fabro/lib
Bryan Helmkamp f40bcd1215
fix(server): forward GITHUB_APP_PRIVATE_KEY via worker_command
The previous commit added GITHUB_APP_PRIVATE_KEY to the worker env
allowlist, but the secret is in server.env / ServerSecrets, not in the
server's process env, so the allowlist couldn't see it.

Forward the value explicitly from ServerSecrets at spawn time, mirroring
how FABRO_WORKER_TOKEN is already passed. Keeps the allowlist narrow as
a fail-closed barrier against ambient env leakage and keeps ServerSecrets
as the single read site for server.env secrets.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-29 08:09:02 -04:00
..
crates fix(server): forward GITHUB_APP_PRIVATE_KEY via worker_command 2026-04-29 08:09:02 -04:00
packages/fabro-api-client fix(web): include server URL in auth quick start 2026-04-29 07:45:17 -04:00