agent-shim 11.81.0 → 11.83.0

package/dist/index.cjs

@@ -1128,7 +1128,7 @@ var init_schema = __esm({
       resumeOnLimit: import_zod3.z.boolean().optional(),
       /** Whether a supervised session's context is compacted before its identity's quota is spent, so the resume on the next member writes a small context instead of a large one. Needs `resumeOnLimit`. Absent means false. */
       compactBeforeLimit: import_zod3.z.boolean().optional(),
-      /** The share of a quota window, in whole percent, at which sessions are compacted. Absent means the launcher decides from what compacting every session on the member would cost against what its five-hour window has left. Needs `compactBeforeLimit`. */
+      /** The share of a quota window, in whole percent, at which sessions are compacted. Absent means the launcher decides from what compacting every session on the member would cost against what its tightest quota window has left. Needs `compactBeforeLimit`. */
       compactAtUtilisation: CompactAtUtilisationSchema.optional()
     }).refine((pool) => pool.compactBeforeLimit !== true || pool.resumeOnLimit === true, { message: "compactBeforeLimit needs resumeOnLimit, since a session that is not moved has no cold cache to avoid", path: ["compactBeforeLimit"] }).refine((pool) => pool.compactAtUtilisation === void 0 || pool.compactBeforeLimit === true, { message: "compactAtUtilisation needs compactBeforeLimit", path: ["compactAtUtilisation"] });
     WEEKDAYS = ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
@@ -1300,7 +1300,7 @@ function parseIgnoringUnrecognisedKeys(schema, raw) {
   return second.success ? { success: true, data: second.data, ignored } : { success: false, issues: second.error.issues };
 }
 function describeIgnoredKeys(filePath, ignored) {
-  const places = ignored.map(({ path: path42, keys }) => `${path42.length === 0 ? "" : `${path42.map(String).join(".")}.`}${keys.join(", ")}`);
+  const places = ignored.map(({ path: path45, keys }) => `${path45.length === 0 ? "" : `${path45.map(String).join(".")}.`}${keys.join(", ")}`);
   return `${filePath} has settings this version of agent-shim does not know and ignores: ${places.join("; ")}. A newer release may read them.`;
 }
 function noteIgnoredKeys(filePath, ignored) {
@@ -1322,9 +1322,9 @@ function restoreIgnoredKeys(filePath, value) {
     return value;
   }
   const restored = structuredClone(value);
-  for (const { path: path42, values } of ignored) {
+  for (const { path: path45, values } of ignored) {
     let holder = restored;
-    for (const step of path42) {
+    for (const step of path45) {
       holder = isRecord(holder) ? holder[step] : void 0;
     }
     if (isRecord(holder)) {
@@ -1371,6 +1371,12 @@ function captureRuleEntryOrders(value) {
   }
   return rules.map((rule) => captureEntryOrder(rule));
 }
+function unparseableFile(error, filepath) {
+  if (error instanceof SyntaxError) {
+    return new ConfigFileNotJsonError(filepath);
+  }
+  return error instanceof Error && error.name === "YAMLException" ? new ConfigFileNotJsonError(filepath, "YAML") : void 0;
+}
 function cosmiconfigReader(explorer = createExplorer()) {
   return (filepath) => {
     let result;
@@ -1381,7 +1387,7 @@ function cosmiconfigReader(explorer = createExplorer()) {
       if (code === "ENOENT") {
         return void 0;
       }
-      throw error;
+      throw unparseableFile(error, filepath) ?? error;
     }
     if (result === null || result.isEmpty === true) {
       return void 0;
@@ -1406,7 +1412,7 @@ function loadConfigFile(filepath, schema, read = cosmiconfigReader()) {
     ruleEntryOrders: captureRuleEntryOrders(raw)
   };
 }
-var import_cosmiconfig, ConfigValidationError;
+var import_cosmiconfig, ConfigValidationError, ConfigFileNotJsonError;
 var init_load = __esm({
   "src/config/load.ts"() {
     "use strict";
@@ -1425,6 +1431,16 @@ ${detail}`);
       filepath;
       issues;
     };
+    ConfigFileNotJsonError = class extends CliError {
+      constructor(filepath, format = "JSON") {
+        super(`${filepath} is not valid ${format}.`);
+        this.filepath = filepath;
+        this.format = format;
+        this.name = "ConfigFileNotJsonError";
+      }
+      filepath;
+      format;
+    };
   }
 });
 
@@ -1437,7 +1453,12 @@ function readJson(filePath, schema, storeFs = nodeStoreFs) {
   if (raw === void 0) {
     return void 0;
   }
-  const parsed = JSON.parse(raw);
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (error) {
+    throw error instanceof SyntaxError ? new ConfigFileNotJsonError(filePath) : error;
+  }
   const result = parseIgnoringUnrecognisedKeys(schema, parsed);
   if (!result.success) {
     throw new ConfigValidationError(filePath, result.issues);
@@ -1729,6 +1750,24 @@ function evaluateWhen(when, context) {
   }
   return { status: "definite", passed: failed.length === 0, checked, failed };
 }
+function referencesFact(when, key) {
+  if (when === void 0 || !("kind" in when)) {
+    return false;
+  }
+  const walk2 = (node) => {
+    if (Array.isArray(node)) {
+      return node.some(walk2);
+    }
+    if (typeof node !== "object" || node === null) {
+      return false;
+    }
+    if ("kind" in node && node.kind === "reference" && "key" in node && node.key === key) {
+      return true;
+    }
+    return Object.values(node).some(walk2);
+  };
+  return walk2(when);
+}
 function isVacuousWhen(when) {
   return when !== void 0 && !("kind" in when) && Object.keys(when).length === 0;
 }
@@ -2925,6 +2964,14 @@ function acquireIdentityLock(params) {
       return {
         path: lockPath,
         token,
+        refresh: () => {
+          const current = parseLockRecord(params.fs.readFileUtf8(lockPath));
+          if (current?.token !== token) {
+            throw new IdentityLockLostError(params.identity);
+          }
+          params.fs.writeFilePrivate(lockPath, `${JSON.stringify({ ...current, acquiredAtMs: params.nowMs() })}
+`);
+        },
         release: () => {
           const current = parseLockRecord(params.fs.readFileUtf8(lockPath));
           if (current !== void 0 && current.token !== token) {
@@ -2934,7 +2981,19 @@ function acquireIdentityLock(params) {
         }
       };
     }
-    const existing = parseLockRecord(params.fs.readFileUtf8(lockPath));
+    const raw = params.fs.readFileUtf8(lockPath);
+    if (raw === void 0) {
+      continue;
+    }
+    let existing = parseLockRecord(raw);
+    if (existing === void 0) {
+      params.sleep(retryDelayMs);
+      const again = params.fs.readFileUtf8(lockPath);
+      if (again === void 0) {
+        continue;
+      }
+      existing = parseLockRecord(again);
+    }
     if (existing === void 0) {
       params.fs.removeRecursive(lockPath);
       continue;
@@ -2949,7 +3008,7 @@ function acquireIdentityLock(params) {
   }
   throw new IdentityLockBusyError(params.identity, lockPath, lastHolderPid);
 }
-var import_node_crypto2, import_node_path7, DEFAULT_STALE_AFTER_MS, DEFAULT_RETRY_DELAY_MS, DEFAULT_MAX_ATTEMPTS, IdentityLockBusyError;
+var import_node_crypto2, import_node_path7, DEFAULT_STALE_AFTER_MS, DEFAULT_RETRY_DELAY_MS, DEFAULT_MAX_ATTEMPTS, IdentityLockLostError, IdentityLockBusyError;
 var init_lock = __esm({
   "src/launcher/lock.ts"() {
     "use strict";
@@ -2959,6 +3018,14 @@ var init_lock = __esm({
     DEFAULT_STALE_AFTER_MS = 12e4;
     DEFAULT_RETRY_DELAY_MS = 50;
     DEFAULT_MAX_ATTEMPTS = 200;
+    IdentityLockLostError = class extends CliError {
+      constructor(identity) {
+        super(`The lock on identity "${identity}" was taken over by another process while it was held, so nothing it guards can be assumed unchanged.`);
+        this.identity = identity;
+        this.name = "IdentityLockLostError";
+      }
+      identity;
+    };
     IdentityLockBusyError = class extends CliError {
       constructor(identity, lockPath, holderPid) {
         super(
@@ -2977,8 +3044,8 @@ var init_lock = __esm({
 });
 
 // src/launcher/farm.ts
-function readFarmManifest(fs14, farmRoot) {
-  const raw = fs14.readFileUtf8(import_node_path8.default.join(farmRoot, FARM_MANIFEST_FILENAME)) ?? fs14.readFileUtf8(import_node_path8.default.join(farmRoot, LEGACY_FARM_MANIFEST_FILENAME));
+function readFarmManifest(fs15, farmRoot) {
+  const raw = fs15.readFileUtf8(import_node_path8.default.join(farmRoot, FARM_MANIFEST_FILENAME)) ?? fs15.readFileUtf8(import_node_path8.default.join(farmRoot, LEGACY_FARM_MANIFEST_FILENAME));
   if (raw === void 0) {
     return void 0;
   }
@@ -3036,9 +3103,9 @@ function buildEntryFacts(params) {
     entries
   };
 }
-function listSubtree(fs14, root, rel) {
+function listSubtree(fs15, root, rel) {
   const absolute = import_node_path8.default.join(root, rel);
-  const stat = fs14.lstat(absolute);
+  const stat = fs15.lstat(absolute);
   if (stat === void 0) {
     return [];
   }
@@ -3046,10 +3113,10 @@ function listSubtree(fs14, root, rel) {
     return [{ rel, kind: "symlink" }];
   }
   if (stat.kind === "dir") {
-    const children = [...fs14.readdir(absolute)].sort().flatMap((name) => listSubtree(fs14, root, `${rel}/${name}`));
+    const children = [...fs15.readdir(absolute)].sort().flatMap((name) => listSubtree(fs15, root, `${rel}/${name}`));
     return [{ rel, kind: "dir" }, ...children];
   }
-  const contentHash = fs14.hashFile(absolute);
+  const contentHash = fs15.hashFile(absolute);
   return [{ rel, kind: "file", ...contentHash === void 0 ? {} : { contentHash } }];
 }
 function topLevelScopeRoots(roots) {
@@ -3063,25 +3130,25 @@ function topLevelScopeRoots(roots) {
   }
   return kept;
 }
-function reconciliationScope(fs14, farmRoot, manifest) {
+function reconciliationScope(fs15, farmRoot, manifest) {
   if (manifest !== void 0) {
     return topLevelScopeRoots(manifest.materialised);
   }
-  return [...fs14.readdir(farmRoot)].filter((name) => name !== FARM_MANIFEST_FILENAME && name !== LEGACY_FARM_MANIFEST_FILENAME && fs14.lstat(import_node_path8.default.join(farmRoot, name))?.kind === "dir").sort();
+  return [...fs15.readdir(farmRoot)].filter((name) => name !== FARM_MANIFEST_FILENAME && name !== LEGACY_FARM_MANIFEST_FILENAME && fs15.lstat(import_node_path8.default.join(farmRoot, name))?.kind === "dir").sort();
 }
-function collectFarmListing(fs14, farmRoot, scopeRoots) {
-  return scopeRoots.flatMap((root) => listSubtree(fs14, farmRoot, root));
+function collectFarmListing(fs15, farmRoot, scopeRoots) {
+  return scopeRoots.flatMap((root) => listSubtree(fs15, farmRoot, root));
 }
-function collectCanonicalCounterparts(fs14, claudeHome, farmListing) {
+function collectCanonicalCounterparts(fs15, claudeHome, farmListing) {
   const out = [];
   for (const entry of farmListing) {
     const absolute = import_node_path8.default.join(claudeHome, entry.rel);
-    const stat = fs14.lstat(absolute);
+    const stat = fs15.lstat(absolute);
     if (stat === void 0) {
       continue;
     }
     if (stat.kind === "file") {
-      const contentHash = fs14.hashFile(absolute);
+      const contentHash = fs15.hashFile(absolute);
       out.push({ rel: entry.rel, kind: "file", ...contentHash === void 0 ? {} : { contentHash } });
       continue;
     }
@@ -3323,6 +3390,9 @@ function resyncFarm(params) {
       farmRoot,
       classification: params.classification
     });
+    if (params.identityExists?.() === false) {
+      throw new IdentityGoneError(params.identity);
+    }
     const previousManifest = readFarmManifest(params.fs, farmRoot);
     const scope = reconciliationScope(params.fs, farmRoot, previousManifest);
     const farmListing = collectFarmListing(params.fs, farmRoot, scope);
@@ -3438,7 +3508,7 @@ function recoveryDiagnostics(recovery, identity) {
     }
   ];
 }
-var import_node_path8, import_zod4, FARM_MANIFEST_FILENAME, FarmManifestSchema;
+var import_node_path8, import_zod4, FARM_MANIFEST_FILENAME, FarmManifestSchema, IdentityGoneError;
 var init_farm = __esm({
   "src/launcher/farm.ts"() {
     "use strict";
@@ -3447,6 +3517,7 @@ var init_farm = __esm({
     init_classify();
     init_reconcile();
     init_pipeline();
+    init_cliError();
     init_legacy();
     init_lock();
     FARM_MANIFEST_FILENAME = ".agent-shim-farm.json";
@@ -3460,6 +3531,14 @@ var init_farm = __esm({
       materialised: import_zod4.z.array(import_zod4.z.string()),
       links: import_zod4.z.array(import_zod4.z.strictObject({ rel: import_zod4.z.string(), target: import_zod4.z.string() }))
     });
+    IdentityGoneError = class extends CliError {
+      constructor(identity) {
+        super(`Identity "${identity}" no longer exists: it was renamed or removed while this launch waited for it. Launch it under its current name.`);
+        this.identity = identity;
+        this.name = "IdentityGoneError";
+      }
+      identity;
+    };
   }
 });
 
@@ -3852,10 +3931,10 @@ var init_route = __esm({
 });
 
 // src/frontdoor/state.ts
-function readFrontDoorState(fs14, stateFile) {
+function readFrontDoorState(fs15, stateFile) {
   let raw;
   try {
-    raw = fs14.readFileUtf8(stateFile);
+    raw = fs15.readFileUtf8(stateFile);
   } catch {
     return void 0;
   }
@@ -3869,9 +3948,9 @@ function readFrontDoorState(fs14, stateFile) {
     return void 0;
   }
 }
-function writeFrontDoorState(fs14, stateFile, state) {
-  fs14.mkdirp(import_node_path9.default.dirname(stateFile));
-  fs14.writeFilePrivate(stateFile, `${JSON.stringify(state, null, 2)}
+function writeFrontDoorState(fs15, stateFile, state) {
+  fs15.mkdirp(import_node_path9.default.dirname(stateFile));
+  fs15.writeFilePrivate(stateFile, `${JSON.stringify(state, null, 2)}
 `);
 }
 function directOrigin(port) {
@@ -3881,37 +3960,37 @@ function frontDoorOrigin(state) {
   const port = state?.directPort ?? state?.lastDirectPort;
   return port === void 0 ? void 0 : directOrigin(port);
 }
-function writeFrontDoorDirectRecord(fs14, recordsDir, record) {
-  fs14.mkdirp(recordsDir);
-  fs14.writeFilePrivate(import_node_path9.default.join(recordsDir, `${String(record.pid)}.json`), `${JSON.stringify({ directPort: record.directPort })}
+function writeFrontDoorDirectRecord(fs15, recordsDir, record) {
+  fs15.mkdirp(recordsDir);
+  fs15.writeFilePrivate(import_node_path9.default.join(recordsDir, `${String(record.pid)}.json`), `${JSON.stringify({ directPort: record.directPort })}
 `);
 }
-function removeFrontDoorDirectRecord(fs14, recordsDir, pid) {
-  fs14.removeRecursive(import_node_path9.default.join(recordsDir, `${String(pid)}.json`));
+function removeFrontDoorDirectRecord(fs15, recordsDir, pid) {
+  fs15.removeRecursive(import_node_path9.default.join(recordsDir, `${String(pid)}.json`));
 }
-function markFrontDoorDraining(fs14, markersDir, pid) {
-  fs14.mkdirp(markersDir);
-  fs14.writeFilePrivate(import_node_path9.default.join(markersDir, String(pid)), "\n");
+function markFrontDoorDraining(fs15, markersDir, pid) {
+  fs15.mkdirp(markersDir);
+  fs15.writeFilePrivate(import_node_path9.default.join(markersDir, String(pid)), "\n");
 }
-function unmarkFrontDoorDraining(fs14, markersDir, pid) {
-  fs14.removeRecursive(import_node_path9.default.join(markersDir, String(pid)));
+function unmarkFrontDoorDraining(fs15, markersDir, pid) {
+  fs15.removeRecursive(import_node_path9.default.join(markersDir, String(pid)));
 }
-function listDrainingFrontDoors(fs14, markersDir, isRunning) {
-  return fs14.readdir(markersDir).flatMap((file) => /^[1-9]\d*$/.test(file) && Number.isSafeInteger(Number(file)) ? [Number(file)] : []).filter(isRunning).sort((a, b) => a - b);
+function listDrainingFrontDoors(fs15, markersDir, isRunning) {
+  return fs15.readdir(markersDir).flatMap((file) => /^[1-9]\d*$/.test(file) && Number.isSafeInteger(Number(file)) ? [Number(file)] : []).filter(isRunning).sort((a, b) => a - b);
 }
 function recordPid(file) {
   const pidText = /^([1-9]\d*)\.json$/.exec(file)?.[1];
   const pid = pidText === void 0 ? void 0 : Number(pidText);
   return pid !== void 0 && Number.isSafeInteger(pid) ? pid : void 0;
 }
-function readDirectRecordEntry(fs14, recordsDir, file) {
+function readDirectRecordEntry(fs15, recordsDir, file) {
   const pid = recordPid(file);
   if (pid === void 0) {
     return void 0;
   }
   let raw;
   try {
-    raw = fs14.readFileUtf8(import_node_path9.default.join(recordsDir, file));
+    raw = fs15.readFileUtf8(import_node_path9.default.join(recordsDir, file));
   } catch {
     return void 0;
   }
@@ -3925,37 +4004,37 @@ function readDirectRecordEntry(fs14, recordsDir, file) {
     return { malformed: true };
   }
 }
-function listFrontDoorDirectRecords(fs14, recordsDir) {
-  return fs14.readdir(recordsDir).flatMap((file) => {
-    const entry = readDirectRecordEntry(fs14, recordsDir, file);
+function listFrontDoorDirectRecords(fs15, recordsDir) {
+  return fs15.readdir(recordsDir).flatMap((file) => {
+    const entry = readDirectRecordEntry(fs15, recordsDir, file);
     return entry?.record === void 0 ? [] : [entry.record];
   }).sort((a, b) => a.pid - b.pid);
 }
-function pruneMalformedFrontDoorDirectFiles(fs14, recordsDir, isRunning) {
-  for (const file of fs14.readdir(recordsDir)) {
+function pruneMalformedFrontDoorDirectFiles(fs15, recordsDir, isRunning) {
+  for (const file of fs15.readdir(recordsDir)) {
     const writer = RECORD_TEMPORARY_FILE.exec(file)?.[1];
     const stale = writer !== void 0 && !isRunning(Number(writer));
-    if (stale || readDirectRecordEntry(fs14, recordsDir, file)?.malformed === true) {
-      fs14.removeRecursive(import_node_path9.default.join(recordsDir, file));
+    if (stale || readDirectRecordEntry(fs15, recordsDir, file)?.malformed === true) {
+      fs15.removeRecursive(import_node_path9.default.join(recordsDir, file));
     }
   }
 }
 function liveFrontDoorDirectRecords(records, liveness) {
   return records.filter((record) => liveness.doors.has(record.pid) || liveness.unknown.has(record.pid));
 }
-function pruneDeadFrontDoorDirectRecords(fs14, recordsDir, records, liveness) {
+function pruneDeadFrontDoorDirectRecords(fs15, recordsDir, records, liveness) {
   for (const record of records) {
     if (!liveness.doors.has(record.pid) && !liveness.unknown.has(record.pid)) {
-      removeFrontDoorDirectRecord(fs14, recordsDir, record.pid);
+      removeFrontDoorDirectRecord(fs15, recordsDir, record.pid);
     }
   }
 }
 function recordOf(details) {
   return details === void 0 ? {} : { sessionId: details.sessionId, ...details.models === void 0 ? {} : { models: details.models } };
 }
-function writeFrontDoorSession(fs14, sessionsDir, session) {
-  fs14.mkdirPrivate(sessionsDir);
-  fs14.writeFilePrivate(import_node_path9.default.join(sessionsDir, sessionRecordName(session.pid)), `${JSON.stringify(session, null, 2)}
+function writeFrontDoorSession(fs15, sessionsDir, session) {
+  fs15.mkdirPrivate(sessionsDir);
+  fs15.writeFilePrivate(import_node_path9.default.join(sessionsDir, sessionRecordName(session.pid)), `${JSON.stringify(session, null, 2)}
 `);
 }
 function sessionRecordName(pid) {
@@ -3967,32 +4046,32 @@ function isSessionRecordName(name) {
 function summaryOf(session) {
   return { pid: session.pid, startedAt: session.startedAt, ...session.supervisorPid === void 0 ? {} : { supervisorPid: session.supervisorPid } };
 }
-function readFrontDoorSessionRecord(fs14, sessionsDir, name) {
+function readFrontDoorSessionRecord(fs15, sessionsDir, name) {
   try {
-    const parsed = FrontDoorSessionSchema.safeParse(JSON.parse(fs14.readFileUtf8(import_node_path9.default.join(sessionsDir, name)) ?? ""));
+    const parsed = FrontDoorSessionSchema.safeParse(JSON.parse(fs15.readFileUtf8(import_node_path9.default.join(sessionsDir, name)) ?? ""));
     return parsed.success ? parsed.data : void 0;
   } catch {
     return void 0;
   }
 }
-function listFrontDoorSessions(fs14, sessionsDir) {
+function listFrontDoorSessions(fs15, sessionsDir) {
   const sessions = [];
-  for (const name of fs14.readdir(sessionsDir)) {
-    const record = isSessionRecordName(name) ? readFrontDoorSessionRecord(fs14, sessionsDir, name) : void 0;
+  for (const name of fs15.readdir(sessionsDir)) {
+    const record = isSessionRecordName(name) ? readFrontDoorSessionRecord(fs15, sessionsDir, name) : void 0;
     if (record !== void 0) {
       sessions.push(summaryOf(record));
     }
   }
   return sessions.sort((a, b) => a.pid - b.pid);
 }
-function removeFrontDoorSession(fs14, sessionsDir, pid) {
-  fs14.removeRecursive(import_node_path9.default.join(sessionsDir, sessionRecordName(pid)));
+function removeFrontDoorSession(fs15, sessionsDir, pid) {
+  fs15.removeRecursive(import_node_path9.default.join(sessionsDir, sessionRecordName(pid)));
 }
-function pruneDeadFrontDoorSessions(fs14, sessionsDir, listed, isRunning) {
+function pruneDeadFrontDoorSessions(fs15, sessionsDir, listed, isRunning) {
   const removed = [];
   for (const session of listed) {
     if (!isRunning(session.pid)) {
-      removeFrontDoorSession(fs14, sessionsDir, session.pid);
+      removeFrontDoorSession(fs15, sessionsDir, session.pid);
       removed.push(session.pid);
     }
   }
@@ -4091,9 +4170,9 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   }
 }
 async function serveFrontDoor(idleShutdownMinutes, ports, options) {
-  const { fs: fs14, paths } = ports;
+  const { fs: fs15, paths } = ports;
   const servingBinary = ports.statOwnExecutable();
-  const previous = readFrontDoorState(fs14, paths.frontdoorStateFile);
+  const previous = readFrontDoorState(fs15, paths.frontdoorStateFile);
   let lastPort = previous?.lastPort;
   let lastConnectPort = previous?.lastConnectPort;
   let lastDirectPort = previous?.lastDirectPort;
@@ -4107,14 +4186,14 @@ async function serveFrontDoor(idleShutdownMinutes, ports, options) {
   const fail = (message) => {
     ports.closeRcStreamHub();
     if (predecessor === void 0) {
-      writeFrontDoorState(fs14, paths.frontdoorStateFile, { lastError: message, ...sticky() });
-      fs14.removeRecursive(paths.frontdoorLockFile);
+      writeFrontDoorState(fs15, paths.frontdoorStateFile, { lastError: message, ...sticky() });
+      fs15.removeRecursive(paths.frontdoorLockFile);
     }
     ports.log(`agent-shim frontdoor supervisor: ${message}`);
     return 1;
   };
   if (predecessor === void 0) {
-    writeFrontDoorState(fs14, paths.frontdoorStateFile, { supervisorPid: ports.ownPid, ...sticky() });
+    writeFrontDoorState(fs15, paths.frontdoorStateFile, { supervisorPid: ports.ownPid, ...sticky() });
   }
   const previousSticky = lastPort;
   let http3;
@@ -4155,11 +4234,11 @@ async function serveFrontDoor(idleShutdownMinutes, ports, options) {
     ports.log(`agent-shim frontdoor supervisor: sticky direct port ${String(previousStickyDirect)} was occupied; moving to ${String(direct.port)} (headroom admits the new address once its supervisor rewrites the allowlist file)`);
   }
   lastDirectPort = direct.port;
-  writeFrontDoorDirectRecord(fs14, paths.frontdoorDirectRecordsDir, { pid: ports.ownPid, directPort: direct.port });
-  writeFrontDoorState(fs14, paths.frontdoorStateFile, { protocol: FRONT_DOOR_PROTOCOL, supervisorPid: ports.ownPid, port: http3.port, connectPort: connect3.port, directPort: direct.port, ...sticky() });
+  writeFrontDoorDirectRecord(fs15, paths.frontdoorDirectRecordsDir, { pid: ports.ownPid, directPort: direct.port });
+  writeFrontDoorState(fs15, paths.frontdoorStateFile, { protocol: FRONT_DOOR_PROTOCOL, supervisorPid: ports.ownPid, port: http3.port, connectPort: connect3.port, directPort: direct.port, ...sticky() });
   ports.doorHealth.generation({ providerPort: http3.port, connectPort: connect3.port, directPort: direct.port });
   if (predecessor === void 0) {
-    fs14.removeRecursive(paths.frontdoorLockFile);
+    fs15.removeRecursive(paths.frontdoorLockFile);
   } else {
     predecessor.serving();
   }
@@ -4168,7 +4247,7 @@ async function serveFrontDoor(idleShutdownMinutes, ports, options) {
   let idleSince;
   let ticks = 0;
   const supersedingOwner = async () => {
-    const owner = readFrontDoorState(fs14, paths.frontdoorStateFile)?.supervisorPid;
+    const owner = readFrontDoorState(fs15, paths.frontdoorStateFile)?.supervisorPid;
     return owner !== void 0 && owner !== ports.ownPid && (await ports.runningAmong([owner])).has(owner) ? owner : void 0;
   };
   let supersededBy;
@@ -4197,13 +4276,13 @@ async function serveFrontDoor(idleShutdownMinutes, ports, options) {
     ports.stopBackgroundWork?.();
     const drained = [direct.drain(), connect3.drain(), http3.drain()];
     if (await supersedingOwner() === void 0) {
-      writeFrontDoorState(fs14, paths.frontdoorStateFile, sticky());
+      writeFrontDoorState(fs15, paths.frontdoorStateFile, sticky());
     }
-    markFrontDoorDraining(fs14, paths.frontdoorDrainingDir, ports.ownPid);
+    markFrontDoorDraining(fs15, paths.frontdoorDrainingDir, ports.ownPid);
     ports.closeRcStreamHub();
     await Promise.all(drained);
-    unmarkFrontDoorDraining(fs14, paths.frontdoorDrainingDir, ports.ownPid);
-    removeFrontDoorDirectRecord(fs14, paths.frontdoorDirectRecordsDir, ports.ownPid);
+    unmarkFrontDoorDraining(fs15, paths.frontdoorDrainingDir, ports.ownPid);
+    removeFrontDoorDirectRecord(fs15, paths.frontdoorDirectRecordsDir, ports.ownPid);
     ports.log(`agent-shim frontdoor supervisor ${String(ports.ownPid)}: the connections this door carried have ended; exiting`);
     return 0;
   };
@@ -4224,12 +4303,12 @@ async function serveFrontDoor(idleShutdownMinutes, ports, options) {
     await connect3.close();
     await http3.close();
     ports.closeRcStreamHub();
-    removeFrontDoorDirectRecord(fs14, paths.frontdoorDirectRecordsDir, ports.ownPid);
+    removeFrontDoorDirectRecord(fs15, paths.frontdoorDirectRecordsDir, ports.ownPid);
   };
   const shutdown = async () => {
     await closeServing();
     if (await supersedingOwner() === void 0) {
-      writeFrontDoorState(fs14, paths.frontdoorStateFile, sticky());
+      writeFrontDoorState(fs15, paths.frontdoorStateFile, sticky());
     }
     return 0;
   };
@@ -4248,7 +4327,7 @@ async function serveFrontDoor(idleShutdownMinutes, ports, options) {
     ticks += 1;
     const listed = ports.registry.rescan();
     const running = await ports.runningAmong(listed.map((session) => session.pid));
-    const pruned = pruneDeadFrontDoorSessions(fs14, paths.frontdoorSessionsDir, listed, (pid) => running.has(pid));
+    const pruned = pruneDeadFrontDoorSessions(fs15, paths.frontdoorSessionsDir, listed, (pid) => running.has(pid));
     ports.registry.forget(pruned);
     ports.observeLaunchRegistry(listed, pruned);
     ports.checkQuotaExpiry();
@@ -4322,8 +4401,8 @@ function parseConnectTarget(authority) {
 function isInterceptedHost(host, interceptHosts) {
   return interceptHosts.includes(host);
 }
-function servedByPipeline(path42) {
-  return path42?.startsWith(ROUTED_PATH_PREFIX) === true;
+function servedByPipeline(path45) {
+  return path45?.startsWith(ROUTED_PATH_PREFIX) === true;
 }
 function forwardableHeaders(headers) {
   const connectionTokens = new Set(
@@ -4769,7 +4848,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "11.81.0",
+      version: "11.83.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -4991,43 +5070,43 @@ function parseJson(raw, schema) {
   const parsed = schema.safeParse(JSON.parse(raw));
   return parsed.success ? parsed.data : void 0;
 }
-function readHeadroomState(fs14, stateFile) {
+function readHeadroomState(fs15, stateFile) {
   try {
-    return parseJson(fs14.readFileUtf8(stateFile), HeadroomStateSchema);
+    return parseJson(fs15.readFileUtf8(stateFile), HeadroomStateSchema);
   } catch {
     return void 0;
   }
 }
-function writeHeadroomState(fs14, stateFile, state) {
-  fs14.mkdirp(import_node_path12.default.dirname(stateFile));
-  fs14.writeFilePrivate(stateFile, `${JSON.stringify(state, null, 2)}
+function writeHeadroomState(fs15, stateFile, state) {
+  fs15.mkdirp(import_node_path12.default.dirname(stateFile));
+  fs15.writeFilePrivate(stateFile, `${JSON.stringify(state, null, 2)}
 `);
 }
-function resolveServingHeadroomState(fs14, files, isRunning) {
-  const current = readHeadroomState(fs14, files.stateFile);
+function resolveServingHeadroomState(fs15, files, isRunning) {
+  const current = readHeadroomState(fs15, files.stateFile);
   if (current !== void 0) {
     return { path: files.stateFile, state: current };
   }
-  const legacy = readHeadroomState(fs14, files.legacyStateFile);
+  const legacy = readHeadroomState(fs15, files.legacyStateFile);
   if (legacy?.supervisorPid !== void 0 && isRunning(legacy.supervisorPid)) {
     return { path: files.legacyStateFile, state: legacy };
   }
   return void 0;
 }
-function migrateHeadroomState(fs14, files, isRunning) {
-  const legacy = readHeadroomState(fs14, files.legacyStateFile);
+function migrateHeadroomState(fs15, files, isRunning) {
+  const legacy = readHeadroomState(fs15, files.legacyStateFile);
   const legacyLive = legacy?.supervisorPid !== void 0 && isRunning(legacy.supervisorPid);
-  const current = readHeadroomState(fs14, files.stateFile);
+  const current = readHeadroomState(fs15, files.stateFile);
   if (current !== void 0 || legacyLive) {
-    if (!legacyLive && fs14.readFileUtf8(files.legacyStateFile) !== void 0) {
-      fs14.removeRecursive(files.legacyStateFile);
+    if (!legacyLive && fs15.readFileUtf8(files.legacyStateFile) !== void 0) {
+      fs15.removeRecursive(files.legacyStateFile);
     }
     return;
   }
   if (legacy !== void 0) {
-    writeHeadroomState(fs14, files.stateFile, legacy);
+    writeHeadroomState(fs15, files.stateFile, legacy);
   }
-  fs14.removeRecursive(files.legacyStateFile);
+  fs15.removeRecursive(files.legacyStateFile);
 }
 function hashAllowlist(allowlist) {
   return (0, import_node_crypto6.createHash)("sha256").update(allowlist.join("\n")).digest("hex");
@@ -5060,27 +5139,27 @@ function isAdmissibleUrl(entry) {
 function parseAllowlistFile(content) {
   return content.replace(/^\uFEFF/, "").replace(ALLOWLIST_FILE_COMMENT, "").split(ALLOWLIST_FILE_SEPARATORS).map((entry) => entry.replace(ALLOWLIST_SURROUNDING_WHITESPACE, "")).filter((entry) => entry !== "" && !ALLOWLIST_ENTRY_WHITESPACE.test(entry) && (entry.includes("://") ? isAdmissibleUrl(entry) : isBareHost(entry)));
 }
-function writeAllowlistFile(fs14, allowlistFile, allowlist) {
-  fs14.mkdirPrivate(import_node_path12.default.dirname(allowlistFile));
-  fs14.writeFilePrivate(allowlistFile, formatAllowlistFile(allowlist));
+function writeAllowlistFile(fs15, allowlistFile, allowlist) {
+  fs15.mkdirPrivate(import_node_path12.default.dirname(allowlistFile));
+  fs15.writeFilePrivate(allowlistFile, formatAllowlistFile(allowlist));
 }
-function pruneStaleAllowlistTemporaries(fs14, allowlistFile, isRunning) {
+function pruneStaleAllowlistTemporaries(fs15, allowlistFile, isRunning) {
   const prefix = `${import_node_path12.default.basename(allowlistFile)}.`;
-  for (const name of fs14.readdir(import_node_path12.default.dirname(allowlistFile))) {
+  for (const name of fs15.readdir(import_node_path12.default.dirname(allowlistFile))) {
     const writer = name.startsWith(prefix) ? /^([1-9]\d*)\.tmp$/.exec(name.slice(prefix.length))?.[1] : void 0;
     if (writer !== void 0 && !isRunning(Number(writer))) {
-      fs14.removeRecursive(import_node_path12.default.join(import_node_path12.default.dirname(allowlistFile), name));
+      fs15.removeRecursive(import_node_path12.default.join(import_node_path12.default.dirname(allowlistFile), name));
     }
   }
 }
-function readAllProviders(fs14, providersDir) {
+function readAllProviders(fs15, providersDir) {
   const result = [];
-  for (const name of fs14.readdir(providersDir)) {
+  for (const name of fs15.readdir(providersDir)) {
     if (!name.endsWith(".json")) {
       continue;
     }
     try {
-      const parsed = parseJson(fs14.readFileUtf8(import_node_path12.default.join(providersDir, name)), ProviderSchema);
+      const parsed = parseJson(fs15.readFileUtf8(import_node_path12.default.join(providersDir, name)), ProviderSchema);
       if (parsed !== void 0) {
         result.push({ name: name.slice(0, -".json".length), provider: parsed });
       }
@@ -5090,22 +5169,22 @@ function readAllProviders(fs14, providersDir) {
   }
   return result;
 }
-function writeSession(fs14, sessionsDir, session) {
-  fs14.mkdirp(sessionsDir);
-  fs14.writeFileUtf8(import_node_path12.default.join(sessionsDir, `${String(session.pid)}.json`), `${JSON.stringify(session, null, 2)}
+function writeSession(fs15, sessionsDir, session) {
+  fs15.mkdirp(sessionsDir);
+  fs15.writeFileUtf8(import_node_path12.default.join(sessionsDir, `${String(session.pid)}.json`), `${JSON.stringify(session, null, 2)}
 `);
 }
-function removeSession(fs14, sessionsDir, pid) {
-  fs14.removeRecursive(import_node_path12.default.join(sessionsDir, `${String(pid)}.json`));
+function removeSession(fs15, sessionsDir, pid) {
+  fs15.removeRecursive(import_node_path12.default.join(sessionsDir, `${String(pid)}.json`));
 }
-function listSessions(fs14, sessionsDir) {
+function listSessions(fs15, sessionsDir) {
   const sessions = [];
-  for (const name of fs14.readdir(sessionsDir)) {
+  for (const name of fs15.readdir(sessionsDir)) {
     if (!name.endsWith(".json")) {
       continue;
     }
     try {
-      const parsed = parseJson(fs14.readFileUtf8(import_node_path12.default.join(sessionsDir, name)), HeadroomSessionSchema);
+      const parsed = parseJson(fs15.readFileUtf8(import_node_path12.default.join(sessionsDir, name)), HeadroomSessionSchema);
       if (parsed !== void 0) {
         sessions.push(parsed);
       }
@@ -5115,22 +5194,22 @@ function listSessions(fs14, sessionsDir) {
   }
   return sessions.sort((a, b) => a.pid - b.pid);
 }
-function sessionsForSupervisor(fs14, sessionsDir, supervisorPid) {
-  return listSessions(fs14, sessionsDir).filter((session) => session.supervisorPid === supervisorPid);
+function sessionsForSupervisor(fs15, sessionsDir, supervisorPid) {
+  return listSessions(fs15, sessionsDir).filter((session) => session.supervisorPid === supervisorPid);
 }
-function pruneDeadSessions(fs14, sessionsDir, isRunning) {
+function pruneDeadSessions(fs15, sessionsDir, isRunning) {
   const removed = [];
-  for (const session of listSessions(fs14, sessionsDir)) {
+  for (const session of listSessions(fs15, sessionsDir)) {
     if (!isRunning(session.pid)) {
-      removeSession(fs14, sessionsDir, session.pid);
+      removeSession(fs15, sessionsDir, session.pid);
       removed.push(session.pid);
     }
   }
   return removed;
 }
-function readStartLock(fs14, lockFile) {
+function readStartLock(fs15, lockFile) {
   try {
-    return parseJson(fs14.readFileUtf8(lockFile), HeadroomLockSchema);
+    return parseJson(fs15.readFileUtf8(lockFile), HeadroomLockSchema);
   } catch {
     return void 0;
   }
@@ -5223,12 +5302,12 @@ function earlierReleaseAllowlistHash(providers, doorOrigin) {
   }
   return hashAllowlist([...entries].sort());
 }
-function earlierReleaseDaemon(fs14, paths, daemon) {
+function earlierReleaseDaemon(fs15, paths, daemon) {
   if (daemonIdentity(daemon.commandLine, daemon.socketPath) !== "earlier-release") {
     return void 0;
   }
-  const providers = readAllProviders(fs14, paths.providersDir).map((entry) => entry.provider);
-  const expected = earlierReleaseAllowlistHash(providers, frontDoorOrigin(readFrontDoorState(fs14, paths.frontdoorStateFile)));
+  const providers = readAllProviders(fs15, paths.providersDir).map((entry) => entry.provider);
+  const expected = earlierReleaseAllowlistHash(providers, frontDoorOrigin(readFrontDoorState(fs15, paths.frontdoorStateFile)));
   return { admitsServingDoor: daemon.recordedHash === expected };
 }
 var EARLIER_RELEASE_ALLOWLIST, EARLIER_RELEASE_ANTHROPIC_UPSTREAM;
@@ -5253,8 +5332,8 @@ function awaitingCause(daemonPid, identity, allowlistFile) {
   }
   return `the headroom supervisor has not written an allowlist admitting this launch's upstreams to ${allowlistFile} within ${String(HEADROOM_START_TIMEOUT_MS)}ms`;
 }
-function daemonAdmits(fs14, allowlistFile, recordedHash, required) {
-  const content = fs14.readFileUtf8(allowlistFile);
+function daemonAdmits(fs15, allowlistFile, recordedHash, required) {
+  const content = fs15.readFileUtf8(allowlistFile);
   if (content === void 0 || recordedHash === void 0) {
     return false;
   }
@@ -5523,7 +5602,7 @@ function verifyAllowlistFile(allowlistFile, ports) {
   const replaceable = fileStat === void 0 || fileStat.kind === "file" || fileStat.kind === "symlink";
   return { message: refusal2, repairable: replaceable };
 }
-function prepareHeadroomSocket(fs14, ports, paths, supervisorPid) {
+function prepareHeadroomSocket(fs15, ports, paths, supervisorPid) {
   const unsupported = platformRefusal(ports.platform);
   if (unsupported !== void 0) {
     return { refused: unsupported };
@@ -5538,18 +5617,18 @@ function prepareHeadroomSocket(fs14, ports, paths, supervisorPid) {
   if (ports.lstat(paths.headroomSocketDir)?.kind === "symlink") {
     return { refused: `the headroom socket directory ${paths.headroomSocketDir} is a symlink; it must be the real directory` };
   }
-  fs14.mkdirPrivate(paths.headroomSocketDir);
+  fs15.mkdirPrivate(paths.headroomSocketDir);
   const refusal2 = ownerOnlyRefusal("socket directory", paths.headroomSocketDir, ports.lstat(paths.headroomSocketDir), "dir", ports.currentUid());
   return refusal2 === void 0 ? { socketPath } : { refused: refusal2 };
 }
-function pruneStaleHeadroomSockets(fs14, paths, isRunning) {
+function pruneStaleHeadroomSockets(fs15, paths, isRunning) {
   const removed = [];
-  for (const name of fs14.readdir(paths.headroomSocketDir)) {
+  for (const name of fs15.readdir(paths.headroomSocketDir)) {
     const pid = HEADROOM_SOCKET_NAME.exec(name)?.[1];
     if (pid === void 0 || isRunning(Number.parseInt(pid, 10))) {
       continue;
     }
-    fs14.removeRecursive(import_node_path13.default.join(paths.headroomSocketDir, name));
+    fs15.removeRecursive(import_node_path13.default.join(paths.headroomSocketDir, name));
     removed.push(name);
   }
   return removed;
@@ -5661,37 +5740,37 @@ function compareVersions2(a, b) {
   return 0;
 }
 async function runSupervisor(initialConfig, ports, options = {}) {
-  const { fs: fs14, paths } = ports;
+  const { fs: fs15, paths } = ports;
   let config = initialConfig;
-  migrateHeadroomState(fs14, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning);
-  const previousState = resolveServingHeadroomState(fs14, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning)?.state;
+  migrateHeadroomState(fs15, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning);
+  const previousState = resolveServingHeadroomState(fs15, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning)?.state;
   if (previousState?.supervisorPid !== void 0 && previousState.supervisorPid !== ports.ownPid && ports.isRunning(previousState.supervisorPid)) {
     ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: supervisor ${String(previousState.supervisorPid)} already owns the daemon; exiting`);
     return 0;
   }
   let installedSource = previousState?.installedSource;
   const ownsState = () => {
-    const owner = readHeadroomState(fs14, paths.headroomStateFile)?.supervisorPid;
+    const owner = readHeadroomState(fs15, paths.headroomStateFile)?.supervisorPid;
     return owner === void 0 || owner === ports.ownPid || !ports.isRunning(owner);
   };
   const writeOwnState = (state) => {
     if (!ownsState()) {
       return false;
     }
-    writeHeadroomState(fs14, paths.headroomStateFile, state);
+    writeHeadroomState(fs15, paths.headroomStateFile, state);
     return true;
   };
   const fail = (message) => {
     if (writeOwnState({ lastError: message })) {
-      fs14.removeRecursive(paths.headroomLockFile);
+      fs15.removeRecursive(paths.headroomLockFile);
     }
     ports.log(`agent-shim headroom supervisor: ${message}`);
     return 1;
   };
   const syncAllowlistFile = (allowlist) => {
     try {
-      if (fs14.readFileUtf8(paths.headroomAllowlistFile) !== formatAllowlistFile(allowlist)) {
-        writeAllowlistFile(fs14, paths.headroomAllowlistFile, allowlist);
+      if (fs15.readFileUtf8(paths.headroomAllowlistFile) !== formatAllowlistFile(allowlist)) {
+        writeAllowlistFile(fs15, paths.headroomAllowlistFile, allowlist);
         ports.log(`agent-shim headroom supervisor: wrote allowlist [${allowlist.join(", ")}] to ${paths.headroomAllowlistFile}`);
       }
       return void 0;
@@ -5709,9 +5788,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
     }
     ports.log(`agent-shim headroom supervisor: repairing the allowlist file: ${problem.message}`);
     try {
-      fs14.mkdirPrivate(paths.headroomDir);
-      fs14.mkdirPrivate(import_node_path14.default.dirname(paths.headroomAllowlistFile));
-      writeAllowlistFile(fs14, paths.headroomAllowlistFile, allowlist);
+      fs15.mkdirPrivate(paths.headroomDir);
+      fs15.mkdirPrivate(import_node_path14.default.dirname(paths.headroomAllowlistFile));
+      writeAllowlistFile(fs15, paths.headroomAllowlistFile, allowlist);
     } catch (error) {
       return `could not write the headroom allowlist file ${paths.headroomAllowlistFile}: ${error instanceof Error ? error.message : String(error)}`;
     }
@@ -5736,20 +5815,20 @@ async function runSupervisor(initialConfig, ports, options = {}) {
     installedSource = config.source;
     return void 0;
   };
-  const socket = prepareHeadroomSocket(fs14, ports.socketTrust, paths, ports.ownPid);
+  const socket = prepareHeadroomSocket(fs15, ports.socketTrust, paths, ports.ownPid);
   if (socket.refused !== void 0) {
     return fail(socket.refused);
   }
   const { socketPath } = socket;
-  pruneStaleHeadroomSockets(fs14, paths, ports.isRunning);
-  pruneStaleAllowlistTemporaries(fs14, paths.headroomAllowlistFile, ports.isRunning);
+  pruneStaleHeadroomSockets(fs15, paths, ports.isRunning);
+  pruneStaleAllowlistTemporaries(fs15, paths.headroomAllowlistFile, ports.isRunning);
   const installFailure = ensureInstalled();
   if (installFailure !== void 0) {
     return fail(installFailure);
   }
   const version = ports.headroomVersion() ?? "unknown";
   writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
-  ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: managing headroom on allowlist [${currentHeadroomAllowlistInputs(fs14, paths, ports.frontDoorLiveness).frontDoorOrigins.join(", ")}]`);
+  ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: managing headroom on allowlist [${currentHeadroomAllowlistInputs(fs15, paths, ports.frontDoorLiveness).frontDoorOrigins.join(", ")}]`);
   const orphanPid = previousState?.headroomPid;
   const orphanSocket = previousState?.socketPath ?? (previousState?.supervisorPid === void 0 ? void 0 : headroomSocketPath(paths, previousState.supervisorPid));
   const orphanIdentity = orphanPid === void 0 || orphanSocket === void 0 || !ports.isRunning(orphanPid) ? void 0 : daemonIdentity(ports.daemonCommandLine(orphanPid), orphanSocket);
@@ -5787,12 +5866,12 @@ async function runSupervisor(initialConfig, ports, options = {}) {
     }
     config = ports.readConfig();
     const settingsHash = hashSettings(config.settings);
-    const inputs = currentHeadroomAllowlistInputs(fs14, paths, ports.frontDoorLiveness);
-    pruneDeadFrontDoorDirectRecords(fs14, paths.frontdoorDirectRecordsDir, inputs.frontDoorRecords, inputs.frontDoorLiveness);
-    pruneMalformedFrontDoorDirectFiles(fs14, paths.frontdoorDirectRecordsDir, ports.isRunning);
+    const inputs = currentHeadroomAllowlistInputs(fs15, paths, ports.frontDoorLiveness);
+    pruneDeadFrontDoorDirectRecords(fs15, paths.frontdoorDirectRecordsDir, inputs.frontDoorRecords, inputs.frontDoorLiveness);
+    pruneMalformedFrontDoorDirectFiles(fs15, paths.frontdoorDirectRecordsDir, ports.isRunning);
     const allowlist = inputs.frontDoorOrigins;
     const allowlistHash = hashAllowlist(allowlist);
-    pruneDeadSessions(fs14, paths.headroomSessionsDir, ports.isRunning);
+    pruneDeadSessions(fs15, paths.headroomSessionsDir, ports.isRunning);
     const ownsNow = ownsState();
     if (!ownsNow && !superseded) {
       ports.log("agent-shim headroom supervisor: another supervisor now owns the state file; serving this daemon's own sessions until they end");
@@ -5839,7 +5918,7 @@ async function runSupervisor(initialConfig, ports, options = {}) {
         runningSettingsHash = settingsHash;
         const recorded = writeOwnState(servingState(pid));
         if (recorded) {
-          fs14.removeRecursive(paths.headroomLockFile);
+          fs15.removeRecursive(paths.headroomLockFile);
         }
         idleSince = void 0;
         ports.log(`agent-shim headroom supervisor: headroom pid ${String(pid)} ready on unix socket ${socketPath}`);
@@ -5867,7 +5946,7 @@ async function runSupervisor(initialConfig, ports, options = {}) {
         ports.log(`agent-shim headroom supervisor: headroom pid ${String(headroomPid)} now serves allowlist [${allowlist.join(", ")}]`);
       }
       if (runningSettingsHash !== settingsHash || installedSource !== config.source) {
-        if (sessionsForSupervisor(fs14, paths.headroomSessionsDir, ports.ownPid).length === 0) {
+        if (sessionsForSupervisor(fs15, paths.headroomSessionsDir, ports.ownPid).length === 0) {
           ports.log("agent-shim headroom supervisor: configuration drifted and no sessions are live; restarting headroom");
           ports.stopProcess(headroomPid);
           headroomPid = void 0;
@@ -5876,7 +5955,7 @@ async function runSupervisor(initialConfig, ports, options = {}) {
           continue;
         }
       }
-      const sessions = sessionsForSupervisor(fs14, paths.headroomSessionsDir, ports.ownPid);
+      const sessions = sessionsForSupervisor(fs15, paths.headroomSessionsDir, ports.ownPid);
       if (sessions.length === 0) {
         idleSince ??= ports.now();
         const idleMs = ports.now() - idleSince;
@@ -5901,9 +5980,9 @@ function undeterminedFrontDoors(inputs) {
     return reason === void 0 ? [] : [{ pid: record.pid, origin: directOrigin(record.directPort), reason }];
   });
 }
-function currentHeadroomAllowlistInputs(fs14, paths, frontDoorLiveness) {
-  const named = frontDoorOrigin(readFrontDoorState(fs14, paths.frontdoorStateFile));
-  const records = listFrontDoorDirectRecords(fs14, paths.frontdoorDirectRecordsDir);
+function currentHeadroomAllowlistInputs(fs15, paths, frontDoorLiveness) {
+  const named = frontDoorOrigin(readFrontDoorState(fs15, paths.frontdoorStateFile));
+  const records = listFrontDoorDirectRecords(fs15, paths.frontdoorDirectRecordsDir);
   const liveness = frontDoorLiveness(records.map((record) => record.pid));
   const live = liveFrontDoorDirectRecords(records, liveness).map((record) => directOrigin(record.directPort));
   return {
@@ -5912,8 +5991,8 @@ function currentHeadroomAllowlistInputs(fs14, paths, frontDoorLiveness) {
     frontDoorOrigins: [.../* @__PURE__ */ new Set([...named === void 0 ? [] : [named], ...live])].sort()
   };
 }
-function launchRequiredUpstreams(fs14, paths) {
-  const door = frontDoorOrigin(readFrontDoorState(fs14, paths.frontdoorStateFile));
+function launchRequiredUpstreams(fs15, paths) {
+  const door = frontDoorOrigin(readFrontDoorState(fs15, paths.frontdoorStateFile));
   return door === void 0 ? [] : [door];
 }
 async function waitUntilReady(ports, socketPath, pid) {
@@ -6045,6 +6124,29 @@ function isEnoent3(error) {
 function isErrorWithCode(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
+function writeFileFlushed(file, contents) {
+  const descriptor = import_node_fs2.default.openSync(file, "w", OWNER_ONLY_FILE_MODE);
+  try {
+    import_node_fs2.default.writeFileSync(descriptor, contents, "utf8");
+    import_node_fs2.default.fchmodSync(descriptor, OWNER_ONLY_FILE_MODE);
+    import_node_fs2.default.fsyncSync(descriptor);
+  } finally {
+    import_node_fs2.default.closeSync(descriptor);
+  }
+}
+function flushDirectory(directory) {
+  const descriptor = import_node_fs2.default.openSync(directory, "r");
+  try {
+    import_node_fs2.default.fsyncSync(descriptor);
+  } catch (error) {
+    const code = typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" ? error.code : void 0;
+    if (code === void 0 || !DIRECTORY_FLUSH_UNSUPPORTED_CODES.has(code)) {
+      throw error;
+    }
+  } finally {
+    import_node_fs2.default.closeSync(descriptor);
+  }
+}
 function realSleepSync(ms) {
   refuseToBlockInRole("a synchronous sleep");
   Atomics.wait(new Int32Array(new SharedArrayBuffer(INT32_BYTE_LENGTH)), 0, 0, ms);
@@ -6078,9 +6180,9 @@ function realFrontDoorLiveness(pids) {
     return { status: result.status, stdout: result.stdout, stderr: result.stderr, ...result.error === void 0 ? {} : { error: result.error } };
   });
 }
-async function realRunAsync(command, args) {
-  return await new Promise((resolve) => {
-    (0, import_node_child_process3.execFile)(command, [...args], { encoding: "utf8", timeout: PS_TIMEOUT_MS }, (error, stdout, stderr) => {
+function realRunAsyncWithin(timeoutMs) {
+  return async (command, args) => await new Promise((resolve) => {
+    (0, import_node_child_process3.execFile)(command, [...args], { encoding: "utf8", timeout: timeoutMs }, (error, stdout, stderr) => {
       resolve({ status: error === null ? 0 : typeof error.code === "number" ? error.code : null, stdout, stderr });
     });
   });
@@ -6286,7 +6388,7 @@ function realResolveClaudeBinary(isOwnBinary) {
 function realInstalledClaudeVersions() {
   return installedVersions(listVersionsDir(defaultVersionsDir()));
 }
-var import_node_child_process3, import_node_crypto8, import_node_fs2, import_node_os2, import_node_path15, import_node_sea, realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, realFarmFs, INT32_BYTE_LENGTH, KEY_POLL_MS, CTRL_C_BYTE, realHoldPort, PS_TIMEOUT_MS, realRunPort, MACOS_GUI_SESSION_MANAGER, realCredentialPort, SOCKET_PERMISSION_BITS, realHeadroomSocketTrust, realSpawnPort, realProcPort, realLogPort, EXECUTE_BITS_MASK, WINDOWS_DEFAULT_PATHEXT;
+var import_node_child_process3, import_node_crypto8, import_node_fs2, import_node_os2, import_node_path15, import_node_sea, realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, DIRECTORY_FLUSH_UNSUPPORTED_CODES, realFarmFs, INT32_BYTE_LENGTH, KEY_POLL_MS, CTRL_C_BYTE, realHoldPort, PS_TIMEOUT_MS, RUN_OUTPUT_LIMIT_MIB, BYTES_PER_MIB2, RUN_OUTPUT_LIMIT_BYTES, realRunPort, ASYNC_RUN_TIMEOUT_MS, realRunAsync, MACOS_GUI_SESSION_MANAGER, realCredentialPort, SOCKET_PERMISSION_BITS, realHeadroomSocketTrust, realSpawnPort, realProcPort, realLogPort, EXECUTE_BITS_MASK, WINDOWS_DEFAULT_PATHEXT;
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
@@ -6331,6 +6433,7 @@ var init_realPorts = __esm({
     OWNER_ONLY_DIR_MODE = 448;
     OWNER_ONLY_FILE_MODE = 384;
     PERMISSION_BITS = 511;
+    DIRECTORY_FLUSH_UNSUPPORTED_CODES = /* @__PURE__ */ new Set(["EINVAL", "ENOTSUP", "EOPNOTSUPP"]);
     realFarmFs = {
       lstat(filePath) {
         let stat;
@@ -6387,12 +6490,18 @@ var init_realPorts = __esm({
         import_node_fs2.default.mkdirSync(dirPath, { recursive: true, mode: OWNER_ONLY_DIR_MODE });
         import_node_fs2.default.chmodSync(dirPath, OWNER_ONLY_DIR_MODE);
       },
-      writeFilePrivate(filePath, contents) {
+      writeFilePrivate(filePath, contents, options) {
         const temp = `${filePath}.${String(process.pid)}.tmp`;
         try {
-          import_node_fs2.default.writeFileSync(temp, contents, { encoding: "utf8", mode: OWNER_ONLY_FILE_MODE });
-          import_node_fs2.default.chmodSync(temp, OWNER_ONLY_FILE_MODE);
-          import_node_fs2.default.renameSync(temp, filePath);
+          if (options?.durable === true) {
+            writeFileFlushed(temp, contents);
+            import_node_fs2.default.renameSync(temp, filePath);
+            flushDirectory(import_node_path15.default.dirname(filePath));
+          } else {
+            import_node_fs2.default.writeFileSync(temp, contents, { encoding: "utf8", mode: OWNER_ONLY_FILE_MODE });
+            import_node_fs2.default.chmodSync(temp, OWNER_ONLY_FILE_MODE);
+            import_node_fs2.default.renameSync(temp, filePath);
+          }
         } catch (error) {
           import_node_fs2.default.rmSync(temp, { force: true });
           throw error;
@@ -6462,12 +6571,17 @@ var init_realPorts = __esm({
       }
     };
     PS_TIMEOUT_MS = 2e3;
+    RUN_OUTPUT_LIMIT_MIB = 256;
+    BYTES_PER_MIB2 = 1048576;
+    RUN_OUTPUT_LIMIT_BYTES = RUN_OUTPUT_LIMIT_MIB * BYTES_PER_MIB2;
     realRunPort = {
-      run(command, args) {
-        const result = spawnSyncBlocking("an external command", command, args, { encoding: "utf8" });
+      run(command, args, input) {
+        const result = spawnSyncBlocking("an external command", command, args, { encoding: "utf8", maxBuffer: RUN_OUTPUT_LIMIT_BYTES, ...input === void 0 ? {} : { input } });
         return { status: result.status, stdout: result.stdout, stderr: result.stderr };
       }
     };
+    ASYNC_RUN_TIMEOUT_MS = 2e3;
+    realRunAsync = realRunAsyncWithin(ASYNC_RUN_TIMEOUT_MS);
     MACOS_GUI_SESSION_MANAGER = "Aqua";
     realCredentialPort = {
       readSecretFile(filePath) {
@@ -6659,8 +6773,8 @@ var init_cascade = __esm({
 function poolNameOf(selector) {
   return selector.startsWith(POOL_SELECTOR_PREFIX) ? selector.slice(POOL_SELECTOR_PREFIX.length) : void 0;
 }
-function readActiveIdentity(fs14, activeIdentityFile) {
-  const trimmed = fs14.readFileUtf8(activeIdentityFile)?.trim();
+function readActiveIdentity(fs15, activeIdentityFile) {
+  const trimmed = fs15.readFileUtf8(activeIdentityFile)?.trim();
   return trimmed === void 0 || trimmed === "" ? void 0 : trimmed;
 }
 function isNonEmpty(value) {
@@ -6710,11 +6824,11 @@ function decideConfigProfile(params) {
   }
   return { source: "none" };
 }
-function loadIdentity(identitiesDir, name, fs14) {
+function loadIdentity(identitiesDir, name, fs15) {
   if (!isFileName(name)) {
     throw new UnsafeNameError(name, "identity", FILE_NAME_RULE);
   }
-  return loadConfigFile(import_node_path18.default.join(identitiesDir, name, "identity.json"), IdentitySchema, fs14.readConfigFile);
+  return loadConfigFile(import_node_path18.default.join(identitiesDir, name, "identity.json"), IdentitySchema, fs15.readConfigFile);
 }
 var import_node_path18, IDENTITY_DECISION_SOURCES, IDENTITY_SOURCE_LABELS, CONFIG_PROFILE_DECISION_SOURCES;
 var init_identity = __esm({
@@ -6968,14 +7082,14 @@ function isIdentityName(name) {
 function claudeJsonPath(identitiesDir, identity) {
   return import_node_path19.default.join(identitiesDir, identity, CLAUDE_JSON);
 }
-function readAccountMetadata(fs14, identitiesDir, identity) {
+function readAccountMetadata(fs15, identitiesDir, identity) {
   if (!isIdentityName(identity)) {
     throw new Error(`"${identity}" is not a valid identity name.`);
   }
-  return readAccountMetadataFile(fs14, claudeJsonPath(identitiesDir, identity));
+  return readAccountMetadataFile(fs15, claudeJsonPath(identitiesDir, identity));
 }
-function readAccountMetadataFile(fs14, file) {
-  const raw = fs14.readFileUtf8(file);
+function readAccountMetadataFile(fs15, file) {
+  const raw = fs15.readFileUtf8(file);
   if (raw === void 0) {
     return void 0;
   }
@@ -7005,19 +7119,19 @@ function readAccountMetadataFile(fs14, file) {
   }
   return account.data;
 }
-function createAccountReader(fs14, identitiesDir) {
+function createAccountReader(fs15, identitiesDir) {
   const cache = /* @__PURE__ */ new Map();
   return (identity) => {
     if (!isIdentityName(identity)) {
       throw new Error(`"${identity}" is not a valid identity name.`);
     }
-    const stat = fs14.lstat(claudeJsonPath(identitiesDir, identity));
+    const stat = fs15.lstat(claudeJsonPath(identitiesDir, identity));
     const stamp = stat === void 0 ? "absent" : `${String(stat.mtimeMs)}:${String(stat.sizeBytes)}`;
     const cached = cache.get(identity);
     if (cached?.stamp === stamp) {
       return cached.account;
     }
-    const account = readAccountMetadata(fs14, identitiesDir, identity);
+    const account = readAccountMetadata(fs15, identitiesDir, identity);
     cache.set(identity, { stamp, account });
     return account;
   };
@@ -7054,9 +7168,9 @@ var init_accountDescription = __esm({
 });
 
 // src/identityAccounts.ts
-function readIdentityAccount(fs14, identitiesDir, identity) {
+function readIdentityAccount(fs15, identitiesDir, identity) {
   try {
-    const account = readAccountMetadata(fs14, identitiesDir, identity);
+    const account = readAccountMetadata(fs15, identitiesDir, identity);
     return account === void 0 ? void 0 : { account };
   } catch (error) {
     if (error instanceof AccountMetadataError) {
@@ -7428,10 +7542,10 @@ function billedTokensOf(record) {
   const usage = record.usage;
   return (usage?.inputTokens ?? 0) + (usage?.cacheCreationInputTokens ?? 0) + (usage?.outputTokens ?? 0);
 }
-function utilisationPerBilledToken(records) {
+function utilisationPerBilledToken(records, which) {
   const points = [];
   for (const record of records) {
-    const window = record.rateLimitHeaders === void 0 ? void 0 : parseUnifiedRateLimit(record.rateLimitHeaders)?.fiveHour;
+    const window = record.rateLimitHeaders === void 0 ? void 0 : parseUnifiedRateLimit(record.rateLimitHeaders)?.[which];
     if (window?.utilization !== void 0 && window.resetsAt !== void 0) {
       points.push({ resetsAt: window.resetsAt, utilization: window.utilization, billed: billedTokensOf(record) });
     }
@@ -7616,14 +7730,17 @@ function rankPool(input) {
     }
     const { sticky: sticky2 } = input;
     const warmHere = sticky2?.identity === candidate.identity && nowMs - Date.parse(sticky2.at) <= PROMPT_CACHE_TTL_MS;
-    if (input.resuming && input.resumeContextTokens !== void 0 && fiveHour !== void 0 && !warmHere) {
-      const perToken = utilisationPerBilledToken(assessment.member.records);
+    const resumeTokens = input.resumeContextTokens;
+    if (input.resuming && resumeTokens !== void 0 && !warmHere) {
       const committed = input.committedContextTokens?.[candidate.identity] ?? 0;
-      const cost = perToken === void 0 ? void 0 : (input.resumeContextTokens + committed) * perToken;
-      if (cost !== void 0 && cost > fiveHour.remaining) {
-        dryAfterMs.push(0);
-        const alongside = committed === 0 ? "" : ` (with ${String(committed)} tokens of other conversations already moving here)`;
-        drySpots.push(`resuming a ${String(input.resumeContextTokens)}-token conversation here${alongside} would cost about ${percent(cost)} of the 5h window, which has ${percent(fiveHour.remaining)} left`);
+      const alongside = committed === 0 ? "" : ` (with ${String(committed)} tokens of other conversations already moving here)`;
+      for (const [name, label, window] of [["fiveHour", "5h", fiveHour], ["sevenDay", "7d", sevenDay]]) {
+        const perToken = window === void 0 ? void 0 : utilisationPerBilledToken(assessment.member.records, name);
+        const cost = perToken === void 0 ? void 0 : (resumeTokens + committed) * perToken;
+        if (window !== void 0 && cost !== void 0 && cost > window.remaining) {
+          dryAfterMs.push(0);
+          drySpots.push(`resuming a ${String(resumeTokens)}-token conversation here${alongside} would cost about ${percent(cost)} of the ${label} window, which has ${percent(window.remaining)} left`);
+        }
       }
     }
     if (drySpots.length === 0) {
@@ -7691,8 +7808,8 @@ function segmentDay(epochMs) {
 function segmentName(day, pid) {
   return `${day}.${String(pid)}.jsonl`;
 }
-function listLogSegments(fs14, logDir) {
-  return fs14.readdir(logDir).flatMap((name) => {
+function listLogSegments(fs15, logDir) {
+  return fs15.readdir(logDir).flatMap((name) => {
     const match = SEGMENT_RE.exec(name);
     const day = match?.[1];
     if (day === void 0) {
@@ -7701,15 +7818,15 @@ function listLogSegments(fs14, logDir) {
     return [{ name, day, endsAt: Date.parse(`${day}T00:00:00.000Z`) + DAY_MS }];
   }).sort((left, right) => left.day.localeCompare(right.day) || left.name.localeCompare(right.name));
 }
-function readUsageLog(fs14, logDir, options = {}) {
+function readUsageLog(fs15, logDir, options = {}) {
   const { sinceMs } = options;
   const records = [];
   let invalidLines = 0;
-  for (const segment of listLogSegments(fs14, logDir)) {
+  for (const segment of listLogSegments(fs15, logDir)) {
     if (sinceMs !== void 0 && segment.endsAt <= sinceMs) {
       continue;
     }
-    const read = readSegment(fs14, logDir, segment);
+    const read = readSegment(fs15, logDir, segment);
     if (read === void 0) {
       continue;
     }
@@ -7723,8 +7840,8 @@ function readUsageLog(fs14, logDir, options = {}) {
   records.sort((left, right) => left.at.localeCompare(right.at));
   return { records, invalidLines };
 }
-function readSegment(fs14, logDir, segment) {
-  const contents = fs14.readFileUtf8(import_node_path20.default.join(logDir, segment.name));
+function readSegment(fs15, logDir, segment) {
+  const contents = fs15.readFileUtf8(import_node_path20.default.join(logDir, segment.name));
   if (contents === void 0) {
     return void 0;
   }
@@ -7758,9 +7875,9 @@ function snapshotPath(snapshotsDir, identity) {
   }
   return import_node_path20.default.join(snapshotsDir, `${identity}.json`);
 }
-function readUsageSnapshot(fs14, snapshotsDir, identity) {
+function readUsageSnapshot(fs15, snapshotsDir, identity) {
   const file = snapshotPath(snapshotsDir, identity);
-  const raw = fs14.readFileUtf8(file);
+  const raw = fs15.readFileUtf8(file);
   if (raw === void 0) {
     return void 0;
   }
@@ -7776,8 +7893,8 @@ function readUsageSnapshot(fs14, snapshotsDir, identity) {
   }
   return snapshot.data;
 }
-function listUsageSnapshots(fs14, snapshotsDir) {
-  return fs14.readdir(snapshotsDir).flatMap((name) => {
+function listUsageSnapshots(fs15, snapshotsDir) {
+  return fs15.readdir(snapshotsDir).flatMap((name) => {
     if (!name.endsWith(".json")) {
       return [];
     }
@@ -7785,7 +7902,7 @@ function listUsageSnapshots(fs14, snapshotsDir) {
     if (!isIdentityName(identity)) {
       return [];
     }
-    const snapshot = readUsageSnapshot(fs14, snapshotsDir, identity);
+    const snapshot = readUsageSnapshot(fs15, snapshotsDir, identity);
     return snapshot === void 0 ? [] : [snapshot];
   }).sort((left, right) => left.identity.localeCompare(right.identity));
 }
@@ -7810,11 +7927,11 @@ var init_read = __esm({
 });
 
 // src/usage/store.ts
-function pruneUsageLog(fs14, logDir, nowMs) {
+function pruneUsageLog(fs15, logDir, nowMs) {
   const cutoff = nowMs - USAGE_RETENTION_MS;
-  for (const segment of listLogSegments(fs14, logDir)) {
+  for (const segment of listLogSegments(fs15, logDir)) {
     if (segment.endsAt <= cutoff) {
-      fs14.removeRecursive(import_node_path21.default.join(logDir, segment.name));
+      fs15.removeRecursive(import_node_path21.default.join(logDir, segment.name));
     }
   }
 }
@@ -7843,7 +7960,7 @@ function foldProviderState(current, record) {
   };
 }
 function createUsageStore(deps) {
-  const { fs: fs14, paths } = deps;
+  const { fs: fs15, paths } = deps;
   let prunedDay;
   const rewriteSnapshot = (identity, fold) => {
     if (!isIdentityName(identity)) {
@@ -7852,7 +7969,7 @@ function createUsageStore(deps) {
     }
     let current;
     try {
-      current = readUsageSnapshot(fs14, paths.usageSnapshotsDir, identity);
+      current = readUsageSnapshot(fs15, paths.usageSnapshotsDir, identity);
     } catch (error) {
       if (!(error instanceof UsageSnapshotError)) {
         throw error;
@@ -7879,8 +7996,8 @@ function createUsageStore(deps) {
       ...account === void 0 ? {} : { account },
       providers
     });
-    fs14.mkdirPrivate(paths.usageSnapshotsDir);
-    fs14.writeFilePrivate(snapshotPath(paths.usageSnapshotsDir, identity), `${JSON.stringify(snapshot, null, 2)}
+    fs15.mkdirPrivate(paths.usageSnapshotsDir);
+    fs15.writeFilePrivate(snapshotPath(paths.usageSnapshotsDir, identity), `${JSON.stringify(snapshot, null, 2)}
 `);
     deps.publish?.(snapshot);
     return true;
@@ -7889,14 +8006,14 @@ function createUsageStore(deps) {
     record: (input) => {
       const record = UsageRecordSchema.parse(input);
       const nowMs = deps.now();
-      fs14.mkdirPrivate(paths.usageDir);
-      fs14.mkdirPrivate(paths.usageLogDir);
+      fs15.mkdirPrivate(paths.usageDir);
+      fs15.mkdirPrivate(paths.usageLogDir);
       const day = segmentDay(nowMs);
       if (prunedDay !== day) {
-        pruneUsageLog(fs14, paths.usageLogDir, nowMs);
+        pruneUsageLog(fs15, paths.usageLogDir, nowMs);
         prunedDay = day;
       }
-      fs14.appendFilePrivate(import_node_path21.default.join(paths.usageLogDir, segmentName(day, deps.pid)), `${JSON.stringify(record)}
+      fs15.appendFilePrivate(import_node_path21.default.join(paths.usageLogDir, segmentName(day, deps.pid)), `${JSON.stringify(record)}
 `);
       deps.onRecord?.(record);
       if (record.identity !== void 0) {
@@ -7939,14 +8056,14 @@ var init_store2 = __esm({
 function errorMessage(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function loadPoolMembers(fs14, paths, identities, nowMs) {
+function loadPoolMembers(fs15, paths, identities, nowMs) {
   const windowStartMs = nowMs - FIVE_HOUR_WINDOW_MS;
-  const log = readUsageLog(fs14, paths.usageLogDir, { sinceMs: windowStartMs });
+  const log = readUsageLog(fs15, paths.usageLogDir, { sinceMs: windowStartMs });
   return identities.map((identity) => {
     const records = log.records.filter((record) => record.identity === identity && record.provider === ANTHROPIC_PROVIDER && Date.parse(record.at) >= windowStartMs);
     try {
-      const snapshot = readUsageSnapshot(fs14, paths.usageSnapshotsDir, identity);
-      const account = readAccountMetadata(fs14, paths.identitiesDir, identity) ?? snapshot?.account;
+      const snapshot = readUsageSnapshot(fs15, paths.usageSnapshotsDir, identity);
+      const account = readAccountMetadata(fs15, paths.identitiesDir, identity) ?? snapshot?.account;
       return { identity, records, ...snapshot === void 0 ? {} : { snapshot }, ...account === void 0 ? {} : { account } };
     } catch (error) {
       if (error instanceof UsageSnapshotError || error instanceof AccountMetadataError) {
@@ -8065,9 +8182,9 @@ function collectPoolIdentities(pools, poolName, stack, found) {
     collectPoolIdentities(pools, nestedName, childStack, found);
   }
 }
-function readPicksFile(fs14, file) {
+function readPicksFile(fs15, file) {
   const empty = { schemaVersion: SCHEMA_VERSION, picks: {} };
-  const raw = fs14.readFileUtf8(file);
+  const raw = fs15.readFileUtf8(file);
   if (raw === void 0) {
     return { file: empty };
   }
@@ -8080,17 +8197,17 @@ function readPicksFile(fs14, file) {
   const result = PicksFileSchema.safeParse(parsed);
   return result.success ? { file: result.data } : { file: empty, problem: `${file} is not a picks file this agent-shim can read` };
 }
-function readStickyPick(fs14, picksFile, directory) {
-  const read = readPicksFile(fs14, picksFile);
+function readStickyPick(fs15, picksFile, directory) {
+  const read = readPicksFile(fs15, picksFile);
   const entry = read.file.picks[directory];
   return { ...entry === void 0 ? {} : { sticky: entry }, ...read.problem === void 0 ? {} : { problem: read.problem } };
 }
-function recordStickyPick(fs14, picksFile, directory, identity, nowMs) {
-  const current = readPicksFile(fs14, picksFile).file.picks;
+function recordStickyPick(fs15, picksFile, directory, identity, nowMs) {
+  const current = readPicksFile(fs15, picksFile).file.picks;
   const kept = Object.entries(current).filter(([, entry]) => nowMs - Date.parse(entry.at) <= USAGE_RETENTION_MS);
   const next = { schemaVersion: SCHEMA_VERSION, picks: { ...Object.fromEntries(kept), [directory]: { identity, at: new Date(nowMs).toISOString() } } };
-  fs14.mkdirPrivate(import_node_path22.default.dirname(picksFile));
-  fs14.writeFilePrivate(picksFile, `${JSON.stringify(next, null, 2)}
+  fs15.mkdirPrivate(import_node_path22.default.dirname(picksFile));
+  fs15.writeFilePrivate(picksFile, `${JSON.stringify(next, null, 2)}
 `);
 }
 var import_node_path22, import_zod15, PoolGraphError, SCHEMA_VERSION, PickEntrySchema, PicksFileSchema;
@@ -8124,9 +8241,9 @@ var init_poolPick = __esm({
 });
 
 // src/statusline/keys.ts
-function valueAt(source, path42) {
+function valueAt(source, path45) {
   let current = source;
-  for (const part of path42) {
+  for (const part of path45) {
     if (!isPlainObject(current)) {
       return void 0;
     }
@@ -8134,14 +8251,14 @@ function valueAt(source, path42) {
   }
   return current;
 }
-function acceptsNull(path42) {
-  const layer = path42.reduceRight((inner, part) => ({ [part]: inner }), null);
+function acceptsNull(path45) {
+  const layer = path45.reduceRight((inner, part) => ({ [part]: inner }), null);
   return StatuslineSchema.safeParse(layer).success;
 }
-function keyOf(path42, declared) {
+function keyOf(path45, declared) {
   const optional = declared instanceof import_zod16.z.ZodOptional;
   const leaf = optional ? declared.unwrap() : declared;
-  const common = { path: path42.join("."), description: declared.description ?? "", defaultValue: valueAt(STATUSLINE_DEFAULTS, path42), optional, unsettable: acceptsNull(path42) };
+  const common = { path: path45.join("."), description: declared.description ?? "", defaultValue: valueAt(STATUSLINE_DEFAULTS, path45), optional, unsettable: acceptsNull(path45) };
   if (leaf instanceof import_zod16.z.ZodNumber) {
     return { ...common, kind: "integer", choices: [] };
   }
@@ -8166,7 +8283,7 @@ function keyOf(path42, declared) {
   if (leaf instanceof import_zod16.z.ZodArray && leaf.element instanceof import_zod16.z.ZodString) {
     return { ...common, kind: "textList", choices: [] };
   }
-  throw new TypeError(`statusline setting ${path42.join(".")} has a kind the key listing does not describe`);
+  throw new TypeError(`statusline setting ${path45.join(".")} has a kind the key listing does not describe`);
 }
 function walk(shape, prefix) {
   return Object.entries(shape).flatMap(([name, schema]) => schema instanceof import_zod16.z.ZodObject ? walk(schema.shape, [...prefix, name]) : [keyOf([...prefix, name], schema)]);
@@ -8184,15 +8301,15 @@ var init_keys = __esm({
 });
 
 // src/statusline/change.ts
-function keyNamed(path42) {
-  const found = statuslineKeys().find((key) => key.path === path42);
+function keyNamed(path45) {
+  const found = statuslineKeys().find((key) => key.path === path45);
   if (found === void 0) {
-    throw new UsageError(`"${path42}" is not a statusline setting; \`agent-shim statusline keys\` lists them.`);
+    throw new UsageError(`"${path45}" is not a statusline setting; \`agent-shim statusline keys\` lists them.`);
   }
   return found;
 }
-function setAt(target, path42, value) {
-  const [head, ...rest] = path42;
+function setAt(target, path45, value) {
+  const [head, ...rest] = path45;
   if (head === void 0) {
     return;
   }
@@ -8205,8 +8322,8 @@ function setAt(target, path42, value) {
   target[head] = next;
   setAt(next, rest, value);
 }
-function removeAt(target, path42) {
-  const [head, ...rest] = path42;
+function removeAt(target, path45) {
+  const [head, ...rest] = path45;
   if (head === void 0) {
     return;
   }
@@ -8224,13 +8341,13 @@ function removeAt(target, path42) {
 }
 function applyStatuslineChange(existing, change) {
   const draft = structuredClone(existing ?? {});
-  for (const [path42, value] of Object.entries(change.set ?? {})) {
-    keyNamed(path42);
-    setAt(draft, path42.split("."), value);
+  for (const [path45, value] of Object.entries(change.set ?? {})) {
+    keyNamed(path45);
+    setAt(draft, path45.split("."), value);
   }
-  for (const path42 of change.unset ?? []) {
-    keyNamed(path42);
-    removeAt(draft, path42.split("."));
+  for (const path45 of change.unset ?? []) {
+    keyNamed(path45);
+    removeAt(draft, path45.split("."));
   }
   const result = StatuslineSchema.safeParse(draft);
   if (!result.success) {
@@ -8516,6 +8633,8 @@ function buildLayoutPaths(root) {
     usageAnchorsFile: import_node_path23.default.join(root, "usage", "anchors.json"),
     usageJobsFile: import_node_path23.default.join(root, "usage", "jobs.json"),
     jobLogsDir: import_node_path23.default.join(root, "logs", "jobs"),
+    identityRenamesDir: import_node_path23.default.join(root, "identity-renames"),
+    launchesDir: import_node_path23.default.join(root, "launches"),
     superviseDir: import_node_path23.default.join(root, "supervise"),
     modelMovesDir: import_node_path23.default.join(root, "model-moves"),
     mcpPermissionsFile: import_node_path23.default.join(root, "mcp", "permissions.json")
@@ -9234,7 +9353,12 @@ function readProvider(paths, name) {
   if (!import_node_fs6.default.existsSync(filePath)) {
     return void 0;
   }
-  const raw = JSON.parse(import_node_fs6.default.readFileSync(filePath, "utf8"));
+  let raw;
+  try {
+    raw = JSON.parse(import_node_fs6.default.readFileSync(filePath, "utf8"));
+  } catch (error) {
+    throw error instanceof SyntaxError ? new ConfigFileNotJsonError(filePath) : error;
+  }
   return parseProviderFile(filePath, raw);
 }
 function loadProvider(providersDir, name, port) {
@@ -9256,7 +9380,7 @@ function listProviders(paths, onInvalid = reportInvalidProvider) {
     try {
       provider = readProvider(paths, name);
     } catch (error) {
-      if (!(error instanceof ConfigValidationError || error instanceof LegacyProviderFileError || error instanceof UnsafeNameError)) {
+      if (!(error instanceof ConfigValidationError || error instanceof LegacyProviderFileError || error instanceof ConfigFileNotJsonError || error instanceof UnsafeNameError)) {
         throw error;
       }
       onInvalid(name, error.message);
@@ -9601,13 +9725,13 @@ function decideSignIn(facts) {
 function credentialsFilePath(farmRoot) {
   return import_node_path25.default.join(farmRoot, CREDENTIALS_FILE);
 }
-function identitySignIn(fs14, probe, identity) {
+function identitySignIn(fs15, probe, identity) {
   const probing = !identity.hasCredentialBlock && identity.provider === void 0;
   return decideSignIn({
     hasCredentialBlock: identity.hasCredentialBlock,
     provider: identity.provider,
     keychainItem: probing && probe.platform === "darwin" && probe.run !== void 0 ? keychainHasItem(probe.run, identity.farmRoot) : void 0,
-    credentialsFile: probing && fs14.lstat(credentialsFilePath(identity.farmRoot)) !== void 0,
+    credentialsFile: probing && fs15.lstat(credentialsFilePath(identity.farmRoot)) !== void 0,
     platform: probe.platform
   });
 }
@@ -9988,62 +10112,62 @@ var init_signatures = __esm({
 });
 
 // src/codex/anthropic.ts
-var import_zod27, TextBlockSchema, Base64ImageSourceSchema, UrlImageSourceSchema, ImageBlockSchema, ToolUseBlockSchema, ToolResultContentBlockSchema, ToolResultBlockSchema, OtherBlockSchema, ContentBlockSchema, MessageSchema, ToolSchema, ToolChoiceSchema, SystemSchema, MessagesRequestSchema, CountTokensRequestSchema;
+var import_zod28, TextBlockSchema, Base64ImageSourceSchema, UrlImageSourceSchema, ImageBlockSchema, ToolUseBlockSchema, ToolResultContentBlockSchema, ToolResultBlockSchema, OtherBlockSchema, ContentBlockSchema, MessageSchema, ToolSchema, ToolChoiceSchema, SystemSchema, MessagesRequestSchema, CountTokensRequestSchema;
 var init_anthropic = __esm({
   "src/codex/anthropic.ts"() {
     "use strict";
-    import_zod27 = require("zod");
-    TextBlockSchema = import_zod27.z.looseObject({ type: import_zod27.z.literal("text"), text: import_zod27.z.string() });
-    Base64ImageSourceSchema = import_zod27.z.looseObject({ type: import_zod27.z.literal("base64"), media_type: import_zod27.z.string().min(1), data: import_zod27.z.string() });
-    UrlImageSourceSchema = import_zod27.z.looseObject({ type: import_zod27.z.literal("url"), url: import_zod27.z.string().min(1) });
-    ImageBlockSchema = import_zod27.z.looseObject({
-      type: import_zod27.z.literal("image"),
-      source: import_zod27.z.union([Base64ImageSourceSchema, UrlImageSourceSchema])
+    import_zod28 = require("zod");
+    TextBlockSchema = import_zod28.z.looseObject({ type: import_zod28.z.literal("text"), text: import_zod28.z.string() });
+    Base64ImageSourceSchema = import_zod28.z.looseObject({ type: import_zod28.z.literal("base64"), media_type: import_zod28.z.string().min(1), data: import_zod28.z.string() });
+    UrlImageSourceSchema = import_zod28.z.looseObject({ type: import_zod28.z.literal("url"), url: import_zod28.z.string().min(1) });
+    ImageBlockSchema = import_zod28.z.looseObject({
+      type: import_zod28.z.literal("image"),
+      source: import_zod28.z.union([Base64ImageSourceSchema, UrlImageSourceSchema])
     });
-    ToolUseBlockSchema = import_zod27.z.looseObject({
-      type: import_zod27.z.literal("tool_use"),
-      id: import_zod27.z.string().min(1),
-      name: import_zod27.z.string().min(1),
-      input: import_zod27.z.unknown()
+    ToolUseBlockSchema = import_zod28.z.looseObject({
+      type: import_zod28.z.literal("tool_use"),
+      id: import_zod28.z.string().min(1),
+      name: import_zod28.z.string().min(1),
+      input: import_zod28.z.unknown()
     });
-    ToolResultContentBlockSchema = import_zod27.z.union([TextBlockSchema, import_zod27.z.looseObject({ type: import_zod27.z.string() })]);
-    ToolResultBlockSchema = import_zod27.z.looseObject({
-      type: import_zod27.z.literal("tool_result"),
-      tool_use_id: import_zod27.z.string().min(1),
-      content: import_zod27.z.union([import_zod27.z.string(), import_zod27.z.array(ToolResultContentBlockSchema)]).optional()
+    ToolResultContentBlockSchema = import_zod28.z.union([TextBlockSchema, import_zod28.z.looseObject({ type: import_zod28.z.string() })]);
+    ToolResultBlockSchema = import_zod28.z.looseObject({
+      type: import_zod28.z.literal("tool_result"),
+      tool_use_id: import_zod28.z.string().min(1),
+      content: import_zod28.z.union([import_zod28.z.string(), import_zod28.z.array(ToolResultContentBlockSchema)]).optional()
     });
-    OtherBlockSchema = import_zod27.z.looseObject({ type: import_zod27.z.string() });
-    ContentBlockSchema = import_zod27.z.union([TextBlockSchema, ImageBlockSchema, ToolUseBlockSchema, ToolResultBlockSchema, OtherBlockSchema]);
-    MessageSchema = import_zod27.z.looseObject({
-      role: import_zod27.z.enum(["user", "assistant", "system"]),
-      content: import_zod27.z.union([import_zod27.z.string(), import_zod27.z.array(ContentBlockSchema)])
+    OtherBlockSchema = import_zod28.z.looseObject({ type: import_zod28.z.string() });
+    ContentBlockSchema = import_zod28.z.union([TextBlockSchema, ImageBlockSchema, ToolUseBlockSchema, ToolResultBlockSchema, OtherBlockSchema]);
+    MessageSchema = import_zod28.z.looseObject({
+      role: import_zod28.z.enum(["user", "assistant", "system"]),
+      content: import_zod28.z.union([import_zod28.z.string(), import_zod28.z.array(ContentBlockSchema)])
     });
-    ToolSchema = import_zod27.z.looseObject({
-      name: import_zod27.z.string().min(1),
-      description: import_zod27.z.string().optional(),
-      input_schema: import_zod27.z.record(import_zod27.z.string(), import_zod27.z.unknown()).optional()
+    ToolSchema = import_zod28.z.looseObject({
+      name: import_zod28.z.string().min(1),
+      description: import_zod28.z.string().optional(),
+      input_schema: import_zod28.z.record(import_zod28.z.string(), import_zod28.z.unknown()).optional()
     });
-    ToolChoiceSchema = import_zod27.z.union([
-      import_zod27.z.looseObject({ type: import_zod27.z.enum(["auto", "none", "any"]) }),
-      import_zod27.z.looseObject({ type: import_zod27.z.literal("tool"), name: import_zod27.z.string().min(1) })
+    ToolChoiceSchema = import_zod28.z.union([
+      import_zod28.z.looseObject({ type: import_zod28.z.enum(["auto", "none", "any"]) }),
+      import_zod28.z.looseObject({ type: import_zod28.z.literal("tool"), name: import_zod28.z.string().min(1) })
     ]);
-    SystemSchema = import_zod27.z.union([import_zod27.z.string(), import_zod27.z.array(import_zod27.z.union([TextBlockSchema, OtherBlockSchema]))]);
-    MessagesRequestSchema = import_zod27.z.looseObject({
-      model: import_zod27.z.string().optional(),
+    SystemSchema = import_zod28.z.union([import_zod28.z.string(), import_zod28.z.array(import_zod28.z.union([TextBlockSchema, OtherBlockSchema]))]);
+    MessagesRequestSchema = import_zod28.z.looseObject({
+      model: import_zod28.z.string().optional(),
       system: SystemSchema.optional(),
-      messages: import_zod27.z.array(MessageSchema),
-      tools: import_zod27.z.array(ToolSchema).optional(),
+      messages: import_zod28.z.array(MessageSchema),
+      tools: import_zod28.z.array(ToolSchema).optional(),
       tool_choice: ToolChoiceSchema.optional(),
-      stream: import_zod27.z.boolean().optional(),
+      stream: import_zod28.z.boolean().optional(),
       /** `user_id` is stable for one Claude Code session and differs between sessions, which is what makes it the right key for both the backend's prompt cache and its session header. */
-      metadata: import_zod27.z.looseObject({ user_id: import_zod27.z.string().optional() }).optional(),
+      metadata: import_zod28.z.looseObject({ user_id: import_zod28.z.string().optional() }).optional(),
       /** Claude Code's effort setting. Any string is accepted; the translator honours only the levels the backend understands. */
-      output_config: import_zod27.z.looseObject({ effort: import_zod27.z.string().optional() }).optional()
+      output_config: import_zod28.z.looseObject({ effort: import_zod28.z.string().optional() }).optional()
     });
-    CountTokensRequestSchema = import_zod27.z.looseObject({
-      system: import_zod27.z.unknown().optional(),
-      messages: import_zod27.z.unknown().optional(),
-      tools: import_zod27.z.unknown().optional()
+    CountTokensRequestSchema = import_zod28.z.looseObject({
+      system: import_zod28.z.unknown().optional(),
+      messages: import_zod28.z.unknown().optional(),
+      tools: import_zod28.z.unknown().optional()
     });
   }
 });
@@ -10145,12 +10269,12 @@ function filterCatalogue(models, catalogue) {
   const excluded = catalogue.exclude === void 0 ? void 0 : (0, import_picomatch4.default)(catalogue.exclude, { dot: true });
   return models.filter((model) => included?.(model.id) !== false && excluded?.(model.id) !== true);
 }
-var import_picomatch4, import_zod28, DEFAULT_CANDIDATE_URLS, MS_PER_SECOND5, SECONDS_PER_HOUR2, HOURS_PER_DAY5, MS_PER_HOUR4, HOURS_BETWEEN_RETRIES, CATALOGUE_MAX_AGE_MS, CATALOGUE_RETRY_MS, CATALOGUE_REQUEST_SECONDS, CATALOGUE_REQUEST_TIMEOUT_MS, CATALOGUE_REFRESH_TIMEOUT_MS, CatalogueModelSchema, CatalogueCacheSchema;
+var import_picomatch4, import_zod29, DEFAULT_CANDIDATE_URLS, MS_PER_SECOND5, SECONDS_PER_HOUR2, HOURS_PER_DAY5, MS_PER_HOUR4, HOURS_BETWEEN_RETRIES, CATALOGUE_MAX_AGE_MS, CATALOGUE_RETRY_MS, CATALOGUE_REQUEST_SECONDS, CATALOGUE_REQUEST_TIMEOUT_MS, CATALOGUE_REFRESH_TIMEOUT_MS, CatalogueModelSchema, CatalogueCacheSchema;
 var init_providerCatalogue = __esm({
   "src/providerCatalogue.ts"() {
     "use strict";
     import_picomatch4 = __toESM(require("picomatch"), 1);
-    import_zod28 = require("zod");
+    import_zod29 = require("zod");
     init_names();
     DEFAULT_CANDIDATE_URLS = 2;
     MS_PER_SECOND5 = 1e3;
@@ -10163,8 +10287,8 @@ var init_providerCatalogue = __esm({
     CATALOGUE_REQUEST_SECONDS = 10;
     CATALOGUE_REQUEST_TIMEOUT_MS = CATALOGUE_REQUEST_SECONDS * MS_PER_SECOND5;
     CATALOGUE_REFRESH_TIMEOUT_MS = DEFAULT_CANDIDATE_URLS * CATALOGUE_REQUEST_TIMEOUT_MS;
-    CatalogueModelSchema = import_zod28.z.strictObject({ id: import_zod28.z.string().min(1), name: import_zod28.z.string().min(1).optional() });
-    CatalogueCacheSchema = import_zod28.z.strictObject({ fetchedAt: import_zod28.z.number(), url: import_zod28.z.string().min(1), models: import_zod28.z.array(CatalogueModelSchema) });
+    CatalogueModelSchema = import_zod29.z.strictObject({ id: import_zod29.z.string().min(1), name: import_zod29.z.string().min(1).optional() });
+    CatalogueCacheSchema = import_zod29.z.strictObject({ fetchedAt: import_zod29.z.number(), url: import_zod29.z.string().min(1), models: import_zod29.z.array(CatalogueModelSchema) });
   }
 });
 
@@ -10471,6 +10595,60 @@ var init_proxyBypass2 = __esm({
   }
 });
 
+// src/replayRun.ts
+function keyOf2(command, args) {
+  return JSON.stringify([command, args]);
+}
+async function recordRuns(decide, runAsync) {
+  const answers = /* @__PURE__ */ new Map();
+  const replay = {
+    run: (command, args) => {
+      const answer = answers.get(keyOf2(command, args));
+      if (answer === void 0) {
+        throw new RunNeededError(command, args);
+      }
+      return answer;
+    }
+  };
+  for (; ; ) {
+    try {
+      decide(replay);
+      return replay;
+    } catch (error) {
+      if (!(error instanceof RunNeededError)) {
+        throw error;
+      }
+      answers.set(keyOf2(error.command, error.args), await runAsync(error.command, error.args));
+    }
+  }
+}
+async function resolveWithAsyncRuns(decide, runAsync) {
+  let result;
+  await recordRuns((run) => {
+    result = { value: decide(run) };
+  }, runAsync);
+  if (result === void 0) {
+    throw new Error("the decision finished without a result");
+  }
+  return result.value;
+}
+var RunNeededError;
+var init_replayRun = __esm({
+  "src/replayRun.ts"() {
+    "use strict";
+    RunNeededError = class extends Error {
+      constructor(command, args) {
+        super(`no recorded answer for ${command} ${args.join(" ")}`);
+        this.command = command;
+        this.args = args;
+        this.name = "RunNeededError";
+      }
+      command;
+      args;
+    };
+  }
+});
+
 // src/update/update.ts
 function compareVersions3(left, right) {
   const parse = (version) => {
@@ -10977,6 +11155,59 @@ var init_cliOverride = __esm({
   }
 });
 
+// src/launcher/launchRecords.ts
+function recordFile(directory, pid, identity) {
+  return import_node_path38.default.join(directory, `${String(pid)}.${identity}${RECORD_SUFFIX}`);
+}
+function readRecord(fs15, directory, name) {
+  if (!name.endsWith(RECORD_SUFFIX)) {
+    return void 0;
+  }
+  const raw = fs15.readFileUtf8(import_node_path38.default.join(directory, name));
+  if (raw === void 0) {
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+  const result = LaunchRecordSchema.safeParse(parsed);
+  return result.success ? result.data : void 0;
+}
+function registerLaunch(fs15, directory, owner, isRunning) {
+  fs15.mkdirPrivate(directory);
+  for (const name of fs15.readdir(directory)) {
+    const record2 = readRecord(fs15, directory, name);
+    if (record2 !== void 0 && !isRunning(record2.pid)) {
+      fs15.removeRecursive(import_node_path38.default.join(directory, name));
+    }
+  }
+  const file = recordFile(directory, owner.pid, owner.identity);
+  const record = { pid: owner.pid, identity: owner.identity, startedAt: new Date(owner.startedAtMs).toISOString() };
+  fs15.writeFilePrivate(file, `${JSON.stringify(record)}
+`);
+  return () => {
+    fs15.removeRecursive(file);
+  };
+}
+var import_node_path38, import_zod36, LaunchRecordSchema, RECORD_SUFFIX;
+var init_launchRecords = __esm({
+  "src/launcher/launchRecords.ts"() {
+    "use strict";
+    import_node_path38 = __toESM(require("node:path"), 1);
+    import_zod36 = require("zod");
+    LaunchRecordSchema = import_zod36.z.strictObject({
+      /** The launcher's process id, which is what tells a launch in progress from a record a crashed launcher left behind. */
+      pid: import_zod36.z.number().int().positive(),
+      identity: import_zod36.z.string().min(1),
+      startedAt: import_zod36.z.iso.datetime()
+    });
+    RECORD_SUFFIX = ".json";
+  }
+});
+
 // src/headroom/headers.ts
 function mergeAnthropicCustomHeaders(existing, additions) {
   const merged = /* @__PURE__ */ new Map();
@@ -11100,7 +11331,7 @@ function buildEnv(params) {
   const parentCustomHeaders = params.baseEnv.ANTHROPIC_CUSTOM_HEADERS;
   let providerCustomHeaders;
   if (!params.configDirEscapeHatch && params.resolvedIdentityName !== void 0) {
-    env.CLAUDE_CONFIG_DIR = import_node_path36.default.join(params.identitiesDir, params.resolvedIdentityName);
+    env.CLAUDE_CONFIG_DIR = import_node_path39.default.join(params.identitiesDir, params.resolvedIdentityName);
   }
   if (params.provider !== void 0) {
     const providerEnv = params.provider.definition.kind !== void 0 && params.provider.definition.kind !== "http" ? {} : params.provider.definition.env ?? {};
@@ -11154,11 +11385,11 @@ function buildEnv(params) {
   }
   return env;
 }
-var import_node_path36, LOOPBACK_HOSTS, PROVIDER_SESSION_PLACEHOLDER;
+var import_node_path39, LOOPBACK_HOSTS, PROVIDER_SESSION_PLACEHOLDER;
 var init_flags = __esm({
   "src/launcher/flags.ts"() {
     "use strict";
-    import_node_path36 = __toESM(require("node:path"), 1);
+    import_node_path39 = __toESM(require("node:path"), 1);
     init_envBool();
     init_cliError();
     init_conditions();
@@ -11243,15 +11474,15 @@ function contextTokensOfTranscript(text) {
   }
   return void 0;
 }
-function newestTranscript(fs14, projectDir) {
+function newestTranscript(fs15, projectDir) {
   let newest;
   let newestMs = -Infinity;
-  for (const name of fs14.readdir(projectDir)) {
+  for (const name of fs15.readdir(projectDir)) {
     if (!name.endsWith(".jsonl")) {
       continue;
     }
-    const candidate = import_node_path37.default.join(projectDir, name);
-    const stat = fs14.lstat(candidate);
+    const candidate = import_node_path40.default.join(projectDir, name);
+    const stat = fs15.lstat(candidate);
     if (stat?.kind === "file" && stat.mtimeMs > newestMs) {
       newestMs = stat.mtimeMs;
       newest = candidate;
@@ -11259,21 +11490,21 @@ function newestTranscript(fs14, projectDir) {
   }
   return newest;
 }
-function resumedContextTokens(fs14, params) {
+function resumedContextTokens(fs15, params) {
   const target = resumeTargetOf(params.passthrough);
   if (target === void 0) {
     return void 0;
   }
-  const projectDir = import_node_path37.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd));
-  const file = target.kind === "id" ? import_node_path37.default.join(projectDir, `${target.id}.jsonl`) : newestTranscript(fs14, projectDir);
-  const text = file === void 0 ? void 0 : fs14.readFileUtf8(file);
+  const projectDir = import_node_path40.default.join(params.claudeHome, "projects", projectDirNameOf(params.cwd));
+  const file = target.kind === "id" ? import_node_path40.default.join(projectDir, `${target.id}.jsonl`) : newestTranscript(fs15, projectDir);
+  const text = file === void 0 ? void 0 : fs15.readFileUtf8(file);
   return text === void 0 ? void 0 : contextTokensOfTranscript(text);
 }
-var import_node_path37;
+var import_node_path40;
 var init_resumeContext = __esm({
   "src/usage/resumeContext.ts"() {
     "use strict";
-    import_node_path37 = __toESM(require("node:path"), 1);
+    import_node_path40 = __toESM(require("node:path"), 1);
   }
 });
 
@@ -11870,7 +12101,7 @@ function resolveIdentityCredential(identity, credential, env, port) {
   return resolution.ok ? resolution : { ok: false, status: CREDENTIAL_UNAVAILABLE_EXIT, message: resolution.message };
 }
 function pickFromPool(decided, params, parsedArgv, readOnly) {
-  const { paths, fs: fs14, proc, log } = params;
+  const { paths, fs: fs15, proc, log } = params;
   if (decided.pool === void 0) {
     return { identityDecision: decided };
   }
@@ -11889,7 +12120,7 @@ function pickFromPool(decided, params, parsedArgv, readOnly) {
     selectedVia: decided.source,
     pools: params.pools,
     paths,
-    fs: fs14,
+    fs: fs15,
     usageFs: farmRuntime.fs,
     cwd: farmRuntime.cwd,
     now: farmRuntime.now,
@@ -11913,7 +12144,7 @@ function pickFromPool(decided, params, parsedArgv, readOnly) {
   };
 }
 function decideLaunch(params, readOnly) {
-  const { paths, fs: fs14, proc, log } = params;
+  const { paths, fs: fs15, proc, log } = params;
   const { env, argv } = proc;
   const parsedArgv = parseLauncherArgv(argv);
   const cliOverride = buildCliOverride({
@@ -11928,7 +12159,7 @@ function decideLaunch(params, readOnly) {
     argv0Identity: params.pickedIdentity ?? parsedArgv.identity,
     directoryPinnedIdentity: params.directoryPinnedIdentity,
     readActiveIdentityFile: () => {
-      const raw = fs14.readFileUtf8(paths.activeIdentityFile);
+      const raw = fs15.readFileUtf8(paths.activeIdentityFile);
       if (raw === void 0) {
         return void 0;
       }
@@ -11963,7 +12194,7 @@ function decideLaunch(params, readOnly) {
   }
   let loadedIdentity;
   if (identityDecision.name !== void 0) {
-    loadedIdentity = loadIdentity(paths.identitiesDir, identityDecision.name, fs14);
+    loadedIdentity = loadIdentity(paths.identitiesDir, identityDecision.name, fs15);
     if (loadedIdentity === void 0) {
       log.error(
         `agent-shim: no identity named "${identityDecision.name}" (selected via ${identityDecision.source}). Run \`agent-shim identity add ${identityDecision.name}\` first.`
@@ -11978,7 +12209,7 @@ function decideLaunch(params, readOnly) {
     identityDefaultConfigProfile: loadedIdentity?.config.defaultConfigProfile,
     globalDefaultConfigProfile: params.globalDefaultConfigProfile
   });
-  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs14.readConfigFile(profileFilePath(paths.configProfilesDir, configProfileDecision.name, `the configuration profile selected via ${configProfileDecision.source}`)) === void 0) {
+  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs15.readConfigFile(profileFilePath(paths.configProfilesDir, configProfileDecision.name, `the configuration profile selected via ${configProfileDecision.source}`)) === void 0) {
     log.error(
       `agent-shim: no configuration profile named "${configProfileDecision.name}" (selected via ${configProfileDecision.source}). Run \`agent-shim profile add ${configProfileDecision.name}\` first.`
     );
@@ -11987,7 +12218,7 @@ function decideLaunch(params, readOnly) {
   const farmContext = farm !== void 0 && farmIdentity !== void 0 ? { farm, identity: farmIdentity, cascade: farm.loadCascade(configProfileDecision.name, cliOverride) } : void 0;
   const providerParams = {
     paths,
-    port: fs14,
+    port: fs15,
     ...parsedArgv.provider === void 0 || parsedArgv.provider === false ? {} : { cliProvider: parsedArgv.provider },
     ...farmContext === void 0 ? {} : { cascade: farmContext.cascade },
     ...loadedIdentity?.config.provider === void 0 ? {} : { identityProvider: loadedIdentity.config.provider }
@@ -12099,9 +12330,9 @@ function decideLaunch(params, readOnly) {
   const flags = loginlessProvider === void 0 ? requestedFlags : { ...requestedFlags, remoteControl: false };
   const globalModels = loadConfigFile(paths.globalConfigFile, GlobalConfigSchema, params.fs.readConfigFile)?.config.models;
   const models = launchCascade !== void 0 && params.farm !== void 0 ? cascadeModels : globalModels;
-  const listedProviders = listProviderNames(fs14.readdir, paths.providersDir).flatMap((name) => {
+  const listedProviders = listProviderNames(fs15.readdir, paths.providersDir).flatMap((name) => {
     try {
-      const definition = loadProvider(paths.providersDir, name, fs14);
+      const definition = loadProvider(paths.providersDir, name, fs15);
       return definition === void 0 ? [] : [[name, definition, parseCatalogueCache(params.fs.readFileUtf8(catalogueCachePath(paths, name)))?.models ?? []]];
     } catch {
       return [];
@@ -12119,7 +12350,7 @@ function decideLaunch(params, readOnly) {
     extraFlags: splitExtraFlags(env.CLAUDE_EXTRA_FLAGS),
     passthrough: withLauncherSettings(params.supervised === void 0 ? parsedArgv.rest : withSupervision(parsedArgv.rest, params.supervised), launcherSettings)
   }) : [...parsedArgv.rest];
-  const configDir = configDirEscapeHatchApplies || identityDecision.name === void 0 ? env.CLAUDE_CONFIG_DIR : import_node_path38.default.join(paths.identitiesDir, identityDecision.name);
+  const configDir = configDirEscapeHatchApplies || identityDecision.name === void 0 ? env.CLAUDE_CONFIG_DIR : import_node_path41.default.join(paths.identitiesDir, identityDecision.name);
   const decision = {
     identitySource: identityDecision.source,
     configDirEscapeHatch: identityDecision.configDirEscapeHatch,
@@ -12157,6 +12388,19 @@ function decideLaunch(params, readOnly) {
   };
 }
 function prepareLaunch(params) {
+  const removers = [];
+  try {
+    return prepareRegisteredLaunch(params, (remove) => {
+      removers.push(remove);
+    });
+  } catch (error) {
+    for (const remove of removers) {
+      remove();
+    }
+    throw error;
+  }
+}
+function prepareRegisteredLaunch(params, onRecorded) {
   const { paths, proc, log } = params;
   const { env } = proc;
   const decided = decideLaunch(params, false);
@@ -12177,14 +12421,17 @@ function prepareLaunch(params) {
     })
   ];
   let warnings = [];
+  let unregisterLaunch;
   const updateCheck = runLaunchUpdateCheck({
     mode: params.updateMode ?? "off",
-    checkPath: import_node_path38.default.join(paths.root, "update.check"),
+    checkPath: import_node_path41.default.join(paths.root, "update.check"),
     currentVersion: package_default.version,
     port: params.update
   });
   if (decided.farmContext !== void 0) {
     const { farm: resyncFarmRuntime, identity: resyncIdentity, cascade } = decided.farmContext;
+    unregisterLaunch = registerLaunch(resyncFarmRuntime.fs, paths.launchesDir, { pid: resyncFarmRuntime.lock.pid, identity: resyncIdentity, startedAtMs: resyncFarmRuntime.now() }, resyncFarmRuntime.lock.isRunning);
+    onRecorded(unregisterLaunch);
     let result;
     try {
       result = resyncFarm({
@@ -12202,10 +12449,11 @@ function prepareLaunch(params) {
         classification: resyncFarmRuntime.classification,
         now: resyncFarmRuntime.now,
         uniqueSuffix: resyncFarmRuntime.uniqueSuffix,
+        identityExists: () => loadIdentity(paths.identitiesDir, resyncIdentity, params.fs) !== void 0,
         lock: resyncFarmRuntime.lock
       });
     } catch (error) {
-      if (error instanceof IdentityLockBusyError) {
+      if (error instanceof IdentityLockBusyError || error instanceof IdentityGoneError) {
         log.error(error.message);
         proc.exit(1);
       }
@@ -12265,7 +12513,7 @@ function prepareLaunch(params) {
     proxyBypass: resolvedFlags.proxyBypass,
     ...resolvedFlags.statusline === void 0 ? {} : { statusline: resolvedFlags.statusline }
   });
-  const releases = [...headroom === void 0 || headroomPort === void 0 ? [] : [headroomPort.release], ...frontDoorRelease === void 0 ? [] : [frontDoorRelease]];
+  const releases = [...unregisterLaunch === void 0 ? [] : [unregisterLaunch], ...headroom === void 0 || headroomPort === void 0 ? [] : [headroomPort.release], ...frontDoorRelease === void 0 ? [] : [frontDoorRelease]];
   const release = () => {
     for (const registered of releases) {
       registered();
@@ -12326,18 +12574,19 @@ function runLaunchPlan(plan, spawn3) {
 function runLauncher(params) {
   params.proc.exit(runLaunchPlan(prepareLaunch(params), params.spawn));
 }
-var import_node_crypto11, import_node_util2, import_node_path38;
+var import_node_crypto11, import_node_util2, import_node_path41;
 var init_launcher = __esm({
   "src/launcher.ts"() {
     "use strict";
     import_node_crypto11 = require("node:crypto");
     import_node_util2 = require("node:util");
-    import_node_path38 = __toESM(require("node:path"), 1);
+    import_node_path41 = __toESM(require("node:path"), 1);
     init_package();
     init_envBool();
     init_argv();
     init_cliOverride();
     init_farm();
+    init_launchRecords();
     init_guard();
     init_identity();
     init_flags();
@@ -12377,13 +12626,13 @@ function agentShimCliPath(distDir = typeof __AGENT_SHIM_DIST_DIR__ === "string"
   if (distDir === void 0) {
     throw new OwnCliPathUnknownError();
   }
-  return import_node_path39.default.join(distDir, OWN_CLI_FILE_NAME);
+  return import_node_path42.default.join(distDir, OWN_CLI_FILE_NAME);
 }
-var import_node_path39, OWN_CLI_FILE_NAME, OwnCliPathUnknownError;
+var import_node_path42, OWN_CLI_FILE_NAME, OwnCliPathUnknownError;
 var init_ownCli = __esm({
   "src/ownCli.ts"() {
     "use strict";
-    import_node_path39 = __toESM(require("node:path"), 1);
+    import_node_path42 = __toESM(require("node:path"), 1);
     init_cliError();
     OWN_CLI_FILE_NAME = "cli.cjs";
     OwnCliPathUnknownError = class extends CliError {
@@ -12397,15 +12646,15 @@ var init_ownCli = __esm({
 
 // src/frontdoor/doorLog.ts
 function appendDoorLog(paths, line) {
-  import_node_fs12.default.mkdirSync(paths.logsDir, { recursive: true });
-  import_node_fs12.default.appendFileSync(paths.frontdoorLogPath, `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
+  import_node_fs13.default.mkdirSync(paths.logsDir, { recursive: true });
+  import_node_fs13.default.appendFileSync(paths.frontdoorLogPath, `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
 `);
 }
-var import_node_fs12;
+var import_node_fs13;
 var init_doorLog = __esm({
   "src/frontdoor/doorLog.ts"() {
     "use strict";
-    import_node_fs12 = __toESM(require("node:fs"), 1);
+    import_node_fs13 = __toESM(require("node:fs"), 1);
   }
 });
 
@@ -12425,14 +12674,14 @@ var init_selfIdentity = __esm({
 
 // src/frontdoor/trust.ts
 function resolveTrustBundle(params) {
-  const { caCertFile, bundlesDir, variable, inherited, fs: fs14 } = params;
-  if (inherited === void 0 || inherited === "" || import_node_path40.default.resolve(inherited) === import_node_path40.default.resolve(caCertFile)) {
+  const { caCertFile, bundlesDir, variable, inherited, fs: fs15 } = params;
+  if (inherited === void 0 || inherited === "" || import_node_path43.default.resolve(inherited) === import_node_path43.default.resolve(caCertFile)) {
     return { path: caCertFile };
   }
-  const caPem = fs14.readFileUtf8(caCertFile);
+  const caPem = fs15.readFileUtf8(caCertFile);
   let inheritedPem;
   try {
-    inheritedPem = fs14.readFileUtf8(inherited);
+    inheritedPem = fs15.readFileUtf8(inherited);
   } catch (error) {
     return {
       path: caCertFile,
@@ -12444,19 +12693,19 @@ function resolveTrustBundle(params) {
   }
   const combined = `${inheritedPem.trimEnd()}
 ${caPem}`;
-  const bundle = import_node_path40.default.join(bundlesDir, `${(0, import_node_crypto12.createHash)("sha256").update(combined).digest("hex").slice(0, BUNDLE_NAME_HEX_DIGITS)}.pem`);
-  if (!fs14.exists(bundle)) {
-    fs14.mkdirp(bundlesDir);
-    fs14.writeFileAtomic(bundle, combined);
+  const bundle = import_node_path43.default.join(bundlesDir, `${(0, import_node_crypto12.createHash)("sha256").update(combined).digest("hex").slice(0, BUNDLE_NAME_HEX_DIGITS)}.pem`);
+  if (!fs15.exists(bundle)) {
+    fs15.mkdirp(bundlesDir);
+    fs15.writeFileAtomic(bundle, combined);
   }
   return { path: bundle };
 }
-var import_node_crypto12, import_node_path40, BUNDLE_NAME_HEX_DIGITS;
+var import_node_crypto12, import_node_path43, BUNDLE_NAME_HEX_DIGITS;
 var init_trust = __esm({
   "src/frontdoor/trust.ts"() {
     "use strict";
     import_node_crypto12 = require("node:crypto");
-    import_node_path40 = __toESM(require("node:path"), 1);
+    import_node_path43 = __toESM(require("node:path"), 1);
     BUNDLE_NAME_HEX_DIGITS = 16;
   }
 });
@@ -12487,7 +12736,7 @@ function realEnsurePorts(paths, spawnDaemon) {
       }
     },
     // Read fresh for each probe: a replacement supervisor may have regenerated an unparseable CA, and the probe must trust exactly what the serving door's leaf chains to.
-    verifyListener: (port) => probeFrontDoorSync(port, import_node_fs13.default.readFileSync(paths.frontdoorCaCertFile, "utf8"))
+    verifyListener: (port) => probeFrontDoorSync(port, import_node_fs14.default.readFileSync(paths.frontdoorCaCertFile, "utf8"))
   };
 }
 function realFrontDoorPort(paths, spawnDaemon) {
@@ -12508,11 +12757,11 @@ function realFrontDoorPort(paths, spawnDaemon) {
     }
   };
 }
-var import_node_fs13, realTrustBundleFs;
+var import_node_fs14, realTrustBundleFs;
 var init_realFrontDoorPort = __esm({
   "src/frontdoor/realFrontDoorPort.ts"() {
     "use strict";
-    import_node_fs13 = __toESM(require("node:fs"), 1);
+    import_node_fs14 = __toESM(require("node:fs"), 1);
     init_realPorts();
     init_doorLog();
     init_ensure2();
@@ -12521,10 +12770,10 @@ var init_realFrontDoorPort = __esm({
     init_selfIdentity();
     init_trust();
     realTrustBundleFs = {
-      readFileUtf8: (file) => import_node_fs13.default.readFileSync(file, "utf8"),
-      exists: (file) => import_node_fs13.default.existsSync(file),
+      readFileUtf8: (file) => import_node_fs14.default.readFileSync(file, "utf8"),
+      exists: (file) => import_node_fs14.default.existsSync(file),
       mkdirp: (dir) => {
-        import_node_fs13.default.mkdirSync(dir, { recursive: true });
+        import_node_fs14.default.mkdirSync(dir, { recursive: true });
       },
       writeFileAtomic: (file, contents) => {
         realFarmFs.writeFilePrivate(file, contents);
@@ -12533,50 +12782,6 @@ var init_realFrontDoorPort = __esm({
   }
 });
 
-// src/replayRun.ts
-function keyOf2(command, args) {
-  return JSON.stringify([command, args]);
-}
-async function recordRuns(decide, runAsync) {
-  const answers = /* @__PURE__ */ new Map();
-  const replay = {
-    run: (command, args) => {
-      const answer = answers.get(keyOf2(command, args));
-      if (answer === void 0) {
-        throw new RunNeededError(command, args);
-      }
-      return answer;
-    }
-  };
-  for (; ; ) {
-    try {
-      decide(replay);
-      return replay;
-    } catch (error) {
-      if (!(error instanceof RunNeededError)) {
-        throw error;
-      }
-      answers.set(keyOf2(error.command, error.args), await runAsync(error.command, error.args));
-    }
-  }
-}
-var RunNeededError;
-var init_replayRun = __esm({
-  "src/replayRun.ts"() {
-    "use strict";
-    RunNeededError = class extends Error {
-      constructor(command, args) {
-        super(`no recorded answer for ${command} ${args.join(" ")}`);
-        this.command = command;
-        this.args = args;
-        this.name = "RunNeededError";
-      }
-      command;
-      args;
-    };
-  }
-});
-
 // src/launchWiring.ts
 function buildFarmRuntime(paths, cwd, run = realRunPort) {
   const home = import_node_os7.default.homedir();
@@ -12631,7 +12836,7 @@ function realPrepareLaunchParams(paths, options) {
     frontdoor: realFrontDoorPort(paths, options.spawnDaemon),
     credentials: { ...realCredentialPort, cache: realCredentialCacheEnv(paths) },
     hold: realHoldPort,
-    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: options.run ?? realRunPort }, { farmRoot: import_node_path41.default.join(paths.identitiesDir, identity), hasCredentialBlock: false, provider: void 0 }).state !== "signed-out",
+    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: options.run ?? realRunPort }, { farmRoot: import_node_path44.default.join(paths.identitiesDir, identity), hasCredentialBlock: false, provider: void 0 }).state !== "signed-out",
     ...farm.directoryIdentity === void 0 ? {} : { directoryPinnedIdentity: farm.directoryIdentity },
     ...farm.directoryConfigProfile === void 0 ? {} : { directoryRuleConfigProfile: farm.directoryConfigProfile },
     ...farm.globalDefaultConfigProfile === void 0 ? {} : { globalDefaultConfigProfile: farm.globalDefaultConfigProfile },
@@ -12690,12 +12895,12 @@ function resolveClaudeLaunch(options, run = realRunPort) {
   };
   return { resolution: resolveLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, run, farm: buildFarmRuntime(paths, options.cwd, run) })), warnings };
 }
-var import_node_os7, import_node_path41, import_node_crypto13, LaunchRefusedError;
+var import_node_os7, import_node_path44, import_node_crypto13, LaunchRefusedError;
 var init_launchWiring = __esm({
   "src/launchWiring.ts"() {
     "use strict";
     import_node_os7 = __toESM(require("node:os"), 1);
-    import_node_path41 = __toESM(require("node:path"), 1);
+    import_node_path44 = __toESM(require("node:path"), 1);
     import_node_crypto13 = require("node:crypto");
     init_cliError();
     init_claudeShim();
@@ -12919,11 +13124,11 @@ var init_identityClaude = __esm({
 });
 
 // src/usage/providerQuota.ts
-var import_zod35, MS_PER_SECOND9, SECONDS_PER_HOUR3, HOURS_PER_DAY6, DAYS_PER_MONTH, ZAI_HOST, ZAI_QUOTA_URL, ZAI_UNIT_HOURS, ZAI_UNIT_MONTHS, ZAI_UNIT_MS, ZaiLimitSchema, ZaiResponseSchema, OPENROUTER_HOST, OPENROUTER_KEY_URL, OPENROUTER_CREDITS_URL, MS_PER_DAY2, OpenRouterKeySchema, OpenRouterCreditsSchema, ANTIGRAVITY_HOST, ANTIGRAVITY_QUOTA_URL, ANTIGRAVITY_USER_URL, FIVE_HOURS2, DAYS_PER_WEEK2, FIVE_HOURS_MS, WEEK_MS, AntigravityBucketSchema, AntigravitySummarySchema, GoogleTokenInfoSchema, AntigravityUserSchema;
+var import_zod37, MS_PER_SECOND9, SECONDS_PER_HOUR3, HOURS_PER_DAY6, DAYS_PER_MONTH, ZAI_HOST, ZAI_QUOTA_URL, ZAI_UNIT_HOURS, ZAI_UNIT_MONTHS, ZAI_UNIT_MS, ZaiLimitSchema, ZaiResponseSchema, OPENROUTER_HOST, OPENROUTER_KEY_URL, OPENROUTER_CREDITS_URL, MS_PER_DAY2, OpenRouterKeySchema, OpenRouterCreditsSchema, ANTIGRAVITY_HOST, ANTIGRAVITY_QUOTA_URL, ANTIGRAVITY_USER_URL, FIVE_HOURS2, DAYS_PER_WEEK2, FIVE_HOURS_MS, WEEK_MS, AntigravityBucketSchema, AntigravitySummarySchema, GoogleTokenInfoSchema, AntigravityUserSchema;
 var init_providerQuota = __esm({
   "src/usage/providerQuota.ts"() {
     "use strict";
-    import_zod35 = require("zod");
+    import_zod37 = require("zod");
     init_cloudUpstream();
     init_schema2();
     MS_PER_SECOND9 = 1e3;
@@ -12938,35 +13143,35 @@ var init_providerQuota = __esm({
       [ZAI_UNIT_HOURS, SECONDS_PER_HOUR3 * MS_PER_SECOND9],
       [ZAI_UNIT_MONTHS, DAYS_PER_MONTH * HOURS_PER_DAY6 * SECONDS_PER_HOUR3 * MS_PER_SECOND9]
     ]);
-    ZaiLimitSchema = import_zod35.z.object({
-      type: import_zod35.z.string(),
-      unit: import_zod35.z.number().int(),
-      number: import_zod35.z.number().int().positive(),
-      percentage: import_zod35.z.number().nonnegative(),
-      nextResetTime: import_zod35.z.number().positive().optional(),
-      usage: import_zod35.z.number().nonnegative().optional(),
-      currentValue: import_zod35.z.number().nonnegative().optional(),
-      remaining: import_zod35.z.number().nonnegative().optional()
+    ZaiLimitSchema = import_zod37.z.object({
+      type: import_zod37.z.string(),
+      unit: import_zod37.z.number().int(),
+      number: import_zod37.z.number().int().positive(),
+      percentage: import_zod37.z.number().nonnegative(),
+      nextResetTime: import_zod37.z.number().positive().optional(),
+      usage: import_zod37.z.number().nonnegative().optional(),
+      currentValue: import_zod37.z.number().nonnegative().optional(),
+      remaining: import_zod37.z.number().nonnegative().optional()
     });
-    ZaiResponseSchema = import_zod35.z.object({
-      success: import_zod35.z.boolean(),
-      msg: import_zod35.z.string().optional(),
-      data: import_zod35.z.object({ level: import_zod35.z.string().optional(), limits: import_zod35.z.array(ZaiLimitSchema) })
+    ZaiResponseSchema = import_zod37.z.object({
+      success: import_zod37.z.boolean(),
+      msg: import_zod37.z.string().optional(),
+      data: import_zod37.z.object({ level: import_zod37.z.string().optional(), limits: import_zod37.z.array(ZaiLimitSchema) })
     });
     OPENROUTER_HOST = "openrouter.ai";
     OPENROUTER_KEY_URL = `https://${OPENROUTER_HOST}/api/v1/key`;
     OPENROUTER_CREDITS_URL = `https://${OPENROUTER_HOST}/api/v1/credits`;
     MS_PER_DAY2 = HOURS_PER_DAY6 * SECONDS_PER_HOUR3 * MS_PER_SECOND9;
-    OpenRouterKeySchema = import_zod35.z.object({
-      data: import_zod35.z.object({
-        limit: import_zod35.z.number().nonnegative().nullable(),
-        limit_remaining: import_zod35.z.number().nullable(),
-        limit_reset: import_zod35.z.string().nullable(),
-        is_free_tier: import_zod35.z.boolean().optional(),
-        free_model_daily_requests: import_zod35.z.object({ used: import_zod35.z.number().nonnegative(), limit: import_zod35.z.number().nonnegative(), remaining: import_zod35.z.number() }).optional()
+    OpenRouterKeySchema = import_zod37.z.object({
+      data: import_zod37.z.object({
+        limit: import_zod37.z.number().nonnegative().nullable(),
+        limit_remaining: import_zod37.z.number().nullable(),
+        limit_reset: import_zod37.z.string().nullable(),
+        is_free_tier: import_zod37.z.boolean().optional(),
+        free_model_daily_requests: import_zod37.z.object({ used: import_zod37.z.number().nonnegative(), limit: import_zod37.z.number().nonnegative(), remaining: import_zod37.z.number() }).optional()
       })
     });
-    OpenRouterCreditsSchema = import_zod35.z.object({ data: import_zod35.z.object({ total_credits: import_zod35.z.number().nonnegative(), total_usage: import_zod35.z.number().nonnegative() }) });
+    OpenRouterCreditsSchema = import_zod37.z.object({ data: import_zod37.z.object({ total_credits: import_zod37.z.number().nonnegative(), total_usage: import_zod37.z.number().nonnegative() }) });
     ANTIGRAVITY_HOST = "daily-cloudcode-pa.googleapis.com";
     ANTIGRAVITY_QUOTA_URL = `https://${ANTIGRAVITY_HOST}/v1internal:retrieveUserQuotaSummary`;
     ANTIGRAVITY_USER_URL = `https://${ANTIGRAVITY_HOST}/v1internal:loadCodeAssist`;
@@ -12974,21 +13179,21 @@ var init_providerQuota = __esm({
     DAYS_PER_WEEK2 = 7;
     FIVE_HOURS_MS = FIVE_HOURS2 * SECONDS_PER_HOUR3 * MS_PER_SECOND9;
     WEEK_MS = DAYS_PER_WEEK2 * HOURS_PER_DAY6 * SECONDS_PER_HOUR3 * MS_PER_SECOND9;
-    AntigravityBucketSchema = import_zod35.z.object({
-      bucketId: import_zod35.z.string(),
-      remainingFraction: import_zod35.z.number().optional(),
-      resetTime: import_zod35.z.string().optional()
+    AntigravityBucketSchema = import_zod37.z.object({
+      bucketId: import_zod37.z.string(),
+      remainingFraction: import_zod37.z.number().optional(),
+      resetTime: import_zod37.z.string().optional()
     });
-    AntigravitySummarySchema = import_zod35.z.object({ groups: import_zod35.z.array(import_zod35.z.object({ buckets: import_zod35.z.array(AntigravityBucketSchema) })) });
-    GoogleTokenInfoSchema = import_zod35.z.object({
-      email: import_zod35.z.string().optional(),
-      sub: import_zod35.z.string().optional()
+    AntigravitySummarySchema = import_zod37.z.object({ groups: import_zod37.z.array(import_zod37.z.object({ buckets: import_zod37.z.array(AntigravityBucketSchema) })) });
+    GoogleTokenInfoSchema = import_zod37.z.object({
+      email: import_zod37.z.string().optional(),
+      sub: import_zod37.z.string().optional()
     });
-    AntigravityUserSchema = import_zod35.z.object({
+    AntigravityUserSchema = import_zod37.z.object({
       /** The code-assist tier context, which defaults to the free tier for every account. */
-      currentTier: import_zod35.z.object({ name: import_zod35.z.string().optional(), id: import_zod35.z.string().optional() }).optional(),
+      currentTier: import_zod37.z.object({ name: import_zod37.z.string().optional(), id: import_zod37.z.string().optional() }).optional(),
       /** The account's paid subscription; absent when the account has none. */
-      paidTier: import_zod35.z.object({ name: import_zod35.z.string().optional(), id: import_zod35.z.string().optional() }).optional()
+      paidTier: import_zod37.z.object({ name: import_zod37.z.string().optional(), id: import_zod37.z.string().optional() }).optional()
     });
   }
 });
@@ -13103,6 +13308,7 @@ __export(index_exports, {
   CodexRateLimitsReadSchema: () => CodexRateLimitsReadSchema,
   CodexSignInSchema: () => CodexSignInSchema,
   CodexStatusOutputSchema: () => CodexStatusOutputSchema,
+  ConfigIdentityAddInputSchema: () => ConfigIdentityAddInputSchema,
   ConfigIdentityAddOutputSchema: () => ConfigIdentityAddOutputSchema,
   ConfigIdentityRemoveInputSchema: () => ConfigIdentityRemoveInputSchema,
   ConfigIdentityRemoveOutputSchema: () => ConfigIdentityRemoveOutputSchema,
@@ -13752,8 +13958,8 @@ function pathnameOf(url) {
   return new URL(url ?? "/", "http://127.0.0.1").pathname;
 }
 function isRcSessionExchange(url) {
-  const path42 = pathnameOf(url);
-  return path42 === RC_SESSIONS_PATH_PREFIX || path42.startsWith(`${RC_SESSIONS_PATH_PREFIX}/`);
+  const path45 = pathnameOf(url);
+  return path45 === RC_SESSIONS_PATH_PREFIX || path45.startsWith(`${RC_SESSIONS_PATH_PREFIX}/`);
 }
 var RC_SESSION_ID_PREFIX = "cse_";
 var RC_IDLE_EXPIRY_MS = 45e3;
@@ -14312,8 +14518,8 @@ var RC_READ_FILE_ENCODINGS = ["utf-8", "base64"];
 function isRcReadFileEncoding(value) {
   return RC_READ_FILE_ENCODINGS.some((encoding) => encoding === value);
 }
-function buildRcReadFilePayload(requestId, path42, options) {
-  return buildRcControlRequestPayload(requestId, { subtype: "read_file", path: path42, ...options?.maxBytes === void 0 ? {} : { max_bytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } });
+function buildRcReadFilePayload(requestId, path45, options) {
+  return buildRcControlRequestPayload(requestId, { subtype: "read_file", path: path45, ...options?.maxBytes === void 0 ? {} : { max_bytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } });
 }
 function buildRcFileSuggestionsPayload(requestId, query) {
   return buildRcControlRequestPayload(requestId, { subtype: "file_suggestions", query });
@@ -14415,15 +14621,15 @@ async function getRcSessionContextUsage(deps, sessionId, detail) {
   const result = await deliverRcClientPayload(deps, sessionId, buildRcGetContextUsagePayload(requestId, detail), `request the context usage of session ${sessionId}`);
   return result.ok ? { ...result, requestId } : result;
 }
-async function readRcSessionFile(deps, sessionId, path42, options) {
-  if (path42 === "") {
+async function readRcSessionFile(deps, sessionId, path45, options) {
+  if (path45 === "") {
     return { ok: false, message: "a read-file write needs a non-empty path: the SDK's own field names the file the worker resolves against the session's cwd, and an empty string names none" };
   }
   if (options?.maxBytes !== void 0 && (!Number.isInteger(options.maxBytes) || options.maxBytes <= 0)) {
     return { ok: false, message: "a read-file write's max-bytes is a positive whole number of bytes: the SDK's own field caps the read, and a zero or negative cap reads nothing" };
   }
   const requestId = deps.newUuid();
-  const result = await deliverRcClientPayload(deps, sessionId, buildRcReadFilePayload(requestId, path42, options), `read ${path42} from session ${sessionId}`);
+  const result = await deliverRcClientPayload(deps, sessionId, buildRcReadFilePayload(requestId, path45, options), `read ${path45} from session ${sessionId}`);
   return result.ok ? { ...result, requestId } : result;
 }
 async function suggestRcSessionFiles(deps, sessionId, query) {
@@ -14592,11 +14798,11 @@ function createRcControlHandler(deps) {
       path: "read-file",
       read: (body) => {
         const session = bodyString(body, "session");
-        const path42 = bodyString(body, "path");
+        const path45 = bodyString(body, "path");
         const maxBytes = "maxBytes" in body ? bodyPositiveInteger(body, "maxBytes") : void 0;
         const encoding = "encoding" in body && isRcReadFileEncoding(body.encoding) ? body.encoding : void 0;
-        const refused2 = session === void 0 || path42 === void 0 || "maxBytes" in body && maxBytes === void 0 || "encoding" in body && encoding === void 0;
-        return refused2 ? { error: `the read-file body must be JSON naming a non-empty session id and path, maxBytes only as a positive whole number or absent, and an encoding the SDK's own type permits (${RC_READ_FILE_ENCODINGS.join(", ")}) or none` } : { session, run: async () => await deps.readFile(session, path42, { ...maxBytes === void 0 ? {} : { maxBytes }, ...encoding === void 0 ? {} : { encoding } }) };
+        const refused2 = session === void 0 || path45 === void 0 || "maxBytes" in body && maxBytes === void 0 || "encoding" in body && encoding === void 0;
+        return refused2 ? { error: `the read-file body must be JSON naming a non-empty session id and path, maxBytes only as a positive whole number or absent, and an encoding the SDK's own type permits (${RC_READ_FILE_ENCODINGS.join(", ")}) or none` } : { session, run: async () => await deps.readFile(session, path45, { ...maxBytes === void 0 ? {} : { maxBytes }, ...encoding === void 0 ? {} : { encoding } }) };
       }
     },
     {
@@ -14906,9 +15112,9 @@ function requestIdOfBody(body) {
 }
 function frontDoorRcControl(transport, token) {
   const headers = { authorization: `Bearer ${token}` };
-  const listAnswerOf = async (path42, what) => {
+  const listAnswerOf = async (path45, what) => {
     try {
-      return await transport.request({ method: "GET", path: path42, headers });
+      return await transport.request({ method: "GET", path: path45, headers });
     } catch (error) {
       throw new Error(`${what}: could not reach the front door's control listener: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
@@ -14980,10 +15186,10 @@ function frontDoorRcControl(transport, token) {
     }
     return pending;
   };
-  const writeOf = async (path42, body, describeFailure2) => {
+  const writeOf = async (path45, body, describeFailure2) => {
     let answer;
     try {
-      answer = await transport.request({ method: "POST", path: path42, headers: { ...headers, "content-type": "application/json" }, body });
+      answer = await transport.request({ method: "POST", path: path45, headers: { ...headers, "content-type": "application/json" }, body });
     } catch (error) {
       return { ok: false, message: `could not reach the front door's control listener: ${error instanceof Error ? error.message : String(error)}` };
     }
@@ -15014,10 +15220,10 @@ function frontDoorRcControl(transport, token) {
     endSession: async (sessionId, reason) => await writeOf(`${CONTROL_PATH_PREFIX}/end-session`, JSON.stringify({ session: sessionId, ...reason === void 0 ? {} : { reason } }), (status, message) => `ending ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     getUsage: async (sessionId, skipBehaviors) => await writeOf(`${CONTROL_PATH_PREFIX}/get-usage`, JSON.stringify({ session: sessionId, ...skipBehaviors === void 0 ? {} : { skipBehaviors } }), (status, message) => `requesting the usage of ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     getContextUsage: async (sessionId, detail) => await writeOf(`${CONTROL_PATH_PREFIX}/get-context-usage`, JSON.stringify({ session: sessionId, ...detail === void 0 ? {} : { detail } }), (status, message) => `requesting the context usage of ${sessionId} failed (HTTP ${String(status)}): ${message}`),
-    readFile: async (sessionId, path42, options) => await writeOf(
+    readFile: async (sessionId, path45, options) => await writeOf(
       `${CONTROL_PATH_PREFIX}/read-file`,
-      JSON.stringify({ session: sessionId, path: path42, ...options?.maxBytes === void 0 ? {} : { maxBytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } }),
-      (status, message) => `reading ${path42} from ${sessionId} failed (HTTP ${String(status)}): ${message}`
+      JSON.stringify({ session: sessionId, path: path45, ...options?.maxBytes === void 0 ? {} : { maxBytes: options.maxBytes }, ...options?.encoding === void 0 ? {} : { encoding: options.encoding } }),
+      (status, message) => `reading ${path45} from ${sessionId} failed (HTTP ${String(status)}): ${message}`
     ),
     fileSuggestions: async (sessionId, query) => await writeOf(`${CONTROL_PATH_PREFIX}/file-suggestions`, JSON.stringify({ session: sessionId, query }), (status, message) => `requesting file suggestions from ${sessionId} failed (HTTP ${String(status)}): ${message}`),
     keepAlive: async (sessionId) => await writeOf(`${CONTROL_PATH_PREFIX}/keep-alive`, JSON.stringify({ session: sessionId }), (status, message) => `keeping ${sessionId} alive failed (HTTP ${String(status)}): ${message}`),
@@ -15176,12 +15382,12 @@ function tlsFacts(options) {
 }
 function realRcEventDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_PORT }) {
   const agent = new ExemptTlsAgent();
-  const post = async (path42, headers, body) => await new Promise((resolve, reject) => {
+  const post = async (path45, headers, body) => await new Promise((resolve, reject) => {
     const options = {
       host: target.host,
       port: target.port,
       method: "POST",
-      path: path42,
+      path: path45,
       // The Host header names the host whose API this is, not the address dialled: a redirected test dials a loopback stand-in while still speaking to the API host by name, exactly as the forwarded paths present their SNI.
       headers: { ...headers, host: target.servername ?? target.host, "content-length": String(Buffer.byteLength(body, "utf8")) },
       agent
@@ -15246,12 +15452,12 @@ function lateRcStreamDial(resolve) {
 }
 function realRcStreamDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_PORT }) {
   const agent = new ExemptTlsAgent();
-  const request4 = async (method, path42, headers, body, signal) => await new Promise((resolve, reject) => {
+  const request4 = async (method, path45, headers, body, signal) => await new Promise((resolve, reject) => {
     const options = {
       host: target.host,
       port: target.port,
       method,
-      path: path42,
+      path: path45,
       // The Host header names the host whose API this is, not the address dialled: a redirected test dials a loopback stand-in while still speaking to the API host by name, exactly as the forwarded paths present their SNI.
       headers: { ...headers, host: target.servername ?? target.host, ...body === void 0 ? {} : { "content-length": String(Buffer.byteLength(body, "utf8")) } },
       agent,
@@ -15293,9 +15499,9 @@ function realRcStreamDial(target = { host: CONNECT_INTERCEPT_HOST, port: HTTPS_P
       return { status, body: await readAll(response) };
     },
     openStream: async (sessionId, headers, resume, signal) => {
-      const path42 = resume === void 0 ? `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream` : `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream?from_sequence_num=${String(resume.fromSequenceNum)}`;
+      const path45 = resume === void 0 ? `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream` : `/v1/code/sessions/${encodeURIComponent(sessionId)}/events/stream?from_sequence_num=${String(resume.fromSequenceNum)}`;
       const streamHeaders = resume === void 0 ? headers : { ...headers, "last-event-id": String(resume.fromSequenceNum) };
-      const { status, response } = await request4("GET", path42, streamHeaders, void 0, signal);
+      const { status, response } = await request4("GET", path45, streamHeaders, void 0, signal);
       if (!isSuccessful2(status)) {
         await readAll(response);
         return { status, chunks: NO_CHUNKS };
@@ -15545,11 +15751,11 @@ function credentialOfJson(parsed) {
 function sequenceNumOfJson(value) {
   return typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : void 0;
 }
-function createRcCredentialStore(fs14, dir) {
-  fs14.mkdirPrivate(dir);
+function createRcCredentialStore(fs15, dir) {
+  fs15.mkdirPrivate(dir);
   const fileFor = (sessionId) => import_node_path11.default.join(dir, `${sessionId}.json`);
   const readParsed = (sessionId) => {
-    const raw = fs14.readFileUtf8(fileFor(sessionId));
+    const raw = fs15.readFileUtf8(fileFor(sessionId));
     if (raw === void 0) {
       return void 0;
     }
@@ -15574,7 +15780,7 @@ function createRcCredentialStore(fs14, dir) {
       }
       const cursor = sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
       const record = { ...credential, ...cursor === void 0 ? {} : { highestSequenceNum: cursor } };
-      fs14.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record, null, 2)}
+      fs15.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record, null, 2)}
 `);
     },
     readCursor: (sessionId) => {
@@ -15589,14 +15795,14 @@ function createRcCredentialStore(fs14, dir) {
       }
       const credential = credentialOfJson(readParsed(sessionId));
       const record = credential === void 0 ? { highestSequenceNum } : { ...credential, highestSequenceNum };
-      fs14.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record, null, 2)}
+      fs15.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record, null, 2)}
 `);
     },
     remove: (sessionId) => {
       if (!isSafeSessionId(sessionId)) {
         return;
       }
-      fs14.removeRecursive(fileFor(sessionId));
+      fs15.removeRecursive(fileFor(sessionId));
     }
   };
 }
@@ -16288,19 +16494,19 @@ function writePools(paths, pools) {
   applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
 }
 function poolCycleOf(pools, name) {
-  const walk2 = (current, path42) => {
+  const walk2 = (current, path45) => {
     for (const entry of pools[current]?.identities ?? []) {
       const nested = poolNameOf(poolMemberIdentity(entry));
       if (nested === void 0) {
         continue;
       }
       if (nested === name) {
-        return [...path42, nested];
+        return [...path45, nested];
       }
-      if (path42.includes(nested)) {
+      if (path45.includes(nested)) {
         continue;
       }
-      const found = walk2(nested, [...path42, nested]);
+      const found = walk2(nested, [...path45, nested]);
       if (found !== void 0) {
         return found;
       }
@@ -16740,7 +16946,7 @@ function loadCheckProvider(paths, name) {
   try {
     definition = readProvider(paths, name);
   } catch (error) {
-    if (error instanceof ConfigValidationError || error instanceof LegacyProviderFileError) {
+    if (error instanceof ConfigValidationError || error instanceof LegacyProviderFileError || error instanceof ConfigFileNotJsonError) {
       return { name, problem: error.message };
     }
     throw error;
@@ -17012,8 +17218,8 @@ var ResetRowSchema = import_zod22.z.strictObject({
 var ResetScheduleSchema = import_zod22.z.strictObject({ resets: import_zod22.z.readonly(import_zod22.z.array(ResetRowSchema)) });
 
 // src/frontdoor/controlSchemas.ts
-var import_node_path30 = __toESM(require("node:path"), 1);
-var import_zod29 = require("zod");
+var import_node_path32 = __toESM(require("node:path"), 1);
+var import_zod30 = require("zod");
 
 // src/doctorReport.ts
 init_claudeShim();
@@ -17021,14 +17227,212 @@ init_names();
 init_store();
 
 // src/identityStore.ts
-var import_node_fs8 = __toESM(require("node:fs"), 1);
-var import_node_path28 = __toESM(require("node:path"), 1);
+var import_node_fs9 = __toESM(require("node:fs"), 1);
+var import_node_path30 = __toESM(require("node:path"), 1);
 init_load();
+init_names();
 init_store();
 init_schema();
 init_cliError();
 init_identity();
 init_lock();
+
+// src/identityRenameJournal.ts
+var import_node_path28 = __toESM(require("node:path"), 1);
+var import_zod24 = require("zod");
+init_cliError();
+var RenameJournalSchema = import_zod24.z.strictObject({
+  version: import_zod24.z.literal(1),
+  from: import_zod24.z.string().min(1),
+  to: import_zod24.z.string().min(1),
+  startedAt: import_zod24.z.iso.datetime(),
+  /** The process that began the rename, for a person reading the file. Whether it is still running is told by the locks, not by this. */
+  pid: import_zod24.z.number().int().positive(),
+  steps: import_zod24.z.array(
+    import_zod24.z.strictObject({
+      description: import_zod24.z.string().min(1),
+      /** Whether the step has been applied and marked so. */
+      done: import_zod24.z.boolean(),
+      /** Whether the step was begun: written ahead of the step, before it runs, so a process that dies after the step took effect and before `done` was written still leaves a record that it may have. */
+      started: import_zod24.z.boolean()
+    })
+  )
+});
+var JOURNAL_SUFFIX = ".json";
+var RenameJournalUnreadableError = class extends CliError {
+  constructor(file, detail) {
+    super(`${file} is not a rename journal this agent-shim can read (${detail}). If no rename was left unfinished, remove it; otherwise look at what it names before renaming anything.`);
+    this.detail = detail;
+    this.name = "RenameJournalUnreadableError";
+  }
+  detail;
+};
+function readRenameJournal(fs15, file) {
+  const raw = fs15.readFileUtf8(file);
+  if (raw === void 0) {
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new RenameJournalUnreadableError(file, "not valid JSON");
+  }
+  const result = RenameJournalSchema.safeParse(parsed);
+  if (!result.success) {
+    throw new RenameJournalUnreadableError(file, result.error.issues.map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`).join("; "));
+  }
+  return result.data;
+}
+function listRenameJournals(fs15, directory) {
+  const journals = [];
+  const unreadable = [];
+  for (const name of [...fs15.readdir(directory)].sort()) {
+    if (!name.endsWith(JOURNAL_SUFFIX)) {
+      continue;
+    }
+    const file = import_node_path28.default.join(directory, name);
+    try {
+      const journal = readRenameJournal(fs15, file);
+      if (journal !== void 0) {
+        journals.push(journal);
+      }
+    } catch (error) {
+      if (!(error instanceof RenameJournalUnreadableError)) {
+        throw error;
+      }
+      unreadable.push({ file, detail: error.detail });
+    }
+  }
+  return { journals, unreadable };
+}
+function stepMayBeApplied(step) {
+  return step.done || step.started;
+}
+function recordsNothingApplied(journal) {
+  return !journal.steps.some(stepMayBeApplied);
+}
+function describeUnfinishable(bothExist) {
+  return bothExist ? "both names are identities" : "there is no identity under either name";
+}
+function finishabilityOf(journal, exists) {
+  const underFrom = exists(journal.from);
+  if (underFrom === exists(journal.to)) {
+    return { finishable: false, reason: describeUnfinishable(underFrom) };
+  }
+  return underFrom && recordsNothingApplied(journal) ? { finishable: true, discardable: true } : { finishable: true };
+}
+function discardJournalCommand(journal) {
+  return `agent-shim identity rename ${journal.from} ${journal.to} --discard-journal`;
+}
+function describeUnfinishedRename(journal, finishability) {
+  const applied = journal.steps.filter(stepMayBeApplied).length;
+  const progress = `an unfinished rename of identity "${journal.from}" to "${journal.to}" (${String(applied)} of ${String(journal.steps.length)} steps recorded as begun or done)`;
+  return finishability.finishable ? `${progress}. Finish it with \`agent-shim identity rename ${journal.from} ${journal.to}\`; to put the name back afterwards, run \`agent-shim identity rename ${journal.to} ${journal.from}\`.${finishability.discardable === true ? ` No step is recorded as begun or done and the identity is still under "${journal.from}", so its record can be discarded with \`${discardJournalCommand(journal)}\`; that removes only the record.` : ""}` : `${progress} that cannot be finished: ${finishability.reason}. If nothing is left of it to keep, discard its record with \`${discardJournalCommand(journal)}\`; that removes only the record and changes no identity.`;
+}
+var NameHeldByUnfinishedRenameError = class extends CliError {
+  constructor(action, name, journal, finishability) {
+    super(`Cannot ${action} identity "${name}": there is ${describeUnfinishedRename(journal, finishability)}`);
+    this.name = "NameHeldByUnfinishedRenameError";
+  }
+};
+function requireNameFreeOfUnfinishedRename(fs15, directory, name, action, sameName, exists) {
+  const held = listRenameJournals(fs15, directory).journals.find((journal) => [journal.from, journal.to].some((heldName) => heldName === name || sameName(name, heldName)));
+  if (held !== void 0) {
+    throw new NameHeldByUnfinishedRenameError(action, name, held, finishabilityOf(held, exists));
+  }
+}
+
+// src/keychainLogin.ts
+init_cliError();
+init_signIn();
+var ITEM_NOT_FOUND_STATUS = 44;
+var MAX_DETAIL_CHARS = 200;
+var CONTROL_CHARACTER = new RegExp("\\p{Cc}", "u");
+var KeychainLoginError = class extends CliError {
+  constructor(message) {
+    super(message);
+    this.name = "KeychainLoginError";
+  }
+};
+var KeychainLookupError = class extends KeychainLoginError {
+  constructor(message) {
+    super(message);
+    this.name = "KeychainLookupError";
+  }
+};
+function statusPhrase(status) {
+  return status === null ? "without a status" : String(status);
+}
+function describe(stderr) {
+  const [first] = stderr.trim().split("\n");
+  return first === void 0 || first === "" ? "" : ` (${first.slice(0, MAX_DETAIL_CHARS)})`;
+}
+function lookup(run, service) {
+  const result = run.run("security", ["find-generic-password", "-s", service]);
+  if (result.status === 0) {
+    return { found: true, attributes: result.stdout };
+  }
+  if (result.status === ITEM_NOT_FOUND_STATUS) {
+    return { found: false };
+  }
+  throw new KeychainLookupError(`Could not look up the Keychain item ${service}: security exited ${statusPhrase(result.status)}${describe(result.stderr)}.`);
+}
+function plainAccountOf(attributes) {
+  const line = attributes.split("\n").find((candidate) => candidate.includes('"acct"<blob>='));
+  const value = line?.slice(line.indexOf("=") + 1).trim();
+  const name = value === void 0 ? void 0 : /^"([^"\\]*)"$/u.exec(value)?.[1];
+  return name === void 0 || name === "" || CONTROL_CHARACTER.test(name) ? void 0 : name;
+}
+function keychainDeleteCommand(service, account) {
+  return `security delete-generic-password -s ${shellQuoted(service)}${account === void 0 ? "" : ` -a ${shellQuoted(account)}`}`;
+}
+function shellQuoted(value) {
+  return `'${value.replace(/'/gu, "'\\''")}'`;
+}
+var KEEP_KEYCHAIN_LOGIN_DESCRIPTION = "Create the identity even though the macOS Keychain already holds a Claude Code login filed for its directory (left by an identity of that name that was renamed or removed); the identity starts signed in as that account. If another identity holds that login, the two share it. Without it that login is refused and the command that deletes it is printed.";
+function requireNoLeftoverKeychainLogin(keychain, configDir, name, keepLogin) {
+  if (keepLogin || keychain.platform !== "darwin") {
+    return;
+  }
+  const service = claudeCodeKeychainService(configDir);
+  const found = lookup(keychain.run, service);
+  if (!found.found) {
+    return;
+  }
+  const account = plainAccountOf(found.attributes);
+  throw new KeychainLoginError(
+    `Cannot create identity "${name}": the Keychain already holds a Claude Code login filed for ${configDir} (service ${service}${account === void 0 ? "" : `, account ${account}`}), left behind by an identity of that name that was renamed or removed. A new identity there would start signed in as that account. If you do not need it, delete it with \`${keychainDeleteCommand(service, account)}\` and run the command again. To create the identity signed in as that account on purpose, run \`agent-shim identity add ${name} --keep-keychain-login\`. If another identity holds a copy of that login, as a renamed identity does when its old item could not be deleted, keeping it makes the two share one login.`
+  );
+}
+
+// src/sameDirectory.ts
+var import_node_fs8 = __toESM(require("node:fs"), 1);
+var import_node_path29 = __toESM(require("node:path"), 1);
+function sameDirectory(first, second) {
+  const a = import_node_fs8.default.statSync(first, { throwIfNoEntry: false });
+  const b = import_node_fs8.default.statSync(second, { throwIfNoEntry: false });
+  if (a === void 0 || b === void 0) {
+    return false;
+  }
+  return a.dev === b.dev && a.ino === b.ino;
+}
+function caseSwapped(name) {
+  return name.replace(/[A-Za-z]/gu, (letter) => letter === letter.toLowerCase() ? letter.toUpperCase() : letter.toLowerCase());
+}
+function ignoresCase(directory) {
+  if (!import_node_fs8.default.existsSync(directory)) {
+    return false;
+  }
+  const probe = import_node_fs8.default.mkdtempSync(import_node_path29.default.join(directory, ".case-probe-"));
+  try {
+    return sameDirectory(probe, import_node_path29.default.join(directory, caseSwapped(import_node_path29.default.basename(probe))));
+  } finally {
+    import_node_fs8.default.rmSync(probe, { recursive: true, force: true });
+  }
+}
+
+// src/identityStore.ts
 var IdentityNotFoundError = class extends CliError {
   constructor(name) {
     super(`No identity named "${name}". Run \`agent-shim identity add ${name}\` first.`);
@@ -17056,7 +17460,7 @@ var InvalidIdentityNameError = class extends CliError {
   attemptedName;
 };
 function identityJsonPath(paths, name) {
-  return import_node_path28.default.join(paths.identitiesDir, name, "identity.json");
+  return import_node_path30.default.join(paths.identitiesDir, name, "identity.json");
 }
 function requireIdentityNames(paths, names) {
   const existing = new Set(listIdentities(paths).map((entry) => entry.name));
@@ -17067,21 +17471,23 @@ function requireIdentityNames(paths, names) {
   }
 }
 function identityExists(paths, name) {
-  return import_node_fs8.default.existsSync(identityJsonPath(paths, name));
+  return import_node_fs9.default.existsSync(identityJsonPath(paths, name));
 }
 function readIdentity(paths, name) {
   return readJson(identityJsonPath(paths, name), IdentitySchema);
 }
-function addIdentity(paths, name) {
+function requireIdentityCreatable(paths, name) {
+  requireNoUnfinishedRenameNaming(paths, name, "add");
   if (identityExists(paths, name)) {
     throw new IdentityAlreadyExistsError(name);
   }
-  const parsed = IdentitySchema.safeParse({ name, allowAmbientCredential: false });
-  if (!parsed.success) {
-    throw new InvalidIdentityNameError(name);
-  }
-  writeJsonAtomic(identityJsonPath(paths, name), parsed.data);
-  return parsed.data;
+  requireNewIdentityName(name);
+}
+function addIdentity(paths, name) {
+  requireIdentityCreatable(paths, name);
+  const identity = IdentitySchema.parse({ name, allowAmbientCredential: false });
+  writeJsonAtomic(identityJsonPath(paths, name), identity);
+  return identity;
 }
 function useIdentity(paths, name) {
   const pool = poolNameOf(name);
@@ -17094,33 +17500,89 @@ function useIdentity(paths, name) {
 `);
 }
 function readActiveIdentity2(paths) {
-  if (!import_node_fs8.default.existsSync(paths.activeIdentityFile)) {
+  if (!import_node_fs9.default.existsSync(paths.activeIdentityFile)) {
     return void 0;
   }
-  const raw = import_node_fs8.default.readFileSync(paths.activeIdentityFile, "utf8").trim();
+  const raw = import_node_fs9.default.readFileSync(paths.activeIdentityFile, "utf8").trim();
   return raw === "" ? void 0 : raw;
 }
 function isIdentityDirectoryName(name) {
   return !name.startsWith(".");
 }
+var UNREACHABLE_CODES = /* @__PURE__ */ new Set(["ELOOP", "EACCES", "ENOTDIR"]);
+function systemErrorCode(error) {
+  return typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" ? error.code : void 0;
+}
+function unreachableCodeOf(error) {
+  const code = systemErrorCode(error);
+  if (code === "ENOENT") {
+    return void 0;
+  }
+  if (code !== void 0 && UNREACHABLE_CODES.has(code)) {
+    return code;
+  }
+  throw error;
+}
+function followedLink(link) {
+  try {
+    return import_node_fs9.default.statSync(link).isDirectory() ? "directory" : "other";
+  } catch (error) {
+    const code = unreachableCodeOf(error);
+    return code === void 0 ? "other" : { code };
+  }
+}
+function entryRefusal(directory) {
+  try {
+    import_node_fs9.default.accessSync(directory, import_node_fs9.default.constants.X_OK);
+    return void 0;
+  } catch (error) {
+    return unreachableCodeOf(error);
+  }
+}
+function listIdentityDirectories(paths) {
+  const names = [];
+  const unreachable = [];
+  if (import_node_fs9.default.existsSync(paths.identitiesDir)) {
+    for (const entry of import_node_fs9.default.readdirSync(paths.identitiesDir, { withFileTypes: true })) {
+      if (!isIdentityDirectoryName(entry.name)) {
+        continue;
+      }
+      const entryPath = import_node_path30.default.join(paths.identitiesDir, entry.name);
+      const followed = entry.isDirectory() ? "directory" : entry.isSymbolicLink() ? followedLink(entryPath) : "other";
+      if (followed === "other") {
+        continue;
+      }
+      const code = followed === "directory" ? entryRefusal(entryPath) : followed.code;
+      if (code === void 0) {
+        names.push(entry.name);
+      } else {
+        unreachable.push({ name: entry.name, code });
+      }
+    }
+  }
+  return { names: names.sort(), unreachable: unreachable.sort((a, b) => a.name.localeCompare(b.name)) };
+}
+var NOT_JSON_PROBLEM = "is not valid JSON";
 function readIdentityForListing(paths, name) {
   try {
     return readIdentity(paths, name);
   } catch (error) {
-    if (error instanceof ConfigValidationError || error instanceof SyntaxError) {
+    if (error instanceof ConfigFileNotJsonError) {
+      return { problem: NOT_JSON_PROBLEM };
+    }
+    if (error instanceof ConfigValidationError) {
       return { problem: error.message.replace(/\s*\n\s*/g, " ") };
     }
     throw error;
   }
 }
 function listIdentities(paths) {
-  if (!import_node_fs8.default.existsSync(paths.identitiesDir)) {
+  if (!import_node_fs9.default.existsSync(paths.identitiesDir)) {
     return [];
   }
   const active = readActiveIdentity2(paths);
-  const names = import_node_fs8.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort();
   const result = [];
-  for (const name of names) {
+  for (const name of listIdentityDirectories(paths).names) {
     const read = readIdentityForListing(paths, name);
     if (read === void 0) {
       continue;
@@ -17130,6 +17592,10 @@ function listIdentities(paths) {
   }
   return result;
 }
+function requireIdentityAddable(paths, name, keychain, keepKeychainLogin) {
+  requireIdentityCreatable(paths, name);
+  requireNoLeftoverKeychainLogin(keychain, import_node_path30.default.join(paths.identitiesDir, name), name, keepKeychainLogin);
+}
 function setIdentityAnchors(paths, identityName, anchors) {
   if (!identityExists(paths, identityName)) {
     throw new IdentityNotFoundError(identityName);
@@ -17182,49 +17648,70 @@ function setIdentityCredential(paths, identityName, change) {
     credential: { sources: [...sources], ...target === void 0 ? {} : { target }, ...cache === void 0 ? {} : { cache } }
   });
 }
+var UUID_PATTERN = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
+var FARM_SUFFIX_PATTERN = `\\.(?:scratch|previous)\\.\\d+\\.${UUID_PATTERN}`;
+function escapedForPattern(text) {
+  return text.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+}
+function isFarmEntry(entry, name) {
+  return entry === name || new RegExp(`^\\.${escapedForPattern(name)}${FARM_SUFFIX_PATTERN}$`, "u").test(entry);
+}
 function belongsToIdentity(entry, name) {
-  return entry === name || entry === import_node_path28.default.basename(identityLockPath("", name)) || entry.startsWith(`.${name}.scratch.`) || entry.startsWith(`.${name}.previous.`);
+  return isFarmEntry(entry, name) || entry === import_node_path30.default.basename(identityLockPath("", name));
+}
+function requireNewIdentityName(name) {
+  if (!FileNameSchema.safeParse(name).success) {
+    throw new InvalidIdentityNameError(name);
+  }
+}
+function sameIdentityName(paths, first, second) {
+  return sameDirectory(import_node_path30.default.join(paths.identitiesDir, first), import_node_path30.default.join(paths.identitiesDir, second)) || first.toLowerCase() === second.toLowerCase() && ignoresCase(paths.identitiesDir);
+}
+function requireNoUnfinishedRenameNaming(paths, name, action) {
+  requireNameFreeOfUnfinishedRename({ readFileUtf8: nodeStoreFs.readFileUtf8, readdir: (directory) => import_node_fs9.default.existsSync(directory) ? import_node_fs9.default.readdirSync(directory) : [] }, paths.identityRenamesDir, name, action, (first, second) => sameIdentityName(paths, first, second), (identity) => identityExists(paths, identity));
 }
 function removeIdentity(paths, name) {
+  requireNoUnfinishedRenameNaming(paths, name, "remove");
   if (!identityExists(paths, name)) {
     throw new IdentityNotFoundError(name);
   }
-  for (const entry of import_node_fs8.default.readdirSync(paths.identitiesDir)) {
+  for (const entry of import_node_fs9.default.readdirSync(paths.identitiesDir)) {
     if (belongsToIdentity(entry, name)) {
-      import_node_fs8.default.rmSync(import_node_path28.default.join(paths.identitiesDir, entry), { recursive: true, force: true });
+      import_node_fs9.default.rmSync(import_node_path30.default.join(paths.identitiesDir, entry), { recursive: true, force: true });
     }
   }
   if (readActiveIdentity2(paths) === name) {
-    import_node_fs8.default.rmSync(paths.activeIdentityFile);
+    import_node_fs9.default.rmSync(paths.activeIdentityFile);
   }
 }
 
 // src/doctorReport.ts
 init_realPorts();
-var import_node_fs10 = __toESM(require("node:fs"), 1);
-var import_node_path29 = __toESM(require("node:path"), 1);
+var import_node_fs11 = __toESM(require("node:fs"), 1);
+var import_node_path31 = __toESM(require("node:path"), 1);
 init_signIn();
 init_identityAccounts();
+init_read();
 
 // src/codex/siwcStore.ts
-var import_zod26 = require("zod");
+var import_zod27 = require("zod");
 
 // src/codex/auth.ts
-var import_zod24 = require("zod");
-var AuthFileSchema = import_zod24.z.looseObject({
-  tokens: import_zod24.z.looseObject({
-    access_token: import_zod24.z.string().optional(),
-    refresh_token: import_zod24.z.string().optional(),
-    id_token: import_zod24.z.string().optional(),
-    account_id: import_zod24.z.string().optional()
+var import_zod25 = require("zod");
+var AuthFileSchema = import_zod25.z.looseObject({
+  tokens: import_zod25.z.looseObject({
+    access_token: import_zod25.z.string().optional(),
+    refresh_token: import_zod25.z.string().optional(),
+    id_token: import_zod25.z.string().optional(),
+    account_id: import_zod25.z.string().optional()
   }).nullish(),
-  last_refresh: import_zod24.z.string().optional()
+  last_refresh: import_zod25.z.string().optional()
 });
-var TokenGrantSchema = import_zod24.z.looseObject({
-  access_token: import_zod24.z.string().min(1).optional(),
-  refresh_token: import_zod24.z.string().min(1).optional(),
-  id_token: import_zod24.z.string().min(1).optional(),
-  account_id: import_zod24.z.string().min(1).optional()
+var TokenGrantSchema = import_zod25.z.looseObject({
+  access_token: import_zod25.z.string().min(1).optional(),
+  refresh_token: import_zod25.z.string().min(1).optional(),
+  id_token: import_zod25.z.string().min(1).optional(),
+  account_id: import_zod25.z.string().min(1).optional()
 });
 var CodexAuthError = class extends Error {
   constructor(message) {
@@ -17234,41 +17721,41 @@ var CodexAuthError = class extends Error {
 };
 
 // src/codex/siwc.ts
-var import_zod25 = require("zod");
+var import_zod26 = require("zod");
 var SIWC_RESOURCE = "https://api.openai.com/v1";
 var SIWC_RESPONSES_URL = `${SIWC_RESOURCE}/responses`;
 var SIWC_PLAN_SCOPE = "chatgpt.tokens.use.direct";
-var TokenResponseSchema = import_zod25.z.looseObject({
-  access_token: import_zod25.z.string().min(1),
-  refresh_token: import_zod25.z.string().min(1).optional(),
-  id_token: import_zod25.z.string().min(1).optional(),
-  expires_in: import_zod25.z.number().positive(),
-  scope: import_zod25.z.string().optional()
+var TokenResponseSchema = import_zod26.z.looseObject({
+  access_token: import_zod26.z.string().min(1),
+  refresh_token: import_zod26.z.string().min(1).optional(),
+  id_token: import_zod26.z.string().min(1).optional(),
+  expires_in: import_zod26.z.number().positive(),
+  scope: import_zod26.z.string().optional()
 });
-var JwtHeaderSchema = import_zod25.z.looseObject({ alg: import_zod25.z.string(), kid: import_zod25.z.string().optional() });
-var IdTokenClaimsSchema = import_zod25.z.looseObject({
-  iss: import_zod25.z.string(),
-  sub: import_zod25.z.string().min(1),
-  aud: import_zod25.z.union([import_zod25.z.string(), import_zod25.z.array(import_zod25.z.string())]),
-  exp: import_zod25.z.number(),
-  nonce: import_zod25.z.string().optional(),
-  email: import_zod25.z.string().optional()
+var JwtHeaderSchema = import_zod26.z.looseObject({ alg: import_zod26.z.string(), kid: import_zod26.z.string().optional() });
+var IdTokenClaimsSchema = import_zod26.z.looseObject({
+  iss: import_zod26.z.string(),
+  sub: import_zod26.z.string().min(1),
+  aud: import_zod26.z.union([import_zod26.z.string(), import_zod26.z.array(import_zod26.z.string())]),
+  exp: import_zod26.z.number(),
+  nonce: import_zod26.z.string().optional(),
+  email: import_zod26.z.string().optional()
 });
-var JwksSchema = import_zod25.z.object({ keys: import_zod25.z.array(import_zod25.z.looseObject({ kid: import_zod25.z.string().optional(), kty: import_zod25.z.string() })) });
+var JwksSchema = import_zod26.z.object({ keys: import_zod26.z.array(import_zod26.z.looseObject({ kid: import_zod26.z.string().optional(), kty: import_zod26.z.string() })) });
 
 // src/codex/siwcStore.ts
-var SiwcGrantSchema = import_zod26.z.strictObject({
-  clientId: import_zod26.z.string().min(1),
-  sub: import_zod26.z.string().min(1),
-  email: import_zod26.z.string().optional(),
-  idToken: import_zod26.z.string().min(1),
-  accessToken: import_zod26.z.string().min(1),
-  refreshToken: import_zod26.z.string().min(1),
-  scopes: import_zod26.z.array(import_zod26.z.string()).readonly(),
+var SiwcGrantSchema = import_zod27.z.strictObject({
+  clientId: import_zod27.z.string().min(1),
+  sub: import_zod27.z.string().min(1),
+  email: import_zod27.z.string().optional(),
+  idToken: import_zod27.z.string().min(1),
+  accessToken: import_zod27.z.string().min(1),
+  refreshToken: import_zod27.z.string().min(1),
+  scopes: import_zod27.z.array(import_zod27.z.string()).readonly(),
   /** When the access token stops working, in milliseconds since the epoch. */
-  expiresAt: import_zod26.z.number()
+  expiresAt: import_zod27.z.number()
 });
-var SiwcFileSchema = import_zod26.z.strictObject({ registeredClientId: import_zod26.z.string().min(1).optional(), grant: SiwcGrantSchema.optional() });
+var SiwcFileSchema = import_zod27.z.strictObject({ registeredClientId: import_zod27.z.string().min(1).optional(), grant: SiwcGrantSchema.optional() });
 function parseSiwcFile(raw, filePath) {
   let json;
   try {
@@ -17524,7 +18011,7 @@ function pushFrontDoorListeners(push, readings) {
 }
 
 // src/frontdoor/listenerReadings.ts
-var import_node_fs9 = __toESM(require("node:fs"), 1);
+var import_node_fs10 = __toESM(require("node:fs"), 1);
 init_probe();
 function readFrontDoorListeners(state, supervisorAlive, probes) {
   if (!supervisorAlive) {
@@ -17545,7 +18032,7 @@ function readFrontDoorListeners(state, supervisorAlive, probes) {
 }
 function realFrontDoorListenerProbes(paths) {
   return {
-    authenticateProvider: (port) => probeFrontDoorSync(port, import_node_fs9.default.readFileSync(paths.frontdoorCaCertFile, "utf8")),
+    authenticateProvider: (port) => probeFrontDoorSync(port, import_node_fs10.default.readFileSync(paths.frontdoorCaCertFile, "utf8")),
     connect: probeListenerAcceptSync,
     now: () => performance.now()
   };
@@ -17578,6 +18065,82 @@ function describeSharedLoginMembers(poolName, shared) {
   return `Pool "${poolName}" lists ${joinNames(shared.members)}, which hold the same login${holder === void 0 ? "" : ` (${holder})`}, so they share one quota window. A launch ranks them as one candidate and never fails over from one to another; keep one of them in the pool.`;
 }
 
+// src/poolWindowReads.ts
+init_schema();
+init_identity();
+init_conditions();
+init_middleware();
+init_rateLimit();
+var WINDOW_NAMES = ["fiveHour", "sevenDay", "extraUsage"];
+var WINDOW_PROSE = { fiveHour: "five-hour", sevenDay: "seven-day", extraUsage: "extra-usage" };
+var WINDOW_FACTS = ["remaining", "utilization", "hoursUntilReset"];
+var DERIVED_FACTS = [{ key: "quota.burnPerHour", window: "fiveHour" }];
+function receivedWindows(snapshot) {
+  const unified = snapshot?.providers[ANTHROPIC_PROVIDER]?.rateLimit?.unified;
+  if (unified === void 0) {
+    return void 0;
+  }
+  return /* @__PURE__ */ new Set([...unified.fiveHour === void 0 ? [] : ["fiveHour"], ...unified.sevenDay === void 0 ? [] : ["sevenDay"], ...soleOverageWindow(unified) === void 0 ? [] : ["extraUsage"]]);
+}
+function conditionReads(when) {
+  const direct = WINDOW_NAMES.flatMap((window) => WINDOW_FACTS.some((fact) => referencesFact(when, `quota.${window}.${fact}`)) ? [{ window, reference: `quota.${window}` }] : []);
+  const derived = DERIVED_FACTS.flatMap(({ key, window }) => referencesFact(when, key) ? [{ window, reference: key }] : []);
+  return [...direct, ...derived];
+}
+function identitiesOf(selector, pools, visited = /* @__PURE__ */ new Set()) {
+  const nested = poolNameOf(selector);
+  if (nested === void 0) {
+    return [selector];
+  }
+  const pool = pools[nested];
+  if (pool === void 0 || visited.has(nested)) {
+    return [];
+  }
+  visited.add(nested);
+  return [...new Set(pool.identities.flatMap((member) => identitiesOf(poolMemberIdentity(member), pools, visited)))];
+}
+function poolWindowReadFindings(pools, windowsOf) {
+  const findings = [];
+  for (const [poolName, pool] of Object.entries(pools)) {
+    for (const member of pool.identities) {
+      if (typeof member === "string") {
+        continue;
+      }
+      const reads = conditionReads(member.when);
+      for (const identity of identitiesOf(member.identity, pools)) {
+        const received = windowsOf(identity);
+        for (const { window, reference } of reads) {
+          if (received !== void 0 && !received.has(window)) {
+            findings.push({ subject: poolName, message: `Pool "${poolName}" guards ${member.identity} with a condition that reads ${reference}, but ${identity} reports no ${WINDOW_PROSE[window]} window, so the condition is undecided for it and it always ranks last within its class.` });
+          }
+        }
+      }
+    }
+    if (pool.compactBeforeLimit === true) {
+      for (const identity of identitiesOf(`pool:${poolName}`, pools)) {
+        const received = windowsOf(identity);
+        if (received !== void 0 && !received.has("fiveHour") && !received.has("sevenDay")) {
+          findings.push({ subject: poolName, message: `Pool "${poolName}" compacts before the limit, but ${identity} reports no five-hour or seven-day window, so its sessions are never compacted before the limit.` });
+        }
+      }
+    }
+  }
+  return findings;
+}
+function jobWindowReadFindings(jobs, pools, windowsOf) {
+  return Object.entries(jobs).flatMap(([jobName, job]) => {
+    const { trigger, target } = job;
+    if (!("beforeReset" in trigger)) {
+      return [];
+    }
+    const identities = "pool" in target ? identitiesOf(`pool:${target.pool}`, pools) : identitiesOf(target.identity, pools);
+    return identities.flatMap((identity) => {
+      const received = windowsOf(identity);
+      return received === void 0 || received.has(trigger.beforeReset) ? [] : [{ subject: jobName, message: `Job "${jobName}" runs before the ${WINDOW_PROSE[trigger.beforeReset]} window resets, but ${identity} reports no ${WINDOW_PROSE[trigger.beforeReset]} window, so the job is skipped whenever it runs as ${identity}.` }];
+    });
+  });
+}
+
 // src/doctorReport.ts
 init_extends();
 var DOCTOR_SEVERITIES = ["pass", "warn", "fail"];
@@ -17614,8 +18177,8 @@ function validateJson(schema, input) {
   let parsed;
   try {
     parsed = JSON.parse(input.raw);
-  } catch (error) {
-    return { ok: false, message: `${input.path} is not valid JSON: ${error instanceof Error ? error.message : String(error)}` };
+  } catch {
+    return { ok: false, message: `${input.path} is not valid JSON.` };
   }
   const result = parseIgnoringUnrecognisedKeys(schema, parsed);
   if (!result.success) {
@@ -17634,7 +18197,7 @@ function tcpPortEraRecord(raw) {
   return (has("port") || has("lastPort")) && !has("socketPath");
 }
 function pushPathResolution(push, resolution) {
-  const ownDir = import_node_path29.default.dirname(resolution.ownExecutablePath);
+  const ownDir = import_node_path31.default.dirname(resolution.ownExecutablePath);
   switch (resolution.agentShim.status) {
     case "ok":
       push("path-resolution", "pass", `\`agent-shim\` on PATH resolves to this running executable, ${resolution.ownExecutablePath}.`, "agent-shim");
@@ -17721,8 +18284,8 @@ function pushProvider(push, entry, cacheEnv, signIn) {
   let parsed;
   try {
     parsed = JSON.parse(entry.raw);
-  } catch (error) {
-    push("provider", "fail", `${entry.path} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`, entry.name);
+  } catch {
+    push("provider", "fail", `${entry.path} is not valid JSON.`, entry.name);
     return;
   }
   const conversion = legacyProviderConversion(parsed);
@@ -17754,14 +18317,14 @@ function pushProvider(push, entry, cacheEnv, signIn) {
 }
 function pushLegacyName(push, params) {
   const legacyVariables = Object.keys(params.env).filter((name) => name.startsWith(LEGACY_ENV_PREFIX) && params.env[name] !== void 0).sort();
-  if (legacyVariables.length === 0 && import_node_path29.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
+  if (legacyVariables.length === 0 && import_node_path31.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
     push("legacy-name", "pass", "Nothing here still uses the former `claude-use` name.");
     return;
   }
   for (const name of legacyVariables) {
     push("legacy-name", "warn", `${name} is the former name of ${name.replace(LEGACY_ENV_PREFIX, ENV_PREFIX)}. Rename it; the old name still works but is only a fallback.`, name);
   }
-  if (import_node_path29.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
+  if (import_node_path31.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
     push(
       "legacy-name",
       "warn",
@@ -17847,6 +18410,16 @@ function runDoctor(params) {
   }
   const validProfileNames = new Set(profileSources.keys());
   const validProviderNames = /* @__PURE__ */ new Set([...params.providers.map((entry) => entry.name), ...Object.keys(params.providerAliases ?? {})]);
+  const identityNames = new Set(params.identities.filter((entry) => entry.raw !== void 0).map((entry) => entry.name));
+  for (const journal of params.renameJournals?.journals ?? []) {
+    push("identity", "fail", `There is ${describeUnfinishedRename(journal, finishabilityOf(journal, (name) => identityNames.has(name)))}`, journal.from);
+  }
+  for (const { name, code } of params.unreachableIdentities ?? []) {
+    push("identity", "warn", `identities/${name} cannot be reached (${code}), so it is not counted as an identity. Repair the permissions of the directory or of what a symlink points through, or remove the entry.`, name);
+  }
+  for (const { file, detail } of params.renameJournals?.unreadable ?? []) {
+    push("identity", "fail", `${file} is not a rename journal this agent-shim can read (${detail}), so no identity can be renamed until it is fixed or removed, and it may be the trace of a rename that was left unfinished.`, import_node_path31.default.basename(file));
+  }
   const validIdentityNames = /* @__PURE__ */ new Set();
   const signedInAccounts = [];
   for (const entry of params.identities) {
@@ -17946,6 +18519,17 @@ function runDoctor(params) {
     reportedCycles.add(key);
     push("pool", "fail", `Pool cycle: ${chain.join(" -> ")}. A pool cannot nest itself, directly or through another pool.`, chain[0]);
   }
+  const { usageSnapshots } = params;
+  if (usageSnapshots !== void 0) {
+    const windowsOf = (identityName) => receivedWindows(usageSnapshots[identityName]);
+    for (const finding of poolWindowReadFindings(pools, windowsOf)) {
+      push("pool", "warn", finding.message, finding.subject);
+    }
+    const jobs = validatedGlobalConfig?.ok === true ? validatedGlobalConfig.data.jobs ?? {} : {};
+    for (const finding of jobWindowReadFindings(jobs, pools, windowsOf)) {
+      push("global-config", "warn", finding.message, finding.subject);
+    }
+  }
   const selectionExists = (selector) => {
     const poolName = poolNameOf(selector);
     return poolName === void 0 ? validIdentityNames.has(selector) : poolName in pools;
@@ -18186,7 +18770,7 @@ function formatDoctorReport(report) {
 }
 function realpathOrSelf(target) {
   try {
-    return import_node_fs10.default.realpathSync(target);
+    return import_node_fs11.default.realpathSync(target);
   } catch {
     return target;
   }
@@ -18198,20 +18782,33 @@ function servingDoorListeners(paths) {
 }
 function collectDoctorReport(params) {
   const { paths } = params;
-  const identityNames = import_node_fs10.default.existsSync(paths.identitiesDir) ? import_node_fs10.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort() : [];
+  const { names: identityNames, unreachable: unreachableIdentities } = listIdentityDirectories(paths);
   const identities = identityNames.map((name) => {
-    const farmRoot = import_node_path29.default.join(paths.identitiesDir, name);
-    const identityPath = import_node_path29.default.join(farmRoot, "identity.json");
-    return { name, path: identityPath, raw: realFsPort.readFileUtf8(identityPath), farmRoot, credentialsFilePresent: import_node_fs10.default.existsSync(credentialsFilePath(farmRoot)), account: readIdentityAccount(realFsPort, paths.identitiesDir, name)?.account };
+    const farmRoot = import_node_path31.default.join(paths.identitiesDir, name);
+    const identityPath = import_node_path31.default.join(farmRoot, "identity.json");
+    return { name, path: identityPath, raw: realFsPort.readFileUtf8(identityPath), farmRoot, credentialsFilePresent: import_node_fs11.default.existsSync(credentialsFilePath(farmRoot)), account: readIdentityAccount(realFsPort, paths.identitiesDir, name)?.account };
   });
-  const profileNames = import_node_fs10.default.existsSync(paths.configProfilesDir) ? import_node_fs10.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
+  const usageSnapshots = {};
+  for (const name of identityNames) {
+    try {
+      const snapshot = readUsageSnapshot(realFsPort, paths.usageSnapshotsDir, name);
+      if (snapshot !== void 0) {
+        usageSnapshots[name] = snapshot;
+      }
+    } catch (error) {
+      if (!(error instanceof UsageSnapshotError)) {
+        throw error;
+      }
+    }
+  }
+  const profileNames = import_node_fs11.default.existsSync(paths.configProfilesDir) ? import_node_fs11.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const configProfiles = profileNames.map((name) => {
-    const profilePath = import_node_path29.default.join(paths.configProfilesDir, `${name}.json`);
+    const profilePath = import_node_path31.default.join(paths.configProfilesDir, `${name}.json`);
     return { name, path: profilePath, raw: realFsPort.readFileUtf8(profilePath) };
   });
-  const providerNames = import_node_fs10.default.existsSync(paths.providersDir) ? import_node_fs10.default.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
+  const providerNames = import_node_fs11.default.existsSync(paths.providersDir) ? import_node_fs11.default.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const providers = providerNames.map((name) => {
-    const providerPath = import_node_path29.default.join(paths.providersDir, `${name}.json`);
+    const providerPath = import_node_path31.default.join(paths.providersDir, `${name}.json`);
     return { name, path: providerPath, raw: realFsPort.readFileUtf8(providerPath) };
   });
   const ownExecutablePath = realOwnExecutablePath();
@@ -18223,12 +18820,12 @@ function collectDoctorReport(params) {
     binaryDiscovery = { ok: false, message: error instanceof Error ? error.message : String(error) };
   }
   const shimState = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const pathDirs = (params.env.PATH ?? "").split(import_node_path29.default.delimiter).filter((dir) => dir !== "");
+  const pathDirs = (params.env.PATH ?? "").split(import_node_path31.default.delimiter).filter((dir) => dir !== "");
   const claudeShimShadow = shimState === void 0 ? void 0 : refinePathShadow(
     findPathShadow({
       pathDirs,
-      targetDir: import_node_path29.default.dirname(shimState.targetPath),
-      targetFilename: import_node_path29.default.basename(shimState.targetPath),
+      targetDir: import_node_path31.default.dirname(shimState.targetPath),
+      targetFilename: import_node_path31.default.basename(shimState.targetPath),
       findExecutableInDir
     }),
     shimState.targetPath,
@@ -18247,9 +18844,12 @@ function collectDoctorReport(params) {
     chatgptSignIn: { path: paths.chatgptSignInFile, raw: realFsPort.readFileUtf8(paths.chatgptSignInFile) },
     installedClaudeVersions: realInstalledClaudeVersions(),
     identities,
+    usageSnapshots,
     configProfiles,
     providers,
     providerAliases: readProviderAliases(paths),
+    renameJournals: listRenameJournals(realFarmFs, paths.identityRenamesDir),
+    unreachableIdentities,
     directoryRules: { path: paths.directoryRulesFile, raw: realFsPort.readFileUtf8(paths.directoryRulesFile) },
     globalConfig: { path: paths.globalConfigFile, raw: realFsPort.readFileUtf8(paths.globalConfigFile) },
     models: parsedModelsOf(paths),
@@ -18257,14 +18857,14 @@ function collectDoctorReport(params) {
     categoriesLocal: { path: paths.categoriesLocalFile, raw: realFsPort.readFileUtf8(paths.categoriesLocalFile) },
     activeIdentity: { path: paths.activeIdentityFile, raw: realFsPort.readFileUtf8(paths.activeIdentityFile) },
     binaryDiscovery,
-    claudeShim: { state: shimState, targetExists: shimState !== void 0 && import_node_fs10.default.existsSync(shimState.targetPath) },
+    claudeShim: { state: shimState, targetExists: shimState !== void 0 && import_node_fs11.default.existsSync(shimState.targetPath) },
     rootPath: paths.root,
     pathResolution: {
       ownExecutablePath,
       agentShim: refinePathShadow(
         findPathShadow({
           pathDirs,
-          targetDir: import_node_path29.default.dirname(ownExecutablePath),
+          targetDir: import_node_path31.default.dirname(ownExecutablePath),
           targetFilename: commandFilename(ownExecutablePath, "agent-shim"),
           findExecutableInDir
         }),
@@ -18305,92 +18905,92 @@ function collectDoctorReport(params) {
 // src/frontdoor/controlSchemas.ts
 init_schema2();
 init_state();
-var UsageListOutputSchema = import_zod29.z.strictObject({ snapshots: import_zod29.z.readonly(import_zod29.z.array(UsageSnapshotSchema)) });
-var UsageWindowsInputSchema = import_zod29.z.strictObject({
-  identity: import_zod29.z.string().min(1),
-  provider: import_zod29.z.string().min(1).optional()
+var UsageListOutputSchema = import_zod30.z.strictObject({ snapshots: import_zod30.z.readonly(import_zod30.z.array(UsageSnapshotSchema)) });
+var UsageWindowsInputSchema = import_zod30.z.strictObject({
+  identity: import_zod30.z.string().min(1),
+  provider: import_zod30.z.string().min(1).optional()
 });
-var EffectiveWindowSchema = import_zod29.z.strictObject({
+var EffectiveWindowSchema = import_zod30.z.strictObject({
   /** True when the window's reset time has passed, so the recorded observation describes a window that no longer exists. */
-  reset: import_zod29.z.boolean(),
+  reset: import_zod30.z.boolean(),
   /** The fraction used: 0 for a reset window, otherwise what was last observed, absent when none was reported. */
-  utilization: import_zod29.z.number().optional(),
+  utilization: import_zod30.z.number().optional(),
   /** The reset instant, for a window that has not reset yet and reported one. */
-  resetsAtMs: import_zod29.z.number().optional(),
+  resetsAtMs: import_zod30.z.number().optional(),
   /** The window's own status, for a window that has not reset yet. */
-  status: import_zod29.z.string().optional()
+  status: import_zod30.z.string().optional()
 });
-var UsageWindowsOutputSchema = import_zod29.z.strictObject({
-  identity: import_zod29.z.string(),
-  provider: import_zod29.z.string(),
+var UsageWindowsOutputSchema = import_zod30.z.strictObject({
+  identity: import_zod30.z.string(),
+  provider: import_zod30.z.string(),
   /** When the rate-limit state the windows come from was observed. */
-  observedAt: import_zod29.z.iso.datetime().optional(),
+  observedAt: import_zod30.z.iso.datetime().optional(),
   fiveHour: EffectiveWindowSchema.optional(),
   sevenDay: EffectiveWindowSchema.optional()
 });
-var UsageLiveOutputSchema = import_zod29.z.strictObject({
+var UsageLiveOutputSchema = import_zod30.z.strictObject({
   /** The freshest observation the door holds, never narrowed by the read's session filter because it is the door's single latest statement of the account's quota; absent while no rate_limit_event has been filed at all. */
   latest: RcLiveRateLimitSchema.optional(),
   /** One observation per session whose stream has filed a rate_limit_event this door generation. */
-  sessions: import_zod29.z.readonly(import_zod29.z.array(RcLiveRateLimitSchema))
+  sessions: import_zod30.z.readonly(import_zod30.z.array(RcLiveRateLimitSchema))
 });
-var FrontDoorSessionStatusSchema = import_zod29.z.strictObject({
-  pid: import_zod29.z.int().positive(),
-  startedAt: import_zod29.z.number(),
-  alive: import_zod29.z.boolean()
+var FrontDoorSessionStatusSchema = import_zod30.z.strictObject({
+  pid: import_zod30.z.int().positive(),
+  startedAt: import_zod30.z.number(),
+  alive: import_zod30.z.boolean()
 });
-var HeadroomSocketTargetSchema = import_zod29.z.union([import_zod29.z.strictObject({ socketPath: import_zod29.z.string() }), import_zod29.z.strictObject({ refused: import_zod29.z.string() })]);
-var FrontDoorStatusOutputSchema = import_zod29.z.strictObject({
+var HeadroomSocketTargetSchema = import_zod30.z.union([import_zod30.z.strictObject({ socketPath: import_zod30.z.string() }), import_zod30.z.strictObject({ refused: import_zod30.z.string() })]);
+var FrontDoorStatusOutputSchema = import_zod30.z.strictObject({
   state: FrontDoorStateSchema,
-  supervisorAlive: import_zod29.z.boolean(),
+  supervisorAlive: import_zod30.z.boolean(),
   /** The pids of earlier doors that released their addresses and are finishing the connections they carried: running, but not serving anything new. */
-  draining: import_zod29.z.readonly(import_zod29.z.array(import_zod29.z.number().int().positive())),
-  sessions: import_zod29.z.readonly(import_zod29.z.array(FrontDoorSessionStatusSchema)),
+  draining: import_zod30.z.readonly(import_zod30.z.array(import_zod30.z.number().int().positive())),
+  sessions: import_zod30.z.readonly(import_zod30.z.array(FrontDoorSessionStatusSchema)),
   headroomSocket: HeadroomSocketTargetSchema.optional(),
-  logPath: import_zod29.z.string(),
-  logExists: import_zod29.z.boolean()
+  logPath: import_zod30.z.string(),
+  logExists: import_zod30.z.boolean()
 });
-var FrontDoorSessionsOutputSchema = import_zod29.z.strictObject({ sessions: import_zod29.z.readonly(import_zod29.z.array(FrontDoorSessionStatusSchema)) });
-var CheckRunInputSchema = import_zod29.z.strictObject({
-  path: import_zod29.z.string().min(1),
-  identity: import_zod29.z.string().min(1).optional()
-}).refine((input) => import_node_path30.default.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
-var PoolPickInputSchema = import_zod29.z.strictObject({
-  pool: import_zod29.z.string().min(1),
-  path: import_zod29.z.string().min(1)
-}).refine((input) => import_node_path30.default.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
-var DoctorFindingSchema = import_zod29.z.strictObject({
-  section: import_zod29.z.enum(DOCTOR_SECTIONS),
-  subject: import_zod29.z.string().optional(),
-  severity: import_zod29.z.enum(DOCTOR_SEVERITIES),
-  message: import_zod29.z.string()
+var FrontDoorSessionsOutputSchema = import_zod30.z.strictObject({ sessions: import_zod30.z.readonly(import_zod30.z.array(FrontDoorSessionStatusSchema)) });
+var CheckRunInputSchema = import_zod30.z.strictObject({
+  path: import_zod30.z.string().min(1),
+  identity: import_zod30.z.string().min(1).optional()
+}).refine((input) => import_node_path32.default.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+var PoolPickInputSchema = import_zod30.z.strictObject({
+  pool: import_zod30.z.string().min(1),
+  path: import_zod30.z.string().min(1)
+}).refine((input) => import_node_path32.default.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+var DoctorFindingSchema = import_zod30.z.strictObject({
+  section: import_zod30.z.enum(DOCTOR_SECTIONS),
+  subject: import_zod30.z.string().optional(),
+  severity: import_zod30.z.enum(DOCTOR_SEVERITIES),
+  message: import_zod30.z.string()
 });
-var DoctorRunOutputSchema = import_zod29.z.strictObject({
+var DoctorRunOutputSchema = import_zod30.z.strictObject({
   /** False exactly when any finding is a `fail`; a `warn` never fails the report on its own. */
-  ok: import_zod29.z.boolean(),
-  findings: import_zod29.z.readonly(import_zod29.z.array(DoctorFindingSchema))
+  ok: import_zod30.z.boolean(),
+  findings: import_zod30.z.readonly(import_zod30.z.array(DoctorFindingSchema))
 });
-var FrontDoorRestartOutputSchema = import_zod29.z.strictObject({
-  action: import_zod29.z.literal("restarting"),
-  previousPid: import_zod29.z.int().positive()
+var FrontDoorRestartOutputSchema = import_zod30.z.strictObject({
+  action: import_zod30.z.literal("restarting"),
+  previousPid: import_zod30.z.int().positive()
 });
-var UpdateCheckOutputSchema = import_zod29.z.strictObject({
-  current: import_zod29.z.string(),
-  latest: import_zod29.z.string(),
-  action: import_zod29.z.enum(["current", "available", "updated"])
+var UpdateCheckOutputSchema = import_zod30.z.strictObject({
+  current: import_zod30.z.string(),
+  latest: import_zod30.z.string(),
+  action: import_zod30.z.enum(["current", "available", "updated"])
 });
-var CodexSignInSchema = import_zod29.z.discriminatedUnion("state", [
-  import_zod29.z.strictObject({ state: import_zod29.z.literal("none") }),
-  import_zod29.z.strictObject({ state: import_zod29.z.literal("signed-in"), email: import_zod29.z.string().optional(), planScope: import_zod29.z.boolean(), accessTokenExpiresAt: import_zod29.z.number() }),
-  import_zod29.z.strictObject({ state: import_zod29.z.literal("unreadable"), message: import_zod29.z.string() })
+var CodexSignInSchema = import_zod30.z.discriminatedUnion("state", [
+  import_zod30.z.strictObject({ state: import_zod30.z.literal("none") }),
+  import_zod30.z.strictObject({ state: import_zod30.z.literal("signed-in"), email: import_zod30.z.string().optional(), planScope: import_zod30.z.boolean(), accessTokenExpiresAt: import_zod30.z.number() }),
+  import_zod30.z.strictObject({ state: import_zod30.z.literal("unreadable"), message: import_zod30.z.string() })
 ]);
-var CodexStatusOutputSchema = import_zod29.z.strictObject({
+var CodexStatusOutputSchema = import_zod30.z.strictObject({
   signIn: CodexSignInSchema,
-  codexProviders: import_zod29.z.readonly(import_zod29.z.array(import_zod29.z.string()))
+  codexProviders: import_zod30.z.readonly(import_zod30.z.array(import_zod30.z.string()))
 });
-var CodexLogoutOutputSchema = import_zod29.z.strictObject({
-  hadGrant: import_zod29.z.boolean(),
-  revoked: import_zod29.z.boolean()
+var CodexLogoutOutputSchema = import_zod30.z.strictObject({
+  hadGrant: import_zod30.z.boolean(),
+  revoked: import_zod30.z.boolean()
 });
 
 // src/frontdoor/codexApi.ts
@@ -18545,72 +19145,74 @@ function requireRuleSelector(paths, selector) {
 
 // src/frontdoor/configApi.ts
 init_identity();
+init_replayRun();
 init_providersStore();
 
 // src/frontdoor/configSchemas.ts
-var import_zod30 = require("zod");
+var import_zod31 = require("zod");
 init_schema();
 init_names();
 init_statusline();
-var RemovalConfirmationSchema = import_zod30.z.boolean();
-var CredentialWriteSchema = (targets) => import_zod30.z.strictObject({
-  sources: import_zod30.z.array(RemoteCredentialSourceSchema).min(1).optional(),
-  target: import_zod30.z.enum(targets).optional(),
-  cache: import_zod30.z.union([import_zod30.z.literal(false), CredentialCacheSchema]).optional()
+var RemovalConfirmationSchema = import_zod31.z.boolean();
+var CredentialWriteSchema = (targets) => import_zod31.z.strictObject({
+  sources: import_zod31.z.array(RemoteCredentialSourceSchema).min(1).optional(),
+  target: import_zod31.z.enum(targets).optional(),
+  cache: import_zod31.z.union([import_zod31.z.literal(false), CredentialCacheSchema]).optional()
 });
-var CredentialSummarySchema2 = import_zod30.z.strictObject({
-  target: import_zod30.z.enum(CREDENTIAL_TARGETS),
-  sources: import_zod30.z.readonly(import_zod30.z.array(
-    import_zod30.z.discriminatedUnion("kind", [
-      import_zod30.z.strictObject({ kind: import_zod30.z.literal("env"), variable: import_zod30.z.string() }),
-      import_zod30.z.strictObject({ kind: import_zod30.z.literal("file"), path: import_zod30.z.string() }),
-      import_zod30.z.strictObject({ kind: import_zod30.z.literal("command"), program: import_zod30.z.string() }),
-      import_zod30.z.strictObject({ kind: import_zod30.z.literal("op"), reference: import_zod30.z.string() }),
-      import_zod30.z.strictObject({ kind: import_zod30.z.literal("keychain"), service: import_zod30.z.string(), account: import_zod30.z.string().optional() }),
-      import_zod30.z.strictObject({ kind: import_zod30.z.literal("literal") })
+var CredentialSummarySchema2 = import_zod31.z.strictObject({
+  target: import_zod31.z.enum(CREDENTIAL_TARGETS),
+  sources: import_zod31.z.readonly(import_zod31.z.array(
+    import_zod31.z.discriminatedUnion("kind", [
+      import_zod31.z.strictObject({ kind: import_zod31.z.literal("env"), variable: import_zod31.z.string() }),
+      import_zod31.z.strictObject({ kind: import_zod31.z.literal("file"), path: import_zod31.z.string() }),
+      import_zod31.z.strictObject({ kind: import_zod31.z.literal("command"), program: import_zod31.z.string() }),
+      import_zod31.z.strictObject({ kind: import_zod31.z.literal("op"), reference: import_zod31.z.string() }),
+      import_zod31.z.strictObject({ kind: import_zod31.z.literal("keychain"), service: import_zod31.z.string(), account: import_zod31.z.string().optional() }),
+      import_zod31.z.strictObject({ kind: import_zod31.z.literal("literal") })
     ])
   )),
   cache: CredentialCacheSchema.optional()
 });
-var mutationOutput = (kind, action) => import_zod30.z.strictObject({ action: import_zod30.z.literal(action), kind: import_zod30.z.literal(kind), name: import_zod30.z.string() });
-var storedMutationOutput = (kind, action, value) => import_zod30.z.strictObject({ action: import_zod30.z.literal(action), kind: import_zod30.z.literal(kind), name: import_zod30.z.string(), value });
-var IdentityValueSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string(),
-  label: import_zod30.z.string().optional(),
-  defaultConfigProfile: import_zod30.z.string().optional(),
-  provider: import_zod30.z.string().optional(),
-  allowAmbientCredential: import_zod30.z.boolean(),
+var mutationOutput = (kind, action) => import_zod31.z.strictObject({ action: import_zod31.z.literal(action), kind: import_zod31.z.literal(kind), name: import_zod31.z.string() });
+var storedMutationOutput = (kind, action, value) => import_zod31.z.strictObject({ action: import_zod31.z.literal(action), kind: import_zod31.z.literal(kind), name: import_zod31.z.string(), value });
+var IdentityValueSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string(),
+  label: import_zod31.z.string().optional(),
+  defaultConfigProfile: import_zod31.z.string().optional(),
+  provider: import_zod31.z.string().optional(),
+  allowAmbientCredential: import_zod31.z.boolean(),
   credential: CredentialSummarySchema2.optional(),
-  anchors: import_zod30.z.array(AnchorSchema).optional()
+  anchors: import_zod31.z.array(AnchorSchema).optional()
 });
 var ProfileValueSchema = ConfigProfileSchema.omit({ $schema: true });
-var ProviderValueSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string(),
-  kind: import_zod30.z.enum(PROVIDER_KINDS),
-  displayName: import_zod30.z.string(),
-  baseUrl: import_zod30.z.string().optional(),
+var ProviderValueSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string(),
+  kind: import_zod31.z.enum(PROVIDER_KINDS),
+  displayName: import_zod31.z.string(),
+  baseUrl: import_zod31.z.string().optional(),
   codex: CodexProviderConfigSchema.optional(),
   credential: CredentialSummarySchema2.optional(),
-  env: import_zod30.z.record(import_zod30.z.string(), import_zod30.z.string()).optional()
+  env: import_zod31.z.record(import_zod31.z.string(), import_zod31.z.string()).optional()
 });
-var ConfigNameInputSchema = import_zod30.z.strictObject({ name: import_zod30.z.string().min(1) });
+var ConfigNameInputSchema = import_zod31.z.strictObject({ name: import_zod31.z.string().min(1) });
+var ConfigIdentityAddInputSchema = import_zod31.z.strictObject({ name: import_zod31.z.string().min(1), keepKeychainLogin: import_zod31.z.boolean().optional().describe(KEEP_KEYCHAIN_LOGIN_DESCRIPTION) });
 var ConfigIdentityAddOutputSchema = storedMutationOutput("identity", "created", IdentityValueSchema);
-var ConfigIdentitySetInputSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string().min(1),
+var ConfigIdentitySetInputSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string().min(1),
   /** The identity's display label; `false` clears it. */
-  label: import_zod30.z.union([IdentityLabelSchema, import_zod30.z.literal(false)]).optional(),
-  defaultConfigProfile: import_zod30.z.union([import_zod30.z.string().min(1), import_zod30.z.literal(false)]).optional(),
+  label: import_zod31.z.union([IdentityLabelSchema, import_zod31.z.literal(false)]).optional(),
+  defaultConfigProfile: import_zod31.z.union([import_zod31.z.string().min(1), import_zod31.z.literal(false)]).optional(),
   /** The provider the identity exists for; `false` clears it. */
-  provider: import_zod30.z.union([import_zod30.z.string().min(1), import_zod30.z.literal(false)]).optional(),
-  allowAmbientCredential: import_zod30.z.boolean().optional(),
-  credential: import_zod30.z.union([import_zod30.z.literal(false), CredentialWriteSchema(CREDENTIAL_TARGETS)]).optional(),
+  provider: import_zod31.z.union([import_zod31.z.string().min(1), import_zod31.z.literal(false)]).optional(),
+  allowAmbientCredential: import_zod31.z.boolean().optional(),
+  credential: import_zod31.z.union([import_zod31.z.literal(false), CredentialWriteSchema(CREDENTIAL_TARGETS)]).optional(),
   /** `false` removes the anchors; a list replaces them. */
-  anchors: import_zod30.z.union([import_zod30.z.literal(false), import_zod30.z.array(AnchorSchema).min(1)]).optional()
+  anchors: import_zod31.z.union([import_zod31.z.literal(false), import_zod31.z.array(AnchorSchema).min(1)]).optional()
 });
 var ConfigIdentitySetOutputSchema = storedMutationOutput("identity", "updated", IdentityValueSchema);
-var ConfigIdentityRemoveInputSchema = import_zod30.z.strictObject({ name: import_zod30.z.string().min(1), confirm: RemovalConfirmationSchema });
+var ConfigIdentityRemoveInputSchema = import_zod31.z.strictObject({ name: import_zod31.z.string().min(1), confirm: RemovalConfirmationSchema });
 var ConfigIdentityRemoveOutputSchema = mutationOutput("identity", "removed");
-var ConfigStatuslineSetSchema = import_zod30.z.record(import_zod30.z.string(), import_zod30.z.unknown()).superRefine((settings, context) => {
+var ConfigStatuslineSetSchema = import_zod31.z.record(import_zod31.z.string(), import_zod31.z.unknown()).superRefine((settings, context) => {
   for (const key of Object.keys(settings)) {
     if (key === STATUSLINE_EXTRA_GROUP || key.startsWith(`${STATUSLINE_EXTRA_GROUP}.`)) {
       context.addIssue({ code: "custom", path: [key], message: `a config write through the API cannot set "${key}": the extra segment's command runs a program, so only your own configuration (the global config, a profile you edit yourself, a directory rule or a command-line assignment) may set it` });
@@ -18618,102 +19220,105 @@ var ConfigStatuslineSetSchema = import_zod30.z.record(import_zod30.z.string(), i
   }
 });
 var ConfigIdentityUseOutputSchema = mutationOutput("identity", "selected");
-var ConfigProfileAddInputSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string().min(1),
-  extends: import_zod30.z.array(import_zod30.z.string().min(1)).optional(),
-  description: import_zod30.z.string().optional()
+var ConfigProfileAddInputSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string().min(1),
+  extends: import_zod31.z.array(import_zod31.z.string().min(1)).optional(),
+  description: import_zod31.z.string().optional()
 });
 var ConfigProfileAddOutputSchema = storedMutationOutput("profile", "created", ProfileValueSchema);
-var ConfigProfileSetInputSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string().min(1),
-  category: import_zod30.z.record(import_zod30.z.string(), import_zod30.z.boolean()).optional(),
-  entry: import_zod30.z.record(import_zod30.z.string(), import_zod30.z.boolean()).optional(),
-  extends: import_zod30.z.union([import_zod30.z.array(import_zod30.z.string().min(1)), import_zod30.z.literal(false)]).optional(),
-  description: import_zod30.z.union([import_zod30.z.string(), import_zod30.z.literal(false)]).optional(),
-  launch: import_zod30.z.strictObject({
-    skipPermissions: import_zod30.z.boolean().optional(),
-    remoteControl: import_zod30.z.boolean().optional(),
-    headroom: import_zod30.z.boolean().optional(),
-    trackUsage: import_zod30.z.boolean().optional(),
-    provider: import_zod30.z.union([import_zod30.z.string().min(1), import_zod30.z.literal(false)]).optional(),
-    claudeVersion: import_zod30.z.union([import_zod30.z.string().min(1), import_zod30.z.literal(false)]).optional(),
-    delay: import_zod30.z.union([import_zod30.z.string().regex(DURATION_RE), import_zod30.z.literal(false)]).optional(),
-    pause: import_zod30.z.boolean().optional(),
-    explain: import_zod30.z.boolean().optional(),
-    proxyBypass: import_zod30.z.union([import_zod30.z.array(import_zod30.z.string().min(1)), import_zod30.z.literal(false)]).optional(),
-    statusline: import_zod30.z.strictObject({
+var ConfigProfileSetInputSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string().min(1),
+  category: import_zod31.z.record(import_zod31.z.string(), import_zod31.z.boolean()).optional(),
+  entry: import_zod31.z.record(import_zod31.z.string(), import_zod31.z.boolean()).optional(),
+  extends: import_zod31.z.union([import_zod31.z.array(import_zod31.z.string().min(1)), import_zod31.z.literal(false)]).optional(),
+  description: import_zod31.z.union([import_zod31.z.string(), import_zod31.z.literal(false)]).optional(),
+  launch: import_zod31.z.strictObject({
+    skipPermissions: import_zod31.z.boolean().optional(),
+    remoteControl: import_zod31.z.boolean().optional(),
+    headroom: import_zod31.z.boolean().optional(),
+    trackUsage: import_zod31.z.boolean().optional(),
+    provider: import_zod31.z.union([import_zod31.z.string().min(1), import_zod31.z.literal(false)]).optional(),
+    claudeVersion: import_zod31.z.union([import_zod31.z.string().min(1), import_zod31.z.literal(false)]).optional(),
+    delay: import_zod31.z.union([import_zod31.z.string().regex(DURATION_RE), import_zod31.z.literal(false)]).optional(),
+    pause: import_zod31.z.boolean().optional(),
+    explain: import_zod31.z.boolean().optional(),
+    proxyBypass: import_zod31.z.union([import_zod31.z.array(import_zod31.z.string().min(1)), import_zod31.z.literal(false)]).optional(),
+    statusline: import_zod31.z.strictObject({
       set: ConfigStatuslineSetSchema.optional(),
-      unset: import_zod30.z.array(import_zod30.z.string()).optional()
+      unset: import_zod31.z.array(import_zod31.z.string()).optional()
     }).optional()
   }).optional()
 });
 var ConfigProfileSetOutputSchema = storedMutationOutput("profile", "updated", ProfileValueSchema);
-var ConfigProfileRemoveInputSchema = import_zod30.z.strictObject({ name: import_zod30.z.string().min(1), confirm: RemovalConfirmationSchema });
+var ConfigProfileRemoveInputSchema = import_zod31.z.strictObject({ name: import_zod31.z.string().min(1), confirm: RemovalConfirmationSchema });
 var ConfigProfileRemoveOutputSchema = mutationOutput("profile", "removed");
 var ConfigProfileUseOutputSchema = mutationOutput("profile", "selected");
-var PoolMembersInputSchema = import_zod30.z.array(import_zod30.z.string().min(1)).min(1);
-var ConfigPoolAddInputSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string().min(1),
+var PoolMembersInputSchema = import_zod31.z.array(import_zod31.z.string().min(1)).min(1);
+var ConfigPoolAddInputSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string().min(1),
   identities: PoolMembersInputSchema,
-  preference: import_zod30.z.enum(POOL_PREFERENCES).optional(),
-  resumeOnLimit: import_zod30.z.boolean().optional(),
-  compactBeforeLimit: import_zod30.z.boolean().optional(),
+  preference: import_zod31.z.enum(POOL_PREFERENCES).optional(),
+  resumeOnLimit: import_zod31.z.boolean().optional(),
+  compactBeforeLimit: import_zod31.z.boolean().optional(),
   compactAtUtilisation: CompactAtUtilisationSchema.optional()
 });
 var ConfigPoolAddOutputSchema = storedMutationOutput("pool", "created", PoolSchema);
-var ConfigPoolSetInputSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string().min(1),
+var ConfigPoolSetInputSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string().min(1),
   identities: PoolMembersInputSchema.optional(),
-  preference: import_zod30.z.union([import_zod30.z.enum(POOL_PREFERENCES), import_zod30.z.literal(false)]).optional(),
-  resumeOnLimit: import_zod30.z.boolean().optional(),
-  compactBeforeLimit: import_zod30.z.boolean().optional(),
-  compactAtUtilisation: import_zod30.z.union([CompactAtUtilisationSchema, import_zod30.z.literal(false)]).optional()
+  preference: import_zod31.z.union([import_zod31.z.enum(POOL_PREFERENCES), import_zod31.z.literal(false)]).optional(),
+  resumeOnLimit: import_zod31.z.boolean().optional(),
+  compactBeforeLimit: import_zod31.z.boolean().optional(),
+  compactAtUtilisation: import_zod31.z.union([CompactAtUtilisationSchema, import_zod31.z.literal(false)]).optional()
 });
 var ConfigPoolSetOutputSchema = storedMutationOutput("pool", "updated", PoolSchema);
-var ConfigPoolRemoveInputSchema = import_zod30.z.strictObject({ name: import_zod30.z.string().min(1), confirm: RemovalConfirmationSchema });
+var ConfigPoolRemoveInputSchema = import_zod31.z.strictObject({ name: import_zod31.z.string().min(1), confirm: RemovalConfirmationSchema });
 var ConfigPoolRemoveOutputSchema = mutationOutput("pool", "removed");
 var ConfigPoolUseOutputSchema = mutationOutput("pool", "selected");
-var ConfigProviderAddInputSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string().min(1),
-  kind: import_zod30.z.enum(PROVIDER_KINDS).optional(),
-  displayName: import_zod30.z.string().min(1),
-  baseUrl: import_zod30.z.string().min(1).optional(),
+var ConfigProviderAddInputSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string().min(1),
+  kind: import_zod31.z.enum(PROVIDER_KINDS).optional(),
+  displayName: import_zod31.z.string().min(1),
+  baseUrl: import_zod31.z.string().min(1).optional(),
   credential: CredentialWriteSchema(PROVIDER_CREDENTIAL_TARGETS).required({ sources: true }),
   codex: CodexProviderConfigSchema.optional()
 });
 var ConfigProviderAddOutputSchema = storedMutationOutput("provider", "created", ProviderValueSchema);
-var ConfigProviderSetInputSchema = import_zod30.z.strictObject({
-  name: import_zod30.z.string().min(1),
-  displayName: import_zod30.z.string().min(1).optional(),
-  baseUrl: import_zod30.z.string().min(1).optional(),
+var ConfigProviderSetInputSchema = import_zod31.z.strictObject({
+  name: import_zod31.z.string().min(1),
+  displayName: import_zod31.z.string().min(1).optional(),
+  baseUrl: import_zod31.z.string().min(1).optional(),
   credential: CredentialWriteSchema(PROVIDER_CREDENTIAL_TARGETS).optional(),
   codex: CodexProviderConfigSchema.optional()
 });
 var ConfigProviderSetOutputSchema = storedMutationOutput("provider", "updated", ProviderValueSchema);
-var ConfigProviderRemoveInputSchema = import_zod30.z.strictObject({ name: import_zod30.z.string().min(1), confirm: RemovalConfirmationSchema });
+var ConfigProviderRemoveInputSchema = import_zod31.z.strictObject({ name: import_zod31.z.string().min(1), confirm: RemovalConfirmationSchema });
 var ConfigProviderRemoveOutputSchema = mutationOutput("provider", "removed");
-var ConfigRuleAddInputSchema = import_zod30.z.strictObject({
-  path: import_zod30.z.string().min(1),
-  configProfile: import_zod30.z.string().min(1).optional(),
-  identity: import_zod30.z.string().min(1).optional()
+var ConfigRuleAddInputSchema = import_zod31.z.strictObject({
+  path: import_zod31.z.string().min(1),
+  configProfile: import_zod31.z.string().min(1).optional(),
+  identity: import_zod31.z.string().min(1).optional()
 });
 var ConfigRuleAddOutputSchema = storedMutationOutput("rule", "created", DirectoryRuleSchema);
-var ConfigRuleSetInputSchema = import_zod30.z.strictObject({
-  path: import_zod30.z.string().min(1),
-  configProfile: import_zod30.z.union([import_zod30.z.string().min(1), import_zod30.z.literal(false)]).optional(),
-  identity: import_zod30.z.union([import_zod30.z.string().min(1), import_zod30.z.literal(false)]).optional()
+var ConfigRuleSetInputSchema = import_zod31.z.strictObject({
+  path: import_zod31.z.string().min(1),
+  configProfile: import_zod31.z.union([import_zod31.z.string().min(1), import_zod31.z.literal(false)]).optional(),
+  identity: import_zod31.z.union([import_zod31.z.string().min(1), import_zod31.z.literal(false)]).optional()
 });
 var ConfigRuleSetOutputSchema = storedMutationOutput("rule", "updated", DirectoryRuleSchema);
-var ConfigRuleRemoveInputSchema = import_zod30.z.strictObject({ path: import_zod30.z.string().min(1), confirm: RemovalConfirmationSchema });
+var ConfigRuleRemoveInputSchema = import_zod31.z.strictObject({ path: import_zod31.z.string().min(1), confirm: RemovalConfirmationSchema });
 var ConfigRuleRemoveOutputSchema = mutationOutput("rule", "removed");
 
 // src/frontdoor/configApi.ts
 var CONFIG_API_TAG = "config";
 function refusal(error) {
+  if (error instanceof KeychainLookupError) {
+    throw new import_client2.ORPCError("SERVICE_UNAVAILABLE", { message: error.message });
+  }
   if (error instanceof IdentityNotFoundError || error instanceof ProfileNotFoundError || error instanceof PoolNotFoundError || error instanceof ProviderNotFoundError || error instanceof DirectoryRuleNotFoundError) {
     throw new import_client2.ORPCError("NOT_FOUND", { message: error.message });
   }
-  if (error instanceof IdentityAlreadyExistsError || error instanceof ProfileAlreadyExistsError || error instanceof PoolAlreadyExistsError || error instanceof ProviderAlreadyExistsError || error instanceof DirectoryRuleAlreadyExistsError) {
+  if (error instanceof IdentityAlreadyExistsError || error instanceof ProfileAlreadyExistsError || error instanceof PoolAlreadyExistsError || error instanceof ProviderAlreadyExistsError || error instanceof DirectoryRuleAlreadyExistsError || error instanceof KeychainLoginError) {
     throw new import_client2.ORPCError("CONFLICT", { message: error.message });
   }
   if (error instanceof CliError) {
@@ -18721,6 +19326,13 @@ function refusal(error) {
   }
   throw error;
 }
+async function guardedAsync(write) {
+  try {
+    await write();
+  } catch (error) {
+    refusal(error);
+  }
+}
 function guarded(write) {
   try {
     return write();
@@ -18770,16 +19382,21 @@ function profileValue(name, paths) {
 function createConfigApiRouter(deps) {
   const authed = doorApiAuth(deps.expectedToken);
   const { paths } = deps;
-  const route = (path42, summary) => authed.meta((0, import_openapi3.openapi)({ method: "POST", path: path42, summary, tags: [CONFIG_API_TAG] }));
+  const route = (path45, summary) => authed.meta((0, import_openapi3.openapi)({ method: "POST", path: path45, summary, tags: [CONFIG_API_TAG] }));
   return {
     config: {
       identity: {
-        add: route("/rest/config/identity/add", "Create an identity").input(ConfigNameInputSchema).output(ConfigIdentityAddOutputSchema).handler(
-          ({ input }) => guarded(() => {
+        add: route("/rest/config/identity/add", "Create an identity").input(ConfigIdentityAddInputSchema).output(ConfigIdentityAddOutputSchema).handler(async ({ input }) => {
+          await guardedAsync(async () => {
+            await resolveWithAsyncRuns((run) => {
+              requireIdentityAddable(paths, input.name, { run, platform: deps.keychain.platform }, input.keepKeychainLogin === true);
+            }, deps.keychain.runAsync);
+          });
+          return guarded(() => {
             addIdentity(paths, input.name);
             return { action: "created", kind: "identity", name: input.name, value: identityValue(input.name, paths) };
-          })
-        ),
+          });
+        }),
         set: route("/rest/config/identity/set", "Update an identity's label, default profile, provider, ambient-credential setting, credential or anchors").input(ConfigIdentitySetInputSchema).output(ConfigIdentitySetOutputSchema).handler(
           ({ input }) => guarded(() => {
             requireChange(input.label !== void 0 || input.defaultConfigProfile !== void 0 || input.provider !== void 0 || input.allowAmbientCredential !== void 0 || input.credential !== void 0 || input.anchors !== void 0, "label, defaultConfigProfile, provider, allowAmbientCredential, credential or anchors");
@@ -19028,43 +19645,43 @@ var import_openapi4 = require("@orpc/openapi");
 var import_server3 = require("@orpc/server");
 
 // src/frontdoor/eventSchemas.ts
-var import_zod31 = require("zod");
+var import_zod32 = require("zod");
 var DOOR_EVENT_SOURCE_RC = "rc";
 var LAUNCH_EVENT_SOURCE = "launch";
 var USAGE_EVENT_SOURCE = "usage";
 var DOOR_HEALTH_EVENT_SOURCE = "door";
 var QUOTA_EXPIRING_EVENT_SOURCE = "quota-expiring";
-var DoorEventSchema = import_zod31.z.strictObject({
-  source: import_zod31.z.string().min(1),
+var DoorEventSchema = import_zod32.z.strictObject({
+  source: import_zod32.z.string().min(1),
   /** A positive integer because the backbone's counters start at one and only ever increase. */
-  sequence: import_zod31.z.number().int().positive(),
-  payload: import_zod31.z.unknown()
+  sequence: import_zod32.z.number().int().positive(),
+  payload: import_zod32.z.unknown()
 });
-var DoorEventSourceQuerySchema = import_zod31.z.strictObject({
-  sources: import_zod31.z.array(import_zod31.z.string().min(1)).min(1).optional()
+var DoorEventSourceQuerySchema = import_zod32.z.strictObject({
+  sources: import_zod32.z.array(import_zod32.z.string().min(1)).min(1).optional()
 });
-var LaunchLifecycleEventSchema = import_zod31.z.strictObject({
-  kind: import_zod31.z.enum(["registered", "pruned", "ended"]),
-  pid: import_zod31.z.number().int().positive(),
-  startedAt: import_zod31.z.number(),
-  observedAt: import_zod31.z.number()
+var LaunchLifecycleEventSchema = import_zod32.z.strictObject({
+  kind: import_zod32.z.enum(["registered", "pruned", "ended"]),
+  pid: import_zod32.z.number().int().positive(),
+  startedAt: import_zod32.z.number(),
+  observedAt: import_zod32.z.number()
 });
-var DoorHealthEventSchema = import_zod31.z.discriminatedUnion("kind", [
-  import_zod31.z.strictObject({ kind: import_zod31.z.literal("generation"), pid: import_zod31.z.number().int().positive(), providerPort: import_zod31.z.number().int().positive(), connectPort: import_zod31.z.number().int().positive(), directPort: import_zod31.z.number().int().positive(), observedAt: import_zod31.z.number() }),
-  import_zod31.z.strictObject({ kind: import_zod31.z.literal("listenerFailed"), pid: import_zod31.z.number().int().positive(), listener: import_zod31.z.enum(["provider", "connect", "direct"]), message: import_zod31.z.string(), observedAt: import_zod31.z.number() }),
-  import_zod31.z.strictObject({ kind: import_zod31.z.literal("binaryTurnover"), pid: import_zod31.z.number().int().positive(), observedAt: import_zod31.z.number() }),
-  import_zod31.z.strictObject({ kind: import_zod31.z.literal("idleShutdown"), pid: import_zod31.z.number().int().positive(), observedAt: import_zod31.z.number() }),
-  import_zod31.z.strictObject({ kind: import_zod31.z.literal("superseded"), pid: import_zod31.z.number().int().positive(), ownerPid: import_zod31.z.number().int().positive(), observedAt: import_zod31.z.number() }),
-  import_zod31.z.strictObject({ kind: import_zod31.z.literal("drained"), pid: import_zod31.z.number().int().positive(), observedAt: import_zod31.z.number() })
+var DoorHealthEventSchema = import_zod32.z.discriminatedUnion("kind", [
+  import_zod32.z.strictObject({ kind: import_zod32.z.literal("generation"), pid: import_zod32.z.number().int().positive(), providerPort: import_zod32.z.number().int().positive(), connectPort: import_zod32.z.number().int().positive(), directPort: import_zod32.z.number().int().positive(), observedAt: import_zod32.z.number() }),
+  import_zod32.z.strictObject({ kind: import_zod32.z.literal("listenerFailed"), pid: import_zod32.z.number().int().positive(), listener: import_zod32.z.enum(["provider", "connect", "direct"]), message: import_zod32.z.string(), observedAt: import_zod32.z.number() }),
+  import_zod32.z.strictObject({ kind: import_zod32.z.literal("binaryTurnover"), pid: import_zod32.z.number().int().positive(), observedAt: import_zod32.z.number() }),
+  import_zod32.z.strictObject({ kind: import_zod32.z.literal("idleShutdown"), pid: import_zod32.z.number().int().positive(), observedAt: import_zod32.z.number() }),
+  import_zod32.z.strictObject({ kind: import_zod32.z.literal("superseded"), pid: import_zod32.z.number().int().positive(), ownerPid: import_zod32.z.number().int().positive(), observedAt: import_zod32.z.number() }),
+  import_zod32.z.strictObject({ kind: import_zod32.z.literal("drained"), pid: import_zod32.z.number().int().positive(), observedAt: import_zod32.z.number() })
 ]);
-var QuotaExpiringEventSchema = import_zod31.z.strictObject({
-  identity: import_zod31.z.string().min(1),
-  provider: import_zod31.z.string().min(1),
-  window: import_zod31.z.enum(["fiveHour", "sevenDay"]),
+var QuotaExpiringEventSchema = import_zod32.z.strictObject({
+  identity: import_zod32.z.string().min(1),
+  provider: import_zod32.z.string().min(1),
+  window: import_zod32.z.enum(["fiveHour", "sevenDay"]),
   /** The fraction of the window already used when it was seen expiring, always below one because a fully used window has nothing left to spend. */
-  utilization: import_zod31.z.number().min(0).max(1),
-  resetsAt: import_zod31.z.iso.datetime(),
-  observedAt: import_zod31.z.number()
+  utilization: import_zod32.z.number().min(0).max(1),
+  resetsAt: import_zod32.z.iso.datetime(),
+  observedAt: import_zod32.z.number()
 });
 
 // src/frontdoor/eventsApi.ts
@@ -19147,61 +19764,61 @@ var import_openapi6 = require("@orpc/openapi");
 init_cliError();
 
 // src/frontdoor/launchSchemas.ts
-var import_node_path31 = __toESM(require("node:path"), 1);
-var import_zod32 = require("zod");
+var import_node_path33 = __toESM(require("node:path"), 1);
+var import_zod33 = require("zod");
 init_statusline();
 init_claudeVersion();
 init_identity();
-var LaunchResolveInputSchema = import_zod32.z.strictObject({
-  path: import_zod32.z.string().min(1),
+var LaunchResolveInputSchema = import_zod33.z.strictObject({
+  path: import_zod33.z.string().min(1),
   /** `@name`, launch flags, then the arguments for `claude`; empty for a bare launch. */
-  argv: import_zod32.z.readonly(import_zod32.z.array(import_zod32.z.string())).optional(),
+  argv: import_zod33.z.readonly(import_zod33.z.array(import_zod33.z.string())).optional(),
   /** The launch's inherited environment. Absent means an empty one: the door's own environment is never a substitute for the caller's, so a caller that wants `AGENT_SHIM_*` switches or a `CLAUDE_CONFIG_DIR` considered names them here. Values are read, never reported. */
-  env: import_zod32.z.record(import_zod32.z.string(), import_zod32.z.string()).optional()
-}).refine((input) => import_node_path31.default.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
-var LaunchPoolDecisionSchema = import_zod32.z.strictObject({
-  name: import_zod32.z.string(),
-  reasons: import_zod32.z.readonly(import_zod32.z.array(import_zod32.z.string())),
-  movedOff: import_zod32.z.strictObject({ identity: import_zod32.z.string(), reason: import_zod32.z.string() }).optional()
+  env: import_zod33.z.record(import_zod33.z.string(), import_zod33.z.string()).optional()
+}).refine((input) => import_node_path33.default.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+var LaunchPoolDecisionSchema = import_zod33.z.strictObject({
+  name: import_zod33.z.string(),
+  reasons: import_zod33.z.readonly(import_zod33.z.array(import_zod33.z.string())),
+  movedOff: import_zod33.z.strictObject({ identity: import_zod33.z.string(), reason: import_zod33.z.string() }).optional()
 });
-var LaunchDecisionSchema = import_zod32.z.strictObject({
-  identity: import_zod32.z.string().optional(),
-  identitySource: import_zod32.z.enum(IDENTITY_DECISION_SOURCES),
+var LaunchDecisionSchema = import_zod33.z.strictObject({
+  identity: import_zod33.z.string().optional(),
+  identitySource: import_zod33.z.enum(IDENTITY_DECISION_SOURCES),
   pool: LaunchPoolDecisionSchema.optional(),
-  configDirEscapeHatch: import_zod32.z.boolean(),
-  configDir: import_zod32.z.string().optional(),
-  configProfile: import_zod32.z.string().optional(),
-  configProfileSource: import_zod32.z.enum(CONFIG_PROFILE_DECISION_SOURCES),
-  provider: import_zod32.z.string().optional()
+  configDirEscapeHatch: import_zod33.z.boolean(),
+  configDir: import_zod33.z.string().optional(),
+  configProfile: import_zod33.z.string().optional(),
+  configProfileSource: import_zod33.z.enum(CONFIG_PROFILE_DECISION_SOURCES),
+  provider: import_zod33.z.string().optional()
 });
-var LaunchFlagsSchema = import_zod32.z.strictObject({
-  skipPermissions: import_zod32.z.boolean(),
-  remoteControl: import_zod32.z.boolean(),
-  headroom: import_zod32.z.boolean(),
-  trackUsage: import_zod32.z.boolean(),
-  pause: import_zod32.z.boolean(),
-  explain: import_zod32.z.boolean(),
+var LaunchFlagsSchema = import_zod33.z.strictObject({
+  skipPermissions: import_zod33.z.boolean(),
+  remoteControl: import_zod33.z.boolean(),
+  headroom: import_zod33.z.boolean(),
+  trackUsage: import_zod33.z.boolean(),
+  pause: import_zod33.z.boolean(),
+  explain: import_zod33.z.boolean(),
   /** How long the launch waits after its own output before it starts claude, in milliseconds. */
-  delayMs: import_zod32.z.number(),
+  delayMs: import_zod33.z.number(),
   /** The hosts the launch keeps off the front door by adding them to the child's `NO_PROXY`. */
-  proxyBypass: import_zod32.z.array(import_zod32.z.string()).readonly(),
+  proxyBypass: import_zod33.z.array(import_zod33.z.string()).readonly(),
   /** How the session's built-in statusline looks, when the launch configures any of it. */
   statusline: StatuslineSchema.optional()
 });
-var LaunchResolveOutputSchema = import_zod32.z.strictObject({
+var LaunchResolveOutputSchema = import_zod33.z.strictObject({
   decision: LaunchDecisionSchema,
   flags: LaunchFlagsSchema,
-  claudeVersion: import_zod32.z.strictObject({ version: import_zod32.z.string(), source: import_zod32.z.enum(CLAUDE_VERSION_SOURCES) }).optional(),
+  claudeVersion: import_zod33.z.strictObject({ version: import_zod33.z.string(), source: import_zod33.z.enum(CLAUDE_VERSION_SOURCES) }).optional(),
   /** The real `claude` binary the launch would spawn, on the door's host. */
-  bin: import_zod32.z.string(),
+  bin: import_zod33.z.string(),
   /** The arguments the launch would pass it: the tool's own flags, then `CLAUDE_EXTRA_FLAGS`, then the caller's own. */
-  args: import_zod32.z.readonly(import_zod32.z.array(import_zod32.z.string())),
+  args: import_zod33.z.readonly(import_zod33.z.array(import_zod33.z.string())),
   /** The credential the launch would authenticate with, by target and source kinds. Absent when none applies. */
-  credential: import_zod32.z.strictObject({ subject: import_zod32.z.enum(["provider", "identity"]), name: import_zod32.z.string(), summary: CredentialSummarySchema }).optional(),
-  routing: import_zod32.z.strictObject({ frontDoor: import_zod32.z.boolean(), headroom: import_zod32.z.boolean() }),
+  credential: import_zod33.z.strictObject({ subject: import_zod33.z.enum(["provider", "identity"]), name: import_zod33.z.string(), summary: CredentialSummarySchema }).optional(),
+  routing: import_zod33.z.strictObject({ frontDoor: import_zod33.z.boolean(), headroom: import_zod33.z.boolean() }),
   /** The names of the environment variables the launch would set or unset, sorted. Values are not reported. */
-  environment: import_zod32.z.readonly(import_zod32.z.array(import_zod32.z.string())),
-  warnings: import_zod32.z.readonly(import_zod32.z.array(import_zod32.z.string()))
+  environment: import_zod33.z.readonly(import_zod33.z.array(import_zod33.z.string())),
+  warnings: import_zod33.z.readonly(import_zod33.z.array(import_zod33.z.string()))
 });
 
 // src/frontdoor/launchApi.ts
@@ -19237,22 +19854,22 @@ function createLaunchApiRouter(deps) {
 // src/frontdoor/agentTreesApi.ts
 var import_client6 = require("@orpc/client");
 var import_openapi7 = require("@orpc/openapi");
-var import_zod33 = require("zod");
+var import_zod34 = require("zod");
 init_cliError();
-var AgentTreesListInputSchema = import_zod33.z.strictObject({
+var AgentTreesListInputSchema = import_zod34.z.strictObject({
   /** Only this identity's sessions. */
-  identity: import_zod33.z.string().optional(),
+  identity: import_zod34.z.string().optional(),
   /** Include sessions that spawned no agent and ran no workflow. */
-  all: import_zod33.z.boolean().optional()
+  all: import_zod34.z.boolean().optional()
 });
-var AgentTreesListOutputSchema = import_zod33.z.array(SessionSummarySchema);
-var AgentTreesShowInputSchema = import_zod33.z.strictObject({
+var AgentTreesListOutputSchema = import_zod34.z.array(SessionSummarySchema);
+var AgentTreesShowInputSchema = import_zod34.z.strictObject({
   /** A session id, or an unambiguous prefix of one. */
-  session: import_zod33.z.string().min(1),
+  session: import_zod34.z.string().min(1),
   /** Look only in this identity. */
-  identity: import_zod33.z.string().optional()
+  identity: import_zod34.z.string().optional()
 });
-var AgentTreesShowOutputSchema = import_zod33.z.strictObject({ identities: import_zod33.z.array(import_zod33.z.string()), ...MergedAgentTreeSchema.shape });
+var AgentTreesShowOutputSchema = import_zod34.z.strictObject({ identities: import_zod34.z.array(import_zod34.z.string()), ...MergedAgentTreeSchema.shape });
 function asBadRequest(error) {
   if (error instanceof CliError) {
     throw new import_client6.ORPCError("BAD_REQUEST", { message: error.message });
@@ -21338,7 +21955,7 @@ data: ${JSON.stringify(envelope)}
 }
 
 // src/frontdoor/rcSelfHostMint.ts
-var import_node_path32 = __toESM(require("node:path"), 1);
+var import_node_path34 = __toESM(require("node:path"), 1);
 init_account();
 var CREDENTIALS_FILE2 = ".credentials.json";
 var CLAUDE_JSON2 = ".claude.json";
@@ -21349,8 +21966,8 @@ var SELF_HOST_SUBSCRIPTION_TYPE = "max";
 function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function readJsonObject(fs14, file) {
-  const raw = fs14.readFileUtf8(file);
+function readJsonObject(fs15, file) {
+  const raw = fs15.readFileUtf8(file);
   if (raw === void 0) {
     return void 0;
   }
@@ -21362,8 +21979,8 @@ function readJsonObject(fs14, file) {
   }
   return isRecord14(parsed) ? parsed : void 0;
 }
-function readRcSelfHostRecord(fs14, frontdoorDir) {
-  const parsed = readJsonObject(fs14, import_node_path32.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
+function readRcSelfHostRecord(fs15, frontdoorDir) {
+  const parsed = readJsonObject(fs15, import_node_path34.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
   if (parsed === void 0) {
     return void 0;
   }
@@ -21377,11 +21994,11 @@ function mintRcSelfHostCredential(deps) {
   if (!isIdentityName(deps.identity)) {
     throw new Error(`"${deps.identity}" is not a valid identity name.`);
   }
-  const identityDir = import_node_path32.default.join(deps.identitiesDir, deps.identity);
-  const credentialsFile = import_node_path32.default.join(identityDir, CREDENTIALS_FILE2);
-  const claudeJsonFile = import_node_path32.default.join(identityDir, CLAUDE_JSON2);
-  const recordDir = import_node_path32.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
-  const recordFile = import_node_path32.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
+  const identityDir = import_node_path34.default.join(deps.identitiesDir, deps.identity);
+  const credentialsFile = import_node_path34.default.join(identityDir, CREDENTIALS_FILE2);
+  const claudeJsonFile = import_node_path34.default.join(identityDir, CLAUDE_JSON2);
+  const recordDir = import_node_path34.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
+  const recordFile2 = import_node_path34.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
   const existingOauth = isRecord14(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
@@ -21397,7 +22014,7 @@ function mintRcSelfHostCredential(deps) {
   const organizationUuid = deps.newUuid();
   const accountUuid = deps.newUuid();
   const mintedAt = new Date(deps.now()).toISOString();
-  deps.fs.mkdirPrivate(import_node_path32.default.dirname(credentialsFile));
+  deps.fs.mkdirPrivate(import_node_path34.default.dirname(credentialsFile));
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
@@ -21424,36 +22041,36 @@ function mintRcSelfHostCredential(deps) {
   }, null, 2)}
 `);
   deps.fs.mkdirPrivate(recordDir);
-  deps.fs.writeFilePrivate(recordFile, `${JSON.stringify({ accessToken, refreshToken, organizationUuid, accountUuid }, null, 2)}
+  deps.fs.writeFilePrivate(recordFile2, `${JSON.stringify({ accessToken, refreshToken, organizationUuid, accountUuid }, null, 2)}
 `);
-  return { identity: deps.identity, organizationUuid, credentialsFile, claudeJsonFile, recordFile, replaced: existingIsOwn };
+  return { identity: deps.identity, organizationUuid, credentialsFile, claudeJsonFile, recordFile: recordFile2, replaced: existingIsOwn };
 }
 
 // src/index.ts
 init_ensure2();
 
 // src/frontdoor/liveSessionRegistry.ts
-var import_node_path33 = __toESM(require("node:path"), 1);
+var import_node_path35 = __toESM(require("node:path"), 1);
 init_capability();
 init_state();
 function sameStat(recorded, current) {
   return recorded?.mtimeMs === current.mtimeMs && recorded.sizeBytes === current.sizeBytes;
 }
 function createLiveSessionRegistry(ports) {
-  const { fs: fs14, sessionsDir } = ports;
+  const { fs: fs15, sessionsDir } = ports;
   const known = /* @__PURE__ */ new Map();
   let tokens = /* @__PURE__ */ new Set();
   let bySessionId = /* @__PURE__ */ new Map();
-  const recordNames = () => fs14.readdir(sessionsDir).filter(isSessionRecordName);
+  const recordNames = () => fs15.readdir(sessionsDir).filter(isSessionRecordName);
   const rebuildIndexes = () => {
     const records = [...known.values()].flatMap(({ record }) => record === void 0 ? [] : [record]);
     tokens = new Set(records.map((record) => record.token));
     bySessionId = new Map(records.flatMap((record) => record.sessionId === void 0 ? [] : [[record.sessionId, record]]));
   };
   const load = (name, stat) => {
-    known.set(name, { stat: { mtimeMs: stat.mtimeMs, sizeBytes: stat.sizeBytes }, record: readFrontDoorSessionRecord(fs14, sessionsDir, name) });
+    known.set(name, { stat: { mtimeMs: stat.mtimeMs, sizeBytes: stat.sizeBytes }, record: readFrontDoorSessionRecord(fs15, sessionsDir, name) });
   };
-  const statOf = (name) => fs14.lstat(import_node_path33.default.join(sessionsDir, name));
+  const statOf = (name) => fs15.lstat(import_node_path35.default.join(sessionsDir, name));
   const reconcile = () => {
     const names = new Set(recordNames());
     let changed = false;
@@ -21520,8 +22137,8 @@ init_plan2();
 init_poolPick();
 
 // src/agents/read.ts
-var import_node_path34 = __toESM(require("node:path"), 1);
-var import_zod34 = require("zod");
+var import_node_path36 = __toESM(require("node:path"), 1);
+var import_zod35 = require("zod");
 var PROJECTS_DIR = "projects";
 var TASKS_DIR = "tasks";
 var SUBAGENTS_DIR = "subagents";
@@ -21544,17 +22161,17 @@ function parseEntry2(project, entry) {
   const base = match?.[1];
   return base === void 0 ? { project, sessionId: entry, superseded: false, entry } : { project, sessionId: base, superseded: true, entry };
 }
-function listSessions2(fs14, configDir) {
+function listSessions2(fs15, configDir) {
   const found = [];
-  for (const project of fs14.readdir(import_node_path34.default.join(configDir, PROJECTS_DIR))) {
-    const projectDir = import_node_path34.default.join(configDir, PROJECTS_DIR, project);
+  for (const project of fs15.readdir(import_node_path36.default.join(configDir, PROJECTS_DIR))) {
+    const projectDir = import_node_path36.default.join(configDir, PROJECTS_DIR, project);
     const entries = /* @__PURE__ */ new Set();
-    for (const name of fs14.readdir(projectDir)) {
+    for (const name of fs15.readdir(projectDir)) {
       if (name.endsWith(TRANSCRIPT_SUFFIX)) {
         entries.add(name.slice(0, -TRANSCRIPT_SUFFIX.length));
         continue;
       }
-      const children = fs14.readdir(import_node_path34.default.join(projectDir, name));
+      const children = fs15.readdir(import_node_path36.default.join(projectDir, name));
       if (children.includes(SUBAGENTS_DIR) || children.includes(WORKFLOWS_DIR)) {
         entries.add(name);
       }
@@ -21565,17 +22182,17 @@ function listSessions2(fs14, configDir) {
   }
   return found.sort((left, right) => left.project.localeCompare(right.project) || left.entry.localeCompare(right.entry));
 }
-function locateAgents(fs14, configDir, relativeDir, workflowRunId, report) {
+function locateAgents(fs15, configDir, relativeDir, workflowRunId, report) {
   const located = [];
-  for (const name of listDirOrReport(fs14, configDir, relativeDir, report)) {
+  for (const name of listDirOrReport(fs15, configDir, relativeDir, report)) {
     if (!name.startsWith(AGENT_FILE_PREFIX) || !name.endsWith(META_SUFFIX)) {
       continue;
     }
     const id = name.slice(AGENT_FILE_PREFIX.length, -META_SUFFIX.length);
     located.push({
       id,
-      metaPath: import_node_path34.default.join(relativeDir, name),
-      transcriptPath: import_node_path34.default.join(relativeDir, `${AGENT_FILE_PREFIX}${id}${TRANSCRIPT_SUFFIX}`),
+      metaPath: import_node_path36.default.join(relativeDir, name),
+      transcriptPath: import_node_path36.default.join(relativeDir, `${AGENT_FILE_PREFIX}${id}${TRANSCRIPT_SUFFIX}`),
       workflowRunId
     });
   }
@@ -21616,17 +22233,17 @@ function toNode(read, children) {
 function describeFailure(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function readFileOrReport(fs14, configDir, relative, report) {
+function readFileOrReport(fs15, configDir, relative, report) {
   try {
-    return fs14.readFileUtf8(import_node_path34.default.join(configDir, relative));
+    return fs15.readFileUtf8(import_node_path36.default.join(configDir, relative));
   } catch (error) {
     report({ path: relative, reason: `could not be read: ${describeFailure(error)}` });
     return void 0;
   }
 }
-function listDirOrReport(fs14, configDir, relative, report) {
+function listDirOrReport(fs15, configDir, relative, report) {
   try {
-    return fs14.readdir(import_node_path34.default.join(configDir, relative));
+    return fs15.readdir(import_node_path36.default.join(configDir, relative));
   } catch (error) {
     report({ path: relative, reason: `could not be listed: ${describeFailure(error)}` });
     return [];
@@ -21640,47 +22257,47 @@ function parseJson2(text) {
     return void 0;
   }
 }
-var TaskFileSchema = import_zod34.z.object({ ...TaskItemSchema.omit({ taskList: true }).shape, blocks: import_zod34.z.array(import_zod34.z.string()).default([]), blockedBy: import_zod34.z.array(import_zod34.z.string()).default([]) });
-var WorkflowRunFileSchema = import_zod34.z.object({
-  runId: import_zod34.z.string(),
-  workflowName: import_zod34.z.string().optional(),
-  status: import_zod34.z.string().optional(),
-  startTime: import_zod34.z.number().optional(),
-  phases: import_zod34.z.array(import_zod34.z.object({ title: import_zod34.z.string() })).default([]),
-  summary: import_zod34.z.string().optional()
+var TaskFileSchema = import_zod35.z.object({ ...TaskItemSchema.omit({ taskList: true }).shape, blocks: import_zod35.z.array(import_zod35.z.string()).default([]), blockedBy: import_zod35.z.array(import_zod35.z.string()).default([]) });
+var WorkflowRunFileSchema = import_zod35.z.object({
+  runId: import_zod35.z.string(),
+  workflowName: import_zod35.z.string().optional(),
+  status: import_zod35.z.string().optional(),
+  startTime: import_zod35.z.number().optional(),
+  phases: import_zod35.z.array(import_zod35.z.object({ title: import_zod35.z.string() })).default([]),
+  summary: import_zod35.z.string().optional()
 });
-function summariseSession(fs14, configDir, ref) {
-  const sessionRelative = import_node_path34.default.join(PROJECTS_DIR, ref.project, ref.entry);
-  const subagentsRelative = import_node_path34.default.join(sessionRelative, SUBAGENTS_DIR);
-  const workflowsUnderSubagents = import_node_path34.default.join(subagentsRelative, WORKFLOWS_DIR);
+function summariseSession(fs15, configDir, ref) {
+  const sessionRelative = import_node_path36.default.join(PROJECTS_DIR, ref.project, ref.entry);
+  const subagentsRelative = import_node_path36.default.join(sessionRelative, SUBAGENTS_DIR);
+  const workflowsUnderSubagents = import_node_path36.default.join(subagentsRelative, WORKFLOWS_DIR);
   const isMeta = (name) => name.startsWith(AGENT_FILE_PREFIX) && name.endsWith(META_SUFFIX);
-  let agentCount = fs14.readdir(import_node_path34.default.join(configDir, subagentsRelative)).filter(isMeta).length;
-  for (const runDir of fs14.readdir(import_node_path34.default.join(configDir, workflowsUnderSubagents))) {
+  let agentCount = fs15.readdir(import_node_path36.default.join(configDir, subagentsRelative)).filter(isMeta).length;
+  for (const runDir of fs15.readdir(import_node_path36.default.join(configDir, workflowsUnderSubagents))) {
     if (runDir.startsWith(WORKFLOW_RUN_PREFIX)) {
-      agentCount += fs14.readdir(import_node_path34.default.join(configDir, workflowsUnderSubagents, runDir)).filter(isMeta).length;
+      agentCount += fs15.readdir(import_node_path36.default.join(configDir, workflowsUnderSubagents, runDir)).filter(isMeta).length;
     }
   }
-  const workflowRunCount = fs14.readdir(import_node_path34.default.join(configDir, sessionRelative, WORKFLOWS_DIR)).filter((name) => name.startsWith(WORKFLOW_RUN_PREFIX) && name.endsWith(JSON_SUFFIX)).length;
-  const transcript = fs14.lstat(import_node_path34.default.join(configDir, PROJECTS_DIR, ref.project, `${ref.entry}${TRANSCRIPT_SUFFIX}`));
+  const workflowRunCount = fs15.readdir(import_node_path36.default.join(configDir, sessionRelative, WORKFLOWS_DIR)).filter((name) => name.startsWith(WORKFLOW_RUN_PREFIX) && name.endsWith(JSON_SUFFIX)).length;
+  const transcript = fs15.lstat(import_node_path36.default.join(configDir, PROJECTS_DIR, ref.project, `${ref.entry}${TRANSCRIPT_SUFFIX}`));
   return { ...ref, agentCount, workflowRunCount, ...transcript === void 0 ? {} : { updatedAt: new Date(transcript.mtimeMs).toISOString() } };
 }
-function readSessionAgentTree(fs14, configDir, ref, options = {}) {
+function readSessionAgentTree(fs15, configDir, ref, options = {}) {
   const problems = [];
   const report = (problem) => {
     problems.push(problem);
   };
-  const sessionRelative = import_node_path34.default.join(PROJECTS_DIR, ref.project, ref.entry);
-  const subagentsRelative = import_node_path34.default.join(sessionRelative, SUBAGENTS_DIR);
-  const workflowsUnderSubagents = import_node_path34.default.join(subagentsRelative, WORKFLOWS_DIR);
-  const located = locateAgents(fs14, configDir, subagentsRelative, void 0, report);
-  for (const runDir of listDirOrReport(fs14, configDir, workflowsUnderSubagents, report)) {
+  const sessionRelative = import_node_path36.default.join(PROJECTS_DIR, ref.project, ref.entry);
+  const subagentsRelative = import_node_path36.default.join(sessionRelative, SUBAGENTS_DIR);
+  const workflowsUnderSubagents = import_node_path36.default.join(subagentsRelative, WORKFLOWS_DIR);
+  const located = locateAgents(fs15, configDir, subagentsRelative, void 0, report);
+  for (const runDir of listDirOrReport(fs15, configDir, workflowsUnderSubagents, report)) {
     if (runDir.startsWith(WORKFLOW_RUN_PREFIX)) {
-      located.push(...locateAgents(fs14, configDir, import_node_path34.default.join(workflowsUnderSubagents, runDir), runDir, report));
+      located.push(...locateAgents(fs15, configDir, import_node_path36.default.join(workflowsUnderSubagents, runDir), runDir, report));
     }
   }
   const agents = /* @__PURE__ */ new Map();
   for (const candidate of located) {
-    const text = readFileOrReport(fs14, configDir, candidate.metaPath, report);
+    const text = readFileOrReport(fs15, configDir, candidate.metaPath, report);
     if (text === void 0) {
       continue;
     }
@@ -21692,7 +22309,7 @@ function readSessionAgentTree(fs14, configDir, ref, options = {}) {
     agents.set(candidate.id, { located: candidate, meta: parsed.data });
   }
   const teamNames = [...new Set([...agents.values()].flatMap((agent) => agent.meta.teamName === void 0 ? [] : [agent.meta.teamName]))].sort();
-  const parentOf3 = resolveParents(fs14, configDir, agents, report);
+  const parentOf3 = resolveParents(fs15, configDir, agents, report);
   const childrenOf = /* @__PURE__ */ new Map();
   const roots = [];
   for (const id of agents.keys()) {
@@ -21715,12 +22332,12 @@ function readSessionAgentTree(fs14, configDir, ref, options = {}) {
     sessionId: ref.sessionId,
     superseded: ref.superseded,
     agents: roots.sort().map(build),
-    tasks: readTasks(fs14, configDir, ownTaskLists(ref.sessionId), [.../* @__PURE__ */ new Set([...teamNames, ...options.taskListIds ?? []])].filter((id) => !ownTaskLists(ref.sessionId).includes(id)), report),
-    workflowRuns: readWorkflowRuns(fs14, configDir, import_node_path34.default.join(sessionRelative, WORKFLOWS_DIR), report),
+    tasks: readTasks(fs15, configDir, ownTaskLists(ref.sessionId), [.../* @__PURE__ */ new Set([...teamNames, ...options.taskListIds ?? []])].filter((id) => !ownTaskLists(ref.sessionId).includes(id)), report),
+    workflowRuns: readWorkflowRuns(fs15, configDir, import_node_path36.default.join(sessionRelative, WORKFLOWS_DIR), report),
     problems
   };
 }
-function resolveParents(fs14, configDir, agents, report) {
+function resolveParents(fs15, configDir, agents, report) {
   const parentOf3 = /* @__PURE__ */ new Map();
   const transcriptCache = /* @__PURE__ */ new Map();
   const transcriptOf = (agent) => {
@@ -21728,7 +22345,7 @@ function resolveParents(fs14, configDir, agents, report) {
     if (cached !== void 0) {
       return cached;
     }
-    const text = readFileOrReport(fs14, configDir, agent.located.transcriptPath, report) ?? "";
+    const text = readFileOrReport(fs15, configDir, agent.located.transcriptPath, report) ?? "";
     transcriptCache.set(agent.located.id, text);
     return text;
   };
@@ -21778,16 +22395,16 @@ function resolveParents(fs14, configDir, agents, report) {
 function ownTaskLists(sessionId) {
   return [sessionId, `${SHORT_SESSION_LIST_PREFIX}${sessionId.slice(0, SHORT_SESSION_ID_LENGTH)}`];
 }
-function readTasks(fs14, configDir, ownLists, sharedLists, report) {
+function readTasks(fs15, configDir, ownLists, sharedLists, report) {
   const tasks = [];
   [...ownLists, ...sharedLists].forEach((scope, index) => {
-    const relativeDir = import_node_path34.default.join(TASKS_DIR, scope);
-    for (const name of [...listDirOrReport(fs14, configDir, relativeDir, report)].sort()) {
+    const relativeDir = import_node_path36.default.join(TASKS_DIR, scope);
+    for (const name of [...listDirOrReport(fs15, configDir, relativeDir, report)].sort()) {
       if (name.startsWith(".") || !name.endsWith(JSON_SUFFIX)) {
         continue;
       }
-      const relative = import_node_path34.default.join(relativeDir, name);
-      const text = readFileOrReport(fs14, configDir, relative, report);
+      const relative = import_node_path36.default.join(relativeDir, name);
+      const text = readFileOrReport(fs15, configDir, relative, report);
       const parsed = TaskFileSchema.safeParse(text === void 0 ? void 0 : parseJson2(text));
       if (parsed.success) {
         tasks.push(index < ownLists.length ? parsed.data : { ...parsed.data, taskList: scope });
@@ -21798,14 +22415,14 @@ function readTasks(fs14, configDir, ownLists, sharedLists, report) {
   });
   return tasks;
 }
-function readWorkflowRuns(fs14, configDir, relativeDir, report) {
+function readWorkflowRuns(fs15, configDir, relativeDir, report) {
   const runs = [];
-  for (const name of [...listDirOrReport(fs14, configDir, relativeDir, report)].sort()) {
+  for (const name of [...listDirOrReport(fs15, configDir, relativeDir, report)].sort()) {
     if (!name.startsWith(WORKFLOW_RUN_PREFIX) || !name.endsWith(JSON_SUFFIX)) {
       continue;
     }
-    const relative = import_node_path34.default.join(relativeDir, name);
-    const text = readFileOrReport(fs14, configDir, relative, report);
+    const relative = import_node_path36.default.join(relativeDir, name);
+    const text = readFileOrReport(fs15, configDir, relative, report);
     const parsed = WorkflowRunFileSchema.safeParse(text === void 0 ? void 0 : parseJson2(text));
     if (!parsed.success) {
       if (text !== void 0) {
@@ -21820,7 +22437,7 @@ function readWorkflowRuns(fs14, configDir, relativeDir, report) {
 }
 
 // src/agents/sessions.ts
-var import_node_path35 = __toESM(require("node:path"), 1);
+var import_node_path37 = __toESM(require("node:path"), 1);
 init_cliError();
 var SessionLookupError = class extends CliError {
   constructor(message) {
@@ -21829,13 +22446,13 @@ var SessionLookupError = class extends CliError {
   }
 };
 function identityConfigDir(identitiesDir, identity) {
-  return import_node_path35.default.join(identitiesDir, identity);
+  return import_node_path37.default.join(identitiesDir, identity);
 }
-function historyStores(fs14, identitiesDir, identities) {
+function historyStores(fs15, identitiesDir, identities) {
   const byRealPath = /* @__PURE__ */ new Map();
   for (const identity of identities) {
     const configDir = identityConfigDir(identitiesDir, identity);
-    const real = fs14.realpath(import_node_path35.default.join(configDir, "projects"));
+    const real = fs15.realpath(import_node_path37.default.join(configDir, "projects"));
     if (real === void 0) {
       continue;
     }
@@ -21848,15 +22465,15 @@ function historyStores(fs14, identitiesDir, identities) {
   }
   return [...byRealPath.values()];
 }
-function collectSessionList(fs14, identitiesDir, identities, filters) {
+function collectSessionList(fs15, identitiesDir, identities, filters) {
   const names = filters.identity === void 0 ? identities : identities.filter((name) => name === filters.identity);
   if (filters.identity !== void 0 && names.length === 0) {
     throw new SessionLookupError(`no identity named "${filters.identity}"`);
   }
   const sessions = [];
-  for (const store of historyStores(fs14, identitiesDir, names)) {
-    for (const ref of listSessions2(fs14, store.configDir)) {
-      const summary = summariseSession(fs14, store.configDir, ref);
+  for (const store of historyStores(fs15, identitiesDir, names)) {
+    for (const ref of listSessions2(fs15, store.configDir)) {
+      const summary = summariseSession(fs15, store.configDir, ref);
       if (filters.all === true || summary.agentCount > 0 || summary.workflowRunCount > 0) {
         sessions.push({ ...summary, identities: store.identities });
       }
@@ -21864,14 +22481,14 @@ function collectSessionList(fs14, identitiesDir, identities, filters) {
   }
   return sessions.sort((left, right) => (right.updatedAt ?? "").localeCompare(left.updatedAt ?? "") || left.sessionId.localeCompare(right.sessionId));
 }
-function locateSession(fs14, identitiesDir, identities, query, onlyIdentity) {
+function locateSession(fs15, identitiesDir, identities, query, onlyIdentity) {
   const names = onlyIdentity === void 0 ? identities : identities.filter((name) => name === onlyIdentity);
   if (onlyIdentity !== void 0 && names.length === 0) {
     throw new SessionLookupError(`no identity named "${onlyIdentity}"`);
   }
   const matches = [];
-  for (const store of historyStores(fs14, identitiesDir, names)) {
-    for (const ref of listSessions2(fs14, store.configDir)) {
+  for (const store of historyStores(fs15, identitiesDir, names)) {
+    for (const ref of listSessions2(fs15, store.configDir)) {
       if (ref.sessionId.startsWith(query)) {
         matches.push({ identities: store.identities, configDir: store.configDir, ref });
       }
@@ -21888,19 +22505,19 @@ function locateSession(fs14, identitiesDir, identities, query, onlyIdentity) {
   }
   throw new SessionLookupError(`"${query}" matches ${String(candidates.length)} sessions: ${candidates.map((match) => `${match.ref.sessionId} (${match.identities.join(", ")})`).join("; ")}; give more of the id or pass --identity`);
 }
-function showSession(fs14, identitiesDir, identities, query, onlyIdentity) {
-  const located = locateSession(fs14, identitiesDir, identities, query, onlyIdentity);
-  return { identities: located.identities, tree: readSessionAgentTree(fs14, located.configDir, located.ref) };
+function showSession(fs15, identitiesDir, identities, query, onlyIdentity) {
+  const located = locateSession(fs15, identitiesDir, identities, query, onlyIdentity);
+  return { identities: located.identities, tree: readSessionAgentTree(fs15, located.configDir, located.ref) };
 }
 
 // src/agents/realFs.ts
-var import_node_fs11 = __toESM(require("node:fs"), 1);
+var import_node_fs12 = __toESM(require("node:fs"), 1);
 init_realPorts();
 var realSessionFs = {
   ...realFarmFs,
   realpath: (candidate) => {
     try {
-      return import_node_fs11.default.realpathSync(candidate);
+      return import_node_fs12.default.realpathSync(candidate);
     } catch {
       return void 0;
     }
@@ -22046,6 +22663,7 @@ init_ownCli();
   CodexRateLimitsReadSchema,
   CodexSignInSchema,
   CodexStatusOutputSchema,
+  ConfigIdentityAddInputSchema,
   ConfigIdentityAddOutputSchema,
   ConfigIdentityRemoveInputSchema,
   ConfigIdentityRemoveOutputSchema,