@phnx-labs/agents-cli 1.22.112 → 1.22.114

package/dist/lib/devices/worker-pick.d.ts

@@ -4,7 +4,7 @@ export interface WorkerExclusion {
     device: string;
     reason: 'unreachable' | 'probe timed out' | 'overloaded' | 'wrong-platform' | 'interactive';
 }
-export interface WorkerPickPlan {
+interface WorkerPickPlan {
     /** The chosen device name. Never the local box unless it is an auto-pool member. */
     device: string;
     /** True when the pick IS this machine (the caller should run in place). */
@@ -16,7 +16,7 @@ export interface WorkerPickPlan {
     }>;
     excluded: WorkerExclusion[];
 }
-export interface WorkerPickOptions {
+interface WorkerPickOptions {
     /** Restrict to these platforms. Defaults to POSIX (`linux`, `macos`). */
     platforms?: string[];
     /** Override the candidate pool (tests). */
@@ -25,16 +25,6 @@ export interface WorkerPickOptions {
     /** Injected probe (tests). */
     probe?: (pool: string[]) => Promise<Map<string, DevicePlacementSignal>>;
 }
-/**
- * Platforms a bun/vitest offload can actually run on.
- *
- * Windows is excluded by policy, not by accident: `AGENTS.md` states Windows is
- * not a required PR or ordinary-release platform and `tests.yml` runs it only as
- * a `continue-on-error` post-merge smoke. Silently shipping the tree to
- * `win-mini` would produce a confusing failure for a platform whose result
- * nobody gates on.
- */
-export declare const POSIX_PLATFORMS: readonly ["linux", "macos"];
 /**
  * Resolve the least-loaded eligible worker.
  *
@@ -46,3 +36,4 @@ export declare const POSIX_PLATFORMS: readonly ["linux", "macos"];
 export declare function resolveWorkerDevice(opts?: WorkerPickOptions): Promise<WorkerPickPlan>;
 /** The one no-worker message, naming every candidate and why it was dropped. */
 export declare function formatNoWorkerError(excluded: WorkerExclusion[], platforms: Set<string>): string;
+export {};

package/dist/lib/devices/worker-pick.js

@@ -34,7 +34,7 @@ import { probePoolSignals } from '../teams/placement-probe.js';
  * `win-mini` would produce a confusing failure for a platform whose result
  * nobody gates on.
  */
-export const POSIX_PLATFORMS = ['linux', 'macos'];
+const POSIX_PLATFORMS = ['linux', 'macos'];
 /**
  * Resolve the least-loaded eligible worker.
  *

package/dist/lib/diff-text.d.ts

@@ -5,7 +5,7 @@
  * pre-coloured unified diff (red = removed, green = added, dim = context).
  * Used by `agents doctor --diff`.
  */
-export interface UnifiedDiffOptions {
+interface UnifiedDiffOptions {
     /** Number of context lines around each change (default: 3). */
     context?: number;
     /** Filename label shown in the patch header for the "expected" side. */
@@ -23,3 +23,4 @@ export declare function unifiedDiff(expected: string, actual: string, options?:
  * a constant prefix so it nests cleanly under a header.
  */
 export declare function colorizeUnifiedDiff(patch: string, indent?: string): string;
+export {};

package/dist/lib/doctor-diff.d.ts

@@ -120,7 +120,7 @@ export declare function isCheckedOutSymlink(filePath: string): boolean;
  * when the mirror faithfully matches source.
  */
 export declare function describePluginDrift(central: DiscoveredPlugin, mirrorDir: string): string | null;
-export interface DiffOptions {
+interface DiffOptions {
     cwd?: string;
     /** Restrict to specific kinds; undefined = all. */
     kinds?: DoctorKind[];
@@ -134,3 +134,4 @@ export interface DiffOptions {
 }
 export declare function diffVersionResources(agent: AgentId, version: string, options?: DiffOptions): VersionResourceReport;
 export declare const DOCTOR_ALL_KINDS: DoctorKind[];
+export {};

package/dist/lib/drift-sync.d.ts

@@ -19,7 +19,7 @@
  */
 import { type VersionHealResult } from './heal.js';
 import { type UnifiedSyncStatus } from './sync-status.js';
-export interface DriftSyncOptions {
+interface DriftSyncOptions {
     cwd?: string;
     /** Reconcile everything detected with no prompts — the "kick it" path, also the
      * non-TTY / menu-bar-launched-with-flag behavior. Pulls `.system` if behind. */
@@ -29,7 +29,7 @@ export interface DriftSyncOptions {
     /** Skip the drift summary — set by callers that already printed their own. */
     quiet?: boolean;
 }
-export interface DriftSyncResult {
+interface DriftSyncResult {
     systemBehindBefore: number;
     systemPulled: boolean;
     healed: VersionHealResult[];
@@ -43,3 +43,4 @@ export interface DriftSyncResult {
  * callers (menu-bar, doctor) can report without re-scanning.
  */
 export declare function promptDriftSync(opts?: DriftSyncOptions): Promise<DriftSyncResult>;
+export {};

package/dist/lib/drift.d.ts

@@ -8,7 +8,7 @@
  * to an exit code. Neither reimplements the diagnostic — both call `computeDrift`.
  */
 import type { AgentId } from './types.js';
-import { type VersionResourceReport, type SourceLayerBehind } from './doctor-diff.js';
+import { type SourceLayerBehind } from './doctor-diff.js';
 export interface SyncStatusRow {
     agent: AgentId;
     version: string;
@@ -32,7 +32,6 @@ export interface OrphanRow {
     skills: number;
     hooks: number;
 }
-export declare function divergenceLines(report: VersionResourceReport): string[];
 export declare function checkSyncStatus(cwd: string): SyncStatusRow[];
 export declare function countOrphans(): OrphanRow[];
 /**
@@ -43,7 +42,7 @@ export declare function countOrphans(): OrphanRow[];
  * only the behind layers. Canonical home for both `agents doctor` and `agents doctor --check`.
  */
 export declare function computeSourceBehind(): SourceLayerBehind[];
-export interface DriftSummary {
+interface DriftSummary {
     syncRows: SyncStatusRow[];
     orphanRows: OrphanRow[];
     /** Versions whose sources changed since last sync. */
@@ -75,3 +74,4 @@ export interface DriftSummary {
  * maps to an exit code; the readout `agents doctor` renders in full.
  */
 export declare function computeDrift(cwd: string): DriftSummary;
+export {};

package/dist/lib/drift.js

@@ -12,7 +12,7 @@ import { getUserAgentsDir, getSystemAgentsDir, getEnabledExtraRepos } from './st
 // invalid manifest, or the bundled skills/commands missing from the mirror —
 // the system-repo plugin content that matters most). Other kinds collapse to
 // compact counts so the readout stays scannable.
-export function divergenceLines(report) {
+function divergenceLines(report) {
     const lines = [];
     for (const p of report.kinds.plugins) {
         if (p.status === 'missing')

package/dist/lib/event-families.d.ts

@@ -3,20 +3,14 @@
  * event reader. One vocabulary maps onto existing filters (includeActivity,
  * eventTypes, level) so the engine stays single-path.
  */
-import type { EventType } from './feed/events.js';
 import type { UnifiedQuery } from './event-stream.js';
 export declare const EVENT_FAMILIES: readonly ["ops", "activity", "commands", "runs", "security"];
 export type EventFamily = (typeof EVENT_FAMILIES)[number];
-export declare function isEventFamily(value: string): value is EventFamily;
 /**
  * Parse a comma-separated family list. Throws on unknown names or empty list
  * after split (same discipline as sessions role lists).
  */
 export declare function parseFamilyList(raw: string, flagName: string): EventFamily[];
-/** Command-churn event kinds. */
-export declare const COMMAND_EVENT_TYPES: readonly EventType[];
-/** Run-dispatch outcome kinds (replaces the separate audit/log.jsonl product). */
-export declare const RUN_EVENT_TYPES: readonly EventType[];
 /**
  * Fold family include/exclude into a UnifiedQuery.
  * Precedence: family narrows sources/types; field filters (module, event, …)

package/dist/lib/event-families.js

@@ -11,7 +11,7 @@ export const EVENT_FAMILIES = [
     'security',
 ];
 const FAMILY_SET = new Set(EVENT_FAMILIES);
-export function isEventFamily(value) {
+function isEventFamily(value) {
     return FAMILY_SET.has(value);
 }
 /**
@@ -34,9 +34,9 @@ export function parseFamilyList(raw, flagName) {
     return out;
 }
 /** Command-churn event kinds. */
-export const COMMAND_EVENT_TYPES = ['command.start', 'command.end'];
+const COMMAND_EVENT_TYPES = ['command.start', 'command.end'];
 /** Run-dispatch outcome kinds (replaces the separate audit/log.jsonl product). */
-export const RUN_EVENT_TYPES = ['run.dispatched', 'run.launch', 'agent.run.end'];
+const RUN_EVENT_TYPES = ['run.dispatched', 'run.launch', 'agent.run.end'];
 /**
  * Fold family include/exclude into a UnifiedQuery.
  * Precedence: family narrows sources/types; field filters (module, event, …)

package/dist/lib/event-provenance.d.ts

@@ -1,5 +1,5 @@
 import { type ActorKind } from './actor.js';
-export interface EventProvenance {
+interface EventProvenance {
     osUser: string;
     transport: 'local' | 'ssh';
     sshClientIp?: string;
@@ -10,6 +10,8 @@ export interface EventProvenance {
     agent?: string;
     launchId?: string;
     parentSessionId?: string;
+    parentLaunchId?: string;
+    originTerminalId?: string;
 }
 /**
  * Stamp the shared identity floor used by both operational and activity events.
@@ -17,3 +19,4 @@ export interface EventProvenance {
  */
 export declare function stampProvenance(env?: NodeJS.ProcessEnv): EventProvenance;
 export declare function resetEventProvenanceForTest(): void;
+export {};

package/dist/lib/event-provenance.js

@@ -40,6 +40,10 @@ export function stampProvenance(env = process.env) {
         provenance.launchId = env.AGENT_LAUNCH_ID;
     if (env.AGENTS_PARENT_SESSION_ID)
         provenance.parentSessionId = env.AGENTS_PARENT_SESSION_ID;
+    if (env.AGENTS_PARENT_LAUNCH_ID)
+        provenance.parentLaunchId = env.AGENTS_PARENT_LAUNCH_ID;
+    if (env.AGENTS_ORIGIN_TERMINAL_ID)
+        provenance.originTerminalId = env.AGENTS_ORIGIN_TERMINAL_ID;
     return provenance;
 }
 export function resetEventProvenanceForTest() {

package/dist/lib/events-ingest.d.ts

@@ -1,9 +1,9 @@
-export interface IngestReject {
+interface IngestReject {
     /** 1-based index of the offending line within the batch. */
     line: number;
     reason: string;
 }
-export interface IngestResult {
+interface IngestResult {
     written: number;
     rejected: IngestReject[];
     /** Per-store counts, so a caller/test can assert routing without reading files. */
@@ -12,7 +12,7 @@ export interface IngestResult {
         activity: number;
     };
 }
-export interface IngestOptions {
+interface IngestOptions {
     /**
      * Producer name, stamped as `module` on operational records so
      * `agents events --module <source>` filters to this producer. Required: an
@@ -44,3 +44,4 @@ export declare function routeFor(event: string, sessionId: unknown): 'activity'
  * events, and the caller still learns exactly which line failed and why.
  */
 export declare function ingestBatch(input: string, opts: IngestOptions): IngestResult;
+export {};

package/dist/lib/exec-account-home.d.ts

@@ -3,8 +3,8 @@ import { isSymlinkAdoptedHarness } from './installations/shims.js';
 import type { AgentId, DeviceAccountSlot, Meta } from './types.js';
 export { isAccountSlotDir } from './agents.js';
 export { isSymlinkAdoptedHarness };
-export type SpawnHomeSource = 'slot' | 'legacy-home' | 'provisioned';
-export interface NativeSpawnHome {
+type SpawnHomeSource = 'slot' | 'legacy-home' | 'provisioned';
+interface NativeSpawnHome {
     execHome: string;
     source: SpawnHomeSource;
     slot?: DeviceAccountSlot;
@@ -32,8 +32,6 @@ export declare function durableSlotEnv(agent: AgentId, account: {
 export declare function missingSlotHint(agent: AgentId, name: string): string;
 export declare function symlinkAdoptedAccountError(agent: AgentId, name: string, defaultName: string | undefined): string;
 export declare function adoptedSymlinkMismatchError(agent: AgentId, name: string, execHome: string): string;
-/** The adopted `~/.<config>` symlink's resolved target, or null when missing / not a symlink. */
-export declare function adoptedConfigTarget(agent: AgentId): string | null;
 export declare function adoptedConfigPointsAtHome(agent: AgentId, home: string): boolean;
 /**
  * For a symlink-adopted harness, point `~/.<config>` at this account's slot

package/dist/lib/exec-account-home.js

@@ -80,7 +80,7 @@ export function adoptedSymlinkMismatchError(agent, name, execHome) {
         + `Switch with: agents accounts default ${agent} ${name}`;
 }
 /** The adopted `~/.<config>` symlink's resolved target, or null when missing / not a symlink. */
-export function adoptedConfigTarget(agent) {
+function adoptedConfigTarget(agent) {
     const configPath = getAgentConfigPath(agent);
     try {
         const stat = fs.lstatSync(configPath);

package/dist/lib/exec-bounded.d.ts

@@ -25,9 +25,7 @@
  * is reported in the returned {@link BoundedExecResult} so a caller on a tick
  * path can branch on it instead of wrapping every call in try/catch.
  */
-/** Grace between SIGTERM and SIGKILL for a child that overran its deadline. */
-export declare const KILL_GRACE_MS = 250;
-export interface ExecFileBoundedOptions {
+interface ExecFileBoundedOptions {
     /** Hard wall-clock cap. On expiry the child's process group is SIGTERMed, then SIGKILLed after {@link KILL_GRACE_MS}. Required — an unbounded tick-path spawn is the bug this helper exists to prevent. */
     timeoutMs: number;
     /** Working directory for the child. */
@@ -37,7 +35,7 @@ export interface ExecFileBoundedOptions {
     /** Optional stdin to write to the child. */
     input?: string;
 }
-export interface BoundedExecResult {
+interface BoundedExecResult {
     stdout: string;
     stderr: string;
     /** Exit code, or null when the process was killed by a signal (including our timeout kill) or never spawned. */
@@ -50,3 +48,4 @@ export interface BoundedExecResult {
  * timeout. Resolves (never rejects) with the captured output and outcome.
  */
 export declare function execFileBounded(file: string, args: string[], opts: ExecFileBoundedOptions): Promise<BoundedExecResult>;
+export {};

package/dist/lib/exec-bounded.js

@@ -27,7 +27,7 @@
  */
 import { spawn } from 'child_process';
 /** Grace between SIGTERM and SIGKILL for a child that overran its deadline. */
-export const KILL_GRACE_MS = 250;
+const KILL_GRACE_MS = 250;
 /**
  * Run `file args` with a hard deadline, killing the whole process group on
  * timeout. Resolves (never rejects) with the captured output and outcome.

package/dist/lib/exec.d.ts

@@ -337,7 +337,7 @@ export declare function ensureVendorHomeDir(agent: AgentId, versionHome: string)
  * with AGENTS[agent].capabilities.modes — resolveMode() routes a request to a
  * supported mode (or throws), then buildExecCommand looks up the flags here.
  */
-export interface AgentCommandTemplate {
+interface AgentCommandTemplate {
     base: string[];
     promptFlag: 'positional' | string;
     modeFlags: Partial<Record<Mode, string[]>>;
@@ -533,7 +533,7 @@ export interface TmuxWrapContext {
  * "spawn bare" — it is a launch that should not happen, because a bare remote
  * spawn looks fine right up until the link blinks and the agent dies with it.
  */
-export type TmuxWrapDecision = 
+type TmuxWrapDecision = 
 /** Run the agent in a detached tmux session and attach this TTY. */
 {
     kind: 'wrap';
@@ -606,7 +606,7 @@ export declare function formatPaneTail(raw: string, maxLines?: number): string;
  * unbuffered.
  */
 /** Inputs the pre-launch `run.launch` payload is built from. */
-export interface RunLaunchInput {
+interface RunLaunchInput {
     agent: AgentId;
     harnessName?: string;
     /** The version being launched, or undefined when none could be resolved. */
@@ -662,7 +662,7 @@ export declare function detectOutOfCredits(text: string): boolean;
  * clock), then a clock-less billing exhaustion, then a clean success clears any
  * stale marker; anything else leaves the marker untouched.
  */
-export type ClaudeRefusalAction = {
+type ClaudeRefusalAction = {
     action: 'note_session';
     resetsAt: Date;
 } | {
@@ -712,19 +712,6 @@ export declare function parseCodexUsageLimitReset(text: string, nowMs?: number):
  * cascades via detectRateLimit) rather than persisting an unexpirable marker.
  */
 export declare function classifyCodexRunRefusal(output: string, exitCode: number, nowMs?: number): ClaudeRefusalAction;
-/**
- * Patterns that indicate an authentication failure — the agent is logged out,
- * its token was revoked, or the session expired. These are the user-visible
- * strings a logged-out agent surfaces (observed across the routine-run corpus).
- * Unlike a rate limit, an auth failure is NOT self-healing by failover — every
- * chain entry on the same account fails identically — so it is classified
- * separately and never triggers a fallback attempt.
- *
- * The bare `401` is deliberately paired with an auth keyword: a plain "401" can
- * appear in legitimate output (an HTTP-status table, a log line), so it only
- * counts when it co-occurs with OAuth/authentication/credentials/Unauthorized.
- */
-export declare const AUTH_FAILURE_PATTERNS: RegExp[];
 /**
  * Return true if the text contains any known authentication-failure indicator.
  * Agent-agnostic: matches the user-visible error string wherever it surfaces
@@ -782,7 +769,7 @@ export interface FallbackEntry {
     envOverride?: Record<string, string>;
 }
 /** ExecOptions extended with a fallback chain for rate-limit cascading. */
-export interface FallbackOptions extends ExecOptions {
+interface FallbackOptions extends ExecOptions {
     /** Ordered list of agents to try if the primary (options.agent) hits a rate limit. */
     fallback: FallbackEntry[];
     /** Fallback requires a prompt -- chain handoff doesn't apply to interactive sessions. */
@@ -825,3 +812,4 @@ export declare function buildFallbackPrompt(prevAgent: AgentId, prevSessionId: s
  * instead of an opaque "all agents failed" message.
  */
 export declare function runWithFallback(options: FallbackOptions): Promise<number>;
+export {};

package/dist/lib/exec.js

@@ -1,3 +1,4 @@
+import { captureLaunchBinding, recordCompletedLaunch } from './session/hook-sessions.js';
 /**
  * Agent execution -- command building, process spawning, and rate-limit fallback.
  *
@@ -17,6 +18,7 @@ import { isTierToken, resolveTier } from './model-tiers.js';
 import { emit, createTimer, redactPrompt, redactArgs } from './feed/events.js';
 import { sanitizeProcessEnv } from './secrets-client.js';
 import { resolveActor, actorEnv } from './actor.js';
+import { launchIdentityEnv, LAUNCH_IDENTITY_KEYS } from './launch-identity.js';
 import { expandLocalHome } from './project-root.js';
 import { getShimsDir, getHistoryDir, getUserAgentsDir, getRuntimeStateDir } from './state.js';
 import { readCodexConfiguredModel } from './installations/shims.js';
@@ -378,6 +380,14 @@ export function buildExecEnv(options) {
     else {
         stripForeignConfigDir(result);
     }
+    // A new harness must not inherit its spawner's own session/mailbox or editor
+    // ownership. Keep those relationships as lineage, including across SSH.
+    delete result.AGENT_SESSION_ID;
+    delete result.AGENTS_SESSION_ID;
+    delete result.AGENTS_MAILBOX_DIR;
+    delete result.AGENT_TERMINAL_ID;
+    const launchIdentity = launchIdentityEnv();
+    Object.assign(result, launchIdentity);
     // Point the agent at its own mailbox so the PreToolUse `mailbox-inject` hook
     // knows which box to drain and inject mid-run. Keyed by the session id — the
     // same id the writer resolves via mailboxIdForActiveSession(). A loop run
@@ -394,9 +404,9 @@ export function buildExecEnv(options) {
     // (events.ts::resolveProvenance) reads AGENTS_PARENT_SESSION_ID and stamps it on
     // every event the child emits. `options.sessionId` is the CHILD's id, so read the
     // spawner from the live env; guard a same-session resume from naming itself parent.
-    // Local-spawn scope here; forwarding it across the `--device` SSH hop is Phase 4.
+    // An SSH continuation has no runtime marker; keep its forwarded parent edge.
     delete result.AGENTS_PARENT_SESSION_ID;
-    const spawnerSessionId = process.env.AGENTS_SESSION_ID || process.env.AGENT_SESSION_ID;
+    const spawnerSessionId = launchIdentity.AGENTS_PARENT_SESSION_ID;
     if (spawnerSessionId && spawnerSessionId !== options.sessionId) {
         result.AGENTS_PARENT_SESSION_ID = spawnerSessionId;
     }
@@ -1210,7 +1220,7 @@ async function execShimPassthroughLeased(agent, rawArgs, cwd, pinnedVersion) {
                 actor: resolveActor().id,
                 initiatedBy: resolveActor().kind,
                 launchId,
-                terminalId: process.env.AGENT_TERMINAL_ID,
+                terminalId: launchIdentityEnv().AGENT_TERMINAL_ID,
                 startedAtMs: Date.now(),
             });
             // Durable sessionId -> actor record (RUSH-2019) so the scanner can attribute
@@ -1347,6 +1357,7 @@ export function isHarnessKnownSessionId(agent, sessionId, resume) {
  */
 export function buildTmuxAgentCommand(executable, args, env, opts = {}) {
     const agentCmd = [executable, ...args].map(shellQuote).join(' ');
+    const absentIdentity = LAUNCH_IDENTITY_KEYS.filter(key => env[key] === undefined);
     // envFile: source the values instead of inlining them, so no VALUE ever lands
     // in the pane's argv. `exec env K=V …` put every resolved secret into the
     // process table, readable by any process of this user — on one fleet box six
@@ -1361,13 +1372,13 @@ export function buildTmuxAgentCommand(executable, args, env, opts = {}) {
         // strands the plaintext env (incl. the secrets-store master passphrase) on
         // disk on any source failure, worse than the argv leak this replaces
         // (RUSH-2100). Capture the source rc, unlink, then honor it.
-        return `set -a; . ${f}; __agents_rc=$?; set +a; rm -f ${f}; [ "$__agents_rc" -eq 0 ] || exit 1; exec ${agentCmd}`;
+        return `${absentIdentity.length ? `unset ${absentIdentity.join(' ')}; ` : ''}set -a; . ${f}; __agents_rc=$?; set +a; rm -f ${f}; [ "$__agents_rc" -eq 0 ] || exit 1; exec ${agentCmd}`;
     }
     const envPrefix = Object.entries(env)
         .filter(([k, v]) => v !== undefined && EXEC_ENV_KEY_PATTERN.test(k))
         .map(([k, v]) => `${k}=${opts.redactEnvValues ? '<redacted>' : shellQuote(String(v))}`)
         .join(' ');
-    return `exec env ${envPrefix} ${agentCmd}`;
+    return `exec env ${absentIdentity.map(key => `-u ${key}`).join(' ')} ${envPrefix} ${agentCmd}`;
 }
 /**
  * Serialize the pane env to a shell-sourceable file, created 0600 and exclusively
@@ -1493,9 +1504,14 @@ async function runInTmux(options, executable, args) {
      * "the session went away underneath us", so an attach that skips this cannot
      * do better than assume success — which is exactly the defect EXEC-23b fixes.
      */
+    let paneLaunchBinding;
+    const bindCompletedPane = () => {
+        recordCompletedLaunch(paneLaunchBinding);
+    };
     const resolveAfterAttach = async (pane) => {
         const after = pane ? await paneExitStatus(pane, socket) : { found: false, dead: false, status: undefined };
         if (after.dead) {
+            bindCompletedPane();
             // Positive proof of a genuinely completed pane (paneExitStatus confirmed
             // dead) — capture its scrollback as refusal evidence for the caller
             // (classifyClaudeRunRefusal etc.) BEFORE tearing the session down.
@@ -1633,10 +1649,11 @@ async function runInTmux(options, executable, args) {
             // pid) reconciles by launchId. This pane's pid usually IS the agent pid,
             // but the launchId join is robust even when it isn't.
             launchId: options.env?.AGENT_LAUNCH_ID,
-            terminalId: process.env.AGENT_TERMINAL_ID,
+            terminalId: launchIdentityEnv().AGENT_TERMINAL_ID,
             tmuxPane: pane,
             startedAtMs: Date.now(),
         });
+        paneLaunchBinding = captureLaunchBinding(panePid, options.env?.AGENT_LAUNCH_ID ?? '');
         if (options.sessionId) {
             writeSessionActorRecord({
                 sessionId: options.sessionId,
@@ -1653,6 +1670,7 @@ async function runInTmux(options, executable, args) {
     // already-dead pane — surface its output + status directly and tear down.
     const before = pane ? await paneExitStatus(pane, socket) : { found: false, dead: false, status: undefined };
     if (before.dead) {
+        bindCompletedPane();
         // Positive proof of a genuinely completed pane — capture scrollback as
         // refusal evidence before tearing the session down (see the matching
         // comment in resolveAfterAttach).
@@ -2071,10 +2089,11 @@ async function spawnAgentLeased(options) {
             actor: resolveActor().id,
             initiatedBy: resolveActor().kind,
             launchId,
-            terminalId: process.env.AGENT_TERMINAL_ID,
+            terminalId: launchIdentityEnv().AGENT_TERMINAL_ID,
             tmuxPane: process.env.TMUX_PANE,
             startedAtMs: Date.now(),
         });
+        const launchBinding = captureLaunchBinding(child.pid, launchId);
         if (options.sessionId) {
             writeSessionActorRecord({
                 sessionId: options.sessionId,
@@ -2146,6 +2165,7 @@ async function spawnAgentLeased(options) {
             reject(err);
         });
         child.on('close', (code) => {
+            recordCompletedLaunch(launchBinding);
             if (timeoutTimer)
                 clearTimeout(timeoutTimer);
             // Clear the budget-kill SIGKILL escalation timer (mirror the --timeout
@@ -2393,7 +2413,7 @@ export function classifyCodexRunRefusal(output, exitCode, nowMs = Date.now()) {
  * appear in legitimate output (an HTTP-status table, a log line), so it only
  * counts when it co-occurs with OAuth/authentication/credentials/Unauthorized.
  */
-export const AUTH_FAILURE_PATTERNS = [
+const AUTH_FAILURE_PATTERNS = [
     /OAuth (?:access token has been revoked|session expired)/i,
     /(?:Please run|run) \/login/i,
     /Please run 'agent login' first/i,

package/dist/lib/factory/snapshot.d.ts

@@ -62,7 +62,7 @@ export interface FactorySnapshot {
     };
     config: FactoryConfig;
 }
-export interface SnapshotDependencies {
+interface SnapshotDependencies {
     home: string;
     now: () => Date;
     activeSessions: () => Promise<ActiveSession[]>;
@@ -74,5 +74,5 @@ export declare function readFactoryConfig(home: string): FactoryConfig;
 export declare function queueCounts(todoPayload: unknown, openPayload: unknown): FactorySnapshot['queues'][string];
 export declare function parsePullRequests(repo: string, payload: unknown): FactorySnapshot['prs'];
 export declare function parseDevices(payload: unknown, cached?: ReturnType<typeof readStatsCache>): FactorySnapshot['devices'];
-export declare function readRecentRuns(home: string, limit?: number): FactorySnapshot['recentRuns'];
 export declare function buildFactorySnapshot(overrides?: Partial<SnapshotDependencies>): Promise<FactorySnapshot>;
+export {};

package/dist/lib/factory/snapshot.js

@@ -138,7 +138,7 @@ export function parseDevices(payload, cached = {}) {
         return { name, load, idle: row.idle === true || (load !== null && load < 20) };
     }).filter((row) => row.name.length > 0);
 }
-export function readRecentRuns(home, limit = 3) {
+function readRecentRuns(home, limit = 3) {
     const root = path.join(home, '.agents', '.history', 'runs');
     if (!fs.existsSync(root))
         return [];

package/dist/lib/feed/activity-stream.d.ts

@@ -1,9 +1,5 @@
 import { type ActivityEvent } from './activity.js';
-/** How often the stream falls back to a full directory stat sweep. */
-export declare const ACTIVITY_SWEEP_MS = 5000;
-/** Bytes behind the cursor re-verified before appended bytes are trusted. */
-export declare const ACTIVITY_ANCHOR_BYTES = 64;
-export interface ActivityStreamOptions {
+interface ActivityStreamOptions {
     /** Override the activity dir (tests). */
     root?: string;
     /**
@@ -58,3 +54,4 @@ export declare class ActivityStream {
     private readRange;
     private armWatcher;
 }
+export {};

package/dist/lib/feed/activity-stream.js

@@ -22,9 +22,9 @@ import * as path from 'node:path';
 import { getActivityDir } from '../state.js';
 import { ACTIVITY_TAIL_BYTES, parseActivityLine } from './activity.js';
 /** How often the stream falls back to a full directory stat sweep. */
-export const ACTIVITY_SWEEP_MS = 5_000;
+const ACTIVITY_SWEEP_MS = 5_000;
 /** Bytes behind the cursor re-verified before appended bytes are trusted. */
-export const ACTIVITY_ANCHOR_BYTES = 64;
+const ACTIVITY_ANCHOR_BYTES = 64;
 const NEWLINE = 0x0a;
 const EMPTY = Buffer.alloc(0);
 /** Could this file have changed since its cursor last looked? */
@@ -56,6 +56,15 @@ export class ActivityStream {
         this.maxBytesPerRead = options.maxBytesPerRead ?? ACTIVITY_TAIL_BYTES;
         this.sweepMs = options.sweepMs ?? ACTIVITY_SWEEP_MS;
         this.watchRequested = options.watch ?? true;
+        // A log directory that does not exist yet (nothing has logged activity
+        // since boot) means fs.watch below throws ENOENT and never retries except
+        // on the bounded sweep cadence — the very first session's activity can
+        // then sit unwatched for up to `sweepMs` before it is even noticed.
+        // Creating it up front lets the watcher arm immediately.
+        try {
+            fs.mkdirSync(this.dir, { recursive: true });
+        }
+        catch { /* best-effort: sweep() covers a dir that still isn't there */ }
         this.sweep(Date.now());
         this.armWatcher();
     }