agent-shim 7.2.0 → 7.3.0

package/dist/cli.cjs

@@ -61051,7 +61051,7 @@ function resolveLaunchIdentity(paths, cwd) {
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "7.2.0",
+  version: "7.3.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -64432,6 +64432,10 @@ function redactBody(chunk) {
     return redactText(text2);
   }
 }
+var CAPTURE_ENV = "AGENT_SHIM_FRONTDOOR_CAPTURE";
+function captureFromEnv(env, logsDir) {
+  return env[CAPTURE_ENV] === "1" ? createFileCapture(path28.join(logsDir, "frontdoor-capture.jsonl")) : void 0;
+}
 function createFileCapture(file2, now = () => /* @__PURE__ */ new Date()) {
   fs11.mkdirSync(path28.dirname(file2), { recursive: true });
   let nextId = 0;
@@ -66957,7 +66961,7 @@ function realFrontDoorSupervisorPorts(paths) {
     },
     startConnectListener: async (preferredPort) => {
       const leafFor = createLeafCache(loadCa(), () => /* @__PURE__ */ new Date());
-      const capture = process.env.AGENT_SHIM_FRONTDOOR_CAPTURE === "1" ? createFileCapture(import_node_path29.default.join(paths.logsDir, "frontdoor-capture.jsonl")) : void 0;
+      const capture = captureFromEnv(process.env, paths.logsDir);
       if (capture !== void 0) {
         log(`capture enabled, recording CONNECT targets and piped exchanges to ${import_node_path29.default.join(paths.logsDir, "frontdoor-capture.jsonl")}`);
       }

package/dist/types/frontdoor/capture.d.ts

@@ -38,6 +38,10 @@ export declare function redactHeaders(headers: Readonly<IncomingHttpHeaders>): I
  * Redacts one body excerpt for the capture file. A body that parses as JSON is redacted structurally (key-named credentials go even when their shape matches no pattern); anything else gets the substring patterns, which still catch the bearer and JWT forms an OAuth refresh or a Remote Control frame carries. Invalid UTF-8 decodes with replacement characters, which is fine: the excerpt exists to be read, not to be re-encoded.
  */
 export declare function redactBody(chunk: Readonly<Buffer>): string;
+/**
+ * The capture the door runs with, or undefined when the environment did not ask for one. Anything but `1` means off, the same exact-value vocabulary the other `AGENT_SHIM_*` diagnostics use, so a stray value never silently records traffic.
+ */
+export declare function captureFromEnv(env: NodeJS.ProcessEnv, logsDir: string): ConnectCapture | undefined;
 /**
  * Builds the file-backed capture: one JSON object per line, appended to `file` (conventionally `logs/frontdoor-capture.jsonl`), never read back by the door itself. The directory is created up front rather than per record, so a capture started against a fresh state root cannot race its own first append.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "7.2.0",
+  "version": "7.3.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",