@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/lib/refresh.js

@@ -6,8 +6,7 @@
  * The reconcile stage behind `agents sync` (the umbrella `--local` path calls
  * this; see sync-umbrella.ts) and any other caller that needs to re-derive local
  * state from declared configuration. Does NOT do any git operations — that lives
- * in `agents repo pull`. (Also still reachable via the deprecated, hidden
- * `agents repo refresh` alias.)
+ * in `agents repo pull`.
  */
 import * as fs from 'fs';
 import * as path from 'path';
@@ -50,7 +49,7 @@ function migratePromptcutsToRoot(agentsDir, quiet = false) {
     }
 }
 export async function refresh(options = {}) {
-    const { agentFilter, skipPrompts = false, skipClis = false, quiet = false } = options;
+    const { agentFilter, skipPrompts = false, skipClis = false, quiet = false, selection: requestedSelection, allowExecSurfaces = false, } = options;
     const agentsDir = getUserAgentsDir();
     // Gate every human progress line so --json / fleet fan-out can parse stdout.
     const log = (...args) => { if (!quiet)
@@ -59,7 +58,8 @@ export async function refresh(options = {}) {
     // synced list cannot also mean "declined and here is why" (RUSH-2700).
     const declined = [];
     const reconciled = [];
-    migratePromptcutsToRoot(agentsDir, quiet);
+    if (!requestedSelection)
+        migratePromptcutsToRoot(agentsDir, quiet);
     const manifest = readManifest(agentsDir);
     if (!manifest) {
         log(chalk.gray(`No ${MANIFEST_FILENAME} found`));
@@ -94,17 +94,23 @@ export async function refresh(options = {}) {
         }
     }
     // 2. Register MCP servers
-    if (manifest?.mcp && Object.keys(manifest.mcp).length > 0) {
+    if ((!requestedSelection || requestedSelection.mcp) && manifest?.mcp && Object.keys(manifest.mcp).length > 0) {
         log(chalk.bold('\nMCP Servers:\n'));
         for (const [name, config] of Object.entries(manifest.mcp)) {
-            if (!config.command || config.transport === 'http')
+            if (Array.isArray(requestedSelection?.mcp) && !requestedSelection.mcp.includes(name))
                 continue;
+            const transport = config.transport || 'stdio';
+            const commandOrUrl = transport === 'http' ? config.url : config.command;
+            if (!commandOrUrl) {
+                log(`  ${chalk.cyan(name)}: ${chalk.yellow(`missing ${transport === 'http' ? 'url' : 'command'}`)}`);
+                continue;
+            }
             const scopedAgents = (config.agents ? [...config.agents] : [...capableAgents('mcp')]).filter((id) => !agentFilter || id === agentFilter);
             const scopedVersions = config.agentVersions
                 ? Object.fromEntries(Object.entries(config.agentVersions).filter(([agentId]) => !agentFilter || agentId === agentFilter))
                 : undefined;
             const targets = resolveConfiguredAgentTargets(scopedAgents, scopedVersions, capableAgents('mcp'));
-            const results = await registerMcpToTargets(targets, name, config.command, config.scope || 'user', config.transport || 'stdio');
+            const results = await registerMcpToTargets(targets, name, commandOrUrl, config.scope || 'user', transport);
             for (const result of results) {
                 if (result.success) {
                     const label = result.version
@@ -116,22 +122,25 @@ export async function refresh(options = {}) {
         }
     }
     // 3. Sync resources into version homes.
-    // Unattended (`skipPrompts` / `agents sync --yes --local`): every installed
-    // version — otherwise non-default homes keep stale hooks after a system
-    // update (fleet multi-harness: only the default version was refreshed).
-    // Interactive: default only; re-run `agents sync <agent>@all` for the rest.
+    // Unattended (`skipPrompts` / `agents sync --yes --local`) and explicit
+    // resource selectors: every installed version. Otherwise non-default homes
+    // keep stale resources after a system update or named plugin sync.
+    // Interactive full reconcile: default only.
     const cliStates = await getAllCliStates();
     const agentsToSync = agentFilter ? [agentFilter] : MANAGED_AGENT_IDS;
     const available = getAvailableResources();
     for (const agentId of agentsToSync) {
-        if (!cliStates[agentId]?.installed && listInstalledVersions(agentId).length === 0)
+        const installedVersions = listInstalledVersions(agentId);
+        if (!cliStates[agentId]?.installed && installedVersions.length === 0)
             continue;
         const defaultVer = getGlobalDefault(agentId);
-        if (!defaultVer)
+        if (!defaultVer && !requestedSelection)
             continue;
-        const versionsToSync = skipPrompts
-            ? listInstalledVersions(agentId)
+        const versionsToSync = requestedSelection || skipPrompts
+            ? installedVersions
             : [defaultVer];
+        if (versionsToSync.length === 0)
+            continue;
         // Interactive-only: getActuallySyncedResources walks every skill tree with
         // content compares (~1s/agent on a full install). The unattended path
         // (`skipPrompts` / `agents sync --yes`) never reads these — it always
@@ -139,7 +148,7 @@ export async function refresh(options = {}) {
         let actuallySynced;
         let newResources;
         let hasAnySynced = false;
-        if (!skipPrompts) {
+        if (!skipPrompts && !requestedSelection) {
             actuallySynced = getActuallySyncedResources(agentId, defaultVer);
             newResources = getNewResources(available, actuallySynced, getProjectOnlyResources());
             hasAnySynced = actuallySynced.commands.length > 0 ||
@@ -153,7 +162,10 @@ export async function refresh(options = {}) {
         try {
             let selection;
             let forceFullSync = false;
-            if (skipPrompts) {
+            if (requestedSelection) {
+                selection = requestedSelection;
+            }
+            else if (skipPrompts) {
                 forceFullSync = true;
             }
             else if (!hasAnySynced) {
@@ -176,7 +188,11 @@ export async function refresh(options = {}) {
                 for (const ver of versionsToSync) {
                     // Pass the already-built `available` so each version does not re-scan
                     // resource trees (RUSH-2320 #5).
-                    const syncResult = syncResourcesToVersion(agentId, ver, selection, { available, ...(forceFullSync ? { force: true } : {}) });
+                    const syncResult = syncResourcesToVersion(agentId, ver, selection, {
+                        available,
+                        allowExecSurfaces,
+                        ...(forceFullSync || requestedSelection ? { force: true } : {}),
+                    });
                     reconciled.push({ agent: agentId, version: ver });
                     if (syncResult.commands)
                         kinds.add('commands');
@@ -214,7 +230,7 @@ export async function refresh(options = {}) {
         }
     }
     // 4. Register hooks as lifecycle events (same version set as resource sync)
-    const hookManifest = parseHookManifest();
+    const hookManifest = requestedSelection ? {} : parseHookManifest();
     if (Object.keys(hookManifest).length > 0) {
         let hookRegistered = 0;
         const hookAgents = new Set(capableAgents('hooks'));
@@ -242,25 +258,27 @@ export async function refresh(options = {}) {
     // 5. Auto-add shims to PATH
     // Refresh the gh overload shim so `gh pr checks` escapes the GraphQL rate limit
     // for every user, transparently (PHNX-3501). Idempotent; POSIX-only in v1.
-    try {
-        ensureGhOverloadShim();
-    }
-    catch {
-        // Never let a shim-write hiccup break sync — real gh stays fine without it.
-    }
-    if (!isShimsInPath()) {
-        const pathResult = addShimsToPath();
-        if (pathResult.success && !pathResult.alreadyPresent) {
-            log(chalk.green(`\nAdded shims to ${pathResult.location}`));
-            log(chalk.gray(pathResult.reloadHint));
+    if (!requestedSelection) {
+        try {
+            ensureGhOverloadShim();
+        }
+        catch {
+            // Never let a shim-write hiccup break sync — real gh stays fine without it.
         }
-        else if (!pathResult.success) {
-            log(chalk.yellow('\nCould not auto-add shims to PATH:'));
-            log(chalk.gray(getPathSetupInstructions()));
+        if (!isShimsInPath()) {
+            const pathResult = addShimsToPath();
+            if (pathResult.success && !pathResult.alreadyPresent) {
+                log(chalk.green(`\nAdded shims to ${pathResult.location}`));
+                log(chalk.gray(pathResult.reloadHint));
+            }
+            else if (!pathResult.success) {
+                log(chalk.yellow('\nCould not auto-add shims to PATH:'));
+                log(chalk.gray(getPathSetupInstructions()));
+            }
         }
     }
     // 6. Prompt for missing default versions
-    if (!skipPrompts) {
+    if (!skipPrompts && !requestedSelection) {
         const agentsNeedingDefault = [];
         for (const agentId of agentsToSync) {
             const versions = listInstalledVersions(agentId);
@@ -307,53 +325,55 @@ export async function refresh(options = {}) {
         }
     }
     // 7. Install declared host-CLIs
-    try {
-        const { statuses, errors } = listCliStatus(process.cwd());
-        for (const err of errors) {
-            log(chalk.yellow(`  CLI manifest parse error: ${err.file}: ${err.reason}`));
-        }
-        const missing = statuses.filter((s) => !s.installed);
-        if (missing.length > 0) {
-            log(chalk.bold('\nDeclared CLIs missing from this host:'));
-            for (const s of missing) {
-                const method = selectInstallMethod(s.manifest);
-                const action = method ? describeMethod(method) : chalk.red('no compatible install method');
-                log(`  ${chalk.cyan(s.manifest.name.padEnd(20))} ${chalk.gray(action)}`);
+    if (!requestedSelection) {
+        try {
+            const { statuses, errors } = listCliStatus(process.cwd());
+            for (const err of errors) {
+                log(chalk.yellow(`  CLI manifest parse error: ${err.file}: ${err.reason}`));
             }
-            log('');
-            if (!skipPrompts) {
-                const proceed = await confirm({ message: `Install ${missing.length} missing CLI(s) now?`, default: true });
-                if (proceed) {
-                    for (const s of missing) {
-                        log(chalk.bold(`\n→ ${s.manifest.name}`));
-                        const result = installCli(s.manifest);
-                        if (result.error) {
-                            log(chalk.red(`  ${result.error}`));
-                            continue;
-                        }
-                        if (result.installed) {
-                            log(chalk.green(`  installed`));
-                            if (s.manifest.postInstall) {
-                                log(chalk.gray(s.manifest.postInstall.trim().split('\n').map((l) => '  ' + l).join('\n')));
+            const missing = statuses.filter((s) => !s.installed);
+            if (missing.length > 0) {
+                log(chalk.bold('\nDeclared CLIs missing from this host:'));
+                for (const s of missing) {
+                    const method = selectInstallMethod(s.manifest);
+                    const action = method ? describeMethod(method) : chalk.red('no compatible install method');
+                    log(`  ${chalk.cyan(s.manifest.name.padEnd(20))} ${chalk.gray(action)}`);
+                }
+                log('');
+                if (!skipPrompts) {
+                    const proceed = await confirm({ message: `Install ${missing.length} missing CLI(s) now?`, default: true });
+                    if (proceed) {
+                        for (const s of missing) {
+                            log(chalk.bold(`\n→ ${s.manifest.name}`));
+                            const result = installCli(s.manifest);
+                            if (result.error) {
+                                log(chalk.red(`  ${result.error}`));
+                                continue;
+                            }
+                            if (result.installed) {
+                                log(chalk.green(`  installed`));
+                                if (s.manifest.postInstall) {
+                                    log(chalk.gray(s.manifest.postInstall.trim().split('\n').map((l) => '  ' + l).join('\n')));
+                                }
+                            }
+                            else {
+                                log(chalk.yellow(`  install ran but \`${describeCheck(s.manifest.check)}\` still fails`));
                             }
                         }
-                        else {
-                            log(chalk.yellow(`  install ran but \`${describeCheck(s.manifest.check)}\` still fails`));
-                        }
+                    }
+                    else {
+                        log(chalk.gray(`Skipped. Run 'agents cli install' later.`));
                     }
                 }
                 else {
-                    log(chalk.gray(`Skipped. Run 'agents cli install' later.`));
+                    log(chalk.gray(`Run 'agents cli install' to install them.`));
                 }
             }
-            else {
-                log(chalk.gray(`Run 'agents cli install' to install them.`));
-            }
         }
-    }
-    catch (err) {
-        if (!isPromptCancelled(err)) {
-            log(chalk.yellow(`CLI install skipped: ${err.message}`));
+        catch (err) {
+            if (!isPromptCancelled(err)) {
+                log(chalk.yellow(`CLI install skipped: ${err.message}`));
+            }
         }
     }
     // A resource agents-cli refused to write is reported, never swallowed —

package/dist/lib/remote-agents-json.d.ts

@@ -1,4 +1,4 @@
-export interface RemoteAgentsJsonOptions<T> {
+interface RemoteAgentsJsonOptions<T> {
     args: string[];
     noFanoutEnv: string;
     hosts?: string[];
@@ -46,7 +46,7 @@ export interface RemoteAgentsJsonParseResult<T> {
     items: T[];
     valid: boolean;
 }
-export interface RemoteAgentsJsonResult<T> {
+interface RemoteAgentsJsonResult<T> {
     items: T[];
     deviceCount: number;
     /** Devices that were dialed but answered with an error / no CLI / a timeout. */
@@ -96,3 +96,4 @@ export declare function captureBoundedStdout(child: CapturableChild, { timeoutMs
 }>;
 /** Query explicit hosts, or every registered online peer when hosts is omitted. */
 export declare function gatherRemoteAgentsJson<T>(options: RemoteAgentsJsonOptions<T>, deps?: GatherRemoteAgentsJsonDeps): Promise<RemoteAgentsJsonResult<T>>;
+export {};

package/dist/lib/reserved-stores.d.ts

@@ -2,8 +2,6 @@ import type { SecretsBackend } from './secrets-types.js';
 import { type AgentId } from './types.js';
 /** Legacy readable alias for `__claude__`. Not migrated in this track. */
 export declare const AUTH_STORE_ALIAS = "auth";
-/** The one reserved bundle name most callers actually need. */
-export declare const AUTH_BUNDLE_NAME = "auth";
 /**
  * The reserved `auth` bundle holds per-account Claude setup-tokens for
  * unattended usage/probe and MUST be file-backed (headless, fleet-shareable —

package/dist/lib/reserved-stores.js

@@ -20,8 +20,6 @@ import { bundleExistsSync, bundleBackendSync, isSecretsClientError } from './sec
 import { AGENT_IDS } from './types.js';
 /** Legacy readable alias for `__claude__`. Not migrated in this track. */
 export const AUTH_STORE_ALIAS = 'auth';
-/** The one reserved bundle name most callers actually need. */
-export const AUTH_BUNDLE_NAME = AUTH_STORE_ALIAS;
 /**
  * The reserved `auth` bundle holds per-account Claude setup-tokens for
  * unattended usage/probe and MUST be file-backed (headless, fleet-shareable —
@@ -31,7 +29,7 @@ export const AUTH_BUNDLE_NAME = AUTH_STORE_ALIAS;
  * loud instead of silently being ignored by usage/probe (SEC-GAP-3).
  */
 export const AUTH_BUNDLE_BACKEND = 'file';
-export const RESERVED_BUNDLE_NAMES = new Set([AUTH_BUNDLE_NAME]);
+export const RESERVED_BUNDLE_NAMES = new Set([AUTH_STORE_ALIAS]);
 export function isReservedBundleName(name) {
     return RESERVED_BUNDLE_NAMES.has(name.trim().toLowerCase());
 }
@@ -108,13 +106,13 @@ function storableCredentialRefusal(kind, harness) {
 export function inspectReservedAuthBundle() {
     let exists;
     try {
-        exists = bundleExistsSync(AUTH_BUNDLE_NAME);
+        exists = bundleExistsSync(AUTH_STORE_ALIAS);
     }
     catch {
         return { exists: false, backend: null, ok: true };
     }
     if (!exists)
         return { exists: false, backend: null, ok: true };
-    const backend = bundleBackendSync(AUTH_BUNDLE_NAME);
+    const backend = bundleBackendSync(AUTH_STORE_ALIAS);
     return { exists: true, backend, ok: backend === AUTH_BUNDLE_BACKEND };
 }

package/dist/lib/resource-content-diff.d.ts

@@ -15,8 +15,6 @@
  * between two independently-written trees is not reported as content drift. This
  * mirrors the byte compare `diffCommands` / `diffRules` already apply per file.
  */
-/** OS metadata / local tooling that is never synced into a version home. */
-export declare const RESOURCE_CONTENT_IGNORE: Set<string>;
 /** CRLF → LF and trim, so line-ending / trailing-newline skew is not drift. */
 export declare function normalizeResourceContent(content: string): string;
 /**

package/dist/lib/resource-content-diff.js

@@ -18,7 +18,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
 /** OS metadata / local tooling that is never synced into a version home. */
-export const RESOURCE_CONTENT_IGNORE = new Set([
+const RESOURCE_CONTENT_IGNORE = new Set([
     '.DS_Store',
     '.git',
     '.gitignore',

package/dist/lib/resource-patterns.d.ts

@@ -11,7 +11,7 @@
  *
  * Evaluation rule: union all inclusions, then subtract all exclusions.
  */
-export interface ParsedPattern {
+interface ParsedPattern {
     negate: boolean;
     source: string;
     name: string;
@@ -39,3 +39,4 @@ export declare function expandPatterns(patterns: string[], available: Map<string
  * @param includeProject  Whether to append "project:*". False for hooks (security).
  */
 export declare function defaultPatterns(extraAliases?: string[], includeProject?: boolean): string[];
+export {};

package/dist/lib/resource-profiles.d.ts

@@ -7,20 +7,14 @@
  */
 import type { ResourceProfilePreset } from './types.js';
 export type ProfiledResourceKind = 'commands' | 'skills' | 'hooks' | 'subagents' | 'plugins' | 'workflows' | 'permissions' | 'mcp' | 'memory' | 'secrets';
-export type PatternedProfileKind = Exclude<ProfiledResourceKind, 'memory' | 'secrets'>;
-export interface ActiveResourceProfile {
+interface ActiveResourceProfile {
     name: string;
     preset: ResourceProfilePreset;
 }
-export declare function validateResourceProfileName(name: string): void;
-export declare function listResourceProfileNames(): string[];
-export declare function getResourceProfilePreset(name: string): ResourceProfilePreset | null;
-export declare function getActiveResourceProfileName(): string | null;
 export declare function getActiveResourceProfile(): ActiveResourceProfile | null;
 export declare function upsertResourceProfilePreset(name: string, preset: ResourceProfilePreset): void;
 export declare function setActiveResourceProfile(name: string | null): void;
-export declare function patternedProfileKinds(): PatternedProfileKind[];
 export declare function activeRulesPreset(): string | null;
 export declare function filterNamesForActiveResourceProfile(kind: ProfiledResourceKind, names: string[], sourceMap?: Map<string, string>): string[];
 export declare function isNameActiveInResourceProfile(kind: ProfiledResourceKind, name: string, source?: string): boolean;
-export declare function assertNameActiveInResourceProfile(kind: ProfiledResourceKind, name: string): void;
+export {};

package/dist/lib/resource-profiles.js

@@ -8,29 +8,16 @@
 import { readMeta, updateMeta } from './state.js';
 import { brandProfileName } from './brand.js';
 const PROFILE_NAME_PATTERN = /^[a-z0-9][a-z0-9-_]{0,48}$/i;
-const PATTERNED_KINDS = [
-    'commands',
-    'skills',
-    'hooks',
-    'subagents',
-    'plugins',
-    'workflows',
-    'permissions',
-    'mcp',
-];
-export function validateResourceProfileName(name) {
+function validateResourceProfileName(name) {
     if (!PROFILE_NAME_PATTERN.test(name)) {
         throw new Error(`Invalid profile name '${name}'. Use letters, digits, dash, underscore (max 48 chars).`);
     }
 }
-export function listResourceProfileNames() {
-    return Object.keys(readMeta().profiles?.presets ?? {}).sort((a, b) => a.localeCompare(b));
-}
-export function getResourceProfilePreset(name) {
+function getResourceProfilePreset(name) {
     validateResourceProfileName(name);
     return readMeta().profiles?.presets?.[name] ?? null;
 }
-export function getActiveResourceProfileName() {
+function getActiveResourceProfileName() {
     // A white-label brand pins its own profile; when running under a brand
     // (AGENTS_BRAND set) that preset wins over the global `profiles.active`, so
     // every resource filter that keys off the active profile becomes brand-scoped.
@@ -75,9 +62,6 @@ export function setActiveResourceProfile(name) {
         },
     }));
 }
-export function patternedProfileKinds() {
-    return [...PATTERNED_KINDS];
-}
 function plainPatternMatches(pattern, name) {
     if (pattern === '*')
         return true;
@@ -146,11 +130,3 @@ export function isNameActiveInResourceProfile(kind, name, source) {
     const sourceMap = source ? new Map([[name, source]]) : undefined;
     return filterNamesForActiveResourceProfile(kind, [name], sourceMap).includes(name);
 }
-export function assertNameActiveInResourceProfile(kind, name) {
-    const active = getActiveResourceProfile();
-    if (!active)
-        return;
-    if (isNameActiveInResourceProfile(kind, name))
-        return;
-    throw new Error(`${kind === 'secrets' ? 'Secrets bundle' : 'Resource'} '${name}' is not active in profile '${active.name}'.`);
-}

package/dist/lib/resources/workflows.d.ts

@@ -6,7 +6,7 @@
  * Resolution order (docs/07-entrypoints): project > user > plugin > extra > system.
  */
 import type { AgentId, ResolvedItem, ResourceHandler } from './types.js';
-export interface WorkflowItem {
+interface WorkflowItem {
     name: string;
     description: string;
     model?: string;

package/dist/lib/resources.d.ts

@@ -43,12 +43,6 @@ export interface ResolvedResource {
      */
     readonly aliases: string[] | undefined;
 }
-/**
- * The declared frontmatter `aliases:` of a single resource, or `[]` for a kind
- * that doesn't support aliases. Only `skills` (SKILL.md) and `commands` carry
- * them today. `resourcePath` is the skill directory or the command file.
- */
-export declare function resourceAliases(kind: ResourceKind, resourcePath: string): string[];
 /**
  * True when `rawName` (a filename with its extension already stripped) names a
  * directory doc rather than a resource of `kind`. Exported so every enumerator
@@ -84,13 +78,13 @@ export interface SkillResourceEntry extends ResourceEntry {
     ruleCount?: number;
 }
 /** An MCP server resource entry. */
-export interface McpResourceEntry {
+interface McpResourceEntry {
     name: string;
     scope: 'user' | 'project';
     version?: string;
 }
 /** All resources installed for a specific agent. */
-export interface AgentResources {
+interface AgentResources {
     agentId: AgentId;
     commands: ResourceEntry[];
     skills: SkillResourceEntry[];
@@ -101,7 +95,7 @@ export interface AgentResources {
     workflows: ResourceEntry[];
 }
 /** Options for resource discovery. */
-export interface GetAgentResourcesOptions {
+interface GetAgentResourcesOptions {
     cwd?: string;
     scope?: 'user' | 'project' | 'all';
     /** For MCP scanning - whether the CLI is installed */
@@ -114,3 +108,4 @@ export interface GetAgentResourcesOptions {
  * This is the source of truth - not the tracking data in agents.yaml.
  */
 export declare function getAgentResources(agentId: AgentId, options?: GetAgentResourcesOptions): AgentResources;
+export {};

package/dist/lib/resources.js

@@ -21,7 +21,7 @@ import { resolveSnapshotSha } from './git.js';
  * that doesn't support aliases. Only `skills` (SKILL.md) and `commands` carry
  * them today. `resourcePath` is the skill directory or the command file.
  */
-export function resourceAliases(kind, resourcePath) {
+function resourceAliases(kind, resourcePath) {
     if (kind === 'skills')
         return parseSkillMetadata(resourcePath)?.aliases ?? [];
     if (kind === 'commands')

package/dist/lib/routine-context.d.ts

@@ -100,10 +100,6 @@ export interface ResolvedExecutionContext {
     /** Present when `ready` is false. */
     readiness?: RoutineReadiness;
 }
-/** Expand a leading `~`/`$HOME` against the target home; pass other values through. */
-export declare function expandTargetHome(home: string, p: string): string;
-/** Rewrite an absolute path under the target home to its portable `~/…` form; pass others through. */
-export declare function toTargetPortable(home: string, abs: string): string;
 /**
  * True for a bare relative path (not absolute, not home-anchored) ON THE TARGET.
  *
@@ -121,7 +117,7 @@ export declare function isBareRelative(home: string, p: string): boolean;
  */
 export declare function resolveRoutineExecutionContext(input: ExecutionContextInput): ResolvedExecutionContext;
 /** Injected harness/target probes for {@link evaluateRoutineReadiness}. */
-export interface HarnessReadinessProbes {
+interface HarnessReadinessProbes {
     /** Is the resolved agent+version installed on the target? */
     agentInstalled?(): boolean;
     /** Is the absolute execution dir a trusted Codex workspace? (Codex agent only.) */
@@ -150,3 +146,4 @@ export declare function evaluateRoutineReadiness(context: ResolvedExecutionConte
     agent?: string;
     version?: string;
 }): RoutineReadinessResult;
+export {};

package/dist/lib/routine-context.js

@@ -50,7 +50,7 @@ function targetPath(home) {
     return /^[A-Za-z]:[\\/]/.test(home) || home.includes('\\') ? path.win32 : path.posix;
 }
 /** Expand a leading `~`/`$HOME` against the target home; pass other values through. */
-export function expandTargetHome(home, p) {
+function expandTargetHome(home, p) {
     if (p === '~' || p === '$HOME')
         return home;
     const tp = targetPath(home);
@@ -61,7 +61,7 @@ export function expandTargetHome(home, p) {
     return p;
 }
 /** Rewrite an absolute path under the target home to its portable `~/…` form; pass others through. */
-export function toTargetPortable(home, abs) {
+function toTargetPortable(home, abs) {
     const tp = targetPath(home);
     const rel = tp.relative(home, abs);
     if (rel === '')

package/dist/lib/routine-notify-owner.d.ts

@@ -4,14 +4,14 @@
  * The desktop lifecycle notifications (routine-notify.ts) never leave the
  * machine, so a failed scheduled routine on a headless fleet box was invisible
  * until someone happened to look. The per-routine prompt pattern (a prompt that
- * ends by shelling `agents notify`) does not close the gap either: when the
+ * ends by shelling `agents send --to owner`) does not close the gap either: when the
  * routine's OWN agent fails to spawn (`auth_failed`) that prompt never runs, so
  * the one failure most worth surfacing is the one that goes unheard.
  *
  * So the DAEMON delivers on failure, from the SAME owner channel stack `agents
- * notify` uses (humans.yaml owner channels, or the legacy `notify.owner`),
+ * send --to owner` uses (humans.yaml owner channels, or the legacy `notify.owner`),
  * calling the channel providers IN-PROCESS — no shelling out to `ssh mac-mini
- * agents notify`. When the primary owner channel cannot deliver from this box it
+ * agents send --to owner`. When the primary owner channel cannot deliver from this box it
  * walks the remaining configured owner channels as fallbacks (OpenClaw, a second
  * channel, …). Telegram is never used.
  *
@@ -45,13 +45,13 @@ export declare function routineFinishOwnerText(meta: Pick<RunMeta, 'jobName' | '
  */
 export declare function routineStartFailedOwnerText(config: Pick<JobConfig, 'name' | 'agent' | 'workflow' | 'command'>, error: string, host: string): string;
 /** One resolved owner destination to attempt, in plan order. */
-export interface OwnerDest {
+interface OwnerDest {
     channel: string;
     to: string;
 }
 /**
  * Ordered owner delivery plan for a failure ping: the primary owner destination
- * (the same one `agents notify` resolves) first, then every other configured
+ * (the same one `agents send --to owner` resolves) first, then every other configured
  * owner channel as a fallback. Deduped by (channel, to). Telegram channels and
  * intrusive channels (a voice call is too much for a routine failure) are
  * excluded entirely — so an owner whose ONLY channel is Telegram gets an empty
@@ -63,12 +63,12 @@ export interface OwnerDest {
  */
 export declare function ownerFailureDeliveryPlan(meta: Meta): OwnerDest[];
 /** Outcome of one delivery attempt, for logging/telemetry. */
-export interface OwnerDeliveryAttempt {
+interface OwnerDeliveryAttempt {
     channel: string;
     ok: boolean;
     error?: string;
 }
-export interface OwnerDeliveryResult {
+interface OwnerDeliveryResult {
     /** True once any channel in the plan accepted the message. */
     delivered: boolean;
     /** The channel that delivered, when `delivered`. */
@@ -100,3 +100,4 @@ export declare function notifyOwnerRoutineFinish(meta: RunMeta): Promise<OwnerDe
  * distinct failure the owner should hear about. Best-effort.
  */
 export declare function notifyOwnerRoutineStartFailed(config: JobConfig, error: string): Promise<OwnerDeliveryResult>;
+export {};

package/dist/lib/routine-notify-owner.js

@@ -4,14 +4,14 @@
  * The desktop lifecycle notifications (routine-notify.ts) never leave the
  * machine, so a failed scheduled routine on a headless fleet box was invisible
  * until someone happened to look. The per-routine prompt pattern (a prompt that
- * ends by shelling `agents notify`) does not close the gap either: when the
+ * ends by shelling `agents send --to owner`) does not close the gap either: when the
  * routine's OWN agent fails to spawn (`auth_failed`) that prompt never runs, so
  * the one failure most worth surfacing is the one that goes unheard.
  *
  * So the DAEMON delivers on failure, from the SAME owner channel stack `agents
- * notify` uses (humans.yaml owner channels, or the legacy `notify.owner`),
+ * send --to owner` uses (humans.yaml owner channels, or the legacy `notify.owner`),
  * calling the channel providers IN-PROCESS — no shelling out to `ssh mac-mini
- * agents notify`. When the primary owner channel cannot deliver from this box it
+ * agents send --to owner`. When the primary owner channel cannot deliver from this box it
  * walks the remaining configured owner channels as fallbacks (OpenClaw, a second
  * channel, …). Telegram is never used.
  *
@@ -92,7 +92,7 @@ function isTelegramChannel(channelId, meta, humansTransport) {
 }
 /**
  * Ordered owner delivery plan for a failure ping: the primary owner destination
- * (the same one `agents notify` resolves) first, then every other configured
+ * (the same one `agents send --to owner` resolves) first, then every other configured
  * owner channel as a fallback. Deduped by (channel, to). Telegram channels and
  * intrusive channels (a voice call is too much for a routine failure) are
  * excluded entirely — so an owner whose ONLY channel is Telegram gets an empty
@@ -123,7 +123,7 @@ export function ownerFailureDeliveryPlan(meta) {
         seen.add(key);
         plan.push({ channel: c, to: t });
     };
-    // Primary = the destination `agents notify` would resolve (humans policy →
+    // Primary = the destination `agents send --to owner` would resolve (humans policy →
     // first addressable → legacy notify.owner). Same filters as the fallbacks.
     const primary = readOwnerDest(meta);
     if (primary)