agent-shim 8.7.0 → 8.8.0

package/dist/index.mjs

@@ -3323,25 +3323,19 @@ function realConnectEffects() {
         }
       };
     },
-    connectTlsUpstream: async (host, port, clientAlpn) => await new Promise((resolve, reject) => {
-      const dial = (localPort) => {
-        const raw = net2.connect({ host, port, localPort, lookup: realAddressLookup });
-        return tls.connect({ socket: raw, servername: host, ...clientAlpn === void 0 ? {} : { ALPNProtocols: [clientAlpn] } });
-      };
-      const settle = (candidate) => {
-        candidate.once("secureConnect", () => {
-          resolve(candidate);
-        });
-        candidate.once("error", (error) => {
-          if ("code" in error && error.code === "EADDRINUSE") {
-            settle(dial(upstreamLocalPort()));
-            return;
-          }
-          reject(error);
+    connectTlsUpstream: async (host, port, clientAlpn) => {
+      const dialled = await reservedDial({ host, port });
+      if (dialled.error !== null) {
+        throw dialled.error;
+      }
+      return await new Promise((resolve, reject) => {
+        const secure = tls.connect({ socket: dialled.socket, servername: host, ...clientAlpn === void 0 ? {} : { ALPNProtocols: [clientAlpn] } });
+        secure.once("secureConnect", () => {
+          resolve(secure);
         });
-      };
-      settle(dial(upstreamLocalPort()));
-    }),
+        secure.once("error", reject);
+      });
+    },
     connectTcp: async (host, port) => await new Promise((resolve, reject) => {
       const socket = net2.connect({ host, port });
       socket.once("connect", () => {
@@ -4903,547 +4897,380 @@ function listUsageSnapshots(fs12, snapshotsDir) {
   }).sort((left, right) => left.identity.localeCompare(right.identity));
 }
 
-// src/headroom/ensure.ts
-var HEADROOM_START_TIMEOUT_MS = 12e4;
-var HEADROOM_LAUNCHER_POLL_MS = 250;
-var HeadroomStartError = class extends CliError {
-  constructor(message) {
-    super(message);
-    this.name = "HeadroomStartError";
-  }
-};
-function ensureHeadroom(params) {
-  const { paths, ports } = params;
-  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
-  let spawnedSupervisor = false;
-  let awaitingAllowlist = false;
-  for (; ; ) {
-    const state = readHeadroomState(ports.fs, paths.headroomStateFile);
-    if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
-      const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
-      if (daemonUp && state.socketPath !== void 0) {
-        const required = params.requiredAllowlistHash?.();
-        if (required === void 0 || state.allowlistHash === required) {
-          writeSession(ports.fs, paths.headroomSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), supervisorPid: state.supervisorPid });
-          return { socketPath: state.socketPath };
-        }
-        const holders = sessionsForSupervisor(ports.fs, paths.headroomSessionsDir, state.supervisorPid).filter((session) => ports.isRunning(session.pid));
-        if (holders.length > 0) {
-          throw new HeadroomStartError(
-            `the running headroom daemon was started before this launch's front door address and would refuse every request this launch sends through it. It restarts once the launches using it end (pid ${holders.map((session) => String(session.pid)).join(", ")}); end them and launch again, or launch with --no-headroom.`
-          );
-        }
-        awaitingAllowlist = true;
-      }
-      if (state.lastError !== void 0) {
-        throw new HeadroomStartError(
-          `the headroom daemon reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.headroomLogPath})`
-        );
-      }
-    } else if (!spawnedSupervisor) {
-      ports.fs.mkdirp(paths.headroomDir);
-      const created = ports.fs.writeFileExclusive(
-        paths.headroomLockFile,
-        `${JSON.stringify({ pid: params.launcherPid, at: ports.now() })}
-`
-      );
-      if (created) {
-        ports.spawnSupervisor(paths);
-        spawnedSupervisor = true;
-      } else {
-        const lock = readStartLock(ports.fs, paths.headroomLockFile);
-        if (lock === void 0 || !ports.isRunning(lock.pid)) {
-          ports.fs.removeRecursive(paths.headroomLockFile);
-          continue;
-        }
-      }
-    }
-    if (ports.now() >= deadline) {
-      const lastError = state?.lastError;
-      throw new HeadroomStartError(
-        `the headroom daemon did not become ready within ${String(HEADROOM_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (awaitingAllowlist ? " (the running daemon's allowlist does not admit this launch's front door, and it did not restart)" : "") + `. Daemon log: ${paths.headroomLogPath}`
-      );
-    }
-    ports.sleep(HEADROOM_LAUNCHER_POLL_MS);
+// src/usage/preflight.ts
+var MS_PER_SECOND2 = 1e3;
+var SECONDS_PER_MINUTE = 60;
+var MINUTES_PER_HOUR = 60;
+var HOURS_PER_DAY = 24;
+var WARNING_STATUSES = /* @__PURE__ */ new Set(["allowed_warning", "rejected"]);
+function formatAge(ms) {
+  const minutes = Math.floor(ms / (MS_PER_SECOND2 * SECONDS_PER_MINUTE));
+  if (minutes < MINUTES_PER_HOUR) {
+    return `${String(Math.max(minutes, 0))}m`;
   }
+  const hours = Math.floor(minutes / MINUTES_PER_HOUR);
+  return hours < HOURS_PER_DAY ? `${String(hours)}h` : `${String(Math.floor(hours / HOURS_PER_DAY))}d`;
 }
-
-// src/headroom/settings.ts
-import { createHash as createHash4 } from "node:crypto";
-function settingsOf(config) {
+function effectiveWindow(window, nowMs) {
+  const resetsAtMs = window.resetsAt === void 0 ? void 0 : Date.parse(window.resetsAt);
+  if (resetsAtMs !== void 0 && resetsAtMs <= nowMs) {
+    return { reset: true, utilization: 0 };
+  }
   return {
-    ...config.mode === void 0 ? {} : { mode: config.mode },
-    ...config.targetRatio === void 0 ? {} : { targetRatio: config.targetRatio },
-    ...config.ccr === void 0 ? {} : { ccr: config.ccr },
-    ...config.rolloutChannel === void 0 ? {} : { rolloutChannel: config.rolloutChannel },
-    ...config.interceptToolResults === void 0 ? {} : { interceptToolResults: config.interceptToolResults },
-    ...config.readMaturation === void 0 ? {} : { readMaturation: config.readMaturation }
+    reset: false,
+    ...window.utilization === void 0 ? {} : { utilization: window.utilization },
+    ...resetsAtMs === void 0 ? {} : { resetsAtMs },
+    ...window.status === void 0 ? {} : { status: window.status }
   };
 }
-function settingsArgs(settings) {
-  return [
-    ...settings.mode === void 0 ? [] : ["--mode", settings.mode],
-    ...settings.targetRatio === void 0 ? [] : ["--target-ratio", String(settings.targetRatio)],
-    ...settings.ccr === "lossless" ? ["--lossless"] : [],
-    ...settings.ccr === "none" ? ["--no-ccr"] : [],
-    ...settings.interceptToolResults === true ? ["--intercept-tool-results"] : [],
-    ...settings.readMaturation === true ? ["--read-maturation"] : []
+function quotaWarnings(snapshot, provider, nowMs) {
+  const rateLimit = snapshot?.providers[provider]?.rateLimit;
+  const unified = rateLimit?.unified;
+  if (snapshot === void 0 || rateLimit === void 0 || unified === void 0) {
+    return [];
+  }
+  const age = formatAge(nowMs - Date.parse(rateLimit.observedAt));
+  const windows = [
+    { name: "five-hour", window: unified.fiveHour },
+    { name: "seven-day", window: unified.sevenDay }
   ];
-}
-function settingsEnv(settings) {
-  return settings.rolloutChannel === void 0 ? {} : { HEADROOM_ROLLOUT_CHANNEL: settings.rolloutChannel };
-}
-function hashSettings(settings) {
-  return createHash4("sha256").update(JSON.stringify([...settingsArgs(settings), JSON.stringify(settingsEnv(settings))])).digest("hex");
+  return windows.flatMap(({ name, window }) => {
+    const effective = window === void 0 ? void 0 : effectiveWindow(window, nowMs);
+    if (window === void 0 || effective?.status === void 0 || !WARNING_STATUSES.has(effective.status)) {
+      return [];
+    }
+    const reset = window.resetsAt === void 0 ? "" : `, resets ${window.resetsAt}`;
+    const verdict = effective.status === "rejected" ? "exhausted" : "nearly used";
+    return [`agent-shim: identity ${snapshot.identity}: the ${name} quota is ${verdict}${reset} (last seen ${age} ago)`];
+  });
 }
 
-// src/headroom/socket.ts
-import path11 from "node:path";
-var GROUP_OR_OTHER_BITS = 63;
-var OCTAL_RADIX = 8;
-var MODE_DIGITS = 4;
-var HEADROOM_SOCKET_SUFFIX = ".sock";
-var HEADROOM_SOCKET_NAME = /^(\d+)\.sock$/;
-var UNIX_SOCKET_PATH_MAX_BYTES = 103;
-var PLATFORMS_WITHOUT_UNIX_SOCKETS = ["win32"];
-function headroomSocketPath(paths, supervisorPid) {
-  return path11.join(paths.headroomSocketDir, `${String(supervisorPid)}${HEADROOM_SOCKET_SUFFIX}`);
-}
-function platformRefusal(platform) {
-  return PLATFORMS_WITHOUT_UNIX_SOCKETS.includes(platform) ? `headroom routing needs a unix domain socket, which headroom cannot serve on ${platform}; agent-shim never falls back to a TCP port for this hop` : void 0;
-}
-function ownerOnlyRefusal(label, target, stat, expected, uid) {
-  if (stat === void 0) {
-    return `the headroom ${label} ${target} does not exist`;
-  }
-  if (stat.kind === "symlink") {
-    return `the headroom ${label} ${target} is a symlink; it must be the real ${expected === "dir" ? "directory" : "socket"}`;
-  }
-  if (stat.kind !== expected) {
-    return `the headroom ${label} ${target} is not a ${expected === "dir" ? "directory" : "socket"}`;
+// src/usage/plan.ts
+import { z as z6 } from "zod";
+var PlanClassSchema = z6.union([
+  z6.strictObject({
+    kind: z6.literal("subscription"),
+    /** The plan's size as a multiple of the smallest subscription tier (Max 5x is 5, Max 20x is 20). */
+    capacity: z6.number().positive(),
+    /** False when the tier string named no multiplier and no tier this project knows, so `capacity` is the neutral 1 rather than a reading. */
+    recognised: z6.boolean(),
+    /** The tier string the classification rests on, when the account had one. */
+    tier: z6.string().optional()
+  }),
+  z6.strictObject({
+    kind: z6.literal("pay-per-use"),
+    tier: z6.string().optional()
+  })
+]);
+var TIER_MULTIPLIER = /(?:^|_)(\d+)x$/;
+var ZERO_TIER = /(?:^|_)zero$/;
+var BASE_TIER = /(?:^|_)(?:pro|free)$/;
+function planOf(account) {
+  const tier = account?.organizationRateLimitTier ?? account?.userRateLimitTier;
+  const tierField = tier === void 0 ? {} : { tier };
+  if (tier === void 0) {
+    return { kind: "subscription", capacity: 1, recognised: false };
   }
-  if (stat.uid !== uid) {
-    return `the headroom ${label} ${target} is owned by uid ${String(stat.uid)}, not by this user (uid ${String(uid)})`;
+  if (ZERO_TIER.test(tier)) {
+    return { kind: "pay-per-use", ...tierField };
   }
-  if ((stat.mode & GROUP_OR_OTHER_BITS) !== 0) {
-    return `the headroom ${label} ${target} has mode ${stat.mode.toString(OCTAL_RADIX).padStart(MODE_DIGITS, "0")}, which lets other users reach it; it must be accessible to its owner only`;
+  const multiplier = TIER_MULTIPLIER.exec(tier)?.[1];
+  if (multiplier !== void 0) {
+    return { kind: "subscription", capacity: Number(multiplier), recognised: true, ...tierField };
   }
-  return void 0;
+  return { kind: "subscription", capacity: 1, recognised: BASE_TIER.test(tier), ...tierField };
 }
-function prepareHeadroomSocket(fs12, ports, paths, supervisorPid) {
-  const unsupported = platformRefusal(ports.platform);
-  if (unsupported !== void 0) {
-    return { refused: unsupported };
-  }
-  const socketPath = headroomSocketPath(paths, supervisorPid);
-  const length = Buffer.byteLength(socketPath, "utf8");
-  if (length > UNIX_SOCKET_PATH_MAX_BYTES) {
-    return {
-      refused: `the headroom socket path ${socketPath} is ${String(length)} bytes, longer than the ${String(UNIX_SOCKET_PATH_MAX_BYTES)} a unix socket path can hold; set AGENT_SHIM_HOME to a shorter directory`
-    };
-  }
-  if (ports.lstat(paths.headroomSocketDir)?.kind === "symlink") {
-    return { refused: `the headroom socket directory ${paths.headroomSocketDir} is a symlink; it must be the real directory` };
+
+// src/usage/rateLimit.ts
+var MS_PER_SECOND3 = 1e3;
+function epochSecondsToIso(value) {
+  if (value === void 0) {
+    return void 0;
   }
-  fs12.mkdirPrivate(paths.headroomSocketDir);
-  const refusal = ownerOnlyRefusal("socket directory", paths.headroomSocketDir, ports.lstat(paths.headroomSocketDir), "dir", ports.currentUid());
-  return refusal === void 0 ? { socketPath } : { refused: refusal };
+  const seconds = Number(value);
+  return Number.isFinite(seconds) && seconds > 0 ? new Date(seconds * MS_PER_SECOND3).toISOString() : void 0;
 }
-function pruneStaleHeadroomSockets(fs12, paths, isRunning) {
-  const removed = [];
-  for (const name of fs12.readdir(paths.headroomSocketDir)) {
-    const pid = HEADROOM_SOCKET_NAME.exec(name)?.[1];
-    if (pid === void 0 || isRunning(Number.parseInt(pid, 10))) {
-      continue;
-    }
-    fs12.removeRecursive(path11.join(paths.headroomSocketDir, name));
-    removed.push(name);
+function nonNegativeNumber(value) {
+  if (value === void 0 || value.trim() === "") {
+    return void 0;
   }
-  return removed;
+  const parsed = Number(value);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
 }
-
-// src/headroom/source.ts
-import { z as z6 } from "zod";
-var GIT_SPEC_RE = /git\+[^@\s]+(?:@([^\s#]+))?/;
-var COMMIT_SHA_RE = /^[0-9a-f]{40}$/i;
-var DirectUrlSchema = z6.object({ vcs_info: z6.object({ commit_id: z6.string() }) });
-function isMovingGitSource(spec) {
-  const match = GIT_SPEC_RE.exec(spec);
-  if (match === null) {
-    return false;
+var UNIFIED_PREFIX = "anthropic-ratelimit-unified-";
+function unifiedWindow(headers, window) {
+  const utilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}${window}-utilization`]);
+  const resetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}${window}-reset`]);
+  const status = headers[`${UNIFIED_PREFIX}${window}-status`];
+  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
+    return void 0;
   }
-  const ref = match[1];
-  return ref === void 0 || !COMMIT_SHA_RE.test(ref);
-}
-function pinnedGitCommit(spec) {
-  const ref = GIT_SPEC_RE.exec(spec)?.[1];
-  return ref !== void 0 && COMMIT_SHA_RE.test(ref) ? ref.toLowerCase() : void 0;
+  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
 }
-
-// src/headroom/supervisor.ts
-function resolveSupervisorConfig(configured) {
+function parseUnifiedRateLimit(headers) {
+  if (!Object.keys(headers).some((name) => name.startsWith(UNIFIED_PREFIX))) {
+    return void 0;
+  }
+  const status = headers[`${UNIFIED_PREFIX}status`];
+  const fiveHour = unifiedWindow(headers, "5h");
+  const sevenDay = unifiedWindow(headers, "7d");
+  const representativeClaim = headers[`${UNIFIED_PREFIX}representative-claim`];
+  const resetAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}reset`]);
+  const overageStatus = headers[`${UNIFIED_PREFIX}overage-status`];
   return {
-    source: configured.source ?? HEADROOM_DEFAULT_SOURCE,
-    idleShutdownMinutes: configured.idleShutdownMinutes ?? HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES,
-    settings: settingsOf(configured)
+    ...status === void 0 ? {} : { status },
+    ...fiveHour === void 0 ? {} : { fiveHour },
+    ...sevenDay === void 0 ? {} : { sevenDay },
+    ...representativeClaim === void 0 ? {} : { representativeClaim },
+    ...resetAt === void 0 ? {} : { resetAt },
+    ...overageStatus === void 0 ? {} : { overageStatus }
   };
 }
-var HEADROOM_BACKOFF_BASE_MS = 500;
-var HEADROOM_BACKOFF_CAP_MS = 3e4;
-var HEADROOM_START_RETRY_BUDGET = 5;
-var HEADROOM_READY_TIMEOUT_MS = 15e3;
-var HEADROOM_POLL_MS = 1e3;
-var MS_PER_MINUTE2 = 6e4;
-function backoffForAttempt(attempt) {
-  return Math.min(HEADROOM_BACKOFF_CAP_MS, HEADROOM_BACKOFF_BASE_MS * 2 ** (attempt - 1));
+
+// src/usage/scan.ts
+import { z as z7 } from "zod";
+var AnthropicUsageSchema = z7.looseObject({
+  input_tokens: z7.number().int().nonnegative().nullish(),
+  output_tokens: z7.number().int().nonnegative().nullish(),
+  cache_creation_input_tokens: z7.number().int().nonnegative().nullish(),
+  cache_read_input_tokens: z7.number().int().nonnegative().nullish()
+});
+var ErrorObjectSchema = z7.looseObject({
+  type: z7.string().optional(),
+  code: z7.union([z7.string(), z7.number()]).optional(),
+  message: z7.string().optional()
+});
+
+// src/usage/middleware.ts
+var ANTHROPIC_PROVIDER = "anthropic";
+
+// src/usage/pick.ts
+var MS_PER_SECOND4 = 1e3;
+var MS_PER_HOUR = 36e5;
+var HOURS_PER_DAY2 = 24;
+var FIVE_HOURS = 5;
+var PROMPT_CACHE_TTL_HOURS = 1;
+var PERCENT = 100;
+var SEVEN_DAYS = 7;
+var FIVE_HOUR_WINDOW_MS = FIVE_HOURS * MS_PER_HOUR;
+var SEVEN_DAY_WINDOW_MS = SEVEN_DAYS * HOURS_PER_DAY2 * MS_PER_HOUR;
+var PROMPT_CACHE_TTL_MS = PROMPT_CACHE_TTL_HOURS * MS_PER_HOUR;
+var CLASS_ORDER = { scored: 0, unknown: 1, "pay-per-use": 2, ineligible: 3 };
+function unifiedOf(state) {
+  return state?.rateLimit?.unified;
 }
-function versionSatisfies(version, source) {
-  if (version === void 0) {
-    return false;
-  }
-  const specifier = /==|>=|<=|!=|>|<|~=/.exec(source);
-  if (specifier === null) {
-    return true;
-  }
-  const installed = parseVersion(version);
-  const wanted = parseVersion(source.slice(specifier.index + specifier[0].length));
-  if (installed === void 0 || wanted === void 0) {
-    return true;
+function limitBlockedUntil(state, nowMs) {
+  const limit = state?.lastLimit;
+  if (state === void 0 || limit === void 0) {
+    return void 0;
   }
-  const cmp = compareVersions(installed, wanted);
-  switch (specifier[0]) {
-    case "==":
-      return cmp === 0;
-    case "!=":
-      return cmp !== 0;
-    case ">=":
-      return cmp >= 0;
-    case "<=":
-      return cmp <= 0;
-    case ">":
-      return cmp > 0;
-    case "<":
-      return cmp < 0;
-    case "~=":
-      return compareVersions(installed.slice(0, Math.max(0, wanted.length - 1)), wanted.slice(0, Math.max(0, wanted.length - 1))) === 0 && cmp >= 0;
-    default:
-      return true;
+  if (Date.parse(state.lastRequestAt) > Date.parse(limit.observedAt)) {
+    return void 0;
   }
+  const until = limit.resetAt === void 0 ? limit.retryAfterSeconds === void 0 ? void 0 : Date.parse(limit.observedAt) + limit.retryAfterSeconds * MS_PER_SECOND4 : Date.parse(limit.resetAt);
+  return until !== void 0 && until > nowMs ? until : void 0;
 }
-function parseVersion(input) {
-  const match = /(\d+)(\.\d+)*/.exec(input);
-  if (match === null) {
+function windowBlockedUntil(windows) {
+  const resets = windows.flatMap((window) => window.status === "rejected" && window.resetsAtMs !== void 0 ? [window.resetsAtMs] : []);
+  return resets.length === 0 ? void 0 : Math.max(...resets);
+}
+function fiveHourBurn(records) {
+  const points = [];
+  for (const record of records) {
+    const window = record.rateLimitHeaders === void 0 ? void 0 : parseUnifiedRateLimit(record.rateLimitHeaders)?.fiveHour;
+    if (window?.utilization !== void 0 && window.resetsAt !== void 0) {
+      points.push({ resetsAt: window.resetsAt, point: { atMs: Date.parse(record.at), utilization: window.utilization } });
+    }
+  }
+  const latest = points.at(-1)?.resetsAt;
+  const current = points.filter((entry) => entry.resetsAt === latest).map((entry) => entry.point);
+  const first = current.at(0);
+  const last = current.at(-1);
+  if (first === void 0 || last === void 0 || last.atMs <= first.atMs || last.utilization <= first.utilization) {
     return void 0;
   }
-  return match[0].split(".").map((part) => Number.parseInt(part, 10));
+  return (last.utilization - first.utilization) / (last.atMs - first.atMs);
 }
-function compareVersions(a, b) {
-  for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
-    const left = a[index] ?? 0;
-    const right = b[index] ?? 0;
-    if (left !== right) {
-      return left - right;
-    }
+function percent(fraction) {
+  return `${String(Math.round(fraction * PERCENT))}%`;
+}
+function describeWindow(label, window, effective, nowMs) {
+  if (effective.reset) {
+    return `${label} window has reset`;
   }
-  return 0;
+  const used = effective.utilization === void 0 ? "usage unknown" : `${percent(effective.utilization)} used`;
+  const resets = effective.resetsAtMs === void 0 ? "" : `, resets in ${formatAge(effective.resetsAtMs - nowMs)}`;
+  return `${label} ${used}${resets}${window.status === "allowed_warning" ? " (nearly used)" : ""}`;
 }
-var HEADROOM_SUPERVISOR_STILL_RUNNING = -1;
-async function runSupervisor(initialConfig, ports, options = {}) {
-  const { fs: fs12, paths } = ports;
-  let config = initialConfig;
-  const previousState = readHeadroomState(fs12, paths.headroomStateFile);
-  if (previousState?.supervisorPid !== void 0 && previousState.supervisorPid !== ports.ownPid && ports.isRunning(previousState.supervisorPid)) {
-    ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: supervisor ${String(previousState.supervisorPid)} already owns the daemon; exiting`);
-    return 0;
+function capacityOf(plan) {
+  return plan.kind === "subscription" ? plan.capacity : 1;
+}
+function assess(member, nowMs) {
+  const plan = planOf(member.account);
+  const planReasons = plan.kind === "pay-per-use" ? ["billed by use (no plan allowance)"] : plan.recognised ? [`${String(plan.capacity)}x plan`] : [`plan tier ${plan.tier === void 0 ? "not known" : `"${plan.tier}" not recognised`}, counted as 1x`];
+  const base = { identity: member.identity, plan };
+  if (member.readError !== void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: [`usage state unreadable: ${member.readError}`, ...planReasons] } };
   }
-  let installedSource = previousState?.installedSource;
-  const ownsState = () => {
-    const owner = readHeadroomState(fs12, paths.headroomStateFile)?.supervisorPid;
-    return owner === void 0 || owner === ports.ownPid || !ports.isRunning(owner);
-  };
-  const writeOwnState = (state) => {
-    if (!ownsState()) {
-      return false;
-    }
-    writeHeadroomState(fs12, paths.headroomStateFile, state);
-    return true;
-  };
-  const fail = (message) => {
-    if (writeOwnState({ lastError: message })) {
-      fs12.removeRecursive(paths.headroomLockFile);
-    }
-    ports.log(`agent-shim headroom supervisor: ${message}`);
-    return 1;
-  };
-  const ensureInstalled = () => {
-    const version2 = ports.headroomVersion();
-    const versionOk = version2 !== void 0 && versionSatisfies(version2, config.source);
-    const pinned = pinnedGitCommit(config.source);
-    const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
-    if (versionOk && commitOk && (installedSource === void 0 || installedSource === config.source)) {
-      installedSource = config.source;
-      return true;
-    }
-    ports.log(`agent-shim headroom supervisor: installing headroom from ${config.source}`);
-    const result = ports.install(config.source);
-    if (!result.ok) {
-      return false;
+  const state = member.snapshot?.providers[ANTHROPIC_PROVIDER];
+  const unified = unifiedOf(state);
+  if (member.snapshot === void 0 || state === void 0 || unified === void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: ["no usage recorded yet, so its quota is unknown (turn on trackUsage for it)", ...planReasons] } };
+  }
+  const observedAgo = state.rateLimit === void 0 ? "" : ` (last seen ${formatAge(nowMs - Date.parse(state.rateLimit.observedAt))} ago)`;
+  const fiveHourWindow = unified.fiveHour;
+  const sevenDayWindow = unified.sevenDay;
+  const five = fiveHourWindow === void 0 ? void 0 : effectiveWindow(fiveHourWindow, nowMs);
+  const seven = sevenDayWindow === void 0 ? void 0 : effectiveWindow(sevenDayWindow, nowMs);
+  const windowReasons = [
+    ...fiveHourWindow === void 0 || five === void 0 ? [] : [describeWindow("5h", fiveHourWindow, five, nowMs)],
+    ...sevenDayWindow === void 0 || seven === void 0 ? [] : [describeWindow("7d", sevenDayWindow, seven, nowMs)]
+  ];
+  const blockedUntil = Math.max(
+    windowBlockedUntil([five, seven].flatMap((window) => window === void 0 ? [] : [window])) ?? 0,
+    limitBlockedUntil(state, nowMs) ?? 0
+  );
+  if (blockedUntil > nowMs) {
+    if (unified.overageStatus === "allowed") {
+      return { candidate: { ...base, class: "pay-per-use", reasons: [`plan exhausted until ${new Date(blockedUntil).toISOString()}, continues as extra usage`, ...windowReasons, ...planReasons] } };
     }
-    installedSource = config.source;
-    return true;
-  };
-  const socket = prepareHeadroomSocket(fs12, ports.socketTrust, paths, ports.ownPid);
-  if (socket.refused !== void 0) {
-    return fail(socket.refused);
+    return { candidate: { ...base, class: "ineligible", blockedUntilMs: blockedUntil, reasons: [`refused until ${new Date(blockedUntil).toISOString()} (in ${formatAge(blockedUntil - nowMs)})`, ...windowReasons, ...planReasons] } };
   }
-  const { socketPath } = socket;
-  pruneStaleHeadroomSockets(fs12, paths, ports.isRunning);
-  if (!ensureInstalled()) {
-    return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+  if (plan.kind === "pay-per-use" || fiveHourWindow === void 0 && sevenDayWindow === void 0) {
+    return { candidate: { ...base, class: "pay-per-use", reasons: [...plan.kind === "pay-per-use" ? planReasons : ["no plan windows reported, so usage bills as extra usage"]] } };
   }
-  const version = ports.headroomVersion() ?? "unknown";
-  writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
-  ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: managing headroom on allowlist [${allowlistOf(ports).join(", ")}]`);
-  const orphanPid = previousState?.headroomPid;
-  if (orphanPid !== void 0 && ports.isRunning(orphanPid)) {
-    ports.log(`agent-shim headroom supervisor: stopping daemon pid ${String(orphanPid)} left behind by the previous supervisor`);
-    ports.stopProcess(orphanPid);
+  const basis = seven?.utilization !== void 0 ? { window: seven, windowMs: SEVEN_DAY_WINDOW_MS } : five?.utilization !== void 0 ? { window: five, windowMs: FIVE_HOUR_WINDOW_MS } : void 0;
+  if (basis?.window.utilization === void 0) {
+    return { candidate: { ...base, class: "unknown", reasons: ["quota windows reported no utilisation", ...windowReasons, ...planReasons] } };
   }
-  let headroomPid;
-  let runningHash;
-  let runningSettingsHash;
-  let consecutiveFailures = 0;
-  let idleSince;
-  let superseded = false;
-  let ticks = 0;
-  for (; ; ) {
-    if (options.tickLimit !== void 0 && ticks >= options.tickLimit) {
-      return HEADROOM_SUPERVISOR_STILL_RUNNING;
+  const remaining = Math.max(0, 1 - basis.window.utilization);
+  const untilResetMs = basis.window.resetsAtMs === void 0 ? basis.windowMs : Math.max(basis.window.resetsAtMs - nowMs, MS_PER_SECOND4);
+  const score = remaining * plan.capacity / (untilResetMs / MS_PER_HOUR);
+  const fiveRemaining = five?.utilization === void 0 ? void 0 : Math.max(0, 1 - five.utilization);
+  const fiveUntil = five?.resetsAtMs === void 0 ? FIVE_HOUR_WINDOW_MS : Math.max(five.resetsAtMs - nowMs, MS_PER_SECOND4);
+  const burn = fiveHourBurn(member.records);
+  return {
+    candidate: { ...base, class: "scored", score, reasons: [...windowReasons.map((reason, index) => index === windowReasons.length - 1 ? `${reason}${observedAgo}` : reason), ...planReasons] },
+    ...fiveRemaining === void 0 ? {} : { fiveHour: { remaining: fiveRemaining, untilResetMs: fiveUntil } },
+    ...burn === void 0 ? {} : { burn }
+  };
+}
+function rankPool(input) {
+  const { members, nowMs } = input;
+  const assessments = members.map((member) => assess(member, nowMs));
+  const demands = assessments.flatMap(({ candidate, burn }) => burn === void 0 ? [] : [burn * capacityOf(candidate.plan)]);
+  const sharedDemand = demands.length === 0 ? void 0 : Math.max(...demands);
+  const candidates = assessments.map((assessment) => {
+    const { candidate, fiveHour, burn } = assessment;
+    const pace = burn ?? (sharedDemand === void 0 ? void 0 : sharedDemand / capacityOf(candidate.plan));
+    if (candidate.class !== "scored" || fiveHour === void 0 || pace === void 0) {
+      return { ...candidate, feasible: true };
     }
-    ticks += 1;
-    config = ports.readConfig();
-    const settingsHash = hashSettings(config.settings);
-    const allowlist = allowlistOf(ports);
-    const allowlistHash = hashAllowlist(allowlist);
-    pruneDeadSessions(fs12, paths.headroomSessionsDir, ports.isRunning);
-    const ownsNow = ownsState();
-    if (!ownsNow && !superseded) {
-      ports.log("agent-shim headroom supervisor: another supervisor now owns the state file; serving this daemon's own sessions until they end");
+    const runsDryInMs = fiveHour.remaining / pace;
+    if (runsDryInMs >= fiveHour.untilResetMs) {
+      return { ...candidate, feasible: true };
     }
-    superseded = !ownsNow;
-    const crashed = headroomPid !== void 0 && !ports.isRunning(headroomPid);
-    if (headroomPid === void 0 || crashed) {
-      if (crashed) {
-        ports.log(`agent-shim headroom supervisor: headroom pid ${String(headroomPid)} died`);
-        headroomPid = void 0;
-        runningHash = void 0;
-        runningSettingsHash = void 0;
-        writeOwnState({
-          supervisorPid: ports.ownPid,
-          version,
-          installedSource
-        });
-      }
-      if (consecutiveFailures >= HEADROOM_START_RETRY_BUDGET) {
-        return fail(`headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up`);
-      }
-      if (installedSource !== config.source && !ensureInstalled()) {
-        return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
-      }
-      const pid = ports.spawnHeadroom(socketPath, allowlist, config.settings);
-      const ready = await waitUntilReady(ports, socketPath);
-      if (ready) {
-        consecutiveFailures = 0;
-        headroomPid = pid;
-        runningHash = allowlistHash;
-        runningSettingsHash = settingsHash;
-        const recorded = writeOwnState({
-          supervisorPid: ports.ownPid,
-          headroomPid: pid,
-          socketPath,
-          version,
-          allowlistHash,
-          settingsHash,
-          installedSource: config.source
-        });
-        if (recorded) {
-          fs12.removeRecursive(paths.headroomLockFile);
-        }
-        idleSince = void 0;
-        ports.log(`agent-shim headroom supervisor: headroom pid ${String(pid)} ready on unix socket ${socketPath}`);
-      } else {
-        ports.stopProcess(pid);
-        consecutiveFailures += 1;
-        ports.log(
-          `agent-shim headroom supervisor: headroom did not become ready on unix socket ${socketPath} (attempt ${String(consecutiveFailures)} of ${String(HEADROOM_START_RETRY_BUDGET)})`
-        );
-        await ports.sleep(backoffForAttempt(consecutiveFailures));
-        continue;
-      }
-    } else {
-      if (runningHash !== allowlistHash || runningSettingsHash !== settingsHash || installedSource !== config.source) {
-        if (sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid).length === 0) {
-          ports.log("agent-shim headroom supervisor: configuration drifted and no sessions are live; restarting headroom");
-          ports.stopProcess(headroomPid);
-          headroomPid = void 0;
-          runningHash = void 0;
-          runningSettingsHash = void 0;
-          continue;
-        }
-      }
-      const sessions = sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid);
-      if (sessions.length === 0) {
-        idleSince ??= ports.now();
-        const idleMs = ports.now() - idleSince;
-        if (idleMs >= config.idleShutdownMinutes * MS_PER_MINUTE2) {
-          ports.log(
-            `agent-shim headroom supervisor: no sessions for ${String(config.idleShutdownMinutes)} minute(s); stopping headroom and exiting`
-          );
-          ports.stopProcess(headroomPid);
-          writeOwnState({ version });
-          return 0;
-        }
-      } else {
-        idleSince = void 0;
-      }
-    }
-    await ports.sleep(HEADROOM_POLL_MS);
-  }
-}
-function currentHeadroomAllowlist(fs12, paths) {
-  const providers = readAllProviders(fs12, paths.providersDir).map((entry) => entry.provider);
-  return headroomAllowlist(headroomUpstreams(providers, frontDoorOrigin(readFrontDoorState(fs12, paths.frontdoorStateFile))));
-}
-function allowlistOf(ports) {
-  return currentHeadroomAllowlist(ports.fs, ports.paths);
-}
-async function waitUntilReady(ports, socketPath) {
-  const deadline = ports.now() + HEADROOM_READY_TIMEOUT_MS;
-  for (; ; ) {
-    if (await ports.ready(socketPath)) {
-      return true;
-    }
-    if (ports.now() >= deadline) {
-      return false;
-    }
-    await ports.sleep(HEADROOM_POLL_MS);
-  }
-}
-
-// src/launcher/guard.ts
-var AMBIENT_CREDENTIAL_VARS = [
-  "ANTHROPIC_API_KEY",
-  "ANTHROPIC_AUTH_TOKEN",
-  "CLAUDE_CODE_OAUTH_TOKEN",
-  "CLAUDE_CODE_USE_BEDROCK",
-  "CLAUDE_CODE_USE_VERTEX",
-  "CLAUDE_CODE_USE_FOUNDRY"
-];
-function detectAmbientCredential(env, injected) {
-  for (const variable of AMBIENT_CREDENTIAL_VARS) {
-    const value = env[variable];
-    if (value === void 0 || value === "") {
-      continue;
-    }
-    if (injected?.variable === variable && value === injected.token) {
-      continue;
+    return { ...candidate, feasible: false, reasons: [`5h window would run dry in ${formatAge(runsDryInMs)}, before it resets in ${formatAge(fiveHour.untilResetMs)}`, ...candidate.reasons] };
+  });
+  const ordered = [...candidates].sort(
+    (left, right) => CLASS_ORDER[left.class] - CLASS_ORDER[right.class] || Number(right.feasible) - Number(left.feasible) || (right.score ?? 0) - (left.score ?? 0) || left.identity.localeCompare(right.identity)
+  );
+  const sticky = input.sticky;
+  const stickyIndex = sticky === void 0 ? -1 : ordered.findIndex((candidate) => candidate.identity === sticky.identity);
+  const stickyCandidate = ordered[stickyIndex];
+  if (sticky !== void 0 && stickyCandidate?.class === "scored" && stickyCandidate.feasible) {
+    const ageMs = nowMs - Date.parse(sticky.at);
+    const warm = ageMs <= PROMPT_CACHE_TTL_MS;
+    if (input.resuming || warm) {
+      const why = warm ? `used here ${formatAge(ageMs)} ago, prompt cache still warm` : "resuming a conversation started on this account";
+      ordered.splice(stickyIndex, 1);
+      ordered.unshift({ ...stickyCandidate, reasons: [why, ...stickyCandidate.reasons] });
     }
-    return { variable };
-  }
-  return void 0;
-}
-function formatAmbientCredentialGuardMessage(variable, identityName) {
-  const identitySetCommand = identityName === void 0 ? "agent-shim identity set <name> --allow-ambient-credential" : `agent-shim identity set ${identityName} --allow-ambient-credential`;
-  return [
-    `error: ${variable} is set in the environment. This identity's isolated`,
-    "credential would be bypassed \u2014 every identity authenticates as this same key",
-    "while it's set. Unset it, or if this is deliberate, opt in per-launch with",
-    "AGENT_SHIM_ALLOW_AMBIENT_CREDENTIAL=1, or persistently for this identity with",
-    `\`${identitySetCommand}\`.`
-  ].join("\n");
-}
-function evaluateAmbientCredentialGuard(params) {
-  const detected = detectAmbientCredential(params.env, params.injectedCredential);
-  if (detected === void 0) {
-    return { ok: true };
-  }
-  if (params.allowAmbientCredentialOverride || params.allowAmbientCredential || params.providerSelected === true) {
-    return { ok: true };
   }
+  const pick = ordered.find((candidate) => candidate.class !== "ineligible");
+  const returns = ordered.flatMap((candidate) => candidate.blockedUntilMs === void 0 ? [] : [{ identity: candidate.identity, atMs: candidate.blockedUntilMs }]);
+  const earliestReturn = returns.length === 0 ? void 0 : returns.reduce((soonest, entry) => entry.atMs < soonest.atMs ? entry : soonest);
   return {
-    ok: false,
-    variable: detected.variable,
-    message: formatAmbientCredentialGuardMessage(detected.variable, params.identityName)
+    candidates: ordered,
+    ...pick === void 0 ? { ...earliestReturn === void 0 ? {} : { earliestReturn } } : { pick }
   };
 }
 
-// src/paths.ts
-import fs3 from "node:fs";
-import os from "node:os";
-import path12 from "node:path";
-function resolveAgentShimHome(env = process.env, home = os.homedir(), isDirectory = isExistingDirectory) {
-  const fromEnv = env.AGENT_SHIM_HOME;
-  if (fromEnv !== void 0 && fromEnv !== "") {
-    return fromEnv;
-  }
-  const current = path12.join(home, HOME_DIRNAME);
-  const legacy = path12.join(home, LEGACY_HOME_DIRNAME);
-  return !isDirectory(current) && isDirectory(legacy) ? legacy : current;
+// src/usage/poolPick.ts
+import path11 from "node:path";
+import { z as z8 } from "zod";
+
+// src/usage/store.ts
+var DAY_MS2 = 864e5;
+var DAYS_IN_WEEK = 7;
+var USAGE_RETENTION_MS = DAYS_IN_WEEK * DAY_MS2;
+
+// src/usage/poolPick.ts
+var SCHEMA_VERSION = 1;
+var PickEntrySchema = z8.strictObject({ identity: z8.string().min(1), at: z8.iso.datetime() });
+var PicksFileSchema = z8.strictObject({
+  schemaVersion: z8.literal(SCHEMA_VERSION),
+  picks: z8.record(z8.string().min(1), PickEntrySchema)
+});
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
 }
-function isExistingDirectory(candidate) {
-  return fs3.statSync(candidate, { throwIfNoEntry: false })?.isDirectory() ?? false;
+function loadPoolMembers(fs12, paths, identities, nowMs) {
+  const windowStartMs = nowMs - FIVE_HOUR_WINDOW_MS;
+  const log = readUsageLog(fs12, paths.usageLogDir, { sinceMs: windowStartMs });
+  return identities.map((identity) => {
+    const records = log.records.filter((record) => record.identity === identity && record.provider === ANTHROPIC_PROVIDER && Date.parse(record.at) >= windowStartMs);
+    try {
+      const snapshot = readUsageSnapshot(fs12, paths.usageSnapshotsDir, identity);
+      const account = readAccountMetadata(fs12, paths.identitiesDir, identity) ?? snapshot?.account;
+      return { identity, records, ...snapshot === void 0 ? {} : { snapshot }, ...account === void 0 ? {} : { account } };
+    } catch (error) {
+      if (error instanceof UsageSnapshotError || error instanceof AccountMetadataError) {
+        return { identity, records, readError: errorMessage(error) };
+      }
+      throw error;
+    }
+  });
 }
-function resolveClaudeHome() {
-  const fromEnv = process.env.AGENT_SHIM_CLAUDE_HOME;
-  if (fromEnv !== void 0 && fromEnv !== "") {
-    return fromEnv;
+function rankPoolFromStore(params) {
+  return rankPool({
+    members: loadPoolMembers(params.fs, params.paths, params.identities, params.nowMs),
+    nowMs: params.nowMs,
+    resuming: params.resuming,
+    ...params.sticky === void 0 ? {} : { sticky: params.sticky }
+  });
+}
+function readPicksFile(fs12, file) {
+  const empty = { schemaVersion: SCHEMA_VERSION, picks: {} };
+  const raw = fs12.readFileUtf8(file);
+  if (raw === void 0) {
+    return { file: empty };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return { file: empty, problem: `${file} is not valid JSON` };
   }
-  return path12.join(os.homedir(), ".claude");
+  const result = PicksFileSchema.safeParse(parsed);
+  return result.success ? { file: result.data } : { file: empty, problem: `${file} is not a picks file this agent-shim can read` };
 }
-function buildLayoutPaths(root) {
-  return {
-    root,
-    identitiesDir: path12.join(root, "identities"),
-    configProfilesDir: path12.join(root, "config-profiles"),
-    providersDir: path12.join(root, "providers"),
-    directoryRulesFile: path12.join(root, "directory-rules.json"),
-    activeIdentityFile: path12.join(root, "active-identity"),
-    globalConfigFile: path12.join(root, "config.json"),
-    categoriesLocalFile: path12.join(root, "categories.local.json"),
-    claudeShimFile: path12.join(root, "claude-shim.json"),
-    headroomDir: path12.join(root, "headroom"),
-    headroomStateFile: path12.join(root, "headroom", `state.v${String(HEADROOM_STATE_SCHEMA_VERSION)}.json`),
-    headroomSocketDir: path12.join(root, "headroom", "run"),
-    headroomLockFile: path12.join(root, "headroom", "start.lock"),
-    headroomSessionsDir: path12.join(root, "headroom", "sessions"),
-    logsDir: path12.join(root, "logs"),
-    headroomLogPath: path12.join(root, "logs", "headroom.log"),
-    frontdoorDir: path12.join(root, "frontdoor"),
-    frontdoorCaDir: path12.join(root, "frontdoor", "ca"),
-    frontdoorCaCertFile: path12.join(root, "frontdoor", "ca", "ca.pem"),
-    frontdoorCaKeyFile: path12.join(root, "frontdoor", "ca", "ca.key"),
-    frontdoorCaBundlesDir: path12.join(root, "frontdoor", "ca", "bundles"),
-    frontdoorStateFile: path12.join(root, "frontdoor", "state.json"),
-    frontdoorLockFile: path12.join(root, "frontdoor", "start.lock"),
-    frontdoorControlTokenFile: path12.join(root, "frontdoor", "control-token"),
-    frontdoorSessionsDir: path12.join(root, "frontdoor", "sessions"),
-    frontdoorLogPath: path12.join(root, "logs", "frontdoor.log"),
-    usageDir: path12.join(root, "usage"),
-    usageLogDir: path12.join(root, "usage", "log"),
-    usageSnapshotsDir: path12.join(root, "usage", "snapshots"),
-    usagePicksFile: path12.join(root, "usage", "picks.json")
-  };
+function readStickyPick(fs12, picksFile, directory) {
+  const read = readPicksFile(fs12, picksFile);
+  const entry = read.file.picks[directory];
+  return { ...entry === void 0 ? {} : { sticky: entry }, ...read.problem === void 0 ? {} : { problem: read.problem } };
 }
-function resolveLayoutPaths() {
-  return buildLayoutPaths(resolveAgentShimHome());
+function recordStickyPick(fs12, picksFile, directory, identity, nowMs) {
+  const current = readPicksFile(fs12, picksFile).file.picks;
+  const kept = Object.entries(current).filter(([, entry]) => nowMs - Date.parse(entry.at) <= USAGE_RETENTION_MS);
+  const next = { schemaVersion: SCHEMA_VERSION, picks: { ...Object.fromEntries(kept), [directory]: { identity, at: new Date(nowMs).toISOString() } } };
+  fs12.mkdirPrivate(path11.dirname(picksFile));
+  fs12.writeFilePrivate(picksFile, `${JSON.stringify(next, null, 2)}
+`);
 }
 
-// src/identityStore.ts
-import fs5 from "node:fs";
-import path15 from "node:path";
-
 // src/launcher/identity.ts
-import path13 from "node:path";
+import path12 from "node:path";
 function poolNameOf(selector) {
   return selector.startsWith(POOL_SELECTOR_PREFIX) ? selector.slice(POOL_SELECTOR_PREFIX.length) : void 0;
 }
@@ -5492,1471 +5319,1682 @@ function decideConfigProfile(params) {
   return { source: "none" };
 }
 function loadIdentity(identitiesDir, name, fs12) {
-  return loadConfigFile(path13.join(identitiesDir, name, "identity.json"), IdentitySchema, fs12.readConfigFile);
+  return loadConfigFile(path12.join(identitiesDir, name, "identity.json"), IdentitySchema, fs12.readConfigFile);
 }
 
-// src/configProfilesStore.ts
-import fs4 from "node:fs";
-import path14 from "node:path";
-var ProfileNotFoundError = class extends CliError {
-  constructor(profileName) {
-    super(`No configuration profile named "${profileName}". Run \`agent-shim profile add ${profileName}\` first.`);
-    this.profileName = profileName;
-    this.name = "ProfileNotFoundError";
-  }
-  profileName;
-};
-var ProfileAlreadyExistsError = class extends CliError {
-  constructor(profileName) {
-    super(`A configuration profile named "${profileName}" already exists.`);
-    this.profileName = profileName;
-    this.name = "ProfileAlreadyExistsError";
-  }
-  profileName;
-};
-var InvalidCategoryNameError = class extends CliError {
-  constructor(categoryName) {
-    super(`"${categoryName}" is not a category a configuration profile may toggle (runtime, history, knowledge, settings).`);
-    this.categoryName = categoryName;
-    this.name = "InvalidCategoryNameError";
-  }
-  categoryName;
-};
-function profileJsonPath(paths, name) {
-  return path14.join(paths.configProfilesDir, `${name}.json`);
+// src/launcher/pool.ts
+var RESUME_FLAGS = /* @__PURE__ */ new Set(["--continue", "-c", "--resume", "-r"]);
+var TERMINATOR = "--";
+var REASONS_LOGGED = 3;
+function splitMembers(pool, paths, fs12) {
+  const exists = (name) => loadIdentity(paths.identitiesDir, name, fs12) !== void 0;
+  return { present: pool.identities.filter(exists), missing: pool.identities.filter((name) => !exists(name)) };
 }
-function profileExists(paths, name) {
-  return fs4.existsSync(profileJsonPath(paths, name));
+function isResuming(passthrough) {
+  const end = passthrough.indexOf(TERMINATOR);
+  return (end === -1 ? passthrough : passthrough.slice(0, end)).some((token) => RESUME_FLAGS.has(token));
 }
-function requireProfileExists(paths, name) {
-  if (!profileExists(paths, name)) {
-    throw new ProfileNotFoundError(name);
+function resolvePoolLaunch(params) {
+  const { poolName, log } = params;
+  const pool = params.pools?.[poolName];
+  if (pool === void 0) {
+    return { ok: false, message: `agent-shim: no pool named "${poolName}" (selected via ${params.selectedVia}). Run \`agent-shim pool add ${poolName} --identity <name>...\` first.` };
   }
-}
-function readProfile(paths, name) {
-  return readJson(profileJsonPath(paths, name), ConfigProfileSchema);
-}
-function createProfile(paths, name, extendsList, description) {
-  if (profileExists(paths, name)) {
-    throw new ProfileAlreadyExistsError(name);
+  const { present: identities, missing } = splitMembers(pool, params.paths, params.fs);
+  for (const name of missing) {
+    log.warn(`agent-shim: pool "${poolName}" names identity "${name}", which does not exist; skipping it`);
   }
-  const filePath = profileJsonPath(paths, name);
-  const parsed = ConfigProfileSchema.safeParse({
-    ...description === void 0 ? {} : { description },
-    ...extendsList !== void 0 && extendsList.length > 0 ? { extends: [...extendsList] } : {}
-  });
-  if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+  if (identities.length === 0) {
+    return { ok: false, message: `agent-shim: no member of pool "${poolName}" is an existing identity.` };
   }
-  writeJsonAtomic(filePath, parsed.data);
-  return parsed.data;
-}
-function listProfiles(paths) {
-  if (!fs4.existsSync(paths.configProfilesDir)) {
-    return [];
+  const resuming = isResuming(params.passthrough);
+  const stickyRead = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd);
+  if (stickyRead.problem !== void 0) {
+    log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
   }
-  const names = fs4.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort();
-  const result = [];
-  for (const name of names) {
-    const profile = readProfile(paths, name);
-    if (profile !== void 0) {
-      result.push({ name, profile });
+  for (; ; ) {
+    const nowMs = params.now();
+    const ranking = rankPoolFromStore({ fs: params.usageFs, paths: params.paths, identities, nowMs, resuming, ...stickyRead.sticky === void 0 ? {} : { sticky: stickyRead.sticky } });
+    const { pick, earliestReturn } = ranking;
+    if (pick !== void 0) {
+      recordStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd, pick.identity, nowMs);
+      return { ok: true, identity: pick.identity, explanation: `pool ${poolName}: ${pick.reasons.slice(0, REASONS_LOGGED).join("; ")}` };
     }
-  }
-  return result;
-}
-function globalConfigPath(paths) {
-  return paths.globalConfigFile;
-}
-function readGlobalConfig(paths) {
-  return readJson(globalConfigPath(paths), GlobalConfigSchema);
-}
-function setGlobalDefaultProfile(paths, name) {
-  return applyPatch(
-    globalConfigPath(paths),
-    GlobalConfigSchema,
-    { defaultConfigProfile: name },
-    { defaults: {} }
-  );
-}
-function validateCategoryNames(patch) {
-  for (const key of Object.keys(patch)) {
-    if (!isOverridableCategory(key)) {
-      throw new InvalidCategoryNameError(key);
+    if (earliestReturn === void 0) {
+      return { ok: false, message: `agent-shim: no member of pool "${poolName}" can be picked.` };
     }
+    const until = new Date(earliestReturn.atMs).toISOString();
+    if (!params.wait) {
+      return {
+        ok: false,
+        message: `agent-shim: every member of pool "${poolName}" is refused right now; the earliest, ${earliestReturn.identity}, returns at ${until} (in ${formatAge(earliestReturn.atMs - nowMs)}). Pass --wait to sleep until then.`
+      };
+    }
+    log.info(`agent-shim: every member of pool "${poolName}" is refused; waiting until ${until} for ${earliestReturn.identity}`);
+    params.sleep(Math.max(earliestReturn.atMs - nowMs, 0));
   }
 }
-function setProfileCategories(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const expandedPatch = expandAllCategoryKey(patch);
-  validateCategoryNames(expandedPatch);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedCategories = { ...existing.categories, ...expandedPatch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { categories: mergedCategories });
-}
-function setProfileEntries(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedEntries = { ...existing.entries, ...patch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { entries: mergedEntries });
-}
-function setProfileLaunchFlags(paths, name, patch) {
-  requireProfileExists(paths, name);
-  const existing = readProfile(paths, name) ?? {};
-  const mergedLaunch = { ...existing.launch, ...patch };
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
-    // Read as `unknown` so the check sees the `undefined` a cleared key holds, which LaunchFlags' optional properties hide from the value type.
-    launch: Object.values(mergedLaunch).every((value) => value === void 0) ? void 0 : mergedLaunch
-  });
+
+// src/poolPickReport.ts
+function candidateView(candidate) {
+  return {
+    identity: candidate.identity,
+    class: candidate.class,
+    ...candidate.score === void 0 ? {} : { score: candidate.score },
+    feasible: candidate.feasible,
+    ...candidate.blockedUntilMs === void 0 ? {} : { blockedUntil: new Date(candidate.blockedUntilMs).toISOString() },
+    plan: candidate.plan,
+    reasons: [...candidate.reasons]
+  };
 }
-function setProfileMetadata(paths, name, patch) {
-  requireProfileExists(paths, name);
-  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
-    ...patch.extends === void 0 ? {} : { extends: patch.extends.length === 0 ? void 0 : [...patch.extends] },
-    ...patch.description === void 0 ? {} : { description: patch.description === false ? void 0 : patch.description }
+function collectPoolPick(params) {
+  const { present, missing } = splitMembers(params.pool, params.paths, params.fs);
+  const sticky = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.directory);
+  const ranking = rankPoolFromStore({
+    fs: params.usageFs,
+    paths: params.paths,
+    identities: present,
+    nowMs: params.nowMs,
+    resuming: false,
+    ...sticky.sticky === void 0 ? {} : { sticky: sticky.sticky }
   });
-}
-function removeProfile(paths, name) {
-  requireProfileExists(paths, name);
-  fs4.rmSync(profileJsonPath(paths, name));
+  return {
+    pool: params.poolName,
+    directory: params.directory,
+    ...ranking.pick === void 0 ? {} : { pick: ranking.pick.identity },
+    candidates: ranking.candidates.map(candidateView),
+    missing: [...missing],
+    ...ranking.earliestReturn === void 0 ? {} : { earliestReturn: { identity: ranking.earliestReturn.identity, at: new Date(ranking.earliestReturn.atMs).toISOString() } },
+    ...sticky.problem === void 0 ? {} : { stickyProblem: sticky.problem }
+  };
 }
 
-// src/poolStore.ts
-var PoolNotFoundError = class extends CliError {
-  constructor(poolName) {
-    super(`No pool named "${poolName}". Run \`agent-shim pool add ${poolName} --identity <name>...\` first.`);
-    this.poolName = poolName;
-    this.name = "PoolNotFoundError";
-  }
-  poolName;
-};
-var PoolAlreadyExistsError = class extends CliError {
-  constructor(poolName) {
-    super(`A pool named "${poolName}" already exists. Use \`agent-shim pool set ${poolName}\` to change its members.`);
-    this.poolName = poolName;
-    this.name = "PoolAlreadyExistsError";
-  }
-  poolName;
-};
-var InvalidPoolNameError = class extends CliError {
-  constructor(attemptedName) {
-    super(`"${attemptedName}" is not a valid pool name: it must start with a letter or number and may then contain letters, numbers, dots, hyphens and underscores.`);
-    this.attemptedName = attemptedName;
-    this.name = "InvalidPoolNameError";
-  }
-  attemptedName;
-};
-function readPools(paths) {
-  return readGlobalConfig(paths)?.pools ?? {};
-}
-function requirePool(paths, name) {
-  const pool = readPools(paths)[name];
-  if (pool === void 0) {
-    throw new PoolNotFoundError(name);
-  }
-  return pool;
-}
-function writePools(paths, pools) {
-  applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
-}
-function addPool(paths, name, identities) {
-  if (!PoolNameSchema.safeParse(name).success) {
-    throw new InvalidPoolNameError(name);
-  }
-  const pools = readPools(paths);
-  if (pools[name] !== void 0) {
-    throw new PoolAlreadyExistsError(name);
-  }
-  const pool = { identities: [...identities] };
-  writePools(paths, { ...pools, [name]: pool });
-  return pool;
-}
-function setPool(paths, name, identities) {
-  requirePool(paths, name);
-  const pool = { identities: [...identities] };
-  writePools(paths, { ...readPools(paths), [name]: pool });
-  return pool;
-}
-function removePool(paths, name) {
-  requirePool(paths, name);
-  const remaining = Object.fromEntries(Object.entries(readPools(paths)).filter(([existing]) => existing !== name));
-  writePools(paths, remaining);
-}
+// src/usage/pickReportSchema.ts
+import { z as z9 } from "zod";
+var PoolPickCandidateViewSchema = z9.strictObject({
+  identity: z9.string(),
+  /** In pick order: `scored` has usable quota data, `unknown` has none, `pay-per-use` bills by use, `ineligible` is refused right now. */
+  class: z9.enum(["scored", "unknown", "pay-per-use", "ineligible"]),
+  /** Plan-size-weighted remaining quota per hour until its reset; present for `scored` only. */
+  score: z9.number().optional(),
+  /** False when the five-hour window would run dry, at the observed pace, before it resets. */
+  feasible: z9.boolean(),
+  /** When an `ineligible` member can be used again, as an ISO instant. */
+  blockedUntil: z9.iso.datetime().optional(),
+  plan: PlanClassSchema,
+  /** The facts behind the class and score, in the order they matter. */
+  reasons: z9.array(z9.string())
+});
+var PoolPickReportSchema = z9.strictObject({
+  pool: z9.string(),
+  directory: z9.string(),
+  /** The member a launch would run as, absent when every member is refused. */
+  pick: z9.string().optional(),
+  candidates: z9.array(PoolPickCandidateViewSchema),
+  /** Members that name an identity that does not exist; a launch skips them. */
+  missing: z9.array(z9.string()),
+  /** When nothing can be picked, the soonest any member returns. */
+  earliestReturn: z9.strictObject({ identity: z9.string(), at: z9.iso.datetime() }).optional(),
+  /** Why the last-pick record could not be read, when that is the case. */
+  stickyProblem: z9.string().optional()
+});
 
-// src/identityStore.ts
-var IdentityNotFoundError = class extends CliError {
-  constructor(name) {
-    super(`No identity named "${name}". Run \`agent-shim identity add ${name}\` first.`);
-    this.name = name;
-    this.name = "IdentityNotFoundError";
+// src/headroom/ensure.ts
+var HEADROOM_START_TIMEOUT_MS = 12e4;
+var HEADROOM_LAUNCHER_POLL_MS = 250;
+var HeadroomStartError = class extends CliError {
+  constructor(message) {
+    super(message);
+    this.name = "HeadroomStartError";
   }
-  name;
 };
-var IdentityAlreadyExistsError = class extends CliError {
-  constructor(identityName) {
-    super(`An identity named "${identityName}" already exists.`);
-    this.identityName = identityName;
-    this.name = "IdentityAlreadyExistsError";
-  }
-  identityName;
-};
-var InvalidIdentityNameError = class extends CliError {
-  constructor(attemptedName) {
-    super(
-      `"${attemptedName}" is not a valid identity name \u2014 identity names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
-    );
-    this.attemptedName = attemptedName;
-    this.name = "InvalidIdentityNameError";
+function ensureHeadroom(params) {
+  const { paths, ports } = params;
+  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+  let spawnedSupervisor = false;
+  let awaitingAllowlist = false;
+  for (; ; ) {
+    const state = readHeadroomState(ports.fs, paths.headroomStateFile);
+    if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
+      const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
+      if (daemonUp && state.socketPath !== void 0) {
+        const required = params.requiredAllowlistHash?.();
+        if (required === void 0 || state.allowlistHash === required) {
+          writeSession(ports.fs, paths.headroomSessionsDir, { pid: params.launcherPid, startedAt: ports.now(), supervisorPid: state.supervisorPid });
+          return { socketPath: state.socketPath };
+        }
+        const holders = sessionsForSupervisor(ports.fs, paths.headroomSessionsDir, state.supervisorPid).filter((session) => ports.isRunning(session.pid));
+        if (holders.length > 0) {
+          throw new HeadroomStartError(
+            `the running headroom daemon was started before this launch's front door address and would refuse every request this launch sends through it. It restarts once the launches using it end (pid ${holders.map((session) => String(session.pid)).join(", ")}); end them and launch again, or launch with --no-headroom.`
+          );
+        }
+        awaitingAllowlist = true;
+      }
+      if (state.lastError !== void 0) {
+        throw new HeadroomStartError(
+          `the headroom daemon reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.headroomLogPath})`
+        );
+      }
+    } else if (!spawnedSupervisor) {
+      ports.fs.mkdirp(paths.headroomDir);
+      const created = ports.fs.writeFileExclusive(
+        paths.headroomLockFile,
+        `${JSON.stringify({ pid: params.launcherPid, at: ports.now() })}
+`
+      );
+      if (created) {
+        ports.spawnSupervisor(paths);
+        spawnedSupervisor = true;
+      } else {
+        const lock = readStartLock(ports.fs, paths.headroomLockFile);
+        if (lock === void 0 || !ports.isRunning(lock.pid)) {
+          ports.fs.removeRecursive(paths.headroomLockFile);
+          continue;
+        }
+      }
+    }
+    if (ports.now() >= deadline) {
+      const lastError = state?.lastError;
+      throw new HeadroomStartError(
+        `the headroom daemon did not become ready within ${String(HEADROOM_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (awaitingAllowlist ? " (the running daemon's allowlist does not admit this launch's front door, and it did not restart)" : "") + `. Daemon log: ${paths.headroomLogPath}`
+      );
+    }
+    ports.sleep(HEADROOM_LAUNCHER_POLL_MS);
   }
-  attemptedName;
-};
-function identityJsonPath(paths, name) {
-  return path15.join(paths.identitiesDir, name, "identity.json");
 }
-function identityExists(paths, name) {
-  return fs5.existsSync(identityJsonPath(paths, name));
+
+// src/headroom/settings.ts
+import { createHash as createHash4 } from "node:crypto";
+function settingsOf(config) {
+  return {
+    ...config.mode === void 0 ? {} : { mode: config.mode },
+    ...config.targetRatio === void 0 ? {} : { targetRatio: config.targetRatio },
+    ...config.ccr === void 0 ? {} : { ccr: config.ccr },
+    ...config.rolloutChannel === void 0 ? {} : { rolloutChannel: config.rolloutChannel },
+    ...config.interceptToolResults === void 0 ? {} : { interceptToolResults: config.interceptToolResults },
+    ...config.readMaturation === void 0 ? {} : { readMaturation: config.readMaturation }
+  };
 }
-function readIdentity(paths, name) {
-  return readJson(identityJsonPath(paths, name), IdentitySchema);
+function settingsArgs(settings) {
+  return [
+    ...settings.mode === void 0 ? [] : ["--mode", settings.mode],
+    ...settings.targetRatio === void 0 ? [] : ["--target-ratio", String(settings.targetRatio)],
+    ...settings.ccr === "lossless" ? ["--lossless"] : [],
+    ...settings.ccr === "none" ? ["--no-ccr"] : [],
+    ...settings.interceptToolResults === true ? ["--intercept-tool-results"] : [],
+    ...settings.readMaturation === true ? ["--read-maturation"] : []
+  ];
 }
-function addIdentity(paths, name) {
-  if (identityExists(paths, name)) {
-    throw new IdentityAlreadyExistsError(name);
-  }
-  const parsed = IdentitySchema.safeParse({ name, allowAmbientCredential: false });
-  if (!parsed.success) {
-    throw new InvalidIdentityNameError(name);
-  }
-  writeJsonAtomic(identityJsonPath(paths, name), parsed.data);
-  return parsed.data;
+function settingsEnv(settings) {
+  return settings.rolloutChannel === void 0 ? {} : { HEADROOM_ROLLOUT_CHANNEL: settings.rolloutChannel };
 }
-function useIdentity(paths, name) {
-  const pool = poolNameOf(name);
-  if (pool !== void 0) {
-    requirePool(paths, pool);
-  } else if (!identityExists(paths, name)) {
-    throw new IdentityNotFoundError(name);
-  }
-  writeTextAtomic(paths.activeIdentityFile, `${name}
-`);
+function hashSettings(settings) {
+  return createHash4("sha256").update(JSON.stringify([...settingsArgs(settings), JSON.stringify(settingsEnv(settings))])).digest("hex");
 }
-function readActiveIdentity(paths) {
-  if (!fs5.existsSync(paths.activeIdentityFile)) {
-    return void 0;
-  }
-  const raw = fs5.readFileSync(paths.activeIdentityFile, "utf8").trim();
-  return raw === "" ? void 0 : raw;
+
+// src/headroom/socket.ts
+import path13 from "node:path";
+var GROUP_OR_OTHER_BITS = 63;
+var OCTAL_RADIX = 8;
+var MODE_DIGITS = 4;
+var HEADROOM_SOCKET_SUFFIX = ".sock";
+var HEADROOM_SOCKET_NAME = /^(\d+)\.sock$/;
+var UNIX_SOCKET_PATH_MAX_BYTES = 103;
+var PLATFORMS_WITHOUT_UNIX_SOCKETS = ["win32"];
+function headroomSocketPath(paths, supervisorPid) {
+  return path13.join(paths.headroomSocketDir, `${String(supervisorPid)}${HEADROOM_SOCKET_SUFFIX}`);
 }
-function isIdentityDirectoryName(name) {
-  return !name.startsWith(".");
+function platformRefusal(platform) {
+  return PLATFORMS_WITHOUT_UNIX_SOCKETS.includes(platform) ? `headroom routing needs a unix domain socket, which headroom cannot serve on ${platform}; agent-shim never falls back to a TCP port for this hop` : void 0;
 }
-function readIdentityForListing(paths, name) {
-  try {
-    return readIdentity(paths, name);
-  } catch (error) {
-    if (error instanceof ConfigValidationError || error instanceof SyntaxError) {
-      return { problem: error.message.replace(/\s*\n\s*/g, " ") };
-    }
-    throw error;
+function ownerOnlyRefusal(label, target, stat, expected, uid) {
+  if (stat === void 0) {
+    return `the headroom ${label} ${target} does not exist`;
   }
-}
-function listIdentities(paths) {
-  if (!fs5.existsSync(paths.identitiesDir)) {
-    return [];
+  if (stat.kind === "symlink") {
+    return `the headroom ${label} ${target} is a symlink; it must be the real ${expected === "dir" ? "directory" : "socket"}`;
   }
-  const active = readActiveIdentity(paths);
-  const names = fs5.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort();
-  const result = [];
-  for (const name of names) {
-    const read = readIdentityForListing(paths, name);
-    if (read === void 0) {
-      continue;
-    }
-    const isActive = name === active;
-    result.push("problem" in read ? { name, isActive, problem: read.problem } : { name, identity: read, isActive });
+  if (stat.kind !== expected) {
+    return `the headroom ${label} ${target} is not a ${expected === "dir" ? "directory" : "socket"}`;
   }
-  return result;
-}
-function setDefaultConfigProfile(paths, identityName, profileName) {
-  if (!identityExists(paths, identityName)) {
-    throw new IdentityNotFoundError(identityName);
+  if (stat.uid !== uid) {
+    return `the headroom ${label} ${target} is owned by uid ${String(stat.uid)}, not by this user (uid ${String(uid)})`;
   }
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    defaultConfigProfile: profileName
-  });
-}
-function setAllowAmbientCredential(paths, identityName, allow) {
-  if (!identityExists(paths, identityName)) {
-    throw new IdentityNotFoundError(identityName);
+  if ((stat.mode & GROUP_OR_OTHER_BITS) !== 0) {
+    return `the headroom ${label} ${target} has mode ${stat.mode.toString(OCTAL_RADIX).padStart(MODE_DIGITS, "0")}, which lets other users reach it; it must be accessible to its owner only`;
   }
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    allowAmbientCredential: allow
-  });
+  return void 0;
 }
-function setIdentityCredential(paths, identityName, change) {
-  const existing = readIdentity(paths, identityName);
-  if (existing === void 0) {
-    throw new IdentityNotFoundError(identityName);
+function prepareHeadroomSocket(fs12, ports, paths, supervisorPid) {
+  const unsupported = platformRefusal(ports.platform);
+  if (unsupported !== void 0) {
+    return { refused: unsupported };
   }
-  if (change === false) {
-    return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, { credential: void 0 });
+  const socketPath = headroomSocketPath(paths, supervisorPid);
+  const length = Buffer.byteLength(socketPath, "utf8");
+  if (length > UNIX_SOCKET_PATH_MAX_BYTES) {
+    return {
+      refused: `the headroom socket path ${socketPath} is ${String(length)} bytes, longer than the ${String(UNIX_SOCKET_PATH_MAX_BYTES)} a unix socket path can hold; set AGENT_SHIM_HOME to a shorter directory`
+    };
   }
-  const sources = change.sources ?? existing.credential?.sources;
-  if (sources === void 0) {
-    throw new UsageError(`Identity "${identityName}" has no credential yet: pass --credential to give it one before choosing its target.`);
+  if (ports.lstat(paths.headroomSocketDir)?.kind === "symlink") {
+    return { refused: `the headroom socket directory ${paths.headroomSocketDir} is a symlink; it must be the real directory` };
   }
-  const target = change.target ?? existing.credential?.target;
-  const cache = change.cache === void 0 ? existing.credential?.cache : change.cache === false ? void 0 : change.cache;
-  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
-    credential: { sources: [...sources], ...target === void 0 ? {} : { target }, ...cache === void 0 ? {} : { cache } }
-  });
-}
-function belongsToIdentity(entry, name) {
-  return entry === name || entry === path15.basename(identityLockPath("", name)) || entry.startsWith(`.${name}.scratch.`) || entry.startsWith(`.${name}.previous.`);
+  fs12.mkdirPrivate(paths.headroomSocketDir);
+  const refusal = ownerOnlyRefusal("socket directory", paths.headroomSocketDir, ports.lstat(paths.headroomSocketDir), "dir", ports.currentUid());
+  return refusal === void 0 ? { socketPath } : { refused: refusal };
 }
-function removeIdentity(paths, name) {
-  if (!identityExists(paths, name)) {
-    throw new IdentityNotFoundError(name);
-  }
-  for (const entry of fs5.readdirSync(paths.identitiesDir)) {
-    if (belongsToIdentity(entry, name)) {
-      fs5.rmSync(path15.join(paths.identitiesDir, entry), { recursive: true, force: true });
+function pruneStaleHeadroomSockets(fs12, paths, isRunning) {
+  const removed = [];
+  for (const name of fs12.readdir(paths.headroomSocketDir)) {
+    const pid = HEADROOM_SOCKET_NAME.exec(name)?.[1];
+    if (pid === void 0 || isRunning(Number.parseInt(pid, 10))) {
+      continue;
     }
+    fs12.removeRecursive(path13.join(paths.headroomSocketDir, name));
+    removed.push(name);
   }
-  if (readActiveIdentity(paths) === name) {
-    fs5.rmSync(paths.activeIdentityFile);
-  }
+  return removed;
 }
 
-// src/providersStore.ts
-import fs6 from "node:fs";
-import path16 from "node:path";
-
-// src/credentialCache.ts
-import { z as z7 } from "zod";
+// src/headroom/source.ts
+import { z as z10 } from "zod";
+var GIT_SPEC_RE = /git\+[^@\s]+(?:@([^\s#]+))?/;
+var COMMIT_SHA_RE = /^[0-9a-f]{40}$/i;
+var DirectUrlSchema = z10.object({ vcs_info: z10.object({ commit_id: z10.string() }) });
+function isMovingGitSource(spec) {
+  const match = GIT_SPEC_RE.exec(spec);
+  if (match === null) {
+    return false;
+  }
+  const ref = match[1];
+  return ref === void 0 || !COMMIT_SHA_RE.test(ref);
+}
+function pinnedGitCommit(spec) {
+  const ref = GIT_SPEC_RE.exec(spec)?.[1];
+  return ref !== void 0 && COMMIT_SHA_RE.test(ref) ? ref.toLowerCase() : void 0;
+}
 
-// src/usage/preflight.ts
-var MS_PER_SECOND2 = 1e3;
-var SECONDS_PER_MINUTE = 60;
-var MINUTES_PER_HOUR = 60;
-var HOURS_PER_DAY = 24;
-var WARNING_STATUSES = /* @__PURE__ */ new Set(["allowed_warning", "rejected"]);
-function formatAge(ms) {
-  const minutes = Math.floor(ms / (MS_PER_SECOND2 * SECONDS_PER_MINUTE));
-  if (minutes < MINUTES_PER_HOUR) {
-    return `${String(Math.max(minutes, 0))}m`;
-  }
-  const hours = Math.floor(minutes / MINUTES_PER_HOUR);
-  return hours < HOURS_PER_DAY ? `${String(hours)}h` : `${String(Math.floor(hours / HOURS_PER_DAY))}d`;
-}
-function effectiveWindow(window, nowMs) {
-  const resetsAtMs = window.resetsAt === void 0 ? void 0 : Date.parse(window.resetsAt);
-  if (resetsAtMs !== void 0 && resetsAtMs <= nowMs) {
-    return { reset: true, utilization: 0 };
-  }
+// src/headroom/supervisor.ts
+function resolveSupervisorConfig(configured) {
   return {
-    reset: false,
-    ...window.utilization === void 0 ? {} : { utilization: window.utilization },
-    ...resetsAtMs === void 0 ? {} : { resetsAtMs },
-    ...window.status === void 0 ? {} : { status: window.status }
+    source: configured.source ?? HEADROOM_DEFAULT_SOURCE,
+    idleShutdownMinutes: configured.idleShutdownMinutes ?? HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES,
+    settings: settingsOf(configured)
   };
 }
-function quotaWarnings(snapshot, provider, nowMs) {
-  const rateLimit = snapshot?.providers[provider]?.rateLimit;
-  const unified = rateLimit?.unified;
-  if (snapshot === void 0 || rateLimit === void 0 || unified === void 0) {
-    return [];
-  }
-  const age = formatAge(nowMs - Date.parse(rateLimit.observedAt));
-  const windows = [
-    { name: "five-hour", window: unified.fiveHour },
-    { name: "seven-day", window: unified.sevenDay }
-  ];
-  return windows.flatMap(({ name, window }) => {
-    const effective = window === void 0 ? void 0 : effectiveWindow(window, nowMs);
-    if (window === void 0 || effective?.status === void 0 || !WARNING_STATUSES.has(effective.status)) {
-      return [];
-    }
-    const reset = window.resetsAt === void 0 ? "" : `, resets ${window.resetsAt}`;
-    const verdict = effective.status === "rejected" ? "exhausted" : "nearly used";
-    return [`agent-shim: identity ${snapshot.identity}: the ${name} quota is ${verdict}${reset} (last seen ${age} ago)`];
-  });
+var HEADROOM_BACKOFF_BASE_MS = 500;
+var HEADROOM_BACKOFF_CAP_MS = 3e4;
+var HEADROOM_START_RETRY_BUDGET = 5;
+var HEADROOM_READY_TIMEOUT_MS = 15e3;
+var HEADROOM_POLL_MS = 1e3;
+var MS_PER_MINUTE2 = 6e4;
+function backoffForAttempt(attempt) {
+  return Math.min(HEADROOM_BACKOFF_CAP_MS, HEADROOM_BACKOFF_BASE_MS * 2 ** (attempt - 1));
 }
-
-// src/credentialCache.ts
-var MS_PER_UNIT = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
-var CachedCredentialSchema = z7.strictObject({
-  token: z7.string().min(1),
-  fetchedAt: z7.number().int().nonnegative(),
-  source: CredentialSourceSchema
-});
-function effectiveStore(cache, platform) {
-  return cache.store ?? (platform === "darwin" ? "keychain" : "file");
+function versionSatisfies(version, source) {
+  if (version === void 0) {
+    return false;
+  }
+  const specifier = /==|>=|<=|!=|>|<|~=/.exec(source);
+  if (specifier === null) {
+    return true;
+  }
+  const installed = parseVersion(version);
+  const wanted = parseVersion(source.slice(specifier.index + specifier[0].length));
+  if (installed === void 0 || wanted === void 0) {
+    return true;
+  }
+  const cmp = compareVersions(installed, wanted);
+  switch (specifier[0]) {
+    case "==":
+      return cmp === 0;
+    case "!=":
+      return cmp !== 0;
+    case ">=":
+      return cmp >= 0;
+    case "<=":
+      return cmp <= 0;
+    case ">":
+      return cmp > 0;
+    case "<":
+      return cmp < 0;
+    case "~=":
+      return compareVersions(installed.slice(0, Math.max(0, wanted.length - 1)), wanted.slice(0, Math.max(0, wanted.length - 1))) === 0 && cmp >= 0;
+    default:
+      return true;
+  }
 }
-function ttlMs(cache) {
-  if (cache.ttl === void 0) {
+function parseVersion(input) {
+  const match = /(\d+)(\.\d+)*/.exec(input);
+  if (match === null) {
     return void 0;
   }
-  const multiplier = MS_PER_UNIT[cache.ttl.slice(-1)];
-  if (multiplier === void 0) {
-    throw new Error(`credential cache ttl "${cache.ttl}" has no recognised unit`);
+  return match[0].split(".").map((part) => Number.parseInt(part, 10));
+}
+function compareVersions(a, b) {
+  for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
+    const left = a[index] ?? 0;
+    const right = b[index] ?? 0;
+    if (left !== right) {
+      return left - right;
+    }
   }
-  return Number(cache.ttl.slice(0, -1)) * multiplier;
+  return 0;
 }
-function isFresh(entry, cache, now) {
-  const limit = ttlMs(cache);
-  if (entry.fetchedAt > now) {
-    return false;
+var HEADROOM_SUPERVISOR_STILL_RUNNING = -1;
+async function runSupervisor(initialConfig, ports, options = {}) {
+  const { fs: fs12, paths } = ports;
+  let config = initialConfig;
+  const previousState = readHeadroomState(fs12, paths.headroomStateFile);
+  if (previousState?.supervisorPid !== void 0 && previousState.supervisorPid !== ports.ownPid && ports.isRunning(previousState.supervisorPid)) {
+    ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: supervisor ${String(previousState.supervisorPid)} already owns the daemon; exiting`);
+    return 0;
+  }
+  let installedSource = previousState?.installedSource;
+  const ownsState = () => {
+    const owner = readHeadroomState(fs12, paths.headroomStateFile)?.supervisorPid;
+    return owner === void 0 || owner === ports.ownPid || !ports.isRunning(owner);
+  };
+  const writeOwnState = (state) => {
+    if (!ownsState()) {
+      return false;
+    }
+    writeHeadroomState(fs12, paths.headroomStateFile, state);
+    return true;
+  };
+  const fail = (message) => {
+    if (writeOwnState({ lastError: message })) {
+      fs12.removeRecursive(paths.headroomLockFile);
+    }
+    ports.log(`agent-shim headroom supervisor: ${message}`);
+    return 1;
+  };
+  const ensureInstalled = () => {
+    const version2 = ports.headroomVersion();
+    const versionOk = version2 !== void 0 && versionSatisfies(version2, config.source);
+    const pinned = pinnedGitCommit(config.source);
+    const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
+    if (versionOk && commitOk && (installedSource === void 0 || installedSource === config.source)) {
+      installedSource = config.source;
+      return true;
+    }
+    ports.log(`agent-shim headroom supervisor: installing headroom from ${config.source}`);
+    const result = ports.install(config.source);
+    if (!result.ok) {
+      return false;
+    }
+    installedSource = config.source;
+    return true;
+  };
+  const socket = prepareHeadroomSocket(fs12, ports.socketTrust, paths, ports.ownPid);
+  if (socket.refused !== void 0) {
+    return fail(socket.refused);
+  }
+  const { socketPath } = socket;
+  pruneStaleHeadroomSockets(fs12, paths, ports.isRunning);
+  if (!ensureInstalled()) {
+    return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+  }
+  const version = ports.headroomVersion() ?? "unknown";
+  writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
+  ports.log(`agent-shim headroom supervisor ${String(ports.ownPid)}: managing headroom on allowlist [${allowlistOf(ports).join(", ")}]`);
+  const orphanPid = previousState?.headroomPid;
+  if (orphanPid !== void 0 && ports.isRunning(orphanPid)) {
+    ports.log(`agent-shim headroom supervisor: stopping daemon pid ${String(orphanPid)} left behind by the previous supervisor`);
+    ports.stopProcess(orphanPid);
+  }
+  let headroomPid;
+  let runningHash;
+  let runningSettingsHash;
+  let consecutiveFailures = 0;
+  let idleSince;
+  let superseded = false;
+  let ticks = 0;
+  for (; ; ) {
+    if (options.tickLimit !== void 0 && ticks >= options.tickLimit) {
+      return HEADROOM_SUPERVISOR_STILL_RUNNING;
+    }
+    ticks += 1;
+    config = ports.readConfig();
+    const settingsHash = hashSettings(config.settings);
+    const allowlist = allowlistOf(ports);
+    const allowlistHash = hashAllowlist(allowlist);
+    pruneDeadSessions(fs12, paths.headroomSessionsDir, ports.isRunning);
+    const ownsNow = ownsState();
+    if (!ownsNow && !superseded) {
+      ports.log("agent-shim headroom supervisor: another supervisor now owns the state file; serving this daemon's own sessions until they end");
+    }
+    superseded = !ownsNow;
+    const crashed = headroomPid !== void 0 && !ports.isRunning(headroomPid);
+    if (headroomPid === void 0 || crashed) {
+      if (crashed) {
+        ports.log(`agent-shim headroom supervisor: headroom pid ${String(headroomPid)} died`);
+        headroomPid = void 0;
+        runningHash = void 0;
+        runningSettingsHash = void 0;
+        writeOwnState({
+          supervisorPid: ports.ownPid,
+          version,
+          installedSource
+        });
+      }
+      if (consecutiveFailures >= HEADROOM_START_RETRY_BUDGET) {
+        return fail(`headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up`);
+      }
+      if (installedSource !== config.source && !ensureInstalled()) {
+        return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+      }
+      const pid = ports.spawnHeadroom(socketPath, allowlist, config.settings);
+      const ready = await waitUntilReady(ports, socketPath);
+      if (ready) {
+        consecutiveFailures = 0;
+        headroomPid = pid;
+        runningHash = allowlistHash;
+        runningSettingsHash = settingsHash;
+        const recorded = writeOwnState({
+          supervisorPid: ports.ownPid,
+          headroomPid: pid,
+          socketPath,
+          version,
+          allowlistHash,
+          settingsHash,
+          installedSource: config.source
+        });
+        if (recorded) {
+          fs12.removeRecursive(paths.headroomLockFile);
+        }
+        idleSince = void 0;
+        ports.log(`agent-shim headroom supervisor: headroom pid ${String(pid)} ready on unix socket ${socketPath}`);
+      } else {
+        ports.stopProcess(pid);
+        consecutiveFailures += 1;
+        ports.log(
+          `agent-shim headroom supervisor: headroom did not become ready on unix socket ${socketPath} (attempt ${String(consecutiveFailures)} of ${String(HEADROOM_START_RETRY_BUDGET)})`
+        );
+        await ports.sleep(backoffForAttempt(consecutiveFailures));
+        continue;
+      }
+    } else {
+      if (runningHash !== allowlistHash || runningSettingsHash !== settingsHash || installedSource !== config.source) {
+        if (sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid).length === 0) {
+          ports.log("agent-shim headroom supervisor: configuration drifted and no sessions are live; restarting headroom");
+          ports.stopProcess(headroomPid);
+          headroomPid = void 0;
+          runningHash = void 0;
+          runningSettingsHash = void 0;
+          continue;
+        }
+      }
+      const sessions = sessionsForSupervisor(fs12, paths.headroomSessionsDir, ports.ownPid);
+      if (sessions.length === 0) {
+        idleSince ??= ports.now();
+        const idleMs = ports.now() - idleSince;
+        if (idleMs >= config.idleShutdownMinutes * MS_PER_MINUTE2) {
+          ports.log(
+            `agent-shim headroom supervisor: no sessions for ${String(config.idleShutdownMinutes)} minute(s); stopping headroom and exiting`
+          );
+          ports.stopProcess(headroomPid);
+          writeOwnState({ version });
+          return 0;
+        }
+      } else {
+        idleSince = void 0;
+      }
+    }
+    await ports.sleep(HEADROOM_POLL_MS);
   }
-  return limit === void 0 || now - entry.fetchedAt < limit;
 }
-function cacheAgeMs(entry, now) {
-  return Math.max(0, now - entry.fetchedAt);
+function currentHeadroomAllowlist(fs12, paths) {
+  const providers = readAllProviders(fs12, paths.providersDir).map((entry) => entry.provider);
+  return headroomAllowlist(headroomUpstreams(providers, frontDoorOrigin(readFrontDoorState(fs12, paths.frontdoorStateFile))));
 }
-function describeCachedCredential(params) {
-  const store = effectiveStore(params.cache, params.platform);
-  let entry;
-  try {
-    entry = params.port.read(store, params.owner);
-  } catch (error) {
-    return { store, status: "unreadable", reason: error instanceof Error ? error.message : String(error) };
-  }
-  if (entry === void 0) {
-    return { store, status: "empty" };
-  }
-  const limit = ttlMs(params.cache);
-  const ageMs = cacheAgeMs(entry, params.nowMs);
-  return {
-    store,
-    status: isFresh(entry, params.cache, params.nowMs) ? "fresh" : "expired",
-    ageMs,
-    ...limit === void 0 ? {} : { expiresInMs: limit - ageMs }
-  };
+function allowlistOf(ports) {
+  return currentHeadroomAllowlist(ports.fs, ports.paths);
 }
-function formatCachedCredentialState(state) {
-  if (state.status === "empty") {
-    return `no cached entry in the ${state.store} store yet`;
-  }
-  if (state.status === "unreadable") {
-    return `the ${state.store} store cannot be read here: ${state.reason}`;
-  }
-  if (state.status === "expired" && (state.expiresInMs === void 0 || state.expiresInMs > 0)) {
-    return "cached with a timestamp in the future, treated as expired";
-  }
-  const age = `cached ${formatAge(state.ageMs)} ago`;
-  if (state.expiresInMs === void 0) {
-    return `${age}, no expiry`;
+async function waitUntilReady(ports, socketPath) {
+  const deadline = ports.now() + HEADROOM_READY_TIMEOUT_MS;
+  for (; ; ) {
+    if (await ports.ready(socketPath)) {
+      return true;
+    }
+    if (ports.now() >= deadline) {
+      return false;
+    }
+    await ports.sleep(HEADROOM_POLL_MS);
   }
-  return state.status === "fresh" ? `${age}, expires in ${formatAge(state.expiresInMs)}` : `${age}, expired ${formatAge(-state.expiresInMs)} ago`;
 }
 
-// src/credential.ts
-var CREDENTIAL_UNAVAILABLE_EXIT = 64;
-var CREDENTIAL_COMMAND_TIMEOUT_MS = 1e4;
-var CREDENTIAL_INTERACTIVE_TIMEOUT_MS = 12e4;
-var GROUP_OTHER_PERMISSION_BITS = 63;
-var PERMISSION_BITS = 511;
-var OCTAL_RADIX2 = 8;
-function commandArgv(source) {
-  if ("command" in source) {
-    return source.command;
-  }
-  if ("op" in source) {
-    return ["op", "read", source.op];
+// src/launcher/guard.ts
+var AMBIENT_CREDENTIAL_VARS = [
+  "ANTHROPIC_API_KEY",
+  "ANTHROPIC_AUTH_TOKEN",
+  "CLAUDE_CODE_OAUTH_TOKEN",
+  "CLAUDE_CODE_USE_BEDROCK",
+  "CLAUDE_CODE_USE_VERTEX",
+  "CLAUDE_CODE_USE_FOUNDRY"
+];
+function detectAmbientCredential(env, injected) {
+  for (const variable of AMBIENT_CREDENTIAL_VARS) {
+    const value = env[variable];
+    if (value === void 0 || value === "") {
+      continue;
+    }
+    if (injected?.variable === variable && value === injected.token) {
+      continue;
+    }
+    return { variable };
   }
-  const account = source.keychain.account;
-  return ["security", "find-generic-password", "-s", source.keychain.service, ...account === void 0 ? [] : ["-a", account], "-w"];
+  return void 0;
 }
-function isInteractiveSource(source, env) {
-  if ("command" in source || "keychain" in source) {
-    return source.interactive ?? false;
-  }
-  if ("op" in source) {
-    return source.interactive ?? (env.OP_SERVICE_ACCOUNT_TOKEN ?? "") === "";
-  }
-  return false;
+function formatAmbientCredentialGuardMessage(variable, identityName) {
+  const identitySetCommand = identityName === void 0 ? "agent-shim identity set <name> --allow-ambient-credential" : `agent-shim identity set ${identityName} --allow-ambient-credential`;
+  return [
+    `error: ${variable} is set in the environment. This identity's isolated`,
+    "credential would be bypassed \u2014 every identity authenticates as this same key",
+    "while it's set. Unset it, or if this is deliberate, opt in per-launch with",
+    "AGENT_SHIM_ALLOW_AMBIENT_CREDENTIAL=1, or persistently for this identity with",
+    `\`${identitySetCommand}\`.`
+  ].join("\n");
 }
-function summariseSource(source) {
-  if ("env" in source) {
-    return { kind: "env", variable: source.env };
-  }
-  if ("file" in source) {
-    return { kind: "file", path: source.file };
-  }
-  if ("command" in source) {
-    return { kind: "command", program: source.command[0] };
-  }
-  if ("op" in source) {
-    return { kind: "op", reference: source.op };
+function evaluateAmbientCredentialGuard(params) {
+  const detected = detectAmbientCredential(params.env, params.injectedCredential);
+  if (detected === void 0) {
+    return { ok: true };
   }
-  if ("keychain" in source) {
-    return {
-      kind: "keychain",
-      service: source.keychain.service,
-      ...source.keychain.account === void 0 ? {} : { account: source.keychain.account }
-    };
+  if (params.allowAmbientCredentialOverride || params.allowAmbientCredential || params.providerSelected === true) {
+    return { ok: true };
   }
-  return { kind: "literal" };
-}
-function summariseCredential(credential) {
   return {
-    target: credential.target ?? "bearer",
-    sources: credential.sources.map(summariseSource),
-    ...credential.cache === void 0 ? {} : { cache: credential.cache }
+    ok: false,
+    variable: detected.variable,
+    message: formatAmbientCredentialGuardMessage(detected.variable, params.identityName)
   };
 }
-function formatSourceSummary(summary) {
-  switch (summary.kind) {
-    case "env":
-      return `env ${summary.variable}`;
-    case "file":
-      return `file ${summary.path}`;
-    case "command":
-      return `command ${summary.program}`;
-    case "op":
-      return `op ${summary.reference}`;
-    case "keychain":
-      return `keychain ${summary.service}${summary.account === void 0 ? "" : ` (account ${summary.account})`}`;
-    case "literal":
-      return "literal (non-secret placeholder)";
-    default:
-      return summary;
+
+// src/paths.ts
+import fs3 from "node:fs";
+import os from "node:os";
+import path14 from "node:path";
+function resolveAgentShimHome(env = process.env, home = os.homedir(), isDirectory = isExistingDirectory) {
+  const fromEnv = env.AGENT_SHIM_HOME;
+  if (fromEnv !== void 0 && fromEnv !== "") {
+    return fromEnv;
   }
+  const current = path14.join(home, HOME_DIRNAME);
+  const legacy = path14.join(home, LEGACY_HOME_DIRNAME);
+  return !isDirectory(current) && isDirectory(legacy) ? legacy : current;
 }
-function describeSource(source) {
-  return formatSourceSummary(summariseSource(source));
+function isExistingDirectory(candidate) {
+  return fs3.statSync(candidate, { throwIfNoEntry: false })?.isDirectory() ?? false;
 }
-function formatCredentialSummary(summary) {
-  const cache = summary.cache === void 0 ? "" : `, cached ${summary.cache.ttl === void 0 ? "with no expiry" : `for ${summary.cache.ttl}`}${summary.cache.store === void 0 ? "" : ` in the ${summary.cache.store} store`}`;
-  return `${summary.target} from ${summary.sources.map(formatSourceSummary).join(", then ")}${cache}`;
+function resolveClaudeHome() {
+  const fromEnv = process.env.AGENT_SHIM_CLAUDE_HOME;
+  if (fromEnv !== void 0 && fromEnv !== "") {
+    return fromEnv;
+  }
+  return path14.join(os.homedir(), ".claude");
 }
-function describeCredential(credential) {
-  return formatCredentialSummary(summariseCredential(credential));
+function buildLayoutPaths(root) {
+  return {
+    root,
+    identitiesDir: path14.join(root, "identities"),
+    configProfilesDir: path14.join(root, "config-profiles"),
+    providersDir: path14.join(root, "providers"),
+    directoryRulesFile: path14.join(root, "directory-rules.json"),
+    activeIdentityFile: path14.join(root, "active-identity"),
+    globalConfigFile: path14.join(root, "config.json"),
+    categoriesLocalFile: path14.join(root, "categories.local.json"),
+    claudeShimFile: path14.join(root, "claude-shim.json"),
+    headroomDir: path14.join(root, "headroom"),
+    headroomStateFile: path14.join(root, "headroom", `state.v${String(HEADROOM_STATE_SCHEMA_VERSION)}.json`),
+    headroomSocketDir: path14.join(root, "headroom", "run"),
+    headroomLockFile: path14.join(root, "headroom", "start.lock"),
+    headroomSessionsDir: path14.join(root, "headroom", "sessions"),
+    logsDir: path14.join(root, "logs"),
+    headroomLogPath: path14.join(root, "logs", "headroom.log"),
+    frontdoorDir: path14.join(root, "frontdoor"),
+    frontdoorCaDir: path14.join(root, "frontdoor", "ca"),
+    frontdoorCaCertFile: path14.join(root, "frontdoor", "ca", "ca.pem"),
+    frontdoorCaKeyFile: path14.join(root, "frontdoor", "ca", "ca.key"),
+    frontdoorCaBundlesDir: path14.join(root, "frontdoor", "ca", "bundles"),
+    frontdoorStateFile: path14.join(root, "frontdoor", "state.json"),
+    frontdoorLockFile: path14.join(root, "frontdoor", "start.lock"),
+    frontdoorControlTokenFile: path14.join(root, "frontdoor", "control-token"),
+    frontdoorSessionsDir: path14.join(root, "frontdoor", "sessions"),
+    frontdoorLogPath: path14.join(root, "logs", "frontdoor.log"),
+    usageDir: path14.join(root, "usage"),
+    usageLogDir: path14.join(root, "usage", "log"),
+    usageSnapshotsDir: path14.join(root, "usage", "snapshots"),
+    usagePicksFile: path14.join(root, "usage", "picks.json")
+  };
 }
-function trySource(source, params) {
-  const none = (reason, warn = false) => ({ ok: false, reason, warn });
-  if ("env" in source) {
-    const value = params.env[source.env];
-    return value === void 0 || value === "" ? none("is unset or empty") : { ok: true, token: value };
-  }
-  if ("literal" in source) {
-    return { ok: true, token: source.literal };
-  }
-  if ("file" in source) {
-    const read = params.port.readSecretFile(source.file);
-    if (!read.found) {
-      return none("does not exist");
-    }
-    if (read.mode !== void 0 && (read.mode & GROUP_OTHER_PERMISSION_BITS) !== 0) {
-      return none(
-        `is readable or writable by group or others (mode ${(read.mode & PERMISSION_BITS).toString(OCTAL_RADIX2)}); run \`chmod 600 ${source.file}\``,
-        true
-      );
-    }
-    const token2 = read.content.trim();
-    return token2 === "" ? none("is empty") : { ok: true, token: token2 };
+function resolveLayoutPaths() {
+  return buildLayoutPaths(resolveAgentShimHome());
+}
+
+// src/identityStore.ts
+import fs5 from "node:fs";
+import path16 from "node:path";
+
+// src/configProfilesStore.ts
+import fs4 from "node:fs";
+import path15 from "node:path";
+var ProfileNotFoundError = class extends CliError {
+  constructor(profileName) {
+    super(`No configuration profile named "${profileName}". Run \`agent-shim profile add ${profileName}\` first.`);
+    this.profileName = profileName;
+    this.name = "ProfileNotFoundError";
   }
-  const argv = commandArgv(source);
-  const interactive = isInteractiveSource(source, params.env);
-  if (interactive && !params.port.personPresent()) {
-    return none("needs a person to approve it, but there is no terminal or desktop session");
+  profileName;
+};
+var ProfileAlreadyExistsError = class extends CliError {
+  constructor(profileName) {
+    super(`A configuration profile named "${profileName}" already exists.`);
+    this.profileName = profileName;
+    this.name = "ProfileAlreadyExistsError";
   }
-  const timeoutMs = source.timeoutMs ?? (interactive ? CREDENTIAL_INTERACTIVE_TIMEOUT_MS : CREDENTIAL_COMMAND_TIMEOUT_MS);
-  const result = params.port.runCommand(argv, { timeoutMs, interactive });
-  if (result.timedOut) {
-    return none(`timed out after ${String(timeoutMs)}ms`);
+  profileName;
+};
+var InvalidCategoryNameError = class extends CliError {
+  constructor(categoryName) {
+    super(`"${categoryName}" is not a category a configuration profile may toggle (runtime, history, knowledge, settings).`);
+    this.categoryName = categoryName;
+    this.name = "InvalidCategoryNameError";
   }
-  if (result.status !== 0) {
-    const stderr = result.stderr.trim();
-    const outcome = result.status === null ? "could not be run or was killed by a signal" : `exited with status ${String(result.status)}`;
-    return none(`${outcome}${stderr === "" ? "" : `: ${stderr}`}`);
+  categoryName;
+};
+function profileJsonPath(paths, name) {
+  return path15.join(paths.configProfilesDir, `${name}.json`);
+}
+function profileExists(paths, name) {
+  return fs4.existsSync(profileJsonPath(paths, name));
+}
+function requireProfileExists(paths, name) {
+  if (!profileExists(paths, name)) {
+    throw new ProfileNotFoundError(name);
   }
-  const token = result.stdout.trim();
-  return token === "" ? none("printed no token") : { ok: true, token };
 }
-function warmCommandFor(subject) {
-  const [kind, name] = subject.split(" ");
-  return kind === "provider" ? `agent-shim credential warm --provider ${name ?? ""}` : `agent-shim credential warm ${name ?? ""}`;
+function readProfile(paths, name) {
+  return readJson(profileJsonPath(paths, name), ConfigProfileSchema);
 }
-function resolveCredential(params) {
-  const target = params.credential.target ?? "bearer";
-  const cacheBlock = params.credential.cache;
-  const cache = cacheBlock === void 0 ? void 0 : params.port.cache;
-  const store = cacheBlock === void 0 || cache === void 0 ? void 0 : effectiveStore(cacheBlock, cache.platform);
-  if (cacheBlock !== void 0 && cache !== void 0 && store !== void 0 && params.refresh !== true) {
-    const entry = cache.port.read(store, params.subject);
-    if (entry !== void 0 && isFresh(entry, cacheBlock, cache.now())) {
-      return { ok: true, credential: { target, token: entry.token, source: entry.source, warnings: [], cachedAt: entry.fetchedAt } };
-    }
+function createProfile(paths, name, extendsList, description) {
+  if (profileExists(paths, name)) {
+    throw new ProfileAlreadyExistsError(name);
   }
-  const attempts = [];
-  const warnings = [];
-  for (const source of params.credential.sources) {
-    const outcome = trySource(source, params);
-    if (outcome.ok) {
-      if (cache !== void 0 && store !== void 0) {
-        cache.port.write(store, params.subject, { token: outcome.token, fetchedAt: cache.now(), source });
-      }
-      return { ok: true, credential: { target, token: outcome.token, source, warnings } };
+  const filePath = profileJsonPath(paths, name);
+  const parsed = ConfigProfileSchema.safeParse({
+    ...description === void 0 ? {} : { description },
+    ...extendsList !== void 0 && extendsList.length > 0 ? { extends: [...extendsList] } : {}
+  });
+  if (!parsed.success) {
+    throw new ConfigValidationError(filePath, parsed.error.issues);
+  }
+  writeJsonAtomic(filePath, parsed.data);
+  return parsed.data;
+}
+function listProfiles(paths) {
+  if (!fs4.existsSync(paths.configProfilesDir)) {
+    return [];
+  }
+  const names = fs4.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort();
+  const result = [];
+  for (const name of names) {
+    const profile = readProfile(paths, name);
+    if (profile !== void 0) {
+      result.push({ name, profile });
     }
-    const line = `${describeSource(source)} ${outcome.reason}`;
-    attempts.push(line);
-    if (outcome.warn) {
-      warnings.push(`agent-shim: ${params.subject}: skipped ${line}`);
+  }
+  return result;
+}
+function globalConfigPath(paths) {
+  return paths.globalConfigFile;
+}
+function readGlobalConfig(paths) {
+  return readJson(globalConfigPath(paths), GlobalConfigSchema);
+}
+function setGlobalDefaultProfile(paths, name) {
+  return applyPatch(
+    globalConfigPath(paths),
+    GlobalConfigSchema,
+    { defaultConfigProfile: name },
+    { defaults: {} }
+  );
+}
+function validateCategoryNames(patch) {
+  for (const key of Object.keys(patch)) {
+    if (!isOverridableCategory(key)) {
+      throw new InvalidCategoryNameError(key);
     }
   }
-  const hint = cacheBlock === void 0 ? "" : `; fill the cache from a terminal with \`${warmCommandFor(params.subject)}\``;
-  return { ok: false, message: `agent-shim: ${params.subject} has no usable credential: ${attempts.join("; ")}${hint}` };
 }
-function credentialVariables(target, token) {
-  return {
-    ANTHROPIC_AUTH_TOKEN: target === "bearer" ? token : void 0,
-    ANTHROPIC_API_KEY: target === "apiKey" ? token : void 0,
-    CLAUDE_CODE_OAUTH_TOKEN: target === "oauthToken" ? token : void 0
-  };
+function setProfileCategories(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const expandedPatch = expandAllCategoryKey(patch);
+  validateCategoryNames(expandedPatch);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedCategories = { ...existing.categories, ...expandedPatch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { categories: mergedCategories });
+}
+function setProfileEntries(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedEntries = { ...existing.entries, ...patch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, { entries: mergedEntries });
+}
+function setProfileLaunchFlags(paths, name, patch) {
+  requireProfileExists(paths, name);
+  const existing = readProfile(paths, name) ?? {};
+  const mergedLaunch = { ...existing.launch, ...patch };
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
+    // Read as `unknown` so the check sees the `undefined` a cleared key holds, which LaunchFlags' optional properties hide from the value type.
+    launch: Object.values(mergedLaunch).every((value) => value === void 0) ? void 0 : mergedLaunch
+  });
+}
+function setProfileMetadata(paths, name, patch) {
+  requireProfileExists(paths, name);
+  return applyPatch(profileJsonPath(paths, name), ConfigProfileSchema, {
+    ...patch.extends === void 0 ? {} : { extends: patch.extends.length === 0 ? void 0 : [...patch.extends] },
+    ...patch.description === void 0 ? {} : { description: patch.description === false ? void 0 : patch.description }
+  });
+}
+function removeProfile(paths, name) {
+  requireProfileExists(paths, name);
+  fs4.rmSync(profileJsonPath(paths, name));
 }
 
-// src/providersStore.ts
-var ProviderNotFoundError = class extends CliError {
-  constructor(name) {
-    super(`No provider named "${name}". Run \`agent-shim provider add ${name}\` first.`);
-    this.name = name;
-    this.name = "ProviderNotFoundError";
+// src/poolStore.ts
+var PoolNotFoundError = class extends CliError {
+  constructor(poolName) {
+    super(`No pool named "${poolName}". Run \`agent-shim pool add ${poolName} --identity <name>...\` first.`);
+    this.poolName = poolName;
+    this.name = "PoolNotFoundError";
   }
-  name;
+  poolName;
 };
-var ProviderAlreadyExistsError = class extends CliError {
-  constructor(providerName) {
-    super(`A provider named "${providerName}" already exists.`);
-    this.providerName = providerName;
-    this.name = "ProviderAlreadyExistsError";
+var PoolAlreadyExistsError = class extends CliError {
+  constructor(poolName) {
+    super(`A pool named "${poolName}" already exists. Use \`agent-shim pool set ${poolName}\` to change its members.`);
+    this.poolName = poolName;
+    this.name = "PoolAlreadyExistsError";
   }
-  providerName;
+  poolName;
 };
-var InvalidProviderNameError = class extends CliError {
+var InvalidPoolNameError = class extends CliError {
   constructor(attemptedName) {
-    super(
-      `"${attemptedName}" is not a valid provider name. Provider names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
-    );
+    super(`"${attemptedName}" is not a valid pool name: it must start with a letter or number and may then contain letters, numbers, dots, hyphens and underscores.`);
     this.attemptedName = attemptedName;
-    this.name = "InvalidProviderNameError";
+    this.name = "InvalidPoolNameError";
   }
   attemptedName;
 };
-var PROVIDER_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._@-]*$/;
-function providerJsonPath(paths, name) {
-  return path16.join(paths.providersDir, `${name}.json`);
+function readPools(paths) {
+  return readGlobalConfig(paths)?.pools ?? {};
 }
-function providerExists(paths, name) {
-  return fs6.existsSync(providerJsonPath(paths, name));
+function requirePool(paths, name) {
+  const pool = readPools(paths)[name];
+  if (pool === void 0) {
+    throw new PoolNotFoundError(name);
+  }
+  return pool;
 }
-var LEGACY_PROVIDER_FIELDS = ["tokenEnv", "tokenCommand", "authScheme"];
-var LEGACY_ENV_CREDENTIAL_KEYS = Object.values(CREDENTIAL_TARGET_VARS);
-var LEGACY_LITERAL_PLACEHOLDER = "<the value of env.ANTHROPIC_AUTH_TOKEN>";
-function isRecord3(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function writePools(paths, pools) {
+  applyPatch(paths.globalConfigFile, GlobalConfigSchema, { pools }, { defaults: {} });
 }
-function legacyProviderConversion(raw) {
-  if (!isRecord3(raw) || "credential" in raw) {
-    return void 0;
-  }
-  const env = isRecord3(raw.env) ? raw.env : void 0;
-  const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
-  const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
-  if (fields.length === 0) {
-    return void 0;
+function addPool(paths, name, identities) {
+  if (!PoolNameSchema.safeParse(name).success) {
+    throw new InvalidPoolNameError(name);
   }
-  const sources = [];
-  if (typeof raw.tokenEnv === "string") {
-    sources.push({ env: raw.tokenEnv });
+  const pools = readPools(paths);
+  if (pools[name] !== void 0) {
+    throw new PoolAlreadyExistsError(name);
   }
-  if (Array.isArray(raw.tokenCommand)) {
-    sources.push({ command: raw.tokenCommand });
+  const pool = { identities: [...identities] };
+  writePools(paths, { ...pools, [name]: pool });
+  return pool;
+}
+function setPool(paths, name, identities) {
+  requirePool(paths, name);
+  const pool = { identities: [...identities] };
+  writePools(paths, { ...readPools(paths), [name]: pool });
+  return pool;
+}
+function removePool(paths, name) {
+  requirePool(paths, name);
+  const remaining = Object.fromEntries(Object.entries(readPools(paths)).filter(([existing]) => existing !== name));
+  writePools(paths, remaining);
+}
+
+// src/identityStore.ts
+var IdentityNotFoundError = class extends CliError {
+  constructor(name) {
+    super(`No identity named "${name}". Run \`agent-shim identity add ${name}\` first.`);
+    this.name = name;
+    this.name = "IdentityNotFoundError";
   }
-  if (typeof env?.ANTHROPIC_AUTH_TOKEN === "string" && env.ANTHROPIC_AUTH_TOKEN !== "") {
-    sources.push({ literal: LEGACY_LITERAL_PLACEHOLDER });
+  name;
+};
+var IdentityAlreadyExistsError = class extends CliError {
+  constructor(identityName) {
+    super(`An identity named "${identityName}" already exists.`);
+    this.identityName = identityName;
+    this.name = "IdentityAlreadyExistsError";
   }
-  const remainingEnv = env === void 0 ? void 0 : Object.fromEntries(Object.entries(env).filter(([key]) => !LEGACY_ENV_CREDENTIAL_KEYS.includes(key)));
-  const replacedKeys = [...LEGACY_PROVIDER_FIELDS, "env"];
-  const rest = Object.fromEntries(Object.entries(raw).filter(([key]) => !replacedKeys.includes(key)));
-  return {
-    fields,
-    replacement: {
-      ...rest,
-      credential: { sources, ...raw.authScheme === "apiKey" ? { target: "apiKey" } : {} },
-      ...remainingEnv === void 0 || Object.keys(remainingEnv).length === 0 ? {} : { env: remainingEnv }
-    }
-  };
-}
-var LegacyProviderFileError = class extends CliError {
-  constructor(filePath, conversion) {
+  identityName;
+};
+var InvalidIdentityNameError = class extends CliError {
+  constructor(attemptedName) {
     super(
-      `${filePath} uses ${conversion.fields.join(", ")}, which a credential block replaced. Rewrite it as:
-` + JSON.stringify(conversion.replacement, null, 2)
+      `"${attemptedName}" is not a valid identity name \u2014 identity names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
     );
-    this.filePath = filePath;
-    this.conversion = conversion;
-    this.name = "LegacyProviderFileError";
-  }
-  filePath;
-  conversion;
-};
-function parseProviderFile(filePath, raw) {
-  const conversion = legacyProviderConversion(raw);
-  if (conversion !== void 0) {
-    throw new LegacyProviderFileError(filePath, conversion);
+    this.attemptedName = attemptedName;
+    this.name = "InvalidIdentityNameError";
   }
-  const parsed = ProviderSchema.safeParse(raw);
+  attemptedName;
+};
+function identityJsonPath(paths, name) {
+  return path16.join(paths.identitiesDir, name, "identity.json");
+}
+function identityExists(paths, name) {
+  return fs5.existsSync(identityJsonPath(paths, name));
+}
+function readIdentity(paths, name) {
+  return readJson(identityJsonPath(paths, name), IdentitySchema);
+}
+function addIdentity(paths, name) {
+  if (identityExists(paths, name)) {
+    throw new IdentityAlreadyExistsError(name);
+  }
+  const parsed = IdentitySchema.safeParse({ name, allowAmbientCredential: false });
   if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+    throw new InvalidIdentityNameError(name);
   }
+  writeJsonAtomic(identityJsonPath(paths, name), parsed.data);
   return parsed.data;
 }
-function readProvider(paths, name) {
-  const filePath = providerJsonPath(paths, name);
-  if (!fs6.existsSync(filePath)) {
+function useIdentity(paths, name) {
+  const pool = poolNameOf(name);
+  if (pool !== void 0) {
+    requirePool(paths, pool);
+  } else if (!identityExists(paths, name)) {
+    throw new IdentityNotFoundError(name);
+  }
+  writeTextAtomic(paths.activeIdentityFile, `${name}
+`);
+}
+function readActiveIdentity(paths) {
+  if (!fs5.existsSync(paths.activeIdentityFile)) {
     return void 0;
   }
-  const raw = JSON.parse(fs6.readFileSync(filePath, "utf8"));
-  return parseProviderFile(filePath, raw);
+  const raw = fs5.readFileSync(paths.activeIdentityFile, "utf8").trim();
+  return raw === "" ? void 0 : raw;
 }
-function loadProvider(providersDir, name, port) {
-  const filePath = path16.join(providersDir, `${name}.json`);
-  const raw = port.readConfigFile(filePath);
-  return raw === void 0 ? void 0 : parseProviderFile(filePath, raw);
+function isIdentityDirectoryName(name) {
+  return !name.startsWith(".");
 }
-function listProviders(paths) {
-  const names = listProviderNames(
-    (dir) => fs6.readdirSync(dir),
-    paths.providersDir
-  );
+function readIdentityForListing(paths, name) {
+  try {
+    return readIdentity(paths, name);
+  } catch (error) {
+    if (error instanceof ConfigValidationError || error instanceof SyntaxError) {
+      return { problem: error.message.replace(/\s*\n\s*/g, " ") };
+    }
+    throw error;
+  }
+}
+function listIdentities(paths) {
+  if (!fs5.existsSync(paths.identitiesDir)) {
+    return [];
+  }
+  const active = readActiveIdentity(paths);
+  const names = fs5.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort();
   const result = [];
   for (const name of names) {
-    let provider;
-    try {
-      provider = readProvider(paths, name);
-    } catch (error) {
-      if (!(error instanceof ConfigValidationError || error instanceof LegacyProviderFileError)) {
-        throw error;
-      }
-      console.error(`agent-shim: providers/${name}.json is invalid and was skipped: ${error.message}`);
+    const read = readIdentityForListing(paths, name);
+    if (read === void 0) {
       continue;
     }
-    if (provider !== void 0) {
-      result.push({ name, provider });
-    }
+    const isActive = name === active;
+    result.push("problem" in read ? { name, isActive, problem: read.problem } : { name, identity: read, isActive });
   }
   return result;
 }
-function listProviderNames(readdir, providersDir) {
-  let entries;
-  try {
-    entries = readdir(providersDir);
-  } catch {
-    return [];
+function setDefaultConfigProfile(paths, identityName, profileName) {
+  if (!identityExists(paths, identityName)) {
+    throw new IdentityNotFoundError(identityName);
   }
-  return entries.filter((entry) => entry.endsWith(".json")).map((entry) => entry.slice(0, -".json".length)).sort();
-}
-function describeProviderEndpoint(provider) {
-  return isCodexProvider(provider) ? "codex translation daemon" : provider.baseUrl;
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    defaultConfigProfile: profileName
+  });
 }
-var ProviderKindMismatchError = class extends UsageError {
-  constructor(message) {
-    super(message);
-    this.name = "ProviderKindMismatchError";
+function setAllowAmbientCredential(paths, identityName, allow) {
+  if (!identityExists(paths, identityName)) {
+    throw new IdentityNotFoundError(identityName);
   }
-};
-function isEmptyCodexConfig(config) {
-  return config === void 0 || config.defaultModel === void 0 && config.effort === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    allowAmbientCredential: allow
+  });
 }
-function addProvider(paths, name, input) {
-  if (providerExists(paths, name)) {
-    throw new ProviderAlreadyExistsError(name);
-  }
-  if (!PROVIDER_NAME_RE.test(name)) {
-    throw new InvalidProviderNameError(name);
-  }
-  const kind = input.kind ?? "http";
-  if (kind === "codex" && input.baseUrl !== void 0) {
-    throw new ProviderKindMismatchError("A codex provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
-  }
-  if (kind === "http" && input.baseUrl === void 0) {
-    throw new ProviderKindMismatchError("An http provider needs --base-url.");
+function setIdentityCredential(paths, identityName, change) {
+  const existing = readIdentity(paths, identityName);
+  if (existing === void 0) {
+    throw new IdentityNotFoundError(identityName);
   }
-  if (kind === "http" && !isEmptyCodexConfig(input.codex)) {
-    throw new ProviderKindMismatchError("Codex settings apply only to a codex provider (--kind codex).");
+  if (change === false) {
+    return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, { credential: void 0 });
   }
-  const shared = {
-    displayName: input.displayName,
-    credential: { sources: input.sources, ...input.target === void 0 ? {} : { target: input.target } },
-    ...input.env === void 0 || Object.keys(input.env).length === 0 ? {} : { env: input.env }
-  };
-  const parsed = ProviderSchema.safeParse(
-    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input.codex) ? {} : { codex: input.codex } } : { ...shared, baseUrl: input.baseUrl }
-  );
-  if (!parsed.success) {
-    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+  const sources = change.sources ?? existing.credential?.sources;
+  if (sources === void 0) {
+    throw new UsageError(`Identity "${identityName}" has no credential yet: pass --credential to give it one before choosing its target.`);
   }
-  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
-  return parsed.data;
+  const target = change.target ?? existing.credential?.target;
+  const cache = change.cache === void 0 ? existing.credential?.cache : change.cache === false ? void 0 : change.cache;
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, {
+    credential: { sources: [...sources], ...target === void 0 ? {} : { target }, ...cache === void 0 ? {} : { cache } }
+  });
 }
-function updateProvider(paths, name, input) {
-  const existing = readProvider(paths, name);
-  if (existing === void 0) {
-    throw new ProviderNotFoundError(name);
+function belongsToIdentity(entry, name) {
+  return entry === name || entry === path16.basename(identityLockPath("", name)) || entry.startsWith(`.${name}.scratch.`) || entry.startsWith(`.${name}.previous.`);
+}
+function removeIdentity(paths, name) {
+  if (!identityExists(paths, name)) {
+    throw new IdentityNotFoundError(name);
   }
-  const unset = new Set(input.unsetEnv);
-  const env = Object.fromEntries(Object.entries({ ...existing.env, ...input.env }).filter(([key]) => !unset.has(key)));
-  const target = input.target ?? existing.credential.target;
-  const cache = input.cache === void 0 ? existing.credential.cache : input.cache === false ? void 0 : input.cache;
-  if (isCodexProvider(existing) && input.baseUrl !== void 0) {
-    throw new ProviderKindMismatchError(`Provider "${name}" is a codex provider, which has no base URL.`);
+  for (const entry of fs5.readdirSync(paths.identitiesDir)) {
+    if (belongsToIdentity(entry, name)) {
+      fs5.rmSync(path16.join(paths.identitiesDir, entry), { recursive: true, force: true });
+    }
   }
-  if (!isCodexProvider(existing) && !isEmptyCodexConfig(input.codex)) {
-    throw new ProviderKindMismatchError(`Provider "${name}" is an http provider; codex settings apply only to a codex provider.`);
+  if (readActiveIdentity(paths) === name) {
+    fs5.rmSync(paths.activeIdentityFile);
   }
-  const shared = {
-    ...input.displayName === void 0 ? {} : { displayName: input.displayName },
-    credential: {
-      sources: input.sources ?? existing.credential.sources,
-      ...target === void 0 ? {} : { target },
-      ...cache === void 0 ? {} : { cache }
-    },
-    env: Object.keys(env).length === 0 ? void 0 : env
-  };
-  let candidate;
-  if (isCodexProvider(existing)) {
-    const codex = {
-      ...existing.codex,
-      ...input.codex,
-      ...existing.codex?.models === void 0 && input.codex?.models === void 0 ? {} : { models: { ...existing.codex?.models, ...input.codex?.models } }
-    };
-    candidate = { ...existing, ...shared, codex: isEmptyCodexConfig(codex) ? void 0 : codex };
-  } else {
-    candidate = { ...existing, ...shared, ...input.baseUrl === void 0 ? {} : { baseUrl: input.baseUrl } };
+}
+
+// src/providersStore.ts
+import fs6 from "node:fs";
+import path17 from "node:path";
+
+// src/credentialCache.ts
+import { z as z11 } from "zod";
+var MS_PER_UNIT = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
+var CachedCredentialSchema = z11.strictObject({
+  token: z11.string().min(1),
+  fetchedAt: z11.number().int().nonnegative(),
+  source: CredentialSourceSchema
+});
+function effectiveStore(cache, platform) {
+  return cache.store ?? (platform === "darwin" ? "keychain" : "file");
+}
+function ttlMs(cache) {
+  if (cache.ttl === void 0) {
+    return void 0;
   }
-  const parsed = ProviderSchema.safeParse(candidate);
-  if (!parsed.success) {
-    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+  const multiplier = MS_PER_UNIT[cache.ttl.slice(-1)];
+  if (multiplier === void 0) {
+    throw new Error(`credential cache ttl "${cache.ttl}" has no recognised unit`);
   }
-  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
-  return parsed.data;
+  return Number(cache.ttl.slice(0, -1)) * multiplier;
 }
-function removeProvider(paths, name) {
-  if (!providerExists(paths, name)) {
-    throw new ProviderNotFoundError(name);
+function isFresh(entry, cache, now) {
+  const limit = ttlMs(cache);
+  if (entry.fetchedAt > now) {
+    return false;
   }
-  fs6.rmSync(providerJsonPath(paths, name));
+  return limit === void 0 || now - entry.fetchedAt < limit;
 }
-function cascadeProviderName(cascade) {
-  let name;
-  for (const layer of assembleCascade(cascade).layers) {
-    if (layer.launch?.provider !== void 0) {
-      name = layer.launch.provider;
-    }
-  }
-  return name;
+function cacheAgeMs(entry, now) {
+  return Math.max(0, now - entry.fetchedAt);
 }
-function resolveProvider(params) {
-  const cliName = params.cliProvider !== void 0 && params.cliProvider !== "" ? params.cliProvider : void 0;
-  const name = cliName ?? (params.cascade === void 0 ? void 0 : cascadeProviderName(params.cascade));
-  if (name === void 0) {
-    return void 0;
+function describeCachedCredential(params) {
+  const store = effectiveStore(params.cache, params.platform);
+  let entry;
+  try {
+    entry = params.port.read(store, params.owner);
+  } catch (error) {
+    return { store, status: "unreadable", reason: error instanceof Error ? error.message : String(error) };
+  }
+  if (entry === void 0) {
+    return { store, status: "empty" };
+  }
+  const limit = ttlMs(params.cache);
+  const ageMs = cacheAgeMs(entry, params.nowMs);
+  return {
+    store,
+    status: isFresh(entry, params.cache, params.nowMs) ? "fresh" : "expired",
+    ageMs,
+    ...limit === void 0 ? {} : { expiresInMs: limit - ageMs }
+  };
+}
+function formatCachedCredentialState(state) {
+  if (state.status === "empty") {
+    return `no cached entry in the ${state.store} store yet`;
   }
-  const definition = loadProvider(params.paths.providersDir, name, params.port);
-  if (definition === void 0) {
-    const known = listProviderNames(params.port.readdir, params.paths.providersDir);
-    return {
-      ok: false,
-      status: 1,
-      message: `agent-shim: no provider named "${name}". ` + (known.length > 0 ? `Known providers: ${known.join(", ")}.` : "No providers are defined yet; run `agent-shim provider add`.")
-    };
+  if (state.status === "unreadable") {
+    return `the ${state.store} store cannot be read here: ${state.reason}`;
   }
-  if (params.credentials === void 0) {
-    return { ok: false, status: 1, message: `agent-shim: provider ${name} needs its credential resolved, but this launcher has no credential port wired` };
+  if (state.status === "expired" && (state.expiresInMs === void 0 || state.expiresInMs > 0)) {
+    return "cached with a timestamp in the future, treated as expired";
   }
-  const resolution = resolveCredential({ credential: definition.credential, env: params.env, port: params.credentials, subject: `provider ${name}` });
-  if (!resolution.ok) {
-    return { ok: false, status: CREDENTIAL_UNAVAILABLE_EXIT, message: resolution.message };
+  const age = `cached ${formatAge(state.ageMs)} ago`;
+  if (state.expiresInMs === void 0) {
+    return `${age}, no expiry`;
   }
-  return { ok: true, provider: { name, definition, credential: resolution.credential }, warnings: resolution.credential.warnings };
+  return state.status === "fresh" ? `${age}, expires in ${formatAge(state.expiresInMs)}` : `${age}, expired ${formatAge(-state.expiresInMs)} ago`;
 }
 
-// src/directoryRulesStore.ts
-var DirectoryRuleNotFoundError = class extends CliError {
-  constructor(rulePath) {
-    super(`No directory rule found for path "${rulePath}".`);
-    this.rulePath = rulePath;
-    this.name = "DirectoryRuleNotFoundError";
-  }
-  rulePath;
-};
-var DirectoryRuleMissingTargetError = class extends CliError {
-  constructor() {
-    super("A directory rule must set at least one of --config-profile or --identity.");
-    this.name = "DirectoryRuleMissingTargetError";
+// src/credential.ts
+var CREDENTIAL_UNAVAILABLE_EXIT = 64;
+var CREDENTIAL_COMMAND_TIMEOUT_MS = 1e4;
+var CREDENTIAL_INTERACTIVE_TIMEOUT_MS = 12e4;
+var GROUP_OTHER_PERMISSION_BITS = 63;
+var PERMISSION_BITS = 511;
+var OCTAL_RADIX2 = 8;
+function commandArgv(source) {
+  if ("command" in source) {
+    return source.command;
   }
-};
-var DirectoryRuleAlreadyExistsError = class extends CliError {
-  constructor(rulePath) {
-    super(`A directory rule for path "${rulePath}" already exists. Use \`agent-shim rule set\` to change it.`);
-    this.rulePath = rulePath;
-    this.name = "DirectoryRuleAlreadyExistsError";
+  if ("op" in source) {
+    return ["op", "read", source.op];
   }
-  rulePath;
-};
-function readDirectoryRules(paths) {
-  return readJson(paths.directoryRulesFile, DirectoryRulesSchema) ?? { rules: [] };
+  const account = source.keychain.account;
+  return ["security", "find-generic-password", "-s", source.keychain.service, ...account === void 0 ? [] : ["-a", account], "-w"];
 }
-function writeDirectoryRules(paths, rules) {
-  const parsed = DirectoryRulesSchema.safeParse(rules);
-  if (!parsed.success) {
-    throw new ConfigValidationError(paths.directoryRulesFile, parsed.error.issues);
+function isInteractiveSource(source, env) {
+  if ("command" in source || "keychain" in source) {
+    return source.interactive ?? false;
   }
-  writeJsonAtomic(paths.directoryRulesFile, parsed.data);
-}
-function listDirectoryRules(paths) {
-  return readDirectoryRules(paths).rules;
+  if ("op" in source) {
+    return source.interactive ?? (env.OP_SERVICE_ACCOUNT_TOKEN ?? "") === "";
+  }
+  return false;
 }
-function addDirectoryRule(paths, rulePath, options) {
-  if (options.configProfile === void 0 && options.identity === void 0) {
-    throw new DirectoryRuleMissingTargetError();
+function summariseSource(source) {
+  if ("env" in source) {
+    return { kind: "env", variable: source.env };
   }
-  const current = readDirectoryRules(paths);
-  if (current.rules.some((rule) => rule.path === rulePath)) {
-    throw new DirectoryRuleAlreadyExistsError(rulePath);
+  if ("file" in source) {
+    return { kind: "file", path: source.file };
   }
-  const created = buildNewRule(rulePath, options);
-  writeDirectoryRules(paths, { ...current, rules: [...current.rules, created] });
-  return created;
-}
-function ruleHasEffect(rule) {
-  return rule.configProfile !== void 0 || rule.identity !== void 0 || rule.categories !== void 0 || rule.entries !== void 0 || rule.launch !== void 0;
-}
-function updateDirectoryRule(paths, rulePath, options) {
-  const current = readDirectoryRules(paths);
-  const index = current.rules.findIndex((rule) => rule.path === rulePath);
-  const existing = index === -1 ? void 0 : current.rules[index];
-  if (existing === void 0) {
-    throw new DirectoryRuleNotFoundError(rulePath);
+  if ("command" in source) {
+    return { kind: "command", program: source.command[0] };
   }
-  const { configProfile, identity, ...rest } = existing;
-  const nextConfigProfile = options.configProfile === void 0 ? configProfile : options.configProfile === false ? void 0 : options.configProfile;
-  const nextIdentity = options.identity === void 0 ? identity : options.identity === false ? void 0 : options.identity;
-  const updated = {
-    ...rest,
-    ...nextConfigProfile === void 0 ? {} : { configProfile: nextConfigProfile },
-    ...nextIdentity === void 0 ? {} : { identity: nextIdentity }
-  };
-  if (!ruleHasEffect(updated)) {
-    throw new DirectoryRuleMissingTargetError();
+  if ("op" in source) {
+    return { kind: "op", reference: source.op };
   }
-  const nextRules = [...current.rules];
-  nextRules[index] = updated;
-  writeDirectoryRules(paths, { ...current, rules: nextRules });
-  return updated;
+  if ("keychain" in source) {
+    return {
+      kind: "keychain",
+      service: source.keychain.service,
+      ...source.keychain.account === void 0 ? {} : { account: source.keychain.account }
+    };
+  }
+  return { kind: "literal" };
 }
-function buildNewRule(rulePath, options) {
+function summariseCredential(credential) {
   return {
-    path: rulePath,
-    ...options.configProfile !== void 0 ? { configProfile: options.configProfile } : {},
-    ...options.identity !== void 0 ? { identity: options.identity } : {}
+    target: credential.target ?? "bearer",
+    sources: credential.sources.map(summariseSource),
+    ...credential.cache === void 0 ? {} : { cache: credential.cache }
   };
 }
-function removeDirectoryRule(paths, rulePath) {
-  const current = readDirectoryRules(paths);
-  const nextRules = current.rules.filter((rule) => rule.path !== rulePath);
-  if (nextRules.length === current.rules.length) {
-    throw new DirectoryRuleNotFoundError(rulePath);
+function formatSourceSummary(summary) {
+  switch (summary.kind) {
+    case "env":
+      return `env ${summary.variable}`;
+    case "file":
+      return `file ${summary.path}`;
+    case "command":
+      return `command ${summary.program}`;
+    case "op":
+      return `op ${summary.reference}`;
+    case "keychain":
+      return `keychain ${summary.service}${summary.account === void 0 ? "" : ` (account ${summary.account})`}`;
+    case "literal":
+      return "literal (non-secret placeholder)";
+    default:
+      return summary;
   }
-  writeDirectoryRules(paths, { ...current, rules: nextRules });
 }
-
-// src/checkReport.ts
-import os4 from "node:os";
-
-// src/launcher/cascade.ts
-import path18 from "node:path";
-
-// src/pathNorm.ts
-import path17 from "node:path";
-function expandTilde(value, home) {
-  if (value === "~") {
-    return home;
-  }
-  if (value.startsWith("~/")) {
-    return path17.join(home, value.slice(2));
-  }
-  return value;
+function describeSource(source) {
+  return formatSourceSummary(summariseSource(source));
 }
-function normaliseRulePath(rulePath, home) {
-  return path17.resolve(expandTilde(rulePath, home));
+function formatCredentialSummary(summary) {
+  const cache = summary.cache === void 0 ? "" : `, cached ${summary.cache.ttl === void 0 ? "with no expiry" : `for ${summary.cache.ttl}`}${summary.cache.store === void 0 ? "" : ` in the ${summary.cache.store} store`}`;
+  return `${summary.target} from ${summary.sources.map(formatSourceSummary).join(", then ")}${cache}`;
 }
-
-// src/launcher/cascade.ts
-var PORTABLE_CONFIG_FILENAME = ".agent-shim.json";
-var PORTABLE_LOCAL_CONFIG_FILENAME = ".agent-shim.local.json";
-function loadCascadeInput(params) {
-  const globalConfig = loadConfigFile(params.paths.globalConfigFile, GlobalConfigSchema, params.read);
-  const directoryRules = loadConfigFile(params.paths.directoryRulesFile, DirectoryRulesSchema, params.read);
-  const loadProfile = (name) => {
-    const filepath = path18.join(params.paths.configProfilesDir, `${name}.json`);
-    const loaded = loadConfigFile(filepath, ConfigProfileSchema, params.read);
-    if (loaded === void 0) {
-      return void 0;
+function describeCredential(credential) {
+  return formatCredentialSummary(summariseCredential(credential));
+}
+function trySource(source, params) {
+  const none = (reason, warn = false) => ({ ok: false, reason, warn });
+  if ("env" in source) {
+    const value = params.env[source.env];
+    return value === void 0 || value === "" ? none("is unset or empty") : { ok: true, token: value };
+  }
+  if ("literal" in source) {
+    return { ok: true, token: source.literal };
+  }
+  if ("file" in source) {
+    const read = params.port.readSecretFile(source.file);
+    if (!read.found) {
+      return none("does not exist");
     }
-    return { name, profile: loaded.config, entryOrder: loaded.entryOrder, filepath: loaded.filepath };
-  };
-  const limit = globalConfig?.config.walkUpLimit;
-  const dirs = walkDirectoryAncestors(params.cwd, {
-    home: params.home,
-    ...limit === void 0 ? {} : { limit: expandTilde(limit, params.home) },
-    ...params.isReadable === void 0 ? {} : { isReadable: params.isReadable }
-  });
-  const levels = [];
-  for (const dir of dirs) {
-    const portable = loadConfigFile(path18.join(dir, PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(path18.join(dir, LEGACY_PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read);
-    const portableLocal = loadConfigFile(path18.join(dir, PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(path18.join(dir, LEGACY_PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read);
-    const rules = (directoryRules?.config.rules ?? []).map((rule, index) => ({ rule, index })).filter(({ rule }) => normaliseRulePath(rule.path, params.home) === dir).map(({ rule, index }) => {
-      const entryOrder = directoryRules?.ruleEntryOrders[index];
-      return {
-        rule,
-        ...entryOrder === void 0 ? {} : { entryOrder },
-        filepath: params.paths.directoryRulesFile
-      };
-    });
-    if (portable === void 0 && portableLocal === void 0 && rules.length === 0) {
-      continue;
+    if (read.mode !== void 0 && (read.mode & GROUP_OTHER_PERMISSION_BITS) !== 0) {
+      return none(
+        `is readable or writable by group or others (mode ${(read.mode & PERMISSION_BITS).toString(OCTAL_RADIX2)}); run \`chmod 600 ${source.file}\``,
+        true
+      );
     }
-    levels.push({
-      dir,
-      ...portable === void 0 ? {} : { portable: { config: portable.config, entryOrder: portable.entryOrder, filepath: portable.filepath } },
-      ...rules.length === 0 ? {} : { rules },
-      ...portableLocal === void 0 ? {} : { portableLocal: { config: portableLocal.config, entryOrder: portableLocal.entryOrder, filepath: portableLocal.filepath } }
-    });
+    const token2 = read.content.trim();
+    return token2 === "" ? none("is empty") : { ok: true, token: token2 };
+  }
+  const argv = commandArgv(source);
+  const interactive = isInteractiveSource(source, params.env);
+  if (interactive && !params.port.personPresent()) {
+    return none("needs a person to approve it, but there is no terminal or desktop session");
+  }
+  const timeoutMs = source.timeoutMs ?? (interactive ? CREDENTIAL_INTERACTIVE_TIMEOUT_MS : CREDENTIAL_COMMAND_TIMEOUT_MS);
+  const result = params.port.runCommand(argv, { timeoutMs, interactive });
+  if (result.timedOut) {
+    return none(`timed out after ${String(timeoutMs)}ms`);
+  }
+  if (result.status !== 0) {
+    const stderr = result.stderr.trim();
+    const outcome = result.status === null ? "could not be run or was killed by a signal" : `exited with status ${String(result.status)}`;
+    return none(`${outcome}${stderr === "" ? "" : `: ${stderr}`}`);
   }
-  const input = {
-    home: params.home,
-    ...globalConfig === void 0 ? {} : { globalConfig: { config: globalConfig.config, entryOrder: globalConfig.entryOrder, filepath: globalConfig.filepath } },
-    ...params.baseConfigProfile === void 0 ? {} : { baseConfigProfile: params.baseConfigProfile },
-    loadProfile,
-    levels,
-    ...params.cliOverride === void 0 ? {} : { cliOverride: params.cliOverride }
-  };
-  return { input, ...globalConfig === void 0 ? {} : { globalConfig: globalConfig.config } };
+  const token = result.stdout.trim();
+  return token === "" ? none("printed no token") : { ok: true, token };
 }
-function readDirectorySelections(loaded) {
-  let identity;
-  let configProfile;
-  for (const level of loaded.input.levels ?? []) {
-    for (const source of [level.portable?.config, ...(level.rules ?? []).map((entry) => entry.rule), level.portableLocal?.config]) {
-      if (source === void 0) {
-        continue;
-      }
-      if (source.identity !== void 0) {
-        identity = source.identity;
-      }
-      if (source.configProfile !== void 0) {
-        configProfile = source.configProfile;
+function warmCommandFor(subject) {
+  const [kind, name] = subject.split(" ");
+  return kind === "provider" ? `agent-shim credential warm --provider ${name ?? ""}` : `agent-shim credential warm ${name ?? ""}`;
+}
+function resolveCredential(params) {
+  const target = params.credential.target ?? "bearer";
+  const cacheBlock = params.credential.cache;
+  const cache = cacheBlock === void 0 ? void 0 : params.port.cache;
+  const store = cacheBlock === void 0 || cache === void 0 ? void 0 : effectiveStore(cacheBlock, cache.platform);
+  if (cacheBlock !== void 0 && cache !== void 0 && store !== void 0 && params.refresh !== true) {
+    const entry = cache.port.read(store, params.subject);
+    if (entry !== void 0 && isFresh(entry, cacheBlock, cache.now())) {
+      return { ok: true, credential: { target, token: entry.token, source: entry.source, warnings: [], cachedAt: entry.fetchedAt } };
+    }
+  }
+  const attempts = [];
+  const warnings = [];
+  for (const source of params.credential.sources) {
+    const outcome = trySource(source, params);
+    if (outcome.ok) {
+      if (cache !== void 0 && store !== void 0) {
+        cache.port.write(store, params.subject, { token: outcome.token, fetchedAt: cache.now(), source });
       }
+      return { ok: true, credential: { target, token: outcome.token, source, warnings } };
+    }
+    const line = `${describeSource(source)} ${outcome.reason}`;
+    attempts.push(line);
+    if (outcome.warn) {
+      warnings.push(`agent-shim: ${params.subject}: skipped ${line}`);
     }
   }
-  return { ...identity === void 0 ? {} : { identity }, ...configProfile === void 0 ? {} : { configProfile } };
+  const hint = cacheBlock === void 0 ? "" : `; fill the cache from a terminal with \`${warmCommandFor(params.subject)}\``;
+  return { ok: false, message: `agent-shim: ${params.subject} has no usable credential: ${attempts.join("; ")}${hint}` };
+}
+function credentialVariables(target, token) {
+  return {
+    ANTHROPIC_AUTH_TOKEN: target === "bearer" ? token : void 0,
+    ANTHROPIC_API_KEY: target === "apiKey" ? token : void 0,
+    CLAUDE_CODE_OAUTH_TOKEN: target === "oauthToken" ? token : void 0
+  };
 }
 
-// src/usage/poolPick.ts
-import path19 from "node:path";
-import { z as z9 } from "zod";
-
-// src/usage/plan.ts
-var TIER_MULTIPLIER = /(?:^|_)(\d+)x$/;
-var ZERO_TIER = /(?:^|_)zero$/;
-var BASE_TIER = /(?:^|_)(?:pro|free)$/;
-function planOf(account) {
-  const tier = account?.organizationRateLimitTier ?? account?.userRateLimitTier;
-  const tierField = tier === void 0 ? {} : { tier };
-  if (tier === void 0) {
-    return { kind: "subscription", capacity: 1, recognised: false };
+// src/providersStore.ts
+var ProviderNotFoundError = class extends CliError {
+  constructor(name) {
+    super(`No provider named "${name}". Run \`agent-shim provider add ${name}\` first.`);
+    this.name = name;
+    this.name = "ProviderNotFoundError";
   }
-  if (ZERO_TIER.test(tier)) {
-    return { kind: "pay-per-use", ...tierField };
+  name;
+};
+var ProviderAlreadyExistsError = class extends CliError {
+  constructor(providerName) {
+    super(`A provider named "${providerName}" already exists.`);
+    this.providerName = providerName;
+    this.name = "ProviderAlreadyExistsError";
   }
-  const multiplier = TIER_MULTIPLIER.exec(tier)?.[1];
-  if (multiplier !== void 0) {
-    return { kind: "subscription", capacity: Number(multiplier), recognised: true, ...tierField };
+  providerName;
+};
+var InvalidProviderNameError = class extends CliError {
+  constructor(attemptedName) {
+    super(
+      `"${attemptedName}" is not a valid provider name. Provider names must start with a letter or number and may then contain letters, numbers, dots, hyphens, underscores, and at signs.`
+    );
+    this.attemptedName = attemptedName;
+    this.name = "InvalidProviderNameError";
   }
-  return { kind: "subscription", capacity: 1, recognised: BASE_TIER.test(tier), ...tierField };
+  attemptedName;
+};
+var PROVIDER_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._@-]*$/;
+function providerJsonPath(paths, name) {
+  return path17.join(paths.providersDir, `${name}.json`);
 }
-
-// src/usage/rateLimit.ts
-var MS_PER_SECOND3 = 1e3;
-function epochSecondsToIso(value) {
-  if (value === void 0) {
-    return void 0;
-  }
-  const seconds = Number(value);
-  return Number.isFinite(seconds) && seconds > 0 ? new Date(seconds * MS_PER_SECOND3).toISOString() : void 0;
+function providerExists(paths, name) {
+  return fs6.existsSync(providerJsonPath(paths, name));
 }
-function nonNegativeNumber(value) {
-  if (value === void 0 || value.trim() === "") {
-    return void 0;
-  }
-  const parsed = Number(value);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
+var LEGACY_PROVIDER_FIELDS = ["tokenEnv", "tokenCommand", "authScheme"];
+var LEGACY_ENV_CREDENTIAL_KEYS = Object.values(CREDENTIAL_TARGET_VARS);
+var LEGACY_LITERAL_PLACEHOLDER = "<the value of env.ANTHROPIC_AUTH_TOKEN>";
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-var UNIFIED_PREFIX = "anthropic-ratelimit-unified-";
-function unifiedWindow(headers, window) {
-  const utilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}${window}-utilization`]);
-  const resetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}${window}-reset`]);
-  const status = headers[`${UNIFIED_PREFIX}${window}-status`];
-  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
+function legacyProviderConversion(raw) {
+  if (!isRecord3(raw) || "credential" in raw) {
     return void 0;
   }
-  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
-}
-function parseUnifiedRateLimit(headers) {
-  if (!Object.keys(headers).some((name) => name.startsWith(UNIFIED_PREFIX))) {
+  const env = isRecord3(raw.env) ? raw.env : void 0;
+  const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
+  const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
+  if (fields.length === 0) {
     return void 0;
   }
-  const status = headers[`${UNIFIED_PREFIX}status`];
-  const fiveHour = unifiedWindow(headers, "5h");
-  const sevenDay = unifiedWindow(headers, "7d");
-  const representativeClaim = headers[`${UNIFIED_PREFIX}representative-claim`];
-  const resetAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}reset`]);
-  const overageStatus = headers[`${UNIFIED_PREFIX}overage-status`];
+  const sources = [];
+  if (typeof raw.tokenEnv === "string") {
+    sources.push({ env: raw.tokenEnv });
+  }
+  if (Array.isArray(raw.tokenCommand)) {
+    sources.push({ command: raw.tokenCommand });
+  }
+  if (typeof env?.ANTHROPIC_AUTH_TOKEN === "string" && env.ANTHROPIC_AUTH_TOKEN !== "") {
+    sources.push({ literal: LEGACY_LITERAL_PLACEHOLDER });
+  }
+  const remainingEnv = env === void 0 ? void 0 : Object.fromEntries(Object.entries(env).filter(([key]) => !LEGACY_ENV_CREDENTIAL_KEYS.includes(key)));
+  const replacedKeys = [...LEGACY_PROVIDER_FIELDS, "env"];
+  const rest = Object.fromEntries(Object.entries(raw).filter(([key]) => !replacedKeys.includes(key)));
   return {
-    ...status === void 0 ? {} : { status },
-    ...fiveHour === void 0 ? {} : { fiveHour },
-    ...sevenDay === void 0 ? {} : { sevenDay },
-    ...representativeClaim === void 0 ? {} : { representativeClaim },
-    ...resetAt === void 0 ? {} : { resetAt },
-    ...overageStatus === void 0 ? {} : { overageStatus }
+    fields,
+    replacement: {
+      ...rest,
+      credential: { sources, ...raw.authScheme === "apiKey" ? { target: "apiKey" } : {} },
+      ...remainingEnv === void 0 || Object.keys(remainingEnv).length === 0 ? {} : { env: remainingEnv }
+    }
   };
 }
-
-// src/usage/scan.ts
-import { z as z8 } from "zod";
-var AnthropicUsageSchema = z8.looseObject({
-  input_tokens: z8.number().int().nonnegative().nullish(),
-  output_tokens: z8.number().int().nonnegative().nullish(),
-  cache_creation_input_tokens: z8.number().int().nonnegative().nullish(),
-  cache_read_input_tokens: z8.number().int().nonnegative().nullish()
-});
-var ErrorObjectSchema = z8.looseObject({
-  type: z8.string().optional(),
-  code: z8.union([z8.string(), z8.number()]).optional(),
-  message: z8.string().optional()
-});
-
-// src/usage/middleware.ts
-var ANTHROPIC_PROVIDER = "anthropic";
-
-// src/usage/pick.ts
-var MS_PER_SECOND4 = 1e3;
-var MS_PER_HOUR = 36e5;
-var HOURS_PER_DAY2 = 24;
-var FIVE_HOURS = 5;
-var PROMPT_CACHE_TTL_HOURS = 1;
-var PERCENT = 100;
-var SEVEN_DAYS = 7;
-var FIVE_HOUR_WINDOW_MS = FIVE_HOURS * MS_PER_HOUR;
-var SEVEN_DAY_WINDOW_MS = SEVEN_DAYS * HOURS_PER_DAY2 * MS_PER_HOUR;
-var PROMPT_CACHE_TTL_MS = PROMPT_CACHE_TTL_HOURS * MS_PER_HOUR;
-var CLASS_ORDER = { scored: 0, unknown: 1, "pay-per-use": 2, ineligible: 3 };
-function unifiedOf(state) {
-  return state?.rateLimit?.unified;
-}
-function limitBlockedUntil(state, nowMs) {
-  const limit = state?.lastLimit;
-  if (state === void 0 || limit === void 0) {
-    return void 0;
+var LegacyProviderFileError = class extends CliError {
+  constructor(filePath, conversion) {
+    super(
+      `${filePath} uses ${conversion.fields.join(", ")}, which a credential block replaced. Rewrite it as:
+` + JSON.stringify(conversion.replacement, null, 2)
+    );
+    this.filePath = filePath;
+    this.conversion = conversion;
+    this.name = "LegacyProviderFileError";
   }
-  if (Date.parse(state.lastRequestAt) > Date.parse(limit.observedAt)) {
+  filePath;
+  conversion;
+};
+function parseProviderFile(filePath, raw) {
+  const conversion = legacyProviderConversion(raw);
+  if (conversion !== void 0) {
+    throw new LegacyProviderFileError(filePath, conversion);
+  }
+  const parsed = ProviderSchema.safeParse(raw);
+  if (!parsed.success) {
+    throw new ConfigValidationError(filePath, parsed.error.issues);
+  }
+  return parsed.data;
+}
+function readProvider(paths, name) {
+  const filePath = providerJsonPath(paths, name);
+  if (!fs6.existsSync(filePath)) {
     return void 0;
   }
-  const until = limit.resetAt === void 0 ? limit.retryAfterSeconds === void 0 ? void 0 : Date.parse(limit.observedAt) + limit.retryAfterSeconds * MS_PER_SECOND4 : Date.parse(limit.resetAt);
-  return until !== void 0 && until > nowMs ? until : void 0;
+  const raw = JSON.parse(fs6.readFileSync(filePath, "utf8"));
+  return parseProviderFile(filePath, raw);
 }
-function windowBlockedUntil(windows) {
-  const resets = windows.flatMap((window) => window.status === "rejected" && window.resetsAtMs !== void 0 ? [window.resetsAtMs] : []);
-  return resets.length === 0 ? void 0 : Math.max(...resets);
+function loadProvider(providersDir, name, port) {
+  const filePath = path17.join(providersDir, `${name}.json`);
+  const raw = port.readConfigFile(filePath);
+  return raw === void 0 ? void 0 : parseProviderFile(filePath, raw);
 }
-function fiveHourBurn(records) {
-  const points = [];
-  for (const record of records) {
-    const window = record.rateLimitHeaders === void 0 ? void 0 : parseUnifiedRateLimit(record.rateLimitHeaders)?.fiveHour;
-    if (window?.utilization !== void 0 && window.resetsAt !== void 0) {
-      points.push({ resetsAt: window.resetsAt, point: { atMs: Date.parse(record.at), utilization: window.utilization } });
+function listProviders(paths) {
+  const names = listProviderNames(
+    (dir) => fs6.readdirSync(dir),
+    paths.providersDir
+  );
+  const result = [];
+  for (const name of names) {
+    let provider;
+    try {
+      provider = readProvider(paths, name);
+    } catch (error) {
+      if (!(error instanceof ConfigValidationError || error instanceof LegacyProviderFileError)) {
+        throw error;
+      }
+      console.error(`agent-shim: providers/${name}.json is invalid and was skipped: ${error.message}`);
+      continue;
+    }
+    if (provider !== void 0) {
+      result.push({ name, provider });
     }
   }
-  const latest = points.at(-1)?.resetsAt;
-  const current = points.filter((entry) => entry.resetsAt === latest).map((entry) => entry.point);
-  const first = current.at(0);
-  const last = current.at(-1);
-  if (first === void 0 || last === void 0 || last.atMs <= first.atMs || last.utilization <= first.utilization) {
-    return void 0;
+  return result;
+}
+function listProviderNames(readdir, providersDir) {
+  let entries;
+  try {
+    entries = readdir(providersDir);
+  } catch {
+    return [];
   }
-  return (last.utilization - first.utilization) / (last.atMs - first.atMs);
+  return entries.filter((entry) => entry.endsWith(".json")).map((entry) => entry.slice(0, -".json".length)).sort();
 }
-function percent(fraction) {
-  return `${String(Math.round(fraction * PERCENT))}%`;
+function describeProviderEndpoint(provider) {
+  return isCodexProvider(provider) ? "codex translation daemon" : provider.baseUrl;
 }
-function describeWindow(label, window, effective, nowMs) {
-  if (effective.reset) {
-    return `${label} window has reset`;
+var ProviderKindMismatchError = class extends UsageError {
+  constructor(message) {
+    super(message);
+    this.name = "ProviderKindMismatchError";
   }
-  const used = effective.utilization === void 0 ? "usage unknown" : `${percent(effective.utilization)} used`;
-  const resets = effective.resetsAtMs === void 0 ? "" : `, resets in ${formatAge(effective.resetsAtMs - nowMs)}`;
-  return `${label} ${used}${resets}${window.status === "allowed_warning" ? " (nearly used)" : ""}`;
-}
-function capacityOf(plan) {
-  return plan.kind === "subscription" ? plan.capacity : 1;
+};
+function isEmptyCodexConfig(config) {
+  return config === void 0 || config.defaultModel === void 0 && config.effort === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
 }
-function assess(member, nowMs) {
-  const plan = planOf(member.account);
-  const planReasons = plan.kind === "pay-per-use" ? ["billed by use (no plan allowance)"] : plan.recognised ? [`${String(plan.capacity)}x plan`] : [`plan tier ${plan.tier === void 0 ? "not known" : `"${plan.tier}" not recognised`}, counted as 1x`];
-  const base = { identity: member.identity, plan };
-  if (member.readError !== void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: [`usage state unreadable: ${member.readError}`, ...planReasons] } };
+function addProvider(paths, name, input) {
+  if (providerExists(paths, name)) {
+    throw new ProviderAlreadyExistsError(name);
   }
-  const state = member.snapshot?.providers[ANTHROPIC_PROVIDER];
-  const unified = unifiedOf(state);
-  if (member.snapshot === void 0 || state === void 0 || unified === void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: ["no usage recorded yet, so its quota is unknown (turn on trackUsage for it)", ...planReasons] } };
+  if (!PROVIDER_NAME_RE.test(name)) {
+    throw new InvalidProviderNameError(name);
   }
-  const observedAgo = state.rateLimit === void 0 ? "" : ` (last seen ${formatAge(nowMs - Date.parse(state.rateLimit.observedAt))} ago)`;
-  const fiveHourWindow = unified.fiveHour;
-  const sevenDayWindow = unified.sevenDay;
-  const five = fiveHourWindow === void 0 ? void 0 : effectiveWindow(fiveHourWindow, nowMs);
-  const seven = sevenDayWindow === void 0 ? void 0 : effectiveWindow(sevenDayWindow, nowMs);
-  const windowReasons = [
-    ...fiveHourWindow === void 0 || five === void 0 ? [] : [describeWindow("5h", fiveHourWindow, five, nowMs)],
-    ...sevenDayWindow === void 0 || seven === void 0 ? [] : [describeWindow("7d", sevenDayWindow, seven, nowMs)]
-  ];
-  const blockedUntil = Math.max(
-    windowBlockedUntil([five, seven].flatMap((window) => window === void 0 ? [] : [window])) ?? 0,
-    limitBlockedUntil(state, nowMs) ?? 0
-  );
-  if (blockedUntil > nowMs) {
-    if (unified.overageStatus === "allowed") {
-      return { candidate: { ...base, class: "pay-per-use", reasons: [`plan exhausted until ${new Date(blockedUntil).toISOString()}, continues as extra usage`, ...windowReasons, ...planReasons] } };
-    }
-    return { candidate: { ...base, class: "ineligible", blockedUntilMs: blockedUntil, reasons: [`refused until ${new Date(blockedUntil).toISOString()} (in ${formatAge(blockedUntil - nowMs)})`, ...windowReasons, ...planReasons] } };
+  const kind = input.kind ?? "http";
+  if (kind === "codex" && input.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError("A codex provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
   }
-  if (plan.kind === "pay-per-use" || fiveHourWindow === void 0 && sevenDayWindow === void 0) {
-    return { candidate: { ...base, class: "pay-per-use", reasons: [...plan.kind === "pay-per-use" ? planReasons : ["no plan windows reported, so usage bills as extra usage"]] } };
+  if (kind === "http" && input.baseUrl === void 0) {
+    throw new ProviderKindMismatchError("An http provider needs --base-url.");
   }
-  const basis = seven?.utilization !== void 0 ? { window: seven, windowMs: SEVEN_DAY_WINDOW_MS } : five?.utilization !== void 0 ? { window: five, windowMs: FIVE_HOUR_WINDOW_MS } : void 0;
-  if (basis?.window.utilization === void 0) {
-    return { candidate: { ...base, class: "unknown", reasons: ["quota windows reported no utilisation", ...windowReasons, ...planReasons] } };
+  if (kind === "http" && !isEmptyCodexConfig(input.codex)) {
+    throw new ProviderKindMismatchError("Codex settings apply only to a codex provider (--kind codex).");
   }
-  const remaining = Math.max(0, 1 - basis.window.utilization);
-  const untilResetMs = basis.window.resetsAtMs === void 0 ? basis.windowMs : Math.max(basis.window.resetsAtMs - nowMs, MS_PER_SECOND4);
-  const score = remaining * plan.capacity / (untilResetMs / MS_PER_HOUR);
-  const fiveRemaining = five?.utilization === void 0 ? void 0 : Math.max(0, 1 - five.utilization);
-  const fiveUntil = five?.resetsAtMs === void 0 ? FIVE_HOUR_WINDOW_MS : Math.max(five.resetsAtMs - nowMs, MS_PER_SECOND4);
-  const burn = fiveHourBurn(member.records);
-  return {
-    candidate: { ...base, class: "scored", score, reasons: [...windowReasons.map((reason, index) => index === windowReasons.length - 1 ? `${reason}${observedAgo}` : reason), ...planReasons] },
-    ...fiveRemaining === void 0 ? {} : { fiveHour: { remaining: fiveRemaining, untilResetMs: fiveUntil } },
-    ...burn === void 0 ? {} : { burn }
+  const shared = {
+    displayName: input.displayName,
+    credential: { sources: input.sources, ...input.target === void 0 ? {} : { target: input.target } },
+    ...input.env === void 0 || Object.keys(input.env).length === 0 ? {} : { env: input.env }
   };
-}
-function rankPool(input) {
-  const { members, nowMs } = input;
-  const assessments = members.map((member) => assess(member, nowMs));
-  const demands = assessments.flatMap(({ candidate, burn }) => burn === void 0 ? [] : [burn * capacityOf(candidate.plan)]);
-  const sharedDemand = demands.length === 0 ? void 0 : Math.max(...demands);
-  const candidates = assessments.map((assessment) => {
-    const { candidate, fiveHour, burn } = assessment;
-    const pace = burn ?? (sharedDemand === void 0 ? void 0 : sharedDemand / capacityOf(candidate.plan));
-    if (candidate.class !== "scored" || fiveHour === void 0 || pace === void 0) {
-      return { ...candidate, feasible: true };
-    }
-    const runsDryInMs = fiveHour.remaining / pace;
-    if (runsDryInMs >= fiveHour.untilResetMs) {
-      return { ...candidate, feasible: true };
-    }
-    return { ...candidate, feasible: false, reasons: [`5h window would run dry in ${formatAge(runsDryInMs)}, before it resets in ${formatAge(fiveHour.untilResetMs)}`, ...candidate.reasons] };
-  });
-  const ordered = [...candidates].sort(
-    (left, right) => CLASS_ORDER[left.class] - CLASS_ORDER[right.class] || Number(right.feasible) - Number(left.feasible) || (right.score ?? 0) - (left.score ?? 0) || left.identity.localeCompare(right.identity)
+  const parsed = ProviderSchema.safeParse(
+    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input.codex) ? {} : { codex: input.codex } } : { ...shared, baseUrl: input.baseUrl }
   );
-  const sticky = input.sticky;
-  const stickyIndex = sticky === void 0 ? -1 : ordered.findIndex((candidate) => candidate.identity === sticky.identity);
-  const stickyCandidate = ordered[stickyIndex];
-  if (sticky !== void 0 && stickyCandidate?.class === "scored" && stickyCandidate.feasible) {
-    const ageMs = nowMs - Date.parse(sticky.at);
-    const warm = ageMs <= PROMPT_CACHE_TTL_MS;
-    if (input.resuming || warm) {
-      const why = warm ? `used here ${formatAge(ageMs)} ago, prompt cache still warm` : "resuming a conversation started on this account";
-      ordered.splice(stickyIndex, 1);
-      ordered.unshift({ ...stickyCandidate, reasons: [why, ...stickyCandidate.reasons] });
-    }
+  if (!parsed.success) {
+    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
   }
-  const pick = ordered.find((candidate) => candidate.class !== "ineligible");
-  const returns = ordered.flatMap((candidate) => candidate.blockedUntilMs === void 0 ? [] : [{ identity: candidate.identity, atMs: candidate.blockedUntilMs }]);
-  const earliestReturn = returns.length === 0 ? void 0 : returns.reduce((soonest, entry) => entry.atMs < soonest.atMs ? entry : soonest);
-  return {
-    candidates: ordered,
-    ...pick === void 0 ? { ...earliestReturn === void 0 ? {} : { earliestReturn } } : { pick }
+  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
+  return parsed.data;
+}
+function updateProvider(paths, name, input) {
+  const existing = readProvider(paths, name);
+  if (existing === void 0) {
+    throw new ProviderNotFoundError(name);
+  }
+  const unset = new Set(input.unsetEnv);
+  const env = Object.fromEntries(Object.entries({ ...existing.env, ...input.env }).filter(([key]) => !unset.has(key)));
+  const target = input.target ?? existing.credential.target;
+  const cache = input.cache === void 0 ? existing.credential.cache : input.cache === false ? void 0 : input.cache;
+  if (isCodexProvider(existing) && input.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError(`Provider "${name}" is a codex provider, which has no base URL.`);
+  }
+  if (!isCodexProvider(existing) && !isEmptyCodexConfig(input.codex)) {
+    throw new ProviderKindMismatchError(`Provider "${name}" is an http provider; codex settings apply only to a codex provider.`);
+  }
+  const shared = {
+    ...input.displayName === void 0 ? {} : { displayName: input.displayName },
+    credential: {
+      sources: input.sources ?? existing.credential.sources,
+      ...target === void 0 ? {} : { target },
+      ...cache === void 0 ? {} : { cache }
+    },
+    env: Object.keys(env).length === 0 ? void 0 : env
   };
+  let candidate;
+  if (isCodexProvider(existing)) {
+    const codex = {
+      ...existing.codex,
+      ...input.codex,
+      ...existing.codex?.models === void 0 && input.codex?.models === void 0 ? {} : { models: { ...existing.codex?.models, ...input.codex?.models } }
+    };
+    candidate = { ...existing, ...shared, codex: isEmptyCodexConfig(codex) ? void 0 : codex };
+  } else {
+    candidate = { ...existing, ...shared, ...input.baseUrl === void 0 ? {} : { baseUrl: input.baseUrl } };
+  }
+  const parsed = ProviderSchema.safeParse(candidate);
+  if (!parsed.success) {
+    throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
+  }
+  writeJsonAtomic(providerJsonPath(paths, name), parsed.data);
+  return parsed.data;
 }
-
-// src/usage/store.ts
-var DAY_MS2 = 864e5;
-var DAYS_IN_WEEK = 7;
-var USAGE_RETENTION_MS = DAYS_IN_WEEK * DAY_MS2;
-
-// src/usage/poolPick.ts
-var SCHEMA_VERSION = 1;
-var PickEntrySchema = z9.strictObject({ identity: z9.string().min(1), at: z9.iso.datetime() });
-var PicksFileSchema = z9.strictObject({
-  schemaVersion: z9.literal(SCHEMA_VERSION),
-  picks: z9.record(z9.string().min(1), PickEntrySchema)
-});
-function errorMessage(error) {
-  return error instanceof Error ? error.message : String(error);
+function removeProvider(paths, name) {
+  if (!providerExists(paths, name)) {
+    throw new ProviderNotFoundError(name);
+  }
+  fs6.rmSync(providerJsonPath(paths, name));
 }
-function loadPoolMembers(fs12, paths, identities, nowMs) {
-  const windowStartMs = nowMs - FIVE_HOUR_WINDOW_MS;
-  const log = readUsageLog(fs12, paths.usageLogDir, { sinceMs: windowStartMs });
-  return identities.map((identity) => {
-    const records = log.records.filter((record) => record.identity === identity && record.provider === ANTHROPIC_PROVIDER && Date.parse(record.at) >= windowStartMs);
-    try {
-      const snapshot = readUsageSnapshot(fs12, paths.usageSnapshotsDir, identity);
-      const account = readAccountMetadata(fs12, paths.identitiesDir, identity) ?? snapshot?.account;
-      return { identity, records, ...snapshot === void 0 ? {} : { snapshot }, ...account === void 0 ? {} : { account } };
-    } catch (error) {
-      if (error instanceof UsageSnapshotError || error instanceof AccountMetadataError) {
-        return { identity, records, readError: errorMessage(error) };
-      }
-      throw error;
+function cascadeProviderName(cascade) {
+  let name;
+  for (const layer of assembleCascade(cascade).layers) {
+    if (layer.launch?.provider !== void 0) {
+      name = layer.launch.provider;
     }
-  });
+  }
+  return name;
 }
-function rankPoolFromStore(params) {
-  return rankPool({
-    members: loadPoolMembers(params.fs, params.paths, params.identities, params.nowMs),
-    nowMs: params.nowMs,
-    resuming: params.resuming,
-    ...params.sticky === void 0 ? {} : { sticky: params.sticky }
-  });
+function resolveProvider(params) {
+  const cliName = params.cliProvider !== void 0 && params.cliProvider !== "" ? params.cliProvider : void 0;
+  const name = cliName ?? (params.cascade === void 0 ? void 0 : cascadeProviderName(params.cascade));
+  if (name === void 0) {
+    return void 0;
+  }
+  const definition = loadProvider(params.paths.providersDir, name, params.port);
+  if (definition === void 0) {
+    const known = listProviderNames(params.port.readdir, params.paths.providersDir);
+    return {
+      ok: false,
+      status: 1,
+      message: `agent-shim: no provider named "${name}". ` + (known.length > 0 ? `Known providers: ${known.join(", ")}.` : "No providers are defined yet; run `agent-shim provider add`.")
+    };
+  }
+  if (params.credentials === void 0) {
+    return { ok: false, status: 1, message: `agent-shim: provider ${name} needs its credential resolved, but this launcher has no credential port wired` };
+  }
+  const resolution = resolveCredential({ credential: definition.credential, env: params.env, port: params.credentials, subject: `provider ${name}` });
+  if (!resolution.ok) {
+    return { ok: false, status: CREDENTIAL_UNAVAILABLE_EXIT, message: resolution.message };
+  }
+  return { ok: true, provider: { name, definition, credential: resolution.credential }, warnings: resolution.credential.warnings };
 }
-function readPicksFile(fs12, file) {
-  const empty = { schemaVersion: SCHEMA_VERSION, picks: {} };
-  const raw = fs12.readFileUtf8(file);
-  if (raw === void 0) {
-    return { file: empty };
+
+// src/directoryRulesStore.ts
+var DirectoryRuleNotFoundError = class extends CliError {
+  constructor(rulePath) {
+    super(`No directory rule found for path "${rulePath}".`);
+    this.rulePath = rulePath;
+    this.name = "DirectoryRuleNotFoundError";
   }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return { file: empty, problem: `${file} is not valid JSON` };
+  rulePath;
+};
+var DirectoryRuleMissingTargetError = class extends CliError {
+  constructor() {
+    super("A directory rule must set at least one of --config-profile or --identity.");
+    this.name = "DirectoryRuleMissingTargetError";
   }
-  const result = PicksFileSchema.safeParse(parsed);
-  return result.success ? { file: result.data } : { file: empty, problem: `${file} is not a picks file this agent-shim can read` };
+};
+var DirectoryRuleAlreadyExistsError = class extends CliError {
+  constructor(rulePath) {
+    super(`A directory rule for path "${rulePath}" already exists. Use \`agent-shim rule set\` to change it.`);
+    this.rulePath = rulePath;
+    this.name = "DirectoryRuleAlreadyExistsError";
+  }
+  rulePath;
+};
+function readDirectoryRules(paths) {
+  return readJson(paths.directoryRulesFile, DirectoryRulesSchema) ?? { rules: [] };
 }
-function readStickyPick(fs12, picksFile, directory) {
-  const read = readPicksFile(fs12, picksFile);
-  const entry = read.file.picks[directory];
-  return { ...entry === void 0 ? {} : { sticky: entry }, ...read.problem === void 0 ? {} : { problem: read.problem } };
+function writeDirectoryRules(paths, rules) {
+  const parsed = DirectoryRulesSchema.safeParse(rules);
+  if (!parsed.success) {
+    throw new ConfigValidationError(paths.directoryRulesFile, parsed.error.issues);
+  }
+  writeJsonAtomic(paths.directoryRulesFile, parsed.data);
 }
-function recordStickyPick(fs12, picksFile, directory, identity, nowMs) {
-  const current = readPicksFile(fs12, picksFile).file.picks;
-  const kept = Object.entries(current).filter(([, entry]) => nowMs - Date.parse(entry.at) <= USAGE_RETENTION_MS);
-  const next = { schemaVersion: SCHEMA_VERSION, picks: { ...Object.fromEntries(kept), [directory]: { identity, at: new Date(nowMs).toISOString() } } };
-  fs12.mkdirPrivate(path19.dirname(picksFile));
-  fs12.writeFilePrivate(picksFile, `${JSON.stringify(next, null, 2)}
-`);
+function listDirectoryRules(paths) {
+  return readDirectoryRules(paths).rules;
 }
-
-// src/launcher/pool.ts
-var RESUME_FLAGS = /* @__PURE__ */ new Set(["--continue", "-c", "--resume", "-r"]);
-var TERMINATOR = "--";
-var REASONS_LOGGED = 3;
-function splitMembers(pool, paths, fs12) {
-  const exists = (name) => loadIdentity(paths.identitiesDir, name, fs12) !== void 0;
-  return { present: pool.identities.filter(exists), missing: pool.identities.filter((name) => !exists(name)) };
+function addDirectoryRule(paths, rulePath, options) {
+  if (options.configProfile === void 0 && options.identity === void 0) {
+    throw new DirectoryRuleMissingTargetError();
+  }
+  const current = readDirectoryRules(paths);
+  if (current.rules.some((rule) => rule.path === rulePath)) {
+    throw new DirectoryRuleAlreadyExistsError(rulePath);
+  }
+  const created = buildNewRule(rulePath, options);
+  writeDirectoryRules(paths, { ...current, rules: [...current.rules, created] });
+  return created;
 }
-function isResuming(passthrough) {
-  const end = passthrough.indexOf(TERMINATOR);
-  return (end === -1 ? passthrough : passthrough.slice(0, end)).some((token) => RESUME_FLAGS.has(token));
+function ruleHasEffect(rule) {
+  return rule.configProfile !== void 0 || rule.identity !== void 0 || rule.categories !== void 0 || rule.entries !== void 0 || rule.launch !== void 0;
 }
-function resolvePoolLaunch(params) {
-  const { poolName, log } = params;
-  const pool = params.pools?.[poolName];
-  if (pool === void 0) {
-    return { ok: false, message: `agent-shim: no pool named "${poolName}" (selected via ${params.selectedVia}). Run \`agent-shim pool add ${poolName} --identity <name>...\` first.` };
+function updateDirectoryRule(paths, rulePath, options) {
+  const current = readDirectoryRules(paths);
+  const index = current.rules.findIndex((rule) => rule.path === rulePath);
+  const existing = index === -1 ? void 0 : current.rules[index];
+  if (existing === void 0) {
+    throw new DirectoryRuleNotFoundError(rulePath);
   }
-  const { present: identities, missing } = splitMembers(pool, params.paths, params.fs);
-  for (const name of missing) {
-    log.warn(`agent-shim: pool "${poolName}" names identity "${name}", which does not exist; skipping it`);
+  const { configProfile, identity, ...rest } = existing;
+  const nextConfigProfile = options.configProfile === void 0 ? configProfile : options.configProfile === false ? void 0 : options.configProfile;
+  const nextIdentity = options.identity === void 0 ? identity : options.identity === false ? void 0 : options.identity;
+  const updated = {
+    ...rest,
+    ...nextConfigProfile === void 0 ? {} : { configProfile: nextConfigProfile },
+    ...nextIdentity === void 0 ? {} : { identity: nextIdentity }
+  };
+  if (!ruleHasEffect(updated)) {
+    throw new DirectoryRuleMissingTargetError();
   }
-  if (identities.length === 0) {
-    return { ok: false, message: `agent-shim: no member of pool "${poolName}" is an existing identity.` };
+  const nextRules = [...current.rules];
+  nextRules[index] = updated;
+  writeDirectoryRules(paths, { ...current, rules: nextRules });
+  return updated;
+}
+function buildNewRule(rulePath, options) {
+  return {
+    path: rulePath,
+    ...options.configProfile !== void 0 ? { configProfile: options.configProfile } : {},
+    ...options.identity !== void 0 ? { identity: options.identity } : {}
+  };
+}
+function removeDirectoryRule(paths, rulePath) {
+  const current = readDirectoryRules(paths);
+  const nextRules = current.rules.filter((rule) => rule.path !== rulePath);
+  if (nextRules.length === current.rules.length) {
+    throw new DirectoryRuleNotFoundError(rulePath);
   }
-  const resuming = isResuming(params.passthrough);
-  const stickyRead = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd);
-  if (stickyRead.problem !== void 0) {
-    log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
+  writeDirectoryRules(paths, { ...current, rules: nextRules });
+}
+
+// src/checkReport.ts
+import os4 from "node:os";
+
+// src/launcher/cascade.ts
+import path19 from "node:path";
+
+// src/pathNorm.ts
+import path18 from "node:path";
+function expandTilde(value, home) {
+  if (value === "~") {
+    return home;
   }
-  for (; ; ) {
-    const nowMs = params.now();
-    const ranking = rankPoolFromStore({ fs: params.usageFs, paths: params.paths, identities, nowMs, resuming, ...stickyRead.sticky === void 0 ? {} : { sticky: stickyRead.sticky } });
-    const { pick, earliestReturn } = ranking;
-    if (pick !== void 0) {
-      recordStickyPick(params.usageFs, params.paths.usagePicksFile, params.cwd, pick.identity, nowMs);
-      return { ok: true, identity: pick.identity, explanation: `pool ${poolName}: ${pick.reasons.slice(0, REASONS_LOGGED).join("; ")}` };
-    }
-    if (earliestReturn === void 0) {
-      return { ok: false, message: `agent-shim: no member of pool "${poolName}" can be picked.` };
+  if (value.startsWith("~/")) {
+    return path18.join(home, value.slice(2));
+  }
+  return value;
+}
+function normaliseRulePath(rulePath, home) {
+  return path18.resolve(expandTilde(rulePath, home));
+}
+
+// src/launcher/cascade.ts
+var PORTABLE_CONFIG_FILENAME = ".agent-shim.json";
+var PORTABLE_LOCAL_CONFIG_FILENAME = ".agent-shim.local.json";
+function loadCascadeInput(params) {
+  const globalConfig = loadConfigFile(params.paths.globalConfigFile, GlobalConfigSchema, params.read);
+  const directoryRules = loadConfigFile(params.paths.directoryRulesFile, DirectoryRulesSchema, params.read);
+  const loadProfile = (name) => {
+    const filepath = path19.join(params.paths.configProfilesDir, `${name}.json`);
+    const loaded = loadConfigFile(filepath, ConfigProfileSchema, params.read);
+    if (loaded === void 0) {
+      return void 0;
     }
-    const until = new Date(earliestReturn.atMs).toISOString();
-    if (!params.wait) {
+    return { name, profile: loaded.config, entryOrder: loaded.entryOrder, filepath: loaded.filepath };
+  };
+  const limit = globalConfig?.config.walkUpLimit;
+  const dirs = walkDirectoryAncestors(params.cwd, {
+    home: params.home,
+    ...limit === void 0 ? {} : { limit: expandTilde(limit, params.home) },
+    ...params.isReadable === void 0 ? {} : { isReadable: params.isReadable }
+  });
+  const levels = [];
+  for (const dir of dirs) {
+    const portable = loadConfigFile(path19.join(dir, PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(path19.join(dir, LEGACY_PORTABLE_CONFIG_FILENAME), PortableConfigSchema, params.read);
+    const portableLocal = loadConfigFile(path19.join(dir, PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read) ?? loadConfigFile(path19.join(dir, LEGACY_PORTABLE_LOCAL_CONFIG_FILENAME), PortableConfigSchema, params.read);
+    const rules = (directoryRules?.config.rules ?? []).map((rule, index) => ({ rule, index })).filter(({ rule }) => normaliseRulePath(rule.path, params.home) === dir).map(({ rule, index }) => {
+      const entryOrder = directoryRules?.ruleEntryOrders[index];
       return {
-        ok: false,
-        message: `agent-shim: every member of pool "${poolName}" is refused right now; the earliest, ${earliestReturn.identity}, returns at ${until} (in ${formatAge(earliestReturn.atMs - nowMs)}). Pass --wait to sleep until then.`
+        rule,
+        ...entryOrder === void 0 ? {} : { entryOrder },
+        filepath: params.paths.directoryRulesFile
       };
+    });
+    if (portable === void 0 && portableLocal === void 0 && rules.length === 0) {
+      continue;
     }
-    log.info(`agent-shim: every member of pool "${poolName}" is refused; waiting until ${until} for ${earliestReturn.identity}`);
-    params.sleep(Math.max(earliestReturn.atMs - nowMs, 0));
+    levels.push({
+      dir,
+      ...portable === void 0 ? {} : { portable: { config: portable.config, entryOrder: portable.entryOrder, filepath: portable.filepath } },
+      ...rules.length === 0 ? {} : { rules },
+      ...portableLocal === void 0 ? {} : { portableLocal: { config: portableLocal.config, entryOrder: portableLocal.entryOrder, filepath: portableLocal.filepath } }
+    });
   }
-}
-
-// src/poolPickReport.ts
-function candidateView(candidate) {
-  return {
-    identity: candidate.identity,
-    class: candidate.class,
-    ...candidate.score === void 0 ? {} : { score: candidate.score },
-    feasible: candidate.feasible,
-    ...candidate.blockedUntilMs === void 0 ? {} : { blockedUntil: new Date(candidate.blockedUntilMs).toISOString() },
-    plan: candidate.plan,
-    reasons: candidate.reasons
+  const input = {
+    home: params.home,
+    ...globalConfig === void 0 ? {} : { globalConfig: { config: globalConfig.config, entryOrder: globalConfig.entryOrder, filepath: globalConfig.filepath } },
+    ...params.baseConfigProfile === void 0 ? {} : { baseConfigProfile: params.baseConfigProfile },
+    loadProfile,
+    levels,
+    ...params.cliOverride === void 0 ? {} : { cliOverride: params.cliOverride }
   };
+  return { input, ...globalConfig === void 0 ? {} : { globalConfig: globalConfig.config } };
 }
-function collectPoolPick(params) {
-  const { present, missing } = splitMembers(params.pool, params.paths, params.fs);
-  const sticky = readStickyPick(params.usageFs, params.paths.usagePicksFile, params.directory);
-  const ranking = rankPoolFromStore({
-    fs: params.usageFs,
-    paths: params.paths,
-    identities: present,
-    nowMs: params.nowMs,
-    resuming: false,
-    ...sticky.sticky === void 0 ? {} : { sticky: sticky.sticky }
-  });
-  return {
-    pool: params.poolName,
-    directory: params.directory,
-    ...ranking.pick === void 0 ? {} : { pick: ranking.pick.identity },
-    candidates: ranking.candidates.map(candidateView),
-    missing,
-    ...ranking.earliestReturn === void 0 ? {} : { earliestReturn: { identity: ranking.earliestReturn.identity, at: new Date(ranking.earliestReturn.atMs).toISOString() } },
-    ...sticky.problem === void 0 ? {} : { stickyProblem: sticky.problem }
-  };
+function readDirectorySelections(loaded) {
+  let identity;
+  let configProfile;
+  for (const level of loaded.input.levels ?? []) {
+    for (const source of [level.portable?.config, ...(level.rules ?? []).map((entry) => entry.rule), level.portableLocal?.config]) {
+      if (source === void 0) {
+        continue;
+      }
+      if (source.identity !== void 0) {
+        identity = source.identity;
+      }
+      if (source.configProfile !== void 0) {
+        configProfile = source.configProfile;
+      }
+    }
+  }
+  return { ...identity === void 0 ? {} : { identity }, ...configProfile === void 0 ? {} : { configProfile } };
 }
 
 // src/realCredentialCache.ts
@@ -7519,7 +7557,7 @@ function realResolveClaudeBinary(isOwnBinary) {
 
 // src/checkReport.ts
 import path23 from "node:path";
-import { z as z10 } from "zod";
+import { z as z12 } from "zod";
 
 // src/cli/bool.ts
 function parseBoolWord(input) {
@@ -7634,9 +7672,9 @@ function lookupKeychainService(run, farmRoot) {
     note: serviceName === void 0 ? `A Keychain entry was found for account "${farmRoot}" but its service name could not be parsed from security's output.` : `Keychain service name for this identity: "${serviceName}".`
   };
 }
-var SettingsSecretsShapeSchema = z10.looseObject({
-  env: z10.record(z10.string(), z10.unknown()).optional(),
-  hooks: z10.record(z10.string(), z10.array(z10.unknown())).optional()
+var SettingsSecretsShapeSchema = z12.looseObject({
+  env: z12.record(z12.string(), z12.unknown()).optional(),
+  hooks: z12.record(z12.string(), z12.array(z12.unknown())).optional()
 });
 function hookCommandCountOf(group) {
   if (typeof group !== "object" || group === null) {
@@ -7930,11 +7968,11 @@ function collectCheckReport(params) {
 // src/claudeShim.ts
 import fs9 from "node:fs";
 import path24 from "node:path";
-import { z as z11 } from "zod";
-var ClaudeShimStateSchema = z11.strictObject({
-  targetPath: z11.string().min(1),
-  method: z11.enum(["hardlink", "copy"]),
-  installedAtMs: z11.number()
+import { z as z13 } from "zod";
+var ClaudeShimStateSchema = z13.strictObject({
+  targetPath: z13.string().min(1),
+  method: z13.enum(["hardlink", "copy"]),
+  installedAtMs: z13.number()
 });
 function commandFilename(ownExecutablePath, commandName) {
   return ownExecutablePath.toLowerCase().endsWith(".exe") ? `${commandName}.exe` : commandName;
@@ -9389,8 +9427,11 @@ export {
   InvalidProviderNameError,
   LaunchRefusedError,
   LegacyProviderFileError,
+  PROMPT_CACHE_TTL_MS,
+  PlanClassSchema,
   PoolNameSchema,
   PoolNotFoundError,
+  PoolPickReportSchema,
   PoolSchema,
   PortableConfigSchema,
   ProfileAlreadyExistsError,
@@ -9427,16 +9468,19 @@ export {
   checkReportToJson,
   collectCheckReport,
   collectDoctorReport,
+  collectPoolPick,
   createLeafCache,
   createProfile,
   createRcControlHandler,
   createRcSessionTracker,
   describeProviderEndpoint,
   detectAmbientCredential,
+  effectiveWindow,
   ensureCa,
   ensureFrontDoor,
   ensureHeadroom,
   evaluateAmbientCredentialGuard,
+  evaluateWhen,
   formatAmbientCredentialGuardMessage,
   formatCheckReport,
   formatDoctorReport,
@@ -9454,13 +9498,16 @@ export {
   listProfiles,
   listProviders,
   listUsageSnapshots,
+  matchBranch,
   mintLeaf,
   observingRoutedRoute,
   parseConnectTarget,
+  planOf,
   prepareClaudeLaunch,
   prepareLaunch,
   profileExists,
   providerExists,
+  rankPool,
   rcEventWriteResultFromAnswer,
   rcObserverAsPassthrough,
   readActiveIdentity,