claude-multiacc 2.0.40 → 2.0.41

package/lib/report.py

@@ -46,7 +46,7 @@ import time
 
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 import keychain  # noqa: E402
-from audit import token_verified  # noqa: E402
+from audit import creds_doc_state, token_verified  # noqa: E402
 from claude_reset import marker_superseded, record_from  # noqa: E402
 
 SCHEMA = 'claude-multiacc/pool.v1'
@@ -194,6 +194,21 @@ def _claude_credentials(d):
     if isinstance(o, dict):
         detail['oauth_expires_at'] = _iso_ms(o.get('expiresAt'))
         detail['oauth_refresh_expires_at'] = _iso_ms(o.get('refreshTokenExpiresAt'))
+    # `oauth` says a sign-in EXISTS here; `oauth_alive` says whether it can still work —
+    # the limits writer's own rule (audit.creds_doc_state). A dead one (refresh token
+    # expired) keeps inference running on the portable token but can never read usage
+    # or limit resets again, so the panel must ask for a sign-in (2026-09-22: acct-02 and
+    # acct-07 sat dark for days behind `oauth: true`). None = could not be read here (a
+    # Keychain this session cannot open) or no sign-in at all.
+    detail['oauth_alive'] = None
+    if has_oauth and isinstance(o, dict):
+        try:
+            state, reason = creds_doc_state({'claudeAiOauth': o}, time.time())
+            detail['oauth_alive'] = state == 'ok'
+            if state != 'ok':
+                detail['oauth_problem'] = reason
+        except Exception:
+            pass
     if has_token:
         mt = _mtime(tpath)
         detail['token_minted_at'] = _iso(mt)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-multiacc",
-  "version": "2.0.40",
+  "version": "2.0.41",
   "description": "Unified Claude Code and OpenAI Codex subscription pooling with quota-aware selection.",
   "type": "module",
   "bin": {

package/tests/test_claude_reset.py

@@ -660,6 +660,36 @@ class ClaudeResetFleetRecordTest(ClaudePoolSandbox, unittest.TestCase):
         self.assertIn("written before a confirmed limit reset", self.log())
 
 
+class ClaudeDeadSignInReportTest(ClaudePoolSandbox, unittest.TestCase):
+    """A sign-in that EXISTS but can no longer work must say so (2026-09-22: acct-02 and
+    acct-07 read `oauth: true` with a refresh token expired days before, so the panel
+    never offered the sign-in that restores their telemetry and limit resets)."""
+
+    def listed(self) -> dict:
+        result = subprocess.run([REPO / "bin/claude-accounts", "list", "--json"],
+                                capture_output=True, text=True, env=self.env(), timeout=60,
+                                check=False)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        return json.loads(result.stdout)["accounts"][0]["credentials"]
+
+    def test_a_live_sign_in_is_alive(self) -> None:
+        creds = self.listed()
+        self.assertTrue(creds["oauth"])
+        self.assertTrue(creds["oauth_alive"])
+        self.assertNotIn("oauth_problem", creds)
+
+    def test_an_expired_refresh_token_is_a_dead_sign_in(self) -> None:
+        (self.account / "server.token").write_text("sk-ant-oat01-portable\n", encoding="utf-8")
+        dead = {"claudeAiOauth": {"accessToken": "old", "refreshToken": "r",
+                                  "expiresAt": int(time.time() - 7 * 86400) * 1000,
+                                  "refreshTokenExpiresAt": int(time.time() - 3 * 86400) * 1000}}
+        (self.account / ".credentials.json").write_text(json.dumps(dead), encoding="utf-8")
+        creds = self.listed()
+        self.assertTrue(creds["oauth"])                 # it exists...
+        self.assertFalse(creds["oauth_alive"])          # ...but cannot work
+        self.assertIn("refresh token expired", creds["oauth_problem"])
+
+
 class ClaudeResetReportingTest(ClaudePoolSandbox, unittest.TestCase):
     def report(self, **overrides) -> dict:
         result = self.run_limits("--json", **overrides)