claude-use 11.67.0 → 11.67.2

package/README.md

@@ -266,7 +266,7 @@ pnpm schema      # regenerate schema/*.schema.json from src/config/schema.ts; CI
 
 Run a single test file directly with `pnpm exec vitest run <path>`. Tests never touch a real identity: `vitest.config.ts` sets `AGENT_SHIM_HOME` to a throwaway directory, and a setup file refuses to run at all if that variable is unset or resolves to the real `~/.agent-shim`.
 
-Commits are gated by Husky hooks: `commit-msg` enforces conventional-commit format, `pre-commit` runs `eslint --fix` on staged files and rejects merge/squash commits and mass deletions on `main`, and `pre-push` runs the full test suite and also rejects a push that would delete more than 100 files on the remote.
+Commits are gated by Husky hooks: `commit-msg` enforces conventional-commit format, `pre-commit` runs `eslint --fix` on staged files and rejects merge/squash commits and mass deletions on `main`, and `pre-push` runs typecheck, the schema drift check, knip and the tests related to what the push changes (CI runs the full suite) and also rejects a push that would delete more than 100 files on the remote.
 
 A fresh clone needs one extra step before committing anything, since git stores filter definitions in `.git/config` rather than in the repository:
 

package/dist/cli.cjs

@@ -29675,6 +29675,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
       return HEADROOM_SUPERVISOR_STILL_RUNNING;
     }
     ticks += 1;
+    if (ports.rotateDaemonLog({ maxBytes: HEADROOM_LOG_MAX_BYTES, keptGenerations: HEADROOM_LOG_KEPT_GENERATIONS })) {
+      ports.log(`agent-shim headroom supervisor: rotated the daemon log past ${String(HEADROOM_LOG_MAX_BYTES)} bytes, keeping ${String(HEADROOM_LOG_KEPT_GENERATIONS)} earlier file(s)`);
+    }
     config2 = ports.readConfig();
     const settingsHash = hashSettings(config2.settings);
     const inputs = currentHeadroomAllowlistInputs(fs31, paths, ports.frontDoorLiveness);
@@ -29825,7 +29828,7 @@ function lastLines(output2) {
   const lines = redactText(output2).split("\n").map((line) => line.trim()).filter((line) => line !== "").map((line) => line.length > DAEMON_EXIT_LOG_LINE_CHARS ? `${line.slice(0, DAEMON_EXIT_LOG_LINE_CHARS)}...` : line);
   return lines.length === 0 ? "(the daemon wrote nothing)" : lines.slice(-DAEMON_EXIT_LOG_LINES).join(" | ");
 }
-var import_node_path9, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, HEADROOM_POLL_MS, MS_PER_MINUTE, STOP_POLL_MS, TERM_GRACE_MS, KILL_GRACE_MS, HEADROOM_SUPERVISOR_STILL_RUNNING;
+var import_node_path9, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, BYTES_PER_KIB, BYTES_PER_MIB, HEADROOM_LOG_MAX_MIB, HEADROOM_LOG_MAX_BYTES, HEADROOM_LOG_KEPT_GENERATIONS, HEADROOM_POLL_MS, MS_PER_MINUTE, STOP_POLL_MS, TERM_GRACE_MS, KILL_GRACE_MS, HEADROOM_SUPERVISOR_STILL_RUNNING;
 var init_supervisor = __esm({
   "src/headroom/supervisor.ts"() {
     "use strict";
@@ -29845,6 +29848,11 @@ var init_supervisor = __esm({
     DAEMON_EXIT_LOG_LINES = 6;
     DAEMON_EXIT_LOG_LINE_CHARS = 400;
     DAEMON_LOG_TAIL_BYTES = 8192;
+    BYTES_PER_KIB = 1024;
+    BYTES_PER_MIB = BYTES_PER_KIB * BYTES_PER_KIB;
+    HEADROOM_LOG_MAX_MIB = 64;
+    HEADROOM_LOG_MAX_BYTES = HEADROOM_LOG_MAX_MIB * BYTES_PER_MIB;
+    HEADROOM_LOG_KEPT_GENERATIONS = 2;
     HEADROOM_POLL_MS = 1e3;
     MS_PER_MINUTE = 6e4;
     STOP_POLL_MS = 100;
@@ -37379,7 +37387,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.67.0",
+      version: "11.67.2",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -119453,11 +119461,16 @@ function createHeadroomKeeper(deps) {
       ports.fs.removeRecursive(paths.headroomLockFile);
     }
   };
-  const tick = () => {
-    const state = resolveServingHeadroomState(ports.fs, { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile }, ports.isRunning)?.state;
+  const tick = async () => {
+    const stateFiles = { stateFile: paths.headroomStateFile, legacyStateFile: paths.headroomLegacyStateFile };
+    const sessions = listSessions(ports.fs, paths.headroomSessionsDir);
+    const asked = new Set([readHeadroomState(ports.fs, stateFiles.stateFile)?.supervisorPid, readHeadroomState(ports.fs, stateFiles.legacyStateFile)?.supervisorPid, readStartLock(ports.fs, paths.headroomLockFile)?.pid, ...sessions.flatMap((session) => [session.pid, session.supervisorPid])].filter((pid) => pid !== void 0));
+    const running = await ports.runningAmong([...asked]);
+    const isRunning = (pid) => !asked.has(pid) || running.has(pid);
+    const state = resolveServingHeadroomState(ports.fs, stateFiles, isRunning)?.state;
     const supervisorPid = state?.supervisorPid;
-    const orphans = listSessions(ports.fs, paths.headroomSessionsDir).filter((session) => ports.isRunning(session.pid) && !ports.isRunning(session.supervisorPid));
-    if (supervisorPid !== void 0 && ports.isRunning(supervisorPid)) {
+    const orphans = sessions.filter((session) => isRunning(session.pid) && !isRunning(session.supervisorPid));
+    if (supervisorPid !== void 0 && isRunning(supervisorPid)) {
       lastAttemptAt = void 0;
       releaseOwnLock();
       for (const session of orphans) {
@@ -119476,7 +119489,7 @@ function createHeadroomKeeper(deps) {
     }
     releaseOwnLock();
     lastAttemptAt = ports.now();
-    const start = startSupervisorUnderLock({ paths, holderPid: deps.ownPid, ports });
+    const start = startSupervisorUnderLock({ paths, holderPid: deps.ownPid, ports: { fs: ports.fs, now: ports.now, isRunning, spawnSupervisor: ports.spawnSupervisor } });
     log(`front door: headroom supervisor is not running and ${String(orphans.length)} launcher(s) are registered against it (${start})`);
     return { kind: "starting", start, waiting: orphans.length };
   };
@@ -134063,9 +134076,9 @@ async function headroomReady(deps, signal) {
 }
 var HOP_RESET_RETRIES = 1;
 var HOP_RESET_CODES = /* @__PURE__ */ new Set(["ECONNRESET", "EPIPE"]);
-var BYTES_PER_MIB = 1048576;
+var BYTES_PER_MIB2 = 1048576;
 var MESSAGES_API_LIMIT_MIB = 32;
-var MAX_BODY_BYTES = MESSAGES_API_LIMIT_MIB * BYTES_PER_MIB;
+var MAX_BODY_BYTES = MESSAGES_API_LIMIT_MIB * BYTES_PER_MIB2;
 async function collectBody(body) {
   return await new Promise((resolve3) => {
     const chunks = [];
@@ -135754,9 +135767,9 @@ var import_node_stream3 = require("node:stream");
 
 // src/frontdoor/requestScan.ts
 var import_node_stream2 = require("node:stream");
-var BYTES_PER_KIB = 1024;
+var BYTES_PER_KIB2 = 1024;
 var SCAN_KIB = 64;
-var REQUEST_SCAN_CAP_BYTES = SCAN_KIB * BYTES_PER_KIB;
+var REQUEST_SCAN_CAP_BYTES = SCAN_KIB * BYTES_PER_KIB2;
 async function scanRequestHead(request7, wholeBody = false) {
   const body = request7.body;
   const head = [];
@@ -139674,15 +139687,20 @@ function realFrontDoorSupervisorPorts(paths, respawnGeneration, lifecycle, track
   const headroomKeeper = createHeadroomKeeper({
     paths,
     ownPid: process.pid,
-    ports: { fs: realFarmFs, now: () => Date.now(), isRunning: realIsProcessRunning, spawnSupervisor: (layout) => spawnDetachedSupervisor(layout, "__headroom-supervisor", layout.headroomLogPath) },
+    ports: { fs: realFarmFs, now: () => Date.now(), runningAmong: realRunningAmong, spawnSupervisor: (layout) => spawnDetachedSupervisor(layout, "__headroom-supervisor", layout.headroomLogPath) },
     log
   });
+  let headroomKeeperTicking = false;
   const headroomKeeperTimer = setInterval(() => {
-    try {
-      headroomKeeper.tick();
-    } catch (error63) {
-      log(`headroom keeper failed: ${error63 instanceof Error ? error63.message : String(error63)}`);
+    if (headroomKeeperTicking) {
+      return;
     }
+    headroomKeeperTicking = true;
+    headroomKeeper.tick().catch((error63) => {
+      log(`headroom keeper failed: ${error63 instanceof Error ? error63.message : String(error63)}`);
+    }).finally(() => {
+      headroomKeeperTicking = false;
+    });
   }, HEADROOM_POLL_MS);
   headroomKeeperTimer.unref();
   keeperTimers.push(headroomKeeperTimer);
@@ -154848,6 +154866,25 @@ var import_node_path65 = __toESM(require("node:path"), 1);
 var import_node_child_process10 = require("node:child_process");
 init_commandDeps();
 init_configProfilesStore();
+
+// src/logRotation.ts
+function rotateLogIfOver(fs31, logPath, limits) {
+  if ((fs31.lstat(logPath)?.sizeBytes ?? 0) <= limits.maxBytes) {
+    return false;
+  }
+  const generation = (index) => `${logPath}.${String(index)}`;
+  fs31.removeRecursive(generation(limits.keptGenerations));
+  for (let index = limits.keptGenerations - 1; index >= 1; index -= 1) {
+    if (fs31.lstat(generation(index)) !== void 0) {
+      fs31.rename(generation(index), generation(index + 1));
+    }
+  }
+  fs31.copyRecursive(logPath, generation(1));
+  fs31.writeFileUtf8(logPath, "");
+  return true;
+}
+
+// src/headroom/commands.ts
 init_realFrontDoorPort();
 init_trust();
 
@@ -155064,6 +155101,7 @@ function realSupervisorPorts(paths) {
     daemonCommandLine: realProcessCommandLine,
     daemonLogSize: () => realFileSize(paths.headroomLogPath),
     readDaemonLogTail: (fromByte, maxBytes) => realReadFileTail(paths.headroomLogPath, fromByte, maxBytes),
+    rotateDaemonLog: (limits) => rotateLogIfOver(realFarmFs, paths.headroomLogPath, limits),
     socketTrust: realHeadroomSocketTrust,
     readConfig: () => resolveSupervisorConfig(readGlobalConfig(paths)?.headroom ?? {}),
     spawnHeadroom: (socketPath, allowlistFile, settings2) => {

package/dist/index.cjs

@@ -4762,7 +4762,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.67.0",
+      version: "11.67.2",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -5773,6 +5773,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
       return HEADROOM_SUPERVISOR_STILL_RUNNING;
     }
     ticks += 1;
+    if (ports.rotateDaemonLog({ maxBytes: HEADROOM_LOG_MAX_BYTES, keptGenerations: HEADROOM_LOG_KEPT_GENERATIONS })) {
+      ports.log(`agent-shim headroom supervisor: rotated the daemon log past ${String(HEADROOM_LOG_MAX_BYTES)} bytes, keeping ${String(HEADROOM_LOG_KEPT_GENERATIONS)} earlier file(s)`);
+    }
     config = ports.readConfig();
     const settingsHash = hashSettings(config.settings);
     const inputs = currentHeadroomAllowlistInputs(fs14, paths, ports.frontDoorLiveness);
@@ -5923,7 +5926,7 @@ function lastLines(output) {
   const lines = redactText(output).split("\n").map((line) => line.trim()).filter((line) => line !== "").map((line) => line.length > DAEMON_EXIT_LOG_LINE_CHARS ? `${line.slice(0, DAEMON_EXIT_LOG_LINE_CHARS)}...` : line);
   return lines.length === 0 ? "(the daemon wrote nothing)" : lines.slice(-DAEMON_EXIT_LOG_LINES).join(" | ");
 }
-var import_node_path14, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, HEADROOM_POLL_MS, MS_PER_MINUTE2, HEADROOM_SUPERVISOR_STILL_RUNNING;
+var import_node_path14, HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, BYTES_PER_KIB, BYTES_PER_MIB, HEADROOM_LOG_MAX_MIB, HEADROOM_LOG_MAX_BYTES, HEADROOM_LOG_KEPT_GENERATIONS, HEADROOM_POLL_MS, MS_PER_MINUTE2, HEADROOM_SUPERVISOR_STILL_RUNNING;
 var init_supervisor2 = __esm({
   "src/headroom/supervisor.ts"() {
     "use strict";
@@ -5943,6 +5946,11 @@ var init_supervisor2 = __esm({
     DAEMON_EXIT_LOG_LINES = 6;
     DAEMON_EXIT_LOG_LINE_CHARS = 400;
     DAEMON_LOG_TAIL_BYTES = 8192;
+    BYTES_PER_KIB = 1024;
+    BYTES_PER_MIB = BYTES_PER_KIB * BYTES_PER_KIB;
+    HEADROOM_LOG_MAX_MIB = 64;
+    HEADROOM_LOG_MAX_BYTES = HEADROOM_LOG_MAX_MIB * BYTES_PER_MIB;
+    HEADROOM_LOG_KEPT_GENERATIONS = 2;
     HEADROOM_POLL_MS = 1e3;
     MS_PER_MINUTE2 = 6e4;
     HEADROOM_SUPERVISOR_STILL_RUNNING = -1;

package/dist/index.mjs

@@ -4738,7 +4738,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.67.0",
+      version: "11.67.2",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -5750,6 +5750,9 @@ async function runSupervisor(initialConfig, ports, options = {}) {
       return HEADROOM_SUPERVISOR_STILL_RUNNING;
     }
     ticks += 1;
+    if (ports.rotateDaemonLog({ maxBytes: HEADROOM_LOG_MAX_BYTES, keptGenerations: HEADROOM_LOG_KEPT_GENERATIONS })) {
+      ports.log(`agent-shim headroom supervisor: rotated the daemon log past ${String(HEADROOM_LOG_MAX_BYTES)} bytes, keeping ${String(HEADROOM_LOG_KEPT_GENERATIONS)} earlier file(s)`);
+    }
     config = ports.readConfig();
     const settingsHash = hashSettings(config.settings);
     const inputs = currentHeadroomAllowlistInputs(fs14, paths, ports.frontDoorLiveness);
@@ -5900,7 +5903,7 @@ function lastLines(output) {
   const lines = redactText(output).split("\n").map((line) => line.trim()).filter((line) => line !== "").map((line) => line.length > DAEMON_EXIT_LOG_LINE_CHARS ? `${line.slice(0, DAEMON_EXIT_LOG_LINE_CHARS)}...` : line);
   return lines.length === 0 ? "(the daemon wrote nothing)" : lines.slice(-DAEMON_EXIT_LOG_LINES).join(" | ");
 }
-var HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, HEADROOM_POLL_MS, MS_PER_MINUTE2, HEADROOM_SUPERVISOR_STILL_RUNNING;
+var HEADROOM_BACKOFF_BASE_MS, HEADROOM_BACKOFF_CAP_MS, HEADROOM_START_RETRY_BUDGET, HEADROOM_READY_TIMEOUT_MS, DAEMON_EXIT_LOG_LINES, DAEMON_EXIT_LOG_LINE_CHARS, DAEMON_LOG_TAIL_BYTES, BYTES_PER_KIB, BYTES_PER_MIB, HEADROOM_LOG_MAX_MIB, HEADROOM_LOG_MAX_BYTES, HEADROOM_LOG_KEPT_GENERATIONS, HEADROOM_POLL_MS, MS_PER_MINUTE2, HEADROOM_SUPERVISOR_STILL_RUNNING;
 var init_supervisor2 = __esm({
   "src/headroom/supervisor.ts"() {
     "use strict";
@@ -5919,6 +5922,11 @@ var init_supervisor2 = __esm({
     DAEMON_EXIT_LOG_LINES = 6;
     DAEMON_EXIT_LOG_LINE_CHARS = 400;
     DAEMON_LOG_TAIL_BYTES = 8192;
+    BYTES_PER_KIB = 1024;
+    BYTES_PER_MIB = BYTES_PER_KIB * BYTES_PER_KIB;
+    HEADROOM_LOG_MAX_MIB = 64;
+    HEADROOM_LOG_MAX_BYTES = HEADROOM_LOG_MAX_MIB * BYTES_PER_MIB;
+    HEADROOM_LOG_KEPT_GENERATIONS = 2;
     HEADROOM_POLL_MS = 1e3;
     MS_PER_MINUTE2 = 6e4;
     HEADROOM_SUPERVISOR_STILL_RUNNING = -1;

package/dist/types/index.d.ts

@@ -8895,6 +8895,14 @@ interface FileAllowlistDrift {
     readonly hashLags: boolean;
 }
 
+/** When a log is rotated and how much of its history is kept. */
+interface LogRotationLimits {
+    /** The size in bytes above which the live file is rotated. */
+    readonly maxBytes: number;
+    /** How many rotated files are kept beside the live one, at least one: `<log>.1` is the newest and `<log>.<keptGenerations>` the oldest, and the file shifted past it is deleted. */
+    readonly keptGenerations: number;
+}
+
 /** The token-saving settings of the `headroom` config block, without its install and lifecycle fields (`source`, `idleShutdownMinutes`). */
 type HeadroomSettings = Pick<HeadroomGlobalConfig, "mode" | "targetRatio" | "ccr" | "rolloutChannel" | "interceptToolResults" | "readMaturation">;
 
@@ -8929,8 +8937,10 @@ interface SupervisorPorts {
     readonly frontDoorLiveness: (pids: readonly number[]) => FrontDoorLiveness;
     /** The daemon log's size in bytes (0 before it exists): where the next start attempt's own output will begin. */
     readonly daemonLogSize: () => number;
-    /** The daemon log from byte `fromByte` to its end, at most its last `maxBytes`, read without loading the whole file (nothing rotates the log). */
+    /** The daemon log from byte `fromByte` to its end, at most its last `maxBytes`, read without loading the whole file. */
     readonly readDaemonLogTail: (fromByte: number, maxBytes: number) => string;
+    /** Rotates the daemon log when it is over `limits.maxBytes` (see `rotateLogIfOver`), returning whether it did. Every offset `daemonLogSize` returned earlier is invalid afterwards, so the supervisor calls it only at the top of a tick, before it takes the offset of any start attempt. */
+    readonly rotateDaemonLog: (limits: LogRotationLimits) => boolean;
     /** The command line of a running process as `ps` reports it, or undefined when it cannot be read: how a recorded orphan daemon is confirmed to be one before it is signalled (see `daemonIdentity`). */
     readonly daemonCommandLine: (pid: number) => string | undefined;
     /** The platform facts and owner-only checks the daemon's socket directory is prepared and verified with (see `prepareHeadroomSocket`). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "11.67.0",
+  "version": "11.67.2",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",