@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/lib/crabbox/cli.d.ts

@@ -45,7 +45,7 @@ export interface CrabboxBox {
     /** Idle-timeout window in seconds, or null. */
     idleTimeoutSecs: number | null;
 }
-export interface CrabboxOptions {
+interface CrabboxOptions {
     /**
      * Name of a secrets bundle whose env (e.g. `HCLOUD_TOKEN`) crabbox needs to
      * reach its cloud provider. Resolved via agents-cli's own keychain-backed
@@ -63,21 +63,8 @@ export interface CrabboxOptions {
 }
 /** Locate the crabbox binary, or throw an actionable error. */
 export declare function findCrabbox(): string;
-/**
- * Env keys that mark a secrets bundle as usable for `--lease` — the provider
- * tokens crabbox reads to reach a cloud API. Matching a bundle needs only its
- * declared key NAMES; only the matched key's VALUE is ever injected (see
- * `crabboxEnv`), so an auto-detected bundle can't leak its other secrets.
- */
-export declare const LEASE_PROVIDER_TOKEN_KEYS: string[];
 /** The first bundle that declares a provider token key, or undefined. Pure over `bundles`. */
 export declare function pickLeaseBundleFromList(bundles: SecretsBundle[]): string | undefined;
-/**
- * Env keys a bundle may use for a Tailscale auth key. crabbox reads
- * `CRABBOX_TAILSCALE_AUTH_KEY` to join a leased box to the tailnet; we accept the
- * common alternate names too and rename to that canonical key on injection.
- */
-export declare const TAILSCALE_AUTH_KEY_NAMES: string[];
 /** The first bundle + key that declares a Tailscale auth key, or undefined. Pure over `bundles`. */
 export declare function pickTailscaleBundleFromList(bundles: SecretsBundle[]): {
     name: string;
@@ -86,7 +73,7 @@ export declare function pickTailscaleBundleFromList(bundles: SecretsBundle[]): {
 /** Test seam: drop every crabboxEnv secrets memo so each test resolves fresh. */
 export declare function resetCrabboxSecretsMemosForTest(): void;
 /** A resolved lease bundle: its name, plus (auto-detect only) the exact keys to inject. */
-export interface ResolvedLeaseBundle {
+interface ResolvedLeaseBundle {
     name: string;
     /** When set (auto-detect), inject ONLY these keys — not the whole bundle. */
     keys?: string[];
@@ -122,7 +109,7 @@ export declare function crabboxFind(slug: string, opts?: CrabboxOptions): Crabbo
  * (mirrors scripts/sandbox.sh's `box_ready`).
  */
 export declare function crabboxStatusReady(slug: string, opts?: CrabboxOptions): boolean;
-export interface PoolMatchOptions {
+interface PoolMatchOptions {
     /**
      * Lease pool label (shared default, or `.crabbox.yaml leaseProfile:` opt-in;
      * see config.ts). Both sides normalize an unset profile to
@@ -149,7 +136,7 @@ export interface PoolMatchOptions {
  * run may be mid-boot on it, and crabbox's idle timeout reaps genuine duds.
  */
 export declare function poolReusableBoxes(boxes: CrabboxBox[], opts?: PoolMatchOptions): CrabboxBox[];
-export interface WarmupOptions extends CrabboxOptions {
+interface WarmupOptions extends CrabboxOptions {
     class?: string;
     profile?: string;
     /** Provision web code-server capability on the box. */
@@ -181,7 +168,7 @@ export declare function crabboxWaitReady(slug: string, opts?: CrabboxOptions & {
     intervalMs?: number;
     sleep?: (ms: number) => Promise<void>;
 }): Promise<CrabboxBox>;
-export interface CrabboxRunOptions extends CrabboxOptions {
+interface CrabboxRunOptions extends CrabboxOptions {
     /** Called with each chunk of combined stdout/stderr as it streams. */
     onData?: (chunk: string) => void;
     /** Force a full remote resync before running. */
@@ -189,12 +176,6 @@ export interface CrabboxRunOptions extends CrabboxOptions {
     /** Refresh an existing lease with this idle window before running. */
     renewIdleTimeoutSecs?: number;
 }
-/**
- * Run `remoteCmd` on the leased box via `crabbox run` (crabbox syncs the dirty
- * checkout and owns the SSH). Streams combined output; resolves with the remote
- * exit code (or null if crabbox itself failed to dispatch).
- */
-export declare function crabboxRun(slug: string, remoteCmd: string, opts?: CrabboxRunOptions): Promise<number | null>;
 /**
  * Upload `script` to the box via `crabbox run --script-stdin` and run it.
  *
@@ -251,3 +232,4 @@ export declare function reapOrphans(opts?: CrabboxOptions & {
     candidates: CrabboxBox[];
     reaped: string[];
 };
+export {};

package/dist/lib/crabbox/cli.js

@@ -29,7 +29,7 @@ export function findCrabbox() {
  * declared key NAMES; only the matched key's VALUE is ever injected (see
  * `crabboxEnv`), so an auto-detected bundle can't leak its other secrets.
  */
-export const LEASE_PROVIDER_TOKEN_KEYS = ['HCLOUD_TOKEN', 'AWS_ACCESS_KEY_ID', 'DIGITALOCEAN_TOKEN', 'DO_TOKEN'];
+const LEASE_PROVIDER_TOKEN_KEYS = ['HCLOUD_TOKEN', 'AWS_ACCESS_KEY_ID', 'DIGITALOCEAN_TOKEN', 'DO_TOKEN'];
 /** The first bundle that declares a provider token key, or undefined. Pure over `bundles`. */
 export function pickLeaseBundleFromList(bundles) {
     for (const b of bundles) {
@@ -43,7 +43,7 @@ export function pickLeaseBundleFromList(bundles) {
  * `CRABBOX_TAILSCALE_AUTH_KEY` to join a leased box to the tailnet; we accept the
  * common alternate names too and rename to that canonical key on injection.
  */
-export const TAILSCALE_AUTH_KEY_NAMES = ['CRABBOX_TAILSCALE_AUTH_KEY', 'TAILSCALE_AUTH_KEY', 'TS_AUTHKEY'];
+const TAILSCALE_AUTH_KEY_NAMES = ['CRABBOX_TAILSCALE_AUTH_KEY', 'TAILSCALE_AUTH_KEY', 'TS_AUTHKEY'];
 /** The first bundle + key that declares a Tailscale auth key, or undefined. Pure over `bundles`. */
 export function pickTailscaleBundleFromList(bundles) {
     for (const b of bundles) {
@@ -447,32 +447,6 @@ export async function crabboxWaitReady(slug, opts = {}) {
     }
     throw new Error(`crabbox box "${slug}" did not become ready within ${Math.round(timeoutMs / 1000)}s (state: ${last?.state ?? 'gone'}).`);
 }
-/**
- * Run `remoteCmd` on the leased box via `crabbox run` (crabbox syncs the dirty
- * checkout and owns the SSH). Streams combined output; resolves with the remote
- * exit code (or null if crabbox itself failed to dispatch).
- */
-export function crabboxRun(slug, remoteCmd, opts = {}) {
-    findCrabbox();
-    const args = ['run', '--id', slug, '--reclaim'];
-    if (opts.fullResync)
-        args.push('--full-resync');
-    args.push('--', 'bash', '-lc', remoteCmd);
-    return new Promise((resolve) => {
-        const proc = spawn('crabbox', args, { env: crabboxEnv(opts), stdio: ['ignore', 'pipe', 'pipe'] });
-        const pump = (chunk) => {
-            const s = chunk.toString('utf-8');
-            if (opts.onData)
-                opts.onData(s);
-            else
-                process.stdout.write(s);
-        };
-        proc.stdout.on('data', pump);
-        proc.stderr.on('data', pump);
-        proc.on('error', () => resolve(null));
-        proc.on('close', (code) => resolve(code));
-    });
-}
 /**
  * Upload `script` to the box via `crabbox run --script-stdin` and run it.
  *

package/dist/lib/crabbox/lease.d.ts

@@ -33,7 +33,7 @@ import type { AgentId } from '../types.js';
 import { type CrabboxBox } from './cli.js';
 import { type DetectedRuntime } from './runtimes.js';
 /** Phase signal for a lease run, so the command layer can drive a progress UI. */
-export type LeasePhase = {
+type LeasePhase = {
     kind: 'warmup';
     backend?: string;
 } | {
@@ -46,7 +46,7 @@ export type LeasePhase = {
 } | {
     kind: 'teardown';
 };
-export interface LeaseRunOptions {
+interface LeaseRunOptions {
     agent: string;
     prompt: string;
     mode?: string;
@@ -110,7 +110,7 @@ export interface LeaseDispatchProfile {
     provider?: string;
     fallbackModel?: string;
 }
-export interface LeaseRunResult {
+interface LeaseRunResult {
     box: CrabboxBox;
     exitCode: number | null;
     toreDown: boolean;
@@ -126,8 +126,6 @@ export interface LeaseRunResult {
 export declare const LEASE_BOOTSTRAP_FAILED_CODE = 97;
 /** Build a shell-safe, collision-resistant workspace id for one lease run. */
 export declare function leaseWorkspaceId(repoRoot: string, startedAtMs?: number, pid?: number): string;
-/** Isolated box-home path for one run, relative to the shared box user's home. */
-export declare function leaseHomeDir(workspaceId: string): string;
 /**
  * Build the single bootstrap script run on the box: ensure agents-cli, install
  * the picked runtime CLIs, write their credentials, run the agent, then shred
@@ -136,7 +134,7 @@ export declare function leaseHomeDir(workspaceId: string): string;
 export declare function buildBootstrapScript(opts: LeaseRunOptions): string;
 /** Untouched-for-this-long ⇒ no active run holds the box, so an expired one is a stray. */
 export declare const STRAY_GRACE_SECS = 600;
-export interface StrayMatchOptions {
+interface StrayMatchOptions {
     /** Pool the lease belongs to (defaults to DEFAULT_CRABBOX_PROFILE). */
     profile?: string;
     /** Network mode of the lease (default 'public'); a box is partitioned by it. */
@@ -160,3 +158,4 @@ export interface StrayMatchOptions {
  */
 export declare function isExpiredPoolStray(box: CrabboxBox, opts: StrayMatchOptions): boolean;
 export declare function leaseAndRun(opts: LeaseRunOptions): Promise<LeaseRunResult>;
+export {};

package/dist/lib/crabbox/lease.js

@@ -55,7 +55,7 @@ export function leaseWorkspaceId(repoRoot, startedAtMs = Date.now(), pid = proce
     return `${safeRepo}-${startedAtMs.toString(36)}-${pid.toString(36)}`;
 }
 /** Isolated box-home path for one run, relative to the shared box user's home. */
-export function leaseHomeDir(workspaceId) {
+function leaseHomeDir(workspaceId) {
     return `lease-homes/${workspaceId}`;
 }
 function profileRemotePath(name) {

package/dist/lib/crabbox/progress.d.ts

@@ -61,7 +61,7 @@ export declare function createSpinner(opts?: {
     enabled?: boolean;
     intervalMs?: number;
 }): Spinner;
-export interface LeaseOutputRouter {
+interface LeaseOutputRouter {
     /** Feed a raw chunk of the crabbox run's combined stdout/stderr. */
     push(chunk: string): void;
     /** Flush any buffered partial line (call once the stream closes). */
@@ -91,3 +91,4 @@ export declare function createLeaseOutputRouter(cb: {
     marker?: string;
     now?: () => number;
 }): LeaseOutputRouter;
+export {};

package/dist/lib/crabbox/setup-copy.d.ts

@@ -22,9 +22,7 @@
  * ride the box-side bootstrap script (that only echoes the `copy-setup` progress
  * sentinel — see `buildBootstrapScript`).
  */
-/** Remote path (relative to the box user's home) the tracked config lands in. */
-export declare const REMOTE_AGENTS_DIR = ".agents/";
-export interface CopySetupOptions {
+interface CopySetupOptions {
     /** crabbox box slug to push to — its per-lease ssh key does the auth. */
     slug: string;
     /** Secrets bundle whose env the ssh/rsync children inherit (crabbox parity). */
@@ -90,3 +88,4 @@ export declare function buildSetupRsyncArgs(opts: {
  * the returned exit codes.
  */
 export declare function copySetupToBox(opts: CopySetupOptions): Promise<CopySetupResult>;
+export {};

package/dist/lib/crabbox/setup-copy.js

@@ -29,7 +29,7 @@ import * as path from 'path';
 import { getUserAgentsDir } from '../state.js';
 import { crabboxEnv, crabboxSshArgv } from './cli.js';
 /** Remote path (relative to the box user's home) the tracked config lands in. */
-export const REMOTE_AGENTS_DIR = '.agents/';
+const REMOTE_AGENTS_DIR = '.agents/';
 /** Top-level paths that must never be pushed, even if somehow tracked. */
 const NEVER_COPY = new Set(['.claude', '.claude.json']);
 /**

package/dist/lib/daemon/account-state-daemon-service.d.ts

@@ -28,7 +28,7 @@ export declare const USAGE_STATE_TICK_MS = 60000;
 export declare const AUTH_STATE_TICK_MS: number;
 type AccountAuthRefresh = (signal: AbortSignal) => Promise<AuthProbeRow[] | void>;
 type AccountTransitionNotifier = (transition: DeadAccountTransition) => Promise<void>;
-export interface DeadAccountTransition {
+interface DeadAccountTransition {
     agent: AuthProbeRow['agent'];
     /** Display label (email / account name) — presentation only, never a key. */
     account: string;

package/dist/lib/daemon/attention-notify-service.d.ts

@@ -35,7 +35,7 @@ import type { DaemonServiceId } from '../daemon-services.js';
  * through here, so what ships is what is asserted.
  */
 export declare function buildAttentionNotification(item: AttentionItem, session: ActiveSession): DesktopNotification | undefined;
-export interface AttentionNotifyServiceOptions {
+interface AttentionNotifyServiceOptions {
     /** Live-session source (default: the real active-session query). Injected in tests. */
     getSessions?: () => Promise<ActiveSession[]>;
     /** Notifier (default: the real desktop notifier). Injected in tests to capture posts. */
@@ -67,3 +67,4 @@ export declare class AttentionNotifyService extends BasePeriodicService {
     private markNotified;
     private pruneLedger;
 }
+export {};

package/dist/lib/daemon/catchup-service.d.ts

@@ -24,7 +24,7 @@ import type { DaemonServiceId } from '../daemon-services.js';
  * recovering from a wedge or an OS suspend the process survived.
  */
 export declare const CATCHUP_TICK_MS: number;
-export interface CatchupServiceDeps {
+interface CatchupServiceDeps {
     /**
      * Whether the routine scheduler is currently booted. When false (the
      * `scheduler.enabled` gate is off), the pass no-ops — there is nothing to
@@ -49,3 +49,4 @@ export declare class CatchupService extends BasePeriodicService {
     protected onStop(): Promise<void>;
     protected onTick(_ctx: DaemonContext, signal: AbortSignal): Promise<void>;
 }
+export {};

package/dist/lib/daemon/daemon.d.ts

@@ -67,7 +67,7 @@ export declare const DAEMON_AUTOSTART_FAILURE_LIMIT = 5;
  *   !running + enabled  → boot  (gate flipped on since boot)
  *   !running + !enabled → none  (stay dark)
  */
-export type SchedulerGateTransition = 'reload' | 'stop' | 'boot' | 'none';
+type SchedulerGateTransition = 'reload' | 'stop' | 'boot' | 'none';
 export declare function schedulerGateTransition(running: boolean, enabled: boolean): SchedulerGateTransition;
 /**
  * Wrap an async routine so it runs AT MOST ONCE, however many callers fire it.
@@ -104,7 +104,7 @@ export declare function readDaemonPid(daemonDir?: string): number | null;
 export declare function writeDaemonPid(pid: number): void;
 /** Remove the daemon PID file. */
 export declare function removeDaemonPid(): void;
-export interface DaemonHeartbeat {
+interface DaemonHeartbeat {
     lastTick: string;
     pid: number;
 }
@@ -409,7 +409,7 @@ export declare function startDetached(opts?: StartDetachedOptions): {
  * One piece of daemon state that a graceful `handleShutdown` removes and an
  * escalated kill leaves behind (RUSH-2421).
  */
-export interface StopResidueArtifact {
+interface StopResidueArtifact {
     label: string;
     present: boolean;
     /** The file names a live owner, including a stopped target that survived. */
@@ -438,7 +438,7 @@ export declare function stopResidueArtifacts(stoppedPid: number | null, survivor
  * in-flight routine children that survive deliberately (SING-11a) and are
  * reported, never killed.
  */
-export interface DaemonStopResult {
+interface DaemonStopResult {
     ok: boolean;
     stoppedPid: number | null;
     escalated: boolean;

package/dist/lib/daemon/daemon.js

@@ -878,7 +878,7 @@ export async function runDaemon() {
     assertTestDaemonHome();
     // Lifecycle readers and launchers do not run services. Load their code only
     // in the daemon process, before it claims or publishes lifecycle state.
-    const [{ BrowserService }, { SessionIndexService }, { SessionSummarizerService }, { SessionTitleService }, { MonitorEngineService }, { AccountUsageService, AccountAuthService }, { CatchupService }, { BrowserIPCService }, { WatchdogService }, { DeviceProbeService }, { SelfHealService }, { SelfUpdateService }, { HarnessUpdateService }, { AuthSyncService }, { UsageSyncService }, { StateDirCheckService }, { SessionStateService }, { AttentionNotifyService }, { WebhookReceiverService }, { HeartbeatService }, { TmuxReapService }, { BrowserTaskReapService },] = await Promise.all([
+    const [{ BrowserService }, { SessionIndexService }, { SessionSummarizerService }, { SessionTitleService }, { MonitorEngineService }, { AccountUsageService, AccountAuthService }, { CatchupService }, { BrowserIPCService }, { WatchdogService }, { DeviceProbeService }, { SelfHealService }, { SelfUpdateService }, { HarnessUpdateService }, { AuthSyncService }, { UsageSyncService }, { StateDirCheckService }, { SessionStateService }, { FeedStreamService }, { AttentionNotifyService }, { WebhookReceiverService }, { HeartbeatService }, { TmuxReapService }, { BrowserTaskReapService },] = await Promise.all([
         import('../browser/service.js'),
         import('./session-index-service.js'),
         import('./session-summarizer-service.js'),
@@ -896,6 +896,7 @@ export async function runDaemon() {
         import('./usage-sync-service.js'),
         import('./state-dir-check-service.js'),
         import('./session-state-service.js'),
+        import('./feed-stream-service.js'),
         import('./attention-notify-service.js'),
         import('./webhook-receiver-service.js'),
         import('./heartbeat-service.js'),
@@ -1021,6 +1022,12 @@ export async function runDaemon() {
     }
     else
         log('INFO', 'Live session-state service disabled');
+    // The shared feed fan-out. Registered even when disabled at boot so a later
+    // `agents daemon services enable feed-stream` brings it up over SIGHUP, the
+    // same live-transition shape browser IPC uses.
+    supervisor.register(new FeedStreamService(), { enabled: isEnabled('feed-stream') });
+    if (!isEnabled('feed-stream'))
+        log('INFO', 'Shared feed stream service disabled');
     const monitorEngineSvc = new MonitorEngineService();
     if (isEnabled('monitors'))
         supervisor.register(monitorEngineSvc);
@@ -1226,7 +1233,7 @@ export async function runDaemon() {
             }
             catch { /* best-effort */ }
             // RUSH-2288: the pre-spawn failure (e.g. auth_failed) is exactly the one the
-            // per-routine `agents notify` prompt can never send — its agent never ran —
+            // per-routine `agents send --to owner` prompt can never send — its agent never ran —
             // so the daemon reaches the owner directly.
             void notifyOwnerRoutineStartFailed(config, message)
                 .then((r) => {

package/dist/lib/daemon/feed-stream-service.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The shared feed collector's lifecycle as a `DaemonService`.
+ *
+ * WHY THE DAEMON OWNS IT. Dialing every peer over ssh and holding those
+ * connections open is an ACTION on the fleet, so by the repo's one-scheduler /
+ * one-executor rule it belongs to the daemon and not to a UI surface. Before
+ * this service, every consumer of `agents feed watch --json` ran its own
+ * `watchFleetFeed`, which is N ssh children per peer for N readers. The daemon
+ * runs one, and the readers attach over a socket (`feed/hub-server.ts`).
+ *
+ * The server binds on start, but the fan-out itself is DEMAND-GATED by the hub:
+ * with no client connected there is no `watchFleetFeed`, so an idle box holds no
+ * peer connections — the same idle-cost rule `SessionStateService` follows for
+ * its gather.
+ */
+import { BaseDaemonService, type DaemonContext } from './service.js';
+import type { DaemonServiceId } from '../daemon-services.js';
+export declare class FeedStreamService extends BaseDaemonService {
+    readonly id: DaemonServiceId;
+    private server;
+    protected onStart(ctx: DaemonContext): Promise<void>;
+    protected onStop(): Promise<void>;
+}

package/dist/lib/daemon/feed-stream-service.js

@@ -0,0 +1,40 @@
+/**
+ * The shared feed collector's lifecycle as a `DaemonService`.
+ *
+ * WHY THE DAEMON OWNS IT. Dialing every peer over ssh and holding those
+ * connections open is an ACTION on the fleet, so by the repo's one-scheduler /
+ * one-executor rule it belongs to the daemon and not to a UI surface. Before
+ * this service, every consumer of `agents feed watch --json` ran its own
+ * `watchFleetFeed`, which is N ssh children per peer for N readers. The daemon
+ * runs one, and the readers attach over a socket (`feed/hub-server.ts`).
+ *
+ * The server binds on start, but the fan-out itself is DEMAND-GATED by the hub:
+ * with no client connected there is no `watchFleetFeed`, so an idle box holds no
+ * peer connections — the same idle-cost rule `SessionStateService` follows for
+ * its gather.
+ */
+import { BaseDaemonService } from './service.js';
+import { FeedHub } from '../feed/hub.js';
+import { FeedHubServer } from '../feed/hub-server.js';
+import { sharedLocalFeedHub, watchFleetFeed } from '../feed/watch.js';
+export class FeedStreamService extends BaseDaemonService {
+    id = 'feed-stream';
+    server = null;
+    async onStart(ctx) {
+        // Two collectors, one socket. The fleet hub holds one ssh child per peer plus
+        // this box's rows; the local hub is this box ONLY and cannot fan out, so a
+        // reader that wants just this machine never causes a peer dial. They are
+        // separate hubs rather than one filtered stream because demand must be
+        // separate too: a local-only reader must not start the fleet fan-out.
+        const fleet = new FeedHub({ watch: watchFleetFeed });
+        this.server = new FeedHubServer(fleet, undefined, sharedLocalFeedHub());
+        await this.server.start();
+        ctx.log('INFO', 'Feed stream hub listening (fan-out starts on first reader)');
+    }
+    async onStop() {
+        const server = this.server;
+        this.server = null;
+        if (server)
+            await server.stop();
+    }
+}

package/dist/lib/daemon/harness-update-service.d.ts

@@ -33,24 +33,7 @@
  */
 import { BasePeriodicService, type DaemonContext } from './service.js';
 import type { DaemonServiceId } from '../daemon-services.js';
-/**
- * Cancellation deadline per tick. A real pass can touch several installations, each an npm
- * install (`INSTALL_TIMEOUT_MS` = 120s in strategies.ts) plus two launch
- * probes; 10 minutes leaves headroom for a handful of harnesses in one pass
- * while staying comfortably under the 15-minute cadence above.
- */
-export declare const HARNESS_UPDATE_DEADLINE_MS: number;
-/**
- * How long to wait for the child to exit AFTER a cooperative cancel before
- * force-reaping it as an orphan backstop. The child's own work is bounded — one
- * npm install (`INSTALL_TIMEOUT_MS` = 120s in strategies.ts) plus two launch
- * probes, then a fast synchronous swap — so a healthy child stops well within
- * this window. A slow staging/postinstall can also exhaust it, but a delivered
- * cancel prevents that stage from committing. The backstop kills the process
- * group on POSIX and the worker on Windows; the tick reports a failure.
- */
-export declare const HARNESS_UPDATE_CANCEL_GRACE_MS: number;
-export interface HarnessUpdateOutcome {
+interface HarnessUpdateOutcome {
     ran: boolean;
     reason?: string;
     exitCode?: number | null;
@@ -72,7 +55,6 @@ export interface CooperativeChildResult {
 export interface HarnessUpdateDeps {
     runAutoUpdatePass(signal: AbortSignal): Promise<CooperativeChildResult>;
 }
-export declare function defaultHarnessUpdateDeps(): HarnessUpdateDeps;
 /**
  * Spawn `command args` as a child over a Node IPC channel and drive it to a TRUE
  * completion, requesting a cooperative stop (never a kill) when `signal` aborts —
@@ -108,3 +90,4 @@ export declare class HarnessUpdateService extends BasePeriodicService {
     protected onStop(): Promise<void>;
     protected onTick(ctx: DaemonContext, signal: AbortSignal): Promise<void>;
 }
+export {};

package/dist/lib/daemon/harness-update-service.js

@@ -43,7 +43,7 @@ const HARNESS_UPDATE_TICK_MS = 15 * 60_000;
  * probes; 10 minutes leaves headroom for a handful of harnesses in one pass
  * while staying comfortably under the 15-minute cadence above.
  */
-export const HARNESS_UPDATE_DEADLINE_MS = 10 * 60_000;
+const HARNESS_UPDATE_DEADLINE_MS = 10 * 60_000;
 /** First tick fires 60 seconds after daemon boot — long enough for shims/PATH to settle, short enough that a fresh box doesn't wait a full interval for its first check. */
 const HARNESS_UPDATE_STARTUP_DELAY_MS = 60_000;
 /**
@@ -55,8 +55,8 @@ const HARNESS_UPDATE_STARTUP_DELAY_MS = 60_000;
  * cancel prevents that stage from committing. The backstop kills the process
  * group on POSIX and the worker on Windows; the tick reports a failure.
  */
-export const HARNESS_UPDATE_CANCEL_GRACE_MS = 3 * 60_000;
-export function defaultHarnessUpdateDeps() {
+const HARNESS_UPDATE_CANCEL_GRACE_MS = 3 * 60_000;
+function defaultHarnessUpdateDeps() {
     return {
         runAutoUpdatePass(signal) {
             const { command, args } = getCliLaunch([HARNESS_UPDATE_CHILD_CMD], getAgentsBinPath());

package/dist/lib/daemon/runner.d.ts

@@ -54,7 +54,7 @@ export declare function activeRunSkipStreak(runs: RunMeta[]): number;
  */
 export declare function launcherClaimPid(): number | null;
 /** How a routine attempt was triggered, plus the schedule slot it belongs to. */
-export interface RoutineTrigger {
+interface RoutineTrigger {
     kind: NonNullable<RunMeta['triggerKind']>;
     /** UTC fire time for a schedule/catchup attempt; keys the single-fire slot claim. */
     scheduledFor?: Date | string;
@@ -103,7 +103,7 @@ export declare function buildJobCommand(config: JobConfig, resolvedPrompt: strin
 export declare function snapshotRoutineTranscriptBase(meta: Pick<RunMeta, 'jobName' | 'agent' | 'version'>, runDir: string, overlayHome?: string): void;
 export declare function archiveRoutineTranscripts(meta: Pick<RunMeta, 'jobName' | 'runId' | 'agent' | 'version'>, runDir: string, overlayHome?: string): void;
 /** Pre-flight version/account selection for a routine job. */
-export interface RoutineLaunchPlan {
+interface RoutineLaunchPlan {
     /** Ordered attempts: primary first, then same-agent failover accounts. */
     chain: FallbackEntry[];
     /** Full rotation result when strategy selected among healthy accounts; null when pinned. */
@@ -219,7 +219,7 @@ declare function executeJobOnHost(config: JobConfig, opts: {
  * observes the live running→terminal transition (the monitor tick would already
  * see a finalized record and skip it). Never let a hook throw into finalization.
  */
-export interface RoutineHooks {
+interface RoutineHooks {
     /** Called once with the finalized meta when the run reaches a terminal state. */
     onFinish?: (meta: RunMeta) => void;
 }

package/dist/lib/daemon/self-update-service.d.ts

@@ -35,16 +35,7 @@
  */
 import { BasePeriodicService, type DaemonContext } from './service.js';
 import type { DaemonServiceId } from '../daemon-services.js';
-/**
- * Hard cap per tick: a real download + npm/bun install + verify can
- * legitimately take minutes on a slow link. 15 minutes matches the task's
- * stated budget and is short relative to the ~75min cadence. Exported so the
- * on-demand `request-self-update` IPC handler (`browser/ipc.ts`) can bound
- * its own `AbortController` on the SAME budget the periodic tick runs under —
- * one deadline, not two independently-tuned numbers that could drift apart.
- */
-export declare const SELF_UPDATE_DEADLINE_MS: number;
-export interface SelfUpdateOutcome {
+interface SelfUpdateOutcome {
     updated: boolean;
     reason?: string;
 }
@@ -75,7 +66,6 @@ export interface SelfUpdateDeps {
     syncSystemRepo(): Promise<void>;
     syncLocal(): Promise<void>;
 }
-export declare function fetchLatestNpmMetadata(signal: AbortSignal): Promise<NpmLatestMetadata>;
 /**
  * Install + byte-verify `metadata` into `packageRoot`'s install, exactly the
  * sequence `bootstrap.ts`'s `installResolvedPackage` runs for `agents
@@ -101,7 +91,6 @@ export declare function fetchLatestNpmMetadata(signal: AbortSignal): Promise<Npm
  * it's guarding (found in review, PHNX-3695).
  */
 export declare function installAndVerifyDefault(metadata: NpmLatestMetadata, packageRoot: string, signal: AbortSignal): Promise<void>;
-export declare function defaultSelfUpdateDeps(): SelfUpdateDeps;
 /**
  * Core self-update decision + action, shared by the periodic tick
  * ({@link SelfUpdateService.onTick}) and the on-demand IPC path
@@ -167,10 +156,6 @@ export declare function triggerSelfUpdateInBackground(ctx: DaemonContext, deps?:
  * reason, or `null` to proceed to the (backgrounded) install path.
  */
 export declare function selfUpdateSyncDeclineReason(deps?: SelfUpdateDeps): string | null;
-export declare const DEV_BUILD_DECLINE = "dev build \u2014 self-update is a no-op";
-export declare const SHADOW_DECLINE = "another agents binary shadows this install \u2014 self-update is a no-op";
-/** True when the package on disk is a strictly newer release than the one this process booted with. */
-export declare function installedIsNewerThanRunning(installed: string, running: string): boolean;
 export declare class SelfUpdateService extends BasePeriodicService {
     readonly id: DaemonServiceId;
     readonly intervalMs: number;

package/dist/lib/daemon/self-update-service.js

@@ -56,7 +56,7 @@ const SELF_UPDATE_TICK_MS = 75 * 60_000;
  * its own `AbortController` on the SAME budget the periodic tick runs under —
  * one deadline, not two independently-tuned numbers that could drift apart.
  */
-export const SELF_UPDATE_DEADLINE_MS = 15 * 60_000;
+const SELF_UPDATE_DEADLINE_MS = 15 * 60_000;
 /**
  * First tick fires 5 minutes after daemon boot — deliberately longer than
  * self-heal's 30s stagger (`self-heal-service.ts`): self-heal repairs local
@@ -67,7 +67,7 @@ export const SELF_UPDATE_DEADLINE_MS = 15 * 60_000;
  * a restart). Every later tick still fires on the normal cadence.
  */
 const SELF_UPDATE_STARTUP_DELAY_MS = 5 * 60_000;
-export async function fetchLatestNpmMetadata(signal) {
+async function fetchLatestNpmMetadata(signal) {
     const response = await fetch(`https://registry.npmjs.org/${NPM_PACKAGE_NAME}/latest`, { signal });
     if (!response.ok) {
         throw new Error(`registry.npmjs.org responded ${response.status}`);
@@ -148,7 +148,7 @@ export async function installAndVerifyDefault(metadata, packageRoot, signal) {
         }
     }
 }
-export function defaultSelfUpdateDeps() {
+function defaultSelfUpdateDeps() {
     return {
         currentVersion: () => getCliVersion(),
         installedVersion: () => getCliVersionFresh(),
@@ -362,10 +362,10 @@ export function selfUpdateSyncDeclineReason(deps = defaultSelfUpdateDeps()) {
     }
     return null;
 }
-export const DEV_BUILD_DECLINE = 'dev build — self-update is a no-op';
-export const SHADOW_DECLINE = 'another agents binary shadows this install — self-update is a no-op';
+const DEV_BUILD_DECLINE = 'dev build — self-update is a no-op';
+const SHADOW_DECLINE = 'another agents binary shadows this install — self-update is a no-op';
 /** True when the package on disk is a strictly newer release than the one this process booted with. */
-export function installedIsNewerThanRunning(installed, running) {
+function installedIsNewerThanRunning(installed, running) {
     if (installed === 'unknown' || running === 'unknown')
         return false;
     return compareVersions(installed, running) > 0;

package/dist/lib/daemon/state-dir-check-service.d.ts

@@ -24,7 +24,7 @@
  */
 import { BasePeriodicService, type DaemonContext } from './service.js';
 import type { DaemonServiceId } from '../daemon-services.js';
-export interface StateDirCheckServiceOptions {
+interface StateDirCheckServiceOptions {
     lifetimePath: string;
     lifetimeToken: string;
     onMissing: () => void;
@@ -41,3 +41,4 @@ export declare class StateDirCheckService extends BasePeriodicService {
     protected onStop(): Promise<void>;
     protected onTick(ctx: DaemonContext): Promise<void>;
 }
+export {};

package/dist/lib/daemon/supervisor.d.ts

@@ -32,7 +32,7 @@
  */
 import type { DaemonServiceId } from '../daemon-services.js';
 import type { DaemonContext, DaemonService, ServiceHealth } from './service.js';
-export interface ServiceSupervisorOptions {
+interface ServiceSupervisorOptions {
     /** Consecutive thrown tick failures before a service is parked. Deadline breaches park immediately. Default 3. */
     parkAfterFailures?: number;
     /** First restart backoff delay, doubled on each further failed restart attempt. Default 5s. */
@@ -48,7 +48,7 @@ export interface ServiceSupervisorOptions {
      */
     lifecycleDeadlineMs?: number;
 }
-export interface RegisterServiceOptions {
+interface RegisterServiceOptions {
     /** Register the lifecycle owner but leave it stopped until a live enable. */
     enabled?: boolean;
 }
@@ -135,3 +135,4 @@ export declare class ServiceSupervisor {
     private recordFailure;
     private finishTick;
 }
+export {};

package/dist/lib/daemon-services.d.ts

@@ -7,9 +7,9 @@
  * enabled without pulling in the whole daemon lifecycle.
  */
 /** Every service the daemon can host. IDs are kebab-case and stable. */
-export type DaemonServiceId = 'scheduler' | 'catchup' | 'monitors' | 'browser-ipc' | 'webhook-receiver' | 'self-heal' | 'self-update' | 'account-state' | 'account-auth' | 'watchdog' | 'device-probe' | 'state-dir-check' | 'session-index' | 'session-title' | 'auth-sync' | 'usage-sync' | 'daemon-heartbeat' | 'tmux-reap' | 'browser-task-reap' | 'session-state' | 'session-summarizer' | 'attention-notify' | 'harness-update';
+export type DaemonServiceId = 'scheduler' | 'catchup' | 'monitors' | 'browser-ipc' | 'webhook-receiver' | 'self-heal' | 'self-update' | 'account-state' | 'account-auth' | 'watchdog' | 'device-probe' | 'state-dir-check' | 'session-index' | 'session-title' | 'auth-sync' | 'usage-sync' | 'daemon-heartbeat' | 'tmux-reap' | 'browser-task-reap' | 'session-state' | 'feed-stream' | 'session-summarizer' | 'attention-notify' | 'harness-update';
 /** Human-readable metadata for each service. */
-export interface DaemonServiceDef {
+interface DaemonServiceDef {
     id: DaemonServiceId;
     title: string;
     description: string;
@@ -55,3 +55,4 @@ export declare function queueDaemonServiceRestart(id: DaemonServiceId): void;
  * daemon; never throws. Clears the file so a request is applied at most once.
  */
 export declare function drainDaemonServiceRestartQueue(): DaemonServiceId[];
+export {};