Tom Boucher 0ccc18dd3c fix(#2665): scrub config-location env vars in TEST_ENV_BASE (#3134) ...

* fix(#2665): scrub config-location env vars in TEST_ENV_BASE

TEST_ENV_BASE scrubbed 14 session-identity vars but omitted CLAUDE_CONFIG_DIR,
GSD_RUNTIME, and CODEX_HOME. The config-home resolver (runtime-homes.cts)
consults these env vars BEFORE the HOME-derived fallback, so an ambient
value won unconditionally over a sandboxed HOME. npm test wrote fixtures
into the developer's live config directory when any of these were set.
One leaked fixture was a registered skill (gsd-dev-preferences/SKILL.md)
carrying behavioral directives that loaded into subsequent sessions.

All three config-location vars are now blanked in TEST_ENV_BASE. Per-site
overrides still win (env is spread last in the child-env merge).

* chore(#2665): backfill changeset PR number 3134

* ci: retry shard timeout flake (#2665)

* ci: retry shard-2 timeout flake (#2665)

---------

Co-authored-by: sim <sim@local>

2026-08-06 20:50:21 -04:00

34 KiB

Raw Blame History

View Raw