gstack

mirror of https://github.com/garrytan/gstack.git synced 2026-09-09 22:48:57 +02:00

Files

T

Garry TanandClaude Fable 5 5ed46193f1 fix(browse): an untrustable TMPDIR (/, $HOME, a cwd ancestor) never widens the local allowlist

TEMP_DIRS honors os.tmpdir() at daemon start; a daemon launched with
TMPDIR=/ would have trusted the whole filesystem for local path validation
for its lifetime. Subprocess pins cover /, $HOME, cwd-ancestor rejection and
that a benign distinct TMPDIR (the sandbox recipe's $HOME/tmp) stays honored.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-29 05:58:14 +00:00

bin

feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226 )

2026-03-19 18:20:50 -07:00

scripts

v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited (#2604 )

2026-08-16 19:34:41 -07:00

sections

v1.71.0.0 feat: token-load reduction — preamble runtime scripts, gated onboarding, 20 skill carves, CLAUDE.md trim (#2691 )

2026-08-27 09:50:31 -07:00

src

fix(browse): an untrustable TMPDIR (/, $HOME, a cwd ancestor) never widens the local allowlist