From 17f4c79fe438340daa7530e8af6d6c73cba9d4dc Mon Sep 17 00:00:00 2001 From: Abiba Date: Thu, 16 Jul 2026 19:22:48 +0000 Subject: [PATCH] vault: sync BAGGY_LITELLM_API_KEY = KOONIMO_LITELLM_API_KEY (same agent CT113) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Baggy = Koonimo (CT 113). The vault had two divergent keys: - BAGGY_LITELLM_API_KEY = sk-QT-kDt8Szo... (stale, 401) - KOONIMO_LITELLM_API_KEY = sk-OEK7z26n6... (valid, 200, session-13 rotation) Synced BAGGY to match KOONIMO (the valid key). Added contract note: both secrets MUST mirror each other. This was the root cause of Koonimo's 401 after migration — the ghost process had BAGGY in its env instead of KOONIMO. --- litellm-api-keys.prose.md | 1 + 1 file changed, 1 insertion(+) diff --git a/litellm-api-keys.prose.md b/litellm-api-keys.prose.md index 15b2064..bbe655c 100644 --- a/litellm-api-keys.prose.md +++ b/litellm-api-keys.prose.md @@ -121,6 +121,7 @@ runs as user `jerome`, not systemd root, needs user-scope adaptation). | mumuni | .123 | infisical-gateway.sh + user-login machine identity | MUMUNI_LITELLM_API_KEY | ✅ vault-backed | | koby | .129 | infisical-gateway.sh + service token (migrated 2026-07-16) | KOBY_LITELLM_API_KEY | ✅ vault-backed, Zulip (tanko-bot@) + Telegram | | koonimo | .114 | infisical-gateway.sh + service token (migrated 2026-07-16) | KOONIMO_LITELLM_API_KEY | ✅ vault-backed | +> **Baggy = Koonimo (CT 113).** `BAGGY_LITELLM_API_KEY` and `KOONIMO_LITELLM_API_KEY` MUST mirror each other in the vault — they are the same agent under different aliases. | tanko | .122 | **hardcoded in config.yaml** (runs as user jerome, not systemd) | TANKO_LITELLM_API_KEY | ⚠️ TODO: migrate to user-scope wrapper | ### Tanko migration (pending)