agent-shim 9.18.0 → 9.19.1

package/dist/types/index.d.ts

@@ -1332,8 +1332,8 @@ declare const HeadroomGlobalConfigSchema: z.ZodObject<{
     targetRatio: z.ZodOptional<z.ZodNumber>;
     ccr: z.ZodOptional<z.ZodEnum<{
         default: "default";
-        none: "none";
         lossless: "lossless";
+        none: "none";
     }>>;
     rolloutChannel: z.ZodOptional<z.ZodEnum<{
         beta: "beta";
@@ -1460,8 +1460,8 @@ declare const GlobalConfigSchema: z.ZodObject<{
         targetRatio: z.ZodOptional<z.ZodNumber>;
         ccr: z.ZodOptional<z.ZodEnum<{
             default: "default";
-            none: "none";
             lossless: "lossless";
+            none: "none";
         }>>;
         rolloutChannel: z.ZodOptional<z.ZodEnum<{
             beta: "beta";
@@ -2650,6 +2650,243 @@ declare function realConnectCertStore(paths: {
     readonly frontdoorCaKeyFile: string;
 }): ConnectCertStore;
 
+/**
+ * The agent tree of one session as the reader returns it, and the shape of the meta file it reads. One definition each, so the type, the validator and the published JSON Schema (`schema/AgentTree.schema.json`) cannot drift. The on-disk layout is documented in `docs/agent-transcripts.md`; it belongs to Claude Code and has changed across versions, which is why the meta file is read leniently and the tree this module returns is strict.
+ */
+/**
+ * One subagent's `.meta.json`. `agentType` is the one field every version writes; the rest appear only for the kinds and versions that write them, and a version this schema has never seen may add more, so unknown keys are kept rather than rejected.
+ */
+declare const AgentMetaSchema: z.ZodObject<{
+    agentType: z.ZodString;
+    isFork: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    toolUseId: z.ZodOptional<z.ZodString>;
+    spawnDepth: z.ZodOptional<z.ZodNumber>;
+    parentAgentId: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    requestShape: z.ZodOptional<z.ZodString>;
+    requestNonInteractive: z.ZodOptional<z.ZodBoolean>;
+    workflowPhase: z.ZodOptional<z.ZodString>;
+    taskKind: z.ZodOptional<z.ZodString>;
+    teamName: z.ZodOptional<z.ZodString>;
+    worktreePath: z.ZodOptional<z.ZodString>;
+    worktreeBranch: z.ZodOptional<z.ZodString>;
+    stoppedByUser: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>;
+/** What kind of agent a node is, derived from its meta file: a fork inherits its parent's context, a workflow agent was spawned by a workflow run, a teammate belongs to a team. */
+declare const AgentKindSchema: z.ZodEnum<{
+    subagent: "subagent";
+    fork: "fork";
+    "workflow-agent": "workflow-agent";
+    teammate: "teammate";
+}>;
+/** One agent in a session's tree. `children` holds the agents it spawned. */
+interface AgentNode {
+    /** The stem after `agent-` in its file names, which for an unnamed agent is the `task_id` Remote Control reports for it. */
+    readonly id: string;
+    readonly kind: z.infer<typeof AgentKindSchema>;
+    readonly agentType: string;
+    readonly description?: string;
+    readonly name?: string;
+    /** The `tool_use` block in the parent's transcript that spawned this agent. */
+    readonly toolUseId?: string;
+    readonly spawnDepth?: number;
+    /** The model the spawn recorded: an alias or `inherit` as often as a concrete id, and not necessarily the model that served the agent's requests. */
+    readonly model?: string;
+    readonly background?: boolean;
+    /** The workflow run this agent belongs to, when it was spawned by one. */
+    readonly workflowRunId?: string;
+    readonly workflowPhase?: string;
+    readonly teamName?: string;
+    readonly stoppedByUser?: boolean;
+    /** The agent's transcript, relative to the identity's configuration directory. */
+    readonly transcript: string;
+    readonly children: readonly AgentNode[];
+}
+/** The node schema, written out so the recursive `children` field has a lazy reference to itself. */
+declare const AgentNodeSchema: z.ZodType<AgentNode>;
+/** One entry of a task list: the session's own (`tasks/<session-id>/<n>.json`, or `tasks/session-<first-eight-characters>/<n>.json` in current versions) or a shared one (`tasks/<list-id>/<n>.json`), a team's or one named by `CLAUDE_CODE_TASK_LIST_ID`. `status` is an open string: non-standard values occur. */
+declare const TaskItemSchema: z.ZodObject<{
+    id: z.ZodString;
+    subject: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    status: z.ZodString;
+    activeForm: z.ZodOptional<z.ZodString>;
+    owner: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    blocks: z.ZodArray<z.ZodString>;
+    blockedBy: z.ZodArray<z.ZodString>;
+    taskList: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** One workflow run's record (`workflows/wf_<run-id>.json`), narrowed to what identifies and summarises it. */
+declare const WorkflowRunSchema: z.ZodObject<{
+    runId: z.ZodString;
+    workflowName: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodString>;
+    startTime: z.ZodOptional<z.ZodNumber>;
+    phases: z.ZodArray<z.ZodString>;
+    summary: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** One session in a listing: the cheap facts read from directory listings and one stat, and every identity whose configuration exposes it. */
+declare const SessionSummarySchema: z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    entry: z.ZodString;
+    agentCount: z.ZodNumber;
+    workflowRunCount: z.ZodNumber;
+    updatedAt: z.ZodOptional<z.ZodISODateTime>;
+    identities: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/** The whole picture of one session's agents, tasks and workflow runs. */
+declare const SessionAgentTreeSchema: z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        subject: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        status: z.ZodString;
+        activeForm: z.ZodOptional<z.ZodString>;
+        owner: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        blocks: z.ZodArray<z.ZodString>;
+        blockedBy: z.ZodArray<z.ZodString>;
+        taskList: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    workflowRuns: z.ZodArray<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodString>;
+        startTime: z.ZodOptional<z.ZodNumber>;
+        phases: z.ZodArray<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    problems: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type AgentKind = z.output<typeof AgentKindSchema>;
+type TaskItem = z.output<typeof TaskItemSchema>;
+type WorkflowRun = z.output<typeof WorkflowRunSchema>;
+type SessionAgentTree = z.output<typeof SessionAgentTreeSchema>;
+
+/**
+ * The live half of the agent tree: what a Remote Control session's read stream says about its background tasks and subagents (`task_started`, `task_progress`, `task_updated`, `task_notification`, `background_tasks_changed`), and the merge of that with the tree read from disk. The event shapes are documented in `docs/rc-agent-events.md`. The stream exists only for sessions the door observes and only while they are live, so it is never the sole source: the disk tree is authoritative for every session and for completed content, and the stream supplies state the transcript has not flushed yet.
+ */
+/** How many tasks one session's book keeps. Past it the oldest-observed finished task is dropped first, so a long-lived session cannot grow the door's memory without bound; a running task is never dropped for a finished one. */
+declare const LIVE_TASK_CAP = 512;
+/** One task or subagent as the stream describes it. `status` is an open string: only `completed` has been observed beyond the running state. */
+declare const LiveTaskSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    sessionId: z.ZodString;
+    runId: z.ZodOptional<z.ZodString>;
+    toolUseId: z.ZodOptional<z.ZodString>;
+    taskType: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    subagentType: z.ZodOptional<z.ZodString>;
+    spawnDepth: z.ZodOptional<z.ZodNumber>;
+    parentTaskId: z.ZodOptional<z.ZodString>;
+    backgrounded: z.ZodOptional<z.ZodBoolean>;
+    status: z.ZodString;
+    outputFile: z.ZodOptional<z.ZodString>;
+    summary: z.ZodOptional<z.ZodString>;
+    lastToolName: z.ZodOptional<z.ZodString>;
+    usage: z.ZodOptional<z.ZodObject<{
+        totalTokens: z.ZodOptional<z.ZodNumber>;
+        toolUses: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    observedAt: z.ZodNumber;
+}, z.core.$strict>;
+type LiveTask = z.output<typeof LiveTaskSchema>;
+/** A session's live tasks by `task_id`. */
+type LiveTaskBook = ReadonlyMap<string, LiveTask>;
+/**
+ * Folds one stream payload into a session's book and returns the next book (the same one when the payload is not a task event). `task_started` births a task, `task_progress` and `task_notification` refine it, `task_updated` applies its patch, and `background_tasks_changed` fills in the tasks it lists without inventing a state for ones it omits: the snapshot says what is live, not that an unlisted task finished.
+ *
+ * A payload that does not match is ignored, never an error: the stream belongs to Claude Code and gains fields and subtypes between versions.
+ */
+declare function applyAgentTaskEvent(book: LiveTaskBook, sessionId: string, payload: unknown, observedAt: number): LiveTaskBook;
+/** How a merged node relates to the stream: `disk` was only on disk, `both` was matched by a live task. A task only the stream knows is not a node but a member of `liveOnly`. */
+declare const MergedProvenanceSchema: z.ZodEnum<{
+    disk: "disk";
+    both: "both";
+}>;
+/** An agent node of the merged tree: the disk node as read (it wins for everything the transcript holds), the stream's state beside it when a live task matched. */
+interface MergedAgentNode extends Omit<AgentNode, "children"> {
+    readonly provenance: z.output<typeof MergedProvenanceSchema>;
+    readonly live?: LiveTask;
+    readonly children: readonly MergedAgentNode[];
+}
+/** The merged node schema, recursive through a lazy reference like the disk node's. */
+declare const MergedAgentNodeSchema: z.ZodType<MergedAgentNode>;
+/** One session's agent tree with the stream's view merged in. */
+declare const MergedAgentTreeSchema: z.ZodObject<{
+    agents: z.ZodArray<z.ZodType<MergedAgentNode, unknown, z.core.$ZodTypeInternals<MergedAgentNode, unknown>>>;
+    remoteSessions: z.ZodArray<z.ZodString>;
+    liveOnly: z.ZodArray<z.ZodObject<{
+        taskId: z.ZodString;
+        sessionId: z.ZodString;
+        runId: z.ZodOptional<z.ZodString>;
+        toolUseId: z.ZodOptional<z.ZodString>;
+        taskType: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        subagentType: z.ZodOptional<z.ZodString>;
+        spawnDepth: z.ZodOptional<z.ZodNumber>;
+        parentTaskId: z.ZodOptional<z.ZodString>;
+        backgrounded: z.ZodOptional<z.ZodBoolean>;
+        status: z.ZodString;
+        outputFile: z.ZodOptional<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+        lastToolName: z.ZodOptional<z.ZodString>;
+        usage: z.ZodOptional<z.ZodObject<{
+            totalTokens: z.ZodOptional<z.ZodNumber>;
+            toolUses: z.ZodOptional<z.ZodNumber>;
+            durationMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        observedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        subject: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        status: z.ZodString;
+        activeForm: z.ZodOptional<z.ZodString>;
+        owner: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        blocks: z.ZodArray<z.ZodString>;
+        blockedBy: z.ZodArray<z.ZodString>;
+        taskList: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    workflowRuns: z.ZodArray<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodString>;
+        startTime: z.ZodOptional<z.ZodNumber>;
+        phases: z.ZodArray<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    problems: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type MergedAgentTree = z.output<typeof MergedAgentTreeSchema>;
+/**
+ * Merges the live tasks into one session's disk tree.
+ *
+ * A live task belongs to the session when its `task_id` is a disk agent's id, its `tool_use_id` is a disk agent's `toolUseId`, or its `output_file` sits under the session's local id (the only place the stream states it). Matched agents keep every disk field and gain `live`; matched-by-session tasks that name no agent are `liveOnly`. Nothing is dropped from the disk tree and nothing the stream said overrides it.
+ */
+declare function mergeLiveTasks(tree: SessionAgentTree, live: readonly LiveTask[]): MergedAgentTree;
+
 /**
  * The persisted half of the tracker's client credential and of its sequence cursor: the OAuth-kind bearer and protocol headers a Remote Control session's client-half calls were last observed with, and the highest sequence number the door's stream attachment had confirmed when its last attachment boundary passed, written per session id so a later door generation can still attach to a session whose create crossed an earlier one and resume its read stream from where the last generation left off.
  *
@@ -2939,6 +3176,8 @@ interface RcSessionTracker {
      * Files one client read stream envelope: advances the session's sequence cursor, and treats the payload exactly as an observed event-batch body's would be treated, which is how an approval reaches the pending list from the stream (the live finding behind the client attachment: the CLI routes `control_request`s only toward attached clients, so the stream, not the worker's own writes, is where a `can_use_tool` the door must answer becomes visible). A `control_request` whose envelope names the worker as its source births a pending entry; a `control_response` retires the request it answers, whoever answered it.
      */
     readonly fileStreamEvent: (sessionId: string, event: RcStreamEnvelope) => void;
+    /** The live background tasks and subagents the observed events described, for one session or every tracked one, each carrying the session that reported it and when it was last observed. */
+    readonly liveTasksOf: (sessionId?: string) => readonly LiveTask[];
     /** Retires one pending control request as answered: what a successful answer write calls, so the request stops being listed the moment it is answered. */
     readonly completePending: (sessionId: string, requestId: string) => void;
     /** Stops the idle sweep timer. The entries themselves are unreachable the moment the door drops them. */
@@ -3911,12 +4150,12 @@ declare const CheckReportJsonSchema: z.ZodObject<{
     identity: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            env: "env";
+            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
-            env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
-            none: "none";
         }>;
     }, z.core.$strict>;
     pool: z.ZodOptional<z.ZodObject<{
@@ -3994,11 +4233,11 @@ declare const CheckReportJsonSchema: z.ZodObject<{
             "category-default": "category-default";
         }>;
         category: z.ZodNullable<z.ZodEnum<{
-            secret: "secret";
             runtime: "runtime";
             history: "history";
             knowledge: "knowledge";
             settings: "settings";
+            secret: "secret";
         }>>;
         rule: z.ZodOptional<z.ZodObject<{
             key: z.ZodString;
@@ -5281,6 +5520,7 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -5356,7 +5596,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -5400,6 +5639,7 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -5475,7 +5715,6 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -6567,9 +6806,9 @@ declare function createLifecycleApiRouter(deps: LifecycleApiDeps): {
             current: zod.ZodString;
             latest: zod.ZodString;
             action: zod.ZodEnum<{
+                updated: "updated";
                 current: "current";
                 available: "available";
-                updated: "updated";
             }>;
         }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
@@ -6816,12 +7055,12 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -6912,131 +7151,6 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
 /** The launch router, as the merged mount's and the client's own types are derived from it. */
 type LaunchApiRouter = ReturnType<typeof createLaunchApiRouter>;
 
-/**
- * The agent tree of one session as the reader returns it, and the shape of the meta file it reads. One definition each, so the type, the validator and the published JSON Schema (`schema/AgentTree.schema.json`) cannot drift. The on-disk layout is documented in `docs/agent-transcripts.md`; it belongs to Claude Code and has changed across versions, which is why the meta file is read leniently and the tree this module returns is strict.
- */
-/**
- * One subagent's `.meta.json`. `agentType` is the one field every version writes; the rest appear only for the kinds and versions that write them, and a version this schema has never seen may add more, so unknown keys are kept rather than rejected.
- */
-declare const AgentMetaSchema: z.ZodObject<{
-    agentType: z.ZodString;
-    isFork: z.ZodOptional<z.ZodBoolean>;
-    description: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    toolUseId: z.ZodOptional<z.ZodString>;
-    spawnDepth: z.ZodOptional<z.ZodNumber>;
-    parentAgentId: z.ZodOptional<z.ZodString>;
-    model: z.ZodOptional<z.ZodString>;
-    requestShape: z.ZodOptional<z.ZodString>;
-    requestNonInteractive: z.ZodOptional<z.ZodBoolean>;
-    workflowPhase: z.ZodOptional<z.ZodString>;
-    taskKind: z.ZodOptional<z.ZodString>;
-    teamName: z.ZodOptional<z.ZodString>;
-    worktreePath: z.ZodOptional<z.ZodString>;
-    worktreeBranch: z.ZodOptional<z.ZodString>;
-    stoppedByUser: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>;
-/** What kind of agent a node is, derived from its meta file: a fork inherits its parent's context, a workflow agent was spawned by a workflow run, a teammate belongs to a team. */
-declare const AgentKindSchema: z.ZodEnum<{
-    subagent: "subagent";
-    fork: "fork";
-    "workflow-agent": "workflow-agent";
-    teammate: "teammate";
-}>;
-/** One agent in a session's tree. `children` holds the agents it spawned. */
-interface AgentNode {
-    /** The stem after `agent-` in its file names, which for an unnamed agent is the `task_id` Remote Control reports for it. */
-    readonly id: string;
-    readonly kind: z.infer<typeof AgentKindSchema>;
-    readonly agentType: string;
-    readonly description?: string;
-    readonly name?: string;
-    /** The `tool_use` block in the parent's transcript that spawned this agent. */
-    readonly toolUseId?: string;
-    readonly spawnDepth?: number;
-    /** The model the spawn recorded: an alias or `inherit` as often as a concrete id, and not necessarily the model that served the agent's requests. */
-    readonly model?: string;
-    readonly background?: boolean;
-    /** The workflow run this agent belongs to, when it was spawned by one. */
-    readonly workflowRunId?: string;
-    readonly workflowPhase?: string;
-    readonly teamName?: string;
-    readonly stoppedByUser?: boolean;
-    /** The agent's transcript, relative to the identity's configuration directory. */
-    readonly transcript: string;
-    readonly children: readonly AgentNode[];
-}
-/** The node schema, written out so the recursive `children` field has a lazy reference to itself. */
-declare const AgentNodeSchema: z.ZodType<AgentNode>;
-/** One entry of a task list: the session's own (`tasks/<session-id>/<n>.json`, or `tasks/session-<first-eight-characters>/<n>.json` in current versions) or a shared one (`tasks/<list-id>/<n>.json`), a team's or one named by `CLAUDE_CODE_TASK_LIST_ID`. `status` is an open string: non-standard values occur. */
-declare const TaskItemSchema: z.ZodObject<{
-    id: z.ZodString;
-    subject: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-    status: z.ZodString;
-    activeForm: z.ZodOptional<z.ZodString>;
-    owner: z.ZodOptional<z.ZodString>;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    blocks: z.ZodArray<z.ZodString>;
-    blockedBy: z.ZodArray<z.ZodString>;
-    taskList: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** One workflow run's record (`workflows/wf_<run-id>.json`), narrowed to what identifies and summarises it. */
-declare const WorkflowRunSchema: z.ZodObject<{
-    runId: z.ZodString;
-    workflowName: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodString>;
-    startTime: z.ZodOptional<z.ZodNumber>;
-    phases: z.ZodArray<z.ZodString>;
-    summary: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** One session in a listing: the cheap facts read from directory listings and one stat, and every identity whose configuration exposes it. */
-declare const SessionSummarySchema: z.ZodObject<{
-    project: z.ZodString;
-    sessionId: z.ZodString;
-    superseded: z.ZodBoolean;
-    entry: z.ZodString;
-    agentCount: z.ZodNumber;
-    workflowRunCount: z.ZodNumber;
-    updatedAt: z.ZodOptional<z.ZodISODateTime>;
-    identities: z.ZodArray<z.ZodString>;
-}, z.core.$strict>;
-/** The whole picture of one session's agents, tasks and workflow runs. */
-declare const SessionAgentTreeSchema: z.ZodObject<{
-    project: z.ZodString;
-    sessionId: z.ZodString;
-    superseded: z.ZodBoolean;
-    agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
-    tasks: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        subject: z.ZodString;
-        description: z.ZodOptional<z.ZodString>;
-        status: z.ZodString;
-        activeForm: z.ZodOptional<z.ZodString>;
-        owner: z.ZodOptional<z.ZodString>;
-        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        blocks: z.ZodArray<z.ZodString>;
-        blockedBy: z.ZodArray<z.ZodString>;
-        taskList: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>;
-    workflowRuns: z.ZodArray<z.ZodObject<{
-        runId: z.ZodString;
-        workflowName: z.ZodOptional<z.ZodString>;
-        status: z.ZodOptional<z.ZodString>;
-        startTime: z.ZodOptional<z.ZodNumber>;
-        phases: z.ZodArray<z.ZodString>;
-        summary: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>;
-    problems: z.ZodArray<z.ZodObject<{
-        path: z.ZodString;
-        reason: z.ZodString;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-type AgentKind = z.output<typeof AgentKindSchema>;
-type TaskItem = z.output<typeof TaskItemSchema>;
-type WorkflowRun = z.output<typeof WorkflowRunSchema>;
-type SessionAgentTree = z.output<typeof SessionAgentTreeSchema>;
-
 /**
  * The agent tree reader: pure over an injected filesystem, so the CLI, the library surface and tests read the same way, and nothing here writes. The layout it reads is documented in `docs/agent-transcripts.md`.
  */
@@ -7097,12 +7211,35 @@ declare const AgentTreesShowInputSchema: z.ZodObject<{
     session: z.ZodString;
     identity: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
-/** What `agentTrees.show` answers: the tree beside the identities that expose it. */
+/** What `agentTrees.show` answers: the tree read from disk with the live Remote Control tasks merged in, beside the identities that expose it. */
 declare const AgentTreesShowOutputSchema: z.ZodObject<{
+    agents: z.ZodArray<z.ZodType<MergedAgentNode, unknown, z.core.$ZodTypeInternals<MergedAgentNode, unknown>>>;
+    remoteSessions: z.ZodArray<z.ZodString>;
+    liveOnly: z.ZodArray<z.ZodObject<{
+        taskId: z.ZodString;
+        sessionId: z.ZodString;
+        runId: z.ZodOptional<z.ZodString>;
+        toolUseId: z.ZodOptional<z.ZodString>;
+        taskType: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        subagentType: z.ZodOptional<z.ZodString>;
+        spawnDepth: z.ZodOptional<z.ZodNumber>;
+        parentTaskId: z.ZodOptional<z.ZodString>;
+        backgrounded: z.ZodOptional<z.ZodBoolean>;
+        status: z.ZodString;
+        outputFile: z.ZodOptional<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+        lastToolName: z.ZodOptional<z.ZodString>;
+        usage: z.ZodOptional<z.ZodObject<{
+            totalTokens: z.ZodOptional<z.ZodNumber>;
+            toolUses: z.ZodOptional<z.ZodNumber>;
+            durationMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        observedAt: z.ZodNumber;
+    }, z.core.$strict>>;
     project: z.ZodString;
     sessionId: z.ZodString;
     superseded: z.ZodBoolean;
-    agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
     tasks: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         subject: z.ZodString;
@@ -7142,6 +7279,8 @@ interface AgentTreesApiDeps {
         readonly identities: readonly string[];
         readonly tree: z.infer<typeof SessionAgentTreeSchema>;
     };
+    /** The live tasks the door has observed on its Remote Control sessions, which the disk tree is merged with. Empty when no session is live. */
+    readonly liveTasks: () => readonly LiveTask[];
 }
 /** Builds the agent trees router: two reads, behind the control-token middleware. */
 declare function createAgentTreesApiRouter(deps: AgentTreesApiDeps): {
@@ -7163,10 +7302,33 @@ declare function createAgentTreesApiRouter(deps: AgentTreesApiDeps): {
             session: z.ZodString;
             identity: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
+            agents: z.ZodArray<z.ZodType<MergedAgentNode, unknown, z.core.$ZodTypeInternals<MergedAgentNode, unknown>>>;
+            remoteSessions: z.ZodArray<z.ZodString>;
+            liveOnly: z.ZodArray<z.ZodObject<{
+                taskId: z.ZodString;
+                sessionId: z.ZodString;
+                runId: z.ZodOptional<z.ZodString>;
+                toolUseId: z.ZodOptional<z.ZodString>;
+                taskType: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                subagentType: z.ZodOptional<z.ZodString>;
+                spawnDepth: z.ZodOptional<z.ZodNumber>;
+                parentTaskId: z.ZodOptional<z.ZodString>;
+                backgrounded: z.ZodOptional<z.ZodBoolean>;
+                status: z.ZodString;
+                outputFile: z.ZodOptional<z.ZodString>;
+                summary: z.ZodOptional<z.ZodString>;
+                lastToolName: z.ZodOptional<z.ZodString>;
+                usage: z.ZodOptional<z.ZodObject<{
+                    totalTokens: z.ZodOptional<z.ZodNumber>;
+                    toolUses: z.ZodOptional<z.ZodNumber>;
+                    durationMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+                observedAt: z.ZodNumber;
+            }, z.core.$strict>>;
             project: z.ZodString;
             sessionId: z.ZodString;
             superseded: z.ZodBoolean;
-            agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
             tasks: z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 subject: z.ZodString;
@@ -7493,12 +7655,12 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -7576,11 +7738,11 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "category-default": "category-default";
                 }>;
                 category: zod.ZodNullable<zod.ZodEnum<{
-                    secret: "secret";
                     runtime: "runtime";
                     history: "history";
                     knowledge: "knowledge";
                     settings: "settings";
+                    secret: "secret";
                 }>>;
                 rule: zod.ZodOptional<zod.ZodObject<{
                     key: zod.ZodString;
@@ -7799,10 +7961,11 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "global-config": "global-config";
                     "config-profile": "config-profile";
                     identity: "identity";
+                    keychain: "keychain";
                     provider: "provider";
+                    headroom: "headroom";
                     frontdoor: "frontdoor";
                     pool: "pool";
-                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
@@ -7812,7 +7975,6 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
-                    headroom: "headroom";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -7942,10 +8104,33 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             session: zod.ZodString;
             identity: zod.ZodOptional<zod.ZodString>;
         }, zod_v4_core.$strict>, zod.ZodObject<{
+            agents: zod.ZodArray<zod.ZodType<MergedAgentNode, unknown, zod_v4_core.$ZodTypeInternals<MergedAgentNode, unknown>>>;
+            remoteSessions: zod.ZodArray<zod.ZodString>;
+            liveOnly: zod.ZodArray<zod.ZodObject<{
+                taskId: zod.ZodString;
+                sessionId: zod.ZodString;
+                runId: zod.ZodOptional<zod.ZodString>;
+                toolUseId: zod.ZodOptional<zod.ZodString>;
+                taskType: zod.ZodOptional<zod.ZodString>;
+                description: zod.ZodOptional<zod.ZodString>;
+                subagentType: zod.ZodOptional<zod.ZodString>;
+                spawnDepth: zod.ZodOptional<zod.ZodNumber>;
+                parentTaskId: zod.ZodOptional<zod.ZodString>;
+                backgrounded: zod.ZodOptional<zod.ZodBoolean>;
+                status: zod.ZodString;
+                outputFile: zod.ZodOptional<zod.ZodString>;
+                summary: zod.ZodOptional<zod.ZodString>;
+                lastToolName: zod.ZodOptional<zod.ZodString>;
+                usage: zod.ZodOptional<zod.ZodObject<{
+                    totalTokens: zod.ZodOptional<zod.ZodNumber>;
+                    toolUses: zod.ZodOptional<zod.ZodNumber>;
+                    durationMs: zod.ZodOptional<zod.ZodNumber>;
+                }, zod_v4_core.$strict>>;
+                observedAt: zod.ZodNumber;
+            }, zod_v4_core.$strict>>;
             project: zod.ZodString;
             sessionId: zod.ZodString;
             superseded: zod.ZodBoolean;
-            agents: zod.ZodArray<zod.ZodType<AgentNode, unknown, zod_v4_core.$ZodTypeInternals<AgentNode, unknown>>>;
             tasks: zod.ZodArray<zod.ZodObject<{
                 id: zod.ZodString;
                 subject: zod.ZodString;
@@ -7982,12 +8167,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -8285,6 +8470,7 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8360,7 +8546,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -8404,6 +8589,7 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 kind: zod.ZodLiteral<"profile">;
                 name: zod.ZodString;
                 value: zod.ZodObject<{
+                    description: zod.ZodOptional<zod.ZodString>;
                     entries: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodBoolean, zod.ZodObject<{
                         value: zod.ZodBoolean;
                         when: zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8479,7 +8665,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                             key: zod.ZodType<trilean.JsonValue, unknown, zod_v4_core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
                         }, zod_v4_core.$strip>], "kind">]>;
                     }, zod_v4_core.$strict>]>>>;
-                    description: zod.ZodOptional<zod.ZodString>;
                     extends: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
                     categories: zod.ZodOptional<zod.ZodPipe<zod.ZodObject<{
                         all: zod.ZodOptional<zod.ZodBoolean>;
@@ -9363,9 +9548,9 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             current: zod.ZodString;
             latest: zod.ZodString;
             action: zod.ZodEnum<{
+                updated: "updated";
                 current: "current";
                 available: "available";
-                updated: "updated";
             }>;
         }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
@@ -9564,12 +9749,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -9647,11 +9832,11 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "category-default": "category-default";
                 }>;
                 category: zod.ZodNullable<zod.ZodEnum<{
-                    secret: "secret";
                     runtime: "runtime";
                     history: "history";
                     knowledge: "knowledge";
                     settings: "settings";
+                    secret: "secret";
                 }>>;
                 rule: zod.ZodOptional<zod.ZodObject<{
                     key: zod.ZodString;
@@ -9870,10 +10055,11 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "global-config": "global-config";
                     "config-profile": "config-profile";
                     identity: "identity";
+                    keychain: "keychain";
                     provider: "provider";
+                    headroom: "headroom";
                     frontdoor: "frontdoor";
                     pool: "pool";
-                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
@@ -9883,7 +10069,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
-                    headroom: "headroom";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -10393,6 +10578,7 @@ declare const ConfigProfileAddOutputSchema: z.ZodObject<{
     kind: z.ZodLiteral<"profile">;
     name: z.ZodString;
     value: z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
         entries: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
             value: z.ZodBoolean;
             when: z.ZodUnion<readonly [z.ZodObject<{
@@ -10468,7 +10654,6 @@ declare const ConfigProfileAddOutputSchema: z.ZodObject<{
                 key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
             }, z.core.$strip>], "kind">]>;
         }, z.core.$strict>]>>>;
-        description: z.ZodOptional<z.ZodString>;
         extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
         categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
             all: z.ZodOptional<z.ZodBoolean>;
@@ -10514,6 +10699,7 @@ declare const ConfigProfileSetOutputSchema: z.ZodObject<{
     kind: z.ZodLiteral<"profile">;
     name: z.ZodString;
     value: z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
         entries: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
             value: z.ZodBoolean;
             when: z.ZodUnion<readonly [z.ZodObject<{
@@ -10589,7 +10775,6 @@ declare const ConfigProfileSetOutputSchema: z.ZodObject<{
                 key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
             }, z.core.$strip>], "kind">]>;
         }, z.core.$strict>]>>>;
-        description: z.ZodOptional<z.ZodString>;
         extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
         categories: z.ZodOptional<z.ZodPipe<z.ZodObject<{
             all: z.ZodOptional<z.ZodBoolean>;
@@ -11716,10 +11901,11 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "global-config": "global-config";
         "config-profile": "config-profile";
         identity: "identity";
+        keychain: "keychain";
         provider: "provider";
+        headroom: "headroom";
         frontdoor: "frontdoor";
         pool: "pool";
-        keychain: "keychain";
         "ambient-credential": "ambient-credential";
         "binary-discovery": "binary-discovery";
         "claude-shim": "claude-shim";
@@ -11729,7 +11915,6 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "directory-rules": "directory-rules";
         "categories-local": "categories-local";
         "active-identity": "active-identity";
-        headroom: "headroom";
     }>;
     subject: z.ZodOptional<z.ZodString>;
     severity: z.ZodEnum<{
@@ -11747,10 +11932,11 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "global-config": "global-config";
             "config-profile": "config-profile";
             identity: "identity";
+            keychain: "keychain";
             provider: "provider";
+            headroom: "headroom";
             frontdoor: "frontdoor";
             pool: "pool";
-            keychain: "keychain";
             "ambient-credential": "ambient-credential";
             "binary-discovery": "binary-discovery";
             "claude-shim": "claude-shim";
@@ -11760,7 +11946,6 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "directory-rules": "directory-rules";
             "categories-local": "categories-local";
             "active-identity": "active-identity";
-            headroom: "headroom";
         }>;
         subject: z.ZodOptional<z.ZodString>;
         severity: z.ZodEnum<{
@@ -11781,9 +11966,9 @@ declare const UpdateCheckOutputSchema: z.ZodObject<{
     current: z.ZodString;
     latest: z.ZodString;
     action: z.ZodEnum<{
+        updated: "updated";
         current: "current";
         available: "available";
-        updated: "updated";
     }>;
 }, z.core.$strict>;
 /** The Sign in with ChatGPT login's state as `codex status` reports it: no sign-in yet, signed in (with who, whether the plan scope was granted, and when the access token lapses), or a file that cannot be read. */
@@ -11833,12 +12018,12 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
     decision: z.ZodObject<{
         identity: z.ZodOptional<z.ZodString>;
         identitySource: z.ZodEnum<{
+            env: "env";
+            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
-            env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
-            none: "none";
         }>;
         pool: z.ZodOptional<z.ZodObject<{
             name: z.ZodString;
@@ -13210,5 +13395,5 @@ declare const OWN_CLI_FILE_NAME = "cli.cjs";
  */
 declare function agentShimCliPath(distDir?: string | undefined): string;
 
-export { AMBIENT_CREDENTIAL_VARS, AgentKindSchema, AgentMetaSchema, AgentNodeSchema, AgentTreesListInputSchema, AgentTreesListOutputSchema, AgentTreesShowInputSchema, AgentTreesShowOutputSchema, CHECK_CREDENTIAL_APPLIES, CODEX_APP_SERVER_GENERATED_AGAINST, CODEX_APP_SERVER_TIMEOUT_MS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, CodexAccountReadSchema, CodexAppServerProtocolError, CodexAppServerRequestError, CodexAppServerUnavailableError, CodexLogoutOutputSchema, CodexRateLimitsReadSchema, CodexSignInSchema, CodexStatusOutputSchema, ConfigIdentityAddOutputSchema, ConfigIdentityRemoveInputSchema, ConfigIdentityRemoveOutputSchema, ConfigIdentitySetInputSchema, ConfigIdentitySetOutputSchema, ConfigIdentityUseOutputSchema, ConfigNameInputSchema, ConfigPoolAddInputSchema, ConfigPoolAddOutputSchema, ConfigPoolRemoveInputSchema, ConfigPoolRemoveOutputSchema, ConfigPoolSetInputSchema, ConfigPoolSetOutputSchema, ConfigPoolUseOutputSchema, ConfigProfileAddInputSchema, ConfigProfileAddOutputSchema, ConfigProfileRemoveInputSchema, ConfigProfileRemoveOutputSchema, ConfigProfileSchema, ConfigProfileSetInputSchema, ConfigProfileSetOutputSchema, ConfigProfileUseOutputSchema, ConfigProviderAddInputSchema, ConfigProviderAddOutputSchema, ConfigProviderRemoveInputSchema, ConfigProviderRemoveOutputSchema, ConfigProviderSetInputSchema, ConfigProviderSetOutputSchema, ConfigRuleAddInputSchema, ConfigRuleAddOutputSchema, ConfigRuleRemoveInputSchema, ConfigRuleRemoveOutputSchema, ConfigRuleSetInputSchema, ConfigRuleSetOutputSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, CredentialSummarySchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorRestartOutputSchema, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LaunchResolveInputSchema, LaunchResolveOutputSchema, LegacyProviderFileError, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolGraphError, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, ResetRowSchema, ResetScheduleSchema, SessionAgentTreeSchema, SessionLookupError, SessionSummarySchema, TaskItemSchema, USAGE_EVENT_SOURCE, UpdateCheckOutputSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, WorkflowRunSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, collectResets, collectSessionList, createAgentTreesApiRouter, createCodexApiRouter, createConfigApiRouter, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchApiRouter, createLaunchEventPublisher, createLeafCache, createLifecycleApiRouter, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listSessions, listUsageSnapshots, locateSession, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readCodexAccount, readCodexRateLimits, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readSessionAgentTree, readUsageSnapshot, realCodexAppServerPort, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, realSessionFs, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveClaudeLaunch, resolveDecisions, resolveLaunch, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, showSession, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, summariseSession, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, watchedInstallEntry, writeDirectoryRules };
-export type { AddDirectoryRuleOptions, AddProviderInput, AgentKind, AgentNode, AgentReadFs, AgentTreesApiDeps, AgentTreesApiRouter, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, ClaudeLaunchResolution, CodexAccountRead, CodexApiClient, CodexApiDeps, CodexApiRouter, CodexAppServerConnection, CodexAppServerPort, CodexAppServerReadOptions, CodexRateLimitsRead, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigApiDeps, ConfigApiRouter, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, IdentitySession, InjectedCredential, LaunchApiDeps, LaunchApiRouter, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchResolution, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, LifecycleApiClient, LifecycleApiDeps, LifecycleApiRouter, LocatedSession, NestedContribution, OwnExecutableStat, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, ReadSessionOptions, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResetRow, ResetSchedule, ResolveClaudeLaunchOptions, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SessionAgentTree, SessionCommandFs, SessionListFilters, SessionRef, SessionSummary, SessionView, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, TaskItem, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation, WorkflowRun };
+export { AMBIENT_CREDENTIAL_VARS, AgentKindSchema, AgentMetaSchema, AgentNodeSchema, AgentTreesListInputSchema, AgentTreesListOutputSchema, AgentTreesShowInputSchema, AgentTreesShowOutputSchema, CHECK_CREDENTIAL_APPLIES, CODEX_APP_SERVER_GENERATED_AGAINST, CODEX_APP_SERVER_TIMEOUT_MS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, CodexAccountReadSchema, CodexAppServerProtocolError, CodexAppServerRequestError, CodexAppServerUnavailableError, CodexLogoutOutputSchema, CodexRateLimitsReadSchema, CodexSignInSchema, CodexStatusOutputSchema, ConfigIdentityAddOutputSchema, ConfigIdentityRemoveInputSchema, ConfigIdentityRemoveOutputSchema, ConfigIdentitySetInputSchema, ConfigIdentitySetOutputSchema, ConfigIdentityUseOutputSchema, ConfigNameInputSchema, ConfigPoolAddInputSchema, ConfigPoolAddOutputSchema, ConfigPoolRemoveInputSchema, ConfigPoolRemoveOutputSchema, ConfigPoolSetInputSchema, ConfigPoolSetOutputSchema, ConfigPoolUseOutputSchema, ConfigProfileAddInputSchema, ConfigProfileAddOutputSchema, ConfigProfileRemoveInputSchema, ConfigProfileRemoveOutputSchema, ConfigProfileSchema, ConfigProfileSetInputSchema, ConfigProfileSetOutputSchema, ConfigProfileUseOutputSchema, ConfigProviderAddInputSchema, ConfigProviderAddOutputSchema, ConfigProviderRemoveInputSchema, ConfigProviderRemoveOutputSchema, ConfigProviderSetInputSchema, ConfigProviderSetOutputSchema, ConfigRuleAddInputSchema, ConfigRuleAddOutputSchema, ConfigRuleRemoveInputSchema, ConfigRuleRemoveOutputSchema, ConfigRuleSetInputSchema, ConfigRuleSetOutputSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, CredentialSummarySchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorRestartOutputSchema, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LIVE_TASK_CAP, LaunchLifecycleEventSchema, LaunchRefusedError, LaunchResolveInputSchema, LaunchResolveOutputSchema, LegacyProviderFileError, LiveTaskSchema, MergedAgentNodeSchema, MergedAgentTreeSchema, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolGraphError, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, ResetRowSchema, ResetScheduleSchema, SessionAgentTreeSchema, SessionLookupError, SessionSummarySchema, TaskItemSchema, USAGE_EVENT_SOURCE, UpdateCheckOutputSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, WorkflowRunSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, applyAgentTaskEvent, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, collectResets, collectSessionList, createAgentTreesApiRouter, createCodexApiRouter, createConfigApiRouter, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchApiRouter, createLaunchEventPublisher, createLeafCache, createLifecycleApiRouter, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listSessions, listUsageSnapshots, locateSession, matchBranch, mergeLiveTasks, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readCodexAccount, readCodexRateLimits, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readSessionAgentTree, readUsageSnapshot, realCodexAppServerPort, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, realSessionFs, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveClaudeLaunch, resolveDecisions, resolveLaunch, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, showSession, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, summariseSession, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, watchedInstallEntry, writeDirectoryRules };
+export type { AddDirectoryRuleOptions, AddProviderInput, AgentKind, AgentNode, AgentReadFs, AgentTreesApiDeps, AgentTreesApiRouter, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, ClaudeLaunchResolution, CodexAccountRead, CodexApiClient, CodexApiDeps, CodexApiRouter, CodexAppServerConnection, CodexAppServerPort, CodexAppServerReadOptions, CodexRateLimitsRead, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigApiDeps, ConfigApiRouter, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, IdentitySession, InjectedCredential, LaunchApiDeps, LaunchApiRouter, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchResolution, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, LifecycleApiClient, LifecycleApiDeps, LifecycleApiRouter, LiveTask, LiveTaskBook, LocatedSession, MergedAgentNode, MergedAgentTree, NestedContribution, OwnExecutableStat, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, ReadSessionOptions, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResetRow, ResetSchedule, ResolveClaudeLaunchOptions, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SessionAgentTree, SessionCommandFs, SessionListFilters, SessionRef, SessionSummary, SessionView, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, TaskItem, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation, WorkflowRun };