feat(workflow): secret-free user environment profile for cross-machine restore

10-workflow/workflow-assistance/README.md

@@ -564,6 +564,7 @@ python scripts/security/scan_agent_rules.py templates skills docs scripts
 - `docs/workflow/token-monitor.md`：本地 Token Monitor 的真实 usage 口径、启动方式和 Codex OAuth 限制；
 - `docs/workflow/hermes-runtime-layout.md`：Hermes 全局运行目录分层、可恢复迁移、升级验证与清理边界；
 - `docs/workflow/gateway-cron-delivery.md`：Gateway、cron、sleep-mode、TUI 与外部消息平台的投递边界；
+- `docs/workflow/user-environment-profile.md`：Hermes/Codex 用户配置与技能清单的无密画像、导出器与跨机器恢复流程；
 - `docs/workflow/gpt-deepseek-ccswitch-codex-upgrade.md`：全链路工作流和路由矩阵；
 - `docs/workflow/error-fixes-2026-07-04.md`：Windows/Git/Python/GitHub CLI 实际故障记录；
 - `docs/mcp/workflow-mcp-stack.md`：MCP 默认策略；

10-workflow/workflow-assistance/codex-assets/skills/workflow-assistance-self-improvement/SKILL.md

@@ -65,6 +65,23 @@ python scripts/workflow/skill_lifecycle.py --root <root> backup <name>
 - Auto-grown knowledge persists by promoting it into the module's
   `codex-assets` skills (via PR) — never only in a machine-local sidecar.
 
+## User environment preservation
+
+Beyond skills, preserve the user's Hermes/Codex configuration and skill lists
+in neutral, secret-free form so a machine change does not start from zero:
+
+- Export: `python scripts/workflow/user_profile_export.py` — read-only against
+  user homes; writes `config/user-environment-profile.json` (tracked) with
+  non-secret config values, `.env` key names only, and skill inventories
+  (Hermes skills, Codex `~/.agents/skills`).
+- Redaction is fail-closed: any value matching a secret pattern is
+  `[REDACTED]`; an unredacted value makes the export refuse to write.
+- Restore: see `docs/workflow/user-environment-profile.md` — `sync` deploys
+  the module skills; the profile tells you which config keys exist and which
+  secrets must be re-entered on the new machine.
+- The profile is a snapshot: re-run the exporter after meaningful config or
+  skill changes and commit the refresh.
+
 ## Pitfalls
 
 - Archiving a repository-owned skill (the provenance filter blocks it —

10-workflow/workflow-assistance/config/codex-enhancement-boundary.json

@@ -23,7 +23,7 @@
   "capabilities": {
     "detect": {
       "mode": "READ_ONLY",
-      "allowed": ["Codex executable version when available", "declared target paths", "managed asset hashes", "owned-state metadata"],
+      "allowed": ["Codex executable version when available", "declared target paths", "managed asset hashes", "owned-state metadata", "secret-free user environment inventory (Hermes/Codex config keys + skill lists via user_profile_export.py)"],
       "forbidden": ["private config body disclosure", "credential or session inspection"]
     },
     "plan": {