very-happy-cli 0.2.190 → 0.2.192

package/dist/lib.d.cts

@@ -218,6 +218,113 @@ declare const ContextUsageSchema: z$1.ZodObject<{
     compactedAt: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodNumber>>;
 }, z$1.core.$strip>;
 type ContextUsage = z$1.infer<typeof ContextUsageSchema>;
+declare const AgentProfileSummarySchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    agent: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    statusDetail: z$1.ZodOptional<z$1.ZodString>;
+    checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+    createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    baseUrl: z$1.ZodOptional<z$1.ZodString>;
+    models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    keySource: z$1.ZodOptional<z$1.ZodString>;
+    keyRef: z$1.ZodOptional<z$1.ZodString>;
+    legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+type AgentProfileSummary = z$1.infer<typeof AgentProfileSummarySchema>;
+/** `daemonState.agentProfiles` — also the result of `agent-profile-list`. */
+declare const AgentProfilesStateSchema: z$1.ZodObject<{
+    daemonPid: z$1.ZodNumber;
+    updatedAt: z$1.ZodNumber;
+    accounts: z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfilesState = z$1.infer<typeof AgentProfilesStateSchema>;
+/**
+ * `metadata.agentProfile`, written by the wrapper with what it ACTUALLY runs on:
+ *   absent    — older wrapper (no capability): show nothing / 「本机登录」 guess
+ *   null      — machine login (本机登录)
+ *   { status: 'active' }      — running on this account
+ *   { status: 'unavailable' } — bound, but the account cannot be used
+ *       (reason: 'missing' | 'missing-secret' | 'expired' | 'invalid');
+ *       the wrapper refuses turns until the user re-logs in or switches
+ */
+declare const SessionAgentProfileSchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    reason: z$1.ZodOptional<z$1.ZodString>;
+    model: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type SessionAgentProfile = z$1.infer<typeof SessionAgentProfileSchema>;
+/**
+ * waiting-code → (submit) → exchanging → succeeded | failed.
+ * canceled / expired (10 min without a code) are terminal too.
+ */
+declare const AgentProfileLoginStatusSchema: z$1.ZodObject<{
+    loginId: z$1.ZodString;
+    state: z$1.ZodString;
+    url: z$1.ZodOptional<z$1.ZodString>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    account: z$1.ZodOptional<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    error: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfileLoginStatus = z$1.infer<typeof AgentProfileLoginStatusSchema>;
+type AgentProfileBindResult = {
+    /**
+     * false only with `rolledBack` — the restart failed while the session's
+     * wrapper kept running on the previous credential, so the previous binding
+     * was restored (never "bound to the new account, running the old one").
+     */
+    bound: boolean;
+    /** The new binding was undone (see `bound`); the session runs on its previous account. */
+    rolledBack?: true;
+    /**
+     * 'done'    — restarted in place on the new account
+     * 'skipped' — restart:false, or the session is not running here (applies on next start)
+     * 'pending' — still restarting after the 22 s budget (relay RPCs cap at 30 s); the Web
+     *             shows 「重启中」 and treats `metadata.agentProfile` turning into the new
+     *             account as done
+     * 'failed'  — the session is not running any more: binding kept, applies on next
+     *             start; or (`rolledBack`) it still runs: the previous binding is restored
+     */
+    restart: string;
+    error?: string;
+};
 
 declare const CLAUDE_AUTH_PROBE_VERSION: 1;
 type ClaudeAuthStatus = 'ok' | 'not-logged-in' | 'unknown' | 'error' | 'claude-missing';
@@ -596,6 +703,27 @@ declare const DaemonStateSchema: z$1.ZodObject<{
         }, z$1.core.$strip>;
         checkedAt: z$1.ZodNumber;
     }, z$1.core.$strip>>;
+    agentProfiles: z$1.ZodOptional<z$1.ZodObject<{
+        daemonPid: z$1.ZodNumber;
+        updatedAt: z$1.ZodNumber;
+        accounts: z$1.ZodArray<z$1.ZodObject<{
+            id: z$1.ZodString;
+            label: z$1.ZodString;
+            agent: z$1.ZodString;
+            kind: z$1.ZodString;
+            status: z$1.ZodString;
+            statusDetail: z$1.ZodOptional<z$1.ZodString>;
+            checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+            createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+            expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+            baseUrl: z$1.ZodOptional<z$1.ZodString>;
+            models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+            keySource: z$1.ZodOptional<z$1.ZodString>;
+            keyRef: z$1.ZodOptional<z$1.ZodString>;
+            legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+        }, z$1.core.$strip>>;
+        defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+    }, z$1.core.$strip>>;
     rateLimits: z$1.ZodOptional<z$1.ZodObject<{
         v: z$1.ZodLiteral<1>;
         updatedAt: z$1.ZodNumber;
@@ -675,6 +803,8 @@ declare const UserMessageSchema: z$1.ZodObject<{
         allowedTools: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodArray<z$1.ZodString>>>;
         disallowedTools: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodArray<z$1.ZodString>>>;
         effort: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
+        modelIntent: z$1.ZodOptional<z$1.ZodString>;
+        effortIntent: z$1.ZodOptional<z$1.ZodString>;
         delivery: z$1.ZodOptional<z$1.ZodEnum<{
             queue: "queue";
             steer: "steer";
@@ -741,6 +871,19 @@ type Metadata = {
      * machine config.
      */
     stickyModel?: string | null;
+    /**
+     * B-849b: this session's model / thinking choice, recorded by the wrapper
+     * (sole writer) from message meta and the `session-run-intent` RPC; every
+     * device reads it. 'latest' | 'default' | model id; 'default' | level.
+     * null = nothing chosen yet; absent = older wrapper. See happy-wire runIntent.ts.
+     */
+    modelIntent?: string | null;
+    /**
+     * B-850a: the account this wrapper actually runs on (agentProfiles.ts).
+     * null = machine login; absent = wrapper without `agent-profile-v1`.
+     */
+    agentProfile?: SessionAgentProfile | null;
+    effortIntent?: string | null;
     operatingModes?: Array<{
         code: string;
         value: string;
@@ -1635,6 +1778,11 @@ interface SpawnSessionOptions {
     agent?: SpawnAgent;
     environmentVariables?: Record<string, string>;
     token?: string;
+    /**
+     * B-850a: account for a new Claude session. undefined = the machine's
+     * default account (none = machine login); null = machine login.
+     */
+    agentProfileId?: string | null;
     /**
      * If set, the daemon spawns the agent with `--resume <id>` so the new
      * Happy session continues from an existing Claude conversation file.
@@ -1853,6 +2001,139 @@ declare class ModelConfigService {
     }): Promise<ModelConfigApplyResult>;
 }
 
+/**
+ * B-850a: remote Claude subscription login = `claude setup-token` in a pty on
+ * the machine. Its Ink UI only renders in a TTY (FEASIBILITY L2).
+ *
+ *   start  → spawn, wait for the authorize URL (the user picks the org there)
+ *   submit → write the pasted code + Enter; the PKCE verifier never leaves
+ *            this process, so the code alone cannot be redeemed elsewhere
+ *   done   → `sk-ant-oat01-…` appears in the output → caller stores it 0600
+ *
+ * The token is matched in the pty output and handed to `onToken`; it is never
+ * logged and never part of a status object.
+ */
+
+type PtyLike = {
+    onData: (cb: (data: string) => void) => void;
+    onExit: (cb: (e: {
+        exitCode: number;
+    }) => void) => void;
+    write: (data: string) => void;
+    kill: () => void;
+};
+type SpawnPty = (env: Record<string, string>) => PtyLike;
+
+type AccountKey = {
+    source: 'file';
+    path: string;
+} | {
+    source: 'env';
+    name: string;
+} | {
+    source: 'stored';
+};
+type AccountCheck = {
+    status: string;
+    at: number;
+    detail?: string;
+};
+type AccountRecord = {
+    label: string;
+    agent: 'claude';
+    kind: 'claude-subscription' | 'claude-api';
+    createdAt: number;
+    /** claude-api */
+    baseUrl?: string;
+    models?: string[];
+    /** B-794b: model id → real context window. */
+    contextWindows?: Record<string, number>;
+    /** claude-api: where the key lives. claude-subscription always uses the stored secret. */
+    key?: AccountKey;
+    /** claude-subscription: setup-token expiry (1 year after login). */
+    expiresAt?: number;
+    check?: AccountCheck;
+    /** Set on entries synthesized from providers.json — never written to accounts.json. */
+    legacy?: true;
+};
+
+/** `stillRunning`: the restart failed and the session's old wrapper is alive (on the old credential). */
+type RestartOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    notRunning?: boolean;
+    stillRunning?: boolean;
+    error: string;
+};
+type AccountServiceDeps = {
+    home: string;
+    env?: Record<string, string | undefined>;
+    now?: () => number;
+    daemonPid?: number;
+    spawnPty?: SpawnPty;
+    restartSession?: (sessionId: string) => Promise<RestartOutcome>;
+    /** Called after every write so the daemon can republish its state. */
+    onChanged?: () => void;
+    /** Test seam for the 1-token checks. */
+    check?: (record: AccountRecord, secret: string) => Promise<AccountCheck>;
+};
+declare class AccountService {
+    private readonly deps;
+    private readonly home;
+    private readonly env;
+    private readonly now;
+    private logins;
+    /** loginId → account to (re)write when its token arrives. */
+    private readonly loginTargets;
+    constructor(deps: AccountServiceDeps);
+    state(): AgentProfilesState;
+    private summary;
+    private changed;
+    private editable;
+    add(params: unknown): Promise<AgentProfileSummary>;
+    rename(accountId: unknown, label: unknown): AgentProfileSummary;
+    /**
+     * `force` with bound sessions: the credential is gone, so each of those
+     * sessions restarts in place right away and comes back `unavailable`
+     * (refusing turns, Q3) instead of running on the deleted credential until
+     * its next start. Restarts run in parallel within the bind budget; one
+     * still going reports 'pending'.
+     */
+    remove(accountId: unknown, force: unknown): Promise<{
+        removed: true;
+        sessions: string[];
+        restarts?: Record<string, string>;
+    }>;
+    /** 'done' | 'skipped' (not running here) | 'pending' (still going after the budget) | 'failed' */
+    private restartWithinBudget;
+    setDefault(agent: unknown, accountId: unknown): AgentProfilesState;
+    private readSecretFor;
+    test(accountId: unknown): Promise<AgentProfileSummary>;
+    private loginManager;
+    /** Also the terminal path (`very-happy account login`). */
+    storeSubscriptionToken(token: string, target: {
+        accountId?: string;
+        label?: string;
+    }): AgentProfileSummary;
+    loginStart(params: unknown): Promise<AgentProfileLoginStatus>;
+    private loginOp;
+    loginSubmit(params: unknown): AgentProfileLoginStatus;
+    loginStatus(loginId: unknown): AgentProfileLoginStatus;
+    loginCancel(loginId: unknown): AgentProfileLoginStatus;
+    dispose(): void;
+    /** Validates and writes a session binding (no restart). */
+    writeBinding(sessionId: string, accountId: string | null, model?: string): void;
+    bind(params: unknown): Promise<AgentProfileBindResult>;
+    /**
+     * Spawn-time choice → the account a NEW session starts on.
+     *   undefined → the machine default for this agent (none = machine login)
+     *   null      → machine login
+     *   id        → that account; must exist and be usable (Q3: never fall back)
+     */
+    resolveSpawnAccount(agent: string, requested: unknown): string | null;
+}
+
 /** Agent-specific visible-screen adapters. Unknown is deliberately not idle. */
 type CodingAgentKind = 'claude' | 'codex' | 'pi';
 
@@ -1991,6 +2272,8 @@ declare class ApiMachineClient {
     private cliUpdateState;
     private cliUpdatePushChain;
     private claudeAuthState;
+    /** B-850a: source of `daemonState.agentProfiles` (null = capability off). */
+    private agentProfileService;
     /** B-587: the machine's hibernation threshold, published as a capability. */
     private agentHibernationIdleMs;
     /** B-852: auto-restart setting + per-session status (null until the daemon installs it). */
@@ -2108,6 +2391,15 @@ declare class ApiMachineClient {
         }>;
         setStore: (store: 'auto' | 'file') => Promise<ClaudeAuthState>;
     }): void;
+    /**
+     * B-850a: `agent-profile-*` RPCs + `daemonState.agentProfiles` (spec
+     * 2026-11-session-accounts). Call before connect(): the connect snapshot
+     * carries the list, so its presence with `daemonPid === pid` IS the
+     * capability.
+     */
+    setAgentProfileService(service: AccountService): void;
+    /** B-850a: republish the account list (after an RPC / CLI edit / expiry tick). */
+    publishAgentProfiles(): Promise<void>;
     /** B-688 machine RPCs `model-config-*` (modules/modelConfig/modelConfigRpc.ts). */
     setModelConfigService(service: ModelConfigService): void;
     /**

package/dist/lib.d.mts

@@ -218,6 +218,113 @@ declare const ContextUsageSchema: z$1.ZodObject<{
     compactedAt: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodNumber>>;
 }, z$1.core.$strip>;
 type ContextUsage = z$1.infer<typeof ContextUsageSchema>;
+declare const AgentProfileSummarySchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    agent: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    statusDetail: z$1.ZodOptional<z$1.ZodString>;
+    checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+    createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    baseUrl: z$1.ZodOptional<z$1.ZodString>;
+    models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    keySource: z$1.ZodOptional<z$1.ZodString>;
+    keyRef: z$1.ZodOptional<z$1.ZodString>;
+    legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+type AgentProfileSummary = z$1.infer<typeof AgentProfileSummarySchema>;
+/** `daemonState.agentProfiles` — also the result of `agent-profile-list`. */
+declare const AgentProfilesStateSchema: z$1.ZodObject<{
+    daemonPid: z$1.ZodNumber;
+    updatedAt: z$1.ZodNumber;
+    accounts: z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfilesState = z$1.infer<typeof AgentProfilesStateSchema>;
+/**
+ * `metadata.agentProfile`, written by the wrapper with what it ACTUALLY runs on:
+ *   absent    — older wrapper (no capability): show nothing / 「本机登录」 guess
+ *   null      — machine login (本机登录)
+ *   { status: 'active' }      — running on this account
+ *   { status: 'unavailable' } — bound, but the account cannot be used
+ *       (reason: 'missing' | 'missing-secret' | 'expired' | 'invalid');
+ *       the wrapper refuses turns until the user re-logs in or switches
+ */
+declare const SessionAgentProfileSchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    reason: z$1.ZodOptional<z$1.ZodString>;
+    model: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type SessionAgentProfile = z$1.infer<typeof SessionAgentProfileSchema>;
+/**
+ * waiting-code → (submit) → exchanging → succeeded | failed.
+ * canceled / expired (10 min without a code) are terminal too.
+ */
+declare const AgentProfileLoginStatusSchema: z$1.ZodObject<{
+    loginId: z$1.ZodString;
+    state: z$1.ZodString;
+    url: z$1.ZodOptional<z$1.ZodString>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    account: z$1.ZodOptional<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    error: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfileLoginStatus = z$1.infer<typeof AgentProfileLoginStatusSchema>;
+type AgentProfileBindResult = {
+    /**
+     * false only with `rolledBack` — the restart failed while the session's
+     * wrapper kept running on the previous credential, so the previous binding
+     * was restored (never "bound to the new account, running the old one").
+     */
+    bound: boolean;
+    /** The new binding was undone (see `bound`); the session runs on its previous account. */
+    rolledBack?: true;
+    /**
+     * 'done'    — restarted in place on the new account
+     * 'skipped' — restart:false, or the session is not running here (applies on next start)
+     * 'pending' — still restarting after the 22 s budget (relay RPCs cap at 30 s); the Web
+     *             shows 「重启中」 and treats `metadata.agentProfile` turning into the new
+     *             account as done
+     * 'failed'  — the session is not running any more: binding kept, applies on next
+     *             start; or (`rolledBack`) it still runs: the previous binding is restored
+     */
+    restart: string;
+    error?: string;
+};
 
 declare const CLAUDE_AUTH_PROBE_VERSION: 1;
 type ClaudeAuthStatus = 'ok' | 'not-logged-in' | 'unknown' | 'error' | 'claude-missing';
@@ -596,6 +703,27 @@ declare const DaemonStateSchema: z$1.ZodObject<{
         }, z$1.core.$strip>;
         checkedAt: z$1.ZodNumber;
     }, z$1.core.$strip>>;
+    agentProfiles: z$1.ZodOptional<z$1.ZodObject<{
+        daemonPid: z$1.ZodNumber;
+        updatedAt: z$1.ZodNumber;
+        accounts: z$1.ZodArray<z$1.ZodObject<{
+            id: z$1.ZodString;
+            label: z$1.ZodString;
+            agent: z$1.ZodString;
+            kind: z$1.ZodString;
+            status: z$1.ZodString;
+            statusDetail: z$1.ZodOptional<z$1.ZodString>;
+            checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+            createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+            expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+            baseUrl: z$1.ZodOptional<z$1.ZodString>;
+            models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+            keySource: z$1.ZodOptional<z$1.ZodString>;
+            keyRef: z$1.ZodOptional<z$1.ZodString>;
+            legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+        }, z$1.core.$strip>>;
+        defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+    }, z$1.core.$strip>>;
     rateLimits: z$1.ZodOptional<z$1.ZodObject<{
         v: z$1.ZodLiteral<1>;
         updatedAt: z$1.ZodNumber;
@@ -675,6 +803,8 @@ declare const UserMessageSchema: z$1.ZodObject<{
         allowedTools: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodArray<z$1.ZodString>>>;
         disallowedTools: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodArray<z$1.ZodString>>>;
         effort: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
+        modelIntent: z$1.ZodOptional<z$1.ZodString>;
+        effortIntent: z$1.ZodOptional<z$1.ZodString>;
         delivery: z$1.ZodOptional<z$1.ZodEnum<{
             queue: "queue";
             steer: "steer";
@@ -741,6 +871,19 @@ type Metadata = {
      * machine config.
      */
     stickyModel?: string | null;
+    /**
+     * B-849b: this session's model / thinking choice, recorded by the wrapper
+     * (sole writer) from message meta and the `session-run-intent` RPC; every
+     * device reads it. 'latest' | 'default' | model id; 'default' | level.
+     * null = nothing chosen yet; absent = older wrapper. See happy-wire runIntent.ts.
+     */
+    modelIntent?: string | null;
+    /**
+     * B-850a: the account this wrapper actually runs on (agentProfiles.ts).
+     * null = machine login; absent = wrapper without `agent-profile-v1`.
+     */
+    agentProfile?: SessionAgentProfile | null;
+    effortIntent?: string | null;
     operatingModes?: Array<{
         code: string;
         value: string;
@@ -1635,6 +1778,11 @@ interface SpawnSessionOptions {
     agent?: SpawnAgent;
     environmentVariables?: Record<string, string>;
     token?: string;
+    /**
+     * B-850a: account for a new Claude session. undefined = the machine's
+     * default account (none = machine login); null = machine login.
+     */
+    agentProfileId?: string | null;
     /**
      * If set, the daemon spawns the agent with `--resume <id>` so the new
      * Happy session continues from an existing Claude conversation file.
@@ -1853,6 +2001,139 @@ declare class ModelConfigService {
     }): Promise<ModelConfigApplyResult>;
 }
 
+/**
+ * B-850a: remote Claude subscription login = `claude setup-token` in a pty on
+ * the machine. Its Ink UI only renders in a TTY (FEASIBILITY L2).
+ *
+ *   start  → spawn, wait for the authorize URL (the user picks the org there)
+ *   submit → write the pasted code + Enter; the PKCE verifier never leaves
+ *            this process, so the code alone cannot be redeemed elsewhere
+ *   done   → `sk-ant-oat01-…` appears in the output → caller stores it 0600
+ *
+ * The token is matched in the pty output and handed to `onToken`; it is never
+ * logged and never part of a status object.
+ */
+
+type PtyLike = {
+    onData: (cb: (data: string) => void) => void;
+    onExit: (cb: (e: {
+        exitCode: number;
+    }) => void) => void;
+    write: (data: string) => void;
+    kill: () => void;
+};
+type SpawnPty = (env: Record<string, string>) => PtyLike;
+
+type AccountKey = {
+    source: 'file';
+    path: string;
+} | {
+    source: 'env';
+    name: string;
+} | {
+    source: 'stored';
+};
+type AccountCheck = {
+    status: string;
+    at: number;
+    detail?: string;
+};
+type AccountRecord = {
+    label: string;
+    agent: 'claude';
+    kind: 'claude-subscription' | 'claude-api';
+    createdAt: number;
+    /** claude-api */
+    baseUrl?: string;
+    models?: string[];
+    /** B-794b: model id → real context window. */
+    contextWindows?: Record<string, number>;
+    /** claude-api: where the key lives. claude-subscription always uses the stored secret. */
+    key?: AccountKey;
+    /** claude-subscription: setup-token expiry (1 year after login). */
+    expiresAt?: number;
+    check?: AccountCheck;
+    /** Set on entries synthesized from providers.json — never written to accounts.json. */
+    legacy?: true;
+};
+
+/** `stillRunning`: the restart failed and the session's old wrapper is alive (on the old credential). */
+type RestartOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    notRunning?: boolean;
+    stillRunning?: boolean;
+    error: string;
+};
+type AccountServiceDeps = {
+    home: string;
+    env?: Record<string, string | undefined>;
+    now?: () => number;
+    daemonPid?: number;
+    spawnPty?: SpawnPty;
+    restartSession?: (sessionId: string) => Promise<RestartOutcome>;
+    /** Called after every write so the daemon can republish its state. */
+    onChanged?: () => void;
+    /** Test seam for the 1-token checks. */
+    check?: (record: AccountRecord, secret: string) => Promise<AccountCheck>;
+};
+declare class AccountService {
+    private readonly deps;
+    private readonly home;
+    private readonly env;
+    private readonly now;
+    private logins;
+    /** loginId → account to (re)write when its token arrives. */
+    private readonly loginTargets;
+    constructor(deps: AccountServiceDeps);
+    state(): AgentProfilesState;
+    private summary;
+    private changed;
+    private editable;
+    add(params: unknown): Promise<AgentProfileSummary>;
+    rename(accountId: unknown, label: unknown): AgentProfileSummary;
+    /**
+     * `force` with bound sessions: the credential is gone, so each of those
+     * sessions restarts in place right away and comes back `unavailable`
+     * (refusing turns, Q3) instead of running on the deleted credential until
+     * its next start. Restarts run in parallel within the bind budget; one
+     * still going reports 'pending'.
+     */
+    remove(accountId: unknown, force: unknown): Promise<{
+        removed: true;
+        sessions: string[];
+        restarts?: Record<string, string>;
+    }>;
+    /** 'done' | 'skipped' (not running here) | 'pending' (still going after the budget) | 'failed' */
+    private restartWithinBudget;
+    setDefault(agent: unknown, accountId: unknown): AgentProfilesState;
+    private readSecretFor;
+    test(accountId: unknown): Promise<AgentProfileSummary>;
+    private loginManager;
+    /** Also the terminal path (`very-happy account login`). */
+    storeSubscriptionToken(token: string, target: {
+        accountId?: string;
+        label?: string;
+    }): AgentProfileSummary;
+    loginStart(params: unknown): Promise<AgentProfileLoginStatus>;
+    private loginOp;
+    loginSubmit(params: unknown): AgentProfileLoginStatus;
+    loginStatus(loginId: unknown): AgentProfileLoginStatus;
+    loginCancel(loginId: unknown): AgentProfileLoginStatus;
+    dispose(): void;
+    /** Validates and writes a session binding (no restart). */
+    writeBinding(sessionId: string, accountId: string | null, model?: string): void;
+    bind(params: unknown): Promise<AgentProfileBindResult>;
+    /**
+     * Spawn-time choice → the account a NEW session starts on.
+     *   undefined → the machine default for this agent (none = machine login)
+     *   null      → machine login
+     *   id        → that account; must exist and be usable (Q3: never fall back)
+     */
+    resolveSpawnAccount(agent: string, requested: unknown): string | null;
+}
+
 /** Agent-specific visible-screen adapters. Unknown is deliberately not idle. */
 type CodingAgentKind = 'claude' | 'codex' | 'pi';
 
@@ -1991,6 +2272,8 @@ declare class ApiMachineClient {
     private cliUpdateState;
     private cliUpdatePushChain;
     private claudeAuthState;
+    /** B-850a: source of `daemonState.agentProfiles` (null = capability off). */
+    private agentProfileService;
     /** B-587: the machine's hibernation threshold, published as a capability. */
     private agentHibernationIdleMs;
     /** B-852: auto-restart setting + per-session status (null until the daemon installs it). */
@@ -2108,6 +2391,15 @@ declare class ApiMachineClient {
         }>;
         setStore: (store: 'auto' | 'file') => Promise<ClaudeAuthState>;
     }): void;
+    /**
+     * B-850a: `agent-profile-*` RPCs + `daemonState.agentProfiles` (spec
+     * 2026-11-session-accounts). Call before connect(): the connect snapshot
+     * carries the list, so its presence with `daemonPid === pid` IS the
+     * capability.
+     */
+    setAgentProfileService(service: AccountService): void;
+    /** B-850a: republish the account list (after an RPC / CLI edit / expiry tick). */
+    publishAgentProfiles(): Promise<void>;
     /** B-688 machine RPCs `model-config-*` (modules/modelConfig/modelConfigRpc.ts). */
     setModelConfigService(service: ModelConfigService): void;
     /**