teamclaude-cloud 1.7.0 → 1.8.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "teamclaude-cloud",
-  "version": "1.7.0",
+  "version": "1.8.1",
   "description": "Multi-account Claude proxy with quota-based rotation + cloud token sync and auth-key control",
   "type": "module",
   "main": "src/index.js",

package/src/account-manager.js

@@ -61,10 +61,11 @@ export class AccountManager {
       // means "no preference" — selection then falls back to use-or-lose. So a
       // config with no priorities behaves exactly as before.
       priority: Number.isFinite(acct.priority) ? Math.floor(acct.priority) : null,
-      // Provenance: an account pulled from the cloud carries one or more managing
-      // group source tags (cloudSources, set by mergePulledAccounts). Surfaced so
-      // the dashboard/status can label it "cloud" vs a locally-added account.
-      fromCloud: Array.isArray(acct.cloudSources) && acct.cloudSources.length > 0,
+      // Provenance: an account that belongs to a personal (private) cloud group
+      // carries cloudPrivate (set by mergePulledAccounts from the pull response's
+      // `personal` flag). Surfaced so the dashboard/status can label it "private"
+      // vs a shared/fleet account.
+      isPrivate: acct.cloudPrivate === true,
       quota: emptyQuota(),
       usage: {
         totalInputTokens: 0,
@@ -1058,7 +1059,7 @@ export class AccountManager {
       status: 'active',
       enabled: acctData.enabled !== false,
       priority: Number.isFinite(acctData.priority) ? Math.floor(acctData.priority) : null,
-      fromCloud: Array.isArray(acctData.cloudSources) && acctData.cloudSources.length > 0,
+      isPrivate: acctData.cloudPrivate === true,
       quota: emptyQuota(),
       usage: { totalInputTokens: 0, totalOutputTokens: 0, totalRequests: 0, lastUsed: null },
       rateLimitedUntil: null,
@@ -1259,7 +1260,7 @@ export class AccountManager {
         type: a.type,
         status: a.status,
         enabled: a.enabled !== false,
-        fromCloud: a.fromCloud === true,
+        isPrivate: a.isPrivate === true,
         priority: a.priority ?? null,
         // Deep-copy the nested modelWeekly map — the shallow quota spread would
         // otherwise hand callers a live reference into account state.

package/src/cloud.js

@@ -593,6 +593,14 @@ export function mergePulledAccounts(config, pulled, source = null, allowed = nul
     if (Number.isInteger(incoming.priority)) target.priority = incoming.priority;
     else delete target.priority; // null → automatic ordering
   };
+  // Personal-group (private) display flag from the pull response. Authoritative when
+  // the server sends `personal` (a pull can move an account in/out of a personal
+  // group); left untouched on a pre-personal server response so it isn't wiped.
+  const applyPrivate = (target, incoming) => {
+    if (!('personal' in incoming)) return;
+    if (incoming.personal === true) target.cloudPrivate = true;
+    else delete target.cloudPrivate;
+  };
   // Multi-source tagging: an account can be managed by several keys (a consumer
   // using >1 key whose groups overlap). Each key adds its source; an account is
   // only pruned once NO managing key still allows it (Codex round 4 R4-3).
@@ -624,6 +632,7 @@ export function mergePulledAccounts(config, pulled, source = null, allowed = nul
       applyOverlay(fresh); // honor an offline local-disable that survived a prune+re-add
       addSource(fresh);
       applyPriority(fresh, a);
+      applyPrivate(fresh, a);
       config.accounts.push(fresh);
       summary.added++;
       continue;
@@ -638,9 +647,9 @@ export function mergePulledAccounts(config, pulled, source = null, allowed = nul
     addSource(cur); // now managed by this key (so this key can prune it later)
     // A payload entry with no token at all (allowed-but-tokenless) must not clobber
     // a valid local token — only apply priority/metadata, keep the local token.
-    if (!hasAnyToken(a)) { applyPriority(cur, a); summary.skipped++; continue; }
+    if (!hasAnyToken(a)) { applyPriority(cur, a); applyPrivate(cur, a); summary.skipped++; continue; }
     const curExp = normalizeExpiresAt(cur.expiresAt) || 0;
-    if (curExp > incomingExp) { applyPriority(cur, a); summary.skipped++; continue; } // local token fresher — keep it
+    if (curExp > incomingExp) { applyPriority(cur, a); applyPrivate(cur, a); summary.skipped++; continue; } // local token fresher — keep it
     config.accounts[idx] = {
       ...cur,
       accountUuid: a.accountUuid || cur.accountUuid,
@@ -654,6 +663,7 @@ export function mergePulledAccounts(config, pulled, source = null, allowed = nul
     };
     applyOverlay(config.accounts[idx]); // re-assert overlay on the rebuilt row
     applyPriority(config.accounts[idx], a);
+    applyPrivate(config.accounts[idx], a);
     summary.updated++;
   }
   // Prune: only when the server sent an authoritative allow-set (`allowed`). Never

package/src/index.js

@@ -892,8 +892,8 @@ async function statusCommand() {
       const current = acct.name === data.currentAccount ? ' *' : '';
 
       const disabledTag = acct.enabled === false ? ' [disabled]' : '';
-      const cloudTag = acct.fromCloud ? ' [cloud]' : '';
-      console.log(`  ${maskIf(acct.name, config.maskMode)} (${acct.type})${current}${cloudTag}${disabledTag}`);
+      const privateTag = acct.isPrivate ? ' [🔑 private]' : '';
+      console.log(`  ${maskIf(acct.name, config.maskMode)} (${acct.type})${current}${privateTag}${disabledTag}`);
       console.log(`    Status:   ${acct.status}${acct.enabled === false ? ' (disabled — out of rotation)' : ''}`);
       if (acct.priority != null) console.log(`    Priority: ${acct.priority} (lower = preferred)`);
       if (acct.maxConcurrent != null) {
@@ -1347,9 +1347,9 @@ async function syncAccountsFromDisk(diskConfig, memConfig, accountManager) {
       if (mgr.enabled !== wantEnabled) accountManager.setEnabled(mgr, wantEnabled);
       const diskPriority = Number.isFinite(diskAcct.priority) ? Math.floor(diskAcct.priority) : null;
       if (mgr.priority !== diskPriority) accountManager.setPriority(mgr, diskPriority);
-      // Provenance can change while running (a cloud pull tags/untags an account),
-      // so refresh the cloud flag on reload too.
-      mgr.fromCloud = Array.isArray(diskAcct.cloudSources) && diskAcct.cloudSources.length > 0;
+      // Provenance can change while running (a cloud pull moves an account in/out of
+      // a personal group), so refresh the private flag on reload too.
+      mgr.isPrivate = diskAcct.cloudPrivate === true;
       // Mirror the applied state into the in-memory config copy too. Otherwise a
       // later TUI saveConfig (for any unrelated op) would spread the pre-sync
       // enabled/priority over the disk value and silently revert a CLI change.
@@ -1357,15 +1357,20 @@ async function syncAccountsFromDisk(diskConfig, memConfig, accountManager) {
       if (memAcct) {
         if (wantEnabled) delete memAcct.enabled; else memAcct.enabled = false;
         if (diskPriority === null) delete memAcct.priority; else memAcct.priority = diskPriority;
-        // cloudSources is authoritative on disk (a cloud pull tags/untags it) and
-        // is an access-control signal. Mirror it too, or a later TUI saveConfig
-        // would overlay the stale in-memory array onto disk and resurrect a
-        // source tag a pull just removed — silently defeating a cloud revocation.
+        // cloudSources (prune scoping) and cloudPrivate (personal-group display) are
+        // both authoritative on disk — a cloud pull tags/untags them. Mirror both, or
+        // a later TUI saveConfig would overlay the stale in-memory value onto disk
+        // and resurrect a source tag / private flag a pull just changed.
         if (Array.isArray(diskAcct.cloudSources) && diskAcct.cloudSources.length > 0) {
           memAcct.cloudSources = diskAcct.cloudSources;
         } else {
           delete memAcct.cloudSources;
         }
+        if (diskAcct.cloudPrivate === true) {
+          memAcct.cloudPrivate = true;
+        } else {
+          delete memAcct.cloudPrivate;
+        }
       }
     }
 

package/src/tui.js

@@ -18,6 +18,9 @@ const yellow = s => fg(33, s);
 const red = s => fg(31, s);
 const cyan = s => fg(36, s);
 const gray = s => fg(90, s);
+// A pill-style badge: light-cyan text on a dark-teal background with padding, so it
+// reads as a badge (like the web dashboard's) rather than plain colored text.
+const badge = label => `${ESC}48;5;23m${ESC}38;5;159m ${label} ${RESET}`;
 
 const ANSI_RE = /\x1b\[[0-9;]*m/g;
 const strip = s => s.replace(ANSI_RE, '');
@@ -861,10 +864,11 @@ export class TUI {
       // badges stay column-aligned across mixed account types.
       line += l3 ? `  ${l3} ${bar(r3, bw, t3)}` : ' '.repeat(6 + bw);
     }
-    // Provenance badge: an account pulled from the cloud is tagged "cloud" so it
-    // is distinguishable from one added locally on this machine. Appended (like
-    // the rank badge) so it never disrupts the fixed-width columns / quota bars.
-    if (a.fromCloud) line += `  ${cyan('cloud')}`;
+    // Provenance badge: an account in a personal (private) cloud group gets a pill
+    // badge "🔑 private" (matching the web dashboard) so it's distinguishable from a
+    // shared/fleet account. Appended (like the rank badge) so it never disrupts the
+    // fixed-width columns / quota bars.
+    if (a.isPrivate) line += `  ${badge('🔑 private')}`;
     // Order badge: ranked accounts show their 1-based position (#1 = most
     // preferred). While ordering, unranked accounts are labelled "auto" so the
     // two groups (pinned order vs use-or-lose) are visible. Appended last so it