MANUAL RUN: rotate the Agent Office password, clear secrets from the office shell, trim gh token scopes

Found in the security audit (notes/SECURITY_AUDIT.md). One-off hygiene that needs you at the machine:

Rotate the Agent Office password and session secret once the office token fix lands (the current ones sat in a file every agent could read). Delete password, secret, salt and verifier from ~/agent-office/.agent-office/config.json while the office is stopped, start it, and save the new password in 1Password.
Check what the office's shell exports: run env | cut -d= -f1 | grep -iE 'token|secret|key|pass|op_' in the terminal you start the office from. Anything listed reaches every agent today. Remove those exports from your shell profile; deploys get them from varlock.
gh token scope: gh auth status shows its scopes. Agents use it. If it has delete_repo or admin:org, drop them with gh auth refresh --remove-scopes delete_repo,admin:org.
1Password service accounts (only if you use wheel: "agent"): one per test vault, never with access to the codesplitters vault.

Security audit: agents against every surface, and keep drop secrets o…

Checked from an agent (2026-10-11):

Step 3 is done, nothing to trim. gh scopes are gist, project, read:org, repo, workflow. There's no delete_repo or admin:org.
Step 4 doesn't apply. No app config uses wheel: "agent" (it only shows up in REFERENCE.md and a test).
Steps 1–2 are left for the owner. Run zsh ~/office-hygiene-654.sh from the terminal that starts the office, with the office stopped. It lists secret-looking export names and removes password/secret/salt/verifier from the config, keeping a backup.
Agent Office: any agent can read every worker's hook token, the pty token and the office session secret #642 is still open. After it lands, rotate again, because agents can read the new password until then.

Tracked in #609, the one hands-on checklist. The steps here still apply; tick them there.

🤖 Generated with Claude Code

Navigation Menu