mirror of
https://github.com/stablyai/orca.git
synced 2026-11-13 17:37:40 +00:00
* fix(recipes): warn which credentials recipe scripts inherit, add opt-in passEnv allowlist Recipe lifecycle scripts run locally with Orca's full environment. Keep that default (provider CLIs and git auth rely on it) but name the credential-like variables in Settings and let a recipe opt into passEnv so only listed variables plus a safe base set reach its scripts. * fix(recipes): fail closed on a malformed passEnv instead of dropping the recipe Dropping the recipe let a stored snapshot or a same-id plugin recipe run with the full environment. Keep it with an empty allowlist and a diagnostic, match base variable names exactly outside Windows, and make the warning copy apply to any recipe source. * fix(recipes): import user-agent-platform from its new app-shell location