Module context 

The resolved context one setup run works in: target, repository, forge, the forge CLI binary, and the environment a step receives.

The environment is constructed, not inherited: env_clear plus exactly the declared variables, the forge CLI’s own configuration and authentication variables, and — only for the steps that need them — the bot credentials. The parent’s environment does not leak into a privileged child, no secret is ever an argv value, and key material reaches no environment at all: rk reads the key the operator named and writes it to the step’s standard input. super::secrets owns that boundary.

Re-exports

pub use super::secrets::VALUE_VARS as SECRET_VARS;

Structs

Ctx

One resolved run context.

Constants

TRUNK_BRANCH

The trunk every setup asserts: the one permanent branch; named so a later option can change it.