@phnx-labs/agents-cli 1.22.39 → 1.22.40

package/dist/lib/snapshot.d.ts

@@ -1,5 +1,5 @@
 /**
- * `agents snapshot` — one-process fleet consumer snapshot.
+ * `agents devices snapshot` — one-process fleet consumer snapshot.
  *
  * Consumers (Factory watchdog, menubar, fleet scripts) used to fork:
  *   agents view <agent> --json  × N harnesses
@@ -13,11 +13,11 @@
  * Stores are not merged — inventory still comes from view, active rows from
  * sessions, blocks from feed. Only the reader is consolidated.
  */
-import { type OpenBlock } from './feed.js';
+import { type OpenBlock } from './feed/feed.js';
 import { type FleetAgentCounts } from './fleet-status.js';
 import type { AgentId } from './types.js';
 import type { UnifiedSyncStatus } from './sync-status.js';
-import type { ViewJsonAgent } from '../commands/view.js';
+import type { ViewJsonAgent } from './view-types.js';
 /** One open-block row in the optional feed summary (no full question bodies). */
 export interface SnapshotFeedBlock {
     blockId: string;
@@ -44,7 +44,7 @@ export type SnapshotSessionRow = {
     [key: string]: unknown;
 };
 /**
- * Stable machine-readable contract for `agents snapshot --json`.
+ * Stable machine-readable contract for `agents devices snapshot --json`.
  * Bump `version` only on breaking shape changes.
  */
 export interface FleetSnapshot {

package/dist/lib/snapshot.js

@@ -1,5 +1,5 @@
 /**
- * `agents snapshot` — one-process fleet consumer snapshot.
+ * `agents devices snapshot` — one-process fleet consumer snapshot.
  *
  * Consumers (Factory watchdog, menubar, fleet scripts) used to fork:
  *   agents view <agent> --json  × N harnesses
@@ -14,7 +14,7 @@
  * sessions, blocks from feed. Only the reader is consolidated.
  */
 import { machineId } from './machine-id.js';
-import { listBlocks } from './feed.js';
+import { listBlocks } from './feed/feed.js';
 import { computeAgentCounts } from './fleet-status.js';
 /** Summarize open blocks for the snapshot feed slice. Pure / unit-testable. */
 export function summarizeFeedBlocks(blocks, limit = 50) {

package/dist/lib/ssh-exec.d.ts

@@ -2,7 +2,7 @@
  * Shared SSH exec primitive — the single hardened choke point for running a
  * command on a remote host over the system `ssh`.
  *
- * `agents run --host` dispatch and the browser driver both go through here so the
+ * `agents run --device` dispatch and the browser driver both go through here so the
  * connection hardening (`BatchMode`, `accept-new`, `ConnectTimeout`) and the
  * target-injection guard live in exactly one place. Target validation is the
  * canonical definition; `commands/secrets.ts` re-exports it.

package/dist/lib/ssh-exec.js

@@ -2,7 +2,7 @@
  * Shared SSH exec primitive — the single hardened choke point for running a
  * command on a remote host over the system `ssh`.
  *
- * `agents run --host` dispatch and the browser driver both go through here so the
+ * `agents run --device` dispatch and the browser driver both go through here so the
  * connection hardening (`BatchMode`, `accept-new`, `ConnectTimeout`) and the
  * target-injection guard live in exactly one place. Target validation is the
  * canonical definition; `commands/secrets.ts` re-exports it.
@@ -83,7 +83,7 @@ export class RemoteUtf8Accumulator {
  * OpenSSH connection-multiplexing options. The first connection to a host opens
  * a control socket; subsequent connections (even from a *separate* `agents`
  * invocation) reuse it, skipping the TCP+auth handshake — so repeated
- * `--host <name>` calls to the same box feel local instead of paying ~100-300ms
+ * `--device <name>` calls to the same box feel local instead of paying ~100-300ms
  * each. `ControlPersist=60s` keeps the master alive briefly after the last
  * client exits. `%C` (a short fixed-length hash of local-host/remote/port/user)
  * keeps the socket path well under macOS's 104-char `sun_path` limit.

package/dist/lib/ssh-tunnel.d.ts

@@ -5,7 +5,7 @@
  *
  *  1. `startSSHTunnel` — the generic `ssh -L localPort:127.0.0.1:remotePort -N`
  *     spawn, extracted verbatim from the browser CDP driver so both the browser
- *     and `agents computer --host` reach a remote loopback service through one
+ *     and `agents computer --device` reach a remote loopback service through one
  *     hardened tunnel. Behavior for the browser caller is unchanged (default,
  *     foreground, stderr-captured).
  *
@@ -21,8 +21,8 @@ import { type DeviceProfile } from './devices/registry.js';
 export interface StartTunnelOptions {
     /**
      * Detach the tunnel so it OUTLIVES this CLI process. Used by
-     * `agents computer start --host` — the tunnel must persist across separate
-     * verb invocations (`apps`, `click`, …) until `stop --host` tears it down.
+     * `agents computer start --device` — the tunnel must persist across separate
+     * verb invocations (`apps`, `click`, …) until `stop --device` tears it down.
      * The browser driver leaves this false: it holds the tunnel for the lifetime
      * of one CDP session and kills it on cleanup.
      */
@@ -83,12 +83,12 @@ export declare function sha256File(file: string): Promise<string>;
  */
 export declare function downloadWinHelperExe(version: string): Promise<string>;
 /**
- * Resolve the helper exe for `setup --host`: local build outputs first (repo
+ * Resolve the helper exe for `setup --device`: local build outputs first (repo
  * checkout / bundled), then the checksum-verified release-asset download for
  * the running CLI version. Throws with the tag it checked when neither exists.
  */
 export declare function ensureWinHelperExe(version?: string): Promise<string>;
-/** Persisted per-device tunnel state so verbs can reconnect after `start --host`. */
+/** Persisted per-device tunnel state so verbs can reconnect after `start --device`. */
 export interface RemoteTunnelState {
     device: string;
     target: string;
@@ -106,7 +106,7 @@ export declare function writeRemoteState(state: RemoteTunnelState): void;
 export declare function clearRemoteState(device: string): void;
 /**
  * Local file holding the shared-secret token for a device's helper daemon.
- * Written at `setup --host` (0600), read at `start --host` so the RPC client
+ * Written at `setup --device` (0600), read at `start --device` so the RPC client
  * authenticates. The remote daemon reads the same value from its own
  * `--token-file`; the CLI is the source of truth and never round-trips it back.
  */
@@ -154,7 +154,7 @@ export declare function scpRemotePath(remotePath: string): string;
  */
 export declare function buildScpArgs(target: string, remotePath: string, filePath: string, extraSshArgs?: string[]): string[];
 /**
- * `setup --host`: push the exe, then register + start the LOGON task. Remote
+ * `setup --device`: push the exe, then register + start the LOGON task. Remote
  * PowerShell hops go through `sshExec` (BatchMode key auth — the same hardening
  * the browser driver and `agents ssh` use), and the large exe rides a binary
  * scp transfer. Throws with the remote stderr on any failure.
@@ -166,13 +166,13 @@ export declare function setupRemoteHelper(name: string): Promise<{
 /** Reserve a free local TCP port by binding :0 and reading the assigned port. */
 export declare function pickFreePort(): Promise<number>;
 /**
- * `start --host`: open a detached ssh -L tunnel to the remote daemon, verify it
+ * `start --device`: open a detached ssh -L tunnel to the remote daemon, verify it
  * answers over TCP, and persist the tunnel state so verbs can reconnect. Returns
  * the state (and leaves the tunnel running in the background).
  */
 export declare function startRemoteTunnel(name: string): Promise<RemoteTunnelState>;
 /**
- * `stop --host`: kill the local tunnel, unregister the remote task (best-effort
+ * `stop --device`: kill the local tunnel, unregister the remote task (best-effort
  * — the box may be offline), and clear the persisted state.
  */
 export declare function stopRemoteHelper(name: string): Promise<{
@@ -182,7 +182,7 @@ export declare function stopRemoteHelper(name: string): Promise<{
 /**
  * Point this process's RPC client at a device's live tunnel by setting
  * COMPUTER_HELPER_TCP / COMPUTER_HELPER_TOKEN from persisted state. Called for
- * remote verbs (`apps --host`, `click --host`, …) so the shared
+ * remote verbs (`apps --device`, `click --device`, …) so the shared
  * openComputerClient() transparently selects the TcpClient transport — no
  * per-verb wiring. Exits with guidance when there is no active tunnel.
  */

package/dist/lib/ssh-tunnel.js

@@ -5,7 +5,7 @@
  *
  *  1. `startSSHTunnel` — the generic `ssh -L localPort:127.0.0.1:remotePort -N`
  *     spawn, extracted verbatim from the browser CDP driver so both the browser
- *     and `agents computer --host` reach a remote loopback service through one
+ *     and `agents computer --device` reach a remote loopback service through one
  *     hardened tunnel. Behavior for the browser caller is unchanged (default,
  *     foreground, stderr-captured).
  *
@@ -199,7 +199,7 @@ export async function downloadWinHelperExe(version) {
     return cached;
 }
 /**
- * Resolve the helper exe for `setup --host`: local build outputs first (repo
+ * Resolve the helper exe for `setup --device`: local build outputs first (repo
  * checkout / bundled), then the checksum-verified release-asset download for
  * the running CLI version. Throws with the tag it checked when neither exists.
  */
@@ -239,7 +239,7 @@ export function clearRemoteState(device) {
 }
 /**
  * Local file holding the shared-secret token for a device's helper daemon.
- * Written at `setup --host` (0600), read at `start --host` so the RPC client
+ * Written at `setup --device` (0600), read at `start --device` so the RPC client
  * authenticates. The remote daemon reads the same value from its own
  * `--token-file`; the CLI is the source of truth and never round-trips it back.
  */
@@ -275,7 +275,7 @@ export async function resolveRemoteDevice(name) {
         throw new Error(`Unknown device '${name}'. Register it with \`agents devices add\` / \`agents devices sync\`, then retry.`);
     }
     if (device.platform !== 'windows') {
-        throw new Error(`Device '${name}' is ${device.platform}, not windows. \`agents computer --host\` drives the Windows computer-helper daemon.`);
+        throw new Error(`Device '${name}' is ${device.platform}, not windows. \`agents computer --device\` drives the Windows computer-helper daemon.`);
     }
     const target = sshTargetFor(device); // validates address + injection guard
     const host = hostNameFor(device); // sshTargetFor already threw if absent
@@ -392,7 +392,7 @@ function copyFileOverScp(target, remotePath, filePath, extraSshArgs = [], timeou
     });
 }
 /**
- * `setup --host`: push the exe, then register + start the LOGON task. Remote
+ * `setup --device`: push the exe, then register + start the LOGON task. Remote
  * PowerShell hops go through `sshExec` (BatchMode key auth — the same hardening
  * the browser driver and `agents ssh` use), and the large exe rides a binary
  * scp transfer. Throws with the remote stderr on any failure.
@@ -441,7 +441,7 @@ export async function setupRemoteHelper(name) {
     if (reg.code !== 0) {
         throw new Error(`registering scheduled task on '${name}' failed (exit ${reg.code ?? 'null'}): ${reg.stderr.trim() || reg.stdout.trim()}`);
     }
-    // Persist the token locally so `start --host` authenticates to the daemon.
+    // Persist the token locally so `start --device` authenticates to the daemon.
     writeHelperToken(name, token);
     return { target, taskName: REMOTE_TASK_NAME };
 }
@@ -458,7 +458,7 @@ export function pickFreePort() {
     });
 }
 /**
- * `start --host`: open a detached ssh -L tunnel to the remote daemon, verify it
+ * `start --device`: open a detached ssh -L tunnel to the remote daemon, verify it
  * answers over TCP, and persist the tunnel state so verbs can reconnect. Returns
  * the state (and leaves the tunnel running in the background).
  */
@@ -514,8 +514,8 @@ export async function startRemoteTunnel(name) {
         }
         catch { /* gone */ }
         const hint = token
-            ? `Is it installed? Run: agents computer setup --host ${name}`
-            : `No auth token on record for '${name}' — re-run: agents computer setup --host ${name}`;
+            ? `Is it installed? Run: agents computer setup --device ${name}`
+            : `No auth token on record for '${name}' — re-run: agents computer setup --device ${name}`;
         throw new Error(`tunnel to '${name}' opened but the daemon did not answer (${probeErr}). ${hint}`);
     }
     const state = {
@@ -532,7 +532,7 @@ export async function startRemoteTunnel(name) {
     return state;
 }
 /**
- * `stop --host`: kill the local tunnel, unregister the remote task (best-effort
+ * `stop --device`: kill the local tunnel, unregister the remote task (best-effort
  * — the box may be offline), and clear the persisted state.
  */
 export async function stopRemoteHelper(name) {
@@ -566,7 +566,7 @@ export async function stopRemoteHelper(name) {
 /**
  * Point this process's RPC client at a device's live tunnel by setting
  * COMPUTER_HELPER_TCP / COMPUTER_HELPER_TOKEN from persisted state. Called for
- * remote verbs (`apps --host`, `click --host`, …) so the shared
+ * remote verbs (`apps --device`, `click --device`, …) so the shared
  * openComputerClient() transparently selects the TcpClient transport — no
  * per-verb wiring. Exits with guidance when there is no active tunnel.
  */
@@ -574,7 +574,7 @@ export function hydrateRemoteEnvFromState(name) {
     const state = readRemoteState(name);
     if (!state) {
         console.error(`No active remote tunnel for '${name}'.`);
-        console.error(`Run:  agents computer start --host ${name}`);
+        console.error(`Run:  agents computer start --device ${name}`);
         process.exit(1);
     }
     process.env.COMPUTER_HELPER_TCP = `127.0.0.1:${state.localPort}`;

package/dist/lib/staleness/checkers/hooks.d.ts

@@ -2,7 +2,7 @@
  * Hooks staleness — one executable file per hook. Project layer is EXCLUDED
  * by design: a cloned public repo with `.agents/hooks/foo` must not plant a
  * hook that fires next time the user runs an agent inside it (see
- * `src/lib/versions.ts:1832-1836`). Only user + system + extras count.
+ * `src/lib/installations/versions.ts:1832-1836`). Only user + system + extras count.
  *
  * Auxiliary files (README.md, promptcuts.yaml) live in hooks/ but are not
  * hooks — the executable bit on the source distinguishes them. This matches

package/dist/lib/staleness/checkers/hooks.js

@@ -2,7 +2,7 @@
  * Hooks staleness — one executable file per hook. Project layer is EXCLUDED
  * by design: a cloned public repo with `.agents/hooks/foo` must not plant a
  * hook that fires next time the user runs an agent inside it (see
- * `src/lib/versions.ts:1832-1836`). Only user + system + extras count.
+ * `src/lib/installations/versions.ts:1832-1836`). Only user + system + extras count.
  *
  * Auxiliary files (README.md, promptcuts.yaml) live in hooks/ but are not
  * hooks — the executable bit on the source distinguishes them. This matches

package/dist/lib/staleness/detectors/permissions.js

@@ -142,28 +142,6 @@ function buildGrokDetector() {
         },
     };
 }
-function buildGooseDetector() {
-    return {
-        kind: 'permissions',
-        agent: 'goose',
-        list({ versionHome }) {
-            const permissionsPath = path.join(versionHome, '.config', 'goose', 'permission.yaml');
-            if (!fs.existsSync(permissionsPath))
-                return [];
-            try {
-                const config = yaml.parse(fs.readFileSync(permissionsPath, 'utf-8'));
-                const user = config?.user;
-                const count = (Array.isArray(user?.always_allow) ? user.always_allow.length : 0) +
-                    (Array.isArray(user?.ask_before) ? user.ask_before.length : 0) +
-                    (Array.isArray(user?.never_allow) ? user.never_allow.length : 0);
-                if (count > 0)
-                    return discoverPermissionGroups().map(g => g.name);
-            }
-            catch { /* parse fail */ }
-            return [];
-        },
-    };
-}
 function buildKimiDetector() {
     return {
         kind: 'permissions',
@@ -315,7 +293,6 @@ const handlers = {
     opencode: buildOpenCodeDetector,
     antigravity: buildAntigravityDetector,
     grok: buildGrokDetector,
-    goose: buildGooseDetector,
     kimi: buildKimiDetector,
     cursor: buildCursorDetector,
     droid: buildDroidDetector,

package/dist/lib/staleness/detectors/plugins.js

@@ -1,5 +1,5 @@
 import { capableAgents } from '../../capabilities.js';
-import { discoverPlugins, isPluginSynced } from '../../plugins.js';
+import { discoverPlugins, isPluginSynced } from '../../plugins/plugins.js';
 import { lazyAgentMap } from '../writers/lazy-map.js';
 function buildPluginsDetector(agent) {
     return {

package/dist/lib/staleness/fingerprint.js

@@ -23,7 +23,7 @@ export function fingerprintFile(filePath) {
 /**
  * Names we never fingerprint: OS metadata, VCS bookkeeping, dep caches,
  * build outputs. Matches the SKILL_COPY_IGNORE set used by the sync writer
- * in `src/lib/versions.ts`.
+ * in `src/lib/installations/versions.ts`.
  *
  * Important: this is an allowlist of noise, NOT a blanket "skip every
  * dot-prefixed entry". Plugins keep their manifest at

package/dist/lib/staleness/layers.d.ts

@@ -7,7 +7,7 @@
  *   - "first-wins" (commands, skills, mcp, subagents, workflows, plugins):
  *     project > user > system > extras. Same-named entries shadow.
  *   - "first-wins, no project" (hooks): security exclusion — see
- *     `src/lib/versions.ts:1832-1836` for the rationale. User > system > extras.
+ *     `src/lib/installations/versions.ts:1832-1836` for the rationale. User > system > extras.
  *   - "merged" (permissions): every layer contributes; first-wins on name.
  *   - "composed" (rules): preset + subrules resolved per-name across layers.
  */

package/dist/lib/staleness/layers.js

@@ -7,7 +7,7 @@
  *   - "first-wins" (commands, skills, mcp, subagents, workflows, plugins):
  *     project > user > system > extras. Same-named entries shadow.
  *   - "first-wins, no project" (hooks): security exclusion — see
- *     `src/lib/versions.ts:1832-1836` for the rationale. User > system > extras.
+ *     `src/lib/installations/versions.ts:1832-1836` for the rationale. User > system > extras.
  *   - "merged" (permissions): every layer contributes; first-wins on name.
  *   - "composed" (rules): preset + subrules resolved per-name across layers.
  */

package/dist/lib/staleness/writers/mcp.js

@@ -7,7 +7,9 @@ function buildMcpWriter(agent) {
         agent,
         write({ version, versionHome, selection, cwd }) {
             const r = installMcpServers(agent, version, versionHome, selection, { cwd });
-            return { synced: r.applied };
+            // Forward r.errors: dropping them is what let a harness with no config
+            // writer report a clean sync while writing nothing (RUSH-2677).
+            return { synced: r.applied, ...(r.errors.length ? { errors: r.errors } : {}) };
         },
     };
 }

package/dist/lib/staleness/writers/plugins.js

@@ -1,5 +1,5 @@
 import { capableAgents } from '../../capabilities.js';
-import { discoverPlugins, syncPluginToVersion, pluginSupportsAgent, cleanOrphanedPluginSkills } from '../../plugins.js';
+import { discoverPlugins, syncPluginToVersion, pluginSupportsAgent, cleanOrphanedPluginSkills } from '../../plugins/plugins.js';
 import { lazyAgentMap } from './lazy-map.js';
 function buildPluginsWriter(agent) {
     return {

package/dist/lib/staleness/writers/types.d.ts

@@ -28,6 +28,14 @@ export interface WriteArgs<Sel> {
 export interface WriteResult {
     /** Names actually written. Empty array = write produced nothing (not an error). */
     synced: string[];
+    /**
+     * Per-item failures the writer could not complete, as user-facing sentences.
+     *
+     * `synced: []` alone cannot distinguish "nothing to do" from "refused to
+     * write and said why", which is how an unwritable harness reported success
+     * for its whole life (RUSH-2677). A writer that declines MUST say so here.
+     */
+    errors?: string[];
 }
 /**
  * Inverse of a write: locate and delete the materialized artifact for one

package/dist/lib/startup/command-registry.d.ts

@@ -1,140 +1,9 @@
-/**
- * Lazy command registry.
- *
- * The CLI entry point (src/index.ts) used to statically import every command
- * module and call its `registerXCommand(program)` on every invocation. That
- * loaded the entire command tree (~50 modules) before the first line of output,
- * dominating cold-start latency.
- *
- * This module maps each user-typed top-level command name to a thunk that
- * dynamically imports ONLY the module(s) that command needs. Fast commands
- * (`--version`, `view`, ...) now pay for just the one module they use; the full
- * tree is loaded only on the rare slow paths (unknown-command spellcheck, bare
- * help) via `registerAllEagerCommands` in src/index.ts.
- *
- * Parity is non-negotiable: the name -> loader map below mirrors exactly which
- * module registers which top-level command on `main`. Multi-command modules
- * (versions, packages) map several names to the same loader; `prune` needs BOTH
- * versions (which creates `prune <specs...>`) and prune.js (which attaches the
- * `cleanup` subcommand to it), in that order — see commands/prune.ts.
- */
-import { Command } from 'commander';
-/** A function that registers one or more commands onto the root program. */
-export type Registrar = (program: Command) => void;
-/** A thunk that dynamically imports a command module and returns its registrar. */
-export type ModuleLoader = () => Promise<Registrar>;
-export declare const loadView: ModuleLoader;
-export declare const loadInspect: ModuleLoader;
-export declare const loadFeedback: ModuleLoader;
-export declare const loadCommands: ModuleLoader;
-export declare const loadHooks: ModuleLoader;
-export declare const loadSkills: ModuleLoader;
-export declare const loadRules: ModuleLoader;
-export declare const loadMemory: ModuleLoader;
-export declare const loadPermissions: ModuleLoader;
-export declare const loadMcp: ModuleLoader;
-export declare const loadCli: ModuleLoader;
-export declare const loadSubagents: ModuleLoader;
-export declare const loadPlugins: ModuleLoader;
-export declare const loadWorkflows: ModuleLoader;
-export declare const loadVersions: ModuleLoader;
-export declare const loadUpdate: ModuleLoader;
-export declare const loadImport: ModuleLoader;
-export declare const loadPackages: ModuleLoader;
-export declare const loadRoutines: ModuleLoader;
-export declare const loadMonitors: ModuleLoader;
-export declare const loadProjects: ModuleLoader;
-export declare const loadRun: ModuleLoader;
-export declare const loadResume: ModuleLoader;
-export declare const loadOpen: ModuleLoader;
-export declare const loadReconnect: ModuleLoader;
-export declare const loadFork: ModuleLoader;
-export declare const loadConfig: ModuleLoader;
-export declare const loadModels: ModuleLoader;
-export declare const loadModes: ModuleLoader;
-export declare const loadPrune: ModuleLoader;
-export declare const loadTrash: ModuleLoader;
-export declare const loadRestore: ModuleLoader;
-export declare const loadDoctor: ModuleLoader;
-export declare const loadApply: ModuleLoader;
-export declare const loadStatus: ModuleLoader;
-export declare const loadSnapshot: ModuleLoader;
-export declare const loadProfiles: ModuleLoader;
-export declare const loadHarness: ModuleLoader;
-export declare const loadSecrets: ModuleLoader;
-export declare const loadLogin: ModuleLoader;
-export declare const loadMenubar: ModuleLoader;
-export declare const loadBeta: ModuleLoader;
-export declare const loadSync: ModuleLoader;
-export declare const loadRefreshRules: ModuleLoader;
-export declare const loadFactory: ModuleLoader;
-export declare const loadUsage: ModuleLoader;
-export declare const loadCost: ModuleLoader;
-export declare const loadInsights: ModuleLoader;
-export declare const loadPerf: ModuleLoader;
-export declare const loadBench: ModuleLoader;
-export declare const loadTrends: ModuleLoader;
-export declare const loadOutput: ModuleLoader;
-export declare const loadBudget: ModuleLoader;
-export declare const loadAlias: ModuleLoader;
-export declare const loadMine: ModuleLoader;
-export declare const loadPty: ModuleLoader;
-export declare const loadTmux: ModuleLoader;
-export declare const loadWatchdog: ModuleLoader;
-export declare const loadBrowser: ModuleLoader;
-export declare const loadComputer: ModuleLoader;
-export declare const loadLogs: ModuleLoader;
-export declare const loadEvents: ModuleLoader;
-export declare const loadSsh: ModuleLoader;
-export declare const loadRepo: ModuleLoader;
-export declare const loadSetup: ModuleLoader;
-export declare const loadUninstall: ModuleLoader;
-export declare const loadUpgrade: ModuleLoader;
-export declare const loadSessions: ModuleLoader;
-export declare const loadTeams: ModuleLoader;
-export declare const loadTickets: ModuleLoader;
-export declare const loadCloud: ModuleLoader;
-export declare const loadMessage: ModuleLoader;
-export declare const loadSend: ModuleLoader;
-export declare const loadFeed: ModuleLoader;
-export declare const loadMailboxes: ModuleLoader;
-export declare const loadServe: ModuleLoader;
-export declare const loadArtifacts: ModuleLoader;
-export declare const loadAudit: ModuleLoader;
-export declare const loadWebhooks: ModuleLoader;
-export declare const loadHumans: ModuleLoader;
-export declare const loadAccounts: ModuleLoader;
-export declare const loadDaemon: ModuleLoader;
-export declare const loadCp: ModuleLoader;
-/**
- * Commands whose modules pull in the SQLite-backed session/cloud stack. They are
- * registered AFTER `applyGlobalHelpConventions` (mirroring main's order: help
- * conventions at module top-level, lazy registration just before parse), so they
- * inherit the root's custom help formatter rather than getting the per-command
- * recursive pass. Keeping that ordering preserves their `--help` output exactly.
- */
-export declare const LAZY_COMMAND_NAMES: ReadonlySet<string>;
-/**
- * User-typed top-level command name -> ordered list of module loaders to run.
- *
- * Most names map to a single loader. The exceptions encode real coupling on main:
- *  - `add`/`use`/`list`/`remove`/`rm`/`purge` all come from the versions module.
- *  - `registry`/`search`/`install` all come from the packages module.
- *  - `trash` and `restore` are separate registrars in the trash module.
- *  - `prune` needs versions FIRST (it creates `prune <specs...>`) then prune.js
- *    (which finds that command and attaches the `cleanup` subcommand).
- *
- * Inline deprecated aliases (memory/perms/exec/jobs/cron) and the inline
- * `upgrade` command are NOT here — they are closures over entry-point state and
- * are handled directly in src/index.ts.
- */
-export declare const COMMAND_LOADERS: Record<string, ModuleLoader[]>;
 /**
  * Every top-level command name the CLI answers to — the loader table plus the
  * inline aliases/tombstones above. This is the "does this command exist?"
  * predicate for code that runs BEFORE commander parses, most importantly the
- * `--host`/`--device` router (lib/hosts/passthrough.ts): without it a typo'd
- * command carrying `--host` reported a flag-support error instead of
+ * `--device` router (lib/hosts/passthrough.ts): without it a typo'd
+ * command carrying `--device` reported a flag-support error instead of
  * `unknown command` (RUSH-2022).
  *
  * Commander sub-aliases (`sessions ls`, `teams rm`, …) are deliberately absent —
@@ -149,20 +18,9 @@ export declare const KNOWN_TOP_LEVEL_COMMANDS: ReadonlySet<string>;
  * the user never asked for instead of saying the command is gone.
  *
  * `set` moved under `agents models`/`agents config` (RUSH-2579); `share` moved
- * under `agents artifacts share` (RUSH-2580).
+ * under `agents artifacts share` (RUSH-2580). login/logout/budget/bench/mine/
+ * cost/output/profiles/snapshot/cp/resume/roster moved under nested homes
+ * (cli-surface-consolidate).
  */
 export declare const RETIRED_TOP_LEVEL_COMMANDS: ReadonlySet<string>;
-/** Whether `name` is a top-level command this CLI registers. See {@link KNOWN_TOP_LEVEL_COMMANDS}. */
 export declare function isKnownTopLevelCommand(name: string): boolean;
-/**
- * Register every module in {@link COMMAND_LOADERS} onto one fresh program and
- * return it — the full public command tree, deduped by loader identity so a
- * loader mapped to several names (e.g. `add`/`use`/`list` -> versions) runs once.
- *
- * Off the hot path only: the command-index generator (`scripts/gen-command-index.ts`)
- * and the tests build the tree from this. Startup never calls it — src/index.ts
- * registers just the one requested command via `registerEagerForRequest`. The
- * inline aliases/tombstones ({@link INLINE_COMMAND_NAMES}) are NOT included: they
- * are closures over entry-point state that src/index.ts registers directly.
- */
-export declare function buildFullCommandTree(): Promise<Command>;