very-happy-cli 0.2.191 → 0.2.192

package/dist/lib.d.mts

@@ -218,6 +218,113 @@ declare const ContextUsageSchema: z$1.ZodObject<{
     compactedAt: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodNumber>>;
 }, z$1.core.$strip>;
 type ContextUsage = z$1.infer<typeof ContextUsageSchema>;
+declare const AgentProfileSummarySchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    agent: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    statusDetail: z$1.ZodOptional<z$1.ZodString>;
+    checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+    createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    baseUrl: z$1.ZodOptional<z$1.ZodString>;
+    models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    keySource: z$1.ZodOptional<z$1.ZodString>;
+    keyRef: z$1.ZodOptional<z$1.ZodString>;
+    legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+type AgentProfileSummary = z$1.infer<typeof AgentProfileSummarySchema>;
+/** `daemonState.agentProfiles` — also the result of `agent-profile-list`. */
+declare const AgentProfilesStateSchema: z$1.ZodObject<{
+    daemonPid: z$1.ZodNumber;
+    updatedAt: z$1.ZodNumber;
+    accounts: z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfilesState = z$1.infer<typeof AgentProfilesStateSchema>;
+/**
+ * `metadata.agentProfile`, written by the wrapper with what it ACTUALLY runs on:
+ *   absent    — older wrapper (no capability): show nothing / 「本机登录」 guess
+ *   null      — machine login (本机登录)
+ *   { status: 'active' }      — running on this account
+ *   { status: 'unavailable' } — bound, but the account cannot be used
+ *       (reason: 'missing' | 'missing-secret' | 'expired' | 'invalid');
+ *       the wrapper refuses turns until the user re-logs in or switches
+ */
+declare const SessionAgentProfileSchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    reason: z$1.ZodOptional<z$1.ZodString>;
+    model: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type SessionAgentProfile = z$1.infer<typeof SessionAgentProfileSchema>;
+/**
+ * waiting-code → (submit) → exchanging → succeeded | failed.
+ * canceled / expired (10 min without a code) are terminal too.
+ */
+declare const AgentProfileLoginStatusSchema: z$1.ZodObject<{
+    loginId: z$1.ZodString;
+    state: z$1.ZodString;
+    url: z$1.ZodOptional<z$1.ZodString>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    account: z$1.ZodOptional<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    error: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfileLoginStatus = z$1.infer<typeof AgentProfileLoginStatusSchema>;
+type AgentProfileBindResult = {
+    /**
+     * false only with `rolledBack` — the restart failed while the session's
+     * wrapper kept running on the previous credential, so the previous binding
+     * was restored (never "bound to the new account, running the old one").
+     */
+    bound: boolean;
+    /** The new binding was undone (see `bound`); the session runs on its previous account. */
+    rolledBack?: true;
+    /**
+     * 'done'    — restarted in place on the new account
+     * 'skipped' — restart:false, or the session is not running here (applies on next start)
+     * 'pending' — still restarting after the 22 s budget (relay RPCs cap at 30 s); the Web
+     *             shows 「重启中」 and treats `metadata.agentProfile` turning into the new
+     *             account as done
+     * 'failed'  — the session is not running any more: binding kept, applies on next
+     *             start; or (`rolledBack`) it still runs: the previous binding is restored
+     */
+    restart: string;
+    error?: string;
+};
 
 declare const CLAUDE_AUTH_PROBE_VERSION: 1;
 type ClaudeAuthStatus = 'ok' | 'not-logged-in' | 'unknown' | 'error' | 'claude-missing';
@@ -596,6 +703,27 @@ declare const DaemonStateSchema: z$1.ZodObject<{
         }, z$1.core.$strip>;
         checkedAt: z$1.ZodNumber;
     }, z$1.core.$strip>>;
+    agentProfiles: z$1.ZodOptional<z$1.ZodObject<{
+        daemonPid: z$1.ZodNumber;
+        updatedAt: z$1.ZodNumber;
+        accounts: z$1.ZodArray<z$1.ZodObject<{
+            id: z$1.ZodString;
+            label: z$1.ZodString;
+            agent: z$1.ZodString;
+            kind: z$1.ZodString;
+            status: z$1.ZodString;
+            statusDetail: z$1.ZodOptional<z$1.ZodString>;
+            checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+            createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+            expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+            baseUrl: z$1.ZodOptional<z$1.ZodString>;
+            models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+            keySource: z$1.ZodOptional<z$1.ZodString>;
+            keyRef: z$1.ZodOptional<z$1.ZodString>;
+            legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+        }, z$1.core.$strip>>;
+        defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+    }, z$1.core.$strip>>;
     rateLimits: z$1.ZodOptional<z$1.ZodObject<{
         v: z$1.ZodLiteral<1>;
         updatedAt: z$1.ZodNumber;
@@ -750,6 +878,11 @@ type Metadata = {
      * null = nothing chosen yet; absent = older wrapper. See happy-wire runIntent.ts.
      */
     modelIntent?: string | null;
+    /**
+     * B-850a: the account this wrapper actually runs on (agentProfiles.ts).
+     * null = machine login; absent = wrapper without `agent-profile-v1`.
+     */
+    agentProfile?: SessionAgentProfile | null;
     effortIntent?: string | null;
     operatingModes?: Array<{
         code: string;
@@ -1645,6 +1778,11 @@ interface SpawnSessionOptions {
     agent?: SpawnAgent;
     environmentVariables?: Record<string, string>;
     token?: string;
+    /**
+     * B-850a: account for a new Claude session. undefined = the machine's
+     * default account (none = machine login); null = machine login.
+     */
+    agentProfileId?: string | null;
     /**
      * If set, the daemon spawns the agent with `--resume <id>` so the new
      * Happy session continues from an existing Claude conversation file.
@@ -1863,6 +2001,139 @@ declare class ModelConfigService {
     }): Promise<ModelConfigApplyResult>;
 }
 
+/**
+ * B-850a: remote Claude subscription login = `claude setup-token` in a pty on
+ * the machine. Its Ink UI only renders in a TTY (FEASIBILITY L2).
+ *
+ *   start  → spawn, wait for the authorize URL (the user picks the org there)
+ *   submit → write the pasted code + Enter; the PKCE verifier never leaves
+ *            this process, so the code alone cannot be redeemed elsewhere
+ *   done   → `sk-ant-oat01-…` appears in the output → caller stores it 0600
+ *
+ * The token is matched in the pty output and handed to `onToken`; it is never
+ * logged and never part of a status object.
+ */
+
+type PtyLike = {
+    onData: (cb: (data: string) => void) => void;
+    onExit: (cb: (e: {
+        exitCode: number;
+    }) => void) => void;
+    write: (data: string) => void;
+    kill: () => void;
+};
+type SpawnPty = (env: Record<string, string>) => PtyLike;
+
+type AccountKey = {
+    source: 'file';
+    path: string;
+} | {
+    source: 'env';
+    name: string;
+} | {
+    source: 'stored';
+};
+type AccountCheck = {
+    status: string;
+    at: number;
+    detail?: string;
+};
+type AccountRecord = {
+    label: string;
+    agent: 'claude';
+    kind: 'claude-subscription' | 'claude-api';
+    createdAt: number;
+    /** claude-api */
+    baseUrl?: string;
+    models?: string[];
+    /** B-794b: model id → real context window. */
+    contextWindows?: Record<string, number>;
+    /** claude-api: where the key lives. claude-subscription always uses the stored secret. */
+    key?: AccountKey;
+    /** claude-subscription: setup-token expiry (1 year after login). */
+    expiresAt?: number;
+    check?: AccountCheck;
+    /** Set on entries synthesized from providers.json — never written to accounts.json. */
+    legacy?: true;
+};
+
+/** `stillRunning`: the restart failed and the session's old wrapper is alive (on the old credential). */
+type RestartOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    notRunning?: boolean;
+    stillRunning?: boolean;
+    error: string;
+};
+type AccountServiceDeps = {
+    home: string;
+    env?: Record<string, string | undefined>;
+    now?: () => number;
+    daemonPid?: number;
+    spawnPty?: SpawnPty;
+    restartSession?: (sessionId: string) => Promise<RestartOutcome>;
+    /** Called after every write so the daemon can republish its state. */
+    onChanged?: () => void;
+    /** Test seam for the 1-token checks. */
+    check?: (record: AccountRecord, secret: string) => Promise<AccountCheck>;
+};
+declare class AccountService {
+    private readonly deps;
+    private readonly home;
+    private readonly env;
+    private readonly now;
+    private logins;
+    /** loginId → account to (re)write when its token arrives. */
+    private readonly loginTargets;
+    constructor(deps: AccountServiceDeps);
+    state(): AgentProfilesState;
+    private summary;
+    private changed;
+    private editable;
+    add(params: unknown): Promise<AgentProfileSummary>;
+    rename(accountId: unknown, label: unknown): AgentProfileSummary;
+    /**
+     * `force` with bound sessions: the credential is gone, so each of those
+     * sessions restarts in place right away and comes back `unavailable`
+     * (refusing turns, Q3) instead of running on the deleted credential until
+     * its next start. Restarts run in parallel within the bind budget; one
+     * still going reports 'pending'.
+     */
+    remove(accountId: unknown, force: unknown): Promise<{
+        removed: true;
+        sessions: string[];
+        restarts?: Record<string, string>;
+    }>;
+    /** 'done' | 'skipped' (not running here) | 'pending' (still going after the budget) | 'failed' */
+    private restartWithinBudget;
+    setDefault(agent: unknown, accountId: unknown): AgentProfilesState;
+    private readSecretFor;
+    test(accountId: unknown): Promise<AgentProfileSummary>;
+    private loginManager;
+    /** Also the terminal path (`very-happy account login`). */
+    storeSubscriptionToken(token: string, target: {
+        accountId?: string;
+        label?: string;
+    }): AgentProfileSummary;
+    loginStart(params: unknown): Promise<AgentProfileLoginStatus>;
+    private loginOp;
+    loginSubmit(params: unknown): AgentProfileLoginStatus;
+    loginStatus(loginId: unknown): AgentProfileLoginStatus;
+    loginCancel(loginId: unknown): AgentProfileLoginStatus;
+    dispose(): void;
+    /** Validates and writes a session binding (no restart). */
+    writeBinding(sessionId: string, accountId: string | null, model?: string): void;
+    bind(params: unknown): Promise<AgentProfileBindResult>;
+    /**
+     * Spawn-time choice → the account a NEW session starts on.
+     *   undefined → the machine default for this agent (none = machine login)
+     *   null      → machine login
+     *   id        → that account; must exist and be usable (Q3: never fall back)
+     */
+    resolveSpawnAccount(agent: string, requested: unknown): string | null;
+}
+
 /** Agent-specific visible-screen adapters. Unknown is deliberately not idle. */
 type CodingAgentKind = 'claude' | 'codex' | 'pi';
 
@@ -2001,6 +2272,8 @@ declare class ApiMachineClient {
     private cliUpdateState;
     private cliUpdatePushChain;
     private claudeAuthState;
+    /** B-850a: source of `daemonState.agentProfiles` (null = capability off). */
+    private agentProfileService;
     /** B-587: the machine's hibernation threshold, published as a capability. */
     private agentHibernationIdleMs;
     /** B-852: auto-restart setting + per-session status (null until the daemon installs it). */
@@ -2118,6 +2391,15 @@ declare class ApiMachineClient {
         }>;
         setStore: (store: 'auto' | 'file') => Promise<ClaudeAuthState>;
     }): void;
+    /**
+     * B-850a: `agent-profile-*` RPCs + `daemonState.agentProfiles` (spec
+     * 2026-11-session-accounts). Call before connect(): the connect snapshot
+     * carries the list, so its presence with `daemonPid === pid` IS the
+     * capability.
+     */
+    setAgentProfileService(service: AccountService): void;
+    /** B-850a: republish the account list (after an RPC / CLI edit / expiry tick). */
+    publishAgentProfiles(): Promise<void>;
     /** B-688 machine RPCs `model-config-*` (modules/modelConfig/modelConfigRpc.ts). */
     setModelConfigService(service: ModelConfigService): void;
     /**

package/dist/lib.mjs

@@ -1,9 +1,9 @@
-export { A as ApiClient, a as ApiSessionClient } from './api-jfeMRg5R.mjs';
-export { l as logger } from './logger-GcbI0eg2.mjs';
-export { c as configuration } from './configuration-ECqXu34R.mjs';
+export { A as ApiClient, a as ApiSessionClient } from './api-_LeBScjg.mjs';
+export { l as logger } from './logger-Fd_rNvgd.mjs';
+export { c as configuration } from './configuration-IhRiLDVe.mjs';
 export { R as RawJSONLinesSchema } from './types-CkqAACXx.mjs';
 import 'axios';
-import './lidState-CD81ryTy.mjs';
+import './lidState-CZOXXdzv.mjs';
 import './authRelay-DhQhkBvX.mjs';
 import 'node:crypto';
 import 'tweetnacl';
@@ -11,14 +11,14 @@ import 'os';
 import 'child_process';
 import 'node:events';
 import 'socket.io-client';
-import './pushNotifications-XAM8__Pg.mjs';
+import './pushNotifications-DkQ0yvFs.mjs';
 import 'zod';
-import './index-Bq8NKSCF.mjs';
+import './index-DYD3GM1m.mjs';
 import '@paralleldrive/cuid2';
 import './contentLogMetadata-BlWI0egu.mjs';
 import './limits-DIo7rEBR.mjs';
-import './time-D0jvDRhn.mjs';
-import './registerCommonHandlers-DRRfinzK.mjs';
+import './time-bzmet4s5.mjs';
+import './registerCommonHandlers-yQ7Ru-l0.mjs';
 import 'util';
 import 'fs/promises';
 import 'crypto';
@@ -26,14 +26,14 @@ import 'path';
 import 'cross-spawn';
 import './projectPath-BTBIMB57.mjs';
 import 'url';
-import './sync-C0PRuTMj.mjs';
+import './sync-JoEZKRo8.mjs';
 import './backgroundTaskActivity-8PdPxrvy.mjs';
-import './controlClient-ClI7A0qE.mjs';
-import './persistence-Cpw4yJs8.mjs';
+import './controlClient-8ILulwjc.mjs';
+import './persistence-DWcHe035.mjs';
 import 'node:fs/promises';
 import 'node:fs';
 import 'chalk';
 import 'node:util';
 import 'node:path';
 import 'node:os';
-import './package-BsUHyqWe.mjs';
+import './package-6KkRAops.mjs';

package/dist/{lidState-CD81ryTy.mjs → lidState-CZOXXdzv.mjs}

@@ -1,4 +1,4 @@
-import { l as logger } from './logger-GcbI0eg2.mjs';
+import { l as logger } from './logger-Fd_rNvgd.mjs';
 import { e as encodeBase64, g as encrypt, h as decrypt, d as decodeBase64 } from './authRelay-DhQhkBvX.mjs';
 import os from 'os';
 import { execSync } from 'child_process';

package/dist/{lidState-C9_DoF9i.cjs → lidState-DqoN7zH4.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var logger = require('./logger-Ct2zvaq0.cjs');
+var logger = require('./logger-8su64lqR.cjs');
 var authRelay = require('./authRelay-Dy1qU9td.cjs');
 var os = require('os');
 var child_process = require('child_process');

package/dist/{localHappyAgentAuth-CCjUvOfi.cjs → localHappyAgentAuth-BnGCpHRX.cjs}

@@ -6,7 +6,7 @@ var path = require('node:path');
 var tweetnacl = require('tweetnacl');
 var z = require('zod');
 var authRelay = require('./authRelay-Dy1qU9td.cjs');
-var configuration = require('./configuration-DfPBa-9d.cjs');
+var configuration = require('./configuration-CXEVKAyF.cjs');
 
 const AgentCredentialsSchema = z.z.object({
   token: z.z.string().min(1),

package/dist/{localHappyAgentAuth-Cg-m1lwm.mjs → localHappyAgentAuth-YHxDZ4x4.mjs}

@@ -4,7 +4,7 @@ import { join } from 'node:path';
 import tweetnacl from 'tweetnacl';
 import { z } from 'zod';
 import { c as credentialRelayProblem, d as decodeBase64 } from './authRelay-DhQhkBvX.mjs';
-import { c as configuration } from './configuration-ECqXu34R.mjs';
+import { c as configuration } from './configuration-IhRiLDVe.mjs';
 
 const AgentCredentialsSchema = z.object({
   token: z.string().min(1),

package/dist/{logger-Ct2zvaq0.cjs → logger-8su64lqR.cjs}

@@ -2,7 +2,7 @@
 
 var chalk = require('chalk');
 var node_util = require('node:util');
-var configuration = require('./configuration-DfPBa-9d.cjs');
+var configuration = require('./configuration-CXEVKAyF.cjs');
 var node_fs = require('node:fs');
 var path = require('node:path');
 
@@ -238,7 +238,7 @@ async function listDaemonLogFiles(limit = 50) {
       return { file, path: fullPath, modified: stats.mtime };
     }).sort((a, b) => b.modified.getTime() - a.modified.getTime());
     try {
-      const { readDaemonState } = await Promise.resolve().then(function () { return require('./persistence-A2NeERZJ.cjs'); }).then(function (n) { return n.persistence; });
+      const { readDaemonState } = await Promise.resolve().then(function () { return require('./persistence-B4ttN-fR.cjs'); }).then(function (n) { return n.persistence; });
       const state = await readDaemonState();
       if (!state) {
         return logs;

package/dist/{logger-GcbI0eg2.mjs → logger-Fd_rNvgd.mjs}

@@ -1,6 +1,6 @@
 import chalk from 'chalk';
 import { inspect } from 'node:util';
-import { d as appendPrivateFileSync, c as configuration } from './configuration-ECqXu34R.mjs';
+import { d as appendPrivateFileSync, c as configuration } from './configuration-IhRiLDVe.mjs';
 import { existsSync, readdirSync, statSync } from 'node:fs';
 import { join, basename } from 'node:path';
 
@@ -236,7 +236,7 @@ async function listDaemonLogFiles(limit = 50) {
       return { file, path: fullPath, modified: stats.mtime };
     }).sort((a, b) => b.modified.getTime() - a.modified.getTime());
     try {
-      const { readDaemonState } = await import('./persistence-Cpw4yJs8.mjs').then(function (n) { return n.G; });
+      const { readDaemonState } = await import('./persistence-DWcHe035.mjs').then(function (n) { return n.G; });
       const state = await readDaemonState();
       if (!state) {
         return logs;

package/dist/{machineMetadata-CXRmFNOV.mjs → machineMetadata-1HIIC7Bc.mjs}

@@ -1,9 +1,9 @@
 import os from 'node:os';
-import { p as packageJson } from './package-BsUHyqWe.mjs';
-import { c as configuration } from './configuration-ECqXu34R.mjs';
+import { p as packageJson } from './package-6KkRAops.mjs';
+import { c as configuration } from './configuration-IhRiLDVe.mjs';
 import { p as projectPath } from './projectPath-BTBIMB57.mjs';
 import { d as detectCLIAvailability } from './detectCLI-CSGMlV51.mjs';
-import { d as detectResumeSupport } from './localHappyAgentAuth-Cg-m1lwm.mjs';
+import { d as detectResumeSupport } from './localHappyAgentAuth-YHxDZ4x4.mjs';
 import { F as FS_MKDIR_CAPABILITY_VERSION } from './fsMkdir-DumgLTzR.mjs';
 
 const TEAM_RETRY_CAPABILITY_VERSION = 2;

package/dist/{machineMetadata-DDCVWb_x.cjs → machineMetadata-DYXt3p6u.cjs}

@@ -1,11 +1,11 @@
 'use strict';
 
 var os = require('node:os');
-var _package = require('./package-9n7wd2dT.cjs');
-var configuration = require('./configuration-DfPBa-9d.cjs');
+var _package = require('./package-iuLlSiSF.cjs');
+var configuration = require('./configuration-CXEVKAyF.cjs');
 var projectPath = require('./projectPath-C3ioB4Bu.cjs');
 var detectCLI = require('./detectCLI-BuYR_Qxe.cjs');
-var localHappyAgentAuth = require('./localHappyAgentAuth-CCjUvOfi.cjs');
+var localHappyAgentAuth = require('./localHappyAgentAuth-BnGCpHRX.cjs');
 var fsMkdir = require('./fsMkdir-0K3yENml.cjs');
 
 const TEAM_RETRY_CAPABILITY_VERSION = 2;