@event4u/agent-switch 2.2.0 → 2.3.1

package/dist/index.js

@@ -15,7 +15,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import * as readline from "node:readline";
 import { spawn, spawnSync } from "node:child_process";
-import { HOME, browserDir, configDir, die, ensureRoot, identity, listAllProfiles, listProfiles, migrateLegacyLayout, profileDir, profileExists, readJson, requireProfile, activeFor, setActive, labelFor, setLabel, clearLabel, colorOf, isDisabled, setDisabled, setColor, isProfileColor, PROFILE_COLORS, renameProfile, isProfileLabel, PROFILE_LABELS, readAutoSwitch, readAutoSwitchAll, setAutoSwitch, readOsNotifications, setOsNotifications, readProviders, setProviderSurface, readBinaryPath, readGuard, setGuard, readBinaryPaths, setBinaryPath, ROOT, resetRebindKillSwitch, } from "./profiles.js";
+import { HOME, browserDir, configDir, die, ensureRoot, identity, listAllProfiles, listProfiles, migrateLegacyLayout, profileDir, profileExists, readJson, requireProfile, activeFor, setActive, labelFor, setLabel, clearLabel, colorOf, isDisabled, setSharesDefaultLogin, sharesDefaultLogin, setDisabled, setColor, isProfileColor, PROFILE_COLORS, renameProfile, isProfileLabel, PROFILE_LABELS, readAutoSwitch, readAutoSwitchAll, setAutoSwitch, readOsNotifications, setOsNotifications, readProviders, setProviderSurface, readBinaryPath, readGuard, setGuard, readBinaryPaths, setBinaryPath, ROOT, resetRebindKillSwitch, } from "./profiles.js";
 import { browserWrapperScript, defaultBrowserDeps, listBrowsers, locateBrowser } from "./browsers.js";
 import { PROVIDER_IDS, provider, isProviderInstalled, resolveBinary } from "./providers.js";
 import { borrowerOf, discardBinding, readBinding, rebind, releaseBorrowedAccount, restoreRebind } from "./rebind.js";
@@ -33,22 +33,22 @@ import { readGuiSettings, writeGuiSettings, applyGuiSetting } from "./gui-settin
 import { readProtection, setProtection, renameProtection, forgetProtection } from "./protection.js";
 import { POOL_PREFIX, addPoolMember, createPool, deletePool, findPool, isPoolRef, parseMember, poolIdOf, readPools, removePoolMember, renamePool, renamePoolMember, suggestPoolsFromLabels, } from "./pools.js";
 import { resolveForDir } from "./dir-resolve.js";
-import { antigravityAuthStatus, claudeAuthStatus, claudeCredentialFile, codexAuthStatus, fileMtimeMs, readText, } from "./auth-status.js";
+import { antigravityAuthStatus, claudeAuthStatus, claudeCredentialFile, codexAuthStatus, fileMtimeMs, readText, keptFreshByFor, } from "./auth-status.js";
 import { TOOL_IDS, checkTooling, formatToolNotes, formatToolingLines, runToolAction, toolNotesRefusal, toolReleaseRepo, } from "./tooling.js";
 import { releaseNoteBlocks } from "./release-notes.js";
-import { readHistory, recordHistorySample } from "./history.js";
+import { LATEST_FILE, readHistory, readLatestSnapshot, recordHistorySample, writeLatestSnapshot } from "./history.js";
 import { launchGui } from "./gui-launch.js";
 import { GUARD_POLICIES, GUARD_REFUSED_EXIT, OVERRIDE_ENV, guardVerdict, inspectLoad, isGuardPolicy, overrideFromEnv, renderGuardMessage, } from "./single-load.js";
 import { checkForUpdate, fetchReleases, releasesNewerThan, selfUpdate } from "./updates.js";
 import { mappingRows, pruneMappings, removeMapping, resolveMapping, setMapping, setPaused, normalizePath, } from "./mappings.js";
 import { checkAuth, fetchProfile, fetchUsage, liveSessionPids, } from "./api.js";
-import { defaultFreshenDeps, freshAccessToken } from "./token-freshen.js";
+import { defaultFreshenDeps, usageToken } from "./token-freshen.js";
 import { formatSnapshot, parseUsage } from "./usage.js";
 import { readCodexUsage } from "./codex-usage.js";
 import { redeemResetCredit } from "./codex-reset.js";
 import { assertValidSessionId, cleanupForkVehicle, codexSessionCommand, deleteSession, detectRunningClaudeProfile, listSessions, listCodexSessions, locateSession, locateCodexSession, markLive, openQuestion, restoreSession, sharedHistory, sweepTrash, transferSession, transferCodexSession, trashedSessionExists, } from "./sessions.js";
 import { isFresh, readDaemonState, readPid, PIDFILE, processAlive } from "./daemon.js";
-import { cmdService, serviceInstall, serviceTarget, serviceUninstall } from "./service.js";
+import { cmdService, serviceAfterUpdate, serviceInstall, serviceInstallFromDisk, serviceTarget, serviceUninstall } from "./service.js";
 import { fileURLToPath } from "node:url";
 import { readContext, turnInFlight } from "./telemetry.js";
 import { readPreview } from "./session-preview.js";
@@ -56,6 +56,8 @@ import { installHooks, uninstallHooks, hooksInstalled, readSettings, appendEvent
 import { readTelemetryConfig, writeTelemetryConfig } from "./notify.js";
 import { appendNotification, readNotifications, clearNotifications } from "./notifications.js";
 import { APPS, buildLaunch, findApp, guiDataDir, isInstalled } from "./apps.js";
+import { copyDesktopSettings, DEFAULT_DATA_DIR, hasSettingsLayout } from "./desktop-settings.js";
+import { createLauncher, findRunning, focusRunning, readLaunchers, removeAllLaunchers, removeLauncher, removeLaunchersFor, renameLaunchersFor, repairLaunchers, } from "./launchers.js";
 import { scanDesktop } from "./desktop-sessions.js";
 import { ensureAgyKeychain } from "./agy-keychain.js";
 import { currentManagedSession, currentTmuxSessionName, newSessionArgs, readTmuxRegistry, recordManagedSession, respawnPaneArgs, sendKeysArgs, tmuxAvailable, tmuxSessionName, } from "./tmux.js";
@@ -231,6 +233,9 @@ function cmdLogin(providerId, name, browserId) {
         console.error(`${providerId}/${n} is still not signed in (${after.detail})${code !== 0 ? ` — ${p.binary} exited with ${code}` : ""}.`);
         process.exit(1);
     }
+    // Its own sign-in ends the lineage it shared with the default install.
+    if (sharesDefaultLogin(providerId, n))
+        setSharesDefaultLogin(providerId, n, false);
     const id = identity(providerId, n);
     console.log(`${providerId}/${n} is signed in${id ? ` as ${id}` : ""}.`);
 }
@@ -262,6 +267,8 @@ async function importClaude(name) {
             fs.writeFileSync(path.join(dst, ".credentials.json"), creds, { mode: 0o600 });
         return creds !== null;
     }));
+    if (seeded)
+        setSharesDefaultLogin("claude", name, true);
     console.log(`Imported default Claude setup into profile "${name}".`);
     console.log(seeded
         ? "Credentials were seeded — no re-login needed. Claude Code migrates the seed into\n" +
@@ -289,6 +296,8 @@ function importFileProvider(p, name) {
         if (path.join(srcDir, file) === p.credentialPath(srcDir))
             seeded = true;
     }
+    if (seeded)
+        setSharesDefaultLogin(p.id, name, true);
     console.log(`Imported default ${p.binary} setup into profile "${name}".`);
     console.log(seeded
         ? `Credential seeded — no re-login needed.\nIMPORTANT: this profile shares one OAuth ` +
@@ -455,7 +464,7 @@ async function claudeSnapshot(name) {
         if (cached)
             return cached;
     }
-    const token = freshAccessToken(configDir("claude", name), defaultFreshenDeps(readBinaryPath("claude")));
+    const token = usageToken(configDir("claude", name), defaultFreshenDeps(readBinaryPath("claude")), sharesDefaultLogin("claude", name));
     if (!token)
         return null;
     const raw = await fetchUsage(token);
@@ -481,8 +490,11 @@ async function cmdStatus(providerId, name, json = false) {
         // every displayed profile on each refresh, so recording the fresh snapshot
         // here (throttled to ~hourly) fills the chart for all profiles without
         // depending on the background daemon or an "active" profile being set.
-        if (usage)
+        if (usage) {
             recordHistorySample(path.join(profileDir(pid, active), "usage-history.json"), usage);
+            // Unthrottled: `dir` balances on usage only while it is minutes old.
+            writeLatestSnapshot(path.join(profileDir(pid, active), LATEST_FILE), usage);
+        }
         const wc = worstLiveContext(pid, active);
         const context = wc
             ? { sessionId: wc.sessionId, pct: wc.pct, contextTokens: wc.contextTokens, windowTokens: wc.windowTokens, model: wc.model, confidence: wc.confidence }
@@ -516,7 +528,7 @@ async function cmdStatus(providerId, name, json = false) {
             console.log("  (no usage readout for this provider — shows own usage only where available)");
             continue;
         }
-        const token = freshAccessToken(configDir("claude", n), defaultFreshenDeps(readBinaryPath("claude")));
+        const token = usageToken(configDir("claude", n), defaultFreshenDeps(readBinaryPath("claude")), sharesDefaultLogin("claude", n));
         if (!token) {
             const auth = authStatusFor("claude", n);
             console.log(auth.state === "sign-in-needed"
@@ -546,6 +558,12 @@ async function cmdStatus(providerId, name, json = false) {
 /** Cached usage for one profile: the daemon's snapshot or the newest history
  *  sample, whichever is newer. Local reads only — `dir` runs on every start. */
 function cachedUsage(providerId, name) {
+    const fromDaemonOrHistory = cachedUsageFromDaemonOrHistory(providerId, name);
+    // The app's own reads land here unthrottled; take whichever source is newest.
+    const latest = readLatestSnapshot(path.join(profileDir(providerId, name), LATEST_FILE));
+    return latest && (fromDaemonOrHistory.capturedMs === null || latest.capturedMs > fromDaemonOrHistory.capturedMs) ? latest : fromDaemonOrHistory;
+}
+function cachedUsageFromDaemonOrHistory(providerId, name) {
     const daemonSnap = readDaemonState()?.profiles?.[`${providerId}/${name}`] ?? null;
     const daemonMs = daemonSnap ? Date.parse(daemonSnap.capturedAt) : NaN;
     const hist = readHistory(path.join(profileDir(providerId, name), "usage-history.json"));
@@ -581,6 +599,7 @@ function resolveDir(providerId, plain = false) {
         exists: (n) => profileExistsSafe(providerId, n),
         signedIn: (n) => identity(providerId, n) !== null,
         disabled: (n) => isDisabled(providerId, n),
+        sharesDefaultLogin: (n) => profileExistsSafe(providerId, n) && sharesDefaultLogin(providerId, n),
         pool: (id) => findPool(id),
         usage: (n) => cachedUsage(providerId, n),
         // Only providers that write a live-session signal can report one; the
@@ -605,9 +624,22 @@ function resolveDir(providerId, plain = false) {
 function cmdDir(providerId, guarded = false, json = false, plain = false) {
     const r = resolveDir(providerId, plain);
     if (json) {
-        console.log(JSON.stringify({ profile: r.name ? `${providerId}/${r.name}` : null, configDir: r.name ? configDir(providerId, r.name) : null, why: r.why }, null, 2));
+        console.log(JSON.stringify({
+            profile: r.name ? `${providerId}/${r.name}` : null,
+            configDir: r.name ? configDir(providerId, r.name) : null,
+            why: r.why,
+            ...(r.blocked ? { blocked: r.blocked } : {}),
+        }, null, 2));
+        if (r.blocked)
+            process.exit(GUARD_REFUSED_EXIT);
         return;
     }
+    // A folder rule that cannot be served refuses — starting on an account
+    // outside the rule is the one outcome the rule exists to prevent.
+    if (r.blocked) {
+        console.error(`agent-switch: not starting here — ${r.blocked}.`);
+        process.exit(GUARD_REFUSED_EXIT);
+    }
     const name = r.name;
     if (!name)
         return;
@@ -1632,6 +1664,7 @@ async function cmdRemove(providerId, name, force = false, yes = false) {
     }
     const droppedRebind = binding ? discardBinding(n) : false;
     const removedEntry = providerId === "claude" ? credentials.removeEntry(configDir(providerId, n)) : false;
+    removeLaunchersFor(providerId, n); // they would start a profile that no longer exists
     fs.rmSync(profileDir(providerId, n), { recursive: true, force: true });
     if (activeFor(providerId) === n)
         setActive(providerId, null);
@@ -1671,6 +1704,15 @@ function cmdLabel(providerId, name, label) {
 }
 /** Disable keeps a profile (login, history, settings) but takes it out of every
  *  pick: no active slot, no pool or folder rule, no background polling. */
+/** `mark-shared <name> [--off]`: mark (or unmark) a profile as sharing the
+ *  default install's login — for imports made before `import` set the mark. */
+function cmdMarkShared(providerId, name, off) {
+    const n = requireProfile(providerId, name, "mark-shared");
+    setSharesDefaultLogin(providerId, n, !off);
+    console.log(off
+        ? `${providerId}/${n} no longer counts as sharing the default install's login.`
+        : `${providerId}/${n} now counts as sharing the default install's login: agent-switch never refreshes it and never starts it by balancing. \`agent-switch login ${n}\` gives it its own login.`);
+}
 function cmdDisable(providerId, name, disabled) {
     const n = requireProfile(providerId, name, disabled ? "disable" : "enable");
     const wasActive = activeFor(providerId) === n;
@@ -1749,6 +1791,7 @@ function cmdRename(providerId, from, to) {
     }
     renameProtection(providerId, n, to);
     renamePoolMember(`${providerId}/${n}`, `${providerId}/${to}`);
+    renameLaunchersFor(providerId, n, to);
     console.log(`Renamed ${providerId} profile "${n}" → "${to}".`);
 }
 /** Manually redeem one banked rate-limit reset for a Codex profile. Consumes a
@@ -1890,6 +1933,7 @@ function cmdUninstall(flags = {}) {
         console.log(`  - ${allProfiles.length} profile(s) and their configs under ${ROOT}`);
         console.log(`  - ${claudeProfiles.length} Claude keychain credential entr(y/ies) (macOS)`);
         console.log("  - directory mappings, active-profile state, and the background daemon/service");
+        console.log("  - app launchers it created in ~/Applications/Agent Switch");
         console.log("It does NOT touch your default claude/codex/antigravity installs.");
         console.log("\nRe-run with --force to proceed:  agent-switch uninstall --force");
         return;
@@ -1916,8 +1960,12 @@ function cmdUninstall(flags = {}) {
         if (credentials.removeEntry(configDir("claude", n)))
             removedEntries++;
     }
+    // Launchers live in ~/Applications, outside ROOT, and are listed in its manifest.
+    const removedLaunchers = removeAllLaunchers();
     fs.rmSync(ROOT, { recursive: true, force: true });
     console.log(`Removed ${allProfiles.length} profile(s) and all agent-switch data under ${ROOT}.`);
+    if (removedLaunchers > 0)
+        console.log(`Removed ${removedLaunchers} app launcher(s) from ~/Applications/Agent Switch.`);
     if (removedEntries > 0)
         console.log(`Removed ${removedEntries} Claude keychain entr(y/ies).`);
     console.log("Follow-ups (manual, if you set them up):");
@@ -1964,6 +2012,7 @@ function cmdApps(json = false) {
             provider: a.provider,
             strategy: a.strategy,
             installed: isInstalled(a),
+            copiesSettings: hasSettingsLayout(a.id),
         }));
         console.log(JSON.stringify(rows, null, 2));
         return;
@@ -2009,8 +2058,11 @@ function cmdOsNotify(sub, json = false) {
     const enabled = readOsNotifications();
     if (json)
         console.log(JSON.stringify({ enabled }));
-    else
+    else {
         console.log(`Daemon OS notifications ${enabled ? "ON" : "OFF"}.`);
+        if (enabled && process.platform === "darwin")
+            console.log("On macOS the daemon shows none itself — the Agent Switch app shows them while it runs.");
+    }
 }
 /** `agent-switch notifications [clear] [--json]` — list the recent
  *  notifications (newest first) or clear the log. */
@@ -2083,8 +2135,34 @@ async function cmdUpdate() {
         console.log(`Update check failed (${c.message}); attempting \`npm install\` anyway…`);
     const code = selfUpdate();
     logActivity("update", null, code === 0 ? "self-update installed" : `self-update failed (exit ${code})`, "user ran `agent-switch update`", code === 0);
+    if (code === 0)
+        await serviceAfterSelfUpdate();
     process.exit(code);
 }
+/** Keeps the usage service on the version just installed. Without it the
+ *  balanced start has no fresh usage to weigh. */
+async function serviceAfterSelfUpdate() {
+    switch (serviceAfterUpdate(serviceTarget(), !!process.stdin.isTTY)) {
+        case "reinstall":
+            console.log("Restarting the background service on the new version…");
+            if (serviceInstallFromDisk() !== 0)
+                console.error("Couldn't restart the service — run `agent-switch service install`.");
+            return;
+        case "ask":
+            if (await confirmAction("Install the background service that keeps usage fresh (starts at login)?", false)) {
+                if (serviceInstallFromDisk() !== 0)
+                    console.error("Couldn't install the service — run `agent-switch service install`.");
+            }
+            else
+                console.log("Skipped. Install it any time with `agent-switch service install`.");
+            return;
+        case "hint":
+            console.log("Tip: `agent-switch service install` keeps usage fresh so starts can be balanced.");
+            return;
+        case "leave":
+            console.log("The background service runs another agent-switch build — left as it is.");
+    }
+}
 function cmdOpen(appId, name) {
     if (!appId)
         die("usage: agent-switch open <app> [profile]   (see `agent-switch apps`)");
@@ -2099,6 +2177,12 @@ function cmdOpen(appId, name) {
     requireProfile(app.provider, n, "open");
     if (!isInstalled(app))
         die(`${app.displayName} is not installed.`);
+    // A second launch on the same data dir would only hit the app's single-instance
+    // lock — bring the window that profile already has to the front instead.
+    if (app.strategy !== "env" && focusRunning(guiDataDir(app, n))) {
+        console.log(`${app.displayName} on ${app.provider}/${n} is already open — brought it to the front.`);
+        return;
+    }
     let firstLaunch = false;
     if (app.strategy === "user-data-dir") {
         const dir = guiDataDir(app, n);
@@ -2113,6 +2197,95 @@ function cmdOpen(appId, name) {
         console.log("is saved to this profile. Quit other windows of this app before signing in.");
     }
 }
+/** `agent-switch launcher add|remove <app> <profile>` · `list [--json]` · `repair`. */
+function cmdLauncher(sub, args, flags) {
+    const target = (verb) => {
+        const app = findApp(args[0] ?? "");
+        if (!app)
+            die(`usage: agent-switch launcher ${verb} <app> <profile>   (see \`agent-switch apps\`)`);
+        const n = requireProfile(app.provider, args[1], `launcher ${verb}`);
+        return { app, n };
+    };
+    switch (sub) {
+        case "add": {
+            const { app, n } = target("add");
+            try {
+                const e = createLauncher(app, n);
+                logActivity("launcher", `${app.provider}/${n}`, `created ${app.displayName} launcher`, "user ran `agent-switch launcher add`");
+                console.log(`Created ${e.path}`);
+                console.log("Start it from Spotlight or drag it into the Dock. It opens the app on this account only.");
+            }
+            catch (err) {
+                die(err instanceof Error ? err.message : String(err));
+            }
+            return;
+        }
+        case "remove":
+        case "rm": {
+            const { app, n } = target("remove");
+            if (!removeLauncher(app.id, n))
+                die(`no ${app.displayName} launcher for ${app.provider}/${n}.`);
+            logActivity("launcher", `${app.provider}/${n}`, `removed ${app.displayName} launcher`, "user ran `agent-switch launcher remove`");
+            console.log(`Removed the ${app.displayName} launcher for ${app.provider}/${n}.`);
+            return;
+        }
+        case "repair": {
+            const r = repairLaunchers();
+            for (const e of r.rebuilt)
+                console.log(`Rebuilt ${e.path}`);
+            for (const f of r.failed)
+                console.error(`Couldn't rebuild ${f.entry.path}: ${f.reason}`);
+            if (!r.rebuilt.length && !r.failed.length)
+                console.log("No launchers to repair.");
+            if (r.failed.length)
+                process.exit(1);
+            return;
+        }
+        case "list":
+        case undefined: {
+            const rows = readLaunchers().map((e) => ({ ...e, exists: fs.existsSync(e.path) }));
+            if (flags.json)
+                return void console.log(JSON.stringify(rows, null, 2));
+            if (!rows.length)
+                return void console.log("No launchers. Create one with `agent-switch launcher add <app> <profile>`.");
+            for (const r of rows)
+                console.log(`${r.exists ? "●" : "○ missing"} ${r.app.padEnd(16)} ${r.provider}/${r.profile}  ${r.path}`);
+            return;
+        }
+        default:
+            die("usage: agent-switch launcher add|remove <app> <profile> | list [--json] | repair");
+    }
+}
+/** `agent-switch app-settings copy <app> --from <profile|default> --to <profile>`. */
+function cmdAppSettings(sub, args, flags) {
+    const app = findApp(args[0] ?? "");
+    const from = typeof flags.from === "string" ? flags.from : null;
+    const to = typeof flags.to === "string" ? flags.to : null;
+    if (sub !== "copy" || !app || !from || !to)
+        die("usage: agent-switch app-settings copy <app> --from <profile|default> --to <profile>");
+    if (!hasSettingsLayout(app.id))
+        die(`copying settings is not supported for ${app.displayName}.`);
+    if (from === to)
+        die("--from and --to are the same profile.");
+    const toProfile = requireProfile(app.provider, to, "app-settings copy");
+    const fromDir = from === "default" ? DEFAULT_DATA_DIR[app.id] : guiDataDir(app, requireProfile(app.provider, from, "app-settings copy"));
+    const toDir = guiDataDir(app, toProfile);
+    if (!fs.existsSync(fromDir))
+        die(`${from === "default" ? `The default ${app.displayName}` : `${app.provider}/${from}`} has no ${app.displayName} data yet.`);
+    // The running app rewrites its own files on quit and would undo the copy.
+    if (findRunning(toDir))
+        die(`${app.displayName} is open on ${app.provider}/${toProfile} — quit it first, then copy.`);
+    const r = copyDesktopSettings(app.id, fromDir, toDir);
+    logActivity("settings", `${app.provider}/${toProfile}`, `copied ${app.displayName} settings from ${from}`, "user ran `agent-switch app-settings copy`");
+    if (flags.json)
+        return void console.log(JSON.stringify({ app: app.id, from, to: toProfile, ...r }, null, 2));
+    if (!r.copied.length)
+        return void console.log(`Nothing to copy — ${from} has no ${app.displayName} settings yet.`);
+    console.log(`Copied ${r.copied.join(", ")} from ${from} to ${app.provider}/${toProfile}.`);
+    if (r.backups.length)
+        console.log(`Previous files kept as ${r.backups.map((b) => path.basename(b)).join(", ")}.`);
+    console.log("Logins, chats and account-bound preferences were not copied.");
+}
 /**
  * `agent-switch guard [block|warn|off]` — read or set the single-load policy.
  * The bare form also reports what is loaded RIGHT NOW, because "what is my
@@ -2302,6 +2475,7 @@ Run with no command to launch the tray/menubar GUI (single-instance).
   agent-switch login [--provider P] <name> [--browser <id>]   sign an existing profile in again (after a sign-out / expired login); --browser opens the Claude sign-in in that browser
   agent-switch browsers [--json]               browsers --browser can open (macOS / Linux)
   agent-switch import [--provider P] <name>    migrate the default install (no re-login)
+  agent-switch mark-shared [--provider P] <name> [--off]   mark a profile as sharing the default install's login (never refreshed or balanced)
   agent-switch use [--provider P] <name>       set the active profile for a provider
   agent-switch deactivate [--provider P]       clear the active profile for a provider
   agent-switch run [--provider P] <name> [--tmux] [..]  launch the provider's CLI (--tmux = managed tmux session, POSIX)
@@ -2340,15 +2514,17 @@ Run with no command to launch the tray/menubar GUI (single-instance).
   agent-switch providers enable|disable|status [--provider P] [--surface cli|ui]   enable/disable a provider (default: Claude + Codex)
   agent-switch [gui]                           launch the tray/menubar GUI (the default with no command; won't start a second if one is running)
   agent-switch check-update [--json]           check GitHub Releases for a newer version
-  agent-switch update                          self-update to the latest version (via npm)
+  agent-switch update                          self-update to the latest version (via npm); restarts the service on it, or offers to install one
   agent-switch apps                            list launchable GUI apps (macOS)
-  agent-switch open <app> [profile]            launch a GUI app on a profile, isolated (macOS)
+  agent-switch open <app> [profile]            launch a GUI app on a profile, isolated; focuses it if already open (macOS)
+  agent-switch launcher add|remove <app> <profile> | list [--json] | repair   Dock/Spotlight launcher per account in ~/Applications/Agent Switch (macOS)
+  agent-switch app-settings copy <app> --from <profile|default> --to <profile> [--json]   copy desktop settings (MCP, preferences, extensions) — never logins
   agent-switch shellenv [--shell zsh|bash|fish|powershell]   shell integration
   agent-switch shellenv install [--shell S] [--json]   add it to your shell's startup file
   agent-switch service run|start|stop|status|install|uninstall   background usage daemon
   agent-switch notifications [clear] [--json]  recent notifications (usage-limit suggestions, fetch failures)
   agent-switch notify --kind K --title T --message M [--json]   record a notification event
-  agent-switch os-notify [on|off|status] [--json]   daemon-side OS desktop notifications (default off)
+  agent-switch os-notify [on|off|status] [--json]   daemon-side OS desktop notifications, Linux/Windows (default off; macOS: the app shows them)
   agent-switch uninstall [--force]             remove all agent-switch data + daemon
   agent-switch usage history [--provider P] [--profile <name>] [--json]   daemon-recorded usage samples per profile
   agent-switch tooling [--json]                ecosystem tool readout (agent-config, rtk, provider CLIs)
@@ -2569,6 +2745,11 @@ function cmdActivity(flags) {
     }
 }
 function authStatusFor(providerId, name) {
+    const s = rawAuthStatusFor(providerId, name);
+    const keptFreshBy = keptFreshByFor(providerId, { shared: sharesDefaultLogin(providerId, name), serviceInstalled: serviceTarget() !== "not-installed" }, s.keptFreshBy);
+    return { ...s, keptFreshBy };
+}
+function rawAuthStatusFor(providerId, name) {
     const now = Date.now();
     const cfg = provider(providerId).configDirFor(configDir(providerId, name));
     if (providerId === "claude") {
@@ -2763,6 +2944,7 @@ async function main() {
         case "desktop": return cmdDesktop(!!flags.json);
         case "disable": return cmdDisable(providerId, positional[0], true);
         case "enable": return cmdDisable(providerId, positional[0], false);
+        case "mark-shared": return cmdMarkShared(providerId, positional[0], !!flags.off);
         case "autoswitch": return cmdAutoswitch(providerId, providerExplicit, positional[0], flags);
         case "reset": return cmdReset(providerId, positional[0], !!flags.yes);
         case "rename": return cmdRename(providerId, positional[0], positional[1]);
@@ -2773,6 +2955,9 @@ async function main() {
         case "check-update":
         case "check-updates": return cmdCheckUpdate(!!flags.json);
         case "open": return cmdOpen(positional[0], positional[1]);
+        case "launcher":
+        case "launchers": return cmdLauncher(positional[0], positional.slice(1), flags);
+        case "app-settings": return cmdAppSettings(positional[0], positional.slice(1), flags);
         case "apps": return cmdApps(!!flags.json);
         case "notify": return cmdNotify(flags);
         case "notifications": return cmdNotifications(positional[0], !!flags.json);

package/dist/launchers.js

@@ -0,0 +1,228 @@
+/**
+ * Managed desktop launchers (macOS): one small app per app × profile in
+ * `~/Applications/Agent Switch/`, which a Dock or Spotlight click can start.
+ *
+ * Each launcher is an AppleScript applet (`osacompile`) whose only line runs
+ * this CLI's `open <app> <profile>` — the same isolated start the app menu
+ * uses, including "focus the window it already has". The original app is never
+ * copied, patched or re-signed. A locally built applet carries no quarantine
+ * flag, so Gatekeeper does not prompt; swapping its icon breaks the ad-hoc
+ * seal, which is why the bundle is re-signed ad hoc afterwards.
+ *
+ * Every launcher made is recorded in `launchers.json`, so remove, repair and
+ * uninstall touch exactly those bundles.
+ */
+import { spawnSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { findApp } from "./apps.js";
+import { ROOT } from "./profiles.js";
+const MANIFEST = path.join(ROOT, "launchers.json");
+/** macOS-only paths: built with path.posix so they are right on any host. */
+export function launchersDir(home = os.homedir()) {
+    return path.posix.join(home, "Applications", "Agent Switch");
+}
+export function launcherPath(app, profile, home = os.homedir()) {
+    return path.posix.join(launchersDir(home), `${app.displayName} – ${profile}.app`);
+}
+function asLiteral(s) {
+    return `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+/** The applet's single line: run `<node> <index.js> open <app> <profile>`,
+ *  carrying a custom AGENT_SWITCH_HOME — a Dock start has none in its env. */
+export function appleScriptFor(node, index, appId, profile, home) {
+    const env = home ? `"AGENT_SWITCH_HOME=" & quoted form of ${asLiteral(home)} & " " & ` : "";
+    return (`do shell script ${env}quoted form of ${asLiteral(node)} & " " & quoted form of ${asLiteral(index)}` +
+        ` & " open " & quoted form of ${asLiteral(appId)} & " " & quoted form of ${asLiteral(profile)}`);
+}
+/** A brew/installer `bin/node` symlink that resolves to the running node — it
+ *  survives an upgrade, the versioned path behind it does not. */
+export function stableNode(execPath, candidates = ["/opt/homebrew/bin/node", "/usr/local/bin/node"], realpath = (p) => fs.realpathSync(p)) {
+    let running;
+    try {
+        running = realpath(execPath);
+    }
+    catch {
+        return execPath;
+    }
+    for (const c of candidates) {
+        try {
+            if (realpath(c) === running)
+                return c;
+        }
+        catch {
+            /* not installed there */
+        }
+    }
+    return execPath;
+}
+/** The main (non-helper) process started with exactly this `--user-data-dir`. */
+export function findMainPid(psOutput, userDataDir) {
+    const flag = `--user-data-dir=${userDataDir}`;
+    for (const line of psOutput.split("\n")) {
+        const m = line.match(/^\s*(\d+)\s+(.*)$/);
+        if (!m)
+            continue;
+        const args = m[2];
+        const at = args.indexOf(flag);
+        if (at < 0 || args.includes("--type="))
+            continue;
+        const next = args[at + flag.length];
+        if (next === undefined || next === " ")
+            return Number(m[1]);
+    }
+    return null;
+}
+/** Brings an already running profile instance to the front. False = none runs
+ *  (or it could not be activated), so the caller starts one. */
+export function findRunning(userDataDir) {
+    if (process.platform !== "darwin")
+        return null;
+    const ps = spawnSync("ps", ["-axo", "pid=,args="], { encoding: "utf8", maxBuffer: 16 * 1024 * 1024 });
+    return ps.status === 0 ? findMainPid(ps.stdout, userDataDir) : null;
+}
+export function focusRunning(userDataDir) {
+    const pid = findRunning(userDataDir);
+    if (pid === null)
+        return false;
+    // NSRunningApplication.activate needs no Accessibility/Automation permission.
+    const js = `ObjC.import('AppKit'); const a = $.NSRunningApplication.runningApplicationWithProcessIdentifier(${pid}); a.isNil() ? 'no' : (a.activateWithOptions($.NSApplicationActivateAllWindows) ? 'yes' : 'no')`;
+    const r = spawnSync("osascript", ["-l", "JavaScript", "-e", js], { encoding: "utf8" });
+    return r.status === 0 && r.stdout.trim() === "yes";
+}
+export function upsertEntry(entries, e) {
+    return [...withoutEntry(entries, e.app, e.profile), e];
+}
+export function withoutEntry(entries, app, profile) {
+    return entries.filter((x) => !(x.app === app && x.profile === profile));
+}
+export function entriesFor(entries, provider, profile) {
+    return entries.filter((x) => x.provider === provider && x.profile === profile);
+}
+export function readLaunchers() {
+    try {
+        const raw = JSON.parse(fs.readFileSync(MANIFEST, "utf8"));
+        return Array.isArray(raw) ? raw.filter((x) => x && typeof x.app === "string" && typeof x.profile === "string" && typeof x.path === "string") : [];
+    }
+    catch {
+        return [];
+    }
+}
+function writeLaunchers(entries) {
+    fs.mkdirSync(ROOT, { recursive: true });
+    fs.writeFileSync(MANIFEST, JSON.stringify(entries, null, 2) + "\n", { mode: 0o600 });
+}
+/** Where the app is installed (first Spotlight hit), or null. */
+export function appBundlePath(app) {
+    const r = spawnSync("mdfind", [`kMDItemCFBundleIdentifier == '${app.bundleId}'`], { encoding: "utf8" });
+    const hit = r.status === 0 ? r.stdout.split("\n").find((l) => l.endsWith(".app")) : undefined;
+    return hit ?? null;
+}
+function appIcon(bundle) {
+    const r = spawnSync("plutil", ["-extract", "CFBundleIconFile", "raw", path.join(bundle, "Contents", "Info.plist")], { encoding: "utf8" });
+    if (r.status !== 0)
+        return null;
+    const name = r.stdout.trim();
+    const file = path.join(bundle, "Contents", "Resources", name.endsWith(".icns") ? name : `${name}.icns`);
+    return fs.existsSync(file) ? file : null;
+}
+/** This CLI as the launcher should call it: a stable node + this index.js. */
+function cliInvocation() {
+    return { node: stableNode(process.execPath), index: path.join(path.dirname(fileURLToPath(import.meta.url)), "index.js") };
+}
+function run(cmd, args) {
+    const r = spawnSync(cmd, args, { encoding: "utf8" });
+    if (r.status !== 0)
+        throw new Error(`${cmd} failed: ${(r.stderr || r.stdout).trim()}`);
+}
+/** Builds (or rebuilds) the launcher for app × profile and records it. */
+export function createLauncher(app, profile) {
+    if (process.platform !== "darwin")
+        throw new Error("launchers are macOS-only for now.");
+    const bundle = appBundlePath(app);
+    if (!bundle)
+        throw new Error(`${app.displayName} is not installed.`);
+    const target = launcherPath(app, profile);
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    // Built next to the target, then swapped in: a failed build leaves the old one.
+    // The name must end in .app, or osacompile writes a bare script, not a bundle.
+    const tmp = path.join(path.dirname(target), `.${path.basename(target, ".app")}.building.app`);
+    fs.rmSync(tmp, { recursive: true, force: true });
+    try {
+        const { node, index } = cliInvocation();
+        run("osacompile", ["-o", tmp, "-e", appleScriptFor(node, index, app.id, profile, process.env.AGENT_SWITCH_HOME)]);
+        const icon = appIcon(bundle);
+        if (icon) {
+            // The applet's asset catalog would win over applet.icns and show a blank icon.
+            fs.rmSync(path.join(tmp, "Contents", "Resources", "Assets.car"), { force: true });
+            fs.copyFileSync(icon, path.join(tmp, "Contents", "Resources", "applet.icns"));
+        }
+        run("codesign", ["--force", "--sign", "-", tmp]);
+        fs.rmSync(target, { recursive: true, force: true });
+        fs.renameSync(tmp, target);
+    }
+    finally {
+        fs.rmSync(tmp, { recursive: true, force: true });
+    }
+    const entry = { app: app.id, provider: app.provider, profile, path: target };
+    writeLaunchers(upsertEntry(readLaunchers(), entry));
+    return entry;
+}
+/** Removes a recorded launcher; a path the manifest doesn't list is never deleted. */
+export function removeLauncher(appId, profile) {
+    const entries = readLaunchers();
+    const hit = entries.find((x) => x.app === appId && x.profile === profile);
+    if (!hit)
+        return false;
+    fs.rmSync(hit.path, { recursive: true, force: true });
+    writeLaunchers(withoutEntry(entries, appId, profile));
+    return true;
+}
+export function removeLaunchersFor(provider, profile) {
+    const mine = entriesFor(readLaunchers(), provider, profile);
+    for (const e of mine)
+        removeLauncher(e.app, e.profile);
+    return mine.length;
+}
+/** A renamed profile's launchers are rebuilt under the new name (best effort:
+ *  one that can't be rebuilt is removed rather than left pointing at nothing). */
+export function renameLaunchersFor(provider, from, to) {
+    for (const e of entriesFor(readLaunchers(), provider, from)) {
+        removeLauncher(e.app, e.profile);
+        const app = findApp(e.app);
+        if (!app)
+            continue;
+        try {
+            createLauncher(app, to);
+        }
+        catch {
+            /* app gone — nothing to rebuild */
+        }
+    }
+}
+/** Rebuilds every recorded launcher — after a move of this CLI or a node upgrade. */
+export function repairLaunchers() {
+    const rebuilt = [];
+    const failed = [];
+    for (const e of readLaunchers()) {
+        const app = findApp(e.app);
+        try {
+            if (!app)
+                throw new Error(`unknown app ${e.app}`);
+            rebuilt.push(createLauncher(app, e.profile));
+        }
+        catch (err) {
+            failed.push({ entry: e, reason: err instanceof Error ? err.message : String(err) });
+        }
+    }
+    return { rebuilt, failed };
+}
+export function removeAllLaunchers() {
+    const entries = readLaunchers();
+    for (const e of entries)
+        fs.rmSync(e.path, { recursive: true, force: true });
+    writeLaunchers([]);
+    return entries.length;
+}