axconfig 3.3.0 → 3.4.1

package/dist/agents/gemini-settings.d.ts

@@ -1,14 +1,16 @@
 /**
- * Gemini CLI settings utilities.
+ * Gemini settings.json helpers.
  */
-type NestedRecord = Record<string, unknown>;
 /**
  * Read existing settings.json, returning empty object if not found.
  * Throws if file exists but contains invalid JSON to prevent data loss.
  */
-export declare function readExistingSettings(settingsPath: string): NestedRecord;
+export declare function readExistingSettings(settingsPath: string): Record<string, unknown>;
 /**
- * Merge existing settings with security.environmentVariableRedaction.enabled = false.
+ * Disable Gemini's environment variable redaction for CI compatibility.
+ *
+ * Gemini CLI sanitizes environment variables in GitHub Actions, which blocks
+ * access to REAL_HOME, GH_TOKEN, and other vars needed for shell commands.
+ * Disabling redaction allows all parent env vars to pass through.
  */
-export declare function mergeSecuritySettings(existing: NestedRecord): NestedRecord;
-export {};
+export declare function disableEnvironmentVariableRedaction(existingSettings: Record<string, unknown>): Record<string, unknown>;

package/dist/agents/gemini-settings.js

@@ -1,5 +1,5 @@
 /**
- * Gemini CLI settings utilities.
+ * Gemini settings.json helpers.
  */
 import { existsSync, readFileSync } from "node:fs";
 /**
@@ -20,17 +20,21 @@ export function readExistingSettings(settingsPath) {
     }
 }
 /**
- * Merge existing settings with security.environmentVariableRedaction.enabled = false.
+ * Disable Gemini's environment variable redaction for CI compatibility.
+ *
+ * Gemini CLI sanitizes environment variables in GitHub Actions, which blocks
+ * access to REAL_HOME, GH_TOKEN, and other vars needed for shell commands.
+ * Disabling redaction allows all parent env vars to pass through.
  */
-export function mergeSecuritySettings(existing) {
-    const security = (existing.security ?? {});
-    const redaction = (security.environmentVariableRedaction ??
-        {});
+export function disableEnvironmentVariableRedaction(existingSettings) {
+    const existingSecurity = existingSettings.security ?? {};
     return {
-        ...existing,
+        ...existingSettings,
         security: {
-            ...security,
-            environmentVariableRedaction: { ...redaction, enabled: false },
+            ...existingSecurity,
+            environmentVariableRedaction: {
+                enabled: false,
+            },
         },
     };
 }

package/dist/agents/gemini.js

@@ -12,9 +12,9 @@ import { mkdirSync } from "node:fs";
 import path from "node:path";
 import { atomicWriteFileSync } from "../atomic-write.js";
 import { registerConfigBuilder } from "../builder.js";
-import { mergeSecuritySettings, readExistingSettings, } from "./gemini-settings.js";
 // Re-export reader
 export { geminiConfigReader } from "./gemini-reader.js";
+import { disableEnvironmentVariableRedaction, readExistingSettings, } from "./gemini-settings.js";
 /** Gemini CLI tool name mapping */
 const TOOL_MAP = {
     read: "read_file",
@@ -138,13 +138,11 @@ function build(config, output) {
     const policyPath = path.join(policiesDirectory, "axconfig.toml");
     const policyContent = rules.filter((r) => r !== "").join("\n\n");
     atomicWriteFileSync(policyPath, policyContent || "# No rules\n");
-    // Write settings.json, preserving existing settings (e.g., model)
+    // Write settings.json, preserving existing settings and disabling env var redaction
     const settingsPath = path.join(output, "settings.json");
     const existingSettings = readExistingSettings(settingsPath);
-    // Disable Gemini's environment variable redaction so shell commands
-    // can access tokens like GH_TOKEN in CI environments
-    const settings = mergeSecuritySettings(existingSettings);
-    atomicWriteFileSync(settingsPath, JSON.stringify(settings, undefined, 2));
+    const mergedSettings = disableEnvironmentVariableRedaction(existingSettings);
+    atomicWriteFileSync(settingsPath, JSON.stringify(mergedSettings, undefined, 2));
     return {
         ok: true,
         env: { GEMINI_DIR: output },

package/package.json

@@ -2,7 +2,7 @@
   "name": "axconfig",
   "author": "Łukasz Jerciński",
   "license": "MIT",
-  "version": "3.3.0",
+  "version": "3.4.1",
   "description": "Unified configuration management for AI coding agents - common API for permissions, settings, and config across Claude Code, Codex, Gemini CLI, and OpenCode",
   "repository": {
     "type": "git",