@phnx-labs/agents-cli 1.22.40 → 1.22.41

package/dist/commands/webhook.js

@@ -25,8 +25,10 @@ function readWebhookSecrets(bundleName) {
         secrets.github = env.GITHUB_WEBHOOK_SECRET;
     if (env.LINEAR_WEBHOOK_SECRET)
         secrets.linear = env.LINEAR_WEBHOOK_SECRET;
-    if (!secrets.github && !secrets.linear) {
-        throw new Error(`Bundle '${bundleName}' must contain GITHUB_WEBHOOK_SECRET or LINEAR_WEBHOOK_SECRET.`);
+    if (env.SLACK_SIGNING_SECRET)
+        secrets.slack = env.SLACK_SIGNING_SECRET;
+    if (!secrets.github && !secrets.linear && !secrets.slack) {
+        throw new Error(`Bundle '${bundleName}' must contain GITHUB_WEBHOOK_SECRET, LINEAR_WEBHOOK_SECRET, or SLACK_SIGNING_SECRET.`);
     }
     return secrets;
 }
@@ -36,8 +38,8 @@ export function registerWebhooksCommand(program) {
         .description('Run a localhost signed webhook receiver for routine triggers.');
     webhooks
         .command('serve')
-        .description('Receive signed GitHub/Linear webhooks on /hooks/<source> and fire matching routines.')
-        .requiredOption('--secrets-bundle <name>', 'agents secrets bundle containing GITHUB_WEBHOOK_SECRET and/or LINEAR_WEBHOOK_SECRET')
+        .description('Receive signed GitHub/Linear/Slack webhooks on /hooks/<source> and fire matching routines and handlers.')
+        .requiredOption('--secrets-bundle <name>', 'agents secrets bundle containing GITHUB_WEBHOOK_SECRET, LINEAR_WEBHOOK_SECRET, and/or SLACK_SIGNING_SECRET')
         .option('--bind <addr>', `Bind address (default ${DEFAULT_HOST})`, DEFAULT_HOST)
         .option('-p, --port <n>', `Local port (default ${DEFAULT_PORT})`, String(DEFAULT_PORT))
         .option('--rate-limit <n>', 'Accepted deliveries per source per minute', '60')
@@ -61,12 +63,15 @@ export function registerWebhooksCommand(program) {
                 // Durable delivery dedup: replays survive a receiver restart (an
                 // in-memory store would forget every seen delivery on restart).
                 deliveryStore: createFileDeliveryStore(path.join(getRuntimeStateDir(), 'webhook', 'deliveries.json')),
-                onDelivery: (webhook, fired, handlers) => {
+                // Logged at MATCH time, before dispatch — a `run.command` handler can
+                // block on a shelled-out agent run for minutes, and that must never
+                // delay the log that says a delivery fired (RUSH-2722).
+                onMatch: (webhook, matchedJobNames, matchedHandlerNames) => {
                     const parts = [];
-                    if (fired.length)
-                        parts.push(`routines ${fired.map((f) => f.jobName).join(', ')}`);
-                    if (handlers.length)
-                        parts.push(`handlers ${handlers.map((h) => h.handlerName).join(', ')}`);
+                    if (matchedJobNames.length)
+                        parts.push(`routines ${matchedJobNames.join(', ')}`);
+                    if (matchedHandlerNames.length)
+                        parts.push(`handlers ${matchedHandlerNames.join(', ')}`);
                     console.log(`${new Date().toISOString()} ${webhook.source}:${webhook.event} ` +
                         (parts.length ? `fired ${parts.join('; ')}` : 'no match'));
                 },

package/dist/lib/browser/cdp.js

@@ -227,6 +227,10 @@ export function verifyBrowserIdentity(reported, expected, port, host = 'localhos
         // doesn't override the Chromium branding. Accept chrome here so attaching
         // to a Comet instance doesn't trip a false "identity mismatch".
         comet: ['comet', 'chrome'],
+        // Arc reports itself as plain "Chrome/<version>" in /json/version (verified
+        // live: Arc 1.15x → "Chrome/151"), so accept chrome to avoid a false
+        // identity mismatch when attaching to a real Arc.
+        arc: ['arc', 'chrome'],
         brave: ['brave', 'brave-browser', 'chrome'],
         // Windows/Chromium Edge reports its /json/version "Browser" field as
         // "Edg/<version>" (the `Edg` token, not `Edge`), which normalizeBrowserName

package/dist/lib/browser/chrome.js

@@ -23,6 +23,7 @@ const BROWSER_PATHS = {
         chromium: ['/Applications/Chromium.app/Contents/MacOS/Chromium'],
         brave: ['/Applications/Brave Browser.app/Contents/MacOS/Brave Browser'],
         edge: ['/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge'],
+        arc: ['/Applications/Arc.app/Contents/MacOS/Arc'],
         custom: [],
     },
     linux: {
@@ -31,6 +32,8 @@ const BROWSER_PATHS = {
         chromium: ['/usr/bin/chromium', '/usr/bin/chromium-browser', '/snap/bin/chromium'],
         brave: ['/usr/bin/brave-browser', '/usr/bin/brave'],
         edge: ['/usr/bin/microsoft-edge'],
+        // Arc has no Linux build (macOS + Windows only).
+        arc: [],
         custom: [],
     },
     win32: {
@@ -57,6 +60,9 @@ const BROWSER_PATHS = {
             `${WIN_PROGRAMFILES_X86}\\Microsoft\\Edge\\Application\\msedge.exe`,
             `${WIN_LOCALAPPDATA}\\Microsoft\\Edge\\Application\\msedge.exe`,
         ],
+        // Arc ships a Windows build, but its install path is not yet verified here;
+        // leave unlisted (undetected) rather than guess a path that false-positives.
+        arc: [],
         custom: [],
     },
 };
@@ -162,6 +168,9 @@ export function findBrowserPath(browserType, customBinary) {
     if (browserType === 'comet' && platform === 'linux') {
         throw new Error('Browser "comet" is not available on Linux (Comet ships macOS and Windows builds only). Use chrome, chromium, brave, or edge on this platform.');
     }
+    if (browserType === 'arc' && platform === 'linux') {
+        throw new Error('Browser "arc" is not available on Linux (Arc ships macOS and Windows builds only). Use chrome, chromium, brave, or edge on this platform.');
+    }
     throw new Error(`Browser "${browserType}" not found. Install it first.`);
 }
 // Per-platform Chromium-family priority list for "no --profile" auto-pick.
@@ -170,7 +179,9 @@ export function findBrowserPath(browserType, customBinary) {
 // way cdp.ts expects, so they'd need separate drivers.
 const DEFAULT_BROWSER_PRIORITY = {
     // macOS: Chrome leads (>70% of dev machines), then the rest of the family.
-    darwin: ['chrome', 'brave', 'edge', 'chromium', 'comet'],
+    // Arc is last: it's in maintenance mode and needs a blank tab to drive, so it
+    // shouldn't win auto-pick over a mainstream browser.
+    darwin: ['chrome', 'brave', 'edge', 'chromium', 'comet', 'arc'],
     // Linux: Chrome/Chromium first (apt/snap), then Brave/Edge if present.
     linux: ['chrome', 'chromium', 'brave', 'edge'],
     // Windows: Edge is preinstalled on every supported build, so it's the

package/dist/lib/browser/drivers/ssh.js

@@ -142,6 +142,7 @@ const POSIX_BROWSER_PATHS = {
     chromium: '/Applications/Chromium.app/Contents/MacOS/Chromium',
     brave: '/Applications/Brave Browser.app/Contents/MacOS/Brave Browser',
     edge: '/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge',
+    arc: '/Applications/Arc.app/Contents/MacOS/Arc',
 };
 // Windows App Paths registry keys per browser. CreateProcess (used by WMI
 // Win32_Process.Create) does not honor App Paths the way ShellExecute/`start`

package/dist/lib/browser/profiles.d.ts

@@ -14,7 +14,7 @@ export interface ScopedBrowserProfile {
 }
 /**
  * The device-local configured default profile name (set via
- * `agents browser profiles set-default`), or undefined when unset. When set, it
+ * `agents browser use`), or undefined when unset. When set, it
  * is the profile `agents browser start` resolves to for BOTH the no-`--profile`
  * path and an explicit `--profile default`. Stored as this machine's
  * `browser.profile` device-config key (the per-device doc's `config:` block —
@@ -62,7 +62,7 @@ export declare function isProfileLaunchableHere(profile: BrowserProfile): boolea
  * set-default <name>`) when it names an existing profile that can launch here;
  * (2) an existing `default` profile that can launch here; (3) auto-pick the
  * first installed Chromium-family browser per the platform priority list in
- * chrome.ts (macOS: chrome > brave > edge > chromium > comet; Linux: chrome >
+ * chrome.ts (macOS: chrome > brave > edge > chromium > comet > arc; Linux: chrome >
  * chromium > brave > edge; Windows: edge > chrome > brave > comet) and pin a
  * `default` profile to it. Throws an actionable error if none of those binaries
  * are installed.
@@ -133,7 +133,7 @@ export declare function padColumn(text: string, width: number): string;
  * Two things used to be called "default" in this listing with no way to tell
  * them apart (RUSH-2710): the profile literally NAMED `default` (the
  * auto-detected one), and whichever profile this machine resolves a bare
- * `agents browser start` to (`agents config set browser.profile <name>`). They
+ * `agents browser start` to (`agents browser use <name>`). They
  * are frequently different profiles. Now only the second is a marker — a `*` in
  * a leading column, explained by a legend line — so the name column carries just
  * the name and `default` in it always means the profile of that name.

package/dist/lib/browser/profiles.js

@@ -25,7 +25,7 @@ function isMachineLocalProfile(name) {
 }
 /**
  * The device-local configured default profile name (set via
- * `agents browser profiles set-default`), or undefined when unset. When set, it
+ * `agents browser use`), or undefined when unset. When set, it
  * is the profile `agents browser start` resolves to for BOTH the no-`--profile`
  * path and an explicit `--profile default`. Stored as this machine's
  * `browser.profile` device-config key (the per-device doc's `config:` block —
@@ -165,7 +165,7 @@ export function isProfileLaunchableHere(profile) {
  * set-default <name>`) when it names an existing profile that can launch here;
  * (2) an existing `default` profile that can launch here; (3) auto-pick the
  * first installed Chromium-family browser per the platform priority list in
- * chrome.ts (macOS: chrome > brave > edge > chromium > comet; Linux: chrome >
+ * chrome.ts (macOS: chrome > brave > edge > chromium > comet > arc; Linux: chrome >
  * chromium > brave > edge; Windows: edge > chrome > brave > comet) and pin a
  * `default` profile to it. Throws an actionable error if none of those binaries
  * are installed.
@@ -187,18 +187,18 @@ export async function ensureDefaultBrowserProfile() {
         console.warn(chosen
             ? `warning: configured default browser profile "${configured}" can't launch on this ` +
                 `machine (its browser/binary isn't installed here); falling back to auto-detect. ` +
-                `Fix with: agents browser profiles set-default <name>  (or --unset)`
+                `Fix with: agents browser use <name>  (or --unset)`
             : `warning: configured default browser profile "${configured}" no longer exists; ` +
-                `falling back to auto-detect. Fix with: agents browser profiles set-default <name>  (or --unset)`);
+                `falling back to auto-detect. Fix with: agents browser use <name>  (or --unset)`);
     }
     const existing = await getProfile(DEFAULT_BROWSER_PROFILE_NAME);
     if (existing && isProfileLaunchableHere(existing))
         return existing;
     const detected = findFirstInstalledBrowser();
     if (!detected) {
-        throw new Error('No supported browser found. Install one of: Chrome, Brave, Edge, Chromium, or Comet, ' +
+        throw new Error('No supported browser found. Install one of: Chrome, Brave, Edge, Chromium, Comet, or Arc, ' +
             'then re-run `agents browser start`. Or create a profile explicitly with ' +
-            '`agents browser profiles create <name> --browser <chrome|comet|chromium|brave|edge|custom>`. ' +
+            '`agents browser profiles create <name> --browser <chrome|comet|chromium|brave|edge|arc|custom>`. ' +
             'Note: Safari and Firefox are not supported — agents browser drives over the ' +
             'Chrome DevTools Protocol, which they don\'t implement.');
     }
@@ -431,7 +431,7 @@ export function padColumn(text, width) {
  * Two things used to be called "default" in this listing with no way to tell
  * them apart (RUSH-2710): the profile literally NAMED `default` (the
  * auto-detected one), and whichever profile this machine resolves a bare
- * `agents browser start` to (`agents config set browser.profile <name>`). They
+ * `agents browser start` to (`agents browser use <name>`). They
  * are frequently different profiles. Now only the second is a marker — a `*` in
  * a leading column, explained by a legend line — so the name column carries just
  * the name and `default` in it always means the profile of that name.

package/dist/lib/browser/service.d.ts

@@ -1,6 +1,6 @@
 import { CDPClient } from './cdp.js';
 import { type ResolvedDomainSkill } from './domain-skills.js';
-import { type Task, type TabInfo, type ProfileStatus, type HistoricalTask, type ReapResult } from './types.js';
+import { type Task, type TabInfo, type ProfileStatus, type BrowserType, type HistoricalTask, type ReapResult } from './types.js';
 import { type ReapOptions } from './hygiene.js';
 import { type RefOpts, type RefNode } from './refs.js';
 import type { TargetFilter } from './types.js';
@@ -50,6 +50,13 @@ interface ProfileConnection {
     port: number;
     pid: number;
     electron?: boolean;
+    /**
+     * The profile's declared browser family. Load-bearing for Arc: Arc answers
+     * `Browser.getVersion` but exposes zero CDP page targets and CRASHES on
+     * `Target.createTarget` (verified live, PR #2778), so any tab-creating path
+     * must refuse rather than crash the user's Arc. See `createPageTarget`.
+     */
+    browserType?: BrowserType;
     /** Raw `url:<v>` / `title:<v>` filter copied from the profile config. */
     targetFilter?: string;
     /**
@@ -83,6 +90,14 @@ interface ProfileConnection {
 }
 /** Join error lines so callers get a next command, not a dead-end message. */
 export declare function actionable(...lines: string[]): string;
+/**
+ * Arc answers `Browser.getVersion` (so a connection succeeds) but exposes zero
+ * CDP page targets via every discovery method and CRASHES when a new tab is
+ * requested via `Target.createTarget` (verified live, PR #2778). It is therefore
+ * not drivable. This is the single clear, actionable error every tab-creating
+ * path throws instead of crashing the user's Arc window.
+ */
+export declare function arcNotDrivableError(profileName?: string): Error;
 /** Derive a human label from an explicit title or a navigated URL. */
 export declare function deriveTaskLabel(opts: {
     title?: string;
@@ -392,6 +407,14 @@ export declare class BrowserService {
     private connectProfile;
     private connectEndpoint;
     private enableDomains;
+    /**
+     * The single path that opens a new CDP page/window target. It exists so the
+     * Arc guard lives in exactly one place: `Target.createTarget` crashes Arc
+     * (verified, PR #2778), so an Arc connection throws a clear, actionable error
+     * here instead of every call site re-checking. Every drivable Chromium-family
+     * browser goes straight through.
+     */
+    private createPageTarget;
     private getOrCreateWindow;
     private hasTaskNamed;
     /** Map key for a task on a connection (tasks are keyed by `name`). */

package/dist/lib/browser/service.js

@@ -243,6 +243,17 @@ async function isConnHealthy(conn, timeoutMs = 1000) {
 export function actionable(...lines) {
     return lines.filter((l) => l != null && l !== '').join('\n');
 }
+/**
+ * Arc answers `Browser.getVersion` (so a connection succeeds) but exposes zero
+ * CDP page targets via every discovery method and CRASHES when a new tab is
+ * requested via `Target.createTarget` (verified live, PR #2778). It is therefore
+ * not drivable. This is the single clear, actionable error every tab-creating
+ * path throws instead of crashing the user's Arc window.
+ */
+export function arcNotDrivableError(profileName) {
+    const scope = profileName ? ` (profile "${profileName}")` : '';
+    return new Error(actionable(`Browser "arc"${scope} is not drivable: Arc exposes no CDP page targets and`, 'crashes when a new tab is requested, so `agents browser` cannot control it.', 'Use a Chromium-family browser instead — Comet, Chrome, Chromium, or Brave:', '  agents browser profiles create <name> --browser comet'));
+}
 /** Derive a human label from an explicit title or a navigated URL. */
 export function deriveTaskLabel(opts) {
     if (opts.title?.trim())
@@ -404,9 +415,9 @@ export class BrowserService {
         if (!opts.url && !conn.electron) {
             const { targetInfos } = (await conn.cdp.send('Target.getTargets'));
             if (!targetInfos.some((t) => t.type === 'page')) {
-                const created = (await conn.cdp.send('Target.createTarget', {
+                const created = await this.createPageTarget(conn, {
                     url: 'about:blank',
-                }));
+                });
                 startupBlankTargetId = created.targetId;
                 this.invalidateTargetCache(conn);
             }
@@ -485,10 +496,7 @@ export class BrowserService {
         let tabId;
         if (opts.url && !conn.electron) {
             const adopted = opts.fresh ? undefined : await this.adoptTabShowing(conn, opts.url);
-            const targetId = adopted ??
-                (await conn.cdp.send('Target.createTarget', {
-                    url: opts.url,
-                })).targetId;
+            const targetId = adopted ?? (await this.createPageTarget(conn, { url: opts.url })).targetId;
             const shortId = generateShortId();
             task.tabs[shortId] = targetId;
             task.currentTabId = shortId;
@@ -747,9 +755,7 @@ export class BrowserService {
             return { tabId: shortId, url, created: true };
         }
         // Chrome: create new tab
-        const result = (await conn.cdp.send('Target.createTarget', {
-            url,
-        }));
+        const result = await this.createPageTarget(conn, { url });
         const shortId = generateShortId();
         task.tabs[shortId] = result.targetId;
         task.currentTabId = shortId;
@@ -763,9 +769,7 @@ export class BrowserService {
         if (conn.electron) {
             throw new Error('Electron apps do not support opening additional tabs');
         }
-        const result = (await conn.cdp.send('Target.createTarget', {
-            url,
-        }));
+        const result = await this.createPageTarget(conn, { url });
         const shortId = generateShortId();
         task.tabs[shortId] = result.targetId;
         task.currentTabId = shortId; // new tab becomes current
@@ -1929,6 +1933,7 @@ export class BrowserService {
             port,
             pid,
             electron: true,
+            browserType: profile.browser,
             targetFilter: profile.targetFilter,
             profileName: forkName,
             forkedFrom: profile.name,
@@ -1963,6 +1968,7 @@ export class BrowserService {
                     port: existingInfo.port,
                     pid: existingInfo.pid,
                     electron: effectiveProfile.electron,
+                    browserType: effectiveProfile.browser,
                     targetFilter: effectiveProfile.targetFilter,
                     tasks,
                     sessionCache: new Map(),
@@ -1994,6 +2000,7 @@ export class BrowserService {
                 port: conn.port,
                 pid: conn.pid,
                 electron: profile.electron,
+                browserType: profile.browser,
                 targetFilter: profile.targetFilter,
                 tasks: conn.pid === 0 ? this.loadTaskState(profile.name) : new Map(),
                 sessionCache: new Map(),
@@ -2007,6 +2014,7 @@ export class BrowserService {
                 port: conn.port,
                 pid: conn.pid,
                 electron: profile.electron,
+                browserType: profile.browser,
                 targetFilter: profile.targetFilter,
                 tasks: new Map(),
                 sessionCache: new Map(),
@@ -2028,6 +2036,7 @@ export class BrowserService {
                 port: 0,
                 pid: 0,
                 electron: profile.electron,
+                browserType: profile.browser,
                 targetFilter: profile.targetFilter,
                 tasks: this.loadTaskState(profile.name),
                 sessionCache: new Map(),
@@ -2045,6 +2054,7 @@ export class BrowserService {
                 port,
                 pid: 0,
                 electron: profile.electron,
+                browserType: profile.browser,
                 targetFilter: profile.targetFilter,
                 tasks: this.loadTaskState(profile.name),
                 sessionCache: new Map(),
@@ -2055,6 +2065,19 @@ export class BrowserService {
     async enableDomains(cdp) {
         await cdp.send('Target.setDiscoverTargets', { discover: true });
     }
+    /**
+     * The single path that opens a new CDP page/window target. It exists so the
+     * Arc guard lives in exactly one place: `Target.createTarget` crashes Arc
+     * (verified, PR #2778), so an Arc connection throws a clear, actionable error
+     * here instead of every call site re-checking. Every drivable Chromium-family
+     * browser goes straight through.
+     */
+    async createPageTarget(conn, params) {
+        if (conn.browserType === 'arc') {
+            throw arcNotDrivableError(conn.bareName ?? conn.profileName);
+        }
+        return (await conn.cdp.send('Target.createTarget', params));
+    }
     async getOrCreateWindow(conn) {
         // Already have a window for this profile?
         if (conn.windowId) {
@@ -2086,10 +2109,10 @@ export class BrowserService {
                 `Available page targets:\n${candidates || '  (none)'}`);
         }
         // First ever use - create window
-        const result = (await conn.cdp.send('Target.createTarget', {
+        const result = await this.createPageTarget(conn, {
             url: 'about:blank',
             newWindow: true,
-        }));
+        });
         conn.windowId = result.targetId;
         return result.targetId;
     }
@@ -2358,6 +2381,7 @@ export class BrowserService {
                 port,
                 pid: existingInfo?.pid ?? 0,
                 electron: profile.electron,
+                browserType: profile.browser,
                 targetFilter: resolved.targetFilter ?? profile.targetFilter,
                 profileName: dirName,
                 bareName: bare,

package/dist/lib/browser/types.d.ts

@@ -1,4 +1,4 @@
-export type BrowserType = 'chrome' | 'comet' | 'chromium' | 'brave' | 'edge' | 'custom';
+export type BrowserType = 'chrome' | 'comet' | 'chromium' | 'brave' | 'edge' | 'arc' | 'custom';
 /**
  * A single named endpoint preset within a profile. Lets one profile cover
  * the local + remote variants of the same app (e.g. an Electron app on this

package/dist/lib/daemon-webhooks.d.ts

@@ -23,7 +23,9 @@ export interface HostedReceiverFunnel {
 }
 /** One receiver this box hosts. */
 export interface HostedReceiverConfig {
-    /** Secrets bundle holding GITHUB_WEBHOOK_SECRET and/or LINEAR_WEBHOOK_SECRET. */
+    /** Secrets bundle holding GITHUB_WEBHOOK_SECRET, LINEAR_WEBHOOK_SECRET, and/or
+     *  SLACK_SIGNING_SECRET (a Slack receiver also carries SLACK_BOT_TOKEN when the
+     *  agent replies with the Slack Web API rather than `agents send`). */
     bundle: string;
     /** Local bind port (default 8787). */
     port?: number;

package/dist/lib/daemon-webhooks.js

@@ -112,8 +112,10 @@ export function resolveReceiverSecrets(bundle) {
         secrets.github = env.GITHUB_WEBHOOK_SECRET;
     if (env.LINEAR_WEBHOOK_SECRET)
         secrets.linear = env.LINEAR_WEBHOOK_SECRET;
-    if (!secrets.github && !secrets.linear) {
-        throw new Error(`bundle '${bundle}' has neither GITHUB_WEBHOOK_SECRET nor LINEAR_WEBHOOK_SECRET`);
+    if (env.SLACK_SIGNING_SECRET)
+        secrets.slack = env.SLACK_SIGNING_SECRET;
+    if (!secrets.github && !secrets.linear && !secrets.slack) {
+        throw new Error(`bundle '${bundle}' has none of GITHUB_WEBHOOK_SECRET, LINEAR_WEBHOOK_SECRET, or SLACK_SIGNING_SECRET`);
     }
     return secrets;
 }
@@ -176,12 +178,15 @@ export async function startHostedWebhookReceivers(opts) {
                 // Per-port durable delivery dedup so replays survive a daemon restart and
                 // two receivers on distinct ports never share a dedup ledger.
                 deliveryStore: createFileDeliveryStore(path.join(getRuntimeStateDir(), 'webhook', `deliveries-${port}.json`)),
-                onDelivery: (webhook, fired, handlers) => {
+                // Logged at MATCH time, before dispatch — a `run.command` handler can
+                // block on a shelled-out agent run for minutes, and that must never
+                // delay the log that says a delivery fired (RUSH-2722).
+                onMatch: (webhook, matchedJobNames, matchedHandlerNames) => {
                     const parts = [];
-                    if (fired.length)
-                        parts.push(`routines ${fired.map((f) => f.jobName).join(', ')}`);
-                    if (handlers.length)
-                        parts.push(`handlers ${handlers.map((h) => h.handlerName).join(', ')}`);
+                    if (matchedJobNames.length)
+                        parts.push(`routines ${matchedJobNames.join(', ')}`);
+                    if (matchedHandlerNames.length)
+                        parts.push(`handlers ${matchedHandlerNames.join(', ')}`);
                     log('INFO', `webhook ${webhook.source}:${webhook.event} ${parts.length ? `fired ${parts.join('; ')}` : 'no match'}`);
                 },
                 // The 202 ack means no HTTP status carries a settle failure — the daemon

package/dist/lib/device-config.js

@@ -96,7 +96,7 @@ export const CONFIG_KEYS = [
         scope: 'device',
         visibility: 'machine',
         type: 'string',
-        description: 'Browser profile `agents browser start` resolves to without --profile (set via `agents browser profiles set-default`).',
+        description: 'Browser profile `agents browser start` resolves to without --profile (set via `agents browser use`).',
     },
     {
         name: 'agents.max-concurrent',

package/dist/lib/observe-aliases.d.ts

@@ -5,13 +5,13 @@
  * remain the stores; these are doors that point at the right reader.
  *
  *   inbox    → feed                  (needs-you default)
- *   timeline → feed --filter updates (agent progress stream)
  *
  * `roster` was removed — use `agents sessions --active`.
+ * `timeline` was removed — use `agents feed --filter updates` (RUSH-2692).
  * `audit` is NOT an alias here — `agents audit` is already the tamper-evident
  * run-dispatch log. Ops trail = `agents events` (optionally `--audit`).
  */
-export type ObserveAlias = 'inbox' | 'timeline';
+export type ObserveAlias = 'inbox';
 export declare const OBSERVE_ALIASES: readonly ObserveAlias[];
 export interface ObserveExpandResult {
     /** argv for the real command (no program name): e.g. ['feed', '--filter', 'updates'] */

package/dist/lib/observe-aliases.js

@@ -5,13 +5,13 @@
  * remain the stores; these are doors that point at the right reader.
  *
  *   inbox    → feed                  (needs-you default)
- *   timeline → feed --filter updates (agent progress stream)
  *
  * `roster` was removed — use `agents sessions --active`.
+ * `timeline` was removed — use `agents feed --filter updates` (RUSH-2692).
  * `audit` is NOT an alias here — `agents audit` is already the tamper-evident
  * run-dispatch log. Ops trail = `agents events` (optionally `--audit`).
  */
-export const OBSERVE_ALIASES = ['inbox', 'timeline'];
+export const OBSERVE_ALIASES = ['inbox'];
 /** True when `rest` already carries a `--filter` / `--filter=…` flag. */
 export function hasFilterFlag(rest) {
     return rest.some((a) => a === '--filter' || a.startsWith('--filter='));
@@ -32,15 +32,6 @@ export function expandObserveAlias(alias, rest = []) {
                 argv: ['feed', ...tail],
                 note: 'agents inbox → agents feed (needs-you inbox)',
             };
-        case 'timeline': {
-            const argv = hasFilterFlag(tail)
-                ? ['feed', ...tail]
-                : ['feed', '--filter', 'updates', ...tail];
-            return {
-                argv,
-                note: 'agents timeline → agents feed --filter updates',
-            };
-        }
         default:
             return null;
     }

package/dist/lib/project-key.js

@@ -55,6 +55,13 @@ export function repoRootForCwd(dir, home = os.homedir()) {
     for (;;) {
         if (fs.existsSync(path.join(current, '.git')))
             return current === stop ? undefined : current;
+        // Never climb past $HOME: an ancestor of home (/tmp, /, ...) is not part of
+        // any project this cwd belongs to, and treating one as the repo root would
+        // let unrelated host state (e.g. a stray /tmp/.git) swallow every loose
+        // directory under home. Mirrors the shim's own home boundary — see
+        // shims.ts shimExecTail.
+        if (current === stop)
+            return undefined;
         const parent = path.dirname(current);
         if (parent === current)
             return undefined;

package/dist/lib/runner.js

@@ -26,7 +26,7 @@ import { resolveModel, buildReasoningFlags } from './models.js';
 import { createTimer, redactPrompt, emitRoutineEnd } from './feed/events.js';
 import { codexEditWritableRoots, codexPolicyArgs } from './codex-policy.js';
 import { applyAddDirs } from './add-dir.js';
-import { normalizeMode, resolveHeadlessMode, buildExecEnv, detectRateLimit, detectAuthFailure, isAuthFailureFromLog, authFailureReason, } from './exec.js';
+import { normalizeMode, resolveHeadlessMode, buildExecEnv, detectRateLimit, detectAuthFailure, isAuthFailureFromLog, authFailureReason, AGENT_COMMANDS, } from './exec.js';
 import { resolveActor } from './actor.js';
 import { loadTask as loadHostTask } from './hosts/tasks.js';
 import { reconcileTask as reconcileHostTask } from './hosts/reconcile.js';
@@ -39,7 +39,7 @@ import { resolveClaudeSetupToken } from './claude-account-token.js';
 import { getConfiguredRunStrategy, resolveRunVersion, resolveAccountVersion, rotationFailoverChain, readinessFromCandidate, formatNoHealthyAccountError, } from './accounting/rotate.js';
 import { readAuthHealth, isDeadVerdict } from './auth-health.js';
 import { machineId } from './machine-id.js';
-import { isSelfUpdatingAgent, ROUTINE_AGENT_COMMANDS as AGENT_COMMANDS, isAgentHardDeprecated, hardDeprecationError } from './agents.js';
+import { isSelfUpdatingAgent, ROUTINE_AGENT_COMMANDS, isAgentHardDeprecated, hardDeprecationError } from './agents.js';
 export class RoutineAlreadyRunningError extends Error {
     constructor(jobName, runId) {
         super(`Routine '${jobName}' already has a running execution (${runId})`);
@@ -416,6 +416,17 @@ async function runWithAttempt(config, trigger, run, wrapTerminal) {
 function terminateRoutineTree(pid) {
     if (!pid)
         return;
+    // Never take THIS process down. Both kills below are unconditional SIGKILLs,
+    // so a RunMeta naming the reaper's own pid -- a reused pid, a record written
+    // by the process now doing the reaping, or a hand-written fixture -- makes the
+    // reaper SIGKILL itself, and via `-pid` its whole process group with it. There
+    // is no recovery from that: the run is never finalized, and on the daemon it
+    // takes the scheduler down mid-sweep. daemon.ts:457 already refuses to evict an
+    // incumbent whose pid is `process.pid` for exactly this reason; the reap path
+    // needs the same guard. Skipping the kill still lets the caller finalize the
+    // run record, which is the part that matters.
+    if (pid === process.pid)
+        return;
     if (process.platform === 'win32') {
         killTree(pid);
         return;
@@ -503,7 +514,7 @@ export function buildJobCommand(config, resolvedPrompt, forwardAccount = true) {
             cmd.push('--account', config.account);
         return cmd;
     }
-    const template = AGENT_COMMANDS[agent];
+    const template = ROUTINE_AGENT_COMMANDS[agent];
     if (!template) {
         throw new Error(`Unsupported agent for daemon jobs: ${agent}`);
     }
@@ -610,7 +621,7 @@ export function buildJobCommand(config, resolvedPrompt, forwardAccount = true) {
     return cmd;
 }
 /**
- * Append --model and reasoning flags to a command being assembled.
+ * Append the agent's canonical model flag and reasoning flags to a command.
  *
  * Pass-through model resolution: validates against the installed (agent, version)
  * catalog when possible and writes a warning to stderr on miss, but never blocks.
@@ -621,15 +632,19 @@ function appendModelAndReasoning(cmd, config) {
     const agent = config.agent;
     const model = config.config?.model;
     if (model) {
+        const modelFlag = AGENT_COMMANDS[agent].modelFlag;
+        if (!modelFlag) {
+            throw new Error(`Agent ${agent} does not support routine model selection`);
+        }
         if (config.version) {
             const resolved = resolveModel(agent, config.version, model);
             if (resolved.warning) {
                 process.stderr.write(`[agents] ${resolved.warning}\n`);
             }
-            cmd.push('--model', resolved.forwarded);
+            cmd.push(modelFlag, resolved.forwarded);
         }
         else {
-            cmd.push('--model', model);
+            cmd.push(modelFlag, model);
         }
     }
     const reasoning = config.config?.reasoning;

package/dist/lib/secrets/bundles.d.ts

@@ -305,7 +305,7 @@ export declare function resolveBundleEnv(bundle: SecretsBundle, _opts?: ResolveB
  * path in index.ts can share it without a bundles↔index import cycle. See that
  * module for the full contract.
  */
-export { isHeadlessSecretsContext } from './headless.js';
+export { isHeadlessSecretsContext, isAgentInvocationContext } from './headless.js';
 /**
  * Read a bundle's metadata AND resolve its env in a single Touch ID prompt.
  *

package/dist/lib/secrets/bundles.js

@@ -1211,7 +1211,7 @@ export function resolveBundleEnv(bundle, _opts = {}) {
  * path in index.ts can share it without a bundles↔index import cycle. See that
  * module for the full contract.
  */
-export { isHeadlessSecretsContext } from './headless.js';
+export { isHeadlessSecretsContext, isAgentInvocationContext } from './headless.js';
 /**
  * Read a bundle's metadata AND resolve its env in a single Touch ID prompt.
  *