Wave OAuth credentials not bound in production (WAVE_CLIENT_ID / WAVE_CLIENT_SECRET) #223

wrangler.jsonc:17 documents that chittyfinance needs WAVE_CLIENT_ID and WAVE_CLIENT_SECRET. On 2026-10-21 the Worker held neither, at top level or under --env production: 7 secret names in each, none WAVE. The CF Secrets Store (e914522471964c3c8cf1e601770edcc3) has no WAVE name either. The Wave OAuth flow is therefore likely failing in production.

Delivery path once the values are in ChittySecrets authority: a Secrets Store binding sealed by chittysecrets' daily job (chittysecrets#27, etc/sealed-bindings.manifest). Getting the values there is tracked in chittysecrets#29.

🤖 Generated with Claude Code