garrytanandcapy-ai[bot] 660484ee99 security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml ...

Bun auto-loads .env, .env.local and .env.<NODE_ENV> from its cwd and runs a
cwd bunfig.toml preload before the program starts. gstack runs inside the repo
it audits, so a committed .env could steer state roots, the claude binary or
spend caps, and a bunfig preload ran arbitrary code in every bin and hook.

Every bun shebang, shell and skill caller, TypeScript spawn and compiled build
now disables both (--no-env-file --config=/dev/null, bunIsolationArgs(),
--no-compile-autoload-dotenv/bunfig), with a ratchet and hostile-fixture
regressions.

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

2026-10-19 20:48:49 +00:00

..

app

feat: GStack Browser — double-click AI browser with anti-bot stealth (#695)

2026-04-04 10:17:05 -07:00

lib

v1.91.149.0 feat(evals): Codex host for gate cases, sol weekly and Fable/Astra monthly census arms (GSTA-49 TM2) (#3292)

2026-10-19 18:26:20 +00:00

resolvers

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

ubicloud

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

analytics.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

archetypes.ts

feat: gstack v1 — simpler prompts + real LOC receipts (v1.0.0.0) (#1039)

2026-04-18 15:05:42 +08:00

brain-cache-spec.ts

v1.91.8.0 test: smaller suite, derived paid selection, retired never-green evals (#2994)

2026-09-29 08:58:49 -07:00

build-app.sh

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

build-cso-windows.ps1

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

build-cso.sh

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

build.sh

v1.91.65.0 fix(install): skills only for the agents you installed, every runtime-root file their skills read (#3080)

2026-10-08 16:17:18 +00:00

bump-harness-version.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

capture-baseline.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

census-arms.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

compare-pr-version.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-attestation-evidence.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-eval-output-redaction.ts

v1.91.75.0 fix(cso-eval): fail producer receipts only on credential-class output, naming the rules (#3120)

2026-10-11 01:18:11 +00:00

cso-eval-producer.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-eval-protocol.ts

v1.91.124.0 feat(cso): helper run clock (remainingSeconds), /cso time discipline, content-free producer tool timeline (#3242)

2026-10-17 17:19:52 +00:00

cso-eval.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-image-matrix.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-native-evidence.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-public-ghcr.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-requalification.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-runtime-promotion.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-sbom-packages-check.jq

v1.91.27.0 fix(cso): runtime staging can finish and a qualified scanner catalog can ship (#3041)

2026-10-05 10:00:47 -07:00

cso-sbom-packages.jq

v1.91.27.0 fix(cso): runtime staging can finish and a qualified scanner catalog can ship (#3041)

2026-10-05 10:00:47 -07:00

cso-scanner-catalog.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-scanner-matrix.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-staging-run.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

cso-verify-runtime-base.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

declared-annotation.ts

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

detect-bump.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

dev-skill.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

discover-skills.ts

v1.87.6.0 fix: make checks reliable and everyday validation faster (#2898)

2026-09-22 14:57:52 -04:00

e2e-shard-reuse.ts

v1.91.149.0 feat(evals): Codex host for gate cases, sol weekly and Fable/Astra monthly census arms (GSTA-49 TM2) (#3292)

2026-10-19 18:26:20 +00:00

eval-bg.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

eval-compare.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

eval-flake-rank.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

eval-input-cache.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

eval-list.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

eval-readiness.ts

v1.91.134.0 feat(evals): readiness-gated paid dispatch (R1), verdict reuse (R2a/R2), receipt store that restores (#3262)

2026-10-18 06:03:18 +00:00

eval-select.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

eval-summary.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

eval-trial-series.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

exercised-map.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

external-skill-names.ts

v1.91.2.0 fix: consolidate gstack reliability wave (#2959)

2026-09-26 18:57:53 -04:00

free-test-durations-windows.json

v1.91.147.0 test(seed): refresh the free-suite duration seeds (#3289)

2026-10-19 15:17:57 +00:00

free-test-durations.json

v1.91.147.0 test(seed): refresh the free-suite duration seeds (#3289)

2026-10-19 15:17:57 +00:00

free-test-seed-allowlist.json

v1.91.147.0 test(seed): refresh the free-suite duration seeds (#3289)

2026-10-19 15:17:57 +00:00

garry-output-comparison.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

gate-cost-replay.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

gate-diff-calibrate.ts

feat: honest work and gate integrity — gate-edit detector, review/ship gate pass, zero-run green, claims-need-evidence kernel (#3114)

2026-10-10 22:33:01 +00:00

gate-reuse.ts

v1.91.134.0 feat(evals): readiness-gated paid dispatch (R1), verdict reuse (R2a/R2), receipt store that restores (#3262)

2026-10-18 06:03:18 +00:00

gen-agents-digest.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

gen-doctor-components.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

gen-llms-txt.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

gen-ship-goldens.ts

v1.91.77.0 feat(ship): two-stage gstack-pregate, gstack-regen generated-file registry, intent-based issue links (multi-agent wave C-pregate) (#3121)

2026-10-11 01:57:16 +00:00

gen-skill-docs.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

gstack-schema-pack.ts

v1.52.1.0 feat: brain-aware planning — 5 skills read structured gbrain context before asking (#1742)

2026-05-29 08:35:00 -07:00

harness-version.json

v1.91.149.0 feat(evals): Codex host for gate cases, sol weekly and Fable/Astra monthly census arms (GSTA-49 TM2) (#3292)

2026-10-19 18:26:20 +00:00

host-config-export.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

host-config.ts

v1.91.16.0 fix: safe installs and upgrades, skills start everywhere, truthful completion (parallel wave) (#3014)

2026-10-03 07:54:09 -07:00

jargon-list.json

feat: gstack v1 — simpler prompts + real LOC receipts (v1.0.0.0) (#1039)

2026-04-18 15:05:42 +08:00

judge-calibration-configs.ts

v1.91.144.0 feat(evals): Opus 5.5 is the paid gate's model under test; judge stays Fable (GSTA-49 TM1) (#3275)

2026-10-19 07:26:49 +00:00

judge-calibration.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

judge-controls.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

measure-journal-read.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

model-policy-freshness.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

models.ts

v1.91.144.0 feat(evals): Opus 5.5 is the paid gate's model under test; judge stays Fable (GSTA-49 TM1) (#3275)

2026-10-19 07:26:49 +00:00

one-way-doors.ts

v1.61.0.0 fix wave: guards failing open / silent failures (9 fixes, 4 community PRs absorbed) (#2472)

2026-08-08 09:28:45 -07:00

paid-test-durations.json

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

pr-dependencies.ts

v1.91.130.0 feat(pr-selection): exercised-path consumer map in shadow mode, MAP_GAP and census refresh (#3259)

2026-10-18 01:37:29 +00:00

preflight-agent-sdk.ts

v1.91.24.0 test: audit wave — PR evals keep finished work, honest ceilings, EVAL_POLICY v2, faster free suite (#3031)

2026-10-05 01:29:54 +00:00

preflight-codex-overlap.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

prompt-audit-manifest.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

psychographic-signals.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

question-registry.ts

feat: honest work and gate integrity — gate-edit detector, review/ship gate pass, zero-run green, claims-need-evidence kernel (#3114)

2026-10-10 22:33:01 +00:00

recover-receipts.ts

v1.91.24.0 test: audit wave — PR evals keep finished work, honest ceilings, EVAL_POLICY v2, faster free suite (#3031)

2026-10-05 01:29:54 +00:00

replay-pr-selection.ts

v1.91.129.0 fix(pr-selection): scan shebang and .ts imports, fail closed on scan errors, report cost per run (#3257)

2026-10-18 01:22:15 +00:00

resolve-codex-generation-model.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

retired-command.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

sandbox-doctor.sh

v1.75.0.0 feat: ponytail import wave — simplification review lens, arm benchmark, reuse ladder, instruction-tier digest (#2722)

2026-08-29 10:10:35 -07:00

setup-scc.sh

feat: gstack v1 — simpler prompts + real LOC receipts (v1.0.0.0) (#1039)

2026-04-18 15:05:42 +08:00

ship-measure-sweep.ts

v1.91.33.0 feat(ship): measurement bar with explained-red and pooled decisions, weekly flaky-test sweep on main (#3059)

2026-10-07 14:00:06 +00:00

ship-measure.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

skill-check.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

slop-diff.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

test-free-shards.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

test-health-report.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

test-paid-shards.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

test-pr-profile.ts

v1.91.147.0 test(seed): refresh the free-suite duration seeds (#3289)

2026-10-19 15:17:57 +00:00

test-strict-output.ts

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

typecheck-test-baseline.json

v1.91.144.0 feat(evals): Opus 5.5 is the paid gate's model under test; judge stays Fable (GSTA-49 TM1) (#3275)

2026-10-19 07:26:49 +00:00

typecheck-test.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

write-version-files.sh

v1.42.0.0 Daegu wave: 23 community-filed bugs + PTY classifier enforcement (24 bisect commits) (#1594)

2026-05-20 07:35:01 -07:00