@phnx-labs/agents-cli 1.22.113 → 1.22.114

package/dist/lib/hosts/passthrough.d.ts

@@ -103,7 +103,7 @@ export declare function renderForwardDecision(command: string, allArgs: string[]
     env?: Record<string, string>;
 };
 /** Injectable dependencies for {@link runFleetPassthrough} — used by tests. */
-export interface FleetPassthroughOptions {
+interface FleetPassthroughOptions {
     /** Override the device registry loader (tests). */
     loadDevices?: () => Promise<DeviceRegistry>;
     /** Override the per-device runner (tests). Defaults to `runOnDevice`. */

package/dist/lib/hosts/passthrough.js

@@ -107,7 +107,6 @@ export const REMOTE_PASSTHROUGH = {
     worktree: {},
     events: {},
     feedback: {},
-    pty: {},
     tmux: {},
     watchdog: {},
     factory: {},

package/dist/lib/hosts/progress.d.ts

@@ -131,11 +131,6 @@ export declare function buildStreamingFollowCommand(opts: {
 }): string;
 /** Extract the remote watcher frame from stderr, if the stream ended normally. */
 export declare function parseStreamingExitFrame(stderr: Buffer, taskId: string): Buffer | null;
-/**
- * File identity (`dev:ino`) of a path on the remote host, or null if it can't be
- * stat'd. GNU (`-c`) then BSD (`-f`) format, so it works on Linux and macOS hosts.
- */
-export declare function readRemoteFileId(target: string, remotePath: string, extraSshArgs?: string[]): string | null;
 /**
  * True when the local mirror file IS the very file we're tailing — the
  * localhost-as-host case, where `remoteLog` ($HOME-expanded) and `localLogPath`

package/dist/lib/hosts/progress.js

@@ -177,7 +177,7 @@ export function parseStreamingExitFrame(stderr, taskId) {
  * File identity (`dev:ino`) of a path on the remote host, or null if it can't be
  * stat'd. GNU (`-c`) then BSD (`-f`) format, so it works on Linux and macOS hosts.
  */
-export function readRemoteFileId(target, remotePath, extraSshArgs) {
+function readRemoteFileId(target, remotePath, extraSshArgs) {
     const res = sshExec(target, `stat -c '%d:%i' ${remotePath} 2>/dev/null || stat -f '%d:%i' ${remotePath} 2>/dev/null`, { timeoutMs: 8000, extraSshArgs });
     const id = res.stdout.trim();
     return id || null;

package/dist/lib/hosts/ready.d.ts

@@ -24,8 +24,6 @@ export declare function probeHost(target: string, os?: string, extraSshArgs?: st
 };
 /** ssh command that prints the remote agents-cli version. Pure/exported. */
 export declare function buildRemoteVersionCommand(os?: string): string;
-/** Remote agents-cli version (PATH-resolved on the remote), or null if not installed. */
-export declare function remoteAgentsVersion(target: string, os?: string, extraSshArgs?: string[]): string | null;
 /** ssh command that installs/upgrades agents-cli to `spec` then `agents setup`.
  * PowerShell has no `tail`/`[ -d ]`/`||`, so the Windows branch uses native
  * equivalents (`Select-Object -Last`, `Test-Path`). Pure/exported. */
@@ -89,7 +87,7 @@ export declare function viewHasAgentVersion(view: string, agent: string, version
 /** Actionable fail-loud message for a missing remote pin (RUSH-2313). */
 export declare function missingPinnedVersionMessage(hostName: string, agent: string, version: string, installed?: string[]): string;
 /** Account eligibility extracted from one device's `agents view --json`. */
-export interface ViewAgentAccountEligibility {
+interface ViewAgentAccountEligibility {
     /** At least one account can launch immediately. */
     signedIn: boolean | undefined;
     /** At least one account can launch immediately or enter the harness login flow. */
@@ -111,7 +109,7 @@ export interface ViewAgentAccountEligibility {
  */
 export declare function viewAgentAccountEligibility(view: string, agent: string, now?: number): ViewAgentAccountEligibility;
 export declare function viewAgentSignedIn(view: string, agent: string): boolean | undefined;
-export interface EnsureReadyOptions {
+interface EnsureReadyOptions {
     agent: string;
     /**
      * Explicit version pin (e.g. `"0.145.0"`). Concrete pins fail loud when the
@@ -143,3 +141,4 @@ export declare function evaluateHostAgentInstall(view: string, opts: EnsureReady
 export declare function ensureHostReady(host: Host, opts: EnsureReadyOptions): {
     warnings: string[];
 };
+export {};

package/dist/lib/hosts/ready.js

@@ -64,14 +64,6 @@ export function buildRemoteVersionCommand(os) {
         ? buildWindowsAgentsCommand({ args: ['--version'] })
         : 'bash -lc "agents --version 2>/dev/null"';
 }
-/** Remote agents-cli version (PATH-resolved on the remote), or null if not installed. */
-export function remoteAgentsVersion(target, os, extraSshArgs = []) {
-    const r = sshExec(target, buildRemoteVersionCommand(os), { timeoutMs: 20000, extraSshArgs });
-    if (r.code !== 0)
-        return null;
-    const v = r.stdout.trim();
-    return v || null;
-}
 /** ssh command that installs/upgrades agents-cli to `spec` then `agents setup`.
  * PowerShell has no `tail`/`[ -d ]`/`||`, so the Windows branch uses native
  * equivalents (`Select-Object -Last`, `Test-Path`). Pure/exported. */

package/dist/lib/hosts/reconcile.d.ts

@@ -12,7 +12,7 @@
  */
 import { type SshExecResult } from '../ssh-exec.js';
 import { type HostTask } from './tasks.js';
-export type RemoteExitState = {
+type RemoteExitState = {
     state: 'running';
 } | {
     state: 'done';
@@ -31,13 +31,6 @@ export type RemoteExitState = {
  */
 export declare function classifyExit(res: Pick<SshExecResult, 'code' | 'stdout' | 'timedOut'>): RemoteExitState;
 export declare function readRemoteExit(target: string, remoteExit: string, timeoutMs?: number, identityFile?: string, remoteShell?: 'posix' | 'powershell'): RemoteExitState;
-/**
- * Async twin of {@link readRemoteExit} for the daemon's heartbeat tick — the ssh
- * read runs on the shared event loop, so it MUST NOT block it with a synchronous
- * `spawnSync('ssh', …)` (PHNX-3695). `sshExecAsync` applies the same
- * timeout/kill-grace bound.
- */
-export declare function readRemoteExitAsync(target: string, remoteExit: string, timeoutMs?: number, identityFile?: string, remoteShell?: 'posix' | 'powershell'): Promise<RemoteExitState>;
 /**
  * Heal one record. Terminal records are immutable (and never re-probed); a
  * `running` record is resolved to completed/failed only when the remote `.exit`
@@ -59,3 +52,4 @@ export declare function reconcileTaskAsync(task: HostTask): Promise<HostTask>;
  */
 export declare function reconcileRunningTasks(tasks: HostTask[]): HostTask[];
 export declare function reachabilityProbeCommand(remoteShell?: 'posix' | 'powershell'): string;
+export {};

package/dist/lib/hosts/reconcile.js

@@ -57,7 +57,7 @@ export function readRemoteExit(target, remoteExit, timeoutMs = 6000, identityFil
  * `spawnSync('ssh', …)` (PHNX-3695). `sshExecAsync` applies the same
  * timeout/kill-grace bound.
  */
-export async function readRemoteExitAsync(target, remoteExit, timeoutMs = 6000, identityFile, remoteShell = 'posix') {
+async function readRemoteExitAsync(target, remoteExit, timeoutMs = 6000, identityFile, remoteShell = 'posix') {
     return classifyExit(await sshExecAsync(target, remoteExitCommand(remoteExit, remoteShell), remoteExitSshOpts(timeoutMs, identityFile)));
 }
 /**

package/dist/lib/hosts/reconnect.d.ts

@@ -34,7 +34,7 @@ export interface ReconnectOutcome {
     /** How long the interactive attach held after the probe returned. */
     heldMs: number;
 }
-export type ReconnectDecision = {
+type ReconnectDecision = {
     action: 'stop';
     code: number;
 } | {
@@ -81,8 +81,6 @@ export type ReconnectTarget = {
     kind: 'launch';
     id: string;
 };
-/** The short form shown to a human. Both kinds are uuid-shaped, so 8 chars reads the same. */
-export declare function targetLabel(target: ReconnectTarget): string;
 /**
  * The command a user can run to re-enter a session after reconnect gives up.
  * The full id is printed on its own line so it remains copyable after a drop.
@@ -124,7 +122,7 @@ export declare function afterInteractiveRemoteExit(opts: {
     notice: string | undefined;
 };
 /** Inputs the launcher has once its interactive stream has returned. */
-export interface ReconnectTargetInputs {
+interface ReconnectTargetInputs {
     agent: string;
     sessionId?: string;
     resolvedId?: string;
@@ -141,13 +139,7 @@ export declare function pickReconnectTarget(inputs: ReconnectTargetInputs): Reco
  * a network drop. No `--attach-only`: focus resumes in place when no pane survived.
  */
 export declare function reattachRemoteCommand(target: ReconnectTarget): string;
-/**
- * Re-attach the live remote pane by driving the peer's `agents sessions focus`.
- * A fast preflight probe decides reachability; only then do we run the
- * interactive attach/resume. Returns the exit code, connected bit, and hold time.
- */
-export declare function reattachRemoteSession(host: Host, target: ReconnectTarget): ReconnectOutcome;
-export interface ReconnectLoopOpts {
+interface ReconnectLoopOpts {
     host: Host;
     target: ReconnectTarget;
     /** Exit code from the initial interactive run (treated as connected). */
@@ -159,3 +151,4 @@ export interface ReconnectLoopOpts {
 }
 /** Drive the reconnect loop from the initial run's outcome to a terminal code. */
 export declare function reconnectInteractiveSession(opts: ReconnectLoopOpts): Promise<number>;
+export {};

package/dist/lib/hosts/reconnect.js

@@ -112,7 +112,7 @@ export function wrapRemoteExitCode(cmd) {
     return `bash -lc ${shellQuote(guarded)}`;
 }
 /** The short form shown to a human. Both kinds are uuid-shaped, so 8 chars reads the same. */
-export function targetLabel(target) {
+function targetLabel(target) {
     return target.id.slice(0, 8);
 }
 /**
@@ -201,7 +201,7 @@ export function reattachRemoteCommand(target) {
  * A fast preflight probe decides reachability; only then do we run the
  * interactive attach/resume. Returns the exit code, connected bit, and hold time.
  */
-export function reattachRemoteSession(host, target) {
+function reattachRemoteSession(host, target) {
     const sshTarget = sshTargetFor(host);
     const extraSshArgs = hostIdentityArgs(host);
     // Fresh (non-multiplexed) reachability probe: only a completed handshake is

package/dist/lib/hosts/registry.d.ts

@@ -30,7 +30,7 @@ export declare function getAllProviders(): HostProvider[];
  * doesn't hold, and lets dispatch callers apply the device-only refusal
  * (password auth) without re-reading the registry.
  */
-export interface ResolvedHost extends Host {
+interface ResolvedHost extends Host {
     device?: DeviceProfile;
     /** True when the host is a synthesized ad-hoc `user@host` / IP / FQDN literal
      * (never registered) rather than a device or overlay/ssh-config match. Lets the

package/dist/lib/hosts/remote-cmd.d.ts

@@ -33,7 +33,7 @@ export declare function stripRoutingFlags(args: string[], specs: StripSpec[]): s
  */
 export declare const HOST_ROUTING_SPECS: StripSpec[];
 /** How one `agents run` option behaves when the run is offloaded with `--device`. */
-export type RunOptionForwarding = 
+type RunOptionForwarding = 
 /** Appended to the remote `agents run` argv — same behavior local or remote. */
 'forward'
 /** Refused with an actionable error BEFORE dispatch — never silently dropped. */
@@ -79,7 +79,7 @@ export declare function buildRemoteAgentsInvocation(forwardedArgs: string[], rem
  */
 export declare function posixEnvExports(env?: Record<string, string>): string;
 /** The two remote shell dialects we build commands for. */
-export type RemoteShell = 'posix' | 'powershell';
+type RemoteShell = 'posix' | 'powershell';
 /**
  * Pick the remote shell dialect from a recorded OS/platform string. A Windows
  * host (device-registry `platform: 'windows'`, or an enrolled `HostEntry.os`
@@ -105,7 +105,7 @@ export declare function encodePowershell(script: string): string;
  * back to its script. Used by tests to assert on the built command. */
 export declare function decodePowershell(encoded: string): string;
 /** A single `agents …` invocation to run on a Windows remote. */
-export interface WindowsAgentsCommand {
+interface WindowsAgentsCommand {
     /** `agents` argv (command name NOT included; `agents` is prepended). */
     args: string[];
     /** Env vars scoped to this invocation (POSIX `VAR=val` ↔ PS `$env:VAR=…`). */
@@ -192,3 +192,4 @@ export declare function buildWindowsStdinImportCommand(bundle: string, opts?: {
     force?: boolean;
     policyNever?: boolean;
 }): string;
+export {};

package/dist/lib/hosts/session-index.d.ts

@@ -18,7 +18,7 @@
  */
 import type { SessionMeta } from '../session/types.js';
 import { type HostTask } from './tasks.js';
-export interface HostSessionContext {
+interface HostSessionContext {
     /** Local directory the `agents run --device` was invoked from. */
     cwd: string;
     /** Prompt the run was launched with, used for the session topic. */
@@ -53,7 +53,7 @@ export declare function registerHostSession(task: HostTask, ctx: HostSessionCont
  * missing/unreadable mirror or absent marker yields null, never an exception.
  */
 export declare function captureRemoteSessionId(task: HostTask): HostTask | null;
-export interface InteractiveHostSessionContext {
+interface InteractiveHostSessionContext {
     cwd: string;
     host: string;
     agent: string;
@@ -68,3 +68,4 @@ export interface InteractiveHostSessionContext {
  * surface and resume it by id.
  */
 export declare function registerInteractiveHostSession(ctx: InteractiveHostSessionContext): void;
+export {};

package/dist/lib/hosts/ssh-config.d.ts

@@ -19,11 +19,9 @@ export declare function parseSshConfigHosts(content: string): string[];
 export declare function parseKnownHosts(content: string): string[];
 /** `Host` names from ~/.ssh/config, following `Include` globs (best-effort). */
 export declare function listSshConfigHosts(): string[];
-/** Hostnames recorded in ~/.ssh/known_hosts (hashed entries skipped). */
-export declare function listKnownHosts(): string[];
 /** True if `name` is a concrete `Host` stanza in ssh config. */
 export declare function isSshConfigHost(name: string): boolean;
-export interface SshGResult {
+interface SshGResult {
     hostname?: string;
     user?: string;
     port?: string;
@@ -35,3 +33,4 @@ export interface SshGResult {
  * to decide whether a name is actually configured.
  */
 export declare function sshResolve(name: string): SshGResult | undefined;
+export {};

package/dist/lib/hosts/ssh-config.js

@@ -12,7 +12,6 @@ import { spawnSync } from 'child_process';
 import { assertValidSshTarget } from '../ssh-exec.js';
 const SSH_DIR = path.join(os.homedir(), '.ssh');
 const SSH_CONFIG = path.join(SSH_DIR, 'config');
-const KNOWN_HOSTS = path.join(SSH_DIR, 'known_hosts');
 /**
  * Parse `Host` stanza names from ssh config text. Wildcard/negated patterns
  * (`*`, `?`, `!`) are skipped — they're match rules, not concrete hosts.
@@ -110,15 +109,6 @@ function globMaybe(pattern) {
         return [];
     }
 }
-/** Hostnames recorded in ~/.ssh/known_hosts (hashed entries skipped). */
-export function listKnownHosts() {
-    try {
-        return parseKnownHosts(fs.readFileSync(KNOWN_HOSTS, 'utf-8'));
-    }
-    catch {
-        return [];
-    }
-}
 /** True if `name` is a concrete `Host` stanza in ssh config. */
 export function isSshConfigHost(name) {
     return listSshConfigHosts().includes(name);

package/dist/lib/humans.d.ts

@@ -1,6 +1,4 @@
 import type { HumansConfig, HumanOwner } from './types.js';
-export declare const HUMANS_VERSION: 1;
-export declare const HUMANS_HEADER = "# humans.yaml \u2014 owner identity and notification channels\n# Managed by agents-cli. See: agents humans --help\n";
 /**
  * Read and parse humans.yaml. Returns null when the file does not exist or
  * is not a valid v1 config — never throws.

package/dist/lib/humans.js

@@ -10,8 +10,8 @@
 import * as fs from 'fs';
 import * as yaml from 'yaml';
 import { getHumansFilePath } from './state.js';
-export const HUMANS_VERSION = 1;
-export const HUMANS_HEADER = `# humans.yaml — owner identity and notification channels
+const HUMANS_VERSION = 1;
+const HUMANS_HEADER = `# humans.yaml — owner identity and notification channels
 # Managed by agents-cli. See: agents humans --help
 `;
 /**

package/dist/lib/import.d.ts

@@ -17,12 +17,12 @@
  * true.
  */
 import type { AgentId } from './types.js';
-export interface ImportConfigResult {
+interface ImportConfigResult {
     success: boolean;
     skipped?: boolean;
     error?: string;
 }
-export interface ImportBinaryResult {
+interface ImportBinaryResult {
     success: boolean;
     skipped?: boolean;
     error?: string;
@@ -60,7 +60,7 @@ export declare function finalizeImport(agentId: AgentId, version: string): void;
  * farm from the AGENTS registry, which keeps the function pure and avoids
  * fragile coupling in test setups that stub `lib/agents.ts`.
  */
-export interface AgentBinarySpec {
+interface AgentBinarySpec {
     /** Agent id used in the marker package.json (`agents-{agentId}-{version}`). */
     agentId: string;
     /** npm package name (e.g. `openclaw`) — used as the `node_modules/<name>` dir. */
@@ -136,3 +136,4 @@ export declare function seedIsolatedConfigFromLocal(agentId: AgentId, version: s
     skippedRuntime: string[];
     error?: string;
 };
+export {};

package/dist/lib/installations/installation-lock.d.ts

@@ -1,6 +1,4 @@
 import { type FileLockOptions } from '../fs-atomic.js';
 import { type AgentId } from '../types.js';
 export declare function installationLockTarget(agent: AgentId, label: string): string;
-export declare const INSTALLATION_LOCK_STALE_MS: number;
-export declare const INSTALLATION_LOCK_ACQUIRE_TIMEOUT_MS: number;
 export declare const INSTALLATION_LOCK_OPTIONS: Required<FileLockOptions>;

package/dist/lib/installations/installation-lock.js

@@ -20,8 +20,8 @@ export function installationLockTarget(agent, label) {
     ensureLockTarget(target, '', 0o700);
     return target;
 }
-export const INSTALLATION_LOCK_STALE_MS = 10 * 60_000;
-export const INSTALLATION_LOCK_ACQUIRE_TIMEOUT_MS = 5 * 60_000;
+const INSTALLATION_LOCK_STALE_MS = 10 * 60_000;
+const INSTALLATION_LOCK_ACQUIRE_TIMEOUT_MS = 5 * 60_000;
 export const INSTALLATION_LOCK_OPTIONS = {
     staleMs: INSTALLATION_LOCK_STALE_MS,
     acquireTimeoutMs: INSTALLATION_LOCK_ACQUIRE_TIMEOUT_MS,

package/dist/lib/installations/launch-gate.d.ts

@@ -44,15 +44,6 @@ import type { AgentId } from '../types.js';
  * work here serializes launches against each other unnecessarily.
  */
 export declare function withLaunchGate<T>(agent: AgentId, label: string, fn: () => T): Promise<T>;
-/**
- * Acquire the per-installation update lock, register a launch lease for
- * `pid`, then release. For a caller that already has its own pid before the
- * risky operation (the native shim's `$$`, exec-replaced so the pid is
- * final) — a Node caller that spawns a child should use {@link withLaunchGate}
- * around the spawn itself instead, since here the process already exists by
- * the time the lock is acquired.
- */
-export declare function acquireLaunchGate(agent: AgentId, label: string, pid: number): Promise<() => void>;
 /** Keep a live launcher's lease until its operation ends, without holding the lock. */
 export declare function withInstallationLease<T>(agent: AgentId, label: string, fn: () => Promise<T>): Promise<T>;
 /**

package/dist/lib/installations/launch-gate.js

@@ -91,7 +91,7 @@ export async function withLaunchGate(agent, label, fn) {
  * around the spawn itself instead, since here the process already exists by
  * the time the lock is acquired.
  */
-export async function acquireLaunchGate(agent, label, pid) {
+async function acquireLaunchGate(agent, label, pid) {
     return withLaunchGate(agent, label, () => recordLaunchLease(agent, label, pid));
 }
 /** Keep a live launcher's lease until its operation ends, without holding the lock. */

package/dist/lib/installations/migrate.d.ts

@@ -45,17 +45,6 @@ export declare function migrateRoutineDeviceToDevices(routinesDir?: string): voi
  * Idempotent: a file with only `cwd` (already migrated) is skipped.
  */
 export declare function migrateRoutineRemoteCwdToCwd(routinesDir?: string): void;
-/**
- * Pause every currently-active routine whose execution context no longer
- * resolves ready (RUSH-2290). An agent/workflow routine with no project/cwd, a
- * missing directory, or a non-portable path used to fire and fail every tick —
- * the mass auth_failed / untrusted-home storm this ticket exists to stop. After
- * the fold, such a routine is deactivated on THIS device (only), preventing it
- * from being scheduled until `agents routines doctor --all --fix` (or a repair +
- * `resume`) makes it ready. Never materializes a device manifest that does not
- * yet exist, and never touches command routines (they run in the target home).
- */
-export declare function pauseUnreadyEnabledRoutines(): void;
 /**
  * Fold the legacy watchdog enable sentinel into the `watchdog.enabled` config.
  *

package/dist/lib/installations/migrate.js

@@ -1871,7 +1871,7 @@ export function migrateRoutineRemoteCwdToCwd(routinesDir) {
  * `resume`) makes it ready. Never materializes a device manifest that does not
  * yet exist, and never touches command routines (they run in the target home).
  */
-export function pauseUnreadyEnabledRoutines() {
+function pauseUnreadyEnabledRoutines() {
     const enabled = enabledRoutineNames();
     if (enabled === null)
         return; // no manifest yet — nothing activated to pause

package/dist/lib/installations/shims.d.ts

@@ -358,7 +358,7 @@ export declare function listShimFileNames(): string[];
 /**
  * Prune a stale, orphaned shim: one that is NOT a managed agent shim and NOT a user
  * alias, whose baked `AGENTS_BIN` points at an install that no longer exists. These
- * are `exec "$AGENTS_BIN" <cmd>` command shims (browser/sessions/pty/teams) that
+ * are `exec "$AGENTS_BIN" <cmd>` command shims (browser/teams) that
  * `scripts/postinstall.js` writes for the LIVE install; one baked at a removed
  * install either dies with `exit 127` or shadows the real package bin on PATH.
  * Only removed when the baked target is gone, so a working shim is never touched —

package/dist/lib/installations/shims.js

@@ -2197,11 +2197,11 @@ export function listShimFileNames() {
  * `computer` bin of its own: a machine that installed an older CLI has a real
  * shim on PATH under the name the standalone engine now owns.
  */
-const LEGACY_SHIMS_ALWAYS_PRUNED = new Set(['secrets', 'sessions', 'computer']);
+const LEGACY_SHIMS_ALWAYS_PRUNED = new Set(['secrets', 'sessions', 'computer', 'pty']);
 /**
  * Prune a stale, orphaned shim: one that is NOT a managed agent shim and NOT a user
  * alias, whose baked `AGENTS_BIN` points at an install that no longer exists. These
- * are `exec "$AGENTS_BIN" <cmd>` command shims (browser/sessions/pty/teams) that
+ * are `exec "$AGENTS_BIN" <cmd>` command shims (browser/teams) that
  * `scripts/postinstall.js` writes for the LIVE install; one baked at a removed
  * install either dies with `exit 127` or shadows the real package bin on PATH.
  * Only removed when the baked target is gone, so a working shim is never touched —

package/dist/lib/installations/update-runtime.js

@@ -299,7 +299,7 @@ async function runAutoUpdatePassUntilCancelled(opts, cancelled) {
             // (`ensureShimCurrent`/`ensureVersionedAliasCurrent`). Deliberately
             // NEVER `adoptShadowingLauncher`: that seizes a launcher this pass does
             // not own (a user's own PATH entry, or another install's), and is an
-            // operator-triggered `doctor --fix` action, not something an unattended
+            // operator-triggered `agents sync` action, not something an unattended
             // background pass may do on its own. Real-pass-only, same reason as the
             // migration above — a `--check` preview must not touch PATH or a
             // config-dir symlink.

package/dist/lib/linear-cache.d.ts

@@ -42,7 +42,7 @@ export declare const LINEAR_CACHE_TTL_MS: number;
  */
 export declare function resolveLinearApiKey(): string | null;
 /** What a lookup found, and how much to trust it. */
-export interface CacheHit<T> {
+interface CacheHit<T> {
     value: T;
     /** Age in ms. Past the TTL the value is still returned, flagged stale. */
     ageMs: number;
@@ -68,3 +68,4 @@ export declare function parseRateLimitReset(header: string | null, nowMs: number
  * `resetAtMs` comes from {@link parseRateLimitReset}; without it, back off one TTL.
  */
 export declare function noteRateLimited(resetAtMs: number | undefined, nowMs: number): void;
+export {};

package/dist/lib/linux-userns.d.ts

@@ -13,7 +13,7 @@ export interface UsernsStatus {
     reason?: string;
 }
 /** The raw signals the pure interpreter reasons over. */
-export interface UsernsInputs {
+interface UsernsInputs {
     platform: NodeJS.Platform;
     /**
      * Contents of {@link APPARMOR_USERNS_SYSCTL_PATH} trimmed, or null when the
@@ -54,5 +54,4 @@ export declare function probeUnshare(): 'ok' | 'denied' | 'no-tool';
  * short-circuits to `ok` without spawning anything.
  */
 export declare function probeUnprivilegedUserns(platform?: NodeJS.Platform): UsernsStatus;
-/** Test-only: drop the process cache so a test can re-probe. */
-export declare function resetUsernsCacheForTests(): void;
+export {};

package/dist/lib/linux-userns.js

@@ -110,7 +110,3 @@ export function probeUnprivilegedUserns(platform = process.platform) {
     });
     return cached;
 }
-/** Test-only: drop the process cache so a test can re-probe. */
-export function resetUsernsCacheForTests() {
-    cached = null;
-}

package/dist/lib/loop.d.ts

@@ -40,7 +40,7 @@ export interface LoopSignal {
 /** Why the loop stopped. Mirrors the teams supervisor exit reasons. */
 export type LoopStoppedBy = 'condition-met' | 'budget' | 'stalled' | 'max' | 'signal' | 'error';
 /** Result of a loop run. */
-export interface LoopResult {
+interface LoopResult {
     /** Iterations actually executed. */
     iterations: number;
     stoppedBy: LoopStoppedBy;
@@ -152,3 +152,4 @@ export declare function defaultRunIteration(options: ExecOptions): Promise<Itera
  *   - `error`         — an iteration threw or exited non-zero.
  */
 export declare function runLoop(execOptions: ExecOptions, loop: LoopConfig, ctx: LoopContext, deps?: LoopDeps): Promise<LoopResult>;
+export {};

package/dist/lib/mailbox-gc.d.ts

@@ -6,7 +6,7 @@ export interface GcResult {
     consumedPruned: number;
     blocksRemoved: number;
 }
-export interface GcOptions {
+interface GcOptions {
     root?: string;
     /** Feed store root. Defaults to getFeedDir(). */
     feedRoot?: string;
@@ -20,3 +20,4 @@ export interface GcOptions {
  * mailbox. For live boxes, drop expired messages and prune old consumed files.
  */
 export declare function gcMailbox(activeBoxIds: Set<string>, options?: GcOptions): GcResult;
+export {};

package/dist/lib/mailbox-target.d.ts

@@ -6,7 +6,7 @@
  */
 import type { ActiveSession } from './session/active.js';
 import type { HostTask } from './hosts/tasks.js';
-export type MessageResolution = {
+type MessageResolution = {
     kind: 'cloud';
     id: string;
 } | {
@@ -61,3 +61,4 @@ export type HostTaskRoute = {
  * latter.
  */
 export declare function decideHostTaskRoute(task: HostTask | null, target: string): HostTaskRoute;
+export {};

package/dist/lib/mailbox.d.ts

@@ -2,12 +2,6 @@
 export declare const DEFAULT_TTL_SECONDS: number;
 /** Env var that overrides {@link DEFAULT_TTL_SECONDS} with a duration like "24h" or "3600". */
 export declare const MAILBOX_TTL_ENV = "AGENTS_MAILBOX_TTL";
-/**
- * Resolve the default mailbox TTL in seconds. Honors `AGENTS_MAILBOX_TTL`
- * (parsed by {@link parseDuration}); falls back to 24h. A malformed env value
- * fails loud instead of silently disabling expiry.
- */
-export declare function resolveDefaultTtlSeconds(): number;
 /** A single mailbox message. `text` may embed `host:/path` clip tokens. */
 export interface MailboxMessage {
     /** Unique, time-sortable id. Also the on-disk filename stem. */

package/dist/lib/mailbox.js

@@ -30,7 +30,7 @@ export const MAILBOX_TTL_ENV = 'AGENTS_MAILBOX_TTL';
  * (parsed by {@link parseDuration}); falls back to 24h. A malformed env value
  * fails loud instead of silently disabling expiry.
  */
-export function resolveDefaultTtlSeconds() {
+function resolveDefaultTtlSeconds() {
     const raw = process.env[MAILBOX_TTL_ENV];
     if (raw == null || raw === '')
         return DEFAULT_TTL_SECONDS;

package/dist/lib/manifest.d.ts

@@ -1,20 +1,6 @@
 import type { Manifest } from './types.js';
 /** Canonical filename for the manifest in any agents repo or project root. */
 export declare const MANIFEST_FILENAME = "agents.yaml";
-/** Parse a YAML string into a typed Manifest object. */
-export declare function parseManifest(content: string): Manifest;
-/**
- * Serialize a Manifest to YAML WITHOUT destroying hand-written comments.
- *
- * Plain `yaml.stringify(manifest)` drops every comment, so `agents mcp add`
- * (and every other writeManifest caller) used to clobber annotations in
- * agents.yaml. Matching `serializeCentral` in state.ts: when existing file
- * text is provided, parse it into a `yaml.Document` (comments + key order
- * preserved) and edit only keys that actually changed. Untouched keys and
- * their comments stay byte-stable. Falls back to plain stringify when there
- * is no existing document yet.
- */
-export declare function serializeManifest(manifest: Manifest, existingContent?: string | null): string;
 /** Read and parse agents.yaml from a directory. Returns null if the file does not exist. */
 export declare function readManifest(repoPath: string): Manifest | null;
 /** Write a Manifest object to agents.yaml in the given directory. */

package/dist/lib/manifest.js

@@ -14,7 +14,7 @@ export const MANIFEST_FILENAME = 'agents.yaml';
 // Per-path re-entrancy depth so withManifestLock is safe against recursive calls.
 const manifestLockDepth = new Map();
 /** Parse a YAML string into a typed Manifest object. */
-export function parseManifest(content) {
+function parseManifest(content) {
     return yaml.parse(content);
 }
 /**
@@ -28,7 +28,7 @@ export function parseManifest(content) {
  * their comments stay byte-stable. Falls back to plain stringify when there
  * is no existing document yet.
  */
-export function serializeManifest(manifest, existingContent) {
+function serializeManifest(manifest, existingContent) {
     const entries = Object.entries(manifest).filter(([, v]) => v !== undefined);
     const isEmpty = entries.length === 0;
     if (existingContent == null || existingContent.trim() === '') {

package/dist/lib/mcp-registry.d.ts

@@ -19,7 +19,7 @@ export type McpFormat =
 /** `{ schema_version, mcp_servers: { "<name>": {transport, ..., enabled} } }` */
  | 'muse-json';
 /** The complete MCP contract for one agent. */
-export interface McpTarget {
+interface McpTarget {
     /** MCP config file under a HOME root (a version home, or the real HOME). */
     home(home: string): string;
     /** Project-scoped MCP config file for a repo at `cwd`. */
@@ -60,3 +60,4 @@ export declare function mcpTarget(agent: AgentId): McpTarget | undefined;
  * MCP-capable, or a hard-deprecated id), or it has one with `format: null`.
  */
 export declare function mcpWriteUnsupportedReason(agent: AgentId): string | null;
+export {};