gstack

mirror of https://github.com/garrytan/gstack.git synced 2026-05-02 11:45:20 +02:00

Files

T

Garry Tan f68fa4a9ee feat(security): wire logAttempt to gstack-telemetry-log (fire-and-forget)

Every local attempt.jsonl write now also triggers a subprocess call to
gstack-telemetry-log with the attack_attempt event type. The binary handles
tier gating internally (community → Supabase upload, anonymous → local
JSONL only, off → no-op), so security.ts doesn't need to re-check.

Binary resolution follows the skill preamble pattern — never relies on PATH,
which breaks in compiled-binary contexts:

  1. ~/.claude/skills/gstack/bin/gstack-telemetry-log  (global install)
  2. .claude/skills/gstack/bin/gstack-telemetry-log    (symlinked dev)
  3. bin/gstack-telemetry-log                          (in-repo dev)

Fire-and-forget:
  * spawn with stdio: 'ignore', detached: true, unref()
  * .on('error') swallows failures
  * Missing binary is non-fatal — local attempts.jsonl still gives audit trail

Never throws. Never blocks. Existing 37 security tests pass unchanged.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-19 19:16:26 +08:00

bin

feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226 )

2026-03-19 18:20:50 -07:00

scripts

fix: ngrok Windows build + close CI error-swallowing gap (v0.18.0.1) (#1024 )

2026-04-16 13:49:04 -07:00

src

feat(security): wire logAttempt to gstack-telemetry-log (fire-and-forget)

2026-04-19 19:16:26 +08:00

test

test(security): add security.ts unit tests (25 tests, 62 assertions)