@phnx-labs/agents-cli 1.22.41 → 1.22.42

package/dist/commands/auth.js

@@ -0,0 +1,104 @@
+import chalk from 'chalk';
+import { setHelpSections } from '../lib/help.js';
+import { clearPrixSession, fetchWhoAmI, pollDeviceToken, PrixApiError, readPrixSession, resolvePrixToken, startDeviceAuthorization, writePrixSession, } from '../lib/prix-account.js';
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+/**
+ * `agents auth login` — RFC 8628 device-code flow against the already-shipped
+ * `/api/v1/auth/device/*` routes. If the live API rejects the request shape
+ * (a route this spec missed, or the endpoint moved), this fails loud with the
+ * `rush login` fallback rather than silently stubbing a fake session.
+ */
+export async function runAuthLogin() {
+    let authorization;
+    try {
+        authorization = await startDeviceAuthorization();
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const existing = resolvePrixToken();
+        if (existing?.source === 'rush') {
+            console.log(chalk.yellow(`Device login is unavailable right now (${message}), but you're already signed in via 'rush login'.`));
+            console.log("Run 'agents auth whoami' to confirm.");
+            return;
+        }
+        throw new Error(`Device login is unavailable right now (${message}). Run 'rush login' instead, then 'agents auth whoami' to confirm.`);
+    }
+    console.log(`To sign in, open:\n\n  ${chalk.cyan(authorization.verification_uri_complete)}\n`);
+    console.log(chalk.gray(`(code: ${authorization.user_code})`));
+    const deadline = Date.now() + authorization.expires_in * 1000;
+    let interval = Math.max(authorization.interval, 1) * 1000;
+    while (Date.now() < deadline) {
+        await sleep(interval);
+        const poll = await pollDeviceToken(authorization.device_code);
+        if (poll.status === 'pending')
+            continue;
+        if (poll.status === 'slow_down') {
+            interval += 1000;
+            continue;
+        }
+        if (poll.status === 'expired')
+            throw new Error('Login code expired. Run `agents auth login` again.');
+        if (poll.status === 'denied')
+            throw new Error('Login was denied.');
+        writePrixSession({
+            access_token: poll.access_token,
+            refresh_token: poll.refresh_token,
+            expires_at: poll.expires_in ? Date.now() + poll.expires_in * 1000 : undefined,
+            email: poll.user.email,
+            userId: poll.user.id,
+        });
+        console.log(chalk.green(`Signed in as ${poll.user.email}.`));
+        return;
+    }
+    throw new Error('Login code expired. Run `agents auth login` again.');
+}
+async function runAuthWhoami(json) {
+    const resolved = resolvePrixToken();
+    if (!resolved)
+        throw new Error("Not signed in. Run 'agents auth login' first.");
+    let who;
+    try {
+        who = await fetchWhoAmI(resolved.token);
+    }
+    catch (err) {
+        if (err instanceof PrixApiError && err.status === 401) {
+            throw new Error(`Signed-in token is no longer valid (${resolved.source === 'agents' ? "run 'agents auth login'" : "run 'rush login'"} again).`);
+        }
+        throw err;
+    }
+    if (json) {
+        console.log(JSON.stringify({ ...who, source: resolved.source }, null, 2));
+        return;
+    }
+    console.log(`${chalk.bold(who.email)}  ${chalk.gray(who.userId)}`);
+    console.log(chalk.gray(`signed in via ${resolved.source === 'agents' ? "'agents auth login'" : "'rush login' (shared session)"}`));
+}
+function runAuthLogout() {
+    const cleared = clearPrixSession();
+    const rushRemains = resolvePrixToken()?.source === 'rush';
+    if (!cleared && !readPrixSession()) {
+        console.log(chalk.gray('Not signed in via `agents auth login` — nothing to clear.'));
+    }
+    else {
+        console.log(chalk.green('Signed out.'));
+    }
+    if (rushRemains) {
+        console.log(chalk.gray("You're still signed in via `rush login` — `agents auth whoami` will use that session. Run `rush logout` to clear it too."));
+    }
+}
+export function registerAuthCommand(program) {
+    const auth = program.command('auth').description('Sign in to your Rush account (shared by `agents org` and paid tiers)');
+    auth.command('login').description('Sign in via the device-code flow').action(async () => runAuthLogin());
+    auth.command('whoami').description('Show the signed-in account').option('--json', 'Machine-readable output')
+        .action((o, command) => runAuthWhoami(!!(o.json || command.optsWithGlobals().json)));
+    auth.command('logout').description('Clear the local `agents auth login` session').action(() => runAuthLogout());
+    setHelpSections(auth, {
+        examples: `agents auth login
+agents auth whoami
+agents auth whoami --json
+agents auth logout`,
+        notes: "`agents auth login` writes its own session, separate from \`rush login\`'s \`~/.rush/user.yaml\` — \`agents auth logout\` never signs you out of \`rush\`. If you're already signed in via \`rush login\`, \`agents auth whoami\`/\`agents org\` use that session automatically; no separate login is required.",
+    });
+}

package/dist/commands/browser-sessions-picker.js

@@ -7,36 +7,16 @@
  * Reuses the same `itemPicker` + `buildPreview` primitives as the ordinary
  * session picker (`sessions-picker.ts`) — same search/filter/quit help, and the
  * preview pane for a linked task IS the canonical session digest, not a
- * second renderer.
+ * second renderer. Interactive routing and the browse loop live in
+ * `sessions-picker-factory.ts` (shared with the computer twin).
  */
 import chalk from 'chalk';
 import { itemPicker } from '../lib/picker.js';
-import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
+import { isPromptCancelled } from './utils.js';
 import { buildPreview } from './sessions-picker.js';
+import { createSessionsPickerCommand } from './sessions-picker-factory.js';
 import { runBrowserSessions, buildBrowserSessionRows, matchesBrowserSessionRow, openArtifact, formatBytes, } from '../lib/browser/sessions-list.js';
 import { formatRelativeTime } from '../lib/session/relative-time.js';
-/** True when the interactive picker should open instead of the printed table:
- *  a real TTY, no `--json`/`--open`, and `--no-interactive` not set. */
-export function shouldOpenInteractiveBrowserSessions(opts, isTTY) {
-    return opts.interactive !== false && !opts.json && opts.open === undefined && isTTY;
-}
-/**
- * Shared entry point for `agents browser sessions` and `agents sessions
- * --browser`. Replaces direct calls to `runBrowserSessions` at both call
- * sites so the interactive routing decision lives in one place.
- */
-export async function runBrowserSessionsCommand(opts) {
-    if (!shouldOpenInteractiveBrowserSessions(opts, isInteractiveTerminal())) {
-        runBrowserSessions({ profile: opts.profile, open: opts.open, json: opts.json });
-        return;
-    }
-    const rows = buildBrowserSessionRows(opts.profile);
-    if (rows.length === 0) {
-        console.log(`No browser captures found${opts.profile ? ` for profile "${opts.profile}"` : ''}.`);
-        return;
-    }
-    await browseAndOpen(rows);
-}
 const KIND_LABEL = {
     screenshot: 'shots',
     pdf: 'pdf',
@@ -116,44 +96,6 @@ function openAndReport(a) {
     if (!openArtifact(a.path))
         console.error(`Could not open ${a.path}`);
 }
-/** Task-level picker with a captures preview, then an artifact drill-down when
- *  a task holds more than one capture. Loops until the user quits (esc) so a
- *  capture-heavy task can be browsed and opened repeatedly in one session. */
-async function browseAndOpen(rows) {
-    for (;;) {
-        let picked;
-        try {
-            picked = await itemPicker({
-                message: 'Browser sessions:',
-                items: rows,
-                filter: (query) => (query.trim() ? rows.filter((r) => matchesBrowserSessionRow(r, query)) : rows),
-                labelFor: (row) => formatRowLabel(row),
-                buildPreview: (row) => buildRowPreview(row),
-                emptyMessage: 'No browser sessions match.',
-                enterHint: 'open capture',
-            });
-        }
-        catch (err) {
-            if (isPromptCancelled(err))
-                return;
-            throw err;
-        }
-        if (!picked)
-            return;
-        const row = picked.item;
-        if (row.artifacts.length === 0) {
-            console.log('No captures in this task yet.');
-            continue;
-        }
-        if (row.artifacts.length === 1) {
-            openAndReport(row.artifacts[0]);
-            continue;
-        }
-        const artifact = await pickArtifact(row);
-        if (artifact)
-            openAndReport(artifact);
-    }
-}
 /** Second-level picker over one row's captures, newest first. Enter opens the
  *  highlighted capture; esc returns to the task list. */
 async function pickArtifact(row) {
@@ -177,3 +119,41 @@ async function pickArtifact(row) {
         throw err;
     }
 }
+const browserSessionsPicker = createSessionsPickerCommand({
+    requireOpenUndefined: true,
+    runFlat: (opts) => runBrowserSessions({ profile: opts.profile, open: opts.open, json: opts.json }),
+    buildRows: (opts) => buildBrowserSessionRows(opts.profile),
+    emptyMessage: (opts) => `No browser captures found${opts.profile ? ` for profile "${opts.profile}"` : ''}.`,
+    message: 'Browser sessions:',
+    matches: matchesBrowserSessionRow,
+    labelFor: formatRowLabel,
+    buildPreview: buildRowPreview,
+    emptyFilterMessage: 'No browser sessions match.',
+    enterHint: 'open capture',
+    onOpen: async (row) => {
+        if (row.artifacts.length === 0) {
+            console.log('No captures in this task yet.');
+            return;
+        }
+        if (row.artifacts.length === 1) {
+            openAndReport(row.artifacts[0]);
+            return;
+        }
+        const artifact = await pickArtifact(row);
+        if (artifact)
+            openAndReport(artifact);
+    },
+});
+/** True when the interactive picker should open instead of the printed table:
+ *  a real TTY, no `--json`/`--open`, and `--no-interactive` not set. */
+export function shouldOpenInteractiveBrowserSessions(opts, isTTY) {
+    return browserSessionsPicker.shouldOpen(opts, isTTY);
+}
+/**
+ * Shared entry point for `agents browser sessions` and `agents sessions
+ * --browser`. Replaces direct calls to `runBrowserSessions` at both call
+ * sites so the interactive routing decision lives in one place.
+ */
+export async function runBrowserSessionsCommand(opts) {
+    await browserSessionsPicker.run(opts);
+}

package/dist/commands/browser.js

@@ -1,7 +1,7 @@
 import chalk from 'chalk';
 import * as fs from 'fs';
 import * as path from 'path';
-import { listProfiles, getProfile, createProfile, deleteProfile, ensureDefaultBrowserProfile, getConfiguredDefaultProfileName, DEFAULT_BROWSER_PROFILE_NAME, getProfileRuntimeDir, extractConfiguredPort, findFreeProfilePort, getEndpointPresets, listProfilesWithScope, formatProfilesTable, } from '../lib/browser/profiles.js';
+import { listProfiles, getProfile, createProfile, deleteProfile, getConfiguredDefaultProfileName, resolveProfileRef, resolveProfileRefForStart, getProfileRuntimeDir, extractConfiguredPort, findFreeProfilePort, getEndpointPresets, listProfilesWithScope, formatProfilesTable, } from '../lib/browser/profiles.js';
 import { resolveActor } from '../lib/actor.js';
 import { loginsForProfile, profilesLoggedInto, serviceForUrl, loginsWithAccountsForProfile, accountsForProfile, credKeysForService, AUTH_SIGNATURES, } from '../lib/browser/login-detection.js';
 import { parseSecretRef } from '../lib/browser/secret-ref.js';
@@ -576,12 +576,12 @@ function registerProfilesCommands(browser) {
       other machine — pass --fleet only when the profile really is fleet config.
 
       In \`list\`, the \`*\` marker means "this machine's configured default"
-      (\`agents browser start\` with no --profile). It is NOT the same thing as the
-      profile NAMED \`default\`, which is the auto-detected one; they are often
-      different profiles.
+      (\`agents browser start\` with no --profile). The auto-detected profile is
+      named \`auto-chrome\`; \`default\` is only an ALIAS for whichever profile
+      this machine is configured to use, resolved the same way by every command.
 
       \`prune\` never removes a profile that is in use, the configured default, the
-      auto \`default\`, or (without --fleet) a fleet-synced one.
+      auto-detected \`auto-chrome\`, or (without --fleet) a fleet-synced one.
     `,
     });
     profiles
@@ -846,33 +846,20 @@ function registerTaskCommands(browser) {
             console.error(err instanceof Error ? err.message : String(err));
             process.exit(1);
         }
-        let profileName = opts.profile;
-        if (!profileName) {
-            try {
-                const detected = await ensureDefaultBrowserProfile();
-                profileName = detected.name;
-            }
-            catch (err) {
-                console.error(err instanceof Error ? err.message : String(err));
-                process.exit(1);
-            }
+        // One resolution order for every command (RUSH-2709): `--profile default`
+        // means the same profile here as it does in stop / status / navigate.
+        // `start` is the one command that LAUNCHES, so its implicit path goes
+        // through ensureDefaultBrowserProfile, which additionally verifies the
+        // resolved default can launch on THIS machine and regenerates it when it
+        // can't (the "Custom binary not found" repair) — a filter-only command
+        // must not warn or rewrite a profile, so that check lives only here.
+        let profileName;
+        try {
+            profileName = await resolveProfileRefForStart(opts.profile);
         }
-        else if (profileName === DEFAULT_BROWSER_PROFILE_NAME) {
-            // Explicit `--profile default` honors the configured default too, so an
-            // agent that hardcodes the reserved `default` name still lands on the
-            // user's chosen profile (e.g. their logged-in Comet) rather than a
-            // literal `default` (which auto-detects Chrome). Narrowly scoped: only
-            // the reserved name, only here in `start`.
-            const configured = getConfiguredDefaultProfileName();
-            if (configured && configured !== DEFAULT_BROWSER_PROFILE_NAME) {
-                const target = await getProfile(configured);
-                if (target) {
-                    profileName = target.name;
-                }
-                else {
-                    console.error(`warning: configured default profile "${configured}" not found; using "${DEFAULT_BROWSER_PROFILE_NAME}".`);
-                }
-            }
+        catch (err) {
+            console.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
         }
         // Pre-check the profile locally so we fail fast with a helpful error
         // instead of round-tripping a generic "Profile not found" through the daemon.
@@ -1001,15 +988,16 @@ function registerTaskCommands(browser) {
         .option('-p, --profile <name>', 'Detach the whole profile (incl. composite "name@endpoint") instead of stopping a single task')
         .action(async (opts) => {
         if (opts.profile) {
+            const profile = (await resolveProfileRef(opts.profile)) ?? opts.profile;
             const response = await sendIPCRequest({
                 action: 'stop',
-                profile: opts.profile,
+                profile,
             });
             if (!response.ok) {
                 console.error(response.error);
                 process.exit(1);
             }
-            console.log(`Stopped profile: ${opts.profile}`);
+            console.log(`Stopped profile: ${profile}`);
             return;
         }
         const task = resolveTaskName(opts);
@@ -1083,7 +1071,7 @@ function registerTaskCommands(browser) {
             action: 'navigate',
             task,
             url,
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             console.error(response.error);
@@ -1108,7 +1096,7 @@ function registerTaskCommands(browser) {
             action: 'tab-add',
             task,
             url: opts.url,
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             console.error(response.error);
@@ -1369,7 +1357,7 @@ function registerTaskCommands(browser) {
         try {
             response = await sendIPCRequest({
                 action: 'status',
-                profile: opts.profile,
+                profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
             }, { autoStartDaemon: false });
         }
         catch (err) {
@@ -1458,7 +1446,11 @@ function registerTaskCommands(browser) {
                 // pid 0 means the daemon attached to a browser we didn't launch — no
                 // tracked pid. Render it as "attached" rather than the literal 0.
                 const pidLabel = profile.pid ? `pid ${profile.pid}` : 'attached';
-                console.log(`\n${profile.name} (${portLabel}, ${pidLabel})`);
+                // `profile.name` is the BARE profile; the endpoint is its own field,
+                // so the row reads `comet-local (endpoint: endpoint-0, port …)`
+                // instead of the raw `comet-local@endpoint-0` key (RUSH-2709).
+                const endpointLabel = profile.endpoint ? `endpoint: ${profile.endpoint}, ` : '';
+                console.log(`\n${profile.name} (${endpointLabel}${portLabel}, ${pidLabel})`);
                 if (profile.tasks.length === 0) {
                     console.log('  No active tasks');
                 }
@@ -1493,7 +1485,7 @@ function registerTaskCommands(browser) {
         .action(async (opts) => {
         const response = await sendIPCRequest({
             action: 'status',
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             if (opts.json) {

package/dist/commands/computer-actions.d.ts

@@ -1,5 +1,5 @@
 import { Command } from 'commander';
-import { type ComputerClient, type RPCResponse } from '../lib/computer-rpc.js';
+import { type ComputerClient, type RPCResponse } from '../lib/computer/computer-rpc.js';
 export { emitComputerAction, pickTarget, resolveTargetPidDecision, type AppInfo } from '../lib/computer/actions.js';
 export declare function parseXY(s: string, flag: string): {
     x: number;

package/dist/commands/computer-actions.js

@@ -9,7 +9,7 @@
 import { execFileSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
-import { openComputerClient, describeTransport, } from '../lib/computer-rpc.js';
+import { openComputerClient, describeTransport, } from '../lib/computer/computer-rpc.js';
 import { emitComputerAction, resolveTargetPidDecision } from '../lib/computer/actions.js';
 export { emitComputerAction, pickTarget, resolveTargetPidDecision } from '../lib/computer/actions.js';
 // Pure target picker — exercised by unit tests. Precedence: explicit --pid,

package/dist/commands/computer-sessions-picker.js

@@ -13,39 +13,14 @@
  * computer run has no on-disk artifact of its own to open (see
  * `lib/computer/sessions-list.ts`'s module docblock), so `enter` prints the
  * run's full action list rather than opening a file, and the picker keeps
- * browsing afterward instead of exiting.
+ * browsing afterward instead of exiting. Interactive routing and the browse
+ * loop live in `sessions-picker-factory.ts` (shared with the browser twin).
  */
 import chalk from 'chalk';
-import { itemPicker } from '../lib/picker.js';
-import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
 import { buildPreview } from './sessions-picker.js';
+import { createSessionsPickerCommand } from './sessions-picker-factory.js';
 import { runComputerSessions, printComputerSessionRows, buildComputerSessionRows, matchesComputerSessionRow, formatRowActions, } from '../lib/computer/sessions-list.js';
 import { formatRelativeTime } from '../lib/session/relative-time.js';
-/** True when the interactive picker should open instead of the printed table:
- *  a real TTY, no `--json`, and `--no-interactive` not set. */
-export function shouldOpenInteractiveComputerSessions(opts, isTTY) {
-    return opts.interactive !== false && !opts.json && isTTY;
-}
-/**
- * Shared entry point for `agents computer sessions` and `agents sessions
- * --computer`. Mirrors `runBrowserSessionsCommand`'s interactive-routing
- * split so both call sites stay in lockstep.
- */
-export async function runComputerSessionsCommand(opts) {
-    if (!shouldOpenInteractiveComputerSessions(opts, isInteractiveTerminal())) {
-        if (opts.rows)
-            printComputerSessionRows(opts.rows, { limit: opts.limit, json: opts.json });
-        else
-            runComputerSessions({ machine: opts.machine, limit: opts.limit, json: opts.json });
-        return;
-    }
-    const rows = opts.rows ?? buildComputerSessionRows({ machine: opts.machine });
-    if (rows.length === 0) {
-        console.log(`No computer actions recorded${opts.machine ? ` for machine "${opts.machine}"` : ''}.`);
-        return;
-    }
-    await browseComputerSessions(rows);
-}
 function rowLinkSummary(row) {
     if (row.linkStatus === 'linked' && row.linkedSession) {
         const s = row.linkedSession;
@@ -111,31 +86,33 @@ function printRunDetail(row) {
         console.log('(no driving actions recorded)');
     console.log('');
 }
-/** Run-level picker with an action-list preview. Loops until the user quits
- *  (esc) so a session's whole run history can be browsed repeatedly in one
- *  sitting — mirroring `browseAndOpen`'s loop, minus the artifact drill-down
- *  a computer run has none of. */
-async function browseComputerSessions(rows) {
-    for (;;) {
-        let picked;
-        try {
-            picked = await itemPicker({
-                message: 'Computer sessions:',
-                items: rows,
-                filter: (query) => (query.trim() ? rows.filter((r) => matchesComputerSessionRow(r, query)) : rows),
-                labelFor: (row) => formatRowLabel(row),
-                buildPreview: (row) => buildRowPreview(row),
-                emptyMessage: 'No computer sessions match.',
-                enterHint: 'view actions',
-            });
-        }
-        catch (err) {
-            if (isPromptCancelled(err))
-                return;
-            throw err;
-        }
-        if (!picked)
-            return;
-        printRunDetail(picked.item);
-    }
+const computerSessionsPicker = createSessionsPickerCommand({
+    runFlat: (opts) => {
+        if (opts.rows)
+            printComputerSessionRows(opts.rows, { limit: opts.limit, json: opts.json });
+        else
+            runComputerSessions({ machine: opts.machine, limit: opts.limit, json: opts.json });
+    },
+    buildRows: (opts) => opts.rows ?? buildComputerSessionRows({ machine: opts.machine }),
+    emptyMessage: (opts) => `No computer actions recorded${opts.machine ? ` for machine "${opts.machine}"` : ''}.`,
+    message: 'Computer sessions:',
+    matches: matchesComputerSessionRow,
+    labelFor: formatRowLabel,
+    buildPreview: buildRowPreview,
+    emptyFilterMessage: 'No computer sessions match.',
+    enterHint: 'view actions',
+    onOpen: printRunDetail,
+});
+/** True when the interactive picker should open instead of the printed table:
+ *  a real TTY, no `--json`, and `--no-interactive` not set. */
+export function shouldOpenInteractiveComputerSessions(opts, isTTY) {
+    return computerSessionsPicker.shouldOpen(opts, isTTY);
+}
+/**
+ * Shared entry point for `agents computer sessions` and `agents sessions
+ * --computer`. Mirrors `runBrowserSessionsCommand`'s interactive-routing
+ * split so both call sites stay in lockstep.
+ */
+export async function runComputerSessionsCommand(opts) {
+    await computerSessionsPicker.run(opts);
 }

package/dist/commands/computer.d.ts

@@ -1,5 +1,5 @@
 import { Command } from 'commander';
-import { resolveHelperExec, resolveSocketPath } from '../lib/computer-rpc.js';
+import { resolveHelperExec, resolveSocketPath } from '../lib/computer/computer-rpc.js';
 /**
  * Pure platform gate. The computer subsystem is macOS-only for LOCAL driving
  * (Accessibility / launchctl). It is NOT blocked off macOS when a remote daemon

package/dist/commands/computer.js

@@ -3,8 +3,8 @@ import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
 import { registerCommandGroups } from '../lib/help.js';
-import { openComputerClient, resolveHelperApp, resolveHelperExec, resolveSocketPath, resolveLogPath, resolvePolicyPath, resolvePeersPath, resolveTcpEndpoint, loadComputerAllowList, loadDefaultPeers, writeComputerPolicy, writeComputerPeers, } from '../lib/computer-rpc.js';
-import { setupRemoteHelper, startRemoteTunnel, stopRemoteHelper, hydrateRemoteEnvFromState, readRemoteState, resolveRemoteDevice, REMOTE_TASK_NAME, WIN_HELPER_EXE, } from '../lib/ssh-tunnel.js';
+import { openComputerClient, resolveHelperApp, resolveHelperExec, resolveSocketPath, resolveLogPath, resolvePolicyPath, resolvePeersPath, resolveTcpEndpoint, loadComputerAllowList, loadDefaultPeers, writeComputerPolicy, writeComputerPeers, } from '../lib/computer/computer-rpc.js';
+import { setupRemoteHelper, startRemoteTunnel, stopRemoteHelper, hydrateRemoteEnvFromState, readRemoteState, resolveRemoteDevice, REMOTE_TASK_NAME, WIN_HELPER_EXE, } from '../lib/computer/ssh-tunnel.js';
 import { sshExec } from '../lib/ssh-exec.js';
 import { encodePowershell } from '../lib/hosts/remote-cmd.js';
 import { registerActionCommands, withClient, unwrap, pickTarget, emitComputerAction } from './computer-actions.js';

package/dist/commands/doctor.d.ts

@@ -25,7 +25,7 @@ import type { Command } from 'commander';
 import { type FleetInventory } from '../lib/devices/fleet-divergence.js';
 import { type DoctorFinding } from '../lib/devices/doctor-findings.js';
 import { type VersionResourceReport } from '../lib/doctor-diff.js';
-import { type DuplicateVersionHook } from '../lib/hooks.js';
+import { type DuplicateVersionHook } from '../lib/hooks/install.js';
 import { type SyncStatusRow, type OrphanRow } from '../lib/drift.js';
 import { type FetchStatusMarker } from '../lib/auto-pull.js';
 export declare function wrapLine(prefix: string, text: string, width?: number): string[];

package/dist/commands/doctor.js

@@ -1,4 +1,4 @@
-import { IsolationBoundaryError } from '../lib/shims.js';
+import { IsolationBoundaryError } from '../lib/installations/shims.js';
 import { explainIsolationBoundary } from '../lib/isolation-boundary-report.js';
 import { addHostOption } from '../lib/hosts/option.js';
 import { buildRemoteAgentsInvocation } from '../lib/hosts/remote-cmd.js';
@@ -23,7 +23,7 @@ import { getVersionHomePath, listInstalledVersions, } from '../lib/installations
 import { resolveAgentTargets, AgentSpecError } from '../lib/agent-spec/index.js';
 import { loadManifest, isStale } from '../lib/staleness/index.js';
 import { diffVersionResources, DOCTOR_ALL_KINDS, } from '../lib/doctor-diff.js';
-import { checkVersionHookWiring, inspectDuplicateVersionHooks, registerHooksToSettings, repairManagedHookRuntimeArtifacts } from '../lib/hooks.js';
+import { checkVersionHookWiring, inspectDuplicateVersionHooks, registerHooksToSettings, repairManagedHookRuntimeArtifacts } from '../lib/hooks/install.js';
 import { isVersionIsolated } from '../lib/installations/versions.js';
 import { computeDrift, checkSyncStatus, countOrphans, computeSourceBehind } from '../lib/drift.js';
 import { readAuthHealthCache, summarizeHostAuth } from '../lib/auth-health.js';
@@ -1523,7 +1523,7 @@ export function registerDoctorCommand(program) {
                 console.error(chalk.red('--adopt and --release are mutually exclusive; pass only one.'));
                 process.exit(1);
             }
-            const { adoptShadowingLauncher, releaseAdoptedLauncher } = await import('../lib/shims.js');
+            const { adoptShadowingLauncher, releaseAdoptedLauncher } = await import('../lib/installations/shims.js');
             const raw = (opts.adopt || opts.release);
             const agent = resolveAgentName(raw);
             if (!agent) {

package/dist/commands/feed.js

@@ -449,7 +449,7 @@ export function registerFeedCommand(program) {
                 setupWarnings.push(activityInstall.error);
             if (!hookInstall.error || !activityInstall.error) {
                 const [{ iterHooksCapableVersions, parseHookManifest, registerHooksToSettings }, { getVersionHomePath }] = await Promise.all([
-                    import('../lib/hooks.js'),
+                    import('../lib/hooks/install.js'),
                     import('../lib/installations/versions.js'),
                 ]);
                 const manifest = parseHookManifest({ warn: false });

package/dist/commands/hooks.js

@@ -7,7 +7,7 @@ import { checkbox } from '@inquirer/prompts';
 import { AGENTS, resolveAgentName, formatAgentError, agentLabel, } from '../lib/agents.js';
 import { supports, capableAgents } from '../lib/capabilities.js';
 import { cloneRepo } from '../lib/git.js';
-import { discoverHooksFromRepo, installHooksCentrally, listCentralHooks, listInstalledHooksWithScope, getHookInfo, parseHookManifest, iterHooksCapableVersions, removeHookFromVersion, } from '../lib/hooks.js';
+import { discoverHooksFromRepo, installHooksCentrally, listCentralHooks, listInstalledHooksWithScope, getHookInfo, parseHookManifest, iterHooksCapableVersions, removeHookFromVersion, } from '../lib/hooks/install.js';
 import { listInstalledVersions, getGlobalDefault, syncResourcesToVersion, promptAgentVersionSelection, getVersionHomePath, resolveInstalledAgentTargets, } from '../lib/installations/versions.js';
 import { recordVersionResources } from '../lib/state.js';
 import { isPromptCancelled, isInteractiveTerminal, parseCommaSeparatedList, printWithPager, requireInteractiveSelection, promptRemovalTargets, resolveAgentTargetsAutoInstalling, resolveListFilterOrExit, } from './utils.js';

package/dist/commands/import.js

@@ -21,7 +21,7 @@
  * management — same behavior as the first-run `agents setup` import flow.
  */
 import { withIsolationBoundary } from '../lib/isolation-boundary-report.js';
-import { assertIsolationBoundary, createVersionedAlias } from '../lib/shims.js';
+import { assertIsolationBoundary, createVersionedAlias } from '../lib/installations/shims.js';
 import { markVersionIsolated } from '../lib/installations/versions.js';
 import chalk from 'chalk';
 import ora from 'ora';