claude-use 11.5.2 → 11.6.1

package/dist/cli.cjs

@@ -24697,6 +24697,35 @@ var init_store = __esm({
   }
 });
 
+// src/processRole.ts
+function enterProcessRole(role) {
+  const previous = currentRole;
+  currentRole = role;
+  return () => {
+    currentRole = previous;
+  };
+}
+function refuseToBlockInRole(operation) {
+  if (currentRole !== void 0) {
+    throw new BlockingInEventLoopError(operation, currentRole);
+  }
+}
+var currentRole, BlockingInEventLoopError;
+var init_processRole = __esm({
+  "src/processRole.ts"() {
+    "use strict";
+    init_cliError();
+    BlockingInEventLoopError = class extends CliError {
+      constructor(operation, role) {
+        super(
+          `${operation} blocks the calling thread, which in the ${role} is the event loop that answers every session; it must not run there (a launch planned inside the door reaches it through its own addresses, never through the launcher's synchronous coordination)`
+        );
+        this.name = "BlockingInEventLoopError";
+      }
+    };
+  }
+});
+
 // src/versionDiscovery.ts
 function defaultVersionsDir() {
   return import_node_path3.default.join(import_node_os.default.homedir(), ".local", "share", "claude", "versions");
@@ -28498,6 +28527,7 @@ function isErrorWithCode(error63, code) {
   return typeof error63 === "object" && error63 !== null && "code" in error63 && error63.code === code;
 }
 function realSleepSync(ms2) {
+  refuseToBlockInRole("a synchronous sleep");
   Atomics.wait(new Int32Array(new SharedArrayBuffer(INT32_BYTE_LENGTH)), 0, 0, ms2);
 }
 function realIsProcessAlive(pid) {
@@ -28786,6 +28816,7 @@ var import_node_child_process2, import_node_crypto4, import_node_fs3, import_nod
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_processRole();
     import_node_child_process2 = require("node:child_process");
     import_node_crypto4 = require("node:crypto");
     import_node_fs3 = __toESM(require("node:fs"), 1);
@@ -33976,7 +34007,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.5.2",
+      version: "11.6.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -61947,6 +61978,7 @@ var init_ensure2 = __esm({
 
 // src/frontdoor/probe.ts
 function probeFrontDoorSync(port, caPem) {
+  refuseToBlockInRole("a synchronous probe of the front door");
   const shared = new SharedArrayBuffer(HEADER_SLOTS * INT32_BYTES + REASON_BYTES);
   const header = new Int32Array(shared, 0, HEADER_SLOTS);
   const worker = new import_node_worker_threads.Worker(PROBE_SOURCE, {
@@ -61973,6 +62005,7 @@ var import_node_worker_threads, PROBE_TIMEOUT_MS, PROBE_WAIT_MARGIN_MS, REASON_B
 var init_probe = __esm({
   "src/frontdoor/probe.ts"() {
     "use strict";
+    init_processRole();
     import_node_worker_threads = require("node:worker_threads");
     PROBE_TIMEOUT_MS = 2e3;
     PROBE_WAIT_MARGIN_MS = 1e3;
@@ -62015,6 +62048,20 @@ request.on("error", (error) => finish(failed, (error.code ? error.code + ": " :
   }
 });
 
+// src/frontdoor/selfIdentity.ts
+function declareThisProcessTheFrontDoor() {
+  declaredPid = process.pid;
+}
+function isFrontDoorSupervisorPid(pid, identify) {
+  return declaredPid !== void 0 && pid === declaredPid && pid === process.pid || identify(pid);
+}
+var declaredPid;
+var init_selfIdentity = __esm({
+  "src/frontdoor/selfIdentity.ts"() {
+    "use strict";
+  }
+});
+
 // src/frontdoor/trust.ts
 function resolveTrustBundle(params) {
   const { caCertFile, bundlesDir, variable, inherited, fs: fs23 } = params;
@@ -62061,7 +62108,7 @@ function realEnsurePorts(paths, spawnDaemon) {
     now: () => Date.now(),
     sleep: realSleepSync,
     spawnSupervisor: (layout) => spawnDaemon(layout, "__frontdoor-supervisor", layout.frontdoorLogPath),
-    isFrontDoorSupervisor: realIsFrontDoorSupervisor,
+    isFrontDoorSupervisor: (pid) => isFrontDoorSupervisorPid(pid, realIsFrontDoorSupervisor),
     stopSupervisor: (pid) => {
       process.kill(pid, "SIGTERM");
     },
@@ -62102,6 +62149,7 @@ var init_realFrontDoorPort = __esm({
     init_ensure2();
     init_state();
     init_probe();
+    init_selfIdentity();
     init_trust();
     realTrustBundleFs = {
       readFileUtf8: (file2) => import_node_fs13.default.readFileSync(file2, "utf8"),
@@ -114096,6 +114144,7 @@ init_route();
 init_state();
 
 // src/frontdoor/supervisor.ts
+init_processRole();
 var import_node_path44 = __toESM(require("node:path"), 1);
 init_state();
 function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
@@ -114110,6 +114159,14 @@ var FRONTDOOR_SUPERVISOR_STILL_RUNNING = -1;
 var FRONTDOOR_POLL_MS = 1e3;
 var MS_PER_MINUTE3 = 6e4;
 async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {}) {
+  const leaveRole = enterProcessRole("frontdoor-supervisor");
+  try {
+    return await serveFrontDoor(idleShutdownMinutes, ports, options);
+  } finally {
+    leaveRole();
+  }
+}
+async function serveFrontDoor(idleShutdownMinutes, ports, options) {
   const { fs: fs23, paths } = ports;
   const servingBinary = ports.statOwnExecutable();
   const previous = readFrontDoorState(fs23, paths.frontdoorStateFile);
@@ -130992,6 +131049,7 @@ function formatFrontDoorStatus(status, caCertPath) {
 
 // src/frontdoor/commands.ts
 init_state();
+init_selfIdentity();
 init_account();
 init_middleware();
 init_quotaRefresh();
@@ -131473,6 +131531,7 @@ function registerFrontDoorCommand(program2, deps) {
     process.on("SIGINT", () => {
       deps.exit(0);
     });
+    declareThisProcessTheFrontDoor();
     deps.exit(await runFrontDoorSupervisor(idleShutdownMinutes, realFrontDoorSupervisorPorts(paths)));
   });
 }

package/dist/index.cjs

@@ -2752,13 +2752,42 @@ var init_state = __esm({
   }
 });
 
+// src/processRole.ts
+function enterProcessRole(role) {
+  const previous = currentRole;
+  currentRole = role;
+  return () => {
+    currentRole = previous;
+  };
+}
+function refuseToBlockInRole(operation) {
+  if (currentRole !== void 0) {
+    throw new BlockingInEventLoopError(operation, currentRole);
+  }
+}
+var currentRole, BlockingInEventLoopError;
+var init_processRole = __esm({
+  "src/processRole.ts"() {
+    "use strict";
+    init_cliError();
+    BlockingInEventLoopError = class extends CliError {
+      constructor(operation, role) {
+        super(
+          `${operation} blocks the calling thread, which in the ${role} is the event loop that answers every session; it must not run there (a launch planned inside the door reaches it through its own addresses, never through the launcher's synchronous coordination)`
+        );
+        this.name = "BlockingInEventLoopError";
+      }
+    };
+  }
+});
+
 // package.json
 var package_default;
 var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.5.2",
+      version: "11.6.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -3932,6 +3961,7 @@ function isErrorWithCode(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function realSleepSync(ms) {
+  refuseToBlockInRole("a synchronous sleep");
   Atomics.wait(new Int32Array(new SharedArrayBuffer(INT32_BYTE_LENGTH)), 0, 0, ms);
 }
 function realIsProcessAlive(pid) {
@@ -4165,6 +4195,7 @@ var import_node_child_process2, import_node_crypto8, import_node_fs2, import_nod
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_processRole();
     import_node_child_process2 = require("node:child_process");
     import_node_crypto8 = require("node:crypto");
     import_node_fs2 = __toESM(require("node:fs"), 1);
@@ -8039,6 +8070,7 @@ var init_ownCli = __esm({
 
 // src/frontdoor/probe.ts
 function probeFrontDoorSync(port, caPem) {
+  refuseToBlockInRole("a synchronous probe of the front door");
   const shared = new SharedArrayBuffer(HEADER_SLOTS * INT32_BYTES + REASON_BYTES);
   const header = new Int32Array(shared, 0, HEADER_SLOTS);
   const worker = new import_node_worker_threads.Worker(PROBE_SOURCE, {
@@ -8065,6 +8097,7 @@ var import_node_worker_threads, PROBE_TIMEOUT_MS, PROBE_WAIT_MARGIN_MS, REASON_B
 var init_probe = __esm({
   "src/frontdoor/probe.ts"() {
     "use strict";
+    init_processRole();
     import_node_worker_threads = require("node:worker_threads");
     PROBE_TIMEOUT_MS = 2e3;
     PROBE_WAIT_MARGIN_MS = 1e3;
@@ -8107,6 +8140,17 @@ request.on("error", (error) => finish(failed, (error.code ? error.code + ": " :
   }
 });
 
+// src/frontdoor/selfIdentity.ts
+function isFrontDoorSupervisorPid(pid, identify) {
+  return declaredPid !== void 0 && pid === declaredPid && pid === process.pid || identify(pid);
+}
+var declaredPid;
+var init_selfIdentity = __esm({
+  "src/frontdoor/selfIdentity.ts"() {
+    "use strict";
+  }
+});
+
 // src/frontdoor/trust.ts
 function resolveTrustBundle(params) {
   const { caCertFile, bundlesDir, variable, inherited, fs: fs12 } = params;
@@ -8153,7 +8197,7 @@ function realEnsurePorts(paths, spawnDaemon) {
     now: () => Date.now(),
     sleep: realSleepSync,
     spawnSupervisor: (layout) => spawnDaemon(layout, "__frontdoor-supervisor", layout.frontdoorLogPath),
-    isFrontDoorSupervisor: realIsFrontDoorSupervisor,
+    isFrontDoorSupervisor: (pid) => isFrontDoorSupervisorPid(pid, realIsFrontDoorSupervisor),
     stopSupervisor: (pid) => {
       process.kill(pid, "SIGTERM");
     },
@@ -8191,6 +8235,7 @@ var init_realFrontDoorPort = __esm({
     init_ensure2();
     init_state();
     init_probe();
+    init_selfIdentity();
     init_trust();
     realTrustBundleFs = {
       readFileUtf8: (file) => import_node_fs11.default.readFileSync(file, "utf8"),
@@ -9381,6 +9426,7 @@ init_route();
 init_state();
 
 // src/frontdoor/supervisor.ts
+init_processRole();
 var import_node_path9 = __toESM(require("node:path"), 1);
 init_state();
 function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
@@ -9395,6 +9441,14 @@ var FRONTDOOR_SUPERVISOR_STILL_RUNNING = -1;
 var FRONTDOOR_POLL_MS = 1e3;
 var MS_PER_MINUTE = 6e4;
 async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {}) {
+  const leaveRole = enterProcessRole("frontdoor-supervisor");
+  try {
+    return await serveFrontDoor(idleShutdownMinutes, ports, options);
+  } finally {
+    leaveRole();
+  }
+}
+async function serveFrontDoor(idleShutdownMinutes, ports, options) {
   const { fs: fs12, paths } = ports;
   const servingBinary = ports.statOwnExecutable();
   const previous = readFrontDoorState(fs12, paths.frontdoorStateFile);

package/dist/index.mjs

@@ -2728,13 +2728,42 @@ var init_state = __esm({
   }
 });
 
+// src/processRole.ts
+function enterProcessRole(role) {
+  const previous = currentRole;
+  currentRole = role;
+  return () => {
+    currentRole = previous;
+  };
+}
+function refuseToBlockInRole(operation) {
+  if (currentRole !== void 0) {
+    throw new BlockingInEventLoopError(operation, currentRole);
+  }
+}
+var currentRole, BlockingInEventLoopError;
+var init_processRole = __esm({
+  "src/processRole.ts"() {
+    "use strict";
+    init_cliError();
+    BlockingInEventLoopError = class extends CliError {
+      constructor(operation, role) {
+        super(
+          `${operation} blocks the calling thread, which in the ${role} is the event loop that answers every session; it must not run there (a launch planned inside the door reaches it through its own addresses, never through the launcher's synchronous coordination)`
+        );
+        this.name = "BlockingInEventLoopError";
+      }
+    };
+  }
+});
+
 // package.json
 var package_default;
 var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.5.2",
+      version: "11.6.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -3913,6 +3942,7 @@ function isErrorWithCode(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function realSleepSync(ms) {
+  refuseToBlockInRole("a synchronous sleep");
   Atomics.wait(new Int32Array(new SharedArrayBuffer(INT32_BYTE_LENGTH)), 0, 0, ms);
 }
 function realIsProcessAlive(pid) {
@@ -4146,6 +4176,7 @@ var realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, real
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_processRole();
     init_load();
     init_versionDiscovery();
     init_supervisorProcesses();
@@ -8011,6 +8042,7 @@ var init_ownCli = __esm({
 // src/frontdoor/probe.ts
 import { Worker } from "node:worker_threads";
 function probeFrontDoorSync(port, caPem) {
+  refuseToBlockInRole("a synchronous probe of the front door");
   const shared = new SharedArrayBuffer(HEADER_SLOTS * INT32_BYTES + REASON_BYTES);
   const header = new Int32Array(shared, 0, HEADER_SLOTS);
   const worker = new Worker(PROBE_SOURCE, {
@@ -8037,6 +8069,7 @@ var PROBE_TIMEOUT_MS, PROBE_WAIT_MARGIN_MS, REASON_BYTES, HEADER_SLOTS, INT32_BY
 var init_probe = __esm({
   "src/frontdoor/probe.ts"() {
     "use strict";
+    init_processRole();
     PROBE_TIMEOUT_MS = 2e3;
     PROBE_WAIT_MARGIN_MS = 1e3;
     REASON_BYTES = 1024;
@@ -8078,6 +8111,17 @@ request.on("error", (error) => finish(failed, (error.code ? error.code + ": " :
   }
 });
 
+// src/frontdoor/selfIdentity.ts
+function isFrontDoorSupervisorPid(pid, identify) {
+  return declaredPid !== void 0 && pid === declaredPid && pid === process.pid || identify(pid);
+}
+var declaredPid;
+var init_selfIdentity = __esm({
+  "src/frontdoor/selfIdentity.ts"() {
+    "use strict";
+  }
+});
+
 // src/frontdoor/trust.ts
 import { createHash as createHash6 } from "node:crypto";
 import path40 from "node:path";
@@ -8125,7 +8169,7 @@ function realEnsurePorts(paths, spawnDaemon) {
     now: () => Date.now(),
     sleep: realSleepSync,
     spawnSupervisor: (layout) => spawnDaemon(layout, "__frontdoor-supervisor", layout.frontdoorLogPath),
-    isFrontDoorSupervisor: realIsFrontDoorSupervisor,
+    isFrontDoorSupervisor: (pid) => isFrontDoorSupervisorPid(pid, realIsFrontDoorSupervisor),
     stopSupervisor: (pid) => {
       process.kill(pid, "SIGTERM");
     },
@@ -8162,6 +8206,7 @@ var init_realFrontDoorPort = __esm({
     init_ensure2();
     init_state();
     init_probe();
+    init_selfIdentity();
     init_trust();
     realTrustBundleFs = {
       readFileUtf8: (file) => fs11.readFileSync(file, "utf8"),
@@ -8968,6 +9013,7 @@ init_route();
 init_state();
 
 // src/frontdoor/supervisor.ts
+init_processRole();
 init_state();
 import path9 from "node:path";
 function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
@@ -8982,6 +9028,14 @@ var FRONTDOOR_SUPERVISOR_STILL_RUNNING = -1;
 var FRONTDOOR_POLL_MS = 1e3;
 var MS_PER_MINUTE = 6e4;
 async function runFrontDoorSupervisor(idleShutdownMinutes, ports, options = {}) {
+  const leaveRole = enterProcessRole("frontdoor-supervisor");
+  try {
+    return await serveFrontDoor(idleShutdownMinutes, ports, options);
+  } finally {
+    leaveRole();
+  }
+}
+async function serveFrontDoor(idleShutdownMinutes, ports, options) {
   const { fs: fs12, paths } = ports;
   const servingBinary = ports.statOwnExecutable();
   const previous = readFrontDoorState(fs12, paths.frontdoorStateFile);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "11.5.2",
+  "version": "11.6.1",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",