@phnx-labs/agents-cli 1.22.40 → 1.22.42

package/dist/commands/auth.js

@@ -0,0 +1,104 @@
+import chalk from 'chalk';
+import { setHelpSections } from '../lib/help.js';
+import { clearPrixSession, fetchWhoAmI, pollDeviceToken, PrixApiError, readPrixSession, resolvePrixToken, startDeviceAuthorization, writePrixSession, } from '../lib/prix-account.js';
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+/**
+ * `agents auth login` — RFC 8628 device-code flow against the already-shipped
+ * `/api/v1/auth/device/*` routes. If the live API rejects the request shape
+ * (a route this spec missed, or the endpoint moved), this fails loud with the
+ * `rush login` fallback rather than silently stubbing a fake session.
+ */
+export async function runAuthLogin() {
+    let authorization;
+    try {
+        authorization = await startDeviceAuthorization();
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const existing = resolvePrixToken();
+        if (existing?.source === 'rush') {
+            console.log(chalk.yellow(`Device login is unavailable right now (${message}), but you're already signed in via 'rush login'.`));
+            console.log("Run 'agents auth whoami' to confirm.");
+            return;
+        }
+        throw new Error(`Device login is unavailable right now (${message}). Run 'rush login' instead, then 'agents auth whoami' to confirm.`);
+    }
+    console.log(`To sign in, open:\n\n  ${chalk.cyan(authorization.verification_uri_complete)}\n`);
+    console.log(chalk.gray(`(code: ${authorization.user_code})`));
+    const deadline = Date.now() + authorization.expires_in * 1000;
+    let interval = Math.max(authorization.interval, 1) * 1000;
+    while (Date.now() < deadline) {
+        await sleep(interval);
+        const poll = await pollDeviceToken(authorization.device_code);
+        if (poll.status === 'pending')
+            continue;
+        if (poll.status === 'slow_down') {
+            interval += 1000;
+            continue;
+        }
+        if (poll.status === 'expired')
+            throw new Error('Login code expired. Run `agents auth login` again.');
+        if (poll.status === 'denied')
+            throw new Error('Login was denied.');
+        writePrixSession({
+            access_token: poll.access_token,
+            refresh_token: poll.refresh_token,
+            expires_at: poll.expires_in ? Date.now() + poll.expires_in * 1000 : undefined,
+            email: poll.user.email,
+            userId: poll.user.id,
+        });
+        console.log(chalk.green(`Signed in as ${poll.user.email}.`));
+        return;
+    }
+    throw new Error('Login code expired. Run `agents auth login` again.');
+}
+async function runAuthWhoami(json) {
+    const resolved = resolvePrixToken();
+    if (!resolved)
+        throw new Error("Not signed in. Run 'agents auth login' first.");
+    let who;
+    try {
+        who = await fetchWhoAmI(resolved.token);
+    }
+    catch (err) {
+        if (err instanceof PrixApiError && err.status === 401) {
+            throw new Error(`Signed-in token is no longer valid (${resolved.source === 'agents' ? "run 'agents auth login'" : "run 'rush login'"} again).`);
+        }
+        throw err;
+    }
+    if (json) {
+        console.log(JSON.stringify({ ...who, source: resolved.source }, null, 2));
+        return;
+    }
+    console.log(`${chalk.bold(who.email)}  ${chalk.gray(who.userId)}`);
+    console.log(chalk.gray(`signed in via ${resolved.source === 'agents' ? "'agents auth login'" : "'rush login' (shared session)"}`));
+}
+function runAuthLogout() {
+    const cleared = clearPrixSession();
+    const rushRemains = resolvePrixToken()?.source === 'rush';
+    if (!cleared && !readPrixSession()) {
+        console.log(chalk.gray('Not signed in via `agents auth login` — nothing to clear.'));
+    }
+    else {
+        console.log(chalk.green('Signed out.'));
+    }
+    if (rushRemains) {
+        console.log(chalk.gray("You're still signed in via `rush login` — `agents auth whoami` will use that session. Run `rush logout` to clear it too."));
+    }
+}
+export function registerAuthCommand(program) {
+    const auth = program.command('auth').description('Sign in to your Rush account (shared by `agents org` and paid tiers)');
+    auth.command('login').description('Sign in via the device-code flow').action(async () => runAuthLogin());
+    auth.command('whoami').description('Show the signed-in account').option('--json', 'Machine-readable output')
+        .action((o, command) => runAuthWhoami(!!(o.json || command.optsWithGlobals().json)));
+    auth.command('logout').description('Clear the local `agents auth login` session').action(() => runAuthLogout());
+    setHelpSections(auth, {
+        examples: `agents auth login
+agents auth whoami
+agents auth whoami --json
+agents auth logout`,
+        notes: "`agents auth login` writes its own session, separate from \`rush login\`'s \`~/.rush/user.yaml\` — \`agents auth logout\` never signs you out of \`rush\`. If you're already signed in via \`rush login\`, \`agents auth whoami\`/\`agents org\` use that session automatically; no separate login is required.",
+    });
+}

package/dist/commands/browser-sessions-picker.js

@@ -7,36 +7,16 @@
  * Reuses the same `itemPicker` + `buildPreview` primitives as the ordinary
  * session picker (`sessions-picker.ts`) — same search/filter/quit help, and the
  * preview pane for a linked task IS the canonical session digest, not a
- * second renderer.
+ * second renderer. Interactive routing and the browse loop live in
+ * `sessions-picker-factory.ts` (shared with the computer twin).
  */
 import chalk from 'chalk';
 import { itemPicker } from '../lib/picker.js';
-import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
+import { isPromptCancelled } from './utils.js';
 import { buildPreview } from './sessions-picker.js';
+import { createSessionsPickerCommand } from './sessions-picker-factory.js';
 import { runBrowserSessions, buildBrowserSessionRows, matchesBrowserSessionRow, openArtifact, formatBytes, } from '../lib/browser/sessions-list.js';
 import { formatRelativeTime } from '../lib/session/relative-time.js';
-/** True when the interactive picker should open instead of the printed table:
- *  a real TTY, no `--json`/`--open`, and `--no-interactive` not set. */
-export function shouldOpenInteractiveBrowserSessions(opts, isTTY) {
-    return opts.interactive !== false && !opts.json && opts.open === undefined && isTTY;
-}
-/**
- * Shared entry point for `agents browser sessions` and `agents sessions
- * --browser`. Replaces direct calls to `runBrowserSessions` at both call
- * sites so the interactive routing decision lives in one place.
- */
-export async function runBrowserSessionsCommand(opts) {
-    if (!shouldOpenInteractiveBrowserSessions(opts, isInteractiveTerminal())) {
-        runBrowserSessions({ profile: opts.profile, open: opts.open, json: opts.json });
-        return;
-    }
-    const rows = buildBrowserSessionRows(opts.profile);
-    if (rows.length === 0) {
-        console.log(`No browser captures found${opts.profile ? ` for profile "${opts.profile}"` : ''}.`);
-        return;
-    }
-    await browseAndOpen(rows);
-}
 const KIND_LABEL = {
     screenshot: 'shots',
     pdf: 'pdf',
@@ -116,44 +96,6 @@ function openAndReport(a) {
     if (!openArtifact(a.path))
         console.error(`Could not open ${a.path}`);
 }
-/** Task-level picker with a captures preview, then an artifact drill-down when
- *  a task holds more than one capture. Loops until the user quits (esc) so a
- *  capture-heavy task can be browsed and opened repeatedly in one session. */
-async function browseAndOpen(rows) {
-    for (;;) {
-        let picked;
-        try {
-            picked = await itemPicker({
-                message: 'Browser sessions:',
-                items: rows,
-                filter: (query) => (query.trim() ? rows.filter((r) => matchesBrowserSessionRow(r, query)) : rows),
-                labelFor: (row) => formatRowLabel(row),
-                buildPreview: (row) => buildRowPreview(row),
-                emptyMessage: 'No browser sessions match.',
-                enterHint: 'open capture',
-            });
-        }
-        catch (err) {
-            if (isPromptCancelled(err))
-                return;
-            throw err;
-        }
-        if (!picked)
-            return;
-        const row = picked.item;
-        if (row.artifacts.length === 0) {
-            console.log('No captures in this task yet.');
-            continue;
-        }
-        if (row.artifacts.length === 1) {
-            openAndReport(row.artifacts[0]);
-            continue;
-        }
-        const artifact = await pickArtifact(row);
-        if (artifact)
-            openAndReport(artifact);
-    }
-}
 /** Second-level picker over one row's captures, newest first. Enter opens the
  *  highlighted capture; esc returns to the task list. */
 async function pickArtifact(row) {
@@ -177,3 +119,41 @@ async function pickArtifact(row) {
         throw err;
     }
 }
+const browserSessionsPicker = createSessionsPickerCommand({
+    requireOpenUndefined: true,
+    runFlat: (opts) => runBrowserSessions({ profile: opts.profile, open: opts.open, json: opts.json }),
+    buildRows: (opts) => buildBrowserSessionRows(opts.profile),
+    emptyMessage: (opts) => `No browser captures found${opts.profile ? ` for profile "${opts.profile}"` : ''}.`,
+    message: 'Browser sessions:',
+    matches: matchesBrowserSessionRow,
+    labelFor: formatRowLabel,
+    buildPreview: buildRowPreview,
+    emptyFilterMessage: 'No browser sessions match.',
+    enterHint: 'open capture',
+    onOpen: async (row) => {
+        if (row.artifacts.length === 0) {
+            console.log('No captures in this task yet.');
+            return;
+        }
+        if (row.artifacts.length === 1) {
+            openAndReport(row.artifacts[0]);
+            return;
+        }
+        const artifact = await pickArtifact(row);
+        if (artifact)
+            openAndReport(artifact);
+    },
+});
+/** True when the interactive picker should open instead of the printed table:
+ *  a real TTY, no `--json`/`--open`, and `--no-interactive` not set. */
+export function shouldOpenInteractiveBrowserSessions(opts, isTTY) {
+    return browserSessionsPicker.shouldOpen(opts, isTTY);
+}
+/**
+ * Shared entry point for `agents browser sessions` and `agents sessions
+ * --browser`. Replaces direct calls to `runBrowserSessions` at both call
+ * sites so the interactive routing decision lives in one place.
+ */
+export async function runBrowserSessionsCommand(opts) {
+    await browserSessionsPicker.run(opts);
+}

package/dist/commands/browser.d.ts

@@ -1,3 +1,18 @@
 import { Command } from 'commander';
+import { type BrowserProfile } from '../lib/browser/profiles.js';
+import { listInstalledBrowsers } from '../lib/browser/chrome.js';
 export declare function registerBrowserCommand(program: Command): void;
 export declare function registerBrowserSubcommands(program: Command): void;
+interface BrowserUseOptions {
+    unset?: boolean;
+}
+interface BrowserUseChoice {
+    name: string;
+    value: {
+        name: string;
+        installed?: ReturnType<typeof listInstalledBrowsers>[number];
+    };
+}
+export declare function buildBrowserUseChoices(profiles: BrowserProfile[], installed: ReturnType<typeof listInstalledBrowsers>, current?: string): BrowserUseChoice[];
+export declare function runBrowserUse(name: string | undefined, opts: BrowserUseOptions, interactive?: boolean): Promise<boolean>;
+export {};

package/dist/commands/browser.js

@@ -1,12 +1,12 @@
 import chalk from 'chalk';
 import * as fs from 'fs';
 import * as path from 'path';
-import { listProfiles, getProfile, createProfile, deleteProfile, ensureDefaultBrowserProfile, getConfiguredDefaultProfileName, DEFAULT_BROWSER_PROFILE_NAME, getProfileRuntimeDir, extractConfiguredPort, findFreeProfilePort, getEndpointPresets, listProfilesWithScope, formatProfilesTable, } from '../lib/browser/profiles.js';
+import { listProfiles, getProfile, createProfile, deleteProfile, getConfiguredDefaultProfileName, resolveProfileRef, resolveProfileRefForStart, getProfileRuntimeDir, extractConfiguredPort, findFreeProfilePort, getEndpointPresets, listProfilesWithScope, formatProfilesTable, } from '../lib/browser/profiles.js';
 import { resolveActor } from '../lib/actor.js';
 import { loginsForProfile, profilesLoggedInto, serviceForUrl, loginsWithAccountsForProfile, accountsForProfile, credKeysForService, AUTH_SIGNATURES, } from '../lib/browser/login-detection.js';
 import { parseSecretRef } from '../lib/browser/secret-ref.js';
 import { readAndResolveBundleEnv, bundleExists, readBundle, describeBundle } from '../lib/secrets/bundles.js';
-import { findBrowserPath, getPortOccupant, isLauncherScript } from '../lib/browser/chrome.js';
+import { findBrowserPath, getPortOccupant, isLauncherScript, listInstalledBrowsers } from '../lib/browser/chrome.js';
 import { listProfileCacheDirs, removeProfileCache, listAllProfileSnapshots, buildProfilePrunePlan, pruneProfiles, PRUNE_REASON_TEXT, } from '../lib/browser/runtime-state.js';
 import { DEFAULT_VIEWPORT } from '../lib/browser/devices.js';
 import { runBrowserSessionsCommand } from './browser-sessions-picker.js';
@@ -49,7 +49,7 @@ const TASK_OPTION_DESC = 'Task name (defaults to $AGENTS_BROWSER_TASK, else the
 // instead of an alphabetical dump. Everything not listed falls into a
 // trailing "Other commands" section automatically.
 const BROWSER_HELP_GROUPS = [
-    { title: 'Session lifecycle', names: ['start', 'done', 'status', 'gc'] },
+    { title: 'Session lifecycle', names: ['use', 'start', 'done', 'status', 'gc'] },
     { title: 'Fast action loop', names: ['stream'] },
     {
         title: 'Drive the page',
@@ -105,22 +105,104 @@ export function registerBrowserCommand(program) {
       Most agent workflows should use the 'browser' skill instead of raw subcommands.
       The skill wraps profile selection, snapshotting, and tunneling.
 
-      Browser support: Chromium-family only (Chrome, Comet, Chromium, Brave, Edge).
+      Browser support: Chromium-family only (Chrome, Comet, Chromium, Brave, Edge, Arc).
       Safari and Firefox are not supported — they don't speak the Chrome DevTools
       Protocol the way agents browser expects. On Windows, Edge is the default
       because it's preinstalled. On macOS and Linux, Chrome is preferred when
       installed; otherwise the first Chromium-family binary on disk wins.
     `,
     });
+    registerBrowserUseCommand(browser);
     registerProfilesCommands(browser);
     registerTaskCommands(browser);
     registerCommandGroups(browser, BROWSER_HELP_GROUPS);
 }
 export function registerBrowserSubcommands(program) {
+    registerBrowserUseCommand(program);
     registerProfilesCommands(program);
     registerTaskCommands(program);
     registerCommandGroups(program, BROWSER_HELP_GROUPS);
 }
+export function buildBrowserUseChoices(profiles, installed, current) {
+    const choices = profiles.map((profile) => ({
+        name: `${profile.name}${profile.name === current ? ' (current)' : ''}`,
+        value: { name: profile.name },
+    }));
+    const known = new Set(profiles.map((profile) => profile.name));
+    for (const browser of installed) {
+        const name = `${browser.browserType}-local`;
+        if (!known.has(name)) {
+            choices.push({ name: `${name} (installed ${browser.browserType})`, value: { name, installed: browser } });
+        }
+    }
+    return choices;
+}
+export async function runBrowserUse(name, opts, interactive = isInteractiveTerminal()) {
+    if (opts.unset || name === 'auto') {
+        unsetConfigValue('browser.profile');
+        console.log('Default browser profile cleared. `agents browser start` will auto-detect an installed Chromium-family browser.');
+        return true;
+    }
+    let selectedName = name;
+    if (!selectedName) {
+        const current = getConfiguredDefaultProfileName();
+        if (!interactive) {
+            console.log(current
+                ? `Default browser profile (this machine): ${current}`
+                : 'Default browser profile (this machine): auto-detect');
+            console.log('Usage: agents browser use <name>  (or --unset)');
+            return true;
+        }
+        const choices = buildBrowserUseChoices(await listProfiles(), listInstalledBrowsers(), current);
+        if (choices.length === 0) {
+            console.error('No configured profiles or supported installed browsers found.');
+            console.error('Create one with: agents browser profiles create <name> --browser chrome');
+            return false;
+        }
+        const { select } = await import('@inquirer/prompts');
+        const selected = await select({ message: 'Select default browser profile:', choices });
+        selectedName = selected.name;
+        if (selected.installed) {
+            const freePort = await findFreeProfilePort();
+            await createProfile({
+                name: selected.name,
+                description: `Seeded ${selected.installed.browserType} profile`,
+                browser: selected.installed.browserType,
+                binary: selected.installed.binary,
+                endpoints: [`cdp://127.0.0.1:${freePort}`],
+                viewport: { width: DEFAULT_VIEWPORT.width, height: DEFAULT_VIEWPORT.height },
+            });
+        }
+    }
+    const target = await getProfile(selectedName);
+    if (!target) {
+        console.error(`Profile "${selectedName}" not found.`);
+        const all = await listProfiles();
+        if (all.length > 0)
+            console.error(`Available profiles: ${all.map((profile) => profile.name).join(', ')}`);
+        return false;
+    }
+    setConfigValue('browser.profile', selectedName);
+    const endpoint = Object.values(getEndpointPresets(target))[0]?.target ?? '';
+    console.log(`Default browser profile (this machine) is now "${selectedName}" (${target.browser}${endpoint ? `, ${endpoint}` : ''}).`);
+    console.log('Bare `agents browser start` and `--profile default` will use it.');
+    return true;
+}
+function configureBrowserUseCommand(command, deprecated = false) {
+    command
+        .description('Pick the profile `agents browser start` uses when no --profile is passed. No name opens a picker on a TTY or prints the current default headlessly.')
+        .option('--unset', 'Clear the configured default (revert to auto-detecting an installed browser)')
+        .action(async (name, opts) => {
+        if (deprecated) {
+            console.warn(chalk.yellow('Deprecation: `agents browser profiles set-default` is replaced by `agents browser use`.'));
+        }
+        if (!await runBrowserUse(name, opts))
+            process.exitCode = 1;
+    });
+}
+function registerBrowserUseCommand(browser) {
+    configureBrowserUseCommand(browser.command('use [name]'));
+}
 /**
  * Whether a profile's secrets bundle holds login creds for `service`
  * (`<PREFIX>_USERNAME` + `<PREFIX>_PASSWORD`). Reads bundle METADATA only (key
@@ -174,43 +256,36 @@ function registerProfilesCommands(browser) {
         for (const line of formatProfilesTable(scoped, configuredDefault))
             console.log(line);
     });
-    const browserProfileDeprecation = chalk.yellow('Deprecation: `agents browser profiles set-default` is replaced by `agents config set browser.profile <name>`.');
     profiles
-        .command('set-default [name]')
-        .description('Set the profile `agents browser start` uses when no --profile is passed (also re-points an explicit `--profile default`). Device-local — each machine has its own. No name prints the current value.')
-        .option('--unset', 'Clear the configured default (revert to auto-detecting an installed browser)')
-        .action(async (name, opts) => {
-        console.warn(browserProfileDeprecation);
-        if (opts.unset) {
-            unsetConfigValue('browser.profile');
-            console.log('Default browser profile cleared. `agents browser start` will auto-detect an installed Chromium-family browser.');
-            return;
+        .command('seed')
+        .description('Create a machine-local profile for each installed browser (named <browser>-local), so you can pick or use one instead of hand-crafting each. Idempotent — existing profiles are left untouched.')
+        .action(async () => {
+        const installed = listInstalledBrowsers();
+        if (installed.length === 0) {
+            console.error('No supported browser found to seed a profile for.');
+            process.exit(1);
         }
-        if (!name) {
-            const current = getConfiguredDefaultProfileName();
-            if (current) {
-                console.log(`Default browser profile (this machine): ${current}`);
-            }
-            else {
-                console.log('No default browser profile set. `agents browser start` auto-detects an installed Chromium-family browser.');
-                console.log('Set one with: agents config set browser.profile <name>');
+        for (const { browserType, binary } of installed) {
+            const name = `${browserType}-local`;
+            if (await getProfile(name)) {
+                console.log(`= ${name} (already exists)`);
+                continue;
             }
-            return;
-        }
-        const target = await getProfile(name);
-        if (!target) {
-            console.error(`Profile "${name}" not found.`);
-            const all = await listProfiles();
-            if (all.length > 0)
-                console.error(`Available profiles: ${all.map((p) => p.name).join(', ')}`);
-            process.exit(1);
+            const freePort = await findFreeProfilePort();
+            await createProfile({
+                name,
+                description: `Seeded ${browserType} profile`,
+                browser: browserType,
+                binary,
+                endpoints: [`cdp://127.0.0.1:${freePort}`],
+                viewport: { width: DEFAULT_VIEWPORT.width, height: DEFAULT_VIEWPORT.height },
+            });
+            console.log(`+ ${name} (${browserType})`);
         }
-        setConfigValue('browser.profile', name);
-        const eps = getEndpointPresets(target);
-        const epStr = Object.values(eps)[0]?.target ?? '';
-        console.log(`Default browser profile (this machine) is now "${name}" (${target.browser}${epStr ? `, ${epStr}` : ''}).`);
-        console.log('Bare `agents browser start` and `--profile default` will use it.');
+        console.log('Pick your default with: agents browser use <name>');
     });
+    configureBrowserUseCommand(profiles.command('use [name]'));
+    configureBrowserUseCommand(profiles.command('set-default [name]', { hidden: true }), true);
     profiles
         .command('logins')
         .description('Show which login-gated services each profile has a live session for, the account signed in, and whether login creds are available in the profile\'s secrets bundle (reads cookie/username presence only, never decrypts).')
@@ -239,7 +314,7 @@ function registerProfilesCommands(browser) {
             }
         }
     });
-    const VALID_BROWSERS = ['chrome', 'comet', 'chromium', 'brave', 'edge', 'custom'];
+    const VALID_BROWSERS = ['chrome', 'comet', 'chromium', 'brave', 'edge', 'arc', 'custom'];
     profiles
         .command('create <name>')
         .description('Create a new browser profile (machine-local unless --fleet)')
@@ -439,7 +514,7 @@ function registerProfilesCommands(browser) {
             (removed > 0 ? ` (and ${removed} cache dir${removed === 1 ? '' : 's'})` : ''));
         if (getConfiguredDefaultProfileName() === name) {
             console.error(`warning: "${name}" was this machine's default browser profile; ` +
-                `\`agents browser start\` will auto-detect until you run: agents config set browser.profile <name>`);
+                `\`agents browser start\` will auto-detect until you run: agents browser use <name>`);
         }
     });
     profiles
@@ -493,7 +568,7 @@ function registerProfilesCommands(browser) {
       agents browser profiles prune
 
       # Make one the machine's default for a bare \`agents browser start\`
-      agents config set browser.profile work
+      agents browser use work
     `,
         notes: `
       Profiles are machine-local by default. A profile pins an OS-specific binary
@@ -501,12 +576,12 @@ function registerProfilesCommands(browser) {
       other machine — pass --fleet only when the profile really is fleet config.
 
       In \`list\`, the \`*\` marker means "this machine's configured default"
-      (\`agents browser start\` with no --profile). It is NOT the same thing as the
-      profile NAMED \`default\`, which is the auto-detected one; they are often
-      different profiles.
+      (\`agents browser start\` with no --profile). The auto-detected profile is
+      named \`auto-chrome\`; \`default\` is only an ALIAS for whichever profile
+      this machine is configured to use, resolved the same way by every command.
 
       \`prune\` never removes a profile that is in use, the configured default, the
-      auto \`default\`, or (without --fleet) a fleet-synced one.
+      auto-detected \`auto-chrome\`, or (without --fleet) a fleet-synced one.
     `,
     });
     profiles
@@ -748,7 +823,7 @@ function registerTaskCommands(browser) {
     });
     browser
         .command('start')
-        .description('Start a browser task. Pass --profile <name>; omit to use your configured default (`agents config set browser.profile <name>`), else auto-pick an installed Chromium-family browser. Page verbs (navigate/screenshot/…) create a task implicitly when none exists — start is for --profile/--url/--record/--title.')
+        .description('Start a browser task. Pass --profile <name>; omit to use your configured default (`agents browser use <name>`), else auto-pick an installed Chromium-family browser. Page verbs (navigate/screenshot/…) create a task implicitly when none exists — start is for --profile/--url/--record/--title.')
         .option('-p, --profile <name>', 'Browser profile to use (omit to use the configured default, else auto-pick an installed Chromium-family browser)')
         .option(TASK_OPTION_FLAG, 'Task name (auto-generated short id if omitted)')
         .option('--title <label>', 'Human label shown in `browser status` (defaults to first navigated host)')
@@ -771,33 +846,20 @@ function registerTaskCommands(browser) {
             console.error(err instanceof Error ? err.message : String(err));
             process.exit(1);
         }
-        let profileName = opts.profile;
-        if (!profileName) {
-            try {
-                const detected = await ensureDefaultBrowserProfile();
-                profileName = detected.name;
-            }
-            catch (err) {
-                console.error(err instanceof Error ? err.message : String(err));
-                process.exit(1);
-            }
+        // One resolution order for every command (RUSH-2709): `--profile default`
+        // means the same profile here as it does in stop / status / navigate.
+        // `start` is the one command that LAUNCHES, so its implicit path goes
+        // through ensureDefaultBrowserProfile, which additionally verifies the
+        // resolved default can launch on THIS machine and regenerates it when it
+        // can't (the "Custom binary not found" repair) — a filter-only command
+        // must not warn or rewrite a profile, so that check lives only here.
+        let profileName;
+        try {
+            profileName = await resolveProfileRefForStart(opts.profile);
         }
-        else if (profileName === DEFAULT_BROWSER_PROFILE_NAME) {
-            // Explicit `--profile default` honors the configured default too, so an
-            // agent that hardcodes the reserved `default` name still lands on the
-            // user's chosen profile (e.g. their logged-in Comet) rather than a
-            // literal `default` (which auto-detects Chrome). Narrowly scoped: only
-            // the reserved name, only here in `start`.
-            const configured = getConfiguredDefaultProfileName();
-            if (configured && configured !== DEFAULT_BROWSER_PROFILE_NAME) {
-                const target = await getProfile(configured);
-                if (target) {
-                    profileName = target.name;
-                }
-                else {
-                    console.error(`warning: configured default profile "${configured}" not found; using "${DEFAULT_BROWSER_PROFILE_NAME}".`);
-                }
-            }
+        catch (err) {
+            console.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
         }
         // Pre-check the profile locally so we fail fast with a helpful error
         // instead of round-tripping a generic "Profile not found" through the daemon.
@@ -808,7 +870,7 @@ function registerTaskCommands(browser) {
             if (all.length > 0) {
                 console.error(`Available profiles: ${all.map((p) => p.name).join(', ')}`);
             }
-            console.error(`Create one with: agents browser profiles create ${profileName} --browser <chrome|comet|chromium|brave|edge|custom>`);
+            console.error(`Create one with: agents browser profiles create ${profileName} --browser <chrome|comet|chromium|brave|edge|arc|custom>`);
             process.exit(1);
         }
         // Pre-check the endpoint name too — same fail-fast rationale.
@@ -926,15 +988,16 @@ function registerTaskCommands(browser) {
         .option('-p, --profile <name>', 'Detach the whole profile (incl. composite "name@endpoint") instead of stopping a single task')
         .action(async (opts) => {
         if (opts.profile) {
+            const profile = (await resolveProfileRef(opts.profile)) ?? opts.profile;
             const response = await sendIPCRequest({
                 action: 'stop',
-                profile: opts.profile,
+                profile,
             });
             if (!response.ok) {
                 console.error(response.error);
                 process.exit(1);
             }
-            console.log(`Stopped profile: ${opts.profile}`);
+            console.log(`Stopped profile: ${profile}`);
             return;
         }
         const task = resolveTaskName(opts);
@@ -1008,7 +1071,7 @@ function registerTaskCommands(browser) {
             action: 'navigate',
             task,
             url,
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             console.error(response.error);
@@ -1033,7 +1096,7 @@ function registerTaskCommands(browser) {
             action: 'tab-add',
             task,
             url: opts.url,
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             console.error(response.error);
@@ -1294,7 +1357,7 @@ function registerTaskCommands(browser) {
         try {
             response = await sendIPCRequest({
                 action: 'status',
-                profile: opts.profile,
+                profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
             }, { autoStartDaemon: false });
         }
         catch (err) {
@@ -1383,7 +1446,11 @@ function registerTaskCommands(browser) {
                 // pid 0 means the daemon attached to a browser we didn't launch — no
                 // tracked pid. Render it as "attached" rather than the literal 0.
                 const pidLabel = profile.pid ? `pid ${profile.pid}` : 'attached';
-                console.log(`\n${profile.name} (${portLabel}, ${pidLabel})`);
+                // `profile.name` is the BARE profile; the endpoint is its own field,
+                // so the row reads `comet-local (endpoint: endpoint-0, port …)`
+                // instead of the raw `comet-local@endpoint-0` key (RUSH-2709).
+                const endpointLabel = profile.endpoint ? `endpoint: ${profile.endpoint}, ` : '';
+                console.log(`\n${profile.name} (${endpointLabel}${portLabel}, ${pidLabel})`);
                 if (profile.tasks.length === 0) {
                     console.log('  No active tasks');
                 }
@@ -1418,7 +1485,7 @@ function registerTaskCommands(browser) {
         .action(async (opts) => {
         const response = await sendIPCRequest({
             action: 'status',
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             if (opts.json) {

package/dist/commands/computer-actions.d.ts

@@ -1,5 +1,5 @@
 import { Command } from 'commander';
-import { type ComputerClient, type RPCResponse } from '../lib/computer-rpc.js';
+import { type ComputerClient, type RPCResponse } from '../lib/computer/computer-rpc.js';
 export { emitComputerAction, pickTarget, resolveTargetPidDecision, type AppInfo } from '../lib/computer/actions.js';
 export declare function parseXY(s: string, flag: string): {
     x: number;

package/dist/commands/computer-actions.js

@@ -9,7 +9,7 @@
 import { execFileSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
-import { openComputerClient, describeTransport, } from '../lib/computer-rpc.js';
+import { openComputerClient, describeTransport, } from '../lib/computer/computer-rpc.js';
 import { emitComputerAction, resolveTargetPidDecision } from '../lib/computer/actions.js';
 export { emitComputerAction, pickTarget, resolveTargetPidDecision } from '../lib/computer/actions.js';
 // Pure target picker — exercised by unit tests. Precedence: explicit --pid,