpstreamPushTargetAsync, resolveExactRemoteBranchHead, resolveExactRemoteBranchHeadAsync, resolveGitControlStateDigest, resolveGitControlStateDigestAsync, resolveIsWorkingTreeClean, resolveIsWorkingTreeCleanAsync, resolveCommitCountSince, resolveCommitCountSinceAsync, resolveIsExactSingleChildCommit, resolveIsExactSingleChildCommitAsync, resolveRemoteRefsContainingHead, resolveRemoteRefsContainingHeadAsync, resolvePrWorkflowRevisionDigest, resolvePrWorkflowRevisionDigestAsync, parsePorcelainPaths, captureWorkspaceSnapshot, changedFilesSinceSnapshot, workspaceSnapshotMatches, compareWorkspaceSnapshot, compareWorkspaceSnapshots, digest, _internals };

package/dist/cli/{index-s7tsx4v9.js → index-vjmmzhv0.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-vpjvqkdq.js";
+} from "./index-509jpmdd.js";
 import {
   handleGuardrailLog
 } from "./index-8etcyr9r.js";
@@ -83,7 +83,7 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-ate4rw9q.js";
+} from "./index-9vbpy8f9.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
@@ -127,7 +127,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/index.js

@@ -7,7 +7,7 @@ import {
   getPluginLockFilePaths,
   package_default,
   resolveCommand
-} from "./index-ate4rw9q.js";
+} from "./index-9vbpy8f9.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
@@ -48,7 +48,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";