very-happy-cli 0.2.191 → 0.2.193

package/dist/lib.d.cts

@@ -199,6 +199,134 @@ declare const sessionStreamFrameSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     t: z.ZodLiteral<"turn-end">;
 }, z.core.$strip>], "t">;
 type SessionStreamFrame = z.infer<typeof sessionStreamFrameSchema>;
+declare const AgentProfileSummarySchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    agent: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    statusDetail: z$1.ZodOptional<z$1.ZodString>;
+    checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+    createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    baseUrl: z$1.ZodOptional<z$1.ZodString>;
+    models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    keySource: z$1.ZodOptional<z$1.ZodString>;
+    keyRef: z$1.ZodOptional<z$1.ZodString>;
+    legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+    provider: z$1.ZodOptional<z$1.ZodString>;
+    email: z$1.ZodOptional<z$1.ZodString>;
+    planType: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfileSummary = z$1.infer<typeof AgentProfileSummarySchema>;
+/** `daemonState.agentProfiles` — also the result of `agent-profile-list`. */
+declare const AgentProfilesStateSchema: z$1.ZodObject<{
+    daemonPid: z$1.ZodNumber;
+    updatedAt: z$1.ZodNumber;
+    accounts: z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+        provider: z$1.ZodOptional<z$1.ZodString>;
+        email: z$1.ZodOptional<z$1.ZodString>;
+        planType: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>;
+    defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+    kinds: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    codexProviders: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodString;
+        name: z$1.ZodOptional<z$1.ZodString>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        envKey: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>>;
+    features: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+}, z$1.core.$strip>;
+type AgentProfilesState = z$1.infer<typeof AgentProfilesStateSchema>;
+/**
+ * `metadata.agentProfile`, written by the wrapper with what it ACTUALLY runs on:
+ *   absent    — older wrapper (no capability): show nothing / 「本机登录」 guess
+ *   null      — machine login (本机登录)
+ *   { status: 'active' }      — running on this account
+ *   { status: 'unavailable' } — bound, but the account cannot be used
+ *       (reason: 'missing' | 'missing-secret' | 'expired' | 'invalid');
+ *       the wrapper refuses turns until the user re-logs in or switches
+ */
+declare const SessionAgentProfileSchema: z$1.ZodObject<{
+    id: z$1.ZodString;
+    label: z$1.ZodString;
+    kind: z$1.ZodString;
+    status: z$1.ZodString;
+    reason: z$1.ZodOptional<z$1.ZodString>;
+    model: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type SessionAgentProfile = z$1.infer<typeof SessionAgentProfileSchema>;
+/**
+ * paste-code (Claude):  waiting-code → (submit) → exchanging → succeeded | failed.
+ * device-code (Codex):  waiting-code (the user enters `userCode` at `url`; nothing
+ *                       to submit) → succeeded | failed.
+ * canceled / expired (Claude 10 min without a code, Codex 15 min) are terminal too.
+ */
+declare const AgentProfileLoginStatusSchema: z$1.ZodObject<{
+    loginId: z$1.ZodString;
+    state: z$1.ZodString;
+    flow: z$1.ZodOptional<z$1.ZodString>;
+    userCode: z$1.ZodOptional<z$1.ZodString>;
+    url: z$1.ZodOptional<z$1.ZodString>;
+    expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+    account: z$1.ZodOptional<z$1.ZodObject<{
+        id: z$1.ZodString;
+        label: z$1.ZodString;
+        agent: z$1.ZodString;
+        kind: z$1.ZodString;
+        status: z$1.ZodString;
+        statusDetail: z$1.ZodOptional<z$1.ZodString>;
+        checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+        createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+        expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+        baseUrl: z$1.ZodOptional<z$1.ZodString>;
+        models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        keySource: z$1.ZodOptional<z$1.ZodString>;
+        keyRef: z$1.ZodOptional<z$1.ZodString>;
+        legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+        provider: z$1.ZodOptional<z$1.ZodString>;
+        email: z$1.ZodOptional<z$1.ZodString>;
+        planType: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>;
+    error: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type AgentProfileLoginStatus = z$1.infer<typeof AgentProfileLoginStatusSchema>;
+type AgentProfileBindResult = {
+    /**
+     * false only with `rolledBack` — the restart failed while the session's
+     * wrapper kept running on the previous credential, so the previous binding
+     * was restored (never "bound to the new account, running the old one").
+     */
+    bound: boolean;
+    /** The new binding was undone (see `bound`); the session runs on its previous account. */
+    rolledBack?: true;
+    /**
+     * 'done'    — restarted in place on the new account
+     * 'skipped' — restart:false, or the session is not running here (applies on next start)
+     * 'pending' — still restarting after the 22 s budget (relay RPCs cap at 30 s); the Web
+     *             shows 「重启中」 and treats `metadata.agentProfile` turning into the new
+     *             account as done
+     * 'failed'  — the session is not running any more: binding kept, applies on next
+     *             start; or (`rolledBack`) it still runs: the previous binding is restored
+     */
+    restart: string;
+    error?: string;
+};
 
 /**
  * Runtime context occupancy, never cumulative billing. null after compaction is unknown.
@@ -596,6 +724,38 @@ declare const DaemonStateSchema: z$1.ZodObject<{
         }, z$1.core.$strip>;
         checkedAt: z$1.ZodNumber;
     }, z$1.core.$strip>>;
+    agentProfiles: z$1.ZodOptional<z$1.ZodObject<{
+        daemonPid: z$1.ZodNumber;
+        updatedAt: z$1.ZodNumber;
+        accounts: z$1.ZodArray<z$1.ZodObject<{
+            id: z$1.ZodString;
+            label: z$1.ZodString;
+            agent: z$1.ZodString;
+            kind: z$1.ZodString;
+            status: z$1.ZodString;
+            statusDetail: z$1.ZodOptional<z$1.ZodString>;
+            checkedAt: z$1.ZodOptional<z$1.ZodNumber>;
+            createdAt: z$1.ZodOptional<z$1.ZodNumber>;
+            expiresAt: z$1.ZodOptional<z$1.ZodNumber>;
+            baseUrl: z$1.ZodOptional<z$1.ZodString>;
+            models: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+            keySource: z$1.ZodOptional<z$1.ZodString>;
+            keyRef: z$1.ZodOptional<z$1.ZodString>;
+            legacy: z$1.ZodOptional<z$1.ZodBoolean>;
+            provider: z$1.ZodOptional<z$1.ZodString>;
+            email: z$1.ZodOptional<z$1.ZodString>;
+            planType: z$1.ZodOptional<z$1.ZodString>;
+        }, z$1.core.$strip>>;
+        defaults: z$1.ZodRecord<z$1.ZodString, z$1.ZodString>;
+        kinds: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        codexProviders: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
+            id: z$1.ZodString;
+            name: z$1.ZodOptional<z$1.ZodString>;
+            baseUrl: z$1.ZodOptional<z$1.ZodString>;
+            envKey: z$1.ZodOptional<z$1.ZodString>;
+        }, z$1.core.$strip>>>;
+        features: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    }, z$1.core.$strip>>;
     rateLimits: z$1.ZodOptional<z$1.ZodObject<{
         v: z$1.ZodLiteral<1>;
         updatedAt: z$1.ZodNumber;
@@ -750,6 +910,11 @@ type Metadata = {
      * null = nothing chosen yet; absent = older wrapper. See happy-wire runIntent.ts.
      */
     modelIntent?: string | null;
+    /**
+     * B-850a: the account this wrapper actually runs on (agentProfiles.ts).
+     * null = machine login; absent = wrapper without `agent-profile-v1`.
+     */
+    agentProfile?: SessionAgentProfile | null;
     effortIntent?: string | null;
     operatingModes?: Array<{
         code: string;
@@ -1645,6 +1810,11 @@ interface SpawnSessionOptions {
     agent?: SpawnAgent;
     environmentVariables?: Record<string, string>;
     token?: string;
+    /**
+     * B-850a: account for a new Claude session. undefined = the machine's
+     * default account (none = machine login); null = machine login.
+     */
+    agentProfileId?: string | null;
     /**
      * If set, the daemon spawns the agent with `--resume <id>` so the new
      * Happy session continues from an existing Claude conversation file.
@@ -1863,6 +2033,179 @@ declare class ModelConfigService {
     }): Promise<ModelConfigApplyResult>;
 }
 
+/**
+ * B-850a: remote Claude subscription login = `claude setup-token` in a pty on
+ * the machine. Its Ink UI only renders in a TTY (FEASIBILITY L2).
+ *
+ *   start  → spawn, wait for the authorize URL (the user picks the org there)
+ *   submit → write the pasted code + Enter; the PKCE verifier never leaves
+ *            this process, so the code alone cannot be redeemed elsewhere
+ *   done   → `sk-ant-oat01-…` appears in the output → caller stores it 0600
+ *
+ * The token is matched in the pty output and handed to `onToken`; it is never
+ * logged and never part of a status object.
+ */
+
+type PtyLike = {
+    onData: (cb: (data: string) => void) => void;
+    onExit: (cb: (e: {
+        exitCode: number;
+    }) => void) => void;
+    write: (data: string) => void;
+    kill: () => void;
+};
+type SpawnPty = (env: Record<string, string>) => PtyLike;
+
+type AccountKey = {
+    source: 'file';
+    path: string;
+} | {
+    source: 'env';
+    name: string;
+} | {
+    source: 'stored';
+};
+type AccountCheck = {
+    status: string;
+    at: number;
+    detail?: string;
+};
+type AccountAgent = 'claude' | 'codex';
+type AccountKind = 'claude-subscription' | 'claude-api' | 'codex-chatgpt' | 'codex-provider';
+type AccountRecord = {
+    label: string;
+    agent: AccountAgent;
+    kind: AccountKind;
+    createdAt: number;
+    /** claude-api, codex-provider (overrides the config.toml provider's base_url) */
+    baseUrl?: string;
+    models?: string[];
+    /** B-794b: model id → real context window. */
+    contextWindows?: Record<string, number>;
+    /** API kinds: where the key lives. claude-subscription always uses the stored secret. */
+    key?: AccountKey;
+    /** codex-provider: the `[model_providers.<id>]` of ~/.codex/config.toml it is based on. */
+    provider?: string;
+    /** codex-provider with an own baseUrl: Codex wire API (default responses). */
+    wireApi?: 'responses' | 'chat';
+    /** codex-chatgpt: from `account/read` after sign-in. */
+    email?: string;
+    planType?: string;
+    /** claude-subscription: setup-token expiry (1 year after login). */
+    expiresAt?: number;
+    check?: AccountCheck;
+    /** Set on entries synthesized from providers.json — never written to accounts.json. */
+    legacy?: true;
+};
+
+type CodexRpc = {
+    request: (method: string, params: unknown, timeoutMs?: number) => Promise<any>;
+    onNotification: (cb: (method: string, params: any) => void) => void;
+    onExit: (cb: (code: number | null) => void) => void;
+    close: () => void;
+};
+type SpawnCodexRpc = (codexHome: string, env: Record<string, string>) => CodexRpc;
+
+/** `stillRunning`: the restart failed and the session's old wrapper is alive (on the old credential). */
+type RestartOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    notRunning?: boolean;
+    stillRunning?: boolean;
+    error: string;
+};
+type AccountServiceDeps = {
+    home: string;
+    env?: Record<string, string | undefined>;
+    now?: () => number;
+    daemonPid?: number;
+    spawnPty?: SpawnPty;
+    /** B-850b: `codex app-server` for ChatGPT sign-in / checks (test seam). */
+    spawnCodexRpc?: SpawnCodexRpc;
+    restartSession?: (sessionId: string) => Promise<RestartOutcome>;
+    /** Called after every write so the daemon can republish its state. */
+    onChanged?: () => void;
+    /** B-850b: the agent a session runs (from its tracked flavor); unknown → no check. */
+    sessionAgent?: (sessionId: string) => string | null | undefined;
+    /** Test seam for the 1-token checks. */
+    check?: (record: AccountRecord, secret: string) => Promise<AccountCheck>;
+};
+declare class AccountService {
+    private readonly deps;
+    private readonly home;
+    private readonly env;
+    private readonly now;
+    private logins;
+    private codexLogins;
+    /** loginId → account to (re)write when its token arrives. */
+    private readonly loginTargets;
+    constructor(deps: AccountServiceDeps);
+    state(): AgentProfilesState;
+    private summary;
+    private changed;
+    private editable;
+    add(params: unknown): Promise<AgentProfileSummary>;
+    rename(accountId: unknown, label: unknown): AgentProfileSummary;
+    /**
+     * `force` with bound sessions: the credential is gone, so each of those
+     * sessions restarts in place right away and comes back `unavailable`
+     * (refusing turns, Q3) instead of running on the deleted credential until
+     * its next start. Restarts run in parallel within the bind budget; one
+     * still going reports 'pending'.
+     */
+    remove(accountId: unknown, force: unknown): Promise<{
+        removed: true;
+        sessions: string[];
+        restarts?: Record<string, string>;
+    }>;
+    /** 'done' | 'skipped' (not running here) | 'pending' (still going after the budget) | 'failed' */
+    private restartWithinBudget;
+    setDefault(agent: unknown, accountId: unknown): AgentProfilesState;
+    private readSecretFor;
+    test(accountId: unknown): Promise<AgentProfileSummary>;
+    private checkCodexProvider;
+    private loginManager;
+    /** Also the terminal path (`very-happy account login`). */
+    storeSubscriptionToken(token: string, target: {
+        accountId?: string;
+        label?: string;
+    }): AgentProfileSummary;
+    loginStart(params: unknown): Promise<AgentProfileLoginStatus>;
+    private codexLoginManager;
+    /** loginId → the account a Codex sign-in writes. */
+    private readonly codexLoginTargets;
+    private codexLoginStart;
+    /** A finished ChatGPT sign-in → the account record (new) or its refreshed status (re-login). */
+    storeChatgptAccount(target: {
+        accountId: string;
+        label?: string;
+        isNew: boolean;
+    }, info: {
+        email?: string;
+        planType?: string;
+    }): AgentProfileSummary;
+    private loginOp;
+    loginSubmit(params: unknown): AgentProfileLoginStatus;
+    loginStatus(loginId: unknown): AgentProfileLoginStatus;
+    loginCancel(loginId: unknown): AgentProfileLoginStatus;
+    dispose(): void;
+    /** B-850d2: waits until finished Codex sign-ins are cleaned up (their app-server gone, a canceled new account's overlay removed). */
+    settleLogins(): Promise<void>;
+    /** Validates and writes a session binding (no restart). */
+    writeBinding(sessionId: string, accountId: string | null, model?: string): void;
+    bind(params: unknown): Promise<AgentProfileBindResult>;
+    /** B-850d: the account a session is bound to (null = machine login, also when unbound). */
+    sessionAccount(sessionId: string): string | null;
+    /**
+     * Spawn-time choice → the account a NEW session starts on.
+     *   undefined → the machine default for this agent (none = machine login)
+     *   null      → machine login
+     *   id        → that account; must exist and be usable (Q3: never fall back)
+     */
+    resolveSpawnAccount(agent: string, requested: unknown): string | null;
+}
+
 /** Agent-specific visible-screen adapters. Unknown is deliberately not idle. */
 type CodingAgentKind = 'claude' | 'codex' | 'pi';
 
@@ -2001,6 +2344,8 @@ declare class ApiMachineClient {
     private cliUpdateState;
     private cliUpdatePushChain;
     private claudeAuthState;
+    /** B-850a: source of `daemonState.agentProfiles` (null = capability off). */
+    private agentProfileService;
     /** B-587: the machine's hibernation threshold, published as a capability. */
     private agentHibernationIdleMs;
     /** B-852: auto-restart setting + per-session status (null until the daemon installs it). */
@@ -2118,6 +2463,15 @@ declare class ApiMachineClient {
         }>;
         setStore: (store: 'auto' | 'file') => Promise<ClaudeAuthState>;
     }): void;
+    /**
+     * B-850a: `agent-profile-*` RPCs + `daemonState.agentProfiles` (spec
+     * 2026-11-session-accounts). Call before connect(): the connect snapshot
+     * carries the list, so its presence with `daemonPid === pid` IS the
+     * capability.
+     */
+    setAgentProfileService(service: AccountService): void;
+    /** B-850a: republish the account list (after an RPC / CLI edit / expiry tick). */
+    publishAgentProfiles(): Promise<void>;
     /** B-688 machine RPCs `model-config-*` (modules/modelConfig/modelConfigRpc.ts). */
     setModelConfigService(service: ModelConfigService): void;
     /**