UnENVerse 2026-09-04
All six answered. Verification:
Handoff 26 — 2026-09-04
- All six answered. Verification:
`- npx vitest run 931 passed (42 files) # was 928; +3 caps-lock tests
- npx tsc --noEmit clean
- npm run lint exit 0, 0 errors, 490 warnings (suppressed backlog)
- npm run format:check exit 0
- cargo check --workspace clean
- cargo doc --workspace --no-deps --locked clean
- npx playwright test behaviour 3 passed
`eslint-suppressions.jsonlost oneno-floating-promisesentry via--prune-suppressions(never--suppress-all), becauseinit()is now
Caps Lock bug, and Phase 19 finished (TOTP, onboarding, accessibility)
- Everything below is complete and verified.
`- npm test 42 files, 928 tests, all passing
- cargo test --workspace 251 tests, all passing
- npm run typecheck clean
- npm run lint 0 errors, 490 warnings (the pre-existing ratchet)
- npm run lint:rust clean
- npm run format:check clean
`- committing, which cuts a release:
build.ymlgates on whetherv<version> - already exists, so the push is the trigger.
Phase 22 designed: credential shape, copy profiles, env naming
- All of it is in
CLAUDE.md, in a new## Phase 22section: - The naming template —
[PREFIX_] PROVIDER [_VERSION] [_LABEL] [_ROLE], - with normalisation rules, and
envName()as the single builder that dotenvKeyandimport-export.ts'senvKeyboth collapse into.- New fields —
primary_role,secret_role,label,user_agent, env_name_override, pluspublicandroleonextra_vars.- Copy profiles — basic / extended / full, metadata as comments by default.
- **
env_varwithout a mandatory primary**, with the audit list of six places - that assume the primary value is never empty.
- Cookies — a new
SecretType, five copy targets, a paste-parser. - The IRL shapes table — ten credential shapes taken from real issuers, and
- what each one breaks today.