botanary-mcp 0.9.2 → 0.9.4

package/README.md

@@ -36,7 +36,7 @@ advertised tool list changes" further down.
 |---|---|
 | `diagnose` | START HERE when anything is unclear or an action failed. Single call answers: who is this agent bound to, is the account funded on the grant's chain, is that chain usable, and what - ranked - is blocking the next action. Read-only: never signs or mutates. |
 | `get_identity` | Reports this agent's address/public key/fingerprint. Generates the key on first call. No network call. |
-| `get_pairing_code` / `regenerate_pairing_code` | Shows (or rotates) the short code the owner types into "Connected agents". No network call. |
+| `get_pairing_code` / `regenerate_pairing_code` | Shows (or rotates) the short code the owner enters under "Connected agents", registers it with the backend so their claim can find it, and **opens their browser** on that screen with the code already filled in - once per code, and never for a code the backend could not register. `open: false` suppresses the browser; `wait: false` returns the code without blocking on the claim. |
 | `pair` | Signs the pairing code and submits the proof to `POST /agents/pair`. |
 | `whoami` | Calls `GET /agents/me` - this agent's own identity, account, and live grant (or an honest `grant: null`). |
 | `get_balance` | Calls `GET /balance` under this agent's session. |
@@ -384,6 +384,28 @@ This is the product's own promise (Flow 7c/7d), and every tool in this package e
   on-chain. A bug or a lie in what any of them reports changes nothing about what this agent can
   actually get away with.
 
+## Pairing opens a browser, and why that is not a new power
+
+`get_pairing_code` launches the owner's default browser on `<app>/agents?pair=<code>`, the same way
+`wallet_login`, `wallet_send` and `wallet_sign_request` already launch one on the URL they need the
+owner to visit. Pairing was the odd one out: it returned a URL and left the person who had never used
+this package before to click or copy-paste it out of a tool result.
+
+Three limits keep that from being a way to point someone's browser somewhere:
+
+- **The URL is not model-controlled.** It is the configured API origin (`BOTANARY_API_URL`, mapped to
+  the app origin by `deriveAppOrigin`) plus a locally minted code. Nothing a model saw, said or was
+  told reaches it.
+- **`openBrowser` refuses anything that is not a parseable absolute `http(s)` URL, and never involves a
+  shell** - it passes the URL as a single `execFile` argv element. That check is why a mistyped or
+  hostile `BOTANARY_API_URL` cannot turn a deep link into a command.
+- **A code the backend never acknowledged opens nothing.** Registration fails soft, and a window onto a
+  form that will reject the code stages a failure rather than a pairing.
+
+It also opens **once per code**. `get_pairing_code` is deliberately idempotent - the same code comes
+back until it expires - so a repeated call is the normal case, not a mistake, and each one must not add
+another identical tab.
+
 ## Why intercepting the pairing code alone grants nothing
 
 The short code this server shows (`get_pairing_code`) is built from two parts, and **neither one is a
@@ -550,6 +572,74 @@ same reasoning as `botanary-fe/tests/api/schema-drift.test.ts`.
 ever in use) live - defaults to `~/.botanary-mcp`. It exists mainly for tests and for running this
 server inside a container with an isolated home; a normal install never needs to set it.
 
+**Do not reach for it to separate two coding tools.** It moves the metadata file but NOT the keychain
+item, which is keyed by name (`identity/backends/types.ts`) - so a second home used to mint a fresh
+keypair and save it with `security add-generic-password -U`, overwriting the first one's private key in
+place. Use a profile instead; it moves both.
+
+## Profiles - one identity per agent, not one per machine
+
+Every coding tool that connects to this server gets its own keypair, its own `ConnectedAgent` row on the
+backend, its own mandate and its own revoke button. Before profiles they all shared one address, so the
+backend could not tell Claude Code from Codex even in principle, and disconnecting one disconnected all
+of them.
+
+A profile is resolved once, at the MCP `initialize` handshake:
+
+| Precedence | Source | Result |
+|---|---|---|
+| 1 | `BOTANARY_AGENT_PROFILE` | that agent name, under the reporting tool |
+| 2 | a pre-profiles `~/.botanary-mcp/identity.json` exists | `default` - the identity this machine already has |
+| 3 | the MCP `clientInfo.name` the client sent | one identity per tool, with no configuration |
+| 4 | nothing | `default` |
+
+Storage follows the resolved key. `default` is byte-identical to what shipped before profiles:
+
+```
+~/.botanary-mcp/identity.json                       profile "default"
+~/.botanary-mcp/profiles/codex/identity.json        profile "codex"
+
+keychain  botanary-mcp / agent-identity                    profile "default"
+keychain  botanary-mcp / agent-identity:codex
+keychain  botanary-mcp / agent-identity:claude-code.trading
+keychain  botanary-mcp / wallet-session                    ONE, shared by every profile
+```
+
+**Step 2 outranks step 3, and that is the whole upgrade story.** A machine that already paired has a
+`ConnectedAgent` on the backend and possibly a live on-chain grant naming its address as
+`delegateeAddress`. Auto-deriving a fresh identity would leave that grant pointing at an address no key
+on the machine can sign for - real, dead, and with no error to explain it. So an existing install stays
+exactly where it is, and splitting it is opt-in.
+
+**Several agents per tool** is just several profiles. The tool half comes from `clientInfo`, the agent
+half from the env, so the same name under two tools is two different identities:
+
+```jsonc
+// botanary-be/.mcp.json  - this repo's Claude Code gets its own agent
+"env": { "BOTANARY_AGENT_PROFILE": "trading" }   // -> claude-code.trading
+```
+
+Each distinct profile is a fresh address, so it needs its own pairing once. That is the cost, and it is
+the point: the owner authorizes each one deliberately.
+
+### What a profile is worth, and what it is not
+
+- **Cryptographic:** Codex's grant cannot be spent by Claude Code's key. Different private key, different
+  address, and `MandateExecutor` is bound to the delegatee. This holds even against a fully compromised
+  backend.
+- **Server-enforced:** a disabled agent cannot mint a session, and disabling revokes its live tokens.
+  The client cannot bypass it, because the token comes from the server.
+- **NOT enforced, and not enforceable:** which local process may read which key. The OS keychain is
+  per-user, not per-binary - any process that can run `security find-generic-password` can read every
+  item this package stores. That is no worse than before (a hostile local process already had the one
+  shared identity), but it means the tool an agent reports is **hygiene and honest bookkeeping, never a
+  security boundary.** `clientInfo` is self-reported; it selects which local key to load and nothing
+  more, and the app renders it as a quoted claim for that reason.
+
+`get_identity` and `diagnose` both report the resolved profile and where it came from, so "which
+identity is this process using, and why" never has to be reverse-engineered from which keychain item
+happens to exist.
+
 ## What's deliberately not here
 
 Everything the original design called out as "later work" is now built: the pairing HTTP exchange

package/dist/src/diagnose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diagnose.d.ts","sourceRoot":"","sources":["../../src/diagnose.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAa,MAAM,cAAc,CAAC;AAG5D,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,eAAe,GACf,qBAAqB,GACrB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB;AAClB;;;gDAGgD;GAC9C,gBAAgB;AAClB;qGACqG;GACnG,yBAAyB,GACzB,UAAU;AACZ,uGAAuG;GACrG,kBAAkB,GAClB,UAAU,GACV,OAAO,CAAC;AAEZ,MAAM,WAAW,OAAO;IACtB;;sBAEkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAeD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAkQhF"}
+{"version":3,"file":"diagnose.d.ts","sourceRoot":"","sources":["../../src/diagnose.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAa,MAAM,cAAc,CAAC;AAI5D,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,eAAe,GACf,qBAAqB,GACrB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB;AAClB;;;gDAGgD;GAC9C,gBAAgB;AAClB;qGACqG;GACnG,yBAAyB,GACzB,UAAU;AACZ,uGAAuG;GACrG,kBAAkB,GAClB,UAAU,GACV,OAAO,CAAC;AAEZ,MAAM,WAAW,OAAO;IACtB;;sBAEkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAeD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CA+QhF"}

package/dist/src/diagnose.js

@@ -1,6 +1,7 @@
 import { BotanaryApiError } from './api-client.js';
 import { setupUrl } from './app-link.js';
 import { getFallbackCount } from './hitl/wait.js';
+import { describeProfileSource } from './identity/profile.js';
 const BALANCE_FRESHNESS = 'backend store-backed (GET /balance makes zero external calls) - may lag the chain by a refresh cycle';
 function report(state, summary, blockers, facts = {}, freshness = {}) {
     return { state, summary, blockers, facts, freshness };
@@ -16,15 +17,26 @@ export async function runDiagnose(runtime) {
     const pending = (await runtime.handles.list()).map((h) => ({ id: h.id, kind: h.kind, label: h.label, expiresAt: h.expiresAt }));
     const fallbackCount = getFallbackCount();
     const transport = fallbackCount > 0 ? 'polling (stream unavailable)' : 'stream (or polling as fallback)';
+    // Reported in EVERY branch below, including the failure branches, because "which identity is this
+    // process even using" is the first thing that is wrong when several coding tools share a machine.
+    // Someone whose agent looks unclaimed usually has a claimed one under a different profile; without
+    // this they would go re-pair the wrong identity. `profileSource` earns its place next to `profile`:
+    // a `legacy` source explains why a machine that expected per-tool identities has one shared one.
+    const profile = {
+        profile: runtime.profile.key,
+        profileSource: describeProfileSource(runtime.profile),
+        // What the CLIENT said it was, never verified - see identity/profile.ts. Null when it said nothing.
+        reportedClient: runtime.profile.tool,
+    };
     if (!(await runtime.store.hasIdentity())) {
         return report('no_key', 'No agent key exists on this machine yet.', [
             {
                 code: 'no_key',
                 severity: 'blocking',
-                detail: 'Nothing is stored at this machine\'s identity path.',
+                detail: `Nothing is stored at this machine's identity path for profile "${runtime.profile.key}".`,
                 nextAction: 'Call get_pairing_code to create an identity and get a code for the owner to claim.',
             },
-        ], { pending, transport });
+        ], { pending, transport, ...profile });
     }
     let self;
     try {
@@ -39,7 +51,7 @@ export async function runDiagnose(runtime) {
                     detail: `The backend does not recognise this agent (HTTP ${e.status}).`,
                     nextAction: 'Call get_pairing_code and give the code to the owner to enter in Botanary.',
                 },
-            ], { pending, transport });
+            ], { pending, transport, ...profile });
         }
         return report('backend_unavailable', 'Could not reach the Botanary backend to ask who this agent is.', [
             {
@@ -48,7 +60,7 @@ export async function runDiagnose(runtime) {
                 detail: e instanceof Error ? e.message : String(e),
                 nextAction: 'Retry once the backend is reachable. Nothing local is wrong.',
             },
-        ], { pending, transport });
+        ], { pending, transport, ...profile });
     }
     const facts = {
         agent: { id: self.id, name: self.name, address: self.address, fingerprint: self.fingerprint },
@@ -56,6 +68,7 @@ export async function runDiagnose(runtime) {
         grant: self.grant,
         pending,
         transport,
+        ...profile,
     };
     /** Name the account by the address the OWNER would recognise, falling back to the opaque row id only
      *  when an older backend does not send one. This is the whole point of the diagnosis: "connected to an

package/dist/src/diagnose.js.map

@@ -1 +1 @@
-{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../../src/diagnose.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAyClD,MAAM,iBAAiB,GACrB,sGAAsG,CAAC;AAEzG,SAAS,MAAM,CACb,KAAoB,EACpB,OAAe,EACf,QAAmB,EACnB,QAAiC,EAAE,EACnC,YAAoC,EAAE;IAEtC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB;IACrD,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAChI,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,iCAAiC,CAAC;IAEzG,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,QAAQ,EAAE,0CAA0C,EAAE;YAClE;gBACE,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,qDAAqD;gBAC7D,UAAU,EAAE,oFAAoF;aACjG;SACF,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,IAAe,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;YAC5E,OAAO,MAAM,CAAC,eAAe,EAAE,iEAAiE,EAAE;gBAChG;oBACE,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,mDAAmD,CAAC,CAAC,MAAM,IAAI;oBACvE,UAAU,EAAE,4EAA4E;iBACzF;aACF,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,MAAM,CAAC,qBAAqB,EAAE,gEAAgE,EAAE;YACrG;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClD,UAAU,EAAE,8DAA8D;aAC3E;SACF,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAA4B;QACrC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;QAC7F,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE;QAC5E,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO;QACP,SAAS;KACV,CAAC;IAEF;;;2GAGuG;IACvG,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;IAE1G,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,MAAM,CACX,oBAAoB,EACpB,gBAAgB,YAAY,0DAA0D,EACtF;YACE;gBACE,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,qCAAqC;gBAC7C,UAAU,EAAE,2GAA2G;aACxH;SACF,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAOlB,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CACX,gBAAgB,EAChB,yBAAyB,KAAK,CAAC,MAAM,qCAAqC,EAC1E;YACE;gBACE,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,gBAAgB,KAAK,CAAC,MAAM,IAAI;gBACzD,UAAU,EAAE,8DAA8D;aAC3E;SACF,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,wGAAwG;IACxG,wGAAwG;IACxG,sGAAsG;IACtG,kGAAkG;IAClG,oGAAoG;IACpG,sFAAsF;IACtF,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM;YAC9C,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACtC,CAAC,CAAC,sBAAsB,CAAC;QAC3B,OAAO,MAAM,CACX,gBAAgB,EAChB,qCAAqC,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,OAAO,EAAE,uBAAuB;YACjG,WAAW,OAAO,uEAAuE,EAC3F;YACE;gBACE,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EACJ,sBAAsB,OAAO,eAAe,IAAI,CAAC,YAAY,CAAC,OAAO,uBAAuB;oBAC5F,0FAA0F;oBAC1F,2CAA2C;gBAC7C,UAAU,EACR,yBAAyB,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO;oBACvF,qDAAqD;aACxD;SACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;IACJ,CAAC;IAED,cAAc;IACd,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAmE,CAAC;QAC9G,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CACX,gBAAgB,EAChB,0BAA0B,KAAK,CAAC,OAAO,sCAAsC,EAC7E;gBACE;oBACE,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,WAAW,KAAK,CAAC,OAAO,8BAA8B;oBAC9D,UAAU,EAAE,yDAAyD;iBACtE;aACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QACpB,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,MAAM,CACX,gBAAgB,EAChB,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,8DAA8D,EAC5F;gBACE;oBACE,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,oCAAoC,KAAK,CAAC,OAAO,GAAG;oBAC5D,UAAU,EAAE,+DAA+D;iBAC5E;aACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS,CAAC,MAAM,GAAG,gBAAgB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,6EAA6E;YACrF,UAAU,EAAE,kEAAkE;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,qGAAqG;IACrG,qGAAqG;IACrG,sGAAsG;IACtG,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAA+E,CAAC;QAC3H,SAAS,CAAC,OAAO,GAAG,iBAAiB,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YACvC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;YAChF,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC;QAChC,KAAK,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC3D,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAChB,OAAO,MAAM,CACX,UAAU,EACV,gBAAgB,YAAY,oBAAoB,MAAM,IAAI,uBAAuB,OAC/E,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,OAAO,EACvC,sCAAsC,EACtC;gBACE,GAAG,QAAQ;gBACX;oBACE,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,iBAAiB,MAAM,eAAe,KAAK,CAAC,OAAO,yBAAyB,MAAM,GAAG;oBAC7F,UAAU,EAAE,wBAAwB,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,OAAO,EAAE,mDAAmD;iBAC/H;aACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,0EAA0E;YAClF,UAAU,EAAE,iCAAiC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;IACpD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CACX,kBAAkB,EAClB,6CAA6C,EAC7C;YACE,GAAG,QAAQ;YACX;gBACE,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,iCAAiC,SAAS,GAAG;gBACrD,UAAU,EAAE,yDAAyD;aACtE;SACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CACX,UAAU,EACV,yEAAyE,EACzE,QAAQ,EACR,KAAK,EACL,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CACX,OAAO,EACP,gBAAgB,YAAY,4BAA4B,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,OAAO,EAAE,8BAA8B,EAC7H,EAAE,EACF,KAAK,EACL,SAAS,CACV,CAAC;AACJ,CAAC"}
+{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../../src/diagnose.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAyC9D,MAAM,iBAAiB,GACrB,sGAAsG,CAAC;AAEzG,SAAS,MAAM,CACb,KAAoB,EACpB,OAAe,EACf,QAAmB,EACnB,QAAiC,EAAE,EACnC,YAAoC,EAAE;IAEtC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB;IACrD,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAChI,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,iCAAiC,CAAC;IAEzG,kGAAkG;IAClG,kGAAkG;IAClG,mGAAmG;IACnG,oGAAoG;IACpG,iGAAiG;IACjG,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG;QAC5B,aAAa,EAAE,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC;QACrD,oGAAoG;QACpG,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;KACrC,CAAC;IAEF,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,QAAQ,EAAE,0CAA0C,EAAE;YAClE;gBACE,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,kEAAkE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI;gBACjG,UAAU,EAAE,oFAAoF;aACjG;SACF,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,IAAe,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;YAC5E,OAAO,MAAM,CAAC,eAAe,EAAE,iEAAiE,EAAE;gBAChG;oBACE,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,mDAAmD,CAAC,CAAC,MAAM,IAAI;oBACvE,UAAU,EAAE,4EAA4E;iBACzF;aACF,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC,qBAAqB,EAAE,gEAAgE,EAAE;YACrG;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClD,UAAU,EAAE,8DAA8D;aAC3E;SACF,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,KAAK,GAA4B;QACrC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;QAC7F,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE;QAC5E,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO;QACP,SAAS;QACT,GAAG,OAAO;KACX,CAAC;IAEF;;;2GAGuG;IACvG,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;IAE1G,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,MAAM,CACX,oBAAoB,EACpB,gBAAgB,YAAY,0DAA0D,EACtF;YACE;gBACE,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,qCAAqC;gBAC7C,UAAU,EAAE,2GAA2G;aACxH;SACF,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAOlB,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CACX,gBAAgB,EAChB,yBAAyB,KAAK,CAAC,MAAM,qCAAqC,EAC1E;YACE;gBACE,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,gBAAgB,KAAK,CAAC,MAAM,IAAI;gBACzD,UAAU,EAAE,8DAA8D;aAC3E;SACF,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,wGAAwG;IACxG,wGAAwG;IACxG,sGAAsG;IACtG,kGAAkG;IAClG,oGAAoG;IACpG,sFAAsF;IACtF,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM;YAC9C,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACtC,CAAC,CAAC,sBAAsB,CAAC;QAC3B,OAAO,MAAM,CACX,gBAAgB,EAChB,qCAAqC,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,OAAO,EAAE,uBAAuB;YACjG,WAAW,OAAO,uEAAuE,EAC3F;YACE;gBACE,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EACJ,sBAAsB,OAAO,eAAe,IAAI,CAAC,YAAY,CAAC,OAAO,uBAAuB;oBAC5F,0FAA0F;oBAC1F,2CAA2C;gBAC7C,UAAU,EACR,yBAAyB,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO;oBACvF,qDAAqD;aACxD;SACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;IACJ,CAAC;IAED,cAAc;IACd,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAmE,CAAC;QAC9G,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CACX,gBAAgB,EAChB,0BAA0B,KAAK,CAAC,OAAO,sCAAsC,EAC7E;gBACE;oBACE,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,WAAW,KAAK,CAAC,OAAO,8BAA8B;oBAC9D,UAAU,EAAE,yDAAyD;iBACtE;aACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QACpB,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,MAAM,CACX,gBAAgB,EAChB,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,8DAA8D,EAC5F;gBACE;oBACE,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,oCAAoC,KAAK,CAAC,OAAO,GAAG;oBAC5D,UAAU,EAAE,+DAA+D;iBAC5E;aACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS,CAAC,MAAM,GAAG,gBAAgB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,6EAA6E;YACrF,UAAU,EAAE,kEAAkE;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,qGAAqG;IACrG,qGAAqG;IACrG,sGAAsG;IACtG,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAA+E,CAAC;QAC3H,SAAS,CAAC,OAAO,GAAG,iBAAiB,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YACvC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;YAChF,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC;QAChC,KAAK,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC3D,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAChB,OAAO,MAAM,CACX,UAAU,EACV,gBAAgB,YAAY,oBAAoB,MAAM,IAAI,uBAAuB,OAC/E,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,OAAO,EACvC,sCAAsC,EACtC;gBACE,GAAG,QAAQ;gBACX;oBACE,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,iBAAiB,MAAM,eAAe,KAAK,CAAC,OAAO,yBAAyB,MAAM,GAAG;oBAC7F,UAAU,EAAE,wBAAwB,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,OAAO,EAAE,mDAAmD;iBAC/H;aACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,0EAA0E;YAClF,UAAU,EAAE,iCAAiC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;IACpD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CACX,kBAAkB,EAClB,6CAA6C,EAC7C;YACE,GAAG,QAAQ;YACX;gBACE,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,iCAAiC,SAAS,GAAG;gBACrD,UAAU,EAAE,yDAAyD;aACtE;SACF,EACD,KAAK,EACL,SAAS,CACV,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CACX,UAAU,EACV,yEAAyE,EACzE,QAAQ,EACR,KAAK,EACL,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CACX,OAAO,EACP,gBAAgB,YAAY,4BAA4B,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,OAAO,EAAE,8BAA8B,EAC7H,EAAE,EACF,KAAK,EACL,SAAS,CACV,CAAC;AACJ,CAAC"}

package/dist/src/identity/adopt.d.ts

@@ -0,0 +1,51 @@
+import type { PublicMetadataFile } from './types.js';
+/**
+ * Move this machine's pre-profiles identity into a named profile, KEEPING THE SAME KEY.
+ *
+ * This is the opt-in half of the migration rule. `resolveProfile` deliberately keeps a legacy install
+ * on `default` rather than auto-deriving a per-tool identity, because auto-deriving would mint a fresh
+ * keypair and orphan whatever on-chain grant names the old address. That is the safe default, but it
+ * means an existing user has no way to join the per-tool world without abandoning their pairing -
+ * unless the identity itself can move. It can: same address, same pairing, same grant, new name.
+ *
+ * WHY THIS IS NOT A COPY. Leaving the key behind under `default` too would mean two profiles able to
+ * sign as the same agent, so "disable Codex" would not be a fact about one identity any more. An
+ * identity must live in exactly one place, which is why the source is deleted - but only after the
+ * destination has been written AND proven to sign.
+ *
+ * ORDER MATTERS AND IS THE WHOLE SAFETY ARGUMENT:
+ *   1. refuse if there is nothing to move, or if the destination already holds an identity;
+ *   2. write the secret and metadata to the destination;
+ *   3. VERIFY by loading the destination fresh and signing with it - not by trusting the write;
+ *   4. only then delete the source.
+ * A failure at step 2 or 3 rolls the destination back and leaves the source untouched, so the worst
+ * outcome is "nothing happened", never "the key is gone".
+ */
+export declare class ProfileAdoptError extends Error {
+    constructor(message: string);
+}
+export interface AdoptResult {
+    from: string;
+    to: string;
+    address: string;
+    fingerprint: string;
+}
+export declare function adoptDefaultProfileAs(rawTargetKey: string, 
+/**
+ * Which platform's backend list to use. Defaults to the real one; overridden ONLY by this package's
+ * own tests, which pass a platform with no OS keychain so they exercise the file-fallback backend
+ * alone.
+ *
+ * This parameter is not a convenience. Keychain items are keyed by NAME, not by path, so
+ * `BOTANARY_MCP_HOME` does not isolate them - a test that runs this function against the real
+ * platform writes to, and then DELETES, the developer's actual `agent-identity` item. That happened
+ * while this file was being written, which is why the seam exists and why every test here uses it.
+ * `defaultCandidates` already takes a platform for exactly this reason.
+ */
+platform?: NodeJS.Platform): Promise<AdoptResult>;
+/** Every profile with metadata on this machine, so an owner can see what exists before moving anything.
+ *  Reads metadata only - listing profiles never touches the keychain. */
+export declare function listProfiles(): Promise<Array<PublicMetadataFile & {
+    profile: string;
+}>>;
+//# sourceMappingURL=adopt.d.ts.map

package/dist/src/identity/adopt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["../../../src/identity/adopt.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM;AACpB;;;;;;;;;;GAUG;AACH,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAAC,WAAW,CAAC,CA2EtB;AAED;yEACyE;AACzE,wBAAsB,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA0B7F"}

package/dist/src/identity/adopt.js

@@ -0,0 +1,167 @@
+import { readFile, mkdir, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { publicMetadataPath } from '../paths.js';
+import { defaultCandidates } from './backends/select.js';
+import { DEFAULT_PROFILE_KEY, isDefaultProfile, parseExplicitProfile } from './profile.js';
+import { createIdentityStore, IdentityStore } from './store.js';
+/**
+ * Move this machine's pre-profiles identity into a named profile, KEEPING THE SAME KEY.
+ *
+ * This is the opt-in half of the migration rule. `resolveProfile` deliberately keeps a legacy install
+ * on `default` rather than auto-deriving a per-tool identity, because auto-deriving would mint a fresh
+ * keypair and orphan whatever on-chain grant names the old address. That is the safe default, but it
+ * means an existing user has no way to join the per-tool world without abandoning their pairing -
+ * unless the identity itself can move. It can: same address, same pairing, same grant, new name.
+ *
+ * WHY THIS IS NOT A COPY. Leaving the key behind under `default` too would mean two profiles able to
+ * sign as the same agent, so "disable Codex" would not be a fact about one identity any more. An
+ * identity must live in exactly one place, which is why the source is deleted - but only after the
+ * destination has been written AND proven to sign.
+ *
+ * ORDER MATTERS AND IS THE WHOLE SAFETY ARGUMENT:
+ *   1. refuse if there is nothing to move, or if the destination already holds an identity;
+ *   2. write the secret and metadata to the destination;
+ *   3. VERIFY by loading the destination fresh and signing with it - not by trusting the write;
+ *   4. only then delete the source.
+ * A failure at step 2 or 3 rolls the destination back and leaves the source untouched, so the worst
+ * outcome is "nothing happened", never "the key is gone".
+ */
+export class ProfileAdoptError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ProfileAdoptError';
+    }
+}
+export async function adoptDefaultProfileAs(rawTargetKey, 
+/**
+ * Which platform's backend list to use. Defaults to the real one; overridden ONLY by this package's
+ * own tests, which pass a platform with no OS keychain so they exercise the file-fallback backend
+ * alone.
+ *
+ * This parameter is not a convenience. Keychain items are keyed by NAME, not by path, so
+ * `BOTANARY_MCP_HOME` does not isolate them - a test that runs this function against the real
+ * platform writes to, and then DELETES, the developer's actual `agent-identity` item. That happened
+ * while this file was being written, which is why the seam exists and why every test here uses it.
+ * `defaultCandidates` already takes a platform for exactly this reason.
+ */
+platform = process.platform) {
+    const targetKey = parseExplicitProfile(rawTargetKey);
+    if (isDefaultProfile(targetKey)) {
+        throw new ProfileAdoptError('"default" is where the identity already is - name a different profile.');
+    }
+    const sourceCandidates = defaultCandidates(platform, false, DEFAULT_PROFILE_KEY);
+    const sourceMetadataPath = publicMetadataPath(DEFAULT_PROFILE_KEY);
+    const source = new IdentityStore(sourceCandidates, { metadataPath: sourceMetadataPath });
+    if (!(await source.hasIdentity())) {
+        throw new ProfileAdoptError('There is no default identity on this machine to adopt. A fresh install already derives one ' +
+            'profile per coding tool - nothing to migrate.');
+    }
+    const target = createIdentityStore(targetKey, platform);
+    if (await target.hasIdentity()) {
+        // Overwriting would destroy a key that some agent may already be paired under - the exact class of
+        // silent loss profiles were introduced to end.
+        throw new ProfileAdoptError(`Profile "${targetKey}" already has an identity. Adopting into it would overwrite that key. ` +
+            'Choose another name, or remove that profile first.');
+    }
+    const metadata = JSON.parse(await readFile(sourceMetadataPath, 'utf8'));
+    const secret = await loadRawSecret(sourceCandidates);
+    if (secret === null) {
+        throw new ProfileAdoptError(`Metadata exists for ${metadata.address} but no backend holds its private key, so there is ` +
+            'nothing to move. Run "botanary forget" to clear the stale metadata.');
+    }
+    const targetCandidates = defaultCandidates(platform, false, targetKey);
+    const targetMetadataPath = publicMetadataPath(targetKey);
+    let writtenBackendId = null;
+    try {
+        writtenBackendId = await saveToFirstAvailable(targetCandidates, secret);
+        await mkdir(dirname(targetMetadataPath), { recursive: true, mode: 0o700 });
+        await writeFile(targetMetadataPath, `${JSON.stringify({ ...metadata, backend: writtenBackendId }, null, 2)}\n`, 'utf8');
+        // Prove it, do not assume it. `sign` is the only check that exercises the whole path the agent
+        // actually uses - metadata read, secret load from the new item name, and the address-match guard
+        // that would otherwise only fail later, at the moment the agent tried to act.
+        const verify = createIdentityStore(targetKey, platform);
+        const adopted = await verify.ensure();
+        if (adopted.address.toLowerCase() !== metadata.address.toLowerCase()) {
+            throw new Error(`wrote ${metadata.address} but read back ${adopted.address}`);
+        }
+        await verify.sign('botanary profile adopt verification');
+    }
+    catch (e) {
+        await rollback(targetCandidates, targetMetadataPath);
+        throw new ProfileAdoptError(`Could not move the identity to "${targetKey}": ${e instanceof Error ? e.message : String(e)}. ` +
+            'Nothing was changed - the default identity is still intact.');
+    }
+    // Only now. Everything above is reversible; this is not.
+    await source.forget();
+    return {
+        from: DEFAULT_PROFILE_KEY,
+        to: targetKey,
+        address: metadata.address,
+        fingerprint: metadata.fingerprint,
+    };
+}
+/** Every profile with metadata on this machine, so an owner can see what exists before moving anything.
+ *  Reads metadata only - listing profiles never touches the keychain. */
+export async function listProfiles() {
+    const { readdir } = await import('node:fs/promises');
+    const { botanaryMcpHome } = await import('../paths.js');
+    const { join } = await import('node:path');
+    const found = [];
+    const readOne = async (profile) => {
+        try {
+            const raw = await readFile(publicMetadataPath(profile), 'utf8');
+            found.push({ ...JSON.parse(raw), profile });
+        }
+        catch {
+            // Absent or unreadable: not an error. A profile directory with no metadata is simply not a
+            // profile yet, and listing must never fail because one entry is malformed.
+        }
+    };
+    await readOne(DEFAULT_PROFILE_KEY);
+    try {
+        for (const entry of await readdir(join(botanaryMcpHome(), 'profiles'), { withFileTypes: true })) {
+            if (entry.isDirectory())
+                await readOne(entry.name);
+        }
+    }
+    catch {
+        // No profiles/ directory: this machine has only the default identity, or none at all.
+    }
+    return found;
+}
+async function loadRawSecret(candidates) {
+    for (const backend of candidates) {
+        try {
+            const raw = await backend.load();
+            if (raw !== null)
+                return raw;
+        }
+        catch {
+            // Try the next candidate - a broken backend is not proof the key is absent.
+        }
+    }
+    return null;
+}
+async function saveToFirstAvailable(candidates, secret) {
+    for (const backend of candidates) {
+        if (!(await backend.isAvailable()))
+            continue;
+        await backend.save(secret);
+        return backend.id;
+    }
+    throw new Error('no storage backend available for the destination profile');
+}
+async function rollback(candidates, metadataPath) {
+    const { rm } = await import('node:fs/promises');
+    for (const backend of candidates) {
+        try {
+            await backend.delete();
+        }
+        catch {
+            // Best effort. The source has not been touched at this point, so a leftover destination secret
+            // is inert - it has no metadata pointing at it and no profile will load it.
+        }
+    }
+    await rm(metadataPath, { force: true }).catch(() => { });
+}
+//# sourceMappingURL=adopt.js.map

package/dist/src/identity/adopt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt.js","sourceRoot":"","sources":["../../../src/identity/adopt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AASD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,YAAoB;AACpB;;;;;;;;;;GAUG;AACH,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,iBAAiB,CAAC,wEAAwE,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACjF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAEzF,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,iBAAiB,CACzB,6FAA6F;YAC3F,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,mGAAmG;QACnG,+CAA+C;QAC/C,MAAM,IAAI,iBAAiB,CACzB,YAAY,SAAS,wEAAwE;YAC3F,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAuB,CAAC;IAC9F,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,QAAQ,CAAC,OAAO,qDAAqD;YAC1F,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACvE,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAE3C,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,SAAS,CACb,kBAAkB,EAClB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAC1E,MAAM,CACP,CAAC;QAEF,+FAA+F;QAC/F,iGAAiG;QACjG,8EAA8E;QAC9E,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,CAAC,OAAO,kBAAkB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QACrD,MAAM,IAAI,iBAAiB,CACzB,mCAAmC,SAAS,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC9F,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAEtB,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC;AACJ,CAAC;AAED;yEACyE;AACzE,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAE3C,MAAM,KAAK,GAAoD,EAAE,CAAC;IAElE,MAAM,OAAO,GAAG,KAAK,EAAE,OAAe,EAAiB,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,2FAA2F;YAC3F,2EAA2E;QAC7E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAChG,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sFAAsF;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,UAAgD;IAC3E,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,UAAgD,EAChD,MAAc;IAEd,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC7C,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC,EAAE,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,UAAgD,EAChD,YAAoB;IAEpB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,+FAA+F;YAC/F,4EAA4E;QAC9E,CAAC;IACH,CAAC;IACD,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/identity/backends/select.d.ts

@@ -6,10 +6,18 @@ import type { KeyBackend } from './types.js';
  * never be empty and a caller can never end up with nowhere to store a key.
  *
  * CRITICAL: the agent's names (SERVICE_NAME / ACCOUNT_NAME) are FROZEN for backward compatibility.
- * Existing installs already have keys stored under these names. Wallet uses a distinct ACCOUNT_NAME
- * to prevent collision.
+ * Existing installs already have keys stored under these names, which is exactly what
+ * `accountNameFor(DEFAULT_PROFILE_KEY)` preserves. Wallet uses a distinct ACCOUNT_NAME to prevent
+ * collision.
+ *
+ * `profileKey` keys the AGENT lane only. THE WALLET LANE IGNORES IT, deliberately: it holds the
+ * OWNER's login token, and the owner is one person however many coding tools they run. One
+ * `botanary login` is meant to be visible from every tool and from the CLI, and every write that token
+ * reaches still terminates in the owner's own browser signature - so there is nothing for a per-tool
+ * split to protect. The agent key is the credential that carries delegated authority, and that is the
+ * one that gets separated.
  */
-export declare function defaultCandidates(platform?: NodeJS.Platform, isWallet?: boolean): KeyBackend[];
+export declare function defaultCandidates(platform?: NodeJS.Platform, isWallet?: boolean, profileKey?: string): KeyBackend[];
 /** Pick the first available backend from `candidates`, in order. Used only to decide where a NEW key
  *  gets written - see the KeyBackend interface doc for why reads don't use this. */
 export declare function selectAvailable(candidates: KeyBackend[]): Promise<KeyBackend>;

package/dist/src/identity/backends/select.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"select.d.ts","sourceRoot":"","sources":["../../../../src/identity/backends/select.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAK7C;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAAE,QAAQ,GAAE,OAAe,GAAG,UAAU,EAAE,CAiBvH;AAED;oFACoF;AACpF,wBAAsB,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAOnF"}
+{"version":3,"file":"select.d.ts","sourceRoot":"","sources":["../../../../src/identity/backends/select.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,QAAQ,GAAE,OAAe,EACzB,UAAU,GAAE,MAA4B,GACvC,UAAU,EAAE,CAwBd;AAED;oFACoF;AACpF,wBAAsB,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAOnF"}

package/dist/src/identity/backends/select.js

@@ -2,9 +2,10 @@ import { join } from 'node:path';
 import { createFileFallbackBackend } from './file-fallback.js';
 import { createLibsecretBackend } from './libsecret.js';
 import { createMacosKeychainBackend } from './macos-keychain.js';
-import { ACCOUNT_NAME, WALLET_ACCOUNT_NAME } from './types.js';
+import { accountNameFor, WALLET_ACCOUNT_NAME } from './types.js';
 import { createWindowsDpapiBackend } from './windows-dpapi.js';
 import { fileFallbackSecretPath, botanaryMcpHome } from '../../paths.js';
+import { DEFAULT_PROFILE_KEY, isDefaultProfile } from '../profile.js';
 /**
  * Fixed, platform-derived priority order. The SAME list is used for reads and writes (store.ts): a new
  * key is written to the first available candidate, and every candidate is swept in this order when
@@ -12,14 +13,29 @@ import { fileFallbackSecretPath, botanaryMcpHome } from '../../paths.js';
  * never be empty and a caller can never end up with nowhere to store a key.
  *
  * CRITICAL: the agent's names (SERVICE_NAME / ACCOUNT_NAME) are FROZEN for backward compatibility.
- * Existing installs already have keys stored under these names. Wallet uses a distinct ACCOUNT_NAME
- * to prevent collision.
+ * Existing installs already have keys stored under these names, which is exactly what
+ * `accountNameFor(DEFAULT_PROFILE_KEY)` preserves. Wallet uses a distinct ACCOUNT_NAME to prevent
+ * collision.
+ *
+ * `profileKey` keys the AGENT lane only. THE WALLET LANE IGNORES IT, deliberately: it holds the
+ * OWNER's login token, and the owner is one person however many coding tools they run. One
+ * `botanary login` is meant to be visible from every tool and from the CLI, and every write that token
+ * reaches still terminates in the owner's own browser signature - so there is nothing for a per-tool
+ * split to protect. The agent key is the credential that carries delegated authority, and that is the
+ * one that gets separated.
  */
-export function defaultCandidates(platform = process.platform, isWallet = false) {
-    const accountName = isWallet ? WALLET_ACCOUNT_NAME : ACCOUNT_NAME;
+export function defaultCandidates(platform = process.platform, isWallet = false, profileKey = DEFAULT_PROFILE_KEY) {
+    const accountName = isWallet ? WALLET_ACCOUNT_NAME : accountNameFor(profileKey);
     // Wallet uses distinct file paths so multiple identities never collide
-    const walletFileFallbackPath = isWallet ? join(botanaryMcpHome(), 'wallet.key') : fileFallbackSecretPath();
-    const walletWindowsDpapiPath = isWallet ? join(botanaryMcpHome(), 'wallet.dpapi') : join(botanaryMcpHome(), 'identity.dpapi');
+    const walletFileFallbackPath = isWallet ? join(botanaryMcpHome(), 'wallet.key') : fileFallbackSecretPath(profileKey);
+    // The DPAPI ciphertext file is per-profile for the same reason the keychain item is: on Windows this
+    // path IS the storage, so two profiles sharing it would overwrite each other exactly as the macOS
+    // item name did. `default` keeps the original filename it has always used.
+    const walletWindowsDpapiPath = isWallet
+        ? join(botanaryMcpHome(), 'wallet.dpapi')
+        : isDefaultProfile(profileKey)
+            ? join(botanaryMcpHome(), 'identity.dpapi')
+            : join(botanaryMcpHome(), 'profiles', profileKey, 'identity.dpapi');
     switch (platform) {
         case 'darwin':
             return [createMacosKeychainBackend(undefined, accountName), createFileFallbackBackend(walletFileFallbackPath)];

package/dist/src/identity/backends/select.js.map

@@ -1 +1 @@
-{"version":3,"file":"select.js","sourceRoot":"","sources":["../../../../src/identity/backends/select.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEzE;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAA4B,OAAO,CAAC,QAAQ,EAAE,WAAoB,KAAK;IACvG,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC;IAElE,uEAAuE;IACvE,MAAM,sBAAsB,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC;IAC3G,MAAM,sBAAsB,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAE9H,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,CAAC,0BAA0B,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACjH,KAAK,OAAO;YACV,OAAO,CAAC,sBAAsB,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7G,KAAK,OAAO;YACV,OAAO,CAAC,yBAAyB,CAAC,SAAS,EAAE,sBAAsB,CAAC,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC3H;YACE,OAAO,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;oFACoF;AACpF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAwB;IAC5D,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,MAAM,OAAO,CAAC,WAAW,EAAE;YAAE,OAAO,OAAO,CAAC;IAClD,CAAC;IACD,8FAA8F;IAC9F,qGAAqG;IACrG,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;AAC/F,CAAC"}
+{"version":3,"file":"select.js","sourceRoot":"","sources":["../../../../src/identity/backends/select.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAA4B,OAAO,CAAC,QAAQ,EAC5C,WAAoB,KAAK,EACzB,aAAqB,mBAAmB;IAExC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAEhF,uEAAuE;IACvE,MAAM,sBAAsB,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACrH,qGAAqG;IACrG,kGAAkG;IAClG,2EAA2E;IAC3E,MAAM,sBAAsB,GAAG,QAAQ;QACrC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,cAAc,CAAC;QACzC,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,gBAAgB,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAExE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,CAAC,0BAA0B,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACjH,KAAK,OAAO;YACV,OAAO,CAAC,sBAAsB,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7G,KAAK,OAAO;YACV,OAAO,CAAC,yBAAyB,CAAC,SAAS,EAAE,sBAAsB,CAAC,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC3H;YACE,OAAO,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;oFACoF;AACpF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAwB;IAC5D,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,MAAM,OAAO,CAAC,WAAW,EAAE;YAAE,OAAO,OAAO,CAAC;IAClD,CAAC;IACD,8FAA8F;IAC9F,qGAAqG;IACrG,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;AAC/F,CAAC"}

package/dist/src/identity/backends/types.d.ts

@@ -31,11 +31,23 @@ export declare class KeyBackendError extends Error {
     readonly operation: 'save' | 'load' | 'delete' | 'probe';
     constructor(backend: string, operation: 'save' | 'load' | 'delete' | 'probe', message: string);
 }
-/** Fixed, non-secret names every real backend stores the identity under. There is exactly one agent
- *  identity per machine by design (see README) - a multi-identity store is a bigger feature than this
- *  package builds. These defaults are FROZEN: existing installs already have agent keys stored here.
- *  The wallet lane uses a different ACCOUNT_NAME to prevent collision. */
+/** Fixed, non-secret names every real backend stores credentials under. These defaults are FROZEN:
+ *  existing installs already have keys stored here, and `accountNameFor(DEFAULT_PROFILE_KEY)` must
+ *  keep returning `ACCOUNT_NAME` unchanged forever. The wallet lane uses a different ACCOUNT_NAME to
+ *  prevent collision with the agent lane. */
 export declare const SERVICE_NAME = "botanary-mcp";
 export declare const ACCOUNT_NAME = "agent-identity";
 export declare const WALLET_ACCOUNT_NAME = "wallet-session";
+/**
+ * The keychain/libsecret account name for one profile's agent key.
+ *
+ * THIS IS THE HALF `BOTANARY_MCP_HOME` NEVER MOVED, and the reason a per-client home was silently
+ * destructive before profiles existed: the metadata file followed the home, the keychain item did
+ * not, so a second install minted a fresh keypair and `security add-generic-password -U` overwrote
+ * the first one's private key in place. Item name and file path now move together, always.
+ *
+ * `default` returns the bare, frozen name - a pre-profiles install is not migrated or shimmed, it
+ * simply IS the default profile and keeps the exact item it already has.
+ */
+export declare function accountNameFor(profileKey: string): string;
 //# sourceMappingURL=types.d.ts.map

package/dist/src/identity/backends/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/identity/backends/types.ts"],"names":[],"mappings":"AAAA;;;8FAG8F;AAC9F,MAAM,WAAW,UAAU;IACzB;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,EAAE,gBAAgB,GAAG,WAAW,GAAG,eAAe,GAAG,eAAe,CAAC;IAChF,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;+EAG2E;IAC3E,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC;oDACgD;IAChD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC;;;8FAG0F;IAC1F,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/B;;sCAEkC;IAClC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,OAAO,EAAE,MAAM;aACf,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO;gBAD/C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,EAC/D,OAAO,EAAE,MAAM;CAKlB;AAED;;;0EAG0E;AAC1E,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAC7C,eAAO,MAAM,mBAAmB,mBAAmB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/identity/backends/types.ts"],"names":[],"mappings":"AAAA;;;8FAG8F;AAC9F,MAAM,WAAW,UAAU;IACzB;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,EAAE,gBAAgB,GAAG,WAAW,GAAG,eAAe,GAAG,eAAe,CAAC;IAChF,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;+EAG2E;IAC3E,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC;oDACgD;IAChD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC;;;8FAG0F;IAC1F,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/B;;sCAEkC;IAClC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,OAAO,EAAE,MAAM;aACf,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO;gBAD/C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,EAC/D,OAAO,EAAE,MAAM;CAKlB;AAED;;;6CAG6C;AAC7C,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAC7C,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEzD"}

package/dist/src/identity/backends/types.js

@@ -8,11 +8,25 @@ export class KeyBackendError extends Error {
         this.name = 'KeyBackendError';
     }
 }
-/** Fixed, non-secret names every real backend stores the identity under. There is exactly one agent
- *  identity per machine by design (see README) - a multi-identity store is a bigger feature than this
- *  package builds. These defaults are FROZEN: existing installs already have agent keys stored here.
- *  The wallet lane uses a different ACCOUNT_NAME to prevent collision. */
+/** Fixed, non-secret names every real backend stores credentials under. These defaults are FROZEN:
+ *  existing installs already have keys stored here, and `accountNameFor(DEFAULT_PROFILE_KEY)` must
+ *  keep returning `ACCOUNT_NAME` unchanged forever. The wallet lane uses a different ACCOUNT_NAME to
+ *  prevent collision with the agent lane. */
 export const SERVICE_NAME = 'botanary-mcp';
 export const ACCOUNT_NAME = 'agent-identity';
 export const WALLET_ACCOUNT_NAME = 'wallet-session';
+/**
+ * The keychain/libsecret account name for one profile's agent key.
+ *
+ * THIS IS THE HALF `BOTANARY_MCP_HOME` NEVER MOVED, and the reason a per-client home was silently
+ * destructive before profiles existed: the metadata file followed the home, the keychain item did
+ * not, so a second install minted a fresh keypair and `security add-generic-password -U` overwrote
+ * the first one's private key in place. Item name and file path now move together, always.
+ *
+ * `default` returns the bare, frozen name - a pre-profiles install is not migrated or shimmed, it
+ * simply IS the default profile and keeps the exact item it already has.
+ */
+export function accountNameFor(profileKey) {
+    return profileKey === 'default' ? ACCOUNT_NAME : `${ACCOUNT_NAME}:${profileKey}`;
+}
 //# sourceMappingURL=types.js.map

package/dist/src/identity/backends/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/identity/backends/types.ts"],"names":[],"mappings":"AA6BA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IAFlB,YACkB,OAAe,EACf,SAA+C,EAC/D,OAAe;QAEf,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,YAAY,OAAO,EAAE,CAAC,CAAC;QAJtC,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAsC;QAI/D,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;0EAG0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAC3C,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAC7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/identity/backends/types.ts"],"names":[],"mappings":"AA6BA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IAFlB,YACkB,OAAe,EACf,SAA+C,EAC/D,OAAe;QAEf,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,YAAY,OAAO,EAAE,CAAC,CAAC;QAJtC,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAsC;QAI/D,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;6CAG6C;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAC3C,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAC7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,UAAU,EAAE,CAAC;AACnF,CAAC"}