@phnx-labs/agents-cli 1.22.112 → 1.22.114

package/dist/lib/feed/feed.d.ts

@@ -7,6 +7,12 @@ export interface BlockQuestion {
     header?: string;
     options?: BlockOption[];
     multiSelect?: boolean;
+    /**
+     * Preceding report/explanation for a prose question — the context that came
+     * BEFORE the trailing ask, Markdown + newlines preserved (PHNX-3999). The
+     * operator UI renders it under the question; absent for a structured question.
+     */
+    context?: string;
 }
 export interface MessageReceipt {
     /** The message id this receipt describes. */
@@ -230,8 +236,6 @@ export declare function deriveBlockState(block: OpenBlock): AttentionState;
 export declare function recordResolution(resolution: AttentionResolution, root?: string): void;
 /** Read the latest resolution tombstone for a block, if one exists. */
 export declare function readResolution(blockId: string, root?: string): AttentionResolution | undefined;
-/** Read every resolution tombstone. Returns them sorted by stable block filename. */
-export declare function listResolutions(root?: string): AttentionResolution[];
 /**
  * Stable block id for a session. One block per session -- a new question
  * replaces the previous one (the agent can only ask one question at a time).
@@ -239,7 +243,7 @@ export declare function listResolutions(root?: string): AttentionResolution[];
 export declare function blockIdForSession(sessionId: string): string;
 /** Read one block record. Returns undefined when missing or corrupt. */
 export declare function readBlock(blockId: string, root?: string): OpenBlock | undefined;
-export type RecordAnswerResult = {
+type RecordAnswerResult = {
     ok: true;
 } | {
     ok: false;
@@ -292,10 +296,6 @@ export declare function recordParked(blockId: string, root?: string): void;
 export declare function recordDefaulted(blockId: string, root?: string): void;
 /** Mark that an urgent block was paged to the phone. */
 export declare function recordNotified(blockId: string, root?: string): void;
-/** Convenience: record that a terminal answer closed the block. */
-export declare function recordTerminalAnswer(blockId: string, root?: string): void;
-/** Remove answered marker and receipts for a block (used by block removal/GC). */
-export declare function clearBlockLifecycle(blockId: string, root?: string): void;
 /** Identity of the agent declaring a block — the subset of `PostIdentity` it needs. */
 export interface DeclaringAgent {
     sessionId: string;
@@ -304,7 +304,7 @@ export interface DeclaringAgent {
     runtime: string;
     cwd?: string;
 }
-export interface DeclareBlockInput {
+interface DeclareBlockInput {
     /** What the agent needs from the user, front-loaded. */
     text: string;
     /** Answerable choices, if the ask is a pick-one. */
@@ -347,40 +347,6 @@ export declare function removeBlock(blockId: string, root?: string): boolean;
  * CLI-writable user hooks dir without a separate file in the npm tarball.
  */
 export declare const FEED_PUBLISH_HOOK_SCRIPT = "#!/usr/bin/env python3\n\"\"\"Publish and clear open-block records for `agents feed`.\n\nThe manifest invokes this script for top-level AskUserQuestion calls, waiting\nnotifications, question answers, and session lifecycle events. One atomic file\nper session means a new block replaces the previous block. Answer/resume/stop\nevents remove it so `agents feed` only lists decisions that are still open.\n\nSub-agent gate: when the PreToolUse payload carries `agent_type`, this is a\nTask/Agent subagent -- skip. Only the top-level agent publishes. Verified on\nClaude Code 2.1.170 (2026-07).\n\nFail-open: ANY error is swallowed so a feed hiccup never blocks a tool call.\n\"\"\"\nimport os\nimport sys\nimport json\nimport re\nimport socket\nimport tempfile\nfrom datetime import datetime, timezone\n\n# Notification subtypes that mean something is PENDING. Claude's idle_prompt is\n# deliberately absent: it fires a minute after the turn ended with the operator\n# idle, which is a finished turn, not a request -- publishing it put an\n# Approve/Deny banner on a session that had already answered \"pong\" (PHNX-3999).\nWAITING_NOTIFICATION_TYPES = {\n    \"permission_prompt\",\n    \"elicitation_dialog\",\n}\nCLEAR_EVENTS = {\n    \"PostToolUse\",\n    \"Stop\",\n    \"SessionEnd\",\n}\n# Codex emits a PermissionRequest event (not Claude's Notification) when it\n# blocks on an approval prompt. Claude never fires PermissionRequest, so the\n# same script handles both: PermissionRequest maps to an approval-class block\n# with a high cost-of-delay so 'agents feed --dispatch' pages it as urgent.\n\n\ndef read_json(path):\n    try:\n        with open(path) as f:\n            return json.load(f)\n    except Exception:\n        return None\n\n\ndef write_json(path, value):\n    dir_name = os.path.dirname(path)\n    os.makedirs(dir_name, exist_ok=True)\n    fd, tmp = tempfile.mkstemp(dir=dir_name, suffix=\".tmp\")\n    try:\n        with os.fdopen(fd, \"w\") as f:\n            json.dump(value, f, indent=2)\n        os.replace(tmp, path)\n    except Exception:\n        try:\n            os.unlink(tmp)\n        except Exception:\n            pass\n\n\ndef project_from_cwd(cwd):\n    \"\"\"Basename of cwd, with worktree paths resolved to their repo name.\"\"\"\n    if not cwd:\n        return None\n    norm = cwd.replace(\"\\\\\", \"/\").rstrip(\"/\")\n    if not norm:\n        return None\n    marker = \"/.agents/worktrees/\"\n    idx = norm.find(marker)\n    if idx > 0:\n        repo_path = norm[:idx]\n        base = repo_path[repo_path.rfind(\"/\") + 1:]\n        if base:\n            return base\n    base = norm[norm.rfind(\"/\") + 1:]\n    return base or None\n\n\ndef main():\n    raw = sys.stdin.read()\n    try:\n        payload = json.loads(raw) if raw.strip() else {}\n    except Exception:\n        return\n\n    # Sub-agent gate.\n    if payload.get(\"agent_type\"):\n        return\n\n    session_id = payload.get(\"session_id\", \"\")\n    if not session_id:\n        return\n\n    safe_session_id = re.sub(r\"[^A-Za-z0-9._-]\", \"-\", session_id)\n    block_id = f\"block-{safe_session_id}\"\n    home = os.environ.get(\"HOME\") or os.path.expanduser(\"~\")\n    feed_dir = os.path.join(home, \".agents\", \".history\", \"feed\")\n    answered_dir = os.path.join(feed_dir, \"answered\")\n    asks_dir = os.path.join(feed_dir, \"asks\")\n    target = os.path.join(feed_dir, f\"{block_id}.json\")\n    hook_event = payload.get(\"hook_event_name\", \"PreToolUse\")\n\n    if hook_event in CLEAR_EVENTS:\n        # A declared block (`agents feed post --blocked`) is the agent explicitly\n        # saying it is stuck. Unlike a question/notification/approval block -- which\n        # tracks an in-flight harness prompt that a lifecycle event resolves -- a\n        # declared block stays open until it is actually ANSWERED. So while it is\n        # still UNANSWERED, Stop/SessionEnd/PostToolUse must never silently drop it:\n        # otherwise the needs-you record vanishes the moment the agent parks the block\n        # and its turn ends -- exactly when the owner still needs to see and answer it.\n        # Once it IS answered (an answered marker exists), it clears like any other\n        # block by falling through below -- which frees that marker too, so a later\n        # `--blocked` in the same session is not falsely locked as already-answered\n        # (recordAnswer creates the marker with O_EXCL).\n        try:\n            with open(target) as existing_file:\n                existing = json.load(existing_file)\n            answered = os.path.exists(os.path.join(answered_dir, f\"{block_id}.json\"))\n            if existing.get(\"kind\") == \"declared\" and not answered:\n                return\n        except Exception:\n            pass\n        # A matcher-less PostToolUse clear (registered for Codex so an approved\n        # tool clears its approval card) must NOT wipe an open AskUserQuestion\n        # while an unrelated tool runs mid-question -- those are cleared only by\n        # the AskUserQuestion-matched PostToolUse. So on PostToolUse, keep a\n        # 'question' block; approval/notification blocks clear once the tool runs.\n        if hook_event == \"PostToolUse\":\n            try:\n                with open(target) as existing_file:\n                    existing = json.load(existing_file)\n                if existing.get(\"kind\") == \"question\" and payload.get(\"tool_name\") != \"AskUserQuestion\":\n                    return\n            except Exception:\n                pass\n        try:\n            os.unlink(target)\n        except FileNotFoundError:\n            pass\n        except Exception:\n            pass\n        # Also clear the answered marker so a future question for this session\n        # is not permanently locked.\n        try:\n            os.unlink(os.path.join(answered_dir, f\"{block_id}.json\"))\n        except FileNotFoundError:\n            pass\n        except Exception:\n            pass\n        return\n\n    # Terminal answers (human typed in the TUI) record an answered marker and\n    # remove the block file so the feed stops showing it within one poll cycle.\n    # The marker stays behind so a concurrent surface cannot double-answer.\n    # A resolution tombstone is written BEFORE unlink (matching TS recordAnswer)\n    # so a stale lifecycle re-read cannot resurrect this generation.\n    if hook_event == \"UserPromptSubmit\":\n        os.makedirs(answered_dir, exist_ok=True)\n        marker = os.path.join(answered_dir, f\"{block_id}.json\")\n        now_iso = datetime.now(timezone.utc).isoformat()\n        try:\n            fd = os.open(marker, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o644)\n            record = {\n                \"answeredAt\": now_iso,\n                \"answeredFrom\": \"terminal\",\n            }\n            with os.fdopen(fd, \"w\") as f:\n                json.dump(record, f, indent=2)\n        except FileExistsError:\n            pass\n        except Exception:\n            pass\n        # Tombstone first, then drop the open-block view. A missing/corrupt\n        # block means there is nothing to resolve; fail open.\n        existing = read_json(target)\n        if isinstance(existing, dict):\n            generation = existing.get(\"generation\") or existing.get(\"ts\")\n            if generation:\n                tombstone = {\n                    \"blockId\": block_id,\n                    \"generation\": generation,\n                    \"resolvedAt\": now_iso,\n                    \"reason\": \"answered\",\n                }\n                source_cursor = existing.get(\"sourceCursor\")\n                if source_cursor:\n                    tombstone[\"sourceCursor\"] = source_cursor\n                write_json(\n                    os.path.join(feed_dir, \"resolutions\", f\"{block_id}.json\"),\n                    tombstone,\n                )\n        # Remove the visible block so the feed drops the answered question.\n        try:\n            os.unlink(target)\n        except FileNotFoundError:\n            pass\n        except Exception:\n            pass\n        return\n\n    notification_type = None\n    codex_approval = False\n    if hook_event == \"Notification\":\n        notification_type = payload.get(\"notification_type\", \"\")\n        if notification_type not in WAITING_NOTIFICATION_TYPES:\n            return\n        # Claude emits a generic permission notification after presenting an\n        # AskUserQuestion. Keep the structured questions and options already\n        # published for this session instead of replacing them with that less\n        # useful notification text.\n        try:\n            with open(target) as existing_file:\n                existing = json.load(existing_file)\n            if existing.get(\"kind\") == \"question\":\n                return\n        except Exception:\n            pass\n        message = payload.get(\"message\", \"\")\n        if not message:\n            return\n        normalized_questions = [{\n            \"text\": message,\n            \"header\": payload.get(\"title\") or notification_type.replace(\"_\", \" \").title(),\n            \"multiSelect\": False,\n        }]\n        kind = \"notification\"\n    elif hook_event == \"PermissionRequest\":\n        # Codex approval prompt. The payload mirrors PreToolUse (tool_name,\n        # tool_input) but carries no questions -- Codex is asking to run a tool,\n        # not asking the operator a multiple-choice question. Publish it as a\n        # notification-kind approval block naming the tool so the feed and the\n        # phone notifier can surface it, and so AGI EXT can bridge\n        # it to a VS Code notification.\n        tool_name = payload.get(\"tool_name\") or \"a tool\"\n        tool_input = payload.get(\"tool_input\", {})\n        command = \"\"\n        if isinstance(tool_input, dict):\n            command = (\n                tool_input.get(\"command\")\n                or tool_input.get(\"cmd\")\n                or tool_input.get(\"path\")\n                or \"\"\n            )\n            if isinstance(command, list):\n                command = \" \".join(str(c) for c in command)\n        detail = f\": {command}\" if command else \"\"\n        normalized_questions = [{\n            \"text\": f\"Codex needs approval to run {tool_name}{detail}\",\n            \"header\": \"Approval needed\",\n            \"multiSelect\": False,\n        }]\n        kind = \"notification\"\n        notification_type = \"permission_prompt\"\n        codex_approval = True\n    else:\n        tool_input = payload.get(\"tool_input\", {})\n        questions = tool_input.get(\"questions\", [])\n        if not questions:\n            return\n        normalized_questions = []\n        for q in questions:\n            if not isinstance(q, dict):\n                continue\n            question = {\n                \"text\": q.get(\"question\", q.get(\"header\", \"\")),\n                \"header\": q.get(\"header\"),\n                \"multiSelect\": q.get(\"multiSelect\", False),\n            }\n            raw_opts = q.get(\"options\", [])\n            if raw_opts:\n                question[\"options\"] = [\n                    {\"label\": o.get(\"label\", \"\"), \"description\": o.get(\"description\")}\n                    for o in raw_opts\n                    if isinstance(o, dict)\n                ]\n            normalized_questions.append(question)\n        if not normalized_questions:\n            return\n        kind = \"question\"\n\n    # Identity from env (set by agents-cli at spawn).\n    mailbox_id = os.path.basename(\n        os.environ.get(\"AGENTS_MAILBOX_DIR\", \"\").rstrip(\"/\")\n    ) or session_id\n\n    now = datetime.now(timezone.utc)\n    now_iso = now.isoformat()\n    now_ms = int(now.timestamp() * 1000)\n    stats_path = os.path.join(asks_dir, f\"{safe_session_id}.json\")\n    stats = read_json(stats_path) or {}\n    recent = stats.get(\"recentAskTimestamps\") if isinstance(stats, dict) else []\n    if not isinstance(recent, list):\n        recent = []\n    recent.append(now_iso)\n    # Keep enough history for rolling one-hour needy detection without unbounded\n    # per-session files. The TypeScript reader applies the exact time window.\n    recent = recent[-200:]\n    write_json(stats_path, {\n        \"sessionId\": session_id,\n        \"mailboxId\": mailbox_id,\n        \"firstAskAt\": stats.get(\"firstAskAt\") or now_iso,\n        \"lastAskAt\": now_iso,\n        \"totalAskCount\": int(stats.get(\"totalAskCount\") or 0) + 1,\n        \"recentAskTimestamps\": recent,\n    })\n\n    hostname = os.environ.get(\"AGENTS_SYNC_MACHINE_ID\") or socket.gethostname()\n    host = hostname.split(\".\")[0].strip().lower()\n    host = re.sub(r\"[^a-z0-9_-]\", \"-\", host) or \"unknown\"\n\n    runtime = os.environ.get(\"AGENTS_RUNTIME\", \"headless\")\n    cwd = payload.get(\"cwd\") or os.environ.get(\"AGENTS_CWD\")\n    project = project_from_cwd(cwd)\n\n    block = {\n        \"blockId\": block_id,\n        \"sessionId\": session_id,\n        \"mailboxId\": mailbox_id,\n        \"host\": host,\n        \"runtime\": runtime,\n        \"ts\": now_iso,\n        # Write-time cursor so a new generation is not suppressed when\n        # session.lastActivityMs is unresolvable (cloud / remote / index-lag).\n        \"sourceCursor\": {\"lastActivityMs\": now_ms},\n        \"questions\": normalized_questions,\n        \"kind\": kind,\n    }\n    if project:\n        block[\"project\"] = project\n    if notification_type:\n        block[\"notificationType\"] = notification_type\n\n    # A Codex PermissionRequest is a real approval gate: mark it approval-class\n    # with a high cost-of-delay so 'agents feed --dispatch' classifies it urgent\n    # (isPhoneUrgent gates on costOfDelay >= phoneNotifyThreshold, default\n    # 'medium') and pages the phone. A plain 'deny' is the safe default.\n    if codex_approval:\n        block[\"blockClass\"] = \"approval\"\n        block[\"costOfDelay\"] = \"high\"\n        block[\"safeDefault\"] = \"deny\"\n\n    # Optional multi-operator control metadata passed by the agent in the\n    # AskUserQuestion tool_input. Defaults keep the existing behavior. A Codex\n    # PermissionRequest carries tool ARGS in tool_input (command/path), not\n    # operator controls, so it is excluded here -- its class/cost is stamped\n    # above from codex_approval.\n    controls = payload.get(\"tool_input\", {}) if hook_event not in (\"Notification\", \"PermissionRequest\") else {}\n    block_class = controls.get(\"blockClass\") if isinstance(controls, dict) else None\n    if block_class in (\"approval\", \"decision\"):\n        block[\"blockClass\"] = block_class\n    consequence = controls.get(\"consequence\") if isinstance(controls, dict) else None\n    if consequence:\n        block[\"consequence\"] = consequence\n    allowed = controls.get(\"allowedOperators\") if isinstance(controls, dict) else None\n    if isinstance(allowed, list):\n        block[\"allowedOperators\"] = [str(a) for a in allowed]\n    timeout = controls.get(\"timeoutMinutes\") if isinstance(controls, dict) else None\n    if isinstance(timeout, (int, float)) and timeout > 0:\n        block[\"timeoutMinutes\"] = int(timeout)\n    safe_default = controls.get(\"safeDefault\") if isinstance(controls, dict) else None\n    if isinstance(safe_default, str):\n        block[\"safeDefault\"] = safe_default\n    cost = controls.get(\"costOfDelay\") if isinstance(controls, dict) else None\n    if cost in (\"low\", \"medium\", \"high\"):\n        block[\"costOfDelay\"] = cost\n\n    # Publishing a new question clears any stale answered marker from the\n    # previous question in this session.\n    try:\n        os.unlink(os.path.join(answered_dir, f\"{block_id}.json\"))\n    except FileNotFoundError:\n        pass\n    except Exception:\n        pass\n\n    # Python's expanduser() ignores HOME on Windows, while agents-cli honors a\n    # HOME override on every platform. Use the same anchor so hooks and the CLI\n    # always read/write one feed store (including temp-home and sandbox runs).\n    os.makedirs(feed_dir, exist_ok=True)\n\n    fd, tmp = tempfile.mkstemp(dir=feed_dir, suffix=\".tmp\")\n    try:\n        with os.fdopen(fd, \"w\") as f:\n            json.dump(block, f, indent=2)\n        os.replace(tmp, target)\n    except Exception:\n        try:\n            os.unlink(tmp)\n        except Exception:\n            pass\n\n\nif __name__ == \"__main__\":\n    try:\n        main()\n    except Exception:\n        pass  # fail open\n";
-/** Manifest entry for the feed-publish hook, matching the ManifestHook shape. */
-export declare const FEED_PUBLISH_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    matcher: string;
-    script: string;
-    timeout: number;
-};
-export declare const FEED_NOTIFICATION_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    matcher: string;
-    script: string;
-    timeout: number;
-};
-export declare const FEED_PERMISSION_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    script: string;
-    timeout: number;
-};
-export declare const FEED_ANSWERED_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    matcher: string;
-    script: string;
-    timeout: number;
-};
-export declare const FEED_LIFECYCLE_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    script: string;
-    timeout: number;
-};
 /**
  * Install the feed-publish hook script into the user hooks dir and add its
  * manifest entry to the user agents.yaml. The system repo is an auto-pulled,
@@ -391,3 +357,4 @@ export declare function ensureFeedPublishHook(userAgentsDir?: string): {
     installed: boolean;
     error?: string;
 };
+export {};

package/dist/lib/feed/feed.js

@@ -85,24 +85,6 @@ export function recordResolution(resolution, root) {
 export function readResolution(blockId, root) {
     return safeReadJson(path.join(resolutionDir(root ?? getFeedDir()), `${blockId}.json`));
 }
-/** Read every resolution tombstone. Returns them sorted by stable block filename. */
-export function listResolutions(root) {
-    const dir = resolutionDir(root ?? getFeedDir());
-    let names;
-    try {
-        names = fs.readdirSync(dir);
-    }
-    catch {
-        return [];
-    }
-    const out = [];
-    for (const name of names.filter(n => n.endsWith('.json')).sort()) {
-        const parsed = safeReadJson(path.join(dir, name));
-        if (parsed?.blockId && parsed.generation && parsed.reason)
-            out.push(parsed);
-    }
-    return out;
-}
 /**
  * Stable block id for a session. One block per session -- a new question
  * replaces the previous one (the agent can only ask one question at a time).
@@ -345,12 +327,8 @@ export function recordNotified(blockId, root) {
     block.notifiedAt = new Date().toISOString();
     publishBlock(block, dir);
 }
-/** Convenience: record that a terminal answer closed the block. */
-export function recordTerminalAnswer(blockId, root) {
-    recordAnswer(blockId, { answeredFrom: 'terminal' }, root);
-}
 /** Remove answered marker and receipts for a block (used by block removal/GC). */
-export function clearBlockLifecycle(blockId, root) {
+function clearBlockLifecycle(blockId, root) {
     const dir = root ?? getFeedDir();
     for (const sub of [answeredDir(dir), receiptDir(dir)]) {
         try {
@@ -913,43 +891,6 @@ if __name__ == "__main__":
     except Exception:
         pass  # fail open
 `;
-/** Manifest entry for the feed-publish hook, matching the ManifestHook shape. */
-export const FEED_PUBLISH_HOOK_MANIFEST = {
-    name: 'feed-publish',
-    events: ['PreToolUse'],
-    matcher: 'AskUserQuestion',
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
-export const FEED_NOTIFICATION_HOOK_MANIFEST = {
-    name: 'feed-publish-notification',
-    events: ['Notification'],
-    matcher: 'permission_prompt|elicitation_dialog',
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
-// Codex fires PermissionRequest (not Claude's Notification) when it blocks on an
-// approval prompt. The same script handles it, publishing a high-cost approval
-// block so the feed dispatch pages the phone. PermissionRequest has no matcher.
-export const FEED_PERMISSION_HOOK_MANIFEST = {
-    name: 'feed-publish-permission',
-    events: ['PermissionRequest'],
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
-export const FEED_ANSWERED_HOOK_MANIFEST = {
-    name: 'feed-clear-answered',
-    events: ['PostToolUse'],
-    matcher: 'AskUserQuestion',
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
-export const FEED_LIFECYCLE_HOOK_MANIFEST = {
-    name: 'feed-clear-lifecycle',
-    events: ['Stop', 'UserPromptSubmit', 'SessionEnd'],
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
 /**
  * Install the feed-publish hook script into the user hooks dir and add its
  * manifest entry to the user agents.yaml. The system repo is an auto-pulled,

package/dist/lib/feed/pr-status.d.ts

@@ -3,7 +3,6 @@ import type { DetectedPr } from '../session/state.js';
 import type { GhExec } from '../github/pr-mergeable.js';
 import type { PullRequestAttentionSignal } from './attention.js';
 export declare const PR_STATUS_TTL_MS = 45000;
-export declare const PR_STATUS_FIELDS = "number,title,state,isDraft,reviewDecision,mergeable,statusCheckRollup";
 export interface PullRequestStatus extends PullRequestAttentionSignal {
     statusCheckRollup?: unknown[];
 }
@@ -13,7 +12,6 @@ export declare function readPullRequestStatus(session: ActiveSession, options?:
     ttlMs?: number;
     gh?: GhExec;
 }): Promise<PullRequestStatus | undefined>;
-export declare function projectPullRequestBoard(sessions: ActiveSession[]): Promise<PullRequestStatus[]>;
 export declare function resetPullRequestStatusCache(): void;
 /**
  * The check rollup folded to one verdict; undefined when the PR has no checks.

package/dist/lib/feed/pr-status.js

@@ -2,7 +2,7 @@ import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 const execFileAsync = promisify(execFile);
 export const PR_STATUS_TTL_MS = 45_000;
-export const PR_STATUS_FIELDS = 'number,title,state,isDraft,reviewDecision,mergeable,statusCheckRollup';
+const PR_STATUS_FIELDS = 'number,title,state,isDraft,reviewDecision,mergeable,statusCheckRollup';
 const cache = new Map();
 function needsHuman(value) {
     if (value.state !== 'OPEN' || value.isDraft)
@@ -38,10 +38,6 @@ export async function readPullRequestStatus(session, options = {}) {
         return undefined;
     }
 }
-export async function projectPullRequestBoard(sessions) {
-    const rows = await Promise.all(sessions.map((session) => readPullRequestStatus(session)));
-    return rows.filter((row) => row !== undefined);
-}
 export function resetPullRequestStatusCache() { cache.clear(); }
 /**
  * The check rollup folded to one verdict; undefined when the PR has no checks.

package/dist/lib/feed/watch.d.ts

@@ -2,7 +2,6 @@ import { type SessionWatchEnvelope, type SessionWatchRow, type SessionWatchScope
 import { type AttentionItem } from './attention.js';
 import { type ActivityEvent } from './activity.js';
 import type { GhExec } from '../github/pr-mergeable.js';
-export declare const FEED_WATCH_VERSION: 1;
 type Base = {
     v: 1;
     type: string;
@@ -48,8 +47,17 @@ export declare class FeedWatchState {
     constructor(streamId?: `${string}-${string}-${string}-${string}-${string}`);
     emit(event: FeedWatchPayload): FeedWatchEnvelope;
 }
+/** Reuse session ownership reconciliation for the combined operator stream. */
+export declare class FeedSessionProjection {
+    private readonly state;
+    private readonly sessions;
+    private readonly observations;
+    private projectedAttention;
+    constructor(state?: FeedWatchState);
+    apply(event: FeedWatchEnvelope): FeedWatchEnvelope[];
+}
 export declare function projectSessionEnvelope(event: SessionWatchEnvelope, state: FeedWatchState, gh?: GhExec): Promise<FeedWatchEnvelope[]>;
-export interface WatchLocalFeedOptions {
+interface WatchLocalFeedOptions {
     scope: string;
     signal: AbortSignal;
     emit: (event: FeedWatchEnvelope) => void;

package/dist/lib/feed/watch.js

@@ -1,3 +1,4 @@
+import { SessionProjection } from '../session/projection.js';
 import { randomUUID } from 'node:crypto';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
@@ -12,7 +13,6 @@ import { readBlock, readResolution, blockIdForSession } from './feed.js';
 import { reconcileAttention } from './attention.js';
 import { ActivityStream } from './activity-stream.js';
 import { PR_STATUS_TTL_MS, readPullRequestStatus, withPullRequestStatus } from './pr-status.js';
-export const FEED_WATCH_VERSION = 1;
 export class FeedWatchState {
     streamId;
     sequence = 0;
@@ -21,6 +21,86 @@ export class FeedWatchState {
         return { v: 1, streamId: this.streamId, sequence: ++this.sequence, ...event };
     }
 }
+/** Reuse session ownership reconciliation for the combined operator stream. */
+export class FeedSessionProjection {
+    state;
+    sessions = new SessionProjection();
+    observations = new Map();
+    projectedAttention = new Map();
+    constructor(state = new FeedWatchState()) {
+        this.state = state;
+    }
+    apply(event) {
+        const scope = normalizeHost(event.scope);
+        const base = { version: 1, streamId: event.streamId, sequence: event.sequence, capturedAt: 'capturedAt' in event ? event.capturedAt : Date.now(), scope };
+        let sessionEvent;
+        if (event.type === 'reset') {
+            sessionEvent = { ...base, type: 'reset', rows: event.agents };
+            const attention = new Map();
+            for (const row of event.agents) {
+                const item = event.attention.find(item => item.sessionId === row.sessionId);
+                if (item && !row.previous)
+                    attention.set(row.rowKey, item);
+            }
+            this.observations.set(scope, attention);
+        }
+        else if (event.type === 'agent.upsert') {
+            sessionEvent = { ...base, type: 'upsert', rowKey: event.rowKey, row: event.agent };
+        }
+        else if (event.type === 'agent.remove') {
+            sessionEvent = { ...base, type: 'remove', rowKey: event.rowKey };
+            this.observations.get(scope)?.delete(event.rowKey);
+        }
+        else if (event.type === 'attention.upsert') {
+            if (!this.observations.has(scope))
+                this.observations.set(scope, new Map());
+            this.observations.get(scope).set(event.rowKey, event.attention);
+        }
+        else if (event.type === 'attention.remove') {
+            this.observations.get(scope)?.delete(event.rowKey);
+        }
+        else {
+            const { v: _v, streamId: _streamId, sequence: _sequence, ...payload } = event;
+            return [this.state.emit(payload)];
+        }
+        const projected = sessionEvent ? this.sessions.apply(sessionEvent) : [];
+        const next = new Map();
+        for (const [observer, items] of this.observations)
+            for (const [rowKey, item] of items) {
+                const row = this.sessions.rowForObservation(observer, rowKey);
+                if (row && !row.previous && row.sourceDevice === observer)
+                    next.set(item.key, { scope: observer, item });
+            }
+        const result = [];
+        const resetScopes = new Set();
+        for (const rowEvent of projected) {
+            if (rowEvent.type === 'reset') {
+                resetScopes.add(rowEvent.scope);
+                result.push(this.state.emit({ type: 'reset', scope: rowEvent.scope, capturedAt: rowEvent.capturedAt, agents: rowEvent.rows,
+                    attention: [...next.values()].filter(value => value.scope === rowEvent.scope).map(value => value.item) }));
+            }
+            else if (rowEvent.type === 'upsert') {
+                result.push(this.state.emit({ type: 'agent.upsert', scope: rowEvent.scope, rowKey: rowEvent.rowKey, agent: rowEvent.row }));
+            }
+            else if (rowEvent.type === 'remove') {
+                result.push(this.state.emit({ type: 'agent.remove', scope: rowEvent.scope, rowKey: rowEvent.rowKey }));
+            }
+        }
+        // Attention has its own stable generation key, also used by feed answer.
+        // Never substitute the projected agent row key: reset consumers key by item.key.
+        for (const [key, previous] of this.projectedAttention) {
+            if (!next.has(key) && !resetScopes.has(previous.scope))
+                result.push(this.state.emit({ type: 'attention.remove', scope: previous.scope, rowKey: key }));
+        }
+        for (const [key, value] of next) {
+            if (!resetScopes.has(value.scope) && JSON.stringify(this.projectedAttention.get(key)) !== JSON.stringify(value)) {
+                result.push(this.state.emit({ type: 'attention.upsert', scope: value.scope, rowKey: key, attention: value.item }));
+            }
+        }
+        this.projectedAttention = next;
+        return result;
+    }
+}
 /**
  * Live rows only: durable Previous rows share the operator stream for Sessions
  * history, but they are not live work and must never synthesize Needs-you
@@ -92,13 +172,19 @@ function watchAttentionStores(onChange) {
     const watchers = [];
     for (const dir of [feedDir, path.join(feedDir, 'resolutions')]) {
         try {
+            // `resolutions` is created lazily by the first `recordResolution` call, so
+            // a fresh feed dir has no directory to watch yet. Create it up front —
+            // otherwise fs.watch throws ENOENT here, is swallowed, and never retried,
+            // silently downgrading every resolution to the 45 s PR-status fallback
+            // instead of the event-driven reconcile this function exists to provide.
+            fs.mkdirSync(dir, { recursive: true });
             const watcher = fs.watch(dir, () => onChange());
             // A directory that disappears must not take the watcher process down; the
             // PR-status cadence below still reconciles on its own timer.
             watcher.on('error', () => watcher.close());
             watchers.push(watcher);
         }
-        catch { /* the dir appears with the first block; the timed pass covers it */ }
+        catch { /* best-effort: the timed pass still reconciles on its own cadence */ }
     }
     return () => { for (const watcher of watchers)
         watcher.close(); };
@@ -217,9 +303,10 @@ function remoteFeedWatchCommand(os) {
 }
 export async function watchFleetFeed(options) {
     const coordinator = new FeedWatchState();
+    const projection = new FeedSessionProjection(coordinator);
     const forward = (event) => {
-        const { v: _v, streamId: peerStreamId, sequence: peerSequence, ...payload } = event;
-        options.emit(coordinator.emit({ ...payload, peerStreamId, peerSequence }));
+        for (const projected of projection.apply(event))
+            options.emit(projected);
     };
     const local = watchLocalFeed({ scope: machineId(), signal: options.signal, emit: forward });
     let devices;

package/dist/lib/feed-broadcast.d.ts

@@ -14,9 +14,9 @@ export interface FeedSinkConfig {
     command?: string[];
     /**
      * In-process delivery through the same channel-provider registry `agents
-     * send`/`agents notify` use — the composed `{message}` body, no argv, no
+     * send`/`agents send --to owner` use — the composed `{message}` body, no argv, no
      * spawn. `'owner'` is the address alias (expands to `notify.owner.{channel,to}`
-     * in agents.yaml, same as `agents notify`); any other value is a registered
+     * in agents.yaml, same as `agents send --to owner`); any other value is a registered
      * channel name (or a `notify.transports` mapping) and requires `to`.
      */
     channel?: string;
@@ -113,7 +113,7 @@ export declare function blockBroadcastContext(block: {
  * not mask a delivered desktop notification.
  */
 export declare function blockDeliveryFailure(blocked: boolean, outcomes: SinkOutcome[]): string | undefined;
-export interface PlannedSink {
+interface PlannedSink {
     name: string;
     /** Command sink: argv to spawn (mutually exclusive with `channel`). */
     argv?: string[];
@@ -141,49 +141,6 @@ export interface SinkOutcome {
     /** stderr tail when the sink failed, for the warning line. */
     error?: string;
 }
-/**
- * Short host label for a phone line — strip user@ and domain so
- * `muqsit@mac-mini.tailnet.ts.net` reads as `mac-mini`.
- */
-export declare function shortHost(host: string | undefined): string | undefined;
-/** First 8 hex chars of a session id for the footer (readable, not a full uuid). */
-export declare function shortSessionChunk(session: string | undefined): string | undefined;
-/**
- * Tap-to-view link for the session behind a post: the addressable console page
- * ({@link https://prix.dev/console/sessions/<id>}, prix/web). The footer already
- * carries a short session crumb for disambiguation; this rides the link trail so
- * the owner can open the full transcript straight from an iMessage broadcast
- * instead of hunting for it in the console.
- *
- * Accepts any real, path-safe session id — a Claude/Codex UUID *and* a native
- * `ses_…` id from OpenCode or another harness. The console shard uploader
- * (`traces/sync.ts`) syncs sessions with no harness filter, so all of them are
- * addressable; a UUID-only gate would silently drop the link for every non-Claude
- * harness (the whole point of the link). Reject only an id that could not resolve:
- * one with a path separator (URL-unsafe, via {@link isValidMailboxId}) or the bare
- * 8-char footer crumb (a truncated id that would 404).
- */
-export declare function sessionConsoleUrl(session: string | undefined): string | undefined;
-/**
- * Scrub em/en dashes from outbound phone copy (house rule + iMessage readability).
- * Collapses whitespace; does not invent meaning.
- */
-export declare function scrubOutboundDashes(text: string): string;
-/**
- * Footer like "Sent from my iPhone" — who posted, a session crumb, which box.
- *
- *   Sent from grok/a02da0e2 on mac-mini
- *
- * Agent name first; session chunk for disambiguation when many groks run;
- * host last. Skip the uninformative default label `agent`.
- *
- * In `mrkdwn` the crumb (`agent/short`) becomes a Slack labeled link to the
- * session's console page, so the human sentence reads identically while the
- * crumb turns blue and taps through (PHNX-3698). `plain` keeps the bare sentence
- * — it can't render a labeled link and must not dump the URL.
- */
-export declare function composeBroadcastFooter(ctx: FeedBroadcastContext, format?: SinkMessageFormat): string | undefined;
-export declare function truncateBroadcastBody(body: string): string;
 export declare function composeBroadcastMessage(ctx: FeedBroadcastContext, format?: SinkMessageFormat): string;
 /**
  * Substitute `{placeholder}` tokens in an argv template. Returns undefined when
@@ -221,7 +178,7 @@ export declare function planFeedBroadcast(config: FeedBroadcastConfig | undefine
  * moment `feed.broadcast` was empty, even when `notify.owner` was fully
  * configured — so the common case (an operator who set up owner notifications
  * but never wrote a `feed.broadcast` block) produced a `--blocked` post that
- * looked recorded and reached nobody. `agents notify` already treats
+ * looked recorded and reached nobody. `agents send --to owner` already treats
  * `notify.owner` as the default human destination; this makes an important
  * feed post/block use that same default instead of requiring a second,
  * redundant config block that says the same thing.
@@ -265,3 +222,4 @@ export declare function withDesktopNotify(config: FeedBroadcastConfig | undefine
  * reached.
  */
 export declare function runFeedBroadcast(planned: PlannedSink[], meta: Meta, timeoutMs?: number): Promise<SinkOutcome[]>;
+export {};

package/dist/lib/feed-broadcast.js

@@ -27,7 +27,7 @@
  * A second sink shape (RUSH-2123) delivers **in-process** through the same
  * channel-provider registry `agents send` uses (`channel:` instead of
  * `command:`) — no spawn, no argv templating. `channel: owner` is the address
- * alias that expands to `notify.owner.{channel,to}`, matching `agents notify`.
+ * alias that expands to `notify.owner.{channel,to}`, matching `agents send --to owner`.
  * When the operator has never written a `feed.broadcast` block at all, an
  * important-level post falls back to that owner address implicitly
  * ({@link effectiveBroadcastConfig}) rather than reaching nobody — see that
@@ -127,7 +127,7 @@ const PLACEHOLDER = /\{([a-z_]+)\}/g;
  * Short host label for a phone line — strip user@ and domain so
  * `muqsit@mac-mini.tailnet.ts.net` reads as `mac-mini`.
  */
-export function shortHost(host) {
+function shortHost(host) {
     if (!host?.trim())
         return undefined;
     let h = host.trim();
@@ -140,7 +140,7 @@ export function shortHost(host) {
     return h || undefined;
 }
 /** First 8 hex chars of a session id for the footer (readable, not a full uuid). */
-export function shortSessionChunk(session) {
+function shortSessionChunk(session) {
     if (!session?.trim())
         return undefined;
     const hex = session.replace(/-/g, '').toLowerCase();
@@ -162,7 +162,7 @@ export function shortSessionChunk(session) {
  * one with a path separator (URL-unsafe, via {@link isValidMailboxId}) or the bare
  * 8-char footer crumb (a truncated id that would 404).
  */
-export function sessionConsoleUrl(session) {
+function sessionConsoleUrl(session) {
     const id = session?.trim();
     if (!id || !isValidMailboxId(id) || /^[0-9a-f]{8}$/i.test(id))
         return undefined;
@@ -172,7 +172,7 @@ export function sessionConsoleUrl(session) {
  * Scrub em/en dashes from outbound phone copy (house rule + iMessage readability).
  * Collapses whitespace; does not invent meaning.
  */
-export function scrubOutboundDashes(text) {
+function scrubOutboundDashes(text) {
     return text
         .replace(/\u2014/g, ' - ')
         .replace(/\u2013/g, ' - ')
@@ -227,7 +227,7 @@ function linkifyKeys(text, format) {
  * crumb turns blue and taps through (PHNX-3698). `plain` keeps the bare sentence
  * — it can't render a labeled link and must not dump the URL.
  */
-export function composeBroadcastFooter(ctx, format = 'plain') {
+function composeBroadcastFooter(ctx, format = 'plain') {
     const agent = ctx.agent?.trim();
     const agentLabel = agent && agent !== 'agent' ? agent : undefined;
     const session = shortSessionChunk(ctx.session);
@@ -283,7 +283,7 @@ export function composeBroadcastFooter(ctx, format = 'plain') {
  */
 const PHONE_BODY_MAX_CHARS = 500;
 const PHONE_BODY_MAX_LINES = 8;
-export function truncateBroadcastBody(body) {
+function truncateBroadcastBody(body) {
     if (!body)
         return body;
     let out = body;
@@ -508,7 +508,7 @@ export function planFeedBroadcast(config, ctx, meta) {
  * moment `feed.broadcast` was empty, even when `notify.owner` was fully
  * configured — so the common case (an operator who set up owner notifications
  * but never wrote a `feed.broadcast` block) produced a `--blocked` post that
- * looked recorded and reached nobody. `agents notify` already treats
+ * looked recorded and reached nobody. `agents send --to owner` already treats
  * `notify.owner` as the default human destination; this makes an important
  * feed post/block use that same default instead of requiring a second,
  * redundant config block that says the same thing.
@@ -577,7 +577,7 @@ function runCommandSink(name, argv, timeoutMs) {
 }
 /**
  * Deliver one `channel:` sink through the real provider registry —
- * `resolveSendEnvelope` reuses `agents notify`'s owner-alias expansion, and
+ * `resolveSendEnvelope` reuses `agents send --to owner`'s owner-alias expansion, and
  * `deliverEnvelope` is the same seam `agents send` calls. A bad channel name
  * is checked with `lookupTransport` (the non-throwing lookup) BEFORE handing
  * off to `deliverEnvelope`: that function's own resolution `die()`s on an

package/dist/lib/feed-outcome.d.ts

@@ -1,5 +1,5 @@
 import type { OpenBlock } from './feed/feed.js';
-export type OutcomeKind = 'ticket' | 'pr' | 'worktree' | 'unassigned';
+type OutcomeKind = 'ticket' | 'pr' | 'worktree' | 'unassigned';
 /** Stable attribution of a block (or agent) to one deliverable. */
 export interface OutcomeRef {
     /** Map/JSON key, e.g. `ticket:RUSH-1125`, `pr:#534`, `worktree:headless-secrets`, `unassigned`. */
@@ -12,7 +12,7 @@ export interface OutcomeRef {
  * Signals used to derive an outcome. All optional — callers pass whatever they
  * already know (block fields, session meta, free-text questions).
  */
-export interface OutcomeSignals {
+interface OutcomeSignals {
     ticket?: string | null;
     pr?: string | null;
     worktreeSlug?: string | null;
@@ -29,8 +29,6 @@ export interface OutcomeSignals {
  * - Bare `#123` / `PR#123` → `#123` (no repo known)
  */
 export declare function normalizePrRef(raw: string | null | undefined): string | undefined;
-/** `https://github.com/owner/repo/pull/N` → `owner/repo`. */
-export declare function repoFromPrUrl(url: string | null | undefined): string | undefined;
 /** Canonical ticket id (uppercase team key). */
 export declare function normalizeTicketRef(raw: string | null | undefined): string | undefined;
 /**
@@ -38,8 +36,6 @@ export declare function normalizeTicketRef(raw: string | null | undefined): stri
  * Exactly one outcome per call — never ambiguous, never empty.
  */
 export declare function deriveOutcome(signals: OutcomeSignals): OutcomeRef;
-/** Join question headers + bodies into one scan target for ticket/PR detection. */
-export declare function blockScanText(block: Pick<OpenBlock, 'questions'>): string;
 /** Outcome for a stored open block (uses stamped fields + question text). */
 export declare function outcomeForBlock(block: OpenBlock): OutcomeRef;
 /** Per-outcome rollup used by the default `agents feed` view. */
@@ -103,3 +99,4 @@ export declare function enrichBlockFromSession(block: OpenBlock, hint: SessionOu
  * Matching order: mailboxId, then sessionId, then agentId.
  */
 export declare function enrichBlocksFromSessions(blocks: OpenBlock[], sessions: SessionOutcomeHint[]): OpenBlock[];
+export {};

package/dist/lib/feed-outcome.js

@@ -44,7 +44,7 @@ export function normalizePrRef(raw) {
     return undefined;
 }
 /** `https://github.com/owner/repo/pull/N` → `owner/repo`. */
-export function repoFromPrUrl(url) {
+function repoFromPrUrl(url) {
     if (!url)
         return undefined;
     const m = /github\.com\/([^/\s]+)\/([^/\s]+)\/pull\/\d+/i.exec(url);
@@ -116,7 +116,7 @@ export function deriveOutcome(signals) {
     return UNASSIGNED;
 }
 /** Join question headers + bodies into one scan target for ticket/PR detection. */
-export function blockScanText(block) {
+function blockScanText(block) {
     return block.questions
         .map((q) => [q.header, q.text].filter(Boolean).join(' '))
         .filter(Boolean)