Repository navigation

Two-tier component secret delivery + env declarations (#1550) - #1582

Merged

kriszyp merged 23 commits into

mainfrom

kris/component-secrets-1550

Jul 10, 2026

Commits on Jun 8, 2026
- feat: transient private-registry auth for deploy_component
  
  kriszyp
  and
  claude
  committed
  719c612
- fix: route default registry for scope-less auth and preserve inherited npmrc
  
  kriszyp
  and
  claude
  committed
  ea0d9e9
- harden transient registryAuth token handling on deploy_component
  
  kriszyp
  and
  claude
  committed
  1a23196
- Merge remote-tracking branch 'origin/main' into kris/registry-deploy-auth-core
  kriszyp
  committed
  9d46b36
- guard registryAuth against .npmrc line injection; clear in-memory token
  
  kriszyp
  and
  claude
  committed
  4e90560
- Merge remote-tracking branch 'origin/main' into kris/registry-deploy-auth-core
  kriszyp
  committed
  e6b5a5d
Commits on Jun 9, 2026
- Merge remote-tracking branch 'origin/main' into kris/registry-deploy-auth-core
  kriszyp
  committed
  091be8e
Commits on Jul 1, 2026
- Merge remote-tracking branch 'origin/main' into kris/registry-deploy-auth-core
  Kris Zyp
  committed
  69f2549
Commits on Jul 6, 2026
- feat: two-tier component secret delivery + env declarations (#1550)
  
  Kris Zyp
  and
  claude
  committed
  86514db
- fix: address Codex review findings on secret delivery
  
  Kris Zyp
  and
  claude
  committed
  b3a26f9
- fix: drop cycle-level declaration reset (main-thread reload never reprocesses)
  
  Kris Zyp
  and
  claude
  committed
  58444a6
- fix: address Gemini review findings on secret delivery
  
  Kris Zyp
  and
  claude
  committed
  71e29f1
- fix: make secrets proxy enumeration traps inspect-safe outside a binding context
  
  Kris Zyp
  and
  claude
  committed
  52acd79
- refactor: move SecretsView type into componentSecrets, import in index
  
  Kris Zyp
  and
  claude
  committed
  802d351
- feat(secrets): key the process.env delivery tier on the processEnv flag (consumption)
  
  Kris Zyp
  and
  claude
  committed
  d65a538
Commits on Jul 8, 2026
- Merge remote-tracking branch 'origin/kris/component-secrets-1550' into kris/registry-deploy-auth-secretref
  Kris Zyp
  committed
  30276eb
- feat: resolve deploy_component registryAuth from the hdb_secret store (reference, not embed)
  
  Kris Zyp
  and
  claude
  committed
  9a69b30
- feat: persist provided registry tokens as hdb_secret refs; resolve on every install
  
  Kris Zyp
  and
  claude
  committed
  a6865e8
- style: prettier formatting for registry-auth changes
  
  Kris Zyp
  and
  claude
  committed
  f99324e
- fix: address review — npmrc newline invariant, 5xx for server-state resolve failures
  
  Kris Zyp
  and
  claude
  committed
  1e62d71
Commits on Jul 9, 2026
- refactor(components): hoist deploy class to top-level scope (#1717)
  Kris Zyp
  committed
  87a03fe
Commits on Jul 10, 2026
- Merge pull request #1717 from HarperFast/kris/registry-deploy-auth-secretref
  kriszyp
  authored
  df6c34d
- style: fix prettier 3.9 formatting in Application.ts
  
  Kris Zyp
  and
  claude
  committed
  e708e7c

Navigation Menu

Repository navigation

Two-tier component secret delivery + env declarations (#1550) - #1582

Two-tier component secret delivery + env declarations (#1550)#1582
kriszyp merged 23 commits into
mainfrom
kris/component-secrets-1550

Commits on Jun 8, 2026

feat: transient private-registry auth for deploy_component

fix: route default registry for scope-less auth and preserve inherited npmrc

harden transient registryAuth token handling on deploy_component

Merge remote-tracking branch 'origin/main' into kris/registry-deploy-auth-core

guard registryAuth against .npmrc line injection; clear in-memory token

Merge remote-tracking branch 'origin/main' into kris/registry-deploy-auth-core

Commits on Jun 9, 2026

Merge remote-tracking branch 'origin/main' into kris/registry-deploy-auth-core

Commits on Jul 1, 2026

Merge remote-tracking branch 'origin/main' into kris/registry-deploy-auth-core

Commits on Jul 6, 2026

feat: two-tier component secret delivery + env declarations (#1550)

fix: address Codex review findings on secret delivery

fix: drop cycle-level declaration reset (main-thread reload never reprocesses)

fix: address Gemini review findings on secret delivery

fix: make secrets proxy enumeration traps inspect-safe outside a binding context

refactor: move SecretsView type into componentSecrets, import in index

feat(secrets): key the process.env delivery tier on the processEnv flag (consumption)

Commits on Jul 8, 2026

Merge remote-tracking branch 'origin/kris/component-secrets-1550' into kris/registry-deploy-auth-secretref

feat: resolve deploy_component registryAuth from the hdb_secret store (reference, not embed)

feat: persist provided registry tokens as hdb_secret refs; resolve on every install

style: prettier formatting for registry-auth changes

fix: address review — npmrc newline invariant, 5xx for server-state resolve failures

Commits on Jul 9, 2026

refactor(components): hoist deploy class to top-level scope (#1717)

Commits on Jul 10, 2026

Merge pull request #1717 from HarperFast/kris/registry-deploy-auth-secretref

style: fix prettier 3.9 formatting in Application.ts