@phnx-labs/agents-cli 1.22.42 → 1.22.43

package/CHANGELOG.md

@@ -1,5 +1,77 @@
 # Changelog
 
+## 1.22.43
+
+- **Rush Cloud no longer has a helper that reads the interactive Claude login (RUSH-2359 / incident #1767).** Dispatch already sends an email-only account manifest (SING-1b) and never uploaded a token; the leftover `readClaudeCredentialsBlob` still read Keychain / `.credentials.json` — the exact shape that captured a `claude setup-token` TTY banner as an Authorization header. That helper is deleted. `--lease` SING-1b detection now reads the wrapped rotating blob itself and ignores anything that is not `{ claudeAiOauth.accessToken }`. Source: `apps/cli/src/lib/cloud/rush.ts`, `apps/cli/src/lib/crabbox/runtimes.ts`.
+
+- **fix: `agents sync <agent>` self-heals version pointers left aimed at an uninstalled version (RUSH-2471).** `removeVersion` reassigns the default and clears the `~/.<agent>` config symlink only when it removes the pointed-at version, so a version-home whose launch binary vanished by any other route — grok self-updating its per-version binary out from under the old dir, a manual delete, a half-finished install that seeded the home but never landed the binary — left the global default and/or the symlink resolving to a dead version. Because `agents use <agent>@<v>` sets the default and the symlink together, both dangled in lockstep once `<v>`'s binary went away: `agents sync <agent>` would print `Repointed <agent> config symlink …` and then still fail `<agent>@<v> is not installed`, because the version to sync is resolved from the raw global default. `agents sync <agent>` now repoints the global default, the isolated default, and the config symlink off any not-installed version before resolving — the default to the newest non-isolated installed version (never auto-promoting an isolated install), the symlink to the resolved default else the newest non-isolated installed version (the user's real `~/.<agent>` is never repointed at an isolated install). A pointer already on an installed version (a deliberate `agents use` choice), a real config directory, and isolated-only agents are left untouched. Source: `apps/cli/src/lib/installations/versions.ts`, `apps/cli/src/commands/sync.ts`.
+
+- **Session preview groups metadata into verb-led rows (RUSH-2757, part 3).** `agents sessions preview` (and the picker pane) replaces the flat labeled block (`Prompt/Todos/Dirs/Repos/Changes/Artifacts/Skills/Plugins/Hooks/Links/Errors/Meta/Tools/Tests`) with five scannable verb rows in a fixed gutter — `Asked` (the originating prompt, quoted), `Doing` (checklist progress, team lineage, sub-agents), `Made` (file deltas, reads, artifacts, plan, PR), `Health` (errors + last test verdict, absent when clean), `Cost` (msgs, tokens, tool mix) — then `Latest` (the full wrapped last message, formerly `Last response:`) and one width-capped `Details ▸` fold (session id, skills, plugins, hooks, links, dirs, repos) that shows `… +N more` instead of wrapping and swamping the pane. Msgs/tokens/session-id move out of the header's third line into `Cost`/`Details`, so they render once. The metadata-only card (remote/unindexed sessions) uses the same rows. Source: `apps/cli/src/commands/sessions-picker.ts` (`formatCompactPreview`, `formatMetaOnlyBody`, `formatHeader`, `joinWidthCapped` — now ANSI-aware).
+
+- **`pr-merge-on-green` can actually select a PR (RUSH-2848).** The built-in's poll ran `gh pr list --author @me` with no `--repo`, so `gh` inferred the repository from cwd; the daemon's cwd is not a git repo and every poll returned empty. The poll now walks registered project slugs (`~/.agents/projects/*.yaml`), canonicalizes renamed repos (`phnx-labs/agents-cli` → `phnx-labs/agi-cli`), and lists with `--repo`. Verdict matches `merge-guard.sh`: a formal GitHub `APPROVED` review **or** an APPROVE comment on THIS PR (carried-from citations do not count). Hidden `agents _internal mergeable-prs` prints `owner/repo#n` (cwd-independent). Source: `apps/cli/src/lib/github/pr-verdict.ts`, `apps/cli/src/lib/github/pr-mergeable.ts`. Companion: phnx-labs/.agents-system#347.
+
+- **BREAKING: nest `agents status` under `agents sync status` (RUSH-2864).** `status` was the unified sync-drift report sitting as its own top-level command next to `sync`. It now lives as `agents sync status` (`--json` UnifiedSyncStatus contract and `--yes` reconcile unchanged). Top-level `agents status` is gone, not deprecated: it reports `unknown command`, and `status` is retired from distance-1 auto-correct. `agents sync <agent>` still treats the positional as an agent spec; `status` is reserved as the subcommand. `agents sync status --device` from a non-TTY does not inherit umbrella `--yes` (that flag is reconcile on this command, not "don't prompt"). Source: `apps/cli/src/commands/{status,sync}.ts`, `apps/cli/src/lib/hosts/passthrough.ts`, `apps/cli/src/lib/startup/command-registry.ts`.
+
+- **Custom harnesses (deepseek, kimi-chat, glm, …) now work in routines and monitors, and their profiles survive fleet sync (RUSH-2930).** `agents routines add --agent deepseek` and `agents monitors add --run deepseek` used to refuse any name outside the native registry; both now accept a custom harness (`agents harness list`), and the daemon delegates the job to `agents run <name>` — the same path workflow jobs take — so the profile's host binary, model env, and provider auth resolve exactly as an interactive run. The profile pins its own host version and auth, so `@version` pins, balanced rotation, and account-env injection don't apply to these jobs. Separately, `agents harness add/fork/edit` and the legacy-auth migration stored the account's per-device **id** in the profile, while profiles sync fleet-wide via `agents repo push` — every synced custom harness then died on other machines with `Unknown account '<uuid>'`. The portable account **name** is stored now, and a profile with a dangling ref reports which harness is broken and the exact `agents harness edit <name> --account <name>` repair instead of the bare registry error. Source: `apps/cli/src/lib/daemon/runner.ts`, `apps/cli/src/lib/scheduling/routines.ts`, `apps/cli/src/lib/monitors/config.ts`, `apps/cli/src/commands/{routines,harness,profiles}.ts`, `apps/cli/src/lib/profiles.ts`.
+
+- **BREAKING: remove the top-level `agents tickets` command (RUSH-2932).** Ticket reads go through `linear` (linear-cli) and `gh issue`. `agents tickets` reports `unknown command`, and `tickets` is retired from distance-1 auto-correct. AGI EXT now calls those CLIs directly. Source: `apps/cli/src/cli/command-registry.ts`, `apps/cli/src/lib/startup/command-registry.ts`, `apps/ext/src/vscode/tasks.vscode.ts`.
+
+- **Expired cached usage windows read as unknown, not 0% (RUSH-2936).** A cached Claude usage window whose reset time had passed was zeroed but kept, so a frozen cache (Anthropic has been 429-ing `/api/oauth/usage` per account since ~Aug 5) rendered every account as `S: 0% (now)  W: 0% (now)` with `usageStatus: "available"` — and balanced rotation kept dispatching into genuinely rate-limited accounts (RUSH-2858). `deserializeClaudeUsageSnapshot` now drops expired windows (the same rule the Grok collector already applied); an all-expired snapshot deserializes to null, the dead cache entry self-cleans, `agents view` renders `usage unavailable` plus the recorded throttle reason, and rotation falls back to the coarse cached status instead of trusting a fake 0%. Source: `apps/cli/src/lib/accounting/usage.ts`.
+
+- **`agents doctor <agent>@<version>` no longer marks every missing resource critical (RUSH-2947).** Target mode's `computeVerdict` hardcoded `severity: 'critical'` for any `status: 'missing'` resource of any kind, while fleet mode's `FINDING_SEVERITY` — whose own docblock calls it "the single source of truth" — rates the same fact `warning` for everything except `missing-hook`/`missing-plugin`. A missing command, skill, permission, subagent, rule, or MCP entry now reads `warning` in target mode too, matching fleet mode; a missing hook or plugin stays `critical` in both. `computeVerdict` reads severity from `FINDING_SEVERITY` via a new `missingResourceSeverity(kind)` helper instead of re-hardcoding it. Source: `apps/cli/src/commands/doctor.ts`.
+
+- **BREAKING: nest `agents alias` under `agents setup alias` (RUSH-2965).** Setting up a PATH shorthand is a setup action, not its own noun. `agents setup alias add/list/remove` keep the same shim behavior (`~/.agents/.cache/shims/` + `~/.agents/aliases.json`). Top-level `agents alias` is gone, not deprecated: it reports `unknown command`, and `alias` is retired from distance-1 auto-correct. Source: `apps/cli/src/commands/{alias,setup}.ts`, `apps/cli/src/lib/startup/command-registry.ts`.
+
+- **Block service-manager registration under a redirected HOME on macOS/Linux (RUSH-2968).**
+  `launchctl` and `systemctl --user` are per-user-session and ignore `$HOME`, so a CLI
+  running under a sandbox/redirected HOME (including every vitest fork) still talked to
+  the user's real service manager. `service-manifest.ts` already namespaces the job
+  label, but that only changes the identifier — the registration still lands in real
+  `launchd`/`systemd` (measured: 89 dead `…sandbox-<hash>` services accumulated in one
+  user's real launchd from test runs, KeepAlive-retrying torn-down executables). Every
+  registration path now consults `serviceManagerRegistrationAllowed()` (false when
+  `isolatedHomeSuffix()` is non-null) and skips with a stated reason rather than
+  touching the real service manager: daemon `startDaemon`/`stopDaemon`, menubar
+  `restartMenubarLaunchAgent`/`disableMenubarService`, secrets
+  `retireLegacySecretsAgentService`, and `agents computer start`. A test seam
+  `AGENTS_SERVICE_MANAGER_ALLOW_REDIRECTED_HOME=1` lets the existing shim-based tests
+  continue to exercise the registration code path. Source:
+  `apps/cli/src/lib/service-manifest.ts`, `apps/cli/src/lib/daemon/daemon.ts`,
+  `apps/cli/src/lib/menubar/install-menubar.ts`, `apps/cli/src/lib/secrets/agent.ts`,
+  `apps/cli/src/commands/computer.ts`.
+
+- **BREAKING: the top-level `agents inbox` command is removed — use `agents feed` (RUSH-2984).** `inbox` was a Phase-3 observe alias that re-parsed as `agents feed` (needs-you is already the feed default), the same leftover class as `timeline` (RUSH-2692). It is gone entirely, not deprecated: `agents inbox` now reports `unknown command`, and `inbox` is retired from distance-1 auto-correct. `agents feed` / `feed post` / `feed post --blocked` are unchanged. Source: `apps/cli/src/commands/feed.ts`, `apps/cli/src/lib/startup/command-registry.ts`, `apps/cli/src/bootstrap.ts`.
+
+- `agents auth` and `agents org` now print a clean one-line error (and a structured `{"error"}` payload under `--json`) for signed-out, expired-token, and bad-input states, instead of dumping a raw Node stack trace.
+
+- Fixed balanced Claude account rotation recording session-limit refusals until their stated reset, skipping those accounts, and surfacing `session-limited` in `agents view` instead of idle usage.
+
+- Sandboxed monitor `--run` and routine children now inherit this host's GitHub CLI auth (RUSH-2860). A monitor fire recorded `ok` while the spawned child had no `~/.config/gh`, so `gh auth status` reported "not logged into any GitHub hosts" and the PR it was meant to act on stayed open. The routine sandbox overlay replaces `HOME` with a disposable dir, and `gh` was never linked into it. `prepareJobHome` now links the host's `gh` config dir into the overlay (and only that — `~/.agents` is deliberately not linked, since it holds the secrets master key and the encrypted store), `buildSpawnEnv` pins `GH_CONFIG_DIR` and forwards `GH_TOKEN`/`GITHUB_TOKEN`, and the runner refuses to launch when a routine's own `env:` overrides `GH_CONFIG_DIR` such that this host's gh auth would still be hidden — a regression tripwire rather than a runtime guarantee. Not covered on Windows, where `gh` stores config under `%AppData%\GitHub CLI`.
+
+- **`agents webhooks` now advertises `/hooks/slack`.** The receiver has accepted signed
+  Slack deliveries since the Slack bridge landed, but `agents webhooks serve` and
+  `agents daemon webhooks list` still printed only `/hooks/github, /hooks/linear` — the
+  one URL you must paste into the Slack app was missing from the banner. The slash-command
+  ack now also says "replying in this channel", matching where the reply actually posts
+  (a slash command carries no thread). Source: `apps/cli/src/commands/webhook.ts`,
+  `apps/cli/src/commands/daemon.ts`, `apps/cli/src/lib/triggers/webhook.ts`.
+
+- **Slack/webhook handlers that run an agent actually dispatch now.** A `run.agent` or
+  `run.workflow` webhook handler was gated by the *routine* activation manifest
+  (`~/.agents/devices/<machine>/agents.yaml`). A handler is not a routine, so its name
+  could never be a member — on any box that had materialized that manifest, every
+  delivery was recorded `skipped` with an empty allowlist (`can only run on: `) while the
+  receiver logged it as `fired`, and `agents routines enable <handler>` refuses the name,
+  so there was no way out. Verified live: a real HMAC-signed `/agents` slash command
+  reached the public receiver, acked 200, and started no agent. The job now carries
+  `dispatchedBy: 'webhook'`, the same escape RUSH-2681 gave monitors; a handler's
+  `routine:` delegate still keeps its gate.
+- **`{{slack.response_url}}` is now available to handler prompts.** It was parsed off the
+  wire but never reached the `{{slack.*}}` namespace. Slack accepts a POST there for 30
+  minutes with no token and no channel membership, so it is the only reply that works
+  before the app has been invited to a channel — the shipped example handler now uses it.
+  Source: `apps/cli/src/lib/triggers/handlers.ts`, `apps/cli/src/lib/scheduling/routines.ts`.
+
 ## 1.22.42
 
 - **Plan-tier gates for `agents accounts` and `agents insights` (RUSH-2424).** A new `apps/cli/src/lib/entitlement.ts` reads the live subscription tier from `GET /api/v1/billing/subscription?agent=agi-cli` (the session token in `~/.rush/user.yaml`), caches it on disk for 15 minutes, and stays offline-tolerant: a stale cache is honored over a failed network call, and no session file at all resolves straight to the free tier. `agents accounts add` / `name` / `attach` now cap registered accounts at 3 per harness on free, 10 on paid/admin — a 4th add on free refuses before any write (`free plan is capped at 3 claude accounts (3/3). agents upgrade — up to 10 per harness.`) and the 3rd prints a one-line notice. Downgrading a plan never deletes a credential: over-cap accounts fall out of `accounts switch`/`set-default` (excluded from `listSwitchableAccounts`) and are listed `dormant (upgrade to reactivate)` in `agents accounts`. `agents insights` keeps top-line counts, harness mix, `insights mix`, and `agents perf` free on every tier; the Friction / Friction-thrash / Dissatisfaction-corrections sections, grouping `--by account` (the default), and `--narrative` are paid — a gated section is replaced by the in-voice notice `Friction and account-split analysis are on the paid plan.` in both the text report and `--json` (a new `plan: {tierName, isPaid}` field, `groups: null` when the account breakdown is gated, and the friction/correction facet keys stripped per group otherwise). Source: `apps/cli/src/lib/entitlement.ts`, `apps/cli/src/commands/accounts.ts`, `apps/cli/src/commands/insights.ts`.

package/README.md

@@ -190,7 +190,7 @@ agents run claude@
 agents run codex@ "review this branch"
 ```
 
-`--strategy balanced` spreads work across available versions of the same agent -- useful when you have multiple accounts and want to avoid burning through one. When every account is rate-limited, the run exits nonzero naming each excluded account and the earliest window reset (use `--strategy pinned` to force the default) -- it never launches into an exhausted account.
+`--strategy balanced` spreads work across available versions of the same agent -- useful when you have multiple accounts and want to avoid burning through one. When a Claude run reports a session limit, agents-cli records the stated reset time, shows `session-limited` in `agents view`, and excludes that account until the reset. When every account is rate-limited, the run exits nonzero naming each excluded account and the earliest window reset (use `--strategy pinned` to force the default) -- it never launches into an exhausted account.
 
 ### Don't care which harness? `agents run auto`
 

package/dist/bootstrap.js

@@ -256,12 +256,12 @@ Run and dispatch:
   pty                             Drive interactive terminal programs (REPLs, TUIs) via a persistent PTY session
   artifacts                       Publish what an agent made (plans, reports, visuals) to a shareable link
 
-Observe (read the fleet — no store merge; aliases point at the real readers):
-  feed / inbox                    Needs-you inbox (open blocks waiting on you)
+Observe (read the fleet — no store merge):
+  feed                            Needs-you inbox (open blocks waiting on you); agent posts = feed --filter updates
   sessions --active               Live agents (who is running right now)
   events                          Unified ops + activity event trail
   audit                           Tamper-evident run-dispatch log (not events)
-  status                          Sync/drift only (not the live fleet snapshot)
+  sync status                     Sync/drift only (not the live fleet snapshot)
   devices snapshot                One-process inventory + active sessions poll
 
 Credentials:
@@ -726,10 +726,13 @@ function registerHqTombstoneCommand(p) {
 }
 /**
  * Hidden `agents _internal <sub>` namespace for machine-to-machine calls that
- * are not user-facing. The first subcommand is `friction`, used by shell guard
- * hooks (git-guard, rm-guard, …) to self-report a block into the event log
- * before they exit 2 — they run before any `agents` process exists, so they
- * cannot emit in-process.
+ * are not user-facing. Subcommands:
+ *   - `friction` — shell guard hooks (git-guard, rm-guard, …) self-report a
+ *     block into the event log before they exit 2; they run before any
+ *     `agents` process exists, so they cannot emit in-process.
+ *   - `mergeable-prs` — the `pr-merge-on-green` built-in poll. Prints
+ *     `owner/repo#n` for this user's CI-green, non-author-approved open PRs
+ *     (cwd-independent `--repo`). Empty stdout is a silent observation.
  */
 function registerInternalCommand(p) {
     const internal = p.command('_internal', { hidden: true });
@@ -749,6 +752,21 @@ function registerInternalCommand(p) {
         });
         process.exit(0);
     });
+    internal
+        .command('mergeable-prs')
+        .description('Print owner/repo#n for CI-green, non-author-approved open PRs (pr-merge-on-green poll)')
+        .action(async () => {
+        try {
+            const { listMergeableRefs } = await import('./lib/github/pr-mergeable.js');
+            const refs = await listMergeableRefs();
+            if (refs)
+                process.stdout.write(`${refs}\n`);
+        }
+        catch {
+            // Empty observation — never write stderr (command.ts would treat it
+            // as the poll result and fire `mode: every` on the error text).
+        }
+    });
 }
 /** Runtime action for the shared `agents upgrade [version]` command definition. */
 async function runUpgrade(version, options) {

package/dist/cli/command-registry.d.ts

@@ -57,7 +57,6 @@ export declare const loadTrash: ModuleLoader;
 export declare const loadRestore: ModuleLoader;
 export declare const loadDoctor: ModuleLoader;
 export declare const loadApply: ModuleLoader;
-export declare const loadStatus: ModuleLoader;
 export declare const loadRoute: ModuleLoader;
 export declare const loadHarness: ModuleLoader;
 export declare const loadSecrets: ModuleLoader;
@@ -70,7 +69,6 @@ export declare const loadUsage: ModuleLoader;
 export declare const loadInsights: ModuleLoader;
 export declare const loadPerf: ModuleLoader;
 export declare const loadTrends: ModuleLoader;
-export declare const loadAlias: ModuleLoader;
 export declare const loadPty: ModuleLoader;
 export declare const loadTmux: ModuleLoader;
 export declare const loadWatchdog: ModuleLoader;
@@ -85,7 +83,6 @@ export declare const loadUninstall: ModuleLoader;
 export declare const loadUpgrade: ModuleLoader;
 export declare const loadSessions: ModuleLoader;
 export declare const loadTeams: ModuleLoader;
-export declare const loadTickets: ModuleLoader;
 export declare const loadCloud: ModuleLoader;
 export declare const loadMessage: ModuleLoader;
 export declare const loadSend: ModuleLoader;

package/dist/cli/command-registry.js

@@ -59,7 +59,6 @@ export const loadTrash = async () => (await import('../commands/trash.js')).regi
 export const loadRestore = async () => (await import('../commands/trash.js')).registerRestoreCommand;
 export const loadDoctor = async () => (await import('../commands/doctor.js')).registerDoctorCommand;
 export const loadApply = async () => (await import('../commands/apply.js')).registerApplyCommand;
-export const loadStatus = async () => (await import('../commands/status.js')).registerStatusCommand;
 export const loadRoute = async () => (await import('../commands/route.js')).registerRouteCommands;
 export const loadHarness = async () => (await import('../commands/harness.js')).registerHarnessCommands;
 export const loadSecrets = async () => (await import('../commands/secrets.js')).registerSecretsCommands;
@@ -73,7 +72,6 @@ export const loadInsights = async () => (await import('../commands/insights.js')
 export const loadPerf = async () => (await import('../commands/perf.js')).registerPerfCommand;
 // Thin deprecated alias of `agents insights mix` — no second mix implementation.
 export const loadTrends = async () => (await import('../commands/trends.js')).registerTrendsCommand;
-export const loadAlias = async () => (await import('../commands/alias.js')).registerAliasCommand;
 export const loadPty = async () => (await import('../commands/pty.js')).registerPtyCommands;
 export const loadTmux = async () => (await import('../commands/tmux.js')).registerTmuxCommands;
 export const loadWatchdog = async () => (await import('../commands/watchdog.js')).registerWatchdogCommand;
@@ -88,7 +86,6 @@ export const loadUninstall = async () => (await import('../commands/uninstall.js
 export const loadUpgrade = async () => (await import('../commands/upgrade.js')).registerUpgradeCommand;
 export const loadSessions = async () => (await import('../commands/sessions.js')).registerSessionsCommands;
 export const loadTeams = async () => (await import('../commands/teams.js')).registerTeamsCommands;
-export const loadTickets = async () => (await import('../commands/tickets.js')).registerTicketsCommand;
 export const loadCloud = async () => (await import('../commands/cloud.js')).registerCloudCommands;
 export const loadMessage = async () => (await import('../commands/message.js')).registerMessageCommand;
 export const loadSend = async () => (await import('../commands/send.js')).registerSendCommand;
@@ -179,7 +176,6 @@ export const COMMAND_LOADERS = {
     restore: [loadRestore],
     doctor: [loadDoctor],
     apply: [loadApply],
-    status: [loadStatus],
     route: [loadRoute],
     harness: [loadHarness],
     harnesses: [loadHarness],
@@ -193,7 +189,6 @@ export const COMMAND_LOADERS = {
     insights: [loadInsights],
     perf: [loadPerf],
     trends: [loadTrends],
-    alias: [loadAlias],
     pty: [loadPty],
     tmux: [loadTmux],
     watchdog: [loadWatchdog],
@@ -216,14 +211,11 @@ export const COMMAND_LOADERS = {
     upgrade: [loadUpgrade],
     sessions: [loadSessions],
     teams: [loadTeams],
-    tickets: [loadTickets],
     cloud: [loadCloud],
     message: [loadMessage],
     send: [loadSend],
     notify: [loadSend],
     feed: [loadFeed],
-    // Observe-umbrella alias of feed (the `timeline` alias was removed in RUSH-2692).
-    inbox: [loadFeed],
     mailboxes: [loadMailboxes],
     mailbox: [loadMailboxes],
     serve: [loadServe],

package/dist/commands/alias.d.ts

@@ -1,11 +1,14 @@
 /**
- * Alias command -- create top-level shim binaries that expand to `agents <subcommand>`.
+ * `agents setup alias` -- create top-level shim binaries that expand to
+ * `agents <subcommand>`. Nested under setup because the user is configuring
+ * this machine's PATH shortcuts, not operating a separate noun (RUSH-2965).
  *
- * Generates executable scripts in ~/.agents/shims/ (already on PATH from the
- * standard agents-cli install). Running `teams` becomes equivalent to
+ * Generates executable scripts in ~/.agents/.cache/shims/ (already on PATH from
+ * the standard agents-cli install). Running `teams` becomes equivalent to
  * `agents teams`. Aliases are tracked in ~/.agents/aliases.json so we can
  * list, regenerate, or remove them without scanning the shims directory
  * (which also holds agent CLI shims like claude/codex/gemini).
  */
 import type { Command } from 'commander';
-export declare function registerAliasCommand(program: Command): void;
+/** Register `agents setup alias` under the parent `setup` command. */
+export declare function registerAliasCommand(setupCmd: Command): void;

package/dist/commands/alias.js

@@ -4,7 +4,10 @@ import * as path from 'path';
 import { getUserAgentsDir } from '../lib/state.js';
 import { getShimsDir } from '../lib/installations/shims.js';
 import { ALL_AGENT_IDS, AGENTS } from '../lib/agents.js';
-const ALIASES_FILE = path.join(getUserAgentsDir(), 'aliases.json');
+import { setHelpSections } from '../lib/help.js';
+function aliasesFile() {
+    return path.join(getUserAgentsDir(), 'aliases.json');
+}
 /** Names that would clobber an agent CLI shim or the `agents` binary itself. */
 function reservedNames() {
     const reserved = new Set(['agents']);
@@ -13,10 +16,11 @@ function reservedNames() {
     return reserved;
 }
 function readAliases() {
-    if (!fs.existsSync(ALIASES_FILE))
+    const file = aliasesFile();
+    if (!fs.existsSync(file))
         return {};
     try {
-        const parsed = JSON.parse(fs.readFileSync(ALIASES_FILE, 'utf-8'));
+        const parsed = JSON.parse(fs.readFileSync(file, 'utf-8'));
         return parsed && typeof parsed === 'object' ? parsed : {};
     }
     catch {
@@ -24,8 +28,9 @@ function readAliases() {
     }
 }
 function writeAliases(map) {
-    fs.mkdirSync(path.dirname(ALIASES_FILE), { recursive: true });
-    fs.writeFileSync(ALIASES_FILE, JSON.stringify(map, null, 2) + '\n', 'utf-8');
+    const file = aliasesFile();
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, JSON.stringify(map, null, 2) + '\n', 'utf-8');
 }
 function shimPath(name) {
     return path.join(getShimsDir(), name);
@@ -46,10 +51,30 @@ function isAliasShim(filePath) {
         return false;
     }
 }
-export function registerAliasCommand(program) {
-    const cmd = program
+/** Register `agents setup alias` under the parent `setup` command. */
+export function registerAliasCommand(setupCmd) {
+    const cmd = setupCmd
         .command('alias')
         .description('Create shorthand binaries that expand to `agents <subcommand>`');
+    setHelpSections(cmd, {
+        examples: `
+      # Make \`teams\` run \`agents teams\`
+      agents setup alias add teams
+
+      # Shorthand for a longer expansion
+      agents setup alias add sess sessions preview
+
+      agents setup alias list
+      agents setup alias remove teams
+    `,
+        notes: `
+      Writes an executable shim into ~/.agents/.cache/shims/ (already on PATH after
+      \`agents setup\`) and records it in ~/.agents/aliases.json.
+
+      Names that collide with the agents binary or an agent CLI (claude, codex,
+      grok, …) are refused. Top-level \`agents alias\` is gone — use this group.
+    `,
+    });
     cmd
         .command('add <name> [expansion...]')
         .description('Create an alias shim. If expansion is omitted, defaults to <name>.')
@@ -106,7 +131,7 @@ export function registerAliasCommand(program) {
         const map = readAliases();
         const entries = Object.entries(map);
         if (entries.length === 0) {
-            console.log(chalk.gray('No aliases. Try: agents alias add teams'));
+            console.log(chalk.gray('No aliases. Try: agents setup alias add teams'));
             return;
         }
         const width = entries.reduce((max, [n]) => Math.max(max, n.length), 0);

package/dist/commands/auth.js

@@ -1,5 +1,6 @@
 import chalk from 'chalk';
 import { setHelpSections } from '../lib/help.js';
+import { runOrDie } from '../lib/format.js';
 import { clearPrixSession, fetchWhoAmI, pollDeviceToken, PrixApiError, readPrixSession, resolvePrixToken, startDeviceAuthorization, writePrixSession, } from '../lib/prix-account.js';
 function sleep(ms) {
     return new Promise(resolve => setTimeout(resolve, ms));
@@ -90,10 +91,13 @@ function runAuthLogout() {
 }
 export function registerAuthCommand(program) {
     const auth = program.command('auth').description('Sign in to your Rush account (shared by `agents org` and paid tiers)');
-    auth.command('login').description('Sign in via the device-code flow').action(async () => runAuthLogin());
+    auth.command('login').description('Sign in via the device-code flow').action(() => runOrDie(() => runAuthLogin()));
     auth.command('whoami').description('Show the signed-in account').option('--json', 'Machine-readable output')
-        .action((o, command) => runAuthWhoami(!!(o.json || command.optsWithGlobals().json)));
-    auth.command('logout').description('Clear the local `agents auth login` session').action(() => runAuthLogout());
+        .action((o, command) => {
+        const json = !!(o.json || command.optsWithGlobals().json);
+        return runOrDie(() => runAuthWhoami(json), { json });
+    });
+    auth.command('logout').description('Clear the local `agents auth login` session').action(() => runOrDie(() => runAuthLogout()));
     setHelpSections(auth, {
         examples: `agents auth login
 agents auth whoami

package/dist/commands/computer.js

@@ -14,7 +14,7 @@ import { makeClaudeResponder, resolveApiKey, DEFAULT_CLAUDE_MODEL, DEFAULT_CLAUD
 import { TASK_PREVIEW_MAX_CHARS } from '../lib/computer/sessions-list.js';
 import { runComputerSessionsCommand } from './computer-sessions-picker.js';
 import { truncate } from '../lib/feed/events.js';
-import { namespacedServiceLabel, serviceManifestHomeEnv } from '../lib/service-manifest.js';
+import { namespacedServiceLabel, serviceManifestHomeEnv, serviceManagerRegistrationAllowed } from '../lib/service-manifest.js';
 // Help groups — mirror `agents browser` so the mental model carries over.
 const COMPUTER_HELP_GROUPS = [
     { title: 'Installation', names: ['setup'] },
@@ -564,6 +564,10 @@ export async function activateComputerHelperMacLocal() {
     const uid = process.getuid?.();
     if (typeof uid !== 'number')
         throw new Error('cannot resolve uid');
+    const reg = serviceManagerRegistrationAllowed();
+    if (!reg.allowed) {
+        throw new Error(reg.reason);
+    }
     const domain = `gui/${uid}`;
     // Render the policy file BEFORE bootstrap so the daemon reads a fresh allow
     // list at startup (fail-safe: missing/unparseable → everything denied).
@@ -843,11 +847,21 @@ function registerStopCommand(program) {
             process.exit(1);
         }
         const domain = `gui/${uid}`;
-        try {
-            execFileSync('/bin/launchctl', ['bootout', domain, plistPath], { stdio: 'pipe' });
-        }
-        catch {
-            // already gone — fine
+        // Same invariant as the start path: a redirected-HOME process must never
+        // talk to the real launchd (RUSH-2968). Stop has a local fallback — the
+        // plist/socket cleanup below — so skip the bootout with the reason
+        // rather than throwing like start does.
+        const reg = serviceManagerRegistrationAllowed();
+        if (!reg.allowed) {
+            console.warn(`skipping launchctl bootout: ${reg.reason}`);
+        }
+        else {
+            try {
+                execFileSync('/bin/launchctl', ['bootout', domain, plistPath], { stdio: 'pipe' });
+            }
+            catch {
+                // already gone — fine
+            }
         }
         // launchd unlinks the socket when the daemon exits; helper also has an
         // atexit unlink. Best-effort cleanup if either path didn't fire.

package/dist/commands/daemon.js

@@ -761,7 +761,7 @@ function runWebhooksList(json) {
         const port = hostedReceiverPort(r);
         const funnel = r.funnel ? chalk.cyan(` public :${r.funnel.publicPort}`) : chalk.gray(' localhost only');
         console.log(`  127.0.0.1:${String(port).padEnd(6)} ${chalk.gray(`bundle ${r.bundle}`)}${funnel}`);
-        console.log(chalk.gray(`    endpoints: /hooks/github, /hooks/linear · ${r.rateLimit ?? DEFAULT_WEBHOOK_RATE_LIMIT}/min per source`));
+        console.log(chalk.gray(`    endpoints: /hooks/github, /hooks/linear, /hooks/slack · ${r.rateLimit ?? DEFAULT_WEBHOOK_RATE_LIMIT}/min per source`));
     }
     console.log(chalk.gray(`\nConfig: ${getDaemonWebhooksConfigPath()}`));
     console.log(chalk.gray('Changes take effect on the next daemon restart.'));

package/dist/commands/doctor.d.ts

@@ -78,9 +78,11 @@ export type IssueSeverity = 'critical' | 'warning' | 'info';
  *
  * Severity model (agent-agnostic — applies to every agent doctor inspects):
  *   - critical (silent breakage): an unwired hook, a missing/unparseable
- *     settings.json, a MISSING resource.
+ *     settings.json, a MISSING hook or plugin.
  *   - warning (stale / drift): a source layer behind origin, a DIVERGENT resource,
- *     a stale / never-synced version.
+ *     a stale / never-synced version, a MISSING resource of any other kind
+ *     (see `missingResourceSeverity`, which reads this split from
+ *     `FINDING_SEVERITY` — RUSH-2947).
  *   - info (orphan): an EXTRA resource → `agents prune cleanup`.
  */
 export interface VerdictIssue {

package/dist/commands/doctor.js

@@ -669,6 +669,19 @@ const AUTO_FIXABLE_CATEGORIES = new Set([
 export function verdictIsAutoFixable(v) {
     return v.issues.some((i) => AUTO_FIXABLE_CATEGORIES.has(i.category));
 }
+/**
+ * Missing-resource severity for one `DoctorKind`, read from `FINDING_SEVERITY`
+ * (the fleet-mode rubric) so target mode agrees with it kind by kind instead of
+ * re-hardcoding its own. Hooks and plugins map to their dedicated critical
+ * finding kinds; every other kind maps to the generic 'missing-resource' warning.
+ */
+function missingResourceSeverity(kind) {
+    if (kind === 'hooks')
+        return FINDING_SEVERITY['missing-hook'];
+    if (kind === 'plugins')
+        return FINDING_SEVERITY['missing-plugin'];
+    return FINDING_SEVERITY['missing-resource'];
+}
 /**
  * Fold a version report's divergences into a triaged verdict — one severity-tagged
  * finding per unwired hook, missing/divergent/extra resource, and behind-origin
@@ -718,16 +731,18 @@ export function computeVerdict(report) {
             });
         }
     }
-    // ── critical: missing resources (declared in sources, absent from home) ──
+    // ── missing resources (declared in sources, absent from home) — severity
+    // follows FINDING_SEVERITY: hooks/plugins are critical, everything else warns ──
     for (const kind of DOCTOR_ALL_KINDS) {
         for (const r of report.kinds[kind]) {
             if (r.status !== 'missing')
                 continue;
+            const severity = missingResourceSeverity(kind);
             issues.push({
-                severity: 'critical', category: 'missing', subject: r.name,
+                severity, category: 'missing', subject: r.name,
                 impact: `declared in sources but absent from the version home (${kind})`,
                 fix: fixCmd,
-                text: `${r.name} missing`, color: 'red',
+                text: `${r.name} missing`, color: severity === 'critical' ? 'red' : 'yellow',
             });
         }
     }
@@ -1739,10 +1754,10 @@ export function registerDoctorCommand(program) {
                 console.log(line);
             }
             // Point at the interactive reconcile when anything is out of sync — each
-            // finding carries its own fix, but `agents status` is the one place that
+            // finding carries its own fix, but `agents sync status` is the one place that
             // reviews and applies them together (opt-in, never auto-fires here).
             if (syncRows.some((r) => r.status !== 'fresh' || (r.unwiredHooks ?? 0) > 0) || repoBehindMarkers.some((m) => m.behind > 0)) {
-                console.log(chalk.gray('\nRun `agents status` to review and sync what has drifted.'));
+                console.log(chalk.gray('\nRun `agents sync status` to review and sync what has drifted.'));
             }
             // A routine runs on exactly one device. Each of these named several and
             // used to fire once per device — duplicate agent runs on every schedule.

package/dist/commands/exec.js

@@ -3015,8 +3015,9 @@ agents run auto --device yosemite-s0 "fix the flaky test"   # pin the device
             let exitCode;
             let ranAgent = agent;
             let ranVersion = defaultVersion;
-            if (fallback.length > 0) {
-                // fallback requires a prompt — enforced above, narrow the type here.
+            if (fallback.length > 0 || (rotationResult !== null && prompt !== undefined && !options.interactive)) {
+                // Fallback and balanced runs need captured output so a clean-exit
+                // session-limit refusal can update account availability.
                 // The sink reports which chain entry actually executed (may differ from
                 // the primary after a rate-limit handoff) so the audit record is honest.
                 const sink = {};

package/dist/commands/feed.js

@@ -312,7 +312,7 @@ export async function loadSessionMetasForFeedEnrichment(load) {
 export function registerFeedCommand(program) {
     const feed = program
         .command('feed')
-        .description('Operator inbox + agent status posts (alias: inbox = needs-you). Agent progress = --filter updates')
+        .description('Operator inbox + agent status posts. Default is needs-you; agent progress = --filter updates')
         .option('--json', 'Output as JSON (each block stamped with its outcome + ask class)')
         .option('--filter <view>', 'What to show: needs (default) · updates · all', 'needs')
         .option('--flat', 'List one block per agent instead of grouping by outcome')
@@ -642,35 +642,6 @@ export function registerFeedCommand(program) {
             renderOutcomeGroup(g, self);
         await renderTrailingActivity();
     });
-    // Observe-umbrella aliases (Phase 3): intentional second names, not deprecations.
-    // Re-parse into `feed` so flags/help stay single-sourced. See lib/observe-aliases.ts.
-    registerFeedObserveAliases(program);
-}
-/**
- * `inbox` → feed. Loaded with the feed module so the lazy COMMAND_LOADERS entry
- * for `inbox` also gets the real `feed` command registered for re-parse.
- */
-function registerFeedObserveAliases(program) {
-    const reparse = async (alias) => {
-        const { expandObserveAlias } = await import('../lib/observe-aliases.js');
-        const rest = process.argv.slice(3);
-        const expanded = expandObserveAlias(alias, rest);
-        if (!expanded) {
-            console.error(chalk.red(`Unknown observe alias: ${alias}`));
-            process.exit(1);
-        }
-        if (process.stderr.isTTY)
-            process.stderr.write(chalk.gray(`${expanded.note}\n`));
-        await program.parseAsync(['node', 'agents', ...expanded.argv]);
-    };
-    program
-        .command('inbox')
-        .description('Needs-you inbox (alias of `agents feed`). Open blocks waiting on you.')
-        .allowUnknownOption()
-        .allowExcessArguments()
-        .action(async () => {
-        await reparse('inbox');
-    });
 }
 /**
  * Mirror a written post to the configured sinks (`feed.broadcast` in

package/dist/commands/harness.js

@@ -73,7 +73,7 @@ export function buildFork(source, name, opts) {
             const account = findAccount(opts.account);
             if (!account)
                 throw new Error(`Unknown account '${opts.account}'.`);
-            profile.account = account.id;
+            profile.account = account.name;
             profile.provider = account.provider;
         }
         return profile;
@@ -97,7 +97,7 @@ export function buildFork(source, name, opts) {
         const account = findAccount(opts.account);
         if (!account)
             throw new Error(`Unknown account '${opts.account}'.`);
-        profile.account = account.id;
+        profile.account = account.name;
         profile.provider = account.provider;
     }
     return profile;
@@ -162,7 +162,7 @@ export function buildEdit(name, opts) {
         const account = findAccount(opts.account);
         if (!account)
             throw new Error(`Unknown account '${opts.account}'.`);
-        edited.account = account.id;
+        edited.account = account.name;
         edited.provider = account.provider;
     }
     if (opts.version === '')

package/dist/commands/monitors.js

@@ -440,7 +440,7 @@ export function registerMonitorsCommands(program) {
         .option('--dedupe-key <expr>', 'Regex whose first match is the "same event" signature (default: full output)')
         .option('--every', 'Fire on every observation (no dedupe) — rate-limit this')
         // ACTION
-        .option('--run <agent>', 'Spawn an agent (claude, codex, ...) with the prompt on fire')
+        .option('--run <agent>', 'Spawn an agent (claude, codex, ..., or a custom harness from agents harness list) with the prompt on fire')
         .option('--prompt <prompt>', 'Prompt for --run; {event} is replaced with the fired event')
         .option('--mode <mode>', 'Execution mode for --run: plan, edit, auto, or skip')
         .option('--effort <effort>', 'Reasoning effort for --run: low | medium | high | xhigh | max | auto')