claude-use 11.18.0 → 11.19.1

package/dist/index.cjs

@@ -583,25 +583,102 @@ var init_schema = __esm({
   }
 });
 
+// src/config/unrecognisedKeys.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function parseIgnoringUnrecognisedKeys(schema, raw) {
+  const first = schema.safeParse(raw);
+  if (first.success) {
+    return { success: true, data: first.data, ignored: [] };
+  }
+  const unrecognised = first.error.issues.filter((issue) => issue.code === "unrecognized_keys");
+  const others = first.error.issues.filter((issue) => issue.code !== "unrecognized_keys");
+  if (others.length > 0) {
+    return { success: false, issues: others };
+  }
+  const stripped = structuredClone(raw);
+  const ignored = [];
+  for (const issue of unrecognised) {
+    let holder = stripped;
+    for (const step of issue.path) {
+      holder = isRecord(holder) ? holder[step] : void 0;
+    }
+    if (isRecord(holder)) {
+      const values = Object.fromEntries(issue.keys.map((key) => [key, holder[key]]));
+      for (const key of issue.keys) {
+        Reflect.deleteProperty(holder, key);
+      }
+      ignored.push({ path: issue.path, keys: issue.keys, values });
+    }
+  }
+  const second = schema.safeParse(stripped);
+  return second.success ? { success: true, data: second.data, ignored } : { success: false, issues: second.error.issues };
+}
+function describeIgnoredKeys(filePath, ignored) {
+  const places = ignored.map(({ path: path41, keys }) => `${path41.length === 0 ? "" : `${path41.map(String).join(".")}.`}${keys.join(", ")}`);
+  return `${filePath} has settings this version of agent-shim does not know and ignores: ${places.join("; ")}. A newer release may read them.`;
+}
+function noteIgnoredKeys(filePath, ignored) {
+  if (ignored.length === 0) {
+    ignoredByFile.delete(filePath);
+    return;
+  }
+  ignoredByFile.set(filePath, ignored);
+  const message = `agent-shim: warning: ${describeIgnoredKeys(filePath, ignored)}
+`;
+  if (!warned.has(message)) {
+    warned.add(message);
+    process.stderr.write(message);
+  }
+}
+function restoreIgnoredKeys(filePath, value) {
+  const ignored = ignoredByFile.get(filePath);
+  if (ignored === void 0) {
+    return value;
+  }
+  const restored = structuredClone(value);
+  for (const { path: path41, values } of ignored) {
+    let holder = restored;
+    for (const step of path41) {
+      holder = isRecord(holder) ? holder[step] : void 0;
+    }
+    if (isRecord(holder)) {
+      for (const [key, held] of Object.entries(values)) {
+        holder[key] = held;
+      }
+    }
+  }
+  return restored;
+}
+var warned, ignoredByFile;
+var init_unrecognisedKeys = __esm({
+  "src/config/unrecognisedKeys.ts"() {
+    "use strict";
+    warned = /* @__PURE__ */ new Set();
+    ignoredByFile = /* @__PURE__ */ new Map();
+  }
+});
+
 // src/config/load.ts
 function createExplorer(moduleName = "agent-shim") {
   return (0, import_cosmiconfig.cosmiconfigSync)(moduleName, { searchPlaces: [] });
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function captureEntryOrder(value) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     return [];
   }
   const entries = value.entries;
-  if (!isRecord(entries)) {
+  if (!isRecord2(entries)) {
     return [];
   }
   return Object.keys(entries);
 }
 function captureRuleEntryOrders(value) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     return [];
   }
   const rules = value.rules;
@@ -616,7 +693,7 @@ function cosmiconfigReader(explorer = createExplorer()) {
     try {
       result = explorer.load(filepath);
     } catch (error) {
-      const code = isRecord(error) ? error.code : void 0;
+      const code = isRecord2(error) ? error.code : void 0;
       if (code === "ENOENT") {
         return void 0;
       }
@@ -633,10 +710,11 @@ function loadConfigFile(filepath, schema, read = cosmiconfigReader()) {
   if (raw === void 0) {
     return void 0;
   }
-  const parsed = schema.safeParse(raw);
+  const parsed = parseIgnoringUnrecognisedKeys(schema, raw);
   if (!parsed.success) {
-    throw new ConfigValidationError(filepath, parsed.error.issues);
+    throw new ConfigValidationError(filepath, parsed.issues);
   }
+  noteIgnoredKeys(filepath, parsed.ignored);
   return {
     filepath,
     config: parsed.data,
@@ -650,6 +728,7 @@ var init_load = __esm({
     "use strict";
     import_cosmiconfig = require("cosmiconfig");
     init_cliError();
+    init_unrecognisedKeys();
     ConfigValidationError = class extends CliError {
       constructor(filepath, issues) {
         const detail = issues.map((issue) => `  ${issue.path.join(".") || "(root)"}: ${issue.message}`).join("\n");
@@ -675,10 +754,11 @@ function readJson(filePath, schema, storeFs = nodeStoreFs) {
     return void 0;
   }
   const parsed = JSON.parse(raw);
-  const result = schema.safeParse(parsed);
+  const result = parseIgnoringUnrecognisedKeys(schema, parsed);
   if (!result.success) {
-    throw new ConfigValidationError(filePath, result.error.issues);
+    throw new ConfigValidationError(filePath, result.issues);
   }
+  noteIgnoredKeys(filePath, result.ignored);
   return result.data;
 }
 function writeTextAtomic(filePath, contents, storeFs = nodeStoreFs) {
@@ -694,7 +774,7 @@ function writeTextAtomic(filePath, contents, storeFs = nodeStoreFs) {
   }
 }
 function writeJsonAtomic(filePath, data, storeFs = nodeStoreFs) {
-  writeTextAtomic(filePath, `${JSON.stringify(data, null, 2)}
+  writeTextAtomic(filePath, `${JSON.stringify(restoreIgnoredKeys(filePath, data), null, 2)}
 `, storeFs);
 }
 function applyPatch(filePath, schema, patch, options = {}) {
@@ -720,6 +800,7 @@ var init_store = __esm({
     import_node_path3 = __toESM(require("node:path"), 1);
     import_node_crypto = require("node:crypto");
     init_load();
+    init_unrecognisedKeys();
     nodeStoreFs = {
       readFileUtf8(filePath) {
         try {
@@ -2839,7 +2920,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.18.0",
+      version: "11.19.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -6203,7 +6284,7 @@ function formatCredentialSummary(summary) {
 function describeCredential(credential) {
   return formatCredentialSummary(summariseCredential(credential));
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function unpackKeyringToken(raw) {
@@ -6215,7 +6296,7 @@ function unpackKeyringToken(raw) {
     const base64Str = trimmed.slice(GO_KEYRING_BASE64_PREFIX.length);
     const decoded = Buffer.from(base64Str, "base64").toString("utf8");
     const parsed = JSON.parse(decoded);
-    if (isRecord5(parsed) && isRecord5(parsed.token)) {
+    if (isRecord6(parsed) && isRecord6(parsed.token)) {
       const accessToken = parsed.token.access_token;
       if (typeof accessToken === "string" && accessToken.trim() !== "") {
         return accessToken.trim();
@@ -6329,14 +6410,14 @@ function providerJsonPath(paths, name) {
 function providerExists(paths, name) {
   return import_node_fs6.default.existsSync(providerJsonPath(paths, name));
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function legacyProviderConversion(raw) {
-  if (!isRecord6(raw) || "credential" in raw) {
+  if (!isRecord7(raw) || "credential" in raw) {
     return void 0;
   }
-  const env = isRecord6(raw.env) ? raw.env : void 0;
+  const env = isRecord7(raw.env) ? raw.env : void 0;
   const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
   const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
   if (fields.length === 0) {
@@ -6369,10 +6450,11 @@ function parseProviderFile(filePath, raw) {
   if (conversion !== void 0) {
     throw new LegacyProviderFileError(filePath, conversion);
   }
-  const parsed = ProviderSchema.safeParse(raw);
+  const parsed = parseIgnoringUnrecognisedKeys(ProviderSchema, raw);
   if (!parsed.success) {
-    throw new ConfigValidationError(filePath, parsed.error.issues);
+    throw new ConfigValidationError(filePath, parsed.issues);
   }
+  noteIgnoredKeys(filePath, parsed.ignored);
   return parsed.data;
 }
 function readProvider(paths, name) {
@@ -6582,6 +6664,7 @@ var init_providersStore = __esm({
     import_node_path25 = __toESM(require("node:path"), 1);
     init_load();
     init_store();
+    init_unrecognisedKeys();
     init_schema();
     init_cliError();
     init_credential();
@@ -7564,7 +7647,7 @@ function resolvePoolLaunch(params) {
   if (stickyRead.problem !== void 0) {
     log.warn(`agent-shim: ${stickyRead.problem}; ignoring the last-pick record`);
   }
-  const warned = /* @__PURE__ */ new Set();
+  const warned2 = /* @__PURE__ */ new Set();
   for (; ; ) {
     const nowMs = params.now();
     let graph;
@@ -7588,8 +7671,8 @@ function resolvePoolLaunch(params) {
     }
     for (const gone of graph.missing) {
       const key = `${gone.pool}:${gone.identity}`;
-      if (!warned.has(key)) {
-        warned.add(key);
+      if (!warned2.has(key)) {
+        warned2.add(key);
         log.warn(`agent-shim: pool "${gone.pool}" names identity "${gone.identity}", which does not exist; skipping it`);
       }
     }
@@ -9081,6 +9164,7 @@ __export(index_exports, {
   buildRcSetPermissionModePayload: () => buildRcSetPermissionModePayload,
   buildRcUserMessagePayload: () => buildRcUserMessagePayload,
   carryOver: () => carryOver,
+  changePool: () => changePool,
   checkReportHasWarnings: () => checkReportHasWarnings,
   checkReportToJson: () => checkReportToJson,
   collectCheckReport: () => collectCheckReport,
@@ -9238,7 +9322,6 @@ __export(index_exports, {
   setDefaultConfigProfile: () => setDefaultConfigProfile,
   setGlobalDefaultProfile: () => setGlobalDefaultProfile,
   setIdentityCredential: () => setIdentityCredential,
-  setPool: () => setPool,
   setProfileCategories: () => setProfileCategories,
   setProfileEntries: () => setProfileEntries,
   setProfileLaunchFlags: () => setProfileLaunchFlags,
@@ -10304,7 +10387,7 @@ var LiveTaskSchema = import_zod5.z.strictObject({
   observedAt: import_zod5.z.number()
 });
 var SYSTEM_SUBTYPES = ["task_started", "task_progress", "task_updated", "task_notification", "background_tasks_changed"];
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringField(record, field) {
@@ -10321,7 +10404,7 @@ function booleanField(record, field) {
 }
 function usageOf(record) {
   const raw = record.usage;
-  if (!isRecord2(raw)) {
+  if (!isRecord3(raw)) {
     return void 0;
   }
   const totalTokens = numberField(raw, "total_tokens");
@@ -10353,7 +10436,7 @@ function bounded(book) {
   return book;
 }
 function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
-  if (!isRecord2(payload) || payload.type !== "system") {
+  if (!isRecord3(payload) || payload.type !== "system") {
     return book;
   }
   const subtype = payload.subtype;
@@ -10369,8 +10452,8 @@ function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
   if (subtype === "background_tasks_changed") {
     const tasks = Array.isArray(payload.tasks) ? payload.tasks : [];
     for (const raw of tasks) {
-      const taskId2 = isRecord2(raw) ? stringField(raw, "task_id") : void 0;
-      if (isRecord2(raw) && taskId2 !== void 0) {
+      const taskId2 = isRecord3(raw) ? stringField(raw, "task_id") : void 0;
+      if (isRecord3(raw) && taskId2 !== void 0) {
         upsert(taskId2, { runId: stringField(raw, "run_id"), taskType: stringField(raw, "task_type"), description: stringField(raw, "description") });
       }
     }
@@ -10393,7 +10476,7 @@ function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
   } else if (subtype === "task_progress") {
     upsert(taskId, { ...common, subagentType: stringField(payload, "subagent_type"), lastToolName: stringField(payload, "last_tool_name"), usage: usageOf(payload) });
   } else if (subtype === "task_updated") {
-    const patch = isRecord2(payload.patch) ? payload.patch : {};
+    const patch = isRecord3(payload.patch) ? payload.patch : {};
     upsert(taskId, { runId: stringField(payload, "run_id"), status: stringField(patch, "status") });
   } else {
     upsert(taskId, { ...common, status: stringField(payload, "status"), outputFile: stringField(payload, "output_file"), summary: stringField(payload, "summary"), usage: usageOf(payload) });
@@ -10475,7 +10558,7 @@ function sessionCreateId(body) {
   const id = session.id;
   return typeof id === "string" && id.startsWith(RC_SESSION_ID_PREFIX) ? id : void 0;
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonObject(body) {
@@ -10485,7 +10568,7 @@ function parseJsonObject(body) {
   } catch {
     return void 0;
   }
-  return isRecord3(parsed) ? parsed : void 0;
+  return isRecord4(parsed) ? parsed : void 0;
 }
 function nonEmptyString(record, field) {
   const value = record === void 0 ? void 0 : record[field];
@@ -10506,11 +10589,11 @@ function payloadEventsOf(body) {
   }
   const payloads = [];
   for (const event of events) {
-    if (!isRecord3(event)) {
+    if (!isRecord4(event)) {
       continue;
     }
     const payload = event.payload;
-    if (!isRecord3(payload)) {
+    if (!isRecord4(payload)) {
       continue;
     }
     payloads.push(payload);
@@ -10525,7 +10608,7 @@ function pendingOfControlRequestPayload(payload) {
   if (requestId === void 0) {
     return void 0;
   }
-  const request4 = isRecord3(payload.request) ? payload.request : void 0;
+  const request4 = isRecord4(payload.request) ? payload.request : void 0;
   const subtype = nonEmptyString(request4, "subtype");
   const type = subtype ?? "control_request";
   let summary = "";
@@ -10542,7 +10625,7 @@ function answeredRequestIdsOfControlResponsePayload(payload) {
   if (payload.type !== "control_response") {
     return [];
   }
-  const response = isRecord3(payload.response) ? payload.response : void 0;
+  const response = isRecord4(payload.response) ? payload.response : void 0;
   const id = nonEmptyString(response, "request_id") ?? nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
   return id === void 0 ? [] : [id];
 }
@@ -10771,7 +10854,7 @@ function createRcSessionTracker(deps) {
         return;
       }
       entry.sequenceNum = entry.sequenceNum === void 0 || event.sequence_num > entry.sequenceNum ? event.sequence_num : entry.sequenceNum;
-      if (!isRecord3(event.payload)) {
+      if (!isRecord4(event.payload)) {
         return;
       }
       entry.liveTasks = applyAgentTaskEvent(entry.liveTasks, sessionId, event.payload, deps.now());
@@ -12194,11 +12277,11 @@ var import_node_path10 = __toESM(require("node:path"), 1);
 function isSafeSessionId(sessionId) {
   return /^[A-Za-z0-9_-]+$/.test(sessionId);
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function credentialOfJson(parsed) {
-  if (!isRecord4(parsed)) {
+  if (!isRecord5(parsed)) {
     return void 0;
   }
   const { authorization, anthropicVersion, anthropicClientPlatform } = parsed;
@@ -12228,7 +12311,7 @@ function createRcCredentialStore(fs13, dir) {
     } catch {
       return void 0;
     }
-    return isRecord4(parsed) ? parsed : void 0;
+    return isRecord5(parsed) ? parsed : void 0;
   };
   return {
     read: (sessionId) => {
@@ -13164,7 +13247,13 @@ function validateMembers(pools, name, members) {
     throw new UsageError(`Member "pool:${cycle[1] ?? name}" would make pool "${name}" reach itself: ${cycle.join(" -> ")}. A pool cannot nest itself, directly or through another pool.`);
   }
 }
-function addPool(paths, name, identities, preference) {
+function poolPolicyOf(policy) {
+  return { ...policy.preference === void 0 ? {} : { preference: policy.preference } };
+}
+function isPoolChange(change) {
+  return change.identities !== void 0 || change.preference !== void 0;
+}
+function addPool(paths, name, identities, policy = {}) {
   if (!PoolNameSchema.safeParse(name).success) {
     throw new InvalidPoolNameError(name);
   }
@@ -13173,14 +13262,16 @@ function addPool(paths, name, identities, preference) {
     throw new PoolAlreadyExistsError(name);
   }
   validateMembers(pools, name, identities);
-  const pool = { identities: [...identities], ...preference === void 0 ? {} : { preference } };
+  const pool = { identities: [...identities], ...poolPolicyOf(policy) };
   writePools(paths, { ...pools, [name]: pool });
   return pool;
 }
-function setPool(paths, name, identities, preference) {
-  requirePool(paths, name);
+function changePool(paths, name, change) {
+  const existing = requirePool(paths, name);
+  const identities = change.identities ?? existing.identities;
   validateMembers(readPools(paths), name, identities);
-  const pool = { identities: [...identities], ...preference === void 0 ? {} : { preference } };
+  const preference = change.preference === void 0 ? existing.preference : change.preference === false ? void 0 : change.preference;
+  const pool = { identities: [...identities], ...poolPolicyOf({ preference }) };
   writePools(paths, { ...readPools(paths), [name]: pool });
   return pool;
 }
@@ -14165,6 +14256,7 @@ function parseSiwcFile(raw, filePath) {
 
 // src/doctorReport.ts
 init_load();
+init_unrecognisedKeys();
 init_schema();
 init_credential();
 init_credentialCache();
@@ -14375,11 +14467,11 @@ function validateJson(schema, input) {
   } catch (error) {
     return { ok: false, message: `${input.path} is not valid JSON: ${error instanceof Error ? error.message : String(error)}` };
   }
-  const result = schema.safeParse(parsed);
+  const result = parseIgnoringUnrecognisedKeys(schema, parsed);
   if (!result.success) {
-    return { ok: false, message: new ConfigValidationError(input.path, result.error.issues).message };
+    return { ok: false, message: new ConfigValidationError(input.path, result.issues).message };
   }
-  return { ok: true, data: result.data };
+  return { ok: true, data: result.data, ...result.ignored.length === 0 ? {} : { warning: describeIgnoredKeys(input.path, result.ignored) } };
 }
 function tcpPortEraRecord(raw) {
   let parsed;
@@ -14472,11 +14564,14 @@ function pushProvider(push, entry, cacheEnv, signIn) {
     push("provider", "fail", new LegacyProviderFileError(entry.path, conversion).message, entry.name);
     return;
   }
-  const validated3 = ProviderSchema.safeParse(parsed);
+  const validated3 = parseIgnoringUnrecognisedKeys(ProviderSchema, parsed);
   if (!validated3.success) {
-    push("provider", "fail", new ConfigValidationError(entry.path, validated3.error.issues).message, entry.name);
+    push("provider", "fail", new ConfigValidationError(entry.path, validated3.issues).message, entry.name);
     return;
   }
+  if (validated3.ignored.length > 0) {
+    push("provider", "warn", describeIgnoredKeys(entry.path, validated3.ignored), entry.name);
+  }
   const cache = cacheClause(cacheEnv, `provider ${entry.name}`, validated3.data.credential);
   push("provider", cache.unreadable ? "fail" : "pass", `${entry.name} is valid (${describeProviderEndpoint(validated3.data)}, credential ${describeCredential(validated3.data.credential)})${cache.text}.`, entry.name);
   if (validated3.data.env?.ENABLE_TOOL_SEARCH === void 0) {
@@ -14511,6 +14606,13 @@ function runDoctor(params) {
   const push = (section, severity, message, subject) => {
     findings.push({ section, severity, message, ...subject === void 0 ? {} : { subject } });
   };
+  const validate = (schema, input, section, subject) => {
+    const validated3 = validateJson(schema, input);
+    if (validated3.ok && validated3.warning !== void 0) {
+      push(section, "warn", validated3.warning, subject);
+    }
+    return validated3;
+  };
   const checkPin = (section, subject, where, version) => {
     const installed = params.installedClaudeVersions;
     if (version === void 0 || installed === void 0 || installed.includes(version)) {
@@ -14550,7 +14652,7 @@ function runDoctor(params) {
   pushLegacyName(push, params);
   const profileSources = /* @__PURE__ */ new Map();
   for (const entry of params.configProfiles) {
-    const validated3 = validateJson(ConfigProfileSchema, entry);
+    const validated3 = validate(ConfigProfileSchema, entry, "config-profile", entry.name);
     if (!validated3.ok) {
       push("config-profile", "fail", validated3.message, entry.name);
       continue;
@@ -14572,7 +14674,7 @@ function runDoctor(params) {
   const validProfileNames = new Set(profileSources.keys());
   const validIdentityNames = /* @__PURE__ */ new Set();
   for (const entry of params.identities) {
-    const validated3 = validateJson(IdentitySchema, entry);
+    const validated3 = validate(IdentitySchema, entry, "identity", entry.name);
     if (!validated3.ok) {
       push("identity", "fail", validated3.message, entry.name);
       continue;
@@ -14658,7 +14760,7 @@ function runDoctor(params) {
   if (params.directoryRules.raw === void 0) {
     push("directory-rules", "pass", "No directory-rules.json configured.");
   } else {
-    const validated3 = validateJson(DirectoryRulesSchema, params.directoryRules);
+    const validated3 = validate(DirectoryRulesSchema, params.directoryRules, "directory-rules");
     if (!validated3.ok) {
       push("directory-rules", "fail", validated3.message);
     } else {
@@ -14683,7 +14785,7 @@ function runDoctor(params) {
   if (params.globalConfig.raw === void 0) {
     push("global-config", "pass", "No config.json configured.");
   } else {
-    const validated3 = validateJson(GlobalConfigSchema, params.globalConfig);
+    const validated3 = validate(GlobalConfigSchema, params.globalConfig, "global-config");
     if (!validated3.ok) {
       push("global-config", "fail", validated3.message);
     } else {
@@ -14703,7 +14805,7 @@ function runDoctor(params) {
   if (params.categoriesLocal.raw === void 0) {
     push("categories-local", "pass", "No categories.local.json configured.");
   } else {
-    const validated3 = validateJson(CategoryClassificationOverlaySchema, params.categoriesLocal);
+    const validated3 = validate(CategoryClassificationOverlaySchema, params.categoriesLocal, "categories-local");
     push(
       "categories-local",
       validated3.ok ? "pass" : "fail",
@@ -15517,20 +15619,19 @@ function createConfigApiRouter(deps) {
         add: route("/rest/config/pool/add", "Define a pool").input(ConfigPoolAddInputSchema).output(ConfigPoolAddOutputSchema).handler(
           ({ input }) => guarded(() => {
             requireIdentityNames(paths, input.identities);
-            const created = addPool(paths, input.name, input.identities, input.preference);
+            const created = addPool(paths, input.name, input.identities, { preference: input.preference });
             return { action: "created", kind: "pool", name: input.name, value: created };
           })
         ),
         set: route("/rest/config/pool/set", "Replace a pool's members, its preference or both").input(ConfigPoolSetInputSchema).output(ConfigPoolSetOutputSchema).handler(
           ({ input }) => guarded(() => {
-            requireChange(input.identities !== void 0 || input.preference !== void 0, "identities or preference");
-            const existing = requirePool(paths, input.name);
+            const change = { identities: input.identities, preference: input.preference };
+            requireChange(isPoolChange(change), "identities or preference");
+            requirePool(paths, input.name);
             if (input.identities !== void 0) {
               requireIdentityNames(paths, input.identities);
             }
-            const members = input.identities ?? existing.identities;
-            const preference = input.preference === void 0 ? existing.preference : input.preference === false ? void 0 : input.preference;
-            return { action: "updated", kind: "pool", name: input.name, value: setPool(paths, input.name, members, preference) };
+            return { action: "updated", kind: "pool", name: input.name, value: changePool(paths, input.name, change) };
           })
         ),
         remove: route("/rest/config/pool/remove", "Delete a pool").input(ConfigPoolRemoveInputSchema).output(ConfigPoolRemoveOutputSchema).handler(({ input }) => {
@@ -16314,15 +16415,15 @@ function createQuotaExpiringPublisher(hub, deps) {
 
 // src/frontdoor/rcLiveUsage.ts
 var RC_RATE_LIMIT_EVENT_TYPE = "rate_limit_event";
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function rcRateLimitInfoOf(event) {
   const payload = event.envelope.payload;
-  if (!isRecord7(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
+  if (!isRecord8(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
     return void 0;
   }
-  if (!isRecord7(payload.rate_limit_info)) {
+  if (!isRecord8(payload.rate_limit_info)) {
     return void 0;
   }
   const parsed = RcRateLimitInfoSchema.safeParse(payload.rate_limit_info);
@@ -16410,7 +16511,7 @@ function createSseParser() {
     }
   };
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function sequenceNumOf(value) {
@@ -16432,7 +16533,7 @@ function parseRcStreamEnvelope(parsed) {
   } catch {
     return void 0;
   }
-  if (!isRecord8(data)) {
+  if (!isRecord9(data)) {
     return void 0;
   }
   const eventType = data.event_type;
@@ -16673,7 +16774,7 @@ init_capability();
 // src/frontdoor/rcSelfHostEndpoints.ts
 var RC_SOURCE_WORKER = "worker";
 var RC_SOURCE_CLIENT = "client";
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonObject2(body) {
@@ -16683,7 +16784,7 @@ function parseJsonObject2(body) {
   } catch {
     return void 0;
   }
-  return isRecord9(parsed) ? parsed : void 0;
+  return isRecord10(parsed) ? parsed : void 0;
 }
 function nonEmptyString2(record, field) {
   const value = record === void 0 ? void 0 : record[field];
@@ -16757,7 +16858,7 @@ async function serveRcClientChannels(ctx, tail, method, maxBatchEvents) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord9(event) || !isRecord9(event.payload)) {
+      if (!isRecord10(event) || !isRecord10(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a teleport write is an object carrying one payload object" } });
         return true;
       }
@@ -16857,7 +16958,7 @@ async function serveRcCompatSessions(ctx, pathname, compatPath) {
 // src/frontdoor/rcSelfHostConversations.ts
 var RC_CONVERSATIONS_PATH_PREFIX = "/v1/code/conversations";
 var RC_CONVERSATION_ID_PREFIX = "conv_";
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonObject3(body) {
@@ -16867,7 +16968,7 @@ function parseJsonObject3(body) {
   } catch {
     return void 0;
   }
-  return isRecord10(parsed) ? parsed : void 0;
+  return isRecord11(parsed) ? parsed : void 0;
 }
 function nonEmptyString3(record, field) {
   const value = record === void 0 ? void 0 : record[field];
@@ -16921,7 +17022,7 @@ async function serveRcConversations(ctx, pathname, method) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord10(event) || !isRecord10(event.payload)) {
+      if (!isRecord11(event) || !isRecord11(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
         return;
       }
@@ -16953,7 +17054,7 @@ var RC_SELF_HOST_SCOPE_LIST = ["user:profile", "user:inference", "user:sessions:
 var RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS = 3600;
 var MS_PER_SECOND5 = 1e3;
 var HTTP_SERVICE_UNAVAILABLE = 503;
-function isRecord11(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonObject4(body) {
@@ -16963,7 +17064,7 @@ function parseJsonObject4(body) {
   } catch {
     return void 0;
   }
-  return isRecord11(parsed) ? parsed : void 0;
+  return isRecord12(parsed) ? parsed : void 0;
 }
 function growthBookFeatures() {
   return {
@@ -17317,7 +17418,7 @@ var RC_SELF_HOST_WORKER_EPOCH = 1;
 var RC_STREAM_EVENT_NAME2 = "client_event";
 var CONFLICT_REASON_HEADER2 = "x-ccr-conflict-reason";
 var CONFLICT_REASON_EPOCH_STALE = "epoch_stale";
-function isRecord12(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isWebSearchRefusal(value) {
@@ -17401,7 +17502,7 @@ function parseJsonObject5(body) {
   } catch {
     return void 0;
   }
-  return isRecord12(parsed) ? parsed : void 0;
+  return isRecord13(parsed) ? parsed : void 0;
 }
 function mintWorkerJwt(randomToken, issuedAt) {
   const encode = (value) => Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
@@ -17661,7 +17762,7 @@ data: ${JSON.stringify(envelope)}
         if (status !== void 0) {
           session.workerStatus = status;
         }
-        if (isRecord12(body?.external_metadata)) {
+        if (isRecord13(body?.external_metadata)) {
           session.externalMetadata = body.external_metadata;
         }
         await answerJson2(response, HTTP_STATUS.ok, {});
@@ -17691,7 +17792,7 @@ data: ${JSON.stringify(envelope)}
         }
         const results = [];
         for (const event of events) {
-          if (!isRecord12(event) || !isRecord12(event.payload)) {
+          if (!isRecord13(event) || !isRecord13(event.payload)) {
             await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a batch is an object carrying one payload object" } });
             return;
           }
@@ -17724,7 +17825,7 @@ data: ${JSON.stringify(envelope)}
           return;
         }
         for (const event of events) {
-          if (isRecord12(event)) {
+          if (isRecord13(event)) {
             session.internalEvents.push({ eventId: deps.newUuid(), body: event });
           }
         }
@@ -17820,7 +17921,7 @@ data: ${JSON.stringify(envelope)}
       }
       const results = [];
       for (const event of events) {
-        if (!isRecord12(event) || !isRecord12(event.payload)) {
+        if (!isRecord13(event) || !isRecord13(event.payload)) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
           return;
         }
@@ -17957,7 +18058,7 @@ var RC_SELF_HOST_RECORD_DIR = "rc-selfhost";
 var RC_SELF_HOST_RECORD_FILE = "credential.json";
 var SELF_HOST_EMAIL = "selfhost@agent-shim.invalid";
 var SELF_HOST_SUBSCRIPTION_TYPE = "max";
-function isRecord13(value) {
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readJsonObject(fs13, file) {
@@ -17971,7 +18072,7 @@ function readJsonObject(fs13, file) {
   } catch {
     return void 0;
   }
-  return isRecord13(parsed) ? parsed : void 0;
+  return isRecord14(parsed) ? parsed : void 0;
 }
 function readRcSelfHostRecord(fs13, frontdoorDir) {
   const parsed = readJsonObject(fs13, import_node_path33.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
@@ -17995,7 +18096,7 @@ function mintRcSelfHostCredential(deps) {
   const recordFile = import_node_path33.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
-  const existingOauth = isRecord13(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
+  const existingOauth = isRecord14(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
   const existingToken = typeof existingOauth?.accessToken === "string" && existingOauth.accessToken !== "" ? existingOauth.accessToken : void 0;
   const existingIsOwn = existingToken !== void 0 && previousRecord?.accessToken === existingToken;
   if (existingToken !== void 0 && !existingIsOwn && !deps.force) {
@@ -18012,7 +18113,7 @@ function mintRcSelfHostCredential(deps) {
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
-  const existingBlock = (value) => isRecord13(value) ? value : {};
+  const existingBlock = (value) => isRecord14(value) ? value : {};
   deps.fs.writeFilePrivate(claudeJsonFile, `${JSON.stringify({
     ...claudeJson,
     oauthAccount: {
@@ -18747,6 +18848,7 @@ init_ownCli();
   buildRcSetPermissionModePayload,
   buildRcUserMessagePayload,
   carryOver,
+  changePool,
   checkReportHasWarnings,
   checkReportToJson,
   collectCheckReport,
@@ -18904,7 +19006,6 @@ init_ownCli();
   setDefaultConfigProfile,
   setGlobalDefaultProfile,
   setIdentityCredential,
-  setPool,
   setProfileCategories,
   setProfileEntries,
   setProfileLaunchFlags,