claude-use 11.41.0 → 11.42.0

package/dist/types/index.d.ts

@@ -370,8 +370,8 @@ declare const CredentialSchema: z.ZodObject<{
         literal: z.ZodString;
     }, z.core.$strict>]>>;
     target: z.ZodOptional<z.ZodEnum<{
-        apiKey: "apiKey";
         bearer: "bearer";
+        apiKey: "apiKey";
         oauthToken: "oauthToken";
     }>>;
     cache: z.ZodOptional<z.ZodObject<{
@@ -505,8 +505,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -643,8 +643,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -713,8 +713,8 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -2161,8 +2161,8 @@ declare const IdentitySchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
             oauthToken: "oauthToken";
         }>>;
         cache: z.ZodOptional<z.ZodObject<{
@@ -2647,6 +2647,96 @@ declare class UsageError extends CliError {
 /** Injected reader for a single config file, so tests never touch a real filesystem. Returns undefined when the file does not exist. */
 type ConfigFileReader = (filepath: string) => unknown;
 
+/** The filesystem operations headroom coordination needs: the same shape as `FarmFs`, injected so every decision over state, sessions, and the start lock runs against an in-memory fake in tests. */
+type HeadroomFs = Pick<FarmFs, "mkdirp" | "mkdirPrivate" | "readFileUtf8" | "writeFileUtf8" | "writeFilePrivate" | "writeFileExclusive" | "readdir" | "removeRecursive">;
+
+/**
+ * The record held in one front-door session-registry file: the launcher's pid plus the per-launch capability token its child presents on every request, and the supervisor of the door the launch was sent to. `sessionId` is the id the launch's requests carry in their session header, and `models` the models block this launch resolved when its directory, profile or committed file added definitions of its own to the global block (absent otherwise, so the door follows the global block live). `supervisorPid` is absent on a record written before it existed and on a door's own transparent-surface record; such a launch cannot be attributed to a door, so a superseded door treats it as its own.
+ */
+declare const FrontDoorSessionSchema: z.ZodObject<{
+    pid: z.ZodNumber;
+    startedAt: z.ZodNumber;
+    token: z.ZodString;
+    supervisorPid: z.ZodOptional<z.ZodNumber>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    models: z.ZodOptional<z.ZodObject<{
+        virtual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            mode: z.ZodEnum<{
+                ordered: "ordered";
+                "most-allowance": "most-allowance";
+                "soonest-reset": "soonest-reset";
+                spread: "spread";
+                adaptive: "adaptive";
+                "lowest-latency": "lowest-latency";
+                "highest-success": "highest-success";
+                cheapest: "cheapest";
+            }>;
+            members: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        tiers: z.ZodOptional<z.ZodObject<{
+            fable: z.ZodOptional<z.ZodString>;
+            opus: z.ZodOptional<z.ZodString>;
+            sonnet: z.ZodOptional<z.ZodString>;
+            haiku: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        prices: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            input: z.ZodNumber;
+            output: z.ZodNumber;
+        }, z.core.$strict>>>;
+        hide: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        show: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        same: z.ZodOptional<z.ZodArray<z.ZodArray<z.ZodString>>>;
+        distinct: z.ZodOptional<z.ZodArray<z.ZodTuple<[z.ZodString, z.ZodString], null>>>;
+        families: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            names: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            mode: z.ZodOptional<z.ZodEnum<{
+                ordered: "ordered";
+                "most-allowance": "most-allowance";
+                "soonest-reset": "soonest-reset";
+                spread: "spread";
+                adaptive: "adaptive";
+                "lowest-latency": "lowest-latency";
+                "highest-success": "highest-success";
+                cheapest: "cheapest";
+            }>>;
+            context: z.ZodOptional<z.ZodNumber>;
+            vision: z.ZodOptional<z.ZodBoolean>;
+            tools: z.ZodOptional<z.ZodBoolean>;
+            thinking: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type FrontDoorSession = z.infer<typeof FrontDoorSessionSchema>;
+/**
+ * The front-door supervisor's state.json under `<home>/frontdoor/`. Every field is optional because the file exists in stages, exactly like headroom's and the old codex daemon's: a fresh supervisor writes its own pid before the listener is up, and a shut-down front door leaves only the sticky `lastPort` and any `lastError` worth surfacing.
+ */
+declare const FrontDoorStateSchema: z.ZodObject<{
+    protocol: z.ZodOptional<z.ZodNumber>;
+    supervisorPid: z.ZodOptional<z.ZodNumber>;
+    port: z.ZodOptional<z.ZodNumber>;
+    lastPort: z.ZodOptional<z.ZodNumber>;
+    connectPort: z.ZodOptional<z.ZodNumber>;
+    lastConnectPort: z.ZodOptional<z.ZodNumber>;
+    directPort: z.ZodOptional<z.ZodNumber>;
+    lastDirectPort: z.ZodOptional<z.ZodNumber>;
+    lastError: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+type FrontDoorState = z.infer<typeof FrontDoorStateSchema>;
+/**
+ * Which recorded doors are still running as front-door supervisors, as reads of the process table answer it: `doors` holds the pids the table shows running (not zombies) with the front-door supervisor's command line; `unknown` holds the pids no read could answer for, each with why (ps failed to run, was killed, timed out or reported an error). Every other pid asked about is known not to be a door: gone, a zombie, or a process that reused a crashed door's pid.
+ */
+interface FrontDoorLiveness {
+    readonly doors: ReadonlySet<number>;
+    readonly unknown: ReadonlyMap<number, string>;
+}
+/** What a launch records about itself in its registry entry beyond the token: the id its requests carry and, when it resolved one that differs from the global block, its models block. */
+interface FrontDoorSessionDetails {
+    readonly sessionId: string;
+    readonly models?: ModelsConfig;
+}
+/** A registered launch as status and the idle decision see it: the pid and start time, never the token, so nothing that prints or serialises a session can leak the capability. */
+type FrontDoorSessionSummary = Pick<FrontDoorSession, "pid" | "startedAt" | "supervisorPid">;
+
 /**
  * Filesystem operations the launcher needs, injected so no test in this project ever touches a real filesystem — consistent with the resolver core's own injected-facts approach in `src/resolve/types.ts`.
  */
@@ -2778,8 +2868,8 @@ interface HeadroomPort {
  * Everything the launcher needs from the front-door daemon, injected like `HeadroomPort`: `ensure` brings the door up (spawning its detached supervisor when nothing authenticated is serving), registers this launch in its session registry and returns both listeners' loopback ports plus the CA bundle the child must trust; `release` removes that registration when the spawned `claude` exits.
  */
 interface FrontDoorPort {
-    /** `inheritedExtraCaCerts` is the parent environment's own `NODE_EXTRA_CA_CERTS`, which the returned trust bundle keeps (see `resolveTrustBundle`). */
-    readonly ensure: (inheritedExtraCaCerts: string | undefined) => FrontDoorUp;
+    /** `inheritedExtraCaCerts` is the parent environment's own `NODE_EXTRA_CA_CERTS`, which the returned trust bundle keeps (see `resolveTrustBundle`). `session` is what the launch tells the door about itself: its session id and the models block it resolved. */
+    readonly ensure: (inheritedExtraCaCerts: string | undefined, session?: FrontDoorSessionDetails) => FrontDoorUp;
     readonly release: () => void;
 }
 /** The running front door one launch routed through, as `FrontDoorPort.ensure` reports it. */
@@ -4256,9 +4346,6 @@ interface FrontDoorRcControl {
 /** Builds the control client: every request presents the control token, and a non-2xx answer becomes the verbose message the door sent with it. */
 declare function frontDoorRcControl(transport: RcControlTransport, token: string): FrontDoorRcControl;
 
-/** The filesystem operations headroom coordination needs: the same shape as `FarmFs`, injected so every decision over state, sessions, and the start lock runs against an in-memory fake in tests. */
-type HeadroomFs = Pick<FarmFs, "mkdirp" | "mkdirPrivate" | "readFileUtf8" | "writeFileUtf8" | "writeFilePrivate" | "writeFileExclusive" | "readdir" | "removeRecursive">;
-
 /** What an `lstat` (which never follows symlinks) reports about one path, narrowed to what authenticating the socket needs. */
 interface SocketPathStat {
     readonly kind: "dir" | "file" | "socket" | "symlink" | "other";
@@ -4885,8 +4972,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
             name: z.ZodString;
             credential: z.ZodOptional<z.ZodObject<{
                 target: z.ZodEnum<{
-                    apiKey: "apiKey";
                     bearer: "bearer";
+                    apiKey: "apiKey";
                     oauthToken: "oauthToken";
                 }>;
                 sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -4947,8 +5034,8 @@ declare const CheckReportJsonSchema: z.ZodObject<{
         }, z.core.$strict>]>>;
         identity: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -5470,41 +5557,6 @@ interface FileAllowlistDrift {
     readonly hashLags: boolean;
 }
 
-/**
- * The record held in one front-door session-registry file: the launcher's pid plus the per-launch capability token its child presents on every request, and the supervisor of the door the launch was sent to. `supervisorPid` is absent on a record written before it existed and on a door's own transparent-surface record; such a launch cannot be attributed to a door, so a superseded door treats it as its own.
- */
-declare const FrontDoorSessionSchema: z.ZodObject<{
-    pid: z.ZodNumber;
-    startedAt: z.ZodNumber;
-    token: z.ZodString;
-    supervisorPid: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strict>;
-type FrontDoorSession = z.infer<typeof FrontDoorSessionSchema>;
-/**
- * The front-door supervisor's state.json under `<home>/frontdoor/`. Every field is optional because the file exists in stages, exactly like headroom's and the old codex daemon's: a fresh supervisor writes its own pid before the listener is up, and a shut-down front door leaves only the sticky `lastPort` and any `lastError` worth surfacing.
- */
-declare const FrontDoorStateSchema: z.ZodObject<{
-    protocol: z.ZodOptional<z.ZodNumber>;
-    supervisorPid: z.ZodOptional<z.ZodNumber>;
-    port: z.ZodOptional<z.ZodNumber>;
-    lastPort: z.ZodOptional<z.ZodNumber>;
-    connectPort: z.ZodOptional<z.ZodNumber>;
-    lastConnectPort: z.ZodOptional<z.ZodNumber>;
-    directPort: z.ZodOptional<z.ZodNumber>;
-    lastDirectPort: z.ZodOptional<z.ZodNumber>;
-    lastError: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-type FrontDoorState = z.infer<typeof FrontDoorStateSchema>;
-/**
- * Which recorded doors are still running as front-door supervisors, as reads of the process table answer it: `doors` holds the pids the table shows running (not zombies) with the front-door supervisor's command line; `unknown` holds the pids no read could answer for, each with why (ps failed to run, was killed, timed out or reported an error). Every other pid asked about is known not to be a door: gone, a zombie, or a process that reused a crashed door's pid.
- */
-interface FrontDoorLiveness {
-    readonly doors: ReadonlySet<number>;
-    readonly unknown: ReadonlyMap<number, string>;
-}
-/** A registered launch as status and the idle decision see it: the pid and start time, never the token, so nothing that prints or serialises a session can leak the capability. */
-type FrontDoorSessionSummary = Pick<FrontDoorSession, "pid" | "startedAt" | "supervisorPid">;
-
 /** The token-saving settings of the `headroom` config block, without its install and lifecycle fields (`source`, `idleShutdownMinutes`). */
 type HeadroomSettings = Pick<HeadroomGlobalConfig, "mode" | "targetRatio" | "ccr" | "rolloutChannel" | "interceptToolResults" | "readMaturation">;
 
@@ -6060,8 +6112,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6130,8 +6182,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
@@ -6165,8 +6217,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6822,8 +6874,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -6887,8 +6939,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -6945,8 +6997,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -7010,8 +7062,8 @@ declare function createConfigApiRouter(deps: ConfigApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -8096,8 +8148,8 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
                 name: zod.ZodString;
                 summary: zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8813,8 +8865,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     name: zod.ZodString;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -8875,8 +8927,8 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                 }, zod_v4_core.$strict>]>>;
                 identity: zod.ZodOptional<zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -9218,8 +9270,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 name: zod.ZodString;
                 summary: zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -9293,8 +9345,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -9363,8 +9415,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
@@ -9398,8 +9450,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     allowAmbientCredential: zod.ZodBoolean;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -10055,8 +10107,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -10120,8 +10172,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -10178,8 +10230,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                         literal: zod.ZodString;
                     }, zod_v4_core.$strict>]>>>;
                     target: zod.ZodOptional<zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                     }>>;
                     cache: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodLiteral<false>, zod.ZodObject<{
                         ttl: zod.ZodOptional<zod.ZodString>;
@@ -10243,8 +10295,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     }, zod_v4_core.$strict>>;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -11139,8 +11191,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     name: zod.ZodString;
                     credential: zod.ZodOptional<zod.ZodObject<{
                         target: zod.ZodEnum<{
-                            apiKey: "apiKey";
                             bearer: "bearer";
+                            apiKey: "apiKey";
                             oauthToken: "oauthToken";
                         }>;
                         sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -11201,8 +11253,8 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                 }, zod_v4_core.$strict>]>>;
                 identity: zod.ZodOptional<zod.ZodObject<{
                     target: zod.ZodEnum<{
-                        apiKey: "apiKey";
                         bearer: "bearer";
+                        apiKey: "apiKey";
                         oauthToken: "oauthToken";
                     }>;
                     sources: zod.ZodReadonly<zod.ZodArray<zod.ZodUnion<readonly [zod.ZodObject<{
@@ -11583,8 +11635,8 @@ declare function frontDoorApiFromState(paths: LayoutPaths, fsPort?: HeadroomFs):
 /** A credential block as every response reports it: the effective target, each source's kind and its identifying detail, in order, and the cache setting. Never a value: a `literal` source reports only its kind. */
 declare const CredentialSummarySchema: z.ZodObject<{
     target: z.ZodEnum<{
-        apiKey: "apiKey";
         bearer: "bearer";
+        apiKey: "apiKey";
         oauthToken: "oauthToken";
     }>;
     sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -11628,8 +11680,8 @@ declare const ConfigIdentityAddOutputSchema: z.ZodObject<{
         allowAmbientCredential: z.ZodBoolean;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -11699,8 +11751,8 @@ declare const ConfigIdentitySetInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
             oauthToken: "oauthToken";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
@@ -11735,8 +11787,8 @@ declare const ConfigIdentitySetOutputSchema: z.ZodObject<{
         allowAmbientCredential: z.ZodBoolean;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -12390,8 +12442,8 @@ declare const ConfigProviderAddInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
             ttl: z.ZodOptional<z.ZodString>;
@@ -12456,8 +12508,8 @@ declare const ConfigProviderAddOutputSchema: z.ZodObject<{
         }, z.core.$strict>>;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -12515,8 +12567,8 @@ declare const ConfigProviderSetInputSchema: z.ZodObject<{
             literal: z.ZodString;
         }, z.core.$strict>]>>>;
         target: z.ZodOptional<z.ZodEnum<{
-            apiKey: "apiKey";
             bearer: "bearer";
+            apiKey: "apiKey";
         }>>;
         cache: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
             ttl: z.ZodOptional<z.ZodString>;
@@ -12581,8 +12633,8 @@ declare const ConfigProviderSetOutputSchema: z.ZodObject<{
         }, z.core.$strict>>;
         credential: z.ZodOptional<z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -13529,8 +13581,8 @@ declare const LaunchResolveOutputSchema: z.ZodObject<{
         name: z.ZodString;
         summary: z.ZodObject<{
             target: z.ZodEnum<{
-                apiKey: "apiKey";
                 bearer: "bearer";
+                apiKey: "apiKey";
                 oauthToken: "oauthToken";
             }>;
             sources: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
@@ -13865,6 +13917,8 @@ declare function ensureFrontDoor(params: {
     readonly ports: EnsureFrontDoorPorts;
     /** Replaces a serving door whatever its protocol, once: the restart a binary update asks for, so the new generation serves the sessions already running without waiting for the registry to empty. */
     readonly replace?: boolean;
+    /** What this launch tells the door about itself beyond its token: the id its requests carry in their session header, and the models block it resolved when it added definitions of its own to the global one. Recorded in the launch's registry entry, so it lives and is pruned with the launch. */
+    readonly session?: FrontDoorSessionDetails;
 }): {
     readonly port: number;
     readonly connectPort: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "11.41.0",
+  "version": "11.42.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",