agent-shim 11.41.0 → 11.43.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/cli.cjs +518 -378
  2. package/dist/index.cjs +296 -227
  3. package/dist/index.mjs +295 -226
  4. package/dist/types/index.d.ts +534 -480
  5. package/package.json +1 -1
package/dist/types/index.d.ts CHANGED
@@ -397,8 +397,8 @@ declare const AntigravityProviderConfigSchema: z.ZodObject<{
397
397
  models: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
398
398
  degradeDownTiers: z.ZodOptional<z.ZodBoolean>;
399
399
  effort: z.ZodOptional<z.ZodEnum<{
400
- max: "max";
401
400
  none: "none";
401
+ max: "max";
402
402
  low: "low";
403
403
  medium: "medium";
404
404
  high: "high";
@@ -738,8 +738,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
738
738
  models: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
739
739
  degradeDownTiers: z.ZodOptional<z.ZodBoolean>;
740
740
  effort: z.ZodOptional<z.ZodEnum<{
741
- max: "max";
742
741
  none: "none";
742
+ max: "max";
743
743
  low: "low";
744
744
  medium: "medium";
745
745
  high: "high";
@@ -1192,33 +1192,6 @@ declare const DirectoryRuleSchema: z.ZodObject<{
1192
1192
  key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
1193
1193
  }, z.core.$strip>], "kind">]>;
1194
1194
  }, z.core.$strict>]>>>;
1195
- $schema: z.ZodOptional<z.ZodString>;
1196
- extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
1197
- categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
1198
- all: z.ZodOptional<z.ZodBoolean>;
1199
- runtime: z.ZodOptional<z.ZodBoolean>;
1200
- history: z.ZodOptional<z.ZodBoolean>;
1201
- knowledge: z.ZodOptional<z.ZodBoolean>;
1202
- settings: z.ZodOptional<z.ZodBoolean>;
1203
- }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
1204
- all?: boolean | undefined;
1205
- runtime?: boolean | undefined;
1206
- history?: boolean | undefined;
1207
- knowledge?: boolean | undefined;
1208
- settings?: boolean | undefined;
1209
- }>>>;
1210
- launch: z.ZodOptional<z.ZodObject<{
1211
- skipPermissions: z.ZodOptional<z.ZodBoolean>;
1212
- remoteControl: z.ZodOptional<z.ZodBoolean>;
1213
- provider: z.ZodOptional<z.ZodString>;
1214
- headroom: z.ZodOptional<z.ZodBoolean>;
1215
- trackUsage: z.ZodOptional<z.ZodBoolean>;
1216
- claudeVersion: z.ZodOptional<z.ZodString>;
1217
- delay: z.ZodOptional<z.ZodString>;
1218
- pause: z.ZodOptional<z.ZodBoolean>;
1219
- routeByName: z.ZodOptional<z.ZodBoolean>;
1220
- explain: z.ZodOptional<z.ZodBoolean>;
1221
- }, z.core.$strict>>;
1222
1195
  models: z.ZodOptional<z.ZodObject<{
1223
1196
  virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
1224
1197
  mode: z.ZodEnum<{
@@ -1265,6 +1238,33 @@ declare const DirectoryRuleSchema: z.ZodObject<{
1265
1238
  thinking: z.ZodOptional<z.ZodBoolean>;
1266
1239
  }, z.core.$strict>, z.ZodNull]>>>;
1267
1240
  }, z.core.$strict>>;
1241
+ $schema: z.ZodOptional<z.ZodString>;
1242
+ extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
1243
+ categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
1244
+ all: z.ZodOptional<z.ZodBoolean>;
1245
+ runtime: z.ZodOptional<z.ZodBoolean>;
1246
+ history: z.ZodOptional<z.ZodBoolean>;
1247
+ knowledge: z.ZodOptional<z.ZodBoolean>;
1248
+ settings: z.ZodOptional<z.ZodBoolean>;
1249
+ }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
1250
+ all?: boolean | undefined;
1251
+ runtime?: boolean | undefined;
1252
+ history?: boolean | undefined;
1253
+ knowledge?: boolean | undefined;
1254
+ settings?: boolean | undefined;
1255
+ }>>>;
1256
+ launch: z.ZodOptional<z.ZodObject<{
1257
+ skipPermissions: z.ZodOptional<z.ZodBoolean>;
1258
+ remoteControl: z.ZodOptional<z.ZodBoolean>;
1259
+ provider: z.ZodOptional<z.ZodString>;
1260
+ headroom: z.ZodOptional<z.ZodBoolean>;
1261
+ trackUsage: z.ZodOptional<z.ZodBoolean>;
1262
+ claudeVersion: z.ZodOptional<z.ZodString>;
1263
+ delay: z.ZodOptional<z.ZodString>;
1264
+ pause: z.ZodOptional<z.ZodBoolean>;
1265
+ routeByName: z.ZodOptional<z.ZodBoolean>;
1266
+ explain: z.ZodOptional<z.ZodBoolean>;
1267
+ }, z.core.$strict>>;
1268
1268
  path: z.ZodString;
1269
1269
  configProfile: z.ZodOptional<z.ZodString>;
1270
1270
  identity: z.ZodOptional<z.ZodString>;
@@ -1421,33 +1421,6 @@ declare const DirectoryRulesSchema: z.ZodObject<{
1421
1421
  key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
1422
1422
  }, z.core.$strip>], "kind">]>;
1423
1423
  }, z.core.$strict>]>>>;
1424
- $schema: z.ZodOptional<z.ZodString>;
1425
- extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
1426
- categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
1427
- all: z.ZodOptional<z.ZodBoolean>;
1428
- runtime: z.ZodOptional<z.ZodBoolean>;
1429
- history: z.ZodOptional<z.ZodBoolean>;
1430
- knowledge: z.ZodOptional<z.ZodBoolean>;
1431
- settings: z.ZodOptional<z.ZodBoolean>;
1432
- }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
1433
- all?: boolean | undefined;
1434
- runtime?: boolean | undefined;
1435
- history?: boolean | undefined;
1436
- knowledge?: boolean | undefined;
1437
- settings?: boolean | undefined;
1438
- }>>>;
1439
- launch: z.ZodOptional<z.ZodObject<{
1440
- skipPermissions: z.ZodOptional<z.ZodBoolean>;
1441
- remoteControl: z.ZodOptional<z.ZodBoolean>;
1442
- provider: z.ZodOptional<z.ZodString>;
1443
- headroom: z.ZodOptional<z.ZodBoolean>;
1444
- trackUsage: z.ZodOptional<z.ZodBoolean>;
1445
- claudeVersion: z.ZodOptional<z.ZodString>;
1446
- delay: z.ZodOptional<z.ZodString>;
1447
- pause: z.ZodOptional<z.ZodBoolean>;
1448
- routeByName: z.ZodOptional<z.ZodBoolean>;
1449
- explain: z.ZodOptional<z.ZodBoolean>;
1450
- }, z.core.$strict>>;
1451
1424
  models: z.ZodOptional<z.ZodObject<{
1452
1425
  virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
1453
1426
  mode: z.ZodEnum<{
@@ -1494,6 +1467,33 @@ declare const DirectoryRulesSchema: z.ZodObject<{
1494
1467
  thinking: z.ZodOptional<z.ZodBoolean>;
1495
1468
  }, z.core.$strict>, z.ZodNull]>>>;
1496
1469
  }, z.core.$strict>>;
1470
+ $schema: z.ZodOptional<z.ZodString>;
1471
+ extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
1472
+ categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
1473
+ all: z.ZodOptional<z.ZodBoolean>;
1474
+ runtime: z.ZodOptional<z.ZodBoolean>;
1475
+ history: z.ZodOptional<z.ZodBoolean>;
1476
+ knowledge: z.ZodOptional<z.ZodBoolean>;
1477
+ settings: z.ZodOptional<z.ZodBoolean>;
1478
+ }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
1479
+ all?: boolean | undefined;
1480
+ runtime?: boolean | undefined;
1481
+ history?: boolean | undefined;
1482
+ knowledge?: boolean | undefined;
1483
+ settings?: boolean | undefined;
1484
+ }>>>;
1485
+ launch: z.ZodOptional<z.ZodObject<{
1486
+ skipPermissions: z.ZodOptional<z.ZodBoolean>;
1487
+ remoteControl: z.ZodOptional<z.ZodBoolean>;
1488
+ provider: z.ZodOptional<z.ZodString>;
1489
+ headroom: z.ZodOptional<z.ZodBoolean>;
1490
+ trackUsage: z.ZodOptional<z.ZodBoolean>;
1491
+ claudeVersion: z.ZodOptional<z.ZodString>;
1492
+ delay: z.ZodOptional<z.ZodString>;
1493
+ pause: z.ZodOptional<z.ZodBoolean>;
1494
+ routeByName: z.ZodOptional<z.ZodBoolean>;
1495
+ explain: z.ZodOptional<z.ZodBoolean>;
1496
+ }, z.core.$strict>>;
1497
1497
  path: z.ZodString;
1498
1498
  configProfile: z.ZodOptional<z.ZodString>;
1499
1499
  identity: z.ZodOptional<z.ZodString>;
@@ -1651,33 +1651,6 @@ declare const PortableConfigSchema: z.ZodObject<{
1651
1651
  key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
1652
1652
  }, z.core.$strip>], "kind">]>;
1653
1653
  }, z.core.$strict>]>>>;
1654
- $schema: z.ZodOptional<z.ZodString>;
1655
- extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
1656
- categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
1657
- all: z.ZodOptional<z.ZodBoolean>;
1658
- runtime: z.ZodOptional<z.ZodBoolean>;
1659
- history: z.ZodOptional<z.ZodBoolean>;
1660
- knowledge: z.ZodOptional<z.ZodBoolean>;
1661
- settings: z.ZodOptional<z.ZodBoolean>;
1662
- }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
1663
- all?: boolean | undefined;
1664
- runtime?: boolean | undefined;
1665
- history?: boolean | undefined;
1666
- knowledge?: boolean | undefined;
1667
- settings?: boolean | undefined;
1668
- }>>>;
1669
- launch: z.ZodOptional<z.ZodObject<{
1670
- skipPermissions: z.ZodOptional<z.ZodBoolean>;
1671
- remoteControl: z.ZodOptional<z.ZodBoolean>;
1672
- provider: z.ZodOptional<z.ZodString>;
1673
- headroom: z.ZodOptional<z.ZodBoolean>;
1674
- trackUsage: z.ZodOptional<z.ZodBoolean>;
1675
- claudeVersion: z.ZodOptional<z.ZodString>;
1676
- delay: z.ZodOptional<z.ZodString>;
1677
- pause: z.ZodOptional<z.ZodBoolean>;
1678
- routeByName: z.ZodOptional<z.ZodBoolean>;
1679
- explain: z.ZodOptional<z.ZodBoolean>;
1680
- }, z.core.$strict>>;
1681
1654
  models: z.ZodOptional<z.ZodObject<{
1682
1655
  virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
1683
1656
  mode: z.ZodEnum<{
@@ -1724,6 +1697,33 @@ declare const PortableConfigSchema: z.ZodObject<{
1724
1697
  thinking: z.ZodOptional<z.ZodBoolean>;
1725
1698
  }, z.core.$strict>, z.ZodNull]>>>;
1726
1699
  }, z.core.$strict>>;
1700
+ $schema: z.ZodOptional<z.ZodString>;
1701
+ extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
1702
+ categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
1703
+ all: z.ZodOptional<z.ZodBoolean>;
1704
+ runtime: z.ZodOptional<z.ZodBoolean>;
1705
+ history: z.ZodOptional<z.ZodBoolean>;
1706
+ knowledge: z.ZodOptional<z.ZodBoolean>;
1707
+ settings: z.ZodOptional<z.ZodBoolean>;
1708
+ }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
1709
+ all?: boolean | undefined;
1710
+ runtime?: boolean | undefined;
1711
+ history?: boolean | undefined;
1712
+ knowledge?: boolean | undefined;
1713
+ settings?: boolean | undefined;
1714
+ }>>>;
1715
+ launch: z.ZodOptional<z.ZodObject<{
1716
+ skipPermissions: z.ZodOptional<z.ZodBoolean>;
1717
+ remoteControl: z.ZodOptional<z.ZodBoolean>;
1718
+ provider: z.ZodOptional<z.ZodString>;
1719
+ headroom: z.ZodOptional<z.ZodBoolean>;
1720
+ trackUsage: z.ZodOptional<z.ZodBoolean>;
1721
+ claudeVersion: z.ZodOptional<z.ZodString>;
1722
+ delay: z.ZodOptional<z.ZodString>;
1723
+ pause: z.ZodOptional<z.ZodBoolean>;
1724
+ routeByName: z.ZodOptional<z.ZodBoolean>;
1725
+ explain: z.ZodOptional<z.ZodBoolean>;
1726
+ }, z.core.$strict>>;
1727
1727
  configProfile: z.ZodOptional<z.ZodString>;
1728
1728
  identity: z.ZodOptional<z.ZodString>;
1729
1729
  when: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
@@ -1810,8 +1810,8 @@ declare const HeadroomGlobalConfigSchema: z.ZodObject<{
1810
1810
  targetRatio: z.ZodOptional<z.ZodNumber>;
1811
1811
  ccr: z.ZodOptional<z.ZodEnum<{
1812
1812
  default: "default";
1813
- lossless: "lossless";
1814
1813
  none: "none";
1814
+ lossless: "lossless";
1815
1815
  }>>;
1816
1816
  rolloutChannel: z.ZodOptional<z.ZodEnum<{
1817
1817
  beta: "beta";
@@ -1943,8 +1943,8 @@ declare const GlobalConfigSchema: z.ZodObject<{
1943
1943
  targetRatio: z.ZodOptional<z.ZodNumber>;
1944
1944
  ccr: z.ZodOptional<z.ZodEnum<{
1945
1945
  default: "default";
1946
- lossless: "lossless";
1947
1946
  none: "none";
1947
+ lossless: "lossless";
1948
1948
  }>>;
1949
1949
  rolloutChannel: z.ZodOptional<z.ZodEnum<{
1950
1950
  beta: "beta";
@@ -2647,6 +2647,96 @@ declare class UsageError extends CliError {
2647
2647
  /** Injected reader for a single config file, so tests never touch a real filesystem. Returns undefined when the file does not exist. */
2648
2648
  type ConfigFileReader = (filepath: string) => unknown;
2649
2649
 
2650
+ /** The filesystem operations headroom coordination needs: the same shape as `FarmFs`, injected so every decision over state, sessions, and the start lock runs against an in-memory fake in tests. */
2651
+ type HeadroomFs = Pick<FarmFs, "mkdirp" | "mkdirPrivate" | "readFileUtf8" | "writeFileUtf8" | "writeFilePrivate" | "writeFileExclusive" | "readdir" | "removeRecursive">;
2652
+
2653
+ /**
2654
+ * The record held in one front-door session-registry file: the launcher's pid plus the per-launch capability token its child presents on every request, and the supervisor of the door the launch was sent to. `sessionId` is the id the launch's requests carry in their session header, and `models` the models block this launch resolved when its directory, profile or committed file added definitions of its own to the global block (absent otherwise, so the door follows the global block live). `supervisorPid` is absent on a record written before it existed and on a door's own transparent-surface record; such a launch cannot be attributed to a door, so a superseded door treats it as its own.
2655
+ */
2656
+ declare const FrontDoorSessionSchema: z.ZodObject<{
2657
+ pid: z.ZodNumber;
2658
+ startedAt: z.ZodNumber;
2659
+ token: z.ZodString;
2660
+ supervisorPid: z.ZodOptional<z.ZodNumber>;
2661
+ sessionId: z.ZodOptional<z.ZodString>;
2662
+ models: z.ZodOptional<z.ZodObject<{
2663
+ virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
2664
+ mode: z.ZodEnum<{
2665
+ ordered: "ordered";
2666
+ "most-allowance": "most-allowance";
2667
+ "soonest-reset": "soonest-reset";
2668
+ spread: "spread";
2669
+ adaptive: "adaptive";
2670
+ "lowest-latency": "lowest-latency";
2671
+ "highest-success": "highest-success";
2672
+ cheapest: "cheapest";
2673
+ }>;
2674
+ members: z.ZodArray<z.ZodString>;
2675
+ }, z.core.$strict>>>;
2676
+ tiers: z.ZodOptional<z.ZodObject<{
2677
+ fable: z.ZodOptional<z.ZodString>;
2678
+ opus: z.ZodOptional<z.ZodString>;
2679
+ sonnet: z.ZodOptional<z.ZodString>;
2680
+ haiku: z.ZodOptional<z.ZodString>;
2681
+ }, z.core.$strict>>;
2682
+ prices: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
2683
+ input: z.ZodNumber;
2684
+ output: z.ZodNumber;
2685
+ }, z.core.$strict>>>;
2686
+ hide: z.ZodOptional<z.ZodArray<z.ZodString>>;
2687
+ show: z.ZodOptional<z.ZodArray<z.ZodString>>;
2688
+ same: z.ZodOptional<z.ZodArray<z.ZodArray<z.ZodString>>>;
2689
+ distinct: z.ZodOptional<z.ZodArray<z.ZodTuple<[z.ZodString, z.ZodString], null>>>;
2690
+ families: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
2691
+ names: z.ZodOptional<z.ZodArray<z.ZodString>>;
2692
+ mode: z.ZodOptional<z.ZodEnum<{
2693
+ ordered: "ordered";
2694
+ "most-allowance": "most-allowance";
2695
+ "soonest-reset": "soonest-reset";
2696
+ spread: "spread";
2697
+ adaptive: "adaptive";
2698
+ "lowest-latency": "lowest-latency";
2699
+ "highest-success": "highest-success";
2700
+ cheapest: "cheapest";
2701
+ }>>;
2702
+ context: z.ZodOptional<z.ZodNumber>;
2703
+ vision: z.ZodOptional<z.ZodBoolean>;
2704
+ tools: z.ZodOptional<z.ZodBoolean>;
2705
+ thinking: z.ZodOptional<z.ZodBoolean>;
2706
+ }, z.core.$strict>>>;
2707
+ }, z.core.$strict>>;
2708
+ }, z.core.$strict>;
2709
+ type FrontDoorSession = z.infer<typeof FrontDoorSessionSchema>;
2710
+ /**
2711
+ * The front-door supervisor's state.json under `<home>/frontdoor/`. Every field is optional because the file exists in stages, exactly like headroom's and the old codex daemon's: a fresh supervisor writes its own pid before the listener is up, and a shut-down front door leaves only the sticky `lastPort` and any `lastError` worth surfacing.
2712
+ */
2713
+ declare const FrontDoorStateSchema: z.ZodObject<{
2714
+ protocol: z.ZodOptional<z.ZodNumber>;
2715
+ supervisorPid: z.ZodOptional<z.ZodNumber>;
2716
+ port: z.ZodOptional<z.ZodNumber>;
2717
+ lastPort: z.ZodOptional<z.ZodNumber>;
2718
+ connectPort: z.ZodOptional<z.ZodNumber>;
2719
+ lastConnectPort: z.ZodOptional<z.ZodNumber>;
2720
+ directPort: z.ZodOptional<z.ZodNumber>;
2721
+ lastDirectPort: z.ZodOptional<z.ZodNumber>;
2722
+ lastError: z.ZodOptional<z.ZodString>;
2723
+ }, z.core.$strict>;
2724
+ type FrontDoorState = z.infer<typeof FrontDoorStateSchema>;
2725
+ /**
2726
+ * Which recorded doors are still running as front-door supervisors, as reads of the process table answer it: `doors` holds the pids the table shows running (not zombies) with the front-door supervisor's command line; `unknown` holds the pids no read could answer for, each with why (ps failed to run, was killed, timed out or reported an error). Every other pid asked about is known not to be a door: gone, a zombie, or a process that reused a crashed door's pid.
2727
+ */
2728
+ interface FrontDoorLiveness {
2729
+ readonly doors: ReadonlySet<number>;
2730
+ readonly unknown: ReadonlyMap<number, string>;
2731
+ }
2732
+ /** What a launch records about itself in its registry entry beyond the token: the id its requests carry and, when it resolved one that differs from the global block, its models block. */
2733
+ interface FrontDoorSessionDetails {
2734
+ readonly sessionId: string;
2735
+ readonly models?: ModelsConfig;
2736
+ }
2737
+ /** A registered launch as status and the idle decision see it: the pid and start time, never the token, so nothing that prints or serialises a session can leak the capability. */
2738
+ type FrontDoorSessionSummary = Pick<FrontDoorSession, "pid" | "startedAt" | "supervisorPid">;
2739
+
2650
2740
  /**
2651
2741
  * Filesystem operations the launcher needs, injected so no test in this project ever touches a real filesystem — consistent with the resolver core's own injected-facts approach in `src/resolve/types.ts`.
2652
2742
  */
@@ -2778,8 +2868,8 @@ interface HeadroomPort {
2778
2868
  * Everything the launcher needs from the front-door daemon, injected like `HeadroomPort`: `ensure` brings the door up (spawning its detached supervisor when nothing authenticated is serving), registers this launch in its session registry and returns both listeners' loopback ports plus the CA bundle the child must trust; `release` removes that registration when the spawned `claude` exits.
2779
2869
  */
2780
2870
  interface FrontDoorPort {
2781
- /** `inheritedExtraCaCerts` is the parent environment's own `NODE_EXTRA_CA_CERTS`, which the returned trust bundle keeps (see `resolveTrustBundle`). */
2782
- readonly ensure: (inheritedExtraCaCerts: string | undefined) => FrontDoorUp;
2871
+ /** `inheritedExtraCaCerts` is the parent environment's own `NODE_EXTRA_CA_CERTS`, which the returned trust bundle keeps (see `resolveTrustBundle`). `session` is what the launch tells the door about itself: its session id and the models block it resolved. */
2872
+ readonly ensure: (inheritedExtraCaCerts: string | undefined, session?: FrontDoorSessionDetails) => FrontDoorUp;
2783
2873
  readonly release: () => void;
2784
2874
  }
2785
2875
  /** The running front door one launch routed through, as `FrontDoorPort.ensure` reports it. */
@@ -4256,9 +4346,6 @@ interface FrontDoorRcControl {
4256
4346
  /** Builds the control client: every request presents the control token, and a non-2xx answer becomes the verbose message the door sent with it. */
4257
4347
  declare function frontDoorRcControl(transport: RcControlTransport, token: string): FrontDoorRcControl;
4258
4348
 
4259
- /** The filesystem operations headroom coordination needs: the same shape as `FarmFs`, injected so every decision over state, sessions, and the start lock runs against an in-memory fake in tests. */
4260
- type HeadroomFs = Pick<FarmFs, "mkdirp" | "mkdirPrivate" | "readFileUtf8" | "writeFileUtf8" | "writeFilePrivate" | "writeFileExclusive" | "readdir" | "removeRecursive">;
4261
-
4262
4349
  /** What an `lstat` (which never follows symlinks) reports about one path, narrowed to what authenticating the socket needs. */
4263
4350
  interface SocketPathStat {
4264
4351
  readonly kind: "dir" | "file" | "socket" | "symlink" | "other";
@@ -4721,12 +4808,12 @@ declare const CheckReportJsonSchema: z.ZodObject<{
4721
4808
  identity: z.ZodObject<{
4722
4809
  name: z.ZodNullable<z.ZodString>;
4723
4810
  source: z.ZodEnum<{
4724
- env: "env";
4725
- none: "none";
4726
4811
  "config-dir-escape-hatch": "config-dir-escape-hatch";
4727
4812
  argv: "argv";
4813
+ env: "env";
4728
4814
  "directory-pin": "directory-pin";
4729
4815
  "active-identity-file": "active-identity-file";
4816
+ none: "none";
4730
4817
  }>;
4731
4818
  }, z.core.$strict>;
4732
4819
  pool: z.ZodOptional<z.ZodObject<{
@@ -4804,11 +4891,11 @@ declare const CheckReportJsonSchema: z.ZodObject<{
4804
4891
  "category-default": "category-default";
4805
4892
  }>;
4806
4893
  category: z.ZodNullable<z.ZodEnum<{
4894
+ secret: "secret";
4807
4895
  runtime: "runtime";
4808
4896
  history: "history";
4809
4897
  knowledge: "knowledge";
4810
4898
  settings: "settings";
4811
- secret: "secret";
4812
4899
  }>>;
4813
4900
  rule: z.ZodOptional<z.ZodObject<{
4814
4901
  key: z.ZodString;
@@ -5470,41 +5557,6 @@ interface FileAllowlistDrift {
5470
5557
  readonly hashLags: boolean;
5471
5558
  }
5472
5559
 
5473
- /**
5474
- * The record held in one front-door session-registry file: the launcher's pid plus the per-launch capability token its child presents on every request, and the supervisor of the door the launch was sent to. `supervisorPid` is absent on a record written before it existed and on a door's own transparent-surface record; such a launch cannot be attributed to a door, so a superseded door treats it as its own.
5475
- */
5476
- declare const FrontDoorSessionSchema: z.ZodObject<{
5477
- pid: z.ZodNumber;
5478
- startedAt: z.ZodNumber;
5479
- token: z.ZodString;
5480
- supervisorPid: z.ZodOptional<z.ZodNumber>;
5481
- }, z.core.$strict>;
5482
- type FrontDoorSession = z.infer<typeof FrontDoorSessionSchema>;
5483
- /**
5484
- * The front-door supervisor's state.json under `<home>/frontdoor/`. Every field is optional because the file exists in stages, exactly like headroom's and the old codex daemon's: a fresh supervisor writes its own pid before the listener is up, and a shut-down front door leaves only the sticky `lastPort` and any `lastError` worth surfacing.
5485
- */
5486
- declare const FrontDoorStateSchema: z.ZodObject<{
5487
- protocol: z.ZodOptional<z.ZodNumber>;
5488
- supervisorPid: z.ZodOptional<z.ZodNumber>;
5489
- port: z.ZodOptional<z.ZodNumber>;
5490
- lastPort: z.ZodOptional<z.ZodNumber>;
5491
- connectPort: z.ZodOptional<z.ZodNumber>;
5492
- lastConnectPort: z.ZodOptional<z.ZodNumber>;
5493
- directPort: z.ZodOptional<z.ZodNumber>;
5494
- lastDirectPort: z.ZodOptional<z.ZodNumber>;
5495
- lastError: z.ZodOptional<z.ZodString>;
5496
- }, z.core.$strict>;
5497
- type FrontDoorState = z.infer<typeof FrontDoorStateSchema>;
5498
- /**
5499
- * Which recorded doors are still running as front-door supervisors, as reads of the process table answer it: `doors` holds the pids the table shows running (not zombies) with the front-door supervisor's command line; `unknown` holds the pids no read could answer for, each with why (ps failed to run, was killed, timed out or reported an error). Every other pid asked about is known not to be a door: gone, a zombie, or a process that reused a crashed door's pid.
5500
- */
5501
- interface FrontDoorLiveness {
5502
- readonly doors: ReadonlySet<number>;
5503
- readonly unknown: ReadonlyMap<number, string>;
5504
- }
5505
- /** A registered launch as status and the idle decision see it: the pid and start time, never the token, so nothing that prints or serialises a session can leak the capability. */
5506
- type FrontDoorSessionSummary = Pick<FrontDoorSession, "pid" | "startedAt" | "supervisorPid">;
5507
-
5508
5560
  /** The token-saving settings of the `headroom` config block, without its install and lifecycle fields (`source`, `idleShutdownMinutes`). */
5509
5561
  type HeadroomSettings = Pick<HeadroomGlobalConfig, "mode" | "targetRatio" | "ccr" | "rolloutChannel" | "interceptToolResults" | "readMaturation">;
5510
5562
 
@@ -6313,32 +6365,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
6313
6365
  }, zod_v4_core.$strip>], "kind">]>;
6314
6366
  }, zod_v4_core.$strict>]>>>;
6315
6367
  description: zod.ZodOptional<zod.ZodString>;
6316
- extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
6317
- categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
6318
- all: zod.ZodOptional<zod.ZodBoolean>;
6319
- runtime: zod.ZodOptional<zod.ZodBoolean>;
6320
- history: zod.ZodOptional<zod.ZodBoolean>;
6321
- knowledge: zod.ZodOptional<zod.ZodBoolean>;
6322
- settings: zod.ZodOptional<zod.ZodBoolean>;
6323
- }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
6324
- all?: boolean | undefined;
6325
- runtime?: boolean | undefined;
6326
- history?: boolean | undefined;
6327
- knowledge?: boolean | undefined;
6328
- settings?: boolean | undefined;
6329
- }>>>;
6330
- launch: zod.ZodOptional<zod.ZodObject<{
6331
- skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
6332
- remoteControl: zod.ZodOptional<zod.ZodBoolean>;
6333
- provider: zod.ZodOptional<zod.ZodString>;
6334
- headroom: zod.ZodOptional<zod.ZodBoolean>;
6335
- trackUsage: zod.ZodOptional<zod.ZodBoolean>;
6336
- claudeVersion: zod.ZodOptional<zod.ZodString>;
6337
- delay: zod.ZodOptional<zod.ZodString>;
6338
- pause: zod.ZodOptional<zod.ZodBoolean>;
6339
- routeByName: zod.ZodOptional<zod.ZodBoolean>;
6340
- explain: zod.ZodOptional<zod.ZodBoolean>;
6341
- }, zod_v4_core.$strict>>;
6342
6368
  models: zod.ZodOptional<zod.ZodObject<{
6343
6369
  virtual: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodObject<{
6344
6370
  mode: zod.ZodEnum<{
@@ -6385,6 +6411,32 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
6385
6411
  thinking: zod.ZodOptional<zod.ZodBoolean>;
6386
6412
  }, zod_v4_core.$strict>, zod.ZodNull]>>>;
6387
6413
  }, zod_v4_core.$strict>>;
6414
+ extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
6415
+ categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
6416
+ all: zod.ZodOptional<zod.ZodBoolean>;
6417
+ runtime: zod.ZodOptional<zod.ZodBoolean>;
6418
+ history: zod.ZodOptional<zod.ZodBoolean>;
6419
+ knowledge: zod.ZodOptional<zod.ZodBoolean>;
6420
+ settings: zod.ZodOptional<zod.ZodBoolean>;
6421
+ }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
6422
+ all?: boolean | undefined;
6423
+ runtime?: boolean | undefined;
6424
+ history?: boolean | undefined;
6425
+ knowledge?: boolean | undefined;
6426
+ settings?: boolean | undefined;
6427
+ }>>>;
6428
+ launch: zod.ZodOptional<zod.ZodObject<{
6429
+ skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
6430
+ remoteControl: zod.ZodOptional<zod.ZodBoolean>;
6431
+ provider: zod.ZodOptional<zod.ZodString>;
6432
+ headroom: zod.ZodOptional<zod.ZodBoolean>;
6433
+ trackUsage: zod.ZodOptional<zod.ZodBoolean>;
6434
+ claudeVersion: zod.ZodOptional<zod.ZodString>;
6435
+ delay: zod.ZodOptional<zod.ZodString>;
6436
+ pause: zod.ZodOptional<zod.ZodBoolean>;
6437
+ routeByName: zod.ZodOptional<zod.ZodBoolean>;
6438
+ explain: zod.ZodOptional<zod.ZodBoolean>;
6439
+ }, zod_v4_core.$strict>>;
6388
6440
  }, zod_v4_core.$strict>;
6389
6441
  }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
6390
6442
  set: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
@@ -6486,32 +6538,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
6486
6538
  }, zod_v4_core.$strip>], "kind">]>;
6487
6539
  }, zod_v4_core.$strict>]>>>;
6488
6540
  description: zod.ZodOptional<zod.ZodString>;
6489
- extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
6490
- categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
6491
- all: zod.ZodOptional<zod.ZodBoolean>;
6492
- runtime: zod.ZodOptional<zod.ZodBoolean>;
6493
- history: zod.ZodOptional<zod.ZodBoolean>;
6494
- knowledge: zod.ZodOptional<zod.ZodBoolean>;
6495
- settings: zod.ZodOptional<zod.ZodBoolean>;
6496
- }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
6497
- all?: boolean | undefined;
6498
- runtime?: boolean | undefined;
6499
- history?: boolean | undefined;
6500
- knowledge?: boolean | undefined;
6501
- settings?: boolean | undefined;
6502
- }>>>;
6503
- launch: zod.ZodOptional<zod.ZodObject<{
6504
- skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
6505
- remoteControl: zod.ZodOptional<zod.ZodBoolean>;
6506
- provider: zod.ZodOptional<zod.ZodString>;
6507
- headroom: zod.ZodOptional<zod.ZodBoolean>;
6508
- trackUsage: zod.ZodOptional<zod.ZodBoolean>;
6509
- claudeVersion: zod.ZodOptional<zod.ZodString>;
6510
- delay: zod.ZodOptional<zod.ZodString>;
6511
- pause: zod.ZodOptional<zod.ZodBoolean>;
6512
- routeByName: zod.ZodOptional<zod.ZodBoolean>;
6513
- explain: zod.ZodOptional<zod.ZodBoolean>;
6514
- }, zod_v4_core.$strict>>;
6515
6541
  models: zod.ZodOptional<zod.ZodObject<{
6516
6542
  virtual: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodObject<{
6517
6543
  mode: zod.ZodEnum<{
@@ -6558,6 +6584,32 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
6558
6584
  thinking: zod.ZodOptional<zod.ZodBoolean>;
6559
6585
  }, zod_v4_core.$strict>, zod.ZodNull]>>>;
6560
6586
  }, zod_v4_core.$strict>>;
6587
+ extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
6588
+ categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
6589
+ all: zod.ZodOptional<zod.ZodBoolean>;
6590
+ runtime: zod.ZodOptional<zod.ZodBoolean>;
6591
+ history: zod.ZodOptional<zod.ZodBoolean>;
6592
+ knowledge: zod.ZodOptional<zod.ZodBoolean>;
6593
+ settings: zod.ZodOptional<zod.ZodBoolean>;
6594
+ }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
6595
+ all?: boolean | undefined;
6596
+ runtime?: boolean | undefined;
6597
+ history?: boolean | undefined;
6598
+ knowledge?: boolean | undefined;
6599
+ settings?: boolean | undefined;
6600
+ }>>>;
6601
+ launch: zod.ZodOptional<zod.ZodObject<{
6602
+ skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
6603
+ remoteControl: zod.ZodOptional<zod.ZodBoolean>;
6604
+ provider: zod.ZodOptional<zod.ZodString>;
6605
+ headroom: zod.ZodOptional<zod.ZodBoolean>;
6606
+ trackUsage: zod.ZodOptional<zod.ZodBoolean>;
6607
+ claudeVersion: zod.ZodOptional<zod.ZodString>;
6608
+ delay: zod.ZodOptional<zod.ZodString>;
6609
+ pause: zod.ZodOptional<zod.ZodBoolean>;
6610
+ routeByName: zod.ZodOptional<zod.ZodBoolean>;
6611
+ explain: zod.ZodOptional<zod.ZodBoolean>;
6612
+ }, zod_v4_core.$strict>>;
6561
6613
  }, zod_v4_core.$strict>;
6562
6614
  }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
6563
6615
  remove: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
@@ -7138,33 +7190,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
7138
7190
  key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
7139
7191
  }, zod_v4_core.$strip>], "kind">]>;
7140
7192
  }, zod_v4_core.$strict>]>>>;
7141
- $schema: zod.ZodOptional<zod.ZodString>;
7142
- extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
7143
- categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
7144
- all: zod.ZodOptional<zod.ZodBoolean>;
7145
- runtime: zod.ZodOptional<zod.ZodBoolean>;
7146
- history: zod.ZodOptional<zod.ZodBoolean>;
7147
- knowledge: zod.ZodOptional<zod.ZodBoolean>;
7148
- settings: zod.ZodOptional<zod.ZodBoolean>;
7149
- }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
7150
- all?: boolean | undefined;
7151
- runtime?: boolean | undefined;
7152
- history?: boolean | undefined;
7153
- knowledge?: boolean | undefined;
7154
- settings?: boolean | undefined;
7155
- }>>>;
7156
- launch: zod.ZodOptional<zod.ZodObject<{
7157
- skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
7158
- remoteControl: zod.ZodOptional<zod.ZodBoolean>;
7159
- provider: zod.ZodOptional<zod.ZodString>;
7160
- headroom: zod.ZodOptional<zod.ZodBoolean>;
7161
- trackUsage: zod.ZodOptional<zod.ZodBoolean>;
7162
- claudeVersion: zod.ZodOptional<zod.ZodString>;
7163
- delay: zod.ZodOptional<zod.ZodString>;
7164
- pause: zod.ZodOptional<zod.ZodBoolean>;
7165
- routeByName: zod.ZodOptional<zod.ZodBoolean>;
7166
- explain: zod.ZodOptional<zod.ZodBoolean>;
7167
- }, zod_v4_core.$strict>>;
7168
7193
  models: zod.ZodOptional<zod.ZodObject<{
7169
7194
  virtual: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodObject<{
7170
7195
  mode: zod.ZodEnum<{
@@ -7211,6 +7236,33 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
7211
7236
  thinking: zod.ZodOptional<zod.ZodBoolean>;
7212
7237
  }, zod_v4_core.$strict>, zod.ZodNull]>>>;
7213
7238
  }, zod_v4_core.$strict>>;
7239
+ $schema: zod.ZodOptional<zod.ZodString>;
7240
+ extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
7241
+ categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
7242
+ all: zod.ZodOptional<zod.ZodBoolean>;
7243
+ runtime: zod.ZodOptional<zod.ZodBoolean>;
7244
+ history: zod.ZodOptional<zod.ZodBoolean>;
7245
+ knowledge: zod.ZodOptional<zod.ZodBoolean>;
7246
+ settings: zod.ZodOptional<zod.ZodBoolean>;
7247
+ }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
7248
+ all?: boolean | undefined;
7249
+ runtime?: boolean | undefined;
7250
+ history?: boolean | undefined;
7251
+ knowledge?: boolean | undefined;
7252
+ settings?: boolean | undefined;
7253
+ }>>>;
7254
+ launch: zod.ZodOptional<zod.ZodObject<{
7255
+ skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
7256
+ remoteControl: zod.ZodOptional<zod.ZodBoolean>;
7257
+ provider: zod.ZodOptional<zod.ZodString>;
7258
+ headroom: zod.ZodOptional<zod.ZodBoolean>;
7259
+ trackUsage: zod.ZodOptional<zod.ZodBoolean>;
7260
+ claudeVersion: zod.ZodOptional<zod.ZodString>;
7261
+ delay: zod.ZodOptional<zod.ZodString>;
7262
+ pause: zod.ZodOptional<zod.ZodBoolean>;
7263
+ routeByName: zod.ZodOptional<zod.ZodBoolean>;
7264
+ explain: zod.ZodOptional<zod.ZodBoolean>;
7265
+ }, zod_v4_core.$strict>>;
7214
7266
  path: zod.ZodString;
7215
7267
  configProfile: zod.ZodOptional<zod.ZodString>;
7216
7268
  identity: zod.ZodOptional<zod.ZodString>;
@@ -7365,40 +7417,13 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
7365
7417
  }, zod_v4_core.$strip>, zod.ZodObject<{
7366
7418
  kind: zod.ZodLiteral<"every">;
7367
7419
  collection: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
7368
- item: typeof trilean.PredicateNodeSchema;
7369
- filter: zod.ZodOptional<typeof trilean.PredicateNodeSchema>;
7370
- }, zod_v4_core.$strip>, zod.ZodObject<{
7371
- kind: zod.ZodLiteral<"treeReference">;
7372
- key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
7373
- }, zod_v4_core.$strip>], "kind">]>;
7374
- }, zod_v4_core.$strict>]>>>;
7375
- $schema: zod.ZodOptional<zod.ZodString>;
7376
- extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
7377
- categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
7378
- all: zod.ZodOptional<zod.ZodBoolean>;
7379
- runtime: zod.ZodOptional<zod.ZodBoolean>;
7380
- history: zod.ZodOptional<zod.ZodBoolean>;
7381
- knowledge: zod.ZodOptional<zod.ZodBoolean>;
7382
- settings: zod.ZodOptional<zod.ZodBoolean>;
7383
- }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
7384
- all?: boolean | undefined;
7385
- runtime?: boolean | undefined;
7386
- history?: boolean | undefined;
7387
- knowledge?: boolean | undefined;
7388
- settings?: boolean | undefined;
7389
- }>>>;
7390
- launch: zod.ZodOptional<zod.ZodObject<{
7391
- skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
7392
- remoteControl: zod.ZodOptional<zod.ZodBoolean>;
7393
- provider: zod.ZodOptional<zod.ZodString>;
7394
- headroom: zod.ZodOptional<zod.ZodBoolean>;
7395
- trackUsage: zod.ZodOptional<zod.ZodBoolean>;
7396
- claudeVersion: zod.ZodOptional<zod.ZodString>;
7397
- delay: zod.ZodOptional<zod.ZodString>;
7398
- pause: zod.ZodOptional<zod.ZodBoolean>;
7399
- routeByName: zod.ZodOptional<zod.ZodBoolean>;
7400
- explain: zod.ZodOptional<zod.ZodBoolean>;
7401
- }, zod_v4_core.$strict>>;
7420
+ item: typeof trilean.PredicateNodeSchema;
7421
+ filter: zod.ZodOptional<typeof trilean.PredicateNodeSchema>;
7422
+ }, zod_v4_core.$strip>, zod.ZodObject<{
7423
+ kind: zod.ZodLiteral<"treeReference">;
7424
+ key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
7425
+ }, zod_v4_core.$strip>], "kind">]>;
7426
+ }, zod_v4_core.$strict>]>>>;
7402
7427
  models: zod.ZodOptional<zod.ZodObject<{
7403
7428
  virtual: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodObject<{
7404
7429
  mode: zod.ZodEnum<{
@@ -7445,6 +7470,33 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
7445
7470
  thinking: zod.ZodOptional<zod.ZodBoolean>;
7446
7471
  }, zod_v4_core.$strict>, zod.ZodNull]>>>;
7447
7472
  }, zod_v4_core.$strict>>;
7473
+ $schema: zod.ZodOptional<zod.ZodString>;
7474
+ extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
7475
+ categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
7476
+ all: zod.ZodOptional<zod.ZodBoolean>;
7477
+ runtime: zod.ZodOptional<zod.ZodBoolean>;
7478
+ history: zod.ZodOptional<zod.ZodBoolean>;
7479
+ knowledge: zod.ZodOptional<zod.ZodBoolean>;
7480
+ settings: zod.ZodOptional<zod.ZodBoolean>;
7481
+ }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
7482
+ all?: boolean | undefined;
7483
+ runtime?: boolean | undefined;
7484
+ history?: boolean | undefined;
7485
+ knowledge?: boolean | undefined;
7486
+ settings?: boolean | undefined;
7487
+ }>>>;
7488
+ launch: zod.ZodOptional<zod.ZodObject<{
7489
+ skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
7490
+ remoteControl: zod.ZodOptional<zod.ZodBoolean>;
7491
+ provider: zod.ZodOptional<zod.ZodString>;
7492
+ headroom: zod.ZodOptional<zod.ZodBoolean>;
7493
+ trackUsage: zod.ZodOptional<zod.ZodBoolean>;
7494
+ claudeVersion: zod.ZodOptional<zod.ZodString>;
7495
+ delay: zod.ZodOptional<zod.ZodString>;
7496
+ pause: zod.ZodOptional<zod.ZodBoolean>;
7497
+ routeByName: zod.ZodOptional<zod.ZodBoolean>;
7498
+ explain: zod.ZodOptional<zod.ZodBoolean>;
7499
+ }, zod_v4_core.$strict>>;
7448
7500
  path: zod.ZodString;
7449
7501
  configProfile: zod.ZodOptional<zod.ZodString>;
7450
7502
  identity: zod.ZodOptional<zod.ZodString>;
@@ -7745,9 +7797,9 @@ declare function createLifecycleApiRouter(deps: LifecycleApiDeps): {
7745
7797
  current: zod.ZodString;
7746
7798
  latest: zod.ZodString;
7747
7799
  action: zod.ZodEnum<{
7748
- updated: "updated";
7749
7800
  current: "current";
7750
7801
  available: "available";
7802
+ updated: "updated";
7751
7803
  }>;
7752
7804
  }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
7753
7805
  };
@@ -8040,12 +8092,12 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
8040
8092
  decision: zod.ZodObject<{
8041
8093
  identity: zod.ZodOptional<zod.ZodString>;
8042
8094
  identitySource: zod.ZodEnum<{
8043
- env: "env";
8044
- none: "none";
8045
8095
  "config-dir-escape-hatch": "config-dir-escape-hatch";
8046
8096
  argv: "argv";
8097
+ env: "env";
8047
8098
  "directory-pin": "directory-pin";
8048
8099
  "active-identity-file": "active-identity-file";
8100
+ none: "none";
8049
8101
  }>;
8050
8102
  pool: zod.ZodOptional<zod.ZodObject<{
8051
8103
  name: zod.ZodString;
@@ -8649,12 +8701,12 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
8649
8701
  identity: zod.ZodObject<{
8650
8702
  name: zod.ZodNullable<zod.ZodString>;
8651
8703
  source: zod.ZodEnum<{
8652
- env: "env";
8653
- none: "none";
8654
8704
  "config-dir-escape-hatch": "config-dir-escape-hatch";
8655
8705
  argv: "argv";
8706
+ env: "env";
8656
8707
  "directory-pin": "directory-pin";
8657
8708
  "active-identity-file": "active-identity-file";
8709
+ none: "none";
8658
8710
  }>;
8659
8711
  }, zod_v4_core.$strict>;
8660
8712
  pool: zod.ZodOptional<zod.ZodObject<{
@@ -8732,11 +8784,11 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
8732
8784
  "category-default": "category-default";
8733
8785
  }>;
8734
8786
  category: zod.ZodNullable<zod.ZodEnum<{
8787
+ secret: "secret";
8735
8788
  runtime: "runtime";
8736
8789
  history: "history";
8737
8790
  knowledge: "knowledge";
8738
8791
  settings: "settings";
8739
- secret: "secret";
8740
8792
  }>>;
8741
8793
  rule: zod.ZodOptional<zod.ZodObject<{
8742
8794
  key: zod.ZodString;
@@ -8955,12 +9007,10 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
8955
9007
  "global-config": "global-config";
8956
9008
  "config-profile": "config-profile";
8957
9009
  identity: "identity";
8958
- keychain: "keychain";
8959
9010
  provider: "provider";
8960
- headroom: "headroom";
8961
- models: "models";
8962
9011
  frontdoor: "frontdoor";
8963
9012
  pool: "pool";
9013
+ keychain: "keychain";
8964
9014
  "ambient-credential": "ambient-credential";
8965
9015
  "binary-discovery": "binary-discovery";
8966
9016
  "claude-shim": "claude-shim";
@@ -8970,6 +9020,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
8970
9020
  "directory-rules": "directory-rules";
8971
9021
  "categories-local": "categories-local";
8972
9022
  "active-identity": "active-identity";
9023
+ headroom: "headroom";
9024
+ models: "models";
8973
9025
  }>;
8974
9026
  subject: zod.ZodOptional<zod.ZodString>;
8975
9027
  severity: zod.ZodEnum<{
@@ -9162,12 +9214,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
9162
9214
  decision: zod.ZodObject<{
9163
9215
  identity: zod.ZodOptional<zod.ZodString>;
9164
9216
  identitySource: zod.ZodEnum<{
9165
- env: "env";
9166
- none: "none";
9167
9217
  "config-dir-escape-hatch": "config-dir-escape-hatch";
9168
9218
  argv: "argv";
9219
+ env: "env";
9169
9220
  "directory-pin": "directory-pin";
9170
9221
  "active-identity-file": "active-identity-file";
9222
+ none: "none";
9171
9223
  }>;
9172
9224
  pool: zod.ZodOptional<zod.ZodObject<{
9173
9225
  name: zod.ZodString;
@@ -9546,32 +9598,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
9546
9598
  }, zod_v4_core.$strip>], "kind">]>;
9547
9599
  }, zod_v4_core.$strict>]>>>;
9548
9600
  description: zod.ZodOptional<zod.ZodString>;
9549
- extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
9550
- categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
9551
- all: zod.ZodOptional<zod.ZodBoolean>;
9552
- runtime: zod.ZodOptional<zod.ZodBoolean>;
9553
- history: zod.ZodOptional<zod.ZodBoolean>;
9554
- knowledge: zod.ZodOptional<zod.ZodBoolean>;
9555
- settings: zod.ZodOptional<zod.ZodBoolean>;
9556
- }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
9557
- all?: boolean | undefined;
9558
- runtime?: boolean | undefined;
9559
- history?: boolean | undefined;
9560
- knowledge?: boolean | undefined;
9561
- settings?: boolean | undefined;
9562
- }>>>;
9563
- launch: zod.ZodOptional<zod.ZodObject<{
9564
- skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
9565
- remoteControl: zod.ZodOptional<zod.ZodBoolean>;
9566
- provider: zod.ZodOptional<zod.ZodString>;
9567
- headroom: zod.ZodOptional<zod.ZodBoolean>;
9568
- trackUsage: zod.ZodOptional<zod.ZodBoolean>;
9569
- claudeVersion: zod.ZodOptional<zod.ZodString>;
9570
- delay: zod.ZodOptional<zod.ZodString>;
9571
- pause: zod.ZodOptional<zod.ZodBoolean>;
9572
- routeByName: zod.ZodOptional<zod.ZodBoolean>;
9573
- explain: zod.ZodOptional<zod.ZodBoolean>;
9574
- }, zod_v4_core.$strict>>;
9575
9601
  models: zod.ZodOptional<zod.ZodObject<{
9576
9602
  virtual: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodObject<{
9577
9603
  mode: zod.ZodEnum<{
@@ -9618,6 +9644,32 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
9618
9644
  thinking: zod.ZodOptional<zod.ZodBoolean>;
9619
9645
  }, zod_v4_core.$strict>, zod.ZodNull]>>>;
9620
9646
  }, zod_v4_core.$strict>>;
9647
+ extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
9648
+ categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
9649
+ all: zod.ZodOptional<zod.ZodBoolean>;
9650
+ runtime: zod.ZodOptional<zod.ZodBoolean>;
9651
+ history: zod.ZodOptional<zod.ZodBoolean>;
9652
+ knowledge: zod.ZodOptional<zod.ZodBoolean>;
9653
+ settings: zod.ZodOptional<zod.ZodBoolean>;
9654
+ }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
9655
+ all?: boolean | undefined;
9656
+ runtime?: boolean | undefined;
9657
+ history?: boolean | undefined;
9658
+ knowledge?: boolean | undefined;
9659
+ settings?: boolean | undefined;
9660
+ }>>>;
9661
+ launch: zod.ZodOptional<zod.ZodObject<{
9662
+ skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
9663
+ remoteControl: zod.ZodOptional<zod.ZodBoolean>;
9664
+ provider: zod.ZodOptional<zod.ZodString>;
9665
+ headroom: zod.ZodOptional<zod.ZodBoolean>;
9666
+ trackUsage: zod.ZodOptional<zod.ZodBoolean>;
9667
+ claudeVersion: zod.ZodOptional<zod.ZodString>;
9668
+ delay: zod.ZodOptional<zod.ZodString>;
9669
+ pause: zod.ZodOptional<zod.ZodBoolean>;
9670
+ routeByName: zod.ZodOptional<zod.ZodBoolean>;
9671
+ explain: zod.ZodOptional<zod.ZodBoolean>;
9672
+ }, zod_v4_core.$strict>>;
9621
9673
  }, zod_v4_core.$strict>;
9622
9674
  }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
9623
9675
  set: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
@@ -9719,32 +9771,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
9719
9771
  }, zod_v4_core.$strip>], "kind">]>;
9720
9772
  }, zod_v4_core.$strict>]>>>;
9721
9773
  description: zod.ZodOptional<zod.ZodString>;
9722
- extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
9723
- categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
9724
- all: zod.ZodOptional<zod.ZodBoolean>;
9725
- runtime: zod.ZodOptional<zod.ZodBoolean>;
9726
- history: zod.ZodOptional<zod.ZodBoolean>;
9727
- knowledge: zod.ZodOptional<zod.ZodBoolean>;
9728
- settings: zod.ZodOptional<zod.ZodBoolean>;
9729
- }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
9730
- all?: boolean | undefined;
9731
- runtime?: boolean | undefined;
9732
- history?: boolean | undefined;
9733
- knowledge?: boolean | undefined;
9734
- settings?: boolean | undefined;
9735
- }>>>;
9736
- launch: zod.ZodOptional<zod.ZodObject<{
9737
- skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
9738
- remoteControl: zod.ZodOptional<zod.ZodBoolean>;
9739
- provider: zod.ZodOptional<zod.ZodString>;
9740
- headroom: zod.ZodOptional<zod.ZodBoolean>;
9741
- trackUsage: zod.ZodOptional<zod.ZodBoolean>;
9742
- claudeVersion: zod.ZodOptional<zod.ZodString>;
9743
- delay: zod.ZodOptional<zod.ZodString>;
9744
- pause: zod.ZodOptional<zod.ZodBoolean>;
9745
- routeByName: zod.ZodOptional<zod.ZodBoolean>;
9746
- explain: zod.ZodOptional<zod.ZodBoolean>;
9747
- }, zod_v4_core.$strict>>;
9748
9774
  models: zod.ZodOptional<zod.ZodObject<{
9749
9775
  virtual: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodObject<{
9750
9776
  mode: zod.ZodEnum<{
@@ -9791,6 +9817,32 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
9791
9817
  thinking: zod.ZodOptional<zod.ZodBoolean>;
9792
9818
  }, zod_v4_core.$strict>, zod.ZodNull]>>>;
9793
9819
  }, zod_v4_core.$strict>>;
9820
+ extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
9821
+ categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
9822
+ all: zod.ZodOptional<zod.ZodBoolean>;
9823
+ runtime: zod.ZodOptional<zod.ZodBoolean>;
9824
+ history: zod.ZodOptional<zod.ZodBoolean>;
9825
+ knowledge: zod.ZodOptional<zod.ZodBoolean>;
9826
+ settings: zod.ZodOptional<zod.ZodBoolean>;
9827
+ }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
9828
+ all?: boolean | undefined;
9829
+ runtime?: boolean | undefined;
9830
+ history?: boolean | undefined;
9831
+ knowledge?: boolean | undefined;
9832
+ settings?: boolean | undefined;
9833
+ }>>>;
9834
+ launch: zod.ZodOptional<zod.ZodObject<{
9835
+ skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
9836
+ remoteControl: zod.ZodOptional<zod.ZodBoolean>;
9837
+ provider: zod.ZodOptional<zod.ZodString>;
9838
+ headroom: zod.ZodOptional<zod.ZodBoolean>;
9839
+ trackUsage: zod.ZodOptional<zod.ZodBoolean>;
9840
+ claudeVersion: zod.ZodOptional<zod.ZodString>;
9841
+ delay: zod.ZodOptional<zod.ZodString>;
9842
+ pause: zod.ZodOptional<zod.ZodBoolean>;
9843
+ routeByName: zod.ZodOptional<zod.ZodBoolean>;
9844
+ explain: zod.ZodOptional<zod.ZodBoolean>;
9845
+ }, zod_v4_core.$strict>>;
9794
9846
  }, zod_v4_core.$strict>;
9795
9847
  }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
9796
9848
  remove: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
@@ -10371,33 +10423,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
10371
10423
  key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
10372
10424
  }, zod_v4_core.$strip>], "kind">]>;
10373
10425
  }, zod_v4_core.$strict>]>>>;
10374
- $schema: zod.ZodOptional<zod.ZodString>;
10375
- extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
10376
- categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
10377
- all: zod.ZodOptional<zod.ZodBoolean>;
10378
- runtime: zod.ZodOptional<zod.ZodBoolean>;
10379
- history: zod.ZodOptional<zod.ZodBoolean>;
10380
- knowledge: zod.ZodOptional<zod.ZodBoolean>;
10381
- settings: zod.ZodOptional<zod.ZodBoolean>;
10382
- }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
10383
- all?: boolean | undefined;
10384
- runtime?: boolean | undefined;
10385
- history?: boolean | undefined;
10386
- knowledge?: boolean | undefined;
10387
- settings?: boolean | undefined;
10388
- }>>>;
10389
- launch: zod.ZodOptional<zod.ZodObject<{
10390
- skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
10391
- remoteControl: zod.ZodOptional<zod.ZodBoolean>;
10392
- provider: zod.ZodOptional<zod.ZodString>;
10393
- headroom: zod.ZodOptional<zod.ZodBoolean>;
10394
- trackUsage: zod.ZodOptional<zod.ZodBoolean>;
10395
- claudeVersion: zod.ZodOptional<zod.ZodString>;
10396
- delay: zod.ZodOptional<zod.ZodString>;
10397
- pause: zod.ZodOptional<zod.ZodBoolean>;
10398
- routeByName: zod.ZodOptional<zod.ZodBoolean>;
10399
- explain: zod.ZodOptional<zod.ZodBoolean>;
10400
- }, zod_v4_core.$strict>>;
10401
10426
  models: zod.ZodOptional<zod.ZodObject<{
10402
10427
  virtual: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodObject<{
10403
10428
  mode: zod.ZodEnum<{
@@ -10444,6 +10469,33 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
10444
10469
  thinking: zod.ZodOptional<zod.ZodBoolean>;
10445
10470
  }, zod_v4_core.$strict>, zod.ZodNull]>>>;
10446
10471
  }, zod_v4_core.$strict>>;
10472
+ $schema: zod.ZodOptional<zod.ZodString>;
10473
+ extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
10474
+ categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
10475
+ all: zod.ZodOptional<zod.ZodBoolean>;
10476
+ runtime: zod.ZodOptional<zod.ZodBoolean>;
10477
+ history: zod.ZodOptional<zod.ZodBoolean>;
10478
+ knowledge: zod.ZodOptional<zod.ZodBoolean>;
10479
+ settings: zod.ZodOptional<zod.ZodBoolean>;
10480
+ }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
10481
+ all?: boolean | undefined;
10482
+ runtime?: boolean | undefined;
10483
+ history?: boolean | undefined;
10484
+ knowledge?: boolean | undefined;
10485
+ settings?: boolean | undefined;
10486
+ }>>>;
10487
+ launch: zod.ZodOptional<zod.ZodObject<{
10488
+ skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
10489
+ remoteControl: zod.ZodOptional<zod.ZodBoolean>;
10490
+ provider: zod.ZodOptional<zod.ZodString>;
10491
+ headroom: zod.ZodOptional<zod.ZodBoolean>;
10492
+ trackUsage: zod.ZodOptional<zod.ZodBoolean>;
10493
+ claudeVersion: zod.ZodOptional<zod.ZodString>;
10494
+ delay: zod.ZodOptional<zod.ZodString>;
10495
+ pause: zod.ZodOptional<zod.ZodBoolean>;
10496
+ routeByName: zod.ZodOptional<zod.ZodBoolean>;
10497
+ explain: zod.ZodOptional<zod.ZodBoolean>;
10498
+ }, zod_v4_core.$strict>>;
10447
10499
  path: zod.ZodString;
10448
10500
  configProfile: zod.ZodOptional<zod.ZodString>;
10449
10501
  identity: zod.ZodOptional<zod.ZodString>;
@@ -10605,33 +10657,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
10605
10657
  key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
10606
10658
  }, zod_v4_core.$strip>], "kind">]>;
10607
10659
  }, zod_v4_core.$strict>]>>>;
10608
- $schema: zod.ZodOptional<zod.ZodString>;
10609
- extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
10610
- categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
10611
- all: zod.ZodOptional<zod.ZodBoolean>;
10612
- runtime: zod.ZodOptional<zod.ZodBoolean>;
10613
- history: zod.ZodOptional<zod.ZodBoolean>;
10614
- knowledge: zod.ZodOptional<zod.ZodBoolean>;
10615
- settings: zod.ZodOptional<zod.ZodBoolean>;
10616
- }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
10617
- all?: boolean | undefined;
10618
- runtime?: boolean | undefined;
10619
- history?: boolean | undefined;
10620
- knowledge?: boolean | undefined;
10621
- settings?: boolean | undefined;
10622
- }>>>;
10623
- launch: zod.ZodOptional<zod.ZodObject<{
10624
- skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
10625
- remoteControl: zod.ZodOptional<zod.ZodBoolean>;
10626
- provider: zod.ZodOptional<zod.ZodString>;
10627
- headroom: zod.ZodOptional<zod.ZodBoolean>;
10628
- trackUsage: zod.ZodOptional<zod.ZodBoolean>;
10629
- claudeVersion: zod.ZodOptional<zod.ZodString>;
10630
- delay: zod.ZodOptional<zod.ZodString>;
10631
- pause: zod.ZodOptional<zod.ZodBoolean>;
10632
- routeByName: zod.ZodOptional<zod.ZodBoolean>;
10633
- explain: zod.ZodOptional<zod.ZodBoolean>;
10634
- }, zod_v4_core.$strict>>;
10635
10660
  models: zod.ZodOptional<zod.ZodObject<{
10636
10661
  virtual: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodObject<{
10637
10662
  mode: zod.ZodEnum<{
@@ -10678,6 +10703,33 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
10678
10703
  thinking: zod.ZodOptional<zod.ZodBoolean>;
10679
10704
  }, zod_v4_core.$strict>, zod.ZodNull]>>>;
10680
10705
  }, zod_v4_core.$strict>>;
10706
+ $schema: zod.ZodOptional<zod.ZodString>;
10707
+ extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
10708
+ categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
10709
+ all: zod.ZodOptional<zod.ZodBoolean>;
10710
+ runtime: zod.ZodOptional<zod.ZodBoolean>;
10711
+ history: zod.ZodOptional<zod.ZodBoolean>;
10712
+ knowledge: zod.ZodOptional<zod.ZodBoolean>;
10713
+ settings: zod.ZodOptional<zod.ZodBoolean>;
10714
+ }, zod_v4_core.$strict>, zod.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
10715
+ all?: boolean | undefined;
10716
+ runtime?: boolean | undefined;
10717
+ history?: boolean | undefined;
10718
+ knowledge?: boolean | undefined;
10719
+ settings?: boolean | undefined;
10720
+ }>>>;
10721
+ launch: zod.ZodOptional<zod.ZodObject<{
10722
+ skipPermissions: zod.ZodOptional<zod.ZodBoolean>;
10723
+ remoteControl: zod.ZodOptional<zod.ZodBoolean>;
10724
+ provider: zod.ZodOptional<zod.ZodString>;
10725
+ headroom: zod.ZodOptional<zod.ZodBoolean>;
10726
+ trackUsage: zod.ZodOptional<zod.ZodBoolean>;
10727
+ claudeVersion: zod.ZodOptional<zod.ZodString>;
10728
+ delay: zod.ZodOptional<zod.ZodString>;
10729
+ pause: zod.ZodOptional<zod.ZodBoolean>;
10730
+ routeByName: zod.ZodOptional<zod.ZodBoolean>;
10731
+ explain: zod.ZodOptional<zod.ZodBoolean>;
10732
+ }, zod_v4_core.$strict>>;
10681
10733
  path: zod.ZodString;
10682
10734
  configProfile: zod.ZodOptional<zod.ZodString>;
10683
10735
  identity: zod.ZodOptional<zod.ZodString>;
@@ -10770,9 +10822,9 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
10770
10822
  current: zod.ZodString;
10771
10823
  latest: zod.ZodString;
10772
10824
  action: zod.ZodEnum<{
10773
- updated: "updated";
10774
10825
  current: "current";
10775
10826
  available: "available";
10827
+ updated: "updated";
10776
10828
  }>;
10777
10829
  }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
10778
10830
  };
@@ -10975,12 +11027,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
10975
11027
  identity: zod.ZodObject<{
10976
11028
  name: zod.ZodNullable<zod.ZodString>;
10977
11029
  source: zod.ZodEnum<{
10978
- env: "env";
10979
- none: "none";
10980
11030
  "config-dir-escape-hatch": "config-dir-escape-hatch";
10981
11031
  argv: "argv";
11032
+ env: "env";
10982
11033
  "directory-pin": "directory-pin";
10983
11034
  "active-identity-file": "active-identity-file";
11035
+ none: "none";
10984
11036
  }>;
10985
11037
  }, zod_v4_core.$strict>;
10986
11038
  pool: zod.ZodOptional<zod.ZodObject<{
@@ -11058,11 +11110,11 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
11058
11110
  "category-default": "category-default";
11059
11111
  }>;
11060
11112
  category: zod.ZodNullable<zod.ZodEnum<{
11113
+ secret: "secret";
11061
11114
  runtime: "runtime";
11062
11115
  history: "history";
11063
11116
  knowledge: "knowledge";
11064
11117
  settings: "settings";
11065
- secret: "secret";
11066
11118
  }>>;
11067
11119
  rule: zod.ZodOptional<zod.ZodObject<{
11068
11120
  key: zod.ZodString;
@@ -11281,12 +11333,10 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
11281
11333
  "global-config": "global-config";
11282
11334
  "config-profile": "config-profile";
11283
11335
  identity: "identity";
11284
- keychain: "keychain";
11285
11336
  provider: "provider";
11286
- headroom: "headroom";
11287
- models: "models";
11288
11337
  frontdoor: "frontdoor";
11289
11338
  pool: "pool";
11339
+ keychain: "keychain";
11290
11340
  "ambient-credential": "ambient-credential";
11291
11341
  "binary-discovery": "binary-discovery";
11292
11342
  "claude-shim": "claude-shim";
@@ -11296,6 +11346,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
11296
11346
  "directory-rules": "directory-rules";
11297
11347
  "categories-local": "categories-local";
11298
11348
  "active-identity": "active-identity";
11349
+ headroom: "headroom";
11350
+ models: "models";
11299
11351
  }>;
11300
11352
  subject: zod.ZodOptional<zod.ZodString>;
11301
11353
  severity: zod.ZodEnum<{
@@ -11881,32 +11933,6 @@ declare const ConfigProfileAddOutputSchema: z.ZodObject<{
11881
11933
  }, z.core.$strip>], "kind">]>;
11882
11934
  }, z.core.$strict>]>>>;
11883
11935
  description: z.ZodOptional<z.ZodString>;
11884
- extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
11885
- categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
11886
- all: z.ZodOptional<z.ZodBoolean>;
11887
- runtime: z.ZodOptional<z.ZodBoolean>;
11888
- history: z.ZodOptional<z.ZodBoolean>;
11889
- knowledge: z.ZodOptional<z.ZodBoolean>;
11890
- settings: z.ZodOptional<z.ZodBoolean>;
11891
- }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
11892
- all?: boolean | undefined;
11893
- runtime?: boolean | undefined;
11894
- history?: boolean | undefined;
11895
- knowledge?: boolean | undefined;
11896
- settings?: boolean | undefined;
11897
- }>>>;
11898
- launch: z.ZodOptional<z.ZodObject<{
11899
- skipPermissions: z.ZodOptional<z.ZodBoolean>;
11900
- remoteControl: z.ZodOptional<z.ZodBoolean>;
11901
- provider: z.ZodOptional<z.ZodString>;
11902
- headroom: z.ZodOptional<z.ZodBoolean>;
11903
- trackUsage: z.ZodOptional<z.ZodBoolean>;
11904
- claudeVersion: z.ZodOptional<z.ZodString>;
11905
- delay: z.ZodOptional<z.ZodString>;
11906
- pause: z.ZodOptional<z.ZodBoolean>;
11907
- routeByName: z.ZodOptional<z.ZodBoolean>;
11908
- explain: z.ZodOptional<z.ZodBoolean>;
11909
- }, z.core.$strict>>;
11910
11936
  models: z.ZodOptional<z.ZodObject<{
11911
11937
  virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
11912
11938
  mode: z.ZodEnum<{
@@ -11953,6 +11979,32 @@ declare const ConfigProfileAddOutputSchema: z.ZodObject<{
11953
11979
  thinking: z.ZodOptional<z.ZodBoolean>;
11954
11980
  }, z.core.$strict>, z.ZodNull]>>>;
11955
11981
  }, z.core.$strict>>;
11982
+ extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
11983
+ categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
11984
+ all: z.ZodOptional<z.ZodBoolean>;
11985
+ runtime: z.ZodOptional<z.ZodBoolean>;
11986
+ history: z.ZodOptional<z.ZodBoolean>;
11987
+ knowledge: z.ZodOptional<z.ZodBoolean>;
11988
+ settings: z.ZodOptional<z.ZodBoolean>;
11989
+ }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
11990
+ all?: boolean | undefined;
11991
+ runtime?: boolean | undefined;
11992
+ history?: boolean | undefined;
11993
+ knowledge?: boolean | undefined;
11994
+ settings?: boolean | undefined;
11995
+ }>>>;
11996
+ launch: z.ZodOptional<z.ZodObject<{
11997
+ skipPermissions: z.ZodOptional<z.ZodBoolean>;
11998
+ remoteControl: z.ZodOptional<z.ZodBoolean>;
11999
+ provider: z.ZodOptional<z.ZodString>;
12000
+ headroom: z.ZodOptional<z.ZodBoolean>;
12001
+ trackUsage: z.ZodOptional<z.ZodBoolean>;
12002
+ claudeVersion: z.ZodOptional<z.ZodString>;
12003
+ delay: z.ZodOptional<z.ZodString>;
12004
+ pause: z.ZodOptional<z.ZodBoolean>;
12005
+ routeByName: z.ZodOptional<z.ZodBoolean>;
12006
+ explain: z.ZodOptional<z.ZodBoolean>;
12007
+ }, z.core.$strict>>;
11956
12008
  }, z.core.$strict>;
11957
12009
  }, z.core.$strict>;
11958
12010
  /** `category` and `entry` merge toggles into the profile's own maps; `extends` replaces the list (`false` clears it); `description` replaces the text (`false` clears it); `launch` merges the launch settings, each `provider` and `claudeVersion` clearable with `false`. At least one field must be present. */
@@ -12056,32 +12108,6 @@ declare const ConfigProfileSetOutputSchema: z.ZodObject<{
12056
12108
  }, z.core.$strip>], "kind">]>;
12057
12109
  }, z.core.$strict>]>>>;
12058
12110
  description: z.ZodOptional<z.ZodString>;
12059
- extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
12060
- categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
12061
- all: z.ZodOptional<z.ZodBoolean>;
12062
- runtime: z.ZodOptional<z.ZodBoolean>;
12063
- history: z.ZodOptional<z.ZodBoolean>;
12064
- knowledge: z.ZodOptional<z.ZodBoolean>;
12065
- settings: z.ZodOptional<z.ZodBoolean>;
12066
- }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
12067
- all?: boolean | undefined;
12068
- runtime?: boolean | undefined;
12069
- history?: boolean | undefined;
12070
- knowledge?: boolean | undefined;
12071
- settings?: boolean | undefined;
12072
- }>>>;
12073
- launch: z.ZodOptional<z.ZodObject<{
12074
- skipPermissions: z.ZodOptional<z.ZodBoolean>;
12075
- remoteControl: z.ZodOptional<z.ZodBoolean>;
12076
- provider: z.ZodOptional<z.ZodString>;
12077
- headroom: z.ZodOptional<z.ZodBoolean>;
12078
- trackUsage: z.ZodOptional<z.ZodBoolean>;
12079
- claudeVersion: z.ZodOptional<z.ZodString>;
12080
- delay: z.ZodOptional<z.ZodString>;
12081
- pause: z.ZodOptional<z.ZodBoolean>;
12082
- routeByName: z.ZodOptional<z.ZodBoolean>;
12083
- explain: z.ZodOptional<z.ZodBoolean>;
12084
- }, z.core.$strict>>;
12085
12111
  models: z.ZodOptional<z.ZodObject<{
12086
12112
  virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
12087
12113
  mode: z.ZodEnum<{
@@ -12128,6 +12154,32 @@ declare const ConfigProfileSetOutputSchema: z.ZodObject<{
12128
12154
  thinking: z.ZodOptional<z.ZodBoolean>;
12129
12155
  }, z.core.$strict>, z.ZodNull]>>>;
12130
12156
  }, z.core.$strict>>;
12157
+ extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
12158
+ categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
12159
+ all: z.ZodOptional<z.ZodBoolean>;
12160
+ runtime: z.ZodOptional<z.ZodBoolean>;
12161
+ history: z.ZodOptional<z.ZodBoolean>;
12162
+ knowledge: z.ZodOptional<z.ZodBoolean>;
12163
+ settings: z.ZodOptional<z.ZodBoolean>;
12164
+ }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
12165
+ all?: boolean | undefined;
12166
+ runtime?: boolean | undefined;
12167
+ history?: boolean | undefined;
12168
+ knowledge?: boolean | undefined;
12169
+ settings?: boolean | undefined;
12170
+ }>>>;
12171
+ launch: z.ZodOptional<z.ZodObject<{
12172
+ skipPermissions: z.ZodOptional<z.ZodBoolean>;
12173
+ remoteControl: z.ZodOptional<z.ZodBoolean>;
12174
+ provider: z.ZodOptional<z.ZodString>;
12175
+ headroom: z.ZodOptional<z.ZodBoolean>;
12176
+ trackUsage: z.ZodOptional<z.ZodBoolean>;
12177
+ claudeVersion: z.ZodOptional<z.ZodString>;
12178
+ delay: z.ZodOptional<z.ZodString>;
12179
+ pause: z.ZodOptional<z.ZodBoolean>;
12180
+ routeByName: z.ZodOptional<z.ZodBoolean>;
12181
+ explain: z.ZodOptional<z.ZodBoolean>;
12182
+ }, z.core.$strict>>;
12131
12183
  }, z.core.$strict>;
12132
12184
  }, z.core.$strict>;
12133
12185
  declare const ConfigProfileRemoveInputSchema: z.ZodObject<{
@@ -12710,33 +12762,6 @@ declare const ConfigRuleAddOutputSchema: z.ZodObject<{
12710
12762
  key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
12711
12763
  }, z.core.$strip>], "kind">]>;
12712
12764
  }, z.core.$strict>]>>>;
12713
- $schema: z.ZodOptional<z.ZodString>;
12714
- extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
12715
- categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
12716
- all: z.ZodOptional<z.ZodBoolean>;
12717
- runtime: z.ZodOptional<z.ZodBoolean>;
12718
- history: z.ZodOptional<z.ZodBoolean>;
12719
- knowledge: z.ZodOptional<z.ZodBoolean>;
12720
- settings: z.ZodOptional<z.ZodBoolean>;
12721
- }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
12722
- all?: boolean | undefined;
12723
- runtime?: boolean | undefined;
12724
- history?: boolean | undefined;
12725
- knowledge?: boolean | undefined;
12726
- settings?: boolean | undefined;
12727
- }>>>;
12728
- launch: z.ZodOptional<z.ZodObject<{
12729
- skipPermissions: z.ZodOptional<z.ZodBoolean>;
12730
- remoteControl: z.ZodOptional<z.ZodBoolean>;
12731
- provider: z.ZodOptional<z.ZodString>;
12732
- headroom: z.ZodOptional<z.ZodBoolean>;
12733
- trackUsage: z.ZodOptional<z.ZodBoolean>;
12734
- claudeVersion: z.ZodOptional<z.ZodString>;
12735
- delay: z.ZodOptional<z.ZodString>;
12736
- pause: z.ZodOptional<z.ZodBoolean>;
12737
- routeByName: z.ZodOptional<z.ZodBoolean>;
12738
- explain: z.ZodOptional<z.ZodBoolean>;
12739
- }, z.core.$strict>>;
12740
12765
  models: z.ZodOptional<z.ZodObject<{
12741
12766
  virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
12742
12767
  mode: z.ZodEnum<{
@@ -12783,6 +12808,33 @@ declare const ConfigRuleAddOutputSchema: z.ZodObject<{
12783
12808
  thinking: z.ZodOptional<z.ZodBoolean>;
12784
12809
  }, z.core.$strict>, z.ZodNull]>>>;
12785
12810
  }, z.core.$strict>>;
12811
+ $schema: z.ZodOptional<z.ZodString>;
12812
+ extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
12813
+ categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
12814
+ all: z.ZodOptional<z.ZodBoolean>;
12815
+ runtime: z.ZodOptional<z.ZodBoolean>;
12816
+ history: z.ZodOptional<z.ZodBoolean>;
12817
+ knowledge: z.ZodOptional<z.ZodBoolean>;
12818
+ settings: z.ZodOptional<z.ZodBoolean>;
12819
+ }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
12820
+ all?: boolean | undefined;
12821
+ runtime?: boolean | undefined;
12822
+ history?: boolean | undefined;
12823
+ knowledge?: boolean | undefined;
12824
+ settings?: boolean | undefined;
12825
+ }>>>;
12826
+ launch: z.ZodOptional<z.ZodObject<{
12827
+ skipPermissions: z.ZodOptional<z.ZodBoolean>;
12828
+ remoteControl: z.ZodOptional<z.ZodBoolean>;
12829
+ provider: z.ZodOptional<z.ZodString>;
12830
+ headroom: z.ZodOptional<z.ZodBoolean>;
12831
+ trackUsage: z.ZodOptional<z.ZodBoolean>;
12832
+ claudeVersion: z.ZodOptional<z.ZodString>;
12833
+ delay: z.ZodOptional<z.ZodString>;
12834
+ pause: z.ZodOptional<z.ZodBoolean>;
12835
+ routeByName: z.ZodOptional<z.ZodBoolean>;
12836
+ explain: z.ZodOptional<z.ZodBoolean>;
12837
+ }, z.core.$strict>>;
12786
12838
  path: z.ZodString;
12787
12839
  configProfile: z.ZodOptional<z.ZodString>;
12788
12840
  identity: z.ZodOptional<z.ZodString>;
@@ -12946,33 +12998,6 @@ declare const ConfigRuleSetOutputSchema: z.ZodObject<{
12946
12998
  key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
12947
12999
  }, z.core.$strip>], "kind">]>;
12948
13000
  }, z.core.$strict>]>>>;
12949
- $schema: z.ZodOptional<z.ZodString>;
12950
- extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
12951
- categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
12952
- all: z.ZodOptional<z.ZodBoolean>;
12953
- runtime: z.ZodOptional<z.ZodBoolean>;
12954
- history: z.ZodOptional<z.ZodBoolean>;
12955
- knowledge: z.ZodOptional<z.ZodBoolean>;
12956
- settings: z.ZodOptional<z.ZodBoolean>;
12957
- }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
12958
- all?: boolean | undefined;
12959
- runtime?: boolean | undefined;
12960
- history?: boolean | undefined;
12961
- knowledge?: boolean | undefined;
12962
- settings?: boolean | undefined;
12963
- }>>>;
12964
- launch: z.ZodOptional<z.ZodObject<{
12965
- skipPermissions: z.ZodOptional<z.ZodBoolean>;
12966
- remoteControl: z.ZodOptional<z.ZodBoolean>;
12967
- provider: z.ZodOptional<z.ZodString>;
12968
- headroom: z.ZodOptional<z.ZodBoolean>;
12969
- trackUsage: z.ZodOptional<z.ZodBoolean>;
12970
- claudeVersion: z.ZodOptional<z.ZodString>;
12971
- delay: z.ZodOptional<z.ZodString>;
12972
- pause: z.ZodOptional<z.ZodBoolean>;
12973
- routeByName: z.ZodOptional<z.ZodBoolean>;
12974
- explain: z.ZodOptional<z.ZodBoolean>;
12975
- }, z.core.$strict>>;
12976
13001
  models: z.ZodOptional<z.ZodObject<{
12977
13002
  virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
12978
13003
  mode: z.ZodEnum<{
@@ -13019,6 +13044,33 @@ declare const ConfigRuleSetOutputSchema: z.ZodObject<{
13019
13044
  thinking: z.ZodOptional<z.ZodBoolean>;
13020
13045
  }, z.core.$strict>, z.ZodNull]>>>;
13021
13046
  }, z.core.$strict>>;
13047
+ $schema: z.ZodOptional<z.ZodString>;
13048
+ extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
13049
+ categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
13050
+ all: z.ZodOptional<z.ZodBoolean>;
13051
+ runtime: z.ZodOptional<z.ZodBoolean>;
13052
+ history: z.ZodOptional<z.ZodBoolean>;
13053
+ knowledge: z.ZodOptional<z.ZodBoolean>;
13054
+ settings: z.ZodOptional<z.ZodBoolean>;
13055
+ }, z.core.$strict>, z.ZodTransform<Partial<Record<"runtime" | "history" | "knowledge" | "settings", boolean>>, {
13056
+ all?: boolean | undefined;
13057
+ runtime?: boolean | undefined;
13058
+ history?: boolean | undefined;
13059
+ knowledge?: boolean | undefined;
13060
+ settings?: boolean | undefined;
13061
+ }>>>;
13062
+ launch: z.ZodOptional<z.ZodObject<{
13063
+ skipPermissions: z.ZodOptional<z.ZodBoolean>;
13064
+ remoteControl: z.ZodOptional<z.ZodBoolean>;
13065
+ provider: z.ZodOptional<z.ZodString>;
13066
+ headroom: z.ZodOptional<z.ZodBoolean>;
13067
+ trackUsage: z.ZodOptional<z.ZodBoolean>;
13068
+ claudeVersion: z.ZodOptional<z.ZodString>;
13069
+ delay: z.ZodOptional<z.ZodString>;
13070
+ pause: z.ZodOptional<z.ZodBoolean>;
13071
+ routeByName: z.ZodOptional<z.ZodBoolean>;
13072
+ explain: z.ZodOptional<z.ZodBoolean>;
13073
+ }, z.core.$strict>>;
13022
13074
  path: z.ZodString;
13023
13075
  configProfile: z.ZodOptional<z.ZodString>;
13024
13076
  identity: z.ZodOptional<z.ZodString>;
@@ -13354,12 +13406,10 @@ declare const DoctorFindingSchema: z.ZodObject<{
13354
13406
  "global-config": "global-config";
13355
13407
  "config-profile": "config-profile";
13356
13408
  identity: "identity";
13357
- keychain: "keychain";
13358
13409
  provider: "provider";
13359
- headroom: "headroom";
13360
- models: "models";
13361
13410
  frontdoor: "frontdoor";
13362
13411
  pool: "pool";
13412
+ keychain: "keychain";
13363
13413
  "ambient-credential": "ambient-credential";
13364
13414
  "binary-discovery": "binary-discovery";
13365
13415
  "claude-shim": "claude-shim";
@@ -13369,6 +13419,8 @@ declare const DoctorFindingSchema: z.ZodObject<{
13369
13419
  "directory-rules": "directory-rules";
13370
13420
  "categories-local": "categories-local";
13371
13421
  "active-identity": "active-identity";
13422
+ headroom: "headroom";
13423
+ models: "models";
13372
13424
  }>;
13373
13425
  subject: z.ZodOptional<z.ZodString>;
13374
13426
  severity: z.ZodEnum<{
@@ -13386,12 +13438,10 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
13386
13438
  "global-config": "global-config";
13387
13439
  "config-profile": "config-profile";
13388
13440
  identity: "identity";
13389
- keychain: "keychain";
13390
13441
  provider: "provider";
13391
- headroom: "headroom";
13392
- models: "models";
13393
13442
  frontdoor: "frontdoor";
13394
13443
  pool: "pool";
13444
+ keychain: "keychain";
13395
13445
  "ambient-credential": "ambient-credential";
13396
13446
  "binary-discovery": "binary-discovery";
13397
13447
  "claude-shim": "claude-shim";
@@ -13401,6 +13451,8 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
13401
13451
  "directory-rules": "directory-rules";
13402
13452
  "categories-local": "categories-local";
13403
13453
  "active-identity": "active-identity";
13454
+ headroom: "headroom";
13455
+ models: "models";
13404
13456
  }>;
13405
13457
  subject: z.ZodOptional<z.ZodString>;
13406
13458
  severity: z.ZodEnum<{
@@ -13421,9 +13473,9 @@ declare const UpdateCheckOutputSchema: z.ZodObject<{
13421
13473
  current: z.ZodString;
13422
13474
  latest: z.ZodString;
13423
13475
  action: z.ZodEnum<{
13424
- updated: "updated";
13425
13476
  current: "current";
13426
13477
  available: "available";
13478
+ updated: "updated";
13427
13479
  }>;
13428
13480
  }, z.core.$strict>;
13429
13481
  /** The Sign in with ChatGPT login's state as `codex status` reports it: no sign-in yet, signed in (with who, whether the plan scope was granted, and when the access token lapses), or a file that cannot be read. */
@@ -13473,12 +13525,12 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
13473
13525
  decision: z.ZodObject<{
13474
13526
  identity: z.ZodOptional<z.ZodString>;
13475
13527
  identitySource: z.ZodEnum<{
13476
- env: "env";
13477
- none: "none";
13478
13528
  "config-dir-escape-hatch": "config-dir-escape-hatch";
13479
13529
  argv: "argv";
13530
+ env: "env";
13480
13531
  "directory-pin": "directory-pin";
13481
13532
  "active-identity-file": "active-identity-file";
13533
+ none: "none";
13482
13534
  }>;
13483
13535
  pool: z.ZodOptional<z.ZodObject<{
13484
13536
  name: z.ZodString;
@@ -13865,6 +13917,8 @@ declare function ensureFrontDoor(params: {
13865
13917
  readonly ports: EnsureFrontDoorPorts;
13866
13918
  /** Replaces a serving door whatever its protocol, once: the restart a binary update asks for, so the new generation serves the sessions already running without waiting for the registry to empty. */
13867
13919
  readonly replace?: boolean;
13920
+ /** What this launch tells the door about itself beyond its token: the id its requests carry in their session header, and the models block it resolved when it added definitions of its own to the global one. Recorded in the launch's registry entry, so it lives and is pruned with the launch. */
13921
+ readonly session?: FrontDoorSessionDetails;
13868
13922
  }): {
13869
13923
  readonly port: number;
13870
13924
  readonly connectPort: number;