@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/lib/watchdog/rotate.js

@@ -41,7 +41,7 @@ import { resolveWatchdogSessionPath } from './read.js';
  * two patterns cover the weekly/session variants, including claude's
  * "You've hit your weekly limit · resets <time>" form.
  */
-export const ROTATE_LIMIT_PATTERNS = [
+const ROTATE_LIMIT_PATTERNS = [
     /you'?ve hit your [\w-]*\s?limit/i,
     /hit your (weekly|daily|usage|session) limit/i,
     /usage limit (has been )?(reached|exceeded)/i,
@@ -195,7 +195,7 @@ export const DEFAULT_ROTATE_FAILED_COOLDOWN_MS = 15 * 60_000;
 function rotateDir(dir) {
     return path.join(dir, 'rotate');
 }
-export function rotateStatePath(dir, sessionId) {
+function rotateStatePath(dir, sessionId) {
     return path.join(rotateDir(dir), `${sessionId}.json`);
 }
 export function readRotateState(dir, sessionId) {
@@ -216,14 +216,6 @@ export function writeRotateState(dir, state) {
         /* best-effort: the tray tolerates a missing/partial state file */
     }
 }
-export function clearRotateState(dir, sessionId) {
-    try {
-        fs.unlinkSync(rotateStatePath(dir, sessionId));
-    }
-    catch {
-        /* already gone */
-    }
-}
 /** A phase the machine still has work to do in (done/failed are terminal). */
 export function isInflightPhase(phase) {
     return phase !== 'done' && phase !== 'failed';
@@ -255,7 +247,7 @@ export function listInflightRotates(dir) {
  * <watchdog-state>/rotate-skips.json: { [sessionId]: suppressUntilMs }. A skip
  * inside the window logs nothing and touches nothing.
  */
-export function readRotateSkipLedger(dir) {
+function readRotateSkipLedger(dir) {
     try {
         return JSON.parse(fs.readFileSync(path.join(dir, 'rotate-skips.json'), 'utf8'));
     }
@@ -330,7 +322,7 @@ const ROTATE_TRANSCRIPT_AGENTS = ['claude', 'codex', 'gemini', 'droid'];
  * accepts a fresh active session (started after the rotate began), so a codex
  * pick with an unknown id is still detected.
  */
-export function defaultRotateTranscriptLive(newSessionId) {
+function defaultRotateTranscriptLive(newSessionId) {
     return ROTATE_TRANSCRIPT_AGENTS.some((agent) => resolveWatchdogSessionPath(newSessionId, agent) !== undefined);
 }
 /** Strip trailing slashes so `/repo` and `/repo/` correlate. */

package/dist/lib/watchdog/runner.d.ts

@@ -50,8 +50,6 @@ export interface WatchdogThresholds {
     dormantMs: number;
 }
 export declare const DEFAULT_THRESHOLDS: WatchdogThresholds;
-/** The default nudge text — a short imperative, configurable via opts.nudgeText. */
-export declare const DEFAULT_NUDGE_TEXT = "Continue.";
 export interface WatchdogTickOptions {
     /** Actually inject when a nudge is decided. Default false (dry status). */
     nudge?: boolean;
@@ -205,11 +203,6 @@ export interface WatchdogTickResult {
         transitions: PresenceTransition[];
     };
 }
-/**
- * On-disk per-session policy sentinel: `<stateDir>/policy/<sessionId>` whose
- * contents are `off` | `keep` | `handsoff`. Absent / unreadable / unknown → keep.
- */
-export declare function readPolicySentinel(dir: string, sessionId: string): WatchdogPolicy;
 /** Write a per-session policy sentinel (used by the CLI `agents watchdog policy`). */
 export declare function writePolicySentinel(dir: string, sessionId: string, policy: WatchdogPolicy): void;
 /** A decision for one idle session. `text` overrides the default nudge text. */

package/dist/lib/watchdog/runner.js

@@ -58,7 +58,7 @@ export const DEFAULT_THRESHOLDS = {
     dormantMs: WATCHDOG_DORMANT_MS,
 };
 /** The default nudge text — a short imperative, configurable via opts.nudgeText. */
-export const DEFAULT_NUDGE_TEXT = 'Continue.';
+const DEFAULT_NUDGE_TEXT = 'Continue.';
 // --- state persistence ------------------------------------------------------
 function watchdogStateDir(opts) {
     return opts.stateDir ?? path.join(getRuntimeStateDir(), 'watchdog');
@@ -88,7 +88,7 @@ function readNudgeLedger(dir) {
  * On-disk per-session policy sentinel: `<stateDir>/policy/<sessionId>` whose
  * contents are `off` | `keep` | `handsoff`. Absent / unreadable / unknown → keep.
  */
-export function readPolicySentinel(dir, sessionId) {
+function readPolicySentinel(dir, sessionId) {
     if (!sessionId)
         return 'keep';
     let raw;
@@ -133,7 +133,7 @@ function planDelivery(session, chosenText, block, allowGhosttyFocus) {
     const mailboxId = mailboxIdForActiveSession(session) ?? sessionId;
     const resolution = resolveInjectTargetForSession(session, { allowGhosttyFocus });
     const route = resolveAnswerRoute({ mailboxId, answer: chosenText, session, block });
-    // A precise split (tmux / iTerm / vscodium / pty) is the authoritative target.
+    // A precise split (tmux / iTerm / vscodium) is the authoritative target.
     if (resolution.addressable) {
         return { via: 'inject', rail: resolution.rail, target: resolution.target };
     }
@@ -821,7 +821,7 @@ export async function runWatchdogTick(opts = {}) {
         }
         // Deliver. injectDryRun exercises the path without a real side effect: inject
         // still calls injectFn (which honors dryRun), mailbox/resume are short-circuited.
-        // `confirmed` distinguishes a delivery we KNOW reached the agent (tmux/iterm/pty,
+        // `confirmed` distinguishes a delivery we KNOW reached the agent (tmux/iterm,
         // mailbox, resume) from one merely dispatched (vscodium's fire-and-forget
         // --open-url). Only a CONFIRMED delivery is booked as a landed nudge.
         let delivered;

package/dist/lib/watchdog/service.d.ts

@@ -1,6 +1,6 @@
 import { type ActiveSession } from '../session/active.js';
 import { type WatchdogThresholds, type WatchdogTickResult } from './runner.js';
-export interface WatchdogPassOptions {
+interface WatchdogPassOptions {
     nudge: boolean;
     nudgeText?: string;
     smartAgent?: string;
@@ -11,6 +11,6 @@ export interface WatchdogPassOptions {
     mailboxGc?: boolean;
 }
 export declare function loadWatchdogSessions(): Promise<ActiveSession[]>;
-export declare function runWatchdogMailboxGc(sessions: ActiveSession[]): void;
 /** Execute one watchdog pass from the daemon or the explicit CLI command. */
 export declare function runWatchdogPass(opts: WatchdogPassOptions): Promise<WatchdogTickResult>;
+export {};

package/dist/lib/watchdog/service.js

@@ -11,7 +11,7 @@ export async function loadWatchdogSessions() {
     });
     return loaded.sessions;
 }
-export function runWatchdogMailboxGc(sessions) {
+function runWatchdogMailboxGc(sessions) {
     const activeBoxIds = new Set(sessions.map(mailboxIdForActiveSession).filter((id) => Boolean(id)));
     try {
         gcMailbox(activeBoxIds);

package/dist/lib/watchdog/watchdog-agent.d.ts

@@ -24,7 +24,7 @@ export type WatchdogAgentDecider = (candidates: WatchdogCandidate[]) => Promise<
  * `runTarget` is the resolved `agents run` target (a `watchdog` workflow or the
  * bare agent id).
  */
-export type WatchdogAgentRunner = (runTarget: string, prompt: string) => Promise<string>;
+type WatchdogAgentRunner = (runTarget: string, prompt: string) => Promise<string>;
 /**
  * The default agent decider. `agent` is the harness the built-in prompt runs as
  * (default 'claude'); `workflowCwd` is where a `watchdog` workflow override is
@@ -36,3 +36,4 @@ export declare function makeWatchdogAgentDecider(agent: string, opts?: {
     workflowCwd?: string;
     run?: WatchdogAgentRunner;
 }): WatchdogAgentDecider;
+export {};

package/dist/lib/watchdog/watchdog.d.ts

@@ -33,7 +33,7 @@ export type StallStatus = {
     kind: 'stalled';
     stalledForMs: number;
 };
-export interface ClassifyInput {
+interface ClassifyInput {
     lastActivityMs: number;
     nowMs: number;
     lastNudgeMs: number | null;
@@ -47,3 +47,4 @@ export declare const WATCHDOG_SYSTEM_PROMPT = "You are the watchdog for AI codin
 export declare function composePromptWithPlaybook(basePrompt: string, playbook: string): string;
 export declare function renderWatchdogPrompt(candidates: WatchdogCandidate[], playbook?: string): string;
 export declare function parseWatchdogResponse(stdout: string): Decision[];
+export {};

package/dist/lib/watchdog/watchdogTail.d.ts

@@ -1,5 +1,6 @@
-export interface TailSummary {
+interface TailSummary {
     lastUserMessage?: string;
     lastAssistantMessage?: string;
 }
 export declare function summarizeWatchdogTail(tailLines: string[], agentType: string | undefined): TailSummary;
+export {};

package/dist/lib/workflows-registry.d.ts

@@ -1,6 +1,6 @@
 import type { AgentId } from './types.js';
 /** A central workflow bundle: its synced name and the source dir holding WORKFLOW.md. */
-export interface WorkflowSource {
+interface WorkflowSource {
     name: string;
     path: string;
 }
@@ -8,7 +8,7 @@ export interface WorkflowSource {
  * The complete on-disk contract for one harness's workflows. Every operation
  * is expressed here so the engine below never branches on the agent id.
  */
-export interface WorkflowTarget {
+interface WorkflowTarget {
     /** Noun used in ownership errors, e.g. "Kimi skill", "Grok workflow". */
     readonly label: string;
     /**
@@ -69,3 +69,4 @@ export declare function removeWorkflowFromVersion(agent: AgentId, version: strin
  * (surfaced as `missing` at the name level, not here).
  */
 export declare function workflowContentMatches(agent: AgentId, versionHome: string, name: string, sourcePath: string): boolean;
+export {};

package/dist/lib/workflows.d.ts

@@ -115,7 +115,7 @@ export interface WorkflowFrontmatter {
     forEach?: ForEachSpec;
 }
 /** A workflow found during repo discovery. */
-export interface DiscoveredWorkflow {
+interface DiscoveredWorkflow {
     name: string;
     path: string;
     frontmatter: WorkflowFrontmatter;
@@ -184,7 +184,7 @@ export interface ForEachTeammate {
     keep_if?: 'majority' | 'all' | 'any';
 }
 /** Result of expanding a `for_each` spec: the teammates plus cap accounting. */
-export interface ForEachExpansion {
+interface ForEachExpansion {
     teammates: ForEachTeammate[];
     /** How many items the producer emitted (pre-cap). */
     producedCount: number;
@@ -240,10 +240,6 @@ export declare function resolveAllowedSubagents(available: string[], allowedAgen
     allowedStems: string[];
     missing: string[];
 };
-/** The Claude tool an orchestrator uses to dispatch subagents. Must stay in a
- *  workflow's `--tools` allowlist whenever the workflow ships dispatchable
- *  subagents, or the orchestrator has no way to reach them. */
-export declare const SUBAGENT_DISPATCH_TOOL = "Task";
 /**
  * Keep the subagent-dispatch tool (`Task`) in a `tools:`-restricted workflow's
  * allowlist when the workflow actually ships subagents to dispatch.
@@ -329,7 +325,7 @@ export declare function listPluginWorkflowDirs(cwd?: string, pluginName?: string
  */
 export declare function isBareWorkflowName(ref: string): boolean;
 /** Parsed `agents run` workflow reference (docs/07-entrypoints). */
-export interface ParsedWorkflowRef {
+interface ParsedWorkflowRef {
     /** Workflow directory name (WORKFLOW.md parent). */
     name: string;
     /**
@@ -404,3 +400,4 @@ export declare function iterWorkflowsCapableVersions(filter?: {
     agent: AgentId;
     version: string;
 }>;
+export {};

package/dist/lib/workflows.js

@@ -281,7 +281,7 @@ export function resolveAllowedSubagents(available, allowedAgents) {
 /** The Claude tool an orchestrator uses to dispatch subagents. Must stay in a
  *  workflow's `--tools` allowlist whenever the workflow ships dispatchable
  *  subagents, or the orchestrator has no way to reach them. */
-export const SUBAGENT_DISPATCH_TOOL = 'Task';
+const SUBAGENT_DISPATCH_TOOL = 'Task';
 /**
  * Keep the subagent-dispatch tool (`Task`) in a `tools:`-restricted workflow's
  * allowlist when the workflow actually ships subagents to dispatch.

package/dist/lib/worktree/held.d.ts

@@ -52,24 +52,6 @@ export interface HeldWorktree {
  * silently comparing against nothing.
  */
 export declare function resolveDefaultRef(repoRoot: string): Promise<string | null>;
-/**
- * Count commits with no patch-equivalent upstream. Returns -1 when the answer
- * cannot be established, which the classifier treats as `merge-state-unknown`.
- *
- * Patch-id (`git cherry`), NOT ancestry, is load-bearing: this fleet
- * rebase-merges, so a landed branch's SHAs are rewritten and
- * `merge-base --is-ancestor` reports *not merged* for work that fully landed.
- * It also subsumes the unpushed check — an unpushed commit has no upstream
- * equivalent, so it surfaces as unmerged rather than needing a separate probe.
- */
-export declare function countUnmergedCommits(worktreePath: string, defaultRef: string | null): Promise<number>;
-/** One `git worktree list --porcelain` record. */
-interface PorcelainEntry {
-    path: string;
-    branch: string | null;
-    detached: boolean;
-}
-export declare function parseWorktreePorcelain(out: string): PorcelainEntry[];
 /**
  * True when `child` is `parent` or sits beneath it, compared on path
  * boundaries. A raw `startsWith` makes `.../fix-1103` look like it is inside
@@ -77,7 +59,7 @@ export declare function parseWorktreePorcelain(out: string): PorcelainEntry[];
  */
 export declare function isInside(child: string, parent: string): boolean;
 /** Everything the bucket decision depends on, gathered once. */
-export interface HeldFacts {
+interface HeldFacts {
     /** null for detached HEAD. */
     branch: string | null;
     /** `git status --porcelain` line count; -1 = could not read. */
@@ -107,16 +89,10 @@ export declare function classifyHeld(facts: HeldFacts): {
  * a `.agents/worktrees` slug, so it is skipped implicitly.
  */
 export declare function collectHeldWorktrees(repoRoot: string): Promise<HeldWorktree[]>;
-/**
- * Discover repo roots that own a `.agents/worktrees` container beneath
- * `searchHome`. Mirrors the sweep's discovery: match directory SHAPE, prune the
- * heavy dirs so a large home stays fast. Read-only.
- */
-export declare function discoverWorktreeRepos(searchHome: string, maxDepth?: number): Promise<string[]>;
 /** Discover + classify every held worktree beneath `searchHome`. Read-only. */
 export declare function collectHeldWorktreesUnder(searchHome: string): Promise<HeldWorktree[]>;
 /** A held set grouped by bucket, with the itemised entries kept. */
-export interface HeldSummary {
+interface HeldSummary {
     total: number;
     buckets: Record<HeldBucket, HeldWorktree[]>;
 }
@@ -128,7 +104,7 @@ export interface DeviceHeld {
     held: HeldWorktree[];
 }
 /** A fleet-wide roll-up: every device's held worktrees, still bucketed. Pure. */
-export interface FleetHeldSummary extends HeldSummary {
+interface FleetHeldSummary extends HeldSummary {
     devices: {
         device: string;
         total: number;
@@ -142,7 +118,7 @@ export interface FleetHeldSummary extends HeldSummary {
  */
 export declare function aggregateHeld(perDevice: DeviceHeld[]): FleetHeldSummary;
 /** Outcome of the safe recovery action on one stranded worktree. */
-export interface PushResult {
+interface PushResult {
     name: string;
     branch: string | null;
     pushed: boolean;

package/dist/lib/worktree/held.js

@@ -66,7 +66,7 @@ export async function resolveDefaultRef(repoRoot) {
  * It also subsumes the unpushed check — an unpushed commit has no upstream
  * equivalent, so it surfaces as unmerged rather than needing a separate probe.
  */
-export async function countUnmergedCommits(worktreePath, defaultRef) {
+async function countUnmergedCommits(worktreePath, defaultRef) {
     if (!defaultRef)
         return -1;
     try {
@@ -79,7 +79,7 @@ export async function countUnmergedCommits(worktreePath, defaultRef) {
         return -1;
     }
 }
-export function parseWorktreePorcelain(out) {
+function parseWorktreePorcelain(out) {
     const entries = [];
     let cur = null;
     for (const line of out.split('\n')) {
@@ -244,7 +244,7 @@ export async function collectHeldWorktrees(repoRoot) {
  * `searchHome`. Mirrors the sweep's discovery: match directory SHAPE, prune the
  * heavy dirs so a large home stays fast. Read-only.
  */
-export async function discoverWorktreeRepos(searchHome, maxDepth = 7) {
+async function discoverWorktreeRepos(searchHome, maxDepth = 7) {
     const PRUNE = new Set([
         'node_modules', '.cache', '.npm', '.bun', 'Library', '.venv', 'dist', 'target', '.git',
     ]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phnx-labs/agents-cli",
-  "version": "1.22.113",
+  "version": "1.22.115",
   "description": "One CLI for all your AI coding agents - versions, config, cloud dispatch, sessions, and teams (now with first-class Grok Build CLI support)",
   "type": "module",
   "main": "dist/index.js",
@@ -16,8 +16,7 @@
   },
   "bin": {
     "agents": "dist/index.js",
-    "ag": "dist/index.js",
-    "browser": "dist/browser.js"
+    "ag": "dist/index.js"
   },
   "files": [
     "dist/**/*.js",
@@ -87,11 +86,9 @@
   "dependencies": {
     "@fontsource/inter": "^5.3.0",
     "@fontsource/jetbrains-mono": "^5.3.0",
-    "@homebridge/node-pty-prebuilt-multiarch": "0.14.1",
     "@inquirer/prompts": "8.5.2",
     "@resvg/resvg-wasm": "^2.6.2",
     "@types/proper-lockfile": "4.1.4",
-    "@xterm/headless": "6.0.0",
     "@zed-industries/agent-client-protocol": "0.4.5",
     "acorn": "8.18.0",
     "aws4fetch": "1.0.20",
@@ -115,6 +112,7 @@
     "yoga-wasm-web": "^0.3.3"
   },
   "devDependencies": {
+    "@homebridge/node-pty-prebuilt-multiarch": "0.14.1",
     "@types/diff": "8.0.0",
     "@types/marked-terminal": "6.1.1",
     "@types/node": "26.1.0",

package/scripts/postinstall.js

@@ -50,15 +50,16 @@ function shellQuote(value) {
 }
 
 // Shorthands that delegate to the installed agents-cli entrypoint.
-const ALIASES = ['browser', 'pty', 'teams'];
+const ALIASES = ['browser', 'teams'];
 
 // Aliases this script USED to write and must now remove on every install.
-// `secrets` (PHNX-3989) and `sessions` (PHNX-4012): those names belong to the
-// standalone CLIs. An alias shim that `exec`s `agents <name>` re-enters the
+// `secrets` (PHNX-3989), `sessions` (PHNX-4012), and `pty` (PHNX-4091): those
+// names belong to standalone CLIs now (`pty` -> `@phnx-labs/term-cli`'s
+// `term`). An alias shim that `exec`s `agents <name>` re-enters the
 // passthrough and shadows the real binary because the shims dir sits first on
 // PATH — the 1.22.85 fork bomb. Postinstall is the upgrade path that actually
 // runs, so it prunes here.
-const RETIRED_ALIASES = ['secrets', 'sessions'];
+const RETIRED_ALIASES = ['secrets', 'sessions', 'pty'];
 
 function removeRetiredAliasShims() {
   for (const name of RETIRED_ALIASES) {

package/dist/commands/artifacts-setup.d.ts

@@ -1,53 +0,0 @@
-/**
- * `agents artifacts setup` — configure the artifact share endpoint (Cloudflare
- * R2 + Worker) that backs `agents artifacts share`.
- *
- * One door, two modes, because it replaces two commands that used to be
- * separate (RUSH-2580): the interactive wizard formerly at `agents setup share`
- * and the flag-driven provisioner formerly at `agents share setup`. On a TTY
- * with no provisioning flags TYPED it runs the wizard (provision or join, and
- * offers a Worker update when an endpoint already exists); with any provisioning
- * flag typed, or on a non-TTY, it provisions directly. Both modes call the same
- * `runShareProvision` / `runShareJoin` in commands/share.ts, so there is a
- * single source of truth for provisioning.
- *
- * "Typed", not "present", is load-bearing — see {@link isDirectProvisionRequest}.
- *
- * Idempotent: re-running shows the current endpoint and offers to reconfigure.
- */
-import type { Command } from 'commander';
-/**
- * Interactive share setup. Returns true if the user configured (or already had)
- * an endpoint, false if they skipped. Never throws on user cancel — callers
- * (the `agents setup` hub) rely on that to keep the fresh-machine flow going.
- */
-export declare function runShareWizard(): Promise<boolean>;
-/** Parsed `agents artifacts setup` options — the retired `agents share setup` flag set. */
-interface ArtifactsSetupOpts {
-    bundle: string;
-    worker: string;
-    bucket: string;
-    account?: string;
-    token?: string;
-    domain?: string;
-    analyticsToken?: string;
-}
-/** The provisioning flags, by their commander option-value keys. */
-declare const PROVISION_FLAGS: readonly ["bundle", "worker", "bucket", "account", "token", "domain", "analyticsToken"];
-/**
- * True when the invocation named a Cloudflare endpoint detail, i.e. the caller
- * is driving the old `agents share setup` provisioning path rather than asking
- * for the wizard.
- *
- * `--bundle`/`--worker`/`--bucket` carry commander defaults, so their mere
- * PRESENCE proves nothing — the question is whether the user typed them, which
- * only `wasTyped` (backed by commander's `getOptionValueSource`) can answer.
- * Reading presence alone would classify `agents artifacts setup --bundle
- * cloudflare-work` as a wizard run and then silently provision against the
- * DEFAULT bundle, i.e. someone else's Cloudflare account. The other four flags
- * have no default, so presence is proof for them.
- */
-export declare function isDirectProvisionRequest(opts: ArtifactsSetupOpts, wasTyped?: (flag: (typeof PROVISION_FLAGS)[number]) => boolean): boolean;
-/** Register `agents artifacts setup` under the parent `artifacts` command. */
-export declare function registerArtifactsSetupCommand(artifactsCmd: Command): void;
-export {};

package/dist/commands/artifacts-setup.js

@@ -1,161 +0,0 @@
-/**
- * `agents artifacts setup` — configure the artifact share endpoint (Cloudflare
- * R2 + Worker) that backs `agents artifacts share`.
- *
- * One door, two modes, because it replaces two commands that used to be
- * separate (RUSH-2580): the interactive wizard formerly at `agents setup share`
- * and the flag-driven provisioner formerly at `agents share setup`. On a TTY
- * with no provisioning flags TYPED it runs the wizard (provision or join, and
- * offers a Worker update when an endpoint already exists); with any provisioning
- * flag typed, or on a non-TTY, it provisions directly. Both modes call the same
- * `runShareProvision` / `runShareJoin` in commands/share.ts, so there is a
- * single source of truth for provisioning.
- *
- * "Typed", not "present", is load-bearing — see {@link isDirectProvisionRequest}.
- *
- * Idempotent: re-running shows the current endpoint and offers to reconfigure.
- */
-import chalk from 'chalk';
-import { DEFAULT_BUCKET_NAME, DEFAULT_CF_BUNDLE, DEFAULT_SHARE_DOMAIN, DEFAULT_WORKER_NAME, readShareConfig, } from '../lib/share/config.js';
-import { runShareProvision, runShareJoin, runShareUpdate, shareTemplateStatus } from './share.js';
-import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
-/**
- * Interactive share setup. Returns true if the user configured (or already had)
- * an endpoint, false if they skipped. Never throws on user cancel — callers
- * (the `agents setup` hub) rely on that to keep the fresh-machine flow going.
- */
-export async function runShareWizard() {
-    if (!isInteractiveTerminal()) {
-        console.error(chalk.red('The artifact share wizard needs an interactive terminal. ' +
-            'Non-interactively, use `agents artifacts setup --account <id> --token <t>` (provision) ' +
-            'or `agents artifacts share join <baseUrl> --token <t>`.'));
-        return false;
-    }
-    const existing = readShareConfig();
-    if (existing) {
-        console.log(chalk.dim(`Share is already configured → ${chalk.green(existing.baseUrl)}`));
-        console.log(chalk.dim(`  worker ${existing.workerName} · bucket ${existing.bucketName} · account ${existing.accountId}`));
-        const templateStatus = shareTemplateStatus(existing);
-        console.log(chalk.dim(`  template ${templateStatus}`));
-        const { select } = await import('@inquirer/prompts');
-        const action = await select({
-            message: 'Share is already configured. What do you want to do?',
-            choices: [
-                { name: 'Keep as is', value: 'keep' },
-                {
-                    name: 'Update the deployed Worker to the latest template',
-                    value: 'update',
-                    description: templateStatus === 'current'
-                        ? 'Already current — this re-deploys anyway and refreshes the token in place.'
-                        : 'Re-deploys the Worker script on your existing endpoint (same account/worker/bucket, same write token).',
-                },
-                {
-                    name: 'Reconfigure from scratch (provision or join again)',
-                    value: 'reconfigure',
-                },
-            ],
-            default: templateStatus === 'outdated' || templateStatus === 'unknown' ? 'update' : 'keep',
-        });
-        if (action === 'keep') {
-            console.log(chalk.dim('Keeping the current endpoint.'));
-            return true;
-        }
-        if (action === 'update') {
-            // When the template is already current, the description below promises a
-            // re-deploy anyway — force it, or runShareUpdate's own no-op would silently
-            // contradict what was just said.
-            const result = await runShareUpdate({ force: templateStatus === 'current' });
-            console.log(result.updated
-                ? chalk.green(`Worker '${result.workerName}' updated → template ${result.templateHash.slice(0, 12)}…`)
-                : chalk.dim(`Worker '${result.workerName}' already matches the current template — no-op.`));
-            return true;
-        }
-        // action === 'reconfigure' — fall through to the provision/join flow below.
-    }
-    const { select } = await import('@inquirer/prompts');
-    const mode = await select({
-        message: 'How do you want to publish shared links?',
-        choices: [
-            {
-                name: 'Provision my own (Cloudflare R2 + Worker)',
-                value: 'provision',
-                description: 'One-time: creates a bucket + Worker on your Cloudflare account (~$0). Needs a Cloudflare API token.',
-            },
-            {
-                name: 'Join an existing endpoint (a teammate already provisioned one)',
-                value: 'join',
-                description: 'Use synced config when present, or paste the base URL + write token from the endpoint owner.',
-            },
-        ],
-    });
-    if (mode === 'provision') {
-        await runShareProvision({
-            bundle: DEFAULT_CF_BUNDLE,
-            worker: DEFAULT_WORKER_NAME,
-            bucket: DEFAULT_BUCKET_NAME,
-        });
-        return true;
-    }
-    const { input } = await import('@inquirer/prompts');
-    const baseUrl = await input({
-        message: 'Endpoint base URL (e.g. https://share.getrush.ai)',
-        validate: (v) => (v.trim().startsWith('http') ? true : 'Enter the full https:// URL of the endpoint.'),
-    });
-    await runShareJoin(baseUrl.trim());
-    return true;
-}
-/** The provisioning flags, by their commander option-value keys. */
-const PROVISION_FLAGS = ['bundle', 'worker', 'bucket', 'account', 'token', 'domain', 'analyticsToken'];
-/**
- * True when the invocation named a Cloudflare endpoint detail, i.e. the caller
- * is driving the old `agents share setup` provisioning path rather than asking
- * for the wizard.
- *
- * `--bundle`/`--worker`/`--bucket` carry commander defaults, so their mere
- * PRESENCE proves nothing — the question is whether the user typed them, which
- * only `wasTyped` (backed by commander's `getOptionValueSource`) can answer.
- * Reading presence alone would classify `agents artifacts setup --bundle
- * cloudflare-work` as a wizard run and then silently provision against the
- * DEFAULT bundle, i.e. someone else's Cloudflare account. The other four flags
- * have no default, so presence is proof for them.
- */
-export function isDirectProvisionRequest(opts, wasTyped = () => false) {
-    if (opts.account || opts.token || opts.domain || opts.analyticsToken)
-        return true;
-    return PROVISION_FLAGS.some((flag) => wasTyped(flag));
-}
-/** Register `agents artifacts setup` under the parent `artifacts` command. */
-export function registerArtifactsSetupCommand(artifactsCmd) {
-    artifactsCmd
-        .command('setup')
-        .description('Provision (or join) the Cloudflare R2 + Worker endpoint that backs `agents artifacts share`.')
-        .option('--bundle <name>', 'secrets bundle holding the Cloudflare API token', DEFAULT_CF_BUNDLE)
-        .option('--worker <name>', 'Worker name', DEFAULT_WORKER_NAME)
-        .option('--bucket <name>', 'R2 bucket name', DEFAULT_BUCKET_NAME)
-        .option('--account <id>', 'Cloudflare account id (else read from the bundle / prompt)')
-        .option('--token <t>', 'Cloudflare API token (else read from the --bundle)')
-        .option('--domain <host>', `custom domain to map (default: ${DEFAULT_SHARE_DOMAIN}; workers.dev if zone is not visible)`)
-        .option('--analytics-token <token>', 'Cloudflare Web Analytics token to inject into published HTML pages')
-        .action(async (opts, cmd) => {
-        try {
-            // Named endpoint details, or no terminal to prompt on, means provision
-            // directly — the wizard has nothing to ask that was not already given,
-            // and it would provision against its own hardcoded defaults, dropping
-            // whatever the caller named.
-            const wasTyped = (flag) => cmd.getOptionValueSource(flag) === 'cli';
-            if (isDirectProvisionRequest(opts, wasTyped) || !isInteractiveTerminal()) {
-                await runShareProvision(opts);
-                return;
-            }
-            await runShareWizard();
-        }
-        catch (err) {
-            if (isPromptCancelled(err)) {
-                console.log(chalk.yellow('\nCancelled'));
-                return;
-            }
-            console.error(chalk.red(err.message));
-            process.exitCode = 1;
-        }
-    });
-}

package/dist/commands/artifacts.d.ts

@@ -1,18 +0,0 @@
-/**
- * `agents artifacts` — the group that owns everything an agent publishes for a
- * human to open: HTML plans, reports, rendered visuals, screenshots.
- *
- * RUSH-2580 nested the former top-level `agents share` here. `artifacts` is the
- * noun, `share` is the action on it, so the surface reads noun-then-action like
- * the rest of the CLI:
- *
- *   agents artifacts share <file>          publish
- *   agents artifacts share list|delete|analytics|join|status|update
- *   agents artifacts setup                 provision (or join) the endpoint
- *
- * The subtree itself lives in commands/share.ts (publish + its subcommands) and
- * commands/artifacts-setup.ts (the provisioning door); this module only assembles
- * the group, so there is one place that says what `agents artifacts` contains.
- */
-import type { Command } from 'commander';
-export declare function registerArtifactsCommands(program: Command): void;