@navels/neal 0.2.0 → 0.3.0

package/dist/neal/providers/{generic-agentic-tools.js → openai-compatible-tools.js}

@@ -1,8 +1,6 @@
 /**
- * Generic-agentic tool layer: the six neal-defined AI SDK tools, jailed to a
- * root directory. Ported from `spike/generic-agentic/src/tools.ts` (copied,
- * never imported — the spike stays a frozen historical reference) with the
- * Phase 1 hardening from the integration plan:
+ * openai-compatible provider tool layer: the six neal-defined AI SDK tools,
+ * jailed to a root directory. Key mechanics:
  *
  * - an event-emission hook so tool execution surfaces the existing provider
  *   event grammar (`tool_started`, `tool_progress`, `command_completed`,
@@ -42,6 +40,7 @@ import { promises as fs } from 'node:fs';
 import path from 'node:path';
 import { tool } from 'ai';
 import { z } from 'zod';
+import { gitConfigIsolationEnv } from './git-config-isolation.js';
 export const RESULT_BYTE_LIMIT = 16 * 1024;
 export const READ_FILE_BYTE_LIMIT = 256 * 1024;
 export const GREP_MAX_MATCHING_LINES = 200;
@@ -386,7 +385,14 @@ function gitDiffBody(rootDir, base, head, relativePath, stat) {
 }
 function runBody(rootDir, command, timeoutMs) {
     return new Promise((resolve) => {
-        exec(command, { cwd: path.resolve(rootDir), timeout: timeoutMs, maxBuffer: 10 * 1024 * 1024 }, (error, stdout, stderr) => {
+        exec(command, {
+            cwd: path.resolve(rootDir),
+            // Agent-issued shell commands must not be able to write the operator's
+            // real global gitconfig. See git-config-isolation.ts.
+            env: { ...process.env, ...gitConfigIsolationEnv() },
+            timeout: timeoutMs,
+            maxBuffer: 10 * 1024 * 1024,
+        }, (error, stdout, stderr) => {
             const timedOut = Boolean(error && error.killed);
             let exitCode;
             if (error) {