@phnx-labs/agents-cli 1.22.42 → 1.22.44

package/dist/commands/feed.js

@@ -312,7 +312,7 @@ export async function loadSessionMetasForFeedEnrichment(load) {
 export function registerFeedCommand(program) {
     const feed = program
         .command('feed')
-        .description('Operator inbox + agent status posts (alias: inbox = needs-you). Agent progress = --filter updates')
+        .description('Operator inbox + agent status posts. Default is needs-you; agent progress = --filter updates')
         .option('--json', 'Output as JSON (each block stamped with its outcome + ask class)')
         .option('--filter <view>', 'What to show: needs (default) · updates · all', 'needs')
         .option('--flat', 'List one block per agent instead of grouping by outcome')
@@ -642,35 +642,6 @@ export function registerFeedCommand(program) {
             renderOutcomeGroup(g, self);
         await renderTrailingActivity();
     });
-    // Observe-umbrella aliases (Phase 3): intentional second names, not deprecations.
-    // Re-parse into `feed` so flags/help stay single-sourced. See lib/observe-aliases.ts.
-    registerFeedObserveAliases(program);
-}
-/**
- * `inbox` → feed. Loaded with the feed module so the lazy COMMAND_LOADERS entry
- * for `inbox` also gets the real `feed` command registered for re-parse.
- */
-function registerFeedObserveAliases(program) {
-    const reparse = async (alias) => {
-        const { expandObserveAlias } = await import('../lib/observe-aliases.js');
-        const rest = process.argv.slice(3);
-        const expanded = expandObserveAlias(alias, rest);
-        if (!expanded) {
-            console.error(chalk.red(`Unknown observe alias: ${alias}`));
-            process.exit(1);
-        }
-        if (process.stderr.isTTY)
-            process.stderr.write(chalk.gray(`${expanded.note}\n`));
-        await program.parseAsync(['node', 'agents', ...expanded.argv]);
-    };
-    program
-        .command('inbox')
-        .description('Needs-you inbox (alias of `agents feed`). Open blocks waiting on you.')
-        .allowUnknownOption()
-        .allowExcessArguments()
-        .action(async () => {
-        await reparse('inbox');
-    });
 }
 /**
  * Mirror a written post to the configured sinks (`feed.broadcast` in

package/dist/commands/fleet-capture.d.ts

@@ -1,7 +1,7 @@
 /**
  * `agents fleet capture` (alias surface of `agents devices capture`) — snapshot
  * the live environment into the `fleet:` block of `agents.yaml` so a fresh
- * machine can reconstruct it with `agents apply`.
+ * machine can reconstruct it with `agents fleet apply`.
  *
  * Local-read + local-write, zero SSH. Records device NAMES only (never IPs or
  * usernames — those are re-resolved live from Tailscale at apply-time), plus the

package/dist/commands/fleet-capture.js

@@ -1,7 +1,7 @@
 /**
  * `agents fleet capture` (alias surface of `agents devices capture`) — snapshot
  * the live environment into the `fleet:` block of `agents.yaml` so a fresh
- * machine can reconstruct it with `agents apply`.
+ * machine can reconstruct it with `agents fleet apply`.
  *
  * Local-read + local-write, zero SSH. Records device NAMES only (never IPs or
  * usernames — those are re-resolved live from Tailscale at apply-time), plus the
@@ -12,7 +12,7 @@
 import * as fs from 'fs';
 import chalk from 'chalk';
 import * as yaml from 'yaml';
-import { loadDevices, isControlDevice } from '../lib/devices/registry.js';
+import { loadDevices } from '../lib/devices/registry.js';
 import { readMeta, updateMeta, getDevicePinsPath } from '../lib/state.js';
 import { machineId } from '../lib/machine-id.js';
 import { listBundles } from '../lib/secrets/bundles.js';
@@ -39,10 +39,9 @@ function agentsFromPins(names) {
 }
 async function runCapture(opts) {
     const meta = readMeta();
-    // Roster: registered, non-control device names only.
+    // Roster: every registered device name.
     const registry = await loadDevices();
     let names = Object.values(registry)
-        .filter((d) => !isControlDevice(d))
         .map((d) => d.name)
         .sort();
     if (opts.device) {
@@ -83,7 +82,7 @@ async function runCapture(opts) {
     console.log(chalk.green('Captured fleet profile') +
         chalk.gray(` — ${deviceCount} device(s), ${defaults.agents?.length ?? 0} agent(s), ` +
             `${inputs.secretsBundles?.length ?? 0} secret bundle(s), ${inputs.routines?.length ?? 0} routine(s).`));
-    console.log(chalk.gray('  Wrote agents.yaml → fleet:. Push it (`agents repo push`) and run `agents apply` on any machine.'));
+    console.log(chalk.gray('  Wrote agents.yaml → fleet:. Push it (`agents repo push`) and run `agents fleet apply` on any machine.'));
 }
 /** Attach `capture` to the `devices`/`fleet` command tree. */
 export function registerFleetCaptureCommand(devicesCmd) {

package/dist/commands/harness.js

@@ -17,8 +17,6 @@ import { listProfiles, readProfile, writeProfile, deleteProfile, profileExists,
 import { listPresets, getPreset } from '../lib/profiles-presets.js';
 import { AGENTS, ALL_AGENT_IDS, resolveAgentName } from '../lib/agents.js';
 import { findAccount } from '../lib/account-registry.js';
-import { keychainItemName, setKeychainToken, deleteKeychainToken } from '../lib/secrets/profiles.js';
-import { readStdinSync } from '../lib/format.js';
 import { runWizardSteps, createSteps, editSteps, defaultWizardIO, } from './harness-wizard.js';
 /** Short capability summary for a native harness — its supported run modes. */
 function nativeModes(id) {
@@ -73,7 +71,7 @@ export function buildFork(source, name, opts) {
             const account = findAccount(opts.account);
             if (!account)
                 throw new Error(`Unknown account '${opts.account}'.`);
-            profile.account = account.id;
+            profile.account = account.name;
             profile.provider = account.provider;
         }
         return profile;
@@ -97,7 +95,7 @@ export function buildFork(source, name, opts) {
         const account = findAccount(opts.account);
         if (!account)
             throw new Error(`Unknown account '${opts.account}'.`);
-        profile.account = account.id;
+        profile.account = account.name;
         profile.provider = account.provider;
     }
     return profile;
@@ -162,7 +160,7 @@ export function buildEdit(name, opts) {
         const account = findAccount(opts.account);
         if (!account)
             throw new Error(`Unknown account '${opts.account}'.`);
-        edited.account = account.id;
+        edited.account = account.name;
         edited.provider = account.provider;
     }
     if (opts.version === '')
@@ -567,7 +565,7 @@ Examples:
     cmd
         .command('remove <name>')
         .alias('rm')
-        .description('Delete a custom harness (keychain token is kept — use `harness logout <provider>` to remove).')
+        .description('Delete a custom harness (credentials stay on `agents accounts`; this only drops the named pin).')
         .action((name) => {
         const existed = deleteProfile(name);
         if (!existed) {
@@ -576,50 +574,4 @@ Examples:
         }
         console.log(chalk.green(`Harness '${name}' removed.`));
     });
-    cmd
-        .command('login <provider>')
-        .description('Store or rotate the API key for a provider (e.g., openrouter). Shared across harnesses using that provider.')
-        .option('--key-stdin', 'Read API key from stdin')
-        .action(async (provider, opts) => {
-        try {
-            const item = keychainItemName(provider);
-            let token;
-            if (opts.keyStdin) {
-                token = readStdinSync();
-                if (!token)
-                    throw new Error('No key received on stdin.');
-            }
-            else {
-                if (!isInteractiveTerminal()) {
-                    throw new Error('A secret is required but the shell is not interactive. Pipe the key via stdin (--key-stdin).');
-                }
-                const { password } = await import('@inquirer/prompts');
-                token = await password({ message: `Enter API key for ${provider}`, mask: true });
-            }
-            setKeychainToken(item, token);
-            console.log(chalk.green(`Stored in keychain: ${item}`));
-        }
-        catch (err) {
-            console.error(chalk.red(err.message));
-            process.exit(1);
-        }
-    });
-    cmd
-        .command('logout <provider>')
-        .description('Remove a stored provider key from keychain')
-        .action((provider) => {
-        try {
-            const item = keychainItemName(provider);
-            const existed = deleteKeychainToken(item);
-            if (!existed) {
-                console.error(chalk.yellow(`No keychain item '${item}' to remove.`));
-                process.exit(1);
-            }
-            console.log(chalk.green(`Removed keychain item: ${item}`));
-        }
-        catch (err) {
-            console.error(chalk.red(err.message));
-            process.exit(1);
-        }
-    });
 }

package/dist/commands/hooks.js

@@ -514,7 +514,7 @@ Examples:
         }
         else {
             console.log(chalk.green(`\nRemoved ${removed} hook(s) from version homes.`));
-            console.log(chalk.gray('Central source unchanged. Hooks will re-sync on next agent launch.'));
+            console.log(chalk.gray("Central source unchanged. Restore any target with 'agents sync <agent>@<version> --yes'."));
         }
     });
     // `hooks prune` moved to the top-level `agents prune cleanup` command.

package/dist/commands/insights.d.ts

@@ -31,7 +31,7 @@
  * the coaching prose by piping the AGGREGATE (never raw transcripts) through a headless
  * `claude -p`.
  *
- * `agents trends` is a thin deprecated alias of the mix tree only (see commands/trends.ts).
+ * Former top-level `agents trends` is `agents insights mix` / `agents insights trends`.
  */
 import type { Command } from 'commander';
 export declare function registerInsightsCommand(program: Command): void;

package/dist/commands/insights.js

@@ -31,7 +31,7 @@
  * the coaching prose by piping the AGGREGATE (never raw transcripts) through a headless
  * `claude -p`.
  *
- * `agents trends` is a thin deprecated alias of the mix tree only (see commands/trends.ts).
+ * Former top-level `agents trends` is `agents insights mix` / `agents insights trends`.
  */
 import * as fs from 'fs';
 import chalk from 'chalk';
@@ -651,7 +651,8 @@ function configureInsightsCommand(cmd) {
         \`agents insights mix\`      — cheap counters from sessions.db + usage.db
       Latency is \`agents perf\` (not mix). Quota is \`agents usage\`. Spend is
       \`agents insights cost\`; shipped output is \`agents insights output\`. Skill/slash popularity
-      is \`agents sessions stats\`. \`agents trends\` is a deprecated alias of the mix tree.
+      is \`agents sessions stats\`. Former top-level \`agents trends\` is \`agents insights mix\`
+      (also \`agents insights trends\`).
 
       The behavioural report parses in-scope transcripts once and caches facets; later runs
       re-read only files that changed. \`--refresh\` forces a full re-read.

package/dist/commands/menubar.js

@@ -8,7 +8,7 @@
  */
 import chalk from 'chalk';
 import { setHelpSections } from '../lib/help.js';
-import { enableMenubarService, disableMenubarService, getMenubarStatus, runMenubarSetup, } from '../lib/menubar/install-menubar.js';
+import { enableMenubarService, disableMenubarService, getMenubarStatus, runMenubarSetup, buildMenubarDoctorReport, } from '../lib/menubar/install-menubar.js';
 function notMac() {
     if (process.platform !== 'darwin') {
         console.log(chalk.yellow('AGI Menu is macOS only.'));
@@ -77,6 +77,32 @@ function printSetupResult(r) {
         console.log(chalk.red('AGI Menu not fully configured.') + chalk.gray('  See the failed step above.'));
     }
 }
+function printDoctorReport(r) {
+    console.log(chalk.bold('AGI Menu doctor\n'));
+    console.log(`  install path       ${r.installPath ? chalk.gray(r.installPath) : chalk.red('not installed')}`);
+    console.log(`  installed version  ${r.installedVersion ? chalk.gray(r.installedVersion) : chalk.gray('unknown')}`);
+    console.log(`  CLI version        ${chalk.gray(r.currentVersion)}${r.versionMatches ? '' : chalk.yellow('  (mismatch — `agents menubar setup` updates it)')}`);
+    const identity = r.signingIdentity === 'developer-id'
+        ? chalk.green('Developer ID (update-stable)')
+        : r.signingIdentity === 'ad-hoc'
+            ? chalk.red('ad-hoc (unstable — Accessibility grant breaks on every update)')
+            : chalk.gray('unknown (nothing installed)');
+    console.log(`  signing identity   ${identity}`);
+    console.log(`  running            ${r.running ? chalk.green('yes') : chalk.gray('no')}`);
+    if (r.staleRunningProcess.length > 0) {
+        for (const p of r.staleRunningProcess) {
+            const mark = p.stale
+                ? chalk.red('started BEFORE the on-disk bundle — running the OLD binary')
+                : chalk.green('matches the on-disk bundle');
+            console.log(`  pid ${String(p.pid).padEnd(10)} ${mark}`);
+        }
+    }
+    if (r.accessibilityHintNeeded) {
+        console.log(chalk.yellow('\n  Accessibility grant may not be trusted for the current binary.'));
+        console.log(chalk.gray('  Run `agents menubar setup` to reinstall + restart the helper, then grant access:'));
+        console.log(chalk.gray('  open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"'));
+    }
+}
 export function registerMenubarCommands(program) {
     const menubar = program
         .command('menubar')
@@ -184,6 +210,37 @@ export function registerMenubarCommands(program) {
         }
         printStatus(s);
     });
+    const doctor = menubar
+        .command('doctor')
+        .description('Diagnose AGI Menu: install path, version skew, signing identity, stale process')
+        .option('--json', 'Emit machine-readable JSON')
+        .action((options) => {
+        const r = buildMenubarDoctorReport();
+        if (options.json) {
+            process.stdout.write(JSON.stringify(r) + '\n');
+            return;
+        }
+        if (r.platform !== 'darwin') {
+            console.log(chalk.yellow('AGI Menu is macOS only.'));
+            return;
+        }
+        printDoctorReport(r);
+    });
+    setHelpSections(doctor, {
+        examples: `
+      # Why did Accessibility ask again after an update?
+      agents menubar doctor
+    `,
+        notes: `
+      Read-only — never installs, restarts, or resets anything. Reports the
+      installed bundle's signing identity (ad-hoc signing breaks the
+      Accessibility grant on every update; Developer ID is stable across
+      updates) and whether a live helper pid started before the on-disk
+      bundle's last write — the sign that a running process is still the
+      binary an update just replaced. \`agents menubar setup\` is the fix for
+      anything this flags.
+    `,
+    });
     // Bare `agents menubar` -> status.
     menubar.action(() => {
         const s = getMenubarStatus();

package/dist/commands/monitors.js

@@ -440,7 +440,7 @@ export function registerMonitorsCommands(program) {
         .option('--dedupe-key <expr>', 'Regex whose first match is the "same event" signature (default: full output)')
         .option('--every', 'Fire on every observation (no dedupe) — rate-limit this')
         // ACTION
-        .option('--run <agent>', 'Spawn an agent (claude, codex, ...) with the prompt on fire')
+        .option('--run <agent>', 'Spawn an agent (claude, codex, ..., or a custom harness from agents harness list) with the prompt on fire')
         .option('--prompt <prompt>', 'Prompt for --run; {event} is replaced with the fired event')
         .option('--mode <mode>', 'Execution mode for --run: plan, edit, auto, or skip')
         .option('--effort <effort>', 'Reasoning effort for --run: low | medium | high | xhigh | max | auto')

package/dist/commands/org.d.ts

@@ -3,4 +3,9 @@ import type { Command } from 'commander';
 export declare function resolveInviteRole(raw: string | undefined): 'admin' | 'member';
 /** Validate a role argument before any network call — same rule the backend enforces server-side. */
 export declare function parseRole(raw: string): 'admin' | 'member';
+/** One-line deprecation for the leftover top-level `agents org` spelling. */
+export declare function printOrgDeprecation(): void;
+/** Canonical home: `agents auth space …`. */
+export declare function registerAuthSpaceCommand(auth: Command): void;
+/** Leftover top-level spelling — same tree, deprecation on every path. */
 export declare function registerOrgCommand(program: Command): void;

package/dist/commands/org.js

@@ -1,5 +1,6 @@
 import chalk from 'chalk';
 import { setHelpSections } from '../lib/help.js';
+import { runOrDie } from '../lib/format.js';
 import { createSpace, createSpaceInvite, fetchWhoAmI, listSpaceMembers, listSpaces, removeSpaceMember, resolveMemberFromList, resolvePrixToken, resolveSpaceFromList, slugify, updateSpaceMemberRole, } from '../lib/prix-account.js';
 /** Every `agents org` subcommand needs a token up front — one place to say so. */
 function requireToken() {
@@ -40,7 +41,7 @@ async function runList(o) {
         return;
     }
     if (!spaces.length) {
-        console.log(chalk.gray("No spaces. Create one with 'agents org create <name>'."));
+        console.log(chalk.gray("No spaces. Create one with 'agents auth space create <name>'."));
         return;
     }
     for (const space of spaces)
@@ -132,43 +133,96 @@ async function runLeave(spaceArg, o) {
     }
     console.log(chalk.green(`Left '${space.name}'.`));
 }
-export function registerOrgCommand(program) {
-    const org = program.command('org').description('Create and manage a team (a Rush "space") you can share with `agents auth login` collaborators');
-    org.command('create <name>').description('Create a space (free tier: 1 owned space)')
+/** One-line deprecation for the leftover top-level `agents org` spelling. */
+export function printOrgDeprecation() {
+    console.error(chalk.yellow('agents org is deprecated — use `agents auth space`.'));
+}
+/** Shared space CRUD tree — canonical under `auth space`, leftover under `org`. */
+function attachSpaceCommands(parent, opts) {
+    const before = () => {
+        if (opts.deprecated)
+            printOrgDeprecation();
+    };
+    const jsonFlag = (o, command) => !!(o.json || command.optsWithGlobals().json);
+    parent.command('create <name>').description('Create a space (free tier: 1 owned space)')
         .option('--slug <slug>', 'Override the derived slug')
         .option('--description <text>', 'Optional description')
         .option('--json', 'Machine-readable output')
-        .action((name, o, command) => runCreate(name, { ...o, json: !!(o.json || command.optsWithGlobals().json) }));
-    org.command('list').description('List spaces you own or belong to').option('--json', 'Machine-readable output')
-        .action((o, command) => runList({ json: !!(o.json || command.optsWithGlobals().json) }));
-    org.command('view [space]').description('Show one space (defaults to your only space)').option('--json', 'Machine-readable output')
-        .action((space, o, command) => runView(space, { json: !!(o.json || command.optsWithGlobals().json) }));
-    org.command('invite <email>').description('Invite (or directly add) a member')
+        .action((name, o, command) => {
+        before();
+        const json = jsonFlag(o, command);
+        return runOrDie(() => runCreate(name, { ...o, json }), { json });
+    });
+    parent.command('list').description('List spaces you own or belong to').option('--json', 'Machine-readable output')
+        .action((o, command) => {
+        before();
+        const json = jsonFlag(o, command);
+        return runOrDie(() => runList({ json }), { json });
+    });
+    parent.command('view [space]').description('Show one space (defaults to your only space)').option('--json', 'Machine-readable output')
+        .action((space, o, command) => {
+        before();
+        const json = jsonFlag(o, command);
+        return runOrDie(() => runView(space, { json }), { json });
+    });
+    parent.command('invite <email>').description('Invite (or directly add) a member')
         .option('--role <role>', 'admin | member', 'member')
         .option('--space <id-or-slug>', 'Space to invite into (defaults to your only space)')
         .option('--json', 'Machine-readable output')
-        .action((email, o, command) => runInvite(email, { ...o, json: !!(o.json || command.optsWithGlobals().json) }));
-    org.command('members [space]').description('List a space\'s members').option('--json', 'Machine-readable output')
-        .action((space, o, command) => runMembers(space, { json: !!(o.json || command.optsWithGlobals().json) }));
-    org.command('role <email> <role>').description('Change a member\'s role (owner-only for admin)')
+        .action((email, o, command) => {
+        before();
+        const json = jsonFlag(o, command);
+        return runOrDie(() => runInvite(email, { ...o, json }), { json });
+    });
+    parent.command('members [space]').description("List a space's members").option('--json', 'Machine-readable output')
+        .action((space, o, command) => {
+        before();
+        const json = jsonFlag(o, command);
+        return runOrDie(() => runMembers(space, { json }), { json });
+    });
+    parent.command('role <email> <role>').description("Change a member's role (owner-only for admin)")
         .option('--space <id-or-slug>', 'Space to change (defaults to your only space)')
         .option('--json', 'Machine-readable output')
-        .action((email, role, o, command) => runRole(email, role, { ...o, json: !!(o.json || command.optsWithGlobals().json) }));
-    org.command('remove <email>').description('Remove a member from a space')
+        .action((email, role, o, command) => {
+        before();
+        const json = jsonFlag(o, command);
+        return runOrDie(() => runRole(email, role, { ...o, json }), { json });
+    });
+    parent.command('remove <email>').description('Remove a member from a space')
         .option('--space <id-or-slug>', 'Space to remove from (defaults to your only space)')
         .option('--json', 'Machine-readable output')
-        .action((email, o, command) => runRemove(email, { ...o, json: !!(o.json || command.optsWithGlobals().json) }));
-    org.command('leave [space]').description('Leave a space you do not own').option('--json', 'Machine-readable output')
-        .action((space, o, command) => runLeave(space, { json: !!(o.json || command.optsWithGlobals().json) }));
-    setHelpSections(org, {
-        examples: `agents org create acme-team
-agents org list
-agents org view acme-team
-agents org invite dev@example.com --role admin
-agents org members
-agents org role dev@example.com admin
-agents org remove dev@example.com
-agents org leave acme-team`,
-        notes: 'Maps to the Rush backend\'s /api/v1/spaces (the free-tier team primitive), not /api/v1/orgs. Free tier: 1 owned space, 3 members per space. Every command needs `agents auth login` (or a `rush login` session) first. `--space` is only needed once you belong to more than one space.',
+        .action((email, o, command) => {
+        before();
+        const json = jsonFlag(o, command);
+        return runOrDie(() => runRemove(email, { ...o, json }), { json });
+    });
+    parent.command('leave [space]').description('Leave a space you do not own').option('--json', 'Machine-readable output')
+        .action((space, o, command) => {
+        before();
+        const json = jsonFlag(o, command);
+        return runOrDie(() => runLeave(space, { json }), { json });
+    });
+    setHelpSections(parent, {
+        examples: `${opts.prefix} create acme-team
+${opts.prefix} list
+${opts.prefix} view acme-team
+${opts.prefix} invite dev@example.com --role admin
+${opts.prefix} members
+${opts.prefix} role dev@example.com admin
+${opts.prefix} remove dev@example.com
+${opts.prefix} leave acme-team`,
+        notes: opts.deprecated
+            ? 'Deprecated alias of `agents auth space`. Maps to the Rush backend\'s /api/v1/spaces (the free-tier team primitive), not /api/v1/orgs. Free tier: 1 owned space, 3 members per space. Every command needs `agents auth login` (or a `rush login` session) first. `--space` is only needed once you belong to more than one space.'
+            : 'Maps to the Rush backend\'s /api/v1/spaces (the free-tier team primitive), not /api/v1/orgs. Free tier: 1 owned space, 3 members per space. Every command needs `agents auth login` (or a `rush login` session) first. `--space` is only needed once you belong to more than one space. The leftover `agents org` spelling still works and prints a deprecation line.',
     });
 }
+/** Canonical home: `agents auth space …`. */
+export function registerAuthSpaceCommand(auth) {
+    const space = auth.command('space').description('Create and manage a Prix space (invite collaborators)');
+    attachSpaceCommands(space, { prefix: 'agents auth space' });
+}
+/** Leftover top-level spelling — same tree, deprecation on every path. */
+export function registerOrgCommand(program) {
+    const org = program.command('org').description('Deprecated alias of `agents auth space` — create and manage a Prix space');
+    attachSpaceCommands(org, { prefix: 'agents org', deprecated: true });
+}

package/dist/commands/output.js

@@ -10,7 +10,7 @@ import { formatUsd, PRICING_VERSION } from '../lib/pricing/index.js';
 import { formatDuration } from '../lib/session/render.js';
 import { terminalWidth, truncateToWidth, padToWidth } from '../lib/session/width.js';
 import { collectGitOutput } from '../lib/output/git-output.js';
-import { loadDevices, isControlDevice } from '../lib/devices/registry.js';
+import { loadDevices } from '../lib/devices/registry.js';
 import { machineId } from '../lib/session/sync/config.js';
 import { stripClixml } from '../lib/hosts/remote-cmd.js';
 const execFileAsync = promisify(execFile);
@@ -189,7 +189,7 @@ async function outputAction(options) {
     const self = machineId();
     const registry = await loadDevices();
     const remotes = Object.values(registry)
-        .filter(d => d.tailscale?.online && d.name !== self && !isControlDevice(d))
+        .filter(d => d.tailscale?.online && d.name !== self)
         .map(d => d.name);
     if (!options.json)
         console.error(chalk.gray(`Folding in ${remotes.length} online device${remotes.length !== 1 ? 's' : ''}…`));

package/dist/commands/profiles.js

@@ -191,7 +191,7 @@ export async function addProfile(name, opts, label = 'Profile') {
             authEnvVar,
         });
         if (account) {
-            profile.account = account.id;
+            profile.account = account.name;
             profile.provider = account.provider;
         }
         if (opts.fromSecrets)
@@ -213,7 +213,7 @@ export async function addProfile(name, opts, label = 'Profile') {
     }
     const profile = profileFromPreset(name, preset, opts.version);
     if (account) {
-        profile.account = account.id;
+        profile.account = account.name;
         profile.provider = account.provider;
     }
     if (opts.fromSecrets)

package/dist/commands/prune.js

@@ -12,10 +12,11 @@
  *     agents-cli.
  *   - Runs: routine execution logs, keeping only the last N per job.
  *
- * Sync (additive: copy missing/changed files into version homes) is no longer
- * a user-facing verb — `syncResourcesToVersion` runs at agent launch and
- * applies adds/updates automatically. Pruning, however, is destructive, so it
- * stays explicit.
+ * Sync (additive: copy missing/changed files into version homes) is the job
+ * of `agents sync` / `agents refresh` — the shim's launch hook
+ * (`agents sync --launch`) is project-scoped only and deliberately skips
+ * version-home reconciliation. Pruning, however, is destructive, so it stays
+ * explicit.
  *
  * Default scope: each agent's currently-pinned default version for orphan
  * cleanup, plus the standard cross-agent version-dedup pass. Pass `--all`

package/dist/commands/routines.js

@@ -13,6 +13,7 @@ import * as yaml from 'yaml';
 import { isDaemonRunning, signalDaemonReload, startDaemon, stopDaemon, readDaemonLog, getDaemonStatus, getDaemonLogPath, } from '../lib/daemon/daemon.js';
 import { assertSchedulerEnabled, assertDaemonEnabled, isDaemonEnabled } from '../lib/device-config.js';
 import { parseAgentVersionSpec, isAgentHardDeprecated, hardDeprecationError, ROUTINE_AGENT_IDS } from '../lib/agents.js';
+import { isCustomHarnessName } from '../lib/profiles.js';
 import { RUN_STRATEGIES, normalizeRunStrategy } from '../lib/accounting/rotate.js';
 import { formatRepoLink, REPO_DISPLAY_MAX } from '../lib/routines-format.js';
 import { listJobs as listAllJobs, deleteJob, readJob, validateJob, writeJob, setJobEnabled, listRuns, routineStats, getLatestRun, getRunDir, getJobPath, isCanonicalRoutineSource, parseAtTime, hasCompletedOneShotRun, isOneShotLikeSchedule, isOneShotRoutine, jobRunsOnThisDevice, checkJobDeviceEligibility, normalizeTriggerEvent, parseHostStrategy, resolveHostStrategy, HOST_STRATEGIES, computeProjectGroupKind, projectGroupKey, projectGroupTitle, projectGroupOrder, normalizeProjects, buildRoutineListJson, fireConditionLabel, nextRunForDisplay, nextRunLabel, localLatestRun, listJobsForDisplay, } from '../lib/scheduling/routines.js';
@@ -897,7 +898,7 @@ export function registerRoutinesCommands(program) {
         .command('add [nameOrPath]')
         .description('Create a new routine from a YAML file or inline flags. Starts the scheduler automatically if it is not already running.')
         .option('-s, --schedule <cron>', 'Cron schedule in standard format (5 fields: minute hour day month weekday)')
-        .option('-a, --agent <agent[@version]>', `Which agent runs this routine: ${ROUTINE_AGENT_IDS.join(', ')}. An @version pins that exact installed version (same syntax as agents run), persisted as separate agent + version fields.`)
+        .option('-a, --agent <agent[@version]>', `Which agent runs this routine: ${ROUTINE_AGENT_IDS.join(', ')}, or a custom harness name (agents harness list). An @version pins that exact installed version (same syntax as agents run), persisted as separate agent + version fields; a custom harness pins its own host version.`)
         .option('--strategy <strategy>', `Version/account selection strategy for this routine: ${RUN_STRATEGIES.join(' | ')}. Overrides run.<agent>.strategy from the firing device's config. Conflicts with an @version pin.`)
         .option('--balanced', 'Shortcut for --strategy balanced.')
         .option('--workflow <name>', 'Run an installed workflow (~/.agents/workflows/<name>) via `agents run`. Mutually exclusive with --agent.')
@@ -984,17 +985,26 @@ export function registerRoutinesCommands(program) {
             // silently missed a hard-deprecated harness pinned with @version.
             let parsedAgent;
             if (options.agent) {
-                const parsed = parseAgentVersionSpec(options.agent);
-                if ('error' in parsed) {
-                    console.error(chalk.red(parsed.error));
-                    process.exit(1);
+                // A custom harness (agents harness list) is a valid routine agent:
+                // the runner delegates it to `agents run <name>`. It pins its own
+                // host version, so no @version suffix applies (a suffixed name falls
+                // through to the parse error below).
+                if (isCustomHarnessName(options.agent)) {
+                    parsedAgent = { agent: options.agent };
                 }
-                parsedAgent = parsed;
-                // Hard-deprecated harnesses cannot be scheduled — refuse at create time
-                // so no new recurring job silently fails against a retired backend.
-                if (isAgentHardDeprecated(parsed.agent)) {
-                    console.error(chalk.red(hardDeprecationError(parsed.agent)));
-                    process.exit(1);
+                else {
+                    const parsed = parseAgentVersionSpec(options.agent);
+                    if ('error' in parsed) {
+                        console.error(chalk.red(parsed.error));
+                        process.exit(1);
+                    }
+                    parsedAgent = parsed;
+                    // Hard-deprecated harnesses cannot be scheduled — refuse at create time
+                    // so no new recurring job silently fails against a retired backend.
+                    if (isAgentHardDeprecated(parsed.agent)) {
+                        console.error(chalk.red(hardDeprecationError(parsed.agent)));
+                        process.exit(1);
+                    }
                 }
             }
             // --strategy / --balanced: per-routine selection policy, same vocabulary
@@ -1377,22 +1387,30 @@ export function registerRoutinesCommands(program) {
             if (options.projectAnchor !== undefined)
                 existing.project = options.projectAnchor;
             if (options.agent !== undefined) {
-                const parsed = parseAgentVersionSpec(options.agent);
-                if ('error' in parsed) {
-                    console.error(chalk.red(parsed.error));
-                    process.exit(1);
+                if (isCustomHarnessName(options.agent)) {
+                    // Custom harness: delegated to `agents run <name>`; the profile
+                    // pins its own host version, so any prior pin is cleared.
+                    existing.agent = options.agent;
+                    delete existing.version;
                 }
-                if (isAgentHardDeprecated(parsed.agent)) {
-                    console.error(chalk.red(hardDeprecationError(parsed.agent)));
-                    process.exit(1);
+                else {
+                    const parsed = parseAgentVersionSpec(options.agent);
+                    if ('error' in parsed) {
+                        console.error(chalk.red(parsed.error));
+                        process.exit(1);
+                    }
+                    if (isAgentHardDeprecated(parsed.agent)) {
+                        console.error(chalk.red(hardDeprecationError(parsed.agent)));
+                        process.exit(1);
+                    }
+                    existing.agent = parsed.agent;
+                    // An @version pin replaces any previous pin; a bare agent clears it so
+                    // the routine returns to strategy/balanced selection.
+                    if (parsed.version)
+                        existing.version = parsed.version;
+                    else
+                        delete existing.version;
                 }
-                existing.agent = parsed.agent;
-                // An @version pin replaces any previous pin; a bare agent clears it so
-                // the routine returns to strategy/balanced selection.
-                if (parsed.version)
-                    existing.version = parsed.version;
-                else
-                    delete existing.version;
             }
             if (options.strategy !== undefined) {
                 const normalized = normalizeRunStrategy(options.strategy);