@archme/cli 0.14.0 → 0.14.2

package/dist/cli.js

@@ -10807,7 +10807,9 @@ function digestSpawnOpts(o2) {
     // tool-less unless the caller wired MCP reads
     builtinTools: [],
     timeoutMs: DIGEST_TIMEOUT_MS,
-    model: o2.model
+    model: o2.model,
+    settingSources: "user"
+    // never a project's .claude/settings.json hooks on the host
   };
 }
 function isCleanDigestExit(res) {
@@ -17243,7 +17245,9 @@ function observeGithubPull(p) {
     mergedAt: p.merged_at ?? null,
     closedAt: p.closed_at ?? null,
     // Before the merge it is GitHub's throwaway test merge.
-    mergeCommitSha: p.merged_at ? p.merge_commit_sha ?? null : null
+    mergeCommitSha: p.merged_at ? p.merge_commit_sha ?? null : null,
+    headRepo: p.head.repo?.full_name ?? null,
+    baseRepo: p.base.repo?.full_name ?? null
   };
 }
 function metaKey(o2) {
@@ -17280,6 +17284,8 @@ function toItem(o2, action, sent) {
     closed_at: o2.closedAt,
     merge_commit_sha: o2.mergeCommitSha,
     body: o2.body,
+    head_repo: o2.headRepo,
+    ...o2.baseRepo ? { base_repo: o2.baseRepo } : {},
     ...action === "synchronize" && sent.seq !== void 0 ? { seq: sent.seq } : {}
   };
 }
@@ -18007,7 +18013,12 @@ async function pollPrsOnce(entry, deps) {
     const kinds = new Map(results.map((r) => [r.number, r.kind]));
     for (const item of plan.send) {
       const kind = kinds.get(item.number);
-      if (kind !== void 0) {
+      if (kind === "held") {
+        const fork = !!item.head_repo && !!item.base_repo && item.head_repo.toLowerCase() !== item.base_repo.toLowerCase();
+        deps.log(
+          fork ? `  ${repo}: PR #${item.number} ${item.action} \u2192 held: it comes from a fork, and a locally watched repo does not review fork pull requests (there is no way to approve one without the GitHub App).` : `  ${repo}: PR #${item.number} ${item.action} \u2192 held: the server did not approve it for review (its head repo could not be confirmed as this repo, e.g. GitHub did not report it).`
+        );
+      } else if (kind !== void 0) {
         deps.log(`  ${repo}: PR #${item.number} ${item.action} \u2192 ${kind}`);
       }
       if (kind !== void 0 && !UNDELIVERED.has(kind)) continue;
@@ -19027,7 +19038,7 @@ var init_appleContainer = __esm({
     STDERR_CAP_BYTES = 1024 * 1024;
     INIT_MEMORY_MIB = 256;
     NAME_RE = /^[a-z0-9][a-z0-9_.-]*$/;
-    ENV_KEY_RE = /^[A-Z_][A-Z0-9_]*$/;
+    ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
     LABEL_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
     CONTROL_RE = /[\u0000\n\r]/;
     obj = (v) => v && typeof v === "object" ? v : {};
@@ -22104,7 +22115,9 @@ async function spawnTriage(jobId, mcpConfigPath, cwd, opts) {
     model: opts.model,
     allowedTools: TRIAGE_ALLOWED_TOOLS,
     builtinTools: TRIAGE_BUILTIN_TOOLS,
-    jsonOutput: true
+    jsonOutput: true,
+    settingSources: "user"
+    // the checkout is the customer's; see runJob's spawn
   });
   inFlight.set(jobId, proc);
   const result = await proc;
@@ -22466,7 +22479,10 @@ async function runJob(ctx, job, claimDeviceId) {
       // Single-object JSON so we can read the served model + usage/cost. stdout
       // is then one raw JSON blob — tee it SILENTLY (unreadable in `daemon -f`)
       // and log the parsed `.result` after exit instead.
-      jsonOutput: true
+      jsonOutput: true,
+      // The checkout is the customer's: never load its .claude/settings.json
+      // (hooks there would run as shell commands on this host).
+      settingSources: "user"
     });
     inFlight.set(job.id, proc);
     const getStdout = teeStream(proc.stdout, `[${job.id}] claude> `, { silent: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archme/cli",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "description": "Map your codebase into a living architecture diagram: run `archme init` in a repo to scan it, `archme daemon start` to keep it current on every commit.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",

package/sandbox-image.json

@@ -1,4 +1,4 @@
 {
   "image": "ghcr.io/architectme/archme-job",
-  "digest": "sha256:05ee7b0ceb0e47fd134b77c47cb05bb1a625da38e886700fd0cee50a547f7256"
+  "digest": "sha256:e65cbf5dbcd3e9289e54c140922a98904ce2c7fa28402bec6a909202bc1b7b78"
 }