@phnx-labs/agents-cli 1.22.112 → 1.22.114

package/dist/lib/hooks/install.js

@@ -607,76 +607,12 @@ function copyHook(entry, targetDir) {
         fs.copyFileSync(entry.dataFile, dataTarget);
     }
 }
-/**
- * Check if a hook exists for an agent.
- */
-export function hookExists(agentId, hookName) {
-    const agent = AGENTS[agentId];
-    if (!agent.supportsHooks) {
-        return false;
-    }
-    const hooksDir = getHooksDir(agentId);
-    if (!fs.existsSync(hooksDir)) {
-        return false;
-    }
-    const files = fs.readdirSync(hooksDir);
-    return files.some((file) => {
-        const ext = path.extname(file);
-        const baseName = path.basename(file, ext);
-        return baseName === hookName && SCRIPT_EXTENSIONS.has(ext);
-    });
-}
 /**
  * Normalize content for comparison (trim, normalize line endings).
  */
 function normalizeContent(content) {
     return content.replace(/\r\n/g, '\n').trim();
 }
-/**
- * Get the installed hook entry for an agent.
- */
-function getInstalledHookEntry(agentId, hookName) {
-    const hooksDir = getHooksDir(agentId);
-    const entries = listHookEntriesFromDir(hooksDir);
-    return entries.find((e) => e.name === hookName) || null;
-}
-/**
- * Check if installed hook content matches source hook content.
- * Compares both script file and data file (if present).
- */
-export function hookContentMatches(agentId, hookName, sourceEntry) {
-    const agent = AGENTS[agentId];
-    if (!agent.supportsHooks) {
-        return false;
-    }
-    const installedEntry = getInstalledHookEntry(agentId, hookName);
-    if (!installedEntry) {
-        return false;
-    }
-    try {
-        const installedScript = fs.readFileSync(installedEntry.scriptPath, 'utf-8');
-        const sourceScript = fs.readFileSync(sourceEntry.scriptPath, 'utf-8');
-        if (normalizeContent(installedScript) !== normalizeContent(sourceScript)) {
-            return false;
-        }
-        const hasInstalledData = !!installedEntry.dataFile;
-        const hasSourceData = !!sourceEntry.dataFile;
-        if (hasInstalledData !== hasSourceData) {
-            return false;
-        }
-        if (hasInstalledData && hasSourceData) {
-            const installedData = fs.readFileSync(installedEntry.dataFile, 'utf-8');
-            const sourceData = fs.readFileSync(sourceEntry.dataFile, 'utf-8');
-            if (normalizeContent(installedData) !== normalizeContent(sourceData)) {
-                return false;
-            }
-        }
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 /**
  * Hooks dir for an agent under an arbitrary home (version home or effective
  * home). An agent whose `hooksDir` is configured absolute under `$HOME` (grok,
@@ -977,7 +913,7 @@ function stableHookRuntimeRepairFailure(before, err) {
  * content already matches). This path never calls registerHooksToSettings,
  * installHooks, or any sync routine.
  */
-export function repairManagedHookRuntimeArtifact(artifact, platform = process.platform) {
+function repairManagedHookRuntimeArtifact(artifact, platform = process.platform) {
     const before = hookRuntimeProblem(artifact, platform);
     // Already healthy (e.g. race with another pass) — no-op, no needsAttention.
     if (!before)
@@ -1269,28 +1205,6 @@ export function diffVersionHooks(agent, version) {
     }
     return { agent, version, toAdd: toAdd.sort(), toUpdate: toUpdate.sort(), matched, orphans: orphans.sort() };
 }
-/**
- * Install a single hook from central into a specific version home.
- */
-export function installHookToVersion(agent, version, hookName) {
-    const gate = supports(agent, 'hooks', version);
-    if (!gate.ok) {
-        return { success: false, error: explainSkip(agent, 'hooks', gate, version) };
-    }
-    const central = listHookEntriesFromDir(getCentralHooksDir()).find((e) => e.name === hookName);
-    if (!central) {
-        return { success: false, error: `Hook '${hookName}' not found in central` };
-    }
-    const targetDir = getVersionHooksDir(agent, version);
-    try {
-        fs.mkdirSync(targetDir, { recursive: true });
-        copyHook(central, targetDir);
-    }
-    catch (err) {
-        return { success: false, error: err.message };
-    }
-    return { success: true };
-}
 /**
  * Remove a single hook (script + data file) from a specific version home.
  * Soft-deletes to ~/.agents/.trash/hooks/.
@@ -1400,14 +1314,6 @@ export function discoverHooksFromRepo(repoPath) {
     const hooksDir = path.join(repoPath, 'hooks');
     return listHookEntriesFromDir(hooksDir).map((h) => h.name);
 }
-/**
- * Get the source hook entry from repo.
- */
-export function getSourceHookEntry(repoPath, hookName) {
-    const hooksDir = path.join(repoPath, 'hooks');
-    const entries = listHookEntriesFromDir(hooksDir);
-    return entries.find((e) => e.name === hookName) || null;
-}
 /**
  * Install hooks to central ~/.agents/hooks/ directory.
  * Shims will symlink this to per-agent directories for synced agents.
@@ -1625,7 +1531,7 @@ export function unmanagedHookNames(installedHookNames, sourceHookScripts) {
  * dirs). This is the set an installed hook must be absent from to count as an
  * orphan.
  */
-export function listResolvedSourceHookScripts() {
+function listResolvedSourceHookScripts() {
     const roots = [
         getUserHooksDir(),
         getSystemHooksDir(),

package/dist/lib/hooks/match.d.ts

@@ -14,7 +14,7 @@
  */
 import type { HookMatches } from '../types.js';
 /** Runtime context passed to a hook by the agent CLI. */
-export interface HookInput {
+interface HookInput {
     hook_event_name?: string;
     prompt?: string;
     tool_name?: string;
@@ -34,3 +34,4 @@ export declare function isSafeHookRegex(source: string): boolean;
  * if it should be skipped.
  */
 export declare function shouldFire(matches: HookMatches | undefined, input: HookInput): boolean;
+export {};

package/dist/lib/hosts/credential-transport.d.ts

@@ -1,5 +1,3 @@
-/** The host part of an ssh target (`user@host` -> `host`) for known_hosts matching. */
-export declare function hostKeyLookupName(target: string): string;
 /** Refuse durable credential transfer until the destination SSH key is pinned. */
 export declare function assertCredentialTransportHostPinned(target: string, pinned?: boolean): void;
 /**

package/dist/lib/hosts/credential-transport.js

@@ -13,7 +13,7 @@ import { resolveHost } from './registry.js';
 import { sshTargetFor } from './types.js';
 import { isHostPinned } from '../devices/known-hosts.js';
 /** The host part of an ssh target (`user@host` -> `host`) for known_hosts matching. */
-export function hostKeyLookupName(target) {
+function hostKeyLookupName(target) {
     return target.split('@').pop() ?? target;
 }
 /** Refuse durable credential transfer until the destination SSH key is pinned. */

package/dist/lib/hosts/dispatch.d.ts

@@ -1,23 +1,8 @@
-/**
- * Dispatch a headless `agents …` command onto a host over SSH.
- *
- * The command is launched detached (`nohup … &`) writing combined output to a
- * remote log and its exit code to a sibling `.exit` file, so progress survives a
- * dropped connection (followed via offset-tail in progress.ts). This is the
- * offload win: the process/thread/file fan-out happens on the host, not the
- * laptop. `agents run` uses it; `agents teams start --watch --device` reuses the
- * same core so a remote team supervisor keeps running after you disconnect.
- */
 import type { Host } from './types.js';
 import { type HostTask } from './tasks.js';
 import { type HostCredentials } from './credentials.js';
 import { deriveMirroredCwd, homeRemainder, remoteCdPrefix } from '../project-root.js';
 export { deriveMirroredCwd, homeRemainder, remoteCdPrefix };
-/**
- * Diagnostic helper for RUSH-2441: log the requested agent and initial remote
- * `agents run` argv without changing normal command output.
- */
-export declare function logForwardedArgs(kind: string, agent: string, version: string | undefined, args: string[], hasPrompt: boolean): void;
 /**
  * Merge the resolved actor's provenance env UNDER a caller-supplied env, so every
  * remote `agents …` invocation forwards `AGENTS_ACTOR*` / `GIT_*` across the SSH
@@ -160,25 +145,8 @@ export interface DispatchOptions {
     /** Copy runtime credentials to the host before the run and shred them after. */
     copyCreds?: HostCredentials;
 }
-/**
- * Build the remote `agents run …` argv for a host dispatch. Pure so the
- * session-id / resume flag wiring is unit-testable without an SSH round-trip.
- * `--session-id` and `--resume` are mutually exclusive (the CLI rejects both);
- * resume wins when — defensively — both are set.
- *
- * Every field here is classified 'forward' in RUN_OPTION_FORWARDING
- * (remote-cmd.ts) — keep the two in lockstep; run-forwarding.test.ts asserts
- * the table side.
- */
-/** Compose `agent[@version][#account]` so the peer resolves ITS slot (PHNX-3940 T5). */
-export declare function runAgentSpecArg(opts: {
-    agent: string;
-    version?: string;
-    account?: string;
-    accountPicker?: boolean;
-}): string;
 export declare function buildRunForwardedArgs(opts: DispatchOptions): string[];
-export interface InteractiveDispatchOptions {
+interface InteractiveDispatchOptions {
     agent: string;
     /** Explicit agent version pin (e.g. "2.1.207") to forward as `agent@version`. */
     version?: string;
@@ -239,7 +207,7 @@ export declare function buildInteractiveRunForwardedArgs(opts: InteractiveDispat
 export declare function runInteractiveOnHost(host: Host, opts: InteractiveDispatchOptions): Promise<number>;
 /** Dispatch an `agents run <agent> "<prompt>"` onto a host (the `run --device` path). */
 export declare function dispatchToHost(host: Host, opts: DispatchOptions): Promise<DispatchResult>;
-export interface CommandDispatchOptions {
+interface CommandDispatchOptions {
     /** `agents …` args (command name first), already stripped of routing flags. */
     forwardedArgs: string[];
     remoteCwd?: string;

package/dist/lib/hosts/dispatch.js

@@ -1,3 +1,4 @@
+import { launchIdentityEnv } from '../launch-identity.js';
 /**
  * Dispatch a headless `agents …` command onto a host over SSH.
  *
@@ -30,7 +31,7 @@ export { deriveMirroredCwd, homeRemainder, remoteCdPrefix };
  * Diagnostic helper for RUSH-2441: log the requested agent and initial remote
  * `agents run` argv without changing normal command output.
  */
-export function logForwardedArgs(kind, agent, version, args, hasPrompt) {
+function logForwardedArgs(kind, agent, version, args, hasPrompt) {
     if (!process.env.AGENTS_DISPATCH_DEBUG)
         return;
     const safeArgs = [...args];
@@ -63,7 +64,7 @@ const REMOTE_DIR = '$HOME/.agents/.cache/hosts';
  * collision, mirroring `buildExecEnv`'s `...options.env` precedence (exec.ts).
  */
 export function withActorEnv(env) {
-    return { ...actorEnv(resolveActor()), ...terminalIdEnv(), ...(env ?? {}) };
+    return { ...actorEnv(resolveActor()), ...launchIdentityEnv(), ...(env ?? {}) };
 }
 /**
  * The shell-export prelude prepended to EVERY remote `agents run` dispatch —
@@ -88,24 +89,6 @@ export function remoteRunShellPrelude(agent, extra = {}) {
     const exports = posixEnvExports(withActorEnv({ ...guard, ...extra }));
     return exports ? `${exports}; ` : '';
 }
-/**
- * Forward the launching editor tab's `AGENT_TERMINAL_ID` across the SSH hop.
- *
- * Factory stamps it on every terminal it spawns, and the remote `agents run`
- * records it in its pid registry (`writePidSessionEntry`) — which is what lets a
- * tab ask the device "which session is MY terminal running?" instead of guessing
- * from local state. Without the forward the remote registry has no terminal id,
- * that question is unanswerable, and the tab is stuck with its spawn-time id even
- * after the agent has moved to a different session (a `/clear`, or an exit and
- * rerun in the same tab).
- *
- * Same shape as the actor provenance above: absent when the launch did not come
- * from a tracked terminal, never fabricated.
- */
-function terminalIdEnv() {
-    const terminalId = process.env.AGENT_TERMINAL_ID?.trim();
-    return terminalId ? { AGENT_TERMINAL_ID: terminalId } : {};
-}
 /**
  * Launch a detached login-shell command in its own Unix session/process group.
  *
@@ -360,7 +343,7 @@ async function launchDetached(host, target, opts) {
  * the table side.
  */
 /** Compose `agent[@version][#account]` so the peer resolves ITS slot (PHNX-3940 T5). */
-export function runAgentSpecArg(opts) {
+function runAgentSpecArg(opts) {
     if (opts.accountPicker)
         return `${opts.agent}#`;
     let spec = opts.agent;

package/dist/lib/hosts/logs.d.ts

@@ -11,7 +11,7 @@
  * concise default.) Kept in one place so the two commands can never drift.
  */
 import { type HostTask } from './tasks.js';
-export interface HostLogResult {
+interface HostLogResult {
     /** False when no host task with this id exists (caller may fall through to sessions). */
     found: boolean;
     /** Process exit code to adopt when the task was shown/followed. */
@@ -35,3 +35,4 @@ export declare function hostTaskLogJson(id: string): {
 };
 /** Last `n` lines of `text`, prefixed with an elision note when truncated. */
 export declare function tailLines(text: string, n: number): string;
+export {};

package/dist/lib/hosts/passthrough.d.ts

@@ -103,7 +103,7 @@ export declare function renderForwardDecision(command: string, allArgs: string[]
     env?: Record<string, string>;
 };
 /** Injectable dependencies for {@link runFleetPassthrough} — used by tests. */
-export interface FleetPassthroughOptions {
+interface FleetPassthroughOptions {
     /** Override the device registry loader (tests). */
     loadDevices?: () => Promise<DeviceRegistry>;
     /** Override the per-device runner (tests). Defaults to `runOnDevice`. */

package/dist/lib/hosts/passthrough.js

@@ -107,7 +107,6 @@ export const REMOTE_PASSTHROUGH = {
     worktree: {},
     events: {},
     feedback: {},
-    pty: {},
     tmux: {},
     watchdog: {},
     factory: {},

package/dist/lib/hosts/progress.d.ts

@@ -131,11 +131,6 @@ export declare function buildStreamingFollowCommand(opts: {
 }): string;
 /** Extract the remote watcher frame from stderr, if the stream ended normally. */
 export declare function parseStreamingExitFrame(stderr: Buffer, taskId: string): Buffer | null;
-/**
- * File identity (`dev:ino`) of a path on the remote host, or null if it can't be
- * stat'd. GNU (`-c`) then BSD (`-f`) format, so it works on Linux and macOS hosts.
- */
-export declare function readRemoteFileId(target: string, remotePath: string, extraSshArgs?: string[]): string | null;
 /**
  * True when the local mirror file IS the very file we're tailing — the
  * localhost-as-host case, where `remoteLog` ($HOME-expanded) and `localLogPath`

package/dist/lib/hosts/progress.js

@@ -177,7 +177,7 @@ export function parseStreamingExitFrame(stderr, taskId) {
  * File identity (`dev:ino`) of a path on the remote host, or null if it can't be
  * stat'd. GNU (`-c`) then BSD (`-f`) format, so it works on Linux and macOS hosts.
  */
-export function readRemoteFileId(target, remotePath, extraSshArgs) {
+function readRemoteFileId(target, remotePath, extraSshArgs) {
     const res = sshExec(target, `stat -c '%d:%i' ${remotePath} 2>/dev/null || stat -f '%d:%i' ${remotePath} 2>/dev/null`, { timeoutMs: 8000, extraSshArgs });
     const id = res.stdout.trim();
     return id || null;

package/dist/lib/hosts/ready.d.ts

@@ -24,8 +24,6 @@ export declare function probeHost(target: string, os?: string, extraSshArgs?: st
 };
 /** ssh command that prints the remote agents-cli version. Pure/exported. */
 export declare function buildRemoteVersionCommand(os?: string): string;
-/** Remote agents-cli version (PATH-resolved on the remote), or null if not installed. */
-export declare function remoteAgentsVersion(target: string, os?: string, extraSshArgs?: string[]): string | null;
 /** ssh command that installs/upgrades agents-cli to `spec` then `agents setup`.
  * PowerShell has no `tail`/`[ -d ]`/`||`, so the Windows branch uses native
  * equivalents (`Select-Object -Last`, `Test-Path`). Pure/exported. */
@@ -89,7 +87,7 @@ export declare function viewHasAgentVersion(view: string, agent: string, version
 /** Actionable fail-loud message for a missing remote pin (RUSH-2313). */
 export declare function missingPinnedVersionMessage(hostName: string, agent: string, version: string, installed?: string[]): string;
 /** Account eligibility extracted from one device's `agents view --json`. */
-export interface ViewAgentAccountEligibility {
+interface ViewAgentAccountEligibility {
     /** At least one account can launch immediately. */
     signedIn: boolean | undefined;
     /** At least one account can launch immediately or enter the harness login flow. */
@@ -111,7 +109,7 @@ export interface ViewAgentAccountEligibility {
  */
 export declare function viewAgentAccountEligibility(view: string, agent: string, now?: number): ViewAgentAccountEligibility;
 export declare function viewAgentSignedIn(view: string, agent: string): boolean | undefined;
-export interface EnsureReadyOptions {
+interface EnsureReadyOptions {
     agent: string;
     /**
      * Explicit version pin (e.g. `"0.145.0"`). Concrete pins fail loud when the
@@ -143,3 +141,4 @@ export declare function evaluateHostAgentInstall(view: string, opts: EnsureReady
 export declare function ensureHostReady(host: Host, opts: EnsureReadyOptions): {
     warnings: string[];
 };
+export {};

package/dist/lib/hosts/ready.js

@@ -64,14 +64,6 @@ export function buildRemoteVersionCommand(os) {
         ? buildWindowsAgentsCommand({ args: ['--version'] })
         : 'bash -lc "agents --version 2>/dev/null"';
 }
-/** Remote agents-cli version (PATH-resolved on the remote), or null if not installed. */
-export function remoteAgentsVersion(target, os, extraSshArgs = []) {
-    const r = sshExec(target, buildRemoteVersionCommand(os), { timeoutMs: 20000, extraSshArgs });
-    if (r.code !== 0)
-        return null;
-    const v = r.stdout.trim();
-    return v || null;
-}
 /** ssh command that installs/upgrades agents-cli to `spec` then `agents setup`.
  * PowerShell has no `tail`/`[ -d ]`/`||`, so the Windows branch uses native
  * equivalents (`Select-Object -Last`, `Test-Path`). Pure/exported. */

package/dist/lib/hosts/reconcile.d.ts

@@ -12,7 +12,7 @@
  */
 import { type SshExecResult } from '../ssh-exec.js';
 import { type HostTask } from './tasks.js';
-export type RemoteExitState = {
+type RemoteExitState = {
     state: 'running';
 } | {
     state: 'done';
@@ -31,13 +31,6 @@ export type RemoteExitState = {
  */
 export declare function classifyExit(res: Pick<SshExecResult, 'code' | 'stdout' | 'timedOut'>): RemoteExitState;
 export declare function readRemoteExit(target: string, remoteExit: string, timeoutMs?: number, identityFile?: string, remoteShell?: 'posix' | 'powershell'): RemoteExitState;
-/**
- * Async twin of {@link readRemoteExit} for the daemon's heartbeat tick — the ssh
- * read runs on the shared event loop, so it MUST NOT block it with a synchronous
- * `spawnSync('ssh', …)` (PHNX-3695). `sshExecAsync` applies the same
- * timeout/kill-grace bound.
- */
-export declare function readRemoteExitAsync(target: string, remoteExit: string, timeoutMs?: number, identityFile?: string, remoteShell?: 'posix' | 'powershell'): Promise<RemoteExitState>;
 /**
  * Heal one record. Terminal records are immutable (and never re-probed); a
  * `running` record is resolved to completed/failed only when the remote `.exit`
@@ -59,3 +52,4 @@ export declare function reconcileTaskAsync(task: HostTask): Promise<HostTask>;
  */
 export declare function reconcileRunningTasks(tasks: HostTask[]): HostTask[];
 export declare function reachabilityProbeCommand(remoteShell?: 'posix' | 'powershell'): string;
+export {};

package/dist/lib/hosts/reconcile.js

@@ -57,7 +57,7 @@ export function readRemoteExit(target, remoteExit, timeoutMs = 6000, identityFil
  * `spawnSync('ssh', …)` (PHNX-3695). `sshExecAsync` applies the same
  * timeout/kill-grace bound.
  */
-export async function readRemoteExitAsync(target, remoteExit, timeoutMs = 6000, identityFile, remoteShell = 'posix') {
+async function readRemoteExitAsync(target, remoteExit, timeoutMs = 6000, identityFile, remoteShell = 'posix') {
     return classifyExit(await sshExecAsync(target, remoteExitCommand(remoteExit, remoteShell), remoteExitSshOpts(timeoutMs, identityFile)));
 }
 /**

package/dist/lib/hosts/reconnect.d.ts

@@ -34,7 +34,7 @@ export interface ReconnectOutcome {
     /** How long the interactive attach held after the probe returned. */
     heldMs: number;
 }
-export type ReconnectDecision = {
+type ReconnectDecision = {
     action: 'stop';
     code: number;
 } | {
@@ -81,8 +81,6 @@ export type ReconnectTarget = {
     kind: 'launch';
     id: string;
 };
-/** The short form shown to a human. Both kinds are uuid-shaped, so 8 chars reads the same. */
-export declare function targetLabel(target: ReconnectTarget): string;
 /**
  * The command a user can run to re-enter a session after reconnect gives up.
  * The full id is printed on its own line so it remains copyable after a drop.
@@ -124,7 +122,7 @@ export declare function afterInteractiveRemoteExit(opts: {
     notice: string | undefined;
 };
 /** Inputs the launcher has once its interactive stream has returned. */
-export interface ReconnectTargetInputs {
+interface ReconnectTargetInputs {
     agent: string;
     sessionId?: string;
     resolvedId?: string;
@@ -141,13 +139,7 @@ export declare function pickReconnectTarget(inputs: ReconnectTargetInputs): Reco
  * a network drop. No `--attach-only`: focus resumes in place when no pane survived.
  */
 export declare function reattachRemoteCommand(target: ReconnectTarget): string;
-/**
- * Re-attach the live remote pane by driving the peer's `agents sessions focus`.
- * A fast preflight probe decides reachability; only then do we run the
- * interactive attach/resume. Returns the exit code, connected bit, and hold time.
- */
-export declare function reattachRemoteSession(host: Host, target: ReconnectTarget): ReconnectOutcome;
-export interface ReconnectLoopOpts {
+interface ReconnectLoopOpts {
     host: Host;
     target: ReconnectTarget;
     /** Exit code from the initial interactive run (treated as connected). */
@@ -159,3 +151,4 @@ export interface ReconnectLoopOpts {
 }
 /** Drive the reconnect loop from the initial run's outcome to a terminal code. */
 export declare function reconnectInteractiveSession(opts: ReconnectLoopOpts): Promise<number>;
+export {};

package/dist/lib/hosts/reconnect.js

@@ -112,7 +112,7 @@ export function wrapRemoteExitCode(cmd) {
     return `bash -lc ${shellQuote(guarded)}`;
 }
 /** The short form shown to a human. Both kinds are uuid-shaped, so 8 chars reads the same. */
-export function targetLabel(target) {
+function targetLabel(target) {
     return target.id.slice(0, 8);
 }
 /**
@@ -201,7 +201,7 @@ export function reattachRemoteCommand(target) {
  * A fast preflight probe decides reachability; only then do we run the
  * interactive attach/resume. Returns the exit code, connected bit, and hold time.
  */
-export function reattachRemoteSession(host, target) {
+function reattachRemoteSession(host, target) {
     const sshTarget = sshTargetFor(host);
     const extraSshArgs = hostIdentityArgs(host);
     // Fresh (non-multiplexed) reachability probe: only a completed handshake is

package/dist/lib/hosts/registry.d.ts

@@ -30,7 +30,7 @@ export declare function getAllProviders(): HostProvider[];
  * doesn't hold, and lets dispatch callers apply the device-only refusal
  * (password auth) without re-reading the registry.
  */
-export interface ResolvedHost extends Host {
+interface ResolvedHost extends Host {
     device?: DeviceProfile;
     /** True when the host is a synthesized ad-hoc `user@host` / IP / FQDN literal
      * (never registered) rather than a device or overlay/ssh-config match. Lets the

package/dist/lib/hosts/remote-cmd.d.ts

@@ -33,7 +33,7 @@ export declare function stripRoutingFlags(args: string[], specs: StripSpec[]): s
  */
 export declare const HOST_ROUTING_SPECS: StripSpec[];
 /** How one `agents run` option behaves when the run is offloaded with `--device`. */
-export type RunOptionForwarding = 
+type RunOptionForwarding = 
 /** Appended to the remote `agents run` argv — same behavior local or remote. */
 'forward'
 /** Refused with an actionable error BEFORE dispatch — never silently dropped. */
@@ -79,7 +79,7 @@ export declare function buildRemoteAgentsInvocation(forwardedArgs: string[], rem
  */
 export declare function posixEnvExports(env?: Record<string, string>): string;
 /** The two remote shell dialects we build commands for. */
-export type RemoteShell = 'posix' | 'powershell';
+type RemoteShell = 'posix' | 'powershell';
 /**
  * Pick the remote shell dialect from a recorded OS/platform string. A Windows
  * host (device-registry `platform: 'windows'`, or an enrolled `HostEntry.os`
@@ -105,7 +105,7 @@ export declare function encodePowershell(script: string): string;
  * back to its script. Used by tests to assert on the built command. */
 export declare function decodePowershell(encoded: string): string;
 /** A single `agents …` invocation to run on a Windows remote. */
-export interface WindowsAgentsCommand {
+interface WindowsAgentsCommand {
     /** `agents` argv (command name NOT included; `agents` is prepended). */
     args: string[];
     /** Env vars scoped to this invocation (POSIX `VAR=val` ↔ PS `$env:VAR=…`). */
@@ -192,3 +192,4 @@ export declare function buildWindowsStdinImportCommand(bundle: string, opts?: {
     force?: boolean;
     policyNever?: boolean;
 }): string;
+export {};

package/dist/lib/hosts/remote-session-id.d.ts

@@ -9,37 +9,15 @@
  *
  * The launcher forwards a launch id it controls (`--env AGENT_LAUNCH_ID=<id>`);
  * the remote `agents run` adopts it (exec.ts `resolveLaunchId`), so the remote
- * SessionStart hook records the agent's REAL session id under that exact key in
- * `~/.agents/.cache/terminals/sessions/<pid>.json`. After the stream returns we
- * do ONE ssh read of that dir and pick the record whose `launch_id` matches —
- * the same launch-id join `agents sessions --active` uses locally
- * (session/hook-sessions.ts), just across the SSH hop.
+ * SessionStart hook records the agent's REAL session id. After the stream
+ * returns we ask the owning CLI to join that hook with the durable launch
+ * registry, using the same index as local focus/session projection. This also
+ * supports the deployed legacy hook containing only session_id and pid.
  *
  * This gives the interactive path a real per-agent id to register in the local
  * session index and to reconnect against, for Codex/Kimi/Grok/Gemini — closing
  * the gap RUSH-2033 left for every non-Claude agent (Claude still forces its own
  * id up front and never reaches here).
  */
-/**
- * Pick the real session id for `launchId` from the remote hook records.
- *
- * `recordsJson` is the newline-delimited JSON the remote read emits — one record
- * per line (a `cat` of every `sessions/*.json`). Scan for the record whose
- * `launch_id` matches and return its `session_id`; when several match (pid reuse,
- * a lingering file) the NEWEST by `ts` wins, mirroring the local reader's
- * keep-newest tie-break (session/hook-sessions.ts). Pure so the correlation is
- * unit-testable from fixtures with no SSH. Returns undefined when no record
- * carries the launch id (the hook hasn't landed yet, or a hookless harness).
- */
-export declare function pickRemoteSessionId(recordsJson: string, launchId: string): string | undefined;
-/**
- * Read the remote hook-session dir over ssh and resolve the real session id the
- * remote run recorded under `launchId`. One round-trip, best-effort: any ssh
- * failure, a missing dir, or an absent record yields undefined — the caller then
- * keeps the un-mapped run rather than a fabricated id.
- *
- * `$HOME` expands on the REMOTE login shell (never the local box). The glob is a
- * literal path with no user input, so it is injection-safe; a `2>/dev/null` on a
- * globless dir keeps the command quiet when the dir is empty or absent.
- */
+/** Resolve on the execution owner through the canonical read-only CLI projection. */
 export declare function resolveRemoteSessionId(target: string, launchId: string, timeoutMs?: number): string | undefined;