opencode-swarm 7.73.2 → 7.74.0

package/dist/commands/pr-ref.d.ts

@@ -10,20 +10,8 @@
  * fragments, and embedded credentials are stripped before the value is ever
  * placed back into a signal string.
  */
-import { execSync } from 'node:child_process';
-/**
- * File-scoped indirection seam for the subprocess call. Tests override
- * `_internals.execSync` (no `mock.module`) to assert the working directory is
- * threaded through and to simulate a missing `origin` remote.
- */
-export declare const _internals: {
-    execSync: typeof execSync;
-};
-/**
- * Strip query strings, fragments, injected MODE headers, and credentials from
- * a URL string.
- */
-export declare function sanitizeUrl(raw: string): string;
+import { _internals, detectGitRemote, parseGitRemoteUrl, sanitizeUrl, type ValidationResult } from './_shared/url-security.js';
+export { _internals, detectGitRemote, parseGitRemoteUrl, sanitizeUrl };
 /**
  * Sanitize free-text instructions so they cannot forge a competing MODE
  * header, inject control sequences, or break out of the signal line.
@@ -31,19 +19,6 @@ export declare function sanitizeUrl(raw: string): string;
  * headers, and truncates to a bounded length.
  */
 export declare function sanitizeInstructions(raw: string): string;
-/**
- * Blocklist of private/localhost hostnames and IP ranges.
- */
-export declare function isPrivateHost(url: URL): boolean;
-/**
- * Validate and sanitize a GitHub PR URL.
- * Returns the sanitized URL on success, or an error message on failure.
- */
-export type ValidationResult = {
-    sanitized: string;
-} | {
-    error: string;
-};
 export declare function validateAndSanitizeUrl(rawUrl: string): ValidationResult;
 export interface ParsedPr {
     owner: string;
@@ -57,24 +32,6 @@ export interface ParsedPr {
  * 3. Bare number: N (resolved against the `origin` git remote in `cwd`)
  */
 export declare function parsePrRef(input: string, cwd?: string): ParsedPr | null;
-/**
- * Detect the `origin` remote URL from git config.
- *
- * `cwd` should be the project directory the command was invoked for. Without it
- * the lookup runs in `process.cwd()`, which in a plugin host is frequently not
- * the repository root — so bare-number PR resolution would silently fail or
- * resolve against the wrong repo (invariant #3: subprocesses run in an explicit
- * working directory).
- */
-export declare function detectGitRemote(cwd?: string): string | null;
-/**
- * Parse owner/repo from a git remote URL.
- * Supports HTTPS (https://github.com/owner/repo.git) and SSH (git@github.com:owner/repo.git).
- */
-export declare function parseGitRemoteUrl(remoteUrl: string): {
-    owner: string;
-    repo: string;
-} | null;
 /**
  * Whether a token is *shaped* like a PR reference — a full `http(s)` URL, an
  * `owner/repo#N` shorthand, or a bare number. This is intent detection, not

package/dist/hooks/skill-usage-log.d.ts

@@ -17,7 +17,9 @@ export interface SkillUsageEntry {
     taskID: string;
     /** ISO 8601 timestamp of the event. */
     timestamp: string;
-    /** Compliance outcome — 'compliant' | 'violation' | 'partial' | 'not_checked' | custom. */
+    /** Compliance outcome — 'compliant' | 'partial' | 'violated' | 'not_checked' | custom.
+     *  Legacy on-disk entries may carry the pre-fix spelling 'violation'; these are
+     *  normalized to 'violated' on the read path (see normalizeComplianceVerdict). */
     complianceVerdict: string;
     /** Optional free-text notes from the reviewer. */
     reviewerNotes?: string;
@@ -51,6 +53,16 @@ export interface PruneResult {
     /** Error message when the write/rename step fails; absent on success. */
     error?: string;
 }
+/**
+ * Normalize a compliance verdict to the canonical spelling.
+ * The sole producer (`skill-propagation-gate.ts`) lowercases the regex
+ * capture, yielding 'violated'.  Pre-fix on-disk entries may carry the
+ * legacy spelling 'violation'; this maps them to the canonical form so
+ * that every downstream comparison can use a single string.
+ *
+ * Exported for unit-testing.
+ */
+export declare function normalizeComplianceVerdict(verdict: string): string;
 /**
  * Test-only dependency-injection seam. Tests override these without
  * `mock.module` (which leaks across files in Bun's shared test-runner).