gbrain

admin/gbrain

Fork 0

mirror of https://github.com/garrytan/gbrain.git synced 2026-07-27 22:15:33 +00:00

Files

T

History

bb3376e3b0 fix(security): prevent leaking admin bootstrap token to non-TTY stdout (#2625 )

* fix(security): #2624 don't print admin bootstrap token on non-TTY (log-leak)

serve --http printed the generated admin token in the startup banner
unconditionally. In containerized deploys stderr ships to centralized log
storage, turning the token into a standing secret in logs.

Fail-safe default: the generated token now prints only when stderr is an
interactive TTY. Non-TTY starts hide it (--print-admin-token forces it;
$GBRAIN_ADMIN_BOOTSTRAP_TOKEN + --suppress-bootstrap-token already existed).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(security): #2624 banner shows 'from env' before non-TTY hidden guard

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-16 13:34:28 -07:00

assets/wasm

v0.40.9.0 feat(chunker): .sql indexing via tree-sitter + code-def on SQL DDL (#1173 ) (#1350 )

2026-05-24 09:30:57 -07:00

commands

fix(security): prevent leaking admin bootstrap token to non-TTY stdout (#2625 )

2026-07-16 13:34:28 -07:00

core

fix(think): enforce source scope across gather (#2200 ) (#2739 )

2026-07-13 00:09:27 -07:00

eval

v0.42.56.0 feat(chronicle): Life Chronicle — temporal timeline + thought diary + bi-temporal per-entity ontology (#2390 ) (#2533 )