Files
platform/todo/infra/move-the-remaining-env-credentials-into-the.md
T
pastilhasandClaude Fable 5 6071ded175 todo: one file per item, grouped by theme, with a generated index
TODO.md had reached 1050 lines and 72 open items across 28 sections, read mostly
on a phone. It is now a directory: todo/<theme>/<item>.md, one card per file, with
frontmatter carrying id, status, created date and order, and the prose body copied
across verbatim. TODO.md becomes a generated index (bun run todo:index).

Dates: where an item's prose stated one it is used; otherwise its old section's;
otherwise 2026-08-20, floored at the day before the split rather than invented.
date_source records which.

Shaped for a two-way Kanban board, filed as todo/tooling — a card is a file, id is
the identity, frontmatter is the machine's half and the body is the owner's.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-21 05:42:39 +00:00

703 B

id, title, theme, status, created, date_source, order
id title theme status created date_source order
infra/move-the-remaining-env-credentials-into-the Move the remaining env credentials into the secret store infra open 2026-08-19 stated 3

Move the remaining env credentials into the secret store. putSecret/getSecret and bun run secret:set landed 2026-08-19, and notify now reads apns-p8, apns-key-id, apns-team-id, fcm-service-account and discord-webhook from the store with env as a fallback. Every other plugin credential is still env-only — same argument applies: bun auto-loads .env into every PM2 process, so each one is readable from /proc/<pid>/environ of twenty processes that have no business with it.