gitvow 0.28.1__tar.gz → 0.28.2__tar.gz

{gitvow-0.28.1/src/gitvow.egg-info → gitvow-0.28.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitvow
-Version: 0.28.1
+Version: 0.28.2
 Summary: Provenance and policy gate for AI-agent coding sessions: session trailers on commits, redacted session notes in git, a tool-call gate, and a local ledger. No runtime dependencies.
 Author-email: Nikhil Bora <nikhil@wirevow.com>
 License: Apache-2.0

{gitvow-0.28.1 → gitvow-0.28.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "gitvow"
-version = "0.28.1"
+version = "0.28.2"
 description = "Provenance and policy gate for AI-agent coding sessions: session trailers on commits, redacted session notes in git, a tool-call gate, and a local ledger. No runtime dependencies."
 readme = "README.md"
 license = {text = "Apache-2.0"}

{gitvow-0.28.1 → gitvow-0.28.2}/src/gitvow/default_policy.json

@@ -6,11 +6,19 @@
       "reason": "recursive delete of root/home"
     },
     {
-      "pattern": "\\bgit\\s+push\\b.*(--force|-f\\b|\\+refs)",
+      "program": "git",
+      "verbs": [
+        "push\\b.*?(?:--force|\\s-f\\b|\\+refs)"
+      ],
       "reason": "force push"
     },
     {
-      "pattern": "\\bgit\\s+(reset\\s+--hard|clean\\s+-fd|branch\\s+-D)\\b",
+      "program": "git",
+      "verbs": [
+        "reset\\s+--hard",
+        "clean\\s+-fd",
+        "branch\\s+-D"
+      ],
       "reason": "destructive git history/worktree operation"
     },
     {
@@ -48,8 +56,20 @@
   ],
   "bash_confirm": [
     {
-      "pattern": "\\bgit\\s+push\\b",
-      "reason": "pushing to a remote"
+      "program": "git",
+      "verbs": [
+        "push"
+      ],
+      "target": "branch=(main|master|production|release[^ ]*)$",
+      "reason": "pushing to a protected branch"
+    },
+    {
+      "program": "git",
+      "verbs": [
+        "push"
+      ],
+      "reason": "pushing to a remote",
+      "when": "observe"
     },
     {
       "program": "kubectl",

{gitvow-0.28.1 → gitvow-0.28.2}/src/gitvow/targets.py

@@ -106,8 +106,17 @@ def resolve(prog: str, args: list[str], cwd: str | None, env: dict[str, str] | N
             return kubectl(args, env)
         if prog == "helm":
             return helm(args, env)
-        if prog == "git" and args and args[0] == "push":
-            return git_push(args[1:], cwd)
+        if prog == "git":
+            # step over git's own options (`-C dir`, `-c k=v`, `--git-dir=…`) to the subcommand
+            i = 0
+            while i < len(args) and args[i].startswith("-"):
+                i += 2 if args[i] in ("-C", "-c", "--git-dir", "--work-tree", "--namespace") else 1
+            if i < len(args) and args[i] == "push":
+                repo_dir = None
+                for j in range(0, i):
+                    if args[j] == "-C" and j + 1 < len(args):
+                        repo_dir = args[j + 1]
+                return git_push(args[i + 1 :], repo_dir if repo_dir and os.path.isdir(repo_dir) else cwd)
         if prog in ("terraform", "tofu"):
             return terraform(args, cwd)
     except Exception:  # a target resolver must never take the gate down; None asks

{gitvow-0.28.1 → gitvow-0.28.2/src/gitvow.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitvow
-Version: 0.28.1
+Version: 0.28.2
 Summary: Provenance and policy gate for AI-agent coding sessions: session trailers on commits, redacted session notes in git, a tool-call gate, and a local ledger. No runtime dependencies.
 Author-email: Nikhil Bora <nikhil@wirevow.com>
 License: Apache-2.0

{gitvow-0.28.1 → gitvow-0.28.2}/src/gitvow.egg-info/SOURCES.txt

@@ -50,6 +50,7 @@ tests/test_digest.py
 tests/test_e2e_globalopt.py
 tests/test_export.py
 tests/test_external_adapter.py
+tests/test_git_rules.py
 tests/test_hardening.py
 tests/test_hooks.py
 tests/test_install_cli.py

gitvow-0.28.2/tests/test_git_rules.py

@@ -0,0 +1,56 @@
+"""0.28.2: the git rules are program rules, so `git -C <dir> push` and `git -c k=v push` are seen.
+
+Found by dogfooding: every push made through `git -C <repo> push` on 2026-09-22 walked past the `pattern` rule
+`\\bgit\\s+push\\b`, which needed the two words adjacent. Same bug class the kubectl rules had until 0.17.1.
+"""
+
+import json
+from pathlib import Path
+
+import pytest
+
+from gitvow.policy import DEFAULT_POLICY_PATH, evaluate
+from tests.conftest import git
+
+C = "/Users/someone/work/repo"
+
+
+@pytest.fixture
+def pol():
+    return json.loads(Path(DEFAULT_POLICY_PATH).read_text())
+
+
+@pytest.mark.parametrize(
+    "cmd",
+    [
+        "git push --force origin main",
+        "git push -f",
+        f"git -C {C} push -q -f origin v0.26",
+        f"git -C {C} push --force-with-lease origin main",
+        "git -c user.name=x push +refs/heads/main",
+        f"git -C {C} reset --hard HEAD~1",
+        f"git -C {C} clean -fd",
+        "git branch -D feature",
+    ],
+)
+def test_destructive_git_is_denied_whatever_sits_between_git_and_the_verb(pol, cmd):
+    assert evaluate(pol, "Bash", {"command": cmd}).outcome == "deny", cmd
+
+
+def test_a_push_to_a_protected_branch_asks_and_other_pushes_are_observed(repo, home, pol):
+    git(repo, "remote", "add", "origin", "git@example.com:acme/ledger.git")
+    d = evaluate(pol, "Bash", {"command": f"git -C {repo} push -q origin main"}, str(repo))
+    assert d.outcome == "confirm" and d.when == "immediate" and d.reason == "pushing to a protected branch"
+    assert d.findings[0]["finding"].endswith("@ remote=git@example.com:acme/ledger.git branch=main")
+    d = evaluate(pol, "Bash", {"command": "git push origin feature/x"}, str(repo))
+    assert d.outcome == "confirm" and d.when == "observe" and d.reason == "pushing to a remote"
+    d = evaluate(pol, "Bash", {"command": "git push origin HEAD:refs/heads/release-2"}, str(repo))
+    assert d.when == "immediate"
+    # a push whose destination cannot be read (no such remote) is asked about
+    d = evaluate(pol, "Bash", {"command": "git push nowhere feature/x"}, str(repo))
+    assert d.when == "immediate"
+
+
+def test_mentions_of_push_inside_arguments_are_not_pushes(pol):
+    assert evaluate(pol, "Bash", {"command": 'git commit -m "docs: how to git push safely"'}).outcome == "allow"
+    assert evaluate(pol, "Bash", {"command": "echo 'git push --force is denied' >> notes.md"}).outcome == "allow"

{gitvow-0.28.1 → gitvow-0.28.2}/tests/test_tiers.py

@@ -105,10 +105,14 @@ def test_immediate_confirm_is_answered_once_per_session(repo, home, payload, tra
     session_start(payload("SessionStart"), str(home))
     push = payload("PreToolUse", "Bash", {"command": "git push origin feat"}, transcript)
     code, msg = pre_tool_use(push, str(home))
-    assert code == 2 and msg.startswith("CONFIRMATION REQUIRED (pushing to a remote)")
+    assert code == 2 and msg.startswith("CONFIRMATION REQUIRED (pushing to a protected branch)")
     assert "gitvow decide 1 accept --scope session" in msg and "gitvow decide 1 decline" in msg
     fs = dec.open_findings(str(repo))
-    assert fs[0]["finding"] == "run git (pushing to a remote)" and fs[0]["immediate"] and fs[0]["decision"] is None
+    assert (
+        fs[0]["finding"] == "run git (pushing to a protected branch)"
+        and fs[0]["immediate"]
+        and fs[0]["decision"] is None
+    )
     # asked and never answered: not on the card, not owed
     assert dec.undecided(str(repo)) == []
     assert "No open findings" in dec.card(str(repo), for_agent=False)
@@ -130,7 +134,7 @@ def test_immediate_confirm_is_answered_once_per_session(repo, home, payload, tra
     pre_tool_use(payload("PreToolUse", "Bash", {"command": "git commit -m x"}, transcript), str(home))
     git(repo, "commit", "-qam", "after the push was allowed")
     body = git(repo, "log", "-1", "--format=%B")
-    assert "Gitvow-Accepted: run git (pushing to a remote) by t scope=session: release branch" in body
+    assert "Gitvow-Accepted: run git (pushing to a protected branch) by t scope=session: release branch" in body
     post_tool_use(payload("PostToolUse", "Bash", {"command": "git commit -m x"}, transcript), str(home))
     from gitvow.rules import derive
 
@@ -154,7 +158,7 @@ def test_declined_immediate_confirm_stays_blocked_for_the_session(repo, home, pa
     (repo / "a.txt").write_text("d\n")
     pre_tool_use(payload("PreToolUse", "Bash", {"command": "git commit -m x"}, transcript), str(home))
     git(repo, "commit", "-qam", "carries the decline")
-    assert "Gitvow-Declined: run git (pushing to a remote) by t: not from this branch" in git(
+    assert "Gitvow-Declined: run git (pushing to a protected branch) by t: not from this branch" in git(
         repo, "log", "-1", "--format=%B"
     )