pastilhasandClaude Fable 5
6071ded175
TODO.md had reached 1050 lines and 72 open items across 28 sections, read mostly on a phone. It is now a directory: todo/<theme>/<item>.md, one card per file, with frontmatter carrying id, status, created date and order, and the prose body copied across verbatim. TODO.md becomes a generated index (bun run todo:index). Dates: where an item's prose stated one it is used; otherwise its old section's; otherwise 2026-08-20, floored at the day before the split rather than invented. date_source records which. Shaped for a two-way Kanban board, filed as todo/tooling — a card is a file, id is the identity, frontmatter is the machine's half and the body is the owner's. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
17 lines
703 B
Markdown
17 lines
703 B
Markdown
---
|
|
id: infra/move-the-remaining-env-credentials-into-the
|
|
title: "Move the remaining env credentials into the secret store"
|
|
theme: infra
|
|
status: open
|
|
created: 2026-08-19
|
|
date_source: stated
|
|
order: 3
|
|
---
|
|
|
|
**Move the remaining env credentials into the secret store.** `putSecret`/`getSecret` and
|
|
`bun run secret:set` landed 2026-08-19, and notify now reads `apns-p8`, `apns-key-id`,
|
|
`apns-team-id`, `fcm-service-account` and `discord-webhook` from the store with env as a
|
|
fallback. Every other plugin credential is still env-only — same argument applies: bun
|
|
auto-loads `.env` into every PM2 process, so each one is readable from `/proc/<pid>/environ`
|
|
of twenty processes that have no business with it.
|