Skip to content

v2.31.0

Choose a tag to compare

@github-actions github-actions released this 02 Jun 17:25
· 69 commits to main since this release

operator (human/email) session

Adds the operator noun to the CLI + SDK: the human / email principal, distinct from the agent (your wallet / SIWX). One browser sign-in spans every wallet that verified your email, so the overview is a cross-wallet union.

CLI

  • run402 operator login - browser-delegated sign-in (device-authorization, RFC 8628, the aws sso login model). Magic-link or passkey in the browser; the CLI never does WebAuthn.
  • run402 operator overview - account view across ALL wallets controlling your email.
  • run402 operator whoami - show the cached session (email, wallets, expiry); local, no network.
  • run402 operator logout - revoke the session server-side + clear the local cache.

The wallet's own account view stays run402 status (there is no operator status).

SDK

  • New r.operator namespace: deviceStart(), devicePoll(), overview({ token }), revoke({ token }).

Notes

  • operator whoami works today. login / overview / logout require the gateway device-authorization bridge (rolling out) and return a gateway error until it ships.
  • Not exposed as MCP tools by design - MCP authenticates as the agent (wallet); the human session must not be handed to it.

Lockstep release: run402-mcp, run402, @run402/sdk @ 2.31.0.