claude-multiacc 1.0.11 → 1.0.12

package/bin/codex-accounts

@@ -421,8 +421,21 @@ cmd_add() {
   mutate_lock || die "could not acquire the account lock — try again"
   owner="$(email_owner "$got")"
   if [ -n "$owner" ]; then
-    mutate_unlock
-    echo "$got is already added as $owner — skipping (nothing added)."
+    # The sign-in itself succeeded and produced a fresh credential for an account
+    # that is already registered — don't throw it away: save it to that account,
+    # exactly as `login $owner` would have. This machine now runs $owner.
+    local od="$ACC_ROOT/$owner"
+    seed_account_dir "$od"
+    if mv -f "$d/auth.json" "$od/auth.json" 2>/dev/null; then
+      chmod 600 "$od/auth.json" 2>/dev/null || true
+      clear_auth_markers "$od"
+      mutate_unlock
+      log_to ops.log "add redirect: signed in as $got (already $owner) — credential saved to $owner"
+      echo "$got is already added as $owner — the fresh sign-in was saved to $owner (usable on this machine now)."
+    else
+      mutate_unlock
+      echo "$got is already added as $owner — skipping (nothing added)."
+    fi
     return 0   # RESERVED_DIR still set -> trap removes the temp dir
   fi
   if [ -n "$email" ] && [ "$got" != "$email" ]; then
@@ -692,6 +705,26 @@ PYEOF
   got_lc="$(printf '%s' "$got" | tr '[:upper:]' '[:lower:]')"
   email_lc="$(printf '%s' "$email" | tr '[:upper:]' '[:lower:]')"
   if [ -n "$got" ] && [ "$got_lc" != "$email_lc" ] && [ "$force" != "1" ]; then
+    # Signed in as a DIFFERENT account. If that account is registered in this pool,
+    # the sign-in was not a mistake worth discarding — route the fresh credential to
+    # ITS account dir (what `login <owner>` would have produced), restore this
+    # account's prior state, and report honestly that THIS account is still unfixed.
+    local owner
+    owner="$(email_owner "$got")"
+    if [ -n "$owner" ] && [ "$owner" != "$id" ]; then
+      local od="$ACC_ROOT/$owner"
+      seed_account_dir "$od"
+      if mv -f "$d/auth.json" "$od/auth.json" 2>/dev/null; then
+        chmod 600 "$od/auth.json" 2>/dev/null || true
+        clear_auth_markers "$od"
+        restore_snap
+        trap - INT TERM
+        log_to ops.log "login redirect: signed in as $got -> credential saved to $owner (target was $id)"
+        echo "you signed in as $got — that is $owner, so the credential was saved to $owner (usable now)."
+        echo "$id ($email) still needs its own sign-in: codex-accounts login $id"
+        return 1
+      fi
+    fi
     restore_snap
     trap - INT TERM
     die "you signed in as $got but $id is $email — nothing saved, previous credential restored (use --force to override)"
@@ -819,12 +852,27 @@ cmd_relogin() {
     read -r ans
     case "$ans" in y|Y|yes) ;; *) echo "aborted"; return 1 ;; esac
   fi
+  # Accounts that were BROKEN when this run started: if one of them turns healthy
+  # mid-run (a redirected sign-in from an earlier iteration landed its credential),
+  # asking the user to sign it in again would be pure friction — it gets skipped.
+  # Accounts that were healthy at start (explicit ids / --all) are never skipped:
+  # the user asked to re-authenticate them on purpose.
+  local pre_bad
+  pre_bad=" $(accounts_needing_login 2>/dev/null | tr '\n' ' ') "
   # One sync at the end instead of one per account: each auto_sync is an ssh round trip.
   local prev_no_sync="${CODEX_MULTIACC_NO_SYNC:-0}" failed="" done_ok=0
   export CODEX_MULTIACC_NO_SYNC=1
   for id in $ids; do
     echo
     echo "=== $id ==============================================================="
+    case "$pre_bad" in
+      *" $id "*)
+        if [ "$(account_audit 2>/dev/null | awk -F'\t' -v i="$id" '$1 == i { print $4 }')" = "ok" ]; then
+          echo "$id already has a working login (a credential landed during an earlier sign-in) — skipping."
+          done_ok=$((done_ok + 1))
+          continue
+        fi ;;
+    esac
     if [ "$browser" = "1" ]; then
       ( cmd_login "$id" --browser ) && done_ok=$((done_ok + 1)) || failed="$failed $id"
     else

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-multiacc",
-  "version": "1.0.11",
+  "version": "1.0.12",
   "description": "Multi-account addon for Claude Code and OpenAI Codex CLI: every claude / claude -p and every codex / codex exec runs under a randomly-picked subscription account with the most usage headroom. Mirrors to a deploy server. No API keys.",
   "type": "module",
   "bin": {

package/tests/run-tests.sh

@@ -1757,6 +1757,62 @@ EOF
 )"
 [ "$got_email" = "d@cx" ] && t_ok "codex: refused login restores the prior credential" \
   || t_fail "codex login restore" "auth.json now belongs to: $got_email"
+# signing in as a DIFFERENT-but-REGISTERED account routes the credential to that
+# account instead of discarding it (and the target account stays honestly unfixed)
+rm -f "$CX/acct-01/auth.json"
+out="$(FAKE_EMAIL=a@cx codex-accounts login acct-04 2>&1)"
+rc=$?
+check "codex: cross-account sign-in is redirected, not discarded" "credential was saved to acct-01" "$out"
+check "codex: redirect says the target still needs its sign-in" "acct-04 (d@cx) still needs its own sign-in" "$out"
+[ "$rc" != "0" ] && t_ok "codex: redirected login still exits nonzero for the target" \
+  || t_fail "codex redirect rc" "rc=0 for an account that was not fixed"
+[ -s "$CX/acct-01/auth.json" ] && t_ok "codex: redirected credential landed at its owner" \
+  || t_fail "codex redirect landing" "acct-01/auth.json missing"
+got_email="$(python3 - "$CX/acct-04/auth.json" <<'EOF'
+import base64, json, sys
+t = json.load(open(sys.argv[1]))['tokens']['id_token']
+p = t.split('.')[1]; p += '=' * (-len(p) % 4)
+print(json.loads(base64.urlsafe_b64decode(p)).get('email', ''))
+EOF
+)"
+[ "$got_email" = "d@cx" ] && t_ok "codex: redirect restored the target's prior credential" \
+  || t_fail "codex redirect restore" "acct-04 auth.json belongs to: $got_email"
+# `add` while signed into an already-registered account also keeps the credential
+rm -f "$CX/acct-01/auth.json"
+before_dirs="$(ls "$CX" | sort)"
+out="$(FAKE_EMAIL=a@cx codex-accounts add 2>&1)"
+rc=$?
+check "codex: add of a registered account saves the fresh sign-in to it" "fresh sign-in was saved to acct-01" "$out"
+[ "$rc" = "0" ] && t_ok "codex: add redirect exits 0 (nothing new to register)" || t_fail "codex add redirect rc" "rc=$rc"
+[ -s "$CX/acct-01/auth.json" ] && t_ok "codex: add redirect landed the credential" \
+  || t_fail "codex add redirect" "acct-01/auth.json missing"
+[ "$before_dirs" = "$(ls "$CX" | sort)" ] && t_ok "codex: add redirect leaves no reserved dir behind" \
+  || t_fail "codex add redirect cleanup" "pool dirs changed"
+n="$(grep -c '"email": "a@cx"' "$CX/accounts.json")"
+[ "$n" = "1" ] && t_ok "codex: add redirect creates no duplicate entry" || t_fail "codex add redirect dup" "count=$n"
+# relogin end-to-end: a redirect mid-run fixes the OTHER account, whose own turn is
+# then skipped instead of demanding a second sign-in. Both accounts' home must be
+# THIS machine's kind, or a credless account reads as 'remote' (grant lives
+# elsewhere) on the other platform and never enters the worklist.
+cx_mk=mac; [ "$(uname -s)" = "Darwin" ] || cx_mk=linux
+python3 - "$CX/accounts.json" "$cx_mk" <<'EOF'
+import json, os, sys
+d = json.load(open(sys.argv[1]))
+for a in d['accounts']:
+    if a['id'] in ('acct-01', 'acct-04'):
+        a['home'] = sys.argv[2]
+json.dump(d, open(sys.argv[1] + '.tmp', 'w'), indent=2); os.replace(sys.argv[1] + '.tmp', sys.argv[1])
+EOF
+rm -f "$CX/acct-01/auth.json" "$CX/acct-04/auth.json"
+out="$(FAKE_EMAIL=d@cx codex-accounts relogin --yes 2>&1)"
+rc=$?
+check "codex: relogin redirect saves the mis-ordered sign-in" "credential was saved to acct-04" "$out"
+check "codex: relogin skips an account fixed mid-run" "already has a working login" "$out"
+check "codex: relogin counts the redirect-fixed account" "re-authenticated 1 of 2" "$out"
+check "codex: relogin still reports the unfixed account" "still failing: acct-01" "$out"
+[ "$rc" != "0" ] && t_ok "codex: relogin with an unfixed account exits nonzero" || t_fail "codex relogin redirect rc" "rc=0"
+mk_cx_auth "$CX/acct-01/auth.json" a@cx "$FUTURE_EXP"
+mk_cx_auth "$CX/acct-04/auth.json" d@cx "$FUTURE_EXP"
 # the sign-in ceremony is DEVICE-CODE by default (the localhost browser callback
 # cannot reach a remote/SSH machine); --browser opts into the callback flow
 export FAKE_LOGIN_ARGS="$WORK/cx-login-args"