bigpowers 2.90.0 → 2.90.1

package/.gemini/extensions/bigpowers/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.90.0",
+  "version": "2.90.1",
   "description": "80 skills — 73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "keywords": [
     "gemini-extension"

package/.pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.90.0",
+  "version": "2.90.1",
   "description": "80 skills — 73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "keywords": [
     "pi-package"

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [2.90.1](https://github.com/danielvm-git/bigpowers/compare/v2.90.0...v2.90.1) (2026-11-03)
+
+
+### Bug Fixes
+
+* **omp:** keep the tool_call branch probe quiet outside a git repo ([#190](https://github.com/danielvm-git/bigpowers/issues/190)) ([bcacf33](https://github.com/danielvm-git/bigpowers/commit/bcacf33ec72a8705c6b0dbbcf91f2ea2bed4b406)), closes [#189](https://github.com/danielvm-git/bigpowers/issues/189)
+
 # [2.90.0](https://github.com/danielvm-git/bigpowers/compare/v2.89.1...v2.90.0) (2026-11-03)
 
 

package/extensions/omp-hooks.ts

@@ -205,11 +205,19 @@ function inGitRepo(cwd?: string): boolean {
 }
 
 function currentBranch(cwd: string): string {
+  // Probing a directory that is not a repository makes git print
+  // "fatal: not a git repository (or any of the parent directories): .git".
+  // execSync inherits fd 2 when no stdio option is given, so that message is
+  // painted straight over the TUI input line and vanishes on the next redraw
+  // (BUG-2026-11-03-omp-hooks-stderr-leak, issue #189). Ask inGitRepo() first —
+  // it is silent — so a non-repo target spawns no git process at all.
+  if (!inGitRepo(cwd)) return "unknown";
   try {
     return execSync("git rev-parse --abbrev-ref HEAD", {
       encoding: "utf-8",
       timeout: 3000,
       cwd,
+      stdio: ["ignore", "pipe", "ignore"],
     }).trim();
   } catch {
     return "unknown";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.90.0",
+  "version": "2.90.1",
   "description": "73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "main": "index.js",
   "scripts": {

package/scripts/omp-smoke.ts

@@ -10,7 +10,9 @@
 // fails here exactly as it does in real pi, instead of silently passing.
 // See pi 0.85.1 src/core/extensions/loader.ts (createExtensionRuntime).
 
-import { readFileSync } from "node:fs";
+import { mkdtempSync, readFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import bigpowers from "../extensions/omp-hooks.ts";
 
 type AnyObj = Record<string, unknown>;
@@ -118,3 +120,27 @@ console.log(JSON.stringify({
   sendCalls,
   runDetails: runResult.details,
 }));
+
+// Silent-probe check (BUG-2026-11-03-omp-hooks-stderr-leak, issue #189).
+// The tool_call handler resolves the branch of the directory the command will
+// run in. When that directory is not a repository, a git probe that inherits
+// fd 2 paints "fatal: not a git repository" over the TUI. The handler must be
+// invisible: validate-omp-extension.sh runs this mode with stderr captured and
+// fails on any leaked git noise.
+if (process.env.OMP_SMOKE_SILENT_TOOL_CALL === "1") {
+  const toolCall = events.get("tool_call");
+  if (typeof toolCall !== "function") throw new Error("tool_call handler not registered");
+  const nonRepo = mkdtempSync(join(tmpdir(), "omp-nonrepo-"));
+  try {
+    const verdict = await toolCall({
+      toolName: "bash",
+      input: { command: `cd ${nonRepo} && ls` },
+    });
+    // Fail-closed contract: a harmless command in a non-repo dir is not blocked.
+    if (verdict && (verdict as { block?: boolean }).block) {
+      throw new Error(`harmless command in a non-repo dir was blocked: ${JSON.stringify(verdict)}`);
+    }
+  } finally {
+    rmSync(nonRepo, { recursive: true, force: true });
+  }
+}

package/scripts/validate-omp-extension.sh

@@ -121,6 +121,28 @@ else
   rm -f "$SMOKE_ERR"
 fi
 
+# ── 7. tool_call is silent outside a repo (BUG-2026-11-03, issue #189) ────────
+# A guard that inspects the command must not paint git's stderr on the agent
+# TTY. The probe runs the REAL tool_call handler with a command that cds into a
+# directory that is not a repository; any leaked "fatal:" lands on this
+# script's captured stderr because execSync inherits fd 2.
+echo "--- [OMP] tool_call stays quiet outside a git repo ---"
+if [[ ! -f "$SMOKE" ]] || ! command -v node >/dev/null 2>&1; then
+  echo "warn: node or $SMOKE unavailable — skipping the silent-probe check"
+else
+  SILENT_ERR=$(mktemp)
+  if OMP_SMOKE_SILENT_TOOL_CALL=1 node "$SMOKE" >/dev/null 2>"$SILENT_ERR"; then
+    if grep -qi 'fatal: not a git repository' "$SILENT_ERR"; then
+      ta_err "tool_call leaked git stderr onto the TUI: $(grep -i -m1 'fatal: not a git repository' "$SILENT_ERR")"
+    else
+      ta_ok "tool_call writes nothing to stderr for a non-repo target"
+    fi
+  else
+    ta_err "silent tool_call probe failed — $(head -3 "$SILENT_ERR" 2>/dev/null | tr '\n' ' ')"
+  fi
+  rm -f "$SILENT_ERR"
+fi
+
 # ── Summary ────────────────────────────────────────────────────────────────
 echo "---"
 if [[ "$ERRORS" -eq 0 ]]; then