Repository navigation

fix(env): refuse a contract migration that would commit a shell value - #538

Merged

roodboi merged 104 commits into

nextfrom

fix/hack-1688-contract-shell-values

Nov 3, 2026

Merged

fix(env): refuse a contract migration that would commit a shell value#538
roodboi merged 104 commits into
nextfrom
fix/hack-1688-contract-shell-values

Commits on Oct 23, 2026
- fix(env): refuse --service and unusable layers in legacy env set/unset
  
  roodboi
  and
  claude
  committed
  f87ee54
Commits on Oct 24, 2026
Commits on Oct 31, 2026
Commits on Nov 1, 2026
- fix(env): refuse a migration that would drop a Compose-selected overlay
  
  roodboi
  and
  claude
  committed
  36fab6c
- fix(env): refuse a .env-only migration that would override an explicit Compose environment value
  
  roodboi
  and
  claude
  committed
  95ffaa4
- fix(env): keep legacy symlinks and other Compose env files from changing values
  
  roodboi
  and
  claude
  committed
  ff06193
- Merge remote-tracking branch 'origin/next' into HEAD
  roodboi
  committed
  2ab94f5
- fix(env): refuse a migration that would widen a legacy file to new services
  
  roodboi
  and
  claude
  committed
  de517d4
- fix(env): refuse legacy lines Compose reads differently from the migration
  
  roodboi
  and
  claude
  committed
  b34821d
- fix(env): drop the self-reference exception and close migration exposure gaps
  
  roodboi
  and
  claude
  committed
  296eb23
- fix(env): refuse more Compose dotenv forms and default-overlay exposure
  
  roodboi
  and
  claude
  committed
  b41965c
- fix(env): refuse text after a closing quote and backslashes in quoted values
  
  roodboi
  and
  claude
  committed
  49cf488
- fix(env): refuse an env_file order that changes a value on migration
  
  roodboi
  and
  claude
  committed
  581da64
- fix(env): refuse any symlinked legacy source in the contract migration
  
  roodboi
  and
  claude
  committed
  93c5702
- fix(env): refuse repeated env_file entries and env_file format on migration
  
  roodboi
  and
  claude
  committed
  bb7f722
- fix(env): refuse home-relative env_file paths and Compose merge tags on migration
  
  roodboi
  and
  claude
  committed
  ed6ebe9
- fix(env): refuse any Compose use of a key the default overlay changes
  
  roodboi
  and
  claude
  committed
  ae03d03
- fix(env): refuse multi-document Compose files and tool settings on migration
  
  roodboi
  and
  claude
  committed
  1e1db24
- fix(env): keep a teammate's .env values after a committed migration
  
  roodboi
  and
  claude
  committed
  ef9147f
- fix(env): decide unmigrated legacy env by what the layers deliver
  
  roodboi
  and
  claude
  committed
  190c66b
- fix(env): refuse unreadable local layers and overlay disagreements on migration
  
  roodboi
  and
  claude
  committed
  6361682
- fix(env): refuse unreadable local layers and merge without following links
  
  roodboi
  and
  claude
  committed
  1f23d03
- fix(env): recheck a local layer's content just before the private rename
  
  roodboi
  and
  claude
  committed
  b3f8f00
- fix(env): compare overlay values with the layers as they will be after migrating
  
  roodboi
  and
  claude
  committed
  9b41047
- fix(env): refuse a migration that would widen values to services that lack them
  
  roodboi
  and
  claude
  committed
  d88ff02
- fix(env): correct migration refusal guidance and pin the overlay regressions
  
  roodboi
  and
  claude
  committed
  ca5ef35
- fix(env): refuse a contract migration that would commit a shell value
  
  roodboi
  and
  claude
  committed
  e0a1062
- fix(env): don't migrate generated .env output as legacy base values
  
  roodboi
  and
  claude
  committed
  dadc9d2
- fix(env): give scope-preserving recovery for a refused shell value
  
  roodboi
  and
  claude
  committed
  c754dab
- fix(env): treat .env as generated only when its text proves it
  
  roodboi
  and
  claude
  committed
  e78c870
- test(env): pin the stale state file through a real git branch switch
  
  roodboi
  and
  claude
  committed
  2cafd2a
- fix(env): let materialize run with overlay keys waiting, and refuse a corrupt state
  
  roodboi
  and
  claude
  committed
  ce5c770
- test: deny implicit daemon starts in private CLI fixtures
  
  roodboi
  and
  claude
  committed
  64dc985
- fix(env): refuse a state path that exists but can't be read
  
  roodboi
  and
  claude
  committed
  af73f1d
- test: merge fixture daemon-autostart prevention into the PR 436 candidate
  
  roodboi
  and
  claude
  committed
  122747d
- fix(env): refuse a migration when a layer or Compose file can't be read
  
  roodboi
  and
  claude
  committed
  ddfa557
- fix(env): keep a local layer's own refusal ahead of the delivered-values read
  
  roodboi
  and
  claude
  committed
  17d946f
- fix(env): name the overlay in the layer refusal and read quoted env_file tails
  
  roodboi
  and
  claude
  committed
  c7a3f31
- merge: bring next at b4b9d696 into the PR 436 candidate
  
  roodboi
  and
  claude
  committed
  d254ee5
- fix(env): pass the project root to the migration's layer writes
  
  roodboi
  and
  claude
  committed
  be1b652
- fix(env): keep the project boundary check when a layer is a symlink
  
  roodboi
  and
  claude
  committed
  55a1136
- test(env): point the doctor symlink fixture inside the project
  
  roodboi
  and
  claude
  committed
  d037617
- merge: bring the HACK-1688 commits into its local candidate
  
  roodboi
  and
  claude
  committed
  2b1c7d5
- fix(env): apply the reviewed HACK-1688 v5 correction on the PR 436 candidate
  
  roodboi
  and
  claude
  committed
  5eea085
- docs(env): correct what doctor and env add do with linked layers
  
  roodboi
  and
  claude
  committed
  f980705
- merge: bring the repaired PR 436 candidate into the HACK-1688 candidate
  
  roodboi
  and
  claude
  committed
  2dfeb1b
- merge: bring next at 75c62b97 into PR 436
  
  roodboi
  and
  claude
  committed
  c07cc4a
- merge: bring the integrated PR 436 candidate into the HACK-1688 candidate
  
  roodboi
  and
  claude
  committed
  7140e4e
- docs(env): say when doctor migrates nothing, and move values with --local
  
  roodboi
  and
  claude
  committed
  11d5e8f
- merge: bring next at b8947ead into PR 436
  
  roodboi
  and
  claude
  committed
  91db178
- merge: bring published PR 436 into the HACK-1688 candidate
  
  roodboi
  and
  claude
  committed
  7a6b01b
- test(env): pin that the shell-value check provisions no key material
  
  roodboi
  and
  claude
  committed
  15ecf62
- test(env): say what the keychain worker's preflight proves
  
  roodboi
  and
  claude
  committed
  5ebbf6b
- fix(env): print a recovery command only for names the CLI accepts
  
  roodboi
  and
  claude
  committed
  e9a1679
- fix(env): refuse a contract migration that can't write working layers
  
  roodboi
  and
  claude
  committed
  b197186
- fix(env): refuse a contract migration from a contract it can't read
  
  roodboi
  and
  claude
  committed
  5e4b5d5
- fix(env): refuse a contract migration when hack.env.json can't be opened
  
  roodboi
  and
  claude
  committed
  9dfd095
- merge: bring next into PR 436, keeping both legacy env set refusals
  
  roodboi
  and
  claude
  committed
  b9ec877
Commits on Nov 2, 2026
- merge: bring PR 436's synced head into HACK-1688
  
  roodboi
  and
  claude
  committed
  342b289
- fix(env): treat a contract that can't be opened as unreadable, not absent
  
  roodboi
  and
  claude
  committed
  2b2352f
- fix(env): describe a contract that can't be opened accurately
  
  roodboi
  and
  claude
  committed
  acd383b
- fix(env): report an unopenable contract consistently in doctor
  
  roodboi
  and
  claude
  committed
  f34cfdc
- test(env): cover the doctor plan step with a dangling contract
  
  roodboi
  and
  claude
  committed
  7fcf2cc
- fix(env): stop doctor offering a migration that will refuse
  
  roodboi
  and
  claude
  committed
  7d6bbc4
- fix(env): skip doctor's migration prompt when it would refuse
  
  roodboi
  and
  claude
  committed
  17e8f5c
- refactor(env): extract doctor's env migration confirm
  
  roodboi
  and
  claude
  committed
  ad6f059
- test(env): name the doctor test for what it now proves
  
  roodboi
  and
  claude
  committed
  99ee84f
- fix(env): refuse a migrated value that replaces a scoped layer value
  
  roodboi
  and
  claude
  committed
  5fafb7e
- fix(env): check overlays a linked worktree inherits before migrating
  
  roodboi
  and
  claude
  committed
  2155631
- fix(env): skip reserved names in the inherited overlay check
  
  roodboi
  and
  claude
  committed
  4602b49
- test(env): cover host, secret and unknown scopes in the scoped-value check
  
  roodboi
  and
  claude
  committed
  a62921a
- Merge PR 436 head a62921a8796ab5baefa748a3d74683e1f32ff94f into hack-1688
  
  roodboi
  and
  claude
  committed
  31ded15
- test(env): pin what the host-named and invalid-scope tests actually show
  
  roodboi
  and
  claude
  committed
  eaa083d
- Merge PR 436 head eaa083dc47f7ff03893bbf1a5e205fb53502f64b into hack-1688
  
  roodboi
  and
  claude
  committed
  10e55e2
- test(env): run the unlistable primary test on Linux in CI
  
  roodboi
  and
  claude
  committed
  8d804f7
- Merge PR 436 head 8d804f7a6fa0cd29e74f0e04ecfa3dc4e742e34a into hack-1688
  
  roodboi
  and
  claude
  committed
  2030f08
- Merge next ae032e79be4b3941b9c04c6591cc4ddbef5820f6 into PR 436
  
  roodboi
  and
  claude
  committed
  85068fa
- Merge PR 436 head 85068fa0053dbda29b4c37b67859a62a8d2eaa1a into hack-1688
  
  roodboi
  and
  claude
  committed
  e54e888
- fix(env): compute retention on the no-contract migration route
  
  roodboi
  and
  claude
  committed
  ebb7300
- Merge PR 436 head ebb7300152b6c63b97a84b564ca2084f9062b173 into hack-1688
  
  roodboi
  and
  claude
  committed
  1f8afce
- fix(env): refuse a migrated value over a scoped deletion with no global value
  
  roodboi
  and
  claude
  committed
  2bb4271
- Merge PR 436 head 2bb4271237ee676e32e992d72c703fe024da86a6 into hack-1688
  
  roodboi
  and
  claude
  committed
  93460bc
- Merge next 41f00169f7f9cd92d7fe1c064f47470c6b469bc4 into PR 436
  
  roodboi
  and
  claude
  committed
  0ba68ef
- Merge PR 436 head 0ba68ef64c3b92b30c8c8c3f2f67e60d044d3bb9 into hack-1688
  
  roodboi
  and
  claude
  committed
  dd1794f
- fix(env): refuse a no-contract migration into a local overlay slot
  
  roodboi
  and
  claude
  committed
  e2e36fe
- Merge next ddc73a0dfefa8d15bcd8fd6a825b782add2670ce into PR 436
  
  roodboi
  and
  claude
  committed
  1d7112b
- Merge PR 436 head 1d7112bfe99457b585dcd88cd47c5e66896a7f48 into hack-1688
  
  roodboi
  and
  claude
  committed
  bb90e7f
- fix(env): apply the local overlay refusal outside git only
  
  roodboi
  and
  claude
  committed
  0c14155
- Merge next ea0b0961e9b559ab7efb9c599b83ec55a17a41c2 into PR 436
  
  roodboi
  and
  claude
  committed
  3c1bf86
- Merge PR 436 head 3c1bf866b1e411b3d3af0fc99fc475ccec7a7ab4 into hack-1688
  
  roodboi
  and
  claude
  committed
  4305bdf
- fix(env): correct the undetermined shell-value refusal's reason
  
  roodboi
  and
  claude
  committed
  97e5cc5
- Merge next 94bde3c6fa9d3b9b5820430bbac10133cd3f4cac into hack-1688
  
  roodboi
  and
  claude
  committed
  f0189b4
- Merge next fbe6b5ac769c112063ca90a7be32d0b53b1d2ce3 into hack-1688
  
  roodboi
  and
  claude
  committed
  49f8be0
Commits on Nov 3, 2026
- Merge branch 'next' into fix/hack-1688-contract-shell-values
  roodboi
  authored
  7afe02b
- Merge branch 'next' into fix/hack-1688-contract-shell-values
  roodboi
  authored
  9d00419

Commits

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 31, 2026

Commits on Nov 1, 2026

Commits on Nov 2, 2026

Commits on Nov 3, 2026