[waleedlatif1]

Summary

• sim-setup wrote env values containing $ unquoted (SMTP_PASSWORD=pa$$word). Next's dotenv, Bun, and Docker Compose all expand $NAME in unquoted values, so a password or API key containing $ was silently corrupted and auth failed with no error
• Single quotes don't fix it: Next and Bun expand $NAME even inside single quotes. Values containing $ are now written as "…\$…", the one form Next, Bun, and Compose all read literally; a value that also has a double quote, backslash, or backtick is refused with a clear message instead of written in a form that would expand
• parseValue unescapes \$ in double-quoted values so sim-setup reads its own writes back unchanged

Type of Change

• Bug fix

Testing

• packages/sim-setup/src/env-files.test.ts: the written file is loaded through @next/env loadEnvConfig for pa$$word, key$HOME, key${HOME}suffix, it's $5, plus a parseEnv round-trip; all 5 new cases fail on the pre-PR code (and on a single-quote attempt) and pass now, 15/15
• Bun and a real docker compose run with env_file checked by hand against the same written file: every value read literally
• biome on the changed files; full type-check, audits, and suite left to CI

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Nov 10, 2026 11:31pm UTC

[cubic-dev-ai]

No issues found across 2 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no actionable new issue was found.

Summary

sim-setup now writes dollar-containing values inside double quotes with each $ escaped.

• Environment values keep their dollar signs when setup writes them.

_{Reviews (2) · Last reviewed commit: "fix(sim-setup): write $ as \$ in double ..." · Reviewed by Greptile}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 2 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}