@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/lib/operator.d.ts

@@ -4,10 +4,9 @@ export interface Operator {
     admin?: boolean;
     can?: string[];
 }
-export interface OperatorRegistry {
+interface OperatorRegistry {
     operators: Record<string, Operator>;
 }
-export declare function getOperatorsPath(root?: string): string;
 export declare function loadOperators(root?: string): OperatorRegistry;
 export declare function getOperator(id: string, root?: string): Operator | undefined;
 export declare function isKnownOperator(id: string, root?: string): boolean;
@@ -24,3 +23,4 @@ export declare function isHighConsequenceAllowed(blockConsequence: string | unde
  * the human's launch context).
  */
 export declare function verifyOperatorIdentity(claimedId: string | undefined, root?: string): boolean;
+export {};

package/dist/lib/operator.js

@@ -27,7 +27,7 @@ import * as path from 'path';
 import * as yaml from 'yaml';
 import { getUserAgentsDir } from './state.js';
 const OPERATORS_FILE = 'operators.yaml';
-export function getOperatorsPath(root) {
+function getOperatorsPath(root) {
     return path.join(root ?? getUserAgentsDir(), OPERATORS_FILE);
 }
 export function loadOperators(root) {

package/dist/lib/output/git-output.d.ts

@@ -1,10 +1,10 @@
 /** Commit tally for one author email. */
-export interface AuthorCommits {
+interface AuthorCommits {
     author: string;
     commits: number;
 }
 /** The shipped-work rollup for a window. */
-export interface GitOutputSummary {
+interface GitOutputSummary {
     reposScanned: number;
     commits: number;
     byAuthor: AuthorCommits[];
@@ -24,7 +24,7 @@ export interface GitOutputSummary {
     logins: string[];
     sinceIso: string;
 }
-export interface GitOutputOptions {
+interface GitOutputOptions {
     /** Root scanned for git repos (e.g. ~/src). */
     reposDir: string;
     /** Window start, epoch ms. */
@@ -54,17 +54,6 @@ export declare function collectCommits(repos: string[], sinceIso: string, author
     byAuthor: AuthorCommits[];
     shas: string[];
 }>;
-/**
- * Count PRs opened and merged in the window across the given logins. `gh search
- * prs` searches all of GitHub, so one authed gh can cover multiple accounts'
- * logins. Returns ghAvailable=false if gh can't be reached at all.
- */
-export declare function collectPrs(logins: string[], sinceDate: string): Promise<{
-    opened: number;
-    merged: number;
-    logins: string[];
-    ghAvailable: boolean;
-}>;
 /** Format an epoch-ms as a YYYY-MM-DD date (UTC), for gh's date-range search. */
 export declare function toSearchDate(ms: number): string;
 /**
@@ -72,3 +61,4 @@ export declare function toSearchDate(ms: number): string;
  * plus PRs opened/merged.
  */
 export declare function collectGitOutput(options: GitOutputOptions): Promise<GitOutputSummary>;
+export {};

package/dist/lib/output/git-output.js

@@ -145,7 +145,7 @@ async function ghSearchCount(args) {
  * prs` searches all of GitHub, so one authed gh can cover multiple accounts'
  * logins. Returns ghAvailable=false if gh can't be reached at all.
  */
-export async function collectPrs(logins, sinceDate) {
+async function collectPrs(logins, sinceDate) {
     let resolved = logins;
     if (resolved.length === 0) {
         const login = await currentGhLogin();

package/dist/lib/owner-message.d.ts

@@ -1,24 +1,5 @@
-/**
- * Compose an owner-bound phone ping through the SAME shaper `agents feed post`
- * uses, so `agents notify` / `agents send --to owner` stop shipping a raw body
- * dump (PHNX-3698).
- *
- * Before this, an owner send delivered the body verbatim: a long wall of prose,
- * a `TEAM-N` key iMessage renders as dead text, and no way back to the session.
- * Routing the body through {@link composeBroadcastMessage} makes an owner ping
- * identical to an important feed post of the same event — short-shaped body,
- * every ticket key linkified to its Linear URL, and the current session's
- * `…/console/sessions/<id>` page as a tappable crumb.
- *
- * The session/agent/host are resolved the same way a feed post resolves them
- * ({@link resolvePostIdentity} — the pid-registry / env walk), so a `notify`
- * run inside an agent session inherits that session with no flag. Outside a
- * session (a human at a shell) identity is undefined: the ping still gets
- * short-shaping and ticket linkification, just no session crumb.
- */
-import { type FeedBroadcastContext } from './feed-broadcast.js';
 import type { SinkMessageFormat } from './sink-format.js';
-export interface OwnerMessageOptions {
+interface OwnerMessageOptions {
     /** Scannable subject line, when the caller has one (feed post does; notify does not). */
     title?: string;
     /** Explicit session id (`--session`); otherwise resolved from the run environment. */
@@ -31,14 +12,6 @@ export interface OwnerMessageOptions {
      */
     format?: SinkMessageFormat;
 }
-/**
- * Resolve the run identity into the broadcast context an owner ping is built
- * from — the shared shape a `feed post` uses. Pure except for the identity/index
- * reads that {@link resolvePostIdentity} / {@link getSessionById} already perform
- * for feed posts. Built ONCE so the owner fan-out can render it in more than one
- * format (Slack vs iMessage) without re-walking the pid registry per destination.
- */
-export declare function ownerMessageContext(rawText: string, opts?: OwnerMessageOptions): FeedBroadcastContext;
 /**
  * Shape a raw owner-send body into the composed broadcast message. `format`
  * decides how links surface — `plain` (default) for iMessage / owner-scoped rush,
@@ -47,9 +20,10 @@ export declare function ownerMessageContext(rawText: string, opts?: OwnerMessage
 export declare function composeOwnerMessage(rawText: string, opts?: OwnerMessageOptions): string;
 /**
  * A per-format composer bound to ONE resolved context — the shape the owner
- * fan-out wants (PHNX-3698). `agents notify` / `agents send --to owner` build
+ * fan-out wants (PHNX-3698). `agents send --to owner` build
  * this once, use `compose('plain')` for the envelope's display body, and hand
  * `compose` to `sendToOwner` so each policy destination re-renders in its own
  * format without re-walking the pid registry.
  */
 export declare function ownerMessageComposer(rawText: string, opts?: OwnerMessageOptions): (format: SinkMessageFormat) => string;
+export {};

package/dist/lib/owner-message.js

@@ -1,6 +1,6 @@
 /**
  * Compose an owner-bound phone ping through the SAME shaper `agents feed post`
- * uses, so `agents notify` / `agents send --to owner` stop shipping a raw body
+ * uses, so `agents send --to owner` stop shipping a raw body
  * dump (PHNX-3698).
  *
  * Before this, an owner send delivered the body verbatim: a long wall of prose,
@@ -27,7 +27,7 @@ import { linearIssueUrl } from './session/linear.js';
  * for feed posts. Built ONCE so the owner fan-out can render it in more than one
  * format (Slack vs iMessage) without re-walking the pid registry per destination.
  */
-export function ownerMessageContext(rawText, opts = {}) {
+function ownerMessageContext(rawText, opts = {}) {
     const identity = resolvePostIdentity({ sessionId: opts.sessionId });
     // A footer crumb that would 404 (an 8-char short id) is upgraded to the full
     // indexed id so the console URL resolves; a full/native id passes through.
@@ -53,7 +53,7 @@ export function composeOwnerMessage(rawText, opts = {}) {
 }
 /**
  * A per-format composer bound to ONE resolved context — the shape the owner
- * fan-out wants (PHNX-3698). `agents notify` / `agents send --to owner` build
+ * fan-out wants (PHNX-3698). `agents send --to owner` build
  * this once, use `compose('plain')` for the envelope's display body, and hand
  * `compose` to `sendToOwner` so each policy destination re-renders in its own
  * format without re-walking the pid registry.

package/dist/lib/packages/output-home.d.ts

@@ -1,7 +1,6 @@
 /** The three harness homes a portable schema-v3 package can be materialized into. */
 export declare const PORTABLE_HARNESSES: readonly ["claude", "codex", "opencode"];
-export type PortableHarness = (typeof PORTABLE_HARNESSES)[number];
-export declare function isPortableHarness(value: string): value is PortableHarness;
+type PortableHarness = (typeof PORTABLE_HARNESSES)[number];
 /** Thrown for a bad front-door argument (harness / version / output home). Never `process.exit`. */
 export declare class MaterializeGuardError extends Error {
     constructor(message: string);
@@ -10,8 +9,6 @@ export declare class MaterializeGuardError extends Error {
 export declare function assertPortableHarness(harness: string): PortableHarness;
 /** Reject a non-exact harness version (empty, malformed, or `@latest`). */
 export declare function assertExactHarnessVersion(version: string): string;
-/** True when `raw` still contains a `..` segment after splitting on both separators. */
-export declare function outputHomeHasDotDot(raw: string): boolean;
 /**
  * Resolve `--output-home` to an absolute path, refusing a target that climbs out
  * of cwd (relative), uses a `..` segment, IS the live home root, or targets (or
@@ -37,3 +34,4 @@ export declare function outputHomeHasDotDot(raw: string): boolean;
  * `materializeAgentPackage`, so a direct (non-CLI) caller is protected too.
  */
 export declare function resolveOutputHome(raw: string, cwd?: string, home?: string): string;
+export {};

package/dist/lib/packages/output-home.js

@@ -34,7 +34,7 @@ import { assertWithin, realpathExistingPrefix } from '../paths.js';
 import { VERSION_RE } from '../agent-spec/primitives.js';
 /** The three harness homes a portable schema-v3 package can be materialized into. */
 export const PORTABLE_HARNESSES = ['claude', 'codex', 'opencode'];
-export function isPortableHarness(value) {
+function isPortableHarness(value) {
     return PORTABLE_HARNESSES.includes(value);
 }
 /** Thrown for a bad front-door argument (harness / version / output home). Never `process.exit`. */
@@ -59,7 +59,7 @@ export function assertExactHarnessVersion(version) {
     return version;
 }
 /** True when `raw` still contains a `..` segment after splitting on both separators. */
-export function outputHomeHasDotDot(raw) {
+function outputHomeHasDotDot(raw) {
     return raw.split(/[\\/]/).includes('..');
 }
 /**

package/dist/lib/perf/db.d.ts

@@ -9,7 +9,6 @@ import type { AggregateOptions, PerfAggregateRow } from './types.js';
 export type { AggregateOptions, PerfAggregateRow, PerfPhaseStat, PerfSample } from './types.js';
 export { recordSample, shortSessionId, resolveSpoolPath } from './spool.js';
 export { percentile } from '../percentile.js';
-export declare const PERF_SCHEMA_VERSION = 1;
 export declare const DEFAULT_RETENTION_DAYS = 30;
 /** Test seam — redirect the warehouse path (like AGENTS_EVENTS_PATH). */
 export declare function _resetPerfDbForTest(overridePath?: string | null): void;
@@ -26,4 +25,3 @@ export declare function drainSpool(db?: Database.Database): number;
 export declare function aggregateSamples(opts?: AggregateOptions): PerfAggregateRow[];
 export declare function perfDbPath(): string;
 export declare function perfSpoolPath(): string;
-export declare function ensurePerfDir(): string;

package/dist/lib/perf/db.js

@@ -7,7 +7,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import Database from '../sqlite.js';
-import { getPerfDbPath, getPerfDir } from '../state.js';
+import { getPerfDbPath } from '../state.js';
 import { localMachineId } from '../origin-machine.js';
 import { resolveProjectKey } from '../project-key.js';
 import { percentile } from '../percentile.js';
@@ -39,7 +39,7 @@ function parsePhases(metaJson) {
 }
 export { recordSample, shortSessionId, resolveSpoolPath } from './spool.js';
 export { percentile } from '../percentile.js';
-export const PERF_SCHEMA_VERSION = 1;
+const PERF_SCHEMA_VERSION = 1;
 export const DEFAULT_RETENTION_DAYS = 30;
 const SCHEMA = `
 CREATE TABLE IF NOT EXISTS samples (
@@ -365,8 +365,3 @@ export function perfDbPath() {
 export function perfSpoolPath() {
     return resolveSpoolPath();
 }
-export function ensurePerfDir() {
-    const dir = process.env.AGENTS_PERF_DIR || (_dbPath ? path.dirname(_dbPath) : getPerfDir());
-    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-    return dir;
-}

package/dist/lib/permissions-registry.d.ts

@@ -19,7 +19,7 @@ export declare const CODEX_RULES_FILENAME = "agents-deny.rules";
  */
 export declare function stripJsonComments(content: string): string;
 /** The complete permissions contract for one agent. */
-export interface PermissionTarget {
+interface PermissionTarget {
     /** Permissions file under a HOME root (a version home, or the real HOME). */
     home(home: string): string;
     /** Permissions file for a project checkout, when the harness reads one. */
@@ -55,11 +55,10 @@ export interface PermissionTarget {
  * `capableAgents('allowlist')` — pinned by `permissions-registry.test.ts`.
  */
 export declare const PERMISSION_TARGETS: Partial<Record<AgentId, PermissionTarget>>;
-/** The registry entry for `agent`, or undefined when it stores no permissions. */
-export declare function permissionTarget(agent: AgentId): PermissionTarget | undefined;
 /**
  * Read `agent`'s permissions from `home` (a version home or the real HOME) and
  * project them to canonical form. `scope: 'project'` reads the repo-local file
  * for the harnesses that have one, and returns null for those that do not.
  */
 export declare function readCanonicalPermissions(agent: AgentId, scope?: 'user' | 'project', cwd?: string, home?: string): PermissionSet | null;
+export {};

package/dist/lib/permissions-registry.js

@@ -630,10 +630,6 @@ function kimiPatternToCanonical(pattern) {
     }
     return canonicalRule(lowerTool, arg);
 }
-/** The registry entry for `agent`, or undefined when it stores no permissions. */
-export function permissionTarget(agent) {
-    return PERMISSION_TARGETS[agent];
-}
 /**
  * Read `agent`'s permissions from `home` (a version home or the real HOME) and
  * project them to canonical form. `scope: 'project'` reads the repo-local file

package/dist/lib/permissions.d.ts

@@ -1,10 +1,8 @@
 import type { AgentId, PermissionSet, InstalledPermission, ClaudePermissions, CursorPermissions, OpenCodePermissions, CodexPermissions } from './types.js';
 import { CODEX_RULES_FILENAME } from './permissions-registry.js';
 export { CODEX_RULES_FILENAME };
-export type ParsedRules = PermissionSet;
-export declare const COMPUTER_PERMISSION_RULE_PREFIX = "Computer";
+type ParsedRules = PermissionSet;
 export declare const COMPUTER_APP_GATED_VERBS: readonly ["screenshot", "describe", "get-text", "launch", "raise", "click", "right-click", "type", "type-text", "key", "drag", "scroll", "ax-action", "focus", "wait"];
-export declare const COMPUTER_INPUT_GATED_VERBS: readonly ["raise", "click", "right-click", "type", "type-text", "key", "drag", "scroll", "ax-action", "focus"];
 export declare function formatComputerPermissionGrantHint(bundleId?: string): string;
 export declare function containsBroadGrants(rules: ParsedRules): {
     broad: string[];
@@ -33,7 +31,7 @@ export declare function discoverPermissionsFromRepo(repoPath: string): Array<{
 /**
  * Permission group info with rule count.
  */
-export interface PermissionGroupInfo {
+interface PermissionGroupInfo {
     name: string;
     ruleCount: number;
     path: string;
@@ -51,7 +49,7 @@ export declare function getTotalPermissionRuleCount(): number;
  * A permission preset recipe — names a preset and lists which groups it composes.
  * Lives at ~/.agents/permissions/presets/<name>.yaml.
  */
-export interface PermissionPresetRecipe {
+interface PermissionPresetRecipe {
     name: string;
     description?: string;
     includes: string[];
@@ -117,7 +115,7 @@ type CopilotToolApproval = {
     serverName: string;
     toolName: string | null;
 };
-export interface CopilotPermissionsConfig {
+interface CopilotPermissionsConfig {
     locations: Record<string, {
         tool_approvals?: CopilotToolApproval[];
         allowed_directories?: string[];
@@ -181,12 +179,12 @@ export declare function convertToGrokFormat(set: PermissionSet): {
         rules: GrokRule[];
     };
 };
-export type GrokRule = {
+type GrokRule = {
     action: 'allow' | 'deny';
     tool: string;
     pattern?: string;
 };
-export type KimiRule = {
+type KimiRule = {
     decision: 'allow' | 'deny';
     pattern: string;
 };
@@ -227,14 +225,6 @@ export declare function convertToOpenCodeFormat(set: PermissionSet): OpenCodePer
  * Codex config on sync, so the paths always match the box Codex runs on.
  */
 export declare function codexDefaultWritableRoots(home?: string, platform?: NodeJS.Platform): string[];
-/**
- * Merge Codex `[sandbox_workspace_write]` config, UNIONing `writable_roots` so a
- * baseline cache root never clobbers a root the user configured directly (a
- * plain object spread would overwrite the whole array), while merging scalar
- * keys (`network_access`) normally. Shared by the user- and version-scoped Codex
- * config writers so the two can't drift.
- */
-export declare function mergeCodexSandboxWrite(existing: Record<string, unknown> | undefined, incoming: NonNullable<CodexPermissions['sandbox_workspace_write']>): Record<string, unknown>;
 /**
  * Convert canonical permission set to Codex format.
  * Codex uses coarse-grained modes, so we infer the best fit.

package/dist/lib/permissions.js

@@ -23,7 +23,6 @@ import { updateGeminiSettings } from './gemini-settings.js';
 import { ANTIGRAVITY_ACTION_BY_TOOL, CANONICAL_TO_OPENCLAW_TOOL, CODEX_RULES_FILENAME, stripJsonComments, GROK_TOOL_BY_CANONICAL, PERMISSION_TARGETS, readCanonicalPermissions, } from './permissions-registry.js';
 export { CODEX_RULES_FILENAME };
 const HOME = os.homedir();
-export const COMPUTER_PERMISSION_RULE_PREFIX = 'Computer';
 export const COMPUTER_APP_GATED_VERBS = [
     'screenshot',
     'describe',
@@ -41,18 +40,6 @@ export const COMPUTER_APP_GATED_VERBS = [
     'focus',
     'wait',
 ];
-export const COMPUTER_INPUT_GATED_VERBS = [
-    'raise',
-    'click',
-    'right-click',
-    'type',
-    'type-text',
-    'key',
-    'drag',
-    'scroll',
-    'ax-action',
-    'focus',
-];
 export function formatComputerPermissionGrantHint(bundleId) {
     const target = bundleId && bundleId.length > 0 ? bundleId : '<bundle-id>';
     return `add Computer(${target}) to a permissions group, then \`agents computer reload\`\n` +
@@ -327,7 +314,7 @@ export function buildPermissionsFromGroups(groupNames) {
             // Split on CRLF or LF: git checks group yaml out with CRLF on Windows
             // (core.autocrlf), and a plain split('\n') leaves a trailing '\r' so the
             // closing-quote anchor `"$` never matches — extracting ZERO rules, which
-            // wrote an empty permission set and left `agents doctor --fix` unable to
+            // wrote an empty permission set and left `agents sync` unable to
             // reconcile permissions on Windows forever (PHNX-3187).
             const lines = content.split(/\r?\n/);
             let section = null;
@@ -952,7 +939,7 @@ export function codexDefaultWritableRoots(home = HOME, platform = process.platfo
  * keys (`network_access`) normally. Shared by the user- and version-scoped Codex
  * config writers so the two can't drift.
  */
-export function mergeCodexSandboxWrite(existing, incoming) {
+function mergeCodexSandboxWrite(existing, incoming) {
     const existingRoots = Array.isArray(existing?.writable_roots)
         ? existing.writable_roots
         : [];

package/dist/lib/picker.d.ts

@@ -14,7 +14,7 @@
  */
 import { Separator } from '@inquirer/core';
 /** Configuration for the interactive picker prompt. */
-export interface PickerConfig<T> {
+interface PickerConfig<T> {
     message: string;
     /** Optional dim hint line rendered directly under the header (above the rows). */
     subtitle?: string;
@@ -53,11 +53,11 @@ export interface PickerConfig<T> {
     linesAbovePrompt?: number;
 }
 /** The result returned when the user selects an item. */
-export interface PickedItem<T> {
+interface PickedItem<T> {
     item: T;
 }
 /** Configuration for the multi-select picker prompt. */
-export interface MultiPickerConfig<T> {
+interface MultiPickerConfig<T> {
     message: string;
     items: T[];
     filter: (query: string) => T[];
@@ -122,7 +122,7 @@ export declare function itemPicker<T>(config: PickerConfig<T>): Promise<PickedIt
  */
 export declare function multiItemPicker<T>(config: MultiPickerConfig<T>): Promise<T[] | null>;
 /** Configuration for the dynamic (async-refetch) picker prompt. */
-export interface DynamicPickerConfig<T, F, A = never> {
+interface DynamicPickerConfig<T, F, A = never> {
     message: string;
     /** The initial filter state. Changing it (via a keybinding) re-runs {@link load}. */
     initialFilter: F;
@@ -190,7 +190,7 @@ export declare function hotkeyToken(key: {
     meta?: boolean;
 }): string;
 /** The result returned when the user selects a row: the item plus the live filter. */
-export interface DynamicPicked<T, F, A = never> {
+interface DynamicPicked<T, F, A = never> {
     item: T;
     filter: F;
     action?: A;
@@ -206,3 +206,4 @@ export interface DynamicPicked<T, F, A = never> {
  * source and keymap are dynamic.
  */
 export declare function dynamicPicker<T, F, A = never>(config: DynamicPickerConfig<T, F, A>): Promise<DynamicPicked<T, F, A> | null>;
+export {};

package/dist/lib/placement.d.ts

@@ -15,7 +15,7 @@
  * Owner (who may fire / evaluate) is NOT placement — see monitors.
  */
 /** Where a job body executes. */
-export type PlacementKind = 'local' | 'device' | 'fleet' | 'cloud' | 'lease';
+type PlacementKind = 'local' | 'device' | 'fleet' | 'cloud' | 'lease';
 /**
  * Canonical placement object.
  *
@@ -33,7 +33,7 @@ export interface Placement {
     source: string;
 }
 /** Run-flag bag the placement parser understands. */
-export interface RunPlacementFlags {
+interface RunPlacementFlags {
     where?: string;
     host?: string;
     device?: string;
@@ -80,7 +80,4 @@ export declare function expandPlacementToRunFlags(placement: Placement): Pick<Ru
 export declare function placementFromHostStrategy(strategy: 'local' | 'host' | 'fleet' | 'cloud', host?: string): Placement;
 /** One-line human form for logs / help. */
 export declare function formatPlacement(p: Placement): string;
-/**
- * Short matrix for help footers and docs. Keep in sync with concepts.md.
- */
-export declare const PLACEMENT_MATRIX: string;
+export {};

package/dist/lib/placement.js

@@ -175,20 +175,3 @@ export function formatPlacement(p) {
         return `${p.kind}:${p.target}`;
     return p.kind;
 }
-/**
- * Short matrix for help footers and docs. Keep in sync with concepts.md.
- */
-export const PLACEMENT_MATRIX = `
-  Intent                         Flag / path
-  ─────────────────────────────  ──────────────────────────────────────────
-  This machine                   (default)  or  --where local
-  Named fleet box                --where device:<name>   (= --device)
-  Affinity pick (14d usage)      --where auto            (= --device auto)
-  Disposable cloud box           --where lease           (= --lease)
-  Reuse warm crabbox             --box <slug>
-  Vendor cloud task              --cloud   (= --where cloud[:provider])
-  Routines: body on one box      --run-on <name> / --placement host
-  Routines: pick any online      --placement fleet
-  Monitors: who evaluates        --device <owner>   (NOT body placement)
-  Monitors: where action runs    --run-on <host>
-`.trim();

package/dist/lib/platform/posixpath.d.ts

@@ -1,6 +1,6 @@
 /** The XDG user-bin dir, `~/.local/bin`. */
 export declare function localBinDir(home?: string): string;
-export interface SymlinkResult {
+interface SymlinkResult {
     /** A usable symlink to `target` exists at the path after this call. */
     ok: boolean;
     /** True only when this call created the symlink (false = already correct, or left untouched). */
@@ -26,3 +26,4 @@ export declare function ensureLocalBinSymlink(name: string, target: string, dir?
 export declare function loginShellResolves(cmd: string): boolean;
 /** Is `dir` on a fresh `bash -lc` PATH? Best-effort; a probe failure returns false. */
 export declare function dirOnLoginPath(dir: string): boolean;
+export {};

package/dist/lib/platform/winpath.d.ts

@@ -1,4 +1,4 @@
-export interface WinPathResult {
+interface WinPathResult {
     success: boolean;
     /** True when `dir` was already the first PATH entry (no write performed). */
     alreadyPresent?: boolean;
@@ -62,3 +62,4 @@ export declare function blocksLocalScripts(policy: string | null): boolean;
  * entry = `<prefix>/node_modules/@phnx-labs/agents-cli/dist/index.js` → `<prefix>`
  */
 export declare function npmGlobalBinFromEntry(entryJsPath: string): string;
+export {};

package/dist/lib/plugins/plugin-marketplace.d.ts

@@ -45,7 +45,7 @@ interface MarketplacePluginEntry {
         email?: string;
     };
 }
-export interface MarketplaceManifest {
+interface MarketplaceManifest {
     $schema?: string;
     name: string;
     description?: string;
@@ -115,7 +115,7 @@ export declare function copyPluginToMarketplace(plugin: DiscoveredPlugin, spec:
 export declare function validateClaudePluginManifest(manifest: unknown): string[];
 /**
  * The repairable fields present-and-invalid in a parsed manifest. Drives both
- * the dry-run preview (heal/doctor --fix) and the actual write below.
+ * the dry-run preview (heal/agents sync) and the actual write below.
  */
 export declare function repairableManifestFields(manifest: unknown): string[];
 /**

package/dist/lib/plugins/plugin-marketplace.js

@@ -275,7 +275,7 @@ function fieldHasBareEntries(value) {
 }
 /**
  * The repairable fields present-and-invalid in a parsed manifest. Drives both
- * the dry-run preview (heal/doctor --fix) and the actual write below.
+ * the dry-run preview (heal/agents sync) and the actual write below.
  */
 export function repairableManifestFields(manifest) {
     if (!manifest || typeof manifest !== 'object')

package/dist/lib/pr-land-detach.d.ts

@@ -2,7 +2,7 @@
  * Snapshot of the current branch's open PR (if any), for the headless-exit
  * fail-loud path. Returns null when there is no open PR or `gh` cannot answer.
  */
-export interface BranchOpenPr {
+interface BranchOpenPr {
     number: number;
     url: string;
     state: string;
@@ -30,3 +30,4 @@ export declare function getBranchOpenPr(cwd: string, execFileAsync: (file: strin
  * stderr warning. Never throws.
  */
 export declare function warnOrphanedOpenPr(cwd?: string): Promise<void>;
+export {};

package/dist/lib/probe.d.ts

@@ -3,6 +3,9 @@
  * timeout — matching the `execFileAsync` contract the version probe had — and
  * reaps the probe's whole process group on every settle path.
  */
-export declare function probeCapture(cmd: string, args: string[], timeoutMs: number): Promise<{
+export declare function probeCapture(cmd: string, args: string[], timeoutMs: number, options?: {
+    acceptedExitCodes?: number[];
+    maxOutputBytes?: number;
+}): Promise<{
     stdout: string;
 }>;

package/dist/lib/probe.js

@@ -59,7 +59,7 @@ function reapGroup(pid) {
  * timeout — matching the `execFileAsync` contract the version probe had — and
  * reaps the probe's whole process group on every settle path.
  */
-export function probeCapture(cmd, args, timeoutMs) {
+export function probeCapture(cmd, args, timeoutMs, options = {}) {
     return new Promise((resolve, reject) => {
         const child = spawn(cmd, args, {
             detached: GROUP_REAP,
@@ -92,6 +92,9 @@ export function probeCapture(cmd, args, timeoutMs) {
         child.stdout?.setEncoding('utf8');
         child.stdout?.on('data', (d) => {
             out += d;
+            if (Buffer.byteLength(out) > (options.maxOutputBytes ?? 1024 * 1024)) {
+                settle(new Error(`probe output exceeded limit: ${cmd}`));
+            }
         });
         child.on('error', (e) => settle(e));
         // 'exit', not 'close': a forked grandchild inherits the stdout pipe, and
@@ -99,7 +102,7 @@ export function probeCapture(cmd, args, timeoutMs) {
         // process this helper exists to reap. Settle when the probed binary
         // itself exits; one tick's grace lets its final stdout chunks land.
         child.on('exit', (code) => {
-            setImmediate(() => settle(code === 0 ? null : new Error(`probe exited ${code}: ${cmd} ${args.join(' ')}`)));
+            setImmediate(() => settle(code !== null && (options.acceptedExitCodes ?? [0]).includes(code) ? null : new Error(`probe exited ${code}: ${cmd} ${args.join(' ')}`)));
         });
     });
 }

package/dist/lib/profiles-presets.d.ts

@@ -34,7 +34,7 @@ export interface Preset {
     docPath?: string;
 }
 export declare const PRESETS: Preset[];
-export interface ResolvedPresetEnv {
+interface ResolvedPresetEnv {
     /** Env vars from preset.env — always set, no user input. */
     static: Record<string, string>;
     /** Vars the wizard needs to prompt for. */
@@ -48,3 +48,4 @@ export declare function getPreset(name: string): Preset | undefined;
 export declare function listPresets(): Preset[];
 /** Return the unique set of provider names across all presets. */
 export declare function listProviders(): string[];
+export {};

package/dist/lib/profiles.d.ts

@@ -88,8 +88,6 @@ export interface ProfileSummary {
     /** Native agent id or custom harness this one was forked from, if recorded. */
     forkedFrom: string | null;
 }
-/** Get the directory where profile YAML files are stored. */
-export declare function getProfilesDir(): string;
 /** Return the on-disk YAML path for a profile name. */
 export declare function getProfilePath(name: string): string;
 /** Validate a profile name against the allowed pattern. Throws on invalid input. */
@@ -158,7 +156,7 @@ export declare function baseUrlEnvKeyForHost(host: AgentId): string | null;
 /** Return the auth-token env var for a host, or null when unknown. */
 export declare function authEnvKeyForHost(host: AgentId): string | null;
 /** Options for {@link profileFromHostModel}. */
-export interface HostModelOptions {
+interface HostModelOptions {
     version?: string;
     /** Base URL for OpenAI/Anthropic-compatible hosts (claude, codex). Ignored for hosts without a known var. */
     baseUrl?: string;
@@ -225,7 +223,7 @@ export declare function renameProfile(oldName: string, newName: string): void;
  */
 export declare function resolveProfileEnv(profile: Profile): Record<string, string>;
 /** Resolved profile data ready for spawning an agent process. */
-export interface ResolvedProfileRun {
+interface ResolvedProfileRun {
     agent: AgentId;
     version?: string;
     env: Record<string, string>;
@@ -275,8 +273,4 @@ export interface ResolvedProfileRun {
  * collide the profile's harness identity with its host's catalog.
  */
 export declare function resolveProfileForRun(name: string, requestedModel?: string): ResolvedProfileRun;
-/**
- * Look up the preset a profile was created from, if any. Used by
- * `profiles view` to show upstream metadata like signup URLs.
- */
-export declare function getPresetForProfile(profile: Profile): Preset | undefined;
+export {};