@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/lib/feed-broadcast.d.ts

@@ -14,9 +14,9 @@ export interface FeedSinkConfig {
     command?: string[];
     /**
      * In-process delivery through the same channel-provider registry `agents
-     * send`/`agents notify` use — the composed `{message}` body, no argv, no
+     * send`/`agents send --to owner` use — the composed `{message}` body, no argv, no
      * spawn. `'owner'` is the address alias (expands to `notify.owner.{channel,to}`
-     * in agents.yaml, same as `agents notify`); any other value is a registered
+     * in agents.yaml, same as `agents send --to owner`); any other value is a registered
      * channel name (or a `notify.transports` mapping) and requires `to`.
      */
     channel?: string;
@@ -113,7 +113,7 @@ export declare function blockBroadcastContext(block: {
  * not mask a delivered desktop notification.
  */
 export declare function blockDeliveryFailure(blocked: boolean, outcomes: SinkOutcome[]): string | undefined;
-export interface PlannedSink {
+interface PlannedSink {
     name: string;
     /** Command sink: argv to spawn (mutually exclusive with `channel`). */
     argv?: string[];
@@ -141,49 +141,6 @@ export interface SinkOutcome {
     /** stderr tail when the sink failed, for the warning line. */
     error?: string;
 }
-/**
- * Short host label for a phone line — strip user@ and domain so
- * `muqsit@mac-mini.tailnet.ts.net` reads as `mac-mini`.
- */
-export declare function shortHost(host: string | undefined): string | undefined;
-/** First 8 hex chars of a session id for the footer (readable, not a full uuid). */
-export declare function shortSessionChunk(session: string | undefined): string | undefined;
-/**
- * Tap-to-view link for the session behind a post: the addressable console page
- * ({@link https://prix.dev/console/sessions/<id>}, prix/web). The footer already
- * carries a short session crumb for disambiguation; this rides the link trail so
- * the owner can open the full transcript straight from an iMessage broadcast
- * instead of hunting for it in the console.
- *
- * Accepts any real, path-safe session id — a Claude/Codex UUID *and* a native
- * `ses_…` id from OpenCode or another harness. The console shard uploader
- * (`traces/sync.ts`) syncs sessions with no harness filter, so all of them are
- * addressable; a UUID-only gate would silently drop the link for every non-Claude
- * harness (the whole point of the link). Reject only an id that could not resolve:
- * one with a path separator (URL-unsafe, via {@link isValidMailboxId}) or the bare
- * 8-char footer crumb (a truncated id that would 404).
- */
-export declare function sessionConsoleUrl(session: string | undefined): string | undefined;
-/**
- * Scrub em/en dashes from outbound phone copy (house rule + iMessage readability).
- * Collapses whitespace; does not invent meaning.
- */
-export declare function scrubOutboundDashes(text: string): string;
-/**
- * Footer like "Sent from my iPhone" — who posted, a session crumb, which box.
- *
- *   Sent from grok/a02da0e2 on mac-mini
- *
- * Agent name first; session chunk for disambiguation when many groks run;
- * host last. Skip the uninformative default label `agent`.
- *
- * In `mrkdwn` the crumb (`agent/short`) becomes a Slack labeled link to the
- * session's console page, so the human sentence reads identically while the
- * crumb turns blue and taps through (PHNX-3698). `plain` keeps the bare sentence
- * — it can't render a labeled link and must not dump the URL.
- */
-export declare function composeBroadcastFooter(ctx: FeedBroadcastContext, format?: SinkMessageFormat): string | undefined;
-export declare function truncateBroadcastBody(body: string): string;
 export declare function composeBroadcastMessage(ctx: FeedBroadcastContext, format?: SinkMessageFormat): string;
 /**
  * Substitute `{placeholder}` tokens in an argv template. Returns undefined when
@@ -221,7 +178,7 @@ export declare function planFeedBroadcast(config: FeedBroadcastConfig | undefine
  * moment `feed.broadcast` was empty, even when `notify.owner` was fully
  * configured — so the common case (an operator who set up owner notifications
  * but never wrote a `feed.broadcast` block) produced a `--blocked` post that
- * looked recorded and reached nobody. `agents notify` already treats
+ * looked recorded and reached nobody. `agents send --to owner` already treats
  * `notify.owner` as the default human destination; this makes an important
  * feed post/block use that same default instead of requiring a second,
  * redundant config block that says the same thing.
@@ -265,3 +222,4 @@ export declare function withDesktopNotify(config: FeedBroadcastConfig | undefine
  * reached.
  */
 export declare function runFeedBroadcast(planned: PlannedSink[], meta: Meta, timeoutMs?: number): Promise<SinkOutcome[]>;
+export {};

package/dist/lib/feed-broadcast.js

@@ -27,7 +27,7 @@
  * A second sink shape (RUSH-2123) delivers **in-process** through the same
  * channel-provider registry `agents send` uses (`channel:` instead of
  * `command:`) — no spawn, no argv templating. `channel: owner` is the address
- * alias that expands to `notify.owner.{channel,to}`, matching `agents notify`.
+ * alias that expands to `notify.owner.{channel,to}`, matching `agents send --to owner`.
  * When the operator has never written a `feed.broadcast` block at all, an
  * important-level post falls back to that owner address implicitly
  * ({@link effectiveBroadcastConfig}) rather than reaching nobody — see that
@@ -127,7 +127,7 @@ const PLACEHOLDER = /\{([a-z_]+)\}/g;
  * Short host label for a phone line — strip user@ and domain so
  * `muqsit@mac-mini.tailnet.ts.net` reads as `mac-mini`.
  */
-export function shortHost(host) {
+function shortHost(host) {
     if (!host?.trim())
         return undefined;
     let h = host.trim();
@@ -140,7 +140,7 @@ export function shortHost(host) {
     return h || undefined;
 }
 /** First 8 hex chars of a session id for the footer (readable, not a full uuid). */
-export function shortSessionChunk(session) {
+function shortSessionChunk(session) {
     if (!session?.trim())
         return undefined;
     const hex = session.replace(/-/g, '').toLowerCase();
@@ -162,7 +162,7 @@ export function shortSessionChunk(session) {
  * one with a path separator (URL-unsafe, via {@link isValidMailboxId}) or the bare
  * 8-char footer crumb (a truncated id that would 404).
  */
-export function sessionConsoleUrl(session) {
+function sessionConsoleUrl(session) {
     const id = session?.trim();
     if (!id || !isValidMailboxId(id) || /^[0-9a-f]{8}$/i.test(id))
         return undefined;
@@ -172,7 +172,7 @@ export function sessionConsoleUrl(session) {
  * Scrub em/en dashes from outbound phone copy (house rule + iMessage readability).
  * Collapses whitespace; does not invent meaning.
  */
-export function scrubOutboundDashes(text) {
+function scrubOutboundDashes(text) {
     return text
         .replace(/\u2014/g, ' - ')
         .replace(/\u2013/g, ' - ')
@@ -227,7 +227,7 @@ function linkifyKeys(text, format) {
  * crumb turns blue and taps through (PHNX-3698). `plain` keeps the bare sentence
  * — it can't render a labeled link and must not dump the URL.
  */
-export function composeBroadcastFooter(ctx, format = 'plain') {
+function composeBroadcastFooter(ctx, format = 'plain') {
     const agent = ctx.agent?.trim();
     const agentLabel = agent && agent !== 'agent' ? agent : undefined;
     const session = shortSessionChunk(ctx.session);
@@ -283,7 +283,7 @@ export function composeBroadcastFooter(ctx, format = 'plain') {
  */
 const PHONE_BODY_MAX_CHARS = 500;
 const PHONE_BODY_MAX_LINES = 8;
-export function truncateBroadcastBody(body) {
+function truncateBroadcastBody(body) {
     if (!body)
         return body;
     let out = body;
@@ -508,7 +508,7 @@ export function planFeedBroadcast(config, ctx, meta) {
  * moment `feed.broadcast` was empty, even when `notify.owner` was fully
  * configured — so the common case (an operator who set up owner notifications
  * but never wrote a `feed.broadcast` block) produced a `--blocked` post that
- * looked recorded and reached nobody. `agents notify` already treats
+ * looked recorded and reached nobody. `agents send --to owner` already treats
  * `notify.owner` as the default human destination; this makes an important
  * feed post/block use that same default instead of requiring a second,
  * redundant config block that says the same thing.
@@ -577,7 +577,7 @@ function runCommandSink(name, argv, timeoutMs) {
 }
 /**
  * Deliver one `channel:` sink through the real provider registry —
- * `resolveSendEnvelope` reuses `agents notify`'s owner-alias expansion, and
+ * `resolveSendEnvelope` reuses `agents send --to owner`'s owner-alias expansion, and
  * `deliverEnvelope` is the same seam `agents send` calls. A bad channel name
  * is checked with `lookupTransport` (the non-throwing lookup) BEFORE handing
  * off to `deliverEnvelope`: that function's own resolution `die()`s on an

package/dist/lib/feed-outcome.d.ts

@@ -1,5 +1,5 @@
 import type { OpenBlock } from './feed/feed.js';
-export type OutcomeKind = 'ticket' | 'pr' | 'worktree' | 'unassigned';
+type OutcomeKind = 'ticket' | 'pr' | 'worktree' | 'unassigned';
 /** Stable attribution of a block (or agent) to one deliverable. */
 export interface OutcomeRef {
     /** Map/JSON key, e.g. `ticket:RUSH-1125`, `pr:#534`, `worktree:headless-secrets`, `unassigned`. */
@@ -12,7 +12,7 @@ export interface OutcomeRef {
  * Signals used to derive an outcome. All optional — callers pass whatever they
  * already know (block fields, session meta, free-text questions).
  */
-export interface OutcomeSignals {
+interface OutcomeSignals {
     ticket?: string | null;
     pr?: string | null;
     worktreeSlug?: string | null;
@@ -29,8 +29,6 @@ export interface OutcomeSignals {
  * - Bare `#123` / `PR#123` → `#123` (no repo known)
  */
 export declare function normalizePrRef(raw: string | null | undefined): string | undefined;
-/** `https://github.com/owner/repo/pull/N` → `owner/repo`. */
-export declare function repoFromPrUrl(url: string | null | undefined): string | undefined;
 /** Canonical ticket id (uppercase team key). */
 export declare function normalizeTicketRef(raw: string | null | undefined): string | undefined;
 /**
@@ -38,8 +36,6 @@ export declare function normalizeTicketRef(raw: string | null | undefined): stri
  * Exactly one outcome per call — never ambiguous, never empty.
  */
 export declare function deriveOutcome(signals: OutcomeSignals): OutcomeRef;
-/** Join question headers + bodies into one scan target for ticket/PR detection. */
-export declare function blockScanText(block: Pick<OpenBlock, 'questions'>): string;
 /** Outcome for a stored open block (uses stamped fields + question text). */
 export declare function outcomeForBlock(block: OpenBlock): OutcomeRef;
 /** Per-outcome rollup used by the default `agents feed` view. */
@@ -103,3 +99,4 @@ export declare function enrichBlockFromSession(block: OpenBlock, hint: SessionOu
  * Matching order: mailboxId, then sessionId, then agentId.
  */
 export declare function enrichBlocksFromSessions(blocks: OpenBlock[], sessions: SessionOutcomeHint[]): OpenBlock[];
+export {};

package/dist/lib/feed-outcome.js

@@ -44,7 +44,7 @@ export function normalizePrRef(raw) {
     return undefined;
 }
 /** `https://github.com/owner/repo/pull/N` → `owner/repo`. */
-export function repoFromPrUrl(url) {
+function repoFromPrUrl(url) {
     if (!url)
         return undefined;
     const m = /github\.com\/([^/\s]+)\/([^/\s]+)\/pull\/\d+/i.exec(url);
@@ -116,7 +116,7 @@ export function deriveOutcome(signals) {
     return UNASSIGNED;
 }
 /** Join question headers + bodies into one scan target for ticket/PR detection. */
-export function blockScanText(block) {
+function blockScanText(block) {
     return block.questions
         .map((q) => [q.header, q.text].filter(Boolean).join(' '))
         .filter(Boolean)

package/dist/lib/feed-policy.d.ts

@@ -1,24 +1,22 @@
 import { type OpenBlock, type AnswerRecord } from './feed/feed.js';
-export type BlockClass = 'approval' | 'decision';
-export interface ClassPolicy {
+type BlockClass = 'approval' | 'decision';
+interface ClassPolicy {
     timeoutMinutes: number;
     /** For approval class only: the answer to apply when the timeout fires. */
     safeDefault?: string;
 }
-export interface FeedPolicy {
+interface FeedPolicy {
     approval: ClassPolicy;
     decision: ClassPolicy;
     /** High-cost-of-delay blocks below this threshold do not page the phone. */
     phoneNotifyThreshold: 'low' | 'medium' | 'high';
 }
 export declare const DEFAULT_POLICY: FeedPolicy;
-export declare function getPolicyPath(root?: string): string;
 export declare function loadPolicy(root?: string): FeedPolicy;
 export declare function blockClass(block: OpenBlock): BlockClass;
 export declare function isPhoneUrgent(block: OpenBlock, policy: FeedPolicy): boolean;
-export declare function minutesElapsed(block: OpenBlock, now: Date): number;
 export declare function isTimedOut(block: OpenBlock, policy: FeedPolicy, now: Date): boolean;
-export interface PolicyResult {
+interface PolicyResult {
     blockId: string;
     action: 'none' | 'defaulted' | 'parked';
     answer?: AnswerRecord;
@@ -28,3 +26,4 @@ export interface PolicyResult {
  * Caller is responsible for persistence/logging side effects not owned by feed.ts.
  */
 export declare function applyPolicyToBlock(block: OpenBlock, policy: FeedPolicy, now: Date, root?: string, mailboxRoot?: string): PolicyResult;
+export {};

package/dist/lib/feed-policy.js

@@ -25,7 +25,7 @@ export const DEFAULT_POLICY = {
     decision: { timeoutMinutes: 60 },
     phoneNotifyThreshold: 'medium',
 };
-export function getPolicyPath(root) {
+function getPolicyPath(root) {
     return path.join(root ?? getUserAgentsDir(), POLICY_FILE);
 }
 function normalizeClassPolicy(raw, fallback) {
@@ -65,7 +65,7 @@ export function isPhoneUrgent(block, policy) {
     const cost = block.costOfDelay ?? 'low';
     return COST_RANK[cost] >= COST_RANK[policy.phoneNotifyThreshold];
 }
-export function minutesElapsed(block, now) {
+function minutesElapsed(block, now) {
     const ts = Date.parse(block.ts);
     if (Number.isNaN(ts))
         return 0;

package/dist/lib/feed-post.d.ts

@@ -4,7 +4,7 @@ import { type PidSessionEntry } from './session/pid-registry.js';
 export declare const STATUS_POST_MAX_CHARS = 500;
 /** Title is a phone subject line - about four or five words, not a paragraph. */
 export declare const STATUS_TITLE_MAX_CHARS = 60;
-export interface FeedPostInput {
+interface FeedPostInput {
     /**
      * Short subject (required for new posts). ~4–5 words. Phone broadcasts put
      * this on the first line so a scan names the topic before the body.
@@ -53,7 +53,7 @@ export interface FeedPostInput {
     /** Override full registry list for launchId match (tests). */
     listEntries?: () => PidSessionEntry[];
 }
-export interface FeedPostResult {
+interface FeedPostResult {
     event: ActivityEvent;
 }
 export interface PostIdentity {
@@ -78,8 +78,6 @@ export interface PostIdentity {
 export declare function resolvePostIdentity(input: Pick<FeedPostInput, 'sessionId' | 'env' | 'cwd' | 'activityRoot' | 'startPid' | 'getParentPid' | 'readEntry' | 'listEntries'>): PostIdentity | undefined;
 /** Walk up to 16 ancestors looking for a by-pid registry entry with a session. */
 export declare function walkPidRegistry(startPid: number, getParent: (pid: number) => number | undefined, readEntry: (pid: number) => PidSessionEntry | undefined): PidSessionEntry | undefined;
-/** Best-effort parent pid of `pid` (Linux /proc, else `ps`). */
-export declare function parentPidOf(pid: number): number | undefined;
 /**
  * Turn one `--attach` token into an {@link Attachment}. Remote URLs become
  * `link` (or a media kind when the extension is unambiguous). Local files are
@@ -112,3 +110,4 @@ export declare function normalizeStatusTitle(title: string): string;
  * Throws if title/text is empty or session identity cannot be resolved.
  */
 export declare function postFeedStatus(input: FeedPostInput): FeedPostResult;
+export {};

package/dist/lib/feed-post.js

@@ -120,7 +120,7 @@ export function walkPidRegistry(startPid, getParent, readEntry) {
     return firstHit;
 }
 /** Best-effort parent pid of `pid` (Linux /proc, else `ps`). */
-export function parentPidOf(pid) {
+function parentPidOf(pid) {
     if (!Number.isInteger(pid) || pid <= 1)
         return undefined;
     if (process.platform === 'linux') {

package/dist/lib/feed-ranking.d.ts

@@ -20,14 +20,14 @@ export interface FeedSessionSignal {
     cloudProvider?: string;
     cloudTaskId?: string;
 }
-export interface RankedFeedBlock extends OpenBlock {
+interface RankedFeedBlock extends OpenBlock {
     delayRank: NonNullable<OpenBlock['delayRank']>;
 }
 export declare function buildSessionSignals(active: ActiveSession[], metas?: SessionMeta[]): FeedSessionSignal[];
 export declare function decisionIrreducibility(c: Classification): number;
 export declare function burnUsdPerHour(signal: FeedSessionSignal | undefined, block: OpenBlock): number;
 export declare function rankFeedBlocks(blocks: OpenBlock[], signals?: FeedSessionSignal[], now?: Date): RankedFeedBlock[];
-export declare function recentAskCount(stats: FeedAskStats, now?: Date): number;
 export declare function needyControlCards(stats: FeedAskStats[], signals?: FeedSessionSignal[], now?: Date, threshold?: number): OpenBlock[];
 export declare function runawayControlCards(signals: FeedSessionSignal[], now?: Date): OpenBlock[];
 export declare function synthesizeControlCards(signals: FeedSessionSignal[], stats: FeedAskStats[], now?: Date): OpenBlock[];
+export {};

package/dist/lib/feed-ranking.js

@@ -127,7 +127,7 @@ export function rankFeedBlocks(blocks, signals = [], now = new Date()) {
         return Date.parse(a.ts) - Date.parse(b.ts);
     });
 }
-export function recentAskCount(stats, now = new Date()) {
+function recentAskCount(stats, now = new Date()) {
     const cutoff = now.getTime() - 60 * 60_000;
     return stats.recentAskTimestamps.filter((ts) => {
         const parsed = Date.parse(ts);

package/dist/lib/fleet/apply.d.ts

@@ -52,7 +52,7 @@ export interface SourceAuth {
  * list (PHNX-2371).
  */
 export declare function fleetSecretsBundles(declared: string[] | undefined): string[];
-export interface DiffContext {
+interface DiffContext {
     /** agents-cli version the source is on — the fleet target version. */
     targetCliVersion: string;
     sourceAuth: SourceAuth;
@@ -72,7 +72,7 @@ export interface DiffContext {
 /** Pure: desired vs probed -> per-device diff + flat action list. */
 export declare function diffFleet(desired: DeviceDesired[], probes: Map<string, DeviceProbe>, ctx: DiffContext): FleetPlan;
 /** Why a declared bundle is or is not pushed to one device. */
-export interface SecretPushDecision {
+interface SecretPushDecision {
     push: boolean;
     /** Where it would land on the remote. Only meaningful when `push`. */
     backend: RemoteBackend;
@@ -108,7 +108,7 @@ export interface SecretPushDecision {
  * the one fleet-shared setup-token store (PHNX-2371).
  */
 export declare function decideSecretPush(bundle: string, desired: DeviceDesired, probe: DeviceProbe, ctx: DiffContext): SecretPushDecision;
-export interface ProbeOptions {
+interface ProbeOptions {
     /** Also fetch per-agent installed versions (one extra `agents view --json`
      * round-trip). Enable only when the plan has a version-pinned spec. */
     withVersions?: boolean;
@@ -141,18 +141,17 @@ export interface DeviceApplyResult {
     steps: ApplyStep[];
     note?: string;
 }
-export interface ExecContext {
+interface ExecContext {
     targetCliVersion: string;
     source: string;
     sourceAuth: SourceAuth;
     /** Set for a dry run — probe + plan only, execute nothing. */
     dryRun?: boolean;
 }
-/** Execute one device's planned actions in order. Real SSH — no mocks. */
-export declare function reconcileDevice(row: DeviceDiff, device: DeviceProfile, ctx: ExecContext): Promise<DeviceApplyResult>;
 /** Run a pool of async tasks with a concurrency cap, preserving input order. */
 export declare function pool<T, R>(items: T[], limit: number, fn: (item: T, index: number) => Promise<R>): Promise<R[]>;
 /** Reconcile every device row in parallel (capped). */
 export declare function runFleetApply(rows: DeviceDiff[], nameToProfile: Map<string, DeviceProfile>, ctx: ExecContext, concurrency?: number): Promise<DeviceApplyResult[]>;
 /** Default home for source snapshots (overridable in tests). */
 export declare function sourceHome(): string;
+export {};

package/dist/lib/fleet/apply.js

@@ -9,7 +9,7 @@
  */
 import * as os from 'os';
 import { pushBundleToHost } from '../secrets-client.js';
-import { AUTH_BUNDLE_NAME, inspectReservedAuthBundle, isReservedBundleName } from '../secrets-policy.js';
+import { AUTH_STORE_ALIAS, inspectReservedAuthBundle, isReservedBundleName } from '../secrets-policy.js';
 import { deviceIdentityArgs, sshTargetFor } from '../devices/connect.js';
 import { readyProbe, bootstrapAgentsCli } from '../hosts/ready.js';
 import { buildRemoteAgentsInvocation } from '../hosts/remote-cmd.js';
@@ -98,8 +98,8 @@ export function parseInstalledVersions(stdout) {
 export function fleetSecretsBundles(declared) {
     const out = [...(declared ?? [])];
     const auth = inspectReservedAuthBundle();
-    if (auth.exists && auth.ok && !out.includes(AUTH_BUNDLE_NAME)) {
-        out.push(AUTH_BUNDLE_NAME);
+    if (auth.exists && auth.ok && !out.includes(AUTH_STORE_ALIAS)) {
+        out.push(AUTH_STORE_ALIAS);
     }
     return out;
 }
@@ -371,7 +371,7 @@ export function parseRemoteBundles(stdout) {
     }
 }
 /** Execute one device's planned actions in order. Real SSH — no mocks. */
-export async function reconcileDevice(row, device, ctx) {
+async function reconcileDevice(row, device, ctx) {
     if (!row.probe.reachable) {
         return { device: row.device, ok: false, steps: [], note: row.probe.note ?? 'unreachable' };
     }

package/dist/lib/fleet/manifest.d.ts

@@ -12,7 +12,7 @@ import type { FleetManifest, DeviceDesired } from './types.js';
 export declare function parseFleetManifest(raw: unknown): FleetManifest;
 /** Read a YAML file and extract + validate its `fleet:` block. */
 export declare function readFleetFile(filePath: string): FleetManifest;
-export interface ResolveContext {
+interface ResolveContext {
     /** Device names currently online (used to expand `devices: all`). */
     onlineDevices: string[];
     /** All registered device names (used to validate explicit entries). */
@@ -50,3 +50,4 @@ export declare function emptyTargetsMessage(manifest: FleetManifest): {
     style: 'hint' | 'plain';
     lines: string[];
 };
+export {};

package/dist/lib/fleet/remote-login.d.ts

@@ -3,7 +3,7 @@ import type { DeviceProfile } from '../devices/registry.js';
 import { type AuthVerdict, type AuthHealth } from '../auth-health.js';
 import { type LoginFlow } from './auth-sync.js';
 /** A verification URL + user code scraped from a device-code login screen. */
-export interface ScrapedLogin {
+interface ScrapedLogin {
     url?: string;
     code?: string;
 }
@@ -17,7 +17,7 @@ export interface ScrapedLogin {
  */
 export declare function scrapeLogin(screenText: string, flow: LoginFlow): ScrapedLogin;
 /** Why a logged-out (agent, device) pair can or cannot be driven remotely. */
-export interface FlowClassification {
+interface FlowClassification {
     flow: LoginFlow | null;
     remotable: boolean;
     reason?: string;
@@ -38,7 +38,7 @@ export declare function classifyLoginFlow(agent: AgentId | string, platform: str
  */
 export declare function isPendingVerdict(verdict: AuthVerdict | undefined): boolean;
 /** A logged-out (agent, device) pair `fleet login` will target or explain. */
-export interface PendingLogin {
+interface PendingLogin {
     device: string;
     agent: AgentId | string;
     platform?: string;
@@ -51,7 +51,7 @@ export interface PendingLogin {
     /** Present when `!remotable` — why it must be done on the box itself. */
     reason?: string;
 }
-export interface SelectLoginOptions {
+interface SelectLoginOptions {
     /** Include pairs already logged-in (verdict live/unverified) — for a forced re-login. */
     includeLoggedIn?: boolean;
 }
@@ -68,7 +68,7 @@ export interface SelectLoginOptions {
 export declare function selectLoginTargets(devices: DeviceProfile[], agents: (AgentId | string)[], cache: Record<string, AuthHealth>, opts?: SelectLoginOptions): PendingLogin[];
 /**
  * Build the `ssh -tt <target> <loginCommand>` command string driven through the
- * PTY sidecar. `-tt` forces a tty so the remote CLI enters its interactive
+ * `term` CLI. `-tt` forces a tty so the remote CLI enters its interactive
  * device-code flow; `accept-new` learns a first-seen host key without a prompt.
  * Both the target and the login command are shell-quoted. Pure/testable.
  *
@@ -77,7 +77,7 @@ export declare function selectLoginTargets(devices: DeviceProfile[], agents: (Ag
  * are a follow-up (TODO), surfaced as an error rather than silently mis-driven.
  */
 export declare function buildRemoteLoginSshCommand(target: string, flow: LoginFlow, extraSshArgs?: string[]): string;
-export type LoginMode = 'bulk' | 'interactive';
+type LoginMode = 'bulk' | 'interactive';
 /** Per-pair status shape shared between the driver, the status endpoint, and the page. */
 export type LoginStatusState = 'pending' | 'driving' | 'ready' | 'authorized' | 'error' | 'skipped';
 export interface LoginStatus {
@@ -101,8 +101,8 @@ export interface LoginStatus {
  * light variant via `prefers-color-scheme`.
  */
 export declare function buildDashboardHtml(pending: PendingLogin[], mode: LoginMode): string;
-/** The subset of the PTY sidecar `driveRemoteLogin` needs — faked in tests. */
-export interface PtyDriver {
+/** The subset of the `term` CLI `driveRemoteLogin` needs — faked in tests. */
+export interface TermDriver {
     start(opts?: {
         rows?: number;
         cols?: number;
@@ -115,8 +115,8 @@ export interface PtyDriver {
     }>;
     stop(id: string): Promise<void>;
 }
-/** Real driver over the pty sidecar (`ptyRequest`). */
-export declare function defaultPtyDriver(): PtyDriver;
+/** Real driver over the standalone `term` CLI (`../term-client.js`). */
+export declare function defaultTermDriver(): TermDriver;
 export interface DriveOptions {
     /** Wait after launching ssh before steering / scraping (default 4000ms). */
     initialDelayMs?: number;
@@ -125,41 +125,22 @@ export interface DriveOptions {
     /** Overall scrape deadline (default 90000ms). */
     timeoutMs?: number;
 }
-export interface DriveResult extends ScrapedLogin {
+interface DriveResult extends ScrapedLogin {
     /** True when the underlying ssh session already exited (login finished or failed). */
     exited: boolean;
-    /** The pty session id, so the caller can keep polling / stop it. */
+    /** The term session id, so the caller can keep polling / stop it. */
     sessionId: string;
 }
 /**
  * Drive one remote device-code login: launch `ssh -tt <target> <loginCommand>`
- * in a PTY, send the flow's `deviceCodeSelect` keystrokes (if any) to reach the
+ * in a `term` session, send the flow's `deviceCodeSelect` keystrokes (if any) to reach the
  * device-code path, then poll the screen until {@link scrapeLogin} yields both a
  * URL and a code (or the deadline / session-exit). The human completes the code
  * in the browser; the caller polls the credential file for completion. Testable
- * against a fake {@link PtyDriver}.
+ * against a fake {@link TermDriver}.
  */
-export declare function driveRemoteLogin(target: string, flow: LoginFlow, driver: PtyDriver, opts?: DriveOptions, extraSshArgs?: string[]): Promise<DriveResult>;
-export interface DetectOptions {
-    agents?: (AgentId | string)[];
-    devices?: string[];
-    includeLoggedIn?: boolean;
-}
-/**
- * Resolve the online fleet devices, then compute pending logins
- * from the shared auth-health cache (populated by `agents fleet ping`). Thin I/O
- * over the pure {@link selectLoginTargets}. Devices/agents can be narrowed by the
- * caller's flags; the default agent set is every agent with a defined flow.
- */
-export declare function detectPending(opts?: DetectOptions): Promise<PendingLogin[]>;
-/**
- * Best-effort epoch-seconds mtime of a home-relative file on a remote box, or 0
- * when it is absent/unreadable. Used to detect the credential file appearing /
- * bumping after the human completes the browser step. POSIX `stat` only (the
- * device-code agents are all POSIX-fleet).
- */
-export declare function remoteFileMtime(target: string, homeRel: string, extraSshArgs?: string[]): Promise<number>;
-export interface RunFleetLoginOptions {
+export declare function driveRemoteLogin(target: string, flow: LoginFlow, driver: TermDriver, opts?: DriveOptions, extraSshArgs?: string[]): Promise<DriveResult>;
+interface RunFleetLoginOptions {
     agents?: (AgentId | string)[];
     devices?: string[];
     interactive?: boolean;
@@ -167,7 +148,7 @@ export interface RunFleetLoginOptions {
     /** Target every device-code pair regardless of cached login state (cold cache / forced re-login). */
     all?: boolean;
     /** Overrides for testing / non-default cadence. */
-    driver?: PtyDriver;
+    driver?: TermDriver;
     drive?: DriveOptions;
     /** Port for the local dashboard (0 = ephemeral). */
     port?: number;
@@ -186,3 +167,4 @@ export interface RunFleetLoginOptions {
  * this wires them to the live fleet.
  */
 export declare function runFleetLogin(opts?: RunFleetLoginOptions): Promise<LoginStatus[]>;
+export {};