@phnx-labs/agents-cli 1.22.113 → 1.22.115

package/dist/commands/sessions.js

@@ -64,12 +64,9 @@ import { registerSessionsResumeCommand } from './sessions-resume.js';
 import { registerSessionsForkCommand } from './fork.js';
 import { registerSessionsBookmarkCommand } from './sessions-bookmark.js';
 import { isBookmarked, listBookmarks } from '../lib/session/bookmarks.js';
-import { registerGoCommand } from './go.js';
 import { registerFocusCommand } from './focus.js';
-import { registerReconnectCommand } from './reconnect.js';
 import { registerDetachCommand } from './detach.js';
 import { registerSessionsStopCommand } from './sessions-stop.js';
-import { registerAttachCommand } from './attach.js';
 import { registerSessionsInjectCommand } from './sessions-inject.js';
 import { registerSessionsExportCommand } from './sessions-export.js';
 import { registerSessionsRenderCommand } from './sessions-render.js';
@@ -1087,7 +1084,7 @@ export function parseRemoteComputerSessionRows(stdout, machine) {
 /** Collect computer history from named peers, or every automatic peer when
  * hosts is omitted. Every peer is forced to JSON and receives the recursion
  * guard through the shared fleet transport. */
-export async function gatherRemoteComputerSessionRows(hosts) {
+async function gatherRemoteComputerSessionRows(hosts) {
     const hostSet = new Set(hosts ?? []);
     const forwarded = buildForwardedArgs(process.argv, hostSet);
     if (!forwarded.includes('--json'))
@@ -1552,7 +1549,7 @@ function useInteractiveBrowser(options) {
  * when this holds, an explicit `--device` scope is folded into the
  * browser (preview-rich, selectable) instead of the legacy per-host raw stream.
  */
-export function isBareBrowserListing(options, query) {
+function isBareBrowserListing(options, query) {
     return (useInteractiveBrowser(options) &&
         // A peer answering a fan-out must never open a TUI. It has no TTY either, so
         // this is the explicit half of a guard that otherwise rests on the implicit
@@ -1704,7 +1701,7 @@ function safeListJobsWithRuns() {
  * run record (`safeListJobsWithRuns`), so a command-only or never-ran routine —
  * which produces no `SessionMeta` — still resolves and drills down.
  */
-export async function selectRoutineTarget(sessions, routine, interactive) {
+async function selectRoutineTarget(sessions, routine, interactive) {
     const routineNames = [...new Set([
             ...sessions.map((session) => session.routineName).filter((name) => !!name),
             ...safeListJobsWithRuns(),
@@ -1747,7 +1744,7 @@ export function executionKind(meta) {
  * Reconcile a routine's canonical run records (`listRuns`, local disk) with the
  * indexed sessions for that routine (fleet-wide, keyed by `routineRunId`).
  */
-export function buildRoutineDrilldown(name, sessions) {
+function buildRoutineDrilldown(name, sessions) {
     const runs = listRuns(name);
     const forRoutine = sessions.filter((s) => s.routineName === name);
     const byRun = new Map();
@@ -2196,7 +2193,7 @@ export function toolOriginSessions(sessions, machine, originOnly) {
         ? sessions.filter((session) => (session.machine ?? machine) === machine)
         : sessions;
 }
-export function printToolProgramCount(envelope) {
+function printToolProgramCount(envelope) {
     const { totals } = envelope;
     const qualifier = envelope.coverage.complete ? '' : 'at least ';
     console.log(`${envelope.query.program}: ${qualifier}${totals.occurrences.toLocaleString()} static occurrence${totals.occurrences === 1 ? '' : 's'} `
@@ -2213,7 +2210,7 @@ export function toolSearchFleetSortError(sort, spansDevices) {
     return 'Tool search across devices supports only --sort recent; cost and duration are local-only.';
 }
 /** Compact grouped evidence for humans; JSON retains every bounded field. */
-export function printToolSearch(envelope) {
+function printToolSearch(envelope) {
     for (const session of envelope.sessions) {
         const machineName = session.machine
             ? truncate(sanitizeForTerminal(session.machine).replace(/\s+/g, ' '), 80)
@@ -3896,7 +3893,7 @@ function warnNoPeerTarget(machine, session) {
  * pick handler checks before trying to read or resume one.
  */
 export const LIVE_ROW_PREFIX = 'live:';
-export function isIdlessLiveRow(s) {
+function isIdlessLiveRow(s) {
     return s.id.startsWith(LIVE_ROW_PREFIX);
 }
 export async function handlePickedSession(picked) {
@@ -3937,7 +3934,7 @@ export async function handlePickedSession(picked) {
  * `agents sessions` picker and by `sessions resume`'s no-tab-backend path, which
  * would otherwise reach `resumeSessionInPlace` and be refused (RUSH-2022).
  */
-export async function resumeOnOwnerIfRemote(session) {
+async function resumeOnOwnerIfRemote(session) {
     const owner = sessionOwnerDevice(session);
     if (!owner)
         return false;
@@ -3963,7 +3960,7 @@ export async function resumeOnOwnerIfRemote(session) {
 export async function resumeSessionInPlace(session) {
     // This function is the LOCAL takeover, and every caller is responsible for
     // routing a peer-owned session before it gets here (the picker above,
-    // `agents sessions resume`, `sessions attach`). Reaching it with one anyway means a
+    // `agents sessions resume`). Reaching it with one anyway means a
     // caller skipped that step, so refuse rather than start the harness against
     // state this box does not have — the `fs.existsSync(session.cwd)` fallback
     // just below is exactly how that used to pass unnoticed, quietly swapping in
@@ -4681,7 +4678,7 @@ async function renderOneSession(query, mode, scope) {
  *
  * Pure + exported so the gate is unit-tested without driving discovery / SSH.
  */
-export function shouldFanOutForId(query, local) {
+function shouldFanOutForId(query, local) {
     if (local === true)
         return false;
     if (process.env[NO_FANOUT_ENV] === '1')
@@ -5105,7 +5102,7 @@ export async function resolveSessionMetadata(selector, scope, deps = { gatherRem
     }
     process.stdout.write(serializeResolvedSessionsJson([outcome.session]));
 }
-export async function resolveSessionAcrossFleet(query, mode, hosts, deps = { gatherRemoteList, runOnPeer }) {
+async function resolveSessionAcrossFleet(query, mode, hosts, deps = { gatherRemoteList, runOnPeer }) {
     const spinner = isInteractiveTerminal() ? interruptibleSpinner('Searching the fleet...').start() : null;
     let candidates = [];
     let deviceCount = 0;
@@ -5317,7 +5314,6 @@ export function registerSessionsCommands(program) {
         resume <id> --attach-only  attach only; never fork a copy
         resume                  multi-select history -> open tabs
         detach <id>             the other direction: interactive -> headless
-        (retired, still working for one release: sessions attach, sessions go, reconnect)
       - The interactive listing and every live-status flag fold in your other online machines automatically (live over SSH, no sync) — each row is labelled by host, this machine first. Use --local to skip the fan-out; single-id lookups stay local.
       - --all is not a device flag: it widens historical directory and time filters. Fleet collection is already the default. A status flag (--working/--idle/--waiting/--orphan/--crashed/--closed/--abandoned/--queued/--unknown) implies --active; combine status flags for a union.
       - --version <version> requires --agent and is equivalent to --agent <agent@version>.
@@ -5408,12 +5404,9 @@ export function registerSessionsCommands(program) {
     registerSessionsResumeCommand(sessionsCmd);
     registerSessionsForkCommand(sessionsCmd);
     registerSessionsBookmarkCommand(sessionsCmd);
-    registerGoCommand(sessionsCmd);
     registerFocusCommand(sessionsCmd);
-    registerReconnectCommand(sessionsCmd);
     registerDetachCommand(sessionsCmd);
     registerSessionsStopCommand(sessionsCmd);
-    registerAttachCommand(sessionsCmd);
     registerSessionsInjectCommand(sessionsCmd);
     registerSessionsExportCommand(sessionsCmd);
     registerSessionsRenderCommand(sessionsCmd);

package/dist/commands/setup-browser.js

@@ -7,6 +7,7 @@
  * Idempotent: re-running shows the current default profile and offers to change
  * the pinned browser or re-point the device default.
  */
+import { openSetupTerminal } from './setup-terminal.js';
 import chalk from 'chalk';
 import { setConfigValue } from '../lib/device-config.js';
 import { listInstalledBrowsers } from '../lib/browser/chrome.js';
@@ -14,6 +15,8 @@ import { DEFAULT_BROWSER_PROFILE_NAME, getAutoDetectedProfile, createProfile, fi
 import { DEFAULT_VIEWPORT } from '../lib/browser/devices.js';
 import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
 import { defaultBrowserChoice } from './setup-preferences.js';
+import { installSetupTool } from '../lib/setup-tool-install.js';
+import { refreshToolSetup } from '../lib/setup-tool-status.js';
 const INSTALL_HINT = 'Install one of: Google Chrome, Brave, Microsoft Edge, Chromium, Comet, or Arc, then re-run `agents setup browser`.\n' +
     '(This wizard picks a Chromium-family browser. An installed Firefox is not auto-picked here; its profiles are ' +
     'discovered from profiles.ini and selected with `agents browser use firefox-<name>`. Safari is not supported.)';
@@ -116,9 +119,22 @@ export function registerSetupBrowserCommand(setupCmd) {
     setupCmd
         .command('browser')
         .description('Set up `agents browser` — detect an installed browser and create the default profile.')
-        .action(async () => {
+        .option('--install-only', 'Install the standalone Browser CLI without changing profiles or starting a browser')
+        .option('--terminal [backend]', 'Open interactive setup in a detected or selected terminal')
+        .action(async (options) => {
         try {
-            await runBrowserWizard();
+            if (options.terminal !== undefined) {
+                await openSetupTerminal('browser', options.terminal, options.installOnly);
+                return;
+            }
+            if (options.installOnly) {
+                if (!(await installSetupTool('browser')))
+                    process.exitCode = 1;
+                return;
+            }
+            if (!(await runBrowserWizard()))
+                process.exitCode = 1;
+            await refreshToolSetup('browser');
         }
         catch (err) {
             if (isPromptCancelled(err)) {

package/dist/commands/setup-computer.js

@@ -8,12 +8,15 @@
  * this wizard chains them with the permission hand-holding a fresh machine needs.
  * Idempotent: re-running re-installs the current helper and re-checks trust.
  */
+import { openSetupTerminal } from './setup-terminal.js';
 import os from 'node:os';
-import { execFileSync, spawnSync } from 'node:child_process';
+import { execFileSync } from 'node:child_process';
 import chalk from 'chalk';
 import { installComputerHelperMacLocal, activateComputerHelperMacLocal, probeComputerTrust, } from './computer.js';
 import { resolveComputerBin, ComputerClientError } from '../lib/computer-client.js';
 import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
+import { installSetupTool } from '../lib/setup-tool-install.js';
+import { refreshToolSetup } from '../lib/setup-tool-status.js';
 const ACCESSIBILITY_PANE = 'x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility';
 const SCREEN_PANE = 'x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture';
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
@@ -43,9 +46,7 @@ export async function runComputerWizard() {
     catch (error) {
         if (!(error instanceof ComputerClientError) || error.code !== 'COMPUTER_BIN_MISSING')
             throw error;
-        console.log('Installing @phnx-labs/computer-cli@0.1.2…');
-        const installed = spawnSync('npm', ['install', '-g', '@phnx-labs/computer-cli@0.1.2'], { stdio: 'inherit' });
-        if (installed.status !== 0)
+        if (!(await installSetupTool('computer')))
             return false;
         try {
             resolveComputerBin();
@@ -136,9 +137,22 @@ export function registerSetupComputerCommand(setupCmd) {
     setupCmd
         .command('computer')
         .description('Set up `agents computer` (macOS) — install the signed helper and grant control permissions.')
-        .action(async () => {
+        .option('--install-only', 'Install the standalone Computer CLI without starting the helper or changing permissions')
+        .option('--terminal [backend]', 'Open interactive setup in a detected or selected terminal')
+        .action(async (options) => {
         try {
-            await runComputerWizard();
+            if (options.terminal !== undefined) {
+                await openSetupTerminal('computer', options.terminal, options.installOnly);
+                return;
+            }
+            if (options.installOnly) {
+                if (!(await installSetupTool('computer')))
+                    process.exitCode = 1;
+                return;
+            }
+            if (!(await runComputerWizard()))
+                process.exitCode = 1;
+            await refreshToolSetup('computer');
         }
         catch (err) {
             if (isPromptCancelled(err)) {

package/dist/commands/setup-mine.d.ts

@@ -9,12 +9,6 @@
  * Bare `agents setup mine` (no subcommand) runs the wizard.
  */
 import type { Command } from 'commander';
-/**
- * Interactive white-label setup. Returns true when a brand exists afterward,
- * false if the user backed out. Never throws on cancel — the `agents setup` hub
- * relies on that.
- */
-export declare function runMineWizard(): Promise<boolean>;
 /**
  * Register `agents setup mine` under the parent `setup` command.
  * Bare invocation runs the wizard; init/list/toggle/remove manage brands.

package/dist/commands/setup-mine.js

@@ -32,7 +32,7 @@ const DISABLEABLE_FEATURES = [
  * false if the user backed out. Never throws on cancel — the `agents setup` hub
  * relies on that.
  */
-export async function runMineWizard() {
+async function runMineWizard() {
     if (!isInteractiveTerminal()) {
         console.log(chalk.dim('Non-interactive shell. Create a brand directly, e.g.:\n') +
             chalk.cyan('  agents setup mine init jack --disable teams cloud'));

package/dist/commands/setup-secrets.js

@@ -7,6 +7,7 @@
  * `agents clis install secrets` (system `clis/secrets.yaml`) then a pinned
  * `npm i -g`. Users do not set extra env vars.
  */
+import { openSetupTerminal } from './setup-terminal.js';
 import chalk from 'chalk';
 import * as fs from 'fs';
 import * as path from 'path';
@@ -14,7 +15,12 @@ import { spawnSync } from 'node:child_process';
 import { getHistoryDir } from '../lib/state.js';
 import { resolveSecretsBin, invocation, SecretsClientError, _resetSecretsClientForTest } from '../lib/secrets-client.js';
 import { installCli, resolveCliManifest } from '../lib/cli-resources.js';
-export const SECRETS_CLI_PACKAGE = '@phnx-labs/secrets-cli@0.1.4';
+import { SECRETS_CLI_SPEC } from '../lib/secrets-cli.js';
+import { refreshToolSetup } from '../lib/setup-tool-status.js';
+import { execFileShellSpec } from '../lib/platform/exec.js';
+// Re-exported for back-compat; the canonical pin lives in `secrets-cli.ts` so a
+// version bump touches ONE place (PHNX-3989 consolidation).
+export const SECRETS_CLI_PACKAGE = SECRETS_CLI_SPEC;
 export const INSTALL_HINT = `agents clis install secrets   # or: npm i -g ${SECRETS_CLI_PACKAGE}`;
 export function setupSecretsPrefsPath() {
     return path.join(getHistoryDir(), 'setup', 'secrets.json');
@@ -56,7 +62,8 @@ export function installSecretsCli() {
             console.error(chalk.gray(result.error));
     }
     console.log(chalk.gray(`Installing ${SECRETS_CLI_PACKAGE}…`));
-    const r = spawnSync('npm', ['install', '-g', SECRETS_CLI_PACKAGE], { stdio: 'inherit' });
+    const npm = execFileShellSpec('npm', ['install', '-g', SECRETS_CLI_PACKAGE]);
+    const r = spawnSync(npm.command, npm.args, { stdio: 'inherit', shell: npm.shell });
     _resetSecretsClientForTest();
     if (r.error) {
         console.error(chalk.red(`npm install failed: ${r.error.message}`));
@@ -93,8 +100,21 @@ export function registerSetupSecretsCommand(setupCmd) {
     setupCmd
         .command('secrets')
         .description('Install the standalone `secrets` CLI if missing, then run its `secrets migrate` onboarding.')
-        .action(async () => {
-        if (!(await runSecretsSetupWizard()))
+        .option('--install-only', 'Install the standalone Secrets CLI without migrating or unlocking secrets')
+        .option('--terminal [backend]', 'Open interactive setup in a detected or selected terminal')
+        .action(async (options) => {
+        if (options.terminal !== undefined) {
+            try {
+                await openSetupTerminal('secrets', options.terminal, options.installOnly);
+            }
+            catch (error) {
+                console.error(error instanceof Error ? error.message : String(error));
+                process.exitCode = 1;
+            }
+            return;
+        }
+        if (!(options.installOnly ? installSecretsCli() : await runSecretsSetupWizard()))
             process.exitCode = 1;
+        await refreshToolSetup('secrets');
     });
 }

package/dist/commands/setup-terminal.d.ts

@@ -0,0 +1,3 @@
+import type { SetupTool } from '../lib/setup-tool-status.js';
+/** The GUI starts a terminal; the terminal child owns wizard completion. */
+export declare function openSetupTerminal(tool: SetupTool, terminal: boolean | string, installOnly?: boolean): Promise<void>;

package/dist/commands/setup-terminal.js

@@ -0,0 +1,22 @@
+import os from 'node:os';
+import { currentContext, openRunInTerminal, parseTerminalFlag } from '../lib/terminal/index.js';
+/** The GUI starts a terminal; the terminal child owns wizard completion. */
+export async function openSetupTerminal(tool, terminal, installOnly = false) {
+    if (installOnly)
+        throw new Error('--terminal and --install-only are separate setup modes.');
+    const parsed = parseTerminalFlag(terminal);
+    if (parsed.error)
+        throw new Error(parsed.error);
+    const { readActiveSessionsCache } = await import('../lib/session/session-cache.js');
+    const sessions = parsed.backend ? [] : (readActiveSessionsCache('local')?.sessions ?? []).map(({ host, lastActivityMs, startedAtMs }) => ({ host, lastActivityMs, startedAtMs }));
+    const result = await openRunInTerminal({
+        argv: ['setup', tool],
+        forced: parsed.backend,
+        cwd: os.homedir(),
+        sessions,
+        ctx: currentContext(),
+    });
+    if (!result.ok)
+        throw new Error(result.error ?? 'Could not open a terminal for setup.');
+    console.log(result.description ?? 'Setup opened in a terminal.');
+}

package/dist/commands/setup.d.ts

@@ -31,15 +31,14 @@ export declare function ensureInitialized(program: Command): Promise<void>;
  * wizard. Never throws — a cancel or an optional wizard's error just skips the
  * rest and lets core setup complete.
  */
-export type SetupPhase = 'browser' | 'computer' | 'share' | 'secrets' | 'accounts' | 'fleet' | 'watchdog' | 'preferences';
-export type SetupStatusState = 'ready' | 'missing' | 'n/a';
-export interface SetupStatusRow {
+type SetupPhase = 'browser' | 'computer' | 'secrets' | 'accounts' | 'fleet' | 'watchdog' | 'preferences';
+type SetupStatusState = 'ready' | 'missing' | 'n/a';
+interface SetupStatusRow {
     phase: 'core' | SetupPhase;
     state: SetupStatusState;
     detail: string;
 }
 export declare function getSetupStatus(): Promise<SetupStatusRow[]>;
-export declare function renderSetupStatus(rows: SetupStatusRow[]): void;
 export declare function runSetupHub(deps?: {
     interactive?: boolean;
     selectPhase?: (rows: SetupStatusRow[]) => Promise<SetupPhase | 'exit'>;

package/dist/commands/setup.js

@@ -20,7 +20,6 @@ import { ensureShimCurrent, switchHomeFileSymlinks, isShimsInPath, addShimsToPat
 import { setHelpSections } from '../lib/help.js';
 import { registerSetupBrowserCommand, runBrowserWizard } from './setup-browser.js';
 import { registerSetupComputerCommand, runComputerWizard } from './setup-computer.js';
-import { runShareWizard } from './artifacts-setup.js';
 import { registerSetupMineCommand } from './setup-mine.js';
 import { registerSetupSecretsCommand } from './setup-secrets.js';
 import { registerSetupFleetCommand } from './setup-fleet.js';
@@ -34,10 +33,10 @@ import { runPreferencesStep } from './setup-preferences.js';
 import { getConfiguredDefaultProfileName, getProfile, getAutoDetectedProfile, isProfileLaunchableHere } from '../lib/browser/profiles.js';
 import { listInstalledBrowsers } from '../lib/browser/chrome.js';
 import { probeComputerTrust } from './computer.js';
-import { readShareConfig } from '../lib/share/config.js';
 import { loadDevices } from '../lib/devices/registry.js';
 import { getConfigValue } from '../lib/device-config.js';
 import { setupSecretsPrefsPath } from './setup-secrets.js';
+import { SETUP_TOOLS, getCachedToolSetup, refreshToolSetup } from '../lib/setup-tool-status.js';
 const HOME = os.homedir();
 /**
  * Import an existing unmanaged agent installation into agents-cli.
@@ -280,7 +279,6 @@ export async function getSetupStatus() {
     const coreReady = isGitRepo(getAgentsDir());
     const secretsReady = fs.existsSync(setupSecretsPrefsPath());
     const minted = hasMintedSetupToken();
-    const shareConfig = readShareConfig();
     const watchdogEnabled = getConfigValue('watchdog.enabled').value === true;
     const interactiveHost = getConfigValue('interactive.host').value;
     const defaultBrowser = getConfigValue('browser.profile').value;
@@ -291,12 +289,11 @@ export async function getSetupStatus() {
         { phase: 'secrets', state: secretsReady ? 'ready' : 'missing', detail: secretsReady ? 'defaults chosen' : 'defaults not chosen' },
         { phase: 'accounts', state: minted.ready ? 'ready' : 'missing', detail: minted.detail },
         { phase: 'fleet', state: Object.keys(devices).length ? 'ready' : 'missing', detail: Object.keys(devices).length ? `${Object.keys(devices).length} device${Object.keys(devices).length === 1 ? '' : 's'} registered` : 'no devices registered' },
-        { phase: 'share', state: shareConfig ? 'ready' : 'missing', detail: shareConfig?.baseUrl ?? 'endpoint not configured' },
         { phase: 'watchdog', state: watchdogEnabled ? 'ready' : 'missing', detail: watchdogEnabled ? 'enabled on this device' : 'disabled on this device' },
         { phase: 'preferences', state: interactiveHost || defaultBrowser ? 'ready' : 'missing', detail: [interactiveHost && `host ${interactiveHost}`, defaultBrowser && `browser ${defaultBrowser}`].filter(Boolean).join(' · ') || 'interactive host and browser unset' },
     ];
 }
-export function renderSetupStatus(rows) {
+function renderSetupStatus(rows) {
     console.log(chalk.bold('\nagents setup — onboarding\n'));
     for (const row of rows) {
         const marker = row.state === 'ready' ? chalk.green('[x]') : row.state === 'n/a' ? chalk.gray('[-]') : chalk.yellow('[ ]');
@@ -309,8 +306,6 @@ async function runSetupPhase(phase) {
         await runBrowserWizard();
     else if (phase === 'computer')
         await runComputerWizard();
-    else if (phase === 'share')
-        await runShareWizard();
     else if (phase === 'secrets')
         await import('./setup-secrets.js').then((m) => m.runSecretsSetupWizard());
     else if (phase === 'accounts')
@@ -372,8 +367,8 @@ export function registerSetupCommand(program) {
         .option('-f, --force', 'Re-run setup even if ~/.agents/.system/ already exists (use with caution)')
         .option('--no-system-repo', 'Skip cloning the system repo (you must populate ~/.agents/.system/ yourself)');
     // Capability subcommands: `agents setup browser|computer|mine|secrets|accounts|fleet|alias|beta`.
-    // Share/artifact publishing is set up by `agents artifacts setup` (RUSH-2580);
-    // the hub below still offers it as a phase via runShareWizard.
+    // Artifact publishing is no longer set up here — it lives in the standalone
+    // `artifacts` CLI (`artifacts share setup`/`join`, PHNX-3992).
     registerSetupBrowserCommand(setupCmd);
     registerSetupComputerCommand(setupCmd);
     registerSetupMineCommand(setupCmd);
@@ -404,9 +399,25 @@ export function registerSetupCommand(program) {
     `,
     });
     setupCmd.command('status')
-        .description('Show setup readiness for core, browser, computer, secrets, accounts, fleet, share, watchdog, and preferences.')
+        .description('Show setup readiness for core, browser, computer, secrets, accounts, fleet, watchdog, and preferences.')
         .option('--json', 'print machine-readable JSON')
+        .option('--tool <name>', 'Read cached standalone tool status: browser, computer, secrets, or all')
+        .option('--refresh', 'Explicitly refresh only the selected standalone tool health checks')
         .action(async (options) => {
+        if (options.tool || options.refresh) {
+            const selected = options.tool ?? 'all';
+            if (selected !== 'all' && !SETUP_TOOLS.includes(selected))
+                throw new Error('Unknown tool. Choose browser, computer, secrets, or all.');
+            const rows = options.refresh
+                ? await refreshToolSetup(selected)
+                : getCachedToolSetup().filter((row) => selected === 'all' || row.tool === selected);
+            if (options.json)
+                console.log(JSON.stringify(rows));
+            else
+                for (const row of rows)
+                    console.log(`${row.tool}: ${row.installed === false ? 'not installed' : row.readiness} · ${row.detail}`);
+            return;
+        }
         const rows = await getSetupStatus();
         if (options.json)
             console.log(JSON.stringify(rows, null, 2));
@@ -443,7 +454,6 @@ export function registerSetupCommand(program) {
       Capability setup can also be run any time on its own:
         agents setup browser    # detect a browser + create the default profile
         agents setup computer    # install the signed macOS helper + grant permissions
-        agents artifacts setup   # provision or join a Cloudflare share endpoint
         agents setup secrets     # choose secrets backend/policy defaults + import
         agents setup accounts    # mint a Claude setup-token for unattended usage/probe
         agents setup fleet       # discover Tailscale devices + configure SSH access

package/dist/commands/skills.js

@@ -511,14 +511,6 @@ Examples:
         const output = lines.join('\n');
         printWithPager(output, lines.length);
     });
-    // Deprecated alias for 'view'
-    skillsCmd
-        .command('info [name]', { hidden: true })
-        .action(async (name) => {
-        console.log(chalk.yellow('Deprecated: Use "agents skills view" instead of "agents skills info"\n'));
-        // Re-execute view command logic
-        await skillsCmd.commands.find((c) => c.name() === 'view')?.parseAsync(['view', ...(name ? [name] : [])], { from: 'user' });
-    });
 }
 /**
  * Build the row data for `agents skills list`. Each row = one central skill

package/dist/commands/ssh.d.ts

@@ -83,5 +83,11 @@ export interface HarnessInventoryOpts {
  */
 export declare function collectFleetHarnesses(opts: HarnessInventoryOpts): Promise<HostHarnessResult[]>;
 export declare function runDevicesAccounts(opts: HarnessInventoryOpts): Promise<void>;
+/**
+ * Parse `--argv`'s JSON array, or report exactly what was wrong and return
+ * undefined. Fails loud rather than coercing: a caller that meant to pass argv
+ * and typo'd the JSON must not silently get shell-string semantics instead.
+ */
+export declare function parseArgvJson(raw: string, log?: (line: string) => void): string[] | undefined;
 /** Register both `agents ssh` and `agents devices`. */
 export declare function registerSshCommands(program: Command): void;