claude-multiacc 1.0.18 → 1.0.19

package/bin/claude-accounts

@@ -2206,6 +2206,13 @@ cmd_post_sync() {
   cmd_verify --quick
 }
 
+# Version of the copy at $1, read from its package.json on disk — the only answer
+# that describes what will actually execute.
+pkg_version_at() {
+  [ -f "$1/package.json" ] || return 0
+  sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$1/package.json" | head -1
+}
+
 cmd_self_update() {
   # Update the addon in place. npm global install => npm i -g @latest (its postinstall
   # re-runs install.sh). git checkout => git pull + ./install.sh. Anything else is a
@@ -2217,16 +2224,32 @@ cmd_self_update() {
   case "$REPO_DIR" in
     */node_modules/claude-multiacc|*/node_modules/claude-multiacc/*)
       command -v npm >/dev/null 2>&1 || { ulog "self-update: npm not found; skipping"; return 0; }
-      local cur lat
-      cur="$(npm ls -g --depth=0 claude-multiacc 2>/dev/null | sed -n 's/.*claude-multiacc@//p' | head -1)"
+      local cur lat prefix after
+      # Update THE COPY THAT IS RUNNING, not whichever one the ambient npm prefix
+      # happens to point at. my-mini had two global installs — homebrew's on PATH and
+      # nvm's under `npm root -g` — and self-update kept upgrading the nvm one and
+      # reporting success while every `claude` invocation ran the stale homebrew copy.
+      # It sat eleven versions behind for weeks and said "already latest" throughout.
+      # A deploy nobody runs is not a deploy, and one that announces success is worse
+      # than one that fails.
+      prefix="${REPO_DIR%/lib/node_modules/claude-multiacc*}"
+      cur="$(pkg_version_at "$REPO_DIR")"
       lat="$(npm view claude-multiacc version 2>/dev/null)"
       if [ -n "$lat" ] && [ "$cur" = "$lat" ]; then
         ulog "self-update: already latest ($cur)"
         return 0
       fi
-      ulog "self-update: npm $cur -> ${lat:-latest}"
-      if npm install -g claude-multiacc@latest >>"$ACC_ROOT/update.log" 2>&1; then
-        ulog "self-update: npm update ok"
+      ulog "self-update: npm $cur -> ${lat:-latest} (prefix $prefix)"
+      if npm install -g --prefix "$prefix" claude-multiacc@latest \
+           >>"$ACC_ROOT/update.log" 2>&1; then
+        # Verify by re-reading the file on disk. npm reporting success says nothing
+        # about which tree it wrote to.
+        after="$(pkg_version_at "$REPO_DIR")"
+        if [ -n "$lat" ] && [ "$after" != "$lat" ]; then
+          ulog "self-update: npm reported success but $REPO_DIR is still $after, not $lat — this install is NOT being updated"
+          return 1
+        fi
+        ulog "self-update: npm update ok ($after)"
       else
         ulog "self-update: npm update FAILED (see update.log)"
         return 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-multiacc",
-  "version": "1.0.18",
+  "version": "1.0.19",
   "description": "Multi-account addon for Claude Code and OpenAI Codex CLI: every claude / claude -p and every codex / codex exec runs under a randomly-picked subscription account with the most usage headroom. Mirrors to a deploy server. No API keys.",
   "type": "module",
   "bin": {