opencode-swarm 7.129.2 → 7.129.4

package/dist/background/workspace-snapshot.d.ts

@@ -19,8 +19,18 @@ interface CaptureWorkspaceSnapshotOptions {
 export declare function readGitTextAtRevision(directory: string, revision: string, relativePath: string): string | null;
 /** Resolve the exact checked-out commit through the bounded Git snapshot path. */
 export declare function resolveCurrentGitHead(directory: string): string | null;
+/**
+ * Async twin of {@link resolveCurrentGitHead}. PR-workflow gate/dispatch binding
+ * runs on the host tool/hook path, so HEAD verification must resolve Git off the
+ * blocking `spawnSync` path — a synchronous spawn on the long-running host (most
+ * acutely under Bun on Windows) can hang to its bound instead of returning, which
+ * a fail-closed gate would surface as a spurious "cannot resolve HEAD" block.
+ */
+export declare function resolveCurrentGitHeadAsync(directory: string): Promise<string | null>;
 /** Resolve one exact PR merge base without shell interpolation or unbounded I/O. */
 export declare function resolveExactMergeBase(directory: string, baseRef: string, prHeadSha: string): string | null;
+/** Async twin of {@link resolveExactMergeBase} for the gate/dispatch bind path. */
+export declare function resolveExactMergeBaseAsync(directory: string, baseRef: string, prHeadSha: string): Promise<string | null>;
 export interface PrReviewDiffStats {
     changedLines: number;
     changedFiles: number;
@@ -41,6 +51,8 @@ export interface PrReviewDiffStats {
  * git version/config.
  */
 export declare function resolvePrReviewDiffStats(directory: string, baseSha: string, prHeadSha: string): PrReviewDiffStats | null;
+/** Async twin of {@link resolvePrReviewDiffStats} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolvePrReviewDiffStatsAsync(directory: string, baseSha: string, prHeadSha: string): Promise<PrReviewDiffStats | null>;
 /** Resolve the current branch's exact remote-tracking publication target. */
 export declare function resolveCurrentUpstreamRemoteRef(directory: string): string | null;
 export interface PrUpstreamPushTarget {
@@ -50,22 +62,40 @@ export interface PrUpstreamPushTarget {
 }
 /** Resolve a branch's upstream without guessing where a remote name ends. */
 export declare function resolveCurrentUpstreamPushTarget(directory: string): PrUpstreamPushTarget | null;
+/** Async twin of {@link resolveCurrentUpstreamPushTarget} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveCurrentUpstreamPushTargetAsync(directory: string): Promise<PrUpstreamPushTarget | null>;
 /** Query the actual remote ref; local tracking refs are not publication proof. */
 export declare function resolveExactRemoteBranchHead(directory: string, remoteName: string, remoteBranchRef: string): string | null;
+/** Async twin of {@link resolveExactRemoteBranchHead} for the gate bind/publish path. */
+export declare function resolveExactRemoteBranchHeadAsync(directory: string, remoteName: string, remoteBranchRef: string): Promise<string | null>;
 /** Bind Stage-A execution to Git refs, config, HEAD, and index metadata. */
 export declare function resolveGitControlStateDigest(directory: string): string | null;
+/** Async twin of {@link resolveGitControlStateDigest} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveGitControlStateDigestAsync(directory: string): Promise<string | null>;
 /** Require all independently reviewed content to be captured by the commit. */
 export declare function resolveIsWorkingTreeClean(directory: string): boolean | null;
+/**
+ * Async twin of {@link resolveIsWorkingTreeClean} for the gate/dispatch bind path.
+ * `git status` emits far more output than `rev-parse`, so it is the most exposed
+ * of the bind-path checks to a blocking synchronous spawn stalling the host.
+ */
+export declare function resolveIsWorkingTreeCleanAsync(directory: string): Promise<boolean | null>;
 /** Count commits on the ancestry path from the immutable intake head to HEAD. */
 export declare function resolveCommitCountSince(directory: string, baseHeadSha: string, currentHeadSha: string): number | null;
+/** Async twin of {@link resolveCommitCountSince} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveCommitCountSinceAsync(directory: string, baseHeadSha: string, currentHeadSha: string): Promise<number | null>;
 /** Prove the publication commit is a non-merge direct child of intake HEAD. */
 export declare function resolveIsExactSingleChildCommit(directory: string, baseHeadSha: string, currentHeadSha: string): boolean | null;
+/** Async twin of {@link resolveIsExactSingleChildCommit} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveIsExactSingleChildCommitAsync(directory: string, baseHeadSha: string, currentHeadSha: string): Promise<boolean | null>;
 /**
  * Return remote-tracking refs whose tip equals the exact checked-out commit.
  * Publication closeout uses this bounded local observation after a successful
  * push; an empty list is not proof that the approved revision was published.
  */
 export declare function resolveRemoteRefsContainingHead(directory: string, headSha: string): string[] | null;
+/** Async twin of {@link resolveRemoteRefsContainingHead} used off the blocking spawn on the gate/dispatch bind path. */
+export declare function resolveRemoteRefsContainingHeadAsync(directory: string, headSha: string): Promise<string[] | null>;
 /**
  * Bind a mutable working tree to its actual content, not merely porcelain status.
  * This lets PR-feedback approvals fail closed when a same-path edit occurs after a

package/dist/cli/{curation-policy-vn1ybh31.js → curation-policy-s08pg90f.js}

@@ -4,9 +4,9 @@ import {
   authorizeCuration,
   buildConfigFingerprintInput,
   readCohortConfigFingerprint
-} from "./index-pgyp3tta.js";
+} from "./index-nhexgq4a.js";
 import"./index-rtry5xyf.js";
-import"./index-kj86tyrs.js";
+import"./index-bz814zsm.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{curator-rtpbkffc.js → curator-6ggzktne.js}

@@ -14,28 +14,28 @@ import {
   runCuratorInit,
   runCuratorPhase,
   writeCuratorSummary
-} from "./index-ate4rw9q.js";
+} from "./index-jke1z4f2.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-6n2jpz7x.js";
-import"./index-wy5jy3m9.js";
-import"./index-m8vrw3pt.js";
-import"./index-5fnc76da.js";
+import"./index-9f71ye47.js";
+import"./index-8fy8q1px.js";
+import"./index-mgz9nm4a.js";
+import"./index-hbbj7ktj.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-g4mnf3p5.js";
-import"./index-waqvy9a5.js";
-import"./index-pgyp3tta.js";
+import"./index-x7wt1g4w.js";
+import"./index-nhexgq4a.js";
 import"./index-rtry5xyf.js";
-import"./index-w2kp2zvf.js";
-import"./index-kj86tyrs.js";
+import"./index-n08cksd6.js";
+import"./index-bz814zsm.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-6w02qz7t.js";
+import"./index-yxz0c97p.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import"./index-7ttstfv6.js";
@@ -52,7 +52,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{curator-llm-factory-5dcetzsz.js → curator-llm-factory-w6ep20tm.js}

@@ -1,28 +1,28 @@
 // @bun
 import {
   createCuratorLLMDelegate
-} from "./index-ate4rw9q.js";
+} from "./index-jke1z4f2.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-6n2jpz7x.js";
-import"./index-wy5jy3m9.js";
-import"./index-m8vrw3pt.js";
-import"./index-5fnc76da.js";
+import"./index-9f71ye47.js";
+import"./index-8fy8q1px.js";
+import"./index-mgz9nm4a.js";
+import"./index-hbbj7ktj.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-g4mnf3p5.js";
-import"./index-waqvy9a5.js";
-import"./index-pgyp3tta.js";
+import"./index-x7wt1g4w.js";
+import"./index-nhexgq4a.js";
 import"./index-rtry5xyf.js";
-import"./index-w2kp2zvf.js";
-import"./index-kj86tyrs.js";
+import"./index-n08cksd6.js";
+import"./index-bz814zsm.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-6w02qz7t.js";
+import"./index-yxz0c97p.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import"./index-7ttstfv6.js";
@@ -39,7 +39,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{dispatch-f4hj1cj7.js → dispatch-3mhgqj2x.js}

@@ -11,7 +11,7 @@ import {
   defaultTestFilesFor,
   detectProjectLanguages,
   tokenizeCommand
-} from "./index-6n2jpz7x.js";
+} from "./index-9f71ye47.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{guardrail-explain-27xbz1h2.js → guardrail-explain-0gr9wkj0.js}

@@ -1,29 +1,29 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-vpjvqkdq.js";
-import"./index-ate4rw9q.js";
+} from "./index-hn1dxcr3.js";
+import"./index-jke1z4f2.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-6n2jpz7x.js";
-import"./index-wy5jy3m9.js";
-import"./index-m8vrw3pt.js";
-import"./index-5fnc76da.js";
+import"./index-9f71ye47.js";
+import"./index-8fy8q1px.js";
+import"./index-mgz9nm4a.js";
+import"./index-hbbj7ktj.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-g4mnf3p5.js";
-import"./index-waqvy9a5.js";
-import"./index-pgyp3tta.js";
+import"./index-x7wt1g4w.js";
+import"./index-nhexgq4a.js";
 import"./index-rtry5xyf.js";
-import"./index-w2kp2zvf.js";
-import"./index-kj86tyrs.js";
+import"./index-n08cksd6.js";
+import"./index-bz814zsm.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-6w02qz7t.js";
+import"./index-yxz0c97p.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import"./index-7ttstfv6.js";
@@ -40,7 +40,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{hive-promoter-7x33c575.js → hive-promoter-4x3470c9.js}

@@ -7,30 +7,30 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-ate4rw9q.js";
+} from "./index-jke1z4f2.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-6n2jpz7x.js";
-import"./index-wy5jy3m9.js";
-import"./index-m8vrw3pt.js";
-import"./index-5fnc76da.js";
+import"./index-9f71ye47.js";
+import"./index-8fy8q1px.js";
+import"./index-mgz9nm4a.js";
+import"./index-hbbj7ktj.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-g4mnf3p5.js";
-import"./index-waqvy9a5.js";
-import"./index-pgyp3tta.js";
+import"./index-x7wt1g4w.js";
+import"./index-nhexgq4a.js";
 import"./index-rtry5xyf.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-w2kp2zvf.js";
-import"./index-kj86tyrs.js";
+} from "./index-n08cksd6.js";
+import"./index-bz814zsm.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-6w02qz7t.js";
+import"./index-yxz0c97p.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import"./index-7ttstfv6.js";
@@ -47,7 +47,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{index-s7tsx4v9.js → index-803bqrzq.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-vpjvqkdq.js";
+} from "./index-hn1dxcr3.js";
 import {
   handleGuardrailLog
 } from "./index-8etcyr9r.js";
@@ -83,28 +83,28 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-ate4rw9q.js";
+} from "./index-jke1z4f2.js";
 import"./index-v4n224r1.js";
 import"./index-cpssctv1.js";
 import"./index-kzvwb2se.js";
 import"./index-4905hd2m.js";
 import"./index-134d35c1.js";
-import"./index-6n2jpz7x.js";
-import"./index-wy5jy3m9.js";
-import"./index-m8vrw3pt.js";
-import"./index-5fnc76da.js";
+import"./index-9f71ye47.js";
+import"./index-8fy8q1px.js";
+import"./index-mgz9nm4a.js";
+import"./index-hbbj7ktj.js";
 import"./index-vxv732ex.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-g4mnf3p5.js";
-import"./index-waqvy9a5.js";
-import"./index-pgyp3tta.js";
+import"./index-x7wt1g4w.js";
+import"./index-nhexgq4a.js";
 import"./index-rtry5xyf.js";
-import"./index-w2kp2zvf.js";
-import"./index-kj86tyrs.js";
+import"./index-n08cksd6.js";
+import"./index-bz814zsm.js";
 import"./index-ae75rja9.js";
 import"./index-q27bajqb.js";
-import"./index-6w02qz7t.js";
+import"./index-yxz0c97p.js";
 import"./index-k5jrywpr.js";
 import"./index-n832052r.js";
 import {
@@ -127,7 +127,7 @@ import"./index-s80bsjkj.js";
 import"./index-z6xqpmqg.js";
 import"./index-zjygnfay.js";
 import"./index-zgwm4ryv.js";
-import"./index-40zn444p.js";
+import"./index-f2y46pda.js";
 import"./index-3x761jqv.js";
 import"./index-7mkpsw6g.js";
 import"./index-fsrp8wp3.js";

package/dist/cli/{index-wy5jy3m9.js → index-8fy8q1px.js}

@@ -2,18 +2,18 @@
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-waqvy9a5.js";
+} from "./index-x7wt1g4w.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-w2kp2zvf.js";
+} from "./index-n08cksd6.js";
 import {
   effectiveRetrievalOutcomes,
   readKnowledgeCounterRollups
-} from "./index-kj86tyrs.js";
+} from "./index-bz814zsm.js";
 import {
   init_knowledge_types,
   isActiveStatus

package/dist/cli/{index-6n2jpz7x.js → index-9f71ye47.js}

@@ -13676,9 +13676,9 @@ function isCommandAvailable(command) {
     return toolchainCache.get(command);
   }
   const isWindows = process.platform === "win32";
-  const cmd = isWindows ? `${command}.exe` : command;
   try {
-    const result = _internals.spawnSyncImpl(isWindows ? ["where", cmd] : ["which", cmd], {
+    const searchName = isWindows ? command : command;
+    const result = _internals.spawnSyncImpl(isWindows ? ["where", searchName] : ["which", searchName], {
       cwd: process.cwd(),
       stdin: "ignore",
       stdout: "ignore",

package/dist/cli/{index-kj86tyrs.js → index-bz814zsm.js}

@@ -608,7 +608,7 @@ async function applyKnowledgeVerdictFeedback(directory, options) {
       deltas.push({ id, delta });
     }
     if (deltas.length > 0) {
-      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-yeybvcqw.js");
+      const { bumpKnowledgeConfidenceBatch } = await import("./knowledge-store-7sahm702.js");
       await bumpKnowledgeConfidenceBatch(directory, deltas, options?.floorOptions);
     }
     return {

package/dist/cli/{index-40zn444p.js → index-f2y46pda.js}

@@ -86,12 +86,30 @@ function readGitTextAtRevision(directory, revision, relativePath) {
 function resolveCurrentGitHead(directory) {
   return runGit(directory, ["rev-parse", "--verify", "HEAD^{commit}"]);
 }
+async function resolveCurrentGitHeadAsync(directory) {
+  return await runGitAsync(directory, [
+    "rev-parse",
+    "--verify",
+    "HEAD^{commit}"
+  ]);
+}
 function resolveExactMergeBase(directory, baseRef, prHeadSha) {
   if (!isSafeGitRevisionToken(baseRef) || !isSafeGitRevisionToken(prHeadSha))
     return null;
   const mergeBase = runGit(directory, ["merge-base", "--", baseRef, prHeadSha]);
   return mergeBase && /^[0-9a-f]{6,64}$/i.test(mergeBase) ? mergeBase : null;
 }
+async function resolveExactMergeBaseAsync(directory, baseRef, prHeadSha) {
+  if (!isSafeGitRevisionToken(baseRef) || !isSafeGitRevisionToken(prHeadSha))
+    return null;
+  const mergeBase = await runGitAsync(directory, [
+    "merge-base",
+    "--",
+    baseRef,
+    prHeadSha
+  ]);
+  return mergeBase && /^[0-9a-f]{6,64}$/i.test(mergeBase) ? mergeBase : null;
+}
 var GITLINK_MODE_PATTERN = /^:\d{6} 160000 |^:160000 \d{6} /;
 function resolvePrReviewDiffStats(directory, baseSha, prHeadSha) {
   if (!isSafeGitRevisionToken(baseSha) || !isSafeGitRevisionToken(prHeadSha))
@@ -129,6 +147,42 @@ function resolvePrReviewDiffStats(directory, baseSha, prHeadSha) {
 `).some((line) => GITLINK_MODE_PATTERN.test(line.trim()));
   return { changedLines, changedFiles, hasSubmoduleChange };
 }
+async function resolvePrReviewDiffStatsAsync(directory, baseSha, prHeadSha) {
+  if (!isSafeGitRevisionToken(baseSha) || !isSafeGitRevisionToken(prHeadSha))
+    return null;
+  const range = `${baseSha}...${prHeadSha}`;
+  const output = await runGitAsync(directory, [
+    "diff",
+    "--no-renames",
+    "--numstat",
+    range
+  ]);
+  if (output === null)
+    return null;
+  let changedLines = 0;
+  let changedFiles = 0;
+  for (const line of output.split(`
+`)) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0)
+      continue;
+    const fields = trimmed.split("\t");
+    if (fields.length < 3)
+      return null;
+    const added = fields[0] === "-" ? 0 : Number.parseInt(fields[0], 10);
+    const deleted = fields[1] === "-" ? 0 : Number.parseInt(fields[1], 10);
+    if (Number.isNaN(added) || Number.isNaN(deleted))
+      return null;
+    changedFiles += 1;
+    changedLines += added + deleted;
+  }
+  const rawOutput = await runGitAsync(directory, ["diff", "--raw", range]);
+  if (rawOutput === null)
+    return null;
+  const hasSubmoduleChange = rawOutput.split(`
+`).some((line) => GITLINK_MODE_PATTERN.test(line.trim()));
+  return { changedLines, changedFiles, hasSubmoduleChange };
+}
 function isSafeGitRevisionToken(value) {
   return /^(?!-)[A-Za-z0-9][A-Za-z0-9._/-]{0,255}$/.test(value) && !value.includes("..") && !value.includes("//") && !value.includes("@{");
 }
@@ -160,6 +214,27 @@ function resolveCurrentUpstreamPushTarget(directory) {
   }
   return { remoteName, remoteBranchRef, remoteTrackingRef };
 }
+async function resolveCurrentUpstreamPushTargetAsync(directory) {
+  const localBranchRef = await runGitAsync(directory, [
+    "symbolic-ref",
+    "--quiet",
+    "HEAD"
+  ]);
+  if (!localBranchRef?.startsWith("refs/heads/"))
+    return null;
+  const encoded = await runGitAsync(directory, [
+    "for-each-ref",
+    "--format=%(upstream:remotename)%00%(upstream:remoteref)%00%(upstream)",
+    localBranchRef
+  ]);
+  if (!encoded)
+    return null;
+  const [remoteName, remoteBranchRef, remoteTrackingRef, ...extras] = encoded.split("\x00");
+  if (extras.length > 0 || !remoteName || remoteName.startsWith("-") || /[\s;&|<>`]/.test(remoteName) || !remoteBranchRef?.startsWith("refs/heads/") || remoteBranchRef === "refs/heads/" || /[\s;&|<>`]/.test(remoteBranchRef) || !remoteTrackingRef?.startsWith("refs/remotes/") || remoteTrackingRef.endsWith("/HEAD")) {
+    return null;
+  }
+  return { remoteName, remoteBranchRef, remoteTrackingRef };
+}
 function resolveExactRemoteBranchHead(directory, remoteName, remoteBranchRef) {
   if (!remoteName || remoteName.startsWith("-") || /[\s;&|<>`]/.test(remoteName) || !remoteBranchRef.startsWith("refs/heads/") || remoteBranchRef === "refs/heads/" || /[\s;&|<>`]/.test(remoteBranchRef)) {
     return null;
@@ -176,6 +251,22 @@ function resolveExactRemoteBranchHead(directory, remoteName, remoteBranchRef) {
   }
   return objectName;
 }
+async function resolveExactRemoteBranchHeadAsync(directory, remoteName, remoteBranchRef) {
+  if (!remoteName || remoteName.startsWith("-") || /[\s;&|<>`]/.test(remoteName) || !remoteBranchRef.startsWith("refs/heads/") || remoteBranchRef === "refs/heads/" || /[\s;&|<>`]/.test(remoteBranchRef)) {
+    return null;
+  }
+  const output = await runGitAsync(directory, ["ls-remote", "--exit-code", "--heads", remoteName, remoteBranchRef], 20000);
+  if (!output)
+    return null;
+  const rows = output.split(/\r?\n/).filter(Boolean);
+  if (rows.length !== 1)
+    return null;
+  const [objectName, refName, ...extras] = rows[0].split(/\s+/);
+  if (extras.length > 0 || refName !== remoteBranchRef || !objectName || !(/^[0-9a-f]{40}$/i.test(objectName) || /^[0-9a-f]{64}$/i.test(objectName))) {
+    return null;
+  }
+  return objectName;
+}
 function resolveGitControlStateDigest(directory) {
   const head = runGit(directory, ["rev-parse", "--verify", "HEAD^{commit}"]);
   const symbolicHead = runGit(directory, ["symbolic-ref", "--quiet", "HEAD"]);
@@ -200,6 +291,38 @@ function resolveGitControlStateDigest(directory) {
   }
   return digest(`head\x00${head}\x00symbolic\x00${symbolicHead}\x00upstream\x00${upstream.remoteName}\x00${upstream.remoteBranchRef}\x00${upstream.remoteTrackingRef}\x00refs\x00${refs}\x00config\x00${config}\x00index\x00${index}`);
 }
+async function resolveGitControlStateDigestAsync(directory) {
+  const head = await runGitAsync(directory, [
+    "rev-parse",
+    "--verify",
+    "HEAD^{commit}"
+  ]);
+  const symbolicHead = await runGitAsync(directory, [
+    "symbolic-ref",
+    "--quiet",
+    "HEAD"
+  ]);
+  const upstream = await resolveCurrentUpstreamPushTargetAsync(directory);
+  const refs = await runGitAsync(directory, [
+    "for-each-ref",
+    "--format=%(refname)%00%(objectname)",
+    "refs/heads",
+    "refs/remotes",
+    "refs/tags"
+  ]);
+  const config = await runGitAsync(directory, [
+    "config",
+    "--null",
+    "--show-origin",
+    "--show-scope",
+    "--list"
+  ]);
+  const index = await runGitAsync(directory, ["ls-files", "--stage", "-z"]);
+  if (head === null || symbolicHead === null || !upstream || refs === null || config === null || index === null) {
+    return null;
+  }
+  return digest(`head\x00${head}\x00symbolic\x00${symbolicHead}\x00upstream\x00${upstream.remoteName}\x00${upstream.remoteBranchRef}\x00${upstream.remoteTrackingRef}\x00refs\x00${refs}\x00config\x00${config}\x00index\x00${index}`);
+}
 function resolveIsWorkingTreeClean(directory) {
   const status = runGit(directory, [
     "status",
@@ -208,6 +331,14 @@ function resolveIsWorkingTreeClean(directory) {
   ]);
   return status === null ? null : status.length === 0;
 }
+async function resolveIsWorkingTreeCleanAsync(directory) {
+  const status = await runGitAsync(directory, [
+    "status",
+    "--porcelain=v1",
+    "--untracked-files=all"
+  ]);
+  return status === null ? null : status.length === 0;
+}
 function resolveCommitCountSince(directory, baseHeadSha, currentHeadSha) {
   const output = runGit(directory, [
     "rev-list",
@@ -220,6 +351,18 @@ function resolveCommitCountSince(directory, baseHeadSha, currentHeadSha) {
   const count = Number(output);
   return Number.isSafeInteger(count) ? count : null;
 }
+async function resolveCommitCountSinceAsync(directory, baseHeadSha, currentHeadSha) {
+  const output = await runGitAsync(directory, [
+    "rev-list",
+    "--count",
+    "--ancestry-path",
+    `${baseHeadSha}..${currentHeadSha}`
+  ]);
+  if (!output || !/^\d+$/.test(output))
+    return null;
+  const count = Number(output);
+  return Number.isSafeInteger(count) ? count : null;
+}
 function resolveIsExactSingleChildCommit(directory, baseHeadSha, currentHeadSha) {
   const base = runGit(directory, [
     "rev-parse",
@@ -245,6 +388,31 @@ function resolveIsExactSingleChildCommit(directory, baseHeadSha, currentHeadSha)
   const fields = commitAndParents.trim().split(/\s+/);
   return fields.length === 2 && fields[0]?.toLowerCase() === current.toLowerCase() && fields[1]?.toLowerCase() === base.toLowerCase();
 }
+async function resolveIsExactSingleChildCommitAsync(directory, baseHeadSha, currentHeadSha) {
+  const base = await runGitAsync(directory, [
+    "rev-parse",
+    "--verify",
+    `${baseHeadSha}^{commit}`
+  ]);
+  const current = await runGitAsync(directory, [
+    "rev-parse",
+    "--verify",
+    `${currentHeadSha}^{commit}`
+  ]);
+  if (!base || !current)
+    return null;
+  const commitAndParents = await runGitAsync(directory, [
+    "rev-list",
+    "--parents",
+    "-n",
+    "1",
+    current
+  ]);
+  if (commitAndParents === null)
+    return null;
+  const fields = commitAndParents.trim().split(/\s+/);
+  return fields.length === 2 && fields[0]?.toLowerCase() === current.toLowerCase() && fields[1]?.toLowerCase() === base.toLowerCase();
+}
 function resolveRemoteRefsContainingHead(directory, headSha) {
   const output = runGit(directory, [
     "for-each-ref",
@@ -255,6 +423,16 @@ function resolveRemoteRefsContainingHead(directory, headSha) {
     return null;
   return output.split(/\r?\n/).map((line) => line.trim().split("\t")).filter(([ref, objectName]) => ref?.startsWith("refs/remotes/") && !ref.endsWith("/HEAD") && objectName?.toLowerCase() === headSha.toLowerCase()).map(([ref]) => ref);
 }
+async function resolveRemoteRefsContainingHeadAsync(directory, headSha) {
+  const output = await runGitAsync(directory, [
+    "for-each-ref",
+    "--format=%(refname)%09%(objectname)",
+    "refs/remotes"
+  ]);
+  if (output === null)
+    return null;
+  return output.split(/\r?\n/).map((line) => line.trim().split("\t")).filter(([ref, objectName]) => ref?.startsWith("refs/remotes/") && !ref.endsWith("/HEAD") && objectName?.toLowerCase() === headSha.toLowerCase()).map(([ref]) => ref);
+}
 function resolvePrWorkflowRevisionDigest(directory, baseHeadSha) {
   const projectRoot = path.resolve(directory);
   const baseHead = runGit(projectRoot, [
@@ -598,4 +776,4 @@ var _internals = {
   parsePorcelainV2Snapshot
 };
 
-export { readGitTextAtRevision, resolveCurrentGitHead, resolveExactMergeBase, resolvePrReviewDiffStats, resolveCurrentUpstreamRemoteRef, resolveCurrentUpstreamPushTarget, resolveExactRemoteBranchHead, resolveGitControlStateDigest, resolveIsWorkingTreeClean, resolveCommitCountSince, resolveIsExactSingleChildCommit, resolveRemoteRefsContainingHead, resolvePrWorkflowRevisionDigest, resolvePrWorkflowRevisionDigestAsync, parsePorcelainPaths, captureWorkspaceSnapshot, changedFilesSinceSnapshot, workspaceSnapshotMatches, compareWorkspaceSnapshot, compareWorkspaceSnapshots, digest, _internals };
+export { readGitTextAtRevision, resolveCurrentGitHead, resolveCurrentGitHeadAsync, resolveExactMergeBase, resolveExactMergeBaseAsync, resolvePrReviewDiffStats, resolvePrReviewDiffStatsAsync, resolveCurrentUpstreamRemoteRef, resolveCurrentUpstreamPushTarget, resolveCurrentUpstreamPushTargetAsync, resolveExactRemoteBranchHead, resolveExactRemoteBranchHeadAsync, resolveGitControlStateDigest, resolveGitControlStateDigestAsync, resolveIsWorkingTreeClean, resolveIsWorkingTreeCleanAsync, resolveCommitCountSince, resolveCommitCountSinceAsync, resolveIsExactSingleChildCommit, resolveIsExactSingleChildCommitAsync, resolveRemoteRefsContainingHead, resolveRemoteRefsContainingHeadAsync, resolvePrWorkflowRevisionDigest, resolvePrWorkflowRevisionDigestAsync, parsePorcelainPaths, captureWorkspaceSnapshot, changedFilesSinceSnapshot, workspaceSnapshotMatches, compareWorkspaceSnapshot, compareWorkspaceSnapshots, digest, _internals };

package/dist/cli/{index-5fnc76da.js → index-hbbj7ktj.js}

@@ -2,7 +2,7 @@
 import {
   readKnowledge,
   transactKnowledge
-} from "./index-w2kp2zvf.js";
+} from "./index-n08cksd6.js";
 import {
   resolveKnowledgeStoreDir
 } from "./index-q27bajqb.js";