mtech-ai-local-runner 0.1.45 → 0.1.46

package/README.md

@@ -1,3 +1,14 @@
+## 0.1.46: login and execution are separate
+
+A locally logged-in account may still be blocked by security admission. New
+`login_status`, `execution_status` and `execution_reason_codes` show those facts
+separately; the legacy `authenticated` field remains an eligibility conjunction.
+Malformed/unreadable Claude auth output is unknown, not a request to log in again.
+Claude also rechecks task source identity after MCP preparation before spawning.
+This release does not enable Claude execution, update an installed daemon or
+change existing account settings. See the Gateway repository's
+`docs/ai-ops-gateway/claude-execution-admission-remaining.md` for remaining gates.
+
 ## 0.1.45: pin official Codex alpha.11 outside the app
 
 Manual and daemon Codex registration now require the reviewed official standalone
@@ -640,3 +651,13 @@ advertises `local_fix_gateway_publish_v1`. Publishing/installation/DEV activatio
 and an exact approved Fix contract/launch are still required before real use.
 An unresolved canonical PR approval or publication receipt pauses delivery; do
 not rerun the model or delete recovery state to force a PR.
+
+### Login and execution diagnostics
+
+`login_status` reports local account evidence (`authenticated`, `unauthenticated`,
+`unknown`); it does not certify remote token validity. `execution_status` reports
+`ready` or `blocked`, with bounded `execution_reason_codes`. For compatibility,
+the older `authenticated` field still means execution eligibility. A logged-in
+Claude account can remain blocked by unverified security admission. Do not log out
+or change credentials just because that legacy field is false. Unknown status is
+not evidence of logout. These diagnostics do not bypass per-job admission.

package/dist/src/adapters/claude-code/adapter.js

@@ -78,6 +78,9 @@ export class ClaudeCodeAdapter {
         if (!Number.isSafeInteger(generation) || generation === undefined || generation < 1)
             throw new Error("JOB_SECURITY_REJECTED");
         const assertAdmission = () => {
+            const repositories = ctx.taskPackage?.repositories;
+            if (!Array.isArray(repositories) || repositories.length !== 1 || repositories[0]?.base_commit_sha !== this.options.securityPolicy?.pin.sourceSha)
+                throw new Error('JOB_SECURITY_REJECTED');
             requireJobSecurity(this.options.securityPolicy, { adapterId: "claude_code_cli", adapterVersion: "1", jobId: this.options.jobId ?? ctx.bindingId, modelId: resolvedModelId, generation });
             if (ctx.approvedTaskPackage?.resolved_provider !== "anthropic" || ctx.approvedTaskPackage?.resolved_model_id !== resolvedModelId
                 || ctx.approvedTaskPackage?.repository?.base_commit_sha !== this.options.securityPolicy.pin.sourceSha)
@@ -89,9 +92,6 @@ export class ClaudeCodeAdapter {
             throw new Error('SECURITY_REQUIREMENTS_REJECTED');
         this.receipt = createJobSecurityReceipt(this.options.securityPolicy, { jobId: this.options.jobId ?? ctx.bindingId, generation, modelId: resolvedModelId, sourceSha: this.options.securityPolicy.pin.sourceSha, ...ctx.securityBinding, requirements: ctx.approvedTaskPackage?.security_requirements });
         const pkg = ctx.taskPackage;
-        const repos = pkg.repositories;
-        if (!Array.isArray(repos) || repos.length !== 1 || repos[0]?.base_commit_sha !== this.options.securityPolicy.pin.sourceSha)
-            throw new Error("JOB_SECURITY_REJECTED");
         const cwd = this.options.cwd;
         const rel = cwd ? path.relative(path.resolve(this.options.worktreeRoot), path.resolve(cwd)) : "";
         if (!cwd || !path.isAbsolute(cwd) || rel === "" || (!rel.startsWith(".." + path.sep) && rel !== ".." && !path.isAbsolute(rel)))

package/dist/src/adapters/discovery.js

@@ -1,3 +1,4 @@
+import { adapterStatus } from './status.js';
 import { createCodexProductionHost } from '../safety/codex-production-host.js';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
@@ -20,22 +21,51 @@ export async function discoverAdapters(env, command = run, adapterIds = ['claude
             if (!executableVersion)
                 throw new Error('invalid version');
             let authenticated = false;
+            let loginStatus = 'unknown';
+            const parseClaudeStatus = (stdout) => {
+                try {
+                    const value = JSON.parse(stdout);
+                    if (value && typeof value === 'object' && !Array.isArray(value) && typeof value.loggedIn === 'boolean') {
+                        authenticated = value.loggedIn;
+                        loginStatus = authenticated ? 'authenticated' : 'unauthenticated';
+                    }
+                }
+                catch { /* Unknown evidence stays closed; never expose raw output. */ }
+            };
             try {
-                const auth = await command(binary, codex ? ['login', 'status'] : ['auth', 'status']);
-                authenticated = !codex || /^Logged in using ChatGPT\s*$/i.test([auth.stdout, auth.stderr ?? ''].join('\n').trim());
+                const auth = await command(binary, codex ? ['login', 'status'] : ['auth', 'status', '--json']);
+                if (codex) {
+                    authenticated = /^Logged in using ChatGPT\s*$/i.test([auth.stdout, auth.stderr ?? ''].join('\n').trim());
+                    loginStatus = authenticated ? 'authenticated' : 'unauthenticated';
+                }
+                else
+                    parseClaudeStatus(auth.stdout);
+            }
+            catch (error) {
+                // Claude exits 1 for a known logged-out JSON response. Other failures
+                // (including timeout/permission errors) do not prove logout.
+                if (!codex && error && typeof error === 'object' && error.code === 1) {
+                    const stdout = error.stdout;
+                    if (typeof stdout === 'string') {
+                        parseClaudeStatus(stdout);
+                        if (authenticated) {
+                            authenticated = false;
+                            loginStatus = 'unknown';
+                        }
+                    }
+                }
             }
-            catch { /* Missing login is diagnostic, never an API-key fallback. */ }
             if (codex) {
                 const compatibility = inspectCodexCompatibility({ cliVersion: executableVersion });
                 const admission = await diagnoseCliHostAdmission(id, binary, env);
-                return { ...base, available: compatibility.available, authenticated, executableVersion, capabilities: compatibility.capabilities, admission,
+                return { ...base, available: compatibility.available, authenticated, loginStatus, executableVersion, capabilities: compatibility.capabilities, admission,
                     reason: !authenticated ? 'Codex requires a ChatGPT account login; API-key authentication is unsupported.' : compatibility.reason };
             }
             const admission = await diagnoseCliHostAdmission(id, binary, env);
-            return { ...base, available: admission.available, authenticated, executableVersion, capabilities: admission.capabilities, admission, reason: !authenticated ? 'Claude CLI login is required.' : 'Claude CLI security isolation is unverified; execution is unsupported.' };
+            return { ...base, available: admission.available, authenticated, loginStatus, executableVersion, capabilities: admission.capabilities, admission, reason: loginStatus === 'unknown' ? 'Claude CLI login status could not be verified.' : !authenticated ? 'Claude CLI login is required.' : 'Claude CLI security isolation is unverified; execution is unsupported.' };
         }
         catch {
-            return { ...base, available: false, authenticated: false, capabilities: [], reason: codex ? 'Codex CLI is missing or its version could not be verified.' : 'Claude CLI is missing or its version could not be verified.' };
+            return { ...base, available: false, authenticated: false, loginStatus: 'unknown', capabilities: [], reason: codex ? 'Codex CLI is missing or its version could not be verified.' : 'Claude CLI is missing or its version could not be verified.' };
         }
     }));
 }
@@ -56,6 +86,8 @@ export function adapterDiagnosticsWithRemedies(adapters) {
             else
                 action = 'Codex is ready for an explicitly selected approved launch.';
         }
+        else if (adapter.loginStatus === 'unknown')
+            action = 'Claude login status is unknown; inspect the local status diagnostic before changing credentials. Execution remains blocked.';
         else if (!adapter.available && adapter.executableVersion && adapter.authenticated)
             action = 'Claude CLI security isolation is unverified; wait for a reviewed release. Login alone does not grant execution.';
         else if (!adapter.available)
@@ -64,7 +96,7 @@ export function adapterDiagnosticsWithRemedies(adapters) {
             action = 'Run claude auth login, then rerun doctor.';
         else
             action = 'Claude is ready for an explicitly selected approved launch.';
-        return { ...adapter, action };
+        return { ...adapter, ...adapterStatus(adapter), action };
     });
 }
 /** Setup/doctor use the same reviewed Codex probe as daemon; no legacy vendor

package/dist/src/adapters/status.js

@@ -0,0 +1,9 @@
+/** Diagnostics never grant capabilities or replace the host admission gate. */
+export function adapterStatus(probe) {
+    const login_status = probe.loginStatus ?? (probe.authenticated ? 'authenticated' : 'unknown');
+    const ready = probe.available && probe.authenticated && login_status === 'authenticated';
+    const codes = probe.admission?.checks.filter(c => c.status === 'blocked').map(c => c.code).filter(c => /^[A-Z][A-Z0-9_]{0,95}$/.test(c)).slice(0, 20) ?? [];
+    if (!ready && !codes.length)
+        codes.push(!probe.available ? 'EXECUTION_ADMISSION_UNAVAILABLE' : login_status === 'unknown' ? 'LOGIN_STATUS_UNVERIFIED' : 'LOGIN_REQUIRED');
+    return { authenticated: ready, login_status, execution_status: ready ? 'ready' : 'blocked', execution_reason_codes: ready ? [] : [...new Set(codes)] };
+}

package/dist/src/cli.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { adapterStatus } from './adapters/status.js';
 import { recoverLocalFixPublication } from './publication/recovery.js';
 import { loadInstalledLocalFixHost } from './publication/installed-host.js';
 import { FileDaemonStateStore } from './state-store.js';
@@ -194,7 +195,7 @@ export async function main(argv, env, io = {}) {
                 const registered = await gateway.registerLocalRunner({
                     deviceFingerprint: createHash("sha256").update(`${process.getuid?.() ?? 0}|${runnerDisplayName()}|${config.gatewayMcpUrl}`).digest("hex"),
                     displayName: runnerDisplayName(), packageVersion: "0.1.11",
-                    capabilities: adapters.map(probe => ({ adapter: probe.id, version: probe.version, capabilities: probe.capabilities, authenticated: probe.available && probe.authenticated })),
+                    capabilities: adapters.map(probe => ({ adapter: probe.id, version: probe.version, capabilities: probe.capabilities, ...adapterStatus(probe) })),
                 });
                 await localStore.save({ schemaVersion: 1, gatewayMcpUrl: config.gatewayMcpUrl, runnerId: registered.runner.id, workspaceRoot: config.workspaceRoot, concurrency: 1 });
                 await launchd.install(process.argv[1], config.stateRoot);

package/dist/src/daemon/runtime.js

@@ -1,3 +1,4 @@
+import { adapterStatus } from '../adapters/status.js';
 import { loadInstalledLocalFixHost } from '../publication/installed-host.js';
 import { createCodexDaemonHost } from '../safety/codex-daemon-host.js';
 import { reconcileTerminalState } from './terminal-recovery.js';
@@ -64,7 +65,7 @@ export async function buildDaemon(input) {
     });
     const registry = new AdapterRegistry([plugin, codex]);
     const probes = await registry.probeAll();
-    const versions = Object.fromEntries(probes.filter((probe) => probe.available && probe.authenticated).map((probe) => [probe.id, probe.version]));
+    const versions = Object.fromEntries(probes.filter((probe) => adapterStatus(probe).authenticated).map((probe) => [probe.id, probe.version]));
     const state = new FileDaemonStateStore(input.stateRoot);
     const coordinator = new ExecutionCoordinator({
         localFixHost,
@@ -115,10 +116,10 @@ export async function buildDaemon(input) {
             catch {
                 current = { available: false, authenticated: false, capabilities: [] };
             }
-            const ready = current.available && current.authenticated && !!current.executableVersion && codex.capabilities.every(c => current.capabilities.includes(c));
+            const ready = adapterStatus(current).authenticated && !!current.executableVersion && codex.capabilities.every(c => current.capabilities.includes(c));
             const index = probes.findIndex(p => p.id === 'codex_cli');
             if (index >= 0)
-                probes[index] = { id: 'codex_cli', version: '1', ...current, authenticated: ready };
+                probes[index] = { id: 'codex_cli', version: '1', ...current, available: ready };
             if (ready)
                 versions.codex_cli = '1';
             else
@@ -222,7 +223,8 @@ export async function reconcilePreparationState(previous, deps) {
 /** Vendor capability text cannot claim a host-owned publication facility. */
 export function localRunnerCapabilities(probes, trustedLocalFixHost = false, verificationMode) {
     return probes.map(probe => {
-        const authenticated = probe.available && probe.authenticated;
+        const status = adapterStatus(probe);
+        const authenticated = status.authenticated;
         const capabilities = probe.capabilities.filter(value => value !== 'local_fix_publication_v1' && value !== 'local_fix_gateway_ci_v1' && value !== 'local_fix_gateway_publish_v1');
         if (trustedLocalFixHost && authenticated && probe.id === 'codex_cli') {
             capabilities.push('local_fix_publication_v1');
@@ -231,6 +233,6 @@ export function localRunnerCapabilities(probes, trustedLocalFixHost = false, ver
             if (verificationMode === 'gateway_publish_v1')
                 capabilities.push('local_fix_gateway_publish_v1');
         }
-        return { adapter: probe.id, version: probe.version, authenticated, capabilities };
+        return { adapter: probe.id, version: probe.version, ...status, capabilities };
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.45",
+  "version": "0.1.46",
   "private": false,
   "license": "UNLICENSED",
   "bin": {