opencode-swarm 7.166.0 → 7.166.1

package/dist/cli/{hive-promoter-w5tsgttc.js → hive-promoter-ghjbgsms.js}

@@ -7,43 +7,43 @@ import {
   isHiveEligible,
   promoteFromSwarm,
   promoteToHive
-} from "./index-an89qzd9.js";
-import"./index-8d90gzaz.js";
+} from "./index-399nq780.js";
+import"./index-2sqgbmtq.js";
 import"./index-hvk3zs62.js";
-import"./index-9hy5q7gp.js";
-import"./index-p04pa9c9.js";
-import"./index-qkq56zyr.js";
+import"./index-gr8ppbq3.js";
+import"./index-8fr2wn18.js";
+import"./index-0g5v4s0x.js";
 import"./index-17yszqs5.js";
 import"./index-txdagbh7.js";
 import"./index-cw912re7.js";
-import"./index-hrkamw9q.js";
-import"./index-359djbj1.js";
-import"./index-bw7r2b2m.js";
+import"./index-066xxa4q.js";
+import"./index-13egyjgv.js";
+import"./index-ybcxvv17.js";
 import"./index-70ha9e09.js";
 import"./index-8hqkrd2j.js";
 import"./index-9ss2m4rs.js";
-import"./index-czr3jcg6.js";
+import"./index-xezfx7ge.js";
 import"./index-zsrtt42s.js";
-import"./index-2dvk153d.js";
+import"./index-k5w284js.js";
 import"./index-6chhqq2n.js";
-import"./index-8bdk7124.js";
+import"./index-1zqf2pny.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-8n62bphd.js";
-import"./index-2rm5x9ps.js";
-import"./index-52jfm5s0.js";
-import"./index-jc9cxh90.js";
-import"./index-anxs69ad.js";
-import"./index-z6xqpmqg.js";
+import"./index-yt25kpvz.js";
+import"./index-fc1dqzjp.js";
+import"./index-w11whwn3.js";
+import"./index-zha9bdj9.js";
+import"./index-bfr392e7.js";
+import"./index-ee6ydtfe.js";
 import"./index-p612v1mv.js";
-import"./index-a5w71m8f.js";
+import"./index-6rff2h8x.js";
 import"./index-c20gf089.js";
 import"./index-rtry5xyf.js";
-import"./index-apxaa755.js";
+import"./index-nph5g4em.js";
 import"./index-3qf1vxtb.js";
 import"./index-n832052r.js";
-import"./index-8m12y79g.js";
-import"./index-30f4fe30.js";
+import"./index-xwkn5hse.js";
+import"./index-2y4kargd.js";
 import"./index-2v17wb75.js";
 import"./index-79sr3fd1.js";
 import"./index-jx9f4ke1.js";
@@ -53,7 +53,7 @@ import"./index-n4fzmqz8.js";
 import"./index-axf65x87.js";
 import {
   resolveHiveKnowledgePath
-} from "./index-fywshabz.js";
+} from "./index-bkd3450m.js";
 import"./index-ae75rja9.js";
 import"./index-a7rw4g4s.js";
 import"./index-7qefgq4j.js";
@@ -61,12 +61,12 @@ import"./index-edm41q4j.js";
 import"./index-gy0nyfbw.js";
 import"./index-hwj25q9r.js";
 import"./index-7g4c7s5r.js";
-import"./index-mg43w8p2.js";
+import"./index-52xdezsh.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-nb924ar6.js";
-import"./index-a0d4fp6r.js";
-import"./index-zjygnfay.js";
+import"./index-wf12wckd.js";
+import"./index-0tc0pcmh.js";
+import"./index-zpsr8rpc.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";
 import"./index-q1r1cfww.js";

package/dist/cli/{index-hrkamw9q.js → index-066xxa4q.js}

@@ -5,18 +5,18 @@ import {
 import {
   effectiveRetrievalOutcomes,
   readAuthoritativeKnowledgeCounterRollups
-} from "./index-jc9cxh90.js";
+} from "./index-zha9bdj9.js";
 import {
   ALLOWED_SKILL_PATH_PREFIXES,
   validateSkillPath
-} from "./index-a5w71m8f.js";
+} from "./index-6rff2h8x.js";
 import {
   computeOutcomeSignal,
   readKnowledge,
   resolveHiveKnowledgePath,
   resolveSwarmKnowledgePath,
   transactKnowledge
-} from "./index-fywshabz.js";
+} from "./index-bkd3450m.js";
 import {
   canonicalRootKeyFresh
 } from "./index-7qefgq4j.js";

package/dist/cli/{index-qkq56zyr.js → index-0g5v4s0x.js}

@@ -23,13 +23,13 @@ import {
   readTaskEvidence,
   readTaskEvidenceRaw,
   sanitizeTaskId
-} from "./index-8n62bphd.js";
+} from "./index-yt25kpvz.js";
 import {
   estimateCharsForTokens,
   estimateTokens,
   readSwarmFileAsync,
   validateSwarmPath
-} from "./index-anxs69ad.js";
+} from "./index-bfr392e7.js";
 import {
   bunHash,
   bunWrite,
@@ -57,7 +57,7 @@ import {
   replayFromLedgerWithStatus,
   takeSnapshotEvent,
   takeSnapshotWithRetry
-} from "./index-30f4fe30.js";
+} from "./index-2y4kargd.js";
 import {
   appendCoreEventSync
 } from "./index-2v17wb75.js";
@@ -93,7 +93,7 @@ import {
 } from "./index-hwj25q9r.js";
 import {
   PlanSchema
-} from "./index-mg43w8p2.js";
+} from "./index-52xdezsh.js";
 import {
   GIT_BINARY_ENV_VAR,
   describeGitResolution,
@@ -316,6 +316,33 @@ function transientBackoff(attempt) {
   }
 }
 
+// src/git/safe-ref.ts
+class UnsafeGitRefError extends Error {
+  ref;
+  context;
+  constructor(ref, context) {
+    super(`Refused unsafe git ref "${ref}" at ${context}: a ref argument ` + 'starting with "-" can be parsed by git as an option (issue #2265/#2476)');
+    this.ref = ref;
+    this.context = context;
+    this.name = "UnsafeGitRefError";
+  }
+}
+function isSafeGitRefArg(value) {
+  if (value.length === 0)
+    return false;
+  for (const side of value.split("..")) {
+    if (side.startsWith("-"))
+      return false;
+  }
+  return true;
+}
+function assertSafeGitRefArg(value, context) {
+  if (!isSafeGitRefArg(value)) {
+    throw new UnsafeGitRefError(value, context);
+  }
+  return value;
+}
+
 // src/git/branch.ts
 var GIT_TIMEOUT_MS = 30000;
 var GIT_MAX_BUFFER_BYTES = 5 * 1024 * 1024;
@@ -519,6 +546,8 @@ async function resetToRemoteBranch(cwd, options) {
         warnings: []
       };
     }
+    assertSafeGitRefArg(currentBranch, "resetToRemoteBranch currentBranch");
+    assertSafeGitRefArg(defaultRemoteBranch, "resetToRemoteBranch defaultRemoteBranch");
     const targetBranch = `origin/${defaultRemoteBranch}`;
     if (currentBranch === "HEAD") {
       return {
@@ -631,7 +660,12 @@ async function resetToRemoteBranch(cwd, options) {
             continue;
           }
           try {
-            gitExec(["branch", "-d", trimmedLine], cwd);
+            gitExec([
+              "branch",
+              "-d",
+              "--",
+              assertSafeGitRefArg(trimmedLine, "resetToRemoteBranch prune merged branch")
+            ], cwd);
             prunedBranches.push(trimmedLine);
           } catch {
             warnings.push(`Could not safely delete branch: ${trimmedLine}`);
@@ -653,7 +687,12 @@ async function resetToRemoteBranch(cwd, options) {
             const parts = trimmedLine.split(/\s+/);
             const branchName = parts[0];
             try {
-              gitExec(["branch", "-d", branchName], cwd);
+              gitExec([
+                "branch",
+                "-d",
+                "--",
+                assertSafeGitRefArg(branchName, "resetToRemoteBranch prune gone branch")
+              ], cwd);
               prunedBranches.push(branchName);
             } catch {
               warnings.push(`Could not delete gone branch: ${branchName}`);
@@ -702,6 +741,8 @@ async function resetToMainAfterMerge(cwd, options) {
       };
     }
     const currentBranch = getCurrentBranch(cwd);
+    assertSafeGitRefArg(currentBranch, "resetToMainAfterMerge currentBranch");
+    assertSafeGitRefArg(defaultBranch, "resetToMainAfterMerge defaultBranch");
     const targetBranch = `origin/${defaultBranch}`;
     if (currentBranch === "HEAD") {
       return {
@@ -834,7 +875,12 @@ async function resetToMainAfterMerge(cwd, options) {
         const isMerged = mergedOutput.split(`
 `).some((line) => line.trim() === previousBranch || line.trim() === `* ${previousBranch}`);
         if (isMerged) {
-          _internals.gitExec(["branch", "-d", previousBranch], cwd);
+          _internals.gitExec([
+            "branch",
+            "-d",
+            "--",
+            assertSafeGitRefArg(previousBranch, "resetToMainAfterMerge previousBranch")
+          ], cwd);
           branchDeleted = true;
         } else {
           warnings.push(`Branch ${previousBranch} is not merged into ${defaultBranch} \u2014 keeping it`);
@@ -854,7 +900,12 @@ async function resetToMainAfterMerge(cwd, options) {
             continue;
           }
           try {
-            _internals.gitExec(["branch", "-d", trimmedLine], cwd);
+            _internals.gitExec([
+              "branch",
+              "-d",
+              "--",
+              assertSafeGitRefArg(trimmedLine, "resetToMainAfterMerge prune branch")
+            ], cwd);
           } catch {
             warnings.push(`Could not prune branch: ${trimmedLine}`);
           }

package/dist/cli/{index-a0d4fp6r.js → index-0tc0pcmh.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   init_merge
-} from "./index-zjygnfay.js";
+} from "./index-zpsr8rpc.js";
 import {
   __esm
 } from "./index-a76rekgs.js";

package/dist/cli/{index-359djbj1.js → index-13egyjgv.js}

@@ -3,7 +3,7 @@ import {
   queryHistoricalOutcomes,
   readKnowledgeEvents,
   recordKnowledgeEvent
-} from "./index-jc9cxh90.js";
+} from "./index-zha9bdj9.js";
 import {
   jaccardBigram,
   readKnowledge,
@@ -11,7 +11,7 @@ import {
   resolveSwarmKnowledgePath,
   transactKnowledge,
   wordBigrams
-} from "./index-fywshabz.js";
+} from "./index-bkd3450m.js";
 import {
   init_knowledge_types,
   isActiveStatus
@@ -224,11 +224,11 @@ async function maybeQuarantineOnContradiction(directory, entryId, threshold, win
         alreadyInactive: true
       };
     }
-    const { quarantineEntry } = await import("./knowledge-validator-tf7yq2pd.js");
+    const { quarantineEntry } = await import("./knowledge-validator-76qrf1ev.js");
     let policyConfig;
     try {
-      const { KnowledgeConfigSchema } = await import("./schema-mzb1354k.js");
-      const { loadPluginConfigWithMeta } = await import("./index-rkn17q5e.js");
+      const { KnowledgeConfigSchema } = await import("./schema-27sedbfk.js");
+      const { loadPluginConfigWithMeta } = await import("./index-j29nkq5d.js");
       const { config: loadedConfig } = loadPluginConfigWithMeta(directory);
       policyConfig = KnowledgeConfigSchema.parse(loadedConfig.knowledge ?? {});
     } catch {

package/dist/cli/{index-8bdk7124.js → index-1zqf2pny.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   validateSwarmPath
-} from "./index-anxs69ad.js";
+} from "./index-bfr392e7.js";
 import {
   atomicWriteSwarmFileSync
 } from "./index-gy0nyfbw.js";

package/dist/cli/{index-8d90gzaz.js → index-2sqgbmtq.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   simpleGlobToRegex
-} from "./index-z6xqpmqg.js";
+} from "./index-ee6ydtfe.js";
 import {
   bunSpawnSync
 } from "./index-p612v1mv.js";

package/dist/cli/{index-30f4fe30.js → index-2y4kargd.js}

@@ -15,7 +15,7 @@ import {
   PlanSchema,
   TaskStatusSchema,
   init_loader
-} from "./index-mg43w8p2.js";
+} from "./index-52xdezsh.js";
 import {
   criticalWarn,
   init_logger,