ccdeck 3.36.0 → 3.36.3

package/dist/web/brand/ccdeck-mark-gradient-small-optical.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="112" height="96" viewBox="0 0 112 96"><title>ccdeck</title><defs><linearGradient id="ccdeck-mark-so-upper" gradientUnits="userSpaceOnUse" x1="34.75" y1="-2.06" x2="62.12" y2="62.42"><stop offset="0" stop-color="#BE68FC"/><stop offset="1" stop-color="#3B8CFA"/></linearGradient><linearGradient id="ccdeck-mark-so-lower" gradientUnits="userSpaceOnUse" x1="33.74" y1="54.81" x2="105.49" y2="32.87"><stop offset="0" stop-color="#0CBCFD"/><stop offset="1" stop-color="#64F4EC"/></linearGradient><linearGradient id="ccdeck-mark-so-node" gradientUnits="userSpaceOnUse" x1="50.77" y1="38.95" x2="61.23" y2="57.05"><stop offset="0" stop-color="#6388FA"/><stop offset="1" stop-color="#3F9BFB"/></linearGradient></defs><path fill="url(#ccdeck-mark-so-upper)" d="M36 0L51 0A12 12 0 0 1 51 24L36 24A12 12 0 0 0 36 48A12 12 0 0 1 36.574 48.014A1 1 0 0 1 37.525 48.961A18.5 18.5 0 0 0 46.458 63.849A1 1 0 0 1 46.846 65.134A12 12 0 0 1 36 72A36 36 0 0 1 36 0Z"/><path fill="url(#ccdeck-mark-so-lower)" d="M76 96L61 96A12 12 0 0 1 61 72L76 72A12 12 0 0 0 76 48A12 12 0 0 1 75.426 47.986A1 1 0 0 1 74.475 47.039A18.5 18.5 0 0 0 65.542 32.151A1 1 0 0 1 65.154 30.866A12 12 0 0 1 76 24A36 36 0 0 1 76 96Z"/><circle fill="url(#ccdeck-mark-so-node)" cx="56" cy="48" r="10"/></svg>

package/dist/web/brand/ccdeck-mark-mono-dark-small-optical.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="112" height="96" viewBox="0 0 112 96"><title>ccdeck</title><g fill="#0B0F14"><path d="M36 0L51 0A12 12 0 0 1 51 24L36 24A12 12 0 0 0 36 48A12 12 0 0 1 36.574 48.014A1 1 0 0 1 37.525 48.961A18.5 18.5 0 0 0 46.458 63.849A1 1 0 0 1 46.846 65.134A12 12 0 0 1 36 72A36 36 0 0 1 36 0Z"/><path d="M76 96L61 96A12 12 0 0 1 61 72L76 72A12 12 0 0 0 76 48A12 12 0 0 1 75.426 47.986A1 1 0 0 1 74.475 47.039A18.5 18.5 0 0 0 65.542 32.151A1 1 0 0 1 65.154 30.866A12 12 0 0 1 76 24A36 36 0 0 1 76 96Z"/><circle cx="56" cy="48" r="10"/></g></svg>

package/dist/web/favicon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128"><title>ccdeck</title><defs><linearGradient id="ccdeck-favicon-upper" gradientUnits="userSpaceOnUse" x1="34.75" y1="-2.06" x2="62.12" y2="62.42"><stop offset="0" stop-color="#BE68FC"/><stop offset="1" stop-color="#3B8CFA"/></linearGradient><linearGradient id="ccdeck-favicon-lower" gradientUnits="userSpaceOnUse" x1="33.74" y1="54.81" x2="105.49" y2="32.87"><stop offset="0" stop-color="#0CBCFD"/><stop offset="1" stop-color="#64F4EC"/></linearGradient><linearGradient id="ccdeck-favicon-node" gradientUnits="userSpaceOnUse" x1="50.77" y1="38.95" x2="61.23" y2="57.05"><stop offset="0" stop-color="#6388FA"/><stop offset="1" stop-color="#3F9BFB"/></linearGradient></defs><rect width="128" height="128" rx="24" fill="#0B0F14"/><g transform="translate(8 16) scale(1.000000)"><path fill="url(#ccdeck-favicon-upper)" d="M36 0L51 0A12 12 0 0 1 51 24L36 24A12 12 0 0 0 36 48A12 12 0 0 1 36.574 48.014A1 1 0 0 1 37.525 48.961A18.5 18.5 0 0 0 46.458 63.849A1 1 0 0 1 46.846 65.134A12 12 0 0 1 36 72A36 36 0 0 1 36 0Z"/><path fill="url(#ccdeck-favicon-lower)" d="M76 96L61 96A12 12 0 0 1 61 72L76 72A12 12 0 0 0 76 48A12 12 0 0 1 75.426 47.986A1 1 0 0 1 74.475 47.039A18.5 18.5 0 0 0 65.542 32.151A1 1 0 0 1 65.154 30.866A12 12 0 0 1 76 24A36 36 0 0 1 76 96Z"/><circle fill="url(#ccdeck-favicon-node)" cx="56" cy="48" r="10"/></g></svg>

package/dist/web/index.html

@@ -8,15 +8,17 @@
          module runs, so this is the deck at boot — nothing waiting, nothing
          known to be running — and App.tsx's ambient effect corrects both within
          the first frame it has state for. The title is the one copy of the name
-         that no constant can reach (display-name.test.ts pins it to PRODUCT);
-         the href is ambient.ts's own idle mark, generated by FAVICON_HREF and
-         pinned to it by ambient-signal.test.ts, which is why it is an
-         unreadable percent-encoded run rather than something to hand-edit. It
-         was a `<text>◉</text>` glyph until #338 — a font-dependent shape that
-         renders at three different weights on the three platforms and as tofu
-         where the codepoint is missing, which stopped being acceptable the
-         moment the icon started carrying state. -->
-    <link rel="icon" href="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%2032%2032%22%3E%3Ccircle%20cx%3D%2216%22%20cy%3D%2216%22%20r%3D%2212%22%20fill%3D%22none%22%20stroke%3D%22%237e828c%22%20stroke-width%3D%225%22%2F%3E%3C%2Fsvg%3E" />
+         that no constant can reach (display-name.test.ts pins it to PRODUCT).
+         The icons are the brand kit's 05-web files, linked as the kit links
+         them: the ICO for a browser without SVG favicons, the SVG every other
+         browser shows, and the home-screen icon for iOS. use-tab-ambient.ts
+         swaps both icon links to the kit's state files. The ICO says 32x32,
+         never `any`: with `any`, Chrome shows the ICO and keeps it after the
+         SVG's href changes, so the tab would never show a state
+         (ambient-signal.test.ts holds it). -->
+    <link rel="icon" href="/favicon.ico" sizes="32x32" />
+    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
+    <link rel="apple-touch-icon" href="/apple-touch-icon.png" />
     <!-- Installed, this deck is an application: a Dock tile on macOS, a taskbar
          and Start entry on Windows, a .desktop file in the launcher on Linux —
          which is the one that matters most, because a launcher entry works on
@@ -62,8 +64,8 @@
           stored === "light" || (stored !== "dark" && light) ? "light" : "dark");
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-MjcQ231B.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-CuVOi3gc.css">
+    <script type="module" crossorigin src="/assets/index-Dj4JHRcG.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-1U-Iz_x2.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/web/manifest.webmanifest

@@ -11,7 +11,6 @@
   "icons": [
     { "src": "icon-192.png", "sizes": "192x192", "type": "image/png", "purpose": "any" },
     { "src": "icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "any" },
-    { "src": "icon-maskable-512.png", "sizes": "512x512", "type": "image/png", "purpose": "maskable" },
-    { "src": "icon.svg", "sizes": "any", "type": "image/svg+xml", "purpose": "any" }
+    { "src": "icon-maskable-512.png", "sizes": "512x512", "type": "image/png", "purpose": "maskable" }
   ]
 }

package/dist/web/state/favicon-error.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128"><title>ccdeck</title><defs><linearGradient id="ccdeck-favicon-error-upper" gradientUnits="userSpaceOnUse" x1="34.75" y1="-2.06" x2="62.12" y2="62.42"><stop offset="0" stop-color="#BE68FC"/><stop offset="1" stop-color="#3B8CFA"/></linearGradient><linearGradient id="ccdeck-favicon-error-lower" gradientUnits="userSpaceOnUse" x1="33.74" y1="54.81" x2="105.49" y2="32.87"><stop offset="0" stop-color="#0CBCFD"/><stop offset="1" stop-color="#64F4EC"/></linearGradient><linearGradient id="ccdeck-favicon-error-node" gradientUnits="userSpaceOnUse" x1="50.77" y1="38.95" x2="61.23" y2="57.05"><stop offset="0" stop-color="#6388FA"/><stop offset="1" stop-color="#3F9BFB"/></linearGradient><mask id="ccdeck-favicon-error-cut" maskUnits="userSpaceOnUse" maskContentUnits="userSpaceOnUse" x="0" y="0" width="128" height="128"><rect width="128" height="128" fill="#FFFFFF"/><path fill="#000000" d="M96 0H112A8 8 0 0 1 120 8V40A8 8 0 0 1 112 48H96A8 8 0 0 1 88 40V8A8 8 0 0 1 96 0Z"/></mask></defs><rect width="128" height="128" rx="24" fill="#0B0F14"/><g mask="url(#ccdeck-favicon-error-cut)"><g transform="translate(8 16) scale(1.000000)"><path fill="url(#ccdeck-favicon-error-upper)" d="M36 0L51 0A12 12 0 0 1 51 24L36 24A12 12 0 0 0 36 48A12 12 0 0 1 36.574 48.014A1 1 0 0 1 37.525 48.961A18.5 18.5 0 0 0 46.458 63.849A1 1 0 0 1 46.846 65.134A12 12 0 0 1 36 72A36 36 0 0 1 36 0Z"/><path fill="url(#ccdeck-favicon-error-lower)" d="M76 96L61 96A12 12 0 0 1 61 72L76 72A12 12 0 0 0 76 48A12 12 0 0 1 75.426 47.986A1 1 0 0 1 74.475 47.039A18.5 18.5 0 0 0 65.542 32.151A1 1 0 0 1 65.154 30.866A12 12 0 0 1 76 24A36 36 0 0 1 76 96Z"/><circle fill="url(#ccdeck-favicon-error-node)" cx="56" cy="48" r="10"/></g></g><path fill="#D32F2F" d="M100 8H108A4 4 0 0 1 112 12V21A4 4 0 0 1 108 25H100A4 4 0 0 1 96 21V12A4 4 0 0 1 100 8ZM100 32H108A4 4 0 0 1 112 36V36A4 4 0 0 1 108 40H100A4 4 0 0 1 96 36V36A4 4 0 0 1 100 32Z"/></svg>

package/dist/web/state/favicon-syncing.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128"><title>ccdeck</title><defs><linearGradient id="ccdeck-favicon-syncing-upper" gradientUnits="userSpaceOnUse" x1="34.75" y1="-2.06" x2="62.12" y2="62.42"><stop offset="0" stop-color="#BE68FC"/><stop offset="1" stop-color="#3B8CFA"/></linearGradient><linearGradient id="ccdeck-favicon-syncing-lower" gradientUnits="userSpaceOnUse" x1="33.74" y1="54.81" x2="105.49" y2="32.87"><stop offset="0" stop-color="#0CBCFD"/><stop offset="1" stop-color="#64F4EC"/></linearGradient><linearGradient id="ccdeck-favicon-syncing-node" gradientUnits="userSpaceOnUse" x1="50.77" y1="38.95" x2="61.23" y2="57.05"><stop offset="0" stop-color="#6388FA"/><stop offset="1" stop-color="#3F9BFB"/></linearGradient><mask id="ccdeck-favicon-syncing-cut" maskUnits="userSpaceOnUse" maskContentUnits="userSpaceOnUse" x="0" y="0" width="128" height="128"><rect width="128" height="128" fill="#FFFFFF"/><path fill="#000000" d="M80 24A24 24 0 1 0 128 24A24 24 0 1 0 80 24Z"/></mask></defs><rect width="128" height="128" rx="24" fill="#0B0F14"/><g mask="url(#ccdeck-favicon-syncing-cut)"><g transform="translate(8 16) scale(1.000000)"><path fill="url(#ccdeck-favicon-syncing-upper)" d="M36 0L51 0A12 12 0 0 1 51 24L36 24A12 12 0 0 0 36 48A12 12 0 0 1 36.574 48.014A1 1 0 0 1 37.525 48.961A18.5 18.5 0 0 0 46.458 63.849A1 1 0 0 1 46.846 65.134A12 12 0 0 1 36 72A36 36 0 0 1 36 0Z"/><path fill="url(#ccdeck-favicon-syncing-lower)" d="M76 96L61 96A12 12 0 0 1 61 72L76 72A12 12 0 0 0 76 48A12 12 0 0 1 75.426 47.986A1 1 0 0 1 74.475 47.039A18.5 18.5 0 0 0 65.542 32.151A1 1 0 0 1 65.154 30.866A12 12 0 0 1 76 24A36 36 0 0 1 76 96Z"/><circle fill="url(#ccdeck-favicon-syncing-node)" cx="56" cy="48" r="10"/></g></g><path fill="#2563EB" d="M119.455 28.141A16 16 0 1 1 108.141 8.545A4 4 0 0 1 106.071 16.273A8 8 0 1 0 111.727 26.071A4 4 0 0 1 119.455 28.141Z"/></svg>

package/dist/web/state/favicon-waiting.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128"><title>ccdeck</title><defs><linearGradient id="ccdeck-favicon-waiting-upper" gradientUnits="userSpaceOnUse" x1="34.75" y1="-2.06" x2="62.12" y2="62.42"><stop offset="0" stop-color="#BE68FC"/><stop offset="1" stop-color="#3B8CFA"/></linearGradient><linearGradient id="ccdeck-favicon-waiting-lower" gradientUnits="userSpaceOnUse" x1="33.74" y1="54.81" x2="105.49" y2="32.87"><stop offset="0" stop-color="#0CBCFD"/><stop offset="1" stop-color="#64F4EC"/></linearGradient><linearGradient id="ccdeck-favicon-waiting-node" gradientUnits="userSpaceOnUse" x1="50.77" y1="38.95" x2="61.23" y2="57.05"><stop offset="0" stop-color="#6388FA"/><stop offset="1" stop-color="#3F9BFB"/></linearGradient><mask id="ccdeck-favicon-waiting-cut" maskUnits="userSpaceOnUse" maskContentUnits="userSpaceOnUse" x="0" y="0" width="128" height="128"><rect width="128" height="128" fill="#FFFFFF"/><path fill="#000000" d="M85 26A21 21 0 1 0 127 26A21 21 0 1 0 85 26Z"/></mask></defs><rect width="128" height="128" rx="24" fill="#0B0F14"/><g mask="url(#ccdeck-favicon-waiting-cut)"><g transform="translate(8 16) scale(1.000000)"><path fill="url(#ccdeck-favicon-waiting-upper)" d="M36 0L51 0A12 12 0 0 1 51 24L36 24A12 12 0 0 0 36 48A12 12 0 0 1 36.574 48.014A1 1 0 0 1 37.525 48.961A18.5 18.5 0 0 0 46.458 63.849A1 1 0 0 1 46.846 65.134A12 12 0 0 1 36 72A36 36 0 0 1 36 0Z"/><path fill="url(#ccdeck-favicon-waiting-lower)" d="M76 96L61 96A12 12 0 0 1 61 72L76 72A12 12 0 0 0 76 48A12 12 0 0 1 75.426 47.986A1 1 0 0 1 74.475 47.039A18.5 18.5 0 0 0 65.542 32.151A1 1 0 0 1 65.154 30.866A12 12 0 0 1 76 24A36 36 0 0 1 76 96Z"/><circle fill="url(#ccdeck-favicon-waiting-node)" cx="56" cy="48" r="10"/></g></g><path fill="#C2410C" d="M93 26A13 13 0 1 0 119 26A13 13 0 1 0 93 26Z"/></svg>

package/hook/hook.js

@@ -373,7 +373,8 @@ const POST_TIMEOUT_MS = 1000;
 // The third phase that can stall, and the one that had no deadline at all:
 // reading the registry and canonicalising the paths in it. See discoverTargets
 // for what it is bounding and why one unanswering path must not cost the event
-// for every other deck on the machine.
+// for every other deck on the machine — and for why a window that found nothing
+// gets a second one.
 const DISCOVERY_TIMEOUT_MS = 400;
 
 // How long the canonical spelling of the session's cwd is worth waiting for
@@ -386,10 +387,11 @@ const CWD_TIMEOUT_MS = 200;
  * from when main() ran — see the deadline main() sets.
  *
  * 1900ms is not the sum of the phase deadlines, and it is not meant to be. Four
- * phases now carry one — discovery 400, the challenge's two attempts 400 + 400,
- * the POST 1000 — and they only stack to 2200 if all three surfaces stall on
- * the same run: an unanswering filesystem, a port that accepts and says
- * nothing, and a deck that takes the body and never replies. Each deadline
+ * phases now carry one — discovery 400 (and 400 more when the first window found
+ * nothing), the challenge's two attempts 400 + 400, the POST 1000 — and they
+ * only stack to 2600 if all three surfaces stall on the same run: an
+ * unanswering filesystem, a port that accepts and says nothing, and a deck that
+ * takes the body and never replies. Each deadline
  * bounds its own pathology; this one is the backstop over all of them, and it
  * is what a reader should believe rather than the addition.
  *
@@ -874,6 +876,17 @@ function readRecord(file, resolvedCwd, found, done) {
  * is a symlink, a junction or an 8.3 short name. Giving up on the whole phase
  * instead would hand every deck on the machine nothing.
  *
+ * A DEADLINE WITH NOTHING FOUND IS NOT AN ANSWER EITHER (#1872). The deadline
+ * is there so a stalled record cannot take the event from a deck that answered;
+ * when nothing has answered yet there is no such deck to protect, only reads
+ * still out — and on a loaded machine those are usually slow, not stalled: a
+ * busy disk, an antivirus scanning a record a deck rewrote a moment ago, a
+ * threadpool queued behind someone else's build. Handing back the empty set
+ * there dropped the event for every deck on the machine, with nothing on screen
+ * to say so. So an empty first window gets one more, the way prove()'s deadline
+ * does, and the second ends like the first: at its deadline with whatever
+ * answered, or as soon as every read has.
+ *
  * `cb` runs exactly once, with a snapshot — a read that lands after the
  * deadline may still push, and must not change the set already being acted on.
  */
@@ -891,7 +904,11 @@ function discoverTargets(cwd, cb) {
     clearTimeout(timer);
     cb(found.slice(), usedCwd);
   };
-  const timer = setTimeout(finish, DISCOVERY_TIMEOUT_MS);
+  const expire = retried => {
+    if (found.length || retried) return finish();
+    timer = setTimeout(() => expire(true), DISCOVERY_TIMEOUT_MS);
+  };
+  let timer = setTimeout(() => expire(false), DISCOVERY_TIMEOUT_MS);
 
   let scanned = false;
   // Assigned below, and read from a callback normPathAsync may run

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccdeck",
-  "version": "3.36.0",
+  "version": "3.36.3",
   "description": "Local dashboard for Claude Code and Codex CLI sessions: which Claude Code session needs input, every tool call and Claude Code subagent live, token cost and quota, several Claude accounts. Run npx ccdeck.",
   "type": "module",
   "bin": {

package/release-notes.json

@@ -61,7 +61,14 @@
     "3.33.1",
     "3.35.0",
     "3.35.1",
-    "3.36.0"
+    "3.36.0",
+    "3.36.1"
+  ],
+  "3.36.3": [
+    {
+      "title": "🔑 An expired login asks to be signed in again",
+      "body": "When an account you added with + → Sign in stops working, the deck now tells you in one dialog, with every affected account together and Sign in again beside each. That opens the usual sign-in with the address already filled in, and the account keeps its slot, its alias and its history. Not now leaves it marked in the Accounts panel and does not ask again until it has worked and stopped again. A paired deck holding a working copy gets to repair it first, and accounts that came from a share or Local network are never asked about."
+    }
   ],
   "3.34.1": [
     {

package/src/server/account-origins.mjs

@@ -0,0 +1,201 @@
+// Which accounts this deck signed in itself, and whether one of them is waiting
+// on its owner to sign in again (#1893).
+//
+// claude-swap's store says nothing about how an account got there. A slot made
+// by the deck's own `+ → Sign in`, one pasted from a share, one a paired deck
+// delivered over Local network and one somebody added with `cswap add` long
+// before the deck existed all look the same in sequence.json. So the deck keeps
+// the one fact it can vouch for — "I signed this one in" — in prefs.json, keyed
+// by the identity every deck agrees on (accountKey) and never by slot number,
+// which claude-swap reuses.
+//
+// THE PROMPT FOLLOWS EVIDENCE, NOT THE CLOCK. An account needs its owner when
+// claude-swap has had its stored login refused — `invalid_grant` or
+// `no_refresh_token` on its last read, or its own `relogin_required` verdict on
+// a slot it stopped collecting — and that refusal came on an attempt made AFTER
+// the deck last signed it in. Nothing here reads a token's expiry, and time
+// passing never makes a login dead on its own.
+//
+// AN INCIDENT IS NAMED BY WHAT IT FOLLOWS. `since` is the later of the last good
+// read and the last sign-in through the deck: the moment the login was last
+// known to work. Every refusal after it is one incident, however many polls,
+// refreshes or restarts it spans — which is what lets "Not now" stick to it. A
+// good read or a new sign-in moves `since`, so a refusal after THAT is a new
+// incident and may ask again.
+//
+// Pure: no file, no clock, no subprocess. The roster read (claude-accounts.mjs)
+// asks reauthFor about each row and says what it found out of date,
+// cswap-admin.mjs reports sign-ins, and account-routes.mjs hands these mutators
+// to prefs.json's queued writer.
+import { accountKey } from "./lan-copies.mjs";
+
+/** The provenance a completed `+ → Sign in` leaves. The only one there is:
+ *  everything else is "the deck cannot say", which is no entry at all. */
+export const SIGNED_IN_HERE = "ccdeck_signin";
+
+/** claude-swap's two words for a stored refresh token only a person can
+ *  replace. The panel's errorText calls both "login expired". */
+const DEAD_LOGIN = new Set(["invalid_grant", "no_refresh_token"]);
+
+/** Bounds on a file a person can edit. An email is at most 254 characters and
+ *  an organization uuid 36, so a key past this is not one the deck wrote. */
+const MAX_KEY = 320;
+const MAX_ENTRIES = 500;
+
+/**
+ * prefs.json's `accounts`, coerced: `{ [accountKey]: { origin, signedInAt,
+ * dismissed? } }`, and nothing that is not one.
+ *
+ * Built with Object.fromEntries rather than by assignment, so a key read out of
+ * a hand-edited file defines a property and can never reach a prototype.
+ */
+export function normaliseOrigins(raw) {
+  const src = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  const kept = [];
+  for (const [key, v] of Object.entries(src)) {
+    if (kept.length >= MAX_ENTRIES) break;
+    if (!key.includes("@@") || key.length > MAX_KEY) continue;
+    if (!v || typeof v !== "object" || v.origin !== SIGNED_IN_HERE) continue;
+    kept.push([key, {
+      origin: SIGNED_IN_HERE,
+      signedInAt: Number.isFinite(v.signedInAt) && v.signedInAt > 0 ? v.signedInAt : 0,
+      ...(Number.isFinite(v.dismissed) && v.dismissed >= 0 ? { dismissed: v.dismissed } : {}),
+    }]);
+  }
+  return Object.fromEntries(kept);
+}
+
+// ── what changes it ─────────────────────────────────────────────────────────
+//
+// Each of these is an `updatePrefs` mutator: it reads the file's own `accounts`
+// and answers the WHOLE map, or null for no change. Whole, because prefs.json
+// merges a patch one top-level field deep — a map that only named the account
+// it changed would drop every other one.
+
+/**
+ * The deck's own sign-in finished and claude-swap recorded the account.
+ *
+ * Marked only when the sign-in ADDED it, or when the deck had marked it before.
+ * An account that was already in the store when somebody signed into it here
+ * was put there some other way — a share, Local network, a terminal — and a
+ * sign-in that only refreshed it does not change where it came from.
+ *
+ * A re-sign-in of a marked account keeps the mark and moves `signedInAt`, which
+ * is what closes its incident: a refusal from before that moment is about the
+ * login it replaced. Any "Not now" goes with it.
+ */
+export function withSignIn({ email, org, added, now }) {
+  return prev => {
+    if (!String(email ?? "").trim()) return null;
+    const all = normaliseOrigins(prev?.accounts);
+    const key = accountKey(email, org);
+    if (!added && !Object.hasOwn(all, key)) return null;
+    return { accounts: { ...all, [key]: { origin: SIGNED_IN_HERE, signedInAt: now } } };
+  };
+}
+
+/** "Not now" on these incidents. Only for an account the deck marked: a key it
+ *  does not hold is not one it would ever ask about. */
+export function withDismissed(incidents) {
+  return prev => {
+    const all = normaliseOrigins(prev?.accounts);
+    let changed = false;
+    const next = Object.fromEntries(Object.entries(all).map(([key, entry]) => {
+      const hit = incidents.find(i => i.key === key);
+      if (!hit || entry.dismissed === hit.since) return [key, entry];
+      changed = true;
+      return [key, { ...entry, dismissed: hit.since }];
+    }));
+    return changed ? { accounts: next } : null;
+  };
+}
+
+/**
+ * What a roster read found out of date, put right in one write.
+ *
+ * `recovered`: accounts read successfully after the incident somebody put off,
+ * so the put-off is forgotten rather than kept for an incident that is over.
+ * `gone`: accounts no longer in claude-swap's store, however they left — the
+ * mark goes with them, so the same address arriving later by a share or Local
+ * network is not mistaken for one this deck signed in.
+ *
+ * `seen` is the map the read judged, when there is one, and an entry that has
+ * changed since — signed in again, or put off for a newer incident — is left as
+ * it is: the read's verdict was about the entry it saw.
+ */
+export function withTidied({ recovered = [], gone = [], seen = null }) {
+  const judged = (key, entry) => !seen || sameEntry(entry, seen[key]);
+  return prev => {
+    const all = normaliseOrigins(prev?.accounts);
+    let changed = false;
+    const next = Object.fromEntries(Object.entries(all).flatMap(([key, entry]) => {
+      if (!judged(key, entry)) return [[key, entry]];
+      if (gone.includes(key)) { changed = true; return []; }
+      if (!recovered.includes(key) || entry.dismissed == null) return [[key, entry]];
+      changed = true;
+      const { dismissed: _dropped, ...rest } = entry;
+      return [[key, rest]];
+    }));
+    return changed ? { accounts: next } : null;
+  };
+}
+
+const sameEntry = (a, b) => Boolean(a && b)
+  && a.origin === b.origin && a.signedInAt === b.signedInAt && a.dismissed === b.dismissed;
+
+/** Pick out the incidents a request named, dropping anything that is not one.
+ *  The route's boundary: a page sends these, and nothing else reaches a write. */
+export function incidentsFrom(raw) {
+  if (!Array.isArray(raw)) return [];
+  return raw
+    .filter(i => i && typeof i.key === "string" && i.key.includes("@@") && i.key.length <= MAX_KEY
+      && Number.isFinite(i.since) && i.since >= 0)
+    .slice(0, MAX_ENTRIES)
+    .map(i => ({ key: i.key, since: i.since }));
+}
+
+// ── what it means for a row ─────────────────────────────────────────────────
+
+/**
+ * Whether claude-swap's verdict on a row is a stored login only a sign-in can
+ * bring back. `trouble` is authTrouble's answer for the row and `collector` the
+ * slot's cached verdict.
+ *
+ * The server's copy of account-issue.ts's deadLogin, held to it by
+ * reauth-prompt-1893.test.ts: a stale copy is never this (the reader IS signed
+ * in and the deck re-captures it alone, #721), a collector that stopped counts
+ * only on claude-swap's own `relogin_required`, and a refusal counts only when
+ * it is one of the two refresh-token words.
+ */
+export function needsSignIn(trouble, collector) {
+  if (trouble?.kind === "auth") return DEAD_LOGIN.has(trouble.error);
+  if (trouble?.kind === "stopped") return collector === "relogin_required";
+  return false;
+}
+
+/**
+ * The incident one roster row is in, or null.
+ *
+ * `{ since, dismissed }`: `since` names the incident (see the header) and
+ * `dismissed` says somebody put this very one off. Null for every account the
+ * deck did not sign in, every login that works or fails for another reason, and
+ * a login whose refusal predates the last sign-in here — the read that proves
+ * the new login has not happened yet, and saying "expired" over a sign-in that
+ * just succeeded is the one moment this must stay quiet.
+ */
+export function reauthFor({ entry, trouble, collector, fetchedAt = null, attemptedAt = null }) {
+  if (entry?.origin !== SIGNED_IN_HERE) return null;
+  if (!needsSignIn(trouble, collector)) return null;
+  const signedInAt = entry.signedInAt ?? 0;
+  if (!Number.isFinite(attemptedAt) || attemptedAt <= signedInAt) return null;
+  const since = Math.floor(Math.max(Number.isFinite(fetchedAt) ? fetchedAt : 0, signedInAt));
+  return { since, dismissed: entry.dismissed === since };
+}
+
+/** A good read after the incident that was put off: the login works again.
+ *  Floored as `since` is — claude-swap stamps fractional seconds, and the read
+ *  that STARTED the incident must not count as the one that ended it. */
+export function hasRecovered(entry, fetchedAt) {
+  return Number.isFinite(entry?.dismissed) && Number.isFinite(fetchedAt)
+    && Math.floor(fetchedAt) > entry.dismissed;
+}

package/src/server/account-routes.mjs

@@ -9,15 +9,22 @@
 // loads, so moving the routes here puts no import on the path to a listening
 // socket and takes none out of the pin.
 //
-// Four things are exported beyond the handlers. Three because index.mjs reaches
+// Five things are exported beyond the handlers. Four because index.mjs reaches
 // for them: wireStaleCopyRepair, which startServer runs to hand the roster its
-// stale-copy repair, cswapAutoModule, which it uses to start auto-switch, and
-// getProjectRollup, which it starts at boot. The fourth is CHECKS_IMPORTS,
-// which lan-deck.mjs reads because a LAN round checks the imports it lands the
-// same way the paste box does.
+// stale-copy repair, wireAccountOrigins, which hands it and the sign-in flow
+// where accounts came from (#1893), cswapAutoModule, which it uses to start
+// auto-switch, and getProjectRollup, which it starts at boot. The fifth is
+// CHECKS_IMPORTS, which lan-deck.mjs reads because a LAN round checks the
+// imports it lands the same way the paste box does.
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { readBody, send } from "./http-io.mjs";
+// Where the deck keeps which accounts it signed in (#1893): prefs.json, through
+// the one in-memory copy and its queued writer. Both are already on the boot
+// path, which the lazily imported modules below are kept off.
+import { heldPrefs } from "./prefs-state.mjs";
+import { PRODUCT } from "./brand.mjs";
+import { incidentsFrom, withDismissed, withSignIn, withTidied } from "./account-origins.mjs";
 
 // Resolved the way pinned-build.mjs resolves it, from a file in the same
 // directory, so every lazy import below is the URL the pin has already evaluated.
@@ -158,6 +165,97 @@ export function wireStaleCopyRepair() {
   })();
 }
 
+/**
+ * Hand the roster and the sign-in flow what the deck remembers about where its
+ * accounts came from (#1893), so a completed `+ → Sign in` is recorded, a
+ * removal forgets it, and each roster row can say whether it is an incident to
+ * ask its owner about.
+ *
+ * Run beside wireStaleCopyRepair and for its reasons: best-effort, imported one
+ * module at a time, and never at import, so no test reading a fixture store can
+ * reach the user's own prefs.json.
+ */
+export function wireAccountOrigins() {
+  void (async () => {
+    let accounts, admin;
+    try {
+      accounts = await import(pathToFileURL(join(PKG_ROOT, "src/server/claude-accounts.mjs")).href);
+      admin = await cswapAdminModule();
+    } catch { return; }
+    accounts.accountOriginsWith({
+      // Already coerced: every read and write of prefs.json goes through
+      // normalise, and this is the copy it left.
+      entries: () => heldPrefs.current()?.accounts ?? {},
+      tidy: found => { void tidyOrigins(found); },
+    });
+    admin.accountOriginsWith({
+      signedIn: ({ email, org, added }) => writeOrigins(withSignIn({ email, org, added, now: Date.now() })),
+    });
+  })();
+}
+
+/**
+ * One prefs.json write, and only when it would change something.
+ *
+ * updatePrefs rewrites the file even for a mutator that answers "no change" —
+ * a temp file, an fsync and a rename — and most of what reaches here is a no
+ * change: a sign-in that refreshed an account the deck never marked, a second
+ * "Not now" from another tab. So the mutator is asked of the copy in memory
+ * first, and again of the file inside the queued write, which is the answer
+ * that is kept.
+ */
+async function writeOrigins(mutate) {
+  if (!mutate(heldPrefs.current())) return;
+  await heldPrefs.update(mutate);
+}
+
+/**
+ * What a roster read found out of date — see tidyOrigins in claude-accounts.mjs.
+ *
+ * ONE AT A TIME. Reads come every few seconds and the copy in memory moves only
+ * when a write lands, so without this each read during a slow write would queue
+ * the same write again. A read that arrives while one is out is dropped; the
+ * read after it lands sees what is left.
+ */
+let _tidying = false;
+async function tidyOrigins(found) {
+  if (_tidying) return;
+  _tidying = true;
+  try { await writeOrigins(withTidied(found)); }
+  catch (err) { noteOriginFailure(err); }
+  finally { _tidying = false; }
+}
+
+/** A settings file the deck cannot write costs a remembered "Not now", which
+ *  the next read asks about again — said in the log and nowhere else. */
+function noteOriginFailure(err) {
+  console.error(`${PRODUCT}: could not update where an account came from:`, err?.message ?? err);
+}
+
+/**
+ * "Not now" on the accounts the re-sign-in prompt named (#1893).
+ *
+ * Each incident is `{ key, since }` as the roster row sent it. Written to the
+ * account's entry, so the prompt stays down for that incident across a reload,
+ * another tab and a restart, and comes back only for a new one. The roster is
+ * forgotten after, so the next read already carries `dismissed`.
+ */
+async function dismissReauth(raw) {
+  const incidents = incidentsFrom(raw);
+  if (!incidents.length) return { ok: false, reason: "bad_request" };
+  try {
+    await writeOrigins(withDismissed(incidents));
+  } catch (err) {
+    noteOriginFailure(err);
+    return { ok: false, reason: "prefs_unwritable" };
+  }
+  const { invalidateClaudeAccountsCache } = await import(
+    pathToFileURL(join(PKG_ROOT, "src/server/claude-accounts.mjs")).href
+  );
+  invalidateClaudeAccountsCache();
+  return { ok: true };
+}
+
 // Reading the login's progress. The browser polls this while its dialog is
 // open, the same way the upgrade notice polls /api/version.
 export async function handleAccountLoginState(_req, res) {
@@ -210,6 +308,9 @@ export async function handleClaudeAccountAdmin(req, res) {
     case "recapture":    result = await admin.recaptureActive(); break;
     case "alias":        result = await admin.setAlias(parsed.account, parsed.alias); break;
     case "move":         result = await admin.moveAccount(parsed.account, parsed.slot); break;
+    // #1893. Touches prefs.json, never the store: "Not now" on a re-sign-in
+    // prompt, remembered for that incident.
+    case "reauth-later": result = await dismissReauth(parsed.incidents); break;
     default: return send(res, 400, { ok: false, reason: "unknown_action" });
   }
   send(res, result.ok ? 200 : 400, result);