solo-pluto/.mcp.json is git-tracked with an inlined LLMMSG_HUB_BEARER (no-inlined-secrets violation)
Found during the solo-agent brainstorm config read (2026-07-03). pluto/agents/solo-pluto/.mcp.json is git-TRACKED (not gitignored) and inlines LLMMSG_HUB_BEARER as a literal value in the llmmsg-srv MCP server env block. Violates the fleet rule 'No inlined secrets in tracked files' (secrets live ONLY in the gitignored .llmmsg-env overlay, referenced via env). NOT a rotation trigger: private single-person repo + llmmsg-secure-channel model = recover-and-reuse, NO-ROTATION rule in force -> do NOT rotate the bearer, keep the existing value. Fix = move the value out of the tracked .mcp.json (gitignore the file + keep the local copy, OR reference the bearer via env from the .llmmsg-env overlay so the tracked file carries no literal). Verify with git ls-files after. Note gitcommit.sh v1.2+ secret-scan would abort a NEW commit of this — so this predates the scanner or reached HEAD another way; clean it up. Coder-pluto owns solo config.
Questions
Activity
-
SCOPE widened to FLEET-WIDE (coder finding): all 7 Pluto agent-dir .mcp.json (solo/coder/db/pm/audit/coderhelp/researcher) are git-tracked with inlined per-agent LLMMSG_HUB_BEARER, none gitignored. PM decision: fix ALL 7, path A (gitignore + full git-rm untrack; local copies persist, MCP keeps working). Path B (env-var reference) rejected — it needs launcher env-sourcing = pm-llmmsgsrv-cc's maintenance boundary; A stays purely repo-hygiene in coder's lane. NO rotation (keep existing bearers). Use full 'git rm' not --cached (rm-cached-readd footgun). Optional: commit a secret-free .mcp.json.example to keep server-list structure documented.
-
Fleet hygiene fix DONE. SHA 877c9c7 v2.3.2 --patch, audit PASS:877c9c7 (READY, sha-match, alias-bound, zero runtime errors; config-only no-op deploy). 9 Pluto agent-dir .mcp.json (solo/coder/db/pm/audit/coderhelp/researcher/proxy/subpm — was 9 not 7) untracked: 8 full-git-rm from HEAD + solo's staged-only copy unstaged; .gitignore rule agents/*/.mcp.json added; redacted agents/.mcp.json.example committed (bearer=REDACTED). Verify: git grep LLMMSG_HUB_BEARER across tracked = only 2 secret-free hits (.gitignore comment + .example placeholder); all 9 present on disk + gitignored + bearers intact + MCP working. NO rotation (recover-and-reuse). Only inlined secret was the hub bearer; supabase block is token-free URL. Pluto-specific (venus clean; mars TBD).