claude-use 9.17.0 → 9.19.0

package/dist/types/index.d.ts

@@ -2650,6 +2650,243 @@ declare function realConnectCertStore(paths: {
     readonly frontdoorCaKeyFile: string;
 }): ConnectCertStore;
 
+/**
+ * The agent tree of one session as the reader returns it, and the shape of the meta file it reads. One definition each, so the type, the validator and the published JSON Schema (`schema/AgentTree.schema.json`) cannot drift. The on-disk layout is documented in `docs/agent-transcripts.md`; it belongs to Claude Code and has changed across versions, which is why the meta file is read leniently and the tree this module returns is strict.
+ */
+/**
+ * One subagent's `.meta.json`. `agentType` is the one field every version writes; the rest appear only for the kinds and versions that write them, and a version this schema has never seen may add more, so unknown keys are kept rather than rejected.
+ */
+declare const AgentMetaSchema: z.ZodObject<{
+    agentType: z.ZodString;
+    isFork: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    toolUseId: z.ZodOptional<z.ZodString>;
+    spawnDepth: z.ZodOptional<z.ZodNumber>;
+    parentAgentId: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    requestShape: z.ZodOptional<z.ZodString>;
+    requestNonInteractive: z.ZodOptional<z.ZodBoolean>;
+    workflowPhase: z.ZodOptional<z.ZodString>;
+    taskKind: z.ZodOptional<z.ZodString>;
+    teamName: z.ZodOptional<z.ZodString>;
+    worktreePath: z.ZodOptional<z.ZodString>;
+    worktreeBranch: z.ZodOptional<z.ZodString>;
+    stoppedByUser: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>;
+/** What kind of agent a node is, derived from its meta file: a fork inherits its parent's context, a workflow agent was spawned by a workflow run, a teammate belongs to a team. */
+declare const AgentKindSchema: z.ZodEnum<{
+    subagent: "subagent";
+    fork: "fork";
+    "workflow-agent": "workflow-agent";
+    teammate: "teammate";
+}>;
+/** One agent in a session's tree. `children` holds the agents it spawned. */
+interface AgentNode {
+    /** The stem after `agent-` in its file names, which for an unnamed agent is the `task_id` Remote Control reports for it. */
+    readonly id: string;
+    readonly kind: z.infer<typeof AgentKindSchema>;
+    readonly agentType: string;
+    readonly description?: string;
+    readonly name?: string;
+    /** The `tool_use` block in the parent's transcript that spawned this agent. */
+    readonly toolUseId?: string;
+    readonly spawnDepth?: number;
+    /** The model the spawn recorded: an alias or `inherit` as often as a concrete id, and not necessarily the model that served the agent's requests. */
+    readonly model?: string;
+    readonly background?: boolean;
+    /** The workflow run this agent belongs to, when it was spawned by one. */
+    readonly workflowRunId?: string;
+    readonly workflowPhase?: string;
+    readonly teamName?: string;
+    readonly stoppedByUser?: boolean;
+    /** The agent's transcript, relative to the identity's configuration directory. */
+    readonly transcript: string;
+    readonly children: readonly AgentNode[];
+}
+/** The node schema, written out so the recursive `children` field has a lazy reference to itself. */
+declare const AgentNodeSchema: z.ZodType<AgentNode>;
+/** One entry of a task list: the session's own (`tasks/<session-id>/<n>.json`, or `tasks/session-<first-eight-characters>/<n>.json` in current versions) or a shared one (`tasks/<list-id>/<n>.json`), a team's or one named by `CLAUDE_CODE_TASK_LIST_ID`. `status` is an open string: non-standard values occur. */
+declare const TaskItemSchema: z.ZodObject<{
+    id: z.ZodString;
+    subject: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    status: z.ZodString;
+    activeForm: z.ZodOptional<z.ZodString>;
+    owner: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    blocks: z.ZodArray<z.ZodString>;
+    blockedBy: z.ZodArray<z.ZodString>;
+    taskList: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** One workflow run's record (`workflows/wf_<run-id>.json`), narrowed to what identifies and summarises it. */
+declare const WorkflowRunSchema: z.ZodObject<{
+    runId: z.ZodString;
+    workflowName: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodString>;
+    startTime: z.ZodOptional<z.ZodNumber>;
+    phases: z.ZodArray<z.ZodString>;
+    summary: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** One session in a listing: the cheap facts read from directory listings and one stat, and every identity whose configuration exposes it. */
+declare const SessionSummarySchema: z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    entry: z.ZodString;
+    agentCount: z.ZodNumber;
+    workflowRunCount: z.ZodNumber;
+    updatedAt: z.ZodOptional<z.ZodISODateTime>;
+    identities: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/** The whole picture of one session's agents, tasks and workflow runs. */
+declare const SessionAgentTreeSchema: z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        subject: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        status: z.ZodString;
+        activeForm: z.ZodOptional<z.ZodString>;
+        owner: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        blocks: z.ZodArray<z.ZodString>;
+        blockedBy: z.ZodArray<z.ZodString>;
+        taskList: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    workflowRuns: z.ZodArray<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodString>;
+        startTime: z.ZodOptional<z.ZodNumber>;
+        phases: z.ZodArray<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    problems: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type AgentKind = z.output<typeof AgentKindSchema>;
+type TaskItem = z.output<typeof TaskItemSchema>;
+type WorkflowRun = z.output<typeof WorkflowRunSchema>;
+type SessionAgentTree = z.output<typeof SessionAgentTreeSchema>;
+
+/**
+ * The live half of the agent tree: what a Remote Control session's read stream says about its background tasks and subagents (`task_started`, `task_progress`, `task_updated`, `task_notification`, `background_tasks_changed`), and the merge of that with the tree read from disk. The event shapes are documented in `docs/rc-agent-events.md`. The stream exists only for sessions the door observes and only while they are live, so it is never the sole source: the disk tree is authoritative for every session and for completed content, and the stream supplies state the transcript has not flushed yet.
+ */
+/** How many tasks one session's book keeps. Past it the oldest-observed finished task is dropped first, so a long-lived session cannot grow the door's memory without bound; a running task is never dropped for a finished one. */
+declare const LIVE_TASK_CAP = 512;
+/** One task or subagent as the stream describes it. `status` is an open string: only `completed` has been observed beyond the running state. */
+declare const LiveTaskSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    sessionId: z.ZodString;
+    runId: z.ZodOptional<z.ZodString>;
+    toolUseId: z.ZodOptional<z.ZodString>;
+    taskType: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    subagentType: z.ZodOptional<z.ZodString>;
+    spawnDepth: z.ZodOptional<z.ZodNumber>;
+    parentTaskId: z.ZodOptional<z.ZodString>;
+    backgrounded: z.ZodOptional<z.ZodBoolean>;
+    status: z.ZodString;
+    outputFile: z.ZodOptional<z.ZodString>;
+    summary: z.ZodOptional<z.ZodString>;
+    lastToolName: z.ZodOptional<z.ZodString>;
+    usage: z.ZodOptional<z.ZodObject<{
+        totalTokens: z.ZodOptional<z.ZodNumber>;
+        toolUses: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    observedAt: z.ZodNumber;
+}, z.core.$strict>;
+type LiveTask = z.output<typeof LiveTaskSchema>;
+/** A session's live tasks by `task_id`. */
+type LiveTaskBook = ReadonlyMap<string, LiveTask>;
+/**
+ * Folds one stream payload into a session's book and returns the next book (the same one when the payload is not a task event). `task_started` births a task, `task_progress` and `task_notification` refine it, `task_updated` applies its patch, and `background_tasks_changed` fills in the tasks it lists without inventing a state for ones it omits: the snapshot says what is live, not that an unlisted task finished.
+ *
+ * A payload that does not match is ignored, never an error: the stream belongs to Claude Code and gains fields and subtypes between versions.
+ */
+declare function applyAgentTaskEvent(book: LiveTaskBook, sessionId: string, payload: unknown, observedAt: number): LiveTaskBook;
+/** How a merged node relates to the stream: `disk` was only on disk, `both` was matched by a live task. A task only the stream knows is not a node but a member of `liveOnly`. */
+declare const MergedProvenanceSchema: z.ZodEnum<{
+    disk: "disk";
+    both: "both";
+}>;
+/** An agent node of the merged tree: the disk node as read (it wins for everything the transcript holds), the stream's state beside it when a live task matched. */
+interface MergedAgentNode extends Omit<AgentNode, "children"> {
+    readonly provenance: z.output<typeof MergedProvenanceSchema>;
+    readonly live?: LiveTask;
+    readonly children: readonly MergedAgentNode[];
+}
+/** The merged node schema, recursive through a lazy reference like the disk node's. */
+declare const MergedAgentNodeSchema: z.ZodType<MergedAgentNode>;
+/** One session's agent tree with the stream's view merged in. */
+declare const MergedAgentTreeSchema: z.ZodObject<{
+    agents: z.ZodArray<z.ZodType<MergedAgentNode, unknown, z.core.$ZodTypeInternals<MergedAgentNode, unknown>>>;
+    remoteSessions: z.ZodArray<z.ZodString>;
+    liveOnly: z.ZodArray<z.ZodObject<{
+        taskId: z.ZodString;
+        sessionId: z.ZodString;
+        runId: z.ZodOptional<z.ZodString>;
+        toolUseId: z.ZodOptional<z.ZodString>;
+        taskType: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        subagentType: z.ZodOptional<z.ZodString>;
+        spawnDepth: z.ZodOptional<z.ZodNumber>;
+        parentTaskId: z.ZodOptional<z.ZodString>;
+        backgrounded: z.ZodOptional<z.ZodBoolean>;
+        status: z.ZodString;
+        outputFile: z.ZodOptional<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+        lastToolName: z.ZodOptional<z.ZodString>;
+        usage: z.ZodOptional<z.ZodObject<{
+            totalTokens: z.ZodOptional<z.ZodNumber>;
+            toolUses: z.ZodOptional<z.ZodNumber>;
+            durationMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        observedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        subject: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        status: z.ZodString;
+        activeForm: z.ZodOptional<z.ZodString>;
+        owner: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        blocks: z.ZodArray<z.ZodString>;
+        blockedBy: z.ZodArray<z.ZodString>;
+        taskList: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    workflowRuns: z.ZodArray<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodString>;
+        startTime: z.ZodOptional<z.ZodNumber>;
+        phases: z.ZodArray<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    problems: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type MergedAgentTree = z.output<typeof MergedAgentTreeSchema>;
+/**
+ * Merges the live tasks into one session's disk tree.
+ *
+ * A live task belongs to the session when its `task_id` is a disk agent's id, its `tool_use_id` is a disk agent's `toolUseId`, or its `output_file` sits under the session's local id (the only place the stream states it). Matched agents keep every disk field and gain `live`; matched-by-session tasks that name no agent are `liveOnly`. Nothing is dropped from the disk tree and nothing the stream said overrides it.
+ */
+declare function mergeLiveTasks(tree: SessionAgentTree, live: readonly LiveTask[]): MergedAgentTree;
+
 /**
  * The persisted half of the tracker's client credential and of its sequence cursor: the OAuth-kind bearer and protocol headers a Remote Control session's client-half calls were last observed with, and the highest sequence number the door's stream attachment had confirmed when its last attachment boundary passed, written per session id so a later door generation can still attach to a session whose create crossed an earlier one and resume its read stream from where the last generation left off.
  *
@@ -2939,6 +3176,8 @@ interface RcSessionTracker {
      * Files one client read stream envelope: advances the session's sequence cursor, and treats the payload exactly as an observed event-batch body's would be treated, which is how an approval reaches the pending list from the stream (the live finding behind the client attachment: the CLI routes `control_request`s only toward attached clients, so the stream, not the worker's own writes, is where a `can_use_tool` the door must answer becomes visible). A `control_request` whose envelope names the worker as its source births a pending entry; a `control_response` retires the request it answers, whoever answered it.
      */
     readonly fileStreamEvent: (sessionId: string, event: RcStreamEnvelope) => void;
+    /** The live background tasks and subagents the observed events described, for one session or every tracked one, each carrying the session that reported it and when it was last observed. */
+    readonly liveTasksOf: (sessionId?: string) => readonly LiveTask[];
     /** Retires one pending control request as answered: what a successful answer write calls, so the request stops being listed the moment it is answered. */
     readonly completePending: (sessionId: string, requestId: string) => void;
     /** Stops the idle sweep timer. The entries themselves are unreachable the moment the door drops them. */
@@ -6912,6 +7151,215 @@ declare function createLaunchApiRouter(deps: LaunchApiDeps): {
 /** The launch router, as the merged mount's and the client's own types are derived from it. */
 type LaunchApiRouter = ReturnType<typeof createLaunchApiRouter>;
 
+/**
+ * The agent tree reader: pure over an injected filesystem, so the CLI, the library surface and tests read the same way, and nothing here writes. The layout it reads is documented in `docs/agent-transcripts.md`.
+ */
+/** The filesystem reads the agent tree reader needs. */
+type AgentReadFs = Pick<FarmFs, "readFileUtf8" | "readdir" | "lstat">;
+/** One session found under a project: its directory name split into the session id and whether the entry is an archived copy (superseded by a resume, or orphaned) rather than the live session. */
+interface SessionRef {
+    readonly project: string;
+    readonly sessionId: string;
+    readonly superseded: boolean;
+    /** The directory (and transcript stem) name exactly as on disk, which differs from `sessionId` for an archived copy. */
+    readonly entry: string;
+}
+/** Lists every session under every project: a transcript file, or a directory holding agents or workflow runs. Sorted by project then entry so output is stable. */
+declare function listSessions(fs: AgentReadFs, configDir: string): readonly SessionRef[];
+/** One session in a listing: the cheap facts read from directory listings and one stat, without parsing any agent. */
+interface SessionSummary extends SessionRef {
+    /** How many agent meta files the session has, across its top-level agents and every workflow run. */
+    readonly agentCount: number;
+    /** How many workflow run records the session has. */
+    readonly workflowRunCount: number;
+    /** When the session's transcript was last written, as an ISO instant; absent when there is no transcript file. */
+    readonly updatedAt?: string;
+}
+/** What a caller knows about a session that the disk does not record. */
+interface ReadSessionOptions {
+    /** Task lists the session was pointed at with `CLAUDE_CODE_TASK_LIST_ID`, which is a property of the process environment and is written nowhere in the session's files. Each is read from `tasks/<id>` and its tasks carry the id as `taskList`. */
+    readonly taskListIds?: readonly string[];
+}
+/** Summarises one session without reading any agent file: listings and one stat only, so it is cheap over every session an identity has. */
+declare function summariseSession(fs: AgentReadFs, configDir: string, ref: Readonly<SessionRef>): SessionSummary;
+/**
+ * Reads one session's agents, task list and workflow runs. Every file that cannot be used is listed in `problems` with the reason; a missing directory is simply an empty section, because a session that never spawned an agent has none.
+ */
+declare function readSessionAgentTree(fs: AgentReadFs, configDir: string, ref: SessionRef, options?: Readonly<ReadSessionOptions>): SessionAgentTree;
+
+/**
+ * A session's agents as a typed oRPC API: the sessions that spawned agents or ran workflows, and one session's agent tree, task list and workflow runs, read from the transcripts on disk. The same data `agent-shim session list` and `session show` print, so a consumer that is not the CLI (an MCP client, the library) asks the door for it.
+ */
+/** What `agentTrees.list` accepts. */
+declare const AgentTreesListInputSchema: z.ZodObject<{
+    identity: z.ZodOptional<z.ZodString>;
+    all: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+/** What `agentTrees.list` answers. */
+declare const AgentTreesListOutputSchema: z.ZodArray<z.ZodObject<{
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    entry: z.ZodString;
+    agentCount: z.ZodNumber;
+    workflowRunCount: z.ZodNumber;
+    updatedAt: z.ZodOptional<z.ZodISODateTime>;
+    identities: z.ZodArray<z.ZodString>;
+}, z.core.$strict>>;
+/** What `agentTrees.show` accepts. */
+declare const AgentTreesShowInputSchema: z.ZodObject<{
+    session: z.ZodString;
+    identity: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** What `agentTrees.show` answers: the tree read from disk with the live Remote Control tasks merged in, beside the identities that expose it. */
+declare const AgentTreesShowOutputSchema: z.ZodObject<{
+    agents: z.ZodArray<z.ZodType<MergedAgentNode, unknown, z.core.$ZodTypeInternals<MergedAgentNode, unknown>>>;
+    remoteSessions: z.ZodArray<z.ZodString>;
+    liveOnly: z.ZodArray<z.ZodObject<{
+        taskId: z.ZodString;
+        sessionId: z.ZodString;
+        runId: z.ZodOptional<z.ZodString>;
+        toolUseId: z.ZodOptional<z.ZodString>;
+        taskType: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        subagentType: z.ZodOptional<z.ZodString>;
+        spawnDepth: z.ZodOptional<z.ZodNumber>;
+        parentTaskId: z.ZodOptional<z.ZodString>;
+        backgrounded: z.ZodOptional<z.ZodBoolean>;
+        status: z.ZodString;
+        outputFile: z.ZodOptional<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+        lastToolName: z.ZodOptional<z.ZodString>;
+        usage: z.ZodOptional<z.ZodObject<{
+            totalTokens: z.ZodOptional<z.ZodNumber>;
+            toolUses: z.ZodOptional<z.ZodNumber>;
+            durationMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        observedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    project: z.ZodString;
+    sessionId: z.ZodString;
+    superseded: z.ZodBoolean;
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        subject: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        status: z.ZodString;
+        activeForm: z.ZodOptional<z.ZodString>;
+        owner: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        blocks: z.ZodArray<z.ZodString>;
+        blockedBy: z.ZodArray<z.ZodString>;
+        taskList: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    workflowRuns: z.ZodArray<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodString>;
+        startTime: z.ZodOptional<z.ZodNumber>;
+        phases: z.ZodArray<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    problems: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strict>>;
+    identities: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/** Everything the agent trees procedures need, injected so they serve against fakes in tests exactly as the door's real wiring serves against this machine. */
+interface AgentTreesApiDeps {
+    /** This generation's control token: the same value every router on the mount checks. */
+    readonly expectedToken: string;
+    /** Lists sessions, throwing the reader's `CliError` for an identity that does not exist. */
+    readonly sessionList: (filters: z.infer<typeof AgentTreesListInputSchema>) => readonly (SessionSummary & {
+        readonly identities: readonly string[];
+    })[];
+    /** Resolves and reads one session, throwing the reader's `CliError` for an id that matches none or several. */
+    readonly sessionShow: (query: string, identity: string | undefined) => {
+        readonly identities: readonly string[];
+        readonly tree: z.infer<typeof SessionAgentTreeSchema>;
+    };
+    /** The live tasks the door has observed on its Remote Control sessions, which the disk tree is merged with. Empty when no session is live. */
+    readonly liveTasks: () => readonly LiveTask[];
+}
+/** Builds the agent trees router: two reads, behind the control-token middleware. */
+declare function createAgentTreesApiRouter(deps: AgentTreesApiDeps): {
+    agentTrees: {
+        list: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, z.ZodObject<{
+            identity: z.ZodOptional<z.ZodString>;
+            all: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodArray<z.ZodObject<{
+            project: z.ZodString;
+            sessionId: z.ZodString;
+            superseded: z.ZodBoolean;
+            entry: z.ZodString;
+            agentCount: z.ZodNumber;
+            workflowRunCount: z.ZodNumber;
+            updatedAt: z.ZodOptional<z.ZodISODateTime>;
+            identities: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+        show: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, z.ZodObject<{
+            session: z.ZodString;
+            identity: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            agents: z.ZodArray<z.ZodType<MergedAgentNode, unknown, z.core.$ZodTypeInternals<MergedAgentNode, unknown>>>;
+            remoteSessions: z.ZodArray<z.ZodString>;
+            liveOnly: z.ZodArray<z.ZodObject<{
+                taskId: z.ZodString;
+                sessionId: z.ZodString;
+                runId: z.ZodOptional<z.ZodString>;
+                toolUseId: z.ZodOptional<z.ZodString>;
+                taskType: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                subagentType: z.ZodOptional<z.ZodString>;
+                spawnDepth: z.ZodOptional<z.ZodNumber>;
+                parentTaskId: z.ZodOptional<z.ZodString>;
+                backgrounded: z.ZodOptional<z.ZodBoolean>;
+                status: z.ZodString;
+                outputFile: z.ZodOptional<z.ZodString>;
+                summary: z.ZodOptional<z.ZodString>;
+                lastToolName: z.ZodOptional<z.ZodString>;
+                usage: z.ZodOptional<z.ZodObject<{
+                    totalTokens: z.ZodOptional<z.ZodNumber>;
+                    toolUses: z.ZodOptional<z.ZodNumber>;
+                    durationMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+                observedAt: z.ZodNumber;
+            }, z.core.$strict>>;
+            project: z.ZodString;
+            sessionId: z.ZodString;
+            superseded: z.ZodBoolean;
+            tasks: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                subject: z.ZodString;
+                description: z.ZodOptional<z.ZodString>;
+                status: z.ZodString;
+                activeForm: z.ZodOptional<z.ZodString>;
+                owner: z.ZodOptional<z.ZodString>;
+                metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                blocks: z.ZodArray<z.ZodString>;
+                blockedBy: z.ZodArray<z.ZodString>;
+                taskList: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            workflowRuns: z.ZodArray<z.ZodObject<{
+                runId: z.ZodString;
+                workflowName: z.ZodOptional<z.ZodString>;
+                status: z.ZodOptional<z.ZodString>;
+                startTime: z.ZodOptional<z.ZodNumber>;
+                phases: z.ZodArray<z.ZodString>;
+                summary: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            problems: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                reason: z.ZodString;
+            }, z.core.$strict>>;
+            identities: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    };
+};
+/** The agent trees router, as the merged mount's and the client's own types are derived from it. */
+type AgentTreesApiRouter = ReturnType<typeof createAgentTreesApiRouter>;
+
 /**
  * The front door's read-only status: the data `agent-shim frontdoor status` prints and the door's own typed `frontdoor.status` procedure returns, collected without starting or stopping anything. Kept here, beside the state file and session registry it reads, so both the command layer and the typed API's schema layer share one shape and one collector with no dependency on the CLI's command wiring.
  */
@@ -7590,7 +8038,7 @@ type ControlApiRouter = ReturnType<typeof createControlApiRouter>;
 /** The control plane alone as a client sees it: every call presents the control token, over TLS trusting only the CA file the door's own state names. */
 type ControlApiClient = RouterClient<ControlApiRouter>;
 /** Everything the door's whole typed API needs: the Remote Control operations, the control-plane reads, the configuration writes and the door-wide event stream, one deps object because one mount serves them under one token. */
-interface DoorApiDeps extends RcApiDeps, ControlApiDeps, ConfigApiDeps, DoorEventsApiDeps, LifecycleApiDeps, CodexApiDeps, LaunchApiDeps {
+interface DoorApiDeps extends RcApiDeps, ControlApiDeps, ConfigApiDeps, DoorEventsApiDeps, LifecycleApiDeps, CodexApiDeps, LaunchApiDeps, AgentTreesApiDeps {
 }
 /** Builds the door's whole typed API: the Remote Control router, the control-plane routers, the configuration router and the events router beside them, one object for the one handler the provider listener mounts. */
 declare function createDoorApiRouter(deps: DoorApiDeps): {
@@ -7638,6 +8086,78 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
             sources: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
         }, zod_v4_core.$strict>, any, MergedErrorMap<$ErrorMap, TErrorMap>>;
     };
+    agentTrees: {
+        list: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
+            identity: zod.ZodOptional<zod.ZodString>;
+            all: zod.ZodOptional<zod.ZodBoolean>;
+        }, zod_v4_core.$strict>, zod.ZodArray<zod.ZodObject<{
+            project: zod.ZodString;
+            sessionId: zod.ZodString;
+            superseded: zod.ZodBoolean;
+            entry: zod.ZodString;
+            agentCount: zod.ZodNumber;
+            workflowRunCount: zod.ZodNumber;
+            updatedAt: zod.ZodOptional<zod.ZodISODateTime>;
+            identities: zod.ZodArray<zod.ZodString>;
+        }, zod_v4_core.$strict>>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+        show: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
+            session: zod.ZodString;
+            identity: zod.ZodOptional<zod.ZodString>;
+        }, zod_v4_core.$strict>, zod.ZodObject<{
+            agents: zod.ZodArray<zod.ZodType<MergedAgentNode, unknown, zod_v4_core.$ZodTypeInternals<MergedAgentNode, unknown>>>;
+            remoteSessions: zod.ZodArray<zod.ZodString>;
+            liveOnly: zod.ZodArray<zod.ZodObject<{
+                taskId: zod.ZodString;
+                sessionId: zod.ZodString;
+                runId: zod.ZodOptional<zod.ZodString>;
+                toolUseId: zod.ZodOptional<zod.ZodString>;
+                taskType: zod.ZodOptional<zod.ZodString>;
+                description: zod.ZodOptional<zod.ZodString>;
+                subagentType: zod.ZodOptional<zod.ZodString>;
+                spawnDepth: zod.ZodOptional<zod.ZodNumber>;
+                parentTaskId: zod.ZodOptional<zod.ZodString>;
+                backgrounded: zod.ZodOptional<zod.ZodBoolean>;
+                status: zod.ZodString;
+                outputFile: zod.ZodOptional<zod.ZodString>;
+                summary: zod.ZodOptional<zod.ZodString>;
+                lastToolName: zod.ZodOptional<zod.ZodString>;
+                usage: zod.ZodOptional<zod.ZodObject<{
+                    totalTokens: zod.ZodOptional<zod.ZodNumber>;
+                    toolUses: zod.ZodOptional<zod.ZodNumber>;
+                    durationMs: zod.ZodOptional<zod.ZodNumber>;
+                }, zod_v4_core.$strict>>;
+                observedAt: zod.ZodNumber;
+            }, zod_v4_core.$strict>>;
+            project: zod.ZodString;
+            sessionId: zod.ZodString;
+            superseded: zod.ZodBoolean;
+            tasks: zod.ZodArray<zod.ZodObject<{
+                id: zod.ZodString;
+                subject: zod.ZodString;
+                description: zod.ZodOptional<zod.ZodString>;
+                status: zod.ZodString;
+                activeForm: zod.ZodOptional<zod.ZodString>;
+                owner: zod.ZodOptional<zod.ZodString>;
+                metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+                blocks: zod.ZodArray<zod.ZodString>;
+                blockedBy: zod.ZodArray<zod.ZodString>;
+                taskList: zod.ZodOptional<zod.ZodString>;
+            }, zod_v4_core.$strict>>;
+            workflowRuns: zod.ZodArray<zod.ZodObject<{
+                runId: zod.ZodString;
+                workflowName: zod.ZodOptional<zod.ZodString>;
+                status: zod.ZodOptional<zod.ZodString>;
+                startTime: zod.ZodOptional<zod.ZodNumber>;
+                phases: zod.ZodArray<zod.ZodString>;
+                summary: zod.ZodOptional<zod.ZodString>;
+            }, zod_v4_core.$strict>>;
+            problems: zod.ZodArray<zod.ZodObject<{
+                path: zod.ZodString;
+                reason: zod.ZodString;
+            }, zod_v4_core.$strict>>;
+            identities: zod.ZodArray<zod.ZodString>;
+        }, zod_v4_core.$strict>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    };
     launch: {
         resolve: _orpc_server.DecoratedProcedure<DoorApiContext & object, IntersectPick<TInitialContext, $OutContext>, zod.ZodObject<{
             path: zod.ZodString;
@@ -12113,6 +12633,8 @@ interface Candidate {
     readonly scoreWindow?: "sevenDay" | "fiveHour";
     /** False when a quota window would run dry, at the observed pace, before it resets (the five-hour at its own or the rescaled shared pace, the seven-day at its own). A `scored` candidate that is not feasible ranks below every feasible one. */
     readonly feasible: boolean;
+    /** When the soonest window projected to run dry is projected to, for a `scored` candidate that is not feasible: the instant its quota is gone at the observed pace, which is what a launch weighs a returning member against. Absent for a feasible candidate. */
+    readonly runsDryAtMs?: number;
     /** The fraction of the extra-usage allowance still unspent, for a `pay-per-use` member whose only budget is that allowance (an Enterprise account). A member reporting none ranks as having all of it: no cap is known to bind. */
     readonly headroom?: number;
     /** When an `ineligible` candidate can be used again. */
@@ -12140,6 +12662,11 @@ interface PoolRanking {
         readonly identity: string;
         readonly atMs: number;
     };
+    /** When the pick would run dry before its window resets and a refused member returns before that happens, the earliest such member and when it returns: what a launch that would rather have a full window than start one that dies partway holds for. Absent when the pick is projected to last, nothing is refused, or every refused member returns after the pick would run dry. */
+    readonly holdForReturn?: {
+        readonly identity: string;
+        readonly atMs: number;
+    };
     /** The member a resumed or continued conversation started on but moved off, and why, when a launch that resumes could not keep it. One sentence for the launch decision line and `check`. */
     readonly movedOff?: {
         readonly identity: string;
@@ -12182,144 +12709,53 @@ declare function collectPoolPick(params: Readonly<{
     nowMs: number;
 }>): PoolPickReport;
 
-/**
- * The agent tree of one session as the reader returns it, and the shape of the meta file it reads. One definition each, so the type, the validator and the published JSON Schema (`schema/AgentTree.schema.json`) cannot drift. The on-disk layout is documented in `docs/agent-transcripts.md`; it belongs to Claude Code and has changed across versions, which is why the meta file is read leniently and the tree this module returns is strict.
- */
-/**
- * One subagent's `.meta.json`. `agentType` is the one field every version writes; the rest appear only for the kinds and versions that write them, and a version this schema has never seen may add more, so unknown keys are kept rather than rejected.
- */
-declare const AgentMetaSchema: z.ZodObject<{
-    agentType: z.ZodString;
-    isFork: z.ZodOptional<z.ZodBoolean>;
-    description: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    toolUseId: z.ZodOptional<z.ZodString>;
-    spawnDepth: z.ZodOptional<z.ZodNumber>;
-    parentAgentId: z.ZodOptional<z.ZodString>;
-    model: z.ZodOptional<z.ZodString>;
-    requestShape: z.ZodOptional<z.ZodString>;
-    requestNonInteractive: z.ZodOptional<z.ZodBoolean>;
-    workflowPhase: z.ZodOptional<z.ZodString>;
-    taskKind: z.ZodOptional<z.ZodString>;
-    teamName: z.ZodOptional<z.ZodString>;
-    worktreePath: z.ZodOptional<z.ZodString>;
-    worktreeBranch: z.ZodOptional<z.ZodString>;
-    stoppedByUser: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>;
-/** What kind of agent a node is, derived from its meta file: a fork inherits its parent's context, a workflow agent was spawned by a workflow run, a teammate belongs to a team. */
-declare const AgentKindSchema: z.ZodEnum<{
-    subagent: "subagent";
-    fork: "fork";
-    "workflow-agent": "workflow-agent";
-    teammate: "teammate";
-}>;
-/** One agent in a session's tree. `children` holds the agents it spawned. */
-interface AgentNode {
-    /** The stem after `agent-` in its file names, which for an unnamed agent is the `task_id` Remote Control reports for it. */
-    readonly id: string;
-    readonly kind: z.infer<typeof AgentKindSchema>;
-    readonly agentType: string;
-    readonly description?: string;
-    readonly name?: string;
-    /** The `tool_use` block in the parent's transcript that spawned this agent. */
-    readonly toolUseId?: string;
-    readonly spawnDepth?: number;
-    /** The model the spawn recorded: an alias or `inherit` as often as a concrete id, and not necessarily the model that served the agent's requests. */
-    readonly model?: string;
-    readonly background?: boolean;
-    /** The workflow run this agent belongs to, when it was spawned by one. */
-    readonly workflowRunId?: string;
-    readonly workflowPhase?: string;
-    readonly teamName?: string;
-    readonly stoppedByUser?: boolean;
-    /** The agent's transcript, relative to the identity's configuration directory. */
-    readonly transcript: string;
-    readonly children: readonly AgentNode[];
+/** The reads the session commands and procedures make: the reader's own, plus resolving a path to the real location it points at, which is how identities sharing one history store are told from identities with their own. */
+interface SessionCommandFs extends AgentReadFs {
+    /** The real path `candidate` resolves to, or undefined when nothing is there. */
+    readonly realpath: (candidate: string) => string | undefined;
 }
-/** The node schema, written out so the recursive `children` field has a lazy reference to itself. */
-declare const AgentNodeSchema: z.ZodType<AgentNode>;
-/** One entry of a task list: the session's own (`tasks/<session-id>/<n>.json`, or `tasks/session-<first-eight-characters>/<n>.json` in current versions) or a shared one (`tasks/<list-id>/<n>.json`), a team's or one named by `CLAUDE_CODE_TASK_LIST_ID`. `status` is an open string: non-standard values occur. */
-declare const TaskItemSchema: z.ZodObject<{
-    id: z.ZodString;
-    subject: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-    status: z.ZodString;
-    activeForm: z.ZodOptional<z.ZodString>;
-    owner: z.ZodOptional<z.ZodString>;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    blocks: z.ZodArray<z.ZodString>;
-    blockedBy: z.ZodArray<z.ZodString>;
-    taskList: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** One workflow run's record (`workflows/wf_<run-id>.json`), narrowed to what identifies and summarises it. */
-declare const WorkflowRunSchema: z.ZodObject<{
-    runId: z.ZodString;
-    workflowName: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodString>;
-    startTime: z.ZodOptional<z.ZodNumber>;
-    phases: z.ZodArray<z.ZodString>;
-    summary: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** The whole picture of one session's agents, tasks and workflow runs. */
-declare const SessionAgentTreeSchema: z.ZodObject<{
-    project: z.ZodString;
-    sessionId: z.ZodString;
-    superseded: z.ZodBoolean;
-    agents: z.ZodArray<z.ZodType<AgentNode, unknown, z.core.$ZodTypeInternals<AgentNode, unknown>>>;
-    tasks: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        subject: z.ZodString;
-        description: z.ZodOptional<z.ZodString>;
-        status: z.ZodString;
-        activeForm: z.ZodOptional<z.ZodString>;
-        owner: z.ZodOptional<z.ZodString>;
-        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        blocks: z.ZodArray<z.ZodString>;
-        blockedBy: z.ZodArray<z.ZodString>;
-        taskList: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>;
-    workflowRuns: z.ZodArray<z.ZodObject<{
-        runId: z.ZodString;
-        workflowName: z.ZodOptional<z.ZodString>;
-        status: z.ZodOptional<z.ZodString>;
-        startTime: z.ZodOptional<z.ZodNumber>;
-        phases: z.ZodArray<z.ZodString>;
-        summary: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>;
-    problems: z.ZodArray<z.ZodObject<{
-        path: z.ZodString;
-        reason: z.ZodString;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-type AgentKind = z.output<typeof AgentKindSchema>;
-type TaskItem = z.output<typeof TaskItemSchema>;
-type WorkflowRun = z.output<typeof WorkflowRunSchema>;
-type SessionAgentTree = z.output<typeof SessionAgentTreeSchema>;
+/** The real filesystem, for the commands and the door's sessions procedures. */
+declare const realSessionFs: SessionCommandFs;
 
 /**
- * The agent tree reader: pure over an injected filesystem, so the CLI, the library surface and tests read the same way, and nothing here writes. The layout it reads is documented in `docs/agent-transcripts.md`.
+ * Finding and reading sessions across identities, pure over an injected filesystem: the logic the \`session\` commands and the door's \`sessions\` procedures share, free of command-line dependencies so the library surface can export it.
  */
-/** The filesystem reads the agent tree reader needs. */
-type AgentReadFs = Pick<FarmFs, "readFileUtf8" | "readdir" | "lstat">;
-/** One session found under a project: its directory name split into the session id and whether the entry is an archived copy (superseded by a resume, or orphaned) rather than the live session. */
-interface SessionRef {
-    readonly project: string;
-    readonly sessionId: string;
-    readonly superseded: boolean;
-    /** The directory (and transcript stem) name exactly as on disk, which differs from `sessionId` for an archived copy. */
-    readonly entry: string;
+/** A session as `session list` reports it. `identities` names every identity whose configuration exposes it: history is shared between identities by default, so one session is usually visible to several. */
+interface IdentitySession extends SessionSummary {
+    readonly identities: readonly string[];
 }
-/** Lists every session under every project: a transcript file, or a directory holding agents or workflow runs. Sorted by project then entry so output is stable. */
-declare function listSessions(fs: AgentReadFs, configDir: string): readonly SessionRef[];
-/** What a caller knows about a session that the disk does not record. */
-interface ReadSessionOptions {
-    /** Task lists the session was pointed at with `CLAUDE_CODE_TASK_LIST_ID`, which is a property of the process environment and is written nowhere in the session's files. Each is read from `tasks/<id>` and its tasks carry the id as `taskList`. */
-    readonly taskListIds?: readonly string[];
+/** Raised when a session id names no session, or more than one. */
+declare class SessionLookupError extends CliError {
+    constructor(message: string);
+}
+/** Filters for `session list`. */
+interface SessionListFilters {
+    /** Only this identity's sessions. */
+    readonly identity?: string;
+    /** Include sessions that spawned no agent and ran no workflow. */
+    readonly all?: boolean;
 }
 /**
- * Reads one session's agents, task list and workflow runs. Every file that cannot be used is listed in `problems` with the reason; a missing directory is simply an empty section, because a session that never spawned an agent has none.
+ * Collects `session list`, read-only: every session of the given identities with its agent and workflow-run counts, newest transcript first. Sessions with nothing to inspect are left out unless `all` is set, because most sessions never spawn an agent and listing them would bury the ones that did.
  */
-declare function readSessionAgentTree(fs: AgentReadFs, configDir: string, ref: SessionRef, options?: Readonly<ReadSessionOptions>): SessionAgentTree;
+declare function collectSessionList(fs: SessionCommandFs, identitiesDir: string, identities: readonly string[], filters: Readonly<SessionListFilters>): readonly IdentitySession[];
+/** A resolved session: where it is read from and which identities expose it. */
+interface LocatedSession {
+    readonly identities: readonly string[];
+    readonly configDir: string;
+    readonly ref: SessionRef;
+}
+/**
+ * Resolves a session id, or an unambiguous prefix of one, across the given identities. Fails with every candidate named when the prefix matches several, so the caller can say which it meant.
+ */
+declare function locateSession(fs: SessionCommandFs, identitiesDir: string, identities: readonly string[], query: string, onlyIdentity?: string): LocatedSession;
+/** One session resolved and read: the tree and every identity that exposes it. */
+interface SessionView {
+    readonly identities: readonly string[];
+    readonly tree: SessionAgentTree;
+}
+/** Resolves a session id or prefix and reads its tree: what `session show` and the door's `sessions.show` both answer. */
+declare function showSession(fs: SessionCommandFs, identitiesDir: string, identities: readonly string[], query: string, onlyIdentity?: string): SessionView;
 
 /** One quota window's pool-selection facts, in the units a policy reads: fractions of the window, and hours until it resets. */
 interface PoolWindowFacts {
@@ -12959,5 +13395,5 @@ declare const OWN_CLI_FILE_NAME = "cli.cjs";
  */
 declare function agentShimCliPath(distDir?: string | undefined): string;
 
-export { AMBIENT_CREDENTIAL_VARS, AgentKindSchema, AgentMetaSchema, AgentNodeSchema, CHECK_CREDENTIAL_APPLIES, CODEX_APP_SERVER_GENERATED_AGAINST, CODEX_APP_SERVER_TIMEOUT_MS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, CodexAccountReadSchema, CodexAppServerProtocolError, CodexAppServerRequestError, CodexAppServerUnavailableError, CodexLogoutOutputSchema, CodexRateLimitsReadSchema, CodexSignInSchema, CodexStatusOutputSchema, ConfigIdentityAddOutputSchema, ConfigIdentityRemoveInputSchema, ConfigIdentityRemoveOutputSchema, ConfigIdentitySetInputSchema, ConfigIdentitySetOutputSchema, ConfigIdentityUseOutputSchema, ConfigNameInputSchema, ConfigPoolAddInputSchema, ConfigPoolAddOutputSchema, ConfigPoolRemoveInputSchema, ConfigPoolRemoveOutputSchema, ConfigPoolSetInputSchema, ConfigPoolSetOutputSchema, ConfigPoolUseOutputSchema, ConfigProfileAddInputSchema, ConfigProfileAddOutputSchema, ConfigProfileRemoveInputSchema, ConfigProfileRemoveOutputSchema, ConfigProfileSchema, ConfigProfileSetInputSchema, ConfigProfileSetOutputSchema, ConfigProfileUseOutputSchema, ConfigProviderAddInputSchema, ConfigProviderAddOutputSchema, ConfigProviderRemoveInputSchema, ConfigProviderRemoveOutputSchema, ConfigProviderSetInputSchema, ConfigProviderSetOutputSchema, ConfigRuleAddInputSchema, ConfigRuleAddOutputSchema, ConfigRuleRemoveInputSchema, ConfigRuleRemoveOutputSchema, ConfigRuleSetInputSchema, ConfigRuleSetOutputSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, CredentialSummarySchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorRestartOutputSchema, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LaunchLifecycleEventSchema, LaunchRefusedError, LaunchResolveInputSchema, LaunchResolveOutputSchema, LegacyProviderFileError, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolGraphError, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, ResetRowSchema, ResetScheduleSchema, SessionAgentTreeSchema, TaskItemSchema, USAGE_EVENT_SOURCE, UpdateCheckOutputSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, WorkflowRunSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, collectResets, createCodexApiRouter, createConfigApiRouter, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchApiRouter, createLaunchEventPublisher, createLeafCache, createLifecycleApiRouter, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listSessions, listUsageSnapshots, matchBranch, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readCodexAccount, readCodexRateLimits, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readSessionAgentTree, readUsageSnapshot, realCodexAppServerPort, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveClaudeLaunch, resolveDecisions, resolveLaunch, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, watchedInstallEntry, writeDirectoryRules };
-export type { AddDirectoryRuleOptions, AddProviderInput, AgentKind, AgentNode, AgentReadFs, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, ClaudeLaunchResolution, CodexAccountRead, CodexApiClient, CodexApiDeps, CodexApiRouter, CodexAppServerConnection, CodexAppServerPort, CodexAppServerReadOptions, CodexRateLimitsRead, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigApiDeps, ConfigApiRouter, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, InjectedCredential, LaunchApiDeps, LaunchApiRouter, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchResolution, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, LifecycleApiClient, LifecycleApiDeps, LifecycleApiRouter, NestedContribution, OwnExecutableStat, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, ReadSessionOptions, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResetRow, ResetSchedule, ResolveClaudeLaunchOptions, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SessionAgentTree, SessionRef, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, TaskItem, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation, WorkflowRun };
+export { AMBIENT_CREDENTIAL_VARS, AgentKindSchema, AgentMetaSchema, AgentNodeSchema, AgentTreesListInputSchema, AgentTreesListOutputSchema, AgentTreesShowInputSchema, AgentTreesShowOutputSchema, CHECK_CREDENTIAL_APPLIES, CODEX_APP_SERVER_GENERATED_AGAINST, CODEX_APP_SERVER_TIMEOUT_MS, CONNECT_INTERCEPT_HOST, CONNECT_INTERCEPT_HOSTS, CONNECT_LIMITS, CONTROL_PATH_PREFIX, CategoryClassificationOverlaySchema, CategoryClassificationSchema, CategoryMapSchema, CheckReportJsonSchema, CheckRunInputSchema, CliError, CodexAccountReadSchema, CodexAppServerProtocolError, CodexAppServerRequestError, CodexAppServerUnavailableError, CodexLogoutOutputSchema, CodexRateLimitsReadSchema, CodexSignInSchema, CodexStatusOutputSchema, ConfigIdentityAddOutputSchema, ConfigIdentityRemoveInputSchema, ConfigIdentityRemoveOutputSchema, ConfigIdentitySetInputSchema, ConfigIdentitySetOutputSchema, ConfigIdentityUseOutputSchema, ConfigNameInputSchema, ConfigPoolAddInputSchema, ConfigPoolAddOutputSchema, ConfigPoolRemoveInputSchema, ConfigPoolRemoveOutputSchema, ConfigPoolSetInputSchema, ConfigPoolSetOutputSchema, ConfigPoolUseOutputSchema, ConfigProfileAddInputSchema, ConfigProfileAddOutputSchema, ConfigProfileRemoveInputSchema, ConfigProfileRemoveOutputSchema, ConfigProfileSchema, ConfigProfileSetInputSchema, ConfigProfileSetOutputSchema, ConfigProfileUseOutputSchema, ConfigProviderAddInputSchema, ConfigProviderAddOutputSchema, ConfigProviderRemoveInputSchema, ConfigProviderRemoveOutputSchema, ConfigProviderSetInputSchema, ConfigProviderSetOutputSchema, ConfigRuleAddInputSchema, ConfigRuleAddOutputSchema, ConfigRuleRemoveInputSchema, ConfigRuleRemoveOutputSchema, ConfigRuleSetInputSchema, ConfigRuleSetOutputSchema, CredentialCacheSchema, CredentialSchema, CredentialSourceSchema, CredentialSummarySchema, DOOR_EVENT_BUFFER_EVENTS, DOOR_EVENT_SOURCE_RC, DOOR_HEALTH_EVENT_SOURCE, DirectoryRuleAlreadyExistsError, DirectoryRuleMissingTargetError, DirectoryRuleNotFoundError, DirectoryRuleSchema, DirectoryRulesSchema, DoctorFindingSchema, DoctorRunOutputSchema, DoorEventSchema, DoorEventSourceQuerySchema, DoorHealthEventSchema, EXIT_FAILURE, EXIT_USAGE, EffectiveWindowSchema, EntryValueSchema, FARM_MANIFEST_FILENAME, FrontDoorControlMaterialError, FrontDoorNotServingError, FrontDoorRestartOutputSchema, FrontDoorSessionStatusSchema, FrontDoorSessionsOutputSchema, FrontDoorStartError, FrontDoorStateSchema, FrontDoorStatusOutputSchema, GlobalConfigSchema, HeadroomSocketTargetSchema, HeadroomStartError, IdentityAlreadyExistsError, IdentityNotFoundError, IdentitySchema, InvalidCategoryNameError, InvalidIdentityNameError, InvalidProviderNameError, LAUNCH_EVENT_SOURCE, LIVE_TASK_CAP, LaunchLifecycleEventSchema, LaunchRefusedError, LaunchResolveInputSchema, LaunchResolveOutputSchema, LegacyProviderFileError, LiveTaskSchema, MergedAgentNodeSchema, MergedAgentTreeSchema, OWN_CLI_FILE_NAME, PROMPT_CACHE_TTL_MS, PlanClassSchema, PoolGraphError, PoolNameSchema, PoolNotFoundError, PoolPickReportSchema, PoolSchema, PortableConfigSchema, ProfileAlreadyExistsError, ProfileNotFoundError, ProviderAlreadyExistsError, ProviderKindMismatchError, ProviderNotFoundError, ProviderSchema, QUOTA_EXPIRING_EVENT_SOURCE, QuotaExpiringEventSchema, RC_CONTEXT_USAGE_DETAILS, RC_IDLE_EXPIRY_MS, RC_ORPC_PATH_PREFIX, RC_PENDING_DEADLINE_MS, RC_PERMISSION_MODES, RC_READ_FILE_ENCODINGS, RC_REQUEST_PARSE_CAP_BYTES, RC_SELF_HOST_ENV, RC_SELF_HOST_KEEPALIVE_MS, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE, RC_SELF_HOST_RETENTION_MS, RC_SELF_HOST_SCOPE_LIST, RC_SELF_HOST_WORKER_JWT_TTL_SECONDS, RC_SESSIONS_PATH_PREFIX, RC_STREAM_BACKOFF_MS, RC_WEB_FETCH_ALLOW_PRIVATE_ENV, RC_WEB_FETCH_DEADLINE_MS, RC_WEB_FETCH_MAX_BYTES, RC_WEB_FETCH_MAX_REDIRECTS, ROUTED_PATH_PREFIX, RcLiveRateLimitSchema, RcPermissionModeSchema, RcRateLimitInfoSchema, RcRateLimitWindowSchema, RcStreamEnvelopeSchema, RcStreamEventSchema, ResetRowSchema, ResetScheduleSchema, SessionAgentTreeSchema, SessionLookupError, SessionSummarySchema, TaskItemSchema, USAGE_EVENT_SOURCE, UpdateCheckOutputSchema, UsageError, UsageListOutputSchema, UsageLiveOutputSchema, UsageSnapshotError, UsageSnapshotSchema, UsageWindowsInputSchema, UsageWindowsOutputSchema, WhenSchema, WorkflowRunSchema, addDirectoryRule, addIdentity, addPool, addProvider, agentShimCliPath, answerRcControlRequest, applyAgentTaskEvent, authenticateRcSessionMcpServer, buildEntryFacts, buildLayoutPaths, buildRcControlRequestPayload, buildRcControlResponsePayload, buildRcEndSessionPayload, buildRcEventWriteBody, buildRcFileSuggestionsPayload, buildRcGetContextUsagePayload, buildRcGetUsagePayload, buildRcInterruptPayload, buildRcKeepAlivePayload, buildRcMarkReadBody, buildRcMcpAuthenticatePayload, buildRcMcpOAuthCallbackUrlPayload, buildRcMcpReconnectPayload, buildRcMcpStatusPayload, buildRcReadFilePayload, buildRcSetModelPayload, buildRcSetPermissionModePayload, buildRcUserMessagePayload, carryOver, checkReportHasWarnings, checkReportToJson, collectCheckReport, collectDoctorReport, collectFrontDoorStatus, collectPoolPick, collectResets, collectSessionList, createAgentTreesApiRouter, createCodexApiRouter, createConfigApiRouter, createControlApiRouter, createDoorApiNodeHandler, createDoorApiRouter, createDoorEventHub, createDoorHealthPublisher, createEventsApiRouter, createLaunchApiRouter, createLaunchEventPublisher, createLeafCache, createLifecycleApiRouter, createProfile, createQuotaExpiringPublisher, createRcApiNodeHandler, createRcApiRouter, createRcControlHandler, createRcCredentialStore, createRcEventFanout, createRcLiveUsage, createRcSelfHostSurface, createRcSessionTracker, createRcStreamHub, createSseParser, describeProviderEndpoint, detectAmbientCredential, doorApiAuth, doorApiNodeHandlerOf, effectiveWindow, endRcSession, ensureCa, ensureFrontDoor, ensureHeadroom, evaluateAmbientCredentialGuard, evaluateWhen, fetchThroughWebProxy, formatAmbientCredentialGuardMessage, formatCheckReport, formatDoctorReport, formatFrontDoorStatus, forwardableHeaders, frontDoorApiClient, frontDoorApiFromState, frontDoorApiLink, frontDoorRcApiClient, frontDoorRcControl, generateCa, getRcSessionContextUsage, getRcSessionMcpStatus, getRcSessionUsage, headroomSocketTarget, identityExists, injectRcUserMessage, interruptRcSession, isIdentityDirectoryName, isInterceptedHost, isPrivateAddress, isRcContextUsageDetail, isRcPermissionMode, isRcReadFileEncoding, lateRcEventDial, lateRcStreamDial, listDirectoryRules, listIdentities, listProfiles, listProviders, listSessions, listUsageSnapshots, locateSession, matchBranch, mergeLiveTasks, mintLeaf, mintRcSelfHostCredential, observingRoutedRoute, parseConnectTarget, parseRcStreamEnvelope, planOf, poolIdentities, poolSelectedByLaunch, prepareClaudeLaunch, prepareLaunch, profileExists, providerExists, rankPool, rcEventWriteResultFromAnswer, rcFanoutOnDoorHub, rcObserverAsPassthrough, rcRateLimitInfoOf, rcSelfHostFromEnv, rcWebFetchAllowsPrivateFromEnv, readActiveIdentity, readCodexAccount, readCodexRateLimits, readDirectoryRules, readFarmManifest, readFrontDoorControlMaterial, readGlobalConfig, readIdentity, readPools, readProfile, readProvider, readRcSelfHostRecord, readRcSessionFile, readSessionAgentTree, readUsageSnapshot, realCodexAppServerPort, realConnectCertStore, realConnectEffects, realRcControlTransport, realRcEventDial, realRcStreamDial, realRcWebFetch, realSessionFs, reconnectRcSessionMcpServer, recoverFarm, recoveryDiagnostics, refreshLaunchPoolUsage, refreshPoolUsage, refreshStalePoolMembers, removeDirectoryRule, removeIdentity, removePool, removeProfile, removeProvider, requirePool, resolveAgentShimHome, resolveClaudeHome, resolveClaudeLaunch, resolveDecisions, resolveLaunch, resolveLaunchSelection, resolveLayoutPaths, resolveSupervisorConfig, resyncFarm, runCheck, runClaudeLaunch, runDoctor, runFrontDoorSupervisor, runLaunchPlan, runLauncher, runSupervisor, sendRcKeepAlive, servedByPipeline, setAllowAmbientCredential, setDefaultConfigProfile, setGlobalDefaultProfile, setIdentityCredential, setPool, setProfileCategories, setProfileEntries, setProfileLaunchFlags, setProfileMetadata, setRcSessionModel, setRcSessionPermissionMode, showSession, snapshotPath, spawnClaude, startConnectServer, submitRcSessionMcpOAuthCallbackUrl, suggestRcSessionFiles, summariseSession, teleportRcSession, topLevelNames, updateDirectoryRule, updateProvider, useIdentity, watchedInstallEntry, writeDirectoryRules };
+export type { AddDirectoryRuleOptions, AddProviderInput, AgentKind, AgentNode, AgentReadFs, AgentTreesApiDeps, AgentTreesApiRouter, AmbientCredentialDetection, AmbientCredentialGuardResult, AmbientCredentialVar, AnthropicUsageRefresher, BuildEntryFactsParams, CaMaterial, Candidate, CarryOverParams, CarryOverResult, CategoryMap, CheckReport, CheckReportJson, ClaudeLaunchResolution, CodexAccountRead, CodexApiClient, CodexApiDeps, CodexApiRouter, CodexAppServerConnection, CodexAppServerPort, CodexAppServerReadOptions, CodexRateLimitsRead, CollectCheckReportParams, CollectDoctorReportParams, CompiledRule, ConditionContext, ConfigApiDeps, ConfigApiRouter, ConfigProfile, ConnectCertStore, ConnectEffects, ConnectLimits, ConnectLocalSurface, ConnectServerConfig, ConnectServerHandle, ConnectTarget, ControlApiClient, ControlApiDeps, ControlApiRouter, Credential, CredentialSource, Decision, Diagnostic, DirectoryRule, DirectoryRules, DoctorReport, DoorApiClient, DoorApiContext, DoorApiDeps, DoorApiRouter, DoorEvent, DoorEventHub, DoorEventPublisher, DoorEventStream, DoorEventsApiDeps, DoorHealthEvent, DoorHealthPublisher, EffectiveWindow, EliminatedRule, EnsureFrontDoorPorts, EnsureHeadroomPorts, EntryFact, EntryFacts, EntryValue, EvaluateAmbientCredentialGuardParams, FlattenedCascade, FrontDoorControlMaterial, FrontDoorRcControl, FrontDoorSessionStatus, FrontDoorStatus, FrontDoorSupervisorPorts, GlobalConfig, HeadroomSupervisorConfig, Identity, IdentityCredentialChange, IdentityListEntry, IdentityListing, IdentitySession, InjectedCredential, LaunchApiDeps, LaunchApiRouter, LaunchDecision, LaunchEventPublisher, LaunchLifecycleEvent, LaunchPlan, LaunchPoolDecision, LaunchResolution, LaunchSelection, Layer, LayerId, LayoutPaths, LeafCert, LifecycleApiClient, LifecycleApiDeps, LifecycleApiRouter, LiveTask, LiveTaskBook, LocatedSession, MergedAgentNode, MergedAgentTree, NestedContribution, OwnExecutableStat, PlanClass, Pool, PoolMember, PoolPickReport, PoolRanking, PortableConfig, PrepareClaudeLaunchOptions, PrepareLaunchParams, ProfileListEntry, Provider, ProviderListEntry, QuotaExpiringEvent, QuotaExpiringPublisher, RankPoolInput, RcAnswerDecision, RcAnswerDeps, RcApiClient, RcApiDeps, RcApiRouter, RcContextUsageDetail, RcControlAnswer, RcControlHandlerDeps, RcControlRequestDeps, RcControlTransport, RcCredentialStore, RcDialAnswer, RcDialTarget, RcEventDial, RcEventFanout, RcEventWriteResult, RcExchangeObserver, RcInjectDeps, RcLiveRateLimit, RcLiveUsage, RcLiveUsageDeps, RcObservedCredential, RcObservedRequest, RcPendingRequestSummary, RcPermissionMode, RcPresenceAnswer, RcRateLimitInfo, RcRateLimitWindow, RcReadFileEncoding, RcReadFileOptions, RcSelfHostCredentialRecord, RcSelfHostDeps, RcSelfHostMintResult, RcSelfHostSurface, RcSessionStatus, RcSessionSummary, RcSessionTracker, RcSessionTrackerDeps, RcStreamAnswer, RcStreamDial, RcStreamEnvelope, RcStreamEvent, RcStreamHub, RcStreamHubDeps, RcWebFetchDeps, RcWebFetchHop, RcWebFetchOutcome, RcWebFetcher, RcWorkerFact, RcWriteHeaders, ReadSessionOptions, RecoverFarmParams, RecoveryResult, RefreshLaunchPoolUsageOptions, RefreshPoolUsageParams, RefreshStalePoolMembersParams, ResetRow, ResetSchedule, ResolveClaudeLaunchOptions, ResolveDecisionsInput, ResolveLaunchSelectionParams, ResolvedState, ResyncFarmParams, ResyncFarmResult, RunCheckParams, RunClaudeLaunchOptions, RunDoctorParams, RunFrontDoorSupervisorOptions, RunLauncherParams, RunSupervisorOptions, SessionAgentTree, SessionCommandFs, SessionListFilters, SessionRef, SessionSummary, SessionView, SpawnClaudeParams, SseParsedEvent, StickyPick, SupervisorPorts, TaskItem, UnreadableIdentityListEntry, UpdateDirectoryRuleOptions, UpdateProviderInput, UsageChangeEvent, UsageReadFs, UsageSnapshot, WhenCondition, WhenEvaluation, WorkflowRun };