claude-use 10.0.0 → 10.0.2

package/dist/cli.cjs

@@ -27535,6 +27535,8 @@ var init_state2 = __esm({
       settingsHash: external_exports.string().optional(),
       /** The install spec the running install was last installed from, so a `source` config change is detected as drift. */
       installedSource: external_exports.string().optional(),
+      /** The install spec the supervisor is installing right now, present only while `uv tool install` runs, so a launcher that finds a live supervisor with no daemon yet keeps waiting for the install instead of counting it against its start bound. Cleared by the write that follows the install, whatever its outcome. */
+      installing: external_exports.string().optional(),
       /** The last fatal error, kept across shutdowns so `headroom status` can explain a daemon that is not running. */
       lastError: external_exports.string().optional()
     });
@@ -27634,7 +27636,7 @@ function daemonAdmits(fs22, allowlistFile, recordedHash, required2) {
 }
 function ensureHeadroom(params) {
   const { paths, ports } = params;
-  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+  let deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
   let spawnedSupervisor = false;
   migrateHeadroomState(ports.fs, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning);
   const commandLines = /* @__PURE__ */ new Map();
@@ -27648,6 +27650,9 @@ function ensureHeadroom(params) {
     let awaiting;
     const state = resolveServingHeadroomState(ports.fs, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning)?.state;
     if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
+      if (state.installing !== void 0) {
+        deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+      }
       const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
       if (daemonUp && state.socketPath !== void 0 && state.headroomPid !== void 0) {
         const required2 = params.requiredUpstreams?.();
@@ -28249,15 +28254,16 @@ async function runSupervisor(initialConfig, ports, options = {}) {
     const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
     if (versionOk && commitOk && (installedSource === void 0 || installedSource === config2.source)) {
       installedSource = config2.source;
-      return true;
+      return void 0;
     }
     ports.log(`agent-shim headroom supervisor: installing headroom from ${config2.source}`);
+    writeOwnState({ supervisorPid: ports.ownPid, installedSource, installing: config2.source });
     const result = ports.install(config2.source);
     if (!result.ok) {
-      return false;
+      return `could not install headroom from ${config2.source}: ${result.error ?? "install failed"}`;
     }
     installedSource = config2.source;
-    return true;
+    return void 0;
   };
   const socket = prepareHeadroomSocket(fs22, ports.socketTrust, paths, ports.ownPid);
   if (socket.refused !== void 0) {
@@ -28266,8 +28272,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
   const { socketPath } = socket;
   pruneStaleHeadroomSockets(fs22, paths, ports.isRunning);
   pruneStaleAllowlistTemporaries(fs22, paths.headroomAllowlistFile, ports.isRunning);
-  if (!ensureInstalled()) {
-    return fail(`could not install headroom from ${config2.source}: install failed (is uv installed and on PATH?)`);
+  const installFailure = ensureInstalled();
+  if (installFailure !== void 0) {
+    return fail(installFailure);
   }
   const version2 = ports.headroomVersion() ?? "unknown";
   writeOwnState({ supervisorPid: ports.ownPid, version: version2, installedSource });
@@ -28342,8 +28349,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
           `headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up` + (lastExitOutput === void 0 ? "" : `; the last attempt exited before it was ready, and its log ends: ${lastExitOutput}`)
         );
       }
-      if (installedSource !== config2.source && !ensureInstalled()) {
-        return fail(`could not install headroom from ${config2.source}: install failed (is uv installed and on PATH?)`);
+      const restartInstallFailure = installedSource !== config2.source ? ensureInstalled() : void 0;
+      if (restartInstallFailure !== void 0) {
+        return fail(restartInstallFailure);
       }
       const logOffset = ports.daemonLogSize();
       const pid = ports.spawnHeadroom(socketPath, paths.headroomAllowlistFile, config2.settings);
@@ -33959,7 +33967,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "10.0.0",
+      version: "10.0.2",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -126280,7 +126288,9 @@ async function hopOnce(request7, response, target, body, mayRetry) {
       }
       const phase = response.headersSent ? "mid-stream" : "before the response started";
       const code = "code" in error63 && typeof error63.code === "string" ? ` ${error63.code}` : "";
-      target.log(`front door: headroom hop to ${socketPath} failed (${request7.method} ${new URL(request7.url, "http://127.0.0.1").pathname}, ${phase}): ${error63.message}${code}`);
+      const attempt = mayRetry ? "first attempt" : "replay";
+      const client = request7.signal.aborted ? "client had gone" : "client still waiting";
+      target.log(`front door: headroom hop to ${socketPath} failed (${request7.method} ${new URL(request7.url, "http://127.0.0.1").pathname}, ${phase}, ${attempt}, ${client}): ${error63.message}${code}`);
       if (!response.headersSent) {
         response.start(HTTP_BAD_GATEWAY2, { "Content-Type": "application/json" });
         void response.write(JSON.stringify({ type: "error", error: { type: "api_error", message: `agent-shim front door: the headroom daemon is unreachable (${error63.message})` } })).then(() => {
@@ -141245,6 +141255,7 @@ function formatHeadroomStatus(status) {
 }
 var ownedHeadroom = /* @__PURE__ */ new Map();
 var exitedHeadroom = /* @__PURE__ */ new Set();
+var HEADROOM_INSTALL_TIMEOUT_MS = 6e5;
 var READY_FETCH_TIMEOUT_MS = 2e3;
 function headroomPidRunning(pid) {
   return !exitedHeadroom.has(pid) && realIsProcessRunning(pid);
@@ -141373,9 +141384,13 @@ function realSupervisorPorts(paths) {
     },
     ready: readyOverSocket,
     install: (spec) => {
-      const result = (0, import_node_child_process7.spawnSync)("uv", ["tool", "install", spec], { encoding: "utf8" });
+      const result = (0, import_node_child_process7.spawnSync)("uv", ["tool", "install", spec], { encoding: "utf8", timeout: HEADROOM_INSTALL_TIMEOUT_MS });
       if (result.error !== void 0) {
-        return { ok: false, error: `uv is not installed or not on PATH (${result.error.message})` };
+        const timedOut = "code" in result.error && result.error.code === "ETIMEDOUT";
+        return {
+          ok: false,
+          error: timedOut ? `uv tool install did not finish within ${String(HEADROOM_INSTALL_TIMEOUT_MS)}ms and was stopped` : `uv is not installed or not on PATH (${result.error.message})`
+        };
       }
       if (result.stdout !== "") {
         import_node_fs20.default.appendFileSync(paths.headroomLogPath, result.stdout);

package/dist/index.cjs

@@ -2758,7 +2758,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "10.0.0",
+      version: "10.0.2",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -3134,6 +3134,8 @@ var init_state2 = __esm({
       settingsHash: import_zod8.z.string().optional(),
       /** The install spec the running install was last installed from, so a `source` config change is detected as drift. */
       installedSource: import_zod8.z.string().optional(),
+      /** The install spec the supervisor is installing right now, present only while `uv tool install` runs, so a launcher that finds a live supervisor with no daemon yet keeps waiting for the install instead of counting it against its start bound. Cleared by the write that follows the install, whatever its outcome. */
+      installing: import_zod8.z.string().optional(),
       /** The last fatal error, kept across shutdowns so `headroom status` can explain a daemon that is not running. */
       lastError: import_zod8.z.string().optional()
     });
@@ -3233,7 +3235,7 @@ function daemonAdmits(fs12, allowlistFile, recordedHash, required) {
 }
 function ensureHeadroom(params) {
   const { paths, ports } = params;
-  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+  let deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
   let spawnedSupervisor = false;
   migrateHeadroomState(ports.fs, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning);
   const commandLines = /* @__PURE__ */ new Map();
@@ -3247,6 +3249,9 @@ function ensureHeadroom(params) {
     let awaiting;
     const state = resolveServingHeadroomState(ports.fs, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning)?.state;
     if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
+      if (state.installing !== void 0) {
+        deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+      }
       const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
       if (daemonUp && state.socketPath !== void 0 && state.headroomPid !== void 0) {
         const required = params.requiredUpstreams?.();
@@ -3686,15 +3691,16 @@ async function runSupervisor(initialConfig, ports, options = {}) {
     const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
     if (versionOk && commitOk && (installedSource === void 0 || installedSource === config.source)) {
       installedSource = config.source;
-      return true;
+      return void 0;
     }
     ports.log(`agent-shim headroom supervisor: installing headroom from ${config.source}`);
+    writeOwnState({ supervisorPid: ports.ownPid, installedSource, installing: config.source });
     const result = ports.install(config.source);
     if (!result.ok) {
-      return false;
+      return `could not install headroom from ${config.source}: ${result.error ?? "install failed"}`;
     }
     installedSource = config.source;
-    return true;
+    return void 0;
   };
   const socket = prepareHeadroomSocket(fs12, ports.socketTrust, paths, ports.ownPid);
   if (socket.refused !== void 0) {
@@ -3703,8 +3709,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
   const { socketPath } = socket;
   pruneStaleHeadroomSockets(fs12, paths, ports.isRunning);
   pruneStaleAllowlistTemporaries(fs12, paths.headroomAllowlistFile, ports.isRunning);
-  if (!ensureInstalled()) {
-    return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+  const installFailure = ensureInstalled();
+  if (installFailure !== void 0) {
+    return fail(installFailure);
   }
   const version = ports.headroomVersion() ?? "unknown";
   writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
@@ -3779,8 +3786,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
           `headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up` + (lastExitOutput === void 0 ? "" : `; the last attempt exited before it was ready, and its log ends: ${lastExitOutput}`)
         );
       }
-      if (installedSource !== config.source && !ensureInstalled()) {
-        return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+      const restartInstallFailure = installedSource !== config.source ? ensureInstalled() : void 0;
+      if (restartInstallFailure !== void 0) {
+        return fail(restartInstallFailure);
       }
       const logOffset = ports.daemonLogSize();
       const pid = ports.spawnHeadroom(socketPath, paths.headroomAllowlistFile, config.settings);

package/dist/index.mjs

@@ -2734,7 +2734,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "10.0.0",
+      version: "10.0.2",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -3110,6 +3110,8 @@ var init_state2 = __esm({
       settingsHash: z8.string().optional(),
       /** The install spec the running install was last installed from, so a `source` config change is detected as drift. */
       installedSource: z8.string().optional(),
+      /** The install spec the supervisor is installing right now, present only while `uv tool install` runs, so a launcher that finds a live supervisor with no daemon yet keeps waiting for the install instead of counting it against its start bound. Cleared by the write that follows the install, whatever its outcome. */
+      installing: z8.string().optional(),
       /** The last fatal error, kept across shutdowns so `headroom status` can explain a daemon that is not running. */
       lastError: z8.string().optional()
     });
@@ -3209,7 +3211,7 @@ function daemonAdmits(fs12, allowlistFile, recordedHash, required) {
 }
 function ensureHeadroom(params) {
   const { paths, ports } = params;
-  const deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+  let deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
   let spawnedSupervisor = false;
   migrateHeadroomState(ports.fs, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning);
   const commandLines = /* @__PURE__ */ new Map();
@@ -3223,6 +3225,9 @@ function ensureHeadroom(params) {
     let awaiting;
     const state = resolveServingHeadroomState(ports.fs, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning)?.state;
     if (state?.supervisorPid !== void 0 && ports.isRunning(state.supervisorPid)) {
+      if (state.installing !== void 0) {
+        deadline = ports.now() + HEADROOM_START_TIMEOUT_MS;
+      }
       const daemonUp = state.socketPath !== void 0 && state.headroomPid !== void 0 && ports.isRunning(state.headroomPid);
       if (daemonUp && state.socketPath !== void 0 && state.headroomPid !== void 0) {
         const required = params.requiredUpstreams?.();
@@ -3662,15 +3667,16 @@ async function runSupervisor(initialConfig, ports, options = {}) {
     const commitOk = pinned === void 0 || ports.installedCommit() === pinned;
     if (versionOk && commitOk && (installedSource === void 0 || installedSource === config.source)) {
       installedSource = config.source;
-      return true;
+      return void 0;
     }
     ports.log(`agent-shim headroom supervisor: installing headroom from ${config.source}`);
+    writeOwnState({ supervisorPid: ports.ownPid, installedSource, installing: config.source });
     const result = ports.install(config.source);
     if (!result.ok) {
-      return false;
+      return `could not install headroom from ${config.source}: ${result.error ?? "install failed"}`;
     }
     installedSource = config.source;
-    return true;
+    return void 0;
   };
   const socket = prepareHeadroomSocket(fs12, ports.socketTrust, paths, ports.ownPid);
   if (socket.refused !== void 0) {
@@ -3679,8 +3685,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
   const { socketPath } = socket;
   pruneStaleHeadroomSockets(fs12, paths, ports.isRunning);
   pruneStaleAllowlistTemporaries(fs12, paths.headroomAllowlistFile, ports.isRunning);
-  if (!ensureInstalled()) {
-    return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+  const installFailure = ensureInstalled();
+  if (installFailure !== void 0) {
+    return fail(installFailure);
   }
   const version = ports.headroomVersion() ?? "unknown";
   writeOwnState({ supervisorPid: ports.ownPid, version, installedSource });
@@ -3755,8 +3762,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
           `headroom failed to become ready ${String(consecutiveFailures)} times in a row; giving up` + (lastExitOutput === void 0 ? "" : `; the last attempt exited before it was ready, and its log ends: ${lastExitOutput}`)
         );
       }
-      if (installedSource !== config.source && !ensureInstalled()) {
-        return fail(`could not install headroom from ${config.source}: install failed (is uv installed and on PATH?)`);
+      const restartInstallFailure = installedSource !== config.source ? ensureInstalled() : void 0;
+      if (restartInstallFailure !== void 0) {
+        return fail(restartInstallFailure);
       }
       const logOffset = ports.daemonLogSize();
       const pid = ports.spawnHeadroom(socketPath, paths.headroomAllowlistFile, config.settings);

package/dist/types/index.d.ts

@@ -366,8 +366,8 @@ declare const CredentialSchema: z.ZodObject<{
         literal: z.ZodString;
     }, z.core.$strict>]>>;
     target: z.ZodOptional<z.ZodEnum<{
-        apiKey: "apiKey";
         bearer: "bearer";
+        apiKey: "apiKey";
         oauthToken: "oauthToken";
     }>>;
     cache: z.ZodOptional<z.ZodObject<{
@@ -441,8 +441,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -557,8 +557,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -1629,8 +1629,8 @@ declare const IdentitySchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
             oauthToken: "oauthToken";
         }>>;
         cache: z.ZodOptional<z.ZodObject<{
@@ -4161,12 +4161,12 @@ declare const CheckReportJsonSchema: z.ZodObject<{
     identity: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
             env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
+            none: "none";
         }>;
     }, z.core.$strict>;
     pool: z.ZodOptional<z.ZodObject<{
@@ -4214,8 +4214,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
             "directory-rule": "directory-rule";
-            none: "none";
             env: "env";
+            none: "none";
             "cli-flag": "cli-flag";
             "identity-default": "identity-default";
             "global-default": "global-default";
@@ -4325,8 +4325,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
             name: z.ZodString;
             credential: z.ZodObject<{
                 target: z.ZodEnum<{
-                    apiKey: "apiKey";
                     bearer: "bearer";
+                    apiKey: "apiKey";
                     oauthToken: "oauthToken";
                 }>;
                 sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -4387,8 +4387,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
         }, z.core.$strict>]>>;
         identity: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -5476,8 +5476,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -5546,8 +5546,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
@@ -5581,8 +5581,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6120,8 +6120,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -6183,8 +6183,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6241,8 +6241,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -6304,8 +6304,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -7188,12 +7188,12 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
-                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
                     env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
+                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -7208,8 +7208,8 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
                 configProfile: zod.ZodOptional<zod.ZodString>;
                 configProfileSource: zod.ZodEnum<{
                     "directory-rule": "directory-rule";
-                    none: "none";
                     env: "env";
+                    none: "none";
                     "cli-flag": "cli-flag";
                     "identity-default": "identity-default";
                     "global-default": "global-default";
@@ -7240,8 +7240,8 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
                 name: zod.ZodString;
                 summary: zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -7788,12 +7788,12 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
-                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
                     env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
+                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -7841,8 +7841,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
                     "directory-rule": "directory-rule";
-                    none: "none";
                     env: "env";
+                    none: "none";
                     "cli-flag": "cli-flag";
                     "identity-default": "identity-default";
                     "global-default": "global-default";
@@ -7952,8 +7952,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     name: zod.ZodString;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8014,8 +8014,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                 }, zod_v4_core.$strict>]>>;
                 identity: zod.ZodOptional<zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8095,19 +8095,19 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "config-profile": "config-profile";
                     identity: "identity";
                     provider: "provider";
+                    frontdoor: "frontdoor";
                     pool: "pool";
+                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
                     "path-resolution": "path-resolution";
                     "legacy-name": "legacy-name";
                     "sign-in": "sign-in";
-                    keychain: "keychain";
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
                     headroom: "headroom";
-                    frontdoor: "frontdoor";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -8300,12 +8300,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
-                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
                     env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
+                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -8320,8 +8320,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 configProfile: zod.ZodOptional<zod.ZodString>;
                 configProfileSource: zod.ZodEnum<{
                     "directory-rule": "directory-rule";
-                    none: "none";
                     env: "env";
+                    none: "none";
                     "cli-flag": "cli-flag";
                     "identity-default": "identity-default";
                     "global-default": "global-default";
@@ -8352,8 +8352,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 name: zod.ZodString;
                 summary: zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8426,8 +8426,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -8496,8 +8496,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
@@ -8531,8 +8531,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -9070,8 +9070,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -9133,8 +9133,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -9191,8 +9191,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -9254,8 +9254,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -9882,12 +9882,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
-                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
                     env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
+                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -9935,8 +9935,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
                     "directory-rule": "directory-rule";
-                    none: "none";
                     env: "env";
+                    none: "none";
                     "cli-flag": "cli-flag";
                     "identity-default": "identity-default";
                     "global-default": "global-default";
@@ -10046,8 +10046,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     name: zod.ZodString;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -10108,8 +10108,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 }, zod_v4_core.$strict>]>>;
                 identity: zod.ZodOptional<zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -10189,19 +10189,19 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "config-profile": "config-profile";
                     identity: "identity";
                     provider: "provider";
+                    frontdoor: "frontdoor";
                     pool: "pool";
+                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
                     "path-resolution": "path-resolution";
                     "legacy-name": "legacy-name";
                     "sign-in": "sign-in";
-                    keychain: "keychain";
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
                     headroom: "headroom";
-                    frontdoor: "frontdoor";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -10489,8 +10489,8 @@ declare function frontDoorApiFromState(paths: LayoutPaths, fsPort?: HeadroomFs):
 /** A credential block as every response reports it: the effective target, each source's kind and its identifying detail, in order, and the cache setting. Never a value: a `literal` source reports only its kind. */
 declare const CredentialSummarySchema: z.ZodObject<{
     target: z.ZodEnum<{
-        apiKey: "apiKey";
         bearer: "bearer";
+        apiKey: "apiKey";
         oauthToken: "oauthToken";
     }>;
     sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -10534,8 +10534,8 @@ declare const ConfigIdentityAddOutputSchema: z.ZodObject<{
         allowAmbientCredential: z.ZodBoolean;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -10605,8 +10605,8 @@ declare const ConfigIdentitySetInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
             oauthToken: "oauthToken";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
@@ -10641,8 +10641,8 @@ declare const ConfigIdentitySetOutputSchema: z.ZodObject<{
         allowAmbientCredential: z.ZodBoolean;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -11178,8 +11178,8 @@ declare const ConfigProviderAddInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
             ttl: z.ZodOptional<z.ZodString>;
@@ -11242,8 +11242,8 @@ declare const ConfigProviderAddOutputSchema: z.ZodObject<{
         }, z.core.$strict>>;
         credential: z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -11301,8 +11301,8 @@ declare const ConfigProviderSetInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
             ttl: z.ZodOptional<z.ZodString>;
@@ -11365,8 +11365,8 @@ declare const ConfigProviderSetOutputSchema: z.ZodObject<{
         }, z.core.$strict>>;
         credential: z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -12035,19 +12035,19 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "config-profile": "config-profile";
         identity: "identity";
         provider: "provider";
+        frontdoor: "frontdoor";
         pool: "pool";
+        keychain: "keychain";
         "ambient-credential": "ambient-credential";
         "binary-discovery": "binary-discovery";
         "claude-shim": "claude-shim";
         "path-resolution": "path-resolution";
         "legacy-name": "legacy-name";
         "sign-in": "sign-in";
-        keychain: "keychain";
         "directory-rules": "directory-rules";
         "categories-local": "categories-local";
         "active-identity": "active-identity";
         headroom: "headroom";
-        frontdoor: "frontdoor";
     }>;
     subject: z.ZodOptional<z.ZodString>;
     severity: z.ZodEnum<{
@@ -12066,19 +12066,19 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "config-profile": "config-profile";
             identity: "identity";
             provider: "provider";
+            frontdoor: "frontdoor";
             pool: "pool";
+            keychain: "keychain";
             "ambient-credential": "ambient-credential";
             "binary-discovery": "binary-discovery";
             "claude-shim": "claude-shim";
             "path-resolution": "path-resolution";
             "legacy-name": "legacy-name";
             "sign-in": "sign-in";
-            keychain: "keychain";
             "directory-rules": "directory-rules";
             "categories-local": "categories-local";
             "active-identity": "active-identity";
             headroom: "headroom";
-            frontdoor: "frontdoor";
         }>;
         subject: z.ZodOptional<z.ZodString>;
         severity: z.ZodEnum<{
@@ -12151,12 +12151,12 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
     decision: z.ZodObject<{
         identity: z.ZodOptional<z.ZodString>;
         identitySource: z.ZodEnum<{
-            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
             env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
+            none: "none";
         }>;
         pool: z.ZodOptional<z.ZodObject<{
             name: z.ZodString;
@@ -12171,8 +12171,8 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
         configProfile: z.ZodOptional<z.ZodString>;
         configProfileSource: z.ZodEnum<{
             "directory-rule": "directory-rule";
-            none: "none";
             env: "env";
+            none: "none";
             "cli-flag": "cli-flag";
             "identity-default": "identity-default";
             "global-default": "global-default";
@@ -12203,8 +12203,8 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
         name: z.ZodString;
         summary: z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "10.0.0",
+  "version": "10.0.2",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",