claude-multiacc 1.0.0

package/bin/cli.mjs

@@ -0,0 +1,112 @@
+#!/usr/bin/env node
+// claude-multiacc npm entrypoint. Thin dispatcher over the bash addon:
+//   claude-multiacc [install]      run install.sh (install or update, idempotent)
+//   claude-multiacc uninstall [--purge-data]
+//   claude-multiacc self-update    npm i -g claude-multiacc@latest, then re-install
+//   claude-multiacc doctor         environment + auth summary
+//   claude-multiacc <accounts...>  passthrough to claude-accounts (list/status/add/...)
+// A globally-installed package auto-runs install.sh on (re)install via postinstall, so
+// `npm i -g claude-multiacc@latest` fully updates the addon. update-notifier nudges
+// users when a newer version is on npm.
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { createRequire } from 'node:module';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const ROOT = join(__dirname, '..');
+const pkg = JSON.parse(readFileSync(join(ROOT, 'package.json'), 'utf8'));
+
+function notifyUpdate() {
+  // Best-effort, never fatal: update-notifier is optional at runtime.
+  try {
+    const req = createRequire(import.meta.url);
+    const updateNotifier = req('update-notifier');
+    updateNotifier({ pkg, updateCheckInterval: 1000 * 60 * 60 * 24 }).notify({ defer: true });
+  } catch {
+    /* dependency missing or offline — ignore */
+  }
+}
+
+function sh(cmd, args, opts = {}) {
+  const r = spawnSync(cmd, args, { stdio: 'inherit', ...opts });
+  return typeof r.status === 'number' ? r.status : 1;
+}
+
+function runInstall(extra = []) {
+  return sh('bash', [join(ROOT, 'install.sh'), ...extra]);
+}
+
+function runAccounts(args) {
+  return sh('bash', [join(ROOT, 'bin', 'claude-accounts'), ...args]);
+}
+
+const HELP = `claude-multiacc ${pkg.version}
+
+Every 'claude' / 'claude -p' runs under a randomly-picked subscription account with the
+most usage headroom; the account set mirrors to a deploy server. No API keys.
+
+USAGE
+  claude-multiacc [install]            install or update the addon (idempotent)
+  claude-multiacc uninstall [--purge-data]
+  claude-multiacc self-update          update to the latest npm release + re-install
+  claude-multiacc doctor               show environment + account health
+  claude-multiacc <cmd> [args...]      run a claude-accounts command, e.g.
+                                       list | status | add <email> | login <acct-NN> |
+                                       remove <acct-NN> | sync | verify | limits | health
+  claude-multiacc -v | --version
+  claude-multiacc -h | --help
+
+INSTALL
+  npm install -g claude-multiacc       # postinstall wires up the PATH shim + schedules
+  # or, no global install:
+  npx claude-multiacc                  # runs the installer once
+
+Docs: ${pkg.homepage}`;
+
+const argv = process.argv.slice(2);
+const cmd = argv[0];
+let status = 0;
+
+switch (cmd) {
+  case undefined:
+  case 'install':
+  case 'update':
+    status = runInstall(argv.slice(1));
+    break;
+  case 'uninstall':
+    status = runInstall(['--uninstall', ...argv.slice(1)]);
+    break;
+  case 'self-update': {
+    console.log('Updating claude-multiacc from npm…');
+    const up = sh('npm', ['install', '-g', `${pkg.name}@latest`]);
+    if (up !== 0) {
+      console.error('npm update failed — is this a global npm install? (git checkouts update with: git pull && ./install.sh)');
+      status = up;
+      break;
+    }
+    // The freshly-installed global package re-runs its own postinstall, so the addon
+    // is already reconciled; nothing else to do here.
+    console.log('Updated. Open a new shell to pick up any PATH changes.');
+    break;
+  }
+  case 'doctor':
+    status = runAccounts(['status']);
+    break;
+  case '-v':
+  case '--version':
+    console.log(pkg.version);
+    break;
+  case '-h':
+  case '--help':
+    console.log(HELP);
+    break;
+  default:
+    // Anything else is a claude-accounts subcommand (list/status/add/login/...).
+    status = runAccounts(argv);
+    break;
+}
+
+notifyUpdate();
+process.exit(status);

package/install.sh

@@ -0,0 +1,277 @@
+#!/usr/bin/env bash
+# claude-multiacc installer — macOS + Linux, idempotent, fully reversible.
+# Installs an addon that PATH-shadows `claude`; NEVER touches the Claude Code app,
+# its install dir, or its update machinery.
+#
+#   ./install.sh [--server user@host]     install or update (data untouched)
+#   ./install.sh --uninstall              remove addon (keeps ~/.claude-accounts)
+#   ./install.sh --uninstall --purge-data remove addon + all account data
+set -u
+
+REPO_DIR="$(cd "$(dirname "$0")" && pwd -P)"
+# shellcheck source=lib/common.sh
+. "$REPO_DIR/lib/common.sh"
+
+MARK_BEGIN="# >>> claude-multiacc >>>"
+MARK_END="# <<< claude-multiacc <<<"
+CRON_TAG="# claude-multiacc"
+PLIST_LIMITS="$HOME/Library/LaunchAgents/com.claude-multiacc.limits.plist"
+PLIST_HEALTH="$HOME/Library/LaunchAgents/com.claude-multiacc.health.plist"
+PLIST_UPDATE="$HOME/Library/LaunchAgents/com.claude-multiacc.update.plist"
+PROFILED="/etc/profile.d/claude-multiacc.sh"
+
+UNINSTALL=0
+PURGE=0
+SERVER_OVERRIDE=""
+NO_SCHEDULE=0
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --uninstall) UNINSTALL=1; shift ;;
+    --purge-data) PURGE=1; shift ;;
+    --server) SERVER_OVERRIDE="${2:?--server requires a value}"; shift 2 ;;
+    --no-schedule) NO_SCHEDULE=1; shift ;;
+    *) echo "unknown flag: $1" >&2; exit 1 ;;
+  esac
+done
+
+strip_block() { # remove our marked block from a file (portable, no sed -i)
+  local f="$1"
+  [ -f "$f" ] || return 0
+  # Unmatched begin marker (end line hand-deleted): stripping would eat the rest
+  # of the rc file. Leave it alone and say so.
+  if grep -qF "$MARK_BEGIN" "$f" && ! grep -qF "$MARK_END" "$f"; then
+    echo "  WARNING: $f has an unterminated claude-multiacc block — fix it by hand; not touching this file" >&2
+    return 1
+  fi
+  awk -v b="$MARK_BEGIN" -v e="$MARK_END" '
+    $0 == b { skip = 1; next }
+    $0 == e { skip = 0; next }
+    !skip { print }
+  ' "$f" > "$f.claude-multiacc.tmp" && mv "$f.claude-multiacc.tmp" "$f"
+}
+
+path_block_body() {
+  # Move (not just add) the shim dir to the front: later rc lines prepend
+  # ~/.local/bin, so a plain add-once guard would leave the real binary first.
+  printf 'PATH="$(printf %%s ":$PATH:" | sed '\''s|:%s/bin:|:|g; s|^:||; s|:$||'\'')"\n' "$REPO_DIR"
+  printf 'export PATH="%s/bin:$PATH"\n' "$REPO_DIR"
+}
+
+append_block() { # strip then append our PATH block to a file
+  local f="$1"
+  strip_block "$f" || return 1   # never create a second block next to a broken one
+  {
+    printf '%s\n' "$MARK_BEGIN"
+    path_block_body
+    printf '%s\n' "$MARK_END"
+  } >> "$f"
+}
+
+mac_schedule_install() {
+  mkdir -p "$HOME/Library/LaunchAgents"
+  cat > "$PLIST_LIMITS" <<EOF
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>Label</key><string>com.claude-multiacc.limits</string>
+  <key>ProgramArguments</key><array>
+    <string>$REPO_DIR/bin/claude-accounts</string>
+    <string>limits</string>
+    <string>--quiet</string>
+  </array>
+  <key>StartInterval</key><integer>60</integer>
+  <key>RunAtLoad</key><true/>
+  <key>StandardOutPath</key><string>/dev/null</string>
+  <key>StandardErrorPath</key><string>/dev/null</string>
+</dict></plist>
+EOF
+  cat > "$PLIST_HEALTH" <<EOF
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>Label</key><string>com.claude-multiacc.health</string>
+  <key>ProgramArguments</key><array>
+    <string>$REPO_DIR/bin/claude-accounts</string>
+    <string>health</string>
+  </array>
+  <key>StartCalendarInterval</key><dict>
+    <key>Weekday</key><integer>1</integer>
+    <key>Hour</key><integer>9</integer>
+    <key>Minute</key><integer>17</integer>
+  </dict>
+  <key>StandardOutPath</key><string>/dev/null</string>
+  <key>StandardErrorPath</key><string>/dev/null</string>
+</dict></plist>
+EOF
+  # Weekly auto-update (Sunday 04:07). No-op unless this is an npm or git install.
+  cat > "$PLIST_UPDATE" <<EOF
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>Label</key><string>com.claude-multiacc.update</string>
+  <key>ProgramArguments</key><array>
+    <string>$REPO_DIR/bin/claude-accounts</string>
+    <string>self-update</string>
+    <string>--quiet</string>
+  </array>
+  <key>StartCalendarInterval</key><dict>
+    <key>Weekday</key><integer>0</integer>
+    <key>Hour</key><integer>4</integer>
+    <key>Minute</key><integer>7</integer>
+  </dict>
+  <key>StandardOutPath</key><string>/dev/null</string>
+  <key>StandardErrorPath</key><string>/dev/null</string>
+</dict></plist>
+EOF
+  launchctl unload "$PLIST_LIMITS" 2>/dev/null || true
+  launchctl unload "$PLIST_HEALTH" 2>/dev/null || true
+  launchctl unload "$PLIST_UPDATE" 2>/dev/null || true
+  launchctl load -w "$PLIST_LIMITS" 2>/dev/null || echo "  (launchctl load limits agent failed — limits refresh will rely on the shim's opportunistic kick)"
+  launchctl load -w "$PLIST_HEALTH" 2>/dev/null || true
+  [ "${CLAUDE_MULTIACC_AUTOUPDATE:-1}" = "1" ] && launchctl load -w "$PLIST_UPDATE" 2>/dev/null || true
+  echo "  launchd: limits refresh every 60s + weekly health check + weekly auto-update"
+}
+
+mac_schedule_remove() {
+  launchctl unload "$PLIST_LIMITS" 2>/dev/null || true
+  launchctl unload "$PLIST_HEALTH" 2>/dev/null || true
+  launchctl unload "$PLIST_UPDATE" 2>/dev/null || true
+  rm -f "$PLIST_LIMITS" "$PLIST_HEALTH" "$PLIST_UPDATE"
+}
+
+linux_schedule_install() {
+  local tmp
+  tmp="$(mktemp)"
+  { crontab -l 2>/dev/null | grep -v "$CRON_TAG" || true; } > "$tmp"
+  {
+    echo "* * * * * $REPO_DIR/bin/claude-accounts limits --quiet >/dev/null 2>&1 $CRON_TAG"
+    echo "17 9 * * 1 $REPO_DIR/bin/claude-accounts health >/dev/null 2>&1 $CRON_TAG"
+    [ "${CLAUDE_MULTIACC_AUTOUPDATE:-1}" = "1" ] && \
+      echo "7 4 * * 0 $REPO_DIR/bin/claude-accounts self-update --quiet >/dev/null 2>&1 $CRON_TAG"
+  } >> "$tmp"
+  crontab "$tmp"
+  rm -f "$tmp"
+  echo "  cron: limits refresh every 60s + weekly health check + weekly auto-update"
+}
+
+linux_schedule_remove() {
+  local tmp
+  tmp="$(mktemp)"
+  { crontab -l 2>/dev/null | grep -v "$CRON_TAG" || true; } > "$tmp"
+  crontab "$tmp"
+  rm -f "$tmp"
+}
+
+do_uninstall() {
+  echo "claude-multiacc: uninstalling (restoring stock behavior)"
+  strip_block "$HOME/.zshenv"
+  strip_block "$HOME/.zprofile"
+  strip_block "$HOME/.zshrc"
+  strip_block "$HOME/.bashrc"
+  strip_block "$HOME/.bash_profile"
+  strip_block "$HOME/.profile"
+  if [ "$(machine_kind)" = "mac" ]; then
+    mac_schedule_remove
+  else
+    linux_schedule_remove
+    [ -f "$PROFILED" ] && rm -f "$PROFILED"
+    if [ -L /usr/local/bin/claude ] && [ "$(canon_path /usr/local/bin/claude)" = "$(canon_path "$REPO_DIR/bin/claude")" ]; then
+      rm -f /usr/local/bin/claude
+      echo "  removed /usr/local/bin/claude shim symlink"
+    fi
+  fi
+  if [ "$PURGE" = "1" ]; then
+    case "$ACC_ROOT" in
+      */.claude-accounts) rm -rf "$ACC_ROOT"; echo "  purged $ACC_ROOT" ;;
+      *) echo "  refusing to purge unusual ACC_ROOT: $ACC_ROOT" >&2 ;;
+    esac
+  else
+    echo "  account data kept at $ACC_ROOT (use --purge-data to remove)"
+  fi
+  echo "uninstall complete — stock claude behavior restored"
+}
+
+do_install() {
+  local kind
+  kind="$(machine_kind)"
+  echo "claude-multiacc: installing (mode: $kind, repo: $REPO_DIR)"
+
+  [ -x "$REPO_DIR/bin/claude" ] || chmod +x "$REPO_DIR/bin/claude" 2>/dev/null || true
+  [ -x "$REPO_DIR/bin/claude-accounts" ] || chmod +x "$REPO_DIR/bin/claude-accounts" 2>/dev/null || true
+
+  local real
+  if real="$(find_real_claude "$REPO_DIR/bin/claude")"; then
+    echo "  real claude binary: $real ($("$real" --version 2>/dev/null | head -1 || echo 'version unknown'))"
+  else
+    echo "  WARNING: no real claude binary found yet — install Claude Code first (https://claude.com/claude-code)" >&2
+  fi
+
+  # Keychain-mode detection: per-dir /login isolation needs file-based credentials.
+  if [ "$kind" = "mac" ] && [ ! -f "$HOME/.claude/.credentials.json" ] \
+    && security find-generic-password -s "Claude Code-credentials" >/dev/null 2>&1; then
+    echo "  WARNING: this Mac stores Claude Code credentials in the Keychain, not files." >&2
+    echo "  Per-directory logins may not isolate; use token-based accounts (claude-accounts mint/import --token-file)." >&2
+  fi
+
+  manifest_init "${SERVER_OVERRIDE:-$DEFAULT_SERVER}"
+  if [ -n "$SERVER_OVERRIDE" ]; then
+    "$PYBIN" - "$MANIFEST" "$SERVER_OVERRIDE" <<'PYEOF'
+import json, os, sys
+doc = json.load(open(sys.argv[1]))
+doc['server'] = sys.argv[2]
+with open(sys.argv[1] + '.tmp', 'w') as f:
+    json.dump(doc, f, indent=2)
+    f.write('\n')
+os.replace(sys.argv[1] + '.tmp', sys.argv[1])
+PYEOF
+  fi
+  echo "  account pool: $ACC_ROOT (manifest ready)"
+
+  if [ "$kind" = "mac" ]; then
+    # .zshenv covers non-interactive zsh; the .zshrc block must be LAST so it wins
+    # over ~/.local/bin re-prepends done earlier in .zshrc/.zprofile.
+    # zsh reads: .zshenv always; .zprofile for login; .zshrc for interactive.
+    # The block must end each file that later re-prepends ~/.local/bin.
+    touch "$HOME/.zshenv"
+    append_block "$HOME/.zshenv"
+    touch "$HOME/.zprofile"
+    append_block "$HOME/.zprofile"
+    touch "$HOME/.zshrc"
+    append_block "$HOME/.zshrc"
+    [ -f "$HOME/.bash_profile" ] && append_block "$HOME/.bash_profile"
+    [ -f "$HOME/.bashrc" ] && append_block "$HOME/.bashrc"
+    echo "  PATH block: end of ~/.zshenv, ~/.zprofile, ~/.zshrc (+ bash rc files if present)"
+    [ "$NO_SCHEDULE" = "1" ] || mac_schedule_install
+  else
+    touch "$HOME/.bashrc"
+    append_block "$HOME/.bashrc"
+    if [ -w /etc/profile.d ] 2>/dev/null || [ "$(id -u)" = "0" ]; then
+      {
+        printf '%s\n' "$MARK_BEGIN"
+        path_block_body
+        printf '%s\n' "$MARK_END"
+      } > "$PROFILED"
+      echo "  PATH block: ~/.bashrc + $PROFILED"
+    fi
+    if [ "$(id -u)" = "0" ]; then
+      if [ -e /usr/local/bin/claude ] && [ ! -L /usr/local/bin/claude ]; then
+        echo "  WARNING: /usr/local/bin/claude exists and is a real file — NOT overwriting." >&2
+      else
+        ln -sfn "$REPO_DIR/bin/claude" /usr/local/bin/claude
+        echo "  shim: /usr/local/bin/claude -> $REPO_DIR/bin/claude (systemd-PATH compatible)"
+      fi
+    fi
+    [ "$NO_SCHEDULE" = "1" ] || linux_schedule_install
+  fi
+
+  echo
+  echo "install complete. Open a new shell (or 'export PATH=\"$REPO_DIR/bin:\$PATH\"'), then:"
+  echo "  claude-accounts list      # see the pool"
+  echo "  claude-accounts status    # auth + limits detail"
+}
+
+if [ "$UNINSTALL" = "1" ]; then
+  do_uninstall
+else
+  do_install
+fi

package/lib/common.sh

@@ -0,0 +1,200 @@
+#!/usr/bin/env bash
+# lib/common.sh — claude-multiacc shared helpers.
+# Sourced by bin/claude-accounts and install.sh. Bash 3.2 compatible (macOS stock).
+# shellcheck disable=SC2034
+
+ACC_ROOT="${CLAUDE_ACCOUNTS_DIR:-$HOME/.claude-accounts}"
+MANIFEST="$ACC_ROOT/accounts.json"
+PYBIN="${CLAUDE_MULTIACC_PYTHON:-python3}"
+DEFAULT_SERVER="root@138.197.36.107"
+DEFAULT_SERVER_ROOT="/root/.claude-accounts"
+DEFAULT_SERVER_REPO="/root/claude-multiacc"
+USAGE_URL="${CLAUDE_MULTIACC_USAGE_URL:-https://api.anthropic.com/api/oauth/usage}"
+
+ts_utc() { date -u +%Y-%m-%dT%H:%M:%SZ; }
+epoch_now() { date +%s; }
+
+log_to() { # log_to <file-in-acc-root> <msg...>
+  local f="$1"; shift
+  [ -d "$ACC_ROOT" ] || return 0
+  printf '%s %s\n' "$(ts_utc)" "$*" >> "$ACC_ROOT/$f" 2>/dev/null || true
+}
+
+die() { printf 'claude-accounts: error: %s\n' "$*" >&2; exit 1; }
+warn() { printf 'claude-accounts: warning: %s\n' "$*" >&2; }
+
+machine_kind() { case "$(uname -s)" in Darwin) echo mac ;; *) echo linux ;; esac; }
+
+if [ "$(uname -s)" = "Darwin" ]; then
+  file_mtime() { stat -f %m "$1" 2>/dev/null || echo 0; }
+else
+  file_mtime() { stat -c %Y "$1" 2>/dev/null || echo 0; }
+fi
+
+canon_path() { # resolve symlinks (loop-guarded) and normalize; always prints something
+  local p="$1" t i=0 d b
+  case "$p" in /*) ;; *) p="$PWD/$p" ;; esac
+  while [ -L "$p" ] && [ "$i" -lt 40 ]; do
+    t="$(readlink "$p")" || break
+    case "$t" in /*) p="$t" ;; *) p="$(dirname "$p")/$t" ;; esac
+    i=$((i+1))
+  done
+  d="$(cd "$(dirname "$p")" 2>/dev/null && pwd -P)" || { printf '%s\n' "$p"; return 0; }
+  b="$(basename "$p")"
+  if [ "$d" = "/" ]; then printf '/%s\n' "$b"; else printf '%s/%s\n' "$d" "$b"; fi
+}
+
+is_shim_file() { head -c 300 "$1" 2>/dev/null | grep -q claude-multiacc-shim; }
+
+# Prints an INVOCABLE path to the real claude binary (kept as the symlink path,
+# not the canonical target, so process cmdlines keep matching monitors like
+# `pgrep -f '.local/bin/claude'`). $1 = path of the caller to exclude (optional).
+find_real_claude() {
+  local self_c cand c d
+  self_c="$(canon_path "${1:-${BASH_SOURCE[0]}}")"
+  local oldifs="$IFS"
+  IFS=':'; set -f
+  # shellcheck disable=SC2086
+  set -- $PATH
+  IFS="$oldifs"; set +f
+  for d in "$@"; do
+    [ -n "$d" ] || continue
+    cand="$d/claude"
+    [ -f "$cand" ] && [ -x "$cand" ] || continue
+    c="$(canon_path "$cand")"
+    [ "$c" = "$self_c" ] && continue
+    case "$c" in "$ACC_ROOT"/*) continue ;; esac
+    is_shim_file "$c" && continue
+    printf '%s\n' "$cand"; return 0
+  done
+  for cand in "$HOME/.local/bin/claude" /usr/local/bin/claude /opt/homebrew/bin/claude /usr/bin/claude; do
+    [ -f "$cand" ] && [ -x "$cand" ] || continue
+    c="$(canon_path "$cand")"
+    [ "$c" = "$self_c" ] && continue
+    is_shim_file "$c" && continue
+    printf '%s\n' "$cand"; return 0
+  done
+  return 1
+}
+
+manifest_get() { # manifest_get <dot.path> [default]
+  local val
+  if [ -f "$MANIFEST" ]; then
+    val="$("$PYBIN" - "$MANIFEST" "$1" <<'PYEOF' 2>/dev/null
+import json, sys
+cur = json.load(open(sys.argv[1]))
+for part in sys.argv[2].split('.'):
+    if isinstance(cur, dict) and part in cur:
+        cur = cur[part]
+    else:
+        sys.exit(1)
+print(cur if not isinstance(cur, (dict, list)) else json.dumps(cur))
+PYEOF
+)" && { printf '%s\n' "$val"; return 0; }
+  fi
+  [ $# -ge 2 ] && { printf '%s\n' "$2"; return 0; }
+  return 1
+}
+
+# Account ids are used to build filesystem paths and remote shell words, so they are
+# validated at EVERY boundary — a hand-edited or corrupted manifest must never be able
+# to smuggle `../` (path traversal) or shell metacharacters out of the pool directory.
+valid_acct_id() { case "$1" in acct-[0-9][0-9]) return 0 ;; *) return 1 ;; esac; }
+
+account_ids() { # prints VALID manifest account ids, one per line
+  [ -f "$MANIFEST" ] || return 0
+  "$PYBIN" - "$MANIFEST" <<'PYEOF' 2>/dev/null
+import json, re, sys
+for a in json.load(open(sys.argv[1])).get('accounts', []):
+    if isinstance(a, dict) and re.fullmatch(r'acct-\d{2}', str(a.get('id', ''))):
+        print(a['id'])
+PYEOF
+}
+
+# Remote paths and ssh targets come from the manifest and are interpolated into a
+# remote shell command, so they must be strictly shaped — no quotes, spaces, $, ;, etc.
+# Reject-by-character-class (a trailing `*` glob would match metacharacters and defeat
+# the check), then require the leading shape.
+valid_remote_path() {
+  case "$1" in
+    *[!A-Za-z0-9._/-]*) return 1 ;;   # any char outside the safe set => reject
+    /?*) return 0 ;;                  # must be an absolute path
+    *) return 1 ;;
+  esac
+}
+valid_ssh_target() {
+  case "$1" in
+    *[!A-Za-z0-9._@-]*) return 1 ;;
+    ?*) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+acct_dir() { printf '%s/%s\n' "$ACC_ROOT" "$1"; }
+
+has_local_auth() { # $1 = acct dir
+  [ -f "$1/.credentials.json" ] || [ -s "$1/server.token" ]
+}
+
+manifest_init() { # manifest_init [server-target]
+  mkdir -p "$ACC_ROOT/tmp"
+  chmod 700 "$ACC_ROOT"
+  [ -f "$MANIFEST" ] && return 0
+  "$PYBIN" - "$MANIFEST" "${1:-$DEFAULT_SERVER}" "$DEFAULT_SERVER_ROOT" "$DEFAULT_SERVER_REPO" <<'PYEOF'
+import json, sys
+doc = {
+    "version": 1,
+    "server": sys.argv[2],
+    "server_root": sys.argv[3],
+    "server_repo": sys.argv[4],
+    "threshold": 90,
+    "accounts": [],
+}
+import os
+with open(sys.argv[1] + '.tmp', 'w') as f:
+    json.dump(doc, f, indent=2)
+    f.write('\n')
+os.replace(sys.argv[1] + '.tmp', sys.argv[1])
+PYEOF
+}
+
+# Seed an account config dir so headless runs never prompt: stripped .claude.json,
+# copied settings.json, shared projects/ symlink (shared history => --continue/--resume
+# work regardless of which account was picked).
+seed_account_dir() { # $1 = acct dir
+  local d="$1"
+  mkdir -p "$d"
+  chmod 700 "$d"
+  if [ ! -f "$d/.claude.json" ] && [ -f "$HOME/.claude.json" ]; then
+    "$PYBIN" - "$HOME/.claude.json" "$d/.claude.json" <<'PYEOF' 2>/dev/null || true
+import json, sys
+try:
+    doc = json.load(open(sys.argv[1]))
+except Exception:
+    sys.exit(0)
+for k in ('oauthAccount', 'userID'):
+    doc.pop(k, None)
+import os
+with open(sys.argv[2] + '.tmp', 'w') as f:
+    json.dump(doc, f)
+os.replace(sys.argv[2] + '.tmp', sys.argv[2])
+PYEOF
+  fi
+  if [ ! -f "$d/settings.json" ] && [ -f "$HOME/.claude/settings.json" ]; then
+    cp "$HOME/.claude/settings.json" "$d/settings.json" 2>/dev/null || true
+  fi
+  if [ ! -e "$d/projects" ] && [ -d "$HOME/.claude/projects" ]; then
+    ln -s "$HOME/.claude/projects" "$d/projects" 2>/dev/null || true
+  fi
+}
+
+rotate_log() { # keep logs bounded: rotate_log <file-in-acc-root> (keeps last ~256KB)
+  local f="$ACC_ROOT/$1"
+  [ -f "$f" ] || return 0
+  local sz
+  if [ "$(uname -s)" = "Darwin" ]; then sz="$(stat -f %z "$f" 2>/dev/null || echo 0)"
+  else sz="$(stat -c %s "$f" 2>/dev/null || echo 0)"; fi
+  if [ "${sz:-0}" -gt 524288 ]; then
+    tail -c 262144 "$f" > "$f.tmp" 2>/dev/null && mv "$f.tmp" "$f"
+  fi
+}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "claude-multiacc",
+  "version": "1.0.0",
+  "description": "Multi-account addon for Claude Code: every claude / claude -p runs under a randomly-picked subscription account with the most usage headroom. Mirrors to a deploy server. No API keys.",
+  "type": "module",
+  "bin": {
+    "claude-multiacc": "bin/cli.mjs"
+  },
+  "files": [
+    "bin/",
+    "lib/",
+    "install.sh",
+    "scripts/postinstall.mjs",
+    "tests/",
+    "README.md",
+    "CLAUDE_ACCS_TASK.md"
+  ],
+  "keywords": [
+    "claude",
+    "claude-code",
+    "anthropic",
+    "multi-account",
+    "subscription",
+    "rate-limit",
+    "usage-limits",
+    "addon",
+    "cli",
+    "gowalk"
+  ],
+  "author": {
+    "name": "Gowalk"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/gowalk-public/claude-multiacc.git"
+  },
+  "homepage": "https://github.com/gowalk-public/claude-multiacc#readme",
+  "bugs": {
+    "url": "https://github.com/gowalk-public/claude-multiacc/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "postinstall": "node scripts/postinstall.mjs",
+    "test": "bash tests/run-tests.sh"
+  },
+  "dependencies": {
+    "update-notifier": "^7.3.1"
+  }
+}

package/scripts/postinstall.mjs

@@ -0,0 +1,32 @@
+#!/usr/bin/env node
+// Runs after `npm install`. On a GLOBAL install/update it wires the addon up by
+// running install.sh (idempotent), so `npm i -g claude-multiacc@latest` fully updates
+// the shim, CLI, and scheduled jobs with no extra step. Deliberately best-effort:
+// npm's own CI, sandboxes, and non-global/dev installs must never be broken by it, and
+// a failed install.sh must not fail `npm install` — it only prints how to finish by hand.
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+
+function skip(reason) {
+  console.log(`claude-multiacc: skipping auto-setup (${reason}).`);
+  console.log('  Finish setup any time with:  claude-multiacc install');
+  process.exit(0);
+}
+
+// Only auto-run for a real global install. `npm_config_global` is set by npm for -g.
+if (process.env.CLAUDE_MULTIACC_SKIP_POSTINSTALL === '1') skip('CLAUDE_MULTIACC_SKIP_POSTINSTALL=1');
+if (process.env.CI) skip('CI environment');
+const isGlobal = process.env.npm_config_global === 'true' || process.env.npm_config_global === '1';
+if (!isGlobal) skip('local/dev install — not global');
+if (process.platform === 'win32') skip('Windows is not supported by the shim');
+
+console.log('claude-multiacc: configuring the PATH shim + scheduled jobs (install.sh)…');
+const r = spawnSync('bash', [join(ROOT, 'install.sh')], { stdio: 'inherit' });
+if (r.status !== 0) {
+  console.error('claude-multiacc: auto-setup did not complete. Run it manually:  claude-multiacc install');
+}
+// Never fail the npm install regardless of install.sh's exit code.
+process.exit(0);