agent-shim 9.14.0 → 9.15.0

package/dist/index.cjs

@@ -236,7 +236,7 @@ function isTimeZone(name) {
     return false;
   }
 }
-var import_node_path2, import_zod, import_trilean, CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_TIER_MODELS, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, WEEKDAYS, AnchorSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
+var import_node_path2, import_zod, import_trilean, CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_TIER_MODELS, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, WEEKDAYS, AnchorSchema, JOB_WINDOWS, JobTriggerSchema, JobTargetSchema, JobSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
 var init_schema = __esm({
   "src/config/schema.ts"() {
     "use strict";
@@ -407,6 +407,25 @@ var init_schema = __esm({
       identities: import_zod.z.array(PoolMemberSchema).min(1).refine((members) => new Set(members.map(poolMemberIdentity)).size === members.length, { message: "pool members must be unique" }),
       preference: PoolPreferenceSchema.optional()
     });
+    WEEKDAYS = ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
+    AnchorSchema = import_zod.z.strictObject({
+      days: import_zod.z.array(import_zod.z.enum(WEEKDAYS)).min(1).refine((days) => new Set(days).size === days.length, "an anchor names each weekday at most once"),
+      time: import_zod.z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "a 24-hour time such as 06:00"),
+      timeZone: import_zod.z.string().refine(isTimeZone, "an IANA time zone such as Europe/London").optional()
+    });
+    JOB_WINDOWS = ["fiveHour", "sevenDay"];
+    JobTriggerSchema = import_zod.z.union([import_zod.z.strictObject({ at: import_zod.z.array(AnchorSchema).min(1) }), import_zod.z.strictObject({ beforeReset: import_zod.z.enum(JOB_WINDOWS), lead: import_zod.z.string().regex(DURATION_RE) })]);
+    JobTargetSchema = import_zod.z.union([import_zod.z.strictObject({ identity: IdentitySelectorSchema }), import_zod.z.strictObject({ pool: PoolNameSchema })]);
+    JobSchema = import_zod.z.strictObject({
+      target: JobTargetSchema,
+      trigger: JobTriggerSchema,
+      prompt: import_zod.z.string().min(1),
+      /** The absolute directory the run works in. */
+      cwd: import_zod.z.string().min(1),
+      timeout: import_zod.z.string().regex(DURATION_RE),
+      model: import_zod.z.string().min(1).optional(),
+      allowedTools: import_zod.z.array(import_zod.z.string().min(1)).min(1).optional()
+    });
     DirectoryRuleSchema = ConfigProfileSchema.omit({ description: true }).extend({
       path: import_zod.z.string().min(1),
       configProfile: import_zod.z.string().min(1).optional(),
@@ -474,13 +493,8 @@ var init_schema = __esm({
       headroom: HeadroomGlobalConfigSchema.optional(),
       frontdoor: FrontDoorGlobalConfigSchema.optional(),
       update: UpdateGlobalConfigSchema.optional(),
-      pools: import_zod.z.record(PoolNameSchema, PoolSchema).optional()
-    });
-    WEEKDAYS = ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
-    AnchorSchema = import_zod.z.strictObject({
-      days: import_zod.z.array(import_zod.z.enum(WEEKDAYS)).min(1).refine((days) => new Set(days).size === days.length, "an anchor names each weekday at most once"),
-      time: import_zod.z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "a 24-hour time such as 06:00"),
-      timeZone: import_zod.z.string().refine(isTimeZone, "an IANA time zone such as Europe/London").optional()
+      pools: import_zod.z.record(PoolNameSchema, PoolSchema).optional(),
+      jobs: import_zod.z.record(PoolNameSchema, JobSchema).optional()
     });
     IdentitySchema = import_zod.z.strictObject({
       $schema: import_zod.z.string().optional(),
@@ -2679,7 +2693,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "9.14.0",
+      version: "9.15.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -5324,6 +5338,8 @@ function buildLayoutPaths(root) {
     usageSnapshotsDir: import_node_path22.default.join(root, "usage", "snapshots"),
     usagePicksFile: import_node_path22.default.join(root, "usage", "picks.json"),
     usageAnchorsFile: import_node_path22.default.join(root, "usage", "anchors.json"),
+    usageJobsFile: import_node_path22.default.join(root, "usage", "jobs.json"),
+    jobLogsDir: import_node_path22.default.join(root, "logs", "jobs"),
     mcpPermissionsFile: import_node_path22.default.join(root, "mcp", "permissions.json")
   };
 }

package/dist/index.mjs

@@ -217,7 +217,7 @@ function isTimeZone(name) {
     return false;
   }
 }
-var CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_TIER_MODELS, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, WEEKDAYS, AnchorSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
+var CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_TIER_MODELS, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, WEEKDAYS, AnchorSchema, JOB_WINDOWS, JobTriggerSchema, JobTargetSchema, JobSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
 var init_schema = __esm({
   "src/config/schema.ts"() {
     "use strict";
@@ -385,6 +385,25 @@ var init_schema = __esm({
       identities: z.array(PoolMemberSchema).min(1).refine((members) => new Set(members.map(poolMemberIdentity)).size === members.length, { message: "pool members must be unique" }),
       preference: PoolPreferenceSchema.optional()
     });
+    WEEKDAYS = ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
+    AnchorSchema = z.strictObject({
+      days: z.array(z.enum(WEEKDAYS)).min(1).refine((days) => new Set(days).size === days.length, "an anchor names each weekday at most once"),
+      time: z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "a 24-hour time such as 06:00"),
+      timeZone: z.string().refine(isTimeZone, "an IANA time zone such as Europe/London").optional()
+    });
+    JOB_WINDOWS = ["fiveHour", "sevenDay"];
+    JobTriggerSchema = z.union([z.strictObject({ at: z.array(AnchorSchema).min(1) }), z.strictObject({ beforeReset: z.enum(JOB_WINDOWS), lead: z.string().regex(DURATION_RE) })]);
+    JobTargetSchema = z.union([z.strictObject({ identity: IdentitySelectorSchema }), z.strictObject({ pool: PoolNameSchema })]);
+    JobSchema = z.strictObject({
+      target: JobTargetSchema,
+      trigger: JobTriggerSchema,
+      prompt: z.string().min(1),
+      /** The absolute directory the run works in. */
+      cwd: z.string().min(1),
+      timeout: z.string().regex(DURATION_RE),
+      model: z.string().min(1).optional(),
+      allowedTools: z.array(z.string().min(1)).min(1).optional()
+    });
     DirectoryRuleSchema = ConfigProfileSchema.omit({ description: true }).extend({
       path: z.string().min(1),
       configProfile: z.string().min(1).optional(),
@@ -452,13 +471,8 @@ var init_schema = __esm({
       headroom: HeadroomGlobalConfigSchema.optional(),
       frontdoor: FrontDoorGlobalConfigSchema.optional(),
       update: UpdateGlobalConfigSchema.optional(),
-      pools: z.record(PoolNameSchema, PoolSchema).optional()
-    });
-    WEEKDAYS = ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
-    AnchorSchema = z.strictObject({
-      days: z.array(z.enum(WEEKDAYS)).min(1).refine((days) => new Set(days).size === days.length, "an anchor names each weekday at most once"),
-      time: z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "a 24-hour time such as 06:00"),
-      timeZone: z.string().refine(isTimeZone, "an IANA time zone such as Europe/London").optional()
+      pools: z.record(PoolNameSchema, PoolSchema).optional(),
+      jobs: z.record(PoolNameSchema, JobSchema).optional()
     });
     IdentitySchema = z.strictObject({
       $schema: z.string().optional(),
@@ -2655,7 +2669,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "9.14.0",
+      version: "9.15.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -5301,6 +5315,8 @@ function buildLayoutPaths(root) {
     usageSnapshotsDir: path22.join(root, "usage", "snapshots"),
     usagePicksFile: path22.join(root, "usage", "picks.json"),
     usageAnchorsFile: path22.join(root, "usage", "anchors.json"),
+    usageJobsFile: path22.join(root, "usage", "jobs.json"),
+    jobLogsDir: path22.join(root, "logs", "jobs"),
     mcpPermissionsFile: path22.join(root, "mcp", "permissions.json")
   };
 }

package/dist/types/index.d.ts

@@ -1332,8 +1332,8 @@ declare const HeadroomGlobalConfigSchema: z.ZodObject<{
     targetRatio: z.ZodOptional<z.ZodNumber>;
     ccr: z.ZodOptional<z.ZodEnum<{
         default: "default";
-        none: "none";
         lossless: "lossless";
+        none: "none";
     }>>;
     rolloutChannel: z.ZodOptional<z.ZodEnum<{
         beta: "beta";
@@ -1460,8 +1460,8 @@ declare const GlobalConfigSchema: z.ZodObject<{
         targetRatio: z.ZodOptional<z.ZodNumber>;
         ccr: z.ZodOptional<z.ZodEnum<{
             default: "default";
-            none: "none";
             lossless: "lossless";
+            none: "none";
         }>>;
         rolloutChannel: z.ZodOptional<z.ZodEnum<{
             beta: "beta";
@@ -1562,6 +1562,39 @@ declare const GlobalConfigSchema: z.ZodObject<{
             listed: "listed";
         }>>;
     }, z.core.$strict>>>;
+    jobs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        target: z.ZodUnion<readonly [z.ZodObject<{
+            identity: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            pool: z.ZodString;
+        }, z.core.$strict>]>;
+        trigger: z.ZodUnion<readonly [z.ZodObject<{
+            at: z.ZodArray<z.ZodObject<{
+                days: z.ZodArray<z.ZodEnum<{
+                    mon: "mon";
+                    tue: "tue";
+                    wed: "wed";
+                    thu: "thu";
+                    fri: "fri";
+                    sat: "sat";
+                    sun: "sun";
+                }>>;
+                time: z.ZodString;
+                timeZone: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            beforeReset: z.ZodEnum<{
+                fiveHour: "fiveHour";
+                sevenDay: "sevenDay";
+            }>;
+            lead: z.ZodString;
+        }, z.core.$strict>]>;
+        prompt: z.ZodString;
+        cwd: z.ZodString;
+        timeout: z.ZodString;
+        model: z.ZodOptional<z.ZodString>;
+        allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>;
 }, z.core.$strict>;
 type GlobalConfig = z.infer<typeof GlobalConfigSchema>;
 /**
@@ -1726,6 +1759,10 @@ interface LayoutPaths {
     readonly usagePicksFile: string;
     /** The last anchor the front door's window keeper handled for each identity, so a restart neither replays an anchor nor skips one. */
     readonly usageAnchorsFile: string;
+    /** The last trigger instance the front door's job keeper handled for each job, so a restart neither repeats nor skips a run. */
+    readonly usageJobsFile: string;
+    /** Directory of one append-only `<job>.log` per job: the result of each unattended run. */
+    readonly jobLogsDir: string;
 }
 /**
  * Resolves the state root: `AGENT_SHIM_HOME` when set to a non-empty string (an empty string counts as unset, consistent with how this project treats empty-string environment variables elsewhere, see the ambient-credential guard), otherwise `~/.agent-shim`, or the former `~/.claude-use` when only that exists.
@@ -3874,12 +3911,12 @@ declare const CheckReportJsonSchema: z.ZodObject<{
     identity: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            env: "env";
+            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
-            env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
-            none: "none";
         }>;
     }, z.core.$strict>;
     pool: z.ZodOptional<z.ZodObject<{
@@ -3957,11 +3994,11 @@ declare const CheckReportJsonSchema: z.ZodObject<{
             "category-default": "category-default";
         }>;
         category: z.ZodNullable<z.ZodEnum<{
-            secret: "secret";
             runtime: "runtime";
             history: "history";
             knowledge: "knowledge";
             settings: "settings";
+            secret: "secret";
         }>>;
         rule: z.ZodOptional<z.ZodObject<{
             key: z.ZodString;
@@ -5244,6 +5281,7 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -5319,7 +5357,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -5363,6 +5400,7 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -5438,7 +5476,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -6530,9 +6567,9 @@ declare function createLifecycleApiRouter(deps: LifecycleApiDeps): {
             current: zod.ZodString;
             latest: zod.ZodString;
             action: zod.ZodEnum<{
+                updated: "updated";
                 current: "current";
                 available: "available";
-                updated: "updated";
             }>;
         }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
@@ -6779,12 +6816,12 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -7170,12 +7207,12 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -7253,11 +7290,11 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "category-default": "category-default";
                 }>;
                 category: zod.ZodNullable<zod.ZodEnum<{
-                    secret: "secret";
                     runtime: "runtime";
                     history: "history";
                     knowledge: "knowledge";
                     settings: "settings";
+                    secret: "secret";
                 }>>;
                 rule: zod.ZodOptional<zod.ZodObject<{
                     key: zod.ZodString;
@@ -7476,10 +7513,11 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "global-config": "global-config";
                     "config-profile": "config-profile";
                     identity: "identity";
+                    keychain: "keychain";
                     provider: "provider";
+                    headroom: "headroom";
                     frontdoor: "frontdoor";
                     pool: "pool";
-                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
@@ -7489,7 +7527,6 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
-                    headroom: "headroom";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -7610,12 +7647,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -7913,6 +7950,7 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -7988,7 +8026,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -8032,6 +8069,7 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8107,7 +8145,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -8991,9 +9028,9 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             current: zod.ZodString;
             latest: zod.ZodString;
             action: zod.ZodEnum<{
+                updated: "updated";
                 current: "current";
                 available: "available";
-                updated: "updated";
             }>;
         }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
@@ -9192,12 +9229,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -9275,11 +9312,11 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "category-default": "category-default";
                 }>;
                 category: zod.ZodNullable<zod.ZodEnum<{
-                    secret: "secret";
                     runtime: "runtime";
                     history: "history";
                     knowledge: "knowledge";
                     settings: "settings";
+                    secret: "secret";
                 }>>;
                 rule: zod.ZodOptional<zod.ZodObject<{
                     key: zod.ZodString;
@@ -9498,10 +9535,11 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "global-config": "global-config";
                     "config-profile": "config-profile";
                     identity: "identity";
+                    keychain: "keychain";
                     provider: "provider";
+                    headroom: "headroom";
                     frontdoor: "frontdoor";
                     pool: "pool";
-                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
@@ -9511,7 +9549,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
-                    headroom: "headroom";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -10021,6 +10058,7 @@ declare const ConfigProfileAddOutputSchema: z.ZodObject<{
     kind: z.ZodLiteral<"profile">;
     name: z.ZodString;
     value: z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
         entries: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
             value: z.ZodBoolean;
             when: z.ZodUnion<readonly [z.ZodObject<{
@@ -10096,7 +10134,6 @@ declare const ConfigProfileAddOutputSchema: z.ZodObject<{
                 key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
             }, z.core.$strip>], "kind">]>;
         }, z.core.$strict>]>>>;
-        description: z.ZodOptional<z.ZodString>;
         extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
         categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
             all: z.ZodOptional<z.ZodBoolean>;
@@ -10142,6 +10179,7 @@ declare const ConfigProfileSetOutputSchema: z.ZodObject<{
     kind: z.ZodLiteral<"profile">;
     name: z.ZodString;
     value: z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
         entries: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
             value: z.ZodBoolean;
             when: z.ZodUnion<readonly [z.ZodObject<{
@@ -10217,7 +10255,6 @@ declare const ConfigProfileSetOutputSchema: z.ZodObject<{
                 key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
             }, z.core.$strip>], "kind">]>;
         }, z.core.$strict>]>>>;
-        description: z.ZodOptional<z.ZodString>;
         extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
         categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
             all: z.ZodOptional<z.ZodBoolean>;
@@ -11344,10 +11381,11 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "global-config": "global-config";
         "config-profile": "config-profile";
         identity: "identity";
+        keychain: "keychain";
         provider: "provider";
+        headroom: "headroom";
         frontdoor: "frontdoor";
         pool: "pool";
-        keychain: "keychain";
         "ambient-credential": "ambient-credential";
         "binary-discovery": "binary-discovery";
         "claude-shim": "claude-shim";
@@ -11357,7 +11395,6 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "directory-rules": "directory-rules";
         "categories-local": "categories-local";
         "active-identity": "active-identity";
-        headroom: "headroom";
     }>;
     subject: z.ZodOptional<z.ZodString>;
     severity: z.ZodEnum<{
@@ -11375,10 +11412,11 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "global-config": "global-config";
             "config-profile": "config-profile";
             identity: "identity";
+            keychain: "keychain";
             provider: "provider";
+            headroom: "headroom";
             frontdoor: "frontdoor";
             pool: "pool";
-            keychain: "keychain";
             "ambient-credential": "ambient-credential";
             "binary-discovery": "binary-discovery";
             "claude-shim": "claude-shim";
@@ -11388,7 +11426,6 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "directory-rules": "directory-rules";
             "categories-local": "categories-local";
             "active-identity": "active-identity";
-            headroom: "headroom";
         }>;
         subject: z.ZodOptional<z.ZodString>;
         severity: z.ZodEnum<{
@@ -11409,9 +11446,9 @@ declare const UpdateCheckOutputSchema: z.ZodObject<{
     current: z.ZodString;
     latest: z.ZodString;
     action: z.ZodEnum<{
+        updated: "updated";
         current: "current";
         available: "available";
-        updated: "updated";
     }>;
 }, z.core.$strict>;
 /** The Sign in with ChatGPT login's state as `codex status` reports it: no sign-in yet, signed in (with who, whether the plan scope was granted, and when the access token lapses), or a file that cannot be read. */
@@ -11461,12 +11498,12 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
     decision: z.ZodObject<{
         identity: z.ZodOptional<z.ZodString>;
         identitySource: z.ZodEnum<{
+            env: "env";
+            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
-            env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
-            none: "none";
         }>;
         pool: z.ZodOptional<z.ZodObject<{
             name: z.ZodString;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "9.14.0",
+  "version": "9.15.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",