youmd 0.7.1 → 0.8.2

package/scripts/env-vault/README.md

@@ -1,8 +1,22 @@
-# env-vault — Secure .env.local Backup & Restore
+# env-vault — Secure .env.local + Agent-Auth Backup & Restore
 
-Backs up all `.env.local` files across your CODE_2025 projects into a single
-encrypted archive, and restores them on a new Mac. No secret values ever appear
-in plaintext outside the encrypted blob.
+Backs up all `.env.local` files across your CODE_2025 projects **and** a fixed
+set of hard agent-auth secret files into a single encrypted archive, and
+restores them on a new Mac. No secret values ever appear in plaintext outside
+the encrypted blob.
+
+### What's in the vault
+
+| Source path | Archive path | Restore destination |
+|---|---|---|
+| `<CODE_2025>/<project>/.env.local` | `<project>/.env.local` | `<CODE_2025>/<project>/.env.local` |
+| `~/.codex/auth.json` | `agent-auth/codex-auth.json` | `~/.codex/auth.json` |
+| `~/.cursor/mcp.json` | `agent-auth/cursor-mcp.json` | `~/.cursor/mcp.json` |
+| `~/.claude.json` | `agent-auth/claude.json` | `~/.claude.json` |
+
+To add more agent-auth files, extend the `AGENT_SECRET_FILES` array near the
+top of `backup.sh` and add the matching entry to `AGENT_AUTH_MAP` in
+`restore.sh`.
 
 ---
 
@@ -14,6 +28,9 @@ in plaintext outside the encrypted blob.
 # via CLI (preferred — ships in the npm package)
 youmd env backup
 
+# Check local encryption tooling and env discovery without writing a vault:
+youmd env backup --preflight
+
 # or directly via bash (from the youmd repo root)
 cd /Users/houstongolden/Desktop/CODE_2025/youmd
 bash cli/scripts/env-vault/backup.sh
@@ -21,7 +38,7 @@ bash cli/scripts/env-vault/backup.sh
 
 This writes two files to `.env-vault/`:
 - `env-vault-<date>.tar.<ext>` — encrypted archive (safe to transport)
-- `manifest-<date>.txt` — variable names + counts only (safe to read, no values)
+- `manifest-<date>.txt` — variable names + counts + agent-auth file paths/sizes only (safe to read, no values)
 
 You will be prompted for a passphrase. Store it in **1Password** immediately.
 
@@ -38,9 +55,10 @@ Do NOT transfer via unencrypted email or public Slack.
 
 ```bash
 # Install dependencies first (e.g. Node, pnpm, etc.), then:
+youmd env restore /path/to/env-vault-<date>.tar.<ext> --list
 youmd env restore /path/to/env-vault-<date>.tar.<ext>
 
-# If project dirs already exist with .env.local files:
+# If files already exist on the new Mac:
 youmd env restore --force /path/to/env-vault-<date>.tar.<ext>
 
 # or directly via bash:
@@ -48,8 +66,13 @@ bash cli/scripts/env-vault/restore.sh /path/to/env-vault-<date>.tar.<ext>
 bash cli/scripts/env-vault/restore.sh --force /path/to/env-vault-<date>.tar.<ext>
 ```
 
-The script creates `<CODE_2025>/<project>/.env.local` for each project.
-Existing files are backed up to `.env.local.bak.<timestamp>` (or overwritten with `--force`).
+The script:
+1. Lists vault contents without writing files when `--list` is provided.
+2. Creates `<CODE_2025>/<project>/.env.local` for each project during restore.
+3. Restores agent-auth files to their absolute home paths (`~/.codex/auth.json`, `~/.cursor/mcp.json`, `~/.claude.json`), creating parent directories as needed.
+
+Existing files are backed up to `<path>.bak.<timestamp>` before overwrite (or silently overwritten with `--force`).
+List mode prints project env target paths, variable names/counts, and agent-auth file presence only. It never prints secret values.
 
 ---
 
@@ -70,8 +93,8 @@ The encrypted file itself is safe to store anywhere. The passphrase is the secre
 ## Security Model
 
 - **Encryption:** `age` (preferred) → `gpg AES-256` → `openssl AES-256-CBC PBKDF2`
-- **What's in the encrypted archive:** full `.env.local` file contents
-- **What's in plaintext:** only the project name + variable NAMES + count (the manifest)
+- **What's in the encrypted archive:** full `.env.local` file contents + agent-auth files (`~/.codex/auth.json`, `~/.cursor/mcp.json`, `~/.claude.json`)
+- **What's in plaintext:** only the project name + variable NAMES + count + agent-auth file paths/byte-sizes (the manifest)
 - **Values:** never printed, echoed, logged, or written anywhere outside the encrypted blob
 - **Passphrase:** stored nowhere by these scripts — you must store it in 1Password
 
@@ -84,10 +107,12 @@ and are exposed as first-class CLI commands:
 
 ```bash
 youmd env backup                # back up all .env.local files
+youmd env backup --preflight    # verify tooling/discovery without writing
 youmd env backup --root <dir>   # custom search root
 youmd env backup --out <dir>    # custom output dir
 
 youmd env restore <vault>       # restore from an encrypted vault
+youmd env restore <vault> --list # list vault contents without writing
 youmd env restore --force       # overwrite existing .env.local files
 youmd env restore --root <dir>  # restore into a custom root
 ```
@@ -104,6 +129,7 @@ your terminal unchanged.
 
 | Flag | Default | Description |
 |------|---------|-------------|
+| `--preflight` | off | Verify encryption tooling/discovery without writing a vault |
 | `--root <dir>` | `~/Desktop/CODE_2025` | Where to discover `.env.local` files |
 | `--out <dir>` | `youmd/.env-vault/` | Where to write encrypted vault + manifest |
 
@@ -111,6 +137,7 @@ your terminal unchanged.
 
 | Flag | Default | Description |
 |------|---------|-------------|
+| `--list` | off | List vault contents without writing files |
 | `--root <dir>` | `~/Desktop/CODE_2025` | Where to restore project `.env.local` files |
 | `--force` | off | Overwrite existing `.env.local` instead of skipping |
 

package/scripts/env-vault/backup.sh

@@ -1,9 +1,10 @@
 #!/usr/bin/env bash
-# env-vault/backup.sh — backs up all .env.local files under CODE_2025 into an
-# encrypted vault. NEVER prints, echoes, logs, or writes any secret VALUE.
-# Only variable NAMES and counts appear in plaintext output.
+# env-vault/backup.sh — backs up all .env.local files under CODE_2025 AND a
+# fixed set of agent-auth secret files into an encrypted vault. NEVER prints,
+# echoes, logs, or writes any secret VALUE. Only variable NAMES, counts, and
+# file paths appear in plaintext output.
 #
-# Usage: bash backup.sh [--root <search-root>] [--out <output-dir>]
+# Usage: bash backup.sh [--preflight] [--root <search-root>] [--out <output-dir>]
 # Defaults:
 #   search-root: /Users/houstongolden/Desktop/CODE_2025
 #   output-dir:  /Users/houstongolden/Desktop/CODE_2025/youmd/.env-vault
@@ -13,10 +14,22 @@ set -euo pipefail
 # ── configurable defaults ──────────────────────────────────────────────────────
 SEARCH_ROOT="${ENV_VAULT_ROOT:-/Users/houstongolden/Desktop/CODE_2025}"
 OUTPUT_DIR="${ENV_VAULT_OUT:-/Users/houstongolden/Desktop/CODE_2025/youmd/.env-vault}"
+PREFLIGHT=false
+
+# ── agent-auth secret files ────────────────────────────────────────────────────
+# Absolute paths to hard agent-auth secrets that must travel with the vault.
+# Each entry is archived as agent-auth/<stable-name> inside the tar.
+# To add more: append to this array. Format: "absolute-path:stable-archive-name"
+AGENT_SECRET_FILES=(
+  "${HOME}/.codex/auth.json:codex-auth.json"
+  "${HOME}/.cursor/mcp.json:cursor-mcp.json"
+  "${HOME}/.claude.json:claude.json"
+)
 
 # ── parse flags ────────────────────────────────────────────────────────────────
 while [[ $# -gt 0 ]]; do
   case $1 in
+    --preflight) PREFLIGHT=true; shift ;;
     --root)  SEARCH_ROOT="$2"; shift 2 ;;
     --out)   OUTPUT_DIR="$2";  shift 2 ;;
     *) echo "Unknown flag: $1" >&2; exit 1 ;;
@@ -55,11 +68,32 @@ done < <(find "${SEARCH_ROOT}" -maxdepth 2 -name ".env.local" -print0 2>/dev/nul
 
 if [[ ${#ENV_FILES[@]} -eq 0 ]]; then
   echo "No .env.local files found under ${SEARCH_ROOT}" >&2
+  if [[ "${PREFLIGHT}" == "true" ]]; then
+    echo "Preflight only: encryption tooling is available, but no .env.local files were found."
+    exit 0
+  fi
   exit 1
 fi
 
 echo "Found ${#ENV_FILES[@]} .env.local file(s)."
 
+if [[ "${PREFLIGHT}" == "true" ]]; then
+  echo "Output dir: ${OUTPUT_DIR}"
+  echo "Agent-auth candidates:"
+  for ENTRY in "${AGENT_SECRET_FILES[@]}"; do
+    SRC_PATH="${ENTRY%%:*}"
+    ARCHIVE_NAME="${ENTRY##*:}"
+    if [[ -f "${SRC_PATH}" ]]; then
+      FILE_BYTES=$(wc -c < "${SRC_PATH}" | tr -d ' ')
+      echo "  present: agent-auth/${ARCHIVE_NAME} (${FILE_BYTES} bytes)"
+    else
+      echo "  missing: agent-auth/${ARCHIVE_NAME}"
+    fi
+  done
+  echo "Preflight only: no vault written and no secret values printed."
+  exit 0
+fi
+
 # ── build plaintext manifest (names + counts, NO values) ─────────────────────
 mkdir -p "${OUTPUT_DIR}"
 UTC_DATE="$(date -u +%Y-%m-%dT%H%MZ)"
@@ -94,6 +128,38 @@ for ENV_FILE in "${ENV_FILES[@]}"; do
     >> "${MANIFEST_PATH}"
 done
 
+# ── stage agent-auth secret files ─────────────────────────────────────────────
+# Each entry in AGENT_SECRET_FILES has format "absolute-path:stable-archive-name".
+# Files are stored under agent-auth/<stable-name> inside the archive.
+# Only the path and byte-size appear in the manifest — never the contents.
+AGENT_AUTH_STAGING="${STAGING_DIR}/agent-auth"
+mkdir -p "${AGENT_AUTH_STAGING}"
+AGENT_AUTH_COUNT=0
+
+echo "" >> "${MANIFEST_PATH}"
+echo "agent-auth files:" >> "${MANIFEST_PATH}"
+
+for ENTRY in "${AGENT_SECRET_FILES[@]}"; do
+  SRC_PATH="${ENTRY%%:*}"
+  ARCHIVE_NAME="${ENTRY##*:}"
+
+  if [[ -f "${SRC_PATH}" ]]; then
+    cp "${SRC_PATH}" "${AGENT_AUTH_STAGING}/${ARCHIVE_NAME}"
+    FILE_BYTES=$(wc -c < "${SRC_PATH}" | tr -d ' ')
+    echo "  agent-auth/${ARCHIVE_NAME} (${SRC_PATH}): ${FILE_BYTES} bytes" \
+      >> "${MANIFEST_PATH}"
+    echo "  Staged agent-auth: ${SRC_PATH} → agent-auth/${ARCHIVE_NAME}"
+    (( AGENT_AUTH_COUNT++ )) || true
+  else
+    echo "  agent-auth/${ARCHIVE_NAME} (${SRC_PATH}): NOT FOUND — skipped" \
+      >> "${MANIFEST_PATH}"
+    echo "  Skipped (not found): ${SRC_PATH}"
+  fi
+done
+
+echo ""
+echo "Staged ${AGENT_AUTH_COUNT} agent-auth file(s)."
+
 echo "" >> "${MANIFEST_PATH}"
 echo "SECURITY: The encrypted archive is safe to transport. Keep the passphrase private." \
   >> "${MANIFEST_PATH}"

package/scripts/env-vault/restore.sh

@@ -1,23 +1,42 @@
 #!/usr/bin/env bash
-# env-vault/restore.sh — restores .env.local files from an encrypted vault
-# created by backup.sh. NEVER prints, echoes, or logs any secret VALUES.
-# Only prints which file paths were restored or skipped.
+# env-vault/restore.sh — restores .env.local files AND agent-auth secrets from
+# an encrypted vault created by backup.sh. NEVER prints, echoes, or logs any
+# secret VALUES. Restore prints which file paths were restored or skipped; list
+# mode prints target paths plus variable names/counts only.
 #
-# Usage: bash restore.sh [--force] [--root <target-root>] <vault-file>
+# Usage: bash restore.sh [--list] [--force] [--root <target-root>] <vault-file>
 #   vault-file: path to env-vault-*.tar.age / .tar.gpg / .tar.enc
-#   --force:    overwrite existing .env.local files without backing them up
-#   --root:     destination root (default: /Users/houstongolden/Desktop/CODE_2025)
+#   --force:    overwrite existing files without backing them up
+#   --root:     destination root for .env.local files
+#               (default: /Users/houstongolden/Desktop/CODE_2025)
+#
+# agent-auth restore map (archive name → absolute home path):
+#   agent-auth/codex-auth.json  → ~/.codex/auth.json
+#   agent-auth/cursor-mcp.json  → ~/.cursor/mcp.json
+#   agent-auth/claude.json      → ~/.claude.json
 
 set -euo pipefail
 
+# ── agent-auth restore map ─────────────────────────────────────────────────────
+# Maps archive name (inside agent-auth/) to its absolute home destination.
+# Format: "archive-name:absolute-destination-path"
+# Must stay in sync with AGENT_SECRET_FILES in backup.sh.
+AGENT_AUTH_MAP=(
+  "codex-auth.json:${HOME}/.codex/auth.json"
+  "cursor-mcp.json:${HOME}/.cursor/mcp.json"
+  "claude.json:${HOME}/.claude.json"
+)
+
 # ── defaults ──────────────────────────────────────────────────────────────────
 TARGET_ROOT="${ENV_VAULT_RESTORE_ROOT:-/Users/houstongolden/Desktop/CODE_2025}"
 FORCE=false
+LIST_ONLY=false
 VAULT_FILE=""
 
 # ── parse args ─────────────────────────────────────────────────────────────────
 while [[ $# -gt 0 ]]; do
   case $1 in
+    --list)   LIST_ONLY=true; shift ;;
     --force)  FORCE=true; shift ;;
     --root)   TARGET_ROOT="$2"; shift 2 ;;
     -*)       echo "Unknown flag: $1" >&2; exit 1 ;;
@@ -33,7 +52,7 @@ while [[ $# -gt 0 ]]; do
 done
 
 if [[ -z "${VAULT_FILE}" ]]; then
-  echo "Usage: bash restore.sh [--force] [--root <path>] <vault-file>" >&2
+  echo "Usage: bash restore.sh [--list] [--force] [--root <path>] <vault-file>" >&2
   echo "  vault-file: env-vault-*.tar.age | .tar.gpg | .tar.enc" >&2
   exit 1
 fi
@@ -103,6 +122,45 @@ EXTRACT_DIR="${WORK_DIR}/extracted"
 mkdir -p "${EXTRACT_DIR}"
 tar -xf "${TAR_PATH}" -C "${EXTRACT_DIR}"
 
+if [[ "${LIST_ONLY}" == "true" ]]; then
+  ENV_COUNT=0
+  AGENT_PRESENT=0
+  AGENT_MISSING=0
+
+  echo "Vault contents (secret-safe inventory):"
+  while IFS= read -r -d '' ENV_FILE; do
+    REL_PATH="${ENV_FILE#${EXTRACT_DIR}/}"
+    PROJECT_NAME="$(dirname "${REL_PATH}")"
+    DEST="${TARGET_ROOT}/${PROJECT_NAME}/.env.local"
+    VAR_COUNT=$(grep -cE '^[A-Za-z_][A-Za-z0-9_]*=' "${ENV_FILE}" 2>/dev/null || true)
+    VAR_NAMES=$(grep -oE '^[A-Za-z_][A-Za-z0-9_]*' "${ENV_FILE}" 2>/dev/null \
+                | grep -v '^$' | sort | paste -sd ',' - || true)
+    echo "  env: ${PROJECT_NAME}/.env.local -> ${DEST} (${VAR_COUNT} variable(s) [${VAR_NAMES}])"
+    (( ENV_COUNT++ )) || true
+  done < <(find "${EXTRACT_DIR}" -name ".env.local" -print0)
+
+  AGENT_AUTH_SRC="${EXTRACT_DIR}/agent-auth"
+  echo "  agent-auth:"
+  for ENTRY in "${AGENT_AUTH_MAP[@]}"; do
+    ARCHIVE_NAME="${ENTRY%%:*}"
+    DEST_PATH="${ENTRY##*:}"
+    SRC_FILE="${AGENT_AUTH_SRC}/${ARCHIVE_NAME}"
+    if [[ -f "${SRC_FILE}" ]]; then
+      FILE_BYTES=$(wc -c < "${SRC_FILE}" | tr -d ' ')
+      echo "    present: agent-auth/${ARCHIVE_NAME} -> ${DEST_PATH} (${FILE_BYTES} bytes)"
+      (( AGENT_PRESENT++ )) || true
+    else
+      echo "    missing: agent-auth/${ARCHIVE_NAME}"
+      (( AGENT_MISSING++ )) || true
+    fi
+  done
+
+  echo ""
+  echo "List summary: ${ENV_COUNT} .env.local file(s), ${AGENT_PRESENT} agent-auth file(s) present, ${AGENT_MISSING} agent-auth file(s) missing."
+  echo "No files were written and no secret values were printed."
+  exit 0
+fi
+
 # ── restore each .env.local ───────────────────────────────────────────────────
 RESTORED=0
 SKIPPED=0
@@ -139,11 +197,61 @@ while IFS= read -r -d '' ENV_FILE; do
   fi
 done < <(find "${EXTRACT_DIR}" -name ".env.local" -print0)
 
+# ── restore agent-auth files ───────────────────────────────────────────────────
+AGENT_RESTORED=0
+AGENT_SKIPPED=0
+AGENT_BACKED_UP=0
+
+AGENT_AUTH_SRC="${EXTRACT_DIR}/agent-auth"
+
+if [[ -d "${AGENT_AUTH_SRC}" ]]; then
+  echo "Restoring agent-auth files…"
+  for ENTRY in "${AGENT_AUTH_MAP[@]}"; do
+    ARCHIVE_NAME="${ENTRY%%:*}"
+    DEST_PATH="${ENTRY##*:}"
+    SRC_FILE="${AGENT_AUTH_SRC}/${ARCHIVE_NAME}"
+
+    if [[ ! -f "${SRC_FILE}" ]]; then
+      echo "  SKIPPED (not in vault): agent-auth/${ARCHIVE_NAME}"
+      (( AGENT_SKIPPED++ )) || true
+      continue
+    fi
+
+    DEST_DIR="$(dirname "${DEST_PATH}")"
+    mkdir -p "${DEST_DIR}"
+
+    if [[ -f "${DEST_PATH}" ]]; then
+      if [[ "${FORCE}" == "true" ]]; then
+        cp "${SRC_FILE}" "${DEST_PATH}"
+        echo "  RESTORED (overwrite): ${DEST_PATH}"
+        (( AGENT_RESTORED++ )) || true
+      else
+        TS="$(date -u +%Y%m%dT%H%M%SZ)"
+        BAK="${DEST_PATH}.bak.${TS}"
+        cp "${DEST_PATH}" "${BAK}"
+        cp "${SRC_FILE}" "${DEST_PATH}"
+        echo "  RESTORED (backed up old → $(basename "${BAK}")): ${DEST_PATH}"
+        (( AGENT_RESTORED++ )) || true
+        (( AGENT_BACKED_UP++ )) || true
+      fi
+    else
+      cp "${SRC_FILE}" "${DEST_PATH}"
+      echo "  RESTORED (new): ${DEST_PATH}"
+      (( AGENT_RESTORED++ )) || true
+    fi
+  done
+  echo ""
+else
+  echo "No agent-auth/ directory in vault — skipping agent-auth restore."
+  echo ""
+fi
+
 echo ""
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
 echo "  Restore summary"
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-echo "  Restored: ${RESTORED}  |  Skipped: ${SKIPPED}  |  Old files backed up: ${BACKED_UP}"
+echo "  .env.local  — Restored: ${RESTORED}  |  Skipped: ${SKIPPED}  |  Old files backed up: ${BACKED_UP}"
+echo "  agent-auth  — Restored: ${AGENT_RESTORED}  |  Skipped: ${AGENT_SKIPPED}  |  Old files backed up: ${AGENT_BACKED_UP}"
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
 echo ""
-echo "Secrets are now in place. Do not print or share .env.local files."
+echo "Secrets are now in place. Do not print or share secret files."

package/scripts/skillstack-sync/README.md

@@ -28,7 +28,8 @@ Cross-machine sync toolkit for Houston Golden's agent skill/stack setup.
 
 ### Complementary sync planes
 
-- **Identity plane:** `youmd sync` (Convex ↔ local profile, memories, preferences). Automated via `com.youmd.identity-sync` daemon.
+- **Identity plane:** `youmd sync --daemon` (Convex ↔ local profile, memories, preferences). Automated via `com.youmd.identity-sync` daemon. Daemon mode refreshes local files/skills and skips unsafe lossy pushes instead of forcing over richer server data.
+- **Project-context plane:** `youmd stack context-sync` safely commits and syncs only `AGENTS.md`, `CLAUDE.md`, `project-context/`, and `.claude/` in curated Houston-owned repos. It refuses to merge remote app-code changes.
 - **Env-vault plane:** `cli/scripts/env-vault/restore.sh` for secrets (manual, invoked on new machine); also available as `youmd env restore <vault>`.
 
 ---
@@ -38,10 +39,11 @@ Cross-machine sync toolkit for Houston Golden's agent skill/stack setup.
 ```
 cli/scripts/skillstack-sync/
 ├── sync.sh                         Core syncer (bash 3.2 compatible)
-├── install-daemons.sh              Installs both LaunchAgents
+├── install-daemons.sh              Installs all resident LaunchAgents
 ├── bootstrap-new-mac.sh            New machine setup script
 ├── com.youmd.skillstack-sync.plist LaunchAgent: runs `youmd stack sync` every 5 min
-├── com.youmd.identity-sync.plist   LaunchAgent: runs `youmd sync` every 5 min
+├── com.youmd.identity-sync.plist   LaunchAgent: runs `youmd sync --daemon` every 5 min
+├── com.youmd.context-sync.plist    LaunchAgent: runs `youmd stack context-sync` every 15 min
 └── README.md                       This file
 ```
 
@@ -90,7 +92,7 @@ GIT_USER_EMAIL="houston@bamf.ai"                    # commit email (default)
 The preferred way is via the CLI:
 
 ```bash
-youmd stack daemon install    # installs both LaunchAgents
+youmd stack daemon install    # installs all resident LaunchAgents
 youmd stack daemon status     # check loaded/not-loaded
 youmd stack daemon uninstall  # remove plists from ~/Library/LaunchAgents/
 ```
@@ -101,9 +103,10 @@ Or run the raw script directly:
 bash cli/scripts/skillstack-sync/install-daemons.sh
 ```
 
-Installs two LaunchAgents that fire every 300 seconds (5 minutes):
+Installs three LaunchAgents:
 - `com.youmd.skillstack-sync` → runs `youmd stack sync`
-- `com.youmd.identity-sync` → runs `youmd sync`
+- `com.youmd.identity-sync` → runs `youmd sync --daemon`
+- `com.youmd.context-sync` → runs `youmd stack context-sync`
 
 Check status:
 ```bash
@@ -111,6 +114,7 @@ youmd stack daemon status
 # or directly:
 launchctl list com.youmd.skillstack-sync
 launchctl list com.youmd.identity-sync
+launchctl list com.youmd.context-sync
 ```
 
 Check logs:
@@ -118,6 +122,7 @@ Check logs:
 tail -f ~/.youmd/logs/skillstack-sync.log
 tail -f ~/.youmd/logs/skillstack-sync.out.log
 tail -f ~/.youmd/logs/identity-sync.out.log
+tail -f ~/.youmd/logs/context-sync.log
 ```
 
 ### Uninstall daemons
@@ -130,8 +135,10 @@ Or manually:
 ```bash
 launchctl unload ~/Library/LaunchAgents/com.youmd.skillstack-sync.plist
 launchctl unload ~/Library/LaunchAgents/com.youmd.identity-sync.plist
+launchctl unload ~/Library/LaunchAgents/com.youmd.context-sync.plist
 rm ~/Library/LaunchAgents/com.youmd.skillstack-sync.plist
 rm ~/Library/LaunchAgents/com.youmd.identity-sync.plist
+rm ~/Library/LaunchAgents/com.youmd.context-sync.plist
 ```
 
 ---

package/scripts/skillstack-sync/bootstrap-new-mac.sh

@@ -101,14 +101,29 @@ for skill in ${LOOSE_SKILLS}; do
 done
 
 # ---------------------------------------------------------------------------
-step "5. Reminder: restore secrets"
+step "5. Restore agent config from agent-shared"
+# ---------------------------------------------------------------------------
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+RESTORE_SCRIPT="${SCRIPT_DIR}/restore-agent-config.sh"
+
+if [ -f "${RESTORE_SCRIPT}" ]; then
+  info "Running restore-agent-config.sh (backs up existing files, safe to re-run)..."
+  bash "${RESTORE_SCRIPT}"
+  info "Agent config restored."
+else
+  warn "restore-agent-config.sh not found at ${RESTORE_SCRIPT} — skipping agent config restore."
+  warn "You can run it manually later once youmd is fully installed:"
+  warn "  bash ${RESTORE_SCRIPT}"
+fi
+
+# ---------------------------------------------------------------------------
+step "6. Reminder: restore secrets"
 # ---------------------------------------------------------------------------
 echo ""
 echo "  !! IMPORTANT: Secrets are NOT in git. Restore them separately:"
 echo ""
-echo "     If you use the env-vault (~/Desktop/CODE_2025/youmd/cli/scripts/env-vault/):"
+echo "     If you use the env-vault:"
 echo "       youmd env restore <vault-file>   # CLI wrapper (preferred)"
-echo "       bash ~/Desktop/CODE_2025/youmd/cli/scripts/env-vault/restore.sh <vault-file>"
 echo ""
 echo "     Secrets to restore (set in your shell profile or .env files):"
 echo "       OPENROUTER_API_KEY"
@@ -119,7 +134,7 @@ echo "       ANTHROPIC_API_KEY"
 echo ""
 
 # ---------------------------------------------------------------------------
-step "6. Next steps"
+step "7. Next steps"
 # ---------------------------------------------------------------------------
 echo ""
 echo "  Bootstrap complete. To activate the auto-sync daemons, run:"
@@ -127,7 +142,6 @@ echo ""
 echo "    youmd stack daemon install        # preferred (CLI-native)"
 echo ""
 echo "  Or run the raw script directly:"
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 echo "    bash ${SCRIPT_DIR}/install-daemons.sh"
 echo ""
 echo "  To do a manual sync now:"

package/scripts/skillstack-sync/capture-agent-config.sh

@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+# capture-agent-config.sh — snapshot NON-SECRET agent config into ~/.agent-shared/
+#
+# This captures the agent-behavior config that isn't already in a synced repo —
+# Claude/Codex/Warp settings, slash commands, plugin list, the orphaned
+# ~/.agents skills, and the launchd/cron automations — into the agent-shared
+# repo so they travel across machines. The skillstack-sync daemon then commits +
+# pushes agent-shared, and `youmd machine setup`/restore applies them on a new Mac.
+#
+# SECRETS NEVER GO HERE. agent-shared is a git repo. Live secrets (codex
+# auth.json, cursor mcp.json, ~/.claude.json BAMF token, .env.local) travel via
+# the ENCRYPTED env-vault instead. This script captures only files confirmed to
+# be secret-free, and a final guard greps the staged output for secret patterns
+# and ABORTS if any are found (nothing is left in agent-shared on abort).
+#
+# bash 3.2 / BSD safe. Idempotent. --dry-run to preview.
+
+set -euo pipefail
+
+AGENT_SHARED="${HOME}/.agent-shared"
+DEST="${AGENT_SHARED}/agent-config"
+LOG_DIR="${HOME}/.youmd/logs"
+LOG_FILE="${LOG_DIR}/capture-agent-config.log"
+
+DRY_RUN=0
+for arg in "$@"; do
+  case "$arg" in
+    --dry-run) DRY_RUN=1 ;;
+    *) echo "Unknown flag: $arg" >&2; exit 1 ;;
+  esac
+done
+
+mkdir -p "${LOG_DIR}"
+log() { local ts; ts="$(date -u +"%Y-%m-%dT%H:%M:%SZ")"; echo "[${ts}] $*"; echo "[${ts}] $*" >> "${LOG_FILE}"; }
+is_dry() { [ "${DRY_RUN}" -eq 1 ]; }
+
+if [ ! -d "${AGENT_SHARED}/.git" ]; then
+  log "ERROR: ${AGENT_SHARED} is not a git repo — run machine setup first."
+  exit 1
+fi
+
+# copy_in <src> <dest-subpath>  — copy a file/dir into the staging dest if it exists
+copy_in() {
+  local src="$1" rel="$2" target
+  target="${DEST}/${rel}"
+  if [ ! -e "${src}" ]; then return 0; fi
+  if is_dry; then log "DRY would capture ${src} → agent-config/${rel}"; return 0; fi
+  mkdir -p "$(dirname "${target}")"
+  if [ -d "${src}" ]; then
+    rsync -a --delete "${src}/" "${target}/"
+  else
+    cp "${src}" "${target}"
+  fi
+  log "captured ${src} → agent-config/${rel}"
+}
+
+log "=== capture-agent-config START ($([ "${DRY_RUN}" -eq 1 ] && echo DRY || echo LIVE)) ==="
+
+# ── Claude config (settings have no raw secrets; ~/.claude.json is EXCLUDED — vaulted) ──
+copy_in "${HOME}/.claude/settings.json"               "claude/settings.json"
+copy_in "${HOME}/.claude/settings.local.json"         "claude/settings.local.json"
+copy_in "${HOME}/.claude/commands"                    "claude/commands"
+copy_in "${HOME}/.claude/mcp.json"                    "claude/mcp.json"
+copy_in "${HOME}/.claude/plugins/installed_plugins.json" "claude/plugins/installed_plugins.json"
+
+# ── Codex config (config.toml only; auth.json is EXCLUDED — vaulted) ──
+copy_in "${HOME}/.codex/config.toml"                  "codex/config.toml"
+
+# ── Warp (no secrets) ──
+copy_in "${HOME}/.warp/settings.toml"                 "warp/settings.toml"
+copy_in "${HOME}/.warp/keybindings.yaml"              "warp/keybindings.yaml"
+
+# ── Orphaned ~/.agents skills (no repo of their own today) ──
+copy_in "${HOME}/.agents/skills/find-skills"          "agents-skills/find-skills"
+copy_in "${HOME}/.agents/skills/ui-ux-pro-max"        "agents-skills/ui-ux-pro-max"
+
+# ── Automations: launchd plists (HOME-templated) + crontab snapshot ──
+capture_plist() {
+  local label="$1" src="${HOME}/Library/LaunchAgents/$1.plist" target="${DEST}/automations/launchd/$1.plist"
+  if [ ! -f "${src}" ]; then return 0; fi
+  if is_dry; then log "DRY would capture plist ${label} (HOME-templated)"; return 0; fi
+  mkdir -p "$(dirname "${target}")"
+  sed "s|${HOME}|__HOME__|g" "${src}" > "${target}"
+  log "captured plist ${label} → agent-config/automations/launchd/${label}.plist"
+}
+capture_plist "com.youmd.skillstack-sync"
+capture_plist "com.youmd.identity-sync"
+capture_plist "com.youmd.context-sync"
+capture_plist "com.houstongolden.agent-runtime-guard"
+
+if ! is_dry; then
+  mkdir -p "${DEST}/automations"
+  crontab -l 2>/dev/null > "${DEST}/automations/crontab.txt" || true
+  log "captured crontab → agent-config/automations/crontab.txt"
+fi
+
+# ── SECRET-LEAK GUARD — abort if anything captured looks like a live secret ──
+if ! is_dry && [ -d "${DEST}" ]; then
+  # Match real secret token shapes; allow bare key NAMES (KEY=) which are fine.
+  HITS="$(grep -rIlE 'sk-ant-[A-Za-z0-9_-]{20}|sk-[A-Za-z0-9]{32}|ghp_[A-Za-z0-9]{30}|gho_[A-Za-z0-9]{30}|Bearer [A-Za-z0-9._-]{20}|AKIA[0-9A-Z]{16}|xox[baprs]-[A-Za-z0-9-]{10}' "${DEST}" 2>/dev/null || true)"
+  if [ -n "${HITS}" ]; then
+    log "ABORT: possible secret(s) found in captured config — removing capture, nothing committed:"
+    log "${HITS}"
+    rm -rf "${DEST}"
+    exit 1
+  fi
+  log "secret-leak guard: clean (no live secret patterns in captured config)"
+fi
+
+log "=== capture-agent-config DONE ==="

package/scripts/skillstack-sync/com.youmd.context-sync.plist

@@ -0,0 +1,38 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>com.youmd.context-sync</string>
+
+    <key>ProgramArguments</key>
+    <array>
+        <string>/bin/zsh</string>
+        <string>-lc</string>
+        <string>youmd stack context-sync</string>
+    </array>
+
+    <key>StartInterval</key>
+    <integer>900</integer>
+
+    <key>RunAtLoad</key>
+    <true/>
+
+    <key>KeepAlive</key>
+    <false/>
+
+    <key>StandardOutPath</key>
+    <string>__HOME__/.youmd/logs/context-sync.out.log</string>
+
+    <key>StandardErrorPath</key>
+    <string>__HOME__/.youmd/logs/context-sync.err.log</string>
+
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>HOME</key>
+        <string>__HOME__</string>
+        <key>PATH</key>
+        <string>/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
+    </dict>
+</dict>
+</plist>