agent-shim 8.40.0 → 8.42.0

package/dist/types/index.d.ts

@@ -4202,9 +4202,24 @@ declare function evaluateAmbientCredentialGuard(params: EvaluateAmbientCredentia
 /** Which precedence rule produced an identity decision. */
 declare const IDENTITY_DECISION_SOURCES: readonly ["config-dir-escape-hatch", "argv", "env", "directory-pin", "active-identity-file", "none"];
 type IdentityDecisionSource = (typeof IDENTITY_DECISION_SOURCES)[number];
+/** The result of deciding which identity applies to this launch. */
+interface IdentityDecision {
+    /** The resolved identity name. Absent when the escape hatch applied, when nothing resolved one, or when a pool was selected (the launcher picks a member from `pool`). */
+    readonly name?: string;
+    /** The pool selected by a `pool:<name>` selector, when the launch named a pool instead of an identity. */
+    readonly pool?: string;
+    readonly source: IdentityDecisionSource;
+    /** True when `CLAUDE_CONFIG_DIR` was already set and every step below was skipped as a result. */
+    readonly configDirEscapeHatch: boolean;
+}
 /** Which precedence rule produced a configuration-profile decision. */
 declare const CONFIG_PROFILE_DECISION_SOURCES: readonly ["cli-flag", "env", "directory-rule", "identity-default", "global-default", "none"];
 type ConfigProfileDecisionSource = (typeof CONFIG_PROFILE_DECISION_SOURCES)[number];
+/** The result of deciding which configuration profile applies to this launch. */
+interface ConfigProfileDecision {
+    readonly name?: string;
+    readonly source: ConfigProfileDecisionSource;
+}
 
 /** What `pool pick` reports: the ranking a launch from `directory` would act on right now. */
 declare const PoolPickReportSchema: z.ZodObject<{
@@ -6298,6 +6313,33 @@ type DoorApiClient = RouterClient<DoorApiRouter>;
 /** Builds the client for the door's whole typed API: the same address, CA and per-generation control token the Remote Control client uses, with the control-plane procedures beside `rc.*`. */
 declare function frontDoorApiClient(port: number, ca: string, token: string): DoorApiClient;
 
+/** Raised when the front door is not serving, so there is no listener to open a client to. */
+declare class FrontDoorNotServingError extends CliError {
+    constructor();
+}
+/** Raised when the serving door's CA certificate or per-generation control token cannot be read, so a client could not authenticate the listener or itself. */
+declare class FrontDoorControlMaterialError extends CliError {
+    constructor(message: string);
+}
+/** What a client of the serving door's control surface needs: the provider listener's port, the CA that signs its certificate, and this generation's owner-only control token. */
+interface FrontDoorControlMaterial {
+    readonly port: number;
+    readonly ca: string;
+    readonly token: string;
+}
+/**
+ * Reads the serving door's control material from the state file `frontdoor status` reads, the CA path and the owner-only control token file. `purpose` completes the CA refusal's sentence ("so `purpose` cannot be authenticated") for the client being opened.
+ *
+ * Throws `FrontDoorNotServingError` when the state names no serving port, and `FrontDoorControlMaterialError` naming the missing file when the CA or the token cannot be read.
+ */
+declare function readFrontDoorControlMaterial(fsPort: HeadroomFs, paths: LayoutPaths, purpose: string): FrontDoorControlMaterial;
+/**
+ * Opens the whole typed API of the serving front door from the state root: the Remote Control operations (`rc.*`), the control plane (usage, status, check and doctor) and the door-wide event stream (`events.subscribe`), every call presenting the control token over TLS trusting only the door's own CA. It reads the same files the `frontdoor` verbs read, and no credential.
+ *
+ * Throws `FrontDoorNotServingError` when the door is not serving and `FrontDoorControlMaterialError` when its CA or control token is missing. The token belongs to one door generation, so a client opened before a restart is refused afterwards: open a new one.
+ */
+declare function frontDoorApiFromState(paths: LayoutPaths, fsPort?: HeadroomFs): DoorApiClient;
+
 /**
  * The Zod schemas of the door's general control plane: the usage snapshots a remote consumer reads, the live rate-limit observations the event backbone files, the front door's own status and session registry, the check report over a path, and the doctor report, each one the input or output of a procedure in `controlApi.ts`. Like `rcSchemas.ts` this module is a plain Zod leaf (nothing here imports oRPC), and every shape it asserts is one the implementation already defines: the usage snapshot and front-door state schemas are the store's and the registry's own, the check report's is `checkReportSchema.ts`'s (`CheckReportJsonSchema`, imported straight by the procedure), and the doctor vocabulary is `doctorReport.ts`'s own, so contract and behaviour share one source and a drift fails the procedures' own validation rather than shipping silently.
  */
@@ -7545,6 +7587,38 @@ declare function updateDirectoryRule(paths: LayoutPaths, rulePath: string, optio
 /** Removes the directory rule for `rulePath`. Throws `DirectoryRuleNotFoundError` when no rule matches that exact path. */
 declare function removeDirectoryRule(paths: LayoutPaths, rulePath: string): void;
 
+/** What `resolveLaunchSelection` needs from its caller. */
+interface ResolveLaunchSelectionParams {
+    readonly paths: LayoutPaths;
+    /** The directory a launch would run in, already a real path. */
+    readonly cwd: string;
+    /** The identity or `pool:<name>` selector the launch names on its command line, as `@name` or `--identity` gives it. Absent when the launch names none. */
+    readonly identity?: string;
+    /** The configuration profile the launch names on its command line, as `--config-profile` gives it. Absent when the launch names none. */
+    readonly configProfile?: string;
+    /** The environment the launch inherits: `CLAUDE_CONFIG_DIR`, `AGENT_SHIM_IDENTITY` and `AGENT_SHIM_CONFIG_PROFILE` are read from it. */
+    readonly env: Readonly<Record<string, string | undefined>>;
+}
+/** The identity and configuration profile a launch in a directory would use, with where each decision came from. */
+interface LaunchSelection {
+    /**
+     * The identity decision. When the launch selected a pool, `pool` names it and `name` is the member a launch here would run as now (absent when no member can be picked), the same read-only pick `agent-shim pool pick` reports.
+     */
+    readonly identity: IdentityDecision;
+    /** The pool pick behind `identity`, with every member's reasons, when the launch selected a pool. */
+    readonly poolPick?: PoolPickReport;
+    /** The configuration profile decision, taken with the chosen identity's own default profile. */
+    readonly configProfile: ConfigProfileDecision;
+}
+/**
+ * Which identity (or pool member) and configuration profile a launch in `params.cwd` would use on this machine, weighing the sources the launcher weighs, in its order: the command line, `CLAUDE_CONFIG_DIR`, the environment, a directory rule or a committed `.agent-shim.json` or `.agent-shim.local.json` pinning the directory, the active identity, and each profile source below the flag. It answers without launching, resyncing a farm or registering with a daemon, and reads no credential, Keychain item or credential command.
+ *
+ * A directory rule's `when` guards the rule's sharing decisions; the launcher, `check` and this function all apply the rule's identity and profile selections regardless of it, so there is no undecided condition to report.
+ *
+ * Throws `PoolNotFoundError` when the launch selects a pool that is not defined.
+ */
+declare function resolveLaunchSelection(params: ResolveLaunchSelectionParams): LaunchSelection;
+
 /** What a launch's one-off command-line/environment overrides resolve to: the `cliOverride` layer `src/resolve/walk.ts`'s `assembleCascade` composes last, so it beats every other layer. */
 interface CliOverride {
     readonly categories?: CategoryMap;
@@ -7698,10 +7772,14 @@ interface LaunchPlan {
  * The farm resync is skipped when `CLAUDE_CONFIG_DIR` was already set (the escape hatch means the user has named a configuration directory explicitly, and agent-shim manages neither its contents nor its lifetime) and when no identity resolved at all (a bare launch against plain `~/.claude`, matching the legacy tool's own behaviour). In both cases there is no agent-shim-managed farm for a resync to act on.
  */
 declare function prepareLaunch(params: PrepareLaunchParams): LaunchPlan;
+/**
+ * Runs the child a `plan` describes under `spawn` and returns its exit code, in the order every launch observes: the update check's notice is suppressed from the moment the child takes the terminal, the child runs to completion, and the plan's session registrations are released whether it exited, was signalled or could not be spawned. A spawn failure is thrown after the release rather than turned into an exit code.
+ */
+declare function runLaunchPlan(plan: LaunchPlan, spawn: SpawnPort): number;
 /**
  * Runs one `claude` launch: `prepareLaunch`, then the child under `params.spawn`, whose exit code becomes this process's.
  *
- * The session registrations are released twice by design: `beforeExit` covers the real success path (where `process.exit` never unwinds a `finally`), and the `finally` below covers a thrown spawn error, where it does.
+ * The session registrations are released by `runLaunchPlan` before `proc.exit` runs, because the real `process.exit` never unwinds a `finally` block.
  */
 declare function runLauncher(params: RunLauncherParams): void;
 
@@ -7750,6 +7828,85 @@ interface PrepareClaudeLaunchOptions {
  */
 declare function prepareClaudeLaunch(options: PrepareClaudeLaunchOptions): LaunchPlan;
 
+/** How one refresh ended. */
+type AnthropicRefreshOutcome = {
+    readonly status: "refreshed";
+}
+/** The endpoint answered without plan windows: the account has none to report, which is itself recorded so the question is not asked again for one freshness period. */
+ | {
+    readonly status: "unavailable";
+} | {
+    readonly status: "failed";
+    readonly message: string;
+};
+/** Refreshes the Anthropic rate-limit state of identities whose recorded state has gone stale. */
+interface AnthropicUsageRefresher {
+    /** Fetches and records one identity's usage, regardless of its freshness, though never twice at once. */
+    readonly refresh: (identity: string) => Promise<AnthropicRefreshOutcome>;
+    /** Refreshes, up to the configured concurrency at a time, each of `members` whose usage is stale and that no recent failure suppresses. Never throws: a failure is logged and the member keeps its recorded state. */
+    readonly refreshStale: (members: readonly PoolMember[]) => Promise<void>;
+}
+
+/** What `refreshPoolUsage` needs from its caller. */
+interface RefreshPoolUsageParams {
+    /** The state root; defaults to the one the command line resolves. */
+    readonly paths?: LayoutPaths;
+    /** The directory launches are planned for. */
+    readonly cwd: string;
+    /** The pools to refresh the members of, each with the pools it nests. */
+    readonly poolNames: readonly string[];
+    /** The agent-shim executable the daemons a probe routes through start with; the package's own command line bundle when absent, as for `prepareClaudeLaunch`. */
+    readonly agentShim?: string;
+    /** Receives one line per failed or skipped refresh; ignored when absent. */
+    readonly log?: (line: string) => void;
+    /** Refreshes by other means than Claude Code's usage report; the real one when absent. */
+    readonly refresher?: AnthropicUsageRefresher;
+}
+/**
+ * Refreshes, on demand, the recorded Anthropic usage of every member of the named pools (and of the pools they nest) whose record has gone stale, so a quota display or a launch the caller plans itself reads current figures. A member is stale once its record is older than one percent of the five-hour window; each is asked for its plan windows through Claude Code's usage report, which makes no model request. A failed fetch is logged and the member keeps its recorded state; this never throws for one.
+ *
+ * Needs the Agent SDK package (a dependency of this one), loaded only when a pool is named. The command line bundle carries the SDK inside it and gives it a stand-in for `import.meta.url`, which the SDK, an ES module, hands to `createRequire` and a CommonJS bundle leaves undefined; the library files leave the SDK external, so a consumer that bundles them into CommonJS output of its own must supply the same stand-in.
+ */
+declare function refreshPoolUsage(params: RefreshPoolUsageParams): Promise<void>;
+/** What `refreshLaunchPoolUsage` needs: the launch to be planned, and the refresh's own options. */
+interface RefreshLaunchPoolUsageOptions extends PrepareClaudeLaunchOptions {
+    /** Receives one line per failed or skipped refresh; ignored when absent. */
+    readonly log?: (line: string) => void;
+    /** Refreshes by other means than Claude Code's usage report; the real one when absent. */
+    readonly refresher?: AnthropicUsageRefresher;
+}
+/**
+ * The pool a launch with these arguments, environment and directory would select, by the launcher's own precedence (the command line, `AGENT_SHIM_IDENTITY`, a directory rule or portable file, the active identity), or undefined when it selects an identity or none. It reads configuration only, never usage.
+ */
+declare function poolSelectedByLaunch(options: Pick<PrepareClaudeLaunchOptions, "argv" | "env" | "cwd" | "paths">): string | undefined;
+/**
+ * Refreshes the stale usage of the pool a launch would select (`poolSelectedByLaunch`), so the pick that launch makes ranks on current figures. Run it before `prepareClaudeLaunch`, which stays synchronous and ranks on whatever is recorded; `runClaudeLaunch` does. Does nothing when the launch selects no pool. See `refreshPoolUsage` for what a refresh asks, and for the Agent SDK requirement.
+ */
+declare function refreshLaunchPoolUsage(options: RefreshLaunchPoolUsageOptions): Promise<void>;
+
+/** What `runClaudeLaunch` needs: the launch to run, and the stale-usage refresh's own options. */
+type RunClaudeLaunchOptions = RefreshLaunchPoolUsageOptions;
+/**
+ * Runs one `claude` launch for `options.cwd` on this machine as `agent-shim run` does, and resolves to the child's exit code: a pool the launch selects first has its stale usage refreshed (`refreshLaunchPoolUsage`) so the pick ranks on current figures, then the launch is prepared (`prepareClaudeLaunch`), the child runs with the terminal's standard streams until it ends, and the launch's front door and headroom registrations are released whether it exited, was signalled (`128` plus the signal number) or could not be spawned. It does not exit this process, so the host decides what to do with the code.
+ *
+ * Rejects with `LaunchRefusedError` before anything is spawned when the launch is refused, and with the spawn failure, after releasing, when the child could not be started. Interactive offers (creating a missing identity or profile) and the launch-time update notice belong to the command line and are not made here.
+ */
+declare function runClaudeLaunch(options: RunClaudeLaunchOptions): Promise<number>;
+
+/** What refreshing pools needs, injected so it runs against fakes. */
+interface RefreshStalePoolMembersParams {
+    /** The pools to refresh the members of, each with the pools it nests. */
+    readonly poolNames: readonly string[];
+    readonly pools: Readonly<Record<string, Pool>>;
+    /** Loads each named identity's recorded usage as the pool ranking reads it. */
+    readonly loadMembers: (identities: readonly string[]) => readonly PoolMember[];
+    readonly refresher: AnthropicUsageRefresher;
+}
+/**
+ * Refreshes the Anthropic usage of every member of the named pools (and of the pools they nest) whose recorded state is stale, so a pick ranks on current figures. A launch runs it before `prepareLaunch`, which stays synchronous because it is part of the library surface; the front door runs it on a timer. A member whose fetch fails keeps its recorded state, and nothing here refuses a launch. An identity named by several pools is fetched once.
+ */
+declare function refreshStalePoolMembers(params: RefreshStalePoolMembersParams): Promise<void>;
+
 /** The file name of the command line bundle that ships beside the library files in `dist/`. */
 declare const OWN_CLI_FILE_NAME = "cli.cjs";
 /**
@@ -7759,5 +7916,5 @@ declare const OWN_CLI_FILE_NAME = "cli.cjs";
  */
 declare function agentShimCliPath(distDir?: string | undefined): string;
 
-export { AMBIENT_CREDENTIAL_VARS, CHECK_CREDENTIAL_APPLIES, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, ConfigProfileSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LegacyProviderFileError, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, USAGE_EVENT_SOURCE, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchEventPublisher, createLeafCache, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readDirectoryRules, readFarmManifest, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readUsageSnapshot, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveDecisions, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runDoctor, runFrontDoorSupervisor, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, writeDirectoryRules };
-export type { AddDirectoryRuleOptions, AddProviderInput, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, Layer, LayerId, LayoutPaths, LeafCert, NestedContribution, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, RecoverFarmParams, RecoveryResult, ResolveDecisionsInput, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation };
+export { AMBIENT_CREDENTIAL_VARS, CHECK_CREDENTIAL_APPLIES, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, ConfigProfileSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LegacyProviderFileError, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, USAGE_EVENT_SOURCE, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchEventPublisher, createLeafCache, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readUsageSnapshot, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveDecisions, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, writeDirectoryRules };
+export type { AddDirectoryRuleOptions, AddProviderInput, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, NestedContribution, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "8.40.0",
+  "version": "8.42.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",