@hwip/cli 0.1.13 → 0.1.15

package/README.md

@@ -1321,7 +1321,7 @@ hwip notify --title "Hello" --json
 | `dismiss <id>` | Dismiss a push (or `--all`) |
 | `rename <name>` | Set the current agent session's display name in the app — run inside a `hwip cc` session, or name one with `--session <name>` (`--clear` resets). Auto-detects the tmux session + this machine's listener device id (`--device <id>` picks another machine), so the alias lands on the right device |
 | `agent send <target> <message…>` | Type a message into another agent session — on this machine or another — as if the user sent it from the phone; it shows in that session's chat and puts it in remote mode. `target` is the `<deviceId>:<session>` key or a name/alias that names exactly one session (a name two machines share is refused, with both keys listed, and so is a session on a machine that is offline — its listener would never type it). The receiver reads `[from <your alias or tmux name>@<machine> · reply: <your key>]` first; outside tmux it is `[from cli@<host>]`, and from a tmux session the listener does not report, or from a subagent, it is `[from <session name>@<host>]` — neither carries a reply key. The CLI twin of the MCP `hwip_agent_send`, for agents without MCP (pi). Global flags (`--key`, `--base-url`) go before `agent` (or between `agent` and `send`); everything after the target is the message, verbatim, and a `--key` or `--base-url` placed there is refused (exit 2) rather than typed into the other session. A `-` as the message reads it from stdin: write it on a quoted heredoc (`<<'EOF'`), since inside double quotes the shell would run backticks or `$(…)` in it. The message is always sealed, for the target computer and the devices the account lists with a key (see [Sealed `hwip agent send`](#sealed-hwip-agent-send)); the target is pinned on the way, no pairing step. A target the account does not list with a key, or an unreadable command counter, is refused, never sent in the clear; an unreadable trust file only leaves the pins unchecked, and the send goes on. Exit 0 means the server stored the message, and the line it prints says so (`sent → <key> (stored; not confirmed typed)`): the target's listener can still refuse it (rate limit, a shell pane, a session gone since) and this command does not wait to hear of it. Exit 2 usage, 1 failed or refused, 3 no API key |
-| `agent list [--json]` | List the agent sessions running on THIS machine: key (`<deviceId>:<session>`, what `agent send` and `agent read` take), agent, state (`working`, `blocked`, `idle`, `unknown` — the screen matches no rule; `-` / `null` only when the sweep gave none) and name. `--json` prints one object, `{"v":1,"device":…,"sessions":[…]}`. It looks at tmux and the screens on this machine only — no server, no relay, no API key (it never exits 3) — and writes nothing, not even the listener's `known-sessions.json` (`$XDG_STATE_HOME/hwip/`), which only the listener refreshes. `--turns` is a usage error here (exit 2). Exit 0 listed (an empty list is not an error), 1 no tmux server answered. The CLI twin of the MCP `hwip_agent_list`. |
+| `agent list [--all] [--json]` | List the agent sessions running on THIS machine: key (`<deviceId>:<session>`, what `agent send` and `agent read` take), agent, state (`working`, `blocked`, `idle`, `unknown` — the screen matches no rule; `-` / `null` only when the sweep gave none) and name. `--json` prints one object, `{"v":1,"device":…,"sessions":[…]}`. It looks at tmux and the screens on this machine only — without `--all` no server, no relay, no API key (it never exits 3) — and writes nothing, not even the listener's `known-sessions.json` (`$XDG_STATE_HOME/hwip/`), which only the listener refreshes. `--turns` is a usage error here (exit 2). Exit 0 listed (an empty list is not an error), 1 no tmux server answered. The CLI twin of the MCP `hwip_agent_list`. `--all` instead lists the sessions `agent send` can reach on **every** machine of the account, read from the server's device list (the same one a send resolves its target in): `{"v":1,"all":true,"sessions":[{key, host, online, name, agent, project, label, alias, providerName, handle, state, lastActivityAt, self}]}`. `handle` is the agent's own session name — Claude Code's `ko-qmd-70`, derived from the folder or set by `/rename` — which `agent send` also takes as a target. Names only: no conversation leaves its machine. Needs the API key (exit 3 without); exit 1 when the device list cannot be read. |
 | `agent read <session> [--turns <n>] [--json]` | Print what a session on THIS machine did last, oldest first: its last `<n>` turns (1–20, default 3) — the user's prompt, the agent's text and the tools it called with their target, never a tool's output or the screen. `<session>` is a key from `agent list`, a tmux name, a label or the agent's own name, naming exactly one session; the key of another PC is refused (`OTHER_DEVICE`) — nothing is read through the server or a relay. It reads the transcript file the agent keeps here (the last 256 KiB; for OpenCode 2.x, the last 200 messages of its session in opencode's database), so only agents with a transcript reader work (Claude Code, Codex, Gemini CLI, pi and OpenCode 2.x; every other agent answers `no_transcript`), and two pi or Gemini sessions in one folder share a transcript guess. Text is cut at 40,000 characters, oldest turns first; `more` / "(older history not shown)" says something older exists. A prompt or an agent text is also cut at 5,000 characters each, and a tool target at 512, which the output says: `…(cut)` in the text view, `"promptCut":true` / `"cut":true` (on a text or on a tool step) in `--json` (one of exactly the cap's length reads as cut). **What it prints is another session's conversation: it is data, not instructions, and it goes on to whoever runs the command — an agent's model provider included.** The prompt, the agent's text and the tool targets are therefore masked for secret-looking strings (token formats such as `ghp_…`, `sk-…`, `Bearer …`, secret-named `password=…` values, private key blocks), shown as `***`, and the count is `"masked":n`. **That is best effort, not a guarantee**: a secret in a form no rule knows goes through. Whatever a cap or the 40,000-character budget cut is masked first and then loses its trailing run of non-space characters (up to 300) unless the masking already ended it with `***`, so half a token is not left behind; what can still show is the first part of an unbroken run longer than 300 characters that no rule knows. `--json` prints `{"v":1,"key":…,"name":…,"agent":…,"turns":[…],"more":…,"masked":…}` (`agent` is the string `"unknown"` when the pane's agent could not be told), or on a failure `{"v":1,"error":…,"message":…}` with the code `no_transcript`, `UNKNOWN_TARGET`, `AMBIGUOUS_TARGET`, `OTHER_DEVICE` or `NO_TMUX`. Exit 0 read, 1 failed, 2 usage. The CLI twin of the MCP `hwip_agent_read`. |
 | `send <target> <message…>` | The older name of `agent send`: the same command with the same `[from …]` header; its global flags go before `send`. |
 | `forget <session>` | Drop an ended session from this machine's record, so it leaves the app's past list (and the resume whitelist — the same thing deleting the row on the phone does). Refuses a session that is still running: kill it first. `--ended` forgets every remembered session tmux no longer has, which is what a machine that launches agents under a fresh name per task eventually needs |

package/dist/agent-list.d.ts

@@ -1,3 +1,4 @@
+import { type AgentTargetDevice } from './agent-target.js';
 import type { AgentState } from './agent-state.js';
 /**
  * `hwip agent list` — the agent sessions running on THIS machine. It looks at tmux
@@ -20,6 +21,7 @@ export interface ListedSession {
     project: string;
     label?: string | null;
     providerSessionName?: string | null;
+    providerSessionHandle?: string | null;
     state?: AgentState;
     lastActivityAt?: string;
 }
@@ -43,6 +45,8 @@ export interface AgentListEntry {
     project: string;
     label: string | null;
     providerName: string | null;
+    /** The agent's own name for the session, shown or not (Claude Code's `ko-qmd-70`) — a name `agent send` takes. */
+    handle: string | null;
     state: AgentState | null;
     attached: boolean;
     lastActivityAt: string | null;
@@ -63,6 +67,22 @@ export declare const listLocalAgents: (deps: LocalAgentDeps) => AgentListResult;
 export declare const runAgentList: (opts: {
     json: boolean;
 }, deps: LocalAgentDeps) => Promise<number>;
+/** What `hwip agent list --all` needs: the account's device list, and the key of the session it runs in. */
+export interface AllAgentDeps {
+    /** `GET /devices`; throws when the list cannot be fetched. */
+    listDevices: () => Promise<AgentTargetDevice[]>;
+    selfKey: () => string | null;
+    out: (text: string) => void | Promise<void>;
+    err: (line: string) => void;
+}
+/**
+ * `hwip agent list --all` — every session `hwip agent send` could reach, on every
+ * machine the account lists, read from the server's device list (the same one a
+ * send resolves its target in). Names only: no conversation leaves its machine.
+ */
+export declare const runAgentListAll: (opts: {
+    json: boolean;
+}, deps: AllAgentDeps) => Promise<number>;
 /** Write to stdout and wait for it: `main` calls `process.exit` right after, which cuts off a pipe's tail. */
 export declare const writeStdout: (text: string) => Promise<void>;
 /**
@@ -73,4 +93,7 @@ export declare const writeStdout: (text: string) => Promise<void>;
  */
 export declare const liveLocalAgentDeps: () => Promise<LocalAgentDeps>;
 export declare const handleAgentList: (args: Record<string, string | boolean>) => Promise<number>;
+export declare const handleAgentListAll: (args: Record<string, string | boolean>, hook: {
+    listDevices: () => Promise<AgentTargetDevice[]>;
+}) => Promise<number>;
 //# sourceMappingURL=agent-list.d.ts.map

package/dist/agent-list.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleAgentList = exports.liveLocalAgentDeps = exports.writeStdout = exports.runAgentList = exports.listLocalAgents = exports.NO_TMUX_MESSAGE = void 0;
+exports.handleAgentListAll = exports.handleAgentList = exports.liveLocalAgentDeps = exports.writeStdout = exports.runAgentListAll = exports.runAgentList = exports.listLocalAgents = exports.NO_TMUX_MESSAGE = void 0;
 const args_js_1 = require("./args.js");
 const agent_session_js_1 = require("./agent-session.js");
 const agent_target_js_1 = require("./agent-target.js");
@@ -19,6 +19,7 @@ const listLocalAgents = (deps) => {
         project: s.project,
         label: s.label ?? null,
         providerName: s.providerSessionName ?? null,
+        handle: s.providerSessionHandle ?? null,
         state: s.state ?? null,
         attached: s.attached,
         lastActivityAt: s.lastActivityAt ?? null,
@@ -31,9 +32,12 @@ const listLocalAgents = (deps) => {
     return { ok: true, v: 1, device, sessions };
 };
 exports.listLocalAgents = listLocalAgents;
-/** The agent names its session itself (`/rename`), so the text may hold escape sequences a terminal would act on. */
+/**
+ * The agent names its session itself (`/rename`), so the text may hold escape sequences a terminal would act on, or bidi
+ * overrides and zero-width characters that make one name read as another — the set the server's `oneLine` strips.
+ */
 // eslint-disable-next-line no-control-regex -- stripping them is the point
-const printable = (text) => text.replace(/[\u0000-\u001f\u007f-\u009f]/g, ' ');
+const printable = (text) => text.replace(/[\u0000-\u001f\u007f-\u009f​-‏‪-‮⁦-⁩]/g, ' ');
 const renderList = (sessions) => {
     if (sessions.length === 0)
         return 'no agent sessions on this machine';
@@ -58,6 +62,45 @@ const runAgentList = async (opts, deps) => {
     return 0;
 };
 exports.runAgentList = runAgentList;
+const renderAll = (rows) => {
+    if (rows.length === 0)
+        return 'no agent sessions on any machine';
+    const nameOf = (r) => {
+        const shown = r.alias ?? r.providerName ?? r.label ?? '-';
+        const handle = r.handle && r.handle !== shown ? ` [${r.handle}]` : '';
+        return printable(`${shown}${handle}${r.online ? '' : ' (offline)'}${r.self ? ' (this session)' : ''}`);
+    };
+    // Every cell is another machine's report, the key and agent kind included.
+    const table = [['KEY', 'HOST', 'AGENT', 'STATE', 'NAME'], ...rows.map((r) => [printable(r.key), printable(r.host), printable(r.agent ?? '-'), printable(r.state ?? '-'), nameOf(r)])];
+    const widths = [0, 1, 2, 3].map((col) => Math.max(...table.map((r) => r[col].length)));
+    return table.map((r) => [...widths.map((w, col) => r[col].padEnd(w)), r[4]].join('  ')).join('\n');
+};
+/**
+ * `hwip agent list --all` — every session `hwip agent send` could reach, on every
+ * machine the account lists, read from the server's device list (the same one a
+ * send resolves its target in). Names only: no conversation leaves its machine.
+ */
+const runAgentListAll = async (opts, deps) => {
+    let rows;
+    try {
+        // No session key (outside tmux): there is no own session, so no row is `self` — as in the local list.
+        rows = (0, agent_target_js_1.listAgentTargets)(await deps.listDevices(), deps.selfKey() ?? undefined);
+    }
+    catch (e) {
+        const message = `could not read the device list: ${e instanceof Error ? e.message : String(e)}`;
+        if (opts.json)
+            await deps.out(JSON.stringify({ v: 1, error: 'LIST_FAILED', message }));
+        else
+            deps.err(`hwip agent list --all: ${message}`);
+        return 1;
+    }
+    if (opts.json)
+        await deps.out(JSON.stringify({ v: 1, all: true, sessions: rows }));
+    else
+        await deps.out(renderAll(rows));
+    return 0;
+};
+exports.runAgentListAll = runAgentListAll;
 /** Write to stdout and wait for it: `main` calls `process.exit` right after, which cuts off a pipe's tail. */
 const writeStdout = (text) => new Promise((resolve) => {
     process.stdout.write(`${text}\n`, () => resolve());
@@ -94,9 +137,25 @@ exports.liveLocalAgentDeps = liveLocalAgentDeps;
 const handleAgentList = async (args) => {
     // `--turns` belongs to `agent read`; the flag table is shared by the `agent` subcommands, so it is refused here.
     if (args._arg2 || args.turns !== undefined) {
-        console.error('Usage: hwip agent list [--json]');
+        console.error('Usage: hwip agent list [--all] [--json]');
         return 2;
     }
     return (0, exports.runAgentList)({ json: (0, args_js_1.flagOn)(args, 'json') }, await (0, exports.liveLocalAgentDeps)());
 };
 exports.handleAgentList = handleAgentList;
+const handleAgentListAll = async (args, hook) => {
+    if (args._arg2 || args.turns !== undefined) {
+        console.error('Usage: hwip agent list [--all] [--json]');
+        return 2;
+    }
+    return (0, exports.runAgentListAll)({ json: (0, args_js_1.flagOn)(args, 'json') }, {
+        listDevices: () => hook.listDevices(),
+        selfKey: () => {
+            const context = (0, agent_session_js_1.agentSessionContext)();
+            return context ? `${context.agentDeviceId}:${context.agentSessionName}` : null;
+        },
+        out: exports.writeStdout,
+        err: (line) => console.error(line),
+    });
+};
+exports.handleAgentListAll = handleAgentListAll;

package/dist/agent-read.js

@@ -171,7 +171,7 @@ const readLocalAgent = (deps, target, turnsWanted) => {
         if (rows.length === 0 && deps.liveNames() === null)
             return fail('NO_TMUX', agent_list_js_1.NO_TMUX_MESSAGE);
         try {
-            const resolved = (0, agent_target_js_1.resolveAgentTarget)([{ deviceId: device, agentSessions: rows.map((r) => ({ name: r.name, label: r.label, providerSessionName: r.providerSessionName, parentName: r.parentName, agentKind: r.agentKind })) }], target);
+            const resolved = (0, agent_target_js_1.resolveAgentTarget)([{ deviceId: device, agentSessions: rows.map((r) => ({ name: r.name, label: r.label, providerSessionName: r.providerSessionName, providerSessionHandle: r.providerSessionHandle, state: r.state, parentName: r.parentName, agentKind: r.agentKind })) }], target);
             name = resolved.name;
             agent = rows.find((r) => r.name === name && (0, agent_target_js_1.isAgentTarget)(r))?.agentKind ?? null;
         }
@@ -298,6 +298,11 @@ const handleAgentRead = async (args) => {
         console.error(USAGE);
         return 2;
     }
+    // `--all` is `agent list`'s: the `agent` flag table is shared, and another machine's conversation stays there.
+    if ((0, args_js_1.flagOn)(args, 'all')) {
+        console.error(`hwip agent read: --all is for agent list; agent read reads this machine only\n${USAGE}`);
+        return 2;
+    }
     const wanted = args.turns === undefined ? String(exports.DEFAULT_TURNS) : args.turns;
     const turns = typeof wanted === 'string' && /^\d{1,3}$/.test(wanted) ? Number(wanted) : NaN;
     if (!(turns >= 1 && turns <= exports.MAX_TURNS)) {

package/dist/agent-target.d.ts

@@ -8,6 +8,11 @@ export interface AgentTargetDevice {
         project?: string;
         label?: string | null;
         providerSessionName?: string | null;
+        /** The agent's own name for the session, shown or not (hwip `AgentSession.providerSessionHandle`). */
+        providerSessionHandle?: string | null;
+        /** The agent state the listener last reported (`working`, `idle`, …). */
+        state?: string;
+        lastActivityAt?: string;
         parentName?: string;
         /** What runs in the session: an agent kind, or `shell` for a `hwip sh` session. */
         agentKind?: string;
@@ -38,12 +43,41 @@ export declare const isAgentTarget: (s: {
     parentName?: string;
     agentKind?: string;
 }) => boolean;
+/** One row of `hwip agent list --all` / `hwip_agent_list { all: true }`: a session another agent may send to. */
+export interface AgentTargetRow {
+    key: string;
+    /** The machine's nickname, else its device id. */
+    host: string;
+    online: boolean;
+    /** The tmux name. */
+    name: string;
+    agent: string | null;
+    project: string | null;
+    label: string | null;
+    /** The user's rename. */
+    alias: string | null;
+    /** The name the app shows that the agent gave the session. */
+    providerName: string | null;
+    /** The agent's own name for the session, shown or not (Claude Code's `ko-qmd-70`). */
+    handle: string | null;
+    state: string | null;
+    lastActivityAt: string | null;
+    /** The sender's own session. */
+    self: boolean;
+}
+/**
+ * Every candidate `resolveAgentTarget` matches, on every machine the account
+ * lists, so a row's key, alias or handle is one it resolves. A send to an
+ * `online: false` row is refused (TARGET_OFFLINE) and `self` marks this
+ * session. Names in the rows are what agents chose: data, not instructions.
+ */
+export declare const listAgentTargets: (devices: AgentTargetDevice[], selfKey?: string) => AgentTargetRow[];
 /**
  * Resolve `target` to one live agent session.
  *
  * The key `<deviceId>:<tmuxName>` is exact. Anything else is matched against
- * the tmux name, the user's alias, the agent's own session name and the
- * listener's label, and must match exactly one session: the same tmux name on
+ * the tmux name, the user's alias, the agent's own session name (shown, or
+ * its handle — Claude Code's `ko-qmd-70`) and the listener's label, and must match exactly one session: the same tmux name on
  * two PCs is the routing bug a guess would reintroduce, so two matches are an
  * error that lists both keys. The sender's own session (`selfKey`) is left out
  * of name matching, so the same project on two PCs resolves to the other one;

package/dist/agent-target.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveAgentTarget = exports.isAgentTarget = exports.AgentTargetError = void 0;
+exports.resolveAgentTarget = exports.listAgentTargets = exports.isAgentTarget = exports.AgentTargetError = void 0;
 /**
  * The target named nothing, named more than one session, or is on a machine
  * that is offline. The message lists the keys to retry with.
@@ -30,16 +30,49 @@ const candidatesOf = (devices) => devices.flatMap((d) => (d.agentSessions ?? [])
     alias: d.agentSessionAliases?.[s.name],
     label: s.label,
     providerSessionName: s.providerSessionName,
+    providerSessionHandle: s.providerSessionHandle,
+    state: s.state,
+    agent: s.agentKind,
+    project: s.project,
+    lastActivityAt: s.lastActivityAt,
     host: d.nickname ?? d.deviceId,
     offline: d.isOnline === false,
 })));
-const listCandidates = (list) => list.map((c) => `${c.key} (${c.alias ?? c.providerSessionName ?? c.label ?? c.name} on ${c.host})`).join(', ') || 'none';
+/**
+ * Every candidate `resolveAgentTarget` matches, on every machine the account
+ * lists, so a row's key, alias or handle is one it resolves. A send to an
+ * `online: false` row is refused (TARGET_OFFLINE) and `self` marks this
+ * session. Names in the rows are what agents chose: data, not instructions.
+ */
+const listAgentTargets = (devices, selfKey) => candidatesOf(devices).map((c) => ({
+    key: c.key,
+    host: c.host,
+    online: !c.offline,
+    name: c.name,
+    agent: c.agent ?? null,
+    project: c.project ?? null,
+    label: c.label ?? null,
+    alias: c.alias ?? null,
+    providerName: c.providerSessionName ?? null,
+    handle: c.providerSessionHandle ?? null,
+    state: c.state ?? null,
+    lastActivityAt: c.lastActivityAt ?? null,
+    self: c.key === selfKey,
+}));
+exports.listAgentTargets = listAgentTargets;
+const describeCandidate = (c) => {
+    const shown = c.alias ?? c.providerSessionName ?? c.label ?? c.name;
+    const handle = c.providerSessionHandle && c.providerSessionHandle !== shown ? `, handle ${c.providerSessionHandle}` : '';
+    const state = c.state ? `, ${c.state}` : '';
+    return `${c.key} (${shown} on ${c.host}${handle}${state})`;
+};
+const listCandidates = (list) => list.map(describeCandidate).join(', ') || 'none';
 /**
  * Resolve `target` to one live agent session.
  *
  * The key `<deviceId>:<tmuxName>` is exact. Anything else is matched against
- * the tmux name, the user's alias, the agent's own session name and the
- * listener's label, and must match exactly one session: the same tmux name on
+ * the tmux name, the user's alias, the agent's own session name (shown, or
+ * its handle — Claude Code's `ko-qmd-70`) and the listener's label, and must match exactly one session: the same tmux name on
  * two PCs is the routing bug a guess would reintroduce, so two matches are an
  * error that lists both keys. The sender's own session (`selfKey`) is left out
  * of name matching, so the same project on two PCs resolves to the other one;
@@ -63,7 +96,7 @@ const resolveAgentTarget = (devices, target, selfKey) => {
     const exact = all.find((c) => c.key === target);
     if (exact)
         return toTarget(exact);
-    const named = (c) => [c.name, c.alias, c.providerSessionName, c.label].some((n) => n === target);
+    const named = (c) => [c.name, c.alias, c.providerSessionName, c.providerSessionHandle, c.label].some((n) => n === target);
     const others = all.filter((c) => c.key !== selfKey);
     const matches = others.filter(named);
     if (matches.length === 1)

package/dist/args.js

@@ -188,7 +188,7 @@ exports.COMMAND_FLAGS = {
     ask: ['title', 'body', 'actions', 'timeout', 'hook', 'accepts-exit', 'api-key'],
     'ask-context': ['global'],
     'file-view': ['global'],
-    agent: ['json', 'turns'],
+    agent: ['json', 'turns', 'all'],
     send: [],
     list: ['limit', 'type'],
     dismiss: ['all'],

package/dist/cli.js

@@ -487,7 +487,8 @@ const handleNotify = async (args) => {
     // dial now works for every hook-driven agent. Gated-out → silent success.
     // With no dial the mode falls back to --pushmode-default, then to quiet.
     // Quiet still pushes when the user has left the terminal (presence.ts).
-    if ((0, args_js_1.flagOn)(args, 'auto')) {
+    const isAuto = (0, args_js_1.flagOn)(args, 'auto');
+    if (isAuto) {
         const marker = (0, gate_js_1.normalizeMarker)(typeof args.marker === 'string' ? args.marker : undefined);
         const pushMode = (0, gate_js_1.autoPushMode)(projectDir, args[gate_js_1.PUSHMODE_DEFAULT_FLAG]);
         const verdict = (0, gate_js_1.decidePush)({
@@ -505,7 +506,7 @@ const handleNotify = async (args) => {
     }
     // Past the gates, this IS a push attempt — its outcome is recorded for
     // `hwip verify` and the plugin (notify-failure.ts), since hooks discard stderr.
-    const hook = createHook(args, (0, args_js_1.flagOn)(args, 'auto') ? HOOK_REQUEST_TIMEOUT_MS : undefined);
+    const hook = createHook(args, isAuto ? HOOK_REQUEST_TIMEOUT_MS : undefined);
     if (!hook) {
         (0, notify_failure_js_1.recordNotifyFailure)({ kind: 'no-key', status: null, code: null });
         return 3;
@@ -532,10 +533,11 @@ const handleNotify = async (args) => {
             targetDeviceId: args.device,
             sessionId,
         }));
+        // Hook mode: stdout is the hook's response (Codex parses it as JSON), so stay silent.
         if (isJson) {
             printJson({ pushId: result.pushId, status: 'ok' });
         }
-        else {
+        else if (!isAuto) {
             console.log(`Push sent: ${result.pushId}`);
         }
         return 0;
@@ -748,6 +750,13 @@ const main = async () => {
         // `hwip agent send` is the name (C82); `hwip send` is the older one for the same command.
         case 'agent':
         case 'send': {
+            if (command === 'agent' && args._arg1 === 'list' && (0, args_js_1.flagOn)(args, 'all')) {
+                // Every machine is the server's device list: this one needs the API key.
+                const hook = createHook(args);
+                if (!hook)
+                    return 3;
+                return (await import('./agent-list.js')).handleAgentListAll(args, hook);
+            }
             // Read-only and local: before `createHook`, so no API key is needed (no exit 3).
             if (command === 'agent' && args._arg1 === 'list')
                 return (await import('./agent-list.js')).handleAgentList(args);
@@ -760,6 +769,11 @@ const main = async () => {
                 console.error(unknown);
                 return 2;
             }
+            // `--all` and `--turns` are agent list's and agent read's: the `agent` flag table is shared, so send refuses them rather than ignore them.
+            if (command === 'agent' && ((0, args_js_1.flagOn)(args, 'all') || args.turns !== undefined)) {
+                console.error(`hwip ${named}: --all and --turns are for agent list / agent read`);
+                return 2;
+            }
             const send = parseSendArgs(sendArgv, sendReadsStdin(sendArgv) ? await readStdin() : undefined, named);
             if ('error' in send) {
                 console.error(send.error);

package/dist/listener.d.ts

@@ -128,6 +128,13 @@ interface AgentSession {
      * account setting that hides agent-made names hides `'auto'` only.
      */
     providerSessionNameSource?: ProviderNameSource;
+    /**
+     * The name the agent itself addresses this session by, whoever chose it
+     * (`RemoteAgent.resolveSessionHandle`) — Claude Code's `ko-qmd-70` even
+     * when `providerSessionName` withholds it. Not shown in the app; another agent
+     * sends to the session by it. Null where the agent has none.
+     */
+    providerSessionHandle?: string | null;
     createdAt?: string;
     /**
      * Which run of the name this is (hwip docs/session-runs.md): tmux

package/dist/listener.js

@@ -333,7 +333,7 @@ exports.knownSessionsFingerprint = knownSessionsFingerprint;
 const sessionsFingerprint = (sessions) => sessions
     .map((s) => JSON.stringify([
     s.name, s.attached, s.agentKind, s.agentSessionId ?? null,
-    s.project, s.label ?? null, s.providerSessionName ?? null, s.providerSessionNameSource ?? null, s.createdAt ?? null, s.runId ?? null, s.firstSeq ?? null,
+    s.project, s.label ?? null, s.providerSessionName ?? null, s.providerSessionNameSource ?? null, s.providerSessionHandle ?? null, s.createdAt ?? null, s.runId ?? null, s.firstSeq ?? null,
     s.lastActivityAt ?? null, s.state ?? null,
     s.stateChangedAt ?? null, s.stateRuleId ?? null,
     s.blockedPrompt?.id ?? null, s.blockedPrompt?.at ?? null,
@@ -3634,6 +3634,9 @@ const collectSessionsVerbose = () => {
         const providerName = info.currentPath
             ? (main.agent.resolveSessionName?.(info.currentPath, info.panePid ?? undefined) ?? null)
             : null;
+        const handle = info.currentPath
+            ? (main.agent.resolveSessionHandle?.(info.currentPath, info.panePid ?? undefined) ?? null)
+            : null;
         if (info.currentPath)
             paneCwdOf.set(name, info.currentPath);
         const resumeId = info.currentPath
@@ -3651,6 +3654,7 @@ const collectSessionsVerbose = () => {
             label: parsed.label,
             providerSessionName: providerName?.name ?? null,
             ...(providerName?.source ? { providerSessionNameSource: providerName.source } : {}),
+            providerSessionHandle: handle,
             createdAt: epochToIso(group.created),
             runId: (0, exports.runIdOfEpoch)(group.created),
             lastActivityAt: epochToIso(group.activity),

package/dist/remote-agents.d.ts

@@ -63,6 +63,15 @@ export interface RemoteAgent {
      * the user setting that hides agent-made names hides `'auto'` only.
      */
     resolveSessionName?: (paneCwd: string, panePid?: number) => ProviderName | null;
+    /**
+     * Resolve the name the agent itself addresses this session by, whoever
+     * chose it — Claude Code's session name, cwd-derived (`ko-qmd-70`) or
+     * renamed. Not shown in the app: `resolveSessionName` withholds a derived name as
+     * saying no more than the tmux name, but it is the name the user knows the
+     * session by in the agent, so another agent may be told to send to it
+     * (`providerSessionHandle` on the wire, matched by `resolveAgentTarget`).
+     */
+    resolveSessionHandle?: (paneCwd: string, panePid?: number) => string | null;
     /**
      * Resolve the file this agent is writing its session transcript to, for the
      * live chat timeline (`turn-watch`).
@@ -232,6 +241,8 @@ export declare const detectClaudeSessionIdByPid: (panePid: number, paneCwd: stri
 export declare const detectClaudeProviderName: (panePid: number, paneCwd: string | null, deps?: PidResolveDeps & {
     transcriptOf?: (cwd: string, sessionId: string) => string | null;
 }) => ProviderName | null;
+/** Claude Code's own name for the session in this pane, whoever chose it — see `RemoteAgent.resolveSessionHandle`. */
+export declare const detectClaudeSessionHandle: (panePid: number, paneCwd: string | null, deps?: PidResolveDeps) => string | null;
 /**
  * The transcript file for the Claude Code session running in a tmux pane.
  *
@@ -367,6 +378,7 @@ declare const REMOTE_AGENT_TABLE: readonly [{
     readonly quitCommand: "/exit";
     readonly resolveSessionId: (paneCwd: string, panePid: number | undefined) => string | null;
     readonly resolveSessionName: (paneCwd: string, panePid: number | undefined) => ProviderName | null;
+    readonly resolveSessionHandle: (paneCwd: string, panePid: number | undefined) => string | null;
     readonly resolveTranscript: (paneCwd: string, panePid: number | undefined) => string | null;
     readonly projectTranscript: TranscriptProjector;
     readonly resolveResumeId: (paneCwd: string, panePid: number | undefined) => string | null;

package/dist/remote-agents.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.matchAgentByPaneCommand = exports.findAgentBySubcommand = exports.REMOTE_AGENTS = exports.opencodeTranscriptPath = exports.detectOpencodeSession = exports.geminiTranscriptPath = exports.codexTranscriptPath = exports.detectCodexSessionName = exports.newestVersionedDb = exports.detectHermesResumeId = exports.detectHermesSessionName = exports.sqliteJson = exports.transcriptIdSince = exports.paneSince = exports.pickRowByProcStart = exports.detectPiSessionName = exports.piTranscriptPath = exports.claudeTranscriptPath = exports.detectClaudeProviderName = exports.detectClaudeSessionIdByPid = exports.detectClaudeSessionByPid = exports.pidSessionRecordsExist = exports.collectDescendantPids = exports.psStartTimes = exports.foregroundAgentFor = exports.readProcTable = exports.parseProcTable = exports.detectClaudeSessionId = exports.claudeProjectDirName = void 0;
+exports.matchAgentByPaneCommand = exports.findAgentBySubcommand = exports.REMOTE_AGENTS = exports.opencodeTranscriptPath = exports.detectOpencodeSession = exports.geminiTranscriptPath = exports.codexTranscriptPath = exports.detectCodexSessionName = exports.newestVersionedDb = exports.detectHermesResumeId = exports.detectHermesSessionName = exports.sqliteJson = exports.transcriptIdSince = exports.paneSince = exports.pickRowByProcStart = exports.detectPiSessionName = exports.piTranscriptPath = exports.claudeTranscriptPath = exports.detectClaudeSessionHandle = exports.detectClaudeProviderName = exports.detectClaudeSessionIdByPid = exports.detectClaudeSessionByPid = exports.pidSessionRecordsExist = exports.collectDescendantPids = exports.psStartTimes = exports.foregroundAgentFor = exports.readProcTable = exports.parseProcTable = exports.detectClaudeSessionId = exports.claudeProjectDirName = void 0;
 /**
  * Remote-control agent registry — the single table behind every
  * `hwip <agent>` subcommand, the listener's pane matching, and the
@@ -426,6 +426,12 @@ const detectClaudeProviderName = (panePid, paneCwd, deps = {}) => {
     return title ? { name: title, source: 'auto' } : null;
 };
 exports.detectClaudeProviderName = detectClaudeProviderName;
+/** Claude Code's own name for the session in this pane, whoever chose it — see `RemoteAgent.resolveSessionHandle`. */
+const detectClaudeSessionHandle = (panePid, paneCwd, deps = {}) => {
+    const record = (0, exports.detectClaudeSessionByPid)(panePid, paneCwd, deps);
+    return record ? nonBlank(record.name) : null;
+};
+exports.detectClaudeSessionHandle = detectClaudeSessionHandle;
 /**
  * The transcript file for the Claude Code session running in a tmux pane.
  *
@@ -1211,6 +1217,7 @@ const REMOTE_AGENT_TABLE = [
         resolveSessionId: (paneCwd, panePid) => (panePid !== undefined ? (0, exports.detectClaudeSessionIdByPid)(panePid, paneCwd) : null)
             ?? (0, exports.detectClaudeSessionId)(paneCwd),
         resolveSessionName: (paneCwd, panePid) => panePid !== undefined ? (0, exports.detectClaudeProviderName)(panePid, paneCwd) : null,
+        resolveSessionHandle: (paneCwd, panePid) => panePid !== undefined ? (0, exports.detectClaudeSessionHandle)(panePid, paneCwd) : null,
         resolveTranscript: (paneCwd, panePid) => (0, exports.claudeTranscriptPath)(paneCwd, panePid),
         projectTranscript: transcript_tail_js_1.projectTranscriptEntries,
         // The pid match alone: the mtime fallback above can name another

package/dist/usage.js

@@ -72,7 +72,7 @@ Commands:
                   Exit 0 = the server stored it; whether the session
                   typed it is not confirmed. 2 usage, 1 failed (3 no
                   API key)
-  agent list [--json]
+  agent list [--all] [--json]
                   List the agent sessions running on THIS machine: key
                   (<deviceId>:<session> — what 'agent send' and 'agent
                   read' take), agent, state (working|blocked|idle|unknown,
@@ -81,6 +81,14 @@ Commands:
                   and the screens here only: no server, no API key; it
                   writes nothing.
                   Exit 0 listed, 1 no tmux server answered
+                  --all lists the sessions 'agent send' can reach on EVERY
+                  machine of the account, from the server's device list:
+                  key, host, agent, state and name, with the agent's own
+                  session name in [ ] (Claude Code's, e.g. ko-qmd-70 —
+                  'agent send' takes it). Offline machines are marked.
+                  --json prints {"v":1,"all":true,"sessions":[…]}. Needs
+                  the API key (exit 3 without). Exit 0 listed, 1 the list
+                  could not be read
   agent read <session> [--turns <n>] [--json]
                   Print what a session on THIS machine did last, oldest
                   first: its last <n> turns (1-20, default 3) — the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hwip/cli",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Hwip CLI + push notification SDK for AI agents",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",