refactor: scope haskytech-seed to dev only, remove staging #7

Merged

john merged 1 commit from feat/seed-dev-only into dev 2026-07-26 16:05:33 +00:00

Conversation 0 Commits 1 Files changed 2 +16 -40

john commented 2026-05-29 23:22:02 +00:00

Owner

Copy link

Summary

Scopes haskytech-seed to dev environments only. Staging credentials are now managed via Bitwarden and the /wire-passwords skill.

Changes

• cli.py: --env choices reduced to ['dev'] only
• config.py: Removed _read_staging_password(), ~/secrets/ legacy path, and dotenv import. Added explicit error on non-dev env.

Credential Architecture

Environment	Source of truth	Tool
Dev	haskytech-seed (canonical password)	haskytech-seed → DB, /wire-passwords → BW sync
Staging	Bitwarden (human-managed)	/wire-passwords → DB seed

Tests

All 18 existing tests pass. No staging-specific tests existed.

## Summary Scopes haskytech-seed to dev environments only. Staging credentials are now managed via Bitwarden and the /wire-passwords skill. ## Changes - **cli.py**: --env choices reduced to ['dev'] only - **config.py**: Removed _read_staging_password(), ~/secrets/ legacy path, and dotenv import. Added explicit error on non-dev env. ## Credential Architecture | Environment | Source of truth | Tool | |---|---|---| | Dev | haskytech-seed (canonical password) | haskytech-seed → DB, /wire-passwords → BW sync | | Staging | Bitwarden (human-managed) | /wire-passwords → DB seed | ## Tests All 18 existing tests pass. No staging-specific tests existed.

john added 1 commit 2026-05-29 23:22:02 +00:00

refactor: scope haskytech-seed to dev only, remove staging ... 4ad4c05eab

haskytech-seed is the source of truth for dev credentials. Staging
credentials are managed separately via Bitwarden and /wire-passwords.

- Remove staging from --env choices (dev only)
- Remove _read_staging_password() and ~/secrets/ legacy path
- Remove python-dotenv import from config (still used in detect)
- Add explicit error if env != dev
- Simplify get_users_for_env to single dev path

john force-pushed feat/seed-dev-only from 4ad4c05eab to 4d26cbc702 2026-05-29 23:36:58 +00:00 Compare

john force-pushed feat/seed-dev-only from 4d26cbc702 to 56d4a15fba 2026-05-29 23:41:42 +00:00 Compare

john referenced this pull request from a commit 2026-06-13 06:43:57 +00:00

fix: sync_branch_protection_contexts never falls back to (push) suffixes

john merged commit 4749293a6e into dev 2026-07-26 16:05:33 +00:00

john referenced this pull request from a commit 2026-07-26 16:05:34 +00:00

Merge pull request 'refactor: scope haskytech-seed to dev only, remove staging' (#7) from feat/seed-dev-only into dev

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

haskytech/haskytech-modules-py!7

No description provided.