clankerbend 0.1.1 → 0.1.2

package/README.md

@@ -30,6 +30,7 @@ npx clankerbend
 
 That starts Codex Desktop with the default ClankerBend profile and bundled apps:
 
+- **ClankerID**: switch between Codex accounts.
 - **VimNav**: Vim-style transcript navigation, number rails, role jumps, search,
   and a side panel.
 - **Sticky Notes**: select transcript text, click **Add note**, and the
@@ -45,9 +46,21 @@ ClankerBend writes runtime state outside the package:
 
 Override with `ONEWILL_CLANKERBEND_STATE_DIR`.
 
+Managed Codex account profiles live under the same state directory. The primary
+profile remains your normal `CODEX_HOME` or `~/.codex`; managed profiles get
+their own `codex-home` and Electron user-data directories. You can start a
+saved profile directly with:
+
+```sh
+npx clankerbend --account work
+```
+
 ## Security
 
 ClankerBend binds to `127.0.0.1` on an OS-assigned ephemeral port. The launcher
-prints the exact host URL, for example `Host: http://127.0.0.1:49152`.
+prints the exact host URL and bearer token, for example
+`Host: http://127.0.0.1:49152` and `Token: ...`.
 `/clankerbend/*` endpoints require a bearer token by default. For local protocol
-debugging, you can set `ONEWILL_CLANKERBEND_DISABLE_AUTH=1`.
+debugging, you can set `ONEWILL_CLANKERBEND_DISABLE_AUTH=1`. Hosted app pages
+receive the same bearer token from their app URL fragment and from a
+host-injected HTML bootstrap so URL rewriting does not break app auth.

package/apps/sticky-notes/public/app.js

@@ -57,11 +57,44 @@ async function runAction(type, payload = {}) {
 
 function readToken() {
   const params = new URLSearchParams(location.hash.startsWith("#") ? location.hash.slice(1) : location.hash);
-  const value = params.get("clankerbend_token") || "";
-  if (value) history.replaceState(null, "", location.pathname + location.search);
+  const fragmentToken = params.get("clankerbend_token") || "";
+  const bootstrapToken = window.__CLANKERBEND_TOKEN || "";
+  const metaToken = document.querySelector("meta[name='clankerbend-token']")?.content || "";
+  const inlineToken = readInlineBootstrapToken();
+  const cachedToken = readCachedToken();
+  const value = fragmentToken || bootstrapToken || metaToken || inlineToken || cachedToken;
+  if (fragmentToken) history.replaceState(null, "", location.pathname + location.search);
+  if (value) writeCachedToken(value);
   return value;
 }
 
+function readInlineBootstrapToken() {
+  for (const script of document.scripts) {
+    const match = script.textContent?.match(/window\.__CLANKERBEND_TOKEN=("[^"]*");?/);
+    if (!match) continue;
+    try {
+      return JSON.parse(match[1]);
+    } catch {
+      return "";
+    }
+  }
+  return "";
+}
+
+function readCachedToken() {
+  try {
+    return sessionStorage.getItem("clankerbend_token") || "";
+  } catch {
+    return "";
+  }
+}
+
+function writeCachedToken(value) {
+  try {
+    sessionStorage.setItem("clankerbend_token", value);
+  } catch {}
+}
+
 function headers(extra = {}) {
   return {
     ...extra,

package/apps/vim-nav/public/app.js

@@ -47,11 +47,44 @@ async function bootstrap() {
 
 function readToken() {
   const params = new URLSearchParams(location.hash.startsWith("#") ? location.hash.slice(1) : location.hash);
-  const value = params.get("clankerbend_token") || "";
-  if (value) history.replaceState(null, "", location.pathname + location.search);
+  const fragmentToken = params.get("clankerbend_token") || "";
+  const bootstrapToken = window.__CLANKERBEND_TOKEN || "";
+  const metaToken = document.querySelector("meta[name='clankerbend-token']")?.content || "";
+  const inlineToken = readInlineBootstrapToken();
+  const cachedToken = readCachedToken();
+  const value = fragmentToken || bootstrapToken || metaToken || inlineToken || cachedToken;
+  if (fragmentToken) history.replaceState(null, "", location.pathname + location.search);
+  if (value) writeCachedToken(value);
   return value;
 }
 
+function readInlineBootstrapToken() {
+  for (const script of document.scripts) {
+    const match = script.textContent?.match(/window\.__CLANKERBEND_TOKEN=("[^"]*");?/);
+    if (!match) continue;
+    try {
+      return JSON.parse(match[1]);
+    } catch {
+      return "";
+    }
+  }
+  return "";
+}
+
+function readCachedToken() {
+  try {
+    return sessionStorage.getItem("clankerbend_token") || "";
+  } catch {
+    return "";
+  }
+}
+
+function writeCachedToken(value) {
+  try {
+    sessionStorage.setItem("clankerbend_token", value);
+  } catch {}
+}
+
 function headers(extra = {}) {
   return {
     ...extra,

package/cli.mjs

@@ -54,6 +54,8 @@ function parseCodexArgs(args) {
       options.mock = true;
     } else if (arg === "--state-dir") {
       options.stateDir = requiredArg(args[++index], "--state-dir value");
+    } else if (arg === "--account") {
+      options.accountId = requiredArg(args[++index], "--account id");
     } else if (arg === "--help" || arg === "-h") {
       printCodexHelp();
       process.exit(0);
@@ -68,8 +70,8 @@ function printHelp() {
   console.log(`ClankerBend
 
 Usage:
-  clankerbend [--mock] [--state-dir path]
-  clankerbend codex [--mock] [--state-dir path]
+  clankerbend [--mock] [--state-dir path] [--account id]
+  clankerbend codex [--mock] [--state-dir path] [--account id]
   clankerbend help
   clankerbend --version
 
@@ -84,12 +86,13 @@ function printCodexHelp() {
   console.log(`ClankerBend Codex launcher
 
 Usage:
-  clankerbend [--mock] [--state-dir path]
-  clankerbend codex [--mock] [--state-dir path]
+  clankerbend [--mock] [--state-dir path] [--account id]
+  clankerbend codex [--mock] [--state-dir path] [--account id]
 
 Options:
   --mock            Start against a mock transcript instead of Codex Desktop.
   --state-dir path  Override ClankerBend runtime state directory.
+  --account id      Start with a saved ClankerBend Codex account profile.
 `);
 }
 

package/docs/launcher-profiles.md

@@ -46,6 +46,38 @@ Runtime state defaults to:
 
 Set `ONEWILL_CLANKERBEND_STATE_DIR` to override the root state directory.
 
+## Codex Account Profiles
+
+ClankerBend can remember up to 20 Codex account profiles. It still launches at
+most one Codex Desktop instance at a time. Switching accounts stops the current
+ClankerBend-launched Desktop process and starts the selected profile.
+
+The `primary` profile always points at the normal Codex home:
+
+- `CODEX_HOME` when set
+- otherwise `~/.codex`
+
+Managed profiles are created empty under the ClankerBend state directory. Each
+managed profile gets its own `codex-home` and Electron user-data directory. No
+auth, sessions, skills, plugins, or history are copied from the primary profile.
+If the primary profile is file-auth based, the managed profile receives only a
+minimal `config.toml` auth-store setting so Codex can use the same auth mode.
+
+ClankerID exposes these operations:
+
+- **Switch**: stop the current Desktop process and launch the selected profile.
+- **Launch by default**: choose which profile ClankerBend starts next time. This
+  does not change the primary Codex home.
+- **Make primary**: promote a managed profile into the primary Codex home.
+  ClankerBend first moves the old primary home to
+  `<primary>.backup_<timestamp>` (normally `~/.codex.backup_<timestamp>`),
+  preserves it as a managed account, then moves the selected managed home into
+  the primary Codex home.
+- **Rollback**: restore a previous primary backup and move the replaced primary
+  to `<primary>.rollback_replaced_<timestamp>`.
+- **Archive**: remove a managed profile from the active account list and move
+  its directories into deleted-account storage.
+
 ## Ports And Cleanup
 
 The host and CDP adapter bind to `127.0.0.1` and use ephemeral ports. Launchers

package/docs/protocol.md

@@ -239,17 +239,20 @@ An app must not bypass the host token by calling CDP or app-server directly.
 ClankerBend `0.1` defines two token bootstrap paths:
 
 1. **Hosted panel apps**: the host serves the app entry URL and may append the
-   token in the URL fragment as `#clankerbend_token=<token>`. App JavaScript reads
-   the fragment, stores the token in memory, immediately removes the fragment
-   with `history.replaceState`, and sends the token in the `Authorization`
-   header for JSON and SSE requests.
+   token in the URL fragment as `#clankerbend_token=<token>`. For served HTML,
+   the host may also inject a token bootstrap such as
+   `window.__CLANKERBEND_TOKEN` or `<meta name="clankerbend-token">` so URL
+   rewriting does not strand the app without a token. App JavaScript stores the
+   token in memory, may keep it in `sessionStorage` for hash-less reloads,
+   immediately removes any fragment with `history.replaceState`, and sends the
+   token in the `Authorization` header for JSON and SSE requests.
 2. **External clients**: the token is provided out of band by the launcher, such
-   as an environment variable, config file, local IPC channel, or command output.
+   as the `Token:` startup line, an environment variable, config file, local IPC
+   channel, or command output.
 
 Hosts must not require a token in the query string. Query strings are more
-likely to be logged or copied than URL fragments. Hosts may additionally set a
-same-origin secure session cookie for panels they serve, but clients must still
-support the bearer-token header.
+likely to be logged or copied than URL fragments. Clients must support the
+bearer-token header.
 
 ## State Model
 
@@ -758,6 +761,10 @@ ClankerBend can launch Codex Desktop with CDP:
   --user-data-dir=<test-or-clankerbend-profile>
 ```
 
+When account profiles are enabled, the adapter also launches Desktop with the
+selected profile's `CODEX_HOME` and isolated Electron user-data directory.
+ClankerBend `0.1` runs one managed Codex Desktop instance at a time.
+
 The host must not patch `/Applications/Codex.app`.
 
 ### Attach

package/host/src/app-registry.js

@@ -144,6 +144,8 @@ export async function loadProfileFromManifests(options) {
     hostId: options.hostId,
     hostName: options.hostName,
     runDir: options.runDir,
+    runtimePaths: options.runtimePaths,
+    accountRegistry: options.accountRegistry,
     defaultPanelAppId,
     apps,
     manifests: loadedApps.map((loaded) => loaded.manifest),

package/host/src/codex-desktop-cdp-adapter.js

@@ -67,6 +67,8 @@ class CodexDesktopCdpAdapter {
     this.codexCli = options.codexCli || DEFAULT_CODEX_CLI;
     this.runDir = options.runDir ? resolve(options.runDir) : null;
     this.profileDir = options.profileDir || (this.runDir ? join(this.runDir, "codex-profile") : null);
+    this.codexHome = options.codexHome ? resolve(options.codexHome) : null;
+    this.resetProfileDir = options.resetProfileDir === true;
     this.rendererBridges = normalizeRendererBridges(options);
     this.providers = normalizeProviders(options, this.rendererBridges);
     this.snapshotToTranscript = options.snapshotToTranscript || defaultSnapshotToTranscript;
@@ -93,9 +95,10 @@ class CodexDesktopCdpAdapter {
     }
     if (this.runDir) mkdirSync(this.runDir, { recursive: true });
     if (this.profileDir) {
-      rmSync(this.profileDir, { recursive: true, force: true });
+      if (this.resetProfileDir) rmSync(this.profileDir, { recursive: true, force: true });
       mkdirSync(this.profileDir, { recursive: true });
     }
+    if (this.codexHome) mkdirSync(this.codexHome, { recursive: true });
 
     this.cdpPort = await freePort();
     this.child = spawn(this.codexApp, [
@@ -105,6 +108,7 @@ class CodexDesktopCdpAdapter {
     ], {
       env: {
         ...process.env,
+        ...(this.codexHome ? { CODEX_HOME: this.codexHome } : {}),
         ...(this.profileDir ? { CODEX_ELECTRON_USER_DATA_PATH: this.profileDir } : {})
       },
       stdio: ["ignore", "pipe", "pipe"]
@@ -885,6 +889,24 @@ class CodexDesktopCdpAdapter {
         await this.host.highlightRange(event.range, { durationMs: 1200 });
       } else if (event.kind === "highlightAnchor" && event.anchorId) {
         await this.host.highlightAnchor(event.anchorId, { durationMs: 1200 });
+      } else if (event.kind === "codexAccountSwitch" && event.accountId) {
+        if (typeof this.host.transcriptAdapter.switchTo !== "function") throw new Error("Codex account switching is unavailable");
+        await this.host.transcriptAdapter.switchTo(String(event.accountId));
+      } else if (event.kind === "codexAccountCreateAndSwitch") {
+        if (typeof this.host.transcriptAdapter.createAccount !== "function" || typeof this.host.transcriptAdapter.switchTo !== "function") {
+          throw new Error("Codex account creation is unavailable");
+        }
+        const account = await this.host.transcriptAdapter.createAccount({ label: String(event.label || "Account") });
+        await this.host.transcriptAdapter.switchTo(account.id);
+      } else if (event.kind === "codexAccountSetDefault" && event.accountId) {
+        if (typeof this.host.transcriptAdapter.setDefault !== "function") throw new Error("Codex account defaults are unavailable");
+        await this.host.transcriptAdapter.setDefault(String(event.accountId));
+      } else if (event.kind === "codexAccountAdoptAsPrimary" && event.accountId) {
+        if (typeof this.host.transcriptAdapter.adoptAsPrimary !== "function") throw new Error("Codex primary adoption is unavailable");
+        await this.host.transcriptAdapter.adoptAsPrimary(String(event.accountId));
+      } else if (event.kind === "codexAccountDelete" && event.accountId) {
+        if (typeof this.host.transcriptAdapter.deleteAccount !== "function") throw new Error("Codex account removal is unavailable");
+        await this.host.transcriptAdapter.deleteAccount(String(event.accountId));
       }
     }
   }