enigma-cli 1.7.0 → 1.8.0

package/README.md

@@ -35,9 +35,11 @@ enigma install         Install/update agent skills
 enigma security        Set up git security hooks in the current repo
 enigma guard [--all]   Run the commit guard (staged files, or all tracked)
 enigma config [k v]    Show or set runtime toggles (e.g. config commit-emoji off)
-enigma claude [acct]   Launch Claude Code using an account (active if omitted);
+enigma <tool> [acct]   Launch claude | codex | opencode with an account
+                       (resolution: explicit > active profile > tool active);
                        auto-syncs deployed skills first
-enigma account ...     Manage Claude Code accounts (list/add/use/login/remove)
+enigma account ...     Manage per-tool accounts (list/add/use/login/remove)
+enigma profile ...     Group one account per tool (list/add/use/set/unset/remove)
 enigma seal            Maintenance: (re)compute skill content hashes
 enigma check           Integrity gate: verify skills are well-formed and sealed
 enigma help | version
@@ -100,13 +102,16 @@ On every commit the guard, OS-agnostically:
 Each protection is individually toggleable (saved to `.githooks/enigma-guard.json`).
 Bypass once with `git commit --no-verify`.
 
-## Multiple Claude Code accounts
+## Multiple accounts and profiles
 
-Work across separate workflows with different Claude Code accounts/profiles - for
-example your **company** Claude Code account and your **personal** one - keeping
-each fully isolated and switching between them without ever logging out. Each
-profile has its own credentials, session, and history, so client work never mixes
-with personal projects.
+Work across separate workflows with different accounts per tool - for example
+your **company** Claude Code account and your **personal** one - keeping each
+fully isolated and switching between them without ever logging out. Each account
+has its own credentials, session, and history, so client work never mixes with
+personal projects. Supported tools: **Claude Code** (`CLAUDE_CONFIG_DIR`),
+**OpenAI Codex** (`CODEX_HOME`) and **OpenCode** (a private `XDG_DATA_HOME` /
+`XDG_CONFIG_HOME` pair per managed account; its default account keeps your real
+environment untouched).
 
 > This is for legitimate, professional account separation (one account per
 > employer/context, as many organizations require). It is **not** a way to evade
@@ -122,29 +127,45 @@ for you with that variable set - the same command on macOS, Linux and Windows.
 ```bash
 enigma account add work --login   # create 'work' and run /login to authenticate
 enigma account add personal       # create 'personal' (log in later)
+enigma account add acme -t codex  # create a Codex account
 enigma account list               # show all accounts (active one marked *)
 enigma claude work                # run Claude Code as 'work'
+enigma codex acme                 # run Codex as 'acme'
 enigma account use personal       # make 'personal' the active account
-enigma claude                     # run the active account
-enigma claude work -- --version   # forward args after -- to Claude
+enigma claude                     # run the resolved account (profile > active)
+enigma claude work -- --version   # forward args after -- to the tool
 enigma account remove work        # delete an account and its config dir
 ```
 
-Your existing `~/.claude` is always available as the built-in `default` account
-(it is never deleted). New accounts live under `~/.enigma/<tool>/<name>/`. A bare
-`claude` command keeps using `~/.claude` as before.
-
-From the hub TUI (`enigma`), the **Accounts** panel lists accounts - showing the
-tool (e.g. Claude Code) and the signed-in email for each - and lets you **add**
-(`a`), set active (`enter`), **connect**/log in (`c`), or remove (`d`). Adding
-prompts for a name and then offers to connect right away. Connecting closes the
-hub, runs the tool's own login flow (for Claude: it launches and you run
-`/login`), then reopens the hub. `enigma account list` shows the same details,
-and `enigma account add <name>` does the same from the CLI.
-
-The mechanism is tool-agnostic by design: only Claude Code is wired up today, but
-the same per-account-config-dir approach extends to other agents (e.g. Codex via
-`CODEX_HOME`). Target another tool with `--tool <name>` on `account` commands.
+Your existing `~/.claude` / `~/.codex` / opencode setup is always available as
+each tool's built-in `default` account (never deleted). New accounts live under
+`~/.enigma/<tool>/<name>/`. Bare `claude` / `codex` / `opencode` commands keep
+using your real environment as before.
+
+### Profiles (one account per tool)
+
+A profile pins one account per tool under a single name - e.g. profile `work` =
+Claude Code `work` + Codex `acme`. While a profile is active, `enigma <tool>`
+launches that profile's account for the tool (explicit account arguments still
+win; unmapped tools fall back to their own active account):
+
+```bash
+enigma profile add work                 # create the profile
+enigma profile set work claude work     # pin claude account 'work'
+enigma profile set work codex acme      # pin codex account 'acme'
+enigma profile use work                 # activate (enigma claude/codex now use it)
+enigma profile list                     # profiles + mappings (* = active)
+enigma profile use none                 # deactivate
+```
+
+From the hub TUI (`enigma`), the **Accounts** panel lists every tool's accounts -
+with the signed-in identity (email for Claude/Codex, connected providers for
+OpenCode) - and lets you **add** (`a`), set active (`enter`), **connect**/log in
+(`c`), or remove (`d`). Adding first asks **which tool** with a searchable
+selector (type to filter, like opencode's model picker), then the account name,
+then offers to connect right away. The **Profiles** panel shows each profile's
+mappings and switches the active one with `enter` (`(none)` deactivates);
+create/edit profiles via `enigma profile`.
 
 ## GitHub CLI telemetry (default off)
 

package/assets/skills/backend-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Backend/API architecture: controller-service-repository layering, API and request optimization, server-side caching (Redis), and Zod boundary validation.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "c442bc9e39a7710cb709ef2abb8d15ecd8aa16ed4f5c8af92b7af6877401cba4"
 }

package/assets/skills/ciphera-style-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.1",
   "provider": "FJRG2007/enigma",
   "description": "Ciphera code style conventions (formatting, naming, imports, comments, code-level anti-patterns; TypeScript-first, language-agnostic).",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "74f638aec13e8c93257fe1ad604c28b07e9a7c456796a4ceefcc99217d9e7039"
 }

package/assets/skills/code-review-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Pre-delivery self-review gate, prioritized review dimensions, and change-quality criteria.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "3d3bbe0602d5bbb4afe37648fe3c2fa39376b1bcbac5d8c441f01fad1e866ed0"
 }

package/assets/skills/core-engineering-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.4.0",
   "provider": "FJRG2007/enigma",
   "description": "Core engineering execution policy and harness orchestration (highest-authority rules).",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "c9c69c59516794311cb7b306ed4d4ad971824de3689a39c2b86c7669c73f2e8b"
 }

package/assets/skills/database-expert/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.0",
   "provider": "FJRG2007/enigma",
   "description": "Senior database architecture policy: query optimization, anti-duplication/normalization, scalability, and RGPD/GDPR encryption.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "2883bcecb3202683ae6f81b073c3d6a9cec9c55029e011bdd06ba7ac3537297e"
 }

package/assets/skills/debugging-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Reproduce-isolate-fix debugging methodology with root-cause discipline and regression verification.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "14b0064c8b33a0dc85e51464b05005cf5801c756b1101789a6924b9548420f6b"
 }

package/assets/skills/dependency-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Dependency and supply-chain security: lockfiles and reproducible installs, version pinning, vulnerability auditing, vetting/minimizing packages, vendoring, and SBOM/provenance.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "6375d835c2aef2c9bd31ce116444dc3d796f510f9970a213aa3ac4696d7e21b9"
 }

package/assets/skills/frontend-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.0",
   "provider": "FJRG2007/enigma",
   "description": "Frontend architecture: reusable components, abstraction thresholds, state management, and optimistic UI with rollback.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "33fa1e9f667ef26203a3d6c892121efe12b0cddb706c195492fa97e080fba115"
 }

package/assets/skills/git-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.2.0",
   "provider": "FJRG2007/enigma",
   "description": "Git & contribution policy (senior engineering standards).",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "ada4b7eb5bb7e013429e23703c271c0f34b0d76327c059efa148ea2794f96178"
 }

package/assets/skills/security-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Application and AI-agent security: secrets, authn/authz (least privilege), OWASP Top 10, transport/crypto baseline, secure logging, and agent/MCP/tool-use safety.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "9971e9d9127397d0152e89d24aad3191e2935e55a8483db7fd15f5d4d7a60e7a"
 }

package/assets/skills/testing-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Test strategy, coverage gates, deterministic tests, mocking discipline, and regression-first bug fixing.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "d19fa8ec7985ed231478be504d3c80360897f555d0bc0624bea19c091f459fb0"
 }

package/assets/skills/validation-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Strict frontend + backend schema validation, schema consistency, and safe client-facing error handling.",
-  "cliVersion": "1.7.0",
+  "cliVersion": "1.8.0",
   "sha": "a33622a2f810ee4cea39824cb1a7ca34b355a917d4224025df50d77dd74f0b3a"
 }

package/bin/checksums.json

@@ -1,6 +1,6 @@
 {
-  "enigma-darwin-arm64": "772de23d6f9a752cdc138d8fdc009ab9d49397e489e91b18d8c655e840c5d40c",
-  "enigma-linux-arm64": "29a19f50fe2468c59f01c8b934f729d78fb7c9df1fed89941fab318cb0e02659",
-  "enigma-linux-x64": "96d2da3190504ecd78ba6a06e17d893662a93cd4eacd6946b68b5669f945f034",
-  "enigma-win32-x64.exe": "2ea53901a4b7a7ddb845b91122bbd248bcc82bd6fed335e712aa6e1e8f9f4af1"
+  "enigma-darwin-arm64": "4398574b41b35afb6eae6accb4755ee54ca752bac7bcf2ee0485cf5ea666a7c0",
+  "enigma-linux-arm64": "a47231b598660c9ae52e5d79146a19a68e06784f9b9f1b9ddf261c6bcb397d39",
+  "enigma-linux-x64": "022e9e7153470ba909a0589a3ed9f20b4d3cc1d713da1abebb1232d1b74ff716",
+  "enigma-win32-x64.exe": "1877fcb6f7de41a114fdf2d5ea1706d8beef846c0118d054bc50be096510ce9b"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "enigma-cli",
-  "version": "1.7.0",
+  "version": "1.8.0",
   "description": "Everything you need to work with a coding agent: install shared policy skills for Claude Code, OpenAI Codex and opencode, and set up portable git security hooks.",
   "type": "module",
   "bin": {