agent-shim 11.83.3 → 11.83.4

package/README.md

@@ -79,138 +79,13 @@ The full mechanics, including the credential block, the merge algorithm, conditi
 
 ## CLI reference
 
-```
-agent-shim <noun> <verb> [name] [options]      # nouns: identity, profile, pool, provider, rule, job
-
-agent-shim identity add <name> [--keep-keychain-login] [--json]   # on macOS refused while the Keychain holds a Claude Code login filed for the directory (left by a renamed or removed identity of that name); --keep-keychain-login creates the identity signed in as that account on purpose, sharing the login with any identity that holds it
-agent-shim identity list [--json]
-agent-shim identity show <name> [--json]
-agent-shim identity set <name> [--label <text> | --no-label] [--default-profile <profile> | --no-default-profile] [--provider <provider> | --no-provider] [--[no-]allow-ambient-credential] [--json]
-agent-shim identity set <name> [--credential <source>]... [--credential-target <bearer|apiKey|oauthToken>] [--no-credential] [--json]
-agent-shim identity set <name> [--anchor <days>@<HH:MM>[/<zone>]]... [--no-anchor] [--json]
-agent-shim identity remove <name> [--yes] [--json]
-agent-shim identity rename <old> <new> [--dry-run | --discard-journal] [--json]   # move the directory, carry the login across (a macOS login too large for one `security -i` line is refused with nothing changed) and rewrite every reference to the name; refused while a session is running or starting on the identity, one left unfinished is finished by running it again, and --discard-journal removes the record of one whose identity is under neither name or under both, or under the old name alone with no step recorded as begun or done
-agent-shim identity use <name> [--json]
-agent-shim @<name>                          # shorthand for `identity use <name>`
-agent-shim identity resolve-conflicts <name>  # interactively resolve a retained superseded farm's conflicts
-
-agent-shim profile add [name] [--extends <profile>]... [--description <text>]   # interactive with no options on a terminal [--json]
-agent-shim profile set <name> [--category <category>=<bool>]... [--entry <category>/<path>=<bool>]... [--json]
-agent-shim profile set <name> [--extends <profile>]... [--no-extends] [--description <text> | --no-description] [--json]
-agent-shim profile set <name> [--[no-]launch-skip-permissions] [--[no-]launch-remote-control] [--[no-]launch-headroom] [--[no-]launch-track-usage]
-agent-shim profile set <name> [--launch-claude-version <version> | --no-launch-claude-version] [--json] [--json]
-agent-shim profile set <name> [--launch-delay <duration> | --no-launch-delay] [--[no-]launch-pause] [--[no-]launch-explain] [--launch-proxy-bypass <host>... | --no-launch-proxy-bypass] [--json]
-agent-shim profile set <name> [--statusline <setting>=<value>]... [--unset-statusline <setting>]...
-agent-shim profile set <name> [--launch-provider <provider> | --no-launch-provider] [--json]
-agent-shim profile list [--json]
-agent-shim profile show <name> [--json]
-agent-shim profile remove <name> [--yes] [--json]
-agent-shim profile use <name>               # the global default configuration profile [--json]
-
-agent-shim job add <name> (--identity <name> | --pool <name>) (--at <spec>... | --before-reset <fiveHour|sevenDay> --lead <duration>) --prompt <text> --timeout <duration> [--cwd <dir>] [--model <model>] [--allowed-tool <tool>]... [--json]
-agent-shim job list|show|remove|run [name]
-
-agent-shim pool add <name> --identity <member>... [--preference <score|listed>] [--resume-on-limit] [--compact-before-limit] [--compact-at-utilisation <percent>] [--json]
-agent-shim pool set <name> [--identity <member>...] [--preference <score|listed> | --no-preference] [--resume-on-limit | --no-resume-on-limit] [--compact-before-limit | --no-compact-before-limit] [--compact-at-utilisation <percent> | --no-compact-at-utilisation] [--json]
-agent-shim pool list [--json]
-agent-shim pool show <name> [--json]
-agent-shim pool remove <name> [--yes] [--json]
-agent-shim pool use <name> [--json]
-agent-shim pool pick <name> [--json]
-
-agent-shim provider add <name> --display-name <name> (--base-url <url> | --kind codex) (--credential <source>)... [--credential-target <bearer|apiKey>] [--env KEY=VALUE]... [--json]
-                                              [--codex-default-model <model>] [--codex-model <tier=model>]... [--codex-effort <none|low|medium|high>] [--codex-login <codex-cli|chatgpt-sign-in>]
-agent-shim provider set <name> [--display-name <name>] ([--base-url <url>] | --kind codex) [--credential <source>]... [--credential-target <bearer|apiKey>] [--env KEY=VALUE]... [--unset-env KEY]... [--json]
-                                              [--codex-default-model <model>] [--codex-model <tier=model>]... [--codex-effort <none|low|medium|high>] [--codex-login <codex-cli|chatgpt-sign-in>]
-agent-shim provider add|set <name> [--picker-model <model=tier>]...   # models /model lists beside the tier models; set also takes [--unset-picker-model <model>]...
-agent-shim provider add|set <name> [--catalogue-tier <tier>] [--catalogue-include <glob>]... [--catalogue-exclude <glob>]... [--catalogue-url <url>]   # http providers: list the provider's own catalogue in /model; set also takes [--unset-catalogue]
-agent-shim provider models <name> [--refresh] [--json]   # the catalogue last fetched, and which of its models /model lists
-agent-shim provider list [--json]
-agent-shim provider show <name> [--json]
-agent-shim model match [--json]   # which model names are the same model across providers
-agent-shim model add <name> --mode <mode> --member <ref>...   # define a virtual model
-agent-shim model set <name> [--mode <mode>] [--member <ref>]...
-agent-shim model remove <name> [--yes]
-agent-shim model tier <tier> --ref <ref> | --clear
-agent-shim model price <ref> --input <usd> --output <usd> | --clear
-agent-shim model same <ref> <ref>...   # assert these refs are one model under several names
-agent-shim model distinct <left> <right>   # assert two alike names are two models
-agent-shim model unassert <ref>
-agent-shim model family <key> [--mode <mode>] [--name <ref>]... [--context <tokens>] [--[no-]vision|tools|thinking] | --clear
-agent-shim model list [--json]
-agent-shim model explain <name>   # which member the virtual model's mode picks now, and why
-agent-shim provider remove <name> [--yes] [--json]
-agent-shim provider rename <old> <new> [--json]   # the old name stays an alias, so sessions already running under it keep being served
-agent-shim provider unalias <alias> [--json]   # forget a former name once no session launched under it is running
-
-agent-shim rule add <path> [--config-profile <profile>] [--identity <identity>] [--json]
-agent-shim rule set <path> [--config-profile <profile> | --no-config-profile] [--identity <identity> | --no-identity] [--json]
-agent-shim rule list [--json]
-agent-shim rule show <path> [--json]
-agent-shim rule remove <path> [--yes] [--json]
-
-agent-shim configure [path] [--identity <identity>]
-agent-shim check [path] [--identity <identity>] [--json] [--strict]
-agent-shim doctor [--json]
-agent-shim headroom status [--json]
-agent-shim headroom enable|disable [--session <id>] [--now] [--json]   # which sessions go through headroom, live; applied at each session's next cache boundary unless --now
-agent-shim codex status [--json]
-agent-shim codex login [--no-open] [--json]       # Sign in with ChatGPT, for providers with `codex.login: chatgpt-sign-in`
-agent-shim codex logout [--json]
-agent-shim frontdoor status [--json]        # also probes the serving door's two listeners and reports whether each accepted
-agent-shim frontdoor restart [--json]        # replace the serving door in place; running sessions reach it on their next request
-agent-shim frontdoor rc list [--json]
-agent-shim frontdoor rc status [<cse_id>] [--json]
-agent-shim frontdoor rc pending [<cse_id>] [--json]
-agent-shim frontdoor rc send --session <cse_id> --text <text> [--json]
-agent-shim frontdoor rc answer --session <cse_id> --request <id> --approve | --deny [--text <text>] [--json]
-agent-shim frontdoor rc interrupt --session <cse_id> [--json]
-agent-shim frontdoor rc set-model --session <cse_id> --model <model> [--json]
-agent-shim frontdoor rc set-permission-mode --session <cse_id> --mode <mode> [--json]
-agent-shim frontdoor rc end-session --session <cse_id> [--reason <text>] [--json]
-agent-shim frontdoor rc get-usage --session <cse_id> [--skip-behaviors] [--json]
-agent-shim frontdoor rc get-context-usage --session <cse_id> [--detail <summary|full>] [--json]
-agent-shim frontdoor rc read-file --session <cse_id> --path <path> [--max-bytes <n>] [--encoding <utf-8|base64>] [--json]
-agent-shim frontdoor rc file-suggestions --session <cse_id> --query <prefix> [--json]
-agent-shim frontdoor rc keep-alive --session <cse_id> [--json]
-agent-shim frontdoor rc mcp-status --session <cse_id> [--json]
-agent-shim frontdoor rc mcp-reconnect --session <cse_id> --server <name> [--json]
-agent-shim frontdoor rc mcp-authenticate --session <cse_id> --server <name> --redirect-uri <uri> [--json]
-agent-shim frontdoor rc mcp-oauth-callback-url --session <cse_id> --server <name> --callback-url <url> [--json]
-agent-shim frontdoor rc watch [<cse_id>] [--json]
-agent-shim frontdoor rc selfhost mint <identity> [--force] [--json]
-agent-shim statusline keys [--json]          # every statusline setting with its kind, default (if it has one) and meaning
-agent-shim statusline                          # serve as a statusline entrypoint: enrich the client's stdin payload with the identity's live provider, account and usage windows, then delegate to $AGENT_SHIM_STATUSLINE_CMD or render the built-in line
-agent-shim usage [--identity <name>] [--provider <name>] [--since <duration>] [--refresh] [--json]
-agent-shim session list [--identity <name>] [--all] [--json]   # sessions that spawned agents or ran workflows, from the transcripts on disk
-agent-shim session show <session> [--identity <name>] [--json]   # one session's subagents, forks, workflow agents, tasks and workflow runs
-agent-shim account show [<identity>] [--refresh] [--json]
-agent-shim mcp [--allow-writes] [--allow-remote-control] [--allow-history]      # serve the door's typed API as MCP tools on stdio; read-only without the flags
-agent-shim mcp permissions show [--json]               # what the stored file allows
-agent-shim mcp permissions allow|deny <writes|remote-control|history>   # change it; a running server follows on its next request, with no restart
-agent-shim update [--check] [--restart-door] [--mode <off|notify|auto>] [--json]
-agent-shim completion <bash|zsh|fish>
-agent-shim shim enable [--dir <path>] [--force]
-agent-shim shim disable [--dir <path>] [--force]
-
-agent-shim run [@<identity>] [launch flags] [claude arguments]
-  # launch flags, recognised only before a `--` terminator:
-  #   --identity <name>  --config-profile <name>  --provider <name> | --no-provider
-  #   --category <category>=<bool>  --share <category>/<path>  --hide <category>/<path>   (each repeatable)
-  #   --[no-]skip-permissions  --[no-]remote-control  --[no-]headroom  --[no-]track-usage  --[no-]wait
-  #   --claude-version <version>   run exactly this installed Claude Code version
-  #   --delay <duration>   wait this long after the launcher's own output before starting claude; --[no-]pause waits for a key press instead
-  #   --[no-]explain   with @pool:<name>, list every member the pick ranked and why, not only the one picked
-  #   --[no-]pick   on a terminal, ask which identity to run as, even when one resolved (--no-pick never asks); a launch also asks by itself when no identity resolves, a pool pick would change account or organisation, or the identity is refused right now
-  #   --native   run the real claude with nothing from agent-shim applied; cannot be combined with the flags above
-claude @<identity> ...                      # the same, once `agent-shim shim enable` has run
-```
+Every command is `agent-shim <noun> <verb> [name] [options]`, over the nouns `identity`, `profile`, `pool`, `provider`, `model`, `rule` and `job`, plus the top-level `run`, `configure`, `check`, `doctor`, `usage`, `update` and the others; `claude @<identity>` is the same as `agent-shim run @<identity>` once `agent-shim shim enable` has run. The full list of commands with every flag is in [docs/cli-reference.md](docs/cli-reference.md#full-command-list), and `agent-shim --help` and `agent-shim <noun> --help` print it from the installed version.
 
 Every `list`, `show`, `check`, `doctor` and `headroom status` prints text by default and JSON with `--json`, and so do the mutating commands (`add`, `set`, `remove` and `use` on identities, profiles, providers, pools and rules), which print one object naming the `action`, the `kind`, the `name` and, for a creation or update, the stored `value`. `identity rename` prints its report of what it moved and rewrote as the `value`, with the `action` `planned` under `--dry-run`. Prompts appear only when standard input is a terminal; without one, a command that needs input fails with the option that supplies it (a `remove` needs `--yes`). Failures print as `agent-shim: <message>` and exit 1, usage errors exit 2, a selected provider or identity whose credential block yields no token exits 64, and `AGENT_SHIM_DEBUG=1` adds stack traces to unexpected errors. `agent-shim completion <bash|zsh|fish>` prints a shell completion script.
 
 `agent-shim check [path]` resolves the full cascade for a directory without touching the farm, and is the primary way to answer "why is X shared or hidden here". `agent-shim doctor` audits the whole `~/.agent-shim` config graph at once: every identity, profile, `extends` chain, provider (naming the exact replacement for a file still in the format before the credential block) and directory rule, plus whether the right `agent-shim` is the one actually on `PATH`.
 
-The full per-setting flag and environment-variable table (global, one-off, and directory-scoped forms of every setting), and the file-precedence rules `configure` uses when writing a toggle, are in [docs/cli-reference.md](docs/cli-reference.md).
+The per-setting flag and environment-variable table (global, one-off, and directory-scoped forms of every setting) and the file-precedence rules `configure` uses when writing a toggle are in the same [docs/cli-reference.md](docs/cli-reference.md).
 
 ## Architecture
 

package/dist/cli.cjs

@@ -39981,7 +39981,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "11.83.3",
+      version: "11.83.4",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",

package/dist/index.cjs

@@ -4848,7 +4848,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "11.83.3",
+      version: "11.83.4",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",

package/dist/index.mjs

@@ -4824,7 +4824,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "11.83.3",
+      version: "11.83.4",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "11.83.3",
+  "version": "11.83.4",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",