opencode-swarm 7.144.7 → 7.144.8

package/dist/cli/{index-s1xefrx7.js → index-z4fssj97.js}

@@ -23,7 +23,7 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-grkev1g6.js";
+} from "./index-jdxnzbah.js";
 import {
   LedgerStaleWriterError,
   appendLedgerEvent,
@@ -43,11 +43,12 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-7bvd5nh2.js";
+} from "./index-tffg4mwr.js";
 import {
   init_executor,
+  isUntrustedEnvKey,
   isValidEnvKey
-} from "./index-zy7f84cs.js";
+} from "./index-85gkedsf.js";
 import {
   EVIDENCE_MAX_JSON_BYTES,
   EvidenceBundleSchema,
@@ -59,7 +60,7 @@ import {
 } from "./index-fv0s19g9.js";
 import {
   PlanSchema
-} from "./index-zq9gs0yk.js";
+} from "./index-7qb0hn8n.js";
 import {
   GIT_BINARY_ENV_VAR,
   describeGitResolution,
@@ -517,6 +518,8 @@ function readLaneEnvFileFromDiskSync(worktreePath, laneIndex) {
     const v = line.slice(eqIdx + 1);
     if (!isValidEnvKey(k))
       continue;
+    if (isUntrustedEnvKey(k))
+      continue;
     result[k] = v;
   }
   return result;

package/dist/cli/index.js

@@ -11,50 +11,50 @@ import {
   readCachePackageVersion,
   resolveCommand,
   safeRealpathSync
-} from "./index-x4q96ejx.js";
-import"./index-gmdgap01.js";
-import"./index-00fk9c3b.js";
-import"./index-s1xefrx7.js";
+} from "./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-d879g58v.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-w9bnt74s.js";
-import"./index-pzsezhek.js";
-import"./index-c1cfsg9y.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-grkev1g6.js";
-import"./index-q7zy6dej.js";
-import"./index-jszgrk71.js";
-import"./index-7bvd5nh2.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
-import"./index-77h4xjn5.js";
-import"./index-qm0mz7rj.js";
-import"./index-bx20cv1v.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
+import"./index-7qb0hn8n.js";
 import {
   init_package,
   package_default
-} from "./index-x4eqd82b.js";
+} from "./index-gfvkttvd.js";
 import {
   DEFAULT_AGENT_CONFIGS,
   init_constants

package/dist/cli/{knowledge-escalator-fhc6ecbv.js → knowledge-escalator-mg8qb7tm.js}

@@ -9,16 +9,16 @@ import {
   maybeEscalateOnViolation,
   maybeQuarantineOnContradiction,
   readRecentEscalations
-} from "./index-pzsezhek.js";
-import"./index-77h4xjn5.js";
-import"./index-qm0mz7rj.js";
-import"./index-bx20cv1v.js";
+} from "./index-xx8tm58n.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{knowledge-events-31g69mx2.js → knowledge-events-3zxf8xpb.js}

@@ -29,14 +29,14 @@ import {
   resolveKnowledgeCounterBaselinePath,
   resolveKnowledgeEventsPath,
   resolveLegacyApplicationLogPath
-} from "./index-qm0mz7rj.js";
-import"./index-bx20cv1v.js";
+} from "./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{knowledge-store-g389c1cy.js → knowledge-store-awnm8s6c.js}

@@ -41,7 +41,7 @@ import {
   transactKnowledge,
   transactKnowledgeWithCas,
   wordBigrams
-} from "./index-77h4xjn5.js";
+} from "./index-3k3nbs52.js";
 import {
   resolveHiveDataDir
 } from "./index-ae75rja9.js";

package/dist/cli/{knowledge-validator-sng5xt5a.js → knowledge-validator-3ke5scx3.js}

@@ -23,10 +23,10 @@ import {
   validateLesson,
   validateSkillCandidatePath,
   validateSkillPath
-} from "./index-c1cfsg9y.js";
+} from "./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
-import"./index-77h4xjn5.js";
+import"./index-3k3nbs52.js";
 import"./index-ae75rja9.js";
 import"./index-h1p08s3n.js";
 import"./index-9s8drsf9.js";

package/dist/cli/{scan-cursor-qm3tsvvw.js → scan-cursor-00rbxkb4.js}

@@ -4,8 +4,8 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-d879g58v.js";
-import"./index-77h4xjn5.js";
+} from "./index-d1dbpxxk.js";
+import"./index-3k3nbs52.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-ae75rja9.js";

package/dist/cli/{schema-vnghba3d.js → schema-5nmkp1pc.js}

@@ -97,7 +97,7 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-x4eqd82b.js";
+} from "./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";

package/dist/cli/{scope-persistence-k9mqd414.js → scope-persistence-6m79atw9.js}

@@ -23,11 +23,11 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-jszgrk71.js";
-import"./index-7bvd5nh2.js";
+} from "./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{skill-generator-v1wdh3ne.js → skill-generator-gv70s796.js}

@@ -33,19 +33,19 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-w9bnt74s.js";
-import"./index-c1cfsg9y.js";
+} from "./index-sxe5nyq4.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
-import"./index-77h4xjn5.js";
-import"./index-qm0mz7rj.js";
-import"./index-bx20cv1v.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
+import"./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/cli/{worktree-isolation-bxt3rftm.js → worktree-isolation-bne0p54w.js}

@@ -20,49 +20,49 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-x4q96ejx.js";
-import"./index-gmdgap01.js";
-import"./index-00fk9c3b.js";
-import"./index-s1xefrx7.js";
+} from "./index-c2rpht77.js";
+import"./index-nmy6rss1.js";
+import"./index-r14qx363.js";
+import"./index-z4fssj97.js";
 import"./index-134d35c1.js";
 import"./index-abtrcs16.js";
 import"./index-6z5jtf7d.js";
 import"./index-wknz5c8q.js";
 import"./index-y8552snf.js";
-import"./index-d879g58v.js";
+import"./index-d1dbpxxk.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
 import"./index-f36ybbsv.js";
 import"./index-hkdgkkhb.js";
-import"./index-w9bnt74s.js";
-import"./index-pzsezhek.js";
-import"./index-c1cfsg9y.js";
+import"./index-sxe5nyq4.js";
+import"./index-xx8tm58n.js";
+import"./index-8dbzaf0m.js";
 import"./index-vdha477y.js";
 import"./index-rtry5xyf.js";
 import"./index-zsrtt42s.js";
 import"./index-n4hwcsbd.js";
 import"./index-cwtpqm5f.js";
-import"./index-grkev1g6.js";
-import"./index-q7zy6dej.js";
-import"./index-jszgrk71.js";
-import"./index-7bvd5nh2.js";
+import"./index-jdxnzbah.js";
+import"./index-xp5g9eps.js";
+import"./index-k7fk9fjs.js";
+import"./index-tffg4mwr.js";
 import"./index-556ja8an.js";
 import"./index-7sy3aa9m.js";
 import"./index-wx8zdh4a.js";
-import"./index-b44qqqt2.js";
-import"./index-zy7f84cs.js";
-import"./index-77h4xjn5.js";
-import"./index-qm0mz7rj.js";
+import"./index-3g0xk6tk.js";
+import"./index-85gkedsf.js";
+import"./index-3k3nbs52.js";
+import"./index-cx51wy0c.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-bx20cv1v.js";
+} from "./index-0v1f2sdb.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-fv0s19g9.js";
 import"./index-z6xqpmqg.js";
-import"./index-zq9gs0yk.js";
-import"./index-x4eqd82b.js";
+import"./index-7qb0hn8n.js";
+import"./index-gfvkttvd.js";
 import"./index-v3y3qg48.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";

package/dist/git/branch.d.ts

@@ -60,6 +60,15 @@ declare const __spawnSyncSeam: {
  * Synchronously read and parse a lane runtime profile from disk.
  * Mirrors the logic of `readLaneEnvFileFromDisk` but uses sync fs.
  * Returns an empty record when the file does not exist or cannot be read.
+ *
+ * UNTRUSTED INPUT (issue #2263): this file lives at
+ * `<worktree>/.swarm/lanes/<N>.env` — a path INSIDE the repository — so a
+ * hostile repository can simply commit it. Every key/value parsed here is
+ * attacker-controlled and must pass BOTH the `isValidEnvKey` shape check and
+ * the `isUntrustedEnvKey` denylist (drops the `GIT_*` control plane and the
+ * `LD_*`/`DYLD_*` loader-hijack families, which are code-execution
+ * primitives in a git child-process environment). The shape-only validation
+ * looks sufficient but is not — that gap is exactly what #2263 reported.
  */
 export declare function readLaneEnvFileFromDiskSync(worktreePath: string, laneIndex: number): Record<string, string>;
 declare function gitExec(args: string[], cwd: string, laneEnv?: Record<string, string>, laneIndex?: number): string;

package/dist/hooks/delegation-gate/worktree-isolation.d.ts

@@ -287,6 +287,11 @@ callID?: string, settlement?: StandardWorktreeSettlementOptions): Promise<Standa
  * - Skips blank lines and lines starting with `#` (comments).
  * - Skips malformed lines (no `=` separator).
  * - Validates each key with `isValidEnvKey`; rejects and skips invalid keys.
+ * - Drops `GIT_*` / `LD_*` / `DYLD_*` keys via `isUntrustedEnvKey` (#2263):
+ *   the file is repo-resident, so its contents are attacker-controlled. The
+ *   `GIT_*` family is git's control plane (`GIT_SSH_COMMAND`,
+ *   `GIT_CONFIG_*`, …) and `LD_*`/`DYLD_*` are loader-hijack vectors — none
+ *   belong in a lane profile (PORT / TMPDIR / cache redirects).
  * - Returns an empty record when the file does not exist.
  *
  * Exposed via _internals for testability (no mock.module leakage).