[potiuk]

Summary

• Commands that wait on a key touch ran with no window when the arm matcher did not recognise them. The gaps:
  • git global options with a quoted value (git -c user.name="Jane Doe" commit), one joined with = (--git-dir=/x), or one with a backslash-escaped quote (-c user.name=O\'Brien, -c user.name=$'O\'Brien')
  • git or ssh named by path (/usr/bin/git push, /opt/homebrew/bin/ssh host), quoted ("/usr/bin/git" push), or handed to a shell as a string (bash -c "git push", sh -c 'ssh host')
  • git that talks to a remote without being fetch or push: lfs, archive --remote, fetch-pack / send-pack, subtree, svn, maintenance run (its prefetch fetches), request-pull
  • the gh commands that run git, over ssh under git_protocol=ssh: gh repo clone, gh repo fork --clone, gh repo sync, gh pr create and gh repo create --push (they push a branch or repository not yet on GitHub), gh pr checkout and its default co alias (gh co, gh pr co), with options before or inside the command group (gh -R owner/repo pr checkout 1)
• These stay quiet: ~/.ssh paths, /etc/ssh/sshd_config, ssh-agent, sshuttle, gh pr view / gh repo view / gh pr comment (with or without -R), gh codespace, a script whose name only starts with git-, and read-only git with a quoted -c value.

Type of change

• Python package (tools/*/ with pyproject.toml)
• Other: tools/agent-isolation/gpg-touch-overlay.sh

Test plan

• The arm and quiet parameter cases of tests/test_gpg_touch_overlay.py (93) and the full file pass on macOS and in a Linux container (python:3.12, bash 5.2).
• prek run --from-ref origin/main passes, as does tests/test_hook_manager_shim.py after merging main (which carries test(agent-isolation): keep the shim test's commit from signing #1831's fix for the shim test's signed commit).

RFC-AI-0004 compliance

• Sandbox: no new host access. A false positive costs one short-lived watcher, as the matcher's comment already notes.

Notes for reviewers (optional)

Split from the dismissal fix in a separate PR, which keeps the window coming back. The two are independent and either can merge first.

🤖 Generated with Claude Code