[BunsDev]

Summary

Settings → Coding CLIs → Claude Code now manages several Claude accounts inside Modex. Every turn still runs through the installed claude CLI; Modex only chooses the environment that child starts with. There is no proxy and no API mode.

• Profiles. Each profile is its own Claude Code configuration directory (CLAUDE_CONFIG_DIR, owner-only, under app/claude-profiles/). Sign in runs claude auth login there and confirms it with claude auth status. Modex never reads a token.
• OrcaRouter keys. sk-orca-… keys are stored with OS encryption in secrets.json and never cross IPC again. A gateway turn gets ANTHROPIC_BASE_URL=https://api.orcarouter.ai, ANTHROPIC_AUTH_TOKEN and an optional model. Inherited ANTHROPIC_API_KEY is removed. CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1 keeps the key out of the model's shell commands. The key is redacted from failures.
• Binding. A Claude thread binds to the account its first turn ran on (Thread.claudeAccount), mirroring Codex. Approval bindings compare the account for the thread's current backend.
• Rotation (opt-in). A usage-limited account sits out until the reset time Claude Code printed, or one hour. New conversations move to the next account. A turn that had not started work retries once, only where the session can follow: a new conversation, or between the CLI login and gateways, which share ~/.claude.

OmniRouter (omnilabs-ai/OmniRouter) was evaluated and not integrated. It is a pre-alpha model-swap evidence layer with no account switching. Details are in docs/claude-accounts.md.

Destination approval and acceptance

Choosing an OrcaRouter account sends that conversation's prompts, files and tool results to OrcaRouter through the claude child. Signed commit 6a959580405356880cacdf819f10ee3a2fae9e22 records Val's 2026-11-01 approval of that destination in AGENTS.md. Live acceptance with a second Claude subscription, a real usage-limit message and an OrcaRouter turn remains unrun.

Review repairs

#469 merged into this branch as 82fe8fdc22c0fa5666e7f04fdc0a904e9ecb8c84. It isolates inherited profile credentials, redacts gateway transcript output before journal/IPC delivery, denies secret-bearing approval actions, and cools down the second limited account without a third retry. The merge tree matches the reviewed repair exactly and its signature is verified. Local build and full tests passed with 2,298 passes and 26 skips; the focused account Electron E2E passed. Hosted macOS unit/E2E, iPhone, Linux and Windows checks all passed. First failures and validation boundaries are retained in docs/reviews/2026-11-01-claude-pool-repair.md.

#471 reconciled the documentation conflict with main and merged as 17c83be15c11200c0f4b1849e1923309e32a90ce. Its signed merge tree exactly matches the reviewed candidate. Hosted validation passed with 482 desktop E2E passes, 4 skips and 7 site passes; its cold-open median was 288.4 ms against the unchanged 500 ms limit. The current feature head still requires its own checks and protected queue validation before main. The original feature validation below is retained as historical evidence.

Test plan

• pnpm --filter @modex/desktop test: 2,106 passed, 20 skipped, 0 failed, including 13 new tests in test/claude-accounts.test.ts
• pnpm --filter @modex/store-desktop test: 16 passed
• Full desktop playwright test: 479 passed, 7 skipped, 0 failed, including the new e2e/claude-accounts.spec.ts (synthetic claude, real IPC and UI)
• Live acceptance: a real second Claude subscription, a real usage-limit message, and a real OrcaRouter turn. None of these have been run.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
modex	Ready	Preview	Nov 1, 2026 7:08pm UTC

[github-code-quality]

Code coverage overview

Languages: TypeScript

TypeScript / code-coverage-agent

main 66d0031	claude-accounts eff9cb9	+/-
66%	66%	0%

View coverage of the 10 most impacted files.

File	main 66d0031	claude-accounts eff9cb9	+/-
apps/desktop/sr...ngine/runner.ts	98%	98%	0%
apps/store-desk...rc/main/demo.ts	95%	95%	0%
apps/desktop/sr...kends/claude.ts	98%	98%	0%
apps/desktop/sr...claude-login.ts	100%	100%	0%
apps/desktop/sr...gine/secrets.ts	100%	100%	0%
apps/desktop/sr...udeAccounts.tsx	0%	0%	0%
apps/desktop/sr...ain/commands.ts	87%	88%	+1%
apps/desktop/sr...count-claude.ts	0%	87%	+87%
apps/desktop/sr...-secret-sink.ts	0%	95%	+95%
apps/desktop/sr...ude-accounts.ts	0%	99%	+99%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.

---

_{Updated November 01, 2026 19:43 UTC}