codeply-cli 0.5.4 → 0.5.6

package/lib/cloud.mjs

@@ -792,12 +792,20 @@ export async function downloadShot({ token, repo, path: rel, dest, apiUrl, fetch
  * Before coding: is the local branch behind GitHub (a cloud run merged work
  * into it)? Only for projects whose cloud target is their own repo.
  */
-export async function checkBehind(cwd) {
+/**
+ * Background git talks to GitHub with Craft's own GitHub login (when given),
+ * never through Windows' credential manager, which would pop up a sign-in
+ * window every time Craft checks for new commits.
+ */
+const QUIET_GIT = ['-c', 'credential.helper='];
+const quietAuth = (token) => (token ? { server: 'https://github.com', token } : undefined);
+
+export async function checkBehind(cwd, { token } = {}) {
   try {
     const branch = await git(cwd, ['rev-parse', '--abbrev-ref', 'HEAD']);
     const upstream = await git(cwd, ['rev-parse', '--abbrev-ref', '--symbolic-full-name', '@{u}']).catch(() => null);
     if (!upstream) return { ok: false, reason: 'no upstream' };
-    await git(cwd, ['fetch', '-q', '--no-tags', upstream.split('/')[0]]);
+    await git(cwd, [...QUIET_GIT, 'fetch', '-q', '--no-tags', upstream.split('/')[0]], { auth: quietAuth(token) });
     const [behind, ahead] = (await git(cwd, ['rev-list', '--left-right', '--count', `${upstream}...HEAD`])).split(/\s+/).map(Number);
     const dirty = !!(await git(cwd, ['status', '--porcelain', '--untracked-files=no']));
     const latest = behind ? (await git(cwd, ['log', '-1', '--format=%s', upstream]).catch(() => '')) : '';
@@ -806,14 +814,14 @@ export async function checkBehind(cwd) {
 }
 
 /** Pull what GitHub has (a fast-forward when possible, else a merge; stashes local edits around it). */
-export async function pullLatest(cwd) {
-  const st = await checkBehind(cwd);
+export async function pullLatest(cwd, { token } = {}) {
+  const st = await checkBehind(cwd, { token });
   if (!st.ok) throw new Error(`Can't pull: ${st.reason}.`);
   if (!st.behind) return { pulled: 0 };
   let stashed = false;
   if (st.dirty) { await git(cwd, ['stash', 'push', '-q', '-m', 'craft: before pulling cloud changes']); stashed = true; }
   try {
-    await git(cwd, ['-c', 'user.name=Codeply Craft', '-c', 'user.email=craft-bot@users.noreply.github.com', 'pull', '-q', '--no-rebase', '--no-edit']);
+    await git(cwd, [...QUIET_GIT, '-c', 'user.name=Codeply Craft', '-c', 'user.email=craft-bot@users.noreply.github.com', 'pull', '-q', '--no-rebase', '--no-edit'], { auth: quietAuth(token) });
   } catch (e) {
     // A conflicting pull is undone, so the project is never left half-merged.
     const conflicted = (await git(cwd, ['diff', '--name-only', '--diff-filter=U']).catch(() => '')).split('\n').filter(Boolean);
@@ -1209,7 +1217,9 @@ async function runOneTask({ task, env, cwd, api, files, repo, token, serverUrl,
     await pushProgress(hist.messages.length ? `Continuing the chat (${hist.messages.length / 2} earlier turns).` : 'Working on it.', true);
     // Risky actions (deploys...) ask the person unless the repo's Cloud permission is "full".
     const ASK_WAIT_MS = 15 * 60 * 1000;
-    const rules = ciApprove(cwd, { permission: env.CRAFT_PERMISSIONS, canAsk: true });
+    // Only a repo with the current workflow passes CRAFT_PERMISSIONS (empty when unset): its
+    // Craft and phone can show the question. An older setup keeps the old rule (no) until updated.
+    const rules = ciApprove(cwd, { permission: env.CRAFT_PERMISSIONS, canAsk: env.CRAFT_PERMISSIONS !== undefined });
     const approve = async (req) => {
       const v = await rules(req);
       if (v !== 'ask') return v;

package/lib/github-agent.mjs

@@ -116,7 +116,7 @@ export function git(cwd, args, { auth, input } = {}) {
   const full = auth ? ['-c', `http.${auth.server}/.extraheader=AUTHORIZATION: basic ${Buffer.from(`x-access-token:${auth.token}`).toString('base64')}`, ...args] : args;
   const verb = args.find((a, i) => !a.startsWith('-') && !(i > 0 && /^--(git-dir|work-tree)$/.test(args[i - 1])) && !(i > 0 && args[i - 1] === '-c')) || args[0];
   return new Promise((resolve, reject) => {
-    const child = execFile('git', full, { cwd, timeout: 300000, windowsHide: true, maxBuffer: 256 * 1024 * 1024, env: { ...process.env, GIT_TERMINAL_PROMPT: '0' } }, (err, stdout, stderr) => {
+    const child = execFile('git', full, { cwd, timeout: 300000, windowsHide: true, maxBuffer: 256 * 1024 * 1024, env: { ...process.env, GIT_TERMINAL_PROMPT: '0', GCM_INTERACTIVE: 'never' } }, (err, stdout, stderr) => {
       if (err) reject(new Error(`git ${verb} failed: ${String(stderr || err.message).trim().split('\n').slice(-2).join(' ')}`));
       else resolve(String(stdout).trim());
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeply-cli",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "description": "Codeply from the terminal: an interactive AI coding agent, a local server (codeply serve), and a GitHub agent that runs in your own Actions runner.",
   "main": "bin/codeply.js",
   "bin": {