Repository navigation
feat: plan native managed environment bindings without decryption - #157
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Native validation leaves managed env references symbolic, so it cannot show whether a selected workload has every required binding. Add an explicit
hack config planoperation that uses the existing env owner’s key/scope/secret metadata, then binds references in the Rust compiler. Incomplete bindings return exit 1; ordinaryconfig validatestill performs no managed-document reads.The report preserves worktree/overlay precedence, empty values, tombstones, jobs, inactive declarations and the workload-named-host rule. It does no key lookup, decryption or runtime effects and leaves both authored and local hashes unchanged. Compiler transport now also terminates its owned POSIX process group and cancels pipe readers, including wrappers with descendants holding pipes.
Validation so far: 42 Rust tests plus fmt/Clippy; 65 native/legacy env tests; 68 transport tests; 64 acquisition/CLI tests; relocated compiled CLI checks without Bun/Rust on PATH; independent review; full typecheck/check/privacy and workflow lint pass. Fresh full repository gates pass: 2,339 CLI tests, 68 skips, zero failures; DB tasks reused valid cache (2 tests). A complete signed private candidate passed isolated installation, installed metadata planning without host Bun/Rust, incomplete/invalid-metadata refusal, repeat-install home preservation and deselect/reselect. No tag, release or existing installed channel changed. Hosted CI must pass on the exact head before merge.
Release intent:
feat, optional experimental metadata planning. NC02 remains in progress for the rest of the frozen contract; native execution is NC03 and adoption is NC04. This report does not establish atomic runtime admission or secret delivery.Tracks HACK-1220.