GRAB Racem a20628d334 fix(config): fail on a malformed config.json and escape install.sh values ...

config.Load discarded the json.Unmarshal error, so a config.json that did not
parse was treated as absent: startup reported "no database config found"
and skill_dir silently fell back to the default. Load now returns read and
parse errors (a missing file is still not an error); PostgresDSN and SkillDir
pass them up, and main exits with the message.

install.sh wrote the database values into config.json unescaped, so a password
containing " or \ produced invalid JSON, which the old Load then ignored. The
values are now JSON-escaped and the port must be numeric. The .env sed
replacements escape \, | and & so those characters no longer break the
substitution or get rewritten by it.

2026-11-03 23:22:34 +01:00

..

main_test.go

fix(security): scrub startup secrets before any child can spawn

2026-11-03 22:14:35 +01:00

main.go

fix(config): fail on a malformed config.json and escape install.sh values

2026-11-03 23:22:34 +01:00