@phnx-labs/agents-cli 1.22.113 → 1.22.114

package/dist/lib/daemon/runner.d.ts

@@ -54,7 +54,7 @@ export declare function activeRunSkipStreak(runs: RunMeta[]): number;
  */
 export declare function launcherClaimPid(): number | null;
 /** How a routine attempt was triggered, plus the schedule slot it belongs to. */
-export interface RoutineTrigger {
+interface RoutineTrigger {
     kind: NonNullable<RunMeta['triggerKind']>;
     /** UTC fire time for a schedule/catchup attempt; keys the single-fire slot claim. */
     scheduledFor?: Date | string;
@@ -103,7 +103,7 @@ export declare function buildJobCommand(config: JobConfig, resolvedPrompt: strin
 export declare function snapshotRoutineTranscriptBase(meta: Pick<RunMeta, 'jobName' | 'agent' | 'version'>, runDir: string, overlayHome?: string): void;
 export declare function archiveRoutineTranscripts(meta: Pick<RunMeta, 'jobName' | 'runId' | 'agent' | 'version'>, runDir: string, overlayHome?: string): void;
 /** Pre-flight version/account selection for a routine job. */
-export interface RoutineLaunchPlan {
+interface RoutineLaunchPlan {
     /** Ordered attempts: primary first, then same-agent failover accounts. */
     chain: FallbackEntry[];
     /** Full rotation result when strategy selected among healthy accounts; null when pinned. */
@@ -219,7 +219,7 @@ declare function executeJobOnHost(config: JobConfig, opts: {
  * observes the live running→terminal transition (the monitor tick would already
  * see a finalized record and skip it). Never let a hook throw into finalization.
  */
-export interface RoutineHooks {
+interface RoutineHooks {
     /** Called once with the finalized meta when the run reaches a terminal state. */
     onFinish?: (meta: RunMeta) => void;
 }

package/dist/lib/daemon/self-update-service.d.ts

@@ -35,16 +35,7 @@
  */
 import { BasePeriodicService, type DaemonContext } from './service.js';
 import type { DaemonServiceId } from '../daemon-services.js';
-/**
- * Hard cap per tick: a real download + npm/bun install + verify can
- * legitimately take minutes on a slow link. 15 minutes matches the task's
- * stated budget and is short relative to the ~75min cadence. Exported so the
- * on-demand `request-self-update` IPC handler (`browser/ipc.ts`) can bound
- * its own `AbortController` on the SAME budget the periodic tick runs under —
- * one deadline, not two independently-tuned numbers that could drift apart.
- */
-export declare const SELF_UPDATE_DEADLINE_MS: number;
-export interface SelfUpdateOutcome {
+interface SelfUpdateOutcome {
     updated: boolean;
     reason?: string;
 }
@@ -75,7 +66,6 @@ export interface SelfUpdateDeps {
     syncSystemRepo(): Promise<void>;
     syncLocal(): Promise<void>;
 }
-export declare function fetchLatestNpmMetadata(signal: AbortSignal): Promise<NpmLatestMetadata>;
 /**
  * Install + byte-verify `metadata` into `packageRoot`'s install, exactly the
  * sequence `bootstrap.ts`'s `installResolvedPackage` runs for `agents
@@ -101,7 +91,6 @@ export declare function fetchLatestNpmMetadata(signal: AbortSignal): Promise<Npm
  * it's guarding (found in review, PHNX-3695).
  */
 export declare function installAndVerifyDefault(metadata: NpmLatestMetadata, packageRoot: string, signal: AbortSignal): Promise<void>;
-export declare function defaultSelfUpdateDeps(): SelfUpdateDeps;
 /**
  * Core self-update decision + action, shared by the periodic tick
  * ({@link SelfUpdateService.onTick}) and the on-demand IPC path
@@ -167,10 +156,6 @@ export declare function triggerSelfUpdateInBackground(ctx: DaemonContext, deps?:
  * reason, or `null` to proceed to the (backgrounded) install path.
  */
 export declare function selfUpdateSyncDeclineReason(deps?: SelfUpdateDeps): string | null;
-export declare const DEV_BUILD_DECLINE = "dev build \u2014 self-update is a no-op";
-export declare const SHADOW_DECLINE = "another agents binary shadows this install \u2014 self-update is a no-op";
-/** True when the package on disk is a strictly newer release than the one this process booted with. */
-export declare function installedIsNewerThanRunning(installed: string, running: string): boolean;
 export declare class SelfUpdateService extends BasePeriodicService {
     readonly id: DaemonServiceId;
     readonly intervalMs: number;

package/dist/lib/daemon/self-update-service.js

@@ -56,7 +56,7 @@ const SELF_UPDATE_TICK_MS = 75 * 60_000;
  * its own `AbortController` on the SAME budget the periodic tick runs under —
  * one deadline, not two independently-tuned numbers that could drift apart.
  */
-export const SELF_UPDATE_DEADLINE_MS = 15 * 60_000;
+const SELF_UPDATE_DEADLINE_MS = 15 * 60_000;
 /**
  * First tick fires 5 minutes after daemon boot — deliberately longer than
  * self-heal's 30s stagger (`self-heal-service.ts`): self-heal repairs local
@@ -67,7 +67,7 @@ export const SELF_UPDATE_DEADLINE_MS = 15 * 60_000;
  * a restart). Every later tick still fires on the normal cadence.
  */
 const SELF_UPDATE_STARTUP_DELAY_MS = 5 * 60_000;
-export async function fetchLatestNpmMetadata(signal) {
+async function fetchLatestNpmMetadata(signal) {
     const response = await fetch(`https://registry.npmjs.org/${NPM_PACKAGE_NAME}/latest`, { signal });
     if (!response.ok) {
         throw new Error(`registry.npmjs.org responded ${response.status}`);
@@ -148,7 +148,7 @@ export async function installAndVerifyDefault(metadata, packageRoot, signal) {
         }
     }
 }
-export function defaultSelfUpdateDeps() {
+function defaultSelfUpdateDeps() {
     return {
         currentVersion: () => getCliVersion(),
         installedVersion: () => getCliVersionFresh(),
@@ -362,10 +362,10 @@ export function selfUpdateSyncDeclineReason(deps = defaultSelfUpdateDeps()) {
     }
     return null;
 }
-export const DEV_BUILD_DECLINE = 'dev build — self-update is a no-op';
-export const SHADOW_DECLINE = 'another agents binary shadows this install — self-update is a no-op';
+const DEV_BUILD_DECLINE = 'dev build — self-update is a no-op';
+const SHADOW_DECLINE = 'another agents binary shadows this install — self-update is a no-op';
 /** True when the package on disk is a strictly newer release than the one this process booted with. */
-export function installedIsNewerThanRunning(installed, running) {
+function installedIsNewerThanRunning(installed, running) {
     if (installed === 'unknown' || running === 'unknown')
         return false;
     return compareVersions(installed, running) > 0;

package/dist/lib/daemon/state-dir-check-service.d.ts

@@ -24,7 +24,7 @@
  */
 import { BasePeriodicService, type DaemonContext } from './service.js';
 import type { DaemonServiceId } from '../daemon-services.js';
-export interface StateDirCheckServiceOptions {
+interface StateDirCheckServiceOptions {
     lifetimePath: string;
     lifetimeToken: string;
     onMissing: () => void;
@@ -41,3 +41,4 @@ export declare class StateDirCheckService extends BasePeriodicService {
     protected onStop(): Promise<void>;
     protected onTick(ctx: DaemonContext): Promise<void>;
 }
+export {};

package/dist/lib/daemon/supervisor.d.ts

@@ -32,7 +32,7 @@
  */
 import type { DaemonServiceId } from '../daemon-services.js';
 import type { DaemonContext, DaemonService, ServiceHealth } from './service.js';
-export interface ServiceSupervisorOptions {
+interface ServiceSupervisorOptions {
     /** Consecutive thrown tick failures before a service is parked. Deadline breaches park immediately. Default 3. */
     parkAfterFailures?: number;
     /** First restart backoff delay, doubled on each further failed restart attempt. Default 5s. */
@@ -48,7 +48,7 @@ export interface ServiceSupervisorOptions {
      */
     lifecycleDeadlineMs?: number;
 }
-export interface RegisterServiceOptions {
+interface RegisterServiceOptions {
     /** Register the lifecycle owner but leave it stopped until a live enable. */
     enabled?: boolean;
 }
@@ -135,3 +135,4 @@ export declare class ServiceSupervisor {
     private recordFailure;
     private finishTick;
 }
+export {};

package/dist/lib/daemon-services.d.ts

@@ -9,7 +9,7 @@
 /** Every service the daemon can host. IDs are kebab-case and stable. */
 export type DaemonServiceId = 'scheduler' | 'catchup' | 'monitors' | 'browser-ipc' | 'webhook-receiver' | 'self-heal' | 'self-update' | 'account-state' | 'account-auth' | 'watchdog' | 'device-probe' | 'state-dir-check' | 'session-index' | 'session-title' | 'auth-sync' | 'usage-sync' | 'daemon-heartbeat' | 'tmux-reap' | 'browser-task-reap' | 'session-state' | 'session-summarizer' | 'attention-notify' | 'harness-update';
 /** Human-readable metadata for each service. */
-export interface DaemonServiceDef {
+interface DaemonServiceDef {
     id: DaemonServiceId;
     title: string;
     description: string;
@@ -55,3 +55,4 @@ export declare function queueDaemonServiceRestart(id: DaemonServiceId): void;
  * daemon; never throws. Clears the file so a request is applied at most once.
  */
 export declare function drainDaemonServiceRestartQueue(): DaemonServiceId[];
+export {};

package/dist/lib/daemon-webhooks.d.ts

@@ -35,7 +35,7 @@ export interface HostedReceiverConfig {
     /** Public Funnel exposure; omit to bind localhost only. */
     funnel?: HostedReceiverFunnel;
 }
-export interface DaemonWebhooksConfig {
+interface DaemonWebhooksConfig {
     receivers: HostedReceiverConfig[];
 }
 /** Path to `~/.agents/daemon/webhooks.yaml`. */

package/dist/lib/deeplink/register.d.ts

@@ -1,6 +1,5 @@
 export declare const AGENTS_URL_SCHEME = "agents";
-export declare const MAC_BUNDLE_ID = "dev.agents.urlhandler";
-export interface SchemeStatus {
+interface SchemeStatus {
     registered: boolean;
     platform: NodeJS.Platform;
     /** One human line: where the handler is, or why it is not registered. */
@@ -11,15 +10,6 @@ export interface SchemeStatus {
  * out of the handler command.
  */
 export declare function shQuote(p: string): string;
-/**
- * Resolve how the OS handler should invoke this CLI, as an already-quoted
- * command prefix (without the `open <url>` suffix).
- *
- * A macOS GUI app does NOT inherit the shell PATH, so the handler must use an
- * absolute path. Prefer the `agents` shim on PATH (directly executable); fall
- * back to `<node> <entry>` for a bare JS install.
- */
-export declare function resolveAgentsInvocation(platform?: NodeJS.Platform): string;
 /** The freedesktop `.desktop` entry that claims `x-scheme-handler/agents`. */
 export declare function linuxDesktopEntry(invocation: string): string;
 /**
@@ -33,10 +23,9 @@ export declare function macPlistBuddyCommands(plistPath: string): string[][];
 /** `reg add` argv lists that register the scheme under HKCU on Windows. */
 export declare function windowsRegistryCommands(invocation: string): string[][];
 export declare function linuxDesktopPath(home?: string): string;
-export declare function macAppPath(home?: string): string;
 /** Whether the handler artifact exists on disk (a cheap, side-effect-free check). */
 export declare function agentsUrlSchemeStatus(platform?: NodeJS.Platform, home?: string): SchemeStatus;
-export interface RegisterOptions {
+interface RegisterOptions {
     platform?: NodeJS.Platform;
     home?: string;
     /** Skip if already present (used by best-effort callers like setup). */
@@ -47,3 +36,4 @@ export declare function unregisterAgentsUrlScheme(opts?: {
     platform?: NodeJS.Platform;
     home?: string;
 }): SchemeStatus;
+export {};

package/dist/lib/deeplink/register.js

@@ -23,7 +23,7 @@ import * as os from 'node:os';
 import * as path from 'node:path';
 import { getAgentsBinPath } from '../cli-entry.js';
 export const AGENTS_URL_SCHEME = 'agents';
-export const MAC_BUNDLE_ID = 'dev.agents.urlhandler';
+const MAC_BUNDLE_ID = 'dev.agents.urlhandler';
 const LINUX_DESKTOP_FILE = 'agents-url-handler.desktop';
 const MAC_APP_NAME = 'AgentsURLHandler.app';
 // ---------------------------------------------------------------------------
@@ -44,7 +44,7 @@ export function shQuote(p) {
  * absolute path. Prefer the `agents` shim on PATH (directly executable); fall
  * back to `<node> <entry>` for a bare JS install.
  */
-export function resolveAgentsInvocation(platform = os.platform()) {
+function resolveAgentsInvocation(platform = os.platform()) {
     const onPath = whichAgents(platform);
     if (onPath)
         return platform === 'win32' ? `"${onPath}"` : shQuote(onPath);
@@ -123,7 +123,7 @@ export function windowsRegistryCommands(invocation) {
 export function linuxDesktopPath(home = os.homedir()) {
     return path.join(home, '.local', 'share', 'applications', LINUX_DESKTOP_FILE);
 }
-export function macAppPath(home = os.homedir()) {
+function macAppPath(home = os.homedir()) {
     return path.join(home, 'Applications', MAC_APP_NAME);
 }
 // ---------------------------------------------------------------------------

package/dist/lib/deeplink/url.d.ts

@@ -16,14 +16,14 @@
  *   agents://session/<id>              — resume <id>, owner host resolved from the id
  *   agents://session/<id>?host=<name>  — the same, with a routing hint
  */
-export interface AgentsSessionLink {
+interface AgentsSessionLink {
     kind: 'session';
     /** The session id (or short-id/alias) to resume. */
     id: string;
     /** Optional owning-host hint; resume self-resolves the owner from the id regardless. */
     host?: string;
 }
-export interface AgentsUrlError {
+interface AgentsUrlError {
     error: string;
 }
 export declare function isDeepLinkSessionId(raw: string): boolean;
@@ -32,3 +32,4 @@ export declare function isDeepLinkSessionId(raw: string): boolean;
  * {@link AgentsUrlError} with a human reason. Never throws.
  */
 export declare function parseAgentsUrl(input: string): AgentsSessionLink | AgentsUrlError;
+export {};

package/dist/lib/device-config.d.ts

@@ -44,7 +44,7 @@ export type ConfigScope = 'user' | 'device';
  */
 export type ConfigVisibility = 'shared' | 'machine';
 /** Value type of a config key — drives validation and `--json` rendering. */
-export type ConfigType = 'string' | 'int' | 'bool' | 'string-list';
+type ConfigType = 'string' | 'int' | 'bool' | 'string-list';
 /** Fields every key carries, regardless of scope. */
 interface ConfigKeySpecBase {
     /** CLI dotted name, e.g. `interactive.host`. */
@@ -81,7 +81,7 @@ export interface ConfigEntry {
     source: ConfigSource;
 }
 /** Options scoping a read/write: a specific device (default: this machine), or the fleet-defaults layer. */
-export interface ConfigTarget {
+interface ConfigTarget {
     device?: string;
     /** Write/read the fleet-wide defaults layer (central fleet.defaults.config). */
     fleet?: boolean;
@@ -92,16 +92,8 @@ declare const DEVICE_ROLES: readonly ["worker", "personal", "desktop"];
 declare const AUTO_POOL_MODES: readonly ["workers", "all"];
 export declare const CONFIG_KEYS: readonly ConfigKeySpec[];
 export declare function configKeySpec(name: string): ConfigKeySpec;
-/**
- * Fold the legacy config/pins stores into the current layout, once per
- * process. A failure is loud but non-fatal — config reads must keep working,
- * and the next process retries the fold. Honors AGENTS_SKIP_MIGRATION=1, the
- * same gate bootstrap's runMigration uses (tests pin it so a fork never folds
- * the developer's real ~/.agents as a side effect).
- */
-export declare function ensureDeviceConfigMigrated(): void;
-/** The fleet-defaults config layer (central `fleet.defaults.config`; {} when unset). */
-export declare function readFleetConfigDefaults(): Record<string, unknown>;
+/** Throw when `value` does not match the key's declared type or validation. */
+export declare function assertValidValue(spec: ConfigKeySpec, value: unknown): void;
 /**
  * The effective device-scope config block for `device`: fleet.defaults.config
  * overlaid with the per-device doc's config:. This is the single read path
@@ -130,9 +122,6 @@ export declare function getConfigValueAsync(name: string, opts?: ConfigTarget):
  * must not hard-fail. Asking for such a key by name still errors.
  */
 export declare function listConfig(opts?: ConfigTarget): ConfigEntry[];
-/** List user-scope config keys with their values. Used to show inherited settings
- * in per-device views without implying those keys are device-local. */
-export declare function listUserConfig(): ConfigEntry[];
 /**
  * Set a config key (validated). Device-scope keys target this machine unless
  * `opts.device` names a peer; `opts.fleet` writes the fleet-wide defaults layer

package/dist/lib/device-config.js

@@ -39,6 +39,7 @@ import { atomicWriteFileSync } from './fs-atomic.js';
 import { machineId } from './machine-id.js';
 import { assertValidDeviceName, assertRegistrableDeviceName } from './devices/registry.js';
 import { migrateDeviceConfigStores } from './devices/config-migration.js';
+import { parseAddress } from './address.js';
 import { isAgentId } from './types.js';
 const DEVICE_PLATFORMS = ['windows', 'linux', 'macos', 'unknown'];
 const SSH_AUTH_METHODS = ['key', 'password'];
@@ -46,6 +47,16 @@ const SSH_AUTH_METHODS = ['key', 'password'];
 const DEVICE_ROLES = ['worker', 'personal', 'desktop'];
 /** Which devices automatic placement may pick — see the `auto.pool` key below. */
 const AUTO_POOL_MODES = ['workers', 'all'];
+/**
+ * A device's physical form factor (`formFactor` key) — a factual hardware fact
+ * the menu bar shows as an icon. Set explicitly per device (no inference from
+ * platform, no hardcoded device names). `unknown` is the effective default.
+ */
+const DEVICE_FORM_FACTORS = ['laptop', 'desktop', 'server', 'unknown'];
+/** A validate() that accepts only one of `allowed` — the enum-string keys reuse it. */
+function oneOf(name, allowed) {
+    return (v) => (allowed.includes(v) ? null : `${name} must be one of ${allowed.join(' | ')}.`);
+}
 export const CONFIG_KEYS = [
     {
         name: 'interactive.host',
@@ -133,6 +144,28 @@ export const CONFIG_KEYS = [
         type: 'string',
         description: 'Browser profile `agents browser start` resolves to without --profile (set via `agents browser use`).',
     },
+    {
+        name: 'computer.host',
+        yamlKey: 'computerHost',
+        scope: 'device',
+        visibility: 'shared',
+        type: 'string',
+        description: 'The --host address (PHNX-4090) `agents computer --device <name>` forwards to the standalone engine: ' +
+            'ssh://[user@]host[:port], vnc://host[:port], or tcp://host:port. Unset falls back to the fleet ssh ' +
+            'identity (ssh://user@host resolved against the device registry).',
+        validate: (v) => {
+            try {
+                const addr = parseAddress(v);
+                if (addr.scheme !== 'ssh' && addr.scheme !== 'vnc' && addr.scheme !== 'tcp') {
+                    return `computer.host speaks ssh://, vnc:// and tcp:// only (got ${addr.scheme}://).`;
+                }
+                return null;
+            }
+            catch (err) {
+                return err?.message ?? String(err);
+            }
+        },
+    },
     {
         name: 'browser.device',
         yamlKey: 'defaultBrowserDevice',
@@ -344,6 +377,134 @@ export const CONFIG_KEYS = [
         defaultValue: false,
         description: 'Boost this device in `--device auto` ranking (default off) — picked ahead of load-equal peers when eligible.',
     },
+    {
+        name: 'formFactor',
+        yamlKey: 'formFactor',
+        scope: 'device',
+        visibility: 'shared',
+        type: 'string',
+        defaultValue: 'unknown',
+        description: "This device's physical form factor, a factual hardware fact the menu bar renders as an icon: " +
+            'laptop, desktop, server, or unknown. Synced fleet-wide (any box may set it for any device). Set it ' +
+            'explicitly — never inferred from the OS platform. Unset reads as `unknown`.',
+        validate: oneOf('formFactor', DEVICE_FORM_FACTORS),
+    },
+    // ─── AGI Menu preferences (PHNX-3999) ──────────────────────────────────────
+    // User-scope so one value syncs fleet-wide via `agents repo push/pull` and the
+    // native menu reads it from `agents config list --json`. Names mirror the Swift
+    // MenuPreferences local-cache keys. `config list` OMITS an unset key, so the
+    // native app falls back to its own known defaults — the defaults documented
+    // here match those, they are not substituted on read.
+    {
+        name: 'menubar.menu.defaultProject',
+        yamlKey: 'menubarMenuDefaultProject',
+        scope: 'user',
+        type: 'string',
+        description: 'AGI Menu: the project name the menu opens focused on. Unset = no default project.',
+    },
+    {
+        name: 'menubar.menu.workingRowsShown',
+        yamlKey: 'menubarMenuWorkingRowsShown',
+        scope: 'user',
+        type: 'int',
+        defaultValue: 3,
+        description: 'AGI Menu: how many working (in-progress) rows to show per group — 2, 3, or 4.',
+        validate: (v) => ([2, 3, 4].includes(v) ? null : 'menubar.menu.workingRowsShown must be 2, 3, or 4.'),
+    },
+    {
+        name: 'menubar.menu.showPreviews',
+        yamlKey: 'menubarMenuShowPreviews',
+        scope: 'user',
+        type: 'bool',
+        defaultValue: true,
+        description: 'AGI Menu: show the session preview line under each row.',
+    },
+    {
+        name: 'menubar.menu.projectPriorityFilter',
+        yamlKey: 'menubarMenuProjectPriorityFilter',
+        scope: 'user',
+        type: 'string',
+        defaultValue: 'all',
+        description: 'AGI Menu: minimum project priority shown — all, urgent, high, or medium.',
+        validate: oneOf('menubar.menu.projectPriorityFilter', ['all', 'urgent', 'high', 'medium']),
+    },
+    {
+        name: 'menubar.menu.hideCompletedMilestones',
+        yamlKey: 'menubarMenuHideCompletedMilestones',
+        scope: 'user',
+        type: 'bool',
+        defaultValue: true,
+        description: 'AGI Menu: hide milestones that are fully complete.',
+    },
+    {
+        name: 'menubar.menu.bannerWhenNeedsYou',
+        yamlKey: 'menubarMenuBannerWhenNeedsYou',
+        scope: 'user',
+        type: 'bool',
+        defaultValue: true,
+        description: 'AGI Menu: show a top banner when a session needs the operator.',
+    },
+    {
+        name: 'menubar.menu.includeOtherDeviceRequests',
+        yamlKey: 'menubarMenuIncludeOtherDeviceRequests',
+        scope: 'user',
+        type: 'bool',
+        defaultValue: true,
+        description: 'AGI Menu: include needs-you requests from sessions on OTHER fleet devices.',
+    },
+    {
+        name: 'menubar.menu.groupBy',
+        yamlKey: 'menubarMenuGroupBy',
+        scope: 'user',
+        type: 'string',
+        defaultValue: 'project',
+        description: 'AGI Menu: primary grouping of rows — none, project, agent, or device.',
+        validate: oneOf('menubar.menu.groupBy', ['none', 'project', 'agent', 'device']),
+    },
+    {
+        name: 'menubar.menu.thenBy',
+        yamlKey: 'menubarMenuThenBy',
+        scope: 'user',
+        type: 'string',
+        defaultValue: 'none',
+        description: 'AGI Menu: secondary grouping within each group — none, project, agent, or device.',
+        validate: oneOf('menubar.menu.thenBy', ['none', 'project', 'agent', 'device']),
+    },
+    {
+        name: 'menubar.menu.projectScope',
+        yamlKey: 'menubarMenuProjectScope',
+        scope: 'user',
+        type: 'string',
+        defaultValue: 'cycle',
+        description: 'AGI Menu: which project issues to show — the current cycle only, or all.',
+        validate: oneOf('menubar.menu.projectScope', ['cycle', 'all']),
+    },
+    {
+        name: 'menubar.menu.projectSort',
+        yamlKey: 'menubarMenuProjectSort',
+        scope: 'user',
+        type: 'string',
+        defaultValue: 'updated',
+        description: 'AGI Menu: how projects are ordered — updated, priority, or name.',
+        validate: oneOf('menubar.menu.projectSort', ['updated', 'priority', 'name']),
+    },
+    {
+        name: 'menubar.menu.ticketSort',
+        yamlKey: 'menubarMenuTicketSort',
+        scope: 'user',
+        type: 'string',
+        defaultValue: 'priority',
+        description: 'AGI Menu: how tickets within a project are ordered — priority, updated, or title.',
+        validate: oneOf('menubar.menu.ticketSort', ['priority', 'updated', 'title']),
+    },
+    {
+        name: 'menubar.menu.showPullRequests',
+        yamlKey: 'menubarMenuShowPullRequests',
+        scope: 'user',
+        type: 'bool',
+        defaultValue: true,
+        description: 'AGI Menu: show the open pull requests section for each project.',
+    },
 ];
 /** Look up a key spec by CLI dotted name, or throw listing the known keys. */
 /**
@@ -377,7 +538,7 @@ export function configKeySpec(name) {
     return spec;
 }
 /** Throw when `value` does not match the key's declared type or validation. */
-function assertValidValue(spec, value) {
+export function assertValidValue(spec, value) {
     switch (spec.type) {
         case 'string':
             if (typeof value !== 'string' || value.length === 0) {
@@ -413,7 +574,7 @@ let migrationDone = false;
  * same gate bootstrap's runMigration uses (tests pin it so a fork never folds
  * the developer's real ~/.agents as a side effect).
  */
-export function ensureDeviceConfigMigrated() {
+function ensureDeviceConfigMigrated() {
     if (migrationDone || process.env.AGENTS_SKIP_MIGRATION === '1')
         return;
     try {
@@ -499,7 +660,7 @@ function writeDeviceDoc(device, doc) {
     atomicWriteFileSync(p, META_HEADER + yaml.stringify(doc));
 }
 /** The fleet-defaults config layer (central `fleet.defaults.config`; {} when unset). */
-export function readFleetConfigDefaults() {
+function readFleetConfigDefaults() {
     const config = readMeta().fleet?.defaults?.config;
     return config && typeof config === 'object' && !Array.isArray(config) ? config : {};
 }
@@ -609,11 +770,6 @@ export function listConfig(opts) {
         : CONFIG_KEYS;
     return visible.map((spec) => getConfigValue(spec.name, opts));
 }
-/** List user-scope config keys with their values. Used to show inherited settings
- * in per-device views without implying those keys are device-local. */
-export function listUserConfig() {
-    return CONFIG_KEYS.filter((spec) => spec.scope === 'user').map((spec) => getConfigValue(spec.name));
-}
 // ─── Writes ───────────────────────────────────────────────────────────────────
 /** The fleet manifest for a defaults write: `devices` materializes as an
  * explicit empty map (NOT 'all') so `agents apply` targets nothing until the

package/dist/lib/devices/connect.d.ts

@@ -91,7 +91,7 @@ export declare function markFleetRemote(cmd: string[], device: Pick<DeviceProfil
  */
 export declare function buildInteractiveShellCommand(device: DeviceProfile, mirrorCwd: string | undefined): string | undefined;
 /** Host-key posture for {@link buildSshInvocation}. */
-export interface SshHostKeyOptions {
+interface SshHostKeyOptions {
     /**
      * True when the device's host key is already pinned in the managed
      * known_hosts store — connections then verify with `StrictHostKeyChecking=yes`
@@ -162,3 +162,4 @@ export declare function buildAskpassShimBody(launch?: {
  * protocol back into the CLI, which then resolves the bundle.
  */
 export declare function writeAskpassShim(): string;
+export {};

package/dist/lib/devices/discovery-policy.d.ts

@@ -1,5 +1,5 @@
-export type DeviceDiscoveryStatus = 'approved' | 'ignored';
-export interface DeviceDiscoveryReconcileResult {
+type DeviceDiscoveryStatus = 'approved' | 'ignored';
+interface DeviceDiscoveryReconcileResult {
     approved: string[];
     ignored: string[];
     registered: string[];
@@ -40,3 +40,4 @@ export declare function loadDeviceDiscoveryPolicies(): Map<string, DeviceDiscove
 export declare function reconcileDeviceDiscoveryPolicies(): Promise<DeviceDiscoveryReconcileResult>;
 /** Complete reconciliation from real `tailscale status --json` output. */
 export declare function registerApprovedDevicesFromTailscale(json: string, approved: string[], ignored: string[], missing: string[]): Promise<DeviceDiscoveryReconcileResult>;
+export {};

package/dist/lib/devices/doctor-findings.js

@@ -244,7 +244,7 @@ export function remediationFor(finding) {
         case 'content-drift':
         case 'stale':
             // doctor diagnoses; `agents sync` fixes (the superset of the old
-            // `doctor --fix`). A bare `agents sync <agent>` hits only the default
+            // `agents sync`). A bare `agents sync <agent>` hits only the default
             // version, so an agent-only row collapsed across versions must ask for
             // @all to reach every one it covers.
             if (agent && version)

package/dist/lib/devices/doctor-overview-cache.d.ts

@@ -1,7 +1,7 @@
 /** Serve a cached snapshot without recomputing while it is younger than this. */
 export declare const DOCTOR_OVERVIEW_FRESH_MS = 90000;
 /** Injectable IO + clock so tests exercise the real fs at a temp dir, no mocks. */
-export interface DoctorOverviewCacheDeps {
+interface DoctorOverviewCacheDeps {
     /** Cache directory (default: the real `~/.agents/.cache`). */
     dir?: string;
     /** Clock (default: {@link Date.now}). */
@@ -29,7 +29,7 @@ export declare function invalidateDoctorOverviewCache(deps?: DoctorOverviewCache
  *    the way out. Call `release()` in a `finally` so a compute that throws still
  *    frees the lock promptly (idempotent).
  */
-export interface OverviewGate {
+interface OverviewGate {
     cached: string | null;
     release?: () => void;
 }
@@ -50,3 +50,4 @@ export declare function enterDoctorOverviewGate(opts?: {
     forceRefresh?: boolean;
     freshMs?: number;
 }, deps?: DoctorOverviewCacheDeps): Promise<OverviewGate>;
+export {};

package/dist/lib/devices/fleet-divergence.d.ts

@@ -111,7 +111,7 @@ export interface FleetDivergence {
     /** Human-readable one-liner, ready for the warnings list. */
     message: string;
 }
-export interface FleetDivergenceReport {
+interface FleetDivergenceReport {
     /** Name of the device used as the comparison baseline (the local machine). */
     baseline: string;
     divergences: FleetDivergence[];
@@ -132,3 +132,4 @@ export interface FleetDivergenceReport {
  * JSON output — and the tests — are stable.
  */
 export declare function compareFleetInventories(devices: DeviceInventory[], baselineName: string): FleetDivergenceReport;
+export {};

package/dist/lib/devices/fleet.d.ts

@@ -10,8 +10,6 @@
 import type { DeviceProfile, DeviceRegistry } from './registry.js';
 import type { DeviceStats } from './health.js';
 export type FleetSkipReason = 'offline' | 'no-address';
-/** npm dist-tags / semver pins only — rejects shell metacharacters. */
-export declare const FLEET_VERSION_RE: RegExp;
 export interface FleetTarget {
     device: DeviceProfile;
     /** When set, this device is not reached (skip with reason). */
@@ -112,7 +110,7 @@ export declare function runLocalCommand(cmd: string[], opts?: {
  * cannot inject shell metacharacters into the remote command line.
  */
 export declare function upgradeCommand(version?: string): string[];
-export interface RunFleetOptions {
+interface RunFleetOptions {
     /**
      * Name of THIS machine. Its target runs the command **locally** (no ssh) — a
      * box can't reliably ssh to itself and doesn't need to. Omit to ssh every
@@ -132,7 +130,7 @@ export interface RunFleetOptions {
  * recorded as `failed` so one bad device never aborts the rest.
  */
 export declare function runFleet(targets: FleetTarget[], cmd: string[], opts?: RunFleetOptions): FleetRunResult[];
-export interface FanOutDeviceOptions {
+interface FanOutDeviceOptions {
     /**
      * Per-device deadline in milliseconds. When set, any probe that does not
      * settle within this window is abandoned via `Promise.race` against a
@@ -149,3 +147,4 @@ export interface FanOutDeviceOptions {
 }
 /** Run one async probe per device in parallel, preserving input order. */
 export declare function fanOutDevices<T, Target extends FanOutDeviceTarget = FanOutDeviceTarget>(targets: Target[], probe: (target: Target) => Promise<T>, opts?: FanOutDeviceOptions): Promise<FanOutDeviceResult<T>[]>;
+export {};