@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/lib/heal.d.ts

@@ -69,8 +69,8 @@ export interface HealResult {
     refreshedPlugins: PluginRefreshResult[];
     skippedPlugins: PluginRefreshSkip[];
 }
-export interface HealOptions {
-    /** 'full' (doctor --fix): fix drift + refresh unknown-baseline plugins.
+interface HealOptions {
+    /** 'full' (agents sync): fix drift + refresh unknown-baseline plugins.
      *  'safe' (daemon): missing + invalid-manifest + unmodified refresh only. */
     mode: 'full' | 'safe';
     /** Resolution cwd. Defaults to the home dir so no project layer is ever
@@ -85,27 +85,10 @@ export interface HealOptions {
 }
 /** True when a heal pass made (or would make) any change at all. */
 export declare function healChangedAnything(r: HealResult): boolean;
-/** One-line summary of a heal pass for daemon logs. */
-export declare function summarizeHeal(r: HealResult): string;
-/**
- * Fire a branded desktop notification when a background heal did something
- * noteworthy. Routed through the MenubarHelper companion (notify-desktop.ts) so
- * it carries the agents-cli mark; clicking opens the runs folder
- * (~/.agents/.history/runs, via the `routines:list` action the companion
- * understands). Best-effort — a missing
- * notifier or no display is swallowed. Silent when the pass auto-fixed everything
- * and nothing needs the operator (no point pinging them for routine self-healing).
- */
-export declare function notifyHeal(r: HealResult): void;
-/**
- * Strip Claude-invalid bare-name `skills`/`commands` fields from every central
- * plugin's SOURCE plugin.json. Unambiguously safe (Claude auto-discovers both
- * from their directories) and the precondition for those plugins loading at all.
- */
-export declare function repairCentralPluginManifests(dryRun?: boolean): ManifestRepairResult[];
 /**
  * Run a heal pass. Repairs the central plugin layer once (manifest + stale
  * refresh), then reconciles every targeted (agent, version) home against its
  * live diff. Returns a full account of what changed (or would, under dryRun).
  */
 export declare function heal(opts: HealOptions): Promise<HealResult>;
+export {};

package/dist/lib/heal.js

@@ -31,7 +31,6 @@ import { repairPluginManifestFile } from './plugins/plugin-marketplace.js';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
-import { notifyDesktop } from './menubar/notify-desktop.js';
 // ─── diff → selection mapping ────────────────────────────────────────────────
 // Which ResourceSelection key each healable diff kind writes through. `rules`
 // re-syncs via the whole-memory channel (not name-scoped); `promptcuts` is not
@@ -55,49 +54,13 @@ export function healChangedAnything(r) {
         r.repairedManifests.length > 0 ||
         r.refreshedPlugins.length > 0);
 }
-/** One-line summary of a heal pass for daemon logs. */
-export function summarizeHeal(r) {
-    const parts = [];
-    const healed = totalHealed(r);
-    if (healed > 0)
-        parts.push(`${healed} resource(s) healed`);
-    if (r.repairedManifests.length > 0)
-        parts.push(`${r.repairedManifests.length} manifest(s) repaired`);
-    if (r.refreshedPlugins.length > 0)
-        parts.push(`${r.refreshedPlugins.length} plugin(s) refreshed`);
-    if (r.skippedPlugins.length > 0)
-        parts.push(`${r.skippedPlugins.length} plugin(s) need attention`);
-    return parts.length > 0 ? parts.join(', ') : 'nothing to heal';
-}
-/**
- * Fire a branded desktop notification when a background heal did something
- * noteworthy. Routed through the MenubarHelper companion (notify-desktop.ts) so
- * it carries the agents-cli mark; clicking opens the runs folder
- * (~/.agents/.history/runs, via the `routines:list` action the companion
- * understands). Best-effort — a missing
- * notifier or no display is swallowed. Silent when the pass auto-fixed everything
- * and nothing needs the operator (no point pinging them for routine self-healing).
- */
-export function notifyHeal(r) {
-    const needsAttention = r.skippedPlugins.length;
-    const healed = totalHealed(r) + r.repairedManifests.length + r.refreshedPlugins.length;
-    if (needsAttention === 0 && healed === 0)
-        return;
-    const title = needsAttention > 0
-        ? `${needsAttention} plugin${needsAttention === 1 ? '' : 's'} need attention`
-        : 'agents: auto-healed config gaps';
-    const body = needsAttention > 0
-        ? `${summarizeHeal(r)}. Run: agents sync`
-        : summarizeHeal(r);
-    notifyDesktop({ title, body, action: 'routines:list' });
-}
 // ─── central plugin layer (version-independent, runs once per heal) ──────────
 /**
  * Strip Claude-invalid bare-name `skills`/`commands` fields from every central
  * plugin's SOURCE plugin.json. Unambiguously safe (Claude auto-discovers both
  * from their directories) and the precondition for those plugins loading at all.
  */
-export function repairCentralPluginManifests(dryRun = false) {
+function repairCentralPluginManifests(dryRun = false) {
     const out = [];
     for (const p of discoverPlugins()) {
         const manifestPath = path.join(p.root, '.claude-plugin', 'plugin.json');
@@ -265,7 +228,7 @@ export async function heal(opts) {
     // unattended from the daemon (~30s after start, then every ~6h) — a sweep that
     // walked into an isolated home would quietly refill it with shared commands,
     // skills, hooks, MCP config and permissions. Explicitly NAMED versions
-    // (`agents doctor <agent>@<version> --fix`) are honoured as-is: naming the
+    // (`agents sync <agent>@<version>`) are honoured as-is: naming the
     // version is the operator's consent.
     const sweep = (a) => listInstalledVersions(a).filter((v) => !isVersionIsolated(a, v));
     const targets = opts.agent

package/dist/lib/help.d.ts

@@ -6,7 +6,7 @@
  */
 import type { Command } from 'commander';
 /** Description of a named command group rendered as its own section in help output. */
-export interface CommandGroup {
+interface CommandGroup {
     /** Section heading, e.g. 'Bundle commands'. */
     title: string;
     /** Subcommand names (in desired display order) that belong to this group. */
@@ -28,7 +28,7 @@ export declare const FRONT_DOOR_COMMAND_GROUPS: readonly CommandGroup[];
 /** Mark the root program so its help only renders front-door groups + a pointer. */
 export declare function setCompactRootHelp(program: Command): void;
 /** Examples + Notes blocks attached to a command via setHelpSections. */
-export interface HelpSections {
+interface HelpSections {
     examples?: string;
     notes?: string;
 }
@@ -45,3 +45,4 @@ export declare function setHelpSections(cmd: Command, sections: HelpSections): v
 export declare function getHelpSections(cmd: Command): Readonly<HelpSections>;
 /** Apply standardized help formatting to the root command and all subcommands. */
 export declare function applyGlobalHelpConventions(root: Command): void;
+export {};

package/dist/lib/helper-download.d.ts

@@ -81,10 +81,6 @@ export declare function helperAssetUrls(spec: HelperSpec, version: string): {
 /** Extract `TeamIdentifier=XXXX` from `codesign -dv --verbose=4` output (which is
  *  emitted on stderr). Returns null when absent (ad-hoc / unsigned). */
 export declare function parseTeamId(codesignInfo: string): string | null;
-/** Read the bundle's designated requirement string (`codesign -d --requirements -`).
- *  codesign writes it to stdout, but capture both streams so a diagnostic on
- *  stderr can never make the pin-check read empty and falsely pass. */
-export declare function readDesignatedRequirement(appPath: string): string;
 /**
  * Pure predicate (no I/O) behind the DR pin: does the requirement string pin
  * BOTH the expected CFBundleIdentifier and the Developer ID Team? Returns null
@@ -94,14 +90,6 @@ export declare function readDesignatedRequirement(appPath: string): string;
  * + team substring check against the same requirement string).
  */
 export declare function checkDesignatedRequirement(req: string, bundleId: string, teamId: string): string | null;
-/**
- * Verify the bundle's designated requirement pins the expected CFBundleIdentifier
- * AND Developer ID Team. macOS re-validates each new version against this stored
- * requirement to keep an Accessibility grant alive across upgrades; a downloaded
- * bundle whose DR drops either pin would silently revoke that grant on the next
- * paste, so refuse it.
- */
-export declare function verifyDesignatedRequirement(appPath: string, bundleId: string, teamId: string): void;
 /**
  * Verify a helper `.app` bundle is intact, signed by the expected Developer ID
  * Team, (for the menu-bar helper) pinned by its designated requirement, and

package/dist/lib/helper-download.js

@@ -73,7 +73,7 @@ export function parseTeamId(codesignInfo) {
 /** Read the bundle's designated requirement string (`codesign -d --requirements -`).
  *  codesign writes it to stdout, but capture both streams so a diagnostic on
  *  stderr can never make the pin-check read empty and falsely pass. */
-export function readDesignatedRequirement(appPath) {
+function readDesignatedRequirement(appPath) {
     const r = spawnSync('/usr/bin/codesign', ['-d', '--requirements', '-', appPath], { encoding: 'utf8' });
     return `${r.stdout ?? ''}${r.stderr ?? ''}`;
 }
@@ -105,7 +105,7 @@ export function checkDesignatedRequirement(req, bundleId, teamId) {
  * bundle whose DR drops either pin would silently revoke that grant on the next
  * paste, so refuse it.
  */
-export function verifyDesignatedRequirement(appPath, bundleId, teamId) {
+function verifyDesignatedRequirement(appPath, bundleId, teamId) {
     const err = checkDesignatedRequirement(readDesignatedRequirement(appPath), bundleId, teamId);
     if (err)
         throw new Error(err);

package/dist/lib/helper-versions.d.ts

@@ -29,7 +29,7 @@
 /** The helpers that have their own release train. */
 export type HelperName = 'menubar';
 /** One helper's release identity. */
-export interface HelperRelease {
+interface HelperRelease {
     /** Tag prefix — the release is `<tagPrefix>/v<version>`. */
     tagPrefix: string;
     /**
@@ -57,3 +57,4 @@ export declare const HELPER_RELEASES: Readonly<Record<HelperName, HelperRelease>
 export declare function helperTag(helper: HelperName, version: string): string;
 /** The floor build for one helper — the version used when nothing resolves higher. */
 export declare function helperFloor(helper: HelperName): string;
+export {};

package/dist/lib/helper-versions.js

@@ -41,7 +41,7 @@
  * it would claim a distribution responsibility agents-cli no longer has.
  */
 export const HELPER_RELEASES = {
-    menubar: { tagPrefix: 'menubar', floor: '1.3.0' },
+    menubar: { tagPrefix: 'menubar', floor: '1.5.0' },
 };
 /** The release tag for one helper at one version, e.g. `menubar/v1.0.0`. */
 export function helperTag(helper, version) {

package/dist/lib/hooks/install.d.ts

@@ -29,7 +29,7 @@ export declare function toPortableCommand(absPath: string, home?: string, sep?:
  */
 export declare function deduplicateVersionHookCommands(commands: string[], activeVersionHome: string): string[];
 import type { AgentId, HookCacheConfig, HookMatches, InstalledHook, ManifestHook } from '../types.js';
-export type HookEntry = {
+type HookEntry = {
     name: string;
     scriptPath: string;
     dataFile?: string;
@@ -64,15 +64,6 @@ export declare function inspectDuplicateVersionHooks(cwd?: string): DuplicateVer
  * `foo.yaml`. On basename collision, the top-level file wins over a nested one.
  */
 export declare function listHookEntriesFromDir(dir: string): HookEntry[];
-/**
- * Check if a hook exists for an agent.
- */
-export declare function hookExists(agentId: AgentId, hookName: string): boolean;
-/**
- * Check if installed hook content matches source hook content.
- * Compares both script file and data file (if present).
- */
-export declare function hookContentMatches(agentId: AgentId, hookName: string, sourceEntry: HookEntry): boolean;
 /**
  * Hooks dir for an agent under an arbitrary home (version home or effective
  * home). An agent whose `hooksDir` is configured absolute under `$HOME` (grok,
@@ -111,7 +102,7 @@ export interface HookWiringIssue {
     command: string;
 }
 /** A generated, agents-managed hook wrapper and the inputs needed to recreate it. */
-export interface ManagedHookRuntimeArtifact {
+interface ManagedHookRuntimeArtifact {
     agent: AgentId;
     version: string;
     name: string;
@@ -171,7 +162,7 @@ export interface HookRuntimeRepairAttempt {
 }
 /**
  * Result of one bounded repair pass over agents-managed generated hook shims.
- * Shared by self-heal and doctor --fix; additive types for the doctor track.
+ * Shared by self-heal and agents sync; additive types for the doctor track.
  */
 export interface HookRuntimeRepairReport {
     /** Broken artifacts found before any write (inspect-only snapshot). */
@@ -184,7 +175,7 @@ export interface HookRuntimeRepairReport {
     /** Human-readable lines for CheckResult.needsAttention — stable wording. */
     needsAttention: string[];
 }
-export interface RepairManagedHookRuntimeOptions {
+interface RepairManagedHookRuntimeOptions {
     /** Detect only — never write. Default false. */
     dryRun?: boolean;
     filter?: {
@@ -193,19 +184,6 @@ export interface RepairManagedHookRuntimeOptions {
     };
     platform?: NodeJS.Platform;
 }
-/**
- * Regenerate one known-broken wrapper and prove the result is usable. Callers
- * provide a snapshot from inspectBrokenManagedHookRuntimeArtifacts; this never
- * loops or retries and returns a stable error for the current pass.
- *
- * Generation is delegated to generateHookShim (idempotent — preserves mtime when
- * content already matches). This path never calls registerHooksToSettings,
- * installHooks, or any sync routine.
- */
-export declare function repairManagedHookRuntimeArtifact(artifact: ManagedHookRuntimeArtifact, platform?: NodeJS.Platform): {
-    repaired: boolean;
-    reason?: string;
-};
 /**
  * Bounded repair of all broken agents-managed generated hook shims.
  *
@@ -234,7 +212,7 @@ export declare function repairManagedHookRuntimeArtifacts(opts?: RepairManagedHo
  * resolveHookCommand performs, so it never mutates the version home.
  */
 export declare function checkVersionHookWiring(agent: AgentId, version: string): HookWiringReport;
-export interface VersionHookDiff {
+interface VersionHookDiff {
     agent: AgentId;
     version: string;
     toAdd: string[];
@@ -246,13 +224,6 @@ export interface VersionHookDiff {
  * Compare a version home's hooks against central. Returns the reconciliation diff.
  */
 export declare function diffVersionHooks(agent: AgentId, version: string): VersionHookDiff;
-/**
- * Install a single hook from central into a specific version home.
- */
-export declare function installHookToVersion(agent: AgentId, version: string, hookName: string): {
-    success: boolean;
-    error?: string;
-};
 /**
  * Remove a single hook (script + data file) from a specific version home.
  * Soft-deletes to ~/.agents/.trash/hooks/.
@@ -285,10 +256,6 @@ export declare function getHookInfo(name: string): {
     content: string;
 } | null;
 export declare function discoverHooksFromRepo(repoPath: string): string[];
-/**
- * Get the source hook entry from repo.
- */
-export declare function getSourceHookEntry(repoPath: string, hookName: string): HookEntry | null;
 /**
  * Install hooks to central ~/.agents/hooks/ directory.
  * Shims will symlink this to per-agent directories for synced agents.
@@ -353,15 +320,6 @@ export declare function selectHookManifest(manifest: Record<string, ManifestHook
  * installed hook names and the source hook script paths.
  */
 export declare function unmanagedHookNames(installedHookNames: string[], sourceHookScripts: string[]): string[];
-/**
- * Every hook script path across the resolved SOURCE roots — user
- * (`~/.agents/hooks`), system (`~/.agents/.system/hooks`), and each enabled
- * extra repo's `hooks/` — grouped the same way sync materializes them
- * ({@link listHookEntriesFromDir}, which also descends one-level event-group
- * dirs). This is the set an installed hook must be absent from to count as an
- * orphan.
- */
-export declare function listResolvedSourceHookScripts(): string[];
 /**
  * The orphan hooks (see {@link unmanagedHookNames}) sitting in one version home:
  * installed hook files whose name matches no file in any configured source root.
@@ -397,7 +355,7 @@ export declare function computeCodexHookTrustHash(eventKeyLabel: string, command
  * global shims. The materializer sets this so materialization stays isolated
  * (PHNX-3838); every normal caller leaves it unset and keeps the sweep.
  */
-export interface RegisterHooksOptions {
+interface RegisterHooksOptions {
     skipGlobalShimSweep?: boolean;
 }
 export declare function registerHooksToSettings(agentId: AgentId, versionHome: string, hookManifest?: Record<string, ManifestHook>, agentsDirOverride?: string, options?: RegisterHooksOptions): {
@@ -432,7 +390,7 @@ export declare function hookRegistrationTargets(agentId: AgentId, home: string):
  * entries removed.
  */
 export declare function pruneVersionHomeHookEntriesFromSettings(settingsPath: string, agent: AgentId, removedVersion: string): number;
-export interface InstallSessionTrackerHookResult {
+interface InstallSessionTrackerHookResult {
     installed: boolean;
     error?: string;
 }
@@ -450,3 +408,4 @@ export declare function installSessionTrackerHook(agent: AgentId, version?: stri
  * `syncResourcesToVersion`). Best-effort: failures are returned, not thrown.
  */
 export declare function installSessionTrackerHookSync(agent: AgentId, version?: string, home?: string): InstallSessionTrackerHookResult;
+export {};

package/dist/lib/hooks/install.js

@@ -607,76 +607,12 @@ function copyHook(entry, targetDir) {
         fs.copyFileSync(entry.dataFile, dataTarget);
     }
 }
-/**
- * Check if a hook exists for an agent.
- */
-export function hookExists(agentId, hookName) {
-    const agent = AGENTS[agentId];
-    if (!agent.supportsHooks) {
-        return false;
-    }
-    const hooksDir = getHooksDir(agentId);
-    if (!fs.existsSync(hooksDir)) {
-        return false;
-    }
-    const files = fs.readdirSync(hooksDir);
-    return files.some((file) => {
-        const ext = path.extname(file);
-        const baseName = path.basename(file, ext);
-        return baseName === hookName && SCRIPT_EXTENSIONS.has(ext);
-    });
-}
 /**
  * Normalize content for comparison (trim, normalize line endings).
  */
 function normalizeContent(content) {
     return content.replace(/\r\n/g, '\n').trim();
 }
-/**
- * Get the installed hook entry for an agent.
- */
-function getInstalledHookEntry(agentId, hookName) {
-    const hooksDir = getHooksDir(agentId);
-    const entries = listHookEntriesFromDir(hooksDir);
-    return entries.find((e) => e.name === hookName) || null;
-}
-/**
- * Check if installed hook content matches source hook content.
- * Compares both script file and data file (if present).
- */
-export function hookContentMatches(agentId, hookName, sourceEntry) {
-    const agent = AGENTS[agentId];
-    if (!agent.supportsHooks) {
-        return false;
-    }
-    const installedEntry = getInstalledHookEntry(agentId, hookName);
-    if (!installedEntry) {
-        return false;
-    }
-    try {
-        const installedScript = fs.readFileSync(installedEntry.scriptPath, 'utf-8');
-        const sourceScript = fs.readFileSync(sourceEntry.scriptPath, 'utf-8');
-        if (normalizeContent(installedScript) !== normalizeContent(sourceScript)) {
-            return false;
-        }
-        const hasInstalledData = !!installedEntry.dataFile;
-        const hasSourceData = !!sourceEntry.dataFile;
-        if (hasInstalledData !== hasSourceData) {
-            return false;
-        }
-        if (hasInstalledData && hasSourceData) {
-            const installedData = fs.readFileSync(installedEntry.dataFile, 'utf-8');
-            const sourceData = fs.readFileSync(sourceEntry.dataFile, 'utf-8');
-            if (normalizeContent(installedData) !== normalizeContent(sourceData)) {
-                return false;
-            }
-        }
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 /**
  * Hooks dir for an agent under an arbitrary home (version home or effective
  * home). An agent whose `hooksDir` is configured absolute under `$HOME` (grok,
@@ -977,7 +913,7 @@ function stableHookRuntimeRepairFailure(before, err) {
  * content already matches). This path never calls registerHooksToSettings,
  * installHooks, or any sync routine.
  */
-export function repairManagedHookRuntimeArtifact(artifact, platform = process.platform) {
+function repairManagedHookRuntimeArtifact(artifact, platform = process.platform) {
     const before = hookRuntimeProblem(artifact, platform);
     // Already healthy (e.g. race with another pass) — no-op, no needsAttention.
     if (!before)
@@ -1269,28 +1205,6 @@ export function diffVersionHooks(agent, version) {
     }
     return { agent, version, toAdd: toAdd.sort(), toUpdate: toUpdate.sort(), matched, orphans: orphans.sort() };
 }
-/**
- * Install a single hook from central into a specific version home.
- */
-export function installHookToVersion(agent, version, hookName) {
-    const gate = supports(agent, 'hooks', version);
-    if (!gate.ok) {
-        return { success: false, error: explainSkip(agent, 'hooks', gate, version) };
-    }
-    const central = listHookEntriesFromDir(getCentralHooksDir()).find((e) => e.name === hookName);
-    if (!central) {
-        return { success: false, error: `Hook '${hookName}' not found in central` };
-    }
-    const targetDir = getVersionHooksDir(agent, version);
-    try {
-        fs.mkdirSync(targetDir, { recursive: true });
-        copyHook(central, targetDir);
-    }
-    catch (err) {
-        return { success: false, error: err.message };
-    }
-    return { success: true };
-}
 /**
  * Remove a single hook (script + data file) from a specific version home.
  * Soft-deletes to ~/.agents/.trash/hooks/.
@@ -1400,14 +1314,6 @@ export function discoverHooksFromRepo(repoPath) {
     const hooksDir = path.join(repoPath, 'hooks');
     return listHookEntriesFromDir(hooksDir).map((h) => h.name);
 }
-/**
- * Get the source hook entry from repo.
- */
-export function getSourceHookEntry(repoPath, hookName) {
-    const hooksDir = path.join(repoPath, 'hooks');
-    const entries = listHookEntriesFromDir(hooksDir);
-    return entries.find((e) => e.name === hookName) || null;
-}
 /**
  * Install hooks to central ~/.agents/hooks/ directory.
  * Shims will symlink this to per-agent directories for synced agents.
@@ -1625,7 +1531,7 @@ export function unmanagedHookNames(installedHookNames, sourceHookScripts) {
  * dirs). This is the set an installed hook must be absent from to count as an
  * orphan.
  */
-export function listResolvedSourceHookScripts() {
+function listResolvedSourceHookScripts() {
     const roots = [
         getUserHooksDir(),
         getSystemHooksDir(),

package/dist/lib/hooks/match.d.ts

@@ -14,7 +14,7 @@
  */
 import type { HookMatches } from '../types.js';
 /** Runtime context passed to a hook by the agent CLI. */
-export interface HookInput {
+interface HookInput {
     hook_event_name?: string;
     prompt?: string;
     tool_name?: string;
@@ -34,3 +34,4 @@ export declare function isSafeHookRegex(source: string): boolean;
  * if it should be skipped.
  */
 export declare function shouldFire(matches: HookMatches | undefined, input: HookInput): boolean;
+export {};

package/dist/lib/hosts/credential-transport.d.ts

@@ -1,5 +1,3 @@
-/** The host part of an ssh target (`user@host` -> `host`) for known_hosts matching. */
-export declare function hostKeyLookupName(target: string): string;
 /** Refuse durable credential transfer until the destination SSH key is pinned. */
 export declare function assertCredentialTransportHostPinned(target: string, pinned?: boolean): void;
 /**

package/dist/lib/hosts/credential-transport.js

@@ -13,7 +13,7 @@ import { resolveHost } from './registry.js';
 import { sshTargetFor } from './types.js';
 import { isHostPinned } from '../devices/known-hosts.js';
 /** The host part of an ssh target (`user@host` -> `host`) for known_hosts matching. */
-export function hostKeyLookupName(target) {
+function hostKeyLookupName(target) {
     return target.split('@').pop() ?? target;
 }
 /** Refuse durable credential transfer until the destination SSH key is pinned. */

package/dist/lib/hosts/dispatch.d.ts

@@ -3,11 +3,6 @@ import { type HostTask } from './tasks.js';
 import { type HostCredentials } from './credentials.js';
 import { deriveMirroredCwd, homeRemainder, remoteCdPrefix } from '../project-root.js';
 export { deriveMirroredCwd, homeRemainder, remoteCdPrefix };
-/**
- * Diagnostic helper for RUSH-2441: log the requested agent and initial remote
- * `agents run` argv without changing normal command output.
- */
-export declare function logForwardedArgs(kind: string, agent: string, version: string | undefined, args: string[], hasPrompt: boolean): void;
 /**
  * Merge the resolved actor's provenance env UNDER a caller-supplied env, so every
  * remote `agents …` invocation forwards `AGENTS_ACTOR*` / `GIT_*` across the SSH
@@ -150,25 +145,8 @@ export interface DispatchOptions {
     /** Copy runtime credentials to the host before the run and shred them after. */
     copyCreds?: HostCredentials;
 }
-/**
- * Build the remote `agents run …` argv for a host dispatch. Pure so the
- * session-id / resume flag wiring is unit-testable without an SSH round-trip.
- * `--session-id` and `--resume` are mutually exclusive (the CLI rejects both);
- * resume wins when — defensively — both are set.
- *
- * Every field here is classified 'forward' in RUN_OPTION_FORWARDING
- * (remote-cmd.ts) — keep the two in lockstep; run-forwarding.test.ts asserts
- * the table side.
- */
-/** Compose `agent[@version][#account]` so the peer resolves ITS slot (PHNX-3940 T5). */
-export declare function runAgentSpecArg(opts: {
-    agent: string;
-    version?: string;
-    account?: string;
-    accountPicker?: boolean;
-}): string;
 export declare function buildRunForwardedArgs(opts: DispatchOptions): string[];
-export interface InteractiveDispatchOptions {
+interface InteractiveDispatchOptions {
     agent: string;
     /** Explicit agent version pin (e.g. "2.1.207") to forward as `agent@version`. */
     version?: string;
@@ -229,7 +207,7 @@ export declare function buildInteractiveRunForwardedArgs(opts: InteractiveDispat
 export declare function runInteractiveOnHost(host: Host, opts: InteractiveDispatchOptions): Promise<number>;
 /** Dispatch an `agents run <agent> "<prompt>"` onto a host (the `run --device` path). */
 export declare function dispatchToHost(host: Host, opts: DispatchOptions): Promise<DispatchResult>;
-export interface CommandDispatchOptions {
+interface CommandDispatchOptions {
     /** `agents …` args (command name first), already stripped of routing flags. */
     forwardedArgs: string[];
     remoteCwd?: string;

package/dist/lib/hosts/dispatch.js

@@ -31,7 +31,7 @@ export { deriveMirroredCwd, homeRemainder, remoteCdPrefix };
  * Diagnostic helper for RUSH-2441: log the requested agent and initial remote
  * `agents run` argv without changing normal command output.
  */
-export function logForwardedArgs(kind, agent, version, args, hasPrompt) {
+function logForwardedArgs(kind, agent, version, args, hasPrompt) {
     if (!process.env.AGENTS_DISPATCH_DEBUG)
         return;
     const safeArgs = [...args];
@@ -343,7 +343,7 @@ async function launchDetached(host, target, opts) {
  * the table side.
  */
 /** Compose `agent[@version][#account]` so the peer resolves ITS slot (PHNX-3940 T5). */
-export function runAgentSpecArg(opts) {
+function runAgentSpecArg(opts) {
     if (opts.accountPicker)
         return `${opts.agent}#`;
     let spec = opts.agent;

package/dist/lib/hosts/logs.d.ts

@@ -11,7 +11,7 @@
  * concise default.) Kept in one place so the two commands can never drift.
  */
 import { type HostTask } from './tasks.js';
-export interface HostLogResult {
+interface HostLogResult {
     /** False when no host task with this id exists (caller may fall through to sessions). */
     found: boolean;
     /** Process exit code to adopt when the task was shown/followed. */
@@ -35,3 +35,4 @@ export declare function hostTaskLogJson(id: string): {
 };
 /** Last `n` lines of `text`, prefixed with an elision note when truncated. */
 export declare function tailLines(text: string, n: number): string;
+export {};

package/dist/lib/hosts/passthrough.d.ts

@@ -103,7 +103,7 @@ export declare function renderForwardDecision(command: string, allArgs: string[]
     env?: Record<string, string>;
 };
 /** Injectable dependencies for {@link runFleetPassthrough} — used by tests. */
-export interface FleetPassthroughOptions {
+interface FleetPassthroughOptions {
     /** Override the device registry loader (tests). */
     loadDevices?: () => Promise<DeviceRegistry>;
     /** Override the per-device runner (tests). Defaults to `runOnDevice`. */

package/dist/lib/hosts/passthrough.js

@@ -107,7 +107,6 @@ export const REMOTE_PASSTHROUGH = {
     worktree: {},
     events: {},
     feedback: {},
-    pty: {},
     tmux: {},
     watchdog: {},
     factory: {},

package/dist/lib/hosts/progress.d.ts

@@ -131,11 +131,6 @@ export declare function buildStreamingFollowCommand(opts: {
 }): string;
 /** Extract the remote watcher frame from stderr, if the stream ended normally. */
 export declare function parseStreamingExitFrame(stderr: Buffer, taskId: string): Buffer | null;
-/**
- * File identity (`dev:ino`) of a path on the remote host, or null if it can't be
- * stat'd. GNU (`-c`) then BSD (`-f`) format, so it works on Linux and macOS hosts.
- */
-export declare function readRemoteFileId(target: string, remotePath: string, extraSshArgs?: string[]): string | null;
 /**
  * True when the local mirror file IS the very file we're tailing — the
  * localhost-as-host case, where `remoteLog` ($HOME-expanded) and `localLogPath`

package/dist/lib/hosts/progress.js

@@ -177,7 +177,7 @@ export function parseStreamingExitFrame(stderr, taskId) {
  * File identity (`dev:ino`) of a path on the remote host, or null if it can't be
  * stat'd. GNU (`-c`) then BSD (`-f`) format, so it works on Linux and macOS hosts.
  */
-export function readRemoteFileId(target, remotePath, extraSshArgs) {
+function readRemoteFileId(target, remotePath, extraSshArgs) {
     const res = sshExec(target, `stat -c '%d:%i' ${remotePath} 2>/dev/null || stat -f '%d:%i' ${remotePath} 2>/dev/null`, { timeoutMs: 8000, extraSshArgs });
     const id = res.stdout.trim();
     return id || null;