claude-use 9.18.0 → 9.19.1

package/dist/cli.cjs

@@ -30535,7 +30535,7 @@ function compile2(pattern, category, source, ordinal) {
     matches: isExact ? (name) => name === pattern : (name) => matcher(name)
   };
 }
-function compileClassificationPatterns(defaults, overlay) {
+function compileClassificationPatterns(defaults, overlay2) {
   const compiled = [];
   let ordinal = 0;
   for (const category of CATEGORY_NAMES) {
@@ -30544,9 +30544,9 @@ function compileClassificationPatterns(defaults, overlay) {
       ordinal += 1;
     }
   }
-  if (overlay !== void 0) {
+  if (overlay2 !== void 0) {
     for (const category of CATEGORY_NAMES) {
-      for (const pattern of overlay[category] ?? []) {
+      for (const pattern of overlay2[category] ?? []) {
         compiled.push(compile2(pattern, category, "local", ordinal));
         ordinal += 1;
       }
@@ -30567,10 +30567,10 @@ function compareClassificationPatterns(a10, b) {
   return a10.ordinal - b.ordinal;
 }
 function loadClassification(paths) {
-  const overlay = readJson(paths.categoriesLocalFile, CategoryClassificationOverlaySchema);
+  const overlay2 = readJson(paths.categoriesLocalFile, CategoryClassificationOverlaySchema);
   return {
     defaults: CategoryClassificationSchema.parse(categories_default_default),
-    ...overlay === void 0 ? {} : { overlay }
+    ...overlay2 === void 0 ? {} : { overlay: overlay2 }
   };
 }
 function classifyEntries(names, options) {
@@ -33317,7 +33317,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "9.18.0",
+      version: "9.19.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -62756,10 +62756,10 @@ function resolveLaunch(params) {
     environment
   };
 }
-function runLaunchPlan(plan, spawn4) {
+function runLaunchPlan(plan, spawn5) {
   try {
     plan.markChildStarted();
-    const result = spawn4.spawnSync(plan.bin, plan.args, { stdio: "inherit", env: plan.env });
+    const result = spawn5.spawnSync(plan.bin, plan.args, { stdio: "inherit", env: plan.env });
     if (result.error !== void 0) {
       throw result.error;
     }
@@ -111655,10 +111655,11 @@ function registerCodexCommand(program2, deps) {
 
 // src/frontdoor/commands.ts
 var import_node_crypto20 = require("node:crypto");
-var import_node_path49 = __toESM(require("node:path"), 1);
+var import_node_path48 = __toESM(require("node:path"), 1);
 var import_node_fs17 = __toESM(require("node:fs"), 1);
 init_commandDeps();
 init_schema();
+init_conditions();
 
 // src/agents/realFs.ts
 var import_node_fs12 = __toESM(require("node:fs"), 1);
@@ -111703,25 +111704,23 @@ var AgentMetaSchema = external_exports.looseObject({
   stoppedByUser: external_exports.boolean().optional()
 });
 var AgentKindSchema = external_exports.enum(["subagent", "fork", "workflow-agent", "teammate"]);
-var AgentNodeSchema = external_exports.lazy(
-  () => external_exports.strictObject({
-    id: external_exports.string(),
-    kind: AgentKindSchema,
-    agentType: external_exports.string(),
-    description: external_exports.string().optional(),
-    name: external_exports.string().optional(),
-    toolUseId: external_exports.string().optional(),
-    spawnDepth: external_exports.number().int().nonnegative().optional(),
-    model: external_exports.string().optional(),
-    background: external_exports.boolean().optional(),
-    workflowRunId: external_exports.string().optional(),
-    workflowPhase: external_exports.string().optional(),
-    teamName: external_exports.string().optional(),
-    stoppedByUser: external_exports.boolean().optional(),
-    transcript: external_exports.string(),
-    children: external_exports.array(AgentNodeSchema)
-  })
-);
+var AgentNodeFields = {
+  id: external_exports.string(),
+  kind: AgentKindSchema,
+  agentType: external_exports.string(),
+  description: external_exports.string().optional(),
+  name: external_exports.string().optional(),
+  toolUseId: external_exports.string().optional(),
+  spawnDepth: external_exports.number().int().nonnegative().optional(),
+  model: external_exports.string().optional(),
+  background: external_exports.boolean().optional(),
+  workflowRunId: external_exports.string().optional(),
+  workflowPhase: external_exports.string().optional(),
+  teamName: external_exports.string().optional(),
+  stoppedByUser: external_exports.boolean().optional(),
+  transcript: external_exports.string()
+};
+var AgentNodeSchema = external_exports.lazy(() => external_exports.strictObject({ ...AgentNodeFields, children: external_exports.array(AgentNodeSchema) }));
 var TaskItemSchema = external_exports.strictObject({
   id: external_exports.string(),
   subject: external_exports.string(),
@@ -112415,9 +112414,38 @@ init_anthropicUsageRefresh();
 init_poolPick();
 init_realAnthropicUsageProbe();
 
-// src/usage/realJobRunner.ts
-var import_node_path40 = __toESM(require("node:path"), 1);
-init_conditions();
+// src/usage/childRun.ts
+var import_node_child_process5 = require("node:child_process");
+init_realPorts();
+var CHILD_GRACE_MS = 3e4;
+var STDERR_TAIL_CHARS = 2e3;
+async function runChild(options) {
+  const invocation = (options.invocation ?? selfInvocation)(options.args);
+  await new Promise((resolve2, reject) => {
+    const child = (0, import_node_child_process5.spawn)(invocation.command, [...invocation.args], { stdio: ["ignore", "ignore", "pipe"], env: { ...process.env, AGENT_SHIM_HOME: options.paths.root } });
+    let stderr = "";
+    child.stderr.on("data", (chunk) => {
+      stderr = `${stderr}${chunk.toString()}`.slice(-STDERR_TAIL_CHARS);
+    });
+    const killer = setTimeout(() => {
+      child.kill("SIGKILL");
+    }, options.timeoutMs + CHILD_GRACE_MS);
+    child.on("error", (error63) => {
+      clearTimeout(killer);
+      reject(error63);
+    });
+    child.on("close", (code, signal) => {
+      clearTimeout(killer);
+      if (code === 0) {
+        resolve2();
+        return;
+      }
+      reject(new Error(stderr.trim() === "" ? `the child ended with ${signal === null ? `exit code ${String(code)}` : `signal ${signal}`}` : stderr.trim()));
+    });
+  });
+}
+
+// src/usage/realWindowOpener.ts
 init_identityClaude();
 
 // src/usage/sdkResult.ts
@@ -112431,61 +112459,7 @@ function successfulResult(message) {
   return message.result;
 }
 
-// src/usage/realJobRunner.ts
-var JOB_LAUNCH_FLAGS = ["--no-headroom", "--no-remote-control", "--track-usage"];
-var JOB_ISOLATION_OPTIONS = { settingSources: ["user"], mcpServers: {}, strictMcpConfig: true };
-function logEntry(name, identity, endedAt, outcome) {
-  return `${endedAt.toISOString()} job ${name} as ${identity}
-${outcome.trimEnd()}
-
-`;
-}
-function createRealJobRunner(params) {
-  return async (name, identity, job) => {
-    const logFile = import_node_path40.default.join(params.paths.jobLogsDir, `${name}.log`);
-    const append = (outcome) => {
-      params.fs.mkdirPrivate(params.paths.jobLogsDir);
-      params.fs.appendFilePrivate(logFile, logEntry(name, identity, params.now(), outcome));
-    };
-    try {
-      const result = await withIdentityClaude({ paths: params.paths, spawnDaemon: params.spawnDaemon, cwd: job.cwd, timeoutMs: parseDuration(job.timeout) }, identity, JOB_LAUNCH_FLAGS, async ({ bin, env, cwd, abort }) => {
-        const { query } = await Promise.resolve().then(() => (init_sdk(), sdk_exports));
-        const session = query({
-          prompt: job.prompt,
-          options: {
-            pathToClaudeCodeExecutable: bin,
-            env,
-            cwd,
-            abortController: abort,
-            settingSources: [...JOB_ISOLATION_OPTIONS.settingSources],
-            mcpServers: JOB_ISOLATION_OPTIONS.mcpServers,
-            strictMcpConfig: JOB_ISOLATION_OPTIONS.strictMcpConfig,
-            permissionMode: "dontAsk",
-            ...job.model === void 0 ? {} : { model: job.model },
-            ...job.allowedTools === void 0 ? {} : { allowedTools: [...job.allowedTools] }
-          }
-        });
-        try {
-          for await (const message of session) {
-            if (message.type === "result") {
-              return successfulResult(message);
-            }
-          }
-          throw new Error("the run ended without a result");
-        } finally {
-          session.close();
-        }
-      });
-      append(result);
-    } catch (error63) {
-      append(`FAILED: ${error63 instanceof Error ? error63.message : String(error63)}`);
-      throw error63;
-    }
-  };
-}
-
 // src/usage/realWindowOpener.ts
-init_identityClaude();
 var OPENER_LAUNCH_FLAGS = ["--no-headroom", "--no-remote-control", "--track-usage"];
 var WINDOW_OPENING_MODEL = "haiku";
 var WINDOW_OPENING_PROMPT = "ok";
@@ -112532,7 +112506,7 @@ function createRealWindowOpener(params) {
 init_conditions();
 
 // src/usage/handledStamps.ts
-var import_node_path41 = __toESM(require("node:path"), 1);
+var import_node_path40 = __toESM(require("node:path"), 1);
 init_zod();
 var STAMPS_SCHEMA_VERSION = 1;
 var StampsFileSchema = external_exports.strictObject({
@@ -112555,7 +112529,7 @@ function readHandled(fs22, file2) {
 }
 function writeHandled(fs22, file2, handled) {
   const next = { schemaVersion: STAMPS_SCHEMA_VERSION, handled: Object.fromEntries(Object.entries(handled).map(([key, at2]) => [key, new Date(at2).toISOString()])) };
-  fs22.mkdirPrivate(import_node_path41.default.dirname(file2));
+  fs22.mkdirPrivate(import_node_path40.default.dirname(file2));
   fs22.writeFilePrivate(file2, `${JSON.stringify(next, null, 2)}
 `);
 }
@@ -112846,7 +112820,7 @@ init_capability();
 
 // src/frontdoor/capture.ts
 var fs15 = __toESM(require("node:fs"), 1);
-var path41 = __toESM(require("node:path"), 1);
+var path40 = __toESM(require("node:path"), 1);
 var SECRET_HEADER_NAME = /authorization|cookie|token|secret|credential|api[-_]key/i;
 var SECRET_JSON_KEY = /token|secret|password|credential|authorization|api[-_]key/i;
 var SECRET_BODY_PATTERNS = [
@@ -112890,10 +112864,10 @@ function redactBody(chunk) {
 }
 var CAPTURE_ENV = "AGENT_SHIM_FRONTDOOR_CAPTURE";
 function captureFromEnv(env, logsDir) {
-  return env[CAPTURE_ENV] === "1" ? createFileCapture(path41.join(logsDir, "frontdoor-capture.jsonl")) : void 0;
+  return env[CAPTURE_ENV] === "1" ? createFileCapture(path40.join(logsDir, "frontdoor-capture.jsonl")) : void 0;
 }
 function createFileCapture(file2, now = () => /* @__PURE__ */ new Date()) {
-  fs15.mkdirSync(path41.dirname(file2), { recursive: true });
+  fs15.mkdirSync(path40.dirname(file2), { recursive: true });
   let nextId = 0;
   const append = (record2) => {
     fs15.appendFileSync(file2, `${JSON.stringify({ ts: now().toISOString(), ...record2 })}
@@ -113312,14 +113286,14 @@ init_capability();
 init_route();
 
 // src/frontdoor/supervisor.ts
-var import_node_path42 = __toESM(require("node:path"), 1);
+var import_node_path41 = __toESM(require("node:path"), 1);
 init_state2();
 function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
-  const parsed = import_node_path42.default.parse(resolvedOwnExecutablePath);
+  const parsed = import_node_path41.default.parse(resolvedOwnExecutablePath);
   if (parsed.name === "agent-shim") {
     return resolvedOwnExecutablePath;
   }
-  const sibling = import_node_path42.default.join(parsed.dir, `agent-shim${parsed.ext}`);
+  const sibling = import_node_path41.default.join(parsed.dir, `agent-shim${parsed.ext}`);
   return siblingExists(sibling) ? sibling : resolvedOwnExecutablePath;
 }
 var FRONTDOOR_SUPERVISOR_STILL_RUNNING = -1;
@@ -113861,6 +113835,171 @@ var https3 = __toESM(require("node:https"), 1);
 var net2 = __toESM(require("node:net"), 1);
 var tls = __toESM(require("node:tls"), 1);
 
+// src/agents/liveTasks.ts
+init_zod();
+var LIVE_TASK_CAP = 512;
+var RUNNING_STATUS = "running";
+var LiveTaskUsageSchema = external_exports.strictObject({
+  totalTokens: external_exports.number().optional(),
+  toolUses: external_exports.number().optional(),
+  durationMs: external_exports.number().optional()
+});
+var LiveTaskSchema = external_exports.strictObject({
+  /** The `task_id`: for an unnamed subagent the stem of its `agent-<id>` files on disk. */
+  taskId: external_exports.string(),
+  /** The `cse_` session whose stream carried the task. */
+  sessionId: external_exports.string(),
+  runId: external_exports.string().optional(),
+  /** The `tool_use` block in the spawning transcript, which is the meta file's `toolUseId`. */
+  toolUseId: external_exports.string().optional(),
+  /** `local_agent` for a subagent, `local_bash` for a backgrounded command; open because other kinds may exist. */
+  taskType: external_exports.string().optional(),
+  description: external_exports.string().optional(),
+  subagentType: external_exports.string().optional(),
+  spawnDepth: external_exports.number().int().nonnegative().optional(),
+  parentTaskId: external_exports.string().optional(),
+  backgrounded: external_exports.boolean().optional(),
+  status: external_exports.string(),
+  /** `<tmpdir>/<project-slug>/<local session id>/tasks/<task_id>.output`, which embeds the local session id. */
+  outputFile: external_exports.string().optional(),
+  summary: external_exports.string().optional(),
+  lastToolName: external_exports.string().optional(),
+  usage: LiveTaskUsageSchema.optional(),
+  /** When the door last observed an event for this task, in epoch milliseconds from its injected clock. */
+  observedAt: external_exports.number()
+});
+var SYSTEM_SUBTYPES = ["task_started", "task_progress", "task_updated", "task_notification", "background_tasks_changed"];
+function isRecord3(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function stringField(record2, field) {
+  const value2 = record2[field];
+  return typeof value2 === "string" && value2 !== "" ? value2 : void 0;
+}
+function numberField(record2, field) {
+  const value2 = record2[field];
+  return typeof value2 === "number" && Number.isFinite(value2) ? value2 : void 0;
+}
+function booleanField(record2, field) {
+  const value2 = record2[field];
+  return typeof value2 === "boolean" ? value2 : void 0;
+}
+function usageOf(record2) {
+  const raw = record2.usage;
+  if (!isRecord3(raw)) {
+    return void 0;
+  }
+  const totalTokens = numberField(raw, "total_tokens");
+  const toolUses = numberField(raw, "tool_uses");
+  const durationMs = numberField(raw, "duration_ms");
+  if (totalTokens === void 0 && toolUses === void 0 && durationMs === void 0) {
+    return void 0;
+  }
+  return { ...totalTokens === void 0 ? {} : { totalTokens }, ...toolUses === void 0 ? {} : { toolUses }, ...durationMs === void 0 ? {} : { durationMs } };
+}
+function overlay(base, fields) {
+  const defined = Object.fromEntries(Object.entries(fields).filter(([, value2]) => value2 !== void 0));
+  return LiveTaskSchema.parse({ ...base, ...defined });
+}
+function isFinished(task) {
+  return task.status !== RUNNING_STATUS;
+}
+function bounded(book) {
+  if (book.size <= LIVE_TASK_CAP) {
+    return book;
+  }
+  const evictable = [...book.values()].filter(isFinished).sort((left, right) => left.observedAt - right.observedAt);
+  for (const task of evictable) {
+    if (book.size <= LIVE_TASK_CAP) {
+      break;
+    }
+    book.delete(task.taskId);
+  }
+  return book;
+}
+function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
+  if (!isRecord3(payload) || payload.type !== "system") {
+    return book;
+  }
+  const subtype = payload.subtype;
+  if (typeof subtype !== "string" || !SYSTEM_SUBTYPES.some((known) => known === subtype)) {
+    return book;
+  }
+  const next = new Map(book);
+  const upsert = (taskId2, fields) => {
+    const existing = next.get(taskId2);
+    const base = existing ?? { taskId: taskId2, sessionId, status: RUNNING_STATUS, observedAt: observedAt2 };
+    next.set(taskId2, overlay(base, { ...fields, observedAt: observedAt2 }));
+  };
+  if (subtype === "background_tasks_changed") {
+    const tasks = Array.isArray(payload.tasks) ? payload.tasks : [];
+    for (const raw of tasks) {
+      const taskId2 = isRecord3(raw) ? stringField(raw, "task_id") : void 0;
+      if (isRecord3(raw) && taskId2 !== void 0) {
+        upsert(taskId2, { runId: stringField(raw, "run_id"), taskType: stringField(raw, "task_type"), description: stringField(raw, "description") });
+      }
+    }
+    return bounded(next);
+  }
+  const taskId = stringField(payload, "task_id");
+  if (taskId === void 0) {
+    return book;
+  }
+  const common = { runId: stringField(payload, "run_id"), toolUseId: stringField(payload, "tool_use_id"), description: stringField(payload, "description") };
+  if (subtype === "task_started") {
+    upsert(taskId, {
+      ...common,
+      taskType: stringField(payload, "task_type"),
+      subagentType: stringField(payload, "subagent_type"),
+      spawnDepth: numberField(payload, "spawn_depth"),
+      parentTaskId: stringField(payload, "parent_task_id"),
+      backgrounded: booleanField(payload, "is_backgrounded")
+    });
+  } else if (subtype === "task_progress") {
+    upsert(taskId, { ...common, subagentType: stringField(payload, "subagent_type"), lastToolName: stringField(payload, "last_tool_name"), usage: usageOf(payload) });
+  } else if (subtype === "task_updated") {
+    const patch = isRecord3(payload.patch) ? payload.patch : {};
+    upsert(taskId, { runId: stringField(payload, "run_id"), status: stringField(patch, "status") });
+  } else {
+    upsert(taskId, { ...common, status: stringField(payload, "status"), outputFile: stringField(payload, "output_file"), summary: stringField(payload, "summary"), usage: usageOf(payload) });
+  }
+  return bounded(next);
+}
+var MergedProvenanceSchema = external_exports.enum(["disk", "both"]);
+var MergedAgentNodeSchema = external_exports.lazy(
+  () => external_exports.strictObject({
+    ...AgentNodeFields,
+    provenance: MergedProvenanceSchema,
+    live: LiveTaskSchema.optional(),
+    children: external_exports.array(MergedAgentNodeSchema)
+  })
+);
+var MergedAgentTreeSchema = external_exports.strictObject({
+  ...SessionAgentTreeSchema.shape,
+  agents: external_exports.array(MergedAgentNodeSchema),
+  /** The `cse_` sessions whose live tasks matched this session. Empty when the session is not live or the door has not observed it. */
+  remoteSessions: external_exports.array(external_exports.string()),
+  /** Live tasks of those sessions that match no disk agent (a backgrounded command, or an agent whose files have not appeared yet). */
+  liveOnly: external_exports.array(LiveTaskSchema)
+});
+function mergeLiveTasks(tree, live) {
+  const byTaskId = new Map(live.map((task) => [task.taskId, task]));
+  const byToolUseId = new Map(live.flatMap((task) => task.toolUseId === void 0 ? [] : [[task.toolUseId, task]]));
+  const claimed = /* @__PURE__ */ new Set();
+  const merge2 = (node2) => {
+    const task = byTaskId.get(node2.id) ?? (node2.toolUseId === void 0 ? void 0 : byToolUseId.get(node2.toolUseId));
+    if (task !== void 0) {
+      claimed.add(task.taskId);
+    }
+    return { ...node2, provenance: task === void 0 ? "disk" : "both", ...task === void 0 ? {} : { live: task }, children: node2.children.map(merge2) };
+  };
+  const agents = tree.agents.map(merge2);
+  const sessionMarker = `/${tree.sessionId}/`;
+  const liveOnly = live.filter((task) => !claimed.has(task.taskId) && task.outputFile?.includes(sessionMarker) === true);
+  const remoteSessions = [...new Set([...claimed, ...liveOnly.map((task) => task.taskId)].flatMap((taskId) => byTaskId.get(taskId)?.sessionId ?? []))].sort();
+  return { ...tree, agents, remoteSessions, liveOnly };
+}
+
 // src/frontdoor/rcSessions.ts
 var RC_SESSIONS_PATH_PREFIX = "/v1/code/sessions";
 var RC_SESSION_ID_PREFIX = "cse_";
@@ -113901,7 +114040,7 @@ function sessionCreateId(body) {
   const id2 = session.id;
   return typeof id2 === "string" && id2.startsWith(RC_SESSION_ID_PREFIX) ? id2 : void 0;
 }
-function isRecord3(value2) {
+function isRecord4(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject(body) {
@@ -113911,7 +114050,7 @@ function parseJsonObject(body) {
   } catch {
     return void 0;
   }
-  return isRecord3(parsed) ? parsed : void 0;
+  return isRecord4(parsed) ? parsed : void 0;
 }
 function nonEmptyString(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -113932,11 +114071,11 @@ function payloadEventsOf(body) {
   }
   const payloads = [];
   for (const event of events) {
-    if (!isRecord3(event)) {
+    if (!isRecord4(event)) {
       continue;
     }
     const payload = event.payload;
-    if (!isRecord3(payload)) {
+    if (!isRecord4(payload)) {
       continue;
     }
     payloads.push(payload);
@@ -113951,7 +114090,7 @@ function pendingOfControlRequestPayload(payload) {
   if (requestId === void 0) {
     return void 0;
   }
-  const request7 = isRecord3(payload.request) ? payload.request : void 0;
+  const request7 = isRecord4(payload.request) ? payload.request : void 0;
   const subtype = nonEmptyString(request7, "subtype");
   const type2 = subtype ?? "control_request";
   let summary = "";
@@ -113968,20 +114107,21 @@ function answeredRequestIdsOfControlResponsePayload(payload) {
   if (payload.type !== "control_response") {
     return [];
   }
-  const response = isRecord3(payload.response) ? payload.response : void 0;
+  const response = isRecord4(payload.response) ? payload.response : void 0;
   const id2 = nonEmptyString(response, "request_id") ?? nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
   return id2 === void 0 ? [] : [id2];
 }
 function parseRcRequestBody(kind, body) {
   if (kind === "heartbeat") {
-    return { controlRequests: [], answeredRequestIds: [], idleSeconds: finiteNumber(parseJsonObject(body), "idle_seconds"), workerStatus: void 0 };
+    return { controlRequests: [], answeredRequestIds: [], idleSeconds: finiteNumber(parseJsonObject(body), "idle_seconds"), workerStatus: void 0, payloads: [] };
   }
   if (kind === "worker-registration") {
-    return { controlRequests: [], answeredRequestIds: [], idleSeconds: void 0, workerStatus: nonEmptyString(parseJsonObject(body), "worker_status") };
+    return { controlRequests: [], answeredRequestIds: [], idleSeconds: void 0, workerStatus: nonEmptyString(parseJsonObject(body), "worker_status"), payloads: [] };
   }
   const controlRequests = [];
   const answeredRequestIds = [];
-  for (const payload of payloadEventsOf(body)) {
+  const payloads = payloadEventsOf(body);
+  for (const payload of payloads) {
     const pending = pendingOfControlRequestPayload(payload);
     if (pending !== void 0) {
       controlRequests.push({ requestId: pending.requestId, type: pending.type, summary: pending.summary });
@@ -113989,7 +114129,7 @@ function parseRcRequestBody(kind, body) {
     }
     answeredRequestIds.push(...answeredRequestIdsOfControlResponsePayload(payload));
   }
-  return { controlRequests, answeredRequestIds, idleSeconds: void 0, workerStatus: void 0 };
+  return { controlRequests, answeredRequestIds, idleSeconds: void 0, workerStatus: void 0, payloads };
 }
 function createRcSessionTracker(deps) {
   const entries = /* @__PURE__ */ new Map();
@@ -114015,7 +114155,7 @@ function createRcSessionTracker(deps) {
   const timer = setInterval(sweep, deps.idleMs);
   timer.unref();
   const birth = (id2, facts) => {
-    const record2 = { id: id2, createdAt: deps.now(), lastSeenAt: deps.now(), ...facts, pending: /* @__PURE__ */ new Map(), workerState: void 0, workerIdleSeconds: void 0, sequenceNum: void 0 };
+    const record2 = { id: id2, createdAt: deps.now(), lastSeenAt: deps.now(), ...facts, pending: /* @__PURE__ */ new Map(), workerState: void 0, workerIdleSeconds: void 0, sequenceNum: void 0, liveTasks: /* @__PURE__ */ new Map() };
     entries.set(id2, record2);
     return record2;
   };
@@ -114103,6 +114243,9 @@ function createRcSessionTracker(deps) {
       for (const requestId of factsOfBody.answeredRequestIds) {
         entryNow.pending.delete(requestId);
       }
+      for (const payload of factsOfBody.payloads) {
+        entryNow.liveTasks = applyAgentTaskEvent(entryNow.liveTasks, id2, payload, now);
+      }
       if (factsOfBody.idleSeconds !== void 0) {
         entryNow.workerIdleSeconds = { value: factsOfBody.idleSeconds, observedAt: now };
       }
@@ -114193,9 +114336,10 @@ function createRcSessionTracker(deps) {
         return;
       }
       entry.sequenceNum = entry.sequenceNum === void 0 || event.sequence_num > entry.sequenceNum ? event.sequence_num : entry.sequenceNum;
-      if (!isRecord3(event.payload)) {
+      if (!isRecord4(event.payload)) {
         return;
       }
+      entry.liveTasks = applyAgentTaskEvent(entry.liveTasks, sessionId, event.payload, deps.now());
       const pending = pendingOfControlRequestPayload(event.payload);
       if (pending !== void 0) {
         if (event.source === RC_STREAM_WORKER_SOURCE) {
@@ -114207,6 +114351,10 @@ function createRcSessionTracker(deps) {
         entry.pending.delete(requestId);
       }
     },
+    liveTasksOf: (sessionId) => {
+      sweep();
+      return sortedEntries().filter((entry) => sessionId === void 0 || entry.id === sessionId).flatMap((entry) => [...entry.liveTasks.values()].sort((left, right) => left.observedAt - right.observedAt || (left.taskId < right.taskId ? -1 : 1)));
+    },
     completePending: (sessionId, requestId) => {
       entries.get(sessionId)?.pending.delete(requestId);
     },
@@ -115727,10 +115875,10 @@ init_claudeShim();
 init_store();
 init_realPorts();
 var import_node_fs16 = __toESM(require("node:fs"), 1);
-var import_node_path44 = __toESM(require("node:path"), 1);
+var import_node_path43 = __toESM(require("node:path"), 1);
 
 // src/usage/signIn.ts
-var import_node_path43 = __toESM(require("node:path"), 1);
+var import_node_path42 = __toESM(require("node:path"), 1);
 var CREDENTIALS_FILE = ".credentials.json";
 function keychainHasItem(run, account) {
   return run.run("security", ["find-generic-password", "-a", account]).status === 0;
@@ -115748,7 +115896,7 @@ function decideSignIn(facts) {
   return { state: "signed-out", detail: facts.platform === "darwin" ? `no Keychain item and no ${CREDENTIALS_FILE}` : `no ${CREDENTIALS_FILE}` };
 }
 function credentialsFilePath(farmRoot) {
-  return import_node_path43.default.join(farmRoot, CREDENTIALS_FILE);
+  return import_node_path42.default.join(farmRoot, CREDENTIALS_FILE);
 }
 function identitySignIn(fs22, probe, identity) {
   const probing = !identity.hasCredentialBlock;
@@ -115874,7 +116022,7 @@ function tcpPortEraRecord(raw) {
   return (has("port") || has("lastPort")) && !has("socketPath");
 }
 function pushPathResolution(push, resolution) {
-  const ownDir = import_node_path44.default.dirname(resolution.ownExecutablePath);
+  const ownDir = import_node_path43.default.dirname(resolution.ownExecutablePath);
   switch (resolution.agentShim.status) {
     case "ok":
       push("path-resolution", "pass", `\`agent-shim\` on PATH resolves to this running executable, ${resolution.ownExecutablePath}.`, "agent-shim");
@@ -115973,14 +116121,14 @@ function pushProvider(push, entry, cacheEnv, signIn) {
 }
 function pushLegacyName(push, params) {
   const legacyVariables = Object.keys(params.env).filter((name) => name.startsWith(LEGACY_ENV_PREFIX) && params.env[name] !== void 0).sort();
-  if (legacyVariables.length === 0 && import_node_path44.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
+  if (legacyVariables.length === 0 && import_node_path43.default.basename(params.rootPath) !== LEGACY_HOME_DIRNAME) {
     push("legacy-name", "pass", "Nothing here still uses the former `claude-use` name.");
     return;
   }
   for (const name of legacyVariables) {
     push("legacy-name", "warn", `${name} is the former name of ${name.replace(LEGACY_ENV_PREFIX, ENV_PREFIX)}. Rename it; the old name still works but is only a fallback.`, name);
   }
-  if (import_node_path44.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
+  if (import_node_path43.default.basename(params.rootPath) === LEGACY_HOME_DIRNAME) {
     push(
       "legacy-name",
       "warn",
@@ -116353,18 +116501,18 @@ function collectDoctorReport(params) {
   const { paths } = params;
   const identityNames = import_node_fs16.default.existsSync(paths.identitiesDir) ? import_node_fs16.default.readdirSync(paths.identitiesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && isIdentityDirectoryName(entry.name)).map((entry) => entry.name).sort() : [];
   const identities = identityNames.map((name) => {
-    const farmRoot = import_node_path44.default.join(paths.identitiesDir, name);
-    const identityPath = import_node_path44.default.join(farmRoot, "identity.json");
+    const farmRoot = import_node_path43.default.join(paths.identitiesDir, name);
+    const identityPath = import_node_path43.default.join(farmRoot, "identity.json");
     return { name, path: identityPath, raw: realFsPort.readFileUtf8(identityPath), farmRoot, credentialsFilePresent: import_node_fs16.default.existsSync(credentialsFilePath(farmRoot)) };
   });
   const profileNames = import_node_fs16.default.existsSync(paths.configProfilesDir) ? import_node_fs16.default.readdirSync(paths.configProfilesDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const configProfiles = profileNames.map((name) => {
-    const profilePath = import_node_path44.default.join(paths.configProfilesDir, `${name}.json`);
+    const profilePath = import_node_path43.default.join(paths.configProfilesDir, `${name}.json`);
     return { name, path: profilePath, raw: realFsPort.readFileUtf8(profilePath) };
   });
   const providerNames = import_node_fs16.default.existsSync(paths.providersDir) ? import_node_fs16.default.readdirSync(paths.providersDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).sort() : [];
   const providers = providerNames.map((name) => {
-    const providerPath = import_node_path44.default.join(paths.providersDir, `${name}.json`);
+    const providerPath = import_node_path43.default.join(paths.providersDir, `${name}.json`);
     return { name, path: providerPath, raw: realFsPort.readFileUtf8(providerPath) };
   });
   const ownExecutablePath = realOwnExecutablePath();
@@ -116376,12 +116524,12 @@ function collectDoctorReport(params) {
     binaryDiscovery = { ok: false, message: error63 instanceof Error ? error63.message : String(error63) };
   }
   const shimState = readJson(paths.claudeShimFile, ClaudeShimStateSchema);
-  const pathDirs = (params.env.PATH ?? "").split(import_node_path44.default.delimiter).filter((dir) => dir !== "");
+  const pathDirs = (params.env.PATH ?? "").split(import_node_path43.default.delimiter).filter((dir) => dir !== "");
   const claudeShimShadow = shimState === void 0 ? void 0 : refinePathShadow(
     findPathShadow({
       pathDirs,
-      targetDir: import_node_path44.default.dirname(shimState.targetPath),
-      targetFilename: import_node_path44.default.basename(shimState.targetPath),
+      targetDir: import_node_path43.default.dirname(shimState.targetPath),
+      targetFilename: import_node_path43.default.basename(shimState.targetPath),
       findExecutableInDir
     }),
     shimState.targetPath,
@@ -116410,7 +116558,7 @@ function collectDoctorReport(params) {
       agentShim: refinePathShadow(
         findPathShadow({
           pathDirs,
-          targetDir: import_node_path44.default.dirname(ownExecutablePath),
+          targetDir: import_node_path43.default.dirname(ownExecutablePath),
           targetFilename: commandFilename(ownExecutablePath, "agent-shim"),
           findExecutableInDir
         }),
@@ -118934,7 +119082,7 @@ var HTTP_METHODS_UP_TO_V31 = [
 function operationFields(convert) {
   return Object.fromEntries(HTTP_METHODS_UP_TO_V31.map((method) => [method, convert]));
 }
-function isRecord4(value2) {
+function isRecord5(value2) {
   if (typeof value2 !== "object" || value2 === null) {
     return false;
   }
@@ -118954,7 +119102,7 @@ function setOwn2(object3, key, value2) {
   }
 }
 function cloneValue(value2, seen) {
-  if (!(Array.isArray(value2) || isRecord4(value2))) {
+  if (!(Array.isArray(value2) || isRecord5(value2))) {
     return value2;
   }
   const existing = seen.get(value2);
@@ -118977,14 +119125,14 @@ function cloneValue(value2, seen) {
   return out;
 }
 function deepClone(value2) {
-  if (!(Array.isArray(value2) || isRecord4(value2))) {
+  if (!(Array.isArray(value2) || isRecord5(value2))) {
     return value2;
   }
   return cloneValue(value2, /* @__PURE__ */ new WeakMap());
 }
 var converting = /* @__PURE__ */ new WeakMap();
 function convertRecord(value2, fields, finish) {
-  if (!isRecord4(value2)) {
+  if (!isRecord5(value2)) {
     return deepClone(value2);
   }
   const inProgress = converting.get(value2);
@@ -119010,7 +119158,7 @@ function convertRecord(value2, fields, finish) {
   }
 }
 function mapRecord(value2, convert) {
-  if (!isRecord4(value2)) {
+  if (!isRecord5(value2)) {
     return deepClone(value2);
   }
   const out = {};
@@ -119029,7 +119177,7 @@ function mapArray(value2, convert) {
   return value2.map((item) => convert(item)).filter((item) => item !== DROP);
 }
 function getRef(value2) {
-  if (isRecord4(value2) && typeof value2.$ref === "string") {
+  if (isRecord5(value2) && typeof value2.$ref === "string") {
     return value2.$ref;
   }
   return void 0;
@@ -119235,7 +119383,7 @@ function convertSchema2(schema) {
   if (schema === false) {
     return { not: {} };
   }
-  if (isRecord4(schema) && typeof schema.$ref === "string" && Object.keys(schema).length === 1) {
+  if (isRecord5(schema) && typeof schema.$ref === "string" && Object.keys(schema).length === 1) {
     return { $ref: schema.$ref };
   }
   return convertRecord(schema, SCHEMA_FIELDS, finishSchema);
@@ -119247,7 +119395,7 @@ function resolveSchemeType(name, schemes, seen) {
     return void 0;
   }
   const scheme = schemes[name];
-  if (!isRecord4(scheme)) {
+  if (!isRecord5(scheme)) {
     return void 0;
   }
   if (typeof scheme.type === "string") {
@@ -119264,11 +119412,11 @@ function resolveSchemeType(name, schemes, seen) {
   return void 0;
 }
 function createContext(spec) {
-  const components = isRecord4(spec) ? spec.components : void 0;
-  const pathItems = isRecord4(components) ? components.pathItems : void 0;
-  const schemes = isRecord4(components) ? components.securitySchemes : void 0;
+  const components = isRecord5(spec) ? spec.components : void 0;
+  const pathItems = isRecord5(components) ? components.pathItems : void 0;
+  const schemes = isRecord5(components) ? components.securitySchemes : void 0;
   const schemeTypes = /* @__PURE__ */ new Map();
-  if (isRecord4(schemes)) {
+  if (isRecord5(schemes)) {
     for (const name of Object.keys(schemes)) {
       const type2 = resolveSchemeType(name, schemes, /* @__PURE__ */ new Set());
       if (type2 !== void 0) {
@@ -119278,7 +119426,7 @@ function createContext(spec) {
   }
   return {
     inlining: /* @__PURE__ */ new Set(),
-    pathItems: isRecord4(pathItems) ? pathItems : void 0,
+    pathItems: isRecord5(pathItems) ? pathItems : void 0,
     schemeTypes
   };
 }
@@ -119286,7 +119434,7 @@ function isMutualTls(name, context) {
   return context.schemeTypes.get(name) === "mutualTLS";
 }
 function convertRequirement(value2, context) {
-  if (!isRecord4(value2)) {
+  if (!isRecord5(value2)) {
     return deepClone(value2);
   }
   const entries = Object.entries(value2);
@@ -119386,10 +119534,10 @@ function resolvePathItemRef(value2, context) {
     return void 0;
   }
   const target = context.pathItems[name];
-  return isRecord4(target) ? [name, target] : void 0;
+  return isRecord5(target) ? [name, target] : void 0;
 }
 function convertPathItem(value2, context) {
-  if (!isRecord4(value2)) {
+  if (!isRecord5(value2)) {
     return deepClone(value2);
   }
   const resolved = resolvePathItemRef(value2, context);
@@ -119489,7 +119637,7 @@ function convertExample(value2) {
   });
 }
 function isQuerystringParameter(value2) {
-  return isRecord4(value2) && value2.in === "querystring";
+  return isRecord5(value2) && value2.in === "querystring";
 }
 function isRemovedRef(value2, removed) {
   const ref = getRef(value2);
@@ -119505,7 +119653,7 @@ function convertParameterOrHeader2(value2, context) {
       style: (item) => item === "cookie" ? DROP : deepClone(item)
     },
     (out, parameter) => {
-      const lostContent = isRecord4(parameter.content) && Object.keys(parameter.content).length > 0 && isRecord4(out.content) && Object.keys(out.content).length === 0;
+      const lostContent = isRecord5(parameter.content) && Object.keys(parameter.content).length > 0 && isRecord5(out.content) && Object.keys(out.content).length === 0;
       return lostContent ? DROP : out;
     }
   );
@@ -119626,7 +119774,7 @@ function convertComponents2(value2, context) {
   });
 }
 function losesEntireContent(value2, mediaTypes) {
-  if (!(isRecord4(value2) && isRecord4(value2.content))) {
+  if (!(isRecord5(value2) && isRecord5(value2.content))) {
     return false;
   }
   const entries = Object.values(value2.content);
@@ -119634,7 +119782,7 @@ function losesEntireContent(value2, mediaTypes) {
 }
 function indexRemovedComponentRefs(map2, prefix, mediaTypes, isDirectlyRemoved) {
   const removed = /* @__PURE__ */ new Set();
-  if (!isRecord4(map2)) {
+  if (!isRecord5(map2)) {
     return removed;
   }
   const entries = Object.entries(map2);
@@ -119656,12 +119804,12 @@ function indexRemovedComponentRefs(map2, prefix, mediaTypes, isDirectlyRemoved)
   return removed;
 }
 function createContext2(spec) {
-  const components = isRecord4(spec) ? spec.components : void 0;
-  const mediaTypes = isRecord4(components) && isRecord4(components.mediaTypes) ? components.mediaTypes : void 0;
+  const components = isRecord5(spec) ? spec.components : void 0;
+  const mediaTypes = isRecord5(components) && isRecord5(components.mediaTypes) ? components.mediaTypes : void 0;
   return {
     mediaTypes,
-    removedHeaderRefs: indexRemovedComponentRefs(isRecord4(components) ? components.headers : void 0, HEADERS_REF_PREFIX, mediaTypes, () => false),
-    removedParameterRefs: indexRemovedComponentRefs(isRecord4(components) ? components.parameters : void 0, PARAMETERS_REF_PREFIX, mediaTypes, isQuerystringParameter)
+    removedHeaderRefs: indexRemovedComponentRefs(isRecord5(components) ? components.headers : void 0, HEADERS_REF_PREFIX, mediaTypes, () => false),
+    removedParameterRefs: indexRemovedComponentRefs(isRecord5(components) ? components.parameters : void 0, PARAMETERS_REF_PREFIX, mediaTypes, isQuerystringParameter)
   };
 }
 function convertJsonSchemaDialect(value2) {
@@ -121937,7 +122085,7 @@ var ResetRowSchema = external_exports.strictObject({
 var ResetScheduleSchema = external_exports.strictObject({ resets: external_exports.readonly(external_exports.array(ResetRowSchema)) });
 
 // src/frontdoor/controlSchemas.ts
-var import_node_path45 = __toESM(require("node:path"), 1);
+var import_node_path44 = __toESM(require("node:path"), 1);
 init_zod();
 init_schema2();
 
@@ -122149,11 +122297,11 @@ var FrontDoorSessionsOutputSchema = external_exports.strictObject({ sessions: ex
 var CheckRunInputSchema = external_exports.strictObject({
   path: external_exports.string().min(1),
   identity: external_exports.string().min(1).optional()
-}).refine((input2) => import_node_path45.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path44.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var PoolPickInputSchema = external_exports.strictObject({
   pool: external_exports.string().min(1),
   path: external_exports.string().min(1)
-}).refine((input2) => import_node_path45.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path44.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var DoctorFindingSchema = external_exports.strictObject({
   section: external_exports.enum(DOCTOR_SECTIONS),
   subject: external_exports.string().optional(),
@@ -124982,7 +125130,7 @@ function createLifecycleApiRouter(deps) {
 init_cliError();
 
 // src/frontdoor/launchSchemas.ts
-var import_node_path46 = __toESM(require("node:path"), 1);
+var import_node_path45 = __toESM(require("node:path"), 1);
 init_zod();
 init_claudeVersion();
 init_identity();
@@ -124992,7 +125140,7 @@ var LaunchResolveInputSchema = external_exports.strictObject({
   argv: external_exports.readonly(external_exports.array(external_exports.string())).optional(),
   /** The launch's inherited environment. Absent means an empty one: the door's own environment is never a substitute for the caller's, so a caller that wants `AGENT_SHIM_*` switches or a `CLAUDE_CONFIG_DIR` considered names them here. Values are read, never reported. */
   env: external_exports.record(external_exports.string(), external_exports.string()).optional()
-}).refine((input2) => import_node_path46.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
+}).refine((input2) => import_node_path45.default.isAbsolute(input2.path), { message: "path must be absolute: the door cannot resolve a relative path against the caller's working directory" });
 var LaunchPoolDecisionSchema = external_exports.strictObject({
   name: external_exports.string(),
   reasons: external_exports.readonly(external_exports.array(external_exports.string())),
@@ -125076,7 +125224,7 @@ var AgentTreesShowInputSchema = external_exports.strictObject({
   /** Look only in this identity. */
   identity: external_exports.string().optional()
 });
-var AgentTreesShowOutputSchema = external_exports.strictObject({ identities: external_exports.array(external_exports.string()), ...SessionAgentTreeSchema.shape });
+var AgentTreesShowOutputSchema = external_exports.strictObject({ identities: external_exports.array(external_exports.string()), ...MergedAgentTreeSchema.shape });
 function asBadRequest(error63) {
   if (error63 instanceof CliError) {
     throw new ORPCError("BAD_REQUEST", { message: error63.message });
@@ -125107,14 +125255,14 @@ function createAgentTreesApiRouter(deps) {
         openapi({
           method: "POST",
           path: "/rest/agent-trees/show",
-          summary: "Show one session's agent tree, task list and workflow runs",
+          summary: "Show one session's agent tree, task list and workflow runs, with the live Remote Control tasks merged in",
           tags: [SESSION_HISTORY_TAG],
           spec: (current) => ({ ...current, [READ_ONLY_OPERATION_EXTENSION]: true })
         })
       ).input(AgentTreesShowInputSchema).output(AgentTreesShowOutputSchema).handler(({ input: input2 }) => {
         try {
           const view = deps.sessionShow(input2.session, input2.identity);
-          return { identities: [...view.identities], ...view.tree };
+          return { identities: [...view.identities], ...mergeLiveTasks(view.tree, deps.liveTasks()) };
         } catch (error63) {
           return asBadRequest(error63);
         }
@@ -126935,15 +127083,15 @@ function readFrontDoorControlMaterial(fsPort, paths, purpose) {
 
 // src/frontdoor/rcLiveUsage.ts
 var RC_RATE_LIMIT_EVENT_TYPE = "rate_limit_event";
-function isRecord5(value2) {
+function isRecord6(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function rcRateLimitInfoOf(event) {
   const payload = event.envelope.payload;
-  if (!isRecord5(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
+  if (!isRecord6(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
     return void 0;
   }
-  if (!isRecord5(payload.rate_limit_info)) {
+  if (!isRecord6(payload.rate_limit_info)) {
     return void 0;
   }
   const parsed = RcRateLimitInfoSchema.safeParse(payload.rate_limit_info);
@@ -126970,7 +127118,7 @@ function createRcLiveUsage(deps) {
 }
 
 // src/frontdoor/rcSelfHostMint.ts
-var import_node_path47 = __toESM(require("node:path"), 1);
+var import_node_path46 = __toESM(require("node:path"), 1);
 init_account();
 
 // src/frontdoor/rcSelfHostLocal.ts
@@ -126979,7 +127127,7 @@ var RC_SELF_HOST_SCOPE_LIST = ["user:profile", "user:inference", "user:sessions:
 var RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS = 3600;
 var MS_PER_SECOND9 = 1e3;
 var HTTP_SERVICE_UNAVAILABLE = 503;
-function isRecord6(value2) {
+function isRecord7(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject2(body) {
@@ -126989,7 +127137,7 @@ function parseJsonObject2(body) {
   } catch {
     return void 0;
   }
-  return isRecord6(parsed) ? parsed : void 0;
+  return isRecord7(parsed) ? parsed : void 0;
 }
 function growthBookFeatures() {
   return {
@@ -127083,7 +127231,7 @@ var RC_SELF_HOST_RECORD_DIR = "rc-selfhost";
 var RC_SELF_HOST_RECORD_FILE = "credential.json";
 var SELF_HOST_EMAIL = "selfhost@agent-shim.invalid";
 var SELF_HOST_SUBSCRIPTION_TYPE = "max";
-function isRecord7(value2) {
+function isRecord8(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function readJsonObject(fs22, file2) {
@@ -127097,10 +127245,10 @@ function readJsonObject(fs22, file2) {
   } catch {
     return void 0;
   }
-  return isRecord7(parsed) ? parsed : void 0;
+  return isRecord8(parsed) ? parsed : void 0;
 }
 function readRcSelfHostRecord(fs22, frontdoorDir) {
-  const parsed = readJsonObject(fs22, import_node_path47.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
+  const parsed = readJsonObject(fs22, import_node_path46.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
   if (parsed === void 0) {
     return void 0;
   }
@@ -127114,14 +127262,14 @@ function mintRcSelfHostCredential(deps) {
   if (!isIdentityName(deps.identity)) {
     throw new Error(`"${deps.identity}" is not a valid identity name.`);
   }
-  const identityDir = import_node_path47.default.join(deps.identitiesDir, deps.identity);
-  const credentialsFile = import_node_path47.default.join(identityDir, CREDENTIALS_FILE2);
-  const claudeJsonFile = import_node_path47.default.join(identityDir, CLAUDE_JSON2);
-  const recordDir = import_node_path47.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
-  const recordFile = import_node_path47.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
+  const identityDir = import_node_path46.default.join(deps.identitiesDir, deps.identity);
+  const credentialsFile = import_node_path46.default.join(identityDir, CREDENTIALS_FILE2);
+  const claudeJsonFile = import_node_path46.default.join(identityDir, CLAUDE_JSON2);
+  const recordDir = import_node_path46.default.join(deps.frontdoorDir, RC_SELF_HOST_RECORD_DIR);
+  const recordFile = import_node_path46.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
-  const existingOauth = isRecord7(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
+  const existingOauth = isRecord8(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
   const existingToken = typeof existingOauth?.accessToken === "string" && existingOauth.accessToken !== "" ? existingOauth.accessToken : void 0;
   const existingIsOwn = existingToken !== void 0 && previousRecord?.accessToken === existingToken;
   if (existingToken !== void 0 && !existingIsOwn && !deps.force) {
@@ -127134,11 +127282,11 @@ function mintRcSelfHostCredential(deps) {
   const organizationUuid = deps.newUuid();
   const accountUuid = deps.newUuid();
   const mintedAt = new Date(deps.now()).toISOString();
-  deps.fs.mkdirPrivate(import_node_path47.default.dirname(credentialsFile));
+  deps.fs.mkdirPrivate(import_node_path46.default.dirname(credentialsFile));
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
-  const existingBlock = (value2) => isRecord7(value2) ? value2 : {};
+  const existingBlock = (value2) => isRecord8(value2) ? value2 : {};
   deps.fs.writeFilePrivate(claudeJsonFile, `${JSON.stringify({
     ...claudeJson,
     oauthAccount: {
@@ -127521,15 +127669,15 @@ function registerRcCommand(frontdoor, paths) {
 }
 
 // src/frontdoor/rcCredentialStore.ts
-var import_node_path48 = __toESM(require("node:path"), 1);
+var import_node_path47 = __toESM(require("node:path"), 1);
 function isSafeSessionId(sessionId) {
   return /^[A-Za-z0-9_-]+$/.test(sessionId);
 }
-function isRecord8(value2) {
+function isRecord9(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function credentialOfJson(parsed) {
-  if (!isRecord8(parsed)) {
+  if (!isRecord9(parsed)) {
     return void 0;
   }
   const { authorization, anthropicVersion, anthropicClientPlatform } = parsed;
@@ -127547,7 +127695,7 @@ function sequenceNumOfJson(value2) {
 }
 function createRcCredentialStore(fs22, dir) {
   fs22.mkdirPrivate(dir);
-  const fileFor = (sessionId) => import_node_path48.default.join(dir, `${sessionId}.json`);
+  const fileFor = (sessionId) => import_node_path47.default.join(dir, `${sessionId}.json`);
   const readParsed = (sessionId) => {
     const raw = fs22.readFileUtf8(fileFor(sessionId));
     if (raw === void 0) {
@@ -127559,7 +127707,7 @@ function createRcCredentialStore(fs22, dir) {
     } catch {
       return void 0;
     }
-    return isRecord8(parsed) ? parsed : void 0;
+    return isRecord9(parsed) ? parsed : void 0;
   };
   return {
     read: (sessionId) => {
@@ -128127,7 +128275,7 @@ init_capability();
 // src/frontdoor/rcSelfHostEndpoints.ts
 var RC_SOURCE_WORKER = "worker";
 var RC_SOURCE_CLIENT = "client";
-function isRecord9(value2) {
+function isRecord10(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject3(body) {
@@ -128137,7 +128285,7 @@ function parseJsonObject3(body) {
   } catch {
     return void 0;
   }
-  return isRecord9(parsed) ? parsed : void 0;
+  return isRecord10(parsed) ? parsed : void 0;
 }
 function nonEmptyString2(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -128211,7 +128359,7 @@ async function serveRcClientChannels(ctx, tail, method, maxBatchEvents) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord9(event) || !isRecord9(event.payload)) {
+      if (!isRecord10(event) || !isRecord10(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a teleport write is an object carrying one payload object" } });
         return true;
       }
@@ -128311,7 +128459,7 @@ async function serveRcCompatSessions(ctx, pathname, compatPath) {
 // src/frontdoor/rcSelfHostConversations.ts
 var RC_CONVERSATIONS_PATH_PREFIX = "/v1/code/conversations";
 var RC_CONVERSATION_ID_PREFIX = "conv_";
-function isRecord10(value2) {
+function isRecord11(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject4(body) {
@@ -128321,7 +128469,7 @@ function parseJsonObject4(body) {
   } catch {
     return void 0;
   }
-  return isRecord10(parsed) ? parsed : void 0;
+  return isRecord11(parsed) ? parsed : void 0;
 }
 function nonEmptyString3(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -128375,7 +128523,7 @@ async function serveRcConversations(ctx, pathname, method) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord10(event) || !isRecord10(event.payload)) {
+      if (!isRecord11(event) || !isRecord11(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
         return;
       }
@@ -128668,7 +128816,7 @@ var RC_SELF_HOST_WORKER_EPOCH = 1;
 var RC_STREAM_EVENT_NAME = "client_event";
 var CONFLICT_REASON_HEADER2 = "x-ccr-conflict-reason";
 var CONFLICT_REASON_EPOCH_STALE = "epoch_stale";
-function isRecord11(value2) {
+function isRecord12(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function isWebSearchRefusal(value2) {
@@ -128752,7 +128900,7 @@ function parseJsonObject5(body) {
   } catch {
     return void 0;
   }
-  return isRecord11(parsed) ? parsed : void 0;
+  return isRecord12(parsed) ? parsed : void 0;
 }
 function mintWorkerJwt(randomToken, issuedAt) {
   const encode3 = (value2) => Buffer.from(JSON.stringify(value2), "utf8").toString("base64url");
@@ -129012,7 +129160,7 @@ data: ${JSON.stringify(envelope)}
         if (status !== void 0) {
           session.workerStatus = status;
         }
-        if (isRecord11(body?.external_metadata)) {
+        if (isRecord12(body?.external_metadata)) {
           session.externalMetadata = body.external_metadata;
         }
         await answerJson2(response, HTTP_STATUS.ok, {});
@@ -129042,7 +129190,7 @@ data: ${JSON.stringify(envelope)}
         }
         const results = [];
         for (const event of events) {
-          if (!isRecord11(event) || !isRecord11(event.payload)) {
+          if (!isRecord12(event) || !isRecord12(event.payload)) {
             await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a batch is an object carrying one payload object" } });
             return;
           }
@@ -129075,7 +129223,7 @@ data: ${JSON.stringify(envelope)}
           return;
         }
         for (const event of events) {
-          if (isRecord11(event)) {
+          if (isRecord12(event)) {
             session.internalEvents.push({ eventId: deps.newUuid(), body: event });
           }
         }
@@ -129171,7 +129319,7 @@ data: ${JSON.stringify(envelope)}
       }
       const results = [];
       for (const event of events) {
-        if (!isRecord11(event) || !isRecord11(event.payload)) {
+        if (!isRecord12(event) || !isRecord12(event.payload)) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
           return;
         }
@@ -129361,7 +129509,7 @@ function createSseParser() {
     }
   };
 }
-function isRecord12(value2) {
+function isRecord13(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function sequenceNumOf(value2) {
@@ -129383,7 +129531,7 @@ function parseRcStreamEnvelope(parsed) {
   } catch {
     return void 0;
   }
-  if (!isRecord12(data)) {
+  if (!isRecord13(data)) {
     return void 0;
   }
   const eventType = data.event_type;
@@ -129834,7 +129982,9 @@ function realFrontDoorSupervisorPorts(paths) {
       log(`pool usage refresh failed: ${error63 instanceof Error ? error63.message : String(error63)}`);
     }
   }, ANTHROPIC_USAGE_FRESHNESS_MS).unref();
-  const windowOpener = createRealWindowOpener({ paths, cwd: process.cwd(), spawnDaemon: spawnDetachedSupervisor });
+  const windowOpener = async (identity) => {
+    await runChild({ paths, args: ["__open-window", identity], timeoutMs: WINDOW_OPEN_TIMEOUT_MS });
+  };
   let keeperRunning = false;
   setInterval(() => {
     if (keeperRunning) {
@@ -129856,7 +130006,9 @@ function realFrontDoorSupervisorPorts(paths) {
       keeperRunning = false;
     });
   }, ANTHROPIC_USAGE_FRESHNESS_MS).unref();
-  const jobRunner = createRealJobRunner({ paths, spawnDaemon: spawnDetachedSupervisor, fs: realFarmFs, now: () => /* @__PURE__ */ new Date() });
+  const jobRunner = async (name, identity, job) => {
+    await runChild({ paths, args: ["__run-job", name, identity], timeoutMs: parseDuration(job.timeout) });
+  };
   const runningJobs = /* @__PURE__ */ new Set();
   setInterval(() => {
     try {
@@ -129952,6 +130104,7 @@ function realFrontDoorSupervisorPorts(paths) {
         resolveLaunch: (request7) => resolveClaudeLaunch({ argv: request7.argv, cwd: request7.path, env: request7.env, paths }),
         // The identities are read per call, like the pool table, so an identity added after the door started is listed the moment the CLI would see it.
         sessionList: (filters) => collectSessionList(realSessionFs, paths.identitiesDir, listIdentities(paths).map((entry) => entry.name), { ...filters.identity === void 0 ? {} : { identity: filters.identity }, ...filters.all === void 0 ? {} : { all: filters.all } }),
+        liveTasks: () => rcTracker.liveTasksOf(),
         sessionShow: (query, identity) => showSession(realSessionFs, paths.identitiesDir, listIdentities(paths).map((entry) => entry.name), query, identity)
       };
       const lifecycleAndCodexDeps = {
@@ -130022,7 +130175,7 @@ function realFrontDoorSupervisorPorts(paths) {
       const leafFor = createLeafCache(loadCa(), () => /* @__PURE__ */ new Date());
       const capture = captureFromEnv(process.env, paths.logsDir);
       if (capture !== void 0) {
-        log(`capture enabled, recording CONNECT targets and piped exchanges to ${import_node_path49.default.join(paths.logsDir, "frontdoor-capture.jsonl")}`);
+        log(`capture enabled, recording CONNECT targets and piped exchanges to ${import_node_path48.default.join(paths.logsDir, "frontdoor-capture.jsonl")}`);
       }
       if (rcSelfHostSurface !== void 0) {
         log("self-hosted Remote Control surface on: the door serves the CCR session family itself, and its own client-half dials its own transparent surface");
@@ -139889,7 +140042,7 @@ async function serveMcp(mcp, transport, options = {}) {
 
 // src/mcp/permissions.ts
 var import_node_fs18 = __toESM(require("node:fs"), 1);
-var import_node_path50 = __toESM(require("node:path"), 1);
+var import_node_path49 = __toESM(require("node:path"), 1);
 init_zod();
 init_store();
 var StoredMcpPermissionsSchema = external_exports.strictObject({
@@ -139911,10 +140064,10 @@ function effectiveMcpPermissions(flags, stored) {
   return { writes: flags.writes || stored.writes, remoteControl: flags.remoteControl || stored.remoteControl, history: flags.history || stored.history };
 }
 function watchMcpPermissions(paths, onChange) {
-  const directory = import_node_path50.default.dirname(paths.mcpPermissionsFile);
+  const directory = import_node_path49.default.dirname(paths.mcpPermissionsFile);
   import_node_fs18.default.mkdirSync(directory, { recursive: true });
   const watcher = import_node_fs18.default.watch(directory, (_event, filename) => {
-    if (filename === null || filename === import_node_path50.default.basename(paths.mcpPermissionsFile)) {
+    if (filename === null || filename === import_node_path49.default.basename(paths.mcpPermissionsFile)) {
       onChange();
     }
   });
@@ -140219,7 +140372,7 @@ function registerCompletionCommand(program2) {
 }
 
 // src/credentialCommand.ts
-var import_node_child_process5 = require("node:child_process");
+var import_node_child_process6 = require("node:child_process");
 init_commandDeps();
 init_cliError();
 init_credential();
@@ -140227,16 +140380,16 @@ init_credentialCache();
 
 // src/identityToken.ts
 var import_node_fs19 = __toESM(require("node:fs"), 1);
-var import_node_path51 = __toESM(require("node:path"), 1);
+var import_node_path50 = __toESM(require("node:path"), 1);
 init_cliError();
 var TOKEN_FILE_MODE = 384;
 var TOKEN_DIR_MODE = 448;
 var OAUTH_TOKEN_RE = /^sk-ant-oat\d+-[A-Za-z0-9_-]+$/;
 function identityTokenDir(paths) {
-  return import_node_path51.default.join(paths.root, "credentials");
+  return import_node_path50.default.join(paths.root, "credentials");
 }
 function identityTokenPath(paths, identityName) {
-  return import_node_path51.default.join(identityTokenDir(paths), `${identityName}.token`);
+  return import_node_path50.default.join(identityTokenDir(paths), `${identityName}.token`);
 }
 function storeIdentityToken(paths, identityName, raw) {
   const token = raw.trim();
@@ -140247,7 +140400,7 @@ function storeIdentityToken(paths, identityName, raw) {
   import_node_fs19.default.mkdirSync(dir, { recursive: true, mode: TOKEN_DIR_MODE });
   import_node_fs19.default.chmodSync(dir, TOKEN_DIR_MODE);
   const target = identityTokenPath(paths, identityName);
-  const temp = import_node_path51.default.join(dir, `.${identityName}.${String(process.pid)}.tmp`);
+  const temp = import_node_path50.default.join(dir, `.${identityName}.${String(process.pid)}.tmp`);
   import_node_fs19.default.writeFileSync(temp, `${token}
 `, { mode: TOKEN_FILE_MODE });
   import_node_fs19.default.renameSync(temp, target);
@@ -140279,7 +140432,7 @@ function realCommandPorts(deps) {
     cache: createRealCredentialCache(deps.paths.root),
     platform: process.platform,
     now: () => Date.now(),
-    ssh: (host, remoteCommand, input2) => (0, import_node_child_process5.spawnSync)("ssh", ["--", host, remoteCommand], { input: input2, stdio: ["pipe", "inherit", "inherit"] }).status
+    ssh: (host, remoteCommand, input2) => (0, import_node_child_process6.spawnSync)("ssh", ["--", host, remoteCommand], { input: input2, stdio: ["pipe", "inherit", "inherit"] }).status
   };
 }
 var REMOTE_ROOT_SCRIPT = 'root="${AGENT_SHIM_HOME:-${CLAUDE_USE_HOME:-}}"; if [ -z "$root" ]; then if [ ! -d "$HOME/.agent-shim" ] && [ -d "$HOME/.claude-use" ]; then root="$HOME/.claude-use"; else root="$HOME/.agent-shim"; fi; fi';
@@ -140415,8 +140568,8 @@ function registerDoctorCommand(program2, deps) {
 // src/headroom/commands.ts
 var import_node_fs20 = __toESM(require("node:fs"), 1);
 var import_node_http4 = __toESM(require("node:http"), 1);
-var import_node_path52 = __toESM(require("node:path"), 1);
-var import_node_child_process6 = require("node:child_process");
+var import_node_path51 = __toESM(require("node:path"), 1);
+var import_node_child_process7 = require("node:child_process");
 init_commandDeps();
 init_realFrontDoorPort();
 init_trust();
@@ -140541,16 +140694,16 @@ async function readyOverSocket(socketPath) {
 }
 var HEADROOM_TOOL_NAME = "headroom-ai";
 function readInstalledHeadroomCommit() {
-  const toolDir = (0, import_node_child_process6.spawnSync)("uv", ["tool", "dir"], { encoding: "utf8" });
+  const toolDir = (0, import_node_child_process7.spawnSync)("uv", ["tool", "dir"], { encoding: "utf8" });
   if (toolDir.status !== 0) {
     return void 0;
   }
-  const libDir = import_node_path52.default.join(toolDir.stdout.trim(), HEADROOM_TOOL_NAME, "lib");
+  const libDir = import_node_path51.default.join(toolDir.stdout.trim(), HEADROOM_TOOL_NAME, "lib");
   for (const python of realFarmFs.readdir(libDir)) {
-    const sitePackages = import_node_path52.default.join(libDir, python, "site-packages");
+    const sitePackages = import_node_path51.default.join(libDir, python, "site-packages");
     for (const entry of realFarmFs.readdir(sitePackages)) {
       if (entry.startsWith("headroom_ai-") && entry.endsWith(".dist-info")) {
-        const directUrl = realFarmFs.readFileUtf8(import_node_path52.default.join(sitePackages, entry, "direct_url.json"));
+        const directUrl = realFarmFs.readFileUtf8(import_node_path51.default.join(sitePackages, entry, "direct_url.json"));
         return directUrl === void 0 ? void 0 : parseInstalledCommit(directUrl);
       }
     }
@@ -140581,7 +140734,7 @@ function realSupervisorPorts(paths) {
       }
       const logFd = import_node_fs20.default.openSync(paths.headroomLogPath, "a");
       try {
-        const child = (0, import_node_child_process6.spawn)("headroom", headroomProxyArgs(socketPath, settings2), {
+        const child = (0, import_node_child_process7.spawn)("headroom", headroomProxyArgs(socketPath, settings2), {
           detached: true,
           stdio: ["ignore", logFd, logFd],
           env: headroomSpawnEnv(process.env, allowlist, settings2, trust?.path)
@@ -140621,7 +140774,7 @@ function realSupervisorPorts(paths) {
     },
     ready: readyOverSocket,
     install: (spec) => {
-      const result = (0, import_node_child_process6.spawnSync)("uv", ["tool", "install", spec], { encoding: "utf8" });
+      const result = (0, import_node_child_process7.spawnSync)("uv", ["tool", "install", spec], { encoding: "utf8" });
       if (result.error !== void 0) {
         return { ok: false, error: `uv is not installed or not on PATH (${result.error.message})` };
       }
@@ -140634,7 +140787,7 @@ function realSupervisorPorts(paths) {
       return result.status === 0 ? { ok: true } : { ok: false, error: `uv tool install exited ${String(result.status)}` };
     },
     headroomVersion: () => {
-      const result = (0, import_node_child_process6.spawnSync)("headroom", ["--version"], { encoding: "utf8" });
+      const result = (0, import_node_child_process7.spawnSync)("headroom", ["--version"], { encoding: "utf8" });
       return result.status === 0 ? result.stdout.trim() : void 0;
     },
     installedCommit: readInstalledHeadroomCommit,
@@ -140685,6 +140838,76 @@ function registerHeadroomCommand(program2, deps) {
   });
 }
 
+// src/headlessCommands.ts
+init_realPorts();
+
+// src/usage/realJobRunner.ts
+var import_node_path52 = __toESM(require("node:path"), 1);
+init_conditions();
+init_identityClaude();
+var JOB_LAUNCH_FLAGS = ["--no-headroom", "--no-remote-control", "--track-usage"];
+var JOB_ISOLATION_OPTIONS = { settingSources: ["user"], mcpServers: {}, strictMcpConfig: true };
+function logEntry(name, identity, endedAt, outcome) {
+  return `${endedAt.toISOString()} job ${name} as ${identity}
+${outcome.trimEnd()}
+
+`;
+}
+function createRealJobRunner(params) {
+  return async (name, identity, job) => {
+    const logFile = import_node_path52.default.join(params.paths.jobLogsDir, `${name}.log`);
+    const append = (outcome) => {
+      params.fs.mkdirPrivate(params.paths.jobLogsDir);
+      params.fs.appendFilePrivate(logFile, logEntry(name, identity, params.now(), outcome));
+    };
+    try {
+      const result = await withIdentityClaude({ paths: params.paths, spawnDaemon: params.spawnDaemon, cwd: job.cwd, timeoutMs: parseDuration(job.timeout) }, identity, JOB_LAUNCH_FLAGS, async ({ bin, env, cwd, abort }) => {
+        const { query } = await Promise.resolve().then(() => (init_sdk(), sdk_exports));
+        const session = query({
+          prompt: job.prompt,
+          options: {
+            pathToClaudeCodeExecutable: bin,
+            env,
+            cwd,
+            abortController: abort,
+            settingSources: [...JOB_ISOLATION_OPTIONS.settingSources],
+            mcpServers: JOB_ISOLATION_OPTIONS.mcpServers,
+            strictMcpConfig: JOB_ISOLATION_OPTIONS.strictMcpConfig,
+            permissionMode: "dontAsk",
+            ...job.model === void 0 ? {} : { model: job.model },
+            ...job.allowedTools === void 0 ? {} : { allowedTools: [...job.allowedTools] }
+          }
+        });
+        try {
+          for await (const message of session) {
+            if (message.type === "result") {
+              return successfulResult(message);
+            }
+          }
+          throw new Error("the run ended without a result");
+        } finally {
+          session.close();
+        }
+      });
+      append(result);
+    } catch (error63) {
+      append(`FAILED: ${error63 instanceof Error ? error63.message : String(error63)}`);
+      throw error63;
+    }
+  };
+}
+
+// src/headlessCommands.ts
+function registerHeadlessCommands(program2, deps) {
+  const { paths } = deps;
+  program2.command("__open-window <identity>", { hidden: true }).description("Internal: open a five-hour window for an identity with one request. Started by the front door's window keeper.").action(async (identity) => {
+    await createRealWindowOpener({ paths, cwd: process.cwd(), spawnDaemon: spawnDetachedSupervisor })(identity);
+  });
+  program2.command("__run-job <name> <identity>", { hidden: true }).description("Internal: run a job as an identity. Started by the front door's job keeper.").action(async (name, identity) => {
+    await createRealJobRunner({ paths, spawnDaemon: spawnDetachedSupervisor, fs: realFarmFs, now: () => /* @__PURE__ */ new Date() })(name, identity, requireJob(paths, name));
+  });
+}
+
 // src/jobs.ts
 var import_node_path53 = __toESM(require("node:path"), 1);
 init_commandDeps();
@@ -141603,6 +141826,7 @@ function buildProgram(deps) {
   registerProfileCommand(program2, deps);
   registerPoolCommand(program2, deps);
   registerJobCommand(program2, deps);
+  registerHeadlessCommands(program2, deps);
   registerProviderCommand(program2, deps);
   registerRuleCommand(program2, deps);
   registerCredentialCommand(program2, deps, deps.credentialPorts);