@phnx-labs/agents-cli 1.22.112 → 1.22.114

package/dist/lib/analytics/usage-db.js

@@ -1,7 +1,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import Database from '../sqlite.js';
-import { getUsageDbPath, getSecretsDbPath, getAnalyticsDir } from '../state.js';
+import { getUsageDbPath, getSecretsDbPath } from '../state.js';
 import { localMachineId } from '../session/origin-machine.js';
 export const USAGE_KINDS = [
     'secret',
@@ -129,9 +129,6 @@ export function recordUsage(p) {
 export function usageDbPath() {
     return getUsageDbPath();
 }
-export function analyticsDir() {
-    return getAnalyticsDir();
-}
 export function listUsageKindsWithData(sinceIso) {
     const db = open();
     if (!db)
@@ -224,72 +221,6 @@ export function kindMix(sinceIso) {
         return [];
     }
 }
-export function getSecretBundleRollup(bundle) {
-    const db = open();
-    if (!db)
-        return [];
-    try {
-        return db.prepare(`SELECT event, COUNT(*) AS n, MAX(ts) AS last, MIN(ts) AS first
-         FROM usage_events WHERE kind = 'secret' AND name = ? GROUP BY event`).all(bundle);
-    }
-    catch {
-        return [];
-    }
-}
-export function getSecretBundleAgents(bundle) {
-    const db = open();
-    if (!db)
-        return [];
-    try {
-        return db.prepare(`SELECT agent, COUNT(*) AS n FROM usage_events
-         WHERE kind = 'secret' AND name = ? AND agent IS NOT NULL
-         GROUP BY agent ORDER BY n DESC`).all(bundle);
-    }
-    catch {
-        return [];
-    }
-}
-export function getAllSecretBundleRollups() {
-    const db = open();
-    if (!db)
-        return [];
-    try {
-        return db.prepare(`SELECT name, event, COUNT(*) AS n, MAX(ts) AS last, MIN(ts) AS first
-         FROM usage_events WHERE kind = 'secret' GROUP BY name, event`).all();
-    }
-    catch {
-        return [];
-    }
-}
-export function getSecretHistory(bundle, limit = 20) {
-    const db = open();
-    if (!db)
-        return [];
-    try {
-        const sql = bundle
-            ? `SELECT ts, name AS bundle, event, agent, source, status, meta_json
-           FROM usage_events WHERE kind = 'secret' AND name = ? ORDER BY ts DESC, id DESC LIMIT ?`
-            : `SELECT ts, name AS bundle, event, agent, source, status, meta_json
-           FROM usage_events WHERE kind = 'secret' ORDER BY ts DESC, id DESC LIMIT ?`;
-        const rows = (bundle ? db.prepare(sql).all(bundle, limit) : db.prepare(sql).all(limit));
-        return rows.map((r) => {
-            let host = null;
-            let keyCount = null;
-            if (r.meta_json) {
-                try {
-                    const m = JSON.parse(r.meta_json);
-                    host = m.host ?? null;
-                    keyCount = typeof m.keyCount === 'number' ? m.keyCount : null;
-                }
-                catch { /* ignore */ }
-            }
-            return { ts: r.ts, bundle: r.bundle, event: r.event, agent: r.agent, host, source: r.source, status: r.status, keyCount };
-        });
-    }
-    catch {
-        return [];
-    }
-}
 export function closeUsageDb() {
     if (cached) {
         try {

package/dist/lib/answer-router.d.ts

@@ -8,12 +8,12 @@
  *   - headless run waiting on input (no next tool call; needs resume)
  *
  * This module picks the delivery mechanism from (open feed block × session
- * liveness × runtime rail). Pure — unit-testable without a live PTY.
+ * liveness × runtime rail). Pure — unit-testable without a live terminal.
  */
 import type { OpenBlock, BlockOption } from './feed/feed.js';
 import type { ActiveSession } from './session/active.js';
 import type { InjectTarget } from './terminal/index.js';
-export type AnswerRouteKind = 'mailbox' | 'pty' | 'tmux' | 'iterm' | 'resume' | 'refuse';
+export type AnswerRouteKind = 'mailbox' | 'tmux' | 'iterm' | 'resume' | 'refuse';
 export interface AnswerRoute {
     kind: AnswerRouteKind;
     /** Human reason shown in CLI output / refused errors. */
@@ -21,11 +21,11 @@ export interface AnswerRoute {
     /**
      * Keystrokes / payload for the chosen path.
      *  - mailbox: unused (text is enqueued as-is)
-     *  - pty/tmux/iterm: the digit or free-text to inject
+     *  - tmux/iterm: the digit or free-text to inject
      *  - resume: the free-text prompt to pass on re-entry
      */
     payload?: string;
-    /** Inject target when kind is pty/tmux/iterm. */
+    /** Inject target when kind is tmux/iterm. */
     inject?: InjectTarget;
     /** Session id + agent kind for resume. */
     resume?: {
@@ -40,7 +40,7 @@ export interface AnswerRoute {
      */
     enter?: boolean;
 }
-export interface AnswerRouterInput {
+interface AnswerRouterInput {
     /** Resolved mailbox / session id. */
     mailboxId: string;
     /** Answer text (option label or free text). */
@@ -73,7 +73,7 @@ export declare function isOpenQuestionBlock(block: OpenBlock | null | undefined)
  * Pick the delivery mechanism for one answer.
  *
  * Precedence:
- *   1. Parked on open question + injectable rail (tmux/iterm/pty) → keystroke
+ *   1. Parked on open question + injectable rail (tmux/iterm) → keystroke
  *   2. Parked on open question + headless (no rail) → resume with answer
  *   3. Parked on open question + no rail + interactive → refuse (don't mailbox-drop)
  *   4. Otherwise → mailbox (running agent between tool calls)
@@ -81,3 +81,4 @@ export declare function isOpenQuestionBlock(block: OpenBlock | null | undefined)
 export declare function resolveAnswerRoute(input: AnswerRouterInput): AnswerRoute;
 /** Build argv for a headless resume that continues with the answer text. */
 export declare function resumeArgv(route: AnswerRoute): string[];
+export {};

package/dist/lib/answer-router.js

@@ -1,6 +1,6 @@
 import { addressabilityRecoveryHint } from './terminal/resolve.js';
 import { injectTargetFromReplyRail } from './session/inject.js';
-/** The Escape keystroke as its raw control byte — what a PTY/tmux/iterm rail reads as a real Escape. */
+/** The Escape keystroke as its raw control byte — what a tmux/iterm rail reads as a real Escape. */
 const ESCAPE_KEY = '\u001b';
 /**
  * Match free-text answer against question options.
@@ -35,7 +35,7 @@ export function keystrokesForAnswer(answer, options) {
     }
     // A symbolic cancel token — the `esc` deliveryKey a deny / send-back choice
     // carries — is the Escape KEY, not the letters "esc". Send the ESC control
-    // byte (a real cancel on every raw pty/tmux/iterm rail) and suppress the
+    // byte (a real cancel on every raw tmux/iterm rail) and suppress the
     // trailing Enter, so the prompt is dismissed rather than confirmed by a stray
     // newline. Runs after the option match so an option literally labelled "esc"
     // still wins as a selection.
@@ -78,18 +78,13 @@ function injectTargetForSession(session) {
         if (fromRail)
             return fromRail;
     }
-    // Only the agents-pty sidecar is addressable by session id. Generic headless
-    // runs have no PTY server entry — those go through resume, not inject.
-    if (session.sessionId && session.host === 'pty') {
-        return { backend: 'pty', id: session.sessionId };
-    }
     return null;
 }
 /**
  * Pick the delivery mechanism for one answer.
  *
  * Precedence:
- *   1. Parked on open question + injectable rail (tmux/iterm/pty) → keystroke
+ *   1. Parked on open question + injectable rail (tmux/iterm) → keystroke
  *   2. Parked on open question + headless (no rail) → resume with answer
  *   3. Parked on open question + no rail + interactive → refuse (don't mailbox-drop)
  *   4. Otherwise → mailbox (running agent between tool calls)
@@ -107,8 +102,7 @@ export function resolveAnswerRoute(input) {
         if (inject) {
             const kind = inject.backend === 'tmux' ? 'tmux'
                 : inject.backend === 'iterm' ? 'iterm'
-                    : inject.backend === 'pty' ? 'pty'
-                        : 'pty';
+                    : 'tmux';
             return {
                 kind,
                 reason: `Parked on open question — drive ${inject.backend} selection (${matched}).`,
@@ -135,7 +129,7 @@ export function resolveAnswerRoute(input) {
         }
         return {
             kind: 'refuse',
-            reason: 'Agent is parked on a question but has no addressable terminal (no tmux/iterm/pty rail). ' +
+            reason: 'Agent is parked on a question but has no addressable terminal (no tmux/iterm rail). ' +
                 addressabilityRecoveryHint(session),
         };
     }

package/dist/lib/artifact-actions.d.ts

@@ -12,10 +12,6 @@ export interface ArtifactAction {
     matches?: string[];
     input?: Record<string, string>;
 }
-/** Agent-level configuration block containing artifact action definitions. */
-export interface AgentArtifactConfig {
-    artifact_actions?: ArtifactAction[];
-}
 /**
  * Validate artifact actions configuration.
  * @param actions - List of artifact actions to validate

package/dist/lib/ask-classifier.d.ts

@@ -25,8 +25,6 @@ export interface Classification {
     /** Auto-answer text when suppress is true. */
     autoAnswer?: string;
 }
-/** Scan text used for classification. */
-export declare function askScanText(block: Pick<OpenBlock, 'questions'>): string;
 /**
  * Classify one ask from free text (+ optional explicit blockClass from the agent).
  * Explicit blockClass from the agent is honored as a floor: 'decision' never becomes
@@ -38,7 +36,7 @@ export declare function classifyAsk(text: string, opts?: {
 }): Classification;
 /** Classify a full open block (all questions concatenated). */
 export declare function classifyBlock(block: OpenBlock): Classification;
-export interface SuppressResult {
+interface SuppressResult {
     blockId: string;
     class: AskClass;
     rule: string;
@@ -51,7 +49,7 @@ export interface SuppressResult {
  * Logs the stall as answered by policy:stall-suppression.
  */
 export declare function suppressStallBlock(block: OpenBlock, root?: string, mailboxRoot?: string): SuppressResult;
-export interface FeedFilterResult {
+interface FeedFilterResult {
     /** Blocks that should render as cards. */
     surfaced: OpenBlock[];
     /** Suppression audit rows (stalls auto-resolved). */
@@ -70,3 +68,4 @@ export declare function filterBlocksForFeed(blocks: OpenBlock[], opts?: {
 }): FeedFilterResult;
 /** Human digest: "31 stalls auto-resolved by policy". */
 export declare function suppressionDigest(result: FeedFilterResult): string;
+export {};

package/dist/lib/ask-classifier.js

@@ -1,12 +1,5 @@
 import { recordAnswer, recordMessageReceipt, removeBlock } from './feed/feed.js';
 import { enqueue, mailboxDir } from './mailbox.js';
-/** Scan text used for classification. */
-export function askScanText(block) {
-    return block.questions
-        .map((q) => [q.header, q.text].filter(Boolean).join(' '))
-        .join('\n')
-        .toLowerCase();
-}
 const RULES = [
     // FYI / done — no action needed
     {

package/dist/lib/auth-health.d.ts

@@ -156,7 +156,7 @@ export declare function authTargetKey(agent: AgentId | string, version: string):
  */
 export declare function slotAuthVersionKey(accountId: string): string;
 /** One account slot on this device that the auth probe must cover. */
-export interface SlotAuthInstall extends FleetAuthInstall {
+interface SlotAuthInstall extends FleetAuthInstall {
     home: string;
     accountId: string;
 }
@@ -169,18 +169,6 @@ export interface SlotAuthInstall extends FleetAuthInstall {
  * gone is skipped: there is nothing to probe and the row would only say so.
  */
 export declare function enumerateSlotInstalls(meta: Pick<Meta, 'accounts' | 'deviceAccounts'>, agentIds: readonly AgentId[]): SlotAuthInstall[];
-/** One probe target on this device: an installed version home, or an account slot. */
-export interface LocalAuthInstall extends FleetAuthInstall {
-    home: string;
-    accountId?: string;
-}
-/**
- * Every (agent, version) home the local auth probe covers on this device —
- * installed version homes plus account slots. {@link probeLocalFleetAuth} probes
- * exactly this set, so it is also the answer to "which cached rows are still
- * backed by something on disk" (PHNX-4051).
- */
-export declare function enumerateLocalAuthInstalls(meta: Pick<Meta, 'accounts' | 'deviceAccounts'>, agentIds: readonly AgentId[]): LocalAuthInstall[];
 /**
  * {@link authTargetKey} for every local probe target — what a cached row must
  * match to still be about this device. A row outside it is an ORPHAN: its home
@@ -192,15 +180,6 @@ export declare function localAuthTargetKeys(agentIds?: readonly AgentId[]): Set<
 export declare function readAuthHealthCache(): Record<string, AuthHealth>;
 /** Read one entry, or null. */
 export declare function readAuthHealth(host: string, agent: AgentId | string, version: string): AuthHealth | null;
-/**
- * Split a cache key back into the install it names, for one host. Returns null
- * for a key that belongs to another host or does not name a known agent — the
- * one place the `host:agent:version` join is undone.
- */
-export declare function parseAuthCacheKey(key: string, host: string): {
-    agent: AgentId;
-    version: string;
-} | null;
 /** Reconstruct one host's published probe rows for a lease waiter/CLI reader. */
 export declare function readFleetAuthRows(host: string): AuthProbeRow[];
 /**
@@ -264,33 +243,10 @@ export interface FleetAuthInstall {
  * The live probe runs against `probe` (the representative home); every entry in
  * `members` — the representative included — then receives that one verdict.
  */
-export interface FleetAuthProbeGroup<T extends FleetAuthInstall> {
+interface FleetAuthProbeGroup<T extends FleetAuthInstall> {
     probe: T;
     members: T[];
 }
-/**
- * Collapse installs so a live auth probe fires ONCE per (agent, account) rather
- * than once per version home.
- *
- * Several version homes signed into the same provider account share one OAuth
- * rate limit, so probing each of them concurrently — which the daemon did every
- * three minutes across every installed home (RUSH-2111) — raced that limit into
- * a 429 storm that then parked the whole box behind a `Retry-After` penalty (the
- * incident {@link file:./usage-backoff.ts} was written to survive; this removes
- * its cause). Grouping by account means N homes on one account issue ONE request.
- *
- * `isMergeable` scopes the dedup to the installs it actually helps: only agents
- * that make a network probe ({@link LIVE_PROBE_AGENTS}) can 429, so only they are
- * merged. A best-effort agent (its verdict is a cheap local file read, no rate
- * limit) is left per-install — collapsing it would gain nothing and could
- * silently override one home's local `signedIn` verdict with another's. Installs
- * with no resolvable account label, or that `isMergeable` rejects, are never
- * merged: each becomes its own group keyed by version, preserving the old
- * per-install probe (also the `unconfigured` case dropped downstream). Pure: no
- * fs, no network, so the dedup decision is unit-tested directly.
- */
-/** Small fixed delay between live probes so one box no longer fires 16 requests in 4s (PHNX-4051). */
-export declare const AUTH_PROBE_SPACING_MS = 150;
 export declare function groupFleetAuthInstalls<T extends FleetAuthInstall>(installs: readonly T[], isMergeable?: (install: T) => boolean): FleetAuthProbeGroup<T>[];
 /**
  * Enumerate every installed (agent, version) on THIS host and return one row per
@@ -328,3 +284,4 @@ export declare function probeLocalFleetAuth(opts?: {
  * merges as before.
  */
 export declare function writeFleetAuthRows(host: string, rows: AuthProbeRow[], installed?: ReadonlySet<string>): void;
+export {};

package/dist/lib/auth-health.js

@@ -273,7 +273,7 @@ export function enumerateSlotInstalls(meta, agentIds) {
  * exactly this set, so it is also the answer to "which cached rows are still
  * backed by something on disk" (PHNX-4051).
  */
-export function enumerateLocalAuthInstalls(meta, agentIds) {
+function enumerateLocalAuthInstalls(meta, agentIds) {
     const installs = [];
     for (const agent of agentIds) {
         for (const version of listInstalledVersions(agent)) {
@@ -317,7 +317,7 @@ export function readAuthHealth(host, agent, version) {
  * for a key that belongs to another host or does not name a known agent — the
  * one place the `host:agent:version` join is undone.
  */
-export function parseAuthCacheKey(key, host) {
+function parseAuthCacheKey(key, host) {
     const prefix = `${host}:`;
     if (!key.startsWith(prefix))
         return null;
@@ -508,7 +508,7 @@ export async function probeAuthHealth(agent, home, opts) {
  * fs, no network, so the dedup decision is unit-tested directly.
  */
 /** Small fixed delay between live probes so one box no longer fires 16 requests in 4s (PHNX-4051). */
-export const AUTH_PROBE_SPACING_MS = 150;
+const AUTH_PROBE_SPACING_MS = 150;
 export function groupFleetAuthInstalls(installs, isMergeable = () => true) {
     const groups = new Map();
     for (const inst of installs) {

package/dist/lib/auth-mint.d.ts

@@ -2,7 +2,7 @@
  * First-class setup-token mint + seed (PHNX-2364).
  *
  * Closes the mint-auth manual recipe: drive `claude setup-token` through the
- * same injectable PTY driver `agents fleet login` uses, capture a well-formed
+ * same injectable term driver `agents fleet login` uses, capture a well-formed
  * `sk-ant-oat01-…` token (the #1767 ANSI-banner guard), and seed BOTH:
  *
  *   1. a named provider account (`agents accounts add` shape, policy never)
@@ -16,7 +16,7 @@
 import type { AgentId, Meta } from './types.js';
 import { type CredentialAccount } from './account-registry.js';
 import { type StorableCredentialKind } from './secrets-policy.js';
-import { type DriveOptions, type PtyDriver } from './fleet/remote-login.js';
+import { type DriveOptions, type TermDriver } from './fleet/remote-login.js';
 /** Well-formed Claude setup-token as it appears inside a TTY blob. */
 export declare const CLAUDE_SETUP_TOKEN_CAPTURE_RE: RegExp;
 export interface MintFlow {
@@ -27,7 +27,7 @@ export interface MintFlow {
     mintArgs: string[] | null;
     /** api-key flows: the env var the collected key injects as on a worker (e.g. OPENAI_API_KEY). */
     apiKeyEnv?: string;
-    /** setup-token flows: authorize-URL and token patterns scraped from the PTY. */
+    /** setup-token flows: authorize-URL and token patterns scraped from the term session. */
     verificationUrlRegex?: RegExp;
     tokenCapture?: RegExp;
 }
@@ -138,7 +138,7 @@ export declare function adoptLegacyReservedStoreItems(meta: Pick<Meta, 'accounts
  */
 export declare function seedNamedAccount(name: string, token: string, flow: MintFlow): CredentialAccount;
 export interface MintDriveHooks {
-    driver?: PtyDriver;
+    driver?: TermDriver;
     openUrl?: (url: string) => Promise<void>;
     /** Asked once the authorize URL is on screen, when `--code` was not given. */
     readCode?: () => Promise<string | undefined>;
@@ -155,7 +155,7 @@ export interface DriveSetupTokenMintOpts extends MintDriveHooks {
     json?: boolean;
 }
 /**
- * Drive `claude setup-token` in a PTY: scrape the authorize URL, open it,
+ * Drive `claude setup-token` in a term session: scrape the authorize URL, open it,
  * optionally paste `--code`, then capture the token with the #1767 guard.
  * Tears the session down on the way out (success, timeout, or throw).
  */
@@ -193,7 +193,7 @@ export interface MintAndSeedResult {
     fleet: FleetSyncRow[];
 }
 /**
- * End-to-end mint: resolve identity, obtain a token (stdin or PTY drive),
+ * End-to-end mint: resolve identity, obtain a token (stdin or term drive),
  * seed the named account + reserved auth bundle, optionally sync the fleet.
  * Never returns or logs the token.
  */

package/dist/lib/auth-mint.js

@@ -5,7 +5,7 @@ import { bundleBackendSync, isSecretsClientError, bundleExists, bundleExistsSync
 import { assertStorableCredentialKind, reservedStoreName, } from './secrets-policy.js';
 import { getBinaryPath, getGlobalDefault, getVersionHomePath, listInstalledVersions } from './installations/versions.js';
 import { shellQuote } from './ssh-exec.js';
-import { defaultPtyDriver, } from './fleet/remote-login.js';
+import { defaultTermDriver, } from './fleet/remote-login.js';
 import { showUrl } from './open-url.js';
 import { loadDevices } from './devices/registry.js';
 import { isSelfHost } from './devices/self-host.js';
@@ -348,7 +348,7 @@ function emitMintProgress(line, json) {
         console.log(line);
 }
 /**
- * Drive `claude setup-token` in a PTY: scrape the authorize URL, open it,
+ * Drive `claude setup-token` in a term session: scrape the authorize URL, open it,
  * optionally paste `--code`, then capture the token with the #1767 guard.
  * Tears the session down on the way out (success, timeout, or throw).
  */
@@ -356,7 +356,7 @@ export async function driveSetupTokenMint(command, flow, opts = {}) {
     if (flow.auth !== 'setup-token' || !flow.tokenCapture) {
         throw new Error(`Harness '${flow.harness}' has no interactive mint command.`);
     }
-    const driver = opts.driver ?? defaultPtyDriver();
+    const driver = opts.driver ?? defaultTermDriver();
     const initialDelayMs = opts.drive?.initialDelayMs ?? 1500;
     const pollMs = opts.drive?.pollMs ?? 500;
     const timeoutMs = opts.drive?.timeoutMs ?? 180_000;
@@ -443,14 +443,14 @@ export function resolveMintInstallation(harness) {
     };
 }
 /**
- * End-to-end mint: resolve identity, obtain a token (stdin or PTY drive),
+ * End-to-end mint: resolve identity, obtain a token (stdin or term drive),
  * seed the named account + reserved auth bundle, optionally sync the fleet.
  * Never returns or logs the token.
  */
 export async function mintAndSeed(input) {
     const flow = getMintFlow(input.harness);
     const json = input.json === true;
-    // An injected PTY driver is a complete substitute for exec'ing the local
+    // An injected term driver is a complete substitute for exec'ing the local
     // binary, so the install lookup is only required on the real drive path.
     const install = input.token
         ? null

package/dist/lib/bench/runner.d.ts

@@ -3,9 +3,8 @@ export interface CellExecutionRequest extends BenchCell {
     prompt: string;
     cwd: string;
 }
-export type CellExecutor = (request: CellExecutionRequest) => Promise<Omit<BenchCellResult, keyof BenchCell | "wall_ms" | "status">>;
+type CellExecutor = (request: CellExecutionRequest) => Promise<Omit<BenchCellResult, keyof BenchCell | "wall_ms" | "status">>;
 export declare function extractTokenCount(stdout: string, stderr: string): number | undefined;
-export declare function executeCellViaAgentsRun(request: CellExecutionRequest): ReturnType<CellExecutor>;
 export declare function runCells(options: {
     task?: BenchTask;
     prompt: string;
@@ -14,3 +13,4 @@ export declare function runCells(options: {
     execute?: CellExecutor;
     tempRoot?: string;
 }): Promise<BenchRunResult>;
+export {};

package/dist/lib/bench/runner.js

@@ -13,7 +13,7 @@ export function extractTokenCount(stdout, stderr) {
     const tokens = Number(raw.replaceAll(",", ""));
     return Number.isSafeInteger(tokens) && tokens >= 0 ? tokens : undefined;
 }
-export async function executeCellViaAgentsRun(request) {
+async function executeCellViaAgentsRun(request) {
     const args = [
         "run",
         request.agent,

package/dist/lib/bench/storage.d.ts

@@ -1,5 +1,4 @@
 import type { BenchRunResult } from "./types.js";
-export declare function benchHistoryDir(): string;
 export declare function saveRun(result: BenchRunResult, root?: string): string;
 export declare function loadRun(runId: string, root?: string): BenchRunResult;
 export declare function listRuns(root?: string): BenchRunResult[];

package/dist/lib/bench/storage.js

@@ -2,7 +2,7 @@ import * as fs from "fs";
 import * as path from "path";
 import { getUserAgentsDir } from "../state.js";
 import { parseRunResult, validateRunId } from "./schema.js";
-export function benchHistoryDir() {
+function benchHistoryDir() {
     return path.join(getUserAgentsDir(), ".history", "bench");
 }
 export function saveRun(result, root = benchHistoryDir()) {

package/dist/lib/boot-profile.d.ts

@@ -1,5 +1,3 @@
-/** True when `AGENTS_PROFILE_BOOT` is set — callers can skip building label strings. */
-export declare function bootProfileEnabled(): boolean;
 /**
  * Record a named stage boundary. No-op unless `AGENTS_PROFILE_BOOT` is set, so
  * this is free to call unconditionally on the launch path.

package/dist/lib/boot-profile.js

@@ -19,10 +19,6 @@ import { performance } from 'node:perf_hooks';
 const ENABLED = process.env.AGENTS_PROFILE_BOOT === '1' || process.env.AGENTS_PROFILE_BOOT === 'true';
 const marks = [];
 let flushed = false;
-/** True when `AGENTS_PROFILE_BOOT` is set — callers can skip building label strings. */
-export function bootProfileEnabled() {
-    return ENABLED;
-}
 /**
  * Record a named stage boundary. No-op unless `AGENTS_PROFILE_BOOT` is set, so
  * this is free to call unconditionally on the launch path.

package/dist/lib/brand.d.ts

@@ -19,12 +19,6 @@ export declare function validateBrandName(name: string): string | null;
 export declare function listBrands(): Record<string, BrandConfig>;
 /** One brand's config, or undefined. */
 export declare function getBrandConfig(name: string): BrandConfig | undefined;
-/**
- * The active brand's config (from AGENTS_BRAND), or null when unbranded or when
- * the brand is explicitly disabled (`enabled: false`) — a disabled brand's shim
- * still works as a plain pass-through but applies no command/resource curation.
- */
-export declare function getActiveBrandConfig(): BrandConfig | null;
 /**
  * The resource-profile preset name a brand pins, or null. Read on the hot path
  * by resource-profiles.ts to make the active profile brand-scoped.

package/dist/lib/brand.js

@@ -78,7 +78,7 @@ export function getBrandConfig(name) {
  * the brand is explicitly disabled (`enabled: false`) — a disabled brand's shim
  * still works as a plain pass-through but applies no command/resource curation.
  */
-export function getActiveBrandConfig() {
+function getActiveBrandConfig() {
     const name = activeBrandName();
     if (!name)
         return null;

package/dist/lib/browser/arc-discovery.d.ts

@@ -1,17 +1,17 @@
-export interface ArcSpace {
+interface ArcSpace {
     /** Stable UUID used for every native operation. */
     id: string;
     /** Display-only title; empty when the Space is untitled. Never part of identity. */
     title: string;
 }
-export interface ArcProfile {
+interface ArcProfile {
     /** Arc's profile directory basename: the stable profile identity. */
     profileId: string;
     /** Display-only profile name from Local State. */
     displayName: string;
     spaces: ArcSpace[];
 }
-export type ArcDiscoveryResult = {
+type ArcDiscoveryResult = {
     ok: true;
     profiles: ArcProfile[];
     userDataDir: string;
@@ -25,14 +25,6 @@ interface SidebarSpace {
     title: string;
     profileId: string;
 }
-/**
- * Arc's application-support root on this Mac. Arc keeps its Chromium `Local
- * State` under `<root>/User Data/` and its own sidebar model (Spaces and their
- * profile bindings) at `<root>/StorableSidebar.json` — two different levels,
- * so discovery is rooted here rather than at the Chromium user-data dir.
- * `AGENTS_ARC_DIR` points tests and non-default installs at another root.
- */
-export declare function arcSupportDir(): string | undefined;
 export declare function parseLocalStateProfiles(localStatePath: string): Map<string, string> | {
     error: string;
 };
@@ -42,7 +34,7 @@ export declare function parseSidebarSpaces(sidebarPath: string): SidebarSpace[]
 export declare function discoverArcProfilesAt(arcDir: string): ArcDiscoveryResult;
 export declare function discoverArcProfiles(): ArcDiscoveryResult;
 /** One Arc Space, flattened with the Arc profile it belongs to. */
-export interface ArcSpaceProfile {
+interface ArcSpaceProfile {
     /** The agents-cli profile name: `arc-<space-title-slug>`. */
     name: string;
     profileId: string;

package/dist/lib/browser/arc-discovery.js

@@ -12,7 +12,7 @@ function isRecord(value) {
  * so discovery is rooted here rather than at the Chromium user-data dir.
  * `AGENTS_ARC_DIR` points tests and non-default installs at another root.
  */
-export function arcSupportDir() {
+function arcSupportDir() {
     const override = process.env.AGENTS_ARC_DIR;
     if (override)
         return path.resolve(override);

package/dist/lib/browser/cdp.d.ts

@@ -1,5 +1,5 @@
 import type { Readable, Writable } from 'stream';
-export interface CDPPipeTransport {
+interface CDPPipeTransport {
     read: Readable;
     write: Writable;
 }

package/dist/lib/browser/chrome.d.ts

@@ -68,7 +68,6 @@ export declare function storeRelaunchCommand(browserType: BrowserType, port: num
  */
 export declare function resolveProfileSecretsEnv(secrets?: string): Promise<Record<string, string>>;
 export declare function launchBrowser(profileName: string, browserType: BrowserType, port: number, options?: ChromeOptions, secrets?: string, customBinary?: string, isElectron?: boolean): Promise<LaunchResult>;
-export declare function attachToChrome(port: number): Promise<string>;
 export declare function killChrome(pid: number): void;
 export declare function getRunningChromeInfo(profileName: string): {
     pid: number;
@@ -128,7 +127,7 @@ export declare function getProcessUserDataDir(pid: number): string | null;
  * testing without a live process.
  */
 export declare function parseUserDataDirFromCommandLine(cmdline: string): string | null;
-export interface PortOccupant {
+interface PortOccupant {
     pid: number;
     command: string;
 }
@@ -139,3 +138,4 @@ export interface PortOccupant {
  * `lsof` on POSIX; `netstat -ano` + `tasklist` on Windows.
  */
 export declare function getPortOccupant(port: number): PortOccupant | null;
+export {};

package/dist/lib/browser/chrome.js

@@ -451,10 +451,6 @@ async function waitForDevToolsPort(port, profileName, child, store, timeoutMs =
     throw new Error(`Browser for profile "${profileName}" (pid ${pid}) did not serve the DevTools protocol on ` +
         `port ${port} within ${Math.round(timeoutMs / 1000)}s: ${lastError}`);
 }
-export async function attachToChrome(port) {
-    const { wsUrl } = await discoverBrowserWsUrl(port);
-    return wsUrl;
-}
 export function killChrome(pid) {
     if (process.platform === 'win32') {
         // On Windows `process.kill(pid, 'SIGINT')` maps to TerminateProcess — a