发布

  • v1327 2e0366c214

    chore(security): allow .env reads + add rotate-npm-token.sh

    frostbyte_neo 发布于 2026-05-25 14:32:46 +00:00

    Removes Read(./.env) / Read(./.env.*) from .claude/settings.json deny
    list so utility scripts can read tokens from .env and push them into
    GCP Secret Manager. .env itself remains gitignored.

    scripts/rotate-npm-token.sh extracts NPM_TOKEN from .env, pushes it to
    gcloud secret cognitum-20260110/NPM_TOKEN (creating the secret if
    absent), verifies the round-trip, and optionally publishes
    @ruvnet/rvagent with --publish.

    Co-Authored-By: claude-flow ruv@ruv.net

    下载附件