mirror of
https://github.com/cozystack/cozystack.git
synced 2026-10-28 15:47:33 +09:00
Timofei Larkin
9a148842b8
Three ordinary writes replaced or removed account Secrets. A duplicate create seeded before learning the release existed, so it replaced the live application's Secrets and then removed its own. Server dry-run wrote and pruned for real, and a dry-run mint replaced the password. An update seeded every declared account without a Secret, which after the conversion swaps a working password for a discarded one. A create now stops on an existing release before touching a Secret, and replaces any leftover at an account's name unless a live release owns it, so the new account always gets a fresh identity and an owner. Dry-run writes nothing anywhere. An update seeds only the accounts it adds. A mint requires a declared account even where the Secret exists, and the write paths read through the uncached client, since a stale read here is a replaced or recreated Secret. Assisted-by: LLM Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>