From 30c363375a097861319714ea27ec478cf232eb82 Mon Sep 17 00:00:00 2001
From: sudacode <suda@sudacode.com>
Date: Tue, 17 Feb 2026 03:19:09 -0800
Subject: [PATCH] fix: reject extra positional args after -- in launcher

---
 subminer | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/subminer b/subminer
index 166ad7a..0baf357 100755
--- a/subminer
+++ b/subminer
@@ -2466,7 +2466,11 @@ function parseArgs(
   }
 
   const positional = argv.slice(i);
-  if (positional.length > 0 && !parsed.target && !parsed.directory) {
+  if (positional.length > 0) {
+    if (parsed.target || parsed.directory) {
+      fail(`Unexpected positional argument: ${positional[0]}`);
+    }
+
     const target = positional[0];
     if (isUrlTarget(target)) {
       parsed.target = target;
@@ -2485,6 +2489,10 @@ function parseArgs(
         fail(`Not a file, directory, or supported URL: ${target}`);
       }
     }
+
+    if (positional.length > 1) {
+      fail(`Unexpected positional argument: ${positional[1]}`);
+    }
   }
 
   return parsed;