@phnx-labs/agents-cli 1.22.112 → 1.22.114

package/dist/lib/computer/context.d.ts

@@ -48,12 +48,12 @@ export interface ComputerTargetContext {
     sshArgs: string[];
 }
 /** Who is acting, so the engine can stamp the action it reports back. */
-export interface ComputerSessionContext {
+interface ComputerSessionContext {
     sessionId?: string;
     launchId?: string;
     actor: string;
 }
-export interface ComputerContext {
+interface ComputerContext {
     version: 1;
     permissions?: {
         allow: string[];
@@ -64,13 +64,20 @@ export interface ComputerContext {
     target?: ComputerTargetContext;
     session: ComputerSessionContext;
 }
-export interface BuildContextOptions {
+interface BuildContextOptions {
     /** `--device <name>`, if given. */
     device?: string;
     /** Direct host targeting, which bypasses fleet resolution. */
     host?: string;
     /** Resolved path of the standalone executable, for the peer allow list. */
     computerBin?: string;
+    /**
+     * A precomputed target (PHNX-4090: `resolveDeviceHost` in `commands/computer.ts`
+     * already resolved the device's `computer.host` config, or the ssh fallback).
+     * When present, `device` is used only to gate the local-permissions branch
+     * below — this skips a second, possibly Windows-gated, fleet resolution.
+     */
+    target?: ComputerTargetContext;
 }
 /**
  * Build the context handed to the engine on fd 3.
@@ -81,3 +88,4 @@ export interface BuildContextOptions {
  * layer that can actually see the device's platform.
  */
 export declare function buildComputerContext(opts?: BuildContextOptions): Promise<ComputerContext>;
+export {};

package/dist/lib/computer/context.js

@@ -59,8 +59,8 @@ function agentSessionId(env = process.env) {
  * layer that can actually see the device's platform.
  */
 export async function buildComputerContext(opts = {}) {
-    let target;
-    if (opts.device) {
+    let target = opts.target;
+    if (!target && opts.device) {
         const resolved = await resolveRemoteDevice(opts.device, {
             expectPlatform: 'windows',
             forWhat: '`agents computer --device` drives the Windows computer-helper daemon, so it',

package/dist/lib/computer/policy.d.ts

@@ -22,18 +22,6 @@ export declare function loadComputerAllowList(): string[];
 export declare function loadDefaultPeers(opts?: {
     computerBin?: string;
 }): string[];
-/**
- * Parse a `host:port` VNC endpoint, defaulting the port to 5901. Pure.
- *
- * Kept on the consumer side because the `--vnc` FLAG is parsed here — the
- * platform gate has to know whether a remote desktop was named before the
- * engine is ever spawned (see `shouldBlockOffPlatform`). The RFB protocol
- * implementation itself went to the engine.
- */
-export declare function parseVncEndpoint(raw: string | undefined): {
-    host: string;
-    port: number;
-} | null;
 export declare function resolveTcpEndpoint(): {
     host: string;
     port: number;

package/dist/lib/computer/policy.js

@@ -120,7 +120,7 @@ export function loadDefaultPeers(opts = {}) {
  * engine is ever spawned (see `shouldBlockOffPlatform`). The RFB protocol
  * implementation itself went to the engine.
  */
-export function parseVncEndpoint(raw) {
+function parseVncEndpoint(raw) {
     if (!raw || raw.length === 0)
         return null;
     const idx = raw.lastIndexOf(':');

package/dist/lib/computer-client.d.ts

@@ -114,7 +114,7 @@ export declare function parseEventLines(buffer: string): {
     events: ComputerActionEvent[];
     rest: string;
 };
-export interface RunComputerOptions {
+interface RunComputerOptions {
     /** argv handed to the standalone, after the program name. */
     argv: string[];
     /** The consumer context serialized onto fd 3. */
@@ -131,7 +131,7 @@ export interface RunComputerOptions {
      */
     capture?: boolean;
 }
-export interface RunComputerResult {
+interface RunComputerResult {
     exitCode: number;
     /** Engine stdout, only when `capture` was set. */
     stdout: string;
@@ -147,4 +147,4 @@ export interface RunComputerResult {
 export declare function runComputer(opts: RunComputerOptions): Promise<RunComputerResult>;
 /** Test seam: drop the memoized bin so PATH fixtures can re-resolve. */
 export declare function _resetComputerClientForTest(): void;
-export declare const COMPUTER_INSTALL_HINT = "npm i -g @phnx-labs/computer-cli";
+export {};

package/dist/lib/computer-client.js

@@ -219,4 +219,3 @@ function osSignalNumber(signal) {
 export function _resetComputerClientForTest() {
     cachedBin = undefined;
 }
-export const COMPUTER_INSTALL_HINT = INSTALL_HINT;

package/dist/lib/concurrency.d.ts

@@ -10,10 +10,11 @@
  * `lsof`, multi-dotfile scans) reads to behavioral EDR as recon/enumeration. A
  * bounded, spread-out spawn rate produces the same data without the burst signature.
  */
-export interface BoundedMapOptions {
+interface BoundedMapOptions {
     /** Maximum number of `fn` calls running at once. Coerced to >= 1. */
     concurrency: number;
     /** Minimum spacing (ms) between successive task starts. 0 (default) = no spacing. */
     staggerMs?: number;
 }
 export declare function mapBounded<T, R>(items: readonly T[], fn: (item: T, index: number) => Promise<R>, opts: BoundedMapOptions): Promise<R[]>;
+export {};

package/dist/lib/config-keys.d.ts

@@ -9,7 +9,14 @@
 import type { AgentId } from './types.js';
 import { type ModelTier } from './model-tiers.js';
 /** The top-level scope of a unified config key. */
-export type ConfigScope = 'run' | 'interactive' | 'auto' | 'browser' | 'project' | 'device' | 'summarizer' | 'updates';
+export type ConfigScope = 'run' | 'interactive' | 'auto' | 'browser' | 'project' | 'device' | 'summarizer' | 'updates' | 'menubar';
+/**
+ * The AGI Menu preference leaf names under `menubar.menu.*` (PHNX-3999). The
+ * types, defaults, and enum validation for each live in `device-config.ts`'s
+ * CONFIG_KEYS (user scope); this list is only the parser's allow-set so an
+ * unknown `menubar.menu.<x>` fails loud here instead of at the store.
+ */
+export declare const MENUBAR_MENU_PROPERTIES: readonly ["defaultProject", "workingRowsShown", "showPreviews", "projectPriorityFilter", "hideCompletedMilestones", "bannerWhenNeedsYou", "includeOtherDeviceRequests", "groupBy", "thenBy", "projectScope", "projectSort", "ticketSort", "showPullRequests"];
 /** A run-time default key: model, mode, effort, or tier override. */
 export interface ParsedRunConfigKey {
     scope: 'run';
@@ -60,8 +67,14 @@ export interface ParsedUpdatesConfigKey {
     property: 'auto';
     agent?: AgentId;
 }
-export type ParsedConfigKey = ParsedRunConfigKey | ParsedInteractiveConfigKey | ParsedAutoConfigKey | ParsedBrowserConfigKey | ParsedProjectConfigKey | ParsedDeviceConfigKey | ParsedSummarizerConfigKey | ParsedUpdatesConfigKey;
-export type DeviceConfigProperty = 'role' | 'max-agents' | 'scheduler' | 'daemon' | 'watchdog' | 'tmux' | 'browser.remote-control' | 'browser.task-idle-minutes' | 'notes' | 'browser.profile' | 'browser.viewer';
+/** An AGI Menu preference key: `menubar.menu.<property>` (user-scope, PHNX-3999). */
+export interface ParsedMenubarConfigKey {
+    scope: 'menubar';
+    /** Leaf name under `menubar.menu.` — one of {@link MENUBAR_MENU_PROPERTIES}. */
+    property: string;
+}
+export type ParsedConfigKey = ParsedRunConfigKey | ParsedInteractiveConfigKey | ParsedAutoConfigKey | ParsedBrowserConfigKey | ParsedProjectConfigKey | ParsedDeviceConfigKey | ParsedSummarizerConfigKey | ParsedUpdatesConfigKey | ParsedMenubarConfigKey;
+export type DeviceConfigProperty = 'role' | 'max-agents' | 'scheduler' | 'daemon' | 'watchdog' | 'tmux' | 'browser.remote-control' | 'browser.task-idle-minutes' | 'notes' | 'browser.profile' | 'browser.viewer' | 'computer.host' | 'formFactor';
 /** Normalize agent@version to use `@` consistently. */
 export declare function formatAgentVersion(agent: AgentId, version: string): string;
 /**

package/dist/lib/config-keys.js

@@ -9,6 +9,27 @@
 import { AGENTS } from './agents.js';
 import { MODEL_TIERS } from './model-tiers.js';
 import { VERSION_RE } from './run-defaults.js';
+/**
+ * The AGI Menu preference leaf names under `menubar.menu.*` (PHNX-3999). The
+ * types, defaults, and enum validation for each live in `device-config.ts`'s
+ * CONFIG_KEYS (user scope); this list is only the parser's allow-set so an
+ * unknown `menubar.menu.<x>` fails loud here instead of at the store.
+ */
+export const MENUBAR_MENU_PROPERTIES = [
+    'defaultProject',
+    'workingRowsShown',
+    'showPreviews',
+    'projectPriorityFilter',
+    'hideCompletedMilestones',
+    'bannerWhenNeedsYou',
+    'includeOtherDeviceRequests',
+    'groupBy',
+    'thenBy',
+    'projectScope',
+    'projectSort',
+    'ticketSort',
+    'showPullRequests',
+];
 const DEVICE_CONFIG_PROPERTIES = [
     'browser.viewer',
     'role',
@@ -21,6 +42,8 @@ const DEVICE_CONFIG_PROPERTIES = [
     'browser.task-idle-minutes',
     'notes',
     'browser.profile',
+    'computer.host',
+    'formFactor',
 ];
 /** Split an agent@version token into its parts. Accepts both `@` and `:`. */
 function parseAgentVersion(token) {
@@ -98,6 +121,14 @@ export function parseConfigKey(key) {
     if (summarizerMatch) {
         return { scope: 'summarizer', property: summarizerMatch[1] };
     }
+    const menubarMatch = raw.match(/^menubar\.menu\.(.+)$/);
+    if (menubarMatch) {
+        const property = menubarMatch[1];
+        if (!MENUBAR_MENU_PROPERTIES.includes(property)) {
+            throw new Error(`Unknown AGI Menu preference '${key}'. Known keys: ${MENUBAR_MENU_PROPERTIES.map((p) => `menubar.menu.${p}`).join(', ')}.`);
+        }
+        return { scope: 'menubar', property };
+    }
     if (raw === 'updates.auto') {
         return { scope: 'updates', property: 'auto' };
     }
@@ -109,7 +140,7 @@ export function parseConfigKey(key) {
         }
         return { scope: 'updates', agent: agentPart, property: 'auto' };
     }
-    const deviceMatch = raw.match(/^devices\.(.+)\.(role|max-agents|scheduler|daemon|watchdog|tmux|notes|browser\.remote-control|browser\.task-idle-minutes|browser\.profile|browser\.viewer)$/);
+    const deviceMatch = raw.match(/^devices\.(.+)\.(role|max-agents|scheduler|daemon|watchdog|tmux|notes|formFactor|browser\.remote-control|browser\.task-idle-minutes|browser\.profile|browser\.viewer|computer\.host)$/);
     if (deviceMatch) {
         return {
             scope: 'device',
@@ -139,10 +170,13 @@ export function parseConfigKey(key) {
     if (raw.startsWith('updates.')) {
         throw new Error(`Invalid updates config key '${key}'. Use updates.auto or updates.<agent>.auto.`);
     }
+    if (raw.startsWith('menubar.')) {
+        throw new Error(`Invalid AGI Menu config key '${key}'. Use ${MENUBAR_MENU_PROPERTIES.map((p) => `menubar.menu.${p}`).join(', ')}.`);
+    }
     if (raw.startsWith('devices.')) {
         throw new Error(`Invalid device config key '${key}'. Expected devices.<name>.<${DEVICE_CONFIG_PROPERTIES.join('|')}>.`);
     }
-    throw new Error(`Unknown config scope in '${key}'. Use one of: run, interactive, auto, browser, project, devices, summarizer.`);
+    throw new Error(`Unknown config scope in '${key}'. Use one of: run, interactive, auto, browser, project, devices, summarizer, updates, menubar.`);
 }
 /** Render a parsed key back to its canonical dotted string. */
 export function formatConfigKey(parsed) {
@@ -168,6 +202,8 @@ export function formatConfigKey(parsed) {
             return `summarizer.${parsed.property}`;
         case 'updates':
             return parsed.agent ? `updates.${parsed.agent}.auto` : 'updates.auto';
+        case 'menubar':
+            return `menubar.menu.${parsed.property}`;
     }
 }
 /** List every canonical key the command documents, with wildcards expanded to a concrete example. */
@@ -178,6 +214,9 @@ export function listKnownConfigKeys() {
         keys.push(`run.<agent@version>.tier.${tier}`);
     }
     keys.push('interactive.host', 'auto.pool', 'browser.profile', 'browser.viewer', 'browser.device', 'project.root', 'summarizer.enabled', 'summarizer.baseUrl', 'summarizer.model', 'updates.auto', 'updates.<agent>.auto');
+    for (const prop of MENUBAR_MENU_PROPERTIES) {
+        keys.push(`menubar.menu.${prop}`);
+    }
     for (const prop of DEVICE_CONFIG_PROPERTIES) {
         keys.push(`devices.<name>.${prop}`);
     }
@@ -212,6 +251,10 @@ export function devicePropertyToConfigName(property) {
             return 'browser.profile';
         case 'browser.viewer':
             return 'browser.viewer';
+        case 'computer.host':
+            return 'computer.host';
+        case 'formFactor':
+            return 'formFactor';
     }
 }
 /**
@@ -253,5 +296,7 @@ export function configKeyStorageHint(parsed) {
             return parsed.agent
                 ? `config.updatesAgentAuto.${parsed.agent} (central agents.yaml; syncs fleet-wide)`
                 : 'config.updatesAuto (central agents.yaml; syncs fleet-wide)';
+        case 'menubar':
+            return `config.menubarMenu${parsed.property.charAt(0).toUpperCase()}${parsed.property.slice(1)} (central agents.yaml; syncs fleet-wide)`;
     }
 }

package/dist/lib/convert.d.ts

@@ -4,16 +4,6 @@
  * Handles frontmatter parsing and bidirectional translation so that slash commands
  * authored in one format can be synced to agents that expect the other.
  */
-/** Parsed YAML frontmatter from a Markdown command file. */
-export interface MarkdownFrontmatter {
-    description?: string;
-    [key: string]: unknown;
-}
-/** Extract YAML frontmatter and body from a Markdown string. Returns empty frontmatter if none found. */
-export declare function parseMarkdownFrontmatter(content: string): {
-    frontmatter: MarkdownFrontmatter;
-    body: string;
-};
 /** Convert a Markdown command file to Gemini's TOML format, translating $ARGUMENTS to {{args}}. */
 export declare function markdownToToml(skillName: string, markdown: string): string;
 /**
@@ -27,5 +17,3 @@ export declare function markdownToToml(skillName: string, markdown: string): str
  * Returns a plain object so the caller can `yaml.stringify` it.
  */
 export declare function markdownToGooseRecipe(commandName: string, markdown: string): Record<string, unknown>;
-/** Convert a Gemini TOML command file back to Markdown format, translating {{args}} to $ARGUMENTS. */
-export declare function tomlToMarkdown(toml: string): string;

package/dist/lib/convert.js

@@ -5,7 +5,7 @@
  * authored in one format can be synced to agents that expect the other.
  */
 /** Extract YAML frontmatter and body from a Markdown string. Returns empty frontmatter if none found. */
-export function parseMarkdownFrontmatter(content) {
+function parseMarkdownFrontmatter(content) {
     const match = content.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
     if (!match) {
         return { frontmatter: {}, body: content };
@@ -62,14 +62,3 @@ export function markdownToGooseRecipe(commandName, markdown) {
         prompt,
     };
 }
-/** Convert a Gemini TOML command file back to Markdown format, translating {{args}} to $ARGUMENTS. */
-export function tomlToMarkdown(toml) {
-    const nameMatch = toml.match(/name\s*=\s*"([^"]+)"/);
-    const descMatch = toml.match(/description\s*=\s*"([^"]+)"/);
-    const promptMatch = toml.match(/prompt\s*=\s*(?:'''|""")([\s\S]*?)(?:'''|""")/);
-    const description = descMatch?.[1] || '';
-    let prompt = promptMatch?.[1]?.trim() || '';
-    prompt = prompt.replace(/\{\{args\}\}/g, '$ARGUMENTS');
-    const lines = ['---', `description: ${description}`, '---', '', prompt, ''];
-    return lines.join('\n');
-}

package/dist/lib/crabbox/cli.d.ts

@@ -45,7 +45,7 @@ export interface CrabboxBox {
     /** Idle-timeout window in seconds, or null. */
     idleTimeoutSecs: number | null;
 }
-export interface CrabboxOptions {
+interface CrabboxOptions {
     /**
      * Name of a secrets bundle whose env (e.g. `HCLOUD_TOKEN`) crabbox needs to
      * reach its cloud provider. Resolved via agents-cli's own keychain-backed
@@ -63,21 +63,8 @@ export interface CrabboxOptions {
 }
 /** Locate the crabbox binary, or throw an actionable error. */
 export declare function findCrabbox(): string;
-/**
- * Env keys that mark a secrets bundle as usable for `--lease` — the provider
- * tokens crabbox reads to reach a cloud API. Matching a bundle needs only its
- * declared key NAMES; only the matched key's VALUE is ever injected (see
- * `crabboxEnv`), so an auto-detected bundle can't leak its other secrets.
- */
-export declare const LEASE_PROVIDER_TOKEN_KEYS: string[];
 /** The first bundle that declares a provider token key, or undefined. Pure over `bundles`. */
 export declare function pickLeaseBundleFromList(bundles: SecretsBundle[]): string | undefined;
-/**
- * Env keys a bundle may use for a Tailscale auth key. crabbox reads
- * `CRABBOX_TAILSCALE_AUTH_KEY` to join a leased box to the tailnet; we accept the
- * common alternate names too and rename to that canonical key on injection.
- */
-export declare const TAILSCALE_AUTH_KEY_NAMES: string[];
 /** The first bundle + key that declares a Tailscale auth key, or undefined. Pure over `bundles`. */
 export declare function pickTailscaleBundleFromList(bundles: SecretsBundle[]): {
     name: string;
@@ -86,7 +73,7 @@ export declare function pickTailscaleBundleFromList(bundles: SecretsBundle[]): {
 /** Test seam: drop every crabboxEnv secrets memo so each test resolves fresh. */
 export declare function resetCrabboxSecretsMemosForTest(): void;
 /** A resolved lease bundle: its name, plus (auto-detect only) the exact keys to inject. */
-export interface ResolvedLeaseBundle {
+interface ResolvedLeaseBundle {
     name: string;
     /** When set (auto-detect), inject ONLY these keys — not the whole bundle. */
     keys?: string[];
@@ -122,7 +109,7 @@ export declare function crabboxFind(slug: string, opts?: CrabboxOptions): Crabbo
  * (mirrors scripts/sandbox.sh's `box_ready`).
  */
 export declare function crabboxStatusReady(slug: string, opts?: CrabboxOptions): boolean;
-export interface PoolMatchOptions {
+interface PoolMatchOptions {
     /**
      * Lease pool label (shared default, or `.crabbox.yaml leaseProfile:` opt-in;
      * see config.ts). Both sides normalize an unset profile to
@@ -149,7 +136,7 @@ export interface PoolMatchOptions {
  * run may be mid-boot on it, and crabbox's idle timeout reaps genuine duds.
  */
 export declare function poolReusableBoxes(boxes: CrabboxBox[], opts?: PoolMatchOptions): CrabboxBox[];
-export interface WarmupOptions extends CrabboxOptions {
+interface WarmupOptions extends CrabboxOptions {
     class?: string;
     profile?: string;
     /** Provision web code-server capability on the box. */
@@ -181,7 +168,7 @@ export declare function crabboxWaitReady(slug: string, opts?: CrabboxOptions & {
     intervalMs?: number;
     sleep?: (ms: number) => Promise<void>;
 }): Promise<CrabboxBox>;
-export interface CrabboxRunOptions extends CrabboxOptions {
+interface CrabboxRunOptions extends CrabboxOptions {
     /** Called with each chunk of combined stdout/stderr as it streams. */
     onData?: (chunk: string) => void;
     /** Force a full remote resync before running. */
@@ -189,12 +176,6 @@ export interface CrabboxRunOptions extends CrabboxOptions {
     /** Refresh an existing lease with this idle window before running. */
     renewIdleTimeoutSecs?: number;
 }
-/**
- * Run `remoteCmd` on the leased box via `crabbox run` (crabbox syncs the dirty
- * checkout and owns the SSH). Streams combined output; resolves with the remote
- * exit code (or null if crabbox itself failed to dispatch).
- */
-export declare function crabboxRun(slug: string, remoteCmd: string, opts?: CrabboxRunOptions): Promise<number | null>;
 /**
  * Upload `script` to the box via `crabbox run --script-stdin` and run it.
  *
@@ -251,3 +232,4 @@ export declare function reapOrphans(opts?: CrabboxOptions & {
     candidates: CrabboxBox[];
     reaped: string[];
 };
+export {};

package/dist/lib/crabbox/cli.js

@@ -29,7 +29,7 @@ export function findCrabbox() {
  * declared key NAMES; only the matched key's VALUE is ever injected (see
  * `crabboxEnv`), so an auto-detected bundle can't leak its other secrets.
  */
-export const LEASE_PROVIDER_TOKEN_KEYS = ['HCLOUD_TOKEN', 'AWS_ACCESS_KEY_ID', 'DIGITALOCEAN_TOKEN', 'DO_TOKEN'];
+const LEASE_PROVIDER_TOKEN_KEYS = ['HCLOUD_TOKEN', 'AWS_ACCESS_KEY_ID', 'DIGITALOCEAN_TOKEN', 'DO_TOKEN'];
 /** The first bundle that declares a provider token key, or undefined. Pure over `bundles`. */
 export function pickLeaseBundleFromList(bundles) {
     for (const b of bundles) {
@@ -43,7 +43,7 @@ export function pickLeaseBundleFromList(bundles) {
  * `CRABBOX_TAILSCALE_AUTH_KEY` to join a leased box to the tailnet; we accept the
  * common alternate names too and rename to that canonical key on injection.
  */
-export const TAILSCALE_AUTH_KEY_NAMES = ['CRABBOX_TAILSCALE_AUTH_KEY', 'TAILSCALE_AUTH_KEY', 'TS_AUTHKEY'];
+const TAILSCALE_AUTH_KEY_NAMES = ['CRABBOX_TAILSCALE_AUTH_KEY', 'TAILSCALE_AUTH_KEY', 'TS_AUTHKEY'];
 /** The first bundle + key that declares a Tailscale auth key, or undefined. Pure over `bundles`. */
 export function pickTailscaleBundleFromList(bundles) {
     for (const b of bundles) {
@@ -447,32 +447,6 @@ export async function crabboxWaitReady(slug, opts = {}) {
     }
     throw new Error(`crabbox box "${slug}" did not become ready within ${Math.round(timeoutMs / 1000)}s (state: ${last?.state ?? 'gone'}).`);
 }
-/**
- * Run `remoteCmd` on the leased box via `crabbox run` (crabbox syncs the dirty
- * checkout and owns the SSH). Streams combined output; resolves with the remote
- * exit code (or null if crabbox itself failed to dispatch).
- */
-export function crabboxRun(slug, remoteCmd, opts = {}) {
-    findCrabbox();
-    const args = ['run', '--id', slug, '--reclaim'];
-    if (opts.fullResync)
-        args.push('--full-resync');
-    args.push('--', 'bash', '-lc', remoteCmd);
-    return new Promise((resolve) => {
-        const proc = spawn('crabbox', args, { env: crabboxEnv(opts), stdio: ['ignore', 'pipe', 'pipe'] });
-        const pump = (chunk) => {
-            const s = chunk.toString('utf-8');
-            if (opts.onData)
-                opts.onData(s);
-            else
-                process.stdout.write(s);
-        };
-        proc.stdout.on('data', pump);
-        proc.stderr.on('data', pump);
-        proc.on('error', () => resolve(null));
-        proc.on('close', (code) => resolve(code));
-    });
-}
 /**
  * Upload `script` to the box via `crabbox run --script-stdin` and run it.
  *

package/dist/lib/crabbox/lease.d.ts

@@ -33,7 +33,7 @@ import type { AgentId } from '../types.js';
 import { type CrabboxBox } from './cli.js';
 import { type DetectedRuntime } from './runtimes.js';
 /** Phase signal for a lease run, so the command layer can drive a progress UI. */
-export type LeasePhase = {
+type LeasePhase = {
     kind: 'warmup';
     backend?: string;
 } | {
@@ -46,7 +46,7 @@ export type LeasePhase = {
 } | {
     kind: 'teardown';
 };
-export interface LeaseRunOptions {
+interface LeaseRunOptions {
     agent: string;
     prompt: string;
     mode?: string;
@@ -110,7 +110,7 @@ export interface LeaseDispatchProfile {
     provider?: string;
     fallbackModel?: string;
 }
-export interface LeaseRunResult {
+interface LeaseRunResult {
     box: CrabboxBox;
     exitCode: number | null;
     toreDown: boolean;
@@ -126,8 +126,6 @@ export interface LeaseRunResult {
 export declare const LEASE_BOOTSTRAP_FAILED_CODE = 97;
 /** Build a shell-safe, collision-resistant workspace id for one lease run. */
 export declare function leaseWorkspaceId(repoRoot: string, startedAtMs?: number, pid?: number): string;
-/** Isolated box-home path for one run, relative to the shared box user's home. */
-export declare function leaseHomeDir(workspaceId: string): string;
 /**
  * Build the single bootstrap script run on the box: ensure agents-cli, install
  * the picked runtime CLIs, write their credentials, run the agent, then shred
@@ -136,7 +134,7 @@ export declare function leaseHomeDir(workspaceId: string): string;
 export declare function buildBootstrapScript(opts: LeaseRunOptions): string;
 /** Untouched-for-this-long ⇒ no active run holds the box, so an expired one is a stray. */
 export declare const STRAY_GRACE_SECS = 600;
-export interface StrayMatchOptions {
+interface StrayMatchOptions {
     /** Pool the lease belongs to (defaults to DEFAULT_CRABBOX_PROFILE). */
     profile?: string;
     /** Network mode of the lease (default 'public'); a box is partitioned by it. */
@@ -160,3 +158,4 @@ export interface StrayMatchOptions {
  */
 export declare function isExpiredPoolStray(box: CrabboxBox, opts: StrayMatchOptions): boolean;
 export declare function leaseAndRun(opts: LeaseRunOptions): Promise<LeaseRunResult>;
+export {};

package/dist/lib/crabbox/lease.js

@@ -55,7 +55,7 @@ export function leaseWorkspaceId(repoRoot, startedAtMs = Date.now(), pid = proce
     return `${safeRepo}-${startedAtMs.toString(36)}-${pid.toString(36)}`;
 }
 /** Isolated box-home path for one run, relative to the shared box user's home. */
-export function leaseHomeDir(workspaceId) {
+function leaseHomeDir(workspaceId) {
     return `lease-homes/${workspaceId}`;
 }
 function profileRemotePath(name) {

package/dist/lib/crabbox/progress.d.ts

@@ -61,7 +61,7 @@ export declare function createSpinner(opts?: {
     enabled?: boolean;
     intervalMs?: number;
 }): Spinner;
-export interface LeaseOutputRouter {
+interface LeaseOutputRouter {
     /** Feed a raw chunk of the crabbox run's combined stdout/stderr. */
     push(chunk: string): void;
     /** Flush any buffered partial line (call once the stream closes). */
@@ -91,3 +91,4 @@ export declare function createLeaseOutputRouter(cb: {
     marker?: string;
     now?: () => number;
 }): LeaseOutputRouter;
+export {};

package/dist/lib/crabbox/setup-copy.d.ts

@@ -22,9 +22,7 @@
  * ride the box-side bootstrap script (that only echoes the `copy-setup` progress
  * sentinel — see `buildBootstrapScript`).
  */
-/** Remote path (relative to the box user's home) the tracked config lands in. */
-export declare const REMOTE_AGENTS_DIR = ".agents/";
-export interface CopySetupOptions {
+interface CopySetupOptions {
     /** crabbox box slug to push to — its per-lease ssh key does the auth. */
     slug: string;
     /** Secrets bundle whose env the ssh/rsync children inherit (crabbox parity). */
@@ -90,3 +88,4 @@ export declare function buildSetupRsyncArgs(opts: {
  * the returned exit codes.
  */
 export declare function copySetupToBox(opts: CopySetupOptions): Promise<CopySetupResult>;
+export {};

package/dist/lib/crabbox/setup-copy.js

@@ -29,7 +29,7 @@ import * as path from 'path';
 import { getUserAgentsDir } from '../state.js';
 import { crabboxEnv, crabboxSshArgv } from './cli.js';
 /** Remote path (relative to the box user's home) the tracked config lands in. */
-export const REMOTE_AGENTS_DIR = '.agents/';
+const REMOTE_AGENTS_DIR = '.agents/';
 /** Top-level paths that must never be pushed, even if somehow tracked. */
 const NEVER_COPY = new Set(['.claude', '.claude.json']);
 /**

package/dist/lib/daemon/account-state-daemon-service.d.ts

@@ -28,7 +28,7 @@ export declare const USAGE_STATE_TICK_MS = 60000;
 export declare const AUTH_STATE_TICK_MS: number;
 type AccountAuthRefresh = (signal: AbortSignal) => Promise<AuthProbeRow[] | void>;
 type AccountTransitionNotifier = (transition: DeadAccountTransition) => Promise<void>;
-export interface DeadAccountTransition {
+interface DeadAccountTransition {
     agent: AuthProbeRow['agent'];
     /** Display label (email / account name) — presentation only, never a key. */
     account: string;

package/dist/lib/daemon/attention-notify-service.d.ts

@@ -35,7 +35,7 @@ import type { DaemonServiceId } from '../daemon-services.js';
  * through here, so what ships is what is asserted.
  */
 export declare function buildAttentionNotification(item: AttentionItem, session: ActiveSession): DesktopNotification | undefined;
-export interface AttentionNotifyServiceOptions {
+interface AttentionNotifyServiceOptions {
     /** Live-session source (default: the real active-session query). Injected in tests. */
     getSessions?: () => Promise<ActiveSession[]>;
     /** Notifier (default: the real desktop notifier). Injected in tests to capture posts. */
@@ -67,3 +67,4 @@ export declare class AttentionNotifyService extends BasePeriodicService {
     private markNotified;
     private pruneLedger;
 }
+export {};

package/dist/lib/daemon/catchup-service.d.ts

@@ -24,7 +24,7 @@ import type { DaemonServiceId } from '../daemon-services.js';
  * recovering from a wedge or an OS suspend the process survived.
  */
 export declare const CATCHUP_TICK_MS: number;
-export interface CatchupServiceDeps {
+interface CatchupServiceDeps {
     /**
      * Whether the routine scheduler is currently booted. When false (the
      * `scheduler.enabled` gate is off), the pass no-ops — there is nothing to
@@ -49,3 +49,4 @@ export declare class CatchupService extends BasePeriodicService {
     protected onStop(): Promise<void>;
     protected onTick(_ctx: DaemonContext, signal: AbortSignal): Promise<void>;
 }
+export {};

package/dist/lib/daemon/daemon.d.ts

@@ -1,11 +1,3 @@
-/**
- * Daemon lifecycle management for the routines scheduler.
- *
- * The daemon is a long-running process that holds a JobScheduler and
- * triggers jobs on their cron schedules. It can be managed via launchd
- * (macOS), systemd (Linux), or as a plain detached process. PID tracking,
- * log output, reload (SIGHUP), and graceful shutdown are handled here.
- */
 import { isolatedHomeSuffix } from '../service-manifest.js';
 import { getAgentsBinPath } from '../cli-entry.js';
 import type { ServiceHealth } from './service.js';
@@ -75,7 +67,7 @@ export declare const DAEMON_AUTOSTART_FAILURE_LIMIT = 5;
  *   !running + enabled  → boot  (gate flipped on since boot)
  *   !running + !enabled → none  (stay dark)
  */
-export type SchedulerGateTransition = 'reload' | 'stop' | 'boot' | 'none';
+type SchedulerGateTransition = 'reload' | 'stop' | 'boot' | 'none';
 export declare function schedulerGateTransition(running: boolean, enabled: boolean): SchedulerGateTransition;
 /**
  * Wrap an async routine so it runs AT MOST ONCE, however many callers fire it.
@@ -112,7 +104,7 @@ export declare function readDaemonPid(daemonDir?: string): number | null;
 export declare function writeDaemonPid(pid: number): void;
 /** Remove the daemon PID file. */
 export declare function removeDaemonPid(): void;
-export interface DaemonHeartbeat {
+interface DaemonHeartbeat {
     lastTick: string;
     pid: number;
 }
@@ -417,7 +409,7 @@ export declare function startDetached(opts?: StartDetachedOptions): {
  * One piece of daemon state that a graceful `handleShutdown` removes and an
  * escalated kill leaves behind (RUSH-2421).
  */
-export interface StopResidueArtifact {
+interface StopResidueArtifact {
     label: string;
     present: boolean;
     /** The file names a live owner, including a stopped target that survived. */
@@ -446,7 +438,7 @@ export declare function stopResidueArtifacts(stoppedPid: number | null, survivor
  * in-flight routine children that survive deliberately (SING-11a) and are
  * reported, never killed.
  */
-export interface DaemonStopResult {
+interface DaemonStopResult {
     ok: boolean;
     stoppedPid: number | null;
     escalated: boolean;