agent-shim 11.5.1 → 11.6.0

package/dist/cli.cjs

@@ -24697,6 +24697,35 @@ var init_store = __esm({
   }
 });
 
+// src/processRole.ts
+function enterProcessRole(role) {
+  const previous = currentRole;
+  currentRole = role;
+  return () => {
+    currentRole = previous;
+  };
+}
+function refuseToBlockInRole(operation) {
+  if (currentRole !== void 0) {
+    throw new BlockingInEventLoopError(operation, currentRole);
+  }
+}
+var currentRole, BlockingInEventLoopError;
+var init_processRole = __esm({
+  "src/processRole.ts"() {
+    "use strict";
+    init_cliError();
+    BlockingInEventLoopError = class extends CliError {
+      constructor(operation, role) {
+        super(
+          `${operation} blocks the calling thread, which in the ${role} is the event loop that answers every session; it must not run there (a launch planned inside the door reaches it through its own addresses, never through the launcher's synchronous coordination)`
+        );
+        this.name = "BlockingInEventLoopError";
+      }
+    };
+  }
+});
+
 // src/versionDiscovery.ts
 function defaultVersionsDir() {
   return import_node_path3.default.join(import_node_os.default.homedir(), ".local", "share", "claude", "versions");
@@ -28498,6 +28527,7 @@ function isErrorWithCode(error63, code) {
   return typeof error63 === "object" && error63 !== null && "code" in error63 && error63.code === code;
 }
 function realSleepSync(ms2) {
+  refuseToBlockInRole("a synchronous sleep");
   Atomics.wait(new Int32Array(new SharedArrayBuffer(INT32_BYTE_LENGTH)), 0, 0, ms2);
 }
 function realIsProcessAlive(pid) {
@@ -28786,6 +28816,7 @@ var import_node_child_process2, import_node_crypto4, import_node_fs3, import_nod
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_processRole();
     import_node_child_process2 = require("node:child_process");
     import_node_crypto4 = require("node:crypto");
     import_node_fs3 = __toESM(require("node:fs"), 1);
@@ -33976,7 +34007,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "11.5.1",
+      version: "11.6.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -61821,7 +61852,13 @@ function ensureFrontDoor(params) {
   };
   const stopAndAwaitExit = (supervisorPid, failure2) => {
     ports.stopSupervisor(supervisorPid);
+    const graceEnds = ports.now() + FRONTDOOR_EXIT_GRACE_MS;
+    let killed = false;
     while (ports.isRunning(supervisorPid)) {
+      if (!killed && ports.now() >= graceEnds) {
+        ports.killSupervisor(supervisorPid);
+        killed = true;
+      }
       if (ports.now() >= deadline) {
         throw new FrontDoorStartError(`${failure2}. Daemon log: ${paths.frontdoorLogPath}`);
       }
@@ -61833,6 +61870,11 @@ function ensureFrontDoor(params) {
     const supervisorPid = state?.supervisorPid;
     if (supervisorPid !== void 0 && !distrusted.has(supervisorPid) && ports.isRunning(supervisorPid)) {
       if (state?.port !== void 0 && state.connectPort !== void 0) {
+        if (supervisorPid === params.launcherPid && params.replace !== true && ports.isFrontDoorSupervisor(supervisorPid)) {
+          const token = (0, import_node_crypto10.randomUUID)();
+          writeFrontDoorSession(ports.fs, paths.frontdoorSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), token, supervisorPid });
+          return { port: state.port, connectPort: state.connectPort, token };
+        }
         const verdict = verifyWithRetry(state.port);
         if (verdict.ok && !replaced && !spawned && (params.replace === true || (state.protocol ?? 0) < FRONT_DOOR_PROTOCOL)) {
           stopAndAwaitExit(
@@ -61853,6 +61895,11 @@ function ensureFrontDoor(params) {
         }
         if (ports.isFrontDoorSupervisor(supervisorPid)) {
           const stranded = liveSessionsOn(supervisorPid);
+          if (params.replace === true && !replaced) {
+            stopAndAwaitExit(supervisorPid, `the front door (pid ${String(supervisorPid)}) stopped answering and did not exit when asked to`);
+            replaced = true;
+            continue;
+          }
           if (stranded > 0) {
             busyDoor = { pid: supervisorPid, sessions: stranded };
           } else {
@@ -61908,7 +61955,7 @@ function restartFrontDoor(params) {
   }
   return { action: "restarted", previousPid, pid };
 }
-var import_node_crypto10, FRONTDOOR_START_TIMEOUT_MS, FRONTDOOR_LAUNCHER_POLL_MS, FRONTDOOR_PROBE_ATTEMPTS, FrontDoorStartError;
+var import_node_crypto10, FRONTDOOR_START_TIMEOUT_MS, FRONTDOOR_LAUNCHER_POLL_MS, FRONTDOOR_PROBE_ATTEMPTS, FRONTDOOR_EXIT_GRACE_MS, FrontDoorStartError;
 var init_ensure2 = __esm({
   "src/frontdoor/ensure.ts"() {
     "use strict";
@@ -61919,6 +61966,7 @@ var init_ensure2 = __esm({
     FRONTDOOR_START_TIMEOUT_MS = 3e4;
     FRONTDOOR_LAUNCHER_POLL_MS = 100;
     FRONTDOOR_PROBE_ATTEMPTS = 3;
+    FRONTDOOR_EXIT_GRACE_MS = 5e3;
     FrontDoorStartError = class extends CliError {
       constructor(message) {
         super(message);
@@ -61930,6 +61978,7 @@ var init_ensure2 = __esm({
 
 // src/frontdoor/probe.ts
 function probeFrontDoorSync(port, caPem) {
+  refuseToBlockInRole("a synchronous probe of the front door");
   const shared = new SharedArrayBuffer(HEADER_SLOTS * INT32_BYTES + REASON_BYTES);
   const header = new Int32Array(shared, 0, HEADER_SLOTS);
   const worker = new import_node_worker_threads.Worker(PROBE_SOURCE, {
@@ -61956,6 +62005,7 @@ var import_node_worker_threads, PROBE_TIMEOUT_MS, PROBE_WAIT_MARGIN_MS, REASON_B
 var init_probe = __esm({
   "src/frontdoor/probe.ts"() {
     "use strict";
+    init_processRole();
     import_node_worker_threads = require("node:worker_threads");
     PROBE_TIMEOUT_MS = 2e3;
     PROBE_WAIT_MARGIN_MS = 1e3;
@@ -62048,6 +62098,9 @@ function realEnsurePorts(paths, spawnDaemon) {
     stopSupervisor: (pid) => {
       process.kill(pid, "SIGTERM");
     },
+    killSupervisor: (pid) => {
+      process.kill(pid, "SIGKILL");
+    },
     // Read fresh for each probe: a replacement supervisor may have regenerated an unparseable CA, and the probe must trust exactly what the serving door's leaf chains to.
     verifyListener: (port) => probeFrontDoorSync(port, import_node_fs13.default.readFileSync(paths.frontdoorCaCertFile, "utf8"))
   };
@@ -114076,6 +114129,7 @@ init_route();
 init_state();
 
 // src/frontdoor/supervisor.ts
+init_processRole();
 var import_node_path44 = __toESM(require("node:path"), 1);
 init_state();
 function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
@@ -114090,6 +114144,14 @@ var FRONTDOOR_SUPERVISOR_STILL_RUNNING = -1;
 var FRONTDOOR_POLL_MS = 1e3;
 var MS_PER_MINUTE3 = 6e4;
 async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {}) {
+  const leaveRole = enterProcessRole("frontdoor-supervisor");
+  try {
+    return await serveFrontDoor(idleShutdownMinutes, ports, options);
+  } finally {
+    leaveRole();
+  }
+}
+async function serveFrontDoor(idleShutdownMinutes, ports, options) {
   const { fs: fs23, paths } = ports;
   const servingBinary = ports.statOwnExecutable();
   const previous = readFrontDoorState(fs23, paths.frontdoorStateFile);

package/dist/index.cjs

@@ -2752,13 +2752,42 @@ var init_state = __esm({
   }
 });
 
+// src/processRole.ts
+function enterProcessRole(role) {
+  const previous = currentRole;
+  currentRole = role;
+  return () => {
+    currentRole = previous;
+  };
+}
+function refuseToBlockInRole(operation) {
+  if (currentRole !== void 0) {
+    throw new BlockingInEventLoopError(operation, currentRole);
+  }
+}
+var currentRole, BlockingInEventLoopError;
+var init_processRole = __esm({
+  "src/processRole.ts"() {
+    "use strict";
+    init_cliError();
+    BlockingInEventLoopError = class extends CliError {
+      constructor(operation, role) {
+        super(
+          `${operation} blocks the calling thread, which in the ${role} is the event loop that answers every session; it must not run there (a launch planned inside the door reaches it through its own addresses, never through the launcher's synchronous coordination)`
+        );
+        this.name = "BlockingInEventLoopError";
+      }
+    };
+  }
+});
+
 // package.json
 var package_default;
 var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "11.5.1",
+      version: "11.6.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -3932,6 +3961,7 @@ function isErrorWithCode(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function realSleepSync(ms) {
+  refuseToBlockInRole("a synchronous sleep");
   Atomics.wait(new Int32Array(new SharedArrayBuffer(INT32_BYTE_LENGTH)), 0, 0, ms);
 }
 function realIsProcessAlive(pid) {
@@ -4165,6 +4195,7 @@ var import_node_child_process2, import_node_crypto8, import_node_fs2, import_nod
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_processRole();
     import_node_child_process2 = require("node:child_process");
     import_node_crypto8 = require("node:crypto");
     import_node_fs2 = __toESM(require("node:fs"), 1);
@@ -6772,7 +6803,13 @@ function ensureFrontDoor(params) {
   };
   const stopAndAwaitExit = (supervisorPid, failure) => {
     ports.stopSupervisor(supervisorPid);
+    const graceEnds = ports.now() + FRONTDOOR_EXIT_GRACE_MS;
+    let killed = false;
     while (ports.isRunning(supervisorPid)) {
+      if (!killed && ports.now() >= graceEnds) {
+        ports.killSupervisor(supervisorPid);
+        killed = true;
+      }
       if (ports.now() >= deadline) {
         throw new FrontDoorStartError(`${failure}. Daemon log: ${paths.frontdoorLogPath}`);
       }
@@ -6784,6 +6821,11 @@ function ensureFrontDoor(params) {
     const supervisorPid = state?.supervisorPid;
     if (supervisorPid !== void 0 && !distrusted.has(supervisorPid) && ports.isRunning(supervisorPid)) {
       if (state?.port !== void 0 && state.connectPort !== void 0) {
+        if (supervisorPid === params.launcherPid && params.replace !== true && ports.isFrontDoorSupervisor(supervisorPid)) {
+          const token = (0, import_node_crypto9.randomUUID)();
+          writeFrontDoorSession(ports.fs, paths.frontdoorSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), token, supervisorPid });
+          return { port: state.port, connectPort: state.connectPort, token };
+        }
         const verdict = verifyWithRetry(state.port);
         if (verdict.ok && !replaced && !spawned && (params.replace === true || (state.protocol ?? 0) < FRONT_DOOR_PROTOCOL)) {
           stopAndAwaitExit(
@@ -6804,6 +6846,11 @@ function ensureFrontDoor(params) {
         }
         if (ports.isFrontDoorSupervisor(supervisorPid)) {
           const stranded = liveSessionsOn(supervisorPid);
+          if (params.replace === true && !replaced) {
+            stopAndAwaitExit(supervisorPid, `the front door (pid ${String(supervisorPid)}) stopped answering and did not exit when asked to`);
+            replaced = true;
+            continue;
+          }
           if (stranded > 0) {
             busyDoor = { pid: supervisorPid, sessions: stranded };
           } else {
@@ -6842,7 +6889,7 @@ function ensureFrontDoor(params) {
     ports.sleep(FRONTDOOR_LAUNCHER_POLL_MS);
   }
 }
-var import_node_crypto9, FRONTDOOR_START_TIMEOUT_MS, FRONTDOOR_LAUNCHER_POLL_MS, FRONTDOOR_PROBE_ATTEMPTS, FrontDoorStartError;
+var import_node_crypto9, FRONTDOOR_START_TIMEOUT_MS, FRONTDOOR_LAUNCHER_POLL_MS, FRONTDOOR_PROBE_ATTEMPTS, FRONTDOOR_EXIT_GRACE_MS, FrontDoorStartError;
 var init_ensure2 = __esm({
   "src/frontdoor/ensure.ts"() {
     "use strict";
@@ -6853,6 +6900,7 @@ var init_ensure2 = __esm({
     FRONTDOOR_START_TIMEOUT_MS = 3e4;
     FRONTDOOR_LAUNCHER_POLL_MS = 100;
     FRONTDOOR_PROBE_ATTEMPTS = 3;
+    FRONTDOOR_EXIT_GRACE_MS = 5e3;
     FrontDoorStartError = class extends CliError {
       constructor(message) {
         super(message);
@@ -8022,6 +8070,7 @@ var init_ownCli = __esm({
 
 // src/frontdoor/probe.ts
 function probeFrontDoorSync(port, caPem) {
+  refuseToBlockInRole("a synchronous probe of the front door");
   const shared = new SharedArrayBuffer(HEADER_SLOTS * INT32_BYTES + REASON_BYTES);
   const header = new Int32Array(shared, 0, HEADER_SLOTS);
   const worker = new import_node_worker_threads.Worker(PROBE_SOURCE, {
@@ -8048,6 +8097,7 @@ var import_node_worker_threads, PROBE_TIMEOUT_MS, PROBE_WAIT_MARGIN_MS, REASON_B
 var init_probe = __esm({
   "src/frontdoor/probe.ts"() {
     "use strict";
+    init_processRole();
     import_node_worker_threads = require("node:worker_threads");
     PROBE_TIMEOUT_MS = 2e3;
     PROBE_WAIT_MARGIN_MS = 1e3;
@@ -8140,6 +8190,9 @@ function realEnsurePorts(paths, spawnDaemon) {
     stopSupervisor: (pid) => {
       process.kill(pid, "SIGTERM");
     },
+    killSupervisor: (pid) => {
+      process.kill(pid, "SIGKILL");
+    },
     // Read fresh for each probe: a replacement supervisor may have regenerated an unparseable CA, and the probe must trust exactly what the serving door's leaf chains to.
     verifyListener: (port) => probeFrontDoorSync(port, import_node_fs11.default.readFileSync(paths.frontdoorCaCertFile, "utf8"))
   };
@@ -9361,6 +9414,7 @@ init_route();
 init_state();
 
 // src/frontdoor/supervisor.ts
+init_processRole();
 var import_node_path9 = __toESM(require("node:path"), 1);
 init_state();
 function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
@@ -9375,6 +9429,14 @@ var FRONTDOOR_SUPERVISOR_STILL_RUNNING = -1;
 var FRONTDOOR_POLL_MS = 1e3;
 var MS_PER_MINUTE = 6e4;
 async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {}) {
+  const leaveRole = enterProcessRole("frontdoor-supervisor");
+  try {
+    return await serveFrontDoor(idleShutdownMinutes, ports, options);
+  } finally {
+    leaveRole();
+  }
+}
+async function serveFrontDoor(idleShutdownMinutes, ports, options) {
   const { fs: fs12, paths } = ports;
   const servingBinary = ports.statOwnExecutable();
   const previous = readFrontDoorState(fs12, paths.frontdoorStateFile);

package/dist/index.mjs

@@ -2728,13 +2728,42 @@ var init_state = __esm({
   }
 });
 
+// src/processRole.ts
+function enterProcessRole(role) {
+  const previous = currentRole;
+  currentRole = role;
+  return () => {
+    currentRole = previous;
+  };
+}
+function refuseToBlockInRole(operation) {
+  if (currentRole !== void 0) {
+    throw new BlockingInEventLoopError(operation, currentRole);
+  }
+}
+var currentRole, BlockingInEventLoopError;
+var init_processRole = __esm({
+  "src/processRole.ts"() {
+    "use strict";
+    init_cliError();
+    BlockingInEventLoopError = class extends CliError {
+      constructor(operation, role) {
+        super(
+          `${operation} blocks the calling thread, which in the ${role} is the event loop that answers every session; it must not run there (a launch planned inside the door reaches it through its own addresses, never through the launcher's synchronous coordination)`
+        );
+        this.name = "BlockingInEventLoopError";
+      }
+    };
+  }
+});
+
 // package.json
 var package_default;
 var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "11.5.1",
+      version: "11.6.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -3913,6 +3942,7 @@ function isErrorWithCode(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function realSleepSync(ms) {
+  refuseToBlockInRole("a synchronous sleep");
   Atomics.wait(new Int32Array(new SharedArrayBuffer(INT32_BYTE_LENGTH)), 0, 0, ms);
 }
 function realIsProcessAlive(pid) {
@@ -4146,6 +4176,7 @@ var realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, real
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_processRole();
     init_load();
     init_versionDiscovery();
     init_supervisorProcesses();
@@ -6746,7 +6777,13 @@ function ensureFrontDoor(params) {
   };
   const stopAndAwaitExit = (supervisorPid, failure) => {
     ports.stopSupervisor(supervisorPid);
+    const graceEnds = ports.now() + FRONTDOOR_EXIT_GRACE_MS;
+    let killed = false;
     while (ports.isRunning(supervisorPid)) {
+      if (!killed && ports.now() >= graceEnds) {
+        ports.killSupervisor(supervisorPid);
+        killed = true;
+      }
       if (ports.now() >= deadline) {
         throw new FrontDoorStartError(`${failure}. Daemon log: ${paths.frontdoorLogPath}`);
       }
@@ -6758,6 +6795,11 @@ function ensureFrontDoor(params) {
     const supervisorPid = state?.supervisorPid;
     if (supervisorPid !== void 0 && !distrusted.has(supervisorPid) && ports.isRunning(supervisorPid)) {
       if (state?.port !== void 0 && state.connectPort !== void 0) {
+        if (supervisorPid === params.launcherPid && params.replace !== true && ports.isFrontDoorSupervisor(supervisorPid)) {
+          const token = randomUUID3();
+          writeFrontDoorSession(ports.fs, paths.frontdoorSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), token, supervisorPid });
+          return { port: state.port, connectPort: state.connectPort, token };
+        }
         const verdict = verifyWithRetry(state.port);
         if (verdict.ok && !replaced && !spawned && (params.replace === true || (state.protocol ?? 0) < FRONT_DOOR_PROTOCOL)) {
           stopAndAwaitExit(
@@ -6778,6 +6820,11 @@ function ensureFrontDoor(params) {
         }
         if (ports.isFrontDoorSupervisor(supervisorPid)) {
           const stranded = liveSessionsOn(supervisorPid);
+          if (params.replace === true && !replaced) {
+            stopAndAwaitExit(supervisorPid, `the front door (pid ${String(supervisorPid)}) stopped answering and did not exit when asked to`);
+            replaced = true;
+            continue;
+          }
           if (stranded > 0) {
             busyDoor = { pid: supervisorPid, sessions: stranded };
           } else {
@@ -6816,7 +6863,7 @@ function ensureFrontDoor(params) {
     ports.sleep(FRONTDOOR_LAUNCHER_POLL_MS);
   }
 }
-var FRONTDOOR_START_TIMEOUT_MS, FRONTDOOR_LAUNCHER_POLL_MS, FRONTDOOR_PROBE_ATTEMPTS, FrontDoorStartError;
+var FRONTDOOR_START_TIMEOUT_MS, FRONTDOOR_LAUNCHER_POLL_MS, FRONTDOOR_PROBE_ATTEMPTS, FRONTDOOR_EXIT_GRACE_MS, FrontDoorStartError;
 var init_ensure2 = __esm({
   "src/frontdoor/ensure.ts"() {
     "use strict";
@@ -6826,6 +6873,7 @@ var init_ensure2 = __esm({
     FRONTDOOR_START_TIMEOUT_MS = 3e4;
     FRONTDOOR_LAUNCHER_POLL_MS = 100;
     FRONTDOOR_PROBE_ATTEMPTS = 3;
+    FRONTDOOR_EXIT_GRACE_MS = 5e3;
     FrontDoorStartError = class extends CliError {
       constructor(message) {
         super(message);
@@ -7994,6 +8042,7 @@ var init_ownCli = __esm({
 // src/frontdoor/probe.ts
 import { Worker } from "node:worker_threads";
 function probeFrontDoorSync(port, caPem) {
+  refuseToBlockInRole("a synchronous probe of the front door");
   const shared = new SharedArrayBuffer(HEADER_SLOTS * INT32_BYTES + REASON_BYTES);
   const header = new Int32Array(shared, 0, HEADER_SLOTS);
   const worker = new Worker(PROBE_SOURCE, {
@@ -8020,6 +8069,7 @@ var PROBE_TIMEOUT_MS, PROBE_WAIT_MARGIN_MS, REASON_BYTES, HEADER_SLOTS, INT32_BY
 var init_probe = __esm({
   "src/frontdoor/probe.ts"() {
     "use strict";
+    init_processRole();
     PROBE_TIMEOUT_MS = 2e3;
     PROBE_WAIT_MARGIN_MS = 1e3;
     REASON_BYTES = 1024;
@@ -8112,6 +8162,9 @@ function realEnsurePorts(paths, spawnDaemon) {
     stopSupervisor: (pid) => {
       process.kill(pid, "SIGTERM");
     },
+    killSupervisor: (pid) => {
+      process.kill(pid, "SIGKILL");
+    },
     // Read fresh for each probe: a replacement supervisor may have regenerated an unparseable CA, and the probe must trust exactly what the serving door's leaf chains to.
     verifyListener: (port) => probeFrontDoorSync(port, fs11.readFileSync(paths.frontdoorCaCertFile, "utf8"))
   };
@@ -8948,6 +9001,7 @@ init_route();
 init_state();
 
 // src/frontdoor/supervisor.ts
+init_processRole();
 init_state();
 import path9 from "node:path";
 function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
@@ -8962,6 +9016,14 @@ var FRONTDOOR_SUPERVISOR_STILL_RUNNING = -1;
 var FRONTDOOR_POLL_MS = 1e3;
 var MS_PER_MINUTE = 6e4;
 async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {}) {
+  const leaveRole = enterProcessRole("frontdoor-supervisor");
+  try {
+    return await serveFrontDoor(idleShutdownMinutes, ports, options);
+  } finally {
+    leaveRole();
+  }
+}
+async function serveFrontDoor(idleShutdownMinutes, ports, options) {
   const { fs: fs12, paths } = ports;
   const servingBinary = ports.statOwnExecutable();
   const previous = readFrontDoorState(fs12, paths.frontdoorStateFile);

package/dist/types/index.d.ts

@@ -1332,8 +1332,8 @@ declare const HeadroomGlobalConfigSchema: z.ZodObject<{
     targetRatio: z.ZodOptional<z.ZodNumber>;
     ccr: z.ZodOptional<z.ZodEnum<{
         default: "default";
-        lossless: "lossless";
         none: "none";
+        lossless: "lossless";
     }>>;
     rolloutChannel: z.ZodOptional<z.ZodEnum<{
         beta: "beta";
@@ -1460,8 +1460,8 @@ declare const GlobalConfigSchema: z.ZodObject<{
         targetRatio: z.ZodOptional<z.ZodNumber>;
         ccr: z.ZodOptional<z.ZodEnum<{
             default: "default";
-            lossless: "lossless";
             none: "none";
+            lossless: "lossless";
         }>>;
         rolloutChannel: z.ZodOptional<z.ZodEnum<{
             beta: "beta";
@@ -4163,12 +4163,12 @@ declare const CheckReportJsonSchema: z.ZodObject<{
     identity: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            env: "env";
-            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
+            env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
+            none: "none";
         }>;
     }, z.core.$strict>;
     pool: z.ZodOptional<z.ZodObject<{
@@ -4246,11 +4246,11 @@ declare const CheckReportJsonSchema: z.ZodObject<{
             "category-default": "category-default";
         }>;
         category: z.ZodNullable<z.ZodEnum<{
+            secret: "secret";
             runtime: "runtime";
             history: "history";
             knowledge: "knowledge";
             settings: "settings";
-            secret: "secret";
         }>>;
         rule: z.ZodOptional<z.ZodObject<{
             key: z.ZodString;
@@ -5656,6 +5656,7 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -5731,7 +5732,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -5775,6 +5775,7 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -5850,7 +5851,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -6942,9 +6942,9 @@ declare function createLifecycleApiRouter(deps: LifecycleApiDeps): {
             current: zod.ZodString;
             latest: zod.ZodString;
             action: zod.ZodEnum<{
-                updated: "updated";
                 current: "current";
                 available: "available";
+                updated: "updated";
             }>;
         }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
@@ -7191,12 +7191,12 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
-                    env: "env";
-                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
+                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
+                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -7791,12 +7791,12 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
-                    env: "env";
-                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
+                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
+                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -7874,11 +7874,11 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "category-default": "category-default";
                 }>;
                 category: zod.ZodNullable<zod.ZodEnum<{
+                    secret: "secret";
                     runtime: "runtime";
                     history: "history";
                     knowledge: "knowledge";
                     settings: "settings";
-                    secret: "secret";
                 }>>;
                 rule: zod.ZodOptional<zod.ZodObject<{
                     key: zod.ZodString;
@@ -8097,11 +8097,10 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "global-config": "global-config";
                     "config-profile": "config-profile";
                     identity: "identity";
-                    keychain: "keychain";
                     provider: "provider";
-                    headroom: "headroom";
                     frontdoor: "frontdoor";
                     pool: "pool";
+                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
@@ -8111,6 +8110,7 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
+                    headroom: "headroom";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -8303,12 +8303,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
-                    env: "env";
-                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
+                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
+                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -8606,6 +8606,7 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8681,7 +8682,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -8725,6 +8725,7 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8800,7 +8801,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -9684,9 +9684,9 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             current: zod.ZodString;
             latest: zod.ZodString;
             action: zod.ZodEnum<{
-                updated: "updated";
                 current: "current";
                 available: "available";
+                updated: "updated";
             }>;
         }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
@@ -9885,12 +9885,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
-                    env: "env";
-                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
+                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
+                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -9968,11 +9968,11 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "category-default": "category-default";
                 }>;
                 category: zod.ZodNullable<zod.ZodEnum<{
+                    secret: "secret";
                     runtime: "runtime";
                     history: "history";
                     knowledge: "knowledge";
                     settings: "settings";
-                    secret: "secret";
                 }>>;
                 rule: zod.ZodOptional<zod.ZodObject<{
                     key: zod.ZodString;
@@ -10191,11 +10191,10 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "global-config": "global-config";
                     "config-profile": "config-profile";
                     identity: "identity";
-                    keychain: "keychain";
                     provider: "provider";
-                    headroom: "headroom";
                     frontdoor: "frontdoor";
                     pool: "pool";
+                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
@@ -10205,6 +10204,7 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
+                    headroom: "headroom";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -10714,6 +10714,7 @@ declare const ConfigProfileAddOutputSchema: z.ZodObject<{
     kind: z.ZodLiteral<"profile">;
     name: z.ZodString;
     value: z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
         entries: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
             value: z.ZodBoolean;
             when: z.ZodUnion<readonly [z.ZodObject<{
@@ -10789,7 +10790,6 @@ declare const ConfigProfileAddOutputSchema: z.ZodObject<{
                 key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
             }, z.core.$strip>], "kind">]>;
         }, z.core.$strict>]>>>;
-        description: z.ZodOptional<z.ZodString>;
         extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
         categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
             all: z.ZodOptional<z.ZodBoolean>;
@@ -10835,6 +10835,7 @@ declare const ConfigProfileSetOutputSchema: z.ZodObject<{
     kind: z.ZodLiteral<"profile">;
     name: z.ZodString;
     value: z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
         entries: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
             value: z.ZodBoolean;
             when: z.ZodUnion<readonly [z.ZodObject<{
@@ -10910,7 +10911,6 @@ declare const ConfigProfileSetOutputSchema: z.ZodObject<{
                 key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
             }, z.core.$strip>], "kind">]>;
         }, z.core.$strict>]>>>;
-        description: z.ZodOptional<z.ZodString>;
         extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
         categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
             all: z.ZodOptional<z.ZodBoolean>;
@@ -12037,11 +12037,10 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "global-config": "global-config";
         "config-profile": "config-profile";
         identity: "identity";
-        keychain: "keychain";
         provider: "provider";
-        headroom: "headroom";
         frontdoor: "frontdoor";
         pool: "pool";
+        keychain: "keychain";
         "ambient-credential": "ambient-credential";
         "binary-discovery": "binary-discovery";
         "claude-shim": "claude-shim";
@@ -12051,6 +12050,7 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "directory-rules": "directory-rules";
         "categories-local": "categories-local";
         "active-identity": "active-identity";
+        headroom: "headroom";
     }>;
     subject: z.ZodOptional<z.ZodString>;
     severity: z.ZodEnum<{
@@ -12068,11 +12068,10 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "global-config": "global-config";
             "config-profile": "config-profile";
             identity: "identity";
-            keychain: "keychain";
             provider: "provider";
-            headroom: "headroom";
             frontdoor: "frontdoor";
             pool: "pool";
+            keychain: "keychain";
             "ambient-credential": "ambient-credential";
             "binary-discovery": "binary-discovery";
             "claude-shim": "claude-shim";
@@ -12082,6 +12081,7 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "directory-rules": "directory-rules";
             "categories-local": "categories-local";
             "active-identity": "active-identity";
+            headroom: "headroom";
         }>;
         subject: z.ZodOptional<z.ZodString>;
         severity: z.ZodEnum<{
@@ -12102,9 +12102,9 @@ declare const UpdateCheckOutputSchema: z.ZodObject<{
     current: z.ZodString;
     latest: z.ZodString;
     action: z.ZodEnum<{
-        updated: "updated";
         current: "current";
         available: "available";
+        updated: "updated";
     }>;
 }, z.core.$strict>;
 /** The Sign in with ChatGPT login's state as `codex status` reports it: no sign-in yet, signed in (with who, whether the plan scope was granted, and when the access token lapses), or a file that cannot be read. */
@@ -12154,12 +12154,12 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
     decision: z.ZodObject<{
         identity: z.ZodOptional<z.ZodString>;
         identitySource: z.ZodEnum<{
-            env: "env";
-            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
+            env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
+            none: "none";
         }>;
         pool: z.ZodOptional<z.ZodObject<{
             name: z.ZodString;
@@ -12533,6 +12533,8 @@ interface EnsureFrontDoorPorts {
     readonly verifyListener: (port: number) => ListenerVerdict;
     /** Asks a running front-door supervisor to exit, without waiting for it to: the caller polls `isRunning`. Only ever called for a pid whose recorded listener has just authenticated as agent-shim's own, or whose process is agent-shim's front-door supervisor (`isFrontDoorSupervisor`). */
     readonly stopSupervisor: (pid: number) => void;
+    /** Ends a supervisor that did not exit when asked to, without giving it the chance to refuse: a door whose event loop is blocked never runs its signal handler. Called only for a pid `isFrontDoorSupervisor` has just confirmed, after `stopSupervisor` and a grace period. */
+    readonly killSupervisor: (pid: number) => void;
     /** Whether `pid` is a live agent-shim front-door supervisor process, read from the process's own command line. This is what separates a wedged door of this tool, which a replacement must retire so the two never coexist, from an unrelated process that reuses the recorded pid, which must never be signalled. */
     readonly isFrontDoorSupervisor: (pid: number) => boolean;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "11.5.1",
+  "version": "11.6.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",