feat: isolate qBraid account profiles - #14
Merged
Conversation
Detect macOS listeners with lsof before Bash network redirects. Prefer GNU stat syntax before the BSD fallback. Run Credential Locker coverage under Windows PowerShell 5.1.
Use netcat when macOS Bash cannot probe TCP listeners. Normalize native PowerShell command output before matching.
Preserve the hosted macOS Python path before isolating commands. Decode captured Windows YAML explicitly as UTF-8.
Use the macOS system lsof outside the isolated test PATH. Capture expected Windows native-command failures before assertions.
Document installation, organization switching, statusline identity, credentials, model limits, troubleshooting, and removal. Keep user-provided organization labels marked local even when the API returns a verified name.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
One mutable qBraid credential could charge one organization while status and model state described another. Plain Claude settings also exposed a reusable gateway key to project-controlled URLs and hooks.
This adds named, organization-bound profiles with atomic metadata generations. Keys live in Keychain, Credential Locker, or Linux Secret Service. Headless Linux has a documented private file fallback. Each launch owns a private loopback proxy, random local bearer, immutable status snapshot, and capability-aware context policy.
Legacy installs migrate without breaking running sessions. Successful migration removes old plaintext credentials and retired generation secrets. Resume always needs explicit profile confirmation. Project and local Claude settings are excluded from wrapped sessions.
Coordinated contract
qBraid/qbraid-api#1025 preserves Claude Code adaptive thinking, display policy, and effort at the Bedrock boundary.
Required order:
The cross-repo impact mapper does not index qbraid-code. Its empty result is a coverage gap, not safety evidence.
Validation
git diff --checkGenerated by
gpt-5.6-solusing thePrime Agentharness.