fix(hooks): strip shebang argument so pipx launchers resolve (#2629)

CHANGELOG.md

@@ -58,6 +58,7 @@ Full release notes with details on each version: [GitHub Releases](https://githu
 - Fix: a PHP `use` import written with a leading-backslash / fully-qualified prefix now resolves to its target definition instead of being dropped (#2661, thanks @ousamabenyounes).
 - Fix: an unresolved local JS/TS import (to a file absent from the scan) now emits a stable, portable `ref` target id instead of leaking a per-checkout absolute-path slug (#2457, thanks @rohit-jsfreaky).
 - Fix: `graphify benchmark` no longer crashes on a node whose label is `None` (#2674, thanks @Arthuro0103).
+- Fix: the git post-commit hook and skill interpreter probes now strip a shebang argument before using it as a path, so a pipx launcher (`#!/.../python -E`) resolves instead of silently falling back to a `python3` without graphify and printing "could not locate a Python with graphify installed" after every commit (#2629, thanks @hpstr5000).
 
 ## 0.9.40 (2026-08-11)
 

graphify/hooks.py

@@ -76,6 +76,11 @@
             */env\\ *) GRAPHIFY_PYTHON="${_SHEBANG#*/env }" ;;
             *)         GRAPHIFY_PYTHON="$_SHEBANG" ;;
         esac
+        # Strip any interpreter argument: pipx writes `#!/.../python -E`, so the
+        # shebang carries a trailing argument that is not part of the path. Keep
+        # the leading word only, else the space trips the allowlist below and the
+        # valid interpreter is discarded (silent python3 fallback, #2629).
+        GRAPHIFY_PYTHON="${GRAPHIFY_PYTHON%% *}"
         # Allowlist: only keep characters valid in a filesystem path to prevent
         # injection if the shebang contains shell metacharacters.
         case "$GRAPHIFY_PYTHON" in

graphify/skill-agents.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -662,6 +667,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-amp.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -662,6 +667,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-claw.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -665,6 +670,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-codex.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -662,6 +667,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-copilot.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -665,6 +670,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-droid.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -662,6 +667,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-kilo.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -665,6 +670,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-kiro.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -665,6 +670,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-opencode.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -657,6 +662,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-pi.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -665,6 +670,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-trae.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -663,6 +668,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill-vscode.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -661,6 +666,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"

graphify/skill.md

@@ -76,6 +76,11 @@ fi
 # 2. Read shebang from graphify binary (pipx and direct pip installs)
 if [ -z "$PYTHON" ] && [ -n "$GRAPHIFY_BIN" ]; then
     _SHEBANG=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+    # Resolve `/usr/bin/env python` to the interpreter, then strip any argument
+    # (pipx writes `.../python -E`) so a shebang argument is not mistaken for the
+    # path and rejected by the allowlist below (silent python3 fallback, #2629).
+    case "$_SHEBANG" in */env\ *) _SHEBANG="${_SHEBANG#*/env }" ;; esac
+    _SHEBANG="${_SHEBANG%% *}"
     case "$_SHEBANG" in
         *[!a-zA-Z0-9/_.@-]*) ;;
         *) "$_SHEBANG" -c "import graphify" 2>/dev/null && PYTHON="$_SHEBANG" ;;
@@ -665,6 +670,11 @@ if [ ! -f graphify-out/.graphify_python ]; then
     GRAPHIFY_BIN=$(which graphify 2>/dev/null)
     if [ -n "$GRAPHIFY_BIN" ]; then
         PYTHON=$(head -1 "$GRAPHIFY_BIN" | tr -d '#!')
+        # Resolve `/usr/bin/env python` and strip any shebang argument (pipx
+        # writes `.../python -E`) before the allowlist check, else the space
+        # forces the unverified python3 fallback into .graphify_python (#2629).
+        case "$PYTHON" in */env\ *) PYTHON="${PYTHON#*/env }" ;; esac
+        PYTHON="${PYTHON%% *}"
         case "$PYTHON" in *[!a-zA-Z0-9/_.@-]*) PYTHON="python3" ;; esac
     else
         PYTHON="python3"