total-recall-brain 3.41.3 → 3.41.4

package/frontend/dist/index.html

@@ -17,7 +17,7 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
     <link href="https://fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,600;12..96,800&family=Cabinet+Grotesk:wght@700;800&family=Chivo+Mono:wght@500;700&family=Cinzel:wght@600;700;900&family=Cormorant+Garamond:ital,wght@0,600;0,700;1,600;1,700&family=DM+Mono:wght@500&family=DM+Sans:wght@500;700&family=Fraunces:opsz,wght@9..144,600;9..144,800&family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500;700&family=Lexend:wght@600;800&family=Newsreader:ital,opsz,wght@0,6..72,600;1,6..72,600&family=Orbitron:wght@700;900&family=Outfit:wght@500;700;800&family=Plus+Jakarta+Sans:wght@600;700;800&family=Space+Grotesk:wght@600;700&family=Syne:wght@700;800&display=swap" rel="stylesheet" />
     <title>Total Recall — Portable Memory</title>
-    <script type="module" crossorigin src="/assets/index-DFenQQEQ.js"></script>
+    <script type="module" crossorigin src="/assets/index-CRzjQLu7.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-BIQmqDKP.css">
   </head>
   <body>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "total-recall-brain",
-  "version": "3.41.3",
+  "version": "3.41.4",
   "description": "The Vibe Coding Brain & Autonomous Software Factory: memory, rules, secrets, and 33 visual plugins automatically managed across all your devices.",
   "type": "module",
   "bin": {
@@ -56,7 +56,8 @@
     "prepublishOnly": "npm run check:package && npm run check:dist && npm run check:ssss-registry && node scripts/check-scaffold-state.mjs",
     "check:ssss-registry": "node scripts/check-ssss-registry.mjs",
     "check:package": "node scripts/check-memory-package.mjs",
-    "start:memory": "node src/server/memory-server.mjs"
+    "start:memory": "node src/server/memory-server.mjs",
+    "ssss": "ssss"
   },
   "repository": {
     "type": "git",
@@ -76,7 +77,7 @@
   "homepage": "https://github.com/gregiteen/total-recall#readme",
   "dependencies": {
     "@simplewebauthn/server": "^13.3.2",
-    "@ssss/cli": "npm:@gregiteen/ssss-cli@0.12.1",
+    "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.3",
     "bcrypt": "^6.0.0",
     "better-sqlite3": "^12.11.1",
     "cookie-parser": "^1.4.7",
@@ -88,6 +89,7 @@
     "jsonwebtoken": "^9.0.3",
     "lodash-es": "^4.18.1",
     "natural": "^8.1.1",
+    "openwiki": "^0.7.3",
     "preact": "^10.29.7",
     "sqlite-vss": "^0.1.2",
     "ws": "^8.18.0",
@@ -103,8 +105,8 @@
     "@vitest/coverage-v8": "^4.1.12",
     "gray-matter": "^4.0.3",
     "jsdom": "^29.1.1",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
     "react-router-dom": "^7.18.1",
     "recharts": "^3.9.2",
     "skills": "^1.5.7",

package/scaffold/.agent/skills/total-recall/plugins/auth/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "tr-plugin-auth",
-  "version": "1.2.3",
+  "version": "1.2.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "tr-plugin-auth",
-      "version": "1.2.3",
+      "version": "1.2.5",
       "license": "MIT",
       "dependencies": {
         "@simplewebauthn/server": "^13.3.2",

package/scaffold/.agent/skills/total-recall/plugins/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-auth",
-  "version": "1.2.4",
+  "version": "1.2.5",
   "description": "White-label Total Recall auth plugin: Passkey biometric FIDO2 and Google OAuth2 authentication.",
   "type": "module",
   "main": "cli.mjs",

package/scaffold/.agent/skills/total-recall/plugins/auth/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://github.com/gregiteen/total-recall/blob/main/metadata.plugin.schema.json",
   "id": "auth",
   "name": "Auth & Secrets",
-  "version": "1.2.4",
+  "version": "1.2.5",
   "description": "Hardware WebAuthn biometric FIDO2 passkeys, OAuth session security, and access control.",
   "author": "Total Recall contributors",
   "license": "MIT",

package/scaffold/.agent/skills/total-recall/plugins/auth/src/cli-secret.mjs

@@ -51,6 +51,7 @@ import {
   enqueueRotationDueTasks,
   getBrowserRotateAssist,
 } from './secrets-rotate.mjs';
+import { findAmbientPasswordExports, removeAmbientPasswordExports, carrierPassword } from './secrets-carriers.mjs';
 import {
   loadRemoteTargets,
   addRemoteTarget,
@@ -200,6 +201,7 @@ function printHelp() {
     generate <key>        Generate a random secret for outside integrations
     get <key> [--json]    Read selected-store value (audited); JSON reports found/value
     list                  List keys + metadata only (no values)
+    prune                 Read-only report: unbound, errored and duplicate keys
     rotate <key>          Replace value and mark rotated. Prompts for the value;
                            --stdin reads fd0, --from-clipboard reads the OS
                            clipboard (use the browser you are already signed
@@ -286,6 +288,9 @@ function printHelp() {
     --headscale-url <https-url>
     rotation-due          List keys overdue for rotation
       --enqueue           Create daemon tasks + browser-use prompts for each due key
+    carriers              Find shell profiles and /etc files that export the master
+                           password to every process; --remove-ambient deletes them
+                           once an owner-only carrier holds the same password.
     fingerprint           Identify a credential without printing it: length, type
                            prefix, fingerprint and the store keys holding the same
                            value. --from-clipboard | --stdin; --expect-prefix <p>
@@ -643,6 +648,9 @@ function parseArgs(args) {
       case '--stdin':
         out.stdin = true;
         break;
+      case '--remove-ambient':
+        out.removeAmbient = true;
+        break;
       case '--app':
         out.app = args[++i];
         break;
@@ -1045,6 +1053,18 @@ export default async function secretCli(argv) {
       return;
     }
 
+    if (opts.command === 'prune') {
+      const { pruneCandidates, pruneSummary } = await import('./secrets-prune.mjs');
+      const rows = (await listSecretsMeta(brainDir)).filter((r) => r.set);
+      const candidates = pruneCandidates(rows);
+      const sum = pruneSummary(rows, candidates);
+      console.log(`\n  prune report (read-only): ${sum.candidates} of ${sum.total} keys worth a look`);
+      console.log(`     unbound=${sum.unbound}  error=${sum.errored}  duplicated=${sum.duplicated}\n`);
+      for (const c of candidates) console.log(`  • ${c.key.padEnd(38)} ${c.provider || '-'}  [${c.reasons.join('; ')}]`);
+      console.log('\n  Nothing was deleted. Remove a key with: auth secret delete <key>\n');
+      return;
+    }
+
     if (opts.command === 'shared' || opts.command === 'shared-values' || opts.command === 'duplicates') {
       const shared = await getSharedValueHealth(brainDir);
       console.log(`\n  ${shared.healthy ? '✅' : '❌'} ${shared.message}`);
@@ -1209,6 +1229,34 @@ export default async function secretCli(argv) {
       return;
     }
 
+    if (opts.command === 'carriers') {
+      // Files that make the master password ambient (shell profiles, /etc/environment).
+      // Reports files and line numbers only; --remove-ambient deletes those exports once an
+      // owner-only carrier is verified to hold the same password.
+      if (opts.removeAmbient) {
+        const r = removeAmbientPasswordExports();
+        if (opts.json) console.log(JSON.stringify(r, null, 2));
+        else {
+          console.log(`\n  ${r.removed.length ? '✅ Removed ambient master-password exports' : 'No ambient master-password exports found'}`);
+          for (const row of r.removed) console.log(`     ${row.file}: line ${row.lines.join(', ')}`);
+          console.log('');
+        }
+        return;
+      }
+      const found = findAmbientPasswordExports();
+      const carried = Boolean(carrierPassword());
+      if (opts.json) console.log(JSON.stringify({ ambient: found, owner_only_carrier: carried }, null, 2));
+      else {
+        console.log(`\n  Owner-only carrier holds the master password: ${carried ? 'yes' : 'NO'}`);
+        if (!found.length) console.log('  No ambient exports in shell profiles or /etc');
+        for (const row of found) console.log(`  ❌ ${row.file}: line ${row.lines.join(', ')} exports it to every process started there`);
+        if (found.length) console.log('     Remove with: total-recall auth secret carriers --remove-ambient');
+        console.log('');
+      }
+      if (found.length) process.exitCode = 1;
+      return;
+    }
+
     if (opts.command === 'fingerprint') {
       // Identify a credential without seeing it: which store keys hold the same
       // value, its length and its non-secret type prefix. Lets an operator check

package/scaffold/.agent/skills/total-recall/plugins/auth/src/login-projections.mjs

@@ -0,0 +1,42 @@
+/**
+ * Tool logins derived from stored secrets.
+ *
+ * A secret that reaches a node (see secrets-sync.mjs) is only useful to people and
+ * agents there once the tool that uses it is signed in. This signs `gh` in from
+ * `github_token`, and wires git to it, so a token rotated once lands on every machine
+ * without anyone logging in by hand. Nothing here prints or logs the token.
+ */
+import { execFile } from 'node:child_process';
+
+const TIMEOUT_MS = 20_000;
+
+/** Run a command, optionally feeding stdin; never rejects. */
+export function defaultRun(cmd, args, input) {
+  return new Promise((resolve) => {
+    const child = execFile(cmd, args, { timeout: TIMEOUT_MS, env: { ...process.env, GH_PROMPT_DISABLED: '1', GH_NO_UPDATE_NOTIFIER: '1' } }, (error, stdout, stderr) => {
+      resolve({ ok: !error, code: error?.code ?? 0, stdout: String(stdout || ''), stderr: String(stderr || '') });
+    });
+    child.stdin?.end(input === undefined ? undefined : String(input));
+  });
+}
+
+const firstLine = (text) => String(text || '').split('\n').map((l) => l.trim()).find(Boolean) || 'unknown error';
+
+/**
+ * Sign `gh` in with `token` when it is not already, then point git at it.
+ * @returns {{ status: 'no-token'|'gh-missing'|'current'|'logged-in'|'failed', error?: string }}
+ */
+export async function projectGithubLogin({ token, run = defaultRun } = {}) {
+  const wanted = String(token || '').trim();
+  if (!wanted) return { status: 'no-token' };
+
+  const current = await run('gh', ['auth', 'token']);
+  if (current.code === 'ENOENT') return { status: 'gh-missing' };
+  if (current.ok && current.stdout.trim() === wanted) return { status: 'current' };
+
+  const login = await run('gh', ['auth', 'login', '--hostname', 'github.com', '--git-protocol', 'https', '--with-token'], wanted);
+  if (!login.ok) return { status: 'failed', error: firstLine(login.stderr).replaceAll(wanted, '***') };
+
+  await run('gh', ['auth', 'setup-git', '--hostname', 'github.com']);
+  return { status: 'logged-in' };
+}

package/scaffold/.agent/skills/total-recall/plugins/auth/src/mesh-secrets.mjs

@@ -26,6 +26,24 @@ const FETCH_TIMEOUT_MS = 8_000;
 
 /* ---------- leader side ---------- */
 
+/**
+ * A grant key `repo:<name>` stands for every secret whose `repos` metadata names that
+ * repository, so a machine is given the keys its repositories use rather than a list of
+ * names or `*`. Resolved on each request, so rebinding a key takes effect on the next sync.
+ */
+export function expandRepoGrants(policy, rows) {
+  const byRepo = new Map();
+  for (const row of rows || []) for (const repo of row.repos || []) {
+    if (!byRepo.has(repo)) byRepo.set(repo, []);
+    byRepo.get(repo).push(row.key);
+  }
+  const grants = (policy?.grants || []).map((grant) => ({
+    ...grant,
+    keys: (grant.keys || []).flatMap((key) => (String(key).startsWith('repo:') ? (byRepo.get(String(key).slice(5)) || []) : [key])),
+  }));
+  return { ...policy, grants };
+}
+
 function audit(brainDir, event) {
   try {
     appendAudit(brainDir, event);

package/scaffold/.agent/skills/total-recall/plugins/auth/src/routes/secrets.mjs

@@ -26,7 +26,8 @@ import {
 } from '../secrets-store.mjs';
 import { logger } from '../logger.mjs';
 import { getMeshSyncAuthorization, requireMeshSyncAuth } from '../mesh-auth.mjs';
-import { createMeshIdentityMiddleware, createMeshListHandler, createMeshSecretHandler } from '../mesh-secrets.mjs';
+import { createMeshIdentityMiddleware, createMeshListHandler, createMeshSecretHandler, expandRepoGrants } from '../mesh-secrets.mjs';
+import { loadPolicy } from '../mesh-identity.mjs';
 import { throttledFetch } from '../throttled-fetch.mjs';
 import { listProviders, getProvider } from '../provider-catalog.mjs';
 import {
@@ -90,15 +91,17 @@ router.get('/api/secrets/checksum', requireMeshSyncAuth, async (req, res) => {
 // Mesh-identity secrets: the caller is the enrolled machine, not a shared
 // token. Each node gets only the keys its grant allows; see mesh-secrets.mjs.
 const requireMeshIdentity = createMeshIdentityMiddleware();
+const meshPolicyFor = async (brainDir) => expandRepoGrants(await loadPolicy(brainDir), await listSecretsMeta(brainDir));
 router.get(
   '/api/secrets/mesh',
   requireMeshIdentity,
   createMeshListHandler({
     brainDir: BRAIN_DIR,
+    policyFor: meshPolicyFor,
     keysFor: async () => (await listSecretsMeta(BRAIN_DIR)).map((entry) => entry.key),
   }),
 );
-router.get('/api/secrets/mesh/:key', requireMeshIdentity, createMeshSecretHandler({ brainDir: BRAIN_DIR }));
+router.get('/api/secrets/mesh/:key', requireMeshIdentity, createMeshSecretHandler({ brainDir: BRAIN_DIR, policyFor: meshPolicyFor }));
 
 router.get('/api/secrets/list', requireAuth, requireScope('keys:read', 'config:read'), async (req, res) => {
   try {

package/scaffold/.agent/skills/total-recall/plugins/auth/src/secrets-carriers.mjs

@@ -0,0 +1,76 @@
+/**
+ * Where the secrets-store master password lives on this host.
+ *
+ * The sanctioned carriers are owner-only: the macOS Keychain, the launchd
+ * agent plist and `~/.agent/tr.env`. An `export TR_SECRETS_PASSWORD=…` in a
+ * shell profile or in /etc/environment is ambient: every process started from
+ * a shell (or, for /etc/environment, every login) inherits it, and a process
+ * manager such as pm2 then captures it into each app it starts. This module
+ * finds those exports and removes them once a sanctioned carrier holds the
+ * same password. It reports files and line numbers, never values.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { secretsPassword } from './secrets-gateway.mjs';
+
+const EXPORT = /^\s*(?:export\s+)?(?:TR_SECRETS_PASSWORD|TR_MASTER_PASSWORD)\s*=/;
+const PROFILES = ['.bashrc', '.bash_profile', '.profile', '.zshrc', '.zprofile', '.zshenv'];
+
+/** Shell and system files that can make the password ambient. */
+export function ambientCandidateFiles({ home = os.homedir(), etc = '/etc' } = {}) {
+  const files = PROFILES.map((name) => path.join(home, name));
+  files.push(path.join(etc, 'environment'), path.join(etc, 'profile'), path.join(etc, 'zshenv'));
+  try {
+    for (const name of fs.readdirSync(path.join(etc, 'profile.d'))) {
+      if (name.endsWith('.sh')) files.push(path.join(etc, 'profile.d', name));
+    }
+  } catch { /* no profile.d */ }
+  return files;
+}
+
+/** Lines that export the master password, by file. */
+export function findAmbientPasswordExports(files = ambientCandidateFiles()) {
+  const found = [];
+  for (const file of files) {
+    let text;
+    try { text = fs.readFileSync(file, 'utf8'); } catch { continue; }
+    const lines = text.split('\n').map((line, index) => (EXPORT.test(line) ? index + 1 : 0)).filter(Boolean);
+    if (lines.length) found.push({ file, lines });
+  }
+  return found;
+}
+
+/** The password a sanctioned carrier returns with the environment ignored. */
+export function carrierPassword(env = process.env, resolve = secretsPassword) {
+  const quiet = { ...env };
+  delete quiet.TR_SECRETS_PASSWORD;
+  delete quiet.TR_MASTER_PASSWORD;
+  return resolve({ env: quiet }) || null;
+}
+
+/**
+ * Remove ambient exports, only when a sanctioned carrier already returns the
+ * password this process was given; otherwise the store would be locked out.
+ *
+ * @param {{ files?: string[], env?: object, resolve?: Function }} [opts]
+ */
+export function removeAmbientPasswordExports({ files = ambientCandidateFiles(), env = process.env, resolve = secretsPassword } = {}) {
+  const exports = findAmbientPasswordExports(files);
+  if (!exports.length) return { removed: [], carrier: 'not-checked' };
+  const current = env.TR_SECRETS_PASSWORD || env.TR_MASTER_PASSWORD;
+  const carried = carrierPassword(env, resolve);
+  if (!carried) throw new Error('No owner-only carrier (Keychain, launchd agent or ~/.agent/tr.env) holds the master password; set one with `auth secret rekey --env-file|--keychain` before removing ambient exports');
+  if (current && carried !== current) throw new Error('The owner-only carrier holds a different password than this environment; reconcile them before removing ambient exports');
+  const removed = [];
+  for (const { file, lines } of exports) {
+    const text = fs.readFileSync(file, 'utf8');
+    const kept = text.split('\n').filter((line) => !EXPORT.test(line)).join('\n');
+    const mode = fs.statSync(file).mode & 0o777;
+    const tmp = `${file}.tr-tmp-${process.pid}`;
+    fs.writeFileSync(tmp, kept, { mode });
+    fs.renameSync(tmp, file);
+    removed.push({ file, lines });
+  }
+  return { removed, carrier: 'verified' };
+}

package/scaffold/.agent/skills/total-recall/plugins/auth/src/secrets-prune.mjs

@@ -0,0 +1,37 @@
+/**
+ * `auth secret prune`: a read-only report of secrets worth removing or consolidating.
+ *
+ * A key is a candidate when it is bound to no repository, its provider tracking reports an
+ * error (usually a dead key), or it shares a value with another key. Nothing is deleted;
+ * the report says why each key is listed so the owner decides.
+ */
+
+/** @param {Array<{key:string, repos?:string[], tracking_status?:string|null, tracking_exempt?:boolean, fingerprint_full?:string|null, set?:boolean}>} rows */
+export function pruneCandidates(rows) {
+  const byFingerprint = new Map();
+  for (const row of rows) {
+    if (!row.set || !row.fingerprint_full) continue;
+    if (!byFingerprint.has(row.fingerprint_full)) byFingerprint.set(row.fingerprint_full, []);
+    byFingerprint.get(row.fingerprint_full).push(row.key);
+  }
+  const out = [];
+  for (const row of rows) {
+    const reasons = [];
+    if (!(row.repos || []).length) reasons.push('unbound');
+    if (row.tracking_status === 'error' && !row.tracking_exempt) reasons.push('error');
+    const twins = (byFingerprint.get(row.fingerprint_full) || []).filter((key) => key !== row.key);
+    if (twins.length) reasons.push(`same value as ${twins.join(', ')}`);
+    if (reasons.length) out.push({ key: row.key, reasons, provider: row.provider || null });
+  }
+  return out.sort((a, b) => b.reasons.length - a.reasons.length || a.key.localeCompare(b.key));
+}
+
+export function pruneSummary(rows, candidates) {
+  return {
+    total: rows.length,
+    candidates: candidates.length,
+    unbound: candidates.filter((c) => c.reasons.includes('unbound')).length,
+    errored: candidates.filter((c) => c.reasons.includes('error')).length,
+    duplicated: candidates.filter((c) => c.reasons.some((r) => r.startsWith('same value'))).length,
+  };
+}

package/scaffold/.agent/skills/total-recall/plugins/auth/src/secrets-sync.mjs

@@ -4,20 +4,22 @@ import { getLeaderInfo, isLeader } from './leader-election.mjs';
 import { logger } from './logger.mjs';
 import { brainDir } from './config.mjs';
 import { resolveSecretsPath, loadSecrets, saveSecrets, ensureMeta, appendAudit, META_KEY } from './secrets-store.mjs';
+import { projectGithubLogin } from './login-projections.mjs';
 
 const REQUEST_TIMEOUT_MS = 10_000;
+const FETCH_CONCURRENCY = 8;
 
 function serverPort() {
   const value = Number(process.env.TR_SERVER_PORT || process.env.PORT || 3000);
   return Number.isInteger(value) && value > 0 && value <= 65535 ? value : 3000;
 }
 
-function meshUrl(ip, route) {
+function meshUrl(ip, route, port = serverPort()) {
   const octets = String(ip || '').split('.').map(Number);
   if (octets.length !== 4 || octets.some((part) => !Number.isInteger(part) || part < 0 || part > 255) || octets[0] !== 100 || octets[1] < 64 || octets[1] > 127) {
     throw new Error('Leader IP is outside the Tailscale CGNAT range');
   }
-  return `http://${ip}:${serverPort()}${route}`;
+  return `http://${ip}:${port}${route}`;
 }
 
 export function getSecretsChecksum() {
@@ -39,23 +41,42 @@ export function secretsSyncMode(env = process.env) {
  * anything. The node's store is never replaced wholesale and the node keeps
  * its own master password.
  */
-export async function syncGrantedSecrets(leaderIp, { dir = brainDir, fetchImpl = fetch } = {}) {
-  const base = meshUrl(leaderIp, '/api/secrets/mesh');
-  const listResponse = await fetchImpl(base, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+export async function syncGrantedSecrets(leaderIp, { dir = brainDir, fetchImpl = fetch, port } = {}) {
+  // The leader's port, never this node's: the droplet serves on 3900 while devices
+  // default to 3000, and assuming our own port made every sync fail.
+  const base = meshUrl(leaderIp, '/api/secrets/mesh', port || serverPort());
+  let listResponse;
+  try {
+    listResponse = await fetchImpl(base, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+  } catch (err) {
+    // "fetch failed" alone named neither the address nor the reason.
+    throw new Error(`No Total Recall server answered at ${base}: ${err.cause?.code || err.message}`);
+  }
   if (!listResponse.ok) throw new Error(`Leader returned ${listResponse.status}`);
   const { keys } = await listResponse.json();
   if (!Array.isArray(keys)) throw new Error('Invalid grant list');
 
+  // Each key costs the leader a store decryption plus a mesh round trip (2-3 s from a laptop),
+  // so a few at a time keeps a full sync under a minute instead of several.
   const fetched = {};
-  for (const key of keys) {
-    const response = await fetchImpl(`${base}/${encodeURIComponent(key)}`, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
-    if (!response.ok) throw new Error(`Leader returned ${response.status} for ${key}`);
-    fetched[key] = (await response.json()).value;
-  }
+  let next = 0;
+  const worker = async () => {
+    while (next < keys.length) {
+      const key = keys[next++];
+      const response = await fetchImpl(`${base}/${encodeURIComponent(key)}`, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+      if (!response.ok) throw new Error(`Leader returned ${response.status} for ${key}`);
+      fetched[key] = (await response.json()).value;
+    }
+  };
+  await Promise.all(Array.from({ length: Math.min(FETCH_CONCURRENCY, keys.length) }, worker));
 
   const secrets = ensureMeta(await loadSecrets(dir));
-  const previous = Array.isArray(secrets[META_KEY].mesh_granted) ? secrets[META_KEY].mesh_granted : [];
-  const removed = previous.filter((key) => !(key in fetched) && key in secrets);
+  // Only keys this sync created may be removed when their grant is revoked. A key the node
+  // already held before it was ever granted is the node's own: revoking the grant must not
+  // delete it (on the node that owns the full store, that would wipe its secrets).
+  const previouslySynced = Array.isArray(secrets[META_KEY].mesh_synced) ? secrets[META_KEY].mesh_synced : [];
+  const created = Object.keys(fetched).filter((key) => !(key in secrets));
+  const removed = previouslySynced.filter((key) => !(key in fetched) && key in secrets);
   for (const key of removed) {
     delete secrets[key];
     delete secrets[META_KEY].keys?.[key];
@@ -66,16 +87,31 @@ export async function syncGrantedSecrets(leaderIp, { dir = brainDir, fetchImpl =
     secrets[key] = value;
   }
   secrets[META_KEY].mesh_granted = Object.keys(fetched);
+  secrets[META_KEY].mesh_synced = [...new Set([...previouslySynced.filter((key) => key in fetched), ...created])];
   await saveSecrets(dir, secrets);
   appendAudit(dir, { action: 'mesh_grant_sync', key: `(${keys.length} granted, ${removed.length} revoked)`, actor: 'mesh-sync' });
   return { granted: keys.length, updated, removed: removed.length };
 }
 
+/** Sign in the tools that use synced secrets (today: gh from github_token). */
+export async function projectLogins({ dir = brainDir, run } = {}) {
+  const secrets = await loadSecrets(dir);
+  const github = await projectGithubLogin({ token: secrets.github_token || secrets.GITHUB_TOKEN, run });
+  if (github.status === 'logged-in') appendAudit(dir, { action: 'login_projection', key: 'github_token -> gh', actor: 'mesh-sync' });
+  if (github.status === 'failed') logger.error('secrets-sync', 'gh login from github_token failed', { error: github.error });
+  return { github };
+}
+
 export async function syncLoop() {
   secretsSyncMode();
-  if (await isLeader()) return;
-  const leaderInfo = await getLeaderInfo();
-  if (!leaderInfo?.ip) return;
-  try { await syncGrantedSecrets(leaderInfo.ip); }
-  catch (err) { logger.error('secrets-sync', 'Failed to sync granted secrets', { error: err.message }); }
+  if (!(await isLeader())) {
+    const leaderInfo = await getLeaderInfo();
+    if (leaderInfo?.ip) {
+      try { await syncGrantedSecrets(leaderInfo.ip, { port: leaderInfo.port }); }
+      catch (err) { logger.error('secrets-sync', 'Failed to sync granted secrets', { error: err.message }); }
+    }
+  }
+  // Even when the leader is unreachable, the last synced token should still be signed in.
+  try { await projectLogins(); }
+  catch (err) { logger.error('secrets-sync', 'Login projection failed', { error: err.message }); }
 }

package/scaffold/.agent/skills/total-recall/plugins/code-quality/package-lock.json

@@ -9,16 +9,16 @@
       "version": "0.2.2",
       "license": "MIT",
       "dependencies": {
-        "@gregiteen/ssss-cli": "0.11.2"
+        "@gregiteen/ssss-cli": "0.14.3"
       },
       "devDependencies": {
-        "total-recall-brain": "3.41.2"
+        "total-recall-brain": "3.41.3"
       }
     },
     "node_modules/@gregiteen/ssss-cli": {
-      "version": "0.11.2",
-      "resolved": "https://registry.npmjs.org/@gregiteen/ssss-cli/-/ssss-cli-0.11.2.tgz",
-      "integrity": "sha512-DTkBPCOv9uN79YoRtsa/GnXPbbeHOU5PQcQ995axHg+SLWdkL6xmrTRs5Xxshcje/Iv6+lKkYOc9UL+Arn9kHg==",
+      "version": "0.14.3",
+      "resolved": "https://registry.npmjs.org/@gregiteen/ssss-cli/-/ssss-cli-0.14.3.tgz",
+      "integrity": "sha512-vvGgiNLjus3/xp+iotiGqbSG0R7+Q/bP5cP2Psa7Rhtm/vrMuM5B4LebYu7bPf3TzgCyTbv96PcxGWf6gxbW0Q==",
       "license": "ISC",
       "bin": {
         "ssss": "scripts/ssss.mjs"
@@ -364,9 +364,9 @@
     },
     "node_modules/@ssss/cli": {
       "name": "@gregiteen/ssss-cli",
-      "version": "0.11.2",
-      "resolved": "https://registry.npmjs.org/@gregiteen/ssss-cli/-/ssss-cli-0.11.2.tgz",
-      "integrity": "sha512-DTkBPCOv9uN79YoRtsa/GnXPbbeHOU5PQcQ995axHg+SLWdkL6xmrTRs5Xxshcje/Iv6+lKkYOc9UL+Arn9kHg==",
+      "version": "0.12.1",
+      "resolved": "https://registry.npmjs.org/@gregiteen/ssss-cli/-/ssss-cli-0.12.1.tgz",
+      "integrity": "sha512-ff0L2LV4db1CfD4W3VmIJwT9fvrpuKDGDfhe6gtjrrgtRmo7BP7jYjRtH7yuQipKikyiP9LIvmVIaxvbjLTwkA==",
       "dev": true,
       "license": "ISC",
       "bin": {
@@ -2595,9 +2595,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.41.2",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.41.2.tgz",
-      "integrity": "sha512-bwJFAFAyvk9ysf+5zhBzMxrKus1Hj1AygUWdBNt+vQbM2sfSEf6701sa30KwfGyU8+cMuN6YNT5Mn63mFZIi/w==",
+      "version": "3.41.3",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.41.3.tgz",
+      "integrity": "sha512-0uIh3WZE3dHxrKFTtRMxvSBLx7aV3j7ry9H9NxRShtCycwQ38T7+70Q/GJAqsdpwt894h8B6AAmWJnHwsFG3XQ==",
       "dev": true,
       "license": "MIT",
       "workspaces": [
@@ -2605,7 +2605,7 @@
       ],
       "dependencies": {
         "@simplewebauthn/server": "^13.3.2",
-        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.11.2",
+        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.12.1",
         "bcrypt": "^6.0.0",
         "better-sqlite3": "^12.11.1",
         "cookie-parser": "^1.4.7",

package/scaffold/.agent/skills/total-recall/plugins/code-quality/package.json

@@ -11,7 +11,7 @@
     "validate": "ssss conformance --engine"
   },
   "dependencies": {
-    "@gregiteen/ssss-cli": "0.12.1"
+    "@gregiteen/ssss-cli": "0.14.3"
   },
   "files": [
     "cli.mjs",

package/scaffold/.agent/skills/total-recall/plugins/composable-cli/package-lock.json

@@ -9,16 +9,16 @@
       "version": "0.2.2",
       "license": "MIT",
       "dependencies": {
-        "@gregiteen/ssss-cli": "0.11.2"
+        "@gregiteen/ssss-cli": "0.14.3"
       },
       "devDependencies": {
-        "total-recall-brain": "3.41.2"
+        "total-recall-brain": "3.41.3"
       }
     },
     "node_modules/@gregiteen/ssss-cli": {
-      "version": "0.11.2",
-      "resolved": "https://registry.npmjs.org/@gregiteen/ssss-cli/-/ssss-cli-0.11.2.tgz",
-      "integrity": "sha512-DTkBPCOv9uN79YoRtsa/GnXPbbeHOU5PQcQ995axHg+SLWdkL6xmrTRs5Xxshcje/Iv6+lKkYOc9UL+Arn9kHg==",
+      "version": "0.14.3",
+      "resolved": "https://registry.npmjs.org/@gregiteen/ssss-cli/-/ssss-cli-0.14.3.tgz",
+      "integrity": "sha512-vvGgiNLjus3/xp+iotiGqbSG0R7+Q/bP5cP2Psa7Rhtm/vrMuM5B4LebYu7bPf3TzgCyTbv96PcxGWf6gxbW0Q==",
       "license": "ISC",
       "bin": {
         "ssss": "scripts/ssss.mjs"
@@ -364,9 +364,9 @@
     },
     "node_modules/@ssss/cli": {
       "name": "@gregiteen/ssss-cli",
-      "version": "0.11.2",
-      "resolved": "https://registry.npmjs.org/@gregiteen/ssss-cli/-/ssss-cli-0.11.2.tgz",
-      "integrity": "sha512-DTkBPCOv9uN79YoRtsa/GnXPbbeHOU5PQcQ995axHg+SLWdkL6xmrTRs5Xxshcje/Iv6+lKkYOc9UL+Arn9kHg==",
+      "version": "0.12.1",
+      "resolved": "https://registry.npmjs.org/@gregiteen/ssss-cli/-/ssss-cli-0.12.1.tgz",
+      "integrity": "sha512-ff0L2LV4db1CfD4W3VmIJwT9fvrpuKDGDfhe6gtjrrgtRmo7BP7jYjRtH7yuQipKikyiP9LIvmVIaxvbjLTwkA==",
       "dev": true,
       "license": "ISC",
       "bin": {
@@ -2595,9 +2595,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.41.2",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.41.2.tgz",
-      "integrity": "sha512-bwJFAFAyvk9ysf+5zhBzMxrKus1Hj1AygUWdBNt+vQbM2sfSEf6701sa30KwfGyU8+cMuN6YNT5Mn63mFZIi/w==",
+      "version": "3.41.3",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.41.3.tgz",
+      "integrity": "sha512-0uIh3WZE3dHxrKFTtRMxvSBLx7aV3j7ry9H9NxRShtCycwQ38T7+70Q/GJAqsdpwt894h8B6AAmWJnHwsFG3XQ==",
       "dev": true,
       "license": "MIT",
       "workspaces": [
@@ -2605,7 +2605,7 @@
       ],
       "dependencies": {
         "@simplewebauthn/server": "^13.3.2",
-        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.11.2",
+        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.12.1",
         "bcrypt": "^6.0.0",
         "better-sqlite3": "^12.11.1",
         "cookie-parser": "^1.4.7",

package/scaffold/.agent/skills/total-recall/plugins/composable-cli/package.json

@@ -10,7 +10,7 @@
     "validate": "ssss conformance --engine"
   },
   "dependencies": {
-    "@gregiteen/ssss-cli": "0.12.1"
+    "@gregiteen/ssss-cli": "0.14.3"
   },
   "license": "MIT",
   "files": [