claude-use 9.13.0 → 9.14.0

package/dist/index.cjs

@@ -228,7 +228,15 @@ function isCodexProvider(provider) {
 function poolMemberIdentity(member) {
   return typeof member === "string" ? member : member.identity;
 }
-var import_node_path2, import_zod, import_trilean, CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_TIER_MODELS, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
+function isTimeZone(name) {
+  try {
+    new Intl.DateTimeFormat("en", { timeZone: name });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var import_node_path2, import_zod, import_trilean, CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_TIER_MODELS, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, WEEKDAYS, AnchorSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
 var init_schema = __esm({
   "src/config/schema.ts"() {
     "use strict";
@@ -468,12 +476,20 @@ var init_schema = __esm({
       update: UpdateGlobalConfigSchema.optional(),
       pools: import_zod.z.record(PoolNameSchema, PoolSchema).optional()
     });
+    WEEKDAYS = ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
+    AnchorSchema = import_zod.z.strictObject({
+      days: import_zod.z.array(import_zod.z.enum(WEEKDAYS)).min(1).refine((days) => new Set(days).size === days.length, "an anchor names each weekday at most once"),
+      time: import_zod.z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "a 24-hour time such as 06:00"),
+      timeZone: import_zod.z.string().refine(isTimeZone, "an IANA time zone such as Europe/London").optional()
+    });
     IdentitySchema = import_zod.z.strictObject({
       $schema: import_zod.z.string().optional(),
       name: import_zod.z.string().min(1).regex(/^[A-Za-z0-9][A-Za-z0-9._@-]*$/),
       defaultConfigProfile: import_zod.z.string().min(1).optional(),
       allowAmbientCredential: import_zod.z.boolean().default(false),
-      credential: CredentialSchema.optional()
+      credential: CredentialSchema.optional(),
+      /** When this identity's five-hour window should be open: the front door opens one at each anchor if none is. Absent, nothing is opened on a schedule. */
+      anchors: import_zod.z.array(AnchorSchema).min(1).optional()
     });
     CategoryClassificationSchema = import_zod.z.strictObject({
       $schema: import_zod.z.string().optional(),
@@ -2663,7 +2679,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "9.13.0",
+      version: "9.14.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -5307,6 +5323,7 @@ function buildLayoutPaths(root) {
     usageLogDir: import_node_path22.default.join(root, "usage", "log"),
     usageSnapshotsDir: import_node_path22.default.join(root, "usage", "snapshots"),
     usagePicksFile: import_node_path22.default.join(root, "usage", "picks.json"),
+    usageAnchorsFile: import_node_path22.default.join(root, "usage", "anchors.json"),
     mcpPermissionsFile: import_node_path22.default.join(root, "mcp", "permissions.json")
   };
 }
@@ -7809,6 +7826,57 @@ var init_anthropicUsageRefresh = __esm({
   }
 });
 
+// src/usage/identityClaude.ts
+function definedEnvironment(env) {
+  return Object.fromEntries(Object.entries(env).flatMap(([name, value]) => value === void 0 ? [] : [[name, value]]));
+}
+function identityLaunchArgv(identity, flags) {
+  return [`@${identity}`, IDENTITY_ONLY_FLAG, ...flags];
+}
+async function withIdentityClaude(params, identity, flags, use) {
+  const refusals = [];
+  const plan = prepareLaunch(
+    realPrepareLaunchParams(params.paths, {
+      proc: {
+        env: Object.fromEntries(Object.entries(process.env).filter(([name]) => name !== CONFIG_DIR_VARIABLE)),
+        argv: [...identityLaunchArgv(identity, flags)],
+        exit: (code) => {
+          throw new LaunchRefusedError(refusals.join("\n") || `the launch was refused (exit ${String(code)})`, code);
+        }
+      },
+      log: {
+        info: () => void 0,
+        warn: () => void 0,
+        error: (message) => {
+          refusals.push(message);
+        }
+      },
+      spawnDaemon: params.spawnDaemon,
+      farm: buildFarmRuntime(params.paths, params.cwd)
+    })
+  );
+  const abort = new AbortController();
+  const timer = setTimeout(() => {
+    abort.abort();
+  }, params.timeoutMs);
+  try {
+    return await use({ bin: plan.bin, env: definedEnvironment(plan.env), cwd: params.cwd, abort });
+  } finally {
+    clearTimeout(timer);
+    plan.release();
+  }
+}
+var CONFIG_DIR_VARIABLE, IDENTITY_ONLY_FLAG;
+var init_identityClaude = __esm({
+  "src/usage/identityClaude.ts"() {
+    "use strict";
+    init_launchWiring();
+    init_launcher();
+    CONFIG_DIR_VARIABLE = "CLAUDE_CONFIG_DIR";
+    IDENTITY_ONLY_FLAG = "--no-provider";
+  }
+});
+
 // src/usage/providerQuota.ts
 var import_zod25, MS_PER_SECOND7, SECONDS_PER_HOUR, HOURS_PER_DAY4, DAYS_PER_MONTH, ZAI_HOST, ZAI_QUOTA_URL, ZAI_UNIT_HOURS, ZAI_UNIT_MONTHS, ZAI_UNIT_MS, ZaiLimitSchema, ZaiResponseSchema, OPENROUTER_HOST, OPENROUTER_KEY_URL, OPENROUTER_CREDITS_URL, MS_PER_DAY3, OpenRouterKeySchema, OpenRouterCreditsSchema;
 var init_providerQuota = __esm({
@@ -7879,9 +7947,6 @@ var realAnthropicUsageProbe_exports = {};
 __export(realAnthropicUsageProbe_exports, {
   createRealAnthropicUsageRefresher: () => createRealAnthropicUsageRefresher
 });
-function definedEnvironment(env) {
-  return Object.fromEntries(Object.entries(env).flatMap(([name, value]) => value === void 0 ? [] : [[name, value]]));
-}
 function idlePrompt(signal) {
   return {
     [Symbol.asyncIterator]: () => ({
@@ -7894,58 +7959,28 @@ function idlePrompt(signal) {
   };
 }
 function createRealAnthropicUsageProbe(params) {
-  return async (identity) => {
-    const refusals = [];
-    const plan = prepareLaunch(
-      realPrepareLaunchParams(params.paths, {
-        proc: {
-          env: Object.fromEntries(Object.entries(process.env).filter(([name]) => name !== CONFIG_DIR_VARIABLE)),
-          argv: [`@${identity}`, ...PROBE_LAUNCH_FLAGS],
-          exit: (code) => {
-            throw new LaunchRefusedError(refusals.join("\n") || `the launch was refused (exit ${String(code)})`, code);
-          }
-        },
-        log: {
-          info: () => void 0,
-          warn: () => void 0,
-          error: (message) => {
-            refusals.push(message);
-          }
-        },
-        spawnDaemon: params.spawnDaemon,
-        farm: buildFarmRuntime(params.paths, params.cwd)
-      })
-    );
+  return async (identity) => await withIdentityClaude(params, identity, PROBE_LAUNCH_FLAGS, async ({ bin, env, cwd, abort }) => {
     const { query } = await import("@anthropic-ai/claude-agent-sdk");
-    const abort = new AbortController();
-    const timer = setTimeout(() => {
-      abort.abort();
-    }, params.timeoutMs);
-    try {
-      const session = query({
-        prompt: idlePrompt(abort.signal),
-        options: {
-          pathToClaudeCodeExecutable: plan.bin,
-          env: definedEnvironment(plan.env),
-          cwd: params.cwd,
-          abortController: abort,
-          settingSources: [],
-          mcpServers: {},
-          strictMcpConfig: true,
-          persistSession: false
-        }
-      });
-      try {
-        const report = await session.usage_EXPERIMENTAL_MAY_CHANGE_DO_NOT_RELY_ON_THIS_API_YET({ skipBehaviors: true });
-        return unifiedFromReportedLimits(report.rate_limits_available ? report.rate_limits : null);
-      } finally {
-        session.close();
+    const session = query({
+      prompt: idlePrompt(abort.signal),
+      options: {
+        pathToClaudeCodeExecutable: bin,
+        env,
+        cwd,
+        abortController: abort,
+        settingSources: [],
+        mcpServers: {},
+        strictMcpConfig: true,
+        persistSession: false
       }
+    });
+    try {
+      const report = await session.usage_EXPERIMENTAL_MAY_CHANGE_DO_NOT_RELY_ON_THIS_API_YET({ skipBehaviors: true });
+      return unifiedFromReportedLimits(report.rate_limits_available ? report.rate_limits : null);
     } finally {
-      clearTimeout(timer);
-      plan.release();
+      session.close();
     }
-  };
+  });
 }
 function createRealAnthropicUsageRefresher(params) {
   return createAnthropicUsageRefresher({
@@ -7958,18 +7993,16 @@ function createRealAnthropicUsageRefresher(params) {
     concurrency: (0, import_node_os8.availableParallelism)()
   });
 }
-var import_node_os8, PROBE_LAUNCH_FLAGS, CONFIG_DIR_VARIABLE;
+var import_node_os8, PROBE_LAUNCH_FLAGS;
 var init_realAnthropicUsageProbe = __esm({
   "src/usage/realAnthropicUsageProbe.ts"() {
     "use strict";
     import_node_os8 = require("node:os");
-    init_launchWiring();
-    init_launcher();
     init_anthropicUsageRefresh();
+    init_identityClaude();
     init_middleware();
     init_quotaRefresh();
     PROBE_LAUNCH_FLAGS = ["--no-headroom", "--no-remote-control"];
-    CONFIG_DIR_VARIABLE = "CLAUDE_CONFIG_DIR";
   }
 });
 
@@ -12789,6 +12822,12 @@ function listIdentities(paths) {
   }
   return result;
 }
+function setIdentityAnchors(paths, identityName, anchors) {
+  if (!identityExists(paths, identityName)) {
+    throw new IdentityNotFoundError(identityName);
+  }
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, { anchors: anchors === void 0 ? void 0 : [...anchors] });
+}
 function setDefaultConfigProfile(paths, identityName, profileName) {
   if (!identityExists(paths, identityName)) {
     throw new IdentityNotFoundError(identityName);
@@ -13893,7 +13932,8 @@ var IdentityValueSchema = import_zod22.z.strictObject({
   name: import_zod22.z.string(),
   defaultConfigProfile: import_zod22.z.string().optional(),
   allowAmbientCredential: import_zod22.z.boolean(),
-  credential: CredentialSummarySchema2.optional()
+  credential: CredentialSummarySchema2.optional(),
+  anchors: import_zod22.z.array(AnchorSchema).optional()
 });
 var ProfileValueSchema = ConfigProfileSchema.omit({ $schema: true });
 var ProviderValueSchema = import_zod22.z.strictObject({
@@ -13911,7 +13951,9 @@ var ConfigIdentitySetInputSchema = import_zod22.z.strictObject({
   name: import_zod22.z.string().min(1),
   defaultConfigProfile: import_zod22.z.union([import_zod22.z.string().min(1), import_zod22.z.literal(false)]).optional(),
   allowAmbientCredential: import_zod22.z.boolean().optional(),
-  credential: import_zod22.z.union([import_zod22.z.literal(false), CredentialWriteSchema(CREDENTIAL_TARGETS)]).optional()
+  credential: import_zod22.z.union([import_zod22.z.literal(false), CredentialWriteSchema(CREDENTIAL_TARGETS)]).optional(),
+  /** `false` removes the anchors; a list replaces them. */
+  anchors: import_zod22.z.union([import_zod22.z.literal(false), import_zod22.z.array(AnchorSchema).min(1)]).optional()
 });
 var ConfigIdentitySetOutputSchema = storedMutationOutput("identity", "updated", IdentityValueSchema);
 var ConfigIdentityRemoveInputSchema = import_zod22.z.strictObject({ name: import_zod22.z.string().min(1), confirm: RemovalConfirmationSchema });
@@ -14032,7 +14074,8 @@ function identityValue(name, paths) {
     name: identity.name,
     ...identity.defaultConfigProfile === void 0 ? {} : { defaultConfigProfile: identity.defaultConfigProfile },
     allowAmbientCredential: identity.allowAmbientCredential,
-    ...identity.credential === void 0 ? {} : { credential: summariseCredential(identity.credential) }
+    ...identity.credential === void 0 ? {} : { credential: summariseCredential(identity.credential) },
+    ...identity.anchors === void 0 ? {} : { anchors: identity.anchors }
   };
 }
 function providerValue(name, provider) {
@@ -14063,9 +14106,9 @@ function createConfigApiRouter(deps) {
             return { action: "created", kind: "identity", name: input.name, value: identityValue(input.name, paths) };
           })
         ),
-        set: route("/rest/config/identity/set", "Update an identity's default profile, ambient-credential setting or credential").input(ConfigIdentitySetInputSchema).output(ConfigIdentitySetOutputSchema).handler(
+        set: route("/rest/config/identity/set", "Update an identity's default profile, ambient-credential setting, credential or anchors").input(ConfigIdentitySetInputSchema).output(ConfigIdentitySetOutputSchema).handler(
           ({ input }) => guarded(() => {
-            requireChange(input.defaultConfigProfile !== void 0 || input.allowAmbientCredential !== void 0 || input.credential !== void 0, "defaultConfigProfile, allowAmbientCredential or credential");
+            requireChange(input.defaultConfigProfile !== void 0 || input.allowAmbientCredential !== void 0 || input.credential !== void 0 || input.anchors !== void 0, "defaultConfigProfile, allowAmbientCredential, credential or anchors");
             if (!identityExists(paths, input.name)) {
               throw new IdentityNotFoundError(input.name);
             }
@@ -14090,6 +14133,9 @@ function createConfigApiRouter(deps) {
               };
               setIdentityCredential(paths, input.name, change);
             }
+            if (input.anchors !== void 0) {
+              setIdentityAnchors(paths, input.name, input.anchors === false ? void 0 : input.anchors);
+            }
             return { action: "updated", kind: "identity", name: input.name, value: identityValue(input.name, paths) };
           })
         ),

package/dist/index.mjs

@@ -209,7 +209,15 @@ function isCodexProvider(provider) {
 function poolMemberIdentity(member) {
   return typeof member === "string" ? member : member.identity;
 }
-var CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_TIER_MODELS, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
+function isTimeZone(name) {
+  try {
+    new Intl.DateTimeFormat("en", { timeZone: name });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_TIER_MODELS, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, WEEKDAYS, AnchorSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
 var init_schema = __esm({
   "src/config/schema.ts"() {
     "use strict";
@@ -446,12 +454,20 @@ var init_schema = __esm({
       update: UpdateGlobalConfigSchema.optional(),
       pools: z.record(PoolNameSchema, PoolSchema).optional()
     });
+    WEEKDAYS = ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
+    AnchorSchema = z.strictObject({
+      days: z.array(z.enum(WEEKDAYS)).min(1).refine((days) => new Set(days).size === days.length, "an anchor names each weekday at most once"),
+      time: z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "a 24-hour time such as 06:00"),
+      timeZone: z.string().refine(isTimeZone, "an IANA time zone such as Europe/London").optional()
+    });
     IdentitySchema = z.strictObject({
       $schema: z.string().optional(),
       name: z.string().min(1).regex(/^[A-Za-z0-9][A-Za-z0-9._@-]*$/),
       defaultConfigProfile: z.string().min(1).optional(),
       allowAmbientCredential: z.boolean().default(false),
-      credential: CredentialSchema.optional()
+      credential: CredentialSchema.optional(),
+      /** When this identity's five-hour window should be open: the front door opens one at each anchor if none is. Absent, nothing is opened on a schedule. */
+      anchors: z.array(AnchorSchema).min(1).optional()
     });
     CategoryClassificationSchema = z.strictObject({
       $schema: z.string().optional(),
@@ -2639,7 +2655,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "9.13.0",
+      version: "9.14.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -5284,6 +5300,7 @@ function buildLayoutPaths(root) {
     usageLogDir: path22.join(root, "usage", "log"),
     usageSnapshotsDir: path22.join(root, "usage", "snapshots"),
     usagePicksFile: path22.join(root, "usage", "picks.json"),
+    usageAnchorsFile: path22.join(root, "usage", "anchors.json"),
     mcpPermissionsFile: path22.join(root, "mcp", "permissions.json")
   };
 }
@@ -7781,6 +7798,57 @@ var init_anthropicUsageRefresh = __esm({
   }
 });
 
+// src/usage/identityClaude.ts
+function definedEnvironment(env) {
+  return Object.fromEntries(Object.entries(env).flatMap(([name, value]) => value === void 0 ? [] : [[name, value]]));
+}
+function identityLaunchArgv(identity, flags) {
+  return [`@${identity}`, IDENTITY_ONLY_FLAG, ...flags];
+}
+async function withIdentityClaude(params, identity, flags, use) {
+  const refusals = [];
+  const plan = prepareLaunch(
+    realPrepareLaunchParams(params.paths, {
+      proc: {
+        env: Object.fromEntries(Object.entries(process.env).filter(([name]) => name !== CONFIG_DIR_VARIABLE)),
+        argv: [...identityLaunchArgv(identity, flags)],
+        exit: (code) => {
+          throw new LaunchRefusedError(refusals.join("\n") || `the launch was refused (exit ${String(code)})`, code);
+        }
+      },
+      log: {
+        info: () => void 0,
+        warn: () => void 0,
+        error: (message) => {
+          refusals.push(message);
+        }
+      },
+      spawnDaemon: params.spawnDaemon,
+      farm: buildFarmRuntime(params.paths, params.cwd)
+    })
+  );
+  const abort = new AbortController();
+  const timer = setTimeout(() => {
+    abort.abort();
+  }, params.timeoutMs);
+  try {
+    return await use({ bin: plan.bin, env: definedEnvironment(plan.env), cwd: params.cwd, abort });
+  } finally {
+    clearTimeout(timer);
+    plan.release();
+  }
+}
+var CONFIG_DIR_VARIABLE, IDENTITY_ONLY_FLAG;
+var init_identityClaude = __esm({
+  "src/usage/identityClaude.ts"() {
+    "use strict";
+    init_launchWiring();
+    init_launcher();
+    CONFIG_DIR_VARIABLE = "CLAUDE_CONFIG_DIR";
+    IDENTITY_ONLY_FLAG = "--no-provider";
+  }
+});
+
 // src/usage/providerQuota.ts
 import { z as z25 } from "zod";
 var MS_PER_SECOND7, SECONDS_PER_HOUR, HOURS_PER_DAY4, DAYS_PER_MONTH, ZAI_HOST, ZAI_QUOTA_URL, ZAI_UNIT_HOURS, ZAI_UNIT_MONTHS, ZAI_UNIT_MS, ZaiLimitSchema, ZaiResponseSchema, OPENROUTER_HOST, OPENROUTER_KEY_URL, OPENROUTER_CREDITS_URL, MS_PER_DAY3, OpenRouterKeySchema, OpenRouterCreditsSchema;
@@ -7852,9 +7920,6 @@ __export(realAnthropicUsageProbe_exports, {
   createRealAnthropicUsageRefresher: () => createRealAnthropicUsageRefresher
 });
 import { availableParallelism } from "node:os";
-function definedEnvironment(env) {
-  return Object.fromEntries(Object.entries(env).flatMap(([name, value]) => value === void 0 ? [] : [[name, value]]));
-}
 function idlePrompt(signal) {
   return {
     [Symbol.asyncIterator]: () => ({
@@ -7867,58 +7932,28 @@ function idlePrompt(signal) {
   };
 }
 function createRealAnthropicUsageProbe(params) {
-  return async (identity) => {
-    const refusals = [];
-    const plan = prepareLaunch(
-      realPrepareLaunchParams(params.paths, {
-        proc: {
-          env: Object.fromEntries(Object.entries(process.env).filter(([name]) => name !== CONFIG_DIR_VARIABLE)),
-          argv: [`@${identity}`, ...PROBE_LAUNCH_FLAGS],
-          exit: (code) => {
-            throw new LaunchRefusedError(refusals.join("\n") || `the launch was refused (exit ${String(code)})`, code);
-          }
-        },
-        log: {
-          info: () => void 0,
-          warn: () => void 0,
-          error: (message) => {
-            refusals.push(message);
-          }
-        },
-        spawnDaemon: params.spawnDaemon,
-        farm: buildFarmRuntime(params.paths, params.cwd)
-      })
-    );
+  return async (identity) => await withIdentityClaude(params, identity, PROBE_LAUNCH_FLAGS, async ({ bin, env, cwd, abort }) => {
     const { query } = await import("@anthropic-ai/claude-agent-sdk");
-    const abort = new AbortController();
-    const timer = setTimeout(() => {
-      abort.abort();
-    }, params.timeoutMs);
-    try {
-      const session = query({
-        prompt: idlePrompt(abort.signal),
-        options: {
-          pathToClaudeCodeExecutable: plan.bin,
-          env: definedEnvironment(plan.env),
-          cwd: params.cwd,
-          abortController: abort,
-          settingSources: [],
-          mcpServers: {},
-          strictMcpConfig: true,
-          persistSession: false
-        }
-      });
-      try {
-        const report = await session.usage_EXPERIMENTAL_MAY_CHANGE_DO_NOT_RELY_ON_THIS_API_YET({ skipBehaviors: true });
-        return unifiedFromReportedLimits(report.rate_limits_available ? report.rate_limits : null);
-      } finally {
-        session.close();
+    const session = query({
+      prompt: idlePrompt(abort.signal),
+      options: {
+        pathToClaudeCodeExecutable: bin,
+        env,
+        cwd,
+        abortController: abort,
+        settingSources: [],
+        mcpServers: {},
+        strictMcpConfig: true,
+        persistSession: false
       }
+    });
+    try {
+      const report = await session.usage_EXPERIMENTAL_MAY_CHANGE_DO_NOT_RELY_ON_THIS_API_YET({ skipBehaviors: true });
+      return unifiedFromReportedLimits(report.rate_limits_available ? report.rate_limits : null);
     } finally {
-      clearTimeout(timer);
-      plan.release();
+      session.close();
     }
-  };
+  });
 }
 function createRealAnthropicUsageRefresher(params) {
   return createAnthropicUsageRefresher({
@@ -7931,17 +7966,15 @@ function createRealAnthropicUsageRefresher(params) {
     concurrency: availableParallelism()
   });
 }
-var PROBE_LAUNCH_FLAGS, CONFIG_DIR_VARIABLE;
+var PROBE_LAUNCH_FLAGS;
 var init_realAnthropicUsageProbe = __esm({
   "src/usage/realAnthropicUsageProbe.ts"() {
     "use strict";
-    init_launchWiring();
-    init_launcher();
     init_anthropicUsageRefresh();
+    init_identityClaude();
     init_middleware();
     init_quotaRefresh();
     PROBE_LAUNCH_FLAGS = ["--no-headroom", "--no-remote-control"];
-    CONFIG_DIR_VARIABLE = "CLAUDE_CONFIG_DIR";
   }
 });
 
@@ -12404,6 +12437,12 @@ function listIdentities(paths) {
   }
   return result;
 }
+function setIdentityAnchors(paths, identityName, anchors) {
+  if (!identityExists(paths, identityName)) {
+    throw new IdentityNotFoundError(identityName);
+  }
+  return applyPatch(identityJsonPath(paths, identityName), IdentitySchema, { anchors: anchors === void 0 ? void 0 : [...anchors] });
+}
 function setDefaultConfigProfile(paths, identityName, profileName) {
   if (!identityExists(paths, identityName)) {
     throw new IdentityNotFoundError(identityName);
@@ -13508,7 +13547,8 @@ var IdentityValueSchema = z22.strictObject({
   name: z22.string(),
   defaultConfigProfile: z22.string().optional(),
   allowAmbientCredential: z22.boolean(),
-  credential: CredentialSummarySchema2.optional()
+  credential: CredentialSummarySchema2.optional(),
+  anchors: z22.array(AnchorSchema).optional()
 });
 var ProfileValueSchema = ConfigProfileSchema.omit({ $schema: true });
 var ProviderValueSchema = z22.strictObject({
@@ -13526,7 +13566,9 @@ var ConfigIdentitySetInputSchema = z22.strictObject({
   name: z22.string().min(1),
   defaultConfigProfile: z22.union([z22.string().min(1), z22.literal(false)]).optional(),
   allowAmbientCredential: z22.boolean().optional(),
-  credential: z22.union([z22.literal(false), CredentialWriteSchema(CREDENTIAL_TARGETS)]).optional()
+  credential: z22.union([z22.literal(false), CredentialWriteSchema(CREDENTIAL_TARGETS)]).optional(),
+  /** `false` removes the anchors; a list replaces them. */
+  anchors: z22.union([z22.literal(false), z22.array(AnchorSchema).min(1)]).optional()
 });
 var ConfigIdentitySetOutputSchema = storedMutationOutput("identity", "updated", IdentityValueSchema);
 var ConfigIdentityRemoveInputSchema = z22.strictObject({ name: z22.string().min(1), confirm: RemovalConfirmationSchema });
@@ -13647,7 +13689,8 @@ function identityValue(name, paths) {
     name: identity.name,
     ...identity.defaultConfigProfile === void 0 ? {} : { defaultConfigProfile: identity.defaultConfigProfile },
     allowAmbientCredential: identity.allowAmbientCredential,
-    ...identity.credential === void 0 ? {} : { credential: summariseCredential(identity.credential) }
+    ...identity.credential === void 0 ? {} : { credential: summariseCredential(identity.credential) },
+    ...identity.anchors === void 0 ? {} : { anchors: identity.anchors }
   };
 }
 function providerValue(name, provider) {
@@ -13678,9 +13721,9 @@ function createConfigApiRouter(deps) {
             return { action: "created", kind: "identity", name: input.name, value: identityValue(input.name, paths) };
           })
         ),
-        set: route("/rest/config/identity/set", "Update an identity's default profile, ambient-credential setting or credential").input(ConfigIdentitySetInputSchema).output(ConfigIdentitySetOutputSchema).handler(
+        set: route("/rest/config/identity/set", "Update an identity's default profile, ambient-credential setting, credential or anchors").input(ConfigIdentitySetInputSchema).output(ConfigIdentitySetOutputSchema).handler(
           ({ input }) => guarded(() => {
-            requireChange(input.defaultConfigProfile !== void 0 || input.allowAmbientCredential !== void 0 || input.credential !== void 0, "defaultConfigProfile, allowAmbientCredential or credential");
+            requireChange(input.defaultConfigProfile !== void 0 || input.allowAmbientCredential !== void 0 || input.credential !== void 0 || input.anchors !== void 0, "defaultConfigProfile, allowAmbientCredential, credential or anchors");
             if (!identityExists(paths, input.name)) {
               throw new IdentityNotFoundError(input.name);
             }
@@ -13705,6 +13748,9 @@ function createConfigApiRouter(deps) {
               };
               setIdentityCredential(paths, input.name, change);
             }
+            if (input.anchors !== void 0) {
+              setIdentityAnchors(paths, input.name, input.anchors === false ? void 0 : input.anchors);
+            }
             return { action: "updated", kind: "identity", name: input.name, value: identityValue(input.name, paths) };
           })
         ),