garrytanandcapy-ai[bot] 660484ee99 security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml ...

Bun auto-loads .env, .env.local and .env.<NODE_ENV> from its cwd and runs a
cwd bunfig.toml preload before the program starts. gstack runs inside the repo
it audits, so a committed .env could steer state roots, the claude binary or
spend caps, and a bunfig preload ran arbitrary code in every bin and hook.

Every bun shebang, shell and skill caller, TypeScript spawn and compiled build
now disables both (--no-env-file --config=/dev/null, bunIsolationArgs(),
--no-compile-autoload-dotenv/bunfig), with a ratchet and hostile-fixture
regressions.

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

2026-10-19 20:48:49 +00:00

..

preamble

v1.91.117.0 fix: pregate bats lanes, WTREE_UNAVAILABLE, doctor rows, SKILL.md size guard, planMode hosts (fix wave PR 5) (#3236)

2026-10-17 04:36:00 +00:00

aside.ts

v1.91.109.0 fix: wave 5 — pregate secrets false negatives (#3211), Windows gstack-upgrade, env.kv schema keys (#3208), browse rule 3 (#3216), review summaries (#3219), CSO flake (#3207) (#3225)

2026-10-17 00:06:43 +00:00

autoplan-driver.ts

v1.91.115.0 feat: field list 2 wave A: autoplan round cap and public export, eval-plan diagnostics and model rules, --for review-voice (#3234)

2026-10-17 02:40:45 +00:00

browse.ts

v1.91.71.0 feat(install): gstack-doctor --check one-line verdict, gstack-capy-install, lazy Chromium (multi-agent wave PR A) (#3116)

2026-10-11 00:00:20 +00:00

composition.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

confidence.ts

v1.91.15.0 v1.91.15.0: Opus 5.5 prompt cleanup, behavior-level skill tests, transcript consent (#3017)

2026-10-03 01:19:03 -07:00

constants.ts

v1.91.92.0 feat(outside-voice): enforce codex_reviews consent in the send binaries, codex_effort setting, privacy disclosures (Wave 9 Lane C) (#3144)

2026-10-11 19:09:12 +00:00

coordinator-contract.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

defensive-review.ts

v1.91.66.0 fix: /autoplan without permission prompts after background reviewers, 34 contributor PRs from the backlog triage (#3087)

2026-10-08 17:40:06 +00:00

design-checklist.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

design-doc-discovery.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

design.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

dispatch-rules.ts

feat: honest work and gate integrity — gate-edit detector, review/ship gate pass, zero-run green, claims-need-evidence kernel (#3114)

2026-10-10 22:33:01 +00:00

dx.ts

v1.91.114.0 feat(dx): score every error for an AI agent reader (agent-ready error contract + gstack-error-capture) (#3226)

2026-10-17 02:10:12 +00:00

free-text-file.ts

v1.91.32.0 fix: Codex works from zsh, free text never enters shell commands, honest failures (#3057)

2026-10-06 23:42:19 +00:00

gate-scan.ts

feat: honest work and gate integrity — gate-edit detector, review/ship gate pass, zero-run green, claims-need-evidence kernel (#3114)

2026-10-10 22:33:01 +00:00

gbrain.ts

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

index.ts

v1.91.114.0 feat(dx): score every error for an AI agent reader (agent-ready error contract + gstack-error-capture) (#3226)

2026-10-17 02:10:12 +00:00

learnings.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

make-pdf.ts

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

model-overlay.ts

v1.67.2.0 feat: gpt-5.6-sol bounded-scope profile for Codex installs (#2633)

2026-08-18 17:00:04 -07:00

outside-voice-steps.ts

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

outside-voice.ts

security: isolate every gstack Bun entry point from the audited checkout's .env and bunfig.toml

2026-10-19 20:48:49 +00:00

plan-gates.ts

v1.91.91.0 fix(review-gates): fail closed on unparsed severities, survive auto-compaction copies, read-only plan-eng-review reports back (Wave 9 Lane B) (#3143)

2026-10-11 18:16:33 +00:00

plan-reality.ts

v1.91.127.0 fix(evals): paid-gate reliability round 2: docsync candidate protocol, scope-block detection, qa fix-loop budgets, lettered consent (#3260)

2026-10-18 00:37:43 +00:00

plan-review.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

preamble.ts

v1.91.117.0 fix: pregate bats lanes, WTREE_UNAVAILABLE, doctor rows, SKILL.md size guard, planMode hosts (fix wave PR 5) (#3236)

2026-10-17 04:36:00 +00:00

qa.ts

v1.91.127.0 fix(evals): paid-gate reliability round 2: docsync candidate protocol, scope-block detection, qa fix-loop budgets, lettered consent (#3260)

2026-10-18 00:37:43 +00:00

question-tuning.ts

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

redact-doc.ts

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

review-army.ts

v1.91.127.0 fix(evals): paid-gate reliability round 2: docsync candidate protocol, scope-block detection, qa fix-loop budgets, lettered consent (#3260)

2026-10-18 00:37:43 +00:00

review-dashboard.ts

v1.91.91.0 fix(review-gates): fail closed on unparsed severities, survive auto-compaction copies, read-only plan-eng-review reports back (Wave 9 Lane B) (#3143)

2026-10-11 18:16:33 +00:00

review-scope.ts

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

runtime-root.ts

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

sections.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

shared-libs.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

sideways.ts

v1.91.78.0 feat(review): plan reality rows, sideways review and cso sweep, investigate recipes (multi-agent wave PR D) (#3119)

2026-10-11 02:14:23 +00:00

spec-review.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

tasks-section.ts

v1.91.70.0 feat(unattended): artifact contract + validator, unattended session kind, findings-derived review log, gate list (multi-agent wave B-core) (#3115)

2026-10-10 23:26:08 +00:00

test-value.ts

feat: honest work and gate integrity — gate-edit detector, review/ship gate pass, zero-run green, claims-need-evidence kernel (#3114)

2026-10-10 22:33:01 +00:00

testing.ts

v1.91.85.0 fix(cso,deploy): /cso on Windows Git 2.56 and macOS Docker, zsh-safe loops, honest deploy stops (Wave 9 Lane D) (#3134)

2026-10-11 15:43:33 +00:00

third-party-actions.ts

v1.91.127.0 fix(evals): paid-gate reliability round 2: docsync candidate protocol, scope-block detection, qa fix-loop budgets, lettered consent (#3260)

2026-10-18 00:37:43 +00:00

types.ts

v1.91.16.0 fix: safe installs and upgrades, skills start everywhere, truthful completion (parallel wave) (#3014)

2026-10-03 07:54:09 -07:00

utility.ts

v1.91.144.0 feat(evals): Opus 5.5 is the paid gate's model under test; judge stays Fable (GSTA-49 TM1) (#3275)

2026-10-19 07:26:49 +00:00