secrets:read caller scopes + rt-client packaging honesty - #8

Merged

m4ttheweric merged 4 commits into

mainfrom

deck-secrets-whitelist

Aug 21, 2026

Commits on Aug 21, 2026

RT: secrets:read gains a deck-scoped whitelist (cfApiToken/cfZoneId) + rt-client dist guard
m4ttheweric
and
claude
committed
65e0c64
RT: review fixes — detect-not-repair dist guard, scope union type, drop task refs
m4ttheweric
and
claude
committed
ba806d6
RT: transport.ts DEFAULT_SOCK resolves at call time, not module load
m4ttheweric
and
claude
committed
eca86e6
RT: dist-freshness test covers the full dist tree, not just two .d.ts files
m4ttheweric
and
claude
committed
8ff86c7