@phnx-labs/agents-cli 1.20.74 → 1.20.77

package/dist/commands/watchdog.js

@@ -8,41 +8,41 @@
  *
  *   agents watchdog                    one tick, dry — prints what it WOULD nudge/skip and why
  *   agents watchdog --nudge            one tick, actually injects (explicit opt-in)
- *   agents watchdog --watch            daemon loop (poll every --interval)
+ *   agents watchdog --watch            manual poll loop (dry unless --nudge)
  *   agents watchdog --json             machine-readable tick output (for the menu-bar)
- *   agents watchdog enable|disable     flip the global auto-nudge sentinel (default OFF)
+ *   agents watchdog enable|disable     turn the always-on watchdog routine on/off
  *   agents watchdog policy <id> <p>    per-session policy: off | keep | handsoff
+ *
+ * The always-on watchdog is a daemon-fired ROUTINE, not a private sentinel + a
+ * hand-rolled loop: `enable` creates/enables a `watchdog` command routine
+ * (`agents watchdog --nudge` every couple of minutes) and reloads the daemon;
+ * `disable` pauses it. See ../lib/watchdog/routine.ts.
  */
 import chalk from 'chalk';
-import * as fs from 'fs';
 import * as path from 'path';
 import { setHelpSections } from '../lib/help.js';
 import { parseDuration } from '../lib/hooks/cache.js';
 import { getRuntimeStateDir } from '../lib/state.js';
+import { setJobEnabled } from '../lib/routines.js';
+import { ensureWatchdogRoutine, isWatchdogRoutineEnabled, watchdogRoutineExists, WATCHDOG_ROUTINE_NAME, WATCHDOG_ROUTINE_SCHEDULE, } from '../lib/watchdog/routine.js';
 import { runWatchdogTick, writePolicySentinel, DEFAULT_THRESHOLDS, } from '../lib/watchdog/runner.js';
 /** Default state dir the runner and these subcommands share. */
 function stateDir() {
     return path.join(getRuntimeStateDir(), 'watchdog');
 }
-/** Global auto-nudge sentinel — present = enabled. Default OFF (opt-in). */
-function enabledSentinelPath() {
-    return path.join(stateDir(), 'enabled');
-}
-function isGloballyEnabled() {
-    return fs.existsSync(enabledSentinelPath());
-}
-function setGloballyEnabled(on) {
-    const p = enabledSentinelPath();
-    if (on) {
-        fs.mkdirSync(path.dirname(p), { recursive: true });
-        fs.writeFileSync(p, 'enabled\n');
-    }
-    else {
-        try {
-            fs.rmSync(p);
-        }
-        catch { /* already off */ }
+/**
+ * (Re)load the daemon so a just-changed routine takes effect without a restart.
+ * Best-effort: enabling starts the daemon if it is not running, then SIGHUPs it.
+ * Dynamic import keeps daemon.ts's heavy deps off the watchdog command's load path.
+ */
+async function reloadDaemonForRoutine(startIfStopped) {
+    const { isDaemonRunning, ensureDaemonStarted, signalDaemonReload } = await import('../lib/daemon.js');
+    if (isDaemonRunning()) {
+        signalDaemonReload();
+        return;
     }
+    if (startIfStopped)
+        ensureDaemonStarted();
 }
 /** Parse a duration flag ("60s", "5m", "1h") to ms, or fall back to `fallbackMs`. */
 function durationMsOr(raw, fallbackMs) {
@@ -97,7 +97,7 @@ export function registerWatchdogCommand(program) {
         .command('watchdog')
         .description('Auto-nudge stalled agent terminals: detect stalls, resolve the exact split, inject "Continue." — no menu-bar needed.')
         .option('--nudge', 'Actually inject (default is a dry run that only reports what it would do)')
-        .option('--watch', 'Daemon loop: run a tick every --interval until interrupted')
+        .option('--watch', 'Manual poll loop: run a tick every --interval (dry unless --nudge; the always-on path is `watchdog enable`)')
         .option('--interval <dur>', 'Poll interval in --watch mode (e.g. 30s, 1m)', '30s')
         .option('--stall <dur>', 'Idle time before a session counts as stalled', humanMs(DEFAULT_THRESHOLDS.stallMs))
         .option('--cooldown <dur>', 'Minimum time between nudges to the same session', humanMs(DEFAULT_THRESHOLDS.cooldownMs))
@@ -113,12 +113,11 @@ export function registerWatchdogCommand(program) {
             cooldownMs: durationMsOr(opts.cooldown, DEFAULT_THRESHOLDS.cooldownMs),
             dormantMs: durationMsOr(opts.dormant, DEFAULT_THRESHOLDS.dormantMs),
         };
-        // Injection gate: --nudge is the explicit per-run opt-in; the global sentinel
-        // enables the automatic daemon. Default OFF: bare `agents watchdog` is dry.
-        // Re-read the sentinel every tick so a running `--watch` daemon reflects a
-        // later `agents watchdog enable`/`disable` (or the Swift menu-bar toggle)
-        // from another shell without a restart.
-        const computeWillInject = () => opts.nudge === true || (opts.watch === true && isGloballyEnabled());
+        // Injection gate: --nudge is the explicit opt-in to actually inject. Bare
+        // `agents watchdog` (and `--watch` without `--nudge`) is dry. The always-on
+        // path is the daemon routine, which runs `agents watchdog --nudge` — so the
+        // routine's enabled state IS the on/off switch, not a flag read here.
+        const computeWillInject = () => opts.nudge === true;
         const tickOnce = async (willInject) => runWatchdogTick({
             nudge: willInject,
             nudgeText: opts.text,
@@ -137,11 +136,11 @@ export function registerWatchdogCommand(program) {
                 printTick(result, willInject);
             return;
         }
-        // Daemon loop.
+        // Manual poll loop (for ad-hoc use; the always-on path is `enable`'s routine).
         const intervalMs = durationMsOr(opts.interval, 30_000);
         if (!computeWillInject() && !opts.json) {
-            console.log(chalk.yellow(`watchdog --watch is DETECT-ONLY (global auto-nudge is ${isGloballyEnabled() ? 'on' : 'off'}). ` +
-                `Pass --nudge or run 'agents watchdog enable' to inject.`));
+            console.log(chalk.yellow(`watchdog --watch is DETECT-ONLY. Pass --nudge to inject, ` +
+                `or run 'agents watchdog enable' for the always-on daemon routine.`));
         }
         // eslint-disable-next-line no-constant-condition
         while (true) {
@@ -163,50 +162,67 @@ export function registerWatchdogCommand(program) {
       # One tick, actually inject "Continue." into stalled+addressable splits
       agents watchdog --nudge
 
-      # Watch loop every 30s, tighter stall threshold
-      agents watchdog --watch --interval 30s --stall 60s --cooldown 5m
+      # Manual watch loop every 30s, tighter stall threshold (ad-hoc; dry unless --nudge)
+      agents watchdog --watch --nudge --interval 30s --stall 60s --cooldown 5m
 
       # Machine-readable for the menu-bar
       agents watchdog --json
 
-      # Turn on the global auto-nudge (so --watch injects without --nudge)
+      # Turn on the ALWAYS-ON watchdog (a daemon-fired routine)
       agents watchdog enable
 
       # Leave one session detected-but-untouched
       agents watchdog policy <sessionId> handsoff
     `,
         notes: `
-      Decision path (default, deterministic): a session is nudged only when its
-      transcript tail shows it ANNOUNCED an action but no tool call followed
-      (promise-without-toolcall) AND it is not waiting on the user. Completions and
-      open questions are skipped.
+      Decision path: a cheap deterministic pre-filter resolves the obvious cases
+      (clearly complete -> skip; a clear promise-without-toolcall -> nudge) and
+      ESCALATES the judgment-heavy cases -- a session parked on a question, or an
+      ambiguous stall -- to a smart brain. The brain drives the agent to finish
+      end-to-end when it asked a needless / already-authorized question or paused
+      with work left, and leaves it for the human on genuine cases (credentials,
+      an irreversible or outward-facing action, a real ambiguous decision, or a
+      completed task). The brain is a customizable 'watchdog' workflow (drop a
+      WORKFLOW.md in project/user workflows/ to override the prompt + model);
+      absent one, the built-in prompt runs via 'agents run --mode plan'. Pass
+      --smart to force every stalled candidate through the brain.
 
-      Safety gate: a nudge is delivered ONLY when the resolver can name the EXACT
-      split the agent lives in (tmux / iTerm / IDE terminal). Un-addressable stalls
-      (e.g. Ghostty with no tmux) are flagged for the menu-bar and SKIPPED — never
-      a guessed or frontmost target.
+      Delivery (answer-router): a running agent is steered via its mailbox; a
+      parked-on-question agent is answered into its EXACT split -- tmux / iTerm /
+      an IDE integrated terminal (VS Codium / Cursor / VS Code) -- or re-entered
+      via resume when headless. A parked agent with no addressable rail (e.g.
+      Ghostty with no tmux) is flagged for the menu-bar and SKIPPED -- never a
+      guessed or frontmost target.
 
-      Policy: global auto-nudge defaults OFF (opt-in via 'enable' or --nudge).
-      Per-session: off (ignore), keep (default), handsoff (detect + flag, never inject).
+      Always-on: 'agents watchdog enable' creates + enables a 'watchdog' command
+      routine ('${WATCHDOG_ROUTINE_SCHEDULE}' -> agents watchdog --nudge) and reloads the
+      daemon; 'disable' pauses it. Inspect it with 'agents routines list'. Defaults
+      OFF. Per-session policy: off (ignore), keep (default), handsoff (detect + flag).
 
       State (tray-readable): ${path.join('~/.agents/.cache/state/watchdog', '{nudges,flags,last-tick}.json')}
     `,
     });
-    // --- global enable/disable/status -----------------------------------------
+    // --- always-on enable/disable/status (backed by the daemon routine) --------
     cmd.command('enable')
-        .description('Turn ON global auto-nudge (so `agents watchdog --watch` injects without --nudge).')
-        .action(() => {
-        setGloballyEnabled(true);
-        console.log(chalk.green('watchdog: global auto-nudge ENABLED'));
+        .description('Turn ON the always-on watchdog: create/enable the `watchdog` routine and (re)load the daemon.')
+        .action(async () => {
+        ensureWatchdogRoutine(true);
+        await reloadDaemonForRoutine(true);
+        console.log(chalk.green(`watchdog: ENABLED — routine '${WATCHDOG_ROUTINE_NAME}' fires ${WATCHDOG_ROUTINE_SCHEDULE} (agents watchdog --nudge)`));
     });
     cmd.command('disable')
-        .description('Turn OFF global auto-nudge (back to detect-only unless --nudge is passed).')
-        .action(() => {
-        setGloballyEnabled(false);
-        console.log(chalk.yellow('watchdog: global auto-nudge DISABLED'));
+        .description('Turn OFF the always-on watchdog (pause the `watchdog` routine).')
+        .action(async () => {
+        if (!watchdogRoutineExists()) {
+            console.log(chalk.dim('watchdog: already off (no routine)'));
+            return;
+        }
+        setJobEnabled(WATCHDOG_ROUTINE_NAME, false);
+        await reloadDaemonForRoutine(false);
+        console.log(chalk.yellow('watchdog: DISABLED (routine paused)'));
     });
     cmd.command('status')
-        .description('Show whether global auto-nudge is on and where state is written.')
+        .description('Show whether the always-on watchdog routine is enabled and where state is written.')
         .option('--json', 'Emit status as JSON (for the menu-bar / scripts)')
         .action((_opts, command) => {
         // The parent `watchdog` command also declares --json and greedily parses it
@@ -214,12 +230,12 @@ export function registerWatchdogCommand(program) {
         // parent, not this subcommand. optsWithGlobals() merges both levels, so we
         // read it correctly regardless of which command commander bound it to.
         const json = command.optsWithGlobals().json === true;
-        const on = isGloballyEnabled();
+        const on = isWatchdogRoutineEnabled();
         if (json) {
-            console.log(JSON.stringify({ enabled: on, stateDir: stateDir() }));
+            console.log(JSON.stringify({ enabled: on, routine: WATCHDOG_ROUTINE_NAME, stateDir: stateDir() }));
             return;
         }
-        console.log(`global auto-nudge: ${on ? chalk.green('ON') : chalk.dim('off')}`);
+        console.log(`always-on watchdog: ${on ? chalk.green('ON') : chalk.dim('off')} (routine '${WATCHDOG_ROUTINE_NAME}')`);
         console.log(`state dir: ${chalk.dim(stateDir())}`);
     });
     // --- per-session policy ----------------------------------------------------

package/dist/index.js

@@ -26,11 +26,50 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const packageJsonPath = path.join(__dirname, '..', 'package.json');
 const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
 const VERSION = packageJson.version;
+import { SYNC_GET_CMD, SYNC_PING_CMD, SYNC_LOCK_CMD } from './lib/secrets/sync-commands.js';
 if (process.argv[2] === '__vault-age-helper') {
     const { runVaultAgeHelperCli } = await import('./lib/secrets/vault-age-helper.js');
     await runVaultAgeHelperCli();
     process.exit(process.exitCode ?? 0);
 }
+// Synchronous secrets-broker clients (src/lib/secrets/agent.ts). These are the
+// hot read path: `readAndResolveBundleEnv` is synchronous all the way down, so
+// it can't await a socket round-trip — it spawns one of these and reads the
+// exit code (0 = hit/alive, 3 = miss/down).
+//
+// Intercepted HERE, before commander and before the startup STATEMENTS, for the
+// same reason as __daemon-run and __vault-age-helper above. Everything below
+// this point runs `checkForUpdates()` and `spawnDetachedSync()` on every
+// non-help invocation — so registering these as ordinary hidden subcommands
+// would fire an update check and fork a detached background sync on *every
+// cache hit*, which is both a fork storm on the hot path and a source of stdout
+// writes that could corrupt the JSON payload. Keep them above the line;
+// agent.test.ts asserts this ordering so the block can't drift downward.
+//
+// The tokens are imported from the leaf module sync-commands.ts — the SAME
+// bindings the clients spawn with, so this dispatch and those spawns cannot
+// drift apart. It is a leaf precisely so binding them here is free: importing
+// agent.js would pull the whole secrets graph into every invocation. Matching
+// string literals were the earlier design; a text-scanning test could not
+// reliably catch their divergence, and the divergence is silent — the CLI says
+// "unknown command", the client reads that as "broker down", and every read
+// falls back to a Touch ID prompt.
+//
+// "Before the startup statements", not "before all code": ESM hoists the
+// imports below, so those module bodies evaluate first. They are side-effect
+// free today (no top-level stdout write or spawn) — which is what makes this
+// safe, and worth preserving.
+if (process.argv[2] === SYNC_GET_CMD ||
+    process.argv[2] === SYNC_PING_CMD ||
+    process.argv[2] === SYNC_LOCK_CMD) {
+    const { runAgentGetSync, runAgentPingSync, runAgentLockSync } = await import('./lib/secrets/agent.js');
+    const name = process.argv[3] ?? '';
+    const harness = process.argv[4] ?? 'cli';
+    const code = process.argv[2] === SYNC_GET_CMD ? await runAgentGetSync(name, harness)
+        : process.argv[2] === SYNC_PING_CMD ? await runAgentPingSync()
+            : await runAgentLockSync(name);
+    process.exit(code);
+}
 import { NPM_PACKAGE_NAME, deriveGlobalPrefix, detectPackageManager, installPackageIntoPrefix, installPackageWithBun, verifyInstalledVersion, refreshAliasShims, downloadVerifiedTarball, } from './lib/self-update.js';
 // Detect dev/working-tree builds and default the noisy startup steps off.
 // Three cases trip this:
@@ -55,9 +94,10 @@ if (IS_DEV_BUILD) {
 // module on each invocation (which loaded the whole ~50-module tree before the
 // first byte of output), the registry maps a command name to a thunk that
 // imports only what that command needs. See src/lib/startup/command-registry.ts.
-import { COMMAND_LOADERS, LAZY_COMMAND_NAMES, loadView, loadInspect, loadResources, loadFeedback, loadCommands, loadHooks, loadSkills, loadRules, loadMemory, loadPermissions, loadMcp, loadCli, loadSubagents, loadPlugins, loadWorkflows, loadWorktree, loadVersions, loadImport, loadExport, loadPackages, loadRoutines, loadMonitors, loadRun, loadFork, loadDefaults, loadModels, loadPrune, loadTrash, loadRestore, loadDoctor, loadApply, loadCheck, loadStatus, loadProfiles, loadSecrets, loadLogin, loadWallet, loadHelper, loadMenubar, loadBeta, loadSync, loadLock, loadRefreshRules, loadDrive, loadFactory, loadUsage, loadCost, loadOutput, loadBudget, loadAlias, loadMine, loadPty, loadTmux, loadWatchdog, loadBrowser, loadComputer, loadHosts, loadLogs, loadEvents, loadAudit, loadWebhook, loadFunnel, loadSsh, loadPull, loadPush, loadRepo, loadSetup, loadUninstall, loadShare, loadSend, loadHq, loadFeed, loadActivity, loadMailboxes, } from './lib/startup/command-registry.js';
+import { COMMAND_LOADERS, LAZY_COMMAND_NAMES, loadView, loadInspect, loadResources, loadFeedback, loadCommands, loadHooks, loadSkills, loadRules, loadMemory, loadPermissions, loadMcp, loadCli, loadSubagents, loadPlugins, loadWorkflows, loadWorktree, loadVersions, loadImport, loadExport, loadPackages, loadRoutines, loadMonitors, loadRun, loadFork, loadDefaults, loadModels, loadPrune, loadTrash, loadRestore, loadDoctor, loadApply, loadCheck, loadStatus, loadProfiles, loadHarness, loadSecrets, loadLogin, loadWallet, loadHelper, loadMenubar, loadBeta, loadSync, loadLock, loadRefreshRules, loadDrive, loadFactory, loadUsage, loadCost, loadOutput, loadBudget, loadAlias, loadMine, loadPty, loadTmux, loadWatchdog, loadBrowser, loadComputer, loadHosts, loadLogs, loadEvents, loadAudit, loadWebhook, loadFunnel, loadSsh, loadPull, loadPush, loadRepo, loadSetup, loadUninstall, loadShare, loadSend, loadHq, loadFeed, loadActivity, loadMailboxes, } from './lib/startup/command-registry.js';
 import { applyGlobalHelpConventions } from './lib/help.js';
 import { renderWhatsNew } from './lib/whats-new.js';
+import { getCliLaunch } from './lib/cli-entry.js';
 import { emit, redactArgs } from './lib/events.js';
 // Transparent shim delegate: the generated Windows `.cmd` shims invoke
 // `agents __shim <agent>[@version] <raw args>`. Intercept here, before commander
@@ -294,7 +334,7 @@ async function showWhatsNew(fromVersion, toVersion) {
 const UPDATE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000; // 24 hours
 import { getUpdateCheckPath, getMigratedSentinelPath, getUserAgentsDir, getRuntimeStateDir } from './lib/state.js';
 import { resolveBrandName, disabledCommandsForActiveBrand } from './lib/brand.js';
-import { readUpdateCache, saveUpdateCheck, dismissUpdateVersion, shouldPromptUpgrade, findAgentsCliInstalls, } from './lib/self-update.js';
+import { readUpdateCache, saveUpdateCheck, dismissUpdateVersion, shouldPromptUpgrade, findAgentsCliInstalls, resolveRunningPackageRoot, } from './lib/self-update.js';
 const UPDATE_CHECK_FILE = getUpdateCheckPath();
 /**
  * Warn once when PATH resolves `agents` to a different agents-cli install
@@ -306,7 +346,16 @@ const UPDATE_CHECK_FILE = getUpdateCheckPath();
  */
 function maybeWarnMultiInstall() {
     const sentinel = path.join(getRuntimeStateDir(), 'multi-install-warned');
-    const runningRoot = path.resolve(__dirname, '..');
+    let runningRoot;
+    try {
+        runningRoot = resolveRunningPackageRoot(__dirname);
+    }
+    catch {
+        // Without a real root for the running copy there is nothing to compare
+        // against, and a guess here is exactly what produced the phantom
+        // "/$bunfs" install. This warning is advisory — stay silent instead.
+        return;
+    }
     const byRoot = new Map();
     byRoot.set(runningRoot, { version: VERSION, note: 'running' });
     for (const install of findAgentsCliInstalls(process.env.PATH || '')) {
@@ -370,7 +419,7 @@ function printResolvedPackage(metadata) {
     console.log(chalk.gray(`Integrity: ${metadata.integrity}`));
 }
 async function installResolvedPackage(metadata) {
-    const packageRoot = path.resolve(__dirname, '..');
+    const packageRoot = resolveRunningPackageRoot(__dirname);
     // Download the published tarball and prove its bytes match the registry
     // integrity BEFORE installing anything. A `name@version` spec would let the
     // package manager fetch and install whatever the registry serves with no
@@ -466,9 +515,11 @@ async function promptUpgrade(latestVersion) {
             console.log();
             // Re-exec the verified install's entrypoint and exit. PATH lookup of
             // `agents` could resolve a different copy (dev build, another prefix)
-            // than the one that was just upgraded.
-            const entrypoint = path.resolve(__dirname, '..', 'dist', 'index.js');
-            const result = spawnSync(process.execPath, [entrypoint, ...process.argv.slice(2)], {
+            // than the one that was just upgraded. getCliLaunch resolves the JS-vs-
+            // standalone shape — never hand-roll `[process.execPath, entrypoint]`,
+            // which hands the bun virtual entry to a compiled binary as a bogus arg.
+            const { command, args } = getCliLaunch(process.argv.slice(2));
+            const result = spawnSync(command, args, {
                 stdio: 'inherit',
                 shell: false,
             });
@@ -747,6 +798,7 @@ async function registerAllEagerCommands() {
     await reg(loadStatus);
     registerExecAliasCommand(program);
     await reg(loadProfiles);
+    await reg(loadHarness);
     await reg(loadSecrets);
     await reg(loadLogin);
     await reg(loadWallet);

package/dist/lib/activity.d.ts

@@ -1,6 +1,8 @@
 import type { EventRecord } from './events.js';
 /** Recognizable milestone events, ordered first in any activity lane. */
-export type MilestoneEvent = 'plan.created' | 'pr.opened' | 'pr.merged' | 'worktree.created' | 'worktree.removed' | 'commit.created' | 'pushed' | 'subagent.spawned' | 'artifact.created';
+export type MilestoneEvent = 'plan.created' | 'pr.opened' | 'pr.merged' | 'worktree.created' | 'worktree.removed' | 'commit.created' | 'pushed' | 'subagent.spawned' | 'artifact.created' | 'task.completed' | 'checklist.created'
+/** Deliberate agent-authored progress post (`agents feed post`). */
+ | 'status.posted';
 /** Routine activity events, collapsed to counts by readers. */
 export type ActivityKind = 'file.edited';
 export type ActivityEventKind = MilestoneEvent | ActivityKind;
@@ -29,12 +31,20 @@ export interface ActivityEvent {
     cwd?: string;
     /** Agent that produced the event (claude, codex, ...). */
     agent?: string;
-    /** Tool that triggered the event (Bash, Task, ExitPlanMode, ...). */
+    /** Tool that triggered the event (Bash, Task, ExitPlanMode, feed.post, ...). */
     tool?: string;
-    /** One-line human summary (plan title, PR command, sub-agent role). */
+    /** One-line human summary (plan title, PR command, sub-agent role, status text). */
     detail?: string;
     /** Extracted URL when the event has one (e.g. the opened PR). */
     url?: string;
+    /** Auto-stamped process identity for deliberate posts (from pid registry / env). */
+    pid?: number;
+    /** Spawn-time join key (`AGENT_LAUNCH_ID`) when known. */
+    launchId?: string;
+    /** Factory terminal id when the launch inherited one. */
+    terminalId?: string;
+    /** `$TMUX_PANE` at launch when recorded. */
+    tmuxPane?: string;
 }
 /**
  * Append one event to a session's activity log. Primarily the Python hook
@@ -107,10 +117,11 @@ export declare function formatActivityLine(ev: ActivityEvent, opts?: {
  * line per event to ~/.agents/.history/activity/<sessionId>.jsonl.
  *
  * Matcher-gated to mutating/milestone tools (Bash|Task|ExitPlanMode|Write|
- * Edit|MultiEdit) so read-only tools never pay the hook cost. Fail-open: any
- * error is swallowed so a logging hiccup never blocks a tool call.
+ * Edit|MultiEdit|TodoWrite|update_plan|TaskUpdate|todo_write|TaskCreate) so
+ * read-only tools never pay the hook cost. Fail-open: any error is swallowed so
+ * a logging hiccup never blocks a tool call.
  */
-export declare const ACTIVITY_LOG_HOOK_SCRIPT = "#!/usr/bin/env python3\n\"\"\"Append agent-activity events for `agents feed` / `agents activity`.\n\nBound to PreToolUse (ExitPlanMode, Task) and PostToolUse (Bash, Write, Edit,\nMultiEdit). One append-only file per session; read-only tools never trigger it\nbecause the manifest matcher excludes them.\n\nSub-agent gate: when the payload carries `agent_type`, this is a Task/Agent\nsub-agent -- skip so only the top-level agent logs its own activity.\n\nFail-open: ANY error is swallowed so a logging hiccup never blocks a tool call.\n\"\"\"\nimport os\nimport re\nimport sys\nimport json\nimport shlex\nimport socket\nfrom datetime import datetime, timezone\n\nMAX_LOG_BYTES = 5 * 1024 * 1024  # cap a pathological session's log\nMILESTONE_EVENTS = {\n    \"plan.created\", \"pr.opened\", \"pr.merged\", \"worktree.created\",\n    \"worktree.removed\", \"commit.created\", \"pushed\", \"subagent.spawned\",\n    \"artifact.created\",\n}\n\n# Deliverable file types + locations -- a Write here is a recognizable artifact\n# (an HTML plan, a PDF report, a rendered image), not a routine code edit.\nARTIFACT_EXTS = {\n    \".html\", \".htm\", \".pdf\", \".png\", \".jpg\", \".jpeg\", \".gif\", \".svg\",\n    \".webp\", \".mp4\", \".mov\", \".webm\", \".csv\", \".xlsx\", \".pptx\", \".docx\",\n}\nARTIFACT_DIR_HINTS = (\"/tmp/\", \"/downloads/\", \"/.agents/artifacts/\")\n\n\ndef is_artifact(file_path):\n    low = (file_path or \"\").lower()\n    if os.path.splitext(low)[1] in ARTIFACT_EXTS:\n        return True\n    return any(hint in low for hint in ARTIFACT_DIR_HINTS)\n\n\ndef first_line(text, limit=140):\n    for raw in (text or \"\").splitlines():\n        s = raw.strip().lstrip(\"#\").strip()\n        if s:\n            return s[:limit]\n    return \"\"\n\n\ndef _subcommand(tokens, tool):\n    \"\"\"First non-flag token after `tool`, i.e. its subcommand (skips -C <path>,\n    -c <cfg>, and other leading flags). None if `tool` isn't the invoked command.\"\"\"\n    try:\n        i = tokens.index(tool) + 1\n    except ValueError:\n        return None, []\n    while i < len(tokens):\n        t = tokens[i]\n        if t in (\"-C\", \"-c\", \"--git-dir\", \"--work-tree\"):\n            i += 2  # flag that consumes the next token\n            continue\n        if t.startswith(\"-\"):\n            i += 1\n            continue\n        return t, tokens[i + 1:]\n    return None, []\n\n\ndef classify_bash(command):\n    \"\"\"Return the milestone event for a git/gh command, else None. Tokenizes so a\n    path like `git diff -- src/commit.ts` is not mistaken for a commit.\"\"\"\n    try:\n        tokens = shlex.split(command or \"\")\n    except Exception:\n        tokens = (command or \"\").split()\n\n    verb, rest = _subcommand(tokens, \"git\")\n    if verb == \"worktree\":\n        sub = rest[0] if rest else \"\"\n        if sub == \"add\":\n            return \"worktree.created\"\n        if sub == \"remove\":\n            return \"worktree.removed\"\n    elif verb == \"commit\":\n        return \"commit.created\"\n    elif verb == \"push\":\n        return \"pushed\"\n\n    verb, rest = _subcommand(tokens, \"gh\")\n    if verb == \"pr\" and rest:\n        if rest[0] == \"create\":\n            return \"pr.opened\"\n        if rest[0] == \"merge\":\n            return \"pr.merged\"\n    return None\n\n\ndef extract_url(tool_response):\n    \"\"\"Pull the first https URL out of a Bash tool response (stdout).\"\"\"\n    text = \"\"\n    if isinstance(tool_response, dict):\n        text = str(tool_response.get(\"stdout\") or tool_response.get(\"output\") or \"\")\n    elif isinstance(tool_response, str):\n        text = tool_response\n    m = re.search(r\"https?://\\S+\", text)\n    return m.group(0).rstrip(\").,\") if m else None\n\n\ndef build_event(payload, hook_event):\n    tool_name = payload.get(\"tool_name\", \"\")\n    tool_input = payload.get(\"tool_input\", {}) or {}\n    tool_response = payload.get(\"tool_response\", {})\n\n    event = None\n    detail = None\n    url = None\n\n    if hook_event == \"PreToolUse\":\n        if tool_name == \"ExitPlanMode\":\n            event = \"plan.created\"\n            detail = first_line(tool_input.get(\"plan\", \"\")) or \"plan presented\"\n        elif tool_name == \"Task\":\n            event = \"subagent.spawned\"\n            role = tool_input.get(\"subagent_type\") or \"agent\"\n            desc = tool_input.get(\"description\") or tool_input.get(\"prompt\") or \"\"\n            detail = (role + \": \" + first_line(desc)).strip(\": \").strip()\n    elif hook_event == \"PostToolUse\":\n        if tool_name == \"Bash\":\n            event = classify_bash(tool_input.get(\"command\", \"\"))\n            if event:\n                detail = first_line(tool_input.get(\"command\", \"\"))\n                url = extract_url(tool_response)\n        elif tool_name in (\"Write\", \"Edit\", \"MultiEdit\"):\n            fp = tool_input.get(\"file_path\") or tool_input.get(\"path\") or \"\"\n            # A freshly-written deliverable is a milestone; edits and code\n            # writes stay routine and collapse to a count.\n            if tool_name == \"Write\" and is_artifact(fp):\n                event = \"artifact.created\"\n            else:\n                event = \"file.edited\"\n            detail = os.path.basename(fp) if fp else tool_name\n\n    if not event:\n        return None, tool_name\n\n    tier = \"milestone\" if event in MILESTONE_EVENTS else \"activity\"\n    record = {\n        \"v\": 1,\n        \"ts\": datetime.now(timezone.utc).isoformat(),\n        \"event\": event,\n        \"tier\": tier,\n    }\n    if detail:\n        record[\"detail\"] = detail\n    if url:\n        record[\"url\"] = url\n    record[\"tool\"] = tool_name\n    return record, tool_name\n\n\ndef main():\n    raw = sys.stdin.read()\n    try:\n        payload = json.loads(raw) if raw.strip() else {}\n    except Exception:\n        return\n\n    # Sub-agent gate -- only the top-level agent logs.\n    if payload.get(\"agent_type\"):\n        return\n\n    session_id = payload.get(\"session_id\", \"\")\n    if not session_id:\n        return\n\n    hook_event = payload.get(\"hook_event_name\", \"\")\n    record, tool_name = build_event(payload, hook_event)\n    if not record:\n        return\n\n    safe_session = re.sub(r\"[^A-Za-z0-9._-]\", \"-\", session_id) or \"unknown\"\n    home = os.environ.get(\"HOME\") or os.path.expanduser(\"~\")\n    activity_dir = os.path.join(home, \".agents\", \".history\", \"activity\")\n    target = os.path.join(activity_dir, safe_session + \".jsonl\")\n\n    # Identity (mirrors 10-feed-publish.py).\n    mailbox_id = os.path.basename(\n        os.environ.get(\"AGENTS_MAILBOX_DIR\", \"\").rstrip(\"/\")\n    ) or session_id\n    hostname = os.environ.get(\"AGENTS_SYNC_MACHINE_ID\") or socket.gethostname()\n    host = re.sub(r\"[^a-z0-9_-]\", \"-\", hostname.split(\".\")[0].strip().lower()) or \"unknown\"\n\n    record[\"sessionId\"] = session_id\n    record[\"mailboxId\"] = mailbox_id\n    record[\"host\"] = host\n    record[\"runtime\"] = os.environ.get(\"AGENTS_RUNTIME\", \"headless\")\n    cwd = payload.get(\"cwd\") or os.environ.get(\"AGENTS_CWD\")\n    if cwd:\n        record[\"cwd\"] = cwd\n    agent = os.environ.get(\"AGENTS_AGENT_NAME\") or \"claude\"\n    record[\"agent\"] = agent\n\n    try:\n        os.makedirs(activity_dir, exist_ok=True)\n        # Cap growth: once over the size limit, keep only milestones.\n        if record[\"tier\"] != \"milestone\":\n            try:\n                if os.path.getsize(target) > MAX_LOG_BYTES:\n                    return\n            except OSError:\n                pass\n        with open(target, \"a\") as f:\n            f.write(json.dumps(record) + \"\\n\")\n    except Exception:\n        pass  # fail open\n\n\nif __name__ == \"__main__\":\n    try:\n        main()\n    except Exception:\n        pass  # fail open\n";
+export declare const ACTIVITY_LOG_HOOK_SCRIPT = "#!/usr/bin/env python3\n\"\"\"Append agent-activity events for `agents feed` / `agents activity`.\n\nBound to PreToolUse (ExitPlanMode, Task) and PostToolUse (Bash, Write, Edit,\nMultiEdit, TodoWrite, update_plan, TaskUpdate, todo_write, TaskCreate). One\nappend-only file per session; read-only tools never trigger it because the\nmanifest matcher excludes them.\n\nSub-agent gate: when the payload carries `agent_type`, this is a Task/Agent\nsub-agent -- skip so only the top-level agent logs its own activity.\n\nFail-open: ANY error is swallowed so a logging hiccup never blocks a tool call.\n\"\"\"\nimport os\nimport re\nimport sys\nimport json\nimport shlex\nimport socket\nfrom datetime import datetime, timezone\n\nMAX_LOG_BYTES = 5 * 1024 * 1024  # cap a pathological session's log\nMILESTONE_EVENTS = {\n    \"plan.created\", \"pr.opened\", \"pr.merged\", \"worktree.created\",\n    \"worktree.removed\", \"commit.created\", \"pushed\", \"subagent.spawned\",\n    \"artifact.created\", \"task.completed\", \"checklist.created\", \"status.posted\",\n}\n\n# Deliverable file types + locations -- a Write here is a recognizable artifact\n# (an HTML plan, a PDF report, a rendered image), not a routine code edit.\nARTIFACT_EXTS = {\n    \".html\", \".htm\", \".pdf\", \".png\", \".jpg\", \".jpeg\", \".gif\", \".svg\",\n    \".webp\", \".mp4\", \".mov\", \".webm\", \".csv\", \".xlsx\", \".pptx\", \".docx\",\n}\nARTIFACT_DIR_HINTS = (\"/tmp/\", \"/downloads/\", \"/.agents/artifacts/\")\n\n# Checklist tools across harnesses. The value is the key that holds the item list.\nCHECKLIST_TOOLS = {\n    \"TodoWrite\": \"todos\",\n    \"todo_write\": \"todos\",\n    \"TaskUpdate\": \"tasks\",\n    \"update_plan\": \"plan\",\n}\n\n\ndef is_artifact(file_path):\n    low = (file_path or \"\").lower()\n    if os.path.splitext(low)[1] in ARTIFACT_EXTS:\n        return True\n    return any(hint in low for hint in ARTIFACT_DIR_HINTS)\n\n\ndef first_line(text, limit=140):\n    for raw in (text or \"\").splitlines():\n        s = raw.strip().lstrip(\"#\").strip()\n        if s:\n            return s[:limit]\n    return \"\"\n\n\ndef _subcommand(tokens, tool):\n    \"\"\"First non-flag token after `tool`, i.e. its subcommand (skips -C <path>,\n    -c <cfg>, and other leading flags). None if `tool` isn't the invoked command.\"\"\"\n    try:\n        i = tokens.index(tool) + 1\n    except ValueError:\n        return None, []\n    while i < len(tokens):\n        t = tokens[i]\n        if t in (\"-C\", \"-c\", \"--git-dir\", \"--work-tree\"):\n            i += 2  # flag that consumes the next token\n            continue\n        if t.startswith(\"-\"):\n            i += 1\n            continue\n        return t, tokens[i + 1:]\n    return None, []\n\n\ndef classify_bash(command):\n    \"\"\"Return the milestone event for a git/gh command, else None. Tokenizes so a\n    path like `git diff -- src/commit.ts` is not mistaken for a commit.\"\"\"\n    try:\n        tokens = shlex.split(command or \"\")\n    except Exception:\n        tokens = (command or \"\").split()\n\n    verb, rest = _subcommand(tokens, \"git\")\n    if verb == \"worktree\":\n        sub = rest[0] if rest else \"\"\n        if sub == \"add\":\n            return \"worktree.created\"\n        if sub == \"remove\":\n            return \"worktree.removed\"\n    elif verb == \"commit\":\n        return \"commit.created\"\n    elif verb == \"push\":\n        return \"pushed\"\n\n    verb, rest = _subcommand(tokens, \"gh\")\n    if verb == \"pr\" and rest:\n        if rest[0] == \"create\":\n            return \"pr.opened\"\n        if rest[0] == \"merge\":\n            return \"pr.merged\"\n    return None\n\n\ndef extract_url(tool_response):\n    \"\"\"Pull the first https URL out of a Bash tool response (stdout).\"\"\"\n    text = \"\"\n    if isinstance(tool_response, dict):\n        text = str(tool_response.get(\"stdout\") or tool_response.get(\"output\") or \"\")\n    elif isinstance(tool_response, str):\n        text = tool_response\n    m = re.search(r\"https?://\\S+\", text)\n    return m.group(0).rstrip(\").,\") if m else None\n\n\ndef _checklist_items(tool_input, kind):\n    \"\"\"Extract normalized checklist items from tool input.\"\"\"\n    if not isinstance(tool_input, dict):\n        return []\n    if kind == \"todos\":\n        arr = tool_input.get(\"todos\") or []\n    elif kind == \"tasks\":\n        arr = tool_input.get(\"tasks\") or []\n        if not arr and \"taskId\" in tool_input:\n            arr = [tool_input]\n    elif kind == \"plan\":\n        arr = tool_input.get(\"plan\") or []\n    else:\n        return []\n    if not isinstance(arr, list):\n        return []\n\n    items = []\n    for t in arr:\n        if not isinstance(t, dict):\n            continue\n        subject = (\n            t.get(\"content\") or\n            t.get(\"text\") or\n            t.get(\"step\") or\n            t.get(\"title\") or\n            t.get(\"description\") or\n            t.get(\"activeForm\") or\n            \"\"\n        )\n        if not isinstance(subject, str):\n            subject = str(subject)\n        subject = subject.strip()\n        item_id = t.get(\"id\") or t.get(\"taskId\") or subject\n        if not item_id:\n            continue\n        status = str(t.get(\"status\", \"\") or \"\").lower()\n        items.append({\"id\": item_id, \"subject\": subject, \"status\": status})\n    return items\n\n\ndef _read_transcript_checklists(transcript_path, current_tool, current_items):\n    \"\"\"Tail-read the session transcript and return the previous checklist state.\n\n    The most recent checklist entry is assumed to be the current tool call if\n    it carries the same ids; skip that one and return the next older checklist\n    state (or None if there isn't one).\n    \"\"\"\n    if not transcript_path or not os.path.exists(transcript_path):\n        return None\n    try:\n        size = os.path.getsize(transcript_path)\n        start = max(0, size - 512 * 1024)\n        with open(transcript_path, \"r\", encoding=\"utf-8\", errors=\"ignore\") as f:\n            f.seek(start)\n            if start > 0:\n                f.readline()  # drop a leading partial line\n            lines = f.readlines()\n    except Exception:\n        return None\n\n    current_ids = {str(item.get(\"id\")) for item in current_items if item.get(\"id\")}\n    skipped_current = False\n    for line in reversed(lines):\n        line = line.strip()\n        if not line:\n            continue\n        try:\n            record = json.loads(line)\n        except Exception:\n            continue\n        if not isinstance(record, dict):\n            continue\n\n        tool_uses = []\n        if isinstance(record.get(\"tool_use\"), list):\n            tool_uses = record[\"tool_use\"]\n        elif record.get(\"name\"):\n            tool_uses = [record]\n        elif record.get(\"tool_name\"):\n            tool_uses = [record]\n\n        for tu in reversed(tool_uses):\n            if not isinstance(tu, dict):\n                continue\n            name = tu.get(\"name\") or tu.get(\"tool_name\") or \"\"\n            if name not in CHECKLIST_TOOLS:\n                continue\n            kind = CHECKLIST_TOOLS[name]\n            args = tu.get(\"input\") or tu.get(\"tool_input\") or tu.get(\"arguments\") or {}\n            if isinstance(args, str):\n                try:\n                    args = json.loads(args)\n                except Exception:\n                    continue\n            items = _checklist_items(args, kind)\n            if not items:\n                continue\n            ids = {str(item.get(\"id\")) for item in items if item.get(\"id\")}\n            # Skip the most recent matching checklist entry once; that is the\n            # current call already reflected in the transcript.\n            if not skipped_current and name == current_tool and ids == current_ids:\n                skipped_current = True\n                continue\n            return items\n    return None\n\n\ndef _has_previous_task_create(transcript_path, current_tool_use_id=\"\"):\n    \"\"\"Return True if the transcript contains a TaskCreate before the current one.\"\"\"\n    if not transcript_path or not os.path.exists(transcript_path):\n        return False\n    try:\n        with open(transcript_path, \"r\", encoding=\"utf-8\", errors=\"ignore\") as f:\n            lines = f.readlines()\n    except Exception:\n        return False\n\n    for line in reversed(lines):\n        line = line.strip()\n        if not line:\n            continue\n        try:\n            record = json.loads(line)\n        except Exception:\n            continue\n        if not isinstance(record, dict):\n            continue\n\n        tool_uses = []\n        msg = record.get(\"message\", {})\n        if isinstance(msg, dict) and isinstance(msg.get(\"content\"), list):\n            tool_uses = [\n                c for c in msg[\"content\"]\n                if isinstance(c, dict) and c.get(\"type\") == \"tool_use\"\n            ]\n        elif isinstance(record.get(\"tool_use\"), list):\n            tool_uses = record[\"tool_use\"]\n        elif record.get(\"name\"):\n            tool_uses = [record]\n\n        for tu in reversed(tool_uses):\n            if not isinstance(tu, dict):\n                continue\n            if (tu.get(\"name\") or tu.get(\"tool_name\")) == \"TaskCreate\":\n                if tu.get(\"id\") != current_tool_use_id:\n                    return True\n    return False\n\n\ndef _claude_task_state(transcript_path, exclude_task_id=None):\n    \"\"\"Fold Claude TaskCreate/TaskUpdate calls into a task id -> subject/status map.\n\n    TaskCreate provides the subject (and id via toolUseResult); TaskUpdate\n    provides the status. If exclude_task_id is given, the last TaskUpdate for\n    that id is skipped (it is the current call already reflected in the\n    transcript).\n    \"\"\"\n    state = {}\n    if not transcript_path or not os.path.exists(transcript_path):\n        return state\n    try:\n        with open(transcript_path, \"r\", encoding=\"utf-8\", errors=\"ignore\") as f:\n            lines = f.readlines()\n    except Exception:\n        return state\n\n    updates = []  # (task_id, status, line_index)\n    for idx, line in enumerate(lines):\n        line = line.strip()\n        if not line:\n            continue\n        try:\n            record = json.loads(line)\n        except Exception:\n            continue\n        if not isinstance(record, dict):\n            continue\n\n        tool_uses = []\n        msg = record.get(\"message\", {})\n        if isinstance(msg, dict) and isinstance(msg.get(\"content\"), list):\n            tool_uses = [\n                c for c in msg[\"content\"]\n                if isinstance(c, dict) and c.get(\"type\") == \"tool_use\"\n            ]\n        elif isinstance(record.get(\"tool_use\"), list):\n            tool_uses = record[\"tool_use\"]\n        elif record.get(\"name\"):\n            tool_uses = [record]\n\n        for tu in tool_uses:\n            if not isinstance(tu, dict):\n                continue\n            name = tu.get(\"name\") or \"\"\n            args = tu.get(\"input\") or tu.get(\"tool_input\") or {}\n            if isinstance(args, str):\n                try:\n                    args = json.loads(args)\n                except Exception:\n                    continue\n            if name == \"TaskCreate\":\n                subject = (\n                    args.get(\"subject\") or\n                    args.get(\"description\") or\n                    args.get(\"title\") or\n                    \"\"\n                )\n                if subject:\n                    # Link subject to the tool_use id so the result can map it.\n                    tool_id = tu.get(\"id\")\n                    if tool_id:\n                        state.setdefault(\"__pending_subject\", {})[tool_id] = subject\n\n        tool_result = record.get(\"toolUseResult\") or {}\n        if not isinstance(tool_result, dict):\n            continue\n        task = tool_result.get(\"task\")\n        if isinstance(task, dict):\n            task_id = str(task.get(\"id\") or task.get(\"taskId\") or \"\")\n            if task_id:\n                state.setdefault(task_id, {})\n                if task.get(\"subject\"):\n                    state[task_id][\"subject\"] = task[\"subject\"]\n                if task.get(\"status\"):\n                    state[task_id][\"status\"] = str(task.get(\"status\")).lower()\n                # Link any pending subject from the matching tool_use id.\n                tool_use_id = record.get(\"tool_use_id\") or \"\"\n                pending = state.get(\"__pending_subject\", {})\n                if tool_use_id and tool_use_id in pending:\n                    state[task_id][\"subject\"] = pending[tool_use_id]\n        task_id = str(tool_result.get(\"taskId\") or \"\")\n        status_change = tool_result.get(\"statusChange\") or {}\n        status = status_change.get(\"to\") or tool_result.get(\"status\")\n        if task_id and status:\n            state.setdefault(task_id, {})\n            state[task_id][\"status\"] = str(status).lower()\n            updates.append((task_id, str(status).lower(), idx))\n\n    if exclude_task_id and updates:\n        for i in range(len(updates) - 1, -1, -1):\n            if updates[i][0] == exclude_task_id:\n                del updates[i]\n                break\n        # Rebuild statuses from remaining updates.\n        for task_id in list(state.keys()):\n            if task_id.startswith(\"__\"):\n                continue\n            if \"subject\" not in state[task_id]:\n                del state[task_id]\n            else:\n                state[task_id].pop(\"status\", None)\n        for task_id, status, _ in updates:\n            if task_id in state:\n                state[task_id][\"status\"] = status\n\n    # Drop tasks removed from the checklist (deleted/cancelled): they are gone\n    # from the user-visible list, so they must not count toward the N/M total.\n    for task_id in list(state.keys()):\n        if task_id.startswith(\"__\"):\n            continue\n        if state[task_id].get(\"status\") in (\"deleted\", \"cancelled\", \"canceled\", \"removed\"):\n            del state[task_id]\n\n    # Drop internal bookkeeping.\n    state.pop(\"__pending_subject\", None)\n    return state\n\n\ndef _checklist_events(payload, hook_event):\n    \"\"\"Return a list of (event, detail) tuples for checklist tool calls.\"\"\"\n    if hook_event != \"PostToolUse\":\n        return []\n    tool_name = payload.get(\"tool_name\", \"\")\n    tool_input = payload.get(\"tool_input\", {}) or {}\n\n    if tool_name == \"TaskCreate\":\n        subject = (\n            tool_input.get(\"subject\") or\n            tool_input.get(\"description\") or\n            tool_input.get(\"title\") or\n            \"task\"\n        )\n        # Only announce the checklist on the very first task creation.\n        current_tool_use_id = payload.get(\"tool_use_id\", \"\")\n        transcript_path = payload.get(\"transcript_path\")\n        if _has_previous_task_create(transcript_path, current_tool_use_id):\n            return []\n        return [(\"checklist.created\", subject)]\n\n    if tool_name not in CHECKLIST_TOOLS:\n        return []\n\n    kind = CHECKLIST_TOOLS[tool_name]\n    items = _checklist_items(tool_input, kind)\n    if not items:\n        return []\n\n    # Full-list tools (TodoWrite, update_plan) send the whole checklist every\n    # time. Per-task update tools (TaskUpdate) send only the changed item, so\n    # totals and subject must be resolved from the previous full-list state.\n    list_key = {\"todos\": \"todos\", \"tasks\": \"tasks\", \"plan\": \"plan\"}.get(kind)\n    is_full_list = list_key is not None and list_key in tool_input\n\n    previous = _read_transcript_checklists(\n        payload.get(\"transcript_path\"), tool_name, items\n    )\n\n    if not is_full_list and previous:\n        total = len(previous)\n        previous_done = {\n            str(i.get(\"id\")) for i in previous\n            if i.get(\"status\") == \"completed\" and i.get(\"id\")\n        }\n        done_count = len(previous_done)\n        events = []\n        for item in items:\n            if item.get(\"status\") != \"completed\":\n                continue\n            item_id = str(item.get(\"id\"))\n            if item_id in previous_done:\n                continue\n            subject = item.get(\"subject\")\n            if not subject:\n                for p in previous:\n                    if str(p.get(\"id\")) == item_id and p.get(\"subject\"):\n                        subject = p[\"subject\"]\n                        break\n            if not subject:\n                subject = \"task\"\n            done_count += 1\n            events.append((\"task.completed\", f\"{subject} {done_count}/{total} done\"))\n        return events\n\n    # For TaskUpdate without a previous full-list state, fold the Claude\n    # TaskCreate/TaskUpdate history to resolve subject and N/M.\n    if tool_name == \"TaskUpdate\" and previous is None:\n        task_id = str(items[0].get(\"id\")) if items else \"\"\n        task_state = _claude_task_state(\n            payload.get(\"transcript_path\"), exclude_task_id=task_id\n        )\n        if task_state:\n            total = len(task_state)\n            previous_done = {\n                tid for tid, info in task_state.items()\n                if info.get(\"status\") == \"completed\"\n            }\n            done_count = len(previous_done)\n            if task_id in task_state and items[0].get(\"status\") == \"completed\" and task_id not in previous_done:\n                subject = task_state[task_id].get(\"subject\") or \"task\"\n                return [(\"task.completed\", f\"{subject} {done_count + 1}/{total} done\")]\n            return []\n\n    total = len(items)\n    completed = [i for i in items if i.get(\"status\") == \"completed\"]\n\n    if previous is None:\n        # First checklist call in this session.\n        events = []\n        events.append((\"checklist.created\", f\"{total} task{'s' if total != 1 else ''}\"))\n        for item in completed:\n            events.append((\n                \"task.completed\",\n                f\"{item['subject']} {len(completed)}/{total} done\",\n            ))\n        return events\n\n    previous_done = {\n        str(i.get(\"id\")) for i in previous\n        if i.get(\"status\") == \"completed\" and i.get(\"id\")\n    }\n    newly_completed = [\n        i for i in completed\n        if str(i.get(\"id\")) not in previous_done\n    ]\n    if not newly_completed:\n        return []\n\n    done_count = len(completed)\n    events = []\n    for item in newly_completed:\n        events.append((\n            \"task.completed\",\n            f\"{item['subject']} {done_count}/{total} done\",\n        ))\n    return events\n\n\ndef _make_record(event, detail, tool_name):\n    tier = \"milestone\" if event in MILESTONE_EVENTS else \"activity\"\n    record = {\n        \"v\": 1,\n        \"ts\": datetime.now(timezone.utc).isoformat(),\n        \"event\": event,\n        \"tier\": tier,\n    }\n    if detail:\n        record[\"detail\"] = detail\n    record[\"tool\"] = tool_name\n    return record\n\n\ndef build_event(payload, hook_event):\n    tool_name = payload.get(\"tool_name\", \"\")\n    tool_input = payload.get(\"tool_input\", {}) or {}\n    tool_response = payload.get(\"tool_response\", {})\n\n    # Checklist completions first -- cheap guard above already filtered tool name.\n    checklist = _checklist_events(payload, hook_event)\n    if checklist:\n        return [_make_record(event, detail, tool_name) for event, detail in checklist], tool_name\n\n    event = None\n    detail = None\n    url = None\n\n    if hook_event == \"PreToolUse\":\n        if tool_name == \"ExitPlanMode\":\n            event = \"plan.created\"\n            detail = first_line(tool_input.get(\"plan\", \"\")) or \"plan presented\"\n        elif tool_name == \"Task\":\n            event = \"subagent.spawned\"\n            role = tool_input.get(\"subagent_type\") or \"agent\"\n            desc = tool_input.get(\"description\") or tool_input.get(\"prompt\") or \"\"\n            detail = (role + \": \" + first_line(desc)).strip(\": \").strip()\n    elif hook_event == \"PostToolUse\":\n        if tool_name == \"Bash\":\n            event = classify_bash(tool_input.get(\"command\", \"\"))\n            if event:\n                detail = first_line(tool_input.get(\"command\", \"\"))\n                url = extract_url(tool_response)\n        elif tool_name in (\"Write\", \"Edit\", \"MultiEdit\"):\n            fp = tool_input.get(\"file_path\") or tool_input.get(\"path\") or \"\"\n            # A freshly-written deliverable is a milestone; edits and code\n            # writes stay routine and collapse to a count.\n            if tool_name == \"Write\" and is_artifact(fp):\n                event = \"artifact.created\"\n            else:\n                event = \"file.edited\"\n            detail = os.path.basename(fp) if fp else tool_name\n\n    if not event:\n        return [], tool_name\n\n    record = _make_record(event, detail, tool_name)\n    if url:\n        record[\"url\"] = url\n    return [record], tool_name\n\n\ndef main():\n    raw = sys.stdin.read()\n    try:\n        payload = json.loads(raw) if raw.strip() else {}\n    except Exception:\n        return\n\n    # Sub-agent gate -- only the top-level agent logs.\n    if payload.get(\"agent_type\"):\n        return\n\n    session_id = payload.get(\"session_id\", \"\")\n    if not session_id:\n        return\n\n    hook_event = payload.get(\"hook_event_name\", \"\")\n    records, tool_name = build_event(payload, hook_event)\n    if not records:\n        return\n\n    safe_session = re.sub(r\"[^A-Za-z0-9._-]\", \"-\", session_id) or \"unknown\"\n    home = os.environ.get(\"HOME\") or os.path.expanduser(\"~\")\n    activity_dir = os.path.join(home, \".agents\", \".history\", \"activity\")\n    target = os.path.join(activity_dir, safe_session + \".jsonl\")\n\n    # Identity (mirrors 10-feed-publish.py).\n    mailbox_id = os.path.basename(\n        os.environ.get(\"AGENTS_MAILBOX_DIR\", \"\").rstrip(\"/\")\n    ) or session_id\n    hostname = os.environ.get(\"AGENTS_SYNC_MACHINE_ID\") or socket.gethostname()\n    host = re.sub(r\"[^a-z0-9_-]\", \"-\", hostname.split(\".\")[0].strip().lower()) or \"unknown\"\n\n    for record in records:\n        record[\"sessionId\"] = session_id\n        record[\"mailboxId\"] = mailbox_id\n        record[\"host\"] = host\n        record[\"runtime\"] = os.environ.get(\"AGENTS_RUNTIME\", \"headless\")\n        cwd = payload.get(\"cwd\") or os.environ.get(\"AGENTS_CWD\")\n        if cwd:\n            record[\"cwd\"] = cwd\n        agent = os.environ.get(\"AGENTS_AGENT_NAME\") or \"claude\"\n        record[\"agent\"] = agent\n\n    try:\n        os.makedirs(activity_dir, exist_ok=True)\n        # Cap growth: once over the size limit, keep only milestones.\n        try:\n            over_limit = os.path.getsize(target) > MAX_LOG_BYTES\n        except OSError:\n            over_limit = False\n        with open(target, \"a\") as f:\n            for record in records:\n                if over_limit and record.get(\"tier\") != \"milestone\":\n                    continue\n                f.write(json.dumps(record) + \"\\n\")\n    except Exception:\n        pass  # fail open\n\n\nif __name__ == \"__main__\":\n    try:\n        main()\n    except Exception:\n        pass  # fail open\n";
 /** Hook manifest entries (agents.yaml shape) for the activity-log hook. */
 export declare const ACTIVITY_HOOK_DEFINITIONS: Record<string, Record<string, unknown>>;
 /**