@phnx-labs/agents-cli 1.22.5 → 1.22.7

package/dist/lib/agents.js

@@ -215,7 +215,7 @@ export const AGENTS = {
         // Claude Code has no headless Anthropic-hosted dispatch CLI (only
         // --remote-control, which bridges a *local* session). Its cloud is Rush.
         cloudProvider: 'rush',
-        capabilities: { hooks: true, mcp: true, mcpHttp: true, mcpHeaders: true, allowlist: true, skills: true, commands: true, plugins: true, subagents: true, rules: { file: 'CLAUDE.md' }, workflows: true, memory: true, modes: ['plan', 'edit', 'auto', 'skip'], rulesImports: true },
+        capabilities: { hooks: true, mcp: true, mcpHttp: true, mcpHeaders: true, allowlist: true, skills: true, commands: true, plugins: true, subagents: true, rules: { file: 'CLAUDE.md' }, workflows: true, memory: true, modes: ['plan', 'edit', 'auto', 'skip'], rulesImports: true, interactiveRepl: true },
     },
     // codex hooks: gated to >= 0.116.0 (introduced [features] codex_hooks flag).
     codex: {
@@ -237,7 +237,7 @@ export const AGENTS = {
         cloudProvider: 'codex',
         // Subagents: multi-agent plumbing since 0.117.0; custom agents as
         // ~/.codex/agents/*.toml (name, description, developer_instructions).
-        capabilities: { hooks: { since: '0.116.0' }, mcp: true, mcpHttp: true, mcpHeaders: false, allowlist: { since: '0.138.0' }, skills: true, commands: { until: '0.117.0' }, plugins: { since: '0.128.0' }, subagents: { since: '0.117.0' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: true, modes: ['plan', 'edit', 'skip'] },
+        capabilities: { hooks: { since: '0.116.0' }, mcp: true, mcpHttp: true, mcpHeaders: false, allowlist: { since: '0.138.0' }, skills: true, commands: { until: '0.117.0' }, plugins: { since: '0.128.0' }, subagents: { since: '0.117.0' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: true, modes: ['plan', 'edit', 'skip'], interactiveRepl: true },
     },
     gemini: {
         id: 'gemini',
@@ -269,7 +269,7 @@ export const AGENTS = {
         },
         // gemini hooks: shipped in v0.26.0 (Jan 2026); older binaries silently ignore the `hooks` key.
         // extensions: gemini-extension.json bundles shipped in v0.8.0; custom subagents in v0.36.0.
-        capabilities: { hooks: { since: '0.26.0' }, mcp: true, mcpHttp: true, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: { since: '0.8.0' }, subagents: { since: '0.36.0' }, rules: { file: 'GEMINI.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'skip'], rulesImports: true },
+        capabilities: { hooks: { since: '0.26.0' }, mcp: true, mcpHttp: true, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: { since: '0.8.0' }, subagents: { since: '0.36.0' }, rules: { file: 'GEMINI.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'skip'], rulesImports: true, interactiveRepl: false },
     },
     cursor: {
         id: 'cursor',
@@ -302,7 +302,9 @@ export const AGENTS = {
         // + warns for pre-2.4 installs); the direct `subagents add --agents cursor` path
         // writes unconditionally, same as the other since-gated agents.
         // See transformSubagentForCursor / https://cursor.com/docs/subagents.
-        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '2026.1.22' }, rules: { file: '.cursorrules' }, workflows: false, memory: false, modes: ['edit', 'skip'] }, // allowlist: ~/.cursor/cli-config.json
+        // interactiveRepl: false — cursor-agent exits immediately with no argv. It requires a
+        // prompt to do anything useful; a bare invocation is not a REPL (RUSH-2185, EXEC-23a).
+        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '2026.1.22' }, rules: { file: '.cursorrules' }, workflows: false, memory: false, modes: ['edit', 'skip'], interactiveRepl: false }, // allowlist: ~/.cursor/cli-config.json
     },
     opencode: {
         id: 'opencode',
@@ -324,7 +326,45 @@ export const AGENTS = {
         format: 'markdown',
         variableSyntax: '$ARGUMENTS',
         supportsHooks: true,
-        capabilities: { hooks: { since: '0.3.130' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: { since: '1.1.1' }, skills: true, commands: true, plugins: true, subagents: true, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit'] },
+        capabilities: { hooks: { since: '0.3.130' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: { since: '1.1.1' }, skills: true, commands: true, plugins: true, subagents: true, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit'], interactiveRepl: true },
+    },
+    // Oh My Pi (`omp`, omp.sh) — a Bun-based, terminal-first coding agent that runs
+    // against many model providers (OpenRouter, OpenAI, Anthropic, xAI, DeepSeek,
+    // Ollama, LM Studio, …). It is Claude-compatible: it natively discovers
+    // `.claude/commands`, `.mcp.json`, and Claude-shaped subagents, and keeps its
+    // own native resources under `~/.omp/agent/` (config dir reported by
+    // `omp config path`). configDir points AT the agent dir (not `~/.omp`) so the
+    // rules file lands at `~/.omp/agent/AGENTS.md`, the user context file omp reads.
+    pi: {
+        id: 'pi',
+        name: 'Pi',
+        color: 'magenta',
+        cliCommand: 'omp',
+        npmPackage: '@oh-my-pi/pi-coding-agent',
+        configDir: path.join(HOME, '.omp', 'agent'),
+        commandsDir: path.join(HOME, '.omp', 'agent', 'commands'),
+        commandsSubdir: 'commands',
+        skillsDir: path.join(HOME, '.omp', 'agent', 'skills'),
+        hooksDir: 'hooks',
+        instructionsFile: 'AGENTS.md',
+        format: 'markdown',
+        variableSyntax: '$ARGUMENTS',
+        // omp hooks are per-tool JS/TS extension modules discovered from
+        // `~/.omp/agent/hooks/{pre,post}/<tool>.<ext>` (loaded as HookFactory code),
+        // NOT the event->shell-command registrations agents-cli's hook sync writes.
+        // The two models don't map, so hooks stay off (capabilities.hooks:false).
+        supportsHooks: false,
+        // MCP: omp reads `.mcp.json` with the Claude `{ "mcpServers": {...} }` schema
+        // at user scope (`~/.omp/agent/.mcp.json`) and project scope (`<root>/.mcp.json`),
+        // stdio + http + sse with headers. skills (`~/.omp/agent/skills/<name>/SKILL.md`),
+        // commands (`~/.omp/agent/commands/*.md`), and subagents (`~/.omp/agent/agents/*.md`,
+        // Claude-shaped) are all native. allowlist is OFF: omp gates approval per-TOOL
+        // only (`tools.approval` record: allow|prompt|deny) with no command/path/domain
+        // patterns, so agents-cli's granular permission format has nothing to map to.
+        // plugins are npm packages / TS modules, not the Claude marketplace manifest.
+        // interactiveRepl: true — bare `omp` runs the TUI; `omp -p` is the one-shot
+        // form that answers a prompt and exits (upstream README, "Four entry points").
+        capabilities: { hooks: false, mcp: true, mcpHttp: true, mcpHeaders: true, allowlist: false, skills: true, commands: true, plugins: false, subagents: true, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'skip'], interactiveRepl: true },
     },
     openclaw: {
         id: 'openclaw',
@@ -348,7 +388,7 @@ export const AGENTS = {
         // OpenClaw is self-updating (no pinned since), so `true` is correct.
         // Workflows sync as Lobster `.lobster` files under `.openclaw/workflows/`;
         // the Lobster tool runs them by receiving the file path as `pipeline`.
-        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: false, plugins: true, subagents: true, rules: { file: 'workspace/AGENTS.md' }, workflows: true, memory: true, modes: ['plan', 'edit', 'skip'] },
+        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: false, plugins: true, subagents: true, rules: { file: 'workspace/AGENTS.md' }, workflows: true, memory: true, modes: ['plan', 'edit', 'skip'], interactiveRepl: true },
     },
     copilot: {
         id: 'copilot',
@@ -373,7 +413,9 @@ export const AGENTS = {
         format: 'markdown',
         variableSyntax: '$ARGUMENTS',
         supportsHooks: true,
-        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '0.0.353' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'auto', 'skip'] },
+        // interactiveRepl: false — copilot requires a prompt for meaningful work; bare invocation
+        // opens a welcome screen but not a persistent coding REPL suitable for agents focus.
+        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '0.0.353' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'auto', 'skip'], interactiveRepl: false },
     },
     amp: {
         id: 'amp',
@@ -390,7 +432,8 @@ export const AGENTS = {
         format: 'markdown',
         variableSyntax: '$ARGUMENTS',
         supportsHooks: false,
-        capabilities: { hooks: false, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: false, skills: true, commands: true, plugins: false, subagents: false, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit'] },
+        // interactiveRepl: false — amp requires a prompt; bare invocation exits immediately.
+        capabilities: { hooks: false, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: false, skills: true, commands: true, plugins: false, subagents: false, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit'], interactiveRepl: false },
     },
     kiro: {
         id: 'kiro',
@@ -413,7 +456,9 @@ export const AGENTS = {
         format: 'markdown',
         variableSyntax: '$ARGUMENTS',
         supportsHooks: true,
-        capabilities: { hooks: { since: '0.10.0' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: { since: '2.8.0' }, skills: true, commands: true, plugins: false, subagents: { since: '1.23.0' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['edit'] },
+        // interactiveRepl: false — kiro-cli requires a prompt for coding sessions; bare
+        // invocation does not open a persistent REPL.
+        capabilities: { hooks: { since: '0.10.0' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: { since: '2.8.0' }, skills: true, commands: true, plugins: false, subagents: { since: '1.23.0' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['edit'], interactiveRepl: false },
     },
     goose: {
         id: 'goose',
@@ -445,7 +490,7 @@ export const AGENTS = {
         // under `slash_commands: [{ command, recipe_path }]` (see goose-commands.ts).
         // Subagents: recipe YAML named agents under ~/.config/goose/agents/<name>.yaml
         // (goose auto-discovers and delegates to them by name in autonomous mode).
-        capabilities: { hooks: { since: '1.34.0' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: { since: '1.25.0' }, commands: true, plugins: true, subagents: true, rules: { file: 'AGENTS.md' }, workflows: true, memory: false, modes: ['edit'] },
+        capabilities: { hooks: { since: '1.34.0' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: { since: '1.25.0' }, commands: true, plugins: true, subagents: true, rules: { file: 'AGENTS.md' }, workflows: true, memory: false, modes: ['edit'], interactiveRepl: true },
     },
     // Google Antigravity CLI (`agy`) — official replacement for Gemini CLI as of IO 2026.
     // configDir nests inside `~/.gemini/` since agy shares the parent dir with the Gemini
@@ -474,7 +519,7 @@ export const AGENTS = {
         variableSyntax: '{{args}}',
         supportsHooks: true,
         cloudProvider: 'antigravity',
-        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '1.0.16' }, rules: { file: 'AGENTS.md' }, workflows: { since: '1.0.6' }, memory: false, modes: ['edit', 'skip'], rulesImports: false }, // workflows: markdown files in the shared, HOME-global ~/.gemini/config/global_workflows/ (agy scans it at startup; not version-isolated — see workflows.ts), invoked as /<name> slash commands
+        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '1.0.16' }, rules: { file: 'AGENTS.md' }, workflows: { since: '1.0.6' }, memory: false, modes: ['edit', 'skip'], rulesImports: false, interactiveRepl: true }, // workflows: markdown files in the shared, HOME-global ~/.gemini/config/global_workflows/ (agy scans it at startup; not version-isolated — see workflows.ts), invoked as /<name> slash commands
     },
     // xAI Grok Build CLI (`grok`) — early beta, SuperGrok Heavy. Auth via OAuth on
     // first launch, or XAI_API_KEY env var for headless. MCP servers configured inline
@@ -525,6 +570,7 @@ export const AGENTS = {
             // to auto (→ edit via resolveMode). Interactive plan is unaffected.
             headlessPlan: false,
             rulesImports: true,
+            interactiveRepl: true,
         },
     },
     // Kimi Code CLI (`kimi`) — Moonshot AI coding agent.
@@ -568,6 +614,7 @@ export const AGENTS = {
             // auto-runs). Interactive plan is unaffected.
             headlessPlan: false,
             rulesImports: false,
+            interactiveRepl: true,
         },
     },
     // Factory AI Droid CLI (`droid`) — agentic coding CLI from factory.ai.
@@ -649,6 +696,7 @@ export const AGENTS = {
             memory: false,
             modes: ['plan', 'edit', 'auto', 'skip'],
             rulesImports: false,
+            interactiveRepl: true,
         },
     },
     // Nous Hermes Agent. Config lives under ~/.hermes/config.yaml; MCP servers
@@ -698,6 +746,7 @@ export const AGENTS = {
             memory: true,
             modes: ['edit'],
             rulesImports: false,
+            interactiveRepl: true,
         },
     },
 };
@@ -2350,6 +2399,9 @@ export function getUserMcpConfigPath(agentId) {
             return path.join(agent.configDir, 'mcp.json');
         case 'hermes':
             return path.join(agent.configDir, 'config.yaml');
+        case 'pi':
+            // omp reads user-scope MCP from ~/.omp/agent/.mcp.json (Claude schema).
+            return path.join(agent.configDir, '.mcp.json');
         default:
             // Gemini and others use settings.json
             return path.join(agent.configDir, 'settings.json');
@@ -2386,6 +2438,8 @@ export function getMcpConfigPathForHome(agentId, home) {
             return path.join(home, '.factory', 'mcp.json');
         case 'hermes':
             return path.join(home, '.hermes', 'config.yaml');
+        case 'pi':
+            return path.join(home, '.omp', 'agent', '.mcp.json');
         default:
             return path.join(home, agentConfigDirName(agentId), 'settings.json');
     }
@@ -2425,6 +2479,9 @@ export function getProjectMcpConfigPath(agentId, cwd = process.cwd()) {
             return path.join(cwd, '.factory', 'mcp.json');
         case 'hermes':
             return path.join(cwd, '.hermes', 'config.yaml');
+        case 'pi':
+            // omp reads project MCP from <root>/.mcp.json (Claude-compatible).
+            return path.join(cwd, '.mcp.json');
         default:
             return path.join(cwd, `.${agentId}`, 'settings.json');
     }

package/dist/lib/analytics/recipes.js

@@ -92,13 +92,19 @@ export function recipeToolsPerSession(win) {
     if (!db)
         return { id, title, store: 'sessions', rows: [], empty: true };
     try {
-        const cols = db.prepare(`PRAGMA table_info(sessions)`).all();
-        if (!cols.some((c) => c.name === 'tool_call_count')) {
+        // Counts come from tool_scan_ledger — one row per session the tool indexer
+        // has scanned, carrying that session's true call_count (0 included). The
+        // sessions.tool_call_count column is NOT the source: only the teams
+        // summarizer ever writes it (lib/teams/summarizer.ts), so reading it scored
+        // every non-teams session as 0 and pinned p50 at 0 fleet-wide.
+        const tables = db.prepare(`SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'tool_scan_ledger'`).all();
+        if (tables.length === 0) {
             return { id, title, store: 'sessions', rows: [], empty: true };
         }
-        const byAgent = db.prepare(`SELECT agent, tool_call_count AS n
-         FROM sessions
-        WHERE timestamp >= ? AND tool_call_count IS NOT NULL`).all(win.sinceIso);
+        const byAgent = db.prepare(`SELECT s.agent AS agent, l.call_count AS n
+         FROM tool_scan_ledger l
+         JOIN sessions s ON s.id = l.session_id
+        WHERE s.timestamp >= ?`).all(win.sinceIso);
         if (byAgent.length === 0)
             return { id, title, store: 'sessions', rows: [], empty: true };
         const groups = new Map();

package/dist/lib/browser/profiles.d.ts

@@ -30,13 +30,21 @@ export declare function getProfile(name: string): Promise<BrowserProfile | null>
  * Resolve the profile `agents browser start` uses when no `--profile` is given.
  *
  * Order: (1) the device-local configured default (`agents browser profiles
- * set-default <name>`) when it names an existing profile; (2) an existing
- * `default` profile as-is; (3) auto-pick the first installed Chromium-family
- * browser per the platform priority list in chrome.ts (macOS: chrome > brave >
- * edge > chromium > comet; Linux: chrome > chromium > brave > edge; Windows:
- * edge > chrome > brave > comet) and pin a new `default` profile to it. Throws an
- * actionable error if none of those binaries are installed. A configured default
- * that no longer exists warns and falls through to (2)/(3) — never a hard fail.
+ * set-default <name>`) when it names an existing profile that can launch here;
+ * (2) an existing `default` profile that can launch here; (3) auto-pick the
+ * first installed Chromium-family browser per the platform priority list in
+ * chrome.ts (macOS: chrome > brave > edge > chromium > comet; Linux: chrome >
+ * chromium > brave > edge; Windows: edge > chrome > brave > comet) and pin a
+ * `default` profile to it. Throws an actionable error if none of those binaries
+ * are installed.
+ *
+ * "Can launch here" matters because `agents.yaml` syncs across the fleet: a
+ * `default` auto-created on macOS carries a `/Applications/...` binary path that
+ * doesn't exist on a Linux box. Rather than hand that broken profile back (the
+ * top browser roadblock — "Custom binary not found"), we re-detect and
+ * regenerate the `default` for this machine. A configured or existing default
+ * that no longer exists, or can't launch here, warns and falls through — never a
+ * hard fail.
  */
 export declare function ensureDefaultBrowserProfile(): Promise<BrowserProfile>;
 /**

package/dist/lib/browser/profiles.js

@@ -95,29 +95,63 @@ export async function getProfile(name) {
         return null;
     return configToProfile(name, config);
 }
+/**
+ * True when `profile` can actually launch or attach on THIS machine.
+ *
+ * A remote (`ssh://`) profile runs its browser on the far host, so a local
+ * binary check doesn't apply — assume launchable. A local profile must have its
+ * configured browser/binary present on disk here; a `default` profile
+ * auto-created on a different OS (e.g. a macOS Chrome path reused on Linux — the
+ * "Custom binary not found" failure) fails this check so the caller re-detects
+ * for the current machine.
+ */
+function isProfileLaunchableHere(profile) {
+    const remote = Object.values(getEndpointPresets(profile)).some((preset) => preset.target.startsWith('ssh://'));
+    if (remote)
+        return true;
+    try {
+        findBrowserPath(profile.browser, profile.binary);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Resolve the profile `agents browser start` uses when no `--profile` is given.
  *
  * Order: (1) the device-local configured default (`agents browser profiles
- * set-default <name>`) when it names an existing profile; (2) an existing
- * `default` profile as-is; (3) auto-pick the first installed Chromium-family
- * browser per the platform priority list in chrome.ts (macOS: chrome > brave >
- * edge > chromium > comet; Linux: chrome > chromium > brave > edge; Windows:
- * edge > chrome > brave > comet) and pin a new `default` profile to it. Throws an
- * actionable error if none of those binaries are installed. A configured default
- * that no longer exists warns and falls through to (2)/(3) — never a hard fail.
+ * set-default <name>`) when it names an existing profile that can launch here;
+ * (2) an existing `default` profile that can launch here; (3) auto-pick the
+ * first installed Chromium-family browser per the platform priority list in
+ * chrome.ts (macOS: chrome > brave > edge > chromium > comet; Linux: chrome >
+ * chromium > brave > edge; Windows: edge > chrome > brave > comet) and pin a
+ * `default` profile to it. Throws an actionable error if none of those binaries
+ * are installed.
+ *
+ * "Can launch here" matters because `agents.yaml` syncs across the fleet: a
+ * `default` auto-created on macOS carries a `/Applications/...` binary path that
+ * doesn't exist on a Linux box. Rather than hand that broken profile back (the
+ * top browser roadblock — "Custom binary not found"), we re-detect and
+ * regenerate the `default` for this machine. A configured or existing default
+ * that no longer exists, or can't launch here, warns and falls through — never a
+ * hard fail.
  */
 export async function ensureDefaultBrowserProfile() {
     const configured = getConfiguredDefaultProfileName();
     if (configured) {
         const chosen = await getProfile(configured);
-        if (chosen)
+        if (chosen && isProfileLaunchableHere(chosen))
             return chosen;
-        console.warn(`warning: configured default browser profile "${configured}" no longer exists; ` +
-            `falling back to auto-detect. Fix with: agents browser profiles set-default <name>  (or --unset)`);
+        console.warn(chosen
+            ? `warning: configured default browser profile "${configured}" can't launch on this ` +
+                `machine (its browser/binary isn't installed here); falling back to auto-detect. ` +
+                `Fix with: agents browser profiles set-default <name>  (or --unset)`
+            : `warning: configured default browser profile "${configured}" no longer exists; ` +
+                `falling back to auto-detect. Fix with: agents browser profiles set-default <name>  (or --unset)`);
     }
     const existing = await getProfile(DEFAULT_BROWSER_PROFILE_NAME);
-    if (existing)
+    if (existing && isProfileLaunchableHere(existing))
         return existing;
     const detected = findFirstInstalledBrowser();
     if (!detected) {
@@ -139,7 +173,14 @@ export async function ensureDefaultBrowserProfile() {
             height: DEFAULT_VIEWPORT.height,
         },
     };
-    await createProfile(profile);
+    // A stale `default` (auto-created on another OS, unlaunchable here) is
+    // regenerated in place; otherwise this is the first-run create.
+    if (existing) {
+        await updateProfile(profile);
+    }
+    else {
+        await createProfile(profile);
+    }
     return profile;
 }
 /**

package/dist/lib/byok-usage.d.ts

@@ -0,0 +1,38 @@
+/**
+ * BYOK (Bring Your Own Key) budget fetcher.
+ *
+ * For custom harnesses that use a provider's API key stored in the keychain
+ * (e.g. OpenRouter), this module fetches the account's credit/usage data so
+ * `agents view` can show a budget bar alongside the harness detail row — the
+ * same bar style the native usage system uses, just sourced from the provider
+ * API rather than the CLI's own usage tracking.
+ */
+import type { Profile } from './profiles.js';
+export interface ByokBudgetInfo {
+    limitUsd: number | null;
+    remainingUsd: number | null;
+    usedUsd: number;
+    usedPercent: number | null;
+    fetchedAt: Date;
+}
+export interface ByokUsageResult {
+    budget: ByokBudgetInfo | null;
+    error: string | null;
+}
+export declare function setByokFetchForTest(fn: typeof globalThis.fetch): void;
+export declare function resetByokCacheForTest(): void;
+export declare function hasByokProvider(provider: string): boolean;
+export declare function renderByokBar(result: ByokUsageResult): string;
+/**
+ * Fetch the BYOK budget for a harness.
+ *
+ * Returns `null` when the harness has no registered BYOK provider or no auth.
+ * Returns a `ByokUsageResult` with `budget: null` when the token is absent
+ * from the keychain (so the caller can skip rendering a bar without error).
+ *
+ * Results are SWR-cached per `keychainItem` so harnesses sharing one API key
+ * deduplicate to a single network request.
+ */
+export declare function getByokUsageForHarness(profile: Profile, opts?: {
+    forceRefresh?: boolean;
+}): Promise<ByokUsageResult | null>;

package/dist/lib/byok-usage.js

@@ -0,0 +1,117 @@
+/**
+ * BYOK (Bring Your Own Key) budget fetcher.
+ *
+ * For custom harnesses that use a provider's API key stored in the keychain
+ * (e.g. OpenRouter), this module fetches the account's credit/usage data so
+ * `agents view` can show a budget bar alongside the harness detail row — the
+ * same bar style the native usage system uses, just sourced from the provider
+ * API rather than the CLI's own usage tracking.
+ */
+import { hasKeychainToken, getKeychainToken } from './secrets/profiles.js';
+import { renderBar, getUsageColor, USAGE_CACHE_FRESH_MS, USAGE_CACHE_SWR_MS } from './usage.js';
+// ─── Injectable fetch seam (tests only) ──────────────────────────────────────
+let _fetch = globalThis.fetch;
+export function setByokFetchForTest(fn) {
+    _fetch = fn;
+}
+const _cache = new Map();
+export function resetByokCacheForTest() {
+    _cache.clear();
+}
+async function fetchOpenRouter(keychainItem) {
+    try {
+        if (!hasKeychainToken(keychainItem))
+            return { budget: null, error: null };
+    }
+    catch {
+        return { budget: null, error: null };
+    }
+    let token;
+    try {
+        token = getKeychainToken(keychainItem);
+    }
+    catch {
+        return { budget: null, error: null };
+    }
+    try {
+        const res = await _fetch('https://openrouter.ai/api/v1/key', {
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        if (!res.ok)
+            return { budget: null, error: `HTTP ${res.status}` };
+        const json = (await res.json());
+        const { limit, limit_remaining, usage } = json.data;
+        const limitUsd = limit ?? null;
+        const usedUsd = usage;
+        const usedPercent = limitUsd !== null && limitUsd > 0 ? (usedUsd / limitUsd) * 100 : null;
+        return {
+            budget: {
+                limitUsd,
+                remainingUsd: limit_remaining ?? null,
+                usedUsd,
+                usedPercent,
+                fetchedAt: new Date(),
+            },
+            error: null,
+        };
+    }
+    catch (err) {
+        return { budget: null, error: String(err) };
+    }
+}
+const BYOK_REGISTRY = {
+    openrouter: { fetch: fetchOpenRouter },
+};
+export function hasByokProvider(provider) {
+    return Object.prototype.hasOwnProperty.call(BYOK_REGISTRY, provider);
+}
+// ─── Bar renderer ─────────────────────────────────────────────────────────────
+export function renderByokBar(result) {
+    if (!result.budget)
+        return '';
+    const { budget } = result;
+    if (budget.limitUsd === null) {
+        const bar = renderBar(0, 10, 0);
+        return `$: ${bar} $${budget.usedUsd.toFixed(2)} used (unlimited)`;
+    }
+    const pct = budget.usedPercent ?? 0;
+    const bar = renderBar(pct, 10, pct > 0 ? 1 : 0);
+    const color = getUsageColor(pct);
+    const remaining = budget.remainingUsd !== null ? `$${budget.remainingUsd.toFixed(2)}` : '?';
+    const limit = `$${budget.limitUsd.toFixed(2)}`;
+    return `$: ${bar} ${color(`${Math.round(pct)}%`)} (${remaining} left of ${limit})`;
+}
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Fetch the BYOK budget for a harness.
+ *
+ * Returns `null` when the harness has no registered BYOK provider or no auth.
+ * Returns a `ByokUsageResult` with `budget: null` when the token is absent
+ * from the keychain (so the caller can skip rendering a bar without error).
+ *
+ * Results are SWR-cached per `keychainItem` so harnesses sharing one API key
+ * deduplicate to a single network request.
+ */
+export async function getByokUsageForHarness(profile, opts) {
+    if (!profile.provider || !hasByokProvider(profile.provider) || !profile.auth)
+        return null;
+    const keychainItem = profile.auth.keychainItem;
+    const provider = BYOK_REGISTRY[profile.provider];
+    const now = Date.now();
+    const cached = _cache.get(keychainItem);
+    if (!opts?.forceRefresh && cached) {
+        const age = now - cached.fetchedAt;
+        if (age < USAGE_CACHE_FRESH_MS) {
+            return cached.result;
+        }
+        if (age < USAGE_CACHE_SWR_MS) {
+            void provider.fetch(keychainItem).then((result) => {
+                _cache.set(keychainItem, { result, fetchedAt: Date.now() });
+            });
+            return cached.result;
+        }
+    }
+    const result = await provider.fetch(keychainItem);
+    _cache.set(keychainItem, { result, fetchedAt: now });
+    return result;
+}

package/dist/lib/capabilities.js

@@ -54,7 +54,7 @@ export function supports(agent, cap, version) {
     const c = getCapability(agent, cap);
     if (c === false)
         return { ok: false, reason: 'unsupported' };
-    if (c === true)
+    if (c === true || c === undefined)
         return { ok: true };
     if ('file' in c)
         return { ok: true };

package/dist/lib/exec.d.ts

@@ -308,6 +308,26 @@ export declare function resolveShimSpawn(platform: NodeJS.Platform, binary: stri
  * keeping version resolution in one place instead of reimplementing it in batch.
  */
 export declare function execShimPassthrough(agent: AgentId, rawArgs: string[], cwd: string, pinnedVersion?: string): Promise<number>;
+/**
+ * Whether a dead pane's failure should be recapped to stderr (RUSH-2185 / EXEC-23a).
+ *
+ * For headless runs only a nonzero exit is a failure worth surfacing — a
+ * clean 0 means the agent finished the task before we could attach.
+ * For interactive runs ANY exit (including 0) is a failure: an instant clean
+ * exit means the harness has no bare REPL and the user would see only a mute
+ * `[detached]` with no explanation.
+ */
+export declare function shouldRecapDeadPane(status: number | undefined, interactive: boolean): boolean;
+/**
+ * True only when a `display-message #{pane_dead}` tmux query explicitly returned
+ * "0" (pane alive). Used to distinguish "pane alive" from "query failed" in
+ * situations where `paneExitStatus` conservatively returns `{dead: false}` for
+ * both (RUSH-2185 / EXEC-23a / F3).
+ *
+ * @param code   The exit code of the `tmux display-message` command.
+ * @param stdout Its stdout (expected to be "0" when the pane is alive).
+ */
+export declare function isPaneKnownAliveFromQueryResult(code: number, stdout: string): boolean;
 /** Inputs that decide whether an interactive spawn is wrapped in a shared-socket tmux session. */
 export interface TmuxWrapContext {
     /** resolveInteractive() result — only interactive REPL launches are wrapped. */