Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

@@ -1286,6 +1286,21 @@ A machine config may leave out the keys that the `.werkrevisor.toml` of its repo
 these keys show as "only in the file", and `--apply` would add them.
 `--apply` keeps the old file as `.werkator.yml.bak-config-<time>`, and the two newest of these backups.
 
+Rotate one secret, e.g. `OPENROUTER_API_KEY`, in each machine config that has it and in `~/.config/ai-coding-agents/secrets.env`:

@@ -0,0 +60,4 @@
+    try:
+        with open(path) as f:
+            found = find(f.read().split("\n"), key, yaml)
+    except (OSError, UnicodeDecodeError):

@@ -0,0 +68,4 @@
+def backups(path):
+    directory, name = os.path.split(path)
+    return sorted(os.path.join(directory, n) for n in os.listdir(directory or ".")
+                  if n.startswith(name) and n != name and os.path.isfile(os.path.join(directory, n)))

@@ -0,0 +69,4 @@
+        return Outcome(False, f"the token belongs to {login!r}, not to {GITEA_USER}")
+    status, repo = _call(opener, "GET", f"{GITEA_URL}/api/v1/repos/{GITEA_REPO}", header)
+    if status != 200:
+        return Outcome(False, f"{GITEA_USER}, but reading {GITEA_REPO} gives HTTP {status}")

@@ -0,0 +70,4 @@
+    status, repo = _call(opener, "GET", f"{GITEA_URL}/api/v1/repos/{GITEA_REPO}", header)
+    if status != 200:
+        return Outcome(False, f"{GITEA_USER}, but reading {GITEA_REPO} gives HTTP {status}")
+    if not (repo.get("permissions") or {}).get("push"):

@@ -0,0 +135,4 @@
+        print(__doc__.strip(), file=sys.stderr)
+        return 2
+    key = argv[0]
+    value = stdin.read().strip()

@@ -0,0 +128,4 @@
+        else
+            value=$(cat)
+        fi
+        old=$(digest 2>/dev/null) || old=""

@@ -175,0 +185,4 @@
+   beim OpenRouter-Key auch einen PR von werkrevisor mit Diagrammen.
+   Fehlt ein PR, einen Review in der Werkator-Oberfläche neu starten.
+   Dass der neue Wert genutzt wird, zeigen OpenRouter mit der Nutzung je Key und Gitea mit „Zuletzt verwendet“ am Token.
+6. Den alten Wert beim Dienst widerrufen.

@@ -0,0 +84,4 @@
+    """The backups of path whose value of KEY has the SHA-256 digest; an unreadable backup counts as not holding it."""
+    held = []
+    for backup in backups(path):
+        try:

@@ -0,0 +65,4 @@
+import host_secret
+try:
+    value = host_secret.value_of(sys.argv[3], sys.argv[2], False)
+except host_secret.SecretError as e:

@@ -0,0 +128,4 @@
+        [[ -z "$(digest optional)" ]] || { echo "$(basename "$secrets_env") sets $key already" >&2; exit 2; }
+        payload="{}"
+        # The value goes from the host straight into the local set, through pipes only.
+        payload=$(retrying on_host export) && locally set

@@ -0,0 +95,4 @@
+        echo "connection refused, retry in $((30 * attempt)) s" >&2
+        sleep $((30 * attempt))
+    done
+    return 1

@@ -250,6 +250,17 @@
       " PR#86: the old path ~/.config/pr-agent-test/ is gone.
     - [^] #ops.rotate: Replace the token of ai-reviewer that reached a transcript (XS)
       " 2026-10-11: new token in the five machine configs on mih09; the old one is revoked.
+    - [~] #ops.rotate2: Rotate the four secrets of the review builds without a stop