claude-use 11.57.0 → 11.57.1

package/dist/cli.cjs

@@ -24807,6 +24807,24 @@ var init_processRole = __esm({
   }
 });
 
+// src/blockingSpawn.ts
+function spawnSyncBlocking(operation, command, args, options) {
+  refuseToBlockInRole(operation);
+  return (0, import_node_child_process2.spawnSync)(command, args, options ?? {});
+}
+function execFileSyncBlocking(operation, file2, args, options) {
+  refuseToBlockInRole(operation);
+  return (0, import_node_child_process2.execFileSync)(file2, args, options ?? {});
+}
+var import_node_child_process2;
+var init_blockingSpawn = __esm({
+  "src/blockingSpawn.ts"() {
+    "use strict";
+    import_node_child_process2 = require("node:child_process");
+    init_processRole();
+  }
+});
+
 // src/versionDiscovery.ts
 function defaultVersionsDir() {
   return import_node_path3.default.join(import_node_os.default.homedir(), ".local", "share", "claude", "versions");
@@ -29459,16 +29477,14 @@ function realIsProcessAlive(pid) {
   }
 }
 function realIsProcessZombie(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
   return result.status === 0 && result.stdout.trim().startsWith("Z");
 }
 function realIsProcessRunning(pid) {
   return realIsProcessAlive(pid) && !realIsProcessZombie(pid);
 }
 function realIsFrontDoorSupervisor(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "pid=,command=", "-p", String(pid)], { encoding: "utf8" });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "pid=,command=", "-p", String(pid)], { encoding: "utf8" });
   return result.status === 0 && parseFrontDoorSupervisorPids(result.stdout).includes(pid);
 }
 function leadingContinuationBytes(bytes) {
@@ -29516,20 +29532,18 @@ function realReadFileTail(filePath, fromByte, maxBytes) {
   }
 }
 function realProcessCommandLine(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "command=", "-p", String(pid)], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "command=", "-p", String(pid)], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
   return result.status === 0 ? result.stdout.trim() : void 0;
 }
 function realFrontDoorLiveness(pids) {
-  refuseToBlockInRole("a synchronous process-table read");
   return frontDoorLivenessOf(pids, (asked) => {
-    const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "pid=,stat=,command=", "-p", asked.map(String).join(",")], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
+    const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "pid=,stat=,command=", "-p", asked.map(String).join(",")], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
     return { status: result.status, stdout: result.stdout, stderr: result.stderr, ...result.error === void 0 ? {} : { error: result.error } };
   });
 }
 async function readProcessStates(pids) {
   return await new Promise((resolve2) => {
-    (0, import_node_child_process2.execFile)("ps", ["-o", "pid=,stat=", "-p", pids.map(String).join(",")], { encoding: "utf8", timeout: PS_TIMEOUT_MS }, (_error, stdout2) => {
+    (0, import_node_child_process3.execFile)("ps", ["-o", "pid=,stat=", "-p", pids.map(String).join(",")], { encoding: "utf8", timeout: PS_TIMEOUT_MS }, (_error, stdout2) => {
       const states = /* @__PURE__ */ new Map();
       for (const line of stdout2.split("\n")) {
         const [pidText, stat] = line.trim().split(/\s+/);
@@ -29549,12 +29563,19 @@ async function realRunningAmong(pids) {
   const states = await readProcessStates(existing);
   return new Set(existing.filter((pid) => states.get(pid)?.startsWith("Z") !== true));
 }
+async function realRunAsync(command, args) {
+  return await new Promise((resolve2) => {
+    (0, import_node_child_process3.execFile)(command, [...args], { encoding: "utf8", timeout: PS_TIMEOUT_MS }, (error63, stdout2, stderr) => {
+      resolve2({ status: error63 === null ? 0 : typeof error63.code === "number" ? error63.code : null, stdout: stdout2, stderr });
+    });
+  });
+}
 function expandHome(filePath) {
   return filePath.startsWith("~/") ? import_node_path9.default.join(import_node_os2.default.homedir(), filePath.slice(1)) : filePath;
 }
 function hasDesktopSession() {
   if (process.platform === "darwin") {
-    const result = (0, import_node_child_process2.spawnSync)("launchctl", ["managername"], { encoding: "utf8" });
+    const result = spawnSyncBlocking("a desktop-session check", "launchctl", ["managername"], { encoding: "utf8" });
     return result.status === 0 && result.stdout.trim() === MACOS_GUI_SESSION_MANAGER;
   }
   return hasDisplayServer();
@@ -29570,7 +29591,7 @@ async function hasDesktopSessionAsync() {
     return hasDisplayServer();
   }
   return await new Promise((resolve2) => {
-    (0, import_node_child_process2.execFile)("launchctl", ["managername"], { encoding: "utf8" }, (error63, stdout2) => {
+    (0, import_node_child_process3.execFile)("launchctl", ["managername"], { encoding: "utf8" }, (error63, stdout2) => {
       resolve2(error63 === null && stdout2.trim() === MACOS_GUI_SESSION_MANAGER);
     });
   });
@@ -29578,7 +29599,7 @@ async function hasDesktopSessionAsync() {
 async function runCredentialCommand(argv, options) {
   const [command, ...args] = argv;
   return await new Promise((resolve2) => {
-    const child = (0, import_node_child_process2.spawn)(command, args, { stdio: options.interactive ? ["inherit", "pipe", "inherit"] : ["ignore", "pipe", "pipe"] });
+    const child = (0, import_node_child_process3.spawn)(command, args, { stdio: options.interactive ? ["inherit", "pipe", "inherit"] : ["ignore", "pipe", "pipe"] });
     let stdout2 = "";
     let stderr = "";
     let timedOut = false;
@@ -29637,7 +29658,7 @@ function selfInvocation(args) {
 }
 function spawnSelfDetached(paths, args) {
   const invocation = selfInvocation(args);
-  const child = (0, import_node_child_process2.spawn)(invocation.command, [...invocation.args], { detached: true, stdio: "ignore", env: { ...process.env, AGENT_SHIM_HOME: paths.root } });
+  const child = (0, import_node_child_process3.spawn)(invocation.command, [...invocation.args], { detached: true, stdio: "ignore", env: { ...process.env, AGENT_SHIM_HOME: paths.root } });
   child.unref();
 }
 function detachedDaemonSpawnOptions(logFd, env) {
@@ -29656,7 +29677,7 @@ function spawnDetachedDaemon(invocation, paths, subcommand, logPath) {
   import_node_fs3.default.mkdirSync(import_node_path9.default.dirname(logPath), { recursive: true });
   const logFd = import_node_fs3.default.openSync(logPath, "a");
   try {
-    const child = (0, import_node_child_process2.spawn)(invocation.command, invocation.args, detachedDaemonSpawnOptions(logFd, { ...process.env, AGENT_SHIM_HOME: paths.root }));
+    const child = (0, import_node_child_process3.spawn)(invocation.command, invocation.args, detachedDaemonSpawnOptions(logFd, { ...process.env, AGENT_SHIM_HOME: paths.root }));
     child.unref();
     if (child.pid === void 0) {
       throw new Error(`spawning ${subcommand} returned no pid`);
@@ -29806,12 +29827,13 @@ function realResolveClaudeBinary(isOwnBinary) {
 function realInstalledClaudeVersions() {
   return installedVersions(listVersionsDir(defaultVersionsDir()));
 }
-var import_node_child_process2, import_node_crypto4, import_node_fs3, import_node_os2, import_node_path9, import_node_sea, realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, realFarmFs, INT32_BYTE_LENGTH, KEY_POLL_MS, CTRL_C_BYTE, realHoldPort, LINE_FEED, UTF8_CONTINUATION_MASK, UTF8_CONTINUATION_BITS, PS_TIMEOUT_MS, realRunPort, MACOS_GUI_SESSION_MANAGER, realCredentialPort, realAsyncCredentialPort, SOCKET_PERMISSION_BITS, realHeadroomSocketTrust, realSpawnPort, realProcPort, realLogPort, EXECUTE_BITS_MASK, WINDOWS_DEFAULT_PATHEXT;
+var import_node_child_process3, import_node_crypto4, import_node_fs3, import_node_os2, import_node_path9, import_node_sea, realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, realFarmFs, INT32_BYTE_LENGTH, KEY_POLL_MS, CTRL_C_BYTE, realHoldPort, LINE_FEED, UTF8_CONTINUATION_MASK, UTF8_CONTINUATION_BITS, PS_TIMEOUT_MS, realRunPort, MACOS_GUI_SESSION_MANAGER, realCredentialPort, realAsyncCredentialPort, SOCKET_PERMISSION_BITS, realHeadroomSocketTrust, realSpawnPort, realProcPort, realLogPort, EXECUTE_BITS_MASK, WINDOWS_DEFAULT_PATHEXT;
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_blockingSpawn();
     init_processRole();
-    import_node_child_process2 = require("node:child_process");
+    import_node_child_process3 = require("node:child_process");
     import_node_crypto4 = require("node:crypto");
     import_node_fs3 = __toESM(require("node:fs"), 1);
     import_node_os2 = __toESM(require("node:os"), 1);
@@ -29986,7 +30008,7 @@ var init_realPorts = __esm({
     PS_TIMEOUT_MS = 2e3;
     realRunPort = {
       run(command, args) {
-        const result = (0, import_node_child_process2.spawnSync)(command, [...args], { encoding: "utf8" });
+        const result = spawnSyncBlocking("an external command", command, args, { encoding: "utf8" });
         return { status: result.status, stdout: result.stdout, stderr: result.stderr };
       }
     };
@@ -30009,7 +30031,7 @@ var init_realPorts = __esm({
       },
       runCommand(argv, options) {
         const [command, ...args] = argv;
-        const result = (0, import_node_child_process2.spawnSync)(command, args, {
+        const result = spawnSyncBlocking("a credential command", command, args, {
           encoding: "utf8",
           timeout: options.timeoutMs,
           stdio: options.interactive ? ["inherit", "pipe", "inherit"] : ["ignore", "pipe", "pipe"]
@@ -30053,7 +30075,7 @@ var init_realPorts = __esm({
     };
     realSpawnPort = {
       spawnSync(command, args, options) {
-        const result = (0, import_node_child_process2.spawnSync)(command, args, options);
+        const result = spawnSyncBlocking("a spawned program", command, args, options);
         return { status: result.status, signal: result.signal, ...result.error === void 0 ? {} : { error: result.error } };
       }
     };
@@ -36782,7 +36804,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.57.0",
+      version: "11.57.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -38217,12 +38239,12 @@ function requireKeychain() {
   }
 }
 function security(args, stdin2) {
-  const result = (0, import_node_child_process3.spawnSync)("security", args, { encoding: "utf8", ...stdin2 === void 0 ? {} : { input: stdin2 }, stdio: ["pipe", "pipe", "ignore"] });
+  const result = spawnSyncBlocking("a keychain call", "security", args, { encoding: "utf8", ...stdin2 === void 0 ? {} : { input: stdin2 }, stdio: ["pipe", "pipe", "ignore"] });
   return { status: result.status, stdout: result.stdout };
 }
 async function securityAsync(args, stdin2) {
   return await new Promise((resolve2) => {
-    const child = (0, import_node_child_process3.spawn)("security", args, { stdio: ["pipe", "pipe", "ignore"] });
+    const child = (0, import_node_child_process4.spawn)("security", args, { stdio: ["pipe", "pipe", "ignore"] });
     let stdout2 = "";
     let settled = false;
     const settle2 = (status) => {
@@ -38332,13 +38354,14 @@ function createAsyncRealCredentialCache(root) {
 function realAsyncCredentialCacheEnv(paths) {
   return { port: createAsyncRealCredentialCache(paths.root), platform: process.platform, now: () => Date.now() };
 }
-var import_node_child_process3, import_node_fs9, import_node_path29, KEYCHAIN_CACHE_SERVICE, CACHE_DIR_MODE, CACHE_FILE_MODE;
+var import_node_child_process4, import_node_fs9, import_node_path29, KEYCHAIN_CACHE_SERVICE, CACHE_DIR_MODE, CACHE_FILE_MODE;
 var init_realCredentialCache = __esm({
   "src/realCredentialCache.ts"() {
     "use strict";
-    import_node_child_process3 = require("node:child_process");
+    import_node_child_process4 = require("node:child_process");
     import_node_fs9 = __toESM(require("node:fs"), 1);
     import_node_path29 = __toESM(require("node:path"), 1);
+    init_blockingSpawn();
     init_credentialCache();
     KEYCHAIN_CACHE_SERVICE = "agent-shim-credential-cache";
     CACHE_DIR_MODE = 448;
@@ -68956,14 +68979,57 @@ var init_launcher = __esm({
   }
 });
 
+// src/replayRun.ts
+function keyOf2(command, args) {
+  return JSON.stringify([command, args]);
+}
+async function resolveWithAsyncRuns(decide, runAsync2) {
+  const answers = /* @__PURE__ */ new Map();
+  const replay = {
+    run: (command, args) => {
+      const answer = answers.get(keyOf2(command, args));
+      if (answer === void 0) {
+        throw new RunNeededError(command, args);
+      }
+      return answer;
+    }
+  };
+  for (; ; ) {
+    try {
+      return decide(replay);
+    } catch (error63) {
+      if (!(error63 instanceof RunNeededError)) {
+        throw error63;
+      }
+      answers.set(keyOf2(error63.command, error63.args), await runAsync2(error63.command, error63.args));
+    }
+  }
+}
+var RunNeededError;
+var init_replayRun = __esm({
+  "src/replayRun.ts"() {
+    "use strict";
+    RunNeededError = class extends Error {
+      constructor(command, args) {
+        super(`no recorded answer for ${command} ${args.join(" ")}`);
+        this.command = command;
+        this.args = args;
+        this.name = "RunNeededError";
+      }
+      command;
+      args;
+    };
+  }
+});
+
 // src/launchWiring.ts
-function buildFarmRuntime(paths, cwd) {
+function buildFarmRuntime(paths, cwd, run = realRunPort) {
   const home = import_node_os9.default.homedir();
   const read = cosmiconfigReader();
   const classification = loadClassification(paths);
   const loaded = loadCascadeInput({ paths, home, cwd, read });
   const selections = readDirectorySelections(loaded);
-  const git = resolveGitBranch(realRunPort, cwd);
+  const git = resolveGitBranch(run, cwd);
   const updateMode = resolveUpdateMode(loaded.globalConfig);
   return {
     runtime: {
@@ -69010,7 +69076,7 @@ function realPrepareLaunchParams(paths, options) {
     frontdoor: realFrontDoorPort(paths, options.spawnDaemon),
     credentials: { ...realCredentialPort, cache: realCredentialCacheEnv(paths) },
     hold: realHoldPort,
-    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: realRunPort }, { farmRoot: import_node_path46.default.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
+    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: options.run ?? realRunPort }, { farmRoot: import_node_path46.default.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
     ...farm.directoryIdentity === void 0 ? {} : { directoryPinnedIdentity: farm.directoryIdentity },
     ...farm.directoryConfigProfile === void 0 ? {} : { directoryRuleConfigProfile: farm.directoryConfigProfile },
     ...farm.globalDefaultConfigProfile === void 0 ? {} : { globalDefaultConfigProfile: farm.globalDefaultConfigProfile },
@@ -69022,7 +69088,7 @@ function realPrepareLaunchParams(paths, options) {
 function daemonSpawnerFor(agentShim) {
   return agentShim === void 0 ? (spawnPaths, subcommand, logPath) => spawnDaemonThroughScript(agentShimCliPath())(spawnPaths, subcommand, logPath) : spawnDaemonThrough(agentShim);
 }
-function resolveClaudeLaunch(options) {
+function resolveClaudeLaunch(options, run = realRunPort) {
   const paths = options.paths ?? resolveLayoutPaths();
   const refusals = [];
   const warnings = [];
@@ -69046,7 +69112,10 @@ function resolveClaudeLaunch(options) {
   const spawnDaemon = () => {
     throw new Error("resolving a launch starts no daemon");
   };
-  return { resolution: resolveLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, farm: buildFarmRuntime(paths, options.cwd) })), warnings };
+  return { resolution: resolveLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, run, farm: buildFarmRuntime(paths, options.cwd, run) })), warnings };
+}
+async function resolveClaudeLaunchAsync(options, runAsync2 = realRunAsync) {
+  return await resolveWithAsyncRuns((run) => resolveClaudeLaunch(options, run), runAsync2);
 }
 var import_node_os9, import_node_path46, import_node_crypto21, LaunchRefusedError;
 var init_launchWiring = __esm({
@@ -69065,6 +69134,7 @@ var init_launchWiring = __esm({
     init_launcher();
     init_launchHook();
     init_cascade();
+    init_replayRun();
     init_paths();
     init_signIn();
     init_realPorts();
@@ -117340,7 +117410,7 @@ async function runSiwcLogout(ports) {
 }
 
 // src/codex/siwcPorts.ts
-var import_node_child_process4 = require("node:child_process");
+var import_node_child_process5 = require("node:child_process");
 var import_node_crypto11 = require("node:crypto");
 var import_node_http = __toESM(require("node:http"), 1);
 
@@ -117406,7 +117476,7 @@ async function listenForCallback(port, state) {
 }
 function openInBrowser(url2) {
   const command = process.platform === "darwin" ? { file: "open", args: [url2] } : process.platform === "win32" ? { file: "cmd", args: ["/c", "start", "", url2] } : { file: "xdg-open", args: [url2] };
-  (0, import_node_child_process4.spawn)(command.file, command.args, { detached: true, stdio: "ignore" }).unref();
+  (0, import_node_child_process5.spawn)(command.file, command.args, { detached: true, stdio: "ignore" }).unref();
 }
 
 // src/codex/siwcStore.ts
@@ -118754,14 +118824,14 @@ init_poolPick();
 init_realAnthropicUsageProbe();
 
 // src/usage/childRun.ts
-var import_node_child_process5 = require("node:child_process");
+var import_node_child_process6 = require("node:child_process");
 init_realPorts();
 var CHILD_GRACE_MS = 3e4;
 var STDERR_TAIL_CHARS = 2e3;
 async function runChild(options) {
   const invocation = (options.invocation ?? selfInvocation)(options.args);
   await new Promise((resolve2, reject) => {
-    const child = (0, import_node_child_process5.spawn)(invocation.command, [...invocation.args], { stdio: ["ignore", "ignore", "pipe"], env: { ...process.env, AGENT_SHIM_HOME: options.paths.root } });
+    const child = (0, import_node_child_process6.spawn)(invocation.command, [...invocation.args], { stdio: ["ignore", "ignore", "pipe"], env: { ...process.env, AGENT_SHIM_HOME: options.paths.root } });
     let stderr = "";
     child.stderr.on("data", (chunk2) => {
       stderr = `${stderr}${chunk2.toString()}`.slice(-STDERR_TAIL_CHARS);
@@ -130973,9 +131043,9 @@ function createLaunchApiRouter(deps) {
           // A POST because the launch's environment and arguments are a body, but the answer changes nothing.
           spec: (current) => ({ ...current, [READ_ONLY_OPERATION_EXTENSION]: true })
         })
-      ).input(LaunchResolveInputSchema).output(LaunchResolveOutputSchema).handler(({ input: input2 }) => {
+      ).input(LaunchResolveInputSchema).output(LaunchResolveOutputSchema).handler(async ({ input: input2 }) => {
         try {
-          const { resolution, warnings } = deps.resolveLaunch({ path: input2.path, argv: input2.argv ?? [], env: input2.env ?? {} });
+          const { resolution, warnings } = await deps.resolveLaunch({ path: input2.path, argv: input2.argv ?? [], env: input2.env ?? {} });
           return { ...resolution, warnings };
         } catch (error63) {
           if (error63 instanceof CliError) {
@@ -132767,7 +132837,7 @@ init_translate();
 init_cloudUpstream();
 
 // src/antigravity/localUpstream.ts
-var import_node_child_process6 = require("node:child_process");
+var import_node_child_process7 = require("node:child_process");
 var import_node_net2 = __toESM(require("node:net"), 1);
 var import_node_readline2 = __toESM(require("node:readline"), 1);
 init_zod();
@@ -132792,7 +132862,7 @@ function spawnProcess(command, signal) {
     throw new Error("ACP command cannot be empty");
   }
   const args = command.slice(1);
-  const proc = (0, import_node_child_process6.spawn)(bin, args, {
+  const proc = (0, import_node_child_process7.spawn)(bin, args, {
     stdio: ["pipe", "pipe", "inherit"],
     signal
   });
@@ -137133,7 +137203,7 @@ function realFrontDoorSupervisorPorts(paths, respawnGeneration, retire, trackTun
         },
         poolNames: () => Object.keys(readPools(paths)).sort(),
         // A read-only resolution of what a launch from one directory would do: the launcher's own decision with its effects left out, so a read never recovers or resyncs a farm, starts a daemon, records a pool pick or runs a credential command.
-        resolveLaunch: (request7) => resolveClaudeLaunch({ argv: request7.argv, cwd: request7.path, env: request7.env, paths }),
+        resolveLaunch: async (request7) => resolveClaudeLaunchAsync({ argv: request7.argv, cwd: request7.path, env: request7.env, paths }),
         // The identities are read per call, like the pool table, so an identity added after the door started is listed the moment the CLI would see it.
         sessionList: (filters) => collectSessionList(realSessionFs, paths.identitiesDir, listIdentities(paths).map((entry) => entry.name), { ...filters.identity === void 0 ? {} : { identity: filters.identity }, ...filters.all === void 0 ? {} : { all: filters.all } }),
         liveTasks: () => rcTracker.liveTasksOf(),
@@ -137827,7 +137897,7 @@ function viewOf(payload) {
 }
 
 // src/statusline/ports.ts
-var import_node_child_process7 = require("node:child_process");
+init_blockingSpawn();
 var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_os12 = __toESM(require("node:os"), 1);
 var import_node_path56 = __toESM(require("node:path"), 1);
@@ -137872,7 +137942,7 @@ var RUN_TIMEOUT_MS = 2e3;
 var RUN_MAX_BUFFER_BYTES = 1048576;
 function runProgram(file2, args, cwd) {
   try {
-    return (0, import_node_child_process7.execFileSync)(file2, [...args], { cwd, encoding: "utf8", timeout: RUN_TIMEOUT_MS, maxBuffer: RUN_MAX_BUFFER_BYTES, stdio: ["ignore", "pipe", "ignore"], windowsHide: true });
+    return execFileSyncBlocking("a statusline command", file2, args, { cwd, encoding: "utf8", timeout: RUN_TIMEOUT_MS, maxBuffer: RUN_MAX_BUFFER_BYTES, stdio: ["ignore", "pipe", "ignore"], windowsHide: true });
   } catch {
     return void 0;
   }
@@ -149714,7 +149784,6 @@ function registerCompletionCommand(program2) {
 }
 
 // src/credentialCommand.ts
-var import_node_child_process9 = require("node:child_process");
 init_commandDeps();
 init_cliError();
 init_schema();
@@ -149754,6 +149823,7 @@ function storeIdentityToken(paths, identityName, raw) {
 init_providersStore();
 init_realPorts();
 init_realCredentialCache();
+init_blockingSpawn();
 async function readStandardInput() {
   const chunks = [];
   for await (const chunk2 of process.stdin) {
@@ -149775,7 +149845,7 @@ function realCommandPorts(deps) {
     cache: createRealCredentialCache(deps.paths.root),
     platform: process.platform,
     now: () => Date.now(),
-    ssh: (host, remoteCommand, input2) => (0, import_node_child_process9.spawnSync)("ssh", ["--", host, remoteCommand], { input: input2, stdio: ["pipe", "inherit", "inherit"] }).status
+    ssh: (host, remoteCommand, input2) => spawnSyncBlocking("an ssh run", "ssh", ["--", host, remoteCommand], { input: input2, stdio: ["pipe", "inherit", "inherit"] }).status
   };
 }
 var REMOTE_ROOT_SCRIPT = 'root="${AGENT_SHIM_HOME:-${CLAUDE_USE_HOME:-}}"; if [ -z "$root" ]; then if [ ! -d "$HOME/.agent-shim" ] && [ -d "$HOME/.claude-use" ]; then root="$HOME/.claude-use"; else root="$HOME/.agent-shim"; fi; fi';
@@ -149915,7 +149985,7 @@ function registerDoctorCommand(program2, deps) {
 var import_node_fs25 = __toESM(require("node:fs"), 1);
 var import_node_http5 = __toESM(require("node:http"), 1);
 var import_node_path64 = __toESM(require("node:path"), 1);
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process9 = require("node:child_process");
 init_commandDeps();
 init_configProfilesStore();
 init_realFrontDoorPort();
@@ -149971,6 +150041,7 @@ function registerHeadroomRoutingCommands(headroom, deps) {
 init_settings();
 init_source();
 init_realPorts();
+init_blockingSpawn();
 init_earlierRelease();
 init_state2();
 init_socket();
@@ -150100,7 +150171,7 @@ async function readyOverSocket(socketPath) {
 }
 var HEADROOM_TOOL_NAME = "headroom-ai";
 function readInstalledHeadroomCommit() {
-  const toolDir = (0, import_node_child_process10.spawnSync)("uv", ["tool", "dir"], { encoding: "utf8" });
+  const toolDir = spawnSyncBlocking("a headroom tool lookup", "uv", ["tool", "dir"], { encoding: "utf8" });
   if (toolDir.status !== 0) {
     return void 0;
   }
@@ -150144,7 +150215,7 @@ function realSupervisorPorts(paths) {
       }
       const logFd = import_node_fs25.default.openSync(paths.headroomLogPath, "a");
       try {
-        const child = (0, import_node_child_process10.spawn)("headroom", headroomProxyArgs(socketPath, allowlistFile, settings2), {
+        const child = (0, import_node_child_process9.spawn)("headroom", headroomProxyArgs(socketPath, allowlistFile, settings2), {
           detached: true,
           stdio: ["ignore", logFd, logFd],
           env: headroomSpawnEnv(process.env, settings2, trust?.path)
@@ -150184,7 +150255,7 @@ function realSupervisorPorts(paths) {
     },
     ready: readyOverSocket,
     install: (spec) => {
-      const result = (0, import_node_child_process10.spawnSync)("uv", ["tool", "install", spec], { encoding: "utf8", timeout: HEADROOM_INSTALL_TIMEOUT_MS });
+      const result = spawnSyncBlocking("a headroom install", "uv", ["tool", "install", spec], { encoding: "utf8", timeout: HEADROOM_INSTALL_TIMEOUT_MS });
       if (result.error !== void 0) {
         const timedOut = "code" in result.error && result.error.code === "ETIMEDOUT";
         return {
@@ -150201,7 +150272,7 @@ function realSupervisorPorts(paths) {
       return result.status === 0 ? { ok: true } : { ok: false, error: `uv tool install exited ${String(result.status)}` };
     },
     headroomVersion: () => {
-      const result = (0, import_node_child_process10.spawnSync)("headroom", ["--version"], { encoding: "utf8" });
+      const result = spawnSyncBlocking("a headroom version check", "headroom", ["--version"], { encoding: "utf8" });
       return result.status === 0 ? result.stdout.trim() : void 0;
     },
     installedCommit: readInstalledHeadroomCommit,
@@ -152318,12 +152389,13 @@ function createIdentityMover(deps) {
 }
 
 // src/supervise/realPorts.ts
-var import_node_child_process11 = require("node:child_process");
+var import_node_child_process10 = require("node:child_process");
 var import_node_fs28 = __toESM(require("node:fs"), 1);
 init_realPorts();
+init_blockingSpawn();
 var realSupervisedSpawnPort = {
   spawn(command, args, options) {
-    const child = (0, import_node_child_process11.spawn)(command, [...args], { stdio: options.stdio, env: { ...options.env } });
+    const child = (0, import_node_child_process10.spawn)(command, [...args], { stdio: options.stdio, env: { ...options.env } });
     const exit = new Promise((resolve2) => {
       child.once("error", (error63) => {
         resolve2({ status: null, signal: null, error: error63 });
@@ -152385,7 +152457,7 @@ function resetTerminal() {
     return;
   }
   process.stdout.write(TERMINAL_RESET);
-  (0, import_node_child_process11.spawnSync)("stty", ["sane"], { stdio: ["inherit", "ignore", "ignore"] });
+  spawnSyncBlocking("a terminal reset", "stty", ["sane"], { stdio: ["inherit", "ignore", "ignore"] });
 }
 
 // src/supervise/supervise.ts

package/dist/index.cjs

@@ -4462,7 +4462,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.57.0",
+      version: "11.57.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -4566,6 +4566,20 @@ var init_package = __esm({
   }
 });
 
+// src/blockingSpawn.ts
+function spawnSyncBlocking(operation, command, args, options) {
+  refuseToBlockInRole(operation);
+  return (0, import_node_child_process2.spawnSync)(command, args, options ?? {});
+}
+var import_node_child_process2;
+var init_blockingSpawn = __esm({
+  "src/blockingSpawn.ts"() {
+    "use strict";
+    import_node_child_process2 = require("node:child_process");
+    init_processRole();
+  }
+});
+
 // src/frontdoor/supervisorProcesses.ts
 function parseFrontDoorSupervisorPids(psOutput) {
   const pids = [];
@@ -5717,27 +5731,23 @@ function realIsProcessAlive(pid) {
   }
 }
 function realIsProcessZombie(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
   return result.status === 0 && result.stdout.trim().startsWith("Z");
 }
 function realIsProcessRunning(pid) {
   return realIsProcessAlive(pid) && !realIsProcessZombie(pid);
 }
 function realIsFrontDoorSupervisor(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "pid=,command=", "-p", String(pid)], { encoding: "utf8" });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "pid=,command=", "-p", String(pid)], { encoding: "utf8" });
   return result.status === 0 && parseFrontDoorSupervisorPids(result.stdout).includes(pid);
 }
 function realProcessCommandLine(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "command=", "-p", String(pid)], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "command=", "-p", String(pid)], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
   return result.status === 0 ? result.stdout.trim() : void 0;
 }
 function realFrontDoorLiveness(pids) {
-  refuseToBlockInRole("a synchronous process-table read");
   return frontDoorLivenessOf(pids, (asked) => {
-    const result = (0, import_node_child_process2.spawnSync)("ps", ["-o", "pid=,stat=,command=", "-p", asked.map(String).join(",")], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
+    const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "pid=,stat=,command=", "-p", asked.map(String).join(",")], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
     return { status: result.status, stdout: result.stdout, stderr: result.stderr, ...result.error === void 0 ? {} : { error: result.error } };
   });
 }
@@ -5746,7 +5756,7 @@ function expandHome2(filePath) {
 }
 function hasDesktopSession() {
   if (process.platform === "darwin") {
-    const result = (0, import_node_child_process2.spawnSync)("launchctl", ["managername"], { encoding: "utf8" });
+    const result = spawnSyncBlocking("a desktop-session check", "launchctl", ["managername"], { encoding: "utf8" });
     return result.status === 0 && result.stdout.trim() === MACOS_GUI_SESSION_MANAGER;
   }
   return hasDisplayServer();
@@ -5792,7 +5802,7 @@ function spawnDetachedDaemon(invocation, paths, subcommand, logPath) {
   import_node_fs2.default.mkdirSync(import_node_path14.default.dirname(logPath), { recursive: true });
   const logFd = import_node_fs2.default.openSync(logPath, "a");
   try {
-    const child = (0, import_node_child_process2.spawn)(invocation.command, invocation.args, detachedDaemonSpawnOptions(logFd, { ...process.env, AGENT_SHIM_HOME: paths.root }));
+    const child = (0, import_node_child_process3.spawn)(invocation.command, invocation.args, detachedDaemonSpawnOptions(logFd, { ...process.env, AGENT_SHIM_HOME: paths.root }));
     child.unref();
     if (child.pid === void 0) {
       throw new Error(`spawning ${subcommand} returned no pid`);
@@ -5942,12 +5952,13 @@ function realResolveClaudeBinary(isOwnBinary) {
 function realInstalledClaudeVersions() {
   return installedVersions(listVersionsDir(defaultVersionsDir()));
 }
-var import_node_child_process2, import_node_crypto8, import_node_fs2, import_node_os2, import_node_path14, import_node_sea, realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, realFarmFs, INT32_BYTE_LENGTH, KEY_POLL_MS, CTRL_C_BYTE, realHoldPort, PS_TIMEOUT_MS, realRunPort, MACOS_GUI_SESSION_MANAGER, realCredentialPort, SOCKET_PERMISSION_BITS, realHeadroomSocketTrust, realSpawnPort, realProcPort, realLogPort, EXECUTE_BITS_MASK, WINDOWS_DEFAULT_PATHEXT;
+var import_node_child_process3, import_node_crypto8, import_node_fs2, import_node_os2, import_node_path14, import_node_sea, realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, realFarmFs, INT32_BYTE_LENGTH, KEY_POLL_MS, CTRL_C_BYTE, realHoldPort, PS_TIMEOUT_MS, realRunPort, MACOS_GUI_SESSION_MANAGER, realCredentialPort, SOCKET_PERMISSION_BITS, realHeadroomSocketTrust, realSpawnPort, realProcPort, realLogPort, EXECUTE_BITS_MASK, WINDOWS_DEFAULT_PATHEXT;
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_blockingSpawn();
     init_processRole();
-    import_node_child_process2 = require("node:child_process");
+    import_node_child_process3 = require("node:child_process");
     import_node_crypto8 = require("node:crypto");
     import_node_fs2 = __toESM(require("node:fs"), 1);
     import_node_os2 = __toESM(require("node:os"), 1);
@@ -6119,7 +6130,7 @@ var init_realPorts = __esm({
     PS_TIMEOUT_MS = 2e3;
     realRunPort = {
       run(command, args) {
-        const result = (0, import_node_child_process2.spawnSync)(command, [...args], { encoding: "utf8" });
+        const result = spawnSyncBlocking("an external command", command, args, { encoding: "utf8" });
         return { status: result.status, stdout: result.stdout, stderr: result.stderr };
       }
     };
@@ -6142,7 +6153,7 @@ var init_realPorts = __esm({
       },
       runCommand(argv, options) {
         const [command, ...args] = argv;
-        const result = (0, import_node_child_process2.spawnSync)(command, args, {
+        const result = spawnSyncBlocking("a credential command", command, args, {
           encoding: "utf8",
           timeout: options.timeoutMs,
           stdio: options.interactive ? ["inherit", "pipe", "inherit"] : ["ignore", "pipe", "pipe"]
@@ -6181,7 +6192,7 @@ var init_realPorts = __esm({
     };
     realSpawnPort = {
       spawnSync(command, args, options) {
-        const result = (0, import_node_child_process2.spawnSync)(command, args, options);
+        const result = spawnSyncBlocking("a spawned program", command, args, options);
         return { status: result.status, signal: result.signal, ...result.error === void 0 ? {} : { error: result.error } };
       }
     };
@@ -8119,7 +8130,7 @@ function requireKeychain() {
   }
 }
 function security(args, stdin) {
-  const result = (0, import_node_child_process3.spawnSync)("security", args, { encoding: "utf8", ...stdin === void 0 ? {} : { input: stdin }, stdio: ["pipe", "pipe", "ignore"] });
+  const result = spawnSyncBlocking("a keychain call", "security", args, { encoding: "utf8", ...stdin === void 0 ? {} : { input: stdin }, stdio: ["pipe", "pipe", "ignore"] });
   return { status: result.status, stdout: result.stdout };
 }
 function createRealCredentialCache(root) {
@@ -8170,13 +8181,13 @@ function createRealCredentialCache(root) {
 function realCredentialCacheEnv(paths) {
   return { port: createRealCredentialCache(paths.root), platform: process.platform, now: () => Date.now() };
 }
-var import_node_child_process3, import_node_fs5, import_node_path24, KEYCHAIN_CACHE_SERVICE, CACHE_DIR_MODE, CACHE_FILE_MODE;
+var import_node_fs5, import_node_path24, KEYCHAIN_CACHE_SERVICE, CACHE_DIR_MODE, CACHE_FILE_MODE;
 var init_realCredentialCache = __esm({
   "src/realCredentialCache.ts"() {
     "use strict";
-    import_node_child_process3 = require("node:child_process");
     import_node_fs5 = __toESM(require("node:fs"), 1);
     import_node_path24 = __toESM(require("node:path"), 1);
+    init_blockingSpawn();
     init_credentialCache();
     KEYCHAIN_CACHE_SERVICE = "agent-shim-credential-cache";
     CACHE_DIR_MODE = 448;
@@ -11543,13 +11554,13 @@ function resolveLaunch(params) {
     environment
   };
 }
-function runLaunchPlan(plan, spawn4) {
+function runLaunchPlan(plan, spawn3) {
   try {
     if (plan.hold() === "cancelled") {
       return LAUNCH_CANCELLED_EXIT;
     }
     plan.markChildStarted();
-    const result = spawn4.spawnSync(plan.bin, plan.args, { stdio: "inherit", env: plan.env });
+    const result = spawn3.spawnSync(plan.bin, plan.args, { stdio: "inherit", env: plan.env });
     if (result.error !== void 0) {
       throw result.error;
     }
@@ -11759,14 +11770,21 @@ var init_realFrontDoorPort = __esm({
   }
 });
 
+// src/replayRun.ts
+var init_replayRun = __esm({
+  "src/replayRun.ts"() {
+    "use strict";
+  }
+});
+
 // src/launchWiring.ts
-function buildFarmRuntime(paths, cwd) {
+function buildFarmRuntime(paths, cwd, run = realRunPort) {
   const home = import_node_os7.default.homedir();
   const read = cosmiconfigReader();
   const classification = loadClassification(paths);
   const loaded = loadCascadeInput({ paths, home, cwd, read });
   const selections = readDirectorySelections(loaded);
-  const git = resolveGitBranch(realRunPort, cwd);
+  const git = resolveGitBranch(run, cwd);
   const updateMode = resolveUpdateMode(loaded.globalConfig);
   return {
     runtime: {
@@ -11813,7 +11831,7 @@ function realPrepareLaunchParams(paths, options) {
     frontdoor: realFrontDoorPort(paths, options.spawnDaemon),
     credentials: { ...realCredentialPort, cache: realCredentialCacheEnv(paths) },
     hold: realHoldPort,
-    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: realRunPort }, { farmRoot: import_node_path42.default.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
+    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: options.run ?? realRunPort }, { farmRoot: import_node_path42.default.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
     ...farm.directoryIdentity === void 0 ? {} : { directoryPinnedIdentity: farm.directoryIdentity },
     ...farm.directoryConfigProfile === void 0 ? {} : { directoryRuleConfigProfile: farm.directoryConfigProfile },
     ...farm.globalDefaultConfigProfile === void 0 ? {} : { globalDefaultConfigProfile: farm.globalDefaultConfigProfile },
@@ -11846,7 +11864,7 @@ function prepareClaudeLaunch(options) {
   const spawnDaemon = daemonSpawnerFor(options.agentShim);
   return prepareLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, farm: buildFarmRuntime(paths, options.cwd) }));
 }
-function resolveClaudeLaunch(options) {
+function resolveClaudeLaunch(options, run = realRunPort) {
   const paths = options.paths ?? resolveLayoutPaths();
   const refusals = [];
   const warnings = [];
@@ -11870,7 +11888,7 @@ function resolveClaudeLaunch(options) {
   const spawnDaemon = () => {
     throw new Error("resolving a launch starts no daemon");
   };
-  return { resolution: resolveLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, farm: buildFarmRuntime(paths, options.cwd) })), warnings };
+  return { resolution: resolveLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, run, farm: buildFarmRuntime(paths, options.cwd, run) })), warnings };
 }
 var import_node_os7, import_node_path42, import_node_crypto13, LaunchRefusedError;
 var init_launchWiring = __esm({
@@ -11889,6 +11907,7 @@ var init_launchWiring = __esm({
     init_launcher();
     init_launchHook();
     init_cascade();
+    init_replayRun();
     init_paths();
     init_signIn();
     init_realPorts();
@@ -18313,9 +18332,9 @@ function createLaunchApiRouter(deps) {
           // A POST because the launch's environment and arguments are a body, but the answer changes nothing.
           spec: (current) => ({ ...current, [READ_ONLY_OPERATION_EXTENSION]: true })
         })
-      ).input(LaunchResolveInputSchema).output(LaunchResolveOutputSchema).handler(({ input }) => {
+      ).input(LaunchResolveInputSchema).output(LaunchResolveOutputSchema).handler(async ({ input }) => {
         try {
-          const { resolution, warnings } = deps.resolveLaunch({ path: input.path, argv: input.argv ?? [], env: input.env ?? {} });
+          const { resolution, warnings } = await deps.resolveLaunch({ path: input.path, argv: input.argv ?? [], env: input.env ?? {} });
           return { ...resolution, warnings };
         } catch (error) {
           if (error instanceof CliError) {

package/dist/index.mjs

@@ -4438,7 +4438,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.57.0",
+      version: "11.57.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -4542,6 +4542,22 @@ var init_package = __esm({
   }
 });
 
+// src/blockingSpawn.ts
+import {
+  execFileSync,
+  spawnSync
+} from "node:child_process";
+function spawnSyncBlocking(operation, command, args, options) {
+  refuseToBlockInRole(operation);
+  return spawnSync(command, args, options ?? {});
+}
+var init_blockingSpawn = __esm({
+  "src/blockingSpawn.ts"() {
+    "use strict";
+    init_processRole();
+  }
+});
+
 // src/frontdoor/supervisorProcesses.ts
 function parseFrontDoorSupervisorPids(psOutput) {
   const pids = [];
@@ -5673,7 +5689,7 @@ var init_logStyle = __esm({
 });
 
 // src/realPorts.ts
-import { execFile, spawn as spawn2, spawnSync } from "node:child_process";
+import { execFile, spawn as spawn2 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import fs3 from "node:fs";
 import os3 from "node:os";
@@ -5698,27 +5714,23 @@ function realIsProcessAlive(pid) {
   }
 }
 function realIsProcessZombie(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = spawnSync("ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8" });
   return result.status === 0 && result.stdout.trim().startsWith("Z");
 }
 function realIsProcessRunning(pid) {
   return realIsProcessAlive(pid) && !realIsProcessZombie(pid);
 }
 function realIsFrontDoorSupervisor(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = spawnSync("ps", ["-o", "pid=,command=", "-p", String(pid)], { encoding: "utf8" });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "pid=,command=", "-p", String(pid)], { encoding: "utf8" });
   return result.status === 0 && parseFrontDoorSupervisorPids(result.stdout).includes(pid);
 }
 function realProcessCommandLine(pid) {
-  refuseToBlockInRole("a synchronous process-table read");
-  const result = spawnSync("ps", ["-o", "command=", "-p", String(pid)], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
+  const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "command=", "-p", String(pid)], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
   return result.status === 0 ? result.stdout.trim() : void 0;
 }
 function realFrontDoorLiveness(pids) {
-  refuseToBlockInRole("a synchronous process-table read");
   return frontDoorLivenessOf(pids, (asked) => {
-    const result = spawnSync("ps", ["-o", "pid=,stat=,command=", "-p", asked.map(String).join(",")], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
+    const result = spawnSyncBlocking("a process-table read", "ps", ["-o", "pid=,stat=,command=", "-p", asked.map(String).join(",")], { encoding: "utf8", timeout: PS_TIMEOUT_MS });
     return { status: result.status, stdout: result.stdout, stderr: result.stderr, ...result.error === void 0 ? {} : { error: result.error } };
   });
 }
@@ -5727,7 +5739,7 @@ function expandHome2(filePath) {
 }
 function hasDesktopSession() {
   if (process.platform === "darwin") {
-    const result = spawnSync("launchctl", ["managername"], { encoding: "utf8" });
+    const result = spawnSyncBlocking("a desktop-session check", "launchctl", ["managername"], { encoding: "utf8" });
     return result.status === 0 && result.stdout.trim() === MACOS_GUI_SESSION_MANAGER;
   }
   return hasDisplayServer();
@@ -5927,6 +5939,7 @@ var realFsPort, OWNER_ONLY_DIR_MODE, OWNER_ONLY_FILE_MODE, PERMISSION_BITS, real
 var init_realPorts = __esm({
   "src/realPorts.ts"() {
     "use strict";
+    init_blockingSpawn();
     init_processRole();
     init_load();
     init_versionDiscovery();
@@ -6094,7 +6107,7 @@ var init_realPorts = __esm({
     PS_TIMEOUT_MS = 2e3;
     realRunPort = {
       run(command, args) {
-        const result = spawnSync(command, [...args], { encoding: "utf8" });
+        const result = spawnSyncBlocking("an external command", command, args, { encoding: "utf8" });
         return { status: result.status, stdout: result.stdout, stderr: result.stderr };
       }
     };
@@ -6117,7 +6130,7 @@ var init_realPorts = __esm({
       },
       runCommand(argv, options) {
         const [command, ...args] = argv;
-        const result = spawnSync(command, args, {
+        const result = spawnSyncBlocking("a credential command", command, args, {
           encoding: "utf8",
           timeout: options.timeoutMs,
           stdio: options.interactive ? ["inherit", "pipe", "inherit"] : ["ignore", "pipe", "pipe"]
@@ -6156,7 +6169,7 @@ var init_realPorts = __esm({
     };
     realSpawnPort = {
       spawnSync(command, args, options) {
-        const result = spawnSync(command, args, options);
+        const result = spawnSyncBlocking("a spawned program", command, args, options);
         return { status: result.status, signal: result.signal, ...result.error === void 0 ? {} : { error: result.error } };
       }
     };
@@ -8072,7 +8085,6 @@ var init_credentialCache = __esm({
 });
 
 // src/realCredentialCache.ts
-import { spawn as spawn3, spawnSync as spawnSync2 } from "node:child_process";
 import fs6 from "node:fs";
 import path24 from "node:path";
 function cacheFileNameFor(owner) {
@@ -8094,7 +8106,7 @@ function requireKeychain() {
   }
 }
 function security(args, stdin) {
-  const result = spawnSync2("security", args, { encoding: "utf8", ...stdin === void 0 ? {} : { input: stdin }, stdio: ["pipe", "pipe", "ignore"] });
+  const result = spawnSyncBlocking("a keychain call", "security", args, { encoding: "utf8", ...stdin === void 0 ? {} : { input: stdin }, stdio: ["pipe", "pipe", "ignore"] });
   return { status: result.status, stdout: result.stdout };
 }
 function createRealCredentialCache(root) {
@@ -8149,6 +8161,7 @@ var KEYCHAIN_CACHE_SERVICE, CACHE_DIR_MODE, CACHE_FILE_MODE;
 var init_realCredentialCache = __esm({
   "src/realCredentialCache.ts"() {
     "use strict";
+    init_blockingSpawn();
     init_credentialCache();
     KEYCHAIN_CACHE_SERVICE = "agent-shim-credential-cache";
     CACHE_DIR_MODE = 448;
@@ -11517,13 +11530,13 @@ function resolveLaunch(params) {
     environment
   };
 }
-function runLaunchPlan(plan, spawn4) {
+function runLaunchPlan(plan, spawn3) {
   try {
     if (plan.hold() === "cancelled") {
       return LAUNCH_CANCELLED_EXIT;
     }
     plan.markChildStarted();
-    const result = spawn4.spawnSync(plan.bin, plan.args, { stdio: "inherit", env: plan.env });
+    const result = spawn3.spawnSync(plan.bin, plan.args, { stdio: "inherit", env: plan.env });
     if (result.error !== void 0) {
       throw result.error;
     }
@@ -11728,17 +11741,24 @@ var init_realFrontDoorPort = __esm({
   }
 });
 
+// src/replayRun.ts
+var init_replayRun = __esm({
+  "src/replayRun.ts"() {
+    "use strict";
+  }
+});
+
 // src/launchWiring.ts
 import os8 from "node:os";
 import path42 from "node:path";
 import { randomUUID as randomUUID5 } from "node:crypto";
-function buildFarmRuntime(paths, cwd) {
+function buildFarmRuntime(paths, cwd, run = realRunPort) {
   const home = os8.homedir();
   const read = cosmiconfigReader();
   const classification = loadClassification(paths);
   const loaded = loadCascadeInput({ paths, home, cwd, read });
   const selections = readDirectorySelections(loaded);
-  const git = resolveGitBranch(realRunPort, cwd);
+  const git = resolveGitBranch(run, cwd);
   const updateMode = resolveUpdateMode(loaded.globalConfig);
   return {
     runtime: {
@@ -11785,7 +11805,7 @@ function realPrepareLaunchParams(paths, options) {
     frontdoor: realFrontDoorPort(paths, options.spawnDaemon),
     credentials: { ...realCredentialPort, cache: realCredentialCacheEnv(paths) },
     hold: realHoldPort,
-    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: realRunPort }, { farmRoot: path42.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
+    hasStoredLogin: (identity) => identitySignIn(realFarmFs, { platform: process.platform, run: options.run ?? realRunPort }, { farmRoot: path42.join(paths.identitiesDir, identity), hasCredentialBlock: false }).state !== "signed-out",
     ...farm.directoryIdentity === void 0 ? {} : { directoryPinnedIdentity: farm.directoryIdentity },
     ...farm.directoryConfigProfile === void 0 ? {} : { directoryRuleConfigProfile: farm.directoryConfigProfile },
     ...farm.globalDefaultConfigProfile === void 0 ? {} : { globalDefaultConfigProfile: farm.globalDefaultConfigProfile },
@@ -11818,7 +11838,7 @@ function prepareClaudeLaunch(options) {
   const spawnDaemon = daemonSpawnerFor(options.agentShim);
   return prepareLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, farm: buildFarmRuntime(paths, options.cwd) }));
 }
-function resolveClaudeLaunch(options) {
+function resolveClaudeLaunch(options, run = realRunPort) {
   const paths = options.paths ?? resolveLayoutPaths();
   const refusals = [];
   const warnings = [];
@@ -11842,7 +11862,7 @@ function resolveClaudeLaunch(options) {
   const spawnDaemon = () => {
     throw new Error("resolving a launch starts no daemon");
   };
-  return { resolution: resolveLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, farm: buildFarmRuntime(paths, options.cwd) })), warnings };
+  return { resolution: resolveLaunch(realPrepareLaunchParams(paths, { proc, log, spawnDaemon, run, farm: buildFarmRuntime(paths, options.cwd, run) })), warnings };
 }
 var LaunchRefusedError;
 var init_launchWiring = __esm({
@@ -11858,6 +11878,7 @@ var init_launchWiring = __esm({
     init_launcher();
     init_launchHook();
     init_cascade();
+    init_replayRun();
     init_paths();
     init_signIn();
     init_realPorts();
@@ -17898,9 +17919,9 @@ function createLaunchApiRouter(deps) {
           // A POST because the launch's environment and arguments are a body, but the answer changes nothing.
           spec: (current) => ({ ...current, [READ_ONLY_OPERATION_EXTENSION]: true })
         })
-      ).input(LaunchResolveInputSchema).output(LaunchResolveOutputSchema).handler(({ input }) => {
+      ).input(LaunchResolveInputSchema).output(LaunchResolveOutputSchema).handler(async ({ input }) => {
         try {
-          const { resolution, warnings } = deps.resolveLaunch({ path: input.path, argv: input.argv ?? [], env: input.env ?? {} });
+          const { resolution, warnings } = await deps.resolveLaunch({ path: input.path, argv: input.argv ?? [], env: input.env ?? {} });
           return { ...resolution, warnings };
         } catch (error) {
           if (error instanceof CliError) {

package/dist/types/index.d.ts

@@ -12091,10 +12091,10 @@ interface LaunchApiDeps {
         readonly path: string;
         readonly argv: readonly string[];
         readonly env: Readonly<Record<string, string>>;
-    }) => {
+    }) => Promise<{
         readonly resolution: LaunchResolution;
         readonly warnings: readonly string[];
-    };
+    }>;
 }
 /** Builds the launch router: one read, behind the control-token middleware. */
 declare function createLaunchApiRouter(deps: LaunchApiDeps): {
@@ -22812,7 +22812,7 @@ interface ClaudeLaunchResolution {
  *
  * A launch that would be refused throws `LaunchRefusedError` carrying the launcher's own message, exactly as `prepareClaudeLaunch` does.
  */
-declare function resolveClaudeLaunch(options: ResolveClaudeLaunchOptions): ClaudeLaunchResolution;
+declare function resolveClaudeLaunch(options: ResolveClaudeLaunchOptions, run?: RunPort): ClaudeLaunchResolution;
 
 /** How one refresh ended. */
 type AnthropicRefreshOutcome = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "11.57.0",
+  "version": "11.57.1",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",