provisionSandbox.ts now loads its own .env.sandbox (via @std/dotenvloadSync) instead of the shared .env, so the prod target (main.ts → .env) and the sandbox target (provisionSandbox.ts → .env.sandbox) no longer collide.
.gitignore widened to .env* (with !.env.example so the template stays tracked).
.env.example rewritten to document the two-file convention + per-env kubectl secret sources, including the caveat that a prod-seeded sandbox uses prod's admin password (the seed clones it).
`provisionSandbox.ts` now loads its own **`.env.sandbox`** (via `@std/dotenv` `loadSync`) instead of the shared `.env`, so the prod target (`main.ts` → `.env`) and the sandbox target (`provisionSandbox.ts` → `.env.sandbox`) no longer collide.
- `.gitignore` widened to `.env*` (with `!.env.example` so the template stays tracked).
- `.env.example` rewritten to document the two-file convention + per-env `kubectl` secret sources, including the caveat that a **prod-seeded** sandbox uses **prod's** admin password (the seed clones it).
`deno check provisionSandbox.ts` passes.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
provisionSandbox.ts now loads its own .env.sandbox (via @std/dotenv loadSync)
instead of the shared .env, so prod (main.ts → .env) and sandbox
(provisionSandbox.ts → .env.sandbox) configs don't collide. .gitignore widened
to .env* (keeping .env.example tracked). .env.example rewritten to document the
two-file convention + the per-env kubectl secret sources, including the caveat
that a prod-seeded sandbox uses PROD's admin password.
Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
provisionSandbox.tsnow loads its own.env.sandbox(via@std/dotenvloadSync) instead of the shared.env, so the prod target (main.ts→.env) and the sandbox target (provisionSandbox.ts→.env.sandbox) no longer collide..gitignorewidened to.env*(with!.env.exampleso the template stays tracked)..env.examplerewritten to document the two-file convention + per-envkubectlsecret sources, including the caveat that a prod-seeded sandbox uses prod's admin password (the seed clones it).deno check provisionSandbox.tspasses.🤖 Generated with Claude Code