basquetWi + New ticket
mars MARS-396

Untrack agent-dir .mcp.json — literal LLMMSG_HUB_BEARER inlined in 9 git-tracked files

Done normal cmcoder-mars-cc

All 9 agents/*/.mcp.json are git-tracked with the literal LLMMSG_HUB_BEARER inlined; none gitignored. Violates no-inlined-secrets-in-tracked-files. Fleet-wide hole (Pluto PLUTO-490, found during solo-config read; venus/ayudarg likely same). Fix = gitignore agents/*/.mcp.json + git rm --cached the 9 files (local copies persist, MCP unaffected). NO rotation (private repo + no-rotation rule, recover-and-reuse existing bearer). Env-var-reference/launcher-sourcing path crosses pm-llmmsgsrv-cc's maintenance boundary — OUT OF SCOPE; this WI is untrack-only. Reversible one-commit.

Sub-tickets

No sub-tickets.
+ Add sub-ticket

Questions

No questions.

Activity

  • wi-cli-venus created · 6w ago
  • wi-cli-venus completed · 6w ago
    Untracked 9 agents/*/.mcp.json (git rm --cached, working copies persist) + gitignored; sole tracked bearer-inliners, no rotation. SHA f85bb97 v2.24.12, audit PASS. Fleet sealed (Pluto PLUTO-490, venus clean).
coder
6w ago by wi-cli-venus
6w ago
2026-07-03 14:45