cchost 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -5,6 +5,39 @@ All notable changes to `cchost` are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.3.1] - 2026-05-19
+
+### Changed
+
+- **Custom API endpoints are now configured through `cc add`, not `cc env`.**
+  The standalone `cc env` command (shipped in 0.3.0) is removed; endpoint
+  configuration is folded into the profile-creation command:
+  - `cc add <profile> --custom` — create a custom-endpoint profile via an
+    interactive wizard; the token is never echoed.
+  - `cc add <profile> --custom --base-url=URL --token=TOKEN [--model/--opus/--sonnet/--haiku/--subagent=NAME]`
+    — non-interactive create.
+  - Re-running `cc add <profile> --custom` on an existing endpoint profile
+    edits it in place (wizard prefills current values; with flags, only the
+    flags you pass are changed).
+  - `cc add --custom` is atomic — cancelling the wizard leaves no profile
+    behind.
+- **Endpoint inspection moved to `cc list`.** `cc env show` is replaced by
+  `cc list <profile>` — a per-profile detail view. `cc list <profile> --reveal`
+  unmasks the API token; `cc list <profile> --json` emits it as an object
+  (token always masked in JSON).
+
+### Removed
+
+- `cc env` and `cc env show` — superseded by `cc add --custom` and
+  `cc list <profile>`.
+
+### Notes
+
+- A profile is still born subscription or endpoint and stays that way:
+  `cc add --custom` refuses a profile that already has Anthropic OAuth
+  credentials. `.cc-env.json` is still never migrated and never linked, and is
+  still written with user-only file permissions.
+
 ## [0.3.0] - 2026-05-19
 
 ### Added
@@ -71,6 +104,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
   per-process state and must stay per-profile.
 - Cross-platform claim narrowed to the verified scope (Windows and Linux).
 
+[0.3.1]: https://github.com/allenhack638/cchost/releases/tag/v0.3.1
 [0.3.0]: https://github.com/allenhack638/cchost/releases/tag/v0.3.0
 [0.2.1]: https://github.com/allenhack638/cchost/releases/tag/v0.2.1
 [0.2.0]: https://github.com/allenhack638/cchost/releases/tag/v0.2.0

package/README.md

@@ -16,11 +16,10 @@ Requires Node.js 18+ and Claude Code 2.1.140+ already installed. Get Claude Code
 
 | Command | What it does |
 | --- | --- |
-| `cc add <profile>` | Create a profile directory. |
+| `cc add <profile>` | Create a subscription profile (logs in with Anthropic OAuth on first use). |
+| `cc add <profile> --custom [...]` | Create — or, if it already exists, edit — a profile routed through a custom API endpoint. Opens a wizard, or takes `--base-url=URL --token=TOKEN [--model=…]`. See [Custom endpoints](#custom-endpoints-kimi-openrouter-etc). |
 | `cc use <profile> [...args]` | Launch Claude under that profile. Profile must already exist. Args after the name are forwarded verbatim to `claude`. |
-| `cc list [--json]` | Show every profile: login state, account email, shared dirs (N/4), and endpoint. |
-| `cc env <profile> [...]` | Configure a custom API endpoint for a profile (interactive wizard or flags). See [Custom endpoints](#custom-endpoints-kimi-openrouter-etc). |
-| `cc env <profile> show [--reveal]` | Print a profile's endpoint config. Token masked by default; `--reveal` prints it in full. |
+| `cc list [<profile>] [--json] [--reveal]` | List every profile (login state, email, shared dirs N/4, endpoint), or show one profile in detail. `--reveal` unmasks a custom endpoint's API token. |
 | `cc migrate <src> <dest> [--force]` | Copy artifacts from `default`\|`shared` to `shared`\|`<profile>`. Skip-on-collision by default; `--force` overwrites. |
 | `cc link <profile> [<profile>...]` | Link a profile's artifact dirs to `~/.claude-shared/`. Migrates existing content; renames on collision. |
 | `cc unlink <profile>` | Restore a profile to its own private artifact dirs (copies shared content back). |
@@ -49,6 +48,29 @@ scratch   false     -                     0/4     subscription
 work      true      work@example.com      0/4     subscription
 ```
 
+The **Shared** column is a count: how many of the 4 shareable directories
+(`projects`, `skills`, `agents`, `commands`) are linked to `~/.claude-shared/`.
+
+- `0/4` — fully isolated; the profile keeps its own private copies.
+- `4/4` — fully shared; all four point at the common pool.
+- `1/4`, `2/4`, `3/4` — **partial**, and not a normal state. `cc link` links
+  all four at once and `cc unlink` unlinks all four at once, so you should
+  normally see only `0/4` or `4/4`.
+
+A partial count has two causes:
+
+1. **A link partially failed** — one directory could not be linked (a
+   permission issue, or it was locked) while the others succeeded. `cc link`
+   reports per-directory failures so this is never silent.
+2. **An upgrade from an older cchost.** Versions before `0.2.1` linked only
+   `projects/` — the other three shareable directories did not exist yet. A
+   profile linked under an older version therefore shows `1/4` after you
+   upgrade.
+
+In both cases the fix is the same — re-run `cc link <profile>`. Already-linked
+directories are skipped and the missing ones are linked, bringing the profile
+to `4/4`.
+
 ### What migrate copies and what link shares
 
 | Artifact | `cc migrate` copies it | `cc link` shares it | Notes |
@@ -104,31 +126,57 @@ If two profiles share history and you launch them against the same project at th
 
 ## Custom endpoints (Kimi, OpenRouter, etc.)
 
-A profile can route through any Anthropic-compatible API endpoint instead of Anthropic's subscription OAuth — Moonshot/Kimi, OpenRouter, Requesty, a self-hosted vLLM, or a corporate proxy. This is configured per profile with `cc env`.
+A profile can route through any Anthropic-compatible API endpoint instead of Anthropic's subscription OAuth — Moonshot/Kimi, OpenRouter, Requesty, a self-hosted vLLM, or a corporate proxy. You declare this when you create the profile, with `cc add <profile> --custom`.
 
-> **Billing:** an endpoint profile bills through the **third-party provider**, using the API key you supply — **not** your Anthropic subscription. You are responsible for that provider's usage charges. A subscription profile is unaffected.
+> **Billing:** a custom-endpoint profile bills through the **third-party provider**, using the API key you supply — **not** your Anthropic subscription. You are responsible for that provider's usage charges. A subscription profile is unaffected.
 
-An endpoint profile and a subscription profile are mutually exclusive: a profile is born one or the other and stays that way. `cc env` refuses to run on a profile that already has Anthropic OAuth credentials — create endpoint profiles fresh.
+A custom-endpoint profile and a subscription profile are mutually exclusive: a profile is born one or the other and stays that way. `cc add --custom` refuses to run on a profile that already has Anthropic OAuth credentials — create custom-endpoint profiles fresh.
 
 ### Worked example — Moonshot / Kimi
 
 ```bash
-cc add kimi
-cc env kimi --base-url=https://api.moonshot.ai/anthropic \
-            --token=sk-your-moonshot-key \
-            --model=kimi-k2.5
+cc add kimi --custom --base-url=https://api.moonshot.ai/anthropic \
+                     --token=sk-your-moonshot-key \
+                     --model=kimi-k2.5
 cc use kimi
 ```
 
 Moonshot's endpoint URL ends in `/anthropic` — Claude Code appends `/v1/messages` itself, so do **not** add `/v1`. Most third-party providers serve a single model name; pass it as `--model` and it is applied to every tier (opus/sonnet/haiku/subagent). To override a tier, pass `--opus=`, `--sonnet=`, `--haiku=`, or `--subagent=`.
 
-Run `cc env <profile>` with no flags for an interactive wizard instead — it prompts for every field and never echoes the token. On an existing endpoint profile the wizard runs in edit mode with current values prefilled; non-interactively, only the flags you pass are changed.
+Run `cc add <profile> --custom` with no value flags for an interactive wizard instead — it prompts for every field and never echoes the token. `cc add --custom` is atomic: if you cancel the wizard, no profile is left behind.
+
+### Editing a custom-endpoint profile
+
+Re-run `cc add <profile> --custom` on a profile that already has a custom endpoint and it switches to **edit mode**: the wizard prefills current values, and with flags only the flags you pass are changed.
+
+```bash
+cc add kimi --custom --model=kimi-k3      # change just the model
+cc add kimi --custom --token=sk-rotated   # rotate the API key
+```
+
+Inspect a config with `cc list <profile>` — the API token is masked:
+
+```
+Profile:   kimi
+Directory: /home/you/.claude-profiles/kimi
+LoggedIn:  false
+Email:     -
+Shared:    0/4
+Endpoint:  api.moonshot.ai
+  Base URL:  https://api.moonshot.ai/anthropic
+  Token:     sk-you...key9 (32 chars)
+  Model:     kimi-k2.5
+  Opus:      kimi-k2.5
+  Sonnet:    kimi-k2.5
+  Haiku:     kimi-k2.5
+  Subagent:  kimi-k2.5
+```
 
-Inspect a config with `cc env <profile> show` (token masked). `cc env <profile> show --reveal` prints the full API key — do not paste that output anywhere.
+`cc list <profile> --reveal` prints the full API key instead — do not paste that output anywhere.
 
-There is no `cc env clear`. To stop using an endpoint, `cc remove` the profile and recreate it.
+There is no way to convert a custom-endpoint profile back to a subscription profile. To stop using an endpoint, `cc remove` the profile and recreate it.
 
-When you launch an endpoint profile, `cc use` prints a one-line reminder to stderr:
+When you launch a custom-endpoint profile, `cc use` prints a one-line reminder to stderr:
 
 ```
 [cchost] Profile 'kimi' → api.moonshot.ai (custom endpoint billing applies)
@@ -151,7 +199,7 @@ The env var is set on the child process only — that's all `claude` needs.
 
 `~/.claude-profiles/<profile>/` holds real OAuth credentials. Treat it like SSH keys: don't commit it, don't share it, don't sync it to public cloud storage. The `.gitignore` shipped with this project excludes profile directories from anywhere they might land. `cc migrate` and `cc link` never copy `.credentials.json` or `.claude.json` across profiles.
 
-`.cc-env.json` (custom-endpoint config) contains a third-party **API key** — treat it exactly like `.credentials.json`. It is written with user-only file permissions, and `cc migrate`/`cc link` never copy or link it across profiles. `cc env show` masks the token; only `cc env show --reveal` prints it in full.
+`.cc-env.json` (custom-endpoint config) contains a third-party **API key** — treat it exactly like `.credentials.json`. It is written with user-only file permissions, and `cc migrate`/`cc link` never copy or link it across profiles. `cc list <profile>` masks the token; only `cc list <profile> --reveal` prints it in full.
 
 ## Troubleshooting
 

package/lib/cli.js

@@ -15,10 +15,9 @@ const color = require('./color');
 const HELP = `cc - Multi-profile launcher for Claude Code
 
 Usage:
-  cc add <profile>                                 Create a profile directory
+  cc add <profile> [--custom [...]]                Create a profile (--custom: route through a custom API endpoint)
   cc use <profile> [...args]                       Launch Claude under a named profile
-  cc list [--json]                                 Show all profiles: login state, email, shared-dir count (N/4), endpoint
-  cc env <profile> [show] [...]                    Configure a custom API endpoint for a profile (wizard or flags)
+  cc list [<profile>] [--json] [--reveal]          List all profiles, or show one profile in detail
   cc migrate <src> <dest> [--force]                Copy artifact dirs (and config files) between profiles
   cc link <p>...                                   Link each profile's artifact dirs to ~/.claude-shared/
   cc unlink <profile>                              Restore a profile's private artifact dirs
@@ -32,13 +31,43 @@ for that launch. Args after the profile name are forwarded verbatim to claude.
 `;
 
 const HELP_BY_CMD = {
-  add: `cc add <profile>
+  add: `cc add <profile> [--custom [--base-url=URL --token=TOKEN ...]]
 
 Create a new profile directory without launching Claude.
 
+  cc add <profile>
+      Create a regular profile. It logs in with your Anthropic
+      subscription (OAuth) on the first 'cc use'.
+
+  cc add <profile> --custom
+      Create a profile routed through a custom, Anthropic-compatible API
+      endpoint — Moonshot/Kimi, OpenRouter, a self-hosted vLLM, a corporate
+      proxy, and so on. Opens an interactive wizard; the API token is never
+      echoed to the screen.
+
+  cc add <profile> --custom --base-url=URL --token=TOKEN
+                          [--model=NAME] [--opus=NAME] [--sonnet=NAME]
+                          [--haiku=NAME] [--subagent=NAME]
+      Same, non-interactive. --base-url and --token are required.
+
+Re-running 'cc add <profile> --custom' on an existing endpoint profile
+EDITS its configuration: the wizard prefills current values, and with
+flags only the flags you pass are changed. View a config with
+'cc list <profile>'.
+
+Billing: a custom-endpoint profile bills through the third-party provider,
+NOT your Anthropic subscription. A profile is born subscription or endpoint
+and stays that way — 'cc add --custom' refuses a profile that already has
+Anthropic OAuth credentials.
+
+The endpoint config lives at ~/.claude-profiles/<profile>/.cc-env.json with
+user-only permissions. It is never migrated and never linked.
+
 Examples:
   cc add work
-  cc add personal
+  cc add kimi --custom
+  cc add kimi --custom --base-url=https://api.moonshot.ai/anthropic --token=sk-... --model=kimi-k2.5
+  cc add kimi --custom --model=kimi-k3       # edit just the model later
 `,
   use: `cc use <profile> [...args]
 
@@ -54,7 +83,9 @@ Examples:
   cc use work --resume
   cc use personal -p "summarize this codebase"
 `,
-  list: `cc list [--json]
+  list: `cc list [<profile>] [--json] [--reveal]
+
+Without a profile name: list every profile as a table.
 
 Columns:
   Profile   - profile name
@@ -66,45 +97,15 @@ Columns:
   Endpoint  - custom-endpoint host from .cc-env.json, or "subscription" if the
               profile uses Anthropic's subscription OAuth
 
-With --json, emits an array of {name, dir, loggedIn, email, shared, endpoint}.
-`,
-  env: `cc env <profile> [show] [...]
-
-Configure a custom, Anthropic-compatible API endpoint for a profile. This
-routes the profile through a third-party provider (Moonshot/Kimi, OpenRouter,
-vLLM, a corporate proxy, ...) instead of Anthropic's subscription OAuth.
-
-Billing: an endpoint profile bills through the third-party provider, NOT your
-Anthropic subscription.
+With a profile name: print that one profile's detail, including its custom
+endpoint configuration if it has one. The API token is masked by default;
+--reveal prints it in full — do not paste that output anywhere.
 
-Forms:
-  cc env <profile>
-      Interactive wizard. Prompts for every field; the token is not echoed.
-      On an existing endpoint profile, the wizard runs in edit mode and
-      prefills current values.
-
-  cc env <profile> --base-url=URL --token=TOKEN
-                   [--model=NAME] [--opus=NAME] [--sonnet=NAME]
-                   [--haiku=NAME] [--subagent=NAME]
-      Non-interactive. --base-url and --token are required when creating;
-      when editing, only the flags you pass are changed.
-
-  cc env <profile> show [--reveal]
-      Print the endpoint configuration. The token is masked by default.
-      --reveal prints the FULL API key — do not paste that output anywhere.
-
-A profile is born either OAuth or endpoint and stays that way. cc env refuses
-to run on a profile that already has OAuth credentials. To stop using an
-endpoint, run 'cc remove <profile>' and recreate the profile.
-
-The config lives at ~/.claude-profiles/<profile>/.cc-env.json with user-only
-permissions. It is never migrated and never linked.
-
-Examples:
-  cc add kimi
-  cc env kimi --base-url=https://api.moonshot.ai/anthropic --token=sk-... --model=kimi-k2.5
-  cc env kimi show
-  cc use kimi
+  cc list                      Table of all profiles
+  cc list --json               Same, as a JSON array
+  cc list <profile>            Detail for a single profile
+  cc list <profile> --reveal   Detail with the full API token shown
+  cc list <profile> --json     Detail as a JSON object (token always masked)
 `,
   migrate: `cc migrate <src> <dest> [--force]
 
@@ -273,14 +274,104 @@ function parseFlagsStrict(args, flagNames, { allowPositional = false } = {}) {
   return { flags, positional };
 }
 
+// Flag name -> .cc-env.json field, for `cc add --custom`.
+const ENDPOINT_VALUE_FLAGS = {
+  '--base-url': 'base_url',
+  '--token': 'auth_token',
+  '--model': 'model',
+  '--opus': 'opus',
+  '--sonnet': 'sonnet',
+  '--haiku': 'haiku',
+  '--subagent': 'subagent',
+};
+
 async function cmdAdd(rest) {
-  const [name, ...extra] = rest;
-  if (!name) throw usageError('Usage: cc add <profile>');
+  const positional = [];
+  const provided = {};
+  let custom = false;
+
+  for (const a of rest) {
+    if (a.startsWith('-')) {
+      const eq = a.indexOf('=');
+      const flagName = eq === -1 ? a : a.slice(0, eq);
+      if (flagName === '--custom') {
+        custom = true;
+        continue;
+      }
+      if (Object.prototype.hasOwnProperty.call(ENDPOINT_VALUE_FLAGS, flagName)) {
+        if (eq === -1) {
+          throw usageError(`Flag ${flagName} requires a value: ${flagName}=VALUE`);
+        }
+        provided[ENDPOINT_VALUE_FLAGS[flagName]] = a.slice(eq + 1);
+        continue;
+      }
+      throw usageError(`Unknown flag: ${flagName}`);
+    }
+    positional.push(a);
+  }
+
+  const [name, ...extra] = positional;
+  if (!name) {
+    throw usageError('Usage: cc add <profile> [--custom [--base-url=URL --token=TOKEN ...]]');
+  }
   if (extra.length > 0) throw usageError(`cc add takes no extra arguments: ${extra[0]}`);
-  const { dir } = profiles.addProfile(name);
-  console.log(`Created profile "${name}" at ${dir}.`);
-  console.log(`Next: cc use ${name}`);
-  return 0;
+  profiles.validateProfileName(name);
+
+  if (Object.keys(provided).length > 0 && !custom) {
+    throw usageError(
+      'Endpoint flags (--base-url, --token, --model, ...) require --custom: ' +
+        `cc add ${name} --custom ...`,
+    );
+  }
+
+  // Plain subscription profile.
+  if (!custom) {
+    const { dir } = profiles.addProfile(name);
+    console.log(`Created profile "${name}" at ${dir}.`);
+    console.log(`Next: cc use ${name}`);
+    return 0;
+  }
+
+  // Custom endpoint profile. A fresh profile is created and configured; an
+  // existing endpoint profile is edited in place. Either way the directory
+  // must exist before runConfigure reads/writes .cc-env.json inside it.
+  const dir = profiles.profileDir(name);
+  const existed = fs.existsSync(dir);
+  if (!existed) profiles.addProfile(name);
+
+  let result;
+  try {
+    result = await envLib.runConfigure(name, dir, provided);
+  } catch (err) {
+    // A freshly-created profile that could not be configured leaves nothing
+    // behind — `cc add --custom` is atomic.
+    if (!existed) {
+      try {
+        removeRecursivelyPreservingLinks(dir);
+      } catch {
+        // best-effort cleanup
+      }
+    }
+    throw err;
+  }
+
+  if (!result.written) {
+    // Wizard cancelled.
+    if (!existed) {
+      try {
+        removeRecursivelyPreservingLinks(dir);
+      } catch {
+        // best-effort cleanup
+      }
+      console.log(`Cancelled. Profile "${name}" was not created.`);
+    } else {
+      console.log('Cancelled. No changes written.');
+    }
+    return result.code;
+  }
+
+  if (!existed) console.log(`Next: cc use ${name}`);
+  return result.code;
 }
 
 async function cmdUse(rest) {
@@ -308,8 +399,113 @@ async function cmdUse(rest) {
   return spawnClaude({ args: passthrough, profileDir: dir, extraEnv });
 }
 
+// `cc list <profile>` — detail for a single profile, including its custom
+// endpoint configuration if it has one.
+function cmdListOne(name, { json, reveal }) {
+  if (json && reveal) {
+    throw usageError('--reveal cannot be combined with --json.');
+  }
+  profiles.validateProfileName(name);
+  const dir = profiles.profileDir(name);
+  if (!fs.existsSync(dir)) {
+    const e = new Error(`Profile "${name}" does not exist. Create it with: cc add ${name}`);
+    e.exitCode = 1;
+    throw e;
+  }
+
+  const total = share.SHARED_SUBDIRS.length;
+  const sharedCount = share.SHARED_SUBDIRS.filter((sub) =>
+    isLinkLike(path.join(dir, sub)),
+  ).length;
+  const loggedIn = profiles.hasCredentials(dir);
+  const email = profiles.readEmail(dir);
+
+  let config = null;
+  let configError = false;
+  try {
+    config = envLib.readEnvConfig(dir);
+  } catch {
+    configError = true;
+  }
+
+  if (json) {
+    const obj = {
+      name,
+      dir,
+      loggedIn,
+      email,
+      shared: sharedCount,
+      endpoint: envLib.endpointSummary(dir),
+    };
+    if (config) {
+      obj.endpointConfig = {
+        base_url: config.base_url || null,
+        // The token is always masked in JSON output — scripts never need it.
+        auth_token: config.auth_token ? envLib.maskToken(config.auth_token) : null,
+        model: config.model || null,
+        opus: config.opus || config.model || null,
+        sonnet: config.sonnet || config.model || null,
+        haiku: config.haiku || config.model || null,
+        subagent: config.subagent || config.model || null,
+      };
+    }
+    process.stdout.write(JSON.stringify(obj, null, 2) + '\n');
+    return 0;
+  }
+
+  console.log(`Profile:   ${name}`);
+  console.log(`Directory: ${dir}`);
+  console.log(`LoggedIn:  ${loggedIn ? 'true' : 'false'}`);
+  console.log(`Email:     ${email || '-'}`);
+  console.log(`Shared:    ${sharedCount}/${total}`);
+
+  if (configError) {
+    console.log('Endpoint:  (invalid config — .cc-env.json is malformed)');
+    return 0;
+  }
+  if (!config) {
+    console.log('Endpoint:  subscription');
+    return 0;
+  }
+
+  console.log(
+    `Endpoint:  ${config.base_url ? envLib.hostOf(config.base_url) : '(invalid config)'}`,
+  );
+  console.log(`  Base URL:  ${config.base_url || '-'}`);
+  if (reveal) {
+    console.log(`  Token:     ${config.auth_token || '-'}`);
+  } else {
+    console.log(`  Token:     ${config.auth_token ? envLib.maskToken(config.auth_token) : '-'}`);
+  }
+  console.log(`  Model:     ${config.model || '-'}`);
+  console.log(`  Opus:      ${config.opus || config.model || '-'}`);
+  console.log(`  Sonnet:    ${config.sonnet || config.model || '-'}`);
+  console.log(`  Haiku:     ${config.haiku || config.model || '-'}`);
+  console.log(`  Subagent:  ${config.subagent || config.model || '-'}`);
+  if (reveal) {
+    console.log('');
+    console.log('WARNING: the full API key is printed above. Do not paste this output');
+    console.log('into chats, issues, screenshots, or logs.');
+  }
+  return 0;
+}
+
 function cmdList(rest) {
-  const { flags } = parseFlagsStrict(rest, ['--json']);
+  const { flags, positional } = parseFlagsStrict(rest, ['--json', '--reveal'], {
+    allowPositional: true,
+  });
+  const json = flags.has('--json');
+  const reveal = flags.has('--reveal');
+  const [name, ...extra] = positional;
+  if (extra.length > 0) throw usageError(`Unexpected argument: ${extra[0]}`);
+
+  if (name) {
+    return cmdListOne(name, { json, reveal });
+  }
+  if (reveal) {
+    throw usageError('--reveal requires a profile name: cc list <profile> --reveal');
+  }
+
   const list = profiles.listProfiles();
   const total = share.SHARED_SUBDIRS.length;
 
@@ -473,62 +669,6 @@ async function cmdMigrate(rest) {
   return 0;
 }
 
-// Flag name -> config field for `cc env`.
-const ENV_VALUE_FLAGS = {
-  '--base-url': 'base_url',
-  '--token': 'auth_token',
-  '--model': 'model',
-  '--opus': 'opus',
-  '--sonnet': 'sonnet',
-  '--haiku': 'haiku',
-  '--subagent': 'subagent',
-};
-
-async function cmdEnv(rest) {
-  const positional = [];
-  const provided = {};
-  let reveal = false;
-
-  for (const a of rest) {
-    if (a.startsWith('-')) {
-      const eq = a.indexOf('=');
-      const flagName = eq === -1 ? a : a.slice(0, eq);
-      if (flagName === '--reveal') {
-        reveal = true;
-        continue;
-      }
-      if (Object.prototype.hasOwnProperty.call(ENV_VALUE_FLAGS, flagName)) {
-        if (eq === -1) {
-          throw usageError(`Flag ${flagName} requires a value: ${flagName}=VALUE`);
-        }
-        provided[ENV_VALUE_FLAGS[flagName]] = a.slice(eq + 1);
-        continue;
-      }
-      throw usageError(`Unknown flag: ${flagName}`);
-    }
-    positional.push(a);
-  }
-
-  const [name, sub, ...extra] = positional;
-  if (!name) throw usageError('Usage: cc env <profile> [show] [--base-url=URL --token=TOKEN ...]');
-  if (extra.length > 0) throw usageError(`Unexpected argument: ${extra[0]}`);
-  profiles.validateProfileName(name);
-  const dir = profiles.profileDir(name);
-
-  if (sub === 'show') {
-    if (Object.keys(provided).length > 0) {
-      throw usageError('cc env <profile> show does not take configuration flags.');
-    }
-    return envLib.runShow(name, dir, { reveal });
-  }
-  if (sub) throw usageError(`Unknown subcommand for cc env: ${sub}`);
-  if (reveal) {
-    throw usageError('Unknown flag: --reveal (only valid with: cc env <profile> show)');
-  }
-
-  return envLib.runConfigure(name, dir, provided);
-}
-
 async function run(argv) {
   const [action, ...rest] = argv;
   if (!action || action === '--help' || action === '-h') {
@@ -544,6 +684,16 @@ async function run(argv) {
     printHelp(rest[0]);
     return 0;
   }
+  if (action === 'env') {
+    // `cc env` was removed in v0.3.1 — point upgraders at the new commands.
+    process.stderr.write(
+      color.stderr.red(
+        "'cc env' was removed in v0.3.1. Configure a custom endpoint with " +
+          "'cc add <profile> --custom', and view it with 'cc list <profile>'.",
+      ) + '\n',
+    );
+    return 2;
+  }
   switch (action) {
     case 'add':
       return await cmdAdd(rest);
@@ -551,8 +701,6 @@ async function run(argv) {
       return await cmdUse(rest);
     case 'list':
       return cmdList(rest);
-    case 'env':
-      return await cmdEnv(rest);
     case 'migrate':
       return await cmdMigrate(rest);
     case 'link':

package/lib/env.js

@@ -1,12 +1,15 @@
 'use strict';
 
-// Per-profile custom API endpoints (v0.3).
+// Per-profile custom API endpoints.
 //
 // A profile may carry a `.cc-env.json` file that routes Claude Code through an
 // Anthropic-compatible third-party provider (Moonshot/Kimi, OpenRouter, vLLM,
 // corporate proxies) instead of Anthropic's subscription OAuth. The file holds
 // an API key and is treated with the same care as `.credentials.json`: it is
 // never migrated, never linked, and written with user-only file permissions.
+//
+// Endpoint profiles are created and edited through `cc add <profile> --custom`;
+// this module supplies the configuration logic that command delegates to.
 
 const fs = require('fs');
 const path = require('path');
@@ -338,7 +341,7 @@ async function runWizard(name, existing, io) {
     }
   }
 
-  io.write(`\ncchost endpoint configuration for profile '${name}'\n\n`);
+  io.write(`\ncchost endpoint configuration for profile '${name}'${isEdit ? ' (editing)' : ''}\n\n`);
   for (const field of WIZARD_FIELDS) {
     await promptOne(field, config, io, isEdit);
   }
@@ -360,20 +363,23 @@ async function runWizard(name, existing, io) {
 // Command orchestration (called from cli.js)
 // ---------------------------------------------------------------------------
 
-// `cc env <profile>` and `cc env <profile> --flags`.
+// Configures a profile's custom endpoint. Called by `cc add <profile> --custom`
+// (both for first-time creation and for editing an existing endpoint profile).
 // `provided` is a partial config of fields supplied via flags.
 // `opts.io` injects wizard IO (tests); `opts.isTTY` overrides TTY detection.
+//
+// Returns `{ code, written }`: `written` is false only when the interactive
+// wizard was cancelled, so the caller can clean up a freshly-created profile.
 async function runConfigure(name, profileDir, provided, opts = {}) {
   if (!fs.existsSync(profileDir)) {
     throw stateError(`Profile "${name}" does not exist. Create it with: cc add ${name}`);
   }
   if (hasOAuthState(profileDir)) {
     throw stateError(
-      `Profile '${name}' has OAuth credentials.\n` +
-        'Endpoint profiles must be created on a fresh profile.\n' +
-        'Run:\n' +
-        '  cc add <new-name>\n' +
-        '  cc env <new-name>',
+      `Profile '${name}' has OAuth credentials and cannot be converted to a custom endpoint.\n` +
+        'A profile is born subscription or endpoint and stays that way.\n' +
+        'Create a fresh endpoint profile instead:\n' +
+        '  cc add <new-name> --custom',
     );
   }
 
@@ -400,7 +406,7 @@ async function runConfigure(name, profileDir, provided, opts = {}) {
     console.log(
       `${editing ? 'Updated' : 'Created'} endpoint config for profile '${name}' → ${hostOf(merged.base_url)}.`,
     );
-    return 0;
+    return { code: 0, written: true };
   }
 
   // Interactive wizard.
@@ -408,52 +414,22 @@ async function runConfigure(name, profileDir, provided, opts = {}) {
   if (!io) {
     const isTTY = opts.isTTY != null ? opts.isTTY : process.stdin.isTTY;
     if (!isTTY) {
-      throw usageError('cc env requires either flags or an interactive terminal.');
+      throw usageError(
+        'cc add --custom requires either endpoint flags or an interactive terminal.',
+      );
     }
     io = defaultWizardIo();
   }
 
   const result = await runWizard(name, existing, io);
   if (result == null) {
-    console.log('Cancelled. No changes written.');
-    return 0;
+    return { code: 0, written: false };
   }
   writeEnvConfig(profileDir, result);
   console.log(
     `${editing ? 'Updated' : 'Created'} endpoint config for profile '${name}' → ${hostOf(result.base_url)}.`,
   );
-  return 0;
-}
-
-// `cc env <profile> show [--reveal]`.
-function runShow(name, profileDir, { reveal = false, write } = {}) {
-  const w = write || ((s) => process.stdout.write(s + '\n'));
-  if (!fs.existsSync(profileDir)) {
-    throw stateError(`Profile "${name}" does not exist.`);
-  }
-  const config = readEnvConfig(profileDir); // throws on malformed file
-  if (config == null) {
-    throw stateError(`Profile '${name}' is not an endpoint profile (no ${ENV_FILE}).`);
-  }
-
-  w(`Endpoint configuration for profile '${name}':`);
-  w(`  Base URL:   ${config.base_url || '-'}`);
-  if (reveal) {
-    w(`  Token:      ${config.auth_token || '-'}`);
-  } else {
-    w(`  Token:      ${config.auth_token ? maskToken(config.auth_token) : '-'}`);
-  }
-  w(`  Main model: ${config.model || '-'}`);
-  w(`  Opus:       ${config.opus || config.model || '-'}`);
-  w(`  Sonnet:     ${config.sonnet || config.model || '-'}`);
-  w(`  Haiku:      ${config.haiku || config.model || '-'}`);
-  w(`  Subagent:   ${config.subagent || config.model || '-'}`);
-  if (reveal) {
-    w('');
-    w('WARNING: the full API key is printed above. Do not paste this output');
-    w('into chats, issues, screenshots, or logs.');
-  }
-  return 0;
+  return { code: 0, written: true };
 }
 
 module.exports = {
@@ -475,6 +451,5 @@ module.exports = {
   validateField,
   runWizard,
   runConfigure,
-  runShow,
   defaultWizardIo,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cchost",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Host multiple isolated Claude Code accounts on one machine via the `cc` command.",
   "keywords": [
     "claude",