bchanot/config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(memory): record scrubbed OpenRouter key as BLK-002

Browse Source 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Bastien Chanot 2026-05-27 18:51:19 +02:00
parent f574554ade
commit 942aa8b36b
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
.claude/memory/blockers.md
View File

@ -7,3 +7,10 @@ Friction + root cause + status. Caveman + English.
undefined variable on `:ClassC Foo`. `GenerateClassH` correct (uses `a:name`). Not fixed — undefined variable on `:ClassC Foo`. `GenerateClassH` correct (uses `a:name`). Not fixed —
vim domain, out of onboard scope (user said fix install.sh only). Fix: prefix all with `a:`. vim domain, out of onboard scope (user said fix install.sh only). Fix: prefix all with `a:`.
Status: open, logged in TODO P2. Status: open, logged in TODO P2.
## BLK-002 — hardcoded OpenRouter key in claude-provider — RESOLVED (key rotation pending user)
2026-05-27. `~/.local/bin/claude-provider` had live `sk-or-v1-...` key in heredoc. Adding to
repo (remote git.bchanot.fr) would leak it. Root cause: key inlined in `write_openrouter`.
Fix: repo copy `bin/claude-provider` reads `${OPENROUTER_API_KEY:?...}` from env; key never in
repo. Verified `git grep sk-or` clean. Status: resolved in repo. ACTION user: revoke old key at
openrouter.ai (compromised — was in plaintext + exposed in chat).