axconfig 3.4.0 → 3.4.1

package/dist/agents/gemini-settings.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Gemini settings.json helpers.
+ */
+/**
+ * Read existing settings.json, returning empty object if not found.
+ * Throws if file exists but contains invalid JSON to prevent data loss.
+ */
+export declare function readExistingSettings(settingsPath: string): Record<string, unknown>;
+/**
+ * Disable Gemini's environment variable redaction for CI compatibility.
+ *
+ * Gemini CLI sanitizes environment variables in GitHub Actions, which blocks
+ * access to REAL_HOME, GH_TOKEN, and other vars needed for shell commands.
+ * Disabling redaction allows all parent env vars to pass through.
+ */
+export declare function disableEnvironmentVariableRedaction(existingSettings: Record<string, unknown>): Record<string, unknown>;

package/dist/agents/gemini-settings.js

@@ -0,0 +1,40 @@
+/**
+ * Gemini settings.json helpers.
+ */
+import { existsSync, readFileSync } from "node:fs";
+/**
+ * Read existing settings.json, returning empty object if not found.
+ * Throws if file exists but contains invalid JSON to prevent data loss.
+ */
+export function readExistingSettings(settingsPath) {
+    if (!existsSync(settingsPath)) {
+        return {};
+    }
+    try {
+        const content = readFileSync(settingsPath, "utf8");
+        return JSON.parse(content);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to parse existing settings at ${settingsPath}: ${message}`);
+    }
+}
+/**
+ * Disable Gemini's environment variable redaction for CI compatibility.
+ *
+ * Gemini CLI sanitizes environment variables in GitHub Actions, which blocks
+ * access to REAL_HOME, GH_TOKEN, and other vars needed for shell commands.
+ * Disabling redaction allows all parent env vars to pass through.
+ */
+export function disableEnvironmentVariableRedaction(existingSettings) {
+    const existingSecurity = existingSettings.security ?? {};
+    return {
+        ...existingSettings,
+        security: {
+            ...existingSecurity,
+            environmentVariableRedaction: {
+                enabled: false,
+            },
+        },
+    };
+}

package/dist/agents/gemini.js

@@ -8,12 +8,13 @@
  * - Bash patterns via commandPrefix
  * - Does NOT support path restrictions
  */
-import { existsSync, mkdirSync, readFileSync } from "node:fs";
+import { mkdirSync } from "node:fs";
 import path from "node:path";
 import { atomicWriteFileSync } from "../atomic-write.js";
 import { registerConfigBuilder } from "../builder.js";
 // Re-export reader
 export { geminiConfigReader } from "./gemini-reader.js";
+import { disableEnvironmentVariableRedaction, readExistingSettings, } from "./gemini-settings.js";
 /** Gemini CLI tool name mapping */
 const TOOL_MAP = {
     read: "read_file",
@@ -56,23 +57,6 @@ commandPrefix = ${prefixValue}
 decision = "${decision}"
 priority = ${priority}`;
 }
-/**
- * Read existing settings.json, returning empty object if not found.
- * Throws if file exists but contains invalid JSON to prevent data loss.
- */
-function readExistingSettings(settingsPath) {
-    if (!existsSync(settingsPath)) {
-        return {};
-    }
-    try {
-        const content = readFileSync(settingsPath, "utf8");
-        return JSON.parse(content);
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        throw new Error(`Failed to parse existing settings at ${settingsPath}: ${message}`);
-    }
-}
 /**
  * Build Gemini CLI configuration.
  *
@@ -154,10 +138,11 @@ function build(config, output) {
     const policyPath = path.join(policiesDirectory, "axconfig.toml");
     const policyContent = rules.filter((r) => r !== "").join("\n\n");
     atomicWriteFileSync(policyPath, policyContent || "# No rules\n");
-    // Write settings.json, preserving existing settings (e.g., model)
+    // Write settings.json, preserving existing settings and disabling env var redaction
     const settingsPath = path.join(output, "settings.json");
     const existingSettings = readExistingSettings(settingsPath);
-    atomicWriteFileSync(settingsPath, JSON.stringify(existingSettings, undefined, 2));
+    const mergedSettings = disableEnvironmentVariableRedaction(existingSettings);
+    atomicWriteFileSync(settingsPath, JSON.stringify(mergedSettings, undefined, 2));
     return {
         ok: true,
         env: { GEMINI_DIR: output },

package/package.json

@@ -2,7 +2,7 @@
   "name": "axconfig",
   "author": "Łukasz Jerciński",
   "license": "MIT",
-  "version": "3.4.0",
+  "version": "3.4.1",
   "description": "Unified configuration management for AI coding agents - common API for permissions, settings, and config across Claude Code, Codex, Gemini CLI, and OpenCode",
   "repository": {
     "type": "git",