Provider accounts

Read saved provider accounts, selection and last login-file status. Use recheck to incorporate the current file identity.

Read account display metadata, selection and revision without homes, identity keys, fingerprints or tokens.

Start the existing registration flow in a temporary login home and return its session. After human login, verify and complete; selection is unchanged.

Open registration again for the account's provider. Matching authenticated identity refreshes the existing vault.

Read the current provider-login attempt and CLI ownership. Use its session for the human authentication interaction.

Verify the identity of the CLI-owned login attempt with the existing verifier.

Complete a verified login using existing capture, duplicate-identity merge and registration rules. Use switch to change the active login.

Cancel a CLI-owned attempt, confirm session termination, then clean its temporary home and provisional vault.

Open an allowed isolated-login provider link in the default browser using the existing one-time rules.

Recheck the login file/CLI state and incorporate it into the current-account cache without overwriting unreadable credentials.

Capture the target revision, live census and exact Codex restart ticket. Review the result and apply its previewId within five minutes.

Apply the reviewed preview once using existing credential recovery, locks, CAS, session restart and notifications.

Observe a switch result and phase, especially after a lost response, before attempting another switch.

Discard an unapplied preview and its Codex restart ticket. An already-started switch continues.

Remove the observed account and its owned vault using existing deletion rules. The current account cannot be removed.