@leeguoo/wrangler-accounts 1.5.0 → 1.5.1

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "Claude Code plugins for practical developer workflows from the wrangler-accounts author.",
-    "version": "1.5.0"
+    "version": "1.5.1"
   },
   "plugins": [
     {
       "name": "wrangler-accounts",
       "source": "./plugins/wrangler-accounts",
       "description": "Cloudflare Wrangler multi-account skill plus a Bash hook that blocks raw wrangler calls when local profiles are configured.",
-      "version": "1.5.0",
+      "version": "1.5.1",
       "author": {
         "name": "Lee Guo"
       },

package/README.md

@@ -49,6 +49,17 @@ If you explicitly want raw `wrangler`, bypass the hook for that command:
 NOWRANGLER_ACCOUNTS_GUARD=1 wrangler deploy
 ```
 
+### Upgrading from the `skills.sh` install
+
+If you previously installed this skill via `npx skills add leeguooooo/wrangler-accounts`, remove that standalone copy after installing the plugin — otherwise Claude Code's slash command picker shows two identical `/wrangler-accounts` entries (one from the skills.sh directory, one from the plugin):
+
+```bash
+npx skills remove wrangler-accounts
+# or, if the CLI is missing: rm -rf ~/.agents/skills/wrangler-accounts
+```
+
+Then run `/reload-plugins` and confirm only one entry remains.
+
 ## What it does
 
 Every execution runs `wrangler` inside a per-invocation **shadow HOME** — a temporary directory that mirrors most of your real home, except `.wrangler/config/default.toml` is a symlink pointing at the saved profile's config. Token refreshes flow back to the profile automatically. Nothing touches your real `~/.wrangler`. Two parallel invocations get two independent shadow HOMEs.

package/bin/wrangler-accounts.js

@@ -293,9 +293,9 @@ function useProfile(name, configPath, profilesDir, backup) {
   }
 
   const session = readSessionState(profileConfig);
-  if (session.expired) {
+  if (session.effective === 'expired') {
     die(
-      `Profile '${name}' has expired Wrangler OAuth credentials (expiration_time: ${session.expirationTime}). Run 'wrangler-accounts login ${name}' to refresh it.`
+      `Profile '${name}' has expired Wrangler OAuth credentials and no refresh_token to renew them (expiration_time: ${session.expirationTime}). Run 'wrangler-accounts login ${name}' to re-authenticate.`
     );
   }
 
@@ -409,9 +409,9 @@ function main() {
 
     const profileCfg = path.join(profilesDir, resolved.name, "config.toml");
     const session = readSessionState(profileCfg);
-    if (session.expired) {
+    if (session.effective === 'expired') {
       die(
-        `Profile '${resolved.name}' has expired Wrangler OAuth credentials (expiration_time: ${session.expirationTime}). Run 'wrangler-accounts login ${resolved.name}' to refresh it.`,
+        `Profile '${resolved.name}' has expired Wrangler OAuth credentials and no refresh_token to renew them (expiration_time: ${session.expirationTime}). Run 'wrangler-accounts login ${resolved.name}' to re-authenticate.`,
         3
       );
     }
@@ -1075,9 +1075,9 @@ function main() {
 
     const profileCfg = path.join(profilesDir, resolved.name, "config.toml");
     const session = readSessionState(profileCfg);
-    if (session.expired) {
+    if (session.effective === 'expired') {
       die(
-        `Profile '${resolved.name}' has expired Wrangler OAuth credentials. Run 'wrangler-accounts login ${resolved.name}' to refresh it.`,
+        `Profile '${resolved.name}' has expired Wrangler OAuth credentials and no refresh_token to renew them. Run 'wrangler-accounts login ${resolved.name}' to re-authenticate.`,
         3
       );
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leeguoo/wrangler-accounts",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "Cloudflare Wrangler multi-account manager — save, switch, and run wrangler against multiple Cloudflare Workers accounts with AWS-style --profile and per-invocation shadow HOME isolation.",
   "license": "MIT",
   "bin": {

package/plugins/wrangler-accounts/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "wrangler-accounts",
   "description": "Cloudflare Wrangler multi-account helper with a bundled skill and Bash guard hook for Claude Code.",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "author": {
     "name": "Lee Guo"
   },

package/plugins/wrangler-accounts/skills/wrangler-accounts/SKILL.md

@@ -30,6 +30,13 @@ Non-Claude-Code users can keep using the `skills.sh` distribution path for this
 npx skills add leeguooooo/wrangler-accounts -g -y
 ```
 
+If a Claude Code user previously installed via `skills.sh`, removing the standalone copy avoids a duplicate `/wrangler-accounts` entry in the command picker:
+
+```bash
+npx skills remove wrangler-accounts
+# or: rm -rf ~/.agents/skills/wrangler-accounts
+```
+
 ## Prerequisites (check before running any recipe below)
 
 This skill is only documentation — the actual `wrangler-accounts` binary must also be installed on the user's `PATH`. Before running any command below, verify:
@@ -303,9 +310,9 @@ wrangler deploy
 
 ## Troubleshooting
 
-### "Profile 'X' has expired Wrangler OAuth credentials"
+### "Profile 'X' has expired Wrangler OAuth credentials and no refresh_token to renew them"
 
-The saved OAuth access token is past its `expiration_time` and the refresh didn't happen (or Wrangler is older than 4.x). Refresh it interactively:
+The saved OAuth access_token is past its `expiration_time` AND there is no `refresh_token` in the profile config (no `offline_access` scope at login time, or the token was revoked). The profile is genuinely broken; only re-authenticating fixes it:
 
 ```bash
 wrangler-accounts login <name>
@@ -313,6 +320,8 @@ wrangler-accounts login <name>
 
 This overwrites the existing profile with a fresh OAuth session. Any saved metadata (identity, etc.) is re-verified.
 
+**Note:** If you see this error in 1.5.0 or earlier, you may be hitting a known regression: any profile whose access_token had passed expiration was blocked even when a refresh_token was present. Upgrade to 1.5.1+ — `wrangler` itself silently refreshes those tokens on the next call, so wrangler-accounts no longer pre-flights against `expiration_time` alone.
+
 ### "No profile specified. Options: ..."
 
 The user ran `wrangler-accounts <wrangler-args>` without a resolvable profile. Fix one of:

package/skills/wrangler-accounts/SKILL.md

@@ -30,6 +30,13 @@ Non-Claude-Code users can keep using the `skills.sh` distribution path for this
 npx skills add leeguooooo/wrangler-accounts -g -y
 ```
 
+If a Claude Code user previously installed via `skills.sh`, removing the standalone copy avoids a duplicate `/wrangler-accounts` entry in the command picker:
+
+```bash
+npx skills remove wrangler-accounts
+# or: rm -rf ~/.agents/skills/wrangler-accounts
+```
+
 ## Prerequisites (check before running any recipe below)
 
 This skill is only documentation — the actual `wrangler-accounts` binary must also be installed on the user's `PATH`. Before running any command below, verify:
@@ -303,9 +310,9 @@ wrangler deploy
 
 ## Troubleshooting
 
-### "Profile 'X' has expired Wrangler OAuth credentials"
+### "Profile 'X' has expired Wrangler OAuth credentials and no refresh_token to renew them"
 
-The saved OAuth access token is past its `expiration_time` and the refresh didn't happen (or Wrangler is older than 4.x). Refresh it interactively:
+The saved OAuth access_token is past its `expiration_time` AND there is no `refresh_token` in the profile config (no `offline_access` scope at login time, or the token was revoked). The profile is genuinely broken; only re-authenticating fixes it:
 
 ```bash
 wrangler-accounts login <name>
@@ -313,6 +320,8 @@ wrangler-accounts login <name>
 
 This overwrites the existing profile with a fresh OAuth session. Any saved metadata (identity, etc.) is re-verified.
 
+**Note:** If you see this error in 1.5.0 or earlier, you may be hitting a known regression: any profile whose access_token had passed expiration was blocked even when a refresh_token was present. Upgrade to 1.5.1+ — `wrangler` itself silently refreshes those tokens on the next call, so wrangler-accounts no longer pre-flights against `expiration_time` alone.
+
 ### "No profile specified. Options: ..."
 
 The user ran `wrangler-accounts <wrangler-args>` without a resolvable profile. Fix one of: