agent-shim 8.29.0 → 8.31.0

package/dist/cli.cjs

@@ -61796,7 +61796,7 @@ function registerIdentityCommand(program2, deps) {
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.29.0",
+  version: "8.31.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -63150,6 +63150,7 @@ function createUsageStore(deps) {
     fs20.mkdirPrivate(paths.usageSnapshotsDir);
     fs20.writeFilePrivate(snapshotPath(paths.usageSnapshotsDir, identity), `${JSON.stringify(snapshot, null, 2)}
 `);
+    deps.publish?.(snapshot);
     return true;
   };
   return {
@@ -65682,6 +65683,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   try {
     http8 = await ports.startProviderListener(lastPort);
   } catch (error62) {
+    ports.doorHealth.listenerFailed("provider", error62 instanceof Error ? error62.message : String(error62));
     return fail(`could not start the provider listener: ${error62 instanceof Error ? error62.message : String(error62)}`);
   }
   if (previousSticky !== void 0 && http8.port !== previousSticky) {
@@ -65694,6 +65696,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
     connect3 = await ports.startConnectListener(lastConnectPort);
   } catch (error62) {
     await http8.close();
+    ports.doorHealth.listenerFailed("connect", error62 instanceof Error ? error62.message : String(error62));
     return fail(`could not start the CONNECT surface: ${error62 instanceof Error ? error62.message : String(error62)}`);
   }
   if (previousStickyConnect !== void 0 && connect3.port !== previousStickyConnect) {
@@ -65707,6 +65710,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   } catch (error62) {
     await connect3.close();
     await http8.close();
+    ports.doorHealth.listenerFailed("direct", error62 instanceof Error ? error62.message : String(error62));
     return fail(`could not start the direct listener: ${error62 instanceof Error ? error62.message : String(error62)}`);
   }
   if (previousStickyDirect !== void 0 && direct.port !== previousStickyDirect) {
@@ -65714,6 +65718,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   }
   lastDirectPort = direct.port;
   writeFrontDoorState(fs20, paths.frontdoorStateFile, { protocol: FRONT_DOOR_PROTOCOL, supervisorPid: ports.ownPid, port: http8.port, connectPort: connect3.port, directPort: direct.port, ...sticky() });
+  ports.doorHealth.generation({ providerPort: http8.port, connectPort: connect3.port, directPort: direct.port });
   fs20.removeRecursive(paths.frontdoorLockFile);
   ports.log(`agent-shim frontdoor supervisor ${String(ports.ownPid)}: front door on 127.0.0.1:${String(http8.port)}, CONNECT surface on 127.0.0.1:${String(connect3.port)}`);
   let idleSince;
@@ -65726,11 +65731,13 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
     const listed = listFrontDoorSessions(fs20, paths.frontdoorSessionsDir);
     const pruned = pruneDeadFrontDoorSessions(fs20, paths.frontdoorSessionsDir, ports.isRunning);
     ports.observeLaunchRegistry(listed, pruned);
+    ports.checkQuotaExpiry();
     const prunedPids = new Set(pruned);
     if (listed.filter((session) => !prunedPids.has(session.pid)).length === 0) {
       idleSince ??= ports.now();
       if (ports.now() - idleSince >= idleShutdownMinutes * MS_PER_MINUTE2) {
         ports.log(`agent-shim frontdoor supervisor: no sessions for ${String(idleShutdownMinutes)} minute(s); closing the front door and exiting`);
+        ports.doorHealth.idleShutdown();
         await direct.close();
         await connect3.close();
         await http8.close();
@@ -69906,6 +69913,10 @@ var CheckRunInputSchema = external_exports.strictObject({
   path: external_exports.string().min(1),
   identity: external_exports.string().min(1).optional()
 }).refine((input2) => import_node_path33.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+var PoolPickInputSchema = external_exports.strictObject({
+  pool: external_exports.string().min(1),
+  path: external_exports.string().min(1)
+}).refine((input2) => import_node_path33.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var DoctorFindingSchema = external_exports.strictObject({
   section: external_exports.enum(DOCTOR_SECTIONS),
   subject: external_exports.string().optional(),
@@ -73906,6 +73917,9 @@ function frontDoorRcApiClient(port, ca, token) {
 // src/frontdoor/eventSchemas.ts
 var DOOR_EVENT_SOURCE_RC = "rc";
 var LAUNCH_EVENT_SOURCE = "launch";
+var USAGE_EVENT_SOURCE = "usage";
+var DOOR_HEALTH_EVENT_SOURCE = "door";
+var QUOTA_EXPIRING_EVENT_SOURCE = "quota-expiring";
 var DoorEventSchema = external_exports.strictObject({
   source: external_exports.string().min(1),
   /** A positive integer because the backbone's counters start at one and only ever increase. */
@@ -73921,6 +73935,20 @@ var LaunchLifecycleEventSchema = external_exports.strictObject({
   startedAt: external_exports.number(),
   observedAt: external_exports.number()
 });
+var DoorHealthEventSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("generation"), pid: external_exports.number().int().positive(), providerPort: external_exports.number().int().positive(), connectPort: external_exports.number().int().positive(), directPort: external_exports.number().int().positive(), observedAt: external_exports.number() }),
+  external_exports.strictObject({ kind: external_exports.literal("listenerFailed"), pid: external_exports.number().int().positive(), listener: external_exports.enum(["provider", "connect", "direct"]), message: external_exports.string(), observedAt: external_exports.number() }),
+  external_exports.strictObject({ kind: external_exports.literal("idleShutdown"), pid: external_exports.number().int().positive(), observedAt: external_exports.number() })
+]);
+var QuotaExpiringEventSchema = external_exports.strictObject({
+  identity: external_exports.string().min(1),
+  provider: external_exports.string().min(1),
+  window: external_exports.enum(["fiveHour", "sevenDay"]),
+  /** The fraction of the window already used when it was seen expiring, always below one because a fully used window has nothing left to spend. */
+  utilization: external_exports.number().min(0).max(1),
+  resetsAt: external_exports.iso.datetime(),
+  observedAt: external_exports.number()
+});
 
 // src/frontdoor/eventsApi.ts
 var EVENTS_API_TAG = "events";
@@ -73965,6 +73993,7 @@ var USAGE_API_TAG = "usage";
 var FRONTDOOR_API_TAG = "frontdoor";
 var CHECK_API_TAG = "check";
 var DOCTOR_API_TAG = "doctor";
+var POOL_API_TAG = "pool";
 function createControlApiRouter(deps) {
   const authed = doorApiAuth(deps.expectedToken);
   return {
@@ -74008,6 +74037,18 @@ function createControlApiRouter(deps) {
     },
     doctor: {
       run: authed.route({ method: "GET", path: "/rest/doctor", summary: "Run the doctor report", tags: [DOCTOR_API_TAG] }).output(DoctorRunOutputSchema).handler(() => deps.doctorReport())
+    },
+    pool: {
+      pick: authed.route({ method: "GET", path: "/rest/pool/pick", summary: "Rank one pool exactly as a launch from a directory would right now", tags: [POOL_API_TAG] }).input(PoolPickInputSchema).output(PoolPickReportSchema).handler(({ input: input2 }) => {
+        const report = deps.poolPick(input2.pool, input2.path);
+        if (report === void 0) {
+          const live = deps.poolNames();
+          throw new ORPCError("NOT_FOUND", {
+            message: live.length === 0 ? `no pools are configured, so none is named ${input2.pool}` : `no pool is named ${input2.pool}; the live pools are ${live.map((name) => `"${name}"`).join(", ")}`
+          });
+        }
+        return report;
+      })
     }
   };
 }
@@ -74018,6 +74059,22 @@ function createDoorApiNodeHandler(deps) {
   return doorApiNodeHandlerOf(createDoorApiRouter(deps), deps.expectedToken);
 }
 
+// src/frontdoor/doorHealthEvents.ts
+function createDoorHealthPublisher(hub, now, pid) {
+  const publisher = hub.publisher(DOOR_HEALTH_EVENT_SOURCE);
+  return {
+    generation: (ports) => {
+      publisher.publish({ kind: "generation", pid, providerPort: ports.providerPort, connectPort: ports.connectPort, directPort: ports.directPort, observedAt: now() });
+    },
+    listenerFailed: (listener, message) => {
+      publisher.publish({ kind: "listenerFailed", pid, listener, message, observedAt: now() });
+    },
+    idleShutdown: () => {
+      publisher.publish({ kind: "idleShutdown", pid, observedAt: now() });
+    }
+  };
+}
+
 // src/frontdoor/eventHub.ts
 var DOOR_EVENT_BUFFER_EVENTS = 100;
 function createDoorEventHub() {
@@ -74124,6 +74181,65 @@ function rcFanoutOnDoorHub(fanout, hub) {
   };
 }
 
+// src/frontdoor/quotaExpiringEvents.ts
+var MS_PER_HOUR2 = 36e5;
+var MS_PER_DAY2 = 864e5;
+var FIVE_HOUR_WINDOW_HOURS = 5;
+var SEVEN_DAY_WINDOW_DAYS = 7;
+var FIVE_HOUR_WINDOW_MS2 = FIVE_HOUR_WINDOW_HOURS * MS_PER_HOUR2;
+var SEVEN_DAY_WINDOW_MS2 = SEVEN_DAY_WINDOW_DAYS * MS_PER_DAY2;
+var FINAL_SPAN_DENOMINATOR = 30;
+var QUOTA_EXPIRING_WINDOW_FRACTION = 1 / FINAL_SPAN_DENOMINATOR;
+function createQuotaExpiringPublisher(hub, deps) {
+  const publisher = hub.publisher(QUOTA_EXPIRING_EVENT_SOURCE);
+  const latest = /* @__PURE__ */ new Map();
+  for (const snapshot of deps.seed) {
+    latest.set(snapshot.identity, snapshot);
+  }
+  hub.subscribe([USAGE_EVENT_SOURCE], (event) => {
+    const snapshot = UsageSnapshotSchema.parse(event.payload);
+    latest.set(snapshot.identity, snapshot);
+  });
+  const announced = /* @__PURE__ */ new Set();
+  const windowsOf = (snapshot) => {
+    const views = [];
+    for (const provider of Object.keys(snapshot.providers).sort()) {
+      const unified = snapshot.providers[provider]?.rateLimit?.unified;
+      const fiveHour = unified?.fiveHour;
+      if (fiveHour?.utilization !== void 0 && fiveHour.resetsAt !== void 0) {
+        views.push({ provider, view: { window: "fiveHour", spanMs: FIVE_HOUR_WINDOW_MS2, utilization: fiveHour.utilization, resetsAtMs: Date.parse(fiveHour.resetsAt) } });
+      }
+      const sevenDay = unified?.sevenDay;
+      if (sevenDay?.utilization !== void 0 && sevenDay.resetsAt !== void 0) {
+        views.push({ provider, view: { window: "sevenDay", spanMs: SEVEN_DAY_WINDOW_MS2, utilization: sevenDay.utilization, resetsAtMs: Date.parse(sevenDay.resetsAt) } });
+      }
+    }
+    return views;
+  };
+  return {
+    check: () => {
+      const now = deps.now();
+      for (const identity of [...latest.keys()].sort()) {
+        const snapshot = latest.get(identity);
+        if (snapshot === void 0) {
+          continue;
+        }
+        for (const { provider, view } of windowsOf(snapshot)) {
+          if (view.utilization >= 1 || view.resetsAtMs <= now || view.resetsAtMs - now >= view.spanMs * QUOTA_EXPIRING_WINDOW_FRACTION) {
+            continue;
+          }
+          const key = `${identity}:${provider}:${view.window}:${String(view.resetsAtMs)}`;
+          if (announced.has(key)) {
+            continue;
+          }
+          announced.add(key);
+          publisher.publish({ identity, provider, window: view.window, utilization: view.utilization, resetsAt: new Date(view.resetsAtMs).toISOString(), observedAt: now });
+        }
+      }
+    }
+  };
+}
+
 // src/frontdoor/launchEvents.ts
 function createLaunchEventPublisher(hub, now) {
   const publisher = hub.publisher(LAUNCH_EVENT_SOURCE);
@@ -78260,7 +78376,7 @@ var OPENROUTER_HOST = "openrouter.ai";
 var OPENROUTER_KEY_URL = `https://${OPENROUTER_HOST}/api/v1/key`;
 var OPENROUTER_CREDITS_URL = `https://${OPENROUTER_HOST}/api/v1/credits`;
 var HTTP_FORBIDDEN = 403;
-var MS_PER_DAY2 = HOURS_PER_DAY3 * SECONDS_PER_HOUR * MS_PER_SECOND10;
+var MS_PER_DAY3 = HOURS_PER_DAY3 * SECONDS_PER_HOUR * MS_PER_SECOND10;
 var OpenRouterKeySchema = external_exports.object({
   data: external_exports.object({
     limit: external_exports.number().nonnegative().nullable(),
@@ -78292,7 +78408,7 @@ async function openRouterGet(url2, schema, apiKey, http8, signal) {
   return parsed.data;
 }
 function nextUtcMidnight(nowMs) {
-  return new Date((Math.floor(nowMs / MS_PER_DAY2) + 1) * MS_PER_DAY2).toISOString();
+  return new Date((Math.floor(nowMs / MS_PER_DAY3) + 1) * MS_PER_DAY3).toISOString();
 }
 var openRouterQuotaAdapter = {
   source: OPENROUTER_SOURCE,
@@ -78314,7 +78430,7 @@ var openRouterQuotaAdapter = {
       windows.push({ measures: "account-credits", period: "prepaid", utilization: used / total, limit: total, used, remaining: Math.max(total - used, 0) });
     }
     if (free !== void 0 && free.limit > 0) {
-      windows.push({ measures: "free-model-requests", periodMs: MS_PER_DAY2, utilization: free.used / free.limit, resetsAt: nextUtcMidnight(nowMs), limit: free.limit, used: free.used, remaining: Math.max(free.remaining, 0) });
+      windows.push({ measures: "free-model-requests", periodMs: MS_PER_DAY3, utilization: free.used / free.limit, resetsAt: nextUtcMidnight(nowMs), limit: free.limit, used: free.used, remaining: Math.max(free.remaining, 0) });
     }
     return ProviderQuotaSchema.parse({
       observedAt: new Date(nowMs).toISOString(),
@@ -78503,6 +78619,9 @@ function realFrontDoorSupervisorPorts(paths) {
   const rcCredentialStore = createRcCredentialStore(realFarmFs, paths.frontdoorRcCredentialsDir);
   const rcTracker = createRcSessionTracker({ now: () => Date.now(), idleMs: RC_IDLE_EXPIRY_MS, credentialStore: rcCredentialStore });
   const doorEvents = createDoorEventHub();
+  const usagePublisher = doorEvents.publisher(USAGE_EVENT_SOURCE);
+  const quotaExpiring = createQuotaExpiringPublisher(doorEvents, { seed: listUsageSnapshots(realFarmFs, paths.usageSnapshotsDir), now: () => Date.now() });
+  const doorHealth = createDoorHealthPublisher(doorEvents, () => Date.now(), process.pid);
   const rcLiveUsage = createRcLiveUsage({ now: () => Date.now(), hub: doorEvents });
   const rcFanout = rcFanoutOnDoorHub(createRcEventFanout(), doorEvents);
   const rcHub = createRcStreamHub({
@@ -78548,7 +78667,10 @@ function realFrontDoorSupervisorPorts(paths) {
     pid: process.pid,
     now: () => Date.now(),
     readAccount: createAccountReader(realFarmFs, paths.identitiesDir),
-    log
+    log,
+    publish: (snapshot) => {
+      usagePublisher.publish(snapshot);
+    }
   });
   const quotaRefresher = createRealQuotaRefresher({ paths, store: usageStore, log });
   const usageMiddleware = createUsageMiddleware({
@@ -78614,7 +78736,13 @@ function realFrontDoorSupervisorPorts(paths) {
         now: () => Date.now(),
         frontDoorStatus: () => collectFrontDoorStatus(realFarmFs, realHeadroomSocketTrust, paths, realIsProcessRunning),
         checkReport: (target, identity) => collectCheckReport({ paths, cwd: target, ...identity === void 0 ? {} : { identity }, env: process.env }),
-        doctorReport: () => collectDoctorReport({ paths, env: process.env })
+        doctorReport: () => collectDoctorReport({ paths, env: process.env }),
+        // The pool table is read per call, not captured here, so a pool created or removed after the door started is ranked or refused by its live name the same moment the CLI would see it.
+        poolPick: (pool, directory) => {
+          const pools = readPools(paths);
+          return pools[pool] === void 0 ? void 0 : collectPoolPick({ paths, fs: realFsPort, usageFs: realFarmFs, poolName: pool, pools, directory, nowMs: Date.now() });
+        },
+        poolNames: () => Object.keys(readPools(paths)).sort()
       };
       realFarmFs.mkdirp(paths.frontdoorDir);
       realFarmFs.writeFilePrivate(paths.frontdoorControlTokenFile, `${rcControlToken}
@@ -78741,6 +78869,8 @@ function realFrontDoorSupervisorPorts(paths) {
     closeRcStreamHub: rcHub.close,
     // The launch lifecycle publisher over the same backbone the typed API serves: the tick's registry facts go in here, and the door's own register, prune and end moments come out as source-tagged events.
     observeLaunchRegistry: createLaunchEventPublisher(doorEvents, () => Date.now()).observe,
+    doorHealth,
+    checkQuotaExpiry: quotaExpiring.check,
     log: (line) => {
       appendLog(paths, line);
     }
@@ -80559,13 +80689,13 @@ function formatLimit(limit) {
   return `last limit: ${limit.kind} (${String(limit.status)}) at ${limit.observedAt}${limit.window === void 0 ? "" : ` on the ${limit.window} window`}${wait.length === 0 ? "" : `, ${wait.join(", ")}`}`;
 }
 var MONEY_DECIMALS = 2;
-var MS_PER_HOUR2 = 36e5;
+var MS_PER_HOUR3 = 36e5;
 var HOURS_PER_DAY4 = 24;
 function formatPeriod(window) {
   if (window.periodMs === void 0) {
     return window.period ?? "unknown period";
   }
-  const hours = window.periodMs / MS_PER_HOUR2;
+  const hours = window.periodMs / MS_PER_HOUR3;
   return hours >= HOURS_PER_DAY4 && Number.isInteger(hours / HOURS_PER_DAY4) ? `${String(hours / HOURS_PER_DAY4)}d` : `${String(hours)}h`;
 }
 function formatCount(value2) {

package/dist/index.cjs

@@ -48,6 +48,7 @@ __export(index_exports, {
   CredentialSourceSchema: () => CredentialSourceSchema,
   DOOR_EVENT_BUFFER_EVENTS: () => DOOR_EVENT_BUFFER_EVENTS,
   DOOR_EVENT_SOURCE_RC: () => DOOR_EVENT_SOURCE_RC,
+  DOOR_HEALTH_EVENT_SOURCE: () => DOOR_HEALTH_EVENT_SOURCE,
   DirectoryRuleAlreadyExistsError: () => DirectoryRuleAlreadyExistsError,
   DirectoryRuleMissingTargetError: () => DirectoryRuleMissingTargetError,
   DirectoryRuleNotFoundError: () => DirectoryRuleNotFoundError,
@@ -57,6 +58,7 @@ __export(index_exports, {
   DoctorRunOutputSchema: () => DoctorRunOutputSchema,
   DoorEventSchema: () => DoorEventSchema,
   DoorEventSourceQuerySchema: () => DoorEventSourceQuerySchema,
+  DoorHealthEventSchema: () => DoorHealthEventSchema,
   EXIT_FAILURE: () => EXIT_FAILURE,
   EXIT_USAGE: () => EXIT_USAGE,
   EffectiveWindowSchema: () => EffectiveWindowSchema,
@@ -93,6 +95,8 @@ __export(index_exports, {
   ProviderKindMismatchError: () => ProviderKindMismatchError,
   ProviderNotFoundError: () => ProviderNotFoundError,
   ProviderSchema: () => ProviderSchema,
+  QUOTA_EXPIRING_EVENT_SOURCE: () => QUOTA_EXPIRING_EVENT_SOURCE,
+  QuotaExpiringEventSchema: () => QuotaExpiringEventSchema,
   RC_CONTEXT_USAGE_DETAILS: () => RC_CONTEXT_USAGE_DETAILS,
   RC_IDLE_EXPIRY_MS: () => RC_IDLE_EXPIRY_MS,
   RC_ORPC_PATH_PREFIX: () => RC_ORPC_PATH_PREFIX,
@@ -120,6 +124,7 @@ __export(index_exports, {
   RcRateLimitWindowSchema: () => RcRateLimitWindowSchema,
   RcStreamEnvelopeSchema: () => RcStreamEnvelopeSchema,
   RcStreamEventSchema: () => RcStreamEventSchema,
+  USAGE_EVENT_SOURCE: () => USAGE_EVENT_SOURCE,
   UsageError: () => UsageError,
   UsageListOutputSchema: () => UsageListOutputSchema,
   UsageLiveOutputSchema: () => UsageLiveOutputSchema,
@@ -165,10 +170,12 @@ __export(index_exports, {
   createDoorApiNodeHandler: () => createDoorApiNodeHandler,
   createDoorApiRouter: () => createDoorApiRouter,
   createDoorEventHub: () => createDoorEventHub,
+  createDoorHealthPublisher: () => createDoorHealthPublisher,
   createEventsApiRouter: () => createEventsApiRouter,
   createLaunchEventPublisher: () => createLaunchEventPublisher,
   createLeafCache: () => createLeafCache,
   createProfile: () => createProfile,
+  createQuotaExpiringPublisher: () => createQuotaExpiringPublisher,
   createRcApiNodeHandler: () => createRcApiNodeHandler,
   createRcApiRouter: () => createRcApiRouter,
   createRcControlHandler: () => createRcControlHandler,
@@ -3034,6 +3041,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   try {
     http3 = await ports.startProviderListener(lastPort);
   } catch (error) {
+    ports.doorHealth.listenerFailed("provider", error instanceof Error ? error.message : String(error));
     return fail(`could not start the provider listener: ${error instanceof Error ? error.message : String(error)}`);
   }
   if (previousSticky !== void 0 && http3.port !== previousSticky) {
@@ -3046,6 +3054,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
     connect3 = await ports.startConnectListener(lastConnectPort);
   } catch (error) {
     await http3.close();
+    ports.doorHealth.listenerFailed("connect", error instanceof Error ? error.message : String(error));
     return fail(`could not start the CONNECT surface: ${error instanceof Error ? error.message : String(error)}`);
   }
   if (previousStickyConnect !== void 0 && connect3.port !== previousStickyConnect) {
@@ -3059,6 +3068,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   } catch (error) {
     await connect3.close();
     await http3.close();
+    ports.doorHealth.listenerFailed("direct", error instanceof Error ? error.message : String(error));
     return fail(`could not start the direct listener: ${error instanceof Error ? error.message : String(error)}`);
   }
   if (previousStickyDirect !== void 0 && direct.port !== previousStickyDirect) {
@@ -3066,6 +3076,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   }
   lastDirectPort = direct.port;
   writeFrontDoorState(fs12, paths.frontdoorStateFile, { protocol: FRONT_DOOR_PROTOCOL, supervisorPid: ports.ownPid, port: http3.port, connectPort: connect3.port, directPort: direct.port, ...sticky() });
+  ports.doorHealth.generation({ providerPort: http3.port, connectPort: connect3.port, directPort: direct.port });
   fs12.removeRecursive(paths.frontdoorLockFile);
   ports.log(`agent-shim frontdoor supervisor ${String(ports.ownPid)}: front door on 127.0.0.1:${String(http3.port)}, CONNECT surface on 127.0.0.1:${String(connect3.port)}`);
   let idleSince;
@@ -3078,11 +3089,13 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
     const listed = listFrontDoorSessions(fs12, paths.frontdoorSessionsDir);
     const pruned = pruneDeadFrontDoorSessions(fs12, paths.frontdoorSessionsDir, ports.isRunning);
     ports.observeLaunchRegistry(listed, pruned);
+    ports.checkQuotaExpiry();
     const prunedPids = new Set(pruned);
     if (listed.filter((session) => !prunedPids.has(session.pid)).length === 0) {
       idleSince ??= ports.now();
       if (ports.now() - idleSince >= idleShutdownMinutes * MS_PER_MINUTE) {
         ports.log(`agent-shim frontdoor supervisor: no sessions for ${String(idleShutdownMinutes)} minute(s); closing the front door and exiting`);
+        ports.doorHealth.idleShutdown();
         await direct.close();
         await connect3.close();
         await http3.close();
@@ -5342,7 +5355,7 @@ var import_undici = require("undici");
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.29.0",
+  version: "8.31.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -10180,6 +10193,10 @@ var CheckRunInputSchema = import_zod19.z.strictObject({
   path: import_zod19.z.string().min(1),
   identity: import_zod19.z.string().min(1).optional()
 }).refine((input) => import_node_path27.default.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+var PoolPickInputSchema = import_zod19.z.strictObject({
+  pool: import_zod19.z.string().min(1),
+  path: import_zod19.z.string().min(1)
+}).refine((input) => import_node_path27.default.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var DoctorFindingSchema = import_zod19.z.strictObject({
   section: import_zod19.z.enum(DOCTOR_SECTIONS),
   subject: import_zod19.z.string().optional(),
@@ -10200,6 +10217,9 @@ var import_server3 = require("@orpc/server");
 var import_zod20 = require("zod");
 var DOOR_EVENT_SOURCE_RC = "rc";
 var LAUNCH_EVENT_SOURCE = "launch";
+var USAGE_EVENT_SOURCE = "usage";
+var DOOR_HEALTH_EVENT_SOURCE = "door";
+var QUOTA_EXPIRING_EVENT_SOURCE = "quota-expiring";
 var DoorEventSchema = import_zod20.z.strictObject({
   source: import_zod20.z.string().min(1),
   /** A positive integer because the backbone's counters start at one and only ever increase. */
@@ -10215,6 +10235,20 @@ var LaunchLifecycleEventSchema = import_zod20.z.strictObject({
   startedAt: import_zod20.z.number(),
   observedAt: import_zod20.z.number()
 });
+var DoorHealthEventSchema = import_zod20.z.discriminatedUnion("kind", [
+  import_zod20.z.strictObject({ kind: import_zod20.z.literal("generation"), pid: import_zod20.z.number().int().positive(), providerPort: import_zod20.z.number().int().positive(), connectPort: import_zod20.z.number().int().positive(), directPort: import_zod20.z.number().int().positive(), observedAt: import_zod20.z.number() }),
+  import_zod20.z.strictObject({ kind: import_zod20.z.literal("listenerFailed"), pid: import_zod20.z.number().int().positive(), listener: import_zod20.z.enum(["provider", "connect", "direct"]), message: import_zod20.z.string(), observedAt: import_zod20.z.number() }),
+  import_zod20.z.strictObject({ kind: import_zod20.z.literal("idleShutdown"), pid: import_zod20.z.number().int().positive(), observedAt: import_zod20.z.number() })
+]);
+var QuotaExpiringEventSchema = import_zod20.z.strictObject({
+  identity: import_zod20.z.string().min(1),
+  provider: import_zod20.z.string().min(1),
+  window: import_zod20.z.enum(["fiveHour", "sevenDay"]),
+  /** The fraction of the window already used when it was seen expiring, always below one because a fully used window has nothing left to spend. */
+  utilization: import_zod20.z.number().min(0).max(1),
+  resetsAt: import_zod20.z.iso.datetime(),
+  observedAt: import_zod20.z.number()
+});
 
 // src/frontdoor/eventsApi.ts
 var EVENTS_API_TAG = "events";
@@ -10259,6 +10293,7 @@ var USAGE_API_TAG = "usage";
 var FRONTDOOR_API_TAG = "frontdoor";
 var CHECK_API_TAG = "check";
 var DOCTOR_API_TAG = "doctor";
+var POOL_API_TAG = "pool";
 function createControlApiRouter(deps) {
   const authed = doorApiAuth(deps.expectedToken);
   return {
@@ -10302,6 +10337,18 @@ function createControlApiRouter(deps) {
     },
     doctor: {
       run: authed.route({ method: "GET", path: "/rest/doctor", summary: "Run the doctor report", tags: [DOCTOR_API_TAG] }).output(DoctorRunOutputSchema).handler(() => deps.doctorReport())
+    },
+    pool: {
+      pick: authed.route({ method: "GET", path: "/rest/pool/pick", summary: "Rank one pool exactly as a launch from a directory would right now", tags: [POOL_API_TAG] }).input(PoolPickInputSchema).output(PoolPickReportSchema).handler(({ input }) => {
+        const report = deps.poolPick(input.pool, input.path);
+        if (report === void 0) {
+          const live = deps.poolNames();
+          throw new import_client3.ORPCError("NOT_FOUND", {
+            message: live.length === 0 ? `no pools are configured, so none is named ${input.pool}` : `no pool is named ${input.pool}; the live pools are ${live.map((name) => `"${name}"`).join(", ")}`
+          });
+        }
+        return report;
+      })
     }
   };
 }
@@ -10510,6 +10557,81 @@ function createLaunchEventPublisher(hub, now) {
   };
 }
 
+// src/frontdoor/doorHealthEvents.ts
+function createDoorHealthPublisher(hub, now, pid) {
+  const publisher = hub.publisher(DOOR_HEALTH_EVENT_SOURCE);
+  return {
+    generation: (ports) => {
+      publisher.publish({ kind: "generation", pid, providerPort: ports.providerPort, connectPort: ports.connectPort, directPort: ports.directPort, observedAt: now() });
+    },
+    listenerFailed: (listener, message) => {
+      publisher.publish({ kind: "listenerFailed", pid, listener, message, observedAt: now() });
+    },
+    idleShutdown: () => {
+      publisher.publish({ kind: "idleShutdown", pid, observedAt: now() });
+    }
+  };
+}
+
+// src/frontdoor/quotaExpiringEvents.ts
+var MS_PER_HOUR2 = 36e5;
+var MS_PER_DAY2 = 864e5;
+var FIVE_HOUR_WINDOW_HOURS = 5;
+var SEVEN_DAY_WINDOW_DAYS = 7;
+var FIVE_HOUR_WINDOW_MS2 = FIVE_HOUR_WINDOW_HOURS * MS_PER_HOUR2;
+var SEVEN_DAY_WINDOW_MS2 = SEVEN_DAY_WINDOW_DAYS * MS_PER_DAY2;
+var FINAL_SPAN_DENOMINATOR = 30;
+var QUOTA_EXPIRING_WINDOW_FRACTION = 1 / FINAL_SPAN_DENOMINATOR;
+function createQuotaExpiringPublisher(hub, deps) {
+  const publisher = hub.publisher(QUOTA_EXPIRING_EVENT_SOURCE);
+  const latest = /* @__PURE__ */ new Map();
+  for (const snapshot of deps.seed) {
+    latest.set(snapshot.identity, snapshot);
+  }
+  hub.subscribe([USAGE_EVENT_SOURCE], (event) => {
+    const snapshot = UsageSnapshotSchema.parse(event.payload);
+    latest.set(snapshot.identity, snapshot);
+  });
+  const announced = /* @__PURE__ */ new Set();
+  const windowsOf = (snapshot) => {
+    const views = [];
+    for (const provider of Object.keys(snapshot.providers).sort()) {
+      const unified = snapshot.providers[provider]?.rateLimit?.unified;
+      const fiveHour = unified?.fiveHour;
+      if (fiveHour?.utilization !== void 0 && fiveHour.resetsAt !== void 0) {
+        views.push({ provider, view: { window: "fiveHour", spanMs: FIVE_HOUR_WINDOW_MS2, utilization: fiveHour.utilization, resetsAtMs: Date.parse(fiveHour.resetsAt) } });
+      }
+      const sevenDay = unified?.sevenDay;
+      if (sevenDay?.utilization !== void 0 && sevenDay.resetsAt !== void 0) {
+        views.push({ provider, view: { window: "sevenDay", spanMs: SEVEN_DAY_WINDOW_MS2, utilization: sevenDay.utilization, resetsAtMs: Date.parse(sevenDay.resetsAt) } });
+      }
+    }
+    return views;
+  };
+  return {
+    check: () => {
+      const now = deps.now();
+      for (const identity of [...latest.keys()].sort()) {
+        const snapshot = latest.get(identity);
+        if (snapshot === void 0) {
+          continue;
+        }
+        for (const { provider, view } of windowsOf(snapshot)) {
+          if (view.utilization >= 1 || view.resetsAtMs <= now || view.resetsAtMs - now >= view.spanMs * QUOTA_EXPIRING_WINDOW_FRACTION) {
+            continue;
+          }
+          const key = `${identity}:${provider}:${view.window}:${String(view.resetsAtMs)}`;
+          if (announced.has(key)) {
+            continue;
+          }
+          announced.add(key);
+          publisher.publish({ identity, provider, window: view.window, utilization: view.utilization, resetsAt: new Date(view.resetsAtMs).toISOString(), observedAt: now });
+        }
+      }
+    }
+  };
+}
+
 // src/frontdoor/rcLiveUsage.ts
 var RC_RATE_LIMIT_EVENT_TYPE = "rate_limit_event";
 function isRecord5(value) {
@@ -13503,6 +13625,7 @@ function prepareClaudeLaunch(options) {
   CredentialSourceSchema,
   DOOR_EVENT_BUFFER_EVENTS,
   DOOR_EVENT_SOURCE_RC,
+  DOOR_HEALTH_EVENT_SOURCE,
   DirectoryRuleAlreadyExistsError,
   DirectoryRuleMissingTargetError,
   DirectoryRuleNotFoundError,
@@ -13512,6 +13635,7 @@ function prepareClaudeLaunch(options) {
   DoctorRunOutputSchema,
   DoorEventSchema,
   DoorEventSourceQuerySchema,
+  DoorHealthEventSchema,
   EXIT_FAILURE,
   EXIT_USAGE,
   EffectiveWindowSchema,
@@ -13548,6 +13672,8 @@ function prepareClaudeLaunch(options) {
   ProviderKindMismatchError,
   ProviderNotFoundError,
   ProviderSchema,
+  QUOTA_EXPIRING_EVENT_SOURCE,
+  QuotaExpiringEventSchema,
   RC_CONTEXT_USAGE_DETAILS,
   RC_IDLE_EXPIRY_MS,
   RC_ORPC_PATH_PREFIX,
@@ -13575,6 +13701,7 @@ function prepareClaudeLaunch(options) {
   RcRateLimitWindowSchema,
   RcStreamEnvelopeSchema,
   RcStreamEventSchema,
+  USAGE_EVENT_SOURCE,
   UsageError,
   UsageListOutputSchema,
   UsageLiveOutputSchema,
@@ -13620,10 +13747,12 @@ function prepareClaudeLaunch(options) {
   createDoorApiNodeHandler,
   createDoorApiRouter,
   createDoorEventHub,
+  createDoorHealthPublisher,
   createEventsApiRouter,
   createLaunchEventPublisher,
   createLeafCache,
   createProfile,
+  createQuotaExpiringPublisher,
   createRcApiNodeHandler,
   createRcApiRouter,
   createRcControlHandler,

package/dist/index.mjs

@@ -2729,6 +2729,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   try {
     http3 = await ports.startProviderListener(lastPort);
   } catch (error) {
+    ports.doorHealth.listenerFailed("provider", error instanceof Error ? error.message : String(error));
     return fail(`could not start the provider listener: ${error instanceof Error ? error.message : String(error)}`);
   }
   if (previousSticky !== void 0 && http3.port !== previousSticky) {
@@ -2741,6 +2742,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
     connect3 = await ports.startConnectListener(lastConnectPort);
   } catch (error) {
     await http3.close();
+    ports.doorHealth.listenerFailed("connect", error instanceof Error ? error.message : String(error));
     return fail(`could not start the CONNECT surface: ${error instanceof Error ? error.message : String(error)}`);
   }
   if (previousStickyConnect !== void 0 && connect3.port !== previousStickyConnect) {
@@ -2754,6 +2756,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   } catch (error) {
     await connect3.close();
     await http3.close();
+    ports.doorHealth.listenerFailed("direct", error instanceof Error ? error.message : String(error));
     return fail(`could not start the direct listener: ${error instanceof Error ? error.message : String(error)}`);
   }
   if (previousStickyDirect !== void 0 && direct.port !== previousStickyDirect) {
@@ -2761,6 +2764,7 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
   }
   lastDirectPort = direct.port;
   writeFrontDoorState(fs12, paths.frontdoorStateFile, { protocol: FRONT_DOOR_PROTOCOL, supervisorPid: ports.ownPid, port: http3.port, connectPort: connect3.port, directPort: direct.port, ...sticky() });
+  ports.doorHealth.generation({ providerPort: http3.port, connectPort: connect3.port, directPort: direct.port });
   fs12.removeRecursive(paths.frontdoorLockFile);
   ports.log(`agent-shim frontdoor supervisor ${String(ports.ownPid)}: front door on 127.0.0.1:${String(http3.port)}, CONNECT surface on 127.0.0.1:${String(connect3.port)}`);
   let idleSince;
@@ -2773,11 +2777,13 @@ async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {})
     const listed = listFrontDoorSessions(fs12, paths.frontdoorSessionsDir);
     const pruned = pruneDeadFrontDoorSessions(fs12, paths.frontdoorSessionsDir, ports.isRunning);
     ports.observeLaunchRegistry(listed, pruned);
+    ports.checkQuotaExpiry();
     const prunedPids = new Set(pruned);
     if (listed.filter((session) => !prunedPids.has(session.pid)).length === 0) {
       idleSince ??= ports.now();
       if (ports.now() - idleSince >= idleShutdownMinutes * MS_PER_MINUTE) {
         ports.log(`agent-shim frontdoor supervisor: no sessions for ${String(idleShutdownMinutes)} minute(s); closing the front door and exiting`);
+        ports.doorHealth.idleShutdown();
         await direct.close();
         await connect3.close();
         await http3.close();
@@ -5037,7 +5043,7 @@ import { Agent as Agent3, fetch as undiciFetch } from "undici";
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.29.0",
+  version: "8.31.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -9875,6 +9881,10 @@ var CheckRunInputSchema = z19.strictObject({
   path: z19.string().min(1),
   identity: z19.string().min(1).optional()
 }).refine((input) => path27.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+var PoolPickInputSchema = z19.strictObject({
+  pool: z19.string().min(1),
+  path: z19.string().min(1)
+}).refine((input) => path27.isAbsolute(input.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var DoctorFindingSchema = z19.strictObject({
   section: z19.enum(DOCTOR_SECTIONS),
   subject: z19.string().optional(),
@@ -9895,6 +9905,9 @@ import { eventIterator as eventIterator2, withEventMeta as withEventMeta2 } from
 import { z as z20 } from "zod";
 var DOOR_EVENT_SOURCE_RC = "rc";
 var LAUNCH_EVENT_SOURCE = "launch";
+var USAGE_EVENT_SOURCE = "usage";
+var DOOR_HEALTH_EVENT_SOURCE = "door";
+var QUOTA_EXPIRING_EVENT_SOURCE = "quota-expiring";
 var DoorEventSchema = z20.strictObject({
   source: z20.string().min(1),
   /** A positive integer because the backbone's counters start at one and only ever increase. */
@@ -9910,6 +9923,20 @@ var LaunchLifecycleEventSchema = z20.strictObject({
   startedAt: z20.number(),
   observedAt: z20.number()
 });
+var DoorHealthEventSchema = z20.discriminatedUnion("kind", [
+  z20.strictObject({ kind: z20.literal("generation"), pid: z20.number().int().positive(), providerPort: z20.number().int().positive(), connectPort: z20.number().int().positive(), directPort: z20.number().int().positive(), observedAt: z20.number() }),
+  z20.strictObject({ kind: z20.literal("listenerFailed"), pid: z20.number().int().positive(), listener: z20.enum(["provider", "connect", "direct"]), message: z20.string(), observedAt: z20.number() }),
+  z20.strictObject({ kind: z20.literal("idleShutdown"), pid: z20.number().int().positive(), observedAt: z20.number() })
+]);
+var QuotaExpiringEventSchema = z20.strictObject({
+  identity: z20.string().min(1),
+  provider: z20.string().min(1),
+  window: z20.enum(["fiveHour", "sevenDay"]),
+  /** The fraction of the window already used when it was seen expiring, always below one because a fully used window has nothing left to spend. */
+  utilization: z20.number().min(0).max(1),
+  resetsAt: z20.iso.datetime(),
+  observedAt: z20.number()
+});
 
 // src/frontdoor/eventsApi.ts
 var EVENTS_API_TAG = "events";
@@ -9954,6 +9981,7 @@ var USAGE_API_TAG = "usage";
 var FRONTDOOR_API_TAG = "frontdoor";
 var CHECK_API_TAG = "check";
 var DOCTOR_API_TAG = "doctor";
+var POOL_API_TAG = "pool";
 function createControlApiRouter(deps) {
   const authed = doorApiAuth(deps.expectedToken);
   return {
@@ -9997,6 +10025,18 @@ function createControlApiRouter(deps) {
     },
     doctor: {
       run: authed.route({ method: "GET", path: "/rest/doctor", summary: "Run the doctor report", tags: [DOCTOR_API_TAG] }).output(DoctorRunOutputSchema).handler(() => deps.doctorReport())
+    },
+    pool: {
+      pick: authed.route({ method: "GET", path: "/rest/pool/pick", summary: "Rank one pool exactly as a launch from a directory would right now", tags: [POOL_API_TAG] }).input(PoolPickInputSchema).output(PoolPickReportSchema).handler(({ input }) => {
+        const report = deps.poolPick(input.pool, input.path);
+        if (report === void 0) {
+          const live = deps.poolNames();
+          throw new ORPCError3("NOT_FOUND", {
+            message: live.length === 0 ? `no pools are configured, so none is named ${input.pool}` : `no pool is named ${input.pool}; the live pools are ${live.map((name) => `"${name}"`).join(", ")}`
+          });
+        }
+        return report;
+      })
     }
   };
 }
@@ -10205,6 +10245,81 @@ function createLaunchEventPublisher(hub, now) {
   };
 }
 
+// src/frontdoor/doorHealthEvents.ts
+function createDoorHealthPublisher(hub, now, pid) {
+  const publisher = hub.publisher(DOOR_HEALTH_EVENT_SOURCE);
+  return {
+    generation: (ports) => {
+      publisher.publish({ kind: "generation", pid, providerPort: ports.providerPort, connectPort: ports.connectPort, directPort: ports.directPort, observedAt: now() });
+    },
+    listenerFailed: (listener, message) => {
+      publisher.publish({ kind: "listenerFailed", pid, listener, message, observedAt: now() });
+    },
+    idleShutdown: () => {
+      publisher.publish({ kind: "idleShutdown", pid, observedAt: now() });
+    }
+  };
+}
+
+// src/frontdoor/quotaExpiringEvents.ts
+var MS_PER_HOUR2 = 36e5;
+var MS_PER_DAY2 = 864e5;
+var FIVE_HOUR_WINDOW_HOURS = 5;
+var SEVEN_DAY_WINDOW_DAYS = 7;
+var FIVE_HOUR_WINDOW_MS2 = FIVE_HOUR_WINDOW_HOURS * MS_PER_HOUR2;
+var SEVEN_DAY_WINDOW_MS2 = SEVEN_DAY_WINDOW_DAYS * MS_PER_DAY2;
+var FINAL_SPAN_DENOMINATOR = 30;
+var QUOTA_EXPIRING_WINDOW_FRACTION = 1 / FINAL_SPAN_DENOMINATOR;
+function createQuotaExpiringPublisher(hub, deps) {
+  const publisher = hub.publisher(QUOTA_EXPIRING_EVENT_SOURCE);
+  const latest = /* @__PURE__ */ new Map();
+  for (const snapshot of deps.seed) {
+    latest.set(snapshot.identity, snapshot);
+  }
+  hub.subscribe([USAGE_EVENT_SOURCE], (event) => {
+    const snapshot = UsageSnapshotSchema.parse(event.payload);
+    latest.set(snapshot.identity, snapshot);
+  });
+  const announced = /* @__PURE__ */ new Set();
+  const windowsOf = (snapshot) => {
+    const views = [];
+    for (const provider of Object.keys(snapshot.providers).sort()) {
+      const unified = snapshot.providers[provider]?.rateLimit?.unified;
+      const fiveHour = unified?.fiveHour;
+      if (fiveHour?.utilization !== void 0 && fiveHour.resetsAt !== void 0) {
+        views.push({ provider, view: { window: "fiveHour", spanMs: FIVE_HOUR_WINDOW_MS2, utilization: fiveHour.utilization, resetsAtMs: Date.parse(fiveHour.resetsAt) } });
+      }
+      const sevenDay = unified?.sevenDay;
+      if (sevenDay?.utilization !== void 0 && sevenDay.resetsAt !== void 0) {
+        views.push({ provider, view: { window: "sevenDay", spanMs: SEVEN_DAY_WINDOW_MS2, utilization: sevenDay.utilization, resetsAtMs: Date.parse(sevenDay.resetsAt) } });
+      }
+    }
+    return views;
+  };
+  return {
+    check: () => {
+      const now = deps.now();
+      for (const identity of [...latest.keys()].sort()) {
+        const snapshot = latest.get(identity);
+        if (snapshot === void 0) {
+          continue;
+        }
+        for (const { provider, view } of windowsOf(snapshot)) {
+          if (view.utilization >= 1 || view.resetsAtMs <= now || view.resetsAtMs - now >= view.spanMs * QUOTA_EXPIRING_WINDOW_FRACTION) {
+            continue;
+          }
+          const key = `${identity}:${provider}:${view.window}:${String(view.resetsAtMs)}`;
+          if (announced.has(key)) {
+            continue;
+          }
+          announced.add(key);
+          publisher.publish({ identity, provider, window: view.window, utilization: view.utilization, resetsAt: new Date(view.resetsAtMs).toISOString(), observedAt: now });
+        }
+      }
+    }
+  };
+}
+
 // src/frontdoor/rcLiveUsage.ts
 var RC_RATE_LIMIT_EVENT_TYPE = "rate_limit_event";
 function isRecord5(value) {
@@ -13197,6 +13312,7 @@ export {
   CredentialSourceSchema,
   DOOR_EVENT_BUFFER_EVENTS,
   DOOR_EVENT_SOURCE_RC,
+  DOOR_HEALTH_EVENT_SOURCE,
   DirectoryRuleAlreadyExistsError,
   DirectoryRuleMissingTargetError,
   DirectoryRuleNotFoundError,
@@ -13206,6 +13322,7 @@ export {
   DoctorRunOutputSchema,
   DoorEventSchema,
   DoorEventSourceQuerySchema,
+  DoorHealthEventSchema,
   EXIT_FAILURE,
   EXIT_USAGE,
   EffectiveWindowSchema,
@@ -13242,6 +13359,8 @@ export {
   ProviderKindMismatchError,
   ProviderNotFoundError,
   ProviderSchema,
+  QUOTA_EXPIRING_EVENT_SOURCE,
+  QuotaExpiringEventSchema,
   RC_CONTEXT_USAGE_DETAILS,
   RC_IDLE_EXPIRY_MS,
   RC_ORPC_PATH_PREFIX,
@@ -13269,6 +13388,7 @@ export {
   RcRateLimitWindowSchema,
   RcStreamEnvelopeSchema,
   RcStreamEventSchema,
+  USAGE_EVENT_SOURCE,
   UsageError,
   UsageListOutputSchema,
   UsageLiveOutputSchema,
@@ -13314,10 +13434,12 @@ export {
   createDoorApiNodeHandler,
   createDoorApiRouter,
   createDoorEventHub,
+  createDoorHealthPublisher,
   createEventsApiRouter,
   createLaunchEventPublisher,
   createLeafCache,
   createProfile,
+  createQuotaExpiringPublisher,
   createRcApiNodeHandler,
   createRcApiRouter,
   createRcControlHandler,

package/dist/types/index.d.ts

@@ -3760,6 +3760,12 @@ type UsageSnapshot = z.infer<typeof UsageSnapshotSchema>;
 declare const DOOR_EVENT_SOURCE_RC = "rc";
 /** The source tag every launch lifecycle event carries: the registry's own register, prune and end moments, the first publisher the door itself owns. */
 declare const LAUNCH_EVENT_SOURCE = "launch";
+/** The source tag every usage change event carries: one event per usage snapshot the door writes, the durable fact a quota consumer diffs or reads windows from. */
+declare const USAGE_EVENT_SOURCE = "usage";
+/** The source tag every door health event carries: the supervisor's own state transitions, the moments a consumer of the door needs to know the door itself changed. */
+declare const DOOR_HEALTH_EVENT_SOURCE = "door";
+/** The source tag every expiring-quota event carries: an identity whose unused window allowance is about to reset, computed from the same snapshots the usage source keeps fresh. */
+declare const QUOTA_EXPIRING_EVENT_SOURCE = "quota-expiring";
 /** One event on the door's backbone, exactly as the subscription yields it: the source that published it, the sequence the backbone assigned that source, and the publisher's own payload carried verbatim for the consumer to narrow. */
 declare const DoorEventSchema: z.ZodObject<{
     source: z.ZodString;
@@ -3789,6 +3795,54 @@ declare const LaunchLifecycleEventSchema: z.ZodObject<{
 }, z.core.$strict>;
 /** One launch lifecycle event, as the TypeScript the publisher emits and its consumers handle. */
 type LaunchLifecycleEvent = z.output<typeof LaunchLifecycleEventSchema>;
+/**
+ * One door health event: the supervisor's own state transitions, observed at the moment they happened in this process. `generation` is the door fully serving (every listener bound and the state file naming it); `listenerFailed` is a start failure that ends the generation, naming which listener and why; `idleShutdown` is the door closing itself with an empty session registry.
+ */
+declare const DoorHealthEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"generation">;
+    pid: z.ZodNumber;
+    providerPort: z.ZodNumber;
+    connectPort: z.ZodNumber;
+    directPort: z.ZodNumber;
+    observedAt: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"listenerFailed">;
+    pid: z.ZodNumber;
+    listener: z.ZodEnum<{
+        provider: "provider";
+        connect: "connect";
+        direct: "direct";
+    }>;
+    message: z.ZodString;
+    observedAt: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"idleShutdown">;
+    pid: z.ZodNumber;
+    observedAt: z.ZodNumber;
+}, z.core.$strict>], "kind">;
+/** One door health event, as the TypeScript the publisher emits and its consumers handle. */
+type DoorHealthEvent = z.output<typeof DoorHealthEventSchema>;
+/**
+ * One expiring-quota event: an identity's window with allowance still unspent that is about to reset, published once when the window enters its final span (so a scheduler can spend what would otherwise be lost, the moment spending it is still possible). `resetsAt` is the window's own reset instant; `observedAt` is when the door's tick saw it cross.
+ */
+declare const QuotaExpiringEventSchema: z.ZodObject<{
+    identity: z.ZodString;
+    provider: z.ZodString;
+    window: z.ZodEnum<{
+        fiveHour: "fiveHour";
+        sevenDay: "sevenDay";
+    }>;
+    utilization: z.ZodNumber;
+    resetsAt: z.ZodISODateTime;
+    observedAt: z.ZodNumber;
+}, z.core.$strict>;
+/** One expiring-quota event, as the TypeScript the publisher emits and its consumers handle. */
+type QuotaExpiringEvent = z.output<typeof QuotaExpiringEventSchema>;
+/**
+ * The usage source's payload: the snapshot the door just wrote, verbatim, so a consumer sees the quota change or reset in the payload itself rather than the door guessing which of the two a write was. The snapshot schema is the payload schema (identity, observed instant, every provider's state with its windows), the one definition `usage --json` readers already share.
+ */
+/** One usage change event, as the TypeScript the publisher emits and its consumers handle: the written snapshot itself, so the snapshot's own schema (`UsageSnapshotSchema`) is this payload's schema rather than a renamed copy. */
+type UsageChangeEvent = UsageSnapshot;
 
 /**
  * The door's event backbone: the publisher/subscriber machinery the Remote Control client stream's fan-out first proved, generalised so any door-wide source can publish and any consumer can subscribe once instead of each source growing its own channel. A publisher registers under a source tag and publishes payloads; the backbone stamps each event with its source's own monotonic sequence and delivers to every matching subscriber synchronously, in publication order. A source that carries its own ordering on the wire (the Remote Control envelope's per-session `sequence_num`, the number its resume rule resumes after) keeps it inside the payload, verbatim: the backbone's sequence is deliberately not any protocol's number.
@@ -3915,6 +3969,7 @@ declare function formatFrontDoorStatus(status: FrontDoorStatus, caCertPath: stri
  * - `usage.*` reads the per-identity usage snapshots the door's own middleware writes, reads a provider's quota windows the way every in-process consumer does (`effectiveWindow`: a window past its reset is empty and carries no status), and reads the live rate-limit observations the event backbone files off the Remote Control client stream (`live`: per-session latest state, exactly as fresh as the last turn a session completed, never a timer's derivation of it).
  * - `frontdoor.*` returns what `agent-shim frontdoor status` returns: the supervisor state, its liveness, the session registry's launches and the headroom hop.
  * - `check.run` and `doctor.run` return the reports `agent-shim check` and `agent-shim doctor` print, as data, `check.run` parameterised by an absolute directory path.
+ * - `pool.pick` returns what `agent-shim pool pick` prints, the ranked pick for one pool exactly as a launch from the named absolute directory would make it right now, so a programmatic consumer can ask which identity to use without reading the door host's files.
  *
  * Read-only by design: identity, configuration-profile, provider, pool and directory-rule management stay CLI-side, and adding writes over this mount is a decision of its own rather than a gap here. `createDoorApiNodeHandler` mounts these routers and the door-wide `events.subscribe` router beside the Remote Control router on the one prefix the provider listener already serves, so a consumer dials one address with one token for the whole door.
  */
@@ -3940,6 +3995,10 @@ interface ControlApiDeps {
     readonly checkReport: (path: string, identity?: string) => CheckReport;
     /** The doctor report, as `collectDoctorReport` collects it. */
     readonly doctorReport: () => DoctorReport;
+    /** The ranked pick for one pool as a launch from one absolute directory would make it right now, exactly `pool pick`'s own product; undefined when the pool table names no such pool. */
+    readonly poolPick: (pool: string, directory: string) => PoolPickReport | undefined;
+    /** The pool table's live names, so an unknown pool is refused naming the real ones rather than answered as an empty ranking. */
+    readonly poolNames: () => readonly string[];
 }
 /** Builds the control-plane routers: one procedure per read, every one behind the control-token middleware. */
 declare function createControlApiRouter(deps: ControlApiDeps): {
@@ -4441,13 +4500,13 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "config-profile": "config-profile";
                     identity: "identity";
                     provider: "provider";
+                    pool: "pool";
+                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
                     "path-resolution": "path-resolution";
                     "legacy-name": "legacy-name";
-                    pool: "pool";
-                    keychain: "keychain";
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
@@ -4463,6 +4522,44 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
             }, zod_v4_core.$strict>>>;
         }, zod_v4_core.$strict>, Record<never, never>, Record<never, never>>;
     };
+    pool: {
+        pick: _orpc_server.DecoratedProcedure<_orpc_server.MergedInitialContext<DoorApiContext & Record<never, never>, DoorApiContext, DoorApiContext>, any, zod.ZodObject<{
+            pool: zod.ZodString;
+            path: zod.ZodString;
+        }, zod_v4_core.$strict>, zod.ZodObject<{
+            pool: zod.ZodString;
+            directory: zod.ZodString;
+            pick: zod.ZodOptional<zod.ZodString>;
+            candidates: zod.ZodArray<zod.ZodObject<{
+                identity: zod.ZodString;
+                class: zod.ZodEnum<{
+                    unknown: "unknown";
+                    scored: "scored";
+                    "pay-per-use": "pay-per-use";
+                    ineligible: "ineligible";
+                }>;
+                score: zod.ZodOptional<zod.ZodNumber>;
+                feasible: zod.ZodBoolean;
+                blockedUntil: zod.ZodOptional<zod.ZodISODateTime>;
+                plan: zod.ZodUnion<readonly [zod.ZodObject<{
+                    kind: zod.ZodLiteral<"subscription">;
+                    capacity: zod.ZodNumber;
+                    recognised: zod.ZodBoolean;
+                    tier: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strict>, zod.ZodObject<{
+                    kind: zod.ZodLiteral<"pay-per-use">;
+                    tier: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strict>]>;
+                reasons: zod.ZodArray<zod.ZodString>;
+            }, zod_v4_core.$strict>>;
+            missing: zod.ZodArray<zod.ZodString>;
+            earliestReturn: zod.ZodOptional<zod.ZodObject<{
+                identity: zod.ZodString;
+                at: zod.ZodISODateTime;
+            }, zod_v4_core.$strict>>;
+            stickyProblem: zod.ZodOptional<zod.ZodString>;
+        }, zod_v4_core.$strict>, Record<never, never>, Record<never, never>>;
+    };
 };
 /** The control-plane routers, as the merged mount's and the client's own types are derived from them. */
 type ControlApiRouter = ReturnType<typeof createControlApiRouter>;
@@ -4976,13 +5073,13 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "config-profile": "config-profile";
                     identity: "identity";
                     provider: "provider";
+                    pool: "pool";
+                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
                     "path-resolution": "path-resolution";
                     "legacy-name": "legacy-name";
-                    pool: "pool";
-                    keychain: "keychain";
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
@@ -4998,6 +5095,44 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             }, zod_v4_core.$strict>>>;
         }, zod_v4_core.$strict>, Record<never, never>, Record<never, never>>;
     };
+    pool: {
+        pick: _orpc_server.DecoratedProcedure<_orpc_server.MergedInitialContext<DoorApiContext & Record<never, never>, DoorApiContext, DoorApiContext>, any, zod.ZodObject<{
+            pool: zod.ZodString;
+            path: zod.ZodString;
+        }, zod_v4_core.$strict>, zod.ZodObject<{
+            pool: zod.ZodString;
+            directory: zod.ZodString;
+            pick: zod.ZodOptional<zod.ZodString>;
+            candidates: zod.ZodArray<zod.ZodObject<{
+                identity: zod.ZodString;
+                class: zod.ZodEnum<{
+                    unknown: "unknown";
+                    scored: "scored";
+                    "pay-per-use": "pay-per-use";
+                    ineligible: "ineligible";
+                }>;
+                score: zod.ZodOptional<zod.ZodNumber>;
+                feasible: zod.ZodBoolean;
+                blockedUntil: zod.ZodOptional<zod.ZodISODateTime>;
+                plan: zod.ZodUnion<readonly [zod.ZodObject<{
+                    kind: zod.ZodLiteral<"subscription">;
+                    capacity: zod.ZodNumber;
+                    recognised: zod.ZodBoolean;
+                    tier: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strict>, zod.ZodObject<{
+                    kind: zod.ZodLiteral<"pay-per-use">;
+                    tier: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strict>]>;
+                reasons: zod.ZodArray<zod.ZodString>;
+            }, zod_v4_core.$strict>>;
+            missing: zod.ZodArray<zod.ZodString>;
+            earliestReturn: zod.ZodOptional<zod.ZodObject<{
+                identity: zod.ZodString;
+                at: zod.ZodISODateTime;
+            }, zod_v4_core.$strict>>;
+            stickyProblem: zod.ZodOptional<zod.ZodString>;
+        }, zod_v4_core.$strict>, Record<never, never>, Record<never, never>>;
+    };
     rc: {
         list: _orpc_server.DecoratedProcedure<_orpc_server.MergedInitialContext<DoorApiContext & Record<never, never>, DoorApiContext, DoorApiContext>, any, Schema<unknown, unknown>, zod.ZodObject<{
             sessions: zod.ZodReadonly<zod.ZodArray<zod.ZodObject<{
@@ -5424,13 +5559,13 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "config-profile": "config-profile";
         identity: "identity";
         provider: "provider";
+        pool: "pool";
+        keychain: "keychain";
         "ambient-credential": "ambient-credential";
         "binary-discovery": "binary-discovery";
         "claude-shim": "claude-shim";
         "path-resolution": "path-resolution";
         "legacy-name": "legacy-name";
-        pool: "pool";
-        keychain: "keychain";
         "directory-rules": "directory-rules";
         "categories-local": "categories-local";
         "active-identity": "active-identity";
@@ -5453,13 +5588,13 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "config-profile": "config-profile";
             identity: "identity";
             provider: "provider";
+            pool: "pool";
+            keychain: "keychain";
             "ambient-credential": "ambient-credential";
             "binary-discovery": "binary-discovery";
             "claude-shim": "claude-shim";
             "path-resolution": "path-resolution";
             "legacy-name": "legacy-name";
-            pool: "pool";
-            keychain: "keychain";
             "directory-rules": "directory-rules";
             "categories-local": "categories-local";
             "active-identity": "active-identity";
@@ -5490,6 +5625,36 @@ interface LaunchEventPublisher {
 /** Creates the launch lifecycle publisher. One per door process, fed by the supervisor's tick. */
 declare function createLaunchEventPublisher(hub: DoorEventHub, now: () => number): LaunchEventPublisher;
 
+/**
+ * The door health publisher: the supervisor's own state transitions as backbone events, so a consumer of the door learns the door itself changed and not only its sessions. The publisher emits nothing of its own: the supervisor tells it the moments it already lives through (every listener bound, a start failure that ends the generation, the idle shutdown), each published the moment it happens rather than at a tick, because these are process facts, not registry facts diffed between observations.
+ */
+/** Everything the door health publisher needs: the backbone it publishes on and the clock its events are observed at. */
+interface DoorHealthPublisher {
+    /** Publishes the generation event: every listener bound, the state file naming this supervisor, the door fully serving. */
+    readonly generation: (ports: {
+        readonly providerPort: number;
+        readonly connectPort: number;
+        readonly directPort: number;
+    }) => void;
+    /** Publishes the start failure that ends the generation, naming which listener and why. */
+    readonly listenerFailed: (listener: "provider" | "connect" | "direct", message: string) => void;
+    /** Publishes the idle shutdown: the door closing itself with an empty session registry. */
+    readonly idleShutdown: () => void;
+}
+/** Creates the door health publisher. One per door process, fed by the supervisor. */
+declare function createDoorHealthPublisher(hub: DoorEventHub, now: () => number, pid: number): DoorHealthPublisher;
+
+/** Everything the expiring-quota publisher needs: the backbone (its usage source keeps the snapshots fresh), the snapshots as they stand at assembly, and the clock the tick reads. */
+interface QuotaExpiringPublisher {
+    /** Checks every held window against the clock and publishes each one newly inside its final span. Idempotent within one span; cheap enough for the supervisor's every tick. */
+    readonly check: () => void;
+}
+/** Creates the expiring-quota publisher. One per door process, checked on the supervisor's tick. */
+declare function createQuotaExpiringPublisher(hub: DoorEventHub, deps: {
+    readonly seed: readonly UsageSnapshot[];
+    readonly now: () => number;
+}): QuotaExpiringPublisher;
+
 /**
  * The rate-limit facts one client read stream event carries, or undefined when the event is not a `rate_limit_event` this module can read: a payload of another type, a payload without the family's own one required field, or one whose `rate_limit_info` does not parse. An envelope the door cannot read is one it knows nothing about, never a failure, exactly as the stream's own parser treats an envelope it cannot read. Exported because the renderers (`frontdoor rc watch`, the web client's twin) narrow the same payload through the same one definition.
  */
@@ -5778,6 +5943,14 @@ interface FrontDoorSupervisorPorts {
      * Reports one tick's session-registry facts to the door's event backbone: the sessions the tick's listing saw (taken before the prune, so a pruned launch's record is still there to name its start time) and the pids the tick's prune removed. The launch lifecycle publisher turns the diff between ticks into source-tagged events; the listing is also this loop's own idle input, so the two read one fact instead of two.
      */
     readonly observeLaunchRegistry: (sessions: readonly FrontDoorSessionSummary[], pruned: readonly number[]) => void;
+    /**
+     * Publishes the supervisor's own state transitions to the door's event backbone: the generation serving, a start failure that ends it, the idle shutdown. Fed the moments the supervisor already lives through, published as they happen rather than at a tick, because these are process facts.
+     */
+    readonly doorHealth: DoorHealthPublisher;
+    /**
+     * Checks the expiring-quota windows against the clock, once per tick: the publisher holds the snapshots the usage source keeps fresh, so this costs arithmetic, never a file read.
+     */
+    readonly checkQuotaExpiry: () => void;
     readonly log: (line: string) => void;
 }
 /** Options for `runFrontDoorSupervisor`. */
@@ -6516,5 +6689,5 @@ interface PrepareClaudeLaunchOptions {
  */
 declare function prepareClaudeLaunch(options: PrepareClaudeLaunchOptions): LaunchPlan;
 
-export { AMBIENT_CREDENTIAL_VARS, CHECK_CREDENTIAL_APPLIES, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, ConfigProfileSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LegacyProviderFileError, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, addDirectoryRule, addIdentity, addPool, addProvider, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createEventsApiRouter, createLaunchEventPublisher, createLeafCache, createProfile, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readDirectoryRules, readFarmManifest, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readUsageSnapshot, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveDecisions, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runDoctor, runFrontDoorSupervisor, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, writeDirectoryRules };
-export type { AddDirectoryRuleOptions, AddProviderInput, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, Layer, LayerId, LayoutPaths, LeafCert, NestedContribution, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, RecoverFarmParams, RecoveryResult, ResolveDecisionsInput, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation };
+export { AMBIENT_CREDENTIAL_VARS, CHECK_CREDENTIAL_APPLIES, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, ConfigProfileSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LegacyProviderFileError, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, USAGE_EVENT_SOURCE, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, addDirectoryRule, addIdentity, addPool, addProvider, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchEventPublisher, createLeafCache, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readDirectoryRules, readFarmManifest, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readUsageSnapshot, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveDecisions, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runDoctor, runFrontDoorSupervisor, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, writeDirectoryRules };
+export type { AddDirectoryRuleOptions, AddProviderInput, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, Layer, LayerId, LayoutPaths, LeafCert, NestedContribution, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, RecoverFarmParams, RecoveryResult, ResolveDecisionsInput, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "8.29.0",
+  "version": "8.31.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",