claude-use 9.16.0 → 9.18.0

package/dist/types/index.d.ts

@@ -6912,6 +6912,292 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
 /** The launch router, as the merged mount's and the client's own types are derived from it. */
 type LaunchApiRouter = ReturnType<typeof createLaunchApiRouter>;
 
+/**
+ * The agent tree of one session as the reader returns it, and the shape of the meta file it reads. One definition each, so the type, the validator and the published JSON Schema (`schema/AgentTree.schema.json`) cannot drift. The on-disk layout is documented in `docs/agent-transcripts.md`; it belongs to Claude Code and has changed across versions, which is why the meta file is read leniently and the tree this module returns is strict.
+ */
+/**
+ * One subagent's `.meta.json`. `agentType` is the one field every version writes; the rest appear only for the kinds and versions that write them, and a version this schema has never seen may add more, so unknown keys are kept rather than rejected.
+ */
+declare const AgentMetaSchema: z.ZodObject<{
+    agentType: z.ZodString;
+    isFork: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    toolUseId: z.ZodOptional<z.ZodString>;
+    spawnDepth: z.ZodOptional<z.ZodNumber>;
+    parentAgentId: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    requestShape: z.ZodOptional<z.ZodString>;
+    requestNonInteractive: z.ZodOptional<z.ZodBoolean>;
+    workflowPhase: z.ZodOptional<z.ZodString>;
+    taskKind: z.ZodOptional<z.ZodString>;
+    teamName: z.ZodOptional<z.ZodString>;
+    worktreePath: z.ZodOptional<z.ZodString>;
+    worktreeBranch: z.ZodOptional<z.ZodString>;
+    stoppedByUser: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>;
+/** What kind of agent a node is, derived from its meta file: a fork inherits its parent's context, a workflow agent was spawned by a workflow run, a teammate belongs to a team. */
+declare const AgentKindSchema: z.ZodEnum<{
+    subagent: "subagent";
+    fork: "fork";
+    "workflow-agent": "workflow-agent";
+    teammate: "teammate";
+}>;
+/** One agent in a session's tree. `children` holds the agents it spawned. */
+interface AgentNode {
+    /** The stem after `agent-` in its file names, which for an unnamed agent is the `task_id` Remote Control reports for it. */
+    readonly id: string;
+    readonly kind: z.infer<typeof AgentKindSchema>;
+    readonly agentType: string;
+    readonly description?: string;
+    readonly name?: string;
+    /** The `tool_use` block in the parent's transcript that spawned this agent. */
+    readonly toolUseId?: string;
+    readonly spawnDepth?: number;
+    /** The model the spawn recorded: an alias or `inherit` as often as a concrete id, and not necessarily the model that served the agent's requests. */
+    readonly model?: string;
+    readonly background?: boolean;
+    /** The workflow run this agent belongs to, when it was spawned by one. */
+    readonly workflowRunId?: string;
+    readonly workflowPhase?: string;
+    readonly teamName?: string;
+    readonly stoppedByUser?: boolean;
+    /** The agent's transcript, relative to the identity's configuration directory. */
+    readonly transcript: string;
+    readonly children: readonly AgentNode[];
+}
+/** The node schema, written out so the recursive `children` field has a lazy reference to itself. */
+declare const AgentNodeSchema: z.ZodType<AgentNode>;
+/** One entry of a task list: the session's own (`tasks/<session-id>/<n>.json`, or `tasks/session-<first-eight-characters>/<n>.json` in current versions) or a shared one (`tasks/<list-id>/<n>.json`), a team's or one named by `CLAUDE_CODE_TASK_LIST_ID`. `status` is an open string: non-standard values occur. */
+declare const TaskItemSchema: z.ZodObject<{
+    id: z.ZodString;
+    subject: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    status: z.ZodString;
+    activeForm: z.ZodOptional<z.ZodString>;
+    owner: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    blocks: z.ZodArray<z.ZodString>;
+    blockedBy: z.ZodArray<z.ZodString>;
+    taskList: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** One workflow run's record (`workflows/wf_<run-id>.json`), narrowed to what identifies and summarises it. */
+declare const WorkflowRunSchema: z.ZodObject<{
+    runId: z.ZodString;
+    workflowName: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodString>;
+    startTime: z.ZodOptional<z.ZodNumber>;
+    phases: z.ZodArray<z.ZodString>;
+    summary: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** One session in a listing: the cheap facts read from directory listings and one stat, and every identity whose configuration exposes it. */
+declare const SessionSummarySchema: z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    entry: z.ZodString;
+    agentCount: z.ZodNumber;
+    workflowRunCount: z.ZodNumber;
+    updatedAt: z.ZodOptional<z.ZodISODateTime>;
+    identities: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/** The whole picture of one session's agents, tasks and workflow runs. */
+declare const SessionAgentTreeSchema: z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        subject: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        status: z.ZodString;
+        activeForm: z.ZodOptional<z.ZodString>;
+        owner: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        blocks: z.ZodArray<z.ZodString>;
+        blockedBy: z.ZodArray<z.ZodString>;
+        taskList: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    workflowRuns: z.ZodArray<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodString>;
+        startTime: z.ZodOptional<z.ZodNumber>;
+        phases: z.ZodArray<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    problems: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type AgentKind = z.output<typeof AgentKindSchema>;
+type TaskItem = z.output<typeof TaskItemSchema>;
+type WorkflowRun = z.output<typeof WorkflowRunSchema>;
+type SessionAgentTree = z.output<typeof SessionAgentTreeSchema>;
+
+/**
+ * The agent tree reader: pure over an injected filesystem, so the CLI, the library surface and tests read the same way, and nothing here writes. The layout it reads is documented in `docs/agent-transcripts.md`.
+ */
+/** The filesystem reads the agent tree reader needs. */
+type AgentReadFs = Pick<FarmFs, "readFileUtf8" | "readdir" | "lstat">;
+/** One session found under a project: its directory name split into the session id and whether the entry is an archived copy (superseded by a resume, or orphaned) rather than the live session. */
+interface SessionRef {
+    readonly project: string;
+    readonly sessionId: string;
+    readonly superseded: boolean;
+    /** The directory (and transcript stem) name exactly as on disk, which differs from `sessionId` for an archived copy. */
+    readonly entry: string;
+}
+/** Lists every session under every project: a transcript file, or a directory holding agents or workflow runs. Sorted by project then entry so output is stable. */
+declare function listSessions(fs: AgentReadFs, configDir: string): readonly SessionRef[];
+/** One session in a listing: the cheap facts read from directory listings and one stat, without parsing any agent. */
+interface SessionSummary extends SessionRef {
+    /** How many agent meta files the session has, across its top-level agents and every workflow run. */
+    readonly agentCount: number;
+    /** How many workflow run records the session has. */
+    readonly workflowRunCount: number;
+    /** When the session's transcript was last written, as an ISO instant; absent when there is no transcript file. */
+    readonly updatedAt?: string;
+}
+/** What a caller knows about a session that the disk does not record. */
+interface ReadSessionOptions {
+    /** Task lists the session was pointed at with `CLAUDE_CODE_TASK_LIST_ID`, which is a property of the process environment and is written nowhere in the session's files. Each is read from `tasks/<id>` and its tasks carry the id as `taskList`. */
+    readonly taskListIds?: readonly string[];
+}
+/** Summarises one session without reading any agent file: listings and one stat only, so it is cheap over every session an identity has. */
+declare function summariseSession(fs: AgentReadFs, configDir: string, ref: Readonly<SessionRef>): SessionSummary;
+/**
+ * Reads one session's agents, task list and workflow runs. Every file that cannot be used is listed in `problems` with the reason; a missing directory is simply an empty section, because a session that never spawned an agent has none.
+ */
+declare function readSessionAgentTree(fs: AgentReadFs, configDir: string, ref: SessionRef, options?: Readonly<ReadSessionOptions>): SessionAgentTree;
+
+/**
+ * A session's agents as a typed oRPC API: the sessions that spawned agents or ran workflows, and one session's agent tree, task list and workflow runs, read from the transcripts on disk. The same data `agent-shim session list` and `session show` print, so a consumer that is not the CLI (an MCP client, the library) asks the door for it.
+ */
+/** What `agentTrees.list` accepts. */
+declare const AgentTreesListInputSchema: z.ZodObject<{
+    identity: z.ZodOptional<z.ZodString>;
+    all: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+/** What `agentTrees.list` answers. */
+declare const AgentTreesListOutputSchema: z.ZodArray<z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    entry: z.ZodString;
+    agentCount: z.ZodNumber;
+    workflowRunCount: z.ZodNumber;
+    updatedAt: z.ZodOptional<z.ZodISODateTime>;
+    identities: z.ZodArray<z.ZodString>;
+}, z.core.$strict>>;
+/** What `agentTrees.show` accepts. */
+declare const AgentTreesShowInputSchema: z.ZodObject<{
+    session: z.ZodString;
+    identity: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** What `agentTrees.show` answers: the tree beside the identities that expose it. */
+declare const AgentTreesShowOutputSchema: z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        subject: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        status: z.ZodString;
+        activeForm: z.ZodOptional<z.ZodString>;
+        owner: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        blocks: z.ZodArray<z.ZodString>;
+        blockedBy: z.ZodArray<z.ZodString>;
+        taskList: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    workflowRuns: z.ZodArray<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodString>;
+        startTime: z.ZodOptional<z.ZodNumber>;
+        phases: z.ZodArray<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    problems: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strict>>;
+    identities: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/** Everything the agent trees procedures need, injected so they serve against fakes in tests exactly as the door's real wiring serves against this machine. */
+interface AgentTreesApiDeps {
+    /** This generation's control token: the same value every router on the mount checks. */
+    readonly expectedToken: string;
+    /** Lists sessions, throwing the reader's `CliError` for an identity that does not exist. */
+    readonly sessionList: (filters: z.infer<typeof AgentTreesListInputSchema>) => readonly (SessionSummary & {
+        readonly identities: readonly string[];
+    })[];
+    /** Resolves and reads one session, throwing the reader's `CliError` for an id that matches none or several. */
+    readonly sessionShow: (query: string, identity: string | undefined) => {
+        readonly identities: readonly string[];
+        readonly tree: z.infer<typeof SessionAgentTreeSchema>;
+    };
+}
+/** Builds the agent trees router: two reads, behind the control-token middleware. */
+declare function createAgentTreesApiRouter(deps: AgentTreesApiDeps): {
+    agentTrees: {
+        list: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, z.ZodObject<{
+            identity: z.ZodOptional<z.ZodString>;
+            all: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodArray<z.ZodObject<{
+            project: z.ZodString;
+            sessionId: z.ZodString;
+            superseded: z.ZodBoolean;
+            entry: z.ZodString;
+            agentCount: z.ZodNumber;
+            workflowRunCount: z.ZodNumber;
+            updatedAt: z.ZodOptional<z.ZodISODateTime>;
+            identities: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+        show: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, z.ZodObject<{
+            session: z.ZodString;
+            identity: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            project: z.ZodString;
+            sessionId: z.ZodString;
+            superseded: z.ZodBoolean;
+            agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
+            tasks: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                subject: z.ZodString;
+                description: z.ZodOptional<z.ZodString>;
+                status: z.ZodString;
+                activeForm: z.ZodOptional<z.ZodString>;
+                owner: z.ZodOptional<z.ZodString>;
+                metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                blocks: z.ZodArray<z.ZodString>;
+                blockedBy: z.ZodArray<z.ZodString>;
+                taskList: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            workflowRuns: z.ZodArray<z.ZodObject<{
+                runId: z.ZodString;
+                workflowName: z.ZodOptional<z.ZodString>;
+                status: z.ZodOptional<z.ZodString>;
+                startTime: z.ZodOptional<z.ZodNumber>;
+                phases: z.ZodArray<z.ZodString>;
+                summary: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            problems: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                reason: z.ZodString;
+            }, z.core.$strict>>;
+            identities: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    };
+};
+/** The agent trees router, as the merged mount's and the client's own types are derived from it. */
+type AgentTreesApiRouter = ReturnType<typeof createAgentTreesApiRouter>;
+
 /**
  * The front door's read-only status: the data `agent-shim frontdoor status` prints and the door's own typed `frontdoor.status` procedure returns, collected without starting or stopping anything. Kept here, beside the state file and session registry it reads, so both the command layer and the typed API's schema layer share one shape and one collector with no dependency on the CLI's command wiring.
  */
@@ -7590,7 +7876,7 @@ type ControlApiRouter = ReturnType<typeof createControlApiRouter>;
 /** The control plane alone as a client sees it: every call presents the control token, over TLS trusting only the CA file the door's own state names. */
 type ControlApiClient = RouterClient<ControlApiRouter>;
 /** Everything the door's whole typed API needs: the Remote Control operations, the control-plane reads, the configuration writes and the door-wide event stream, one deps object because one mount serves them under one token. */
-interface DoorApiDeps extends RcApiDeps, ControlApiDeps, ConfigApiDeps, DoorEventsApiDeps, LifecycleApiDeps, CodexApiDeps, LaunchApiDeps {
+interface DoorApiDeps extends RcApiDeps, ControlApiDeps, ConfigApiDeps, DoorEventsApiDeps, LifecycleApiDeps, CodexApiDeps, LaunchApiDeps, AgentTreesApiDeps {
 }
 /** Builds the door's whole typed API: the Remote Control router, the control-plane routers, the configuration router and the events router beside them, one object for the one handler the provider listener mounts. */
 declare function createDoorApiRouter(deps: DoorApiDeps): {
@@ -7638,6 +7924,55 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             sources: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
         }, zod_v4_core.$strict>, any, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
+    agentTrees: {
+        list: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
+            identity: zod.ZodOptional<zod.ZodString>;
+            all: zod.ZodOptional<zod.ZodBoolean>;
+        }, zod_v4_core.$strict>, zod.ZodArray<zod.ZodObject<{
+            project: zod.ZodString;
+            sessionId: zod.ZodString;
+            superseded: zod.ZodBoolean;
+            entry: zod.ZodString;
+            agentCount: zod.ZodNumber;
+            workflowRunCount: zod.ZodNumber;
+            updatedAt: zod.ZodOptional<zod.ZodISODateTime>;
+            identities: zod.ZodArray<zod.ZodString>;
+        }, zod_v4_core.$strict>>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+        show: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
+            session: zod.ZodString;
+            identity: zod.ZodOptional<zod.ZodString>;
+        }, zod_v4_core.$strict>, zod.ZodObject<{
+            project: zod.ZodString;
+            sessionId: zod.ZodString;
+            superseded: zod.ZodBoolean;
+            agents: zod.ZodArray<zod.ZodType<AgentNode, unknown, zod_v4_core.$ZodTypeInternals<AgentNode, unknown>>>;
+            tasks: zod.ZodArray<zod.ZodObject<{
+                id: zod.ZodString;
+                subject: zod.ZodString;
+                description: zod.ZodOptional<zod.ZodString>;
+                status: zod.ZodString;
+                activeForm: zod.ZodOptional<zod.ZodString>;
+                owner: zod.ZodOptional<zod.ZodString>;
+                metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+                blocks: zod.ZodArray<zod.ZodString>;
+                blockedBy: zod.ZodArray<zod.ZodString>;
+                taskList: zod.ZodOptional<zod.ZodString>;
+            }, zod_v4_core.$strict>>;
+            workflowRuns: zod.ZodArray<zod.ZodObject<{
+                runId: zod.ZodString;
+                workflowName: zod.ZodOptional<zod.ZodString>;
+                status: zod.ZodOptional<zod.ZodString>;
+                startTime: zod.ZodOptional<zod.ZodNumber>;
+                phases: zod.ZodArray<zod.ZodString>;
+                summary: zod.ZodOptional<zod.ZodString>;
+            }, zod_v4_core.$strict>>;
+            problems: zod.ZodArray<zod.ZodObject<{
+                path: zod.ZodString;
+                reason: zod.ZodString;
+            }, zod_v4_core.$strict>>;
+            identities: zod.ZodArray<zod.ZodString>;
+        }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    };
     launch: {
         resolve: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
             path: zod.ZodString;
@@ -12113,6 +12448,8 @@ interface Candidate {
     readonly scoreWindow?: "sevenDay" | "fiveHour";
     /** False when a quota window would run dry, at the observed pace, before it resets (the five-hour at its own or the rescaled shared pace, the seven-day at its own). A `scored` candidate that is not feasible ranks below every feasible one. */
     readonly feasible: boolean;
+    /** When the soonest window projected to run dry is projected to, for a `scored` candidate that is not feasible: the instant its quota is gone at the observed pace, which is what a launch weighs a returning member against. Absent for a feasible candidate. */
+    readonly runsDryAtMs?: number;
     /** The fraction of the extra-usage allowance still unspent, for a `pay-per-use` member whose only budget is that allowance (an Enterprise account). A member reporting none ranks as having all of it: no cap is known to bind. */
     readonly headroom?: number;
     /** When an `ineligible` candidate can be used again. */
@@ -12140,6 +12477,11 @@ interface PoolRanking {
         readonly identity: string;
         readonly atMs: number;
     };
+    /** When the pick would run dry before its window resets and a refused member returns before that happens, the earliest such member and when it returns: what a launch that would rather have a full window than start one that dies partway holds for. Absent when the pick is projected to last, nothing is refused, or every refused member returns after the pick would run dry. */
+    readonly holdForReturn?: {
+        readonly identity: string;
+        readonly atMs: number;
+    };
     /** The member a resumed or continued conversation started on but moved off, and why, when a launch that resumes could not keep it. One sentence for the launch decision line and `check`. */
     readonly movedOff?: {
         readonly identity: string;
@@ -12182,144 +12524,53 @@ declare function collectPoolPick(params: Readonly<{
     nowMs: number;
 }>): PoolPickReport;
 
-/**
- * The agent tree of one session as the reader returns it, and the shape of the meta file it reads. One definition each, so the type, the validator and the published JSON Schema (`schema/AgentTree.schema.json`) cannot drift. The on-disk layout is documented in `docs/agent-transcripts.md`; it belongs to Claude Code and has changed across versions, which is why the meta file is read leniently and the tree this module returns is strict.
- */
-/**
- * One subagent's `.meta.json`. `agentType` is the one field every version writes; the rest appear only for the kinds and versions that write them, and a version this schema has never seen may add more, so unknown keys are kept rather than rejected.
- */
-declare const AgentMetaSchema: z.ZodObject<{
-    agentType: z.ZodString;
-    isFork: z.ZodOptional<z.ZodBoolean>;
-    description: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    toolUseId: z.ZodOptional<z.ZodString>;
-    spawnDepth: z.ZodOptional<z.ZodNumber>;
-    parentAgentId: z.ZodOptional<z.ZodString>;
-    model: z.ZodOptional<z.ZodString>;
-    requestShape: z.ZodOptional<z.ZodString>;
-    requestNonInteractive: z.ZodOptional<z.ZodBoolean>;
-    workflowPhase: z.ZodOptional<z.ZodString>;
-    taskKind: z.ZodOptional<z.ZodString>;
-    teamName: z.ZodOptional<z.ZodString>;
-    worktreePath: z.ZodOptional<z.ZodString>;
-    worktreeBranch: z.ZodOptional<z.ZodString>;
-    stoppedByUser: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>;
-/** What kind of agent a node is, derived from its meta file: a fork inherits its parent's context, a workflow agent was spawned by a workflow run, a teammate belongs to a team. */
-declare const AgentKindSchema: z.ZodEnum<{
-    subagent: "subagent";
-    fork: "fork";
-    "workflow-agent": "workflow-agent";
-    teammate: "teammate";
-}>;
-/** One agent in a session's tree. `children` holds the agents it spawned. */
-interface AgentNode {
-    /** The stem after `agent-` in its file names, which for an unnamed agent is the `task_id` Remote Control reports for it. */
-    readonly id: string;
-    readonly kind: z.infer<typeof AgentKindSchema>;
-    readonly agentType: string;
-    readonly description?: string;
-    readonly name?: string;
-    /** The `tool_use` block in the parent's transcript that spawned this agent. */
-    readonly toolUseId?: string;
-    readonly spawnDepth?: number;
-    /** The model the spawn recorded: an alias or `inherit` as often as a concrete id, and not necessarily the model that served the agent's requests. */
-    readonly model?: string;
-    readonly background?: boolean;
-    /** The workflow run this agent belongs to, when it was spawned by one. */
-    readonly workflowRunId?: string;
-    readonly workflowPhase?: string;
-    readonly teamName?: string;
-    readonly stoppedByUser?: boolean;
-    /** The agent's transcript, relative to the identity's configuration directory. */
-    readonly transcript: string;
-    readonly children: readonly AgentNode[];
+/** The reads the session commands and procedures make: the reader's own, plus resolving a path to the real location it points at, which is how identities sharing one history store are told from identities with their own. */
+interface SessionCommandFs extends AgentReadFs {
+    /** The real path `candidate` resolves to, or undefined when nothing is there. */
+    readonly realpath: (candidate: string) => string | undefined;
 }
-/** The node schema, written out so the recursive `children` field has a lazy reference to itself. */
-declare const AgentNodeSchema: z.ZodType<AgentNode>;
-/** One entry of a task list: the session's own (`tasks/<session-id>/<n>.json`, or `tasks/session-<first-eight-characters>/<n>.json` in current versions) or a shared one (`tasks/<list-id>/<n>.json`), a team's or one named by `CLAUDE_CODE_TASK_LIST_ID`. `status` is an open string: non-standard values occur. */
-declare const TaskItemSchema: z.ZodObject<{
-    id: z.ZodString;
-    subject: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-    status: z.ZodString;
-    activeForm: z.ZodOptional<z.ZodString>;
-    owner: z.ZodOptional<z.ZodString>;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    blocks: z.ZodArray<z.ZodString>;
-    blockedBy: z.ZodArray<z.ZodString>;
-    taskList: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** One workflow run's record (`workflows/wf_<run-id>.json`), narrowed to what identifies and summarises it. */
-declare const WorkflowRunSchema: z.ZodObject<{
-    runId: z.ZodString;
-    workflowName: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodString>;
-    startTime: z.ZodOptional<z.ZodNumber>;
-    phases: z.ZodArray<z.ZodString>;
-    summary: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** The whole picture of one session's agents, tasks and workflow runs. */
-declare const SessionAgentTreeSchema: z.ZodObject<{
-    project: z.ZodString;
-    sessionId: z.ZodString;
-    superseded: z.ZodBoolean;
-    agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
-    tasks: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        subject: z.ZodString;
-        description: z.ZodOptional<z.ZodString>;
-        status: z.ZodString;
-        activeForm: z.ZodOptional<z.ZodString>;
-        owner: z.ZodOptional<z.ZodString>;
-        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        blocks: z.ZodArray<z.ZodString>;
-        blockedBy: z.ZodArray<z.ZodString>;
-        taskList: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>;
-    workflowRuns: z.ZodArray<z.ZodObject<{
-        runId: z.ZodString;
-        workflowName: z.ZodOptional<z.ZodString>;
-        status: z.ZodOptional<z.ZodString>;
-        startTime: z.ZodOptional<z.ZodNumber>;
-        phases: z.ZodArray<z.ZodString>;
-        summary: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>;
-    problems: z.ZodArray<z.ZodObject<{
-        path: z.ZodString;
-        reason: z.ZodString;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-type AgentKind = z.output<typeof AgentKindSchema>;
-type TaskItem = z.output<typeof TaskItemSchema>;
-type WorkflowRun = z.output<typeof WorkflowRunSchema>;
-type SessionAgentTree = z.output<typeof SessionAgentTreeSchema>;
+/** The real filesystem, for the commands and the door's sessions procedures. */
+declare const realSessionFs: SessionCommandFs;
 
 /**
- * The agent tree reader: pure over an injected filesystem, so the CLI, the library surface and tests read the same way, and nothing here writes. The layout it reads is documented in `docs/agent-transcripts.md`.
+ * Finding and reading sessions across identities, pure over an injected filesystem: the logic the \`session\` commands and the door's \`sessions\` procedures share, free of command-line dependencies so the library surface can export it.
  */
-/** The filesystem reads the agent tree reader needs. */
-type AgentReadFs = Pick<FarmFs, "readFileUtf8" | "readdir">;
-/** One session found under a project: its directory name split into the session id and whether the entry is an archived copy (superseded by a resume, or orphaned) rather than the live session. */
-interface SessionRef {
-    readonly project: string;
-    readonly sessionId: string;
-    readonly superseded: boolean;
-    /** The directory (and transcript stem) name exactly as on disk, which differs from `sessionId` for an archived copy. */
-    readonly entry: string;
+/** A session as `session list` reports it. `identities` names every identity whose configuration exposes it: history is shared between identities by default, so one session is usually visible to several. */
+interface IdentitySession extends SessionSummary {
+    readonly identities: readonly string[];
 }
-/** Lists every session under every project: a transcript file, or a directory holding agents or workflow runs. Sorted by project then entry so output is stable. */
-declare function listSessions(fs: AgentReadFs, configDir: string): readonly SessionRef[];
-/** What a caller knows about a session that the disk does not record. */
-interface ReadSessionOptions {
-    /** Task lists the session was pointed at with `CLAUDE_CODE_TASK_LIST_ID`, which is a property of the process environment and is written nowhere in the session's files. Each is read from `tasks/<id>` and its tasks carry the id as `taskList`. */
-    readonly taskListIds?: readonly string[];
+/** Raised when a session id names no session, or more than one. */
+declare class SessionLookupError extends CliError {
+    constructor(message: string);
+}
+/** Filters for `session list`. */
+interface SessionListFilters {
+    /** Only this identity's sessions. */
+    readonly identity?: string;
+    /** Include sessions that spawned no agent and ran no workflow. */
+    readonly all?: boolean;
 }
 /**
- * Reads one session's agents, task list and workflow runs. Every file that cannot be used is listed in `problems` with the reason; a missing directory is simply an empty section, because a session that never spawned an agent has none.
+ * Collects `session list`, read-only: every session of the given identities with its agent and workflow-run counts, newest transcript first. Sessions with nothing to inspect are left out unless `all` is set, because most sessions never spawn an agent and listing them would bury the ones that did.
  */
-declare function readSessionAgentTree(fs: AgentReadFs, configDir: string, ref: SessionRef, options?: Readonly<ReadSessionOptions>): SessionAgentTree;
+declare function collectSessionList(fs: SessionCommandFs, identitiesDir: string, identities: readonly string[], filters: Readonly<SessionListFilters>): readonly IdentitySession[];
+/** A resolved session: where it is read from and which identities expose it. */
+interface LocatedSession {
+    readonly identities: readonly string[];
+    readonly configDir: string;
+    readonly ref: SessionRef;
+}
+/**
+ * Resolves a session id, or an unambiguous prefix of one, across the given identities. Fails with every candidate named when the prefix matches several, so the caller can say which it meant.
+ */
+declare function locateSession(fs: SessionCommandFs, identitiesDir: string, identities: readonly string[], query: string, onlyIdentity?: string): LocatedSession;
+/** One session resolved and read: the tree and every identity that exposes it. */
+interface SessionView {
+    readonly identities: readonly string[];
+    readonly tree: SessionAgentTree;
+}
+/** Resolves a session id or prefix and reads its tree: what `session show` and the door's `sessions.show` both answer. */
+declare function showSession(fs: SessionCommandFs, identitiesDir: string, identities: readonly string[], query: string, onlyIdentity?: string): SessionView;
 
 /** One quota window's pool-selection facts, in the units a policy reads: fractions of the window, and hours until it resets. */
 interface PoolWindowFacts {
@@ -12959,5 +13210,5 @@ declare const OWN_CLI_FILE_NAME = "cli.cjs";
  */
 declare function agentShimCliPath(distDir?: string | undefined): string;
 
-export { AMBIENT_CREDENTIAL_VARS, AgentKindSchema, AgentMetaSchema, AgentNodeSchema, CHECK_CREDENTIAL_APPLIES, CODEX_APP_SERVER_GENERATED_AGAINST, CODEX_APP_SERVER_TIMEOUT_MS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, CodexAccountReadSchema, CodexAppServerProtocolError, CodexAppServerRequestError, CodexAppServerUnavailableError, CodexLogoutOutputSchema, CodexRateLimitsReadSchema, CodexSignInSchema, CodexStatusOutputSchema, ConfigIdentityAddOutputSchema, ConfigIdentityRemoveInputSchema, ConfigIdentityRemoveOutputSchema, ConfigIdentitySetInputSchema, ConfigIdentitySetOutputSchema, ConfigIdentityUseOutputSchema, ConfigNameInputSchema, ConfigPoolAddInputSchema, ConfigPoolAddOutputSchema, ConfigPoolRemoveInputSchema, ConfigPoolRemoveOutputSchema, ConfigPoolSetInputSchema, ConfigPoolSetOutputSchema, ConfigPoolUseOutputSchema, ConfigProfileAddInputSchema, ConfigProfileAddOutputSchema, ConfigProfileRemoveInputSchema, ConfigProfileRemoveOutputSchema, ConfigProfileSchema, ConfigProfileSetInputSchema, ConfigProfileSetOutputSchema, ConfigProfileUseOutputSchema, ConfigProviderAddInputSchema, ConfigProviderAddOutputSchema, ConfigProviderRemoveInputSchema, ConfigProviderRemoveOutputSchema, ConfigProviderSetInputSchema, ConfigProviderSetOutputSchema, ConfigRuleAddInputSchema, ConfigRuleAddOutputSchema, ConfigRuleRemoveInputSchema, ConfigRuleRemoveOutputSchema, ConfigRuleSetInputSchema, ConfigRuleSetOutputSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, CredentialSummarySchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorRestartOutputSchema, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LaunchResolveInputSchema, LaunchResolveOutputSchema, LegacyProviderFileError, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolGraphError, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, ResetRowSchema, ResetScheduleSchema, SessionAgentTreeSchema, TaskItemSchema, USAGE_EVENT_SOURCE, UpdateCheckOutputSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, WorkflowRunSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, collectResets, createCodexApiRouter, createConfigApiRouter, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchApiRouter, createLaunchEventPublisher, createLeafCache, createLifecycleApiRouter, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listSessions, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readCodexAccount, readCodexRateLimits, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readSessionAgentTree, readUsageSnapshot, realCodexAppServerPort, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveClaudeLaunch, resolveDecisions, resolveLaunch, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, watchedInstallEntry, writeDirectoryRules };
-export type { AddDirectoryRuleOptions, AddProviderInput, AgentKind, AgentNode, AgentReadFs, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, ClaudeLaunchResolution, CodexAccountRead, CodexApiClient, CodexApiDeps, CodexApiRouter, CodexAppServerConnection, CodexAppServerPort, CodexAppServerReadOptions, CodexRateLimitsRead, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigApiDeps, ConfigApiRouter, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchApiDeps, LaunchApiRouter, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchResolution, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, LifecycleApiClient, LifecycleApiDeps, LifecycleApiRouter, NestedContribution, OwnExecutableStat, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, ReadSessionOptions, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResetRow, ResetSchedule, ResolveClaudeLaunchOptions, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SessionAgentTree, SessionRef, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, TaskItem, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation, WorkflowRun };
+export { AMBIENT_CREDENTIAL_VARS, AgentKindSchema, AgentMetaSchema, AgentNodeSchema, AgentTreesListInputSchema, AgentTreesListOutputSchema, AgentTreesShowInputSchema, AgentTreesShowOutputSchema, CHECK_CREDENTIAL_APPLIES, CODEX_APP_SERVER_GENERATED_AGAINST, CODEX_APP_SERVER_TIMEOUT_MS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, CodexAccountReadSchema, CodexAppServerProtocolError, CodexAppServerRequestError, CodexAppServerUnavailableError, CodexLogoutOutputSchema, CodexRateLimitsReadSchema, CodexSignInSchema, CodexStatusOutputSchema, ConfigIdentityAddOutputSchema, ConfigIdentityRemoveInputSchema, ConfigIdentityRemoveOutputSchema, ConfigIdentitySetInputSchema, ConfigIdentitySetOutputSchema, ConfigIdentityUseOutputSchema, ConfigNameInputSchema, ConfigPoolAddInputSchema, ConfigPoolAddOutputSchema, ConfigPoolRemoveInputSchema, ConfigPoolRemoveOutputSchema, ConfigPoolSetInputSchema, ConfigPoolSetOutputSchema, ConfigPoolUseOutputSchema, ConfigProfileAddInputSchema, ConfigProfileAddOutputSchema, ConfigProfileRemoveInputSchema, ConfigProfileRemoveOutputSchema, ConfigProfileSchema, ConfigProfileSetInputSchema, ConfigProfileSetOutputSchema, ConfigProfileUseOutputSchema, ConfigProviderAddInputSchema, ConfigProviderAddOutputSchema, ConfigProviderRemoveInputSchema, ConfigProviderRemoveOutputSchema, ConfigProviderSetInputSchema, ConfigProviderSetOutputSchema, ConfigRuleAddInputSchema, ConfigRuleAddOutputSchema, ConfigRuleRemoveInputSchema, ConfigRuleRemoveOutputSchema, ConfigRuleSetInputSchema, ConfigRuleSetOutputSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, CredentialSummarySchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorRestartOutputSchema, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LaunchResolveInputSchema, LaunchResolveOutputSchema, LegacyProviderFileError, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolGraphError, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, ResetRowSchema, ResetScheduleSchema, SessionAgentTreeSchema, SessionLookupError, SessionSummarySchema, TaskItemSchema, USAGE_EVENT_SOURCE, UpdateCheckOutputSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, WorkflowRunSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, collectResets, collectSessionList, createAgentTreesApiRouter, createCodexApiRouter, createConfigApiRouter, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchApiRouter, createLaunchEventPublisher, createLeafCache, createLifecycleApiRouter, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listSessions, listUsageSnapshots, locateSession, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readCodexAccount, readCodexRateLimits, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readSessionAgentTree, readUsageSnapshot, realCodexAppServerPort, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, realSessionFs, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveClaudeLaunch, resolveDecisions, resolveLaunch, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, showSession, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, summariseSession, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, watchedInstallEntry, writeDirectoryRules };
+export type { AddDirectoryRuleOptions, AddProviderInput, AgentKind, AgentNode, AgentReadFs, AgentTreesApiDeps, AgentTreesApiRouter, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, ClaudeLaunchResolution, CodexAccountRead, CodexApiClient, CodexApiDeps, CodexApiRouter, CodexAppServerConnection, CodexAppServerPort, CodexAppServerReadOptions, CodexRateLimitsRead, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigApiDeps, ConfigApiRouter, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, IdentitySession, InjectedCredential, LaunchApiDeps, LaunchApiRouter, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchResolution, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, LifecycleApiClient, LifecycleApiDeps, LifecycleApiRouter, LocatedSession, NestedContribution, OwnExecutableStat, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, ReadSessionOptions, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResetRow, ResetSchedule, ResolveClaudeLaunchOptions, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SessionAgentTree, SessionCommandFs, SessionListFilters, SessionRef, SessionSummary, SessionView, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, TaskItem, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation, WorkflowRun };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-use",
-  "version": "9.16.0",
+  "version": "9.18.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",