agent-shim 8.6.0 → 8.8.0

package/dist/index.mjs

@@ -3323,25 +3323,19 @@ function realConnectEffects() {
         }
       };
     },
-    connectTlsUpstream: async (host, port, clientAlpn) => await new Promise((resolve, reject) => {
-      const dial = (localPort) => {
-        const raw = net2.connect({ host, port, localPort, lookup: realAddressLookup });
-        return tls.connect({ socket: raw, servername: host, ...clientAlpn === void 0 ? {} : { ALPNProtocols: [clientAlpn] } });
-      };
-      const settle = (candidate) => {
-        candidate.once("secureConnect", () => {
-          resolve(candidate);
-        });
-        candidate.once("error", (error) => {
-          if ("code" in error && error.code === "EADDRINUSE") {
-            settle(dial(upstreamLocalPort()));
-            return;
-          }
-          reject(error);
+    connectTlsUpstream: async (host, port, clientAlpn) => {
+      const dialled = await reservedDial({ host, port });
+      if (dialled.error !== null) {
+        throw dialled.error;
+      }
+      return await new Promise((resolve, reject) => {
+        const secure = tls.connect({ socket: dialled.socket, servername: host, ...clientAlpn === void 0 ? {} : { ALPNProtocols: [clientAlpn] } });
+        secure.once("secureConnect", () => {
+          resolve(secure);
         });
-      };
-      settle(dial(upstreamLocalPort()));
-    }),
+        secure.once("error", reject);
+      });
+    },
     connectTcp: async (host, port) => await new Promise((resolve, reject) => {
       const socket = net2.connect({ host, port });
       socket.once("connect", () => {
@@ -4903,547 +4897,380 @@ function listUsageSnapshots(fs12, snapshotsDir) {
   }).sort((left, right) => left.identity.localeCompare(right.identity));
 }
 
-// src/headroom/ensure.ts
-var HEADROOM_START_TIMEOUT_MS = 12e4;
-var HEADROOM_LAUNCHER_POLL_MS = 250;
-var HeadroomStartError = class extends CliError {
-  constructor(message) {
-    super(message);
-    this.name = "HeadroomStartError";
-  }
-};
-function ensureHeadroom(params) {
-  const { paths, ports } = params;
-  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
-  let spawnedSupervisor = false;
-  let awaitingAllowlist = false;
-  for (; ; ) {
-    const state = readHeadroomState(ports.fs, paths.headroomStateFile);
-    if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
-      const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
-      if (daemonUp && state.socketPath !== void 0) {
-        const required = params.requiredAllowlistHash?.();
-        if (required === void 0 || state.allowlistHash === required) {
-          writeSession(ports.fs, paths.headroomSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), supervisorPid: state.supervisorPid });
-          return { socketPath: state.socketPath };
-        }
-        const holders = sessionsForSupervisor(ports.fs, paths.headroomSessionsDir, state.supervisorPid).filter((session) => ports.isRunning(session.pid));
-        if (holders.length > 0) {
-          throw new HeadroomStartError(
-            `the running headroom daemon was started before this launch's front door address and would refuse every request this launch sends through it. It restarts once the launches using it end (pid ${holders.map((session) => String(session.pid)).join(", ")}); end them and launch again, or launch with --no-headroom.`
-          );
-        }
-        awaitingAllowlist = true;
-      }
-      if (state.lastError !== void 0) {
-        throw new HeadroomStartError(
-          `the headroom daemon reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.headroomLogPath})`
-        );
-      }
-    } else if (!spawnedSupervisor) {
-      ports.fs.mkdirp(paths.headroomDir);
-      const created = ports.fs.writeFileExclusive(
-        paths.headroomLockFile,
-        `${JSON.stringify({ pid: params.launcherPid, at: ports.now() })}
-`
-      );
-      if (created) {
-        ports.spawnSupervisor(paths);
-        spawnedSupervisor = true;
-      } else {
-        const lock = readStartLock(ports.fs, paths.headroomLockFile);
-        if (lock === void 0 || !ports.isRunning(lock.pid)) {
-          ports.fs.removeRecursive(paths.headroomLockFile);
-          continue;
-        }
-      }
-    }
-    if (ports.now() >= deadline) {
-      const lastError = state?.lastError;
-      throw new HeadroomStartError(
-        `the headroom daemon did not become ready within ${String(HEADROOM_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (awaitingAllowlist ? " (the running daemon's allowlist does not admit this launch's front door, and it did not restart)" : "") + `. Daemon log: ${paths.headroomLogPath}`
-      );
-    }
-    ports.sleep(HEADROOM_LAUNCHER_POLL_MS);
+// src/usage/preflight.ts
+var MS_PER_SECOND2 = 1e3;
+var SECONDS_PER_MINUTE = 60;
+var MINUTES_PER_HOUR = 60;
+var HOURS_PER_DAY = 24;
+var WARNING_STATUSES = /* @__PURE__ */ new Set(["allowed_warning", "rejected"]);
+function formatAge(ms) {
+  const minutes = Math.floor(ms / (MS_PER_SECOND2 * SECONDS_PER_MINUTE));
+  if (minutes < MINUTES_PER_HOUR) {
+    return `${String(Math.max(minutes, 0))}m`;
   }
+  const hours = Math.floor(minutes / MINUTES_PER_HOUR);
+  return hours < HOURS_PER_DAY ? `${String(hours)}h` : `${String(Math.floor(hours / HOURS_PER_DAY))}d`;
 }
-
-// src/headroom/settings.ts
-import { createHash as createHash4 } from "node:crypto";
-function settingsOf(config) {
+function effectiveWindow(window, nowMs) {
+  const resetsAtMs = window.resetsAt === void 0 ? void 0 : Date.parse(window.resetsAt);
+  if (resetsAtMs !== void 0 && resetsAtMs <= nowMs) {
+    return { reset: true, utilization: 0 };
+  }
   return {
-    ...config.mode === void 0 ? {} : { mode: config.mode },
-    ...config.targetRatio === void 0 ? {} : { targetRatio: config.targetRatio },
-    ...config.ccr === void 0 ? {} : { ccr: config.ccr },
-    ...config.rolloutChannel === void 0 ? {} : { rolloutChannel: config.rolloutChannel },
-    ...config.interceptToolResults === void 0 ? {} : { interceptToolResults: config.interceptToolResults },
-    ...config.readMaturation === void 0 ? {} : { readMaturation: config.readMaturation }
+    reset: false,
+    ...window.utilization === void 0 ? {} : { utilization: window.utilization },
+    ...resetsAtMs === void 0 ? {} : { resetsAtMs },
+    ...window.status === void 0 ? {} : { status: window.status }
   };
 }
-function settingsArgs(settings) {
-  return [
-    ...settings.mode === void 0 ? [] : ["--mode", settings.mode],
-    ...settings.targetRatio === void 0 ? [] : ["--target-ratio", String(settings.targetRatio)],
-    ...settings.ccr === "lossless" ? ["--lossless"] : [],
-    ...settings.ccr === "none" ? ["--no-ccr"] : [],
-    ...settings.interceptToolResults === true ? ["--intercept-tool-results"] : [],
-    ...settings.readMaturation === true ? ["--read-maturation"] : []
+function quotaWarnings(snapshot, provider, nowMs) {
+  const rateLimit = snapshot?.providers[provider]?.rateLimit;
+  const unified = rateLimit?.unified;
+  if (snapshot === void 0 || rateLimit === void 0 || unified === void 0) {
+    return [];
+  }
+  const age = formatAge(nowMs - Date.parse(rateLimit.observedAt));
+  const windows = [
+    { name: "five-hour", window: unified.fiveHour },
+    { name: "seven-day", window: unified.sevenDay }
   ];
-}
-function settingsEnv(settings) {
-  return settings.rolloutChannel === void 0 ? {} : { HEADROOM_ROLLOUT_CHANNEL: settings.rolloutChannel };
-}
-function hashSettings(settings) {
-  return createHash4("sha256").update(JSON.stringify([...settingsArgs(settings), JSON.stringify(settingsEnv(settings))])).digest("hex");
+  return windows.flatMap(({ name, window }) => {
+    const effective = window === void 0 ? void 0 : effectiveWindow(window, nowMs);
+    if (window === void 0 || effective?.status === void 0 || !WARNING_STATUSES.has(effective.status)) {
+      return [];
+    }
+    const reset = window.resetsAt === void 0 ? "" : `, resets ${window.resetsAt}`;
+    const verdict = effective.status === "rejected" ? "exhausted" : "nearly used";
+    return [`agent-shim: identity ${snapshot.identity}: the ${name} quota is ${verdict}${reset} (last seen ${age} ago)`];
+  });
 }
 
-// src/headroom/socket.ts
-import path11 from "node:path";
-var GROUP_OR_OTHER_BITS = 63;
-var OCTAL_RADIX = 8;
-var MODE_DIGITS = 4;
-var HEADROOM_SOCKET_SUFFIX = ".sock";
-var HEADROOM_SOCKET_NAME = /^(\d+)\.sock$/;
-var UNIX_SOCKET_PATH_MAX_BYTES = 103;
-var PLATFORMS_WITHOUT_UNIX_SOCKETS = ["win32"];
-function headroomSocketPath(paths, supervisorPid) {
-  return path11.join(paths.headroomSocketDir, `${String(supervisorPid)}${HEADROOM_SOCKET_SUFFIX}`);
-}
-function platformRefusal(platform) {
-  return PLATFORMS_WITHOUT_UNIX_SOCKETS.includes(platform) ? `headroom routing needs a unix domain socket, which headroom cannot serve on ${platform}; agent-shim never falls back to a TCP port for this hop` : void 0;
-}
-function ownerOnlyRefusal(label, target, stat, expected, uid) {
-  if (stat === void 0) {
-    return `the headroom ${label} ${target} does not exist`;
-  }
-  if (stat.kind === "symlink") {
-    return `the headroom ${label} ${target} is a symlink; it must be the real ${expected === "dir" ? "directory" : "socket"}`;
-  }
-  if (stat.kind !== expected) {
-    return `the headroom ${label} ${target} is not a ${expected === "dir" ? "directory" : "socket"}`;
+// src/usage/plan.ts
+import { z as z6 } from "zod";
+var PlanClassSchema = z6.union([
+  z6.strictObject({
+    kind: z6.literal("subscription"),
+    /** The plan's size as a multiple of the smallest subscription tier (Max 5x is 5, Max 20x is 20). */
+    capacity: z6.number().positive(),
+    /** False when the tier string named no multiplier and no tier this project knows, so `capacity` is the neutral 1 rather than a reading. */
+    recognised: z6.boolean(),
+    /** The tier string the classification rests on, when the account had one. */
+    tier: z6.string().optional()
+  }),
+  z6.strictObject({
+    kind: z6.literal("pay-per-use"),
+    tier: z6.string().optional()
+  })
+]);
+var TIER_MULTIPLIER = /(?:^|_)(\d+)x$/;
+var ZERO_TIER = /(?:^|_)zero$/;
+var BASE_TIER = /(?:^|_)(?:pro|free)$/;
+function planOf(account) {
+  const tier = account?.organizationRateLimitTier ?? account?.userRateLimitTier;
+  const tierField = tier === void 0 ? {} : { tier };
+  if (tier === void 0) {
+    return { kind: "subscription", capacity: 1, recognised: false };
   }
-  if (stat.uid !== uid) {
-    return `the headroom ${label} ${target} is owned by uid ${String(stat.uid)}, not by this user (uid ${String(uid)})`;
+  if (ZERO_TIER.test(tier)) {
+    return { kind: "pay-per-use", ...tierField };
   }
-  if ((stat.mode & GROUP_OR_OTHER_BITS) !== 0) {
-    return `the headroom ${label} ${target} has mode ${stat.mode.toString(OCTAL_RADIX).padStart(MODE_DIGITS, "0")}, which lets other users reach it; it must be accessible to its owner only`;
+  const multiplier = TIER_MULTIPLIER.exec(tier)?.[1];
+  if (multiplier !== void 0) {
+    return { kind: "subscription", capacity: Number(multiplier), recognised: true, ...tierField };
   }
-  return void 0;
+  return { kind: "subscription", capacity: 1, recognised: BASE_TIER.test(tier), ...tierField };
 }
-function prepareHeadroomSocket(fs12, ports, paths, supervisorPid) {
-  const unsupported = platformRefusal(ports.platform);
-  if (unsupported !== void 0) {
-    return { refused: unsupported };
-  }
-  const socketPath = headroomSocketPath(paths, supervisorPid);
-  const length = Buffer.byteLength(socketPath, "utf8");
-  if (length > UNIX_SOCKET_PATH_MAX_BYTES) {
-    return {
-      refused: `the headroom socket path ${socketPath} is ${String(length)} bytes, longer than the ${String(UNIX_SOCKET_PATH_MAX_BYTES)} a unix socket path can hold; set AGENT_SHIM_HOME to a shorter directory`
-    };
-  }
-  if (ports.lstat(paths.headroomSocketDir)?.kind === "symlink") {
-    return { refused: `the headroom socket directory ${paths.headroomSocketDir} is a symlink; it must be the real directory` };
+
+// src/usage/rateLimit.ts
+var MS_PER_SECOND3 = 1e3;
+function epochSecondsToIso(value) {
+  if (value === void 0) {
+    return void 0;
   }
-  fs12.mkdirPrivate(paths.headroomSocketDir);
-  const refusal = ownerOnlyRefusal("socket directory", paths.headroomSocketDir, ports.lstat(paths.headroomSocketDir), "dir", ports.currentUid());
-  return refusal === void 0 ? { socketPath } : { refused: refusal };
+  const seconds = Number(value);
+  return Number.isFinite(seconds) && seconds > 0 ? new Date(seconds * MS_PER_SECOND3).toISOString() : void 0;
 }
-function pruneStaleHeadroomSockets(fs12, paths, isRunning) {
-  const removed = [];
-  for (const name of fs12.readdir(paths.headroomSocketDir)) {
-    const pid = HEADROOM_SOCKET_NAME.exec(name)?.[1];
-    if (pid === void 0 || isRunning(Number.parseInt(pid, 10))) {
-      continue;
-    }
-    fs12.removeRecursive(path11.join(paths.headroomSocketDir, name));
-    removed.push(name);
+function nonNegativeNumber(value) {
+  if (value === void 0 || value.trim() === "") {
+    return void 0;
   }
-  return removed;
+  const parsed = Number(value);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
 }
-
-// src/headroom/source.ts
-import { z as z6 } from "zod";
-var GIT_SPEC_RE = /git\+[^@\s]+(?:@([^\s#]+))?/;
-var COMMIT_SHA_RE = /^[0-9a-f]{40}$/i;
-var DirectUrlSchema = z6.object({ vcs_info: z6.object({ commit_id: z6.string() }) });
-function isMovingGitSource(spec) {
-  const match = GIT_SPEC_RE.exec(spec);
-  if (match === null) {
-    return false;
+var UNIFIED_PREFIX = "anthropic-ratelimit-unified-";
+function unifiedWindow(headers, window) {
+  const utilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}${window}-utilization`]);
+  const resetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}${window}-reset`]);
+  const status = headers[`${UNIFIED_PREFIX}${window}-status`];
+  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
+    return void 0;
   }
-  const ref = match[1];
-  return ref === void 0 || !COMMIT_SHA_RE.test(ref);
-}
-function pinnedGitCommit(spec) {
-  const ref = GIT_SPEC_RE.exec(spec)?.[1];
-  return ref !== void 0 && COMMIT_SHA_RE.test(ref) ? ref.toLowerCase() : void 0;
+  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
 }
-
-// src/headroom/supervisor.ts
-function resolveSupervisorConfig(configured) {
+function parseUnifiedRateLimit(headers) {
+  if (!Object.keys(headers).some((name) => name.startsWith(UNIFIED_PREFIX))) {
+    return void 0;
+  }
+  const status = headers[`${UNIFIED_PREFIX}status`];
+  const fiveHour = unifiedWindow(headers, "5h");
+  const sevenDay = unifiedWindow(headers, "7d");
+  const representativeClaim = headers[`${UNIFIED_PREFIX}representative-claim`];
+  const resetAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}reset`]);
+  const overageStatus = headers[`${UNIFIED_PREFIX}overage-status`];
   return {
-    source: configured.source ?? HEADROOM_DEFAULT_SOURCE,
-    idleShutdownMinutes: configured.idleShutdownMinutes ?? HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES,
-    settings: settingsOf(configured)
+    ...status === void 0 ? {} : { status },
+    ...fiveHour === void 0 ? {} : { fiveHour },
+    ...sevenDay === void 0 ? {} : { sevenDay },
+    ...representativeClaim === void 0 ? {} : { representativeClaim },
+    ...resetAt === void 0 ? {} : { resetAt },
+    ...overageStatus === void 0 ? {} : { overageStatus }
   };
 }
-var HEADROOM_BACKOFF_BASE_MS = 500;
-var HEADROOM_BACKOFF_CAP_MS = 3e4;
-var HEADROOM_START_RETRY_BUDGET = 5;
-var HEADROOM_READY_TIMEOUT_MS = 15e3;
-var HEADROOM_POLL_MS = 1e3;
-var MS_PER_MINUTE2 = 6e4;
-function backoffForAttempt(attempt) {
-  return Math.min(HEADROOM_BACKOFF_CAP_MS, HEADROOM_BACKOFF_BASE_MS * 2 ** (attempt - 1));
+
+// src/usage/scan.ts
+import { z as z7 } from "zod";
+var AnthropicUsageSchema = z7.looseObject({
+  input_tokens: z7.number().int().nonnegative().nullish(),
+  output_tokens: z7.number().int().nonnegative().nullish(),
+  cache_creation_input_tokens: z7.number().int().nonnegative().nullish(),
+  cache_read_input_tokens: z7.number().int().nonnegative().nullish()
+});
+var ErrorObjectSchema = z7.looseObject({
+  type: z7.string().optional(),
+  code: z7.union([z7.string(), z7.number()]).optional(),
+  message: z7.string().optional()
+});
+
+// src/usage/middleware.ts
+var ANTHROPIC_PROVIDER = "anthropic";
+
+// src/usage/pick.ts
+var MS_PER_SECOND4 = 1e3;
+var MS_PER_HOUR = 36e5;
+var HOURS_PER_DAY2 = 24;
+var FIVE_HOURS = 5;
+var PROMPT_CACHE_TTL_HOURS = 1;
+var PERCENT = 100;
+var SEVEN_DAYS = 7;
+var FIVE_HOUR_WINDOW_MS = FIVE_HOURS * MS_PER_HOUR;
+var SEVEN_DAY_WINDOW_MS = SEVEN_DAYS * HOURS_PER_DAY2 * MS_PER_HOUR;
+var PROMPT_CACHE_TTL_MS = PROMPT_CACHE_TTL_HOURS * MS_PER_HOUR;
+var CLASS_ORDER = { scored: 0, unknown: 1, "pay-per-use": 2, ineligible: 3 };
+function unifiedOf(state) {
+  return state?.rateLimit?.unified;
 }
-function versionSatisfies(version, source) {
-  if (version === void 0) {
-    return false;
-  }
-  const specifier = /==|>=|<=|!=|>|<|~=/.exec(source);
-  if (specifier === null) {
-    return true;
-  }
-  const installed = parseVersion(version);
-  const wanted = parseVersion(source.slice(specifier.index + specifier[0].length));
-  if (installed === void 0 || wanted === void 0) {
-    return true;
+function limitBlockedUntil(state, nowMs) {
+  const limit = state?.lastLimit;
+  if (state === void 0 || limit === void 0) {
+    return void 0;
   }
-  const cmp = compareVersions(installed, wanted);
-  switch (specifier[0]) {
-    case "==":
-      return cmp === 0;
-    case "!=":
-      return cmp !== 0;
-    case ">=":
-      return cmp >= 0;
-    case "<=":
-      return cmp <= 0;
-    case ">":
-      return cmp > 0;
-    case "<":
-      return cmp < 0;
-    case "~=":
-      return compareVersions(installed.slice(0, Math.max(0, wanted.length - 1)), wanted.slice(0, Math.max(0, wanted.length - 1))) === 0 && cmp >= 0;
-    default:
-      return true;
+  if (Date.parse(state.lastRequestAt) > Date.parse(limit.observedAt)) {
+    return void 0;
   }
+  const until = limit.resetAt === void 0 ? limit.retryAfterSeconds === void 0 ? void 0 : Date.parse(limit.observedAt) + limit.retryAfterSeconds * MS_PER_SECOND4 : Date.parse(limit.resetAt);
+  return until !== void 0 && until > nowMs ? until : void 0;
 }
-function parseVersion(input) {
-  const match = /(\d+)(\.\d+)*/.exec(input);
-  if (match === null) {
+function windowBlockedUntil(windows) {
+  const resets = windows.flatMap((window) => window.status === "rejected" && window.resetsAtMs !== void 0 ? [window.resetsAtMs] : []);
+  return resets.length === 0 ? void 0 : Math.max(...resets);
+}
+function fiveHourBurn(records) {
+  const points = [];
+  for (const record of records) {
+    const window = record.rateLimitHeaders === void 0 ? void 0 : parseUnifiedRateLimit(record.rateLimitHeaders)?.fiveHour;
+    if (window?.utilization !== void 0 && window.resetsAt !== void 0) {
+      points.push({ resetsAt: window.resetsAt, point: { atMs: Date.parse(record.at), utilization: window.utilization } });
+    }
+  }
+  const latest = points.at(-1)?.resetsAt;
+  const current = points.filter((entry) => entry.resetsAt === latest).map((entry) => entry.point);
+  const first = current.at(0);
+  const last = current.at(-1);
+  if (first === void 0 || last === void 0 || last.atMs <= first.atMs || last.utilization <= first.utilization) {
     return void 0;
   }
-  return match[0].split(".").map((part) => Number.parseInt(part, 10));
+  return (last.utilization - first.utilization) / (last.atMs - first.atMs);
 }
-function compareVersions(a, b) {
-  for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
-    const left = a[index] ?? 0;
-    const right = b[index] ?? 0;
-    if (left !== right) {
-      return left - right;
-    }
+function percent(fraction) {
+  return `${String(Math.round(fraction * PERCENT))}%`;
+}
+function describeWindow(label, window, effective, nowMs) {
+  if (effective.reset) {
+    return `${label} window has reset`;
   }
-  return 0;
+  const used = effective.utilization === void 0 ? "usage unknown" : `${percent(effective.utilization)} used`;
+  const resets = effective.resetsAtMs === void 0 ? "" : `, resets in ${formatAge(effective.resetsAtMs - nowMs)}`;
+  return `${label} ${used}${resets}${window.status === "allowed_warning" ? " (nearly used)" : ""}`;
 }
-var HEADROOM_SUPERVISOR_STILL_RUNNING = -1;
-async function runSupervisor(initialConfig, ports, options = {}) {
-  const { fs: fs12, paths } = ports;
-  let config = initialConfig;
-  const previousState = readHeadroomState(fs12, paths.headroomStateFile);
-  if (previousState?.supervisorPid !== void 0 && previousState.supervisorPid !== ports.ownPid && ports.isRunning(previousState.supervisorPid)) {
-    ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: supervisor ${String(previousState.supervisorPid)} already owns the daemon; exiting`);
-    return 0;
+function capacityOf(plan) {
+  return plan.kind === "subscription" ? plan.capacity : 1;
+}
+function assess(member, nowMs) {
+  const plan = planOf(member.account);
+  const planReasons = plan.kind === "pay-per-use" ? ["billed by use (no plan allowance)"] : plan.recognised ? [`${String(plan.capacity)}x plan`] : [`plan tier ${plan.tier === void 0 ? "not known" : `"${plan.tier}" not recognised`}, counted as 1x`];
+  const base = { identity: member.identity, plan };
+  if (member.readError !== void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: [`usage state unreadable: ${member.readError}`, ...planReasons] } };
   }
-  let installedSource = previousState?.installedSource;
-  const ownsState = () => {
-    const owner = readHeadroomState(fs12, paths.headroomStateFile)?.supervisorPid;
-    return owner === void 0 || owner === ports.ownPid || !ports.isRunning(owner);
-  };
-  const writeOwnState = (state) => {
-    if (!ownsState()) {
-      return false;
-    }
-    writeHeadroomState(fs12, paths.headroomStateFile, state);
-    return true;
-  };
-  const fail = (message) => {
-    if (writeOwnState({ lastError: message })) {
-      fs12.removeRecursive(paths.headroomLockFile);
-    }
-    ports.log(`agent-shim headroom supervisor: ${message}`);
-    return 1;
-  };
-  const ensureInstalled = () => {
-    const version2 = ports.headroomVersion();
-    const versionOk = version2 !== void 0 && versionSatisfies(version2, config.source);
-    const pinned = pinnedGitCommit(config.source);
-    const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
-    if (versionOk && commitOk && (installedSource === void 0 || installedSource === config.source)) {
-      installedSource = config.source;
-      return true;
-    }
-    ports.log(`agent-shim headroom supervisor: installing headroom from ${config.source}`);
-    const result = ports.install(config.source);
-    if (!result.ok) {
-      return false;
+  const state = member.snapshot?.providers[ANTHROPIC_PROVIDER];
+  const unified = unifiedOf(state);
+  if (member.snapshot === void 0 || state === void 0 || unified === void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: ["no usage recorded yet, so its quota is unknown (turn on trackUsage for it)", ...planReasons] } };
+  }
+  const observedAgo = state.rateLimit === void 0 ? "" : ` (last seen ${formatAge(nowMs - Date.parse(state.rateLimit.observedAt))} ago)`;
+  const fiveHourWindow = unified.fiveHour;
+  const sevenDayWindow = unified.sevenDay;
+  const five = fiveHourWindow === void 0 ? void 0 : effectiveWindow(fiveHourWindow, nowMs);
+  const seven = sevenDayWindow === void 0 ? void 0 : effectiveWindow(sevenDayWindow, nowMs);
+  const windowReasons = [
+    ...fiveHourWindow === void 0 || five === void 0 ? [] : [describeWindow("5h", fiveHourWindow, five, nowMs)],
+    ...sevenDayWindow === void 0 || seven === void 0 ? [] : [describeWindow("7d", sevenDayWindow, seven, nowMs)]
+  ];
+  const blockedUntil = Math.max(
+    windowBlockedUntil([five, seven].flatMap((window) => window === void 0 ? [] : [window])) ?? 0,
+    limitBlockedUntil(state, nowMs) ?? 0
+  );
+  if (blockedUntil > nowMs) {
+    if (unified.overageStatus === "allowed") {
+      return { candidate: { ...base, class: "pay-per-use", reasons: [`plan exhausted until ${new Date(blockedUntil).toISOString()}, continues as extra usage`, ...windowReasons, ...planReasons] } };
     }
-    installedSource = config.source;
-    return true;
-  };
-  const socket = prepareHeadroomSocket(fs12, ports.socketTrust, paths, ports.ownPid);
-  if (socket.refused !== void 0) {
-    return fail(socket.refused);
+    return { candidate: { ...base, class: "ineligible", blockedUntilMs: blockedUntil, reasons: [`refused until ${new Date(blockedUntil).toISOString()} (in ${formatAge(blockedUntil - nowMs)})`, ...windowReasons, ...planReasons] } };
   }
-  const { socketPath } = socket;
-  pruneStaleHeadroomSockets(fs12, paths, ports.isRunning);
-  if (!ensureInstalled()) {
-    return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+  if (plan.kind === "pay-per-use" || fiveHourWindow === void 0 && sevenDayWindow === void 0) {
+    return { candidate: { ...base, class: "pay-per-use", reasons: [...plan.kind === "pay-per-use" ? planReasons : ["no plan windows reported, so usage bills as extra usage"]] } };
   }
-  const version = ports.headroomVersion() ?? "unknown";
-  writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
-  ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: managing headroom on allowlist [${allowlistOf(ports).join(", ")}]`);
-  const orphanPid = previousState?.headroomPid;
-  if (orphanPid !== void 0 && ports.isRunning(orphanPid)) {
-    ports.log(`agent-shim headroom supervisor: stopping daemon pid ${String(orphanPid)} left behind by the previous supervisor`);
-    ports.stopProcess(orphanPid);
+  const basis = seven?.utilization !== void 0 ? { window: seven, windowMs: SEVEN_DAY_WINDOW_MS } : five?.utilization !== void 0 ? { window: five, windowMs: FIVE_HOUR_WINDOW_MS } : void 0;
+  if (basis?.window.utilization === void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: ["quota windows reported no utilisation", ...windowReasons, ...planReasons] } };
   }
-  let headroomPid;
-  let runningHash;
-  let runningSettingsHash;
-  let consecutiveFailures = 0;
-  let idleSince;
-  let superseded = false;
-  let ticks = 0;
-  for (; ; ) {
-    if (options.tickLimit !== void 0 && ticks >= options.tickLimit) {
-      return HEADROOM_SUPERVISOR_STILL_RUNNING;
+  const remaining = Math.max(0, 1 - basis.window.utilization);
+  const untilResetMs = basis.window.resetsAtMs === void 0 ? basis.windowMs : Math.max(basis.window.resetsAtMs - nowMs, MS_PER_SECOND4);
+  const score = remaining * plan.capacity / (untilResetMs / MS_PER_HOUR);
+  const fiveRemaining = five?.utilization === void 0 ? void 0 : Math.max(0, 1 - five.utilization);
+  const fiveUntil = five?.resetsAtMs === void 0 ? FIVE_HOUR_WINDOW_MS : Math.max(five.resetsAtMs - nowMs, MS_PER_SECOND4);
+  const burn = fiveHourBurn(member.records);
+  return {
+    candidate: { ...base, class: "scored", score, reasons: [...windowReasons.map((reason, index) => index === windowReasons.length - 1 ? `${reason}${observedAgo}` : reason), ...planReasons] },
+    ...fiveRemaining === void 0 ? {} : { fiveHour: { remaining: fiveRemaining, untilResetMs: fiveUntil } },
+    ...burn === void 0 ? {} : { burn }
+  };
+}
+function rankPool(input) {
+  const { members, nowMs } = input;
+  const assessments = members.map((member) => assess(member, nowMs));
+  const demands = assessments.flatMap(({ candidate, burn }) => burn === void 0 ? [] : [burn * capacityOf(candidate.plan)]);
+  const sharedDemand = demands.length === 0 ? void 0 : Math.max(...demands);
+  const candidates = assessments.map((assessment) => {
+    const { candidate, fiveHour, burn } = assessment;
+    const pace = burn ?? (sharedDemand === void 0 ? void 0 : sharedDemand / capacityOf(candidate.plan));
+    if (candidate.class !== "scored" || fiveHour === void 0 || pace === void 0) {
+      return { ...candidate, feasible: true };
     }
-    ticks += 1;
-    config = ports.readConfig();
-    const settingsHash = hashSettings(config.settings);
-    const allowlist = allowlistOf(ports);
-    const allowlistHash = hashAllowlist(allowlist);
-    pruneDeadSessions(fs12, paths.headroomSessionsDir, ports.isRunning);
-    const ownsNow = ownsState();
-    if (!ownsNow && !superseded) {
-      ports.log("agent-shim headroom supervisor: another supervisor now owns the state file; serving this daemon's own sessions until they end");
+    const runsDryInMs = fiveHour.remaining / pace;
+    if (runsDryInMs >= fiveHour.untilResetMs) {
+      return { ...candidate, feasible: true };
     }
-    superseded = !ownsNow;
-    const crashed = headroomPid !== void 0 && !ports.isRunning(headroomPid);
-    if (headroomPid === void 0 || crashed) {
-      if (crashed) {
-        ports.log(`agent-shim headroom supervisor: headroom pid ${String(headroomPid)} died`);
-        headroomPid = void 0;
-        runningHash = void 0;
-        runningSettingsHash = void 0;
-        writeOwnState({
-          supervisorPid: ports.ownPid,
-          version,
-          installedSource
-        });
-      }
-      if (consecutiveFailures >= HEADROOM_START_RETRY_BUDGET) {
-        return fail(`headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up`);
-      }
-      if (installedSource !== config.source && !ensureInstalled()) {
-        return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
-      }
-      const pid = ports.spawnHeadroom(socketPath, allowlist, config.settings);
-      const ready = await waitUntilReady(ports, socketPath);
-      if (ready) {
-        consecutiveFailures = 0;
-        headroomPid = pid;
-        runningHash = allowlistHash;
-        runningSettingsHash = settingsHash;
-        const recorded = writeOwnState({
-          supervisorPid: ports.ownPid,
-          headroomPid: pid,
-          socketPath,
-          version,
-          allowlistHash,
-          settingsHash,
-          installedSource: config.source
-        });
-        if (recorded) {
-          fs12.removeRecursive(paths.headroomLockFile);
-        }
-        idleSince = void 0;
-        ports.log(`agent-shim headroom supervisor: headroom pid ${String(pid)} ready on unix socket ${socketPath}`);
-      } else {
-        ports.stopProcess(pid);
-        consecutiveFailures += 1;
-        ports.log(
-          `agent-shim headroom supervisor: headroom did not become ready on unix socket ${socketPath} (attempt ${String(consecutiveFailures)} of ${String(HEADROOM_START_RETRY_BUDGET)})`
-        );
-        await ports.sleep(backoffForAttempt(consecutiveFailures));
-        continue;
-      }
-    } else {
-      if (runningHash !== allowlistHash || runningSettingsHash !== settingsHash || installedSource !== config.source) {
-        if (sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid).length === 0) {
-          ports.log("agent-shim headroom supervisor: configuration drifted and no sessions are live; restarting headroom");
-          ports.stopProcess(headroomPid);
-          headroomPid = void 0;
-          runningHash = void 0;
-          runningSettingsHash = void 0;
-          continue;
-        }
-      }
-      const sessions = sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid);
-      if (sessions.length === 0) {
-        idleSince ??= ports.now();
-        const idleMs = ports.now() - idleSince;
-        if (idleMs >= config.idleShutdownMinutes * MS_PER_MINUTE2) {
-          ports.log(
-            `agent-shim headroom supervisor: no sessions for ${String(config.idleShutdownMinutes)} minute(s); stopping headroom and exiting`
-          );
-          ports.stopProcess(headroomPid);
-          writeOwnState({ version });
-          return 0;
-        }
-      } else {
-        idleSince = void 0;
-      }
-    }
-    await ports.sleep(HEADROOM_POLL_MS);
-  }
-}
-function currentHeadroomAllowlist(fs12, paths) {
-  const providers = readAllProviders(fs12, paths.providersDir).map((entry) => entry.provider);
-  return headroomAllowlist(headroomUpstreams(providers, frontDoorOrigin(readFrontDoorState(fs12, paths.frontdoorStateFile))));
-}
-function allowlistOf(ports) {
-  return currentHeadroomAllowlist(ports.fs, ports.paths);
-}
-async function waitUntilReady(ports, socketPath) {
-  const deadline = ports.now() + HEADROOM_READY_TIMEOUT_MS;
-  for (; ; ) {
-    if (await ports.ready(socketPath)) {
-      return true;
-    }
-    if (ports.now() >= deadline) {
-      return false;
-    }
-    await ports.sleep(HEADROOM_POLL_MS);
-  }
-}
-
-// src/launcher/guard.ts
-var AMBIENT_CREDENTIAL_VARS = [
-  "ANTHROPIC_API_KEY",
-  "ANTHROPIC_AUTH_TOKEN",
-  "CLAUDE_CODE_OAUTH_TOKEN",
-  "CLAUDE_CODE_USE_BEDROCK",
-  "CLAUDE_CODE_USE_VERTEX",
-  "CLAUDE_CODE_USE_FOUNDRY"
-];
-function detectAmbientCredential(env, injected) {
-  for (const variable of AMBIENT_CREDENTIAL_VARS) {
-    const value = env[variable];
-    if (value === void 0 || value === "") {
-      continue;
-    }
-    if (injected?.variable === variable && value === injected.token) {
-      continue;
+    return { ...candidate, feasible: false, reasons: [`5h window would run dry in ${formatAge(runsDryInMs)}, before it resets in ${formatAge(fiveHour.untilResetMs)}`, ...candidate.reasons] };
+  });
+  const ordered = [...candidates].sort(
+    (left, right) => CLASS_ORDER[left.class] - CLASS_ORDER[right.class] || Number(right.feasible) - Number(left.feasible) || (right.score ?? 0) - (left.score ?? 0) || left.identity.localeCompare(right.identity)
+  );
+  const sticky = input.sticky;
+  const stickyIndex = sticky === void 0 ? -1 : ordered.findIndex((candidate) => candidate.identity === sticky.identity);
+  const stickyCandidate = ordered[stickyIndex];
+  if (sticky !== void 0 && stickyCandidate?.class === "scored" && stickyCandidate.feasible) {
+    const ageMs = nowMs - Date.parse(sticky.at);
+    const warm = ageMs <= PROMPT_CACHE_TTL_MS;
+    if (input.resuming || warm) {
+      const why = warm ? `used here ${formatAge(ageMs)} ago, prompt cache still warm` : "resuming a conversation started on this account";
+      ordered.splice(stickyIndex, 1);
+      ordered.unshift({ ...stickyCandidate, reasons: [why, ...stickyCandidate.reasons] });
     }
-    return { variable };
-  }
-  return void 0;
-}
-function formatAmbientCredentialGuardMessage(variable, identityName) {
-  const identitySetCommand = identityName === void 0 ? "agent-shim identity set <name> --allow-ambient-credential" : `agent-shim identity set ${identityName} --allow-ambient-credential`;
-  return [
-    `error: ${variable} is set in the environment. This identity's isolated`,
-    "credential would be bypassed \u2014 every identity authenticates as this same key",
-    "while it's set. Unset it, or if this is deliberate, opt in per-launch with",
-    "AGENT_SHIM_ALLOW_AMBIENT_CREDENTIAL=1, or persistently for this identity with",
-    `\`${identitySetCommand}\`.`
-  ].join("\n");
-}
-function evaluateAmbientCredentialGuard(params) {
-  const detected = detectAmbientCredential(params.env, params.injectedCredential);
-  if (detected === void 0) {
-    return { ok: true };
-  }
-  if (params.allowAmbientCredentialOverride || params.allowAmbientCredential || params.providerSelected === true) {
-    return { ok: true };
   }
+  const pick = ordered.find((candidate) => candidate.class !== "ineligible");
+  const returns = ordered.flatMap((candidate) => candidate.blockedUntilMs === void 0 ? [] : [{ identity: candidate.identity, atMs: candidate.blockedUntilMs }]);
+  const earliestReturn = returns.length === 0 ? void 0 : returns.reduce((soonest, entry) => entry.atMs < soonest.atMs ? entry : soonest);
   return {
-    ok: false,
-    variable: detected.variable,
-    message: formatAmbientCredentialGuardMessage(detected.variable, params.identityName)
+    candidates: ordered,
+    ...pick === void 0 ? { ...earliestReturn === void 0 ? {} : { earliestReturn } } : { pick }
   };
 }
 
-// src/paths.ts
-import fs3 from "node:fs";
-import os from "node:os";
-import path12 from "node:path";
-function resolveAgentShimHome(env = process.env, home = os.homedir(), isDirectory = isExistingDirectory) {
-  const fromEnv = env.AGENT_SHIM_HOME;
-  if (fromEnv !== void 0 && fromEnv !== "") {
-    return fromEnv;
-  }
-  const current = path12.join(home, HOME_DIRNAME);
-  const legacy = path12.join(home, LEGACY_HOME_DIRNAME);
-  return !isDirectory(current) && isDirectory(legacy) ? legacy : current;
+// src/usage/poolPick.ts
+import path11 from "node:path";
+import { z as z8 } from "zod";
+
+// src/usage/store.ts
+var DAY_MS2 = 864e5;
+var DAYS_IN_WEEK = 7;
+var USAGE_RETENTION_MS = DAYS_IN_WEEK * DAY_MS2;
+
+// src/usage/poolPick.ts
+var SCHEMA_VERSION = 1;
+var PickEntrySchema = z8.strictObject({ identity: z8.string().min(1), at: z8.iso.datetime() });
+var PicksFileSchema = z8.strictObject({
+  schemaVersion: z8.literal(SCHEMA_VERSION),
+  picks: z8.record(z8.string().min(1), PickEntrySchema)
+});
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
 }
-function isExistingDirectory(candidate) {
-  return fs3.statSync(candidate, { throwIfNoEntry: false })?.isDirectory() ?? false;
+function loadPoolMembers(fs12, paths, identities, nowMs) {
+  const windowStartMs = nowMs - FIVE_HOUR_WINDOW_MS;
+  const log = readUsageLog(fs12, paths.usageLogDir, { sinceMs: windowStartMs });
+  return identities.map((identity) => {
+    const records = log.records.filter((record) => record.identity === identity && record.provider === ANTHROPIC_PROVIDER && Date.parse(record.at) >= windowStartMs);
+    try {
+      const snapshot = readUsageSnapshot(fs12, paths.usageSnapshotsDir, identity);
+      const account = readAccountMetadata(fs12, paths.identitiesDir, identity) ?? snapshot?.account;
+      return { identity, records, ...snapshot === void 0 ? {} : { snapshot }, ...account === void 0 ? {} : { account } };
+    } catch (error) {
+      if (error instanceof UsageSnapshotError || error instanceof AccountMetadataError) {
+        return { identity, records, readError: errorMessage(error) };
+      }
+      throw error;
+    }
+  });
 }
-function resolveClaudeHome() {
-  const fromEnv = process.env.AGENT_SHIM_CLAUDE_HOME;
-  if (fromEnv !== void 0 && fromEnv !== "") {
-    return fromEnv;
+function rankPoolFromStore(params) {
+  return rankPool({
+    members: loadPoolMembers(params.fs, params.paths, params.identities, params.nowMs),
+    nowMs: params.nowMs,
+    resuming: params.resuming,
+    ...params.sticky === void 0 ? {} : { sticky: params.sticky }
+  });
+}
+function readPicksFile(fs12, file) {
+  const empty = { schemaVersion: SCHEMA_VERSION, picks: {} };
+  const raw = fs12.readFileUtf8(file);
+  if (raw === void 0) {
+    return { file: empty };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return { file: empty, problem: `${file} is not valid JSON` };
   }
-  return path12.join(os.homedir(), ".claude");
+  const result = PicksFileSchema.safeParse(parsed);
+  return result.success ? { file: result.data } : { file: empty, problem: `${file} is not a picks file this agent-shim can read` };
 }
-function buildLayoutPaths(root) {
-  return {
-    root,
-    identitiesDir: path12.join(root, "identities"),
-    configProfilesDir: path12.join(root, "config-profiles"),
-    providersDir: path12.join(root, "providers"),
-    directoryRulesFile: path12.join(root, "directory-rules.json"),
-    activeIdentityFile: path12.join(root, "active-identity"),
-    globalConfigFile: path12.join(root, "config.json"),
-    categoriesLocalFile: path12.join(root, "categories.local.json"),
-    claudeShimFile: path12.join(root, "claude-shim.json"),
-    headroomDir: path12.join(root, "headroom"),
-    headroomStateFile: path12.join(root, "headroom", `state.v${String(HEADROOM_STATE_SCHEMA_VERSION)}.json`),
-    headroomSocketDir: path12.join(root, "headroom", "run"),
-    headroomLockFile: path12.join(root, "headroom", "start.lock"),
-    headroomSessionsDir: path12.join(root, "headroom", "sessions"),
-    logsDir: path12.join(root, "logs"),
-    headroomLogPath: path12.join(root, "logs", "headroom.log"),
-    frontdoorDir: path12.join(root, "frontdoor"),
-    frontdoorCaDir: path12.join(root, "frontdoor", "ca"),
-    frontdoorCaCertFile: path12.join(root, "frontdoor", "ca", "ca.pem"),
-    frontdoorCaKeyFile: path12.join(root, "frontdoor", "ca", "ca.key"),
-    frontdoorCaBundlesDir: path12.join(root, "frontdoor", "ca", "bundles"),
-    frontdoorStateFile: path12.join(root, "frontdoor", "state.json"),
-    frontdoorLockFile: path12.join(root, "frontdoor", "start.lock"),
-    frontdoorControlTokenFile: path12.join(root, "frontdoor", "control-token"),
-    frontdoorSessionsDir: path12.join(root, "frontdoor", "sessions"),
-    frontdoorLogPath: path12.join(root, "logs", "frontdoor.log"),
-    usageDir: path12.join(root, "usage"),
-    usageLogDir: path12.join(root, "usage", "log"),
-    usageSnapshotsDir: path12.join(root, "usage", "snapshots"),
-    usagePicksFile: path12.join(root, "usage", "picks.json")
-  };
+function readStickyPick(fs12, picksFile, directory) {
+  const read = readPicksFile(fs12, picksFile);
+  const entry = read.file.picks[directory];
+  return { ...entry === void 0 ? {} : { sticky: entry }, ...read.problem === void 0 ? {} : { problem: read.problem } };
 }
-function resolveLayoutPaths() {
-  return buildLayoutPaths(resolveAgentShimHome());
+function recordStickyPick(fs12, picksFile, directory, identity, nowMs) {
+  const current = readPicksFile(fs12, picksFile).file.picks;
+  const kept = Object.entries(current).filter(([, entry]) => nowMs - Date.parse(entry.at) <= USAGE_RETENTION_MS);
+  const next = { schemaVersion: SCHEMA_VERSION, picks: { ...Object.fromEntries(kept), [directory]: { identity, at: new Date(nowMs).toISOString() } } };
+  fs12.mkdirPrivate(path11.dirname(picksFile));
+  fs12.writeFilePrivate(picksFile, `${JSON.stringify(next, null, 2)}
+`);
 }
 
-// src/identityStore.ts
-import fs5 from "node:fs";
-import path15 from "node:path";
-
 // src/launcher/identity.ts
-import path13 from "node:path";
+import path12 from "node:path";
 function poolNameOf(selector) {
   return selector.startsWith(POOL_SELECTOR_PREFIX) ? selector.slice(POOL_SELECTOR_PREFIX.length) : void 0;
 }
@@ -5492,1445 +5319,1775 @@ function decideConfigProfile(params) {
   return { source: "none" };
 }
 function loadIdentity(identitiesDir, name, fs12) {
-  return loadConfigFile(path13.join(identitiesDir, name, "identity.json"), IdentitySchema, fs12.readConfigFile);
+  return loadConfigFile(path12.join(identitiesDir, name, "identity.json"), IdentitySchema, fs12.readConfigFile);
 }
 
-// src/configProfilesStore.ts
-import fs4 from "node:fs";
-import path14 from "node:path";
-var ProfileNotFoundError = class extends CliError {
-  constructor(profileName) {
-    super(`No configuration profile named "${profileName}". Run \`agent-shim profile add ${profileName}\` first.`);
-    this.profileName = profileName;
-    this.name = "ProfileNotFoundError";
-  }
-  profileName;
-};
-var ProfileAlreadyExistsError = class extends CliError {
-  constructor(profileName) {
-    super(`A configuration profile named "${profileName}" already exists.`);
-    this.profileName = profileName;
-    this.name = "ProfileAlreadyExistsError";
-  }
-  profileName;
-};
-var InvalidCategoryNameError = class extends CliError {
-  constructor(categoryName) {
-    super(`"${categoryName}" is not a category a configuration profile may toggle (runtime, history, knowledge, settings).`);
-    this.categoryName = categoryName;
-    this.name = "InvalidCategoryNameError";
-  }
-  categoryName;
-};
-function profileJsonPath(paths, name) {
-  return path14.join(paths.configProfilesDir, `${name}.json`);
+// src/launcher/pool.ts
+var RESUME_FLAGS = /* @__PURE__ */ new Set(["--continue", "-c", "--resume", "-r"]);
+var TERMINATOR = "--";
+var REASONS_LOGGED = 3;
+function splitMembers(pool, paths, fs12) {
+  const exists = (name) => loadIdentity(paths.identitiesDir, name, fs12) !== void 0;
+  return { present: pool.identities.filter(exists), missing: pool.identities.filter((name) => !exists(name)) };
 }
-function profileExists(paths, name) {
-  return fs4.existsSync(profileJsonPath(paths, name));
+function isResuming(passthrough) {
+  const end = passthrough.indexOf(TERMINATOR);
+  return (end === -1 ? passthrough : passthrough.slice(0, end)).some((token) => RESUME_FLAGS.has(token));
 }
-function requireProfileExists(paths, name) {
-  if (!profileExists(paths, name)) {
-    throw new ProfileNotFoundError(name);
+function resolvePoolLaunch(params) {
+  const { poolName, log } = params;
+  const pool = params.pools?.[poolName];
+  if (pool === void 0) {
+    return { ok: false, message: `agent-shim: no pool named "${poolName}" (selected via ${params.selectedVia}). Run \`agent-shim pool add ${poolName} --identity <name>...\` first.` };
   }
-}
-function readProfile(paths, name) {
-  return readJson(profileJsonPath(paths, name), ConfigProfileSchema);
-}
-function createProfile(paths, name, extendsList, description) {
-  if (profileExists(paths, name)) {
-    throw new ProfileAlreadyExistsError(name);
+  const { present: identities, missing } = splitMembers(pool, params.paths, params.fs);
+  for (const name of missing) {
+    log.warn(`agent-shim: pool "${poolName}" names identity "${name}", which does not exist; skipping it`);
   }
-  const filePath = profileJsonPath(paths, name);
-  const parsed = ConfigProfileSchema.safeParse({
-    ...description === void 0 ? {} : { description },
-    ...extendsList !== void 0 && extendsList.length > 0 ? { extends: [...extendsList] } : {}
-  });
-  if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+  if (identities.length === 0) {
+    return { ok: false, message: `agent-shim: no member of pool "${poolName}" is an existing identity.` };
   }
-  writeJsonAtomic(filePath, parsed.data);
-  return parsed.data;
-}
-function listProfiles(paths) {
-  if (!fs4.existsSync(paths.configProfilesDir)) {
-    return [];
+  const resuming = isResuming(params.passthrough);
+  const stickyRead = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd);
+  if (stickyRead.problem !== void 0) {
+    log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
   }
-  const names = fs4.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort();
-  const result = [];
-  for (const name of names) {
-    const profile = readProfile(paths, name);
-    if (profile !== void 0) {
-      result.push({ name, profile });
+  for (; ; ) {
+    const nowMs = params.now();
+    const ranking = rankPoolFromStore({ fs: params.usageFs, paths: params.paths, identities, nowMs, resuming, ...stickyRead.sticky === void 0 ? {} : { sticky: stickyRead.sticky } });
+    const { pick, earliestReturn } = ranking;
+    if (pick !== void 0) {
+      recordStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd, pick.identity, nowMs);
+      return { ok: true, identity: pick.identity, explanation: `pool ${poolName}: ${pick.reasons.slice(0, REASONS_LOGGED).join("; ")}` };
     }
-  }
-  return result;
-}
-function globalConfigPath(paths) {
-  return paths.globalConfigFile;
-}
-function readGlobalConfig(paths) {
-  return readJson(globalConfigPath(paths), GlobalConfigSchema);
-}
-function setGlobalDefaultProfile(paths, name) {
-  return applyPatch(
-    globalConfigPath(paths),
-    GlobalConfigSchema,
-    { defaultConfigProfile: name },
-    { defaults: {} }
-  );
-}
-function validateCategoryNames(patch) {
-  for (const key of Object.keys(patch)) {
-    if (!isOverridableCategory(key)) {
-      throw new InvalidCategoryNameError(key);
+    if (earliestReturn === void 0) {
+      return { ok: false, message: `agent-shim: no member of pool "${poolName}" can be picked.` };
     }
+    const until = new Date(earliestReturn.atMs).toISOString();
+    if (!params.wait) {
+      return {
+        ok: false,
+        message: `agent-shim: every member of pool "${poolName}" is refused right now; the earliest, ${earliestReturn.identity}, returns at ${until} (in ${formatAge(earliestReturn.atMs - nowMs)}). Pass --wait to sleep until then.`
+      };
+    }
+    log.info(`agent-shim: every member of pool "${poolName}" is refused; waiting until ${until} for ${earliestReturn.identity}`);
+    params.sleep(Math.max(earliestReturn.atMs - nowMs, 0));
   }
 }
-function setProfileCategories(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const expandedPatch = expandAllCategoryKey(patch);
-  validateCategoryNames(expandedPatch);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedCategories = { ...existing.categories, ...expandedPatch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { categories: mergedCategories });
-}
-function setProfileEntries(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedEntries = { ...existing.entries, ...patch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { entries: mergedEntries });
-}
-function setProfileLaunchFlags(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedLaunch = { ...existing.launch, ...patch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
-    // Read as `unknown` so the check sees the `undefined` a cleared key holds, which LaunchFlags' optional properties hide from the value type.
-    launch: Object.values(mergedLaunch).every((value) => value === void 0) ? void 0 : mergedLaunch
-  });
+
+// src/poolPickReport.ts
+function candidateView(candidate) {
+  return {
+    identity: candidate.identity,
+    class: candidate.class,
+    ...candidate.score === void 0 ? {} : { score: candidate.score },
+    feasible: candidate.feasible,
+    ...candidate.blockedUntilMs === void 0 ? {} : { blockedUntil: new Date(candidate.blockedUntilMs).toISOString() },
+    plan: candidate.plan,
+    reasons: [...candidate.reasons]
+  };
 }
-function setProfileMetadata(paths, name, patch) {
-  requireProfileExists(paths, name);
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
-    ...patch.extends === void 0 ? {} : { extends: patch.extends.length === 0 ? void 0 : [...patch.extends] },
-    ...patch.description === void 0 ? {} : { description: patch.description === false ? void 0 : patch.description }
+function collectPoolPick(params) {
+  const { present, missing } = splitMembers(params.pool, params.paths, params.fs);
+  const sticky = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.directory);
+  const ranking = rankPoolFromStore({
+    fs: params.usageFs,
+    paths: params.paths,
+    identities: present,
+    nowMs: params.nowMs,
+    resuming: false,
+    ...sticky.sticky === void 0 ? {} : { sticky: sticky.sticky }
   });
-}
-function removeProfile(paths, name) {
-  requireProfileExists(paths, name);
-  fs4.rmSync(profileJsonPath(paths, name));
+  return {
+    pool: params.poolName,
+    directory: params.directory,
+    ...ranking.pick === void 0 ? {} : { pick: ranking.pick.identity },
+    candidates: ranking.candidates.map(candidateView),
+    missing: [...missing],
+    ...ranking.earliestReturn === void 0 ? {} : { earliestReturn: { identity: ranking.earliestReturn.identity, at: new Date(ranking.earliestReturn.atMs).toISOString() } },
+    ...sticky.problem === void 0 ? {} : { stickyProblem: sticky.problem }
+  };
 }
 
-// src/poolStore.ts
-var PoolNotFoundError = class extends CliError {
-  constructor(poolName) {
-    super(`No pool named "${poolName}". Run \`agent-shim pool add ${poolName} --identity <name>...\` first.`);
-    this.poolName = poolName;
-    this.name = "PoolNotFoundError";
-  }
-  poolName;
-};
-var PoolAlreadyExistsError = class extends CliError {
-  constructor(poolName) {
-    super(`A pool named "${poolName}" already exists. Use \`agent-shim pool set ${poolName}\` to change its members.`);
-    this.poolName = poolName;
-    this.name = "PoolAlreadyExistsError";
-  }
-  poolName;
-};
-var InvalidPoolNameError = class extends CliError {
-  constructor(attemptedName) {
-    super(`"${attemptedName}" is not a valid pool name: it must start with a letter or number and may then contain letters, numbers, dots, hyphens and underscores.`);
-    this.attemptedName = attemptedName;
-    this.name = "InvalidPoolNameError";
-  }
-  attemptedName;
-};
-function readPools(paths) {
-  return readGlobalConfig(paths)?.pools ?? {};
-}
-function requirePool(paths, name) {
-  const pool = readPools(paths)[name];
-  if (pool === void 0) {
-    throw new PoolNotFoundError(name);
-  }
-  return pool;
-}
-function writePools(paths, pools) {
-  applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
-}
-function addPool(paths, name, identities) {
-  if (!PoolNameSchema.safeParse(name).success) {
-    throw new InvalidPoolNameError(name);
-  }
-  const pools = readPools(paths);
-  if (pools[name] !== void 0) {
-    throw new PoolAlreadyExistsError(name);
-  }
-  const pool = { identities: [...identities] };
-  writePools(paths, { ...pools, [name]: pool });
-  return pool;
-}
-function setPool(paths, name, identities) {
-  requirePool(paths, name);
-  const pool = { identities: [...identities] };
-  writePools(paths, { ...readPools(paths), [name]: pool });
-  return pool;
-}
-function removePool(paths, name) {
-  requirePool(paths, name);
-  const remaining = Object.fromEntries(Object.entries(readPools(paths)).filter(([existing]) => existing !== name));
-  writePools(paths, remaining);
-}
+// src/usage/pickReportSchema.ts
+import { z as z9 } from "zod";
+var PoolPickCandidateViewSchema = z9.strictObject({
+  identity: z9.string(),
+  /** In pick order: `scored` has usable quota data, `unknown` has none, `pay-per-use` bills by use, `ineligible` is refused right now. */
+  class: z9.enum(["scored", "unknown", "pay-per-use", "ineligible"]),
+  /** Plan-size-weighted remaining quota per hour until its reset; present for `scored` only. */
+  score: z9.number().optional(),
+  /** False when the five-hour window would run dry, at the observed pace, before it resets. */
+  feasible: z9.boolean(),
+  /** When an `ineligible` member can be used again, as an ISO instant. */
+  blockedUntil: z9.iso.datetime().optional(),
+  plan: PlanClassSchema,
+  /** The facts behind the class and score, in the order they matter. */
+  reasons: z9.array(z9.string())
+});
+var PoolPickReportSchema = z9.strictObject({
+  pool: z9.string(),
+  directory: z9.string(),
+  /** The member a launch would run as, absent when every member is refused. */
+  pick: z9.string().optional(),
+  candidates: z9.array(PoolPickCandidateViewSchema),
+  /** Members that name an identity that does not exist; a launch skips them. */
+  missing: z9.array(z9.string()),
+  /** When nothing can be picked, the soonest any member returns. */
+  earliestReturn: z9.strictObject({ identity: z9.string(), at: z9.iso.datetime() }).optional(),
+  /** Why the last-pick record could not be read, when that is the case. */
+  stickyProblem: z9.string().optional()
+});
 
-// src/identityStore.ts
-var IdentityNotFoundError = class extends CliError {
-  constructor(name) {
-    super(`No identity named "${name}". Run \`agent-shim identity add ${name}\` first.`);
-    this.name = name;
-    this.name = "IdentityNotFoundError";
+// src/headroom/ensure.ts
+var HEADROOM_START_TIMEOUT_MS = 12e4;
+var HEADROOM_LAUNCHER_POLL_MS = 250;
+var HeadroomStartError = class extends CliError {
+  constructor(message) {
+    super(message);
+    this.name = "HeadroomStartError";
   }
-  name;
 };
-var IdentityAlreadyExistsError = class extends CliError {
-  constructor(identityName) {
-    super(`An identity named "${identityName}" already exists.`);
-    this.identityName = identityName;
-    this.name = "IdentityAlreadyExistsError";
+function ensureHeadroom(params) {
+  const { paths, ports } = params;
+  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+  let spawnedSupervisor = false;
+  let awaitingAllowlist = false;
+  for (; ; ) {
+    const state = readHeadroomState(ports.fs, paths.headroomStateFile);
+    if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
+      const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
+      if (daemonUp && state.socketPath !== void 0) {
+        const required = params.requiredAllowlistHash?.();
+        if (required === void 0 || state.allowlistHash === required) {
+          writeSession(ports.fs, paths.headroomSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), supervisorPid: state.supervisorPid });
+          return { socketPath: state.socketPath };
+        }
+        const holders = sessionsForSupervisor(ports.fs, paths.headroomSessionsDir, state.supervisorPid).filter((session) => ports.isRunning(session.pid));
+        if (holders.length > 0) {
+          throw new HeadroomStartError(
+            `the running headroom daemon was started before this launch's front door address and would refuse every request this launch sends through it. It restarts once the launches using it end (pid ${holders.map((session) => String(session.pid)).join(", ")}); end them and launch again, or launch with --no-headroom.`
+          );
+        }
+        awaitingAllowlist = true;
+      }
+      if (state.lastError !== void 0) {
+        throw new HeadroomStartError(
+          `the headroom daemon reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.headroomLogPath})`
+        );
+      }
+    } else if (!spawnedSupervisor) {
+      ports.fs.mkdirp(paths.headroomDir);
+      const created = ports.fs.writeFileExclusive(
+        paths.headroomLockFile,
+        `${JSON.stringify({ pid: params.launcherPid, at: ports.now() })}
+`
+      );
+      if (created) {
+        ports.spawnSupervisor(paths);
+        spawnedSupervisor = true;
+      } else {
+        const lock = readStartLock(ports.fs, paths.headroomLockFile);
+        if (lock === void 0 || !ports.isRunning(lock.pid)) {
+          ports.fs.removeRecursive(paths.headroomLockFile);
+          continue;
+        }
+      }
+    }
+    if (ports.now() >= deadline) {
+      const lastError = state?.lastError;
+      throw new HeadroomStartError(
+        `the headroom daemon did not become ready within ${String(HEADROOM_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (awaitingAllowlist ? " (the running daemon's allowlist does not admit this launch's front door, and it did not restart)" : "") + `. Daemon log: ${paths.headroomLogPath}`
+      );
+    }
+    ports.sleep(HEADROOM_LAUNCHER_POLL_MS);
   }
-  identityName;
-};
-var InvalidIdentityNameError = class extends CliError {
-  constructor(attemptedName) {
-    super(
-      `"${attemptedName}" is not a valid identity name \u2014 identity names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
-    );
-    this.attemptedName = attemptedName;
-    this.name = "InvalidIdentityNameError";
+}
+
+// src/headroom/settings.ts
+import { createHash as createHash4 } from "node:crypto";
+function settingsOf(config) {
+  return {
+    ...config.mode === void 0 ? {} : { mode: config.mode },
+    ...config.targetRatio === void 0 ? {} : { targetRatio: config.targetRatio },
+    ...config.ccr === void 0 ? {} : { ccr: config.ccr },
+    ...config.rolloutChannel === void 0 ? {} : { rolloutChannel: config.rolloutChannel },
+    ...config.interceptToolResults === void 0 ? {} : { interceptToolResults: config.interceptToolResults },
+    ...config.readMaturation === void 0 ? {} : { readMaturation: config.readMaturation }
+  };
+}
+function settingsArgs(settings) {
+  return [
+    ...settings.mode === void 0 ? [] : ["--mode", settings.mode],
+    ...settings.targetRatio === void 0 ? [] : ["--target-ratio", String(settings.targetRatio)],
+    ...settings.ccr === "lossless" ? ["--lossless"] : [],
+    ...settings.ccr === "none" ? ["--no-ccr"] : [],
+    ...settings.interceptToolResults === true ? ["--intercept-tool-results"] : [],
+    ...settings.readMaturation === true ? ["--read-maturation"] : []
+  ];
+}
+function settingsEnv(settings) {
+  return settings.rolloutChannel === void 0 ? {} : { HEADROOM_ROLLOUT_CHANNEL: settings.rolloutChannel };
+}
+function hashSettings(settings) {
+  return createHash4("sha256").update(JSON.stringify([...settingsArgs(settings), JSON.stringify(settingsEnv(settings))])).digest("hex");
+}
+
+// src/headroom/socket.ts
+import path13 from "node:path";
+var GROUP_OR_OTHER_BITS = 63;
+var OCTAL_RADIX = 8;
+var MODE_DIGITS = 4;
+var HEADROOM_SOCKET_SUFFIX = ".sock";
+var HEADROOM_SOCKET_NAME = /^(\d+)\.sock$/;
+var UNIX_SOCKET_PATH_MAX_BYTES = 103;
+var PLATFORMS_WITHOUT_UNIX_SOCKETS = ["win32"];
+function headroomSocketPath(paths, supervisorPid) {
+  return path13.join(paths.headroomSocketDir, `${String(supervisorPid)}${HEADROOM_SOCKET_SUFFIX}`);
+}
+function platformRefusal(platform) {
+  return PLATFORMS_WITHOUT_UNIX_SOCKETS.includes(platform) ? `headroom routing needs a unix domain socket, which headroom cannot serve on ${platform}; agent-shim never falls back to a TCP port for this hop` : void 0;
+}
+function ownerOnlyRefusal(label, target, stat, expected, uid) {
+  if (stat === void 0) {
+    return `the headroom ${label} ${target} does not exist`;
   }
-  attemptedName;
-};
-function identityJsonPath(paths, name) {
-  return path15.join(paths.identitiesDir, name, "identity.json");
+  if (stat.kind === "symlink") {
+    return `the headroom ${label} ${target} is a symlink; it must be the real ${expected === "dir" ? "directory" : "socket"}`;
+  }
+  if (stat.kind !== expected) {
+    return `the headroom ${label} ${target} is not a ${expected === "dir" ? "directory" : "socket"}`;
+  }
+  if (stat.uid !== uid) {
+    return `the headroom ${label} ${target} is owned by uid ${String(stat.uid)}, not by this user (uid ${String(uid)})`;
+  }
+  if ((stat.mode & GROUP_OR_OTHER_BITS) !== 0) {
+    return `the headroom ${label} ${target} has mode ${stat.mode.toString(OCTAL_RADIX).padStart(MODE_DIGITS, "0")}, which lets other users reach it; it must be accessible to its owner only`;
+  }
+  return void 0;
 }
-function identityExists(paths, name) {
-  return fs5.existsSync(identityJsonPath(paths, name));
+function prepareHeadroomSocket(fs12, ports, paths, supervisorPid) {
+  const unsupported = platformRefusal(ports.platform);
+  if (unsupported !== void 0) {
+    return { refused: unsupported };
+  }
+  const socketPath = headroomSocketPath(paths, supervisorPid);
+  const length = Buffer.byteLength(socketPath, "utf8");
+  if (length > UNIX_SOCKET_PATH_MAX_BYTES) {
+    return {
+      refused: `the headroom socket path ${socketPath} is ${String(length)} bytes, longer than the ${String(UNIX_SOCKET_PATH_MAX_BYTES)} a unix socket path can hold; set AGENT_SHIM_HOME to a shorter directory`
+    };
+  }
+  if (ports.lstat(paths.headroomSocketDir)?.kind === "symlink") {
+    return { refused: `the headroom socket directory ${paths.headroomSocketDir} is a symlink; it must be the real directory` };
+  }
+  fs12.mkdirPrivate(paths.headroomSocketDir);
+  const refusal = ownerOnlyRefusal("socket directory", paths.headroomSocketDir, ports.lstat(paths.headroomSocketDir), "dir", ports.currentUid());
+  return refusal === void 0 ? { socketPath } : { refused: refusal };
 }
-function readIdentity(paths, name) {
-  return readJson(identityJsonPath(paths, name), IdentitySchema);
+function pruneStaleHeadroomSockets(fs12, paths, isRunning) {
+  const removed = [];
+  for (const name of fs12.readdir(paths.headroomSocketDir)) {
+    const pid = HEADROOM_SOCKET_NAME.exec(name)?.[1];
+    if (pid === void 0 || isRunning(Number.parseInt(pid, 10))) {
+      continue;
+    }
+    fs12.removeRecursive(path13.join(paths.headroomSocketDir, name));
+    removed.push(name);
+  }
+  return removed;
 }
-function addIdentity(paths, name) {
-  if (identityExists(paths, name)) {
-    throw new IdentityAlreadyExistsError(name);
+
+// src/headroom/source.ts
+import { z as z10 } from "zod";
+var GIT_SPEC_RE = /git\+[^@\s]+(?:@([^\s#]+))?/;
+var COMMIT_SHA_RE = /^[0-9a-f]{40}$/i;
+var DirectUrlSchema = z10.object({ vcs_info: z10.object({ commit_id: z10.string() }) });
+function isMovingGitSource(spec) {
+  const match = GIT_SPEC_RE.exec(spec);
+  if (match === null) {
+    return false;
   }
-  const parsed = IdentitySchema.safeParse({ name, allowAmbientCredential: false });
-  if (!parsed.success) {
-    throw new InvalidIdentityNameError(name);
+  const ref = match[1];
+  return ref === void 0 || !COMMIT_SHA_RE.test(ref);
+}
+function pinnedGitCommit(spec) {
+  const ref = GIT_SPEC_RE.exec(spec)?.[1];
+  return ref !== void 0 && COMMIT_SHA_RE.test(ref) ? ref.toLowerCase() : void 0;
+}
+
+// src/headroom/supervisor.ts
+function resolveSupervisorConfig(configured) {
+  return {
+    source: configured.source ?? HEADROOM_DEFAULT_SOURCE,
+    idleShutdownMinutes: configured.idleShutdownMinutes ?? HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES,
+    settings: settingsOf(configured)
+  };
+}
+var HEADROOM_BACKOFF_BASE_MS = 500;
+var HEADROOM_BACKOFF_CAP_MS = 3e4;
+var HEADROOM_START_RETRY_BUDGET = 5;
+var HEADROOM_READY_TIMEOUT_MS = 15e3;
+var HEADROOM_POLL_MS = 1e3;
+var MS_PER_MINUTE2 = 6e4;
+function backoffForAttempt(attempt) {
+  return Math.min(HEADROOM_BACKOFF_CAP_MS, HEADROOM_BACKOFF_BASE_MS * 2 ** (attempt - 1));
+}
+function versionSatisfies(version, source) {
+  if (version === void 0) {
+    return false;
+  }
+  const specifier = /==|>=|<=|!=|>|<|~=/.exec(source);
+  if (specifier === null) {
+    return true;
+  }
+  const installed = parseVersion(version);
+  const wanted = parseVersion(source.slice(specifier.index + specifier[0].length));
+  if (installed === void 0 || wanted === void 0) {
+    return true;
+  }
+  const cmp = compareVersions(installed, wanted);
+  switch (specifier[0]) {
+    case "==":
+      return cmp === 0;
+    case "!=":
+      return cmp !== 0;
+    case ">=":
+      return cmp >= 0;
+    case "<=":
+      return cmp <= 0;
+    case ">":
+      return cmp > 0;
+    case "<":
+      return cmp < 0;
+    case "~=":
+      return compareVersions(installed.slice(0, Math.max(0, wanted.length - 1)), wanted.slice(0, Math.max(0, wanted.length - 1))) === 0 && cmp >= 0;
+    default:
+      return true;
   }
-  writeJsonAtomic(identityJsonPath(paths, name), parsed.data);
-  return parsed.data;
 }
-function useIdentity(paths, name) {
-  const pool = poolNameOf(name);
-  if (pool !== void 0) {
-    requirePool(paths, pool);
-  } else if (!identityExists(paths, name)) {
-    throw new IdentityNotFoundError(name);
+function parseVersion(input) {
+  const match = /(\d+)(\.\d+)*/.exec(input);
+  if (match === null) {
+    return void 0;
+  }
+  return match[0].split(".").map((part) => Number.parseInt(part, 10));
+}
+function compareVersions(a, b) {
+  for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
+    const left = a[index] ?? 0;
+    const right = b[index] ?? 0;
+    if (left !== right) {
+      return left - right;
+    }
+  }
+  return 0;
+}
+var HEADROOM_SUPERVISOR_STILL_RUNNING = -1;
+async function runSupervisor(initialConfig, ports, options = {}) {
+  const { fs: fs12, paths } = ports;
+  let config = initialConfig;
+  const previousState = readHeadroomState(fs12, paths.headroomStateFile);
+  if (previousState?.supervisorPid !== void 0 && previousState.supervisorPid !== ports.ownPid && ports.isRunning(previousState.supervisorPid)) {
+    ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: supervisor ${String(previousState.supervisorPid)} already owns the daemon; exiting`);
+    return 0;
+  }
+  let installedSource = previousState?.installedSource;
+  const ownsState = () => {
+    const owner = readHeadroomState(fs12, paths.headroomStateFile)?.supervisorPid;
+    return owner === void 0 || owner === ports.ownPid || !ports.isRunning(owner);
+  };
+  const writeOwnState = (state) => {
+    if (!ownsState()) {
+      return false;
+    }
+    writeHeadroomState(fs12, paths.headroomStateFile, state);
+    return true;
+  };
+  const fail = (message) => {
+    if (writeOwnState({ lastError: message })) {
+      fs12.removeRecursive(paths.headroomLockFile);
+    }
+    ports.log(`agent-shim headroom supervisor: ${message}`);
+    return 1;
+  };
+  const ensureInstalled = () => {
+    const version2 = ports.headroomVersion();
+    const versionOk = version2 !== void 0 && versionSatisfies(version2, config.source);
+    const pinned = pinnedGitCommit(config.source);
+    const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
+    if (versionOk && commitOk && (installedSource === void 0 || installedSource === config.source)) {
+      installedSource = config.source;
+      return true;
+    }
+    ports.log(`agent-shim headroom supervisor: installing headroom from ${config.source}`);
+    const result = ports.install(config.source);
+    if (!result.ok) {
+      return false;
+    }
+    installedSource = config.source;
+    return true;
+  };
+  const socket = prepareHeadroomSocket(fs12, ports.socketTrust, paths, ports.ownPid);
+  if (socket.refused !== void 0) {
+    return fail(socket.refused);
+  }
+  const { socketPath } = socket;
+  pruneStaleHeadroomSockets(fs12, paths, ports.isRunning);
+  if (!ensureInstalled()) {
+    return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+  }
+  const version = ports.headroomVersion() ?? "unknown";
+  writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
+  ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: managing headroom on allowlist [${allowlistOf(ports).join(", ")}]`);
+  const orphanPid = previousState?.headroomPid;
+  if (orphanPid !== void 0 && ports.isRunning(orphanPid)) {
+    ports.log(`agent-shim headroom supervisor: stopping daemon pid ${String(orphanPid)} left behind by the previous supervisor`);
+    ports.stopProcess(orphanPid);
+  }
+  let headroomPid;
+  let runningHash;
+  let runningSettingsHash;
+  let consecutiveFailures = 0;
+  let idleSince;
+  let superseded = false;
+  let ticks = 0;
+  for (; ; ) {
+    if (options.tickLimit !== void 0 && ticks >= options.tickLimit) {
+      return HEADROOM_SUPERVISOR_STILL_RUNNING;
+    }
+    ticks += 1;
+    config = ports.readConfig();
+    const settingsHash = hashSettings(config.settings);
+    const allowlist = allowlistOf(ports);
+    const allowlistHash = hashAllowlist(allowlist);
+    pruneDeadSessions(fs12, paths.headroomSessionsDir, ports.isRunning);
+    const ownsNow = ownsState();
+    if (!ownsNow && !superseded) {
+      ports.log("agent-shim headroom supervisor: another supervisor now owns the state file; serving this daemon's own sessions until they end");
+    }
+    superseded = !ownsNow;
+    const crashed = headroomPid !== void 0 && !ports.isRunning(headroomPid);
+    if (headroomPid === void 0 || crashed) {
+      if (crashed) {
+        ports.log(`agent-shim headroom supervisor: headroom pid ${String(headroomPid)} died`);
+        headroomPid = void 0;
+        runningHash = void 0;
+        runningSettingsHash = void 0;
+        writeOwnState({
+          supervisorPid: ports.ownPid,
+          version,
+          installedSource
+        });
+      }
+      if (consecutiveFailures >= HEADROOM_START_RETRY_BUDGET) {
+        return fail(`headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up`);
+      }
+      if (installedSource !== config.source && !ensureInstalled()) {
+        return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+      }
+      const pid = ports.spawnHeadroom(socketPath, allowlist, config.settings);
+      const ready = await waitUntilReady(ports, socketPath);
+      if (ready) {
+        consecutiveFailures = 0;
+        headroomPid = pid;
+        runningHash = allowlistHash;
+        runningSettingsHash = settingsHash;
+        const recorded = writeOwnState({
+          supervisorPid: ports.ownPid,
+          headroomPid: pid,
+          socketPath,
+          version,
+          allowlistHash,
+          settingsHash,
+          installedSource: config.source
+        });
+        if (recorded) {
+          fs12.removeRecursive(paths.headroomLockFile);
+        }
+        idleSince = void 0;
+        ports.log(`agent-shim headroom supervisor: headroom pid ${String(pid)} ready on unix socket ${socketPath}`);
+      } else {
+        ports.stopProcess(pid);
+        consecutiveFailures += 1;
+        ports.log(
+          `agent-shim headroom supervisor: headroom did not become ready on unix socket ${socketPath} (attempt ${String(consecutiveFailures)} of ${String(HEADROOM_START_RETRY_BUDGET)})`
+        );
+        await ports.sleep(backoffForAttempt(consecutiveFailures));
+        continue;
+      }
+    } else {
+      if (runningHash !== allowlistHash || runningSettingsHash !== settingsHash || installedSource !== config.source) {
+        if (sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid).length === 0) {
+          ports.log("agent-shim headroom supervisor: configuration drifted and no sessions are live; restarting headroom");
+          ports.stopProcess(headroomPid);
+          headroomPid = void 0;
+          runningHash = void 0;
+          runningSettingsHash = void 0;
+          continue;
+        }
+      }
+      const sessions = sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid);
+      if (sessions.length === 0) {
+        idleSince ??= ports.now();
+        const idleMs = ports.now() - idleSince;
+        if (idleMs >= config.idleShutdownMinutes * MS_PER_MINUTE2) {
+          ports.log(
+            `agent-shim headroom supervisor: no sessions for ${String(config.idleShutdownMinutes)} minute(s); stopping headroom and exiting`
+          );
+          ports.stopProcess(headroomPid);
+          writeOwnState({ version });
+          return 0;
+        }
+      } else {
+        idleSince = void 0;
+      }
+    }
+    await ports.sleep(HEADROOM_POLL_MS);
   }
-  writeTextAtomic(paths.activeIdentityFile, `${name}
-`);
 }
-function readActiveIdentity(paths) {
-  if (!fs5.existsSync(paths.activeIdentityFile)) {
-    return void 0;
-  }
-  const raw = fs5.readFileSync(paths.activeIdentityFile, "utf8").trim();
-  return raw === "" ? void 0 : raw;
+function currentHeadroomAllowlist(fs12, paths) {
+  const providers = readAllProviders(fs12, paths.providersDir).map((entry) => entry.provider);
+  return headroomAllowlist(headroomUpstreams(providers, frontDoorOrigin(readFrontDoorState(fs12, paths.frontdoorStateFile))));
 }
-function isIdentityDirectoryName(name) {
-  return !name.startsWith(".");
+function allowlistOf(ports) {
+  return currentHeadroomAllowlist(ports.fs, ports.paths);
 }
-function readIdentityForListing(paths, name) {
-  try {
-    return readIdentity(paths, name);
-  } catch (error) {
-    if (error instanceof ConfigValidationError || error instanceof SyntaxError) {
-      return { problem: error.message.replace(/\s*\n\s*/g, " ") };
+async function waitUntilReady(ports, socketPath) {
+  const deadline = ports.now() + HEADROOM_READY_TIMEOUT_MS;
+  for (; ; ) {
+    if (await ports.ready(socketPath)) {
+      return true;
     }
-    throw error;
+    if (ports.now() >= deadline) {
+      return false;
+    }
+    await ports.sleep(HEADROOM_POLL_MS);
   }
 }
-function listIdentities(paths) {
-  if (!fs5.existsSync(paths.identitiesDir)) {
-    return [];
-  }
-  const active = readActiveIdentity(paths);
-  const names = fs5.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort();
-  const result = [];
-  for (const name of names) {
-    const read = readIdentityForListing(paths, name);
-    if (read === void 0) {
+
+// src/launcher/guard.ts
+var AMBIENT_CREDENTIAL_VARS = [
+  "ANTHROPIC_API_KEY",
+  "ANTHROPIC_AUTH_TOKEN",
+  "CLAUDE_CODE_OAUTH_TOKEN",
+  "CLAUDE_CODE_USE_BEDROCK",
+  "CLAUDE_CODE_USE_VERTEX",
+  "CLAUDE_CODE_USE_FOUNDRY"
+];
+function detectAmbientCredential(env, injected) {
+  for (const variable of AMBIENT_CREDENTIAL_VARS) {
+    const value = env[variable];
+    if (value === void 0 || value === "") {
       continue;
     }
-    const isActive = name === active;
-    result.push("problem" in read ? { name, isActive, problem: read.problem } : { name, identity: read, isActive });
-  }
-  return result;
-}
-function setDefaultConfigProfile(paths, identityName, profileName) {
-  if (!identityExists(paths, identityName)) {
-    throw new IdentityNotFoundError(identityName);
+    if (injected?.variable === variable && value === injected.token) {
+      continue;
+    }
+    return { variable };
   }
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    defaultConfigProfile: profileName
-  });
+  return void 0;
 }
-function setAllowAmbientCredential(paths, identityName, allow) {
-  if (!identityExists(paths, identityName)) {
-    throw new IdentityNotFoundError(identityName);
-  }
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    allowAmbientCredential: allow
-  });
+function formatAmbientCredentialGuardMessage(variable, identityName) {
+  const identitySetCommand = identityName === void 0 ? "agent-shim identity set <name> --allow-ambient-credential" : `agent-shim identity set ${identityName} --allow-ambient-credential`;
+  return [
+    `error: ${variable} is set in the environment. This identity's isolated`,
+    "credential would be bypassed \u2014 every identity authenticates as this same key",
+    "while it's set. Unset it, or if this is deliberate, opt in per-launch with",
+    "AGENT_SHIM_ALLOW_AMBIENT_CREDENTIAL=1, or persistently for this identity with",
+    `\`${identitySetCommand}\`.`
+  ].join("\n");
 }
-function setIdentityCredential(paths, identityName, change) {
-  const existing = readIdentity(paths, identityName);
-  if (existing === void 0) {
-    throw new IdentityNotFoundError(identityName);
-  }
-  if (change === false) {
-    return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, { credential: void 0 });
+function evaluateAmbientCredentialGuard(params) {
+  const detected = detectAmbientCredential(params.env, params.injectedCredential);
+  if (detected === void 0) {
+    return { ok: true };
   }
-  const sources = change.sources ?? existing.credential?.sources;
-  if (sources === void 0) {
-    throw new UsageError(`Identity "${identityName}" has no credential yet: pass --credential to give it one before choosing its target.`);
+  if (params.allowAmbientCredentialOverride || params.allowAmbientCredential || params.providerSelected === true) {
+    return { ok: true };
   }
-  const target = change.target ?? existing.credential?.target;
-  const cache = change.cache === void 0 ? existing.credential?.cache : change.cache === false ? void 0 : change.cache;
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    credential: { sources: [...sources], ...target === void 0 ? {} : { target }, ...cache === void 0 ? {} : { cache } }
-  });
-}
-function belongsToIdentity(entry, name) {
-  return entry === name || entry === path15.basename(identityLockPath("", name)) || entry.startsWith(`.${name}.scratch.`) || entry.startsWith(`.${name}.previous.`);
+  return {
+    ok: false,
+    variable: detected.variable,
+    message: formatAmbientCredentialGuardMessage(detected.variable, params.identityName)
+  };
 }
-function removeIdentity(paths, name) {
-  if (!identityExists(paths, name)) {
-    throw new IdentityNotFoundError(name);
-  }
-  for (const entry of fs5.readdirSync(paths.identitiesDir)) {
-    if (belongsToIdentity(entry, name)) {
-      fs5.rmSync(path15.join(paths.identitiesDir, entry), { recursive: true, force: true });
-    }
-  }
-  if (readActiveIdentity(paths) === name) {
-    fs5.rmSync(paths.activeIdentityFile);
+
+// src/paths.ts
+import fs3 from "node:fs";
+import os from "node:os";
+import path14 from "node:path";
+function resolveAgentShimHome(env = process.env, home = os.homedir(), isDirectory = isExistingDirectory) {
+  const fromEnv = env.AGENT_SHIM_HOME;
+  if (fromEnv !== void 0 && fromEnv !== "") {
+    return fromEnv;
   }
+  const current = path14.join(home, HOME_DIRNAME);
+  const legacy = path14.join(home, LEGACY_HOME_DIRNAME);
+  return !isDirectory(current) && isDirectory(legacy) ? legacy : current;
 }
-
-// src/providersStore.ts
-import fs6 from "node:fs";
-import path16 from "node:path";
-
-// src/credentialCache.ts
-import { z as z7 } from "zod";
-var MS_PER_UNIT = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
-var CachedCredentialSchema = z7.strictObject({
-  token: z7.string().min(1),
-  fetchedAt: z7.number().int().nonnegative(),
-  source: CredentialSourceSchema
-});
-function effectiveStore(cache, platform) {
-  return cache.store ?? (platform === "darwin" ? "keychain" : "file");
+function isExistingDirectory(candidate) {
+  return fs3.statSync(candidate, { throwIfNoEntry: false })?.isDirectory() ?? false;
 }
-function ttlMs(cache) {
-  if (cache.ttl === void 0) {
-    return void 0;
-  }
-  const multiplier = MS_PER_UNIT[cache.ttl.slice(-1)];
-  if (multiplier === void 0) {
-    throw new Error(`credential cache ttl "${cache.ttl}" has no recognised unit`);
+function resolveClaudeHome() {
+  const fromEnv = process.env.AGENT_SHIM_CLAUDE_HOME;
+  if (fromEnv !== void 0 && fromEnv !== "") {
+    return fromEnv;
   }
-  return Number(cache.ttl.slice(0, -1)) * multiplier;
+  return path14.join(os.homedir(), ".claude");
 }
-function isFresh(entry, cache, now) {
-  const limit = ttlMs(cache);
-  if (entry.fetchedAt > now) {
-    return false;
-  }
-  return limit === void 0 || now - entry.fetchedAt < limit;
+function buildLayoutPaths(root) {
+  return {
+    root,
+    identitiesDir: path14.join(root, "identities"),
+    configProfilesDir: path14.join(root, "config-profiles"),
+    providersDir: path14.join(root, "providers"),
+    directoryRulesFile: path14.join(root, "directory-rules.json"),
+    activeIdentityFile: path14.join(root, "active-identity"),
+    globalConfigFile: path14.join(root, "config.json"),
+    categoriesLocalFile: path14.join(root, "categories.local.json"),
+    claudeShimFile: path14.join(root, "claude-shim.json"),
+    headroomDir: path14.join(root, "headroom"),
+    headroomStateFile: path14.join(root, "headroom", `state.v${String(HEADROOM_STATE_SCHEMA_VERSION)}.json`),
+    headroomSocketDir: path14.join(root, "headroom", "run"),
+    headroomLockFile: path14.join(root, "headroom", "start.lock"),
+    headroomSessionsDir: path14.join(root, "headroom", "sessions"),
+    logsDir: path14.join(root, "logs"),
+    headroomLogPath: path14.join(root, "logs", "headroom.log"),
+    frontdoorDir: path14.join(root, "frontdoor"),
+    frontdoorCaDir: path14.join(root, "frontdoor", "ca"),
+    frontdoorCaCertFile: path14.join(root, "frontdoor", "ca", "ca.pem"),
+    frontdoorCaKeyFile: path14.join(root, "frontdoor", "ca", "ca.key"),
+    frontdoorCaBundlesDir: path14.join(root, "frontdoor", "ca", "bundles"),
+    frontdoorStateFile: path14.join(root, "frontdoor", "state.json"),
+    frontdoorLockFile: path14.join(root, "frontdoor", "start.lock"),
+    frontdoorControlTokenFile: path14.join(root, "frontdoor", "control-token"),
+    frontdoorSessionsDir: path14.join(root, "frontdoor", "sessions"),
+    frontdoorLogPath: path14.join(root, "logs", "frontdoor.log"),
+    usageDir: path14.join(root, "usage"),
+    usageLogDir: path14.join(root, "usage", "log"),
+    usageSnapshotsDir: path14.join(root, "usage", "snapshots"),
+    usagePicksFile: path14.join(root, "usage", "picks.json")
+  };
+}
+function resolveLayoutPaths() {
+  return buildLayoutPaths(resolveAgentShimHome());
 }
 
-// src/credential.ts
-var CREDENTIAL_UNAVAILABLE_EXIT = 64;
-var CREDENTIAL_COMMAND_TIMEOUT_MS = 1e4;
-var CREDENTIAL_INTERACTIVE_TIMEOUT_MS = 12e4;
-var GROUP_OTHER_PERMISSION_BITS = 63;
-var PERMISSION_BITS = 511;
-var OCTAL_RADIX2 = 8;
-function commandArgv(source) {
-  if ("command" in source) {
-    return source.command;
-  }
-  if ("op" in source) {
-    return ["op", "read", source.op];
+// src/identityStore.ts
+import fs5 from "node:fs";
+import path16 from "node:path";
+
+// src/configProfilesStore.ts
+import fs4 from "node:fs";
+import path15 from "node:path";
+var ProfileNotFoundError = class extends CliError {
+  constructor(profileName) {
+    super(`No configuration profile named "${profileName}". Run \`agent-shim profile add ${profileName}\` first.`);
+    this.profileName = profileName;
+    this.name = "ProfileNotFoundError";
   }
-  const account = source.keychain.account;
-  return ["security", "find-generic-password", "-s", source.keychain.service, ...account === void 0 ? [] : ["-a", account], "-w"];
-}
-function isInteractiveSource(source, env) {
-  if ("command" in source || "keychain" in source) {
-    return source.interactive ?? false;
+  profileName;
+};
+var ProfileAlreadyExistsError = class extends CliError {
+  constructor(profileName) {
+    super(`A configuration profile named "${profileName}" already exists.`);
+    this.profileName = profileName;
+    this.name = "ProfileAlreadyExistsError";
   }
-  if ("op" in source) {
-    return source.interactive ?? (env.OP_SERVICE_ACCOUNT_TOKEN ?? "") === "";
+  profileName;
+};
+var InvalidCategoryNameError = class extends CliError {
+  constructor(categoryName) {
+    super(`"${categoryName}" is not a category a configuration profile may toggle (runtime, history, knowledge, settings).`);
+    this.categoryName = categoryName;
+    this.name = "InvalidCategoryNameError";
   }
-  return false;
+  categoryName;
+};
+function profileJsonPath(paths, name) {
+  return path15.join(paths.configProfilesDir, `${name}.json`);
 }
-function summariseSource(source) {
-  if ("env" in source) {
-    return { kind: "env", variable: source.env };
+function profileExists(paths, name) {
+  return fs4.existsSync(profileJsonPath(paths, name));
+}
+function requireProfileExists(paths, name) {
+  if (!profileExists(paths, name)) {
+    throw new ProfileNotFoundError(name);
   }
-  if ("file" in source) {
-    return { kind: "file", path: source.file };
+}
+function readProfile(paths, name) {
+  return readJson(profileJsonPath(paths, name), ConfigProfileSchema);
+}
+function createProfile(paths, name, extendsList, description) {
+  if (profileExists(paths, name)) {
+    throw new ProfileAlreadyExistsError(name);
   }
-  if ("command" in source) {
-    return { kind: "command", program: source.command[0] };
+  const filePath = profileJsonPath(paths, name);
+  const parsed = ConfigProfileSchema.safeParse({
+    ...description === void 0 ? {} : { description },
+    ...extendsList !== void 0 && extendsList.length > 0 ? { extends: [...extendsList] } : {}
+  });
+  if (!parsed.success) {
+    throw new ConfigValidationError(filePath, parsed.error.issues);
   }
-  if ("op" in source) {
-    return { kind: "op", reference: source.op };
+  writeJsonAtomic(filePath, parsed.data);
+  return parsed.data;
+}
+function listProfiles(paths) {
+  if (!fs4.existsSync(paths.configProfilesDir)) {
+    return [];
   }
-  if ("keychain" in source) {
-    return {
-      kind: "keychain",
-      service: source.keychain.service,
-      ...source.keychain.account === void 0 ? {} : { account: source.keychain.account }
-    };
+  const names = fs4.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort();
+  const result = [];
+  for (const name of names) {
+    const profile = readProfile(paths, name);
+    if (profile !== void 0) {
+      result.push({ name, profile });
+    }
   }
-  return { kind: "literal" };
+  return result;
 }
-function summariseCredential(credential) {
-  return {
-    target: credential.target ?? "bearer",
-    sources: credential.sources.map(summariseSource),
-    ...credential.cache === void 0 ? {} : { cache: credential.cache }
-  };
+function globalConfigPath(paths) {
+  return paths.globalConfigFile;
 }
-function formatSourceSummary(summary) {
-  switch (summary.kind) {
-    case "env":
-      return `env ${summary.variable}`;
-    case "file":
-      return `file ${summary.path}`;
-    case "command":
-      return `command ${summary.program}`;
-    case "op":
-      return `op ${summary.reference}`;
-    case "keychain":
-      return `keychain ${summary.service}${summary.account === void 0 ? "" : ` (account ${summary.account})`}`;
-    case "literal":
-      return "literal (non-secret placeholder)";
-    default:
-      return summary;
+function readGlobalConfig(paths) {
+  return readJson(globalConfigPath(paths), GlobalConfigSchema);
+}
+function setGlobalDefaultProfile(paths, name) {
+  return applyPatch(
+    globalConfigPath(paths),
+    GlobalConfigSchema,
+    { defaultConfigProfile: name },
+    { defaults: {} }
+  );
+}
+function validateCategoryNames(patch) {
+  for (const key of Object.keys(patch)) {
+    if (!isOverridableCategory(key)) {
+      throw new InvalidCategoryNameError(key);
+    }
   }
 }
-function describeSource(source) {
-  return formatSourceSummary(summariseSource(source));
+function setProfileCategories(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const expandedPatch = expandAllCategoryKey(patch);
+  validateCategoryNames(expandedPatch);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedCategories = { ...existing.categories, ...expandedPatch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { categories: mergedCategories });
 }
-function formatCredentialSummary(summary) {
-  const cache = summary.cache === void 0 ? "" : `, cached ${summary.cache.ttl === void 0 ? "with no expiry" : `for ${summary.cache.ttl}`}${summary.cache.store === void 0 ? "" : ` in the ${summary.cache.store} store`}`;
-  return `${summary.target} from ${summary.sources.map(formatSourceSummary).join(", then ")}${cache}`;
+function setProfileEntries(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedEntries = { ...existing.entries, ...patch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { entries: mergedEntries });
 }
-function describeCredential(credential) {
-  return formatCredentialSummary(summariseCredential(credential));
+function setProfileLaunchFlags(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedLaunch = { ...existing.launch, ...patch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
+    // Read as `unknown` so the check sees the `undefined` a cleared key holds, which LaunchFlags' optional properties hide from the value type.
+    launch: Object.values(mergedLaunch).every((value) => value === void 0) ? void 0 : mergedLaunch
+  });
 }
-function trySource(source, params) {
-  const none = (reason, warn = false) => ({ ok: false, reason, warn });
-  if ("env" in source) {
-    const value = params.env[source.env];
-    return value === void 0 || value === "" ? none("is unset or empty") : { ok: true, token: value };
-  }
-  if ("literal" in source) {
-    return { ok: true, token: source.literal };
-  }
-  if ("file" in source) {
-    const read = params.port.readSecretFile(source.file);
-    if (!read.found) {
-      return none("does not exist");
-    }
-    if (read.mode !== void 0 && (read.mode & GROUP_OTHER_PERMISSION_BITS) !== 0) {
-      return none(
-        `is readable or writable by group or others (mode ${(read.mode & PERMISSION_BITS).toString(OCTAL_RADIX2)}); run \`chmod 600 ${source.file}\``,
-        true
-      );
-    }
-    const token2 = read.content.trim();
-    return token2 === "" ? none("is empty") : { ok: true, token: token2 };
+function setProfileMetadata(paths, name, patch) {
+  requireProfileExists(paths, name);
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
+    ...patch.extends === void 0 ? {} : { extends: patch.extends.length === 0 ? void 0 : [...patch.extends] },
+    ...patch.description === void 0 ? {} : { description: patch.description === false ? void 0 : patch.description }
+  });
+}
+function removeProfile(paths, name) {
+  requireProfileExists(paths, name);
+  fs4.rmSync(profileJsonPath(paths, name));
+}
+
+// src/poolStore.ts
+var PoolNotFoundError = class extends CliError {
+  constructor(poolName) {
+    super(`No pool named "${poolName}". Run \`agent-shim pool add ${poolName} --identity <name>...\` first.`);
+    this.poolName = poolName;
+    this.name = "PoolNotFoundError";
   }
-  const argv = commandArgv(source);
-  const interactive = isInteractiveSource(source, params.env);
-  if (interactive && !params.port.personPresent()) {
-    return none("needs a person to approve it, but there is no terminal or desktop session");
+  poolName;
+};
+var PoolAlreadyExistsError = class extends CliError {
+  constructor(poolName) {
+    super(`A pool named "${poolName}" already exists. Use \`agent-shim pool set ${poolName}\` to change its members.`);
+    this.poolName = poolName;
+    this.name = "PoolAlreadyExistsError";
   }
-  const timeoutMs = source.timeoutMs ?? (interactive ? CREDENTIAL_INTERACTIVE_TIMEOUT_MS : CREDENTIAL_COMMAND_TIMEOUT_MS);
-  const result = params.port.runCommand(argv, { timeoutMs, interactive });
-  if (result.timedOut) {
-    return none(`timed out after ${String(timeoutMs)}ms`);
+  poolName;
+};
+var InvalidPoolNameError = class extends CliError {
+  constructor(attemptedName) {
+    super(`"${attemptedName}" is not a valid pool name: it must start with a letter or number and may then contain letters, numbers, dots, hyphens and underscores.`);
+    this.attemptedName = attemptedName;
+    this.name = "InvalidPoolNameError";
   }
-  if (result.status !== 0) {
-    const stderr = result.stderr.trim();
-    const outcome = result.status === null ? "could not be run or was killed by a signal" : `exited with status ${String(result.status)}`;
-    return none(`${outcome}${stderr === "" ? "" : `: ${stderr}`}`);
+  attemptedName;
+};
+function readPools(paths) {
+  return readGlobalConfig(paths)?.pools ?? {};
+}
+function requirePool(paths, name) {
+  const pool = readPools(paths)[name];
+  if (pool === void 0) {
+    throw new PoolNotFoundError(name);
   }
-  const token = result.stdout.trim();
-  return token === "" ? none("printed no token") : { ok: true, token };
+  return pool;
 }
-function warmCommandFor(subject) {
-  const [kind, name] = subject.split(" ");
-  return kind === "provider" ? `agent-shim credential warm --provider ${name ?? ""}` : `agent-shim credential warm ${name ?? ""}`;
+function writePools(paths, pools) {
+  applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
 }
-function resolveCredential(params) {
-  const target = params.credential.target ?? "bearer";
-  const cacheBlock = params.credential.cache;
-  const cache = cacheBlock === void 0 ? void 0 : params.port.cache;
-  const store = cacheBlock === void 0 || cache === void 0 ? void 0 : effectiveStore(cacheBlock, cache.platform);
-  if (cacheBlock !== void 0 && cache !== void 0 && store !== void 0 && params.refresh !== true) {
-    const entry = cache.port.read(store, params.subject);
-    if (entry !== void 0 && isFresh(entry, cacheBlock, cache.now())) {
-      return { ok: true, credential: { target, token: entry.token, source: entry.source, warnings: [], cachedAt: entry.fetchedAt } };
-    }
+function addPool(paths, name, identities) {
+  if (!PoolNameSchema.safeParse(name).success) {
+    throw new InvalidPoolNameError(name);
   }
-  const attempts = [];
-  const warnings = [];
-  for (const source of params.credential.sources) {
-    const outcome = trySource(source, params);
-    if (outcome.ok) {
-      if (cache !== void 0 && store !== void 0) {
-        cache.port.write(store, params.subject, { token: outcome.token, fetchedAt: cache.now(), source });
-      }
-      return { ok: true, credential: { target, token: outcome.token, source, warnings } };
-    }
-    const line = `${describeSource(source)} ${outcome.reason}`;
-    attempts.push(line);
-    if (outcome.warn) {
-      warnings.push(`agent-shim: ${params.subject}: skipped ${line}`);
-    }
+  const pools = readPools(paths);
+  if (pools[name] !== void 0) {
+    throw new PoolAlreadyExistsError(name);
   }
-  const hint = cacheBlock === void 0 ? "" : `; fill the cache from a terminal with \`${warmCommandFor(params.subject)}\``;
-  return { ok: false, message: `agent-shim: ${params.subject} has no usable credential: ${attempts.join("; ")}${hint}` };
+  const pool = { identities: [...identities] };
+  writePools(paths, { ...pools, [name]: pool });
+  return pool;
 }
-function credentialVariables(target, token) {
-  return {
-    ANTHROPIC_AUTH_TOKEN: target === "bearer" ? token : void 0,
-    ANTHROPIC_API_KEY: target === "apiKey" ? token : void 0,
-    CLAUDE_CODE_OAUTH_TOKEN: target === "oauthToken" ? token : void 0
-  };
+function setPool(paths, name, identities) {
+  requirePool(paths, name);
+  const pool = { identities: [...identities] };
+  writePools(paths, { ...readPools(paths), [name]: pool });
+  return pool;
 }
-
-// src/providersStore.ts
-var ProviderNotFoundError = class extends CliError {
+function removePool(paths, name) {
+  requirePool(paths, name);
+  const remaining = Object.fromEntries(Object.entries(readPools(paths)).filter(([existing]) => existing !== name));
+  writePools(paths, remaining);
+}
+
+// src/identityStore.ts
+var IdentityNotFoundError = class extends CliError {
   constructor(name) {
-    super(`No provider named "${name}". Run \`agent-shim provider add ${name}\` first.`);
+    super(`No identity named "${name}". Run \`agent-shim identity add ${name}\` first.`);
     this.name = name;
-    this.name = "ProviderNotFoundError";
+    this.name = "IdentityNotFoundError";
   }
   name;
 };
-var ProviderAlreadyExistsError = class extends CliError {
-  constructor(providerName) {
-    super(`A provider named "${providerName}" already exists.`);
-    this.providerName = providerName;
-    this.name = "ProviderAlreadyExistsError";
+var IdentityAlreadyExistsError = class extends CliError {
+  constructor(identityName) {
+    super(`An identity named "${identityName}" already exists.`);
+    this.identityName = identityName;
+    this.name = "IdentityAlreadyExistsError";
   }
-  providerName;
+  identityName;
 };
-var InvalidProviderNameError = class extends CliError {
+var InvalidIdentityNameError = class extends CliError {
   constructor(attemptedName) {
     super(
-      `"${attemptedName}" is not a valid provider name. Provider names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
+      `"${attemptedName}" is not a valid identity name \u2014 identity names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
     );
     this.attemptedName = attemptedName;
-    this.name = "InvalidProviderNameError";
+    this.name = "InvalidIdentityNameError";
   }
   attemptedName;
 };
-var PROVIDER_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._@-]*$/;
-function providerJsonPath(paths, name) {
-  return path16.join(paths.providersDir, `${name}.json`);
-}
-function providerExists(paths, name) {
-  return fs6.existsSync(providerJsonPath(paths, name));
+function identityJsonPath(paths, name) {
+  return path16.join(paths.identitiesDir, name, "identity.json");
 }
-var LEGACY_PROVIDER_FIELDS = ["tokenEnv", "tokenCommand", "authScheme"];
-var LEGACY_ENV_CREDENTIAL_KEYS = Object.values(CREDENTIAL_TARGET_VARS);
-var LEGACY_LITERAL_PLACEHOLDER = "<the value of env.ANTHROPIC_AUTH_TOKEN>";
-function isRecord3(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function identityExists(paths, name) {
+  return fs5.existsSync(identityJsonPath(paths, name));
 }
-function legacyProviderConversion(raw) {
-  if (!isRecord3(raw) || "credential" in raw) {
-    return void 0;
-  }
-  const env = isRecord3(raw.env) ? raw.env : void 0;
-  const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
-  const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
-  if (fields.length === 0) {
-    return void 0;
-  }
-  const sources = [];
-  if (typeof raw.tokenEnv === "string") {
-    sources.push({ env: raw.tokenEnv });
-  }
-  if (Array.isArray(raw.tokenCommand)) {
-    sources.push({ command: raw.tokenCommand });
-  }
-  if (typeof env?.ANTHROPIC_AUTH_TOKEN === "string" && env.ANTHROPIC_AUTH_TOKEN !== "") {
-    sources.push({ literal: LEGACY_LITERAL_PLACEHOLDER });
-  }
-  const remainingEnv = env === void 0 ? void 0 : Object.fromEntries(Object.entries(env).filter(([key]) => !LEGACY_ENV_CREDENTIAL_KEYS.includes(key)));
-  const replacedKeys = [...LEGACY_PROVIDER_FIELDS, "env"];
-  const rest = Object.fromEntries(Object.entries(raw).filter(([key]) => !replacedKeys.includes(key)));
-  return {
-    fields,
-    replacement: {
-      ...rest,
-      credential: { sources, ...raw.authScheme === "apiKey" ? { target: "apiKey" } : {} },
-      ...remainingEnv === void 0 || Object.keys(remainingEnv).length === 0 ? {} : { env: remainingEnv }
-    }
-  };
+function readIdentity(paths, name) {
+  return readJson(identityJsonPath(paths, name), IdentitySchema);
 }
-var LegacyProviderFileError = class extends CliError {
-  constructor(filePath, conversion) {
-    super(
-      `${filePath} uses ${conversion.fields.join(", ")}, which a credential block replaced. Rewrite it as:
-` + JSON.stringify(conversion.replacement, null, 2)
-    );
-    this.filePath = filePath;
-    this.conversion = conversion;
-    this.name = "LegacyProviderFileError";
-  }
-  filePath;
-  conversion;
-};
-function parseProviderFile(filePath, raw) {
-  const conversion = legacyProviderConversion(raw);
-  if (conversion !== void 0) {
-    throw new LegacyProviderFileError(filePath, conversion);
+function addIdentity(paths, name) {
+  if (identityExists(paths, name)) {
+    throw new IdentityAlreadyExistsError(name);
   }
-  const parsed = ProviderSchema.safeParse(raw);
+  const parsed = IdentitySchema.safeParse({ name, allowAmbientCredential: false });
   if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+    throw new InvalidIdentityNameError(name);
   }
+  writeJsonAtomic(identityJsonPath(paths, name), parsed.data);
   return parsed.data;
 }
-function readProvider(paths, name) {
-  const filePath = providerJsonPath(paths, name);
-  if (!fs6.existsSync(filePath)) {
+function useIdentity(paths, name) {
+  const pool = poolNameOf(name);
+  if (pool !== void 0) {
+    requirePool(paths, pool);
+  } else if (!identityExists(paths, name)) {
+    throw new IdentityNotFoundError(name);
+  }
+  writeTextAtomic(paths.activeIdentityFile, `${name}
+`);
+}
+function readActiveIdentity(paths) {
+  if (!fs5.existsSync(paths.activeIdentityFile)) {
     return void 0;
   }
-  const raw = JSON.parse(fs6.readFileSync(filePath, "utf8"));
-  return parseProviderFile(filePath, raw);
+  const raw = fs5.readFileSync(paths.activeIdentityFile, "utf8").trim();
+  return raw === "" ? void 0 : raw;
 }
-function loadProvider(providersDir, name, port) {
-  const filePath = path16.join(providersDir, `${name}.json`);
-  const raw = port.readConfigFile(filePath);
-  return raw === void 0 ? void 0 : parseProviderFile(filePath, raw);
+function isIdentityDirectoryName(name) {
+  return !name.startsWith(".");
 }
-function listProviders(paths) {
-  const names = listProviderNames(
-    (dir) => fs6.readdirSync(dir),
-    paths.providersDir
-  );
+function readIdentityForListing(paths, name) {
+  try {
+    return readIdentity(paths, name);
+  } catch (error) {
+    if (error instanceof ConfigValidationError || error instanceof SyntaxError) {
+      return { problem: error.message.replace(/\s*\n\s*/g, " ") };
+    }
+    throw error;
+  }
+}
+function listIdentities(paths) {
+  if (!fs5.existsSync(paths.identitiesDir)) {
+    return [];
+  }
+  const active = readActiveIdentity(paths);
+  const names = fs5.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort();
   const result = [];
   for (const name of names) {
-    let provider;
-    try {
-      provider = readProvider(paths, name);
-    } catch (error) {
-      if (!(error instanceof ConfigValidationError || error instanceof LegacyProviderFileError)) {
-        throw error;
-      }
-      console.error(`agent-shim: providers/${name}.json is invalid and was skipped: ${error.message}`);
+    const read = readIdentityForListing(paths, name);
+    if (read === void 0) {
       continue;
     }
-    if (provider !== void 0) {
-      result.push({ name, provider });
-    }
+    const isActive = name === active;
+    result.push("problem" in read ? { name, isActive, problem: read.problem } : { name, identity: read, isActive });
   }
   return result;
 }
-function listProviderNames(readdir, providersDir) {
-  let entries;
-  try {
-    entries = readdir(providersDir);
-  } catch {
-    return [];
-  }
-  return entries.filter((entry) => entry.endsWith(".json")).map((entry) => entry.slice(0, -".json".length)).sort();
-}
-function describeProviderEndpoint(provider) {
-  return isCodexProvider(provider) ? "codex translation daemon" : provider.baseUrl;
-}
-var ProviderKindMismatchError = class extends UsageError {
-  constructor(message) {
-    super(message);
-    this.name = "ProviderKindMismatchError";
+function setDefaultConfigProfile(paths, identityName, profileName) {
+  if (!identityExists(paths, identityName)) {
+    throw new IdentityNotFoundError(identityName);
   }
-};
-function isEmptyCodexConfig(config) {
-  return config === void 0 || config.defaultModel === void 0 && config.effort === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    defaultConfigProfile: profileName
+  });
 }
-function addProvider(paths, name, input) {
-  if (providerExists(paths, name)) {
-    throw new ProviderAlreadyExistsError(name);
-  }
-  if (!PROVIDER_NAME_RE.test(name)) {
-    throw new InvalidProviderNameError(name);
-  }
-  const kind = input.kind ?? "http";
-  if (kind === "codex" && input.baseUrl !== void 0) {
-    throw new ProviderKindMismatchError("A codex provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
-  }
-  if (kind === "http" && input.baseUrl === void 0) {
-    throw new ProviderKindMismatchError("An http provider needs --base-url.");
-  }
-  if (kind === "http" && !isEmptyCodexConfig(input.codex)) {
-    throw new ProviderKindMismatchError("Codex settings apply only to a codex provider (--kind codex).");
-  }
-  const shared = {
-    displayName: input.displayName,
-    credential: { sources: input.sources, ...input.target === void 0 ? {} : { target: input.target } },
-    ...input.env === void 0 || Object.keys(input.env).length === 0 ? {} : { env: input.env }
-  };
-  const parsed = ProviderSchema.safeParse(
-    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input.codex) ? {} : { codex: input.codex } } : { ...shared, baseUrl: input.baseUrl }
-  );
-  if (!parsed.success) {
-    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+function setAllowAmbientCredential(paths, identityName, allow) {
+  if (!identityExists(paths, identityName)) {
+    throw new IdentityNotFoundError(identityName);
   }
-  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
-  return parsed.data;
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    allowAmbientCredential: allow
+  });
 }
-function updateProvider(paths, name, input) {
-  const existing = readProvider(paths, name);
+function setIdentityCredential(paths, identityName, change) {
+  const existing = readIdentity(paths, identityName);
   if (existing === void 0) {
-    throw new ProviderNotFoundError(name);
-  }
-  const unset = new Set(input.unsetEnv);
-  const env = Object.fromEntries(Object.entries({ ...existing.env, ...input.env }).filter(([key]) => !unset.has(key)));
-  const target = input.target ?? existing.credential.target;
-  const cache = input.cache === void 0 ? existing.credential.cache : input.cache === false ? void 0 : input.cache;
-  if (isCodexProvider(existing) && input.baseUrl !== void 0) {
-    throw new ProviderKindMismatchError(`Provider "${name}" is a codex provider, which has no base URL.`);
-  }
-  if (!isCodexProvider(existing) && !isEmptyCodexConfig(input.codex)) {
-    throw new ProviderKindMismatchError(`Provider "${name}" is an http provider; codex settings apply only to a codex provider.`);
-  }
-  const shared = {
-    ...input.displayName === void 0 ? {} : { displayName: input.displayName },
-    credential: {
-      sources: input.sources ?? existing.credential.sources,
-      ...target === void 0 ? {} : { target },
-      ...cache === void 0 ? {} : { cache }
-    },
-    env: Object.keys(env).length === 0 ? void 0 : env
-  };
-  let candidate;
-  if (isCodexProvider(existing)) {
-    const codex = {
-      ...existing.codex,
-      ...input.codex,
-      ...existing.codex?.models === void 0 && input.codex?.models === void 0 ? {} : { models: { ...existing.codex?.models, ...input.codex?.models } }
-    };
-    candidate = { ...existing, ...shared, codex: isEmptyCodexConfig(codex) ? void 0 : codex };
-  } else {
-    candidate = { ...existing, ...shared, ...input.baseUrl === void 0 ? {} : { baseUrl: input.baseUrl } };
+    throw new IdentityNotFoundError(identityName);
   }
-  const parsed = ProviderSchema.safeParse(candidate);
-  if (!parsed.success) {
-    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+  if (change === false) {
+    return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, { credential: void 0 });
   }
-  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
-  return parsed.data;
-}
-function removeProvider(paths, name) {
-  if (!providerExists(paths, name)) {
-    throw new ProviderNotFoundError(name);
+  const sources = change.sources ?? existing.credential?.sources;
+  if (sources === void 0) {
+    throw new UsageError(`Identity "${identityName}" has no credential yet: pass --credential to give it one before choosing its target.`);
   }
-  fs6.rmSync(providerJsonPath(paths, name));
+  const target = change.target ?? existing.credential?.target;
+  const cache = change.cache === void 0 ? existing.credential?.cache : change.cache === false ? void 0 : change.cache;
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    credential: { sources: [...sources], ...target === void 0 ? {} : { target }, ...cache === void 0 ? {} : { cache } }
+  });
 }
-function cascadeProviderName(cascade) {
-  let name;
-  for (const layer of assembleCascade(cascade).layers) {
-    if (layer.launch?.provider !== void 0) {
-      name = layer.launch.provider;
+function belongsToIdentity(entry, name) {
+  return entry === name || entry === path16.basename(identityLockPath("", name)) || entry.startsWith(`.${name}.scratch.`) || entry.startsWith(`.${name}.previous.`);
+}
+function removeIdentity(paths, name) {
+  if (!identityExists(paths, name)) {
+    throw new IdentityNotFoundError(name);
+  }
+  for (const entry of fs5.readdirSync(paths.identitiesDir)) {
+    if (belongsToIdentity(entry, name)) {
+      fs5.rmSync(path16.join(paths.identitiesDir, entry), { recursive: true, force: true });
     }
   }
-  return name;
+  if (readActiveIdentity(paths) === name) {
+    fs5.rmSync(paths.activeIdentityFile);
+  }
 }
-function resolveProvider(params) {
-  const cliName = params.cliProvider !== void 0 && params.cliProvider !== "" ? params.cliProvider : void 0;
-  const name = cliName ?? (params.cascade === void 0 ? void 0 : cascadeProviderName(params.cascade));
-  if (name === void 0) {
+
+// src/providersStore.ts
+import fs6 from "node:fs";
+import path17 from "node:path";
+
+// src/credentialCache.ts
+import { z as z11 } from "zod";
+var MS_PER_UNIT = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
+var CachedCredentialSchema = z11.strictObject({
+  token: z11.string().min(1),
+  fetchedAt: z11.number().int().nonnegative(),
+  source: CredentialSourceSchema
+});
+function effectiveStore(cache, platform) {
+  return cache.store ?? (platform === "darwin" ? "keychain" : "file");
+}
+function ttlMs(cache) {
+  if (cache.ttl === void 0) {
     return void 0;
   }
-  const definition = loadProvider(params.paths.providersDir, name, params.port);
-  if (definition === void 0) {
-    const known = listProviderNames(params.port.readdir, params.paths.providersDir);
-    return {
-      ok: false,
-      status: 1,
-      message: `agent-shim: no provider named "${name}". ` + (known.length > 0 ? `Known providers: ${known.join(", ")}.` : "No providers are defined yet; run `agent-shim provider add`.")
-    };
+  const multiplier = MS_PER_UNIT[cache.ttl.slice(-1)];
+  if (multiplier === void 0) {
+    throw new Error(`credential cache ttl "${cache.ttl}" has no recognised unit`);
   }
-  if (params.credentials === void 0) {
-    return { ok: false, status: 1, message: `agent-shim: provider ${name} needs its credential resolved, but this launcher has no credential port wired` };
+  return Number(cache.ttl.slice(0, -1)) * multiplier;
+}
+function isFresh(entry, cache, now) {
+  const limit = ttlMs(cache);
+  if (entry.fetchedAt > now) {
+    return false;
   }
-  const resolution = resolveCredential({ credential: definition.credential, env: params.env, port: params.credentials, subject: `provider ${name}` });
-  if (!resolution.ok) {
-    return { ok: false, status: CREDENTIAL_UNAVAILABLE_EXIT, message: resolution.message };
+  return limit === void 0 || now - entry.fetchedAt < limit;
+}
+function cacheAgeMs(entry, now) {
+  return Math.max(0, now - entry.fetchedAt);
+}
+function describeCachedCredential(params) {
+  const store = effectiveStore(params.cache, params.platform);
+  let entry;
+  try {
+    entry = params.port.read(store, params.owner);
+  } catch (error) {
+    return { store, status: "unreadable", reason: error instanceof Error ? error.message : String(error) };
   }
-  return { ok: true, provider: { name, definition, credential: resolution.credential }, warnings: resolution.credential.warnings };
+  if (entry === void 0) {
+    return { store, status: "empty" };
+  }
+  const limit = ttlMs(params.cache);
+  const ageMs = cacheAgeMs(entry, params.nowMs);
+  return {
+    store,
+    status: isFresh(entry, params.cache, params.nowMs) ? "fresh" : "expired",
+    ageMs,
+    ...limit === void 0 ? {} : { expiresInMs: limit - ageMs }
+  };
 }
-
-// src/directoryRulesStore.ts
-var DirectoryRuleNotFoundError = class extends CliError {
-  constructor(rulePath) {
-    super(`No directory rule found for path "${rulePath}".`);
-    this.rulePath = rulePath;
-    this.name = "DirectoryRuleNotFoundError";
+function formatCachedCredentialState(state) {
+  if (state.status === "empty") {
+    return `no cached entry in the ${state.store} store yet`;
   }
-  rulePath;
-};
-var DirectoryRuleMissingTargetError = class extends CliError {
-  constructor() {
-    super("A directory rule must set at least one of --config-profile or --identity.");
-    this.name = "DirectoryRuleMissingTargetError";
+  if (state.status === "unreadable") {
+    return `the ${state.store} store cannot be read here: ${state.reason}`;
   }
-};
-var DirectoryRuleAlreadyExistsError = class extends CliError {
-  constructor(rulePath) {
-    super(`A directory rule for path "${rulePath}" already exists. Use \`agent-shim rule set\` to change it.`);
-    this.rulePath = rulePath;
-    this.name = "DirectoryRuleAlreadyExistsError";
+  if (state.status === "expired" && (state.expiresInMs === void 0 || state.expiresInMs > 0)) {
+    return "cached with a timestamp in the future, treated as expired";
   }
-  rulePath;
-};
-function readDirectoryRules(paths) {
-  return readJson(paths.directoryRulesFile, DirectoryRulesSchema) ?? { rules: [] };
-}
-function writeDirectoryRules(paths, rules) {
-  const parsed = DirectoryRulesSchema.safeParse(rules);
-  if (!parsed.success) {
-    throw new ConfigValidationError(paths.directoryRulesFile, parsed.error.issues);
+  const age = `cached ${formatAge(state.ageMs)} ago`;
+  if (state.expiresInMs === void 0) {
+    return `${age}, no expiry`;
   }
-  writeJsonAtomic(paths.directoryRulesFile, parsed.data);
+  return state.status === "fresh" ? `${age}, expires in ${formatAge(state.expiresInMs)}` : `${age}, expired ${formatAge(-state.expiresInMs)} ago`;
 }
-function listDirectoryRules(paths) {
-  return readDirectoryRules(paths).rules;
-}
-function addDirectoryRule(paths, rulePath, options) {
-  if (options.configProfile === void 0 && options.identity === void 0) {
-    throw new DirectoryRuleMissingTargetError();
+
+// src/credential.ts
+var CREDENTIAL_UNAVAILABLE_EXIT = 64;
+var CREDENTIAL_COMMAND_TIMEOUT_MS = 1e4;
+var CREDENTIAL_INTERACTIVE_TIMEOUT_MS = 12e4;
+var GROUP_OTHER_PERMISSION_BITS = 63;
+var PERMISSION_BITS = 511;
+var OCTAL_RADIX2 = 8;
+function commandArgv(source) {
+  if ("command" in source) {
+    return source.command;
   }
-  const current = readDirectoryRules(paths);
-  if (current.rules.some((rule) => rule.path === rulePath)) {
-    throw new DirectoryRuleAlreadyExistsError(rulePath);
+  if ("op" in source) {
+    return ["op", "read", source.op];
   }
-  const created = buildNewRule(rulePath, options);
-  writeDirectoryRules(paths, { ...current, rules: [...current.rules, created] });
-  return created;
+  const account = source.keychain.account;
+  return ["security", "find-generic-password", "-s", source.keychain.service, ...account === void 0 ? [] : ["-a", account], "-w"];
 }
-function ruleHasEffect(rule) {
-  return rule.configProfile !== void 0 || rule.identity !== void 0 || rule.categories !== void 0 || rule.entries !== void 0 || rule.launch !== void 0;
+function isInteractiveSource(source, env) {
+  if ("command" in source || "keychain" in source) {
+    return source.interactive ?? false;
+  }
+  if ("op" in source) {
+    return source.interactive ?? (env.OP_SERVICE_ACCOUNT_TOKEN ?? "") === "";
+  }
+  return false;
 }
-function updateDirectoryRule(paths, rulePath, options) {
-  const current = readDirectoryRules(paths);
-  const index = current.rules.findIndex((rule) => rule.path === rulePath);
-  const existing = index === -1 ? void 0 : current.rules[index];
-  if (existing === void 0) {
-    throw new DirectoryRuleNotFoundError(rulePath);
+function summariseSource(source) {
+  if ("env" in source) {
+    return { kind: "env", variable: source.env };
   }
-  const { configProfile, identity, ...rest } = existing;
-  const nextConfigProfile = options.configProfile === void 0 ? configProfile : options.configProfile === false ? void 0 : options.configProfile;
-  const nextIdentity = options.identity === void 0 ? identity : options.identity === false ? void 0 : options.identity;
-  const updated = {
-    ...rest,
-    ...nextConfigProfile === void 0 ? {} : { configProfile: nextConfigProfile },
-    ...nextIdentity === void 0 ? {} : { identity: nextIdentity }
-  };
-  if (!ruleHasEffect(updated)) {
-    throw new DirectoryRuleMissingTargetError();
+  if ("file" in source) {
+    return { kind: "file", path: source.file };
   }
-  const nextRules = [...current.rules];
-  nextRules[index] = updated;
-  writeDirectoryRules(paths, { ...current, rules: nextRules });
-  return updated;
+  if ("command" in source) {
+    return { kind: "command", program: source.command[0] };
+  }
+  if ("op" in source) {
+    return { kind: "op", reference: source.op };
+  }
+  if ("keychain" in source) {
+    return {
+      kind: "keychain",
+      service: source.keychain.service,
+      ...source.keychain.account === void 0 ? {} : { account: source.keychain.account }
+    };
+  }
+  return { kind: "literal" };
 }
-function buildNewRule(rulePath, options) {
+function summariseCredential(credential) {
   return {
-    path: rulePath,
-    ...options.configProfile !== void 0 ? { configProfile: options.configProfile } : {},
-    ...options.identity !== void 0 ? { identity: options.identity } : {}
+    target: credential.target ?? "bearer",
+    sources: credential.sources.map(summariseSource),
+    ...credential.cache === void 0 ? {} : { cache: credential.cache }
   };
 }
-function removeDirectoryRule(paths, rulePath) {
-  const current = readDirectoryRules(paths);
-  const nextRules = current.rules.filter((rule) => rule.path !== rulePath);
-  if (nextRules.length === current.rules.length) {
-    throw new DirectoryRuleNotFoundError(rulePath);
+function formatSourceSummary(summary) {
+  switch (summary.kind) {
+    case "env":
+      return `env ${summary.variable}`;
+    case "file":
+      return `file ${summary.path}`;
+    case "command":
+      return `command ${summary.program}`;
+    case "op":
+      return `op ${summary.reference}`;
+    case "keychain":
+      return `keychain ${summary.service}${summary.account === void 0 ? "" : ` (account ${summary.account})`}`;
+    case "literal":
+      return "literal (non-secret placeholder)";
+    default:
+      return summary;
+  }
+}
+function describeSource(source) {
+  return formatSourceSummary(summariseSource(source));
+}
+function formatCredentialSummary(summary) {
+  const cache = summary.cache === void 0 ? "" : `, cached ${summary.cache.ttl === void 0 ? "with no expiry" : `for ${summary.cache.ttl}`}${summary.cache.store === void 0 ? "" : ` in the ${summary.cache.store} store`}`;
+  return `${summary.target} from ${summary.sources.map(formatSourceSummary).join(", then ")}${cache}`;
+}
+function describeCredential(credential) {
+  return formatCredentialSummary(summariseCredential(credential));
+}
+function trySource(source, params) {
+  const none = (reason, warn = false) => ({ ok: false, reason, warn });
+  if ("env" in source) {
+    const value = params.env[source.env];
+    return value === void 0 || value === "" ? none("is unset or empty") : { ok: true, token: value };
+  }
+  if ("literal" in source) {
+    return { ok: true, token: source.literal };
+  }
+  if ("file" in source) {
+    const read = params.port.readSecretFile(source.file);
+    if (!read.found) {
+      return none("does not exist");
+    }
+    if (read.mode !== void 0 && (read.mode & GROUP_OTHER_PERMISSION_BITS) !== 0) {
+      return none(
+        `is readable or writable by group or others (mode ${(read.mode & PERMISSION_BITS).toString(OCTAL_RADIX2)}); run \`chmod 600 ${source.file}\``,
+        true
+      );
+    }
+    const token2 = read.content.trim();
+    return token2 === "" ? none("is empty") : { ok: true, token: token2 };
+  }
+  const argv = commandArgv(source);
+  const interactive = isInteractiveSource(source, params.env);
+  if (interactive && !params.port.personPresent()) {
+    return none("needs a person to approve it, but there is no terminal or desktop session");
   }
-  writeDirectoryRules(paths, { ...current, rules: nextRules });
-}
-
-// src/checkReport.ts
-import os4 from "node:os";
-
-// src/launcher/cascade.ts
-import path18 from "node:path";
-
-// src/pathNorm.ts
-import path17 from "node:path";
-function expandTilde(value, home) {
-  if (value === "~") {
-    return home;
+  const timeoutMs = source.timeoutMs ?? (interactive ? CREDENTIAL_INTERACTIVE_TIMEOUT_MS : CREDENTIAL_COMMAND_TIMEOUT_MS);
+  const result = params.port.runCommand(argv, { timeoutMs, interactive });
+  if (result.timedOut) {
+    return none(`timed out after ${String(timeoutMs)}ms`);
   }
-  if (value.startsWith("~/")) {
-    return path17.join(home, value.slice(2));
+  if (result.status !== 0) {
+    const stderr = result.stderr.trim();
+    const outcome = result.status === null ? "could not be run or was killed by a signal" : `exited with status ${String(result.status)}`;
+    return none(`${outcome}${stderr === "" ? "" : `: ${stderr}`}`);
   }
-  return value;
+  const token = result.stdout.trim();
+  return token === "" ? none("printed no token") : { ok: true, token };
 }
-function normaliseRulePath(rulePath, home) {
-  return path17.resolve(expandTilde(rulePath, home));
+function warmCommandFor(subject) {
+  const [kind, name] = subject.split(" ");
+  return kind === "provider" ? `agent-shim credential warm --provider ${name ?? ""}` : `agent-shim credential warm ${name ?? ""}`;
 }
-
-// src/launcher/cascade.ts
-var PORTABLE_CONFIG_FILENAME = ".agent-shim.json";
-var PORTABLE_LOCAL_CONFIG_FILENAME = ".agent-shim.local.json";
-function loadCascadeInput(params) {
-  const globalConfig = loadConfigFile(params.paths.globalConfigFile, GlobalConfigSchema, params.read);
-  const directoryRules = loadConfigFile(params.paths.directoryRulesFile, DirectoryRulesSchema, params.read);
-  const loadProfile = (name) => {
-    const filepath = path18.join(params.paths.configProfilesDir, `${name}.json`);
-    const loaded = loadConfigFile(filepath, ConfigProfileSchema, params.read);
-    if (loaded === void 0) {
-      return void 0;
-    }
-    return { name, profile: loaded.config, entryOrder: loaded.entryOrder, filepath: loaded.filepath };
-  };
-  const limit = globalConfig?.config.walkUpLimit;
-  const dirs = walkDirectoryAncestors(params.cwd, {
-    home: params.home,
-    ...limit === void 0 ? {} : { limit: expandTilde(limit, params.home) },
-    ...params.isReadable === void 0 ? {} : { isReadable: params.isReadable }
-  });
-  const levels = [];
-  for (const dir of dirs) {
-    const portable = loadConfigFile(path18.join(dir, PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(path18.join(dir, LEGACY_PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read);
-    const portableLocal = loadConfigFile(path18.join(dir, PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(path18.join(dir, LEGACY_PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read);
-    const rules = (directoryRules?.config.rules ?? []).map((rule, index) => ({ rule, index })).filter(({ rule }) => normaliseRulePath(rule.path, params.home) === dir).map(({ rule, index }) => {
-      const entryOrder = directoryRules?.ruleEntryOrders[index];
-      return {
-        rule,
-        ...entryOrder === void 0 ? {} : { entryOrder },
-        filepath: params.paths.directoryRulesFile
-      };
-    });
-    if (portable === void 0 && portableLocal === void 0 && rules.length === 0) {
-      continue;
+function resolveCredential(params) {
+  const target = params.credential.target ?? "bearer";
+  const cacheBlock = params.credential.cache;
+  const cache = cacheBlock === void 0 ? void 0 : params.port.cache;
+  const store = cacheBlock === void 0 || cache === void 0 ? void 0 : effectiveStore(cacheBlock, cache.platform);
+  if (cacheBlock !== void 0 && cache !== void 0 && store !== void 0 && params.refresh !== true) {
+    const entry = cache.port.read(store, params.subject);
+    if (entry !== void 0 && isFresh(entry, cacheBlock, cache.now())) {
+      return { ok: true, credential: { target, token: entry.token, source: entry.source, warnings: [], cachedAt: entry.fetchedAt } };
     }
-    levels.push({
-      dir,
-      ...portable === void 0 ? {} : { portable: { config: portable.config, entryOrder: portable.entryOrder, filepath: portable.filepath } },
-      ...rules.length === 0 ? {} : { rules },
-      ...portableLocal === void 0 ? {} : { portableLocal: { config: portableLocal.config, entryOrder: portableLocal.entryOrder, filepath: portableLocal.filepath } }
-    });
   }
-  const input = {
-    home: params.home,
-    ...globalConfig === void 0 ? {} : { globalConfig: { config: globalConfig.config, entryOrder: globalConfig.entryOrder, filepath: globalConfig.filepath } },
-    ...params.baseConfigProfile === void 0 ? {} : { baseConfigProfile: params.baseConfigProfile },
-    loadProfile,
-    levels,
-    ...params.cliOverride === void 0 ? {} : { cliOverride: params.cliOverride }
-  };
-  return { input, ...globalConfig === void 0 ? {} : { globalConfig: globalConfig.config } };
-}
-function readDirectorySelections(loaded) {
-  let identity;
-  let configProfile;
-  for (const level of loaded.input.levels ?? []) {
-    for (const source of [level.portable?.config, ...(level.rules ?? []).map((entry) => entry.rule), level.portableLocal?.config]) {
-      if (source === void 0) {
-        continue;
-      }
-      if (source.identity !== void 0) {
-        identity = source.identity;
-      }
-      if (source.configProfile !== void 0) {
-        configProfile = source.configProfile;
+  const attempts = [];
+  const warnings = [];
+  for (const source of params.credential.sources) {
+    const outcome = trySource(source, params);
+    if (outcome.ok) {
+      if (cache !== void 0 && store !== void 0) {
+        cache.port.write(store, params.subject, { token: outcome.token, fetchedAt: cache.now(), source });
       }
+      return { ok: true, credential: { target, token: outcome.token, source, warnings } };
+    }
+    const line = `${describeSource(source)} ${outcome.reason}`;
+    attempts.push(line);
+    if (outcome.warn) {
+      warnings.push(`agent-shim: ${params.subject}: skipped ${line}`);
     }
   }
-  return { ...identity === void 0 ? {} : { identity }, ...configProfile === void 0 ? {} : { configProfile } };
-}
-
-// src/usage/preflight.ts
-var MS_PER_SECOND2 = 1e3;
-var SECONDS_PER_MINUTE = 60;
-var MINUTES_PER_HOUR = 60;
-var HOURS_PER_DAY = 24;
-var WARNING_STATUSES = /* @__PURE__ */ new Set(["allowed_warning", "rejected"]);
-function formatAge(ms) {
-  const minutes = Math.floor(ms / (MS_PER_SECOND2 * SECONDS_PER_MINUTE));
-  if (minutes < MINUTES_PER_HOUR) {
-    return `${String(Math.max(minutes, 0))}m`;
-  }
-  const hours = Math.floor(minutes / MINUTES_PER_HOUR);
-  return hours < HOURS_PER_DAY ? `${String(hours)}h` : `${String(Math.floor(hours / HOURS_PER_DAY))}d`;
+  const hint = cacheBlock === void 0 ? "" : `; fill the cache from a terminal with \`${warmCommandFor(params.subject)}\``;
+  return { ok: false, message: `agent-shim: ${params.subject} has no usable credential: ${attempts.join("; ")}${hint}` };
 }
-function effectiveWindow(window, nowMs) {
-  const resetsAtMs = window.resetsAt === void 0 ? void 0 : Date.parse(window.resetsAt);
-  if (resetsAtMs !== void 0 && resetsAtMs <= nowMs) {
-    return { reset: true, utilization: 0 };
-  }
+function credentialVariables(target, token) {
   return {
-    reset: false,
-    ...window.utilization === void 0 ? {} : { utilization: window.utilization },
-    ...resetsAtMs === void 0 ? {} : { resetsAtMs },
-    ...window.status === void 0 ? {} : { status: window.status }
+    ANTHROPIC_AUTH_TOKEN: target === "bearer" ? token : void 0,
+    ANTHROPIC_API_KEY: target === "apiKey" ? token : void 0,
+    CLAUDE_CODE_OAUTH_TOKEN: target === "oauthToken" ? token : void 0
   };
 }
-function quotaWarnings(snapshot, provider, nowMs) {
-  const rateLimit = snapshot?.providers[provider]?.rateLimit;
-  const unified = rateLimit?.unified;
-  if (snapshot === void 0 || rateLimit === void 0 || unified === void 0) {
-    return [];
-  }
-  const age = formatAge(nowMs - Date.parse(rateLimit.observedAt));
-  const windows = [
-    { name: "five-hour", window: unified.fiveHour },
-    { name: "seven-day", window: unified.sevenDay }
-  ];
-  return windows.flatMap(({ name, window }) => {
-    const effective = window === void 0 ? void 0 : effectiveWindow(window, nowMs);
-    if (window === void 0 || effective?.status === void 0 || !WARNING_STATUSES.has(effective.status)) {
-      return [];
-    }
-    const reset = window.resetsAt === void 0 ? "" : `, resets ${window.resetsAt}`;
-    const verdict = effective.status === "rejected" ? "exhausted" : "nearly used";
-    return [`agent-shim: identity ${snapshot.identity}: the ${name} quota is ${verdict}${reset} (last seen ${age} ago)`];
-  });
-}
-
-// src/usage/poolPick.ts
-import path19 from "node:path";
-import { z as z9 } from "zod";
 
-// src/usage/plan.ts
-var TIER_MULTIPLIER = /(?:^|_)(\d+)x$/;
-var ZERO_TIER = /(?:^|_)zero$/;
-var BASE_TIER = /(?:^|_)(?:pro|free)$/;
-function planOf(account) {
-  const tier = account?.organizationRateLimitTier ?? account?.userRateLimitTier;
-  const tierField = tier === void 0 ? {} : { tier };
-  if (tier === void 0) {
-    return { kind: "subscription", capacity: 1, recognised: false };
+// src/providersStore.ts
+var ProviderNotFoundError = class extends CliError {
+  constructor(name) {
+    super(`No provider named "${name}". Run \`agent-shim provider add ${name}\` first.`);
+    this.name = name;
+    this.name = "ProviderNotFoundError";
   }
-  if (ZERO_TIER.test(tier)) {
-    return { kind: "pay-per-use", ...tierField };
+  name;
+};
+var ProviderAlreadyExistsError = class extends CliError {
+  constructor(providerName) {
+    super(`A provider named "${providerName}" already exists.`);
+    this.providerName = providerName;
+    this.name = "ProviderAlreadyExistsError";
   }
-  const multiplier = TIER_MULTIPLIER.exec(tier)?.[1];
-  if (multiplier !== void 0) {
-    return { kind: "subscription", capacity: Number(multiplier), recognised: true, ...tierField };
+  providerName;
+};
+var InvalidProviderNameError = class extends CliError {
+  constructor(attemptedName) {
+    super(
+      `"${attemptedName}" is not a valid provider name. Provider names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
+    );
+    this.attemptedName = attemptedName;
+    this.name = "InvalidProviderNameError";
   }
-  return { kind: "subscription", capacity: 1, recognised: BASE_TIER.test(tier), ...tierField };
+  attemptedName;
+};
+var PROVIDER_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._@-]*$/;
+function providerJsonPath(paths, name) {
+  return path17.join(paths.providersDir, `${name}.json`);
 }
-
-// src/usage/rateLimit.ts
-var MS_PER_SECOND3 = 1e3;
-function epochSecondsToIso(value) {
-  if (value === void 0) {
-    return void 0;
-  }
-  const seconds = Number(value);
-  return Number.isFinite(seconds) && seconds > 0 ? new Date(seconds * MS_PER_SECOND3).toISOString() : void 0;
+function providerExists(paths, name) {
+  return fs6.existsSync(providerJsonPath(paths, name));
 }
-function nonNegativeNumber(value) {
-  if (value === void 0 || value.trim() === "") {
-    return void 0;
-  }
-  const parsed = Number(value);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
+var LEGACY_PROVIDER_FIELDS = ["tokenEnv", "tokenCommand", "authScheme"];
+var LEGACY_ENV_CREDENTIAL_KEYS = Object.values(CREDENTIAL_TARGET_VARS);
+var LEGACY_LITERAL_PLACEHOLDER = "<the value of env.ANTHROPIC_AUTH_TOKEN>";
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-var UNIFIED_PREFIX = "anthropic-ratelimit-unified-";
-function unifiedWindow(headers, window) {
-  const utilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}${window}-utilization`]);
-  const resetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}${window}-reset`]);
-  const status = headers[`${UNIFIED_PREFIX}${window}-status`];
-  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
+function legacyProviderConversion(raw) {
+  if (!isRecord3(raw) || "credential" in raw) {
     return void 0;
   }
-  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
-}
-function parseUnifiedRateLimit(headers) {
-  if (!Object.keys(headers).some((name) => name.startsWith(UNIFIED_PREFIX))) {
+  const env = isRecord3(raw.env) ? raw.env : void 0;
+  const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
+  const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
+  if (fields.length === 0) {
     return void 0;
   }
-  const status = headers[`${UNIFIED_PREFIX}status`];
-  const fiveHour = unifiedWindow(headers, "5h");
-  const sevenDay = unifiedWindow(headers, "7d");
-  const representativeClaim = headers[`${UNIFIED_PREFIX}representative-claim`];
-  const resetAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}reset`]);
-  const overageStatus = headers[`${UNIFIED_PREFIX}overage-status`];
+  const sources = [];
+  if (typeof raw.tokenEnv === "string") {
+    sources.push({ env: raw.tokenEnv });
+  }
+  if (Array.isArray(raw.tokenCommand)) {
+    sources.push({ command: raw.tokenCommand });
+  }
+  if (typeof env?.ANTHROPIC_AUTH_TOKEN === "string" && env.ANTHROPIC_AUTH_TOKEN !== "") {
+    sources.push({ literal: LEGACY_LITERAL_PLACEHOLDER });
+  }
+  const remainingEnv = env === void 0 ? void 0 : Object.fromEntries(Object.entries(env).filter(([key]) => !LEGACY_ENV_CREDENTIAL_KEYS.includes(key)));
+  const replacedKeys = [...LEGACY_PROVIDER_FIELDS, "env"];
+  const rest = Object.fromEntries(Object.entries(raw).filter(([key]) => !replacedKeys.includes(key)));
   return {
-    ...status === void 0 ? {} : { status },
-    ...fiveHour === void 0 ? {} : { fiveHour },
-    ...sevenDay === void 0 ? {} : { sevenDay },
-    ...representativeClaim === void 0 ? {} : { representativeClaim },
-    ...resetAt === void 0 ? {} : { resetAt },
-    ...overageStatus === void 0 ? {} : { overageStatus }
+    fields,
+    replacement: {
+      ...rest,
+      credential: { sources, ...raw.authScheme === "apiKey" ? { target: "apiKey" } : {} },
+      ...remainingEnv === void 0 || Object.keys(remainingEnv).length === 0 ? {} : { env: remainingEnv }
+    }
   };
 }
-
-// src/usage/scan.ts
-import { z as z8 } from "zod";
-var AnthropicUsageSchema = z8.looseObject({
-  input_tokens: z8.number().int().nonnegative().nullish(),
-  output_tokens: z8.number().int().nonnegative().nullish(),
-  cache_creation_input_tokens: z8.number().int().nonnegative().nullish(),
-  cache_read_input_tokens: z8.number().int().nonnegative().nullish()
-});
-var ErrorObjectSchema = z8.looseObject({
-  type: z8.string().optional(),
-  code: z8.union([z8.string(), z8.number()]).optional(),
-  message: z8.string().optional()
-});
-
-// src/usage/middleware.ts
-var ANTHROPIC_PROVIDER = "anthropic";
-
-// src/usage/pick.ts
-var MS_PER_SECOND4 = 1e3;
-var MS_PER_HOUR = 36e5;
-var HOURS_PER_DAY2 = 24;
-var FIVE_HOURS = 5;
-var PROMPT_CACHE_TTL_HOURS = 1;
-var PERCENT = 100;
-var SEVEN_DAYS = 7;
-var FIVE_HOUR_WINDOW_MS = FIVE_HOURS * MS_PER_HOUR;
-var SEVEN_DAY_WINDOW_MS = SEVEN_DAYS * HOURS_PER_DAY2 * MS_PER_HOUR;
-var PROMPT_CACHE_TTL_MS = PROMPT_CACHE_TTL_HOURS * MS_PER_HOUR;
-var CLASS_ORDER = { scored: 0, unknown: 1, "pay-per-use": 2, ineligible: 3 };
-function unifiedOf(state) {
-  return state?.rateLimit?.unified;
-}
-function limitBlockedUntil(state, nowMs) {
-  const limit = state?.lastLimit;
-  if (state === void 0 || limit === void 0) {
-    return void 0;
+var LegacyProviderFileError = class extends CliError {
+  constructor(filePath, conversion) {
+    super(
+      `${filePath} uses ${conversion.fields.join(", ")}, which a credential block replaced. Rewrite it as:
+` + JSON.stringify(conversion.replacement, null, 2)
+    );
+    this.filePath = filePath;
+    this.conversion = conversion;
+    this.name = "LegacyProviderFileError";
   }
-  if (Date.parse(state.lastRequestAt) > Date.parse(limit.observedAt)) {
+  filePath;
+  conversion;
+};
+function parseProviderFile(filePath, raw) {
+  const conversion = legacyProviderConversion(raw);
+  if (conversion !== void 0) {
+    throw new LegacyProviderFileError(filePath, conversion);
+  }
+  const parsed = ProviderSchema.safeParse(raw);
+  if (!parsed.success) {
+    throw new ConfigValidationError(filePath, parsed.error.issues);
+  }
+  return parsed.data;
+}
+function readProvider(paths, name) {
+  const filePath = providerJsonPath(paths, name);
+  if (!fs6.existsSync(filePath)) {
     return void 0;
   }
-  const until = limit.resetAt === void 0 ? limit.retryAfterSeconds === void 0 ? void 0 : Date.parse(limit.observedAt) + limit.retryAfterSeconds * MS_PER_SECOND4 : Date.parse(limit.resetAt);
-  return until !== void 0 && until > nowMs ? until : void 0;
+  const raw = JSON.parse(fs6.readFileSync(filePath, "utf8"));
+  return parseProviderFile(filePath, raw);
 }
-function windowBlockedUntil(windows) {
-  const resets = windows.flatMap((window) => window.status === "rejected" && window.resetsAtMs !== void 0 ? [window.resetsAtMs] : []);
-  return resets.length === 0 ? void 0 : Math.max(...resets);
+function loadProvider(providersDir, name, port) {
+  const filePath = path17.join(providersDir, `${name}.json`);
+  const raw = port.readConfigFile(filePath);
+  return raw === void 0 ? void 0 : parseProviderFile(filePath, raw);
 }
-function fiveHourBurn(records) {
-  const points = [];
-  for (const record of records) {
-    const window = record.rateLimitHeaders === void 0 ? void 0 : parseUnifiedRateLimit(record.rateLimitHeaders)?.fiveHour;
-    if (window?.utilization !== void 0 && window.resetsAt !== void 0) {
-      points.push({ resetsAt: window.resetsAt, point: { atMs: Date.parse(record.at), utilization: window.utilization } });
+function listProviders(paths) {
+  const names = listProviderNames(
+    (dir) => fs6.readdirSync(dir),
+    paths.providersDir
+  );
+  const result = [];
+  for (const name of names) {
+    let provider;
+    try {
+      provider = readProvider(paths, name);
+    } catch (error) {
+      if (!(error instanceof ConfigValidationError || error instanceof LegacyProviderFileError)) {
+        throw error;
+      }
+      console.error(`agent-shim: providers/${name}.json is invalid and was skipped: ${error.message}`);
+      continue;
+    }
+    if (provider !== void 0) {
+      result.push({ name, provider });
     }
   }
-  const latest = points.at(-1)?.resetsAt;
-  const current = points.filter((entry) => entry.resetsAt === latest).map((entry) => entry.point);
-  const first = current.at(0);
-  const last = current.at(-1);
-  if (first === void 0 || last === void 0 || last.atMs <= first.atMs || last.utilization <= first.utilization) {
-    return void 0;
+  return result;
+}
+function listProviderNames(readdir, providersDir) {
+  let entries;
+  try {
+    entries = readdir(providersDir);
+  } catch {
+    return [];
   }
-  return (last.utilization - first.utilization) / (last.atMs - first.atMs);
+  return entries.filter((entry) => entry.endsWith(".json")).map((entry) => entry.slice(0, -".json".length)).sort();
 }
-function percent(fraction) {
-  return `${String(Math.round(fraction * PERCENT))}%`;
+function describeProviderEndpoint(provider) {
+  return isCodexProvider(provider) ? "codex translation daemon" : provider.baseUrl;
 }
-function describeWindow(label, window, effective, nowMs) {
-  if (effective.reset) {
-    return `${label} window has reset`;
+var ProviderKindMismatchError = class extends UsageError {
+  constructor(message) {
+    super(message);
+    this.name = "ProviderKindMismatchError";
   }
-  const used = effective.utilization === void 0 ? "usage unknown" : `${percent(effective.utilization)} used`;
-  const resets = effective.resetsAtMs === void 0 ? "" : `, resets in ${formatAge(effective.resetsAtMs - nowMs)}`;
-  return `${label} ${used}${resets}${window.status === "allowed_warning" ? " (nearly used)" : ""}`;
-}
-function capacityOf(plan) {
-  return plan.kind === "subscription" ? plan.capacity : 1;
+};
+function isEmptyCodexConfig(config) {
+  return config === void 0 || config.defaultModel === void 0 && config.effort === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
 }
-function assess(member, nowMs) {
-  const plan = planOf(member.account);
-  const planReasons = plan.kind === "pay-per-use" ? ["billed by use (no plan allowance)"] : plan.recognised ? [`${String(plan.capacity)}x plan`] : [`plan tier ${plan.tier === void 0 ? "not known" : `"${plan.tier}" not recognised`}, counted as 1x`];
-  const base = { identity: member.identity, plan };
-  if (member.readError !== void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: [`usage state unreadable: ${member.readError}`, ...planReasons] } };
+function addProvider(paths, name, input) {
+  if (providerExists(paths, name)) {
+    throw new ProviderAlreadyExistsError(name);
   }
-  const state = member.snapshot?.providers[ANTHROPIC_PROVIDER];
-  const unified = unifiedOf(state);
-  if (member.snapshot === void 0 || state === void 0 || unified === void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: ["no usage recorded yet, so its quota is unknown (turn on trackUsage for it)", ...planReasons] } };
+  if (!PROVIDER_NAME_RE.test(name)) {
+    throw new InvalidProviderNameError(name);
   }
-  const observedAgo = state.rateLimit === void 0 ? "" : ` (last seen ${formatAge(nowMs - Date.parse(state.rateLimit.observedAt))} ago)`;
-  const fiveHourWindow = unified.fiveHour;
-  const sevenDayWindow = unified.sevenDay;
-  const five = fiveHourWindow === void 0 ? void 0 : effectiveWindow(fiveHourWindow, nowMs);
-  const seven = sevenDayWindow === void 0 ? void 0 : effectiveWindow(sevenDayWindow, nowMs);
-  const windowReasons = [
-    ...fiveHourWindow === void 0 || five === void 0 ? [] : [describeWindow("5h", fiveHourWindow, five, nowMs)],
-    ...sevenDayWindow === void 0 || seven === void 0 ? [] : [describeWindow("7d", sevenDayWindow, seven, nowMs)]
-  ];
-  const blockedUntil = Math.max(
-    windowBlockedUntil([five, seven].flatMap((window) => window === void 0 ? [] : [window])) ?? 0,
-    limitBlockedUntil(state, nowMs) ?? 0
-  );
-  if (blockedUntil > nowMs) {
-    if (unified.overageStatus === "allowed") {
-      return { candidate: { ...base, class: "pay-per-use", reasons: [`plan exhausted until ${new Date(blockedUntil).toISOString()}, continues as extra usage`, ...windowReasons, ...planReasons] } };
-    }
-    return { candidate: { ...base, class: "ineligible", blockedUntilMs: blockedUntil, reasons: [`refused until ${new Date(blockedUntil).toISOString()} (in ${formatAge(blockedUntil - nowMs)})`, ...windowReasons, ...planReasons] } };
+  const kind = input.kind ?? "http";
+  if (kind === "codex" && input.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError("A codex provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
   }
-  if (plan.kind === "pay-per-use" || fiveHourWindow === void 0 && sevenDayWindow === void 0) {
-    return { candidate: { ...base, class: "pay-per-use", reasons: [...plan.kind === "pay-per-use" ? planReasons : ["no plan windows reported, so usage bills as extra usage"]] } };
+  if (kind === "http" && input.baseUrl === void 0) {
+    throw new ProviderKindMismatchError("An http provider needs --base-url.");
   }
-  const basis = seven?.utilization !== void 0 ? { window: seven, windowMs: SEVEN_DAY_WINDOW_MS } : five?.utilization !== void 0 ? { window: five, windowMs: FIVE_HOUR_WINDOW_MS } : void 0;
-  if (basis?.window.utilization === void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: ["quota windows reported no utilisation", ...windowReasons, ...planReasons] } };
+  if (kind === "http" && !isEmptyCodexConfig(input.codex)) {
+    throw new ProviderKindMismatchError("Codex settings apply only to a codex provider (--kind codex).");
   }
-  const remaining = Math.max(0, 1 - basis.window.utilization);
-  const untilResetMs = basis.window.resetsAtMs === void 0 ? basis.windowMs : Math.max(basis.window.resetsAtMs - nowMs, MS_PER_SECOND4);
-  const score = remaining * plan.capacity / (untilResetMs / MS_PER_HOUR);
-  const fiveRemaining = five?.utilization === void 0 ? void 0 : Math.max(0, 1 - five.utilization);
-  const fiveUntil = five?.resetsAtMs === void 0 ? FIVE_HOUR_WINDOW_MS : Math.max(five.resetsAtMs - nowMs, MS_PER_SECOND4);
-  const burn = fiveHourBurn(member.records);
-  return {
-    candidate: { ...base, class: "scored", score, reasons: [...windowReasons.map((reason, index) => index === windowReasons.length - 1 ? `${reason}${observedAgo}` : reason), ...planReasons] },
-    ...fiveRemaining === void 0 ? {} : { fiveHour: { remaining: fiveRemaining, untilResetMs: fiveUntil } },
-    ...burn === void 0 ? {} : { burn }
+  const shared = {
+    displayName: input.displayName,
+    credential: { sources: input.sources, ...input.target === void 0 ? {} : { target: input.target } },
+    ...input.env === void 0 || Object.keys(input.env).length === 0 ? {} : { env: input.env }
   };
-}
-function rankPool(input) {
-  const { members, nowMs } = input;
-  const assessments = members.map((member) => assess(member, nowMs));
-  const demands = assessments.flatMap(({ candidate, burn }) => burn === void 0 ? [] : [burn * capacityOf(candidate.plan)]);
-  const sharedDemand = demands.length === 0 ? void 0 : Math.max(...demands);
-  const candidates = assessments.map((assessment) => {
-    const { candidate, fiveHour, burn } = assessment;
-    const pace = burn ?? (sharedDemand === void 0 ? void 0 : sharedDemand / capacityOf(candidate.plan));
-    if (candidate.class !== "scored" || fiveHour === void 0 || pace === void 0) {
-      return { ...candidate, feasible: true };
-    }
-    const runsDryInMs = fiveHour.remaining / pace;
-    if (runsDryInMs >= fiveHour.untilResetMs) {
-      return { ...candidate, feasible: true };
-    }
-    return { ...candidate, feasible: false, reasons: [`5h window would run dry in ${formatAge(runsDryInMs)}, before it resets in ${formatAge(fiveHour.untilResetMs)}`, ...candidate.reasons] };
-  });
-  const ordered = [...candidates].sort(
-    (left, right) => CLASS_ORDER[left.class] - CLASS_ORDER[right.class] || Number(right.feasible) - Number(left.feasible) || (right.score ?? 0) - (left.score ?? 0) || left.identity.localeCompare(right.identity)
+  const parsed = ProviderSchema.safeParse(
+    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input.codex) ? {} : { codex: input.codex } } : { ...shared, baseUrl: input.baseUrl }
   );
-  const sticky = input.sticky;
-  const stickyIndex = sticky === void 0 ? -1 : ordered.findIndex((candidate) => candidate.identity === sticky.identity);
-  const stickyCandidate = ordered[stickyIndex];
-  if (sticky !== void 0 && stickyCandidate?.class === "scored" && stickyCandidate.feasible) {
-    const ageMs = nowMs - Date.parse(sticky.at);
-    const warm = ageMs <= PROMPT_CACHE_TTL_MS;
-    if (input.resuming || warm) {
-      const why = warm ? `used here ${formatAge(ageMs)} ago, prompt cache still warm` : "resuming a conversation started on this account";
-      ordered.splice(stickyIndex, 1);
-      ordered.unshift({ ...stickyCandidate, reasons: [why, ...stickyCandidate.reasons] });
-    }
+  if (!parsed.success) {
+    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+  }
+  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
+  return parsed.data;
+}
+function updateProvider(paths, name, input) {
+  const existing = readProvider(paths, name);
+  if (existing === void 0) {
+    throw new ProviderNotFoundError(name);
+  }
+  const unset = new Set(input.unsetEnv);
+  const env = Object.fromEntries(Object.entries({ ...existing.env, ...input.env }).filter(([key]) => !unset.has(key)));
+  const target = input.target ?? existing.credential.target;
+  const cache = input.cache === void 0 ? existing.credential.cache : input.cache === false ? void 0 : input.cache;
+  if (isCodexProvider(existing) && input.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError(`Provider "${name}" is a codex provider, which has no base URL.`);
   }
-  const pick = ordered.find((candidate) => candidate.class !== "ineligible");
-  const returns = ordered.flatMap((candidate) => candidate.blockedUntilMs === void 0 ? [] : [{ identity: candidate.identity, atMs: candidate.blockedUntilMs }]);
-  const earliestReturn = returns.length === 0 ? void 0 : returns.reduce((soonest, entry) => entry.atMs < soonest.atMs ? entry : soonest);
-  return {
-    candidates: ordered,
-    ...pick === void 0 ? { ...earliestReturn === void 0 ? {} : { earliestReturn } } : { pick }
+  if (!isCodexProvider(existing) && !isEmptyCodexConfig(input.codex)) {
+    throw new ProviderKindMismatchError(`Provider "${name}" is an http provider; codex settings apply only to a codex provider.`);
+  }
+  const shared = {
+    ...input.displayName === void 0 ? {} : { displayName: input.displayName },
+    credential: {
+      sources: input.sources ?? existing.credential.sources,
+      ...target === void 0 ? {} : { target },
+      ...cache === void 0 ? {} : { cache }
+    },
+    env: Object.keys(env).length === 0 ? void 0 : env
   };
+  let candidate;
+  if (isCodexProvider(existing)) {
+    const codex = {
+      ...existing.codex,
+      ...input.codex,
+      ...existing.codex?.models === void 0 && input.codex?.models === void 0 ? {} : { models: { ...existing.codex?.models, ...input.codex?.models } }
+    };
+    candidate = { ...existing, ...shared, codex: isEmptyCodexConfig(codex) ? void 0 : codex };
+  } else {
+    candidate = { ...existing, ...shared, ...input.baseUrl === void 0 ? {} : { baseUrl: input.baseUrl } };
+  }
+  const parsed = ProviderSchema.safeParse(candidate);
+  if (!parsed.success) {
+    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+  }
+  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
+  return parsed.data;
 }
-
-// src/usage/store.ts
-var DAY_MS2 = 864e5;
-var DAYS_IN_WEEK = 7;
-var USAGE_RETENTION_MS = DAYS_IN_WEEK * DAY_MS2;
-
-// src/usage/poolPick.ts
-var SCHEMA_VERSION = 1;
-var PickEntrySchema = z9.strictObject({ identity: z9.string().min(1), at: z9.iso.datetime() });
-var PicksFileSchema = z9.strictObject({
-  schemaVersion: z9.literal(SCHEMA_VERSION),
-  picks: z9.record(z9.string().min(1), PickEntrySchema)
-});
-function errorMessage(error) {
-  return error instanceof Error ? error.message : String(error);
+function removeProvider(paths, name) {
+  if (!providerExists(paths, name)) {
+    throw new ProviderNotFoundError(name);
+  }
+  fs6.rmSync(providerJsonPath(paths, name));
 }
-function loadPoolMembers(fs12, paths, identities, nowMs) {
-  const windowStartMs = nowMs - FIVE_HOUR_WINDOW_MS;
-  const log = readUsageLog(fs12, paths.usageLogDir, { sinceMs: windowStartMs });
-  return identities.map((identity) => {
-    const records = log.records.filter((record) => record.identity === identity && record.provider === ANTHROPIC_PROVIDER && Date.parse(record.at) >= windowStartMs);
-    try {
-      const snapshot = readUsageSnapshot(fs12, paths.usageSnapshotsDir, identity);
-      const account = readAccountMetadata(fs12, paths.identitiesDir, identity) ?? snapshot?.account;
-      return { identity, records, ...snapshot === void 0 ? {} : { snapshot }, ...account === void 0 ? {} : { account } };
-    } catch (error) {
-      if (error instanceof UsageSnapshotError || error instanceof AccountMetadataError) {
-        return { identity, records, readError: errorMessage(error) };
-      }
-      throw error;
+function cascadeProviderName(cascade) {
+  let name;
+  for (const layer of assembleCascade(cascade).layers) {
+    if (layer.launch?.provider !== void 0) {
+      name = layer.launch.provider;
     }
-  });
+  }
+  return name;
 }
-function rankPoolFromStore(params) {
-  return rankPool({
-    members: loadPoolMembers(params.fs, params.paths, params.identities, params.nowMs),
-    nowMs: params.nowMs,
-    resuming: params.resuming,
-    ...params.sticky === void 0 ? {} : { sticky: params.sticky }
-  });
+function resolveProvider(params) {
+  const cliName = params.cliProvider !== void 0 && params.cliProvider !== "" ? params.cliProvider : void 0;
+  const name = cliName ?? (params.cascade === void 0 ? void 0 : cascadeProviderName(params.cascade));
+  if (name === void 0) {
+    return void 0;
+  }
+  const definition = loadProvider(params.paths.providersDir, name, params.port);
+  if (definition === void 0) {
+    const known = listProviderNames(params.port.readdir, params.paths.providersDir);
+    return {
+      ok: false,
+      status: 1,
+      message: `agent-shim: no provider named "${name}". ` + (known.length > 0 ? `Known providers: ${known.join(", ")}.` : "No providers are defined yet; run `agent-shim provider add`.")
+    };
+  }
+  if (params.credentials === void 0) {
+    return { ok: false, status: 1, message: `agent-shim: provider ${name} needs its credential resolved, but this launcher has no credential port wired` };
+  }
+  const resolution = resolveCredential({ credential: definition.credential, env: params.env, port: params.credentials, subject: `provider ${name}` });
+  if (!resolution.ok) {
+    return { ok: false, status: CREDENTIAL_UNAVAILABLE_EXIT, message: resolution.message };
+  }
+  return { ok: true, provider: { name, definition, credential: resolution.credential }, warnings: resolution.credential.warnings };
 }
-function readPicksFile(fs12, file) {
-  const empty = { schemaVersion: SCHEMA_VERSION, picks: {} };
-  const raw = fs12.readFileUtf8(file);
-  if (raw === void 0) {
-    return { file: empty };
+
+// src/directoryRulesStore.ts
+var DirectoryRuleNotFoundError = class extends CliError {
+  constructor(rulePath) {
+    super(`No directory rule found for path "${rulePath}".`);
+    this.rulePath = rulePath;
+    this.name = "DirectoryRuleNotFoundError";
   }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return { file: empty, problem: `${file} is not valid JSON` };
+  rulePath;
+};
+var DirectoryRuleMissingTargetError = class extends CliError {
+  constructor() {
+    super("A directory rule must set at least one of --config-profile or --identity.");
+    this.name = "DirectoryRuleMissingTargetError";
   }
-  const result = PicksFileSchema.safeParse(parsed);
-  return result.success ? { file: result.data } : { file: empty, problem: `${file} is not a picks file this agent-shim can read` };
+};
+var DirectoryRuleAlreadyExistsError = class extends CliError {
+  constructor(rulePath) {
+    super(`A directory rule for path "${rulePath}" already exists. Use \`agent-shim rule set\` to change it.`);
+    this.rulePath = rulePath;
+    this.name = "DirectoryRuleAlreadyExistsError";
+  }
+  rulePath;
+};
+function readDirectoryRules(paths) {
+  return readJson(paths.directoryRulesFile, DirectoryRulesSchema) ?? { rules: [] };
 }
-function readStickyPick(fs12, picksFile, directory) {
-  const read = readPicksFile(fs12, picksFile);
-  const entry = read.file.picks[directory];
-  return { ...entry === void 0 ? {} : { sticky: entry }, ...read.problem === void 0 ? {} : { problem: read.problem } };
+function writeDirectoryRules(paths, rules) {
+  const parsed = DirectoryRulesSchema.safeParse(rules);
+  if (!parsed.success) {
+    throw new ConfigValidationError(paths.directoryRulesFile, parsed.error.issues);
+  }
+  writeJsonAtomic(paths.directoryRulesFile, parsed.data);
 }
-function recordStickyPick(fs12, picksFile, directory, identity, nowMs) {
-  const current = readPicksFile(fs12, picksFile).file.picks;
-  const kept = Object.entries(current).filter(([, entry]) => nowMs - Date.parse(entry.at) <= USAGE_RETENTION_MS);
-  const next = { schemaVersion: SCHEMA_VERSION, picks: { ...Object.fromEntries(kept), [directory]: { identity, at: new Date(nowMs).toISOString() } } };
-  fs12.mkdirPrivate(path19.dirname(picksFile));
-  fs12.writeFilePrivate(picksFile, `${JSON.stringify(next, null, 2)}
-`);
+function listDirectoryRules(paths) {
+  return readDirectoryRules(paths).rules;
 }
-
-// src/launcher/pool.ts
-var RESUME_FLAGS = /* @__PURE__ */ new Set(["--continue", "-c", "--resume", "-r"]);
-var TERMINATOR = "--";
-var REASONS_LOGGED = 3;
-function splitMembers(pool, paths, fs12) {
-  const exists = (name) => loadIdentity(paths.identitiesDir, name, fs12) !== void 0;
-  return { present: pool.identities.filter(exists), missing: pool.identities.filter((name) => !exists(name)) };
+function addDirectoryRule(paths, rulePath, options) {
+  if (options.configProfile === void 0 && options.identity === void 0) {
+    throw new DirectoryRuleMissingTargetError();
+  }
+  const current = readDirectoryRules(paths);
+  if (current.rules.some((rule) => rule.path === rulePath)) {
+    throw new DirectoryRuleAlreadyExistsError(rulePath);
+  }
+  const created = buildNewRule(rulePath, options);
+  writeDirectoryRules(paths, { ...current, rules: [...current.rules, created] });
+  return created;
 }
-function isResuming(passthrough) {
-  const end = passthrough.indexOf(TERMINATOR);
-  return (end === -1 ? passthrough : passthrough.slice(0, end)).some((token) => RESUME_FLAGS.has(token));
+function ruleHasEffect(rule) {
+  return rule.configProfile !== void 0 || rule.identity !== void 0 || rule.categories !== void 0 || rule.entries !== void 0 || rule.launch !== void 0;
 }
-function resolvePoolLaunch(params) {
-  const { poolName, log } = params;
-  const pool = params.pools?.[poolName];
-  if (pool === void 0) {
-    return { ok: false, message: `agent-shim: no pool named "${poolName}" (selected via ${params.selectedVia}). Run \`agent-shim pool add ${poolName} --identity <name>...\` first.` };
+function updateDirectoryRule(paths, rulePath, options) {
+  const current = readDirectoryRules(paths);
+  const index = current.rules.findIndex((rule) => rule.path === rulePath);
+  const existing = index === -1 ? void 0 : current.rules[index];
+  if (existing === void 0) {
+    throw new DirectoryRuleNotFoundError(rulePath);
   }
-  const { present: identities, missing } = splitMembers(pool, params.paths, params.fs);
-  for (const name of missing) {
-    log.warn(`agent-shim: pool "${poolName}" names identity "${name}", which does not exist; skipping it`);
+  const { configProfile, identity, ...rest } = existing;
+  const nextConfigProfile = options.configProfile === void 0 ? configProfile : options.configProfile === false ? void 0 : options.configProfile;
+  const nextIdentity = options.identity === void 0 ? identity : options.identity === false ? void 0 : options.identity;
+  const updated = {
+    ...rest,
+    ...nextConfigProfile === void 0 ? {} : { configProfile: nextConfigProfile },
+    ...nextIdentity === void 0 ? {} : { identity: nextIdentity }
+  };
+  if (!ruleHasEffect(updated)) {
+    throw new DirectoryRuleMissingTargetError();
   }
-  if (identities.length === 0) {
-    return { ok: false, message: `agent-shim: no member of pool "${poolName}" is an existing identity.` };
+  const nextRules = [...current.rules];
+  nextRules[index] = updated;
+  writeDirectoryRules(paths, { ...current, rules: nextRules });
+  return updated;
+}
+function buildNewRule(rulePath, options) {
+  return {
+    path: rulePath,
+    ...options.configProfile !== void 0 ? { configProfile: options.configProfile } : {},
+    ...options.identity !== void 0 ? { identity: options.identity } : {}
+  };
+}
+function removeDirectoryRule(paths, rulePath) {
+  const current = readDirectoryRules(paths);
+  const nextRules = current.rules.filter((rule) => rule.path !== rulePath);
+  if (nextRules.length === current.rules.length) {
+    throw new DirectoryRuleNotFoundError(rulePath);
   }
-  const resuming = isResuming(params.passthrough);
-  const stickyRead = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd);
-  if (stickyRead.problem !== void 0) {
-    log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
+  writeDirectoryRules(paths, { ...current, rules: nextRules });
+}
+
+// src/checkReport.ts
+import os4 from "node:os";
+
+// src/launcher/cascade.ts
+import path19 from "node:path";
+
+// src/pathNorm.ts
+import path18 from "node:path";
+function expandTilde(value, home) {
+  if (value === "~") {
+    return home;
   }
-  for (; ; ) {
-    const nowMs = params.now();
-    const ranking = rankPoolFromStore({ fs: params.usageFs, paths: params.paths, identities, nowMs, resuming, ...stickyRead.sticky === void 0 ? {} : { sticky: stickyRead.sticky } });
-    const { pick, earliestReturn } = ranking;
-    if (pick !== void 0) {
-      recordStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd, pick.identity, nowMs);
-      return { ok: true, identity: pick.identity, explanation: `pool ${poolName}: ${pick.reasons.slice(0, REASONS_LOGGED).join("; ")}` };
-    }
-    if (earliestReturn === void 0) {
-      return { ok: false, message: `agent-shim: no member of pool "${poolName}" can be picked.` };
+  if (value.startsWith("~/")) {
+    return path18.join(home, value.slice(2));
+  }
+  return value;
+}
+function normaliseRulePath(rulePath, home) {
+  return path18.resolve(expandTilde(rulePath, home));
+}
+
+// src/launcher/cascade.ts
+var PORTABLE_CONFIG_FILENAME = ".agent-shim.json";
+var PORTABLE_LOCAL_CONFIG_FILENAME = ".agent-shim.local.json";
+function loadCascadeInput(params) {
+  const globalConfig = loadConfigFile(params.paths.globalConfigFile, GlobalConfigSchema, params.read);
+  const directoryRules = loadConfigFile(params.paths.directoryRulesFile, DirectoryRulesSchema, params.read);
+  const loadProfile = (name) => {
+    const filepath = path19.join(params.paths.configProfilesDir, `${name}.json`);
+    const loaded = loadConfigFile(filepath, ConfigProfileSchema, params.read);
+    if (loaded === void 0) {
+      return void 0;
     }
-    const until = new Date(earliestReturn.atMs).toISOString();
-    if (!params.wait) {
+    return { name, profile: loaded.config, entryOrder: loaded.entryOrder, filepath: loaded.filepath };
+  };
+  const limit = globalConfig?.config.walkUpLimit;
+  const dirs = walkDirectoryAncestors(params.cwd, {
+    home: params.home,
+    ...limit === void 0 ? {} : { limit: expandTilde(limit, params.home) },
+    ...params.isReadable === void 0 ? {} : { isReadable: params.isReadable }
+  });
+  const levels = [];
+  for (const dir of dirs) {
+    const portable = loadConfigFile(path19.join(dir, PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(path19.join(dir, LEGACY_PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read);
+    const portableLocal = loadConfigFile(path19.join(dir, PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(path19.join(dir, LEGACY_PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read);
+    const rules = (directoryRules?.config.rules ?? []).map((rule, index) => ({ rule, index })).filter(({ rule }) => normaliseRulePath(rule.path, params.home) === dir).map(({ rule, index }) => {
+      const entryOrder = directoryRules?.ruleEntryOrders[index];
       return {
-        ok: false,
-        message: `agent-shim: every member of pool "${poolName}" is refused right now; the earliest, ${earliestReturn.identity}, returns at ${until} (in ${formatAge(earliestReturn.atMs - nowMs)}). Pass --wait to sleep until then.`
+        rule,
+        ...entryOrder === void 0 ? {} : { entryOrder },
+        filepath: params.paths.directoryRulesFile
       };
+    });
+    if (portable === void 0 && portableLocal === void 0 && rules.length === 0) {
+      continue;
+    }
+    levels.push({
+      dir,
+      ...portable === void 0 ? {} : { portable: { config: portable.config, entryOrder: portable.entryOrder, filepath: portable.filepath } },
+      ...rules.length === 0 ? {} : { rules },
+      ...portableLocal === void 0 ? {} : { portableLocal: { config: portableLocal.config, entryOrder: portableLocal.entryOrder, filepath: portableLocal.filepath } }
+    });
+  }
+  const input = {
+    home: params.home,
+    ...globalConfig === void 0 ? {} : { globalConfig: { config: globalConfig.config, entryOrder: globalConfig.entryOrder, filepath: globalConfig.filepath } },
+    ...params.baseConfigProfile === void 0 ? {} : { baseConfigProfile: params.baseConfigProfile },
+    loadProfile,
+    levels,
+    ...params.cliOverride === void 0 ? {} : { cliOverride: params.cliOverride }
+  };
+  return { input, ...globalConfig === void 0 ? {} : { globalConfig: globalConfig.config } };
+}
+function readDirectorySelections(loaded) {
+  let identity;
+  let configProfile;
+  for (const level of loaded.input.levels ?? []) {
+    for (const source of [level.portable?.config, ...(level.rules ?? []).map((entry) => entry.rule), level.portableLocal?.config]) {
+      if (source === void 0) {
+        continue;
+      }
+      if (source.identity !== void 0) {
+        identity = source.identity;
+      }
+      if (source.configProfile !== void 0) {
+        configProfile = source.configProfile;
+      }
     }
-    log.info(`agent-shim: every member of pool "${poolName}" is refused; waiting until ${until} for ${earliestReturn.identity}`);
-    params.sleep(Math.max(earliestReturn.atMs - nowMs, 0));
   }
+  return { ...identity === void 0 ? {} : { identity }, ...configProfile === void 0 ? {} : { configProfile } };
 }
 
-// src/poolPickReport.ts
-function candidateView(candidate) {
-  return {
-    identity: candidate.identity,
-    class: candidate.class,
-    ...candidate.score === void 0 ? {} : { score: candidate.score },
-    feasible: candidate.feasible,
-    ...candidate.blockedUntilMs === void 0 ? {} : { blockedUntil: new Date(candidate.blockedUntilMs).toISOString() },
-    plan: candidate.plan,
-    reasons: candidate.reasons
-  };
+// src/realCredentialCache.ts
+import { spawnSync } from "node:child_process";
+import fs7 from "node:fs";
+import path20 from "node:path";
+var KEYCHAIN_CACHE_SERVICE = "agent-shim-credential-cache";
+var CACHE_DIR_MODE = 448;
+var CACHE_FILE_MODE = 384;
+function cacheFileNameFor(owner) {
+  return `${owner.replace(/[^A-Za-z0-9._-]/g, "_")}.json`;
 }
-function collectPoolPick(params) {
-  const { present, missing } = splitMembers(params.pool, params.paths, params.fs);
-  const sticky = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.directory);
-  const ranking = rankPoolFromStore({
-    fs: params.usageFs,
-    paths: params.paths,
-    identities: present,
-    nowMs: params.nowMs,
-    resuming: false,
-    ...sticky.sticky === void 0 ? {} : { sticky: sticky.sticky }
-  });
+function parseEntry(raw) {
+  let json;
+  try {
+    json = JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+  const parsed = CachedCredentialSchema.safeParse(json);
+  return parsed.success ? parsed.data : void 0;
+}
+function requireKeychain() {
+  if (process.platform !== "darwin") {
+    throw new Error("the keychain credential store needs macOS; use --credential-cache-store file");
+  }
+}
+function security(args, stdin) {
+  const result = spawnSync("security", args, { encoding: "utf8", ...stdin === void 0 ? {} : { input: stdin }, stdio: ["pipe", "pipe", "ignore"] });
+  return { status: result.status, stdout: result.stdout };
+}
+function createRealCredentialCache(root) {
+  const dir = path20.join(root, "credential-cache");
+  const filePath = (owner) => path20.join(dir, cacheFileNameFor(owner));
   return {
-    pool: params.poolName,
-    directory: params.directory,
-    ...ranking.pick === void 0 ? {} : { pick: ranking.pick.identity },
-    candidates: ranking.candidates.map(candidateView),
-    missing,
-    ...ranking.earliestReturn === void 0 ? {} : { earliestReturn: { identity: ranking.earliestReturn.identity, at: new Date(ranking.earliestReturn.atMs).toISOString() } },
-    ...sticky.problem === void 0 ? {} : { stickyProblem: sticky.problem }
+    read(store, owner) {
+      if (store === "file") {
+        try {
+          return parseEntry(fs7.readFileSync(filePath(owner), "utf8"));
+        } catch {
+          return void 0;
+        }
+      }
+      requireKeychain();
+      const result = security(["find-generic-password", "-s", KEYCHAIN_CACHE_SERVICE, "-a", owner, "-w"]);
+      return result.status === 0 ? parseEntry(Buffer.from(result.stdout.trim(), "base64").toString("utf8")) : void 0;
+    },
+    write(store, owner, entry) {
+      const serialised = JSON.stringify(entry);
+      if (store === "file") {
+        fs7.mkdirSync(dir, { recursive: true, mode: CACHE_DIR_MODE });
+        fs7.chmodSync(dir, CACHE_DIR_MODE);
+        const target = filePath(owner);
+        const temp = `${target}.${String(process.pid)}.tmp`;
+        fs7.writeFileSync(temp, serialised, { mode: CACHE_FILE_MODE });
+        fs7.renameSync(temp, target);
+        return;
+      }
+      requireKeychain();
+      const encoded = Buffer.from(serialised, "utf8").toString("base64");
+      const result = security(["-i"], `add-generic-password -U -s ${KEYCHAIN_CACHE_SERVICE} -a ${JSON.stringify(owner)} -w ${encoded}
+`);
+      if (result.status !== 0) {
+        throw new Error(`could not write the keychain credential cache for ${owner}`);
+      }
+    },
+    remove(store, owner) {
+      if (store === "file") {
+        fs7.rmSync(filePath(owner), { force: true });
+        return;
+      }
+      requireKeychain();
+      security(["delete-generic-password", "-s", KEYCHAIN_CACHE_SERVICE, "-a", owner]);
+    }
   };
 }
+function realCredentialCacheEnv(paths) {
+  return { port: createRealCredentialCache(paths.root), platform: process.platform, now: () => Date.now() };
+}
 
 // src/realPorts.ts
-import { spawn, spawnSync } from "node:child_process";
+import { spawn, spawnSync as spawnSync2 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
-import fs7 from "node:fs";
+import fs8 from "node:fs";
 import os3 from "node:os";
-import path21 from "node:path";
+import path22 from "node:path";
 import { isSea } from "node:sea";
 
 // src/versionDiscovery.ts
 import os2 from "node:os";
-import path20 from "node:path";
+import path21 from "node:path";
 function defaultVersionsDir() {
-  return path20.join(os2.homedir(), ".local", "share", "claude", "versions");
+  return path21.join(os2.homedir(), ".local", "share", "claude", "versions");
 }
 var NUMERIC_DOTTED_VERSION_RE = /^\d+(?:\.\d+)*$/;
 function isNumericDottedVersion(name) {
@@ -6972,7 +7129,7 @@ function discoverClaudeBinary(options) {
   const highestVersion = pickHighestVersion(entries);
   if (highestVersion !== void 0) {
     return {
-      path: path20.join(versionsDir, highestVersion),
+      path: path21.join(versionsDir, highestVersion),
       source: "versions-dir",
       version: highestVersion
     };
@@ -6995,7 +7152,7 @@ function isEnoent3(error) {
 var realFsPort = {
   readFileUtf8(filePath) {
     try {
-      return fs7.readFileSync(filePath, "utf8");
+      return fs8.readFileSync(filePath, "utf8");
     } catch (error) {
       if (isEnoent3(error)) {
         return void 0;
@@ -7006,7 +7163,7 @@ var realFsPort = {
   readConfigFile: cosmiconfigReader(),
   readdir(dirPath) {
     try {
-      return fs7.readdirSync(dirPath);
+      return fs8.readdirSync(dirPath);
     } catch (error) {
       if (isEnoent3(error)) {
         return [];
@@ -7025,7 +7182,7 @@ var realFarmFs = {
   lstat(filePath) {
     let stat;
     try {
-      stat = fs7.lstatSync(filePath);
+      stat = fs8.lstatSync(filePath);
     } catch (error) {
       if (isEnoent3(error)) {
         return void 0;
@@ -7037,7 +7194,7 @@ var realFarmFs = {
   },
   readdir(dirPath) {
     try {
-      return fs7.readdirSync(dirPath);
+      return fs8.readdirSync(dirPath);
     } catch (error) {
       if (isEnoent3(error) || isErrorWithCode(error, "ENOTDIR")) {
         return [];
@@ -7046,23 +7203,23 @@ var realFarmFs = {
     }
   },
   mkdirp(dirPath) {
-    fs7.mkdirSync(dirPath, { recursive: true });
+    fs8.mkdirSync(dirPath, { recursive: true });
   },
   symlink(target, linkPath) {
-    fs7.symlinkSync(target, linkPath);
+    fs8.symlinkSync(target, linkPath);
   },
   rename(from, to) {
-    fs7.renameSync(from, to);
+    fs8.renameSync(from, to);
   },
   removeRecursive(targetPath) {
-    fs7.rmSync(targetPath, { recursive: true, force: true });
+    fs8.rmSync(targetPath, { recursive: true, force: true });
   },
   copyRecursive(from, to) {
-    fs7.cpSync(from, to, { recursive: true, force: true, verbatimSymlinks: true });
+    fs8.cpSync(from, to, { recursive: true, force: true, verbatimSymlinks: true });
   },
   readFileUtf8(filePath) {
     try {
-      return fs7.readFileSync(filePath, "utf8");
+      return fs8.readFileSync(filePath, "utf8");
     } catch (error) {
       if (isEnoent3(error)) {
         return void 0;
@@ -7071,36 +7228,36 @@ var realFarmFs = {
     }
   },
   writeFileUtf8(filePath, contents) {
-    fs7.writeFileSync(filePath, contents, "utf8");
+    fs8.writeFileSync(filePath, contents, "utf8");
   },
   mkdirPrivate(dirPath) {
-    fs7.mkdirSync(dirPath, { recursive: true, mode: OWNER_ONLY_DIR_MODE });
-    fs7.chmodSync(dirPath, OWNER_ONLY_DIR_MODE);
+    fs8.mkdirSync(dirPath, { recursive: true, mode: OWNER_ONLY_DIR_MODE });
+    fs8.chmodSync(dirPath, OWNER_ONLY_DIR_MODE);
   },
   writeFilePrivate(filePath, contents) {
     const temp = `${filePath}.${String(process.pid)}.tmp`;
-    fs7.writeFileSync(temp, contents, { encoding: "utf8", mode: OWNER_ONLY_FILE_MODE });
-    fs7.chmodSync(temp, OWNER_ONLY_FILE_MODE);
-    fs7.renameSync(temp, filePath);
+    fs8.writeFileSync(temp, contents, { encoding: "utf8", mode: OWNER_ONLY_FILE_MODE });
+    fs8.chmodSync(temp, OWNER_ONLY_FILE_MODE);
+    fs8.renameSync(temp, filePath);
   },
   appendFilePrivate(filePath, contents) {
-    const descriptor = fs7.openSync(filePath, "a", OWNER_ONLY_FILE_MODE);
+    const descriptor = fs8.openSync(filePath, "a", OWNER_ONLY_FILE_MODE);
     try {
-      if ((fs7.fstatSync(descriptor).mode & PERMISSION_BITS2) !== OWNER_ONLY_FILE_MODE) {
-        fs7.fchmodSync(descriptor, OWNER_ONLY_FILE_MODE);
+      if ((fs8.fstatSync(descriptor).mode & PERMISSION_BITS2) !== OWNER_ONLY_FILE_MODE) {
+        fs8.fchmodSync(descriptor, OWNER_ONLY_FILE_MODE);
       }
       const bytes = Buffer.from(contents, "utf8");
       let written = 0;
       while (written < bytes.length) {
-        written += fs7.writeSync(descriptor, bytes, written, bytes.length - written);
+        written += fs8.writeSync(descriptor, bytes, written, bytes.length - written);
       }
     } finally {
-      fs7.closeSync(descriptor);
+      fs8.closeSync(descriptor);
     }
   },
   writeFileExclusive(filePath, contents) {
     try {
-      fs7.writeFileSync(filePath, contents, { encoding: "utf8", flag: "wx" });
+      fs8.writeFileSync(filePath, contents, { encoding: "utf8", flag: "wx" });
       return true;
     } catch (error) {
       if (isErrorWithCode(error, "EEXIST")) {
@@ -7111,7 +7268,7 @@ var realFarmFs = {
   },
   hashFile(filePath) {
     try {
-      return createHash5("sha256").update(fs7.readFileSync(filePath)).digest("hex");
+      return createHash5("sha256").update(fs8.readFileSync(filePath)).digest("hex");
     } catch (error) {
       if (isEnoent3(error) || isErrorWithCode(error, "EISDIR")) {
         return void 0;
@@ -7133,7 +7290,7 @@ function realIsProcessAlive(pid) {
   }
 }
 function realIsProcessZombie(pid) {
-  const result = spawnSync("ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
+  const result = spawnSync2("ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
   return result.status === 0 && result.stdout.trim().startsWith("Z");
 }
 function realIsProcessRunning(pid) {
@@ -7141,17 +7298,17 @@ function realIsProcessRunning(pid) {
 }
 var realRunPort = {
   run(command, args) {
-    const result = spawnSync(command, [...args], { encoding: "utf8" });
+    const result = spawnSync2(command, [...args], { encoding: "utf8" });
     return { status: result.status, stdout: result.stdout, stderr: result.stderr };
   }
 };
 function expandHome2(filePath) {
-  return filePath.startsWith("~/") ? path21.join(os3.homedir(), filePath.slice(1)) : filePath;
+  return filePath.startsWith("~/") ? path22.join(os3.homedir(), filePath.slice(1)) : filePath;
 }
 var MACOS_GUI_SESSION_MANAGER = "Aqua";
 function hasDesktopSession() {
   if (process.platform === "darwin") {
-    const result = spawnSync("launchctl", ["managername"], { encoding: "utf8" });
+    const result = spawnSync2("launchctl", ["managername"], { encoding: "utf8" });
     return result.status === 0 && result.stdout.trim() === MACOS_GUI_SESSION_MANAGER;
   }
   if (process.platform === "win32") {
@@ -7165,8 +7322,8 @@ var realCredentialPort = {
     let content;
     let stat;
     try {
-      stat = fs7.statSync(resolved);
-      content = fs7.readFileSync(resolved, "utf8");
+      stat = fs8.statSync(resolved);
+      content = fs8.readFileSync(resolved, "utf8");
     } catch (error) {
       if (isEnoent3(error)) {
         return { found: false };
@@ -7177,7 +7334,7 @@ var realCredentialPort = {
   },
   runCommand(argv, options) {
     const [command, ...args] = argv;
-    const result = spawnSync(command, args, {
+    const result = spawnSync2(command, args, {
       encoding: "utf8",
       timeout: options.timeoutMs,
       stdio: options.interactive ? ["inherit", "pipe", "inherit"] : ["ignore", "pipe", "pipe"]
@@ -7219,8 +7376,8 @@ function spawnDaemonThrough(executable) {
   return (paths, subcommand, logPath) => spawnDetachedDaemon({ command: executable, args: [subcommand] }, paths, subcommand, logPath);
 }
 function spawnDetachedDaemon(invocation, paths, subcommand, logPath) {
-  fs7.mkdirSync(path21.dirname(logPath), { recursive: true });
-  const logFd = fs7.openSync(logPath, "a");
+  fs8.mkdirSync(path22.dirname(logPath), { recursive: true });
+  const logFd = fs8.openSync(logPath, "a");
   try {
     const child = spawn(invocation.command, invocation.args, detachedDaemonSpawnOptions(logFd, { ...process.env, AGENT_SHIM_HOME: paths.root }));
     child.unref();
@@ -7229,7 +7386,7 @@ function spawnDetachedDaemon(invocation, paths, subcommand, logPath) {
     }
     return child.pid;
   } finally {
-    fs7.closeSync(logFd);
+    fs8.closeSync(logFd);
   }
 }
 function spawnHeadroomSupervisor(paths, spawnDaemon) {
@@ -7247,7 +7404,7 @@ var realHeadroomSocketTrust = {
   lstat: (target) => {
     let stat;
     try {
-      stat = fs7.lstatSync(target);
+      stat = fs8.lstatSync(target);
     } catch (error) {
       if (isEnoent3(error)) {
         return void 0;
@@ -7293,7 +7450,7 @@ var EXECUTE_BITS_MASK = 73;
 function listVersionsDir(dir) {
   let entries;
   try {
-    entries = fs7.readdirSync(dir, { withFileTypes: true });
+    entries = fs8.readdirSync(dir, { withFileTypes: true });
   } catch (error) {
     if (isEnoent3(error)) {
       return [];
@@ -7301,8 +7458,8 @@ function listVersionsDir(dir) {
     throw error;
   }
   return entries.filter((entry) => entry.isFile()).map((entry) => {
-    const fullPath = path21.join(dir, entry.name);
-    const stat = fs7.statSync(fullPath);
+    const fullPath = path22.join(dir, entry.name);
+    const stat = fs8.statSync(fullPath);
     return {
       name: entry.name,
       isFile: true,
@@ -7316,7 +7473,7 @@ function windowsPathExtensions(pathext) {
   return (pathext ?? WINDOWS_DEFAULT_PATHEXT).split(";").map((ext) => ext.trim()).filter((ext) => ext.length > 0);
 }
 function resolveExecutableCandidate(dir, name, env) {
-  const candidate = path21.join(dir, name);
+  const candidate = path22.join(dir, name);
   if (env.platform === "win32") {
     const extensions = windowsPathExtensions(env.pathext);
     const alreadyHasRecognisedExtension = extensions.some((ext) => candidate.toLowerCase().endsWith(ext.toLowerCase()));
@@ -7336,7 +7493,7 @@ function resolveExecutableCandidate(dir, name, env) {
 }
 function realStatFileMode(candidate) {
   try {
-    const stat = fs7.statSync(candidate);
+    const stat = fs8.statSync(candidate);
     return stat.isFile() ? stat.mode : void 0;
   } catch (error) {
     if (isEnoent3(error)) {
@@ -7365,13 +7522,13 @@ function resolveOwnExecutablePath(env) {
   if (env.argv1 !== void 0 && !env.argv1.includes("/") && !env.argv1.includes("\\")) {
     return searchPathForExecutable(env.pathDirs, env.argv1, env.findExecutableInDir) ?? env.execPath;
   }
-  const candidate = env.argv1 === void 0 ? env.execPath : path21.resolve(env.cwd, env.argv1);
-  const candidateDir = path21.dirname(candidate);
-  const candidateDirOnPath = env.pathDirs.some((dir) => path21.resolve(dir) === candidateDir);
+  const candidate = env.argv1 === void 0 ? env.execPath : path22.resolve(env.cwd, env.argv1);
+  const candidateDir = path22.dirname(candidate);
+  const candidateDirOnPath = env.pathDirs.some((dir) => path22.resolve(dir) === candidateDir);
   if (candidateDirOnPath) {
     return candidate;
   }
-  const viaPath = searchPathForExecutable(env.pathDirs, path21.basename(candidate), env.findExecutableInDir);
+  const viaPath = searchPathForExecutable(env.pathDirs, path22.basename(candidate), env.findExecutableInDir);
   return viaPath ?? candidate;
 }
 function realOwnExecutablePath() {
@@ -7379,7 +7536,7 @@ function realOwnExecutablePath() {
     argv1: process.argv[1],
     execPath: process.execPath,
     cwd: process.cwd(),
-    pathDirs: (process.env.PATH ?? "").split(path21.delimiter).filter((dir) => dir !== ""),
+    pathDirs: (process.env.PATH ?? "").split(path22.delimiter).filter((dir) => dir !== ""),
     findExecutableInDir
   });
 }
@@ -7392,15 +7549,15 @@ function realContentSourcePath() {
 function realResolveClaudeBinary(isOwnBinary) {
   return () => discoverClaudeBinary({
     listVersionsDir,
-    pathDirs: (process.env.PATH ?? "").split(path21.delimiter).filter((dir) => dir !== ""),
+    pathDirs: (process.env.PATH ?? "").split(path22.delimiter).filter((dir) => dir !== ""),
     findExecutableInDir,
     isOwnBinary
   });
 }
 
 // src/checkReport.ts
-import path22 from "node:path";
-import { z as z10 } from "zod";
+import path23 from "node:path";
+import { z as z12 } from "zod";
 
 // src/cli/bool.ts
 function parseBoolWord(input) {
@@ -7515,9 +7672,9 @@ function lookupKeychainService(run, farmRoot) {
     note: serviceName === void 0 ? `A Keychain entry was found for account "${farmRoot}" but its service name could not be parsed from security's output.` : `Keychain service name for this identity: "${serviceName}".`
   };
 }
-var SettingsSecretsShapeSchema = z10.looseObject({
-  env: z10.record(z10.string(), z10.unknown()).optional(),
-  hooks: z10.record(z10.string(), z10.array(z10.unknown())).optional()
+var SettingsSecretsShapeSchema = z12.looseObject({
+  env: z12.record(z12.string(), z12.unknown()).optional(),
+  hooks: z12.record(z12.string(), z12.array(z12.unknown())).optional()
 });
 function hookCommandCountOf(group) {
   if (typeof group !== "object" || group === null) {
@@ -7569,14 +7726,23 @@ function inspectSettingsExposure(params) {
   }
   return reports;
 }
-function buildCredentialReport(provider, identity) {
+function cachedState(cacheEnv, owner, block) {
+  if (cacheEnv === void 0 || block.cache === void 0) {
+    return void 0;
+  }
+  return describeCachedCredential({ port: cacheEnv.port, platform: cacheEnv.platform, owner, cache: block.cache, nowMs: cacheEnv.now() });
+}
+function buildCredentialReport(provider, identity, identityName, cacheEnv) {
   const identityCredential = identity?.credential === void 0 ? void 0 : summariseCredential(identity.credential);
+  const identityCached = identity?.credential === void 0 || identityName === void 0 ? void 0 : cachedState(cacheEnv, `identity ${identityName}`, identity.credential);
+  const providerCached = provider?.definition === void 0 ? void 0 : cachedState(cacheEnv, `provider ${provider.name}`, provider.definition.credential);
   return {
     applies: provider !== void 0 ? "provider" : identityCredential !== void 0 ? "identity" : "stored-login",
     ...provider === void 0 ? {} : {
-      provider: provider.problem === void 0 ? { name: provider.name, credential: summariseCredential(provider.definition.credential) } : { name: provider.name, problem: provider.problem }
+      provider: provider.problem === void 0 ? { name: provider.name, credential: summariseCredential(provider.definition.credential), ...providerCached === void 0 ? {} : { cached: providerCached } } : { name: provider.name, problem: provider.problem }
     },
-    ...identityCredential === void 0 ? {} : { identity: identityCredential }
+    ...identityCredential === void 0 ? {} : { identity: identityCredential },
+    ...identityCached === void 0 ? {} : { identityCached }
   };
 }
 function runCheck(params) {
@@ -7615,7 +7781,7 @@ function runCheck(params) {
     ambientCredential,
     ...keychain === void 0 ? {} : { keychain },
     settingsExposure,
-    credential: buildCredentialReport(params.provider, params.identity)
+    credential: buildCredentialReport(params.provider, params.identity, params.identityName, params.credentialCache)
   };
 }
 function formatCheckReport(report) {
@@ -7653,12 +7819,12 @@ function formatCheckReport(report) {
   const { credential } = report;
   if (credential.provider !== void 0) {
     lines.push(
-      `  Provider ${credential.provider.name}: ${credential.provider.credential === void 0 ? `unusable: ${credential.provider.problem ?? ""}` : formatCredentialSummary(credential.provider.credential)}`
+      `  Provider ${credential.provider.name}: ${credential.provider.credential === void 0 ? `unusable: ${credential.provider.problem ?? ""}` : formatCredentialSummary(credential.provider.credential)}${credential.provider.cached === void 0 ? "" : `; ${formatCachedCredentialState(credential.provider.cached)}`}`
     );
   }
   if (credential.identity !== void 0) {
     lines.push(
-      `  Identity ${report.identityName ?? "(none)"}: ${formatCredentialSummary(credential.identity)}${credential.applies === "provider" ? " (not used: the provider's credential applies)" : ""}`
+      `  Identity ${report.identityName ?? "(none)"}: ${formatCredentialSummary(credential.identity)}${credential.identityCached === void 0 ? "" : `; ${formatCachedCredentialState(credential.identityCached)}`}${credential.applies === "provider" ? " (not used: the provider's credential applies)" : ""}`
     );
   }
   if (credential.applies === "stored-login") {
@@ -7767,10 +7933,10 @@ function collectCheckReport(params) {
   }).input;
   const providerName = cascadeProviderName(cascade);
   const provider = providerName === void 0 ? void 0 : loadCheckProvider(paths, providerName);
-  const farmRoot = identityDecision.name === void 0 ? void 0 : path22.join(paths.identitiesDir, identityDecision.name);
+  const farmRoot = identityDecision.name === void 0 ? void 0 : path23.join(paths.identitiesDir, identityDecision.name);
   const settingsFiles = {
-    "settings.json": realFsPort.readFileUtf8(path22.join(claudeHome, "settings.json")),
-    "settings.local.json": realFsPort.readFileUtf8(path22.join(claudeHome, "settings.local.json"))
+    "settings.json": realFsPort.readFileUtf8(path23.join(claudeHome, "settings.json")),
+    "settings.local.json": realFsPort.readFileUtf8(path23.join(claudeHome, "settings.local.json"))
   };
   const report = runCheck({
     cwd,
@@ -7791,6 +7957,7 @@ function collectCheckReport(params) {
     ...loadedIdentity === void 0 ? {} : { identity: loadedIdentity.config },
     settingsFiles,
     run: realRunPort,
+    credentialCache: realCredentialCacheEnv(paths),
     ...farmRoot === void 0 ? {} : { farmRoot },
     platform: process.platform,
     ...provider === void 0 ? {} : { provider }
@@ -7799,23 +7966,23 @@ function collectCheckReport(params) {
 }
 
 // src/claudeShim.ts
-import fs8 from "node:fs";
-import path23 from "node:path";
-import { z as z11 } from "zod";
-var ClaudeShimStateSchema = z11.strictObject({
-  targetPath: z11.string().min(1),
-  method: z11.enum(["hardlink", "copy"]),
-  installedAtMs: z11.number()
+import fs9 from "node:fs";
+import path24 from "node:path";
+import { z as z13 } from "zod";
+var ClaudeShimStateSchema = z13.strictObject({
+  targetPath: z13.string().min(1),
+  method: z13.enum(["hardlink", "copy"]),
+  installedAtMs: z13.number()
 });
 function commandFilename(ownExecutablePath, commandName) {
   return ownExecutablePath.toLowerCase().endsWith(".exe") ? `${commandName}.exe` : commandName;
 }
 function resolveOwnBinaryCheck(paths, contentSourcePath) {
   const state = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const recordedTarget = state === void 0 ? void 0 : path23.resolve(state.targetPath);
+  const recordedTarget = state === void 0 ? void 0 : path24.resolve(state.targetPath);
   let ownStat;
   return (candidate) => {
-    if (recordedTarget !== void 0 && path23.resolve(candidate) === recordedTarget) {
+    if (recordedTarget !== void 0 && path24.resolve(candidate) === recordedTarget) {
       return true;
     }
     ownStat ??= statOrUndefined(contentSourcePath);
@@ -7829,7 +7996,7 @@ function isEnoent4(error) {
 }
 function statOrUndefined(target) {
   try {
-    return fs8.statSync(target);
+    return fs9.statSync(target);
   } catch (error) {
     if (isEnoent4(error)) {
       return void 0;
@@ -7837,22 +8004,22 @@ function statOrUndefined(target) {
     throw error;
   }
 }
-var nodeLinkFs = { link: fs8.linkSync, copyFile: fs8.copyFileSync, chmod: fs8.chmodSync };
+var nodeLinkFs = { link: fs9.linkSync, copyFile: fs9.copyFileSync, chmod: fs9.chmodSync };
 function findPathShadow(params) {
-  const resolvedTargetDir = path23.resolve(params.targetDir);
+  const resolvedTargetDir = path24.resolve(params.targetDir);
   for (const dir of params.pathDirs) {
     const found = params.findExecutableInDir(dir, params.targetFilename);
     if (found === void 0) {
       continue;
     }
-    return path23.resolve(dir) === resolvedTargetDir ? { status: "ok" } : { status: "shadowed", by: found };
+    return path24.resolve(dir) === resolvedTargetDir ? { status: "ok" } : { status: "shadowed", by: found };
   }
-  return params.pathDirs.some((dir) => path23.resolve(dir) === resolvedTargetDir) ? { status: "ok" } : { status: "not-on-path" };
+  return params.pathDirs.some((dir) => path24.resolve(dir) === resolvedTargetDir) ? { status: "ok" } : { status: "not-on-path" };
 }
 
 // src/doctorReport.ts
-import fs9 from "node:fs";
-import path24 from "node:path";
+import fs10 from "node:fs";
+import path25 from "node:path";
 function refinePathShadow(status, ownExecutablePath, realpath) {
   if (status.status !== "shadowed") {
     return status;
@@ -7876,7 +8043,7 @@ function validateJson(schema, input) {
   return { ok: true, data: result.data };
 }
 function pushPathResolution(push, resolution) {
-  const ownDir = path24.dirname(resolution.ownExecutablePath);
+  const ownDir = path25.dirname(resolution.ownExecutablePath);
   switch (resolution.agentShim.status) {
     case "ok":
       push("path-resolution", "pass", `\`agent-shim\` on PATH resolves to this running executable, ${resolution.ownExecutablePath}.`, "agent-shim");
@@ -7918,7 +8085,14 @@ function pushPathResolution(push, resolution) {
       break;
   }
 }
-function pushProvider(push, entry) {
+function cacheClause(cacheEnv, owner, block) {
+  if (cacheEnv === void 0 || block.cache === void 0) {
+    return { text: "", unreadable: false };
+  }
+  const state = describeCachedCredential({ port: cacheEnv.port, platform: cacheEnv.platform, owner, cache: block.cache, nowMs: cacheEnv.now() });
+  return { text: `; ${formatCachedCredentialState(state)}`, unreadable: state.status === "unreadable" };
+}
+function pushProvider(push, entry, cacheEnv) {
   if (entry.raw === void 0) {
     push("provider", "fail", `${entry.path} is missing.`, entry.name);
     return;
@@ -7940,18 +8114,19 @@ function pushProvider(push, entry) {
     push("provider", "fail", new ConfigValidationError(entry.path, validated.error.issues).message, entry.name);
     return;
   }
-  push("provider", "pass", `${entry.name} is valid (${describeProviderEndpoint(validated.data)}, credential ${describeCredential(validated.data.credential)}).`, entry.name);
+  const cache = cacheClause(cacheEnv, `provider ${entry.name}`, validated.data.credential);
+  push("provider", cache.unreadable ? "fail" : "pass", `${entry.name} is valid (${describeProviderEndpoint(validated.data)}, credential ${describeCredential(validated.data.credential)})${cache.text}.`, entry.name);
 }
 function pushLegacyName(push, params) {
   const legacyVariables = Object.keys(params.env).filter((name) => name.startsWith(LEGACY_ENV_PREFIX) && params.env[name] !== void 0).sort();
-  if (legacyVariables.length === 0 && path24.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
+  if (legacyVariables.length === 0 && path25.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
     push("legacy-name", "pass", "Nothing here still uses the former `claude-use` name.");
     return;
   }
   for (const name of legacyVariables) {
     push("legacy-name", "warn", `${name} is the former name of ${name.replace(LEGACY_ENV_PREFIX, ENV_PREFIX)}. Rename it; the old name still works but is only a fallback.`, name);
   }
-  if (path24.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
+  if (path25.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
     push(
       "legacy-name",
       "warn",
@@ -8033,10 +8208,11 @@ function runDoctor(params) {
       );
     } else {
       const credential = validated.data.credential;
+      const cache = credential === void 0 ? { text: "", unreadable: false } : cacheClause(params.credentialCache, `identity ${entry.name}`, credential);
       push(
         "identity",
-        "pass",
-        `${entry.name} is valid and authenticates with ${credential === void 0 ? "its stored login" : `credential ${describeCredential(credential)}`}.`,
+        cache.unreadable ? "fail" : "pass",
+        `${entry.name} is valid and authenticates with ${credential === void 0 ? "its stored login" : `credential ${describeCredential(credential)}`}${cache.text}.`,
         entry.name
       );
     }
@@ -8056,7 +8232,7 @@ function runDoctor(params) {
     return poolName === void 0 ? validIdentityNames.has(selector) : poolName in pools;
   };
   for (const entry of params.providers) {
-    pushProvider(push, entry);
+    pushProvider(push, entry, params.credentialCache);
   }
   if (params.platform !== "darwin" || params.run === void 0) {
     push("keychain", "pass", "Skipped (not macOS).");
@@ -8250,27 +8426,27 @@ function formatDoctorReport(report) {
 }
 function realpathOrSelf(target) {
   try {
-    return fs9.realpathSync(target);
+    return fs10.realpathSync(target);
   } catch {
     return target;
   }
 }
 function collectDoctorReport(params) {
   const { paths } = params;
-  const identityNames = fs9.existsSync(paths.identitiesDir) ? fs9.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort() : [];
+  const identityNames = fs10.existsSync(paths.identitiesDir) ? fs10.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort() : [];
   const identities = identityNames.map((name) => {
-    const farmRoot = path24.join(paths.identitiesDir, name);
-    const identityPath = path24.join(farmRoot, "identity.json");
+    const farmRoot = path25.join(paths.identitiesDir, name);
+    const identityPath = path25.join(farmRoot, "identity.json");
     return { name, path: identityPath, raw: realFsPort.readFileUtf8(identityPath), farmRoot };
   });
-  const profileNames = fs9.existsSync(paths.configProfilesDir) ? fs9.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
+  const profileNames = fs10.existsSync(paths.configProfilesDir) ? fs10.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const configProfiles = profileNames.map((name) => {
-    const profilePath = path24.join(paths.configProfilesDir, `${name}.json`);
+    const profilePath = path25.join(paths.configProfilesDir, `${name}.json`);
     return { name, path: profilePath, raw: realFsPort.readFileUtf8(profilePath) };
   });
-  const providerNames = fs9.existsSync(paths.providersDir) ? fs9.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
+  const providerNames = fs10.existsSync(paths.providersDir) ? fs10.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const providers = providerNames.map((name) => {
-    const providerPath = path24.join(paths.providersDir, `${name}.json`);
+    const providerPath = path25.join(paths.providersDir, `${name}.json`);
     return { name, path: providerPath, raw: realFsPort.readFileUtf8(providerPath) };
   });
   const ownExecutablePath = realOwnExecutablePath();
@@ -8282,12 +8458,12 @@ function collectDoctorReport(params) {
     binaryDiscovery = { ok: false, message: error instanceof Error ? error.message : String(error) };
   }
   const shimState = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const pathDirs = (params.env.PATH ?? "").split(path24.delimiter).filter((dir) => dir !== "");
+  const pathDirs = (params.env.PATH ?? "").split(path25.delimiter).filter((dir) => dir !== "");
   const claudeShimShadow = shimState === void 0 ? void 0 : refinePathShadow(
     findPathShadow({
       pathDirs,
-      targetDir: path24.dirname(shimState.targetPath),
-      targetFilename: path24.basename(shimState.targetPath),
+      targetDir: path25.dirname(shimState.targetPath),
+      targetFilename: path25.basename(shimState.targetPath),
       findExecutableInDir
     }),
     shimState.targetPath,
@@ -8295,6 +8471,7 @@ function collectDoctorReport(params) {
   );
   const report = runDoctor({
     env: params.env,
+    credentialCache: realCredentialCacheEnv(paths),
     identities,
     configProfiles,
     providers,
@@ -8303,14 +8480,14 @@ function collectDoctorReport(params) {
     categoriesLocal: { path: paths.categoriesLocalFile, raw: realFsPort.readFileUtf8(paths.categoriesLocalFile) },
     activeIdentity: { path: paths.activeIdentityFile, raw: realFsPort.readFileUtf8(paths.activeIdentityFile) },
     binaryDiscovery,
-    claudeShim: { state: shimState, targetExists: shimState !== void 0 && fs9.existsSync(shimState.targetPath) },
+    claudeShim: { state: shimState, targetExists: shimState !== void 0 && fs10.existsSync(shimState.targetPath) },
     rootPath: paths.root,
     pathResolution: {
       ownExecutablePath,
       agentShim: refinePathShadow(
         findPathShadow({
           pathDirs,
-          targetDir: path24.dirname(ownExecutablePath),
+          targetDir: path25.dirname(ownExecutablePath),
           targetFilename: commandFilename(ownExecutablePath, "agent-shim"),
           findExecutableInDir
         }),
@@ -8331,7 +8508,7 @@ function collectDoctorReport(params) {
 
 // src/launcher.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
-import path26 from "node:path";
+import path27 from "node:path";
 
 // src/launcher/argv.ts
 var ConflictingIdentityError = class extends UsageError {
@@ -8583,7 +8760,7 @@ function buildCliOverride(params) {
 }
 
 // src/launcher/flags.ts
-import path25 from "node:path";
+import path26 from "node:path";
 
 // src/headroom/headers.ts
 function mergeAnthropicCustomHeaders(existing, additions) {
@@ -8653,7 +8830,7 @@ function buildEnv(params) {
   const parentCustomHeaders = params.baseEnv.ANTHROPIC_CUSTOM_HEADERS;
   let providerCustomHeaders;
   if (!params.configDirEscapeHatch && params.resolvedIdentityName !== void 0) {
-    env.CLAUDE_CONFIG_DIR = path25.join(params.identitiesDir, params.resolvedIdentityName);
+    env.CLAUDE_CONFIG_DIR = path26.join(params.identitiesDir, params.resolvedIdentityName);
   }
   if (params.provider !== void 0) {
     const providerEnv = params.provider.definition.env ?? {};
@@ -8814,7 +8991,7 @@ function prepareLaunch(params) {
     identityDefaultConfigProfile: loadedIdentity?.config.defaultConfigProfile,
     globalDefaultConfigProfile: params.globalDefaultConfigProfile
   });
-  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs12.readConfigFile(path26.join(paths.configProfilesDir, `${configProfileDecision.name}.json`)) === void 0) {
+  if (configProfileDecision.name !== void 0 && params.allowMissingConfigProfile !== true && fs12.readConfigFile(path27.join(paths.configProfilesDir, `${configProfileDecision.name}.json`)) === void 0) {
     log.error(
       `agent-shim: no configuration profile named "${configProfileDecision.name}" (selected via ${configProfileDecision.source}). Run \`agent-shim profile add ${configProfileDecision.name}\` first.`
     );
@@ -8987,84 +9164,6 @@ function prepareLaunch(params) {
 import os5 from "node:os";
 import { randomUUID as randomUUID5 } from "node:crypto";
 
-// src/realCredentialCache.ts
-import { spawnSync as spawnSync2 } from "node:child_process";
-import fs10 from "node:fs";
-import path27 from "node:path";
-var KEYCHAIN_CACHE_SERVICE = "agent-shim-credential-cache";
-var CACHE_DIR_MODE = 448;
-var CACHE_FILE_MODE = 384;
-function cacheFileNameFor(owner) {
-  return `${owner.replace(/[^A-Za-z0-9._-]/g, "_")}.json`;
-}
-function parseEntry(raw) {
-  let json;
-  try {
-    json = JSON.parse(raw);
-  } catch {
-    return void 0;
-  }
-  const parsed = CachedCredentialSchema.safeParse(json);
-  return parsed.success ? parsed.data : void 0;
-}
-function requireKeychain() {
-  if (process.platform !== "darwin") {
-    throw new Error("the keychain credential store needs macOS; use --credential-cache-store file");
-  }
-}
-function security(args, stdin) {
-  const result = spawnSync2("security", args, { encoding: "utf8", ...stdin === void 0 ? {} : { input: stdin }, stdio: ["pipe", "pipe", "ignore"] });
-  return { status: result.status, stdout: result.stdout };
-}
-function createRealCredentialCache(root) {
-  const dir = path27.join(root, "credential-cache");
-  const filePath = (owner) => path27.join(dir, cacheFileNameFor(owner));
-  return {
-    read(store, owner) {
-      if (store === "file") {
-        try {
-          return parseEntry(fs10.readFileSync(filePath(owner), "utf8"));
-        } catch {
-          return void 0;
-        }
-      }
-      requireKeychain();
-      const result = security(["find-generic-password", "-s", KEYCHAIN_CACHE_SERVICE, "-a", owner, "-w"]);
-      return result.status === 0 ? parseEntry(Buffer.from(result.stdout.trim(), "base64").toString("utf8")) : void 0;
-    },
-    write(store, owner, entry) {
-      const serialised = JSON.stringify(entry);
-      if (store === "file") {
-        fs10.mkdirSync(dir, { recursive: true, mode: CACHE_DIR_MODE });
-        fs10.chmodSync(dir, CACHE_DIR_MODE);
-        const target = filePath(owner);
-        const temp = `${target}.${String(process.pid)}.tmp`;
-        fs10.writeFileSync(temp, serialised, { mode: CACHE_FILE_MODE });
-        fs10.renameSync(temp, target);
-        return;
-      }
-      requireKeychain();
-      const encoded = Buffer.from(serialised, "utf8").toString("base64");
-      const result = security(["-i"], `add-generic-password -U -s ${KEYCHAIN_CACHE_SERVICE} -a ${JSON.stringify(owner)} -w ${encoded}
-`);
-      if (result.status !== 0) {
-        throw new Error(`could not write the keychain credential cache for ${owner}`);
-      }
-    },
-    remove(store, owner) {
-      if (store === "file") {
-        fs10.rmSync(filePath(owner), { force: true });
-        return;
-      }
-      requireKeychain();
-      security(["delete-generic-password", "-s", KEYCHAIN_CACHE_SERVICE, "-a", owner]);
-    }
-  };
-}
-function realCredentialCacheEnv(paths) {
-  return { port: createRealCredentialCache(paths.root), platform: process.platform, now: () => Date.now() };
-}
-
 // src/frontdoor/realFrontDoorPort.ts
 import fs11 from "node:fs";
 
@@ -9328,8 +9427,11 @@ export {
   InvalidProviderNameError,
   LaunchRefusedError,
   LegacyProviderFileError,
+  PROMPT_CACHE_TTL_MS,
+  PlanClassSchema,
   PoolNameSchema,
   PoolNotFoundError,
+  PoolPickReportSchema,
   PoolSchema,
   PortableConfigSchema,
   ProfileAlreadyExistsError,
@@ -9366,16 +9468,19 @@ export {
   checkReportToJson,
   collectCheckReport,
   collectDoctorReport,
+  collectPoolPick,
   createLeafCache,
   createProfile,
   createRcControlHandler,
   createRcSessionTracker,
   describeProviderEndpoint,
   detectAmbientCredential,
+  effectiveWindow,
   ensureCa,
   ensureFrontDoor,
   ensureHeadroom,
   evaluateAmbientCredentialGuard,
+  evaluateWhen,
   formatAmbientCredentialGuardMessage,
   formatCheckReport,
   formatDoctorReport,
@@ -9393,13 +9498,16 @@ export {
   listProfiles,
   listProviders,
   listUsageSnapshots,
+  matchBranch,
   mintLeaf,
   observingRoutedRoute,
   parseConnectTarget,
+  planOf,
   prepareClaudeLaunch,
   prepareLaunch,
   profileExists,
   providerExists,
+  rankPool,
   rcEventWriteResultFromAnswer,
   rcObserverAsPassthrough,
   readActiveIdentity,