axconfig 3.2.1 → 3.3.0

package/dist/agents/gemini-settings.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Gemini CLI settings utilities.
+ */
+type NestedRecord = Record<string, unknown>;
+/**
+ * Read existing settings.json, returning empty object if not found.
+ * Throws if file exists but contains invalid JSON to prevent data loss.
+ */
+export declare function readExistingSettings(settingsPath: string): NestedRecord;
+/**
+ * Merge existing settings with security.environmentVariableRedaction.enabled = false.
+ */
+export declare function mergeSecuritySettings(existing: NestedRecord): NestedRecord;
+export {};

package/dist/agents/gemini-settings.js

@@ -0,0 +1,36 @@
+/**
+ * Gemini CLI settings utilities.
+ */
+import { existsSync, readFileSync } from "node:fs";
+/**
+ * Read existing settings.json, returning empty object if not found.
+ * Throws if file exists but contains invalid JSON to prevent data loss.
+ */
+export function readExistingSettings(settingsPath) {
+    if (!existsSync(settingsPath)) {
+        return {};
+    }
+    try {
+        const content = readFileSync(settingsPath, "utf8");
+        return JSON.parse(content);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to parse existing settings at ${settingsPath}: ${message}`);
+    }
+}
+/**
+ * Merge existing settings with security.environmentVariableRedaction.enabled = false.
+ */
+export function mergeSecuritySettings(existing) {
+    const security = (existing.security ?? {});
+    const redaction = (security.environmentVariableRedaction ??
+        {});
+    return {
+        ...existing,
+        security: {
+            ...security,
+            environmentVariableRedaction: { ...redaction, enabled: false },
+        },
+    };
+}

package/dist/agents/gemini.js

@@ -8,10 +8,11 @@
  * - Bash patterns via commandPrefix
  * - Does NOT support path restrictions
  */
-import { existsSync, mkdirSync, readFileSync } from "node:fs";
+import { mkdirSync } from "node:fs";
 import path from "node:path";
 import { atomicWriteFileSync } from "../atomic-write.js";
 import { registerConfigBuilder } from "../builder.js";
+import { mergeSecuritySettings, readExistingSettings, } from "./gemini-settings.js";
 // Re-export reader
 export { geminiConfigReader } from "./gemini-reader.js";
 /** Gemini CLI tool name mapping */
@@ -56,23 +57,6 @@ commandPrefix = ${prefixValue}
 decision = "${decision}"
 priority = ${priority}`;
 }
-/**
- * Read existing settings.json, returning empty object if not found.
- * Throws if file exists but contains invalid JSON to prevent data loss.
- */
-function readExistingSettings(settingsPath) {
-    if (!existsSync(settingsPath)) {
-        return {};
-    }
-    try {
-        const content = readFileSync(settingsPath, "utf8");
-        return JSON.parse(content);
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        throw new Error(`Failed to parse existing settings at ${settingsPath}: ${message}`);
-    }
-}
 /**
  * Build Gemini CLI configuration.
  *
@@ -157,7 +141,10 @@ function build(config, output) {
     // Write settings.json, preserving existing settings (e.g., model)
     const settingsPath = path.join(output, "settings.json");
     const existingSettings = readExistingSettings(settingsPath);
-    atomicWriteFileSync(settingsPath, JSON.stringify(existingSettings, undefined, 2));
+    // Disable Gemini's environment variable redaction so shell commands
+    // can access tokens like GH_TOKEN in CI environments
+    const settings = mergeSecuritySettings(existingSettings);
+    atomicWriteFileSync(settingsPath, JSON.stringify(settings, undefined, 2));
     return {
         ok: true,
         env: { GEMINI_DIR: output },

package/package.json

@@ -2,7 +2,7 @@
   "name": "axconfig",
   "author": "Łukasz Jerciński",
   "license": "MIT",
-  "version": "3.2.1",
+  "version": "3.3.0",
   "description": "Unified configuration management for AI coding agents - common API for permissions, settings, and config across Claude Code, Codex, Gemini CLI, and OpenCode",
   "repository": {
     "type": "git",