Module context 

The resolved context one setup run works in: target, repository, forge, the forge CLI binary, and the environment a step receives.

The environment is constructed, not inherited: env_clear plus exactly the declared variables, the forge CLI’s own configuration and authentication variables, and — only for the steps that need them — the bot credentials. The parent’s environment does not leak into a privileged child, no secret is ever an argv value, and key material reaches no environment at all: rk reads the key the operator named and writes it to the step’s standard input. super::secrets owns that boundary.

Re-exports

pub use super::secrets::VALUE_VARS as SECRET_VARS;

Structs

Ctx

One resolved run context.

Functions

resolve_cli

Resolve the forge CLI once, at context time: the RK_GH_BIN and RK_GLAB_BIN overrides first, then a PATH search.