@phnx-labs/agents-cli 1.22.119 → 1.22.121

package/dist/lib/cloud/rush.js

@@ -1,9 +1,3 @@
-/**
- * Rush Cloud provider -- dispatches tasks to the Factory Floor via api.prix.dev.
- *
- * Auth: reads the session token from ~/.rush/user.yaml (written by `rush login`).
- * Requires the Rush GitHub App installed on the target repo.
- */
 import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
@@ -17,13 +11,6 @@ import { getAccountInfo } from '../agents.js';
 import { selectBalancedVersion } from '../accounting/rotate.js';
 const PROXY_BASE = process.env.RUSH_PROXY_BASE ?? 'https://api.prix.dev';
 const USER_YAML = path.join(os.homedir(), '.rush', 'user.yaml');
-/**
- * Returns true when ~/.rush/user.yaml exists, carries an access_token, and
- * the token has not passed its expires_at timestamp (Unix milliseconds). A missing
- * expires_at, or `expires_at: 0` (a non-expiring Phoenix `pid_` bearer), is
- * treated as non-expired (see isRushSessionExpired, PHNX-3645). Pass yamlPath
- * to override the default path in tests.
- */
 export function isRushSessionValid(yamlPath = USER_YAML) {
     try {
         if (!fs.existsSync(yamlPath))
@@ -40,12 +27,6 @@ export function isRushSessionValid(yamlPath = USER_YAML) {
         return false;
     }
 }
-/**
- * Read the Rush session access token from ~/.rush/user.yaml. Exported (with an
- * overridable yamlPath, like isRushSessionValid) so the freshness behavior —
- * including the `expires_at: 0` non-expiring case (PHNX-3645) — is directly
- * testable; the class methods call it with the default path.
- */
 export function readToken(yamlPath = USER_YAML) {
     if (!fs.existsSync(yamlPath)) {
         throw new Error('Not logged in to Rush. Run `rush login` first.');
@@ -63,7 +44,6 @@ export function readToken(yamlPath = USER_YAML) {
     }
     return token;
 }
-/** Read the user's email from the Rush session config, if available. */
 function readEmail() {
     try {
         const raw = fs.readFileSync(USER_YAML, 'utf-8');
@@ -74,7 +54,6 @@ function readEmail() {
         return undefined;
     }
 }
-/** Make an authenticated request to the Rush API proxy. */
 async function api(method, endpoint, token, body) {
     const url = endpoint.startsWith('http') ? endpoint : `${PROXY_BASE}${endpoint}`;
     const headers = {
@@ -87,7 +66,6 @@ async function api(method, endpoint, token, body) {
         body: body ? JSON.stringify(body) : undefined,
     });
 }
-/** Find the GitHub App installation ID for a given owner/repo pair. */
 async function findInstallation(token, owner, repo) {
     const res = await api('GET', '/api/v1/github/app/installations', token);
     if (!res.ok) {
@@ -105,15 +83,9 @@ async function findInstallation(token, owner, repo) {
     }
     throw new Error(`No GitHub App installation found for ${owner}/${repo}. Install the Rush GitHub App at https://github.com/apps/cloud-bot.`);
 }
-/** sha256 → hex. */
 function sha256(input) {
     return crypto.createHash('sha256').update(input).digest('hex');
 }
-/**
- * Strip tokens/credentials from a server error body before surfacing it.
- * If the body is JSON with a `message` or `error` field, prefer that.
- * Otherwise truncate and redact anything that looks like a bearer token or JWT.
- */
 function sanitizeErrorBody(body) {
     const MAX_LEN = 300;
     try {
@@ -122,7 +94,7 @@ function sanitizeErrorBody(body) {
         if (typeof msg === 'string')
             return msg.slice(0, MAX_LEN);
     }
-    catch { /* not JSON, fall through */ }
+    catch { }
     let safe = body.slice(0, MAX_LEN);
     safe = safe.replace(/eyJ[A-Za-z0-9_-]{20,}/g, '[REDACTED_TOKEN]');
     safe = safe.replace(/Bearer\s+\S+/gi, 'Bearer [REDACTED]');
@@ -131,11 +103,6 @@ function sanitizeErrorBody(body) {
         safe += '...';
     return safe;
 }
-/**
- * Pull `prompt_code` out of a JSON-encoded error body. Returns null when the
- * body isn't JSON or doesn't carry one — caller falls through to the generic
- * dispatch-failed path.
- */
 function parsePromptCode(body) {
     try {
         const parsed = JSON.parse(body);
@@ -145,19 +112,9 @@ function parsePromptCode(body) {
         return null;
     }
 }
-/**
- * Build a manifest of the user's local Claude installations to send on every
- * cloud dispatch. The manifest is the contract the server uses to detect when
- * the user has added a new account or rotated a token.
- *
- * Returns null when no Claude versions are signed in (the dispatch falls back
- * to the platform-wide key, current behavior).
- */
 async function buildAccountManifest(strategy) {
     let candidateVersions;
     if (strategy === 'balanced') {
-        // Use the same health-checked, deduped-by-email set that `agents run --balanced` uses.
-        // `result.healthy` contains one candidate per unique email, ordered by remaining capacity.
         const result = await selectBalancedVersion('claude');
         if (!result || result.healthy.length === 0)
             return null;
@@ -166,7 +123,6 @@ async function buildAccountManifest(strategy) {
             .map((c) => ({ version: c.version, email: c.email }));
     }
     else {
-        // Default: all installed versions that have a signed-in account.
         const versions = listInstalledVersions('claude');
         if (versions.length === 0)
             return null;
@@ -177,11 +133,6 @@ async function buildAccountManifest(strategy) {
         }));
         candidateVersions = rows.filter((r) => r !== null);
     }
-    // RUSH-2527 / SING-1b: do NOT read the native OAuth login to fingerprint it.
-    // The manifest carries version + account email only — enough for the server to
-    // route to an account. If the server needs the token itself, the client does NOT
-    // upload it (there is no consented path to copy a native OAuth login to the
-    // cloud); dispatch fails loud and steers to a portable provider account.
     const entries = candidateVersions
         .map(({ version, email }) => ({ version, email }))
         .sort((a, b) => a.version.localeCompare(b.version));
@@ -190,17 +141,6 @@ async function buildAccountManifest(strategy) {
     const fp = sha256(JSON.stringify(entries));
     return { fp, versions: entries };
 }
-// buildAccountTokensPayload / accountTokensFingerprint (which read every installed
-// Claude version's native OAuth token to upload it to the cloud) were REMOVED —
-// SING-1b forbids reading or transferring a native OAuth / session login, even
-// with consent. Cloud dispatch under a native login now fails loud and steers to a
-// portable provider account (see the 401 handler in dispatch()).
-/**
- * Build the POST body for /api/v1/cloud-runs. Exported so tests can verify
- * the back-compat shape (singular fields + repos[]) without needing real
- * GitHub installations or a live Rush session. `findInstallation` is the
- * only other I/O and it's tested by the cloud proxy integration suite.
- */
 export function buildDispatchBody(input) {
     if (input.resolvedRepos.length === 0) {
         throw new Error('buildDispatchBody: resolvedRepos must have at least one entry');
@@ -254,11 +194,6 @@ export class RushCloudProvider {
         if (repos.length === 0) {
             throw new Error('Rush Cloud requires --repo <owner/repo> (or --repo repeated for multi-repo).');
         }
-        // Budget pre-flight gate (issue #346). Cloud dispatches inherit the local
-        // project's caps; we refuse to POST a run that would breach an on_exceed:block
-        // cap. The repo slug is the project attribution key. Server-side spend is
-        // authoritative for live enforcement; this pre-flight is the deterministic
-        // "don't even start it" guard. Dormant when no caps are configured.
         {
             const { runPreflightGate } = await import('../budget/preflight.js');
             const projectKey = repos[0] ?? process.cwd();
@@ -272,9 +207,6 @@ export class RushCloudProvider {
                 throw new Error(`[budget] BLOCKED cloud dispatch (${projectKey}): ${gate.decision.reason}`);
             }
         }
-        // Validate each repo's shape and resolve its installation_id up front.
-        // Any bad entry fails the whole dispatch — we never want a half-started
-        // multi-repo run that only found installations for some of the repos.
         const token = readToken();
         const parsed = repos.map((full) => {
             const parts = full.split('/');
@@ -289,9 +221,6 @@ export class RushCloudProvider {
             repo_name: r.name,
         })));
         const strategy = options.providerOptions?.strategy;
-        // When balanced, the server owns the pool and rotates internally — no
-        // client-side manifest needed. We just forward the strategy so the server
-        // knows to load from Vault instead of waiting for a manifest.
         const accountManifest = strategy === 'balanced' ? null : await buildAccountManifest();
         const body = buildDispatchBody({
             agent: options.agent,
@@ -305,12 +234,6 @@ export class RushCloudProvider {
             env: options.env,
         });
         let res = await api('POST', '/api/v1/cloud-runs', token, body);
-        // The server asks the client to upload the underlying Claude OAuth token when
-        // it detects a new account or a rotation (401 + prompt_code). agents-cli NEVER
-        // reads or transfers a native OAuth / session login off this machine — not
-        // even with consent (SING-1b): a rotating token copied to the cloud is
-        // invalidated on its next refresh and logs the fleet out. Fail loud and steer
-        // to a portable provider account instead of exfiltrating the login.
         if (res.status === 401 && accountManifest) {
             const errBody = await res.clone().text();
             const promptCode = parsePromptCode(errBody);
@@ -405,10 +328,6 @@ export class RushCloudProvider {
     }
     async cancel(taskId) {
         const token = readToken();
-        // The cancel ACTION endpoint (POST .../cancel) is what the backend implements;
-        // it works on paused runs too (queued / needs_review / input_required). A bare
-        // DELETE on the run 404s, so `agents cloud cancel` silently failed on anything
-        // that wasn't actively running.
         const res = await api('POST', `/api/v1/cloud-runs/${encodeURIComponent(taskId)}/cancel`, token);
         if (!res.ok) {
             throw new Error(`Failed to cancel task (${res.status}).`);

package/dist/lib/cloud/session-index.d.ts

@@ -1,33 +1,6 @@
-/**
- * Register cloud-dispatched tasks into the LOCAL session index, keyed by the
- * real execution id, so a launch is mappable to a session immediately.
- *
- * The cloud store (`tasks.db`) and the session index (`sessions` table) were two
- * disjoint stores: a `agents cloud run` wrote only the store, and the session
- * index learned about the run only later, via `discoverCloudSessions` hitting the
- * proxy. Until that discovery ran there was no launch→session mapping at all —
- * the run was orphaned in `agents sessions` exactly like the non-Claude host runs.
- *
- * This mirrors hosts/session-index.ts: the transcript is remote (fetched on
- * demand by session/cloud.ts), so the row is registered with an EMPTY `file_path`
- * — the sentinel db.js's stale-row filter treats as "always live" — and a
- * `[cloud/<status>]` label. The row is written at dispatch and refreshed on every
- * status poll so the label tracks the task's lifecycle. Non-session-agent cloud
- * providers (a task whose agent has no transcript format) are skipped: there is
- * nothing to resolve or resume by id.
- */
 import type { CloudTask } from './types.js';
-/** Context a cloud task needs to become a session row — the LOCAL dir it was launched from. */
 interface CloudSessionContext {
-    /** Local directory `agents cloud run` was invoked from. Defaults to process.cwd(). */
     cwd?: string;
 }
-/**
- * Register (or refresh) a cloud task in the local session index. No-op when the
- * task's agent isn't a known session agent, or its id isn't a usable execution id
- * (never a fabricated `codex-<ts>` — codex.ts fails loud instead of minting one,
- * but guard here too so a bad id can never seed a bogus row). Best-effort: a
- * failed index write must never break the dispatch/poll it rides on.
- */
 export declare function registerCloudSession(task: CloudTask, ctx?: CloudSessionContext): void;
 export {};

package/dist/lib/cloud/session-index.js

@@ -1,33 +1,7 @@
-/**
- * Register cloud-dispatched tasks into the LOCAL session index, keyed by the
- * real execution id, so a launch is mappable to a session immediately.
- *
- * The cloud store (`tasks.db`) and the session index (`sessions` table) were two
- * disjoint stores: a `agents cloud run` wrote only the store, and the session
- * index learned about the run only later, via `discoverCloudSessions` hitting the
- * proxy. Until that discovery ran there was no launch→session mapping at all —
- * the run was orphaned in `agents sessions` exactly like the non-Claude host runs.
- *
- * This mirrors hosts/session-index.ts: the transcript is remote (fetched on
- * demand by session/cloud.ts), so the row is registered with an EMPTY `file_path`
- * — the sentinel db.js's stale-row filter treats as "always live" — and a
- * `[cloud/<status>]` label. The row is written at dispatch and refreshed on every
- * status poll so the label tracks the task's lifecycle. Non-session-agent cloud
- * providers (a task whose agent has no transcript format) are skipped: there is
- * nothing to resolve or resume by id.
- */
 import { upsertSession } from '../session/db.js';
-import { isSessionTrackedAgent } from '../session/types.js';
+import { isSessionTrackedAgent } from '@phnx-labs/sessions-cli/reader';
 import { deriveShortId } from '../session/short-id.js';
-/** The execution-id charset the session index will accept as a row id. */
 const EXECUTION_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,255}$/;
-/**
- * Register (or refresh) a cloud task in the local session index. No-op when the
- * task's agent isn't a known session agent, or its id isn't a usable execution id
- * (never a fabricated `codex-<ts>` — codex.ts fails loud instead of minting one,
- * but guard here too so a bad id can never seed a bogus row). Best-effort: a
- * failed index write must never break the dispatch/poll it rides on.
- */
 export function registerCloudSession(task, ctx = {}) {
     if (!task.agent || !isSessionTrackedAgent(task.agent))
         return;
@@ -42,17 +16,12 @@ export function registerCloudSession(task, ctx = {}) {
             lastActivity: task.updatedAt,
             cwd: ctx.cwd ?? process.cwd(),
             project: task.repo ?? task.repos?.[0],
-            // Remote transcript — no local file yet. Empty file_path is the sentinel
-            // the DB stale-filter treats as "always live" (see hosts/session-index.ts).
             filePath: '',
             topic: task.prompt.split('\n')[0]?.slice(0, 120) || undefined,
-            // Mirrors session/cloud.ts's discovered label, so the dispatch-time row and
-            // a later proxy-discovered row read the same in `agents sessions`.
             label: `[cloud/${task.status}]${task.branch ? ` ${task.branch}` : ''}`,
             prUrl: task.prUrl,
         }, '');
     }
     catch {
-        /* index write is best-effort; the task is already persisted in the cloud store */
     }
 }

package/dist/lib/cloud/store.d.ts

@@ -1,29 +1,11 @@
-/**
- * Local SQLite persistence for cloud-dispatched tasks.
- *
- * Every dispatch, status poll, and list query flows through this module so
- * that task history survives across CLI invocations without hitting the
- * remote provider each time.
- */
 import type { CloudTask, CloudProviderId, CloudTaskStatus } from './types.js';
-/**
- * Release the tasks.db connection so the file (and its WAL sidecars) can be
- * removed. The mirror of `closeDB()` in `../session/db.ts`, which this module
- * had no counterpart for — on Windows an open handle makes the file
- * un-unlinkable, so anything tearing down a temp home must close this too.
- */
 export declare function closeStore(): void;
-/** Persist a task snapshot, replacing any existing row with the same ID. */
 export declare function insertTask(task: CloudTask): void;
-/** Update a task's status and optionally patch summary, PR URL, or branch. */
 export declare function updateTaskStatus(id: string, status: CloudTaskStatus, extra?: Partial<Pick<CloudTask, 'summary' | 'prUrl' | 'branch'>>): void;
-/** Fetch a single task by its provider-assigned ID, or null if not found locally. */
 export declare function getTaskById(id: string): CloudTask | null;
-/** List tasks with optional provider/status filters, ordered newest-first. */
 export declare function listTasks(filter?: {
     provider?: CloudProviderId;
     status?: CloudTaskStatus;
     limit?: number;
 }): CloudTask[];
-/** Return tasks still in a transient state (queued, allocating, running, input_required). */
 export declare function listActiveTasks(): CloudTask[];

package/dist/lib/cloud/store.js

@@ -1,10 +1,3 @@
-/**
- * Local SQLite persistence for cloud-dispatched tasks.
- *
- * Every dispatch, status poll, and list query flows through this module so
- * that task history survives across CLI invocations without hitting the
- * remote provider each time.
- */
 import * as fs from 'fs';
 import * as path from 'path';
 import Database from '../sqlite.js';
@@ -32,7 +25,6 @@ CREATE INDEX IF NOT EXISTS idx_tasks_status ON tasks(status);
 CREATE INDEX IF NOT EXISTS idx_tasks_created ON tasks(created_at DESC);
 `;
 let _db = null;
-/** Lazy-initialize the SQLite connection, creating the database and schema on first access. */
 function db() {
     if (_db)
         return _db;
@@ -42,31 +34,19 @@ function db() {
     _db.exec(SCHEMA);
     return _db;
 }
-/**
- * Release the tasks.db connection so the file (and its WAL sidecars) can be
- * removed. The mirror of `closeDB()` in `../session/db.ts`, which this module
- * had no counterpart for — on Windows an open handle makes the file
- * un-unlinkable, so anything tearing down a temp home must close this too.
- */
 export function closeStore() {
     if (_db) {
         _db.close();
         _db = null;
     }
 }
-/** Persist a task snapshot, replacing any existing row with the same ID. */
 export function insertTask(task) {
     db().prepare(`
     INSERT OR REPLACE INTO tasks (id, provider, status, agent, prompt, repo, branch, pr_url, summary, created_at, updated_at)
     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
   `).run(task.id, task.provider, task.status, task.agent ?? null, task.prompt, task.repo ?? null, task.branch ?? null, task.prUrl ?? null, task.summary ?? null, task.createdAt, task.updatedAt);
-    // Every cloud dispatch flows through here, so this is the one chokepoint that
-    // reconciles the cloud store with the session index: register a session row
-    // keyed by the real execution id so the launch is mappable to a session
-    // immediately, not only after a later proxy discovery (see session-index.ts).
     registerCloudSession(task);
 }
-/** Update a task's status and optionally patch summary, PR URL, or branch. */
 export function updateTaskStatus(id, status, extra) {
     const now = new Date().toISOString();
     const sets = ['status = ?', 'updated_at = ?'];
@@ -85,20 +65,14 @@ export function updateTaskStatus(id, status, extra) {
     }
     params.push(id);
     db().prepare(`UPDATE tasks SET ${sets.join(', ')} WHERE id = ?`).run(...params);
-    // Keep the session index in lockstep with the store on every poll: refresh the
-    // row so its `[cloud/<status>]` label tracks the task's lifecycle (and picks up
-    // a newly-opened PR url). Reads the just-written row so the label reflects the
-    // update we just made, not a stale snapshot.
     const updated = getTaskById(id);
     if (updated)
         registerCloudSession(updated);
 }
-/** Fetch a single task by its provider-assigned ID, or null if not found locally. */
 export function getTaskById(id) {
     const row = db().prepare('SELECT * FROM tasks WHERE id = ?').get(id);
     return row ? rowToTask(row) : null;
 }
-/** List tasks with optional provider/status filters, ordered newest-first. */
 export function listTasks(filter) {
     const clauses = [];
     const params = [];
@@ -116,13 +90,11 @@ export function listTasks(filter) {
     return rows.map(rowToTask);
 }
 const TERMINAL_STATUSES = ['completed', 'failed', 'cancelled'];
-/** Return tasks still in a transient state (queued, allocating, running, input_required). */
 export function listActiveTasks() {
     const placeholders = TERMINAL_STATUSES.map(() => '?').join(', ');
     const rows = db().prepare(`SELECT * FROM tasks WHERE status NOT IN (${placeholders}) ORDER BY created_at DESC`).all(...TERMINAL_STATUSES);
     return rows.map(rowToTask);
 }
-/** Map a raw SQLite row to a typed CloudTask, converting snake_case columns to camelCase. */
 function rowToTask(row) {
     return {
         id: row.id,

package/dist/lib/cloud/stream.d.ts

@@ -1,19 +1,5 @@
-/**
- * Server-Sent Events parser and terminal renderer for cloud task output.
- *
- * Used by `agents cloud logs -f` to stream live output from a running task
- * and by the post-dispatch follow mode to show progress inline.
- */
 import type { CloudEvent } from './types.js';
-/**
- * Parse a Server-Sent Events stream into CloudEvents.
- * Handles `event:`, `data:`, keepalive comments, and multi-line data.
- */
 export declare function parseSSE(response: Response): AsyncIterable<CloudEvent>;
-/**
- * Render a stream of CloudEvents to the terminal.
- * Returns the final status and summary when the stream ends.
- */
 export declare function renderStream(events: AsyncIterable<CloudEvent>, options?: {
     json?: boolean;
 }): Promise<{

package/dist/lib/cloud/stream.js

@@ -1,22 +1,10 @@
-/**
- * Server-Sent Events parser and terminal renderer for cloud task output.
- *
- * Used by `agents cloud logs -f` to stream live output from a running task
- * and by the post-dispatch follow mode to show progress inline.
- */
 import chalk from 'chalk';
-/**
- * Translate a (server-emitted SSE event name, raw data string) pair into a
- * typed CloudEvent. Unknown event names are surfaced as `{ type: 'unknown' }`
- * rather than dropped — that's the whole point of widening the taxonomy.
- */
 function decodeSSEFrame(name, data, timestamp) {
     let parsed = {};
     try {
         parsed = data ? JSON.parse(data) : {};
     }
     catch {
-        // non-JSON payloads are kept as raw text below
     }
     switch (name) {
         case 'status':
@@ -53,10 +41,6 @@ function decodeSSEFrame(name, data, timestamp) {
             return { type: 'unknown', name, data, timestamp };
     }
 }
-/**
- * Parse a Server-Sent Events stream into CloudEvents.
- * Handles `event:`, `data:`, keepalive comments, and multi-line data.
- */
 export async function* parseSSE(response) {
     if (!response.body)
         return;
@@ -74,7 +58,6 @@ export async function* parseSSE(response) {
             const lines = buffer.split('\n');
             buffer = lines.pop() ?? '';
             for (const line of lines) {
-                // Keepalive comment
                 if (line.startsWith(':'))
                     continue;
                 if (line.startsWith('event: ')) {
@@ -84,7 +67,6 @@ export async function* parseSSE(response) {
                     currentData += (currentData ? '\n' : '') + line.slice(6);
                 }
                 else if (line === '') {
-                    // Empty line = end of event
                     if (currentEvent || currentData) {
                         yield decodeSSEFrame(currentEvent || 'output', currentData, new Date().toISOString());
                         currentEvent = '';
@@ -93,7 +75,6 @@ export async function* parseSSE(response) {
                 }
             }
         }
-        // Flush remaining
         if (currentEvent || currentData) {
             yield decodeSSEFrame(currentEvent || 'output', currentData, new Date().toISOString());
         }
@@ -102,10 +83,6 @@ export async function* parseSSE(response) {
         reader.releaseLock();
     }
 }
-/**
- * Render a stream of CloudEvents to the terminal.
- * Returns the final status and summary when the stream ends.
- */
 export async function renderStream(events, options) {
     let lastStatus = 'running';
     let summary;
@@ -134,7 +111,6 @@ export async function renderStream(events, options) {
                 break;
             }
             case 'tool_result': {
-                // Tool results are usually verbose; just acknowledge inline.
                 process.stderr.write(chalk.dim(`[tool_result] ${event.tool}\n`));
                 break;
             }
@@ -171,7 +147,6 @@ export async function renderStream(events, options) {
     }
     return { status: lastStatus, summary, prUrl };
 }
-/** Map a task status string to a colored terminal label. */
 function statusLabel(status) {
     switch (status) {
         case 'queued':