replit-tools 1.0.9 → 1.0.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -278,10 +278,16 @@ Running the installer again is safe - it preserves existing data.
|
|
|
278
278
|
## Security
|
|
279
279
|
|
|
280
280
|
The installer adds these to `.gitignore`:
|
|
281
|
-
- `.claude-persistent/` (contains credentials)
|
|
282
|
-
- `.codex-persistent/` (contains credentials)
|
|
283
281
|
|
|
284
|
-
|
|
282
|
+
| Path | Contains | Why Protected |
|
|
283
|
+
|------|----------|---------------|
|
|
284
|
+
| `.claude-persistent/` | OAuth tokens, refresh tokens, conversations | **Critical** - full account access |
|
|
285
|
+
| `.codex-persistent/` | API keys in `auth.json`, conversations | **Critical** - full account access |
|
|
286
|
+
| `.claude-sessions/` | Session UUIDs, terminal mappings | Session metadata |
|
|
287
|
+
| `.persistent-home/` | Bash history | May contain typed secrets |
|
|
288
|
+
| `logs/auth-refresh.log` | Token refresh timestamps | Auth timing info |
|
|
289
|
+
|
|
290
|
+
Your API keys, OAuth tokens, and conversation history won't be committed to git.
|
|
285
291
|
|
|
286
292
|
## Why "DATA Tools"?
|
|
287
293
|
|