claude-use 11.17.1 → 11.19.0

package/dist/index.cjs

@@ -346,10 +346,10 @@ var init_schema = __esm({
     ANTIGRAVITY_EFFORTS = ["none", "low", "medium", "high", "xhigh", "max"];
     ANTIGRAVITY_DEFAULT_MODE = "cloud";
     ANTIGRAVITY_DEFAULT_TIER_MODELS = Object.freeze({
-      fable: ["claude-opus-5-5-high", "gemini-4-argon-high", "gemini-3.8-flash-high"],
+      fable: ["gemini-4-argon-high", "claude-opus-5-5-high", "gemini-3.8-flash-high"],
       opus: ["claude-opus-5-5-high", "gemini-4-argon-high", "gemini-3.8-flash-high"],
       sonnet: ["claude-sonnet-5-5-medium", "gemini-4-argon-medium", "gemini-3.8-flash-medium"],
-      haiku: ["gemini-3.8-flash-low", "gemini-4-argon-low", "gpt-oss-120b-medium"]
+      haiku: ["gemini-3.8-flash-low", "gemini-4-argon-low", "claude-sonnet-5-5-low"]
     });
     AntigravityModelTargetSchema = import_zod.z.union([import_zod.z.string().min(1), import_zod.z.array(import_zod.z.string().min(1)).min(1)]);
     AntigravityProviderConfigSchema = import_zod.z.strictObject({
@@ -359,6 +359,8 @@ var init_schema = __esm({
       defaultModel: import_zod.z.string().min(1).optional(),
       /** Model name mapping. A key naming a tier (`fable`, `opus`, `sonnet`, `haiku`) overrides that tier's shipped model and is matched by substring of the requested name in `ANTIGRAVITY_TIERS` order; any other key is an alias, matched against the whole requested name case-insensitively, so `/model <alias>` selects its backend model. An alias outranks every other rule, including the pass-through of backend names. A value is one model or an ordered list of candidates: the request goes to the first whose quota windows are not spent, and when every candidate is spent, to the one whose binding window lifts soonest. */
       models: import_zod.z.record(import_zod.z.string().min(1), AntigravityModelTargetSchema).optional(),
+      /** When every candidate of the tier a request names has no quota left, serve it from the next tier down, and onward through the lower tiers, instead of failing with the quota limit. Applies to a name that selects a tier (`/model fable`), not to an alias or a backend model name. Defaults to false. */
+      degradeDownTiers: import_zod.z.boolean().optional(),
       /** The reasoning effort used when the request's own effort is not one the backend accepts. */
       effort: import_zod.z.enum(ANTIGRAVITY_EFFORTS).optional(),
       /** Cloud-specific settings (for `mode: "cloud"`). */
@@ -581,25 +583,102 @@ var init_schema = __esm({
   }
 });
 
+// src/config/unrecognisedKeys.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function parseIgnoringUnrecognisedKeys(schema, raw) {
+  const first = schema.safeParse(raw);
+  if (first.success) {
+    return { success: true, data: first.data, ignored: [] };
+  }
+  const unrecognised = first.error.issues.filter((issue) => issue.code === "unrecognized_keys");
+  const others = first.error.issues.filter((issue) => issue.code !== "unrecognized_keys");
+  if (others.length > 0) {
+    return { success: false, issues: others };
+  }
+  const stripped = structuredClone(raw);
+  const ignored = [];
+  for (const issue of unrecognised) {
+    let holder = stripped;
+    for (const step of issue.path) {
+      holder = isRecord(holder) ? holder[step] : void 0;
+    }
+    if (isRecord(holder)) {
+      const values = Object.fromEntries(issue.keys.map((key) => [key, holder[key]]));
+      for (const key of issue.keys) {
+        Reflect.deleteProperty(holder, key);
+      }
+      ignored.push({ path: issue.path, keys: issue.keys, values });
+    }
+  }
+  const second = schema.safeParse(stripped);
+  return second.success ? { success: true, data: second.data, ignored } : { success: false, issues: second.error.issues };
+}
+function describeIgnoredKeys(filePath, ignored) {
+  const places = ignored.map(({ path: path41, keys }) => `${path41.length === 0 ? "" : `${path41.map(String).join(".")}.`}${keys.join(", ")}`);
+  return `${filePath} has settings this version of agent-shim does not know and ignores: ${places.join("; ")}. A newer release may read them.`;
+}
+function noteIgnoredKeys(filePath, ignored) {
+  if (ignored.length === 0) {
+    ignoredByFile.delete(filePath);
+    return;
+  }
+  ignoredByFile.set(filePath, ignored);
+  const message = `agent-shim: warning: ${describeIgnoredKeys(filePath, ignored)}
+`;
+  if (!warned.has(message)) {
+    warned.add(message);
+    process.stderr.write(message);
+  }
+}
+function restoreIgnoredKeys(filePath, value) {
+  const ignored = ignoredByFile.get(filePath);
+  if (ignored === void 0) {
+    return value;
+  }
+  const restored = structuredClone(value);
+  for (const { path: path41, values } of ignored) {
+    let holder = restored;
+    for (const step of path41) {
+      holder = isRecord(holder) ? holder[step] : void 0;
+    }
+    if (isRecord(holder)) {
+      for (const [key, held] of Object.entries(values)) {
+        holder[key] = held;
+      }
+    }
+  }
+  return restored;
+}
+var warned, ignoredByFile;
+var init_unrecognisedKeys = __esm({
+  "src/config/unrecognisedKeys.ts"() {
+    "use strict";
+    warned = /* @__PURE__ */ new Set();
+    ignoredByFile = /* @__PURE__ */ new Map();
+  }
+});
+
 // src/config/load.ts
 function createExplorer(moduleName = "agent-shim") {
   return (0, import_cosmiconfig.cosmiconfigSync)(moduleName, { searchPlaces: [] });
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function captureEntryOrder(value) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     return [];
   }
   const entries = value.entries;
-  if (!isRecord(entries)) {
+  if (!isRecord2(entries)) {
     return [];
   }
   return Object.keys(entries);
 }
 function captureRuleEntryOrders(value) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     return [];
   }
   const rules = value.rules;
@@ -614,7 +693,7 @@ function cosmiconfigReader(explorer = createExplorer()) {
     try {
       result = explorer.load(filepath);
     } catch (error) {
-      const code = isRecord(error) ? error.code : void 0;
+      const code = isRecord2(error) ? error.code : void 0;
       if (code === "ENOENT") {
         return void 0;
       }
@@ -631,10 +710,11 @@ function loadConfigFile(filepath, schema, read = cosmiconfigReader()) {
   if (raw === void 0) {
     return void 0;
   }
-  const parsed = schema.safeParse(raw);
+  const parsed = parseIgnoringUnrecognisedKeys(schema, raw);
   if (!parsed.success) {
-    throw new ConfigValidationError(filepath, parsed.error.issues);
+    throw new ConfigValidationError(filepath, parsed.issues);
   }
+  noteIgnoredKeys(filepath, parsed.ignored);
   return {
     filepath,
     config: parsed.data,
@@ -648,6 +728,7 @@ var init_load = __esm({
     "use strict";
     import_cosmiconfig = require("cosmiconfig");
     init_cliError();
+    init_unrecognisedKeys();
     ConfigValidationError = class extends CliError {
       constructor(filepath, issues) {
         const detail = issues.map((issue) => `  ${issue.path.join(".") || "(root)"}: ${issue.message}`).join("\n");
@@ -673,10 +754,11 @@ function readJson(filePath, schema, storeFs = nodeStoreFs) {
     return void 0;
   }
   const parsed = JSON.parse(raw);
-  const result = schema.safeParse(parsed);
+  const result = parseIgnoringUnrecognisedKeys(schema, parsed);
   if (!result.success) {
-    throw new ConfigValidationError(filePath, result.error.issues);
+    throw new ConfigValidationError(filePath, result.issues);
   }
+  noteIgnoredKeys(filePath, result.ignored);
   return result.data;
 }
 function writeTextAtomic(filePath, contents, storeFs = nodeStoreFs) {
@@ -692,7 +774,7 @@ function writeTextAtomic(filePath, contents, storeFs = nodeStoreFs) {
   }
 }
 function writeJsonAtomic(filePath, data, storeFs = nodeStoreFs) {
-  writeTextAtomic(filePath, `${JSON.stringify(data, null, 2)}
+  writeTextAtomic(filePath, `${JSON.stringify(restoreIgnoredKeys(filePath, data), null, 2)}
 `, storeFs);
 }
 function applyPatch(filePath, schema, patch, options = {}) {
@@ -718,6 +800,7 @@ var init_store = __esm({
     import_node_path3 = __toESM(require("node:path"), 1);
     import_node_crypto = require("node:crypto");
     init_load();
+    init_unrecognisedKeys();
     nodeStoreFs = {
       readFileUtf8(filePath) {
         try {
@@ -2837,7 +2920,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.17.1",
+      version: "11.19.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -6201,7 +6284,7 @@ function formatCredentialSummary(summary) {
 function describeCredential(credential) {
   return formatCredentialSummary(summariseCredential(credential));
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function unpackKeyringToken(raw) {
@@ -6213,7 +6296,7 @@ function unpackKeyringToken(raw) {
     const base64Str = trimmed.slice(GO_KEYRING_BASE64_PREFIX.length);
     const decoded = Buffer.from(base64Str, "base64").toString("utf8");
     const parsed = JSON.parse(decoded);
-    if (isRecord5(parsed) && isRecord5(parsed.token)) {
+    if (isRecord6(parsed) && isRecord6(parsed.token)) {
       const accessToken = parsed.token.access_token;
       if (typeof accessToken === "string" && accessToken.trim() !== "") {
         return accessToken.trim();
@@ -6327,14 +6410,14 @@ function providerJsonPath(paths, name) {
 function providerExists(paths, name) {
   return import_node_fs6.default.existsSync(providerJsonPath(paths, name));
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function legacyProviderConversion(raw) {
-  if (!isRecord6(raw) || "credential" in raw) {
+  if (!isRecord7(raw) || "credential" in raw) {
     return void 0;
   }
-  const env = isRecord6(raw.env) ? raw.env : void 0;
+  const env = isRecord7(raw.env) ? raw.env : void 0;
   const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
   const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
   if (fields.length === 0) {
@@ -6367,10 +6450,11 @@ function parseProviderFile(filePath, raw) {
   if (conversion !== void 0) {
     throw new LegacyProviderFileError(filePath, conversion);
   }
-  const parsed = ProviderSchema.safeParse(raw);
+  const parsed = parseIgnoringUnrecognisedKeys(ProviderSchema, raw);
   if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+    throw new ConfigValidationError(filePath, parsed.issues);
   }
+  noteIgnoredKeys(filePath, parsed.ignored);
   return parsed.data;
 }
 function readProvider(paths, name) {
@@ -6431,7 +6515,7 @@ function isEmptyCodexConfig(config) {
   return config === void 0 || config.defaultModel === void 0 && config.effort === void 0 && config.login === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
 }
 function isEmptyAntigravityConfig(config) {
-  return config === void 0 || config.mode === void 0 && config.defaultModel === void 0 && config.effort === void 0 && config.cloud === void 0 && config.local === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
+  return config === void 0 || config.mode === void 0 && config.defaultModel === void 0 && config.effort === void 0 && config.degradeDownTiers === void 0 && config.cloud === void 0 && config.local === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
 }
 function addProvider(paths, name, input) {
   if (providerExists(paths, name)) {
@@ -6580,6 +6664,7 @@ var init_providersStore = __esm({
     import_node_path25 = __toESM(require("node:path"), 1);
     init_load();
     init_store();
+    init_unrecognisedKeys();
     init_schema();
     init_cliError();
     init_credential();
@@ -7562,7 +7647,7 @@ function resolvePoolLaunch(params) {
   if (stickyRead.problem !== void 0) {
     log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
   }
-  const warned = /* @__PURE__ */ new Set();
+  const warned2 = /* @__PURE__ */ new Set();
   for (; ; ) {
     const nowMs = params.now();
     let graph;
@@ -7586,8 +7671,8 @@ function resolvePoolLaunch(params) {
     }
     for (const gone of graph.missing) {
       const key = `${gone.pool}:${gone.identity}`;
-      if (!warned.has(key)) {
-        warned.add(key);
+      if (!warned2.has(key)) {
+        warned2.add(key);
         log.warn(`agent-shim: pool "${gone.pool}" names identity "${gone.identity}", which does not exist; skipping it`);
       }
     }
@@ -10302,7 +10387,7 @@ var LiveTaskSchema = import_zod5.z.strictObject({
   observedAt: import_zod5.z.number()
 });
 var SYSTEM_SUBTYPES = ["task_started", "task_progress", "task_updated", "task_notification", "background_tasks_changed"];
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringField(record, field) {
@@ -10319,7 +10404,7 @@ function booleanField(record, field) {
 }
 function usageOf(record) {
   const raw = record.usage;
-  if (!isRecord2(raw)) {
+  if (!isRecord3(raw)) {
     return void 0;
   }
   const totalTokens = numberField(raw, "total_tokens");
@@ -10351,7 +10436,7 @@ function bounded(book) {
   return book;
 }
 function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
-  if (!isRecord2(payload) || payload.type !== "system") {
+  if (!isRecord3(payload) || payload.type !== "system") {
     return book;
   }
   const subtype = payload.subtype;
@@ -10367,8 +10452,8 @@ function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
   if (subtype === "background_tasks_changed") {
     const tasks = Array.isArray(payload.tasks) ? payload.tasks : [];
     for (const raw of tasks) {
-      const taskId2 = isRecord2(raw) ? stringField(raw, "task_id") : void 0;
-      if (isRecord2(raw) && taskId2 !== void 0) {
+      const taskId2 = isRecord3(raw) ? stringField(raw, "task_id") : void 0;
+      if (isRecord3(raw) && taskId2 !== void 0) {
         upsert(taskId2, { runId: stringField(raw, "run_id"), taskType: stringField(raw, "task_type"), description: stringField(raw, "description") });
       }
     }
@@ -10391,7 +10476,7 @@ function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
   } else if (subtype === "task_progress") {
     upsert(taskId, { ...common, subagentType: stringField(payload, "subagent_type"), lastToolName: stringField(payload, "last_tool_name"), usage: usageOf(payload) });
   } else if (subtype === "task_updated") {
-    const patch = isRecord2(payload.patch) ? payload.patch : {};
+    const patch = isRecord3(payload.patch) ? payload.patch : {};
     upsert(taskId, { runId: stringField(payload, "run_id"), status: stringField(patch, "status") });
   } else {
     upsert(taskId, { ...common, status: stringField(payload, "status"), outputFile: stringField(payload, "output_file"), summary: stringField(payload, "summary"), usage: usageOf(payload) });
@@ -10473,7 +10558,7 @@ function sessionCreateId(body) {
   const id = session.id;
   return typeof id === "string" && id.startsWith(RC_SESSION_ID_PREFIX) ? id : void 0;
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonObject(body) {
@@ -10483,7 +10568,7 @@ function parseJsonObject(body) {
   } catch {
     return void 0;
   }
-  return isRecord3(parsed) ? parsed : void 0;
+  return isRecord4(parsed) ? parsed : void 0;
 }
 function nonEmptyString(record, field) {
   const value = record === void 0 ? void 0 : record[field];
@@ -10504,11 +10589,11 @@ function payloadEventsOf(body) {
   }
   const payloads = [];
   for (const event of events) {
-    if (!isRecord3(event)) {
+    if (!isRecord4(event)) {
       continue;
     }
     const payload = event.payload;
-    if (!isRecord3(payload)) {
+    if (!isRecord4(payload)) {
       continue;
     }
     payloads.push(payload);
@@ -10523,7 +10608,7 @@ function pendingOfControlRequestPayload(payload) {
   if (requestId === void 0) {
     return void 0;
   }
-  const request4 = isRecord3(payload.request) ? payload.request : void 0;
+  const request4 = isRecord4(payload.request) ? payload.request : void 0;
   const subtype = nonEmptyString(request4, "subtype");
   const type = subtype ?? "control_request";
   let summary = "";
@@ -10540,7 +10625,7 @@ function answeredRequestIdsOfControlResponsePayload(payload) {
   if (payload.type !== "control_response") {
     return [];
   }
-  const response = isRecord3(payload.response) ? payload.response : void 0;
+  const response = isRecord4(payload.response) ? payload.response : void 0;
   const id = nonEmptyString(response, "request_id") ?? nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
   return id === void 0 ? [] : [id];
 }
@@ -10769,7 +10854,7 @@ function createRcSessionTracker(deps) {
         return;
       }
       entry.sequenceNum = entry.sequenceNum === void 0 || event.sequence_num > entry.sequenceNum ? event.sequence_num : entry.sequenceNum;
-      if (!isRecord3(event.payload)) {
+      if (!isRecord4(event.payload)) {
         return;
       }
       entry.liveTasks = applyAgentTaskEvent(entry.liveTasks, sessionId, event.payload, deps.now());
@@ -12192,11 +12277,11 @@ var import_node_path10 = __toESM(require("node:path"), 1);
 function isSafeSessionId(sessionId) {
   return /^[A-Za-z0-9_-]+$/.test(sessionId);
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function credentialOfJson(parsed) {
-  if (!isRecord4(parsed)) {
+  if (!isRecord5(parsed)) {
     return void 0;
   }
   const { authorization, anthropicVersion, anthropicClientPlatform } = parsed;
@@ -12226,7 +12311,7 @@ function createRcCredentialStore(fs13, dir) {
     } catch {
       return void 0;
     }
-    return isRecord4(parsed) ? parsed : void 0;
+    return isRecord5(parsed) ? parsed : void 0;
   };
   return {
     read: (sessionId) => {
@@ -14163,6 +14248,7 @@ function parseSiwcFile(raw, filePath) {
 
 // src/doctorReport.ts
 init_load();
+init_unrecognisedKeys();
 init_schema();
 init_credential();
 init_credentialCache();
@@ -14373,11 +14459,11 @@ function validateJson(schema, input) {
   } catch (error) {
     return { ok: false, message: `${input.path} is not valid JSON: ${error instanceof Error ? error.message : String(error)}` };
   }
-  const result = schema.safeParse(parsed);
+  const result = parseIgnoringUnrecognisedKeys(schema, parsed);
   if (!result.success) {
-    return { ok: false, message: new ConfigValidationError(input.path, result.error.issues).message };
+    return { ok: false, message: new ConfigValidationError(input.path, result.issues).message };
   }
-  return { ok: true, data: result.data };
+  return { ok: true, data: result.data, ...result.ignored.length === 0 ? {} : { warning: describeIgnoredKeys(input.path, result.ignored) } };
 }
 function tcpPortEraRecord(raw) {
   let parsed;
@@ -14470,11 +14556,14 @@ function pushProvider(push, entry, cacheEnv, signIn) {
     push("provider", "fail", new LegacyProviderFileError(entry.path, conversion).message, entry.name);
     return;
   }
-  const validated3 = ProviderSchema.safeParse(parsed);
+  const validated3 = parseIgnoringUnrecognisedKeys(ProviderSchema, parsed);
   if (!validated3.success) {
-    push("provider", "fail", new ConfigValidationError(entry.path, validated3.error.issues).message, entry.name);
+    push("provider", "fail", new ConfigValidationError(entry.path, validated3.issues).message, entry.name);
     return;
   }
+  if (validated3.ignored.length > 0) {
+    push("provider", "warn", describeIgnoredKeys(entry.path, validated3.ignored), entry.name);
+  }
   const cache = cacheClause(cacheEnv, `provider ${entry.name}`, validated3.data.credential);
   push("provider", cache.unreadable ? "fail" : "pass", `${entry.name} is valid (${describeProviderEndpoint(validated3.data)}, credential ${describeCredential(validated3.data.credential)})${cache.text}.`, entry.name);
   if (validated3.data.env?.ENABLE_TOOL_SEARCH === void 0) {
@@ -14509,6 +14598,13 @@ function runDoctor(params) {
   const push = (section, severity, message, subject) => {
     findings.push({ section, severity, message, ...subject === void 0 ? {} : { subject } });
   };
+  const validate = (schema, input, section, subject) => {
+    const validated3 = validateJson(schema, input);
+    if (validated3.ok && validated3.warning !== void 0) {
+      push(section, "warn", validated3.warning, subject);
+    }
+    return validated3;
+  };
   const checkPin = (section, subject, where, version) => {
     const installed = params.installedClaudeVersions;
     if (version === void 0 || installed === void 0 || installed.includes(version)) {
@@ -14548,7 +14644,7 @@ function runDoctor(params) {
   pushLegacyName(push, params);
   const profileSources = /* @__PURE__ */ new Map();
   for (const entry of params.configProfiles) {
-    const validated3 = validateJson(ConfigProfileSchema, entry);
+    const validated3 = validate(ConfigProfileSchema, entry, "config-profile", entry.name);
     if (!validated3.ok) {
       push("config-profile", "fail", validated3.message, entry.name);
       continue;
@@ -14570,7 +14666,7 @@ function runDoctor(params) {
   const validProfileNames = new Set(profileSources.keys());
   const validIdentityNames = /* @__PURE__ */ new Set();
   for (const entry of params.identities) {
-    const validated3 = validateJson(IdentitySchema, entry);
+    const validated3 = validate(IdentitySchema, entry, "identity", entry.name);
     if (!validated3.ok) {
       push("identity", "fail", validated3.message, entry.name);
       continue;
@@ -14656,7 +14752,7 @@ function runDoctor(params) {
   if (params.directoryRules.raw === void 0) {
     push("directory-rules", "pass", "No directory-rules.json configured.");
   } else {
-    const validated3 = validateJson(DirectoryRulesSchema, params.directoryRules);
+    const validated3 = validate(DirectoryRulesSchema, params.directoryRules, "directory-rules");
     if (!validated3.ok) {
       push("directory-rules", "fail", validated3.message);
     } else {
@@ -14681,7 +14777,7 @@ function runDoctor(params) {
   if (params.globalConfig.raw === void 0) {
     push("global-config", "pass", "No config.json configured.");
   } else {
-    const validated3 = validateJson(GlobalConfigSchema, params.globalConfig);
+    const validated3 = validate(GlobalConfigSchema, params.globalConfig, "global-config");
     if (!validated3.ok) {
       push("global-config", "fail", validated3.message);
     } else {
@@ -14701,7 +14797,7 @@ function runDoctor(params) {
   if (params.categoriesLocal.raw === void 0) {
     push("categories-local", "pass", "No categories.local.json configured.");
   } else {
-    const validated3 = validateJson(CategoryClassificationOverlaySchema, params.categoriesLocal);
+    const validated3 = validate(CategoryClassificationOverlaySchema, params.categoriesLocal, "categories-local");
     push(
       "categories-local",
       validated3.ok ? "pass" : "fail",
@@ -16312,15 +16408,15 @@ function createQuotaExpiringPublisher(hub, deps) {
 
 // src/frontdoor/rcLiveUsage.ts
 var RC_RATE_LIMIT_EVENT_TYPE = "rate_limit_event";
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function rcRateLimitInfoOf(event) {
   const payload = event.envelope.payload;
-  if (!isRecord7(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
+  if (!isRecord8(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
     return void 0;
   }
-  if (!isRecord7(payload.rate_limit_info)) {
+  if (!isRecord8(payload.rate_limit_info)) {
     return void 0;
   }
   const parsed = RcRateLimitInfoSchema.safeParse(payload.rate_limit_info);
@@ -16408,7 +16504,7 @@ function createSseParser() {
     }
   };
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function sequenceNumOf(value) {
@@ -16430,7 +16526,7 @@ function parseRcStreamEnvelope(parsed) {
   } catch {
     return void 0;
   }
-  if (!isRecord8(data)) {
+  if (!isRecord9(data)) {
     return void 0;
   }
   const eventType = data.event_type;
@@ -16671,7 +16767,7 @@ init_capability();
 // src/frontdoor/rcSelfHostEndpoints.ts
 var RC_SOURCE_WORKER = "worker";
 var RC_SOURCE_CLIENT = "client";
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonObject2(body) {
@@ -16681,7 +16777,7 @@ function parseJsonObject2(body) {
   } catch {
     return void 0;
   }
-  return isRecord9(parsed) ? parsed : void 0;
+  return isRecord10(parsed) ? parsed : void 0;
 }
 function nonEmptyString2(record, field) {
   const value = record === void 0 ? void 0 : record[field];
@@ -16755,7 +16851,7 @@ async function serveRcClientChannels(ctx, tail, method, maxBatchEvents) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord9(event) || !isRecord9(event.payload)) {
+      if (!isRecord10(event) || !isRecord10(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a teleport write is an object carrying one payload object" } });
         return true;
       }
@@ -16855,7 +16951,7 @@ async function serveRcCompatSessions(ctx, pathname, compatPath) {
 // src/frontdoor/rcSelfHostConversations.ts
 var RC_CONVERSATIONS_PATH_PREFIX = "/v1/code/conversations";
 var RC_CONVERSATION_ID_PREFIX = "conv_";
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonObject3(body) {
@@ -16865,7 +16961,7 @@ function parseJsonObject3(body) {
   } catch {
     return void 0;
   }
-  return isRecord10(parsed) ? parsed : void 0;
+  return isRecord11(parsed) ? parsed : void 0;
 }
 function nonEmptyString3(record, field) {
   const value = record === void 0 ? void 0 : record[field];
@@ -16919,7 +17015,7 @@ async function serveRcConversations(ctx, pathname, method) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord10(event) || !isRecord10(event.payload)) {
+      if (!isRecord11(event) || !isRecord11(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
         return;
       }
@@ -16951,7 +17047,7 @@ var RC_SELF_HOST_SCOPE_LIST = ["user:profile", "user:inference", "user:sessions:
 var RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS = 3600;
 var MS_PER_SECOND5 = 1e3;
 var HTTP_SERVICE_UNAVAILABLE = 503;
-function isRecord11(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonObject4(body) {
@@ -16961,7 +17057,7 @@ function parseJsonObject4(body) {
   } catch {
     return void 0;
   }
-  return isRecord11(parsed) ? parsed : void 0;
+  return isRecord12(parsed) ? parsed : void 0;
 }
 function growthBookFeatures() {
   return {
@@ -17315,7 +17411,7 @@ var RC_SELF_HOST_WORKER_EPOCH = 1;
 var RC_STREAM_EVENT_NAME2 = "client_event";
 var CONFLICT_REASON_HEADER2 = "x-ccr-conflict-reason";
 var CONFLICT_REASON_EPOCH_STALE = "epoch_stale";
-function isRecord12(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isWebSearchRefusal(value) {
@@ -17399,7 +17495,7 @@ function parseJsonObject5(body) {
   } catch {
     return void 0;
   }
-  return isRecord12(parsed) ? parsed : void 0;
+  return isRecord13(parsed) ? parsed : void 0;
 }
 function mintWorkerJwt(randomToken, issuedAt) {
   const encode = (value) => Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
@@ -17659,7 +17755,7 @@ data: ${JSON.stringify(envelope)}
         if (status !== void 0) {
           session.workerStatus = status;
         }
-        if (isRecord12(body?.external_metadata)) {
+        if (isRecord13(body?.external_metadata)) {
           session.externalMetadata = body.external_metadata;
         }
         await answerJson2(response, HTTP_STATUS.ok, {});
@@ -17689,7 +17785,7 @@ data: ${JSON.stringify(envelope)}
         }
         const results = [];
         for (const event of events) {
-          if (!isRecord12(event) || !isRecord12(event.payload)) {
+          if (!isRecord13(event) || !isRecord13(event.payload)) {
             await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a batch is an object carrying one payload object" } });
             return;
           }
@@ -17722,7 +17818,7 @@ data: ${JSON.stringify(envelope)}
           return;
         }
         for (const event of events) {
-          if (isRecord12(event)) {
+          if (isRecord13(event)) {
             session.internalEvents.push({ eventId: deps.newUuid(), body: event });
           }
         }
@@ -17818,7 +17914,7 @@ data: ${JSON.stringify(envelope)}
       }
       const results = [];
       for (const event of events) {
-        if (!isRecord12(event) || !isRecord12(event.payload)) {
+        if (!isRecord13(event) || !isRecord13(event.payload)) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
           return;
         }
@@ -17955,7 +18051,7 @@ var RC_SELF_HOST_RECORD_DIR = "rc-selfhost";
 var RC_SELF_HOST_RECORD_FILE = "credential.json";
 var SELF_HOST_EMAIL = "selfhost@agent-shim.invalid";
 var SELF_HOST_SUBSCRIPTION_TYPE = "max";
-function isRecord13(value) {
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readJsonObject(fs13, file) {
@@ -17969,7 +18065,7 @@ function readJsonObject(fs13, file) {
   } catch {
     return void 0;
   }
-  return isRecord13(parsed) ? parsed : void 0;
+  return isRecord14(parsed) ? parsed : void 0;
 }
 function readRcSelfHostRecord(fs13, frontdoorDir) {
   const parsed = readJsonObject(fs13, import_node_path33.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
@@ -17993,7 +18089,7 @@ function mintRcSelfHostCredential(deps) {
   const recordFile = import_node_path33.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
-  const existingOauth = isRecord13(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
+  const existingOauth = isRecord14(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
   const existingToken = typeof existingOauth?.accessToken === "string" && existingOauth.accessToken !== "" ? existingOauth.accessToken : void 0;
   const existingIsOwn = existingToken !== void 0 && previousRecord?.accessToken === existingToken;
   if (existingToken !== void 0 && !existingIsOwn && !deps.force) {
@@ -18010,7 +18106,7 @@ function mintRcSelfHostCredential(deps) {
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
-  const existingBlock = (value) => isRecord13(value) ? value : {};
+  const existingBlock = (value) => isRecord14(value) ? value : {};
   deps.fs.writeFilePrivate(claudeJsonFile, `${JSON.stringify({
     ...claudeJson,
     oauthAccount: {