@phnx-labs/agents-cli 1.22.112 → 1.22.114

package/dist/lib/hosts/remote-session-id.js

@@ -9,76 +9,33 @@
  *
  * The launcher forwards a launch id it controls (`--env AGENT_LAUNCH_ID=<id>`);
  * the remote `agents run` adopts it (exec.ts `resolveLaunchId`), so the remote
- * SessionStart hook records the agent's REAL session id under that exact key in
- * `~/.agents/.cache/terminals/sessions/<pid>.json`. After the stream returns we
- * do ONE ssh read of that dir and pick the record whose `launch_id` matches —
- * the same launch-id join `agents sessions --active` uses locally
- * (session/hook-sessions.ts), just across the SSH hop.
+ * SessionStart hook records the agent's REAL session id. After the stream
+ * returns we ask the owning CLI to join that hook with the durable launch
+ * registry, using the same index as local focus/session projection. This also
+ * supports the deployed legacy hook containing only session_id and pid.
  *
  * This gives the interactive path a real per-agent id to register in the local
  * session index and to reconnect against, for Codex/Kimi/Grok/Gemini — closing
  * the gap RUSH-2033 left for every non-Claude agent (Claude still forces its own
  * id up front and never reaches here).
  */
-import { sshExec } from '../ssh-exec.js';
-/**
- * Pick the real session id for `launchId` from the remote hook records.
- *
- * `recordsJson` is the newline-delimited JSON the remote read emits — one record
- * per line (a `cat` of every `sessions/*.json`). Scan for the record whose
- * `launch_id` matches and return its `session_id`; when several match (pid reuse,
- * a lingering file) the NEWEST by `ts` wins, mirroring the local reader's
- * keep-newest tie-break (session/hook-sessions.ts). Pure so the correlation is
- * unit-testable from fixtures with no SSH. Returns undefined when no record
- * carries the launch id (the hook hasn't landed yet, or a hookless harness).
- */
-export function pickRemoteSessionId(recordsJson, launchId) {
-    if (!launchId)
-        return undefined;
-    let best;
-    for (const line of recordsJson.split('\n')) {
-        const trimmed = line.trim();
-        if (!trimmed)
-            continue;
-        let rec;
-        try {
-            rec = JSON.parse(trimmed);
-        }
-        catch {
-            continue; // a partial/garbled line — skip, never throw
-        }
-        if (rec.launch_id !== launchId)
-            continue;
-        if (typeof rec.session_id !== 'string' || !rec.session_id)
-            continue;
-        const ts = typeof rec.ts === 'number' ? rec.ts : 0;
-        // Strict `>` so the FIRST record wins a tie — matches keepNewest (hook-sessions.ts).
-        if (!best || ts > best.ts)
-            best = { sid: rec.session_id, ts };
-    }
-    return best?.sid;
-}
-/**
- * Read the remote hook-session dir over ssh and resolve the real session id the
- * remote run recorded under `launchId`. One round-trip, best-effort: any ssh
- * failure, a missing dir, or an absent record yields undefined — the caller then
- * keeps the un-mapped run rather than a fabricated id.
- *
- * `$HOME` expands on the REMOTE login shell (never the local box). The glob is a
- * literal path with no user input, so it is injection-safe; a `2>/dev/null` on a
- * globless dir keeps the command quiet when the dir is empty or absent.
- */
+import { sshExec, shellQuote } from '../ssh-exec.js';
+/** Resolve on the execution owner through the canonical read-only CLI projection. */
 export function resolveRemoteSessionId(target, launchId, timeoutMs = 6000) {
     if (!launchId)
         return undefined;
-    // `cat` every record onto its own line. `head -c` caps a runaway file; the
-    // trailing `true` keeps the pipeline's exit 0 even when the glob matches nothing.
-    const cmd = 'cat "$HOME"/.agents/.cache/terminals/sessions/*.json 2>/dev/null | head -c 1048576 || true';
+    // Let the owning CLI join its deployed hook and launch registry. A remote
+    // caller must not carry a second implementation of session identity rules.
+    const cmd = `agents sessions --resolve-launch-id ${shellQuote(launchId)} --json --local`;
     const res = sshExec(target, cmd, { timeoutMs, multiplex: true });
-    if (res.code !== 0 && !res.stdout)
+    if (res.code !== 0)
         return undefined;
-    // Each record is a single-line JSON object; `cat` may run them together, so
-    // normalise `}{` boundaries onto separate lines before scanning.
-    const normalised = res.stdout.replace(/\}\s*\{/g, '}\n{');
-    return pickRemoteSessionId(normalised, launchId);
+    try {
+        const record = JSON.parse(res.stdout);
+        return record.launchId === launchId && typeof record.sessionId === 'string' && record.sessionId
+            ? record.sessionId : undefined;
+    }
+    catch {
+        return undefined;
+    }
 }

package/dist/lib/hosts/session-index.d.ts

@@ -18,7 +18,7 @@
  */
 import type { SessionMeta } from '../session/types.js';
 import { type HostTask } from './tasks.js';
-export interface HostSessionContext {
+interface HostSessionContext {
     /** Local directory the `agents run --device` was invoked from. */
     cwd: string;
     /** Prompt the run was launched with, used for the session topic. */
@@ -53,7 +53,7 @@ export declare function registerHostSession(task: HostTask, ctx: HostSessionCont
  * missing/unreadable mirror or absent marker yields null, never an exception.
  */
 export declare function captureRemoteSessionId(task: HostTask): HostTask | null;
-export interface InteractiveHostSessionContext {
+interface InteractiveHostSessionContext {
     cwd: string;
     host: string;
     agent: string;
@@ -68,3 +68,4 @@ export interface InteractiveHostSessionContext {
  * surface and resume it by id.
  */
 export declare function registerInteractiveHostSession(ctx: InteractiveHostSessionContext): void;
+export {};

package/dist/lib/hosts/ssh-config.d.ts

@@ -19,11 +19,9 @@ export declare function parseSshConfigHosts(content: string): string[];
 export declare function parseKnownHosts(content: string): string[];
 /** `Host` names from ~/.ssh/config, following `Include` globs (best-effort). */
 export declare function listSshConfigHosts(): string[];
-/** Hostnames recorded in ~/.ssh/known_hosts (hashed entries skipped). */
-export declare function listKnownHosts(): string[];
 /** True if `name` is a concrete `Host` stanza in ssh config. */
 export declare function isSshConfigHost(name: string): boolean;
-export interface SshGResult {
+interface SshGResult {
     hostname?: string;
     user?: string;
     port?: string;
@@ -35,3 +33,4 @@ export interface SshGResult {
  * to decide whether a name is actually configured.
  */
 export declare function sshResolve(name: string): SshGResult | undefined;
+export {};

package/dist/lib/hosts/ssh-config.js

@@ -12,7 +12,6 @@ import { spawnSync } from 'child_process';
 import { assertValidSshTarget } from '../ssh-exec.js';
 const SSH_DIR = path.join(os.homedir(), '.ssh');
 const SSH_CONFIG = path.join(SSH_DIR, 'config');
-const KNOWN_HOSTS = path.join(SSH_DIR, 'known_hosts');
 /**
  * Parse `Host` stanza names from ssh config text. Wildcard/negated patterns
  * (`*`, `?`, `!`) are skipped — they're match rules, not concrete hosts.
@@ -110,15 +109,6 @@ function globMaybe(pattern) {
         return [];
     }
 }
-/** Hostnames recorded in ~/.ssh/known_hosts (hashed entries skipped). */
-export function listKnownHosts() {
-    try {
-        return parseKnownHosts(fs.readFileSync(KNOWN_HOSTS, 'utf-8'));
-    }
-    catch {
-        return [];
-    }
-}
 /** True if `name` is a concrete `Host` stanza in ssh config. */
 export function isSshConfigHost(name) {
     return listSshConfigHosts().includes(name);

package/dist/lib/humans.d.ts

@@ -1,6 +1,4 @@
 import type { HumansConfig, HumanOwner } from './types.js';
-export declare const HUMANS_VERSION: 1;
-export declare const HUMANS_HEADER = "# humans.yaml \u2014 owner identity and notification channels\n# Managed by agents-cli. See: agents humans --help\n";
 /**
  * Read and parse humans.yaml. Returns null when the file does not exist or
  * is not a valid v1 config — never throws.

package/dist/lib/humans.js

@@ -10,8 +10,8 @@
 import * as fs from 'fs';
 import * as yaml from 'yaml';
 import { getHumansFilePath } from './state.js';
-export const HUMANS_VERSION = 1;
-export const HUMANS_HEADER = `# humans.yaml — owner identity and notification channels
+const HUMANS_VERSION = 1;
+const HUMANS_HEADER = `# humans.yaml — owner identity and notification channels
 # Managed by agents-cli. See: agents humans --help
 `;
 /**

package/dist/lib/import.d.ts

@@ -17,12 +17,12 @@
  * true.
  */
 import type { AgentId } from './types.js';
-export interface ImportConfigResult {
+interface ImportConfigResult {
     success: boolean;
     skipped?: boolean;
     error?: string;
 }
-export interface ImportBinaryResult {
+interface ImportBinaryResult {
     success: boolean;
     skipped?: boolean;
     error?: string;
@@ -60,7 +60,7 @@ export declare function finalizeImport(agentId: AgentId, version: string): void;
  * farm from the AGENTS registry, which keeps the function pure and avoids
  * fragile coupling in test setups that stub `lib/agents.ts`.
  */
-export interface AgentBinarySpec {
+interface AgentBinarySpec {
     /** Agent id used in the marker package.json (`agents-{agentId}-{version}`). */
     agentId: string;
     /** npm package name (e.g. `openclaw`) — used as the `node_modules/<name>` dir. */
@@ -136,3 +136,4 @@ export declare function seedIsolatedConfigFromLocal(agentId: AgentId, version: s
     skippedRuntime: string[];
     error?: string;
 };
+export {};

package/dist/lib/installations/installation-lock.d.ts

@@ -1,6 +1,4 @@
 import { type FileLockOptions } from '../fs-atomic.js';
 import { type AgentId } from '../types.js';
 export declare function installationLockTarget(agent: AgentId, label: string): string;
-export declare const INSTALLATION_LOCK_STALE_MS: number;
-export declare const INSTALLATION_LOCK_ACQUIRE_TIMEOUT_MS: number;
 export declare const INSTALLATION_LOCK_OPTIONS: Required<FileLockOptions>;

package/dist/lib/installations/installation-lock.js

@@ -20,8 +20,8 @@ export function installationLockTarget(agent, label) {
     ensureLockTarget(target, '', 0o700);
     return target;
 }
-export const INSTALLATION_LOCK_STALE_MS = 10 * 60_000;
-export const INSTALLATION_LOCK_ACQUIRE_TIMEOUT_MS = 5 * 60_000;
+const INSTALLATION_LOCK_STALE_MS = 10 * 60_000;
+const INSTALLATION_LOCK_ACQUIRE_TIMEOUT_MS = 5 * 60_000;
 export const INSTALLATION_LOCK_OPTIONS = {
     staleMs: INSTALLATION_LOCK_STALE_MS,
     acquireTimeoutMs: INSTALLATION_LOCK_ACQUIRE_TIMEOUT_MS,

package/dist/lib/installations/launch-gate.d.ts

@@ -44,15 +44,6 @@ import type { AgentId } from '../types.js';
  * work here serializes launches against each other unnecessarily.
  */
 export declare function withLaunchGate<T>(agent: AgentId, label: string, fn: () => T): Promise<T>;
-/**
- * Acquire the per-installation update lock, register a launch lease for
- * `pid`, then release. For a caller that already has its own pid before the
- * risky operation (the native shim's `$$`, exec-replaced so the pid is
- * final) — a Node caller that spawns a child should use {@link withLaunchGate}
- * around the spawn itself instead, since here the process already exists by
- * the time the lock is acquired.
- */
-export declare function acquireLaunchGate(agent: AgentId, label: string, pid: number): Promise<() => void>;
 /** Keep a live launcher's lease until its operation ends, without holding the lock. */
 export declare function withInstallationLease<T>(agent: AgentId, label: string, fn: () => Promise<T>): Promise<T>;
 /**

package/dist/lib/installations/launch-gate.js

@@ -91,7 +91,7 @@ export async function withLaunchGate(agent, label, fn) {
  * around the spawn itself instead, since here the process already exists by
  * the time the lock is acquired.
  */
-export async function acquireLaunchGate(agent, label, pid) {
+async function acquireLaunchGate(agent, label, pid) {
     return withLaunchGate(agent, label, () => recordLaunchLease(agent, label, pid));
 }
 /** Keep a live launcher's lease until its operation ends, without holding the lock. */

package/dist/lib/installations/migrate.d.ts

@@ -45,17 +45,6 @@ export declare function migrateRoutineDeviceToDevices(routinesDir?: string): voi
  * Idempotent: a file with only `cwd` (already migrated) is skipped.
  */
 export declare function migrateRoutineRemoteCwdToCwd(routinesDir?: string): void;
-/**
- * Pause every currently-active routine whose execution context no longer
- * resolves ready (RUSH-2290). An agent/workflow routine with no project/cwd, a
- * missing directory, or a non-portable path used to fire and fail every tick —
- * the mass auth_failed / untrusted-home storm this ticket exists to stop. After
- * the fold, such a routine is deactivated on THIS device (only), preventing it
- * from being scheduled until `agents routines doctor --all --fix` (or a repair +
- * `resume`) makes it ready. Never materializes a device manifest that does not
- * yet exist, and never touches command routines (they run in the target home).
- */
-export declare function pauseUnreadyEnabledRoutines(): void;
 /**
  * Fold the legacy watchdog enable sentinel into the `watchdog.enabled` config.
  *

package/dist/lib/installations/migrate.js

@@ -1871,7 +1871,7 @@ export function migrateRoutineRemoteCwdToCwd(routinesDir) {
  * `resume`) makes it ready. Never materializes a device manifest that does not
  * yet exist, and never touches command routines (they run in the target home).
  */
-export function pauseUnreadyEnabledRoutines() {
+function pauseUnreadyEnabledRoutines() {
     const enabled = enabledRoutineNames();
     if (enabled === null)
         return; // no manifest yet — nothing activated to pause

package/dist/lib/installations/shims.d.ts

@@ -358,7 +358,7 @@ export declare function listShimFileNames(): string[];
 /**
  * Prune a stale, orphaned shim: one that is NOT a managed agent shim and NOT a user
  * alias, whose baked `AGENTS_BIN` points at an install that no longer exists. These
- * are `exec "$AGENTS_BIN" <cmd>` command shims (browser/sessions/pty/teams) that
+ * are `exec "$AGENTS_BIN" <cmd>` command shims (browser/teams) that
  * `scripts/postinstall.js` writes for the LIVE install; one baked at a removed
  * install either dies with `exit 127` or shadows the real package bin on PATH.
  * Only removed when the baked target is gone, so a working shim is never touched —

package/dist/lib/installations/shims.js

@@ -2197,11 +2197,11 @@ export function listShimFileNames() {
  * `computer` bin of its own: a machine that installed an older CLI has a real
  * shim on PATH under the name the standalone engine now owns.
  */
-const LEGACY_SHIMS_ALWAYS_PRUNED = new Set(['secrets', 'sessions', 'computer']);
+const LEGACY_SHIMS_ALWAYS_PRUNED = new Set(['secrets', 'sessions', 'computer', 'pty']);
 /**
  * Prune a stale, orphaned shim: one that is NOT a managed agent shim and NOT a user
  * alias, whose baked `AGENTS_BIN` points at an install that no longer exists. These
- * are `exec "$AGENTS_BIN" <cmd>` command shims (browser/sessions/pty/teams) that
+ * are `exec "$AGENTS_BIN" <cmd>` command shims (browser/teams) that
  * `scripts/postinstall.js` writes for the LIVE install; one baked at a removed
  * install either dies with `exit 127` or shadows the real package bin on PATH.
  * Only removed when the baked target is gone, so a working shim is never touched —

package/dist/lib/installations/update-runtime.js

@@ -299,7 +299,7 @@ async function runAutoUpdatePassUntilCancelled(opts, cancelled) {
             // (`ensureShimCurrent`/`ensureVersionedAliasCurrent`). Deliberately
             // NEVER `adoptShadowingLauncher`: that seizes a launcher this pass does
             // not own (a user's own PATH entry, or another install's), and is an
-            // operator-triggered `doctor --fix` action, not something an unattended
+            // operator-triggered `agents sync` action, not something an unattended
             // background pass may do on its own. Real-pass-only, same reason as the
             // migration above — a `--check` preview must not touch PATH or a
             // config-dir symlink.

package/dist/lib/launch-identity.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Editor identity belongs to the first launch attached to that terminal. The
+ * harness inherits it for its own tools, but another `agents run` is a new
+ * launch, not another owner of the parent's editor tab. AGENTS_RUNTIME is set
+ * by buildExecEnv, whereas an editor's initial launch sets AGENT_TERMINAL_ID
+ * (and may already set AGENT_SESSION_ID) without that runtime marker.
+ */
+export declare function launchIdentityEnv(env?: NodeJS.ProcessEnv): Record<string, string>;
+/** Identity absent from a new launch must not leak back in from a tmux server. */
+export declare const LAUNCH_IDENTITY_KEYS: readonly ["AGENT_TERMINAL_ID", "AGENT_SESSION_ID", "AGENTS_SESSION_ID", "AGENTS_MAILBOX_DIR", "AGENT_LAUNCH_ID", "AGENTS_PARENT_SESSION_ID", "AGENTS_PARENT_LAUNCH_ID", "AGENTS_ORIGIN_TERMINAL_ID"];

package/dist/lib/launch-identity.js

@@ -0,0 +1,31 @@
+/**
+ * Editor identity belongs to the first launch attached to that terminal. The
+ * harness inherits it for its own tools, but another `agents run` is a new
+ * launch, not another owner of the parent's editor tab. AGENTS_RUNTIME is set
+ * by buildExecEnv, whereas an editor's initial launch sets AGENT_TERMINAL_ID
+ * (and may already set AGENT_SESSION_ID) without that runtime marker.
+ */
+export function launchIdentityEnv(env = process.env) {
+    const result = {};
+    const terminal = env.AGENT_TERMINAL_ID?.trim();
+    const nested = env.AGENTS_RUNTIME === 'terminal' || env.AGENTS_RUNTIME === 'headless' || env.AGENTS_RUNTIME === 'teams';
+    if (terminal && !nested)
+        result.AGENT_TERMINAL_ID = terminal;
+    const originTerminal = env.AGENTS_ORIGIN_TERMINAL_ID?.trim() || terminal;
+    if (originTerminal)
+        result.AGENTS_ORIGIN_TERMINAL_ID = originTerminal;
+    const parentLaunch = nested ? env.AGENT_LAUNCH_ID : env.AGENTS_PARENT_LAUNCH_ID;
+    const parentSession = nested
+        ? env.AGENTS_SESSION_ID || env.AGENT_SESSION_ID
+        : env.AGENTS_PARENT_SESSION_ID;
+    if (parentLaunch)
+        result.AGENTS_PARENT_LAUNCH_ID = parentLaunch;
+    if (parentSession)
+        result.AGENTS_PARENT_SESSION_ID = parentSession;
+    return result;
+}
+/** Identity absent from a new launch must not leak back in from a tmux server. */
+export const LAUNCH_IDENTITY_KEYS = [
+    'AGENT_TERMINAL_ID', 'AGENT_SESSION_ID', 'AGENTS_SESSION_ID', 'AGENTS_MAILBOX_DIR',
+    'AGENT_LAUNCH_ID', 'AGENTS_PARENT_SESSION_ID', 'AGENTS_PARENT_LAUNCH_ID', 'AGENTS_ORIGIN_TERMINAL_ID',
+];

package/dist/lib/linear-cache.d.ts

@@ -42,7 +42,7 @@ export declare const LINEAR_CACHE_TTL_MS: number;
  */
 export declare function resolveLinearApiKey(): string | null;
 /** What a lookup found, and how much to trust it. */
-export interface CacheHit<T> {
+interface CacheHit<T> {
     value: T;
     /** Age in ms. Past the TTL the value is still returned, flagged stale. */
     ageMs: number;
@@ -68,3 +68,4 @@ export declare function parseRateLimitReset(header: string | null, nowMs: number
  * `resetAtMs` comes from {@link parseRateLimitReset}; without it, back off one TTL.
  */
 export declare function noteRateLimited(resetAtMs: number | undefined, nowMs: number): void;
+export {};

package/dist/lib/linux-userns.d.ts

@@ -13,7 +13,7 @@ export interface UsernsStatus {
     reason?: string;
 }
 /** The raw signals the pure interpreter reasons over. */
-export interface UsernsInputs {
+interface UsernsInputs {
     platform: NodeJS.Platform;
     /**
      * Contents of {@link APPARMOR_USERNS_SYSCTL_PATH} trimmed, or null when the
@@ -54,5 +54,4 @@ export declare function probeUnshare(): 'ok' | 'denied' | 'no-tool';
  * short-circuits to `ok` without spawning anything.
  */
 export declare function probeUnprivilegedUserns(platform?: NodeJS.Platform): UsernsStatus;
-/** Test-only: drop the process cache so a test can re-probe. */
-export declare function resetUsernsCacheForTests(): void;
+export {};

package/dist/lib/linux-userns.js

@@ -110,7 +110,3 @@ export function probeUnprivilegedUserns(platform = process.platform) {
     });
     return cached;
 }
-/** Test-only: drop the process cache so a test can re-probe. */
-export function resetUsernsCacheForTests() {
-    cached = null;
-}

package/dist/lib/loop.d.ts

@@ -40,7 +40,7 @@ export interface LoopSignal {
 /** Why the loop stopped. Mirrors the teams supervisor exit reasons. */
 export type LoopStoppedBy = 'condition-met' | 'budget' | 'stalled' | 'max' | 'signal' | 'error';
 /** Result of a loop run. */
-export interface LoopResult {
+interface LoopResult {
     /** Iterations actually executed. */
     iterations: number;
     stoppedBy: LoopStoppedBy;
@@ -152,3 +152,4 @@ export declare function defaultRunIteration(options: ExecOptions): Promise<Itera
  *   - `error`         — an iteration threw or exited non-zero.
  */
 export declare function runLoop(execOptions: ExecOptions, loop: LoopConfig, ctx: LoopContext, deps?: LoopDeps): Promise<LoopResult>;
+export {};

package/dist/lib/mailbox-gc.d.ts

@@ -6,7 +6,7 @@ export interface GcResult {
     consumedPruned: number;
     blocksRemoved: number;
 }
-export interface GcOptions {
+interface GcOptions {
     root?: string;
     /** Feed store root. Defaults to getFeedDir(). */
     feedRoot?: string;
@@ -20,3 +20,4 @@ export interface GcOptions {
  * mailbox. For live boxes, drop expired messages and prune old consumed files.
  */
 export declare function gcMailbox(activeBoxIds: Set<string>, options?: GcOptions): GcResult;
+export {};

package/dist/lib/mailbox-target.d.ts

@@ -6,7 +6,7 @@
  */
 import type { ActiveSession } from './session/active.js';
 import type { HostTask } from './hosts/tasks.js';
-export type MessageResolution = {
+type MessageResolution = {
     kind: 'cloud';
     id: string;
 } | {
@@ -61,3 +61,4 @@ export type HostTaskRoute = {
  * latter.
  */
 export declare function decideHostTaskRoute(task: HostTask | null, target: string): HostTaskRoute;
+export {};

package/dist/lib/mailbox.d.ts

@@ -2,12 +2,6 @@
 export declare const DEFAULT_TTL_SECONDS: number;
 /** Env var that overrides {@link DEFAULT_TTL_SECONDS} with a duration like "24h" or "3600". */
 export declare const MAILBOX_TTL_ENV = "AGENTS_MAILBOX_TTL";
-/**
- * Resolve the default mailbox TTL in seconds. Honors `AGENTS_MAILBOX_TTL`
- * (parsed by {@link parseDuration}); falls back to 24h. A malformed env value
- * fails loud instead of silently disabling expiry.
- */
-export declare function resolveDefaultTtlSeconds(): number;
 /** A single mailbox message. `text` may embed `host:/path` clip tokens. */
 export interface MailboxMessage {
     /** Unique, time-sortable id. Also the on-disk filename stem. */

package/dist/lib/mailbox.js

@@ -30,7 +30,7 @@ export const MAILBOX_TTL_ENV = 'AGENTS_MAILBOX_TTL';
  * (parsed by {@link parseDuration}); falls back to 24h. A malformed env value
  * fails loud instead of silently disabling expiry.
  */
-export function resolveDefaultTtlSeconds() {
+function resolveDefaultTtlSeconds() {
     const raw = process.env[MAILBOX_TTL_ENV];
     if (raw == null || raw === '')
         return DEFAULT_TTL_SECONDS;

package/dist/lib/manifest.d.ts

@@ -1,20 +1,6 @@
 import type { Manifest } from './types.js';
 /** Canonical filename for the manifest in any agents repo or project root. */
 export declare const MANIFEST_FILENAME = "agents.yaml";
-/** Parse a YAML string into a typed Manifest object. */
-export declare function parseManifest(content: string): Manifest;
-/**
- * Serialize a Manifest to YAML WITHOUT destroying hand-written comments.
- *
- * Plain `yaml.stringify(manifest)` drops every comment, so `agents mcp add`
- * (and every other writeManifest caller) used to clobber annotations in
- * agents.yaml. Matching `serializeCentral` in state.ts: when existing file
- * text is provided, parse it into a `yaml.Document` (comments + key order
- * preserved) and edit only keys that actually changed. Untouched keys and
- * their comments stay byte-stable. Falls back to plain stringify when there
- * is no existing document yet.
- */
-export declare function serializeManifest(manifest: Manifest, existingContent?: string | null): string;
 /** Read and parse agents.yaml from a directory. Returns null if the file does not exist. */
 export declare function readManifest(repoPath: string): Manifest | null;
 /** Write a Manifest object to agents.yaml in the given directory. */

package/dist/lib/manifest.js

@@ -14,7 +14,7 @@ export const MANIFEST_FILENAME = 'agents.yaml';
 // Per-path re-entrancy depth so withManifestLock is safe against recursive calls.
 const manifestLockDepth = new Map();
 /** Parse a YAML string into a typed Manifest object. */
-export function parseManifest(content) {
+function parseManifest(content) {
     return yaml.parse(content);
 }
 /**
@@ -28,7 +28,7 @@ export function parseManifest(content) {
  * their comments stay byte-stable. Falls back to plain stringify when there
  * is no existing document yet.
  */
-export function serializeManifest(manifest, existingContent) {
+function serializeManifest(manifest, existingContent) {
     const entries = Object.entries(manifest).filter(([, v]) => v !== undefined);
     const isEmpty = entries.length === 0;
     if (existingContent == null || existingContent.trim() === '') {

package/dist/lib/mcp-registry.d.ts

@@ -19,7 +19,7 @@ export type McpFormat =
 /** `{ schema_version, mcp_servers: { "<name>": {transport, ..., enabled} } }` */
  | 'muse-json';
 /** The complete MCP contract for one agent. */
-export interface McpTarget {
+interface McpTarget {
     /** MCP config file under a HOME root (a version home, or the real HOME). */
     home(home: string): string;
     /** Project-scoped MCP config file for a repo at `cwd`. */
@@ -60,3 +60,4 @@ export declare function mcpTarget(agent: AgentId): McpTarget | undefined;
  * MCP-capable, or a hard-deprecated id), or it has one with `format: null`.
  */
 export declare function mcpWriteUnsupportedReason(agent: AgentId): string | null;
+export {};

package/dist/lib/memory.d.ts

@@ -12,7 +12,7 @@
  * target dir (see memoryTargetDir).
  */
 import type { AgentId } from './types.js';
-export interface MemoryFact {
+interface MemoryFact {
     /** Filename without .md (slug). */
     name: string;
     /** Absolute path to the fact file. */
@@ -22,20 +22,10 @@ export interface MemoryFact {
     /** First non-empty line of the body (for list display). */
     summary: string;
 }
-export interface MemoryLayerDir {
-    layer: 'project' | 'user' | 'system';
-    dir: string;
-}
 /** User-layer memory root (~/.agents/memory/). */
 export declare function getUserMemoryDir(): string;
-/** System-layer memory root (~/.agents/.system/memory/). */
-export declare function getSystemMemoryDir(): string;
-/** Project-layer memory root when a project agents dir exists. */
-export declare function getProjectMemoryDir(cwd?: string): string | null;
 /** Ensure the user memory dir exists (creates MEMORY.md index if missing). */
 export declare function ensureUserMemoryDir(): string;
-/** Layer dirs highest-priority first. */
-export declare function getMemoryLayerDirs(cwd?: string): MemoryLayerDir[];
 /** List memory facts with project > user > system override on name. */
 export declare function listMemoryFacts(cwd?: string): MemoryFact[];
 /** Read one fact by name (winning layer). */
@@ -44,8 +34,6 @@ export declare function readMemoryFact(name: string, cwd?: string): MemoryFact |
 export declare function addMemoryFact(name: string, body: string): string;
 /** Remove a fact from the user layer. Returns true if a file was deleted. */
 export declare function removeMemoryFact(name: string): boolean;
-/** Rebuild MEMORY.md index from sibling fact files in a single layer dir. */
-export declare function rebuildMemoryIndex(dir: string): void;
 /**
  * Per-agent target directory (relative to version home) for synced memory.
  * Claude/Codex/OpenClaw/Grok get native-ish paths; others get a generic memory/.
@@ -79,3 +67,4 @@ export declare function getClaudeProjectMemoryDir(cwd: string): string;
  * being replaced by the symlink.
  */
 export declare function syncClaudeProjectMemoryDir(versionHome: string, cwd?: string): void;
+export {};

package/dist/lib/memory.js

@@ -22,11 +22,11 @@ export function getUserMemoryDir() {
     return path.join(getUserAgentsDir(), 'memory');
 }
 /** System-layer memory root (~/.agents/.system/memory/). */
-export function getSystemMemoryDir() {
+function getSystemMemoryDir() {
     return path.join(getSystemAgentsDir(), 'memory');
 }
 /** Project-layer memory root when a project agents dir exists. */
-export function getProjectMemoryDir(cwd = process.cwd()) {
+function getProjectMemoryDir(cwd = process.cwd()) {
     const project = getProjectAgentsDir(cwd);
     return project ? path.join(project, 'memory') : null;
 }
@@ -69,7 +69,7 @@ function summarize(content) {
     return '(empty)';
 }
 /** Layer dirs highest-priority first. */
-export function getMemoryLayerDirs(cwd = process.cwd()) {
+function getMemoryLayerDirs(cwd = process.cwd()) {
     const out = [];
     const project = getProjectMemoryDir(cwd);
     if (project && fs.existsSync(project))
@@ -157,7 +157,7 @@ export function removeMemoryFact(name) {
     return true;
 }
 /** Rebuild MEMORY.md index from sibling fact files in a single layer dir. */
-export function rebuildMemoryIndex(dir) {
+function rebuildMemoryIndex(dir) {
     let facts = [];
     try {
         facts = fs.readdirSync(dir).filter(isFactFile).sort();

package/dist/lib/menubar/download-menubar.d.ts

@@ -38,8 +38,6 @@ export declare function menubarHelperAssetUrls(version: string): {
 };
 /** Cache dir for the downloaded menu-bar helper, one subdir per release tag. */
 export declare function menubarHelperCacheDir(version: string): string;
-/** Verify a menu-bar helper `.app`: codesign + Team + DR pin + notarization. */
-export declare function verifyMenubarHelper(appPath: string): void;
 /**
  * Download the menu-bar helper release asset for `version`, verify sha256 +
  * signature + DR pin, and return the path to the extracted `MenubarHelper.app`