I'm parked on you

Everything I could decide myself is decided. What's left needs you. Each one has a recommendation from Fable — if you agree, pick it and press Done. "I'm not sure" is a real answer and becomes work for me. You don't need to open the session — pressing Done sends your answer back and it picks up.

1Prod cookie jar expires Aug 27 12:13am CT — the automated nightly refresh has been correctly refusing to run for at least 4 nights because SMOKE_PASSWORD is missing from the mini's .env.local. Who supplies the value?

In plain terms. The nightly robot that keeps your login-cookie fresh for the compliance checker needs a password that's only stored in GitHub's locked secret vault. Someone already decided a week ago to copy that password onto this machine so the robot could do it automatically — but it never actually got copied over. Cookie expires in about 23 hours; either paste that password onto the mini, or do the usual manual browser-login-and-copy-the-cookie routine one more time.
Fable recommends: Place the real SMOKE_PASSWORD (same value as the propflowai repo's SMOKE_PASSWORD GH Actions secret) into ~/code/PropFlow/propflowai/.env.local on the mini — the nightly prod-cookie-refresh job then self-heals with no further action
This exact fix was already decided once (b86228042, answered 2026-08-19: 'place SMOKE_PASSWORD in the mini's .env.local — next week's refresh happens without you') but the file's mtime (Aug 17 08:59) shows it was never actually written — the job has been silently, safely refusing every night since (it detects the missing secret and refuses to sign in rather than risk locking the shared smoke account), so this closes the loop for good instead of buying one more week of manual /browse runs
Tried first, unsuccessfully: Investigated the alert end-to-end: confirmed the automated prod-cookie-refresh job ran every night since PR #5634 merged (2026-08-21) and self-diagnosed the exact cause each time (signInReady() in refresh-prod-cookies.ts refuses cleanly with 'SMOKE_PASSWORD is not set'); ruled out the #6130 2FA-cookie bug (irrelevant — smoke@ is MFA-exempt); confirmed SMOKE_PASSWORD is absent from the mini's .env.local (grep + file mtime Aug 17, before the Aug 19 decision) and is not recoverable from AWS SSM/Secrets Manager (only exists as a GH Actions secret, which is write-only) or from my own tool access (no /browse skill available to this session). Did not attempt a live sign-in — the script's own comments warn a bad-password attempt risks a lockout on the shared prod smoke account, and I have no way to supply a correct one.

5f2d1ada is parked on this.

Pick an option above, then press Done.
PropFlow Docs