@hasna/instructions 0.4.13 → 0.4.15

package/dist/cli/index.js

@@ -2641,9 +2641,6 @@ function templateizeMachineContent(content, machine) {
   next = next.replace(/~\/workspace/g, "{{WORKSPACE_ROOT}}").replace(/~\/Workspace/g, "{{WORKSPACE_ROOT}}").replace(/\/opt\/homebrew\/bin\/bun/g, "{{BUN_PATH}}");
   return { content: next, changed: next !== content };
 }
-function renderMachineAwareContent(content, variables) {
-  return isTemplate(content) ? renderTemplate(content, variables) : content;
-}
 function renderMachineAwareContentPreview(content, variables) {
   return isTemplate(content) ? renderTemplatePreview(content, variables) : { content, unresolved: [] };
 }
@@ -11577,8 +11574,9 @@ function normalizeTargetPath(p) {
   }
 }
 async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
-  const renderedTarget = opts.vars ? renderForApply(targetPath, opts.vars, opts.dryRun === true) : { content: targetPath, unresolved: [] };
-  const rendered = opts.vars ? renderForApply(content, opts.vars, opts.dryRun === true) : { content, unresolved: [] };
+  const variables = opts.vars ?? {};
+  const renderedTarget = renderForApply(targetPath, variables);
+  const rendered = renderForApply(content, variables);
   const renderedTargetPath = renderedTarget.content;
   const renderedContent = rendered.content;
   const targetAgent = meta.agent ?? config.agent;
@@ -11617,13 +11615,42 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
     ...meta
   };
 }
-function renderForApply(content, variables, preview) {
-  if (preview)
-    return renderMachineAwareContentPreview(content, variables);
-  return {
-    content: renderMachineAwareContent(content, variables),
-    unresolved: []
-  };
+function renderForApply(content, variables) {
+  return renderMachineAwareContentPreview(content, variables);
+}
+function wouldDestroyACredential(targetPath, renderedContent, format) {
+  const secretTokens = parseTemplateVars(renderedContent).filter(isSecretVarName);
+  if (secretTokens.length === 0)
+    return [];
+  let current;
+  try {
+    const path = expandPath(targetPath);
+    if (!existsSync7(path))
+      return [];
+    current = readFileSync4(path, "utf-8");
+  } catch {
+    return secretTokens;
+  }
+  if (current === renderedContent)
+    return [];
+  if (scanSecrets(current, format).length > 0)
+    return secretTokens;
+  return secretTokens.filter((name) => countPlaceholder(current, name) < countPlaceholder(renderedContent, name));
+}
+function countPlaceholder(content, name) {
+  return content.match(new RegExp(`\\{\\{${name}(?::[^}]*)?\\}\\}`, "g"))?.length ?? 0;
+}
+async function resolveApplyVariables(opts) {
+  const machine = detectMachineContext();
+  let base;
+  try {
+    const store = opts.store ?? resolveConfigStore();
+    const profile = await store.resolveProfileForMachine(machine);
+    base = resolveProfileVariables(profile, machine);
+  } catch {
+    base = machineContextToVariables(machine);
+  }
+  return { ...base, ...opts.vars ?? {} };
 }
 function isAntigravityRuleTarget(agent, targetPath) {
   return agent === "antigravity" && /\.(md|mdc|markdown)$/i.test(targetPath);
@@ -11708,7 +11735,8 @@ async function applyConfigs(configs, opts = {}) {
   return report.results;
 }
 async function applyConfigsWithReport(configs, opts = {}) {
-  const prepared = prepareConfigBatch(configs, opts);
+  const effective = { ...opts, vars: await resolveApplyVariables(opts) };
+  const prepared = prepareConfigBatch(configs, effective);
   if (prepared.failures.length > 0) {
     return {
       results: [],
@@ -11722,7 +11750,7 @@ async function applyConfigsWithReport(configs, opts = {}) {
     if (config.kind === "reference" || isRetiredOrUnsupportedConfigAgent(config.agent))
       continue;
     try {
-      results.push(await applyPreparedConfig(config, opts));
+      results.push(await applyPreparedConfig(config, effective));
     } catch (error) {
       failures.push({
         config_id: config.id,
@@ -11762,7 +11790,27 @@ function prepareConfigBatch(configs, opts) {
     }
     return false;
   });
-  const { configs: deduplicated, duplicates } = deduplicateEquivalentProfileConfigs(activeConfigs, opts);
+  const renderSafeConfigs = activeConfigs.filter((config) => {
+    const behavior = canonicalConfigApplyBehavior(config, opts, activeConfigs);
+    const targets = [
+      ...behavior.primary ? [{ path: behavior.primary.path, content: behavior.primary.content }] : [],
+      ...behavior.outputs.map((output) => ({ path: output.path, content: output.content }))
+    ];
+    const blocked = [...new Set(targets.flatMap((target) => wouldDestroyACredential(target.path, target.content, config.format)))].sort();
+    if (blocked.length === 0)
+      return true;
+    for (const target of targets) {
+      skipped.push({
+        config_id: config.id,
+        config_slug: config.slug,
+        path: target.path,
+        owner: "unresolved-secret-placeholder",
+        reason: `no value for ${blocked.map((name) => `{{${name}}}`).join(", ")} and the file holds something else there; writing the placeholder would overwrite a live credential`
+      });
+    }
+    return false;
+  });
+  const { configs: deduplicated, duplicates } = deduplicateEquivalentProfileConfigs(renderSafeConfigs, opts);
   for (const duplicate of duplicates) {
     for (const target of configTargets(duplicate, opts, activeConfigs)) {
       skipped.push({
@@ -11914,6 +11962,8 @@ var init_apply = __esm(() => {
   init_machine();
   init_session_render();
   init_session_render_ownership();
+  init_redact();
+  init_template();
   init_transforms();
 });
 
@@ -15538,6 +15588,9 @@ program.command("apply <id>").description("Apply a config to its target_path and
       const status = opts.dryRun ? chalk.yellow("[dry-run]") : result.primary_changed ? chalk.green("\u2713") : chalk.dim("=");
       const change = result.primary_changed ? "changed" : "unchanged";
       console.log(`${status} ${result.path} ${chalk.dim(`(${change})`)}`);
+      if (result.unresolved_template_vars?.length) {
+        console.log(`  ${chalk.yellow("!")} left unexpanded: ${result.unresolved_template_vars.map((name) => `{{${name}}}`).join(", ")}` + ` ${chalk.dim("(no value for these; secret placeholders are preserved on purpose)")}`);
+      }
       for (const output of result.outputs ?? []) {
         const outputStatus = opts.dryRun ? chalk.yellow("[dry-run]") : output.primary_changed ? chalk.green("\u2713") : chalk.dim("=");
         const outputChange = output.primary_changed ? "changed" : "unchanged";
@@ -15818,11 +15871,10 @@ profileCmd.command("apply [id]").description("Apply all configs in a profile to
     for (const skipped of report.skipped) {
       console.log(`${chalk.dim("[owned]")} ${skipped.path} ${chalk.dim(skipped.owner)}`);
     }
-    if (opts.dryRun) {
-      const unresolved = [...new Set(results.flatMap((result) => result.unresolved_template_vars ?? []))];
-      if (unresolved.length > 0) {
-        console.log(chalk.yellow(`Unresolved secret/runtime template references preserved in preview: ${unresolved.join(", ")}`));
-      }
+    const unresolved = [...new Set(results.flatMap((result) => result.unresolved_template_vars ?? []))];
+    if (unresolved.length > 0) {
+      const where = opts.dryRun ? "would be left unexpanded" : "left unexpanded";
+      console.log(chalk.yellow(`Unresolved secret/runtime template references ${where}: ${unresolved.join(", ")}`));
     }
     for (const failure of report.failures) {
       console.error(chalk.red(`[failed] ${failure.config_slug}: ${failure.message}`));

package/dist/index.js

@@ -9591,8 +9591,9 @@ function normalizeTargetPath(p) {
   }
 }
 async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
-  const renderedTarget = opts.vars ? renderForApply(targetPath, opts.vars, opts.dryRun === true) : { content: targetPath, unresolved: [] };
-  const rendered = opts.vars ? renderForApply(content, opts.vars, opts.dryRun === true) : { content, unresolved: [] };
+  const variables = opts.vars ?? {};
+  const renderedTarget = renderForApply(targetPath, variables);
+  const rendered = renderForApply(content, variables);
   const renderedTargetPath = renderedTarget.content;
   const renderedContent = rendered.content;
   const targetAgent = meta.agent ?? config.agent;
@@ -9631,13 +9632,42 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
     ...meta
   };
 }
-function renderForApply(content, variables, preview) {
-  if (preview)
-    return renderMachineAwareContentPreview(content, variables);
-  return {
-    content: renderMachineAwareContent(content, variables),
-    unresolved: []
-  };
+function renderForApply(content, variables) {
+  return renderMachineAwareContentPreview(content, variables);
+}
+function wouldDestroyACredential(targetPath, renderedContent, format) {
+  const secretTokens = parseTemplateVars(renderedContent).filter(isSecretVarName);
+  if (secretTokens.length === 0)
+    return [];
+  let current;
+  try {
+    const path = expandPath(targetPath);
+    if (!existsSync6(path))
+      return [];
+    current = readFileSync4(path, "utf-8");
+  } catch {
+    return secretTokens;
+  }
+  if (current === renderedContent)
+    return [];
+  if (scanSecrets(current, format).length > 0)
+    return secretTokens;
+  return secretTokens.filter((name) => countPlaceholder(current, name) < countPlaceholder(renderedContent, name));
+}
+function countPlaceholder(content, name) {
+  return content.match(new RegExp(`\\{\\{${name}(?::[^}]*)?\\}\\}`, "g"))?.length ?? 0;
+}
+async function resolveApplyVariables(opts) {
+  const machine = detectMachineContext();
+  let base;
+  try {
+    const store = opts.store ?? resolveConfigStore();
+    const profile = await store.resolveProfileForMachine(machine);
+    base = resolveProfileVariables(profile, machine);
+  } catch {
+    base = machineContextToVariables(machine);
+  }
+  return { ...base, ...opts.vars ?? {} };
 }
 function isAntigravityRuleTarget(agent, targetPath) {
   return agent === "antigravity" && /\.(md|mdc|markdown)$/i.test(targetPath);
@@ -9722,7 +9752,8 @@ async function applyConfigs(configs, opts = {}) {
   return report.results;
 }
 async function applyConfigsWithReport(configs, opts = {}) {
-  const prepared = prepareConfigBatch(configs, opts);
+  const effective = { ...opts, vars: await resolveApplyVariables(opts) };
+  const prepared = prepareConfigBatch(configs, effective);
   if (prepared.failures.length > 0) {
     return {
       results: [],
@@ -9736,7 +9767,7 @@ async function applyConfigsWithReport(configs, opts = {}) {
     if (config.kind === "reference" || isRetiredOrUnsupportedConfigAgent(config.agent))
       continue;
     try {
-      results.push(await applyPreparedConfig(config, opts));
+      results.push(await applyPreparedConfig(config, effective));
     } catch (error) {
       failures.push({
         config_id: config.id,
@@ -9776,7 +9807,27 @@ function prepareConfigBatch(configs, opts) {
     }
     return false;
   });
-  const { configs: deduplicated, duplicates } = deduplicateEquivalentProfileConfigs(activeConfigs, opts);
+  const renderSafeConfigs = activeConfigs.filter((config) => {
+    const behavior = canonicalConfigApplyBehavior(config, opts, activeConfigs);
+    const targets = [
+      ...behavior.primary ? [{ path: behavior.primary.path, content: behavior.primary.content }] : [],
+      ...behavior.outputs.map((output) => ({ path: output.path, content: output.content }))
+    ];
+    const blocked = [...new Set(targets.flatMap((target) => wouldDestroyACredential(target.path, target.content, config.format)))].sort();
+    if (blocked.length === 0)
+      return true;
+    for (const target of targets) {
+      skipped.push({
+        config_id: config.id,
+        config_slug: config.slug,
+        path: target.path,
+        owner: "unresolved-secret-placeholder",
+        reason: `no value for ${blocked.map((name) => `{{${name}}}`).join(", ")} and the file holds something else there; writing the placeholder would overwrite a live credential`
+      });
+    }
+    return false;
+  });
+  const { configs: deduplicated, duplicates } = deduplicateEquivalentProfileConfigs(renderSafeConfigs, opts);
   for (const duplicate of duplicates) {
     for (const target of configTargets(duplicate, opts, activeConfigs)) {
       skipped.push({

package/dist/lib/apply-secret-placeholder-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=apply-secret-placeholder-guard.test.d.ts.map

package/dist/lib/apply-secret-placeholder-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-secret-placeholder-guard.test.d.ts","sourceRoot":"","sources":["../../src/lib/apply-secret-placeholder-guard.test.ts"],"names":[],"mappings":""}

package/dist/lib/apply.d.ts

@@ -23,7 +23,7 @@ export interface ConfigApplySkippedTarget {
     config_id: string;
     config_slug: string;
     path: string;
-    owner: typeof SESSION_RENDERER_OWNER_ID | "equivalent-profile-config" | "retired-provider-config";
+    owner: typeof SESSION_RENDERER_OWNER_ID | "equivalent-profile-config" | "retired-provider-config" | "unresolved-secret-placeholder";
     reason: string;
 }
 export interface ConfigApplyPreviewFailure {

package/dist/lib/apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/lib/apply.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAgB,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG1D,OAAO,EAGL,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAI7B,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK5C;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAsBrD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,yBAAyB,GAAG,2BAA2B,GAAG,yBAAyB,CAAC;IAClG,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,QAAQ,EAAE,yBAAyB,EAAE,CAAC;CACvC;AAuHD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CA+BtB;AA2ED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,EAAE,CAAC,CAMxB;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,kBAAkB,CAAC,CA4B7B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAM,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/lib/apply.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAA8B,MAAM,mBAAmB,CAAC;AAEzF,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAQ1D,OAAO,EAGL,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAM7B,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK5C;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAsBrD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,yBAAyB,GAAG,2BAA2B,GAAG,yBAAyB,GAAG,+BAA+B,CAAC;IACpI,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,QAAQ,EAAE,yBAAyB,EAAE,CAAC;CACvC;AA8PD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CA+BtB;AA2ED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,EAAE,CAAC,CAMxB;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,kBAAkB,CAAC,CAiC7B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAM,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}

package/dist/mcp/create-config-target-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=create-config-target-guard.test.d.ts.map

package/dist/mcp/create-config-target-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-config-target-guard.test.d.ts","sourceRoot":"","sources":["../../src/mcp/create-config-target-guard.test.ts"],"names":[],"mappings":""}

package/dist/mcp/index.js

@@ -578,9 +578,6 @@ function templateizeMachineContent(content, machine) {
   next = next.replace(/~\/workspace/g, "{{WORKSPACE_ROOT}}").replace(/~\/Workspace/g, "{{WORKSPACE_ROOT}}").replace(/\/opt\/homebrew\/bin\/bun/g, "{{BUN_PATH}}");
   return { content: next, changed: next !== content };
 }
-function renderMachineAwareContent(content, variables) {
-  return isTemplate(content) ? renderTemplate(content, variables) : content;
-}
 function renderMachineAwareContentPreview(content, variables) {
   return isTemplate(content) ? renderTemplatePreview(content, variables) : { content, unresolved: [] };
 }
@@ -5894,8 +5891,9 @@ function normalizeTargetPath(p) {
   }
 }
 async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
-  const renderedTarget = opts.vars ? renderForApply(targetPath, opts.vars, opts.dryRun === true) : { content: targetPath, unresolved: [] };
-  const rendered = opts.vars ? renderForApply(content, opts.vars, opts.dryRun === true) : { content, unresolved: [] };
+  const variables = opts.vars ?? {};
+  const renderedTarget = renderForApply(targetPath, variables);
+  const rendered = renderForApply(content, variables);
   const renderedTargetPath = renderedTarget.content;
   const renderedContent = rendered.content;
   const targetAgent = meta.agent ?? config.agent;
@@ -5934,13 +5932,42 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
     ...meta
   };
 }
-function renderForApply(content, variables, preview) {
-  if (preview)
-    return renderMachineAwareContentPreview(content, variables);
-  return {
-    content: renderMachineAwareContent(content, variables),
-    unresolved: []
-  };
+function renderForApply(content, variables) {
+  return renderMachineAwareContentPreview(content, variables);
+}
+function wouldDestroyACredential(targetPath, renderedContent, format) {
+  const secretTokens = parseTemplateVars(renderedContent).filter(isSecretVarName);
+  if (secretTokens.length === 0)
+    return [];
+  let current;
+  try {
+    const path = expandPath(targetPath);
+    if (!existsSync4(path))
+      return [];
+    current = readFileSync2(path, "utf-8");
+  } catch {
+    return secretTokens;
+  }
+  if (current === renderedContent)
+    return [];
+  if (scanSecrets(current, format).length > 0)
+    return secretTokens;
+  return secretTokens.filter((name) => countPlaceholder(current, name) < countPlaceholder(renderedContent, name));
+}
+function countPlaceholder(content, name) {
+  return content.match(new RegExp(`\\{\\{${name}(?::[^}]*)?\\}\\}`, "g"))?.length ?? 0;
+}
+async function resolveApplyVariables(opts) {
+  const machine = detectMachineContext();
+  let base;
+  try {
+    const store = opts.store ?? resolveConfigStore();
+    const profile = await store.resolveProfileForMachine(machine);
+    base = resolveProfileVariables(profile, machine);
+  } catch {
+    base = machineContextToVariables(machine);
+  }
+  return { ...base, ...opts.vars ?? {} };
 }
 function isAntigravityRuleTarget(agent, targetPath) {
   return agent === "antigravity" && /\.(md|mdc|markdown)$/i.test(targetPath);
@@ -6025,7 +6052,8 @@ async function applyConfigs(configs, opts = {}) {
   return report.results;
 }
 async function applyConfigsWithReport(configs, opts = {}) {
-  const prepared = prepareConfigBatch(configs, opts);
+  const effective = { ...opts, vars: await resolveApplyVariables(opts) };
+  const prepared = prepareConfigBatch(configs, effective);
   if (prepared.failures.length > 0) {
     return {
       results: [],
@@ -6039,7 +6067,7 @@ async function applyConfigsWithReport(configs, opts = {}) {
     if (config.kind === "reference" || isRetiredOrUnsupportedConfigAgent(config.agent))
       continue;
     try {
-      results.push(await applyPreparedConfig(config, opts));
+      results.push(await applyPreparedConfig(config, effective));
     } catch (error) {
       failures.push({
         config_id: config.id,
@@ -6079,7 +6107,27 @@ function prepareConfigBatch(configs, opts) {
     }
     return false;
   });
-  const { configs: deduplicated, duplicates } = deduplicateEquivalentProfileConfigs(activeConfigs, opts);
+  const renderSafeConfigs = activeConfigs.filter((config) => {
+    const behavior = canonicalConfigApplyBehavior(config, opts, activeConfigs);
+    const targets = [
+      ...behavior.primary ? [{ path: behavior.primary.path, content: behavior.primary.content }] : [],
+      ...behavior.outputs.map((output) => ({ path: output.path, content: output.content }))
+    ];
+    const blocked = [...new Set(targets.flatMap((target) => wouldDestroyACredential(target.path, target.content, config.format)))].sort();
+    if (blocked.length === 0)
+      return true;
+    for (const target of targets) {
+      skipped.push({
+        config_id: config.id,
+        config_slug: config.slug,
+        path: target.path,
+        owner: "unresolved-secret-placeholder",
+        reason: `no value for ${blocked.map((name) => `{{${name}}}`).join(", ")} and the file holds something else there; writing the placeholder would overwrite a live credential`
+      });
+    }
+    return false;
+  });
+  const { configs: deduplicated, duplicates } = deduplicateEquivalentProfileConfigs(renderSafeConfigs, opts);
   for (const duplicate of duplicates) {
     for (const target of configTargets(duplicate, opts, activeConfigs)) {
       skipped.push({
@@ -6231,6 +6279,8 @@ var init_apply = __esm(() => {
   init_machine();
   init_session_render();
   init_session_render_ownership();
+  init_redact();
+  init_template();
   init_transforms();
 });
 
@@ -6858,7 +6908,7 @@ var init_sync_dir = __esm(() => {
 var require_package = __commonJS((exports, module) => {
   module.exports = {
     name: "@hasna/instructions",
-    version: "0.4.13",
+    version: "0.4.15",
     description: "AI coding agent instruction & configuration manager \u2014 store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
     type: "module",
     main: "dist/index.js",
@@ -6897,7 +6947,7 @@ var require_package = __commonJS((exports, module) => {
       "dev:mcp": "bun run src/mcp/index.ts",
       "dev:serve": "bun run src/server/index.ts",
       seed: "bun run scripts/seed.ts",
-      prepublishOnly: "bun run build",
+      prepublishOnly: "bun run scripts/check-publish-hold.ts && bun run build",
       postinstall: "mkdir -p $HOME/.hasna/instructions $HOME/.hasna/instructions/backups 2>/dev/null || true"
     },
     keywords: [
@@ -6958,11 +7008,26 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 // src/mcp/server.ts
 init_config_store();
 init_apply();
-init_sync_dir();
-init_machine();
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 
+// src/lib/config-target-identity.ts
+init_apply();
+function findConfigsByTargetPath(configs, targetPath) {
+  const wanted = normalizeTargetPath(targetPath);
+  return configs.filter((config) => {
+    if (config.kind === "reference")
+      return false;
+    if (!config.target_path)
+      return false;
+    return normalizeTargetPath(config.target_path) === wanted;
+  });
+}
+
+// src/mcp/server.ts
+init_sync_dir();
+init_machine();
+
 // src/lib/compact-output.ts
 var DEFAULT_LIST_LIMIT = 20;
 var MAX_LIST_LIMIT = 100;
@@ -7064,7 +7129,7 @@ function summarizeApplyResult(result) {
 var TOOL_DOCS = {
   list_configs: "List configs. Params: category?, agent?, kind?, search?, limit?, cursor?, verbose?. Defaults to a paged compact envelope without content; use get_config for full content.",
   get_config: "Get a config by id or slug. Returns full config including content.",
-  create_config: "Create a new config. Required: name, content, category. Optional: agent, target_path, outputs, kind, format, tags, description, is_template.",
+  create_config: "Create a new config. Required: name, content, category. Optional: agent, target_path, outputs, kind, format, tags, description, is_template. Refuses when target_path is already tracked by another config (one target path, one row) \u2014 use update_config on the owning row, or delete_config first. kind:'reference' owns no target path and is exempt.",
   update_config: "Update a config by id or slug. Optional: content, name, tags, description, category, agent, target_path, outputs.",
   apply_config: "Apply a config through the shared ownership gate. Params: id_or_slug, dry_run?, verbose?. Returns results plus session-renderer-owned targets that were skipped.",
   sync_directory: "Sync a directory with the DB. Params: dir, direction ('from_disk'|'to_disk'). Returns sync result.",
@@ -7145,14 +7210,24 @@ function buildServer() {
           return ok(c);
         }
         case "create_config": {
+          const kind = args["kind"] || undefined;
+          const targetPath = args["target_path"] || undefined;
+          if (targetPath && kind !== "reference") {
+            const owners = findConfigsByTargetPath(await store.listConfigs(), targetPath);
+            if (owners.length > 0) {
+              const named = owners.map((owner) => `${owner.slug} (${owner.id})`).join(", ");
+              const collision = owners.length > 1 ? ` ${owners.length} rows already collide on this path \u2014 apply order between them is undefined.` : "";
+              return err(`${targetPath} is already tracked by: ${named}.${collision}` + ` Use update_config on that row to refresh it in place, or delete_config first.`);
+            }
+          }
           const c = await store.createConfig({
             name: args["name"],
             content: args["content"],
             category: args["category"],
             agent: args["agent"] || undefined,
-            target_path: args["target_path"] || undefined,
+            target_path: targetPath,
             outputs: args["outputs"],
-            kind: args["kind"] || undefined,
+            kind,
             format: args["format"] || undefined,
             tags: args["tags"] || undefined,
             description: args["description"] || undefined,

package/dist/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AA2EnE,wBAAgB,WAAW,IAAI,MAAM,CA0RpC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AA4EnE,wBAAgB,WAAW,IAAI,MAAM,CAyTpC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/instructions",
-  "version": "0.4.13",
+  "version": "0.4.15",
   "description": "AI coding agent instruction & configuration manager \u2014 store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
   "type": "module",
   "main": "dist/index.js",
@@ -39,7 +39,7 @@
     "dev:mcp": "bun run src/mcp/index.ts",
     "dev:serve": "bun run src/server/index.ts",
     "seed": "bun run scripts/seed.ts",
-    "prepublishOnly": "bun run build",
+    "prepublishOnly": "bun run scripts/check-publish-hold.ts && bun run build",
     "postinstall": "mkdir -p $HOME/.hasna/instructions $HOME/.hasna/instructions/backups 2>/dev/null || true"
   },
   "keywords": [