claude-use 11.67.0 → 11.67.1

package/dist/cli.cjs

@@ -29675,6 +29675,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
       return HEADROOM_SUPERVISOR_STILL_RUNNING;
     }
     ticks += 1;
+    if (ports.rotateDaemonLog({ maxBytes: HEADROOM_LOG_MAX_BYTES, keptGenerations: HEADROOM_LOG_KEPT_GENERATIONS })) {
+      ports.log(`agent-shim headroom supervisor: rotated the daemon log past ${String(HEADROOM_LOG_MAX_BYTES)} bytes, keeping ${String(HEADROOM_LOG_KEPT_GENERATIONS)} earlier file(s)`);
+    }
     config2 = ports.readConfig();
     const settingsHash = hashSettings(config2.settings);
     const inputs = currentHeadroomAllowlistInputs(fs31, paths, ports.frontDoorLiveness);
@@ -29825,7 +29828,7 @@ function lastLines(output2) {
   const lines = redactText(output2).split("\n").map((line) => line.trim()).filter((line) => line !== "").map((line) => line.length > DAEMON_EXIT_LOG_LINE_CHARS ? `${line.slice(0, DAEMON_EXIT_LOG_LINE_CHARS)}...` : line);
   return lines.length === 0 ? "(the daemon wrote nothing)" : lines.slice(-DAEMON_EXIT_LOG_LINES).join(" | ");
 }
-var import_node_path9, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, HEADROOM_POLL_MS, MS_PER_MINUTE, STOP_POLL_MS, TERM_GRACE_MS, KILL_GRACE_MS, HEADROOM_SUPERVISOR_STILL_RUNNING;
+var import_node_path9, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, BYTES_PER_KIB, BYTES_PER_MIB, HEADROOM_LOG_MAX_MIB, HEADROOM_LOG_MAX_BYTES, HEADROOM_LOG_KEPT_GENERATIONS, HEADROOM_POLL_MS, MS_PER_MINUTE, STOP_POLL_MS, TERM_GRACE_MS, KILL_GRACE_MS, HEADROOM_SUPERVISOR_STILL_RUNNING;
 var init_supervisor = __esm({
   "src/headroom/supervisor.ts"() {
     "use strict";
@@ -29845,6 +29848,11 @@ var init_supervisor = __esm({
     DAEMON_EXIT_LOG_LINES = 6;
     DAEMON_EXIT_LOG_LINE_CHARS = 400;
     DAEMON_LOG_TAIL_BYTES = 8192;
+    BYTES_PER_KIB = 1024;
+    BYTES_PER_MIB = BYTES_PER_KIB * BYTES_PER_KIB;
+    HEADROOM_LOG_MAX_MIB = 64;
+    HEADROOM_LOG_MAX_BYTES = HEADROOM_LOG_MAX_MIB * BYTES_PER_MIB;
+    HEADROOM_LOG_KEPT_GENERATIONS = 2;
     HEADROOM_POLL_MS = 1e3;
     MS_PER_MINUTE = 6e4;
     STOP_POLL_MS = 100;
@@ -37379,7 +37387,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.67.0",
+      version: "11.67.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -134063,9 +134071,9 @@ async function headroomReady(deps, signal) {
 }
 var HOP_RESET_RETRIES = 1;
 var HOP_RESET_CODES = /* @__PURE__ */ new Set(["ECONNRESET", "EPIPE"]);
-var BYTES_PER_MIB = 1048576;
+var BYTES_PER_MIB2 = 1048576;
 var MESSAGES_API_LIMIT_MIB = 32;
-var MAX_BODY_BYTES = MESSAGES_API_LIMIT_MIB * BYTES_PER_MIB;
+var MAX_BODY_BYTES = MESSAGES_API_LIMIT_MIB * BYTES_PER_MIB2;
 async function collectBody(body) {
   return await new Promise((resolve3) => {
     const chunks = [];
@@ -135754,9 +135762,9 @@ var import_node_stream3 = require("node:stream");
 
 // src/frontdoor/requestScan.ts
 var import_node_stream2 = require("node:stream");
-var BYTES_PER_KIB = 1024;
+var BYTES_PER_KIB2 = 1024;
 var SCAN_KIB = 64;
-var REQUEST_SCAN_CAP_BYTES = SCAN_KIB * BYTES_PER_KIB;
+var REQUEST_SCAN_CAP_BYTES = SCAN_KIB * BYTES_PER_KIB2;
 async function scanRequestHead(request7, wholeBody = false) {
   const body = request7.body;
   const head = [];
@@ -154848,6 +154856,25 @@ var import_node_path65 = __toESM(require("node:path"), 1);
 var import_node_child_process10 = require("node:child_process");
 init_commandDeps();
 init_configProfilesStore();
+
+// src/logRotation.ts
+function rotateLogIfOver(fs31, logPath, limits) {
+  if ((fs31.lstat(logPath)?.sizeBytes ?? 0) <= limits.maxBytes) {
+    return false;
+  }
+  const generation = (index) => `${logPath}.${String(index)}`;
+  fs31.removeRecursive(generation(limits.keptGenerations));
+  for (let index = limits.keptGenerations - 1; index >= 1; index -= 1) {
+    if (fs31.lstat(generation(index)) !== void 0) {
+      fs31.rename(generation(index), generation(index + 1));
+    }
+  }
+  fs31.copyRecursive(logPath, generation(1));
+  fs31.writeFileUtf8(logPath, "");
+  return true;
+}
+
+// src/headroom/commands.ts
 init_realFrontDoorPort();
 init_trust();
 
@@ -155064,6 +155091,7 @@ function realSupervisorPorts(paths) {
     daemonCommandLine: realProcessCommandLine,
     daemonLogSize: () => realFileSize(paths.headroomLogPath),
     readDaemonLogTail: (fromByte, maxBytes) => realReadFileTail(paths.headroomLogPath, fromByte, maxBytes),
+    rotateDaemonLog: (limits) => rotateLogIfOver(realFarmFs, paths.headroomLogPath, limits),
     socketTrust: realHeadroomSocketTrust,
     readConfig: () => resolveSupervisorConfig(readGlobalConfig(paths)?.headroom ?? {}),
     spawnHeadroom: (socketPath, allowlistFile, settings2) => {

package/dist/index.cjs

@@ -4762,7 +4762,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.67.0",
+      version: "11.67.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -5773,6 +5773,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
       return HEADROOM_SUPERVISOR_STILL_RUNNING;
     }
     ticks += 1;
+    if (ports.rotateDaemonLog({ maxBytes: HEADROOM_LOG_MAX_BYTES, keptGenerations: HEADROOM_LOG_KEPT_GENERATIONS })) {
+      ports.log(`agent-shim headroom supervisor: rotated the daemon log past ${String(HEADROOM_LOG_MAX_BYTES)} bytes, keeping ${String(HEADROOM_LOG_KEPT_GENERATIONS)} earlier file(s)`);
+    }
     config = ports.readConfig();
     const settingsHash = hashSettings(config.settings);
     const inputs = currentHeadroomAllowlistInputs(fs14, paths, ports.frontDoorLiveness);
@@ -5923,7 +5926,7 @@ function lastLines(output) {
   const lines = redactText(output).split("\n").map((line) => line.trim()).filter((line) => line !== "").map((line) => line.length > DAEMON_EXIT_LOG_LINE_CHARS ? `${line.slice(0, DAEMON_EXIT_LOG_LINE_CHARS)}...` : line);
   return lines.length === 0 ? "(the daemon wrote nothing)" : lines.slice(-DAEMON_EXIT_LOG_LINES).join(" | ");
 }
-var import_node_path14, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, HEADROOM_POLL_MS, MS_PER_MINUTE2, HEADROOM_SUPERVISOR_STILL_RUNNING;
+var import_node_path14, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, BYTES_PER_KIB, BYTES_PER_MIB, HEADROOM_LOG_MAX_MIB, HEADROOM_LOG_MAX_BYTES, HEADROOM_LOG_KEPT_GENERATIONS, HEADROOM_POLL_MS, MS_PER_MINUTE2, HEADROOM_SUPERVISOR_STILL_RUNNING;
 var init_supervisor2 = __esm({
   "src/headroom/supervisor.ts"() {
     "use strict";
@@ -5943,6 +5946,11 @@ var init_supervisor2 = __esm({
     DAEMON_EXIT_LOG_LINES = 6;
     DAEMON_EXIT_LOG_LINE_CHARS = 400;
     DAEMON_LOG_TAIL_BYTES = 8192;
+    BYTES_PER_KIB = 1024;
+    BYTES_PER_MIB = BYTES_PER_KIB * BYTES_PER_KIB;
+    HEADROOM_LOG_MAX_MIB = 64;
+    HEADROOM_LOG_MAX_BYTES = HEADROOM_LOG_MAX_MIB * BYTES_PER_MIB;
+    HEADROOM_LOG_KEPT_GENERATIONS = 2;
     HEADROOM_POLL_MS = 1e3;
     MS_PER_MINUTE2 = 6e4;
     HEADROOM_SUPERVISOR_STILL_RUNNING = -1;

package/dist/index.mjs

@@ -4738,7 +4738,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.67.0",
+      version: "11.67.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -5750,6 +5750,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
       return HEADROOM_SUPERVISOR_STILL_RUNNING;
     }
     ticks += 1;
+    if (ports.rotateDaemonLog({ maxBytes: HEADROOM_LOG_MAX_BYTES, keptGenerations: HEADROOM_LOG_KEPT_GENERATIONS })) {
+      ports.log(`agent-shim headroom supervisor: rotated the daemon log past ${String(HEADROOM_LOG_MAX_BYTES)} bytes, keeping ${String(HEADROOM_LOG_KEPT_GENERATIONS)} earlier file(s)`);
+    }
     config = ports.readConfig();
     const settingsHash = hashSettings(config.settings);
     const inputs = currentHeadroomAllowlistInputs(fs14, paths, ports.frontDoorLiveness);
@@ -5900,7 +5903,7 @@ function lastLines(output) {
   const lines = redactText(output).split("\n").map((line) => line.trim()).filter((line) => line !== "").map((line) => line.length > DAEMON_EXIT_LOG_LINE_CHARS ? `${line.slice(0, DAEMON_EXIT_LOG_LINE_CHARS)}...` : line);
   return lines.length === 0 ? "(the daemon wrote nothing)" : lines.slice(-DAEMON_EXIT_LOG_LINES).join(" | ");
 }
-var HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, HEADROOM_POLL_MS, MS_PER_MINUTE2, HEADROOM_SUPERVISOR_STILL_RUNNING;
+var HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, BYTES_PER_KIB, BYTES_PER_MIB, HEADROOM_LOG_MAX_MIB, HEADROOM_LOG_MAX_BYTES, HEADROOM_LOG_KEPT_GENERATIONS, HEADROOM_POLL_MS, MS_PER_MINUTE2, HEADROOM_SUPERVISOR_STILL_RUNNING;
 var init_supervisor2 = __esm({
   "src/headroom/supervisor.ts"() {
     "use strict";
@@ -5919,6 +5922,11 @@ var init_supervisor2 = __esm({
     DAEMON_EXIT_LOG_LINES = 6;
     DAEMON_EXIT_LOG_LINE_CHARS = 400;
     DAEMON_LOG_TAIL_BYTES = 8192;
+    BYTES_PER_KIB = 1024;
+    BYTES_PER_MIB = BYTES_PER_KIB * BYTES_PER_KIB;
+    HEADROOM_LOG_MAX_MIB = 64;
+    HEADROOM_LOG_MAX_BYTES = HEADROOM_LOG_MAX_MIB * BYTES_PER_MIB;
+    HEADROOM_LOG_KEPT_GENERATIONS = 2;
     HEADROOM_POLL_MS = 1e3;
     MS_PER_MINUTE2 = 6e4;
     HEADROOM_SUPERVISOR_STILL_RUNNING = -1;

package/dist/types/index.d.ts

@@ -8895,6 +8895,14 @@ interface FileAllowlistDrift {
     readonly hashLags: boolean;
 }
 
+/** When a log is rotated and how much of its history is kept. */
+interface LogRotationLimits {
+    /** The size in bytes above which the live file is rotated. */
+    readonly maxBytes: number;
+    /** How many rotated files are kept beside the live one, at least one: `<log>.1` is the newest and `<log>.<keptGenerations>` the oldest, and the file shifted past it is deleted. */
+    readonly keptGenerations: number;
+}
+
 /** The token-saving settings of the `headroom` config block, without its install and lifecycle fields (`source`, `idleShutdownMinutes`). */
 type HeadroomSettings = Pick<HeadroomGlobalConfig, "mode" | "targetRatio" | "ccr" | "rolloutChannel" | "interceptToolResults" | "readMaturation">;
 
@@ -8929,8 +8937,10 @@ interface SupervisorPorts {
     readonly frontDoorLiveness: (pids: readonly number[]) => FrontDoorLiveness;
     /** The daemon log's size in bytes (0 before it exists): where the next start attempt's own output will begin. */
     readonly daemonLogSize: () => number;
-    /** The daemon log from byte `fromByte` to its end, at most its last `maxBytes`, read without loading the whole file (nothing rotates the log). */
+    /** The daemon log from byte `fromByte` to its end, at most its last `maxBytes`, read without loading the whole file. */
     readonly readDaemonLogTail: (fromByte: number, maxBytes: number) => string;
+    /** Rotates the daemon log when it is over `limits.maxBytes` (see `rotateLogIfOver`), returning whether it did. Every offset `daemonLogSize` returned earlier is invalid afterwards, so the supervisor calls it only at the top of a tick, before it takes the offset of any start attempt. */
+    readonly rotateDaemonLog: (limits: LogRotationLimits) => boolean;
     /** The command line of a running process as `ps` reports it, or undefined when it cannot be read: how a recorded orphan daemon is confirmed to be one before it is signalled (see `daemonIdentity`). */
     readonly daemonCommandLine: (pid: number) => string | undefined;
     /** The platform facts and owner-only checks the daemon's socket directory is prepared and verified with (see `prepareHeadroomSocket`). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "11.67.0",
+  "version": "11.67.1",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",