@mrciphersmith/keryx 0.2.102 → 0.2.105

package/dist/cli.js

@@ -10266,6 +10266,28 @@ var init_templates3 = __esm(() => {
   init_default_tasks();
 });
 
+// src/lib/git-env.ts
+function withoutGitDiscoveryOverrides(env) {
+  const clean = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (value !== undefined && !GIT_DISCOVERY_OVERRIDE_VARS.includes(key)) {
+      clean[key] = value;
+    }
+  }
+  return clean;
+}
+var GIT_DISCOVERY_OVERRIDE_VARS;
+var init_git_env = __esm(() => {
+  GIT_DISCOVERY_OVERRIDE_VARS = [
+    "GIT_DIR",
+    "GIT_WORK_TREE",
+    "GIT_INDEX_FILE",
+    "GIT_OBJECT_DIRECTORY",
+    "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+    "GIT_COMMON_DIR"
+  ];
+});
+
 // src/metrics/provenance.ts
 async function collectGitProvenance(cwd) {
   const [commit, branch, worktree] = await Promise.all([
@@ -11676,7 +11698,12 @@ function pathExistsSync(filePath) {
   return existsSync11(filePath);
 }
 async function runCommand(command, cwd) {
-  const proc = Bun.spawn(command, { cwd, stdout: "pipe", stderr: "pipe" });
+  const proc = Bun.spawn(command, {
+    cwd,
+    env: withoutGitDiscoveryOverrides(process.env),
+    stdout: "pipe",
+    stderr: "pipe"
+  });
   const [stdout, stderr, exitCode] = await Promise.all([
     new Response(proc.stdout).text(),
     new Response(proc.stderr).text(),
@@ -11839,6 +11866,7 @@ function normalizePath3(file) {
 var IGNORED_DIRS, TEST_FILE_RE2, SOURCE_FILE_RE, CONFIG_FILE_RE, CI_FILE_RE, INSTRUCTION_FILE_RE, IMPORT_RE, DEFAULT_TESTING_CONFIG, BASE_STRATEGIES, BUN_LOCKFILES;
 var init_service2 = __esm(() => {
   init_fs();
+  init_git_env();
   init_lifecycle();
   init_guard2();
   init_capability();
@@ -27379,9 +27407,6 @@ var init_slate_terminal_state = __esm(() => {
 });
 
 // src/commands/agent.ts
-function isDurableToolCall(name, risk) {
-  return risk !== "read" || DURABLE_READ_TOOL_NAMES.has(name);
-}
 function resolveAgentMaxRounds(env = process.env) {
   const raw = env[ENV_AGENT_MAX_ROUNDS];
   if (raw === undefined || raw.trim().length === 0) {
@@ -27997,7 +28022,8 @@ async function runAgentTurnCore(io, deps, history, userLine, options = {}) {
         return {};
       }
       const risk = toolByName.get(call.name)?.definition.risk;
-      if (isDurableToolCall(call.name, risk) && (untrustedContentSeen || batchContainsUntrustedWeb)) {
+      const isPureReadTool = risk === "read" && !DURABLE_READ_TOOL_NAMES.has(call.name);
+      if (!isPureReadTool && (untrustedContentSeen || batchContainsUntrustedWeb)) {
         const result = {
           output: "tool blocked: external web content cannot authorize further tool calls in this turn",
           isError: true
@@ -45321,6 +45347,7 @@ init_templates3();
 init_service2();
 
 // src/testing/templates.ts
+init_git_env();
 function renderTestingConfig(input) {
   return `${JSON.stringify({
     schemaVersion: 1,
@@ -45513,6 +45540,11 @@ function renderTestingPrePushHook() {
     return 0
   fi
 
+  # Git exports GIT_DIR to hooks. Inherited by the suite, it redirects every
+  # fixture repo a test creates onto this checkout, so a fixture's
+  # 'git config user.name' rewrites the identity of the repo being pushed.
+  unset ${GIT_DISCOVERY_OVERRIDE_VARS.join(" ")}
+
   if command -v keryx >/dev/null 2>&1; then
     keryx test run --changed --strict
     return $?
@@ -48260,7 +48292,7 @@ import path47 from "path";
 // package.json
 var package_default = {
   name: "@mrciphersmith/keryx",
-  version: "0.2.102",
+  version: "0.2.105",
   description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   private: false,
   publishConfig: {
@@ -79557,23 +79589,10 @@ function builtinReadOnlyTools(root) {
 
 // src/harness/tool/builtin/apply-patch-tool.ts
 init_patch_risk();
+init_git_env();
 var MAX_OUTPUT_BYTES = 20000;
-var GIT_DISCOVERY_OVERRIDE_VARS = [
-  "GIT_DIR",
-  "GIT_WORK_TREE",
-  "GIT_INDEX_FILE",
-  "GIT_OBJECT_DIRECTORY",
-  "GIT_ALTERNATE_OBJECT_DIRECTORIES",
-  "GIT_COMMON_DIR"
-];
 function gitDiscoveryCleanEnv() {
-  const env = {};
-  for (const [key, value] of Object.entries(process.env)) {
-    if (value !== undefined && !GIT_DISCOVERY_OVERRIDE_VARS.includes(key)) {
-      env[key] = value;
-    }
-  }
-  return env;
+  return withoutGitDiscoveryOverrides(process.env);
 }
 async function spawnGitApply(args, patch, cwd) {
   try {

package/dist/core.js

@@ -16331,6 +16331,25 @@ import { existsSync as existsSync7 } from "fs";
 import { mkdir as mkdir21, readFile as readFile29, readdir as readdir10, writeFile as writeFile17 } from "fs/promises";
 import path58 from "path";
 
+// src/lib/git-env.ts
+var GIT_DISCOVERY_OVERRIDE_VARS = [
+  "GIT_DIR",
+  "GIT_WORK_TREE",
+  "GIT_INDEX_FILE",
+  "GIT_OBJECT_DIRECTORY",
+  "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+  "GIT_COMMON_DIR"
+];
+function withoutGitDiscoveryOverrides(env) {
+  const clean = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (value !== undefined && !GIT_DISCOVERY_OVERRIDE_VARS.includes(key)) {
+      clean[key] = value;
+    }
+  }
+  return clean;
+}
+
 // src/metrics/lifecycle.ts
 init_fs();
 init_guard();
@@ -17244,7 +17263,12 @@ function pathExistsSync(filePath) {
   return existsSync7(filePath);
 }
 async function runCommand2(command, cwd) {
-  const proc = Bun.spawn(command, { cwd, stdout: "pipe", stderr: "pipe" });
+  const proc = Bun.spawn(command, {
+    cwd,
+    env: withoutGitDiscoveryOverrides(process.env),
+    stdout: "pipe",
+    stderr: "pipe"
+  });
   const [stdout, stderr, exitCode] = await Promise.all([
     new Response(proc.stdout).text(),
     new Response(proc.stderr).text(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.2.102",
+  "version": "0.2.105",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {