@commonlyai/cli 0.1.84 → 0.1.86

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonlyai/cli",
-  "version": "0.1.84",
+  "version": "0.1.86",
   "license": "Apache-2.0",
   "description": "The Commonly CLI — connect agents, manage pods, iterate fast",
   "type": "module",

package/src/lib/api.js

@@ -20,14 +20,34 @@ export const sessionExpiredMessage = ({ instanceKey, baseUrl }) => (
   `Session for ${instanceKey} (${baseUrl}) has expired.\nRun: commonly login --instance ${instanceKey}`
 );
 
+// A non-JSON error body is usually an edge proxy's HTML page; a Cloudflare
+// tunnel error is ~120 lines, and the message used to be all of them, so every
+// failed poll dumped a whole page into the agent log. The message names the
+// page by its <title>; err.body keeps the full text for callers that classify it.
+const MAX_TEXT_ERROR = 300;
+const summarizeTextError = (text, status) => {
+  const trimmed = String(text || '').trim();
+  if (!trimmed) return null;
+  if (/^<(?:!doctype|html)/i.test(trimmed) || /<html[\s>]/i.test(trimmed)) {
+    const title = trimmed.match(/<title[^>]*>([\s\S]*?)<\/title>/i)?.[1]?.replace(/\s+/g, ' ').trim();
+    return title ? `HTTP ${status}: ${title}` : `HTTP ${status} (HTML error page)`;
+  }
+  const line = trimmed.replace(/\s+/g, ' ');
+  return line.length > MAX_TEXT_ERROR ? `${line.slice(0, MAX_TEXT_ERROR)}…` : line;
+};
+
 const handleResponse = async (res, session = null) => {
   const text = await res.text();
   let body;
-  try { body = JSON.parse(text); } catch { body = { message: text }; }
+  let isJson = true;
+  try { body = JSON.parse(text); } catch { body = { message: text }; isJson = false; }
   if (!res.ok) {
+    const serverMessage = isJson
+      ? body?.error || body?.message || body?.msg
+      : summarizeTextError(text, res.status);
     const msg = res.status === 401 && session && knownSessionFailure(body)
       ? sessionExpiredMessage(session)
-      : body?.error || body?.message || body?.msg || `HTTP ${res.status}`;
+      : serverMessage || `HTTP ${res.status}`;
     const err = new Error(msg);
     err.status = res.status;
     err.body = body;

package/src/lib/commit-attribution.js

@@ -109,7 +109,17 @@ GIT_CONFIG_COUNT=$base_count
 export GIT_CONFIG_COUNT
 unset "GIT_CONFIG_KEY_$config_index" "GIT_CONFIG_VALUE_$config_index"
 
-original_hooks=\${COMMONLY_AGENT_ORIGINAL_HOOKS_PATH:-}
+# Read the target repository's file-backed config while excluding process-level
+# GIT_CONFIG_* overlays inherited from the workspace seat.
+if original_hooks=$(GIT_CONFIG_COUNT=0 git config --path --get core.hooksPath 2>/dev/null); then
+  :
+else
+  git_common_dir=$(GIT_CONFIG_COUNT=0 git rev-parse --path-format=absolute --git-common-dir 2>/dev/null) || git_common_dir=
+  original_hooks=
+  if [ -n "$git_common_dir" ]; then
+    original_hooks="$git_common_dir/hooks"
+  fi
+fi
 if [ -n "$original_hooks" ] && [ "$original_hooks" != "$COMMONLY_AGENT_HOOKS_PATH" ]; then
   original_hook="$original_hooks/$hook_name"
   if [ -x "$original_hook" ]; then
@@ -167,6 +177,9 @@ export const prepareCommitAttribution = ({
     COMMONLY_AGENT_GIT_CONFIG_INDEX: String(configIndex),
     COMMONLY_AGENT_GIT_CONFIG_BASE_COUNT: String(configIndex),
     COMMONLY_AGENT_HOOKS_PATH: hooksDirectory,
+    // The sandbox adapters allow the workspace's existing hook files. The
+    // proxy resolves the target repo's path at hook time; a confined seat may
+    // fail closed if that repo's hook lies outside the workspace allowlist.
     ...(originalHooksPath ? { COMMONLY_AGENT_ORIGINAL_HOOKS_PATH: originalHooksPath } : {}),
     COMMONLY_AGENT_SEAT_NAME: cleanSingleLine(displayName || agentName, 'agent'),
     COMMONLY_AGENT_SEAT_ID: seatAddressId(agentName, instanceId),