@phnx-labs/agents-cli 1.22.112 → 1.22.114

package/dist/lib/tmux/binary.d.ts

@@ -37,7 +37,7 @@ export declare class TmuxCommandError extends Error {
     readonly code: number | null;
     constructor(message: string, stderr: string, stdout: string, code: number | null);
 }
-export interface RunTmuxOptions {
+interface RunTmuxOptions {
     /** Socket path (default: shared server socket). */
     socket?: string;
     /** Args after `tmux -S <socket>` — e.g. `['has-session', '-t', 'foo']`. */
@@ -76,3 +76,4 @@ export declare function attachTmux(opts: {
     args: string[];
     env?: NodeJS.ProcessEnv;
 }): Promise<number>;
+export {};

package/dist/lib/tmux/orphan-reap.d.ts

@@ -98,8 +98,6 @@
  * entirely (env is inherently unreadable cross-process there without a native
  * helper); it is not a parsing bug {@link parseTmuxSessionMarker} can fix.
  */
-/** Grace between SIGTERM and SIGKILL for a reaped orphan. */
-export declare const REAP_GRACE_MS = 2000;
 /** Env var `runInTmux` stamps into the pane, inherited by every descendant. */
 export declare const TMUX_SESSION_ENV = "AGENT_TMUX_SESSION_NAME";
 /** One process, with the fields the reaper attributes on. */
@@ -119,15 +117,15 @@ export interface PaneOwner {
     attached: boolean;
 }
 /** Why a process was selected, for human output and tests. */
-export type OrphanReason = 'tmux-agent-exited' | 'detached-helper';
-export interface OrphanCandidate {
+type OrphanReason = 'tmux-agent-exited' | 'detached-helper';
+interface OrphanCandidate {
     pid: number;
     args: string;
     reason: OrphanReason;
     /** Owning tmux session, when the process carried the marker. */
     tmuxSession?: string;
 }
-export interface OrphanReapResult {
+interface OrphanReapResult {
     /** Processes signalled (SIGTERM, escalated to SIGKILL when they ignore it). */
     killed: number;
     /** One human-readable line per reaped process. */
@@ -148,7 +146,7 @@ export interface OrphanReapResult {
  * Registry rather than per-agent branches: a second harness with the same shape
  * is one entry, and the completeness of the table is what a reviewer checks.
  */
-export interface DetachedHelperRule {
+interface DetachedHelperRule {
     /** Harness id, for the reap detail line. */
     agent: string;
     /** Owner pid the helper declares in its own argv, or undefined when it is not this rule's process. */
@@ -247,7 +245,7 @@ export declare function readAgentProcesses(opts?: {
     pids?: number[];
 }): Promise<AgentProcess[]>;
 /** One socket's pane-ownership read. `ok: false` means tmux never actually answered. */
-export interface PaneOwnersRead {
+interface PaneOwnersRead {
     /**
      * `true` when tmux completed the query (whatever its exit code — a nonzero
      * exit from `list-panes -a` IS tmux affirmatively answering "no server /
@@ -314,3 +312,4 @@ export declare function reapProcessesForTmuxSession(name: string, socket?: strin
     graceMs?: number;
     pids?: number[];
 }): Promise<OrphanReapResult>;
+export {};

package/dist/lib/tmux/orphan-reap.js

@@ -113,7 +113,7 @@ const PS_TIMEOUT_MS = 10_000;
  */
 const TMUX_QUERY_TIMEOUT_MS = 10_000;
 /** Grace between SIGTERM and SIGKILL for a reaped orphan. */
-export const REAP_GRACE_MS = 2_000;
+const REAP_GRACE_MS = 2_000;
 /** Env var `runInTmux` stamps into the pane, inherited by every descendant. */
 export const TMUX_SESSION_ENV = 'AGENT_TMUX_SESSION_NAME';
 /**

package/dist/lib/tmux/session.d.ts

@@ -127,7 +127,7 @@ export declare function teardownIfAgentExited(name: string, socket?: string): Pr
  */
 export declare function killAll(socket?: string): Promise<number>;
 /** Result returned by {@link reapDeadTmuxPanes}. */
-export interface ReapDeadPanesResult {
+interface ReapDeadPanesResult {
     /** Number of tmux sessions killed. */
     reaped: number;
     /** Names of reaped sessions. */
@@ -196,7 +196,7 @@ export interface TmuxClient {
  */
 export declare function listClients(socket?: string): Promise<TmuxClient[]>;
 /** A dead pane's exit status, read from tmux while the pane lingers under remain-on-exit. */
-export interface PaneExit {
+interface PaneExit {
     /** False when the pane/socket no longer exists or tmux could not query it. */
     found: boolean;
     /** True once the process that ran in the pane has exited (pane is dead). */
@@ -283,7 +283,7 @@ export declare function markSessionHookSchema(name: string, socket?: string, tim
  * its attach client returns — without that, a resume-attach has no handle to ask
  * tmux what happened and can only assume success (EXEC-23b).
  */
-export type ResumePreparation = {
+type ResumePreparation = {
     decision: 'attach';
     pane: string;
 } | {
@@ -381,3 +381,4 @@ export interface CaptureOptions {
 export declare function capturePane(opts: CaptureOptions): Promise<string>;
 /** Read a session's provenance JSON, if present. */
 export declare function readSessionMeta(name: string): SessionMeta | null;
+export {};

package/dist/lib/traces/classify.d.ts

@@ -26,7 +26,7 @@ export interface DriftSignal {
     stallDelta: number;
     severity: 'degrading' | 'stable' | 'improving';
 }
-export interface TopicEvidence {
+interface TopicEvidence {
     cwd?: string | null;
     gitBranch?: string | null;
     topic?: string | null;
@@ -38,7 +38,7 @@ export interface ClassifiedTopic {
     key: string;
     label: string;
 }
-export interface ToolCallFailure {
+interface ToolCallFailure {
     tool: string;
     exit_code?: number | null;
     status_code?: number | null;
@@ -57,3 +57,4 @@ export declare function classifyCause(call: ToolCallFailure): TraceFailureCause;
  * not enough signal to distinguish noise from drift.
  */
 export declare function computeDriftSignal(history: BucketStats[][], today: BucketStats[]): DriftSignal[];
+export {};

package/dist/lib/traces/config.d.ts

@@ -1,10 +1,2 @@
-/** Isolated Cloudflare resources for the private Phoenix trace store. */
-export interface TracesConfig {
-    baseUrl: string;
-    accountId: string;
-    workerName: string;
-    bucketName: string;
-    domain?: string;
-}
 export declare const DEFAULT_WORKER_NAME = "agents-traces";
 export declare const DEFAULT_BUCKET_NAME = "agents-traces";

package/dist/lib/traces/insights.d.ts

@@ -59,7 +59,7 @@ export interface FailurePattern {
     /** Movement vs the same pattern id in the previous shard. */
     drift: 'up' | 'flat' | 'down';
 }
-export interface ComputedInsights {
+interface ComputedInsights {
     /** Top-K patterns ranked by wastedMs (impact) — a rare 1-occurrence/8h loop still surfaces. */
     failurePatterns: FailurePattern[];
     /** Sum of wastedMs across every cluster found this sync, not just the top-K rows above. */
@@ -110,3 +110,4 @@ export declare function computeInsights(rows: readonly SyncRow[], calls: readonl
  * `tool` is the synthetic `silent-stall` and `key` is the duration bucket.
  */
 export declare function computeBehavioralPatterns(facetsBySession: ReadonlyMap<string, Pick<InsightFacets, 'frictionSignals'>>, prevShard?: TracesIndexShard | null): FailurePattern[];
+export {};

package/dist/lib/traces/phenotype.d.ts

@@ -25,12 +25,12 @@ export type FailurePhenotype = 'false-termination' | 'premature-completion' | 'o
  * - `human-takeover`: the final substantive action was a human-facing ask/wait.
  * - `invalid-env`  : environment/setup failures dominated the session.
  */
-export type TraceOutcome = 'merged' | 'tests-green' | 'partial' | 'abandoned' | 'human-takeover' | 'invalid-env';
-export interface PhenotypeResult {
+type TraceOutcome = 'merged' | 'tests-green' | 'partial' | 'abandoned' | 'human-takeover' | 'invalid-env';
+interface PhenotypeResult {
     phenotype: FailurePhenotype | null;
     reason: string;
 }
-export interface OutcomeResult {
+interface OutcomeResult {
     outcome: TraceOutcome;
     confidence: 'high' | 'medium' | 'low';
     reason: string;

package/dist/lib/traces/provision.d.ts

@@ -2,9 +2,7 @@ import { type CloudflareRequester } from '../share/provision.js';
 interface ProvisionOptions {
     request?: CloudflareRequester;
 }
-/** Bind the Phoenix identity base URL used to verify every trace read and write. */
-export declare function setPhoenixIdBaseSecret(apiToken: string, accountId: string, workerName: string, phoenixIdBase: string, opts?: ProvisionOptions): Promise<void>;
-export interface ProvisionTracesOptions extends ProvisionOptions {
+interface ProvisionTracesOptions extends ProvisionOptions {
     apiToken: string;
     accountId: string;
     workerName: string;

package/dist/lib/traces/provision.js

@@ -6,7 +6,7 @@ import { addCustomDomain, createBucket, deployWorker, enableWorkersDev, findZone
 import { DEFAULT_TRACES_DOMAIN } from './backend.js';
 import { renderTracesWorkerScript } from './worker-template.js';
 /** Bind the Phoenix identity base URL used to verify every trace read and write. */
-export async function setPhoenixIdBaseSecret(apiToken, accountId, workerName, phoenixIdBase, opts = {}) {
+async function setPhoenixIdBaseSecret(apiToken, accountId, workerName, phoenixIdBase, opts = {}) {
     const normalized = phoenixIdBase.replace(/\/+$/, '').trim();
     if (!normalized)
         throw new Error('PHOENIX_ID_BASE is required to verify trace requests.');

package/dist/lib/traces/schema2-build.d.ts

@@ -68,7 +68,7 @@ export declare function unwrapShellExec(command: string): string;
 export declare function mapBashCategory(cat: ClassifierCategory, argv: string[]): BashCategory;
 /** Build the per-segment BashAction list for a bash command. */
 export declare function buildBashActions(unwrapped: string): BashAction[];
-export interface BuildDetailV2Options {
+interface BuildDetailV2Options {
     redact?: boolean;
     knownSecrets?: readonly string[];
 }

package/dist/lib/traces/schema2-danger.d.ts

@@ -21,7 +21,7 @@
  * action was flagged, so the console can group by operation without re-parsing.
  */
 import type { BashDanger } from './schema2.js';
-export interface DangerVerdict {
+interface DangerVerdict {
     danger: BashDanger;
     /** Short stable label naming the operation, e.g. `recursive-delete`. Omitted for `normal`. */
     destructiveOperation?: string;
@@ -34,3 +34,4 @@ export interface DangerVerdict {
  * expands to), because the operation itself is the danger, not its target.
  */
 export declare function classifyActionDanger(argv: string[], _argvComplete?: boolean): DangerVerdict;
+export {};

package/dist/lib/traces/schema2.d.ts

@@ -1,5 +1,5 @@
 export type StepOutcome = 'ok' | 'error' | 'running' | 'unknown';
-export interface SessionStepBase {
+interface SessionStepBase {
     ordinal: number;
     startMs: number;
     durationMs: number;
@@ -17,15 +17,15 @@ export interface ThinkingStep extends SessionStepBase {
     lane: 'think';
     outcome: 'ok' | 'running' | 'unknown';
 }
-export interface ExecutionBase extends SessionStepBase {
+interface ExecutionBase extends SessionStepBase {
     kind: 'execution';
     lane: string;
     callId?: string;
     /** The tool call this execution targets (hook/permission → the guarded call). */
     targetCallId?: string;
 }
-export type ToolExecutionType = 'bash' | 'edit' | 'write' | 'read' | 'grep' | 'generic';
-export interface ToolExecutionBase extends ExecutionBase {
+type ToolExecutionType = 'bash' | 'edit' | 'write' | 'read' | 'grep' | 'generic';
+interface ToolExecutionBase extends ExecutionBase {
     executionType: ToolExecutionType;
     tool: string;
     result: ExecutionResult;
@@ -147,3 +147,4 @@ export interface HookExecution extends ExecutionBase {
     result: ExecutionResult;
 }
 export type SessionStepV2 = ThinkingStep | BashExecution | EditExecution | WriteExecution | ReadExecution | GrepExecution | GenericToolExecution | PermissionExecution | HookExecution;
+export {};

package/dist/lib/traces/segments.d.ts

@@ -13,10 +13,10 @@
  */
 export declare const TASK_TYPES: readonly ["bugfix", "feature", "refactor", "test", "chore", "other"];
 export type TaskType = (typeof TASK_TYPES)[number];
-export declare const FAILURE_TIMINGS: readonly ["early", "mid", "late"];
-export type FailureTiming = (typeof FAILURE_TIMINGS)[number];
+declare const FAILURE_TIMINGS: readonly ["early", "mid", "late"];
+type FailureTiming = (typeof FAILURE_TIMINGS)[number];
 /** The #1 group-by axis: compare the pair, never the model alone. */
-export interface SegmentAgent {
+interface SegmentAgent {
     model: string;
     harness: string;
 }
@@ -70,19 +70,11 @@ export interface Percentiles {
 export interface LatencyInsight {
     firstToolMs: Percentiles;
 }
-export interface SegmentDimensions {
+interface SegmentDimensions {
     agent: SegmentAgent;
     taskType: TaskType;
     failureTiming: FailureTiming | null;
 }
-/**
- * Tool name → file action. Lowercased. Write-family is a new file; Edit-family
- * is a patch. Anything else is ignored for diff-shape.
- */
-export declare const FILE_ACTION_TOOLS: ReadonlyArray<{
-    action: SegmentFile['action'];
-    tools: readonly string[];
-}>;
 type DiffShape = {
     files: readonly SegmentFile[];
     testOnly: boolean;
@@ -101,14 +93,6 @@ export declare const TASK_TYPE_RULES: ReadonlyArray<{
     patterns: readonly RegExp[];
     shape?: keyof Pick<DiffShape, 'testOnly' | 'newOnly' | 'choreOnly'>;
 }>;
-/**
- * Normalized position of the first failing step inside the session span.
- * Early failures cascade — highest-signal bucket. Exclusive upper bound.
- */
-export declare const FAILURE_TIMING_BUCKETS: ReadonlyArray<{
-    timing: FailureTiming;
-    maxExclusive: number;
-}>;
 /** Model × harness unit — the #1 group-by axis. */
 export declare function deriveAgent(session: SegmentSession): SegmentAgent;
 /**

package/dist/lib/traces/segments.js

@@ -15,7 +15,7 @@
 // Public types
 // ---------------------------------------------------------------------------
 export const TASK_TYPES = ['bugfix', 'feature', 'refactor', 'test', 'chore', 'other'];
-export const FAILURE_TIMINGS = ['early', 'mid', 'late'];
+const FAILURE_TIMINGS = ['early', 'mid', 'late'];
 // ---------------------------------------------------------------------------
 // Tables — the classifiers. Add a row; do not add an if/else-by-name arm.
 // ---------------------------------------------------------------------------
@@ -23,7 +23,7 @@ export const FAILURE_TIMINGS = ['early', 'mid', 'late'];
  * Tool name → file action. Lowercased. Write-family is a new file; Edit-family
  * is a patch. Anything else is ignored for diff-shape.
  */
-export const FILE_ACTION_TOOLS = [
+const FILE_ACTION_TOOLS = [
     { action: 'new', tools: ['write', 'write_file', 'create_file', 'create'] },
     { action: 'edit', tools: ['edit', 'strreplace', 'apply_patch', 'applypatch', 'notebookedit'] },
 ];
@@ -122,7 +122,7 @@ export const TASK_TYPE_RULES = [
  * Normalized position of the first failing step inside the session span.
  * Early failures cascade — highest-signal bucket. Exclusive upper bound.
  */
-export const FAILURE_TIMING_BUCKETS = [
+const FAILURE_TIMING_BUCKETS = [
     { timing: 'early', maxExclusive: 1 / 3 },
     { timing: 'mid', maxExclusive: 2 / 3 },
     { timing: 'late', maxExclusive: Number.POSITIVE_INFINITY },

package/dist/lib/traces/sync.d.ts

@@ -208,7 +208,7 @@ export interface IndexedSession {
  * list by corpus class and by harness. Refs on a topic tile are always `'agent'`
  * (utility rows never reach a bucket), but the field is explicit for the consumer.
  */
-export interface TopicSessionRef {
+interface TopicSessionRef {
     id: string;
     title: string;
     kind: SessionKind;
@@ -222,7 +222,7 @@ export interface TopicSessionRef {
  * work the Evals console counts and scores. Utility rows are tagged, never deleted,
  * and excluded from every index statistic.
  */
-export type SessionKind = 'utility' | 'agent';
+type SessionKind = 'utility' | 'agent';
 /**
  * Classify a session as internal `utility` plumbing vs real `agent` work (PHNX-3474).
  * `toolCallCount` is the AUTHORITATIVE per-session tool-call count from the loaded
@@ -389,7 +389,6 @@ interface SyncLedger {
     failures?: SyncFailure[];
 }
 export declare function readSyncLedger(): SyncLedger;
-export declare function writeSyncLedger(ledger: SyncLedger): void;
 /**
  * True once the user has run `agents traces sync` at least once (the ledger
  * file exists). This is the opt-in signal the run-exit auto-sync gates on

package/dist/lib/traces/sync.js

@@ -817,7 +817,7 @@ export function readSyncLedger() {
         return {};
     }
 }
-export function writeSyncLedger(ledger) {
+function writeSyncLedger(ledger) {
     const p = ledgerPath();
     fs.mkdirSync(path.dirname(p), { recursive: true });
     fs.writeFileSync(p, JSON.stringify(ledger, null, 2) + '\n', 'utf8');

package/dist/lib/triggers/handlers.d.ts

@@ -7,7 +7,7 @@
  */
 import type { JobConfig, RunMeta, WebhookContext } from '../scheduling/routines.js';
 import type { AgentId } from '../types.js';
-import type { IncomingWebhook, SlackPayload, WebhookSource } from './webhook.js';
+import type { IncomingWebhook, WebhookSource } from './webhook.js';
 export interface WebhookHandler {
     name: string;
     enabled?: boolean;
@@ -69,7 +69,7 @@ export interface FiredHandler {
     exitCode?: number;
     output?: string;
 }
-export interface HandlerHostResolution {
+interface HandlerHostResolution {
     /** Resolved execution host, or undefined to run locally. */
     host?: string;
     /** Strategy that should be set on the JobConfig. */
@@ -124,23 +124,13 @@ export interface SlackMessageContext {
      */
     response_url: string;
 }
-/**
- * Split a Slack message into a `{{slack.*}}` context. Strips a leading bot
- * mention (`<@U0BOT> …`), then reads an optional `PROJECT:` prefix — a single
- * bare token followed by a colon and a space — as the project, with the
- * remainder the prompt. `AGI: rebase my PR` → project `AGI`, prompt
- * `rebase my PR`; a message with no such prefix leaves `project` empty and the
- * whole text as the prompt. The token pattern forbids slashes, so a project
- * value can never carry a path into a `cwd`/`project` substitution.
- */
-export declare function parseSlackMessage(payload: SlackPayload): SlackMessageContext;
 /**
  * Build the variable-substitution context for a webhook. Linear events expose
  * `issue` and `updatedFrom`; GitHub events expose `repository`, `pull_request`,
  * and `issue`; Slack events expose the `{{slack.*}}` namespace above.
  */
 export declare function buildWebhookContext(webhook: IncomingWebhook): WebhookContext;
-export interface ExecuteHandlerOptions {
+interface ExecuteHandlerOptions {
     dispatchAgent?: (config: JobConfig) => Promise<RunMeta>;
     dispatchWorkflow?: (config: JobConfig) => Promise<RunMeta>;
     execCommand?: (command: string) => Promise<{
@@ -155,3 +145,4 @@ export interface ExecuteHandlerOptions {
  * context.
  */
 export declare function executeHandler(handler: WebhookHandler, webhook: IncomingWebhook, opts?: ExecuteHandlerOptions): Promise<FiredHandler>;
+export {};

package/dist/lib/triggers/handlers.js

@@ -283,7 +283,7 @@ const asString = (v) => (typeof v === 'string' ? v : '');
  * whole text as the prompt. The token pattern forbids slashes, so a project
  * value can never carry a path into a `cwd`/`project` substitution.
  */
-export function parseSlackMessage(payload) {
+function parseSlackMessage(payload) {
     const cleaned = asString(payload.text).replace(/^\s*<@[^>]+>\s*/, '').trim();
     const m = /^([A-Za-z0-9][\w.-]*)\s*:\s+([\s\S]+)$/.exec(cleaned);
     return {

package/dist/lib/triggers/webhook.d.ts

@@ -26,15 +26,6 @@ export interface IncomingWebhook {
      *  {@link SlackPayload} for a Slack slash command's form body). */
     payload: Record<string, unknown>;
 }
-export type GithubWebhook = IncomingWebhook & {
-    source: 'github';
-};
-export type LinearWebhook = IncomingWebhook & {
-    source: 'linear';
-};
-export type SlackWebhook = IncomingWebhook & {
-    source: 'slack';
-};
 /** Read `repository.full_name` (`owner/name`) from a webhook payload, if present. */
 export declare function webhookRepo(payload: Record<string, unknown>): string | null;
 /**
@@ -78,21 +69,10 @@ export interface FireWebhookOptions {
     context?: WebhookContext;
 }
 /** Result of firing one matched job. */
-export interface FiredJob {
+interface FiredJob {
     jobName: string;
     runId: string;
 }
-export declare class WebhookDispatchError extends Error {
-    readonly fired: FiredJob[];
-    readonly failures: {
-        jobName: string;
-        error: Error;
-    }[];
-    constructor(message: string, fired: FiredJob[], failures: {
-        jobName: string;
-        error: Error;
-    }[]);
-}
 /**
  * Match an incoming webhook against the persisted routines and fire each match
  * through the cron dispatch path. Returns one entry per fired job.
@@ -100,7 +80,6 @@ export declare class WebhookDispatchError extends Error {
 export declare function fireWebhookJobs(webhook: IncomingWebhook, options?: FireWebhookOptions): Promise<FiredJob[]>;
 export declare function verifyGithubSignature(headers: IncomingHttpHeaders, rawBody: Buffer, secret: string): boolean;
 export declare function verifyLinearSignature(headers: IncomingHttpHeaders, rawBody: Buffer, secret: string): boolean;
-export declare function verifyLinearTimestamp(payload: Record<string, unknown>, now?: number, toleranceMs?: number): boolean;
 /**
  * Verify a Slack request signature (the `v0` scheme). Slack signs the base
  * string `v0:${timestamp}:${rawBody}` with the app's signing secret and sends
@@ -155,13 +134,12 @@ export interface WebhookSecrets {
     linear?: string;
     slack?: string;
 }
-export interface DeliveryStore {
+interface DeliveryStore {
     seen(id: string): boolean;
     mark(id: string): void;
     completedJobs(id: string): ReadonlySet<string>;
     markJob(id: string, jobName: string): void;
 }
-export declare function createMemoryDeliveryStore(maxEntries?: number): DeliveryStore;
 /**
  * A durable, disk-backed delivery store. Unlike `createMemoryDeliveryStore`,
  * seen delivery ids survive a process restart and are bounded by AGE, not by a
@@ -174,10 +152,9 @@ export declare function createMemoryDeliveryStore(maxEntries?: number): Delivery
  * source will not legitimately retry a delivery that old.
  */
 export declare function createFileDeliveryStore(filePath: string, retentionMs?: number): DeliveryStore;
-export interface RateLimiter {
+interface RateLimiter {
     take(key: string): boolean;
 }
-export declare function createMemoryRateLimiter(limit: number, windowMs: number): RateLimiter;
 /**
  * Resolve once a receiver is actually accepting connections, REJECT if the bind
  * failed. `server.listen()` reports a bind failure (EADDRINUSE, EACCES) as an
@@ -188,7 +165,7 @@ export declare function createMemoryRateLimiter(limit: number, windowMs: number)
  */
 export declare function waitForListening(server: http.Server): Promise<void>;
 /** Options for the local webhook http listener. */
-export interface WebhookServerOptions {
+interface WebhookServerOptions {
     port?: number;
     host?: string;
     /** HMAC signing secrets keyed by source. */
@@ -261,3 +238,4 @@ export interface WebhookServerOptions {
  * Returns the underlying server so callers can `close()` it.
  */
 export declare function startWebhookServer(options: WebhookServerOptions): http.Server;
+export {};

package/dist/lib/triggers/webhook.js

@@ -193,7 +193,7 @@ export function jobMatchesWebhook(job, webhook) {
 export function matchJobsToWebhook(jobs, webhook) {
     return jobs.filter((job) => job.enabled !== false && jobRunsOnThisDevice(job) && jobMatchesWebhook(job, webhook));
 }
-export class WebhookDispatchError extends Error {
+class WebhookDispatchError extends Error {
     fired;
     failures;
     constructor(message, fired, failures) {
@@ -260,7 +260,7 @@ export function verifyGithubSignature(headers, rawBody, secret) {
 export function verifyLinearSignature(headers, rawBody, secret) {
     return timingSafeHexEqual(header(headers, 'linear-signature'), hmacHex(secret, rawBody));
 }
-export function verifyLinearTimestamp(payload, now = Date.now(), toleranceMs = 60_000) {
+function verifyLinearTimestamp(payload, now = Date.now(), toleranceMs = 60_000) {
     const ts = payload.webhookTimestamp;
     return typeof ts === 'number' && Math.abs(now - ts) <= toleranceMs;
 }
@@ -334,7 +334,7 @@ export function slackEventName(payload) {
         return payload.command ?? 'slash_command';
     return payload.event_type ?? payload.type;
 }
-export function createMemoryDeliveryStore(maxEntries = 1000) {
+function createMemoryDeliveryStore(maxEntries = 1000) {
     const seen = new Map();
     const touch = (id) => {
         let current = seen.get(id);
@@ -451,7 +451,7 @@ export function createFileDeliveryStore(filePath, retentionMs = 14 * 24 * 60 * 6
         },
     };
 }
-export function createMemoryRateLimiter(limit, windowMs) {
+function createMemoryRateLimiter(limit, windowMs) {
     const buckets = new Map();
     return {
         take: (key) => {

package/dist/lib/types.d.ts

@@ -1001,7 +1001,7 @@ export interface Meta {
     /**
      * `agents feed post` fan-out. `broadcast` maps a sink name to either an argv
      * template (`command:`, run for each post) or an in-process channel delivery
-     * (`channel:`, the same registry `agents send`/`agents notify` use). Channel
+     * (`channel:`, the same registry `agents send` use). Channel
      * sinks may set `message:` with feed placeholders; a missing placeholder
      * skips that sink, so `{ticket}` cleanly gates a tracker-specific channel. Thus
      * mirroring to a tracker, a messaging CLI, or a channel provider is the
@@ -1159,8 +1159,8 @@ export interface Meta {
         templateHash?: string;
     };
     /**
-     * Owner/channel notification config for `agents send` / `agents notify`.
-     * `owner` is the address expanded by `--to owner` and by `agents notify`
+     * Owner/channel notification config for `agents send`.
+     * `owner` is the address expanded by `--to owner` and by `agents send --to owner`
      * (channel + target). `transports` maps a user-facing channel name to the
      * provider that actually delivers it — explicit, one provider per channel,
      * no fallback. Omitted keys default to name-identity (channel `slack` ->

package/dist/lib/usage-refresh.d.ts

@@ -8,10 +8,6 @@ import { type ConfiguredDeviceRole } from './device-config.js';
  * let an idle account rot longer than 5 minutes between attempts.
  */
 export declare const REFRESH_INTERVAL_MS: number;
-/** @deprecated alias — use {@link REFRESH_INTERVAL_MS}. Kept for test imports. */
-export declare const REFRESH_MIN_MS: number;
-/** @deprecated alias — use {@link REFRESH_INTERVAL_MS}. Kept for test imports. */
-export declare const REFRESH_MAX_MS: number;
 /** Burn-rate divisor retained for the pure delay helper / tests; with min=max
  * the divisor does not change the scheduled interval. */
 export declare const REFRESH_BURN_DIVISOR = 4;
@@ -68,7 +64,6 @@ export declare const PROVIDER_CATCHUP_MAX = 2;
  * re-refresh it. Actively-used accounts stay current at zero endpoint cost, so
  * the proactive budget is reserved for genuinely idle accounts.
  */
-export declare const STATUSLINE_FRESH_MS: number;
 /** Consecutive failed live reads before one broken account is quarantined. */
 export declare const FAILURE_QUARANTINE_THRESHOLD = 3;
 /** A chronic offender waits this long while healthy siblings keep their cadence. */
@@ -95,8 +90,6 @@ export interface HeadroomEntry {
     consecutiveFailures?: number;
 }
 export declare function setHeadroomCachePathForTest(cachePath: string | null): string | null;
-/** Read the whole headroom cache (best-effort; missing/corrupt → empty map). */
-export declare function readHeadroomCache(): Record<string, HeadroomEntry>;
 /** Read one account's headroom entry, or null. */
 export declare function readHeadroomEntry(usageKey: string): HeadroomEntry | null;
 /** Merge entries into the cache (best-effort; preserves other accounts' rows). */
@@ -190,7 +183,7 @@ export declare function pollerClaimsFromSharedStore(selfDevice: string, userAgen
  */
 export declare function trySpendUsageApiCall(usageKey: string, agentId: AgentId, now: number): boolean;
 /** An account whose credentials live on the publisher host. */
-export interface LocalUsageAccount {
+interface LocalUsageAccount {
     usageKey: string;
     agentId: AgentId;
     /**
@@ -235,7 +228,7 @@ export interface BuildLocalUsageAccountsOpts {
  */
 export declare function buildLocalUsageAccounts(opts?: BuildLocalUsageAccountsOpts): Promise<LocalUsageAccount[]>;
 /** Injectable side effects, so `runUsageRefresh` is drivable without the daemon. */
-export interface UsageRefreshDeps {
+interface UsageRefreshDeps {
     now?: number;
     /** Local-credential accounts to consider (one per unique usage key). */
     listAccounts: () => Promise<LocalUsageAccount[]>;
@@ -264,7 +257,7 @@ export interface UsageRefreshDeps {
     /** Fire after at least one snapshot was written (push-on-change). */
     onSnapshotsChanged?: (usageKeys: string[]) => Promise<void> | void;
 }
-export interface UsageRefreshResult {
+interface UsageRefreshResult {
     refreshed: number;
     skippedNotDue: number;
     skippedBackoff: number;
@@ -282,3 +275,4 @@ export interface UsageRefreshResult {
  * failed fetch leaves its cache untouched and counts as `failed`.
  */
 export declare function runUsageRefresh(deps: UsageRefreshDeps): Promise<UsageRefreshResult>;
+export {};