After #89/#90, grans sync on a machine that has never run grans auth login still falls through to Granola's own token store. On macOS that read cannot succeed: Granola's data-encryption key lives in the data-protection keychain, reachable only by Granola's code signature.
The user sees:
Failed to read the 'Granola Safe Storage' password from the macOS Keychain. Ensure Granola is installed and allow access when prompted, or pass --token.
Both suggestions in that message are dead ends on current macOS builds, and it never mentions grans auth login, which is the one thing that fixes it.
grans should not attempt a read it can never complete. On macOS the chain should end after grans's own credentials with an error naming the remedy, and the macOS safeStorage decryption code becomes unreachable and should go with it.
After #89/#90,
grans syncon a machine that has never rungrans auth loginstill falls through to Granola's own token store. On macOS that read cannot succeed: Granola's data-encryption key lives in the data-protection keychain, reachable only by Granola's code signature.The user sees:
Both suggestions in that message are dead ends on current macOS builds, and it never mentions
grans auth login, which is the one thing that fixes it.grans should not attempt a read it can never complete. On macOS the chain should end after grans's own credentials with an error naming the remedy, and the macOS safeStorage decryption code becomes unreachable and should go with it.