@hasna/skills 0.10.76 → 0.10.77

package/README.md

@@ -80,7 +80,11 @@ Stations provisioned with a fleet key keep using the internal gateway
 no recorded URL (the Keychain item, `HASNA_SKILLS_API_KEY` alone, or an older
 credentials file) always stays on that gateway and is never sent anywhere else.
 The gateway has no interactive login service, so on such a station
-`skills login` says so, sends nothing, and names the credential to unset first.
+`skills login` says so and sends nothing. A stored gateway credential or vault
+reference is preserved even with `--url`. Use a separate credential profile for
+customer sign-in: `skills --profile skillsmd login`. Later product commands use that
+profile too, for example `skills --profile skillsmd whoami --json`; fleet
+commands keep their original configuration.
 Obtain a workspace API key through your administrator's provisioning process
 and configure it using the [credential resolution](#credentials) below. Check
 the selected identity and available capabilities before syncing:
@@ -3318,6 +3322,6 @@ membership too; an executable digest does not prove dynamic backend behavior or
 native adoption. These captures read files and never launch a native consumer.
 
 
-Codex cache witnesses migrate separately through `skills hook rebind-cache --agent codex`. Preview requires the exact current policy and configuration SHA-256 values. Name each reviewed remote app-only parent with `--app-only-parent`; name each already reviewed native `mcp_tool` parent with `--reviewed-hook-parent`. Hook parents require exact enrolled manifest and hook bytes. When the owning installer created a remote-install receipt, its exact schema, identity and bytes are required. A local marketplace install with no receipt is accepted only when the exact full marketplace source is already enrolled and the unchanged Codex settings enable that exact plugin identity. The complete cache census refuses unknown parents, cache-member aliases, new skills, direct hooks selecting cache inputs, and changed app/MCP/hook/receipt or marketplace capabilities. Reviewed whole Codex root aliases keep their existing identity/CAS guards; hook selection through either the alias or canonical cache path is refused. Commands containing the direct `plugins/cache` selector are conservatively refused, including HOME, tilde and relative spellings; no shell evaluation is performed. App-only bootstrap verifies the old full manifest and receipt sources, then explicitly reviews current app capabilities; it does not claim those app bytes were historically witnessed.
+Codex cache witnesses migrate separately through `skills hook rebind-cache --agent codex`. Preview requires the exact current policy and configuration SHA-256 values. Name each reviewed remote app-only parent with `--app-only-parent`; name each already reviewed native `mcp_tool` parent with `--reviewed-hook-parent`. Hook parents require exact enrolled manifest and hook bytes. When the owning installer created a remote-install receipt, its exact schema, identity and bytes are required. A local marketplace install with no receipt is accepted only when the exact full marketplace source is already enrolled and the unchanged Codex settings enable that exact plugin identity. The complete cache census refuses unknown parents, cache-member aliases, new skills, direct hooks selecting cache inputs, and changed app/MCP/hook/receipt or marketplace capabilities. It also refuses every capability location Codex reads in a plugin version root that the witness does not bind (the Agent Plugins root `plugin.json`, `.claude-plugin` and `.cursor-plugin` manifests, a root `hooks.json`, `commands/` and `agents/` directories, and a skill document not spelled exactly `SKILL.md`), compared without regard to case; the vendor-refresh guard reads the same list. A semantic binding captured by an earlier release is checked against this census at every guard run, so one of these paths makes it refuse until a fresh discovery review. Reviewed whole Codex root aliases keep their existing identity/CAS guards; hook selection through either the alias or canonical cache path is refused. Commands containing the direct `plugins/cache` selector are conservatively refused, including HOME, tilde and relative spellings; no shell evaluation is performed. App-only bootstrap verifies the old full manifest and receipt sources, then explicitly reviews current app capabilities; it does not claim those app bytes were historically witnessed.
 
 Review the returned semantic cache digest, then repeat with `--expected-cache-witness-sha256 <digest> --apply`. The owning apply path preserves/readbacks the original policy, recomputes the whole plan, compares policy/config/cache preimages, writes only the Skills policy, and verifies the resulting consumer. Historical directory hashes and source rows remain retained as provenance; this command cannot reconstruct an unavailable old directory tree or waive an ancestor directory containing unrelated inputs. Equivalent version materializations and inert assets then leave the new Codex-specific witness unchanged. Every other discovery source, directory, settings witness, native control and session pin stays under its existing contract. Settings and cache upgrades remain independent; neither silently repairs drift in the other.

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.76",
+    version: "0.10.77",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -50455,6 +50455,40 @@ var init_codex_settings_witness_v1 = __esm(() => {
   VERBOSITY = new Set(["low", "medium", "high"]);
 });
 
+// src/lib/codex-plugin-capability-paths.ts
+function foldCodexPluginEntryName(name) {
+  return name.toUpperCase().toLowerCase();
+}
+function codexPluginRootCapabilityEntry(name) {
+  const folded = foldCodexPluginEntryName(name);
+  return CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.includes(folded) ? folded : null;
+}
+function isCodexSkillDocumentName(name) {
+  return foldCodexPluginEntryName(name) === "skill.md";
+}
+var CODEX_PLUGIN_MANIFEST_LOCATIONS, CODEX_PLUGIN_MANIFEST_DIRECTORIES, CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES;
+var init_codex_plugin_capability_paths = __esm(() => {
+  CODEX_PLUGIN_MANIFEST_LOCATIONS = Object.freeze([
+    "plugin.json",
+    ".codex-plugin/plugin.json",
+    ".claude-plugin/plugin.json",
+    ".cursor-plugin/plugin.json"
+  ]);
+  CODEX_PLUGIN_MANIFEST_DIRECTORIES = Object.freeze([".codex-plugin", ".claude-plugin", ".cursor-plugin"]);
+  CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES = Object.freeze([
+    "plugin.json",
+    ".codex-plugin",
+    ".claude-plugin",
+    ".cursor-plugin",
+    "hooks",
+    "hooks.json",
+    ".mcp.json",
+    ".app.json",
+    "commands",
+    "agents"
+  ]);
+});
+
 // src/lib/codex-hook-mcp-dependencies.ts
 import { createHash as createHash13 } from "crypto";
 import { basename as basename6, dirname as dirname11, isAbsolute as isAbsolute11, join as join17, resolve as resolve12, sep as sep4 } from "path";
@@ -50599,15 +50633,13 @@ function captureCodexHookMcpDependencies(configPath, reviewed, configText, chang
       }
     };
     const root = join17(cacheRoot, identity3, selectCodexPluginVersion(versions, selectionBudget));
-    const agent = read2(join17(root, "plugin.json"));
+    const [agentPluginManifest, ...legacyManifests] = CODEX_PLUGIN_MANIFEST_LOCATIONS;
+    const agent = read2(join17(root, agentPluginManifest));
     if (agent !== null) {
       const schema = JSON.parse(agent).$schema;
       need5(typeof schema !== "string" || !schema.startsWith("https://agent-plugins.org/schemas/"));
     }
-    const codex = read2(join17(root, ".codex-plugin/plugin.json"));
-    const claude = read2(join17(root, ".claude-plugin/plugin.json"));
-    const cursor = read2(join17(root, ".cursor-plugin/plugin.json"));
-    const text2 = codex ?? claude ?? cursor;
+    const text2 = legacyManifests.map((location) => read2(join17(root, location))).find((value) => value !== null) ?? null;
     if (text2 === null)
       continue;
     const manifest = JSON.parse(text2);
@@ -50629,6 +50661,7 @@ var init_codex_hook_mcp_dependencies = __esm(() => {
   init_claude_settings_witness();
   init_agent_discovery_directories();
   init_agent_discovery_bytes();
+  init_codex_plugin_capability_paths();
   events = new Set(["PreToolUse", "PermissionRequest", "PostToolUse", "PreCompact", "PostCompact", "SessionStart", "SessionEnd", "UserPromptSubmit", "SubagentStart", "SubagentStop", "Stop", "Interrupt"]);
 });
 
@@ -52942,15 +52975,17 @@ function codexVendorConfigCandidates(text2, cache3, options = {}) {
 var CODEX_VENDOR_MARKETPLACES, CODEX_REMOTE_VENDOR_MARKETPLACES, identifier3 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value), record4 = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value)), directory = (path) => {
   const stat2 = lstatSync14(path, { throwIfNoEntry: false });
   return Boolean(stat2?.isDirectory() && !stat2.isSymbolicLink());
-}, OTHER_PLUGIN_CONTROLS, VENDOR_MANIFEST_KEYS, DEFAULT_SKILLS_PATHS, VENDOR_APP_DECLARATION = "./.app.json", MAX_SUBTREE_ENTRIES = 20000, MAX_SUBTREE_DEPTH = 32, hiddenName = (name) => name.startsWith(".") || name === "node_modules", isSkillDocument = (name) => name.toLowerCase() === "skill.md", present = (path) => lstatSync14(path, { throwIfNoEntry: false }) !== undefined, holdsOtherControl = (path) => readdirSync7(path).some((name) => OTHER_PLUGIN_CONTROLS.includes(name.toLowerCase())), MAX_TRAILING_VENDOR_ROWS = 16, MAX_VENDOR_TABLES = 8, MAX_CONFIG_CANDIDATES = 128, HEADER;
+}, OTHER_PLUGIN_CONTROLS, VENDOR_MANIFEST_KEYS, DEFAULT_SKILLS_PATHS, VENDOR_APP_DECLARATION = "./.app.json", MAX_SUBTREE_ENTRIES = 20000, MAX_SUBTREE_DEPTH = 32, hiddenName = (name) => name.startsWith(".") || name === "node_modules", isSkillDocument, present = (path) => lstatSync14(path, { throwIfNoEntry: false }) !== undefined, holdsOtherControl = (path) => readdirSync7(path).some((name) => OTHER_PLUGIN_CONTROLS.includes(codexPluginRootCapabilityEntry(name) ?? "")), MAX_TRAILING_VENDOR_ROWS = 16, MAX_VENDOR_TABLES = 8, MAX_CONFIG_CANDIDATES = 128, HEADER;
 var init_codex_vendor_refresh = __esm(() => {
   init_claude_settings_witness();
   init_codex_plugin_skill_controls();
+  init_codex_plugin_capability_paths();
   CODEX_VENDOR_MARKETPLACES = Object.freeze(["openai-bundled", "openai-curated", "openai-curated-remote"]);
   CODEX_REMOTE_VENDOR_MARKETPLACES = Object.freeze(["openai-curated-remote"]);
-  OTHER_PLUGIN_CONTROLS = Object.freeze(["plugin.json", ".claude-plugin", ".cursor-plugin", "hooks", "hooks.json", ".mcp.json", "commands", "agents"]);
+  OTHER_PLUGIN_CONTROLS = Object.freeze(CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.filter((entry) => entry !== ".codex-plugin" && entry !== ".app.json"));
   VENDOR_MANIFEST_KEYS = Object.freeze(["name", "version", "description", "author", "homepage", "repository", "license", "keywords", "interface", "skills", "apps"]);
   DEFAULT_SKILLS_PATHS = Object.freeze(["./skills", "./skills/"]);
+  isSkillDocument = isCodexSkillDocumentName;
   HEADER = /^[ \t]*(\[\[|\[)[ \t]*([^[\]\r\n]+?)[ \t]*(\]\]|\])[ \t]*(?:#[^\r\n]*)?\r?\n?$/;
 });
 
@@ -54056,6 +54091,10 @@ function skillsFileHasCredential(file) {
     return false;
   return /^\s*(?:export\s+)?(?:HASNA_SKILLS_API_KEY|SKILLS_API_KEY|HASNA_SKILLS_API_KEY_REF)\s*=\s*\S/m.test(text2);
 }
+function skillsFileHasVaultReference(file) {
+  const text2 = readMetadataText(file);
+  return text2 !== null && /^\s*(?:export\s+)?HASNA_SKILLS_API_KEY_REF\s*=\s*\S/m.test(text2);
+}
 var SKILLS_BOUND_API_URL = "HASNA_SKILLS_BOUND_API_URL";
 var init_instance_credentials = __esm(() => {
   init_transport();
@@ -54090,6 +54129,25 @@ var init_local_opt_in = __esm(() => {
 // src/lib/product-default.ts
 var SKILLS_PRODUCT_DEFAULT_ORIGIN = "https://skills.md";
 
+// src/lib/credential-profile-command.ts
+function skillsShellArgument(value) {
+  return /^[A-Za-z0-9._:/-]+$/.test(value) ? value : `'${value.replace(/'/g, "'\\''")}'`;
+}
+function skillsApiUrlEnvironment(origin) {
+  return urlKeys.map((name) => `${name}=${skillsShellArgument(origin)}`).join(" ");
+}
+function skillsProfileCommand(command, env3 = process.env, origin) {
+  const profile = selectedSkillsProfile(env3);
+  const prefix = origin && urlKeys.some((name) => env3[name]?.trim()) ? `${skillsApiUrlEnvironment(origin)} ` : "";
+  return `${prefix}skills${profile ? ` --profile ${profile}` : ""} ${command}`;
+}
+var urlKeys;
+var init_credential_profile_command = __esm(() => {
+  init_instance_credentials();
+  init_transport();
+  urlKeys = clientTransportEnvKeys("skills").apiUrlKeys;
+});
+
 // src/lib/fleet-credentials.ts
 var exports_fleet_credentials = {};
 __export(exports_fleet_credentials, {
@@ -54114,6 +54172,8 @@ __export(exports_fleet_credentials, {
   gatewaySignInRefusal: () => gatewaySignInRefusal,
   credentialPairing: () => credentialPairing,
   configuredSkillsApiUrl: () => configuredSkillsApiUrl,
+  captureSkillsSignInTarget: () => captureSkillsSignInTarget,
+  assertSkillsSignInCredentialReplaceable: () => assertSkillsSignInCredentialReplaceable,
   SkillsFleetCredentialError: () => SkillsFleetCredentialError,
   SKILLS_LOCAL_OPT_IN_ENV_KEYS: () => SKILLS_LOCAL_OPT_IN_ENV_KEYS,
   SKILLS_CREDENTIAL_TIERS: () => SKILLS_CREDENTIAL_TIERS,
@@ -54419,8 +54479,24 @@ function gatewaySignInRefusal(target) {
   if (normalizeSkillsApiOrigin(target.origin) !== normalizeSkillsApiOrigin(defaultFleetGatewayBaseUrl(SKILLS_APP)))
     return null;
   const cause = target.credentialSource ? `${target.credentialSource} holds a Skills credential for the internal gateway` : target.source === "--url" ? "--url names the internal gateway" : `${target.source} selects the internal gateway`;
-  const unset2 = target.credentialSource ?? (target.source === "--url" ? null : target.source);
-  return new SkillsFleetCredentialError(`${cause}, which has no sign-in service. Nothing was sent.` + (unset2 ? ` To sign in to the default server instead, first unset ${unset2} (or remove it from where it is stored), then run: skills login.` : ""), "GATEWAY_AUTH_UNAVAILABLE", unset2 ? [`unset ${unset2}`, "skills login"] : undefined);
+  const command = (SKILLS_API_URL_ENV_KEYS.includes(target.source) ? `${skillsApiUrlEnvironment(SKILLS_PRODUCT_DEFAULT_ORIGIN)} ` : "") + "skills --profile <new-profile> login";
+  return new SkillsFleetCredentialError(`${cause}, which has no sign-in service. Nothing was sent. ` + `Keep the fleet configuration and use a separate profile for product sign-in: ${command}.`, "GATEWAY_AUTH_UNAVAILABLE", [command]);
+}
+function assertSkillsSignInCredentialReplaceable(env3 = process.env, profile) {
+  const files = skillsProfileCredentialFiles(env3, profile);
+  const verifyUnchanged = captureSkillsCredentialFiles(files);
+  const gateway = normalizeSkillsApiOrigin(defaultFleetGatewayBaseUrl(SKILLS_APP));
+  const command = (SKILLS_API_URL_ENV_KEYS.some((name) => env3[name]?.trim()) ? `${skillsApiUrlEnvironment(SKILLS_PRODUCT_DEFAULT_ORIGIN)} ` : "") + "skills --profile <new-profile> login";
+  for (const file of files) {
+    if (!skillsFileHasCredential(file))
+      continue;
+    const metadata = readSkillsInstanceMetadata(file);
+    const instance = metadata.binding ?? metadata.apiUrl;
+    if (skillsFileHasVaultReference(file) || !instance || normalizeSkillsApiOrigin(instance) === gateway) {
+      throw new SkillsFleetCredentialError("The selected profile contains a protected fleet credential or vault reference. Nothing was sent or changed. " + `Use a separate profile for product sign-in: ${command}.`, "STORED_CREDENTIAL_PROTECTED", [command]);
+    }
+  }
+  verifyUnchanged();
 }
 function explicitSignInOrigin(url) {
   if (!url.trim() || /[\x00-\x1f\x7f]/.test(url)) {
@@ -54448,13 +54524,15 @@ function resolveSkillsSignInOrigin(env3 = process.env, options = {}, explicitUrl
     const snapshot = snapshotSkillsEnvironment(env3);
     const resolvedOptions = snapshotSkillsOptions(env3, options);
     const profile = resolvedOptions.credentials?.profile;
+    assertSkillsSignInCredentialReplaceable(snapshot, profile);
     const configured = configuredSkillsApiUrl(snapshot, resolvedOptions.credentials?.keychain, profile);
     const declared = configured && configured.source !== "default" ? configured : null;
     if (explicitUrl !== undefined) {
       const origin = explicitSignInOrigin(explicitUrl);
       const storedHere = declared ? skillsProfileCredentialFiles(snapshot, profile).includes(declared.source) : false;
       if (declared && !storedHere && normalizeSkillsApiOrigin(declared.value) !== origin) {
-        throw new SkillsFleetCredentialError(`--url ${origin} conflicts with ${declared.source}, which outranks the saved configuration and would ` + `shadow the key this sign-in stores. Unset ${declared.source} or pass the same URL.`, "INVALID_API_URL");
+        const command = `${skillsApiUrlEnvironment(origin)} skills --profile <new-profile> login`;
+        throw new SkillsFleetCredentialError(`--url ${origin} conflicts with ${declared.source}, which outranks the saved configuration and would ` + `shadow the key this sign-in stores. Keep the existing configuration and use a separate process and profile: ${command}.`, "INVALID_API_URL", [command]);
       }
       return { origin, source: "--url" };
     }
@@ -54486,6 +54564,14 @@ function resolveSkillsSignInOrigin(env3 = process.env, options = {}, explicitUrl
     throw error;
   }
 }
+function captureSkillsSignInTarget(env3 = process.env, options = {}, explicitUrl) {
+  const snapshot = snapshotSkillsEnvironment(env3);
+  const profile = options.credentials?.profile ?? selectedCliSkillsCredentialProfile();
+  const unchanged2 = captureSkillsCredentialFiles(skillsProfileCredentialFiles(snapshot, profile));
+  const target = resolveSkillsSignInOrigin(env3, options, explicitUrl);
+  unchanged2();
+  return { ...target, unchanged: unchanged2 };
+}
 function requireSkillsFleet(action = "This command", env3 = process.env, options = {}) {
   const fleet = resolveSkillsFleet(env3, options);
   if (fleet.mode === "hosted")
@@ -54497,6 +54583,7 @@ var init_fleet_credentials = __esm(() => {
   init_transport();
   init_instance_credentials();
   init_local_opt_in();
+  init_credential_profile_command();
   init_local_opt_in();
   ENV_KEYS = clientTransportEnvKeys(SKILLS_APP);
   SKILLS_API_URL_ENV_KEYS = ENV_KEYS.apiUrlKeys;
@@ -56074,14 +56161,23 @@ function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files,
       continue;
     const parent = join28(cacheRoot, parts[0], parts[1]);
     const root = join28(parent, parts[2]);
-    const base2 = parts[parts.length - 1];
-    if (parts.includes(".codex-plugin") && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base2 !== ".codex-plugin" : parts.length !== 5 || base2 !== "plugin.json")))
+    const base2 = parts[parts.length - 1], folded = foldCodexPluginEntryName(base2);
+    if (parts.length === 3 && (codexPluginRootCapabilityEntry(base2) !== null || isCodexSkillDocumentName(base2)))
+      refuse4();
+    const rootEntry = parts.length >= 4 ? codexPluginRootCapabilityEntry(parts[3]) : null;
+    if (rootEntry !== null && rootEntry !== parts[3])
+      refuse4();
+    if (rootEntry !== null && !SEMANTIC_BOUND_ROOT_ENTRIES.includes(rootEntry))
       refuse4();
-    if ([".app.json", ".mcp.json"].includes(base2) && (parts.length !== 4 || dirname18(member) !== root))
+    if (isCodexSkillDocumentName(base2) && base2 !== "SKILL.md")
       refuse4();
-    if ([".app.json", ".mcp.json"].includes(base2) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+    if (parts.some((part) => CODEX_PLUGIN_MANIFEST_DIRECTORIES.includes(foldCodexPluginEntryName(part))) && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base2 !== ".codex-plugin" : parts.length !== 5 || base2 !== "plugin.json")))
       refuse4();
-    if ((parts[3] === "hooks" || base2 === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base2 !== "hooks" : base2 !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join28(cacheRoot, parts[0], parts[1]))))
+    if ([".app.json", ".mcp.json"].includes(folded) && (parts.length !== 4 || dirname18(member) !== root))
+      refuse4();
+    if ([".app.json", ".mcp.json"].includes(folded) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+      refuse4();
+    if ((rootEntry === "hooks" || folded === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base2 !== "hooks" : base2 !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join28(cacheRoot, parts[0], parts[1]))))
       refuse4();
   }
 }
@@ -56303,13 +56399,15 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
   if (hash2(priorProjection) !== previous.sha256 || hash2(currentProjection) !== current.sha256 || canonical8(comparable(priorProjection)) !== canonical8(comparable(currentProjection)))
     refuse4();
 }
-var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1", identifier5 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value), digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), refuse4 = () => {
+var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1", SEMANTIC_BOUND_ROOT_ENTRIES, identifier5 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value), digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), refuse4 = () => {
   throw new Error("CODEX_SEMANTIC_CACHE_WITNESS_UNSUPPORTED: review Codex plugin cache identity and controls");
 }, MAX_DOCUMENT_BYTES, MAX_RECEIPT_BYTES, codexHookEvents;
 var init_codex_semantic_cache_witness = __esm(() => {
   init_claude_settings_witness();
   init_codex_plugin_skill_controls();
   init_codex_native_skill_catalog();
+  init_codex_plugin_capability_paths();
+  SEMANTIC_BOUND_ROOT_ENTRIES = Object.freeze([".codex-plugin", ".app.json", ".mcp.json", "hooks"]);
   MAX_DOCUMENT_BYTES = 1024 * 1024;
   MAX_RECEIPT_BYTES = 16 * 1024;
   codexHookEvents = new Set([
@@ -66250,7 +66348,8 @@ function getAuthConfig(env3 = process.env, options = {}) {
     return null;
   return { apiKey: fleet.apiKey, ...readIdentity(env3) };
 }
-function writeCredentialValues(values2, env3 = process.env) {
+function writeCredentialValues(values2, env3 = process.env, beforeWrite) {
+  beforeWrite?.();
   const file = skillsCredentialFilePath(env3);
   mkdirSync14(dirname29(file), { recursive: true, mode: 448 });
   const lines = [];
@@ -66279,9 +66378,16 @@ function writeCredentialValues(values2, env3 = process.env) {
 `) + `
 `;
   const temp = `${file}.tmp-${process.pid}`;
-  writeFileSync11(temp, body, { mode: 384 });
-  chmodSync2(temp, 384);
-  renameSync8(temp, file);
+  writeFileSync11(temp, body, { mode: 384, flag: "wx" });
+  try {
+    chmodSync2(temp, 384);
+    beforeWrite?.();
+    renameSync8(temp, file);
+  } finally {
+    try {
+      unlinkSync6(temp);
+    } catch {}
+  }
   return file;
 }
 function readCredentialValue(key2, env3 = process.env) {
@@ -66325,7 +66431,14 @@ function safeOrigin(url) {
     return null;
   }
 }
-function saveAuthConfig(config, env3 = process.env, authenticatedOrigin, issuedBy) {
+function saveAuthConfig(config, env3 = process.env, authenticatedOrigin, issuedBy, assertUnchanged) {
+  const unchanged3 = assertUnchanged ?? captureSkillsCredentialFiles(skillsProfileCredentialFiles(env3));
+  const beforeWrite = () => {
+    unchanged3();
+    if (issuedBy)
+      assertSkillsSignInCredentialReplaceable(env3);
+  };
+  beforeWrite();
   const apiKey = config.apiKey.trim();
   if (!apiKey)
     throw new Error("Refusing to store an empty Skills API key.");
@@ -66337,7 +66450,7 @@ function saveAuthConfig(config, env3 = process.env, authenticatedOrigin, issuedB
   const previous = readIdentityRecord(env3);
   const loginWroteBefore = previous?.urlWrittenBy === "login" && typeof previous.apiUrl === "string" && safeOrigin(previous.apiUrl) === apiUrl;
   const urlWrittenByLogin = issuedBy !== undefined && (!previousUrl || safeOrigin(previousUrl) !== apiUrl || loginWroteBefore);
-  const file = writeCredentialValues({ SKILLS_API_KEY: null, SKILLS_API_URL: null, [SKILLS_API_KEY_REF]: null, [SKILLS_API_KEY_ENV]: apiKey, [SKILLS_BOUND_API_URL]: apiUrl, [SKILLS_API_URL_ENV]: apiUrl }, env3);
+  const file = writeCredentialValues({ SKILLS_API_KEY: null, SKILLS_API_URL: null, [SKILLS_API_KEY_REF]: null, [SKILLS_API_KEY_ENV]: apiKey, [SKILLS_BOUND_API_URL]: apiUrl, [SKILLS_API_URL_ENV]: apiUrl }, env3, beforeWrite);
   const identity6 = {};
   for (const field3 of ["email", "orgId", "orgSlug", "userId"]) {
     const value = config[field3];
@@ -88497,7 +88610,10 @@ function clearPendingDeviceSignIn(env3 = process.env, origin) {
     }
   }
 }
-async function persistSignIn(result2, origin, env3 = process.env, issuedBy = "sign-in") {
+async function persistSignIn(result2, origin, env3 = process.env, issuedBy = "sign-in", assertUnchanged) {
+  const unchanged3 = assertUnchanged ?? captureSkillsCredentialFiles(skillsProfileCredentialFiles(env3));
+  unchanged3();
+  assertSkillsSignInCredentialReplaceable(env3);
   let apiKey = typeof result2.apiKey === "string" && result2.apiKey.trim() ? result2.apiKey : undefined;
   if (!apiKey && typeof result2.token === "string" && result2.token) {
     const created = await new RemoteSkillsAuthClient(origin).request("/api/auth/keys", {
@@ -88515,7 +88631,7 @@ async function persistSignIn(result2, origin, env3 = process.env, issuedBy = "si
     ...boundedText(result2.organization?.id) ? { orgId: result2.organization.id } : {},
     ...boundedText(result2.organization?.slug) ? { orgSlug: result2.organization.slug } : {},
     ...boundedText(result2.user?.id) ? { userId: result2.user.id } : {}
-  }, env3, origin, issuedBy);
+  }, env3, origin, issuedBy, unchanged3);
 }
 function manualRevocationHint(origin) {
   if (origin === SKILLS_PRODUCT_DEFAULT_ORIGIN) {
@@ -111493,6 +111609,7 @@ async function prepareWorkspaceEnrollment(membershipId, source = process.env) {
   const env3 = { ...source }, profile = selectedSkillsProfile(env3);
   if (!profile)
     return fail4("Workspace login requires an explicit HASNA_PROFILE name.");
+  assertSkillsSignInCredentialReplaceable(env3);
   if (["HASNA_SKILLS_API_KEY_OVERRIDE", "HASNA_SKILLS_API_KEY_REF", "HASNA_SKILLS_API_KEY", "SKILLS_API_KEY"].some((name) => env3[name]?.trim()))
     return fail4("Clear injected API keys before enrolling a named workspace profile.");
   const origin = getApiUrl("Sign in to a workspace", env3);
@@ -124513,6 +124630,14 @@ async function codeFor(client2, options) {
   return promptCode();
 }
 function errorResult(error61, json3) {
+  if (error61 instanceof SkillsFleetCredentialError) {
+    if (json3)
+      console.log(JSON.stringify({ error: error61.message, code: error61.code, next: error61.next }));
+    else
+      console.error(error61.message);
+    process.exitCode = 1;
+    return;
+  }
   const message = error61 instanceof NameInputError || error61 instanceof WorkspaceProfileError ? error61.message : "Unable to complete workspace sign-in. Check the selected server, profile, account and fresh verification code.";
   if (json3)
     console.log(JSON.stringify({ error: message }));
@@ -124566,6 +124691,7 @@ One workspace key saved. Use HASNA_PROFILE=${result2.profile} for subsequent com
 }
 var init_workspace_selection = __esm(() => {
   init_auth_store();
+  init_fleet_credentials();
   init_remote_auth();
   init_workspace_profile();
   init_customer_verification();
@@ -124711,7 +124837,7 @@ function printWhoami(payload) {
 }
 function signInTarget(url2, json3) {
   try {
-    const target = resolveSkillsSignInOrigin(process.env, {}, url2);
+    const target = captureSkillsSignInTarget(process.env, {}, url2);
     const refusal3 = gatewaySignInRefusal(target);
     if (refusal3)
       throw refusal3;
@@ -124722,7 +124848,10 @@ function signInTarget(url2, json3) {
   }
 }
 function targetFlag(target) {
-  return target.source === "--url" ? ` --url ${target.origin}` : "";
+  return target.source === "--url" ? ` --url ${skillsShellArgument(target.origin)}` : "";
+}
+function skillsCommand(command, target) {
+  return skillsProfileCommand(command, process.env, target.origin);
 }
 async function finishSignIn(result2, target, json3) {
   const email5 = result2.user?.email;
@@ -124734,7 +124863,7 @@ async function finishSignIn(result2, target, json3) {
       ...organization2 ? { organization: organization2 } : {},
       ...result2.firstLogin !== undefined ? { firstLogin: result2.firstLogin } : {},
       apiUrl: target.origin,
-      next: ["skills setup agents"]
+      next: [skillsCommand("setup agents", target)]
     }));
     return;
   }
@@ -124744,20 +124873,20 @@ async function finishSignIn(result2, target, json3) {
     console.log(source_default.dim(`  Organization: ${result2.organization.name}`));
   console.log(source_default.dim(`  Server: ${target.origin}`));
   console.log(source_default.dim(`  API key saved to ${getAuthFilePath()}`));
-  await offerAgentSetup();
+  await offerAgentSetup(target);
 }
-async function offerAgentSetup() {
+async function offerAgentSetup(target) {
   const before2 = process.exitCode;
   const answer = await prompt(`
-Register Skills with your coding agents now (skills setup agents)? [Y/n] `);
+Register Skills with your coding agents now (${skillsCommand("setup agents", target)})? [Y/n] `);
   if (answer === null) {
     process.exitCode = before2 ?? 0;
     console.log(source_default.dim(`
-Skipped. Run it any time: skills setup agents`));
+Skipped. Run it any time: ${skillsCommand("setup agents", target)}`));
     return;
   }
   if (answer !== "" && !/^y(es)?$/i.test(answer)) {
-    console.log(source_default.dim("Skipped. Run it any time: skills setup agents"));
+    console.log(source_default.dim(`Skipped. Run it any time: ${skillsCommand("setup agents", target)}`));
     return;
   }
   const { handleMcp: handleMcp2 } = await Promise.resolve().then(() => (init_runtime_mcp(), exports_runtime_mcp));
@@ -124834,7 +124963,7 @@ async function doLogin(email5, code2, json3, target) {
     if (!json3)
       console.log(source_default.green("\u2713 Code sent to " + email5));
     if (json3 || !isTTY || !process.stderr.isTTY) {
-      console.log(JSON.stringify({ status: "code_sent", email: email5, message: `Supply the fresh six-digit code on stdin to: skills login --email ${email5} --code-stdin${targetFlag(target)}` }));
+      console.log(JSON.stringify({ status: "code_sent", email: email5, message: `Supply the fresh six-digit code on stdin to: ${skillsCommand("login", target)} --email ${skillsShellArgument(email5)} --code-stdin${targetFlag(target)}` }));
       return;
     }
     const answer = await promptCode();
@@ -124844,6 +124973,7 @@ async function doLogin(email5, code2, json3, target) {
   }
   let verifyRes;
   try {
+    target.unchanged?.();
     verifyRes = await apiRequest("/api/auth/verify", {
       method: "POST",
       body: JSON.stringify({ email: email5, code: code2 })
@@ -124857,7 +124987,7 @@ async function doLogin(email5, code2, json3, target) {
     return;
   }
   try {
-    await persistSignIn(verifyRes, origin, env3, "sign-in");
+    await persistSignIn(verifyRes, origin, env3, "sign-in", target.unchanged);
   } catch (err) {
     writeCommandError(err, "Login succeeded but API key creation failed", json3);
     return;
@@ -124886,6 +125016,7 @@ async function doApiKeyLogin(apiKey, json3, target) {
   }
   let whoami;
   try {
+    target.unchanged?.();
     whoami = await apiRequest("/api/auth/whoami", {
       headers: { Authorization: `Bearer ${trimmed}` }
     }, origin);
@@ -124898,20 +125029,25 @@ async function doApiKeyLogin(apiKey, json3, target) {
   const orgId = stringField2(identity6.orgId);
   const orgSlug = stringField2(identity6.organization);
   const userId = stringField2(identity6.userId);
-  saveAuthConfig({
-    apiKey: trimmed,
-    ...email5 ? { email: email5 } : {},
-    ...orgId ? { orgId } : {},
-    ...orgSlug ? { orgSlug } : {},
-    ...userId ? { userId } : {}
-  }, env3, origin, "api-key");
+  try {
+    saveAuthConfig({
+      apiKey: trimmed,
+      ...email5 ? { email: email5 } : {},
+      ...orgId ? { orgId } : {},
+      ...orgSlug ? { orgSlug } : {},
+      ...userId ? { userId } : {}
+    }, env3, origin, "api-key", target.unchanged);
+  } catch (error61) {
+    writeCommandError(error61, "API key verified but the selected profile changed", json3);
+    return;
+  }
   if (json3 || !isTTY) {
-    console.log(JSON.stringify({ ...identity6, status: "authenticated", apiUrl: origin, next: ["skills setup agents"] }, null, 2));
+    console.log(JSON.stringify({ ...identity6, status: "authenticated", apiUrl: origin, next: [skillsCommand("setup agents", target)] }, null, 2));
     return;
   }
   printWhoami(identity6);
   console.log(source_default.dim(`Server: ${origin}`));
-  await offerAgentSetup();
+  await offerAgentSetup(target);
 }
 function printDeviceCode(session, resumed, write) {
   write(source_default.bold(resumed ? `
@@ -124932,12 +125068,12 @@ async function doDeviceLogin(options, target) {
   const origin = target.origin;
   const json3 = Boolean(options.json);
   const interactive = Boolean(isTTY && !json3);
-  const next = `skills login --poll${targetFlag(target)}`;
+  const next = `${skillsCommand("login", target)} --poll${targetFlag(target)}`;
   let session = options.poll ? loadPendingDeviceSignIn(origin, env3) : null;
   if (options.poll && !session) {
     const others = pendingDeviceSignInOrigins(env3).filter((other) => other !== origin);
     if (others.length > 0) {
-      writeCommandError(new Error(`No pending sign-in for ${origin}. Pending: ${others.map((other) => `skills login --poll --url ${other}`).join("; ")}`), "No pending sign-in", json3);
+      writeCommandError(new Error(`No pending sign-in for ${origin}. Pending: ${others.map((other) => `${skillsProfileCommand("login", process.env, other)} --poll --url ${skillsShellArgument(other)}`).join("; ")}`), "No pending sign-in", json3);
       return;
     }
   }
@@ -124988,7 +125124,10 @@ Waiting for authentication...`));
   try {
     const deviceCode = session.deviceCode;
     outcome = await pollDeviceAuthorization({
-      poll: () => pollDeviceToken(origin, deviceCode),
+      poll: () => {
+        target.unchanged?.();
+        return pollDeviceToken(origin, deviceCode);
+      },
       intervalSeconds: session.interval,
       deadline: Math.min(Date.now() + timeoutMs, session.expiresAt),
       onSlowDown: (intervalMs) => {
@@ -125002,8 +125141,8 @@ Waiting for authentication...`));
   }
   if (outcome.status !== "authorized") {
     const ended = {
-      expired: "The sign-in code expired before it was approved. Start again: skills login",
-      invalid: "The server no longer recognises this sign-in code. Start again: skills login",
+      expired: `The sign-in code expired before it was approved. Start again: ${skillsCommand("login", target)}${targetFlag(target)}`,
+      invalid: `The server no longer recognises this sign-in code. Start again: ${skillsCommand("login", target)}${targetFlag(target)}`,
       denied: "Sign-in was denied in the browser.",
       timeout: `Device login timed out before browser authentication completed. Resume with: ${next}`,
       cancelled: "Sign-in cancelled."
@@ -125019,7 +125158,7 @@ Waiting for authentication...`));
     return;
   }
   try {
-    await persistSignIn(outcome.result, origin, env3, "sign-in");
+    await persistSignIn(outcome.result, origin, env3, "sign-in", target.unchanged);
   } catch (err) {
     writeCommandError(err, "Login succeeded but API key creation failed", json3);
     return;
@@ -125271,6 +125410,7 @@ var init_auth = __esm(() => {
   init_auth_store();
   init_fleet_credentials();
   init_remote_client();
+  init_credential_profile_command();
   init_sign_in();
   init_remote_auth();
   isTTY = process.stdin.isTTY && process.stdout.isTTY;
@@ -133962,6 +134102,7 @@ function InstallProgress({
 // src/cli/components/AccountView.tsx
 var import_react29 = __toESM(require_react(), 1);
 init_fleet_credentials();
+init_credential_profile_command();
 init_sign_in();
 var jsx_dev_runtime6 = __toESM(require_jsx_dev_runtime(), 1);
 var SLASH_COMMANDS = [
@@ -134021,7 +134162,7 @@ function AccountView({ action, argument, onDone }) {
         });
         return;
       }
-      const target = resolveSkillsSignInOrigin(process.env, {}, argument);
+      const target = captureSkillsSignInTarget(process.env, {}, argument);
       const refusal3 = gatewaySignInRefusal(target);
       if (refusal3)
         throw refusal3;
@@ -134032,13 +134173,16 @@ function AccountView({ action, argument, onDone }) {
       update2({ kind: "waiting", userCode: start.userCode, url: url2, origin: target.origin });
       openVerificationPage(url2, target.origin);
       const outcome = await pollDeviceAuthorization({
-        poll: () => pollDeviceToken(target.origin, start.deviceCode),
+        poll: () => {
+          target.unchanged?.();
+          return pollDeviceToken(target.origin, start.deviceCode);
+        },
         intervalSeconds: start.interval,
         deadline: Date.now() + start.expiresIn * 1000,
         signal: controller.signal
       });
       if (outcome.status === "authorized") {
-        await persistSignIn(outcome.result, target.origin);
+        await persistSignIn(outcome.result, target.origin, process.env, "sign-in", target.unchanged);
         const email4 = outcome.result.user?.email;
         update2({
           kind: "done",
@@ -134046,16 +134190,17 @@ function AccountView({ action, argument, onDone }) {
           lines: [
             { text: email4 ? `Signed in as ${email4}` : "Signed in", tone: "good" },
             { text: `Server: ${target.origin}`, tone: "dim" },
-            { text: "Register Skills with your agents from a shell: skills setup agents", tone: "dim" }
+            { text: `Register Skills with your agents from a shell: ${skillsProfileCommand("setup agents", process.env, target.origin)}`, tone: "dim" }
           ]
         });
         return;
       }
+      const retry = argument !== undefined ? `/login ${target.origin}` : "/login";
       const ended = {
-        expired: "The sign-in code expired before it was approved. Type /login to start again.",
-        invalid: "The server no longer recognises this sign-in code. Type /login to start again.",
+        expired: `The sign-in code expired before it was approved. Type ${retry} to start again.`,
+        invalid: `The server no longer recognises this sign-in code. Type ${retry} to start again.`,
         denied: "Sign-in was denied in the browser.",
-        timeout: "Sign-in timed out. Type /login to start again.",
+        timeout: `Sign-in timed out. Type ${retry} to start again.`,
         cancelled: "Sign-in cancelled."
       }[outcome.status];
       update2({ kind: "done", changed: false, lines: [{ text: ended, tone: "bad" }] });