Pass a wait for a person's new login with the wait carried, and keep the pass of a module healthy beside a failure (hq ADR 0254, issue 318)

internal/link/protocol.go

@@ -441,6 +441,15 @@ type Health struct {
 // file it writes, a service whose lifecycle is the machine's — said unhealthy while it stays failed.
 const KindUnit = "unit"
 
+// KindAccount is an account a module puts in a group (novox/hq ADR 0252): healthy when the account's running
+// session has every group the module declares, or nobody is logged in; unhealthy otherwise, its reason
+// starting ReasonRelogin when only a new login is missing.
+const KindAccount = "account"
+
+// ReasonRelogin starts the reason of an account whose running session began before it was put in a group
+// (ADR 0252): the build did what it should, and a person has one step left (novox/hq ADR 0254).
+const ReasonRelogin = "relogin needed"
+
 // The states of a machine's service managers (issue 315).
 const (
 	UnitsRunning  = "running"
@@ -529,6 +538,10 @@ type ResourceHealth struct {
 	// alone; Needs is the provision the check exercises (to-be 48 §6).
 	Check string `json:"check,omitempty"`
 	Needs string `json:"needs,omitempty"`
+	// Account is the account whose own service manager runs it, for a unit or service in an account's
+	// manager, and the account itself for a resource of kind KindAccount (novox/hq ADR 0254). Empty from an
+	// engine older than that, and for anything the machine's own manager or runtime runs.
+	Account string `json:"account,omitempty"`
 }
 
 // HealthSaid is the health event's body: the machine and its statement. The machine is read from the