claude-use 1.5.0 → 2.0.1

package/README.md

@@ -146,11 +146,11 @@ Every top-level entry in `~/.claude` is classified into one of five categories,
 |---|---|---|
 | `secret` | **Never** — hardcoded, cannot be overridden by any configuration layer | `.credentials.json`, `backups` |
 | `runtime` | No | `daemon*`, `.git*`, `.DS_Store`, `mcp-needs-auth-cache.json`, `shell-snapshots`, `statsig`, `telemetry`, `stats-cache.json`, `usage-data`, `ide`, `cache`, `scheduled_tasks.lock` |
-| `history` | No | `projects`, `sessions`, `session-env`, `teams`, `tasks`, `todos`, `history.jsonl`, `transcripts`, `paste-cache`, `file-history`, `plans`, `workflows`, `jobs`, `debug`, `downloads`, `chrome` |
+| `history` | Yes | `projects`, `sessions`, `session-env`, `teams`, `tasks`, `todos`, `history.jsonl`, `transcripts`, `paste-cache`, `file-history`, `plans`, `workflows`, `jobs`, `debug`, `downloads`, `chrome` |
 | `knowledge` | Yes | `skills`, `agents`, `rules`, `memory`, `commands`, `plugins`, `hooks`, `AGENTS.md`, `CLAUDE.md`, `README.md` |
 | `settings` | Yes | `settings.json`, `settings.local.json` |
 
-This is a safe-by-default posture: only `knowledge` and `settings` are shared out of the box. A configuration profile can open up `history` (or anything else) wholesale, or share individual items within a closed category.
+The default posture is "identities differ only in credentials": `knowledge`, `settings`, and `history` are all shared out of the box, and only `runtime` stays closed — not as a confidentiality boundary, but because daemon locks, PIDs, `.git` state, and IDE/shell snapshots are live per-process or per-machine artifacts that make no sense symlinked across two separate running identities. A configuration profile can close `history` (or `runtime`, or anything else) wholesale for a specific identity or directory — e.g. to keep a client engagement's sessions from leaking into a personal or internal identity — or share/hide individual items within an otherwise-closed category.
 
 **`all` is shorthand for every overridable category at once**, for a profile that wants "share everything except credentials" without hand-listing `runtime`, `history`, `knowledge`, and `settings` individually — `{ "categories": { "all": true } }` expands to exactly those four set to `true`. `secret` can never be included, by construction: `all` only ever expands over the four categories a configuration layer is allowed to toggle in the first place, the same restriction a hand-written `categories` object is already under. An explicit named category always wins over `all` in the same object regardless of which one is written first, so `{ "all": true, "runtime": false }` means "share everything except runtime" — the general `all` setting, narrowed by the specific override, matching how a more specific layer already beats a less specific one everywhere else in this cascade. The same shorthand works identically from `--category all=true`/`CLAUDE_USE_CATEGORY_OVERRIDE=all=true` and `claude-use profile set <name> --category all=true`, not just profile JSON files — one expansion, shared by all three input paths.
 

package/dist/cli.cjs

@@ -221857,7 +221857,7 @@ var categories_default_default = {
 // package.json
 var package_default = {
   name: "claude-use",
-  version: "1.5.0",
+  version: "2.0.1",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "Apache-2.0",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -236628,7 +236628,7 @@ var CategoryClassificationOverlaySchema = external_exports.strictObject({
 var SHIPPED_CATEGORY_DEFAULTS = Object.freeze({
   secret: false,
   runtime: false,
-  history: false,
+  history: true,
   knowledge: true,
   settings: true
 });
@@ -240502,6 +240502,16 @@ var IdentityAlreadyExistsError = class extends CliError {
   }
   identityName;
 };
+var InvalidIdentityNameError = class extends CliError {
+  constructor(attemptedName) {
+    super(
+      `"${attemptedName}" is not a valid identity name \u2014 identity names must start with a letter or number and may only contain letters, numbers, dots, hyphens, and underscores.`
+    );
+    this.attemptedName = attemptedName;
+    this.name = "InvalidIdentityNameError";
+  }
+  attemptedName;
+};
 function identityJsonPath(paths, name) {
   return import_node_path16.default.join(paths.identitiesDir, name, "identity.json");
 }
@@ -240515,9 +240525,12 @@ function addIdentity(paths, name) {
   if (identityExists(paths, name)) {
     throw new IdentityAlreadyExistsError(name);
   }
-  const identity = IdentitySchema.parse({ name, allowAmbientCredential: false });
-  writeJsonAtomic(identityJsonPath(paths, name), identity);
-  return identity;
+  const parsed = IdentitySchema.safeParse({ name, allowAmbientCredential: false });
+  if (!parsed.success) {
+    throw new InvalidIdentityNameError(name);
+  }
+  writeJsonAtomic(identityJsonPath(paths, name), parsed.data);
+  return parsed.data;
 }
 function useIdentity(paths, name) {
   if (!identityExists(paths, name)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "1.5.0",
+  "version": "2.0.1",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "Apache-2.0",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",