very-happy-cli 0.2.191 → 0.2.192

package/dist/{index-Bq8NKSCF.mjs → index-DYD3GM1m.mjs}

@@ -1385,6 +1385,109 @@ function restoredModel(metadata) {
   if (metadata?.stickyModel === null && typeof intent === "string") return null;
   return void 0;
 }
+const AGENT_PROFILE_SESSION_CAPABILITY = "agent-profile-v1";
+const AGENT_PROFILE_RPC = {
+  list: "agent-profile-list",
+  add: "agent-profile-add",
+  loginStart: "agent-profile-login-start",
+  loginSubmit: "agent-profile-login-submit",
+  loginStatus: "agent-profile-login-status",
+  loginCancel: "agent-profile-login-cancel",
+  test: "agent-profile-test",
+  rename: "agent-profile-rename",
+  remove: "agent-profile-remove",
+  setDefault: "agent-profile-set-default",
+  bind: "agent-profile-bind"
+};
+const AGENT_PROFILE_STATUSES = ["ok", "unverified", "expired", "invalid", "missing-secret"];
+const AgentProfileSummarySchema = z$1.object({
+  id: z$1.string(),
+  label: z$1.string(),
+  agent: z$1.string(),
+  // 'claude' (codex/pi/gemini later)
+  kind: z$1.string(),
+  // AgentProfileKind (open)
+  status: z$1.string(),
+  // AgentProfileStatus (open; unknown → 'unverified')
+  statusDetail: z$1.string().optional(),
+  // short human reason for the last failed check
+  checkedAt: z$1.number().optional(),
+  createdAt: z$1.number().optional(),
+  /** Subscription token expiry (ms). The UI derives 「即将过期」 from it. */
+  expiresAt: z$1.number().optional(),
+  /** API kinds: endpoint (not a secret). */
+  baseUrl: z$1.string().optional(),
+  /** API kinds: models the endpoint serves; first = default for a new binding. */
+  models: z$1.array(z$1.string()).optional(),
+  /** Where the key comes from: 'file' | 'env' | 'stored' (pasted / login-created, kept 0600 on the machine). */
+  keySource: z$1.string().optional(),
+  /** 'file' → the path, 'env' → the variable name. Never the key. */
+  keyRef: z$1.string().optional(),
+  /** Read from the B-794 `providers.json` (v1): listed and usable, but edit/remove it in that file. */
+  legacy: z$1.boolean().optional()
+});
+const AgentProfilesStateSchema = z$1.object({
+  daemonPid: z$1.number(),
+  updatedAt: z$1.number(),
+  accounts: z$1.array(AgentProfileSummarySchema),
+  /** agent → account id new sessions on this machine use when the spawn names none. Absent = machine login. */
+  defaults: z$1.record(z$1.string(), z$1.string())
+});
+z$1.object({
+  id: z$1.string(),
+  label: z$1.string(),
+  kind: z$1.string(),
+  status: z$1.string(),
+  reason: z$1.string().optional(),
+  /** API kinds: the model every slot is pinned to. */
+  model: z$1.string().optional()
+});
+const AgentProfileKeyInputSchema = z$1.discriminatedUnion("source", [
+  z$1.object({ source: z$1.literal("file"), path: z$1.string().min(1).max(1024) }),
+  z$1.object({ source: z$1.literal("env"), name: z$1.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/) }),
+  /** Q2: allowed, never the default. Relayed through the server (not stored there); kept 0600 on the machine. */
+  z$1.object({ source: z$1.literal("paste"), value: z$1.string().min(1).max(4096) })
+]);
+const AgentProfileModelInputSchema = z$1.union([
+  z$1.string().min(1).max(160),
+  z$1.object({ id: z$1.string().min(1).max(160), contextWindow: z$1.number().int().positive().optional() })
+]);
+const AgentProfileAddRequestSchema = z$1.object({
+  agent: z$1.literal("claude"),
+  kind: z$1.literal("claude-api"),
+  label: z$1.string().trim().min(1).max(60),
+  baseUrl: z$1.string().regex(/^https?:\/\/\S+$/).max(512),
+  models: z$1.array(AgentProfileModelInputSchema).max(50).optional(),
+  key: AgentProfileKeyInputSchema
+});
+const AgentProfileLoginStartRequestSchema = z$1.object({
+  agent: z$1.literal("claude"),
+  kind: z$1.literal("claude-subscription"),
+  label: z$1.string().trim().min(1).max(60).optional(),
+  accountId: z$1.string().optional()
+});
+const AgentProfileLoginSubmitRequestSchema = z$1.object({
+  loginId: z$1.string(),
+  code: z$1.string().trim().min(1).max(2048)
+});
+z$1.object({
+  loginId: z$1.string(),
+  state: z$1.string(),
+  url: z$1.string().optional(),
+  expiresAt: z$1.number().optional(),
+  account: AgentProfileSummarySchema.optional(),
+  error: z$1.string().optional()
+});
+const AgentProfileBindRequestSchema = z$1.object({
+  sessionId: z$1.string().min(1),
+  /** null = back to the machine login. */
+  accountId: z$1.string().nullable(),
+  /** API kinds only; default = the account's first model. */
+  model: z$1.string().max(160).optional(),
+  /** Default true: restart the session in place now. */
+  restart: z$1.boolean().optional()
+});
+new Set(AGENT_PROFILE_STATUSES);
 const PROMPT_QUEUE_CAPABILITY = "prompt-queue-v1";
 const PROMPT_QUEUE_MAX_ITEMS = 50;
 const PROMPT_QUEUE_LOCAL_ID_MAX_BYTES = 256;
@@ -1708,4 +1811,4 @@ z.object({
   reason: z.string()
 });
 
-export { ServerMigrateNoticeSchema as $, AUTOMATION_NAME_PATTERN as A, BUILTIN_TODO_SKILL as B, CLAUDE_CONFIG_MODEL_CAPABILITY as C, AutomationActionSchema as D, EFFORT_INTENT_AUTO as E, AutomationTriggerSchema as F, AgentVersionsSchema as G, AGENT_VERSION_SOURCES as H, ATTENTION_DISABLED_ERROR as I, ATTENTION_LIMITS as J, ownerBoardPostToRest as K, LATEST_MODEL_MODE as L, isAttentionBoardLocalId as M, OwnerBoardUpdateInputSchema as N, OwnerBoardPostInputSchema as O, PROMPT_QUEUE_CAPABILITY as P, OwnerBoardResolveInputSchema as Q, RUN_INTENT_CAPABILITY as R, STREAM_DELTA_MAX_CHARS as S, OwnerBoardListInputSchema as T, ATTENTION_SESSION_CAPABILITY as U, PI_STEER_CAPABILITY as V, ReleaseDrainNoticeSchema as W, RelayAssignmentResponseSchema as X, CODEX_STEER_CAPABILITY as Y, CODEX_COMPACT_CAPABILITY as Z, RelayCandidatesResponseSchema as _, PROJECT_SESSION_CAPABILITY as a, isHarnessInstallId as a0, MODEL_INTENT_CONFIG as a1, AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS as a2, AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS as a3, AUTOMATION_CLAIM_MAX_RUNS as a4, AUTOMATION_DAEMON_CAPABILITY_PRECHECK as a5, AUTOMATION_DEFAULT_LEASE_MS as a6, HARNESS_INSTALL_CAPABILITY_VERSION as a7, restoredModel as b, AUTOMATION_PRECHECK_MAX_TIMEOUT_MS as c, AutomationPrecheckSchema as d, AUTOMATION_ATTENTION_REASON_MAX_CHARS as e, AUTOMATION_SUMMARY_MAX_CHARS as f, isInsideTeamWorktree as g, rebaseTeamWorktreePath as h, isAutomationRunTerminal as i, createEnvelope as j, RUN_INTENT_RPC as k, RunIntentRequestSchema as l, readEffortIntent as m, nextRunIntents as n, readModelIntent as o, createBuiltinTodoClient as p, parseLatestModelTable as q, restoredEffort as r, streamKeyOf as s, BUILTIN_TODO_DISCOVERY as t, getAgentCodeDefaults as u, isLatestModelMode as v, resolveLatestModel as w, normalizeAgentKey as x, AutomationNameSchema as y, AutomationConcurrencySchema as z };
+export { PI_STEER_CAPABILITY as $, AGENT_PROFILE_SESSION_CAPABILITY as A, BUILTIN_TODO_SKILL as B, CLAUDE_CONFIG_MODEL_CAPABILITY as C, AutomationConcurrencySchema as D, AutomationActionSchema as E, AutomationTriggerSchema as F, AgentProfilesStateSchema as G, AgentVersionsSchema as H, getAgentCodeDefaults as I, isLatestModelMode as J, resolveLatestModel as K, LATEST_MODEL_MODE as L, EFFORT_INTENT_AUTO as M, normalizeAgentKey as N, AGENT_VERSION_SOURCES as O, PROMPT_QUEUE_CAPABILITY as P, ATTENTION_DISABLED_ERROR as Q, RUN_INTENT_CAPABILITY as R, STREAM_DELTA_MAX_CHARS as S, ATTENTION_LIMITS as T, ownerBoardPostToRest as U, isAttentionBoardLocalId as V, OwnerBoardPostInputSchema as W, OwnerBoardUpdateInputSchema as X, OwnerBoardResolveInputSchema as Y, OwnerBoardListInputSchema as Z, ATTENTION_SESSION_CAPABILITY as _, PROJECT_SESSION_CAPABILITY as a, ReleaseDrainNoticeSchema as a0, RelayAssignmentResponseSchema as a1, CODEX_STEER_CAPABILITY as a2, CODEX_COMPACT_CAPABILITY as a3, AGENT_PROFILE_RPC as a4, RelayCandidatesResponseSchema as a5, ServerMigrateNoticeSchema as a6, isHarnessInstallId as a7, MODEL_INTENT_CONFIG as a8, AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS as a9, AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS as aa, AUTOMATION_CLAIM_MAX_RUNS as ab, AUTOMATION_DAEMON_CAPABILITY_PRECHECK as ac, AUTOMATION_DEFAULT_LEASE_MS as ad, HARNESS_INSTALL_CAPABILITY_VERSION as ae, restoredModel as b, AUTOMATION_NAME_PATTERN as c, AUTOMATION_PRECHECK_MAX_TIMEOUT_MS as d, AutomationPrecheckSchema as e, isInsideTeamWorktree as f, rebaseTeamWorktreePath as g, AUTOMATION_ATTENTION_REASON_MAX_CHARS as h, isAutomationRunTerminal as i, AUTOMATION_SUMMARY_MAX_CHARS as j, createEnvelope as k, RUN_INTENT_RPC as l, RunIntentRequestSchema as m, nextRunIntents as n, readEffortIntent as o, readModelIntent as p, createBuiltinTodoClient as q, restoredEffort as r, streamKeyOf as s, parseLatestModelTable as t, AgentProfileAddRequestSchema as u, AgentProfileLoginStartRequestSchema as v, AgentProfileLoginSubmitRequestSchema as w, AgentProfileBindRequestSchema as x, BUILTIN_TODO_DISCOVERY as y, AutomationNameSchema as z };

package/dist/{index-BjZnpGWX.mjs → index-JQDyJ3Li.mjs}

@@ -1,4 +1,4 @@
-import { p as packageJson } from './package-BsUHyqWe.mjs';
+import { p as packageJson } from './package-6KkRAops.mjs';
 import module$1 from 'node:module';
 import { existsSync } from 'node:fs';
 import { readdir, rm } from 'node:fs/promises';
@@ -57,10 +57,10 @@ async function pruneStaleCompileCaches(happyHomeDir, cliVersion) {
 async function run(args) {
   enableCompileCacheIfPossible(packageJson.version);
   if (isStandaloneVersionRequest(args) || isSelfCheckRequest(args)) {
-    const { selfCheckMain } = await import('./selfCheck-C-rNljKV.mjs');
+    const { selfCheckMain } = await import('./selfCheck-vkfrgQ7X.mjs');
     process.exit(await selfCheckMain({ verbose: isSelfCheckRequest(args) }));
   }
-  const { main } = await import('./main-omGr_ONk.mjs');
+  const { main } = await import('./main-BI6GIzUL.mjs');
   await main();
 }
 void run(process.argv.slice(2));

package/dist/{index-DuK9XYbZ.mjs → index-v5EmjT8l.mjs}

@@ -1,14 +1,14 @@
 import { statSync, readdirSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { l as logger } from './logger-GcbI0eg2.mjs';
-import { r as readSettings } from './persistence-Cpw4yJs8.mjs';
+import { l as logger } from './logger-Fd_rNvgd.mjs';
+import { r as readSettings } from './persistence-DWcHe035.mjs';
 import { d as describeAgentHome, C as CLAUDE_CONFIG_DIR_ENV, a as CODEX_HOME_ENV, f as findClaudeConversation, b as agentHomeCandidates, c as findCodexThread, r as resolveAgentHomes, A as AGENT_HOME_ENV_NAMES, g as agentHomeEnv, p as probeLoginShellEnv } from './loginShellEnv-Dw8M7tkI.mjs';
 export { h as claudeConversationPath, i as claudeProjectDirName, j as codexRolloutFileMatches, e as expandHomePath } from './loginShellEnv-Dw8M7tkI.mjs';
 import 'chalk';
 import 'node:util';
-import './configuration-ECqXu34R.mjs';
+import './configuration-IhRiLDVe.mjs';
 import 'node:path';
-import './package-BsUHyqWe.mjs';
+import './package-6KkRAops.mjs';
 import 'node:fs/promises';
 import 'zod';
 import './authRelay-DhQhkBvX.mjs';

package/dist/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-require('./package-9n7wd2dT.cjs');
-require('./index-CmZusg8Q.cjs');
+require('./package-iuLlSiSF.cjs');
+require('./index-CQ_hLLCj.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import './package-BsUHyqWe.mjs';
-import './index-BjZnpGWX.mjs';
+import './package-6KkRAops.mjs';
+import './index-JQDyJ3Li.mjs';
 import 'node:module';
 import 'node:fs';
 import 'node:fs/promises';

package/dist/{install-DXllkuy0.cjs → install-ClUA9tbC.cjs}

@@ -1,17 +1,17 @@
 'use strict';
 
-var logger = require('./logger-Ct2zvaq0.cjs');
+var logger = require('./logger-8su64lqR.cjs');
 var require$$0 = require('fs');
 var child_process = require('child_process');
 var trimIdent = require('./trimIdent-4gvk9Wk6.cjs');
 var os = require('os');
 require('chalk');
 require('node:util');
-require('./configuration-DfPBa-9d.cjs');
+require('./configuration-CXEVKAyF.cjs');
 require('node:fs');
 require('node:os');
 require('node:path');
-require('./package-9n7wd2dT.cjs');
+require('./package-iuLlSiSF.cjs');
 require('node:fs/promises');
 
 const PLIST_LABEL = "com.happy-cli.daemon";

package/dist/{install-DTIveLOS.mjs → install-D6EHRtAN.mjs}

@@ -1,15 +1,15 @@
-import { l as logger } from './logger-GcbI0eg2.mjs';
+import { l as logger } from './logger-Fd_rNvgd.mjs';
 import { existsSync, writeFileSync, chmodSync } from 'fs';
 import { execSync } from 'child_process';
 import { t as trimIdent } from './trimIdent-BAjmv_TG.mjs';
 import os from 'os';
 import 'chalk';
 import 'node:util';
-import './configuration-ECqXu34R.mjs';
+import './configuration-IhRiLDVe.mjs';
 import 'node:fs';
 import 'node:os';
 import 'node:path';
-import './package-BsUHyqWe.mjs';
+import './package-6KkRAops.mjs';
 import 'node:fs/promises';
 
 const PLIST_LABEL = "com.happy-cli.daemon";

package/dist/lib.cjs

@@ -1,11 +1,11 @@
 'use strict';
 
-var api = require('./api-BBxZ7y2z.cjs');
-var logger = require('./logger-Ct2zvaq0.cjs');
-var configuration = require('./configuration-DfPBa-9d.cjs');
+var api = require('./api-hMDsC6Wg.cjs');
+var logger = require('./logger-8su64lqR.cjs');
+var configuration = require('./configuration-CXEVKAyF.cjs');
 var types = require('./types-CRS-srZK.cjs');
 require('axios');
-require('./lidState-C9_DoF9i.cjs');
+require('./lidState-DqoN7zH4.cjs');
 require('./authRelay-Dy1qU9td.cjs');
 require('node:crypto');
 require('tweetnacl');
@@ -13,14 +13,14 @@ require('os');
 require('child_process');
 require('node:events');
 require('socket.io-client');
-require('./pushNotifications-23YSd-0l.cjs');
+require('./pushNotifications-BqFoLye2.cjs');
 require('zod');
-require('./index-CLUHaPU8.cjs');
+require('./index-BzAYnYct.cjs');
 require('@paralleldrive/cuid2');
 require('./contentLogMetadata-ZSFk_NjQ.cjs');
 require('./limits-C-a7gr04.cjs');
-require('./time-Cy0a-7YX.cjs');
-require('./registerCommonHandlers-D1MiSfcB.cjs');
+require('./time-CaUlWSNJ.cjs');
+require('./registerCommonHandlers-m6pxxf2J.cjs');
 require('util');
 require('fs/promises');
 require('crypto');
@@ -28,17 +28,17 @@ require('path');
 require('cross-spawn');
 require('./projectPath-C3ioB4Bu.cjs');
 require('url');
-require('./sync-Ba8N6xba.cjs');
+require('./sync-_2lsZ1U2.cjs');
 require('./backgroundTaskActivity-CBvUdj39.cjs');
-require('./controlClient-C13_pSKG.cjs');
-require('./persistence-A2NeERZJ.cjs');
+require('./controlClient-j7p5p3_7.cjs');
+require('./persistence-B4ttN-fR.cjs');
 require('node:fs/promises');
 require('node:fs');
 require('chalk');
 require('node:util');
 require('node:path');
 require('node:os');
-require('./package-9n7wd2dT.cjs');
+require('./package-iuLlSiSF.cjs');
 
 
 

package/dist/lib.d.cts

@@ -218,6 +218,113 @@ declare const ContextUsageSchema: z$1.ZodObject<{
     compactedAt: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodNumber>>;
 }, z$1.core.$strip>;
 type ContextUsage = z$1.infer<typeof ContextUsageSchema>;
+declare const AgentProfileSummarySchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    agent: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    statusDetail: z$1.ZodOptional<z$1.ZodString>;
+    checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+    createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    baseUrl: z$1.ZodOptional<z$1.ZodString>;
+    models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    keySource: z$1.ZodOptional<z$1.ZodString>;
+    keyRef: z$1.ZodOptional<z$1.ZodString>;
+    legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+type AgentProfileSummary = z$1.infer<typeof AgentProfileSummarySchema>;
+/** `daemonState.agentProfiles` — also the result of `agent-profile-list`. */
+declare const AgentProfilesStateSchema: z$1.ZodObject<{
+    daemonPid: z$1.ZodNumber;
+    updatedAt: z$1.ZodNumber;
+    accounts: z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfilesState = z$1.infer<typeof AgentProfilesStateSchema>;
+/**
+ * `metadata.agentProfile`, written by the wrapper with what it ACTUALLY runs on:
+ *   absent    — older wrapper (no capability): show nothing / 「本机登录」 guess
+ *   null      — machine login (本机登录)
+ *   { status: 'active' }      — running on this account
+ *   { status: 'unavailable' } — bound, but the account cannot be used
+ *       (reason: 'missing' | 'missing-secret' | 'expired' | 'invalid');
+ *       the wrapper refuses turns until the user re-logs in or switches
+ */
+declare const SessionAgentProfileSchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    reason: z$1.ZodOptional<z$1.ZodString>;
+    model: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type SessionAgentProfile = z$1.infer<typeof SessionAgentProfileSchema>;
+/**
+ * waiting-code → (submit) → exchanging → succeeded | failed.
+ * canceled / expired (10 min without a code) are terminal too.
+ */
+declare const AgentProfileLoginStatusSchema: z$1.ZodObject<{
+    loginId: z$1.ZodString;
+    state: z$1.ZodString;
+    url: z$1.ZodOptional<z$1.ZodString>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    account: z$1.ZodOptional<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    error: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfileLoginStatus = z$1.infer<typeof AgentProfileLoginStatusSchema>;
+type AgentProfileBindResult = {
+    /**
+     * false only with `rolledBack` — the restart failed while the session's
+     * wrapper kept running on the previous credential, so the previous binding
+     * was restored (never "bound to the new account, running the old one").
+     */
+    bound: boolean;
+    /** The new binding was undone (see `bound`); the session runs on its previous account. */
+    rolledBack?: true;
+    /**
+     * 'done'    — restarted in place on the new account
+     * 'skipped' — restart:false, or the session is not running here (applies on next start)
+     * 'pending' — still restarting after the 22 s budget (relay RPCs cap at 30 s); the Web
+     *             shows 「重启中」 and treats `metadata.agentProfile` turning into the new
+     *             account as done
+     * 'failed'  — the session is not running any more: binding kept, applies on next
+     *             start; or (`rolledBack`) it still runs: the previous binding is restored
+     */
+    restart: string;
+    error?: string;
+};
 
 declare const CLAUDE_AUTH_PROBE_VERSION: 1;
 type ClaudeAuthStatus = 'ok' | 'not-logged-in' | 'unknown' | 'error' | 'claude-missing';
@@ -596,6 +703,27 @@ declare const DaemonStateSchema: z$1.ZodObject<{
         }, z$1.core.$strip>;
         checkedAt: z$1.ZodNumber;
     }, z$1.core.$strip>>;
+    agentProfiles: z$1.ZodOptional<z$1.ZodObject<{
+        daemonPid: z$1.ZodNumber;
+        updatedAt: z$1.ZodNumber;
+        accounts: z$1.ZodArray<z$1.ZodObject<{
+            id: z$1.ZodString;
+            label: z$1.ZodString;
+            agent: z$1.ZodString;
+            kind: z$1.ZodString;
+            status: z$1.ZodString;
+            statusDetail: z$1.ZodOptional<z$1.ZodString>;
+            checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+            createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+            expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+            baseUrl: z$1.ZodOptional<z$1.ZodString>;
+            models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+            keySource: z$1.ZodOptional<z$1.ZodString>;
+            keyRef: z$1.ZodOptional<z$1.ZodString>;
+            legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+        }, z$1.core.$strip>>;
+        defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+    }, z$1.core.$strip>>;
     rateLimits: z$1.ZodOptional<z$1.ZodObject<{
         v: z$1.ZodLiteral<1>;
         updatedAt: z$1.ZodNumber;
@@ -750,6 +878,11 @@ type Metadata = {
      * null = nothing chosen yet; absent = older wrapper. See happy-wire runIntent.ts.
      */
     modelIntent?: string | null;
+    /**
+     * B-850a: the account this wrapper actually runs on (agentProfiles.ts).
+     * null = machine login; absent = wrapper without `agent-profile-v1`.
+     */
+    agentProfile?: SessionAgentProfile | null;
     effortIntent?: string | null;
     operatingModes?: Array<{
         code: string;
@@ -1645,6 +1778,11 @@ interface SpawnSessionOptions {
     agent?: SpawnAgent;
     environmentVariables?: Record<string, string>;
     token?: string;
+    /**
+     * B-850a: account for a new Claude session. undefined = the machine's
+     * default account (none = machine login); null = machine login.
+     */
+    agentProfileId?: string | null;
     /**
      * If set, the daemon spawns the agent with `--resume <id>` so the new
      * Happy session continues from an existing Claude conversation file.
@@ -1863,6 +2001,139 @@ declare class ModelConfigService {
     }): Promise<ModelConfigApplyResult>;
 }
 
+/**
+ * B-850a: remote Claude subscription login = `claude setup-token` in a pty on
+ * the machine. Its Ink UI only renders in a TTY (FEASIBILITY L2).
+ *
+ *   start  → spawn, wait for the authorize URL (the user picks the org there)
+ *   submit → write the pasted code + Enter; the PKCE verifier never leaves
+ *            this process, so the code alone cannot be redeemed elsewhere
+ *   done   → `sk-ant-oat01-…` appears in the output → caller stores it 0600
+ *
+ * The token is matched in the pty output and handed to `onToken`; it is never
+ * logged and never part of a status object.
+ */
+
+type PtyLike = {
+    onData: (cb: (data: string) => void) => void;
+    onExit: (cb: (e: {
+        exitCode: number;
+    }) => void) => void;
+    write: (data: string) => void;
+    kill: () => void;
+};
+type SpawnPty = (env: Record<string, string>) => PtyLike;
+
+type AccountKey = {
+    source: 'file';
+    path: string;
+} | {
+    source: 'env';
+    name: string;
+} | {
+    source: 'stored';
+};
+type AccountCheck = {
+    status: string;
+    at: number;
+    detail?: string;
+};
+type AccountRecord = {
+    label: string;
+    agent: 'claude';
+    kind: 'claude-subscription' | 'claude-api';
+    createdAt: number;
+    /** claude-api */
+    baseUrl?: string;
+    models?: string[];
+    /** B-794b: model id → real context window. */
+    contextWindows?: Record<string, number>;
+    /** claude-api: where the key lives. claude-subscription always uses the stored secret. */
+    key?: AccountKey;
+    /** claude-subscription: setup-token expiry (1 year after login). */
+    expiresAt?: number;
+    check?: AccountCheck;
+    /** Set on entries synthesized from providers.json — never written to accounts.json. */
+    legacy?: true;
+};
+
+/** `stillRunning`: the restart failed and the session's old wrapper is alive (on the old credential). */
+type RestartOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    notRunning?: boolean;
+    stillRunning?: boolean;
+    error: string;
+};
+type AccountServiceDeps = {
+    home: string;
+    env?: Record<string, string | undefined>;
+    now?: () => number;
+    daemonPid?: number;
+    spawnPty?: SpawnPty;
+    restartSession?: (sessionId: string) => Promise<RestartOutcome>;
+    /** Called after every write so the daemon can republish its state. */
+    onChanged?: () => void;
+    /** Test seam for the 1-token checks. */
+    check?: (record: AccountRecord, secret: string) => Promise<AccountCheck>;
+};
+declare class AccountService {
+    private readonly deps;
+    private readonly home;
+    private readonly env;
+    private readonly now;
+    private logins;
+    /** loginId → account to (re)write when its token arrives. */
+    private readonly loginTargets;
+    constructor(deps: AccountServiceDeps);
+    state(): AgentProfilesState;
+    private summary;
+    private changed;
+    private editable;
+    add(params: unknown): Promise<AgentProfileSummary>;
+    rename(accountId: unknown, label: unknown): AgentProfileSummary;
+    /**
+     * `force` with bound sessions: the credential is gone, so each of those
+     * sessions restarts in place right away and comes back `unavailable`
+     * (refusing turns, Q3) instead of running on the deleted credential until
+     * its next start. Restarts run in parallel within the bind budget; one
+     * still going reports 'pending'.
+     */
+    remove(accountId: unknown, force: unknown): Promise<{
+        removed: true;
+        sessions: string[];
+        restarts?: Record<string, string>;
+    }>;
+    /** 'done' | 'skipped' (not running here) | 'pending' (still going after the budget) | 'failed' */
+    private restartWithinBudget;
+    setDefault(agent: unknown, accountId: unknown): AgentProfilesState;
+    private readSecretFor;
+    test(accountId: unknown): Promise<AgentProfileSummary>;
+    private loginManager;
+    /** Also the terminal path (`very-happy account login`). */
+    storeSubscriptionToken(token: string, target: {
+        accountId?: string;
+        label?: string;
+    }): AgentProfileSummary;
+    loginStart(params: unknown): Promise<AgentProfileLoginStatus>;
+    private loginOp;
+    loginSubmit(params: unknown): AgentProfileLoginStatus;
+    loginStatus(loginId: unknown): AgentProfileLoginStatus;
+    loginCancel(loginId: unknown): AgentProfileLoginStatus;
+    dispose(): void;
+    /** Validates and writes a session binding (no restart). */
+    writeBinding(sessionId: string, accountId: string | null, model?: string): void;
+    bind(params: unknown): Promise<AgentProfileBindResult>;
+    /**
+     * Spawn-time choice → the account a NEW session starts on.
+     *   undefined → the machine default for this agent (none = machine login)
+     *   null      → machine login
+     *   id        → that account; must exist and be usable (Q3: never fall back)
+     */
+    resolveSpawnAccount(agent: string, requested: unknown): string | null;
+}
+
 /** Agent-specific visible-screen adapters. Unknown is deliberately not idle. */
 type CodingAgentKind = 'claude' | 'codex' | 'pi';
 
@@ -2001,6 +2272,8 @@ declare class ApiMachineClient {
     private cliUpdateState;
     private cliUpdatePushChain;
     private claudeAuthState;
+    /** B-850a: source of `daemonState.agentProfiles` (null = capability off). */
+    private agentProfileService;
     /** B-587: the machine's hibernation threshold, published as a capability. */
     private agentHibernationIdleMs;
     /** B-852: auto-restart setting + per-session status (null until the daemon installs it). */
@@ -2118,6 +2391,15 @@ declare class ApiMachineClient {
         }>;
         setStore: (store: 'auto' | 'file') => Promise<ClaudeAuthState>;
     }): void;
+    /**
+     * B-850a: `agent-profile-*` RPCs + `daemonState.agentProfiles` (spec
+     * 2026-11-session-accounts). Call before connect(): the connect snapshot
+     * carries the list, so its presence with `daemonPid === pid` IS the
+     * capability.
+     */
+    setAgentProfileService(service: AccountService): void;
+    /** B-850a: republish the account list (after an RPC / CLI edit / expiry tick). */
+    publishAgentProfiles(): Promise<void>;
     /** B-688 machine RPCs `model-config-*` (modules/modelConfig/modelConfigRpc.ts). */
     setModelConfigService(service: ModelConfigService): void;
     /**