{"id":"account-rotation","name":"account-rotation","summary":"発信者が選択したコーディングエージェントアカウントを切り替え、観察した身元を報告します。トリガー:「アカウントを切り替える」「コーディングエージェントアカウントをローテーションする」。","body":"# Account rotation — credential adapter\n\nChoose the credential tool from both host and agent family, perform only the\nexplicit account switch, and report the identity observed by the matching\nruntime.\n\nVerifying identity through the target runtime works because the runtime is the\nonly party whose opinion matters: credential files can be swapped perfectly\nand still authenticate as the old account in an already-running process.\n\nNamed failure mode — **stale-process identity**: declaring the rotation done\nwhile every live session still holds the previous account's tokens in memory.\n\nAnti-pattern: confirming a switch by diffing credential file bytes.\nCorrective: ask the matching runtime who it is now, and report whether a new\nprocess is required for the answer to hold.\n\n## Boundary\n\n- Perform only the account switch the caller explicitly authorized; rotation\n  mutates host credential state and is never implied by repository access.\n- The credential tool is caller- or operator-selected per host and agent family;\n  the names below are this operator's routes, not a universal prescription. On\n  macOS with Claude credentials the route is `claude-acct` (Keychain-backed);\n  file-backed Codex, Gemini, Linux, or WSL credentials use `caam`. Never use\n  `caam` for macOS Claude account operations.\n- Verify account identity through the target runtime; token bytes are not account\n  identity.\n- If neither the selected credential tool nor a runtime identity probe is\n  available, report that absence as a disclosed fact and stop. Never fall back to\n  diffing credential-file bytes to declare a switch done.\n- Existing processes retain credentials already loaded in memory. Rotation\n  affects a new process.\n- This skill does not restart work, resume a task, select a pane, move repository\n  state, or decide what happens after the switch.\n\nReturn the host, agent family, selected tool, requested account/profile, the\nidentity observed before and after the switch, whether any live runtime still\nholds the previous account (a partial rotation), the command exit code, and\nwhether a new process is required for the new identity to hold.","author":"@boshu2","ownerProfile":null,"authorContacts":null,"sourceUrl":"https://github.com/boshu2/agentops/tree/main/images/gemini/skills/account-rotation","license":"Apache-2.0","category":"document","lang":"en","tokens":433,"stars":0,"calls30d":2,"claimed":false,"visibility":"public","origin":"crawler","version":"0.1.0","createdAt":"2026-08-22","updatedAt":"2026-08-22","files":[],"requires":{"mcp":[],"tools":[]},"safety":{"flags":[],"scannedAt":"2026-08-22","hasScripts":false,"networkEndpoints":[]}}