gstack

mirror of https://github.com/garrytan/gstack.git synced 2026-06-17 07:10:12 +02:00

Files

T

Garry Tan a8591f88c8 harden(sync): close staging-guard TOCTOU + fail hard on marker write (#1802 C5)

checkOwnedStagingDir() now returns the realpath-resolved canonicalPath on a
pass, and cleanupStagingDir() rmSync's that instead of the raw input — closing
the gap where the input is a symlink swapped between the ownership check and the
delete. makeStagingDir() tears down the partial dir and rethrows if the marker
write fails, so a marker-less dir (which the guard would refuse forever) can
never leak.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-03 07:21:58 -07:00

conductor-env-shim.ts

v1.39.2.0 feat: GSTACK_* env-shim for Conductor + gbrain/gstack setup docs (#1534 )

2026-05-16 12:32:33 -07:00

gbrain-exec.ts

v1.55.0.0 fix wave: gbrain data-loss guards + browser crash-loop + 6 more (#1808 )

2026-05-30 14:57:07 -07:00

gbrain-guards.ts

v1.55.0.0 fix wave: gbrain data-loss guards + browser crash-loop + 6 more (#1808 )

2026-05-30 14:57:07 -07:00

gbrain-local-status.ts

v1.55.0.0 fix wave: gbrain data-loss guards + browser crash-loop + 6 more (#1808 )