2 Commits

Author	SHA1	Message	Date
Paul Payne	d6f5678948	test: cover the config-editor globals regression + secrets surfaces ... - endpoint-level: a deployment/program edit via /config/* leaves castle.yaml globals byte-identical (the exact regression that shipped — the endpoints were tested but nobody asserted globals survived) - write_program_file leaves globals untouched (core) - /secrets/info reports the backend Still uncovered (tracked): castle mesh CLI, direct-read refactor (dns/stacks), backend-aware doctor, and all frontend (no test runner configured).	2026-07-07 08:46:38 -07:00
Paul Payne	01d0abd5ed	feat(app): node-override secrets UX + supabase scaffold refresh ... - Secrets page: 'Node overrides' section (per-node values that shadow a shared secret on that node) — list/reveal/edit/delete + add; shared secrets show an 'override: <node>' badge. Authority-only writes. - API: GET /secrets/overrides, GET/PUT/DELETE /secrets/overrides/{node}/{name}; OpenBaoBackend.list_node_overrides enumerates castle/nodes/* - supabase scaffold: drop stale 'cat ~/.castle/secrets/...' + 'castle deploy', point at the dashboard Secrets page / castle apply - tests: file-backend override endpoints (empty/400/404) Verified live: primer's postgres override discoverable + full CRUD round-trip.	2026-07-07 07:54:28 -07:00