claude-multiacc 1.0.8 → 1.0.10

package/README.md

@@ -217,8 +217,9 @@ claude-multiacc list | status | add <email> | ...   # passthrough to claude-acco
 
 **Automatic updates:** a globally-installed package re-runs `install.sh` from its own
 postinstall, so `npm i -g claude-multiacc@latest` fully updates the shim, CLI, and jobs.
-A weekly job (launchd on macOS, cron on Linux) runs `claude-accounts self-update` to pull
-the latest npm release on its own; set `CLAUDE_MULTIACC_AUTOUPDATE=0` before install to
+A daily job (launchd on macOS, cron on Linux, 04:07) runs `claude-accounts self-update`
+to pull the latest release on its own — `npm i -g @latest` for npm installs, `git pull +
+reinstall` for git checkouts; set `CLAUDE_MULTIACC_AUTOUPDATE=0` before install to
 opt out. `update-notifier` also prints a one-line nudge when a newer version is on npm.
 (Note: newer npm versions gate install scripts; if postinstall is blocked, just run
 `claude-multiacc install` once.)
@@ -243,12 +244,14 @@ What install does (all reversible, nothing else):
 
 - **macOS:** marked PATH block at the END of `~/.zshenv`, `~/.zprofile`, `~/.zshrc`
   (+ bash rc files if present) — end-of-file placement matters because those files
-  re-prepend `~/.local/bin`; launchd agents `com.claude-multiacc.limits` (60s) and
-  `.health` (weekly Mon 09:17). Warns if this Mac stores credentials in the Keychain
+  re-prepend `~/.local/bin`; launchd agents `com.claude-multiacc.limits` +
+  `.codex-limits` (60s), `.health` + `.codex-health` (weekly Mon morning), and
+  `.update` (daily 04:07). Warns if this Mac stores credentials in the Keychain
   (file-based credentials are required for per-dir logins).
 - **Linux (root):** PATH block in `~/.bashrc` + `/etc/profile.d/claude-multiacc.sh`,
-  shim symlink at `/usr/local/bin/claude` (shadows via PATH order — on the systemd
-  default PATH too; the original binary is untouched), cron entries for limits/health.
+  shim symlinks at `/usr/local/bin/claude` and `/usr/local/bin/codex` (shadow via
+  PATH order — on the systemd default PATH too; the original binaries are untouched),
+  cron entries for limits/health (both providers) + the daily auto-update.
 - Both: `~/.claude-accounts/` skeleton + `accounts.json` manifest.
 
 ## Accounts

package/install.sh

@@ -108,7 +108,7 @@ EOF
   <key>StandardErrorPath</key><string>/dev/null</string>
 </dict></plist>
 EOF
-  # Weekly auto-update (Sunday 04:07). No-op unless this is an npm or git install.
+  # Daily auto-update (04:07). No-op unless this is an npm or git install.
   cat > "$PLIST_UPDATE" <<EOF
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -120,7 +120,6 @@ EOF
     <string>--quiet</string>
   </array>
   <key>StartCalendarInterval</key><dict>
-    <key>Weekday</key><integer>0</integer>
     <key>Hour</key><integer>4</integer>
     <key>Minute</key><integer>7</integer>
   </dict>
@@ -174,7 +173,7 @@ EOF
   launchctl load -w "$PLIST_CODEX_LIMITS" 2>/dev/null || true
   launchctl load -w "$PLIST_CODEX_HEALTH" 2>/dev/null || true
   [ "${CLAUDE_MULTIACC_AUTOUPDATE:-1}" = "1" ] && launchctl load -w "$PLIST_UPDATE" 2>/dev/null || true
-  echo "  launchd: limits refresh every 60s (claude + codex) + weekly health checks + weekly auto-update"
+  echo "  launchd: limits refresh every 60s (claude + codex) + weekly health checks + daily auto-update"
 }
 
 mac_schedule_remove() {
@@ -196,11 +195,11 @@ linux_schedule_install() {
     echo "17 9 * * 1 $REPO_DIR/bin/claude-accounts health >/dev/null 2>&1 $CRON_TAG"
     echo "37 9 * * 1 $REPO_DIR/bin/codex-accounts health >/dev/null 2>&1 $CRON_TAG"
     [ "${CLAUDE_MULTIACC_AUTOUPDATE:-1}" = "1" ] && \
-      echo "7 4 * * 0 $REPO_DIR/bin/claude-accounts self-update --quiet >/dev/null 2>&1 $CRON_TAG"
+      echo "7 4 * * * $REPO_DIR/bin/claude-accounts self-update --quiet >/dev/null 2>&1 $CRON_TAG"
   } >> "$tmp"
   crontab "$tmp"
   rm -f "$tmp"
-  echo "  cron: limits refresh every 60s (claude + codex) + weekly health checks + weekly auto-update"
+  echo "  cron: limits refresh every 60s (claude + codex) + weekly health checks + daily auto-update"
 }
 
 linux_schedule_remove() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-multiacc",
-  "version": "1.0.8",
+  "version": "1.0.10",
   "description": "Multi-account addon for Claude Code and OpenAI Codex CLI: every claude / claude -p and every codex / codex exec runs under a randomly-picked subscription account with the most usage headroom. Mirrors to a deploy server. No API keys.",
   "type": "module",
   "bin": {

package/tests/run-tests.sh

@@ -1888,18 +1888,25 @@ rm -f "$CX"/acct-*/limits.json
 
 # refresh is not attempted at all when the rotated credential could not be persisted
 # (the grant rotates the refresh token — consuming it and then failing to write
-# auth.json would strand the account; codex-review finding)
-mk_cx_auth "$CX/acct-01/auth.json" a@cx 1000
-rm -f "$CX/acct-01/limits.json" "$CX/acct-01/.oauth-refresh.json"
-chmod 500 "$CX/acct-01"
-out="$(CODEX_MULTIACC_TOKEN_URL="file://$WORK/cx-token-ok.json" CODEX_MULTIACC_USAGE_URL="file://$WORK/cx-usage-low.json" codex-accounts limits --force 2>&1)"
-chmod 700 "$CX/acct-01"
-check "codex: unpersistable credential skips the refresh grant" "refresh not attempted" "$out"
-grep -q "rt-rotated-new" "$CX/acct-01/auth.json" \
-  && t_fail "codex refresh preflight" "the grant was consumed despite an unwritable dir" \
-  || t_ok "codex: refresh grant not consumed when persistence would fail"
-mk_cx_auth "$CX/acct-01/auth.json" a@cx "$FUTURE_EXP"
-rm -f "$CX/acct-01/.oauth-refresh.json"
+# auth.json would strand the account; codex-review finding).
+# Root ignores directory permission bits, so the unwritable-dir setup only works
+# as a non-root user (the server suite runs as root — skip there).
+if [ "$(id -u)" = "0" ]; then
+  t_ok "codex: refresh persistence preflight test skipped (root ignores directory permissions)"
+  t_ok "codex: refresh persistence preflight test skipped (root ignores directory permissions) [2]"
+else
+  mk_cx_auth "$CX/acct-01/auth.json" a@cx 1000
+  rm -f "$CX/acct-01/limits.json" "$CX/acct-01/.oauth-refresh.json"
+  chmod 500 "$CX/acct-01"
+  out="$(CODEX_MULTIACC_TOKEN_URL="file://$WORK/cx-token-ok.json" CODEX_MULTIACC_USAGE_URL="file://$WORK/cx-usage-low.json" codex-accounts limits --force 2>&1)"
+  chmod 700 "$CX/acct-01"
+  check "codex: unpersistable credential skips the refresh grant" "refresh not attempted" "$out"
+  grep -q "rt-rotated-new" "$CX/acct-01/auth.json" \
+    && t_fail "codex refresh preflight" "the grant was consumed despite an unwritable dir" \
+    || t_ok "codex: refresh grant not consumed when persistence would fail"
+  mk_cx_auth "$CX/acct-01/auth.json" a@cx "$FUTURE_EXP"
+  rm -f "$CX/acct-01/.oauth-refresh.json"
+fi
 
 # two parallel imports get distinct ids and both land in the manifest (lock coverage;
 # codex-review finding)