agent-shim 8.6.0 → 8.8.0

package/dist/index.cjs

@@ -63,8 +63,11 @@ __export(index_exports, {
   InvalidProviderNameError: () => InvalidProviderNameError,
   LaunchRefusedError: () => LaunchRefusedError,
   LegacyProviderFileError: () => LegacyProviderFileError,
+  PROMPT_CACHE_TTL_MS: () => PROMPT_CACHE_TTL_MS,
+  PlanClassSchema: () => PlanClassSchema,
   PoolNameSchema: () => PoolNameSchema,
   PoolNotFoundError: () => PoolNotFoundError,
+  PoolPickReportSchema: () => PoolPickReportSchema,
   PoolSchema: () => PoolSchema,
   PortableConfigSchema: () => PortableConfigSchema,
   ProfileAlreadyExistsError: () => ProfileAlreadyExistsError,
@@ -101,16 +104,19 @@ __export(index_exports, {
   checkReportToJson: () => checkReportToJson,
   collectCheckReport: () => collectCheckReport,
   collectDoctorReport: () => collectDoctorReport,
+  collectPoolPick: () => collectPoolPick,
   createLeafCache: () => createLeafCache,
   createProfile: () => createProfile,
   createRcControlHandler: () => createRcControlHandler,
   createRcSessionTracker: () => createRcSessionTracker,
   describeProviderEndpoint: () => describeProviderEndpoint,
   detectAmbientCredential: () => detectAmbientCredential,
+  effectiveWindow: () => effectiveWindow,
   ensureCa: () => ensureCa,
   ensureFrontDoor: () => ensureFrontDoor,
   ensureHeadroom: () => ensureHeadroom,
   evaluateAmbientCredentialGuard: () => evaluateAmbientCredentialGuard,
+  evaluateWhen: () => evaluateWhen,
   formatAmbientCredentialGuardMessage: () => formatAmbientCredentialGuardMessage,
   formatCheckReport: () => formatCheckReport,
   formatDoctorReport: () => formatDoctorReport,
@@ -128,13 +134,16 @@ __export(index_exports, {
   listProfiles: () => listProfiles,
   listProviders: () => listProviders,
   listUsageSnapshots: () => listUsageSnapshots,
+  matchBranch: () => matchBranch,
   mintLeaf: () => mintLeaf,
   observingRoutedRoute: () => observingRoutedRoute,
   parseConnectTarget: () => parseConnectTarget,
+  planOf: () => planOf,
   prepareClaudeLaunch: () => prepareClaudeLaunch,
   prepareLaunch: () => prepareLaunch,
   profileExists: () => profileExists,
   providerExists: () => providerExists,
+  rankPool: () => rankPool,
   rcEventWriteResultFromAnswer: () => rcEventWriteResultFromAnswer,
   rcObserverAsPassthrough: () => rcObserverAsPassthrough,
   readActiveIdentity: () => readActiveIdentity,
@@ -3515,25 +3524,19 @@ function realConnectEffects() {
         }
       };
     },
-    connectTlsUpstream: async (host, port, clientAlpn) => await new Promise((resolve, reject) => {
-      const dial = (localPort) => {
-        const raw = net2.connect({ host, port, localPort, lookup: realAddressLookup });
-        return tls.connect({ socket: raw, servername: host, ...clientAlpn === void 0 ? {} : { ALPNProtocols: [clientAlpn] } });
-      };
-      const settle = (candidate) => {
-        candidate.once("secureConnect", () => {
-          resolve(candidate);
-        });
-        candidate.once("error", (error) => {
-          if ("code" in error && error.code === "EADDRINUSE") {
-            settle(dial(upstreamLocalPort()));
-            return;
-          }
-          reject(error);
+    connectTlsUpstream: async (host, port, clientAlpn) => {
+      const dialled = await reservedDial({ host, port });
+      if (dialled.error !== null) {
+        throw dialled.error;
+      }
+      return await new Promise((resolve, reject) => {
+        const secure = tls.connect({ socket: dialled.socket, servername: host, ...clientAlpn === void 0 ? {} : { ALPNProtocols: [clientAlpn] } });
+        secure.once("secureConnect", () => {
+          resolve(secure);
         });
-      };
-      settle(dial(upstreamLocalPort()));
-    }),
+        secure.once("error", reject);
+      });
+    },
     connectTcp: async (host, port) => await new Promise((resolve, reject) => {
       const socket = net2.connect({ host, port });
       socket.once("connect", () => {
@@ -5095,547 +5098,380 @@ function listUsageSnapshots(fs12, snapshotsDir) {
   }).sort((left, right) => left.identity.localeCompare(right.identity));
 }
 
-// src/headroom/ensure.ts
-var HEADROOM_START_TIMEOUT_MS = 12e4;
-var HEADROOM_LAUNCHER_POLL_MS = 250;
-var HeadroomStartError = class extends CliError {
-  constructor(message) {
-    super(message);
-    this.name = "HeadroomStartError";
-  }
-};
-function ensureHeadroom(params) {
-  const { paths, ports } = params;
-  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
-  let spawnedSupervisor = false;
-  let awaitingAllowlist = false;
-  for (; ; ) {
-    const state = readHeadroomState(ports.fs, paths.headroomStateFile);
-    if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
-      const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
-      if (daemonUp && state.socketPath !== void 0) {
-        const required = params.requiredAllowlistHash?.();
-        if (required === void 0 || state.allowlistHash === required) {
-          writeSession(ports.fs, paths.headroomSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), supervisorPid: state.supervisorPid });
-          return { socketPath: state.socketPath };
-        }
-        const holders = sessionsForSupervisor(ports.fs, paths.headroomSessionsDir, state.supervisorPid).filter((session) => ports.isRunning(session.pid));
-        if (holders.length > 0) {
-          throw new HeadroomStartError(
-            `the running headroom daemon was started before this launch's front door address and would refuse every request this launch sends through it. It restarts once the launches using it end (pid ${holders.map((session) => String(session.pid)).join(", ")}); end them and launch again, or launch with --no-headroom.`
-          );
-        }
-        awaitingAllowlist = true;
-      }
-      if (state.lastError !== void 0) {
-        throw new HeadroomStartError(
-          `the headroom daemon reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.headroomLogPath})`
-        );
-      }
-    } else if (!spawnedSupervisor) {
-      ports.fs.mkdirp(paths.headroomDir);
-      const created = ports.fs.writeFileExclusive(
-        paths.headroomLockFile,
-        `${JSON.stringify({ pid: params.launcherPid, at: ports.now() })}
-`
-      );
-      if (created) {
-        ports.spawnSupervisor(paths);
-        spawnedSupervisor = true;
-      } else {
-        const lock = readStartLock(ports.fs, paths.headroomLockFile);
-        if (lock === void 0 || !ports.isRunning(lock.pid)) {
-          ports.fs.removeRecursive(paths.headroomLockFile);
-          continue;
-        }
-      }
-    }
-    if (ports.now() >= deadline) {
-      const lastError = state?.lastError;
-      throw new HeadroomStartError(
-        `the headroom daemon did not become ready within ${String(HEADROOM_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (awaitingAllowlist ? " (the running daemon's allowlist does not admit this launch's front door, and it did not restart)" : "") + `. Daemon log: ${paths.headroomLogPath}`
-      );
-    }
-    ports.sleep(HEADROOM_LAUNCHER_POLL_MS);
+// src/usage/preflight.ts
+var MS_PER_SECOND2 = 1e3;
+var SECONDS_PER_MINUTE = 60;
+var MINUTES_PER_HOUR = 60;
+var HOURS_PER_DAY = 24;
+var WARNING_STATUSES = /* @__PURE__ */ new Set(["allowed_warning", "rejected"]);
+function formatAge(ms) {
+  const minutes = Math.floor(ms / (MS_PER_SECOND2 * SECONDS_PER_MINUTE));
+  if (minutes < MINUTES_PER_HOUR) {
+    return `${String(Math.max(minutes, 0))}m`;
   }
+  const hours = Math.floor(minutes / MINUTES_PER_HOUR);
+  return hours < HOURS_PER_DAY ? `${String(hours)}h` : `${String(Math.floor(hours / HOURS_PER_DAY))}d`;
 }
-
-// src/headroom/settings.ts
-var import_node_crypto8 = require("node:crypto");
-function settingsOf(config) {
+function effectiveWindow(window, nowMs) {
+  const resetsAtMs = window.resetsAt === void 0 ? void 0 : Date.parse(window.resetsAt);
+  if (resetsAtMs !== void 0 && resetsAtMs <= nowMs) {
+    return { reset: true, utilization: 0 };
+  }
   return {
-    ...config.mode === void 0 ? {} : { mode: config.mode },
-    ...config.targetRatio === void 0 ? {} : { targetRatio: config.targetRatio },
-    ...config.ccr === void 0 ? {} : { ccr: config.ccr },
-    ...config.rolloutChannel === void 0 ? {} : { rolloutChannel: config.rolloutChannel },
-    ...config.interceptToolResults === void 0 ? {} : { interceptToolResults: config.interceptToolResults },
-    ...config.readMaturation === void 0 ? {} : { readMaturation: config.readMaturation }
+    reset: false,
+    ...window.utilization === void 0 ? {} : { utilization: window.utilization },
+    ...resetsAtMs === void 0 ? {} : { resetsAtMs },
+    ...window.status === void 0 ? {} : { status: window.status }
   };
 }
-function settingsArgs(settings) {
-  return [
-    ...settings.mode === void 0 ? [] : ["--mode", settings.mode],
-    ...settings.targetRatio === void 0 ? [] : ["--target-ratio", String(settings.targetRatio)],
-    ...settings.ccr === "lossless" ? ["--lossless"] : [],
-    ...settings.ccr === "none" ? ["--no-ccr"] : [],
-    ...settings.interceptToolResults === true ? ["--intercept-tool-results"] : [],
-    ...settings.readMaturation === true ? ["--read-maturation"] : []
+function quotaWarnings(snapshot, provider, nowMs) {
+  const rateLimit = snapshot?.providers[provider]?.rateLimit;
+  const unified = rateLimit?.unified;
+  if (snapshot === void 0 || rateLimit === void 0 || unified === void 0) {
+    return [];
+  }
+  const age = formatAge(nowMs - Date.parse(rateLimit.observedAt));
+  const windows = [
+    { name: "five-hour", window: unified.fiveHour },
+    { name: "seven-day", window: unified.sevenDay }
   ];
-}
-function settingsEnv(settings) {
-  return settings.rolloutChannel === void 0 ? {} : { HEADROOM_ROLLOUT_CHANNEL: settings.rolloutChannel };
-}
-function hashSettings(settings) {
-  return (0, import_node_crypto8.createHash)("sha256").update(JSON.stringify([...settingsArgs(settings), JSON.stringify(settingsEnv(settings))])).digest("hex");
+  return windows.flatMap(({ name, window }) => {
+    const effective = window === void 0 ? void 0 : effectiveWindow(window, nowMs);
+    if (window === void 0 || effective?.status === void 0 || !WARNING_STATUSES.has(effective.status)) {
+      return [];
+    }
+    const reset = window.resetsAt === void 0 ? "" : `, resets ${window.resetsAt}`;
+    const verdict = effective.status === "rejected" ? "exhausted" : "nearly used";
+    return [`agent-shim: identity ${snapshot.identity}: the ${name} quota is ${verdict}${reset} (last seen ${age} ago)`];
+  });
 }
 
-// src/headroom/socket.ts
-var import_node_path11 = __toESM(require("node:path"), 1);
-var GROUP_OR_OTHER_BITS = 63;
-var OCTAL_RADIX = 8;
-var MODE_DIGITS = 4;
-var HEADROOM_SOCKET_SUFFIX = ".sock";
-var HEADROOM_SOCKET_NAME = /^(\d+)\.sock$/;
-var UNIX_SOCKET_PATH_MAX_BYTES = 103;
-var PLATFORMS_WITHOUT_UNIX_SOCKETS = ["win32"];
-function headroomSocketPath(paths, supervisorPid) {
-  return import_node_path11.default.join(paths.headroomSocketDir, `${String(supervisorPid)}${HEADROOM_SOCKET_SUFFIX}`);
-}
-function platformRefusal(platform) {
-  return PLATFORMS_WITHOUT_UNIX_SOCKETS.includes(platform) ? `headroom routing needs a unix domain socket, which headroom cannot serve on ${platform}; agent-shim never falls back to a TCP port for this hop` : void 0;
-}
-function ownerOnlyRefusal(label, target, stat, expected, uid) {
-  if (stat === void 0) {
-    return `the headroom ${label} ${target} does not exist`;
-  }
-  if (stat.kind === "symlink") {
-    return `the headroom ${label} ${target} is a symlink; it must be the real ${expected === "dir" ? "directory" : "socket"}`;
-  }
-  if (stat.kind !== expected) {
-    return `the headroom ${label} ${target} is not a ${expected === "dir" ? "directory" : "socket"}`;
+// src/usage/plan.ts
+var import_zod6 = require("zod");
+var PlanClassSchema = import_zod6.z.union([
+  import_zod6.z.strictObject({
+    kind: import_zod6.z.literal("subscription"),
+    /** The plan's size as a multiple of the smallest subscription tier (Max 5x is 5, Max 20x is 20). */
+    capacity: import_zod6.z.number().positive(),
+    /** False when the tier string named no multiplier and no tier this project knows, so `capacity` is the neutral 1 rather than a reading. */
+    recognised: import_zod6.z.boolean(),
+    /** The tier string the classification rests on, when the account had one. */
+    tier: import_zod6.z.string().optional()
+  }),
+  import_zod6.z.strictObject({
+    kind: import_zod6.z.literal("pay-per-use"),
+    tier: import_zod6.z.string().optional()
+  })
+]);
+var TIER_MULTIPLIER = /(?:^|_)(\d+)x$/;
+var ZERO_TIER = /(?:^|_)zero$/;
+var BASE_TIER = /(?:^|_)(?:pro|free)$/;
+function planOf(account) {
+  const tier = account?.organizationRateLimitTier ?? account?.userRateLimitTier;
+  const tierField = tier === void 0 ? {} : { tier };
+  if (tier === void 0) {
+    return { kind: "subscription", capacity: 1, recognised: false };
   }
-  if (stat.uid !== uid) {
-    return `the headroom ${label} ${target} is owned by uid ${String(stat.uid)}, not by this user (uid ${String(uid)})`;
+  if (ZERO_TIER.test(tier)) {
+    return { kind: "pay-per-use", ...tierField };
   }
-  if ((stat.mode & GROUP_OR_OTHER_BITS) !== 0) {
-    return `the headroom ${label} ${target} has mode ${stat.mode.toString(OCTAL_RADIX).padStart(MODE_DIGITS, "0")}, which lets other users reach it; it must be accessible to its owner only`;
+  const multiplier = TIER_MULTIPLIER.exec(tier)?.[1];
+  if (multiplier !== void 0) {
+    return { kind: "subscription", capacity: Number(multiplier), recognised: true, ...tierField };
   }
-  return void 0;
+  return { kind: "subscription", capacity: 1, recognised: BASE_TIER.test(tier), ...tierField };
 }
-function prepareHeadroomSocket(fs12, ports, paths, supervisorPid) {
-  const unsupported = platformRefusal(ports.platform);
-  if (unsupported !== void 0) {
-    return { refused: unsupported };
-  }
-  const socketPath = headroomSocketPath(paths, supervisorPid);
-  const length = Buffer.byteLength(socketPath, "utf8");
-  if (length > UNIX_SOCKET_PATH_MAX_BYTES) {
-    return {
-      refused: `the headroom socket path ${socketPath} is ${String(length)} bytes, longer than the ${String(UNIX_SOCKET_PATH_MAX_BYTES)} a unix socket path can hold; set AGENT_SHIM_HOME to a shorter directory`
-    };
-  }
-  if (ports.lstat(paths.headroomSocketDir)?.kind === "symlink") {
-    return { refused: `the headroom socket directory ${paths.headroomSocketDir} is a symlink; it must be the real directory` };
+
+// src/usage/rateLimit.ts
+var MS_PER_SECOND3 = 1e3;
+function epochSecondsToIso(value) {
+  if (value === void 0) {
+    return void 0;
   }
-  fs12.mkdirPrivate(paths.headroomSocketDir);
-  const refusal = ownerOnlyRefusal("socket directory", paths.headroomSocketDir, ports.lstat(paths.headroomSocketDir), "dir", ports.currentUid());
-  return refusal === void 0 ? { socketPath } : { refused: refusal };
+  const seconds = Number(value);
+  return Number.isFinite(seconds) && seconds > 0 ? new Date(seconds * MS_PER_SECOND3).toISOString() : void 0;
 }
-function pruneStaleHeadroomSockets(fs12, paths, isRunning) {
-  const removed = [];
-  for (const name of fs12.readdir(paths.headroomSocketDir)) {
-    const pid = HEADROOM_SOCKET_NAME.exec(name)?.[1];
-    if (pid === void 0 || isRunning(Number.parseInt(pid, 10))) {
-      continue;
-    }
-    fs12.removeRecursive(import_node_path11.default.join(paths.headroomSocketDir, name));
-    removed.push(name);
+function nonNegativeNumber(value) {
+  if (value === void 0 || value.trim() === "") {
+    return void 0;
   }
-  return removed;
+  const parsed = Number(value);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
 }
-
-// src/headroom/source.ts
-var import_zod6 = require("zod");
-var GIT_SPEC_RE = /git\+[^@\s]+(?:@([^\s#]+))?/;
-var COMMIT_SHA_RE = /^[0-9a-f]{40}$/i;
-var DirectUrlSchema = import_zod6.z.object({ vcs_info: import_zod6.z.object({ commit_id: import_zod6.z.string() }) });
-function isMovingGitSource(spec) {
-  const match = GIT_SPEC_RE.exec(spec);
-  if (match === null) {
-    return false;
+var UNIFIED_PREFIX = "anthropic-ratelimit-unified-";
+function unifiedWindow(headers, window) {
+  const utilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}${window}-utilization`]);
+  const resetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}${window}-reset`]);
+  const status = headers[`${UNIFIED_PREFIX}${window}-status`];
+  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
+    return void 0;
   }
-  const ref = match[1];
-  return ref === void 0 || !COMMIT_SHA_RE.test(ref);
-}
-function pinnedGitCommit(spec) {
-  const ref = GIT_SPEC_RE.exec(spec)?.[1];
-  return ref !== void 0 && COMMIT_SHA_RE.test(ref) ? ref.toLowerCase() : void 0;
+  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
 }
-
-// src/headroom/supervisor.ts
-function resolveSupervisorConfig(configured) {
+function parseUnifiedRateLimit(headers) {
+  if (!Object.keys(headers).some((name) => name.startsWith(UNIFIED_PREFIX))) {
+    return void 0;
+  }
+  const status = headers[`${UNIFIED_PREFIX}status`];
+  const fiveHour = unifiedWindow(headers, "5h");
+  const sevenDay = unifiedWindow(headers, "7d");
+  const representativeClaim = headers[`${UNIFIED_PREFIX}representative-claim`];
+  const resetAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}reset`]);
+  const overageStatus = headers[`${UNIFIED_PREFIX}overage-status`];
   return {
-    source: configured.source ?? HEADROOM_DEFAULT_SOURCE,
-    idleShutdownMinutes: configured.idleShutdownMinutes ?? HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES,
-    settings: settingsOf(configured)
+    ...status === void 0 ? {} : { status },
+    ...fiveHour === void 0 ? {} : { fiveHour },
+    ...sevenDay === void 0 ? {} : { sevenDay },
+    ...representativeClaim === void 0 ? {} : { representativeClaim },
+    ...resetAt === void 0 ? {} : { resetAt },
+    ...overageStatus === void 0 ? {} : { overageStatus }
   };
 }
-var HEADROOM_BACKOFF_BASE_MS = 500;
-var HEADROOM_BACKOFF_CAP_MS = 3e4;
-var HEADROOM_START_RETRY_BUDGET = 5;
-var HEADROOM_READY_TIMEOUT_MS = 15e3;
-var HEADROOM_POLL_MS = 1e3;
-var MS_PER_MINUTE2 = 6e4;
-function backoffForAttempt(attempt) {
-  return Math.min(HEADROOM_BACKOFF_CAP_MS, HEADROOM_BACKOFF_BASE_MS * 2 ** (attempt - 1));
+
+// src/usage/scan.ts
+var import_zod7 = require("zod");
+var AnthropicUsageSchema = import_zod7.z.looseObject({
+  input_tokens: import_zod7.z.number().int().nonnegative().nullish(),
+  output_tokens: import_zod7.z.number().int().nonnegative().nullish(),
+  cache_creation_input_tokens: import_zod7.z.number().int().nonnegative().nullish(),
+  cache_read_input_tokens: import_zod7.z.number().int().nonnegative().nullish()
+});
+var ErrorObjectSchema = import_zod7.z.looseObject({
+  type: import_zod7.z.string().optional(),
+  code: import_zod7.z.union([import_zod7.z.string(), import_zod7.z.number()]).optional(),
+  message: import_zod7.z.string().optional()
+});
+
+// src/usage/middleware.ts
+var ANTHROPIC_PROVIDER = "anthropic";
+
+// src/usage/pick.ts
+var MS_PER_SECOND4 = 1e3;
+var MS_PER_HOUR = 36e5;
+var HOURS_PER_DAY2 = 24;
+var FIVE_HOURS = 5;
+var PROMPT_CACHE_TTL_HOURS = 1;
+var PERCENT = 100;
+var SEVEN_DAYS = 7;
+var FIVE_HOUR_WINDOW_MS = FIVE_HOURS * MS_PER_HOUR;
+var SEVEN_DAY_WINDOW_MS = SEVEN_DAYS * HOURS_PER_DAY2 * MS_PER_HOUR;
+var PROMPT_CACHE_TTL_MS = PROMPT_CACHE_TTL_HOURS * MS_PER_HOUR;
+var CLASS_ORDER = { scored: 0, unknown: 1, "pay-per-use": 2, ineligible: 3 };
+function unifiedOf(state) {
+  return state?.rateLimit?.unified;
 }
-function versionSatisfies(version, source) {
-  if (version === void 0) {
-    return false;
-  }
-  const specifier = /==|>=|<=|!=|>|<|~=/.exec(source);
-  if (specifier === null) {
-    return true;
-  }
-  const installed = parseVersion(version);
-  const wanted = parseVersion(source.slice(specifier.index + specifier[0].length));
-  if (installed === void 0 || wanted === void 0) {
-    return true;
+function limitBlockedUntil(state, nowMs) {
+  const limit = state?.lastLimit;
+  if (state === void 0 || limit === void 0) {
+    return void 0;
   }
-  const cmp = compareVersions(installed, wanted);
-  switch (specifier[0]) {
-    case "==":
-      return cmp === 0;
-    case "!=":
-      return cmp !== 0;
-    case ">=":
-      return cmp >= 0;
-    case "<=":
-      return cmp <= 0;
-    case ">":
-      return cmp > 0;
-    case "<":
-      return cmp < 0;
-    case "~=":
-      return compareVersions(installed.slice(0, Math.max(0, wanted.length - 1)), wanted.slice(0, Math.max(0, wanted.length - 1))) === 0 && cmp >= 0;
-    default:
-      return true;
+  if (Date.parse(state.lastRequestAt) > Date.parse(limit.observedAt)) {
+    return void 0;
   }
+  const until = limit.resetAt === void 0 ? limit.retryAfterSeconds === void 0 ? void 0 : Date.parse(limit.observedAt) + limit.retryAfterSeconds * MS_PER_SECOND4 : Date.parse(limit.resetAt);
+  return until !== void 0 && until > nowMs ? until : void 0;
 }
-function parseVersion(input) {
-  const match = /(\d+)(\.\d+)*/.exec(input);
-  if (match === null) {
+function windowBlockedUntil(windows) {
+  const resets = windows.flatMap((window) => window.status === "rejected" && window.resetsAtMs !== void 0 ? [window.resetsAtMs] : []);
+  return resets.length === 0 ? void 0 : Math.max(...resets);
+}
+function fiveHourBurn(records) {
+  const points = [];
+  for (const record of records) {
+    const window = record.rateLimitHeaders === void 0 ? void 0 : parseUnifiedRateLimit(record.rateLimitHeaders)?.fiveHour;
+    if (window?.utilization !== void 0 && window.resetsAt !== void 0) {
+      points.push({ resetsAt: window.resetsAt, point: { atMs: Date.parse(record.at), utilization: window.utilization } });
+    }
+  }
+  const latest = points.at(-1)?.resetsAt;
+  const current = points.filter((entry) => entry.resetsAt === latest).map((entry) => entry.point);
+  const first = current.at(0);
+  const last = current.at(-1);
+  if (first === void 0 || last === void 0 || last.atMs <= first.atMs || last.utilization <= first.utilization) {
     return void 0;
   }
-  return match[0].split(".").map((part) => Number.parseInt(part, 10));
+  return (last.utilization - first.utilization) / (last.atMs - first.atMs);
 }
-function compareVersions(a, b) {
-  for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
-    const left = a[index] ?? 0;
-    const right = b[index] ?? 0;
-    if (left !== right) {
-      return left - right;
-    }
+function percent(fraction) {
+  return `${String(Math.round(fraction * PERCENT))}%`;
+}
+function describeWindow(label, window, effective, nowMs) {
+  if (effective.reset) {
+    return `${label} window has reset`;
   }
-  return 0;
+  const used = effective.utilization === void 0 ? "usage unknown" : `${percent(effective.utilization)} used`;
+  const resets = effective.resetsAtMs === void 0 ? "" : `, resets in ${formatAge(effective.resetsAtMs - nowMs)}`;
+  return `${label} ${used}${resets}${window.status === "allowed_warning" ? " (nearly used)" : ""}`;
 }
-var HEADROOM_SUPERVISOR_STILL_RUNNING = -1;
-async function runSupervisor(initialConfig, ports, options = {}) {
-  const { fs: fs12, paths } = ports;
-  let config = initialConfig;
-  const previousState = readHeadroomState(fs12, paths.headroomStateFile);
-  if (previousState?.supervisorPid !== void 0 && previousState.supervisorPid !== ports.ownPid && ports.isRunning(previousState.supervisorPid)) {
-    ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: supervisor ${String(previousState.supervisorPid)} already owns the daemon; exiting`);
-    return 0;
+function capacityOf(plan) {
+  return plan.kind === "subscription" ? plan.capacity : 1;
+}
+function assess(member, nowMs) {
+  const plan = planOf(member.account);
+  const planReasons = plan.kind === "pay-per-use" ? ["billed by use (no plan allowance)"] : plan.recognised ? [`${String(plan.capacity)}x plan`] : [`plan tier ${plan.tier === void 0 ? "not known" : `"${plan.tier}" not recognised`}, counted as 1x`];
+  const base = { identity: member.identity, plan };
+  if (member.readError !== void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: [`usage state unreadable: ${member.readError}`, ...planReasons] } };
   }
-  let installedSource = previousState?.installedSource;
-  const ownsState = () => {
-    const owner = readHeadroomState(fs12, paths.headroomStateFile)?.supervisorPid;
-    return owner === void 0 || owner === ports.ownPid || !ports.isRunning(owner);
-  };
-  const writeOwnState = (state) => {
-    if (!ownsState()) {
-      return false;
-    }
-    writeHeadroomState(fs12, paths.headroomStateFile, state);
-    return true;
-  };
-  const fail = (message) => {
-    if (writeOwnState({ lastError: message })) {
-      fs12.removeRecursive(paths.headroomLockFile);
-    }
-    ports.log(`agent-shim headroom supervisor: ${message}`);
-    return 1;
-  };
-  const ensureInstalled = () => {
-    const version2 = ports.headroomVersion();
-    const versionOk = version2 !== void 0 && versionSatisfies(version2, config.source);
-    const pinned = pinnedGitCommit(config.source);
-    const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
-    if (versionOk && commitOk && (installedSource === void 0 || installedSource === config.source)) {
-      installedSource = config.source;
-      return true;
-    }
-    ports.log(`agent-shim headroom supervisor: installing headroom from ${config.source}`);
-    const result = ports.install(config.source);
-    if (!result.ok) {
-      return false;
+  const state = member.snapshot?.providers[ANTHROPIC_PROVIDER];
+  const unified = unifiedOf(state);
+  if (member.snapshot === void 0 || state === void 0 || unified === void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: ["no usage recorded yet, so its quota is unknown (turn on trackUsage for it)", ...planReasons] } };
+  }
+  const observedAgo = state.rateLimit === void 0 ? "" : ` (last seen ${formatAge(nowMs - Date.parse(state.rateLimit.observedAt))} ago)`;
+  const fiveHourWindow = unified.fiveHour;
+  const sevenDayWindow = unified.sevenDay;
+  const five = fiveHourWindow === void 0 ? void 0 : effectiveWindow(fiveHourWindow, nowMs);
+  const seven = sevenDayWindow === void 0 ? void 0 : effectiveWindow(sevenDayWindow, nowMs);
+  const windowReasons = [
+    ...fiveHourWindow === void 0 || five === void 0 ? [] : [describeWindow("5h", fiveHourWindow, five, nowMs)],
+    ...sevenDayWindow === void 0 || seven === void 0 ? [] : [describeWindow("7d", sevenDayWindow, seven, nowMs)]
+  ];
+  const blockedUntil = Math.max(
+    windowBlockedUntil([five, seven].flatMap((window) => window === void 0 ? [] : [window])) ?? 0,
+    limitBlockedUntil(state, nowMs) ?? 0
+  );
+  if (blockedUntil > nowMs) {
+    if (unified.overageStatus === "allowed") {
+      return { candidate: { ...base, class: "pay-per-use", reasons: [`plan exhausted until ${new Date(blockedUntil).toISOString()}, continues as extra usage`, ...windowReasons, ...planReasons] } };
     }
-    installedSource = config.source;
-    return true;
-  };
-  const socket = prepareHeadroomSocket(fs12, ports.socketTrust, paths, ports.ownPid);
-  if (socket.refused !== void 0) {
-    return fail(socket.refused);
+    return { candidate: { ...base, class: "ineligible", blockedUntilMs: blockedUntil, reasons: [`refused until ${new Date(blockedUntil).toISOString()} (in ${formatAge(blockedUntil - nowMs)})`, ...windowReasons, ...planReasons] } };
   }
-  const { socketPath } = socket;
-  pruneStaleHeadroomSockets(fs12, paths, ports.isRunning);
-  if (!ensureInstalled()) {
-    return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+  if (plan.kind === "pay-per-use" || fiveHourWindow === void 0 && sevenDayWindow === void 0) {
+    return { candidate: { ...base, class: "pay-per-use", reasons: [...plan.kind === "pay-per-use" ? planReasons : ["no plan windows reported, so usage bills as extra usage"]] } };
   }
-  const version = ports.headroomVersion() ?? "unknown";
-  writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
-  ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: managing headroom on allowlist [${allowlistOf(ports).join(", ")}]`);
-  const orphanPid = previousState?.headroomPid;
-  if (orphanPid !== void 0 && ports.isRunning(orphanPid)) {
-    ports.log(`agent-shim headroom supervisor: stopping daemon pid ${String(orphanPid)} left behind by the previous supervisor`);
-    ports.stopProcess(orphanPid);
+  const basis = seven?.utilization !== void 0 ? { window: seven, windowMs: SEVEN_DAY_WINDOW_MS } : five?.utilization !== void 0 ? { window: five, windowMs: FIVE_HOUR_WINDOW_MS } : void 0;
+  if (basis?.window.utilization === void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: ["quota windows reported no utilisation", ...windowReasons, ...planReasons] } };
   }
-  let headroomPid;
-  let runningHash;
-  let runningSettingsHash;
-  let consecutiveFailures = 0;
-  let idleSince;
-  let superseded = false;
-  let ticks = 0;
-  for (; ; ) {
-    if (options.tickLimit !== void 0 && ticks >= options.tickLimit) {
-      return HEADROOM_SUPERVISOR_STILL_RUNNING;
+  const remaining = Math.max(0, 1 - basis.window.utilization);
+  const untilResetMs = basis.window.resetsAtMs === void 0 ? basis.windowMs : Math.max(basis.window.resetsAtMs - nowMs, MS_PER_SECOND4);
+  const score = remaining * plan.capacity / (untilResetMs / MS_PER_HOUR);
+  const fiveRemaining = five?.utilization === void 0 ? void 0 : Math.max(0, 1 - five.utilization);
+  const fiveUntil = five?.resetsAtMs === void 0 ? FIVE_HOUR_WINDOW_MS : Math.max(five.resetsAtMs - nowMs, MS_PER_SECOND4);
+  const burn = fiveHourBurn(member.records);
+  return {
+    candidate: { ...base, class: "scored", score, reasons: [...windowReasons.map((reason, index) => index === windowReasons.length - 1 ? `${reason}${observedAgo}` : reason), ...planReasons] },
+    ...fiveRemaining === void 0 ? {} : { fiveHour: { remaining: fiveRemaining, untilResetMs: fiveUntil } },
+    ...burn === void 0 ? {} : { burn }
+  };
+}
+function rankPool(input) {
+  const { members, nowMs } = input;
+  const assessments = members.map((member) => assess(member, nowMs));
+  const demands = assessments.flatMap(({ candidate, burn }) => burn === void 0 ? [] : [burn * capacityOf(candidate.plan)]);
+  const sharedDemand = demands.length === 0 ? void 0 : Math.max(...demands);
+  const candidates = assessments.map((assessment) => {
+    const { candidate, fiveHour, burn } = assessment;
+    const pace = burn ?? (sharedDemand === void 0 ? void 0 : sharedDemand / capacityOf(candidate.plan));
+    if (candidate.class !== "scored" || fiveHour === void 0 || pace === void 0) {
+      return { ...candidate, feasible: true };
     }
-    ticks += 1;
-    config = ports.readConfig();
-    const settingsHash = hashSettings(config.settings);
-    const allowlist = allowlistOf(ports);
-    const allowlistHash = hashAllowlist(allowlist);
-    pruneDeadSessions(fs12, paths.headroomSessionsDir, ports.isRunning);
-    const ownsNow = ownsState();
-    if (!ownsNow && !superseded) {
-      ports.log("agent-shim headroom supervisor: another supervisor now owns the state file; serving this daemon's own sessions until they end");
+    const runsDryInMs = fiveHour.remaining / pace;
+    if (runsDryInMs >= fiveHour.untilResetMs) {
+      return { ...candidate, feasible: true };
     }
-    superseded = !ownsNow;
-    const crashed = headroomPid !== void 0 && !ports.isRunning(headroomPid);
-    if (headroomPid === void 0 || crashed) {
-      if (crashed) {
-        ports.log(`agent-shim headroom supervisor: headroom pid ${String(headroomPid)} died`);
-        headroomPid = void 0;
-        runningHash = void 0;
-        runningSettingsHash = void 0;
-        writeOwnState({
-          supervisorPid: ports.ownPid,
-          version,
-          installedSource
-        });
-      }
-      if (consecutiveFailures >= HEADROOM_START_RETRY_BUDGET) {
-        return fail(`headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up`);
-      }
-      if (installedSource !== config.source && !ensureInstalled()) {
-        return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
-      }
-      const pid = ports.spawnHeadroom(socketPath, allowlist, config.settings);
-      const ready = await waitUntilReady(ports, socketPath);
-      if (ready) {
-        consecutiveFailures = 0;
-        headroomPid = pid;
-        runningHash = allowlistHash;
-        runningSettingsHash = settingsHash;
-        const recorded = writeOwnState({
-          supervisorPid: ports.ownPid,
-          headroomPid: pid,
-          socketPath,
-          version,
-          allowlistHash,
-          settingsHash,
-          installedSource: config.source
-        });
-        if (recorded) {
-          fs12.removeRecursive(paths.headroomLockFile);
-        }
-        idleSince = void 0;
-        ports.log(`agent-shim headroom supervisor: headroom pid ${String(pid)} ready on unix socket ${socketPath}`);
-      } else {
-        ports.stopProcess(pid);
-        consecutiveFailures += 1;
-        ports.log(
-          `agent-shim headroom supervisor: headroom did not become ready on unix socket ${socketPath} (attempt ${String(consecutiveFailures)} of ${String(HEADROOM_START_RETRY_BUDGET)})`
-        );
-        await ports.sleep(backoffForAttempt(consecutiveFailures));
-        continue;
-      }
-    } else {
-      if (runningHash !== allowlistHash || runningSettingsHash !== settingsHash || installedSource !== config.source) {
-        if (sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid).length === 0) {
-          ports.log("agent-shim headroom supervisor: configuration drifted and no sessions are live; restarting headroom");
-          ports.stopProcess(headroomPid);
-          headroomPid = void 0;
-          runningHash = void 0;
-          runningSettingsHash = void 0;
-          continue;
-        }
-      }
-      const sessions = sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid);
-      if (sessions.length === 0) {
-        idleSince ??= ports.now();
-        const idleMs = ports.now() - idleSince;
-        if (idleMs >= config.idleShutdownMinutes * MS_PER_MINUTE2) {
-          ports.log(
-            `agent-shim headroom supervisor: no sessions for ${String(config.idleShutdownMinutes)} minute(s); stopping headroom and exiting`
-          );
-          ports.stopProcess(headroomPid);
-          writeOwnState({ version });
-          return 0;
-        }
-      } else {
-        idleSince = void 0;
-      }
-    }
-    await ports.sleep(HEADROOM_POLL_MS);
-  }
-}
-function currentHeadroomAllowlist(fs12, paths) {
-  const providers = readAllProviders(fs12, paths.providersDir).map((entry) => entry.provider);
-  return headroomAllowlist(headroomUpstreams(providers, frontDoorOrigin(readFrontDoorState(fs12, paths.frontdoorStateFile))));
-}
-function allowlistOf(ports) {
-  return currentHeadroomAllowlist(ports.fs, ports.paths);
-}
-async function waitUntilReady(ports, socketPath) {
-  const deadline = ports.now() + HEADROOM_READY_TIMEOUT_MS;
-  for (; ; ) {
-    if (await ports.ready(socketPath)) {
-      return true;
-    }
-    if (ports.now() >= deadline) {
-      return false;
-    }
-    await ports.sleep(HEADROOM_POLL_MS);
-  }
-}
-
-// src/launcher/guard.ts
-var AMBIENT_CREDENTIAL_VARS = [
-  "ANTHROPIC_API_KEY",
-  "ANTHROPIC_AUTH_TOKEN",
-  "CLAUDE_CODE_OAUTH_TOKEN",
-  "CLAUDE_CODE_USE_BEDROCK",
-  "CLAUDE_CODE_USE_VERTEX",
-  "CLAUDE_CODE_USE_FOUNDRY"
-];
-function detectAmbientCredential(env, injected) {
-  for (const variable of AMBIENT_CREDENTIAL_VARS) {
-    const value = env[variable];
-    if (value === void 0 || value === "") {
-      continue;
-    }
-    if (injected?.variable === variable && value === injected.token) {
-      continue;
+    return { ...candidate, feasible: false, reasons: [`5h window would run dry in ${formatAge(runsDryInMs)}, before it resets in ${formatAge(fiveHour.untilResetMs)}`, ...candidate.reasons] };
+  });
+  const ordered = [...candidates].sort(
+    (left, right) => CLASS_ORDER[left.class] - CLASS_ORDER[right.class] || Number(right.feasible) - Number(left.feasible) || (right.score ?? 0) - (left.score ?? 0) || left.identity.localeCompare(right.identity)
+  );
+  const sticky = input.sticky;
+  const stickyIndex = sticky === void 0 ? -1 : ordered.findIndex((candidate) => candidate.identity === sticky.identity);
+  const stickyCandidate = ordered[stickyIndex];
+  if (sticky !== void 0 && stickyCandidate?.class === "scored" && stickyCandidate.feasible) {
+    const ageMs = nowMs - Date.parse(sticky.at);
+    const warm = ageMs <= PROMPT_CACHE_TTL_MS;
+    if (input.resuming || warm) {
+      const why = warm ? `used here ${formatAge(ageMs)} ago, prompt cache still warm` : "resuming a conversation started on this account";
+      ordered.splice(stickyIndex, 1);
+      ordered.unshift({ ...stickyCandidate, reasons: [why, ...stickyCandidate.reasons] });
     }
-    return { variable };
-  }
-  return void 0;
-}
-function formatAmbientCredentialGuardMessage(variable, identityName) {
-  const identitySetCommand = identityName === void 0 ? "agent-shim identity set <name> --allow-ambient-credential" : `agent-shim identity set ${identityName} --allow-ambient-credential`;
-  return [
-    `error: ${variable} is set in the environment. This identity's isolated`,
-    "credential would be bypassed \u2014 every identity authenticates as this same key",
-    "while it's set. Unset it, or if this is deliberate, opt in per-launch with",
-    "AGENT_SHIM_ALLOW_AMBIENT_CREDENTIAL=1, or persistently for this identity with",
-    `\`${identitySetCommand}\`.`
-  ].join("\n");
-}
-function evaluateAmbientCredentialGuard(params) {
-  const detected = detectAmbientCredential(params.env, params.injectedCredential);
-  if (detected === void 0) {
-    return { ok: true };
-  }
-  if (params.allowAmbientCredentialOverride || params.allowAmbientCredential || params.providerSelected === true) {
-    return { ok: true };
   }
+  const pick = ordered.find((candidate) => candidate.class !== "ineligible");
+  const returns = ordered.flatMap((candidate) => candidate.blockedUntilMs === void 0 ? [] : [{ identity: candidate.identity, atMs: candidate.blockedUntilMs }]);
+  const earliestReturn = returns.length === 0 ? void 0 : returns.reduce((soonest, entry) => entry.atMs < soonest.atMs ? entry : soonest);
   return {
-    ok: false,
-    variable: detected.variable,
-    message: formatAmbientCredentialGuardMessage(detected.variable, params.identityName)
+    candidates: ordered,
+    ...pick === void 0 ? { ...earliestReturn === void 0 ? {} : { earliestReturn } } : { pick }
   };
 }
 
-// src/paths.ts
-var import_node_fs2 = __toESM(require("node:fs"), 1);
-var import_node_os = __toESM(require("node:os"), 1);
-var import_node_path12 = __toESM(require("node:path"), 1);
-function resolveAgentShimHome(env = process.env, home = import_node_os.default.homedir(), isDirectory = isExistingDirectory) {
-  const fromEnv = env.AGENT_SHIM_HOME;
-  if (fromEnv !== void 0 && fromEnv !== "") {
-    return fromEnv;
-  }
-  const current = import_node_path12.default.join(home, HOME_DIRNAME);
-  const legacy = import_node_path12.default.join(home, LEGACY_HOME_DIRNAME);
-  return !isDirectory(current) && isDirectory(legacy) ? legacy : current;
+// src/usage/poolPick.ts
+var import_node_path11 = __toESM(require("node:path"), 1);
+var import_zod8 = require("zod");
+
+// src/usage/store.ts
+var DAY_MS2 = 864e5;
+var DAYS_IN_WEEK = 7;
+var USAGE_RETENTION_MS = DAYS_IN_WEEK * DAY_MS2;
+
+// src/usage/poolPick.ts
+var SCHEMA_VERSION = 1;
+var PickEntrySchema = import_zod8.z.strictObject({ identity: import_zod8.z.string().min(1), at: import_zod8.z.iso.datetime() });
+var PicksFileSchema = import_zod8.z.strictObject({
+  schemaVersion: import_zod8.z.literal(SCHEMA_VERSION),
+  picks: import_zod8.z.record(import_zod8.z.string().min(1), PickEntrySchema)
+});
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
 }
-function isExistingDirectory(candidate) {
-  return import_node_fs2.default.statSync(candidate, { throwIfNoEntry: false })?.isDirectory() ?? false;
+function loadPoolMembers(fs12, paths, identities, nowMs) {
+  const windowStartMs = nowMs - FIVE_HOUR_WINDOW_MS;
+  const log = readUsageLog(fs12, paths.usageLogDir, { sinceMs: windowStartMs });
+  return identities.map((identity) => {
+    const records = log.records.filter((record) => record.identity === identity && record.provider === ANTHROPIC_PROVIDER && Date.parse(record.at) >= windowStartMs);
+    try {
+      const snapshot = readUsageSnapshot(fs12, paths.usageSnapshotsDir, identity);
+      const account = readAccountMetadata(fs12, paths.identitiesDir, identity) ?? snapshot?.account;
+      return { identity, records, ...snapshot === void 0 ? {} : { snapshot }, ...account === void 0 ? {} : { account } };
+    } catch (error) {
+      if (error instanceof UsageSnapshotError || error instanceof AccountMetadataError) {
+        return { identity, records, readError: errorMessage(error) };
+      }
+      throw error;
+    }
+  });
 }
-function resolveClaudeHome() {
-  const fromEnv = process.env.AGENT_SHIM_CLAUDE_HOME;
-  if (fromEnv !== void 0 && fromEnv !== "") {
-    return fromEnv;
+function rankPoolFromStore(params) {
+  return rankPool({
+    members: loadPoolMembers(params.fs, params.paths, params.identities, params.nowMs),
+    nowMs: params.nowMs,
+    resuming: params.resuming,
+    ...params.sticky === void 0 ? {} : { sticky: params.sticky }
+  });
+}
+function readPicksFile(fs12, file) {
+  const empty = { schemaVersion: SCHEMA_VERSION, picks: {} };
+  const raw = fs12.readFileUtf8(file);
+  if (raw === void 0) {
+    return { file: empty };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return { file: empty, problem: `${file} is not valid JSON` };
   }
-  return import_node_path12.default.join(import_node_os.default.homedir(), ".claude");
+  const result = PicksFileSchema.safeParse(parsed);
+  return result.success ? { file: result.data } : { file: empty, problem: `${file} is not a picks file this agent-shim can read` };
 }
-function buildLayoutPaths(root) {
-  return {
-    root,
-    identitiesDir: import_node_path12.default.join(root, "identities"),
-    configProfilesDir: import_node_path12.default.join(root, "config-profiles"),
-    providersDir: import_node_path12.default.join(root, "providers"),
-    directoryRulesFile: import_node_path12.default.join(root, "directory-rules.json"),
-    activeIdentityFile: import_node_path12.default.join(root, "active-identity"),
-    globalConfigFile: import_node_path12.default.join(root, "config.json"),
-    categoriesLocalFile: import_node_path12.default.join(root, "categories.local.json"),
-    claudeShimFile: import_node_path12.default.join(root, "claude-shim.json"),
-    headroomDir: import_node_path12.default.join(root, "headroom"),
-    headroomStateFile: import_node_path12.default.join(root, "headroom", `state.v${String(HEADROOM_STATE_SCHEMA_VERSION)}.json`),
-    headroomSocketDir: import_node_path12.default.join(root, "headroom", "run"),
-    headroomLockFile: import_node_path12.default.join(root, "headroom", "start.lock"),
-    headroomSessionsDir: import_node_path12.default.join(root, "headroom", "sessions"),
-    logsDir: import_node_path12.default.join(root, "logs"),
-    headroomLogPath: import_node_path12.default.join(root, "logs", "headroom.log"),
-    frontdoorDir: import_node_path12.default.join(root, "frontdoor"),
-    frontdoorCaDir: import_node_path12.default.join(root, "frontdoor", "ca"),
-    frontdoorCaCertFile: import_node_path12.default.join(root, "frontdoor", "ca", "ca.pem"),
-    frontdoorCaKeyFile: import_node_path12.default.join(root, "frontdoor", "ca", "ca.key"),
-    frontdoorCaBundlesDir: import_node_path12.default.join(root, "frontdoor", "ca", "bundles"),
-    frontdoorStateFile: import_node_path12.default.join(root, "frontdoor", "state.json"),
-    frontdoorLockFile: import_node_path12.default.join(root, "frontdoor", "start.lock"),
-    frontdoorControlTokenFile: import_node_path12.default.join(root, "frontdoor", "control-token"),
-    frontdoorSessionsDir: import_node_path12.default.join(root, "frontdoor", "sessions"),
-    frontdoorLogPath: import_node_path12.default.join(root, "logs", "frontdoor.log"),
-    usageDir: import_node_path12.default.join(root, "usage"),
-    usageLogDir: import_node_path12.default.join(root, "usage", "log"),
-    usageSnapshotsDir: import_node_path12.default.join(root, "usage", "snapshots"),
-    usagePicksFile: import_node_path12.default.join(root, "usage", "picks.json")
-  };
+function readStickyPick(fs12, picksFile, directory) {
+  const read = readPicksFile(fs12, picksFile);
+  const entry = read.file.picks[directory];
+  return { ...entry === void 0 ? {} : { sticky: entry }, ...read.problem === void 0 ? {} : { problem: read.problem } };
 }
-function resolveLayoutPaths() {
-  return buildLayoutPaths(resolveAgentShimHome());
+function recordStickyPick(fs12, picksFile, directory, identity, nowMs) {
+  const current = readPicksFile(fs12, picksFile).file.picks;
+  const kept = Object.entries(current).filter(([, entry]) => nowMs - Date.parse(entry.at) <= USAGE_RETENTION_MS);
+  const next = { schemaVersion: SCHEMA_VERSION, picks: { ...Object.fromEntries(kept), [directory]: { identity, at: new Date(nowMs).toISOString() } } };
+  fs12.mkdirPrivate(import_node_path11.default.dirname(picksFile));
+  fs12.writeFilePrivate(picksFile, `${JSON.stringify(next, null, 2)}
+`);
 }
 
-// src/identityStore.ts
-var import_node_fs4 = __toESM(require("node:fs"), 1);
-var import_node_path15 = __toESM(require("node:path"), 1);
-
 // src/launcher/identity.ts
-var import_node_path13 = __toESM(require("node:path"), 1);
+var import_node_path12 = __toESM(require("node:path"), 1);
 function poolNameOf(selector) {
   return selector.startsWith(POOL_SELECTOR_PREFIX) ? selector.slice(POOL_SELECTOR_PREFIX.length) : void 0;
 }
@@ -5684,1445 +5520,1775 @@ function decideConfigProfile(params) {
   return { source: "none" };
 }
 function loadIdentity(identitiesDir, name, fs12) {
-  return loadConfigFile(import_node_path13.default.join(identitiesDir, name, "identity.json"), IdentitySchema, fs12.readConfigFile);
+  return loadConfigFile(import_node_path12.default.join(identitiesDir, name, "identity.json"), IdentitySchema, fs12.readConfigFile);
 }
 
-// src/configProfilesStore.ts
-var import_node_fs3 = __toESM(require("node:fs"), 1);
-var import_node_path14 = __toESM(require("node:path"), 1);
-var ProfileNotFoundError = class extends CliError {
-  constructor(profileName) {
-    super(`No configuration profile named "${profileName}". Run \`agent-shim profile add ${profileName}\` first.`);
-    this.profileName = profileName;
-    this.name = "ProfileNotFoundError";
-  }
-  profileName;
-};
-var ProfileAlreadyExistsError = class extends CliError {
-  constructor(profileName) {
-    super(`A configuration profile named "${profileName}" already exists.`);
-    this.profileName = profileName;
-    this.name = "ProfileAlreadyExistsError";
-  }
-  profileName;
-};
-var InvalidCategoryNameError = class extends CliError {
-  constructor(categoryName) {
-    super(`"${categoryName}" is not a category a configuration profile may toggle (runtime, history, knowledge, settings).`);
-    this.categoryName = categoryName;
-    this.name = "InvalidCategoryNameError";
-  }
-  categoryName;
-};
-function profileJsonPath(paths, name) {
-  return import_node_path14.default.join(paths.configProfilesDir, `${name}.json`);
+// src/launcher/pool.ts
+var RESUME_FLAGS = /* @__PURE__ */ new Set(["--continue", "-c", "--resume", "-r"]);
+var TERMINATOR = "--";
+var REASONS_LOGGED = 3;
+function splitMembers(pool, paths, fs12) {
+  const exists = (name) => loadIdentity(paths.identitiesDir, name, fs12) !== void 0;
+  return { present: pool.identities.filter(exists), missing: pool.identities.filter((name) => !exists(name)) };
 }
-function profileExists(paths, name) {
-  return import_node_fs3.default.existsSync(profileJsonPath(paths, name));
+function isResuming(passthrough) {
+  const end = passthrough.indexOf(TERMINATOR);
+  return (end === -1 ? passthrough : passthrough.slice(0, end)).some((token) => RESUME_FLAGS.has(token));
 }
-function requireProfileExists(paths, name) {
-  if (!profileExists(paths, name)) {
-    throw new ProfileNotFoundError(name);
+function resolvePoolLaunch(params) {
+  const { poolName, log } = params;
+  const pool = params.pools?.[poolName];
+  if (pool === void 0) {
+    return { ok: false, message: `agent-shim: no pool named "${poolName}" (selected via ${params.selectedVia}). Run \`agent-shim pool add ${poolName} --identity <name>...\` first.` };
   }
-}
-function readProfile(paths, name) {
-  return readJson(profileJsonPath(paths, name), ConfigProfileSchema);
-}
-function createProfile(paths, name, extendsList, description) {
-  if (profileExists(paths, name)) {
-    throw new ProfileAlreadyExistsError(name);
+  const { present: identities, missing } = splitMembers(pool, params.paths, params.fs);
+  for (const name of missing) {
+    log.warn(`agent-shim: pool "${poolName}" names identity "${name}", which does not exist; skipping it`);
   }
-  const filePath = profileJsonPath(paths, name);
-  const parsed = ConfigProfileSchema.safeParse({
-    ...description === void 0 ? {} : { description },
-    ...extendsList !== void 0 && extendsList.length > 0 ? { extends: [...extendsList] } : {}
-  });
-  if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+  if (identities.length === 0) {
+    return { ok: false, message: `agent-shim: no member of pool "${poolName}" is an existing identity.` };
   }
-  writeJsonAtomic(filePath, parsed.data);
-  return parsed.data;
-}
-function listProfiles(paths) {
-  if (!import_node_fs3.default.existsSync(paths.configProfilesDir)) {
-    return [];
+  const resuming = isResuming(params.passthrough);
+  const stickyRead = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd);
+  if (stickyRead.problem !== void 0) {
+    log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
   }
-  const names = import_node_fs3.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort();
-  const result = [];
-  for (const name of names) {
-    const profile = readProfile(paths, name);
-    if (profile !== void 0) {
-      result.push({ name, profile });
+  for (; ; ) {
+    const nowMs = params.now();
+    const ranking = rankPoolFromStore({ fs: params.usageFs, paths: params.paths, identities, nowMs, resuming, ...stickyRead.sticky === void 0 ? {} : { sticky: stickyRead.sticky } });
+    const { pick, earliestReturn } = ranking;
+    if (pick !== void 0) {
+      recordStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd, pick.identity, nowMs);
+      return { ok: true, identity: pick.identity, explanation: `pool ${poolName}: ${pick.reasons.slice(0, REASONS_LOGGED).join("; ")}` };
     }
-  }
-  return result;
-}
-function globalConfigPath(paths) {
-  return paths.globalConfigFile;
-}
-function readGlobalConfig(paths) {
-  return readJson(globalConfigPath(paths), GlobalConfigSchema);
-}
-function setGlobalDefaultProfile(paths, name) {
-  return applyPatch(
-    globalConfigPath(paths),
-    GlobalConfigSchema,
-    { defaultConfigProfile: name },
-    { defaults: {} }
-  );
-}
-function validateCategoryNames(patch) {
-  for (const key of Object.keys(patch)) {
-    if (!isOverridableCategory(key)) {
-      throw new InvalidCategoryNameError(key);
+    if (earliestReturn === void 0) {
+      return { ok: false, message: `agent-shim: no member of pool "${poolName}" can be picked.` };
     }
+    const until = new Date(earliestReturn.atMs).toISOString();
+    if (!params.wait) {
+      return {
+        ok: false,
+        message: `agent-shim: every member of pool "${poolName}" is refused right now; the earliest, ${earliestReturn.identity}, returns at ${until} (in ${formatAge(earliestReturn.atMs - nowMs)}). Pass --wait to sleep until then.`
+      };
+    }
+    log.info(`agent-shim: every member of pool "${poolName}" is refused; waiting until ${until} for ${earliestReturn.identity}`);
+    params.sleep(Math.max(earliestReturn.atMs - nowMs, 0));
   }
 }
-function setProfileCategories(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const expandedPatch = expandAllCategoryKey(patch);
-  validateCategoryNames(expandedPatch);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedCategories = { ...existing.categories, ...expandedPatch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { categories: mergedCategories });
-}
-function setProfileEntries(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedEntries = { ...existing.entries, ...patch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { entries: mergedEntries });
-}
-function setProfileLaunchFlags(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedLaunch = { ...existing.launch, ...patch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
-    // Read as `unknown` so the check sees the `undefined` a cleared key holds, which LaunchFlags' optional properties hide from the value type.
-    launch: Object.values(mergedLaunch).every((value) => value === void 0) ? void 0 : mergedLaunch
-  });
+
+// src/poolPickReport.ts
+function candidateView(candidate) {
+  return {
+    identity: candidate.identity,
+    class: candidate.class,
+    ...candidate.score === void 0 ? {} : { score: candidate.score },
+    feasible: candidate.feasible,
+    ...candidate.blockedUntilMs === void 0 ? {} : { blockedUntil: new Date(candidate.blockedUntilMs).toISOString() },
+    plan: candidate.plan,
+    reasons: [...candidate.reasons]
+  };
 }
-function setProfileMetadata(paths, name, patch) {
-  requireProfileExists(paths, name);
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
-    ...patch.extends === void 0 ? {} : { extends: patch.extends.length === 0 ? void 0 : [...patch.extends] },
-    ...patch.description === void 0 ? {} : { description: patch.description === false ? void 0 : patch.description }
+function collectPoolPick(params) {
+  const { present, missing } = splitMembers(params.pool, params.paths, params.fs);
+  const sticky = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.directory);
+  const ranking = rankPoolFromStore({
+    fs: params.usageFs,
+    paths: params.paths,
+    identities: present,
+    nowMs: params.nowMs,
+    resuming: false,
+    ...sticky.sticky === void 0 ? {} : { sticky: sticky.sticky }
   });
-}
-function removeProfile(paths, name) {
-  requireProfileExists(paths, name);
-  import_node_fs3.default.rmSync(profileJsonPath(paths, name));
+  return {
+    pool: params.poolName,
+    directory: params.directory,
+    ...ranking.pick === void 0 ? {} : { pick: ranking.pick.identity },
+    candidates: ranking.candidates.map(candidateView),
+    missing: [...missing],
+    ...ranking.earliestReturn === void 0 ? {} : { earliestReturn: { identity: ranking.earliestReturn.identity, at: new Date(ranking.earliestReturn.atMs).toISOString() } },
+    ...sticky.problem === void 0 ? {} : { stickyProblem: sticky.problem }
+  };
 }
 
-// src/poolStore.ts
-var PoolNotFoundError = class extends CliError {
-  constructor(poolName) {
-    super(`No pool named "${poolName}". Run \`agent-shim pool add ${poolName} --identity <name>...\` first.`);
-    this.poolName = poolName;
-    this.name = "PoolNotFoundError";
-  }
-  poolName;
-};
-var PoolAlreadyExistsError = class extends CliError {
-  constructor(poolName) {
-    super(`A pool named "${poolName}" already exists. Use \`agent-shim pool set ${poolName}\` to change its members.`);
-    this.poolName = poolName;
-    this.name = "PoolAlreadyExistsError";
-  }
-  poolName;
-};
-var InvalidPoolNameError = class extends CliError {
-  constructor(attemptedName) {
-    super(`"${attemptedName}" is not a valid pool name: it must start with a letter or number and may then contain letters, numbers, dots, hyphens and underscores.`);
-    this.attemptedName = attemptedName;
-    this.name = "InvalidPoolNameError";
-  }
-  attemptedName;
-};
-function readPools(paths) {
-  return readGlobalConfig(paths)?.pools ?? {};
-}
-function requirePool(paths, name) {
-  const pool = readPools(paths)[name];
-  if (pool === void 0) {
-    throw new PoolNotFoundError(name);
-  }
-  return pool;
-}
-function writePools(paths, pools) {
-  applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
-}
-function addPool(paths, name, identities) {
-  if (!PoolNameSchema.safeParse(name).success) {
-    throw new InvalidPoolNameError(name);
-  }
-  const pools = readPools(paths);
-  if (pools[name] !== void 0) {
-    throw new PoolAlreadyExistsError(name);
-  }
-  const pool = { identities: [...identities] };
-  writePools(paths, { ...pools, [name]: pool });
-  return pool;
-}
-function setPool(paths, name, identities) {
-  requirePool(paths, name);
-  const pool = { identities: [...identities] };
-  writePools(paths, { ...readPools(paths), [name]: pool });
-  return pool;
-}
-function removePool(paths, name) {
-  requirePool(paths, name);
-  const remaining = Object.fromEntries(Object.entries(readPools(paths)).filter(([existing]) => existing !== name));
-  writePools(paths, remaining);
-}
+// src/usage/pickReportSchema.ts
+var import_zod9 = require("zod");
+var PoolPickCandidateViewSchema = import_zod9.z.strictObject({
+  identity: import_zod9.z.string(),
+  /** In pick order: `scored` has usable quota data, `unknown` has none, `pay-per-use` bills by use, `ineligible` is refused right now. */
+  class: import_zod9.z.enum(["scored", "unknown", "pay-per-use", "ineligible"]),
+  /** Plan-size-weighted remaining quota per hour until its reset; present for `scored` only. */
+  score: import_zod9.z.number().optional(),
+  /** False when the five-hour window would run dry, at the observed pace, before it resets. */
+  feasible: import_zod9.z.boolean(),
+  /** When an `ineligible` member can be used again, as an ISO instant. */
+  blockedUntil: import_zod9.z.iso.datetime().optional(),
+  plan: PlanClassSchema,
+  /** The facts behind the class and score, in the order they matter. */
+  reasons: import_zod9.z.array(import_zod9.z.string())
+});
+var PoolPickReportSchema = import_zod9.z.strictObject({
+  pool: import_zod9.z.string(),
+  directory: import_zod9.z.string(),
+  /** The member a launch would run as, absent when every member is refused. */
+  pick: import_zod9.z.string().optional(),
+  candidates: import_zod9.z.array(PoolPickCandidateViewSchema),
+  /** Members that name an identity that does not exist; a launch skips them. */
+  missing: import_zod9.z.array(import_zod9.z.string()),
+  /** When nothing can be picked, the soonest any member returns. */
+  earliestReturn: import_zod9.z.strictObject({ identity: import_zod9.z.string(), at: import_zod9.z.iso.datetime() }).optional(),
+  /** Why the last-pick record could not be read, when that is the case. */
+  stickyProblem: import_zod9.z.string().optional()
+});
 
-// src/identityStore.ts
-var IdentityNotFoundError = class extends CliError {
-  constructor(name) {
-    super(`No identity named "${name}". Run \`agent-shim identity add ${name}\` first.`);
-    this.name = name;
-    this.name = "IdentityNotFoundError";
+// src/headroom/ensure.ts
+var HEADROOM_START_TIMEOUT_MS = 12e4;
+var HEADROOM_LAUNCHER_POLL_MS = 250;
+var HeadroomStartError = class extends CliError {
+  constructor(message) {
+    super(message);
+    this.name = "HeadroomStartError";
   }
-  name;
 };
-var IdentityAlreadyExistsError = class extends CliError {
-  constructor(identityName) {
-    super(`An identity named "${identityName}" already exists.`);
-    this.identityName = identityName;
-    this.name = "IdentityAlreadyExistsError";
+function ensureHeadroom(params) {
+  const { paths, ports } = params;
+  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+  let spawnedSupervisor = false;
+  let awaitingAllowlist = false;
+  for (; ; ) {
+    const state = readHeadroomState(ports.fs, paths.headroomStateFile);
+    if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
+      const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
+      if (daemonUp && state.socketPath !== void 0) {
+        const required = params.requiredAllowlistHash?.();
+        if (required === void 0 || state.allowlistHash === required) {
+          writeSession(ports.fs, paths.headroomSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), supervisorPid: state.supervisorPid });
+          return { socketPath: state.socketPath };
+        }
+        const holders = sessionsForSupervisor(ports.fs, paths.headroomSessionsDir, state.supervisorPid).filter((session) => ports.isRunning(session.pid));
+        if (holders.length > 0) {
+          throw new HeadroomStartError(
+            `the running headroom daemon was started before this launch's front door address and would refuse every request this launch sends through it. It restarts once the launches using it end (pid ${holders.map((session) => String(session.pid)).join(", ")}); end them and launch again, or launch with --no-headroom.`
+          );
+        }
+        awaitingAllowlist = true;
+      }
+      if (state.lastError !== void 0) {
+        throw new HeadroomStartError(
+          `the headroom daemon reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.headroomLogPath})`
+        );
+      }
+    } else if (!spawnedSupervisor) {
+      ports.fs.mkdirp(paths.headroomDir);
+      const created = ports.fs.writeFileExclusive(
+        paths.headroomLockFile,
+        `${JSON.stringify({ pid: params.launcherPid, at: ports.now() })}
+`
+      );
+      if (created) {
+        ports.spawnSupervisor(paths);
+        spawnedSupervisor = true;
+      } else {
+        const lock = readStartLock(ports.fs, paths.headroomLockFile);
+        if (lock === void 0 || !ports.isRunning(lock.pid)) {
+          ports.fs.removeRecursive(paths.headroomLockFile);
+          continue;
+        }
+      }
+    }
+    if (ports.now() >= deadline) {
+      const lastError = state?.lastError;
+      throw new HeadroomStartError(
+        `the headroom daemon did not become ready within ${String(HEADROOM_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (awaitingAllowlist ? " (the running daemon's allowlist does not admit this launch's front door, and it did not restart)" : "") + `. Daemon log: ${paths.headroomLogPath}`
+      );
+    }
+    ports.sleep(HEADROOM_LAUNCHER_POLL_MS);
   }
-  identityName;
-};
-var InvalidIdentityNameError = class extends CliError {
-  constructor(attemptedName) {
-    super(
-      `"${attemptedName}" is not a valid identity name \u2014 identity names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
-    );
-    this.attemptedName = attemptedName;
-    this.name = "InvalidIdentityNameError";
+}
+
+// src/headroom/settings.ts
+var import_node_crypto8 = require("node:crypto");
+function settingsOf(config) {
+  return {
+    ...config.mode === void 0 ? {} : { mode: config.mode },
+    ...config.targetRatio === void 0 ? {} : { targetRatio: config.targetRatio },
+    ...config.ccr === void 0 ? {} : { ccr: config.ccr },
+    ...config.rolloutChannel === void 0 ? {} : { rolloutChannel: config.rolloutChannel },
+    ...config.interceptToolResults === void 0 ? {} : { interceptToolResults: config.interceptToolResults },
+    ...config.readMaturation === void 0 ? {} : { readMaturation: config.readMaturation }
+  };
+}
+function settingsArgs(settings) {
+  return [
+    ...settings.mode === void 0 ? [] : ["--mode", settings.mode],
+    ...settings.targetRatio === void 0 ? [] : ["--target-ratio", String(settings.targetRatio)],
+    ...settings.ccr === "lossless" ? ["--lossless"] : [],
+    ...settings.ccr === "none" ? ["--no-ccr"] : [],
+    ...settings.interceptToolResults === true ? ["--intercept-tool-results"] : [],
+    ...settings.readMaturation === true ? ["--read-maturation"] : []
+  ];
+}
+function settingsEnv(settings) {
+  return settings.rolloutChannel === void 0 ? {} : { HEADROOM_ROLLOUT_CHANNEL: settings.rolloutChannel };
+}
+function hashSettings(settings) {
+  return (0, import_node_crypto8.createHash)("sha256").update(JSON.stringify([...settingsArgs(settings), JSON.stringify(settingsEnv(settings))])).digest("hex");
+}
+
+// src/headroom/socket.ts
+var import_node_path13 = __toESM(require("node:path"), 1);
+var GROUP_OR_OTHER_BITS = 63;
+var OCTAL_RADIX = 8;
+var MODE_DIGITS = 4;
+var HEADROOM_SOCKET_SUFFIX = ".sock";
+var HEADROOM_SOCKET_NAME = /^(\d+)\.sock$/;
+var UNIX_SOCKET_PATH_MAX_BYTES = 103;
+var PLATFORMS_WITHOUT_UNIX_SOCKETS = ["win32"];
+function headroomSocketPath(paths, supervisorPid) {
+  return import_node_path13.default.join(paths.headroomSocketDir, `${String(supervisorPid)}${HEADROOM_SOCKET_SUFFIX}`);
+}
+function platformRefusal(platform) {
+  return PLATFORMS_WITHOUT_UNIX_SOCKETS.includes(platform) ? `headroom routing needs a unix domain socket, which headroom cannot serve on ${platform}; agent-shim never falls back to a TCP port for this hop` : void 0;
+}
+function ownerOnlyRefusal(label, target, stat, expected, uid) {
+  if (stat === void 0) {
+    return `the headroom ${label} ${target} does not exist`;
   }
-  attemptedName;
-};
-function identityJsonPath(paths, name) {
-  return import_node_path15.default.join(paths.identitiesDir, name, "identity.json");
+  if (stat.kind === "symlink") {
+    return `the headroom ${label} ${target} is a symlink; it must be the real ${expected === "dir" ? "directory" : "socket"}`;
+  }
+  if (stat.kind !== expected) {
+    return `the headroom ${label} ${target} is not a ${expected === "dir" ? "directory" : "socket"}`;
+  }
+  if (stat.uid !== uid) {
+    return `the headroom ${label} ${target} is owned by uid ${String(stat.uid)}, not by this user (uid ${String(uid)})`;
+  }
+  if ((stat.mode & GROUP_OR_OTHER_BITS) !== 0) {
+    return `the headroom ${label} ${target} has mode ${stat.mode.toString(OCTAL_RADIX).padStart(MODE_DIGITS, "0")}, which lets other users reach it; it must be accessible to its owner only`;
+  }
+  return void 0;
 }
-function identityExists(paths, name) {
-  return import_node_fs4.default.existsSync(identityJsonPath(paths, name));
+function prepareHeadroomSocket(fs12, ports, paths, supervisorPid) {
+  const unsupported = platformRefusal(ports.platform);
+  if (unsupported !== void 0) {
+    return { refused: unsupported };
+  }
+  const socketPath = headroomSocketPath(paths, supervisorPid);
+  const length = Buffer.byteLength(socketPath, "utf8");
+  if (length > UNIX_SOCKET_PATH_MAX_BYTES) {
+    return {
+      refused: `the headroom socket path ${socketPath} is ${String(length)} bytes, longer than the ${String(UNIX_SOCKET_PATH_MAX_BYTES)} a unix socket path can hold; set AGENT_SHIM_HOME to a shorter directory`
+    };
+  }
+  if (ports.lstat(paths.headroomSocketDir)?.kind === "symlink") {
+    return { refused: `the headroom socket directory ${paths.headroomSocketDir} is a symlink; it must be the real directory` };
+  }
+  fs12.mkdirPrivate(paths.headroomSocketDir);
+  const refusal = ownerOnlyRefusal("socket directory", paths.headroomSocketDir, ports.lstat(paths.headroomSocketDir), "dir", ports.currentUid());
+  return refusal === void 0 ? { socketPath } : { refused: refusal };
 }
-function readIdentity(paths, name) {
-  return readJson(identityJsonPath(paths, name), IdentitySchema);
+function pruneStaleHeadroomSockets(fs12, paths, isRunning) {
+  const removed = [];
+  for (const name of fs12.readdir(paths.headroomSocketDir)) {
+    const pid = HEADROOM_SOCKET_NAME.exec(name)?.[1];
+    if (pid === void 0 || isRunning(Number.parseInt(pid, 10))) {
+      continue;
+    }
+    fs12.removeRecursive(import_node_path13.default.join(paths.headroomSocketDir, name));
+    removed.push(name);
+  }
+  return removed;
 }
-function addIdentity(paths, name) {
-  if (identityExists(paths, name)) {
-    throw new IdentityAlreadyExistsError(name);
+
+// src/headroom/source.ts
+var import_zod10 = require("zod");
+var GIT_SPEC_RE = /git\+[^@\s]+(?:@([^\s#]+))?/;
+var COMMIT_SHA_RE = /^[0-9a-f]{40}$/i;
+var DirectUrlSchema = import_zod10.z.object({ vcs_info: import_zod10.z.object({ commit_id: import_zod10.z.string() }) });
+function isMovingGitSource(spec) {
+  const match = GIT_SPEC_RE.exec(spec);
+  if (match === null) {
+    return false;
   }
-  const parsed = IdentitySchema.safeParse({ name, allowAmbientCredential: false });
-  if (!parsed.success) {
-    throw new InvalidIdentityNameError(name);
+  const ref = match[1];
+  return ref === void 0 || !COMMIT_SHA_RE.test(ref);
+}
+function pinnedGitCommit(spec) {
+  const ref = GIT_SPEC_RE.exec(spec)?.[1];
+  return ref !== void 0 && COMMIT_SHA_RE.test(ref) ? ref.toLowerCase() : void 0;
+}
+
+// src/headroom/supervisor.ts
+function resolveSupervisorConfig(configured) {
+  return {
+    source: configured.source ?? HEADROOM_DEFAULT_SOURCE,
+    idleShutdownMinutes: configured.idleShutdownMinutes ?? HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES,
+    settings: settingsOf(configured)
+  };
+}
+var HEADROOM_BACKOFF_BASE_MS = 500;
+var HEADROOM_BACKOFF_CAP_MS = 3e4;
+var HEADROOM_START_RETRY_BUDGET = 5;
+var HEADROOM_READY_TIMEOUT_MS = 15e3;
+var HEADROOM_POLL_MS = 1e3;
+var MS_PER_MINUTE2 = 6e4;
+function backoffForAttempt(attempt) {
+  return Math.min(HEADROOM_BACKOFF_CAP_MS, HEADROOM_BACKOFF_BASE_MS * 2 ** (attempt - 1));
+}
+function versionSatisfies(version, source) {
+  if (version === void 0) {
+    return false;
+  }
+  const specifier = /==|>=|<=|!=|>|<|~=/.exec(source);
+  if (specifier === null) {
+    return true;
+  }
+  const installed = parseVersion(version);
+  const wanted = parseVersion(source.slice(specifier.index + specifier[0].length));
+  if (installed === void 0 || wanted === void 0) {
+    return true;
+  }
+  const cmp = compareVersions(installed, wanted);
+  switch (specifier[0]) {
+    case "==":
+      return cmp === 0;
+    case "!=":
+      return cmp !== 0;
+    case ">=":
+      return cmp >= 0;
+    case "<=":
+      return cmp <= 0;
+    case ">":
+      return cmp > 0;
+    case "<":
+      return cmp < 0;
+    case "~=":
+      return compareVersions(installed.slice(0, Math.max(0, wanted.length - 1)), wanted.slice(0, Math.max(0, wanted.length - 1))) === 0 && cmp >= 0;
+    default:
+      return true;
   }
-  writeJsonAtomic(identityJsonPath(paths, name), parsed.data);
-  return parsed.data;
 }
-function useIdentity(paths, name) {
-  const pool = poolNameOf(name);
-  if (pool !== void 0) {
-    requirePool(paths, pool);
-  } else if (!identityExists(paths, name)) {
-    throw new IdentityNotFoundError(name);
+function parseVersion(input) {
+  const match = /(\d+)(\.\d+)*/.exec(input);
+  if (match === null) {
+    return void 0;
+  }
+  return match[0].split(".").map((part) => Number.parseInt(part, 10));
+}
+function compareVersions(a, b) {
+  for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
+    const left = a[index] ?? 0;
+    const right = b[index] ?? 0;
+    if (left !== right) {
+      return left - right;
+    }
+  }
+  return 0;
+}
+var HEADROOM_SUPERVISOR_STILL_RUNNING = -1;
+async function runSupervisor(initialConfig, ports, options = {}) {
+  const { fs: fs12, paths } = ports;
+  let config = initialConfig;
+  const previousState = readHeadroomState(fs12, paths.headroomStateFile);
+  if (previousState?.supervisorPid !== void 0 && previousState.supervisorPid !== ports.ownPid && ports.isRunning(previousState.supervisorPid)) {
+    ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: supervisor ${String(previousState.supervisorPid)} already owns the daemon; exiting`);
+    return 0;
+  }
+  let installedSource = previousState?.installedSource;
+  const ownsState = () => {
+    const owner = readHeadroomState(fs12, paths.headroomStateFile)?.supervisorPid;
+    return owner === void 0 || owner === ports.ownPid || !ports.isRunning(owner);
+  };
+  const writeOwnState = (state) => {
+    if (!ownsState()) {
+      return false;
+    }
+    writeHeadroomState(fs12, paths.headroomStateFile, state);
+    return true;
+  };
+  const fail = (message) => {
+    if (writeOwnState({ lastError: message })) {
+      fs12.removeRecursive(paths.headroomLockFile);
+    }
+    ports.log(`agent-shim headroom supervisor: ${message}`);
+    return 1;
+  };
+  const ensureInstalled = () => {
+    const version2 = ports.headroomVersion();
+    const versionOk = version2 !== void 0 && versionSatisfies(version2, config.source);
+    const pinned = pinnedGitCommit(config.source);
+    const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
+    if (versionOk && commitOk && (installedSource === void 0 || installedSource === config.source)) {
+      installedSource = config.source;
+      return true;
+    }
+    ports.log(`agent-shim headroom supervisor: installing headroom from ${config.source}`);
+    const result = ports.install(config.source);
+    if (!result.ok) {
+      return false;
+    }
+    installedSource = config.source;
+    return true;
+  };
+  const socket = prepareHeadroomSocket(fs12, ports.socketTrust, paths, ports.ownPid);
+  if (socket.refused !== void 0) {
+    return fail(socket.refused);
+  }
+  const { socketPath } = socket;
+  pruneStaleHeadroomSockets(fs12, paths, ports.isRunning);
+  if (!ensureInstalled()) {
+    return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+  }
+  const version = ports.headroomVersion() ?? "unknown";
+  writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
+  ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: managing headroom on allowlist [${allowlistOf(ports).join(", ")}]`);
+  const orphanPid = previousState?.headroomPid;
+  if (orphanPid !== void 0 && ports.isRunning(orphanPid)) {
+    ports.log(`agent-shim headroom supervisor: stopping daemon pid ${String(orphanPid)} left behind by the previous supervisor`);
+    ports.stopProcess(orphanPid);
+  }
+  let headroomPid;
+  let runningHash;
+  let runningSettingsHash;
+  let consecutiveFailures = 0;
+  let idleSince;
+  let superseded = false;
+  let ticks = 0;
+  for (; ; ) {
+    if (options.tickLimit !== void 0 && ticks >= options.tickLimit) {
+      return HEADROOM_SUPERVISOR_STILL_RUNNING;
+    }
+    ticks += 1;
+    config = ports.readConfig();
+    const settingsHash = hashSettings(config.settings);
+    const allowlist = allowlistOf(ports);
+    const allowlistHash = hashAllowlist(allowlist);
+    pruneDeadSessions(fs12, paths.headroomSessionsDir, ports.isRunning);
+    const ownsNow = ownsState();
+    if (!ownsNow && !superseded) {
+      ports.log("agent-shim headroom supervisor: another supervisor now owns the state file; serving this daemon's own sessions until they end");
+    }
+    superseded = !ownsNow;
+    const crashed = headroomPid !== void 0 && !ports.isRunning(headroomPid);
+    if (headroomPid === void 0 || crashed) {
+      if (crashed) {
+        ports.log(`agent-shim headroom supervisor: headroom pid ${String(headroomPid)} died`);
+        headroomPid = void 0;
+        runningHash = void 0;
+        runningSettingsHash = void 0;
+        writeOwnState({
+          supervisorPid: ports.ownPid,
+          version,
+          installedSource
+        });
+      }
+      if (consecutiveFailures >= HEADROOM_START_RETRY_BUDGET) {
+        return fail(`headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up`);
+      }
+      if (installedSource !== config.source && !ensureInstalled()) {
+        return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+      }
+      const pid = ports.spawnHeadroom(socketPath, allowlist, config.settings);
+      const ready = await waitUntilReady(ports, socketPath);
+      if (ready) {
+        consecutiveFailures = 0;
+        headroomPid = pid;
+        runningHash = allowlistHash;
+        runningSettingsHash = settingsHash;
+        const recorded = writeOwnState({
+          supervisorPid: ports.ownPid,
+          headroomPid: pid,
+          socketPath,
+          version,
+          allowlistHash,
+          settingsHash,
+          installedSource: config.source
+        });
+        if (recorded) {
+          fs12.removeRecursive(paths.headroomLockFile);
+        }
+        idleSince = void 0;
+        ports.log(`agent-shim headroom supervisor: headroom pid ${String(pid)} ready on unix socket ${socketPath}`);
+      } else {
+        ports.stopProcess(pid);
+        consecutiveFailures += 1;
+        ports.log(
+          `agent-shim headroom supervisor: headroom did not become ready on unix socket ${socketPath} (attempt ${String(consecutiveFailures)} of ${String(HEADROOM_START_RETRY_BUDGET)})`
+        );
+        await ports.sleep(backoffForAttempt(consecutiveFailures));
+        continue;
+      }
+    } else {
+      if (runningHash !== allowlistHash || runningSettingsHash !== settingsHash || installedSource !== config.source) {
+        if (sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid).length === 0) {
+          ports.log("agent-shim headroom supervisor: configuration drifted and no sessions are live; restarting headroom");
+          ports.stopProcess(headroomPid);
+          headroomPid = void 0;
+          runningHash = void 0;
+          runningSettingsHash = void 0;
+          continue;
+        }
+      }
+      const sessions = sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid);
+      if (sessions.length === 0) {
+        idleSince ??= ports.now();
+        const idleMs = ports.now() - idleSince;
+        if (idleMs >= config.idleShutdownMinutes * MS_PER_MINUTE2) {
+          ports.log(
+            `agent-shim headroom supervisor: no sessions for ${String(config.idleShutdownMinutes)} minute(s); stopping headroom and exiting`
+          );
+          ports.stopProcess(headroomPid);
+          writeOwnState({ version });
+          return 0;
+        }
+      } else {
+        idleSince = void 0;
+      }
+    }
+    await ports.sleep(HEADROOM_POLL_MS);
   }
-  writeTextAtomic(paths.activeIdentityFile, `${name}
-`);
 }
-function readActiveIdentity(paths) {
-  if (!import_node_fs4.default.existsSync(paths.activeIdentityFile)) {
-    return void 0;
-  }
-  const raw = import_node_fs4.default.readFileSync(paths.activeIdentityFile, "utf8").trim();
-  return raw === "" ? void 0 : raw;
+function currentHeadroomAllowlist(fs12, paths) {
+  const providers = readAllProviders(fs12, paths.providersDir).map((entry) => entry.provider);
+  return headroomAllowlist(headroomUpstreams(providers, frontDoorOrigin(readFrontDoorState(fs12, paths.frontdoorStateFile))));
 }
-function isIdentityDirectoryName(name) {
-  return !name.startsWith(".");
+function allowlistOf(ports) {
+  return currentHeadroomAllowlist(ports.fs, ports.paths);
 }
-function readIdentityForListing(paths, name) {
-  try {
-    return readIdentity(paths, name);
-  } catch (error) {
-    if (error instanceof ConfigValidationError || error instanceof SyntaxError) {
-      return { problem: error.message.replace(/\s*\n\s*/g, " ") };
+async function waitUntilReady(ports, socketPath) {
+  const deadline = ports.now() + HEADROOM_READY_TIMEOUT_MS;
+  for (; ; ) {
+    if (await ports.ready(socketPath)) {
+      return true;
     }
-    throw error;
+    if (ports.now() >= deadline) {
+      return false;
+    }
+    await ports.sleep(HEADROOM_POLL_MS);
   }
 }
-function listIdentities(paths) {
-  if (!import_node_fs4.default.existsSync(paths.identitiesDir)) {
-    return [];
-  }
-  const active = readActiveIdentity(paths);
-  const names = import_node_fs4.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort();
-  const result = [];
-  for (const name of names) {
-    const read = readIdentityForListing(paths, name);
-    if (read === void 0) {
+
+// src/launcher/guard.ts
+var AMBIENT_CREDENTIAL_VARS = [
+  "ANTHROPIC_API_KEY",
+  "ANTHROPIC_AUTH_TOKEN",
+  "CLAUDE_CODE_OAUTH_TOKEN",
+  "CLAUDE_CODE_USE_BEDROCK",
+  "CLAUDE_CODE_USE_VERTEX",
+  "CLAUDE_CODE_USE_FOUNDRY"
+];
+function detectAmbientCredential(env, injected) {
+  for (const variable of AMBIENT_CREDENTIAL_VARS) {
+    const value = env[variable];
+    if (value === void 0 || value === "") {
       continue;
     }
-    const isActive = name === active;
-    result.push("problem" in read ? { name, isActive, problem: read.problem } : { name, identity: read, isActive });
-  }
-  return result;
-}
-function setDefaultConfigProfile(paths, identityName, profileName) {
-  if (!identityExists(paths, identityName)) {
-    throw new IdentityNotFoundError(identityName);
+    if (injected?.variable === variable && value === injected.token) {
+      continue;
+    }
+    return { variable };
   }
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    defaultConfigProfile: profileName
-  });
+  return void 0;
 }
-function setAllowAmbientCredential(paths, identityName, allow) {
-  if (!identityExists(paths, identityName)) {
-    throw new IdentityNotFoundError(identityName);
-  }
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    allowAmbientCredential: allow
-  });
+function formatAmbientCredentialGuardMessage(variable, identityName) {
+  const identitySetCommand = identityName === void 0 ? "agent-shim identity set <name> --allow-ambient-credential" : `agent-shim identity set ${identityName} --allow-ambient-credential`;
+  return [
+    `error: ${variable} is set in the environment. This identity's isolated`,
+    "credential would be bypassed \u2014 every identity authenticates as this same key",
+    "while it's set. Unset it, or if this is deliberate, opt in per-launch with",
+    "AGENT_SHIM_ALLOW_AMBIENT_CREDENTIAL=1, or persistently for this identity with",
+    `\`${identitySetCommand}\`.`
+  ].join("\n");
 }
-function setIdentityCredential(paths, identityName, change) {
-  const existing = readIdentity(paths, identityName);
-  if (existing === void 0) {
-    throw new IdentityNotFoundError(identityName);
+function evaluateAmbientCredentialGuard(params) {
+  const detected = detectAmbientCredential(params.env, params.injectedCredential);
+  if (detected === void 0) {
+    return { ok: true };
   }
-  if (change === false) {
-    return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, { credential: void 0 });
+  if (params.allowAmbientCredentialOverride || params.allowAmbientCredential || params.providerSelected === true) {
+    return { ok: true };
   }
-  const sources = change.sources ?? existing.credential?.sources;
-  if (sources === void 0) {
-    throw new UsageError(`Identity "${identityName}" has no credential yet: pass --credential to give it one before choosing its target.`);
+  return {
+    ok: false,
+    variable: detected.variable,
+    message: formatAmbientCredentialGuardMessage(detected.variable, params.identityName)
+  };
+}
+
+// src/paths.ts
+var import_node_fs2 = __toESM(require("node:fs"), 1);
+var import_node_os = __toESM(require("node:os"), 1);
+var import_node_path14 = __toESM(require("node:path"), 1);
+function resolveAgentShimHome(env = process.env, home = import_node_os.default.homedir(), isDirectory = isExistingDirectory) {
+  const fromEnv = env.AGENT_SHIM_HOME;
+  if (fromEnv !== void 0 && fromEnv !== "") {
+    return fromEnv;
   }
-  const target = change.target ?? existing.credential?.target;
-  const cache = change.cache === void 0 ? existing.credential?.cache : change.cache === false ? void 0 : change.cache;
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    credential: { sources: [...sources], ...target === void 0 ? {} : { target }, ...cache === void 0 ? {} : { cache } }
-  });
+  const current = import_node_path14.default.join(home, HOME_DIRNAME);
+  const legacy = import_node_path14.default.join(home, LEGACY_HOME_DIRNAME);
+  return !isDirectory(current) && isDirectory(legacy) ? legacy : current;
 }
-function belongsToIdentity(entry, name) {
-  return entry === name || entry === import_node_path15.default.basename(identityLockPath("", name)) || entry.startsWith(`.${name}.scratch.`) || entry.startsWith(`.${name}.previous.`);
+function isExistingDirectory(candidate) {
+  return import_node_fs2.default.statSync(candidate, { throwIfNoEntry: false })?.isDirectory() ?? false;
 }
-function removeIdentity(paths, name) {
-  if (!identityExists(paths, name)) {
-    throw new IdentityNotFoundError(name);
-  }
-  for (const entry of import_node_fs4.default.readdirSync(paths.identitiesDir)) {
-    if (belongsToIdentity(entry, name)) {
-      import_node_fs4.default.rmSync(import_node_path15.default.join(paths.identitiesDir, entry), { recursive: true, force: true });
-    }
-  }
-  if (readActiveIdentity(paths) === name) {
-    import_node_fs4.default.rmSync(paths.activeIdentityFile);
+function resolveClaudeHome() {
+  const fromEnv = process.env.AGENT_SHIM_CLAUDE_HOME;
+  if (fromEnv !== void 0 && fromEnv !== "") {
+    return fromEnv;
   }
+  return import_node_path14.default.join(import_node_os.default.homedir(), ".claude");
+}
+function buildLayoutPaths(root) {
+  return {
+    root,
+    identitiesDir: import_node_path14.default.join(root, "identities"),
+    configProfilesDir: import_node_path14.default.join(root, "config-profiles"),
+    providersDir: import_node_path14.default.join(root, "providers"),
+    directoryRulesFile: import_node_path14.default.join(root, "directory-rules.json"),
+    activeIdentityFile: import_node_path14.default.join(root, "active-identity"),
+    globalConfigFile: import_node_path14.default.join(root, "config.json"),
+    categoriesLocalFile: import_node_path14.default.join(root, "categories.local.json"),
+    claudeShimFile: import_node_path14.default.join(root, "claude-shim.json"),
+    headroomDir: import_node_path14.default.join(root, "headroom"),
+    headroomStateFile: import_node_path14.default.join(root, "headroom", `state.v${String(HEADROOM_STATE_SCHEMA_VERSION)}.json`),
+    headroomSocketDir: import_node_path14.default.join(root, "headroom", "run"),
+    headroomLockFile: import_node_path14.default.join(root, "headroom", "start.lock"),
+    headroomSessionsDir: import_node_path14.default.join(root, "headroom", "sessions"),
+    logsDir: import_node_path14.default.join(root, "logs"),
+    headroomLogPath: import_node_path14.default.join(root, "logs", "headroom.log"),
+    frontdoorDir: import_node_path14.default.join(root, "frontdoor"),
+    frontdoorCaDir: import_node_path14.default.join(root, "frontdoor", "ca"),
+    frontdoorCaCertFile: import_node_path14.default.join(root, "frontdoor", "ca", "ca.pem"),
+    frontdoorCaKeyFile: import_node_path14.default.join(root, "frontdoor", "ca", "ca.key"),
+    frontdoorCaBundlesDir: import_node_path14.default.join(root, "frontdoor", "ca", "bundles"),
+    frontdoorStateFile: import_node_path14.default.join(root, "frontdoor", "state.json"),
+    frontdoorLockFile: import_node_path14.default.join(root, "frontdoor", "start.lock"),
+    frontdoorControlTokenFile: import_node_path14.default.join(root, "frontdoor", "control-token"),
+    frontdoorSessionsDir: import_node_path14.default.join(root, "frontdoor", "sessions"),
+    frontdoorLogPath: import_node_path14.default.join(root, "logs", "frontdoor.log"),
+    usageDir: import_node_path14.default.join(root, "usage"),
+    usageLogDir: import_node_path14.default.join(root, "usage", "log"),
+    usageSnapshotsDir: import_node_path14.default.join(root, "usage", "snapshots"),
+    usagePicksFile: import_node_path14.default.join(root, "usage", "picks.json")
+  };
+}
+function resolveLayoutPaths() {
+  return buildLayoutPaths(resolveAgentShimHome());
 }
 
-// src/providersStore.ts
-var import_node_fs5 = __toESM(require("node:fs"), 1);
+// src/identityStore.ts
+var import_node_fs4 = __toESM(require("node:fs"), 1);
 var import_node_path16 = __toESM(require("node:path"), 1);
 
-// src/credentialCache.ts
-var import_zod7 = require("zod");
-var MS_PER_UNIT = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
-var CachedCredentialSchema = import_zod7.z.strictObject({
-  token: import_zod7.z.string().min(1),
-  fetchedAt: import_zod7.z.number().int().nonnegative(),
-  source: CredentialSourceSchema
-});
-function effectiveStore(cache, platform) {
-  return cache.store ?? (platform === "darwin" ? "keychain" : "file");
-}
-function ttlMs(cache) {
-  if (cache.ttl === void 0) {
-    return void 0;
-  }
-  const multiplier = MS_PER_UNIT[cache.ttl.slice(-1)];
-  if (multiplier === void 0) {
-    throw new Error(`credential cache ttl "${cache.ttl}" has no recognised unit`);
-  }
-  return Number(cache.ttl.slice(0, -1)) * multiplier;
-}
-function isFresh(entry, cache, now) {
-  const limit = ttlMs(cache);
-  if (entry.fetchedAt > now) {
-    return false;
+// src/configProfilesStore.ts
+var import_node_fs3 = __toESM(require("node:fs"), 1);
+var import_node_path15 = __toESM(require("node:path"), 1);
+var ProfileNotFoundError = class extends CliError {
+  constructor(profileName) {
+    super(`No configuration profile named "${profileName}". Run \`agent-shim profile add ${profileName}\` first.`);
+    this.profileName = profileName;
+    this.name = "ProfileNotFoundError";
   }
-  return limit === void 0 || now - entry.fetchedAt < limit;
-}
-
-// src/credential.ts
-var CREDENTIAL_UNAVAILABLE_EXIT = 64;
-var CREDENTIAL_COMMAND_TIMEOUT_MS = 1e4;
-var CREDENTIAL_INTERACTIVE_TIMEOUT_MS = 12e4;
-var GROUP_OTHER_PERMISSION_BITS = 63;
-var PERMISSION_BITS = 511;
-var OCTAL_RADIX2 = 8;
-function commandArgv(source) {
-  if ("command" in source) {
-    return source.command;
+  profileName;
+};
+var ProfileAlreadyExistsError = class extends CliError {
+  constructor(profileName) {
+    super(`A configuration profile named "${profileName}" already exists.`);
+    this.profileName = profileName;
+    this.name = "ProfileAlreadyExistsError";
   }
-  if ("op" in source) {
-    return ["op", "read", source.op];
+  profileName;
+};
+var InvalidCategoryNameError = class extends CliError {
+  constructor(categoryName) {
+    super(`"${categoryName}" is not a category a configuration profile may toggle (runtime, history, knowledge, settings).`);
+    this.categoryName = categoryName;
+    this.name = "InvalidCategoryNameError";
   }
-  const account = source.keychain.account;
-  return ["security", "find-generic-password", "-s", source.keychain.service, ...account === void 0 ? [] : ["-a", account], "-w"];
+  categoryName;
+};
+function profileJsonPath(paths, name) {
+  return import_node_path15.default.join(paths.configProfilesDir, `${name}.json`);
 }
-function isInteractiveSource(source, env) {
-  if ("command" in source || "keychain" in source) {
-    return source.interactive ?? false;
-  }
-  if ("op" in source) {
-    return source.interactive ?? (env.OP_SERVICE_ACCOUNT_TOKEN ?? "") === "";
-  }
-  return false;
+function profileExists(paths, name) {
+  return import_node_fs3.default.existsSync(profileJsonPath(paths, name));
 }
-function summariseSource(source) {
-  if ("env" in source) {
-    return { kind: "env", variable: source.env };
+function requireProfileExists(paths, name) {
+  if (!profileExists(paths, name)) {
+    throw new ProfileNotFoundError(name);
   }
-  if ("file" in source) {
-    return { kind: "file", path: source.file };
+}
+function readProfile(paths, name) {
+  return readJson(profileJsonPath(paths, name), ConfigProfileSchema);
+}
+function createProfile(paths, name, extendsList, description) {
+  if (profileExists(paths, name)) {
+    throw new ProfileAlreadyExistsError(name);
   }
-  if ("command" in source) {
-    return { kind: "command", program: source.command[0] };
+  const filePath = profileJsonPath(paths, name);
+  const parsed = ConfigProfileSchema.safeParse({
+    ...description === void 0 ? {} : { description },
+    ...extendsList !== void 0 && extendsList.length > 0 ? { extends: [...extendsList] } : {}
+  });
+  if (!parsed.success) {
+    throw new ConfigValidationError(filePath, parsed.error.issues);
   }
-  if ("op" in source) {
-    return { kind: "op", reference: source.op };
+  writeJsonAtomic(filePath, parsed.data);
+  return parsed.data;
+}
+function listProfiles(paths) {
+  if (!import_node_fs3.default.existsSync(paths.configProfilesDir)) {
+    return [];
   }
-  if ("keychain" in source) {
-    return {
-      kind: "keychain",
-      service: source.keychain.service,
-      ...source.keychain.account === void 0 ? {} : { account: source.keychain.account }
-    };
+  const names = import_node_fs3.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort();
+  const result = [];
+  for (const name of names) {
+    const profile = readProfile(paths, name);
+    if (profile !== void 0) {
+      result.push({ name, profile });
+    }
   }
-  return { kind: "literal" };
+  return result;
 }
-function summariseCredential(credential) {
-  return {
-    target: credential.target ?? "bearer",
-    sources: credential.sources.map(summariseSource),
-    ...credential.cache === void 0 ? {} : { cache: credential.cache }
-  };
+function globalConfigPath(paths) {
+  return paths.globalConfigFile;
 }
-function formatSourceSummary(summary) {
-  switch (summary.kind) {
-    case "env":
-      return `env ${summary.variable}`;
-    case "file":
-      return `file ${summary.path}`;
-    case "command":
-      return `command ${summary.program}`;
-    case "op":
-      return `op ${summary.reference}`;
-    case "keychain":
-      return `keychain ${summary.service}${summary.account === void 0 ? "" : ` (account ${summary.account})`}`;
-    case "literal":
-      return "literal (non-secret placeholder)";
-    default:
-      return summary;
+function readGlobalConfig(paths) {
+  return readJson(globalConfigPath(paths), GlobalConfigSchema);
+}
+function setGlobalDefaultProfile(paths, name) {
+  return applyPatch(
+    globalConfigPath(paths),
+    GlobalConfigSchema,
+    { defaultConfigProfile: name },
+    { defaults: {} }
+  );
+}
+function validateCategoryNames(patch) {
+  for (const key of Object.keys(patch)) {
+    if (!isOverridableCategory(key)) {
+      throw new InvalidCategoryNameError(key);
+    }
   }
 }
-function describeSource(source) {
-  return formatSourceSummary(summariseSource(source));
+function setProfileCategories(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const expandedPatch = expandAllCategoryKey(patch);
+  validateCategoryNames(expandedPatch);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedCategories = { ...existing.categories, ...expandedPatch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { categories: mergedCategories });
 }
-function formatCredentialSummary(summary) {
-  const cache = summary.cache === void 0 ? "" : `, cached ${summary.cache.ttl === void 0 ? "with no expiry" : `for ${summary.cache.ttl}`}${summary.cache.store === void 0 ? "" : ` in the ${summary.cache.store} store`}`;
-  return `${summary.target} from ${summary.sources.map(formatSourceSummary).join(", then ")}${cache}`;
+function setProfileEntries(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedEntries = { ...existing.entries, ...patch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { entries: mergedEntries });
 }
-function describeCredential(credential) {
-  return formatCredentialSummary(summariseCredential(credential));
+function setProfileLaunchFlags(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedLaunch = { ...existing.launch, ...patch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
+    // Read as `unknown` so the check sees the `undefined` a cleared key holds, which LaunchFlags' optional properties hide from the value type.
+    launch: Object.values(mergedLaunch).every((value) => value === void 0) ? void 0 : mergedLaunch
+  });
 }
-function trySource(source, params) {
-  const none = (reason, warn = false) => ({ ok: false, reason, warn });
-  if ("env" in source) {
-    const value = params.env[source.env];
-    return value === void 0 || value === "" ? none("is unset or empty") : { ok: true, token: value };
-  }
-  if ("literal" in source) {
-    return { ok: true, token: source.literal };
-  }
-  if ("file" in source) {
-    const read = params.port.readSecretFile(source.file);
-    if (!read.found) {
-      return none("does not exist");
-    }
-    if (read.mode !== void 0 && (read.mode & GROUP_OTHER_PERMISSION_BITS) !== 0) {
-      return none(
-        `is readable or writable by group or others (mode ${(read.mode & PERMISSION_BITS).toString(OCTAL_RADIX2)}); run \`chmod 600 ${source.file}\``,
-        true
-      );
-    }
-    const token2 = read.content.trim();
-    return token2 === "" ? none("is empty") : { ok: true, token: token2 };
+function setProfileMetadata(paths, name, patch) {
+  requireProfileExists(paths, name);
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
+    ...patch.extends === void 0 ? {} : { extends: patch.extends.length === 0 ? void 0 : [...patch.extends] },
+    ...patch.description === void 0 ? {} : { description: patch.description === false ? void 0 : patch.description }
+  });
+}
+function removeProfile(paths, name) {
+  requireProfileExists(paths, name);
+  import_node_fs3.default.rmSync(profileJsonPath(paths, name));
+}
+
+// src/poolStore.ts
+var PoolNotFoundError = class extends CliError {
+  constructor(poolName) {
+    super(`No pool named "${poolName}". Run \`agent-shim pool add ${poolName} --identity <name>...\` first.`);
+    this.poolName = poolName;
+    this.name = "PoolNotFoundError";
   }
-  const argv = commandArgv(source);
-  const interactive = isInteractiveSource(source, params.env);
-  if (interactive && !params.port.personPresent()) {
-    return none("needs a person to approve it, but there is no terminal or desktop session");
+  poolName;
+};
+var PoolAlreadyExistsError = class extends CliError {
+  constructor(poolName) {
+    super(`A pool named "${poolName}" already exists. Use \`agent-shim pool set ${poolName}\` to change its members.`);
+    this.poolName = poolName;
+    this.name = "PoolAlreadyExistsError";
   }
-  const timeoutMs = source.timeoutMs ?? (interactive ? CREDENTIAL_INTERACTIVE_TIMEOUT_MS : CREDENTIAL_COMMAND_TIMEOUT_MS);
-  const result = params.port.runCommand(argv, { timeoutMs, interactive });
-  if (result.timedOut) {
-    return none(`timed out after ${String(timeoutMs)}ms`);
+  poolName;
+};
+var InvalidPoolNameError = class extends CliError {
+  constructor(attemptedName) {
+    super(`"${attemptedName}" is not a valid pool name: it must start with a letter or number and may then contain letters, numbers, dots, hyphens and underscores.`);
+    this.attemptedName = attemptedName;
+    this.name = "InvalidPoolNameError";
   }
-  if (result.status !== 0) {
-    const stderr = result.stderr.trim();
-    const outcome = result.status === null ? "could not be run or was killed by a signal" : `exited with status ${String(result.status)}`;
-    return none(`${outcome}${stderr === "" ? "" : `: ${stderr}`}`);
+  attemptedName;
+};
+function readPools(paths) {
+  return readGlobalConfig(paths)?.pools ?? {};
+}
+function requirePool(paths, name) {
+  const pool = readPools(paths)[name];
+  if (pool === void 0) {
+    throw new PoolNotFoundError(name);
   }
-  const token = result.stdout.trim();
-  return token === "" ? none("printed no token") : { ok: true, token };
+  return pool;
 }
-function warmCommandFor(subject) {
-  const [kind, name] = subject.split(" ");
-  return kind === "provider" ? `agent-shim credential warm --provider ${name ?? ""}` : `agent-shim credential warm ${name ?? ""}`;
+function writePools(paths, pools) {
+  applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
 }
-function resolveCredential(params) {
-  const target = params.credential.target ?? "bearer";
-  const cacheBlock = params.credential.cache;
-  const cache = cacheBlock === void 0 ? void 0 : params.port.cache;
-  const store = cacheBlock === void 0 || cache === void 0 ? void 0 : effectiveStore(cacheBlock, cache.platform);
-  if (cacheBlock !== void 0 && cache !== void 0 && store !== void 0 && params.refresh !== true) {
-    const entry = cache.port.read(store, params.subject);
-    if (entry !== void 0 && isFresh(entry, cacheBlock, cache.now())) {
-      return { ok: true, credential: { target, token: entry.token, source: entry.source, warnings: [], cachedAt: entry.fetchedAt } };
-    }
+function addPool(paths, name, identities) {
+  if (!PoolNameSchema.safeParse(name).success) {
+    throw new InvalidPoolNameError(name);
   }
-  const attempts = [];
-  const warnings = [];
-  for (const source of params.credential.sources) {
-    const outcome = trySource(source, params);
-    if (outcome.ok) {
-      if (cache !== void 0 && store !== void 0) {
-        cache.port.write(store, params.subject, { token: outcome.token, fetchedAt: cache.now(), source });
-      }
-      return { ok: true, credential: { target, token: outcome.token, source, warnings } };
-    }
-    const line = `${describeSource(source)} ${outcome.reason}`;
-    attempts.push(line);
-    if (outcome.warn) {
-      warnings.push(`agent-shim: ${params.subject}: skipped ${line}`);
-    }
+  const pools = readPools(paths);
+  if (pools[name] !== void 0) {
+    throw new PoolAlreadyExistsError(name);
   }
-  const hint = cacheBlock === void 0 ? "" : `; fill the cache from a terminal with \`${warmCommandFor(params.subject)}\``;
-  return { ok: false, message: `agent-shim: ${params.subject} has no usable credential: ${attempts.join("; ")}${hint}` };
+  const pool = { identities: [...identities] };
+  writePools(paths, { ...pools, [name]: pool });
+  return pool;
 }
-function credentialVariables(target, token) {
-  return {
-    ANTHROPIC_AUTH_TOKEN: target === "bearer" ? token : void 0,
-    ANTHROPIC_API_KEY: target === "apiKey" ? token : void 0,
-    CLAUDE_CODE_OAUTH_TOKEN: target === "oauthToken" ? token : void 0
-  };
+function setPool(paths, name, identities) {
+  requirePool(paths, name);
+  const pool = { identities: [...identities] };
+  writePools(paths, { ...readPools(paths), [name]: pool });
+  return pool;
+}
+function removePool(paths, name) {
+  requirePool(paths, name);
+  const remaining = Object.fromEntries(Object.entries(readPools(paths)).filter(([existing]) => existing !== name));
+  writePools(paths, remaining);
 }
 
-// src/providersStore.ts
-var ProviderNotFoundError = class extends CliError {
+// src/identityStore.ts
+var IdentityNotFoundError = class extends CliError {
   constructor(name) {
-    super(`No provider named "${name}". Run \`agent-shim provider add ${name}\` first.`);
+    super(`No identity named "${name}". Run \`agent-shim identity add ${name}\` first.`);
     this.name = name;
-    this.name = "ProviderNotFoundError";
+    this.name = "IdentityNotFoundError";
   }
   name;
 };
-var ProviderAlreadyExistsError = class extends CliError {
-  constructor(providerName) {
-    super(`A provider named "${providerName}" already exists.`);
-    this.providerName = providerName;
-    this.name = "ProviderAlreadyExistsError";
+var IdentityAlreadyExistsError = class extends CliError {
+  constructor(identityName) {
+    super(`An identity named "${identityName}" already exists.`);
+    this.identityName = identityName;
+    this.name = "IdentityAlreadyExistsError";
   }
-  providerName;
+  identityName;
 };
-var InvalidProviderNameError = class extends CliError {
+var InvalidIdentityNameError = class extends CliError {
   constructor(attemptedName) {
     super(
-      `"${attemptedName}" is not a valid provider name. Provider names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
+      `"${attemptedName}" is not a valid identity name \u2014 identity names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
     );
     this.attemptedName = attemptedName;
-    this.name = "InvalidProviderNameError";
+    this.name = "InvalidIdentityNameError";
   }
   attemptedName;
 };
-var PROVIDER_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._@-]*$/;
-function providerJsonPath(paths, name) {
-  return import_node_path16.default.join(paths.providersDir, `${name}.json`);
-}
-function providerExists(paths, name) {
-  return import_node_fs5.default.existsSync(providerJsonPath(paths, name));
+function identityJsonPath(paths, name) {
+  return import_node_path16.default.join(paths.identitiesDir, name, "identity.json");
 }
-var LEGACY_PROVIDER_FIELDS = ["tokenEnv", "tokenCommand", "authScheme"];
-var LEGACY_ENV_CREDENTIAL_KEYS = Object.values(CREDENTIAL_TARGET_VARS);
-var LEGACY_LITERAL_PLACEHOLDER = "<the value of env.ANTHROPIC_AUTH_TOKEN>";
-function isRecord3(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function identityExists(paths, name) {
+  return import_node_fs4.default.existsSync(identityJsonPath(paths, name));
 }
-function legacyProviderConversion(raw) {
-  if (!isRecord3(raw) || "credential" in raw) {
-    return void 0;
-  }
-  const env = isRecord3(raw.env) ? raw.env : void 0;
-  const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
-  const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
-  if (fields.length === 0) {
-    return void 0;
-  }
-  const sources = [];
-  if (typeof raw.tokenEnv === "string") {
-    sources.push({ env: raw.tokenEnv });
-  }
-  if (Array.isArray(raw.tokenCommand)) {
-    sources.push({ command: raw.tokenCommand });
-  }
-  if (typeof env?.ANTHROPIC_AUTH_TOKEN === "string" && env.ANTHROPIC_AUTH_TOKEN !== "") {
-    sources.push({ literal: LEGACY_LITERAL_PLACEHOLDER });
-  }
-  const remainingEnv = env === void 0 ? void 0 : Object.fromEntries(Object.entries(env).filter(([key]) => !LEGACY_ENV_CREDENTIAL_KEYS.includes(key)));
-  const replacedKeys = [...LEGACY_PROVIDER_FIELDS, "env"];
-  const rest = Object.fromEntries(Object.entries(raw).filter(([key]) => !replacedKeys.includes(key)));
-  return {
-    fields,
-    replacement: {
-      ...rest,
-      credential: { sources, ...raw.authScheme === "apiKey" ? { target: "apiKey" } : {} },
-      ...remainingEnv === void 0 || Object.keys(remainingEnv).length === 0 ? {} : { env: remainingEnv }
-    }
-  };
+function readIdentity(paths, name) {
+  return readJson(identityJsonPath(paths, name), IdentitySchema);
 }
-var LegacyProviderFileError = class extends CliError {
-  constructor(filePath, conversion) {
-    super(
-      `${filePath} uses ${conversion.fields.join(", ")}, which a credential block replaced. Rewrite it as:
-` + JSON.stringify(conversion.replacement, null, 2)
-    );
-    this.filePath = filePath;
-    this.conversion = conversion;
-    this.name = "LegacyProviderFileError";
-  }
-  filePath;
-  conversion;
-};
-function parseProviderFile(filePath, raw) {
-  const conversion = legacyProviderConversion(raw);
-  if (conversion !== void 0) {
-    throw new LegacyProviderFileError(filePath, conversion);
+function addIdentity(paths, name) {
+  if (identityExists(paths, name)) {
+    throw new IdentityAlreadyExistsError(name);
   }
-  const parsed = ProviderSchema.safeParse(raw);
+  const parsed = IdentitySchema.safeParse({ name, allowAmbientCredential: false });
   if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+    throw new InvalidIdentityNameError(name);
   }
+  writeJsonAtomic(identityJsonPath(paths, name), parsed.data);
   return parsed.data;
 }
-function readProvider(paths, name) {
-  const filePath = providerJsonPath(paths, name);
-  if (!import_node_fs5.default.existsSync(filePath)) {
+function useIdentity(paths, name) {
+  const pool = poolNameOf(name);
+  if (pool !== void 0) {
+    requirePool(paths, pool);
+  } else if (!identityExists(paths, name)) {
+    throw new IdentityNotFoundError(name);
+  }
+  writeTextAtomic(paths.activeIdentityFile, `${name}
+`);
+}
+function readActiveIdentity(paths) {
+  if (!import_node_fs4.default.existsSync(paths.activeIdentityFile)) {
     return void 0;
   }
-  const raw = JSON.parse(import_node_fs5.default.readFileSync(filePath, "utf8"));
-  return parseProviderFile(filePath, raw);
+  const raw = import_node_fs4.default.readFileSync(paths.activeIdentityFile, "utf8").trim();
+  return raw === "" ? void 0 : raw;
 }
-function loadProvider(providersDir, name, port) {
-  const filePath = import_node_path16.default.join(providersDir, `${name}.json`);
-  const raw = port.readConfigFile(filePath);
-  return raw === void 0 ? void 0 : parseProviderFile(filePath, raw);
+function isIdentityDirectoryName(name) {
+  return !name.startsWith(".");
 }
-function listProviders(paths) {
-  const names = listProviderNames(
-    (dir) => import_node_fs5.default.readdirSync(dir),
-    paths.providersDir
-  );
+function readIdentityForListing(paths, name) {
+  try {
+    return readIdentity(paths, name);
+  } catch (error) {
+    if (error instanceof ConfigValidationError || error instanceof SyntaxError) {
+      return { problem: error.message.replace(/\s*\n\s*/g, " ") };
+    }
+    throw error;
+  }
+}
+function listIdentities(paths) {
+  if (!import_node_fs4.default.existsSync(paths.identitiesDir)) {
+    return [];
+  }
+  const active = readActiveIdentity(paths);
+  const names = import_node_fs4.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort();
   const result = [];
   for (const name of names) {
-    let provider;
-    try {
-      provider = readProvider(paths, name);
-    } catch (error) {
-      if (!(error instanceof ConfigValidationError || error instanceof LegacyProviderFileError)) {
-        throw error;
-      }
-      console.error(`agent-shim: providers/${name}.json is invalid and was skipped: ${error.message}`);
+    const read = readIdentityForListing(paths, name);
+    if (read === void 0) {
       continue;
     }
-    if (provider !== void 0) {
-      result.push({ name, provider });
-    }
+    const isActive = name === active;
+    result.push("problem" in read ? { name, isActive, problem: read.problem } : { name, identity: read, isActive });
   }
   return result;
 }
-function listProviderNames(readdir, providersDir) {
-  let entries;
+function setDefaultConfigProfile(paths, identityName, profileName) {
+  if (!identityExists(paths, identityName)) {
+    throw new IdentityNotFoundError(identityName);
+  }
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    defaultConfigProfile: profileName
+  });
+}
+function setAllowAmbientCredential(paths, identityName, allow) {
+  if (!identityExists(paths, identityName)) {
+    throw new IdentityNotFoundError(identityName);
+  }
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    allowAmbientCredential: allow
+  });
+}
+function setIdentityCredential(paths, identityName, change) {
+  const existing = readIdentity(paths, identityName);
+  if (existing === void 0) {
+    throw new IdentityNotFoundError(identityName);
+  }
+  if (change === false) {
+    return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, { credential: void 0 });
+  }
+  const sources = change.sources ?? existing.credential?.sources;
+  if (sources === void 0) {
+    throw new UsageError(`Identity "${identityName}" has no credential yet: pass --credential to give it one before choosing its target.`);
+  }
+  const target = change.target ?? existing.credential?.target;
+  const cache = change.cache === void 0 ? existing.credential?.cache : change.cache === false ? void 0 : change.cache;
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    credential: { sources: [...sources], ...target === void 0 ? {} : { target }, ...cache === void 0 ? {} : { cache } }
+  });
+}
+function belongsToIdentity(entry, name) {
+  return entry === name || entry === import_node_path16.default.basename(identityLockPath("", name)) || entry.startsWith(`.${name}.scratch.`) || entry.startsWith(`.${name}.previous.`);
+}
+function removeIdentity(paths, name) {
+  if (!identityExists(paths, name)) {
+    throw new IdentityNotFoundError(name);
+  }
+  for (const entry of import_node_fs4.default.readdirSync(paths.identitiesDir)) {
+    if (belongsToIdentity(entry, name)) {
+      import_node_fs4.default.rmSync(import_node_path16.default.join(paths.identitiesDir, entry), { recursive: true, force: true });
+    }
+  }
+  if (readActiveIdentity(paths) === name) {
+    import_node_fs4.default.rmSync(paths.activeIdentityFile);
+  }
+}
+
+// src/providersStore.ts
+var import_node_fs5 = __toESM(require("node:fs"), 1);
+var import_node_path17 = __toESM(require("node:path"), 1);
+
+// src/credentialCache.ts
+var import_zod11 = require("zod");
+var MS_PER_UNIT = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
+var CachedCredentialSchema = import_zod11.z.strictObject({
+  token: import_zod11.z.string().min(1),
+  fetchedAt: import_zod11.z.number().int().nonnegative(),
+  source: CredentialSourceSchema
+});
+function effectiveStore(cache, platform) {
+  return cache.store ?? (platform === "darwin" ? "keychain" : "file");
+}
+function ttlMs(cache) {
+  if (cache.ttl === void 0) {
+    return void 0;
+  }
+  const multiplier = MS_PER_UNIT[cache.ttl.slice(-1)];
+  if (multiplier === void 0) {
+    throw new Error(`credential cache ttl "${cache.ttl}" has no recognised unit`);
+  }
+  return Number(cache.ttl.slice(0, -1)) * multiplier;
+}
+function isFresh(entry, cache, now) {
+  const limit = ttlMs(cache);
+  if (entry.fetchedAt > now) {
+    return false;
+  }
+  return limit === void 0 || now - entry.fetchedAt < limit;
+}
+function cacheAgeMs(entry, now) {
+  return Math.max(0, now - entry.fetchedAt);
+}
+function describeCachedCredential(params) {
+  const store = effectiveStore(params.cache, params.platform);
+  let entry;
   try {
-    entries = readdir(providersDir);
-  } catch {
-    return [];
+    entry = params.port.read(store, params.owner);
+  } catch (error) {
+    return { store, status: "unreadable", reason: error instanceof Error ? error.message : String(error) };
   }
-  return entries.filter((entry) => entry.endsWith(".json")).map((entry) => entry.slice(0, -".json".length)).sort();
+  if (entry === void 0) {
+    return { store, status: "empty" };
+  }
+  const limit = ttlMs(params.cache);
+  const ageMs = cacheAgeMs(entry, params.nowMs);
+  return {
+    store,
+    status: isFresh(entry, params.cache, params.nowMs) ? "fresh" : "expired",
+    ageMs,
+    ...limit === void 0 ? {} : { expiresInMs: limit - ageMs }
+  };
 }
-function describeProviderEndpoint(provider) {
-  return isCodexProvider(provider) ? "codex translation daemon" : provider.baseUrl;
+function formatCachedCredentialState(state) {
+  if (state.status === "empty") {
+    return `no cached entry in the ${state.store} store yet`;
+  }
+  if (state.status === "unreadable") {
+    return `the ${state.store} store cannot be read here: ${state.reason}`;
+  }
+  if (state.status === "expired" && (state.expiresInMs === void 0 || state.expiresInMs > 0)) {
+    return "cached with a timestamp in the future, treated as expired";
+  }
+  const age = `cached ${formatAge(state.ageMs)} ago`;
+  if (state.expiresInMs === void 0) {
+    return `${age}, no expiry`;
+  }
+  return state.status === "fresh" ? `${age}, expires in ${formatAge(state.expiresInMs)}` : `${age}, expired ${formatAge(-state.expiresInMs)} ago`;
 }
-var ProviderKindMismatchError = class extends UsageError {
-  constructor(message) {
-    super(message);
-    this.name = "ProviderKindMismatchError";
+
+// src/credential.ts
+var CREDENTIAL_UNAVAILABLE_EXIT = 64;
+var CREDENTIAL_COMMAND_TIMEOUT_MS = 1e4;
+var CREDENTIAL_INTERACTIVE_TIMEOUT_MS = 12e4;
+var GROUP_OTHER_PERMISSION_BITS = 63;
+var PERMISSION_BITS = 511;
+var OCTAL_RADIX2 = 8;
+function commandArgv(source) {
+  if ("command" in source) {
+    return source.command;
+  }
+  if ("op" in source) {
+    return ["op", "read", source.op];
+  }
+  const account = source.keychain.account;
+  return ["security", "find-generic-password", "-s", source.keychain.service, ...account === void 0 ? [] : ["-a", account], "-w"];
+}
+function isInteractiveSource(source, env) {
+  if ("command" in source || "keychain" in source) {
+    return source.interactive ?? false;
   }
-};
-function isEmptyCodexConfig(config) {
-  return config === void 0 || config.defaultModel === void 0 && config.effort === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
+  if ("op" in source) {
+    return source.interactive ?? (env.OP_SERVICE_ACCOUNT_TOKEN ?? "") === "";
+  }
+  return false;
 }
-function addProvider(paths, name, input) {
-  if (providerExists(paths, name)) {
-    throw new ProviderAlreadyExistsError(name);
+function summariseSource(source) {
+  if ("env" in source) {
+    return { kind: "env", variable: source.env };
   }
-  if (!PROVIDER_NAME_RE.test(name)) {
-    throw new InvalidProviderNameError(name);
+  if ("file" in source) {
+    return { kind: "file", path: source.file };
   }
-  const kind = input.kind ?? "http";
-  if (kind === "codex" && input.baseUrl !== void 0) {
-    throw new ProviderKindMismatchError("A codex provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
+  if ("command" in source) {
+    return { kind: "command", program: source.command[0] };
   }
-  if (kind === "http" && input.baseUrl === void 0) {
-    throw new ProviderKindMismatchError("An http provider needs --base-url.");
+  if ("op" in source) {
+    return { kind: "op", reference: source.op };
   }
-  if (kind === "http" && !isEmptyCodexConfig(input.codex)) {
-    throw new ProviderKindMismatchError("Codex settings apply only to a codex provider (--kind codex).");
+  if ("keychain" in source) {
+    return {
+      kind: "keychain",
+      service: source.keychain.service,
+      ...source.keychain.account === void 0 ? {} : { account: source.keychain.account }
+    };
   }
-  const shared = {
-    displayName: input.displayName,
-    credential: { sources: input.sources, ...input.target === void 0 ? {} : { target: input.target } },
-    ...input.env === void 0 || Object.keys(input.env).length === 0 ? {} : { env: input.env }
+  return { kind: "literal" };
+}
+function summariseCredential(credential) {
+  return {
+    target: credential.target ?? "bearer",
+    sources: credential.sources.map(summariseSource),
+    ...credential.cache === void 0 ? {} : { cache: credential.cache }
   };
-  const parsed = ProviderSchema.safeParse(
-    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input.codex) ? {} : { codex: input.codex } } : { ...shared, baseUrl: input.baseUrl }
-  );
-  if (!parsed.success) {
-    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+}
+function formatSourceSummary(summary) {
+  switch (summary.kind) {
+    case "env":
+      return `env ${summary.variable}`;
+    case "file":
+      return `file ${summary.path}`;
+    case "command":
+      return `command ${summary.program}`;
+    case "op":
+      return `op ${summary.reference}`;
+    case "keychain":
+      return `keychain ${summary.service}${summary.account === void 0 ? "" : ` (account ${summary.account})`}`;
+    case "literal":
+      return "literal (non-secret placeholder)";
+    default:
+      return summary;
   }
-  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
-  return parsed.data;
 }
-function updateProvider(paths, name, input) {
-  const existing = readProvider(paths, name);
-  if (existing === void 0) {
-    throw new ProviderNotFoundError(name);
+function describeSource(source) {
+  return formatSourceSummary(summariseSource(source));
+}
+function formatCredentialSummary(summary) {
+  const cache = summary.cache === void 0 ? "" : `, cached ${summary.cache.ttl === void 0 ? "with no expiry" : `for ${summary.cache.ttl}`}${summary.cache.store === void 0 ? "" : ` in the ${summary.cache.store} store`}`;
+  return `${summary.target} from ${summary.sources.map(formatSourceSummary).join(", then ")}${cache}`;
+}
+function describeCredential(credential) {
+  return formatCredentialSummary(summariseCredential(credential));
+}
+function trySource(source, params) {
+  const none = (reason, warn = false) => ({ ok: false, reason, warn });
+  if ("env" in source) {
+    const value = params.env[source.env];
+    return value === void 0 || value === "" ? none("is unset or empty") : { ok: true, token: value };
   }
-  const unset = new Set(input.unsetEnv);
-  const env = Object.fromEntries(Object.entries({ ...existing.env, ...input.env }).filter(([key]) => !unset.has(key)));
-  const target = input.target ?? existing.credential.target;
-  const cache = input.cache === void 0 ? existing.credential.cache : input.cache === false ? void 0 : input.cache;
-  if (isCodexProvider(existing) && input.baseUrl !== void 0) {
-    throw new ProviderKindMismatchError(`Provider "${name}" is a codex provider, which has no base URL.`);
+  if ("literal" in source) {
+    return { ok: true, token: source.literal };
   }
-  if (!isCodexProvider(existing) && !isEmptyCodexConfig(input.codex)) {
-    throw new ProviderKindMismatchError(`Provider "${name}" is an http provider; codex settings apply only to a codex provider.`);
+  if ("file" in source) {
+    const read = params.port.readSecretFile(source.file);
+    if (!read.found) {
+      return none("does not exist");
+    }
+    if (read.mode !== void 0 && (read.mode & GROUP_OTHER_PERMISSION_BITS) !== 0) {
+      return none(
+        `is readable or writable by group or others (mode ${(read.mode & PERMISSION_BITS).toString(OCTAL_RADIX2)}); run \`chmod 600 ${source.file}\``,
+        true
+      );
+    }
+    const token2 = read.content.trim();
+    return token2 === "" ? none("is empty") : { ok: true, token: token2 };
   }
-  const shared = {
-    ...input.displayName === void 0 ? {} : { displayName: input.displayName },
-    credential: {
-      sources: input.sources ?? existing.credential.sources,
-      ...target === void 0 ? {} : { target },
-      ...cache === void 0 ? {} : { cache }
-    },
-    env: Object.keys(env).length === 0 ? void 0 : env
-  };
-  let candidate;
-  if (isCodexProvider(existing)) {
-    const codex = {
-      ...existing.codex,
-      ...input.codex,
-      ...existing.codex?.models === void 0 && input.codex?.models === void 0 ? {} : { models: { ...existing.codex?.models, ...input.codex?.models } }
-    };
-    candidate = { ...existing, ...shared, codex: isEmptyCodexConfig(codex) ? void 0 : codex };
-  } else {
-    candidate = { ...existing, ...shared, ...input.baseUrl === void 0 ? {} : { baseUrl: input.baseUrl } };
+  const argv = commandArgv(source);
+  const interactive = isInteractiveSource(source, params.env);
+  if (interactive && !params.port.personPresent()) {
+    return none("needs a person to approve it, but there is no terminal or desktop session");
   }
-  const parsed = ProviderSchema.safeParse(candidate);
-  if (!parsed.success) {
-    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+  const timeoutMs = source.timeoutMs ?? (interactive ? CREDENTIAL_INTERACTIVE_TIMEOUT_MS : CREDENTIAL_COMMAND_TIMEOUT_MS);
+  const result = params.port.runCommand(argv, { timeoutMs, interactive });
+  if (result.timedOut) {
+    return none(`timed out after ${String(timeoutMs)}ms`);
   }
-  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
-  return parsed.data;
-}
-function removeProvider(paths, name) {
-  if (!providerExists(paths, name)) {
-    throw new ProviderNotFoundError(name);
+  if (result.status !== 0) {
+    const stderr = result.stderr.trim();
+    const outcome = result.status === null ? "could not be run or was killed by a signal" : `exited with status ${String(result.status)}`;
+    return none(`${outcome}${stderr === "" ? "" : `: ${stderr}`}`);
   }
-  import_node_fs5.default.rmSync(providerJsonPath(paths, name));
+  const token = result.stdout.trim();
+  return token === "" ? none("printed no token") : { ok: true, token };
 }
-function cascadeProviderName(cascade) {
-  let name;
-  for (const layer of assembleCascade(cascade).layers) {
-    if (layer.launch?.provider !== void 0) {
-      name = layer.launch.provider;
-    }
-  }
-  return name;
+function warmCommandFor(subject) {
+  const [kind, name] = subject.split(" ");
+  return kind === "provider" ? `agent-shim credential warm --provider ${name ?? ""}` : `agent-shim credential warm ${name ?? ""}`;
 }
-function resolveProvider(params) {
-  const cliName = params.cliProvider !== void 0 && params.cliProvider !== "" ? params.cliProvider : void 0;
-  const name = cliName ?? (params.cascade === void 0 ? void 0 : cascadeProviderName(params.cascade));
-  if (name === void 0) {
-    return void 0;
-  }
-  const definition = loadProvider(params.paths.providersDir, name, params.port);
-  if (definition === void 0) {
-    const known = listProviderNames(params.port.readdir, params.paths.providersDir);
-    return {
-      ok: false,
-      status: 1,
-      message: `agent-shim: no provider named "${name}". ` + (known.length > 0 ? `Known providers: ${known.join(", ")}.` : "No providers are defined yet; run `agent-shim provider add`.")
-    };
-  }
-  if (params.credentials === void 0) {
-    return { ok: false, status: 1, message: `agent-shim: provider ${name} needs its credential resolved, but this launcher has no credential port wired` };
+function resolveCredential(params) {
+  const target = params.credential.target ?? "bearer";
+  const cacheBlock = params.credential.cache;
+  const cache = cacheBlock === void 0 ? void 0 : params.port.cache;
+  const store = cacheBlock === void 0 || cache === void 0 ? void 0 : effectiveStore(cacheBlock, cache.platform);
+  if (cacheBlock !== void 0 && cache !== void 0 && store !== void 0 && params.refresh !== true) {
+    const entry = cache.port.read(store, params.subject);
+    if (entry !== void 0 && isFresh(entry, cacheBlock, cache.now())) {
+      return { ok: true, credential: { target, token: entry.token, source: entry.source, warnings: [], cachedAt: entry.fetchedAt } };
+    }
   }
-  const resolution = resolveCredential({ credential: definition.credential, env: params.env, port: params.credentials, subject: `provider ${name}` });
-  if (!resolution.ok) {
-    return { ok: false, status: CREDENTIAL_UNAVAILABLE_EXIT, message: resolution.message };
+  const attempts = [];
+  const warnings = [];
+  for (const source of params.credential.sources) {
+    const outcome = trySource(source, params);
+    if (outcome.ok) {
+      if (cache !== void 0 && store !== void 0) {
+        cache.port.write(store, params.subject, { token: outcome.token, fetchedAt: cache.now(), source });
+      }
+      return { ok: true, credential: { target, token: outcome.token, source, warnings } };
+    }
+    const line = `${describeSource(source)} ${outcome.reason}`;
+    attempts.push(line);
+    if (outcome.warn) {
+      warnings.push(`agent-shim: ${params.subject}: skipped ${line}`);
+    }
   }
-  return { ok: true, provider: { name, definition, credential: resolution.credential }, warnings: resolution.credential.warnings };
+  const hint = cacheBlock === void 0 ? "" : `; fill the cache from a terminal with \`${warmCommandFor(params.subject)}\``;
+  return { ok: false, message: `agent-shim: ${params.subject} has no usable credential: ${attempts.join("; ")}${hint}` };
+}
+function credentialVariables(target, token) {
+  return {
+    ANTHROPIC_AUTH_TOKEN: target === "bearer" ? token : void 0,
+    ANTHROPIC_API_KEY: target === "apiKey" ? token : void 0,
+    CLAUDE_CODE_OAUTH_TOKEN: target === "oauthToken" ? token : void 0
+  };
 }
 
-// src/directoryRulesStore.ts
-var DirectoryRuleNotFoundError = class extends CliError {
-  constructor(rulePath) {
-    super(`No directory rule found for path "${rulePath}".`);
-    this.rulePath = rulePath;
-    this.name = "DirectoryRuleNotFoundError";
+// src/providersStore.ts
+var ProviderNotFoundError = class extends CliError {
+  constructor(name) {
+    super(`No provider named "${name}". Run \`agent-shim provider add ${name}\` first.`);
+    this.name = name;
+    this.name = "ProviderNotFoundError";
   }
-  rulePath;
+  name;
 };
-var DirectoryRuleMissingTargetError = class extends CliError {
-  constructor() {
-    super("A directory rule must set at least one of --config-profile or --identity.");
-    this.name = "DirectoryRuleMissingTargetError";
+var ProviderAlreadyExistsError = class extends CliError {
+  constructor(providerName) {
+    super(`A provider named "${providerName}" already exists.`);
+    this.providerName = providerName;
+    this.name = "ProviderAlreadyExistsError";
   }
+  providerName;
 };
-var DirectoryRuleAlreadyExistsError = class extends CliError {
-  constructor(rulePath) {
-    super(`A directory rule for path "${rulePath}" already exists. Use \`agent-shim rule set\` to change it.`);
-    this.rulePath = rulePath;
-    this.name = "DirectoryRuleAlreadyExistsError";
+var InvalidProviderNameError = class extends CliError {
+  constructor(attemptedName) {
+    super(
+      `"${attemptedName}" is not a valid provider name. Provider names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
+    );
+    this.attemptedName = attemptedName;
+    this.name = "InvalidProviderNameError";
   }
-  rulePath;
+  attemptedName;
 };
-function readDirectoryRules(paths) {
-  return readJson(paths.directoryRulesFile, DirectoryRulesSchema) ?? { rules: [] };
+var PROVIDER_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._@-]*$/;
+function providerJsonPath(paths, name) {
+  return import_node_path17.default.join(paths.providersDir, `${name}.json`);
 }
-function writeDirectoryRules(paths, rules) {
-  const parsed = DirectoryRulesSchema.safeParse(rules);
-  if (!parsed.success) {
-    throw new ConfigValidationError(paths.directoryRulesFile, parsed.error.issues);
-  }
-  writeJsonAtomic(paths.directoryRulesFile, parsed.data);
+function providerExists(paths, name) {
+  return import_node_fs5.default.existsSync(providerJsonPath(paths, name));
 }
-function listDirectoryRules(paths) {
-  return readDirectoryRules(paths).rules;
+var LEGACY_PROVIDER_FIELDS = ["tokenEnv", "tokenCommand", "authScheme"];
+var LEGACY_ENV_CREDENTIAL_KEYS = Object.values(CREDENTIAL_TARGET_VARS);
+var LEGACY_LITERAL_PLACEHOLDER = "<the value of env.ANTHROPIC_AUTH_TOKEN>";
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function addDirectoryRule(paths, rulePath, options) {
-  if (options.configProfile === void 0 && options.identity === void 0) {
-    throw new DirectoryRuleMissingTargetError();
+function legacyProviderConversion(raw) {
+  if (!isRecord3(raw) || "credential" in raw) {
+    return void 0;
   }
-  const current = readDirectoryRules(paths);
-  if (current.rules.some((rule) => rule.path === rulePath)) {
-    throw new DirectoryRuleAlreadyExistsError(rulePath);
+  const env = isRecord3(raw.env) ? raw.env : void 0;
+  const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
+  const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
+  if (fields.length === 0) {
+    return void 0;
   }
-  const created = buildNewRule(rulePath, options);
-  writeDirectoryRules(paths, { ...current, rules: [...current.rules, created] });
-  return created;
-}
-function ruleHasEffect(rule) {
-  return rule.configProfile !== void 0 || rule.identity !== void 0 || rule.categories !== void 0 || rule.entries !== void 0 || rule.launch !== void 0;
-}
-function updateDirectoryRule(paths, rulePath, options) {
-  const current = readDirectoryRules(paths);
-  const index = current.rules.findIndex((rule) => rule.path === rulePath);
-  const existing = index === -1 ? void 0 : current.rules[index];
-  if (existing === void 0) {
-    throw new DirectoryRuleNotFoundError(rulePath);
+  const sources = [];
+  if (typeof raw.tokenEnv === "string") {
+    sources.push({ env: raw.tokenEnv });
   }
-  const { configProfile, identity, ...rest } = existing;
-  const nextConfigProfile = options.configProfile === void 0 ? configProfile : options.configProfile === false ? void 0 : options.configProfile;
-  const nextIdentity = options.identity === void 0 ? identity : options.identity === false ? void 0 : options.identity;
-  const updated = {
-    ...rest,
-    ...nextConfigProfile === void 0 ? {} : { configProfile: nextConfigProfile },
-    ...nextIdentity === void 0 ? {} : { identity: nextIdentity }
-  };
-  if (!ruleHasEffect(updated)) {
-    throw new DirectoryRuleMissingTargetError();
+  if (Array.isArray(raw.tokenCommand)) {
+    sources.push({ command: raw.tokenCommand });
   }
-  const nextRules = [...current.rules];
-  nextRules[index] = updated;
-  writeDirectoryRules(paths, { ...current, rules: nextRules });
-  return updated;
-}
-function buildNewRule(rulePath, options) {
+  if (typeof env?.ANTHROPIC_AUTH_TOKEN === "string" && env.ANTHROPIC_AUTH_TOKEN !== "") {
+    sources.push({ literal: LEGACY_LITERAL_PLACEHOLDER });
+  }
+  const remainingEnv = env === void 0 ? void 0 : Object.fromEntries(Object.entries(env).filter(([key]) => !LEGACY_ENV_CREDENTIAL_KEYS.includes(key)));
+  const replacedKeys = [...LEGACY_PROVIDER_FIELDS, "env"];
+  const rest = Object.fromEntries(Object.entries(raw).filter(([key]) => !replacedKeys.includes(key)));
   return {
-    path: rulePath,
-    ...options.configProfile !== void 0 ? { configProfile: options.configProfile } : {},
-    ...options.identity !== void 0 ? { identity: options.identity } : {}
+    fields,
+    replacement: {
+      ...rest,
+      credential: { sources, ...raw.authScheme === "apiKey" ? { target: "apiKey" } : {} },
+      ...remainingEnv === void 0 || Object.keys(remainingEnv).length === 0 ? {} : { env: remainingEnv }
+    }
   };
 }
-function removeDirectoryRule(paths, rulePath) {
-  const current = readDirectoryRules(paths);
-  const nextRules = current.rules.filter((rule) => rule.path !== rulePath);
-  if (nextRules.length === current.rules.length) {
-    throw new DirectoryRuleNotFoundError(rulePath);
+var LegacyProviderFileError = class extends CliError {
+  constructor(filePath, conversion) {
+    super(
+      `${filePath} uses ${conversion.fields.join(", ")}, which a credential block replaced. Rewrite it as:
+` + JSON.stringify(conversion.replacement, null, 2)
+    );
+    this.filePath = filePath;
+    this.conversion = conversion;
+    this.name = "LegacyProviderFileError";
   }
-  writeDirectoryRules(paths, { ...current, rules: nextRules });
-}
-
-// src/checkReport.ts
-var import_node_os4 = __toESM(require("node:os"), 1);
-
-// src/launcher/cascade.ts
-var import_node_path18 = __toESM(require("node:path"), 1);
-
-// src/pathNorm.ts
-var import_node_path17 = __toESM(require("node:path"), 1);
-function expandTilde(value, home) {
-  if (value === "~") {
-    return home;
+  filePath;
+  conversion;
+};
+function parseProviderFile(filePath, raw) {
+  const conversion = legacyProviderConversion(raw);
+  if (conversion !== void 0) {
+    throw new LegacyProviderFileError(filePath, conversion);
   }
-  if (value.startsWith("~/")) {
-    return import_node_path17.default.join(home, value.slice(2));
+  const parsed = ProviderSchema.safeParse(raw);
+  if (!parsed.success) {
+    throw new ConfigValidationError(filePath, parsed.error.issues);
   }
-  return value;
-}
-function normaliseRulePath(rulePath, home) {
-  return import_node_path17.default.resolve(expandTilde(rulePath, home));
+  return parsed.data;
 }
-
-// src/launcher/cascade.ts
-var PORTABLE_CONFIG_FILENAME = ".agent-shim.json";
-var PORTABLE_LOCAL_CONFIG_FILENAME = ".agent-shim.local.json";
-function loadCascadeInput(params) {
-  const globalConfig = loadConfigFile(params.paths.globalConfigFile, GlobalConfigSchema, params.read);
-  const directoryRules = loadConfigFile(params.paths.directoryRulesFile, DirectoryRulesSchema, params.read);
-  const loadProfile = (name) => {
-    const filepath = import_node_path18.default.join(params.paths.configProfilesDir, `${name}.json`);
-    const loaded = loadConfigFile(filepath, ConfigProfileSchema, params.read);
-    if (loaded === void 0) {
-      return void 0;
-    }
-    return { name, profile: loaded.config, entryOrder: loaded.entryOrder, filepath: loaded.filepath };
-  };
-  const limit = globalConfig?.config.walkUpLimit;
-  const dirs = walkDirectoryAncestors(params.cwd, {
-    home: params.home,
-    ...limit === void 0 ? {} : { limit: expandTilde(limit, params.home) },
-    ...params.isReadable === void 0 ? {} : { isReadable: params.isReadable }
-  });
-  const levels = [];
-  for (const dir of dirs) {
-    const portable = loadConfigFile(import_node_path18.default.join(dir, PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(import_node_path18.default.join(dir, LEGACY_PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read);
-    const portableLocal = loadConfigFile(import_node_path18.default.join(dir, PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(import_node_path18.default.join(dir, LEGACY_PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read);
-    const rules = (directoryRules?.config.rules ?? []).map((rule, index) => ({ rule, index })).filter(({ rule }) => normaliseRulePath(rule.path, params.home) === dir).map(({ rule, index }) => {
-      const entryOrder = directoryRules?.ruleEntryOrders[index];
-      return {
-        rule,
-        ...entryOrder === void 0 ? {} : { entryOrder },
-        filepath: params.paths.directoryRulesFile
-      };
-    });
-    if (portable === void 0 && portableLocal === void 0 && rules.length === 0) {
-      continue;
-    }
-    levels.push({
-      dir,
-      ...portable === void 0 ? {} : { portable: { config: portable.config, entryOrder: portable.entryOrder, filepath: portable.filepath } },
-      ...rules.length === 0 ? {} : { rules },
-      ...portableLocal === void 0 ? {} : { portableLocal: { config: portableLocal.config, entryOrder: portableLocal.entryOrder, filepath: portableLocal.filepath } }
-    });
+function readProvider(paths, name) {
+  const filePath = providerJsonPath(paths, name);
+  if (!import_node_fs5.default.existsSync(filePath)) {
+    return void 0;
   }
-  const input = {
-    home: params.home,
-    ...globalConfig === void 0 ? {} : { globalConfig: { config: globalConfig.config, entryOrder: globalConfig.entryOrder, filepath: globalConfig.filepath } },
-    ...params.baseConfigProfile === void 0 ? {} : { baseConfigProfile: params.baseConfigProfile },
-    loadProfile,
-    levels,
-    ...params.cliOverride === void 0 ? {} : { cliOverride: params.cliOverride }
-  };
-  return { input, ...globalConfig === void 0 ? {} : { globalConfig: globalConfig.config } };
+  const raw = JSON.parse(import_node_fs5.default.readFileSync(filePath, "utf8"));
+  return parseProviderFile(filePath, raw);
 }
-function readDirectorySelections(loaded) {
-  let identity;
-  let configProfile;
-  for (const level of loaded.input.levels ?? []) {
-    for (const source of [level.portable?.config, ...(level.rules ?? []).map((entry) => entry.rule), level.portableLocal?.config]) {
-      if (source === void 0) {
-        continue;
-      }
-      if (source.identity !== void 0) {
-        identity = source.identity;
-      }
-      if (source.configProfile !== void 0) {
-        configProfile = source.configProfile;
+function loadProvider(providersDir, name, port) {
+  const filePath = import_node_path17.default.join(providersDir, `${name}.json`);
+  const raw = port.readConfigFile(filePath);
+  return raw === void 0 ? void 0 : parseProviderFile(filePath, raw);
+}
+function listProviders(paths) {
+  const names = listProviderNames(
+    (dir) => import_node_fs5.default.readdirSync(dir),
+    paths.providersDir
+  );
+  const result = [];
+  for (const name of names) {
+    let provider;
+    try {
+      provider = readProvider(paths, name);
+    } catch (error) {
+      if (!(error instanceof ConfigValidationError || error instanceof LegacyProviderFileError)) {
+        throw error;
       }
+      console.error(`agent-shim: providers/${name}.json is invalid and was skipped: ${error.message}`);
+      continue;
+    }
+    if (provider !== void 0) {
+      result.push({ name, provider });
     }
   }
-  return { ...identity === void 0 ? {} : { identity }, ...configProfile === void 0 ? {} : { configProfile } };
-}
-
-// src/usage/preflight.ts
-var MS_PER_SECOND2 = 1e3;
-var SECONDS_PER_MINUTE = 60;
-var MINUTES_PER_HOUR = 60;
-var HOURS_PER_DAY = 24;
-var WARNING_STATUSES = /* @__PURE__ */ new Set(["allowed_warning", "rejected"]);
-function formatAge(ms) {
-  const minutes = Math.floor(ms / (MS_PER_SECOND2 * SECONDS_PER_MINUTE));
-  if (minutes < MINUTES_PER_HOUR) {
-    return `${String(Math.max(minutes, 0))}m`;
-  }
-  const hours = Math.floor(minutes / MINUTES_PER_HOUR);
-  return hours < HOURS_PER_DAY ? `${String(hours)}h` : `${String(Math.floor(hours / HOURS_PER_DAY))}d`;
-}
-function effectiveWindow(window, nowMs) {
-  const resetsAtMs = window.resetsAt === void 0 ? void 0 : Date.parse(window.resetsAt);
-  if (resetsAtMs !== void 0 && resetsAtMs <= nowMs) {
-    return { reset: true, utilization: 0 };
-  }
-  return {
-    reset: false,
-    ...window.utilization === void 0 ? {} : { utilization: window.utilization },
-    ...resetsAtMs === void 0 ? {} : { resetsAtMs },
-    ...window.status === void 0 ? {} : { status: window.status }
-  };
+  return result;
 }
-function quotaWarnings(snapshot, provider, nowMs) {
-  const rateLimit = snapshot?.providers[provider]?.rateLimit;
-  const unified = rateLimit?.unified;
-  if (snapshot === void 0 || rateLimit === void 0 || unified === void 0) {
+function listProviderNames(readdir, providersDir) {
+  let entries;
+  try {
+    entries = readdir(providersDir);
+  } catch {
     return [];
   }
-  const age = formatAge(nowMs - Date.parse(rateLimit.observedAt));
-  const windows = [
-    { name: "five-hour", window: unified.fiveHour },
-    { name: "seven-day", window: unified.sevenDay }
-  ];
-  return windows.flatMap(({ name, window }) => {
-    const effective = window === void 0 ? void 0 : effectiveWindow(window, nowMs);
-    if (window === void 0 || effective?.status === void 0 || !WARNING_STATUSES.has(effective.status)) {
-      return [];
-    }
-    const reset = window.resetsAt === void 0 ? "" : `, resets ${window.resetsAt}`;
-    const verdict = effective.status === "rejected" ? "exhausted" : "nearly used";
-    return [`agent-shim: identity ${snapshot.identity}: the ${name} quota is ${verdict}${reset} (last seen ${age} ago)`];
-  });
+  return entries.filter((entry) => entry.endsWith(".json")).map((entry) => entry.slice(0, -".json".length)).sort();
 }
-
-// src/usage/poolPick.ts
-var import_node_path19 = __toESM(require("node:path"), 1);
-var import_zod9 = require("zod");
-
-// src/usage/plan.ts
-var TIER_MULTIPLIER = /(?:^|_)(\d+)x$/;
-var ZERO_TIER = /(?:^|_)zero$/;
-var BASE_TIER = /(?:^|_)(?:pro|free)$/;
-function planOf(account) {
-  const tier = account?.organizationRateLimitTier ?? account?.userRateLimitTier;
-  const tierField = tier === void 0 ? {} : { tier };
-  if (tier === void 0) {
-    return { kind: "subscription", capacity: 1, recognised: false };
+function describeProviderEndpoint(provider) {
+  return isCodexProvider(provider) ? "codex translation daemon" : provider.baseUrl;
+}
+var ProviderKindMismatchError = class extends UsageError {
+  constructor(message) {
+    super(message);
+    this.name = "ProviderKindMismatchError";
   }
-  if (ZERO_TIER.test(tier)) {
-    return { kind: "pay-per-use", ...tierField };
+};
+function isEmptyCodexConfig(config) {
+  return config === void 0 || config.defaultModel === void 0 && config.effort === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
+}
+function addProvider(paths, name, input) {
+  if (providerExists(paths, name)) {
+    throw new ProviderAlreadyExistsError(name);
   }
-  const multiplier = TIER_MULTIPLIER.exec(tier)?.[1];
-  if (multiplier !== void 0) {
-    return { kind: "subscription", capacity: Number(multiplier), recognised: true, ...tierField };
+  if (!PROVIDER_NAME_RE.test(name)) {
+    throw new InvalidProviderNameError(name);
   }
-  return { kind: "subscription", capacity: 1, recognised: BASE_TIER.test(tier), ...tierField };
-}
-
-// src/usage/rateLimit.ts
-var MS_PER_SECOND3 = 1e3;
-function epochSecondsToIso(value) {
-  if (value === void 0) {
-    return void 0;
+  const kind = input.kind ?? "http";
+  if (kind === "codex" && input.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError("A codex provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
   }
-  const seconds = Number(value);
-  return Number.isFinite(seconds) && seconds > 0 ? new Date(seconds * MS_PER_SECOND3).toISOString() : void 0;
-}
-function nonNegativeNumber(value) {
-  if (value === void 0 || value.trim() === "") {
-    return void 0;
+  if (kind === "http" && input.baseUrl === void 0) {
+    throw new ProviderKindMismatchError("An http provider needs --base-url.");
   }
-  const parsed = Number(value);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
-}
-var UNIFIED_PREFIX = "anthropic-ratelimit-unified-";
-function unifiedWindow(headers, window) {
-  const utilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}${window}-utilization`]);
-  const resetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}${window}-reset`]);
-  const status = headers[`${UNIFIED_PREFIX}${window}-status`];
-  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
-    return void 0;
+  if (kind === "http" && !isEmptyCodexConfig(input.codex)) {
+    throw new ProviderKindMismatchError("Codex settings apply only to a codex provider (--kind codex).");
   }
-  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
+  const shared = {
+    displayName: input.displayName,
+    credential: { sources: input.sources, ...input.target === void 0 ? {} : { target: input.target } },
+    ...input.env === void 0 || Object.keys(input.env).length === 0 ? {} : { env: input.env }
+  };
+  const parsed = ProviderSchema.safeParse(
+    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input.codex) ? {} : { codex: input.codex } } : { ...shared, baseUrl: input.baseUrl }
+  );
+  if (!parsed.success) {
+    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+  }
+  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
+  return parsed.data;
 }
-function parseUnifiedRateLimit(headers) {
-  if (!Object.keys(headers).some((name) => name.startsWith(UNIFIED_PREFIX))) {
-    return void 0;
+function updateProvider(paths, name, input) {
+  const existing = readProvider(paths, name);
+  if (existing === void 0) {
+    throw new ProviderNotFoundError(name);
   }
-  const status = headers[`${UNIFIED_PREFIX}status`];
-  const fiveHour = unifiedWindow(headers, "5h");
-  const sevenDay = unifiedWindow(headers, "7d");
-  const representativeClaim = headers[`${UNIFIED_PREFIX}representative-claim`];
-  const resetAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}reset`]);
-  const overageStatus = headers[`${UNIFIED_PREFIX}overage-status`];
-  return {
-    ...status === void 0 ? {} : { status },
-    ...fiveHour === void 0 ? {} : { fiveHour },
-    ...sevenDay === void 0 ? {} : { sevenDay },
-    ...representativeClaim === void 0 ? {} : { representativeClaim },
-    ...resetAt === void 0 ? {} : { resetAt },
-    ...overageStatus === void 0 ? {} : { overageStatus }
+  const unset = new Set(input.unsetEnv);
+  const env = Object.fromEntries(Object.entries({ ...existing.env, ...input.env }).filter(([key]) => !unset.has(key)));
+  const target = input.target ?? existing.credential.target;
+  const cache = input.cache === void 0 ? existing.credential.cache : input.cache === false ? void 0 : input.cache;
+  if (isCodexProvider(existing) && input.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError(`Provider "${name}" is a codex provider, which has no base URL.`);
+  }
+  if (!isCodexProvider(existing) && !isEmptyCodexConfig(input.codex)) {
+    throw new ProviderKindMismatchError(`Provider "${name}" is an http provider; codex settings apply only to a codex provider.`);
+  }
+  const shared = {
+    ...input.displayName === void 0 ? {} : { displayName: input.displayName },
+    credential: {
+      sources: input.sources ?? existing.credential.sources,
+      ...target === void 0 ? {} : { target },
+      ...cache === void 0 ? {} : { cache }
+    },
+    env: Object.keys(env).length === 0 ? void 0 : env
   };
-}
-
-// src/usage/scan.ts
-var import_zod8 = require("zod");
-var AnthropicUsageSchema = import_zod8.z.looseObject({
-  input_tokens: import_zod8.z.number().int().nonnegative().nullish(),
-  output_tokens: import_zod8.z.number().int().nonnegative().nullish(),
-  cache_creation_input_tokens: import_zod8.z.number().int().nonnegative().nullish(),
-  cache_read_input_tokens: import_zod8.z.number().int().nonnegative().nullish()
-});
-var ErrorObjectSchema = import_zod8.z.looseObject({
-  type: import_zod8.z.string().optional(),
-  code: import_zod8.z.union([import_zod8.z.string(), import_zod8.z.number()]).optional(),
-  message: import_zod8.z.string().optional()
-});
-
-// src/usage/middleware.ts
-var ANTHROPIC_PROVIDER = "anthropic";
-
-// src/usage/pick.ts
-var MS_PER_SECOND4 = 1e3;
-var MS_PER_HOUR = 36e5;
-var HOURS_PER_DAY2 = 24;
-var FIVE_HOURS = 5;
-var PROMPT_CACHE_TTL_HOURS = 1;
-var PERCENT = 100;
-var SEVEN_DAYS = 7;
-var FIVE_HOUR_WINDOW_MS = FIVE_HOURS * MS_PER_HOUR;
-var SEVEN_DAY_WINDOW_MS = SEVEN_DAYS * HOURS_PER_DAY2 * MS_PER_HOUR;
-var PROMPT_CACHE_TTL_MS = PROMPT_CACHE_TTL_HOURS * MS_PER_HOUR;
-var CLASS_ORDER = { scored: 0, unknown: 1, "pay-per-use": 2, ineligible: 3 };
-function unifiedOf(state) {
-  return state?.rateLimit?.unified;
-}
-function limitBlockedUntil(state, nowMs) {
-  const limit = state?.lastLimit;
-  if (state === void 0 || limit === void 0) {
-    return void 0;
+  let candidate;
+  if (isCodexProvider(existing)) {
+    const codex = {
+      ...existing.codex,
+      ...input.codex,
+      ...existing.codex?.models === void 0 && input.codex?.models === void 0 ? {} : { models: { ...existing.codex?.models, ...input.codex?.models } }
+    };
+    candidate = { ...existing, ...shared, codex: isEmptyCodexConfig(codex) ? void 0 : codex };
+  } else {
+    candidate = { ...existing, ...shared, ...input.baseUrl === void 0 ? {} : { baseUrl: input.baseUrl } };
   }
-  if (Date.parse(state.lastRequestAt) > Date.parse(limit.observedAt)) {
-    return void 0;
+  const parsed = ProviderSchema.safeParse(candidate);
+  if (!parsed.success) {
+    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
   }
-  const until = limit.resetAt === void 0 ? limit.retryAfterSeconds === void 0 ? void 0 : Date.parse(limit.observedAt) + limit.retryAfterSeconds * MS_PER_SECOND4 : Date.parse(limit.resetAt);
-  return until !== void 0 && until > nowMs ? until : void 0;
+  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
+  return parsed.data;
 }
-function windowBlockedUntil(windows) {
-  const resets = windows.flatMap((window) => window.status === "rejected" && window.resetsAtMs !== void 0 ? [window.resetsAtMs] : []);
-  return resets.length === 0 ? void 0 : Math.max(...resets);
+function removeProvider(paths, name) {
+  if (!providerExists(paths, name)) {
+    throw new ProviderNotFoundError(name);
+  }
+  import_node_fs5.default.rmSync(providerJsonPath(paths, name));
 }
-function fiveHourBurn(records) {
-  const points = [];
-  for (const record of records) {
-    const window = record.rateLimitHeaders === void 0 ? void 0 : parseUnifiedRateLimit(record.rateLimitHeaders)?.fiveHour;
-    if (window?.utilization !== void 0 && window.resetsAt !== void 0) {
-      points.push({ resetsAt: window.resetsAt, point: { atMs: Date.parse(record.at), utilization: window.utilization } });
+function cascadeProviderName(cascade) {
+  let name;
+  for (const layer of assembleCascade(cascade).layers) {
+    if (layer.launch?.provider !== void 0) {
+      name = layer.launch.provider;
     }
   }
-  const latest = points.at(-1)?.resetsAt;
-  const current = points.filter((entry) => entry.resetsAt === latest).map((entry) => entry.point);
-  const first = current.at(0);
-  const last = current.at(-1);
-  if (first === void 0 || last === void 0 || last.atMs <= first.atMs || last.utilization <= first.utilization) {
+  return name;
+}
+function resolveProvider(params) {
+  const cliName = params.cliProvider !== void 0 && params.cliProvider !== "" ? params.cliProvider : void 0;
+  const name = cliName ?? (params.cascade === void 0 ? void 0 : cascadeProviderName(params.cascade));
+  if (name === void 0) {
     return void 0;
   }
-  return (last.utilization - first.utilization) / (last.atMs - first.atMs);
+  const definition = loadProvider(params.paths.providersDir, name, params.port);
+  if (definition === void 0) {
+    const known = listProviderNames(params.port.readdir, params.paths.providersDir);
+    return {
+      ok: false,
+      status: 1,
+      message: `agent-shim: no provider named "${name}". ` + (known.length > 0 ? `Known providers: ${known.join(", ")}.` : "No providers are defined yet; run `agent-shim provider add`.")
+    };
+  }
+  if (params.credentials === void 0) {
+    return { ok: false, status: 1, message: `agent-shim: provider ${name} needs its credential resolved, but this launcher has no credential port wired` };
+  }
+  const resolution = resolveCredential({ credential: definition.credential, env: params.env, port: params.credentials, subject: `provider ${name}` });
+  if (!resolution.ok) {
+    return { ok: false, status: CREDENTIAL_UNAVAILABLE_EXIT, message: resolution.message };
+  }
+  return { ok: true, provider: { name, definition, credential: resolution.credential }, warnings: resolution.credential.warnings };
 }
-function percent(fraction) {
-  return `${String(Math.round(fraction * PERCENT))}%`;
+
+// src/directoryRulesStore.ts
+var DirectoryRuleNotFoundError = class extends CliError {
+  constructor(rulePath) {
+    super(`No directory rule found for path "${rulePath}".`);
+    this.rulePath = rulePath;
+    this.name = "DirectoryRuleNotFoundError";
+  }
+  rulePath;
+};
+var DirectoryRuleMissingTargetError = class extends CliError {
+  constructor() {
+    super("A directory rule must set at least one of --config-profile or --identity.");
+    this.name = "DirectoryRuleMissingTargetError";
+  }
+};
+var DirectoryRuleAlreadyExistsError = class extends CliError {
+  constructor(rulePath) {
+    super(`A directory rule for path "${rulePath}" already exists. Use \`agent-shim rule set\` to change it.`);
+    this.rulePath = rulePath;
+    this.name = "DirectoryRuleAlreadyExistsError";
+  }
+  rulePath;
+};
+function readDirectoryRules(paths) {
+  return readJson(paths.directoryRulesFile, DirectoryRulesSchema) ?? { rules: [] };
 }
-function describeWindow(label, window, effective, nowMs) {
-  if (effective.reset) {
-    return `${label} window has reset`;
+function writeDirectoryRules(paths, rules) {
+  const parsed = DirectoryRulesSchema.safeParse(rules);
+  if (!parsed.success) {
+    throw new ConfigValidationError(paths.directoryRulesFile, parsed.error.issues);
   }
-  const used = effective.utilization === void 0 ? "usage unknown" : `${percent(effective.utilization)} used`;
-  const resets = effective.resetsAtMs === void 0 ? "" : `, resets in ${formatAge(effective.resetsAtMs - nowMs)}`;
-  return `${label} ${used}${resets}${window.status === "allowed_warning" ? " (nearly used)" : ""}`;
+  writeJsonAtomic(paths.directoryRulesFile, parsed.data);
 }
-function capacityOf(plan) {
-  return plan.kind === "subscription" ? plan.capacity : 1;
+function listDirectoryRules(paths) {
+  return readDirectoryRules(paths).rules;
 }
-function assess(member, nowMs) {
-  const plan = planOf(member.account);
-  const planReasons = plan.kind === "pay-per-use" ? ["billed by use (no plan allowance)"] : plan.recognised ? [`${String(plan.capacity)}x plan`] : [`plan tier ${plan.tier === void 0 ? "not known" : `"${plan.tier}" not recognised`}, counted as 1x`];
-  const base = { identity: member.identity, plan };
-  if (member.readError !== void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: [`usage state unreadable: ${member.readError}`, ...planReasons] } };
-  }
-  const state = member.snapshot?.providers[ANTHROPIC_PROVIDER];
-  const unified = unifiedOf(state);
-  if (member.snapshot === void 0 || state === void 0 || unified === void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: ["no usage recorded yet, so its quota is unknown (turn on trackUsage for it)", ...planReasons] } };
+function addDirectoryRule(paths, rulePath, options) {
+  if (options.configProfile === void 0 && options.identity === void 0) {
+    throw new DirectoryRuleMissingTargetError();
   }
-  const observedAgo = state.rateLimit === void 0 ? "" : ` (last seen ${formatAge(nowMs - Date.parse(state.rateLimit.observedAt))} ago)`;
-  const fiveHourWindow = unified.fiveHour;
-  const sevenDayWindow = unified.sevenDay;
-  const five = fiveHourWindow === void 0 ? void 0 : effectiveWindow(fiveHourWindow, nowMs);
-  const seven = sevenDayWindow === void 0 ? void 0 : effectiveWindow(sevenDayWindow, nowMs);
-  const windowReasons = [
-    ...fiveHourWindow === void 0 || five === void 0 ? [] : [describeWindow("5h", fiveHourWindow, five, nowMs)],
-    ...sevenDayWindow === void 0 || seven === void 0 ? [] : [describeWindow("7d", sevenDayWindow, seven, nowMs)]
-  ];
-  const blockedUntil = Math.max(
-    windowBlockedUntil([five, seven].flatMap((window) => window === void 0 ? [] : [window])) ?? 0,
-    limitBlockedUntil(state, nowMs) ?? 0
-  );
-  if (blockedUntil > nowMs) {
-    if (unified.overageStatus === "allowed") {
-      return { candidate: { ...base, class: "pay-per-use", reasons: [`plan exhausted until ${new Date(blockedUntil).toISOString()}, continues as extra usage`, ...windowReasons, ...planReasons] } };
-    }
-    return { candidate: { ...base, class: "ineligible", blockedUntilMs: blockedUntil, reasons: [`refused until ${new Date(blockedUntil).toISOString()} (in ${formatAge(blockedUntil - nowMs)})`, ...windowReasons, ...planReasons] } };
+  const current = readDirectoryRules(paths);
+  if (current.rules.some((rule) => rule.path === rulePath)) {
+    throw new DirectoryRuleAlreadyExistsError(rulePath);
   }
-  if (plan.kind === "pay-per-use" || fiveHourWindow === void 0 && sevenDayWindow === void 0) {
-    return { candidate: { ...base, class: "pay-per-use", reasons: [...plan.kind === "pay-per-use" ? planReasons : ["no plan windows reported, so usage bills as extra usage"]] } };
+  const created = buildNewRule(rulePath, options);
+  writeDirectoryRules(paths, { ...current, rules: [...current.rules, created] });
+  return created;
+}
+function ruleHasEffect(rule) {
+  return rule.configProfile !== void 0 || rule.identity !== void 0 || rule.categories !== void 0 || rule.entries !== void 0 || rule.launch !== void 0;
+}
+function updateDirectoryRule(paths, rulePath, options) {
+  const current = readDirectoryRules(paths);
+  const index = current.rules.findIndex((rule) => rule.path === rulePath);
+  const existing = index === -1 ? void 0 : current.rules[index];
+  if (existing === void 0) {
+    throw new DirectoryRuleNotFoundError(rulePath);
   }
-  const basis = seven?.utilization !== void 0 ? { window: seven, windowMs: SEVEN_DAY_WINDOW_MS } : five?.utilization !== void 0 ? { window: five, windowMs: FIVE_HOUR_WINDOW_MS } : void 0;
-  if (basis?.window.utilization === void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: ["quota windows reported no utilisation", ...windowReasons, ...planReasons] } };
+  const { configProfile, identity, ...rest } = existing;
+  const nextConfigProfile = options.configProfile === void 0 ? configProfile : options.configProfile === false ? void 0 : options.configProfile;
+  const nextIdentity = options.identity === void 0 ? identity : options.identity === false ? void 0 : options.identity;
+  const updated = {
+    ...rest,
+    ...nextConfigProfile === void 0 ? {} : { configProfile: nextConfigProfile },
+    ...nextIdentity === void 0 ? {} : { identity: nextIdentity }
+  };
+  if (!ruleHasEffect(updated)) {
+    throw new DirectoryRuleMissingTargetError();
   }
-  const remaining = Math.max(0, 1 - basis.window.utilization);
-  const untilResetMs = basis.window.resetsAtMs === void 0 ? basis.windowMs : Math.max(basis.window.resetsAtMs - nowMs, MS_PER_SECOND4);
-  const score = remaining * plan.capacity / (untilResetMs / MS_PER_HOUR);
-  const fiveRemaining = five?.utilization === void 0 ? void 0 : Math.max(0, 1 - five.utilization);
-  const fiveUntil = five?.resetsAtMs === void 0 ? FIVE_HOUR_WINDOW_MS : Math.max(five.resetsAtMs - nowMs, MS_PER_SECOND4);
-  const burn = fiveHourBurn(member.records);
+  const nextRules = [...current.rules];
+  nextRules[index] = updated;
+  writeDirectoryRules(paths, { ...current, rules: nextRules });
+  return updated;
+}
+function buildNewRule(rulePath, options) {
   return {
-    candidate: { ...base, class: "scored", score, reasons: [...windowReasons.map((reason, index) => index === windowReasons.length - 1 ? `${reason}${observedAgo}` : reason), ...planReasons] },
-    ...fiveRemaining === void 0 ? {} : { fiveHour: { remaining: fiveRemaining, untilResetMs: fiveUntil } },
-    ...burn === void 0 ? {} : { burn }
+    path: rulePath,
+    ...options.configProfile !== void 0 ? { configProfile: options.configProfile } : {},
+    ...options.identity !== void 0 ? { identity: options.identity } : {}
   };
 }
-function rankPool(input) {
-  const { members, nowMs } = input;
-  const assessments = members.map((member) => assess(member, nowMs));
-  const demands = assessments.flatMap(({ candidate, burn }) => burn === void 0 ? [] : [burn * capacityOf(candidate.plan)]);
-  const sharedDemand = demands.length === 0 ? void 0 : Math.max(...demands);
-  const candidates = assessments.map((assessment) => {
-    const { candidate, fiveHour, burn } = assessment;
-    const pace = burn ?? (sharedDemand === void 0 ? void 0 : sharedDemand / capacityOf(candidate.plan));
-    if (candidate.class !== "scored" || fiveHour === void 0 || pace === void 0) {
-      return { ...candidate, feasible: true };
-    }
-    const runsDryInMs = fiveHour.remaining / pace;
-    if (runsDryInMs >= fiveHour.untilResetMs) {
-      return { ...candidate, feasible: true };
-    }
-    return { ...candidate, feasible: false, reasons: [`5h window would run dry in ${formatAge(runsDryInMs)}, before it resets in ${formatAge(fiveHour.untilResetMs)}`, ...candidate.reasons] };
-  });
-  const ordered = [...candidates].sort(
-    (left, right) => CLASS_ORDER[left.class] - CLASS_ORDER[right.class] || Number(right.feasible) - Number(left.feasible) || (right.score ?? 0) - (left.score ?? 0) || left.identity.localeCompare(right.identity)
-  );
-  const sticky = input.sticky;
-  const stickyIndex = sticky === void 0 ? -1 : ordered.findIndex((candidate) => candidate.identity === sticky.identity);
-  const stickyCandidate = ordered[stickyIndex];
-  if (sticky !== void 0 && stickyCandidate?.class === "scored" && stickyCandidate.feasible) {
-    const ageMs = nowMs - Date.parse(sticky.at);
-    const warm = ageMs <= PROMPT_CACHE_TTL_MS;
-    if (input.resuming || warm) {
-      const why = warm ? `used here ${formatAge(ageMs)} ago, prompt cache still warm` : "resuming a conversation started on this account";
-      ordered.splice(stickyIndex, 1);
-      ordered.unshift({ ...stickyCandidate, reasons: [why, ...stickyCandidate.reasons] });
-    }
+function removeDirectoryRule(paths, rulePath) {
+  const current = readDirectoryRules(paths);
+  const nextRules = current.rules.filter((rule) => rule.path !== rulePath);
+  if (nextRules.length === current.rules.length) {
+    throw new DirectoryRuleNotFoundError(rulePath);
   }
-  const pick = ordered.find((candidate) => candidate.class !== "ineligible");
-  const returns = ordered.flatMap((candidate) => candidate.blockedUntilMs === void 0 ? [] : [{ identity: candidate.identity, atMs: candidate.blockedUntilMs }]);
-  const earliestReturn = returns.length === 0 ? void 0 : returns.reduce((soonest, entry) => entry.atMs < soonest.atMs ? entry : soonest);
-  return {
-    candidates: ordered,
-    ...pick === void 0 ? { ...earliestReturn === void 0 ? {} : { earliestReturn } } : { pick }
-  };
+  writeDirectoryRules(paths, { ...current, rules: nextRules });
 }
 
-// src/usage/store.ts
-var DAY_MS2 = 864e5;
-var DAYS_IN_WEEK = 7;
-var USAGE_RETENTION_MS = DAYS_IN_WEEK * DAY_MS2;
+// src/checkReport.ts
+var import_node_os4 = __toESM(require("node:os"), 1);
 
-// src/usage/poolPick.ts
-var SCHEMA_VERSION = 1;
-var PickEntrySchema = import_zod9.z.strictObject({ identity: import_zod9.z.string().min(1), at: import_zod9.z.iso.datetime() });
-var PicksFileSchema = import_zod9.z.strictObject({
-  schemaVersion: import_zod9.z.literal(SCHEMA_VERSION),
-  picks: import_zod9.z.record(import_zod9.z.string().min(1), PickEntrySchema)
-});
-function errorMessage(error) {
-  return error instanceof Error ? error.message : String(error);
-}
-function loadPoolMembers(fs12, paths, identities, nowMs) {
-  const windowStartMs = nowMs - FIVE_HOUR_WINDOW_MS;
-  const log = readUsageLog(fs12, paths.usageLogDir, { sinceMs: windowStartMs });
-  return identities.map((identity) => {
-    const records = log.records.filter((record) => record.identity === identity && record.provider === ANTHROPIC_PROVIDER && Date.parse(record.at) >= windowStartMs);
-    try {
-      const snapshot = readUsageSnapshot(fs12, paths.usageSnapshotsDir, identity);
-      const account = readAccountMetadata(fs12, paths.identitiesDir, identity) ?? snapshot?.account;
-      return { identity, records, ...snapshot === void 0 ? {} : { snapshot }, ...account === void 0 ? {} : { account } };
-    } catch (error) {
-      if (error instanceof UsageSnapshotError || error instanceof AccountMetadataError) {
-        return { identity, records, readError: errorMessage(error) };
-      }
-      throw error;
-    }
-  });
-}
-function rankPoolFromStore(params) {
-  return rankPool({
-    members: loadPoolMembers(params.fs, params.paths, params.identities, params.nowMs),
-    nowMs: params.nowMs,
-    resuming: params.resuming,
-    ...params.sticky === void 0 ? {} : { sticky: params.sticky }
-  });
-}
-function readPicksFile(fs12, file) {
-  const empty = { schemaVersion: SCHEMA_VERSION, picks: {} };
-  const raw = fs12.readFileUtf8(file);
-  if (raw === void 0) {
-    return { file: empty };
+// src/launcher/cascade.ts
+var import_node_path19 = __toESM(require("node:path"), 1);
+
+// src/pathNorm.ts
+var import_node_path18 = __toESM(require("node:path"), 1);
+function expandTilde(value, home) {
+  if (value === "~") {
+    return home;
   }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return { file: empty, problem: `${file} is not valid JSON` };
+  if (value.startsWith("~/")) {
+    return import_node_path18.default.join(home, value.slice(2));
   }
-  const result = PicksFileSchema.safeParse(parsed);
-  return result.success ? { file: result.data } : { file: empty, problem: `${file} is not a picks file this agent-shim can read` };
-}
-function readStickyPick(fs12, picksFile, directory) {
-  const read = readPicksFile(fs12, picksFile);
-  const entry = read.file.picks[directory];
-  return { ...entry === void 0 ? {} : { sticky: entry }, ...read.problem === void 0 ? {} : { problem: read.problem } };
+  return value;
 }
-function recordStickyPick(fs12, picksFile, directory, identity, nowMs) {
-  const current = readPicksFile(fs12, picksFile).file.picks;
-  const kept = Object.entries(current).filter(([, entry]) => nowMs - Date.parse(entry.at) <= USAGE_RETENTION_MS);
-  const next = { schemaVersion: SCHEMA_VERSION, picks: { ...Object.fromEntries(kept), [directory]: { identity, at: new Date(nowMs).toISOString() } } };
-  fs12.mkdirPrivate(import_node_path19.default.dirname(picksFile));
-  fs12.writeFilePrivate(picksFile, `${JSON.stringify(next, null, 2)}
-`);
+function normaliseRulePath(rulePath, home) {
+  return import_node_path18.default.resolve(expandTilde(rulePath, home));
 }
 
-// src/launcher/pool.ts
-var RESUME_FLAGS = /* @__PURE__ */ new Set(["--continue", "-c", "--resume", "-r"]);
-var TERMINATOR = "--";
-var REASONS_LOGGED = 3;
-function splitMembers(pool, paths, fs12) {
-  const exists = (name) => loadIdentity(paths.identitiesDir, name, fs12) !== void 0;
-  return { present: pool.identities.filter(exists), missing: pool.identities.filter((name) => !exists(name)) };
-}
-function isResuming(passthrough) {
-  const end = passthrough.indexOf(TERMINATOR);
-  return (end === -1 ? passthrough : passthrough.slice(0, end)).some((token) => RESUME_FLAGS.has(token));
-}
-function resolvePoolLaunch(params) {
-  const { poolName, log } = params;
-  const pool = params.pools?.[poolName];
-  if (pool === void 0) {
-    return { ok: false, message: `agent-shim: no pool named "${poolName}" (selected via ${params.selectedVia}). Run \`agent-shim pool add ${poolName} --identity <name>...\` first.` };
-  }
-  const { present: identities, missing } = splitMembers(pool, params.paths, params.fs);
-  for (const name of missing) {
-    log.warn(`agent-shim: pool "${poolName}" names identity "${name}", which does not exist; skipping it`);
-  }
-  if (identities.length === 0) {
-    return { ok: false, message: `agent-shim: no member of pool "${poolName}" is an existing identity.` };
-  }
-  const resuming = isResuming(params.passthrough);
-  const stickyRead = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd);
-  if (stickyRead.problem !== void 0) {
-    log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
-  }
-  for (; ; ) {
-    const nowMs = params.now();
-    const ranking = rankPoolFromStore({ fs: params.usageFs, paths: params.paths, identities, nowMs, resuming, ...stickyRead.sticky === void 0 ? {} : { sticky: stickyRead.sticky } });
-    const { pick, earliestReturn } = ranking;
-    if (pick !== void 0) {
-      recordStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd, pick.identity, nowMs);
-      return { ok: true, identity: pick.identity, explanation: `pool ${poolName}: ${pick.reasons.slice(0, REASONS_LOGGED).join("; ")}` };
-    }
-    if (earliestReturn === void 0) {
-      return { ok: false, message: `agent-shim: no member of pool "${poolName}" can be picked.` };
+// src/launcher/cascade.ts
+var PORTABLE_CONFIG_FILENAME = ".agent-shim.json";
+var PORTABLE_LOCAL_CONFIG_FILENAME = ".agent-shim.local.json";
+function loadCascadeInput(params) {
+  const globalConfig = loadConfigFile(params.paths.globalConfigFile, GlobalConfigSchema, params.read);
+  const directoryRules = loadConfigFile(params.paths.directoryRulesFile, DirectoryRulesSchema, params.read);
+  const loadProfile = (name) => {
+    const filepath = import_node_path19.default.join(params.paths.configProfilesDir, `${name}.json`);
+    const loaded = loadConfigFile(filepath, ConfigProfileSchema, params.read);
+    if (loaded === void 0) {
+      return void 0;
     }
-    const until = new Date(earliestReturn.atMs).toISOString();
-    if (!params.wait) {
+    return { name, profile: loaded.config, entryOrder: loaded.entryOrder, filepath: loaded.filepath };
+  };
+  const limit = globalConfig?.config.walkUpLimit;
+  const dirs = walkDirectoryAncestors(params.cwd, {
+    home: params.home,
+    ...limit === void 0 ? {} : { limit: expandTilde(limit, params.home) },
+    ...params.isReadable === void 0 ? {} : { isReadable: params.isReadable }
+  });
+  const levels = [];
+  for (const dir of dirs) {
+    const portable = loadConfigFile(import_node_path19.default.join(dir, PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(import_node_path19.default.join(dir, LEGACY_PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read);
+    const portableLocal = loadConfigFile(import_node_path19.default.join(dir, PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(import_node_path19.default.join(dir, LEGACY_PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read);
+    const rules = (directoryRules?.config.rules ?? []).map((rule, index) => ({ rule, index })).filter(({ rule }) => normaliseRulePath(rule.path, params.home) === dir).map(({ rule, index }) => {
+      const entryOrder = directoryRules?.ruleEntryOrders[index];
       return {
-        ok: false,
-        message: `agent-shim: every member of pool "${poolName}" is refused right now; the earliest, ${earliestReturn.identity}, returns at ${until} (in ${formatAge(earliestReturn.atMs - nowMs)}). Pass --wait to sleep until then.`
+        rule,
+        ...entryOrder === void 0 ? {} : { entryOrder },
+        filepath: params.paths.directoryRulesFile
       };
+    });
+    if (portable === void 0 && portableLocal === void 0 && rules.length === 0) {
+      continue;
+    }
+    levels.push({
+      dir,
+      ...portable === void 0 ? {} : { portable: { config: portable.config, entryOrder: portable.entryOrder, filepath: portable.filepath } },
+      ...rules.length === 0 ? {} : { rules },
+      ...portableLocal === void 0 ? {} : { portableLocal: { config: portableLocal.config, entryOrder: portableLocal.entryOrder, filepath: portableLocal.filepath } }
+    });
+  }
+  const input = {
+    home: params.home,
+    ...globalConfig === void 0 ? {} : { globalConfig: { config: globalConfig.config, entryOrder: globalConfig.entryOrder, filepath: globalConfig.filepath } },
+    ...params.baseConfigProfile === void 0 ? {} : { baseConfigProfile: params.baseConfigProfile },
+    loadProfile,
+    levels,
+    ...params.cliOverride === void 0 ? {} : { cliOverride: params.cliOverride }
+  };
+  return { input, ...globalConfig === void 0 ? {} : { globalConfig: globalConfig.config } };
+}
+function readDirectorySelections(loaded) {
+  let identity;
+  let configProfile;
+  for (const level of loaded.input.levels ?? []) {
+    for (const source of [level.portable?.config, ...(level.rules ?? []).map((entry) => entry.rule), level.portableLocal?.config]) {
+      if (source === void 0) {
+        continue;
+      }
+      if (source.identity !== void 0) {
+        identity = source.identity;
+      }
+      if (source.configProfile !== void 0) {
+        configProfile = source.configProfile;
+      }
     }
-    log.info(`agent-shim: every member of pool "${poolName}" is refused; waiting until ${until} for ${earliestReturn.identity}`);
-    params.sleep(Math.max(earliestReturn.atMs - nowMs, 0));
   }
+  return { ...identity === void 0 ? {} : { identity }, ...configProfile === void 0 ? {} : { configProfile } };
 }
 
-// src/poolPickReport.ts
-function candidateView(candidate) {
-  return {
-    identity: candidate.identity,
-    class: candidate.class,
-    ...candidate.score === void 0 ? {} : { score: candidate.score },
-    feasible: candidate.feasible,
-    ...candidate.blockedUntilMs === void 0 ? {} : { blockedUntil: new Date(candidate.blockedUntilMs).toISOString() },
-    plan: candidate.plan,
-    reasons: candidate.reasons
-  };
+// src/realCredentialCache.ts
+var import_node_child_process = require("node:child_process");
+var import_node_fs6 = __toESM(require("node:fs"), 1);
+var import_node_path20 = __toESM(require("node:path"), 1);
+var KEYCHAIN_CACHE_SERVICE = "agent-shim-credential-cache";
+var CACHE_DIR_MODE = 448;
+var CACHE_FILE_MODE = 384;
+function cacheFileNameFor(owner) {
+  return `${owner.replace(/[^A-Za-z0-9._-]/g, "_")}.json`;
 }
-function collectPoolPick(params) {
-  const { present, missing } = splitMembers(params.pool, params.paths, params.fs);
-  const sticky = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.directory);
-  const ranking = rankPoolFromStore({
-    fs: params.usageFs,
-    paths: params.paths,
-    identities: present,
-    nowMs: params.nowMs,
-    resuming: false,
-    ...sticky.sticky === void 0 ? {} : { sticky: sticky.sticky }
-  });
+function parseEntry(raw) {
+  let json;
+  try {
+    json = JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+  const parsed = CachedCredentialSchema.safeParse(json);
+  return parsed.success ? parsed.data : void 0;
+}
+function requireKeychain() {
+  if (process.platform !== "darwin") {
+    throw new Error("the keychain credential store needs macOS; use --credential-cache-store file");
+  }
+}
+function security(args, stdin) {
+  const result = (0, import_node_child_process.spawnSync)("security", args, { encoding: "utf8", ...stdin === void 0 ? {} : { input: stdin }, stdio: ["pipe", "pipe", "ignore"] });
+  return { status: result.status, stdout: result.stdout };
+}
+function createRealCredentialCache(root) {
+  const dir = import_node_path20.default.join(root, "credential-cache");
+  const filePath = (owner) => import_node_path20.default.join(dir, cacheFileNameFor(owner));
   return {
-    pool: params.poolName,
-    directory: params.directory,
-    ...ranking.pick === void 0 ? {} : { pick: ranking.pick.identity },
-    candidates: ranking.candidates.map(candidateView),
-    missing,
-    ...ranking.earliestReturn === void 0 ? {} : { earliestReturn: { identity: ranking.earliestReturn.identity, at: new Date(ranking.earliestReturn.atMs).toISOString() } },
-    ...sticky.problem === void 0 ? {} : { stickyProblem: sticky.problem }
+    read(store, owner) {
+      if (store === "file") {
+        try {
+          return parseEntry(import_node_fs6.default.readFileSync(filePath(owner), "utf8"));
+        } catch {
+          return void 0;
+        }
+      }
+      requireKeychain();
+      const result = security(["find-generic-password", "-s", KEYCHAIN_CACHE_SERVICE, "-a", owner, "-w"]);
+      return result.status === 0 ? parseEntry(Buffer.from(result.stdout.trim(), "base64").toString("utf8")) : void 0;
+    },
+    write(store, owner, entry) {
+      const serialised = JSON.stringify(entry);
+      if (store === "file") {
+        import_node_fs6.default.mkdirSync(dir, { recursive: true, mode: CACHE_DIR_MODE });
+        import_node_fs6.default.chmodSync(dir, CACHE_DIR_MODE);
+        const target = filePath(owner);
+        const temp = `${target}.${String(process.pid)}.tmp`;
+        import_node_fs6.default.writeFileSync(temp, serialised, { mode: CACHE_FILE_MODE });
+        import_node_fs6.default.renameSync(temp, target);
+        return;
+      }
+      requireKeychain();
+      const encoded = Buffer.from(serialised, "utf8").toString("base64");
+      const result = security(["-i"], `add-generic-password -U -s ${KEYCHAIN_CACHE_SERVICE} -a ${JSON.stringify(owner)} -w ${encoded}
+`);
+      if (result.status !== 0) {
+        throw new Error(`could not write the keychain credential cache for ${owner}`);
+      }
+    },
+    remove(store, owner) {
+      if (store === "file") {
+        import_node_fs6.default.rmSync(filePath(owner), { force: true });
+        return;
+      }
+      requireKeychain();
+      security(["delete-generic-password", "-s", KEYCHAIN_CACHE_SERVICE, "-a", owner]);
+    }
   };
 }
+function realCredentialCacheEnv(paths) {
+  return { port: createRealCredentialCache(paths.root), platform: process.platform, now: () => Date.now() };
+}
 
 // src/realPorts.ts
-var import_node_child_process = require("node:child_process");
+var import_node_child_process2 = require("node:child_process");
 var import_node_crypto9 = require("node:crypto");
-var import_node_fs6 = __toESM(require("node:fs"), 1);
+var import_node_fs7 = __toESM(require("node:fs"), 1);
 var import_node_os3 = __toESM(require("node:os"), 1);
-var import_node_path21 = __toESM(require("node:path"), 1);
+var import_node_path22 = __toESM(require("node:path"), 1);
 var import_node_sea = require("node:sea");
 
 // src/versionDiscovery.ts
 var import_node_os2 = __toESM(require("node:os"), 1);
-var import_node_path20 = __toESM(require("node:path"), 1);
+var import_node_path21 = __toESM(require("node:path"), 1);
 function defaultVersionsDir() {
-  return import_node_path20.default.join(import_node_os2.default.homedir(), ".local", "share", "claude", "versions");
+  return import_node_path21.default.join(import_node_os2.default.homedir(), ".local", "share", "claude", "versions");
 }
 var NUMERIC_DOTTED_VERSION_RE = /^\d+(?:\.\d+)*$/;
 function isNumericDottedVersion(name) {
@@ -7164,7 +7330,7 @@ function discoverClaudeBinary(options) {
   const highestVersion = pickHighestVersion(entries);
   if (highestVersion !== void 0) {
     return {
-      path: import_node_path20.default.join(versionsDir, highestVersion),
+      path: import_node_path21.default.join(versionsDir, highestVersion),
       source: "versions-dir",
       version: highestVersion
     };
@@ -7187,7 +7353,7 @@ function isEnoent3(error) {
 var realFsPort = {
   readFileUtf8(filePath) {
     try {
-      return import_node_fs6.default.readFileSync(filePath, "utf8");
+      return import_node_fs7.default.readFileSync(filePath, "utf8");
     } catch (error) {
       if (isEnoent3(error)) {
         return void 0;
@@ -7198,7 +7364,7 @@ var realFsPort = {
   readConfigFile: cosmiconfigReader(),
   readdir(dirPath) {
     try {
-      return import_node_fs6.default.readdirSync(dirPath);
+      return import_node_fs7.default.readdirSync(dirPath);
     } catch (error) {
       if (isEnoent3(error)) {
         return [];
@@ -7217,7 +7383,7 @@ var realFarmFs = {
   lstat(filePath) {
     let stat;
     try {
-      stat = import_node_fs6.default.lstatSync(filePath);
+      stat = import_node_fs7.default.lstatSync(filePath);
     } catch (error) {
       if (isEnoent3(error)) {
         return void 0;
@@ -7229,7 +7395,7 @@ var realFarmFs = {
   },
   readdir(dirPath) {
     try {
-      return import_node_fs6.default.readdirSync(dirPath);
+      return import_node_fs7.default.readdirSync(dirPath);
     } catch (error) {
       if (isEnoent3(error) || isErrorWithCode(error, "ENOTDIR")) {
         return [];
@@ -7238,23 +7404,23 @@ var realFarmFs = {
     }
   },
   mkdirp(dirPath) {
-    import_node_fs6.default.mkdirSync(dirPath, { recursive: true });
+    import_node_fs7.default.mkdirSync(dirPath, { recursive: true });
   },
   symlink(target, linkPath) {
-    import_node_fs6.default.symlinkSync(target, linkPath);
+    import_node_fs7.default.symlinkSync(target, linkPath);
   },
   rename(from, to) {
-    import_node_fs6.default.renameSync(from, to);
+    import_node_fs7.default.renameSync(from, to);
   },
   removeRecursive(targetPath) {
-    import_node_fs6.default.rmSync(targetPath, { recursive: true, force: true });
+    import_node_fs7.default.rmSync(targetPath, { recursive: true, force: true });
   },
   copyRecursive(from, to) {
-    import_node_fs6.default.cpSync(from, to, { recursive: true, force: true, verbatimSymlinks: true });
+    import_node_fs7.default.cpSync(from, to, { recursive: true, force: true, verbatimSymlinks: true });
   },
   readFileUtf8(filePath) {
     try {
-      return import_node_fs6.default.readFileSync(filePath, "utf8");
+      return import_node_fs7.default.readFileSync(filePath, "utf8");
     } catch (error) {
       if (isEnoent3(error)) {
         return void 0;
@@ -7263,36 +7429,36 @@ var realFarmFs = {
     }
   },
   writeFileUtf8(filePath, contents) {
-    import_node_fs6.default.writeFileSync(filePath, contents, "utf8");
+    import_node_fs7.default.writeFileSync(filePath, contents, "utf8");
   },
   mkdirPrivate(dirPath) {
-    import_node_fs6.default.mkdirSync(dirPath, { recursive: true, mode: OWNER_ONLY_DIR_MODE });
-    import_node_fs6.default.chmodSync(dirPath, OWNER_ONLY_DIR_MODE);
+    import_node_fs7.default.mkdirSync(dirPath, { recursive: true, mode: OWNER_ONLY_DIR_MODE });
+    import_node_fs7.default.chmodSync(dirPath, OWNER_ONLY_DIR_MODE);
   },
   writeFilePrivate(filePath, contents) {
     const temp = `${filePath}.${String(process.pid)}.tmp`;
-    import_node_fs6.default.writeFileSync(temp, contents, { encoding: "utf8", mode: OWNER_ONLY_FILE_MODE });
-    import_node_fs6.default.chmodSync(temp, OWNER_ONLY_FILE_MODE);
-    import_node_fs6.default.renameSync(temp, filePath);
+    import_node_fs7.default.writeFileSync(temp, contents, { encoding: "utf8", mode: OWNER_ONLY_FILE_MODE });
+    import_node_fs7.default.chmodSync(temp, OWNER_ONLY_FILE_MODE);
+    import_node_fs7.default.renameSync(temp, filePath);
   },
   appendFilePrivate(filePath, contents) {
-    const descriptor = import_node_fs6.default.openSync(filePath, "a", OWNER_ONLY_FILE_MODE);
+    const descriptor = import_node_fs7.default.openSync(filePath, "a", OWNER_ONLY_FILE_MODE);
     try {
-      if ((import_node_fs6.default.fstatSync(descriptor).mode & PERMISSION_BITS2) !== OWNER_ONLY_FILE_MODE) {
-        import_node_fs6.default.fchmodSync(descriptor, OWNER_ONLY_FILE_MODE);
+      if ((import_node_fs7.default.fstatSync(descriptor).mode & PERMISSION_BITS2) !== OWNER_ONLY_FILE_MODE) {
+        import_node_fs7.default.fchmodSync(descriptor, OWNER_ONLY_FILE_MODE);
       }
       const bytes = Buffer.from(contents, "utf8");
       let written = 0;
       while (written < bytes.length) {
-        written += import_node_fs6.default.writeSync(descriptor, bytes, written, bytes.length - written);
+        written += import_node_fs7.default.writeSync(descriptor, bytes, written, bytes.length - written);
       }
     } finally {
-      import_node_fs6.default.closeSync(descriptor);
+      import_node_fs7.default.closeSync(descriptor);
     }
   },
   writeFileExclusive(filePath, contents) {
     try {
-      import_node_fs6.default.writeFileSync(filePath, contents, { encoding: "utf8", flag: "wx" });
+      import_node_fs7.default.writeFileSync(filePath, contents, { encoding: "utf8", flag: "wx" });
       return true;
     } catch (error) {
       if (isErrorWithCode(error, "EEXIST")) {
@@ -7303,7 +7469,7 @@ var realFarmFs = {
   },
   hashFile(filePath) {
     try {
-      return (0, import_node_crypto9.createHash)("sha256").update(import_node_fs6.default.readFileSync(filePath)).digest("hex");
+      return (0, import_node_crypto9.createHash)("sha256").update(import_node_fs7.default.readFileSync(filePath)).digest("hex");
     } catch (error) {
       if (isEnoent3(error) || isErrorWithCode(error, "EISDIR")) {
         return void 0;
@@ -7325,7 +7491,7 @@ function realIsProcessAlive(pid) {
   }
 }
 function realIsProcessZombie(pid) {
-  const result = (0, import_node_child_process.spawnSync)("ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
+  const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
   return result.status === 0 && result.stdout.trim().startsWith("Z");
 }
 function realIsProcessRunning(pid) {
@@ -7333,17 +7499,17 @@ function realIsProcessRunning(pid) {
 }
 var realRunPort = {
   run(command, args) {
-    const result = (0, import_node_child_process.spawnSync)(command, [...args], { encoding: "utf8" });
+    const result = (0, import_node_child_process2.spawnSync)(command, [...args], { encoding: "utf8" });
     return { status: result.status, stdout: result.stdout, stderr: result.stderr };
   }
 };
 function expandHome2(filePath) {
-  return filePath.startsWith("~/") ? import_node_path21.default.join(import_node_os3.default.homedir(), filePath.slice(1)) : filePath;
+  return filePath.startsWith("~/") ? import_node_path22.default.join(import_node_os3.default.homedir(), filePath.slice(1)) : filePath;
 }
 var MACOS_GUI_SESSION_MANAGER = "Aqua";
 function hasDesktopSession() {
   if (process.platform === "darwin") {
-    const result = (0, import_node_child_process.spawnSync)("launchctl", ["managername"], { encoding: "utf8" });
+    const result = (0, import_node_child_process2.spawnSync)("launchctl", ["managername"], { encoding: "utf8" });
     return result.status === 0 && result.stdout.trim() === MACOS_GUI_SESSION_MANAGER;
   }
   if (process.platform === "win32") {
@@ -7357,8 +7523,8 @@ var realCredentialPort = {
     let content;
     let stat;
     try {
-      stat = import_node_fs6.default.statSync(resolved);
-      content = import_node_fs6.default.readFileSync(resolved, "utf8");
+      stat = import_node_fs7.default.statSync(resolved);
+      content = import_node_fs7.default.readFileSync(resolved, "utf8");
     } catch (error) {
       if (isEnoent3(error)) {
         return { found: false };
@@ -7369,7 +7535,7 @@ var realCredentialPort = {
   },
   runCommand(argv, options) {
     const [command, ...args] = argv;
-    const result = (0, import_node_child_process.spawnSync)(command, args, {
+    const result = (0, import_node_child_process2.spawnSync)(command, args, {
       encoding: "utf8",
       timeout: options.timeoutMs,
       stdio: options.interactive ? ["inherit", "pipe", "inherit"] : ["ignore", "pipe", "pipe"]
@@ -7411,17 +7577,17 @@ function spawnDaemonThrough(executable) {
   return (paths, subcommand, logPath) => spawnDetachedDaemon({ command: executable, args: [subcommand] }, paths, subcommand, logPath);
 }
 function spawnDetachedDaemon(invocation, paths, subcommand, logPath) {
-  import_node_fs6.default.mkdirSync(import_node_path21.default.dirname(logPath), { recursive: true });
-  const logFd = import_node_fs6.default.openSync(logPath, "a");
+  import_node_fs7.default.mkdirSync(import_node_path22.default.dirname(logPath), { recursive: true });
+  const logFd = import_node_fs7.default.openSync(logPath, "a");
   try {
-    const child = (0, import_node_child_process.spawn)(invocation.command, invocation.args, detachedDaemonSpawnOptions(logFd, { ...process.env, AGENT_SHIM_HOME: paths.root }));
+    const child = (0, import_node_child_process2.spawn)(invocation.command, invocation.args, detachedDaemonSpawnOptions(logFd, { ...process.env, AGENT_SHIM_HOME: paths.root }));
     child.unref();
     if (child.pid === void 0) {
       throw new Error(`spawning ${subcommand} returned no pid`);
     }
     return child.pid;
   } finally {
-    import_node_fs6.default.closeSync(logFd);
+    import_node_fs7.default.closeSync(logFd);
   }
 }
 function spawnHeadroomSupervisor(paths, spawnDaemon) {
@@ -7439,7 +7605,7 @@ var realHeadroomSocketTrust = {
   lstat: (target) => {
     let stat;
     try {
-      stat = import_node_fs6.default.lstatSync(target);
+      stat = import_node_fs7.default.lstatSync(target);
     } catch (error) {
       if (isEnoent3(error)) {
         return void 0;
@@ -7485,7 +7651,7 @@ var EXECUTE_BITS_MASK = 73;
 function listVersionsDir(dir) {
   let entries;
   try {
-    entries = import_node_fs6.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs7.default.readdirSync(dir, { withFileTypes: true });
   } catch (error) {
     if (isEnoent3(error)) {
       return [];
@@ -7493,8 +7659,8 @@ function listVersionsDir(dir) {
     throw error;
   }
   return entries.filter((entry) => entry.isFile()).map((entry) => {
-    const fullPath = import_node_path21.default.join(dir, entry.name);
-    const stat = import_node_fs6.default.statSync(fullPath);
+    const fullPath = import_node_path22.default.join(dir, entry.name);
+    const stat = import_node_fs7.default.statSync(fullPath);
     return {
       name: entry.name,
       isFile: true,
@@ -7508,7 +7674,7 @@ function windowsPathExtensions(pathext) {
   return (pathext ?? WINDOWS_DEFAULT_PATHEXT).split(";").map((ext) => ext.trim()).filter((ext) => ext.length > 0);
 }
 function resolveExecutableCandidate(dir, name, env) {
-  const candidate = import_node_path21.default.join(dir, name);
+  const candidate = import_node_path22.default.join(dir, name);
   if (env.platform === "win32") {
     const extensions = windowsPathExtensions(env.pathext);
     const alreadyHasRecognisedExtension = extensions.some((ext) => candidate.toLowerCase().endsWith(ext.toLowerCase()));
@@ -7528,7 +7694,7 @@ function resolveExecutableCandidate(dir, name, env) {
 }
 function realStatFileMode(candidate) {
   try {
-    const stat = import_node_fs6.default.statSync(candidate);
+    const stat = import_node_fs7.default.statSync(candidate);
     return stat.isFile() ? stat.mode : void 0;
   } catch (error) {
     if (isEnoent3(error)) {
@@ -7557,13 +7723,13 @@ function resolveOwnExecutablePath(env) {
   if (env.argv1 !== void 0 && !env.argv1.includes("/") && !env.argv1.includes("\\")) {
     return searchPathForExecutable(env.pathDirs, env.argv1, env.findExecutableInDir) ?? env.execPath;
   }
-  const candidate = env.argv1 === void 0 ? env.execPath : import_node_path21.default.resolve(env.cwd, env.argv1);
-  const candidateDir = import_node_path21.default.dirname(candidate);
-  const candidateDirOnPath = env.pathDirs.some((dir) => import_node_path21.default.resolve(dir) === candidateDir);
+  const candidate = env.argv1 === void 0 ? env.execPath : import_node_path22.default.resolve(env.cwd, env.argv1);
+  const candidateDir = import_node_path22.default.dirname(candidate);
+  const candidateDirOnPath = env.pathDirs.some((dir) => import_node_path22.default.resolve(dir) === candidateDir);
   if (candidateDirOnPath) {
     return candidate;
   }
-  const viaPath = searchPathForExecutable(env.pathDirs, import_node_path21.default.basename(candidate), env.findExecutableInDir);
+  const viaPath = searchPathForExecutable(env.pathDirs, import_node_path22.default.basename(candidate), env.findExecutableInDir);
   return viaPath ?? candidate;
 }
 function realOwnExecutablePath() {
@@ -7571,7 +7737,7 @@ function realOwnExecutablePath() {
     argv1: process.argv[1],
     execPath: process.execPath,
     cwd: process.cwd(),
-    pathDirs: (process.env.PATH ?? "").split(import_node_path21.default.delimiter).filter((dir) => dir !== ""),
+    pathDirs: (process.env.PATH ?? "").split(import_node_path22.default.delimiter).filter((dir) => dir !== ""),
     findExecutableInDir
   });
 }
@@ -7584,15 +7750,15 @@ function realContentSourcePath() {
 function realResolveClaudeBinary(isOwnBinary) {
   return () => discoverClaudeBinary({
     listVersionsDir,
-    pathDirs: (process.env.PATH ?? "").split(import_node_path21.default.delimiter).filter((dir) => dir !== ""),
+    pathDirs: (process.env.PATH ?? "").split(import_node_path22.default.delimiter).filter((dir) => dir !== ""),
     findExecutableInDir,
     isOwnBinary
   });
 }
 
 // src/checkReport.ts
-var import_node_path22 = __toESM(require("node:path"), 1);
-var import_zod10 = require("zod");
+var import_node_path23 = __toESM(require("node:path"), 1);
+var import_zod12 = require("zod");
 
 // src/cli/bool.ts
 function parseBoolWord(input) {
@@ -7707,9 +7873,9 @@ function lookupKeychainService(run, farmRoot) {
     note: serviceName === void 0 ? `A Keychain entry was found for account "${farmRoot}" but its service name could not be parsed from security's output.` : `Keychain service name for this identity: "${serviceName}".`
   };
 }
-var SettingsSecretsShapeSchema = import_zod10.z.looseObject({
-  env: import_zod10.z.record(import_zod10.z.string(), import_zod10.z.unknown()).optional(),
-  hooks: import_zod10.z.record(import_zod10.z.string(), import_zod10.z.array(import_zod10.z.unknown())).optional()
+var SettingsSecretsShapeSchema = import_zod12.z.looseObject({
+  env: import_zod12.z.record(import_zod12.z.string(), import_zod12.z.unknown()).optional(),
+  hooks: import_zod12.z.record(import_zod12.z.string(), import_zod12.z.array(import_zod12.z.unknown())).optional()
 });
 function hookCommandCountOf(group) {
   if (typeof group !== "object" || group === null) {
@@ -7761,14 +7927,23 @@ function inspectSettingsExposure(params) {
   }
   return reports;
 }
-function buildCredentialReport(provider, identity) {
+function cachedState(cacheEnv, owner, block) {
+  if (cacheEnv === void 0 || block.cache === void 0) {
+    return void 0;
+  }
+  return describeCachedCredential({ port: cacheEnv.port, platform: cacheEnv.platform, owner, cache: block.cache, nowMs: cacheEnv.now() });
+}
+function buildCredentialReport(provider, identity, identityName, cacheEnv) {
   const identityCredential = identity?.credential === void 0 ? void 0 : summariseCredential(identity.credential);
+  const identityCached = identity?.credential === void 0 || identityName === void 0 ? void 0 : cachedState(cacheEnv, `identity ${identityName}`, identity.credential);
+  const providerCached = provider?.definition === void 0 ? void 0 : cachedState(cacheEnv, `provider ${provider.name}`, provider.definition.credential);
   return {
     applies: provider !== void 0 ? "provider" : identityCredential !== void 0 ? "identity" : "stored-login",
     ...provider === void 0 ? {} : {
-      provider: provider.problem === void 0 ? { name: provider.name, credential: summariseCredential(provider.definition.credential) } : { name: provider.name, problem: provider.problem }
+      provider: provider.problem === void 0 ? { name: provider.name, credential: summariseCredential(provider.definition.credential), ...providerCached === void 0 ? {} : { cached: providerCached } } : { name: provider.name, problem: provider.problem }
     },
-    ...identityCredential === void 0 ? {} : { identity: identityCredential }
+    ...identityCredential === void 0 ? {} : { identity: identityCredential },
+    ...identityCached === void 0 ? {} : { identityCached }
   };
 }
 function runCheck(params) {
@@ -7807,7 +7982,7 @@ function runCheck(params) {
     ambientCredential,
     ...keychain === void 0 ? {} : { keychain },
     settingsExposure,
-    credential: buildCredentialReport(params.provider, params.identity)
+    credential: buildCredentialReport(params.provider, params.identity, params.identityName, params.credentialCache)
   };
 }
 function formatCheckReport(report) {
@@ -7845,12 +8020,12 @@ function formatCheckReport(report) {
   const { credential } = report;
   if (credential.provider !== void 0) {
     lines.push(
-      `  Provider ${credential.provider.name}: ${credential.provider.credential === void 0 ? `unusable: ${credential.provider.problem ?? ""}` : formatCredentialSummary(credential.provider.credential)}`
+      `  Provider ${credential.provider.name}: ${credential.provider.credential === void 0 ? `unusable: ${credential.provider.problem ?? ""}` : formatCredentialSummary(credential.provider.credential)}${credential.provider.cached === void 0 ? "" : `; ${formatCachedCredentialState(credential.provider.cached)}`}`
     );
   }
   if (credential.identity !== void 0) {
     lines.push(
-      `  Identity ${report.identityName ?? "(none)"}: ${formatCredentialSummary(credential.identity)}${credential.applies === "provider" ? " (not used: the provider's credential applies)" : ""}`
+      `  Identity ${report.identityName ?? "(none)"}: ${formatCredentialSummary(credential.identity)}${credential.identityCached === void 0 ? "" : `; ${formatCachedCredentialState(credential.identityCached)}`}${credential.applies === "provider" ? " (not used: the provider's credential applies)" : ""}`
     );
   }
   if (credential.applies === "stored-login") {
@@ -7959,10 +8134,10 @@ function collectCheckReport(params) {
   }).input;
   const providerName = cascadeProviderName(cascade);
   const provider = providerName === void 0 ? void 0 : loadCheckProvider(paths, providerName);
-  const farmRoot = identityDecision.name === void 0 ? void 0 : import_node_path22.default.join(paths.identitiesDir, identityDecision.name);
+  const farmRoot = identityDecision.name === void 0 ? void 0 : import_node_path23.default.join(paths.identitiesDir, identityDecision.name);
   const settingsFiles = {
-    "settings.json": realFsPort.readFileUtf8(import_node_path22.default.join(claudeHome, "settings.json")),
-    "settings.local.json": realFsPort.readFileUtf8(import_node_path22.default.join(claudeHome, "settings.local.json"))
+    "settings.json": realFsPort.readFileUtf8(import_node_path23.default.join(claudeHome, "settings.json")),
+    "settings.local.json": realFsPort.readFileUtf8(import_node_path23.default.join(claudeHome, "settings.local.json"))
   };
   const report = runCheck({
     cwd,
@@ -7983,6 +8158,7 @@ function collectCheckReport(params) {
     ...loadedIdentity === void 0 ? {} : { identity: loadedIdentity.config },
     settingsFiles,
     run: realRunPort,
+    credentialCache: realCredentialCacheEnv(paths),
     ...farmRoot === void 0 ? {} : { farmRoot },
     platform: process.platform,
     ...provider === void 0 ? {} : { provider }
@@ -7991,23 +8167,23 @@ function collectCheckReport(params) {
 }
 
 // src/claudeShim.ts
-var import_node_fs7 = __toESM(require("node:fs"), 1);
-var import_node_path23 = __toESM(require("node:path"), 1);
-var import_zod11 = require("zod");
-var ClaudeShimStateSchema = import_zod11.z.strictObject({
-  targetPath: import_zod11.z.string().min(1),
-  method: import_zod11.z.enum(["hardlink", "copy"]),
-  installedAtMs: import_zod11.z.number()
+var import_node_fs8 = __toESM(require("node:fs"), 1);
+var import_node_path24 = __toESM(require("node:path"), 1);
+var import_zod13 = require("zod");
+var ClaudeShimStateSchema = import_zod13.z.strictObject({
+  targetPath: import_zod13.z.string().min(1),
+  method: import_zod13.z.enum(["hardlink", "copy"]),
+  installedAtMs: import_zod13.z.number()
 });
 function commandFilename(ownExecutablePath, commandName) {
   return ownExecutablePath.toLowerCase().endsWith(".exe") ? `${commandName}.exe` : commandName;
 }
 function resolveOwnBinaryCheck(paths, contentSourcePath) {
   const state = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const recordedTarget = state === void 0 ? void 0 : import_node_path23.default.resolve(state.targetPath);
+  const recordedTarget = state === void 0 ? void 0 : import_node_path24.default.resolve(state.targetPath);
   let ownStat;
   return (candidate) => {
-    if (recordedTarget !== void 0 && import_node_path23.default.resolve(candidate) === recordedTarget) {
+    if (recordedTarget !== void 0 && import_node_path24.default.resolve(candidate) === recordedTarget) {
       return true;
     }
     ownStat ??= statOrUndefined(contentSourcePath);
@@ -8021,7 +8197,7 @@ function isEnoent4(error) {
 }
 function statOrUndefined(target) {
   try {
-    return import_node_fs7.default.statSync(target);
+    return import_node_fs8.default.statSync(target);
   } catch (error) {
     if (isEnoent4(error)) {
       return void 0;
@@ -8029,22 +8205,22 @@ function statOrUndefined(target) {
     throw error;
   }
 }
-var nodeLinkFs = { link: import_node_fs7.default.linkSync, copyFile: import_node_fs7.default.copyFileSync, chmod: import_node_fs7.default.chmodSync };
+var nodeLinkFs = { link: import_node_fs8.default.linkSync, copyFile: import_node_fs8.default.copyFileSync, chmod: import_node_fs8.default.chmodSync };
 function findPathShadow(params) {
-  const resolvedTargetDir = import_node_path23.default.resolve(params.targetDir);
+  const resolvedTargetDir = import_node_path24.default.resolve(params.targetDir);
   for (const dir of params.pathDirs) {
     const found = params.findExecutableInDir(dir, params.targetFilename);
     if (found === void 0) {
       continue;
     }
-    return import_node_path23.default.resolve(dir) === resolvedTargetDir ? { status: "ok" } : { status: "shadowed", by: found };
+    return import_node_path24.default.resolve(dir) === resolvedTargetDir ? { status: "ok" } : { status: "shadowed", by: found };
   }
-  return params.pathDirs.some((dir) => import_node_path23.default.resolve(dir) === resolvedTargetDir) ? { status: "ok" } : { status: "not-on-path" };
+  return params.pathDirs.some((dir) => import_node_path24.default.resolve(dir) === resolvedTargetDir) ? { status: "ok" } : { status: "not-on-path" };
 }
 
 // src/doctorReport.ts
-var import_node_fs8 = __toESM(require("node:fs"), 1);
-var import_node_path24 = __toESM(require("node:path"), 1);
+var import_node_fs9 = __toESM(require("node:fs"), 1);
+var import_node_path25 = __toESM(require("node:path"), 1);
 function refinePathShadow(status, ownExecutablePath, realpath) {
   if (status.status !== "shadowed") {
     return status;
@@ -8068,7 +8244,7 @@ function validateJson(schema, input) {
   return { ok: true, data: result.data };
 }
 function pushPathResolution(push, resolution) {
-  const ownDir = import_node_path24.default.dirname(resolution.ownExecutablePath);
+  const ownDir = import_node_path25.default.dirname(resolution.ownExecutablePath);
   switch (resolution.agentShim.status) {
     case "ok":
       push("path-resolution", "pass", `\`agent-shim\` on PATH resolves to this running executable, ${resolution.ownExecutablePath}.`, "agent-shim");
@@ -8110,7 +8286,14 @@ function pushPathResolution(push, resolution) {
       break;
   }
 }
-function pushProvider(push, entry) {
+function cacheClause(cacheEnv, owner, block) {
+  if (cacheEnv === void 0 || block.cache === void 0) {
+    return { text: "", unreadable: false };
+  }
+  const state = describeCachedCredential({ port: cacheEnv.port, platform: cacheEnv.platform, owner, cache: block.cache, nowMs: cacheEnv.now() });
+  return { text: `; ${formatCachedCredentialState(state)}`, unreadable: state.status === "unreadable" };
+}
+function pushProvider(push, entry, cacheEnv) {
   if (entry.raw === void 0) {
     push("provider", "fail", `${entry.path} is missing.`, entry.name);
     return;
@@ -8132,18 +8315,19 @@ function pushProvider(push, entry) {
     push("provider", "fail", new ConfigValidationError(entry.path, validated.error.issues).message, entry.name);
     return;
   }
-  push("provider", "pass", `${entry.name} is valid (${describeProviderEndpoint(validated.data)}, credential ${describeCredential(validated.data.credential)}).`, entry.name);
+  const cache = cacheClause(cacheEnv, `provider ${entry.name}`, validated.data.credential);
+  push("provider", cache.unreadable ? "fail" : "pass", `${entry.name} is valid (${describeProviderEndpoint(validated.data)}, credential ${describeCredential(validated.data.credential)})${cache.text}.`, entry.name);
 }
 function pushLegacyName(push, params) {
   const legacyVariables = Object.keys(params.env).filter((name) => name.startsWith(LEGACY_ENV_PREFIX) && params.env[name] !== void 0).sort();
-  if (legacyVariables.length === 0 && import_node_path24.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
+  if (legacyVariables.length === 0 && import_node_path25.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
     push("legacy-name", "pass", "Nothing here still uses the former `claude-use` name.");
     return;
   }
   for (const name of legacyVariables) {
     push("legacy-name", "warn", `${name} is the former name of ${name.replace(LEGACY_ENV_PREFIX, ENV_PREFIX)}. Rename it; the old name still works but is only a fallback.`, name);
   }
-  if (import_node_path24.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
+  if (import_node_path25.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
     push(
       "legacy-name",
       "warn",
@@ -8225,10 +8409,11 @@ function runDoctor(params) {
       );
     } else {
       const credential = validated.data.credential;
+      const cache = credential === void 0 ? { text: "", unreadable: false } : cacheClause(params.credentialCache, `identity ${entry.name}`, credential);
       push(
         "identity",
-        "pass",
-        `${entry.name} is valid and authenticates with ${credential === void 0 ? "its stored login" : `credential ${describeCredential(credential)}`}.`,
+        cache.unreadable ? "fail" : "pass",
+        `${entry.name} is valid and authenticates with ${credential === void 0 ? "its stored login" : `credential ${describeCredential(credential)}`}${cache.text}.`,
         entry.name
       );
     }
@@ -8248,7 +8433,7 @@ function runDoctor(params) {
     return poolName === void 0 ? validIdentityNames.has(selector) : poolName in pools;
   };
   for (const entry of params.providers) {
-    pushProvider(push, entry);
+    pushProvider(push, entry, params.credentialCache);
   }
   if (params.platform !== "darwin" || params.run === void 0) {
     push("keychain", "pass", "Skipped (not macOS).");
@@ -8442,27 +8627,27 @@ function formatDoctorReport(report) {
 }
 function realpathOrSelf(target) {
   try {
-    return import_node_fs8.default.realpathSync(target);
+    return import_node_fs9.default.realpathSync(target);
   } catch {
     return target;
   }
 }
 function collectDoctorReport(params) {
   const { paths } = params;
-  const identityNames = import_node_fs8.default.existsSync(paths.identitiesDir) ? import_node_fs8.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort() : [];
+  const identityNames = import_node_fs9.default.existsSync(paths.identitiesDir) ? import_node_fs9.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort() : [];
   const identities = identityNames.map((name) => {
-    const farmRoot = import_node_path24.default.join(paths.identitiesDir, name);
-    const identityPath = import_node_path24.default.join(farmRoot, "identity.json");
+    const farmRoot = import_node_path25.default.join(paths.identitiesDir, name);
+    const identityPath = import_node_path25.default.join(farmRoot, "identity.json");
     return { name, path: identityPath, raw: realFsPort.readFileUtf8(identityPath), farmRoot };
   });
-  const profileNames = import_node_fs8.default.existsSync(paths.configProfilesDir) ? import_node_fs8.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
+  const profileNames = import_node_fs9.default.existsSync(paths.configProfilesDir) ? import_node_fs9.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const configProfiles = profileNames.map((name) => {
-    const profilePath = import_node_path24.default.join(paths.configProfilesDir, `${name}.json`);
+    const profilePath = import_node_path25.default.join(paths.configProfilesDir, `${name}.json`);
     return { name, path: profilePath, raw: realFsPort.readFileUtf8(profilePath) };
   });
-  const providerNames = import_node_fs8.default.existsSync(paths.providersDir) ? import_node_fs8.default.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
+  const providerNames = import_node_fs9.default.existsSync(paths.providersDir) ? import_node_fs9.default.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const providers = providerNames.map((name) => {
-    const providerPath = import_node_path24.default.join(paths.providersDir, `${name}.json`);
+    const providerPath = import_node_path25.default.join(paths.providersDir, `${name}.json`);
     return { name, path: providerPath, raw: realFsPort.readFileUtf8(providerPath) };
   });
   const ownExecutablePath = realOwnExecutablePath();
@@ -8474,12 +8659,12 @@ function collectDoctorReport(params) {
     binaryDiscovery = { ok: false, message: error instanceof Error ? error.message : String(error) };
   }
   const shimState = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const pathDirs = (params.env.PATH ?? "").split(import_node_path24.default.delimiter).filter((dir) => dir !== "");
+  const pathDirs = (params.env.PATH ?? "").split(import_node_path25.default.delimiter).filter((dir) => dir !== "");
   const claudeShimShadow = shimState === void 0 ? void 0 : refinePathShadow(
     findPathShadow({
       pathDirs,
-      targetDir: import_node_path24.default.dirname(shimState.targetPath),
-      targetFilename: import_node_path24.default.basename(shimState.targetPath),
+      targetDir: import_node_path25.default.dirname(shimState.targetPath),
+      targetFilename: import_node_path25.default.basename(shimState.targetPath),
       findExecutableInDir
     }),
     shimState.targetPath,
@@ -8487,6 +8672,7 @@ function collectDoctorReport(params) {
   );
   const report = runDoctor({
     env: params.env,
+    credentialCache: realCredentialCacheEnv(paths),
     identities,
     configProfiles,
     providers,
@@ -8495,14 +8681,14 @@ function collectDoctorReport(params) {
     categoriesLocal: { path: paths.categoriesLocalFile, raw: realFsPort.readFileUtf8(paths.categoriesLocalFile) },
     activeIdentity: { path: paths.activeIdentityFile, raw: realFsPort.readFileUtf8(paths.activeIdentityFile) },
     binaryDiscovery,
-    claudeShim: { state: shimState, targetExists: shimState !== void 0 && import_node_fs8.default.existsSync(shimState.targetPath) },
+    claudeShim: { state: shimState, targetExists: shimState !== void 0 && import_node_fs9.default.existsSync(shimState.targetPath) },
     rootPath: paths.root,
     pathResolution: {
       ownExecutablePath,
       agentShim: refinePathShadow(
         findPathShadow({
           pathDirs,
-          targetDir: import_node_path24.default.dirname(ownExecutablePath),
+          targetDir: import_node_path25.default.dirname(ownExecutablePath),
           targetFilename: commandFilename(ownExecutablePath, "agent-shim"),
           findExecutableInDir
         }),
@@ -8523,7 +8709,7 @@ function collectDoctorReport(params) {
 
 // src/launcher.ts
 var import_node_crypto10 = require("node:crypto");
-var import_node_path26 = __toESM(require("node:path"), 1);
+var import_node_path27 = __toESM(require("node:path"), 1);
 
 // src/launcher/argv.ts
 var ConflictingIdentityError = class extends UsageError {
@@ -8775,7 +8961,7 @@ function buildCliOverride(params) {
 }
 
 // src/launcher/flags.ts
-var import_node_path25 = __toESM(require("node:path"), 1);
+var import_node_path26 = __toESM(require("node:path"), 1);
 
 // src/headroom/headers.ts
 function mergeAnthropicCustomHeaders(existing, additions) {
@@ -8845,7 +9031,7 @@ function buildEnv(params) {
   const parentCustomHeaders = params.baseEnv.ANTHROPIC_CUSTOM_HEADERS;
   let providerCustomHeaders;
   if (!params.configDirEscapeHatch && params.resolvedIdentityName !== void 0) {
-    env.CLAUDE_CONFIG_DIR = import_node_path25.default.join(params.identitiesDir, params.resolvedIdentityName);
+    env.CLAUDE_CONFIG_DIR = import_node_path26.default.join(params.identitiesDir, params.resolvedIdentityName);
   }
   if (params.provider !== void 0) {
     const providerEnv = params.provider.definition.env ?? {};
@@ -9006,7 +9192,7 @@ function prepareLaunch(params) {
     identityDefaultConfigProfile: loadedIdentity?.config.defaultConfigProfile,
     globalDefaultConfigProfile: params.globalDefaultConfigProfile
   });
-  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs12.readConfigFile(import_node_path26.default.join(paths.configProfilesDir, `${configProfileDecision.name}.json`)) === void 0) {
+  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs12.readConfigFile(import_node_path27.default.join(paths.configProfilesDir, `${configProfileDecision.name}.json`)) === void 0) {
     log.error(
       `agent-shim: no configuration profile named "${configProfileDecision.name}" (selected via ${configProfileDecision.source}). Run \`agent-shim profile add ${configProfileDecision.name}\` first.`
     );
@@ -9179,84 +9365,6 @@ function prepareLaunch(params) {
 var import_node_os5 = __toESM(require("node:os"), 1);
 var import_node_crypto12 = require("node:crypto");
 
-// src/realCredentialCache.ts
-var import_node_child_process2 = require("node:child_process");
-var import_node_fs9 = __toESM(require("node:fs"), 1);
-var import_node_path27 = __toESM(require("node:path"), 1);
-var KEYCHAIN_CACHE_SERVICE = "agent-shim-credential-cache";
-var CACHE_DIR_MODE = 448;
-var CACHE_FILE_MODE = 384;
-function cacheFileNameFor(owner) {
-  return `${owner.replace(/[^A-Za-z0-9._-]/g, "_")}.json`;
-}
-function parseEntry(raw) {
-  let json;
-  try {
-    json = JSON.parse(raw);
-  } catch {
-    return void 0;
-  }
-  const parsed = CachedCredentialSchema.safeParse(json);
-  return parsed.success ? parsed.data : void 0;
-}
-function requireKeychain() {
-  if (process.platform !== "darwin") {
-    throw new Error("the keychain credential store needs macOS; use --credential-cache-store file");
-  }
-}
-function security(args, stdin) {
-  const result = (0, import_node_child_process2.spawnSync)("security", args, { encoding: "utf8", ...stdin === void 0 ? {} : { input: stdin }, stdio: ["pipe", "pipe", "ignore"] });
-  return { status: result.status, stdout: result.stdout };
-}
-function createRealCredentialCache(root) {
-  const dir = import_node_path27.default.join(root, "credential-cache");
-  const filePath = (owner) => import_node_path27.default.join(dir, cacheFileNameFor(owner));
-  return {
-    read(store, owner) {
-      if (store === "file") {
-        try {
-          return parseEntry(import_node_fs9.default.readFileSync(filePath(owner), "utf8"));
-        } catch {
-          return void 0;
-        }
-      }
-      requireKeychain();
-      const result = security(["find-generic-password", "-s", KEYCHAIN_CACHE_SERVICE, "-a", owner, "-w"]);
-      return result.status === 0 ? parseEntry(Buffer.from(result.stdout.trim(), "base64").toString("utf8")) : void 0;
-    },
-    write(store, owner, entry) {
-      const serialised = JSON.stringify(entry);
-      if (store === "file") {
-        import_node_fs9.default.mkdirSync(dir, { recursive: true, mode: CACHE_DIR_MODE });
-        import_node_fs9.default.chmodSync(dir, CACHE_DIR_MODE);
-        const target = filePath(owner);
-        const temp = `${target}.${String(process.pid)}.tmp`;
-        import_node_fs9.default.writeFileSync(temp, serialised, { mode: CACHE_FILE_MODE });
-        import_node_fs9.default.renameSync(temp, target);
-        return;
-      }
-      requireKeychain();
-      const encoded = Buffer.from(serialised, "utf8").toString("base64");
-      const result = security(["-i"], `add-generic-password -U -s ${KEYCHAIN_CACHE_SERVICE} -a ${JSON.stringify(owner)} -w ${encoded}
-`);
-      if (result.status !== 0) {
-        throw new Error(`could not write the keychain credential cache for ${owner}`);
-      }
-    },
-    remove(store, owner) {
-      if (store === "file") {
-        import_node_fs9.default.rmSync(filePath(owner), { force: true });
-        return;
-      }
-      requireKeychain();
-      security(["delete-generic-password", "-s", KEYCHAIN_CACHE_SERVICE, "-a", owner]);
-    }
-  };
-}
-function realCredentialCacheEnv(paths) {
-  return { port: createRealCredentialCache(paths.root), platform: process.platform, now: () => Date.now() };
-}
-
 // src/frontdoor/realFrontDoorPort.ts
 var import_node_fs10 = __toESM(require("node:fs"), 1);
 
@@ -9521,8 +9629,11 @@ function prepareClaudeLaunch(options) {
   InvalidProviderNameError,
   LaunchRefusedError,
   LegacyProviderFileError,
+  PROMPT_CACHE_TTL_MS,
+  PlanClassSchema,
   PoolNameSchema,
   PoolNotFoundError,
+  PoolPickReportSchema,
   PoolSchema,
   PortableConfigSchema,
   ProfileAlreadyExistsError,
@@ -9559,16 +9670,19 @@ function prepareClaudeLaunch(options) {
   checkReportToJson,
   collectCheckReport,
   collectDoctorReport,
+  collectPoolPick,
   createLeafCache,
   createProfile,
   createRcControlHandler,
   createRcSessionTracker,
   describeProviderEndpoint,
   detectAmbientCredential,
+  effectiveWindow,
   ensureCa,
   ensureFrontDoor,
   ensureHeadroom,
   evaluateAmbientCredentialGuard,
+  evaluateWhen,
   formatAmbientCredentialGuardMessage,
   formatCheckReport,
   formatDoctorReport,
@@ -9586,13 +9700,16 @@ function prepareClaudeLaunch(options) {
   listProfiles,
   listProviders,
   listUsageSnapshots,
+  matchBranch,
   mintLeaf,
   observingRoutedRoute,
   parseConnectTarget,
+  planOf,
   prepareClaudeLaunch,
   prepareLaunch,
   profileExists,
   providerExists,
+  rankPool,
   rcEventWriteResultFromAnswer,
   rcObserverAsPassthrough,
   readActiveIdentity,