alissa-tools-github-devloop 0.8.49__tar.gz → 0.8.51__tar.gz

{alissa_tools_github_devloop-0.8.49/src/main/alissa_tools_github_devloop.egg-info → alissa_tools_github_devloop-0.8.51}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: alissa-tools-github-devloop
-Version: 0.8.49
+Version: 0.8.51
 Summary: ALISSA-TOOLS-GITHUB-DEVLOOP
 Home-page: https://alissa.app
 Author: Fahera

{alissa_tools_github_devloop-0.8.49 → alissa_tools_github_devloop-0.8.51}/src/main/alissa/tools/github/devloop/integration_check.py

@@ -16,8 +16,10 @@ environment, its HOME and its log -- and no further (see *Residual* below):
 
 - **A from-scratch environment** (`env -i` semantics): `PATH`, a scratch
   `HOME` (never the seat's, which holds gh's and Claude's credential files),
-  `LANG`, `TERM`, `CI`, plus the recipe's `--set` values. Nothing else of the
-  seat's environment is inherited.
+  `LANG`, `TERM`, `CI`, the seat's INHERITED_NAMES (`PLAYWRIGHT_BROWSERS_PATH`,
+  so Playwright finds the seat's pinned browser instead of downloading one,
+  issue #181), plus the recipe's `--set` values, which win. Nothing else of
+  the seat's environment is inherited.
 - **Refused before anything runs** (exit 3): a `--set` name that is a
   session credential's (`ALISSA_*`, `GH_*`, `GITHUB_*`, `ANTHROPIC_*`,
   `CLAUDE_*`, and the registry/deploy tokens of SESSION_TOKEN_NAMES), a
@@ -66,6 +68,13 @@ from typing import IO, Iterable, Mapping, Sequence
 
 HELPER = "python3 -m alissa.tools.github.devloop.integration_check"
 
+# The seat's variables the app's environment inherits as they are, when set:
+# tool locations, never credentials. PLAYWRIGHT_BROWSERS_PATH points Playwright
+# at the seat's pinned headless Chromium (/opt/ms-playwright); without it a
+# session running Playwright through the helper finds no browser under the
+# scratch HOME (issue #181). A `--set` of the same name overrides it.
+INHERITED_NAMES = ("PLAYWRIGHT_BROWSERS_PATH",)
+
 REPLACEMENT = "[scrubbed]"
 
 # Names the app's environment may never carry: this session's credentials and
@@ -194,6 +203,11 @@ def clean_env(
         "CI": "true",
     }
     secrets = session_secrets(environ)
+    for name in INHERITED_NAMES:
+        value = environ.get(name)
+        # Never carry a value that holds a credential, whatever its name.
+        if value and not any(s in value for s in secrets):
+            env[name] = value
     for item in sets:
         name, eq, value = item.partition("=")
         if not eq or not _NAME_RE.match(name):

{alissa_tools_github_devloop-0.8.49 → alissa_tools_github_devloop-0.8.51}/src/main/alissa/tools/github/devloop/loop.py

@@ -1119,7 +1119,9 @@ INTEGRATION_CHECK_DIRECTIVE = (
     "seed, start — and the headless browser through `{helper} run --cwd "
     "<scratch> --home <scratch>/.ic-home --log <evidence log> --set "
     "NAME=VALUE … -- sh -c '<step>'`, one `--set` per recipe `env` value. "
-    "It starts the step from an empty environment (`env -i` semantics) with "
+    "It starts the step from an empty environment (`env -i` semantics; of "
+    "the seat's own variables only `PLAYWRIGHT_BROWSERS_PATH` crosses, so "
+    "Playwright finds the seat's pinned browser) with "
     "a scratch HOME, so this session's tokens (`ALISSA_API_TOKEN`, "
     "`GH_TOKEN`, the Claude credential) are not in the app's environment "
     "and gh's and Claude's credential files are not under its HOME, and it "

alissa_tools_github_devloop-0.8.51/src/main/alissa/tools/github/devloop/version

@@ -0,0 +1 @@
+0.8.51

{alissa_tools_github_devloop-0.8.49 → alissa_tools_github_devloop-0.8.51/src/main/alissa_tools_github_devloop.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: alissa-tools-github-devloop
-Version: 0.8.49
+Version: 0.8.51
 Summary: ALISSA-TOOLS-GITHUB-DEVLOOP
 Home-page: https://alissa.app
 Author: Fahera

alissa_tools_github_devloop-0.8.49/src/main/alissa/tools/github/devloop/version

@@ -1 +0,0 @@
-0.8.49