claude-use 10.0.2 → 11.0.0

package/dist/cli.cjs

@@ -33363,6 +33363,8 @@ var init_schema2 = __esm({
       sessionId: external_exports.string().optional(),
       /** The project the launch ran in (its git repository root), when the launch sent one: headroom launches do. */
       project: external_exports.string().optional(),
+      /** Whether the request crossed headroom on its way upstream. Absent on a record written before the door recorded it, and false when the request went direct. */
+      viaHeadroom: external_exports.boolean().optional(),
       /** The front-door route that served the request. */
       route: external_exports.string(),
       method: external_exports.string(),
@@ -33967,7 +33969,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "10.0.2",
+      version: "11.0.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -34586,6 +34588,7 @@ function buildRecord(event, context) {
     provider,
     ...sessionId === void 0 ? {} : { sessionId },
     ...projectId === void 0 ? {} : { project: projectId },
+    viaHeadroom: event.viaHeadroom,
     route: event.route,
     method: event.method,
     endpoint,
@@ -62731,7 +62734,7 @@ function resolveLaunchFlags(params) {
     skipPermissions: params.flags?.skipPermissions ?? parseEnvBool("AGENT_SHIM_SKIP_PERMISSIONS", params.env.AGENT_SHIM_SKIP_PERMISSIONS) ?? params.cascade?.skipPermissions ?? false,
     remoteControl: params.flags?.remoteControl ?? parseEnvBool("AGENT_SHIM_REMOTE_CONTROL", params.env.AGENT_SHIM_REMOTE_CONTROL) ?? params.cascade?.remoteControl ?? false,
     headroom: params.flags?.headroom ?? parseEnvBool("AGENT_SHIM_HEADROOM", params.env.AGENT_SHIM_HEADROOM) ?? params.cascade?.headroom ?? false,
-    trackUsage: params.flags?.trackUsage ?? parseEnvBool("AGENT_SHIM_TRACK_USAGE", params.env.AGENT_SHIM_TRACK_USAGE) ?? params.cascade?.trackUsage ?? params.trackUsageDefault ?? false
+    trackUsage: params.flags?.trackUsage ?? parseEnvBool("AGENT_SHIM_TRACK_USAGE", params.env.AGENT_SHIM_TRACK_USAGE) ?? params.cascade?.trackUsage ?? true
   };
 }
 function buildFlagArgs(flags) {
@@ -63234,8 +63237,6 @@ function decideLaunch(params, readOnly) {
   const discovered = params.resolveClaudeBinary(pinnedVersion === void 0 ? void 0 : { version: pinnedVersion.version });
   const flags = resolveLaunchFlags({
     env,
-    // A pool pick reads the usage the front door records, so a pool launch records its own unless something says otherwise.
-    ...poolExplanation === void 0 ? {} : { trackUsageDefault: true },
     ...cascadeLaunch === void 0 ? {} : { cascade: cascadeLaunch },
     flags: {
       ...parsedArgv.skipPermissions === void 0 ? {} : { skipPermissions: parsedArgv.skipPermissions },
@@ -126383,7 +126384,7 @@ function createRoutedResponse(response, context) {
     start: (status, headers) => {
       for (const observe of deps.responseObservers) {
         try {
-          const body = observe({ session, route, method: request7.method, path: request7.path, receivedAt: request7.receivedAt, status, headers });
+          const body = observe({ session, route, method: request7.method, path: request7.path, receivedAt: request7.receivedAt, viaHeadroom: request7.viaHeadroom, status, headers });
           if (body !== void 0) {
             bodyObservers.push(body);
           }
@@ -126424,7 +126425,7 @@ function createRoutedResponse(response, context) {
   };
 }
 async function serveRouted(request7, deps) {
-  const observed = { method: request7.method, path: pathOf(request7.url), receivedAt: deps.now() };
+  const observed = { method: request7.method, path: pathOf(request7.url), receivedAt: deps.now(), viaHeadroom: false };
   const identified = identifyRequest(request7.headers);
   const admission = deps.admit({ url: request7.url, headers: request7.headers, forwardable: identified.forwardableHeaders });
   if (!admission.ok) {
@@ -126450,9 +126451,10 @@ async function serveRouted(request7, deps) {
     response2.end();
     return;
   }
-  const response = createRoutedResponse(request7.response, { deps, session: identified.session, route: resolution.route.name, request: observed });
+  const viaHeadroom = identified.session.headroom && resolution.route.headroomEligible && deps.headroom !== void 0;
+  const response = createRoutedResponse(request7.response, { deps, session: identified.session, route: resolution.route.name, request: { ...observed, viaHeadroom } });
   try {
-    if (identified.session.headroom && resolution.route.headroomEligible && deps.headroom !== void 0) {
+    if (viaHeadroom) {
       await applyHeadroomHop(routed, response, resolution.route.headroomUpstream, deps.headroom);
     } else {
       await resolution.route.serve(routed, response);

package/dist/index.cjs

@@ -2758,7 +2758,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "10.0.2",
+      version: "11.0.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -4624,6 +4624,8 @@ var init_schema2 = __esm({
       sessionId: import_zod10.z.string().optional(),
       /** The project the launch ran in (its git repository root), when the launch sent one: headroom launches do. */
       project: import_zod10.z.string().optional(),
+      /** Whether the request crossed headroom on its way upstream. Absent on a record written before the door recorded it, and false when the request went direct. */
+      viaHeadroom: import_zod10.z.boolean().optional(),
       /** The front-door route that served the request. */
       route: import_zod10.z.string(),
       method: import_zod10.z.string(),
@@ -7143,7 +7145,7 @@ function resolveLaunchFlags(params) {
     skipPermissions: params.flags?.skipPermissions ?? parseEnvBool("AGENT_SHIM_SKIP_PERMISSIONS", params.env.AGENT_SHIM_SKIP_PERMISSIONS) ?? params.cascade?.skipPermissions ?? false,
     remoteControl: params.flags?.remoteControl ?? parseEnvBool("AGENT_SHIM_REMOTE_CONTROL", params.env.AGENT_SHIM_REMOTE_CONTROL) ?? params.cascade?.remoteControl ?? false,
     headroom: params.flags?.headroom ?? parseEnvBool("AGENT_SHIM_HEADROOM", params.env.AGENT_SHIM_HEADROOM) ?? params.cascade?.headroom ?? false,
-    trackUsage: params.flags?.trackUsage ?? parseEnvBool("AGENT_SHIM_TRACK_USAGE", params.env.AGENT_SHIM_TRACK_USAGE) ?? params.cascade?.trackUsage ?? params.trackUsageDefault ?? false
+    trackUsage: params.flags?.trackUsage ?? parseEnvBool("AGENT_SHIM_TRACK_USAGE", params.env.AGENT_SHIM_TRACK_USAGE) ?? params.cascade?.trackUsage ?? true
   };
 }
 function buildFlagArgs(flags) {
@@ -7646,8 +7648,6 @@ function decideLaunch(params, readOnly) {
   const discovered = params.resolveClaudeBinary(pinnedVersion === void 0 ? void 0 : { version: pinnedVersion.version });
   const flags = resolveLaunchFlags({
     env,
-    // A pool pick reads the usage the front door records, so a pool launch records its own unless something says otherwise.
-    ...poolExplanation === void 0 ? {} : { trackUsageDefault: true },
     ...cascadeLaunch === void 0 ? {} : { cascade: cascadeLaunch },
     flags: {
       ...parsedArgv.skipPermissions === void 0 ? {} : { skipPermissions: parsedArgv.skipPermissions },

package/dist/index.mjs

@@ -2734,7 +2734,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "10.0.2",
+      version: "11.0.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -4598,6 +4598,8 @@ var init_schema2 = __esm({
       sessionId: z10.string().optional(),
       /** The project the launch ran in (its git repository root), when the launch sent one: headroom launches do. */
       project: z10.string().optional(),
+      /** Whether the request crossed headroom on its way upstream. Absent on a record written before the door recorded it, and false when the request went direct. */
+      viaHeadroom: z10.boolean().optional(),
       /** The front-door route that served the request. */
       route: z10.string(),
       method: z10.string(),
@@ -7117,7 +7119,7 @@ function resolveLaunchFlags(params) {
     skipPermissions: params.flags?.skipPermissions ?? parseEnvBool("AGENT_SHIM_SKIP_PERMISSIONS", params.env.AGENT_SHIM_SKIP_PERMISSIONS) ?? params.cascade?.skipPermissions ?? false,
     remoteControl: params.flags?.remoteControl ?? parseEnvBool("AGENT_SHIM_REMOTE_CONTROL", params.env.AGENT_SHIM_REMOTE_CONTROL) ?? params.cascade?.remoteControl ?? false,
     headroom: params.flags?.headroom ?? parseEnvBool("AGENT_SHIM_HEADROOM", params.env.AGENT_SHIM_HEADROOM) ?? params.cascade?.headroom ?? false,
-    trackUsage: params.flags?.trackUsage ?? parseEnvBool("AGENT_SHIM_TRACK_USAGE", params.env.AGENT_SHIM_TRACK_USAGE) ?? params.cascade?.trackUsage ?? params.trackUsageDefault ?? false
+    trackUsage: params.flags?.trackUsage ?? parseEnvBool("AGENT_SHIM_TRACK_USAGE", params.env.AGENT_SHIM_TRACK_USAGE) ?? params.cascade?.trackUsage ?? true
   };
 }
 function buildFlagArgs(flags) {
@@ -7621,8 +7623,6 @@ function decideLaunch(params, readOnly) {
   const discovered = params.resolveClaudeBinary(pinnedVersion === void 0 ? void 0 : { version: pinnedVersion.version });
   const flags = resolveLaunchFlags({
     env,
-    // A pool pick reads the usage the front door records, so a pool launch records its own unless something says otherwise.
-    ...poolExplanation === void 0 ? {} : { trackUsageDefault: true },
     ...cascadeLaunch === void 0 ? {} : { cascade: cascadeLaunch },
     flags: {
       ...parsedArgv.skipPermissions === void 0 ? {} : { skipPermissions: parsedArgv.skipPermissions },

package/dist/types/index.d.ts

@@ -366,8 +366,8 @@ declare const CredentialSchema: z.ZodObject<{
         literal: z.ZodString;
     }, z.core.$strict>]>>;
     target: z.ZodOptional<z.ZodEnum<{
-        bearer: "bearer";
         apiKey: "apiKey";
+        bearer: "bearer";
         oauthToken: "oauthToken";
     }>>;
     cache: z.ZodOptional<z.ZodObject<{
@@ -441,8 +441,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -557,8 +557,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -1332,8 +1332,8 @@ declare const HeadroomGlobalConfigSchema: z.ZodObject<{
     targetRatio: z.ZodOptional<z.ZodNumber>;
     ccr: z.ZodOptional<z.ZodEnum<{
         default: "default";
-        none: "none";
         lossless: "lossless";
+        none: "none";
     }>>;
     rolloutChannel: z.ZodOptional<z.ZodEnum<{
         beta: "beta";
@@ -1460,8 +1460,8 @@ declare const GlobalConfigSchema: z.ZodObject<{
         targetRatio: z.ZodOptional<z.ZodNumber>;
         ccr: z.ZodOptional<z.ZodEnum<{
             default: "default";
-            none: "none";
             lossless: "lossless";
+            none: "none";
         }>>;
         rolloutChannel: z.ZodOptional<z.ZodEnum<{
             beta: "beta";
@@ -1629,8 +1629,8 @@ declare const IdentitySchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
             oauthToken: "oauthToken";
         }>>;
         cache: z.ZodOptional<z.ZodObject<{
@@ -4161,12 +4161,12 @@ declare const CheckReportJsonSchema: z.ZodObject<{
     identity: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            env: "env";
+            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
-            env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
-            none: "none";
         }>;
     }, z.core.$strict>;
     pool: z.ZodOptional<z.ZodObject<{
@@ -4244,11 +4244,11 @@ declare const CheckReportJsonSchema: z.ZodObject<{
             "category-default": "category-default";
         }>;
         category: z.ZodNullable<z.ZodEnum<{
-            secret: "secret";
             runtime: "runtime";
             history: "history";
             knowledge: "knowledge";
             settings: "settings";
+            secret: "secret";
         }>>;
         rule: z.ZodOptional<z.ZodObject<{
             key: z.ZodString;
@@ -4325,8 +4325,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
             name: z.ZodString;
             credential: z.ZodObject<{
                 target: z.ZodEnum<{
-                    bearer: "bearer";
                     apiKey: "apiKey";
+                    bearer: "bearer";
                     oauthToken: "oauthToken";
                 }>;
                 sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -4387,8 +4387,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
         }, z.core.$strict>]>>;
         identity: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -5206,6 +5206,7 @@ declare const UsageRecordSchema: z.ZodObject<{
     provider: z.ZodString;
     sessionId: z.ZodOptional<z.ZodString>;
     project: z.ZodOptional<z.ZodString>;
+    viaHeadroom: z.ZodOptional<z.ZodBoolean>;
     route: z.ZodString;
     method: z.ZodString;
     endpoint: z.ZodString;
@@ -5476,8 +5477,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -5546,8 +5547,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
@@ -5581,8 +5582,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6120,8 +6121,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -6183,8 +6184,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6241,8 +6242,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -6304,8 +6305,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6939,9 +6940,9 @@ declare function createLifecycleApiRouter(deps: LifecycleApiDeps): {
             current: zod.ZodString;
             latest: zod.ZodString;
             action: zod.ZodEnum<{
+                updated: "updated";
                 current: "current";
                 available: "available";
-                updated: "updated";
             }>;
         }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
@@ -7188,12 +7189,12 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -7240,8 +7241,8 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
                 name: zod.ZodString;
                 summary: zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -7788,12 +7789,12 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -7871,11 +7872,11 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "category-default": "category-default";
                 }>;
                 category: zod.ZodNullable<zod.ZodEnum<{
-                    secret: "secret";
                     runtime: "runtime";
                     history: "history";
                     knowledge: "knowledge";
                     settings: "settings";
+                    secret: "secret";
                 }>>;
                 rule: zod.ZodOptional<zod.ZodObject<{
                     key: zod.ZodString;
@@ -7952,8 +7953,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     name: zod.ZodString;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8014,8 +8015,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                 }, zod_v4_core.$strict>]>>;
                 identity: zod.ZodOptional<zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8094,10 +8095,11 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "global-config": "global-config";
                     "config-profile": "config-profile";
                     identity: "identity";
+                    keychain: "keychain";
                     provider: "provider";
+                    headroom: "headroom";
                     frontdoor: "frontdoor";
                     pool: "pool";
-                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
@@ -8107,7 +8109,6 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
-                    headroom: "headroom";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -8300,12 +8301,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             decision: zod.ZodObject<{
                 identity: zod.ZodOptional<zod.ZodString>;
                 identitySource: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
                 pool: zod.ZodOptional<zod.ZodObject<{
                     name: zod.ZodString;
@@ -8352,8 +8353,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 name: zod.ZodString;
                 summary: zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8426,8 +8427,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -8496,8 +8497,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
@@ -8531,8 +8532,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -9070,8 +9071,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -9133,8 +9134,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -9191,8 +9192,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -9254,8 +9255,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -9681,9 +9682,9 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             current: zod.ZodString;
             latest: zod.ZodString;
             action: zod.ZodEnum<{
+                updated: "updated";
                 current: "current";
                 available: "available";
-                updated: "updated";
             }>;
         }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
@@ -9882,12 +9883,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             identity: zod.ZodObject<{
                 name: zod.ZodNullable<zod.ZodString>;
                 source: zod.ZodEnum<{
+                    env: "env";
+                    none: "none";
                     "config-dir-escape-hatch": "config-dir-escape-hatch";
                     argv: "argv";
-                    env: "env";
                     "directory-pin": "directory-pin";
                     "active-identity-file": "active-identity-file";
-                    none: "none";
                 }>;
             }, zod_v4_core.$strict>;
             pool: zod.ZodOptional<zod.ZodObject<{
@@ -9965,11 +9966,11 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "category-default": "category-default";
                 }>;
                 category: zod.ZodNullable<zod.ZodEnum<{
-                    secret: "secret";
                     runtime: "runtime";
                     history: "history";
                     knowledge: "knowledge";
                     settings: "settings";
+                    secret: "secret";
                 }>>;
                 rule: zod.ZodOptional<zod.ZodObject<{
                     key: zod.ZodString;
@@ -10046,8 +10047,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     name: zod.ZodString;
                     credential: zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            bearer: "bearer";
                             apiKey: "apiKey";
+                            bearer: "bearer";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -10108,8 +10109,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 }, zod_v4_core.$strict>]>>;
                 identity: zod.ZodOptional<zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        bearer: "bearer";
                         apiKey: "apiKey";
+                        bearer: "bearer";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -10188,10 +10189,11 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "global-config": "global-config";
                     "config-profile": "config-profile";
                     identity: "identity";
+                    keychain: "keychain";
                     provider: "provider";
+                    headroom: "headroom";
                     frontdoor: "frontdoor";
                     pool: "pool";
-                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
@@ -10201,7 +10203,6 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
-                    headroom: "headroom";
                 }>;
                 subject: zod.ZodOptional<zod.ZodString>;
                 severity: zod.ZodEnum<{
@@ -10489,8 +10490,8 @@ declare function frontDoorApiFromState(paths: LayoutPaths, fsPort?: HeadroomFs):
 /** A credential block as every response reports it: the effective target, each source's kind and its identifying detail, in order, and the cache setting. Never a value: a `literal` source reports only its kind. */
 declare const CredentialSummarySchema: z.ZodObject<{
     target: z.ZodEnum<{
-        bearer: "bearer";
         apiKey: "apiKey";
+        bearer: "bearer";
         oauthToken: "oauthToken";
     }>;
     sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -10534,8 +10535,8 @@ declare const ConfigIdentityAddOutputSchema: z.ZodObject<{
         allowAmbientCredential: z.ZodBoolean;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -10605,8 +10606,8 @@ declare const ConfigIdentitySetInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
             oauthToken: "oauthToken";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
@@ -10641,8 +10642,8 @@ declare const ConfigIdentitySetOutputSchema: z.ZodObject<{
         allowAmbientCredential: z.ZodBoolean;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -11178,8 +11179,8 @@ declare const ConfigProviderAddInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
             ttl: z.ZodOptional<z.ZodString>;
@@ -11242,8 +11243,8 @@ declare const ConfigProviderAddOutputSchema: z.ZodObject<{
         }, z.core.$strict>>;
         credential: z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -11301,8 +11302,8 @@ declare const ConfigProviderSetInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            bearer: "bearer";
             apiKey: "apiKey";
+            bearer: "bearer";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
             ttl: z.ZodOptional<z.ZodString>;
@@ -11365,8 +11366,8 @@ declare const ConfigProviderSetOutputSchema: z.ZodObject<{
         }, z.core.$strict>>;
         credential: z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -12034,10 +12035,11 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "global-config": "global-config";
         "config-profile": "config-profile";
         identity: "identity";
+        keychain: "keychain";
         provider: "provider";
+        headroom: "headroom";
         frontdoor: "frontdoor";
         pool: "pool";
-        keychain: "keychain";
         "ambient-credential": "ambient-credential";
         "binary-discovery": "binary-discovery";
         "claude-shim": "claude-shim";
@@ -12047,7 +12049,6 @@ declare const DoctorFindingSchema: z.ZodObject<{
         "directory-rules": "directory-rules";
         "categories-local": "categories-local";
         "active-identity": "active-identity";
-        headroom: "headroom";
     }>;
     subject: z.ZodOptional<z.ZodString>;
     severity: z.ZodEnum<{
@@ -12065,10 +12066,11 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "global-config": "global-config";
             "config-profile": "config-profile";
             identity: "identity";
+            keychain: "keychain";
             provider: "provider";
+            headroom: "headroom";
             frontdoor: "frontdoor";
             pool: "pool";
-            keychain: "keychain";
             "ambient-credential": "ambient-credential";
             "binary-discovery": "binary-discovery";
             "claude-shim": "claude-shim";
@@ -12078,7 +12080,6 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             "directory-rules": "directory-rules";
             "categories-local": "categories-local";
             "active-identity": "active-identity";
-            headroom: "headroom";
         }>;
         subject: z.ZodOptional<z.ZodString>;
         severity: z.ZodEnum<{
@@ -12099,9 +12100,9 @@ declare const UpdateCheckOutputSchema: z.ZodObject<{
     current: z.ZodString;
     latest: z.ZodString;
     action: z.ZodEnum<{
+        updated: "updated";
         current: "current";
         available: "available";
-        updated: "updated";
     }>;
 }, z.core.$strict>;
 /** The Sign in with ChatGPT login's state as `codex status` reports it: no sign-in yet, signed in (with who, whether the plan scope was granted, and when the access token lapses), or a file that cannot be read. */
@@ -12151,12 +12152,12 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
     decision: z.ZodObject<{
         identity: z.ZodOptional<z.ZodString>;
         identitySource: z.ZodEnum<{
+            env: "env";
+            none: "none";
             "config-dir-escape-hatch": "config-dir-escape-hatch";
             argv: "argv";
-            env: "env";
             "directory-pin": "directory-pin";
             "active-identity-file": "active-identity-file";
-            none: "none";
         }>;
         pool: z.ZodOptional<z.ZodObject<{
             name: z.ZodString;
@@ -12203,8 +12204,8 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
         name: z.ZodString;
         summary: z.ZodObject<{
             target: z.ZodEnum<{
-                bearer: "bearer";
                 apiKey: "apiKey";
+                bearer: "bearer";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "10.0.2",
+  "version": "11.0.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",