feat(secrets): non-secret workspace variables - #6388

Open

mzxchandra wants to merge 16 commits into

feat/workspace-variables

Commits on Aug 7, 2026

feat(secrets): add non-secret workspace variables
mzxchandra
committed
5c1a323
feat(copilot): consume the non-secret env var contract
mzxchandra
committed
1ae1033
test(secrets): pin that the non-secret exemption is inert and surgical
mzxchandra
committed
fb850c8
fix(secrets): gate the non-secret bypass on workspace access
mzxchandra
committed
bfd7825
feat(secrets): split the secrets page into secrets and variables sections
mzxchandra
committed
b20f8aa
Merge remote-tracking branch 'origin/staging' into feat/workspace-variables
mzxchandra
committed
633eb5e
fix(secrets): use getErrorMessage for the visibility-change toast
mzxchandra
committed
1373fe2
fix(secrets): authorize visibility changes before any write
mzxchandra
committed
686e61c
fix(secrets): re-decide visibility authorization at write time
mzxchandra
committed
2fac109
Merge remote-tracking branch 'origin/staging' into feat/workspace-variables
mzxchandra
committed
feb112c
fix(secrets): make env writes and their authorization one transaction
mzxchandra
committed
b552c94
fix(secrets): lock the org-admin grant too, and read auth on the tx
mzxchandra
committed
40c5188
fix(secrets): show a renamed variable as a variable before save
mzxchandra
committed
2e771db
fix(secrets): let server visibility outrank the carried rename
mzxchandra
committed
626d845
fix(secrets): never send carried rename visibility for a known key
mzxchandra
committed
44f331a
fix(db): add the visibility constraint NOT VALID, then validate
mzxchandra
committed
d991a08