@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/lib/session/cloud.js

@@ -57,7 +57,7 @@ function agentToFormat(agent) {
         return 'opencode';
     return null;
 }
-export function assertContained(candidate, rootDir) {
+function assertContained(candidate, rootDir) {
     const root = path.resolve(rootDir);
     const resolved = path.resolve(root, candidate);
     if (!resolved.startsWith(root + path.sep)) {
@@ -65,7 +65,7 @@ export function assertContained(candidate, rootDir) {
     }
     return resolved;
 }
-export function validateCloudExecutionId(executionId) {
+function validateCloudExecutionId(executionId) {
     if (!CLOUD_EXECUTION_ID_RE.test(executionId)) {
         throw new Error(`Invalid cloud execution_id: ${JSON.stringify(executionId)}`);
     }
@@ -145,16 +145,3 @@ export function isCloudSessionPath(filePath) {
     const resolved = path.resolve(filePath);
     return resolved.startsWith(root + path.sep);
 }
-/** Extract execution_id from a cloud cache path. */
-export function executionIdFromCloudPath(filePath) {
-    if (!isCloudSessionPath(filePath))
-        return null;
-    const rel = path.relative(CLOUD_CACHE_DIR, filePath);
-    const parts = rel.split(path.sep);
-    try {
-        return parts[0] ? validateCloudExecutionId(parts[0]) : null;
-    }
-    catch {
-        return null;
-    }
-}

package/dist/lib/session/detached.d.ts

@@ -1,6 +1,6 @@
 /** A session's foreground/background presence. */
 export type Presence = 'attached' | 'background' | 'parked';
-export interface DetachRecord {
+interface DetachRecord {
     sessionId: string;
     agent: string;
     cwd?: string;
@@ -20,6 +20,13 @@ export declare function clearDetachRecord(sessionId: string): void;
 export declare function listDetachRecords(): DetachRecord[];
 /** True while the recorded headless continuation is still the live process we spawned. */
 export declare function isHeadlessAlive(rec: DetachRecord): boolean;
+/**
+ * Stop the detached continuation before a local foreground resume starts.
+ * The start-time check in {@link isHeadlessAlive} prevents signalling a reused
+ * PID; a continuation that ignores SIGTERM fails closed instead of running
+ * alongside a second process against the same transcript.
+ */
+export declare function takeOverDetachedSession(sessionId: string): Promise<boolean>;
 /**
  * Presence for a session id from the detach store alone:
  *   - no record            -> undefined (caller decides: `attached` for a live
@@ -28,3 +35,4 @@ export declare function isHeadlessAlive(rec: DetachRecord): boolean;
  *   - record + pid exited   -> `parked` (the run finished; transcript is durable)
  */
 export declare function presenceFromStore(sessionId: string): Presence | undefined;
+export {};

package/dist/lib/session/detached.js

@@ -1,6 +1,6 @@
 /**
  * Detached-session store — the record `agents sessions detach` writes and both
- * `agents sessions attach` and the active-session scan read to know an agent is
+ * `agents sessions resume` and the active-session scan read to know an agent is
  * "backgrounded": running headless with no terminal, continuing its task
  * unattended.
  *
@@ -14,7 +14,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { getSystemAgentsDir } from '../state.js';
-import { captureProcessStartTime } from '../pty-server.js';
+import { captureProcessStartTime } from '../platform/process.js';
 function detachedDir() {
     return path.join(getSystemAgentsDir(), 'detached');
 }
@@ -77,6 +77,35 @@ export function isHeadlessAlive(rec) {
     }
     return true;
 }
+/**
+ * Stop the detached continuation before a local foreground resume starts.
+ * The start-time check in {@link isHeadlessAlive} prevents signalling a reused
+ * PID; a continuation that ignores SIGTERM fails closed instead of running
+ * alongside a second process against the same transcript.
+ */
+export async function takeOverDetachedSession(sessionId) {
+    const rec = readDetachRecord(sessionId);
+    if (!rec)
+        return false;
+    if (isHeadlessAlive(rec)) {
+        try {
+            process.kill(rec.headlessPid, 'SIGTERM');
+        }
+        catch (err) {
+            if (isHeadlessAlive(rec))
+                throw err;
+        }
+        const deadline = Date.now() + 2_000;
+        while (isHeadlessAlive(rec) && Date.now() < deadline) {
+            await new Promise((resolve) => setTimeout(resolve, 25));
+        }
+        if (isHeadlessAlive(rec)) {
+            throw new Error(`Detached continuation ${rec.headlessPid} did not stop; refusing to resume a duplicate process.`);
+        }
+    }
+    clearDetachRecord(sessionId);
+    return true;
+}
 /**
  * Presence for a session id from the detach store alone:
  *   - no record            -> undefined (caller decides: `attached` for a live

package/dist/lib/session/digest.d.ts

@@ -13,7 +13,6 @@ export interface FileChange {
     path: string;
     op: FileOp;
 }
-export declare const READ_TOOLS: Set<string>;
 export declare const WRITE_TOOLS: Set<string>;
 export declare const EDIT_TOOLS: Set<string>;
 /**
@@ -51,7 +50,7 @@ export declare function toolHistogram(toolCounts: Record<string, number>, top?:
  * only surfaces repeatable tools.
  */
 export declare function bashToolCounts(events: SessionEvent[]): Record<string, number>;
-export interface TestResult {
+interface TestResult {
     runner: string;
     passed?: number;
     failed?: number;
@@ -64,3 +63,4 @@ export interface TestResult {
  * (tool_use) with the next tool_result's output. Returns undefined if none ran.
  */
 export declare function detectTestResult(events: SessionEvent[]): TestResult | undefined;
+export {};

package/dist/lib/session/digest.js

@@ -10,7 +10,7 @@
 import { bucketKey, classifyBashCommand } from './bash-command.js';
 // Tool vocab mirrors parse.ts / render.ts so classification matches what those
 // modules already recognize across Claude/Codex/others.
-export const READ_TOOLS = new Set(['Read', 'read_file', 'view_file', 'cat_file', 'get_file']);
+const READ_TOOLS = new Set(['Read', 'read_file', 'view_file', 'cat_file', 'get_file']);
 export const WRITE_TOOLS = new Set(['Write', 'write_file', 'create_file', 'Create']);
 export const EDIT_TOOLS = new Set(['Edit', 'edit_file', 'replace', 'patch', 'MultiEdit', 'apply_patch']);
 /**

package/dist/lib/session/fork.d.ts

@@ -15,13 +15,13 @@
  */
 import type { SessionMeta } from './types.js';
 /** File-change tally as `sessions preview --json` serializes it (digest.changes). */
-export interface ForkRecapChanges {
+interface ForkRecapChanges {
     created: number;
     modified: number;
     deleted: number;
 }
 /** Everything the recap seed is built from — resolved cross-fleet before launch. */
-export interface ForkRecapInput {
+interface ForkRecapInput {
     /** Source harness id — the sibling launches the same one. */
     agent: string;
     /** Display label for the source (label → topic → short id, resolved by the caller). */
@@ -57,3 +57,4 @@ export declare function forkLabelFor(session: Pick<SessionMeta, 'label' | 'gener
  * orchestration in `commands/fork.ts` stays the only side-effecting layer.
  */
 export declare function buildForkRecap(input: ForkRecapInput): string;
+export {};

package/dist/lib/session/highlights.d.ts

@@ -30,7 +30,7 @@ export declare function isSkillInvocation(e: SessionEvent): boolean;
  * `args.skill` (or `args.name`). Sorted by count desc, then name.
  */
 export declare function extractSkills(events: SessionEvent[]): SkillUse[];
-export interface SlashCommandUse {
+interface SlashCommandUse {
     /** WITH the leading slash, e.g. `/recap`, `/code:commit` — matches SessionEvent.slashCommand's shape. */
     name: string;
     count: number;
@@ -43,7 +43,7 @@ export interface SlashCommandUse {
  * count desc, then name.
  */
 export declare function extractSlashCommands(events: SessionEvent[]): SlashCommandUse[];
-export interface HookUse {
+interface HookUse {
     /** Hook name as configured, e.g. `SessionStart:startup`. */
     name: string;
     /** Lifecycle event, e.g. `SessionStart`. */
@@ -60,8 +60,8 @@ export interface HookUse {
  * Sorted by count desc, then name.
  */
 export declare function extractHooks(events: SessionEvent[]): HookUse[];
-export type LinkKind = 'linear' | 'jira' | 'github' | 'gitlab' | 'other';
-export interface SessionLink {
+type LinkKind = 'linear' | 'jira' | 'github' | 'gitlab' | 'other';
+interface SessionLink {
     kind: LinkKind;
     url: string;
     /** Short display label: `RUSH-2076`, `PR#1755`, `owner/repo#123`, host. */
@@ -113,7 +113,7 @@ export declare function harnessTracksBackgroundShells(agent: SessionAgentId): bo
  * matching events while streaming instead of re-reading the transcript.
  */
 export declare function isBackgroundShellStart(e: SessionEvent): boolean;
-export interface BackgroundShell {
+interface BackgroundShell {
     /** The command line as invoked, trimmed for display. */
     command: string;
     timestamp: string;
@@ -148,3 +148,4 @@ export declare function extractBackgroundShells(events: SessionEvent[]): Backgro
  * different answer; do not "unify" them.
  */
 export declare function isSubAgentTool(tool: string, command: string): boolean;
+export {};

package/dist/lib/session/hook-sessions.d.ts

@@ -39,7 +39,7 @@ export declare function recordCompletedLaunch(binding: PidSessionEntry | undefin
  * collision (pid reuse, or a launch id lingering from a since-dead process).
  */
 export declare function loadHookSessionIndex(): HookSessionIndex;
-export interface ResolveOpts {
+interface ResolveOpts {
     pid: number;
     kind: string;
     launchId?: string;
@@ -60,3 +60,4 @@ export declare function resolveHookSessionRecord(index: HookSessionIndex, opts:
 /** The session id alone — see {@link resolveHookSessionRecord} for the full record
  *  (which also carries the SessionStart `ts` used to stamp `startedAtMs`). */
 export declare function resolveHookSessionId(index: HookSessionIndex, opts: ResolveOpts): string | undefined;
+export {};

package/dist/lib/session/host-link.d.ts

@@ -55,7 +55,7 @@ export type HostLink =
  * the extension agree on when a window is dead.
  */
 export declare const HOST_HEARTBEAT_STALE_MS: number;
-export interface HostLinkInput {
+interface HostLinkInput {
     /** The agent process is still alive (already pid-reuse-checked by the caller). */
     pidAlive: boolean;
     /**
@@ -102,3 +102,4 @@ export declare function classifyHostLink(input: HostLinkInput): HostLink;
  * Pure — same injected signals as the classifier.
  */
 export declare function hostWindowLost(input: HostLinkInput): boolean;
+export {};

package/dist/lib/session/inject.d.ts

@@ -13,6 +13,6 @@ import type { InjectTarget } from '../terminal/index.js';
 /**
  * Map a session's `ReplyRail` to an engine `InjectTarget`. Today only tmux rails
  * are externally addressable (provenance.ts:143-149); a null rail yields null and
- * the caller must supply a target another way (a pty id, a macOS window).
+ * the caller must supply a target another way (a macOS window).
  */
 export declare function injectTargetFromReplyRail(rail: ReplyRail): InjectTarget | null;

package/dist/lib/session/inject.js

@@ -11,7 +11,7 @@
 /**
  * Map a session's `ReplyRail` to an engine `InjectTarget`. Today only tmux rails
  * are externally addressable (provenance.ts:143-149); a null rail yields null and
- * the caller must supply a target another way (a pty id, a macOS window).
+ * the caller must supply a target another way (a macOS window).
  */
 export function injectTargetFromReplyRail(rail) {
     if (rail && rail.rail === 'tmux') {

package/dist/lib/session/insights.d.ts

@@ -21,14 +21,6 @@
  *     the raw file count rather than quietly differing.
  */
 import type { SessionEvent } from './types.js';
-/**
- * Minimum quiet time after the assistant's last event before a user message
- * is classified as an **agent silent stall**: the model went quiet on its own
- * and sat idle until the human resumed. Shorter gaps are normal turn-taking.
- * 5 minutes is long enough to exclude "user typing the next instruction" and
- * short enough to catch "went silent mid-task until I said continue."
- */
-export declare const SILENT_STALL_SECONDS = 300;
 /** Behavioural facets of one session. Serialized as JSON into `session_insights`. */
 export interface InsightFacets {
     toolCounts: Record<string, number>;
@@ -112,11 +104,6 @@ export interface InsightFacets {
  * can be re-bucketed for a different display timezone without re-parsing.
  */
 export declare function computeInsightFacets(events: SessionEvent[], timezoneOffsetMinutes?: number): InsightFacets;
-/**
- * Classify a long quiet gap after the assistant's last event as an agent silent stall.
- * Optionally also marks an explicit resume nudge ("continue", …) after that silence.
- */
-export declare function classifySilentStall(gapSeconds: number, userText: string, friction: Record<string, number>, corrections: Record<string, number>): void;
 /** Percentile of a numeric sample, nearest-rank. Returns 0 for an empty sample. */
 export declare function percentile(values: number[], p: number): number;
 /** Bucket response gaps for display. Returns every bucket, including empty ones. */
@@ -132,7 +119,7 @@ export interface SessionSpan {
     endMs: number;
 }
 /** How much work ran concurrently, and how much of it straddled two accounts. */
-export interface OverlapReport {
+interface OverlapReport {
     /** Pairs of sessions whose spans intersect. */
     overlappingPairs: number;
     /** Of those, pairs belonging to DIFFERENT accounts. */
@@ -169,9 +156,10 @@ export interface InsightAction {
     evidenceCount: number;
     sampleSessionIds: string[];
 }
-export interface SessionFacetEvidence {
+interface SessionFacetEvidence {
     id: string;
     facets: InsightFacets;
 }
 /** Build a stable, evidence-backed action list without exposing transcript text. */
 export declare function buildInsightActions(sessions: SessionFacetEvidence[]): InsightAction[];
+export {};

package/dist/lib/session/insights.js

@@ -60,7 +60,7 @@ const GAP_CEILING_SECONDS = 3600;
  * 5 minutes is long enough to exclude "user typing the next instruction" and
  * short enough to catch "went silent mid-task until I said continue."
  */
-export const SILENT_STALL_SECONDS = 300;
+const SILENT_STALL_SECONDS = 300;
 /** Response-gap buckets, in ascending order. Upper bound is exclusive. */
 const GAP_BUCKETS = [
     ['<10s', 10], ['10-30s', 30], ['30s-1m', 60], ['1-2m', 120],
@@ -326,7 +326,7 @@ const RESUME_NUDGE_PATTERN = /\b(?:continue|keep going|don'?t stop|resume|pick u
  * Classify a long quiet gap after the assistant's last event as an agent silent stall.
  * Optionally also marks an explicit resume nudge ("continue", …) after that silence.
  */
-export function classifySilentStall(gapSeconds, userText, friction, corrections) {
+function classifySilentStall(gapSeconds, userText, friction, corrections) {
     for (const [label, min, max] of SILENT_STALL_BUCKETS) {
         if (gapSeconds >= min && gapSeconds < max) {
             bump(friction, label);

package/dist/lib/session/local-tmux-attach.d.ts

@@ -14,24 +14,7 @@ export declare function resolveTmuxAliasState(selector: string, socket?: string)
  * identity to another machine.
  */
 export declare function shouldAttachLocalTmuxAliasBeforeFleet(selector: string | undefined, hosts: string[]): selector is string;
-/**
- * Attach a live tmux session named exactly as the selector, without needing the
- * session index to know anything about it.
- *
- * SES-41 requires a `ag-<agent>-<8hex>` tmux alias to resolve, but the alias's
- * hex is the LAUNCH id, not the harness session id, and for a harness that
- * writes no `state/sessions/<pid>.json` record there is no mapping back to a
- * SessionMeta at all. The pane is the thing the user asked for, and its NAME is
- * sufficient to attach it — so an unattributable session is still reachable
- * instead of being a dead end that forces raw `tmux -S … attach`.
- *
- * Returns false when this is not an alias, the server/session is absent, or
- * every pane is dead — the caller then continues to normal id resolution.
- * SES-39's "re-read `pane_dead` immediately before attach" is honoured here:
- * liveness is queried at attach time, not read from a roster.
- */
-export declare function attachLiveTmuxAlias(selector: string): Promise<boolean>;
-export type LocalAliasBySuffix = {
+type LocalAliasBySuffix = {
     kind: 'alias';
     alias: string;
 } | {
@@ -67,3 +50,4 @@ export declare function resolveUniqueLocalLiveAliasBySuffix(shortId: string, soc
  * resolution / the fleet race.
  */
 export declare function attachLocalLiveSelector(selector: string | undefined, hosts: string[]): Promise<boolean>;
+export {};

package/dist/lib/session/local-tmux-attach.js

@@ -67,7 +67,7 @@ export function shouldAttachLocalTmuxAliasBeforeFleet(selector, hosts) {
  * SES-39's "re-read `pane_dead` immediately before attach" is honoured here:
  * liveness is queried at attach time, not read from a roster.
  */
-export async function attachLiveTmuxAlias(selector) {
+async function attachLiveTmuxAlias(selector) {
     const socket = getDefaultSocketPath();
     if (await resolveTmuxAliasState(selector, socket) !== 'live')
         return false;

package/dist/lib/session/migrations.d.ts

@@ -24,7 +24,6 @@ export interface MigrationRecord {
     status: 'completed' | 'failed';
     error?: string;
 }
-export declare function migrationsLedgerPath(): string;
 /**
  * Append one migration event. A ledger write must never break a migration that
  * otherwise succeeded, so a write failure is a visible warning, not a throw.

package/dist/lib/session/migrations.js

@@ -13,7 +13,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import chalk from 'chalk';
 import { homeDir } from '../platform/paths.js';
-export function migrationsLedgerPath() {
+function migrationsLedgerPath() {
     return path.join(homeDir(), '.agents', '.history', 'migrations.jsonl');
 }
 /**

package/dist/lib/session/mirror.d.ts

@@ -21,10 +21,6 @@
  * consume so its DB is not written with rows it never renders.
  */
 import { type ConfiguredDeviceRole } from '../device-config.js';
-/** Cap on sessions published per device — the payload stays what a picker shows. */
-export declare const SESSION_MIRROR_MAX_ROWS = 200;
-/** First-user-message snippet ceiling; the full turn stays on the owning box. */
-export declare const SESSION_MIRROR_SNIPPET_MAX = 280;
 /** Mirror rows older than this since their last sync are pruned (staleness/size ceiling). */
 export declare const SESSION_MIRROR_MAX_AGE_MS: number;
 /** Caps for the timeline block on a published mirror row. */
@@ -32,12 +28,12 @@ export declare const SESSION_MIRROR_MAX_STEPS = 8;
 export declare const SESSION_MIRROR_STEP_TEXT_MAX = 160;
 export declare const SESSION_MIRROR_REQUEST_MAX = 2000;
 export declare const SESSION_MIRROR_MAX_FILES = 8;
-export interface PublishSessionMirrorOptions {
+interface PublishSessionMirrorOptions {
     userAgentsDir?: string;
     device?: string;
     limit?: number;
 }
-export interface PublishSessionMirrorResult {
+interface PublishSessionMirrorResult {
     published: boolean;
     changed: boolean;
     count: number;
@@ -47,14 +43,14 @@ export interface PublishSessionMirrorResult {
 }
 /** Publish this device's most-recent local sessions into its owned shared-state file. */
 export declare function publishSessionMirrorToSharedStore(options?: PublishSessionMirrorOptions): Promise<PublishSessionMirrorResult>;
-export interface ConsumeSessionMirrorOptions {
+interface ConsumeSessionMirrorOptions {
     userAgentsDir?: string;
     device?: string;
     role?: ConfiguredDeviceRole;
     now?: number;
     maxAgeMs?: number;
 }
-export interface ConsumeSessionMirrorResult {
+interface ConsumeSessionMirrorResult {
     sources: string[];
     merged: number;
     pruned: number;
@@ -71,3 +67,4 @@ export interface ConsumeSessionMirrorResult {
  * marked worker skips: the mirror feeds an interactive picker it never renders.
  */
 export declare function consumeSessionMirrorFromSharedStore(options?: ConsumeSessionMirrorOptions): ConsumeSessionMirrorResult;
+export {};

package/dist/lib/session/mirror.js

@@ -26,9 +26,9 @@ import { getUserAgentsDir } from '../state.js';
 import { machineId, normalizeHost } from './sync/config.js';
 import { pruneMirrorSessions, queryLocalOriginSessionsForMirror, upsertMirrorSession, } from './db.js';
 /** Cap on sessions published per device — the payload stays what a picker shows. */
-export const SESSION_MIRROR_MAX_ROWS = 200;
+const SESSION_MIRROR_MAX_ROWS = 200;
 /** First-user-message snippet ceiling; the full turn stays on the owning box. */
-export const SESSION_MIRROR_SNIPPET_MAX = 280;
+const SESSION_MIRROR_SNIPPET_MAX = 280;
 /** Mirror rows older than this since their last sync are pruned (staleness/size ceiling). */
 export const SESSION_MIRROR_MAX_AGE_MS = 14 * 24 * 60 * 60_000;
 /** Caps for the timeline block on a published mirror row. */

package/dist/lib/session/parse.d.ts

@@ -71,17 +71,6 @@ export declare function parseClaude(filePath: string, opts?: ParseSessionOptions
 export declare function parseClaudeContent(content: string, opts?: ParseSessionOptions): SessionEvent[];
 /** Parse a Codex JSONL session file into normalized events. */
 export declare function parseCodex(filePath: string): SessionEvent[];
-/**
- * Extract target file path(s) from a Codex apply_patch envelope. The patch body
- * opens with `*** Begin Patch` and carries one or more file ops of the form
- * `*** Update File: <path>` / `*** Add File: <path>` / `*** Delete File: <path>`.
- * Returns every path in order (a multi-file patch emits multiple paths so
- * artifact discovery sees each file — RUSH-1410). Empty when unparseable.
- */
-export declare function applyPatchTargets(input: string): Array<{
-    path: string;
-    op: 'Add' | 'Update' | 'Delete';
-}>;
 export declare function applyPatchTargetPaths(input: string): string[];
 /**
  * Codex writes its turn TWICE in one rollout: the raw `response_item` records
@@ -119,14 +108,6 @@ export declare function parseGemini(filePath: string): SessionEvent[];
  * request step and a completion step that share the id).
  */
 export declare function parseAntigravity(dbPath: string): SessionEvent[];
-/**
- * Separator between a container file and the id it holds inside a *composite*
- * session `file_path`. Some harnesses keep every session in ONE file (OpenCode's
- * single `opencode.db`), so the index stores `<container>#<session-id>` rather
- * than one path per session — e.g.
- * `/home/u/.local/share/opencode/opencode.db#ses_02410a2c…`.
- */
-export declare const SESSION_FILE_PATH_SEP = "#";
 /**
  * Split a stored session `file_path` into its on-disk container and the optional
  * in-container fragment. For a plain per-session file the container is the path
@@ -179,7 +160,7 @@ export declare function sessionFilePathContainer(filePath: string): string;
  * session that committed / opened / merged a PR and to report a tool-failure
  * count the event stream cannot supply.
  */
-export interface GrokSessionSignals {
+interface GrokSessionSignals {
     gitCommitCount: number;
     prCreatedCount: number;
     prMergedCount: number;
@@ -232,18 +213,6 @@ export declare function parseOpenCode(filePath: string): SessionEvent[];
 export declare function parseOpencodeCloud(filePath: string): SessionEvent[];
 /** Parse a Rush JSONL session file into normalized events. */
 export declare function parseRush(filePath: string): SessionEvent[];
-/**
- * Muse Code session.jsonl → normalized events.
- *
- * Muse records an append-only event log. We map:
- *   - runtime.command_intake.received / turn_submit → user message
- *   - assistant_message_committed → assistant message
- *   - model_completed.usage → usage
- *   - tool-related events when present
- */
-export declare function parseMuse(filePath: string): SessionEvent[];
-/** Parse a Hermes session JSON file into normalized events. */
-export declare function parseHermes(filePath: string): SessionEvent[];
 /** Parse a Kimi session state.json file by reading its agents/main/wire.jsonl. */
 export declare function parseKimi(filePath: string): SessionEvent[];
 /** Parse Cursor's Anthropic-shaped message JSONL transcript. */

package/dist/lib/session/parse.js

@@ -609,7 +609,7 @@ export function parseCodex(filePath) {
  * Returns every path in order (a multi-file patch emits multiple paths so
  * artifact discovery sees each file — RUSH-1410). Empty when unparseable.
  */
-export function applyPatchTargets(input) {
+function applyPatchTargets(input) {
     const targets = [];
     const re = /^\*\*\* (Update|Add|Delete) File: (.+)$/gm;
     for (const m of input.matchAll(re)) {
@@ -1391,7 +1391,7 @@ export function parseAntigravity(dbPath) {
  * than one path per session — e.g.
  * `/home/u/.local/share/opencode/opencode.db#ses_02410a2c…`.
  */
-export const SESSION_FILE_PATH_SEP = '#';
+const SESSION_FILE_PATH_SEP = '#';
 /**
  * Split a stored session `file_path` into its on-disk container and the optional
  * in-container fragment. For a plain per-session file the container is the path
@@ -2086,7 +2086,7 @@ export function parseRush(filePath) {
  *   - model_completed.usage → usage
  *   - tool-related events when present
  */
-export function parseMuse(filePath) {
+function parseMuse(filePath) {
     const content = safeReadSessionFile(filePath);
     const lines = content.split('\n').filter((l) => l.trim());
     const events = [];
@@ -2166,7 +2166,7 @@ export function parseMuse(filePath) {
     return events;
 }
 /** Parse a Hermes session JSON file into normalized events. */
-export function parseHermes(filePath) {
+function parseHermes(filePath) {
     let session;
     try {
         session = JSON.parse(safeReadSessionFile(filePath));

package/dist/lib/session/presence.d.ts

@@ -44,7 +44,7 @@ export declare function loadPresence(dir?: string): Record<string, PresenceRecor
 export declare function savePresence(map: Record<string, PresenceRecord>, dir?: string): void;
 /** The subset of an `ActiveSession` the presence adapter reads (structural, so
  *  this module doesn't import the heavy active-session graph). */
-export interface ActiveSessionLike {
+interface ActiveSessionLike {
     sessionId?: string;
     kind: string;
     /** 'terminal' (interactive) | 'headless' | 'teams' | 'cloud' | ... */
@@ -83,3 +83,4 @@ export declare function reconcilePresence(prev: Record<string, PresenceRecord>,
     next: Record<string, PresenceRecord>;
     transitions: PresenceTransition[];
 };
+export {};

package/dist/lib/session/prompt.d.ts

@@ -66,7 +66,7 @@ export declare function cleanSessionPrompt(raw: string): string;
  * path, a pasted shell line, or a skill's install directory.
  */
 export type UserPromptKind = 'text' | 'image' | 'command' | 'skill';
-export interface ClassifiedPrompt {
+interface ClassifiedPrompt {
     /**
      * The one-line, display-ready form of the prompt — never a bare path. NOT
      * length-capped: the recap card shows it in full; row consumers cap it
@@ -132,7 +132,7 @@ export declare function extractSessionTopic(raw: string): string | undefined;
  * dropped in, or an `@path` directory reference. `name` is the basename (or the
  * `@ref` verbatim) — the sidebar renders these as chips beside the request text.
  */
-export interface RequestAttachmentRef {
+interface RequestAttachmentRef {
     kind: 'image' | 'file' | 'dir';
     name: string;
 }
@@ -194,3 +194,4 @@ export declare function firstSentence(text: string, cap?: number): string;
 export declare function tidyRequest(raw: string | undefined, opts?: {
     attachments?: SessionAttachment[];
 }, depth?: number): TidyRequest | undefined;
+export {};

package/dist/lib/session/prompt.js

@@ -193,7 +193,7 @@ export function cleanSessionPrompt(raw) {
     let text = stripTeamWrappers(raw).replace(/\r/g, '').trim();
     if (!text)
         return '';
-    text = text.replace(/<\/?[a-z_][a-z0-9_-]*>/gi, '');
+    text = stripXmlLikeTags(text);
     const meaningful = text
         .split('\n')
         .map(line => line.trim())
@@ -201,6 +201,43 @@ export function cleanSessionPrompt(raw) {
         .filter(line => !NOISE_LINE_PATTERNS.some(pattern => pattern.test(line)));
     return meaningful.join('\n').trim();
 }
+/**
+ * Remove XML-like tags in one pass, including nested fragments such as
+ * `<scr<b>ipt>`. A candidate starts only with a valid tag-name prefix, so
+ * ordinary comparisons such as `1 < 2 > 0` remain prose.
+ */
+function stripXmlLikeTags(text) {
+    const chunks = [];
+    let plainStart = 0;
+    let tagStart = -1;
+    let depth = 0;
+    for (let index = 0; index < text.length; index += 1) {
+        const char = text[index];
+        if (depth === 0) {
+            if (char !== '<')
+                continue;
+            const firstNameIndex = text[index + 1] === '/' ? index + 2 : index + 1;
+            if (!/[a-z_]/i.test(text[firstNameIndex] ?? ''))
+                continue;
+            chunks.push(text.slice(plainStart, index));
+            tagStart = index;
+            depth = 1;
+            continue;
+        }
+        if (char === '<') {
+            depth += 1;
+        }
+        else if (char === '>' && --depth === 0) {
+            plainStart = index + 1;
+            tagStart = -1;
+        }
+    }
+    if (tagStart !== -1)
+        chunks.push(text.slice(tagStart));
+    else
+        chunks.push(text.slice(plainStart));
+    return chunks.join('');
+}
 /**
  * A skill invocation injects a system line naming the skill's install directory:
  *   "Base directory for this skill: /home/.../skills/<name>"