agl 40.5.0 → 40.5.1

package/changelog.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 2026-10-25 - 40.5.1
+
+### Fixes
+
+- A Claude sign-in is no longer held for its fifteen minutes by Claude Code sessions whose working directory was deleted under them (AGL-836). The accounts service could not resolve such a process's working directory, so it left the process's home and credential store unknown as well, and a sign-in waits while any process may run on its home: the login Claude Code wrote was never added, and the sign-in ended saying no login had arrived. A home or store a process names by an absolute path is now resolved without its working directory; one named by a relative path stays unknown, and custody and the usage read still refuse a process on their home whose working directory they cannot read. A sign-in also no longer waits for an unknown process that started before its home was made (by more than five seconds, the process table's precision), since it cannot name a home whose name was random until then; container homes keep the strict rule. Process start times are now read from the process table in UTC, so on a host outside UTC a process started in the repeated hour after a daylight-saving change is no longer dated an hour early (which would have let such a process through this rule); the accounts service's check of its managed Codex app-server reads them the same way, and refuses starts and account changes when the process holding the run's socket has a start it cannot read, instead of treating that process as gone. A sign-in that is held names the processes holding it (`heldBy`, shown on the Accounts screen and by `authswitch account add claude`), and one still held when it expires imports nothing and says that a login arrived and which processes held it. A client of this release names an accounts service that answers a sign-in without `heldBy` outdated, so the service must be restarted onto this release. Controller protocol 45.
+
 ## 2026-10-23 - 40.5.0
 
 ### Features