diff --git a/persistent-memory.md b/persistent-memory.md index 73896a0..2af4411 100644 --- a/persistent-memory.md +++ b/persistent-memory.md @@ -298,9 +298,12 @@ _As of 2026-06-20:_ via basic-auth (`claude-bot:gitea-password`, POST `/users/claude-bot/tokens`); dropped mode-600 `~/.claude-bot-token-issues` → worldtree-dev swaps. **Gitea COLLAPSES `read:issue` into `write:issue`** (write implies read) so the granted set shows - write-only but read IS satisfied (GET issues → 200). Revoke the old - write:repository-only token once they confirm swap. Advances the credential-migration - directive. ALSO this session: re-staged cb2a79a `policies.yaml` (readonly-admin allow + write-only but read IS satisfied (GET issues → 200). Old token (id 15, + worldtree-dev-actions-20260620) REVOKED (DELETE 204) after worldtree-dev verified + read+write end-to-end via `core.issues` (show/list/comment on #311) → claude-bot now + carries ONE consolidated worldtree-dev token (id 16) + arbo-ci (id 14), no stale dups. + Advances the credential-migration directive (worldtree-dev fully self-serve: Actions + + deploys + issues on one token). ALSO this session: re-staged cb2a79a `policies.yaml` (readonly-admin allow rules) to demo+personal (see Current-state ratatoskr entry). - `[2026-06-20]` **rest-server-ana recovered + backup prevention shipped + worldtree-dev