instar 1.3.540 → 1.3.542

package/dist/core/CredentialEnvTokenGate.d.ts

@@ -0,0 +1,98 @@
+/**
+ * CredentialEnvTokenGate — the §0.b applicability precondition, enforced structurally
+ * (Step 8 of live credential re-pointing).
+ *
+ * Spec: docs/specs/live-credential-repointing-rebalancer.md §2.10 (the env-token gate — verbatim
+ * contract), §0.b (applicability gate), §2.4 (the status route the named reason surfaces on).
+ *
+ * ── What this is ──
+ * The live credential re-pointing mechanism only works for sessions whose credential comes from
+ * the per-`CLAUDE_CONFIG_DIR` STORE (a swap re-points the store; claude-code re-reads it on the
+ * next 401). A session launched with an env token (`CLAUDE_CODE_OAUTH_TOKEN` / `ANTHROPIC_API_KEY`
+ * set from a non-empty `config.anthropicApiKey`) NEVER reads the store, ignores any swap, and is
+ * INVISIBLE to the mechanism. If such a launch were the norm the entire feature would be inert
+ * (§0.b). This gate REFUSES to run the feature — with a NAMED reason on the status route — whenever
+ * an env-token condition is present, so the mechanism can never silently mis-steer a fleet it does
+ * not actually control.
+ *
+ * ── The load-bearing safety contract (spec §2.10; build-prompt invariants 1, 2) ──
+ *   1. EVALUATES BOTH the config field AND the live running fleet. A config-only check would miss
+ *      the mid-life flip: an operator setting `config.anthropicApiKey` to an OAuth token mid-run
+ *      leaves already-running STORE sessions steerable while new ENV spawns are silently un-steered
+ *      — a genuinely mixed fleet a config-only check freezes incoherently. The fleet scan reads the
+ *      durable per-session `credentialSource` flag (recorded at spawn from the IDENTICAL expression
+ *      that selected the env block — single source of truth) so it can detect that mixed state.
+ *   2. THE CONFIG PREDICATE IS "ANY NON-EMPTY anthropicApiKey" (round-3) — NOT only an
+ *      `sk-ant-oat` OAuth token. The code's launch predicate is binary: `sk-ant-oat…` sets
+ *      `CLAUDE_CODE_OAUTH_TOKEN`, ANY OTHER non-empty value sets `ANTHROPIC_API_KEY`, and BOTH make
+ *      claude-code ignore the store. So the gate predicate is `(anthropicApiKey ?? '') !== ''`,
+ *      matching the SessionManager `?? ''`-then-non-empty branch exactly.
+ *   3. NAMED, CATEGORICAL REASON. The refusal reason is a category string (never a credential), but
+ *      the host still routes it through `CredentialAuditEmit.scrub` (Step 7) before any surface,
+ *      consistent with the §2.9 chokepoint.
+ *
+ * This module performs NO IO and NO credential reads. It is a pure evaluator over an injected
+ * config-key getter + an injected session lister, so it is fully unit-testable.
+ */
+import type { Session } from './types.js';
+/** A session lister snapshot input — the gate only reads `framework`, `status`, `credentialSource`. */
+export type EnvTokenFleetSession = Pick<Session, 'framework' | 'status' | 'credentialSource'>;
+export interface CredentialEnvTokenGateDeps {
+    /**
+     * Reads the live `config.anthropicApiKey` value EACH call (not cached) so a restartless config
+     * flip is honored on the next evaluation — the same restartless posture the rest of the feature
+     * uses. May return undefined/empty when no key is configured (the §0.b alive case).
+     */
+    getAnthropicApiKey: () => string | undefined;
+    /**
+     * Lists the CURRENT sessions (the live fleet). The gate filters to running claude-code sessions
+     * and reads their durable `credentialSource` flag. Injected so the gate stays IO-free.
+     */
+    listSessions: () => EnvTokenFleetSession[];
+}
+/** The named refusal reason categories (a category, never a credential). */
+export type EnvTokenRefusalReason = 'config-anthropic-api-key-set' | 'env-token-session-in-fleet';
+export interface EnvTokenGateVerdict {
+    /** True when the feature MUST refuse to run (an env-token condition is present). */
+    refused: boolean;
+    /** The named, scrub-safe reason category when refused; undefined when permitted. */
+    reason?: EnvTokenRefusalReason;
+    /** A human-readable one-line explanation (category-level, no credential material). */
+    detail?: string;
+    /**
+     * The names/ids absent here on purpose: the verdict carries NO session identifiers and NO key
+     * material, so it is safe to surface as-is (and is scrubbed regardless by the host).
+     */
+    /** How many running claude-code sessions in the fleet are env-token (0 when none / config-only refusal). */
+    envSessionCount: number;
+}
+/**
+ * Evaluates the §2.10 env-token precondition over BOTH the config field AND the live fleet.
+ *
+ * Construct ONE per process and call `evaluate()` at enable-time AND per-pass. The CONFIG check is
+ * evaluated FIRST (cheapest + the dominant case); the FLEET scan closes the mid-life-flip hole.
+ */
+export declare class CredentialEnvTokenGate {
+    private readonly getAnthropicApiKey;
+    private readonly listSessions;
+    constructor(deps: CredentialEnvTokenGateDeps);
+    /**
+     * The §2.10 verdict. Refuses when:
+     *   (a) `config.anthropicApiKey` is non-empty (ANY value — OAuth or API key); OR
+     *   (b) any RUNNING claude-code session's `credentialSource` is `'env'` (the live-fleet path that
+     *       closes the mid-life flip). `credentialSource` undefined on a legacy/non-claude record is
+     *       treated as `'store'` (the safe, non-refusing direction — only an explicit `'env'` refuses).
+     * Permits (refused:false) only when the config field is empty AND every running claude-code
+     * session reads the store.
+     */
+    evaluate(): EnvTokenGateVerdict;
+    /**
+     * True iff a given session should still feed `tenantOf(slot)` slot-attribution into usage records.
+     * On a §2.10 refusal the balancer STOPS feeding attribution for env-token sessions so an env
+     * session's usage is never mis-attributed to a slot tenant (spec §2.10 requirement 3). A session
+     * with `credentialSource: 'env'` never reads the store, so its usage does not belong to any slot
+     * tenant — it is attributed to its own account directly (enrollment-home behavior).
+     */
+    static shouldAttributeSlotTenant(session: Pick<Session, 'credentialSource'>): boolean;
+}
+//# sourceMappingURL=CredentialEnvTokenGate.d.ts.map

package/dist/core/CredentialEnvTokenGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialEnvTokenGate.d.ts","sourceRoot":"","sources":["../../src/core/CredentialEnvTokenGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,uGAAuG;AACvG,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,kBAAkB,CAAC,CAAC;AAE9F,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC7C;;;OAGG;IACH,YAAY,EAAE,MAAM,oBAAoB,EAAE,CAAC;CAC5C;AAED,4EAA4E;AAC5E,MAAM,MAAM,qBAAqB,GAC7B,8BAA8B,GAC9B,4BAA4B,CAAC;AAEjC,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,OAAO,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,4GAA4G;IAC5G,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;gBAEhD,IAAI,EAAE,0BAA0B;IAK5C;;;;;;;;OAQG;IACH,QAAQ,IAAI,mBAAmB;IAyC/B;;;;;;OAMG;IACH,MAAM,CAAC,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,GAAG,OAAO;CAGtF"}

package/dist/core/CredentialEnvTokenGate.js

@@ -0,0 +1,103 @@
+/**
+ * CredentialEnvTokenGate — the §0.b applicability precondition, enforced structurally
+ * (Step 8 of live credential re-pointing).
+ *
+ * Spec: docs/specs/live-credential-repointing-rebalancer.md §2.10 (the env-token gate — verbatim
+ * contract), §0.b (applicability gate), §2.4 (the status route the named reason surfaces on).
+ *
+ * ── What this is ──
+ * The live credential re-pointing mechanism only works for sessions whose credential comes from
+ * the per-`CLAUDE_CONFIG_DIR` STORE (a swap re-points the store; claude-code re-reads it on the
+ * next 401). A session launched with an env token (`CLAUDE_CODE_OAUTH_TOKEN` / `ANTHROPIC_API_KEY`
+ * set from a non-empty `config.anthropicApiKey`) NEVER reads the store, ignores any swap, and is
+ * INVISIBLE to the mechanism. If such a launch were the norm the entire feature would be inert
+ * (§0.b). This gate REFUSES to run the feature — with a NAMED reason on the status route — whenever
+ * an env-token condition is present, so the mechanism can never silently mis-steer a fleet it does
+ * not actually control.
+ *
+ * ── The load-bearing safety contract (spec §2.10; build-prompt invariants 1, 2) ──
+ *   1. EVALUATES BOTH the config field AND the live running fleet. A config-only check would miss
+ *      the mid-life flip: an operator setting `config.anthropicApiKey` to an OAuth token mid-run
+ *      leaves already-running STORE sessions steerable while new ENV spawns are silently un-steered
+ *      — a genuinely mixed fleet a config-only check freezes incoherently. The fleet scan reads the
+ *      durable per-session `credentialSource` flag (recorded at spawn from the IDENTICAL expression
+ *      that selected the env block — single source of truth) so it can detect that mixed state.
+ *   2. THE CONFIG PREDICATE IS "ANY NON-EMPTY anthropicApiKey" (round-3) — NOT only an
+ *      `sk-ant-oat` OAuth token. The code's launch predicate is binary: `sk-ant-oat…` sets
+ *      `CLAUDE_CODE_OAUTH_TOKEN`, ANY OTHER non-empty value sets `ANTHROPIC_API_KEY`, and BOTH make
+ *      claude-code ignore the store. So the gate predicate is `(anthropicApiKey ?? '') !== ''`,
+ *      matching the SessionManager `?? ''`-then-non-empty branch exactly.
+ *   3. NAMED, CATEGORICAL REASON. The refusal reason is a category string (never a credential), but
+ *      the host still routes it through `CredentialAuditEmit.scrub` (Step 7) before any surface,
+ *      consistent with the §2.9 chokepoint.
+ *
+ * This module performs NO IO and NO credential reads. It is a pure evaluator over an injected
+ * config-key getter + an injected session lister, so it is fully unit-testable.
+ */
+/**
+ * Evaluates the §2.10 env-token precondition over BOTH the config field AND the live fleet.
+ *
+ * Construct ONE per process and call `evaluate()` at enable-time AND per-pass. The CONFIG check is
+ * evaluated FIRST (cheapest + the dominant case); the FLEET scan closes the mid-life-flip hole.
+ */
+export class CredentialEnvTokenGate {
+    getAnthropicApiKey;
+    listSessions;
+    constructor(deps) {
+        this.getAnthropicApiKey = deps.getAnthropicApiKey;
+        this.listSessions = deps.listSessions;
+    }
+    /**
+     * The §2.10 verdict. Refuses when:
+     *   (a) `config.anthropicApiKey` is non-empty (ANY value — OAuth or API key); OR
+     *   (b) any RUNNING claude-code session's `credentialSource` is `'env'` (the live-fleet path that
+     *       closes the mid-life flip). `credentialSource` undefined on a legacy/non-claude record is
+     *       treated as `'store'` (the safe, non-refusing direction — only an explicit `'env'` refuses).
+     * Permits (refused:false) only when the config field is empty AND every running claude-code
+     * session reads the store.
+     */
+    evaluate() {
+        // (a) Config field — the dominant case, checked first. `?? ''`-then-non-empty mirrors the
+        // SessionManager launch predicate exactly: any non-empty value (OAuth OR API key) bypasses
+        // the store.
+        const key = this.getAnthropicApiKey() ?? '';
+        if (key !== '') {
+            return {
+                refused: true,
+                reason: 'config-anthropic-api-key-set',
+                detail: 'credential re-pointing refused: config.anthropicApiKey is set, so sessions launch with ' +
+                    'an env token and bypass the per-CLAUDE_CONFIG_DIR store the mechanism steers (§0.b).',
+                envSessionCount: 0,
+            };
+        }
+        // (b) Live fleet — closes the mid-life flip. Count RUNNING claude-code sessions whose durable
+        // provenance flag is explicitly 'env'. Undefined ⇒ 'store' (safe direction).
+        const envSessions = this.listSessions().filter((s) => s.status === 'running' &&
+            s.framework === 'claude-code' &&
+            s.credentialSource === 'env');
+        if (envSessions.length > 0) {
+            return {
+                refused: true,
+                reason: 'env-token-session-in-fleet',
+                detail: `credential re-pointing refused: ${envSessions.length} running claude-code session(s) ` +
+                    'launched with an env token (store-bypassing) per the durable per-session provenance ' +
+                    'flag — a config field flipped mid-run would otherwise leave a mixed fleet steered ' +
+                    'incoherently (§2.10).',
+                envSessionCount: envSessions.length,
+            };
+        }
+        // Permitted: config empty + all-store fleet (the §0.b "alive" case for THIS deployment).
+        return { refused: false, envSessionCount: 0 };
+    }
+    /**
+     * True iff a given session should still feed `tenantOf(slot)` slot-attribution into usage records.
+     * On a §2.10 refusal the balancer STOPS feeding attribution for env-token sessions so an env
+     * session's usage is never mis-attributed to a slot tenant (spec §2.10 requirement 3). A session
+     * with `credentialSource: 'env'` never reads the store, so its usage does not belong to any slot
+     * tenant — it is attributed to its own account directly (enrollment-home behavior).
+     */
+    static shouldAttributeSlotTenant(session) {
+        return session.credentialSource !== 'env';
+    }
+}
+//# sourceMappingURL=CredentialEnvTokenGate.js.map

package/dist/core/CredentialEnvTokenGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialEnvTokenGate.js","sourceRoot":"","sources":["../../src/core/CredentialEnvTokenGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAyCH;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAChB,kBAAkB,CAA2B;IAC7C,YAAY,CAA+B;IAE5D,YAAY,IAAgC;QAC1C,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ;QACN,0FAA0F;QAC1F,2FAA2F;QAC3F,aAAa;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;QAC5C,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,8BAA8B;gBACtC,MAAM,EACJ,yFAAyF;oBACzF,sFAAsF;gBACxF,eAAe,EAAE,CAAC;aACnB,CAAC;QACJ,CAAC;QAED,8FAA8F;QAC9F,6EAA6E;QAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAC5C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAC,SAAS,KAAK,aAAa;YAC7B,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAC/B,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,4BAA4B;gBACpC,MAAM,EACJ,mCAAmC,WAAW,CAAC,MAAM,kCAAkC;oBACvF,sFAAsF;oBACtF,oFAAoF;oBACpF,uBAAuB;gBACzB,eAAe,EAAE,WAAW,CAAC,MAAM;aACpC,CAAC;QACJ,CAAC;QAED,yFAAyF;QACzF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAChD,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,yBAAyB,CAAC,OAA0C;QACzE,OAAO,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC;IAC5C,CAAC;CACF"}

package/dist/core/PostUpdateMigrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAwCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAyBjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAYnF;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,kBAAkB;IAO1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,IAAI,eAAe;IAuE1B,OAAO,CAAC,gCAAgC;IAwCxC,OAAO,CAAC,8BAA8B;IAoFtC,OAAO,CAAC,yCAAyC;IA8DjD,OAAO,CAAC,0BAA0B;IAsFlC,OAAO,CAAC,wBAAwB;IAiFhC,OAAO,CAAC,sCAAsC;IAmE9C;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,uCAAuC;IAqC/C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAmFlC,OAAO,CAAC,0BAA0B;IAmDlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kCAAkC;IAwH1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,kCAAkC;IA8C1C;;;;;;;;OAQG;IACH,OAAO,CAAC,kCAAkC;IA2B1C,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IA+CpD;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA0BzC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oCAAoC;IAmB5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yCAAyC;IAWjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,kCAAkC;IAW1C,OAAO,CAAC,yBAAyB;IA6FjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAoElC,OAAO,CAAC,oBAAoB;IAuH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,2CAA2C;IAuBnD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,kCAAkC;IAuB1C;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mCAAmC;IAmK3C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkQpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAyIhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IAiElC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAmjFvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IAuN1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAmLtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,yCAAyC;IAyDjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqWvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAsGrB;;;OAGG;IACH;;;OAGG;IACH;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wBAAwB;IAmEhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,6BAA6B;IAwDrC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsDjC,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAuBxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACH,OAAO,CAAC,qBAAqB;IAsG7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,uBAAuB,GAAG,MAAM;IA0BxiB,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,2BAA2B;IAmFnC,OAAO,CAAC,mBAAmB;IAuf3B,OAAO,CAAC,wBAAwB;IA6JhC,OAAO,CAAC,2BAA2B;IAwEnC,OAAO,CAAC,yBAAyB;IA8IjC,OAAO,CAAC,2BAA2B;IAqKnC,OAAO,CAAC,qBAAqB;IAyU7B,OAAO,CAAC,uBAAuB;IAmS/B,OAAO,CAAC,oBAAoB;IAgG5B,OAAO,CAAC,qBAAqB;IA8H7B,OAAO,CAAC,2BAA2B;IAoHnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA+MpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CA2C1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IAwD/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,8BAA8B;IA6HtC,OAAO,CAAC,+BAA+B;IAuKvC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAqO7B,OAAO,CAAC,qBAAqB;IAwI7B,OAAO,CAAC,qBAAqB;IA2O7B,OAAO,CAAC,6BAA6B;IAkLrC,OAAO,CAAC,0BAA0B;IAiClC,OAAO,CAAC,0BAA0B;IA8ElC,OAAO,CAAC,0BAA0B;IA8IlC,OAAO,CAAC,gBAAgB;IAmJxB,OAAO,CAAC,6BAA6B;CAoCtC"}
+{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAwCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAyBjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAYnF;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,kBAAkB;IAO1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,IAAI,eAAe;IAuE1B,OAAO,CAAC,gCAAgC;IAwCxC,OAAO,CAAC,8BAA8B;IAoFtC,OAAO,CAAC,yCAAyC;IA8DjD,OAAO,CAAC,0BAA0B;IAsFlC,OAAO,CAAC,wBAAwB;IAiFhC,OAAO,CAAC,sCAAsC;IAmE9C;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,uCAAuC;IAqC/C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAmFlC,OAAO,CAAC,0BAA0B;IAmDlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kCAAkC;IAwH1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,kCAAkC;IA8C1C;;;;;;;;OAQG;IACH,OAAO,CAAC,kCAAkC;IA2B1C,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IA+CpD;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA0BzC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oCAAoC;IAmB5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yCAAyC;IAWjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,kCAAkC;IAW1C,OAAO,CAAC,yBAAyB;IA6FjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAoElC,OAAO,CAAC,oBAAoB;IAuH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,2CAA2C;IAuBnD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,kCAAkC;IAuB1C;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mCAAmC;IAmK3C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkQpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAyIhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IAiElC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAgkFvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IAuN1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAmLtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,yCAAyC;IAyDjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqWvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAsGrB;;;OAGG;IACH;;;OAGG;IACH;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wBAAwB;IAmEhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,6BAA6B;IAwDrC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsDjC,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAuBxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACH,OAAO,CAAC,qBAAqB;IAsG7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,uBAAuB,GAAG,MAAM;IA0BxiB,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,2BAA2B;IAmFnC,OAAO,CAAC,mBAAmB;IAuf3B,OAAO,CAAC,wBAAwB;IA6JhC,OAAO,CAAC,2BAA2B;IAwEnC,OAAO,CAAC,yBAAyB;IA8IjC,OAAO,CAAC,2BAA2B;IAqKnC,OAAO,CAAC,qBAAqB;IAyU7B,OAAO,CAAC,uBAAuB;IAmS/B,OAAO,CAAC,oBAAoB;IAgG5B,OAAO,CAAC,qBAAqB;IA8H7B,OAAO,CAAC,2BAA2B;IAoHnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA+MpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CA2C1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IAwD/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,8BAA8B;IA6HtC,OAAO,CAAC,+BAA+B;IAuKvC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAqO7B,OAAO,CAAC,qBAAqB;IAwI7B,OAAO,CAAC,qBAAqB;IA2O7B,OAAO,CAAC,6BAA6B;IAkLrC,OAAO,CAAC,0BAA0B;IAiClC,OAAO,CAAC,0BAA0B;IA8ElC,OAAO,CAAC,0BAA0B;IA8IlC,OAAO,CAAC,gBAAgB;IAmJxB,OAAO,CAAC,6BAA6B;CAoCtC"}

package/dist/core/PostUpdateMigrator.js

@@ -5864,6 +5864,18 @@ Create worktrees for collaborator repos with \`instar worktree create <branch>\`
             patched = true;
             result.upgraded.push('CLAUDE.md: added Honest progress messaging section');
         }
+        // Live Credential Re-pointing (WS5.2, CMT-1372) — existing agents learn the
+        // /credentials/* manual levers + the zero-touch default-flip proactive trigger
+        // ("flip my default account" → set-default; "which account is this slot on?"
+        // → GET /credentials/locations). Body mirrors generateClaudeMd() (Agent
+        // Awareness Standard). Content-sniffed on the distinctive section header so the
+        // migration is idempotent and skips template-generated CLAUDE.md files. Harmless
+        // on agents where the feature is dark (every lever 503s).
+        if (!content.includes('Live Credential Re-pointing (move a pool account')) {
+            content += `\n**Live Credential Re-pointing (move a pool account's login between config-home "slots" without restarting — WS5.2)** — Beyond the subscription pool's session-MOVING, this MOVES the credential itself: it exchanges which pool account's OAuth login sits in which config-home "slot" via a staged keychain swap, so the sessions already reading that slot pick up the new account on their NEXT API call — no restart, no re-login, nothing on your screen. The unit shuffled is the CREDENTIAL (always a clean SWAP between two slots, never a copy — one home per credential), verified by identity after every move (quarantine-never-repair when the identity oracle can't confirm). **Ships DARK** behind \`subscriptionPool.credentialRepointing.enabled\` — every lever 503s/no-ops while disabled (byte-for-byte today's behavior); going live needs a deliberate \`enabled:true\` + \`dryRun:false\` flip, and that ON decision is yours, separate from any build.\n- **Which account is in which slot?** (Registry First — read it, never guess) \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/credentials/locations\` → the ledger census (slot ↔ account, since, lastVerifiedAt, quarantine state, journal tail, mode).\n- **Flip your default account (zero-touch)** — \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/credentials/set-default -H 'Content-Type: application/json' -d '{"toAccountId":"<account>"}'\` swaps which account \`~/.claude\` serves, with no restart of the session you're talking to.\n- **Swap two slots' credentials live** — \`POST /credentials/swap\` \`{"slotA":"<home>","slotB":"<home>"}\` (the staged §2.3 exchange). **Restore the enrollment layout** — \`POST /credentials/restore-enrollment\` (parks any identity-incoherent blob one-directionally; never exchanges it into a healthy slot). All levers are DETECTIVE controls — operator-notified + audited + param-validated + per-pair cooldown + a force budget on \`force:true\`. No token material ever exits any \`/credentials/*\` surface (the single CredentialAuditEmit scrub chokepoint).\n- **The autonomous balancer surface** — \`GET /credentials/rebalancer\` (the use-it-or-lose-it drainer is Increment B; this surfaces the env-token applicability gate's verdict + WHY re-pointing would refuse, when enabled).\n- **When to use** (PROACTIVE — these are the triggers): "flip my default account to X" / "make X my default" → \`POST /credentials/set-default\`; "which account is this session/slot on?" / "where does ~/.claude point?" → \`GET /credentials/locations\` (read it, don't infer from \`claude auth status\` — that reads a metadata file, not the live credential). Single-account agents are a no-op. (Spec: \`docs/specs/live-credential-repointing-rebalancer.md\`.)\n`;
+            patched = true;
+            result.upgraded.push('CLAUDE.md: added Live Credential Re-pointing awareness section');
+        }
         if (patched) {
             try {
                 fs.writeFileSync(claudeMdPath, content);