agent-shim 8.12.0 → 8.14.0

package/dist/cli.cjs

@@ -61710,7 +61710,7 @@ function registerIdentityCommand(program2, deps) {
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.12.0",
+  version: "8.14.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -71793,31 +71793,54 @@ function credentialOfJson(parsed) {
     anthropicClientPlatform: typeof anthropicClientPlatform === "string" ? anthropicClientPlatform : void 0
   };
 }
+function sequenceNumOfJson(value2) {
+  return typeof value2 === "number" && Number.isInteger(value2) && value2 >= 0 ? value2 : void 0;
+}
 function createRcCredentialStore(fs19, dir) {
   fs19.mkdirPrivate(dir);
   const fileFor = (sessionId) => import_node_path32.default.join(dir, `${sessionId}.json`);
+  const readParsed = (sessionId) => {
+    const raw = fs19.readFileUtf8(fileFor(sessionId));
+    if (raw === void 0) {
+      return void 0;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return void 0;
+    }
+    return isRecord4(parsed) ? parsed : void 0;
+  };
   return {
     read: (sessionId) => {
       if (!isSafeSessionId(sessionId)) {
         return void 0;
       }
-      const raw = fs19.readFileUtf8(fileFor(sessionId));
-      if (raw === void 0) {
-        return void 0;
+      return credentialOfJson(readParsed(sessionId));
+    },
+    write: (sessionId, credential) => {
+      if (!isSafeSessionId(sessionId)) {
+        return;
       }
-      let parsed;
-      try {
-        parsed = JSON.parse(raw);
-      } catch {
+      const cursor3 = sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
+      const record2 = { ...credential, ...cursor3 === void 0 ? {} : { highestSequenceNum: cursor3 } };
+      fs19.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record2, null, 2)}
+`);
+    },
+    readCursor: (sessionId) => {
+      if (!isSafeSessionId(sessionId)) {
         return void 0;
       }
-      return credentialOfJson(parsed);
+      return sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
     },
-    write: (sessionId, credential) => {
+    writeCursor: (sessionId, highestSequenceNum) => {
       if (!isSafeSessionId(sessionId)) {
         return;
       }
-      fs19.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(credential, null, 2)}
+      const credential = credentialOfJson(readParsed(sessionId));
+      const record2 = credential === void 0 ? { highestSequenceNum } : { ...credential, highestSequenceNum };
+      fs19.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record2, null, 2)}
 `);
     },
     remove: (sessionId) => {
@@ -72643,6 +72666,18 @@ function createRcEventFanout() {
 }
 function createRcStreamHub(deps) {
   const attachments = /* @__PURE__ */ new Map();
+  const lastSavedSequenceNums = /* @__PURE__ */ new Map();
+  const persistCursor = (sessionId) => {
+    if (deps.saveSequenceNum === void 0) {
+      return;
+    }
+    const cursor3 = deps.sequenceNumOf(sessionId);
+    if (cursor3 === void 0 || cursor3 === lastSavedSequenceNums.get(sessionId)) {
+      return;
+    }
+    deps.saveSequenceNum(sessionId, cursor3);
+    lastSavedSequenceNums.set(sessionId, cursor3);
+  };
   const birth = (sessionId) => {
     const controller = new AbortController();
     let stopped = false;
@@ -72679,7 +72714,7 @@ function createRcStreamHub(deps) {
     if (!isSuccessful3(presence.status)) {
       throw new Error(`the presence call answered HTTP ${String(presence.status)}: ${presence.body}`);
     }
-    const cursor3 = deps.sequenceNumOf(attachment.sessionId);
+    const cursor3 = deps.sequenceNumOf(attachment.sessionId) ?? deps.storedSequenceNumOf?.(attachment.sessionId);
     const resume = cursor3 === void 0 ? void 0 : { fromSequenceNum: cursor3 };
     const answer = await deps.dial.openStream(attachment.sessionId, headers, resume, attachment.controller.signal);
     if (answer.status === HTTP_STATUS.unauthorized) {
@@ -72713,6 +72748,7 @@ function createRcStreamHub(deps) {
       const credential = deps.credentialOf(attachment.sessionId);
       if (!live || credential?.authorization === void 0) {
         deps.log?.(`rc stream ${attachment.sessionId}: the attachment ended (${live ? "the session's client credential is no longer known" : "the tracker gave up on the session"})`);
+        persistCursor(attachment.sessionId);
         if (attachments.get(attachment.sessionId) === attachment) {
           attachments.delete(attachment.sessionId);
         }
@@ -72722,6 +72758,7 @@ function createRcStreamHub(deps) {
       try {
         outcome = await attempt(attachment, credential);
       } catch (error62) {
+        persistCursor(attachment.sessionId);
         if (attachment.isStopped()) {
           return;
         }
@@ -72734,6 +72771,7 @@ function createRcStreamHub(deps) {
         return;
       }
       if (outcome === "dropped") {
+        persistCursor(attachment.sessionId);
         deps.log?.(`rc stream ${attachment.sessionId}: the stream ended of its own accord, reconnecting`);
         retriedUnauthorized = false;
         continue;
@@ -72772,6 +72810,7 @@ function createRcStreamHub(deps) {
     },
     close: () => {
       for (const attachment of attachments.values()) {
+        persistCursor(attachment.sessionId);
         attachment.stop();
       }
       attachments.clear();
@@ -73107,7 +73146,8 @@ function realFrontDoorSupervisorPorts(paths) {
     credentialRecord: () => readRcSelfHostRecord(realFarmFs, paths.frontdoorDir),
     log
   }) : void 0;
-  const rcTracker = createRcSessionTracker({ now: () => Date.now(), idleMs: RC_IDLE_EXPIRY_MS, credentialStore: createRcCredentialStore(realFarmFs, paths.frontdoorRcCredentialsDir) });
+  const rcCredentialStore = createRcCredentialStore(realFarmFs, paths.frontdoorRcCredentialsDir);
+  const rcTracker = createRcSessionTracker({ now: () => Date.now(), idleMs: RC_IDLE_EXPIRY_MS, credentialStore: rcCredentialStore });
   const rcFanout = createRcEventFanout();
   const rcHub = createRcStreamHub({
     now: () => Date.now(),
@@ -73115,6 +73155,8 @@ function realFrontDoorSupervisorPorts(paths) {
     trackedSessions: () => rcTracker.list().map((session) => session.id),
     fileStreamEvent: rcTracker.fileStreamEvent,
     sequenceNumOf: rcTracker.sequenceNumOf,
+    storedSequenceNumOf: rcCredentialStore.readCursor,
+    saveSequenceNum: rcCredentialStore.writeCursor,
     dial: rcSelfHost ? lateRcStreamDial(rcSelfHostDialTarget) : realRcStreamDial(),
     fanout: rcFanout,
     newClientId: import_node_crypto12.randomUUID,

package/dist/index.cjs

@@ -203,6 +203,7 @@ __export(index_exports, {
   runCheck: () => runCheck,
   runDoctor: () => runDoctor,
   runFrontDoorSupervisor: () => runFrontDoorSupervisor,
+  runLauncher: () => runLauncher,
   runSupervisor: () => runSupervisor,
   servedByPipeline: () => servedByPipeline,
   setAllowAmbientCredential: () => setAllowAmbientCredential,
@@ -217,6 +218,7 @@ __export(index_exports, {
   setRcSessionModel: () => setRcSessionModel,
   setRcSessionPermissionMode: () => setRcSessionPermissionMode,
   snapshotPath: () => snapshotPath,
+  spawnClaude: () => spawnClaude,
   startConnectServer: () => startConnectServer,
   topLevelNames: () => topLevelNames,
   updateDirectoryRule: () => updateDirectoryRule,
@@ -4939,31 +4941,54 @@ function credentialOfJson(parsed) {
     anthropicClientPlatform: typeof anthropicClientPlatform === "string" ? anthropicClientPlatform : void 0
   };
 }
+function sequenceNumOfJson(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : void 0;
+}
 function createRcCredentialStore(fs12, dir) {
   fs12.mkdirPrivate(dir);
   const fileFor = (sessionId) => import_node_path9.default.join(dir, `${sessionId}.json`);
+  const readParsed = (sessionId) => {
+    const raw = fs12.readFileUtf8(fileFor(sessionId));
+    if (raw === void 0) {
+      return void 0;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return void 0;
+    }
+    return isRecord3(parsed) ? parsed : void 0;
+  };
   return {
     read: (sessionId) => {
       if (!isSafeSessionId(sessionId)) {
         return void 0;
       }
-      const raw = fs12.readFileUtf8(fileFor(sessionId));
-      if (raw === void 0) {
-        return void 0;
+      return credentialOfJson(readParsed(sessionId));
+    },
+    write: (sessionId, credential) => {
+      if (!isSafeSessionId(sessionId)) {
+        return;
       }
-      let parsed;
-      try {
-        parsed = JSON.parse(raw);
-      } catch {
+      const cursor = sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
+      const record = { ...credential, ...cursor === void 0 ? {} : { highestSequenceNum: cursor } };
+      fs12.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record, null, 2)}
+`);
+    },
+    readCursor: (sessionId) => {
+      if (!isSafeSessionId(sessionId)) {
         return void 0;
       }
-      return credentialOfJson(parsed);
+      return sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
     },
-    write: (sessionId, credential) => {
+    writeCursor: (sessionId, highestSequenceNum) => {
       if (!isSafeSessionId(sessionId)) {
         return;
       }
-      fs12.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(credential, null, 2)}
+      const credential = credentialOfJson(readParsed(sessionId));
+      const record = credential === void 0 ? { highestSequenceNum } : { ...credential, highestSequenceNum };
+      fs12.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record, null, 2)}
 `);
     },
     remove: (sessionId) => {
@@ -5298,6 +5323,18 @@ function createRcEventFanout() {
 }
 function createRcStreamHub(deps) {
   const attachments = /* @__PURE__ */ new Map();
+  const lastSavedSequenceNums = /* @__PURE__ */ new Map();
+  const persistCursor = (sessionId) => {
+    if (deps.saveSequenceNum === void 0) {
+      return;
+    }
+    const cursor = deps.sequenceNumOf(sessionId);
+    if (cursor === void 0 || cursor === lastSavedSequenceNums.get(sessionId)) {
+      return;
+    }
+    deps.saveSequenceNum(sessionId, cursor);
+    lastSavedSequenceNums.set(sessionId, cursor);
+  };
   const birth = (sessionId) => {
     const controller = new AbortController();
     let stopped = false;
@@ -5334,7 +5371,7 @@ function createRcStreamHub(deps) {
     if (!isSuccessful3(presence.status)) {
       throw new Error(`the presence call answered HTTP ${String(presence.status)}: ${presence.body}`);
     }
-    const cursor = deps.sequenceNumOf(attachment.sessionId);
+    const cursor = deps.sequenceNumOf(attachment.sessionId) ?? deps.storedSequenceNumOf?.(attachment.sessionId);
     const resume = cursor === void 0 ? void 0 : { fromSequenceNum: cursor };
     const answer = await deps.dial.openStream(attachment.sessionId, headers, resume, attachment.controller.signal);
     if (answer.status === HTTP_STATUS.unauthorized) {
@@ -5368,6 +5405,7 @@ function createRcStreamHub(deps) {
       const credential = deps.credentialOf(attachment.sessionId);
       if (!live || credential?.authorization === void 0) {
         deps.log?.(`rc stream ${attachment.sessionId}: the attachment ended (${live ? "the session's client credential is no longer known" : "the tracker gave up on the session"})`);
+        persistCursor(attachment.sessionId);
         if (attachments.get(attachment.sessionId) === attachment) {
           attachments.delete(attachment.sessionId);
         }
@@ -5377,6 +5415,7 @@ function createRcStreamHub(deps) {
       try {
         outcome = await attempt(attachment, credential);
       } catch (error) {
+        persistCursor(attachment.sessionId);
         if (attachment.isStopped()) {
           return;
         }
@@ -5389,6 +5428,7 @@ function createRcStreamHub(deps) {
         return;
       }
       if (outcome === "dropped") {
+        persistCursor(attachment.sessionId);
         deps.log?.(`rc stream ${attachment.sessionId}: the stream ended of its own accord, reconnecting`);
         retriedUnauthorized = false;
         continue;
@@ -5427,6 +5467,7 @@ function createRcStreamHub(deps) {
     },
     close: () => {
       for (const attachment of attachments.values()) {
+        persistCursor(attachment.sessionId);
         attachment.stop();
       }
       attachments.clear();
@@ -10642,6 +10683,29 @@ function splitExtraFlags(value) {
   return trimmed.split(/\s+/);
 }
 
+// src/launcher/spawn.ts
+var import_node_os5 = __toESM(require("node:os"), 1);
+var SIGNAL_EXIT_CODE_OFFSET = 128;
+function exitCodeFor(result) {
+  if (result.status !== null) {
+    return result.status;
+  }
+  if (result.signal !== null) {
+    return SIGNAL_EXIT_CODE_OFFSET + import_node_os5.default.constants.signals[result.signal];
+  }
+  return 1;
+}
+function spawnClaude(params) {
+  const result = params.spawn.spawnSync(params.bin, params.args, { stdio: "inherit", env: params.env });
+  if (result.error !== void 0) {
+    throw result.error;
+  }
+  if (params.beforeExit !== void 0) {
+    params.beforeExit();
+  }
+  return params.proc.exit(exitCodeFor(result));
+}
+
 // src/launcher.ts
 function resolveIdentityCredential(identity, credential, env, port) {
   if (port === void 0) {
@@ -10918,9 +10982,17 @@ function prepareLaunch(params) {
   };
   return { bin: discovered.path, args: finalArgv, env: finalEnv, release };
 }
+function runLauncher(params) {
+  const plan = prepareLaunch(params);
+  try {
+    spawnClaude({ bin: plan.bin, args: plan.args, env: plan.env, spawn: params.spawn, proc: params.proc, beforeExit: plan.release });
+  } finally {
+    plan.release();
+  }
+}
 
 // src/launchWiring.ts
-var import_node_os5 = __toESM(require("node:os"), 1);
+var import_node_os6 = __toESM(require("node:os"), 1);
 var import_node_crypto12 = require("node:crypto");
 
 // src/frontdoor/realFrontDoorPort.ts
@@ -11069,7 +11141,7 @@ function realFrontDoorPort(paths, spawnDaemon) {
 
 // src/launchWiring.ts
 function buildFarmRuntime(paths, cwd) {
-  const home = import_node_os5.default.homedir();
+  const home = import_node_os6.default.homedir();
   const read = cosmiconfigReader();
   const classification = loadClassification(paths);
   const loaded = loadCascadeInput({ paths, home, cwd, read });
@@ -11330,6 +11402,7 @@ function prepareClaudeLaunch(options) {
   runCheck,
   runDoctor,
   runFrontDoorSupervisor,
+  runLauncher,
   runSupervisor,
   servedByPipeline,
   setAllowAmbientCredential,
@@ -11344,6 +11417,7 @@ function prepareClaudeLaunch(options) {
   setRcSessionModel,
   setRcSessionPermissionMode,
   snapshotPath,
+  spawnClaude,
   startConnectServer,
   topLevelNames,
   updateDirectoryRule,

package/dist/index.mjs

@@ -4711,31 +4711,54 @@ function credentialOfJson(parsed) {
     anthropicClientPlatform: typeof anthropicClientPlatform === "string" ? anthropicClientPlatform : void 0
   };
 }
+function sequenceNumOfJson(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : void 0;
+}
 function createRcCredentialStore(fs12, dir) {
   fs12.mkdirPrivate(dir);
   const fileFor = (sessionId) => path9.join(dir, `${sessionId}.json`);
+  const readParsed = (sessionId) => {
+    const raw = fs12.readFileUtf8(fileFor(sessionId));
+    if (raw === void 0) {
+      return void 0;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return void 0;
+    }
+    return isRecord3(parsed) ? parsed : void 0;
+  };
   return {
     read: (sessionId) => {
       if (!isSafeSessionId(sessionId)) {
         return void 0;
       }
-      const raw = fs12.readFileUtf8(fileFor(sessionId));
-      if (raw === void 0) {
-        return void 0;
+      return credentialOfJson(readParsed(sessionId));
+    },
+    write: (sessionId, credential) => {
+      if (!isSafeSessionId(sessionId)) {
+        return;
       }
-      let parsed;
-      try {
-        parsed = JSON.parse(raw);
-      } catch {
+      const cursor = sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
+      const record = { ...credential, ...cursor === void 0 ? {} : { highestSequenceNum: cursor } };
+      fs12.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record, null, 2)}
+`);
+    },
+    readCursor: (sessionId) => {
+      if (!isSafeSessionId(sessionId)) {
         return void 0;
       }
-      return credentialOfJson(parsed);
+      return sequenceNumOfJson(readParsed(sessionId)?.highestSequenceNum);
     },
-    write: (sessionId, credential) => {
+    writeCursor: (sessionId, highestSequenceNum) => {
       if (!isSafeSessionId(sessionId)) {
         return;
       }
-      fs12.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(credential, null, 2)}
+      const credential = credentialOfJson(readParsed(sessionId));
+      const record = credential === void 0 ? { highestSequenceNum } : { ...credential, highestSequenceNum };
+      fs12.writeFilePrivate(fileFor(sessionId), `${JSON.stringify(record, null, 2)}
 `);
     },
     remove: (sessionId) => {
@@ -5070,6 +5093,18 @@ function createRcEventFanout() {
 }
 function createRcStreamHub(deps) {
   const attachments = /* @__PURE__ */ new Map();
+  const lastSavedSequenceNums = /* @__PURE__ */ new Map();
+  const persistCursor = (sessionId) => {
+    if (deps.saveSequenceNum === void 0) {
+      return;
+    }
+    const cursor = deps.sequenceNumOf(sessionId);
+    if (cursor === void 0 || cursor === lastSavedSequenceNums.get(sessionId)) {
+      return;
+    }
+    deps.saveSequenceNum(sessionId, cursor);
+    lastSavedSequenceNums.set(sessionId, cursor);
+  };
   const birth = (sessionId) => {
     const controller = new AbortController();
     let stopped = false;
@@ -5106,7 +5141,7 @@ function createRcStreamHub(deps) {
     if (!isSuccessful3(presence.status)) {
       throw new Error(`the presence call answered HTTP ${String(presence.status)}: ${presence.body}`);
     }
-    const cursor = deps.sequenceNumOf(attachment.sessionId);
+    const cursor = deps.sequenceNumOf(attachment.sessionId) ?? deps.storedSequenceNumOf?.(attachment.sessionId);
     const resume = cursor === void 0 ? void 0 : { fromSequenceNum: cursor };
     const answer = await deps.dial.openStream(attachment.sessionId, headers, resume, attachment.controller.signal);
     if (answer.status === HTTP_STATUS.unauthorized) {
@@ -5140,6 +5175,7 @@ function createRcStreamHub(deps) {
       const credential = deps.credentialOf(attachment.sessionId);
       if (!live || credential?.authorization === void 0) {
         deps.log?.(`rc stream ${attachment.sessionId}: the attachment ended (${live ? "the session's client credential is no longer known" : "the tracker gave up on the session"})`);
+        persistCursor(attachment.sessionId);
         if (attachments.get(attachment.sessionId) === attachment) {
           attachments.delete(attachment.sessionId);
         }
@@ -5149,6 +5185,7 @@ function createRcStreamHub(deps) {
       try {
         outcome = await attempt(attachment, credential);
       } catch (error) {
+        persistCursor(attachment.sessionId);
         if (attachment.isStopped()) {
           return;
         }
@@ -5161,6 +5198,7 @@ function createRcStreamHub(deps) {
         return;
       }
       if (outcome === "dropped") {
+        persistCursor(attachment.sessionId);
         deps.log?.(`rc stream ${attachment.sessionId}: the stream ended of its own accord, reconnecting`);
         retriedUnauthorized = false;
         continue;
@@ -5199,6 +5237,7 @@ function createRcStreamHub(deps) {
     },
     close: () => {
       for (const attachment of attachments.values()) {
+        persistCursor(attachment.sessionId);
         attachment.stop();
       }
       attachments.clear();
@@ -10414,6 +10453,29 @@ function splitExtraFlags(value) {
   return trimmed.split(/\s+/);
 }
 
+// src/launcher/spawn.ts
+import os6 from "node:os";
+var SIGNAL_EXIT_CODE_OFFSET = 128;
+function exitCodeFor(result) {
+  if (result.status !== null) {
+    return result.status;
+  }
+  if (result.signal !== null) {
+    return SIGNAL_EXIT_CODE_OFFSET + os6.constants.signals[result.signal];
+  }
+  return 1;
+}
+function spawnClaude(params) {
+  const result = params.spawn.spawnSync(params.bin, params.args, { stdio: "inherit", env: params.env });
+  if (result.error !== void 0) {
+    throw result.error;
+  }
+  if (params.beforeExit !== void 0) {
+    params.beforeExit();
+  }
+  return params.proc.exit(exitCodeFor(result));
+}
+
 // src/launcher.ts
 function resolveIdentityCredential(identity, credential, env, port) {
   if (port === void 0) {
@@ -10690,9 +10752,17 @@ function prepareLaunch(params) {
   };
   return { bin: discovered.path, args: finalArgv, env: finalEnv, release };
 }
+function runLauncher(params) {
+  const plan = prepareLaunch(params);
+  try {
+    spawnClaude({ bin: plan.bin, args: plan.args, env: plan.env, spawn: params.spawn, proc: params.proc, beforeExit: plan.release });
+  } finally {
+    plan.release();
+  }
+}
 
 // src/launchWiring.ts
-import os6 from "node:os";
+import os7 from "node:os";
 import { randomUUID as randomUUID5 } from "node:crypto";
 
 // src/frontdoor/realFrontDoorPort.ts
@@ -10841,7 +10911,7 @@ function realFrontDoorPort(paths, spawnDaemon) {
 
 // src/launchWiring.ts
 function buildFarmRuntime(paths, cwd) {
-  const home = os6.homedir();
+  const home = os7.homedir();
   const read = cosmiconfigReader();
   const classification = loadClassification(paths);
   const loaded = loadCascadeInput({ paths, home, cwd, read });
@@ -11101,6 +11171,7 @@ export {
   runCheck,
   runDoctor,
   runFrontDoorSupervisor,
+  runLauncher,
   runSupervisor,
   servedByPipeline,
   setAllowAmbientCredential,
@@ -11115,6 +11186,7 @@ export {
   setRcSessionModel,
   setRcSessionPermissionMode,
   snapshotPath,
+  spawnClaude,
   startConnectServer,
   topLevelNames,
   updateDirectoryRule,

package/dist/types/index.d.ts

@@ -1149,6 +1149,22 @@ interface FarmFs {
     /** A stable content hash of one file, or undefined when it is missing or is not a regular file. Used only to recognise farm data that has already been adopted into the canonical tree. */
     readonly hashFile: (path: string) => string | undefined;
 }
+/** The outcome of one `spawnSync` call, mirroring Node's own `SpawnSyncReturns` shape narrowly to what the launcher actually reads. */
+interface SpawnResult {
+    /** The child's exit code, or null when it was terminated by a signal instead of exiting normally. */
+    readonly status: number | null;
+    /** The signal that terminated the child, or null when it exited normally. */
+    readonly signal: NodeJS.Signals | null;
+    /** Set when the child process could not even be spawned (e.g. the binary does not exist). */
+    readonly error?: Error;
+}
+/** Runs the real `claude` binary synchronously, injected so no test ever spawns a real process. The Node equivalent of the legacy bash tool's `exec` is `spawnSync` with `stdio: "inherit"` followed by propagating the child's own exit code — see `src/launcher/spawn.ts`. */
+interface SpawnPort {
+    readonly spawnSync: (command: string, args: readonly string[], options: {
+        readonly stdio: "inherit";
+        readonly env: Readonly<Record<string, string | undefined>>;
+    }) => SpawnResult;
+}
 /** The outcome of one synchronous external-command run (distinct from `SpawnPort`, which is specifically for replacing this process with the real `claude` binary — `RunPort` is for auxiliary commands like `git rev-parse` for branch detection, or `security find-generic-password` for the macOS Keychain diagnostic in `check.ts`, whose output this process needs to keep running and read). */
 interface RunResult {
     readonly status: number | null;
@@ -1632,18 +1648,22 @@ declare function realConnectCertStore(paths: {
 }): ConnectCertStore;
 
 /**
- * The persisted half of the tracker's client credential: the OAuth-kind bearer and protocol headers a Remote Control session's client-half calls were last observed with, written per session id so a later door generation can still attach to a session whose create crossed an earlier one.
+ * The persisted half of the tracker's client credential and of its sequence cursor: the OAuth-kind bearer and protocol headers a Remote Control session's client-half calls were last observed with, and the highest sequence number the door's stream attachment had confirmed when its last attachment boundary passed, written per session id so a later door generation can still attach to a session whose create crossed an earlier one and resume its read stream from where the last generation left off.
  *
- * The tracker holds the credential in memory only, and the worker's recurring calls carry the worker JWT rather than the OAuth bearer, so a door that starts after the session's create (an idle shutdown and restart, a release upgrade, a reboot) would never learn it: nothing the door can observe re-states it until some client-half call happens to cross. Since the session outlives any one door process, the credential must outlive the process too. It is the same secret the identity's own store already holds on the same machine, so persisting it adds a second copy inside the same trust boundary, at the same owner-only protection: one JSON file per session, mode 0600, under the door's own front-door directory.
+ * The tracker holds both in memory only, and the worker's recurring calls carry the worker JWT rather than the OAuth bearer, so a door that starts after the session's create (an idle shutdown and restart, a release upgrade, a reboot) would never learn the credential: nothing the door can observe re-states it until some client-half call happens to cross. Since the session outlives any one door process, the credential must outlive the process too, and so must the cursor, or every restarted generation would re-read the stream from its head. The credential is the same secret the identity's own store already holds on the same machine, so persisting it adds a second copy inside the same trust boundary, at the same owner-only protection: one JSON file per session, mode 0600, under the door's own front-door directory, with the cursor (no secret, but the same file and the same lifecycle) beside it. The native client does exactly this: its `bridge-session` transcript entry carries `lastSequenceNum` beside the session id.
  *
- * A file is removed when the tracker observes the session closing (the conflict header, or an accepted archive). Nothing else removes it: the tracker's idle sweep is not a close (a quiet session is not a dead one, and a resumed session must re-attach), and the credential's own expiry is the protocol's to judge, as a 401 on the dial the hub already retries and backs off from. A session that ends without an observable close leaves its file behind, overwritten only if the same id is ever observed again.
+ * Each half is written at its own boundaries (the credential whenever an OAuth-kind bearer is observed, the cursor when the stream hub's attachment reaches a boundary), so each write preserves the other half, and neither is written per stream event. A file is removed when the tracker observes the session closing (the conflict header, or an accepted archive). Nothing else removes it: the tracker's idle sweep is not a close (a quiet session is not a dead one, and a resumed session must re-attach), and the credential's own expiry is the protocol's to judge, as a 401 on the dial the hub already retries and backs off from. A session that ends without an observable close leaves its file behind, overwritten only if the same id is ever observed again.
  */
 interface RcCredentialStore {
     /** The session's last observed client credential, or undefined when none was ever persisted for it (or what was persisted does not parse). */
     readonly read: (sessionId: string) => RcObservedCredential | undefined;
-    /** Persists the session's client credential, replacing whatever was held for it. */
+    /** Persists the session's client credential, replacing whatever was held for it and keeping the session's persisted cursor. */
     readonly write: (sessionId: string, credential: RcObservedCredential) => void;
-    /** Forgets the session's persisted credential, succeeding silently when none was held. */
+    /** The session's persisted sequence cursor, or undefined when none was ever persisted for it (or what was persisted is not a usable number). */
+    readonly readCursor: (sessionId: string) => number | undefined;
+    /** Persists the session's sequence cursor, keeping whatever credential the same file holds. */
+    readonly writeCursor: (sessionId: string, highestSequenceNum: number) => void;
+    /** Forgets the session's persisted record, credential and cursor together, succeeding silently when none was held. */
     readonly remove: (sessionId: string) => void;
 }
 /** Creates the credential store over one directory: one owner-only JSON file per session id. */
@@ -2045,6 +2065,10 @@ interface RcStreamHubDeps {
     readonly fileStreamEvent: (sessionId: string, event: RcStreamEnvelope) => void;
     /** Reads the session's sequence cursor: the highest number the door has seen, from the stream or from its own confirmed writes. */
     readonly sequenceNumOf: (sessionId: string) => number | undefined;
+    /** Reads the session's persisted sequence cursor, consulted only when the tracker's in-memory cursor is undefined at attach time (a door generation that started after the session's traffic, the same fresh-generation case the persisted credential solves for attaching at all), so that generation's first stream resumes where the last one left off instead of at the stream's head. */
+    readonly storedSequenceNumOf?: (sessionId: string) => number | undefined;
+    /** Persists the session's sequence cursor at an attachment boundary (a stream drop, a failed attempt, the attachment's end), never per stream event: the native client persists its own cursor at bridge-session boundaries, and so does this. */
+    readonly saveSequenceNum?: (sessionId: string, sequenceNum: number) => void;
     readonly dial: RcStreamDial;
     readonly fanout: RcEventFanout;
     /** Mints the stable client id one session's attachment announces: a v4 UUID or better in production. Stable means it survives reconnects, so the host sees one client, not a new one per drop. */
@@ -3886,6 +3910,10 @@ interface PrepareLaunchParams {
     /** True when the user was asked on a terminal whether to create the selected configuration profile and chose to launch without it. Without that explicit choice, a selected profile with no file is refused rather than silently skipped. */
     readonly allowMissingConfigProfile?: boolean;
 }
+/** Inputs to `runLauncher`: a launch's inputs plus the port that spawns the child. */
+interface RunLauncherParams extends PrepareLaunchParams {
+    readonly spawn: SpawnPort;
+}
 /**
  * What one launch resolved to, once every effect its child depends on is in place (the identity's farm resynced, the front door and headroom up and this launch registered with them): the real binary, its arguments and its environment.
  */
@@ -3906,6 +3934,32 @@ interface LaunchPlan {
  * The farm resync is skipped when `CLAUDE_CONFIG_DIR` was already set (the escape hatch means the user has named a configuration directory explicitly, and agent-shim manages neither its contents nor its lifetime) and when no identity resolved at all (a bare launch against plain `~/.claude`, matching the legacy tool's own behaviour). In both cases there is no agent-shim-managed farm for a resync to act on.
  */
 declare function prepareLaunch(params: PrepareLaunchParams): LaunchPlan;
+/**
+ * Runs one `claude` launch: `prepareLaunch`, then the child under `params.spawn`, whose exit code becomes this process's.
+ *
+ * The session registrations are released twice by design: `beforeExit` covers the real success path (where `process.exit` never unwinds a `finally`), and the `finally` below covers a thrown spawn error, where it does.
+ */
+declare function runLauncher(params: RunLauncherParams): void;
+
+/** Inputs to `spawnClaude`. */
+interface SpawnClaudeParams {
+    /** Full path to the real `claude` binary to run, as discovered by `src/versionDiscovery.ts`. */
+    readonly bin: string;
+    readonly args: readonly string[];
+    readonly env: Readonly<Record<string, string | undefined>>;
+    readonly spawn: SpawnPort;
+    readonly proc: ProcPort;
+    /**
+     * Runs immediately before the child's exit code propagates. The real `process.exit` never unwinds a `finally` block, so a caller with cleanup to do on the success path (releasing a headroom session registration, say) cannot rely on one; it passes the cleanup here instead.
+     */
+    readonly beforeExit?: () => void;
+}
+/**
+ * Runs the real `claude` binary and propagates its exit code faithfully, the Node equivalent of the legacy bash tool's `exec` (process replacement): `spawnSync(bin, args, { stdio: "inherit" })` followed by `process.exit(status)`.
+ *
+ * Throws when the child could not even be spawned (e.g. `bin` does not exist) rather than silently exiting — a spawn failure is a real problem, not a clean exit code to propagate.
+ */
+declare function spawnClaude(params: SpawnClaudeParams): never;
 
 /** Raised by `prepareClaudeLaunch` when the launch is refused: no identity, a missing profile, an ambient credential, an unresolvable credential and the like. `message` is what the launcher logged; `exitCode` is the status the command line would have exited with. */
 declare class LaunchRefusedError extends CliError {
@@ -3932,5 +3986,5 @@ interface PrepareClaudeLaunchOptions {
  */
 declare function prepareClaudeLaunch(options: PrepareClaudeLaunchOptions): LaunchPlan;
 
-export { AMBIENT_CREDENTIAL_VARS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CliError, ConfigProfileSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, EXIT_FAILURE, EXIT_USAGE, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorStartError, GlobalConfigSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LaunchRefusedError, LegacyProviderFileError, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, ROUTED_PATH_PREFIX, RcPermissionModeSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, UsageError, UsageSnapshotError, UsageSnapshotSchema, WhenSchema, addDirectoryRule, addIdentity, addPool, addProvider, answerRcControlRequest, buildEntryFacts, buildLayoutPaths, buildRcControlResponsePayload, buildRcEventWriteBody, buildRcInterruptPayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectPoolPick, createLeafCache, createProfile, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, effectiveWindow, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, forwardableHeaders, frontDoorRcApiClient, frontDoorRcControl, generateCa, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isRcPermissionMode, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcObserverAsPassthrough, rcSelfHostFromEnv, readActiveIdentity, readDirectoryRules, readFarmManifest, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readUsageSnapshot, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, recoverFarm, recoveryDiagnostics, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveDecisions, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runDoctor, runFrontDoorSupervisor, runSupervisor, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, startConnectServer, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, writeDirectoryRules };
-export type { AddDirectoryRuleOptions, AddProviderInput, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorRcControl, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchPlan, Layer, LayerId, LayoutPaths, LeafCert, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWorkerFact, RcWriteHeaders, RecoverFarmParams, RecoveryResult, ResolveDecisionsInput, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunDoctorParams, RunFrontDoorSupervisorOptions, RunSupervisorOptions, SseParsedEvent, StickyPick, SupervisorPorts, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation };
+export { AMBIENT_CREDENTIAL_VARS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CliError, ConfigProfileSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, EXIT_FAILURE, EXIT_USAGE, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorStartError, GlobalConfigSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LaunchRefusedError, LegacyProviderFileError, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, ROUTED_PATH_PREFIX, RcPermissionModeSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, UsageError, UsageSnapshotError, UsageSnapshotSchema, WhenSchema, addDirectoryRule, addIdentity, addPool, addProvider, answerRcControlRequest, buildEntryFacts, buildLayoutPaths, buildRcControlResponsePayload, buildRcEventWriteBody, buildRcInterruptPayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectPoolPick, createLeafCache, createProfile, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, effectiveWindow, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, forwardableHeaders, frontDoorRcApiClient, frontDoorRcControl, generateCa, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isRcPermissionMode, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcObserverAsPassthrough, rcSelfHostFromEnv, readActiveIdentity, readDirectoryRules, readFarmManifest, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readUsageSnapshot, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, recoverFarm, recoveryDiagnostics, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveDecisions, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runDoctor, runFrontDoorSupervisor, runLauncher, runSupervisor, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, writeDirectoryRules };
+export type { AddDirectoryRuleOptions, AddProviderInput, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorRcControl, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchPlan, Layer, LayerId, LayoutPaths, LeafCert, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWorkerFact, RcWriteHeaders, RecoverFarmParams, RecoveryResult, ResolveDecisionsInput, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "8.12.0",
+  "version": "8.14.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",