claude-multiacc 2.0.39 → 2.0.41

package/bin/claude-accounts

@@ -3107,7 +3107,12 @@ EOF
   if [ -n "$peers" ]; then
     while IFS="$tab" read -r pt pr pp; do
       [ -n "$pt" ] || continue
-      sync_push_target "$pt" "$pr" "$pp"
+      # </dev/null: the ssh/rsync calls inside read STDIN, and stdin here is the
+      # peer list itself — the first peer's ssh swallowed every later line, so sync
+      # reached gas-mini (first in the list) and never mini-3..mini-8 (peers since
+      # 2026-09-04; the limits fan-out, which reads its list through process
+      # substitution, was the only thing that ever reached them).
+      sync_push_target "$pt" "$pr" "$pp" </dev/null
       npeers=$((npeers + 1))
     done <<EOF
 $peers

package/bin/codex-accounts

@@ -2208,7 +2208,12 @@ EOF
   if [ -n "$peers" ]; then
     while IFS="$tab" read -r pt pr pp; do
       [ -n "$pt" ] || continue
-      sync_push_target "$pt" "$pr" "$pp"
+      # </dev/null: the ssh/rsync calls inside read STDIN, and stdin here is the
+      # peer list itself — the first peer's ssh swallowed every later line, so sync
+      # reached gas-mini (first in the list) and never mini-3..mini-8 (peers since
+      # 2026-09-04; the limits fan-out, which reads its list through process
+      # substitution, was the only thing that ever reached them).
+      sync_push_target "$pt" "$pr" "$pp" </dev/null
       npeers=$((npeers + 1))
     done <<EOF
 $peers

package/lib/report.py

@@ -46,7 +46,7 @@ import time
 
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 import keychain  # noqa: E402
-from audit import token_verified  # noqa: E402
+from audit import creds_doc_state, token_verified  # noqa: E402
 from claude_reset import marker_superseded, record_from  # noqa: E402
 
 SCHEMA = 'claude-multiacc/pool.v1'
@@ -194,6 +194,21 @@ def _claude_credentials(d):
     if isinstance(o, dict):
         detail['oauth_expires_at'] = _iso_ms(o.get('expiresAt'))
         detail['oauth_refresh_expires_at'] = _iso_ms(o.get('refreshTokenExpiresAt'))
+    # `oauth` says a sign-in EXISTS here; `oauth_alive` says whether it can still work —
+    # the limits writer's own rule (audit.creds_doc_state). A dead one (refresh token
+    # expired) keeps inference running on the portable token but can never read usage
+    # or limit resets again, so the panel must ask for a sign-in (2026-09-22: acct-02 and
+    # acct-07 sat dark for days behind `oauth: true`). None = could not be read here (a
+    # Keychain this session cannot open) or no sign-in at all.
+    detail['oauth_alive'] = None
+    if has_oauth and isinstance(o, dict):
+        try:
+            state, reason = creds_doc_state({'claudeAiOauth': o}, time.time())
+            detail['oauth_alive'] = state == 'ok'
+            if state != 'ok':
+                detail['oauth_problem'] = reason
+        except Exception:
+            pass
     if has_token:
         mt = _mtime(tpath)
         detail['token_minted_at'] = _iso(mt)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-multiacc",
-  "version": "2.0.39",
+  "version": "2.0.41",
   "description": "Unified Claude Code and OpenAI Codex subscription pooling with quota-aware selection.",
   "type": "module",
   "bin": {

package/tests/run-tests.sh

@@ -3908,15 +3908,20 @@ EOF
   SSHFAKE="$WORK/sshfake"
   SSHLOG="$WORK/sshfake.log"
   mkdir -p "$SSHFAKE"
+  # Both fakes DRAIN stdin like the real tools do: ssh forwards it to the remote
+  # command and rsync's transport reads it. A fake that left stdin alone hid the
+  # bug where the peer loop fed them its own peer list.
   cat > "$SSHFAKE/ssh" <<'EOF'
 #!/usr/bin/env bash
 printf 'ssh %s\n' "$*" >> "${SSHLOG:?}"
+[ -t 0 ] || cat >/dev/null
 case "$*" in *"${SSH_FAIL_HOST:-@@none@@}"*) exit 1 ;; esac
 exit 0
 EOF
   cat > "$SSHFAKE/rsync" <<'EOF'
 #!/usr/bin/env bash
 printf 'rsync %s\n' "$*" >> "${SSHLOG:?}"
+[ -t 0 ] || cat >/dev/null
 exit 0
 EOF
   chmod +x "$SSHFAKE/ssh" "$SSHFAKE/rsync"
@@ -3966,14 +3971,22 @@ EOF
   python3 - "$ACC/accounts.json" <<'EOF'
 import json, os, sys
 d = json.load(open(sys.argv[1]))
-d['peers'] = [{'target': 'gas@peer1', 'root': '/Users/gas/.claude-accounts', 'repo': '/Users/gas/claude-multiacc'}]
+d['peers'] = [{'target': 'gas@peer1', 'root': '/Users/gas/.claude-accounts', 'repo': '/Users/gas/claude-multiacc'},
+              {'target': 'gas@peer2', 'root': '/Users/gas/.claude-accounts', 'repo': '/Users/gas/claude-multiacc'},
+              {'target': 'gas@peer3', 'root': '/Users/gas/.claude-accounts', 'repo': '/Users/gas/claude-multiacc'}]
 json.dump(d, open(sys.argv[1] + '.tmp', 'w'), indent=2); os.replace(sys.argv[1] + '.tmp', sys.argv[1])
 EOF
   : > "$SSHLOG"
   out="$(PATH="$SSHFAKE:$PATH" CLAUDE_MULTIACC_NO_SYNC=0 claude-accounts sync 2>&1)"
   rc=$?
   [ "$rc" = "0" ] && t_ok "multi-target sync succeeds" || t_fail "multi-target sync" "rc=$rc: $out"
-  check "multi-target sync reports the peer" "+ 1 peer(s)" "$out"
+  check "multi-target sync reports every peer" "+ 3 peer(s)" "$out"
+  # EVERY peer is pushed, not just the first: the ssh/rsync inside the loop must not
+  # be allowed to eat the peer list off stdin (mini-3..8 got nothing for 18 days).
+  grep -q "rsync.*gas@peer2:/Users/gas/.claude-accounts/accounts.json" "$SSHLOG" \
+    && grep -q "rsync.*gas@peer3:/Users/gas/.claude-accounts/accounts.json" "$SSHLOG" \
+    && t_ok "the second and third peers are pushed too (stdin not eaten by the first)" \
+    || t_fail "later peers skipped" "$(grep -c 'accounts.json' "$SSHLOG") manifest pushes: $(grep accounts.json "$SSHLOG" | tr '\n' '|')"
   grep -q "rsync.*root@203.0.113.1:/root/.claude-accounts/accounts.json" "$SSHLOG" \
     && grep -q "rsync.*gas@peer1:/Users/gas/.claude-accounts/accounts.json" "$SSHLOG" \
     && t_ok "manifest pushed to BOTH targets" \
@@ -3984,8 +3997,8 @@ EOF
     && t_ok "primary target pushed before the peer" \
     || t_fail "target order" "primary=$first_primary peer=$first_peer"
   n_remov="$(grep -c "for dd in acct-" "$SSHLOG")"
-  [ "$n_remov" = "2" ] && t_ok "removal propagation ran on each target" \
-    || t_fail "per-target removal" "expected 2 removal sweeps, saw $n_remov"
+  [ "$n_remov" = "4" ] && t_ok "removal propagation ran on each target" \
+    || t_fail "per-target removal" "expected 4 removal sweeps, saw $n_remov"
   grep -q "post-sync" "$SSHLOG" && t_ok "post-sync hooks invoked" || t_fail "post-sync hooks" "none recorded"
   # The MCP registry rides with the manifest to EVERY target; the machine-local overlay
   # (a runner daemon's view of THIS Mac) never leaves. Without a registry file nothing

package/tests/test_claude_reset.py

@@ -660,6 +660,36 @@ class ClaudeResetFleetRecordTest(ClaudePoolSandbox, unittest.TestCase):
         self.assertIn("written before a confirmed limit reset", self.log())
 
 
+class ClaudeDeadSignInReportTest(ClaudePoolSandbox, unittest.TestCase):
+    """A sign-in that EXISTS but can no longer work must say so (2026-09-22: acct-02 and
+    acct-07 read `oauth: true` with a refresh token expired days before, so the panel
+    never offered the sign-in that restores their telemetry and limit resets)."""
+
+    def listed(self) -> dict:
+        result = subprocess.run([REPO / "bin/claude-accounts", "list", "--json"],
+                                capture_output=True, text=True, env=self.env(), timeout=60,
+                                check=False)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        return json.loads(result.stdout)["accounts"][0]["credentials"]
+
+    def test_a_live_sign_in_is_alive(self) -> None:
+        creds = self.listed()
+        self.assertTrue(creds["oauth"])
+        self.assertTrue(creds["oauth_alive"])
+        self.assertNotIn("oauth_problem", creds)
+
+    def test_an_expired_refresh_token_is_a_dead_sign_in(self) -> None:
+        (self.account / "server.token").write_text("sk-ant-oat01-portable\n", encoding="utf-8")
+        dead = {"claudeAiOauth": {"accessToken": "old", "refreshToken": "r",
+                                  "expiresAt": int(time.time() - 7 * 86400) * 1000,
+                                  "refreshTokenExpiresAt": int(time.time() - 3 * 86400) * 1000}}
+        (self.account / ".credentials.json").write_text(json.dumps(dead), encoding="utf-8")
+        creds = self.listed()
+        self.assertTrue(creds["oauth"])                 # it exists...
+        self.assertFalse(creds["oauth_alive"])          # ...but cannot work
+        self.assertIn("refresh token expired", creds["oauth_problem"])
+
+
 class ClaudeResetReportingTest(ClaudePoolSandbox, unittest.TestCase):
     def report(self, **overrides) -> dict:
         result = self.run_limits("--json", **overrides)