zooqueenandHanzo Dev e34e3ba84f network: an invocation keeps its network; devnet trusts one brand ...

Each invocation is bound to the network active as it starts and keeps it
through every config reload, so selecting another network in another shell
never moves where a running command's credentials go. A coding session's
token helper names its network and realm (`auth token --brand <realm>
--network <name>`) and refuses a realm that is not that network's; the
session refuses a network redefined since it started.

A network with an issuer of its own refuses every brand but the default,
so `--brand lux` on devnet sends nothing. A network that names no issuer
is sent no credential. A custom entry named for a built-in moves its chain
endpoints only, never its API or issuer. Plain http is for a parsed
loopback address or localhost only.

Co-authored-by: Hanzo Dev <[email protected]>

2026-10-16 11:38:56 -07:00

..

build.rs

build: an image, built by BuildKit in its own microVM

2026-09-15 11:59:39 -07:00

cli.rs

network: an invocation keeps its network; devnet trusts one brand

2026-10-16 11:38:56 -07:00

menu.rs

Under --as, sign out and hand out only the identity held in that org, and redact the tokens of a token set in debug output.

2026-09-29 03:30:46 -07:00

spec_drift.rs

dev: Gen 775f313, one config for the host's life, and tests in no one's home

2026-10-16 10:45:00 -07:00

test_installer.py

dev: Gen 7846eed; installs gen from v tags, checks what gh can check

2026-10-16 10:45:00 -07:00