I'm parked on you

Everything I could decide myself is decided. What's left needs you. Each one has a recommendation from Fable — if you agree, pick it and press Done. "I'm not sure" is a real answer and becomes work for me. You don't need to open the session — pressing Done sends your answer back and it picks up.

1Prod suppression-canary auth (PROD_COOKIES_JSON) has been dark for 3+ days and its nightly self-heal (prod-cookie-refresh) has failed EVERY night since 2026-08-21 (16 consecutive nights) — always the same reason: SMOKE_PASSWORD was never provisioned to ~/code/PropFlow/propflowai/.env.local on the mini, so the refresher correctly refuses to sign in rather than guess a password against the shared prod smoke account. This exact diagnosis has been posted to #alerts 9 times since Aug 17 with zero reply. What should happen?

In plain terms. The nightly job that keeps our production sign-in cookie fresh (so a safety check can verify opt-out protections still work) has been quietly failing every night for over 3 weeks, because it's missing one password nobody ever typed in. Add that password once on the mini and it fixes itself forever; skip it and someone has to manually refresh this every ~week by hand, and it'll keep going dark in between.

Fable recommends: Add SMOKE_PASSWORD (for smoke@propflowai.co) to ~/code/PropFlow/propflowai/.env.local on the mini — durable fix, the already-merged nightly job self-heals from then on, no more manual refreshes
It's the one action that closes this permanently instead of the 9th one-off patch; the automation is already built and merged (propflowai#5634, agent-smith#206) and has been waiting on just this credential since 2026-08-21
Tried first, unsuccessfully: Re-verified live rather than trusting prior escalations: gh secret list shows PROD_COOKIES_JSON unchanged since 2026-08-27T15:12:34Z; .env.local on the mini still has only SMOKE_TOTP_SECRET; AWS SSM /propflow/prod/ has no SMOKE* param; this session has no /browse or browser/computer-use tool available to self-serve the sign-in; checked blocked adopt --list (no existing orphaned block for this) and blocked list (zero open) before raising fresh

Add SMOKE_PASSWORD (for smoke@propflowai.co) to ~/code/PropFlow/propflowai/.env.local on the mini — durable fix, the already-merged nightly job self-heals from then on, no more manual refreshesFable recommends Run /browse locally now + gh secret set PROD_COOKIES_JSON — unblocks tonight's canary only; the cookie re-expires in ~7 days and this recurs since SMOKE_PASSWORD is still absent Deprioritize / mute this alert class until credential provisioning is scheduled I'm not sure — go find out

73ffcacf is parked on this.

Pick an option above, then press Done.