@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/lib/feed/envelope.d.ts

@@ -0,0 +1,79 @@
+import type { SessionWatchRow, SessionWatchScopeStatus } from '../session/watch.js';
+import type { ToolSetupRow } from '../setup-tool-status.js';
+import type { AttentionItem } from './attention.js';
+import type { ActivityEvent } from './activity.js';
+import type { ToolRow } from './tools.js';
+type Base = {
+    v: 1;
+    type: string;
+    streamId: string;
+    sequence: number;
+    scope: string;
+};
+export type FeedWatchEnvelope = Base & {
+    type: 'reset';
+    capturedAt: number;
+    agents: SessionWatchRow[];
+    attention: AttentionItem[];
+    tools: ToolRow[];
+    /** This device's tool-setup rows; see `setup.snapshot` for why it is a set. */
+    setup: ToolSetupRow[];
+} | Base & {
+    type: 'agent.upsert';
+    rowKey: string;
+    agent: SessionWatchRow;
+} | Base & {
+    type: 'agent.remove';
+    rowKey: string;
+} | Base & {
+    type: 'attention.upsert';
+    rowKey: string;
+    attention: AttentionItem;
+} | Base & {
+    type: 'attention.remove';
+    rowKey: string;
+} | Base & {
+    type: 'activity.append';
+    event: ActivityEvent;
+}
+/** A browser task or computer run, projected by `feed/tools.ts`. */
+ | Base & {
+    type: 'tool.upsert';
+    rowKey: string;
+    tool: ToolRow;
+} | Base & {
+    type: 'tool.remove';
+    rowKey: string;
+}
+/**
+ * The whole tool-setup set for one device, replaced at once.
+ *
+ * Deliberately a SNAPSHOT and not per-row upserts: `getCachedToolSetup` always
+ * answers for every tool in `SETUP_TOOLS`, so "browser is ready" and "computer
+ * needs setup" are one coherent reading of the box taken at one moment. Sending
+ * three independent upserts would let a consumer render a mix of two different
+ * readings, and there is no row to *remove* — a tool that is not installed is a
+ * row saying so, which is exactly what a Setup pane must show.
+ */
+ | Base & {
+    type: 'setup.snapshot';
+    capturedAt: number;
+    setup: ToolSetupRow[];
+} | Base & {
+    type: 'scope';
+    capturedAt: number;
+    status: SessionWatchScopeStatus;
+    reason?: string;
+} | Base & {
+    type: 'heartbeat';
+    capturedAt: number;
+};
+export type FeedWatchPayload = FeedWatchEnvelope extends infer Envelope ? Envelope extends FeedWatchEnvelope ? Omit<Envelope, 'v' | 'streamId' | 'sequence'> : never : never;
+/** Per-subscriber stream identity and monotonic sequence. */
+export declare class FeedWatchState {
+    readonly streamId: string;
+    private sequence;
+    constructor(streamId?: `${string}-${string}-${string}-${string}-${string}`);
+    emit(event: FeedWatchPayload): FeedWatchEnvelope;
+}
+export {};

package/dist/lib/feed/envelope.js

@@ -0,0 +1,23 @@
+/**
+ * The feed stream's envelope contract and its sequencer.
+ *
+ * Extracted from `watch.ts` so the three modules that all speak this protocol —
+ * the producer (`watch.ts`), the shared collector (`hub.ts`), and the socket
+ * boundary (`hub-server.ts`) — can depend on the contract without depending on
+ * each other. `watch.ts` needs `FeedHub` to share its local collector and
+ * `hub.ts` needs the sequencer, so leaving both here is what keeps that from
+ * being an import cycle.
+ *
+ * `watch.ts` re-exports everything in this file, so every existing importer is
+ * unaffected.
+ */
+import { randomUUID } from 'node:crypto';
+/** Per-subscriber stream identity and monotonic sequence. */
+export class FeedWatchState {
+    streamId;
+    sequence = 0;
+    constructor(streamId = randomUUID()) { this.streamId = streamId; }
+    emit(event) {
+        return { v: 1, streamId: this.streamId, sequence: ++this.sequence, ...event };
+    }
+}

package/dist/lib/feed/events.d.ts

@@ -12,6 +12,12 @@
  * - Performance tracking: withTiming() wrapper for any async function
  */
 import type { ActorKind } from '../actor.js';
+/**
+ * The directory today's ledger is appended to. Exported for the tool-activity
+ * collector, which watches it instead of re-running `agents computer sessions`
+ * on a timer to notice a new `computer.action` (see `feed/tool-activity.ts`).
+ */
+export declare function getEventsDir(): string;
 export type EventLevel = 'audit' | 'warn' | 'info' | 'debug';
 export type EventType = 'agent.run.start' | 'agent.run.end' | 'agent.spawn.start' | 'agent.spawn.end' | 'run.dispatched' | 'run.launch' | 'daemon.start' | 'daemon.stop' | 'daemon.error' | 'daemon.info' | 'routine.start' | 'routine.end' | 'watchdog.action' | 'version.install' | 'version.switch' | 'version.remove' | 'skill.install' | 'skill.remove' | 'browser.launch' | 'browser.close' | 'browser.navigate' | 'browser.screenshot' | 'computer.action' | 'secrets.get' | 'secrets.unlocked' | 'secrets.create' | 'secrets.import' | 'secrets.export' | 'secrets.view' | 'secrets.lease-denied' | 'secrets.lease-expire' | 'secrets.set' | 'secrets.delete' | 'secrets.rename' | 'cloud.dispatch' | 'cloud.complete' | 'cloud.cancel' | 'cloud.message' | 'teams.create' | 'teams.add' | 'teams.start' | 'teams.complete' | 'teams.disband' | 'hook.fire' | 'hook.complete' | 'hook.error' | 'mcp.add' | 'mcp.remove' | 'mcp.register' | 'resource.sync' | 'rotation.resolved' | 'rotation.unresolved' | 'command.start' | 'command.end' | 'perf.timing' | 'session.start' | 'session.end' | 'webhook.received' | 'webhook.authorized' | 'webhook.rejected' | 'webhook.matched' | 'webhook.fired' | 'webhook.failed' | 'webhook.handler.start' | 'webhook.handler.end' | 'plan.created' | 'pr.opened' | 'pr.merged' | 'worktree.created' | 'worktree.removed' | 'commit.created' | 'pushed' | 'subagent.spawned' | 'artifact.created' | 'task.completed' | 'checklist.created' | 'status.posted' | 'file.edited' | 'factory.command' | 'factory.action' | 'factory.uri' | 'factory.launch' | 'friction' | 'error' | 'warn' | 'info' | 'debug';
 /** Every known event kind. Derived from {@link EVENT_TYPE_TABLE}, never hand-listed. */
@@ -75,17 +81,6 @@ export interface EventPayload {
     [key: string]: unknown;
 }
 export type EventRecord = EventMeta & EventPayload;
-/**
- * Move root-level and interim flat-history event families into dated directories.
- *
- * The common case is a whole-family rename into an empty destination. A
- * Each segment is assigned to the local calendar day of its filesystem mtime;
- * new writes are split by day at source. A partially completed migration keeps
- * the destination active file authoritative and assigns a fresh archive number,
- * so no record is overwritten or silently discarded. The legacy active-file
- * lock serializes this with older installed processes that still append there.
- */
-export declare function migrateLegacyEventLogs(userDir?: string): number;
 /**
  * Replace a prompt string with length + short SHA so we can correlate runs
  * without persisting the raw text. Returns the fields to spread into a payload.
@@ -158,14 +153,6 @@ export declare function emitRoutineEndAsync(meta: RoutineEndMeta): Promise<void>
  * const result = time('parse-config', () => parseConfig(path));
  */
 export declare function time<T>(label: string, fn: () => T, payload?: EventPayload): T;
-/**
- * Measure execution time of an async function.
- * Emits a perf.timing event with the duration.
- *
- * @example
- * const result = await timeAsync('fetch-data', () => fetchData(url));
- */
-export declare function timeAsync<T>(label: string, fn: () => Promise<T>, payload?: EventPayload): Promise<T>;
 /**
  * Create a timing context for measuring multiple phases of an operation.
  * Useful for tracking startup time vs execution time.
@@ -182,15 +169,6 @@ export declare function createTimer(label: string, payload?: EventPayload): {
     end: (endPayload?: EventPayload) => void;
     elapsed: () => number;
 };
-/**
- * Higher-order function that wraps an async function with timing.
- * The wrapper emits start/end events automatically.
- *
- * @example
- * const timedFetch = withTiming('fetch', fetchData, { service: 'api' });
- * const result = await timedFetch(url);
- */
-export declare function withTiming<Args extends unknown[], R>(label: string, fn: (...args: Args) => Promise<R>, basePayload?: EventPayload): (...args: Args) => Promise<R>;
 /**
  * Emit a command.start event with CLI args.
  * Returns a done() function to emit command.end with duration.
@@ -202,10 +180,6 @@ export declare function withTiming<Args extends unknown[], R>(label: string, fn:
  * done({ exitCode: 0 });
  */
 export declare function emitCommand(command: string, args?: string[], payload?: EventPayload): (endPayload?: EventPayload) => void;
-/**
- * Emit an error event with full details.
- */
-export declare function emitError(err: Error | string, payload?: EventPayload): void;
 /**
  * Emit a friction event — a structured, point-of-use record of a failure or
  * block the CLI just hit. `surface` is the subsystem (teams, browser, secrets,
@@ -213,7 +187,7 @@ export declare function emitError(err: Error | string, payload?: EventPayload):
  * the same failure across sessions (e.g. 'remote-cwd-on-add', 'not-installed').
  */
 export declare function emitFriction(surface: string, failureId: string, payload?: EventPayload): void;
-export interface RotationResult {
+interface RotationResult {
     removedByAge: number;
     removedBySize: number;
     bytesReclaimed: number;
@@ -250,20 +224,7 @@ export declare function queryToolUsageForSessions(sessionIds: ReadonlySet<string
     usedBrowser: boolean;
     usedComputer: boolean;
 }>;
-/**
- * Get performance stats for a specific label.
- */
-export declare function getTimingStats(label: string, options?: {
-    days?: number;
-}): {
-    count: number;
-    avgMs: number;
-    minMs: number;
-    maxMs: number;
-    p50Ms: number;
-    p95Ms: number;
-} | null;
-export interface EventStats {
+interface EventStats {
     totalEvents: number;
     byLevel: Record<string, number>;
     byEvent: Record<string, number>;

package/dist/lib/feed/events.js

@@ -88,6 +88,14 @@ function eventsPath(date = new Date()) {
 function eventsDir(date = new Date()) {
     return path.dirname(eventsPath(date));
 }
+/**
+ * The directory today's ledger is appended to. Exported for the tool-activity
+ * collector, which watches it instead of re-running `agents computer sessions`
+ * on a timer to notice a new `computer.action` (see `feed/tool-activity.ts`).
+ */
+export function getEventsDir() {
+    return eventsDir();
+}
 /** Default retention period in days. */
 const DEFAULT_RETENTION_DAYS = 7;
 /** Default total footprint for the active log plus gzip archives (50 MiB). */
@@ -233,7 +241,7 @@ function ensureLogsDir() {
  * so no record is overwritten or silently discarded. The legacy active-file
  * lock serializes this with older installed processes that still append there.
  */
-export function migrateLegacyEventLogs(userDir = userAgentsDir()) {
+function migrateLegacyEventLogs(userDir = userAgentsDir()) {
     if (_eventsPathOverride || _legacyMigrationChecked)
         return 0;
     _legacyMigrationChecked = true;
@@ -660,56 +668,6 @@ export function time(label, fn, payload = {}) {
         throw err;
     }
 }
-/**
- * Measure execution time of an async function.
- * Emits a perf.timing event with the duration.
- *
- * @example
- * const result = await timeAsync('fetch-data', () => fetchData(url));
- */
-export async function timeAsync(label, fn, payload = {}) {
-    const start = Date.now();
-    try {
-        const result = await fn();
-        const durationMs = Date.now() - start;
-        emit('perf.timing', {
-            ...payload,
-            label,
-            durationMs,
-            status: 'success',
-        });
-        recordPerfTiming({
-            label,
-            durationMs,
-            status: 'success',
-            agent: payload.agent,
-            version: payload.version,
-            sessionId: payload.sessionId,
-            cwd: payload.cwd,
-        });
-        return result;
-    }
-    catch (err) {
-        const durationMs = Date.now() - start;
-        emit('perf.timing', {
-            ...payload,
-            label,
-            durationMs,
-            status: 'error',
-            error: err instanceof Error ? err.message : String(err),
-        });
-        recordPerfTiming({
-            label,
-            durationMs,
-            status: 'error',
-            agent: payload.agent,
-            version: payload.version,
-            sessionId: payload.sessionId,
-            cwd: payload.cwd,
-        });
-        throw err;
-    }
-}
 /**
  * Create a timing context for measuring multiple phases of an operation.
  * Useful for tracking startup time vs execution time.
@@ -755,59 +713,6 @@ export function createTimer(label, payload = {}) {
         },
     };
 }
-/**
- * Higher-order function that wraps an async function with timing.
- * The wrapper emits start/end events automatically.
- *
- * @example
- * const timedFetch = withTiming('fetch', fetchData, { service: 'api' });
- * const result = await timedFetch(url);
- */
-export function withTiming(label, fn, basePayload = {}) {
-    return async (...args) => {
-        const start = Date.now();
-        try {
-            const result = await fn(...args);
-            const durationMs = Date.now() - start;
-            emit('perf.timing', {
-                ...basePayload,
-                label,
-                durationMs,
-                status: 'success',
-            });
-            recordPerfTiming({
-                label,
-                durationMs,
-                status: 'success',
-                agent: basePayload.agent,
-                version: basePayload.version,
-                sessionId: basePayload.sessionId,
-                cwd: basePayload.cwd,
-            });
-            return result;
-        }
-        catch (err) {
-            const durationMs = Date.now() - start;
-            emit('perf.timing', {
-                ...basePayload,
-                label,
-                durationMs,
-                status: 'error',
-                error: err instanceof Error ? err.message : String(err),
-            });
-            recordPerfTiming({
-                label,
-                durationMs,
-                status: 'error',
-                agent: basePayload.agent,
-                version: basePayload.version,
-                sessionId: basePayload.sessionId,
-                cwd: basePayload.cwd,
-            });
-            throw err;
-        }
-    };
-}
 // ─── Command Tracking ─────────────────────────────────────────────────────────
 /**
  * Emit a command.start event with CLI args.
@@ -827,18 +732,6 @@ export function emitCommand(command, args = [], payload = {}) {
         cwd: process.cwd(),
     });
 }
-// ─── Error Tracking ───────────────────────────────────────────────────────────
-/**
- * Emit an error event with full details.
- */
-export function emitError(err, payload = {}) {
-    const error = err instanceof Error ? err : new Error(err);
-    emit('error', {
-        ...payload,
-        error: error.message,
-        errorStack: truncate(error.stack, 1000),
-    });
-}
 /**
  * Emit a friction event — a structured, point-of-use record of a failure or
  * block the CLI just hit. `surface` is the subsystem (teams, browser, secrets,
@@ -1183,31 +1076,6 @@ export function queryToolUsageForSessions(sessionIds) {
     }
     return result;
 }
-// ─── Stats ────────────────────────────────────────────────────────────────────
-/**
- * Get performance stats for a specific label.
- */
-export function getTimingStats(label, options = {}) {
-    const days = options.days ?? 7;
-    const startDate = new Date();
-    startDate.setDate(startDate.getDate() - days);
-    const events = query({
-        startDate,
-        eventTypes: ['perf.timing'],
-    }).filter(e => e.label === label && typeof e.durationMs === 'number');
-    if (events.length === 0)
-        return null;
-    const durations = events.map(e => e.durationMs).sort((a, b) => a - b);
-    const sum = durations.reduce((a, b) => a + b, 0);
-    return {
-        count: durations.length,
-        avgMs: Math.round(sum / durations.length),
-        minMs: durations[0],
-        maxMs: durations[durations.length - 1],
-        p50Ms: durations[Math.floor(durations.length * 0.5)],
-        p95Ms: durations[Math.floor(durations.length * 0.95)],
-    };
-}
 export function stats(options = {}) {
     const days = options.days ?? 7;
     const startDate = new Date();

package/dist/lib/feed/feed.d.ts

@@ -7,6 +7,12 @@ export interface BlockQuestion {
     header?: string;
     options?: BlockOption[];
     multiSelect?: boolean;
+    /**
+     * Preceding report/explanation for a prose question — the context that came
+     * BEFORE the trailing ask, Markdown + newlines preserved (PHNX-3999). The
+     * operator UI renders it under the question; absent for a structured question.
+     */
+    context?: string;
 }
 export interface MessageReceipt {
     /** The message id this receipt describes. */
@@ -230,8 +236,6 @@ export declare function deriveBlockState(block: OpenBlock): AttentionState;
 export declare function recordResolution(resolution: AttentionResolution, root?: string): void;
 /** Read the latest resolution tombstone for a block, if one exists. */
 export declare function readResolution(blockId: string, root?: string): AttentionResolution | undefined;
-/** Read every resolution tombstone. Returns them sorted by stable block filename. */
-export declare function listResolutions(root?: string): AttentionResolution[];
 /**
  * Stable block id for a session. One block per session -- a new question
  * replaces the previous one (the agent can only ask one question at a time).
@@ -239,7 +243,7 @@ export declare function listResolutions(root?: string): AttentionResolution[];
 export declare function blockIdForSession(sessionId: string): string;
 /** Read one block record. Returns undefined when missing or corrupt. */
 export declare function readBlock(blockId: string, root?: string): OpenBlock | undefined;
-export type RecordAnswerResult = {
+type RecordAnswerResult = {
     ok: true;
 } | {
     ok: false;
@@ -292,10 +296,6 @@ export declare function recordParked(blockId: string, root?: string): void;
 export declare function recordDefaulted(blockId: string, root?: string): void;
 /** Mark that an urgent block was paged to the phone. */
 export declare function recordNotified(blockId: string, root?: string): void;
-/** Convenience: record that a terminal answer closed the block. */
-export declare function recordTerminalAnswer(blockId: string, root?: string): void;
-/** Remove answered marker and receipts for a block (used by block removal/GC). */
-export declare function clearBlockLifecycle(blockId: string, root?: string): void;
 /** Identity of the agent declaring a block — the subset of `PostIdentity` it needs. */
 export interface DeclaringAgent {
     sessionId: string;
@@ -304,7 +304,7 @@ export interface DeclaringAgent {
     runtime: string;
     cwd?: string;
 }
-export interface DeclareBlockInput {
+interface DeclareBlockInput {
     /** What the agent needs from the user, front-loaded. */
     text: string;
     /** Answerable choices, if the ask is a pick-one. */
@@ -347,40 +347,6 @@ export declare function removeBlock(blockId: string, root?: string): boolean;
  * CLI-writable user hooks dir without a separate file in the npm tarball.
  */
 export declare const FEED_PUBLISH_HOOK_SCRIPT = "#!/usr/bin/env python3\n\"\"\"Publish and clear open-block records for `agents feed`.\n\nThe manifest invokes this script for top-level AskUserQuestion calls, waiting\nnotifications, question answers, and session lifecycle events. One atomic file\nper session means a new block replaces the previous block. Answer/resume/stop\nevents remove it so `agents feed` only lists decisions that are still open.\n\nSub-agent gate: when the PreToolUse payload carries `agent_type`, this is a\nTask/Agent subagent -- skip. Only the top-level agent publishes. Verified on\nClaude Code 2.1.170 (2026-07).\n\nFail-open: ANY error is swallowed so a feed hiccup never blocks a tool call.\n\"\"\"\nimport os\nimport sys\nimport json\nimport re\nimport socket\nimport tempfile\nfrom datetime import datetime, timezone\n\n# Notification subtypes that mean something is PENDING. Claude's idle_prompt is\n# deliberately absent: it fires a minute after the turn ended with the operator\n# idle, which is a finished turn, not a request -- publishing it put an\n# Approve/Deny banner on a session that had already answered \"pong\" (PHNX-3999).\nWAITING_NOTIFICATION_TYPES = {\n    \"permission_prompt\",\n    \"elicitation_dialog\",\n}\nCLEAR_EVENTS = {\n    \"PostToolUse\",\n    \"Stop\",\n    \"SessionEnd\",\n}\n# Codex emits a PermissionRequest event (not Claude's Notification) when it\n# blocks on an approval prompt. Claude never fires PermissionRequest, so the\n# same script handles both: PermissionRequest maps to an approval-class block\n# with a high cost-of-delay so 'agents feed --dispatch' pages it as urgent.\n\n\ndef read_json(path):\n    try:\n        with open(path) as f:\n            return json.load(f)\n    except Exception:\n        return None\n\n\ndef write_json(path, value):\n    dir_name = os.path.dirname(path)\n    os.makedirs(dir_name, exist_ok=True)\n    fd, tmp = tempfile.mkstemp(dir=dir_name, suffix=\".tmp\")\n    try:\n        with os.fdopen(fd, \"w\") as f:\n            json.dump(value, f, indent=2)\n        os.replace(tmp, path)\n    except Exception:\n        try:\n            os.unlink(tmp)\n        except Exception:\n            pass\n\n\ndef project_from_cwd(cwd):\n    \"\"\"Basename of cwd, with worktree paths resolved to their repo name.\"\"\"\n    if not cwd:\n        return None\n    norm = cwd.replace(\"\\\\\", \"/\").rstrip(\"/\")\n    if not norm:\n        return None\n    marker = \"/.agents/worktrees/\"\n    idx = norm.find(marker)\n    if idx > 0:\n        repo_path = norm[:idx]\n        base = repo_path[repo_path.rfind(\"/\") + 1:]\n        if base:\n            return base\n    base = norm[norm.rfind(\"/\") + 1:]\n    return base or None\n\n\ndef main():\n    raw = sys.stdin.read()\n    try:\n        payload = json.loads(raw) if raw.strip() else {}\n    except Exception:\n        return\n\n    # Sub-agent gate.\n    if payload.get(\"agent_type\"):\n        return\n\n    session_id = payload.get(\"session_id\", \"\")\n    if not session_id:\n        return\n\n    safe_session_id = re.sub(r\"[^A-Za-z0-9._-]\", \"-\", session_id)\n    block_id = f\"block-{safe_session_id}\"\n    home = os.environ.get(\"HOME\") or os.path.expanduser(\"~\")\n    feed_dir = os.path.join(home, \".agents\", \".history\", \"feed\")\n    answered_dir = os.path.join(feed_dir, \"answered\")\n    asks_dir = os.path.join(feed_dir, \"asks\")\n    target = os.path.join(feed_dir, f\"{block_id}.json\")\n    hook_event = payload.get(\"hook_event_name\", \"PreToolUse\")\n\n    if hook_event in CLEAR_EVENTS:\n        # A declared block (`agents feed post --blocked`) is the agent explicitly\n        # saying it is stuck. Unlike a question/notification/approval block -- which\n        # tracks an in-flight harness prompt that a lifecycle event resolves -- a\n        # declared block stays open until it is actually ANSWERED. So while it is\n        # still UNANSWERED, Stop/SessionEnd/PostToolUse must never silently drop it:\n        # otherwise the needs-you record vanishes the moment the agent parks the block\n        # and its turn ends -- exactly when the owner still needs to see and answer it.\n        # Once it IS answered (an answered marker exists), it clears like any other\n        # block by falling through below -- which frees that marker too, so a later\n        # `--blocked` in the same session is not falsely locked as already-answered\n        # (recordAnswer creates the marker with O_EXCL).\n        try:\n            with open(target) as existing_file:\n                existing = json.load(existing_file)\n            answered = os.path.exists(os.path.join(answered_dir, f\"{block_id}.json\"))\n            if existing.get(\"kind\") == \"declared\" and not answered:\n                return\n        except Exception:\n            pass\n        # A matcher-less PostToolUse clear (registered for Codex so an approved\n        # tool clears its approval card) must NOT wipe an open AskUserQuestion\n        # while an unrelated tool runs mid-question -- those are cleared only by\n        # the AskUserQuestion-matched PostToolUse. So on PostToolUse, keep a\n        # 'question' block; approval/notification blocks clear once the tool runs.\n        if hook_event == \"PostToolUse\":\n            try:\n                with open(target) as existing_file:\n                    existing = json.load(existing_file)\n                if existing.get(\"kind\") == \"question\" and payload.get(\"tool_name\") != \"AskUserQuestion\":\n                    return\n            except Exception:\n                pass\n        try:\n            os.unlink(target)\n        except FileNotFoundError:\n            pass\n        except Exception:\n            pass\n        # Also clear the answered marker so a future question for this session\n        # is not permanently locked.\n        try:\n            os.unlink(os.path.join(answered_dir, f\"{block_id}.json\"))\n        except FileNotFoundError:\n            pass\n        except Exception:\n            pass\n        return\n\n    # Terminal answers (human typed in the TUI) record an answered marker and\n    # remove the block file so the feed stops showing it within one poll cycle.\n    # The marker stays behind so a concurrent surface cannot double-answer.\n    # A resolution tombstone is written BEFORE unlink (matching TS recordAnswer)\n    # so a stale lifecycle re-read cannot resurrect this generation.\n    if hook_event == \"UserPromptSubmit\":\n        os.makedirs(answered_dir, exist_ok=True)\n        marker = os.path.join(answered_dir, f\"{block_id}.json\")\n        now_iso = datetime.now(timezone.utc).isoformat()\n        try:\n            fd = os.open(marker, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o644)\n            record = {\n                \"answeredAt\": now_iso,\n                \"answeredFrom\": \"terminal\",\n            }\n            with os.fdopen(fd, \"w\") as f:\n                json.dump(record, f, indent=2)\n        except FileExistsError:\n            pass\n        except Exception:\n            pass\n        # Tombstone first, then drop the open-block view. A missing/corrupt\n        # block means there is nothing to resolve; fail open.\n        existing = read_json(target)\n        if isinstance(existing, dict):\n            generation = existing.get(\"generation\") or existing.get(\"ts\")\n            if generation:\n                tombstone = {\n                    \"blockId\": block_id,\n                    \"generation\": generation,\n                    \"resolvedAt\": now_iso,\n                    \"reason\": \"answered\",\n                }\n                source_cursor = existing.get(\"sourceCursor\")\n                if source_cursor:\n                    tombstone[\"sourceCursor\"] = source_cursor\n                write_json(\n                    os.path.join(feed_dir, \"resolutions\", f\"{block_id}.json\"),\n                    tombstone,\n                )\n        # Remove the visible block so the feed drops the answered question.\n        try:\n            os.unlink(target)\n        except FileNotFoundError:\n            pass\n        except Exception:\n            pass\n        return\n\n    notification_type = None\n    codex_approval = False\n    if hook_event == \"Notification\":\n        notification_type = payload.get(\"notification_type\", \"\")\n        if notification_type not in WAITING_NOTIFICATION_TYPES:\n            return\n        # Claude emits a generic permission notification after presenting an\n        # AskUserQuestion. Keep the structured questions and options already\n        # published for this session instead of replacing them with that less\n        # useful notification text.\n        try:\n            with open(target) as existing_file:\n                existing = json.load(existing_file)\n            if existing.get(\"kind\") == \"question\":\n                return\n        except Exception:\n            pass\n        message = payload.get(\"message\", \"\")\n        if not message:\n            return\n        normalized_questions = [{\n            \"text\": message,\n            \"header\": payload.get(\"title\") or notification_type.replace(\"_\", \" \").title(),\n            \"multiSelect\": False,\n        }]\n        kind = \"notification\"\n    elif hook_event == \"PermissionRequest\":\n        # Codex approval prompt. The payload mirrors PreToolUse (tool_name,\n        # tool_input) but carries no questions -- Codex is asking to run a tool,\n        # not asking the operator a multiple-choice question. Publish it as a\n        # notification-kind approval block naming the tool so the feed and the\n        # phone notifier can surface it, and so AGI EXT can bridge\n        # it to a VS Code notification.\n        tool_name = payload.get(\"tool_name\") or \"a tool\"\n        tool_input = payload.get(\"tool_input\", {})\n        command = \"\"\n        if isinstance(tool_input, dict):\n            command = (\n                tool_input.get(\"command\")\n                or tool_input.get(\"cmd\")\n                or tool_input.get(\"path\")\n                or \"\"\n            )\n            if isinstance(command, list):\n                command = \" \".join(str(c) for c in command)\n        detail = f\": {command}\" if command else \"\"\n        normalized_questions = [{\n            \"text\": f\"Codex needs approval to run {tool_name}{detail}\",\n            \"header\": \"Approval needed\",\n            \"multiSelect\": False,\n        }]\n        kind = \"notification\"\n        notification_type = \"permission_prompt\"\n        codex_approval = True\n    else:\n        tool_input = payload.get(\"tool_input\", {})\n        questions = tool_input.get(\"questions\", [])\n        if not questions:\n            return\n        normalized_questions = []\n        for q in questions:\n            if not isinstance(q, dict):\n                continue\n            question = {\n                \"text\": q.get(\"question\", q.get(\"header\", \"\")),\n                \"header\": q.get(\"header\"),\n                \"multiSelect\": q.get(\"multiSelect\", False),\n            }\n            raw_opts = q.get(\"options\", [])\n            if raw_opts:\n                question[\"options\"] = [\n                    {\"label\": o.get(\"label\", \"\"), \"description\": o.get(\"description\")}\n                    for o in raw_opts\n                    if isinstance(o, dict)\n                ]\n            normalized_questions.append(question)\n        if not normalized_questions:\n            return\n        kind = \"question\"\n\n    # Identity from env (set by agents-cli at spawn).\n    mailbox_id = os.path.basename(\n        os.environ.get(\"AGENTS_MAILBOX_DIR\", \"\").rstrip(\"/\")\n    ) or session_id\n\n    now = datetime.now(timezone.utc)\n    now_iso = now.isoformat()\n    now_ms = int(now.timestamp() * 1000)\n    stats_path = os.path.join(asks_dir, f\"{safe_session_id}.json\")\n    stats = read_json(stats_path) or {}\n    recent = stats.get(\"recentAskTimestamps\") if isinstance(stats, dict) else []\n    if not isinstance(recent, list):\n        recent = []\n    recent.append(now_iso)\n    # Keep enough history for rolling one-hour needy detection without unbounded\n    # per-session files. The TypeScript reader applies the exact time window.\n    recent = recent[-200:]\n    write_json(stats_path, {\n        \"sessionId\": session_id,\n        \"mailboxId\": mailbox_id,\n        \"firstAskAt\": stats.get(\"firstAskAt\") or now_iso,\n        \"lastAskAt\": now_iso,\n        \"totalAskCount\": int(stats.get(\"totalAskCount\") or 0) + 1,\n        \"recentAskTimestamps\": recent,\n    })\n\n    hostname = os.environ.get(\"AGENTS_SYNC_MACHINE_ID\") or socket.gethostname()\n    host = hostname.split(\".\")[0].strip().lower()\n    host = re.sub(r\"[^a-z0-9_-]\", \"-\", host) or \"unknown\"\n\n    runtime = os.environ.get(\"AGENTS_RUNTIME\", \"headless\")\n    cwd = payload.get(\"cwd\") or os.environ.get(\"AGENTS_CWD\")\n    project = project_from_cwd(cwd)\n\n    block = {\n        \"blockId\": block_id,\n        \"sessionId\": session_id,\n        \"mailboxId\": mailbox_id,\n        \"host\": host,\n        \"runtime\": runtime,\n        \"ts\": now_iso,\n        # Write-time cursor so a new generation is not suppressed when\n        # session.lastActivityMs is unresolvable (cloud / remote / index-lag).\n        \"sourceCursor\": {\"lastActivityMs\": now_ms},\n        \"questions\": normalized_questions,\n        \"kind\": kind,\n    }\n    if project:\n        block[\"project\"] = project\n    if notification_type:\n        block[\"notificationType\"] = notification_type\n\n    # A Codex PermissionRequest is a real approval gate: mark it approval-class\n    # with a high cost-of-delay so 'agents feed --dispatch' classifies it urgent\n    # (isPhoneUrgent gates on costOfDelay >= phoneNotifyThreshold, default\n    # 'medium') and pages the phone. A plain 'deny' is the safe default.\n    if codex_approval:\n        block[\"blockClass\"] = \"approval\"\n        block[\"costOfDelay\"] = \"high\"\n        block[\"safeDefault\"] = \"deny\"\n\n    # Optional multi-operator control metadata passed by the agent in the\n    # AskUserQuestion tool_input. Defaults keep the existing behavior. A Codex\n    # PermissionRequest carries tool ARGS in tool_input (command/path), not\n    # operator controls, so it is excluded here -- its class/cost is stamped\n    # above from codex_approval.\n    controls = payload.get(\"tool_input\", {}) if hook_event not in (\"Notification\", \"PermissionRequest\") else {}\n    block_class = controls.get(\"blockClass\") if isinstance(controls, dict) else None\n    if block_class in (\"approval\", \"decision\"):\n        block[\"blockClass\"] = block_class\n    consequence = controls.get(\"consequence\") if isinstance(controls, dict) else None\n    if consequence:\n        block[\"consequence\"] = consequence\n    allowed = controls.get(\"allowedOperators\") if isinstance(controls, dict) else None\n    if isinstance(allowed, list):\n        block[\"allowedOperators\"] = [str(a) for a in allowed]\n    timeout = controls.get(\"timeoutMinutes\") if isinstance(controls, dict) else None\n    if isinstance(timeout, (int, float)) and timeout > 0:\n        block[\"timeoutMinutes\"] = int(timeout)\n    safe_default = controls.get(\"safeDefault\") if isinstance(controls, dict) else None\n    if isinstance(safe_default, str):\n        block[\"safeDefault\"] = safe_default\n    cost = controls.get(\"costOfDelay\") if isinstance(controls, dict) else None\n    if cost in (\"low\", \"medium\", \"high\"):\n        block[\"costOfDelay\"] = cost\n\n    # Publishing a new question clears any stale answered marker from the\n    # previous question in this session.\n    try:\n        os.unlink(os.path.join(answered_dir, f\"{block_id}.json\"))\n    except FileNotFoundError:\n        pass\n    except Exception:\n        pass\n\n    # Python's expanduser() ignores HOME on Windows, while agents-cli honors a\n    # HOME override on every platform. Use the same anchor so hooks and the CLI\n    # always read/write one feed store (including temp-home and sandbox runs).\n    os.makedirs(feed_dir, exist_ok=True)\n\n    fd, tmp = tempfile.mkstemp(dir=feed_dir, suffix=\".tmp\")\n    try:\n        with os.fdopen(fd, \"w\") as f:\n            json.dump(block, f, indent=2)\n        os.replace(tmp, target)\n    except Exception:\n        try:\n            os.unlink(tmp)\n        except Exception:\n            pass\n\n\nif __name__ == \"__main__\":\n    try:\n        main()\n    except Exception:\n        pass  # fail open\n";
-/** Manifest entry for the feed-publish hook, matching the ManifestHook shape. */
-export declare const FEED_PUBLISH_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    matcher: string;
-    script: string;
-    timeout: number;
-};
-export declare const FEED_NOTIFICATION_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    matcher: string;
-    script: string;
-    timeout: number;
-};
-export declare const FEED_PERMISSION_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    script: string;
-    timeout: number;
-};
-export declare const FEED_ANSWERED_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    matcher: string;
-    script: string;
-    timeout: number;
-};
-export declare const FEED_LIFECYCLE_HOOK_MANIFEST: {
-    name: string;
-    events: string[];
-    script: string;
-    timeout: number;
-};
 /**
  * Install the feed-publish hook script into the user hooks dir and add its
  * manifest entry to the user agents.yaml. The system repo is an auto-pulled,
@@ -391,3 +357,4 @@ export declare function ensureFeedPublishHook(userAgentsDir?: string): {
     installed: boolean;
     error?: string;
 };
+export {};

package/dist/lib/feed/feed.js

@@ -85,24 +85,6 @@ export function recordResolution(resolution, root) {
 export function readResolution(blockId, root) {
     return safeReadJson(path.join(resolutionDir(root ?? getFeedDir()), `${blockId}.json`));
 }
-/** Read every resolution tombstone. Returns them sorted by stable block filename. */
-export function listResolutions(root) {
-    const dir = resolutionDir(root ?? getFeedDir());
-    let names;
-    try {
-        names = fs.readdirSync(dir);
-    }
-    catch {
-        return [];
-    }
-    const out = [];
-    for (const name of names.filter(n => n.endsWith('.json')).sort()) {
-        const parsed = safeReadJson(path.join(dir, name));
-        if (parsed?.blockId && parsed.generation && parsed.reason)
-            out.push(parsed);
-    }
-    return out;
-}
 /**
  * Stable block id for a session. One block per session -- a new question
  * replaces the previous one (the agent can only ask one question at a time).
@@ -345,12 +327,8 @@ export function recordNotified(blockId, root) {
     block.notifiedAt = new Date().toISOString();
     publishBlock(block, dir);
 }
-/** Convenience: record that a terminal answer closed the block. */
-export function recordTerminalAnswer(blockId, root) {
-    recordAnswer(blockId, { answeredFrom: 'terminal' }, root);
-}
 /** Remove answered marker and receipts for a block (used by block removal/GC). */
-export function clearBlockLifecycle(blockId, root) {
+function clearBlockLifecycle(blockId, root) {
     const dir = root ?? getFeedDir();
     for (const sub of [answeredDir(dir), receiptDir(dir)]) {
         try {
@@ -913,43 +891,6 @@ if __name__ == "__main__":
     except Exception:
         pass  # fail open
 `;
-/** Manifest entry for the feed-publish hook, matching the ManifestHook shape. */
-export const FEED_PUBLISH_HOOK_MANIFEST = {
-    name: 'feed-publish',
-    events: ['PreToolUse'],
-    matcher: 'AskUserQuestion',
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
-export const FEED_NOTIFICATION_HOOK_MANIFEST = {
-    name: 'feed-publish-notification',
-    events: ['Notification'],
-    matcher: 'permission_prompt|elicitation_dialog',
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
-// Codex fires PermissionRequest (not Claude's Notification) when it blocks on an
-// approval prompt. The same script handles it, publishing a high-cost approval
-// block so the feed dispatch pages the phone. PermissionRequest has no matcher.
-export const FEED_PERMISSION_HOOK_MANIFEST = {
-    name: 'feed-publish-permission',
-    events: ['PermissionRequest'],
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
-export const FEED_ANSWERED_HOOK_MANIFEST = {
-    name: 'feed-clear-answered',
-    events: ['PostToolUse'],
-    matcher: 'AskUserQuestion',
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
-export const FEED_LIFECYCLE_HOOK_MANIFEST = {
-    name: 'feed-clear-lifecycle',
-    events: ['Stop', 'UserPromptSubmit', 'SessionEnd'],
-    script: '10-feed-publish.py',
-    timeout: 5,
-};
 /**
  * Install the feed-publish hook script into the user hooks dir and add its
  * manifest entry to the user agents.yaml. The system repo is an auto-pulled,