@bridge4dev/runner 0.65.1 → 0.66.0

package/dist/commit-message.js

@@ -1,6 +1,7 @@
 import { query } from '@anthropic-ai/claude-agent-sdk';
 import { assertClaudeInstalled, claudeExecutableOption } from './agent-binary.js';
 import { scrubbedEnv } from './adapters/claude.js';
+import { activeAccountHome, withAccountHome } from './claude-homes.js';
 import { gitBranchDiff } from './gitops.js';
 import { isSecretPath, maskString } from './policy.js';
 /**
@@ -160,7 +161,9 @@ export async function proposeCommitMessage(input, queryFn = query) {
             prompt: buildPrompt(input, diff),
             options: {
                 cwd: input.worktreePath,
-                env: scrubbedEnv(),
+                // The machine's active account (#422), with the same rule as a session:
+                // its home, and no operator token above it.
+                env: withAccountHome(scrubbedEnv(), activeAccountHome()),
                 // The second place Claude `Options` are built. It must follow the same
                 // constant, or after C3 commit messages would still be written by the
                 // bundled binary while sessions had moved to the system one.

package/dist/config.d.ts

@@ -15,12 +15,12 @@ declare const ConfigSchema: z.ZodObject<{
         name: z.ZodString;
         token: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         id: string;
+        name: string;
         token: string;
     }, {
-        name: string;
         id: string;
+        name: string;
         token: string;
     }>;
     mcp: z.ZodOptional<z.ZodObject<{
@@ -179,10 +179,13 @@ declare const ConfigSchema: z.ZodObject<{
         ws_url: string;
     };
     server: {
-        name: string;
         id: string;
+        name: string;
         token: string;
     };
+    codex?: {
+        auth: "link" | "own";
+    } | undefined;
     checkpoints?: {
         enabled: boolean;
     } | undefined;
@@ -190,8 +193,8 @@ declare const ConfigSchema: z.ZodObject<{
         url: string;
         token: string;
     } | undefined;
-    codex?: {
-        auth: "link" | "own";
+    agents?: {
+        install_enabled: boolean;
     } | undefined;
     limits?: {
         max_sessions?: number | undefined;
@@ -204,19 +207,19 @@ declare const ConfigSchema: z.ZodObject<{
     verify?: {
         enabled: boolean;
     } | undefined;
-    agents?: {
-        install_enabled: boolean;
-    } | undefined;
 }, {
     api: {
         url: string;
         ws_url: string;
     };
     server: {
-        name: string;
         id: string;
+        name: string;
         token: string;
     };
+    codex?: {
+        auth?: "link" | "own" | undefined;
+    } | undefined;
     checkpoints?: {
         enabled?: boolean | undefined;
     } | undefined;
@@ -224,8 +227,8 @@ declare const ConfigSchema: z.ZodObject<{
         url: string;
         token: string;
     } | undefined;
-    codex?: {
-        auth?: "link" | "own" | undefined;
+    agents?: {
+        install_enabled?: boolean | undefined;
     } | undefined;
     limits?: {
         max_sessions?: number | undefined;
@@ -238,9 +241,6 @@ declare const ConfigSchema: z.ZodObject<{
     verify?: {
         enabled?: boolean | undefined;
     } | undefined;
-    agents?: {
-        install_enabled?: boolean | undefined;
-    } | undefined;
 }>;
 export type RunnerConfig = z.infer<typeof ConfigSchema>;
 export declare function loadConfig(): RunnerConfig | null;

package/dist/index.js

@@ -15,6 +15,9 @@ import { loadConfig, mergeIntoPairedConfig, requireConfig, saveConfig, } from '.
 import { log } from './log.js';
 import { installIsWritable, installPrefixFor, isSupervisedProcess, restartCapability, manualUpdateCommand, resolveInstalledPackageDir, } from './self-update.js';
 import { applyStoredClaudeToken } from './agent-auth.js';
+import { discardAbandonedStagingHomes, recoverInterruptedSwaps, refreshAccountIdentity, } from './claude-homes.js';
+import { ACCOUNT_AGENTS, ACCOUNT_COMMANDS } from './account-commands.js';
+import { MACHINE_ACCOUNT_ID } from './login-marks.js';
 import { Supervisor } from './supervisor.js';
 import { readStatusFile, isPidAlive, writeStatusFile, STATUS_FRESH_MS } from './status-file.js';
 import { RunnerWsClient } from './ws-client.js';
@@ -515,6 +518,13 @@ function runnerCapabilities(apiUrlOverride) {
          * `kind: 'oom'` is inferred from the cgroup counter — see `crash-note.ts`.
          */
         ...(LAST_EXIT ? { lastExit: LAST_EXIT } : {}),
+        /**
+         * #422 (R11): the agents this runner keeps several logins for. Static per
+         * version – the LIST of accounts is always asked with `agent_accounts`,
+         * never read from here (a snapshot taken at start, #395). The dashboard
+         * shows the account window only to an agent named here.
+         */
+        accounts: [...ACCOUNT_AGENTS],
         /** Commands beyond the stage-A/B set. */
         commands: [
             'purge_session',
@@ -578,6 +588,10 @@ function runnerCapabilities(apiUrlOverride) {
             // ANSWERS the command, with a sentence saying why — which is a better
             // outcome than a frame nobody replies to.
             'runner_restart',
+            // #422: list, sign in to, switch and forget agent logins (plan §8).
+            // Unconditional: they read and write only the runner's own state, and an
+            // agent they do not serve yet is answered with a sentence.
+            ...ACCOUNT_COMMANDS,
         ],
     };
 }
@@ -955,6 +969,31 @@ async function cmdDaemon() {
     if (applyStoredClaudeToken()) {
         log.info('daemon: using the Claude token stored on this server');
     }
+    /**
+     * #422: a swap of Claude homes the previous daemon died inside is finished or
+     * undone before anything can run under an account; and who the machine login
+     * is gets asked once, in the background (R14 c) – the verdict and the list read
+     * the answer, the minute poll never asks.
+     */
+    try {
+        recoverInterruptedSwaps();
+    }
+    catch (error) {
+        log.warn('daemon: could not finish an interrupted swap of Claude homes', {
+            error: String(error),
+        });
+    }
+    try {
+        // A sign-in the previous daemon accepted but never adopted (S2): nothing can
+        // be adopting before the supervisor exists.
+        discardAbandonedStagingHomes();
+    }
+    catch (error) {
+        log.warn('daemon: could not remove sign-in homes a previous daemon left', {
+            error: String(error),
+        });
+    }
+    void refreshAccountIdentity(MACHINE_ACCOUNT_ID).catch(() => undefined);
     const agents = installedAgents();
     const ws = new RunnerWsClient(config.api.ws_url, config.server.token, runnerCapabilities());
     const codex = agents.includes('codex') ? bootstrapCodex(config) : null;
@@ -1379,6 +1418,15 @@ async function runnerChecks() {
     });
     return checks;
 }
+/** « · account <email> (saved)» – nothing for the machine login nobody named. */
+function accountLine(account) {
+    if (!account)
+        return '';
+    if (account.id === MACHINE_ACCOUNT_ID) {
+        return account.email ? ` · machine login ${account.email}` : '';
+    }
+    return ` · saved account ${account.email ?? account.id}`;
+}
 async function agentChecks() {
     const me = runnerIdentity();
     // The probes log a verdict line each, which belongs in the journal, not in
@@ -1440,8 +1488,12 @@ async function agentChecks() {
         checks.push({
             ok: signedIn,
             name: `${agent} login`,
+            // Which account the verdict is about (#422): the same rule as the panel,
+            // read from the same file, so doctor and the dashboard cannot answer about
+            // two different logins on one machine.
             detail: (info.detail ?? info.status) +
-                (info.expiresAt ? ` · until ${formatLocalDay(info.expiresAt)}` : ''),
+                (info.expiresAt ? ` · until ${formatLocalDay(info.expiresAt)}` : '') +
+                accountLine(info.activeAccount),
             ...(signedIn
                 ? {}
                 : {

package/dist/login-marks.d.ts

@@ -0,0 +1,31 @@
+import type { RelayAgentName } from './agent-registry.js';
+/**
+ * What the agent actually experienced with a sign-in — per agent AND per account.
+ *
+ * The credentials file cannot tell us the provider revoked a login: the refresh
+ * token still sits there, dated. The one authority on that is a real refusal
+ * from a real run — so a session that failed to authenticate demotes the file's
+ * verdict for a while, and any successful turn clears it again.
+ *
+ * Moved out of `auth-relay.ts` for #422 and keyed by account as well as agent.
+ * With several Claude logins on one machine «Claude was refused» stopped being
+ * a statement about anything: the session that was refused ran under ONE
+ * account, and the machine may have been switched to another since. The mark
+ * belongs to the account the session started under (R14) – which is why both
+ * the account list (`claude-homes.ts`) and the panel verdict (`auth-relay.ts`)
+ * read it from here rather than each keeping a copy.
+ *
+ * Process memory on purpose: no protocol, no disk. The consequence is worth
+ * naming — restarting the daemon forgets the refusal and the panel goes back
+ * to trusting the file until the next session tries. (A saved account also
+ * carries a mark on disk, D2 – see `markLoginExpired` in `claude-homes.ts`.)
+ */
+/** The machine's own login – the one row every agent has. */
+export declare const MACHINE_ACCOUNT_ID = "machine";
+/** A session under this agent and account was just refused. */
+export declare function noteRefusal(agent: RelayAgentName, accountId?: string): void;
+/** The sign-in worked again. Answers whether a refusal was being held. */
+export declare function clearRefusal(agent: RelayAgentName, accountId?: string): boolean;
+/** Is a refusal still being held against this agent and account? */
+export declare function refusalActive(agent: RelayAgentName, accountId?: string): boolean;
+//# sourceMappingURL=login-marks.d.ts.map

package/dist/login-marks.js

@@ -0,0 +1,47 @@
+/**
+ * What the agent actually experienced with a sign-in — per agent AND per account.
+ *
+ * The credentials file cannot tell us the provider revoked a login: the refresh
+ * token still sits there, dated. The one authority on that is a real refusal
+ * from a real run — so a session that failed to authenticate demotes the file's
+ * verdict for a while, and any successful turn clears it again.
+ *
+ * Moved out of `auth-relay.ts` for #422 and keyed by account as well as agent.
+ * With several Claude logins on one machine «Claude was refused» stopped being
+ * a statement about anything: the session that was refused ran under ONE
+ * account, and the machine may have been switched to another since. The mark
+ * belongs to the account the session started under (R14) – which is why both
+ * the account list (`claude-homes.ts`) and the panel verdict (`auth-relay.ts`)
+ * read it from here rather than each keeping a copy.
+ *
+ * Process memory on purpose: no protocol, no disk. The consequence is worth
+ * naming — restarting the daemon forgets the refusal and the panel goes back
+ * to trusting the file until the next session tries. (A saved account also
+ * carries a mark on disk, D2 – see `markLoginExpired` in `claude-homes.ts`.)
+ */
+/** The machine's own login – the one row every agent has. */
+export const MACHINE_ACCOUNT_ID = 'machine';
+const AUTH_FAILURE_TTL_MS = 15 * 60_000;
+const refusals = new Map();
+const keyOf = (agent, accountId) => `${agent}:${accountId}`;
+/** A session under this agent and account was just refused. */
+export function noteRefusal(agent, accountId = MACHINE_ACCOUNT_ID) {
+    refusals.set(keyOf(agent, accountId), Date.now());
+}
+/** The sign-in worked again. Answers whether a refusal was being held. */
+export function clearRefusal(agent, accountId = MACHINE_ACCOUNT_ID) {
+    return refusals.delete(keyOf(agent, accountId));
+}
+/** Is a refusal still being held against this agent and account? */
+export function refusalActive(agent, accountId = MACHINE_ACCOUNT_ID) {
+    const key = keyOf(agent, accountId);
+    const at = refusals.get(key);
+    if (at === undefined)
+        return false;
+    if (Date.now() - at > AUTH_FAILURE_TTL_MS) {
+        refusals.delete(key);
+        return false;
+    }
+    return true;
+}
+//# sourceMappingURL=login-marks.js.map

package/dist/protocol.d.ts

@@ -235,11 +235,11 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         token: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    mode: "ask" | "plan" | "auto" | "full";
-    agent: "CLAUDE" | "CODEX";
-    status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+    mode: "plan" | "ask" | "auto" | "full";
     id: string;
+    status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
     kind: "TICKET" | "CHAT";
+    agent: "CLAUDE" | "CODEX";
     model: string | null;
     effort: string | null;
     prompt: string;
@@ -286,10 +286,10 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         baseSha?: string | undefined;
     } | undefined;
 }, {
-    agent: "CLAUDE" | "CODEX";
-    status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
     id: string;
+    status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
     kind: "TICKET" | "CHAT";
+    agent: "CLAUDE" | "CODEX";
     prompt: string;
     providerSessionId: string | null;
     workspace: {
@@ -316,7 +316,7 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         url: string;
         token: string;
     } | undefined;
-    mode?: "ask" | "plan" | "auto" | "full" | undefined;
+    mode?: "plan" | "ask" | "auto" | "full" | undefined;
     workMode?: unknown;
     model?: string | null | undefined;
     effort?: string | null | undefined;
@@ -385,8 +385,8 @@ export declare const QuestionAnswerArgsSchema: z.ZodObject<{
     }>, "many">>;
     readonly text: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    askId: string;
     action: "answer" | "discuss";
+    askId: string;
     text?: string | undefined;
     answers?: {
         values: string[];
@@ -395,8 +395,8 @@ export declare const QuestionAnswerArgsSchema: z.ZodObject<{
         notes?: string | undefined;
     }[] | undefined;
 }, {
-    askId: string;
     action: "answer" | "discuss";
+    askId: string;
     text?: string | undefined;
     answers?: {
         values: string[];
@@ -685,11 +685,11 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             token: string;
         }>>;
     }, "strip", z.ZodTypeAny, {
-        mode: "ask" | "plan" | "auto" | "full";
-        agent: "CLAUDE" | "CODEX";
-        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        mode: "plan" | "ask" | "auto" | "full";
         id: string;
+        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         kind: "TICKET" | "CHAT";
+        agent: "CLAUDE" | "CODEX";
         model: string | null;
         effort: string | null;
         prompt: string;
@@ -736,10 +736,10 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             baseSha?: string | undefined;
         } | undefined;
     }, {
-        agent: "CLAUDE" | "CODEX";
-        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         id: string;
+        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         kind: "TICKET" | "CHAT";
+        agent: "CLAUDE" | "CODEX";
         prompt: string;
         providerSessionId: string | null;
         workspace: {
@@ -766,7 +766,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             url: string;
             token: string;
         } | undefined;
-        mode?: "ask" | "plan" | "auto" | "full" | undefined;
+        mode?: "plan" | "ask" | "auto" | "full" | undefined;
         workMode?: unknown;
         model?: string | null | undefined;
         effort?: string | null | undefined;
@@ -785,11 +785,11 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, "strip", z.ZodTypeAny, {
     type: "hello_ack";
     sessions: {
-        mode: "ask" | "plan" | "auto" | "full";
-        agent: "CLAUDE" | "CODEX";
-        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        mode: "plan" | "ask" | "auto" | "full";
         id: string;
+        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         kind: "TICKET" | "CHAT";
+        agent: "CLAUDE" | "CODEX";
         model: string | null;
         effort: string | null;
         prompt: string;
@@ -842,10 +842,10 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, {
     type: "hello_ack";
     sessions: {
-        agent: "CLAUDE" | "CODEX";
-        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         id: string;
+        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         kind: "TICKET" | "CHAT";
+        agent: "CLAUDE" | "CODEX";
         prompt: string;
         providerSessionId: string | null;
         workspace: {
@@ -872,7 +872,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             url: string;
             token: string;
         } | undefined;
-        mode?: "ask" | "plan" | "auto" | "full" | undefined;
+        mode?: "plan" | "ask" | "auto" | "full" | undefined;
         workMode?: unknown;
         model?: string | null | undefined;
         effort?: string | null | undefined;
@@ -1154,11 +1154,11 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             token: string;
         }>>;
     }, "strip", z.ZodTypeAny, {
-        mode: "ask" | "plan" | "auto" | "full";
-        agent: "CLAUDE" | "CODEX";
-        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        mode: "plan" | "ask" | "auto" | "full";
         id: string;
+        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         kind: "TICKET" | "CHAT";
+        agent: "CLAUDE" | "CODEX";
         model: string | null;
         effort: string | null;
         prompt: string;
@@ -1205,10 +1205,10 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             baseSha?: string | undefined;
         } | undefined;
     }, {
-        agent: "CLAUDE" | "CODEX";
-        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         id: string;
+        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         kind: "TICKET" | "CHAT";
+        agent: "CLAUDE" | "CODEX";
         prompt: string;
         providerSessionId: string | null;
         workspace: {
@@ -1235,7 +1235,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             url: string;
             token: string;
         } | undefined;
-        mode?: "ask" | "plan" | "auto" | "full" | undefined;
+        mode?: "plan" | "ask" | "auto" | "full" | undefined;
         workMode?: unknown;
         model?: string | null | undefined;
         effort?: string | null | undefined;
@@ -1253,11 +1253,11 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     }>;
 }, "strip", z.ZodTypeAny, {
     session: {
-        mode: "ask" | "plan" | "auto" | "full";
-        agent: "CLAUDE" | "CODEX";
-        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        mode: "plan" | "ask" | "auto" | "full";
         id: string;
+        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         kind: "TICKET" | "CHAT";
+        agent: "CLAUDE" | "CODEX";
         model: string | null;
         effort: string | null;
         prompt: string;
@@ -1307,10 +1307,10 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     type: "session_start";
 }, {
     session: {
-        agent: "CLAUDE" | "CODEX";
-        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         id: string;
+        status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
         kind: "TICKET" | "CHAT";
+        agent: "CLAUDE" | "CODEX";
         prompt: string;
         providerSessionId: string | null;
         workspace: {
@@ -1337,7 +1337,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             url: string;
             token: string;
         } | undefined;
-        mode?: "ask" | "plan" | "auto" | "full" | undefined;
+        mode?: "plan" | "ask" | "auto" | "full" | undefined;
         workMode?: unknown;
         model?: string | null | undefined;
         effort?: string | null | undefined;
@@ -1440,8 +1440,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, "strip", z.ZodTypeAny, {
     sessionId: string;
     type: "question_answer";
-    askId: string;
     action: "answer" | "discuss";
+    askId: string;
     text?: string | undefined;
     answers?: {
         values: string[];
@@ -1452,8 +1452,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, {
     sessionId: string;
     type: "question_answer";
-    askId: string;
     action: "answer" | "discuss";
+    askId: string;
     text?: string | undefined;
     answers?: {
         values: string[];
@@ -1513,8 +1513,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, "strip", z.ZodTypeAny, {
     type: "workspace_settings";
     workspaceId: string;
-    agentAutoCommit?: boolean | undefined;
     trustMode?: "STRICT" | "NORMAL" | "AUTO" | undefined;
+    agentAutoCommit?: boolean | undefined;
     agentPushBan?: boolean | undefined;
     agentProtectedBranches?: string[] | undefined;
     agentAllowForcePush?: boolean | undefined;
@@ -1523,8 +1523,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, {
     type: "workspace_settings";
     workspaceId: string;
-    agentAutoCommit?: boolean | undefined;
     trustMode?: "STRICT" | "NORMAL" | "AUTO" | undefined;
+    agentAutoCommit?: boolean | undefined;
     agentPushBan?: boolean | undefined;
     agentProtectedBranches?: string[] | undefined;
     agentAllowForcePush?: boolean | undefined;
@@ -1539,13 +1539,13 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, "strip", z.ZodTypeAny, {
     sessionId: string;
     type: "session_settings";
-    mode?: "ask" | "plan" | "auto" | "full" | undefined;
+    mode?: "plan" | "ask" | "auto" | "full" | undefined;
     model?: string | undefined;
     effort?: string | null | undefined;
 }, {
     sessionId: string;
     type: "session_settings";
-    mode?: "ask" | "plan" | "auto" | "full" | undefined;
+    mode?: "plan" | "ask" | "auto" | "full" | undefined;
     model?: string | undefined;
     effort?: string | null | undefined;
 }>, z.ZodObject<{

package/dist/protocol.js

@@ -430,7 +430,9 @@ export const GatewayFrameSchema = z.discriminatedUnion('type', [
         // git_branches, update_from_base, git_push, git_refs, workspace_state,
         // recipe_state, verify_start, verify_status, verify_cancel,
         // preview_checkout, preview_stop, propose_commit_message, git_stage,
-        // git_unstage, git_discard, git_pull, git_merge_abort, fs_publish.
+        // git_unstage, git_discard, git_pull, git_merge_abort, fs_publish,
+        // agent_accounts, agent_account_login_start, agent_account_login_code,
+        // agent_account_activate, agent_account_forget (#422).
         name: z.string().min(1).max(64),
         workspaceId: z.string().optional(),
         sessionId: z.string().optional(),

package/dist/supervisor.js

@@ -19,6 +19,7 @@ import { applySession, gitBranches, gitCommit, gitDiff, gitLog, gitPush, gitRefs
 import { fsView } from './fsview.js';
 import { publishFile } from './file-publish.js';
 import { agentAuthStatuses, AuthRelay, clearAgentAuthFailure, noteAgentAuthFailure, } from './auth-relay.js';
+import { isAccountCommand, runAccountCommand } from './account-commands.js';
 import { isSupervisedProcess, selfUpdate } from './self-update.js';
 import { installAgent } from './agent-install.js';
 import { autoUpdateRefusal, claimAgentAutoUpdate } from './agent-auto-update.js';
@@ -2702,7 +2703,7 @@ export class Supervisor {
         const { descriptor } = running;
         try {
             for await (const event of session.events) {
-                this.forwardEvent(running, event);
+                this.forwardEvent(running, event, session);
             }
         }
         catch (error) {
@@ -3618,7 +3619,14 @@ export class Supervisor {
         this.syncBudgetClock(running);
         this.reportStatus(running.descriptor.id, 'RUNNING', {});
     }
-    forwardEvent(running, event) {
+    forwardEvent(running, event, 
+    /**
+     * The process this event came from (#422). A refusal and a working turn are
+     * attributed to the account THAT process started under – read off the
+     * session that produced the event, not off whatever holds the slot by the
+     * time the event is handled.
+     */
+    source = running.session) {
         const { descriptor } = running;
         // Ticket #225: ANY event is the process proving it came up — its own
         // capabilities probe answers within about two seconds of a healthy launch,
@@ -3812,7 +3820,7 @@ export class Supervisor {
                 if (event.code === 'auth_expired') {
                     const refused = relayAgent(String(descriptor.agent).toLowerCase());
                     if (refused)
-                        noteAgentAuthFailure(refused);
+                        noteAgentAuthFailure(refused, source?.accountId);
                 }
                 // Only `auth_missing` is worth a relaunch, and the distinction is the
                 // adapter's own (`probeAuth`), not a guess from prose.
@@ -3917,7 +3925,7 @@ export class Supervisor {
                 if (event.role === 'assistant') {
                     const working = relayAgent(String(descriptor.agent).toLowerCase());
                     if (working)
-                        clearAgentAuthFailure(working);
+                        clearAgentAuthFailure(working, source?.accountId);
                 }
                 this.sendEvent(running, 'message', { role: event.role, text: event.text });
                 return;
@@ -7483,6 +7491,11 @@ export class Supervisor {
                     });
                 }
                 default:
+                    // #422: the five account commands – their own module, one door each
+                    // over `claude-homes.ts` (plan §8).
+                    if (isAccountCommand(frame.name)) {
+                        return void reply(await runAccountCommand(frame.name, frame.args ?? {}, this.authRelay));
+                    }
                     return void reply({ ok: false, error: `Unknown command` });
             }
         }

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const RUNNER_VERSION = "0.65.1";
+export declare const RUNNER_VERSION = "0.66.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,3 +1,3 @@
 // Kept in sync with package.json by the release script (manual for now).
-export const RUNNER_VERSION = '0.65.1';
+export const RUNNER_VERSION = '0.66.0';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bridge4dev/runner",
-  "version": "0.65.1",
+  "version": "0.66.0",
   "description": "DevBridge dev runner — connects a dev server to DevBridge and runs agent sessions (Claude Code / Codex)",
   "homepage": "https://bridge4.dev",
   "license": "MIT",