2 Commits

Author	SHA1	Message	Date
Yichen Jiang	aee06097ee	feat(credentials): file-backed provider layering process env over $DSH_HOME/.env ... Live environment wins read-only (shadowed writes reject instead of appearing to succeed); the file is the writable source with byte-preserving line edits, a quoting ladder dotenv reads back verbatim, atomic 0600 writes, wholesale snapshot replacement on reload, and write-drain teardown.	2026-07-29 13:18:28 +08:00
Yichen Jiang	3a794495ad	feat(credentials): abstract credential seam (ctx.credentials) ... References-not-values doctrine: settings carry env-shaped CredentialRefs, providers own storage. Per-operation resolve, UI-safe describe, fail-loud set/unset under read-only shadowing, credentials/updated commit event with a live-service invariant.	2026-07-29 13:03:12 +08:00