@phnx-labs/agents-cli 1.22.117 → 1.22.118

package/dist/lib/sessions-client.d.ts

@@ -7,7 +7,66 @@ export declare function invocation(bin: string): {
     command: string;
     prefix: string[];
 };
-export declare function isReadQuery(args: string[]): boolean;
+/** True if any 0.2.0-only filter flag is present — one case that needs the version probe. */
+export declare function usesFilterFlags(args: string[]): boolean;
+/**
+ * True if the 0.2.1 point-to-one remote read flag `--host <value>` (or `--host=value`)
+ * is present — the other case that needs the version probe, gated on its own floor.
+ */
+export declare function usesHostFlag(args: string[]): boolean;
+/**
+ * Whether the resolved `sessions` binary is at or above `minVersion`. A probe
+ * failure or an unparseable version reads as unsupported — the safe direction
+ * (in-repo engine handles it), never a mis-route to an old binary.
+ */
+export declare function sessionsBinSupports(bin: string, minVersion: string): boolean;
+/** Whether the resolved `sessions` binary is new enough for the 0.2.0 filters. */
+export declare function sessionsBinSupportsFilters(bin: string): boolean;
+/** Whether the resolved `sessions` binary is new enough for the 0.2.1 `--host` flag. */
+export declare function sessionsBinSupportsHost(bin: string): boolean;
+export declare function isReadQuery(args: string[], opts?: {
+    filters?: boolean;
+    host?: boolean;
+}): boolean;
+/**
+ * Plan the rewrite of a `sessions` READ query that names EXACTLY ONE device via
+ * `--device <name>` (and no explicit `--host`) into the standalone's
+ * point-to-one remote read: the caller resolves the device to an ssh target and
+ * appends `--host ssh://<target>` to `readArgs`, forwarding it to the LOCAL
+ * standalone (which owns the ssh hop). This is the local-orchestration collapse
+ * (secrets-cli model): `sessions` owns the remote read, replacing the in-repo
+ * `--device` peer fan-out — WHEN it is safe (the caller gates on the LOCAL
+ * standalone supporting `--host`, >=0.2.1, and falls through to the in-repo
+ * fan-out if the PEER lacks the standalone).
+ *
+ * `sessions --host` is point-to-one, so ONLY a single unambiguous device may
+ * collapse; a multi-device query MUST stay on the in-repo fan-out, which parses
+ * commander's variadic `--device` correctly. Returns null (→ in-repo path,
+ * unchanged) when the query is not a single-device read:
+ *   - no `--device`/`-D`, or a missing/flag-shaped value;
+ *   - `--device`/`-D` appears more than once (`--device box --device mac-mini`);
+ *   - the value is a fan-out sentinel `all`/`fleet` (case-insensitive);
+ *   - a bare token immediately follows the value (`--device box mac-mini`) —
+ *     commander's variadic would take it as a second device, so this is
+ *     multi-device too;
+ *   - an explicit `--host` is already on the argv — it wins, matching `secrets`'
+ *     `rewriteDeviceToHost`, so we never add a second `--host`;
+ *   - the remaining query (with `--device` stripped) is not a read — a lifecycle
+ *     `--device` (resume/watch/inject/focus/…) keeps its in-repo/`runOnPeer`
+ *     behavior exactly.
+ *
+ * Pure and argv-only: fleet resolution (device → ssh target, via
+ * `resolveRemoteDevice`) and the version gate live in the caller so this is unit
+ * testable with real inputs. `filters` mirrors the caller's version gate for the
+ * 0.2.0 filter flags (the `--device` token is not a filter flag, so it is
+ * computed identically on the original argv and on `readArgs`).
+ */
+export declare function planDeviceHostRead(args: string[], opts?: {
+    filters?: boolean;
+}): {
+    device: string;
+    readArgs: string[];
+} | null;
 /** Test seam: drop the memoized bin so PATH fixtures can re-resolve. */
 export declare function _resetSessionsClientForTest(): void;
 export declare const SESSIONS_INSTALL_HINT = "npm i -g @phnx-labs/sessions-cli";

package/dist/lib/sessions-client.js

@@ -12,8 +12,29 @@
  * `agents sessions`, and resolving it would recurse (the 1.22.85 secrets
  * fork bomb with the names swapped — agi-cli#3532).
  */
+import { spawnSync } from 'node:child_process';
 import { findInPath } from './agent-spec/agents.js';
+import { compareVersions } from './agent-spec/primitives.js';
+import { stripRoutingFlags } from './hosts/remote-cmd.js';
 const INSTALL_HINT = 'npm i -g @phnx-labs/sessions-cli';
+/**
+ * First `sessions` release that implements the metadata filters and sort
+ * (`-p/--project`, `--since`, `--until`, `--sort`, the `@version` agent suffix,
+ * and the harness shorthands). An older binary would treat these as FTS tokens,
+ * so a box with `sessions` < this floor keeps them on the in-repo engine (which
+ * implements the same filters) rather than mis-routing to a binary that can't.
+ */
+const SESSIONS_FILTERS_MIN_VERSION = '0.2.0';
+/**
+ * First `sessions` release that implements the point-to-one remote read flag
+ * `--host <target>` (SSH to ONE box, run `sessions … --local`, stream JSON back).
+ * An older binary would treat `--host` as an FTS token, so a box with `sessions`
+ * below this floor keeps a `--host` query on the in-repo engine (which resolves
+ * `--device` against the fleet) rather than mis-routing it. Kept separate from the
+ * filter floor above even though 0.2.1 ≥ 0.2.0 — a 0.2.0 binary supports the
+ * filters but NOT `--host`, so the two gates are checked independently.
+ */
+const SESSIONS_HOST_MIN_VERSION = '0.2.1';
 export class SessionsClientError extends Error {
     code;
     constructor(code, message) {
@@ -52,6 +73,83 @@ const READ_FLAGS = new Set([
     '--local',
     '--no-interactive',
 ]);
+/**
+ * Boolean harness-shorthand flags added in 0.2.0 (`--claude` = `--agent claude`).
+ * Recognized as read flags only when the resolved binary supports filters.
+ */
+const FILTER_BOOL_FLAGS = new Set([
+    '--claude',
+    '--codex',
+    '--kimi',
+    '--antigravity',
+    '--grok',
+    '--opencode',
+]);
+/**
+ * Value-taking filter flags added in 0.2.0 (each consumes the next argv token,
+ * or is written `--flag=value`). `--agent`/`--limit` are NOT here — they are the
+ * 0.1.x base set handled unconditionally below.
+ */
+const FILTER_VALUE_FLAGS = new Set([
+    '--project',
+    '--since',
+    '--until',
+    '--sort',
+]);
+/** True if any 0.2.0-only filter flag is present — one case that needs the version probe. */
+export function usesFilterFlags(args) {
+    return args.some((arg) => {
+        if (arg === '-p' || arg === '-a')
+            return true;
+        if (FILTER_BOOL_FLAGS.has(arg))
+            return true;
+        for (const vf of FILTER_VALUE_FLAGS) {
+            if (arg === vf || arg.startsWith(`${vf}=`))
+                return true;
+        }
+        return false;
+    });
+}
+/**
+ * True if the 0.2.1 point-to-one remote read flag `--host <value>` (or `--host=value`)
+ * is present — the other case that needs the version probe, gated on its own floor.
+ */
+export function usesHostFlag(args) {
+    return args.some((arg) => arg === '--host' || arg.startsWith('--host='));
+}
+let cachedProbedVersion;
+/**
+ * Probe `sessions --version` ONCE per process (cached), returning the parsed
+ * version string, or `null` when the probe fails or the output is unparseable.
+ * The single cache is what keeps the filter and host gates to one spawn between
+ * them, however many `sessionsBinSupports*` calls a query makes.
+ */
+function probeSessionsVersion(bin) {
+    if (cachedProbedVersion !== undefined)
+        return cachedProbedVersion;
+    const { command, prefix } = invocation(bin);
+    const res = spawnSync(command, [...prefix, '--version'], { encoding: 'utf8', timeout: 3000 });
+    const version = (res.stdout ?? '').trim();
+    cachedProbedVersion = !res.error && /^\d+\.\d+\.\d+/.test(version) ? version : null;
+    return cachedProbedVersion;
+}
+/**
+ * Whether the resolved `sessions` binary is at or above `minVersion`. A probe
+ * failure or an unparseable version reads as unsupported — the safe direction
+ * (in-repo engine handles it), never a mis-route to an old binary.
+ */
+export function sessionsBinSupports(bin, minVersion) {
+    const version = probeSessionsVersion(bin);
+    return version !== null && compareVersions(version, minVersion) >= 0;
+}
+/** Whether the resolved `sessions` binary is new enough for the 0.2.0 filters. */
+export function sessionsBinSupportsFilters(bin) {
+    return sessionsBinSupports(bin, SESSIONS_FILTERS_MIN_VERSION);
+}
+/** Whether the resolved `sessions` binary is new enough for the 0.2.1 `--host` flag. */
+export function sessionsBinSupportsHost(bin) {
+    return sessionsBinSupports(bin, SESSIONS_HOST_MIN_VERSION);
+}
 const ENGINE_VERBS = new Set([
     'resume',
     'detach',
@@ -76,19 +174,45 @@ const ENGINE_VERBS = new Set([
     'migrations',
     'export',
 ]);
-export function isReadQuery(args) {
+export function isReadQuery(args, opts = {}) {
     if (args.length === 0)
         return false;
+    // Base (0.1.x) value flags, always recognized; the 0.2.0 filter value flags
+    // join them only when the binary supports filters, and the 0.2.1 `--host`
+    // value flag only when the binary supports it (its own, higher floor).
+    const valueFlags = new Set(['--limit', '--agent']);
+    const boolFlags = new Set(READ_FLAGS);
+    if (opts.filters) {
+        for (const vf of FILTER_VALUE_FLAGS)
+            valueFlags.add(vf);
+        for (const bf of FILTER_BOOL_FLAGS)
+            boolFlags.add(bf);
+    }
+    if (opts.host)
+        valueFlags.add('--host');
     for (let i = 0; i < args.length; i++) {
         const arg = args[i];
-        if (arg === '--limit' || arg === '--agent') {
+        // `-a` (agent) and `-p` (project) are 0.2.0 short flags that take a value.
+        if (opts.filters && (arg === '-a' || arg === '-p')) {
             i += 1;
             continue;
         }
-        if (arg.startsWith('--limit=') || arg.startsWith('--agent='))
+        let matchedValue = false;
+        for (const vf of valueFlags) {
+            if (arg === vf) {
+                i += 1;
+                matchedValue = true;
+                break;
+            }
+            if (arg.startsWith(`${vf}=`)) {
+                matchedValue = true;
+                break;
+            }
+        }
+        if (matchedValue)
             continue;
         if (arg.startsWith('-')) {
-            if (!READ_FLAGS.has(arg))
+            if (!boolFlags.has(arg))
                 return false;
             continue;
         }
@@ -97,8 +221,107 @@ export function isReadQuery(args) {
     }
     return true;
 }
+/**
+ * Scan an argv for the `sessions` `--device`/`-D` flag, which commander defines
+ * as VARIADIC (`-D, --device <target...>`) — so it can appear more than once and
+ * a space-form value greedily consumes following bare tokens as extra devices.
+ * Returns how many times it occurs, the FIRST value, and the index of the last
+ * argv token that value occupies (the flag token itself for the `=`/glued forms,
+ * the following value token for the space form). Pure; no imports.
+ */
+function scanDeviceFlag(args) {
+    let count = 0;
+    let value;
+    let valueEndIndex;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        let matched = false;
+        let v;
+        let endIdx = i;
+        if (a === '--device' || a === '-D') {
+            matched = true;
+            v = args[i + 1];
+            endIdx = i + 1;
+        }
+        else if (a.startsWith('--device=')) {
+            matched = true;
+            v = a.slice('--device='.length);
+        }
+        else if (a.startsWith('-D=')) {
+            matched = true;
+            v = a.slice(3);
+        }
+        else if (/^-D.+/.test(a)) {
+            matched = true;
+            v = a.slice(2);
+        }
+        if (matched) {
+            count += 1;
+            if (count === 1) {
+                value = v;
+                valueEndIndex = endIdx;
+            }
+        }
+    }
+    return { count, value, valueEndIndex };
+}
+/**
+ * Plan the rewrite of a `sessions` READ query that names EXACTLY ONE device via
+ * `--device <name>` (and no explicit `--host`) into the standalone's
+ * point-to-one remote read: the caller resolves the device to an ssh target and
+ * appends `--host ssh://<target>` to `readArgs`, forwarding it to the LOCAL
+ * standalone (which owns the ssh hop). This is the local-orchestration collapse
+ * (secrets-cli model): `sessions` owns the remote read, replacing the in-repo
+ * `--device` peer fan-out — WHEN it is safe (the caller gates on the LOCAL
+ * standalone supporting `--host`, >=0.2.1, and falls through to the in-repo
+ * fan-out if the PEER lacks the standalone).
+ *
+ * `sessions --host` is point-to-one, so ONLY a single unambiguous device may
+ * collapse; a multi-device query MUST stay on the in-repo fan-out, which parses
+ * commander's variadic `--device` correctly. Returns null (→ in-repo path,
+ * unchanged) when the query is not a single-device read:
+ *   - no `--device`/`-D`, or a missing/flag-shaped value;
+ *   - `--device`/`-D` appears more than once (`--device box --device mac-mini`);
+ *   - the value is a fan-out sentinel `all`/`fleet` (case-insensitive);
+ *   - a bare token immediately follows the value (`--device box mac-mini`) —
+ *     commander's variadic would take it as a second device, so this is
+ *     multi-device too;
+ *   - an explicit `--host` is already on the argv — it wins, matching `secrets`'
+ *     `rewriteDeviceToHost`, so we never add a second `--host`;
+ *   - the remaining query (with `--device` stripped) is not a read — a lifecycle
+ *     `--device` (resume/watch/inject/focus/…) keeps its in-repo/`runOnPeer`
+ *     behavior exactly.
+ *
+ * Pure and argv-only: fleet resolution (device → ssh target, via
+ * `resolveRemoteDevice`) and the version gate live in the caller so this is unit
+ * testable with real inputs. `filters` mirrors the caller's version gate for the
+ * 0.2.0 filter flags (the `--device` token is not a filter flag, so it is
+ * computed identically on the original argv and on `readArgs`).
+ */
+export function planDeviceHostRead(args, opts = {}) {
+    const { count, value, valueEndIndex } = scanDeviceFlag(args);
+    // Exactly one occurrence, with a real (non-flag) value — else fall through.
+    if (count !== 1)
+        return null;
+    if (value === undefined || value === '' || value.startsWith('-'))
+        return null;
+    if (usesHostFlag(args))
+        return null;
+    const lower = value.toLowerCase();
+    if (lower === 'all' || lower === 'fleet')
+        return null;
+    // A bare token after the value is a second variadic device (multi-device).
+    const next = valueEndIndex !== undefined ? args[valueEndIndex + 1] : undefined;
+    if (next !== undefined && !next.startsWith('-'))
+        return null;
+    const readArgs = stripRoutingFlags(args, [{ long: 'device', short: 'D', takesValue: true }]);
+    if (!isReadQuery(readArgs, { filters: opts.filters }))
+        return null;
+    return { device: value, readArgs };
+}
 /** Test seam: drop the memoized bin so PATH fixtures can re-resolve. */
 export function _resetSessionsClientForTest() {
     cachedBin = undefined;
+    cachedProbedVersion = undefined;
 }
 export const SESSIONS_INSTALL_HINT = INSTALL_HINT;

package/dist/lib/setup-tool-status.js

@@ -5,7 +5,7 @@ import { getCacheDir, getDeviceMetaPath, getHelpersDir, getUserAgentsDir } from
 import { atomicWriteJsonSync, withFileLockAsync } from './fs-atomic.js';
 import { probeCapture } from './probe.js';
 import { invocation, isStandaloneComputer } from './computer-client.js';
-import { getSocketPath as browserSocketPath } from './browser/ipc.js';
+import { isStandaloneBrowser } from './browser-client.js';
 export const SETUP_TOOLS = ['browser', 'computer', 'secrets', 'term'];
 export function toolSetupCacheDir(options = {}) {
     return path.join(options.cacheDir ?? getCacheDir(), 'setup-tools');
@@ -15,8 +15,9 @@ function cachePath(tool, options) {
 }
 function setupInputs(tool) {
     const inputs = [path.join(getUserAgentsDir(), 'agents.yaml'), getDeviceMetaPath()];
+    // browser-cli's IPC socket (integration contract §4). computer's is the helper socket.
     if (tool === 'browser')
-        inputs.push(browserSocketPath());
+        inputs.push(path.join(getHelpersDir(), 'browser', 'browser.sock'));
     if (tool === 'computer')
         inputs.push(process.env.COMPUTER_HELPER_SOCKET || path.join(getHelpersDir(), 'computer.sock'));
     return inputs;
@@ -39,14 +40,8 @@ function binaryMetadata(tool) {
         const accept = (candidate) => {
             if (tool === 'computer')
                 return isStandaloneComputer(candidate);
-            if (tool === 'browser') {
-                try {
-                    return !fs.realpathSync(candidate).endsWith(path.join('dist', 'browser.js'));
-                }
-                catch {
-                    return false;
-                }
-            }
+            if (tool === 'browser')
+                return isStandaloneBrowser(candidate);
             return true;
         };
         let executable = explicit ? (accept(explicit) ? explicit : null) : findInPath(tool, { accept });

package/dist/lib/signin-badge.d.ts

@@ -37,8 +37,9 @@ export declare function loginSubcommand(agent: AgentId): string | null;
  *   personal device; this box is provisioned from the durable credential).
  * - Unnamed legacy homes use the same version-targeted command shape as
  *   doctor, so the hint never logs a different/default home in by accident.
- * - `unverified` emits nothing: the probe could not confirm state (e.g. a
- *   worker whose token lacks the usage scope), so there is nothing to repair.
+ * - `unverified` / `no_evidence` emit nothing: the probe could not confirm state
+ *   (codex/grok have no probe endpoint; a worker's token lacks the usage scope),
+ *   so there is nothing to repair.
  */
 export declare function fixFor(input: {
     agent: AgentId;

package/dist/lib/signin-badge.js

@@ -66,12 +66,15 @@ export function loginSubcommand(agent) {
  *   personal device; this box is provisioned from the durable credential).
  * - Unnamed legacy homes use the same version-targeted command shape as
  *   doctor, so the hint never logs a different/default home in by accident.
- * - `unverified` emits nothing: the probe could not confirm state (e.g. a
- *   worker whose token lacks the usage scope), so there is nothing to repair.
+ * - `unverified` / `no_evidence` emit nothing: the probe could not confirm state
+ *   (codex/grok have no probe endpoint; a worker's token lacks the usage scope),
+ *   so there is nothing to repair.
  */
 export function fixFor(input) {
     const { agent, verdict } = input;
-    if (verdict === 'live' || verdict === 'rate_limited' || verdict === 'unverified' || verdict === 'ready')
+    // `no_evidence` (credential present, nothing probed/run here yet) is benign like
+    // `unverified` — there is nothing to repair (PHNX-4116).
+    if (verdict === 'live' || verdict === 'rate_limited' || verdict === 'unverified' || verdict === 'no_evidence' || verdict === 'ready')
         return null;
     if (input.provisioning === 'per-device' || verdict === 'per-device') {
         return loginHint(agent);

package/dist/lib/smart-launch.js

@@ -98,7 +98,10 @@ export function formatNoHealthyDeviceError(pool, signals, agent) {
             reason = signal.headroom === 'loaded'
                 ? 'overloaded'
                 : signal.installed !== true || signal.signedIn !== true
-                    ? 'no ready harness account'
+                    // Surface the box's OWN reason (`runReady.reason`, e.g. "all
+                    // signed_out") when it gave one, rather than a bare "no ready harness
+                    // account" that leaves the operator guessing (PHNX-4116).
+                    ? `no ready harness account${signal.reason ? ` (${signal.reason})` : ''}`
                     : 'ineligible';
         }
         else if (signal?.timedOut) {

package/dist/lib/staleness/detectors/commands.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceDetector } from './types.js';
-export declare const commandsDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const commandsDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/detectors/hooks.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceDetector } from './types.js';
-export declare const hooksDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const hooksDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/detectors/mcp.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceDetector } from './types.js';
-export declare const mcpDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const mcpDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/detectors/permissions.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceDetector } from './types.js';
-export declare const permissionsDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const permissionsDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/detectors/plugins.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceDetector } from './types.js';
-export declare const pluginsDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const pluginsDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/detectors/rules.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceDetector } from './types.js';
-export declare const rulesDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const rulesDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/detectors/skills.d.ts

@@ -1,4 +1,4 @@
 import type { ResourceDetector } from './types.js';
 /** Exported for unit tests (RUSH-2320 #2). Production callers: list() below. */
 export declare function skillDirsMatch(src: string, dest: string): boolean;
-export declare const skillsDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const skillsDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/detectors/subagents.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceDetector } from './types.js';
-export declare const subagentsDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const subagentsDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/detectors/workflows.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceDetector } from './types.js';
-export declare const workflowsDetectors: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;
+export declare const workflowsDetectors: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceDetector>>;

package/dist/lib/staleness/writers/commands.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceWriter } from './types.js';
-export declare const commandsWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;
+export declare const commandsWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;

package/dist/lib/staleness/writers/hooks.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceWriter } from './types.js';
-export declare const hooksWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;
+export declare const hooksWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;

package/dist/lib/staleness/writers/mcp.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceWriter } from './types.js';
-export declare const mcpWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;
+export declare const mcpWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;

package/dist/lib/staleness/writers/permissions.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceWriter } from './types.js';
-export declare const permissionsWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;
+export declare const permissionsWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;

package/dist/lib/staleness/writers/plugins.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceWriter } from './types.js';
-export declare const pluginsWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;
+export declare const pluginsWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;

package/dist/lib/staleness/writers/rules.d.ts

@@ -3,4 +3,4 @@ export interface RulesSelection {
     /** Preset name to compose. Empty string falls through to `"default"` in the composer. */
     preset: string;
 }
-export declare const rulesWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<RulesSelection>>>;
+export declare const rulesWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<RulesSelection>>>;

package/dist/lib/staleness/writers/skills.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceWriter } from './types.js';
-export declare const skillsWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;
+export declare const skillsWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;

package/dist/lib/staleness/writers/sources.js

@@ -11,6 +11,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { getUserAgentsDir, getAgentsDir, getEnabledExtraRepos, getCommandsDir, getSkillsDir, getHooksDir } from '../../state.js';
 import { isSafeSegmentName, safeJoin } from '../../paths.js';
+import { AGENTS } from '../../agents.js';
 /** Trusted source bases for content-like kinds. Project layer excluded. */
 function trustedSourceBases() {
     return [
@@ -57,6 +58,10 @@ function pluginSupportsAgent(manifest, agent) {
 /** Every `plugins/<plugin>/skills` dir across trusted source bases, filtered to an optional plugin/agent scope. */
 export function pluginSkillDirs(options = {}) {
     const dirs = [];
+    // A harness that loads plugin skills natively gets no flattened copy and no
+    // plugin credit for a top-level skills/<name>: that copy is an orphan there.
+    if (options.agent && AGENTS[options.agent]?.nativePluginSkills)
+        return dirs;
     for (const base of trustedSourceBases()) {
         const pluginsDir = path.join(base.dir, 'plugins');
         let entries;

package/dist/lib/staleness/writers/subagents.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceWriter } from './types.js';
-export declare const subagentsWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;
+export declare const subagentsWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;

package/dist/lib/staleness/writers/workflows.d.ts

@@ -1,2 +1,2 @@
 import type { ResourceWriter } from './types.js';
-export declare const workflowsWriters: Partial<Record<"claude" | "codex" | "gemini" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;
+export declare const workflowsWriters: Partial<Record<"claude" | "codex" | "cursor" | "opencode" | "openclaw" | "copilot" | "amp" | "goose" | "antigravity" | "grok" | "kimi" | "droid" | "hermes" | "muse" | "warp", ResourceWriter<string[]>>>;

package/dist/lib/state.d.ts

@@ -427,8 +427,11 @@ export declare function withMetaLock<T>(fn: () => T): T;
  * never run inside the short, non-heartbeated lockfile window; the user repo
  * already pushes.
  *
- * Scoped tightly: only called when the central bytes actually changed, and never
- * from the daemon (see {@link isDaemonProcess}). A commit failure fails open —
+ * Scoped tightly: only called when the central bytes actually changed — from a
+ * CLI command and from the daemon alike, since no daemon tick commits the user
+ * repo any more (the shared-state exchange moved to SSH, PHNX-4116), so a
+ * daemon-side central write would otherwise sit dirty until the next CLI
+ * central edit. A commit failure fails open —
  * a concurrent daemon holding `index.lock`, a mid-rebase repo — leaving
  * agents.yaml dirty; the next successful central write commits it, and until
  * then a pull that would collide refuses rather than losing data. A config
@@ -489,8 +492,7 @@ export declare function updateMeta(updates: Partial<Meta> | ((meta: Meta) => Met
  * A CLI command that actually moved the fleet-shared central agents.yaml commits
  * it so the tree is never left dirty on that file at rest — the window that
  * trips `dirtyTreeRefusal` and wedges pulls fleet-wide (PHNX-3968). Gated on a
- * real byte change and never run in the daemon, whose publish tick owns central
- * commits. See {@link commitCentralConfig}.
+ * real byte change. See {@link commitCentralConfig}.
  */
 export declare function commitCentralConfigAfterWrite(centralChanged: boolean): void;
 /** Derive a filesystem-safe local clone path for a package source URL. */

package/dist/lib/state.js

@@ -864,17 +864,6 @@ function writeIfChanged(filePath, content) {
     atomicWriteFileSync(filePath, content);
     return true;
 }
-/**
- * True in the always-on daemon process (launched as `agents __daemon-run`,
- * see cli/src/index.ts). The daemon owns central git commits through
- * fleet-shared-repo-sync's publish tick, so a central write from inside the
- * daemon must NOT also commit here — that would race the publisher's own
- * add/commit/rebase/push on the same index. Every ordinary CLI invocation
- * returns false and commits its own central edit synchronously.
- */
-function isDaemonProcess() {
-    return process.argv[2] === '__daemon-run';
-}
 /**
  * Commit the central `agents.yaml` in the user repo, synchronously, so a CLI
  * config mutation never leaves the working tree dirty on that one shared-line
@@ -892,8 +881,11 @@ function isDaemonProcess() {
  * never run inside the short, non-heartbeated lockfile window; the user repo
  * already pushes.
  *
- * Scoped tightly: only called when the central bytes actually changed, and never
- * from the daemon (see {@link isDaemonProcess}). A commit failure fails open —
+ * Scoped tightly: only called when the central bytes actually changed — from a
+ * CLI command and from the daemon alike, since no daemon tick commits the user
+ * repo any more (the shared-state exchange moved to SSH, PHNX-4116), so a
+ * daemon-side central write would otherwise sit dirty until the next CLI
+ * central edit. A commit failure fails open —
  * a concurrent daemon holding `index.lock`, a mid-rebase repo — leaving
  * agents.yaml dirty; the next successful central write commits it, and until
  * then a pull that would collide refuses rather than losing data. A config
@@ -1685,13 +1677,11 @@ export function updateMeta(updates) {
  * A CLI command that actually moved the fleet-shared central agents.yaml commits
  * it so the tree is never left dirty on that file at rest — the window that
  * trips `dirtyTreeRefusal` and wedges pulls fleet-wide (PHNX-3968). Gated on a
- * real byte change and never run in the daemon, whose publish tick owns central
- * commits. See {@link commitCentralConfig}.
+ * real byte change. See {@link commitCentralConfig}.
  */
 export function commitCentralConfigAfterWrite(centralChanged) {
-    if (centralChanged && !isDaemonProcess()) {
+    if (centralChanged)
         commitCentralConfig(USER_AGENTS_DIR);
-    }
 }
 /** Derive a filesystem-safe local clone path for a package source URL. */
 export function getPackageLocalPath(source) {