@commonlyai/cli 0.1.191 → 0.1.193

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonlyai/cli",
-  "version": "0.1.191",
+  "version": "0.1.193",
   "license": "Apache-2.0",
   "description": "The Commonly CLI — connect agents, manage pods, iterate fast",
   "type": "module",

package/src/lib/adapters/opencode.js

@@ -65,7 +65,7 @@ const ISOLATED_INSTANCE_PORT = 8766;
 const LOOPBACK_BRIDGE = fileURLToPath(new URL('../sandbox/opencode-loopback.mjs', import.meta.url));
 const TERMINATION_GRACE_MS = 5000;
 // Bump only with a passing real sandbox-exec smoke against the new version.
-const TESTED_OPENCODE_VERSIONS = Object.freeze(['1.18.35', '1.19.0']);
+const TESTED_OPENCODE_VERSIONS = Object.freeze(['1.18.35', '1.19.0', '1.19.4']);
 const ALLOW_UNTESTED_OPENCODE_VERSION_ENV = 'COMMONLY_OPENCODE_ALLOW_UNTESTED_VERSION';
 const VERSION_CHECK_TIMEOUT_MS = 5000;
 const OPENCODE_CONFIG_GITIGNORE = [

package/src/lib/adapters/qwen.js

@@ -1,4 +1,4 @@
-/** Qwen Code 0.25.1 wrapper. Public turns have fresh HOME, config and keys. */
+/** Qwen Code 0.25.1 and 0.26.2 wrapper. Public turns have fresh HOME, config and keys. */
 import { requireSeatModel } from './seat-model.js';
 import { spawn as childSpawn, spawnSync } from 'child_process';
 import { lstatSync, realpathSync } from 'fs';
@@ -17,7 +17,7 @@ import { resolveProviderKeyFile, startProviderProxy } from '../provider-proxy.js
 import { adapterFailure, spawnCredentials } from '../upstream-refusal.js';
 
 // Add a version only with a passing real clean-box sandbox smoke that names it.
-const TESTED_QWEN_VERSIONS = Object.freeze(['0.25.1']);
+const TESTED_QWEN_VERSIONS = Object.freeze(['0.25.1', '0.26.2']);
 const ALLOW_UNTESTED_QWEN_VERSION_ENV = 'COMMONLY_QWEN_ALLOW_UNTESTED_VERSION';
 const DEFAULT_TIMEOUT_MS = 15 * 60 * 1000;
 const TERMINATION_GRACE_MS = 5000;

package/src/lib/commit-attribution.js

@@ -70,13 +70,27 @@ const seatAddressId = (agentName, instanceId) => {
   return `sha256-${createHash('sha256').update(identity).digest('base64url')}`;
 };
 
+// This probe runs before every turn and blocks the listener's event loop, so a
+// git child that never exits (one waiting on an inherited stdin, or one whose
+// open() the OS holds pending consent) must not stall the seat. On timeout
+// spawnSync kills the child and sets result.error; the wrapper hook then
+// resolves the original hooks itself at commit time.
+const GIT_PROBE_TIMEOUT_MS = 5000;
+
 const resolveOriginalHooksPath = (cwd, env) => {
   const result = spawnSync(
     'git',
     ['rev-parse', '--path-format=absolute', '--git-path', 'hooks'],
-    { cwd, env, encoding: 'utf8' },
+    {
+      cwd,
+      env,
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+      timeout: GIT_PROBE_TIMEOUT_MS,
+      killSignal: 'SIGKILL',
+    },
   );
-  if (result.status !== 0 || !result.stdout.trim()) return null;
+  if (result.error || result.status !== 0 || !result.stdout?.trim()) return null;
   const hooksPath = resolve(result.stdout.trim());
   try {
     return statSync(hooksPath).isDirectory() ? hooksPath : null;