halfcycle 0.3.11 → 0.3.12

package/dist/resolve-credential.d.ts

@@ -58,12 +58,32 @@ export interface ResolvedCredential {
     credential: string;
     source: CredentialSource;
     /**
-     * The account the credential speaks for, when it is known. ABSENT for the
-     * environment arm — a bare variable carries no identity and this CLI does not go
-     * and ask, because the only way to find out is to spend a call, and control will
-     * tell us by accepting or refusing it a moment later anyway.
+     * The account the credential speaks for, when it is known. ABSENT from what THIS
+     * RESOLVER returns on the environment arm — a bare variable carries no identity and
+     * the resolver does not go and ask, because the only way to find out is to spend a
+     * call, and control will tell us by accepting or refusing it a moment later anyway.
+     *
+     * `confirmActingIdentity` DOES spend that call, so the credential it hands back may
+     * carry an id on any arm, including this one — see `actingAs` there. That is the value
+     * the install records on disk, and it is control's answer rather than this machine's
+     * memory of which account a stored credential was written for.
      */
     accountId?: string;
+    /**
+     * When THIS MACHINE stored the credential, UTC ISO-8601 — present on the `stored`
+     * arm and on nothing else (W-2, #803).
+     *
+     * It is here because it is the fact that makes a reused sign-in recognisable to a
+     * human. "This install will act as account 0987fb25…" is a sentence a person cannot
+     * check; "…saved on this machine on 30 August" is one they can, because they either
+     * signed in that day or somebody else did. A fresh handoff does not carry it (the
+     * person is watching it happen) and the environment arm has none to carry.
+     *
+     * INFORMATION, NEVER A GATE — the same rule the store's `expiresAt` carries. Nothing
+     * may refuse or expire a credential on this value; whether a credential is live is
+     * control's question, answered with a 401.
+     */
+    signedInAt?: string;
 }
 export interface ResolveOptions extends SignInDeps {
     /** The process environment to read `HALFCYCLE_TOKEN` and `CI` from. */
@@ -82,6 +102,34 @@ export interface ResolveOptions extends SignInDeps {
  * back through the browser for a reason that had nothing to do with signing in.
  */
 export declare function obtainCredential(serviceUrl: string, opts?: ResolveOptions): Promise<ResolvedCredential>;
+/**
+ * The person looked at the account this machine had saved and said *not that one* —
+ * forget it and sign in through the browser (W-2, #803).
+ *
+ * ---------------------------------------------------------------------------
+ * IT IS NOT `replaceRefusedCredential`, AND THE DIFFERENCE IS THE ONLY REASON IT IS A
+ * SEPARATE FUNCTION. That one is driven by CONTROL refusing a value; this one is driven
+ * by a HUMAN refusing an identity. The mechanics coincide today — forget, sign in,
+ * store — and they are shared below rather than copied, but the decisions do not:
+ *
+ *   - The refusal path must NOT re-sign-in for an environment credential or a
+ *     seconds-old one, because both loop. Neither is true here: this is only ever
+ *     reached from a credential a person was shown and declined, and a person declining
+ *     an account is a reason to offer them a different one every single time.
+ *   - The refusal path is a recovery the CLI performs on its own initiative. This one is
+ *     an instruction, and refusing to carry it out because of a rule about loops would
+ *     leave a developer holding the exact identity they just said was wrong.
+ *
+ * Folding the two into one function with a flag was the alternative, and the flag would
+ * have been named "the human asked" — which is the whole of the difference, so it is
+ * two named functions instead.
+ *
+ * FORGETTING FIRST IS DELIBERATE. If the handoff is declined or times out, the machine
+ * is left with NO saved sign-in rather than with the one the person rejected. The next
+ * run then asks the browser, which is the state they were trying to reach; keeping the
+ * old value would silently restore the identity they refused.
+ */
+export declare function switchAccount(serviceUrl: string, opts?: ResolveOptions): Promise<ResolvedCredential>;
 /**
  * Control refused the credential we presented. Replace it, if replacing it is a
  * thing this CLI is allowed to do.

package/dist/resolve-credential.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-credential.d.ts","sourceRoot":"","sources":["../src/resolve-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAOH,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wDAAwD;AACxD,MAAM,MAAM,gBAAgB;AAC1B,+EAA+E;AAC7E,aAAa;AACf,uEAAuE;GACrE,QAAQ;AACV,oEAAoE;GAClE,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA0B7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAmBpC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAqBxE"}
+{"version":3,"file":"resolve-credential.d.ts","sourceRoot":"","sources":["../src/resolve-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAOH,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wDAAwD;AACxD,MAAM,MAAM,gBAAgB;AAC1B,+EAA+E;AAC7E,aAAa;AACf,uEAAuE;GACrE,QAAQ;AACV,oEAAoE;GAClE,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAiB7B;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAKpC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAqBxE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "halfcycle",
-  "version": "0.3.11",
+  "version": "0.3.12",
   "description": "Your coding agents are the engineers. Halfcycle is the rest of the team: product owner, architect, planner and independent reviewer for Claude Code.",
   "keywords": [
     "claude",