triss-coworker 0.22.2 → 0.22.3

package/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.22.3] — 2026-07-04
+
+### Fixed
+
+- `getEnvFilePath('global')` in `src/secrets.js` now resolves `homedir()`
+  lazily on each call. The path was previously frozen into module-level
+  constants (`GLOBAL_DIR`/`GLOBAL_FILE`) at import time, so any later
+  `HOME` override — notably in tests — was ignored, unlike the lazy
+  resolution already used by `coder.js` and `safety.js`. Runtime path
+  values are unchanged. (#6)
+
 ## [0.22.2] — 2026-07-04
 
 ### Changed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "triss-coworker",
-  "version": "0.22.2",
+  "version": "0.22.3",
   "description": "Give your AI coding agent a cheap DeepSeek coworker. Delegate bulk reads, boilerplate, and doc updates to save 60-70% of your token budget.",
   "type": "module",
   "bin": {

package/src/secrets.js

@@ -11,12 +11,14 @@ import { dirname, join } from 'node:path';
 import readline from 'node:readline';
 import { projectRoot } from './safety.js';
 
-const GLOBAL_DIR = join(homedir(), '.config', 'triss');
-const GLOBAL_FILE = join(GLOBAL_DIR, '.env');
 const LOCAL_FILE_NAME = '.triss.env';
 
+// Resolve HOME lazily on each call so tests (and runtime) that override
+// HOME / TRISS_PROJECT_ROOT are honored — matches the lazy style already
+// used by projectRoot() in safety.js. Computing at import time froze the
+// path to whatever HOME was when secrets.js first loaded.
 export function getEnvFilePath(scope = 'global') {
-  if (scope === 'global') return GLOBAL_FILE;
+  if (scope === 'global') return join(homedir(), '.config', 'triss', '.env');
   if (scope === 'local') return join(projectRoot(), LOCAL_FILE_NAME);
   throw new Error(`Unknown scope "${scope}" — use "global" or "local"`);
 }