opencode-swarm 7.144.6 → 7.144.8

package/dist/cli/{index-jqvsh0g3.js → index-t72g4a7y.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   handleGuardrailExplain
-} from "./index-7zehmnv1.js";
+} from "./index-r2rkwvzq.js";
 import {
   handleGuardrailLog
-} from "./index-sswzhcqb.js";
+} from "./index-bv44950t.js";
 import {
   COMMAND_REGISTRY,
   SWARM_COMMAND_TOOL_ALLOWLIST,
@@ -85,50 +85,50 @@ import {
   handleWriteRetroCommand,
   normalizeSwarmCommandInput,
   resolveCommand
-} from "./index-42ezdzam.js";
-import"./index-dj8cah6s.js";
-import"./index-01nhedm7.js";
-import"./index-fgdhf6a5.js";
+} from "./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-h5krb653.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-vngs0meh.js";
-import"./index-n06653nr.js";
-import"./index-bac12jpv.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-sqe3nqh5.js";
-import"./index-tq89td7b.js";
-import"./index-dvybg11w.js";
-import"./index-q6bhmyxb.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
-import"./index-ec1kywxg.js";
-import"./index-zde2mkmg.js";
-import"./index-ckq719fr.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-ytzz6pq1.js";
+import"./index-7qb0hn8n.js";
 import {
   init_schema,
   stripKnownSwarmPrefix
-} from "./index-68mqwvf5.js";
+} from "./index-gfvkttvd.js";
 import {
   AGENT_TOOL_MAP,
   ORCHESTRATOR_NAME,

package/dist/cli/{index-q6bhmyxb.js → index-tffg4mwr.js}

@@ -4,7 +4,7 @@ import {
   PlanSchema,
   TaskStatusSchema,
   init_loader
-} from "./index-ytzz6pq1.js";
+} from "./index-7qb0hn8n.js";
 import {
   assertProjectRoot,
   withEvidenceLock

package/dist/cli/{index-tq89td7b.js → index-xp5g9eps.js}

@@ -92,7 +92,7 @@ var _internals = {
     symlinkSync: fs.symlinkSync
   },
   writeScopeToDisk: async (directory, taskId, files) => {
-    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-mjg4we75.js");
+    const { writeScopeToDisk: realWrite } = await import("./scope-persistence-6m79atw9.js");
     return realWrite(directory, taskId, files);
   },
   writeLaneProfileToDisk: async (_worktreePath, _laneIndex, _envOverrides) => {

package/dist/cli/{index-n06653nr.js → index-xx8tm58n.js}

@@ -6,12 +6,12 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-ec1kywxg.js";
+} from "./index-3k3nbs52.js";
 import {
   queryHistoricalOutcomes,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-zde2mkmg.js";
+} from "./index-cx51wy0c.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -224,11 +224,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-dx6zzcdf.js");
+    const { quarantineEntry } = await import("./knowledge-validator-3ke5scx3.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-tzcjwe8j.js");
-      const { loadPluginConfigWithMeta } = await import("./index-zxr5r9b7.js");
+      const { KnowledgeConfigSchema } = await import("./schema-5nmkp1pc.js");
+      const { loadPluginConfigWithMeta } = await import("./index-t2ntgzts.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-fgdhf6a5.js → index-z4fssj97.js}

@@ -23,7 +23,7 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-sqe3nqh5.js";
+} from "./index-jdxnzbah.js";
 import {
   LedgerStaleWriterError,
   appendLedgerEvent,
@@ -43,11 +43,12 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-q6bhmyxb.js";
+} from "./index-tffg4mwr.js";
 import {
   init_executor,
+  isUntrustedEnvKey,
   isValidEnvKey
-} from "./index-zy7f84cs.js";
+} from "./index-85gkedsf.js";
 import {
   EVIDENCE_MAX_JSON_BYTES,
   EvidenceBundleSchema,
@@ -59,7 +60,7 @@ import {
 } from "./index-fv0s19g9.js";
 import {
   PlanSchema
-} from "./index-ytzz6pq1.js";
+} from "./index-7qb0hn8n.js";
 import {
   GIT_BINARY_ENV_VAR,
   describeGitResolution,
@@ -517,6 +518,8 @@ function readLaneEnvFileFromDiskSync(worktreePath, laneIndex) {
     const v = line.slice(eqIdx + 1);
     if (!isValidEnvKey(k))
       continue;
+    if (isUntrustedEnvKey(k))
+      continue;
     result[k] = v;
   }
   return result;

package/dist/cli/index.js

@@ -11,50 +11,50 @@ import {
   readCachePackageVersion,
   resolveCommand,
   safeRealpathSync
-} from "./index-42ezdzam.js";
-import"./index-dj8cah6s.js";
-import"./index-01nhedm7.js";
-import"./index-fgdhf6a5.js";
+} from "./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-h5krb653.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-vngs0meh.js";
-import"./index-n06653nr.js";
-import"./index-bac12jpv.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-sqe3nqh5.js";
-import"./index-tq89td7b.js";
-import"./index-dvybg11w.js";
-import"./index-q6bhmyxb.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
-import"./index-ec1kywxg.js";
-import"./index-zde2mkmg.js";
-import"./index-ckq719fr.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-ytzz6pq1.js";
+import"./index-7qb0hn8n.js";
 import {
   init_package,
   package_default
-} from "./index-68mqwvf5.js";
+} from "./index-gfvkttvd.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants

package/dist/cli/{knowledge-escalator-yaxzz0k5.js → knowledge-escalator-mg8qb7tm.js}

@@ -9,16 +9,16 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-n06653nr.js";
-import"./index-ec1kywxg.js";
-import"./index-zde2mkmg.js";
-import"./index-ckq719fr.js";
+} from "./index-xx8tm58n.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-ytzz6pq1.js";
-import"./index-68mqwvf5.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{knowledge-events-rgcwewpn.js → knowledge-events-3zxf8xpb.js}

@@ -29,14 +29,14 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-zde2mkmg.js";
-import"./index-ckq719fr.js";
+} from "./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-ytzz6pq1.js";
-import"./index-68mqwvf5.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{knowledge-store-qf8t25sw.js → knowledge-store-awnm8s6c.js}

@@ -41,7 +41,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-ec1kywxg.js";
+} from "./index-3k3nbs52.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-dx6zzcdf.js → knowledge-validator-3ke5scx3.js}

@@ -23,10 +23,10 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-bac12jpv.js";
+} from "./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
-import"./index-ec1kywxg.js";
+import"./index-3k3nbs52.js";
 import"./index-ae75rja9.js";
 import"./index-h1p08s3n.js";
 import"./index-9s8drsf9.js";

package/dist/cli/{scan-cursor-pbcaj8hj.js → scan-cursor-00rbxkb4.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-h5krb653.js";
-import"./index-ec1kywxg.js";
+} from "./index-d1dbpxxk.js";
+import"./index-3k3nbs52.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-ae75rja9.js";

package/dist/cli/{schema-tzcjwe8j.js → schema-5nmkp1pc.js}

@@ -97,7 +97,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-68mqwvf5.js";
+} from "./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scope-persistence-mjg4we75.js → scope-persistence-6m79atw9.js}

@@ -23,11 +23,11 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-dvybg11w.js";
-import"./index-q6bhmyxb.js";
+} from "./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
-import"./index-ytzz6pq1.js";
-import"./index-68mqwvf5.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{skill-generator-7jrzbaej.js → skill-generator-gv70s796.js}

@@ -33,19 +33,19 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-vngs0meh.js";
-import"./index-bac12jpv.js";
+} from "./index-sxe5nyq4.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
-import"./index-ec1kywxg.js";
-import"./index-zde2mkmg.js";
-import"./index-ckq719fr.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-ytzz6pq1.js";
-import"./index-68mqwvf5.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{worktree-isolation-awpkp0yh.js → worktree-isolation-bne0p54w.js}

@@ -20,49 +20,49 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-42ezdzam.js";
-import"./index-dj8cah6s.js";
-import"./index-01nhedm7.js";
-import"./index-fgdhf6a5.js";
+} from "./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-h5krb653.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-vngs0meh.js";
-import"./index-n06653nr.js";
-import"./index-bac12jpv.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-sqe3nqh5.js";
-import"./index-tq89td7b.js";
-import"./index-dvybg11w.js";
-import"./index-q6bhmyxb.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
-import"./index-ec1kywxg.js";
-import"./index-zde2mkmg.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-ckq719fr.js";
+} from "./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-ytzz6pq1.js";
-import"./index-68mqwvf5.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/git/branch.d.ts

@@ -60,6 +60,15 @@ declare const __spawnSyncSeam: {
  * Synchronously read and parse a lane runtime profile from disk.
  * Mirrors the logic of `readLaneEnvFileFromDisk` but uses sync fs.
  * Returns an empty record when the file does not exist or cannot be read.
+ *
+ * UNTRUSTED INPUT (issue #2263): this file lives at
+ * `<worktree>/.swarm/lanes/<N>.env` — a path INSIDE the repository — so a
+ * hostile repository can simply commit it. Every key/value parsed here is
+ * attacker-controlled and must pass BOTH the `isValidEnvKey` shape check and
+ * the `isUntrustedEnvKey` denylist (drops the `GIT_*` control plane and the
+ * `LD_*`/`DYLD_*` loader-hijack families, which are code-execution
+ * primitives in a git child-process environment). The shape-only validation
+ * looks sufficient but is not — that gap is exactly what #2263 reported.
  */
 export declare function readLaneEnvFileFromDiskSync(worktreePath: string, laneIndex: number): Record<string, string>;
 declare function gitExec(args: string[], cwd: string, laneEnv?: Record<string, string>, laneIndex?: number): string;

package/dist/hooks/delegation-gate/worktree-isolation.d.ts

@@ -287,6 +287,11 @@ callID?: string, settlement?: StandardWorktreeSettlementOptions): Promise<Standa
  * - Skips blank lines and lines starting with `#` (comments).
  * - Skips malformed lines (no `=` separator).
  * - Validates each key with `isValidEnvKey`; rejects and skips invalid keys.
+ * - Drops `GIT_*` / `LD_*` / `DYLD_*` keys via `isUntrustedEnvKey` (#2263):
+ *   the file is repo-resident, so its contents are attacker-controlled. The
+ *   `GIT_*` family is git's control plane (`GIT_SSH_COMMAND`,
+ *   `GIT_CONFIG_*`, …) and `LD_*`/`DYLD_*` are loader-hijack vectors — none
+ *   belong in a lane profile (PORT / TMPDIR / cache redirects).
  * - Returns an empty record when the file does not exist.
  *
  * Exposed via _internals for testability (no mock.module leakage).

package/dist/hooks/pr-workflow-gate.d.ts

@@ -713,7 +713,10 @@ export declare function assertPrReviewArtifactBoundary(directory: string, sessio
 /**
  * Artifact records are a projection of lane receipts, never a caller-controlled
  * replacement for them. Keep their workflow status/action aligned with the
- * reviewer and critic rows that the gate already authenticated.
+ * reviewer and critic rows that the gate already authenticated. Every violation
+ * across every record is reported in a single rejection, one line per violation
+ * with the expected and actual value, so a caller repairs a payload in one
+ * round trip instead of one rejected write per defect (issue #2277).
  */
 export declare function assertPrReviewArtifactRecordsMatchAuthoritativeVerdicts(directory: string, sessionID: string, boundary: PrReviewArtifactBoundary, records: readonly PrReviewArtifactRecord[]): Promise<void>;
 export declare function markPrReviewArtifactBoundary(directory: string, sessionID: string, runId: string, boundary: PrReviewArtifactBoundary, artifactPath: string, findingIds: string[], handoffRequired: boolean): Promise<PrWorkflowGateState>;