agent-shim 9.8.0 → 9.9.0

package/dist/types/index.d.ts

@@ -366,8 +366,8 @@ declare const CredentialSchema: z.ZodObject<{
         literal: z.ZodString;
     }, z.core.$strict>]>>;
     target: z.ZodOptional<z.ZodEnum<{
-        bearer: "bearer";
         apiKey: "apiKey";
+        bearer: "bearer";
         oauthToken: "oauthToken";
     }>>;
     cache: z.ZodOptional<z.ZodObject<{
@@ -441,8 +441,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -557,8 +557,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -1596,8 +1596,8 @@ declare const IdentitySchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
             oauthToken: "oauthToken";
         }>>;
         cache: z.ZodOptional<z.ZodObject<{
@@ -3712,6 +3712,141 @@ declare function frontDoorApiLink(port: number, ca: string, token: string): RPCL
 /** Builds the typed API's client for the door's provider listener: the same address, CA and per-generation control token the bespoke control client uses. */
 declare function frontDoorRcApiClient(port: number, ca: string, token: string): RcApiClient;
 
+/**
+ * The Codex release whose app-server protocol these schemas were written against. The shapes are the stable surface of `codex app-server generate-json-schema` (the `account/read` and `account/rateLimits/read` methods and the `initialize` handshake), checked against that release's output. A different installed release is not refused for being different: the answer is validated against these schemas, and a mismatch is reported naming both versions.
+ */
+declare const CODEX_APP_SERVER_GENERATED_AGAINST = "0.160.0";
+/** The answer to `account/read`: the login, or none, and whether Codex needs one before it can serve requests. */
+declare const CodexAccountReadSchema: z.ZodObject<{
+    account: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"apiKey">;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"chatgpt">;
+        email: z.ZodNullable<z.ZodString>;
+        planType: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"amazonBedrock">;
+        usesCodexManagedCredentials: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>], "type">>;
+    requiresOpenaiAuth: z.ZodBoolean;
+}, z.core.$strip>;
+/** The answer to `account/rateLimits/read`: the windows (the single-bucket view and the view by metered limit id) and the banked reset credits. */
+declare const CodexRateLimitsReadSchema: z.ZodObject<{
+    rateLimits: z.ZodObject<{
+        limitId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        limitName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        planType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        primary: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            usedPercent: z.ZodNumber;
+            resetsAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            windowDurationMins: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        }, z.core.$strip>>>;
+        secondary: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            usedPercent: z.ZodNumber;
+            resetsAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            windowDurationMins: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        }, z.core.$strip>>>;
+        rateLimitReachedType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        spendControlReached: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    }, z.core.$strip>;
+    rateLimitsByLimitId: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
+        limitId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        limitName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        planType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        primary: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            usedPercent: z.ZodNumber;
+            resetsAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            windowDurationMins: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        }, z.core.$strip>>>;
+        secondary: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            usedPercent: z.ZodNumber;
+            resetsAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            windowDurationMins: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        }, z.core.$strip>>>;
+        rateLimitReachedType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        spendControlReached: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    }, z.core.$strip>>>>;
+    rateLimitResetCredits: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        availableCount: z.ZodNumber;
+        credits: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            grantedAt: z.ZodNumber;
+            expiresAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            resetType: z.ZodString;
+            status: z.ZodString;
+            title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>>>;
+    }, z.core.$strip>>>;
+    accountId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    ordinaryUsageAllowed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+}, z.core.$strip>;
+type CodexAccountRead = z.infer<typeof CodexAccountReadSchema>;
+type CodexRateLimitsRead = z.infer<typeof CodexRateLimitsReadSchema>;
+
+/**
+ * A reader for what Codex itself knows about a login: the account behind a Codex home and its rate limits, asked of `codex app-server` over stdio so no consumer opens `auth.json` or depends on a private file format. Each read starts a short-lived app-server under the given home, asks one question and ends it. It never starts a login and never sends a prompt.
+ */
+/** Raised when the Codex binary cannot be started (not installed, not executable) or ends before it answers. */
+declare class CodexAppServerUnavailableError extends CliError {
+    constructor(detail: string);
+}
+/** Raised when the app-server answers a request with a JSON-RPC error; `rpcCode` and the message are the server's own, so a signed-out home reads as the server's "authentication required". */
+declare class CodexAppServerRequestError extends CliError {
+    readonly method: string;
+    readonly rpcCode: number;
+    constructor(method: string, rpcCode: number, detail: string);
+}
+/** Raised when an answer does not have the shape this reader was written against, naming the installed Codex version and the one the shapes were generated against. */
+declare class CodexAppServerProtocolError extends CliError {
+    readonly method: string;
+    readonly installedVersion: string | undefined;
+    constructor(method: string, installedVersion: string | undefined, detail: string);
+}
+/** One open conversation with an app-server process. */
+interface CodexAppServerConnection {
+    /** Writes one JSON-RPC message. */
+    readonly send: (message: unknown) => void;
+    /** The next message the server wrote, or undefined once it has ended. */
+    readonly receive: () => Promise<unknown>;
+    /** Ends the conversation: closes the server's input, waits for it to exit and stops it if it does not. Safe to call twice. */
+    readonly close: () => Promise<void>;
+}
+/** Starts app-server processes. Injected so the reader runs against a scripted server in tests and against the real `codex` binary in use. */
+interface CodexAppServerPort {
+    /** Starts `bin app-server` with `CODEX_HOME` set to `codexHome`. Rejects with `CodexAppServerUnavailableError` when it cannot start. */
+    readonly open: (options: Readonly<{
+        bin: string;
+        codexHome: string;
+    }>) => Promise<CodexAppServerConnection>;
+}
+/** What a read needs from its caller. */
+interface CodexAppServerReadOptions {
+    /** The Codex home to read: the directory `codex` keeps its login in, `~/.codex` unless `CODEX_HOME` says otherwise. */
+    readonly codexHome: string;
+    /** The Codex executable; `codex` on `PATH` when absent. */
+    readonly bin?: string;
+    /** Stops the read: the server is ended and the read rejects with the signal's reason. */
+    readonly signal?: AbortSignal;
+    /** How long the read may take, `CODEX_APP_SERVER_TIMEOUT_MS` when absent. A read that exceeds it rejects with `CodexAppServerUnavailableError`. */
+    readonly timeoutMs?: number;
+}
+/**
+ * How long a read may take before it is abandoned. An app-server start plus one backend call for the usage windows is network bound; this bounds a hung server rather than describing a normal read.
+ */
+declare const CODEX_APP_SERVER_TIMEOUT_MS = 30000;
+/**
+ * Reads the account behind a Codex home through `account/read`: its type, and for a ChatGPT sign-in the email and plan. The token is never part of the answer. A home with no login answers `account: null`.
+ */
+declare function readCodexAccount(port: CodexAppServerPort, options: Readonly<CodexAppServerReadOptions>): Promise<CodexAccountRead>;
+/**
+ * Reads a Codex home's rate limits through `account/rateLimits/read`: the windows by their length and the banked reset credits. A home with no login is refused by the server, reported as `CodexAppServerRequestError`.
+ */
+declare function readCodexRateLimits(port: CodexAppServerPort, options: Readonly<CodexAppServerReadOptions>): Promise<CodexRateLimitsRead>;
+
+/** The real app-server port: `codex app-server` as a child process speaking one JSON message per line on standard input and output, with `CODEX_HOME` set for it alone. */
+declare const realCodexAppServerPort: CodexAppServerPort;
+
 /**
  * The Zod schema of `agent-shim check --json`'s output: one definition of the report's wire shape, so the JSON conversion (`checkReportToJson`, whose return type is this schema's inferred type, which makes the compiler prove the two agree) and every programmatic consumer of the report (the front door's `check.run` procedure above all) validate through the same source. A plain Zod leaf mirroring the shapes the report's own modules define; the vocabularies it switches on (layer kinds, decision routes, diagnostic codes and severities, decision sources) are imported as const arrays from those modules rather than restated here, so a vocabulary added there is a compile error here until this schema names it.
  */
@@ -3886,8 +4021,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
             name: z.ZodString;
             credential: z.ZodObject<{
                 target: z.ZodEnum<{
-                    bearer: "bearer";
                     apiKey: "apiKey";
+                    bearer: "bearer";
                     oauthToken: "oauthToken";
                 }>;
                 sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -3948,8 +4083,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
         }, z.core.$strict>]>>;
         identity: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -4888,8 +5023,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -4945,8 +5080,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
@@ -4967,8 +5102,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -5493,8 +5628,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -5556,8 +5691,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -5614,8 +5749,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -5677,8 +5812,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6604,8 +6739,8 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
                 name: zod.ZodString;
                 summary: zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -7095,8 +7230,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     name: zod.ZodString;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -7157,8 +7292,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                 }, zod_v4_core.$strict>]>>;
                 identity: zod.ZodOptional<zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -7422,8 +7557,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 name: zod.ZodString;
                 summary: zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -7496,8 +7631,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -7553,8 +7688,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
@@ -7575,8 +7710,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -8101,8 +8236,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -8164,8 +8299,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -8222,8 +8357,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -8285,8 +8420,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -9065,8 +9200,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     name: zod.ZodString;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -9127,8 +9262,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 }, zod_v4_core.$strict>]>>;
                 identity: zod.ZodOptional<zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -9507,8 +9642,8 @@ declare function frontDoorApiFromState(paths: LayoutPaths, fsPort?: HeadroomFs):
 /** A credential block as every response reports it: the effective target, each source's kind and its identifying detail, in order, and the cache setting. Never a value: a `literal` source reports only its kind. */
 declare const CredentialSummarySchema: z.ZodObject<{
     target: z.ZodEnum<{
-        bearer: "bearer";
         apiKey: "apiKey";
+        bearer: "bearer";
         oauthToken: "oauthToken";
     }>;
     sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -9552,8 +9687,8 @@ declare const ConfigIdentityAddOutputSchema: z.ZodObject<{
         allowAmbientCredential: z.ZodBoolean;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -9610,8 +9745,8 @@ declare const ConfigIdentitySetInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
             oauthToken: "oauthToken";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
@@ -9633,8 +9768,8 @@ declare const ConfigIdentitySetOutputSchema: z.ZodObject<{
         allowAmbientCredential: z.ZodBoolean;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -10157,8 +10292,8 @@ declare const ConfigProviderAddInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
             ttl: z.ZodOptional<z.ZodString>;
@@ -10221,8 +10356,8 @@ declare const ConfigProviderAddOutputSchema: z.ZodObject<{
         }, z.core.$strict>>;
         credential: z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -10280,8 +10415,8 @@ declare const ConfigProviderSetInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
             ttl: z.ZodOptional<z.ZodString>;
@@ -10344,8 +10479,8 @@ declare const ConfigProviderSetOutputSchema: z.ZodObject<{
         }, z.core.$strict>>;
         credential: z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -11180,8 +11315,8 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
         name: z.ZodString;
         summary: z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -12402,5 +12537,5 @@ declare const OWN_CLI_FILE_NAME = "cli.cjs";
  */
 declare function agentShimCliPath(distDir?: string | undefined): string;
 
-export { AMBIENT_CREDENTIAL_VARS, CHECK_CREDENTIAL_APPLIES, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, CodexLogoutOutputSchema, CodexSignInSchema, CodexStatusOutputSchema, ConfigIdentityAddOutputSchema, ConfigIdentityRemoveInputSchema, ConfigIdentityRemoveOutputSchema, ConfigIdentitySetInputSchema, ConfigIdentitySetOutputSchema, ConfigIdentityUseOutputSchema, ConfigNameInputSchema, ConfigPoolAddInputSchema, ConfigPoolAddOutputSchema, ConfigPoolRemoveInputSchema, ConfigPoolRemoveOutputSchema, ConfigPoolSetInputSchema, ConfigPoolSetOutputSchema, ConfigPoolUseOutputSchema, ConfigProfileAddInputSchema, ConfigProfileAddOutputSchema, ConfigProfileRemoveInputSchema, ConfigProfileRemoveOutputSchema, ConfigProfileSchema, ConfigProfileSetInputSchema, ConfigProfileSetOutputSchema, ConfigProfileUseOutputSchema, ConfigProviderAddInputSchema, ConfigProviderAddOutputSchema, ConfigProviderRemoveInputSchema, ConfigProviderRemoveOutputSchema, ConfigProviderSetInputSchema, ConfigProviderSetOutputSchema, ConfigRuleAddInputSchema, ConfigRuleAddOutputSchema, ConfigRuleRemoveInputSchema, ConfigRuleRemoveOutputSchema, ConfigRuleSetInputSchema, ConfigRuleSetOutputSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, CredentialSummarySchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorRestartOutputSchema, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LaunchResolveInputSchema, LaunchResolveOutputSchema, LegacyProviderFileError, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolGraphError, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, USAGE_EVENT_SOURCE, UpdateCheckOutputSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, createCodexApiRouter, createConfigApiRouter, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchApiRouter, createLaunchEventPublisher, createLeafCache, createLifecycleApiRouter, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readUsageSnapshot, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveClaudeLaunch, resolveDecisions, resolveLaunch, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, watchedInstallEntry, writeDirectoryRules };
-export type { AddDirectoryRuleOptions, AddProviderInput, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, ClaudeLaunchResolution, CodexApiClient, CodexApiDeps, CodexApiRouter, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigApiDeps, ConfigApiRouter, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchApiDeps, LaunchApiRouter, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchResolution, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, LifecycleApiClient, LifecycleApiDeps, LifecycleApiRouter, NestedContribution, OwnExecutableStat, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResolveClaudeLaunchOptions, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation };
+export { AMBIENT_CREDENTIAL_VARS, CHECK_CREDENTIAL_APPLIES, CODEX_APP_SERVER_GENERATED_AGAINST, CODEX_APP_SERVER_TIMEOUT_MS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, CodexAccountReadSchema, CodexAppServerProtocolError, CodexAppServerRequestError, CodexAppServerUnavailableError, CodexLogoutOutputSchema, CodexRateLimitsReadSchema, CodexSignInSchema, CodexStatusOutputSchema, ConfigIdentityAddOutputSchema, ConfigIdentityRemoveInputSchema, ConfigIdentityRemoveOutputSchema, ConfigIdentitySetInputSchema, ConfigIdentitySetOutputSchema, ConfigIdentityUseOutputSchema, ConfigNameInputSchema, ConfigPoolAddInputSchema, ConfigPoolAddOutputSchema, ConfigPoolRemoveInputSchema, ConfigPoolRemoveOutputSchema, ConfigPoolSetInputSchema, ConfigPoolSetOutputSchema, ConfigPoolUseOutputSchema, ConfigProfileAddInputSchema, ConfigProfileAddOutputSchema, ConfigProfileRemoveInputSchema, ConfigProfileRemoveOutputSchema, ConfigProfileSchema, ConfigProfileSetInputSchema, ConfigProfileSetOutputSchema, ConfigProfileUseOutputSchema, ConfigProviderAddInputSchema, ConfigProviderAddOutputSchema, ConfigProviderRemoveInputSchema, ConfigProviderRemoveOutputSchema, ConfigProviderSetInputSchema, ConfigProviderSetOutputSchema, ConfigRuleAddInputSchema, ConfigRuleAddOutputSchema, ConfigRuleRemoveInputSchema, ConfigRuleRemoveOutputSchema, ConfigRuleSetInputSchema, ConfigRuleSetOutputSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, CredentialSummarySchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorRestartOutputSchema, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LaunchResolveInputSchema, LaunchResolveOutputSchema, LegacyProviderFileError, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolGraphError, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, USAGE_EVENT_SOURCE, UpdateCheckOutputSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, createCodexApiRouter, createConfigApiRouter, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchApiRouter, createLaunchEventPublisher, createLeafCache, createLifecycleApiRouter, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readCodexAccount, readCodexRateLimits, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readUsageSnapshot, realCodexAppServerPort, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveClaudeLaunch, resolveDecisions, resolveLaunch, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, watchedInstallEntry, writeDirectoryRules };
+export type { AddDirectoryRuleOptions, AddProviderInput, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, ClaudeLaunchResolution, CodexAccountRead, CodexApiClient, CodexApiDeps, CodexApiRouter, CodexAppServerConnection, CodexAppServerPort, CodexAppServerReadOptions, CodexRateLimitsRead, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigApiDeps, ConfigApiRouter, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchApiDeps, LaunchApiRouter, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchResolution, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, LifecycleApiClient, LifecycleApiDeps, LifecycleApiRouter, NestedContribution, OwnExecutableStat, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResolveClaudeLaunchOptions, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "9.8.0",
+  "version": "9.9.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",