@phnx-labs/agents-cli 1.22.112 → 1.22.114

package/dist/lib/address.d.ts

@@ -0,0 +1,56 @@
+/**
+ * One address grammar for every `--host` an extracted CLI accepts (PHNX-4090).
+ *
+ * This file is copied verbatim into agents-cli, computer-cli, browser-cli and
+ * secrets-cli, each with the same test vectors — deliberately not a published
+ * package, so no engine grows a runtime dependency on another. Keep the four
+ * copies identical; a change lands in all of them in the same delivery.
+ *
+ *   ssh://[user@]host[:ssh-port]   the authority port is the SSH port, never 9222
+ *   cdp://host[:port]              default 9222
+ *   vnc://host[:port]              default 5901
+ *   tcp://host:port                no default — a helper RPC endpoint needs one
+ *   wss://host/path, ws://…        a remote DevTools socket
+ *   firefox-bidi://host[:port]     the browser's BiDi endpoint
+ *   [user@]host                    implicit ssh://
+ *
+ * A query (`?port=9222&os=windows`) is preserved for the consumer that knows
+ * what it means. Passwords never travel in an address: `user:secret@host` fails
+ * loud, and so does any scheme not listed above.
+ */
+export declare const ADDRESS_SCHEMES: readonly ["ssh", "cdp", "vnc", "tcp", "wss", "ws", "firefox-bidi"];
+export type AddressScheme = (typeof ADDRESS_SCHEMES)[number];
+/** Ports a scheme implies when the address carries none. `tcp` has no default. */
+export declare const DEFAULT_PORTS: Readonly<Partial<Record<AddressScheme, number>>>;
+export interface Address {
+    scheme: AddressScheme;
+    user?: string;
+    host: string;
+    /** The port written in the authority, if any. See {@link addressPort} for the default. */
+    port?: number;
+    /** A non-root path (`wss://hub/devtools` → `/devtools`). */
+    path?: string;
+    query: Record<string, string>;
+    /** The trimmed input, for messages. */
+    raw: string;
+}
+export declare function parseAddress(input: string): Address;
+/** The effective port: written, else the scheme's default, else undefined. */
+export declare function addressPort(addr: Address): number | undefined;
+/** `user@host` (or bare `host`) for an `ssh` address — what OpenSSH is given. */
+export declare function sshTarget(addr: Address): string;
+/**
+ * OpenSSH options carrying a non-default SSH port. `-o Port=N` rather than
+ * `-p`/`-P` so the same argv serves both `ssh` and `scp`.
+ */
+export declare function sshPortArgs(addr: Address): string[];
+/** `host:port` for a `vnc` address, defaulting the RFB display port. */
+export declare function vncEndpoint(addr: Address): string;
+/** `host:port` for a `tcp` address. A helper RPC endpoint has no default port. */
+export declare function tcpEndpoint(addr: Address): string;
+/**
+ * The DevTools port a browser endpoint means. On `ssh://` the authority port is
+ * the SSH port, so the DevTools port comes only from `?port=`; `cdp://` and
+ * `ssh://` default to 9222, path-addressed sockets (`wss://`) have none.
+ */
+export declare function browserEndpointPort(addr: Address): number | undefined;

package/dist/lib/address.js

@@ -0,0 +1,143 @@
+/**
+ * One address grammar for every `--host` an extracted CLI accepts (PHNX-4090).
+ *
+ * This file is copied verbatim into agents-cli, computer-cli, browser-cli and
+ * secrets-cli, each with the same test vectors — deliberately not a published
+ * package, so no engine grows a runtime dependency on another. Keep the four
+ * copies identical; a change lands in all of them in the same delivery.
+ *
+ *   ssh://[user@]host[:ssh-port]   the authority port is the SSH port, never 9222
+ *   cdp://host[:port]              default 9222
+ *   vnc://host[:port]              default 5901
+ *   tcp://host:port                no default — a helper RPC endpoint needs one
+ *   wss://host/path, ws://…        a remote DevTools socket
+ *   firefox-bidi://host[:port]     the browser's BiDi endpoint
+ *   [user@]host                    implicit ssh://
+ *
+ * A query (`?port=9222&os=windows`) is preserved for the consumer that knows
+ * what it means. Passwords never travel in an address: `user:secret@host` fails
+ * loud, and so does any scheme not listed above.
+ */
+export const ADDRESS_SCHEMES = ['ssh', 'cdp', 'vnc', 'tcp', 'wss', 'ws', 'firefox-bidi'];
+/** Ports a scheme implies when the address carries none. `tcp` has no default. */
+export const DEFAULT_PORTS = {
+    ssh: 22,
+    cdp: 9222,
+    vnc: 5901,
+};
+const SCHEME_SET = new Set(ADDRESS_SCHEMES);
+/** A bare OpenSSH target: `host` or `user@host`, letters, digits, `.`, `_`, `-`. */
+const IMPLICIT_SSH = /^[A-Za-z0-9._-]+(@[A-Za-z0-9._-]+)?$/;
+export function parseAddress(input) {
+    const raw = input.trim();
+    if (!raw)
+        throw new Error('empty address');
+    if (!raw.includes('://')) {
+        if (!IMPLICIT_SSH.test(raw) || raw.startsWith('-')) {
+            throw new Error(`Invalid address ${JSON.stringify(raw)}. Expected scheme://host or user@host.`);
+        }
+        const at = raw.indexOf('@');
+        return {
+            scheme: 'ssh',
+            user: at > 0 ? raw.slice(0, at) : undefined,
+            host: at > 0 ? raw.slice(at + 1) : raw,
+            query: {},
+            raw,
+        };
+    }
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new Error(`Invalid address ${JSON.stringify(raw)}.`);
+    }
+    const scheme = url.protocol.replace(/:$/, '');
+    if (!SCHEME_SET.has(scheme)) {
+        throw new Error(`unsupported address scheme ${JSON.stringify(scheme)} in ${JSON.stringify(raw)}; expected one of ${ADDRESS_SCHEMES.join(', ')}`);
+    }
+    if (url.password) {
+        throw new Error('passwords are not allowed in addresses');
+    }
+    const host = url.hostname;
+    if (!host)
+        throw new Error(`Invalid address ${JSON.stringify(raw)}: missing host`);
+    const user = url.username ? decodeURIComponent(url.username) : undefined;
+    if (user?.startsWith('-') || host.startsWith('-')) {
+        throw new Error(`Invalid address ${JSON.stringify(raw)}: host or user cannot start with -`);
+    }
+    const port = url.port ? Number.parseInt(url.port, 10) : undefined;
+    if (port !== undefined && (!Number.isInteger(port) || port <= 0 || port > 65535)) {
+        throw new Error(`Invalid address ${JSON.stringify(raw)}: bad port`);
+    }
+    const query = {};
+    url.searchParams.forEach((value, key) => {
+        query[key] = value;
+    });
+    return {
+        scheme: scheme,
+        user,
+        host,
+        port,
+        path: url.pathname && url.pathname !== '/' ? url.pathname : undefined,
+        query,
+        raw,
+    };
+}
+/** The effective port: written, else the scheme's default, else undefined. */
+export function addressPort(addr) {
+    return addr.port ?? DEFAULT_PORTS[addr.scheme];
+}
+/** `user@host` (or bare `host`) for an `ssh` address — what OpenSSH is given. */
+export function sshTarget(addr) {
+    if (addr.scheme !== 'ssh') {
+        throw new Error(`expected ssh:// or user@host, got ${addr.scheme}:// (${addr.raw})`);
+    }
+    return addr.user ? `${addr.user}@${addr.host}` : addr.host;
+}
+/**
+ * OpenSSH options carrying a non-default SSH port. `-o Port=N` rather than
+ * `-p`/`-P` so the same argv serves both `ssh` and `scp`.
+ */
+export function sshPortArgs(addr) {
+    if (addr.scheme !== 'ssh') {
+        throw new Error(`expected ssh:// or user@host, got ${addr.scheme}:// (${addr.raw})`);
+    }
+    return addr.port === undefined ? [] : ['-o', `Port=${addr.port}`];
+}
+/** `host:port` for a `vnc` address, defaulting the RFB display port. */
+export function vncEndpoint(addr) {
+    if (addr.scheme !== 'vnc') {
+        throw new Error(`expected vnc://, got ${addr.scheme}:// (${addr.raw})`);
+    }
+    return `${addr.host}:${addressPort(addr)}`;
+}
+/** `host:port` for a `tcp` address. A helper RPC endpoint has no default port. */
+export function tcpEndpoint(addr) {
+    if (addr.scheme !== 'tcp') {
+        throw new Error(`expected tcp://, got ${addr.scheme}:// (${addr.raw})`);
+    }
+    if (addr.port === undefined) {
+        throw new Error(`tcp:// requires a port (${addr.raw})`);
+    }
+    return `${addr.host}:${addr.port}`;
+}
+/**
+ * The DevTools port a browser endpoint means. On `ssh://` the authority port is
+ * the SSH port, so the DevTools port comes only from `?port=`; `cdp://` and
+ * `ssh://` default to 9222, path-addressed sockets (`wss://`) have none.
+ */
+export function browserEndpointPort(addr) {
+    const fromQuery = addr.query.port ? Number.parseInt(addr.query.port, 10) : undefined;
+    if (fromQuery !== undefined) {
+        if (!Number.isInteger(fromQuery) || fromQuery <= 0 || fromQuery > 65535) {
+            throw new Error(`Invalid address ${JSON.stringify(addr.raw)}: bad ?port`);
+        }
+        return fromQuery;
+    }
+    if (addr.scheme === 'ssh')
+        return 9222;
+    if (addr.port !== undefined)
+        return addr.port;
+    return addr.scheme === 'cdp' ? 9222 : undefined;
+}

package/dist/lib/agent-spec/agents.d.ts

@@ -11,8 +11,6 @@ export interface CliState {
  * legacy import sites that haven't migrated to `supports()` yet.
  */
 export declare const CODEX_HOOKS_MIN_VERSION = "0.116.0";
-/** Minimum Gemini CLI version that supports the hooks system (v0.26.0, Jan 2026). */
-export declare const GEMINI_HOOKS_MIN_VERSION = "0.26.0";
 /**
  * Synchronous PATH search -- no subprocess. Returns first matching binary path.
  *
@@ -45,13 +43,13 @@ export declare function findInPath(command: string, options?: NativeBinaryResolu
  * Left as call-site specials (not registry data): `getAccountInfo` and
  * `readAuthAccountIdentity` — those are parsers, not flags.
  */
-export type VersionStdoutMatch = 'semver' | 'openclaw';
-export type UnmanagedBinaryResolver = 'path' | 'grok-downloads';
-export type McpRegisterPath = 'cli' | 'config';
-export type McpAddHttpStyle = 'transport' | 'url';
-export type McpAddStdioStyle = 'scope' | 'simple';
-export type McpConfigWriteStyle = 'json-mcpServers' | 'yaml-mcp_servers';
-export interface AgentRegistryConfig extends AgentConfig {
+type VersionStdoutMatch = 'semver' | 'openclaw';
+type UnmanagedBinaryResolver = 'path' | 'grok-downloads';
+type McpRegisterPath = 'cli' | 'config';
+type McpAddHttpStyle = 'transport' | 'url';
+type McpAddStdioStyle = 'scope' | 'simple';
+type McpConfigWriteStyle = 'json-mcpServers' | 'yaml-mcp_servers';
+interface AgentRegistryConfig extends AgentConfig {
     /**
      * Session-transcript directory as path segments under a HOME root, or null
      * when this harness has no local session tree `agents` can walk.
@@ -96,8 +94,6 @@ export declare const ALL_AGENT_IDS: AgentId[];
  * daemon/runner.ts bakeRoutineArgv — do not reintroduce a second token table.
  */
 export declare const ROUTINE_AGENT_IDS: readonly string[];
-/** Agents retained only for legacy reads, not install/import/sync targets. */
-export declare const HARD_DEPRECATED_AGENT_IDS: AgentId[];
 /** Agents that can receive managed installs, imports, and resource sync writes. */
 export declare const MANAGED_AGENT_IDS: AgentId[];
 /**
@@ -152,7 +148,7 @@ export declare function getUnmanagedCliState(agentId: AgentId): Promise<CliState
 /** Resolve CLI state for all registered agents in parallel. */
 export declare function getAllCliStates(): Promise<Partial<Record<AgentId, CliState>>>;
 /** Info about an existing unmanaged agent installation. */
-export interface UnmanagedInstall {
+interface UnmanagedInstall {
     agentId: AgentId;
     configDir: string;
     version: string | null;
@@ -284,7 +280,7 @@ export interface CredentialPresence {
  */
 export declare function credentialPresence(agentId: AgentId, versionHome: string): CredentialPresence;
 /** Decrypted contents of Droid's auth.v2.file (subset we consume). */
-export interface DroidAuthPayload {
+interface DroidAuthPayload {
     access_token?: string;
     active_organization_id?: string | null;
 }
@@ -299,16 +295,6 @@ export interface DroidAuthPayload {
  * in usage.ts.
  */
 export declare function decryptDroidAuthPayload(base: string): DroidAuthPayload | null;
-/**
- * Decrypt a Droid `auth.v2.file` (AES-256-GCM `ivB64:tagB64:ctB64`) using the
- * raw 32-byte key stored base64 in `auth.v2.key`, given the EXACT paths to both.
- * Same crypto as decryptDroidAuthPayload but without the account-global HOME
- * fallback, so the identity of a SPECIFIC version home resolves against only
- * that home's files (carryForwardAuthFiles needs per-dir identity). Returns null
- * on any failure (missing file/key, wrong key length, bad GCM tag, malformed
- * JSON). Never throws.
- */
-export declare function decryptDroidAuthFile(filePath: string, keyPath: string): DroidAuthPayload | null;
 /**
  * Stable account identity for a *file-auth* agent's credential directory
  * (droid / kimi / antigravity), or null when the directory holds no decodable
@@ -481,7 +467,7 @@ export interface ClaudeHomeIdentity {
     accountKey: string | null;
 }
 /** A version home's `.claude.json` plus the identity derived from it. */
-export interface ClaudeHomeConfig {
+interface ClaudeHomeConfig {
     /** The config file actually read. */
     path: string;
     config: Record<string, any>;
@@ -557,9 +543,9 @@ export declare function unregisterMcpFromTargets(targets: {
     versionSelections: Map<AgentId, string[]>;
 }, name: string): Promise<McpTargetOperationResult[]>;
 /** Scope at which an MCP server is registered: user-global or per-project. */
-export type McpScope = 'user' | 'project';
+type McpScope = 'user' | 'project';
 /** Describes an MCP server discovered in an agent's config, with its scope and command. */
-export interface InstalledMcp {
+interface InstalledMcp {
     name: string;
     scope: McpScope;
     command?: string;
@@ -611,8 +597,6 @@ export declare function parseMcpConfig(agentId: AgentId, configPath: string): Re
 export declare function listInstalledMcpsWithScope(agentId: AgentId, cwd?: string, options?: {
     home?: string;
 }): InstalledMcp[];
-/** Map of agent name aliases and shorthand identifiers to canonical AgentId values. */
-export declare const AGENT_NAME_ALIASES: Record<string, AgentId>;
 /**
  * Resolve a user-provided agent name (alias, shorthand, or canonical) to its AgentId.
  * Tolerates a single typo (insertion/deletion/substitution/transposition) against

package/dist/lib/agent-spec/agents.js

@@ -36,8 +36,6 @@ const HOME = os.homedir();
  * legacy import sites that haven't migrated to `supports()` yet.
  */
 export const CODEX_HOOKS_MIN_VERSION = '0.116.0';
-/** Minimum Gemini CLI version that supports the hooks system (v0.26.0, Jan 2026). */
-export const GEMINI_HOOKS_MIN_VERSION = '0.26.0';
 const CLI_VERSION_CACHE_PATH = getCliVersionCachePath();
 let cliVersionCache = null;
 function loadCliVersionCache() {
@@ -1036,8 +1034,6 @@ export const ROUTINE_AGENT_IDS = Object.freeze([
     'droid',
     'muse',
 ]);
-/** Agents retained only for legacy reads, not install/import/sync targets. */
-export const HARD_DEPRECATED_AGENT_IDS = ALL_AGENT_IDS.filter((id) => AGENTS[id].deprecated?.hard);
 /** Agents that can receive managed installs, imports, and resource sync writes. */
 export const MANAGED_AGENT_IDS = ALL_AGENT_IDS.filter((id) => !AGENTS[id].deprecated?.hard);
 /**
@@ -1519,7 +1515,7 @@ export function decryptDroidAuthPayload(base) {
  * on any failure (missing file/key, wrong key length, bad GCM tag, malformed
  * JSON). Never throws.
  */
-export function decryptDroidAuthFile(filePath, keyPath) {
+function decryptDroidAuthFile(filePath, keyPath) {
     try {
         const blob = fs.readFileSync(filePath, 'utf-8').trim();
         const key = Buffer.from(fs.readFileSync(keyPath, 'utf-8').trim(), 'base64');
@@ -3033,7 +3029,7 @@ export function listInstalledMcpsWithScope(agentId, cwd = process.cwd(), options
     return results;
 }
 /** Map of agent name aliases and shorthand identifiers to canonical AgentId values. */
-export const AGENT_NAME_ALIASES = {
+const AGENT_NAME_ALIASES = {
     claude: 'claude',
     'claude-code': 'claude',
     cc: 'claude',

package/dist/lib/agent-spec/primitives.d.ts

@@ -7,13 +7,6 @@
 export declare const VERSION_RE: RegExp;
 /** Canonical qualifier set, in help/display order. `pinned` ≡ `default`. */
 export declare const AGENT_QUALIFIERS: readonly ["latest", "oldest", "pinned", "default", "all"];
-export type AgentQualifier = (typeof AGENT_QUALIFIERS)[number];
-/**
- * Record-filter-only qualifiers. `any` means "no version constraint" for
- * historical-record queries (sessions/teams resume) — accepted by the filter
- * path but intentionally kept out of the display vocabulary.
- */
-export declare const RECORD_ONLY_QUALIFIERS: readonly ["any"];
 /**
  * Ordering for version strings (ascending).
  *   1. numeric segment comparison (semver-ish: `2.1.187` > `2.1.143`)

package/dist/lib/agent-spec/primitives.js

@@ -9,12 +9,6 @@
 export const VERSION_RE = /^(?:latest|(?!.*\.\.)[A-Za-z0-9._+-]{1,64})$/;
 /** Canonical qualifier set, in help/display order. `pinned` ≡ `default`. */
 export const AGENT_QUALIFIERS = ['latest', 'oldest', 'pinned', 'default', 'all'];
-/**
- * Record-filter-only qualifiers. `any` means "no version constraint" for
- * historical-record queries (sessions/teams resume) — accepted by the filter
- * path but intentionally kept out of the display vocabulary.
- */
-export const RECORD_ONLY_QUALIFIERS = ['any'];
 /** Split a version into numeric `.`-segments (non-numeric tail → 0), e.g. `2026.2.19-2` → [2026,2,19]. */
 function numericParts(v) {
     return v.split('.').map((n) => parseInt(n, 10) || 0);

package/dist/lib/agent-spec/types.d.ts

@@ -7,7 +7,7 @@ export interface AgentTarget {
     version: string | null;
     source: VersionSource;
 }
-export type AgentSpecErrorCode = 'empty' | 'unknown-agent' | 'missing-version' | 'invalid-version' | 'not-installed' | 'no-default' | 'none-installed' | 'multi-not-allowed';
+type AgentSpecErrorCode = 'empty' | 'unknown-agent' | 'missing-version' | 'invalid-version' | 'not-installed' | 'no-default' | 'none-installed' | 'multi-not-allowed';
 /**
  * Thrown on any bad spec — never `process.exit`, so the engine is safe on the
  * hot path and in library contexts. `code` + `installed` let callers render a
@@ -63,3 +63,4 @@ export interface VersionFilter {
     version: FilterVersion;
     source: VersionSource | 'all-versions' | 'default';
 }
+export {};

package/dist/lib/analytics/dashboard.d.ts

@@ -1,15 +1,11 @@
 import { RECIPE_IDS, runRecipe, analyticsWindow, type RecipeId, type RecipeSection, type AnalyticsWindow } from './recipes.js';
-export interface MixDashboard {
+interface MixDashboard {
     window: AnalyticsWindow;
     durationMs: number;
     sections: RecipeSection[];
 }
-/** @deprecated Use MixDashboard. */
-export type TrendsDashboard = MixDashboard;
 export declare function buildMixDashboard(opts?: {
     days?: number;
     ids?: RecipeId[];
 }): MixDashboard;
-/** @deprecated Use buildMixDashboard. */
-export declare const buildTrendsDashboard: typeof buildMixDashboard;
 export { analyticsWindow, analyticsWindow as trendsWindow, runRecipe, RECIPE_IDS, type RecipeId, type RecipeSection, type AnalyticsWindow, };

package/dist/lib/analytics/dashboard.js

@@ -28,6 +28,4 @@ export function buildMixDashboard(opts = {}) {
         sections,
     };
 }
-/** @deprecated Use buildMixDashboard. */
-export const buildTrendsDashboard = buildMixDashboard;
 export { analyticsWindow, analyticsWindow as trendsWindow, runRecipe, RECIPE_IDS, };

package/dist/lib/analytics/mix-commands.d.ts

@@ -13,13 +13,6 @@
  * lister, and the `trends` alias were removed — `mix` already did all three.
  */
 import type { Command } from 'commander';
-export declare function parseMixDays(raw: string | undefined): number;
-export declare function printMixSection(section: {
-    id: string;
-    title: string;
-    rows: Array<Record<string, string | number | null>>;
-}): void;
-export declare function renderMixDashboard(days: number, asJson: boolean, bannerLabel?: string): void;
 /**
  * Attach counter-mix subcommands to a parent (typically `insights`).
  *

package/dist/lib/analytics/mix-commands.js

@@ -17,7 +17,7 @@ import { setHelpSections } from '../help.js';
 import { buildMixDashboard, analyticsWindow, runRecipe, RECIPE_IDS, } from './dashboard.js';
 import { listRecipes } from './recipes.js';
 import { queryUsage, usageDbPath, USAGE_KINDS } from './usage-db.js';
-export function parseMixDays(raw) {
+function parseMixDays(raw) {
     const n = parseInt(raw ?? '7', 10);
     return Number.isFinite(n) && n > 0 ? n : 7;
 }
@@ -25,7 +25,7 @@ function parseLimit(raw, fallback) {
     const n = parseInt(raw ?? String(fallback), 10);
     return Number.isFinite(n) && n > 0 ? n : fallback;
 }
-export function printMixSection(section) {
+function printMixSection(section) {
     console.log(chalk.bold(section.title));
     if (section.rows.length === 0) {
         console.log(chalk.gray('  (no data)'));
@@ -41,7 +41,7 @@ export function printMixSection(section) {
     }
     console.log();
 }
-export function renderMixDashboard(days, asJson, bannerLabel = 'agents insights mix') {
+function renderMixDashboard(days, asJson, bannerLabel = 'agents insights mix') {
     const dash = buildMixDashboard({ days });
     if (asJson) {
         console.log(JSON.stringify(dash, null, 2));

package/dist/lib/analytics/recipes.d.ts

@@ -1,11 +1,8 @@
-import { type UsageKind } from './usage-db.js';
 /** Time window for mix recipes under `agents insights mix`. */
 export interface AnalyticsWindow {
     days: number;
     sinceIso: string;
 }
-/** @deprecated Use AnalyticsWindow — kept as a type alias for external callers. */
-export type TrendsWindow = AnalyticsWindow;
 export interface RecipeSection {
     id: string;
     title: string;
@@ -17,13 +14,7 @@ export declare function analyticsWindow(days: number): AnalyticsWindow;
 /** @deprecated Use analyticsWindow. */
 export declare const trendsWindow: typeof analyticsWindow;
 export declare function recipeHarnessMix(win: AnalyticsWindow): RecipeSection;
-export declare function recipeModelMix(win: AnalyticsWindow): RecipeSection;
 export declare function recipeToolsPerSession(win: AnalyticsWindow): RecipeSection;
-export declare function recipeTokenRatio(win: AnalyticsWindow): RecipeSection;
-export declare function recipeSessionVolume(win: AnalyticsWindow): RecipeSection;
-export declare function recipeSecretsHot(win: AnalyticsWindow): RecipeSection;
-export declare function recipeBrowserActivity(win: AnalyticsWindow): RecipeSection;
-export declare function recipeResourceMix(win: AnalyticsWindow): RecipeSection;
 export type RecipeId = 'harness-mix' | 'model-mix' | 'tools-per-session' | 'token-ratio' | 'session-volume' | 'secrets-hot' | 'browser-activity' | 'resource-mix';
 export declare const RECIPE_IDS: readonly RecipeId[];
 export declare function runRecipe(id: RecipeId, win: AnalyticsWindow): RecipeSection;
@@ -32,6 +23,3 @@ export declare function listRecipes(): Array<{
     title: string;
     store: 'sessions' | 'usage';
 }>;
-export declare function hasSessionsInWindow(win: AnalyticsWindow): boolean;
-export declare function usageKindsPresent(win: AnalyticsWindow): UsageKind[];
-export declare function usageEventCount(kind: UsageKind, win: AnalyticsWindow): number;

package/dist/lib/analytics/recipes.js

@@ -1,6 +1,6 @@
 import Database from '../sqlite.js';
 import { getSessionsDbPath } from '../state.js';
-import { topNamesByKind, kindMix, countUsage, listUsageKindsWithData, } from './usage-db.js';
+import { topNamesByKind, kindMix } from './usage-db.js';
 export function analyticsWindow(days) {
     const d = Number.isFinite(days) && days > 0 ? days : 7;
     const since = new Date(Date.now() - d * 24 * 60 * 60 * 1000);
@@ -59,7 +59,7 @@ export function recipeHarnessMix(win) {
         catch { /* ignore */ }
     }
 }
-export function recipeModelMix(win) {
+function recipeModelMix(win) {
     const db = openSessions();
     const id = 'model-mix';
     const title = 'Model mix';
@@ -144,7 +144,7 @@ export function recipeToolsPerSession(win) {
         catch { /* ignore */ }
     }
 }
-export function recipeTokenRatio(win) {
+function recipeTokenRatio(win) {
     const db = openSessions();
     const id = 'token-ratio';
     const title = 'Token read→write ratio';
@@ -198,7 +198,7 @@ export function recipeTokenRatio(win) {
         catch { /* ignore */ }
     }
 }
-export function recipeSessionVolume(win) {
+function recipeSessionVolume(win) {
     const db = openSessions();
     const id = 'session-volume';
     const title = 'Session volume';
@@ -232,7 +232,7 @@ export function recipeSessionVolume(win) {
         catch { /* ignore */ }
     }
 }
-export function recipeSecretsHot(win) {
+function recipeSecretsHot(win) {
     const id = 'secrets-hot';
     const title = 'Hottest secrets';
     const rows = topNamesByKind('secret', win.sinceIso, 15);
@@ -244,7 +244,7 @@ export function recipeSecretsHot(win) {
         empty: rows.length === 0,
     };
 }
-export function recipeBrowserActivity(win) {
+function recipeBrowserActivity(win) {
     const id = 'browser-activity';
     const title = 'Browser activity';
     const rows = topNamesByKind('browser', win.sinceIso, 15);
@@ -256,7 +256,7 @@ export function recipeBrowserActivity(win) {
         empty: rows.length === 0,
     };
 }
-export function recipeResourceMix(win) {
+function recipeResourceMix(win) {
     const id = 'resource-mix';
     const title = 'Resource usage mix';
     const rows = kindMix(win.sinceIso);
@@ -298,27 +298,3 @@ export function listRecipes() {
         return { id, title: s.title, store: s.store };
     });
 }
-export function hasSessionsInWindow(win) {
-    const db = openSessions();
-    if (!db)
-        return false;
-    try {
-        const row = db.prepare(`SELECT 1 AS ok FROM sessions WHERE timestamp >= ? LIMIT 1`).get(win.sinceIso);
-        return Boolean(row);
-    }
-    catch {
-        return false;
-    }
-    finally {
-        try {
-            db.close();
-        }
-        catch { /* ignore */ }
-    }
-}
-export function usageKindsPresent(win) {
-    return listUsageKindsWithData(win.sinceIso);
-}
-export function usageEventCount(kind, win) {
-    return countUsage({ kind, sinceIso: win.sinceIso });
-}

package/dist/lib/analytics/usage-db.d.ts

@@ -1,6 +1,6 @@
 export type UsageKind = 'secret' | 'agent' | 'skill' | 'plugin' | 'browser' | 'computer';
 export declare const USAGE_KINDS: readonly UsageKind[];
-export interface RecordUsageParams {
+interface RecordUsageParams {
     kind: UsageKind;
     name: string;
     event: string;
@@ -13,7 +13,7 @@ export interface RecordUsageParams {
     meta?: Record<string, unknown>;
     ts?: string;
 }
-export interface UsageEventRow {
+interface UsageEventRow {
     ts: string;
     kind: UsageKind;
     name: string;
@@ -28,7 +28,6 @@ export interface UsageEventRow {
 }
 export declare function recordUsage(p: RecordUsageParams): void;
 export declare function usageDbPath(): string;
-export declare function analyticsDir(): string;
 export declare function listUsageKindsWithData(sinceIso: string): UsageKind[];
 export declare function countUsage(opts: {
     kind?: UsageKind;
@@ -43,42 +42,16 @@ export declare function queryUsage(opts: {
     sinceIso: string;
     limit?: number;
 }): UsageEventRow[];
-export interface NameCountRow {
+interface NameCountRow {
     name: string;
     n: number;
     last: string | null;
 }
 export declare function topNamesByKind(kind: UsageKind, sinceIso: string, limit?: number): NameCountRow[];
-export interface KindCountRow {
+interface KindCountRow {
     kind: string;
     n: number;
 }
 export declare function kindMix(sinceIso: string): KindCountRow[];
-export declare function getSecretBundleRollup(bundle: string): Array<{
-    event: string;
-    n: number;
-    last: string | null;
-    first: string | null;
-}>;
-export declare function getSecretBundleAgents(bundle: string): Array<{
-    agent: string;
-    n: number;
-}>;
-export declare function getAllSecretBundleRollups(): Array<{
-    name: string;
-    event: string;
-    n: number;
-    last: string | null;
-    first: string | null;
-}>;
-export declare function getSecretHistory(bundle: string | undefined, limit?: number): Array<{
-    ts: string;
-    bundle: string;
-    event: string;
-    agent: string | null;
-    host: string | null;
-    source: string | null;
-    status: string | null;
-    keyCount: number | null;
-}>;
 export declare function closeUsageDb(): void;
+export {};