opencode-swarm 7.144.3 → 7.144.5

package/dist/hooks/reviewer-scope-lifecycle.d.ts

@@ -1,4 +1,5 @@
 import * as child_process from 'node:child_process';
+import { resolveGitExecutable } from '../utils/git-executable.js';
 export type ReviewerScopeLifecycleTransition = 'coder_started' | 'coder_ready' | 'coder_no_change' | 'reviewer_claimed';
 /** Test-only dependency-injection seam for the no-change status probe. */
 export declare const _internals: {
@@ -6,6 +7,14 @@ export declare const _internals: {
     backoffMs?: number;
     /** Test-only deadline override for the bounded retry loop (ms). */
     retryDeadlineMs?: number;
+    /**
+     * Issue #2236 hardening (F1/F4/F5) — resolves the absolute git executable
+     * path instead of spawning the bare `'git'` name, which resolves against
+     * the PATH inside the child's env and can pick up an unintended binary.
+     * Exposed for test injection following the convention in
+     * `src/hooks/review-receipt-scope.ts`.
+     */
+    resolveGitExecutable: typeof resolveGitExecutable;
 };
 /** Run only after the complete blocking before-chain approved this Task call. */
 export declare function beginApprovedReviewerScopeLifecycle(input: {

package/dist/hooks/semantic-diff-injection.d.ts

@@ -13,6 +13,7 @@ import { computeASTDiff } from '../diff/ast-diff.js';
 import { classifyChanges } from '../diff/semantic-classifier.js';
 import { generateSummary, generateSummaryMarkdown } from '../diff/summary-generator.js';
 import { getImporters, normalizeGraphPath } from '../tools/repo-graph.js';
+import { resolveGitExecutable } from '../utils/git-executable.js';
 import { getCachedGraph, type RepoGraphInjectionOptions } from './repo-graph-injection.js';
 export declare const _internals: {
     execFile: typeof child_process.execFile;
@@ -25,7 +26,13 @@ export declare const _internals: {
     getCachedGraph: typeof getCachedGraph;
     getImporters: typeof getImporters;
     normalizeGraphPath: typeof normalizeGraphPath;
+    resolveGitExecutable: typeof resolveGitExecutable;
+    execGit: typeof execGit;
 };
+declare function execGit(directory: string, args: string[], options?: {
+    timeout?: number;
+    maxBuffer?: number;
+}): Promise<string>;
 /**
  * Build a semantic diff summary block for the given changed files.
  *
@@ -41,3 +48,4 @@ export declare const _internals: {
  * Returns null if no changes are detected or on failure.
  */
 export declare function buildSemanticDiffBlock(directory: string, changedFiles: string[], maxFiles?: number, repoGraphOptions?: RepoGraphInjectionOptions): Promise<string | null>;
+export {};