@phnx-labs/agents-cli 1.22.41 → 1.22.43

package/dist/commands/browser-sessions-picker.js

@@ -7,36 +7,16 @@
  * Reuses the same `itemPicker` + `buildPreview` primitives as the ordinary
  * session picker (`sessions-picker.ts`) — same search/filter/quit help, and the
  * preview pane for a linked task IS the canonical session digest, not a
- * second renderer.
+ * second renderer. Interactive routing and the browse loop live in
+ * `sessions-picker-factory.ts` (shared with the computer twin).
  */
 import chalk from 'chalk';
 import { itemPicker } from '../lib/picker.js';
-import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
+import { isPromptCancelled } from './utils.js';
 import { buildPreview } from './sessions-picker.js';
+import { createSessionsPickerCommand } from './sessions-picker-factory.js';
 import { runBrowserSessions, buildBrowserSessionRows, matchesBrowserSessionRow, openArtifact, formatBytes, } from '../lib/browser/sessions-list.js';
 import { formatRelativeTime } from '../lib/session/relative-time.js';
-/** True when the interactive picker should open instead of the printed table:
- *  a real TTY, no `--json`/`--open`, and `--no-interactive` not set. */
-export function shouldOpenInteractiveBrowserSessions(opts, isTTY) {
-    return opts.interactive !== false && !opts.json && opts.open === undefined && isTTY;
-}
-/**
- * Shared entry point for `agents browser sessions` and `agents sessions
- * --browser`. Replaces direct calls to `runBrowserSessions` at both call
- * sites so the interactive routing decision lives in one place.
- */
-export async function runBrowserSessionsCommand(opts) {
-    if (!shouldOpenInteractiveBrowserSessions(opts, isInteractiveTerminal())) {
-        runBrowserSessions({ profile: opts.profile, open: opts.open, json: opts.json });
-        return;
-    }
-    const rows = buildBrowserSessionRows(opts.profile);
-    if (rows.length === 0) {
-        console.log(`No browser captures found${opts.profile ? ` for profile "${opts.profile}"` : ''}.`);
-        return;
-    }
-    await browseAndOpen(rows);
-}
 const KIND_LABEL = {
     screenshot: 'shots',
     pdf: 'pdf',
@@ -116,44 +96,6 @@ function openAndReport(a) {
     if (!openArtifact(a.path))
         console.error(`Could not open ${a.path}`);
 }
-/** Task-level picker with a captures preview, then an artifact drill-down when
- *  a task holds more than one capture. Loops until the user quits (esc) so a
- *  capture-heavy task can be browsed and opened repeatedly in one session. */
-async function browseAndOpen(rows) {
-    for (;;) {
-        let picked;
-        try {
-            picked = await itemPicker({
-                message: 'Browser sessions:',
-                items: rows,
-                filter: (query) => (query.trim() ? rows.filter((r) => matchesBrowserSessionRow(r, query)) : rows),
-                labelFor: (row) => formatRowLabel(row),
-                buildPreview: (row) => buildRowPreview(row),
-                emptyMessage: 'No browser sessions match.',
-                enterHint: 'open capture',
-            });
-        }
-        catch (err) {
-            if (isPromptCancelled(err))
-                return;
-            throw err;
-        }
-        if (!picked)
-            return;
-        const row = picked.item;
-        if (row.artifacts.length === 0) {
-            console.log('No captures in this task yet.');
-            continue;
-        }
-        if (row.artifacts.length === 1) {
-            openAndReport(row.artifacts[0]);
-            continue;
-        }
-        const artifact = await pickArtifact(row);
-        if (artifact)
-            openAndReport(artifact);
-    }
-}
 /** Second-level picker over one row's captures, newest first. Enter opens the
  *  highlighted capture; esc returns to the task list. */
 async function pickArtifact(row) {
@@ -177,3 +119,41 @@ async function pickArtifact(row) {
         throw err;
     }
 }
+const browserSessionsPicker = createSessionsPickerCommand({
+    requireOpenUndefined: true,
+    runFlat: (opts) => runBrowserSessions({ profile: opts.profile, open: opts.open, json: opts.json }),
+    buildRows: (opts) => buildBrowserSessionRows(opts.profile),
+    emptyMessage: (opts) => `No browser captures found${opts.profile ? ` for profile "${opts.profile}"` : ''}.`,
+    message: 'Browser sessions:',
+    matches: matchesBrowserSessionRow,
+    labelFor: formatRowLabel,
+    buildPreview: buildRowPreview,
+    emptyFilterMessage: 'No browser sessions match.',
+    enterHint: 'open capture',
+    onOpen: async (row) => {
+        if (row.artifacts.length === 0) {
+            console.log('No captures in this task yet.');
+            return;
+        }
+        if (row.artifacts.length === 1) {
+            openAndReport(row.artifacts[0]);
+            return;
+        }
+        const artifact = await pickArtifact(row);
+        if (artifact)
+            openAndReport(artifact);
+    },
+});
+/** True when the interactive picker should open instead of the printed table:
+ *  a real TTY, no `--json`/`--open`, and `--no-interactive` not set. */
+export function shouldOpenInteractiveBrowserSessions(opts, isTTY) {
+    return browserSessionsPicker.shouldOpen(opts, isTTY);
+}
+/**
+ * Shared entry point for `agents browser sessions` and `agents sessions
+ * --browser`. Replaces direct calls to `runBrowserSessions` at both call
+ * sites so the interactive routing decision lives in one place.
+ */
+export async function runBrowserSessionsCommand(opts) {
+    await browserSessionsPicker.run(opts);
+}

package/dist/commands/browser.js

@@ -1,7 +1,7 @@
 import chalk from 'chalk';
 import * as fs from 'fs';
 import * as path from 'path';
-import { listProfiles, getProfile, createProfile, deleteProfile, ensureDefaultBrowserProfile, getConfiguredDefaultProfileName, DEFAULT_BROWSER_PROFILE_NAME, getProfileRuntimeDir, extractConfiguredPort, findFreeProfilePort, getEndpointPresets, listProfilesWithScope, formatProfilesTable, } from '../lib/browser/profiles.js';
+import { listProfiles, getProfile, createProfile, deleteProfile, getConfiguredDefaultProfileName, resolveProfileRef, resolveProfileRefForStart, getProfileRuntimeDir, extractConfiguredPort, findFreeProfilePort, getEndpointPresets, listProfilesWithScope, formatProfilesTable, } from '../lib/browser/profiles.js';
 import { resolveActor } from '../lib/actor.js';
 import { loginsForProfile, profilesLoggedInto, serviceForUrl, loginsWithAccountsForProfile, accountsForProfile, credKeysForService, AUTH_SIGNATURES, } from '../lib/browser/login-detection.js';
 import { parseSecretRef } from '../lib/browser/secret-ref.js';
@@ -576,12 +576,12 @@ function registerProfilesCommands(browser) {
       other machine — pass --fleet only when the profile really is fleet config.
 
       In \`list\`, the \`*\` marker means "this machine's configured default"
-      (\`agents browser start\` with no --profile). It is NOT the same thing as the
-      profile NAMED \`default\`, which is the auto-detected one; they are often
-      different profiles.
+      (\`agents browser start\` with no --profile). The auto-detected profile is
+      named \`auto-chrome\`; \`default\` is only an ALIAS for whichever profile
+      this machine is configured to use, resolved the same way by every command.
 
       \`prune\` never removes a profile that is in use, the configured default, the
-      auto \`default\`, or (without --fleet) a fleet-synced one.
+      auto-detected \`auto-chrome\`, or (without --fleet) a fleet-synced one.
     `,
     });
     profiles
@@ -846,33 +846,20 @@ function registerTaskCommands(browser) {
             console.error(err instanceof Error ? err.message : String(err));
             process.exit(1);
         }
-        let profileName = opts.profile;
-        if (!profileName) {
-            try {
-                const detected = await ensureDefaultBrowserProfile();
-                profileName = detected.name;
-            }
-            catch (err) {
-                console.error(err instanceof Error ? err.message : String(err));
-                process.exit(1);
-            }
+        // One resolution order for every command (RUSH-2709): `--profile default`
+        // means the same profile here as it does in stop / status / navigate.
+        // `start` is the one command that LAUNCHES, so its implicit path goes
+        // through ensureDefaultBrowserProfile, which additionally verifies the
+        // resolved default can launch on THIS machine and regenerates it when it
+        // can't (the "Custom binary not found" repair) — a filter-only command
+        // must not warn or rewrite a profile, so that check lives only here.
+        let profileName;
+        try {
+            profileName = await resolveProfileRefForStart(opts.profile);
         }
-        else if (profileName === DEFAULT_BROWSER_PROFILE_NAME) {
-            // Explicit `--profile default` honors the configured default too, so an
-            // agent that hardcodes the reserved `default` name still lands on the
-            // user's chosen profile (e.g. their logged-in Comet) rather than a
-            // literal `default` (which auto-detects Chrome). Narrowly scoped: only
-            // the reserved name, only here in `start`.
-            const configured = getConfiguredDefaultProfileName();
-            if (configured && configured !== DEFAULT_BROWSER_PROFILE_NAME) {
-                const target = await getProfile(configured);
-                if (target) {
-                    profileName = target.name;
-                }
-                else {
-                    console.error(`warning: configured default profile "${configured}" not found; using "${DEFAULT_BROWSER_PROFILE_NAME}".`);
-                }
-            }
+        catch (err) {
+            console.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
         }
         // Pre-check the profile locally so we fail fast with a helpful error
         // instead of round-tripping a generic "Profile not found" through the daemon.
@@ -1001,15 +988,16 @@ function registerTaskCommands(browser) {
         .option('-p, --profile <name>', 'Detach the whole profile (incl. composite "name@endpoint") instead of stopping a single task')
         .action(async (opts) => {
         if (opts.profile) {
+            const profile = (await resolveProfileRef(opts.profile)) ?? opts.profile;
             const response = await sendIPCRequest({
                 action: 'stop',
-                profile: opts.profile,
+                profile,
             });
             if (!response.ok) {
                 console.error(response.error);
                 process.exit(1);
             }
-            console.log(`Stopped profile: ${opts.profile}`);
+            console.log(`Stopped profile: ${profile}`);
             return;
         }
         const task = resolveTaskName(opts);
@@ -1083,7 +1071,7 @@ function registerTaskCommands(browser) {
             action: 'navigate',
             task,
             url,
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             console.error(response.error);
@@ -1108,7 +1096,7 @@ function registerTaskCommands(browser) {
             action: 'tab-add',
             task,
             url: opts.url,
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             console.error(response.error);
@@ -1369,7 +1357,7 @@ function registerTaskCommands(browser) {
         try {
             response = await sendIPCRequest({
                 action: 'status',
-                profile: opts.profile,
+                profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
             }, { autoStartDaemon: false });
         }
         catch (err) {
@@ -1458,7 +1446,11 @@ function registerTaskCommands(browser) {
                 // pid 0 means the daemon attached to a browser we didn't launch — no
                 // tracked pid. Render it as "attached" rather than the literal 0.
                 const pidLabel = profile.pid ? `pid ${profile.pid}` : 'attached';
-                console.log(`\n${profile.name} (${portLabel}, ${pidLabel})`);
+                // `profile.name` is the BARE profile; the endpoint is its own field,
+                // so the row reads `comet-local (endpoint: endpoint-0, port …)`
+                // instead of the raw `comet-local@endpoint-0` key (RUSH-2709).
+                const endpointLabel = profile.endpoint ? `endpoint: ${profile.endpoint}, ` : '';
+                console.log(`\n${profile.name} (${endpointLabel}${portLabel}, ${pidLabel})`);
                 if (profile.tasks.length === 0) {
                     console.log('  No active tasks');
                 }
@@ -1493,7 +1485,7 @@ function registerTaskCommands(browser) {
         .action(async (opts) => {
         const response = await sendIPCRequest({
             action: 'status',
-            profile: opts.profile,
+            profile: opts.profile ? await resolveProfileRef(opts.profile) : undefined,
         });
         if (!response.ok) {
             if (opts.json) {

package/dist/commands/computer-actions.d.ts

@@ -1,5 +1,5 @@
 import { Command } from 'commander';
-import { type ComputerClient, type RPCResponse } from '../lib/computer-rpc.js';
+import { type ComputerClient, type RPCResponse } from '../lib/computer/computer-rpc.js';
 export { emitComputerAction, pickTarget, resolveTargetPidDecision, type AppInfo } from '../lib/computer/actions.js';
 export declare function parseXY(s: string, flag: string): {
     x: number;

package/dist/commands/computer-actions.js

@@ -9,7 +9,7 @@
 import { execFileSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
-import { openComputerClient, describeTransport, } from '../lib/computer-rpc.js';
+import { openComputerClient, describeTransport, } from '../lib/computer/computer-rpc.js';
 import { emitComputerAction, resolveTargetPidDecision } from '../lib/computer/actions.js';
 export { emitComputerAction, pickTarget, resolveTargetPidDecision } from '../lib/computer/actions.js';
 // Pure target picker — exercised by unit tests. Precedence: explicit --pid,

package/dist/commands/computer-sessions-picker.js

@@ -13,39 +13,14 @@
  * computer run has no on-disk artifact of its own to open (see
  * `lib/computer/sessions-list.ts`'s module docblock), so `enter` prints the
  * run's full action list rather than opening a file, and the picker keeps
- * browsing afterward instead of exiting.
+ * browsing afterward instead of exiting. Interactive routing and the browse
+ * loop live in `sessions-picker-factory.ts` (shared with the browser twin).
  */
 import chalk from 'chalk';
-import { itemPicker } from '../lib/picker.js';
-import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
 import { buildPreview } from './sessions-picker.js';
+import { createSessionsPickerCommand } from './sessions-picker-factory.js';
 import { runComputerSessions, printComputerSessionRows, buildComputerSessionRows, matchesComputerSessionRow, formatRowActions, } from '../lib/computer/sessions-list.js';
 import { formatRelativeTime } from '../lib/session/relative-time.js';
-/** True when the interactive picker should open instead of the printed table:
- *  a real TTY, no `--json`, and `--no-interactive` not set. */
-export function shouldOpenInteractiveComputerSessions(opts, isTTY) {
-    return opts.interactive !== false && !opts.json && isTTY;
-}
-/**
- * Shared entry point for `agents computer sessions` and `agents sessions
- * --computer`. Mirrors `runBrowserSessionsCommand`'s interactive-routing
- * split so both call sites stay in lockstep.
- */
-export async function runComputerSessionsCommand(opts) {
-    if (!shouldOpenInteractiveComputerSessions(opts, isInteractiveTerminal())) {
-        if (opts.rows)
-            printComputerSessionRows(opts.rows, { limit: opts.limit, json: opts.json });
-        else
-            runComputerSessions({ machine: opts.machine, limit: opts.limit, json: opts.json });
-        return;
-    }
-    const rows = opts.rows ?? buildComputerSessionRows({ machine: opts.machine });
-    if (rows.length === 0) {
-        console.log(`No computer actions recorded${opts.machine ? ` for machine "${opts.machine}"` : ''}.`);
-        return;
-    }
-    await browseComputerSessions(rows);
-}
 function rowLinkSummary(row) {
     if (row.linkStatus === 'linked' && row.linkedSession) {
         const s = row.linkedSession;
@@ -111,31 +86,33 @@ function printRunDetail(row) {
         console.log('(no driving actions recorded)');
     console.log('');
 }
-/** Run-level picker with an action-list preview. Loops until the user quits
- *  (esc) so a session's whole run history can be browsed repeatedly in one
- *  sitting — mirroring `browseAndOpen`'s loop, minus the artifact drill-down
- *  a computer run has none of. */
-async function browseComputerSessions(rows) {
-    for (;;) {
-        let picked;
-        try {
-            picked = await itemPicker({
-                message: 'Computer sessions:',
-                items: rows,
-                filter: (query) => (query.trim() ? rows.filter((r) => matchesComputerSessionRow(r, query)) : rows),
-                labelFor: (row) => formatRowLabel(row),
-                buildPreview: (row) => buildRowPreview(row),
-                emptyMessage: 'No computer sessions match.',
-                enterHint: 'view actions',
-            });
-        }
-        catch (err) {
-            if (isPromptCancelled(err))
-                return;
-            throw err;
-        }
-        if (!picked)
-            return;
-        printRunDetail(picked.item);
-    }
+const computerSessionsPicker = createSessionsPickerCommand({
+    runFlat: (opts) => {
+        if (opts.rows)
+            printComputerSessionRows(opts.rows, { limit: opts.limit, json: opts.json });
+        else
+            runComputerSessions({ machine: opts.machine, limit: opts.limit, json: opts.json });
+    },
+    buildRows: (opts) => opts.rows ?? buildComputerSessionRows({ machine: opts.machine }),
+    emptyMessage: (opts) => `No computer actions recorded${opts.machine ? ` for machine "${opts.machine}"` : ''}.`,
+    message: 'Computer sessions:',
+    matches: matchesComputerSessionRow,
+    labelFor: formatRowLabel,
+    buildPreview: buildRowPreview,
+    emptyFilterMessage: 'No computer sessions match.',
+    enterHint: 'view actions',
+    onOpen: printRunDetail,
+});
+/** True when the interactive picker should open instead of the printed table:
+ *  a real TTY, no `--json`, and `--no-interactive` not set. */
+export function shouldOpenInteractiveComputerSessions(opts, isTTY) {
+    return computerSessionsPicker.shouldOpen(opts, isTTY);
+}
+/**
+ * Shared entry point for `agents computer sessions` and `agents sessions
+ * --computer`. Mirrors `runBrowserSessionsCommand`'s interactive-routing
+ * split so both call sites stay in lockstep.
+ */
+export async function runComputerSessionsCommand(opts) {
+    await computerSessionsPicker.run(opts);
 }

package/dist/commands/computer.d.ts

@@ -1,5 +1,5 @@
 import { Command } from 'commander';
-import { resolveHelperExec, resolveSocketPath } from '../lib/computer-rpc.js';
+import { resolveHelperExec, resolveSocketPath } from '../lib/computer/computer-rpc.js';
 /**
  * Pure platform gate. The computer subsystem is macOS-only for LOCAL driving
  * (Accessibility / launchctl). It is NOT blocked off macOS when a remote daemon

package/dist/commands/computer.js

@@ -3,8 +3,8 @@ import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
 import { registerCommandGroups } from '../lib/help.js';
-import { openComputerClient, resolveHelperApp, resolveHelperExec, resolveSocketPath, resolveLogPath, resolvePolicyPath, resolvePeersPath, resolveTcpEndpoint, loadComputerAllowList, loadDefaultPeers, writeComputerPolicy, writeComputerPeers, } from '../lib/computer-rpc.js';
-import { setupRemoteHelper, startRemoteTunnel, stopRemoteHelper, hydrateRemoteEnvFromState, readRemoteState, resolveRemoteDevice, REMOTE_TASK_NAME, WIN_HELPER_EXE, } from '../lib/ssh-tunnel.js';
+import { openComputerClient, resolveHelperApp, resolveHelperExec, resolveSocketPath, resolveLogPath, resolvePolicyPath, resolvePeersPath, resolveTcpEndpoint, loadComputerAllowList, loadDefaultPeers, writeComputerPolicy, writeComputerPeers, } from '../lib/computer/computer-rpc.js';
+import { setupRemoteHelper, startRemoteTunnel, stopRemoteHelper, hydrateRemoteEnvFromState, readRemoteState, resolveRemoteDevice, REMOTE_TASK_NAME, WIN_HELPER_EXE, } from '../lib/computer/ssh-tunnel.js';
 import { sshExec } from '../lib/ssh-exec.js';
 import { encodePowershell } from '../lib/hosts/remote-cmd.js';
 import { registerActionCommands, withClient, unwrap, pickTarget, emitComputerAction } from './computer-actions.js';
@@ -14,7 +14,7 @@ import { makeClaudeResponder, resolveApiKey, DEFAULT_CLAUDE_MODEL, DEFAULT_CLAUD
 import { TASK_PREVIEW_MAX_CHARS } from '../lib/computer/sessions-list.js';
 import { runComputerSessionsCommand } from './computer-sessions-picker.js';
 import { truncate } from '../lib/feed/events.js';
-import { namespacedServiceLabel, serviceManifestHomeEnv } from '../lib/service-manifest.js';
+import { namespacedServiceLabel, serviceManifestHomeEnv, serviceManagerRegistrationAllowed } from '../lib/service-manifest.js';
 // Help groups — mirror `agents browser` so the mental model carries over.
 const COMPUTER_HELP_GROUPS = [
     { title: 'Installation', names: ['setup'] },
@@ -564,6 +564,10 @@ export async function activateComputerHelperMacLocal() {
     const uid = process.getuid?.();
     if (typeof uid !== 'number')
         throw new Error('cannot resolve uid');
+    const reg = serviceManagerRegistrationAllowed();
+    if (!reg.allowed) {
+        throw new Error(reg.reason);
+    }
     const domain = `gui/${uid}`;
     // Render the policy file BEFORE bootstrap so the daemon reads a fresh allow
     // list at startup (fail-safe: missing/unparseable → everything denied).
@@ -843,11 +847,21 @@ function registerStopCommand(program) {
             process.exit(1);
         }
         const domain = `gui/${uid}`;
-        try {
-            execFileSync('/bin/launchctl', ['bootout', domain, plistPath], { stdio: 'pipe' });
-        }
-        catch {
-            // already gone — fine
+        // Same invariant as the start path: a redirected-HOME process must never
+        // talk to the real launchd (RUSH-2968). Stop has a local fallback — the
+        // plist/socket cleanup below — so skip the bootout with the reason
+        // rather than throwing like start does.
+        const reg = serviceManagerRegistrationAllowed();
+        if (!reg.allowed) {
+            console.warn(`skipping launchctl bootout: ${reg.reason}`);
+        }
+        else {
+            try {
+                execFileSync('/bin/launchctl', ['bootout', domain, plistPath], { stdio: 'pipe' });
+            }
+            catch {
+                // already gone — fine
+            }
         }
         // launchd unlinks the socket when the daemon exits; helper also has an
         // atexit unlink. Best-effort cleanup if either path didn't fire.

package/dist/commands/daemon.js

@@ -761,7 +761,7 @@ function runWebhooksList(json) {
         const port = hostedReceiverPort(r);
         const funnel = r.funnel ? chalk.cyan(` public :${r.funnel.publicPort}`) : chalk.gray(' localhost only');
         console.log(`  127.0.0.1:${String(port).padEnd(6)} ${chalk.gray(`bundle ${r.bundle}`)}${funnel}`);
-        console.log(chalk.gray(`    endpoints: /hooks/github, /hooks/linear · ${r.rateLimit ?? DEFAULT_WEBHOOK_RATE_LIMIT}/min per source`));
+        console.log(chalk.gray(`    endpoints: /hooks/github, /hooks/linear, /hooks/slack · ${r.rateLimit ?? DEFAULT_WEBHOOK_RATE_LIMIT}/min per source`));
     }
     console.log(chalk.gray(`\nConfig: ${getDaemonWebhooksConfigPath()}`));
     console.log(chalk.gray('Changes take effect on the next daemon restart.'));

package/dist/commands/doctor.d.ts

@@ -25,7 +25,7 @@ import type { Command } from 'commander';
 import { type FleetInventory } from '../lib/devices/fleet-divergence.js';
 import { type DoctorFinding } from '../lib/devices/doctor-findings.js';
 import { type VersionResourceReport } from '../lib/doctor-diff.js';
-import { type DuplicateVersionHook } from '../lib/hooks.js';
+import { type DuplicateVersionHook } from '../lib/hooks/install.js';
 import { type SyncStatusRow, type OrphanRow } from '../lib/drift.js';
 import { type FetchStatusMarker } from '../lib/auto-pull.js';
 export declare function wrapLine(prefix: string, text: string, width?: number): string[];
@@ -78,9 +78,11 @@ export type IssueSeverity = 'critical' | 'warning' | 'info';
  *
  * Severity model (agent-agnostic — applies to every agent doctor inspects):
  *   - critical (silent breakage): an unwired hook, a missing/unparseable
- *     settings.json, a MISSING resource.
+ *     settings.json, a MISSING hook or plugin.
  *   - warning (stale / drift): a source layer behind origin, a DIVERGENT resource,
- *     a stale / never-synced version.
+ *     a stale / never-synced version, a MISSING resource of any other kind
+ *     (see `missingResourceSeverity`, which reads this split from
+ *     `FINDING_SEVERITY` — RUSH-2947).
  *   - info (orphan): an EXTRA resource → `agents prune cleanup`.
  */
 export interface VerdictIssue {

package/dist/commands/doctor.js

@@ -1,4 +1,4 @@
-import { IsolationBoundaryError } from '../lib/shims.js';
+import { IsolationBoundaryError } from '../lib/installations/shims.js';
 import { explainIsolationBoundary } from '../lib/isolation-boundary-report.js';
 import { addHostOption } from '../lib/hosts/option.js';
 import { buildRemoteAgentsInvocation } from '../lib/hosts/remote-cmd.js';
@@ -23,7 +23,7 @@ import { getVersionHomePath, listInstalledVersions, } from '../lib/installations
 import { resolveAgentTargets, AgentSpecError } from '../lib/agent-spec/index.js';
 import { loadManifest, isStale } from '../lib/staleness/index.js';
 import { diffVersionResources, DOCTOR_ALL_KINDS, } from '../lib/doctor-diff.js';
-import { checkVersionHookWiring, inspectDuplicateVersionHooks, registerHooksToSettings, repairManagedHookRuntimeArtifacts } from '../lib/hooks.js';
+import { checkVersionHookWiring, inspectDuplicateVersionHooks, registerHooksToSettings, repairManagedHookRuntimeArtifacts } from '../lib/hooks/install.js';
 import { isVersionIsolated } from '../lib/installations/versions.js';
 import { computeDrift, checkSyncStatus, countOrphans, computeSourceBehind } from '../lib/drift.js';
 import { readAuthHealthCache, summarizeHostAuth } from '../lib/auth-health.js';
@@ -669,6 +669,19 @@ const AUTO_FIXABLE_CATEGORIES = new Set([
 export function verdictIsAutoFixable(v) {
     return v.issues.some((i) => AUTO_FIXABLE_CATEGORIES.has(i.category));
 }
+/**
+ * Missing-resource severity for one `DoctorKind`, read from `FINDING_SEVERITY`
+ * (the fleet-mode rubric) so target mode agrees with it kind by kind instead of
+ * re-hardcoding its own. Hooks and plugins map to their dedicated critical
+ * finding kinds; every other kind maps to the generic 'missing-resource' warning.
+ */
+function missingResourceSeverity(kind) {
+    if (kind === 'hooks')
+        return FINDING_SEVERITY['missing-hook'];
+    if (kind === 'plugins')
+        return FINDING_SEVERITY['missing-plugin'];
+    return FINDING_SEVERITY['missing-resource'];
+}
 /**
  * Fold a version report's divergences into a triaged verdict — one severity-tagged
  * finding per unwired hook, missing/divergent/extra resource, and behind-origin
@@ -718,16 +731,18 @@ export function computeVerdict(report) {
             });
         }
     }
-    // ── critical: missing resources (declared in sources, absent from home) ──
+    // ── missing resources (declared in sources, absent from home) — severity
+    // follows FINDING_SEVERITY: hooks/plugins are critical, everything else warns ──
     for (const kind of DOCTOR_ALL_KINDS) {
         for (const r of report.kinds[kind]) {
             if (r.status !== 'missing')
                 continue;
+            const severity = missingResourceSeverity(kind);
             issues.push({
-                severity: 'critical', category: 'missing', subject: r.name,
+                severity, category: 'missing', subject: r.name,
                 impact: `declared in sources but absent from the version home (${kind})`,
                 fix: fixCmd,
-                text: `${r.name} missing`, color: 'red',
+                text: `${r.name} missing`, color: severity === 'critical' ? 'red' : 'yellow',
             });
         }
     }
@@ -1523,7 +1538,7 @@ export function registerDoctorCommand(program) {
                 console.error(chalk.red('--adopt and --release are mutually exclusive; pass only one.'));
                 process.exit(1);
             }
-            const { adoptShadowingLauncher, releaseAdoptedLauncher } = await import('../lib/shims.js');
+            const { adoptShadowingLauncher, releaseAdoptedLauncher } = await import('../lib/installations/shims.js');
             const raw = (opts.adopt || opts.release);
             const agent = resolveAgentName(raw);
             if (!agent) {
@@ -1739,10 +1754,10 @@ export function registerDoctorCommand(program) {
                 console.log(line);
             }
             // Point at the interactive reconcile when anything is out of sync — each
-            // finding carries its own fix, but `agents status` is the one place that
+            // finding carries its own fix, but `agents sync status` is the one place that
             // reviews and applies them together (opt-in, never auto-fires here).
             if (syncRows.some((r) => r.status !== 'fresh' || (r.unwiredHooks ?? 0) > 0) || repoBehindMarkers.some((m) => m.behind > 0)) {
-                console.log(chalk.gray('\nRun `agents status` to review and sync what has drifted.'));
+                console.log(chalk.gray('\nRun `agents sync status` to review and sync what has drifted.'));
             }
             // A routine runs on exactly one device. Each of these named several and
             // used to fire once per device — duplicate agent runs on every schedule.

package/dist/commands/exec.js

@@ -3015,8 +3015,9 @@ agents run auto --device yosemite-s0 "fix the flaky test"   # pin the device
             let exitCode;
             let ranAgent = agent;
             let ranVersion = defaultVersion;
-            if (fallback.length > 0) {
-                // fallback requires a prompt — enforced above, narrow the type here.
+            if (fallback.length > 0 || (rotationResult !== null && prompt !== undefined && !options.interactive)) {
+                // Fallback and balanced runs need captured output so a clean-exit
+                // session-limit refusal can update account availability.
                 // The sink reports which chain entry actually executed (may differ from
                 // the primary after a rate-limit handoff) so the audit record is honest.
                 const sink = {};

package/dist/commands/feed.js

@@ -312,7 +312,7 @@ export async function loadSessionMetasForFeedEnrichment(load) {
 export function registerFeedCommand(program) {
     const feed = program
         .command('feed')
-        .description('Operator inbox + agent status posts (alias: inbox = needs-you). Agent progress = --filter updates')
+        .description('Operator inbox + agent status posts. Default is needs-you; agent progress = --filter updates')
         .option('--json', 'Output as JSON (each block stamped with its outcome + ask class)')
         .option('--filter <view>', 'What to show: needs (default) · updates · all', 'needs')
         .option('--flat', 'List one block per agent instead of grouping by outcome')
@@ -449,7 +449,7 @@ export function registerFeedCommand(program) {
                 setupWarnings.push(activityInstall.error);
             if (!hookInstall.error || !activityInstall.error) {
                 const [{ iterHooksCapableVersions, parseHookManifest, registerHooksToSettings }, { getVersionHomePath }] = await Promise.all([
-                    import('../lib/hooks.js'),
+                    import('../lib/hooks/install.js'),
                     import('../lib/installations/versions.js'),
                 ]);
                 const manifest = parseHookManifest({ warn: false });
@@ -642,35 +642,6 @@ export function registerFeedCommand(program) {
             renderOutcomeGroup(g, self);
         await renderTrailingActivity();
     });
-    // Observe-umbrella aliases (Phase 3): intentional second names, not deprecations.
-    // Re-parse into `feed` so flags/help stay single-sourced. See lib/observe-aliases.ts.
-    registerFeedObserveAliases(program);
-}
-/**
- * `inbox` → feed. Loaded with the feed module so the lazy COMMAND_LOADERS entry
- * for `inbox` also gets the real `feed` command registered for re-parse.
- */
-function registerFeedObserveAliases(program) {
-    const reparse = async (alias) => {
-        const { expandObserveAlias } = await import('../lib/observe-aliases.js');
-        const rest = process.argv.slice(3);
-        const expanded = expandObserveAlias(alias, rest);
-        if (!expanded) {
-            console.error(chalk.red(`Unknown observe alias: ${alias}`));
-            process.exit(1);
-        }
-        if (process.stderr.isTTY)
-            process.stderr.write(chalk.gray(`${expanded.note}\n`));
-        await program.parseAsync(['node', 'agents', ...expanded.argv]);
-    };
-    program
-        .command('inbox')
-        .description('Needs-you inbox (alias of `agents feed`). Open blocks waiting on you.')
-        .allowUnknownOption()
-        .allowExcessArguments()
-        .action(async () => {
-        await reparse('inbox');
-    });
 }
 /**
  * Mirror a written post to the configured sinks (`feed.broadcast` in