claude-use 11.18.0 → 11.19.1

package/dist/cli.cjs

@@ -24527,25 +24527,102 @@ var require_dist = __commonJS({
   }
 });
 
+// src/config/unrecognisedKeys.ts
+function isRecord(value2) {
+  return typeof value2 === "object" && value2 !== null;
+}
+function parseIgnoringUnrecognisedKeys(schema, raw) {
+  const first = schema.safeParse(raw);
+  if (first.success) {
+    return { success: true, data: first.data, ignored: [] };
+  }
+  const unrecognised = first.error.issues.filter((issue2) => issue2.code === "unrecognized_keys");
+  const others = first.error.issues.filter((issue2) => issue2.code !== "unrecognized_keys");
+  if (others.length > 0) {
+    return { success: false, issues: others };
+  }
+  const stripped = structuredClone(raw);
+  const ignored = [];
+  for (const issue2 of unrecognised) {
+    let holder = stripped;
+    for (const step2 of issue2.path) {
+      holder = isRecord(holder) ? holder[step2] : void 0;
+    }
+    if (isRecord(holder)) {
+      const values = Object.fromEntries(issue2.keys.map((key) => [key, holder[key]]));
+      for (const key of issue2.keys) {
+        Reflect.deleteProperty(holder, key);
+      }
+      ignored.push({ path: issue2.path, keys: issue2.keys, values });
+    }
+  }
+  const second = schema.safeParse(stripped);
+  return second.success ? { success: true, data: second.data, ignored } : { success: false, issues: second.error.issues };
+}
+function describeIgnoredKeys(filePath, ignored) {
+  const places = ignored.map(({ path: path61, keys }) => `${path61.length === 0 ? "" : `${path61.map(String).join(".")}.`}${keys.join(", ")}`);
+  return `${filePath} has settings this version of agent-shim does not know and ignores: ${places.join("; ")}. A newer release may read them.`;
+}
+function noteIgnoredKeys(filePath, ignored) {
+  if (ignored.length === 0) {
+    ignoredByFile.delete(filePath);
+    return;
+  }
+  ignoredByFile.set(filePath, ignored);
+  const message = `agent-shim: warning: ${describeIgnoredKeys(filePath, ignored)}
+`;
+  if (!warned.has(message)) {
+    warned.add(message);
+    process.stderr.write(message);
+  }
+}
+function restoreIgnoredKeys(filePath, value2) {
+  const ignored = ignoredByFile.get(filePath);
+  if (ignored === void 0) {
+    return value2;
+  }
+  const restored = structuredClone(value2);
+  for (const { path: path61, values } of ignored) {
+    let holder = restored;
+    for (const step2 of path61) {
+      holder = isRecord(holder) ? holder[step2] : void 0;
+    }
+    if (isRecord(holder)) {
+      for (const [key, held] of Object.entries(values)) {
+        holder[key] = held;
+      }
+    }
+  }
+  return restored;
+}
+var warned, ignoredByFile;
+var init_unrecognisedKeys = __esm({
+  "src/config/unrecognisedKeys.ts"() {
+    "use strict";
+    warned = /* @__PURE__ */ new Set();
+    ignoredByFile = /* @__PURE__ */ new Map();
+  }
+});
+
 // src/config/load.ts
 function createExplorer(moduleName = "agent-shim") {
   return (0, import_cosmiconfig.cosmiconfigSync)(moduleName, { searchPlaces: [] });
 }
-function isRecord(value2) {
+function isRecord2(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function captureEntryOrder(value2) {
-  if (!isRecord(value2)) {
+  if (!isRecord2(value2)) {
     return [];
   }
   const entries = value2.entries;
-  if (!isRecord(entries)) {
+  if (!isRecord2(entries)) {
     return [];
   }
   return Object.keys(entries);
 }
 function captureRuleEntryOrders(value2) {
-  if (!isRecord(value2)) {
+  if (!isRecord2(value2)) {
     return [];
   }
   const rules = value2.rules;
@@ -24560,7 +24637,7 @@ function cosmiconfigReader(explorer = createExplorer()) {
     try {
       result = explorer.load(filepath);
     } catch (error63) {
-      const code = isRecord(error63) ? error63.code : void 0;
+      const code = isRecord2(error63) ? error63.code : void 0;
       if (code === "ENOENT") {
         return void 0;
       }
@@ -24577,10 +24654,11 @@ function loadConfigFile(filepath, schema, read = cosmiconfigReader()) {
   if (raw === void 0) {
     return void 0;
   }
-  const parsed = schema.safeParse(raw);
+  const parsed = parseIgnoringUnrecognisedKeys(schema, raw);
   if (!parsed.success) {
-    throw new ConfigValidationError(filepath, parsed.error.issues);
+    throw new ConfigValidationError(filepath, parsed.issues);
   }
+  noteIgnoredKeys(filepath, parsed.ignored);
   return {
     filepath,
     config: parsed.data,
@@ -24594,6 +24672,7 @@ var init_load = __esm({
     "use strict";
     import_cosmiconfig = __toESM(require_dist(), 1);
     init_cliError();
+    init_unrecognisedKeys();
     ConfigValidationError = class extends CliError {
       constructor(filepath, issues) {
         const detail = issues.map((issue2) => `  ${issue2.path.join(".") || "(root)"}: ${issue2.message}`).join("\n");
@@ -24619,10 +24698,11 @@ function readJson(filePath, schema, storeFs = nodeStoreFs) {
     return void 0;
   }
   const parsed = JSON.parse(raw);
-  const result = schema.safeParse(parsed);
+  const result = parseIgnoringUnrecognisedKeys(schema, parsed);
   if (!result.success) {
-    throw new ConfigValidationError(filePath, result.error.issues);
+    throw new ConfigValidationError(filePath, result.issues);
   }
+  noteIgnoredKeys(filePath, result.ignored);
   return result.data;
 }
 function writeTextAtomic(filePath, contents, storeFs = nodeStoreFs) {
@@ -24638,7 +24718,7 @@ function writeTextAtomic(filePath, contents, storeFs = nodeStoreFs) {
   }
 }
 function writeJsonAtomic(filePath, data, storeFs = nodeStoreFs) {
-  writeTextAtomic(filePath, `${JSON.stringify(data, null, 2)}
+  writeTextAtomic(filePath, `${JSON.stringify(restoreIgnoredKeys(filePath, data), null, 2)}
 `, storeFs);
 }
 function applyPatch(filePath, schema, patch, options = {}) {
@@ -24664,6 +24744,7 @@ var init_store = __esm({
     import_node_path2 = __toESM(require("node:path"), 1);
     import_node_crypto = require("node:crypto");
     init_load();
+    init_unrecognisedKeys();
     nodeStoreFs = {
       readFileUtf8(filePath) {
         try {
@@ -33966,7 +34047,7 @@ function formatCredentialSummary(summary) {
 function describeCredential(credential) {
   return formatCredentialSummary(summariseCredential(credential));
 }
-function isRecord2(value2) {
+function isRecord3(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function unpackKeyringToken(raw) {
@@ -33978,7 +34059,7 @@ function unpackKeyringToken(raw) {
     const base64Str = trimmed.slice(GO_KEYRING_BASE64_PREFIX.length);
     const decoded = Buffer.from(base64Str, "base64").toString("utf8");
     const parsed = JSON.parse(decoded);
-    if (isRecord2(parsed) && isRecord2(parsed.token)) {
+    if (isRecord3(parsed) && isRecord3(parsed.token)) {
       const accessToken = parsed.token.access_token;
       if (typeof accessToken === "string" && accessToken.trim() !== "") {
         return accessToken.trim();
@@ -34091,7 +34172,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.18.0",
+      version: "11.19.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -35666,14 +35747,14 @@ function providerJsonPath(paths, name) {
 function providerExists(paths, name) {
   return import_node_fs10.default.existsSync(providerJsonPath(paths, name));
 }
-function isRecord3(value2) {
+function isRecord4(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function legacyProviderConversion(raw) {
-  if (!isRecord3(raw) || "credential" in raw) {
+  if (!isRecord4(raw) || "credential" in raw) {
     return void 0;
   }
-  const env = isRecord3(raw.env) ? raw.env : void 0;
+  const env = isRecord4(raw.env) ? raw.env : void 0;
   const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
   const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
   if (fields.length === 0) {
@@ -35706,10 +35787,11 @@ function parseProviderFile(filePath, raw) {
   if (conversion !== void 0) {
     throw new LegacyProviderFileError(filePath, conversion);
   }
-  const parsed = ProviderSchema.safeParse(raw);
+  const parsed = parseIgnoringUnrecognisedKeys(ProviderSchema, raw);
   if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+    throw new ConfigValidationError(filePath, parsed.issues);
   }
+  noteIgnoredKeys(filePath, parsed.ignored);
   return parsed.data;
 }
 function readProvider(paths, name) {
@@ -35919,6 +36001,7 @@ var init_providersStore = __esm({
     import_node_path29 = __toESM(require("node:path"), 1);
     init_load();
     init_store();
+    init_unrecognisedKeys();
     init_schema();
     init_cliError();
     init_credential();
@@ -63129,7 +63212,7 @@ function resolvePoolLaunch(params) {
   if (stickyRead.problem !== void 0) {
     log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
   }
-  const warned = /* @__PURE__ */ new Set();
+  const warned2 = /* @__PURE__ */ new Set();
   for (; ; ) {
     const nowMs = params.now();
     let graph;
@@ -63153,8 +63236,8 @@ function resolvePoolLaunch(params) {
     }
     for (const gone of graph.missing) {
       const key = `${gone.pool}:${gone.identity}`;
-      if (!warned.has(key)) {
-        warned.add(key);
+      if (!warned2.has(key)) {
+        warned2.add(key);
         log.warn(`agent-shim: pool "${gone.pool}" names identity "${gone.identity}", which does not exist; skipping it`);
       }
     }
@@ -64036,11 +64119,11 @@ function buildCloudRequestBody(params) {
   }
   return JSON.stringify(params.request);
 }
-function isRecord4(value2) {
+function isRecord5(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function isGeminiChunk(value2) {
-  return isRecord4(value2);
+  return isRecord5(value2);
 }
 async function* callCloudAntigravity(params, fetchFn = fetch) {
   const url2 = buildCloudUrl(params.config, params.model);
@@ -64075,8 +64158,8 @@ async function* callCloudAntigravity(params, fetchFn = fetch) {
         if (jsonStr.length > 0) {
           try {
             const parsed = JSON.parse(jsonStr);
-            if (isRecord4(parsed)) {
-              const unwrapped = isRecord4(parsed.response) ? parsed.response : parsed;
+            if (isRecord5(parsed)) {
+              const unwrapped = isRecord5(parsed.response) ? parsed.response : parsed;
               if (isGeminiChunk(unwrapped)) {
                 yield unwrapped;
               }
@@ -109963,7 +110046,13 @@ function validateMembers(pools, name, members2) {
     throw new UsageError(`Member "pool:${cycle[1] ?? name}" would make pool "${name}" reach itself: ${cycle.join(" -> ")}. A pool cannot nest itself, directly or through another pool.`);
   }
 }
-function addPool(paths, name, identities, preference) {
+function poolPolicyOf(policy) {
+  return { ...policy.preference === void 0 ? {} : { preference: policy.preference } };
+}
+function isPoolChange(change) {
+  return change.identities !== void 0 || change.preference !== void 0;
+}
+function addPool(paths, name, identities, policy = {}) {
   if (!PoolNameSchema.safeParse(name).success) {
     throw new InvalidPoolNameError(name);
   }
@@ -109972,14 +110061,16 @@ function addPool(paths, name, identities, preference) {
     throw new PoolAlreadyExistsError(name);
   }
   validateMembers(pools, name, identities);
-  const pool = { identities: [...identities], ...preference === void 0 ? {} : { preference } };
+  const pool = { identities: [...identities], ...poolPolicyOf(policy) };
   writePools(paths, { ...pools, [name]: pool });
   return pool;
 }
-function setPool(paths, name, identities, preference) {
-  requirePool(paths, name);
+function changePool(paths, name, change) {
+  const existing = requirePool(paths, name);
+  const identities = change.identities ?? existing.identities;
   validateMembers(readPools(paths), name, identities);
-  const pool = { identities: [...identities], ...preference === void 0 ? {} : { preference } };
+  const preference = change.preference === void 0 ? existing.preference : change.preference === false ? void 0 : change.preference;
+  const pool = { identities: [...identities], ...poolPolicyOf({ preference }) };
   writePools(paths, { ...readPools(paths), [name]: pool });
   return pool;
 }
@@ -115102,7 +115193,7 @@ var LiveTaskSchema = external_exports.strictObject({
   observedAt: external_exports.number()
 });
 var SYSTEM_SUBTYPES = ["task_started", "task_progress", "task_updated", "task_notification", "background_tasks_changed"];
-function isRecord5(value2) {
+function isRecord6(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function stringField(record2, field) {
@@ -115119,7 +115210,7 @@ function booleanField(record2, field) {
 }
 function usageOf(record2) {
   const raw = record2.usage;
-  if (!isRecord5(raw)) {
+  if (!isRecord6(raw)) {
     return void 0;
   }
   const totalTokens = numberField(raw, "total_tokens");
@@ -115151,7 +115242,7 @@ function bounded(book) {
   return book;
 }
 function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
-  if (!isRecord5(payload) || payload.type !== "system") {
+  if (!isRecord6(payload) || payload.type !== "system") {
     return book;
   }
   const subtype = payload.subtype;
@@ -115167,8 +115258,8 @@ function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
   if (subtype === "background_tasks_changed") {
     const tasks = Array.isArray(payload.tasks) ? payload.tasks : [];
     for (const raw of tasks) {
-      const taskId2 = isRecord5(raw) ? stringField(raw, "task_id") : void 0;
-      if (isRecord5(raw) && taskId2 !== void 0) {
+      const taskId2 = isRecord6(raw) ? stringField(raw, "task_id") : void 0;
+      if (isRecord6(raw) && taskId2 !== void 0) {
         upsert(taskId2, { runId: stringField(raw, "run_id"), taskType: stringField(raw, "task_type"), description: stringField(raw, "description") });
       }
     }
@@ -115191,7 +115282,7 @@ function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
   } else if (subtype === "task_progress") {
     upsert(taskId, { ...common, subagentType: stringField(payload, "subagent_type"), lastToolName: stringField(payload, "last_tool_name"), usage: usageOf(payload) });
   } else if (subtype === "task_updated") {
-    const patch = isRecord5(payload.patch) ? payload.patch : {};
+    const patch = isRecord6(payload.patch) ? payload.patch : {};
     upsert(taskId, { runId: stringField(payload, "run_id"), status: stringField(patch, "status") });
   } else {
     upsert(taskId, { ...common, status: stringField(payload, "status"), outputFile: stringField(payload, "output_file"), summary: stringField(payload, "summary"), usage: usageOf(payload) });
@@ -115273,7 +115364,7 @@ function sessionCreateId(body) {
   const id2 = session.id;
   return typeof id2 === "string" && id2.startsWith(RC_SESSION_ID_PREFIX) ? id2 : void 0;
 }
-function isRecord6(value2) {
+function isRecord7(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject(body) {
@@ -115283,7 +115374,7 @@ function parseJsonObject(body) {
   } catch {
     return void 0;
   }
-  return isRecord6(parsed) ? parsed : void 0;
+  return isRecord7(parsed) ? parsed : void 0;
 }
 function nonEmptyString(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -115304,11 +115395,11 @@ function payloadEventsOf(body) {
   }
   const payloads = [];
   for (const event of events) {
-    if (!isRecord6(event)) {
+    if (!isRecord7(event)) {
       continue;
     }
     const payload = event.payload;
-    if (!isRecord6(payload)) {
+    if (!isRecord7(payload)) {
       continue;
     }
     payloads.push(payload);
@@ -115323,7 +115414,7 @@ function pendingOfControlRequestPayload(payload) {
   if (requestId === void 0) {
     return void 0;
   }
-  const request7 = isRecord6(payload.request) ? payload.request : void 0;
+  const request7 = isRecord7(payload.request) ? payload.request : void 0;
   const subtype = nonEmptyString(request7, "subtype");
   const type2 = subtype ?? "control_request";
   let summary = "";
@@ -115340,7 +115431,7 @@ function answeredRequestIdsOfControlResponsePayload(payload) {
   if (payload.type !== "control_response") {
     return [];
   }
-  const response = isRecord6(payload.response) ? payload.response : void 0;
+  const response = isRecord7(payload.response) ? payload.response : void 0;
   const id2 = nonEmptyString(response, "request_id") ?? nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
   return id2 === void 0 ? [] : [id2];
 }
@@ -115569,7 +115660,7 @@ function createRcSessionTracker(deps) {
         return;
       }
       entry.sequenceNum = entry.sequenceNum === void 0 || event.sequence_num > entry.sequenceNum ? event.sequence_num : entry.sequenceNum;
-      if (!isRecord6(event.payload)) {
+      if (!isRecord7(event.payload)) {
         return;
       }
       entry.liveTasks = applyAgentTaskEvent(entry.liveTasks, sessionId, event.payload, deps.now());
@@ -117143,6 +117234,7 @@ function identitySignIn(fs24, probe, identity) {
 
 // src/doctorReport.ts
 init_load();
+init_unrecognisedKeys();
 init_schema();
 init_credential();
 init_credentialCache();
@@ -117353,11 +117445,11 @@ function validateJson(schema, input2) {
   } catch (error63) {
     return { ok: false, message: `${input2.path} is not valid JSON: ${error63 instanceof Error ? error63.message : String(error63)}` };
   }
-  const result = schema.safeParse(parsed);
+  const result = parseIgnoringUnrecognisedKeys(schema, parsed);
   if (!result.success) {
-    return { ok: false, message: new ConfigValidationError(input2.path, result.error.issues).message };
+    return { ok: false, message: new ConfigValidationError(input2.path, result.issues).message };
   }
-  return { ok: true, data: result.data };
+  return { ok: true, data: result.data, ...result.ignored.length === 0 ? {} : { warning: describeIgnoredKeys(input2.path, result.ignored) } };
 }
 function tcpPortEraRecord(raw) {
   let parsed;
@@ -117450,11 +117542,14 @@ function pushProvider(push, entry, cacheEnv, signIn) {
     push("provider", "fail", new LegacyProviderFileError(entry.path, conversion).message, entry.name);
     return;
   }
-  const validated2 = ProviderSchema.safeParse(parsed);
+  const validated2 = parseIgnoringUnrecognisedKeys(ProviderSchema, parsed);
   if (!validated2.success) {
-    push("provider", "fail", new ConfigValidationError(entry.path, validated2.error.issues).message, entry.name);
+    push("provider", "fail", new ConfigValidationError(entry.path, validated2.issues).message, entry.name);
     return;
   }
+  if (validated2.ignored.length > 0) {
+    push("provider", "warn", describeIgnoredKeys(entry.path, validated2.ignored), entry.name);
+  }
   const cache = cacheClause(cacheEnv, `provider ${entry.name}`, validated2.data.credential);
   push("provider", cache.unreadable ? "fail" : "pass", `${entry.name} is valid (${describeProviderEndpoint(validated2.data)}, credential ${describeCredential(validated2.data.credential)})${cache.text}.`, entry.name);
   if (validated2.data.env?.ENABLE_TOOL_SEARCH === void 0) {
@@ -117489,6 +117584,13 @@ function runDoctor(params) {
   const push = (section, severity, message, subject) => {
     findings.push({ section, severity, message, ...subject === void 0 ? {} : { subject } });
   };
+  const validate2 = (schema, input2, section, subject) => {
+    const validated2 = validateJson(schema, input2);
+    if (validated2.ok && validated2.warning !== void 0) {
+      push(section, "warn", validated2.warning, subject);
+    }
+    return validated2;
+  };
   const checkPin = (section, subject, where, version2) => {
     const installed = params.installedClaudeVersions;
     if (version2 === void 0 || installed === void 0 || installed.includes(version2)) {
@@ -117528,7 +117630,7 @@ function runDoctor(params) {
   pushLegacyName(push, params);
   const profileSources = /* @__PURE__ */ new Map();
   for (const entry of params.configProfiles) {
-    const validated2 = validateJson(ConfigProfileSchema, entry);
+    const validated2 = validate2(ConfigProfileSchema, entry, "config-profile", entry.name);
     if (!validated2.ok) {
       push("config-profile", "fail", validated2.message, entry.name);
       continue;
@@ -117550,7 +117652,7 @@ function runDoctor(params) {
   const validProfileNames = new Set(profileSources.keys());
   const validIdentityNames = /* @__PURE__ */ new Set();
   for (const entry of params.identities) {
-    const validated2 = validateJson(IdentitySchema, entry);
+    const validated2 = validate2(IdentitySchema, entry, "identity", entry.name);
     if (!validated2.ok) {
       push("identity", "fail", validated2.message, entry.name);
       continue;
@@ -117636,7 +117738,7 @@ function runDoctor(params) {
   if (params.directoryRules.raw === void 0) {
     push("directory-rules", "pass", "No directory-rules.json configured.");
   } else {
-    const validated2 = validateJson(DirectoryRulesSchema, params.directoryRules);
+    const validated2 = validate2(DirectoryRulesSchema, params.directoryRules, "directory-rules");
     if (!validated2.ok) {
       push("directory-rules", "fail", validated2.message);
     } else {
@@ -117661,7 +117763,7 @@ function runDoctor(params) {
   if (params.globalConfig.raw === void 0) {
     push("global-config", "pass", "No config.json configured.");
   } else {
-    const validated2 = validateJson(GlobalConfigSchema, params.globalConfig);
+    const validated2 = validate2(GlobalConfigSchema, params.globalConfig, "global-config");
     if (!validated2.ok) {
       push("global-config", "fail", validated2.message);
     } else {
@@ -117681,7 +117783,7 @@ function runDoctor(params) {
   if (params.categoriesLocal.raw === void 0) {
     push("categories-local", "pass", "No categories.local.json configured.");
   } else {
-    const validated2 = validateJson(CategoryClassificationOverlaySchema, params.categoriesLocal);
+    const validated2 = validate2(CategoryClassificationOverlaySchema, params.categoriesLocal, "categories-local");
     push(
       "categories-local",
       validated2.ok ? "pass" : "fail",
@@ -120447,7 +120549,7 @@ var HTTP_METHODS_UP_TO_V31 = [
 function operationFields(convert) {
   return Object.fromEntries(HTTP_METHODS_UP_TO_V31.map((method) => [method, convert]));
 }
-function isRecord7(value2) {
+function isRecord8(value2) {
   if (typeof value2 !== "object" || value2 === null) {
     return false;
   }
@@ -120467,7 +120569,7 @@ function setOwn2(object3, key, value2) {
   }
 }
 function cloneValue(value2, seen) {
-  if (!(Array.isArray(value2) || isRecord7(value2))) {
+  if (!(Array.isArray(value2) || isRecord8(value2))) {
     return value2;
   }
   const existing = seen.get(value2);
@@ -120490,14 +120592,14 @@ function cloneValue(value2, seen) {
   return out;
 }
 function deepClone(value2) {
-  if (!(Array.isArray(value2) || isRecord7(value2))) {
+  if (!(Array.isArray(value2) || isRecord8(value2))) {
     return value2;
   }
   return cloneValue(value2, /* @__PURE__ */ new WeakMap());
 }
 var converting = /* @__PURE__ */ new WeakMap();
 function convertRecord(value2, fields, finish) {
-  if (!isRecord7(value2)) {
+  if (!isRecord8(value2)) {
     return deepClone(value2);
   }
   const inProgress = converting.get(value2);
@@ -120523,7 +120625,7 @@ function convertRecord(value2, fields, finish) {
   }
 }
 function mapRecord(value2, convert) {
-  if (!isRecord7(value2)) {
+  if (!isRecord8(value2)) {
     return deepClone(value2);
   }
   const out = {};
@@ -120542,7 +120644,7 @@ function mapArray(value2, convert) {
   return value2.map((item) => convert(item)).filter((item) => item !== DROP);
 }
 function getRef(value2) {
-  if (isRecord7(value2) && typeof value2.$ref === "string") {
+  if (isRecord8(value2) && typeof value2.$ref === "string") {
     return value2.$ref;
   }
   return void 0;
@@ -120748,7 +120850,7 @@ function convertSchema2(schema) {
   if (schema === false) {
     return { not: {} };
   }
-  if (isRecord7(schema) && typeof schema.$ref === "string" && Object.keys(schema).length === 1) {
+  if (isRecord8(schema) && typeof schema.$ref === "string" && Object.keys(schema).length === 1) {
     return { $ref: schema.$ref };
   }
   return convertRecord(schema, SCHEMA_FIELDS, finishSchema);
@@ -120760,7 +120862,7 @@ function resolveSchemeType(name, schemes, seen) {
     return void 0;
   }
   const scheme = schemes[name];
-  if (!isRecord7(scheme)) {
+  if (!isRecord8(scheme)) {
     return void 0;
   }
   if (typeof scheme.type === "string") {
@@ -120777,11 +120879,11 @@ function resolveSchemeType(name, schemes, seen) {
   return void 0;
 }
 function createContext(spec) {
-  const components = isRecord7(spec) ? spec.components : void 0;
-  const pathItems = isRecord7(components) ? components.pathItems : void 0;
-  const schemes = isRecord7(components) ? components.securitySchemes : void 0;
+  const components = isRecord8(spec) ? spec.components : void 0;
+  const pathItems = isRecord8(components) ? components.pathItems : void 0;
+  const schemes = isRecord8(components) ? components.securitySchemes : void 0;
   const schemeTypes = /* @__PURE__ */ new Map();
-  if (isRecord7(schemes)) {
+  if (isRecord8(schemes)) {
     for (const name of Object.keys(schemes)) {
       const type2 = resolveSchemeType(name, schemes, /* @__PURE__ */ new Set());
       if (type2 !== void 0) {
@@ -120791,7 +120893,7 @@ function createContext(spec) {
   }
   return {
     inlining: /* @__PURE__ */ new Set(),
-    pathItems: isRecord7(pathItems) ? pathItems : void 0,
+    pathItems: isRecord8(pathItems) ? pathItems : void 0,
     schemeTypes
   };
 }
@@ -120799,7 +120901,7 @@ function isMutualTls(name, context) {
   return context.schemeTypes.get(name) === "mutualTLS";
 }
 function convertRequirement(value2, context) {
-  if (!isRecord7(value2)) {
+  if (!isRecord8(value2)) {
     return deepClone(value2);
   }
   const entries = Object.entries(value2);
@@ -120899,10 +121001,10 @@ function resolvePathItemRef(value2, context) {
     return void 0;
   }
   const target = context.pathItems[name];
-  return isRecord7(target) ? [name, target] : void 0;
+  return isRecord8(target) ? [name, target] : void 0;
 }
 function convertPathItem(value2, context) {
-  if (!isRecord7(value2)) {
+  if (!isRecord8(value2)) {
     return deepClone(value2);
   }
   const resolved = resolvePathItemRef(value2, context);
@@ -121002,7 +121104,7 @@ function convertExample(value2) {
   });
 }
 function isQuerystringParameter(value2) {
-  return isRecord7(value2) && value2.in === "querystring";
+  return isRecord8(value2) && value2.in === "querystring";
 }
 function isRemovedRef(value2, removed) {
   const ref = getRef(value2);
@@ -121018,7 +121120,7 @@ function convertParameterOrHeader2(value2, context) {
       style: (item) => item === "cookie" ? DROP : deepClone(item)
     },
     (out, parameter) => {
-      const lostContent = isRecord7(parameter.content) && Object.keys(parameter.content).length > 0 && isRecord7(out.content) && Object.keys(out.content).length === 0;
+      const lostContent = isRecord8(parameter.content) && Object.keys(parameter.content).length > 0 && isRecord8(out.content) && Object.keys(out.content).length === 0;
       return lostContent ? DROP : out;
     }
   );
@@ -121139,7 +121241,7 @@ function convertComponents2(value2, context) {
   });
 }
 function losesEntireContent(value2, mediaTypes) {
-  if (!(isRecord7(value2) && isRecord7(value2.content))) {
+  if (!(isRecord8(value2) && isRecord8(value2.content))) {
     return false;
   }
   const entries = Object.values(value2.content);
@@ -121147,7 +121249,7 @@ function losesEntireContent(value2, mediaTypes) {
 }
 function indexRemovedComponentRefs(map2, prefix, mediaTypes, isDirectlyRemoved) {
   const removed = /* @__PURE__ */ new Set();
-  if (!isRecord7(map2)) {
+  if (!isRecord8(map2)) {
     return removed;
   }
   const entries = Object.entries(map2);
@@ -121169,12 +121271,12 @@ function indexRemovedComponentRefs(map2, prefix, mediaTypes, isDirectlyRemoved)
   return removed;
 }
 function createContext2(spec) {
-  const components = isRecord7(spec) ? spec.components : void 0;
-  const mediaTypes = isRecord7(components) && isRecord7(components.mediaTypes) ? components.mediaTypes : void 0;
+  const components = isRecord8(spec) ? spec.components : void 0;
+  const mediaTypes = isRecord8(components) && isRecord8(components.mediaTypes) ? components.mediaTypes : void 0;
   return {
     mediaTypes,
-    removedHeaderRefs: indexRemovedComponentRefs(isRecord7(components) ? components.headers : void 0, HEADERS_REF_PREFIX, mediaTypes, () => false),
-    removedParameterRefs: indexRemovedComponentRefs(isRecord7(components) ? components.parameters : void 0, PARAMETERS_REF_PREFIX, mediaTypes, isQuerystringParameter)
+    removedHeaderRefs: indexRemovedComponentRefs(isRecord8(components) ? components.headers : void 0, HEADERS_REF_PREFIX, mediaTypes, () => false),
+    removedParameterRefs: indexRemovedComponentRefs(isRecord8(components) ? components.parameters : void 0, PARAMETERS_REF_PREFIX, mediaTypes, isQuerystringParameter)
   };
 }
 function convertJsonSchemaDialect(value2) {
@@ -126249,20 +126351,19 @@ function createConfigApiRouter(deps) {
         add: route("/rest/config/pool/add", "Define a pool").input(ConfigPoolAddInputSchema).output(ConfigPoolAddOutputSchema).handler(
           ({ input: input2 }) => guarded(() => {
             requireIdentityNames(paths, input2.identities);
-            const created = addPool(paths, input2.name, input2.identities, input2.preference);
+            const created = addPool(paths, input2.name, input2.identities, { preference: input2.preference });
             return { action: "created", kind: "pool", name: input2.name, value: created };
           })
         ),
         set: route("/rest/config/pool/set", "Replace a pool's members, its preference or both").input(ConfigPoolSetInputSchema).output(ConfigPoolSetOutputSchema).handler(
           ({ input: input2 }) => guarded(() => {
-            requireChange(input2.identities !== void 0 || input2.preference !== void 0, "identities or preference");
-            const existing = requirePool(paths, input2.name);
+            const change = { identities: input2.identities, preference: input2.preference };
+            requireChange(isPoolChange(change), "identities or preference");
+            requirePool(paths, input2.name);
             if (input2.identities !== void 0) {
               requireIdentityNames(paths, input2.identities);
             }
-            const members2 = input2.identities ?? existing.identities;
-            const preference = input2.preference === void 0 ? existing.preference : input2.preference === false ? void 0 : input2.preference;
-            return { action: "updated", kind: "pool", name: input2.name, value: setPool(paths, input2.name, members2, preference) };
+            return { action: "updated", kind: "pool", name: input2.name, value: changePool(paths, input2.name, change) };
           })
         ),
         remove: route("/rest/config/pool/remove", "Delete a pool").input(ConfigPoolRemoveInputSchema).output(ConfigPoolRemoveOutputSchema).handler(({ input: input2 }) => {
@@ -127923,11 +128024,11 @@ function antigravityQuotaExhaustion(quota, model, nowMs) {
   const binding = spent.reduce((latest, next) => latest === void 0 || next.resetSec > latest.resetSec ? next : latest, void 0);
   return binding === void 0 ? void 0 : { window: binding.window, resetSec: binding.resetSec, exhaustedWindows: spent.map((entry) => entry.window) };
 }
-function isRecord8(value2) {
+function isRecord9(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function bucketToEntry(bucket, nowMs) {
-  if (!isRecord8(bucket) || typeof bucket.bucketId !== "string") {
+  if (!isRecord9(bucket) || typeof bucket.bucketId !== "string") {
     return void 0;
   }
   const remainingFraction = typeof bucket.remainingFraction === "number" && Number.isFinite(bucket.remainingFraction) ? bucket.remainingFraction : void 0;
@@ -127969,12 +128070,12 @@ async function fetchAntigravityQuotaSummary(params) {
   } catch {
     return void 0;
   }
-  if (!isRecord8(parsed) || !Array.isArray(parsed.groups)) {
+  if (!isRecord9(parsed) || !Array.isArray(parsed.groups)) {
     return void 0;
   }
   const map2 = {};
   for (const group of parsed.groups) {
-    if (!isRecord8(group) || !Array.isArray(group.buckets)) {
+    if (!isRecord9(group) || !Array.isArray(group.buckets)) {
       continue;
     }
     for (const bucket of group.buckets) {
@@ -128198,7 +128299,7 @@ function turnBlocks2(message) {
   }
   return blocks.map((block2) => isTextBlock(block2) ? { ...block2, text: systemReminder2(block2.text) } : block2);
 }
-function isRecord9(value2) {
+function isRecord10(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function messagesToGeminiContents(messages, names, toolIdToName) {
@@ -128244,7 +128345,7 @@ function messagesToGeminiContents(messages, names, toolIdToName) {
         ensureRole("model").push({
           functionCall: {
             name: sanitizedName,
-            args: isRecord9(block2.input) ? block2.input : {}
+            args: isRecord10(block2.input) ? block2.input : {}
           },
           // The relay remembered the signature the backend attached to this exact call; echoing it back is what the backend requires of a repeated function call. A call with none remembered (made before a door restart, evicted from the bounded store, or produced by another model in a resumed session) gets the backend's documented bypass, since history is resent whole on every request and a single unsigned call would otherwise fail the whole conversation for good.
           thoughtSignature: signature ?? UNVERIFIED_THOUGHT_SIGNATURE
@@ -129183,7 +129284,7 @@ var AcpStreamMessageSchema = external_exports.looseObject({
     chunk: external_exports.looseObject({}).optional()
   }).optional()
 });
-function isRecord10(value2) {
+function isRecord11(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function normalizeFinishReason(reason) {
@@ -129208,7 +129309,7 @@ function parseJsonRecord(raw) {
   }
   try {
     const parsed = JSON.parse(raw);
-    if (isRecord10(parsed)) {
+    if (isRecord11(parsed)) {
       return parsed;
     }
   } catch {
@@ -129983,15 +130084,15 @@ function readFrontDoorControlMaterial(fsPort, paths, purpose) {
 
 // src/frontdoor/rcLiveUsage.ts
 var RC_RATE_LIMIT_EVENT_TYPE = "rate_limit_event";
-function isRecord11(value2) {
+function isRecord12(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function rcRateLimitInfoOf(event) {
   const payload = event.envelope.payload;
-  if (!isRecord11(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
+  if (!isRecord12(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
     return void 0;
   }
-  if (!isRecord11(payload.rate_limit_info)) {
+  if (!isRecord12(payload.rate_limit_info)) {
     return void 0;
   }
   const parsed = RcRateLimitInfoSchema.safeParse(payload.rate_limit_info);
@@ -130027,7 +130128,7 @@ var RC_SELF_HOST_SCOPE_LIST = ["user:profile", "user:inference", "user:sessions:
 var RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS = 3600;
 var MS_PER_SECOND11 = 1e3;
 var HTTP_SERVICE_UNAVAILABLE = 503;
-function isRecord12(value2) {
+function isRecord13(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject2(body) {
@@ -130037,7 +130138,7 @@ function parseJsonObject2(body) {
   } catch {
     return void 0;
   }
-  return isRecord12(parsed) ? parsed : void 0;
+  return isRecord13(parsed) ? parsed : void 0;
 }
 function growthBookFeatures() {
   return {
@@ -130131,7 +130232,7 @@ var RC_SELF_HOST_RECORD_DIR = "rc-selfhost";
 var RC_SELF_HOST_RECORD_FILE = "credential.json";
 var SELF_HOST_EMAIL = "selfhost@agent-shim.invalid";
 var SELF_HOST_SUBSCRIPTION_TYPE = "max";
-function isRecord13(value2) {
+function isRecord14(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function readJsonObject(fs24, file2) {
@@ -130145,7 +130246,7 @@ function readJsonObject(fs24, file2) {
   } catch {
     return void 0;
   }
-  return isRecord13(parsed) ? parsed : void 0;
+  return isRecord14(parsed) ? parsed : void 0;
 }
 function readRcSelfHostRecord(fs24, frontdoorDir) {
   const parsed = readJsonObject(fs24, import_node_path49.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
@@ -130169,7 +130270,7 @@ function mintRcSelfHostCredential(deps) {
   const recordFile = import_node_path49.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
-  const existingOauth = isRecord13(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
+  const existingOauth = isRecord14(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
   const existingToken = typeof existingOauth?.accessToken === "string" && existingOauth.accessToken !== "" ? existingOauth.accessToken : void 0;
   const existingIsOwn = existingToken !== void 0 && previousRecord?.accessToken === existingToken;
   if (existingToken !== void 0 && !existingIsOwn && !deps.force) {
@@ -130186,7 +130287,7 @@ function mintRcSelfHostCredential(deps) {
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
-  const existingBlock = (value2) => isRecord13(value2) ? value2 : {};
+  const existingBlock = (value2) => isRecord14(value2) ? value2 : {};
   deps.fs.writeFilePrivate(claudeJsonFile, `${JSON.stringify({
     ...claudeJson,
     oauthAccount: {
@@ -130573,11 +130674,11 @@ var import_node_path50 = __toESM(require("node:path"), 1);
 function isSafeSessionId(sessionId) {
   return /^[A-Za-z0-9_-]+$/.test(sessionId);
 }
-function isRecord14(value2) {
+function isRecord15(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function credentialOfJson(parsed) {
-  if (!isRecord14(parsed)) {
+  if (!isRecord15(parsed)) {
     return void 0;
   }
   const { authorization, anthropicVersion, anthropicClientPlatform } = parsed;
@@ -130607,7 +130708,7 @@ function createRcCredentialStore(fs24, dir) {
     } catch {
       return void 0;
     }
-    return isRecord14(parsed) ? parsed : void 0;
+    return isRecord15(parsed) ? parsed : void 0;
   };
   return {
     read: (sessionId) => {
@@ -131175,7 +131276,7 @@ init_capability();
 // src/frontdoor/rcSelfHostEndpoints.ts
 var RC_SOURCE_WORKER = "worker";
 var RC_SOURCE_CLIENT = "client";
-function isRecord15(value2) {
+function isRecord16(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject3(body) {
@@ -131185,7 +131286,7 @@ function parseJsonObject3(body) {
   } catch {
     return void 0;
   }
-  return isRecord15(parsed) ? parsed : void 0;
+  return isRecord16(parsed) ? parsed : void 0;
 }
 function nonEmptyString2(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -131259,7 +131360,7 @@ async function serveRcClientChannels(ctx, tail, method, maxBatchEvents) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord15(event) || !isRecord15(event.payload)) {
+      if (!isRecord16(event) || !isRecord16(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a teleport write is an object carrying one payload object" } });
         return true;
       }
@@ -131359,7 +131460,7 @@ async function serveRcCompatSessions(ctx, pathname, compatPath) {
 // src/frontdoor/rcSelfHostConversations.ts
 var RC_CONVERSATIONS_PATH_PREFIX = "/v1/code/conversations";
 var RC_CONVERSATION_ID_PREFIX = "conv_";
-function isRecord16(value2) {
+function isRecord17(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject4(body) {
@@ -131369,7 +131470,7 @@ function parseJsonObject4(body) {
   } catch {
     return void 0;
   }
-  return isRecord16(parsed) ? parsed : void 0;
+  return isRecord17(parsed) ? parsed : void 0;
 }
 function nonEmptyString3(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -131423,7 +131524,7 @@ async function serveRcConversations(ctx, pathname, method) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord16(event) || !isRecord16(event.payload)) {
+      if (!isRecord17(event) || !isRecord17(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
         return;
       }
@@ -131716,7 +131817,7 @@ var RC_SELF_HOST_WORKER_EPOCH = 1;
 var RC_STREAM_EVENT_NAME = "client_event";
 var CONFLICT_REASON_HEADER2 = "x-ccr-conflict-reason";
 var CONFLICT_REASON_EPOCH_STALE = "epoch_stale";
-function isRecord17(value2) {
+function isRecord18(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function isWebSearchRefusal(value2) {
@@ -131800,7 +131901,7 @@ function parseJsonObject5(body) {
   } catch {
     return void 0;
   }
-  return isRecord17(parsed) ? parsed : void 0;
+  return isRecord18(parsed) ? parsed : void 0;
 }
 function mintWorkerJwt(randomToken, issuedAt) {
   const encode3 = (value2) => Buffer.from(JSON.stringify(value2), "utf8").toString("base64url");
@@ -132060,7 +132161,7 @@ data: ${JSON.stringify(envelope)}
         if (status !== void 0) {
           session.workerStatus = status;
         }
-        if (isRecord17(body?.external_metadata)) {
+        if (isRecord18(body?.external_metadata)) {
           session.externalMetadata = body.external_metadata;
         }
         await answerJson2(response, HTTP_STATUS.ok, {});
@@ -132090,7 +132191,7 @@ data: ${JSON.stringify(envelope)}
         }
         const results = [];
         for (const event of events) {
-          if (!isRecord17(event) || !isRecord17(event.payload)) {
+          if (!isRecord18(event) || !isRecord18(event.payload)) {
             await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a batch is an object carrying one payload object" } });
             return;
           }
@@ -132123,7 +132224,7 @@ data: ${JSON.stringify(envelope)}
           return;
         }
         for (const event of events) {
-          if (isRecord17(event)) {
+          if (isRecord18(event)) {
             session.internalEvents.push({ eventId: deps.newUuid(), body: event });
           }
         }
@@ -132219,7 +132320,7 @@ data: ${JSON.stringify(envelope)}
       }
       const results = [];
       for (const event of events) {
-        if (!isRecord17(event) || !isRecord17(event.payload)) {
+        if (!isRecord18(event) || !isRecord18(event.payload)) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
           return;
         }
@@ -132409,7 +132510,7 @@ function createSseParser() {
     }
   };
 }
-function isRecord18(value2) {
+function isRecord19(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function sequenceNumOf(value2) {
@@ -132431,7 +132532,7 @@ function parseRcStreamEnvelope(parsed) {
   } catch {
     return void 0;
   }
-  if (!isRecord18(data)) {
+  if (!isRecord19(data)) {
     return void 0;
   }
   const eventType = data.event_type;
@@ -144980,7 +145081,7 @@ function registerPoolCommand(program2, deps) {
     pool.command("add <name>").description("Define a pool. Fails if one with this name already exists.").option("--identity <name>", "A member: an identity name, or pool:<name> to nest another pool with its own policy (repeatable).", collectRepeated).addOption(new Option("--preference <mode>", PREFERENCE_DESCRIPTION).choices(POOL_PREFERENCES)).option("--json", "Print the result as JSON.").action((name, options) => {
       const members2 = membersOf(options);
       requireIdentityNames(paths, members2);
-      const created = addPool(paths, name, members2, options.preference);
+      const created = addPool(paths, name, members2, { preference: options.preference });
       reportMutation(options.json, { action: "created", kind: "pool", name, value: created }, () => {
         console.log(`Created pool "${name}" with ${members2.join(", ")}.`);
       });
@@ -144989,18 +145090,17 @@ function registerPoolCommand(program2, deps) {
   );
   withExamples(
     pool.command("set <name>").description("Replace a pool's members, its preference, or both.").option("--identity <name>", "A member: an identity name, or pool:<name> to nest another pool with its own policy (repeatable); the full new list. Kept as-is when this option is absent.", collectRepeated).addOption(new Option("--preference <mode>", PREFERENCE_DESCRIPTION).choices(POOL_PREFERENCES)).option("--no-preference", "Clear the preference back to the default, score.").option("--json", "Print the result as JSON.").action((name, options) => {
-      const existing = requirePool(paths, name);
-      if (options.identity === void 0 && options.preference === void 0) {
+      requirePool(paths, name);
+      const change = { identities: options.identity, preference: options.preference };
+      if (!isPoolChange(change)) {
         throw new UsageError("Nothing to change: pass --identity, --preference or --no-preference.");
       }
-      const members2 = options.identity === void 0 ? existing.identities : membersOf(options);
       if (options.identity !== void 0) {
         requireIdentityNames(paths, membersOf(options));
       }
-      const preference = options.preference === void 0 ? existing.preference : options.preference === false ? void 0 : options.preference;
-      const updated = setPool(paths, name, members2, preference);
+      const updated = changePool(paths, name, change);
       reportMutation(options.json, { action: "updated", kind: "pool", name, value: updated }, () => {
-        console.log(`Pool "${name}" now has ${members2.map(poolMemberIdentity).join(", ")}.`);
+        console.log(`Pool "${name}" now has ${updated.identities.map(poolMemberIdentity).join(", ")}.`);
       });
     }),
     ["agent-shim pool set subs --identity work --identity personal --identity spare", "agent-shim pool set subs --preference listed"]
@@ -145010,7 +145110,7 @@ function registerPoolCommand(program2, deps) {
       const pools = readPools(paths);
       const active = readActiveIdentity2(paths);
       if (options.json === true) {
-        printJson(Object.entries(pools).map(([name, entry]) => ({ name, identities: entry.identities, ...entry.preference === void 0 ? {} : { preference: entry.preference }, active: active === `${POOL_SELECTOR_PREFIX}${name}` })));
+        printJson(Object.entries(pools).map(([name, entry]) => ({ name, identities: entry.identities, ...poolPolicyOf(entry), active: active === `${POOL_SELECTOR_PREFIX}${name}` })));
         return;
       }
       const names = Object.keys(pools).sort();
@@ -145020,7 +145120,7 @@ function registerPoolCommand(program2, deps) {
       }
       for (const name of names) {
         const entry = pools[name];
-        console.log(`${active === `${POOL_SELECTOR_PREFIX}${name}` ? "*" : " "} ${name}: ${(entry?.identities ?? []).map(poolMemberIdentity).join(", ")}${entry?.preference === void 0 ? "" : " (preference: listed)"}`);
+        console.log(`${active === `${POOL_SELECTOR_PREFIX}${name}` ? "*" : " "} ${name}: ${(entry?.identities ?? []).map(poolMemberIdentity).join(", ")}${entry?.preference === void 0 ? "" : ` (preference: ${entry.preference})`}`);
       }
     }),
     ["agent-shim pool list", "agent-shim pool list --json"]
@@ -145029,7 +145129,7 @@ function registerPoolCommand(program2, deps) {
     pool.command("show <name>").description("Show one pool's members.").option("--json", "Print the pool as JSON.").action((name, options) => {
       const entry = requirePool(paths, name);
       if (options.json === true) {
-        printJson({ name, identities: entry.identities, ...entry.preference === void 0 ? {} : { preference: entry.preference } });
+        printJson({ name, identities: entry.identities, ...poolPolicyOf(entry) });
         return;
       }
       console.log(`Pool: ${name}`);