Repository navigation

fix(env): refuse --service and unusable layers in legacy env set/unset - #436

Merged

roodboi merged 68 commits into

nextfrom

wf/g60-legacy-env-service-scope

Nov 2, 2026

Merged

fix(env): refuse --service and unusable layers in legacy env set/unset#436
roodboi merged 68 commits into
nextfrom
wf/g60-legacy-env-service-scope

Commits on Oct 23, 2026
- fix(env): refuse --service and unusable layers in legacy env set/unset
  
  roodboi
  and
  claude
  committed
  f87ee54
Commits on Oct 24, 2026
Commits on Oct 31, 2026
Commits on Nov 1, 2026
- fix(env): refuse a migration that would drop a Compose-selected overlay
  
  roodboi
  and
  claude
  committed
  36fab6c
- fix(env): refuse a .env-only migration that would override an explicit Compose environment value
  
  roodboi
  and
  claude
  committed
  95ffaa4
- fix(env): keep legacy symlinks and other Compose env files from changing values
  
  roodboi
  and
  claude
  committed
  ff06193
- Merge remote-tracking branch 'origin/next' into HEAD
  roodboi
  committed
  2ab94f5
- fix(env): refuse a migration that would widen a legacy file to new services
  
  roodboi
  and
  claude
  committed
  de517d4
- fix(env): refuse legacy lines Compose reads differently from the migration
  
  roodboi
  and
  claude
  committed
  b34821d
- fix(env): drop the self-reference exception and close migration exposure gaps
  
  roodboi
  and
  claude
  committed
  296eb23
- fix(env): refuse more Compose dotenv forms and default-overlay exposure
  
  roodboi
  and
  claude
  committed
  b41965c
- fix(env): refuse text after a closing quote and backslashes in quoted values
  
  roodboi
  and
  claude
  committed
  49cf488
- fix(env): refuse an env_file order that changes a value on migration
  
  roodboi
  and
  claude
  committed
  581da64
- fix(env): refuse any symlinked legacy source in the contract migration
  
  roodboi
  and
  claude
  committed
  93c5702
- fix(env): refuse repeated env_file entries and env_file format on migration
  
  roodboi
  and
  claude
  committed
  bb7f722
- fix(env): refuse home-relative env_file paths and Compose merge tags on migration
  
  roodboi
  and
  claude
  committed
  ed6ebe9
- fix(env): refuse any Compose use of a key the default overlay changes
  
  roodboi
  and
  claude
  committed
  ae03d03
- fix(env): refuse multi-document Compose files and tool settings on migration
  
  roodboi
  and
  claude
  committed
  1e1db24
- fix(env): keep a teammate's .env values after a committed migration
  
  roodboi
  and
  claude
  committed
  ef9147f
- fix(env): decide unmigrated legacy env by what the layers deliver
  
  roodboi
  and
  claude
  committed
  190c66b
- fix(env): refuse unreadable local layers and overlay disagreements on migration
  
  roodboi
  and
  claude
  committed
  6361682
- fix(env): refuse unreadable local layers and merge without following links
  
  roodboi
  and
  claude
  committed
  1f23d03
- fix(env): recheck a local layer's content just before the private rename
  
  roodboi
  and
  claude
  committed
  b3f8f00
- fix(env): compare overlay values with the layers as they will be after migrating
  
  roodboi
  and
  claude
  committed
  9b41047
- fix(env): refuse a migration that would widen values to services that lack them
  
  roodboi
  and
  claude
  committed
  d88ff02
- fix(env): correct migration refusal guidance and pin the overlay regressions
  
  roodboi
  and
  claude
  committed
  ca5ef35
- fix(env): don't migrate generated .env output as legacy base values
  
  roodboi
  and
  claude
  committed
  dadc9d2
- fix(env): treat .env as generated only when its text proves it
  
  roodboi
  and
  claude
  committed
  e78c870
- test(env): pin the stale state file through a real git branch switch
  
  roodboi
  and
  claude
  committed
  2cafd2a
- fix(env): let materialize run with overlay keys waiting, and refuse a corrupt state
  
  roodboi
  and
  claude
  committed
  ce5c770
- test: deny implicit daemon starts in private CLI fixtures
  
  roodboi
  and
  claude
  committed
  64dc985
- fix(env): refuse a state path that exists but can't be read
  
  roodboi
  and
  claude
  committed
  af73f1d
- test: merge fixture daemon-autostart prevention into the PR 436 candidate
  
  roodboi
  and
  claude
  committed
  122747d
- fix(env): refuse a migration when a layer or Compose file can't be read
  
  roodboi
  and
  claude
  committed
  ddfa557
- fix(env): keep a local layer's own refusal ahead of the delivered-values read
  
  roodboi
  and
  claude
  committed
  17d946f
- fix(env): name the overlay in the layer refusal and read quoted env_file tails
  
  roodboi
  and
  claude
  committed
  c7a3f31
- merge: bring next at b4b9d696 into the PR 436 candidate
  
  roodboi
  and
  claude
  committed
  d254ee5
- fix(env): pass the project root to the migration's layer writes
  
  roodboi
  and
  claude
  committed
  be1b652
- fix(env): keep the project boundary check when a layer is a symlink
  
  roodboi
  and
  claude
  committed
  55a1136
- test(env): point the doctor symlink fixture inside the project
  
  roodboi
  and
  claude
  committed
  d037617
- docs(env): correct what doctor and env add do with linked layers
  
  roodboi
  and
  claude
  committed
  f980705
- merge: bring next at 75c62b97 into PR 436
  
  roodboi
  and
  claude
  committed
  c07cc4a
- docs(env): say when doctor migrates nothing, and move values with --local
  
  roodboi
  and
  claude
  committed
  11d5e8f
- merge: bring next at b8947ead into PR 436
  
  roodboi
  and
  claude
  committed
  91db178
- merge: bring next into PR 436, keeping both legacy env set refusals
  
  roodboi
  and
  claude
  committed
  b9ec877
Commits on Nov 2, 2026
- fix(env): refuse a migrated value that replaces a scoped layer value
  
  roodboi
  and
  claude
  committed
  5fafb7e
- fix(env): check overlays a linked worktree inherits before migrating
  
  roodboi
  and
  claude
  committed
  2155631
- fix(env): skip reserved names in the inherited overlay check
  
  roodboi
  and
  claude
  committed
  4602b49
- test(env): cover host, secret and unknown scopes in the scoped-value check
  
  roodboi
  and
  claude
  committed
  a62921a
- test(env): pin what the host-named and invalid-scope tests actually show
  
  roodboi
  and
  claude
  committed
  eaa083d
- test(env): run the unlistable primary test on Linux in CI
  
  roodboi
  and
  claude
  committed
  8d804f7
- Merge next ae032e79be4b3941b9c04c6591cc4ddbef5820f6 into PR 436
  
  roodboi
  and
  claude
  committed
  85068fa
- fix(env): compute retention on the no-contract migration route
  
  roodboi
  and
  claude
  committed
  ebb7300
- fix(env): refuse a migrated value over a scoped deletion with no global value
  
  roodboi
  and
  claude
  committed
  2bb4271
- Merge next 41f00169f7f9cd92d7fe1c064f47470c6b469bc4 into PR 436
  
  roodboi
  and
  claude
  committed
  0ba68ef
- fix(env): refuse a no-contract migration into a local overlay slot
  
  roodboi
  and
  claude
  committed
  e2e36fe
- Merge next ddc73a0dfefa8d15bcd8fd6a825b782add2670ce into PR 436
  
  roodboi
  and
  claude
  committed
  1d7112b
- fix(env): apply the local overlay refusal outside git only
  
  roodboi
  and
  claude
  committed
  0c14155
- Merge next ea0b0961e9b559ab7efb9c599b83ec55a17a41c2 into PR 436
  
  roodboi
  and
  claude
  committed
  3c1bf86

Commits

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 31, 2026

Commits on Nov 1, 2026

Commits on Nov 2, 2026