@phnx-labs/agents-cli 1.22.120 → 1.22.121

package/dist/lib/account-capabilities.js

@@ -1,32 +1,16 @@
-/** Native-login selector coverage required by RUSH-3053. */
 export const NATIVE_ACCOUNT_SELECTOR_AGENTS = ['claude', 'codex', 'cursor', 'grok', 'kimi'];
-/** Explicit dispositions for config-isolated harnesses outside that selector. */
 export const NATIVE_ACCOUNT_SELECTOR_EXCLUSIONS = {
     copilot: 'no inspectable native identity',
     opencode: 'provider-set identity is not safely attributable to one native login',
     muse: 'email-only conditional identity is outside the RUSH-3053 harness contract',
 };
-/** Canonical truth for native-account naming and attachment semantics. */
 export const NATIVE_ACCOUNT_CAPABILITIES = {
-    // Config-isolated harnesses with a stable native identity. A labeled launch
-    // may use the auth/config home from one installed version with another binary.
     claude: { inspection: 'strong', scope: 'version', status: 'supported' },
     codex: { inspection: 'strong', scope: 'version', status: 'supported' },
     grok: { inspection: 'strong', scope: 'version', status: 'supported' },
     cursor: { inspection: 'strong', scope: 'version', status: 'supported' },
-    // Kimi exposes a stable opaque id but no email, so it requires a manual label.
     kimi: { inspection: 'opaque', scope: 'version', status: 'supported' },
-    // Version-scoped but only an email identity — nameable only when that email is
-    // present (the resolver rejects an emailless Muse login).
     muse: { inspection: 'email', scope: 'version', status: 'conditional' },
-    // Device-scoped, opaque identity (an OAuth/JWT blob). These are recorded as
-    // device-scoped opaque, but marked UNSUPPORTED for naming: a NativeAccount has
-    // no device-id discriminator, so an opaque/singleton identity cannot be proven
-    // to distinguish accounts across synced metadata — Droid exposes no account key
-    // at all, and Antigravity (singleton) / OpenCode (provider-set) can read two
-    // different credentials as the same identity on another device. A truthful
-    // "unsupported" is correct until a device-scoped identity key (with a stable
-    // device id) exists to validate against.
     antigravity: { inspection: 'opaque', scope: 'device', status: 'unsupported' },
     droid: { inspection: 'opaque', scope: 'device', status: 'unsupported' },
     opencode: { inspection: 'opaque', scope: 'device', status: 'unsupported' },
@@ -40,23 +24,16 @@ export const NATIVE_ACCOUNT_CAPABILITIES = {
 export function nativeAccountCapability(agent) {
     return NATIVE_ACCOUNT_CAPABILITIES[agent];
 }
-/** Whether a harness's native login can be named/attached (supported or conditional). */
 export function nativeAccountNameable(agent) {
     const cap = NATIVE_ACCOUNT_CAPABILITIES[agent];
     return (cap.status === 'supported' || cap.status === 'conditional') && cap.scope !== 'unsupported';
 }
-/** Harnesses whose native login is fully nameable/attachable today. */
 export function supportedNativeHarnesses() {
     return Object.entries(NATIVE_ACCOUNT_CAPABILITIES)
         .filter(([, cap]) => cap.status === 'supported')
         .map(([id]) => id)
         .sort();
 }
-/**
- * Named reason to refuse native name/attach, or null when the harness is
- * nameable. Provider-credential `accounts add` is a different path and MUST
- * not consult this — that surface is supported for every registered provider.
- */
 export function nativeAccountNamingRefusal(agent) {
     if (nativeAccountNameable(agent))
         return null;
@@ -70,20 +47,11 @@ export function nativeAccountNamingRefusal(agent) {
     }
     return `${agent} accounts can't be named by agents-cli yet. ${suffix}`;
 }
-/** Fail loud on the native name/attach path for an unsupported harness. */
 export function assertNativeAccountNameable(agent) {
     const reason = nativeAccountNamingRefusal(agent);
     if (reason)
         throw new Error(reason);
 }
-/**
- * The single identity key used at `accounts add`, exec validation,
- * view, and inventory. Prefer the harness's stable `accountKey`. For an
- * email-only (`conditional`) harness, email is a presence gate — the stored
- * key is still `accountKey` (e.g. `muse:email=user@x.com`), never the bare
- * address, so `run`/`view` compare against the same value `getAccountInfo`
- * returns.
- */
 export function nativeIdentityKey(info, capability) {
     if (!info.signedIn)
         return null;

package/dist/lib/account-catalog.d.ts

@@ -31,46 +31,23 @@ export declare function groupNativeAccountRows(rows: Array<{
     email: string | null;
     signedIn: boolean;
 }>): NativeAccountCatalogEntry[];
-/** Discover signed-in harness-native identities without copying their auth files. */
 export declare function discoverNativeAccounts(): Promise<NativeAccountCatalogEntry[]>;
-/** One installed home carrying an identity — the secondary "release/home" facts. */
 export interface AccountHome {
-    /** The installation label (version-dir basename). */
     label: string;
-    /** The vendor release the home currently carries, when the record is present. */
     releaseVersion: string | null;
-    /** Whether this exact home currently has a live signed-in credential. */
     signedIn: boolean;
 }
-/**
- * A live credential state, derived from the homes rather than the registry:
- * - `connected` — at least one home for this identity is signed in.
- * - `reconnect-needed` — the account is registered but no home currently
- *   holds a live credential; the label alone is not a connection.
- *   `agents accounts login <harness>#<name>` re-authenticates it.
- */
 export type AccountConnectionState = 'connected' | 'reconnect-needed';
-/** Account-first row for a native (harness-owned OAuth) identity. */
 export interface NativeAccountCatalogRow {
     kind: 'native';
     agent: AgentId;
     identityKey: string;
-    /** Registered account name/label, or null for an unnamed discovered login. */
     name: string | null;
-    /** Registered stable account id, or null when unnamed. */
     id: string | null;
     email: string | null;
     display: string;
-    /**
-     * The LOCAL installation home for this identity on THIS box: the recorded
-     * connect home when installed here, else the local home carrying the login.
-     * Null when no local home exists (the identity may be connected on another
-     * box). Per-host by construction — never a label another box minted.
-     */
     home: string | null;
-    /** Every installed home carrying this identity (secondary diagnostics). */
     installations: AccountHome[];
-    /** Whether the harness's configured default account points at this identity. */
     isDefault: boolean;
     state: AccountConnectionState;
     identityLabel: string;
@@ -79,16 +56,7 @@ export interface NativeAccountCatalogRow {
     checkedAt: string | null;
     devices: AccountDeviceVerdict[];
     usage: QuotaSummary | null;
-    /**
-     * The live usage snapshot backing `usage`, or null when none was collected.
-     * Carried alongside the collapsed `QuotaSummary` so the per-window bars
-     * (S: session 5h, W: week 7d, etc.) can render via the canonical
-     * `formatUsageSummary` / `pickCompactUsageWindows` path instead of the
-     * single max-percent bar. Added non-breaking: JSON clients keep `usage`
-     * and may read this when present.
-     */
     usageSnapshot?: UsageSnapshot | null;
-    /** Raw usage fetch error, for headless/unverified labeling alongside the bars. */
     usageError?: string | null;
     /**
      * The token FACT for this account ON THIS BOX (PHNX-4116): the credential kind
@@ -97,11 +65,6 @@ export interface NativeAccountCatalogRow {
      * `no token` when the credential file is absent. A fact, never a verdict word.
      */
     token: string;
-    /**
-     * The auth FACT for this account ON THIS BOX (PHNX-4116): `last used ok 12m
-     * ago` / `last auth failure 401 Sep 20 14:02` / `rate-limited until 15:00` /
-     * `not used on this box yet`, from the recorded run outcome (or a real probe).
-     */
     lastAuth: string;
     fix: string | null;
 }
@@ -111,7 +74,6 @@ export interface AccountDeviceVerdict {
     verdict: Exclude<AccountVerdict, 'per-device'>;
     checkedAt?: string;
 }
-/** Account-first row for a durable provider (API-key / token) account. */
 export interface ProviderAccountCatalogRow {
     kind: 'provider';
     name: string;
@@ -119,9 +81,7 @@ export interface ProviderAccountCatalogRow {
     provider: string;
     auth: string;
     baseUrl?: string;
-    /** Harnesses this credential can authenticate. Empty = listed under Other accounts. */
     harnesses: AgentId[];
-    /** Harnesses whose configured default points at this account. */
     defaultFor: AgentId[];
     identityLabel: string;
     verdict: Extract<AccountVerdict, 'ready' | 'missing'>;
@@ -130,28 +90,14 @@ export interface ProviderAccountCatalogRow {
 interface AccountCatalog {
     native: NativeAccountCatalogRow[];
     provider: ProviderAccountCatalogRow[];
-    /**
-     * Set when the standalone `secrets` CLI could not be reached to read the
-     * provider (durable-credential) accounts — missing, unreachable, or timed out
-     * on this box. The native rows (harness OAuth logins, read from config files,
-     * not `secrets`) still render; only the provider section is unavailable. A
-     * read-only surface (`agents view`, `agents accounts`) surfaces this as one
-     * clear line and renders the rest rather than hanging or crashing (PHNX-3989).
-     */
     secretsUnavailable?: {
         code: string;
         message: string;
     };
 }
-/**
- * One account in the public JSON v2 projection (`accounts list --json`, `view --json`).
- * A provider credential that authenticates several harnesses is one entry per
- * harness (same `id`, each with its own `harness`); an orphan is `harness: null`.
- */
 export interface AccountListEntryJson {
     kind: 'native' | 'provider';
     id: string;
-    /** Null for a provider credential no harness authenticates. */
     harness: AgentId | null;
     name: string | null;
     identityLabel: string;
@@ -165,19 +111,9 @@ export interface AccountListEntryJson {
         verdict: AccountDeviceVerdict['verdict'];
     }>;
     usage: QuotaSummary | null;
-    /** The live usage snapshot backing `usage`, when available — additive, not breaking. */
     usageSnapshot?: UsageSnapshot | null;
     usageError?: string | null;
-    /**
-     * The token FACT for this account on the box that emitted this JSON (PHNX-4116):
-     * `sk-ant-oat01 (Sep 16)` / `api key (present)` / `no token`. A fact, not a verdict.
-     */
     token: string;
-    /**
-     * The auth FACT for this account on the box that emitted this JSON (PHNX-4116):
-     * `last used ok 12m ago` / `last auth failure 401 Sep 20 14:02` / `not used on
-     * this box yet`. Reflects the emitting box only; `devices[]` carries the fleet.
-     */
     lastAuth: string;
     fix: string | null;
 }
@@ -185,7 +121,6 @@ interface AccountListJson {
     version: 2;
     accounts: AccountListEntryJson[];
 }
-/** One installed home probed for its native identity — the raw input to the fold. */
 export interface NativeHomeRow {
     agent: AgentId;
     label: string;
@@ -194,19 +129,8 @@ export interface NativeHomeRow {
     email: string | null;
     signedIn: boolean;
 }
-/** Probe every installed home of every inspectable harness for its native identity. */
 export declare function collectNativeHomeRows(): Promise<NativeHomeRow[]>;
-/** The subset of Meta the pure builder reads — the registered native accounts + defaults. */
 type CatalogMeta = Pick<Meta, 'accounts' | 'deviceAccounts'>;
-/**
- * Fold installed homes + the registry into account-first native rows (pure).
- *
- * Every home carrying an identity contributes an `AccountHome`; the identity is
- * the group key. A registered account (name/id/connect home) is merged onto its
- * identity, and — crucially — a registered account whose identity has NO live
- * home still appears, as `reconnect-needed`, so a stale/expired login is never
- * silently dropped from the list nor shown as connected.
- */
 export declare function buildNativeCatalog(rows: NativeHomeRow[], meta: CatalogMeta, globalDefault?: (agent: AgentId) => string | null): NativeAccountCatalogRow[];
 /**
  * The token FACT for a Claude account ON THIS BOX (PHNX-4116): the slot/home
@@ -217,81 +141,29 @@ export declare function buildNativeCatalog(rows: NativeHomeRow[], meta: CatalogM
  */
 export declare function readTokenFact(agent: AgentId, dir: string | null): string;
 export declare function toProviderRow(account: CredentialAccount, meta: Pick<Meta, 'accounts'>): ProviderAccountCatalogRow;
-/**
- * Wire the real collectors to the pure builder. This is the canonical
- * account-first read model `view.ts` renders: native identities (account +
- * connection first, release/home secondary) plus durable provider credentials.
- */
 export declare function loadAccountCatalog(): Promise<AccountCatalog>;
-/**
- * The one clear line a read-only surface prints when the provider section could
- * not be read (PHNX-3989) — so a missing/broken standalone is stated plainly
- * while the native rows and the rest of the output still render. Null when the
- * catalog is complete. Printed to stderr by the command so it never corrupts
- * `--json` stdout.
- */
 export declare function secretsUnavailableNote(catalog: Pick<AccountCatalog, 'secretsUnavailable'>): string | null;
 export declare function accountListJson(native: NativeAccountCatalogRow[], providers?: ProviderAccountCatalogRow[], harness?: AgentId): AccountListJson;
-/**
- * Device coverage, but only when it SPLITS the fleet: some boxes can use the
- * account and some cannot. Full coverage is the ordinary case, and "none of
- * them" is already exactly what the row's state note says, so both render
- * nothing — `accounts list --fleet` is the per-device table.
- */
 export declare function coverageNote(row: NativeAccountCatalogRow, localDevice: string): string | null;
 export declare const OVERVIEW_MAX_USAGE_WINDOWS = 2;
-/**
- * The one line under an account listing. It explains the two marks a row can
- * carry and names where the columns the listing no longer prints — identity,
- * per-device state — still live. Shared with `agents view` so the two surfaces
- * cannot drift.
- */
 export declare const ACCOUNT_LISTING_LEGEND = "* stale usage \u00B7 a healthy account carries no state \u00B7 identity + per-box state: agents accounts list --fleet";
-/**
- * Colour the auth FACT by what it states (PHNX-4116): a recent success is green,
- * a server rejection red, a throttle yellow, and "not used on this box yet" the
- * neutral gray of a fact that carries no alarm.
- */
 export declare function authFactNote(lastAuth: string): string;
-/** Shared text renderer used by both `accounts list` and account-first `view`. */
 export declare function renderAccountRows(rows: NativeAccountCatalogRow[], opts: {
     heading?: boolean;
     footer?: boolean;
     harnessHeadings?: boolean;
     providers?: ProviderAccountCatalogRow[];
-    /** When set, emit only this harness's group — never a sibling or empty group. */
     harness?: AgentId;
-    /**
-     * Cap for compact usage windows — overview (no harness filter) passes 2,
-     * single-harness view leaves it undefined to show all blocking windows.
-     * Mirrors `OVERVIEW_MAX_USAGE_WINDOWS` in view.ts.
-     */
     maxUsageWindows?: number;
-    /**
-     * Device name treated as "this box" in WHERE when it is the only reporter.
-     * The command layer passes `machineId()`; this renderer never resolves it.
-     */
     localDevice: string;
 }): string;
 export declare function readSharedAccountVerdicts(userAgentsDir?: string): Map<string, AccountDeviceVerdict[]>;
-/**
- * Devices whose daemon-state file exists but carries no account verdicts —
- * typically an older release that has not started publishing the T3 envelope.
- * The fleet matrix lists them in a coverage note rather than as blank columns.
- */
 export declare function listDevicesWithoutAccountVerdicts(userAgentsDir?: string): string[];
-/** The T1 slot store's per-account observation of the local verdict. */
 interface LocalSlotObservation {
     authMode: AccountDeviceVerdict['authMode'];
     verdict: AuthVerdict;
     checkedAt?: string;
 }
-/**
- * Merge the two writers of the same local truth — the T1 slot store and the
- * daemon's auth-health cache — by NEWEST observation. A naive `??` chain lets
- * an older slot `live` permanently mask a newer daemon `revoked`, so a revoked
- * account would keep rendering LIVE on its own device. Pure.
- */
 export declare function resolveLocalAccountObservation(slot: LocalSlotObservation | undefined, cached: {
     verdict: AuthVerdict;
     checkedAt: number;