@phnx-labs/agents-cli 1.22.113 → 1.22.114

package/dist/lib/account-registry.d.ts

@@ -12,7 +12,7 @@ export interface AccountRegistryDocument {
     version: 2;
     accounts: Record<string, CredentialAccount>;
 }
-export interface ResolvedCredentialAccount {
+interface ResolvedCredentialAccount {
     id: string;
     name: string;
     provider: string;
@@ -27,7 +27,6 @@ export { registeredNativeAccountForEmail, parseNativeIdentityKey } from './nativ
 export type UnifiedAccount = (CredentialAccount & {
     kind: 'provider';
 }) | NativeAccount;
-export declare function accountRegistryPath(base?: string): string;
 export declare function readAccountRegistry(base?: string): AccountRegistryDocument;
 export declare function findAccount(name: string, doc?: AccountRegistryDocument): CredentialAccount | null;
 /**
@@ -113,7 +112,7 @@ export declare function unbindAccount(nameOrId: string, target: string, preferAg
 /** Every target bound to `accountId`: this box's device-doc bindings merged over
  * the fleet-shared central bindings (PHNX-3315). */
 export declare function accountBindings(accountId: string, meta: Pick<Meta, 'accounts' | 'deviceAccounts'>): string[];
-export interface AccountSelection {
+interface AccountSelection {
     id: string;
     source: 'explicit' | 'binding' | 'default';
 }
@@ -122,7 +121,7 @@ export declare function resolveAccountSelection(explicit: string | undefined, ag
     useDefault?: boolean;
     target?: string;
 }): AccountSelection | undefined;
-export interface AddAccountOptions {
+interface AddAccountOptions {
     baseUrl?: string;
 }
 export declare function addAccount(name: string, provider: string, auth: AccountAuthKind, secret: string, base?: string, opts?: AddAccountOptions): CredentialAccount;

package/dist/lib/account-registry.js

@@ -32,7 +32,7 @@ export { registeredNativeAccountForEmail, parseNativeIdentityKey } from './nativ
 const NAME = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
 const NATIVE_LABEL = /^[a-zA-Z0-9][a-zA-Z0-9@._+-]*$/;
 const AUTH_KINDS = ['api-key', 'setup-token', 'bearer-token'];
-export function accountRegistryPath(base = getUserAgentsDir()) { return path.join(base, 'accounts.yaml'); }
+function accountRegistryPath(base = getUserAgentsDir()) { return path.join(base, 'accounts.yaml'); }
 function assertName(name) {
     if (!NAME.test(name))
         throw new Error('Account name must start with a letter or number and contain only letters, numbers, dot, underscore, or dash.');

package/dist/lib/accounting/account-launch.d.ts

@@ -1,8 +1,8 @@
 import type { AgentId, Meta } from '../types.js';
 import { type RotateCandidate } from './rotate.js';
-export type ResolvedLaunchAccountKind = 'native' | 'provider' | 'legacy-native';
+type ResolvedLaunchAccountKind = 'native' | 'provider' | 'legacy-native';
 /** Safe account identity that may be passed between launch consumers. */
-export interface ResolvedLaunchAccount {
+interface ResolvedLaunchAccount {
     kind: ResolvedLaunchAccountKind;
     /** Stable registry id, or the durable identity key for an unmigrated login. */
     id: string;
@@ -29,7 +29,7 @@ export interface ResolvedLocalAccountLaunch {
     signedIn: boolean | null;
     email: string | null;
 }
-export interface ResolveLocalAccountLaunchOptions {
+interface ResolveLocalAccountLaunchOptions {
     agent: AgentId;
     /** Selects the executable only. It never chooses account state. */
     executableVersion: string;
@@ -52,3 +52,4 @@ export interface ResolveLocalAccountLaunchOptions {
  * never rediscovered by scanning homes for identity.
  */
 export declare function resolveLocalAccountLaunch(options: ResolveLocalAccountLaunchOptions): Promise<ResolvedLocalAccountLaunch>;
+export {};

package/dist/lib/accounting/account-pool.d.ts

@@ -29,7 +29,7 @@ export interface RegistryAccountRecord {
     secretPresent: boolean;
 }
 /** A registry account eligible to run one harness, ready to map to a candidate. */
-export interface RegistryAccountInput {
+interface RegistryAccountInput {
     id?: string;
     /** Agent-scoped key so `(claude, X)` and `(codex, X)` stay distinct. */
     accountKey: string;
@@ -58,3 +58,4 @@ export interface RegistryAccountInput {
  * candidate, never excluded.
  */
 export declare function registryPoolCandidates(records: RegistryAccountRecord[], agent: AgentId): RegistryAccountInput[];
+export {};

package/dist/lib/accounting/rotate.d.ts

@@ -116,8 +116,6 @@ export declare const RUN_STRATEGIES: RunStrategy[];
  * normalizes to `'balanced'` and uses the weighted-random algorithm.
  */
 export declare function normalizeRunStrategy(value: unknown): RunStrategy | null;
-/** Read project-local run strategy from the nearest agents.yaml, if present. */
-export declare function getProjectRunStrategy(agent: AgentId, startPath: string): RunStrategy | null;
 /**
  * Resolve the configured strategy. Lookup order:
  *   1. project-local agents.yaml (nearest to `startPath`)
@@ -129,8 +127,6 @@ export declare function getProjectRunStrategy(agent: AgentId, startPath: string)
  *      than stick to the pinned default even when it's maxed.
  */
 export declare function getConfiguredRunStrategy(agent: AgentId, startPath?: string): RunStrategy;
-/** Persist the global run strategy used by bare `agents run <agent>`. */
-export declare function setGlobalRunStrategy(agent: AgentId, strategy: RunStrategy): void;
 /**
  * Whether a version home can actually authenticate a launch.
  *
@@ -147,7 +143,7 @@ export declare function setGlobalRunStrategy(agent: AgentId, strategy: RunStrate
  */
 export declare function isLaunchableSignedIn(signedIn: boolean, presence: Pick<CredentialPresence, 'knownLocation' | 'perVersion'>): boolean;
 /** Launchable-signed-in verdict for ONE specific version on THIS device. */
-export interface VersionLaunchState {
+interface VersionLaunchState {
     /** True iff this exact version home can spawn a signed-in agent right now. */
     launchable: boolean;
     /** The version home's account email when launchable, else null. */
@@ -359,7 +355,7 @@ export declare function pickAvailableCandidate(candidates: RotateCandidate[], pr
  * Per-harness routing summary for `agents run auto` — the cross-harness layer
  * that sits above `pickBalancedCandidate` (which is strictly per-harness).
  */
-export interface HarnessSummary {
+interface HarnessSummary {
     agent: AgentId;
     /** Every installed account slot probed for this harness. */
     candidates: RotateCandidate[];
@@ -372,7 +368,7 @@ export interface HarnessSummary {
     /** Why the harness was excluded, e.g. ['2 rate_limited', '1 signed_out']. Empty when healthy. */
     exclusionReasons: string[];
 }
-export interface HarnessPickResult {
+interface HarnessPickResult {
     /** The harness picked for this run. */
     picked: HarnessSummary;
     /** Harnesses with ≥1 healthy account (including the picked one). */
@@ -473,8 +469,6 @@ export declare function resolveAccountVersion(agent: AgentId, account: string, p
  * global default so behavior stays predictable — we never refuse to run.
  */
 export declare function selectBalancedVersion(agent: AgentId): Promise<RotateResult | null>;
-/** Select the configured version if available, otherwise another available version. */
-export declare function selectAvailableVersion(agent: AgentId, preferredVersion?: string | null): Promise<RotateResult | null>;
 /**
  * Build the enriched `rotation.resolved`/`rotation.unresolved` event payload:
  * the full candidate pool as the router saw it, the pick and WHY, and a

package/dist/lib/accounting/rotate.js

@@ -8,7 +8,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { PROJECTION_HORIZON_MIN, capacityWeight } from './capacity.js';
 import { accountDisplayLabel, getAccountInfo, credentialPresence, ALL_AGENT_IDS, } from '../agents.js';
-import { readMeta, writeMeta, getHelpersDir } from '../state.js';
+import { readMeta, getHelpersDir } from '../state.js';
 import { resolveConfiguredModel } from '../models.js';
 import { isTierToken, resolveTier } from '../model-tiers.js';
 import { listInstalledVersions, getVersionHomePath, resolveVersion } from '../installations/versions.js';
@@ -42,7 +42,7 @@ export function normalizeRunStrategy(value) {
     return RUN_STRATEGIES.includes(value) ? value : null;
 }
 /** Read project-local run strategy from the nearest agents.yaml, if present. */
-export function getProjectRunStrategy(agent, startPath) {
+function getProjectRunStrategy(agent, startPath) {
     for (const runConfig of getProjectRunConfigs(startPath)) {
         const strategy = normalizeRunStrategy(runConfig[agent]?.strategy);
         if (strategy)
@@ -65,14 +65,6 @@ export function getConfiguredRunStrategy(agent, startPath = process.cwd()) {
         ?? normalizeRunStrategy(readMeta().run?.[agent]?.strategy)
         ?? 'balanced';
 }
-/** Persist the global run strategy used by bare `agents run <agent>`. */
-export function setGlobalRunStrategy(agent, strategy) {
-    const meta = readMeta();
-    if (!meta.run)
-        meta.run = {};
-    meta.run[agent] = { ...(meta.run[agent] ?? {}), strategy };
-    writeMeta(meta);
-}
 /**
  * Whether an account may be rotated INTO right now. Defined in terms of
  * {@link readinessFromCandidate} so the router's pick gate and the pre-flight
@@ -928,10 +920,6 @@ export async function resolveAccountVersion(agent, account, preferredLabel) {
 export async function selectBalancedVersion(agent) {
     return pickBalancedCandidate(await collectRunCandidates(agent));
 }
-/** Select the configured version if available, otherwise another available version. */
-export async function selectAvailableVersion(agent, preferredVersion) {
-    return pickAvailableCandidate(await collectRunCandidates(agent), preferredVersion);
-}
 /**
  * Record a rotation pick so parallel callers see it as recently-used.
  * Writes a stamp file per agent — lightweight, no locking needed since

package/dist/lib/accounting/usage-sync.d.ts

@@ -24,13 +24,13 @@ export interface UsageSyncPayload {
     v: 1;
     rows: Record<string, CachedUsageSnapshot>;
 }
-export interface PublishUsageSnapshotOptions {
+interface PublishUsageSnapshotOptions {
     userAgentsDir?: string;
     cachePath?: string;
     role?: ConfiguredDeviceRole;
     device?: string;
 }
-export interface PublishUsageSnapshotResult {
+interface PublishUsageSnapshotResult {
     published: boolean;
     changed: boolean;
     skipped: string | null;
@@ -51,14 +51,14 @@ export declare function pushUsageSnapshotNow(options?: PublishUsageSnapshotOptio
     published: PublishUsageSnapshotResult;
     transport?: import('../fleet-shared-repo-sync.js').FleetSharedRepoSyncResult;
 }>;
-export interface ConsumeUsageSnapshotsOptions {
+interface ConsumeUsageSnapshotsOptions {
     userAgentsDir?: string;
     cachePath?: string;
     role?: ConfiguredDeviceRole;
     device?: string;
     roles?: Record<string, ConfiguredDeviceRole>;
 }
-export interface ConsumeUsageSnapshotsResult {
+interface ConsumeUsageSnapshotsResult {
     sources: string[];
     merged: number;
     skipped: string | null;
@@ -72,3 +72,4 @@ export interface ConsumeUsageSnapshotsResult {
  * newest-wins batch into the worker cache. No network or subprocess is touched.
  */
 export declare function consumeUsageSnapshotsFromSharedStore(options?: ConsumeUsageSnapshotsOptions): ConsumeUsageSnapshotsResult;
+export {};

package/dist/lib/accounting/usage.d.ts

@@ -63,8 +63,6 @@ export declare const USAGE_NO_USAGE_CREDENTIAL_MARKER = "usage unavailable (no u
  * this message states both constraints and that the account still runs.
  */
 export declare function usageNoClaudeUsageCredentialError(): string;
-/** True when an error string is the Claude no-usage-credential state (#2987). */
-export declare function isUsageNoUsageCredentialError(error: string | null | undefined): boolean;
 /**
  * Detect Anthropic's usage-endpoint scope denial: HTTP 403 whose body names
  * `user:profile` (or "scope requirement"). A bare 403 without that body stays
@@ -86,16 +84,6 @@ export declare function isClaudeUsageScopeDenied(status: number, bodyText: strin
  */
 export declare function usageThrottledError(agent: string, untilMs: number): string;
 export declare function usageUnreachableError(agent: string, cause?: unknown): string;
-/**
- * Marker for a log-based (`network: false`) provider — Codex, Grok — that has
- * simply never recorded a rate-limit event on this machine yet: no session
- * log exists, or no session in it carries usage data. Distinct on purpose from
- * `usageUnreachableError`: that one means the local log COULDN'T be read (a
- * real failure worth surfacing distinctly); this one means there is nothing to
- * read because the account has not run here, which is expected for a fresh
- * install and should render as a benign state, not an error (RUSH-3040).
- */
-export declare const USAGE_NO_RECENT_USAGE_MARKER = "no usage recorded yet";
 export declare const USAGE_BENIGN_STATE: unique symbol;
 export type UsageBenignState = 'no-recent-usage';
 /**
@@ -227,8 +215,6 @@ export interface UsageInfo {
     /** Benign local state, symbol-backed so `--json` keeps its existing shape. */
     [USAGE_BENIGN_STATE]?: UsageBenignState;
 }
-/** Construct the benign no-local-log result without overloading `error`. */
-export declare function usageNoRecentUsageInfo(): UsageInfo;
 /** Read a benign state for the human renderer; symbols are omitted by JSON serialization. */
 export declare function getUsageBenignState(info: UsageInfo): UsageBenignState | null;
 /** Input needed to identify an account for usage lookup. */
@@ -282,7 +268,7 @@ interface UsageOptions {
     nativeFileLogin?: boolean;
 }
 /** Canonical input for a single usage fetch operation. */
-export interface UsageFetchInput {
+interface UsageFetchInput {
     agentId: AgentId;
     home?: string;
     cliVersion: string | null;
@@ -420,7 +406,7 @@ export declare const USAGE_FETCH_CONCURRENCY = 3;
  * JSON export). Deduplicates by usage identity and reads the shared snapshot.
  * Only an explicit `forceRefresh` call may collect provider or local-log state.
  */
-export interface UsageLookupOptions {
+interface UsageLookupOptions {
     forceRefresh?: boolean;
     fileOnly?: boolean;
     /** Daemon tick deadline signal, combined with each provider fetch's own timeout (PHNX-3608). */
@@ -529,7 +515,7 @@ export declare function formatUsageSummary(plan: string | null, snapshot: UsageS
  */
 export declare function deriveUsageStatusFromSnapshot(snapshot: UsageSnapshot | null | undefined): 'available' | 'rate_limited' | null;
 /** A prior sample of one window's utilization, for burn-rate projection. */
-export interface UsagePriorSample {
+interface UsagePriorSample {
     /** Epoch ms the prior snapshot was captured. */
     capturedAt: number;
     /** The session window's `usedPercent` in that prior snapshot. */
@@ -749,12 +735,6 @@ export declare function loadClaudeOauth(home?: string, opts?: {
     allowInteractiveLogin?: boolean;
     nativeFileLogin?: boolean;
 }): Promise<ClaudeOauthCredentials | null>;
-/**
- * Save Claude OAuth credentials to the system keychain/keyring.
- * Reads the existing payload, merges the new OAuth fields, and writes back.
- * Exported for regression tests; not part of the public command surface.
- */
-export declare function saveClaudeOauth(home: string | undefined, credentials: ClaudeOauthCredentials): Promise<boolean>;
 /**
  * Derive the Keychain service name for a Claude home directory.
  * Managed (non-default) homes get a hash suffix for isolation.
@@ -894,7 +874,7 @@ interface CursorUsageModel {
     maxRequestUsage?: number | null;
 }
 /** Response shape from Cursor's dashboard usage endpoint. */
-export interface CursorUsageResponse {
+interface CursorUsageResponse {
     /** The premium ("fast request") bucket the plan meters. */
     'gpt-4'?: CursorUsageModel | null;
     /** ISO timestamp the monthly request window resets from. */
@@ -918,13 +898,13 @@ interface CursorPlanUsage {
     totalPercentUsed?: number | null;
 }
 /** Response shape from Cursor's dashboard current-period-usage endpoint (subset we render). */
-export interface CursorPeriodUsageResponse {
+interface CursorPeriodUsageResponse {
     planUsage?: CursorPlanUsage | null;
     /** ISO timestamp, or a unix-ms string, marking the end of the current billing cycle. */
     billingCycleEnd?: string | number | null;
 }
 /** Response shape from Cursor's usage-summary endpoint (subset we render). */
-export interface CursorUsageSummaryResponse {
+interface CursorUsageSummaryResponse {
     /** True on a plan with no consumption cap; only tiered self-serve plans populate the percent fields. */
     isUnlimited?: boolean | null;
     individualUsage?: {
@@ -980,16 +960,12 @@ interface AntigravityOauthToken {
     expiry?: string | null;
 }
 /** One per-model quota bucket from the :retrieveUserQuota response. */
-export interface AntigravityQuotaBucket {
+interface AntigravityQuotaBucket {
     modelId?: string | null;
     tokenType?: string | null;
     remainingFraction?: number | null;
     resetTime?: string | null;
 }
-/** Response shape from the Code Assist :retrieveUserQuota endpoint. */
-export interface AntigravityQuotaResponse {
-    buckets?: AntigravityQuotaBucket[] | null;
-}
 /**
  * Parse a stored `agy` OAuth payload into its token. Handles both on-disk
  * shapes: the raw `{ token: {…} }` JSON (Linux file fallback) and the

package/dist/lib/accounting/usage.js

@@ -114,7 +114,7 @@ export function usageNoClaudeUsageCredentialError() {
         '(RUSH-1822); a setup-token cannot read usage (RUSH-2392). The account still runs.');
 }
 /** True when an error string is the Claude no-usage-credential state (#2987). */
-export function isUsageNoUsageCredentialError(error) {
+function isUsageNoUsageCredentialError(error) {
     return typeof error === 'string' && error.includes(USAGE_NO_USAGE_CREDENTIAL_MARKER);
 }
 /**
@@ -161,7 +161,7 @@ export function usageUnreachableError(agent, cause) {
  * read because the account has not run here, which is expected for a fresh
  * install and should render as a benign state, not an error (RUSH-3040).
  */
-export const USAGE_NO_RECENT_USAGE_MARKER = 'no usage recorded yet';
+const USAGE_NO_RECENT_USAGE_MARKER = 'no usage recorded yet';
 export const USAGE_BENIGN_STATE = Symbol('usageBenignState');
 /**
  * Sentinel `UsageInfo.error` for a read-only lookup whose cache held nothing
@@ -291,7 +291,7 @@ const PARTIAL_BLOCKS = ['', '\u258F', '\u258E', '\u258D', '\u258C', '\u258B', '\
 // alarming and looked maxed-out \u2014 so use a dashed row that says "no data".
 const NO_DATA = '\u2504';
 /** Construct the benign no-local-log result without overloading `error`. */
-export function usageNoRecentUsageInfo() {
+function usageNoRecentUsageInfo() {
     return { snapshot: null, error: null, [USAGE_BENIGN_STATE]: 'no-recent-usage' };
 }
 /** Read a benign state for the human renderer; symbols are omitted by JSON serialization. */
@@ -1713,7 +1713,7 @@ export async function loadClaudeOauth(home, opts) {
  * Reads the existing payload, merges the new OAuth fields, and writes back.
  * Exported for regression tests; not part of the public command surface.
  */
-export async function saveClaudeOauth(home, credentials) {
+async function saveClaudeOauth(home, credentials) {
     // Windows not yet supported: Claude Code keeps its credential in the file
     // there, so the rotated credential is written by the harness, not here.
     if (process.platform !== 'darwin' && process.platform !== 'linux') {

package/dist/lib/accounts/migrate.d.ts

@@ -1,7 +1,6 @@
 import type { AgentId } from '../types.js';
-export declare const ACCOUNT_MIGRATION_SCHEMA = 1;
-export type MigrationActionKind = 'canonical' | 'slot' | 'trash' | 'defer' | 'skip';
-export interface InstallationInventory {
+type MigrationActionKind = 'canonical' | 'slot' | 'trash' | 'defer' | 'skip';
+interface InstallationInventory {
     agent: AgentId;
     label: string;
     release: string;
@@ -19,7 +18,7 @@ export interface InstallationInventory {
     sessionCount: number;
     busy: boolean;
 }
-export interface MigrationAction {
+interface MigrationAction {
     kind: MigrationActionKind;
     label: string;
     release: string;
@@ -63,8 +62,8 @@ export interface AccountMigrationPlan {
         skipped: number;
     };
 }
-export type AccountMigrationManifestStatus = 'planned' | 'complete';
-export interface AccountMigrationManifest {
+type AccountMigrationManifestStatus = 'planned' | 'complete';
+interface AccountMigrationManifest {
     schema: number;
     at: string;
     dryRun: boolean;
@@ -93,7 +92,7 @@ export interface AccountMigrationManifest {
     /** old `agent@label` → new slot dir (or trash path). */
     map: Record<string, string>;
 }
-export interface AccountMigrateDeps {
+interface AccountMigrateDeps {
     isActive?: (installation: {
         agent: AgentId;
         label: string;
@@ -102,7 +101,7 @@ export interface AccountMigrateDeps {
 }
 export declare function planAccountMigration(agents?: AgentId[], deps?: AccountMigrateDeps): Promise<AccountMigrationPlan>;
 export declare function formatMigrationPlan(plan: AccountMigrationPlan): string;
-export interface ApplyMigrationResult {
+interface ApplyMigrationResult {
     plan: AccountMigrationPlan;
     manifest: AccountMigrationManifest;
     manifestPath: string;
@@ -115,3 +114,4 @@ export declare function applyAccountMigration(agents?: AgentId[], deps?: Account
  * flag this release.
  */
 export declare function reportAccountSlotMigrationOnUpgrade(): Promise<void>;
+export {};

package/dist/lib/accounts/migrate.js

@@ -24,7 +24,7 @@ import { countSessionsWithFilePrefix, reindexMovedSessionPaths } from '../sessio
 import { atomicWriteFileSync } from '../fs-atomic.js';
 import { getHistoryDir, readMeta, updateMeta } from '../state.js';
 import { recordSlot, slotDir } from './slots.js';
-export const ACCOUNT_MIGRATION_SCHEMA = 1;
+const ACCOUNT_MIGRATION_SCHEMA = 1;
 const OPAQUE_LABEL = /^(?:latest|main|acct-[0-9a-f]+|\d+\.\d+.*)$/i;
 function defaultIsActive(installation) {
     return isInstallationLikelyActive(installation);

package/dist/lib/acp/client.d.ts

@@ -12,7 +12,7 @@
 import { type SessionNotification } from '@zed-industries/agent-client-protocol';
 import type { AgentId } from '../types.js';
 import { type ExecMode } from '../exec.js';
-export interface AcpRunOptions {
+interface AcpRunOptions {
     agent: AgentId;
     prompt: string;
     cwd: string;
@@ -20,7 +20,7 @@ export interface AcpRunOptions {
     /** Optional: callback invoked for every session/update notification. */
     onUpdate?: (n: SessionNotification) => void;
 }
-export interface AcpRunResult {
+interface AcpRunResult {
     stopReason: string;
     sessionId: string;
 }
@@ -29,3 +29,4 @@ export interface AcpRunResult {
  * to `onUpdate`. Resolves when the turn completes (StopReason is returned).
  */
 export declare function runAcp(opts: AcpRunOptions): Promise<AcpRunResult>;
+export {};

package/dist/lib/acp/harnesses.d.ts

@@ -8,7 +8,7 @@
  * Sources: https://agentclientprotocol.com/get-started/agents + vendor docs.
  */
 import type { AgentId } from '../types.js';
-export interface AcpHarnessSpec {
+interface AcpHarnessSpec {
     /** Command + args to spawn the agent in ACP server mode. */
     command: string;
     args: string[];
@@ -19,8 +19,8 @@ export interface AcpHarnessSpec {
     /** Source URL for the invocation. */
     source: string;
 }
-export declare const ACP_HARNESSES: Partial<Record<AgentId, AcpHarnessSpec>>;
 /** Returns the ACP spawn spec for an agent, or undefined if the harness does not speak ACP. */
 export declare function getAcpSpec(agent: AgentId): AcpHarnessSpec | undefined;
 /** True if the harness is known to support ACP (directly or via adapter). */
 export declare function supportsAcp(agent: AgentId): boolean;
+export {};

package/dist/lib/acp/harnesses.js

@@ -7,7 +7,7 @@
  *
  * Sources: https://agentclientprotocol.com/get-started/agents + vendor docs.
  */
-export const ACP_HARNESSES = {
+const ACP_HARNESSES = {
     claude: {
         command: 'npx',
         args: ['-y', '@zed-industries/claude-agent-acp'],

package/dist/lib/acp/run.d.ts

@@ -7,7 +7,7 @@
  */
 import type { AgentId } from '../types.js';
 import type { ExecMode } from '../exec.js';
-export interface HeadlessAcpOptions {
+interface HeadlessAcpOptions {
     agent: AgentId;
     prompt: string;
     cwd: string;
@@ -16,3 +16,4 @@ export interface HeadlessAcpOptions {
 }
 /** Runs a prompt turn over ACP, streaming output to stdout per `json` mode. */
 export declare function runAcpHeadless(opts: HeadlessAcpOptions): Promise<number>;
+export {};

package/dist/lib/actor.d.ts

@@ -30,7 +30,7 @@ export interface ResolvedActor {
     avatarUrl?: string;
 }
 /** Result of `tailscale whois --json <ip>` we care about. */
-export interface WhoisIdentity {
+interface WhoisIdentity {
     login?: string;
     displayName?: string;
 }
@@ -55,7 +55,7 @@ export declare function actorAvatar(actor: ResolvedActor, session: PhoenixSessio
  * (a dev machine that *is* on the tailnet would otherwise make the local path
  * non-deterministic). Production callers use the defaults.
  */
-export interface ActorResolvers {
+interface ActorResolvers {
     whois: (ip: string) => WhoisIdentity | undefined;
     self: () => WhoisIdentity | undefined;
     /** The Phoenix ID session on this device (a local file read, no network). */
@@ -97,3 +97,4 @@ export declare function resetActorCache(): void;
  * unresolved actor sets no git identity -- git keeps its ambient config.
  */
 export declare function actorEnv(actor: ResolvedActor): Record<string, string>;
+export {};

package/dist/lib/add-dir.d.ts

@@ -21,29 +21,13 @@
  * support. Silent no-ops stay `none`.
  */
 import type { AgentId } from './types.js';
-export type AddDirStrategy = 'native-flag' | 'codex-policy' | 'grok-sandbox' | 'none';
+type AddDirStrategy = 'native-flag' | 'codex-policy' | 'grok-sandbox' | 'none';
 /** How each harness consumes directory grants. Keep in lockstep with apply* below. */
 export declare const ADD_DIR_STRATEGY: Record<AgentId, AddDirStrategy>;
-/** Agents whose launch command is widened by applyAddDirs (excludes codex — policy path). */
-export declare function agentsWithNativeOrGrokAddDir(): AgentId[];
 /** Expand `~` / `$HOME` and de-dupe, preserving order. */
 export declare function normalizeAddDirs(dirs: string[] | undefined): string[];
-/**
- * Append native `--add-dir` flags for harnesses that take them (Claude, Kimi, Cursor).
- * No-op for other strategies — call sites route by ADD_DIR_STRATEGY.
- */
-export declare function appendNativeAddDirFlags(cmd: string[], dirs: string[]): void;
 /** Profile name written into `.grok/sandbox.toml` under the run cwd. */
 export declare const GROK_PROJECT_SANDBOX_PROFILE = "agents-project";
-/**
- * Active Grok sandbox profile from the env, if a non-off profile is set.
- * Returns null when sandbox is off / unset / devbox (no widen needed).
- *
- * Only `GROK_SANDBOX` is consulted — a profile set only in config.toml is not
- * visible here (Grok does not expose it on the CLI), so those runs still get
- * the rules note but not a custom widen. Prefer env when launching sandboxed.
- */
-export declare function grokActiveSandboxProfile(env?: NodeJS.ProcessEnv): string | null;
 /** Whether Grok's active sandbox needs a custom profile with extra read_write. */
 export declare function grokNeedsSandboxWiden(env?: NodeJS.ProcessEnv): boolean;
 /**
@@ -78,3 +62,4 @@ export declare function applyAddDirs(agent: AgentId, cmd: string[], dirs: string
 export declare function supportsAddDir(agent: AgentId): boolean;
 /** One-line note for harnesses that ignore grants (used by callers that want to warn). */
 export declare function addDirUnsupportedNote(agent: AgentId): string | null;
+export {};

package/dist/lib/add-dir.js

@@ -43,10 +43,6 @@ export const ADD_DIR_STRATEGY = {
     muse: 'none',
     warp: 'none',
 };
-/** Agents whose launch command is widened by applyAddDirs (excludes codex — policy path). */
-export function agentsWithNativeOrGrokAddDir() {
-    return Object.keys(ADD_DIR_STRATEGY).filter((id) => ADD_DIR_STRATEGY[id] === 'native-flag' || ADD_DIR_STRATEGY[id] === 'grok-sandbox');
-}
 /** Expand `~` / `$HOME` and de-dupe, preserving order. */
 export function normalizeAddDirs(dirs) {
     if (!dirs?.length)
@@ -66,7 +62,7 @@ export function normalizeAddDirs(dirs) {
  * Append native `--add-dir` flags for harnesses that take them (Claude, Kimi, Cursor).
  * No-op for other strategies — call sites route by ADD_DIR_STRATEGY.
  */
-export function appendNativeAddDirFlags(cmd, dirs) {
+function appendNativeAddDirFlags(cmd, dirs) {
     for (const dir of dirs) {
         cmd.push('--add-dir', dir);
     }
@@ -81,7 +77,7 @@ export const GROK_PROJECT_SANDBOX_PROFILE = 'agents-project';
  * visible here (Grok does not expose it on the CLI), so those runs still get
  * the rules note but not a custom widen. Prefer env when launching sandboxed.
  */
-export function grokActiveSandboxProfile(env = process.env) {
+function grokActiveSandboxProfile(env = process.env) {
     const raw = (env.GROK_SANDBOX ?? '').trim();
     if (!raw)
         return null;

package/dist/lib/address.d.ts

@@ -0,0 +1,56 @@
+/**
+ * One address grammar for every `--host` an extracted CLI accepts (PHNX-4090).
+ *
+ * This file is copied verbatim into agents-cli, computer-cli, browser-cli and
+ * secrets-cli, each with the same test vectors — deliberately not a published
+ * package, so no engine grows a runtime dependency on another. Keep the four
+ * copies identical; a change lands in all of them in the same delivery.
+ *
+ *   ssh://[user@]host[:ssh-port]   the authority port is the SSH port, never 9222
+ *   cdp://host[:port]              default 9222
+ *   vnc://host[:port]              default 5901
+ *   tcp://host:port                no default — a helper RPC endpoint needs one
+ *   wss://host/path, ws://…        a remote DevTools socket
+ *   firefox-bidi://host[:port]     the browser's BiDi endpoint
+ *   [user@]host                    implicit ssh://
+ *
+ * A query (`?port=9222&os=windows`) is preserved for the consumer that knows
+ * what it means. Passwords never travel in an address: `user:secret@host` fails
+ * loud, and so does any scheme not listed above.
+ */
+export declare const ADDRESS_SCHEMES: readonly ["ssh", "cdp", "vnc", "tcp", "wss", "ws", "firefox-bidi"];
+export type AddressScheme = (typeof ADDRESS_SCHEMES)[number];
+/** Ports a scheme implies when the address carries none. `tcp` has no default. */
+export declare const DEFAULT_PORTS: Readonly<Partial<Record<AddressScheme, number>>>;
+export interface Address {
+    scheme: AddressScheme;
+    user?: string;
+    host: string;
+    /** The port written in the authority, if any. See {@link addressPort} for the default. */
+    port?: number;
+    /** A non-root path (`wss://hub/devtools` → `/devtools`). */
+    path?: string;
+    query: Record<string, string>;
+    /** The trimmed input, for messages. */
+    raw: string;
+}
+export declare function parseAddress(input: string): Address;
+/** The effective port: written, else the scheme's default, else undefined. */
+export declare function addressPort(addr: Address): number | undefined;
+/** `user@host` (or bare `host`) for an `ssh` address — what OpenSSH is given. */
+export declare function sshTarget(addr: Address): string;
+/**
+ * OpenSSH options carrying a non-default SSH port. `-o Port=N` rather than
+ * `-p`/`-P` so the same argv serves both `ssh` and `scp`.
+ */
+export declare function sshPortArgs(addr: Address): string[];
+/** `host:port` for a `vnc` address, defaulting the RFB display port. */
+export declare function vncEndpoint(addr: Address): string;
+/** `host:port` for a `tcp` address. A helper RPC endpoint has no default port. */
+export declare function tcpEndpoint(addr: Address): string;
+/**
+ * The DevTools port a browser endpoint means. On `ssh://` the authority port is
+ * the SSH port, so the DevTools port comes only from `?port=`; `cdp://` and
+ * `ssh://` default to 9222, path-addressed sockets (`wss://`) have none.
+ */
+export declare function browserEndpointPort(addr: Address): number | undefined;