v2.31.0
operator (human/email) session
Adds the operator noun to the CLI + SDK: the human / email principal, distinct from the agent (your wallet / SIWX). One browser sign-in spans every wallet that verified your email, so the overview is a cross-wallet union.
CLI
run402 operator login- browser-delegated sign-in (device-authorization, RFC 8628, theaws sso loginmodel). Magic-link or passkey in the browser; the CLI never does WebAuthn.run402 operator overview- account view across ALL wallets controlling your email.run402 operator whoami- show the cached session (email, wallets, expiry); local, no network.run402 operator logout- revoke the session server-side + clear the local cache.
The wallet's own account view stays run402 status (there is no operator status).
SDK
- New
r.operatornamespace:deviceStart(),devicePoll(),overview({ token }),revoke({ token }).
Notes
operator whoamiworks today.login/overview/logoutrequire the gateway device-authorization bridge (rolling out) and return a gateway error until it ships.- Not exposed as MCP tools by design - MCP authenticates as the agent (wallet); the human session must not be handed to it.
Lockstep release: run402-mcp, run402, @run402/sdk @ 2.31.0.